last executing test programs: 6.461757392s ago: executing program 0 (id=3526): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r0, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10) sendmmsg(r0, &(0x7f0000001380), 0x0, 0xc014) getsockopt$llc_int(r0, 0x10c, 0x1, &(0x7f0000000140), &(0x7f0000000080)=0x4) 5.37650378s ago: executing program 0 (id=3530): r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)={@fallback=r2, r2, 0x2f}, 0x20) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000003c0)={@cgroup=r2, r2, 0x2f, 0x2010, 0x4, @value=r1}, 0x20) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000100)=0x40a8, 0x4) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r3}, 0x18) setsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, &(0x7f0000000200)=0x1, 0x4) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000400)={'vcan0\x00', 0x0}) sendmsg$can_j1939(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {0x0, 0x1}}, 0x18, &(0x7f0000000180)={&(0x7f0000000280)="4dfb0cf0d556f1327d", 0x9}}, 0xee) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x111, 0x70bd27, 0x100000, {0x0, 0x0, 0x74, r5, {0x6, 0xc}, {0x5, 0x10}, {0xd, 0x3}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4010}, 0xc4) 2.799122427s ago: executing program 1 (id=3535): r0 = socket(0x10, 0x2, 0x0) ioctl$sock_SIOCDELDLCI(r0, 0x8981, &(0x7f0000000000)={'veth0\x00', 0x1e}) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) bind$netlink(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x44, 0x2c, 0xf3f, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xb, 0xfff3}, {0x7, 0xfff3}, {0xb, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x14, 0x2, [@TCA_BASIC_EMATCHES={0x10, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_LIST={0x4}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000001100000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a03000000000000000000050000000900010073797a30000000000900030073797a300000000008000c40000000032800048008000240000000120800014000000000140004"], 0xa4}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vxcan1\x00'}) mmap(&(0x7f0000866000/0x3000)=nil, 0x3000, 0x1000000, 0x4000010, 0xffffffffffffffff, 0xfc3f3000) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x63, 0x11, 0xa4}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x8}, @exit={0x95, 0x0, 0xa00}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x9, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x6}, 0x70) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(r2, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl1\x00', 0x0, 0xddb97db32716e477, 0x2, 0xf, 0x0, 0x68, @remote, @mcast2={0xff, 0x5}, 0x8, 0x20, 0xe3dd, 0x4}}) socket(0x10, 0x2, 0x0) (async) ioctl$sock_SIOCDELDLCI(r0, 0x8981, &(0x7f0000000000)={'veth0\x00', 0x1e}) (async) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) (async) bind$netlink(0xffffffffffffffff, 0x0, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x44, 0x2c, 0xf3f, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xb, 0xfff3}, {0x7, 0xfff3}, {0xb, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x14, 0x2, [@TCA_BASIC_EMATCHES={0x10, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_LIST={0x4}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000001100000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a03000000000000000000050000000900010073797a30000000000900030073797a300000000008000c40000000032800048008000240000000120800014000000000140004"], 0xa4}}, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vxcan1\x00'}) (async) mmap(&(0x7f0000866000/0x3000)=nil, 0x3000, 0x1000000, 0x4000010, 0xffffffffffffffff, 0xfc3f3000) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x63, 0x11, 0xa4}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x8}, @exit={0x95, 0x0, 0xa00}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x9, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x6}, 0x70) (async) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) (async) write$cgroup_int(r2, 0x0, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000080)={'syztnl1\x00', 0x0, 0xddb97db32716e477, 0x2, 0xf, 0x0, 0x68, @remote, @mcast2={0xff, 0x5}, 0x8, 0x20, 0xe3dd, 0x4}}) (async) 2.625403509s ago: executing program 0 (id=3536): r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYRESHEX=r0], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) (async) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) r2 = socket$kcm(0x29, 0x2, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000002c0)={'gre0\x00', &(0x7f0000000280)={'erspan0\x00', 0x0, 0x7, 0x20, 0x3, 0xfffff076, {{0x6, 0x4, 0x2, 0x8, 0x18, 0x67, 0x0, 0x1, 0x4, 0x0, @multicast2, @rand_addr=0x64010101, {[@ra={0x94, 0x4}]}}}}}) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000340)={r4, 0x1, 0x6, @multicast}, 0x10) (async) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000340)={r4, 0x1, 0x6, @multicast}, 0x10) write$cgroup_pressure(r2, &(0x7f0000000140)={'full'}, 0xfffffdef) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000000)=0x7, 0x4) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) socket$alg(0x26, 0x5, 0x0) (async) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000380)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) (async) bind$alg(r6, &(0x7f0000000380)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) r7 = accept4(r6, 0x0, 0x0, 0x800) recvmmsg$unix(r7, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}, 0x4000}], 0x600, 0x0, 0x0) ioctl$TUNSETLINK(r5, 0x400454cd, 0x10f) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)=ANY=[@ANYBLOB="0900000000000000d53358ed55fdfeb00fc4117f993de59e9ce7d702b034724fc5465c826b174f26d58833c709000000d92708034c209054a87318fdff86f2757e9be14f3a5128e675c2f03a1e757568da8a318010614562d5b437688c2c434d5cab62b1e94a06d4cef8ee", @ANYRES32=0x0, @ANYBLOB="00000000000000001400030073797a6b616c6c65723000000000000008001c00", @ANYRES32=0xc9, @ANYBLOB], 0x3c}}, 0x0) (async) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)=ANY=[@ANYBLOB="0900000000000000d53358ed55fdfeb00fc4117f993de59e9ce7d702b034724fc5465c826b174f26d58833c709000000d92708034c209054a87318fdff86f2757e9be14f3a5128e675c2f03a1e757568da8a318010614562d5b437688c2c434d5cab62b1e94a06d4cef8ee", @ANYRES32=0x0, @ANYBLOB="00000000000000001400030073797a6b616c6c65723000000000000008001c00", @ANYRES32=0xc9, @ANYBLOB], 0x3c}}, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) (async) r9 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r9, 0x8914, &(0x7f0000000400)={'syzkaller0\x00', 0x1}) write$tun(r5, &(0x7f0000000540)=ANY=[@ANYBLOB="000008050000000000000000644b8fed00462f00ff020000000000000000000000000001fc0100000000000000000000000000000420880b00000000080008000c0086dd0009080088be00000001100098800100000000000002080022eb000000032609200202000000000000180800655800000001"], 0x7a) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet_udp(0x2, 0x2, 0x0) (async) socket$inet_udp(0x2, 0x2, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) (async) socket$pppl2tp(0x18, 0x1, 0x1) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_tcp(0xa, 0x1, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="d2f0a2f20d8eb9e9000500000000000000"], 0x48) socket$nl_route(0x10, 0x3, 0x0) 2.55399611s ago: executing program 3 (id=3537): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="6000000002060103be8c1cb2000000000000fffd0900020073797a3000000000050001000600000005000500020000000500040000000000140007800800114000000010080012400000ed1b13000300686173683a6e65742c696661636500"], 0x60}}, 0x4840) r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$llc_int(r1, 0x10c, 0x6, &(0x7f0000000040), 0x4) ioctl$XFS_IOC_FD_TO_HANDLE(r0, 0xc038586a, &(0x7f0000000140)={r0, &(0x7f0000000040)='&!*^:)$+.\x00', 0xa00, &(0x7f0000000080)={@align=0x6, {0x0, 0x9, 0x0, 0x8}}, 0x0, &(0x7f00000000c0), &(0x7f0000000100)}) sendmsg$nl_route(r2, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)=@newlinkprop={0x34, 0x6c, 0x200, 0x3, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x10488, 0x40008}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'veth0_to_batadv\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x44000}, 0x4000000) 2.491624937s ago: executing program 1 (id=3538): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000007c0)=@bpf_lsm={0x18, 0x0, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x8, 0x0, 0x0, 0x40f00, 0x2c, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$kcm(0x23, 0x5, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) setsockopt$sock_int(r0, 0x1, 0x4, &(0x7f0000000240)=0x2009, 0x4) listen(r1, 0x800) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000380)={0x1d, 0x0, 0x2, {0x2, 0x0, 0x2}}, 0x18) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r4) write$tun(r2, &(0x7f0000000380)=ANY=[@ANYBLOB="1c0000f500000000000000862dfdff"], 0x78) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYRES32=r2, @ANYRES32=0x0], 0x58}}, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000000)={r0, 0x1, 0x7bca, 0x5}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000013c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000c0}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$packet(0x11, 0x2, 0x300) pselect6(0x40, &(0x7f0000000280)={0x6, 0x3, 0x7, 0xffff, 0x8, 0x2cb, 0xeea, 0x3}, &(0x7f0000000300)={0x8, 0xf, 0x97d, 0x100, 0x6, 0x3, 0x2, 0x8}, 0x0, &(0x7f0000000880), &(0x7f0000000900)={&(0x7f00000008c0)={[0x52e]}, 0x8}) setsockopt$packet_int(r6, 0x107, 0xe, &(0x7f0000000000)=0x9, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), r5) sendmsg$NL80211_CMD_JOIN_IBSS(r5, 0x0, 0x80) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f0000002580)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc0}, 0x200cc086) 2.349681816s ago: executing program 3 (id=3540): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_REMOVE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x80, r1, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_TAGLST={0x34, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x1}, {0x5}, {0x5, 0x3, 0x1}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_MLSLVLLST={0x20, 0x8, 0x0, 0x1, [{0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe7}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x25eefb01}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd8}]}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x40000c4}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000300)={&(0x7f00000001c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWCHAIN={0xfc, 0x3, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x2}, [@NFTA_CHAIN_COUNTERS={0x1c, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x8000000000000001}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x7}]}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_TYPE={0xa, 0x7, 'route\x00'}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x5}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffd}, @NFTA_CHAIN_USERDATA={0x8c, 0xc, "678652b944714afc8265b08598cbbdefa94a9f223fecc8ec621c8261b3db1f388eac1e183fe5a96828c1aff79e9b2de822cfce5616e601769abe7c10f20044d3ad337063311e095f1a2d2626c62df3eb7bb5ccfb24057ff2a76373ec4a7dd0fbd163e13a072461c51d55bcc214cf5fb3f2354ef7d19953c6add9e7818d0a77190fd118bfa4a72458"}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x124}, 0x1, 0x0, 0x0, 0x40891}, 0x4) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000003c0), r0) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x34, r3, 0x100, 0x70bd26, 0x25dfdbfc, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_PROTOCOL={0x8}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast2}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @broadcast}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000005}, 0x4008480) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000500), r0) sendmsg$IEEE802154_LLSEC_LIST_KEY(r0, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x14, r4, 0x4, 0x70bd29, 0x25dfdbfb, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$NLBL_MGMT_C_LISTDEF(r0, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x7c, r3, 0x400, 0x70bd29, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @loopback}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x2}, @NLBL_MGMT_A_CLPDOI={0x8}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @ipv4={'\x00', '\xff\xff', @broadcast}}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast1}, @NLBL_MGMT_A_DOMAIN={0xf, 0x1, '$%)-()-+[P\x00'}, @NLBL_MGMT_A_DOMAIN={0xa, 0x1, '/#%&\x9c\x00'}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast2}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4041}, 0x8000) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r5, 0x29, 0x42, &(0x7f0000000740)=0xd, 0x4) pipe(&(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000800), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_DELETE(r6, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x4809004}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x1c, r8, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@L2TP_ATTR_LNS_MODE={0x5, 0x14, 0xf}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x4000000) sendmsg$nl_route_sched(r7, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)=@getqdisc={0x3c, 0x26, 0x2, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x10, 0xffe0}, {0x3, 0x3}, {0x9, 0xa}}, [{0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x84) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendto$inet(r6, &(0x7f0000000a00)="0eaeae05863d5039ca17cc70d84f52e0e8cda080c9f10b9d1c2ff4dc36ada31b00c65b001fafe6401e3ee8d3dd2d391123854dcc2bf2ae473aa18813abc0837a971ddc2fdcd311bd83f5b48d2be12505f490a2d5632486dbecb73805083f509cec6a204ee671bea218ce6df88b8a09f7ef36292e7e681746ebd048e771c6cad9a82fb725d54e4669fc77fc03b1535ac58d09e83f2e7a890297b69e75e6ea7e36c23ed47cc6c2d21afe6f047335e333b16fb9741baa5907c1afc12ab57296b20fb13bf5d3ca7c6a7ce6da9368ebbd35644b44ff3e5186acfaa9", 0xd9, 0x800, &(0x7f0000000b00)={0x2, 0x4e23, @empty}, 0x10) setsockopt$MRT_ADD_MFC(r6, 0x0, 0xcc, &(0x7f0000000b40)={@dev={0xac, 0x14, 0x14, 0xd}, @dev={0xac, 0x14, 0x14, 0x16}, 0x1, "0dd5262c50388e03641428a65f64875c136e712610218a73e2a79ff4116796f1", 0x4, 0x7, 0x0, 0x80}, 0x3c) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000bc0), r0) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r11, &(0x7f0000000cc0)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c00)={0x78, r12, 0x100, 0x70bd29, 0x25dfdbfe, {}, [@NL802154_ATTR_ACKREQ_DEFAULT={0x5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5, 0x1a, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x500000005}]}, 0x78}, 0x1, 0x0, 0x0, 0x14}, 0x4001) r13 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000d40), r10) sendmsg$TIPC_NL_SOCK_GET(r9, &(0x7f0000000e00)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d80)={0x24, r13, 0x4, 0x70bd2b, 0x25dfdbff, {}, [@TIPC_NLA_NET={0x4}, @TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xf}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20044000) r14 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCADDRT(r14, 0x890b, &(0x7f0000000e40)={0x0, @hci={0x1f, 0x0, 0x2}, @sco={0x1f, @none}, @tipc=@name={0x1e, 0x2, 0x2, {{0x42, 0x3}, 0x4}}, 0x8001, 0x0, 0x0, 0x0, 0xd, 0x0, 0x2, 0x2, 0x1}) r15 = syz_genetlink_get_family_id$nfc(&(0x7f0000000f00), r0) sendmsg$NFC_CMD_DEP_LINK_UP(r11, &(0x7f0000000fc0)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f40)={0x3c, r15, 0x300, 0x70bd26, 0x25dfdbfc, {}, [@NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0xffffffffffffffff}, @NFC_ATTR_COMM_MODE={0x5, 0xa, 0x1}, @NFC_ATTR_COMM_MODE={0x5}, @NFC_ATTR_COMM_MODE={0x5, 0xa, 0x1}, @NFC_ATTR_COMM_MODE={0x5, 0xa, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x800) recvmsg(r10, &(0x7f0000004640)={&(0x7f0000001000)=@ethernet={0x0, @link_local}, 0x80, &(0x7f0000003580)=[{&(0x7f0000001080)=""/204, 0xcc}, {&(0x7f0000001180)=""/251, 0xfb}, {&(0x7f0000001280)=""/99, 0x63}, {&(0x7f0000001300)=""/4096, 0x1000}, {&(0x7f0000002300)=""/143, 0x8f}, {&(0x7f00000023c0)=""/37, 0x25}, {&(0x7f0000002400)=""/4096, 0x1000}, {&(0x7f0000003400)=""/173, 0xad}, {&(0x7f00000034c0)=""/170, 0xaa}], 0x9, &(0x7f0000003640)=""/4096, 0x1000}, 0x120) 2.207582058s ago: executing program 4 (id=3541): openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000140), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000100000008000100030000002c0004801800030080ff00000500030080ff00000500030080ff0000050003000100000005000300800000000800020003"], 0x50}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async) r2 = socket$inet_smc(0x2b, 0x1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) socket$inet6(0xa, 0x800, 0x76) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000fc0)={0x16, 0x5, &(0x7f0000000240)=ANY=[@ANYBLOB="1802000003000000000000000000000085000000a0000000850000005000000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3}, 0x94) (async) r5 = socket$nl_rdma(0x10, 0x3, 0x14) (async) r6 = socket$inet(0x2, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x50, &(0x7f00000a2000)={0x0, 0x0}, 0x10) (async) r7 = bpf$MAP_CREATE(0x0, 0x0, 0x0) (async) socket(0x10, 0x80000, 0x5) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYRESDEC=r2, @ANYRES32, @ANYRESOCT=r4, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) (async) writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000340)="8a226ff432407a7f5fd09590d734f795e12e57ce9fed3f0300eb6368ed559a85603b0080", 0x24}], 0x2) (async) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x2000a0c0}, 0x6584f2c77c24db5) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0b0000001f00000002040000ff03000001"], 0x48) (async) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8b36, &(0x7f0000000000)={'wlan0\x00'}) (async) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) sendmsg$NFT_BATCH(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000018000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) (async) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000010401010400050100000100004b0000000000007cd80000"], 0x1c}, 0x1, 0x0, 0x0, 0x60044085}, 0x40004801) (async) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB="240000000104010200000180002000000100000008000540efffffff0500010001"], 0x24}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)={0x1c, 0x1, 0x4, 0x101, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFULA_CFG_CMD={0x5, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x31}, 0x20008888) (async) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x6c, r7, 0x0, 0x6c}, 0x38) 2.122634647s ago: executing program 0 (id=3542): r0 = socket(0x840000000002, 0x3, 0x100) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_INTERFACE(r4, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="2508007a0000000000030700000008000300", @ANYRES32=r3, @ANYBLOB="1400060064756d6d7930000000000000000000001400040076657468315f746f5f626f016400000005005300010000000800050004"], 0x54}}, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) close(0x3) sendmsg$nl_xfrm(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc0000001900010000000000fcdbdf2500000000000000000000000000000000fe8000000002000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000004000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000001000000000000004400050000000000000000000000000000000000000000022b0000000a000000fe8000000000000000000000000000aa0000000004"], 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r6, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) setsockopt$sock_int(r6, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r6, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r6, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x400000000000284, 0xf00) sendmmsg$inet(r0, &(0x7f0000005240), 0x4000095, 0x0) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r7, &(0x7f0000000240)={0x1f, 0x0, @none, 0x0, 0x1}, 0xe) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x248, 0x0, 0xe138, 0x198, 0x0, 0x198, 0x270, 0x358, 0x358, 0x270, 0x358, 0x3, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0x0, 'pimreg0\x00', 'veth0_to_bond\x00', {}, {}, 0x0, 0x0, 0x20}, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@inet=@tos={{0x28}, {0x6, 0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x3, 0x3078, 0x5, 'syz1\x00', {0x5}}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @local, 0xc, 0x6, [0x97f4, 0x15, 0x33, 0x29, 0x7, 0x3c, 0x4, 0x26, 0x9, 0xc, 0xf, 0x1d, 0x3e, 0x1e, 0x30], 0x0, 0x0, 0x3}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2a8) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r5, 0x6612) openat$cgroup_ro(r7, &(0x7f0000000140)='cgroup.controllers\x00', 0x0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f00000004c0)=0x40000004, 0xfffffe5b) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001140), 0x0, 0x40080) r8 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r8, &(0x7f0000000000)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x2327, @empty}}, 0x24) sendmsg(r8, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[{0x18, 0x110, 0x1, "03"}, {0x10, 0x110, 0xe}], 0x28}, 0x0) r9 = socket$rxrpc(0x21, 0x2, 0x2) sendmsg(r9, &(0x7f0000000700)={&(0x7f0000000300)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x2327, @loopback}}, 0x80, &(0x7f0000002740)=[{&(0x7f0000001640)="f3b6c793abbe562d87ab5a4361186984bf811ec753cf9572c8545b891bcff204c3807a", 0x23}], 0x1}, 0x20000000) 2.064977322s ago: executing program 1 (id=3544): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$netlink(0x10, 0x3, 0x0) (async) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000180)={'lo\x00', {0x2, 0x4e21, @empty=0x7f000000}}) (async) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0xffffff1f, 0x70bd26, 0x80, {0x0, 0x0, 0x0, 0x0, 0x1605, 0xf74}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0x80}]}}}]}, 0x40}}, 0x4000) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@ipv6_newrule={0x38, 0x20, 0x1, 0x70bd29, 0x25dfdbff, {0xa, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x7, 0x18}, [@FIB_RULE_POLICY=@FRA_PROTOCOL={0x5, 0x15, 0x3}, @FRA_DST={0x14, 0x1, @mcast2}]}, 0x38}, 0x1, 0x0, 0x0, 0x24048860}, 0x4000) (async) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) (async) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(r3, &(0x7f0000000640)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000340)={0x2b0, r4, 0x10, 0x70bd2a, 0x25dfdbff, {}, [@TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xfff}]}, @TIPC_NLA_LINK={0xb8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc13}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}]}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x10}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1db8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x80}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8a45}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}]}, @TIPC_NLA_NET={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x6}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xd}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xe1b}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xfffffffe}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x800}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xfffffffffffffff8}]}, @TIPC_NLA_SOCK={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xff04}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xba68}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x401}]}, @TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xfffffff7}]}, @TIPC_NLA_MON={0x3c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x33}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xe8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffffd}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x100}]}, @TIPC_NLA_SOCK={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9}]}, @TIPC_NLA_LINK={0xc8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5908}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}]}, @TIPC_NLA_LINK_PROP={0x4}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffad}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xf6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}]}]}, 0x2b0}}, 0x1) (async) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x0) ioctl$sock_inet_udp_SIOCINQ(r3, 0x541b, &(0x7f0000000140)) 1.949512384s ago: executing program 4 (id=3545): syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0) (async) syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0xf, &(0x7f0000000600)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x107a655, 0x0, 0x0, 0x0, 0x10}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0xf, &(0x7f0000000600)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x107a655, 0x0, 0x0, 0x0, 0x10}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_80211_inject_frame(&(0x7f00000001c0), &(0x7f0000000180)=ANY=[@ANYRES64=r1, @ANYRESHEX=r1], 0x36) 1.928136662s ago: executing program 2 (id=3546): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x25}]}, &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0xffffff7c}, 0x94) 1.730025793s ago: executing program 2 (id=3547): socket$key(0xf, 0x3, 0x2) r0 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, &(0x7f0000000000)=0x1, 0x4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x604000, 0x0) r2 = socket(0x2b, 0x1, 0x6) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=@newqdisc={0x24, 0x24, 0x300, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x3, 0xf}, {0xfff3}, {0x8, 0x6}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x6d, &(0x7f0000000180)={0x0, 0x1000, "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"}, &(0x7f00000011c0)=0x1008) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000001300)={r3, 0xe8, &(0x7f0000001200)=[@in6={0xa, 0x4e24, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x2}, @in={0x2, 0x4e22, @private=0xa010101}, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x28}}, @in6={0xa, 0x4e21, 0xfffff0e5, @dev={0xfe, 0x80, '\x00', 0x35}, 0x8}, @in6={0xa, 0x4e20, 0x8, @mcast1, 0x400}, @in6={0xa, 0x4e22, 0x2, @private2, 0x2ba}, @in={0x2, 0x4e22, @rand_addr=0x64010102}, @in={0x2, 0x4e22, @rand_addr=0x64010102}, @in6={0xa, 0x4e23, 0x9, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x1ff}, @in6={0xa, 0x4e20, 0x8, @mcast1, 0x80000000}]}, &(0x7f0000001340)=0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000001380), r2) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000013c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x8}, 0x50) r5 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000001480), 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001500)={{r4, 0xffffffffffffffff}, &(0x7f0000001440), &(0x7f00000014c0)=r5}, 0x20) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$TUNSETCARRIER(r1, 0x400454e2, &(0x7f0000001540)=0x1) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000001580)=[@in={0x2, 0x4e23, @multicast1}, @in6={0xa, 0x4e20, 0x5, @empty, 0x5598}, @in6={0xa, 0x4e21, 0x7, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}, @in6={0xa, 0x4e22, 0x5, @private1, 0xf601}, @in6={0xa, 0x4e22, 0x9, @empty, 0x8}, @in6={0xa, 0x4e20, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3ff}, @in={0x2, 0x4e22, @rand_addr=0x64010100}, @in6={0xa, 0x4e24, 0x2, @loopback, 0x5}, @in6={0xa, 0x4e23, 0x79c, @mcast2, 0xfffffffd}], 0xe4) setsockopt$inet_opts(r7, 0x0, 0xd, &(0x7f0000001680)="62cfaa2679060ac71b0e877cb7620e444eb460ad9be58481b5e6777f1ea7d70d3320810adb93ec5ae76242d56d08dd3eacf4e536cfcc5367d532f6d929ddde4f4676e970951d57d3739e817a3645fd70446802b7557332806e925ddbc02ea160de13a973b847e45ce33a79099f38154319029ddb8a553b7f580937624ef6c199294f7887b4fdd04c10a685ca154e782a3aaa9af782592a213ee3b68ca7e81f319fa24bba7126e8d16a4c8519a6a5adb24ff31729b9948c2dcbc67d8bc418166976d446310c10d3b666e91ae3688d4e970d2c2f4ed8", 0xd5) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000001780), &(0x7f00000017c0)=0x4) ioctl(r7, 0x2, &(0x7f0000001800)="2bb613ade7c34cb6c0641bbd55ea2f676f2d265768a60278e0e41f3354bd56258789d9883ae3ef40bf3958ca78c8b4e21608bd5a08789b4af13968624ccfbb8cf304d1a78c249111e19b207dd54002758bbc5b9a3e0472753517c48c6ba1c6553dae64cee34c4ed198e9a0df10bd3d954e3b78c07b827372a3cff75f6823fd816d") socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000018c0)) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r2, 0x84, 0xf, &(0x7f0000001900)={r3, @in={{0x2, 0x4e23, @loopback}}, 0x9, 0x77, 0xff, 0x3, 0x34d}, &(0x7f00000019c0)=0x98) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f0000001a00)={r8, 0x6, 0x6}, 0x8) r9 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001a40), 0x4) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001a80)={0x3, 0x4, 0x4, 0xa, 0x0, r6, 0xdd, '\x00', 0x0, r9, 0x4, 0x1, 0x3}, 0x50) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000001bc0)={'wg0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001c40)={0x6, 0x3, &(0x7f0000001b00)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0xffffffff}}, &(0x7f0000001b40)='GPL\x00', 0x2, 0x3d, &(0x7f0000001b80)=""/61, 0x41100, 0x32, '\x00', r10, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000001c00)=[{0x3, 0x2, 0xf, 0x2}], 0x10, 0x200}, 0x94) r11 = accept4$unix(r2, &(0x7f0000001d00)=@abs, &(0x7f0000001d80)=0x6e, 0x800) recvmmsg$unix(r11, &(0x7f0000002080)=[{{0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000001dc0)=""/78, 0x4e}, {&(0x7f0000001e40)=""/200, 0xc8}, {&(0x7f0000001f40)=""/112, 0x70}, {&(0x7f0000001fc0)=""/3, 0x3}], 0x4, &(0x7f0000002040)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}}], 0x1, 0x100, &(0x7f00000020c0)) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000002100)="2ff27f3c7cece43378a0ea9e948c6b474c583a17e7beb89623ced3a6cad716c76b820f2197eed57a29a41b2a9c5ab86637dda9609c234798c33ead197fe72681b8f2b855dbb71b67fdef1eb55e993277263a2b590d09182f3b7e6ce6e997e725a085c43a0d2922919e3243da8f4b3a9c4b17684a858e342a7d771b6f8ca961ed92a6bc730f915f87d1ad927435a92b213eeb7cafbbfd6d0594aaf3b3e1", 0x9d) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000021c0)={0x8}, 0x8) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r2, &(0x7f00000022c0)={&(0x7f0000002200)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000002280)={&(0x7f0000002240)={0x30, 0x1410, 0x4, 0x70bd28, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x2}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x3}, @RDMA_NLDEV_ATTR_STAT_AUTO_MODE_MASK={0x8, 0x4c, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x502130859a18c397) 1.702981297s ago: executing program 1 (id=3548): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10) sendto$inet(r1, 0x0, 0x0, 0x20000800, &(0x7f0000000040)={0x2, 0x3, @remote}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @random="5a01f3c2f136", @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x2, @local, @remote, @local, @remote}}}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x5c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9, 0x1}, {0x4}, {0xe, 0xd}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x401}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}, @TCA_INGRESS_BLOCK={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x90}, 0x4000c00) r2 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000100)="92012f620b8bf4a3b184c1cddafb14cb172aaa8c", 0x14) recvmsg(r2, &(0x7f0000000600)={&(0x7f0000000140)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, &(0x7f0000000700)=[{&(0x7f00000001c0)=""/235, 0xeb}, {&(0x7f00000002c0)=""/165, 0xa5}], 0x2, &(0x7f0000000540)=""/129, 0x81}, 0x2000) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0x4, 0x8, 0xf, 0x0, 0x1, 0xb69}, 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x14, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000002000000000000004000010018010000202078a500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fbffffff850000000600000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r7, r6}, 0xc) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000009c0)=ANY=[@ANYBLOB="0203"], 0x10}, 0x17, 0x7}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_XFRM_DIR={0x5}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0x16}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x6}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x84}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f00000007c0)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x2c, 0x0, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@ETHTOOL_A_COALESCE_TX_USECS={0x8, 0x6, 0x3d3}, @ETHTOOL_A_COALESCE_TX_USECS_LOW={0x8, 0x10, 0x4c62}, @ETHTOOL_A_COALESCE_USE_ADAPTIVE_RX={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40008080}, 0x10) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$FS_IOC_GETFSUUID(r10, 0x80111500, &(0x7f0000000500)) sendmsg$nl_xfrm(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000a00)=ANY=[@ANYBLOB="040100001a0007002ab5700000100000fc020000000000000000000000000000e0000002000000000000000000000000000300004e220000000000a002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ff010000000000000000000000000001000000003c000000fc0000000000000000000000000000005a02000000000000e10000000000000003000000000000007f000000000000000000000000000000000006000000000000000000000000000000000000000000000000000000000001002000000000000700000000000000fdffffffffffff00000000e80a000000000000fcffffff02000000700000000000000014000e00fe8000000000000000000000000000bb000000000024e518422b7b0ec49709469c6c8b858709b131bd7772c512c4b12693"], 0x104}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r3) sendmsg$NL80211_CMD_SET_WIPHY(r4, &(0x7f0000000940)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000680)={&(0x7f00000006c0)=ANY=[@ANYBLOB="1c00544fe39f5522d6754f4c59a70000", @ANYRES64=r4, @ANYBLOB="080028bd7000fddbdf25020000000800690002000000"], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r11 = accept4(r2, 0x0, 0x0, 0x80800) write(r11, &(0x7f00000003c0)="fa8a4e785a73c662822e2a36d22d367923ebddbd84fa85c9a3f7dc1654ae0104000000406c871ea9242fbd18cd095244a6e008cf21ae324f61695077205f70dcdd73b02358d5ce668eaca298a8b7b3da", 0x50) recvmmsg$unix(r11, &(0x7f0000005980)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000001040)=""/28, 0x1c}, {&(0x7f0000000000)=""/169, 0xa9}], 0x2}}], 0x1, 0x0, 0x0) 1.497400284s ago: executing program 2 (id=3549): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000140)={0x6}, 0x10) write(r0, &(0x7f0000000000)="1c0000001a005f0214f9f407000904001f000000ff02000200000000", 0x1c) syz_genetlink_get_family_id$batadv(&(0x7f0000000400), r0) socket$inet(0x2, 0x4000000000000001, 0x6) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0x801, 0xfffffffd, 0x8000000, {0x0, 0x0, 0x0, 0x0, 0x0, 0x404a3}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5, 0x0, 0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x5c, 0x3, 0xa, 0x301, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x419cb969}, @NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_DEV={0x14, 0x3, 'netdevsim0\x00'}]}]}], {0x14}}, 0xa4}}, 0x24004000) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-512\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x800) recvmsg(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000002c0)=[{0x0}, {&(0x7f0000000680)=""/24, 0x18}], 0x2}, 0x0) r6 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'nq\x00', 0x10, 0x5, 0x2d}, 0x2c) setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x483, &(0x7f0000000040)={0x6, @local, 0x0, 0x0, 'lblcr\x00', 0x3a, 0x5, 0x54}, 0x2c) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newtaction={0x164, 0x30, 0xb, 0x70bd25, 0x0, {}, [{0x150, 0x1, [@m_mpls={0x102, 0x21, 0x0, 0x0, {{0x9}, {0x44, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x9, 0x5, 0xffffffffffffffff, 0x1, 0x8}, 0x1}}, @TCA_MPLS_PROTO={0x6, 0x4, 0x8848}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0xfffffffe, 0x6, 0x3, 0x2, 0x9}, 0x2}}]}, {0xdf, 0x6, "56f81999808a4fe81fc6c3d8074b589db30106c01a8dc846bbb03a5a7bb400c3ba85c5f8ccd772edd648361156462b8ad897b06a7143eb575e1ecebba9efa87b33d34900d6d758674966aeaa0389f0a82b42cc172797b1ec8c4f5fb618d93b3f26f1aaa9eaa8cd051fe98a8ed2f4da1dbaca338cb72aa7c8c45e0f543e6960b4574eaa8562f78c35def79561ff050cac237b9bc15c157c9a112e3ee52760c84a50e151b629b2104187cc35bd8046068be9d34fda43b5291ecce0b42719eb2a1f0f366a9b8bd4cd6e87d51a5ff3d13b5a4a809f49204b992a8aa933"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x164}, 0x1, 0x0, 0x0, 0x8890}, 0x8050) 1.376255792s ago: executing program 3 (id=3550): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c000000200025a729bd7020fddbdf250a0080cdff00000100000000080006000000000014000200fe8000000000008000000000000000aa14000300697036746e6c30000000000000000000"], 0x4c}, 0x1, 0x0, 0x0, 0x20008081}, 0x840) 1.229027426s ago: executing program 3 (id=3551): r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f0000000000)=ANY=[@ANYBLOB="6e61670000000000000000000000000000000004000000000000006c1900000004"], &(0x7f0000000080)=0x2c) syz_80211_inject_frame(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="5809040050505050505008021100000008021100000178005a0e3269ef10d89883c73a68"], 0x80) syz_emit_ethernet(0x96, &(0x7f0000000080)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x60, 0x6, 0x1, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x18, 0x4, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x2, 0x98ca}, @sack_perm={0x4, 0x2}, @window={0x3, 0x3, 0xd7}, @fastopen={0x22, 0x4, "914f"}, @sack={0x5, 0xe, [0x220, 0x130c, 0xabc]}, @md5sig={0x13, 0x12, "8098cf093cc9cd7b8ec814f9bcfdfea9"}, @sack={0x5, 0x16, [0x1, 0xfffffffe, 0x3, 0x1, 0x10001]}]}}}}}}}}, 0x0) bind$netlink(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x0, 'none\x00', 0x9, 0xf, 0x5b}, 0x2c) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[@ANYRES16, @ANYBLOB="00012cbd7000ffdbdf25010000004c0002803c00018008000100040000000800010002000000080001000600000008000100070000000800010012034e05080001000800000008000100080000000c0001800800010005000000080002800400"], 0x68}, 0x1, 0x0, 0x0, 0x40005}, 0x8044) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r3 = socket$kcm(0x29, 0x2, 0x0) close(r3) socket$l2tp6(0xa, 0x2, 0x73) setsockopt$sock_attach_bpf(r3, 0x1, 0xd, &(0x7f00000000c0), 0xfe11) close(r3) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000340)=ANY=[@ANYBLOB="180100003000010003000000fbdbdf2506"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) 927.156969ms ago: executing program 4 (id=3552): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async) r1 = socket$inet6(0xa, 0x2, 0x0) (async) mmap(&(0x7f0000196000/0x1000)=nil, 0x1000, 0x0, 0x840000000000a132, 0xffffffffffffffff, 0x0) (async, rerun: 64) r2 = socket(0x40000000015, 0x5, 0x0) (rerun: 64) connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r2, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) (async) sendmsg$xdp(r2, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) (async) recvmmsg(r2, &(0x7f0000001740)=[{{0x0, 0xfd67, &(0x7f0000001400), 0x1}}], 0x4000210, 0x10002, 0x0) (async) sendmsg$inet6(r1, &(0x7f00000000c0)={&(0x7f00000001c0)={0xa, 0x4e1e, 0x80000, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES8=r1], 0x18}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000160a03020000000000000000020000000900020073797a32000000000900010073797a3000000000140003800800024000000000080001400000000014000000110001"], 0x68}}, 0x0) (async) sendmsg$NFT_BATCH(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000040000000000a40000000160a01080000000000000000020000000900020073797a30000000000900010073797a3000000000140003800800024000000000080001400000000014000000110001"], 0x68}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)={0x20, 0x17, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x20048000}, 0x8094) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=@newqdisc={0x16c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xfffa, 0x5}, {0xffff, 0xb}, {0xfff2, 0x10}}, [@TCA_STAB={0x148, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0xe, 0x9, 0x3, 0x1, 0x54, 0x7, 0x3}}, {0xa, 0x2, [0x8, 0xff, 0x8]}}, {{0x1c, 0x1, {0xd, 0xab, 0x5, 0x551, 0x2, 0x5, 0x8, 0x2}}, {0x8, 0x2, [0x7, 0x2]}}, {{0x11, 0x1, {0x40, 0x4, 0x8, 0x4, 0x2, 0x1, 0x1, 0x5}}, {0xe, 0x2, [0x4, 0x5, 0x5b, 0x168c, 0x9]}}, {{0x1c, 0x1, {0xb, 0x2, 0x6, 0x439, 0x2, 0x4, 0x1, 0x3}}, {0xa, 0x2, [0x9, 0xd, 0x6]}}, {{0x1c, 0x1, {0x80, 0x2, 0x81, 0x8, 0x0, 0x0, 0x100, 0x1}}, {0x6, 0x2, [0x0]}}, {{0x1c, 0x1, {0x11, 0xc, 0x8, 0x5, 0x0, 0x9d, 0x1, 0x6}}, {0x10, 0x2, [0xa9, 0x7, 0x7, 0x0, 0x9, 0xca0b]}}, {{0x1c, 0x1, {0x9, 0x1c, 0x7ff, 0x2, 0x0, 0x1, 0xd3, 0x1}}, {0x6, 0x2, [0xd5d]}}, {{0x1c, 0x1, {0x3e, 0x7, 0x1, 0x8000, 0x2, 0x3, 0x4, 0x8}}, {0x14, 0x2, [0x9, 0x3, 0x9, 0x6, 0x0, 0x8000, 0x8, 0x6]}}]}]}, 0x16c}, 0x1, 0x0, 0x0, 0x8080}, 0x24) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000006b117700000000008510000002000000850000008a00000495003300000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb8000000}, 0x70) (async) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r7) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r9, {0x0, 0x8}, {0xc, 0xb}, {0x7, 0xffe2}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0xc, 0xa, 0x0, 0x5}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x2004c090) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r10) sendmsg$TIPC_CMD_ENABLE_BEARER(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) (async) tee(r3, r8, 0x0, 0xc) 823.049524ms ago: executing program 0 (id=3553): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="80000000000201040000000000000000020000002400028014000180080003007f00000108000200ac1414000c0002800500010000000000240003801400018008000100ac1414aa08000200ac1414bb0c0002800500010000000000240001"], 0x80}}, 0x0) r1 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[], 0x48) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f0000001280)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000005c0)={0x28, 0x2e, 0x1, 0x0, 0x0, "", [@nested={0x18, 0x0, 0x0, 0x1, [@typed={0x14, 0x0, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @loopback}}]}]}, 0x28}], 0x1}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x7) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r7, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0x8}, {0xfff1, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000980)=@delchain={0x24, 0x66, 0xf31, 0xfffffff8, 0x0, {0x0, 0x0, 0x0, r7, {0xb, 0xc}, {0x0, 0xffff}, {0x0, 0x1b}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0) close(0x3) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000200)={r8, &(0x7f0000000080), &(0x7f0000000000)=""/10, 0x2}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000840)={0x34, r10, 0x1, 0x0, 0x0, {0x3a}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r11, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r12 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r12, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r11, &(0x7f0000000100)={@val, @void, @eth={@multicast, @remote, @val={@val={0x88a8, 0x4, 0x1, 0x1}, {0x8100, 0x5, 0x1, 0x2}}, {@ipv4={0x800, @generic={{0x5, 0x4, 0x1, 0x6, 0x1c, 0x65, 0x0, 0x1, 0x32, 0x0, @dev={0xac, 0x14, 0x14, 0x2d}, @initdev={0xac, 0x1e, 0x0, 0x0}}, "b96ee10c4a0a4f91"}}}}}, 0x36) 616.291878ms ago: executing program 1 (id=3554): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000007c0)=@bpf_lsm={0x18, 0x0, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x8, 0x0, 0x0, 0x40f00, 0x2c, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$kcm(0x23, 0x5, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) setsockopt$sock_int(r0, 0x1, 0x4, &(0x7f0000000240)=0x2009, 0x4) listen(r1, 0x800) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000380)={0x1d, 0x0, 0x2, {0x2, 0x0, 0x2}}, 0x18) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r4) write$tun(r2, &(0x7f0000000380)=ANY=[@ANYBLOB="1c0000f500000000000000862dfdff"], 0x78) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYRES32=r2, @ANYRES32=0x0], 0x58}}, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000000)={r0, 0x1, 0x7bca, 0x5}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000013c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000c0}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$packet(0x11, 0x2, 0x300) pselect6(0x40, &(0x7f0000000280)={0x6, 0x3, 0x7, 0xffff, 0x8, 0x2cb, 0xeea, 0x3}, &(0x7f0000000300)={0x8, 0xf, 0x97d, 0x100, 0x6, 0x3, 0x2, 0x8}, 0x0, &(0x7f0000000880), &(0x7f0000000900)={&(0x7f00000008c0)={[0x52e]}, 0x8}) setsockopt$packet_int(r6, 0x107, 0xe, &(0x7f0000000000)=0x9, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), r5) sendmsg$NL80211_CMD_JOIN_IBSS(r5, 0x0, 0x80) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f0000002580)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc0}, 0x200cc086) 509.780329ms ago: executing program 2 (id=3555): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x10) syz_emit_ethernet(0x2e, &(0x7f0000000000)={@local, @remote, @val={@void}, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @empty, @empty, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @local}}}}, 0x0) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) r2 = socket$netlink(0x10, 0x3, 0x10) r3 = socket$netlink(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000ffdbdfa5250000000e0001006e657464657673696d0000000f0002006e657464657673696d300000"], 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x24004804) sendmsg$DEVLINK_CMD_SB_POOL_GET(r2, &(0x7f0000000880)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000840)={&(0x7f0000000740)={0xf0, r4, 0x100, 0x70bd29, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x80000000}, {0x6, 0x11, 0x200}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x88f}, {0x6, 0x11, 0x800}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x5}, {0x6, 0x11, 0x3}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xb03a}, {0x6, 0x11, 0x81aa}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x9}, {0x6, 0x11, 0x74}}]}, 0xf0}, 0x1, 0x0, 0x0, 0x8001}, 0x40001) r5 = accept4(r3, &(0x7f00000001c0)=@alg, &(0x7f00000002c0)=0x80, 0x80000) r6 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xd, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000010000000000000000000000850000007a0000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000008f00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x9, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x94) ioctl$sock_SIOCETHTOOL(r6, 0x89f1, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000140)=@ethtool_cmd={0x9, 0x9, 0x1, 0x8000, 0x1, 0x6, 0x2, 0xfe, 0x10, 0x5, 0x4af, 0x200, 0x7e4, 0x1, 0x1, 0x45, [0x8, 0x6]}}) bind$vsock_stream(r5, &(0x7f0000000380)={0x28, 0x0, 0x2710, @my=0x0}, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000300), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000640)=0xce0, 0x4) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x13, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000020200008500000010000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000340)='syzkaller\x00', 0x80, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r7, 0xfca804a0, 0xe, 0x0, &(0x7f0000000040)="b8000005000000000152912e5763", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), r2) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_RADAR_DETECT(r8, &(0x7f00000008c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x38, r9, 0x100, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0x4, 0x18}}}}, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x15}]}, 0x38}, 0x1, 0x0, 0x0, 0xc}, 0x20000004) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x5, 0xa, 0x42, 0x40, 0xc0, 0xffffffffffffffff, 0x1}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2}, 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000400)={r11, &(0x7f0000000280), 0x0}, 0x20) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x200020c0, 0xffffffff, 0xfffffff8}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c0000001a00010029bd7000000000000220200021000000002000"/44], 0x2c}}, 0x0) 459.402055ms ago: executing program 4 (id=3556): syz_emit_ethernet(0x7e, &(0x7f0000000440)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x9, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0xc}}, @time_exceeded={0x3, 0x1, 0x0, 0x3, 0x24, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x1, 0x81, 0x0, 0x84, 0x7, @loopback, @multicast1, {[@cipso={0x86, 0x3d, 0x3, [{0x0, 0x12, "08009a8c5903040000527c706ca03a06"}, {0x5, 0x9, "020007651442eb"}, {0x0, 0xe, "7434954373561de584b703c8"}, {0x0, 0x9, "e706d30bd224f8"}, {0x0, 0x5, "cfa11c"}]}]}}}}}}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000000c0)=ANY=[@ANYRES32=r0], 0x60}, 0x1, 0x0, 0x0, 0x404c000}, 0x4048054) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="4400000010000308000000090000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002400128009000100626f6e6400000000140002800800130001000000b80014"], 0x44}}, 0x0) 438.988047ms ago: executing program 3 (id=3557): socket$inet_udp(0x2, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'sit0\x00'}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000003c0)={'gretap0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000001900)=@delchain={0x10d8, 0x65, 0x200, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x2, 0x4}, {0xf, 0x4}, {0xd, 0xfff3}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x4}}, @filter_kind_options=@f_route={{0xa}, {0x10a0, 0x2, [@TCA_ROUTE4_CLASSID={0x8, 0x1, {0xf, 0x4}}, @TCA_ROUTE4_ACT={0x1094, 0x6, [@m_mirred={0x50, 0x1b, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x5, 0x7, 0x8, 0x1, 0xfffffff9}, 0x4}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_police={0x1040, 0x1e, 0x0, 0x0, {{0xb}, {0x1014, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x9, 0x1, 0x0, 0x0, 0x9, 0x2, 0x8, 0x9, 0x81bd, 0x7fffffff, 0x89c, 0x10000, 0x3, 0x80, 0xffffffff, 0x5, 0x6, 0x3e, 0x0, 0x1, 0x0, 0x3df, 0x2, 0x1, 0x1, 0xad, 0x80000000, 0x8, 0x1, 0x2, 0x3000, 0xfff, 0xa15, 0x8, 0xfffffff5, 0x0, 0xf, 0x2, 0x0, 0x1, 0x1, 0x240, 0x6cd, 0x6, 0x0, 0x3, 0x3, 0xf, 0xfffffff8, 0x6, 0x5, 0xe39, 0xd, 0x3, 0x8e, 0x0, 0xc, 0x7f, 0xb3, 0xd7b, 0x80000001, 0x10, 0x1, 0x3, 0x0, 0xffffffff, 0x3, 0x2, 0x7fff, 0x7e7, 0x2, 0x120, 0x0, 0x0, 0x9, 0x9, 0x5, 0x6, 0x1, 0x5, 0x5, 0x0, 0x467, 0x0, 0xaa, 0x2, 0x401, 0xb4d, 0x3, 0x5, 0x6, 0x5c2d0575, 0x40, 0x8, 0x6, 0x3, 0x101, 0x3, 0x8, 0x3, 0x5, 0x80, 0x7fffffff, 0x7, 0xc, 0x80000001, 0x7, 0x10001, 0xffffff80, 0xa000000, 0x0, 0xd, 0x181600, 0x6, 0x8, 0x10, 0x2, 0x9, 0x3c0000, 0x1, 0x8, 0x4, 0x9fb, 0x6, 0x3a, 0x9, 0x3, 0x101, 0x413, 0xfffffffb, 0x8, 0x6, 0x1, 0x4, 0x10001, 0x1, 0x21b2, 0x2, 0x10, 0x81, 0x5, 0x0, 0xb, 0xfff, 0x3, 0x2, 0x1, 0x901d, 0x5, 0x0, 0x3, 0x3eb5, 0x1, 0xfffffff2, 0x8, 0x628, 0x111, 0xfffffff7, 0x10000, 0x0, 0x7fff, 0x0, 0xb, 0x4, 0x1, 0xffffff81, 0x3, 0x9, 0xa, 0x5, 0x8, 0x1, 0x1, 0x0, 0xd, 0x5, 0x4, 0x5, 0x6, 0x9, 0x8, 0x6, 0x5, 0xb, 0x12000000, 0x800, 0x100, 0xff, 0x8, 0x0, 0x8, 0x7, 0x10, 0x80000000, 0x9, 0x0, 0xe, 0x3f4d3f72, 0x7f, 0x4, 0x2, 0x8001, 0x7fff, 0x2, 0x1, 0x34, 0x24e, 0xffff, 0x2, 0xd, 0x10, 0x6, 0x1, 0x1000, 0x8, 0x6, 0xb, 0x7fffffff, 0xb0, 0x5, 0x46, 0x5, 0x8, 0x8, 0x5, 0xc8b, 0x58000000, 0x6, 0x8, 0x9, 0x4, 0x17862811, 0x400, 0x5, 0xe, 0x1ff, 0x1, 0x3, 0xf8000000, 0x4, 0x4, 0x8, 0x1, 0x79a8, 0xbe6, 0x10, 0xfffffff7, 0x6, 0x9, 0x0, 0x262, 0xffffffc0, 0x1, 0x4, 0x5]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x6, 0x0, 0x1, 0x26f, 0xbf7, 0x1, 0xfffffff8, 0x2, 0x0, 0x4, 0x11f, 0x1000, 0x10001, 0x1, 0x0, 0x4, 0x635, 0xc, 0x4, 0x8, 0x14e4, 0xd6db, 0xff, 0xb14, 0x6, 0x3, 0x1, 0x2c74, 0x1e0000, 0x40, 0x800, 0x1ff, 0x1, 0x4, 0x8, 0x8213, 0x3, 0x4, 0x7, 0x6, 0x4, 0xa30e, 0x9, 0x4, 0x401, 0x11cf7fed, 0x9, 0x6, 0x9, 0x101, 0x2, 0x9, 0x1, 0x5, 0x1, 0x2, 0x0, 0x5, 0xc, 0x400, 0x4, 0x7, 0x1, 0x1, 0x4, 0x0, 0x8001, 0x1b80000, 0xcda2, 0x5, 0xe, 0x2, 0xc, 0x7f, 0xffffb327, 0xffffff01, 0x8350, 0x2, 0x1fe0000, 0xfffffc00, 0x5, 0x8, 0xdfd, 0x400, 0x10001, 0x5710, 0x2, 0x7, 0xfff, 0x2f, 0x400, 0xd9, 0x42, 0xfffff8ee, 0xfffffff9, 0xc8000000, 0x2, 0xc, 0xfffffff9, 0x1ff, 0x4, 0x2, 0x6, 0x1ff, 0x3f, 0x60000000, 0x10000, 0x1, 0xffffffff, 0x23, 0x8, 0x4000000, 0x50000, 0x3ff, 0x5, 0x1000, 0x1000, 0x7cd0, 0x7, 0x57, 0x8, 0x3, 0x5, 0x43, 0x4, 0x6c6e, 0x5, 0xd, 0x7, 0x1, 0x80, 0xfffff001, 0xd36f, 0x3, 0x40, 0x394, 0x2, 0x3ff, 0x6, 0x9, 0x61d, 0x81, 0x7fff, 0x1ff, 0x1, 0x401, 0xb, 0x200, 0x4, 0x89, 0x6, 0xe, 0x9, 0x3, 0x10, 0x4c9b, 0x8, 0x7fffffff, 0x4, 0x49, 0x3, 0x7, 0x5d220de4, 0xb7ec, 0x5, 0xd8, 0x4, 0x4, 0xffffffff, 0x8, 0x1000, 0x3ff, 0x80, 0x0, 0x3, 0xea08, 0x5, 0xfffffcd4, 0x7f, 0x5, 0x2, 0x1, 0x4, 0x9, 0x4, 0x7f, 0x3, 0x0, 0x1, 0x580, 0x4, 0x401, 0x9, 0x5, 0x5, 0xf, 0x10, 0xff, 0x1, 0x5, 0xc505, 0x9, 0xeb83, 0x9, 0x6, 0x0, 0x5, 0x472, 0x9, 0x7, 0xa, 0x5, 0x2, 0x9f0, 0x7, 0x2, 0x5, 0xfffffff9, 0x81, 0x0, 0x5, 0xa, 0xbb6d, 0x5, 0x7, 0x4, 0xffc0, 0xb76, 0xc93, 0x7f, 0x101, 0x80, 0x88, 0x1, 0xc4, 0x375, 0x5, 0x7, 0x2, 0x1, 0x1, 0x3, 0x7, 0x40, 0x7, 0x10, 0x6, 0x5, 0x5, 0x9, 0x7, 0xb8, 0x5, 0x2, 0xffffffff, 0x81]}, @TCA_POLICE_RATE={0x404, 0x2, [0x10, 0xc6e, 0x7, 0x6, 0x2, 0x7f, 0x80000000, 0x4, 0x8, 0x8fca, 0xf5, 0x5, 0xffff9cd4, 0x8000, 0x4, 0x4, 0x7, 0xdbac, 0x4, 0x5, 0x7, 0x4, 0x81, 0xfffffffe, 0x1, 0x5, 0x20000, 0x0, 0x911, 0xf, 0x3ff, 0x9, 0x8, 0x5, 0xff1a, 0xf, 0x88, 0x91, 0x3, 0xffff, 0x7, 0xd, 0x2, 0xba, 0xfffffffb, 0x1, 0xffffffff, 0xca3e, 0xc549, 0x4, 0x1000, 0x0, 0x6, 0x2, 0x4c, 0x0, 0xf72, 0xc9, 0x1, 0x0, 0x9, 0x6, 0x2, 0x9, 0x401, 0x8, 0x4, 0x5, 0x79, 0x7f, 0x9, 0x6, 0x7, 0x8, 0x6, 0x0, 0x2, 0x7, 0x3ff, 0x1, 0x7fff, 0x7, 0xebca, 0x1, 0x8, 0xe7f7, 0x7fffffff, 0x8, 0x2, 0x2, 0xff, 0x9, 0x7, 0x77d, 0x1246, 0x1, 0x2, 0x10001, 0x81, 0x401, 0x8, 0x899, 0x6, 0x5, 0x8, 0xc37, 0x7fff, 0x6, 0x8, 0x5, 0xfffffffd, 0x2, 0x4105, 0x8, 0x7, 0x89, 0x7ff, 0x100, 0x224, 0x40000000, 0xc87, 0xbb, 0x3, 0x7, 0x1, 0x8000, 0x1a4, 0x3, 0x9, 0x9b0, 0x0, 0x3ff, 0x0, 0x80000001, 0x4, 0x2, 0x0, 0x3, 0x76b, 0x7fffffff, 0x6f25, 0x0, 0x2, 0x2, 0x8, 0xd, 0x2, 0x7fffffff, 0xffffffff, 0x8, 0x6, 0x6677, 0xffff, 0x0, 0x6, 0x5, 0x3, 0x6, 0x8, 0x101, 0x0, 0xb, 0x9, 0x5, 0x1ff, 0x7, 0x7, 0x4, 0x4, 0x7, 0x100, 0x260e, 0xfffff1b4, 0x61e, 0x4, 0xffff, 0xc2e, 0x0, 0x13, 0x7, 0x10001, 0x1, 0x9, 0x1, 0xffff, 0x0, 0x5, 0x7, 0x9b, 0x80, 0xff, 0x0, 0x100, 0xc, 0xc, 0x1, 0x7384, 0x8, 0xfffffff9, 0x0, 0x9, 0x1, 0x3, 0x8, 0x0, 0xffffffff, 0x1, 0x8, 0x8, 0xfff, 0x0, 0x2, 0x5, 0xf, 0x1ff, 0xa89, 0x514781c1, 0x5, 0xfffffe01, 0x80000000, 0x2, 0x5, 0x3, 0xfffffffc, 0x3, 0x4, 0x3ff, 0x9, 0x401, 0x80000001, 0x8, 0x10, 0x2, 0x8, 0x7f, 0x10000, 0xffffffff, 0x7, 0x2, 0x400, 0x9, 0x7, 0x5, 0x4, 0x8, 0x4, 0x31ab2547, 0x40, 0x2b, 0x8, 0x4, 0x10, 0x7, 0x100, 0x8, 0x1]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xe78, 0x2, 0x8a8, 0x2, 0x401, 0x1, 0x8, 0x7, 0x2, 0xffffff7f, 0x5, 0xa7f, 0x200, 0x3, 0x200, 0x7fffffff, 0x81, 0x4, 0x81, 0x6, 0x5, 0x2, 0x4, 0x7, 0xf79b, 0x9, 0x0, 0x2, 0x2, 0xf75, 0x400, 0x1b463426, 0x4, 0x4, 0x1, 0x800, 0x6, 0xff, 0x7, 0xffff05b6, 0x4, 0xfa63, 0x1, 0x3ff, 0x3, 0xb, 0xd036, 0x3, 0xa, 0x5, 0xaf, 0x101, 0xbc000000, 0x3, 0xb, 0x0, 0x18000, 0xf, 0x9, 0x96e0, 0x5, 0x3, 0x80000000, 0x9, 0x125, 0xd, 0x6, 0x7, 0x7, 0xe, 0xfffffffd, 0x0, 0x0, 0x6f, 0x8, 0x1, 0xa5aa, 0x2, 0xad, 0x7, 0x10001, 0x3, 0x3, 0xd, 0x5, 0x9, 0x3, 0x0, 0x8, 0xada, 0x3, 0x5, 0x7c, 0x8, 0x84, 0x7, 0x0, 0x872, 0x4, 0x2, 0x8, 0x4, 0x7ff, 0x8, 0x4, 0x1c, 0xe2, 0x4, 0x4, 0xffff0001, 0xa28f, 0x3, 0xfffffff7, 0x3, 0xff, 0x3, 0x9, 0x2, 0x7, 0x400, 0xff, 0x5, 0xb29, 0x207, 0x7fff, 0x4c, 0x6, 0x6, 0x8001, 0x394, 0xbc, 0x101, 0x3, 0x3ff, 0x2, 0xe177, 0xb, 0x8001, 0x2, 0x9, 0x6, 0x7, 0x4, 0x29, 0x0, 0x8000, 0xffff, 0x2, 0x4, 0x1, 0x7ff, 0x0, 0xdcb6, 0x6, 0x7ff, 0x19, 0x3, 0x8, 0x0, 0x8000, 0x8, 0x9, 0x8, 0x2, 0x4, 0x8, 0x9, 0x3, 0x5, 0x8, 0x2, 0x4, 0xa59, 0x2cc194f2, 0x800, 0x46c, 0x9, 0x6, 0x1, 0x20, 0x9, 0x6, 0x3, 0x4, 0x1, 0x4, 0x2, 0x0, 0x1, 0x3, 0x9, 0xd3, 0x4, 0x0, 0x2b9, 0x2f0, 0x8, 0x40c, 0x5, 0x1, 0x7, 0xeec4, 0x1, 0x9, 0x6, 0x4, 0xfffffff9, 0xfff, 0x9, 0x8, 0x1, 0x1000, 0x5, 0x2, 0x0, 0x2, 0xd483, 0x3, 0xed, 0x6, 0x5, 0x5, 0x401, 0xdc, 0x8, 0x2, 0x1, 0x80000000, 0x661, 0x3, 0x8, 0x3, 0x3, 0xf, 0x40, 0x8000, 0x80000000, 0x1, 0x5, 0x5, 0x8000, 0x8, 0x2, 0x3, 0xd0, 0x1, 0x4, 0x3, 0x9, 0x6, 0xc37, 0x8b, 0x2, 0x6, 0x10001, 0x6]}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x10d8}, 0x1, 0x0, 0x0, 0x400c880}, 0x20044003) socket$kcm(0x11, 0x3, 0x0) (async) r0 = socket$kcm(0x11, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) (async) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$inet6(0xa, 0x3, 0x3a) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="030328bd7000000000000a00000008000300", @ANYRES32=r3], 0x1c}}, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) (async) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000100)=@qipcrtr={0x2a, 0x4, 0x1}, 0x80, &(0x7f0000000500)=[{&(0x7f00000006c0)="27031c00160014000000002f1eafacf706e105400000894f00050004ee0b80558ddbba9b37242d37a518fc9c5be50eaf07c3650596", 0x26}], 0xf}, 0x4) socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x3, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020642500000000002020207b1af8ff00000000bfa100bc6900000007010000f8ffffffb702000008000000b703000001000000850000002f00000095000000000000004704bb011f8a4644aafef6dd341805539578167706aaf468c6d68ee5fd65160274f73c60a8527ebd9e2b8e84ac0f2b7ba93efc3a853f4d6d204241545148e1e6d13103f056abe6489d04b77edcfa3ad1544874938b13628efe91df9159e099ea3e2cdb241194356a70a1ced71d7481144f130e3718bbb1763943e58cfdd76340a7506e57833899fe03f48b2cb862c0e8b0787bc7f996adb2845e0cc563a395183e9514dfe9db2d8a6fb55ae050bd97ebe13190dce6"], &(0x7f0000000140)='syzkaller\x00'}, 0x94) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="480000001000030426bd70000400000000000000", @ANYRES32=0x0, @ANYBLOB="a56daf88000000001c0012800b0001006700028008000100040000000a000100aaaaaaaaaa3d0000"], 0x48}}, 0x0) 289.43747ms ago: executing program 0 (id=3558): ioctl$XFS_IOC_FD_TO_HANDLE(0xffffffffffffffff, 0xc038586a, &(0x7f0000000200)={0xffffffffffffffff, &(0x7f0000000100)='GPL\x00', 0x76484, &(0x7f0000000140)={@_ha_fsid={[0x2, 0x6]}, {0x8, 0xff80, 0xb5, 0x7}}, 0xe6, &(0x7f0000000180), &(0x7f00000001c0)=0xffff}) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2802, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={&(0x7f0000000040), 0x10, &(0x7f0000000080)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x405, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x48}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000200)={&(0x7f0000000240), 0x10, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c080000030a05040000000000000000050000000900010073797a30000000000900030073797a300000000008000a4000000002280004800800014000000000080002400000000a140003006e657464657673696d30000000000000140000001100010000000000000000000500000a"], 0x84}}, 0x0) socket$alg(0x26, 0x5, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000400)={&(0x7f0000000440), 0x10, &(0x7f0000000480)={&(0x7f00000004c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x94, 0x6, 0xa, 0xc05, 0x0, 0x0, {0x5}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x68, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_BASE={0x8}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x10}, @NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x4}, @NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0x1}]}}}, {0x30, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8}, @NFTA_IMMEDIATE_DATA={0x10, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x1}]}]}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0xbc}}, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000700)=@newtfilter={0x54, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0xb, 0x4}, {}, {0x7, 0xffe0}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x10, 0x1, 0x0, 0x0, {{0x8, 0x0, 0x8}, 'r'}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1996}}]}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a03000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000180003801400020000007468305f746f5f68737200000000080002"], 0xe8}}, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3032, 0xffffffffffffffff, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0200000004000000080001000100000080"], 0x50) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r10, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_SET(r8, &(0x7f0000001b80)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f0000000100)={0x3c, r9, 0x1, 0x70bd2c, 0x25dfdafe, {}, [@ETHTOOL_A_FEATURES_WANTED={0x10, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xb5}, @ETHTOOL_A_BITSET_VALUE={0x4}]}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x881}, 0x8000) write$tun(r1, &(0x7f0000000840)={@val={0x8, 0x800}, @val={0x6, 0x4, 0x6, 0x8, 0x14, 0x2}, @ipv4=@generic={{0x5, 0x4, 0x2, 0x2, 0xfc0, 0x66, 0x0, 0xb, 0x2f, 0x0, @rand_addr=0x64010101, @multicast2}, "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"}}, 0xfce) sendmsg$NFNL_MSG_ACCT_NEW(r5, &(0x7f0000000600)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x14, 0x0, 0x7, 0x301, 0x0, 0x0, {0x1, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20000001}, 0x20000800) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000380)={r11, r12/1000+10000}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x3, 0x4, &(0x7f00000006c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x11}]}, &(0x7f0000000680)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0xc0}, 0x94) 279.031588ms ago: executing program 2 (id=3559): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = socket$inet(0x2, 0x3, 0x1) setsockopt$sock_int(r2, 0x1, 0x5, &(0x7f0000000340)=0x6, 0x4) sendmsg$inet(r2, &(0x7f0000001040)={&(0x7f0000000040)={0x2, 0xffff, @broadcast}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000830b040a0101027f00000100000000001c000000000000000000000008"], 0x40}, 0x20008024) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000300)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r4, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r1}, 0x20) close(r4) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xd, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r6, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r7, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) 192.061086ms ago: executing program 4 (id=3560): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, r2, {0x2, 0x4e22, @loopback}, 0x0, 0x0, 0x0, 0x1}}, 0x2e) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0x1, 0x2}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_subtree(r3, &(0x7f0000000180), 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = accept4$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, &(0x7f00000001c0)=0x10, 0x80800) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000200)={'team0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f0000000340)={'erspan0\x00', &(0x7f0000000240)={'syztnl1\x00', r6, 0x7800, 0x7800, 0x8, 0x9, {{0x1e, 0x4, 0x0, 0x5, 0x78, 0x68, 0x0, 0x5, 0x2f, 0x0, @local, @rand_addr=0x64010102, {[@cipso={0x86, 0xc, 0x2, [{0x6, 0x4, "1b8b"}, {0x6, 0x2}]}, @rr={0x7, 0x23, 0x79, [@broadcast, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @local, @dev={0xac, 0x14, 0x14, 0x3c}, @remote]}, @timestamp_prespec={0x44, 0x34, 0x33, 0x3, 0x3, [{@empty, 0x4}, {@local, 0x3}, {@empty, 0x400}, {@remote, 0x9}, {@remote, 0xffff8001}, {@local, 0x1}]}]}}}}}) write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[@ANYBLOB="2b696f202002"], 0xd) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f0000000000)={'geneve1\x00', {0x2, 0x4e22, @multicast2}}) ioctl$SIOCSIFHWADDR(r7, 0x89fc, &(0x7f0000000040)={'bond0\x00', @random="000180000020"}) 140.000897ms ago: executing program 1 (id=3561): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000000)={r0, 0x7, 0x4c65, 0xff}) write$cgroup_subtree(r1, &(0x7f0000000040)={[{0x2d, 'net'}, {0x2d, 'net_cls'}, {0x2b, 'net_prio'}, {0x2d, 'rdma'}, {0x2d, 'rdma'}, {0x2b, 'devices'}, {0x2d, 'perf_event'}, {0x2d, 'rdma'}, {0x0, 'cpuacct'}]}, 0x48) ioctl$AUTOFS_IOC_FAIL(r0, 0x9361, 0x1) ioctl$sock_SIOCDELDLCI(r1, 0x8981, &(0x7f00000000c0)={'veth0_to_bridge\x00', 0x2}) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r1, 0x8982, &(0x7f0000000100)={0x8, 'veth0_macvtap\x00', {'lo\x00'}, 0x7}) bind$unix(r0, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e23}, 0x6e) ioctl$OCFS2_IOC_GROUP_ADD64(r1, 0x40186f03, &(0x7f00000001c0)={0x9, 0x5, 0x4, 0x9}) ioctl$XFS_IOC_FSGEOMETRY_V4(r1, 0x8070587c, &(0x7f0000000200)) tee(r0, r1, 0x5, 0x4) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$XFS_IOC_PATH_TO_HANDLE(r2, 0xc0385869, &(0x7f00000003c0)={r1, &(0x7f00000002c0)=')\'#@\x00', 0x101000, &(0x7f0000000300)={@align=0x7fffffff, {0x7ff, 0x8000, 0xffffffff, 0x1ff}}, 0x40, &(0x7f0000000340), &(0x7f0000000380)=0xfff}) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000400)={'vxcan0\x00', 0x0}) ioctl$EXT4_IOC_SWAP_BOOT(r3, 0x6611) r5 = socket(0x0, 0x3, 0x1) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000440)=[@in6={0xa, 0x4e21, 0xffff, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4e}, @in={0x2, 0x4e23, @remote}, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x27}}, @in6={0xa, 0x4e23, 0x0, @mcast2, 0x1}, @in6={0xa, 0x4e20, 0x6, @mcast2, 0x9}, @in={0x2, 0x4e23, @private=0xa010100}, @in={0x2, 0x4e24, @remote}], 0x94) connect$bt_l2cap(r3, &(0x7f0000000500)={0x1f, 0x8001, @any, 0x0, 0x1}, 0xe) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r5, 0x84, 0x6e, &(0x7f0000000540)=[@in6={0xa, 0x4e22, 0x1d, @loopback, 0x8}, @in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x4e22, 0xff, @loopback, 0x8}, @in6={0xa, 0x4e21, 0xe, @remote, 0x400}, @in6={0xa, 0x4e20, 0x5, @empty, 0x3b}, @in={0x2, 0x4e23, @empty}, @in6={0xa, 0x4e21, 0xffffffca, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xde69}], 0xac) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r1, 0xf50f, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1, &(0x7f0000000600)=@raw=[@alu={0x7, 0x1, 0x4, 0xa, 0x8, 0x30, 0x10}], &(0x7f0000000640)='GPL\x00', 0x1c5df470, 0xdd, &(0x7f0000000680)=""/221, 0x41100, 0x0, '\x00', r4, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000780)={0x7, 0x4}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, r1, 0x4, &(0x7f00000007c0)=[r1, r3], &(0x7f0000000800)=[{0x0, 0x4, 0x2, 0x213182d8783d15d3}, {0x0, 0x2, 0xd, 0x2}, {0x3, 0x1, 0x2}, {0x5, 0x4, 0x8, 0x4}], 0x10, 0xc}, 0x94) ioctl$TUNSETFILTEREBPF(r1, 0x800454e1, &(0x7f0000000900)=r6) r7 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r7, 0x8983, &(0x7f0000000940)={0x1, 'rose0\x00', {}, 0xb}) setsockopt$IP_VS_SO_SET_DEL(r0, 0x0, 0x484, &(0x7f0000000980)={0x33, @dev={0xac, 0x14, 0x14, 0x1d}, 0x4e21, 0x2, 'wlc\x00', 0x2e, 0x4, 0xe}, 0x2c) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f00000009c0)=0x4) r8 = socket$inet6_sctp(0xa, 0x0, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000a40)={0x0, 0x2c, &(0x7f0000000a00)=[@in6={0xa, 0x4e20, 0xe0a0, @dev={0xfe, 0x80, '\x00', 0x15}, 0x7}, @in={0x2, 0x4e22, @remote}]}, &(0x7f0000000a80)=0x10) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r8, 0x84, 0x18, &(0x7f0000000ac0)={r9, 0xe}, 0x8) getsockopt$CAN_RAW_LOOPBACK(r1, 0x65, 0x3, &(0x7f0000000b00), &(0x7f0000000b40)=0x4) sendmsg$AUDIT_SIGNAL_INFO(r3, &(0x7f0000000c40)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x10, 0x3f2, 0x300, 0x70bd28, 0x25dfdbfd, "", ["", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000000) 93.522104ms ago: executing program 3 (id=3562): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x6, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x19, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xa7e3}, 0x94) r1 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0xf, &(0x7f0000000000), 0x4) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = socket(0x10, 0x80003, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xb, "0000000000020400000000000080ffff"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x5}, 0x80, &(0x7f0000000540)=[{&(0x7f0000000040)="2703022b590200330000002f1eafbcf706e1050000008864000f1102ee16005782973d2bd4b82b4a8291a14b8a34f90186cee844000000080000000019b0fb0bba", 0x41}, {&(0x7f0000000440)="63f805d76494962b72959832930469edc7b7d050139bf7ada32bc9e37eed1153ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d3333ce2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb0000000000000000", 0x87}, {&(0x7f0000000500)="6fe4dd9eeba3271dc700b581440284", 0xfeb9}, {&(0x7f00000001c0)="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", 0x259}], 0x4}, 0x20004000) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000005f40), r0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xa, &(0x7f0000000680)=ANY=[@ANYBLOB="1808000008f40000000000000000e6ff851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000002c0000000000000018000000000000000000000000000000950000000000000095"], &(0x7f0000000000)='GPL\x00', 0x4}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000040)={r6, 0xe0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x8, &(0x7f0000001380)}}, 0x10) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$IPSET_CMD_LIST(r7, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f0000000600)={0x64, 0x7, 0x6, 0x804, 0x0, 0x0, {0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x5}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x7}]}, 0x64}, 0x1, 0x0, 0x0, 0x1}, 0x4000814) r8 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r8, 0x107, 0x5, &(0x7f00000000c0)=@req={0x8000, 0xb4f, 0x300, 0x1daf6}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0xa, 0xf, &(0x7f00000027c0)=@ringbuf={{}, {{0x18, 0x1, 0x0}, {}, {}, {0x85, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x20}}, {}, [], {{0x5, 0x1, 0xb, 0xa}, {}, {0x85, 0x0, 0x0, 0xa0}}}, &(0x7f00000000c0)='syzkaller\x00'}, 0x94) setsockopt$packet_int(r8, 0x107, 0xe, &(0x7f0000000080)=0x3fd, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) close(0x3) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000006000)={&(0x7f0000000000)={0x38, r5, 0x219, 0x70bd2b, 0x25dfdbfe, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0x200000000000000}}, @IEEE802154_ATTR_DEV_NAME={0xfffffc1f, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy1\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0xc0}, 0x4080) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) r10 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1a, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x300, 0xed}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @tracing, r10, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200)={0xf9}, 0x92f5e}, 0x6d) sendmsg$IPCTNL_MSG_EXP_GET(r9, &(0x7f0000005c00)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000800)=ANY=[@ANYBLOB="5800000001020101000000000000000002000000440001801400018008000100ac14143a08000200ffffffff2c0001"], 0x58}, 0x1, 0x0, 0x0, 0x8000}, 0x80) 25.200765ms ago: executing program 4 (id=3563): r0 = socket(0x10, 0x3, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="400000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r1, @ANYBLOB='\b\x00', @ANYRES64=r0], 0x40}}, 0x0) (async) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x1c, &(0x7f0000000240)=[@in6={0xa, 0x4e20, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8000}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000200)={0x1, [0x0]}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x85, &(0x7f00000002c0)={r3, 0x88, "0200000000000000703fcd09bdf0b493d4323725cdcff2e2e49f89843a5318d5ba093aa761132b512e8c4eb4ec42ea38be0721115142ca827429fec4eb76aa3f3069d1d5a64a2c75a2d59986feff48dc51b23de50b4c05263064d730ae3e410e7b9faaa273a33c58412b3348c700b558041310b18d364b87808f6ec3b597fae6ac116b5bc6c564f9"}, &(0x7f00000000c0)=0x90) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f0000000080)={r3, 0x4}, 0x8) 0s ago: executing program 2 (id=3564): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) listen(r0, 0x0) ioctl$SIOCX25SFACILITIES(r0, 0x89e3, &(0x7f0000005bc0)={0x53, 0x3, 0x6, 0x8, 0xfffffff3, 0x81}) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0xa, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000d20810f0ffffffffffffff00730183ff000000009500000000000000"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_init_net_socket$x25(0x9, 0x5, 0x0) (async) listen(r0, 0x0) (async) ioctl$SIOCX25SFACILITIES(r0, 0x89e3, &(0x7f0000005bc0)={0x53, 0x3, 0x6, 0x8, 0xfffffff3, 0x81}) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0xa, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000d20810f0ffffffffffffff00730183ff000000009500000000000000"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) kernel console output (not intermixed with test programs): d:0kB anon_thp:0kB kernel_stack:64kB pagetables:132kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 434.439733][ C1] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 434.470384][T17175] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2833'. [ 434.481486][T17165] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 434.547127][T17165] lowmem_reserve[]: 0 2488 2489 2489 2489 [ 434.560986][T17165] Node 0 DMA32 free:1255088kB boost:0kB min:34160kB low:42700kB high:51240kB reserved_highatomic:0KB free_highatomic:0KB active_anon:22184kB inactive_anon:0kB active_file:4kB inactive_file:173912kB unevictable:0kB writepending:960kB zspages:0kB present:3129332kB managed:2548612kB mlocked:0kB bounce:0kB free_pcp:46808kB local_pcp:20440kB free_cma:0kB [ 434.605593][T17165] lowmem_reserve[]: 0 0 0 0 0 [ 434.610475][T17165] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:264kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 434.654260][T17165] lowmem_reserve[]: 0 0 0 0 0 [ 434.665364][T17165] Node 1 Normal free:3936472kB boost:0kB min:55736kB low:69668kB high:83600kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 434.735599][T17165] lowmem_reserve[]: 0 0 0 0 0 [ 434.741428][T17165] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 434.766132][T17165] Node 0 DMA32: 2662*4kB (UME) 959*8kB (UME) 698*16kB (UM) 240*32kB (UM) 95*64kB (M) 57*128kB (ME) 15*256kB (ME) 11*512kB (UME) 7*1024kB (UME) 6*2048kB (UME) 287*4096kB (UM) = 1255024kB [ 434.797040][T17165] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 434.810637][T17165] Node 1 Normal: 0*4kB 5*8kB (UM) 7*16kB (UM) 5*32kB (UM) 9*64kB (UM) 5*128kB (UM) 5*256kB (UM) 5*512kB (UM) 3*1024kB (UM) 0*2048kB 959*4096kB (M) = 3936504kB [ 434.828232][T17165] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 434.858734][T17165] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 434.881013][T17165] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 434.909188][T17174] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0 [ 434.909254][T17165] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 434.935206][T17184] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2836'. [ 435.004309][T17191] netlink: 'syz.2.2837': attribute type 1 has an invalid length. [ 435.007982][T17165] 44178 total pagecache pages [ 435.060933][T17165] 0 pages in swap cache [ 435.098422][T17165] Free swap = 124996kB [ 435.117161][T17165] Total swap = 124996kB [ 435.126630][T17165] 2097051 pages RAM [ 435.134819][T17165] 0 pages HighMem/MovableOnly [ 435.146857][T17165] 428217 pages reserved [ 435.159653][T17165] 0 pages cma reserved [ 435.192423][ T57] net_ratelimit: 27 callbacks suppressed [ 435.192444][ T57] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 435.302393][T17191] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2837'. [ 435.327050][T17191] netlink: 'syz.2.2837': attribute type 10 has an invalid length. [ 435.342064][ T7822] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 435.351578][T17191] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2837'. [ 435.372828][T17198] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2839'. [ 435.387087][T17191] dummy0: entered promiscuous mode [ 435.402054][T17198] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2839'. [ 435.421161][T17191] bond0: (slave dummy0): Releasing active interface [ 435.454260][T17201] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 435.535229][ T12] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 435.664225][ T7820] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 435.982261][ T7826] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 436.021336][T17218] tipc: New replicast peer: 255.255.255.255 [ 436.042090][T17218] tipc: Enabled bearer , priority 10 [ 436.122220][ T57] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 436.232471][T17226] netlink: 'syz.1.2845': attribute type 23 has an invalid length. [ 436.272360][ T1003] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 436.323485][T17226] syzkaller0: entered promiscuous mode [ 436.338014][T17226] syzkaller0: entered allmulticast mode [ 436.359668][T17237] ip_tables: iptables: counters copy to user failed while replacing table [ 436.402067][ T7822] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 436.417204][T17239] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2849'. [ 436.867580][T17266] netlink: 'syz.1.2854': attribute type 1 has an invalid length. [ 436.993366][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 437.002289][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 437.828367][T17246] veth1_vlan: left promiscuous mode [ 439.032006][ T7820] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 439.054308][ T7820] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 439.122915][T17266] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR [ 439.123888][ T1003] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 439.203638][ T6874] tipc: Node number set to 965404185 [ 439.232673][ T91] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 439.282154][ T12] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 439.400188][T17303] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2859'. [ 439.835228][T17325] netlink: 'syz.2.2864': attribute type 23 has an invalid length. [ 439.984368][T17329] syzkaller0: entered promiscuous mode [ 440.046858][T17329] syzkaller0: entered allmulticast mode [ 440.145329][T17335] v: renamed from veth0_vlan [ 440.206052][ T57] net_ratelimit: 5 callbacks suppressed [ 440.206071][ T57] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 440.414051][ T7822] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 440.611980][ T7820] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 440.655735][T17348] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2868'. [ 440.696181][T17356] team_slave_1: Caught tx_queue_len zero misconfig [ 440.772961][ T7822] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 440.864150][T17362] FAULT_INJECTION: forcing a failure. [ 440.864150][T17362] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 440.893185][ T7822] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 440.945310][T17362] CPU: 1 UID: 0 PID: 17362 Comm: syz.4.2871 Not tainted syzkaller #0 PREEMPT(full) [ 440.945341][T17362] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 440.945354][T17362] Call Trace: [ 440.945362][T17362] [ 440.945372][T17362] dump_stack_lvl+0xe8/0x150 [ 440.945408][T17362] should_fail_ex+0x40c/0x560 [ 440.945541][T17362] _copy_from_user+0x2d/0xb0 [ 440.945624][T17362] do_tcp_getsockopt+0x221/0x2980 [ 440.945714][T17362] ? __pfx_do_tcp_getsockopt+0x10/0x10 [ 440.945734][T17362] ? sock_recv_errqueue+0x540/0x5e0 [ 440.945790][T17362] ? aa_file_perm+0x18b/0x15f0 [ 440.945816][T17362] ? ktime_get+0x45/0x220 [ 440.945885][T17362] ? aa_label_sk_perm+0x532/0x6e0 [ 440.945925][T17362] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 440.945952][T17362] ? ktime_get+0x45/0x220 [ 440.945978][T17362] ? ktime_get+0x45/0x220 [ 440.946001][T17362] ? seqcount_lockdep_reader_access+0xd4/0x100 [ 440.946028][T17362] ? ktime_get+0x1f5/0x220 [ 440.946055][T17362] ? __lock_acquire+0x683/0x2cf0 [ 440.946097][T17362] ? __pfx_clockevents_program_event+0x10/0x10 [ 440.946151][T17362] ? __might_fault+0xaf/0x130 [ 440.946184][T17362] ? __might_fault+0xaf/0x130 [ 440.946216][T17362] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 440.946247][T17362] tcp_getsockopt+0x83/0x130 [ 440.946267][T17362] ? sock_recv_errqueue+0x540/0x5e0 [ 440.946297][T17362] ? sock_recv_errqueue+0x540/0x5e0 [ 440.946330][T17362] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 440.946361][T17362] do_sock_getsockopt+0x51d/0x7e0 [ 440.946391][T17362] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 440.946432][T17362] ? __fget_files+0x3a2/0x420 [ 440.946457][T17362] ? __fget_files+0x2a/0x420 [ 440.946491][T17362] __x64_sys_getsockopt+0x1a4/0x240 [ 440.946520][T17362] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 440.946548][T17362] do_syscall_64+0x174/0x580 [ 440.946576][T17362] ? trace_irq_disable+0x3b/0x140 [ 440.946601][T17362] ? clear_bhb_loop+0x70/0xc0 [ 440.946627][T17362] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 440.946662][T17362] RIP: 0033:0x7f5856b9e0d9 [ 440.946683][T17362] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 440.946699][T17362] RSP: 002b:00007f58579b4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 440.946722][T17362] RAX: ffffffffffffffda RBX: 00007f5856e26180 RCX: 00007f5856b9e0d9 [ 440.946737][T17362] RDX: 0000000000000023 RSI: 0000000000000006 RDI: 0000000000000004 [ 440.946749][T17362] RBP: 00007f58579b4090 R08: 0000200000000380 R09: 0000000000000000 [ 440.946762][T17362] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000001 [ 440.946775][T17362] R13: 00007f5856e26218 R14: 00007f5856e26180 R15: 00007fff4d078348 [ 440.946808][T17362] [ 441.268677][ T1003] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 441.292376][ T1003] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 441.345464][ T7822] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 441.452925][ T12] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 441.512603][ T57] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 441.564336][T17365] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2872'. [ 441.588790][ T7822] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 441.716959][T17386] syzkaller0: entered promiscuous mode [ 441.732788][T17386] syzkaller0: entered allmulticast mode [ 441.893860][ T7816] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 441.920949][T17397] xt_hashlimit: size too large, truncated to 1048576 [ 441.956411][T17399] netlink: 'syz.1.2880': attribute type 23 has an invalid length. [ 442.013853][ T1003] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 442.063944][T17403] syzkaller0: entered promiscuous mode [ 442.097076][T17403] syzkaller0: entered allmulticast mode [ 442.141990][ T7816] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 442.707260][T17422] 8021q: adding VLAN 0 to HW filter on device bond11 [ 443.049451][T17448] netlink: 'syz.3.2891': attribute type 10 has an invalid length. [ 443.281080][T17448] team0: Port device dummy0 added [ 443.307412][T17467] ip6t_srh: unknown srh match flags 4000 [ 443.320199][T17453] veth1_to_bond: entered allmulticast mode [ 443.579710][T17473] xt_hashlimit: size too large, truncated to 1048576 [ 443.765820][T17481] xfrm0 speed is unknown, defaulting to 1000 [ 444.008849][T17503] netlink: 'syz.1.2898': attribute type 23 has an invalid length. [ 444.132390][T17490] syzkaller0: entered promiscuous mode [ 444.181235][T17490] syzkaller0: entered allmulticast mode [ 444.454279][T17517] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2903'. [ 444.505493][T17517] ip6gre2: entered promiscuous mode [ 444.513631][T17517] ip6gre2: entered allmulticast mode [ 444.566194][ T91] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 444.595040][T12199] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 444.603539][ T91] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 444.810360][T17532] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2907'. [ 444.852217][T12199] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 444.880404][T17527] syzkaller0: entered promiscuous mode [ 444.902060][T17527] syzkaller0: entered allmulticast mode [ 444.927557][T17481] wg2 speed is unknown, defaulting to 1000 [ 445.020689][T17527] tipc: Enabled bearer , priority 0 [ 445.055759][T17538] netlink: 'syz.4.2908': attribute type 4 has an invalid length. [ 445.122401][T17527] tipc: Resetting bearer [ 445.252689][ T50] block nbd2: Receive control failed (result -32) [ 445.315940][T12199] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 445.363936][T17525] tipc: Resetting bearer [ 445.450818][T17525] tipc: Disabling bearer [ 445.526338][ T12] net_ratelimit: 17 callbacks suppressed [ 445.526361][ T12] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 445.689686][ T7822] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 445.746072][T17555] netlink: 1752 bytes leftover after parsing attributes in process `syz.4.2912'. [ 445.832070][ T7826] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 446.000554][T17561] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2913'. [ 446.064336][T17561] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2913'. [ 446.076485][ T12] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 446.148272][ T5618] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 446.157786][ T5618] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 446.172873][ T5618] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 446.197051][ T5618] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 446.207404][ T5618] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 446.222259][ T7826] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 446.659919][T17573] ip6tnl2: entered allmulticast mode [ 446.667042][T17576] žÿ: renamed from team_slave_1 (while UP) [ 446.696811][T17574] netlink: 'syz.4.2915': attribute type 23 has an invalid length. [ 446.812098][ T7820] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 446.955000][ T1003] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 447.075099][T17594] netlink: 'syz.1.2918': attribute type 1 has an invalid length. [ 447.090346][T17594] netlink: 'syz.1.2918': attribute type 7 has an invalid length. [ 447.098398][ T7820] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 447.122724][T17594] netlink: 'syz.1.2918': attribute type 8 has an invalid length. [ 447.144605][T17594] netlink: 208 bytes leftover after parsing attributes in process `syz.1.2918'. [ 447.169954][T17594] NCSI netlink: No device for ifindex 1073545264 [ 447.353464][T17594] smc: adding net device wg2 with user defined pnetid SYZ0 [ 447.394689][ T7820] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 447.449587][T17616] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2922'. [ 447.522090][ T7822] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 447.758915][T17622] netlink: 1 bytes leftover after parsing attributes in process `syz.1.2923'. [ 447.894496][T17563] xfrm0 speed is unknown, defaulting to 1000 [ 448.026716][T17636] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2926'. [ 448.233754][T17631] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2926'. [ 448.257779][T17631] hsr_slave_0: left promiscuous mode [ 448.295952][T17631] hsr_slave_1: left promiscuous mode [ 448.354234][ T50] Bluetooth: hci5: command tx timeout [ 448.432148][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 448.556320][T17650] syzkaller1: entered promiscuous mode [ 448.579081][T17650] syzkaller1: entered allmulticast mode [ 448.725331][T17563] wg2 speed is unknown, defaulting to 1000 [ 448.755988][T17652] netlink: 'syz.0.2930': attribute type 23 has an invalid length. [ 448.951031][T17664] netlink: 260 bytes leftover after parsing attributes in process `syz.2.2932'. [ 448.997375][T17662] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 449.398803][T17691] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2937'. [ 449.628593][T17563] bridge0: port 1(bridge_slave_0) entered blocking state [ 449.636345][T17563] bridge0: port 1(bridge_slave_0) entered disabled state [ 449.643762][T17563] bridge_slave_0: entered allmulticast mode [ 449.658810][T17563] bridge_slave_0: entered promiscuous mode [ 449.676900][T17563] bridge0: port 2(bridge_slave_1) entered blocking state [ 449.686631][T17703] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2939'. [ 449.695663][T17563] bridge0: port 2(bridge_slave_1) entered disabled state [ 449.695840][T17563] bridge_slave_1: entered allmulticast mode [ 449.712367][T17563] bridge_slave_1: entered promiscuous mode [ 449.815328][T17701] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2938'. [ 449.936126][T17563] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 450.026226][T17563] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 450.146948][T17721] netlink: 'syz.2.2942': attribute type 1 has an invalid length. [ 450.175508][T17721] netlink: 244 bytes leftover after parsing attributes in process `syz.2.2942'. [ 450.193832][ T5269] v: left promiscuous mode [ 450.239286][T17563] team0: Port device team_slave_0 added [ 450.278657][T17563] team0: Port device team_slave_1 added [ 450.297633][ T6874] v: entered promiscuous mode [ 450.405239][T17730] netlink: 'syz.1.2945': attribute type 23 has an invalid length. [ 450.467715][ T50] Bluetooth: hci5: command tx timeout [ 450.516453][T17563] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 450.549669][T17563] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 450.577826][T17563] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 450.605474][T17563] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 450.630590][T17563] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 450.661971][T17563] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 450.906791][T17563] hsr_slave_0: entered promiscuous mode [ 450.924413][T17563] hsr_slave_1: entered promiscuous mode [ 450.945067][T17563] debugfs: 'hsr0' already exists in 'hsr' [ 450.958038][T17563] Cannot create hsr debugfs directory [ 451.048737][ T91] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 451.373561][ T91] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 451.663473][ T36] net_ratelimit: 11 callbacks suppressed [ 451.663494][ T36] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 451.766856][ T91] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 452.440101][ T91] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 452.515937][ T50] Bluetooth: hci5: command tx timeout [ 452.525693][ T13] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 452.547989][T17829] __nla_validate_parse: 1 callbacks suppressed [ 452.548038][T17829] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2960'. [ 452.611066][T17823] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2958'. [ 452.686080][T17833] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2960'. [ 452.738750][T17823] bridge0: entered allmulticast mode [ 452.744861][T17836] netlink: 'syz.1.2960': attribute type 9 has an invalid length. [ 452.756502][T17827] veth0_virt_wifi: left allmulticast mode [ 452.792535][T17836] netlink: 7 bytes leftover after parsing attributes in process `syz.1.2960'. [ 452.809771][T17827] veth0_virt_wifi: left promiscuous mode [ 452.819127][T17824] netlink: 5176 bytes leftover after parsing attributes in process `syz.0.2957'. [ 452.838945][T17827] bridge0: port 1(veth0_virt_wifi) entered disabled state [ 452.892556][T17842] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2961'. [ 453.007661][ T13] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 453.194714][ T36] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 453.324856][ T7828] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 453.343702][T17847] netlink: 'syz.1.2962': attribute type 23 has an invalid length. [ 453.619372][T17853] syzkaller0: entered promiscuous mode [ 453.628536][T17853] syzkaller0: entered allmulticast mode [ 453.732399][ T91] vlan3: left allmulticast mode [ 453.743785][ T91] dummy0: left allmulticast mode [ 453.773975][ T91] vlan3: left promiscuous mode [ 453.783049][ T91] dummy0: left promiscuous mode [ 453.800099][ T91] bridge0: port 4(vlan3) entered disabled state [ 453.829129][ T91] veth0_virt_wifi: left allmulticast mode [ 453.836640][ T91] veth0_virt_wifi: left promiscuous mode [ 453.847191][ T91] bridge0: port 3(veth0_virt_wifi) entered disabled state [ 453.866043][ T91] bridge_slave_1: left allmulticast mode [ 453.879488][ T91] bridge_slave_1: left promiscuous mode [ 453.893287][ T91] bridge0: port 2(bridge_slave_1) entered disabled state [ 453.909978][ T91] bridge_slave_0: left allmulticast mode [ 453.916392][ T91] bridge_slave_0: left promiscuous mode [ 453.922704][ T91] bridge0: port 1(bridge_slave_0) entered disabled state [ 453.947337][ T91] dvmrp0: left allmulticast mode [ 454.045395][ T91] bond9 (unregistering): (slave ip6gretap0): Releasing active interface [ 454.337929][ T91] bond1 (unregistering): Released all slaves [ 454.358419][ T91] bond2 (unregistering): Released all slaves [ 454.379094][ T91] bond3 (unregistering): Released all slaves [ 454.400436][ T91] bond4 (unregistering): Released all slaves [ 454.423967][ T91] bond5 (unregistering): Released all slaves [ 454.443558][ T91] bond6 (unregistering): (slave veth5): Removing an active aggregator [ 454.454467][ T91] bond6 (unregistering): (slave veth5): Releasing backup interface [ 454.473406][ T91] bond6 (unregistering): Released all slaves [ 454.491301][ T91] bond7 (unregistering): (slave lo): Releasing backup interface [ 454.499764][ T91] bond7 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 454.512537][ T91] bond7 (unregistering): Released all slaves [ 454.534550][ T91] bond8 (unregistering): Released all slaves [ 454.551630][ T91] bond9 (unregistering): Released all slaves [ 454.577813][ T91] bond10 (unregistering): Released all slaves [ 454.592013][ T50] Bluetooth: hci5: command tx timeout [ 454.599819][ T91] bond0 (unregistering): Released all slaves [ 454.617871][ T91] bond11 (unregistering): Released all slaves [ 454.810100][T17892] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2972'. [ 454.862854][T17893] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 455.018243][T17899] netlink: 660 bytes leftover after parsing attributes in process `syz.2.2973'. [ 455.051639][T17899] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2973'. [ 456.934545][T17857] xfrm0 speed is unknown, defaulting to 1000 [ 457.018900][ T91] tipc: Disabling bearer [ 457.042431][ T91] tipc: Left network mode [ 457.063947][ T12] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 457.210882][T17909] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2974'. [ 457.332023][ T13] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 457.553352][ T12] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 457.739947][ T3372] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 457.830487][ T91] IPVS: stopping master sync thread 12985 ... [ 458.292098][ T7816] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 458.331386][T17857] wg2 speed is unknown, defaulting to 1000 [ 458.349459][T17941] syzkaller1: entered promiscuous mode [ 458.367055][T17941] syzkaller1: entered allmulticast mode [ 458.729972][T17957] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2984'. [ 458.742794][T17957] netlink: 43 bytes leftover after parsing attributes in process `syz.1.2984'. [ 458.761801][T17957] netlink: 43 bytes leftover after parsing attributes in process `syz.1.2984'. [ 458.779224][T17956] netlink: 'syz.2.2983': attribute type 23 has an invalid length. [ 458.876185][ T7816] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 458.944781][T17953] syzkaller0: entered promiscuous mode [ 458.950745][T17953] syzkaller0: entered allmulticast mode [ 459.007208][T17563] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 459.059818][T17563] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 459.761382][T17971] netlink: 'syz.1.2988': attribute type 1 has an invalid length. [ 461.086338][T17563] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 461.096616][T17563] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 461.152280][ T7816] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 461.176807][T17563] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 461.258812][T17563] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 461.452994][T17563] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 461.478963][T17563] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 461.621972][ T7816] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 461.766941][ T7816] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 461.870377][T17563] 8021q: adding VLAN 0 to HW filter on device bond0 [ 461.924345][ T3372] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 461.961666][T17563] 8021q: adding VLAN 0 to HW filter on device team0 [ 461.992956][T18013] FAULT_INJECTION: forcing a failure. [ 461.992956][T18013] name failslab, interval 1, probability 0, space 0, times 0 [ 462.018762][ T3372] bridge0: port 1(bridge_slave_0) entered blocking state [ 462.026023][ T3372] bridge0: port 1(bridge_slave_0) entered forwarding state [ 462.063594][T18013] CPU: 0 UID: 0 PID: 18013 Comm: syz.1.2996 Not tainted syzkaller #0 PREEMPT(full) [ 462.063629][T18013] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 462.063641][T18013] Call Trace: [ 462.063667][T18013] [ 462.063677][T18013] dump_stack_lvl+0xe8/0x150 [ 462.063712][T18013] should_fail_ex+0x40c/0x560 [ 462.063740][T18013] should_failslab+0xa8/0x100 [ 462.063805][T18013] kmem_cache_alloc_node_noprof+0xb3/0x610 [ 462.063829][T18013] ? local_lock_release+0x9c/0x160 [ 462.063865][T18013] ? __alloc_skb+0x1d7/0x7a0 [ 462.063883][T18013] ? __alloc_skb+0x1d7/0x7a0 [ 462.063909][T18013] __alloc_skb+0x1d7/0x7a0 [ 462.063933][T18013] netlink_ack+0x136/0xb30 [ 462.064037][T18013] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 462.064094][T18013] ? ref_tracker_free+0x689/0x830 [ 462.064160][T18013] ? __pfx_ref_tracker_free+0x10/0x10 [ 462.064205][T18013] netlink_rcv_skb+0x2a4/0x4a0 [ 462.064231][T18013] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 462.064255][T18013] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 462.064276][T18013] ? lockdep_hardirqs_on+0x7a/0x110 [ 462.064334][T18013] netlink_unicast+0x7bb/0x940 [ 462.064369][T18013] netlink_sendmsg+0x813/0xb40 [ 462.064432][T18013] ? __pfx_netlink_sendmsg+0x10/0x10 [ 462.064462][T18013] ? aa_sock_msg_perm+0xf1/0x1b0 [ 462.064500][T18013] ? __pfx_netlink_sendmsg+0x10/0x10 [ 462.064524][T18013] sock_sendmsg_nosec+0x13a/0x180 [ 462.064555][T18013] ____sys_sendmsg+0x54e/0x850 [ 462.064585][T18013] ? __pfx_____sys_sendmsg+0x10/0x10 [ 462.064618][T18013] ? import_iovec+0x73/0xa0 [ 462.064679][T18013] ___sys_sendmsg+0x2a5/0x360 [ 462.064702][T18013] ? __lock_acquire+0x683/0x2cf0 [ 462.064735][T18013] ? __pfx____sys_sendmsg+0x10/0x10 [ 462.064797][T18013] ? __fget_files+0x2a/0x420 [ 462.064823][T18013] ? __fget_files+0x3a2/0x420 [ 462.064861][T18013] __x64_sys_sendmsg+0x1b1/0x290 [ 462.064899][T18013] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 462.064938][T18013] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 462.064959][T18013] do_syscall_64+0x174/0x580 [ 462.064986][T18013] ? trace_irq_disable+0x3b/0x140 [ 462.065009][T18013] ? clear_bhb_loop+0x70/0xc0 [ 462.065033][T18013] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 462.065070][T18013] RIP: 0033:0x7f2758f9e0d9 [ 462.065103][T18013] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 462.065118][T18013] RSP: 002b:00007f2759f1e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 462.065140][T18013] RAX: ffffffffffffffda RBX: 00007f2759226090 RCX: 00007f2758f9e0d9 [ 462.065152][T18013] RDX: 0000000020040000 RSI: 0000200000000140 RDI: 0000000000000003 [ 462.065163][T18013] RBP: 00007f2759f1e090 R08: 0000000000000000 R09: 0000000000000000 [ 462.065173][T18013] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 462.065193][T18013] R13: 00007f2759226128 R14: 00007f2759226090 R15: 00007ffccd75e698 [ 462.065222][T18013] [ 462.422259][ T7828] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 462.462394][T18016] xt_hashlimit: size too large, truncated to 1048576 [ 462.488789][ T3372] bridge0: port 2(bridge_slave_1) entered blocking state [ 462.496052][ T3372] bridge0: port 2(bridge_slave_1) entered forwarding state [ 462.572579][ T7816] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 462.586461][T18020] netlink: 'syz.2.2999': attribute type 23 has an invalid length. [ 462.633584][ T91] hsr_slave_0: left promiscuous mode [ 462.640432][ T91] hsr_slave_1: left promiscuous mode [ 462.652895][T18023] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3000'. [ 462.670327][ T91] v: left promiscuous mode [ 463.356982][ T91] team0 (unregistering): Port device team_slave_1 removed [ 463.401793][ T91] team0 (unregistering): Port device team_slave_0 removed [ 463.537875][ T91] team0 (unregistering): Port device dummy0 removed [ 463.758416][T18024] syzkaller0: entered promiscuous mode [ 463.770454][T18024] syzkaller0: entered allmulticast mode [ 466.414849][ T7816] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 466.509600][T17563] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 466.564845][T17563] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 466.623991][ T36] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 466.700096][ T91] IPVS: stop unused estimator thread 0... [ 466.854321][T18113] syzkaller0: entered promiscuous mode [ 466.860023][T18113] syzkaller0: entered allmulticast mode [ 466.882820][T18125] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3010'. [ 467.648461][T18157] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3012'. [ 469.025037][T18131] syzkaller1: entered promiscuous mode [ 469.033295][T18131] syzkaller1: entered allmulticast mode [ 469.243287][ T36] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 469.413960][T18172] netlink: 'syz.1.3017': attribute type 23 has an invalid length. [ 469.433733][ T7816] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 469.476648][T18178] netlink: 'syz.4.3018': attribute type 11 has an invalid length. [ 469.531428][T18178] netlink: 140 bytes leftover after parsing attributes in process `syz.4.3018'. [ 469.584572][T18173] syzkaller0: entered promiscuous mode [ 469.590636][T18173] syzkaller0: entered allmulticast mode [ 469.602418][ T3372] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 469.836115][T18196] netlink: 260 bytes leftover after parsing attributes in process `syz.0.3023'. [ 469.890608][T18197] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3022'. [ 471.733407][T18189] bridge6: entered promiscuous mode [ 471.745728][T17563] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 471.864089][ T7816] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 471.876849][T18205] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input5 [ 471.934146][T17563] veth0_vlan: entered promiscuous mode [ 471.977319][T17563] veth1_vlan: entered promiscuous mode [ 471.984267][T18210] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3025'. [ 472.008753][T18210] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3025'. [ 472.024126][ T7816] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 472.078475][T18215] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3028'. [ 472.078719][T17563] veth0_macvtap: entered promiscuous mode [ 472.102955][T17563] veth1_macvtap: entered promiscuous mode [ 472.126324][T17563] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 472.141548][T18215] unsupported nlmsg_type 40 [ 472.152428][ T57] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 472.169040][T17563] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 472.263069][ T7816] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 472.294970][ T7816] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 472.342226][ T7828] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 472.383427][ T36] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 472.411565][T18223] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3030'. [ 472.505870][T18221] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3031'. [ 472.519577][ T36] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 472.567977][T18219] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3030'. [ 472.591555][ T7816] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 472.600392][T18221] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3031'. [ 472.610868][ T7816] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 472.638933][T18221] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3031'. [ 472.653533][ T7816] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 472.794149][ T7816] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 472.886049][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 472.924023][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 472.934904][ T57] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 473.018588][T17192] udevd[17192]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 473.210463][T18247] netlink: 'syz.0.3036': attribute type 23 has an invalid length. [ 473.322338][T18249] syzkaller0: entered promiscuous mode [ 473.331359][T18249] syzkaller0: entered allmulticast mode [ 473.593529][T18265] Cannot find set identified by id 0 to match [ 473.673003][T18265] netlink: 156 bytes leftover after parsing attributes in process `syz.3.3040'. [ 473.946114][ T5618] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 473.970869][ T5618] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 473.980243][ T5618] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 474.022611][ T5618] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 474.047734][ T5618] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 476.098120][T18259] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3038'. [ 476.112641][ T50] Bluetooth: hci1: command tx timeout [ 476.252388][ T13] net_ratelimit: 3 callbacks suppressed [ 476.252409][ T13] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 476.462537][ T36] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 476.584065][ T13] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 476.723019][ T36] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 476.801339][T18271] xfrm0 speed is unknown, defaulting to 1000 [ 476.853438][ T13] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 476.982233][ T7828] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 477.122971][ T36] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 477.157524][T18312] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 477.262605][ T36] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 477.373754][T18271] wg2 speed is unknown, defaulting to 1000 [ 477.542196][T18318] __nla_validate_parse: 5 callbacks suppressed [ 477.542217][T18318] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3052'. [ 477.560308][ T36] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 477.667001][T18327] xt_hashlimit: size too large, truncated to 1048576 [ 477.692446][ T7816] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 477.802801][T18339] netlink: 104 bytes leftover after parsing attributes in process `syz.0.3056'. [ 477.816281][T18339] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3056'. [ 477.823289][ T30] audit: type=1800 audit(1786477039.350:6): pid=18334 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3054" name="memory.events" dev="tmpfs" ino=3080 res=0 errno=0 [ 477.927444][T18339] netlink: 388 bytes leftover after parsing attributes in process `syz.0.3056'. [ 478.193697][ T50] Bluetooth: hci1: command tx timeout [ 478.483427][T18271] bridge0: port 1(bridge_slave_0) entered blocking state [ 478.506734][T18271] bridge0: port 1(bridge_slave_0) entered disabled state [ 478.537400][T18271] bridge_slave_0: entered allmulticast mode [ 478.563940][T18271] bridge_slave_0: entered promiscuous mode [ 478.577225][T18375] netlink: 'syz.0.3066': attribute type 5 has an invalid length. [ 478.585684][T18271] bridge0: port 2(bridge_slave_1) entered blocking state [ 478.592431][T18375] netlink: 'syz.0.3066': attribute type 9 has an invalid length. [ 478.610910][T18271] bridge0: port 2(bridge_slave_1) entered disabled state [ 478.611391][T18375] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3066'. [ 478.630656][T18271] bridge_slave_1: entered allmulticast mode [ 478.650180][T18271] bridge_slave_1: entered promiscuous mode [ 478.689059][T18379] xt_NFQUEUE: number of total queues is 0 [ 478.745025][T18371] xfrm0 speed is unknown, defaulting to 1000 [ 478.788298][T18271] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 478.832437][T18271] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 479.128617][T18379] ip6gre2: entered promiscuous mode [ 479.146584][T18394] netlink: 104 bytes leftover after parsing attributes in process `syz.0.3068'. [ 479.157800][T18379] ip6gre2: entered allmulticast mode [ 479.178095][T18394] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3068'. [ 479.197080][T18271] team0: Port device team_slave_0 added [ 479.228558][T18271] team0: Port device team_slave_1 added [ 479.259045][T18396] netlink: 388 bytes leftover after parsing attributes in process `syz.0.3068'. [ 479.400428][T18271] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 479.419647][T18271] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 479.475211][T18271] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 479.519125][T18271] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 479.528410][T18271] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 479.587605][T18271] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 479.604950][T18371] wg2 speed is unknown, defaulting to 1000 [ 479.610898][T18377] xfrm0 speed is unknown, defaulting to 1000 [ 479.639384][T18408] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3070'. [ 479.670364][T18410] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3072'. [ 479.818026][T18271] hsr_slave_0: entered promiscuous mode [ 479.833191][T18271] hsr_slave_1: entered promiscuous mode [ 479.846984][T18271] debugfs: 'hsr0' already exists in 'hsr' [ 479.863314][T18271] Cannot create hsr debugfs directory [ 480.175140][T18430] netlink: 'syz.3.3078': attribute type 8 has an invalid length. [ 480.227563][T18435] x_tables: ip_tables: REDIRECT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 480.284750][ T50] Bluetooth: hci1: command tx timeout [ 480.314213][T18377] wg2 speed is unknown, defaulting to 1000 [ 480.426587][T18438] netlink: 'syz.3.3081': attribute type 1 has an invalid length. [ 480.445463][T18439] netlink: 'syz.3.3081': attribute type 1 has an invalid length. [ 480.468359][T18444] SET target dimension over the limit! [ 480.704222][T18438] veth1_to_team: entered promiscuous mode [ 480.733459][T18438] gretap0: entered promiscuous mode [ 480.760572][T18438] hsr1: entered promiscuous mode [ 480.921388][T18455] veth0: entered promiscuous mode [ 481.707968][T18447] veth0: left promiscuous mode [ 481.783112][ T57] net_ratelimit: 63 callbacks suppressed [ 481.783132][ T57] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 481.904425][ T57] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 482.004279][T18472] netlink: 'syz.3.3091': attribute type 1 has an invalid length. [ 482.012507][T18472] netlink: 'syz.3.3091': attribute type 2 has an invalid length. [ 482.033100][ T7828] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 482.152047][ T57] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 482.281993][ T3372] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 482.354740][ T50] Bluetooth: hci1: command tx timeout [ 482.429279][ T57] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 482.622367][T18503] netlink: 'syz.2.3098': attribute type 1 has an invalid length. [ 482.636376][T18494] bond0: entered promiscuous mode [ 482.646892][T18494] batadv0: entered promiscuous mode [ 482.668401][T18494] debugfs: 'hsr0' already exists in 'hsr' [ 482.678010][T18494] Cannot create hsr debugfs directory [ 482.696841][T18494] hsr0: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 482.706975][T18494] hsr0: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 482.720126][T18494] 8021q: adding VLAN 0 to HW filter on device hsr0 [ 482.728427][T18494] bond0: left promiscuous mode [ 482.734401][T18494] batadv0: left promiscuous mode [ 482.755607][T18271] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 482.766514][T18271] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 482.775620][T18271] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 482.786384][T18271] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 482.869150][T18503] 8021q: adding VLAN 0 to HW filter on device bond13 [ 482.887664][T18505] __nla_validate_parse: 11 callbacks suppressed [ 482.887685][T18505] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3096'. [ 482.941935][ T36] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 482.992443][T18507] bond13: (slave geneve1): making interface the new active one [ 483.024017][T18507] bond13: (slave geneve1): Enslaving as an active interface with an up link [ 483.052801][ T3372] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 483.069184][T18271] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 483.101621][T18271] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 483.123882][T18518] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3100'. [ 483.133481][T18271] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 483.242658][T18523] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3100'. [ 483.294248][T18526] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3100'. [ 483.304109][T18525] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3102'. [ 483.340898][T18271] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 483.364526][ T7816] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 483.393288][ T7816] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 483.472806][ T36] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 483.523145][ T36] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 483.652139][ T3372] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 483.732155][T18545] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3106'. [ 483.793216][ T7816] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 483.878913][T18271] 8021q: adding VLAN 0 to HW filter on device bond0 [ 483.899251][T18549] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3107'. [ 483.926491][T18271] 8021q: adding VLAN 0 to HW filter on device team0 [ 483.943744][ T7816] bridge0: port 1(bridge_slave_0) entered blocking state [ 483.951026][ T7816] bridge0: port 1(bridge_slave_0) entered forwarding state [ 483.958737][T18551] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3107'. [ 483.970986][T18549] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3107'. [ 483.979033][T18551] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3107'. [ 484.010583][ T91] bridge0: port 2(bridge_slave_1) entered blocking state [ 484.017861][ T91] bridge0: port 2(bridge_slave_1) entered forwarding state [ 484.091976][ T57] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 4352 - 0 [ 484.132069][ T57] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 4352 - 0 [ 484.243887][ T57] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 4352 - 0 [ 484.292981][ T91] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 4352 - 0 [ 485.444762][T18271] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 486.039266][T18617] bond0: (slave batadv0): Releasing backup interface [ 486.100584][T18617] bridge_slave_0: left allmulticast mode [ 486.137779][T18617] bridge_slave_0: left promiscuous mode [ 486.154361][T18617] bridge0: port 1(bridge_slave_0) entered disabled state [ 486.186257][T18617] bridge_slave_1: left allmulticast mode [ 486.192270][T18617] bridge_slave_1: left promiscuous mode [ 486.198366][T18617] bridge0: port 2(bridge_slave_1) entered disabled state [ 486.223543][T18617] bond0: (slave bond_slave_0): Releasing backup interface [ 486.237126][T18617] bond0: (slave bond_slave_1): Releasing backup interface [ 486.253386][T18628] netlink: 'syz.2.3125': attribute type 16 has an invalid length. [ 486.264633][T18628] netlink: 'syz.2.3125': attribute type 17 has an invalid length. [ 486.293895][T18617] team0: Port device team_slave_0 removed [ 486.306611][T18617] team0: Port device 76žÿ removed [ 486.313311][T18617] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 486.321705][T18617] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 486.332163][T18617] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 486.339700][T18617] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 486.358510][T18620] bridge0: port 1(bridge_slave_0) entered blocking state [ 486.380468][T18620] bridge0: port 1(bridge_slave_0) entered disabled state [ 486.404400][T18620] bridge_slave_0: entered allmulticast mode [ 486.423662][T18620] bridge_slave_0: entered promiscuous mode [ 486.444594][T18620] bridge0: port 1(bridge_slave_0) entered blocking state [ 486.451892][T18620] bridge0: port 1(bridge_slave_0) entered forwarding state [ 486.493074][T18623] team0: Port device xfrm0 added [ 486.508103][T18627] tipc: Enabled bearer , priority 0 [ 486.692996][T18271] veth0_vlan: entered promiscuous mode [ 486.756040][T18271] veth1_vlan: entered promiscuous mode [ 486.876257][T18271] veth0_macvtap: entered promiscuous mode [ 486.894202][T18638] syzkaller0: entered allmulticast mode [ 486.906254][T18271] veth1_macvtap: entered promiscuous mode [ 486.917092][ T36] net_ratelimit: 17 callbacks suppressed [ 486.917115][ T36] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 486.950303][T18271] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 486.963480][T18271] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 487.042455][ T7816] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 487.212889][ T36] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 487.417793][T18648] syzkaller0: entered promiscuous mode [ 487.442212][T18648] syzkaller0: entered allmulticast mode [ 487.720480][ T3372] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 487.736194][ T3372] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 487.761207][ T6870] tipc: Node number set to 2088230229 [ 487.818716][ T91] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 487.884108][ T36] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 487.928088][T18673] TCP: TCP_TX_DELAY enabled [ 487.936177][ T91] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 487.944380][ T7816] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 487.944468][ T7816] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 487.990956][T18675] veth1_to_hsr: Caught tx_queue_len zero misconfig [ 488.020304][ T91] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 488.032362][ T7816] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 488.107224][T18675] __nla_validate_parse: 4 callbacks suppressed [ 488.107245][T18675] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3135'. [ 488.172016][ T7816] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 488.177697][T18679] netlink: 'syz.3.3137': attribute type 1 has an invalid length. [ 488.294030][T18679] bond1: (slave veth3): Enslaving as an active interface with a down link [ 488.324820][T18681] netlink: 'syz.0.3138': attribute type 1 has an invalid length. [ 488.338856][ T57] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 488.516503][T18694] netlink: Conntrack attr has 4 unknown bytes [ 488.535837][ T7828] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 488.551259][T18681] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3138'. [ 488.582901][T18694] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 488.664963][T18691] bond6: (slave geneve3): making interface the new active one [ 488.690040][T18691] bond6: (slave geneve3): Enslaving as an active interface with an up link [ 488.712139][ T7828] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 488.748485][T18681] 8021q: adding VLAN 0 to HW filter on device bond6 [ 488.813095][ T7816] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 488.850159][ T7816] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 488.916525][ T7816] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 488.952185][ T7816] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 489.004341][ T5618] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 489.020042][ T5618] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 489.030865][ T5618] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 489.039759][ T5618] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 489.055266][ T5618] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 489.118993][T18708] netlink: 236 bytes leftover after parsing attributes in process `syz.0.3143'. [ 489.494268][T18718] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3145'. [ 489.571079][T18679] bond1: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 489.639877][T18726] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 489.660737][T18726] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 489.685910][T18733] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3148'. [ 489.688091][T18726] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 489.720896][T18735] netlink: 104 bytes leftover after parsing attributes in process `syz.4.3149'. [ 489.797131][T18735] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3149'. [ 489.837412][T18735] netlink: 388 bytes leftover after parsing attributes in process `syz.4.3149'. [ 490.190294][T18761] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3153'. [ 490.351436][T18706] xfrm0 speed is unknown, defaulting to 1000 [ 490.800501][T18706] wg2 speed is unknown, defaulting to 1000 [ 490.809603][T18789] netlink: 104 bytes leftover after parsing attributes in process `syz.3.3161'. [ 491.219053][ T50] Bluetooth: hci3: command tx timeout [ 491.441732][T18791] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 492.002052][ T91] net_ratelimit: 16 callbacks suppressed [ 492.002073][ T91] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 492.287182][T18706] bridge0: port 1(bridge_slave_0) entered blocking state [ 492.308266][T18706] bridge0: port 1(bridge_slave_0) entered disabled state [ 492.316616][T18706] bridge_slave_0: entered allmulticast mode [ 492.332752][T18706] bridge_slave_0: entered promiscuous mode [ 492.349132][T18706] bridge0: port 2(bridge_slave_1) entered blocking state [ 492.374506][T18706] bridge0: port 2(bridge_slave_1) entered disabled state [ 492.399884][T18706] bridge_slave_1: entered allmulticast mode [ 492.426225][T18706] bridge_slave_1: entered promiscuous mode [ 492.600154][T18706] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 492.630838][T18841] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 492.647857][T18706] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 492.672289][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 492.696259][T18839] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 492.723965][T18706] team0: Port device team_slave_0 added [ 492.732343][ T7828] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 492.767869][T18706] team0: Port device team_slave_1 added [ 492.893182][T18706] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 492.901110][T18706] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 492.935473][T18706] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 492.964332][T18706] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 492.994190][T18706] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 493.066379][T18706] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 493.232569][ T50] Bluetooth: hci3: command tx timeout [ 493.282471][T18706] hsr_slave_0: entered promiscuous mode [ 493.294017][T18706] hsr_slave_1: entered promiscuous mode [ 493.305967][T18706] debugfs: 'hsr0' already exists in 'hsr' [ 493.314723][T18706] Cannot create hsr debugfs directory [ 493.357748][T18850] macsec1: entered promiscuous mode [ 493.372812][T18850] macsec1: entered allmulticast mode [ 493.615105][ T91] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 493.691383][T18868] __nla_validate_parse: 7 callbacks suppressed [ 493.691403][T18868] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3178'. [ 493.715091][T18863] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3177'. [ 493.772166][ T7828] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 494.013973][T18706] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 494.054526][T18706] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 494.076855][T18879] netlink: 104 bytes leftover after parsing attributes in process `syz.0.3182'. [ 494.105304][T18879] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3182'. [ 494.134034][T18880] netlink: 'syz.2.3180': attribute type 23 has an invalid length. [ 494.164821][T18881] netlink: 388 bytes leftover after parsing attributes in process `syz.0.3182'. [ 494.303829][ T7828] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 494.423265][T18706] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 494.433962][T18706] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 494.540219][T18894] netlink: 'syz.0.3185': attribute type 1 has an invalid length. [ 494.560264][T18894] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3185'. [ 494.583676][T18882] syzkaller0: entered promiscuous mode [ 494.600011][T18882] syzkaller0: entered allmulticast mode [ 494.717616][ T91] IPVS: starting estimator thread 0... [ 494.726321][T18706] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 494.729807][T18901] IPVS: fo: FWM 3 0x00000003 - no destination available [ 494.745259][T18706] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 494.851968][T18904] IPVS: using max 30 ests per chain, 72000 per kthread [ 495.327076][ T50] Bluetooth: hci3: command tx timeout [ 496.893860][ T13] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 497.011386][T18706] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 497.023744][T18706] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 497.082518][ T13] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 497.231014][ T91] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 497.324172][T18925] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 497.392332][ T50] Bluetooth: hci3: command tx timeout [ 497.439697][T18931] netlink: 228 bytes leftover after parsing attributes in process `syz.3.3197'. [ 497.523990][T18935] netlink: 'syz.4.3199': attribute type 23 has an invalid length. [ 497.532212][ T91] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 497.663511][T18937] syzkaller0: entered promiscuous mode [ 497.669790][T18937] syzkaller0: entered allmulticast mode [ 497.703594][ T91] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 497.734322][T18706] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 497.786248][T18706] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 498.596579][ T50] Bluetooth: hci2: command 0x0406 tx timeout [ 500.064754][T18706] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 500.076304][T18706] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 500.089918][T18706] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 500.119487][T18706] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 500.152987][T18706] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 500.216098][T18706] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 500.236467][T18958] netlink: 104 bytes leftover after parsing attributes in process `syz.4.3206'. [ 500.259513][T18958] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3206'. [ 500.283524][T18958] netlink: 388 bytes leftover after parsing attributes in process `syz.4.3206'. [ 500.343450][ T7816] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 500.420273][T18970] rdma_rxe: rxe_newlink: failed to add xfrm0 [ 500.458349][T18970] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3207'. [ 500.492642][ T13] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 500.579497][T18980] xt_hashlimit: size too large, truncated to 1048576 [ 500.630426][T18984] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 500.682340][T18706] 8021q: adding VLAN 0 to HW filter on device bond0 [ 500.722257][ T36] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 500.783034][T18706] 8021q: adding VLAN 0 to HW filter on device team0 [ 500.824505][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 500.831770][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 500.848299][T18990] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3213'. [ 500.888046][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 500.895334][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 500.974583][T18992] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3212'. [ 501.052398][ T36] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 501.083937][T18996] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 501.113966][T18996] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3212'. [ 501.139992][T18997] block nbd4: not configured, cannot reconfigure [ 501.178909][T18996] bond0: entered promiscuous mode [ 501.194929][T18997] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3214'. [ 501.217931][T18996] bond0: left promiscuous mode [ 501.313889][T19004] netlink: 'syz.2.3216': attribute type 1 has an invalid length. [ 501.323529][ T91] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 501.349240][T19002] netlink: 'syz.3.3215': attribute type 23 has an invalid length. [ 501.439483][T19009] netlink: 104 bytes leftover after parsing attributes in process `syz.4.3217'. [ 501.440489][T19004] bond14: option mode: invalid value (7) [ 501.469531][T19004] bond14 (unregistering): Released all slaves [ 501.509275][T19013] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3218'. [ 501.539490][T19007] syzkaller0: entered promiscuous mode [ 501.545702][T19007] syzkaller0: entered allmulticast mode [ 501.662275][T19013] 8021q: adding VLAN 0 to HW filter on device bond7 [ 501.804620][T19013] veth5: entered allmulticast mode [ 502.072715][T19034] syzkaller1: entered promiscuous mode [ 502.091257][T19034] syzkaller1: entered allmulticast mode [ 502.143582][ T7828] net_ratelimit: 4 callbacks suppressed [ 502.143604][ T7828] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 502.309881][T19048] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 502.412043][ T13] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 502.547786][T18706] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 502.602119][ T13] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 502.622609][T19062] openvswitch: netlink: Key 0 has unexpected len 4 expected 0 [ 502.722670][ T7816] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 502.741610][T18706] veth0_vlan: entered promiscuous mode [ 503.092356][T18706] veth1_vlan: entered promiscuous mode [ 503.142372][ T91] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 503.203327][T18706] veth0_macvtap: entered promiscuous mode [ 503.230342][T18706] veth1_macvtap: entered promiscuous mode [ 503.292379][ T36] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 503.313738][T18706] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 503.345008][T18706] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 503.466856][T19087] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 503.536864][ T3372] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 503.622038][ T3372] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 503.650937][ T3372] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 503.734888][ T91] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 503.767584][ T91] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 503.791521][T19095] xt_hashlimit: size too large, truncated to 1048576 [ 503.796482][ T3372] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 503.814499][ T3372] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 503.874397][ T3372] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 503.894129][ T91] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 503.899795][ T3372] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 503.910813][T19098] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 504.033141][ T36] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 504.612667][ T50] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 504.630653][ T50] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 504.639297][ T50] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 504.651527][ T50] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 504.661081][ T50] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 505.000319][ T3372] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 505.018549][ T3372] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 505.028893][ T3372] netdevsim netdevsim2 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 505.106275][ T3372] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 505.117718][ T3372] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 505.130497][ T3372] netdevsim netdevsim2 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 505.172959][T19126] xfrm0 speed is unknown, defaulting to 1000 [ 505.225305][ T3372] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 505.236004][ T3372] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 505.246886][ T3372] netdevsim netdevsim2 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 505.317889][ T3372] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 505.328472][ T3372] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 505.341462][ T3372] netdevsim netdevsim2 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 505.420267][T19126] wg2 speed is unknown, defaulting to 1000 [ 505.609091][ T3372] pim6reg: left allmulticast mode [ 505.620274][ T3372] batman_adv: batadv0: Interface deactivated: gretap3 [ 505.678312][ T3372] batman_adv: batadv0: Removing interface: macvlan2 [ 505.709289][ T3372] batman_adv: batadv0: Removing interface: ip6gretap1 [ 505.888877][ T3372] batman_adv: batadv0: Removing interface: gretap3 [ 505.937801][ T3372] bond13 (unregistering): (slave geneve1): Releasing active interface [ 505.957292][ T3372] bond9 (unregistering): (slave geneve3): Releasing active interface [ 505.990056][ T3372] bond8 (unregistering): (slave bridge1): Releasing backup interface [ 506.006785][ T3372] team0: Port device bridge2 removed [ 506.031439][ T3372] bond1 (unregistering): Released all slaves [ 506.048360][ T3372] bond0 (unregistering): Released all slaves [ 506.065519][ T3372] bond2 (unregistering): Released all slaves [ 506.083295][ T3372] bond3 (unregistering): Released all slaves [ 506.099302][ T3372] bond4 (unregistering): Released all slaves [ 506.131070][ T3372] bond5 (unregistering): Released all slaves [ 506.149803][ T3372] bond6 (unregistering): (slave bond7): Releasing backup interface [ 506.159313][ T3372] bond6 (unregistering): Released all slaves [ 506.178561][ T3372] bond7 (unregistering): Released all slaves [ 506.199289][ T3372] bond8 (unregistering): Released all slaves [ 506.233314][ T3372] bond9 (unregistering): Released all slaves [ 506.249050][ T3372] bond10 (unregistering): Released all slaves [ 506.264870][ T3372] bond11 (unregistering): Released all slaves [ 506.283479][ T3372] bond12 (unregistering): Released all slaves [ 506.305745][ T3372] bond13 (unregistering): Released all slaves [ 506.495964][ T3372] : left promiscuous mode [ 506.765791][T19126] bridge0: port 1(bridge_slave_0) entered blocking state [ 506.771323][ T50] Bluetooth: hci4: command tx timeout [ 506.785172][T19126] bridge0: port 1(bridge_slave_0) entered disabled state [ 506.793474][T19126] bridge_slave_0: entered allmulticast mode [ 506.801017][T19126] bridge_slave_0: entered promiscuous mode [ 506.816421][T19126] bridge0: port 2(bridge_slave_1) entered blocking state [ 506.823939][T19126] bridge0: port 2(bridge_slave_1) entered disabled state [ 506.832901][T19126] bridge_slave_1: entered allmulticast mode [ 506.840937][T19126] bridge_slave_1: entered promiscuous mode [ 506.904276][T19126] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 506.936061][T19126] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 506.988334][T19111] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 507.014865][T19126] team0: Port device team_slave_0 added [ 507.035806][T19126] team0: Port device team_slave_1 added [ 507.165975][T19126] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 507.173320][T19126] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 507.201089][T19126] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 507.243111][T19155] __nla_validate_parse: 5 callbacks suppressed [ 507.243133][T19155] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3247'. [ 507.338339][T19126] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 507.349821][T19126] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 507.410252][T19163] netlink: 'syz.3.3249': attribute type 1 has an invalid length. [ 507.429536][T19126] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 507.497337][ T91] net_ratelimit: 14 callbacks suppressed [ 507.497360][ T91] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 507.787032][ T91] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 507.806496][T19180] xt_hashlimit: size too large, truncated to 1048576 [ 507.839641][T19126] hsr_slave_0: entered promiscuous mode [ 507.866977][T19126] hsr_slave_1: entered promiscuous mode [ 507.894783][T19126] debugfs: 'hsr0' already exists in 'hsr' [ 507.916514][T19126] Cannot create hsr debugfs directory [ 507.923656][T19182] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 507.981595][T19189] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3256'. [ 508.082241][T19192] netlink: 388 bytes leftover after parsing attributes in process `syz.4.3256'. [ 508.425010][T19206] xt_nfacct: accounting object `' does not exist [ 508.482076][ T57] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 508.642327][ T7824] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 508.693730][T19216] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3262'. [ 508.732530][T19221] bond0: (slave ip6tnl0): refused to change device type [ 508.784313][ T57] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 508.831946][ T50] Bluetooth: hci4: command tx timeout [ 508.859579][ T5269] 8021q: adding VLAN 0 to HW filter on device eth1 [ 509.012212][ T57] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 509.154820][T19236] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3267'. [ 509.225780][T19238] netlink: 388 bytes leftover after parsing attributes in process `syz.0.3267'. [ 509.238564][ T7828] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 509.250764][T19239] xt_hashlimit: size too large, truncated to 1048576 [ 509.387279][ T7824] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 509.438088][ T3372] hsr_slave_0: left promiscuous mode [ 509.870452][T19257] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 509.952973][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 509.989637][ T3372] team0 (unregistering): Port device team_slave_1 removed [ 510.031593][ T3372] team0 (unregistering): Port device team_slave_0 removed [ 510.050776][T19269] FAULT_INJECTION: forcing a failure. [ 510.050776][T19269] name failslab, interval 1, probability 0, space 0, times 0 [ 510.077647][T19269] CPU: 1 UID: 0 PID: 19269 Comm: syz.3.3273 Not tainted syzkaller #0 PREEMPT(full) [ 510.077677][T19269] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 510.077691][T19269] Call Trace: [ 510.077699][T19269] [ 510.077708][T19269] dump_stack_lvl+0xe8/0x150 [ 510.077749][T19269] should_fail_ex+0x40c/0x560 [ 510.077779][T19269] should_failslab+0xa8/0x100 [ 510.077812][T19269] kmem_cache_alloc_node_noprof+0xb3/0x610 [ 510.077837][T19269] ? local_lock_release+0x9c/0x160 [ 510.077873][T19269] ? __alloc_skb+0x1d7/0x7a0 [ 510.077890][T19269] ? __alloc_skb+0x1d7/0x7a0 [ 510.077916][T19269] __alloc_skb+0x1d7/0x7a0 [ 510.077940][T19269] netlink_sendmsg+0x5d4/0xb40 [ 510.077978][T19269] ? __pfx_netlink_sendmsg+0x10/0x10 [ 510.078008][T19269] ? aa_sock_msg_perm+0xf1/0x1b0 [ 510.078047][T19269] ? __pfx_netlink_sendmsg+0x10/0x10 [ 510.078070][T19269] sock_sendmsg_nosec+0x13a/0x180 [ 510.078102][T19269] ____sys_sendmsg+0x54e/0x850 [ 510.078131][T19269] ? __pfx_____sys_sendmsg+0x10/0x10 [ 510.078174][T19269] ? import_iovec+0x73/0xa0 [ 510.078207][T19269] ___sys_sendmsg+0x2a5/0x360 [ 510.078229][T19269] ? __lock_acquire+0x683/0x2cf0 [ 510.078263][T19269] ? __pfx____sys_sendmsg+0x10/0x10 [ 510.078326][T19269] ? __fget_files+0x2a/0x420 [ 510.078351][T19269] ? __fget_files+0x3a2/0x420 [ 510.078387][T19269] __x64_sys_sendmsg+0x1b1/0x290 [ 510.078414][T19269] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 510.078455][T19269] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 510.078478][T19269] do_syscall_64+0x174/0x580 [ 510.078510][T19269] ? trace_irq_disable+0x3b/0x140 [ 510.078535][T19269] ? clear_bhb_loop+0x70/0xc0 [ 510.078560][T19269] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 510.078580][T19269] RIP: 0033:0x7f452999e0d9 [ 510.078599][T19269] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 510.078616][T19269] RSP: 002b:00007f452a86d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 510.078638][T19269] RAX: ffffffffffffffda RBX: 00007f4529c25fa0 RCX: 00007f452999e0d9 [ 510.078651][T19269] RDX: 0000000000004840 RSI: 0000200000000000 RDI: 0000000000000003 [ 510.078665][T19269] RBP: 00007f452a86d090 R08: 0000000000000000 R09: 0000000000000000 [ 510.078677][T19269] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 510.078689][T19269] R13: 00007f4529c26038 R14: 00007f4529c25fa0 R15: 00007ffca2e26898 [ 510.078722][T19269] [ 510.481437][ T7824] smbdirect: ib_dev[syz2] removed [ 510.633881][ T7828] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 510.888964][T19286] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3276'. [ 510.911940][ T50] Bluetooth: hci4: command tx timeout [ 510.962030][ T91] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 511.161628][T19294] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3278'. [ 511.177824][T19296] xt_hashlimit: size too large, truncated to 1048576 [ 511.207579][T19294] netlink: 388 bytes leftover after parsing attributes in process `syz.0.3278'. [ 511.434589][T19310] netlink: 'syz.0.3282': attribute type 1 has an invalid length. [ 511.519982][T19309] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3281'. [ 511.585025][T19310] 8021q: adding VLAN 0 to HW filter on device bond8 [ 511.696180][ T3372] IPVS: stop unused estimator thread 0... [ 511.796726][T19312] 8021q: adding VLAN 0 to HW filter on device bond2 [ 511.860749][T19309] 8021q: adding VLAN 0 to HW filter on device bond3 [ 511.869453][T19325] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 511.914724][T19126] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 511.926226][T19126] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 511.934878][T19126] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 511.945797][T19126] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 511.954923][T19126] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 511.974256][T19126] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 511.992812][T19126] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 512.041000][T19126] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 512.211517][T19126] 8021q: adding VLAN 0 to HW filter on device bond0 [ 512.270698][T19126] 8021q: adding VLAN 0 to HW filter on device team0 [ 512.298432][ T7816] bridge0: port 1(bridge_slave_0) entered blocking state [ 512.305737][ T7816] bridge0: port 1(bridge_slave_0) entered forwarding state [ 512.326901][ T3372] bridge0: port 2(bridge_slave_1) entered blocking state [ 512.334174][ T3372] bridge0: port 2(bridge_slave_1) entered forwarding state [ 512.555249][ T3372] net_ratelimit: 5 callbacks suppressed [ 512.555270][ T3372] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 512.704486][ T7816] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 512.746498][T19362] FAULT_INJECTION: forcing a failure. [ 512.746498][T19362] name failslab, interval 1, probability 0, space 0, times 0 [ 512.799516][T19362] CPU: 0 UID: 0 PID: 19362 Comm: syz.3.3289 Not tainted syzkaller #0 PREEMPT(full) [ 512.799545][T19362] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 512.799558][T19362] Call Trace: [ 512.799566][T19362] [ 512.799575][T19362] dump_stack_lvl+0xe8/0x150 [ 512.799610][T19362] should_fail_ex+0x40c/0x560 [ 512.799638][T19362] should_failslab+0xa8/0x100 [ 512.799670][T19362] kmem_cache_alloc_noprof+0xa6/0x5f0 [ 512.799694][T19362] ? skb_clone+0x212/0x3a0 [ 512.799815][T19362] ? skb_clone+0x212/0x3a0 [ 512.799847][T19362] skb_clone+0x212/0x3a0 [ 512.799882][T19362] __netlink_deliver_tap+0x413/0x860 [ 512.799921][T19362] ? netlink_deliver_tap+0x2e/0x1b0 [ 512.799948][T19362] netlink_deliver_tap+0x19c/0x1b0 [ 512.799974][T19362] netlink_unicast+0x77f/0x940 [ 512.800019][T19362] netlink_sendmsg+0x813/0xb40 [ 512.800055][T19362] ? __pfx_netlink_sendmsg+0x10/0x10 [ 512.800085][T19362] ? aa_sock_msg_perm+0xf1/0x1b0 [ 512.800122][T19362] ? __pfx_netlink_sendmsg+0x10/0x10 [ 512.800147][T19362] sock_sendmsg_nosec+0x13a/0x180 [ 512.800178][T19362] ____sys_sendmsg+0x54e/0x850 [ 512.800209][T19362] ? __pfx_____sys_sendmsg+0x10/0x10 [ 512.800243][T19362] ? import_iovec+0x73/0xa0 [ 512.800275][T19362] ___sys_sendmsg+0x2a5/0x360 [ 512.800297][T19362] ? __lock_acquire+0x683/0x2cf0 [ 512.800330][T19362] ? __pfx____sys_sendmsg+0x10/0x10 [ 512.800392][T19362] ? __fget_files+0x2a/0x420 [ 512.800418][T19362] ? __fget_files+0x3a2/0x420 [ 512.800456][T19362] __x64_sys_sendmsg+0x1b1/0x290 [ 512.800483][T19362] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 512.800524][T19362] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 512.800548][T19362] do_syscall_64+0x174/0x580 [ 512.800578][T19362] ? trace_irq_disable+0x3b/0x140 [ 512.800602][T19362] ? clear_bhb_loop+0x70/0xc0 [ 512.800628][T19362] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 512.800650][T19362] RIP: 0033:0x7f452999e0d9 [ 512.800668][T19362] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 512.800686][T19362] RSP: 002b:00007f452a86d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 512.800709][T19362] RAX: ffffffffffffffda RBX: 00007f4529c25fa0 RCX: 00007f452999e0d9 [ 512.800724][T19362] RDX: 0000000000004840 RSI: 0000200000000000 RDI: 0000000000000003 [ 512.800737][T19362] RBP: 00007f452a86d090 R08: 0000000000000000 R09: 0000000000000000 [ 512.800750][T19362] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 512.800761][T19362] R13: 00007f4529c26038 R14: 00007f4529c25fa0 R15: 00007ffca2e26898 [ 512.800796][T19362] [ 512.857916][ T7816] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 513.102102][ T50] Bluetooth: hci4: command tx timeout [ 513.168513][T19369] __nla_validate_parse: 2 callbacks suppressed [ 513.168532][T19369] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3291'. [ 513.198384][ T7828] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 513.236536][T19369] netlink: 388 bytes leftover after parsing attributes in process `syz.3.3291'. [ 513.322696][ T7828] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 513.415888][T19377] xt_hashlimit: size too large, truncated to 1048576 [ 513.442050][ T3271] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 513.593295][ T3372] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 513.713315][ T57] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 513.850609][T19126] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 513.902953][ T7828] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 514.022639][ T7816] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 514.040707][T19126] veth0_vlan: entered promiscuous mode [ 514.084174][T19126] veth1_vlan: entered promiscuous mode [ 514.214980][T19126] veth0_macvtap: entered promiscuous mode [ 514.223300][T19403] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 514.252322][T19126] veth1_macvtap: entered promiscuous mode [ 514.311332][T19126] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 514.359118][T19126] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 514.415998][ T7828] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 514.444444][ T7828] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 514.543814][ T3271] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 514.576576][ T3271] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 514.657009][ T7828] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 514.677340][ T7828] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 514.743261][T19418] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3301'. [ 514.756690][ T7816] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 514.788152][T19418] netlink: 388 bytes leftover after parsing attributes in process `syz.1.3301'. [ 514.790192][ T7816] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 515.122704][T19428] netlink: 104 bytes leftover after parsing attributes in process `syz.3.3303'. [ 515.197042][T19449] xt_hashlimit: size too large, truncated to 1048576 [ 515.432432][T19456] FAULT_INJECTION: forcing a failure. [ 515.432432][T19456] name failslab, interval 1, probability 0, space 0, times 0 [ 515.498699][T19456] CPU: 0 UID: 0 PID: 19456 Comm: syz.3.3307 Not tainted syzkaller #0 PREEMPT(full) [ 515.498728][T19456] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 515.498741][T19456] Call Trace: [ 515.498748][T19456] [ 515.498758][T19456] dump_stack_lvl+0xe8/0x150 [ 515.498794][T19456] should_fail_ex+0x40c/0x560 [ 515.498829][T19456] should_failslab+0xa8/0x100 [ 515.498861][T19456] __kmalloc_noprof+0xfe/0x720 [ 515.498888][T19456] ? hash_netiface_create+0x2fe/0xee0 [ 515.499009][T19456] ? hash_netiface_create+0x2fe/0xee0 [ 515.499039][T19456] hash_netiface_create+0x2fe/0xee0 [ 515.499073][T19456] ? __pfx_hash_netiface_create+0x10/0x10 [ 515.499099][T19456] ip_set_create+0xae8/0x1a50 [ 515.499168][T19456] ? ip_set_create+0x4ef/0x1a50 [ 515.499206][T19456] ? __pfx_ip_set_create+0x10/0x10 [ 515.499269][T19456] nfnetlink_rcv_msg+0xcc2/0x12b0 [ 515.499327][T19456] ? unwind_get_return_address+0x4d/0x90 [ 515.499379][T19456] ? nfnetlink_rcv_msg+0x228/0x12b0 [ 515.499420][T19456] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 515.499496][T19456] netlink_rcv_skb+0x226/0x4a0 [ 515.499522][T19456] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 515.499545][T19456] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 515.499582][T19456] ? bpf_lsm_capable+0x9/0x20 [ 515.499607][T19456] ? security_capable+0x7e/0x2c0 [ 515.499710][T19456] nfnetlink_rcv+0x2b9/0x28c0 [ 515.499736][T19456] ? __dev_queue_xmit+0x29b/0x3820 [ 515.499796][T19456] ? __local_bh_enable_ip+0xd0/0x130 [ 515.499827][T19456] ? lockdep_hardirqs_on+0x7a/0x110 [ 515.499856][T19456] ? __dev_queue_xmit+0x29b/0x3820 [ 515.499880][T19456] ? __local_bh_enable_ip+0xd0/0x130 [ 515.499900][T19456] ? __dev_queue_xmit+0x29b/0x3820 [ 515.499924][T19456] ? __dev_queue_xmit+0x1edc/0x3820 [ 515.499947][T19456] ? do_syscall_64+0x174/0x580 [ 515.499976][T19456] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 515.500016][T19456] ? __dev_queue_xmit+0x29b/0x3820 [ 515.500042][T19456] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 515.500070][T19456] ? __pfx___dev_queue_xmit+0x10/0x10 [ 515.500105][T19456] ? ref_tracker_free+0x689/0x830 [ 515.500133][T19456] ? __pfx_ref_tracker_free+0x10/0x10 [ 515.500175][T19456] ? __skb_clone+0x449/0x6c0 [ 515.500206][T19456] ? skb_clone+0x246/0x3a0 [ 515.500234][T19456] ? __netlink_deliver_tap+0x811/0x860 [ 515.500258][T19456] ? netlink_deliver_tap+0x2e/0x1b0 [ 515.500289][T19456] ? netlink_deliver_tap+0x2e/0x1b0 [ 515.500314][T19456] ? netlink_deliver_tap+0x2e/0x1b0 [ 515.500344][T19456] netlink_unicast+0x7bb/0x940 [ 515.500379][T19456] netlink_sendmsg+0x813/0xb40 [ 515.500415][T19456] ? __pfx_netlink_sendmsg+0x10/0x10 [ 515.500445][T19456] ? aa_sock_msg_perm+0xf1/0x1b0 [ 515.500481][T19456] ? __pfx_netlink_sendmsg+0x10/0x10 [ 515.500504][T19456] sock_sendmsg_nosec+0x13a/0x180 [ 515.500537][T19456] ____sys_sendmsg+0x54e/0x850 [ 515.500567][T19456] ? __pfx_____sys_sendmsg+0x10/0x10 [ 515.500601][T19456] ? import_iovec+0x73/0xa0 [ 515.500631][T19456] ___sys_sendmsg+0x2a5/0x360 [ 515.500654][T19456] ? __lock_acquire+0x683/0x2cf0 [ 515.500686][T19456] ? __pfx____sys_sendmsg+0x10/0x10 [ 515.500750][T19456] ? __fget_files+0x2a/0x420 [ 515.500774][T19456] ? __fget_files+0x3a2/0x420 [ 515.500812][T19456] __x64_sys_sendmsg+0x1b1/0x290 [ 515.500838][T19456] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 515.500882][T19456] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 515.500905][T19456] do_syscall_64+0x174/0x580 [ 515.500935][T19456] ? trace_irq_disable+0x3b/0x140 [ 515.500961][T19456] ? clear_bhb_loop+0x70/0xc0 [ 515.500987][T19456] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 515.501008][T19456] RIP: 0033:0x7f452999e0d9 [ 515.501028][T19456] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 515.501046][T19456] RSP: 002b:00007f452a86d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 515.501069][T19456] RAX: ffffffffffffffda RBX: 00007f4529c25fa0 RCX: 00007f452999e0d9 [ 515.501085][T19456] RDX: 0000000000004840 RSI: 0000200000000000 RDI: 0000000000000003 [ 515.501098][T19456] RBP: 00007f452a86d090 R08: 0000000000000000 R09: 0000000000000000 [ 515.501111][T19456] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 515.501123][T19456] R13: 00007f4529c26038 R14: 00007f4529c25fa0 R15: 00007ffca2e26898 [ 515.501166][T19456] [ 516.287823][T19470] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 516.460894][T19483] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3313'. [ 516.478781][T19477] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3313'. [ 516.851450][T19502] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3317'. [ 516.880195][T19502] vlan2: entered promiscuous mode [ 516.885775][T19502] hsr0: entered promiscuous mode [ 516.891278][T19502] vlan2: entered allmulticast mode [ 516.897195][T19502] hsr0: entered allmulticast mode [ 516.903155][T19502] hsr_slave_0: entered allmulticast mode [ 516.909109][T19502] hsr_slave_1: entered allmulticast mode [ 517.024500][T19510] netlink: 7 bytes leftover after parsing attributes in process `syz.1.3319'. [ 517.174962][T19517] xt_hashlimit: size too large, truncated to 1048576 [ 517.300751][T19526] netlink: 104 bytes leftover after parsing attributes in process `syz.0.3323'. [ 517.431354][T19535] Unknown options in mask 6 [ 517.605438][ T7816] net_ratelimit: 24 callbacks suppressed [ 517.605458][ T7816] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 517.665161][T19541] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 517.698424][T19541] tipc: Enabled bearer , priority 10 [ 517.722013][T19544] netlink: 'syz.1.3327': attribute type 1 has an invalid length. [ 517.726222][T19542] tipc: Enabling of bearer rejected, already enabled [ 517.909583][T19546] bond1: (slave bridge1): Enslaving as a backup interface with an up link [ 517.923239][ T3271] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 518.047678][T19552] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 518.062120][ T3372] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 518.182528][ T3372] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 518.324676][ T57] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 518.462971][ T3372] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 518.504987][T19571] __nla_validate_parse: 4 callbacks suppressed [ 518.505010][T19571] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3332'. [ 518.596158][T19573] IPVS: set_ctl: invalid protocol: 20551 224.0.0.1:20004 [ 518.612144][ T3372] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 518.787150][T19574] dvmrp8: entered allmulticast mode [ 518.818544][T19580] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3335'. [ 518.830591][T19583] netlink: 104 bytes leftover after parsing attributes in process `syz.2.3337'. [ 518.832306][ T57] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 518.849256][T19583] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3337'. [ 518.894527][T19583] netlink: 388 bytes leftover after parsing attributes in process `syz.2.3337'. [ 518.941587][T19584] tc action pedit 'at' offset -58298 out of bounds [ 518.952121][T19584] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3336'. [ 519.030180][T19590] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3339'. [ 519.387084][T19599] xt_hashlimit: size too large, truncated to 1048576 [ 519.462297][ T7828] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 519.799951][T19606] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 519.952642][ T3271] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 519.960850][T19616] tipc: MTU too low for tipc bearer [ 520.018876][T19618] netlink: 'syz.4.3348': attribute type 23 has an invalid length. [ 520.117804][T19619] syzkaller0: entered promiscuous mode [ 520.127783][T19619] syzkaller0: entered allmulticast mode [ 520.161356][T19621] netlink: 104 bytes leftover after parsing attributes in process `syz.0.3349'. [ 520.248033][T19623] bridge1: entered promiscuous mode [ 520.266714][T19624] netlink: 388 bytes leftover after parsing attributes in process `syz.0.3349'. [ 520.581985][T19633] rdma_op ffff8880331aa238 conn xmit_rdma 0000000000000000 [ 520.870036][T19644] xt_hashlimit: size too large, truncated to 1048576 [ 521.038370][T19641] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3355'. [ 521.817579][T19667] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 522.002349][T19656] syzkaller0: entered promiscuous mode [ 522.011194][T19656] syzkaller0: entered allmulticast mode [ 522.026153][T19661] bridge0: port 1(bridge_slave_0) entered forwarding state [ 522.335300][T19684] netlink: 'syz.1.3367': attribute type 23 has an invalid length. [ 522.404625][T19684] syzkaller0: entered promiscuous mode [ 522.410365][T19684] syzkaller0: entered allmulticast mode [ 522.508633][T19692] xt_hashlimit: size too large, truncated to 1048576 [ 522.661974][ T3372] net_ratelimit: 11 callbacks suppressed [ 522.661996][ T3372] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 522.681177][T19700] Bluetooth: MGMT ver 1.23 [ 522.780500][T19701] syz_tun: entered allmulticast mode [ 522.799713][T19698] syz_tun: left allmulticast mode [ 522.812021][ T3372] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 522.937135][T19707] vxcan3: entered promiscuous mode [ 522.962055][ T7828] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 523.087915][T19714] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 523.157914][T19719] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 523.192448][T19723] netlink: 'syz.1.3382': attribute type 4 has an invalid length. [ 523.200496][ T3271] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 523.312919][ T3271] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 523.351298][T19732] netlink: 'syz.4.3383': attribute type 23 has an invalid length. [ 523.435503][T19732] syzkaller0: entered promiscuous mode [ 523.445237][T19732] syzkaller0: entered allmulticast mode [ 523.463083][ T91] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 523.645664][T19743] xt_hashlimit: size too large, truncated to 1048576 [ 523.672002][ T91] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 523.734216][T19746] __nla_validate_parse: 5 callbacks suppressed [ 523.734237][T19746] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3390'. [ 523.783288][T19746] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3390'. [ 523.805088][ T91] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 523.824544][T19746] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3390'. [ 523.852382][T19746] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3390'. [ 523.931984][ T91] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 524.500632][T19786] netlink: 'syz.0.3402': attribute type 23 has an invalid length. [ 524.556172][T19789] FAULT_INJECTION: forcing a failure. [ 524.556172][T19789] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 524.571364][T19786] syzkaller0: entered promiscuous mode [ 524.577612][T19786] syzkaller0: entered allmulticast mode [ 524.591004][T19790] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3404'. [ 524.611911][T19789] CPU: 0 UID: 0 PID: 19789 Comm: syz.4.3403 Not tainted syzkaller #0 PREEMPT(full) [ 524.611941][T19789] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 524.611954][T19789] Call Trace: [ 524.611963][T19789] [ 524.611973][T19789] dump_stack_lvl+0xe8/0x150 [ 524.612009][T19789] should_fail_ex+0x40c/0x560 [ 524.612038][T19789] _copy_from_user+0x2d/0xb0 [ 524.612066][T19789] ___sys_sendmsg+0x1c6/0x360 [ 524.612104][T19789] ? __lock_acquire+0x683/0x2cf0 [ 524.612136][T19789] ? __pfx____sys_sendmsg+0x10/0x10 [ 524.612194][T19789] ? __fget_files+0x2a/0x420 [ 524.612219][T19789] ? __fget_files+0x3a2/0x420 [ 524.612254][T19789] __x64_sys_sendmsg+0x1b1/0x290 [ 524.612281][T19789] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 524.612323][T19789] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 524.612347][T19789] do_syscall_64+0x174/0x580 [ 524.612377][T19789] ? trace_irq_disable+0x3b/0x140 [ 524.612401][T19789] ? clear_bhb_loop+0x70/0xc0 [ 524.612426][T19789] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 524.612446][T19789] RIP: 0033:0x7f7e9f39e0d9 [ 524.612465][T19789] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 524.612482][T19789] RSP: 002b:00007f7ea0241028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 524.612504][T19789] RAX: ffffffffffffffda RBX: 00007f7e9f625fa0 RCX: 00007f7e9f39e0d9 [ 524.612519][T19789] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000005 [ 524.612531][T19789] RBP: 00007f7ea0241090 R08: 0000000000000000 R09: 0000000000000000 [ 524.612544][T19789] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 524.612556][T19789] R13: 00007f7e9f626038 R14: 00007f7e9f625fa0 R15: 00007fff5a870708 [ 524.612588][T19789] [ 524.615936][T19787] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 524.658109][T19788] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 524.988601][T19799] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3408'. [ 525.076456][T19801] xt_hashlimit: size too large, truncated to 1048576 [ 525.409311][T19817] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3414'. [ 525.513657][T19826] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3416'. [ 525.515506][T19824] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3416'. [ 525.623566][T19832] netlink: 'syz.3.3418': attribute type 1 has an invalid length. [ 525.820084][T19838] gretap1: entered allmulticast mode [ 525.866169][T19838] bond4: (slave gretap1): making interface the new active one [ 525.908216][T19838] bond4: (slave gretap1): Enslaving as an active interface with an up link [ 525.919415][T19846] netlink: 'syz.1.3419': attribute type 23 has an invalid length. [ 526.018788][ T30] audit: type=1800 audit(1786477087.550:7): pid=19847 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.3420" name="hugetlb.1GB.usage_in_bytes" dev="tmpfs" ino=1481 res=0 errno=0 [ 526.297100][T19843] syzkaller0: entered promiscuous mode [ 526.310977][T19843] syzkaller0: entered allmulticast mode [ 526.364615][T19861] FAULT_INJECTION: forcing a failure. [ 526.364615][T19861] name failslab, interval 1, probability 0, space 0, times 0 [ 526.392010][T19861] CPU: 1 UID: 0 PID: 19861 Comm: syz.2.3422 Not tainted syzkaller #0 PREEMPT(full) [ 526.392039][T19861] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 526.392051][T19861] Call Trace: [ 526.392059][T19861] [ 526.392067][T19861] dump_stack_lvl+0xe8/0x150 [ 526.392103][T19861] should_fail_ex+0x40c/0x560 [ 526.392139][T19861] should_failslab+0xa8/0x100 [ 526.392169][T19861] kmem_cache_alloc_node_noprof+0xb3/0x610 [ 526.392194][T19861] ? local_lock_release+0x9c/0x160 [ 526.392228][T19861] ? __alloc_skb+0x1d7/0x7a0 [ 526.392245][T19861] ? __alloc_skb+0x1d7/0x7a0 [ 526.392271][T19861] __alloc_skb+0x1d7/0x7a0 [ 526.392294][T19861] netlink_sendmsg+0x5d4/0xb40 [ 526.392330][T19861] ? __pfx_netlink_sendmsg+0x10/0x10 [ 526.392359][T19861] ? aa_sock_msg_perm+0xf1/0x1b0 [ 526.392394][T19861] ? __pfx_netlink_sendmsg+0x10/0x10 [ 526.392416][T19861] sock_sendmsg_nosec+0x13a/0x180 [ 526.392448][T19861] ____sys_sendmsg+0x54e/0x850 [ 526.392477][T19861] ? __pfx_____sys_sendmsg+0x10/0x10 [ 526.392508][T19861] ? import_iovec+0x73/0xa0 [ 526.392537][T19861] ___sys_sendmsg+0x2a5/0x360 [ 526.392558][T19861] ? __lock_acquire+0x683/0x2cf0 [ 526.392590][T19861] ? __pfx____sys_sendmsg+0x10/0x10 [ 526.392651][T19861] ? __fget_files+0x2a/0x420 [ 526.392676][T19861] ? __fget_files+0x3a2/0x420 [ 526.392712][T19861] __x64_sys_sendmsg+0x1b1/0x290 [ 526.392739][T19861] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 526.392780][T19861] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 526.392804][T19861] do_syscall_64+0x174/0x580 [ 526.392834][T19861] ? trace_irq_disable+0x3b/0x140 [ 526.392859][T19861] ? clear_bhb_loop+0x70/0xc0 [ 526.392886][T19861] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 526.392907][T19861] RIP: 0033:0x7f799c59e0d9 [ 526.392927][T19861] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 526.392945][T19861] RSP: 002b:00007f799d551028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 526.392968][T19861] RAX: ffffffffffffffda RBX: 00007f799c825fa0 RCX: 00007f799c59e0d9 [ 526.392984][T19861] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000005 [ 526.392997][T19861] RBP: 00007f799d551090 R08: 0000000000000000 R09: 0000000000000000 [ 526.393010][T19861] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 526.393022][T19861] R13: 00007f799c826038 R14: 00007f799c825fa0 R15: 00007ffff5c88028 [ 526.393055][T19861] [ 526.393947][T19860] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 526.851080][T19864] xt_hashlimit: size too large, truncated to 1048576 [ 527.226049][T19872] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 527.286773][T19875] netlink: 104 bytes leftover after parsing attributes in process `syz.2.3426'. [ 527.714234][T17286] net_ratelimit: 349 callbacks suppressed [ 527.714256][T17286] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 528.765832][ T6878] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 529.354023][T19869] __nla_validate_parse: 2 callbacks suppressed [ 529.354043][T19869] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3424'. [ 529.362768][ T3372] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 529.373328][T19869] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3424'. [ 529.415167][T19869] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3424'. [ 529.437377][T19869] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3424'. [ 529.501966][ T91] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 529.632544][ T91] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 529.782845][ T3372] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 529.796651][ T6878] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 529.872271][ T6891] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 529.911370][T19908] FAULT_INJECTION: forcing a failure. [ 529.911370][T19908] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 529.928076][T19906] xt_hashlimit: size too large, truncated to 1048576 [ 529.933556][ T3271] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 529.935873][T19908] CPU: 1 UID: 0 PID: 19908 Comm: syz.4.3436 Not tainted syzkaller #0 PREEMPT(full) [ 529.935945][T19908] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 529.935978][T19908] Call Trace: [ 529.935999][T19908] [ 529.936021][T19908] dump_stack_lvl+0xe8/0x150 [ 529.936110][T19908] should_fail_ex+0x40c/0x560 [ 529.936185][T19908] _copy_from_iter+0x1d3/0x1660 [ 529.936353][T19908] ? kmem_cache_alloc_node_noprof+0x1d1/0x610 [ 529.936431][T19908] ? rcu_is_watching+0x15/0xb0 [ 529.936526][T19908] ? trace_kmem_cache_alloc+0x29/0xe0 [ 529.936615][T19908] ? kmem_cache_alloc_node_noprof+0x3b8/0x610 [ 529.936680][T19908] ? __pfx__copy_from_iter+0x10/0x10 [ 529.936751][T19908] ? __alloc_skb+0x276/0x7a0 [ 529.936828][T19908] ? __alloc_skb+0x276/0x7a0 [ 529.936893][T19908] ? netlink_sendmsg+0x650/0xb40 [ 529.936958][T19908] ? skb_put+0x112/0x210 [ 529.937022][T19908] netlink_sendmsg+0x6c0/0xb40 [ 529.937111][T19908] ? __pfx_netlink_sendmsg+0x10/0x10 [ 529.937195][T19908] ? aa_sock_msg_perm+0xf1/0x1b0 [ 529.937288][T19908] ? __pfx_netlink_sendmsg+0x10/0x10 [ 529.937353][T19908] sock_sendmsg_nosec+0x13a/0x180 [ 529.937434][T19908] ____sys_sendmsg+0x54e/0x850 [ 529.937510][T19908] ? __pfx_____sys_sendmsg+0x10/0x10 [ 529.937607][T19908] ? import_iovec+0x73/0xa0 [ 529.937685][T19908] ___sys_sendmsg+0x2a5/0x360 [ 529.937750][T19908] ? __lock_acquire+0x683/0x2cf0 [ 529.937858][T19908] ? __pfx____sys_sendmsg+0x10/0x10 [ 529.938049][T19908] ? __fget_files+0x2a/0x420 [ 529.938123][T19908] ? __fget_files+0x3a2/0x420 [ 529.938223][T19908] __x64_sys_sendmsg+0x1b1/0x290 [ 529.938294][T19908] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 529.938411][T19908] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 529.938476][T19908] do_syscall_64+0x174/0x580 [ 529.938561][T19908] ? trace_irq_disable+0x3b/0x140 [ 529.938628][T19908] ? clear_bhb_loop+0x70/0xc0 [ 529.938694][T19908] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 529.938749][T19908] RIP: 0033:0x7f7e9f39e0d9 [ 529.938810][T19908] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 529.938856][T19908] RSP: 002b:00007f7ea0241028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 529.938918][T19908] RAX: ffffffffffffffda RBX: 00007f7e9f625fa0 RCX: 00007f7e9f39e0d9 [ 529.938960][T19908] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000005 [ 529.938993][T19908] RBP: 00007f7ea0241090 R08: 0000000000000000 R09: 0000000000000000 [ 529.939026][T19908] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 529.939059][T19908] R13: 00007f7e9f626038 R14: 00007f7e9f625fa0 R15: 00007fff5a870708 [ 529.939157][T19908] [ 529.942726][T19907] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 530.097556][ T3372] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 530.505998][T19920] netlink: 'syz.1.3440': attribute type 23 has an invalid length. [ 530.995267][ T50] block nbd5: Receive control failed (result -22) [ 531.055563][T19950] nbd5: detected capacity change from 0 to 32 [ 531.095999][ T1590] block nbd5: Dead connection, failed to find a fallback [ 531.103731][ T1590] block nbd5: shutting down sockets [ 531.111004][ T1590] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 531.121352][ T1590] Buffer I/O error on dev nbd5, logical block 0, async page read [ 531.132771][T19956] bridge0: port 2(bridge_slave_1) entered disabled state [ 531.140039][ T1590] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 531.141676][T19956] bridge0: port 1(bridge_slave_0) entered disabled state [ 531.150430][ T1590] Buffer I/O error on dev nbd5, logical block 0, async page read [ 531.166988][ T1590] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 531.182990][ T1590] Buffer I/O error on dev nbd5, logical block 0, async page read [ 531.191514][ T1590] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 531.201187][ T1590] Buffer I/O error on dev nbd5, logical block 0, async page read [ 531.209406][ T1590] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 531.219098][ T1590] Buffer I/O error on dev nbd5, logical block 0, async page read [ 531.227149][ T1590] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 531.237005][ T1590] Buffer I/O error on dev nbd5, logical block 0, async page read [ 531.245235][ T1590] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 531.254841][ T1590] Buffer I/O error on dev nbd5, logical block 0, async page read [ 531.267992][ T1590] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 531.277690][ T1590] Buffer I/O error on dev nbd5, logical block 0, async page read [ 531.285605][T17192] ldm_validate_partition_table(): Disk read failed. [ 531.294830][ T1590] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 531.304504][ T1590] Buffer I/O error on dev nbd5, logical block 0, async page read [ 531.316092][ T1590] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 531.320250][T19956] bridge0: entered allmulticast mode [ 531.331089][ T1590] Buffer I/O error on dev nbd5, logical block 0, async page read [ 531.339258][T17192] Dev nbd5: unable to read RDB block 0 [ 531.345462][T17192] nbd5: unable to read partition table [ 531.360147][T17192] ldm_validate_partition_table(): Disk read failed. [ 531.367387][T17192] Dev nbd5: unable to read RDB block 0 [ 531.373496][T17192] nbd5: unable to read partition table [ 531.396250][T19964] bridge_slave_1: left allmulticast mode [ 531.403004][T19964] bridge_slave_1: left promiscuous mode [ 531.412202][T19964] bridge0: port 2(bridge_slave_1) entered disabled state [ 531.441156][T19964] bridge_slave_0: left allmulticast mode [ 531.447375][T19964] bridge_slave_0: left promiscuous mode [ 531.453554][T19964] bridge0: port 1(bridge_slave_0) entered disabled state [ 531.773838][T19975] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3449'. [ 531.787165][T19953] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 531.820727][T19953] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 531.852212][T19978] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3449'. [ 531.900873][T19975] 8021q: adding VLAN 0 to HW filter on device bond9 [ 531.909106][T19978] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3449'. [ 531.928658][T19953] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 531.935216][T19953] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 531.973920][T19953] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 531.995649][T19953] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 532.079457][T19953] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 532.103488][T19953] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 532.134156][T19957] macvlan1: entered promiscuous mode [ 532.142619][T19988] netlink: 104 bytes leftover after parsing attributes in process `syz.0.3452'. [ 532.158053][T19957] macvlan1: entered allmulticast mode [ 532.177234][T19988] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3452'. [ 532.182194][T19957] veth1_vlan: entered allmulticast mode [ 532.207675][T19953] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 532.219803][T19953] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 532.247959][T19988] netlink: 388 bytes leftover after parsing attributes in process `syz.0.3452'. [ 532.720573][T20006] IPVS: set_ctl: invalid protocol: 137 0.0.0.0:65534 [ 532.754498][ C0] net_ratelimit: 23 callbacks suppressed [ 532.754529][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 532.775016][ T91] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 532.914858][ T6878] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 532.996653][ T7824] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 533.035955][T20014] netlink: 'syz.0.3458': attribute type 23 has an invalid length. [ 533.142014][ T7828] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 533.437056][T20024] bond2 (unregistering): Released all slaves [ 533.552804][ T7828] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 533.639126][ T6892] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 533.692254][ T7824] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 533.740047][T20052] FAULT_INJECTION: forcing a failure. [ 533.740047][T20052] name failslab, interval 1, probability 0, space 0, times 0 [ 533.766443][T20052] CPU: 1 UID: 0 PID: 20052 Comm: syz.3.3465 Not tainted syzkaller #0 PREEMPT(full) [ 533.766471][T20052] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 533.766484][T20052] Call Trace: [ 533.766492][T20052] [ 533.766502][T20052] dump_stack_lvl+0xe8/0x150 [ 533.766536][T20052] should_fail_ex+0x40c/0x560 [ 533.766563][T20052] should_failslab+0xa8/0x100 [ 533.766594][T20052] __kmalloc_noprof+0xfe/0x720 [ 533.766620][T20052] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 533.766650][T20052] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 533.766687][T20052] genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 533.766722][T20052] genl_family_rcv_msg_doit+0xda/0x340 [ 533.766759][T20052] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 533.766796][T20052] ? apparmor_capable+0x126/0x170 [ 533.766821][T20052] ? bpf_lsm_capable+0x9/0x20 [ 533.766846][T20052] ? security_capable+0x7e/0x2c0 [ 533.766880][T20052] genl_rcv_msg+0x614/0x7a0 [ 533.766916][T20052] ? __pfx_genl_rcv_msg+0x10/0x10 [ 533.766956][T20052] ? __pfx_hwsim_set_edge_lqi+0x10/0x10 [ 533.767136][T20052] netlink_rcv_skb+0x226/0x4a0 [ 533.767162][T20052] ? __pfx_genl_rcv_msg+0x10/0x10 [ 533.767193][T20052] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 533.767234][T20052] ? down_read+0x2be/0x330 [ 533.767304][T20052] genl_rcv+0x28/0x40 [ 533.767331][T20052] netlink_unicast+0x7bb/0x940 [ 533.767365][T20052] netlink_sendmsg+0x813/0xb40 [ 533.767400][T20052] ? __pfx_netlink_sendmsg+0x10/0x10 [ 533.767429][T20052] ? aa_sock_msg_perm+0xf1/0x1b0 [ 533.767470][T20052] ? __pfx_netlink_sendmsg+0x10/0x10 [ 533.767492][T20052] sock_sendmsg_nosec+0x13a/0x180 [ 533.767523][T20052] ____sys_sendmsg+0x54e/0x850 [ 533.767552][T20052] ? __pfx_____sys_sendmsg+0x10/0x10 [ 533.767585][T20052] ? import_iovec+0x73/0xa0 [ 533.767618][T20052] ___sys_sendmsg+0x2a5/0x360 [ 533.767640][T20052] ? __lock_acquire+0x683/0x2cf0 [ 533.767672][T20052] ? __pfx____sys_sendmsg+0x10/0x10 [ 533.767736][T20052] ? __fget_files+0x2a/0x420 [ 533.767760][T20052] ? __fget_files+0x3a2/0x420 [ 533.767799][T20052] __x64_sys_sendmsg+0x1b1/0x290 [ 533.767826][T20052] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 533.767871][T20052] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 533.767895][T20052] do_syscall_64+0x174/0x580 [ 533.767935][T20052] ? trace_irq_disable+0x3b/0x140 [ 533.767961][T20052] ? clear_bhb_loop+0x70/0xc0 [ 533.767987][T20052] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 533.768007][T20052] RIP: 0033:0x7f452999e0d9 [ 533.768027][T20052] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 533.768045][T20052] RSP: 002b:00007f452a86d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 533.768068][T20052] RAX: ffffffffffffffda RBX: 00007f4529c25fa0 RCX: 00007f452999e0d9 [ 533.768083][T20052] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000005 [ 533.768095][T20052] RBP: 00007f452a86d090 R08: 0000000000000000 R09: 0000000000000000 [ 533.768108][T20052] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 533.768120][T20052] R13: 00007f4529c26038 R14: 00007f4529c25fa0 R15: 00007ffca2e26898 [ 533.768152][T20052] [ 534.087567][T20051] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 534.094681][ T6878] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 534.101036][ T7824] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 534.115723][T20057] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 534.356021][T20072] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 534.367003][T20072] bond10: (slave macvlan2): Enslaving as an active interface with a down link [ 534.428402][T20076] ip6gretap0: entered promiscuous mode [ 534.482549][T20078] __nla_validate_parse: 5 callbacks suppressed [ 534.482570][T20078] netlink: 104 bytes leftover after parsing attributes in process `syz.2.3473'. [ 534.506356][T20078] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3473'. [ 534.521949][T20078] netlink: 388 bytes leftover after parsing attributes in process `syz.2.3473'. [ 534.622704][T20082] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 534.780942][T20092] netlink: 'syz.4.3479': attribute type 1 has an invalid length. [ 535.283148][T20118] netlink: 104 bytes leftover after parsing attributes in process `syz.0.3485'. [ 535.303944][T20118] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3485'. [ 535.322933][T20118] netlink: 388 bytes leftover after parsing attributes in process `syz.0.3485'. [ 535.359637][T20120] netlink: 244 bytes leftover after parsing attributes in process `syz.4.3486'. [ 535.370355][T20120] FAULT_INJECTION: forcing a failure. [ 535.370355][T20120] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 535.386752][T20120] CPU: 0 UID: 0 PID: 20120 Comm: syz.4.3486 Not tainted syzkaller #0 PREEMPT(full) [ 535.386781][T20120] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 535.386794][T20120] Call Trace: [ 535.386802][T20120] [ 535.386811][T20120] dump_stack_lvl+0xe8/0x150 [ 535.386846][T20120] should_fail_ex+0x40c/0x560 [ 535.386881][T20120] _copy_to_user+0x31/0xb0 [ 535.386913][T20120] simple_read_from_buffer+0xe1/0x170 [ 535.386985][T20120] proc_fail_nth_read+0x1bb/0x230 [ 535.387027][T20120] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 535.387060][T20120] ? rw_verify_area+0x24a/0x4c0 [ 535.387099][T20120] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 535.387127][T20120] vfs_read+0x213/0xa80 [ 535.387163][T20120] ? __pfx___mutex_lock+0x10/0x10 [ 535.387195][T20120] ? __pfx_vfs_read+0x10/0x10 [ 535.387227][T20120] ? __fget_files+0x2a/0x420 [ 535.387259][T20120] ? __fget_files+0x3a2/0x420 [ 535.387284][T20120] ? __fget_files+0x2a/0x420 [ 535.387321][T20120] ksys_read+0x150/0x270 [ 535.387354][T20120] ? __pfx_ksys_read+0x10/0x10 [ 535.387394][T20120] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 535.387416][T20120] do_syscall_64+0x174/0x580 [ 535.387447][T20120] ? trace_irq_disable+0x3b/0x140 [ 535.387472][T20120] ? clear_bhb_loop+0x70/0xc0 [ 535.387499][T20120] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 535.387520][T20120] RIP: 0033:0x7f7e9f35e90e [ 535.387540][T20120] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 535.387557][T20120] RSP: 002b:00007f7ea0240fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 535.387579][T20120] RAX: ffffffffffffffda RBX: 00007f7ea02416c0 RCX: 00007f7e9f35e90e [ 535.387594][T20120] RDX: 000000000000000f RSI: 00007f7ea02410a0 RDI: 0000000000000004 [ 535.387607][T20120] RBP: 00007f7ea0241090 R08: 0000000000000000 R09: 0000000000000000 [ 535.387619][T20120] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 535.387631][T20120] R13: 00007f7e9f626038 R14: 00007f7e9f625fa0 R15: 00007fff5a870708 [ 535.387667][T20120] [ 535.605435][T20119] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 535.689944][T20122] netlink: 156 bytes leftover after parsing attributes in process `syz.0.3487'. [ 535.837407][T20121] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 536.346532][T20162] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 536.382672][T20162] netlink: 172 bytes leftover after parsing attributes in process `syz.1.3502'. [ 536.705480][T20182] xfrm0 speed is unknown, defaulting to 1000 [ 537.189832][T20205] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 537.390816][T20210] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3516'. [ 537.946818][T20232] netlink: 'syz.2.3506': attribute type 5 has an invalid length. [ 538.273209][ T6874] net_ratelimit: 53 callbacks suppressed [ 538.273231][ T6874] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 538.554325][T20265] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 538.603522][T20274] tc_dump_action: action bad kind [ 538.669876][T20266] syzkaller0: entered promiscuous mode [ 538.682797][T20266] syzkaller0: entered allmulticast mode [ 539.314502][ T6874] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 539.746383][T20307] __nla_validate_parse: 7 callbacks suppressed [ 539.746403][T20307] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3530'. [ 540.198148][ T6892] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 540.352657][ T6874] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 541.003180][ C0] vcan0: j1939_tp_rxtimer: 0xffff88804adef800: rx timeout, send abort [ 541.012357][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88804adef800: 0x00100: (3) A timeout occurred and this is the connection abort to close the session. [ 541.314544][ T6874] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 541.393151][ T6874] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 541.806215][T20274] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 541.942340][T20312] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 541.984278][ T7816] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 542.155483][ T7816] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 542.296234][ T91] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 542.661099][T20342] netlink: 'syz.4.3541': attribute type 3 has an invalid length. [ 542.790806][T20349] netlink: 'syz.0.3542': attribute type 11 has an invalid length. [ 542.807385][T17818] bridge0: port 1(bridge_slave_0) entered disabled state [ 542.965903][T20354] gretap1: entered allmulticast mode [ 543.024345][T20363] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 543.256703][T20377] netlink: 'syz.1.3548': attribute type 13 has an invalid length. [ 543.405040][T20379] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3548'. [ 543.472899][ T6876] net_ratelimit: 9 callbacks suppressed [ 543.472921][ T6876] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 543.567203][ T6894] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 543.669641][ T7822] IPVS: starting estimator thread 0... [ 543.736191][ T7816] IPVS: starting estimator thread 0... [ 543.749035][T20382] bridge0: port 2(bridge_slave_1) entered disabled state [ 543.758832][T20387] netlink: 244 bytes leftover after parsing attributes in process `syz.3.3551'. [ 543.776167][T20388] IPVS: using max 31 ests per chain, 74400 per kthread [ 543.796398][T20386] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 543.843968][T20390] IPVS: using max 34 ests per chain, 81600 per kthread [ 543.876203][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 543.893195][ T6888] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 543.995135][ T6888] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 544.006452][T20382] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 544.028839][T20382] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 544.056280][T20397] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3553'. [ 544.067113][T20397] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3553'. [ 544.104991][T20382] veth1_vlan: left allmulticast mode [ 544.147282][T20380] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3549'. [ 544.234905][ T156] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 544.257938][ T156] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 544.357212][ T6891] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 544.392011][ T7816] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 544.412376][ T7816] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 544.429791][T20406] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3556'. [ 544.486618][T20408] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3557'. [ 544.498368][T20408] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3557'. [ 544.514413][ T6874] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 544.590391][T20413] syzkaller1: entered promiscuous mode [ 544.603086][T20413] syzkaller1: entered allmulticast mode [ 544.652336][ T7820] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 544.772315][ T91] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 544.860803][T20422] IPVS: set_ctl: invalid protocol: 51 172.20.20.29:20001 [ 544.977475][T20430] [ 544.979887][T20430] ====================================================== [ 544.987020][T20430] WARNING: possible circular locking dependency detected [ 544.994183][T20430] syzkaller #0 Not tainted [ 544.998612][T20430] ------------------------------------------------------ [ 545.005786][T20430] syz.4.3563/20430 is trying to acquire lock: [ 545.011865][T20430] ffff88801c295210 (&root->kernfs_iattr_rwsem){++++}-{4:4}, at: kernfs_link_sibling+0x4c7/0x5a0 [ 545.022523][T20430] [ 545.022523][T20430] but task is already holding lock: [ 545.029929][T20430] ffff88801c295180 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_add_one+0x41/0x5e0 [ 545.039372][T20430] [ 545.039372][T20430] which lock already depends on the new lock. [ 545.039372][T20430] [ 545.049803][T20430] [ 545.049803][T20430] the existing dependency chain (in reverse order) is: [ 545.058832][T20430] [ 545.058832][T20430] -> #9 (&root->kernfs_rwsem){++++}-{4:4}: [ 545.067026][T20430] down_write+0x96/0x200 [ 545.071811][T20430] kernfs_add_one+0x41/0x5e0 [ 545.076953][T20430] kernfs_create_dir_ns+0x1a1/0x230 [ 545.082691][T20430] internal_create_group+0x440/0x1180 [ 545.088606][T20430] cpuhp_invoke_callback+0x434/0x810 [ 545.094433][T20430] cpuhp_issue_call+0x3f0/0x750 [ 545.099822][T20430] __cpuhp_setup_state_cpuslocked+0x3f4/0x6f0 [ 545.106428][T20430] __cpuhp_setup_state+0x3f/0x60 [ 545.111929][T20430] do_one_initcall+0x250/0x870 [ 545.117247][T20430] do_initcall_level+0x10a/0x1a0 [ 545.122831][T20430] do_initcalls+0x59/0xa0 [ 545.127694][T20430] kernel_init_freeable+0x29d/0x3e0 [ 545.133433][T20430] kernel_init+0x1d/0x1d0 [ 545.138299][T20430] ret_from_fork+0x514/0xb70 [ 545.143465][T20430] ret_from_fork_asm+0x1a/0x30 [ 545.148773][T20430] [ 545.148773][T20430] -> #8 (cpuhp_state_mutex){+.+.}-{4:4}: [ 545.156615][T20430] [ 545.156615][T20430] -> #7 (cpu_hotplug_lock){++++}-{0:0}: [ 545.164370][T20430] cpus_read_lock+0x42/0x160 [ 545.169495][T20430] static_key_slow_inc+0x12/0x30 [ 545.175002][T20430] nbd_genl_reconfigure+0x1301/0x1e80 [ 545.181440][T20430] genl_family_rcv_msg_doit+0x233/0x340 [ 545.187556][T20430] genl_rcv_msg+0x614/0x7a0 [ 545.192629][T20430] netlink_rcv_skb+0x226/0x4a0 [ 545.197945][T20430] genl_rcv+0x28/0x40 [ 545.202471][T20430] netlink_unicast+0x7bb/0x940 [ 545.207774][T20430] netlink_sendmsg+0x813/0xb40 [ 545.213085][T20430] sock_sendmsg_nosec+0x13a/0x180 [ 545.218688][T20430] ____sys_sendmsg+0x54e/0x850 [ 545.223989][T20430] ___sys_sendmsg+0x2a5/0x360 [ 545.229377][T20430] __x64_sys_sendmsg+0x1b1/0x290 [ 545.234859][T20430] do_syscall_64+0x174/0x580 [ 545.240003][T20430] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 545.246433][T20430] [ 545.246433][T20430] -> #6 (&nsock->tx_lock){+.+.}-{4:4}: [ 545.254102][T20430] __mutex_lock+0x19d/0x1550 [ 545.259238][T20430] nbd_queue_rq+0x373/0x1150 [ 545.264371][T20430] blk_mq_dispatch_rq_list+0x499/0x1990 [ 545.270555][T20430] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 545.277461][T20430] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 545.283996][T20430] blk_mq_run_work_fn+0x16c/0x300 [ 545.289570][T20430] process_scheduled_works+0xa8e/0x14e0 [ 545.295683][T20430] worker_thread+0xa47/0xfb0 [ 545.300828][T20430] kthread+0x388/0x470 [ 545.305446][T20430] ret_from_fork+0x514/0xb70 [ 545.310583][T20430] ret_from_fork_asm+0x1a/0x30 [ 545.315893][T20430] [ 545.315893][T20430] -> #5 (&cmd->lock){+.+.}-{4:4}: [ 545.323149][T20430] __mutex_lock+0x19d/0x1550 [ 545.328296][T20430] nbd_queue_rq+0xc1/0x1150 [ 545.333350][T20430] blk_mq_dispatch_rq_list+0x499/0x1990 [ 545.339442][T20430] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 545.346343][T20430] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 545.352867][T20430] blk_mq_run_work_fn+0x16c/0x300 [ 545.358442][T20430] process_scheduled_works+0xa8e/0x14e0 [ 545.364526][T20430] worker_thread+0xa47/0xfb0 [ 545.369654][T20430] kthread+0x388/0x470 [ 545.374268][T20430] ret_from_fork+0x514/0xb70 [ 545.379408][T20430] ret_from_fork_asm+0x1a/0x30 [ 545.384720][T20430] [ 545.384720][T20430] -> #4 (set->srcu){.+.+}-{0:0}: [ 545.391887][T20430] __synchronize_srcu+0xc9/0x2f0 [ 545.397375][T20430] elevator_switch+0x1e8/0x7b0 [ 545.402750][T20430] elevator_change+0x2fa/0x480 [ 545.408050][T20430] elevator_set_default+0x375/0x440 [ 545.413808][T20430] blk_register_queue+0x3f3/0x4e0 [ 545.419446][T20430] __add_disk+0x6cb/0xe30 [ 545.424333][T20430] add_disk_fwnode+0x100/0x3a0 [ 545.429644][T20430] nbd_dev_add+0x733/0xb60 [ 545.435047][T20430] nbd_init+0x15f/0x1e0 [ 545.439851][T20430] do_one_initcall+0x250/0x870 [ 545.445168][T20430] do_initcall_level+0x10a/0x1a0 [ 545.450674][T20430] do_initcalls+0x59/0xa0 [ 545.455557][T20430] kernel_init_freeable+0x29d/0x3e0 [ 545.461309][T20430] kernel_init+0x1d/0x1d0 [ 545.466319][T20430] ret_from_fork+0x514/0xb70 [ 545.472348][T20430] ret_from_fork_asm+0x1a/0x30 [ 545.477772][T20430] [ 545.477772][T20430] -> #3 (&q->elevator_lock){+.+.}-{4:4}: [ 545.485627][T20430] __mutex_lock+0x19d/0x1550 [ 545.490940][T20430] elevator_change+0x1af/0x480 [ 545.496256][T20430] elevator_set_none+0xb5/0x140 [ 545.501674][T20430] blk_mq_update_nr_hw_queues+0x5ef/0x19f0 [ 545.508076][T20430] nbd_start_device+0x189/0xb30 [ 545.513479][T20430] nbd_genl_connect+0x1597/0x1c10 [ 545.519172][T20430] genl_family_rcv_msg_doit+0x233/0x340 [ 545.525264][T20430] genl_rcv_msg+0x614/0x7a0 [ 545.530311][T20430] netlink_rcv_skb+0x226/0x4a0 [ 545.535621][T20430] genl_rcv+0x28/0x40 [ 545.540145][T20430] netlink_unicast+0x7bb/0x940 [ 545.545445][T20430] netlink_sendmsg+0x813/0xb40 [ 545.550754][T20430] sock_sendmsg_nosec+0x13a/0x180 [ 545.556321][T20430] ____sys_sendmsg+0x54e/0x850 [ 545.561637][T20430] ___sys_sendmsg+0x2a5/0x360 [ 545.566868][T20430] __x64_sys_sendmsg+0x1b1/0x290 [ 545.572356][T20430] do_syscall_64+0x174/0x580 [ 545.577507][T20430] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 545.584057][T20430] [ 545.584057][T20430] -> #2 (&q->q_usage_counter(io)#49){++++}-{0:0}: [ 545.592724][T20430] blk_alloc_queue+0x544/0x690 [ 545.598037][T20430] __blk_mq_alloc_disk+0x194/0x390 [ 545.603698][T20430] nbd_dev_add+0x494/0xb60 [ 545.608668][T20430] nbd_init+0x15f/0x1e0 [ 545.613364][T20430] do_one_initcall+0x250/0x870 [ 545.618673][T20430] do_initcall_level+0x10a/0x1a0 [ 545.624156][T20430] do_initcalls+0x59/0xa0 [ 545.629118][T20430] kernel_init_freeable+0x29d/0x3e0 [ 545.634859][T20430] kernel_init+0x1d/0x1d0 [ 545.639750][T20430] ret_from_fork+0x514/0xb70 [ 545.644891][T20430] ret_from_fork_asm+0x1a/0x30 [ 545.650225][T20430] [ 545.650225][T20430] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 545.657458][T20430] fs_reclaim_acquire+0x71/0x100 [ 545.662944][T20430] kmem_cache_alloc_noprof+0x64/0x5f0 [ 545.668858][T20430] __kernfs_iattrs+0xdd/0x380 [ 545.674080][T20430] kernfs_iop_setattr+0xe6/0x3f0 [ 545.679567][T20430] notify_change+0xbba/0xea0 [ 545.684740][T20430] do_truncate+0x1c2/0x250 [ 545.689712][T20430] path_openat+0x2fed/0x3830 [ 545.694867][T20430] do_file_open+0x23e/0x4a0 [ 545.699933][T20430] do_sys_openat2+0x115/0x200 [ 545.705194][T20430] __x64_sys_openat+0x138/0x170 [ 545.710588][T20430] do_syscall_64+0x174/0x580 [ 545.715726][T20430] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 545.722187][T20430] [ 545.722187][T20430] -> #0 (&root->kernfs_iattr_rwsem){++++}-{4:4}: [ 545.730745][T20430] __lock_acquire+0x1520/0x2cf0 [ 545.736152][T20430] lock_acquire+0x106/0x350 [ 545.741198][T20430] down_write+0x96/0x200 [ 545.745981][T20430] kernfs_link_sibling+0x4c7/0x5a0 [ 545.751649][T20430] kernfs_add_one+0x1d2/0x5e0 [ 545.756881][T20430] kernfs_create_dir_ns+0x1a1/0x230 [ 545.762630][T20430] sysfs_create_dir_ns+0x12f/0x2a0 [ 545.768328][T20430] kobject_add_internal+0x622/0xcd0 [ 545.774148][T20430] kobject_add+0x163/0x240 [ 545.779106][T20430] device_add+0x3fa/0xb80 [ 545.784058][T20430] netdev_register_kobject+0x197/0x350 [ 545.790146][T20430] register_netdevice+0x1433/0x1eb0 [ 545.795920][T20430] ppp_dev_configure+0x806/0xaa0 [ 545.801470][T20430] ppp_nl_newlink+0x252/0x2f0 [ 545.806686][T20430] rtnl_newlink_create+0x305/0x7b0 [ 545.812403][T20430] rtnl_newlink+0x166d/0x1c30 [ 545.817652][T20430] rtnetlink_rcv_msg+0x802/0xc00 [ 545.823126][T20430] netlink_rcv_skb+0x226/0x4a0 [ 545.828432][T20430] netlink_unicast+0x7bb/0x940 [ 545.833735][T20430] netlink_sendmsg+0x813/0xb40 [ 545.839035][T20430] sock_sendmsg_nosec+0x13a/0x180 [ 545.844628][T20430] ____sys_sendmsg+0x54e/0x850 [ 545.849929][T20430] ___sys_sendmsg+0x2a5/0x360 [ 545.855141][T20430] __x64_sys_sendmsg+0x1b1/0x290 [ 545.860640][T20430] do_syscall_64+0x174/0x580 [ 545.865788][T20430] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 545.872222][T20430] [ 545.872222][T20430] other info that might help us debug this: [ 545.872222][T20430] [ 545.882470][T20430] Chain exists of: [ 545.882470][T20430] &root->kernfs_iattr_rwsem --> cpuhp_state_mutex --> &root->kernfs_rwsem [ 545.882470][T20430] [ 545.896925][T20430] Possible unsafe locking scenario: [ 545.896925][T20430] [ 545.904437][T20430] CPU0 CPU1 [ 545.909871][T20430] ---- ---- [ 545.915293][T20430] lock(&root->kernfs_rwsem); [ 545.920075][T20430] lock(cpuhp_state_mutex); [ 545.927212][T20430] lock(&root->kernfs_rwsem); [ 545.934518][T20430] lock(&root->kernfs_iattr_rwsem); [ 545.939956][T20430] [ 545.939956][T20430] *** DEADLOCK *** [ 545.939956][T20430] [ 545.948155][T20430] 4 locks held by syz.4.3563/20430: [ 545.953380][T20430] #0: ffffffff9057aa78 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 545.963144][T20430] #1: ffffffff90027ec0 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0xc10/0x1c30 [ 545.972245][T20430] #2: ffffffff8f7e4d80 (ppp_mutex){+.+.}-{4:4}, at: ppp_nl_newlink+0x118/0x2f0 [ 545.981695][T20430] #3: ffff88801c295180 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_add_one+0x41/0x5e0 [ 545.991568][T20430] [ 545.991568][T20430] stack backtrace: [ 545.997560][T20430] CPU: 0 UID: 0 PID: 20430 Comm: syz.4.3563 Not tainted syzkaller #0 PREEMPT(full) [ 545.997580][T20430] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 545.997591][T20430] Call Trace: [ 545.997598][T20430] [ 545.997605][T20430] dump_stack_lvl+0xe8/0x150 [ 545.997630][T20430] print_circular_bug+0x2e1/0x300 [ 545.997659][T20430] check_noncircular+0x12e/0x150 [ 545.997687][T20430] __lock_acquire+0x1520/0x2cf0 [ 545.997711][T20430] ? __lock_acquire+0x683/0x2cf0 [ 545.997734][T20430] ? preempt_schedule_thunk+0x16/0x40 [ 545.997751][T20430] ? preempt_schedule_common+0x82/0xd0 [ 545.997777][T20430] ? kernfs_link_sibling+0x4c7/0x5a0 [ 545.997800][T20430] lock_acquire+0x106/0x350 [ 545.997820][T20430] ? kernfs_link_sibling+0x4c7/0x5a0 [ 545.997856][T20430] down_write+0x96/0x200 [ 545.997872][T20430] ? kernfs_link_sibling+0x4c7/0x5a0 [ 545.997895][T20430] ? __pfx_down_write+0x10/0x10 [ 545.997909][T20430] ? kernfs_root+0x1c/0x230 [ 545.997930][T20430] ? kernfs_root+0x1c/0x230 [ 545.997950][T20430] ? kernfs_root+0x1c/0x230 [ 545.997972][T20430] ? kernfs_root+0x1ea/0x230 [ 545.997993][T20430] kernfs_link_sibling+0x4c7/0x5a0 [ 545.998022][T20430] kernfs_add_one+0x1d2/0x5e0 [ 545.998047][T20430] kernfs_create_dir_ns+0x1a1/0x230 [ 545.998074][T20430] sysfs_create_dir_ns+0x12f/0x2a0 [ 545.998096][T20430] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 545.998119][T20430] ? do_raw_spin_unlock+0xf5/0x210 [ 545.998138][T20430] kobject_add_internal+0x622/0xcd0 [ 545.998160][T20430] kobject_add+0x163/0x240 [ 545.998179][T20430] ? __pfx_kobject_add+0x10/0x10 [ 545.998194][T20430] ? kobject_put+0x50f/0x550 [ 545.998213][T20430] ? get_device_parent+0x366/0x3a0 [ 545.998239][T20430] device_add+0x3fa/0xb80 [ 545.998264][T20430] netdev_register_kobject+0x197/0x350 [ 545.998291][T20430] register_netdevice+0x1433/0x1eb0 [ 545.998317][T20430] ? __pfx_register_netdevice+0x10/0x10 [ 545.998337][T20430] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 545.998365][T20430] ? net_generic+0x1e/0x240 [ 545.998378][T20430] ? full_name_hash+0x92/0xe0 [ 545.998402][T20430] ppp_dev_configure+0x806/0xaa0 [ 545.998423][T20430] ppp_nl_newlink+0x252/0x2f0 [ 545.998440][T20430] ? __pfx_ppp_nl_newlink+0x10/0x10 [ 545.998456][T20430] rtnl_newlink_create+0x305/0x7b0 [ 545.998478][T20430] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 545.998498][T20430] ? __pfx___mutex_lock+0x10/0x10 [ 545.998525][T20430] ? full_name_hash+0x89/0xe0 [ 545.998543][T20430] ? __dev_get_by_name+0x36/0x130 [ 545.998638][T20430] rtnl_newlink+0x166d/0x1c30 [ 545.998661][T20430] ? __pfx_rtnl_newlink+0x10/0x10 [ 545.998675][T20430] ? do_syscall_64+0x174/0x580 [ 545.998716][T20430] ? kasan_quarantine_put+0xbb/0x1f0 [ 545.998735][T20430] ? lockdep_hardirqs_on+0x7a/0x110 [ 545.998760][T20430] ? nlmon_xmit+0xb0/0x100 [ 545.998850][T20430] ? kmem_cache_free+0x182/0x650 [ 545.998877][T20430] ? __lock_acquire+0x683/0x2cf0 [ 545.998900][T20430] ? __dev_queue_xmit+0x29b/0x3820 [ 545.998920][T20430] ? __local_bh_enable_ip+0xd0/0x130 [ 545.998938][T20430] ? lockdep_hardirqs_on+0x7a/0x110 [ 545.998960][T20430] ? __dev_queue_xmit+0x29b/0x3820 [ 545.998979][T20430] ? __local_bh_enable_ip+0xd0/0x130 [ 545.998995][T20430] ? __dev_queue_xmit+0x29b/0x3820 [ 545.999017][T20430] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 545.999039][T20430] ? __pfx_rtnl_newlink+0x10/0x10 [ 545.999054][T20430] rtnetlink_rcv_msg+0x802/0xc00 [ 545.999071][T20430] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 545.999085][T20430] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 545.999099][T20430] ? ref_tracker_free+0x689/0x830 [ 545.999119][T20430] ? __pfx_ref_tracker_free+0x10/0x10 [ 545.999141][T20430] netlink_rcv_skb+0x226/0x4a0 [ 545.999160][T20430] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 545.999176][T20430] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 545.999200][T20430] ? netlink_deliver_tap+0x2e/0x1b0 [ 545.999217][T20430] ? netlink_deliver_tap+0x2e/0x1b0 [ 545.999237][T20430] netlink_unicast+0x7bb/0x940 [ 545.999258][T20430] netlink_sendmsg+0x813/0xb40 [ 545.999281][T20430] ? __pfx_netlink_sendmsg+0x10/0x10 [ 545.999302][T20430] ? aa_sock_msg_perm+0xf1/0x1b0 [ 545.999328][T20430] ? __pfx_netlink_sendmsg+0x10/0x10 [ 545.999348][T20430] sock_sendmsg_nosec+0x13a/0x180 [ 545.999372][T20430] ____sys_sendmsg+0x54e/0x850 [ 545.999392][T20430] ? __pfx_____sys_sendmsg+0x10/0x10 [ 545.999414][T20430] ? import_iovec+0x73/0xa0 [ 545.999436][T20430] ___sys_sendmsg+0x2a5/0x360 [ 545.999453][T20430] ? __lock_acquire+0x683/0x2cf0 [ 545.999475][T20430] ? __pfx____sys_sendmsg+0x10/0x10 [ 545.999495][T20430] ? futex_wake+0x51b/0x5f0 [ 545.999545][T20430] ? __fget_files+0x2a/0x420 [ 545.999571][T20430] ? __fget_files+0x3a2/0x420 [ 545.999595][T20430] __x64_sys_sendmsg+0x1b1/0x290 [ 545.999614][T20430] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 545.999640][T20430] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 545.999658][T20430] do_syscall_64+0x174/0x580 [ 545.999681][T20430] ? trace_irq_disable+0x3b/0x140 [ 545.999700][T20430] ? clear_bhb_loop+0x70/0xc0 [ 545.999719][T20430] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 545.999735][T20430] RIP: 0033:0x7f7e9f39e0d9 [ 545.999751][T20430] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 545.999765][T20430] RSP: 002b:00007f7ea0241028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 545.999783][T20430] RAX: ffffffffffffffda RBX: 00007f7e9f625fa0 RCX: 00007f7e9f39e0d9 [ 545.999795][T20430] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 545.999806][T20430] RBP: 00007f7e9f435024 R08: 0000000000000000 R09: 0000000000000000 [ 545.999816][T20430] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 545.999825][T20430] R13: 00007f7e9f626038 R14: 00007f7e9f625fa0 R15: 00007fff5a870708 [ 545.999852][T20430] [ 546.566256][ T6874] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 546.581317][T20442] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3562'. [ 546.629899][T20440] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3562'. [ 546.672401][ T7816] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 548.562167][ T7816] net_ratelimit: 18 callbacks suppressed [ 548.562212][ T7816] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 548.674032][ T6876] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 548.683042][ T156] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 548.791984][T17818] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 548.902501][ T7816] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 549.012093][ T156] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 549.121999][ T156] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 549.233126][ T156] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 549.341946][ T7816] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 549.451995][T17818] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 553.642207][ T7816] net_ratelimit: 44 callbacks suppressed [ 553.642229][ T7816] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 553.762226][ T7816] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 553.873590][ T7820] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 553.882507][ T6876] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 553.982080][ T156] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 554.092001][ T7816] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 554.202105][ T156] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 554.312058][ T7816] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 554.421975][ T156] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 554.532198][ T156] bond5: (slave ip6gretap1): failed to get link speed/duplex