last executing test programs: 2m39.297189508s ago: executing program 2 (id=9279): syz_emit_ethernet(0x32, &(0x7f0000000180)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x2, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0xfffc, 0x10, 0x0, @gue={{0x2, 0x1, 0x3, 0x1, 0x100, @val=0x80}}}}}}}, 0x0) syz_emit_ethernet(0x32, &(0x7f00000003c0)={@random="e904a200", @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0xe000, 0x0, 0x11, 0x0, @empty, @empty}, {0x4e21, 0x0, 0x10, 0x0, @gue={{0x2, 0x1, 0x1, 0x4}}}}}}}, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f00000002c0)={0x0, @sco, @l2tp={0x2, 0x0, @remote}, @generic={0x2, "01a4816def372106b6fdfa075e05"}, 0x1ff, 0x0, 0x0, 0x0, 0xf, &(0x7f0000000000)='team0\x00', 0xffffffffffffffff, 0x3, 0x8}) ioctl$XFS_IOC_FD_TO_HANDLE(0xffffffffffffffff, 0xc038586a, &(0x7f0000000240)={0xffffffffffffffff, &(0x7f0000000140)='\x00', 0x10800, &(0x7f0000000180)={@_ha_fsid={[0x6, 0xadba]}, {0x25ce, 0x7, 0x4, 0x5}}, 0x9, &(0x7f00000001c0), &(0x7f0000000200)=0x5fea}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x10, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="180186da3a4ed1028dc32b0000000900000000000000fdffffff0f1371c922326363015a00040000009500000000000000a47a06e9119fba933960eb5e342608fd9ba9e3d2e9246f5fa2ed444b65e60cf1e9c5f11875e476ccae32b58b59ce6fe1ce9c4fdf3bc0cee3fffc362908a3702c702cc62f55e134fc8c6eed0700000002f9c669a3522dd620f18d26"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) 2m39.115033314s ago: executing program 2 (id=9281): r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140012"], 0x48}}, 0x400400c0) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r1, &(0x7f0000000700)=[{&(0x7f00000000c0)="0232e600", 0x4}, {&(0x7f0000000140)="1a36c585f33853c08764d056a86d003cbaf5cde47e5f51052d82c19aa673d671416429534237090097b3116d403a08c07bbbe72da665341d6592092455897fe84a54e94a435e8d3810ce4899d5b04d17b099bbec7fb7f005b03bb00f6860f0cdeae62faa71a5f2383e963aba417592d7a84958b0378e15fa25bca4ceabb5", 0x7e}], 0x2) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r2, &(0x7f00000000c0)={0x1d, r3, 0x0, {0x0, 0x0, 0x2}, 0xfd}, 0x18) sendmsg$can_j1939(r2, &(0x7f00000002c0)={&(0x7f0000000040)={0x1d, r3, 0x1, {0x2}, 0xff}, 0x18, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x4008004}, 0x24004043) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000040)={r1}, 0x8) epoll_create1(0x80000) 2m38.950269546s ago: executing program 2 (id=9285): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0xb3, 0x0, 0x5, 0x8}, 0x8) sendto$inet6(r0, &(0x7f0000000140)='g', 0x1, 0x0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x604ad000) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x2000000, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) sendto$inet6(r2, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000001380)=""/4080, 0xfffffffffffffdcc, 0x0, 0x0, 0xffffffffffffff87}, &(0x7f0000000000)=0x40) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000740)={&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1, 0x0, 0x31}, &(0x7f0000000780)=0x40) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) r5 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r5, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYRES16=r3, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\b\x00', @ANYRES32=r5, @ANYBLOB="739ecb79e184d34725d7bec1c22b60392163202d3c9d4c72f3ea9f59593dd9967140bd060f2efee952b02f4c2283de8e29af1cb4c701125a4e792ed1f427b3fe1d13f31089e1c3006399974ace52e8f6e2f1164e9f1b901caf9eda1c82524dfe5c51fec2587d812057cc7fee950c403db3d5f8aa309ecffad9aabcc0c24cbe6c90a7519b40060929181b095f28600fb9fc3103d1255aea2e3818579e364690b8f6", @ANYRESHEX=0x0], 0x24}}, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000340)={'vcan0\x00', 0x0}) r8 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r9) ioctl$IOCTL_GET_NCIDEV_IDX(r8, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r10, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r11], 0x1c}}, 0x840) sendmsg$NFC_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x34, 0x0, 0x8, 0x70bd27, 0x25dfdbff, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r11}]}, 0x34}}, 0x20048891) ioctl$SIOCX25GFACILITIES(0xffffffffffffffff, 0x89e2, &(0x7f00000002c0)) sendto$packet(r6, &(0x7f0000000040)="18", 0x48, 0x20008884, &(0x7f0000000080)={0x11, 0xd, r7, 0x1, 0xfd, 0x6, @multicast}, 0x14) sendmsg$nl_route_sched(r3, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000cc0)=@newtaction={0x84, 0x30, 0x12f, 0x0, 0x0, {}, [{0x70, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0xffffffffffffffff}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x2}}}}]}]}, 0x84}}, 0x0) 2m35.734261653s ago: executing program 2 (id=9300): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=@newtaction={0x78, 0x30, 0x200, 0x0, 0x25dfdbfd, {}, [{0x64, 0x1, [@m_skbmod={0x60, 0x1, 0x0, 0x0, {{0xb}, {0x34, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x0, 0x0, 0x0, 0x0, 0x4}}}, @TCA_SKBMOD_DMAC={0xa, 0x3, @broadcast}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x78}}, 0x0) (async) syz_emit_ethernet(0x22, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaa429e82211c65ebff0129902667d406000000e8ff"], 0x0) (async) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000001480)={0x0, 0xf6}, 0x1, 0x0, 0x0, 0x4004000}, 0x44011) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a010400000000000000000a0000010900010073797a31000000002c0004802800018007000100637400001c0002800500030001000000080002400000000908000140000000090900020073797a3200000501000000000000010000000000000000000200000a"], 0x80}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) (async) syz_emit_ethernet(0x81, &(0x7f00000003c0)=ANY=[@ANYBLOB="e33110495bfdaaaaaaaaaa0086dd60cb653e004b3afffe800000000000000000000000000000ff020000000000000000000000000001890090780000000020010000000000000000000000000000fc0100000000000000748e000000000018049595f429ae05000000a41d413270a44d2e6f790a3872d50bb14d25344dc5b3a281"], 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f00000000c0)) (async) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000004680)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x7}, 0x48) (async) r7 = socket$kcm(0x29, 0x5, 0x0) (async) r8 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r7, 0x89e0, &(0x7f00000001c0)={r8, r6}) (async) r9 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r5) (async) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_DEV_UP(r10, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000001c0)={0x14, r9, 0x1, 0x123, 0x234}, 0x14}}, 0x0) sendmsg$NFC_CMD_GET_SE(r0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r9, 0x2, 0x70bd25, 0x25dfdbfe, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x4000) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="98030000", @ANYRES16, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r11, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c090000560333"], 0x398}, 0x1, 0x0, 0x0, 0x4094}, 0x0) (async) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r12, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r12, 0x0) 2m23.730042516s ago: executing program 2 (id=9303): r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x60, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x4}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x18}}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_SEQ_ADJ_ORIG={0x1c, 0xf, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x200000}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x3}]}]}, 0x60}}, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) sendto$packet(r2, &(0x7f0000000200)="000088a8", 0x4, 0x14000b01, &(0x7f00000000c0)={0x11, 0x8100, r3, 0x1, 0x80, 0x6, @multicast}, 0x14) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000600)=0x9, 0x4) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x26}}], 0x10) r4 = socket$nl_rdma(0x10, 0x3, 0x14) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000180)={0x80000220}, 0x10) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001a00010000000000000000001c000000000000000000000014", @ANYRES8=0x0, @ANYRES32=r5], 0x30}}, 0x0) sendmsg$RDMA_NLDEV_CMD_SET(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="240000000214010008bd700002dcdf25080001000000000009000200"], 0x24}, 0x1, 0x0, 0x0, 0x4000801}, 0x40810) listen(r0, 0x7) r6 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @local}], 0x10) setsockopt$sock_int(r6, 0x1, 0xf, &(0x7f0000000600)=0x9, 0x4) listen(r6, 0x2) 2m23.599660664s ago: executing program 2 (id=9411): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r1, 0x29, 0xd1, &(0x7f0000003a00)=0x710f955b, 0x4) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) (async, rerun: 64) setsockopt$sock_int(r2, 0x1, 0x29, &(0x7f0000000000)=0x100, 0x4) (async, rerun: 64) write(r2, &(0x7f0000000340)="0a000300010000", 0x7) (async) recvmmsg(r2, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x10040, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="5c000000020601036c0000000000000000000000050005000a000000050001000600000005000400000000000900020073797a320000000010000300686173683a69702c6d616300140007800800120000000000080008"], 0x5c}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r4, &(0x7f00000000c0)={0x1d, r5}, 0x18) connect$can_j1939(r4, &(0x7f0000000140)={0x1d, r5, 0x0, {0x1, 0xff, 0xa8fe8ad4eea2351f}}, 0x18) (async, rerun: 32) sendmmsg(r4, &(0x7f0000004300)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000340)="462ebbe6d907a66b0ccc24aec6ed49b079434d31933d6fa34c", 0x19}], 0x1}}], 0x1, 0xf5) (async, rerun: 32) r6 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r6, &(0x7f00000000c0)={0x1d, r7}, 0x18) (async) unshare(0x22020400) r8 = socket$rds(0x15, 0x5, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01"], 0x7c}}, 0x0) (async) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r8, 0x114, 0xa, &(0x7f0000000400)=ANY=[], 0x4) (async) connect$can_j1939(r6, &(0x7f0000000140)={0x1d, r7, 0x0, {0x1, 0xff, 0xa8fe8ad4eea2351f}}, 0x18) (async) sendmmsg(r6, &(0x7f0000004300)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000340)="462ebbe6d9073d6fa34c2d28aa708936bb19e656da2f34ecdbf8f27b8f9dd2ec16ada05787201e46e7036b00bbb65ff0a8cadc7fb7831750f1edb022515b25d6e1fa50dad846b3ee57a293373af86975a635ca51bb40ed19", 0x58}, {&(0x7f00000003c0)="ba0806f7974098b7201514a5e6f35395a8a7edcda4309e5a638a81366c5d0f119a231a5462c06cda314dbd3b5437fc61a3153d140a4d0c9c59cbe1a8b3bf5e564de1cad214b8431ae21aed41a2cde48a12f29c20d7a214c24d2bdbbc4421f6908b5ee9fe755168be5deb9e16613a8c215e2b44e8d06be4b6d0bf30868765fe1a1a05def3639bd2b89ede6975868d70fcac2de92e6661b6a33c3f3c0dee05295baca225b7e3e8985b217328cacfaa945e0221d3a76e1177a420c7daaa142ce546ca3ff6e8b91197f7a94e98d072e8d9b348591d9fca29dd6b9ec352d74edd1ce0c63ad64caaa1e30e24ac0305c5999b5545194ec572ba27fe4b543e3f7633b2d8d9639a30138f1efaade9f82fc877cf51130c8570f56fb41c0f5515cc9df80e2cd543be16799866ba259062726d99a5a6d7bda02334035b126c1ab323e2f820b050c9773a1098a1b9817f1a408dee2a2f7c91a5cebba6ace07171ce236ec47bce5dcd81bc685d4cb3bfcfbc24774aedf1f388df7db5aa5a572b086371a74d9f470da1f57ca8cb2ecb017c001f64723146442c217f3c91e2bbe4bc7610a1909048488fed84295b058272f42d812c7e5738a90f017bd49d5c849e42e18e1670a89fd20db5e1d6529c9cec7f44318e2a478f3b81375f72414e076646b6726de3e78438df63d631d0354d90e9de003320ffabb2c81576a6c5d2a769b83cb85c23a91ee49f607c8059932f3cbbf78a6d9edd2261101fb3176a6a4e2f9ac5f02144076c24ff2233104df6d53b553d19389eb4c48bc6eb88f3f950e9d27681502390eb01ccae9e9b730fdca1c55a7255b71a33191ac570ad056254e1a69ad5554b9380e53883883d0e535ecdf58516b416c15a24754b9a25ec06b8af3e40052881865b87150edd413e22858ba4e943b7a8a3ae435c4bb600c9b5678896e224b4dfc3c97e270fff363880acc4d6d2fd18de851ba33ae4afc4263e1e53ae4eb071a3230ee296930d76cd3d5bb96f3c5942c9a29207ca16f5854dba086d5c1c05cc968c4561941a749bfb44f9ede6d0bb3c00dedf93b1210eca37e873718ccdf7cc055d7bab4dd77ff95f3f20f41a92830c62f182ac3fb847ce8df7fdb3f616660bb752e4a86157f8d8c5ae61139cc76b38d9fbf84fc6429fed5deeb995998d2d8cf6547e7bff62129629d7087495d57b47e9bfe5301a1a7311569b0e28f5049ae88869f20c7cb4f6833d235c02cb9fca9ecc1be493f2bef37eadc3706e220b52b4ad24ee2f68346114be52c1dd3fa1b373c2272d3344b63111459934f1a6580d26b0c854fe0cd485c6996b6fe807b122b1a30af24610cdddbbdde5601d35a4f66cdd5a547870bca1182273f2dd236b7227bc9015026a7610c321279487c1d3ad009069eaa0a8c0939e507b8609ea5d3c6a3fc8d28a8eb599b12dddffdeaa5ce05ccd902627239ea537253d6be666b94f244a5c9525bb4f535496bbc3bf37fb20997d0b9054b9f59a1d202a94e9333a47f436fee2202999b76a1914b6c8595339d91bc07f302f2918d1bd933b497f778d61acf6ff304314d9b95cfc7e722dd28dd86a92ddcad07b96f46ae9ca4ae3ed8f0786668b531d9b680eeda7728b9d918febe3d387099314f104cba399acc360248a5262e97af554bd550e0e3c9353c1f1d603ad28f9e1e351a420223bfa4c18adc440e3e16ec47c818a28ed4c1683dd076e4424ef2bc9980aec0e3cb255a34b590c2e387ecac30be18e1fda22311e2993f4ae17172a1048b84ee5a7b33970058b55a43eac46eb5ec05d53b7031cec0e121b2e0947fa998eecd231daa2d5b1a875bee2e834610cd363cc7644911a34162bf247593e2cb8c8c62091f17532fb903eea3b10135b6aaf7ae7d82998f1063907de807b60763a9d34b3af13019d99148f3ab7fa5430523df350ba3105c717764392be28a24c08c20e38f87cf19904b0dff0c9ec3f1d83184923ec679dc06149f8465a6b0eedab15742ebd4fba0e5308c968e7db234d4c33024ff28439323af1ec1bded0dde9dd08ebe72c1782d269cf08db95e9dd431355f4a7402e4a31fee601362d32f05e23ba00bfae85f018b54d7cd38929b8e1e9bd16b7b07faad560f5ff07311d68e7fe25209fe1e0b862d2d19d551cdb4a5ce04159fde81a995a927d2b3b1ef83db81b71255ac8c2a00bce0fc0b525214f57c77749c9b791f8d779a71453183661a41dadec853f6922b485a73ee7835d5ba9a2c88be84826793706a991ce5326b0bb1cfe4dca625e32824e42a347a65305ee2cd44f6291aef2acf979705ccbdd2277cff875198d26176b81669a8eef544d5d9b5b16a4f4bb3b2895254a5dfc5a40f8121d366a4e8150d0fba93e2f443c8b378763808e42731814618de1e428660b527764", 0x6a2}], 0x2}}], 0x1, 0xf5) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000019300), r9) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000019340)={'wlan1\x00', 0x0}) (rerun: 64) sendmsg$NL80211_CMD_JOIN_MESH(r9, &(0x7f000001a6c0)={0x0, 0x0, &(0x7f000001a680)={&(0x7f0000000000)=ANY=[@ANYBLOB="3000b023", @ANYRES16=r10, @ANYBLOB="01002abd7000fcdbdf254400000008000300", @ANYRES32=r11, @ANYBLOB="0a001800030303030303000008006b0016000000"], 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x8000) (async) sendmsg$NL80211_CMD_GET_INTERFACE(r3, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="000000007767b760a7264e58b570a5b9bfe17cdac05ed0044b654599b8951a80ad08c19d0480f6", @ANYRESOCT=r11, @ANYBLOB="020028bd7000fcdbdf250500000008000300", @ANYRES32=r3, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x810}, 0x80) 2m8.005355215s ago: executing program 32 (id=9411): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r1, 0x29, 0xd1, &(0x7f0000003a00)=0x710f955b, 0x4) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) (async, rerun: 64) setsockopt$sock_int(r2, 0x1, 0x29, &(0x7f0000000000)=0x100, 0x4) (async, rerun: 64) write(r2, &(0x7f0000000340)="0a000300010000", 0x7) (async) recvmmsg(r2, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x10040, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="5c000000020601036c0000000000000000000000050005000a000000050001000600000005000400000000000900020073797a320000000010000300686173683a69702c6d616300140007800800120000000000080008"], 0x5c}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r4, &(0x7f00000000c0)={0x1d, r5}, 0x18) connect$can_j1939(r4, &(0x7f0000000140)={0x1d, r5, 0x0, {0x1, 0xff, 0xa8fe8ad4eea2351f}}, 0x18) (async, rerun: 32) sendmmsg(r4, &(0x7f0000004300)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000340)="462ebbe6d907a66b0ccc24aec6ed49b079434d31933d6fa34c", 0x19}], 0x1}}], 0x1, 0xf5) (async, rerun: 32) r6 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r6, &(0x7f00000000c0)={0x1d, r7}, 0x18) (async) unshare(0x22020400) r8 = socket$rds(0x15, 0x5, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01"], 0x7c}}, 0x0) (async) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r8, 0x114, 0xa, &(0x7f0000000400)=ANY=[], 0x4) (async) connect$can_j1939(r6, &(0x7f0000000140)={0x1d, r7, 0x0, {0x1, 0xff, 0xa8fe8ad4eea2351f}}, 0x18) (async) sendmmsg(r6, &(0x7f0000004300)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000340)="462ebbe6d9073d6fa34c2d28aa708936bb19e656da2f34ecdbf8f27b8f9dd2ec16ada05787201e46e7036b00bbb65ff0a8cadc7fb7831750f1edb022515b25d6e1fa50dad846b3ee57a293373af86975a635ca51bb40ed19", 0x58}, {&(0x7f00000003c0)="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", 0x6a2}], 0x2}}], 0x1, 0xf5) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000019300), r9) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000019340)={'wlan1\x00', 0x0}) (rerun: 64) sendmsg$NL80211_CMD_JOIN_MESH(r9, &(0x7f000001a6c0)={0x0, 0x0, &(0x7f000001a680)={&(0x7f0000000000)=ANY=[@ANYBLOB="3000b023", @ANYRES16=r10, @ANYBLOB="01002abd7000fcdbdf254400000008000300", @ANYRES32=r11, @ANYBLOB="0a001800030303030303000008006b0016000000"], 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x8000) (async) sendmsg$NL80211_CMD_GET_INTERFACE(r3, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="000000007767b760a7264e58b570a5b9bfe17cdac05ed0044b654599b8951a80ad08c19d0480f6", @ANYRESOCT=r11, @ANYBLOB="020028bd7000fcdbdf250500000008000300", @ANYRES32=r3, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x810}, 0x80) 5.384884761s ago: executing program 3 (id=10536): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x13, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000061107e000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$pppoe(0x18, 0x1, 0x0) (async) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000080)={0x18, 0x0, {0x4, @remote, 'virt_wifi0\x00'}}, 0x1e) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="7b130000000000280012800800e0b3071895c20100677265001c000280080004000700000005000a8000000000050013ed130000000800"], 0x50}}, 0x0) 5.079159962s ago: executing program 3 (id=10540): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0xd, 0x9, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x5}, @call={0x85, 0x0, 0x0, 0x88}, @generic={0xa7}, @initr0, @exit]}, &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x34}, 0x90) r0 = socket(0x8, 0x5, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe", 0x2c}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722", 0x44}], 0x2}], 0x1, 0x40800) (async) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000000200)=""/78, 0x4e}], 0x2}, 0x0) (async) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="340000006800010000000040000000000a0000001743000000001800088014000100000000000000000000000000000003000400a1820caa000b8a2561a06c1aba3e4d9f904607598f7afe9c0df48da82b9583139591095583a253bb57c5ad54075e052ac27b5e61adf09e1da7f966ecdef3fcfd72bcb8ab2571be3191ce7d846f188690c8b5e8c5c2e3366b2937ca2d94c285f44b29ab4b39f3bde80c559299edc774100328ea429d9b7dc2e87840326951"], 0x34}}, 0x0) bind$vsock_stream(r0, &(0x7f0000000040), 0x10) listen(r0, 0x0) (async) r4 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r4, &(0x7f0000000080), 0x10) (async) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r5, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) (async) r6 = socket$packet(0x11, 0x3, 0x300) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'vlan0\x00'}) (async) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, &(0x7f00000000c0)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) (async) recvmmsg(r7, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff48}, 0x88b1}], 0x1, 0x40000121, 0x0) (async) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000500)={@fallback, 0xffffffffffffffff, 0x3d, 0x2014}, 0x20) setsockopt$SO_TIMESTAMP(r7, 0x1, 0x40, &(0x7f0000000200)=0x4, 0x4) write$bt_hci(r7, &(0x7f0000000200)=ANY=[], 0x6) getsockopt$packet_int(r6, 0x107, 0xa, 0x0, &(0x7f0000000140)) (async) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r5, 0x0) (async) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0xc, 0x3032, 0xffffffffffffffff, 0x0) (async) setsockopt$sock_linger(r4, 0x1, 0x3c, &(0x7f0000000180)={0x1, 0x5}, 0x8) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="9feb0100180000000000000018000000180000000a000000080000000100000f00"], 0x0, 0x3a, 0x0, 0x6}, 0x28) sendmmsg(r4, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x1, 0x24008094) 4.708016758s ago: executing program 3 (id=10544): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) r2 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r1, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600, 0x1}}, 0x20) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000080)={r2, r1, 0x4, r1}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[], 0x3261e) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x13, r4, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000280)={'nat\x00', 0x10, "2a5164dd9e9bec7d7fd1765e5b0b88e6"}, &(0x7f0000000080)=0x5b) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$sock_int(r0, 0x1, 0x4, &(0x7f0000000300)=0x5, 0x4) r5 = socket$rxrpc(0x21, 0x2, 0xa) r6 = ioctl$NS_GET_PARENT(r4, 0xb702, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f00000000c0)=0x0) r8 = socket$xdp(0x2c, 0x3, 0x0) bind$xdp(r8, &(0x7f0000000240)={0x2c, 0x1, 0x0, 0x3}, 0x10) ioctl$BTRFS_IOC_RM_DEV_V2(r6, 0x5000943a, &(0x7f0000000440)={{r4}, r7, 0x20, @inherit={0x70, &(0x7f0000000140)={0x0, 0x5, 0x1, 0x5, {0x38, 0x3, 0xffffffffffffffff, 0x4, 0x7}, [0x7128fa0a, 0x9, 0x4, 0x80, 0x7]}}, @subvolid=0x9}) ioctl$NILFS_IOCTL_CLEAN_SEGMENTS(r1, 0x40786e88, &(0x7f0000001540)={{&(0x7f00000002c0)=[{0x4, 0x4, 0x7, {0x2f89}, 0x3800, 0x0, 0x8}], 0x1, 0x40, 0x6, 0x9}, {&(0x7f0000000340)=[{0x38b}], 0x1, 0x10, 0xc, 0x2}, {&(0x7f0000000380)=[0xe, 0x8000], 0x2, 0x8, 0x81, 0xcb}, {&(0x7f0000001440)=[{0x3b, 0x3, 0x40, 0x39, 0x9}, {0x7ff, 0x8, 0x9, 0x6, 0x5}, {0x7, 0xc, 0x5, 0x1, 0x9}], 0x3, 0x28, 0xa, 0x8}, {&(0x7f00000014c0)=[0x5, 0x8, 0xd, 0x2, 0x35b, 0x2ee, 0xffff, 0xfff, 0x2], 0x9, 0x8, 0x1d, 0x5}}) setsockopt$RXRPC_SECURITY_KEYRING(r5, 0x110, 0x2, &(0x7f0000000000)='\xe3]%@]%-:@-\x00', 0xb) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r0) 4.294323545s ago: executing program 3 (id=10550): r0 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_mreq(r0, 0x29, 0x1d, &(0x7f0000000200)={@empty}, 0x14) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000007c0)=ANY=[@ANYBLOB="a0000000210001000000000004000000ff010000000000000000000000000001fc020000000000008e8b0000000000ff4e200005000000000a000000ff000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES8=r1], 0xa0}, 0x1, 0x0, 0x0, 0x4}, 0x0) 3.998648693s ago: executing program 3 (id=10552): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x3, 0x220104, 0xb, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000380), 0x0, 0x2, r0}, 0x38) (async) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000040)) 3.618026677s ago: executing program 3 (id=10555): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0x1, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x5}, 0x50) pipe(&(0x7f0000000380)={0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000400)={r0, &(0x7f0000000280)="8c440a6229c3c48087ed4b3d43e9926331108f63a769fa5564788babe584100d13b4e36f7185934652331aaccc0e44a3b7234b4793279ede0c2530bec446c81107296f60c07b1fcda8588b641acd69d2240223157b930618501c74c55d1083eb5d6507a2f83a4c30567ca0ba61b48e1af1a070bfd33178d46f05d7cdf9e7598b1e279af239d84546af0681d452d56d50ff4e11d33e0b2d42d75767ba235e1b38e56d844e11d7dd9bd49705351a5b5129314712786d99aae0da89751c865f860b3309fb3f1c8d21a1d1c15abd87fb86c28aeeb55d0feae42ccc728ac90216404e8ff21032c307f87ad68d5572f77d", &(0x7f00000003c0)=@udp=r1, 0x2}, 0x20) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newqdisc={0x24, 0x24, 0x0, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0x2}, {0x0, 0xfff2}}}, 0x24}}, 0x0) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)={@map, 0xffffffffffffffff, 0x2c}, 0x20) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000056000100000000f70000000007020000", @ANYRES32, @ANYBLOB="200001"], 0x38}}, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000240), r3) 3.329673409s ago: executing program 4 (id=10558): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x80000000, @remote, 0x1}, 0x1c) syz_emit_ethernet(0x66, &(0x7f00000036c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3f}, @void, {@ipv6={0x86dd, @icmpv6={0x1, 0x6, '\x00\'$', 0x30, 0x3a, 0xff, @remote, @mcast2, {[], @time_exceed={0x3, 0x0, 0x0, 0x2, '\x00', {0x4, 0x6, "f028be", 0x7, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @remote}}}}}}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0x3, 0x800) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$bt_hci(r2, 0x0, 0x1, &(0x7f0000001500)=""/124, &(0x7f0000001580)=0x7c) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000015c0)={{{@in6=@dev, @in6=@ipv4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}}}, &(0x7f0000000240)=0xe8) sendmsg$nl_generic(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={0xdb4, 0x15, 0x1, 0x0, 0x0, {0x5}, [@generic="5da14e0c91b9d1d4a0b3ef33559fc7ba415ac622dfabb91f83c11f26d6ce9b93cdd161da15", @nested={0x1218, 0x144, 0x0, 0x1, [@typed={0x8, 0x31, 0x0, 0x0, @uid=r3}, @nested={0x1008, 0xe8, 0x0, 0x1, [@generic="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", @nested={0x4, 0x29}]}, @generic="2ef5fd4298d6dcfecb0ed351bef3e67a2098a7ca93e1371cb19353dad2231844b5585c1d984502e39bd5de29feb62b958b855f2afec708af6d8643dce1d3c55ee0e153c7c6be8fbe424b197b2717bf827a734d74185068d4a057217e3257b5221f1dada557a79c40a1ae189dcea920e9afedadfe4a01aa57fec6c6eb760dca661f32e2041b1ee11389b2f29f0ed2f5c143d35cbf47dc39952f09b6ab052d8fe78a01e3930b7376a9a6b716f4da681215763ac7ae52417c8749647d37c0e725871ff6fec7c45c13855631278ecdcfb30c082c", @nested={0x3e, 0x11e, 0x0, 0x1, [@generic="497b0de4525ed5781083c00936cd30030ce15b8ab209", @nested={0x4, 0x151}, @nested={0x4, 0x15f}, @generic="0c0a8fcb8f104beb41396c89a5e7086f324d5fa3f828a298ecdbf6ea"]}, @generic="a4aeb6d5f2fbb14794d1a8fa7d88b511661f58ff667a136cdfa4a00997d585296288419bbaa0ba45ddc7db013cefee7d4842004475e373553262087b63df6752868e819e4118ed09740aa858d5d577bd4752be5fda3f6788dbf1a2bc94505bc6dcacf51c4eab445c2227ea316c054248cfdb0df1989542d81b5e2cd77d9952ce8d6dbbf159f9a3733790d0967d10c4b86f09efd7b3dc8f37156bce17e582fcb7f2b2ad2da68db94cff727459e5f1dd6ca565aa27a667ef62b50235af9c877eb4771c22de669c82a3e16770e7dea51dabaf06cd8b09ea52634328ae173b919f630cb5", @nested={0x10, 0xde, 0x0, 0x1, [@nested={0x4, 0xdb}, @typed={0x8, 0x6e, 0x0, 0x0, @fd=r1}]}]}]}, 0x1254}}, 0x0) 3.095168187s ago: executing program 4 (id=10562): r0 = socket$pptp(0x18, 0x1, 0x2) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f00000000c0)=0x100, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000002000010300000000fbdbdf2502000000000000000000000008001a"], 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmmsg(r0, &(0x7f00000026c0)=[{{&(0x7f0000000180)=@sco, 0x80, &(0x7f0000000a80)=[{&(0x7f0000000400)="fa49c7f92fcf782f53391b5b81256e0b84a3196cb579059b40e010f73ccf3bae78256562465ed66b9af675e56245141db1cd13a97d083e95dc7eb17244f9657f2f899366b6cb3ffeccfdec1ebe3e78b74d628213b6e7c57e4a3c8f13a0edd3af693d500556ecf9c253eafa8347f7939213098037b7d03a363bcb623c2b47063575dec0cd8619f1f28dc992ec70b2871f0629f9f630d1f63d073e9fb80aa6b16ea27bb1c76f8f6c2c2440a6ea5b90d66dea1c1e7168139bc2b2238f9519e07be752e54de00f21c2569425e962a5db6b", 0xcf}, {&(0x7f0000000500)="448738d7ef72102cb7dac8de345373c91bb49ddd64f416b606270c84d0079250a7a864ea40e675fa2cc988974ca95fa5eb1f1130dc82fa8739ace6b49ab92d8305f455d986899c4aced248cb018fb2ce6330577794a9dd999668d4e09728e913b51ce363e752a20a570fae2bb1a612a744f1baa3f6b2529211a5bb1b2b6e131593d47047af8f9a86865027547bf3a6cd890315101085864c15166ecf", 0x9c}, {&(0x7f00000005c0)="05df80cf960c9aed9b47f04aa54edeaa294e54033785992886e8413cd13341577ee97905bb828436297d0c53d82f04a0704369d0e7f71348f043812483f4bc3b51b23e2e6f238d6154419fef9b4449e27f3ef283cc2df7236ed357f9f925c2b55152f2d64f183f1a6bbafc665bb5d9c1448adb9bd2fefe2c7712c4535f29d919fb9ca6", 0x83}, {&(0x7f0000000680)="ef3a340285e6a57359abe2f05aecb9b5012ef8d18a391ba41328531d61ad559dcedd22c34b5e1c3bbf0eb3f1bd381ba2789a4a0d9449cfc422909f395bb575732b896665f1a66b7c0f5c6d201ecec6b82cda4cac3eeb723b7d6e42f0ea859edec12bce393761f5ea26b7db0ec3a4e97603c9b6e20776955f0097bf393f7d1bab5065974452e5aa7d0fe6e96725dea501a7906380aa355ec2ffac", 0x9a}, {&(0x7f0000000740)="5c42cd6117daf82c3aa15063caeae5a04444b94e8223483c4acb907c662284fa5195654250d803e46ef8335ef98b57092b283276775bd78997822e585363b6f6c3bd0368c386abff9fff2e9aa1761fd80bc842a609ac582baeed7abc02bb3abaad920f053ccc301c6a04cdcc55cbc20c3515c0bf2fe01f5d15bc125d75ca54596e877b6724bd8eea6bb402f7f876332d826fab31f4c7846826ca7bed5c523a2a94278eb3a55225d6727d2238ecab53d6391a6a89e1908e727577720f5f041685090eac2e27061535d6381b", 0xcb}, {&(0x7f0000000840)="62021a6221d948647b20ecfcaf18aabccf649d2a72134d98882ad3772511cefaf090b711c489eafcff18327cd266229c054b88c5f8a3b1e8722fd6e705d4a6f1af8d6f53f420f42980b448661064785ebf56e7f4d454d508746f", 0x5a}, {&(0x7f00000008c0)="3649f0269a0a611bec8f66ee72b305b8b663d90b279f38c22012be4c222ee561d881a2b7ba2e48562befabc8e7d0d34186198bef24948d4c78cf86b9ab03ddf11a2d46240ba2a5a658f5804d549f5fc1081e0809f17c58a22113717f0ef95a06f5ddb4bcd7269b7f9fd6f81587e49077b8484b68097d9aaec59cafc3ebc3dca33d31e72ed6fc9325ba2bb71678359c573b338951fc6ad30aa4bee3157417e9d01ef2505f023ebe0fdb26f8914e507a4b44ee41bb1057b730fefb0cb0d93d", 0xbe}, {&(0x7f0000000980)="cc9c79087f3fa30d5d5b2cd1f9979ab5b10855a6062a3c4eef4feea683af8c2ed443bbd41141f2d2ef5e275ea11165731797db342b4d1420ef2d60e1a9338dc73f8721643f5df79d0ab80fea05f0c656f6832fa3b5b5b28183d3b8d41c30149f9fcbfee9cda1df538393698180f1e40d96536d14fcfbaa6e05e8d8038820360b71fe2b33684ddbcf9c17c303769359583db14076a007e7f631f964bb4cd3bdba937611351aaecf1a7deafa169128b25a5993ab7f952904422581f7b487", 0xbd}, {&(0x7f0000000a40)="2e672473d1bf41b872f4da71d93e98a6f86ba2db680c9862", 0x18}], 0x9, &(0x7f0000000b40)=[{0xa8, 0x109, 0xb3, "3985dd412a312a4746e846aacd8aba263498b5e3fc03537144ba226e3d8003e925c58074d6a3b815181006c60e2f0df2496082319e4f1bd0866105de8fc071b31ede7dc1641df5bfec33eac8c4e2be6f1ad90593fd96bcad88cd7999f6964d275d856a4e4cdd594c37840febbf8fb170443593e2e2612b029550e614e7b57a3e9c7d83ebea51ee97373ba51687afc545903c"}, {0x78, 0x111, 0xcd, "f11b9e97859c20699885ae69315413283da2b1d7108754ca35caa348634c4ad8bcf4765d1f6b18c0058920949f9db16ddccfe2d9c90d29fcf20133fc114dd9c7ec54f3eeed68c887c89943a41d8cb8011e38103f2ba0dd4eca59c5ec1c7744810f658de3d4af74"}, {0xb8, 0x101, 0xcb, "aa04ec3b85372024fba41dd0690959fc2dae3dc78c7a0bba90232becd82fc985d4886b38b347f546ff3edcc3a155c81d0076fb663ba6570410b3024962ca167101f3f2d84ded13b13c92ec0783f29996136a54e477e1019cc9898af1aec74b226935448c74991718d3fe186bfe32bfcea06264dc7afce1b49ea68c1a11f2c82eec6b296e9add1d6b7af77928c9a29835ee63546351cdfadd22da7a0d2b7b110accf8674653"}, {0xf0, 0x113, 0x1, "ac69e7fa8c45918bc027780601008a3d784915f38848d5a529eb92896a524c2f5375424b8d1ae00098876a254ad4715a5adcc6f1f1e9bed40a41d051f506ddedd527022f1671a82296772d93184c680596874790fc479ef89ffcc74502c0b0cfca90a51b7d64379279b8a623b3fa6d4c7f7e2563c4dab7933922b497fcac19e73c7aaefa44764ceeeeb2a11a45d039b84f79d5f87869a3545efba53a1474f4049b4f431e23039433fbf7e75f76c1a927324bf6675737e926bbbe38c60af597ed11a2de0ce84589b1271e9a0d4779f17b1f51d101b4f84b8342b9"}, {0xe0, 0x1, 0x4, "466459c9505643bb5ce639bc713a8260eb20fe56c757bbd0115a52d997751a45449f9f2ee5d5214a2445e164103f4cca5cb74726dca63b5fbc7c3f27bbfb35ff4576e00de0ce021a383097dd6b493781b314e06bffde68478c3cf00ff2e078e75a8a6e6d3e3b96e37932a88ec5e5ae57fa4c3b4c6bf9c3776bd440df62b6f25f5102d0bf8c3e9978b2de8f92a8939dce1770656b8f8a067feb9f4f613b6de7edeb8d73fa3756ae6d981be42a26671a8c480fd012da0b29e59b5435c79b242849d9b67529096ee3b71bc9c19aafa03b7f"}, {0x90, 0x104, 0x2, "1ba654e189bdf3d242a4b6dfea249f39be1dc19a0e16c02f3ad0b065fb5dae9d410f7c964d383c5b4f4f93f5bbc69818a237129a9e861d33770a05e2434a3f4f80cfcfdc8f67d8cd219b1f51e1ac7ed9a57442ccb9a7b9deb6b702e3ed8c495604b00472a429455999fbc583335670ae446d132724a39a22944c87d7482ae4da"}, {0x18, 0x10e, 0x519, "4efadbeb47be3a51"}], 0x450}}, {{&(0x7f0000000fc0)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e23, @empty}, 0x3, 0x3, 0x3, 0x2}}, 0x80, &(0x7f0000001300)=[{&(0x7f0000001040)="e8f871fdf3f9af50545cfaa93d015ed8d6a9617e3c07a7a3747509ba52289731fdf1326689089e4131035a", 0x2b}, {&(0x7f0000001080)="b4259077af1426d0b4e677cb988b2b54bcb9e3dbee9c71d5c3c8b236cd9a2479444d97aa657bc66b76e7d0b920fa977094538d0c1d2983517f412de8559188518ec5a2dfafae4a3930d03a8d1c3d8655b8c289b2677302ed42ba0be876b31bc643e79fc1f3dd5a5718eba216c6b61720d9a1ec438fddd69cf034063bd22402d673582190dcdbb541b980e236bfea19c1f76a07f3ebe5a2cb93a5111d9739074e2f8abbd1d7d61449ab6ad0c5e1e570f6308c5eda7fd008c414f56e35fe1d9445773df3e4b2b4a2af42bc41b71dcdb35e77eff1893488c9ad3a003463dc7a2d3f6d9240", 0xe3}, {&(0x7f0000001180)="dc5c413c8c446ced8ab5e8b96344169fb9d2eb21d61c04cea00080917d383d9d5f4d7f091672e3bd834143062861363c53c04967c5075e411fc922d42949477d277754ae67019708080b662fdb0ba59dd275d90f02b5e34662b2fcdc635d1ef834ad371a9563b0f0b5b19a677c1709b8", 0x70}, {&(0x7f0000001200)="4b99fc27cbdec2d55c1eac6b961318a50b3a268fcb94a48337b9e265aabc447cb72560338751263799d127144043d1f99fd1484a4fba4f0eafb371df70d171085198856dd185b847159e7ffdf1c8e515d2f492ed671597b60757dd6df727f5f62a43753a24b1299dea6a149281b4f5515e4c73e60290396ebd968cdf7738d606b36a862431f5d802121186d5bc6011d71edbfc30a849cbda40134e85f24b35d2b444da3f48d8d174230a4f78ba698afc3fbae371fd7b803c1c1c5634b1805f13f7ff282a0d352dbcec2dcf5be15c1bc41466d3ea662cfdf40bcc9a463a76d7c7a80b62abd40a66e43dd93c89e2a57a19", 0xf0}], 0x4, &(0x7f0000001340)=[{0xe8, 0x88, 0x9d, "ef691ef030ffd36ad72bdf2b2b2f89d11367173187531f9a7bb8370c49dc6bd7e0574108c1b444d9f21be21e5d2c15332b4d71455bcbf7e57ac5a5ef509891c313278827d9d2a04914b08f631f29a9024142deb5c3f4273d7ad1c706f300de0b9f21bb6b45082d597e55c94abac74f3fe198400a2c52458acb8a2efaf2691da42a57991e98e8d904918f4d736895b9f157e9ea29713ef2ec420a05fc6b7787f3b7e93c733637f779559612eb249a3cf69fa27926c0af3f085ed2fe891f817e7e806b75b9010642f3be2f00ce0ad761c31b55"}, {0x78, 0x118, 0x9, "57248e961bf977434e17a59a8f35d3310b2296b81354ec784f358af31f4881f0dc43b4909bef6a89da1036ef8a61320b3223f580db06db02aeb3401770ff8d15677ef0d239d96f7573a61c426ea4017e897053c0864859d910c9c0ab09cd2787bb"}, {0x38, 0x108, 0x3135, "c4e88445c9dda98b38188f843bb190c8981c3c579a4eda3e0680a1b7fc99997d339c"}, {0xc0, 0x108, 0x8, "b19037372ef5770ccbf706f974917d787d249db1423a363b1744fc9fe46d5338e7b345002de43a06c143f06e57fbf6f63901e18903ee345c9cc6ab7b29da4cceae80ad737fe24c8f3220e318b44b71d9ddf3c9e7910bd376d0dcccde5bbc923fb0b054bce04543ae677686dbd34debb66ebf2e344a1db73666b5f7f6a7ec97e37fdaa38359235758696c582f2cc12707ff162a97faaa46ceb1cf56d3dc865690720ca7b866bdb3830978da2e06"}, {0x10, 0x104, 0x81}, {0x30, 0x135, 0x3, "6891aa04ae1a30a4e8e20ab16a60aabb3dc839738afbb762ed9072"}, {0x1010, 0x11, 0x0, "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"}, {0xa0, 0x1, 0x2, "d45742482a1d88d71726f7b1b2f8f0dbf2538394e835e2a89089620bae362848b31096b9a836632b1bafeadd48d34bbd9d1ef20461befb1ad43b19610290db3e0928a6c337c342eb973352a4eb9a67a8866e371e7e62f5c272d8a22b41a5cf1f2a9bff402c31b9e0b7185bfb69c5058efe0e675c52d05a69f91bf0a9e901efb0c42499c357dd47b9071823d60d18"}], 0x1348}}], 0x2, 0x20000080) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r2, 0x89f1, &(0x7f0000000000)={'ip6tnl0\x00', &(0x7f0000000140)=@ethtool_cmd={0x3a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x45}}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4020000000000007911000000000000850000006b0000009500000000000000359bb9f4ffffb136000440c89844f3cec063027b45b1bf3fa2cef4363021028e2b63040fcfd3a9b59fed6aa4172c30b77f38d6daaed700"], &(0x7f0000000100)='syzkaller\x00', 0x4, 0xc5, &(0x7f0000000300)=""/197, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000002c0), 0xffffffffffffff35}, 0x54) 2.810907677s ago: executing program 5 (id=10564): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) syz_emit_ethernet(0x0, 0x0, 0x0) r1 = socket(0x2, 0x3, 0xff) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000180)=0x255f, 0x4) sendto$inet(r1, &(0x7f0000000040)="0f83b07ef75b4ff0f2d163c7c8a0d8fb8ab88f5b134df9055ab57dcbb68052fc319ac66954faccf67679a82789438adf3664351d952cd72c0dd8e9e7", 0x3c, 0x0, &(0x7f0000000200)={0x2, 0x4e21, @remote}, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r3, @ANYBLOB="080005000e"], 0x30}}, 0x0) 2.810387338s ago: executing program 4 (id=10565): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000880)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x4c, &(0x7f0000000000), 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) close(0x3) (async) connect$unix(r3, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) (async) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) (async) ioctl$XFS_IOC_FD_TO_HANDLE(0xffffffffffffffff, 0xc038586a, &(0x7f00000002c0)={r2, &(0x7f0000000100)='+\x00', 0x101080, &(0x7f0000000200)={@_ha_fsid={[0x3, 0x7]}, {0x0, 0x2, 0x6, 0x8}}, 0x4aacd9e, &(0x7f0000000240), &(0x7f0000000280)=0x4}) (async, rerun: 32) r5 = socket$can_j1939(0x1d, 0x2, 0x7) (rerun: 32) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) setsockopt$SO_TIMESTAMP(r5, 0x1, 0x1d, &(0x7f0000000040)=0x4, 0x4) (async) bind$can_j1939(r5, &(0x7f00000000c0)={0x1d, r6}, 0x18) (async) connect$can_j1939(r5, &(0x7f0000000140)={0x1d, r6}, 0x18) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="3000000041000701fefeffff00000000017c0000040042801400018006000600800a000008001600", @ANYRES32=0x0, @ANYBLOB="040002"], 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0x2000c800) (async) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000340)={r4, r6, 0x25, 0x10, @void}, 0x10) r8 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$SO_BINDTODEVICE(r8, 0x1, 0x19, &(0x7f0000000240)='bridge_slave_0\x00', 0x10) (async) sendmmsg$inet(r8, &(0x7f0000001680)=[{{&(0x7f0000000000)={0x2, 0x4e21, @rand_addr=0x64010101}, 0x10, &(0x7f0000001580)=[{&(0x7f00000000c0)="67d67b505537951d09c53c3ad39b35d2e7427bd3c68916714061a24b5147764901b1b8e3bade5192fc6f3995725e85880a4c777d28a485a91fe1a9154200a3a4e223a167217f37ce79a9f114b54b36c975f156ea45a0fad6ebb178c4589aa6cc89", 0x61}, {&(0x7f0000000140)="26376dace9606413e8b3b0bc6f9fe340fdd5c775845c0a04bafe320393268d3ab08afc09b59d42bf751c700ec319b03e06d96420", 0x34}, {&(0x7f0000000180)="cdb9077cd60242b81be05f4f3c35fbc16286ef1522f82e85b435672c9e4ff87e6a", 0x21}, {&(0x7f0000000280)="fe55b29124cba4891909222d4d642e06dec58f3335e1e50cbb619f147e94a4c7567cfeb6ce789599075d8b924c7edfd4997f2d9d2907d1b91faba7def44e6aa59d9840d5ea6120ad160e9e8419b81ffb96898ccdaf54f66243e6561932", 0x5d}, {&(0x7f0000000300)="af03b412317641f608bfd761f07a44fa72a5e609877713b25a08cc673c3096dffd0fcb9ff5abd5a6d2662e13e1521a16d45609adabc1dc92bae01786bd77adbc0828d72ff8616d08475d23762654517efd8f5d7f1acb688eb0e1c53c590745a0243e3b67936f038d4ac84fb36ac340531174de22e8330553b0b40e749f22d88b8262ab9dfaf025ab3b43898355249a84", 0x90}, {&(0x7f00000003c0)="17e03e924d637008241ab44d586f7fcf086c426f9617a831b4b3bea386f7c0c5f57d610572af48318d22d5c0067182de651b7f4ff48383488a67d898cb92fe1958b55030dbc7302f7b5e93030acfb5bf43cbca085b8be62fd7821e5dc278926a8cecfa7dba8805284432514c7441a656e324", 0x72}, {&(0x7f0000000440)="7b48a9042a25", 0x6}, {&(0x7f0000000480)="840d3e01b3a6083e21e2bc212931d592f945e81c256bd2f499994ebff3bee076b462f69e4dd6f79c34beb333b7997c7daad25a03e256f99b7f1c515a7fa34ba3abf68177df48a9ff6fc76dca9a7fae484139f91dfa8a1f1a5bafb88dceab7166e53635154644676bd4cd59a52329ea58a20174b995e29aeafc97ecbc4ddcefcb660ef74ba73d18ab3e", 0x89}, {&(0x7f0000000540)="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", 0x321}], 0x9, &(0x7f0000001640)}}], 0x1, 0x8010) (async) r9 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) ioctl$TUNSETNOCSUM(r9, 0x400454c8, 0x1) (async) ioctl$XFS_IOC_START_COMMIT(r9, 0x80585882, &(0x7f0000000180)={0xffffffffffffffff}) recvmsg$unix(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x2000) ioctl$TUNSETNOCSUM(r11, 0xff07, 0x0) r12 = syz_genetlink_get_family_id$gtp(&(0x7f0000000900), r10) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000940)={'vxcan0\x00', 0x0}) sendmsg$GTP_CMD_DELPDP(r11, &(0x7f0000000a40)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x5c, r12, 0x10, 0x70bd2c, 0x25dfdbfc, {}, [@GTPA_VERSION={0x8}, @GTPA_VERSION={0x8}, @GTPA_PEER_ADDR6={0x14, 0xb, @mcast2}, @GTPA_MS_ADDR6={0x14, 0xc, @mcast2}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_LINK={0x8, 0x1, r13}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000004}, 0x24008010) 1.768325967s ago: executing program 0 (id=10570): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_DEL(r1, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x48, 0x3, 0x7, 0x101, 0x0, 0x0, {0x5, 0x0, 0x3}, [@NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2}, @NFACCT_FILTER={0x2c, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x40}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x7}, @NFACCT_FILTER_VALUE={0x8}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0xfffffff8}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0xf7a}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x8010}, 0x800) ioctl$EXT4_IOC_SETFSUUID(r0, 0x4008662c, &(0x7f00000003c0)={0x10, 0x0, "6ccfc4f71c7d7e42c99e90f127986a03"}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x58, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_NETMASK={0x5, 0x14, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}]}, 0x58}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) listen(r1, 0x2) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x98, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x6c, 0x4, 0x0, 0x1, [{0x68, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x58, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0xf}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_EXPR={0x34, 0x5, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x56}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0xb9}, @NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xc0}}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)={0xc0, r3, 0x5, 0x70bd2d, 0x8000, {{}, {@val={0x8, 0x3, r4}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x6c, 0xe, {{{}, {}, @device_a, @device_a, @random="3aa0bb2ca4b4"}, 0x8, @default, 0x1, @val={0x0, 0x9, @random="d6570d4cc4611ea7f4"}, @void, @void, @val={0x4, 0x6, {0x9, 0x7, 0x4, 0x30}}, @void, @val={0x5, 0x3, {0x7, 0xc7, 0x6}}, @void, @void, @void, @val={0x2d, 0x1a, {0x2ff, 0x1, 0x7, 0x0, {0xa600000000000000, 0x2, 0x0, 0x3fe, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x5, 0x3}}, @val={0x72, 0x6}, @void, @val={0x76, 0x6, {0x4, 0x9, 0x23, 0x1}}}}, @NL80211_ATTR_IE={0x1e, 0x2a, [@chsw_timing={0x68, 0x4, {0x5, 0xe}}, @link_id={0x65, 0x12}]}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0xfffffffc}]}, 0xc0}}, 0x20000000) 1.697864547s ago: executing program 4 (id=10571): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0xfffffe98, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="8400000000010104000000000000000002000000240001801400018008000100ac1414bb08000200ac0314bb0c0002800500010000000000240002801400018008000100ac1414aa08000200ac1414000c0002800500010000000000080007400000000010001700000000000000000000000000100016"], 0x84}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={0x40, 0x2, 0x6, 0x5, 0x0, 0x0, {0x7}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x40}}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x1c, '\x00', 0x0, @sk_msg}, 0x94) r3 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000003c0)=ANY=[@ANYBLOB="1200000002000000080000000200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="454e6d13000000090000000000000080ada200000000f5ba5c2d79c6b20fdb27ea9140bfb0f7072eae590e3ab4d6eee5571794e3919641a2920023f29c787e5922f299e61a82952b4e7e5ae61c8f435710018cd0914293be1a58c0b9772a8d81"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)=ANY=[@ANYRES32=r3, @ANYRES32=r2, @ANYBLOB='\x00'/12, @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x10) close(r3) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4048000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x40, 0x0, 0x0, r5}, [@IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x2c}}, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x88, 0x0, r5}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_FLAGS={0x8, 0x8, 0x370}]}, 0x34}}, 0x0) r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="180000000b14cbce1c432e283d7000fedbdf250800230003"], 0x18}, 0x1, 0x0, 0x0, 0x800}, 0x20000010) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r8, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)={0x18, 0x140d, 0x10, 0x70bd29, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x1}, 0x80) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0xfffffe98, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="8400000000010104000000000000000002000000240001801400018008000100ac1414bb08000200ac0314bb0c0002800500010000000000240002801400018008000100ac1414aa08000200ac1414000c0002800500010000000000080007400000000010001700000000000000000000000000100016"], 0x84}}, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={0x40, 0x2, 0x6, 0x5, 0x0, 0x0, {0x7}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x40}}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x1c, '\x00', 0x0, @sk_msg}, 0x94) (async) bpf$MAP_CREATE(0x100000000000000, &(0x7f00000003c0)=ANY=[@ANYBLOB="1200000002000000080000000200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="454e6d13000000090000000000000080ada200000000f5ba5c2d79c6b20fdb27ea9140bfb0f7072eae590e3ab4d6eee5571794e3919641a2920023f29c787e5922f299e61a82952b4e7e5ae61c8f435710018cd0914293be1a58c0b9772a8d81"], 0x48) (async) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)=ANY=[@ANYRES32=r3, @ANYRES32=r2, @ANYBLOB='\x00'/12, @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x10) (async) close(r3) (async) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4048000) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) (async) socket(0x1, 0x803, 0x0) (async) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x40, 0x0, 0x0, r5}, [@IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x2c}}, 0x0) (async) socket(0x10, 0x803, 0x0) (async) sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x88, 0x0, r5}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_FLAGS={0x8, 0x8, 0x370}]}, 0x34}}, 0x0) (async) socket$nl_rdma(0x10, 0x3, 0x14) (async) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="180000000b14cbce1c432e283d7000fedbdf250800230003"], 0x18}, 0x1, 0x0, 0x0, 0x800}, 0x20000010) (async) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r8, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)={0x18, 0x140d, 0x10, 0x70bd29, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x1}, 0x80) (async) 1.574813121s ago: executing program 1 (id=10572): setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x8, 0x3, 0x288, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x208, 0xffffffff, 0xffffffff, 0x208, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @dev, [], [], 'batadv0\x00', 'wg1\x00', {}, {}, 0x6}, 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x4c00}}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2e8) (async) r0 = socket(0x10, 0x803, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=@newtfilter={0x43c, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, {0x5}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_basic={{0xa}, {0x40c, 0x2, [@TCA_BASIC_POLICE={0x408, 0x4, [@TCA_POLICE_RATE={0x404, 0x2, [0x3, 0x8, 0x62, 0x2, 0x0, 0xc, 0x2, 0x7fff, 0x0, 0xffffff70, 0x19, 0xffffffa9, 0x2, 0x7, 0x80000001, 0x7, 0x3, 0x36, 0xc, 0x6, 0x6, 0x5d0bef1f, 0x400, 0x1, 0x837, 0xffffffff, 0x9fec, 0x401, 0x68, 0x9, 0xdd64, 0x1, 0x4, 0x8001, 0xfffffffe, 0x2, 0x0, 0x200, 0x10fff, 0xfffffff1, 0x7, 0x4, 0xf, 0x7, 0x7469, 0xb, 0x2, 0x200, 0xff3a, 0x6, 0xca, 0x4ec1, 0x1, 0x9, 0x80, 0x0, 0x10000, 0x0, 0xb4, 0x7, 0x6, 0x0, 0x0, 0x8156b2a, 0x2, 0xd5c, 0x4, 0xa0, 0x2, 0x7, 0x4, 0x0, 0x81, 0xff, 0x6, 0xe6b, 0x9, 0xa, 0xc8c, 0x1, 0xd2a, 0x6, 0xf4e, 0x9, 0x3a0, 0x3, 0x10000, 0x7ff, 0x47, 0x1, 0x2, 0x800, 0x3, 0x8, 0x0, 0x6, 0x922e, 0x0, 0x8, 0x3, 0xf, 0x4, 0x2, 0x2c000, 0x80, 0x5, 0x7, 0x2, 0x5, 0x0, 0x9, 0x6, 0x0, 0x3365, 0x1, 0x5, 0xffffffff, 0x1000, 0x0, 0x4, 0x0, 0x1, 0x1, 0x81, 0x111, 0x2, 0x5c20, 0x7f, 0x0, 0xe, 0xfffffffb, 0x6, 0x391, 0x0, 0x0, 0x3, 0x9, 0xc95d90e, 0xff, 0x2, 0x7, 0x7fffffff, 0xc7, 0x4, 0x6, 0x0, 0x9, 0xffffffff, 0x9, 0x1, 0x4, 0x3, 0x7, 0xfffffff9, 0x1010, 0x2, 0xfff, 0x2, 0x6, 0x8b4, 0x600000, 0x1, 0x6, 0x0, 0x10000, 0x0, 0x3, 0x5, 0x0, 0x1000, 0x6, 0x38e, 0x0, 0x1, 0x81, 0x2, 0xffff6c4b, 0x800, 0x7, 0x5, 0x7fff, 0x8, 0xffffffff, 0x9, 0x6, 0x0, 0x40, 0x67e1, 0x80000000, 0x2, 0x603c, 0x4, 0x1, 0x0, 0xfffffff8, 0x7, 0x3, 0x10, 0x400, 0xfffffe00, 0x1, 0x3, 0x0, 0xffff, 0x4, 0x6, 0x8, 0x0, 0x400, 0x1, 0x87, 0x10, 0x2, 0x0, 0xfffffffd, 0x3, 0x7, 0x616, 0x2, 0x2, 0xd1, 0x2, 0xfffffffc, 0x8, 0xe, 0x800, 0x1, 0x4, 0xd87, 0x80000001, 0x48e0, 0x8, 0x9, 0x40, 0x400, 0x5, 0x1020, 0x4e1b, 0x1, 0x1000, 0x8, 0x4, 0x3, 0x0, 0x2, 0x9, 0x2, 0x3, 0x10001, 0xffff, 0x4d, 0x10000d, 0x8, 0x2, 0x2, 0x8]}]}]}}]}, 0x43c}}, 0x4000) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="070000000000000000000200000008002500000000000c0099"], 0x28}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)=ANY=[@ANYBLOB="540000001400b59500000000000000000a000000", @ANYRES64, @ANYBLOB="140001000040000000000000000000000000000014000200fe8000000000000000000000000000aa140006"], 0x54}, 0x1, 0x0, 0x0, 0x20000010}, 0x80) 1.414596847s ago: executing program 0 (id=10573): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) sendmmsg$inet6(r1, &(0x7f00000016c0)=[{{&(0x7f00000004c0)={0xa, 0x4e23, 0x0, @loopback, 0x9}, 0x1c, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="28000000000000002900000039000000ff02020100000000fe9a001b00000000000000000080bb2800428c000000002901000039000008bf02020100000000fe80000000000000000000000000000c"], 0x50}}], 0x1, 0x4040084) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000040)={@broadcast, @multicast2, r2}, 0xc) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c0000001800010280000000fcdbdf250a148000ff01fd07"], 0x1c}}, 0x0) sendmmsg$alg(r3, &(0x7f00000000c0), 0x492492492492627, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000340)=@nat={'nat\x00', 0x19, 0x5, 0x90, [0x200000004bc0, 0x0, 0x0, 0x200000004dbe, 0x200000005172], 0x0, 0x0, &(0x7f0000004bc0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x1, 0xffffffffffffffff}, {0x0, '\x00', 0x3, 0xfffffffffffffffe}]}, 0x108) 1.238349275s ago: executing program 1 (id=10574): r0 = socket$inet(0xa, 0x801, 0x84) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b00)=ANY=[@ANYBLOB="2c0000003f00070100000000fddbdf25027c00001800378013000100717472283414d6bba9"], 0x2c}, 0x1, 0x0, 0x0, 0xc880}, 0x0) listen(r0, 0x8) socket$kcm(0x29, 0x0, 0x0) r2 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet(r2, &(0x7f00000002c0)="cc", 0x1, 0x10, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r5 = socket$kcm(0xa, 0x2, 0x3a) ioctl$BTRFS_IOC_DEFRAG_RANGE(r5, 0x40309410, &(0x7f0000000080)={0x6, 0x3, 0x3, 0xffff8000, 0x2, [0x3, 0x7, 0x3, 0xfffffff9]}) sendmsg$kcm(r5, &(0x7f0000000440)={&(0x7f0000000800)=@in6={0xa, 0x0, 0x0, @mcast2, 0x3}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000780)="80005b020eaa4da2", 0x8}], 0x1, 0x0, 0x0, 0x900}, 0x0) sendto$inet(r2, &(0x7f0000000480)="9b44a395965e320eb5bf6ac220778d8ffd2183f4ecc4667c588b7a9b51cb131107242e40b851f4b8191e3b223c46ca6695755def5c0e4efcd11f7a2d622ea89bf3be57f9fab9b88f3817bfdcc7b33076437761d2bb2e2db4f8b52c637381193bde26bb6fba9ed2247caea5437d9f487b5f4ab20aca267a88203420182c35b5b6b95a99f28f5bee81138c656b01", 0x8d, 0x4000000, &(0x7f0000000540)={0x2, 0x4e24, @remote}, 0x10) recvmsg$kcm(r5, &(0x7f00000018c0)={0x0, 0x0, 0x0}, 0x62) sendmsg$NL80211_CMD_SET_CQM(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000003f00000008000300", @ANYRES32, @ANYBLOB="10005e01"], 0x2c}}, 0x800) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000100)={0x3}, 0x10) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000600)={0x0, 0x3}, 0x8) sendto$inet(r2, &(0x7f0000000300)="b3", 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x4}, 0x8) 1.237976633s ago: executing program 4 (id=10575): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xb, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="620ac4ff000000007110bd000000000095"], &(0x7f0000000480)='GPL\x00'}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'erspan0\x00', &(0x7f0000000040)={'sit0\x00', 0x0, 0x40, 0x1, 0x3, 0x8c, {{0x6, 0x4, 0x2, 0x2f, 0x18, 0x66, 0x0, 0x7, 0x4, 0x0, @broadcast, @empty, {[@noop]}}}}}) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'erspan0\x00', &(0x7f0000000040)={'sit0\x00', 0x0, 0x40, 0x1, 0x3, 0x8c, {{0x6, 0x4, 0x2, 0x2f, 0x18, 0x66, 0x0, 0x7, 0x4, 0x0, @broadcast, @empty, {[@noop]}}}}}) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000000c0)) (async) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000000c0)=0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000010428bd70000100000000000000", @ANYRES32=0x0, @ANYBLOB="080000000000010014000300776c616e30000000000000000000000008000a00", @ANYRES32=r4], 0x3c}, 0x1, 0x0, 0x0, 0x240008c4}, 0x20008004) sendmsg$nl_route(r0, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000300)={&(0x7f00000006c0)=ANY=[@ANYBLOB="7c010000180010002dbd7000fddbdf251d01010015000200020000e001010000254908f2dc277c0805000000150002000100002006010000f9da460fc5fb46660000000008000900", @ANYRES32=r1, @ANYBLOB="08000e00", @ANYRES32=r2, @ANYBLOB="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", @ANYRES32=r4, @ANYBLOB="a3b65ebe7f7fd270e9b72debae11c0f828101d45a8bb5d643e33c60e93f6661f9984dab4cf45b1f470902f1602570a02c3b5606ec4ba4d0beed2d5be2c6771f97a160a86338f97796ae5747d8cd10db7c95140ce24cdd8734531ae0118aef0908ee21236e742657257db9f35e27936173fc63e70e4320106c88c7acbe87d7957146255b776c6b71fc1a523ec2d37f5e14a8f5a1d9b614f1eba66a92d6168594666609fd3ef32ea16c9ef1d5f966ae1c96d7e83a795741d23c3e2beeb4318c9e037339eddcec17353d62e6d51119c82111e061c5dd0074b86f768"], 0x17c}, 0x1, 0x0, 0x0, 0x20004091}, 0x1) (async) sendmsg$nl_route(r0, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000300)={&(0x7f00000006c0)=ANY=[@ANYBLOB="7c010000180010002dbd7000fddbdf251d01010015000200020000e001010000254908f2dc277c0805000000150002000100002006010000f9da460fc5fb46660000000008000900", @ANYRES32=r1, @ANYBLOB="08000e00", @ANYRES32=r2, @ANYBLOB="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", @ANYRES32=r4, @ANYBLOB="a3b65ebe7f7fd270e9b72debae11c0f828101d45a8bb5d643e33c60e93f6661f9984dab4cf45b1f470902f1602570a02c3b5606ec4ba4d0beed2d5be2c6771f97a160a86338f97796ae5747d8cd10db7c95140ce24cdd8734531ae0118aef0908ee21236e742657257db9f35e27936173fc63e70e4320106c88c7acbe87d7957146255b776c6b71fc1a523ec2d37f5e14a8f5a1d9b614f1eba66a92d6168594666609fd3ef32ea16c9ef1d5f966ae1c96d7e83a795741d23c3e2beeb4318c9e037339eddcec17353d62e6d51119c82111e061c5dd0074b86f768"], 0x17c}, 0x1, 0x0, 0x0, 0x20004091}, 0x1) r5 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendmmsg$inet(r6, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="2a73ed35", 0x732a}], 0x1}}], 0x400000000000292, 0x0) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r8 = openat$nci(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) poll(&(0x7f00000001c0)=[{r0, 0x400}, {r5, 0x1000}, {r6, 0x221}, {r7, 0x7540}, {r3, 0x81}, {r8, 0x1}, {r3, 0x4}], 0x7, 0xad35) 1.066966515s ago: executing program 5 (id=10576): r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000003c0)=@filter={'filter\x00', 0x4, 0x4, 0x380, 0xffffffff, 0x1e0, 0x0, 0x1e0, 0xfeffffff, 0xffffffff, 0x2b0, 0x2b0, 0x2b0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x1, 0x35, {0x3}}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x1, 0x41, {0x6}}}}, {{@ipv6={@private0, @loopback, [0xff, 0x0, 0xff000000, 0xffffffff], [0x0, 0xff, 0xff000000, 0xffffff00], 'team0\x00', 'batadv_slave_0\x00', {0xff}, {}, 0xff, 0xe7, 0x4, 0x44}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x9, 0x8, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3e0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$NILFS_IOCTL_GET_CPSTAT(r0, 0x80186e83, &(0x7f0000000000)) ioctl$BTRFS_IOC_SNAP_DESTROY(r2, 0x5000940f, &(0x7f0000000300)={{r0}, "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"}) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[], 0xa8}}, 0x8c0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.stat\x00', 0x26e1, 0x0) close(r3) ioctl$SIOCSIFHWADDR(r3, 0x8b14, &(0x7f00000000c0)={'wlan1\x00', @local}) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r3, &(0x7f00000015c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001580)={&(0x7f0000001600)=ANY=[@ANYBLOB="64020000", @ANYRES16=r4, @ANYBLOB="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"], 0x264}, 0x1, 0x0, 0x0, 0x4088}, 0x1) 1.06664578s ago: executing program 0 (id=10577): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000c80)={0xfffffff0, 0x0, 0x2, 0x0, 0x0, 0x0, {0x7, 0x0, 0x10}, [@CTA_EXPECT_NAT={0x13c, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x40, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x0, 0x3, 0x1, 0x0, 0x1}]}, @CTA_EXPECT_NAT_TUPLE={0x5c, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}]}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x8c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x3a}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x42}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x10}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @broadcast}}}]}, @CTA_EXPECT_NAT_DIR={0x8}]}]}, 0x150}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), r0) r2 = socket$unix(0x1, 0x2, 0x0) bind$unix(r2, &(0x7f0000000000)=@file={0x1, './cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000001280)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01012dbd7000f90f002507000000080001000120000008000300", @ANYRES32=r0], 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0xa8c4) r3 = socket(0x10, 0x803, 0x0) sendto(r3, &(0x7f0000000c40)="120000001200e7ef007b0000000000faffa0", 0x12, 0x8800, 0x0, 0x0) recvmmsg(r3, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) 885.303238ms ago: executing program 5 (id=10578): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$SEG6_CMD_GET_TUNSRC(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r1, 0x0, 0x70bd2b, 0x25dfdbfc, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x81}, @SEG6_ATTR_SECRET={0x18, 0x4, [0x7, 0x1, 0x6, 0x1, 0x10001]}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x21bb9f24288b78e9) (async) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_INFO(r0, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0xd4, r2, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x33a0}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x645}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9fd}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'dvmrp1\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_SERVICE={0x20, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x1a}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0x21}}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0xff}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xffffb815}, @IPVS_CMD_ATTR_DAEMON={0x44, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @empty}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xc8b2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7a6}]}, 0xd4}, 0x1, 0x0, 0x0, 0x44800}, 0x4000) (async) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000380), r0) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r0, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x3c, r3, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7fffffff}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x6}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x8000}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x20000090) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000480)={r0, 0xab, 0x362, 0x5}) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000005c0)='blkio.throttle.io_serviced_recursive\x00', 0x0, 0x0) (async) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000680)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2, 0x4}, 0x50) r7 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000700)={0xffffffffffffffff, 0x2}, 0xc) (async) pipe(&(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000780)={0x1b, 0x0, 0x0, 0xa5, 0x0, 0xffffffffffffffff, 0xa3c3, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x3}, 0x50) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=@base={0xc, 0x4, 0x1f62, 0x6, 0x58000, 0xffffffffffffffff, 0x401, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x4}, 0x50) (async) r12 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000880)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x800, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x4}, 0x50) (async) r13 = bpf$ITER_CREATE(0x21, &(0x7f0000000900), 0x8) r14 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x18, 0x11, &(0x7f00000004c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000580)='GPL\x00', 0xabe, 0x0, 0x0, 0x1e00, 0x4e, '\x00', 0x0, @fallback=0xc, r5, 0x8, &(0x7f0000000600)={0x9, 0x5}, 0x8, 0x10, &(0x7f0000000640)={0x5, 0xe, 0x0, 0x8}, 0x10, 0x0, 0xffffffffffffffff, 0x5, &(0x7f0000000940)=[r6, 0xffffffffffffffff, r7, 0xffffffffffffffff, r9, r10, r11, r12, r13], &(0x7f0000000980)=[{0x0, 0x2, 0x10, 0x4}, {0x4, 0x5, 0x5, 0xa}, {0x5, 0x3, 0xe, 0x3}, {0x4, 0x4, 0x2, 0x8}, {0x3, 0x1, 0x5, 0x3}], 0x10, 0x9}, 0x94) (async) close(r5) (async) r15 = socket$inet6_icmp(0xa, 0x2, 0x3a) setsockopt$sock_attach_bpf(r15, 0x1, 0x32, &(0x7f0000000ac0)=r14, 0x4) (async) r16 = syz_genetlink_get_family_id$tipc(&(0x7f0000000b40), r5) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r5, &(0x7f0000000c00)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x1c, r16, 0x1, 0x70bd2b, 0x25dfdbff, {}, ["", "", "", "", ""]}, 0x1c}}, 0x4000) (async) ioctl$NILFS_IOCTL_DELETE_CHECKPOINT(r14, 0x40086e81, &(0x7f0000000c40)=0xffbb) (async) ioctl$sock_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000c80)) (async) r17 = socket$inet_smc(0x2b, 0x1, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000001d00)={r10, &(0x7f0000000cc0)="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", &(0x7f0000001cc0)=@tcp=r17, 0x4}, 0x20) (async) ioctl$BTRFS_IOC_BALANCE(r17, 0x5000940c, 0x0) (async) socket$inet6(0xa, 0x4, 0xf3) (async) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000001d40)={'veth1_to_hsr\x00'}) (async) socket$netlink(0x10, 0x3, 0xb) 816.063694ms ago: executing program 1 (id=10579): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'dvmrp0\x00', 0x0}) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)={@dev, @remote, 0x0}, &(0x7f0000000100)=0xc) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000001c0)={'syztnl2\x00', &(0x7f0000000140)={'ip6gre0\x00', 0x0, 0x29, 0x15, 0x6, 0x8000, 0x60, @local, @remote, 0x7, 0x8000, 0x8, 0x18480b6a}}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x4) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000480)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000440)={&(0x7f00000002c0)={0x168, r1, 0x8, 0x70bd25, 0x25dfdbfc, {}, [@ETHTOOL_A_STRSET_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}]}, @ETHTOOL_A_STRSET_STRINGSETS={0x84, 0x2, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}]}, @ETHTOOL_A_STRSET_STRINGSETS={0x4c, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x33e1fef3aa21800b}]}]}, 0x168}, 0x1, 0x0, 0x0, 0x4890}, 0x40) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r8 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFCONF(r8, 0x8912, &(0x7f0000000580)=@buf={0xb2, &(0x7f00000004c0)="177b52ad91f211c26224c07fb5e4132fb7b6ba68948b39ed28f48c07f89c4beaf08e9c281a37ec53faa6d4a97fc80de0f0858c169faa88f7c36349e95047e14976eb7da0833bcc684f9f9b0d8bdb93711c7c0653b2f3bbc19b22ccdffe733661884ffd6511a2b740f737495cfc1213d64e70d343348637894e7cb43cbbc340d854c0f18883204503215ce925b2f48633c62d0a9253a88b3cd028a20e1f384367b024e8cf4bc2e48dfbe9f6d4d673fbe8a92d"}) ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r7, 0x8982, &(0x7f00000005c0)={0x2, 'veth1\x00', {0xffa}, 0x1}) bpf$LINK_DETACH(0x22, &(0x7f0000000600), 0x4) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000680), r0) sendmsg$IPVS_CMD_GET_INFO(r9, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x3c, r10, 0x4, 0x70bd26, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xff}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x9}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xb}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x800) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, &(0x7f0000000780), &(0x7f00000007c0)=0x30) r11 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000800)={0x1b, 0x0, 0x0, 0x2, 0x0, 0x1, 0xccdb, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x5}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000880), &(0x7f00000008c0)}, 0x20) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000dc0)={0xffffffffffffffff, 0xe0, &(0x7f0000000cc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000b00)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, &(0x7f0000000b40)=[0x0, 0x0], &(0x7f0000000b80)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x9d, &(0x7f0000000bc0)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000c00), &(0x7f0000000c40), 0x8, 0x7c, 0x8, 0x8, &(0x7f0000000c80)}}, 0x10) r14 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000e00), 0x4) r15 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000e40)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0xe, '\x00', r3, 0xffffffffffffffff, 0x5, 0x2, 0x3}, 0x50) r16 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000ec0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x9, '\x00', r5, 0xffffffffffffffff, 0x2, 0x1, 0x2}, 0x50) r17 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000f40)={0x1b, 0x0, 0x0, 0x1ff, 0x0, 0xffffffffffffffff, 0x7, '\x00', r3, 0xffffffffffffffff, 0x2, 0x5, 0x1}, 0x50) r18 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000fc0)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0xe, '\x00', r3, 0xffffffffffffffff, 0x4, 0x5, 0x3}, 0x50) r19 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001040)={0x1b, 0x0, 0x0, 0x8c, 0x0, 0x1, 0x4, '\x00', r2, 0xffffffffffffffff, 0x3, 0x4, 0x4}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001140)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000010c0), &(0x7f0000001100)}, 0x20) r21 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001180)={0x1b, 0x0, 0x0, 0xa7, 0x0, 0x1, 0x2, '\x00', r4, 0xffffffffffffffff, 0x0, 0x4, 0x5}, 0x50) r22 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001200)={0x1b, 0x0, 0x0, 0x6, 0x0, 0x1, 0x3af9, '\x00', r3, 0xffffffffffffffff, 0x5, 0x2, 0x3}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000001300)={0x17, 0x16, &(0x7f0000000940)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x100}, {{0x18, 0x1, 0x1, 0x0, r11}}, {}, [@exit, @tail_call={{0x18, 0x2, 0x1, 0x0, r12}}, @generic={0x85, 0x0, 0x9, 0x7, 0xea74}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000a00)='syzkaller\x00', 0x1161, 0x44, &(0x7f0000000a40)=""/68, 0x41000, 0x20, '\x00', r3, @fallback=0x36, 0xffffffffffffffff, 0x8, &(0x7f0000000ac0)={0x3, 0x3}, 0x8, 0x10, 0x0, 0x0, r13, r14, 0x1, &(0x7f0000001280)=[0x1, r15, r16, r17, r18, r19, r20, r21, r22], &(0x7f00000012c0)=[{0x5, 0x4, 0x5, 0xc}], 0x10, 0x2}, 0x94) 661.7907ms ago: executing program 0 (id=10580): r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000002880)=@security={'security\x00', 0xe, 0x4, 0x2e0, 0xffffffff, 0x0, 0x130, 0x1d8, 0xffffffff, 0xffffffff, 0x2e0, 0x2e0, 0x2e0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x1, [0x4, 0xa, 0x7, 0x0, 0x3], 0x1, 0x1}, {0x4, [0x4, 0x1, 0x3, 0x1, 0x5, 0xe], 0x2, 0x4}}}}, {{@ip={@rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0xff, 'macvtap0\x00', 'pimreg1\x00', {0xff}, {0xff}, 0x32, 0x3, 0x10}, 0x0, 0x70, 0xa8}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x4, 0x6, 0x1}, {0x2, 0x5, 0x6}, {0x6, 0x4, 0x4}, 0x8001}}}, {{@ip={@remote, @rand_addr=0x64010102, 0xffffff00, 0xff, 'ipvlan1\x00', 'ip6tnl0\x00', {0xff}, {0xff}, 0x0, 0x1, 0x81f6fc83b80a76cf}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x2, [0x1, 0x0, 0x2, 0x1, 0x2, 0x3], 0x2, 0x2}, {0x1, [0x2, 0x0, 0x1, 0x6, 0x0, 0x1], 0x2, 0x6}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x340) writev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000000)="8724866f", 0x4}], 0x1) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x4, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x2}}, 0x0, 0x5}, 0x94) ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r1, 0x4010744d, &(0x7f0000000180)) r3 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r3, &(0x7f0000000440)={&(0x7f00000000c0)=@in={0x2, 0x4e20, @loopback=0x7f0000fd}, 0x10, &(0x7f0000000100)=[{&(0x7f00000001c0)="db34", 0x2}], 0x1, &(0x7f0000000040)=ANY=[@ANYBLOB="12000000000000008400000006"], 0x18, 0x240488d1}, 0x20040054) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket(0xa, 0x3, 0x4) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x14, 0x0, 0x1}, 0x14}}, 0x0) ioctl$sock_SIOCBRDELBR(r5, 0x89a2, &(0x7f0000000000)='bridge0\x00') sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}]}, @NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_MATCH_NAME={0x8, 0x1, 'ecn\x00'}, @NFTA_MATCH_INFO={0xc, 0x3, "e4edf2b75cc7c0a3"}, @NFTA_MATCH_REV={0x8}, @NFTA_MATCH_NAME={0xc, 0x1, 'pkttype\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xf0}}, 0x0) 648.471391ms ago: executing program 1 (id=10581): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000004f80), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000600)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000005100)={0x0, 0x0, &(0x7f00000050c0)={&(0x7f0000005040)={0x2c, r1, 0x10, 0x70bd29, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0x14}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000011}, 0x48010) r3 = socket$nl_rdma(0x10, 0x3, 0x14) r4 = socket$kcm(0x10, 0x400000002, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) unshare(0x2000400) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x4, 0x4, 0x80040009, 0x0, r9}, 0x48) sendmsg$IPSET_CMD_HEADER(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)={0x28, 0xc, 0x6, 0x101, 0x0, 0x0, {0x2, 0x0, 0xff82}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x41}, 0x4) sendmsg$IPCTNL_MSG_CT_GET_DYING(r8, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2324240}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x6, 0x1, 0x300, 0x0, 0x0, {0x3, 0x0, 0x6}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x3a7c8aedaef2d241}, 0x11) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000040)=ANY=[@ANYRES32=r5, @ANYRESDEC=r6, @ANYRES64=r3, @ANYRES32=r7, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x20040080}, 0x800) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000700)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf25090002007379fa32000000000800410073697700140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x8810) 608.474447ms ago: executing program 5 (id=10582): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x1, 0x100) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r2, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000680)={0x14, r3, 0x23, 0x70bd2b, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x8801}, 0x4004) setsockopt$sock_int(r1, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4) bind$inet(r1, &(0x7f0000e15000)={0x2, 0x4e20, @multicast2}, 0x10) r4 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r4, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4) bind$inet(r4, &(0x7f0000e15000)={0x2, 0x4e20, @multicast2}, 0x10) listen(r4, 0x7) listen(r1, 0x0) r5 = socket(0x2b, 0x80801, 0x1) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r5, 0x11e, 0x66, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x44, 0x10, 0x421, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_LAST_MEMBER_CNT={0x8}, @IFLA_BR_MCAST_STARTUP_QUERY_CNT={0x8}]}}}]}, 0x44}}, 0x0) 395.144678ms ago: executing program 5 (id=10583): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) write$cgroup_int(r1, &(0x7f0000001480)=0x2, 0x12) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x801, 0x41, 0x25dfdbf7, {}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x40014) 363.851963ms ago: executing program 1 (id=10584): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000006c40)={0x14, 0x1a, 0x1, 0x0, 0x0, {0x1c, 0x0, 0x2}}, 0x14}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0xd, 0x4, &(0x7f0000001340)=ANY=[@ANYBLOB="18000000000000000000000000000000611234000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) 128.083782ms ago: executing program 0 (id=10585): r0 = socket(0x2, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x20000000}, 0x4004804) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r3, 0x8926, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x4}) ioctl$sock_netdev_private(r3, 0x89f2, &(0x7f0000000000)) r4 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r4, &(0x7f00000002c0)={0x10, 0x0, 0x25dfdbfb, 0x400000}, 0xc) bind$netlink(r2, &(0x7f0000000180)={0x10, 0x0, 0x25dfdbfb, 0x800000}, 0xc) getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x44, &(0x7f0000000000)={'ipvs\x00'}, &(0x7f0000000080)=0x1e) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) listen(r5, 0xfffffffd) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x6, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000183000000000000090000009500000000000000", @ANYRES8=r3], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x40, '\x00', r1, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) 126.998042ms ago: executing program 4 (id=10586): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r1, &(0x7f0000000000)="0a000000010001", 0x7) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x19, &(0x7f0000000200)=0x9, 0x4) socket$packet(0x11, 0x3, 0x300) socket$nl_route(0x10, 0x3, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x1}]}, 0x10) r4 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) recvmsg(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000004700)=""/4098, 0x1002}, {&(0x7f0000003700)=""/4074, 0xfea}, {&(0x7f0000002500)=""/4137, 0x1029}, {&(0x7f0000000200)=""/100, 0x64}, {&(0x7f0000000780)=""/190, 0xbe}, {&(0x7f0000000400)=""/170, 0xaa}, {&(0x7f0000000140)=""/184, 0xb8}], 0x7}, 0x0) bind$bt_hci(r3, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r5, 0x400448ca, 0x0) 34.791681ms ago: executing program 1 (id=10587): r0 = socket$netlink(0x10, 0x3, 0x6) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYRESDEC=r1], &(0x7f0000000000)='GPL\x00'}, 0x94) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x28, 0x3, 0x1, 0x201, 0x0, 0x0, {0x2}, [@CTA_HELP={0x14, 0x5, 0x0, 0x1, {0xf, 0x1, 'netbios-ns\x00'}}]}, 0x28}}, 0x0) listen(r0, 0x40) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r2, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x38, r3, 0x4, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_FORWARDING={0x5}, @NL80211_MESHCONF_CONNECTED_TO_AS={0x5, 0x1f, 0x1}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5, 0xe, 0x4}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4004}, 0x2015) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="3000000041000701fefeffff00000000017c0000040042801400018006000600800a000008001600", @ANYRES32=0x0, @ANYBLOB="040002"], 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0x2000c800) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="290000002000190f00b8e20ba826f0040d000600fe7f00000005000500", 0x1d}], 0x1) 18.259268ms ago: executing program 0 (id=10588): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x48, 0x10, 0x49920d862a92153b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}, @IFLA_GRE_ERSPAN_DIR={0x5}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x48}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv6_getnetconf={0x1c, 0x52, 0x10, 0x70bd28, 0x25dfdbfd, {}, [@NETCONFA_FORWARDING={0x8, 0x2, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x1) (async) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x18, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0x50}, 0x48) (async) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00014002080c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x4040) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1}]}, &(0x7f0000000100)='GPL\x00', 0x5, 0xd2, &(0x7f00000002c0)=""/210, 0x0, 0x5}, 0x90) 0s ago: executing program 5 (id=10589): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1}, 0x48) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0xa, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close(0x4) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) close(r4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000a80)={r6, &(0x7f0000000940), &(0x7f0000000a40)=@tcp6=r5}, 0x20) connect$unix(r4, &(0x7f0000000940)=@file={0x0, './file0\x00'}, 0x6e) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000002c0), 0x4) close(0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'bond0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @hsr={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r7}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000041000701fefffffffeffffff017c0000040042800c00018006000600800a000014000280100014"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0x44014) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0xa, 0x17, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf090000000000009709010000000281650000000000000018010000646c6c2500000000002020207b9af8ff000000002e9100000000000037010000f8ffffffb702000008000000b70300000000000014000000060000805f93000000000000b5030000000000008500000076000000b70000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) kernel console output (not intermixed with test programs): mode [ 1013.641853][T28259] bridge_slave_0: left promiscuous mode [ 1013.649365][T28259] bridge0: port 1(bridge_slave_0) entered disabled state [ 1013.665810][T28259] erspan0: left allmulticast mode [ 1013.671252][T28259] erspan0: left promiscuous mode [ 1013.676354][T28259] bridge5: port 1(erspan0) entered disabled state [ 1013.703414][T28259] batman_adv: batadv0: Interface deactivated: gretap2 [ 1013.984432][T28259] batman_adv: batadv0: Removing interface: gretap2 [ 1014.063506][T28259] team0: Port device bridge1 removed [ 1014.073232][T28259] bond1 (unregistering): (slave bridge2): Releasing backup interface [ 1014.094317][T28259] bond3 (unregistering): (slave bridge4): Releasing backup interface [ 1014.178966][ T5633] Bluetooth: hci4: command tx timeout [ 1014.190619][T28259] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1014.201956][T28259] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1014.212969][T28259] bond0 (unregistering): Released all slaves [ 1014.225894][T28259] bond1 (unregistering): Released all slaves [ 1014.240670][T28259] bond2 (unregistering): Released all slaves [ 1014.261135][T28259] bond3 (unregistering): Released all slaves [ 1014.282409][T28259] bond4 (unregistering): Released all slaves [ 1014.296344][T28259] bond5 (unregistering): Released all slaves [ 1014.319082][T28259] bond6 (unregistering): Released all slaves [ 1014.333956][T28259] bond7 (unregistering): Released all slaves [ 1014.412683][ T8975] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1014.519255][ T8975] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1014.537641][ T8975] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1014.595907][ T8975] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1014.645772][ T8975] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1014.729404][ T8975] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1014.743924][T28259] tipc: Left network mode [ 1014.758769][ T8975] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1014.792169][ T8975] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1014.830700][ C0] vxcan1: j1939_tp_rxtimer: 0xffff888090f81c00: rx timeout, send abort [ 1014.839411][ C0] vxcan1: j1939_xtp_rx_abort_one: 0xffff888090f81c00: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 1014.853930][ C0] vxcan1: j1939_xtp_rx_abort_one: 0xffff888090f81800: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 1014.909880][ T9181] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9462'. [ 1014.921916][ T9181] netlink: 48 bytes leftover after parsing attributes in process `syz.3.9462'. [ 1015.089470][ T9177] tc action pedit 'at' offset 9 out of bounds [ 1015.344986][ T8975] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1015.423058][ T8975] 8021q: adding VLAN 0 to HW filter on device team0 [ 1015.484554][T17406] bridge0: port 1(bridge_slave_0) entered blocking state [ 1015.491790][T17406] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1015.512388][ T9208] tipc: Enabling of bearer rejected, failed to enable media [ 1015.550013][T17406] bridge0: port 2(bridge_slave_1) entered blocking state [ 1015.557260][T17406] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1015.581276][ T9213] tipc: Enabling of bearer rejected, failed to enable media [ 1015.589008][ T9215] atomic_op ffff88804dd9f998 conn xmit_atomic 0000000000000000 [ 1015.709905][T28256] net_ratelimit: 22 callbacks suppressed [ 1015.709925][T28256] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1015.860106][ T9222] bond13: option lp_interval: invalid value (0) [ 1015.868939][ T9222] bond13: option lp_interval: allowed values 1 - 2147483647 [ 1015.881010][ T9222] bond13 (unregistering): Released all slaves [ 1015.927170][T28260] bond2: (slave ip6gretap0): failed to get link speed/duplex [ 1015.961817][ T9228] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1016.071229][T28258] bond2: (slave ip6gretap0): failed to get link speed/duplex [ 1016.098131][T28255] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1016.112087][ T9230] netlink: 20 bytes leftover after parsing attributes in process `syz.4.9478'. [ 1016.146218][ C0] vxcan1: j1939_tp_rxtimer: 0xffff888090f81400: rx timeout, send abort [ 1016.155050][ C0] vxcan1: j1939_xtp_rx_abort_one: 0xffff888090f81400: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 1016.169573][ C0] vxcan1: j1939_xtp_rx_abort_one: 0xffff888090f81000: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 1016.197256][T17406] bond2: (slave ip6gretap0): failed to get link speed/duplex [ 1016.258916][ T5633] Bluetooth: hci4: command tx timeout [ 1016.338073][T28255] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1016.349828][ T9238] syzkaller1: entered promiscuous mode [ 1016.355860][ T9238] syzkaller1: entered allmulticast mode [ 1016.485930][T28259] hsr_slave_0: left promiscuous mode [ 1016.503763][ T9252] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1016.514019][T28259] hsr_slave_1: left promiscuous mode [ 1016.524803][T28259] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1016.535585][T28259] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1016.552354][T28259] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1016.563712][T28259] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1016.581217][T28259] veth1_macvtap: left promiscuous mode [ 1016.589430][T28259] veth0_macvtap: left promiscuous mode [ 1016.595023][T28259] veth1_vlan: left promiscuous mode [ 1016.600826][T28259] veth0_vlan: left promiscuous mode [ 1017.097460][T28259] team0 (unregistering): Port device team_slave_1 removed [ 1017.119403][T28259] team0 (unregistering): Port device team_slave_0 removed [ 1017.360314][T28258] bond2: (slave ip6gretap0): failed to get link speed/duplex [ 1017.402785][T28258] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1017.460022][ C0] vxcan1: j1939_tp_rxtimer: 0xffff888090f80c00: rx timeout, send abort [ 1017.469247][ C0] vxcan1: j1939_xtp_rx_abort_one: 0xffff888090f80c00: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 1017.483769][ C0] vxcan1: j1939_xtp_rx_abort_one: 0xffff8880566ddc00: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 1017.576028][ T9282] netlink: 'syz.4.9486': attribute type 64 has an invalid length. [ 1017.607743][ T9282] netlink: 'syz.4.9486': attribute type 64 has an invalid length. [ 1017.860716][ T1694] block nbd3: Possible stuck request ffff88802743e000: control (read@0,1024B). Runtime 300 seconds [ 1017.871619][ T1694] block nbd3: Possible stuck request ffff88802743e1c0: control (read@1024,1024B). Runtime 300 seconds [ 1017.883547][ T1694] block nbd3: Possible stuck request ffff88802743e380: control (read@2048,1024B). Runtime 300 seconds [ 1017.897633][ T1694] block nbd3: Possible stuck request ffff88802743e540: control (read@3072,1024B). Runtime 300 seconds [ 1017.974228][ T9295] netlink: 'syz.1.9490': attribute type 10 has an invalid length. [ 1018.029192][ T9300] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9490'. [ 1018.036248][ T9301] netlink: 52 bytes leftover after parsing attributes in process `syz.3.9491'. [ 1018.053591][T28259] IPVS: stop unused estimator thread 0... [ 1018.130485][ T9295] macsec0: left promiscuous mode [ 1018.163881][ T9308] netlink: 20 bytes leftover after parsing attributes in process `syz.4.9492'. [ 1018.170334][ T9295] x_tables: duplicate underflow at hook 1 [ 1018.253340][ T8975] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1018.336121][ T9315] netlink: 'syz.3.9493': attribute type 1 has an invalid length. [ 1018.337365][ T5633] Bluetooth: hci4: command tx timeout [ 1018.364205][ T9315] netlink: 'syz.3.9493': attribute type 21 has an invalid length. [ 1018.405574][ T8975] veth0_vlan: entered promiscuous mode [ 1018.408693][ T9315] netlink: 128 bytes leftover after parsing attributes in process `syz.3.9493'. [ 1018.420983][ T8975] veth1_vlan: entered promiscuous mode [ 1018.461012][ T8975] veth0_macvtap: entered promiscuous mode [ 1018.473637][ T9315] netlink: 'syz.3.9493': attribute type 4 has an invalid length. [ 1018.527067][ T9315] netlink: 'syz.3.9493': attribute type 5 has an invalid length. [ 1018.561506][ T9315] netlink: 3 bytes leftover after parsing attributes in process `syz.3.9493'. [ 1018.589872][ T8975] veth1_macvtap: entered promiscuous mode [ 1018.653808][ T8975] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1018.720779][ T8975] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1018.729669][ T9330] netlink: 24 bytes leftover after parsing attributes in process `syz.4.9497'. [ 1018.770966][T28258] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1018.771475][ C0] vxcan1: j1939_tp_rxtimer: 0xffff88805d0f4800: rx timeout, send abort [ 1018.789192][ C0] vxcan1: j1939_xtp_rx_abort_one: 0xffff88805d0f4800: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 1018.803638][ C0] vxcan1: j1939_xtp_rx_abort_one: 0xffff88805d0f4000: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 1018.834274][T28258] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1018.853690][T28258] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1018.884476][ T9336] FAULT_INJECTION: forcing a failure. [ 1018.884476][ T9336] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1018.910232][ T9336] CPU: 0 UID: 0 PID: 9336 Comm: syz.4.9497 Not tainted syzkaller #0 PREEMPT(full) [ 1018.910256][ T9336] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1018.910268][ T9336] Call Trace: [ 1018.910275][ T9336] [ 1018.910283][ T9336] dump_stack_lvl+0xe8/0x150 [ 1018.910313][ T9336] should_fail_ex+0x40c/0x560 [ 1018.910346][ T9336] _copy_from_iter+0x1d3/0x1660 [ 1018.910455][ T9336] ? kmem_cache_alloc_node_noprof+0x1b1/0x610 [ 1018.910483][ T9336] ? rcu_is_watching+0x15/0xb0 [ 1018.910519][ T9336] ? trace_kmem_cache_alloc+0x29/0xe0 [ 1018.910550][ T9336] ? kmem_cache_alloc_node_noprof+0x3b8/0x610 [ 1018.910579][ T9336] ? __pfx__copy_from_iter+0x10/0x10 [ 1018.910607][ T9336] ? __alloc_skb+0x276/0x7a0 [ 1018.910660][ T9336] ? __alloc_skb+0x276/0x7a0 [ 1018.910684][ T9336] ? netlink_sendmsg+0x650/0xb40 [ 1018.910706][ T9336] ? skb_put+0x112/0x210 [ 1018.910729][ T9336] netlink_sendmsg+0x6c0/0xb40 [ 1018.910760][ T9336] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1018.910787][ T9336] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1018.910816][ T9336] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1018.910837][ T9336] sock_sendmsg_nosec+0x13a/0x180 [ 1018.910867][ T9336] ____sys_sendmsg+0x54e/0x850 [ 1018.910894][ T9336] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1018.910924][ T9336] ? import_iovec+0x73/0xa0 [ 1018.910948][ T9336] ___sys_sendmsg+0x2a5/0x360 [ 1018.910969][ T9336] ? __lock_acquire+0x683/0x2cf0 [ 1018.911002][ T9336] ? __pfx____sys_sendmsg+0x10/0x10 [ 1018.911056][ T9336] ? __fget_files+0x2a/0x420 [ 1018.911075][ T9336] ? __fget_files+0x3a2/0x420 [ 1018.911105][ T9336] __x64_sys_sendmsg+0x1b1/0x290 [ 1018.911130][ T9336] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1018.911170][ T9336] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1018.911191][ T9336] do_syscall_64+0x174/0x580 [ 1018.911209][ T9336] ? trace_irq_disable+0x3b/0x140 [ 1018.911227][ T9336] ? clear_bhb_loop+0x40/0x90 [ 1018.911249][ T9336] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1018.911268][ T9336] RIP: 0033:0x7faf74d9de59 [ 1018.911287][ T9336] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1018.911304][ T9336] RSP: 002b:00007faf75ca4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1018.911324][ T9336] RAX: ffffffffffffffda RBX: 00007faf75026090 RCX: 00007faf74d9de59 [ 1018.911339][ T9336] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000003 [ 1018.911351][ T9336] RBP: 00007faf75ca4090 R08: 0000000000000000 R09: 0000000000000000 [ 1018.911364][ T9336] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1018.911376][ T9336] R13: 00007faf75026128 R14: 00007faf75026090 R15: 00007ffc1df00728 [ 1018.911408][ T9336] [ 1018.915345][T28258] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1019.022086][ T9345] netlink: 4472 bytes leftover after parsing attributes in process `syz.1.9499'. [ 1019.313898][ T9356] ipt_REJECT: TCP_RESET invalid for non-tcp [ 1019.343052][ T9358] netlink: 'syz.4.9503': attribute type 32 has an invalid length. [ 1019.442032][ T9358] bond2: Setting coupled_control to off (0) [ 1019.586275][ T9356] bridge_slave_1: left allmulticast mode [ 1019.636313][ T9356] ip6erspan0: left allmulticast mode [ 1019.664067][ T9356] bridge1: left allmulticast mode [ 1019.671524][ T9356] bond2: left allmulticast mode [ 1019.687534][ T9356] ip6gretap0: left allmulticast mode [ 1019.712238][ T9356] macvlan2: left allmulticast mode [ 1019.718142][ T9356] gretap0: left allmulticast mode [ 1019.785794][ T9356] gtp1: left allmulticast mode [ 1019.838117][ T9368] erspan0: left allmulticast mode [ 1019.853985][ T9368] erspan0: left promiscuous mode [ 1019.865287][ T9368] bridge4: port 1(erspan0) entered disabled state [ 1019.933824][T28261] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1019.973547][T28261] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1020.022347][T17406] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1020.056510][T17406] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1020.093441][ C0] vxcan1: j1939_tp_rxtimer: 0xffff88804e390c00: rx timeout, send abort [ 1020.102697][ C0] vxcan1: j1939_xtp_rx_abort_one: 0xffff88804e390c00: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 1020.117295][ C0] vxcan1: j1939_xtp_rx_abort_one: 0xffff88804e390000: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 1020.375340][ T9401] netlink: 'syz.1.9509': attribute type 4 has an invalid length. [ 1020.399166][ T9403] netlink: 'syz.1.9509': attribute type 4 has an invalid length. [ 1020.707101][T29426] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1020.720757][ T9408] bridge2: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 1020.736769][T29426] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1020.752918][T29426] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1020.769689][T29426] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1020.780069][T29426] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1020.851248][ T9420] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 1020.861328][T28261] net_ratelimit: 40 callbacks suppressed [ 1020.861346][T28261] bond2: (slave ip6gretap0): failed to get link speed/duplex [ 1020.960980][T17406] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1021.038490][T10794] bond2: (slave ip6gretap0): failed to get link speed/duplex [ 1021.088159][T28261] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1021.185397][ T9436] __nla_validate_parse: 2 callbacks suppressed [ 1021.185415][ T9436] netlink: 20 bytes leftover after parsing attributes in process `syz.4.9514'. [ 1021.314273][T17406] bond2: (slave ip6gretap0): failed to get link speed/duplex [ 1021.353432][ T9428] syzkaller1: entered promiscuous mode [ 1021.360022][ T9428] syzkaller1: entered allmulticast mode [ 1021.403956][ C0] vxcan1: j1939_tp_rxtimer: 0xffff88804e393400: rx timeout, send abort [ 1021.412589][ C0] vxcan1: j1939_xtp_rx_abort_one: 0xffff88804e393400: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 1021.427115][ C0] vxcan1: j1939_xtp_rx_abort_one: 0xffff88804e390800: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 1021.588147][T28258] bond2: (slave ip6gretap0): failed to get link speed/duplex [ 1021.781734][ T9456] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9521'. [ 1021.815050][T10794] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1021.826346][T10794] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1021.854392][ T9459] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9520'. [ 1021.887809][T28257] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1021.955394][ T9456] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9521'. [ 1022.042616][T10794] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1022.066546][T10794] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1022.085888][ T9456] FAULT_INJECTION: forcing a failure. [ 1022.085888][ T9456] name failslab, interval 1, probability 0, space 0, times 1 [ 1022.112284][ T9456] CPU: 1 UID: 0 PID: 9456 Comm: syz.1.9521 Not tainted syzkaller #0 PREEMPT(full) [ 1022.112309][ T9456] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1022.112319][ T9456] Call Trace: [ 1022.112327][ T9456] [ 1022.112335][ T9456] dump_stack_lvl+0xe8/0x150 [ 1022.112364][ T9456] should_fail_ex+0x40c/0x560 [ 1022.112394][ T9456] should_failslab+0xa8/0x100 [ 1022.112418][ T9456] __kmalloc_cache_noprof+0xa8/0x660 [ 1022.112449][ T9456] ? netdevice_event+0x3aa/0x8a0 [ 1022.112616][ T9456] ? netdevice_event+0x3aa/0x8a0 [ 1022.112642][ T9456] netdevice_event+0x3aa/0x8a0 [ 1022.112663][ T9456] ? rcu_is_watching+0x15/0xb0 [ 1022.112687][ T9456] ? __up_read+0x29c/0x930 [ 1022.112711][ T9456] ? __pfx_netdevice_event+0x10/0x10 [ 1022.112728][ T9456] ? __pfx_del_netdev_ips+0x10/0x10 [ 1022.112746][ T9456] ? __pfx_pass_all_filter+0x10/0x10 [ 1022.112780][ T9456] notifier_call_chain+0x1a5/0x3d0 [ 1022.112823][ T9456] unregister_netdevice_many_notify+0x17de/0x2150 [ 1022.112865][ T9456] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 1022.112893][ T9456] ? unregister_netdevice_queue+0x17d/0x340 [ 1022.112920][ T9456] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 1022.112947][ T9456] ? __pfx_veth_dellink+0x10/0x10 [ 1022.113029][ T9456] ? __pfx_veth_dellink+0x10/0x10 [ 1022.113055][ T9456] rtnl_dellink+0x5be/0x810 [ 1022.113115][ T9456] ? __pfx_rtnl_dellink+0x10/0x10 [ 1022.113151][ T9456] ? unwind_next_frame+0x8f/0x2550 [ 1022.113240][ T9456] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 1022.113296][ T9456] ? __pfx_rtnl_dellink+0x10/0x10 [ 1022.113328][ T9456] ? __pfx_rtnl_dellink+0x10/0x10 [ 1022.113345][ T9456] rtnetlink_rcv_msg+0x802/0xc00 [ 1022.113373][ T9456] ? netlink_sendmsg+0x5d4/0xb40 [ 1022.113399][ T9456] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 1022.113428][ T9456] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1022.113459][ T9456] ? __lock_acquire+0x683/0x2cf0 [ 1022.113492][ T9456] netlink_rcv_skb+0x226/0x4a0 [ 1022.113516][ T9456] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1022.113548][ T9456] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1022.113590][ T9456] ? netlink_deliver_tap+0x2e/0x1b0 [ 1022.113612][ T9456] ? netlink_deliver_tap+0x2e/0x1b0 [ 1022.113640][ T9456] netlink_unicast+0x7bb/0x940 [ 1022.113673][ T9456] netlink_sendmsg+0x813/0xb40 [ 1022.113705][ T9456] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1022.113732][ T9456] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1022.113760][ T9456] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1022.113780][ T9456] sock_sendmsg_nosec+0x13a/0x180 [ 1022.113810][ T9456] ____sys_sendmsg+0x54e/0x850 [ 1022.113837][ T9456] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1022.113868][ T9456] ? import_iovec+0x73/0xa0 [ 1022.113892][ T9456] ___sys_sendmsg+0x2a5/0x360 [ 1022.113911][ T9456] ? __lock_acquire+0x683/0x2cf0 [ 1022.113935][ T9456] ? __pfx____sys_sendmsg+0x10/0x10 [ 1022.113992][ T9456] ? __fget_files+0x2a/0x420 [ 1022.114011][ T9456] ? __fget_files+0x3a2/0x420 [ 1022.114040][ T9456] __x64_sys_sendmsg+0x1b1/0x290 [ 1022.114064][ T9456] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1022.114103][ T9456] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1022.114125][ T9456] do_syscall_64+0x174/0x580 [ 1022.114143][ T9456] ? trace_irq_disable+0x3b/0x140 [ 1022.114162][ T9456] ? clear_bhb_loop+0x40/0x90 [ 1022.114187][ T9456] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1022.114206][ T9456] RIP: 0033:0x7f36bb59de59 [ 1022.114225][ T9456] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1022.114242][ T9456] RSP: 002b:00007f36bc47d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1022.114263][ T9456] RAX: ffffffffffffffda RBX: 00007f36bb825fa0 RCX: 00007f36bb59de59 [ 1022.114277][ T9456] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000003 [ 1022.114290][ T9456] RBP: 00007f36bc47d090 R08: 0000000000000000 R09: 0000000000000000 [ 1022.114303][ T9456] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1022.114314][ T9456] R13: 00007f36bb826038 R14: 00007f36bb825fa0 R15: 00007ffc5b802a98 [ 1022.114346][ T9456] [ 1022.577381][T28258] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1022.712044][ C0] vxcan1: j1939_tp_rxtimer: 0xffff88805d126400: rx timeout, send abort [ 1022.721095][ C0] vxcan1: j1939_xtp_rx_abort_one: 0xffff88805d126400: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 1022.735654][ C0] vxcan1: j1939_xtp_rx_abort_one: 0xffff88805d125000: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 1022.780403][T10794] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1022.807099][T10794] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1022.827100][T29426] Bluetooth: hci5: command tx timeout [ 1022.829419][T28258] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0xf7 [ 1022.887498][T28257] bond2: (slave ip6gretap0): failed to get link speed/duplex [ 1022.946943][T10794] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1022.959134][T10794] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1022.985642][ T9494] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9525'. [ 1022.998402][T28257] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1023.119517][ T9500] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9525'. [ 1023.762837][T28258] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1023.853644][T28260] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1023.950176][T28257] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1024.017692][ C0] vxcan1: j1939_tp_rxtimer: 0xffff888022b9a800: rx timeout, send abort [ 1024.026291][ C0] vxcan1: j1939_xtp_rx_abort_one: 0xffff888022b9a800: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 1024.040822][ C0] vxcan1: j1939_xtp_rx_abort_one: 0xffff888090290800: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 1024.063256][T28258] netdevsim netdevsim3 eth4: set [1, 0] type 2 family 0 port 6081 - 0 [ 1024.532824][T10794] bond2 (unregistering): (slave ip6gretap0): Removing an active aggregator [ 1024.550845][T10794] bond2 (unregistering): (slave ip6gretap0): Releasing backup interface [ 1024.767998][T10794] bond6 (unregistering): (slave gretap1): Releasing backup interface [ 1024.886255][T10794] bond0 (unregistering): Released all slaves [ 1024.896652][T29426] Bluetooth: hci5: command tx timeout [ 1024.911760][T10794] bond1 (unregistering): Released all slaves [ 1024.925632][T10794] bond2 (unregistering): Released all slaves [ 1024.939753][T10794] bond3 (unregistering): Released all slaves [ 1024.955506][T10794] bond4 (unregistering): Released all slaves [ 1024.981082][T10794] bond5 (unregistering): Released all slaves [ 1024.995275][T10794] bond6 (unregistering): (slave bond7): Releasing backup interface [ 1025.004488][T10794] bond6 (unregistering): Released all slaves [ 1025.023312][T10794] bond7 (unregistering): Released all slaves [ 1025.304550][ T9414] bridge0: port 1(bridge_slave_0) entered blocking state [ 1025.313512][ T9414] bridge0: port 1(bridge_slave_0) entered disabled state [ 1025.321042][ T9414] bridge_slave_0: entered allmulticast mode [ 1025.327047][ C0] vxcan1: j1939_tp_rxtimer: 0xffff88805cf28800: rx timeout, send abort [ 1025.335650][ C0] vxcan1: j1939_xtp_rx_abort_one: 0xffff88805cf28800: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 1025.335811][ C0] vxcan1: j1939_xtp_rx_abort_one: 0xffff88805cf28400: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 1025.369666][ T9414] bridge_slave_0: entered promiscuous mode [ 1025.378083][T10794] tipc: Disabling bearer [ 1025.401231][T10794] tipc: Left network mode [ 1025.401491][ T9414] bridge0: port 2(bridge_slave_1) entered blocking state [ 1025.425115][ T9414] bridge0: port 2(bridge_slave_1) entered disabled state [ 1025.434290][ T9414] bridge_slave_1: entered allmulticast mode [ 1025.444936][ T9414] bridge_slave_1: entered promiscuous mode [ 1025.452872][ T9558] netlink: 52 bytes leftover after parsing attributes in process `syz.1.9532'. [ 1025.557162][ T9477] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1025.579925][ T9414] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1025.642828][ T9414] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1025.710523][ T5633] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1025.729474][ T5633] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1025.738554][ T5633] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1025.754427][ T5633] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1025.774054][ T5633] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1025.876533][T28258] net_ratelimit: 5 callbacks suppressed [ 1025.876552][T28258] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1026.012424][ T9571] IPv6: sit1: Disabled Multicast RS [ 1026.047774][ T9571] sit1: entered allmulticast mode [ 1026.122078][ T9414] team0: Port device team_slave_0 added [ 1026.148913][ T9583] netlink: 20 bytes leftover after parsing attributes in process `syz.1.9537'. [ 1026.362963][ T9414] team0: Port device team_slave_1 added [ 1026.615918][ C0] vxcan1: j1939_tp_rxtimer: 0xffff88805cf28000: rx timeout, send abort [ 1026.625254][ C0] vxcan1: j1939_xtp_rx_abort_one: 0xffff88805cf28000: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 1026.639786][ C0] vxcan1: j1939_xtp_rx_abort_one: 0xffff888090f83c00: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 1026.670656][ T9414] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1026.695361][ T9414] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1026.740803][ T9414] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1026.864671][ T9414] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1026.897471][ T9414] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1026.983756][ T9627] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.9543'. [ 1026.993115][T29426] Bluetooth: hci5: command tx timeout [ 1026.994805][ T9414] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1027.024768][ T9627] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 1027.311462][ T5286] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1027.366348][ T9414] hsr_slave_0: entered promiscuous mode [ 1027.409569][ T9414] hsr_slave_1: entered promiscuous mode [ 1027.434198][ T9414] debugfs: 'hsr0' already exists in 'hsr' [ 1027.456942][ T9414] Cannot create hsr debugfs directory [ 1027.722236][T10794] hsr_slave_0: left promiscuous mode [ 1027.737797][T10794] hsr_slave_1: left promiscuous mode [ 1027.779769][T10794] veth1_macvtap: left promiscuous mode [ 1027.793786][T10794] veth0_macvtap: left promiscuous mode [ 1027.805816][T10794] veth1_vlan: left promiscuous mode [ 1027.820386][T10794] veth0_vlan: left promiscuous mode [ 1027.857227][T29426] Bluetooth: hci1: command tx timeout [ 1027.922460][ C0] vxcan1: j1939_tp_rxtimer: 0xffff8880692b8800: rx timeout, send abort [ 1027.932997][ C0] vxcan1: j1939_xtp_rx_abort_one: 0xffff8880692b8800: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 1027.947516][ C0] vxcan1: j1939_xtp_rx_abort_one: 0xffff888079b9f400: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 1028.612167][ T9671] FAULT_INJECTION: forcing a failure. [ 1028.612167][ T9671] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1028.637765][ T5286] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1028.668743][ T9671] CPU: 0 UID: 0 PID: 9671 Comm: syz.1.9553 Not tainted syzkaller #0 PREEMPT(full) [ 1028.668769][ T9671] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1028.668780][ T9671] Call Trace: [ 1028.668787][ T9671] [ 1028.668796][ T9671] dump_stack_lvl+0xe8/0x150 [ 1028.668824][ T9671] should_fail_ex+0x40c/0x560 [ 1028.668856][ T9671] _copy_to_iter+0x404/0x1810 [ 1028.668899][ T9671] ? __pfx__copy_to_iter+0x10/0x10 [ 1028.668927][ T9671] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1028.669031][ T9671] ? lockdep_hardirqs_on+0x7a/0x110 [ 1028.669089][ T9671] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1028.669117][ T9671] ? __skb_try_recv_datagram+0x3de/0x4e0 [ 1028.669177][ T9671] __skb_datagram_iter+0xf8/0x980 [ 1028.669198][ T9671] ? __pfx_sk_busy_loop_end+0x10/0x10 [ 1028.669225][ T9671] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 1028.669254][ T9671] skb_copy_datagram_iter+0xb5/0x240 [ 1028.669280][ T9671] netlink_recvmsg+0x2b9/0xa50 [ 1028.669312][ T9671] ? __pfx_netlink_recvmsg+0x10/0x10 [ 1028.669338][ T9671] ? aa_file_perm+0x18b/0x15f0 [ 1028.669362][ T9671] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1028.669387][ T9671] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 1028.669410][ T9671] ? security_socket_recvmsg+0x7e/0x2c0 [ 1028.669494][ T9671] ? __pfx_netlink_recvmsg+0x10/0x10 [ 1028.669516][ T9671] sock_recvmsg+0x196/0x1e0 [ 1028.669545][ T9671] sock_read_iter+0x22a/0x2f0 [ 1028.669570][ T9671] ? __pfx_sock_read_iter+0x10/0x10 [ 1028.669610][ T9671] do_iter_readv_writev+0x612/0x8c0 [ 1028.669667][ T9671] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 1028.669695][ T9671] ? bpf_lsm_file_permission+0x9/0x20 [ 1028.669721][ T9671] ? security_file_permission+0x75/0x260 [ 1028.669751][ T9671] ? rw_verify_area+0x24a/0x4c0 [ 1028.669777][ T9671] vfs_readv+0x28d/0x850 [ 1028.669812][ T9671] ? __pfx_vfs_readv+0x10/0x10 [ 1028.669852][ T9671] ? __fget_files+0x2a/0x420 [ 1028.669874][ T9671] ? __fget_files+0x3a2/0x420 [ 1028.669892][ T9671] ? __fget_files+0x2a/0x420 [ 1028.669919][ T9671] do_readv+0x154/0x2e0 [ 1028.669948][ T9671] ? __pfx_do_readv+0x10/0x10 [ 1028.669983][ T9671] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1028.670005][ T9671] do_syscall_64+0x174/0x580 [ 1028.670022][ T9671] ? trace_irq_disable+0x3b/0x140 [ 1028.670040][ T9671] ? clear_bhb_loop+0x40/0x90 [ 1028.670064][ T9671] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1028.670082][ T9671] RIP: 0033:0x7f36bb59de59 [ 1028.670101][ T9671] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1028.670117][ T9671] RSP: 002b:00007f36bc47d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 [ 1028.670137][ T9671] RAX: ffffffffffffffda RBX: 00007f36bb825fa0 RCX: 00007f36bb59de59 [ 1028.670151][ T9671] RDX: 0000000000000002 RSI: 0000200000000500 RDI: 0000000000000003 [ 1028.670163][ T9671] RBP: 00007f36bc47d090 R08: 0000000000000000 R09: 0000000000000000 [ 1028.670176][ T9671] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1028.670188][ T9671] R13: 00007f36bb826038 R14: 00007f36bb825fa0 R15: 00007ffc5b802a98 [ 1028.670218][ T9671] [ 1029.017820][T28258] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1029.059175][T29426] Bluetooth: hci5: command tx timeout [ 1029.149323][T28258] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1029.223258][ C0] vxcan1: j1939_tp_rxtimer: 0xffff88802a7d7400: rx timeout, send abort [ 1029.232129][ C0] vxcan1: j1939_xtp_rx_abort_one: 0xffff88802a7d7400: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 1029.362436][ T9414] netdevsim netdevsim3 eth4 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1029.613412][T10794] IPVS: stop unused estimator thread 0... [ 1029.638888][T28259] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1029.694274][ T9414] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1029.784352][T28257] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1029.937534][T29426] Bluetooth: hci1: command tx timeout [ 1029.941906][ T9414] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1030.063188][ T9730] FAULT_INJECTION: forcing a failure. [ 1030.063188][ T9730] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1030.091069][ T9730] CPU: 0 UID: 0 PID: 9730 Comm: syz.1.9564 Not tainted syzkaller #0 PREEMPT(full) [ 1030.091094][ T9730] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1030.091106][ T9730] Call Trace: [ 1030.091114][ T9730] [ 1030.091123][ T9730] dump_stack_lvl+0xe8/0x150 [ 1030.091153][ T9730] should_fail_ex+0x40c/0x560 [ 1030.091185][ T9730] _copy_to_user+0x31/0xb0 [ 1030.091209][ T9730] simple_read_from_buffer+0xe1/0x170 [ 1030.091234][ T9730] proc_fail_nth_read+0x1bb/0x230 [ 1030.091258][ T9730] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1030.091283][ T9730] ? rw_verify_area+0x24a/0x4c0 [ 1030.091307][ T9730] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1030.091327][ T9730] vfs_read+0x213/0xa80 [ 1030.091355][ T9730] ? __pfx___mutex_lock+0x10/0x10 [ 1030.091376][ T9730] ? __pfx_vfs_read+0x10/0x10 [ 1030.091400][ T9730] ? __fget_files+0x2a/0x420 [ 1030.091424][ T9730] ? __fget_files+0x3a2/0x420 [ 1030.091442][ T9730] ? __fget_files+0x2a/0x420 [ 1030.091470][ T9730] ksys_read+0x150/0x270 [ 1030.091495][ T9730] ? __pfx_ksys_read+0x10/0x10 [ 1030.091526][ T9730] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1030.091548][ T9730] do_syscall_64+0x174/0x580 [ 1030.091568][ T9730] ? clear_bhb_loop+0x40/0x90 [ 1030.091592][ T9730] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1030.091611][ T9730] RIP: 0033:0x7f36bb55e68e [ 1030.091629][ T9730] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1030.091649][ T9730] RSP: 002b:00007f36bc47cfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1030.091670][ T9730] RAX: ffffffffffffffda RBX: 00007f36bc47d6c0 RCX: 00007f36bb55e68e [ 1030.091684][ T9730] RDX: 000000000000000f RSI: 00007f36bc47d0a0 RDI: 0000000000000004 [ 1030.091704][ T9730] RBP: 00007f36bc47d090 R08: 0000000000000000 R09: 0000000000000000 [ 1030.091716][ T9730] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1030.091728][ T9730] R13: 00007f36bb826038 R14: 00007f36bb825fa0 R15: 00007ffc5b802a98 [ 1030.091760][ T9730] [ 1030.614179][ T9751] validate_nla: 1 callbacks suppressed [ 1030.614198][ T9751] netlink: 'syz.4.9570': attribute type 1 has an invalid length. [ 1030.641208][ T9751] netlink: 'syz.4.9570': attribute type 4 has an invalid length. [ 1030.678482][ T9751] netlink: 9462 bytes leftover after parsing attributes in process `syz.4.9570'. [ 1030.696277][T10794] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1030.710381][ T9751] netlink: 'syz.4.9570': attribute type 1 has an invalid length. [ 1030.723764][ T9751] netlink: 'syz.4.9570': attribute type 4 has an invalid length. [ 1030.748194][ T9751] netlink: 9491 bytes leftover after parsing attributes in process `syz.4.9570'. [ 1030.867105][ T9414] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1031.054000][T10794] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1031.128629][T28257] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1031.243197][T10794] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1031.621082][T10794] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1032.065535][ T9562] bridge0: port 1(bridge_slave_0) entered blocking state [ 1032.073337][T29426] Bluetooth: hci1: command tx timeout [ 1032.083043][ T9562] bridge0: port 1(bridge_slave_0) entered disabled state [ 1032.090828][ T9562] bridge_slave_0: entered allmulticast mode [ 1032.099035][ T9562] bridge_slave_0: entered promiscuous mode [ 1032.108130][ T9562] bridge0: port 2(bridge_slave_1) entered blocking state [ 1032.115311][ T9562] bridge0: port 2(bridge_slave_1) entered disabled state [ 1032.123090][ T9562] bridge_slave_1: entered allmulticast mode [ 1032.132570][ T9562] bridge_slave_1: entered promiscuous mode [ 1032.170359][ T9817] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9581'. [ 1032.222819][ T9795] syzkaller0: entered promiscuous mode [ 1032.249465][ T9795] syzkaller0: entered allmulticast mode [ 1032.287086][T28255] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1032.325888][ T9805] tipc: Started in network mode [ 1032.343657][ T9805] tipc: Node identity , cluster identity 4711 [ 1032.350586][ T9805] tipc: Failed to obtain node identity [ 1032.357534][ T9805] tipc: Enabling of bearer rejected, failed to enable media [ 1032.522373][ T9414] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1032.544931][ T9414] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1032.642673][ T9833] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1032.686682][ T9840] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9584'. [ 1034.100568][T29426] Bluetooth: hci1: command tx timeout [ 1035.255977][ T9562] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1035.265875][T28258] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1035.291408][ T9414] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1035.302852][ T9414] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1035.352424][ T9562] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1035.390230][T28259] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1035.406525][T28260] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1035.419680][ T9414] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1035.442062][ T9414] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1035.534087][T28257] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1035.549162][T28260] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1035.580463][ T9414] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1035.649347][ T9414] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1035.765242][ T9562] team0: Port device team_slave_0 added [ 1035.809752][ T9562] team0: Port device team_slave_1 added [ 1035.859891][T28258] netdevsim netdevsim2 eth4: set [1, 0] type 2 family 0 port 6081 - 0 [ 1035.953126][T10794] bridge_slave_1: left allmulticast mode [ 1035.972071][T10794] bridge_slave_1: left promiscuous mode [ 1035.982575][T10794] bridge0: port 2(bridge_slave_1) entered disabled state [ 1036.027980][T10794] bridge_slave_0: left allmulticast mode [ 1036.044695][T10794] bridge_slave_0: left promiscuous mode [ 1036.063460][T10794] bridge0: port 1(bridge_slave_0) entered disabled state [ 1036.316344][T10794] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1036.332035][T10794] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1036.362893][T10794] bond0 (unregistering): Released all slaves [ 1036.427977][ T9562] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1036.458857][ T9562] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1036.509891][ T9562] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1036.555285][ T9562] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1036.573248][ T9562] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1036.627480][ T9562] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1036.777145][T28257] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1036.961783][ T9935] syzkaller0: entered promiscuous mode [ 1036.971950][ T9935] syzkaller0: entered allmulticast mode [ 1040.130881][ T4991] udevd[4991]: worker [26907] /devices/virtual/block/nbd3 timeout; kill it [ 1040.150121][ T4991] udevd[4991]: seq 36013 '/devices/virtual/block/nbd3' killed [ 1040.246750][T28258] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1040.269424][ T9562] hsr_slave_0: entered promiscuous mode [ 1040.275758][ T9562] hsr_slave_1: entered promiscuous mode [ 1040.282381][ T9562] debugfs: 'hsr0' already exists in 'hsr' [ 1040.290262][ T9562] Cannot create hsr debugfs directory [ 1040.326095][ T9964] syzkaller0: entered promiscuous mode [ 1040.335361][ T9964] syzkaller0: entered allmulticast mode [ 1040.643658][T10032] netlink: 48 bytes leftover after parsing attributes in process `syz.4.9602'. [ 1040.659879][T10039] tun0: tun_chr_ioctl cmd 1074025675 [ 1040.666210][T10039] tun0: persist enabled [ 1040.753290][T28257] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1040.877536][T10794] hsr_slave_0: left promiscuous mode [ 1040.884966][T10794] hsr_slave_1: left promiscuous mode [ 1040.891889][T10794] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1040.903015][T10794] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1040.913696][T10794] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1040.922647][T10794] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1040.941734][T10794] veth1_macvtap: left promiscuous mode [ 1040.948254][T10794] veth0_macvtap: left promiscuous mode [ 1040.957828][T10794] veth1_vlan: left promiscuous mode [ 1040.963706][T10794] veth0_vlan: left promiscuous mode [ 1041.224294][T10794] team0 (unregistering): Port device team_slave_1 removed [ 1041.251593][T10794] team0 (unregistering): Port device team_slave_0 removed [ 1041.347765][ T5286] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1041.427141][T28256] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1041.449587][ T9414] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1041.519123][ T9414] 8021q: adding VLAN 0 to HW filter on device team0 [ 1041.558879][T28256] bridge0: port 1(bridge_slave_0) entered blocking state [ 1041.566061][T28256] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1041.604713][T28256] bridge0: port 2(bridge_slave_1) entered blocking state [ 1041.611926][T28256] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1041.875771][ T9562] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1041.892402][ T9562] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1041.901958][ T9562] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1041.913744][ T9562] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1041.922813][ T9562] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1041.936615][ T9562] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1041.944842][ T9562] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1041.958423][ T9562] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1041.968500][T10794] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1042.109984][T28257] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1042.155384][ T9562] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1042.192694][ T9562] 8021q: adding VLAN 0 to HW filter on device team0 [ 1042.204111][ T5286] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1042.229154][T28257] bridge0: port 1(bridge_slave_0) entered blocking state [ 1042.236329][T28257] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1042.258251][T28257] bridge0: port 2(bridge_slave_1) entered blocking state [ 1042.265417][T28257] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1042.338777][T28257] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1042.477377][T28257] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1042.528462][ T9414] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1042.631503][T28257] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1042.654215][ T9414] veth0_vlan: entered promiscuous mode [ 1042.691868][ T9414] veth1_vlan: entered promiscuous mode [ 1042.758088][ T9414] veth0_macvtap: entered promiscuous mode [ 1042.771601][ T9414] veth1_macvtap: entered promiscuous mode [ 1042.787697][T28261] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1042.811319][ T9414] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1042.847142][ T9414] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1042.879785][T28256] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1042.893601][T28256] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1042.903708][T28256] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1042.922566][T28256] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1042.946495][T28255] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1043.068747][T28255] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1043.128630][T28255] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1043.145532][T28255] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1043.182531][T28257] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1043.193969][T28257] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1043.209231][T28256] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1043.230001][ T5286] 8021q: adding VLAN 0 to HW filter on device eth3 [ 1043.244137][ T9562] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1043.337418][T28255] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1043.609836][ T9562] veth0_vlan: entered promiscuous mode [ 1043.632374][ T9562] veth1_vlan: entered promiscuous mode [ 1043.675483][ T9562] veth0_macvtap: entered promiscuous mode [ 1043.689445][ T9562] veth1_macvtap: entered promiscuous mode [ 1043.722758][ T9562] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1043.741561][ T9562] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1043.762331][T28256] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1043.784501][T28256] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1043.793697][T28255] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1043.811999][T28255] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1043.903931][ T5286] 8021q: adding VLAN 0 to HW filter on device eth4 [ 1043.978068][T28256] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1043.995516][T28256] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1044.042519][T28255] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1044.051201][T28255] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1046.979237][T10794] net_ratelimit: 29 callbacks suppressed [ 1046.979259][T10794] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1047.096998][T10794] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1047.206648][T28255] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1047.326927][T28257] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1047.436542][T28261] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1047.547254][T10794] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1047.657047][T28258] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1047.766900][T28258] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1047.877001][T28261] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1047.938397][ T1694] block nbd3: Possible stuck request ffff88802743e000: control (read@0,1024B). Runtime 330 seconds [ 1047.949406][ T1694] block nbd3: Possible stuck request ffff88802743e1c0: control (read@1024,1024B). Runtime 330 seconds [ 1047.960741][ T1694] block nbd3: Possible stuck request ffff88802743e380: control (read@2048,1024B). Runtime 330 seconds [ 1047.972027][ T1694] block nbd3: Possible stuck request ffff88802743e540: control (read@3072,1024B). Runtime 330 seconds [ 1047.986796][T28261] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1051.986728][T28257] net_ratelimit: 35 callbacks suppressed [ 1051.986749][T28257] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1052.116977][T28258] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1052.227088][T28261] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1052.338483][T28255] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1052.446791][T28255] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1052.557437][T28258] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1052.666625][T28257] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1052.776554][T28257] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1052.886765][T28258] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1052.996815][T28261] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1054.351296][T10794] team0: left promiscuous mode [ 1054.356272][T10794] team_slave_0: left promiscuous mode [ 1054.362227][T10794] team_slave_1: left promiscuous mode [ 1054.368564][T10794] bridge0: port 3(team0) entered disabled state [ 1054.376190][T10794] bridge_slave_1: left allmulticast mode [ 1054.382434][T10794] bridge_slave_1: left promiscuous mode [ 1054.388777][T10794] bridge0: port 2(bridge_slave_1) entered disabled state [ 1054.397786][T10794] bridge_slave_0: left promiscuous mode [ 1054.403444][T10794] bridge0: port 1(bridge_slave_0) entered disabled state [ 1054.495003][T10794] bond8 (unregistering): (slave ip6gretap2): Releasing active interface [ 1054.510314][T10794] tipc: Disabling bearer [ 1054.583057][T10794] batman_adv: batadv0: Removing interface: gretap1 [ 1054.613649][T10794] bond2 (unregistering): (slave gretap2): Releasing active interface [ 1054.660829][T10794] bond14 (unregistering): (slave geneve4): Releasing active interface [ 1054.672962][T10794] bond6 (unregistering): (slave geneve3): Releasing active interface [ 1054.713635][T10794] team0: Port device bridge1 removed [ 1054.735821][T10794] team0: Port device bridge4 removed [ 1054.763431][T10794] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1054.773291][T10794] bond_slave_0: left allmulticast mode [ 1054.780406][T10794] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1054.794911][T10794] bond_slave_1: left allmulticast mode [ 1054.801120][T10794] bond0 (unregistering): Released all slaves [ 1054.814230][T10794] bond1 (unregistering): Released all slaves [ 1054.828473][T10794] bond2 (unregistering): Released all slaves [ 1054.842032][T10794] bond3 (unregistering): Released all slaves [ 1054.855119][T10794] bond4 (unregistering): Released all slaves [ 1054.868711][T10794] bond5 (unregistering): Released all slaves [ 1054.883766][T10794] bond6 (unregistering): Released all slaves [ 1054.900574][T10794] bond7 (unregistering): Released all slaves [ 1054.916063][T10794] bond8 (unregistering): Released all slaves [ 1054.931846][T10794] bond9 (unregistering): Released all slaves [ 1054.949352][T10794] bond10 (unregistering): Released all slaves [ 1054.966904][T10794] bond11 (unregistering): Released all slaves [ 1054.994678][T10794] bond12 (unregistering): (slave veth0_to_bond): Releasing active interface [ 1055.012243][T10794] bond12 (unregistering): Released all slaves [ 1055.025802][T10794] bond13 (unregistering): Released all slaves [ 1055.043203][T10794] bond14 (unregistering): Released all slaves [ 1055.058708][T10794] bond15 (unregistering): (slave veth11): Releasing backup interface [ 1055.069397][T10794] bond15 (unregistering): Released all slaves [ 1055.183897][T10794] tipc: Left network mode [ 1056.187941][T10794] hsr_slave_0: left promiscuous mode [ 1056.198962][T10794] hsr_slave_1: left promiscuous mode [ 1056.205060][T10794] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1056.445591][T28257] smc: removing ib device syz0 [ 1056.525611][T10794] team_slave_1 (unregistering): left allmulticast mode [ 1056.533628][T10794] team0 (unregistering): Port device team_slave_1 removed [ 1056.551701][T10794] team_slave_0 (unregistering): left allmulticast mode [ 1056.563709][T10794] team0 (unregistering): Port device team_slave_0 removed [ 1056.721279][T28257] smbdirect: ib_dev[syz0] removed [ 1057.046666][T28258] net_ratelimit: 25 callbacks suppressed [ 1057.046686][T28258] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1057.200085][T28256] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1057.339138][T28255] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1057.461318][T28256] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1057.577024][T28256] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1057.698436][T28256] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1057.817333][T28255] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1057.937461][T28255] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1058.047001][T28256] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1058.159878][T28256] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1058.511812][T10794] IPVS: stop unused estimator thread 0... [ 1059.972210][T14241] IPVS: starting estimator thread 0... [ 1060.087239][T10212] IPVS: using max 33 ests per chain, 79200 per kthread [ 1060.155385][T10221] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.9609'. [ 1060.200908][ T5633] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1060.214183][T10219] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.9609'. [ 1060.223846][ T5633] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1060.233709][ T5633] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1060.245654][ T5633] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1060.256145][ T5633] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1060.752319][T10252] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9615'. [ 1060.825175][T10262] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9615'. [ 1061.128637][T10278] veth0: entered promiscuous mode [ 1061.167915][T10278] veth0: left promiscuous mode [ 1061.279431][T10291] Bluetooth: MGMT ver 1.23 [ 1061.454874][T10300] macsec1: entered promiscuous mode [ 1061.460691][T10300] batadv0: entered promiscuous mode [ 1061.474323][T10300] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 1061.487714][T10300] batadv0: left promiscuous mode [ 1061.608785][T10305] netlink: 48 bytes leftover after parsing attributes in process `syz.3.9629'. [ 1062.087378][T28257] net_ratelimit: 28 callbacks suppressed [ 1062.087396][T28257] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1062.177462][T10343] netlink: 16 bytes leftover after parsing attributes in process `syz.3.9637'. [ 1062.217231][T10350] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9640'. [ 1062.316163][T10354] syzkaller1: entered promiscuous mode [ 1062.323780][T10354] syzkaller1: entered allmulticast mode [ 1062.341052][T29426] Bluetooth: hci0: command tx timeout [ 1062.403501][T10220] bridge0: port 1(bridge_slave_0) entered blocking state [ 1062.411442][T10220] bridge0: port 1(bridge_slave_0) entered disabled state [ 1062.421190][T10220] bridge_slave_0: entered allmulticast mode [ 1062.430241][T10220] bridge_slave_0: entered promiscuous mode [ 1062.451338][T10220] bridge0: port 2(bridge_slave_1) entered blocking state [ 1062.459259][T10220] bridge0: port 2(bridge_slave_1) entered disabled state [ 1062.467513][T10220] bridge_slave_1: entered allmulticast mode [ 1062.475371][T10220] bridge_slave_1: entered promiscuous mode [ 1062.542578][T10220] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1062.591750][T10356] can: request_module (can-proto-5) failed. [ 1062.595458][T10220] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1062.667585][T10220] team0: Port device team_slave_0 added [ 1062.693931][T10220] team0: Port device team_slave_1 added [ 1062.801378][T10220] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1062.825169][T10220] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1062.854993][T10220] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1062.869589][T10220] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1062.879647][T10220] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1062.923813][T10220] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1062.961719][T10382] x_tables: duplicate underflow at hook 2 [ 1063.011145][T10386] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1063.065405][T10386] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1063.097372][T10388] xt_hashlimit: max too large, truncated to 1048576 [ 1063.111703][T10388] No such timeout policy "syz1" [ 1063.131611][T10220] hsr_slave_0: entered promiscuous mode [ 1063.138197][T10390] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9648'. [ 1063.149203][T10220] hsr_slave_1: entered promiscuous mode [ 1063.155561][T10220] debugfs: 'hsr0' already exists in 'hsr' [ 1063.164143][T10390] openvswitch: netlink: Missing key (keys=40, expected=100) [ 1063.184951][T10220] Cannot create hsr debugfs directory [ 1063.468542][T28259] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1063.531568][T10409] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9655'. [ 1063.627418][T28259] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1063.783042][T10425] netlink: 'syz.3.9661': attribute type 1 has an invalid length. [ 1063.793254][T10425] netlink: 228 bytes leftover after parsing attributes in process `syz.3.9661'. [ 1063.809465][T28259] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1063.947286][T28259] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1064.286829][T28262] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1064.435678][T29426] Bluetooth: hci0: command tx timeout [ 1064.473720][T28261] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1064.617596][T28257] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1064.618496][T10464] netlink: 'syz.3.9671': attribute type 33 has an invalid length. [ 1064.631372][T10220] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1064.644683][T10220] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1064.652630][T10220] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1064.664475][T10220] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1064.685369][T10464] bond1: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 1064.698198][T10464] bond1 (unregistering): Released all slaves [ 1064.710409][T28257] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 1064.726193][T10220] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1064.795170][T10220] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1064.805450][T10220] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1064.833763][T10220] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1064.891182][T28254] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1066.497569][T29426] Bluetooth: hci0: command tx timeout [ 1067.127095][T28259] net_ratelimit: 19 callbacks suppressed [ 1067.127118][T28259] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1067.247567][T28259] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1067.367203][T28259] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1067.476835][T28261] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1067.586912][T28259] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1067.594569][T10468] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1067.698683][T28259] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1067.813775][T10498] syzkaller1: entered promiscuous mode [ 1067.839164][T10498] syzkaller1: entered allmulticast mode [ 1067.897049][T28256] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1067.897267][T10505] __nla_validate_parse: 6 callbacks suppressed [ 1067.897281][T10505] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9681'. [ 1067.921333][T10505] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9681'. [ 1067.963182][T10505] gretap0: entered promiscuous mode [ 1067.981538][T10505] gretap0: left promiscuous mode [ 1068.051619][T10509] netlink: 16 bytes leftover after parsing attributes in process `syz.4.9682'. [ 1068.057336][T28256] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1068.104050][T10220] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1068.160843][T10220] 8021q: adding VLAN 0 to HW filter on device team0 [ 1068.202363][T10512] netlink: 32 bytes leftover after parsing attributes in process `syz.0.9683'. [ 1068.204682][T28261] bridge0: port 1(bridge_slave_0) entered blocking state [ 1068.218530][T28261] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1068.289233][T28261] bridge0: port 2(bridge_slave_1) entered blocking state [ 1068.296471][T28261] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1068.358115][T28259] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1068.504084][T28261] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1068.578272][T29426] Bluetooth: hci0: command tx timeout [ 1068.834707][T10533] netlink: 16 bytes leftover after parsing attributes in process `syz.5.9689'. [ 1069.288384][T10562] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9696'. [ 1069.361357][T10566] netlink: 36 bytes leftover after parsing attributes in process `syz.0.9698'. [ 1069.421090][T10220] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1069.653160][T10220] veth0_vlan: entered promiscuous mode [ 1069.676261][T10220] veth1_vlan: entered promiscuous mode [ 1069.686205][T10588] netlink: 32 bytes leftover after parsing attributes in process `syz.0.9704'. [ 1069.708941][T10220] veth0_macvtap: entered promiscuous mode [ 1069.728976][T10590] netlink: 'syz.0.9704': attribute type 21 has an invalid length. [ 1069.741254][T10590] netlink: 156 bytes leftover after parsing attributes in process `syz.0.9704'. [ 1069.775159][T10220] veth1_macvtap: entered promiscuous mode [ 1069.879596][T10220] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1069.929571][T10220] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1069.975194][T28261] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1070.017331][T28261] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1070.048584][T28261] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1070.090902][T28261] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1070.175414][T10607] netlink: 24 bytes leftover after parsing attributes in process `syz.4.9711'. [ 1070.434832][T28254] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1070.479190][T28254] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1070.531797][T10612] syzkaller0: entered promiscuous mode [ 1070.544043][T10612] syzkaller0: entered allmulticast mode [ 1070.609929][T28256] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1070.653049][T28256] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1071.155011][T10643] netlink: 'syz.1.9722': attribute type 2 has an invalid length. [ 1071.193843][T10643] netlink: 'syz.1.9722': attribute type 2 has an invalid length. [ 1071.230450][T10636] syzkaller0: entered promiscuous mode [ 1071.238329][T10636] syzkaller0: entered allmulticast mode [ 1071.766161][T10667] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1072.275659][T28257] net_ratelimit: 22 callbacks suppressed [ 1072.275679][T28257] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1072.437208][T28259] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1072.568139][T28257] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1072.687205][T28254] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1072.806990][T28254] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1072.837534][T10738] xt_policy: output policy not valid in PREROUTING and INPUT [ 1072.861550][T10737] xt_policy: output policy not valid in PREROUTING and INPUT [ 1072.938644][T28262] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1073.014592][T10747] netlink: 'syz.4.9751': attribute type 61 has an invalid length. [ 1073.058804][T28254] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1073.078568][T10757] __nla_validate_parse: 11 callbacks suppressed [ 1073.078586][T10757] netlink: 20 bytes leftover after parsing attributes in process `syz.1.9754'. [ 1073.113550][T10756] netlink: 12 bytes leftover after parsing attributes in process `syz.5.9753'. [ 1073.207338][T28262] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1073.233552][T10765] bridge: RTM_NEWNEIGH with invalid ether address [ 1073.268777][T10769] netlink: 76 bytes leftover after parsing attributes in process `syz.3.9758'. [ 1073.337845][T28262] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1073.373270][T10776] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 1073.477408][T28259] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1073.503326][T10783] netlink: 244 bytes leftover after parsing attributes in process `syz.3.9761'. [ 1073.687029][T10792] netlink: 'syz.1.9763': attribute type 9 has an invalid length. [ 1073.703192][T10790] netlink: 'syz.1.9763': attribute type 9 has an invalid length. [ 1073.827798][T10788] bond1: Unable to set up delay as MII monitoring is disabled [ 1073.840146][T10788] bond1 (unregistering): Released all slaves [ 1073.950338][T10807] netlink: 'syz.0.9768': attribute type 9 has an invalid length. [ 1074.102490][T10816] netlink: 16 bytes leftover after parsing attributes in process `syz.4.9770'. [ 1074.291731][T10828] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9774'. [ 1074.310521][T10828] netlink: 'syz.4.9774': attribute type 1 has an invalid length. [ 1074.440560][T10828] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1074.543042][T10840] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9775'. [ 1074.543289][T10836] syzkaller0: entered promiscuous mode [ 1074.563261][T10836] syzkaller0: entered allmulticast mode [ 1074.587412][T10838] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9775'. [ 1074.722496][T10847] syzkaller0: entered promiscuous mode [ 1074.739481][T10847] syzkaller0: entered allmulticast mode [ 1074.889299][T10858] netlink: 20 bytes leftover after parsing attributes in process `syz.5.9779'. [ 1076.036218][T10909] netlink: 16 bytes leftover after parsing attributes in process `syz.5.9791'. [ 1076.852506][T10958] RDS: rds_bind could not find a transport for ::ffff:172.30.0.5, load rds_tcp or rds_rdma? [ 1077.028945][T10967] netlink: 'syz.5.9809': attribute type 2 has an invalid length. [ 1077.039423][T10969] syz_tun: entered allmulticast mode [ 1077.148404][T10968] syz_tun: left allmulticast mode [ 1077.262346][T10974] syzkaller0: entered promiscuous mode [ 1077.274231][T10974] syzkaller0: entered allmulticast mode [ 1077.362693][T28254] net_ratelimit: 22 callbacks suppressed [ 1077.362728][T28254] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1077.487076][ T9122] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 1077.497666][T17408] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1077.608096][T17408] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1077.673987][T10992] netlink: 'syz.5.9817': attribute type 1 has an invalid length. [ 1077.710802][T10992] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1077.743123][T10992] bond1: (slave veth3): Enslaving as an active interface with a down link [ 1077.768154][T10992] bond1: (slave veth0_to_bond): making interface the new active one [ 1077.779129][T10992] veth0_to_bond: entered promiscuous mode [ 1077.785491][T10992] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 1077.825822][T10995] syzkaller0: entered promiscuous mode [ 1077.840825][T10995] syzkaller0: entered allmulticast mode [ 1077.859747][T28261] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1077.977019][T17408] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1078.019253][ T1694] block nbd3: Possible stuck request ffff88802743e000: control (read@0,1024B). Runtime 360 seconds [ 1078.031470][ T1694] block nbd3: Possible stuck request ffff88802743e1c0: control (read@1024,1024B). Runtime 360 seconds [ 1078.047631][ T1694] block nbd3: Possible stuck request ffff88802743e380: control (read@2048,1024B). Runtime 360 seconds [ 1078.059685][ T1694] block nbd3: Possible stuck request ffff88802743e540: control (read@3072,1024B). Runtime 360 seconds [ 1078.086728][T28261] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1078.197612][T28261] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1078.307039][T28257] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1078.426505][T28257] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1079.430052][T10931] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1079.824429][T11026] __nla_validate_parse: 5 callbacks suppressed [ 1079.824462][T11026] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9825'. [ 1079.907141][T11025] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9824'. [ 1079.925688][T11026] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9825'. [ 1079.949269][T11032] ip6t_rpfilter: unknown options [ 1079.959475][T11033] ip6t_srh: unknown srh invflags 4000 [ 1080.044264][T11039] netlink: 'syz.0.9828': attribute type 9 has an invalid length. [ 1080.195654][T11043] netlink: 124 bytes leftover after parsing attributes in process `syz.5.9829'. [ 1080.240497][T11045] debugfs: '1łą^!' already exists in 'ieee80211' [ 1080.540511][T11052] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1080.623373][T28261] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1080.646898][T11062] netlink: 'syz.4.9839': attribute type 1 has an invalid length. [ 1080.680123][T11062] netlink: 232 bytes leftover after parsing attributes in process `syz.4.9839'. [ 1080.707401][T11062] netlink: 'syz.4.9839': attribute type 1 has an invalid length. [ 1080.948728][T11077] netlink: 20 bytes leftover after parsing attributes in process `syz.0.9842'. [ 1081.230862][T11092] netlink: 36 bytes leftover after parsing attributes in process `syz.0.9847'. [ 1081.302930][T11090] netlink: 24 bytes leftover after parsing attributes in process `syz.3.9844'. [ 1081.710184][T11112] netlink: 'syz.5.9851': attribute type 39 has an invalid length. [ 1081.842239][T11125] netlink: 'syz.0.9854': attribute type 3 has an invalid length. [ 1081.990200][T11125] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9854'. [ 1082.010334][T11117] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9853'. [ 1082.421301][T11146] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 1082.426890][T28254] net_ratelimit: 32 callbacks suppressed [ 1082.426935][T28254] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1082.599894][T28254] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1082.729665][T28259] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1082.847163][T17406] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1082.988020][T28261] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1083.021482][T11178] syzkaller0: entered promiscuous mode [ 1083.043667][T11178] syzkaller0: entered allmulticast mode [ 1083.102408][ T5286] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1083.257193][T28259] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1083.397103][T28259] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1083.515795][T11196] netlink: 'syz.1.9871': attribute type 9 has an invalid length. [ 1083.567048][T28257] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1083.689470][T28254] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1083.828061][T17408] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1084.648722][T11237] syzkaller0: entered promiscuous mode [ 1084.655109][T11237] syzkaller0: entered allmulticast mode [ 1085.012219][T11260] wg0: entered promiscuous mode [ 1085.145122][T11270] __nla_validate_parse: 6 callbacks suppressed [ 1085.155574][T11270] netlink: 4552 bytes leftover after parsing attributes in process `syz.0.9893'. [ 1085.180789][T11270] netlink: 4552 bytes leftover after parsing attributes in process `syz.0.9893'. [ 1085.260165][T11271] bridge_slave_0: left allmulticast mode [ 1085.291927][T11271] bridge_slave_0: left promiscuous mode [ 1085.306357][T11271] bridge0: port 1(bridge_slave_0) entered disabled state [ 1085.322614][T11271] bridge_slave_1: left allmulticast mode [ 1085.337425][T11271] bridge_slave_1: left promiscuous mode [ 1085.343335][T11271] bridge0: port 2(bridge_slave_1) entered disabled state [ 1085.363016][T11283] IPVS: length: 8 != 1152 [ 1085.370121][T11271] bond1: (slave veth0_to_bond): Releasing active interface [ 1085.411441][T11271] veth0_to_bond: left promiscuous mode [ 1085.430008][T11271] bond0: (slave bond_slave_0): Releasing backup interface [ 1085.460902][T11271] bond0: (slave bond_slave_1): Releasing backup interface [ 1085.495499][T11271] team0: Port device team_slave_0 removed [ 1085.518596][T11271] team0: Port device team_slave_1 removed [ 1085.526215][T11271] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1085.539903][T11271] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1085.551356][T11271] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1085.560782][T11271] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1085.571678][T11284] pim6reg1: entered promiscuous mode [ 1085.578658][T11284] pim6reg1: entered allmulticast mode [ 1085.841465][T11301] syzkaller0: entered promiscuous mode [ 1085.872584][T11301] syzkaller0: entered allmulticast mode [ 1086.278422][T11320] netlink: 'syz.3.9908': attribute type 20 has an invalid length. [ 1086.302781][T11320] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9908'. [ 1086.365391][T11324] netlink: 16 bytes leftover after parsing attributes in process `syz.3.9908'. [ 1086.425398][T11328] netlink: 24 bytes leftover after parsing attributes in process `syz.3.9908'. [ 1086.468870][T28261] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1086.492310][T28261] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1086.525343][T11320] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9908'. [ 1086.576347][T28261] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1086.613908][T28261] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1086.654250][T11334] xt_hashlimit: size too large, truncated to 1048576 [ 1086.862791][T11341] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9913'. [ 1087.648157][T28261] net_ratelimit: 20 callbacks suppressed [ 1087.648193][T28261] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1087.818356][T10794] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1088.026492][T28260] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1088.194161][T10267] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1088.418932][T11389] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 1088.555916][T11392] syzkaller0: entered promiscuous mode [ 1088.588073][T11392] syzkaller0: entered allmulticast mode [ 1088.813682][T11412] netlink: 'syz.5.9923': attribute type 1 has an invalid length. [ 1088.863830][T11414] netlink: 56 bytes leftover after parsing attributes in process `syz.4.9924'. [ 1088.880876][T11416] netlink: 8 bytes leftover after parsing attributes in process `syz.5.9923'. [ 1090.263716][T29426] Bluetooth: hci0: command 0x080f tx timeout [ 1091.804278][T11412] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 1092.020903][T17408] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1092.160885][T11438] mac80211_hwsim hwsim86 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1092.247061][T28255] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1092.377474][T28262] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1092.510805][T11455] 8021q: VLANs not supported on xfrm0 [ 1092.526181][T11455] netlink: 'syz.4.9935': attribute type 1 has an invalid length. [ 1092.629496][T11455] bond4: entered promiscuous mode [ 1092.634856][T11455] bond4: entered allmulticast mode [ 1092.645624][T11455] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1092.802425][T11461] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9936'. [ 1092.806681][T17406] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1092.822166][T11461] netlink: 48 bytes leftover after parsing attributes in process `syz.1.9936'. [ 1092.928984][T28257] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1093.044094][T11467] netlink: 40 bytes leftover after parsing attributes in process `syz.0.9939'. [ 1093.087781][T28262] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1093.123975][T11467] netlink: 40 bytes leftover after parsing attributes in process `syz.0.9939'. [ 1093.229676][T17408] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1093.281201][T11483] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9942'. [ 1093.297603][T11483] openvswitch: netlink: Flow actions attr not present in new flow. [ 1093.380997][T28262] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1093.477619][T11487] netlink: 24 bytes leftover after parsing attributes in process `syz.4.9944'. [ 1093.537435][T28262] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1093.648700][T17406] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1093.782768][T28255] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1093.901545][T28255] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1094.427738][T11530] netlink: 12 bytes leftover after parsing attributes in process `syz.5.9958'. [ 1094.529782][T11535] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 1094.563503][T11534] netlink: 256 bytes leftover after parsing attributes in process `syz.1.9960'. [ 1094.605763][T11537] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9960'. [ 1094.633044][T11538] netlink: 68 bytes leftover after parsing attributes in process `syz.0.9959'. [ 1094.722325][T11544] bond1: option lacp_active: mode dependency failed, not supported in mode active-backup(1) [ 1094.753444][T11544] bond1 (unregistering): Released all slaves [ 1094.818217][T17406] wlan1: Trigger new scan to find an IBSS to join [ 1095.366180][T11574] netlink: 'syz.3.9974': attribute type 1 has an invalid length. [ 1095.596356][T11584] netlink: 'syz.3.9977': attribute type 30 has an invalid length. [ 1095.638882][T11585] x_tables: duplicate underflow at hook 3 [ 1095.878324][T11592] netlink: 'syz.1.9980': attribute type 39 has an invalid length. [ 1096.643970][T11623] erspan1: entered allmulticast mode [ 1097.434316][T11655] netlink: 'syz.3.9999': attribute type 4 has an invalid length. [ 1097.444259][T11654] netlink: 'syz.1.9998': attribute type 30 has an invalid length. [ 1097.525622][T11654] bond1: option arp_missed_max: invalid value (0) [ 1097.534065][T11654] bond1: option arp_missed_max: allowed values 1 - 255 [ 1097.537196][T11660] netlink: 'syz.4.10000': attribute type 10 has an invalid length. [ 1097.567702][T11654] bond1 (unregistering): Released all slaves [ 1097.658620][T11660] team0: Port device geneve1 added [ 1097.702009][T28255] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1097.736287][T28255] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1097.778293][T17406] wlan1: Trigger new scan to find an IBSS to join [ 1097.789642][T28257] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1097.808823][T28257] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1097.866758][T28255] net_ratelimit: 26 callbacks suppressed [ 1097.867162][T28255] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1097.999385][T17406] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1098.139850][T28257] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1098.280914][T28262] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1098.432832][T11690] pimreg: entered allmulticast mode [ 1098.503735][T11696] __nla_validate_parse: 11 callbacks suppressed [ 1098.503755][T11696] netlink: 830 bytes leftover after parsing attributes in process `syz.4.10009'. [ 1098.552119][T28262] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1098.704960][T28257] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1098.770050][T11701] netlink: 'syz.0.10012': attribute type 1 has an invalid length. [ 1098.822120][T11704] netlink: 28 bytes leftover after parsing attributes in process `syz.0.10012'. [ 1098.827856][T11701] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1098.841639][T28256] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1098.873083][T11706] netlink: 36 bytes leftover after parsing attributes in process `syz.3.10013'. [ 1098.898795][T11701] gretap1: entered promiscuous mode [ 1098.904868][T11706] netlink: 20 bytes leftover after parsing attributes in process `syz.3.10013'. [ 1098.914863][T11701] bond1: (slave gretap1): making interface the new active one [ 1098.923954][T11701] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 1099.037133][T28257] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1099.158425][T28256] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1099.247979][T11714] netlink: 16 bytes leftover after parsing attributes in process `syz.0.10015'. [ 1099.287191][T28256] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1099.549045][T11731] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10020'. [ 1099.575616][T11736] netlink: 28 bytes leftover after parsing attributes in process `syz.3.10023'. [ 1099.640667][ T187] IPVS: starting estimator thread 0... [ 1099.757172][T11739] IPVS: using max 28 ests per chain, 67200 per kthread [ 1099.800906][T11749] netlink: 16 bytes leftover after parsing attributes in process `syz.0.10026'. [ 1099.929499][T11755] netlink: 'syz.5.10028': attribute type 3 has an invalid length. [ 1100.117756][T11758] bridge2: entered allmulticast mode [ 1100.739495][T17406] wlan1: Trigger new scan to find an IBSS to join [ 1100.973525][T11796] netlink: 28 bytes leftover after parsing attributes in process `syz.3.10040'. [ 1100.990735][T11796] netlink: 28 bytes leftover after parsing attributes in process `syz.3.10040'. [ 1101.562957][T11819] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1101.572603][T11817] netlink: 'syz.3.10048': attribute type 10 has an invalid length. [ 1101.674530][T17406] wlan1: Creating new IBSS network, BSSID c2:cb:30:49:6b:53 [ 1101.865282][T11827] netlink: 'syz.0.10053': attribute type 7 has an invalid length. [ 1102.272394][T11848] netlink: 'syz.0.10057': attribute type 7 has an invalid length. [ 1102.299599][T11848] netlink: 'syz.0.10057': attribute type 8 has an invalid length. [ 1102.483886][T11855] bond1 (unregistering): Released all slaves [ 1102.809367][T11870] netlink: 'syz.3.10064': attribute type 1 has an invalid length. [ 1102.916598][T28262] net_ratelimit: 35 callbacks suppressed [ 1102.916617][T28262] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1103.067090][T28254] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1103.197309][T28254] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1103.297738][ T9122] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1103.309252][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1103.349364][T28254] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1103.456940][ T187] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1103.469115][T28257] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1103.614396][T17408] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1103.788013][T28257] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1103.800903][T11907] __nla_validate_parse: 13 callbacks suppressed [ 1103.800922][T11907] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10077'. [ 1103.834537][T11905] veth1_macvtap: entered allmulticast mode [ 1103.870359][T11905] netlink: 24 bytes leftover after parsing attributes in process `syz.5.10076'. [ 1104.398693][T11934] netlink: 68 bytes leftover after parsing attributes in process `syz.0.10086'. [ 1104.449254][T11935] netlink: 68 bytes leftover after parsing attributes in process `syz.0.10086'. [ 1104.463549][T11938] ksmbd: Unknown IPC event: 1, ignore. [ 1105.189023][T11975] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10100'. [ 1105.193082][T11976] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10100'. [ 1105.236593][T11980] netlink: 'syz.5.10099': attribute type 10 has an invalid length. [ 1105.263988][T11980] bond0: (slave macsec0): Error -34 calling dev_set_mtu [ 1105.376017][T11985] block nbd0: Unsupported socket: should be TCP or UNIX. [ 1105.619151][T11998] sctp: [Deprecated]: syz.4.10104 (pid 11998) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1105.619151][T11998] Use struct sctp_sack_info instead [ 1105.755408][T12002] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10104'. [ 1105.833698][T12001] netlink: 48 bytes leftover after parsing attributes in process `syz.5.10108'. [ 1106.322620][T12028] tipc: Failed to remove unknown binding: 66,0,0/0:3709691833/3709691834 [ 1106.361734][T12029] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10116'. [ 1106.373016][T12028] tipc: Failed to remove unknown binding: 66,0,0/0:3709691833/3709691834 [ 1106.657350][T12046] netlink: 14 bytes leftover after parsing attributes in process `syz.3.10122'. [ 1106.680435][T12052] IPv6: NLM_F_CREATE should be specified when creating new route [ 1106.710757][T12052] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1106.718251][T12052] IPv6: NLM_F_CREATE should be set when creating new route [ 1106.725539][T12052] IPv6: NLM_F_CREATE should be set when creating new route [ 1107.248765][T12081] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1107.295728][T12081] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1107.360929][T12081] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1107.645291][T12093] syzkaller0: entered promiscuous mode [ 1107.653082][T12093] syzkaller0: entered allmulticast mode [ 1108.068931][T28257] net_ratelimit: 53 callbacks suppressed [ 1108.068949][T28257] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1108.099043][ T1694] block nbd3: Possible stuck request ffff88802743e000: control (read@0,1024B). Runtime 390 seconds [ 1108.115382][ T1694] block nbd3: Possible stuck request ffff88802743e1c0: control (read@1024,1024B). Runtime 390 seconds [ 1108.127699][ T1694] block nbd3: Possible stuck request ffff88802743e380: control (read@2048,1024B). Runtime 390 seconds [ 1108.129971][T12109] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 1108.140847][ T1694] block nbd3: Possible stuck request ffff88802743e540: control (read@3072,1024B). Runtime 390 seconds [ 1108.194391][T12112] Bluetooth: hci2: Opcode 0x0401 failed: -22 [ 1108.221807][T28262] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1108.341416][T12112] veth0: entered promiscuous mode [ 1108.406174][T12112] veth0: left promiscuous mode [ 1108.498293][ T9122] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1108.507362][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1108.577831][T28262] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1108.676323][T12133] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 1108.699740][T28262] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1108.710226][T12128] can: request_module (can-proto-0) failed. [ 1108.784034][T12140] netlink: 'syz.5.10151': attribute type 7 has an invalid length. [ 1108.803593][T12139] tipc: Started in network mode [ 1108.811067][T12139] tipc: Node identity de1d6b6742cd, cluster identity 4711 [ 1108.820416][T12139] tipc: Enabled bearer , priority 0 [ 1108.838627][T12139] syzkaller0: entered promiscuous mode [ 1108.845289][T12139] syzkaller0: entered allmulticast mode [ 1108.899220][T12139] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 1109.010947][T12139] tipc: Resetting bearer [ 1109.043627][T28257] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1109.089286][T12137] tipc: Resetting bearer [ 1109.204991][T12137] tipc: Disabling bearer [ 1109.267014][T28257] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1109.398395][T28256] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1109.589787][T12170] syz.5.10162: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1109.607496][T12171] __nla_validate_parse: 5 callbacks suppressed [ 1109.607516][T12171] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10161'. [ 1109.613948][T12170] CPU: 0 UID: 0 PID: 12170 Comm: syz.5.10162 Not tainted syzkaller #0 PREEMPT(full) [ 1109.613981][T12170] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1109.613995][T12170] Call Trace: [ 1109.614003][T12170] [ 1109.614012][T12170] dump_stack_lvl+0xe8/0x150 [ 1109.614045][T12170] warn_alloc+0x24c/0x270 [ 1109.614078][T12170] ? stack_depot_save_flags+0x33/0x800 [ 1109.614110][T12170] ? __pfx_warn_alloc+0x10/0x10 [ 1109.614139][T12170] ? kasan_save_track+0x3e/0x80 [ 1109.614157][T12170] ? __kasan_kmalloc+0x93/0xb0 [ 1109.614178][T12170] ? xsk_setsockopt+0x52a/0x960 [ 1109.614205][T12170] ? do_sock_setsockopt+0x17c/0x1b0 [ 1109.614226][T12170] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 1109.614244][T12170] ? do_syscall_64+0x174/0x580 [ 1109.614263][T12170] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1109.614294][T12170] __vmalloc_node_range_noprof+0x12c/0x1730 [ 1109.614350][T12170] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1109.614383][T12170] ? __kasan_kmalloc+0x93/0xb0 [ 1109.614404][T12170] ? __kmalloc_cache_noprof+0x32d/0x660 [ 1109.614433][T12170] ? __kmalloc_cache_noprof+0x150/0x660 [ 1109.614463][T12170] vmalloc_user_noprof+0xad/0xe0 [ 1109.614492][T12170] ? xskq_create+0xbf/0x170 [ 1109.614520][T12170] xskq_create+0xbf/0x170 [ 1109.614550][T12170] xsk_init_queue+0x8a/0xe0 [ 1109.614578][T12170] xsk_setsockopt+0x52a/0x960 [ 1109.614607][T12170] ? __fget_files+0x2a/0x420 [ 1109.614628][T12170] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1109.614654][T12170] ? __pfx_aa_sk_perm+0x10/0x10 [ 1109.614681][T12170] ? aa_sock_opt_perm+0xff/0x1a0 [ 1109.614710][T12170] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 1109.614737][T12170] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1109.614764][T12170] do_sock_setsockopt+0x17c/0x1b0 [ 1109.614789][T12170] __x64_sys_setsockopt+0x13d/0x1b0 [ 1109.614811][T12170] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1109.614832][T12170] do_syscall_64+0x174/0x580 [ 1109.614852][T12170] ? clear_bhb_loop+0x40/0x90 [ 1109.614875][T12170] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1109.614895][T12170] RIP: 0033:0x7f8e62b9de59 [ 1109.614913][T12170] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1109.614931][T12170] RSP: 002b:00007f8e60df6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1109.614951][T12170] RAX: ffffffffffffffda RBX: 00007f8e62e25fa0 RCX: 00007f8e62b9de59 [ 1109.614971][T12170] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000004 [ 1109.614983][T12170] RBP: 00007f8e62c33e6f R08: 0000000000000004 R09: 0000000000000000 [ 1109.614995][T12170] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1109.615007][T12170] R13: 00007f8e62e26038 R14: 00007f8e62e25fa0 R15: 00007ffd2183e148 [ 1109.615039][T12170] [ 1109.615181][T12170] Mem-Info: [ 1109.815512][T12177] netlink: 16 bytes leftover after parsing attributes in process `syz.5.10162'. [ 1109.941927][T12170] active_anon:9514 inactive_anon:0 isolated_anon:0 [ 1109.941927][T12170] active_file:30 inactive_file:43684 isolated_file:0 [ 1109.941927][T12170] unevictable:768 dirty:64 writeback:0 [ 1109.941927][T12170] slab_reclaimable:12551 slab_unreclaimable:126227 [ 1109.941927][T12170] mapped:32429 shmem:4172 pagetables:1954 [ 1109.941927][T12170] sec_pagetables:0 bounce:0 [ 1109.941927][T12170] kernel_misc_reclaimable:0 [ 1109.941927][T12170] free:1284863 free_pcp:10891 free_cma:0 [ 1110.031863][T12170] Node 0 active_anon:38156kB inactive_anon:0kB active_file:120kB inactive_file:174544kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:133816kB dirty:256kB writeback:0kB shmem:15152kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:15412kB pagetables:7560kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1110.073760][T12170] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:192kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:156kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1110.121144][T12170] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1110.154082][T12170] lowmem_reserve[]: 0 2491 2492 2492 2492 [ 1110.162320][T12170] Node 0 DMA32 free:1168620kB boost:0kB min:34184kB low:42728kB high:51272kB reserved_highatomic:0KB free_highatomic:0KB active_anon:38156kB inactive_anon:0kB active_file:120kB inactive_file:174544kB unevictable:1536kB writepending:256kB zspages:0kB present:3129332kB managed:2551436kB mlocked:0kB bounce:0kB free_pcp:43732kB local_pcp:23280kB free_cma:0kB [ 1110.208502][T12170] lowmem_reserve[]: 0 0 0 0 0 [ 1110.213421][T12170] Node 0 Normal free:8kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:624kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:8kB free_cma:0kB [ 1110.281921][T12170] lowmem_reserve[]: 0 0 0 0 0 [ 1110.313035][T12170] Node 1 Normal free:3955592kB boost:0kB min:55708kB low:69632kB high:83556kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:192kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1110.406421][T12170] lowmem_reserve[]: 0 0 0 0 0 [ 1110.437202][T12170] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1110.491328][T12170] Node 0 DMA32: 3068*4kB (UME) 1280*8kB (UME) 769*16kB (UME) 426*32kB (UME) 503*64kB (UME) 551*128kB (UME) 456*256kB (UME) 306*512kB (UM) 180*1024kB (UM) 4*2048kB (M) 135*4096kB (UM) = 1170048kB [ 1110.540680][T12170] Node 0 Normal: 0*4kB 1*8kB (U) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 1110.594250][T12196] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 1110.598690][T12170] Node 1 Normal: 2*4kB (UM) 2*8kB (UM) 7*16kB (UM) 10*32kB (UM) 5*64kB (UM) 7*128kB (UM) 5*256kB (UM) 4*512kB (UM) 2*1024kB (UM) 0*2048kB 964*4096kB (M) = 3955592kB [ 1110.687818][T12170] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1110.717500][T12170] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1110.729663][T12170] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1110.768615][T12170] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1110.807587][T12170] 45032 total pagecache pages [ 1110.820787][T12170] 0 pages in swap cache [ 1110.829679][T12202] netlink: 'syz.4.10171': attribute type 1 has an invalid length. [ 1110.839738][T12170] Free swap = 124996kB [ 1110.844431][T12170] Total swap = 124996kB [ 1110.851630][T12170] 2097051 pages RAM [ 1110.857366][T12170] 0 pages HighMem/MovableOnly [ 1110.872418][T12170] 427421 pages reserved [ 1110.890263][T12170] 0 pages cma reserved [ 1110.912711][T12207] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10173'. [ 1110.952598][T12202] bond5: (slave geneve4): making interface the new active one [ 1110.963241][T12202] bond5: (slave geneve4): Enslaving as an active interface with an up link [ 1110.975011][T28255] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 1110.983398][T12202] netlink: 28 bytes leftover after parsing attributes in process `syz.4.10171'. [ 1110.997576][T12207] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10173'. [ 1111.011533][T12202] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1111.165588][T28255] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 1111.190446][T28255] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 1111.217976][T12227] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10177'. [ 1111.331795][T28256] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 1111.572839][T12241] netlink: 16 bytes leftover after parsing attributes in process `syz.4.10181'. [ 1111.642994][T12247] netlink: 16 bytes leftover after parsing attributes in process `syz.4.10181'. [ 1111.654179][T12249] veth0: entered promiscuous mode [ 1111.831764][T12256] netlink: 1 bytes leftover after parsing attributes in process `syz.3.10186'. [ 1111.848779][T12255] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1111.880529][T12256] netlink: 'syz.3.10186': attribute type 16 has an invalid length. [ 1111.900298][T12256] netlink: 48 bytes leftover after parsing attributes in process `syz.3.10186'. [ 1111.923205][T12256] veth0_macvtap: entered allmulticast mode [ 1112.444369][T12284] syzkaller0: entered promiscuous mode [ 1112.458744][T12284] syzkaller0: entered allmulticast mode [ 1112.490583][T12246] veth0: left promiscuous mode [ 1112.722728][T12292] erspan0: entered promiscuous mode [ 1112.739317][T12292] vlan2: entered promiscuous mode [ 1112.809792][T12293] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1112.841361][T12293] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1112.875467][T12293] bond0 (unregistering): Released all slaves [ 1113.078140][T12319] netlink: 'syz.0.10204': attribute type 1 has an invalid length. [ 1113.085552][T12288] bond0: option lacp_active: mode dependency failed, not supported in mode active-backup(1) [ 1113.100390][T12288] bond0 (unregistering): Released all slaves [ 1113.318778][T12319] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1113.376934][ T187] net_ratelimit: 35 callbacks suppressed [ 1113.376966][ T187] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1113.429563][T12321] bond2: (slave geneve2): making interface the new active one [ 1113.471976][T12321] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 1113.647020][T17408] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1113.697329][ T5632] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1113.705666][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1113.758765][T28260] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1113.879002][T17408] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1114.068121][T17408] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1114.190160][T17408] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1114.327207][T28255] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1114.368270][T12362] netlink: 'syz.3.10216': attribute type 39 has an invalid length. [ 1114.425502][T12371] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 1114.532052][T28260] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1114.746920][T12384] x_tables: duplicate underflow at hook 2 [ 1114.779998][T12384] __nla_validate_parse: 1 callbacks suppressed [ 1114.780016][T12384] netlink: 36 bytes leftover after parsing attributes in process `syz.1.10221'. [ 1114.991380][T12395] netlink: 420 bytes leftover after parsing attributes in process `syz.0.10225'. [ 1115.018868][T12393] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10224'. [ 1115.045084][T12393] netlink: 32 bytes leftover after parsing attributes in process `syz.5.10224'. [ 1115.113404][T12393] gretap1: entered promiscuous mode [ 1115.135095][T12393] gretap1: entered allmulticast mode [ 1115.151939][T17408] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1115.187293][T17408] netdevsim netdevsim4 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 1115.273972][T12410] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1115.358420][T12412] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10230'. [ 1115.400483][T12412] netlink: 20 bytes leftover after parsing attributes in process `syz.4.10230'. [ 1115.724329][T12427] netlink: 'syz.4.10237': attribute type 39 has an invalid length. [ 1115.740861][T12428] netlink: 144 bytes leftover after parsing attributes in process `syz.0.10236'. [ 1115.901329][T12435] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10239'. [ 1116.160063][T12445] netlink: 1 bytes leftover after parsing attributes in process `syz.4.10244'. [ 1116.193945][T12445] xt_policy: neither incoming nor outgoing policy selected [ 1116.233854][T12445] netlink: 'syz.4.10244': attribute type 4 has an invalid length. [ 1116.374945][T12456] netlink: 'syz.5.10246': attribute type 24 has an invalid length. [ 1116.543505][T12465] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10248'. [ 1116.642133][T12471] netlink: 'syz.0.10250': attribute type 8 has an invalid length. [ 1116.776882][T12477] netlink: 'syz.5.10252': attribute type 1 has an invalid length. [ 1116.820541][T12477] netlink: 'syz.5.10252': attribute type 2 has an invalid length. [ 1116.853654][T12480] syzkaller0: entered promiscuous mode [ 1116.875618][T12480] syzkaller0: entered allmulticast mode [ 1117.170334][T29426] Bluetooth: hci0: link tx timeout [ 1117.181625][T29426] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 1117.314399][T12489] syzkaller0: entered allmulticast mode [ 1117.356851][T12500] x_tables: duplicate underflow at hook 2 [ 1117.372013][ T5632] IPVS: starting estimator thread 0... [ 1117.496922][T12501] IPVS: using max 30 ests per chain, 72000 per kthread [ 1118.411641][T17408] net_ratelimit: 42 callbacks suppressed [ 1118.411690][T17408] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1118.518252][T12551] netlink: 'syz.1.10273': attribute type 1 has an invalid length. [ 1118.676046][T12560] xt_hashlimit: size too large, truncated to 1048576 [ 1118.705925][T12551] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1118.813949][T12561] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1118.862288][T12561] bond1: (slave batadv1): making interface the new active one [ 1118.891192][T12561] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 1118.905039][ T5632] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1118.914227][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1118.950425][T28255] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1119.025472][T12570] bond0: entered promiscuous mode [ 1119.054144][T12570] bond_slave_0: entered promiscuous mode [ 1119.078584][T12570] bond_slave_1: entered promiscuous mode [ 1119.091993][T12570] batadv0: entered promiscuous mode [ 1119.102575][T12570] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 1119.118088][T28260] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1119.219455][T29426] Bluetooth: hci0: command 0x080f tx timeout [ 1119.308668][T17408] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1119.460606][T14241] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1119.511006][T17406] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1119.574482][T12597] can: request_module (can-proto-0) failed. [ 1119.639285][T28255] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1119.945165][T30527] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1119.952043][T12617] team0 (unregistering): Port device team_slave_0 removed [ 1120.014472][T12617] team0 (unregistering): Port device team_slave_1 removed [ 1120.135538][T12628] __nla_validate_parse: 3 callbacks suppressed [ 1120.135558][T12628] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10293'. [ 1120.173922][T12627] macsec1: entered promiscuous mode [ 1120.272222][T12625] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10294'. [ 1120.314926][T12638] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10297'. [ 1120.732013][T12653] tipc: Enabled bearer , priority 11 [ 1120.741148][T12655] netlink: 'syz.4.10300': attribute type 58 has an invalid length. [ 1120.785552][T12655] netlink: 20 bytes leftover after parsing attributes in process `syz.4.10300'. [ 1120.952545][T12676] netlink: 24 bytes leftover after parsing attributes in process `syz.1.10305'. [ 1121.091482][T12676] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10305'. [ 1121.396134][T12692] Bluetooth: MGMT ver 1.23 [ 1121.444727][T12694] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10307'. [ 1121.524956][T12694] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1121.550316][T12694] bond6 (unregistering): Released all slaves [ 1121.846584][T14241] tipc: Node number set to 2630904679 [ 1123.457247][ T5633] Bluetooth: hci0: command 0x080f tx timeout [ 1123.458398][T28260] net_ratelimit: 37 callbacks suppressed [ 1123.458415][T28260] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1123.587510][T28260] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1123.626274][T12668] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1123.707959][T28262] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1123.837099][T28262] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1123.857406][T12701] netlink: 40 bytes leftover after parsing attributes in process `syz.1.10311'. [ 1123.919008][T12705] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1123.931944][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1123.942985][T12701] netlink: 'syz.1.10311': attribute type 2 has an invalid length. [ 1123.981382][T28254] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1124.098962][ T5632] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1124.107867][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1124.122066][T28254] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1124.454612][T12725] xfrm1: entered allmulticast mode [ 1124.580774][T12732] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 1124.607915][T12730] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10323'. [ 1124.655577][T12730] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10323'. [ 1125.658377][T12776] veth0_macvtap: entered allmulticast mode [ 1125.665580][T12777] netlink: 'syz.4.10339': attribute type 21 has an invalid length. [ 1125.715267][T12777] __nla_validate_parse: 4 callbacks suppressed [ 1125.715285][T12777] netlink: 128 bytes leftover after parsing attributes in process `syz.4.10339'. [ 1125.783117][T12777] netlink: 3 bytes leftover after parsing attributes in process `syz.4.10339'. [ 1125.915687][T12782] vlan5: entered promiscuous mode [ 1125.923844][T12782] bridge0: entered promiscuous mode [ 1126.003531][T12788] syzkaller0: entered allmulticast mode [ 1126.306200][T12811] netlink: 36 bytes leftover after parsing attributes in process `syz.0.10349'. [ 1126.680400][T12823] netlink: 'syz.4.10353': attribute type 1 has an invalid length. [ 1127.167319][T12851] IPVS: set_ctl: invalid protocol: 254 224.0.0.2:0 [ 1127.270254][T12853] nbd: socks must be embedded in a SOCK_ITEM attr [ 1127.525380][T12868] netlink: 24 bytes leftover after parsing attributes in process `syz.0.10368'. [ 1127.655849][T12872] netlink: 'syz.3.10369': attribute type 3 has an invalid length. [ 1127.791180][T12866] syzkaller1: entered promiscuous mode [ 1127.804228][T12866] syzkaller1: entered allmulticast mode [ 1127.814133][T12880] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10372'. [ 1127.842200][T12880] netlink: 'syz.4.10372': attribute type 10 has an invalid length. [ 1127.862176][T12866] netlink: 44 bytes leftover after parsing attributes in process `syz.0.10368'. [ 1127.878257][T12881] sch_tbf: peakrate 8 is lower than or equals to rate 7508080445633888606 ! [ 1127.909657][T12880] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10372'. [ 1127.930260][T12866] bridge0: port 2(bridge_slave_1) entered disabled state [ 1127.937982][T12866] bridge0: port 1(bridge_slave_0) entered disabled state [ 1128.370701][T12900] netlink: 'syz.0.10377': attribute type 10 has an invalid length. [ 1128.401336][T12902] Unsupported ieee802154 address type: 0 [ 1128.413975][T12900] netlink: 40 bytes leftover after parsing attributes in process `syz.0.10377'. [ 1128.460059][T12900] team0: Port device geneve1 added [ 1128.548285][T28260] net_ratelimit: 38 callbacks suppressed [ 1128.548305][T28260] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1128.661689][T12910] netlink: 36 bytes leftover after parsing attributes in process `syz.0.10381'. [ 1128.717871][T28260] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1128.760980][T12912] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 1128.847597][T28260] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1129.024605][T12930] vti0: entered promiscuous mode [ 1129.080442][T12930] vti0: entered allmulticast mode [ 1129.227515][T28262] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1129.380328][ T734] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1129.384207][T12952] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1129.637636][T12953] syzkaller0: entered promiscuous mode [ 1129.652242][T12953] syzkaller0: entered allmulticast mode [ 1129.824466][T12974] netlink: 'syz.4.10394': attribute type 5 has an invalid length. [ 1129.845029][T12974] netlink: 140 bytes leftover after parsing attributes in process `syz.4.10394'. [ 1130.061645][T12985] netlink: 'syz.5.10398': attribute type 2 has an invalid length. [ 1131.763988][T17406] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1133.145152][T12968] syzkaller0: entered promiscuous mode [ 1133.152251][T12968] syzkaller0: entered allmulticast mode [ 1133.217201][ T5633] Bluetooth: hci4: command 0x0406 tx timeout [ 1133.282326][T28254] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1133.427080][T28254] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1133.445417][T12998] __nla_validate_parse: 1 callbacks suppressed [ 1133.445435][T12998] netlink: 64 bytes leftover after parsing attributes in process `syz.3.10405'. [ 1133.504846][T12998] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10405'. [ 1133.528904][T13003] netlink: 'syz.1.10406': attribute type 10 has an invalid length. [ 1133.547656][T28254] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1133.640355][T13011] netlink: 'syz.3.10408': attribute type 1 has an invalid length. [ 1133.649640][T13005] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1133.672420][T13005] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1133.688568][T13005] bond0 (unregistering): Released all slaves [ 1133.700197][T13012] netlink: 24 bytes leftover after parsing attributes in process `syz.0.10403'. [ 1133.807224][T28260] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1133.939920][T28262] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1133.981090][T13022] netlink: 'syz.5.10412': attribute type 1 has an invalid length. [ 1133.990314][T13022] netlink: 'syz.5.10412': attribute type 1 has an invalid length. [ 1134.010400][T13018] netlink: 176 bytes leftover after parsing attributes in process `syz.4.10411'. [ 1134.034031][T13021] netlink: 36 bytes leftover after parsing attributes in process `syz.1.10410'. [ 1134.036725][T13018] netlink: 32 bytes leftover after parsing attributes in process `syz.4.10411'. [ 1134.067907][T28260] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1134.188220][T28260] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1134.244282][T13034] netlink: 'syz.1.10415': attribute type 1 has an invalid length. [ 1134.266815][T13034] netlink: 240 bytes leftover after parsing attributes in process `syz.1.10415'. [ 1134.286438][T13034] netlink: 'syz.1.10415': attribute type 1 has an invalid length. [ 1134.308378][T28262] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1134.427313][ T734] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1134.593025][T28254] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1134.633278][T13043] openvswitch: netlink: Tunnel attr 3 has unexpected len 8 expected 1 [ 1134.705428][T13043] netlink: 24 bytes leftover after parsing attributes in process `syz.0.10417'. [ 1134.927234][ T734] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1135.190922][T13072] veth1_macvtap: left promiscuous mode [ 1135.197508][T13072] macsec0: entered promiscuous mode [ 1135.212369][T13072] macsec0: entered allmulticast mode [ 1135.234508][T13073] veth1_macvtap: entered promiscuous mode [ 1135.250707][T13073] veth1_macvtap: entered allmulticast mode [ 1135.259913][T13073] macsec0: left promiscuous mode [ 1135.265777][T13073] macsec0: left allmulticast mode [ 1135.273060][T13073] veth1_macvtap: left allmulticast mode [ 1135.295984][T28260] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1135.330564][T13084] bond0: (slave gre0): refused to change device type [ 1135.443353][T13089] netlink: 24 bytes leftover after parsing attributes in process `syz.4.10429'. [ 1135.820954][T13113] netlink: 20 bytes leftover after parsing attributes in process `syz.3.10435'. [ 1136.175186][T13132] netlink: 'syz.1.10443': attribute type 10 has an invalid length. [ 1136.467984][T13149] xt_hashlimit: size too large, truncated to 1048576 [ 1138.202139][ T1694] block nbd3: Possible stuck request ffff88802743e000: control (read@0,1024B). Runtime 420 seconds [ 1138.216005][ T1694] block nbd3: Possible stuck request ffff88802743e1c0: control (read@1024,1024B). Runtime 420 seconds [ 1138.230926][ T1694] block nbd3: Possible stuck request ffff88802743e380: control (read@2048,1024B). Runtime 420 seconds [ 1138.244727][ T1694] block nbd3: Possible stuck request ffff88802743e540: control (read@3072,1024B). Runtime 420 seconds [ 1139.914190][T13152] bridge_slave_0 (unregistering): left allmulticast mode [ 1139.939217][T13152] bridge_slave_0 (unregistering): left promiscuous mode [ 1139.952119][T13152] bridge0: port 1(bridge_slave_0) entered disabled state [ 1140.052290][T13162] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1140.107623][T10266] net_ratelimit: 6 callbacks suppressed [ 1140.107653][T10266] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1140.297693][T28262] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1140.316048][T13172] x_tables: duplicate underflow at hook 1 [ 1140.323370][T13171] netlink: 'syz.1.10455': attribute type 1 has an invalid length. [ 1140.354527][T13176] __nla_validate_parse: 1 callbacks suppressed [ 1140.354544][T13176] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10456'. [ 1140.381481][T13177] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10456'. [ 1140.404678][T13176] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10456'. [ 1140.415753][T13176] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10456'. [ 1140.431812][T13176] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10456'. [ 1140.443797][T13176] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10456'. [ 1140.474910][T13176] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10456'. [ 1140.486793][T28254] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1140.495459][T13176] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10456'. [ 1140.510722][T13176] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10456'. [ 1140.521299][T13176] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10456'. [ 1140.597533][T28254] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1140.694505][T13188] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1140.751551][T28262] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1140.959192][T28262] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1141.099427][T28254] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1141.238627][T28262] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1141.430284][T28254] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1141.607529][T28254] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1141.983005][T13264] netlink: 'syz.3.10476': attribute type 2 has an invalid length. [ 1142.272316][T13284] veth0_to_bond: entered allmulticast mode [ 1142.354270][T13284] x_tables: duplicate underflow at hook 4 [ 1142.409253][T13287] xt_hashlimit: size too large, truncated to 1048576 [ 1143.467036][T29426] Bluetooth: hci5: command 0x0406 tx timeout [ 1145.229792][T10266] net_ratelimit: 25 callbacks suppressed [ 1145.229812][T10266] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1145.407328][T10266] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1145.526897][T10266] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1145.657744][T28258] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1145.684085][T13428] lo speed is unknown, defaulting to 1000 [ 1145.704509][T13428] lo speed is unknown, defaulting to 1000 [ 1145.719702][T13428] lo speed is unknown, defaulting to 1000 [ 1145.728350][T13428] smbdirect: ib_dev[syś2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 1145.744304][T13428] smbdirect: ib_dev[syś2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 1145.764216][T13428] smbdirect: ib_dev[syś2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 1145.778404][T28258] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1145.802977][T13428] infiniband syś2: RDMA CMA: cma_listen_on_dev, error -98 [ 1145.946156][T13436] __nla_validate_parse: 63 callbacks suppressed [ 1145.946176][T13436] netlink: 16 bytes leftover after parsing attributes in process `syz.1.10521'. [ 1146.036041][T13428] lo speed is unknown, defaulting to 1000 [ 1146.267279][T13450] netlink: 'syz.1.10524': attribute type 21 has an invalid length. [ 1146.304738][T13451] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10523'. [ 1146.319514][T13428] lo speed is unknown, defaulting to 1000 [ 1146.340680][T13451] netlink: 96 bytes leftover after parsing attributes in process `syz.0.10523'. [ 1146.342915][T13446] team0: Device xfrm0 is of different type [ 1146.430731][T13450] bond0: option lacp_rate: mode dependency failed, not supported in mode broadcast(3) [ 1146.445375][T13450] bond0 (unregistering): Released all slaves [ 1146.804437][T13428] lo speed is unknown, defaulting to 1000 [ 1146.911948][T13428] lo speed is unknown, defaulting to 1000 [ 1146.922144][T28261] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1146.960785][T13428] lo speed is unknown, defaulting to 1000 [ 1146.993122][T13428] lo speed is unknown, defaulting to 1000 [ 1147.016078][T13428] lo speed is unknown, defaulting to 1000 [ 1147.035548][T13428] lo speed is unknown, defaulting to 1000 [ 1147.080552][T13262] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1147.114073][T13428] lo speed is unknown, defaulting to 1000 [ 1147.132129][T13462] netlink: 24 bytes leftover after parsing attributes in process `syz.0.10528'. [ 1147.279682][T13262] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1147.408014][T13262] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1147.634709][T13485] ip6erspan0: entered promiscuous mode [ 1147.642095][T13485] ip6erspan0: entered allmulticast mode [ 1147.699424][T28258] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1147.904506][T13492] netlink: 48 bytes leftover after parsing attributes in process `syz.3.10536'. [ 1148.266262][T13516] netlink: 28 bytes leftover after parsing attributes in process `syz.3.10540'. [ 1148.413053][T13525] netlink: 164 bytes leftover after parsing attributes in process `syz.5.10543'. [ 1148.460095][T13527] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10541'. [ 1148.487829][T13525] netlink: 12 bytes leftover after parsing attributes in process `syz.5.10543'. [ 1148.578547][T29426] Bluetooth: hci1: command 0x0406 tx timeout [ 1148.725507][T13534] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10545'. [ 1148.994455][T13548] tipc: Started in network mode [ 1149.036284][T13548] tipc: Node identity 325aade68989, cluster identity 4711 [ 1149.075667][T13548] tipc: Enabled bearer , priority 0 [ 1149.331489][T13548] tipc: Disabling bearer [ 1150.247513][T28263] net_ratelimit: 15 callbacks suppressed [ 1150.247563][T28263] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1150.407692][T13609] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 1150.419490][T28263] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1150.597408][T13259] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1150.634475][T13619] syzkaller0: entered promiscuous mode [ 1150.654436][T13619] syzkaller0: entered allmulticast mode [ 1150.742890][T28263] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1150.882508][T13262] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1151.037899][T13259] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1151.139384][T13636] __nla_validate_parse: 6 callbacks suppressed [ 1151.139405][T13636] netlink: 32 bytes leftover after parsing attributes in process `syz.1.10568'. [ 1151.267027][T28263] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1151.430667][T28263] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1151.579209][T28262] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 1151.596891][T13614] netlink: 12 bytes leftover after parsing attributes in process `syz.5.10564'. [ 1151.653517][T13646] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10571'. [ 1151.712907][T13650] netlink: 60 bytes leftover after parsing attributes in process `syz.1.10572'. [ 1151.737681][T13653] netlink: 16 bytes leftover after parsing attributes in process `syz.4.10571'. [ 1151.866184][T13657] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1151.873477][T13657] IPv6: NLM_F_CREATE should be set when creating new route [ 1151.880812][T13657] IPv6: NLM_F_CREATE should be set when creating new route [ 1151.888076][T13657] IPv6: NLM_F_CREATE should be set when creating new route [ 1151.975748][T13657] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1152.058618][T13660] batman_adv: batadv0: Adding interface: wlan0 [ 1152.089550][T13660] batman_adv: batadv0: The MTU of interface wlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1152.191933][T13660] batman_adv: batadv0: Not using interface wlan0 (retrying later): interface not active [ 1152.675723][T13686] siw: device registration error -23 [ 1153.584332][T13696] Oops: general protection fault, probably for non-canonical address 0xdffffc000000000b: 0000 [#1] SMP KASAN PTI [ 1153.596414][T13696] KASAN: null-ptr-deref in range [0x0000000000000058-0x000000000000005f] [ 1153.604842][T13696] CPU: 1 UID: 0 PID: 13696 Comm: syz.4.10586 Not tainted syzkaller #0 PREEMPT(full) [ 1153.614297][T13696] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1153.624352][T13696] RIP: 0010:klist_remove+0x156/0x340 [ 1153.629728][T13696] Code: 4d 89 f5 49 c1 ed 03 43 80 7c 3d 00 00 74 08 4c 89 f7 e8 bd ca 89 f6 4d 8b 26 49 83 e4 fe 49 8d 7c 24 58 48 89 f8 48 c1 e8 03 <42> 80 3c 38 00 74 05 e8 9e ca 89 f6 49 8b 44 24 58 48 89 44 24 08 [ 1153.649424][T13696] RSP: 0018:ffffc900068f7960 EFLAGS: 00010202 [ 1153.655499][T13696] RAX: 000000000000000b RBX: ffff888068a38000 RCX: 0000000000000000 [ 1153.663469][T13696] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000058 [ 1153.671439][T13696] RBP: ffffc900068f7a60 R08: ffffffff90192663 R09: 1ffffffff20324cc [ 1153.679416][T13696] R10: dffffc0000000000 R11: fffffbfff20324cd R12: 0000000000000000 [ 1153.687391][T13696] R13: 1ffff1100f837d8c R14: ffff88807c1bec60 R15: dffffc0000000000 [ 1153.695365][T13696] FS: 00007faf75cc56c0(0000) GS:ffff888125326000(0000) knlGS:0000000000000000 [ 1153.704289][T13696] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1153.710863][T13696] CR2: 0000000000001069 CR3: 0000000050b4a000 CR4: 00000000003526f0 [ 1153.718829][T13696] Call Trace: [ 1153.722105][T13696] [ 1153.725029][T13696] ? __pfx_klist_remove+0x10/0x10 [ 1153.730054][T13696] ? kobject_move+0x5e2/0x720 [ 1153.734735][T13696] ? __pfx_kobject_move+0x10/0x10 [ 1153.739768][T13696] ? do_raw_spin_unlock+0xf5/0x210 [ 1153.744892][T13696] ? get_device_parent+0x366/0x3a0 [ 1153.750035][T13696] device_move+0x18e/0x720 [ 1153.754460][T13696] hci_conn_del_sysfs+0xb8/0x1a0 [ 1153.759523][T13696] hci_conn_del+0xc3d/0x1200 [ 1153.764155][T13696] hci_conn_hash_flush+0x189/0x260 [ 1153.769277][T13696] hci_dev_close_sync+0x7fc/0x10a0 [ 1153.774463][T13696] ? __pfx___mutex_lock+0x10/0x10 [ 1153.779486][T13696] ? __pfx_hci_dev_close_sync+0x10/0x10 [ 1153.785038][T13696] ? lockdep_hardirqs_on+0x7a/0x110 [ 1153.790238][T13696] ? enable_work+0x1fd/0x230 [ 1153.794837][T13696] hci_dev_close+0x108/0x260 [ 1153.799538][T13696] sock_do_ioctl+0x101/0x320 [ 1153.804143][T13696] ? __pfx_sock_do_ioctl+0x10/0x10 [ 1153.809259][T13696] ? hook_file_ioctl+0x1f0/0x5f0 [ 1153.814272][T13696] sock_ioctl+0x57a/0x7e0 [ 1153.818613][T13696] ? __pfx_sock_ioctl+0x10/0x10 [ 1153.823465][T13696] ? __fget_files+0x2a/0x420 [ 1153.828050][T13696] ? __fget_files+0x3a2/0x420 [ 1153.832724][T13696] ? __fget_files+0x2a/0x420 [ 1153.837315][T13696] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1153.842261][T13696] ? __pfx_sock_ioctl+0x10/0x10 [ 1153.847117][T13696] __se_sys_ioctl+0xfc/0x170 [ 1153.851709][T13696] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1153.857779][T13696] do_syscall_64+0x174/0x580 [ 1153.862384][T13696] ? trace_irq_disable+0x3b/0x140 [ 1153.867414][T13696] ? clear_bhb_loop+0x40/0x90 [ 1153.872091][T13696] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1153.877985][T13696] RIP: 0033:0x7faf74d9de59 [ 1153.882403][T13696] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1153.902011][T13696] RSP: 002b:00007faf75cc5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1153.910425][T13696] RAX: ffffffffffffffda RBX: 00007faf75025fa0 RCX: 00007faf74d9de59 [ 1153.918388][T13696] RDX: 0000000000000000 RSI: 00000000400448ca RDI: 000000000000000c [ 1153.926352][T13696] RBP: 00007faf74e33e6f R08: 0000000000000000 R09: 0000000000000000 [ 1153.934318][T13696] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1153.942288][T13696] R13: 00007faf75026038 R14: 00007faf75025fa0 R15: 00007ffc1df00728 [ 1153.950266][T13696] [ 1153.953285][T13696] Modules linked in: [ 1153.959025][T13696] ---[ end trace 0000000000000000 ]--- [ 1153.976123][T13696] RIP: 0010:klist_remove+0x156/0x340 [ 1153.985887][T13696] Code: 4d 89 f5 49 c1 ed 03 43 80 7c 3d 00 00 74 08 4c 89 f7 e8 bd ca 89 f6 4d 8b 26 49 83 e4 fe 49 8d 7c 24 58 48 89 f8 48 c1 e8 03 <42> 80 3c 38 00 74 05 e8 9e ca 89 f6 49 8b 44 24 58 48 89 44 24 08 [ 1154.030713][T13696] RSP: 0018:ffffc900068f7960 EFLAGS: 00010202 [ 1154.043011][T13696] RAX: 000000000000000b RBX: ffff888068a38000 RCX: 0000000000000000 [ 1154.055365][T13696] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000058 [ 1154.064373][T13696] RBP: ffffc900068f7a60 R08: ffffffff90192663 R09: 1ffffffff20324cc [ 1154.079538][T13696] R10: dffffc0000000000 R11: fffffbfff20324cd R12: 0000000000000000 [ 1154.090427][T13696] R13: 1ffff1100f837d8c R14: ffff88807c1bec60 R15: dffffc0000000000 [ 1154.101427][T13696] FS: 00007faf75cc56c0(0000) GS:ffff888125226000(0000) knlGS:0000000000000000 [ 1154.111659][T13696] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1154.131966][T13696] CR2: 00007f1e1716b368 CR3: 0000000050b4a000 CR4: 00000000003526f0 [ 1154.145231][T13696] Kernel panic - not syncing: Fatal exception [ 1154.151571][T13696] Kernel Offset: disabled [ 1154.155884][T13696] Rebooting in 86400 seconds..