last executing test programs: 20.084168683s ago: executing program 2 (id=9609): r0 = socket$packet(0x11, 0x3, 0x300) bpf$TOKEN_CREATE(0x24, &(0x7f0000000140)={0x0, r0}, 0x8) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1b000000000000000000", @ANYRES32, @ANYBLOB="81000000000000000000000000002b2800000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="02000000010000000500"/28], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x12, 0xf, &(0x7f00000008c0)=@raw=[@exit, @printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7fffffff}}, @btf_id={0x18, 0x2, 0x3, 0x0, 0x4}, @map_idx_val={0x18, 0x5, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x707e}, @map_idx_val={0x18, 0x9, 0x6, 0x0, 0xf, 0x0, 0x0, 0x0, 0x6}], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x17, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffff8}, [@call={0x85, 0x0, 0x0, 0x36}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x10, 0x40}, 0x94) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000680)={0x24, 0x0, 0x9, 0x801, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFCTH_NAME={0x9, 0x1, 'syz0\x00'}, @NFCTH_TUPLE={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000085}, 0x4000) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000940)={0x68, 0x2, 0x6, 0x301, 0x0, 0x0, {0x5}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0, 0x0, 0x40}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x6}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000040}, 0x4000) recvfrom$llc(r4, 0x0, 0x0, 0x10000, 0x0, 0x0) sendmsg$IPSET_CMD_SWAP(r5, &(0x7f0000000a40)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000b00)=ANY=[@ANYBLOB="2c0000000606030000000000000000000500000268ce49b7a405aab0ab31020900030073797a32000000000900030073797a3100000000"], 0x2c}, 0x1, 0x0, 0x0, 0x4080}, 0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0xe, 0x0, &(0x7f0000000040)="f7edad00"/14, 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x4001, 0x3, 0x2e8, 0x128, 0x0, 0x148, 0x0, 0x148, 0x250, 0x240, 0x240, 0x250, 0x240, 0x7fffffe, 0x0, {[{{@ip={@private=0xa010102, @local, 0xff, 0x0, 'ip6gretap0\x00', 'nicvf0\x00', {}, {}, 0x88, 0x3, 0x10}, 0x0, 0xc8, 0x128, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xc}}, @common=@unspec=@connmark={{0x30}, {0xfffffff9, 0x8}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0x85d, 0xf, [0x10, 0x32, 0x1e, 0x3a, 0x2f, 0x25, 0x3f, 0x17, 0x19, 0x22, 0x2c, 0x3d, 0x7, 0x3f, 0x1e, 0x31], 0x0, 0x2, 0x2}}}, {{@ip={@rand_addr=0x64010101, @local, 0xff, 0x0, 'wg0\x00', 'lo\x00', {0xff}, {}, 0x2e, 0x3, 0x4}, 0x0, 0xc0, 0x128, 0x0, {}, [@common=@unspec=@state={{0x28}, {0xffff}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x1001, 0x7e, 0x1c, 'netbios-ns\x00', 'syz0\x00', {0x3}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x348) r7 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000000f40)=@raw={'raw\x00', 0x8, 0x3, 0x3a0, 0x0, 0x11, 0x148, 0x0, 0x0, 0x308, 0x2a8, 0x2a8, 0x308, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x190, 0x1d8, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x4, 0x352f, 0x3ff, 0x0, 0x3, 0x3, 0x7, 0x0, 0xb0d452e9002af204}, {0x2}}}, @common=@unspec=@conntrack3={{0xc8}, {{@ipv4=@local, [0xff, 0xff, 0x0, 0xff], @ipv6=@mcast2, [0xffffffff, 0xffffff00, 0x0, 0xffffffff], @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, [0xffffffff, 0x0, 0x0, 0xff000000], @ipv4=@multicast2, [0x0, 0x0, 0x0, 0xffffff00], 0x6, 0x6, 0x0, 0x4e23, 0x4e24, 0x4e24, 0x4e23, 0x81}, 0x0, 0x480, 0x0, 0x0, 0x0, 0x4e20}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x3, 0x0, 'netbios-ns\x00'}}}, {{@ip={@multicast1, @private=0xa010102, 0xffffff00, 0xffffff00, 'veth1_to_batadv\x00', 'dummy0\x00', {0xff}, {}, 0x5c, 0x2, 0x62}, 0x0, 0xd0, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@quota={{0x38}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x3, [0x2, 0x0, 0x1, 0x7, 0x2, 0x5], 0x3, 0x1}, {0xffffffffffffffff, [0x3, 0x0, 0x2, 0x7, 0x1, 0x2], 0x2}}}}], {{'\x00', 0x0, 0x70, 0x98, 0x0, {0x178}}, {0x28}}}}, 0x400) 19.800385878s ago: executing program 2 (id=9611): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), r0) sendmsg$DEVLINK_CMD_RATE_SET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=ANY=[@ANYBLOB="0a0902ee", @ANYRES16=r1, @ANYBLOB="010000000000000000002a00000008005800000000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000f00a8007365636f6e646e616d650000"], 0x4c}}, 0x0) 11.563791349s ago: executing program 0 (id=9678): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000040)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41000}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="2200000004"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xc, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) connect$inet(0xffffffffffffffff, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x6) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r3, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xffeffffffffffffe}, {0x0, 0x2000000000000, 0x0, 0x2}, 0x0, 0x0, 0x1, 0x0, 0x3}, {{@in6=@ipv4={'\x00', '\xff\xff', @local}, 0xfffffffd, 0x32}, 0x0, @in=@broadcast, 0x10000, 0x0, 0x2, 0xb7, 0xc4, 0xfffffffe}}, 0xe8) socket$igmp(0x2, 0x3, 0x2) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) syz_80211_inject_frame(&(0x7f0000000100)=@device_b, &(0x7f0000000240)=@data_frame={@msdu=@type10={{0x0, 0x2, 0xd, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}, {0x7}, @random="df3472a79f29", @device_a, @broadcast, {0x5, 0xff8}, "", @value={0x8, 0x1, 0x1, 0x0, 0xa}, @value=@ver_80211n={0x0, 0x7, 0x3, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1}}, @a_msdu=[{@device_b, @device_b, 0x31, "57640c978e9c4102e6c0e9a9cd2c244df3eb550ebad4d076bc3ad76367327181d2fe9d13a7074920b68c10244611afc647"}, {@device_b, @device_a, 0x6b, "4ff1dce46081729350b48463178bba78cb1dd9ba00569499ad6b671658d96e3fc93461ebb8a6a52a82d247c1e0a01acbf05527e28ed30b3a7c3d4d34dd1cad5193f34cbafb896233adadfb5b9ae9a210db09372460017b7b28c14e5f000930414f6d69e322182644e42d0b"}]}, 0xda) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r1}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000640)={r0, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0x1c, &(0x7f0000000680)=ANY=[@ANYBLOB="18080000cbb60000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000008000000bf0920000000000035090120000000009500000000000000b7080000000000007b8af8ff00000000b7080000020000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000020000b7050000080000001c00000000000000bf980000000000000d080000000000008500000006000000b70000000200000095"], &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) 10.130536654s ago: executing program 0 (id=9688): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x52f, @mcast1, 0x4}, 0x1c) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x6, [@var={0x4, 0x0, 0x0, 0xe, 0x4}, @func_proto, @typedef={0x0, 0x0, 0x0, 0x10, 0x4}, @volatile={0x0, 0x0, 0x0, 0x9, 0x3}]}, {0x0, [0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x52}, 0x20) close(r0) socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16, @ANYBLOB="010025bd7000000000000200000008000300", @ANYRES32=r2, @ANYBLOB="08009f000600000008002600b409000005005201"], 0x3c}, 0x1, 0x0, 0x0, 0x4c854}, 0x4040000) sendmsg$NL80211_CMD_GET_WOWLAN(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000180), 0xc, &(0x7f00000003c0)={&(0x7f0000000200)={0x1c, 0x0, 0x2, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x14}, @void, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0xc092}, 0x0) syz_emit_ethernet(0xaf, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa8100000086dd60f7d8ff00753c0020010000000000000000000000000000ff0200000000000000000000000000010004c910", @ANYRESHEX=0x0], 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {}, {0x8, 0x10}}}, 0x24}}, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)=ANY=[@ANYBLOB="60b80000", @ANYRES16, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x4, 0xc0000001, 0x0, {0x0, 0x0, 0x0, 0x0, {0x3, 0x8}, {0xe, 0xe}, {0x0, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_LIMIT={0x8, 0x1, 0xfff}, @TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xe305}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x20004015) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=@newlink={0x48, 0x10, 0x1, 0x70bd2b, 0x25dfdbf9, {0x0, 0x0, 0x0, 0x0, 0x1439a}, [@IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0xffffffff, 0x2}}]}]}, @IFLA_IFNAME={0x14, 0x3, 'wlan0\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000880}, 0x40) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write(r7, &(0x7f0000000380)='f', 0x1) socket(0x21, 0x2, 0x3) tee(r6, r5, 0x1, 0x2) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, 0x0, 0x0) 9.763520923s ago: executing program 0 (id=9690): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007111ae00000000008510000002000000850000000500000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={r0, 0x11e, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x63, 0x10, &(0x7f0000002e00), &(0x7f0000001000), 0x8, 0xa0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={r0, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$sock_ifreq(r1, 0x8995, &(0x7f0000000040)={'bond0\x00', @ifru_names='veth1_to_bond\x00'}) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x89f0, &(0x7f0000000080)={'ip6gre0\x00', &(0x7f0000000500)=@ethtool_flash={0x33, 0xffff, './file0\x00'}}) r4 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="230900000000000000000100000005000700000000000800090000000000060002000100000008000a000000000008001700", @ANYRES32=r4], 0x3c}}, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r5, &(0x7f0000006b40)=[{{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f00000002c0)=""/4, 0x4}, {0x0}], 0x2, &(0x7f0000001180)=""/4096, 0x1000}, 0xfffff453}], 0x1, 0x10120, 0x0) setsockopt$inet_int(r5, 0x0, 0x6, &(0x7f0000000180)=0x80000001, 0x4) setsockopt$inet_int(r5, 0x0, 0x7, &(0x7f0000000140)=0x6, 0x4) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r6, 0x29, 0x42, &(0x7f0000000200)=0x7, 0x4) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000100)=""/78, &(0x7f0000000000)=0x4e) bind$inet(r5, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x32, &(0x7f0000001140)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @udp={{0x6, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty, {[@timestamp={0x44, 0x4, 0x5e}]}}, {0x1, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) ioctl$sock_TIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f00000001c0)) close(r4) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) socket$unix(0x1, 0x2, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x0) 8.418318167s ago: executing program 4 (id=9697): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r0, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r1, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{0xfffffffc, 0x3}, {0x0, 0xfffffffffffffe0a}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}], 0x1, 0x1000000000000}}], 0x48}, 0x0) 8.048420449s ago: executing program 3 (id=9700): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$sock_int(r0, 0x1, 0x2b, 0x0, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x6, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000e50000000000000000180100002020702500000000002020207b1af8ff00000000bf"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket(0x40000000015, 0x5, 0x0) connect$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r3, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r3, 0x1, 0x21, &(0x7f0000000000), 0x4) ioctl$sock_bt_bnep_BNEPCONNDEL(r2, 0x400442c9, &(0x7f0000000080)={0x1ff, @broadcast}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001480)={0x14, 0x15, 0x1, 0x0, 0x0, {0xa}}, 0x14}}, 0x4000812) r5 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_int(r5, 0x0, 0x22, 0x0, &(0x7f0000000740)) bind$inet(r3, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000d00)="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", 0x3f1}, {&(0x7f00000004c0)="128b9306006d4810e5ac5040ad9201847839fc378469d5765b9cc241840896c1498194a7197b45d74a8532b82037b02c9e6045c361eb2d94ae3ac4cb94c12da07d3bceae3a03adc690049e5ac1ec24deaba6fb08f165386aff710d042de332fc1062b0e9306ea7639c0e30d94ceaf76afb36ec8e373ae26899025043ab655ec699608b7e8d844ae5774ca70584a7e9e7", 0x90}], 0x2, 0x0, 0x0, 0x10}, 0x0) setsockopt$RDS_CONG_MONITOR(r3, 0x114, 0x6, &(0x7f0000000680)=0x1, 0x4) socket$rds(0x15, 0x5, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="10000000040000000400000001"], 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000003c0)={r6, &(0x7f0000000340), 0x0}, 0x20) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f00000033c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_EEE_GET(r7, &(0x7f0000003800)={0x0, 0x0, &(0x7f00000037c0)={&(0x7f0000003680)={0x14, r8, 0x1, 0x70bd29, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x400c000}, 0x4) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000480)={'ip6tnl0\x00', &(0x7f0000000400)={'ip6gre0\x00', 0x0, 0x2f, 0x3, 0xff, 0x3, 0x0, @mcast1, @private2, 0x6, 0x7800, 0x7, 0x8}}) sendmsg$ETHTOOL_MSG_FEATURES_SET(r2, &(0x7f0000002780)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000002740)={&(0x7f00000014c0)={0x1244, r8, 0x200, 0x70bd27, 0x25dfdbff, {}, [@ETHTOOL_A_FEATURES_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0x1210, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x54, 0x3, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, ']\xb0\\*-\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x80000000}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '}).\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '/^%\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '\xff\xff\xff\xff\xff\xff'}]}]}, @ETHTOOL_A_BITSET_VALUE={0x1004, 0x4, "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"}, @ETHTOOL_A_BITSET_MASK={0x60, 0x5, "4ac50f80dce4093bdbea0f4e5c9918f8937a198b1b22c0210da7c14e69037a548e4e394b97a6f85186f39b67bdf3e63b709337de17b6e7757b1c5f98232bd930feaae8c82f070498664a3d71e0f9f4484d0829125c018fac5a3a66ac"}, @ETHTOOL_A_BITSET_MASK={0x92, 0x5, "a658ee96e586c03283a44a85b64d0e37c203a475764f68a597c9c185a9e81c82b332cbb8ba5d1c230f03e0d957326552ea7d801bac127a2921871940caccba437528554e84dfe8f87aeac57e9f76054873a90b2b5b7f77e2a70b456615850b3deaaede0d52d65eab39d2ee165202593c9318be31ed5911d59b6b652a67e051c66d6a8d5a975cb69e914324f593ae"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x34, 0x3, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '\xff\xff\xff\xff\xff\xff'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_BITS={0x88, 0x3, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffff0}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'GPL\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x101}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}]}]}]}]}, 0x1244}, 0x1, 0x0, 0x0, 0xc010}, 0x24008051) sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x40) 7.605092769s ago: executing program 4 (id=9701): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x15a8, 0xd0, 0x0, 0x12e0, 0x0, 0xd0, 0x14d8, 0x14d8, 0x14d8, 0x14d8, 0x14d8, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x80}}}, {{@ipv6={@mcast1, @local, [0xffff00], [], 'macvtap0\x00', 'ip6tnl0\x00', {}, {}, 0x11, 0x0, 0x1}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@empty, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00'}, 0x0, 0x1100, 0x1128, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x0, 0x1, 0x0, './cgroup.cpu/syz0\x00', 0x5, {0x31b}}}, @common=@inet=@socket1={{0x28}}]}, @common=@unspec=@MARK={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@frag={{0x30}}, @inet=@rpfilter={{0x28}}]}, @inet=@DSCP={0x28, 'DSCP\x00', 0x0, {0xfd}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@DSCP={0x28, 'DSCP\x00', 0x0, {0x2f}}}], {{'\x00', 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x1000000}}, {0x28}}}}, 0x1608) 7.488469013s ago: executing program 4 (id=9702): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f00000000c0)={r0, r0, 0x206, 0x0, 0x0, 0x2, 0x72, 0x1, 0x3, 0x7, 0x0, 0x8, 'syz1\x00'}) r2 = socket$unix(0x1, 0x2, 0x0) connect$unix(r2, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x4) ioctl$sock_bt_hidp_HIDPCONNDEL(r1, 0x400448c9, &(0x7f0000000180)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}) r3 = socket(0xa, 0x5, 0x0) listen(r3, 0x100) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYRESHEX, @ANYRES32=0x0], 0x20, 0x4002804}, 0x51) socket(0x22, 0x5, 0x9) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000250019033752a5f76a80000005000000"], 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x24044004) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000002e00090027bd70000000000e04000000ae003b598066f5f70cc565a8b3f99f1be904b65e7f20f27016d08e83ee895421cedfa33408e676d080dfea7ad87ec9a18cc75be7a72b0000"], 0x14}, 0x1, 0x0, 0x0, 0x42804}, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000e80), r4) r6 = socket$rds(0x15, 0x5, 0x0) bind$rds(r6, &(0x7f0000000840)={0x2, 0x0, @private=0xa010103}, 0x10) sendmsg$rds(r6, &(0x7f0000000000)={&(0x7f00000002c0)={0x2, 0x0, @multicast2}, 0x10, 0x0}, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x8, &(0x7f0000000280)=0x100000001, 0x3) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000040), 0x3) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r7, 0x6, 0x1d, &(0x7f0000000080)={0x3c, 0x9, 0x5, 0x18, 0x10000}, 0x14) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x2010, r2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000240)='GPL\x00', 0xc, 0x1005, &(0x7f00000014c0)=""/4101, 0x0, 0xe, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) sendto$inet(r7, &(0x7f0000000300)="d5024de645484ef655a7ee66fb52a6175988698d7e717ccddee4f7b50816148e76b2f35cc7369d4d13415cb6401eca0933312ba926c1986078ea1412b97d7b21645a644e50b3c70e88d20588b1aa1c5a8380fb2691f7dbabfad76340f8a408913bd4fc9d253015c142eb9e72", 0x6c, 0x4, &(0x7f0000000480)={0x2, 0x4e20, @multicast1}, 0x10) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) unshare(0xc020680) 6.937536853s ago: executing program 0 (id=9703): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000180)={0x40030000000000, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="0202000311000000000000000000000005000500000000000a00000000000000fe8000000000000000000000000000bb00000000000000000200010000000780ffffff0b000000000200090000000000000000000000000005000600000000000a00000000000000fe8800000000000000000000000000010000000000000000010018"], 0x88}}, 0x0) 6.85572774s ago: executing program 3 (id=9705): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xfffffffffffffdeb, &(0x7f0000000140)={&(0x7f0000004340)=ANY=[@ANYBLOB="05000400fa47aad0ae384d808785ffdcff6c4fa97d72786afa58865631c144cd4faa882f3d0c315bda64fb0edb1cbe05bb5b4b95f8e5d565bdc8576c50b642d010e81c5cb2c65cdea5aec66fb930cff60e6a798c284f081022839597a23c63fce5b575b2ccaa353690ff7bd15c3523946ec12799c48178beae1ecedf1e85f18b8496e932c46f9287f24e83b091873e5f3f11f7d9fe5fe2ad9f9c0a659f675bafdbe80f00dc415c4a65bbdd52ba42d6d9eb2100000000000002001686c70e6630216f78152e27758e3cd28b34fe2b168245", @ANYRES16=r1, @ANYBLOB="000227bd7000fedbdf2501000000080002000200000008000200020000000800020002000000080002000200000008000100020000003dff020002000000"], 0x44}, 0x1, 0x0, 0x0, 0x40440c0}, 0x48850) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) (async) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000010400)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast6-avx\x00'}, 0x58) (async, rerun: 32) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async, rerun: 32) r3 = accept4(r2, 0x0, 0x0, 0x80800) setsockopt$sock_int(r3, 0x1, 0x7, &(0x7f00000014c0)=0x10000b, 0x4) (async) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}]}], 0x1, 0x40800) (async, rerun: 32) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000640)=""/88, 0x58}, {&(0x7f0000000280)=""/121, 0xa2ec4ae9}], 0x2, 0x0, 0x8dff}, 0x0) (async, rerun: 32) setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000200)={0x7f, 0x3, 0x0, 0xb, 0x6, 0x80, 0xa, 0x3, 0x4, 0x1, 0x40, 0xb, 0x5a, 0x40}, 0xe) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) (async) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000001400)=0x0) sendmsg$nl_generic(r3, &(0x7f0000004300)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000042c0)={&(0x7f0000004100)={0x1b0, 0x37, 0x200, 0x70bd2d, 0x25dfdbfc, {0x11}, [@nested={0xd9, 0x10a, 0x0, 0x1, [@generic="440df5ae496a0d001100a4", @typed={0x4, 0x46}, @generic="8fbe0f9f4f13191881d9cc9307bda0554adb55f04b85c8e32502c08e8cb8e0801f3384b4067744d279f3104737789c626ee75fd1d64724d5491a240c6d9451bf5d170aa1c0e6d53cca2432b4e9b58590ce18baf6e5555ab649a4a76cf3b533229f224f3227fe7c08db191cf0f0aca54054dd824fc0aff1c543", @generic="4fe4c02039402e7a7e70d05bd4400be00814c532256fad232c21c8f602f81cc085bf406093269b9600ed40591d8a579764b3af290d44f63e24c2e3ab6a0b4de9a5a0658a268e7f4b59", @nested={0x4, 0x100}]}, @nested={0xa8, 0x4c, 0x0, 0x1, [@nested={0x4, 0xc0}, @generic="076a8ccbb968827ecb27fae9c8c803380037a85de64a0eb1799390c3abc8ef98610795ade7baea54ff0cccf6004e2fdb8f59c22f037295feb985ceb53e18ea45fa8f2c9b99719f8ba0429f361d78ffcaffc7e0182f0345b86ab4629a8189d9ac96960ea07efc920bc64ae38c024f2bfdfebbf64a1c8fe41937ff74474df5b34358089b3d7e41a8d72e69f4f5c51f87bf96ce161d40ef363ada5fbf4d8718578e"]}, @nested={0x10, 0xb0, 0x0, 0x1, [@nested={0x4, 0x127}, @typed={0x8, 0x84, 0x0, 0x0, @u32=0x5}]}, @typed={0x8, 0x11a, 0x0, 0x0, @uid=r4}]}, 0x1b0}, 0x1, 0x0, 0x0, 0x20044400}, 0x24000045) (async) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r5, &(0x7f0000000f00)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x1000, @private1}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000080)="9a", 0x1}], 0x1}}, {{&(0x7f00000001c0)={0xa, 0x4e23, 0xffffffff, @dev={0xfe, 0x80, '\x00', 0x32}, 0x9}, 0x1c, &(0x7f0000000480)=[{&(0x7f0000000c00)="d191d3b1", 0x4}], 0x1, &(0x7f0000000f80)=ANY=[@ANYBLOB="580000000000000029000000370000003a07000000000000072800000001080701000500000000000000020000000000000007000000000000000104000000000000c910fe8000000000000000000000000000aa000000001400000000000000290000000800000003000000000000001400000000000000290000083e000000070000000000000014"], 0xa0}}], 0x2, 0x4004851) (async) getpeername$packet(0xffffffffffffffff, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000580)=0x14) (async, rerun: 64) getsockname$packet(r3, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000006c0)=0x14) (async, rerun: 64) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000001c0)={'ip6gretap0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=@newlink={0x54, 0x10, 0x605, 0xfffffffc, 0x83, {0x0, 0x0, 0x0, 0x0, 0x1001}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ES={0x5, 0xa, 0x1}, @IFLA_MACSEC_INC_SCI={0x5}, @IFLA_MACSEC_PROTECT={0x5}]}}}, @IFLA_LINK={0x8, 0x5, r9}]}, 0x54}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) recvmmsg(r2, &(0x7f0000003f40)=[{{&(0x7f0000000980)=@ethernet={0x0, @dev}, 0x80, &(0x7f0000000c40)=[{&(0x7f0000000a00)=""/19, 0x13}, {&(0x7f0000000a40)=""/204, 0xcc}, {&(0x7f0000000b40)=""/148, 0x94}], 0x3, &(0x7f0000000c80)=""/1, 0x1}, 0x9}, {{&(0x7f0000000cc0)=@qipcrtr, 0x80, &(0x7f0000000e80)=[{&(0x7f0000000d40)=""/135, 0x87}, {&(0x7f0000000e00)=""/8, 0x8}, {&(0x7f0000000e40)=""/54, 0x36}], 0x3, &(0x7f0000000ec0)=""/23, 0x17}, 0x6}, {{&(0x7f0000001040)=@x25={0x9, @remote}, 0x80, &(0x7f0000001300)=[{&(0x7f00000010c0)=""/157, 0x9d}, {&(0x7f0000001180)=""/19, 0x13}, {&(0x7f00000011c0)=""/26, 0x1a}, {&(0x7f0000001200)=""/244, 0xf4}], 0x4}, 0x6d}, {{&(0x7f0000001340)=@ieee802154={0x24, @short}, 0x80, &(0x7f0000002780)=[{&(0x7f0000001500)=""/4096, 0x1000}, {&(0x7f0000002500)=""/105, 0x69}, {&(0x7f0000002580)=""/236, 0xec}, {&(0x7f0000002680)=""/231, 0xe7}], 0x4, &(0x7f00000027c0)=""/161, 0xa1}, 0x95}, {{&(0x7f0000002880)=@can, 0x80, &(0x7f0000003d00)=[{&(0x7f0000002900)=""/60, 0x3c}, {&(0x7f0000002940)=""/209, 0xd1}, {&(0x7f0000002a40)=""/133, 0x85}, {&(0x7f0000002b00)=""/108, 0x6c}, {&(0x7f0000002b80)=""/31, 0x1f}, {&(0x7f0000002bc0)=""/4096, 0x1000}, {&(0x7f0000003bc0)=""/73, 0x49}, {&(0x7f0000003c40)=""/135, 0x87}], 0x8}, 0x87f}, {{&(0x7f0000003d80)=@vsock, 0x80, &(0x7f0000003e40)=[{&(0x7f0000003e00)}], 0x1, &(0x7f0000003e80)=""/177, 0xb1}, 0x8}], 0x6, 0x12023, &(0x7f00000040c0)={0x77359400}) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f00000007c0)={'gre0\x00', &(0x7f0000000700)={'ip_vti0\x00', 0x0, 0x27, 0x7, 0xb, 0x3, {{0x1b, 0x4, 0x1, 0xe, 0x6c, 0x66, 0x0, 0x81, 0x29, 0x0, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@ssrr={0x89, 0x7, 0x52, [@loopback]}, @timestamp_addr={0x44, 0x3c, 0x36, 0x1, 0x9, [{@loopback, 0x1}, {@loopback, 0x8}, {@multicast2, 0x4}, {@empty, 0x6}, {@remote, 0x9}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@local, 0x7ff}]}, @lsrr={0x83, 0x13, 0xda, [@broadcast, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x1c}, @broadcast]}]}}}}}) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r3, &(0x7f0000000940)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1200000}, 0xc, &(0x7f0000000900)={&(0x7f0000000800)={0xc8, 0x0, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}]}, 0xc8}, 0x1, 0x0, 0x0, 0x4000}, 0x4040845) r11 = socket$nl_generic(0x10, 0x3, 0x10) (async) r12 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r11, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r11, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)={0x3c, r12, 0x1, 0x4070bd28, 0x1, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0x3c, 0x6}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r13}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x3c}}, 0x18) 6.616432401s ago: executing program 1 (id=9706): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) close(r0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000180)={0x2, &(0x7f0000000040)=[{0x20, 0x4, 0x0, 0xffdff036}, {0x6, 0x0, 0x0, 0x2}]}) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000000)={0x0, &(0x7f0000000040)}) ioctl$TUNGETVNETLE(r0, 0x40107447, &(0x7f0000000180)) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r2, 0x4004743d, 0x110e22fff6) write$cgroup_type(r2, &(0x7f0000000280), 0x9) 6.615992283s ago: executing program 0 (id=9707): r0 = socket$inet6(0xa, 0x2, 0x3a) sendto$inet6(r0, &(0x7f0000000080)="800037bbfa9ba1ce", 0x8, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local}, 0x1c) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$OCFS2_IOC_UNRESVSP64(r0, 0x4030582b, &(0x7f0000000040)={0x0, 0x2, 0xfff, 0x80000001, 0xb1, 0x7ff}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_ENTRIES(r1, 0x0, 0x41, &(0x7f0000000000)={'nat\x00', 0x4, "99161d83"}, &(0x7f0000000080)=0x2c) 6.590585629s ago: executing program 3 (id=9708): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(sm4)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x80000) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000003c0), r1) sendmsg$L2TP_CMD_SESSION_GET(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="00032dbd5200ffdbdf250800000014001f00ff01000004000000000000000000000105001200810000d606000100000000000c001600140000000000000006001a004e1eebff04002200010000005706000300ff010000f86566fca40c00100001000000000000800500"], 0x70}, 0x1, 0x0, 0x0, 0x4004090}, 0x4004) (async) r3 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000340)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0xfffe, 0x9, @empty, 0x4}}}, 0x108) (async) setsockopt$inet6_group_source_req(r3, 0x29, 0x2c, &(0x7f0000000200)={0x1, {{0xa, 0x4e20, 0x10001, @mcast1={0xff, 0x7}, 0x80000000}}, {{0xa, 0x4e30, 0xa4fffffb, @loopback}}}, 0x108) (async) pipe(&(0x7f0000000000)={0xffffffffffffffff}) close(r4) getsockopt$inet6_mptcp_buf(r4, 0x11c, 0x3, &(0x7f00000000c0)=""/153, &(0x7f0000000080)=0x15) (async) write$cgroup_netprio_ifpriomap(r4, &(0x7f0000000000)={'pimreg0', 0x32, 0x34}, 0xa) (async) writev(r1, &(0x7f0000000040)=[{&(0x7f00000012c0)="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", 0xf61}], 0x1) (async, rerun: 32) r5 = socket$inet(0x2, 0x2, 0x0) (rerun: 32) setsockopt$inet_opts(r5, 0x0, 0x4, 0x0, 0x0) sendto$inet(r5, 0x0, 0x0, 0x40010, &(0x7f0000000080)={0x2, 0x4e23, @empty}, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nfc(&(0x7f0000000380), r6) sendmsg$NFC_CMD_LLC_SET_PARAMS(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010026bd7000fedbdf2510000000050010000100000005000f000200000008000100", @ANYRES32=0x0, @ANYBLOB="060011007294"], 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x8080) (async) pipe(&(0x7f0000000180)) (async) sendmsg$IPVS_CMD_ZERO(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00042cbd7000fbdbdf2510000000"], 0x14}}, 0x20000800) 6.529515035s ago: executing program 4 (id=9709): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x1c0, 0x111, 0x4b4, 0x0, 0xd4feffff, 0x290, 0x20a, 0x278, 0x290, 0x278, 0x3, 0x0, {[{{@ipv6={@empty, @loopback, [0xffffffff, 0xffffff00, 0x0, 0xffffff00], [0x0, 0xffffff00], 'ip_vti0\x00', 'batadv0\x00', {0xff}, {}, 0x6, 0xfe, 0x1}, 0x0, 0x198, 0x1c0, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0xc0, 0x2, 0xb}}, @common=@unspec=@string={{0xc0}, {0x0, 0xfffd, 'bm\x00', "6d93eb04697dfa39de04767f46614613a407abbf4ed2e83a63b484dbb3bf6b2a850e79009e2905d2f98ba19f91f3c9faee6d3686e9bee067f4e77d9ad66238750c4100d7ee97ec7646259d90edece6e9787a97bc956c01754c34c5c9518c46178ed5f9194454980e579c80eca35a58dc47d1d5e4ff6e216c724e88c702448587", 0x27}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x2}}}, {{@ipv6={@loopback, @mcast2, [0x0, 0xffffff00, 0xffff00], [], 'veth1_to_hsr\x00', 'pim6reg1\x00', {}, {}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xa8, 0xd0, 0xfd}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0xa3, 0x7, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) 6.351799368s ago: executing program 4 (id=9710): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="12000000070000000400000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r2, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20) r4 = socket(0x15, 0x5, 0x0) getsockopt(r4, 0x200000000114, 0x2710, &(0x7f000001eec0)=""/102389, &(0x7f0000000000)=0xca8) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r3}, &(0x7f0000000240), &(0x7f0000000140)=r1}, 0x20) listen(r0, 0x8) r5 = accept4(r0, 0x0, 0x0, 0x0) socket(0x40000000015, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x3, 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0b000000080000000c0000000000008001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000000000000001f27b9d4985c53434500003b92240064a72400679c82823b35a75b1a6eeef01b3deac10d07abd6838aa1d5ef8e3f738fa3b3f0ffff7c651fd0f9bc8b37346581290c79911945c66928009398f5"], 0x50) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r6, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)) getpeername$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r8 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'batadv_slave_1\x00', @link_local}) 6.351185052s ago: executing program 2 (id=9614): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000040)=0x1000000, 0x4) r1 = socket$netlink(0x10, 0x3, 0x0) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x4}, 0x10) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000040)={'wlan1\x00', &(0x7f0000000080)=@ethtool_regs={0x4, 0x5, 0x45, "1e1c9473c6d680891b929330950619d3493ac5616fd4ac25676df139f9af8cdcf71645d0cd29af7cce0c8e4e6977ba90eb5e85f509ec5a1d59e5b5dde3a14ea7385cd79ca3"}}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000000000), &(0x7f0000000140)=0x4) 6.313963359s ago: executing program 1 (id=9711): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @broadcast}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x838, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r4, {0x10}, {}, {0x1e, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x80c, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x200001, 0x1, 0x9, 0x8000, 0x3, 0x5, 0x5, 0xb762, 0x6, 0x7, 0x8, 0xf, 0x2, 0x7, 0x400, 0x7fc, 0xffff8000, 0x6, 0x401, 0x8, 0xb89, 0xffffe4f5, 0xd6, 0x4, 0xffff, 0x7, 0x0, 0x2, 0x101, 0x1, 0xfffffffa, 0x4, 0x1, 0x1, 0x9, 0xc, 0x20001000, 0x4, 0x2, 0x7, 0x4, 0x99, 0x9, 0x5, 0x6, 0x7, 0xfffffff7, 0x1, 0x2, 0x9, 0x9, 0x44, 0x8, 0x8, 0x1, 0x2, 0x7ff, 0x8, 0x7, 0x80000001, 0x400, 0x8, 0xfffffa72, 0x5, 0xffffff80, 0x80000000, 0xc, 0x4, 0x65, 0x93, 0x659, 0x9, 0xf, 0x9, 0xc28, 0x9, 0x7, 0x3, 0x401, 0x3, 0x2, 0xfffffffa, 0x1, 0xfffe, 0x3, 0x1, 0x4, 0x8, 0x8, 0x7, 0x1, 0x1, 0x10001, 0x7, 0x40, 0x7, 0x12, 0x8000, 0x1, 0x4dc, 0x80, 0x3, 0x7fffffff, 0xff, 0x9, 0xa7, 0xf, 0x2, 0x0, 0x3, 0x1000, 0x4, 0x401, 0x7, 0x80000000, 0xffff, 0x6, 0x5, 0x4, 0xffffffff, 0x80000000, 0x1966f9ab, 0x200, 0x20200, 0xed5, 0xfffffc00, 0x6, 0x4, 0x8, 0x4c5e, 0xa85, 0x80000040, 0x2, 0x5, 0x7, 0x102, 0x2d5421e8, 0x7, 0x810000, 0xffffffff, 0x6, 0x3ff, 0xf04, 0x0, 0x2, 0x5, 0xfffffc00, 0x5, 0x8d, 0x4, 0x401, 0x4, 0x9, 0x3, 0xfffffffb, 0x1, 0x0, 0x0, 0x2, 0x5, 0x8, 0x3, 0x0, 0x800, 0x2, 0x8, 0x7ff, 0x1, 0x800, 0x6, 0x8, 0xc, 0x4d15, 0x1ff, 0xfffff060, 0x3, 0x469, 0x3, 0x0, 0x200, 0x10000005, 0x7, 0x1, 0x8, 0x42ba, 0x4, 0x9, 0x3, 0x8, 0x8, 0x53, 0x6, 0x4, 0x400, 0x8000, 0x8, 0x2c310b18, 0x1001, 0x0, 0x3, 0xcd34, 0x9, 0x81, 0xdf3, 0x2, 0x7, 0x8, 0xfff, 0x1ff, 0x8000, 0x3, 0x8, 0x3, 0x9, 0x9a6, 0xe4cb, 0x401, 0x1, 0x203, 0x3e, 0x9b4, 0x1, 0x8, 0x0, 0x8, 0x0, 0x9, 0x0, 0x4, 0x10, 0x901, 0x5, 0x2, 0x7b, 0xfffffeff, 0x6, 0x6, 0xc, 0x1000, 0x9, 0x9, 0xe6, 0xab, 0x3fd, 0x7fffffff, 0xed, 0x7ff, 0xd83, 0x66, 0x80000001, 0x4, 0x1, 0x6, 0x200, 0x2]}, @TCA_TBF_PTAB={0x404, 0x3, [0x5, 0x2d, 0x5, 0x0, 0x1, 0x1, 0x8000, 0x200, 0x2, 0x6, 0x10, 0xc, 0x4, 0xf, 0x606, 0x9, 0x6, 0x7fff, 0x7, 0xd4, 0x8, 0xc, 0x9, 0x3, 0x3, 0x0, 0x2, 0x5, 0x8000, 0x8, 0xf1e2, 0xa94, 0x4, 0x9, 0x6, 0x8, 0x3, 0x2, 0xfff, 0xa, 0x80000001, 0x1, 0x0, 0x4, 0x200, 0x9, 0xff, 0x55f7, 0x0, 0x1e, 0x2, 0x0, 0x7, 0xf5c3, 0x3e04, 0x1, 0xa4ad, 0x6, 0x8, 0x2, 0x8001, 0xe175, 0x7, 0x6, 0xd99, 0xffffffdc, 0x8, 0x62, 0x6, 0x8, 0x800, 0x9, 0xbc20, 0x8, 0xffff, 0x3, 0x4, 0x0, 0x1, 0x7, 0x3, 0xf3da, 0x0, 0x101, 0xef359fc, 0xa, 0x6, 0xe, 0x1, 0x9, 0xffffff63, 0x3, 0x80000000, 0x0, 0xcf9, 0x9, 0x3, 0x7, 0x7f, 0x8, 0x50c7, 0x9, 0x2, 0xbe9, 0xe19, 0x6, 0x1, 0x0, 0x4, 0x2, 0x1, 0x8, 0xa, 0x5, 0x5, 0x2, 0x7b92, 0x89, 0x7, 0xe2ea, 0x4, 0x8, 0x4, 0x0, 0x80000000, 0x80, 0x5, 0x10, 0x8, 0x9, 0x3, 0x5, 0x5e06, 0x5, 0x1, 0x5, 0x7, 0x6c7, 0xfffffffb, 0xd, 0x2, 0x3ff, 0xffffffff, 0x8, 0x9, 0x4, 0x8000, 0xc, 0xecb6, 0x6, 0x3, 0x9, 0x3, 0x7fff, 0x0, 0xffffff63, 0x8000, 0x9, 0x2a1, 0xffffffff, 0x8, 0x35, 0x1, 0x0, 0x7, 0x3ff, 0xffffff8f, 0x3, 0x2fa3, 0x2, 0x7, 0x8, 0x101, 0x7, 0x0, 0x9, 0x4, 0xb, 0x1, 0x8, 0x0, 0x9, 0xfffffff8, 0x9, 0x6, 0x2, 0xe, 0x8, 0x5, 0x6e, 0x909, 0x4, 0x4, 0xffff, 0x5, 0x1, 0x6e, 0x32, 0xf0d, 0x2, 0x1, 0xf3, 0x1ff, 0x3ff, 0x2, 0x9, 0x8, 0x9, 0x3ff, 0x1000, 0x7, 0x7, 0x2, 0x2, 0x5, 0xffff, 0x1, 0x0, 0x94f, 0x1ff, 0x0, 0xffffffff, 0x3, 0x2, 0x8, 0x2, 0x2, 0xfff, 0x6, 0x101, 0x0, 0xff, 0x10, 0xffff, 0x8, 0x6f, 0x80000, 0x8001, 0xffffffff, 0xb8d, 0x5, 0x55f, 0x6, 0x3, 0x1000, 0x4, 0x6, 0x9, 0x2, 0x3, 0x7fff, 0x81, 0x2, 0x0, 0x9, 0x401]}]}}]}, 0x838}, 0x1, 0x0, 0x0, 0x40098}, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r5, &(0x7f0000000240)="b86828231c39fcabd0fc4216fd2c", 0xe, 0x1, &(0x7f0000000380)={0x11, 0x1, r4, 0x1, 0x4, 0x6, @broadcast}, 0x14) 6.104114822s ago: executing program 3 (id=9712): openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000500)='blkio.bfq.io_serviced_recursive\x00', 0x0, 0x0) unshare(0xc000600) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f00000001c0)='\b', 0x1}], 0x1, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x11, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="40010000", @ANYRES16=r4, @ANYBLOB="01000000000004000000010000002400030000000000000000000000000000000000000000000000000000000000000000001400020077673100000000000000000000000000f4000880"], 0x140}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x4c, r4, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40090}, 0x44000) r5 = socket$alg(0x26, 0x5, 0x0) r6 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r6, 0x800442d3, &(0x7f000000eec0)={0x6, 0x7, 0x2a4, @random="d60fea76ac0e", 'veth1_vlan\x00'}) bind$alg(r5, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r7 = accept4(r5, 0x0, 0x0, 0x0) sendmmsg$alg(r7, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg$can_j1939(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000001d00)=[{&(0x7f00000007c0)=""/4096, 0x1000}, {&(0x7f00000017c0)=""/247, 0xf7}, {&(0x7f00000018c0)=""/81, 0x51}], 0x3}, 0x1003) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000280), r0) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r1, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x30, r8, 0x4, 0x70bd25, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_TOKEN={0x8}, @MPTCP_PM_ATTR_ADDR_REMOTE={0xfffffffffffffff7}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x9}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x40804}, 0x0) setsockopt$packet_int(r2, 0x107, 0x9, 0x0, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000001ac0)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b52710aeee835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5bc6d3fd0500000022eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe326c2ed0a432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x26, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xf, 0x4, 0x4, 0x12}, 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r10, r9, 0x26}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000040)={@map=r10, 0x26, 0x0, 0xf51, &(0x7f0000001440)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000c3a000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x80, &(0x7f0000000140)=""/128, 0x40f00}, 0x94) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmmsg(r11, &(0x7f0000001940)=[{{&(0x7f00000000c0)=@phonet={0x23, 0xc6, 0x1a, 0x9}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000240)="cda326f555bcae232404af497dfb2d445af3981e2d1498836eec6739aa771483e348502a15a18616c8851651fdefb06cc5d8b6ed9234c4de9c516f729d625e97098fd25816a8a018852aa3e9d9f31dc8b95e2944ea7adbff783e1e387443f181052bfd76ba58ed16e4543b2dca59db0346dfa75c64401f764ad282c1c4f630c708ea4e05489ceeca799e8db836735b213ce2d26cc3d83360a1", 0x99}, {&(0x7f0000000300)="761184369f577fb7ac2053f83ebe5a91af43a8a2f1f18f60c50f", 0x1a}], 0x2}}, {{&(0x7f0000000380)=@l2={0x1f, 0x1, @any, 0x2}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000400)="804655faf00f3e6aaa5ab0f9ac90d4069f783c81432753dc9a714b05da216a21f92c4290c0736a1f4805a248d225d1ab12c9361215479a61c2e3264fc8769c9a8ff874c633483f0a3506ccec111fe270db330ace412455613753a65c28619b10dfcf0503da8ef5be78c176911883476bd04ba4339a34940fac12323a8c9590bc3e1a676f09d50b4d274a5381203a8d980eab6107c4ef663eee75df660145edffc9b697d2fefdf513ad2976b22ce61bd910f6838a37320ecc900c160645927e966b7081adf7d2069bdfecd28d5b8f3c14a4963728", 0xd4}, {&(0x7f00000019c0)="14d245ff4e602cb9077f03f91f59200619b8ac257ae92336d721e368508a2b5dd2fd96bcaa8f741832858c40a04cdd5d604afe3c08af87fcb190a89a705badd4ba4e8c6ad94fc6c7d596aba19bbda7c94f54e854062369f9b34510ba13d0be37c6d02fb63c1e4d850ce6bc4fb0a75374642b53e141e101000000b6e63d9214a8d8a7bfc098f7075f65380e077be30a6425e2e1dd0a1ff66d49297ed20dc422d6791a91493e323c4dab452a315d669bd5bf05ef55f8043b796d89da0e6ed8f04d3fa93ecf5db19dbdf4df02f133c13287940d7a99c95bec30f041491281d95bfd538b53b3fde45e264880000000000000000000", 0xf3}], 0x2, &(0x7f0000001b80)=ANY=[@ANYBLOB="f8000000000000000901000008000000dae31f10556a0f2ab244e835fba8c13e4880111c45a9a672fc89e9c83c2b32459d3c6d624ba20c45b523e0d3d63a1a2c5d1033a9652fa4b1a5f321eaafea6204084e04977ca4664a980484a49d51764f1d60d1e4b7cf109d20f92db282276956d9c617ad428a87ac85da1519073d4f796e626e7b6f7321d74bb075b6291ad280b91bde0ca5ea630d01d3e01fd07d58ed14bb880746ca1092be012874de6ac55b1e5f4d254849e49bc9d8e7e68df87247d4d9ffa6a76df44acd7a304b6d80d1ce25680e4435774288714acca345b069fcb03fa0d11919a3dfbd3a51c8203f39e5a78c360358536b14a00000000000000005010000010000806b0e9a1fcd300359e2b50ef64be5d681853ecbc6af355049ecf41ba3925a7e346523c294b66c9f4f45008283981b51628b2fb63bf4e8dd6f3a6b585e5035bc6750c6efb04a11afe74765b831bfb0c7ac38b3684555d386b645d79d1884521d255f13e0b1f60c874588b2d2cba1569d6f59596c8aa66d50f81f38b45c4334d100c4394fde5f32e1beec99d94170b80000d000000000000000150100000100008069054562490a82671c820d0188851736db01189dfd9851ef3cb40171fdb91da20d9c500804c28b2cf7470b42050ba0d0d68e2944fa74cda4b098d4b31007fb8d4bc92d29c5035e747bec6f2a95a84700375227ab5ba044b5ee032017efa681a34d82d13e219d0693e7313bf2692470187b84fb2af9f82a40cea00e232800f4f735b24146e902299b18d00228a2d924fb63f493e09a27733481743174617e52373444b51faf5edd24f9122824d91eb84dec32ba4d8847bb03c3d30f700000000080000000000000000901000006000000e74325832d2fb6a5c69b42ad433796065b5bbca1f03e8d9862cd5c783d9ddf863896859ed044a9bd5b6adbc0a2f958b2d39b736a0abc43156751c97df316abb5e0eed33260a8adc6f1e360cf50dd66ceae1fb992d12a61596ace05ec9e39962a4bd316a60bdb3714675f2d9548d5e31a10100000000000000e010000000200006575f46f2af6be83198eceee13a087aed72ffca5232ff2d4da84e61daf8dca47e5e5ac83152320b45f3e763dcbc9ed311e9a170983938b59780fcc69ca188570cec8a52a4397c1a06e348b3745296f783bb291b6a66f4c82cdb36842ab3e1406d4501aebf09474ba5ad9009781ab8aa0598e036ccdf4cfa23d1958a4eef71ee6ce8cdcf4565622910413ca3be56f265071ab882faeb30ad4b97d79a399e23ed408c16cfc291ef0720e8f8dd299e451f4948f006bb6efd27987adb3e429b4c92bf55e61a878c24cbe7cbaa48a7b2082882dbac2e46948342905e65ff29d8ffbe5216e03c6e28ed1af9e5870ea0c3c99a7423ba8f084b75ebc135bd4574d1bbc71ca1ad6a7532b71c979a238900e6050b4affa6b3459fa525fe2dbe836aa7da6cd1021397e0d3fb1ffd5630afd538b8fe2e4e27efd7251d821255cf893e0d9663d39225da2357adb969c7e1b6c39a0a6afb5c93c72cef42f95537e3b86c490f39ca100b5f02b215bbbad625baf43e3903bb12ff15ea0de9795d1497f823bcf2d5bdf7a2c09ffb4250a94a73ec9bc697c1911c884063524f631b42c14be331b2267975baeb2cac6840cfd5b579e9efcd6d1b4a2e8df30aa9322e6700de009cd29071444eede90af01fa9e61cb6c3116e784787ea61cab3c965c2ed5ea05b980ab588fd62baa278ecc6259bc8b268edf3c3e1db8745f219e30c2ee2cf0d2b768b4d74522c2e18609562e00bd192fc228dc5e6a22cca943c7957c85bcb7a0e1d7dd43ca5ab04b232c2cb2088fa1d9190b4cf6ab77efe79ec7d1832936bc74cb59772d1c7b0cc9d189f7e3fd5d7160f30d6faf131c3c39359fc19b1040f2a27b7c970c25aa3867698d774923226d4f274c3fcacc9ea6d81f1df53640937f0a3d0e2a75215eb30681c093f6d348864b4c28004bf6f684af9d8b0e9d1a611008e142da4ae2b6f2c89df6c56465406459e8a3935d1a28125521174951bf659e03dcb203aa22ce8dd874a464edfbe7078f8b936e829517b1bbd25f513e14f705b9644ffcb6115573fd73cece9a6ff911d075e0d11d041806d95e316386e0d35f2508ccb4440089b49d7e12113f517cfe89b7095d4966458d79d05883dedbb4a143e48c53d2bdccca456b8fb4bc72fc74349edb218f5339444cc78511362a4633c064600afe8d3f19945756329967823f6815f16e65af3dd276707770dc9a20c9b06500ba69c46b90802f450b3fd1b5be7caf7f39c9e9c49065a7683a3e48d10002cc30460690de9162bced59240b5818cccd1950ec051db417d11cca994a90d395ccf10f579f5b265859e2b953ccdb6624b3663a6e5399ba2a7822aa1b35ce49a888f28f131f29c1bdcd8c18e3a1c628eadc40345ed0183d767dd3f6b31a15e2e66ceeb5d9142d2eb70c3936367b69435eb8ef4dfdc121b070f869e6e552c1c123e0690d7e965ca922690083c784b845eb97476879b3cad1a0e23e60e13771fe21de9e68e7e869e5471134f7af5f5c0857e010718d55231d29d153223fa721d359cb10cc5163e9768102ecb4e7213000b36cbcefe1293766a861b9b0ee248d101fa4540e26d90e5f70a732659ccd6cd831653c45dc2ca6f19ad75d46c8580177e7590dea5c96930757fa23eef7f5e8b3d7e00ffaa1b6dc01be8e6ff5e9c6e4722319c4c4c7dcedbb7ce954460156bf5c2c0dfa0d8b64692daf503ddf16c42dcf7493627956ab8dcf59ec1432eb0ed84ac6409417394c87924f3417af3b50f1ee7429a60cd305a8385a6cb3138a332552f011e20f138d1bafef4a030d7ebdc6b66b5f04e5448171bf3c7e958448f65aa304fd2b4bc3715efa9fe7ce65c32bdda0e97ef561908b08ece8e933fdc6803a4db12589c13774c1dd8aacff2fdfb7efe79cc662a6893e11f67d7a1067194460852355822122c4605c45509c5badf9f1a5e0848ac108e80296980ce899834e4a95ddd3e95497db768c7181e784e29a5624e18eaea38b6aa6764a1db539fb6a9be5033b2bcab627dcfe97dd0c59183d28a91837eb0e88e0d0715915c0085c6b054c871587297304ae642cf45931e0211f6fc22dc764d1f6f5e95cf55c7cb0cb82a97ef3cd2c631b3cf276c227527bbd0edb16f6879ba717dee94f3c8e3cbb9369bdbb8d799312f0bac00977374d5e1b07bb1fe1213aaf6fb37309d10356da5a24eb69d2997339dd3b9c385e29b1b9163f032bf68d3f6bec321bc82bffb1078a53c87c29b35332a9c97f69bbe0e718db6221ba9fda62d564a379e9c4e236ab49fb4ea08b145f68aaef81eee661f5badb0684668c6300b87e6d82c545d364e0653fdd3d28ed0374d2b9a278d66dc9d1f54d6b747c3cd13d00c1be9ea57996e33ea3ae04f2003cf9af88cf489d3ff5e01c3ef5b114077c2ea09d5d018391f47b483edc15d427cd37bf4779d312c5af2dea7b24f1dc23ae0282641e0c5f59f5fe4dfa51d5fe73a39077e88fc1ba3b25d5b2436a028cde29c3f62393ed99b01e486470e6bb26f1285184199d77be3177029f068dd67f52416f00ac36a95ebe38a41d7834c819eeac9e189c62c446b11a1a0829997fcc4cf01fc6ac95894d9114c092600543c00dc68cf27f8250dfdb3b02f878c8f223358659dae124eb1dcf6a1b3e2e52329dafeef0f01392c4ecd261f372ff66ada57158e1da6a2cff846aa9eb157e0a8291d8277116790d6a93ab9690be06285c328a7e8f7cbfa18cacd3334a0c43fe91fd3d7346fedd4b6a9dd5584ed2253f746798897b0aa605495805593941a1614a333629418ffce3ae9edf3eee6dee1f619f952fb53a55df86bbac49fe777f59f7db30ba89790fd5a0f3e33c905471dbe083a2fe0e36ee33ac76f43690719747a52e5794509ff5bb70f9f3c95c710d881ea634790922f572b338c78ee207ec8ea25ea9c6451d64d82a028f9f5ac38d3a618f7e8cf77d4ef55fb65d62e69db2a78d4cf8af0b5bb92357b09f0cd1ce6d76fcca5bb5de6bdccfbede1b96cf6bb633566bb64877139beb9b226a2d8622f94e3453d85e5ea3641c64c742adbb185e69384618ab361c76a28a283624c02b18a9010fd14314a43241396945b320e38683510f86bc2758fb285d6d94ec0fac2dfe9d6b6012d8e978c6104dd381a14921c6ca88c700346b8b94ecab4dbf3440c608eeae34eea8af12c2298102c0a32d4a2b474ea20a026eddceb5f3847e3e4be3f3d534ac6ebb4a37ad7b198ac67a330376cde0c09bae960536d0ec6bd453ce6697a814c069495bacab8535eefdf63f01ee6e129a4d225d46736c39519cc88478e8f4785e2cde6ac50cab48a93b703784f88ded54156239d4330e388a23c3b4934598142907b4346b76bba62fefa6bd08cee87142b5289dedf3ad39f708548df0561e36d5f88db3a8ac2648234945495a5a0f4bfe56c16722ff7677fa05286315e25cb5e5b1dd3584373772e3b100ef1b3df6b720315c6a0ed55d369426822114a547ac99ac78a68796df97087ce7462cd8af2a3eff609b4c5a5003eb7b3cb3e2aec7f3a1b0ce6b3ce1a8db9f978b18565539d4b24a4899c7d5a60521bd7c56d518927ea956a65ed1cc3286c10f6a7a8927cf8a814974f0125071d899a07278dd666a3ba5549c4f8ed646a516f430b17d92d6ed1431d2ab941f40dddb01b9afc1f37628a68f30228331c1e66bf7b823b99a7f9625587fdc631bc088e25e30f5e6dbd3414526bdd03aa8cad509ac71ace38b00c65b9bea5fa0b0d22a5a7ecbd4cfd167fdd02e69bb8c547e392523639aeb5c6ff243adfc7448d9f9b5d2d838b850e6e2a20a79f45d482678c9f9678d3e292e3443932b0608b08f280fc524972d27c5c4b3c81263e5613dab74b362cc02e45dd00df232f41809b15a5ed2238c33b373abb8f36708e004f58f6adf510ae91584e717c4514121b34f7b1564ed5c4c576b0aea4a3763f6e69b883976042ca8b6e58ef38a82ea6dd70e75377cb87fe7e050257fdce460a6ef1ed11322ba663d01a4679fa731e988fbdc957ae5dcfc1e5fb1817f9d27f3fb2c97dfe30b262d01fd64fd7896845de61608afff324feb8d5866083be15c05faf5eee13bbbe6d5fed6a67782d84b5d8ebca57d1da46ff5cd598e1035b5589229618e1fe4c5a8a1281a423ea04e6cf7ee347549f6985101cd5ff808b89c7f1e34f84067e609e83a718c83f51a2d2e3da8f08ebf8cf3011cc1a99feadb7282d1c3117f7899517a4d341b1b73fdabd166f0d5b85be149abf080ab918319313c783d7264c0a55c28e5f456b3ea22b3f88f6bf5e652444f902f406e4cbc59fa7551313df14532369549c65b2dc8417e71ba840b8be334d2227dd3304cc425fc07693099afbea0757b181a333aa0286b582113899ee6c5b4d389d179e24c423e3ebc02de50156a2d302596e5355886a05aa34ad045295d8d61cd8bd2ca96843aa6eed86f3dd73a817cc3dca0ff5975d477ff504a67c77bdb2d5eb26440e21cd6749beb65024a9312d420725f2f7b256687032748a16bfbe57e57621c906ae4307f8e7a20f65cb5ee5075bb68df8e2d101b5b824fb9c84a453add204d60c43a41ebfe7750bb63c83864adff4ca96645765ce27174e3a9d2181d4e1c068218432c148df34553f18104ac46dbdc1a84c7c62db0c0176c19937d94e135da3855f59ca756d8926daf4cacddcf586ea3904f85017e02c065000a56cdc3718c1fe19154e2561cc1b6ff96969e256131005ab758f01f73e2f40d90c401afcc8edff3948f733825081808c516bfbd9e5661fa11947f5f70515a667a578a7c7c01f020a3be035189e5587ea062ba0a847060be21062513c5e6e57454f30063a42dc57f355a341eee6f1c7ae936416a6057ccdf894dc0fc96c8fa7d30700ff38024e0af184d5a8330be28857722127f54c7190901698d66a483cff68e04d9ddcd21711b6f8a1516507031f483301b38b3c6c4e29c869e79ba1dcdd808382e31078e5ddf1c9d0986430094c76f7ab946695e442367af2303c2698e4a89d2067aa6d3e5d22046e562a8007e53237bb7066db9cf538223da50476751faa34dc89e78f8587e02d156c5908139ff5284a402de8cff1c8c62bbd32cd41c984841861fd0f3b5198bf3d02e92d8a2996ab9a9f505807902a68d1fdf2d0b5b5d585646ff2beb12bbf487e5b19d61968c9c10a151d7aaca329e1478885c14c88d50c3df8e3ad03586bb287056ad75a486e9cf0c1b97decdedea8d7b47a78c55e12fbdbf13e442a40e1dc709c2dbe7dd65ab6095a6d9b67c665073f0a55375e88513d8ef9e521e5e9d44a85765d6e25b0a770ac8b57dcd7ae7efe6896660b837adcfb18fce9df3a9e0b911228adfbd6861ebdc59a190360a8346a3a130cfe56c8fadeed11c62f9c92953e73d9e23b8c54338d948c1e2866113e33ca267b261c9c8995e58d753ce7e0a946e2151a002cb1a3307fac7eb225f9ef55fb3c739732b0b176fd3c00961a54249a1f0af187fc59d9df58862fbea777ce0b9a49046fef23516fe9adfcf3ed56e9f4ee3f8729bbba70935269e6dce7b6140f605e8720362a0e36ad312ddf78b5b86806b954913145f24efe841bf3b2becdeab47e338a182354beb7fd8a976d1627d5ec5a050c0951bf8ee7a5e6a453cb5a29d277a13354d58bd35dc12a8cad61f2553c47a8aacf489e7cde2730fb3dc7fa46abb1d4cbb56affd776e6ce2434cb042230578d57d3221e3111cef2569d3322e790db952da3a98d1facfdac671e623d0a026d2eff76be3b2c06e26e37c03cb92e14de221f3ae534812b716e354a1d19df852f3d7e3564cf9b4970c9e17b01b917f0992054bb030363dbe6aac052a5e62dea3250032ca78f1fa383ce8a1303fe5f866a0a99042d83696c1467a48d87d7ebba15fc045421a4773ea4723c47dfd265e10c735e35d3b90b8275fb3ab0f9025fe8883340047f86a2cb3bdc79ad6d0c6afad03ca3860cc481fdd2fb5dd345de98857ed1836e877d9f42f0bc86bddeb0229b86452b498f4a0d3662dceaf5a8deb7409a658d617a927c6b4ca3f2d2adfc966ef9a00000000000000"], 0x12f8}}], 0x2, 0x40800) 4.888309632s ago: executing program 3 (id=9713): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@gettclass={0x24, 0x2a, 0x100, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xfff1, 0xffe0}, {0x10, 0xfff4}, {0xe, 0xfff3}}, ["", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0xc0}, 0x4000) ioctl$FS_IOC_GETFSUUID(0xffffffffffffffff, 0x80111500, &(0x7f0000000140)) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r4, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000011) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x3a, 0x301, 0x70bd25, 0xfffffffc, {0x7}}, 0x14}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r5) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r6, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x808000, 0x4, 0x20300, 0xfc}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x3, 0x0, 0x0, 0x41000, 0x4b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r7 = socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000000c0)={@cgroup, 0xffffffffffffffff, 0x1c}, 0x20) bind$inet(r7, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, 0x0, 0x4000052) connect$inet(r7, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) sendmmsg$inet(r7, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x400000000000284, 0xf00) poll(&(0x7f0000000300)=[{r6, 0x80}], 0x1, 0x101) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@newtaction={0x64, 0x30, 0x1, 0x70bd2b, 0x25dfdbde, {}, [{0x50, 0x1, [@m_bpf={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x1}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x3, 0xef, 0x1, 0x8000, 0x2}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0xc044}, 0x4000814) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'veth1_macvtap\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x401, 0xfffffffc, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x31943}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1a, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000300000000000000fe02001085000000b700000095"], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x100, 0x32, '\x00', 0x0, @tracing=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) sendmsg$TIPC_NL_MON_SET(r0, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000340)={&(0x7f00000001c0)={0x164, r1, 0x100, 0x70bd28, 0x25dfdbff, {}, [@TIPC_NLA_MON={0x44, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xbd}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xffff4583}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4800000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xae9}]}, @TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x8000}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8}, @TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xfffffffa}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x16e}, @TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x81}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7ff}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6}, @TIPC_NLA_PUBL_UPPER={0x8}]}, @TIPC_NLA_LINK={0x9c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffc00}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x531b}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff8000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5db626ed}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xa5b}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xc394}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}]}]}, 0x164}, 0x1, 0x0, 0x0, 0x8080}, 0xc040) ioctl$XFS_IOC_GET_RESBLKS(r0, 0x80105873, &(0x7f0000000100)) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000040000100feffffffffdbdf25017c0000040042800c00018006000600800a000014000280100017800c0001"], 0x38}, 0x1, 0x0, 0x0, 0x48815}, 0x800c000) 4.416799808s ago: executing program 1 (id=9714): sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x8000) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4001, 0x1, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3e}, 0x1c) socket$packet(0x11, 0x2, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, 0xffffffffffffffff, &(0x7f0000000040)={0xa000000d}) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000200), 0x3) r5 = socket$can_bcm(0x1d, 0x2, 0x2) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)={0x58, r7, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @loopback=0xac1414aa}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @broadcast}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @remote}]}, 0x58}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r5, &(0x7f00000000c0)={0x1d, r8}, 0x10) sendmsg$can_bcm(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001bc0)={0x1, 0x840, 0x800, {0x0, 0x2710}, {0x77359400}, {}, 0x1, @canfd={{0x0, 0x1, 0x1, 0x1}, 0x3f, 0x2, 0x0, 0x0, "ce6012e198d4a275f30c7a76ced776bcb73cf581648acaac9095323d45aaeab306611856f61d95a65039b79566cc2195c364a614b8e4c12138a77d4bd62ca783"}}, 0x80}, 0x1, 0x0, 0x0, 0x48485}, 0x0) r9 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)=ANY=[@ANYBLOB="38000000180001002abd7000fcdbdf250a", @ANYRES32], 0x38}, 0x1, 0x0, 0x0, 0xcdb281c6bb69a510}, 0x4000) sendmmsg(r9, &(0x7f0000000000), 0x400000000000235, 0x0) sendmsg$netlink(r3, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB="340000001c00010029bd7000ffdbdf2507000000", @ANYRES32, @ANYRES64=r1], 0x34}, 0x1, 0x0, 0x0, 0x4040040}, 0x4044004) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00'}) r10 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_buf(r10, 0x0, 0x8008000000010, &(0x7f0000000280)="17000000020001000003d68c5ee17688a20032000000009afc5ad9485bbb6a880000d6c8db0000dba67e060180000a0000f10607bdff59100ac45761407a681f009cee4a5acb3da400001fb700674f19b44e09f9315033bf79ac2dff0601150039330100000000000300000000000000000009ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e0000000000000000000003eb7d4d9f53a3b6cf36e351cdf", 0xb8) r11 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) ioctl$sock_ifreq(r11, 0x8922, &(0x7f0000000080)={'dummy0\x00', @ifru_ivalue}) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="340000001c00010029bd7000ffdbdf2507000000", @ANYRESDEC=0x0], 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x4044084) r12 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r12, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) 3.772376772s ago: executing program 1 (id=9715): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000380)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0xffe0, 0xc}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x6, '\x00', 0x56, 0x15, 0x9, 0x7ff}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4004000}, 0x4000010) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, 0x0, 0x63) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0xf0b, 0x70bd29, 0x25dfdc00, {0x60, 0x0, 0x0, 0x0, {0xe, 0x3}, {0x7, 0x5}, {0x8, 0xfff2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_RAW={0x8, 0xc, 0x1}, @TCA_CAKE_WASH={0x8}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4045}, 0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c61"], 0x50}}, 0x4000000) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20000080) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="0202000311000000000000000000000005000500000000000a00000000000000fe8000000000000000000000000000bb000000000000000002000100000007000000000b00fffb000200090000000000000000000000000005000600000000000a00000000000000fe8800000000000000000000000000010000000000000000010018"], 0x88}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r5) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40000c0) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x4c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x20, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x7}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r7, &(0x7f0000000080)=ANY=[], 0x10448) 2.206222695s ago: executing program 1 (id=9716): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000fa0000000000000000010000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f00000001c0)=""/222, 0x41100, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff97}, 0x78) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='devices.list\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000500)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) getsockopt$netlink(r1, 0x10e, 0xb, 0x0, &(0x7f0000000080)) r2 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) bind$llc(r2, &(0x7f0000000140)={0x1a, 0x0, 0x0, 0xff, 0x2, 0x9}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000000), 0xffffff6a) sendfile(r2, r3, 0x0, 0xffffffff000) recvmmsg(r2, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)=""/146, 0x92}], 0x1}, 0x9}], 0x1, 0x2, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f00000001c0)=0x3) 2.10434058s ago: executing program 0 (id=9717): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x84, @broadcast, 0x4e21, 0x3, 'rr\x00', 0x1, 0x10000004, 0x8}, 0x2c) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000001c0)={'veth1_to_team\x00', &(0x7f0000002fc0)=@ethtool_wolinfo={0x3, 0x8, 0x4, "050000009582"}}) ioctl$sock_bt_hci(r1, 0x800448d7, &(0x7f0000000180)="06f2383120d07250e2bcb27ffe6c515f3b8ad273e0816ad73dcb23a931023f5bedcc4c171dbcd67c6439861d24e6c5c9afe5f3dcd8e46ec78c5cff2732bce40287e75290ab6416d38cd2fd9a52eae11d35d23bf2d99b7880d98e27b1282025dc05e4857a3b3cd32cf699c66b593050184db677f237b4004344a80b03ac60b8f10033633db87176bac38ce31391d9e9e6b8ccf2887740754a557e54737ff9138d04d35c68148aebd751243d9dd6f6797300c0f84135cab61005dcea7fd1eb8e6a9e589120238c3ffe93852593ebffe12c4f77770f1809f6fc2a01d44e9edb7b1c2a4ed86676") r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000001340)) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r5) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f00000003c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r7], 0x1c}}, 0x4008054) connect$pppl2tp(r2, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) bind$inet6(r3, &(0x7f0000000000)={0xa, 0xe22, 0x0, @rand_addr=' \x01\x00'}, 0x1c) syz_emit_ethernet(0x4c, &(0x7f00000000c0)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaa3486dd60910140001611fffe8000000700000000000000000000bbfe8000000000000000000000000000aa00000e2200169078929754c134439d5c1657b4f41970"], 0x0) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) shutdown(r8, 0x1) writev(r8, &(0x7f0000019880)=[{&(0x7f0000000400)="fb", 0x1}], 0x1) r9 = socket$kcm(0xa, 0x2, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$TIPC_CMD_SET_NETID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, 0x0, 0x4, 0x70bd28, 0x25dfdbfe, {{}, {}, {0x8, 0x2, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x8081}, 0x8040) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r10, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000008000000000018000380140003801000018004000300080001"], 0x44}}, 0x4000000) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="4c00000030e7aebc19125e3d1455d7a844b9dd48f4853c8e69cca2639b3987a8adeef381041a0feee0c2f98c22f42ec6547f8e841cefa2664f8b03a1aa51b97c500ec404aad647e0f82cb1b1b740b47cd08911f98472", @ANYRES16=r11, @ANYBLOB="0700000000000000000005000000180003800800040000000000080002000900000004000100180001801400020073797a5f74756e000000200000000000080005"], 0x4c}, 0x1, 0x0, 0x0, 0x41}, 0x28040011) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000100)={{0x84, @multicast2, 0x4e21, 0x3, 'none\x00', 0x23, 0x81, 0x5}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x4e23, 0x4, 0x0, 0x12d61, 0x12d58}}, 0x44) sendmsg$sock(r9, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e24, 0x0, @dev, 0xfffffeec}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 2.045192783s ago: executing program 1 (id=9718): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) getpeername$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000200)=0x14) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r1, 0x0) getsockopt$inet6_tcp_buf(r0, 0x6, 0xb, &(0x7f0000001240)=""/181, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r2, &(0x7f0000001300)=[{&(0x7f0000000180)=""/4096, 0x1000}, {&(0x7f0000001180)=""/163, 0xfeb2}], 0x2) write$cgroup_int(r3, &(0x7f0000000140), 0xfffffdef) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r4, &(0x7f0000000300)={0x0, 0xa1, &(0x7f0000000040)={&(0x7f00000005c0)={0x2c, r5, 0x705, 0x70bd2b, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40008d0}, 0x0) sendmsg$ETHTOOL_MSG_EEE_GET(0xffffffffffffffff, 0x0, 0x4004004) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r7, 0x89e1, &(0x7f0000000580)={r7}) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="980000001000010027bd7000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="24040100000000001400030076657468315f746f5f626f6e6400000014001680100001800c000300"], 0x98}, 0x1, 0x0, 0x0, 0x801}, 0x60000090) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r10 = syz_init_net_socket$llc(0x1a, 0x802, 0x0) bind$llc(r10, &(0x7f0000000000)={0x1a, 0x0, 0x1, 0x3, 0x3, 0x4a}, 0x10) sendmsg$NL80211_CMD_SET_INTERFACE(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32, @ANYBLOB="08c80d0000000000"], 0x24}, 0x1, 0x0, 0x0, 0x408d1}, 0x0) r11 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r11, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) socket$nl_route(0x10, 0x3, 0x0) close(0x4) close(r1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 1.917231942s ago: executing program 3 (id=9719): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$sock_int(r0, 0x1, 0x2b, 0x0, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x6, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000e50000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket(0x40000000015, 0x5, 0x0) connect$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r3, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r3, 0x1, 0x21, &(0x7f0000000000), 0x4) ioctl$sock_bt_bnep_BNEPCONNDEL(r2, 0x400442c9, &(0x7f0000000080)={0x1ff, @broadcast}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001480)={0x14, 0x15, 0x1, 0x0, 0x0, {0xa}}, 0x14}}, 0x4000812) r5 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_int(r5, 0x0, 0x22, 0x0, &(0x7f0000000740)) bind$inet(r3, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000d00)="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", 0x3f1}, {&(0x7f00000004c0)="128b9306006d4810e5ac5040ad9201847839fc378469d5765b9cc241840896c1498194a7197b45d74a8532b82037b02c9e6045c361eb2d94ae3ac4cb94c12da07d3bceae3a03adc690049e5ac1ec24deaba6fb08f165386aff710d042de332fc1062b0e9306ea7639c0e30d94ceaf76afb36ec8e373ae26899025043ab655ec699608b7e8d844ae5774ca70584a7e9e7", 0x90}], 0x2, 0x0, 0x0, 0x10}, 0x0) setsockopt$RDS_CONG_MONITOR(r3, 0x114, 0x6, &(0x7f0000000680)=0x1, 0x4) socket$rds(0x15, 0x5, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="10000000040000000400000001"], 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000003c0)={r6, &(0x7f0000000340), 0x0}, 0x20) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f00000033c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_EEE_GET(r7, &(0x7f0000003800)={0x0, 0x0, &(0x7f00000037c0)={&(0x7f0000003680)={0x14, r8, 0x1, 0x70bd29, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x400c000}, 0x4) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000480)={'ip6tnl0\x00', &(0x7f0000000400)={'ip6gre0\x00', 0x0, 0x2f, 0x3, 0xff, 0x3, 0x0, @mcast1, @private2, 0x6, 0x7800, 0x7, 0x8}}) sendmsg$ETHTOOL_MSG_FEATURES_SET(r2, &(0x7f0000002780)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000002740)={&(0x7f00000014c0)={0x1244, r8, 0x200, 0x70bd27, 0x25dfdbff, {}, [@ETHTOOL_A_FEATURES_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0x1210, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x54, 0x3, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, ']\xb0\\*-\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x80000000}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '}).\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '/^%\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '\xff\xff\xff\xff\xff\xff'}]}]}, @ETHTOOL_A_BITSET_VALUE={0x1004, 0x4, "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"}, @ETHTOOL_A_BITSET_MASK={0x60, 0x5, "4ac50f80dce4093bdbea0f4e5c9918f8937a198b1b22c0210da7c14e69037a548e4e394b97a6f85186f39b67bdf3e63b709337de17b6e7757b1c5f98232bd930feaae8c82f070498664a3d71e0f9f4484d0829125c018fac5a3a66ac"}, @ETHTOOL_A_BITSET_MASK={0x92, 0x5, "a658ee96e586c03283a44a85b64d0e37c203a475764f68a597c9c185a9e81c82b332cbb8ba5d1c230f03e0d957326552ea7d801bac127a2921871940caccba437528554e84dfe8f87aeac57e9f76054873a90b2b5b7f77e2a70b456615850b3deaaede0d52d65eab39d2ee165202593c9318be31ed5911d59b6b652a67e051c66d6a8d5a975cb69e914324f593ae"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x34, 0x3, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '\xff\xff\xff\xff\xff\xff'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_BITS={0x88, 0x3, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffff0}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'GPL\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x101}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}]}]}]}]}, 0x1244}, 0x1, 0x0, 0x0, 0xc010}, 0x24008051) sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x40) 1.264559155s ago: executing program 2 (id=9720): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x1c0, 0x111, 0x4b4, 0x0, 0xd4feffff, 0x290, 0x20a, 0x278, 0x290, 0x278, 0x3, 0x0, {[{{@ipv6={@empty, @loopback, [0xffffffff, 0xffffff00, 0x0, 0xffffff00], [0x0, 0xffffff00], 'ip_vti0\x00', 'batadv0\x00', {0xff}, {}, 0x6, 0xfe, 0x1}, 0x0, 0x198, 0x1c0, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0xc0, 0x2, 0xb}}, @common=@unspec=@string={{0xc0}, {0x0, 0xfffd, 'bm\x00', "6d93eb04697dfa39de04767f46614613a407abbf4ed2e83a63b484dbb3bf6b2a850e79009e2905d2f98ba19f91f3c9faee6d3686e9bee067f4e77d9ad66238750c4100d7ee97ec7646259d90edece6e9787a97bc956c01754c34c5c9518c46178ed5f9194454980e579c80eca35a58dc47d1d5e4ff6e216c724e88c702448587", 0x27}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x2}}}, {{@ipv6={@loopback, @mcast2, [0x0, 0xffffff00, 0xffff00], [], 'veth1_to_hsr\x00', 'pim6reg1\x00', {}, {}, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xa8, 0xd0, 0x1c0}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0xa3, 0x7, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) 1.130619428s ago: executing program 2 (id=9721): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) close(r0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000180)={0x2, &(0x7f0000000040)=[{0x20, 0x4, 0x0, 0xffdff036}, {0x6, 0x0, 0x0, 0x2}]}) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000000)={0x0, &(0x7f0000000040)}) ioctl$TUNGETVNETLE(r0, 0x40107447, &(0x7f0000000180)) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r2, 0x4004743d, 0x110e22fff6) write$cgroup_type(r2, &(0x7f0000000280), 0x9) 396.184388ms ago: executing program 4 (id=9722): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000fa0000000000000000010000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f00000001c0)=""/222, 0x41100, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff97}, 0x78) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='devices.list\x00', 0x275a, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x90, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r1, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x27}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffff20, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0x9, 0x0, 0x6, 0x0, 0x18, {[@window={0x9, 0x3}, @timestamp={0x5, 0xa, 0xffffff07, 0x11}]}}}}}}, 0x46) write$cgroup_subtree(r0, &(0x7f0000000500)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r6 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32=r5, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYRES16=r6, @ANYRES32=r6], 0x44}, 0x1, 0x0, 0x0, 0x4000041}, 0x2000800) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000300)={0x0, 0xffffffff}, &(0x7f0000000340)=0x8) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r6, 0x84, 0x13, &(0x7f0000000380)={r7, 0x7}, &(0x7f00000003c0)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000140)={0x0, @in6={{0xa, 0x4e24, 0x800, @empty, 0x9}}, 0x7, 0xfe00, 0x2, 0x3, 0x54, 0xe, 0xf9}, &(0x7f0000000000)=0x9c) 0s ago: executing program 2 (id=9723): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$PPPIOCSMAXCID(0xffffffffffffffff, 0x40047451, &(0x7f0000000000)=0x5) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpuacct.usage_all\x00', 0x0, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x20, 0x6, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0x3}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x1}, @NFT_OBJECT_CT_HELPER=@NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}}, 0x4885) sendmsg$IPSET_CMD_DEL(r2, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x84, 0xa, 0x6, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_LINENO={0x8}, @IPSET_ATTR_ADT={0x54, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR={0x5, 0x3, 0x95}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e21}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR2={0x5, 0x15, 0x8}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2401}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBMARK={0xc}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_NAMEREF={0x9, 0x13, 'syz2\x00'}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x84}, 0x1, 0x0, 0x0, 0x8001}, 0x4040) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000380), r2) sendmsg$DEVLINK_CMD_SB_POOL_SET(r2, &(0x7f00000005c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000580)={&(0x7f00000003c0)={0x188, r3, 0x2, 0x70bd29, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x5}, {0x6, 0x11, 0x7a2}, {0x8, 0x13, 0xe}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x7fffffff}, {0x6, 0x11, 0x1ff}, {0x8, 0x13, 0xa}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xde48}, {0x6, 0x11, 0x1000}, {0x8, 0x13, 0x1}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x8}, {0x6, 0x11, 0xbd2}, {0x8}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x101}, {0x6, 0x11, 0xfff9}, {0x8, 0x13, 0x5}, {0x5, 0x14, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x2}, {0x6, 0x11, 0x1}, {0x8, 0x13, 0x1e5}, {0x5}}]}, 0x188}}, 0x814) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000640), r2) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000700)={'gretap0\x00', &(0x7f0000000680)={'syztnl0\x00', 0x0, 0x7, 0x1, 0x9, 0x7, {{0x18, 0x4, 0x0, 0x28, 0x60, 0x68, 0x0, 0x1, 0x29, 0x0, @rand_addr=0x64010102, @rand_addr=0x64010100, {[@end, @lsrr={0x83, 0x23, 0xfc, [@initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, @remote, @rand_addr=0x64010100, @local, @broadcast]}, @noop, @generic={0x82, 0xd, "7f51151879ad0daac34b9c"}, @ra={0x94, 0x4}, @end, @lsrr={0x83, 0x13, 0x3, [@dev={0xac, 0x14, 0x14, 0x13}, @loopback, @rand_addr=0x64010102, @multicast2]}]}}}}}) getsockopt$inet_mreqn(r2, 0x0, 0x24, &(0x7f0000000740)={@local, @private, 0x0}, &(0x7f0000000780)=0xc) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000840)={'ip6gre0\x00', &(0x7f00000007c0)={'syztnl0\x00', 0x0, 0x2f, 0x8, 0x3, 0x1, 0x5d, @loopback, @mcast1, 0x80, 0x8, 0x9, 0x200}}) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000980)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000940)={&(0x7f0000000880)={0xac, r4, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0x4}, @ETHTOOL_A_LINKMODES_HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_LINKMODES_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0xac}, 0x1, 0x0, 0x0, 0x40080}, 0x1) ioctl$OCFS2_IOC_RESVSP(r0, 0x40305828, &(0x7f00000009c0)={0x0, 0x0, 0x1, 0x1fd2, 0x3, 0xc90}) sendto(r2, &(0x7f0000000a00)="58ebfa1a430b3c5d482db24feec2dbb1933562c5e8f548b267f3842585ea4c0792d430dd5af06eb5d3ab2c676dd0b02b112efe2b98daf2c7ede262a3168a90adafca386411ffb9c0c94346a665195d4270da4f2021bda7c8c7bd9ba653214dcb78e6dcd79ebe417bee5493f3d898fbf02a7908", 0x73, 0x48194, &(0x7f0000000a80)=@xdp={0x2c, 0x8, r7, 0x1e}, 0x80) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f0000000c00)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b40)={0x7c, 0x3, 0x6, 0x301, 0x0, 0x0, {0x1, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x7c}, 0x1, 0x0, 0x0, 0x8000}, 0x1) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000c80), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000d40)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x30, r8, 0x1, 0x70bd2b, 0x25dfdbfc, {{}, {}, {0x14, 0x19, {0x1, 0x7fff, 0x43, 0x400}}}, ["", "", "", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$gtp(&(0x7f0000000dc0), r2) sendmsg$GTP_CMD_DELPDP(r9, &(0x7f0000000e80)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000e00)={0x3c, r10, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@GTPA_NET_NS_FD={0x8, 0x7, r0}, @GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_FLOW={0x6, 0x6, 0x1}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20044840) socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$PPPIOCSFLAGS1(r2, 0x40047459, &(0x7f0000000ec0)=0x2000080) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r2, 0x84, 0x74, &(0x7f0000000f00)=""/110, &(0x7f0000000f80)=0x6e) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000001040)=@nat={'nat\x00', 0x1b, 0x5, 0x530, 0x0, 0xd0, 0xffffffff, 0x3f0, 0xd0, 0x498, 0x498, 0xffffffff, 0x498, 0x498, 0x5, &(0x7f0000000fc0), {[{{@ip={@rand_addr=0x64010101, @remote, 0xffffff00, 0x0, 'wg0\x00', 'pimreg1\x00', {}, {}, 0x6, 0x2, 0x1}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@icmp={{0x28}, {0xe, "05c9"}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x4, @local, @local, @gre_key, @icmp_id=0x67}}}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x38}, @private=0xa010100, 0xff000000, 0xffffffff, 'netpci0\x00', 'syz_tun\x00', {0xff}, {}, 0x5c, 0x1, 0x20}, 0x0, 0xe8, 0x130, 0x0, {}, [@common=@unspec=@cgroup0={{0x28}, {0x8, 0x1}}, @common=@inet=@set4={{0x50}, {{0x4, 0x3, 0x4}, {{0xf}}, {{0x9}, 0x1}, 0x5}}]}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x4, @ipv4=@multicast1, @ipv4=@multicast2, @icmp_id=0x66, @icmp_id=0x65}}}, {{@ip={@rand_addr=0x64010101, @loopback, 0xffffff00, 0xff000000, 'lo\x00', 'veth1_to_hsr\x00', {0xff}, {0xff}, 0x4, 0x1, 0x34}, 0x0, 0x1b8, 0x1f0, 0x0, {}, [@common=@inet=@sctp={{0x148}, {[0xf, 0x4e21], [0x4e22, 0x4e22], [0x8000, 0x7, 0x4, 0x7, 0x4, 0x4, 0xdd27, 0x2, 0x9, 0x7, 0x1000, 0xd77, 0x3, 0x3, 0x1, 0x3, 0x8, 0x1000, 0x3, 0x5, 0x0, 0x8, 0x6d, 0x2, 0xad9, 0x80000001, 0x4, 0x0, 0xfff, 0x3, 0x6, 0x5, 0x7f, 0x9, 0x5, 0x4, 0x10001, 0x10, 0xdd8, 0x8, 0x7, 0x9, 0x6, 0x10001, 0xd, 0x40, 0x1, 0xe, 0x5, 0x0, 0x6bb, 0x9, 0x4, 0x52, 0x0, 0x820f, 0x2, 0x9, 0xc963, 0x7, 0xff, 0x7, 0x4, 0xfffff801], 0x5, [{0x4, 0x8, 0x81}, {0x4, 0x5, 0x5}, {0x2, 0x8d, 0x3}, {0x8, 0x97, 0xfa}], 0x1, 0x2, 0x2}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0xa, @multicast1, @rand_addr=0x64010102, @icmp_id=0x65, @port=0x4e23}}}}, {{@ip={@local, @loopback, 0xff000000, 0xff, 'bridge0\x00', 'veth0_to_hsr\x00', {0xff}, {0xff}, 0x6c, 0x3, 0x52}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x8, @remote, @dev={0xac, 0x14, 0x14, 0xa}, @gre_key=0xf, @icmp_id=0x64}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x590) r11 = syz_genetlink_get_family_id$gtp(&(0x7f0000001640), r9) sendmsg$GTP_CMD_GETPDP(r9, &(0x7f0000001700)={&(0x7f0000001600)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000016c0)={&(0x7f0000001680)={0x30, r11, 0x2, 0x70bd27, 0x25dfdbfb, {}, [@GTPA_NET_NS_FD={0x8, 0x7, r2}, @GTPA_PEER_ADDR6={0x14, 0xb, @dev={0xfe, 0x80, '\x00', 0x37}}]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x800) r12 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_TTY(r12, &(0x7f0000001880)={&(0x7f0000001740)={0x10, 0x0, 0x0, 0x677cfd84761883fa}, 0xc, &(0x7f0000001840)={&(0x7f0000001780)={0x84, 0x464, 0x400, 0x70bd2a, 0x25dfdbfb, "2fe7423e9479e8e8bcc93017c12e35de09d80acdf125deffb36ee08fe27f6b256eb251e139d42f9fa7c5382c007871a4343e1e1a3ebfa72913588cecc2aa389d695ac255a46d602cb461df9373c783349d2a3b9595180a404a9683c4efb9f1b677a88ecc9ba38ab1e9f0c4d8ed92f6c1c8", ["", "", "", "", "", "", ""]}, 0x84}, 0x1, 0x0, 0x0, 0x1}, 0x4004081) ioctl$XFS_IOC_ERROR_INJECTION(r12, 0x40085874, &(0x7f00000018c0)={r1, 0xf6}) kernel console output (not intermixed with test programs): rsing attributes in process `syz.1.8566'. [ 1032.415888][ T3086] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8566'. [ 1032.445093][ T3087] netlink: 'syz.2.8567': attribute type 1 has an invalid length. [ 1032.465016][ T3087] netlink: 'syz.2.8567': attribute type 3 has an invalid length. [ 1032.495586][ T3087] netlink: 224 bytes leftover after parsing attributes in process `syz.2.8567'. [ 1032.624395][ T3087] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8567'. [ 1033.247894][ T3113] IPVS: rr: FWM 3 0x00000003 - no destination available [ 1033.337661][ T3114] sch_fq: defrate 4294967293 ignored. [ 1034.921385][ T3143] netlink: 68 bytes leftover after parsing attributes in process `syz.3.8579'. [ 1035.077014][ T3145] netlink: 'syz.3.8580': attribute type 1 has an invalid length. [ 1035.085156][ T3145] netlink: 'syz.3.8580': attribute type 3 has an invalid length. [ 1035.093863][ T3145] netlink: 224 bytes leftover after parsing attributes in process `syz.3.8580'. [ 1035.106701][ T3145] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8580'. [ 1036.034029][ T3103] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1036.641196][ T3170] sctp: [Deprecated]: syz.4.8588 (pid 3170) Use of int in maxseg socket option. [ 1036.641196][ T3170] Use struct sctp_assoc_value instead [ 1037.289929][ T3188] netlink: 'syz.0.8597': attribute type 12 has an invalid length. [ 1037.378334][ T3194] netlink: 'syz.1.8599': attribute type 12 has an invalid length. [ 1037.784752][ T3207] tipc: Enabling of bearer rejected, already enabled [ 1037.927316][ T3207] netlink: 32 bytes leftover after parsing attributes in process `syz.0.8603'. [ 1038.332000][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1038.524569][ T3239] xt_cgroup: xt_cgroup: no path or classid specified [ 1038.639507][ T3241] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8611'. [ 1038.679912][ T3241] openvswitch: netlink: Message has 2 unknown bytes. [ 1038.762494][ T3246] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8612'. [ 1038.786080][ T3246] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8612'. [ 1038.902512][ T3253] netlink: 'syz.3.8612': attribute type 1 has an invalid length. [ 1039.093311][ T3257] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8613'. [ 1039.618513][ T3260] sch_tbf: burst 88 is lower than device veth25 mtu (1514) ! [ 1039.642524][ T3274] netlink: 36 bytes leftover after parsing attributes in process `syz.0.8618'. [ 1039.797270][ T3275] netlink: 'syz.2.8619': attribute type 4 has an invalid length. [ 1039.807764][ T3273] veth0_to_team: entered promiscuous mode [ 1039.871045][ T3273] veth0_to_team: left promiscuous mode [ 1039.893233][ T3280] netlink: 'syz.2.8619': attribute type 4 has an invalid length. [ 1040.234902][ T3286] xt_cgroup: xt_cgroup: no path or classid specified [ 1040.371509][ T3292] netlink: 256 bytes leftover after parsing attributes in process `syz.1.8626'. [ 1040.395323][ T3294] macvlan1: entered allmulticast mode [ 1040.422908][ T3294] A link change request failed with some changes committed already. Interface macvlan1 may have been left with an inconsistent configuration, please check. [ 1040.899417][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1041.144974][ T3313] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8633'. [ 1041.239746][ T3312] netlink: 'syz.4.8634': attribute type 1 has an invalid length. [ 1041.280014][ T3312] netlink: 'syz.4.8634': attribute type 3 has an invalid length. [ 1041.318639][ T3312] netlink: 224 bytes leftover after parsing attributes in process `syz.4.8634'. [ 1041.373623][ T3317] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8634'. [ 1041.436464][ T3321] xt_cgroup: xt_cgroup: no path or classid specified [ 1041.809619][ T3330] tipc: Can't bind to reserved service type 3 [ 1041.939376][ T3332] tipc: New replicast peer: 255.255.255.255 [ 1041.971885][ T3332] tipc: Enabled bearer , priority 10 [ 1042.152151][ T3332] 5Ò: entered promiscuous mode [ 1042.691479][ T3353] netlink: 'syz.2.8650': attribute type 1 has an invalid length. [ 1042.718076][ T3353] netlink: 'syz.2.8650': attribute type 3 has an invalid length. [ 1043.099792][ T3370] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1043.164127][ T3368] __nla_validate_parse: 2 callbacks suppressed [ 1043.164164][ T3368] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8655'. [ 1043.171147][ T3369] syzkaller0: entered promiscuous mode [ 1043.171170][ T3369] syzkaller0: entered allmulticast mode [ 1044.038058][ T3387] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1044.152002][ T3385] tc action pedit 'at' offset 9 out of bounds [ 1044.420917][ T3389] xt_cgroup: xt_cgroup: no path or classid specified [ 1044.595405][ T3396] netlink: 14 bytes leftover after parsing attributes in process `syz.1.8665'. [ 1044.632517][ T3396] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1044.672672][ T3397] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1044.711521][ T3396] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1044.766109][ T3396] bond0 (unregistering): Released all slaves [ 1044.864010][ T3380] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1045.176121][ T3411] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8670'. [ 1045.206748][ T3414] netlink: 'syz.1.8671': attribute type 2 has an invalid length. [ 1045.235084][ T3414] netlink: 'syz.1.8671': attribute type 11 has an invalid length. [ 1045.264448][ T3414] netlink: 132 bytes leftover after parsing attributes in process `syz.1.8671'. [ 1045.692298][ T3422] syzkaller0: entered promiscuous mode [ 1045.715038][ T3422] syzkaller0: entered allmulticast mode [ 1045.759085][ T3429] 0: reclassify loop, rule prio 0, protocol 800 [ 1045.868475][ T3431] xt_cgroup: xt_cgroup: no path or classid specified [ 1046.452483][ T3437] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8678'. [ 1047.147274][ T3459] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8684'. [ 1047.174065][ T3465] IPVS: set_ctl: invalid protocol: 60 172.30.1.1:20000 [ 1047.346071][ T3472] xt_cgroup: xt_cgroup: no path or classid specified [ 1047.897019][ T3488] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1048.580477][ C1] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 1049.053917][ T4946] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1049.072995][ T4946] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1049.082729][ T4946] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1049.095347][ T4946] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1049.106092][ T4946] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1049.779910][ T3530] xt_cgroup: xt_cgroup: no path or classid specified [ 1050.496586][ T3549] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8710'. [ 1050.663440][ T3549] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1050.739505][ T3553] macvlan3: entered promiscuous mode [ 1050.778145][ T3553] bond0: entered promiscuous mode [ 1050.829416][ T3553] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 1050.888635][ T3553] team0: Port device macvlan3 added [ 1051.212243][ T4946] Bluetooth: hci4: command tx timeout [ 1051.487285][ T3566] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8715'. [ 1051.793150][ T3579] xt_nat: multiple ranges no longer supported [ 1051.939746][ T3585] netlink: 68 bytes leftover after parsing attributes in process `syz.1.8720'. [ 1052.271807][ T3590] netlink: 'syz.2.8721': attribute type 1 has an invalid length. [ 1052.300743][ T3590] netlink: 'syz.2.8721': attribute type 3 has an invalid length. [ 1052.314112][ T3508] bridge0: port 1(bridge_slave_0) entered blocking state [ 1052.322360][ T3508] bridge0: port 1(bridge_slave_0) entered disabled state [ 1052.337450][ T3508] bridge_slave_0: entered allmulticast mode [ 1052.340854][ T3590] netlink: 224 bytes leftover after parsing attributes in process `syz.2.8721'. [ 1052.376173][ T3590] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8721'. [ 1052.402341][ T3508] bridge_slave_0: entered promiscuous mode [ 1052.432926][ T3508] bridge0: port 2(bridge_slave_1) entered blocking state [ 1052.442511][ T3508] bridge0: port 2(bridge_slave_1) entered disabled state [ 1052.451827][ T3508] bridge_slave_1: entered allmulticast mode [ 1052.467076][ T3508] bridge_slave_1: entered promiscuous mode [ 1052.602998][ T3508] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1052.652321][ T3508] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1052.874255][ T3605] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8725'. [ 1052.883841][ T3605] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8725'. [ 1052.910534][ T3508] team0: Port device team_slave_0 added [ 1052.941932][ T3508] team0: Port device team_slave_1 added [ 1053.104553][ T3508] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1053.112682][ T3508] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1053.160176][ T3508] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1053.214691][ T3508] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1053.235311][ T3508] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1053.302621][ T4946] Bluetooth: hci4: command tx timeout [ 1053.323744][ T3508] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1053.558604][ T3508] hsr_slave_0: entered promiscuous mode [ 1053.566821][ T3508] hsr_slave_1: entered promiscuous mode [ 1053.575354][ T3508] debugfs: 'hsr0' already exists in 'hsr' [ 1053.582688][ T3508] Cannot create hsr debugfs directory [ 1053.609498][ T3618] xt_TCPMSS: Only works on TCP SYN packets [ 1054.055815][ T3631] netlink: 68 bytes leftover after parsing attributes in process `syz.0.8731'. [ 1054.181981][ T3633] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8732'. [ 1054.215442][ T3635] xt_cgroup: xt_cgroup: no path or classid specified [ 1054.453956][ T3637] netlink: 'syz.1.8735': attribute type 1 has an invalid length. [ 1054.625689][ T3639] netlink: 'syz.0.8734': attribute type 1 has an invalid length. [ 1054.682682][ T3639] netlink: 'syz.0.8734': attribute type 3 has an invalid length. [ 1054.714246][ T3639] netlink: 224 bytes leftover after parsing attributes in process `syz.0.8734'. [ 1054.822667][ T3641] bond7: (slave dummy0): making interface the new active one [ 1054.926866][ T3641] bond7: (slave dummy0): Enslaving as an active interface with an up link [ 1054.958136][ T3644] bond7: entered promiscuous mode [ 1054.982758][ T3644] dummy0: entered promiscuous mode [ 1055.381977][ T4946] Bluetooth: hci4: command tx timeout [ 1055.587330][ T3649] bridge0: port 2(bridge_slave_1) entered disabled state [ 1055.598170][ T3649] bridge0: port 1(bridge_slave_0) entered disabled state [ 1055.855253][ T3649] bond7: (slave dummy0): Releasing active interface [ 1055.873466][ T3649] dummy0: left promiscuous mode [ 1056.198798][ T3649] bridge_slave_0: left allmulticast mode [ 1056.223391][ T3649] bridge_slave_0: left promiscuous mode [ 1056.240588][ T3649] bridge0: port 1(bridge_slave_0) entered disabled state [ 1056.249508][ T3668] FAULT_INJECTION: forcing a failure. [ 1056.249508][ T3668] name failslab, interval 1, probability 0, space 0, times 0 [ 1056.272142][ T3668] CPU: 1 UID: 0 PID: 3668 Comm: syz.3.8743 Not tainted syzkaller #0 PREEMPT(full) [ 1056.272172][ T3668] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1056.272186][ T3668] Call Trace: [ 1056.272195][ T3668] [ 1056.272205][ T3668] dump_stack_lvl+0xe8/0x150 [ 1056.272234][ T3668] should_fail_ex+0x40c/0x560 [ 1056.272274][ T3668] should_failslab+0xa8/0x100 [ 1056.272298][ T3668] kmem_cache_alloc_node_noprof+0x8f/0x680 [ 1056.272328][ T3668] ? __alloc_skb+0x189/0x7a0 [ 1056.272370][ T3668] ? __alloc_skb+0x1d7/0x7a0 [ 1056.272397][ T3668] ? __local_bh_enable_ip+0xd0/0x130 [ 1056.272423][ T3668] __alloc_skb+0x1d7/0x7a0 [ 1056.272456][ T3668] netlink_sendmsg+0x5d4/0xb40 [ 1056.272488][ T3668] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1056.272513][ T3668] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1056.272545][ T3668] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1056.272571][ T3668] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1056.272593][ T3668] ____sys_sendmsg+0x9b9/0xa20 [ 1056.272614][ T3668] ? __might_fault+0xaf/0x130 [ 1056.272644][ T3668] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1056.272673][ T3668] ? import_iovec+0x73/0xa0 [ 1056.272699][ T3668] ___sys_sendmsg+0x2a5/0x360 [ 1056.272718][ T3668] ? __lock_acquire+0x683/0x2cd0 [ 1056.272743][ T3668] ? __pfx____sys_sendmsg+0x10/0x10 [ 1056.272797][ T3668] ? __fget_files+0x2a/0x420 [ 1056.272821][ T3668] ? __fget_files+0x3a2/0x420 [ 1056.272855][ T3668] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1056.272880][ T3668] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1056.272912][ T3668] ? __pfx_ksys_write+0x10/0x10 [ 1056.272958][ T3668] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1056.272981][ T3668] do_syscall_64+0x174/0x580 [ 1056.273004][ T3668] ? trace_irq_disable+0x3b/0x140 [ 1056.273033][ T3668] ? clear_bhb_loop+0x40/0x90 [ 1056.273059][ T3668] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1056.273079][ T3668] RIP: 0033:0x7fe59959ce59 [ 1056.273099][ T3668] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1056.273117][ T3668] RSP: 002b:00007fe59a42e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1056.273139][ T3668] RAX: ffffffffffffffda RBX: 00007fe599815fa0 RCX: 00007fe59959ce59 [ 1056.273153][ T3668] RDX: 0000000020004000 RSI: 0000200000000540 RDI: 0000000000000003 [ 1056.273167][ T3668] RBP: 00007fe59a42e090 R08: 0000000000000000 R09: 0000000000000000 [ 1056.273180][ T3668] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1056.273192][ T3668] R13: 00007fe599816038 R14: 00007fe599815fa0 R15: 00007ffca622e848 [ 1056.273225][ T3668] [ 1056.594547][ T3649] bridge_slave_1: left allmulticast mode [ 1056.611594][ T3649] bridge_slave_1: left promiscuous mode [ 1056.624728][ T3649] bridge0: port 2(bridge_slave_1) entered disabled state [ 1056.680406][ T3670] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1056.722494][ T3649] team0: Port device team_slave_1 removed [ 1056.731945][ T3649] batman_adv: 60ªX¹¦À: Interface deactivated: batadv_slave_0 [ 1056.756227][ T3649] batman_adv: 60ªX¹¦À: Removing interface: batadv_slave_0 [ 1056.790699][ T3649] batman_adv: 60ªX¹¦À: Interface deactivated: batadv_slave_1 [ 1056.810090][ T3649] batman_adv: 60ªX¹¦À: Removing interface: batadv_slave_1 [ 1056.861949][ T3649] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1056.928583][ T3508] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1056.940388][ T3508] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1056.958620][ T3636] bond7: left promiscuous mode [ 1057.077810][ T3672] netlink: 'syz.0.8745': attribute type 1 has an invalid length. [ 1057.128159][ T3672] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1057.147099][ T3675] __nla_validate_parse: 1 callbacks suppressed [ 1057.147120][ T3675] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8746'. [ 1057.166213][ T3675] netlink: 1 bytes leftover after parsing attributes in process `syz.2.8746'. [ 1057.197570][ T3672] bond9: (slave veth19): Enslaving as a backup interface with a down link [ 1057.299440][ T3680] netlink: 'syz.1.8748': attribute type 1 has an invalid length. [ 1057.313984][ T3508] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1057.324882][ T3680] netlink: 'syz.1.8748': attribute type 3 has an invalid length. [ 1057.334048][ T3508] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1057.345636][ T3680] netlink: 224 bytes leftover after parsing attributes in process `syz.1.8748'. [ 1057.362267][ T3680] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8748'. [ 1057.388944][ T3672] batman_adv: batadv0: Removing interface: dummy0 [ 1057.401557][ T3672] bond9: (slave dummy0): Enslaving as a backup interface with an up link [ 1057.411268][ T3683] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8749'. [ 1057.460029][ T5635] Bluetooth: hci4: command tx timeout [ 1057.482950][ T3686] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8749'. [ 1057.577338][ T3508] bond0: (slave netdevsim1): Releasing backup interface [ 1057.589630][ T1108] bond9: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 1057.607961][ T3690] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8749'. [ 1057.658075][ T3508] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1057.689392][ T3508] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1057.740315][T30908] bond9: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 1057.800626][ T3700] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8753'. [ 1057.865648][ T3700] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1057.924421][ T3694] syzkaller1: entered promiscuous mode [ 1057.938154][ T3694] syzkaller1: entered allmulticast mode [ 1057.954874][ T3700] bond7: (slave batadv1): Opening slave failed [ 1057.999184][ T3508] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1058.016957][ T3508] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1058.036745][ T3692] syzkaller0: entered promiscuous mode [ 1058.042281][ T3692] syzkaller0: entered allmulticast mode [ 1058.459448][ T3508] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1058.471885][ T3508] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1058.480713][ T3508] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1058.492525][ T3508] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1058.502339][ T3508] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1058.513474][ T3508] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1058.521717][ T3508] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1058.531838][ T3508] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1058.612012][ T3508] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1058.632244][ T3508] 8021q: adding VLAN 0 to HW filter on device team0 [ 1058.644836][ T116] bridge0: port 1(bridge_slave_0) entered blocking state [ 1058.651951][ T116] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1058.714825][ T6296] bridge0: port 2(bridge_slave_1) entered blocking state [ 1058.722014][ T6296] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1059.063923][ T3732] netlink: 36 bytes leftover after parsing attributes in process `syz.3.8756'. [ 1059.072934][ T3732] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8756'. [ 1059.501264][ T3746] netlink: 'syz.0.8759': attribute type 1 has an invalid length. [ 1059.525326][ T3508] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1060.038934][ T3769] netlink: 'syz.0.8767': attribute type 3 has an invalid length. [ 1060.046810][ T3769] netlink: 'syz.0.8767': attribute type 1 has an invalid length. [ 1060.059631][ T3769] NCSI netlink: No device for ifindex 0 [ 1060.202603][ T3508] veth0_vlan: entered promiscuous mode [ 1060.223301][ T3508] veth1_vlan: entered promiscuous mode [ 1060.304842][ T3508] veth0_macvtap: entered promiscuous mode [ 1060.316765][ T3508] veth1_macvtap: entered promiscuous mode [ 1060.361073][ T3508] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1060.407543][ T3508] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1060.500042][ T1108] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1060.654691][ T1108] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1060.663526][ T1108] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1060.823518][ T1108] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1061.040718][ T6296] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1061.072650][ T6296] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1061.148799][ T3804] netlink: 'syz.1.8776': attribute type 1 has an invalid length. [ 1061.198684][ T6300] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1061.207284][ T6300] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1061.326030][ T3816] openvswitch: netlink: Unexpected mask (mask=201040, allowed=10048) [ 1061.778065][ T3837] xt_cgroup: xt_cgroup: no path or classid specified [ 1061.788975][ T3838] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1061.990052][ T3847] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1062.271640][ T3861] __nla_validate_parse: 15 callbacks suppressed [ 1062.271661][ T3861] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8792'. [ 1062.334913][ T3861] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8792'. [ 1062.441571][ T3861] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8792'. [ 1062.634843][ T3878] netlink: 208240 bytes leftover after parsing attributes in process `syz.3.8797'. [ 1062.879613][ T3887] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1062.952923][ T3890] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8801'. [ 1062.978781][ T3890] syz_tun: entered promiscuous mode [ 1062.984271][ T3890] syz_tun: entered allmulticast mode [ 1062.997527][ T3890] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8801'. [ 1063.039677][ T3892] syzkaller0: entered promiscuous mode [ 1063.045222][ T3892] syzkaller0: entered allmulticast mode [ 1063.058968][ T3892] 0: reclassify loop, rule prio 0, protocol 800 [ 1063.345881][ T3895] tipc: Enabling of bearer rejected, failed to enable media [ 1063.355932][ T3894] tipc: Enabling of bearer rejected, failed to enable media [ 1063.498720][ T3902] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8805'. [ 1063.523577][ T3902] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8805'. [ 1063.621017][ T3905] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8805'. [ 1064.061104][ T3916] bond0: (slave bond_slave_0): Releasing backup interface [ 1064.124325][ T3916] bond0: (slave bond_slave_1): Releasing backup interface [ 1064.160375][ T3916] team0: Port device team_slave_0 removed [ 1064.175491][ T3916] team0: Port device team_slave_1 removed [ 1064.181707][ T3916] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1064.189788][ T3916] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1064.204571][ T3916] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1064.373979][ T3926] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1064.552299][ T3931] xt_hashlimit: size too large, truncated to 1048576 [ 1064.565346][ T3930] netlink: 'syz.0.8812': attribute type 1 has an invalid length. [ 1064.608702][ T3933] syzkaller0: entered promiscuous mode [ 1064.617031][ T3933] syzkaller0: entered allmulticast mode [ 1064.756176][ T3946] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8816'. [ 1065.002994][ T3955] netlink: 'syz.4.8819': attribute type 1 has an invalid length. [ 1065.794702][ T3992] netpci0: tun_chr_ioctl cmd 1074025678 [ 1065.800326][ T3992] netpci0: group set to 0 [ 1067.869070][ T4046] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 1068.585076][ T3980] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1068.668469][ T4066] __nla_validate_parse: 9 callbacks suppressed [ 1068.668488][ T4066] netlink: 15672 bytes leftover after parsing attributes in process `syz.4.8848'. [ 1068.700550][ T4066] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8848'. [ 1068.712761][ T4066] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8848'. [ 1068.732651][ T4066] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8848'. [ 1068.752879][ T4068] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8848'. [ 1068.778562][ T4068] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8848'. [ 1068.788362][ T4068] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8848'. [ 1068.814008][ T4070] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8849'. [ 1068.832444][ T4070] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8849'. [ 1068.841998][ T4068] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8848'. [ 1069.471019][ T4093] netlink: 'syz.3.8858': attribute type 30 has an invalid length. [ 1069.481001][T30908] bond9: (slave dummy0): link status up again after 0 ms [ 1069.481709][T30908] bond9: (slave dummy0): failed to get link speed/duplex [ 1069.567600][ T6296] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1069.577085][ T6296] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1069.606073][ T6296] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1069.615623][ T6296] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1069.630315][ T6296] bond9: (slave dummy0): failed to get link speed/duplex [ 1069.650845][ T4093] netlink: 'syz.3.8858': attribute type 30 has an invalid length. [ 1069.659468][ T4095] IPVS: sh: FWM 3 0x00000003 - no destination available [ 1069.779493][ T729] bond9: (slave dummy0): failed to get link speed/duplex [ 1069.988893][ T4117] netlink: 'syz.1.8862': attribute type 13 has an invalid length. [ 1069.999515][ T4118] netlink: 'syz.1.8862': attribute type 13 has an invalid length. [ 1070.268557][ T5748] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 1070.390754][ T5748] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 1070.600533][ T6296] bond9: (slave dummy0): failed to get link speed/duplex [ 1070.647763][ T4132] IPVS: set_ctl: invalid protocol: 135 224.0.0.2:20002 [ 1070.655656][ T4133] IPVS: set_ctl: invalid protocol: 135 224.0.0.2:20002 [ 1070.780772][ T729] bond9: (slave dummy0): failed to get link speed/duplex [ 1070.802264][ T4138] RDS: rds_bind could not find a transport for ::ffff:100.1.1.2, load rds_tcp or rds_rdma? [ 1070.952627][ T4147] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1070.972582][T30908] bond9: (slave dummy0): failed to get link speed/duplex [ 1071.164099][ T5748] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 1071.177025][ T1108] bond9: (slave dummy0): failed to get link speed/duplex [ 1071.393381][ T1108] bond9: (slave dummy0): failed to get link speed/duplex [ 1072.962174][ T4113] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1073.706131][ T4214] __nla_validate_parse: 17 callbacks suppressed [ 1073.706152][ T4214] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8887'. [ 1073.804191][ T4213] syzkaller0: entered promiscuous mode [ 1073.809818][ T4213] syzkaller0: entered allmulticast mode [ 1073.862692][ T1562] IPVS: starting estimator thread 0... [ 1073.950609][ T4221] IPVS: using max 28 ests per chain, 67200 per kthread [ 1074.118098][ T4231] netlink: 'syz.3.8891': attribute type 9 has an invalid length. [ 1074.161343][ T4218] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1074.359773][ T4237] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8893'. [ 1074.788869][ T6296] net_ratelimit: 19 callbacks suppressed [ 1074.788891][ T6296] bond9: (slave dummy0): failed to get link speed/duplex [ 1074.876378][ T4254] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8898'. [ 1075.011930][T30908] pimreg: left allmulticast mode [ 1075.470511][ T4276] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8901'. [ 1075.488649][T30908] bond3 (unregistering): (slave vti0): Releasing backup interface [ 1075.561283][T30908] bond1 (unregistering): (slave gretap1): Releasing backup interface [ 1075.618079][T30908] bond1 (unregistering): (slave bond2): Releasing backup interface [ 1075.626967][T30908] bond1 (unregistering): Released all slaves [ 1075.642716][T30908] bond2 (unregistering): Released all slaves [ 1075.663079][T30908] bond3 (unregistering): Released all slaves [ 1075.678509][T30908] bond4 (unregistering): Released all slaves [ 1075.696936][T30908] bond5 (unregistering): Released all slaves [ 1075.718496][T30908] bond6 (unregistering): Released all slaves [ 1075.736552][T30908] bond7 (unregistering): (slave bond8): Releasing backup interface [ 1075.745443][T30908] bond7 (unregistering): Released all slaves [ 1075.762544][T30908] bond8 (unregistering): Released all slaves [ 1075.786876][T30908] bond9 (unregistering): Released all slaves [ 1075.819502][T30908] bond0 (unregistering): Released all slaves [ 1075.842979][T30908] bond10 (unregistering): Released all slaves [ 1075.859401][T30908] bond11 (unregistering): Released all slaves [ 1075.876759][T30908] bond12 (unregistering): Released all slaves [ 1076.065741][ T29] audit: type=1800 audit(1781617543.587:10): pid=4283 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.8904" name="memory.events" dev="tmpfs" ino=2285 res=0 errno=0 [ 1076.087015][ T29] audit: type=1804 audit(1781617543.597:11): pid=4283 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.8904" name="/newroot/442/memory.events" dev="tmpfs" ino=2285 res=1 errno=0 [ 1076.128073][ T13] bond9: (slave dummy0): failed to get link speed/duplex [ 1076.159470][ T4283] netlink: 52 bytes leftover after parsing attributes in process `syz.2.8904'. [ 1076.186801][ T4283] netlink: 52 bytes leftover after parsing attributes in process `syz.2.8904'. [ 1076.260238][ T729] bond9: (slave dummy0): failed to get link speed/duplex [ 1076.447272][ T4297] blkio.reset_stats is deprecated [ 1076.466774][ T13] bond9: (slave dummy0): failed to get link speed/duplex [ 1076.530759][ T4306] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1076.681297][ T6296] bond9: (slave dummy0): failed to get link speed/duplex [ 1076.856163][T30908] hmó3)ó: left promiscuous mode [ 1077.002929][ T4321] syzkaller0: entered promiscuous mode [ 1077.008880][ T4321] syzkaller0: entered allmulticast mode [ 1077.681326][ T4335] netlink: 140 bytes leftover after parsing attributes in process `syz.0.8919'. [ 1080.070388][ T6296] bond9: (slave dummy0): failed to get link speed/duplex [ 1080.320227][ T4342] sctp: [Deprecated]: syz.4.8920 (pid 4342) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1080.320227][ T4342] Use struct sctp_sack_info instead [ 1082.898772][T30908] hmac(sha224: left promiscuous mode [ 1082.980667][ T116] bond9: (slave dummy0): failed to get link speed/duplex [ 1083.062449][ T4344] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8921'. [ 1083.148898][T30908] tipc: Disabling bearer [ 1083.192947][T30908] tipc: Left network mode [ 1083.198676][ T4344] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8921'. [ 1083.244259][ T6292] bond9: (slave dummy0): failed to get link speed/duplex [ 1083.337433][ T4359] A link change request failed with some changes committed already. Interface veth0_to_batadv may have been left with an inconsistent configuration, please check. [ 1083.361564][ T4357] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1083.445351][ T116] bond9: (slave dummy0): failed to get link speed/duplex [ 1083.570271][ T6300] bond9: (slave dummy0): failed to get link speed/duplex [ 1083.733074][ T4376] syzkaller0: entered promiscuous mode [ 1083.754064][ T4376] syzkaller0: entered allmulticast mode [ 1083.779374][ T13] bond9: (slave dummy0): failed to get link speed/duplex [ 1083.855572][ T4382] xt_cgroup: xt_cgroup: no path or classid specified [ 1083.972337][ T4386] netlink: 'syz.0.8936': attribute type 12 has an invalid length. [ 1084.032948][ T4388] netlink: 'syz.3.8935': attribute type 1 has an invalid length. [ 1086.710816][ T6289] bond9: (slave dummy0): failed to get link speed/duplex [ 1086.741584][ T4388] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 1086.743008][ T4395] mac80211_hwsim hwsim58 wlan0: entered promiscuous mode [ 1086.761348][ T4395] batman_adv: batadv0: Adding interface: wlan0 [ 1086.767558][ T4395] batman_adv: batadv0: The MTU of interface wlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1086.793271][ T4412] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1086.801442][ T4395] batman_adv: batadv0: Interface activated: wlan0 [ 1086.881907][ T4403] batadv_slave_0: Caught tx_queue_len zero misconfig [ 1086.912366][ T4406] tipc: Enabling of bearer rejected, failed to enable media [ 1086.981310][ T4416] netlink: 52 bytes leftover after parsing attributes in process `syz.2.8941'. [ 1086.990493][ T6300] bond9: (slave dummy0): failed to get link speed/duplex [ 1087.223554][ T4422] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.8942'. [ 1087.277846][ T4426] netlink: 40 bytes leftover after parsing attributes in process `syz.0.8944'. [ 1087.306603][ T4426] netlink: 40 bytes leftover after parsing attributes in process `syz.0.8944'. [ 1087.358713][ T4426] netlink: 40 bytes leftover after parsing attributes in process `syz.0.8944'. [ 1087.423450][ T4426] netlink: 40 bytes leftover after parsing attributes in process `syz.0.8944'. [ 1087.489807][ T4426] netlink: 40 bytes leftover after parsing attributes in process `syz.0.8944'. [ 1087.530779][ T4445] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8948'. [ 1087.625421][ T4426] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1087.635973][ T4426] 8021q: adding VLAN 0 to HW filter on device team0 [ 1087.656160][ T4426] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1087.662108][ T729] bond9: (slave dummy0): link status up again after 0 ms [ 1087.692396][ T6296] bond9: (slave dummy0): link status up again after 0 ms [ 1087.710804][ T4426] žÿ: entered promiscuous mode [ 1087.720382][ T6296] bond9: (slave dummy0): link status up again after 0 ms [ 1087.741251][ T6296] bond9: (slave dummy0): link status up again after 0 ms [ 1087.772693][ T4426] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1087.780276][ T4426] veth1_to_batadv: left promiscuous mode [ 1087.781685][ T729] bond9: (slave dummy0): link status up again after 0 ms [ 1087.790494][ T4426] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1087.848977][ T4426] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1087.859427][ T4426] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1087.872337][ T6300] bond9: (slave dummy0): link status up again after 0 ms [ 1087.885149][ T4426] veth1_vlan: left promiscuous mode [ 1087.907014][ T4426] veth0_vlan: left promiscuous mode [ 1087.913233][ T4426] veth0_vlan: entered promiscuous mode [ 1087.922834][ T4426] veth1_vlan: entered promiscuous mode [ 1087.933207][ T4426] veth1_macvtap: left promiscuous mode [ 1087.963715][ T6290] bond9: (slave dummy0): link status up again after 0 ms [ 1087.975046][ T4426] veth1_macvtap: entered promiscuous mode [ 1087.987803][ T4426] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1087.997221][ T4426] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1088.006152][ T4426] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1088.013961][ T4426] mac80211_hwsim hwsim58 wlan0: left promiscuous mode [ 1088.022349][ T4426] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1088.040740][ T4426] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1088.062228][ T6296] bond9: (slave dummy0): link status up again after 0 ms [ 1088.139788][ T4426] __nla_validate_parse: 74 callbacks suppressed [ 1088.139810][ T4426] netlink: 40 bytes leftover after parsing attributes in process `syz.0.8944'. [ 1088.190332][ T4426] netlink: 40 bytes leftover after parsing attributes in process `syz.0.8944'. [ 1088.222507][ T4426] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1088.232199][ T4426] netlink: 40 bytes leftover after parsing attributes in process `syz.0.8944'. [ 1088.256367][ T4426] netlink: 40 bytes leftover after parsing attributes in process `syz.0.8944'. [ 1088.279508][ T4426] netlink: 40 bytes leftover after parsing attributes in process `syz.0.8944'. [ 1088.308535][ T4426] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1088.319989][ T4426] netlink: 40 bytes leftover after parsing attributes in process `syz.0.8944'. [ 1088.340464][ T4426] netlink: 40 bytes leftover after parsing attributes in process `syz.0.8944'. [ 1088.350265][ T4426] netlink: 40 bytes leftover after parsing attributes in process `syz.0.8944'. [ 1088.360078][ T4426] netlink: 40 bytes leftover after parsing attributes in process `syz.0.8944'. [ 1088.369528][ T4426] veth1_to_batadv: entered promiscuous mode [ 1088.375908][ T4426] netlink: 40 bytes leftover after parsing attributes in process `syz.0.8944'. [ 1088.402424][ T4426] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1088.457145][ T4426] bond6: left promiscuous mode [ 1088.617086][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 1088.624425][ T35] bridge0: port 2(bridge_slave_1) entered listening state [ 1088.633735][T14036] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 1088.707143][ T13] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1088.715907][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1088.834183][ T4461] syzkaller0: entered promiscuous mode [ 1088.842519][ T4475] RDS: rds_bind could not find a transport for ::ffff:172.20.20.187, load rds_tcp or rds_rdma? [ 1088.851281][ T4461] syzkaller0: entered allmulticast mode [ 1088.887031][ T6296] bond9: (slave veth19): link status definitely up, 10000 Mbps full duplex [ 1088.906989][ T6296] bond9: active interface up! [ 1088.964657][ T13] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1089.020785][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1089.029568][ T13] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1089.038275][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1089.068562][ T4471] workqueue: Failed to create a rescuer kthread for wq "bond10": -EINTR [ 1089.370822][T14034] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 1090.173081][ C0] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 1091.942870][ T13] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1091.951712][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1092.294203][ T4486] batman_adv: batadv0: Interface deactivated: wlan0 [ 1092.643362][ T1108] net_ratelimit: 18 callbacks suppressed [ 1092.643383][ T1108] bond9: (slave dummy0): failed to get link speed/duplex [ 1092.990066][ T4551] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 1093.025447][ T4551] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 1093.035291][ T4551] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 1093.145638][ T13] bond9: (slave dummy0): failed to get link speed/duplex [ 1093.208348][ T4558] __nla_validate_parse: 36 callbacks suppressed [ 1093.208365][ T4558] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8970'. [ 1093.541728][ T4572] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.8973'. [ 1093.887289][ T4588] netlink: 68 bytes leftover after parsing attributes in process `syz.2.8975'. [ 1093.998575][ T13] bond9: (slave dummy0): failed to get link speed/duplex [ 1094.067492][T14041] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 1094.102763][ T4591] netlink: 292 bytes leftover after parsing attributes in process `syz.3.8977'. [ 1094.184688][ T4595] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8979'. [ 1094.300820][ T1108] bond9: (slave dummy0): failed to get link speed/duplex [ 1094.485133][T30908] hsr_slave_0: left promiscuous mode [ 1094.501452][T30908] hsr_slave_1: left promiscuous mode [ 1094.519552][T30908] veth1_vlan: left promiscuous mode [ 1094.728860][ T24] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 1095.311921][ T4627] openvswitch: netlink: Tunnel attr 7 has unexpected len 229 expected 0 [ 1095.550032][ T4632] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8983'. [ 1095.616567][ T4633] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8983'. [ 1095.792052][ T4632] team1: entered promiscuous mode [ 1095.807480][ T4632] team1: entered allmulticast mode [ 1095.814192][ T4632] 8021q: adding VLAN 0 to HW filter on device team1 [ 1095.926020][ T4633] team2: entered promiscuous mode [ 1095.952978][ T4633] team2: entered allmulticast mode [ 1095.976619][ T4633] 8021q: adding VLAN 0 to HW filter on device team2 [ 1096.012601][ T13] bond9: (slave dummy0): failed to get link speed/duplex [ 1096.150809][ T13] bond9: (slave dummy0): failed to get link speed/duplex [ 1096.255214][ T4648] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8988'. [ 1096.311394][ T6289] bond9: (slave dummy0): failed to get link speed/duplex [ 1096.415455][ T4648] vlan2: entered allmulticast mode [ 1096.420631][ T4648] bridge6: entered allmulticast mode [ 1096.430768][ T6289] bond9: (slave dummy0): failed to get link speed/duplex [ 1096.461716][ T4667] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1096.488544][ T4648] bridge6: port 1(erspan0) entered blocking state [ 1096.495278][ T4648] bridge6: port 1(erspan0) entered disabled state [ 1096.502739][ T4666] netlink: 'syz.4.8987': attribute type 1 has an invalid length. [ 1096.546030][ T4648] erspan0: entered allmulticast mode [ 1096.569007][ T4669] netlink: 'syz.4.8987': attribute type 4 has an invalid length. [ 1096.625577][ T4648] erspan0: entered promiscuous mode [ 1096.653704][ T6290] bond9: (slave dummy0): failed to get link speed/duplex [ 1096.699384][ T4659] netlink: 'syz.4.8987': attribute type 4 has an invalid length. [ 1097.371287][ T4946] Bluetooth: hci3: command 0x0405 tx timeout [ 1097.510421][ T4695] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8996'. [ 1097.549490][ T4695] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8996'. [ 1097.685138][ T729] net_ratelimit: 4 callbacks suppressed [ 1097.685158][ T729] bond9: (slave dummy0): failed to get link speed/duplex [ 1097.839264][ T35] bond9: (slave dummy0): failed to get link speed/duplex [ 1098.011968][ T35] bond9: (slave dummy0): failed to get link speed/duplex [ 1098.227878][ T6290] bond9: (slave dummy0): failed to get link speed/duplex [ 1098.370240][ T6300] bond9: (slave dummy0): failed to get link speed/duplex [ 1098.686393][ T6290] bond9: (slave dummy0): failed to get link speed/duplex [ 1098.833518][ T6290] bond9: (slave dummy0): failed to get link speed/duplex [ 1099.026719][ T13] bond9: (slave dummy0): failed to get link speed/duplex [ 1099.094807][ T4743] netlink: 'syz.3.9002': attribute type 1 has an invalid length. [ 1099.128391][ T4743] netlink: 'syz.3.9002': attribute type 3 has an invalid length. [ 1099.158727][ T4743] netlink: 224 bytes leftover after parsing attributes in process `syz.3.9002'. [ 1099.180743][ T6290] bond9: (slave dummy0): failed to get link speed/duplex [ 1099.244076][ T4743] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9002'. [ 1099.330454][ T729] bond9: (slave dummy0): failed to get link speed/duplex [ 1099.400696][ T4755] syz_tun: entered allmulticast mode [ 1100.240787][ T4787] bond0: Caught tx_queue_len zero misconfig [ 1100.267781][ T4789] netlink: 'syz.2.9012': attribute type 1 has an invalid length. [ 1100.341412][ T4789] bond5: entered promiscuous mode [ 1100.355261][ T4789] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1100.436883][ T4789] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9012'. [ 1100.458005][ T4789] bond5: entered allmulticast mode [ 1100.480418][ T4789] bond5: (slave bridge7): making interface the new active one [ 1100.487933][ T4789] bridge7: entered promiscuous mode [ 1100.493307][ T4789] bridge7: entered allmulticast mode [ 1100.499761][ T4789] bond5: (slave bridge7): Enslaving as an active interface with an up link [ 1100.805060][ T4809] netlink: 'syz.4.9015': attribute type 1 has an invalid length. [ 1100.812837][ T4809] netlink: 'syz.4.9015': attribute type 3 has an invalid length. [ 1100.827582][ T4811] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9016'. [ 1100.836721][ T4809] netlink: 224 bytes leftover after parsing attributes in process `syz.4.9015'. [ 1100.863269][ T4809] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9015'. [ 1100.873065][ T4811] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9016'. [ 1100.929371][ T4811] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9016'. [ 1100.997240][ T4819] netlink: 'syz.1.9018': attribute type 1 has an invalid length. [ 1101.029963][ T4819] netlink: 244 bytes leftover after parsing attributes in process `syz.1.9018'. [ 1101.073839][ T4819] NCSI netlink: No device for ifindex 0 [ 1101.094891][ T4816] netlink: 'syz.1.9018': attribute type 10 has an invalid length. [ 1101.160781][ T4821] netlink: 16 bytes leftover after parsing attributes in process `syz.3.9020'. [ 1101.184403][ T4824] xt_recent: Unsupported userspace flags (000000b1) [ 1101.197303][ T4827] IPVS: set_ctl: invalid protocol: 94 224.0.0.2:20002 [ 1101.716951][ T4842] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1102.165877][ T4854] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1102.506227][ T4870] xt_cgroup: path and classid specified [ 1102.685281][ T4876] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1102.749434][ T4879] syzkaller0: entered promiscuous mode [ 1102.772875][ T4879] syzkaller0: entered allmulticast mode [ 1102.865178][ T6289] net_ratelimit: 24 callbacks suppressed [ 1102.865198][ T6289] bond9: (slave dummy0): failed to get link speed/duplex [ 1102.944978][ T4879] tun0: tun_chr_ioctl cmd 1074812117 [ 1102.955627][ T4886] syzkaller0: entered promiscuous mode [ 1102.961133][ T4886] syzkaller0: entered allmulticast mode [ 1103.090715][ T6289] bond9: (slave dummy0): failed to get link speed/duplex [ 1103.134365][ T4896] nbd: must specify a size in bytes for the device [ 1103.772926][ T4920] netlink: 'syz.3.9052': attribute type 1 has an invalid length. [ 1103.784062][ T4920] netlink: 'syz.3.9052': attribute type 2 has an invalid length. [ 1104.255929][ C0] bridge0: port 2(bridge_slave_1) entered learning state [ 1106.250389][T30907] bond9: (slave dummy0): failed to get link speed/duplex [ 1106.339092][ T4951] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1106.408677][ T4954] __nla_validate_parse: 10 callbacks suppressed [ 1106.408698][ T4954] netlink: 68 bytes leftover after parsing attributes in process `syz.4.9055'. [ 1106.864896][ T4982] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9060'. [ 1106.885525][ T4980] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 1107.183838][ T4970] x_tables: duplicate underflow at hook 1 [ 1107.374412][ T4936] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1107.624046][ T5002] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9062'. [ 1107.632971][ T5002] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9062'. [ 1107.937435][ T5016] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9064'. [ 1109.805006][ T4990] workqueue: Failed to create a rescuer kthread for wq "syzk": -EINTR [ 1109.830264][ T6290] bond9: (slave dummy0): failed to get link speed/duplex [ 1109.971900][ T1108] bond9: (slave dummy0): failed to get link speed/duplex [ 1110.127268][ T6290] bond9: (slave dummy0): failed to get link speed/duplex [ 1110.244540][ T5035] can: request_module (can-proto-0) failed. [ 1110.260558][ T5035] netlink: 'syz.0.9067': attribute type 1 has an invalid length. [ 1110.293705][ T35] bond9: (slave dummy0): failed to get link speed/duplex [ 1110.512633][ T35] bond9: (slave dummy0): failed to get link speed/duplex [ 1110.631977][ T13] bond9: (slave dummy0): failed to get link speed/duplex [ 1110.799630][ T5016] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1110.977590][ T35] bond9: (slave dummy0): failed to get link speed/duplex [ 1111.015964][ T5052] batadv_slave_0: entered promiscuous mode [ 1111.031559][ T5051] batadv_slave_0: left promiscuous mode [ 1111.286122][ T35] bond9: (slave dummy0): failed to get link speed/duplex [ 1111.411538][ T13] bond9: (slave dummy0): failed to get link speed/duplex [ 1111.422777][ T5065] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9076'. [ 1111.432364][ T5065] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9076'. [ 1111.473295][ T5069] tc action pedit 'at' offset 9 out of bounds [ 1111.757169][ T6300] bond9: (slave dummy0): failed to get link speed/duplex [ 1112.118607][ T5096] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9084'. [ 1112.127615][ T5096] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9084'. [ 1112.143984][ T5096] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9084'. [ 1112.160045][ T5096] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9084'. [ 1112.358005][ T5100] netlink: 'syz.1.9085': attribute type 1 has an invalid length. [ 1112.365788][ T5100] netlink: 'syz.1.9085': attribute type 3 has an invalid length. [ 1112.375816][ T5100] netlink: 224 bytes leftover after parsing attributes in process `syz.1.9085'. [ 1112.419739][ T5100] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9085'. [ 1112.501082][ T5104] netlink: 'syz.4.9087': attribute type 9 has an invalid length. [ 1112.823416][ T4946] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1112.837107][ T4946] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1112.857284][ T4946] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1112.868097][ T4946] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1112.876446][ T4946] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1113.533617][ T5127] netlink: 'syz.3.9091': attribute type 3 has an invalid length. [ 1113.820889][ T5142] tc action pedit 'at' offset 9 out of bounds [ 1113.908001][ T5149] netlink: 20 bytes leftover after parsing attributes in process `syz.2.9097'. [ 1114.043231][ T5154] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9098'. [ 1115.018681][ T5182] netlink: 'syz.1.9108': attribute type 1 has an invalid length. [ 1115.071508][ T5635] Bluetooth: hci0: command tx timeout [ 1115.953387][ T6290] net_ratelimit: 19 callbacks suppressed [ 1115.953407][ T6290] bond9: (slave dummy0): failed to get link speed/duplex [ 1116.006166][ T5208] Bluetooth: MGMT ver 1.23 [ 1116.315096][ T5117] bridge0: port 1(bridge_slave_0) entered blocking state [ 1116.322356][ T5117] bridge0: port 1(bridge_slave_0) entered disabled state [ 1116.329591][ T5117] bridge_slave_0: entered allmulticast mode [ 1116.337369][ T5117] bridge_slave_0: entered promiscuous mode [ 1116.351335][ T5117] bridge0: port 2(bridge_slave_1) entered blocking state [ 1116.358531][ T5117] bridge0: port 2(bridge_slave_1) entered disabled state [ 1116.365800][ T5117] bridge_slave_1: entered allmulticast mode [ 1116.373539][ T5117] bridge_slave_1: entered promiscuous mode [ 1116.391233][ T5226] netlink: 'syz.3.9115': attribute type 1 has an invalid length. [ 1116.501808][ T5117] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1116.556560][ T5117] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1116.726055][ T5117] team0: Port device team_slave_0 added [ 1116.873149][ T5117] team0: Port device team_slave_1 added [ 1116.946587][ T5117] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1116.998845][ T5245] __nla_validate_parse: 5 callbacks suppressed [ 1116.998865][ T5245] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9120'. [ 1117.014478][ T5117] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1117.058471][ T5117] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1117.144968][ T5117] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1117.153245][ T5117] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1117.183614][ T5251] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9122'. [ 1117.183651][ T5251] netlink: 'syz.3.9122': attribute type 30 has an invalid length. [ 1117.185504][ T5252] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1117.217597][ T5635] Bluetooth: hci0: command tx timeout [ 1117.238670][ T5117] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1117.245904][ T5254] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9122'. [ 1117.280533][ T5254] netlink: 'syz.3.9122': attribute type 30 has an invalid length. [ 1117.308550][ T5255] netlink: 192 bytes leftover after parsing attributes in process `syz.4.9121'. [ 1117.432279][ T5117] hsr_slave_0: entered promiscuous mode [ 1117.438928][ T5117] hsr_slave_1: entered promiscuous mode [ 1117.445270][ T5117] debugfs: 'hsr0' already exists in 'hsr' [ 1117.451028][ T5117] Cannot create hsr debugfs directory [ 1117.717717][ T5117] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1117.728272][ T5117] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1117.846438][ T5266] netlink: 'syz.1.9125': attribute type 1 has an invalid length. [ 1117.942328][ T5266] bond8: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 1118.008818][ T5266] veth33: entered promiscuous mode [ 1118.032575][ T5266] bond8: (slave veth33): Enslaving as a backup interface with a down link [ 1118.073133][ T5266] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9125'. [ 1118.102438][ T5266] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1118.118058][ T35] bond8: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 1118.139651][ T1108] bond9: (slave dummy0): failed to get link speed/duplex [ 1118.252774][ T5273] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1118.337700][ T13] bond8: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 1118.402333][ T5117] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1118.441494][ T5282] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9132'. [ 1118.446174][ T5284] xt_cgroup: xt_cgroup: no path or classid specified [ 1118.450583][ T5117] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1118.518331][ T5286] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1118.537142][ T13] bond9: (slave dummy0): failed to get link speed/duplex [ 1118.644770][ T13] bond9: (slave dummy0): failed to get link speed/duplex [ 1118.705263][ T5117] bond0: (slave netdevsim1): Releasing backup interface [ 1118.724222][ T5117] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1118.738426][ T5117] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1118.878871][ T6300] bond9: (slave dummy0): failed to get link speed/duplex [ 1119.010215][T30907] bond9: (slave dummy0): failed to get link speed/duplex [ 1119.120536][T30907] bond9: (slave dummy0): failed to get link speed/duplex [ 1119.288847][ T5117] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1119.299325][ T5117] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1119.337471][ T5635] Bluetooth: hci0: command tx timeout [ 1119.345734][ T5304] netlink: 'syz.3.9136': attribute type 1 has an invalid length. [ 1119.365898][ T5304] netlink: 224 bytes leftover after parsing attributes in process `syz.3.9136'. [ 1119.432011][ T13] bond9: (slave dummy0): failed to get link speed/duplex [ 1119.610146][ C0] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1119.617433][ C0] bridge0: topology change detected, propagating [ 1119.993055][ T5320] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1120.252296][ T5117] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1120.270832][ T5117] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1120.278793][ T5117] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1120.288833][ T5117] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1120.298074][ T5117] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1120.367084][ T5117] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1120.435693][ T5117] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1120.445950][ T5117] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1120.481242][ T5336] lo: Caught tx_queue_len zero misconfig [ 1120.611544][ T5340] netlink: 'syz.3.9148': attribute type 9 has an invalid length. [ 1120.678943][ T5117] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1120.701378][ T5117] 8021q: adding VLAN 0 to HW filter on device team0 [ 1120.715194][ T1108] bridge0: port 1(bridge_slave_0) entered blocking state [ 1120.722380][ T1108] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1120.785167][ T1108] bridge0: port 2(bridge_slave_1) entered blocking state [ 1120.792322][ T1108] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1120.980309][ C1] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 1121.011630][ T6290] net_ratelimit: 5 callbacks suppressed [ 1121.011651][ T6290] bond9: (slave dummy0): failed to get link speed/duplex [ 1121.190992][ T13] bond9: (slave dummy0): failed to get link speed/duplex [ 1121.217085][ T5357] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1121.301806][ T5360] netlink: 20 bytes leftover after parsing attributes in process `syz.2.9154'. [ 1121.320495][T30908] bond9: (slave dummy0): failed to get link speed/duplex [ 1121.358047][ T5360] netlink: 'syz.2.9154': attribute type 1 has an invalid length. [ 1121.385784][ T5360] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 1121.441932][ T5635] Bluetooth: hci0: command tx timeout [ 1121.662194][ T1108] bond9: (slave dummy0): failed to get link speed/duplex [ 1121.800265][ T6290] bond9: (slave dummy0): failed to get link speed/duplex [ 1121.817192][ T5379] netlink: 84 bytes leftover after parsing attributes in process `syz.1.9159'. [ 1121.925466][ T5117] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1122.055590][ T5117] veth0_vlan: entered promiscuous mode [ 1122.073976][ T5117] veth1_vlan: entered promiscuous mode [ 1122.137512][ T5401] openvswitch: netlink: Flow key attr not present in new flow. [ 1122.188227][ T5117] veth0_macvtap: entered promiscuous mode [ 1122.236242][ T1108] bond9: (slave dummy0): failed to get link speed/duplex [ 1122.246817][ T5401] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9163'. [ 1122.258697][ T5401] netlink: 'syz.1.9163': attribute type 10 has an invalid length. [ 1122.388151][ T5402] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1122.391308][ T5404] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.9165'. [ 1122.587240][ T5117] veth1_macvtap: entered promiscuous mode [ 1122.620026][ T6290] bond9: (slave dummy0): failed to get link speed/duplex [ 1122.657374][ T5117] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1122.740454][ T5117] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1122.764880][ T35] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1122.809081][ T35] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1122.908367][ T6290] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1122.917572][ T6290] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1122.950194][ T35] bond9: (slave dummy0): failed to get link speed/duplex [ 1122.961230][ T5411] xt_cgroup: xt_cgroup: no path or classid specified [ 1123.227624][ T6290] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1123.247946][ T6290] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1123.286136][ T6300] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1123.296252][ T5420] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9170'. [ 1123.311449][ T6300] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1123.395273][ T5420] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1123.403376][ T5420] batadv_slave_1: entered promiscuous mode [ 1123.768034][ T5436] netlink: 'syz.3.9173': attribute type 1 has an invalid length. [ 1123.831072][ T5436] bond8: entered promiscuous mode [ 1123.838260][ T5436] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1123.884933][ T5450] netlink: 4104 bytes leftover after parsing attributes in process `syz.0.9177'. [ 1123.885717][ T5436] vlan0: entered allmulticast mode [ 1123.899768][ T5436] bond8: entered allmulticast mode [ 1123.905354][ T5450] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9177'. [ 1123.935511][ T5436] bond8: (slave bridge4): making interface the new active one [ 1123.943001][ T5436] bridge4: entered promiscuous mode [ 1123.948313][ T5436] bridge4: entered allmulticast mode [ 1123.955218][ T5436] bond8: (slave bridge4): Enslaving as an active interface with an up link [ 1123.968085][ T5436] netlink: 840 bytes leftover after parsing attributes in process `syz.3.9173'. [ 1124.009498][ T5451] netlink: 'syz.0.9177': attribute type 1 has an invalid length. [ 1124.032681][ T5451] 8021q: VLANs not supported on ip6gre0 [ 1124.051921][ T5451] netlink: 44 bytes leftover after parsing attributes in process `syz.0.9177'. [ 1124.156788][ T5457] xt_cgroup: xt_cgroup: no path or classid specified [ 1124.237760][ T5458] netlink: 96 bytes leftover after parsing attributes in process `syz.2.9178'. [ 1124.894098][ T5490] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9189'. [ 1124.926143][ T5490] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9189'. [ 1124.935702][ T5487] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1124.950665][ T5492] xt_cgroup: xt_cgroup: no path or classid specified [ 1125.246954][ T5507] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1125.356701][ T5498] syzkaller0: entered promiscuous mode [ 1125.402826][ T5498] syzkaller0: entered allmulticast mode [ 1127.902977][ T5490] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1128.094580][ T5528] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1129.001931][ T5513] net_ratelimit: 14 callbacks suppressed [ 1129.001947][ T5513] A link change request failed with some changes committed already. Interface ipvlan0 may have been left with an inconsistent configuration, please check. [ 1129.193052][ T6296] bond9: (slave dummy0): failed to get link speed/duplex [ 1129.266755][ T5562] netlink: 'syz.3.9210': attribute type 9 has an invalid length. [ 1129.478169][ T6296] bond9: (slave dummy0): failed to get link speed/duplex [ 1129.487490][ T5574] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1129.536823][ T5577] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1129.611548][ T35] bond9: (slave dummy0): failed to get link speed/duplex [ 1129.657997][ T5580] __nla_validate_parse: 1 callbacks suppressed [ 1129.658016][ T5580] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9218'. [ 1129.747604][ T6300] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1129.755510][ T6300] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1129.900904][ T5584] tc action pedit 'at' offset 9 out of bounds [ 1129.922345][ T35] bond9: (slave dummy0): failed to get link speed/duplex [ 1129.979214][ T5590] netlink: 68 bytes leftover after parsing attributes in process `syz.0.9222'. [ 1130.100249][ T6300] bond9: (slave dummy0): failed to get link speed/duplex [ 1130.251285][ T6289] bond9: (slave dummy0): failed to get link speed/duplex [ 1130.283189][ T5600] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9224'. [ 1130.302918][ T5600] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9224'. [ 1130.440732][ T6300] bond9: (slave dummy0): failed to get link speed/duplex [ 1130.532502][ T5616] tap0: tun_chr_ioctl cmd 2148553947 [ 1130.550228][ T6300] bond9: (slave dummy0): failed to get link speed/duplex [ 1130.684900][ T6300] bond9: (slave dummy0): failed to get link speed/duplex [ 1130.960815][ T5631] netlink: 6024 bytes leftover after parsing attributes in process `syz.1.9233'. [ 1131.495764][ T5639] netlink: 68 bytes leftover after parsing attributes in process `syz.1.9234'. [ 1132.083529][ T5653] netlink: 48 bytes leftover after parsing attributes in process `syz.2.9236'. [ 1132.825506][T30908] wlan1: Trigger new scan to find an IBSS to join [ 1133.070362][ T5661] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1133.172624][ T5667] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1133.907830][ T4946] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1133.943804][ T4946] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1133.956776][ T4946] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1133.964757][ T4946] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1133.983759][ T4946] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1136.056878][ T4946] Bluetooth: hci5: command tx timeout [ 1136.385794][ T6289] net_ratelimit: 12 callbacks suppressed [ 1136.385814][ T6289] bond9: (slave dummy0): failed to get link speed/duplex [ 1136.520371][T30908] bond9: (slave dummy0): failed to get link speed/duplex [ 1136.573828][ T5692] netlink: 68 bytes leftover after parsing attributes in process `syz.1.9248'. [ 1136.630598][ T116] bond9: (slave dummy0): failed to get link speed/duplex [ 1136.780500][ T116] bond9: (slave dummy0): failed to get link speed/duplex [ 1136.811637][T30907] wlan1: Trigger new scan to find an IBSS to join [ 1136.854821][ T5697] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1137.053118][ T116] bond9: (slave dummy0): failed to get link speed/duplex [ 1137.085609][ T5708] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1137.135040][ T5714] netlink: 'syz.2.9253': attribute type 9 has an invalid length. [ 1137.177186][ T5719] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9254'. [ 1137.355338][ T5680] bridge0: port 1(bridge_slave_0) entered blocking state [ 1137.425871][ T5680] bridge0: port 1(bridge_slave_0) entered disabled state [ 1137.433238][ T5680] bridge_slave_0: entered allmulticast mode [ 1137.450794][ T5680] bridge_slave_0: entered promiscuous mode [ 1137.468079][ T5680] bridge0: port 2(bridge_slave_1) entered blocking state [ 1137.485511][ T5680] bridge0: port 2(bridge_slave_1) entered disabled state [ 1137.503362][ T5680] bridge_slave_1: entered allmulticast mode [ 1137.523476][ T5680] bridge_slave_1: entered promiscuous mode [ 1137.552392][ T116] bond9: (slave dummy0): failed to get link speed/duplex [ 1137.587917][ T5680] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1137.624462][ T5680] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1137.669040][ T5733] tc action pedit 'at' offset 9 out of bounds [ 1137.688387][ T5680] team0: Port device team_slave_0 added [ 1137.731070][ T6289] bond9: (slave dummy0): failed to get link speed/duplex [ 1137.742819][ T5680] team0: Port device team_slave_1 added [ 1137.816725][ T5680] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1137.838242][ T5680] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1137.878063][ T5680] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1137.900205][ T5680] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1137.907164][ T5680] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1137.934554][ T5680] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1138.047262][T30908] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1138.091959][ T4946] Bluetooth: hci5: command tx timeout [ 1138.135991][ T5680] hsr_slave_0: entered promiscuous mode [ 1138.142838][ T5680] hsr_slave_1: entered promiscuous mode [ 1138.149082][ T5680] debugfs: 'hsr0' already exists in 'hsr' [ 1138.154992][ T5680] Cannot create hsr debugfs directory [ 1138.222891][ T5738] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9259'. [ 1138.241933][ T5738] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9259'. [ 1138.300479][ T13] bond9: (slave dummy0): failed to get link speed/duplex [ 1138.636924][ T5680] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1138.694589][ T5751] syzkaller0: entered promiscuous mode [ 1138.700122][ T5751] syzkaller0: entered allmulticast mode [ 1138.713620][ T5751] netlink: 20 bytes leftover after parsing attributes in process `syz.4.9261'. [ 1140.170656][ T4946] Bluetooth: hci5: command tx timeout [ 1141.671380][ T5680] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1141.739182][T30908] bond9: (slave dummy0): failed to get link speed/duplex [ 1141.852619][ T6289] bond9: (slave dummy0): failed to get link speed/duplex [ 1141.985674][ T5782] netlink: 'syz.0.9265': attribute type 89 has an invalid length. [ 1141.995921][ T5680] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1142.077947][T30907] bond9: (slave dummy0): failed to get link speed/duplex [ 1142.132567][ T5680] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1142.250629][ T4946] Bluetooth: hci5: command tx timeout [ 1142.286479][ T1108] bond9: (slave dummy0): failed to get link speed/duplex [ 1142.487030][ T5795] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9269'. [ 1142.546070][T30907] bond9: (slave dummy0): failed to get link speed/duplex [ 1142.568688][ T5797] FAULT_INJECTION: forcing a failure. [ 1142.568688][ T5797] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1142.581757][ T5797] CPU: 1 UID: 0 PID: 5797 Comm: syz.1.9270 Not tainted syzkaller #0 PREEMPT(full) [ 1142.581797][ T5797] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1142.581810][ T5797] Call Trace: [ 1142.581819][ T5797] [ 1142.581827][ T5797] dump_stack_lvl+0xe8/0x150 [ 1142.581868][ T5797] should_fail_ex+0x40c/0x560 [ 1142.581904][ T5797] _copy_to_user+0x31/0xb0 [ 1142.581928][ T5797] simple_read_from_buffer+0xe1/0x170 [ 1142.581956][ T5797] proc_fail_nth_read+0x1bb/0x230 [ 1142.581985][ T5797] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1142.582013][ T5797] ? rw_verify_area+0x24a/0x4c0 [ 1142.582060][ T5797] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1142.582086][ T5797] vfs_read+0x213/0xa80 [ 1142.582120][ T5797] ? __pfx___mutex_lock+0x10/0x10 [ 1142.582146][ T5797] ? __pfx_vfs_read+0x10/0x10 [ 1142.582176][ T5797] ? __fget_files+0x2a/0x420 [ 1142.582211][ T5797] ? __fget_files+0x3a2/0x420 [ 1142.582235][ T5797] ? __fget_files+0x2a/0x420 [ 1142.582269][ T5797] ksys_read+0x150/0x270 [ 1142.582301][ T5797] ? __pfx_ksys_read+0x10/0x10 [ 1142.582338][ T5797] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1142.582360][ T5797] do_syscall_64+0x174/0x580 [ 1142.582383][ T5797] ? trace_irq_disable+0x3b/0x140 [ 1142.582413][ T5797] ? clear_bhb_loop+0x40/0x90 [ 1142.582439][ T5797] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1142.582458][ T5797] RIP: 0033:0x7f6aed95d68e [ 1142.582476][ T5797] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1142.582495][ T5797] RSP: 002b:00007f6aee7e0fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1142.582516][ T5797] RAX: ffffffffffffffda RBX: 00007f6aee7e16c0 RCX: 00007f6aed95d68e [ 1142.582531][ T5797] RDX: 000000000000000f RSI: 00007f6aee7e10a0 RDI: 0000000000000003 [ 1142.582544][ T5797] RBP: 00007f6aee7e1090 R08: 0000000000000000 R09: 0000000000000000 [ 1142.582557][ T5797] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1142.582569][ T5797] R13: 00007f6aedc16038 R14: 00007f6aedc15fa0 R15: 00007ffc671f8e98 [ 1142.582602][ T5797] [ 1142.840939][T30908] bond9: (slave dummy0): failed to get link speed/duplex [ 1143.063594][T30908] bond9: (slave dummy0): failed to get link speed/duplex [ 1143.291960][T30908] bond9: (slave dummy0): failed to get link speed/duplex [ 1143.504274][T30908] bond9: (slave dummy0): failed to get link speed/duplex [ 1143.720449][T30908] bond9: (slave dummy0): failed to get link speed/duplex [ 1143.882010][ T5805] netlink: 'syz.4.9273': attribute type 1 has an invalid length. [ 1143.890677][ T5805] netlink: 'syz.4.9273': attribute type 3 has an invalid length. [ 1143.898848][ T5805] netlink: 224 bytes leftover after parsing attributes in process `syz.4.9273'. [ 1143.909869][ T5805] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9273'. [ 1144.107579][ T5811] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9274'. [ 1144.122950][ T5811] ipip0: entered promiscuous mode [ 1144.508122][ T5813] vxcan1: tx drop: invalid da for name 0x0000000004000000 [ 1144.724298][ T5818] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9276'. [ 1144.733441][ T5818] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9276'. [ 1144.853322][ T5778] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1144.941099][ T5680] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1145.027728][ T5680] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1145.065576][ T5680] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1145.129678][ T5828] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1145.157271][ T5680] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1145.180972][ T5832] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9279'. [ 1145.193341][ T5680] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1145.240494][ T5680] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1145.249675][ T5833] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9277'. [ 1145.259252][ T5680] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1145.311210][ T5680] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1145.377570][ T5834] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9277'. [ 1145.394674][ T5833] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9277'. [ 1145.552459][ T5847] x_tables: duplicate underflow at hook 3 [ 1145.721015][ T5680] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1145.832372][ T5680] 8021q: adding VLAN 0 to HW filter on device team0 [ 1145.895456][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 1145.902636][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1145.924233][ T6289] bridge0: port 2(bridge_slave_1) entered blocking state [ 1145.931468][ T6289] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1146.007038][ T5680] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1146.017457][ T5680] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1146.242390][ T5869] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1146.368405][ T5875] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1146.711927][ T5680] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1146.907000][ T5894] hsr_slave_0: left promiscuous mode [ 1146.981148][ T5894] hsr_slave_1: left promiscuous mode [ 1147.091336][ T1108] net_ratelimit: 15 callbacks suppressed [ 1147.091358][ T1108] bond9: (slave dummy0): failed to get link speed/duplex [ 1147.107740][ T5680] veth0_vlan: entered promiscuous mode [ 1147.127403][ T5680] veth1_vlan: entered promiscuous mode [ 1147.233610][ T5680] veth0_macvtap: entered promiscuous mode [ 1147.264018][ T5680] veth1_macvtap: entered promiscuous mode [ 1147.324920][ T5680] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1147.341315][ T5680] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1147.390161][ T6296] bond9: (slave dummy0): failed to get link speed/duplex [ 1147.448751][ T6289] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1147.457539][ T6289] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1147.484581][ T6289] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1147.493372][ T6289] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1147.747372][ T6290] bond9: (slave dummy0): failed to get link speed/duplex [ 1147.895156][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1147.919711][ T5915] __nla_validate_parse: 7 callbacks suppressed [ 1147.919730][ T5915] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9294'. [ 1147.960783][ T5915] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9294'. [ 1147.979415][ T5918] xt_cgroup: xt_cgroup: no path or classid specified [ 1147.990530][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1148.150769][ T6289] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1148.187640][ T6289] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1148.203789][ T6296] bond9: (slave dummy0): failed to get link speed/duplex [ 1148.250528][ T5928] mac80211_hwsim hwsim63 syzkaller0: entered promiscuous mode [ 1148.258750][ T5928] mac80211_hwsim hwsim63 syzkaller0: entered allmulticast mode [ 1148.355195][ T5933] Bluetooth: MGMT ver 1.23 [ 1148.423737][T30908] bond9: (slave dummy0): failed to get link speed/duplex [ 1148.466889][ T5935] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9302'. [ 1148.498762][ T5935] ipvlan1: entered promiscuous mode [ 1148.582176][ T5935] ipvlan1: left promiscuous mode [ 1148.616443][ T5945] netlink: 68 bytes leftover after parsing attributes in process `syz.4.9304'. [ 1148.763269][ T6289] bond9: (slave dummy0): failed to get link speed/duplex [ 1148.931771][ T6290] bond9: (slave dummy0): failed to get link speed/duplex [ 1149.527837][ T5974] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9313'. [ 1149.560380][T30907] bond9: (slave dummy0): failed to get link speed/duplex [ 1149.578524][ T5974] netlink: 207688 bytes leftover after parsing attributes in process `syz.0.9313'. [ 1149.670607][T30907] bond9: (slave dummy0): failed to get link speed/duplex [ 1149.791026][T30908] bond9: (slave dummy0): failed to get link speed/duplex [ 1150.007825][ T5995] syzkaller1: entered promiscuous mode [ 1150.013388][ T5995] syzkaller1: entered allmulticast mode [ 1150.124774][ T6000] netlink: 68 bytes leftover after parsing attributes in process `syz.2.9318'. [ 1150.147869][ T6002] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9320'. [ 1150.600004][ T6012] veth23: entered allmulticast mode [ 1150.674439][ T6018] netlink: 20 bytes leftover after parsing attributes in process `syz.2.9321'. [ 1150.985466][ T6030] netlink: 'syz.4.9326': attribute type 1 has an invalid length. [ 1151.815549][ T6070] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9337'. [ 1151.938596][T30907] nci: nci_rx_work: unknown MT 0x1 [ 1151.981278][ T6072] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1152.230460][ T6290] net_ratelimit: 11 callbacks suppressed [ 1152.230481][ T6290] bond9: (slave dummy0): failed to get link speed/duplex [ 1152.388895][ T1108] bond9: (slave dummy0): failed to get link speed/duplex [ 1152.515443][ T6100] netlink: 'syz.1.9345': attribute type 4 has an invalid length. [ 1152.539502][ T6062] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1152.550227][ T6290] bond9: (slave dummy0): failed to get link speed/duplex [ 1152.721598][T30908] bond9: (slave dummy0): failed to get link speed/duplex [ 1152.938860][T30907] bond9: (slave dummy0): failed to get link speed/duplex [ 1153.007538][ T6113] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1153.110175][ T6290] bond9: (slave dummy0): failed to get link speed/duplex [ 1153.205394][ T6129] __nla_validate_parse: 4 callbacks suppressed [ 1153.205413][ T6129] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9355'. [ 1153.400473][T30907] bond9: (slave dummy0): failed to get link speed/duplex [ 1153.468197][ T6142] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.9358'. [ 1153.775797][T30908] bond9: (slave dummy0): failed to get link speed/duplex [ 1153.922251][T30907] bond9: (slave dummy0): failed to get link speed/duplex [ 1154.070582][T30907] bond9: (slave dummy0): failed to get link speed/duplex [ 1154.234232][ T6159] netlink: 'syz.0.9364': attribute type 9 has an invalid length. [ 1154.279388][ T6161] netlink: 'syz.4.9365': attribute type 1 has an invalid length. [ 1154.287876][ T6161] netlink: 'syz.4.9365': attribute type 3 has an invalid length. [ 1154.296129][ T6161] netlink: 224 bytes leftover after parsing attributes in process `syz.4.9365'. [ 1154.311005][ T6161] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9365'. [ 1154.716335][ T6170] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9368'. [ 1155.103747][ T6175] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9368'. [ 1155.288037][ T6179] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9369'. [ 1155.298045][ T6179] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1155.349898][ T6181] netlink: 'syz.2.9370': attribute type 1 has an invalid length. [ 1155.398135][ T6181] vti0: entered promiscuous mode [ 1155.510898][ T6186] pim6reg1: entered promiscuous mode [ 1155.516382][ T6186] pim6reg1: entered allmulticast mode [ 1155.529635][ T6186] netlink: 164 bytes leftover after parsing attributes in process `syz.2.9372'. [ 1156.003111][ T6193] netlink: 'syz.2.9375': attribute type 1 has an invalid length. [ 1156.079371][ T6193] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1156.119889][ T6194] bond7: Unable to set up delay as MII monitoring is disabled [ 1156.174042][ T6194] bond7 (unregistering): Released all slaves [ 1156.365436][ T6205] 8021q: adding VLAN 0 to HW filter on device team0 [ 1156.383512][ T6205] 8021q: adding VLAN 0 to HW filter on device 60ªX¹¦À [ 1156.426362][ T6205] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1156.456820][ T6205] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1156.471356][ T5749] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 1156.489288][ T6205] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1156.511765][ T6205] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1156.527293][ T6209] tipc: Started in network mode [ 1156.532241][ T6209] tipc: Node identity ac14140f, cluster identity 4711 [ 1156.539277][ T6209] tipc: New replicast peer: 172.30.0.5 [ 1156.544931][ T6209] tipc: Enabled bearer , priority 10 [ 1156.700412][ T5749] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1156.738882][ T6289] bond8: (slave veth33): link status definitely up, 10000 Mbps full duplex [ 1156.768028][ T6217] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9381'. [ 1156.782667][ T6289] bond8: active interface up! [ 1156.793416][ T6217] netlink: 20 bytes leftover after parsing attributes in process `syz.1.9381'. [ 1156.951152][ T6217] geneve3: entered promiscuous mode [ 1156.965390][ T6217] geneve3: entered allmulticast mode [ 1157.210649][T14031] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 1157.268676][ T6244] netlink: 'syz.1.9389': attribute type 3 has an invalid length. [ 1157.277531][ T6244] netlink: 'syz.1.9389': attribute type 3 has an invalid length. [ 1157.288550][ T6245] bridge0: port 1(dummy0) entered blocking state [ 1157.295930][ T6245] bridge0: port 1(dummy0) entered disabled state [ 1157.302491][ T6245] dummy0: entered allmulticast mode [ 1157.310617][ T6245] dummy0: entered promiscuous mode [ 1157.317817][ T1108] net_ratelimit: 34 callbacks suppressed [ 1157.317843][ T1108] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 1157.332527][ T6245] dummy0: left allmulticast mode [ 1157.338830][ T6245] dummy0: left promiscuous mode [ 1157.344471][ T6245] bridge0: port 1(dummy0) entered disabled state [ 1157.357965][ T6244] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1157.503967][T30907] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1157.527897][ T6249] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 1157.586922][T30907] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 1157.614910][T14041] tipc: Node number set to 2886997007 [ 1157.690767][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1157.702168][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1157.710631][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1157.719111][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1157.727630][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1157.739212][ T5749] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1157.826733][ T6257] xt_hashlimit: size too large, truncated to 1048576 [ 1157.934839][ T6289] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 1157.951326][T30908] bond9: (slave dummy0): failed to get link speed/duplex [ 1158.010429][ T6236] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1158.104831][ T6266] syz_tun: entered allmulticast mode [ 1158.283388][ T6266] syz_tun (unregistering): left allmulticast mode [ 1158.437690][ T6280] xt_cgroup: xt_cgroup: no path or classid specified [ 1158.511503][ T6287] __nla_validate_parse: 2 callbacks suppressed [ 1158.511525][ T6287] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.9400'. [ 1158.596286][T30907] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1158.613491][T30907] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1158.828459][ T6298] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9402'. [ 1158.837486][ T6298] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9402'. [ 1158.841895][T14031] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1159.312589][ T6308] netlink: 36 bytes leftover after parsing attributes in process `syz.2.9403'. [ 1159.395570][ T6318] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9405'. [ 1159.425109][ T6318] xt_recent: hitcount (262144) is larger than allowed maximum (65535) [ 1159.784699][ T6336] xt_cgroup: xt_cgroup: no path or classid specified [ 1159.872926][ T6341] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9412'. [ 1159.970612][ T6343] netlink: 132 bytes leftover after parsing attributes in process `syz.2.9413'. [ 1160.137465][ T6355] netlink: 36 bytes leftover after parsing attributes in process `syz.2.9418'. [ 1160.387956][ T6368] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9420'. [ 1160.408791][ T6368] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9420'. [ 1161.011866][ T6400] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 1161.746114][ T6427] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1161.967882][ T6432] xt_hashlimit: size too large, truncated to 1048576 [ 1162.193444][ T6436] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1162.394745][ T6432] bridge0: port 2(bridge_slave_1) entered disabled state [ 1162.402403][ T6432] bridge0: port 1(bridge_slave_0) entered disabled state [ 1162.492266][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1162.609049][ T6446] FAULT_INJECTION: forcing a failure. [ 1162.609049][ T6446] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1162.622267][ T6446] CPU: 1 UID: 0 PID: 6446 Comm: syz.3.9443 Not tainted syzkaller #0 PREEMPT(full) [ 1162.622293][ T6446] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1162.622304][ T6446] Call Trace: [ 1162.622312][ T6446] [ 1162.622321][ T6446] dump_stack_lvl+0xe8/0x150 [ 1162.622347][ T6446] should_fail_ex+0x40c/0x560 [ 1162.622384][ T6446] _copy_from_iter+0x1d3/0x1660 [ 1162.622408][ T6446] ? rcu_is_watching+0x15/0xb0 [ 1162.622436][ T6446] ? __pfx__copy_from_iter+0x10/0x10 [ 1162.622452][ T6446] ? kmem_cache_alloc_node_noprof+0x3ca/0x680 [ 1162.622487][ T6446] ? netlink_sendmsg+0x650/0xb40 [ 1162.622508][ T6446] ? skb_put+0x112/0x210 [ 1162.622530][ T6446] netlink_sendmsg+0x6c0/0xb40 [ 1162.622560][ T6446] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1162.622584][ T6446] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1162.622613][ T6446] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1162.622638][ T6446] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1162.622661][ T6446] ____sys_sendmsg+0x9b9/0xa20 [ 1162.622681][ T6446] ? __might_fault+0xaf/0x130 [ 1162.622719][ T6446] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1162.622748][ T6446] ? import_iovec+0x73/0xa0 [ 1162.622791][ T6446] ___sys_sendmsg+0x2a5/0x360 [ 1162.622812][ T6446] ? __lock_acquire+0x683/0x2cd0 [ 1162.622837][ T6446] ? __pfx____sys_sendmsg+0x10/0x10 [ 1162.622894][ T6446] ? __fget_files+0x2a/0x420 [ 1162.622918][ T6446] ? __fget_files+0x3a2/0x420 [ 1162.622952][ T6446] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1162.622977][ T6446] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1162.623008][ T6446] ? __pfx_ksys_write+0x10/0x10 [ 1162.623047][ T6446] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1162.623069][ T6446] do_syscall_64+0x174/0x580 [ 1162.623092][ T6446] ? trace_irq_disable+0x3b/0x140 [ 1162.623121][ T6446] ? clear_bhb_loop+0x40/0x90 [ 1162.623145][ T6446] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1162.623166][ T6446] RIP: 0033:0x7f0eb739ce59 [ 1162.623185][ T6446] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1162.623202][ T6446] RSP: 002b:00007f0eb82e1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1162.623223][ T6446] RAX: ffffffffffffffda RBX: 00007f0eb7615fa0 RCX: 00007f0eb739ce59 [ 1162.623239][ T6446] RDX: 0000000000000880 RSI: 0000200000000000 RDI: 0000000000000003 [ 1162.623252][ T6446] RBP: 00007f0eb82e1090 R08: 0000000000000000 R09: 0000000000000000 [ 1162.623265][ T6446] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1162.623277][ T6446] R13: 00007f0eb7616038 R14: 00007f0eb7615fa0 R15: 00007fffded06f18 [ 1162.623309][ T6446] [ 1163.437232][ T6432] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1163.470052][ T6432] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1163.795603][ T6289] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1163.848115][ T6290] net_ratelimit: 57 callbacks suppressed [ 1163.848135][ T6290] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 1163.876670][ T6457] __nla_validate_parse: 3 callbacks suppressed [ 1163.876691][ T6457] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9445'. [ 1163.898882][ T6457] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9445'. [ 1163.928135][T30908] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1163.990424][T30907] bond9: (slave dummy0): failed to get link speed/duplex [ 1164.029200][T30908] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1164.038147][T30908] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 1164.045722][T30908] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1164.153429][T30908] bond9: (slave dummy0): failed to get link speed/duplex [ 1164.199766][ T6473] netlink: 'syz.4.9448': attribute type 10 has an invalid length. [ 1164.208119][ T6473] bridge0: port 2(bridge_slave_1) entered disabled state [ 1164.215777][ T6473] bridge0: port 1(bridge_slave_0) entered disabled state [ 1164.248370][ T6473] bridge0: port 2(bridge_slave_1) entered blocking state [ 1164.255715][ T6473] bridge0: port 2(bridge_slave_1) entered listening state [ 1164.263170][ T6473] bridge0: port 1(bridge_slave_0) entered blocking state [ 1164.270403][ T6473] bridge0: port 1(bridge_slave_0) entered listening state [ 1164.297444][ T6475] netlink: 'syz.3.9447': attribute type 1 has an invalid length. [ 1164.379682][ T6473] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 1164.426354][ T1108] bond9: (slave dummy0): failed to get link speed/duplex [ 1164.530488][T30907] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 1164.581570][T30908] bond9: (slave dummy0): failed to get link speed/duplex [ 1164.647027][ T6485] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 1164.710211][T30907] bond9: (slave dummy0): failed to get link speed/duplex [ 1164.735697][T30907] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 1164.836021][ T6491] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1165.264259][ T6495] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1165.531905][ T6505] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1165.712758][ T6509] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9459'. [ 1165.785899][ T6509] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1165.799811][ T6509] bond2 (unregistering): Released all slaves [ 1166.507629][ T6544] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9465'. [ 1166.516543][ T6544] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9465'. [ 1167.014619][ T6558] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1167.525977][ T6570] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9474'. [ 1167.561682][ T6570] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1167.573466][ T6570] netlink: 9 bytes leftover after parsing attributes in process `syz.3.9474'. [ 1167.696585][ T6576] netlink: 36 bytes leftover after parsing attributes in process `syz.3.9476'. [ 1167.738836][ T6576] vlan1: entered promiscuous mode [ 1167.907684][ T6588] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9480'. [ 1168.059933][ T6598] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1168.394063][ T6603] IPVS: length: 35 != 24 [ 1168.837946][ T6608] xt_NFQUEUE: number of total queues is 0 [ 1168.937098][ T13] net_ratelimit: 75 callbacks suppressed [ 1168.937120][ T13] bond9: (slave dummy0): failed to get link speed/duplex [ 1169.045312][ T6611] syzkaller0: entered promiscuous mode [ 1169.061459][ T6611] syzkaller0: entered allmulticast mode [ 1169.128103][ T6613] netlink: 36 bytes leftover after parsing attributes in process `syz.2.9489'. [ 1169.137335][ T6613] FAULT_INJECTION: forcing a failure. [ 1169.137335][ T6613] name failslab, interval 1, probability 0, space 0, times 0 [ 1169.168692][ T116] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 1169.176138][ T116] bond9: (slave dummy0): failed to get link speed/duplex [ 1169.185759][ T6613] CPU: 1 UID: 0 PID: 6613 Comm: syz.2.9489 Not tainted syzkaller #0 PREEMPT(full) [ 1169.185777][ T6613] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1169.185786][ T6613] Call Trace: [ 1169.185792][ T6613] [ 1169.185798][ T6613] dump_stack_lvl+0xe8/0x150 [ 1169.185824][ T6613] should_fail_ex+0x40c/0x560 [ 1169.185869][ T6613] should_failslab+0xa8/0x100 [ 1169.185886][ T6613] __kmalloc_cache_noprof+0x88/0x660 [ 1169.185928][ T6613] ? nft_delchain+0x54/0x4b0 [ 1169.185943][ T6613] ? nft_delrule+0x91d/0xba0 [ 1169.185960][ T6613] nft_delchain+0x54/0x4b0 [ 1169.185979][ T6613] nft_flush_table+0x1451/0x1900 [ 1169.185998][ T6613] ? nft_pernet+0x23/0x240 [ 1169.186020][ T6613] ? nft_pernet+0x23/0x240 [ 1169.186052][ T6613] nf_tables_deltable+0x5d2/0xe80 [ 1169.186082][ T6613] ? __pfx_nf_tables_deltable+0x10/0x10 [ 1169.186104][ T6613] ? nfnl_pernet+0x23/0x240 [ 1169.186135][ T6613] ? __nla_parse+0x40/0x60 [ 1169.186157][ T6613] nfnetlink_rcv+0x1288/0x28c0 [ 1169.186183][ T6613] ? is_bpf_text_address+0x292/0x2b0 [ 1169.186226][ T6613] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 1169.186286][ T6613] ? netlink_deliver_tap+0x2e/0x1b0 [ 1169.186312][ T6613] ? netlink_deliver_tap+0x2e/0x1b0 [ 1169.186328][ T6613] ? netlink_deliver_tap+0x2e/0x1b0 [ 1169.186349][ T6613] netlink_unicast+0x7bb/0x940 [ 1169.186382][ T6613] netlink_sendmsg+0x813/0xb40 [ 1169.186407][ T6613] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1169.186433][ T6613] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1169.186458][ T6613] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1169.186478][ T6613] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1169.186497][ T6613] ____sys_sendmsg+0x9b9/0xa20 [ 1169.186514][ T6613] ? __might_fault+0xaf/0x130 [ 1169.186539][ T6613] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1169.186563][ T6613] ? import_iovec+0x73/0xa0 [ 1169.186584][ T6613] ___sys_sendmsg+0x2a5/0x360 [ 1169.186600][ T6613] ? __lock_acquire+0x683/0x2cd0 [ 1169.186646][ T6613] ? __pfx____sys_sendmsg+0x10/0x10 [ 1169.186711][ T6613] ? __fget_files+0x2a/0x420 [ 1169.186738][ T6613] ? __fget_files+0x3a2/0x420 [ 1169.186774][ T6613] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1169.186794][ T6613] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1169.186818][ T6613] ? __pfx_ksys_write+0x10/0x10 [ 1169.186848][ T6613] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1169.186865][ T6613] do_syscall_64+0x174/0x580 [ 1169.186884][ T6613] ? trace_irq_disable+0x3b/0x140 [ 1169.186907][ T6613] ? clear_bhb_loop+0x40/0x90 [ 1169.186926][ T6613] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1169.186941][ T6613] RIP: 0033:0x7ff256b9ce59 [ 1169.186956][ T6613] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1169.186969][ T6613] RSP: 002b:00007ff2579ac028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1169.186985][ T6613] RAX: ffffffffffffffda RBX: 00007ff256e15fa0 RCX: 00007ff256b9ce59 [ 1169.186997][ T6613] RDX: 0000000000000880 RSI: 0000200000000000 RDI: 0000000000000003 [ 1169.187006][ T6613] RBP: 00007ff2579ac090 R08: 0000000000000000 R09: 0000000000000000 [ 1169.187016][ T6613] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1169.187025][ T6613] R13: 00007ff256e16038 R14: 00007ff256e15fa0 R15: 00007fffc5f17698 [ 1169.187050][ T6613] [ 1169.531139][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1169.539531][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1169.547890][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1169.594052][ T6300] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 1169.623986][T30907] bond9: (slave dummy0): failed to get link speed/duplex [ 1169.645813][ T6615] bridge0: failed insert local address into bridge forwarding table [ 1169.722984][T30907] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 1169.806694][T30908] bond9: (slave dummy0): failed to get link speed/duplex [ 1169.842015][ T6622] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9491'. [ 1170.119832][ T6636] syzkaller0: entered promiscuous mode [ 1170.123531][ T6635] netlink: 'syz.4.9496': attribute type 89 has an invalid length. [ 1170.125362][ T6636] syzkaller0: entered allmulticast mode [ 1170.170328][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1170.263376][ T6641] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9498'. [ 1170.429687][ T6639] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9498'. [ 1170.763544][ T6647] netlink: 36 bytes leftover after parsing attributes in process `syz.1.9500'. [ 1170.772726][ T6647] FAULT_INJECTION: forcing a failure. [ 1170.772726][ T6647] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1170.786799][ T6647] CPU: 1 UID: 0 PID: 6647 Comm: syz.1.9500 Not tainted syzkaller #0 PREEMPT(full) [ 1170.786826][ T6647] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1170.786841][ T6647] Call Trace: [ 1170.786850][ T6647] [ 1170.786860][ T6647] dump_stack_lvl+0xe8/0x150 [ 1170.786890][ T6647] should_fail_ex+0x40c/0x560 [ 1170.786932][ T6647] _copy_from_user+0x2d/0xb0 [ 1170.786959][ T6647] kstrtouint_from_user+0xd6/0x180 [ 1170.786996][ T6647] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 1170.787049][ T6647] proc_fail_nth_write+0x8e/0x210 [ 1170.787088][ T6647] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1170.787127][ T6647] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1170.787156][ T6647] vfs_write+0x296/0xba0 [ 1170.787205][ T6647] ? __pfx_vfs_write+0x10/0x10 [ 1170.787240][ T6647] ? __fget_files+0x2a/0x420 [ 1170.787272][ T6647] ? __fget_files+0x3a2/0x420 [ 1170.787298][ T6647] ? __fget_files+0x2a/0x420 [ 1170.787337][ T6647] ksys_write+0x150/0x270 [ 1170.787376][ T6647] ? __pfx_ksys_write+0x10/0x10 [ 1170.787419][ T6647] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1170.787449][ T6647] do_syscall_64+0x174/0x580 [ 1170.787474][ T6647] ? trace_irq_disable+0x3b/0x140 [ 1170.787507][ T6647] ? clear_bhb_loop+0x40/0x90 [ 1170.787535][ T6647] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1170.787557][ T6647] RIP: 0033:0x7f6aed95d68e [ 1170.787578][ T6647] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1170.787597][ T6647] RSP: 002b:00007f6aee7e0fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1170.787621][ T6647] RAX: ffffffffffffffda RBX: 00007f6aee7e16c0 RCX: 00007f6aed95d68e [ 1170.787637][ T6647] RDX: 0000000000000001 RSI: 00007f6aee7e10a0 RDI: 0000000000000004 [ 1170.787652][ T6647] RBP: 00007f6aee7e1090 R08: 0000000000000000 R09: 0000000000000000 [ 1170.787666][ T6647] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1170.787679][ T6647] R13: 00007f6aedc16038 R14: 00007f6aedc15fa0 R15: 00007ffc671f8e98 [ 1170.787717][ T6647] [ 1171.494121][ T6664] xt_cgroup: xt_cgroup: no path or classid specified [ 1171.693916][ T6673] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1171.798271][ T6678] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1172.984676][ T6630] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1173.232299][ T6701] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1173.281610][ T6703] netlink: 'syz.3.9522': attribute type 9 has an invalid length. [ 1173.431531][ T6709] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1173.891324][ T6723] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1174.150975][ T6730] netlink: 24 bytes leftover after parsing attributes in process `syz.2.9532'. [ 1174.217206][ T6731] netlink: 'syz.4.9531': attribute type 89 has an invalid length. [ 1174.306400][ T35] net_ratelimit: 64 callbacks suppressed [ 1174.306419][ T35] bond9: (slave dummy0): failed to get link speed/duplex [ 1174.426408][ T116] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 1174.436620][ T6737] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9533'. [ 1174.450611][ T116] bond9: (slave dummy0): failed to get link speed/duplex [ 1174.484076][ T6734] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1174.517051][ T6734] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1174.556873][ T116] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 1174.575562][ T6734] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1174.586326][ T6734] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1174.613026][ T6733] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1174.622786][ T6733] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1175.321266][ T6743] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1177.093264][ T6725] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1177.339337][ T6765] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9542'. [ 1177.555965][ T6771] netlink: 'syz.2.9547': attribute type 9 has an invalid length. [ 1177.670974][ T6779] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1177.693192][ T6775] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1178.060978][ T6790] macvtap1: entered allmulticast mode [ 1178.096657][ T6790] dummy0: entered allmulticast mode [ 1178.110986][ T6790] dummy0: entered promiscuous mode [ 1178.165822][ T6798] netlink: 'syz.0.9554': attribute type 22 has an invalid length. [ 1178.250010][ T6800] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9555'. [ 1178.279482][ T6790] dummy0: left allmulticast mode [ 1178.352389][ T5727] dummy0: left promiscuous mode [ 1179.551363][T30907] net_ratelimit: 65 callbacks suppressed [ 1179.551386][T30907] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 1179.554767][ T6834] netlink: 16 bytes leftover after parsing attributes in process `syz.3.9565'. [ 1179.575986][ T6290] bond9: (slave dummy0): failed to get link speed/duplex [ 1179.692338][ T6290] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 1179.736731][ T6826] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9560'. [ 1179.773719][ C0] bridge0: port 1(bridge_slave_0) entered learning state [ 1179.781153][ C0] bridge0: port 2(bridge_slave_1) entered learning state [ 1179.790209][ T116] bond9: (slave dummy0): failed to get link speed/duplex [ 1179.804431][T14033] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1179.810115][ T6839] syzkaller0: entered promiscuous mode [ 1180.050959][T30907] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 1180.118956][ T116] bond9: (slave dummy0): failed to get link speed/duplex [ 1180.180559][ T6289] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 1180.290734][ T6290] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 1180.342285][ T6289] bond9: (slave dummy0): failed to get link speed/duplex [ 1180.628421][ T6858] netlink: 'syz.1.9574': attribute type 20 has an invalid length. [ 1180.709835][ T6860] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 1180.791294][ T6863] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1180.802856][ T6858] netlink: 'syz.1.9574': attribute type 20 has an invalid length. [ 1181.377721][ T6872] netlink: 36 bytes leftover after parsing attributes in process `syz.1.9580'. [ 1181.509658][ T6876] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9582'. [ 1181.762685][ T6876] bond10 (unregistering): Released all slaves [ 1181.844312][ T6884] vlan3: entered promiscuous mode [ 1181.849496][ T6884] veth0: entered promiscuous mode [ 1182.040471][ T6891] netlink: 'syz.4.9587': attribute type 9 has an invalid length. [ 1182.228781][ T6896] netlink: 240 bytes leftover after parsing attributes in process `syz.2.9589'. [ 1183.146928][ T6920] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9595'. [ 1183.164178][ T6919] netlink: 'syz.1.9596': attribute type 1 has an invalid length. [ 1183.182472][ T6920] netlink: 24 bytes leftover after parsing attributes in process `syz.3.9595'. [ 1183.243654][ T6919] netlink: 'syz.1.9596': attribute type 3 has an invalid length. [ 1183.251524][ T6919] netlink: 224 bytes leftover after parsing attributes in process `syz.1.9596'. [ 1183.393405][ T6919] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9596'. [ 1183.404970][ T6926] netlink: 41 bytes leftover after parsing attributes in process `syz.2.9597'. [ 1183.789204][ T6947] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1184.154478][ T6956] syzkaller0: entered promiscuous mode [ 1184.195004][ T6956] syzkaller0: entered allmulticast mode [ 1184.416612][ T6962] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1184.916508][ T6289] net_ratelimit: 37 callbacks suppressed [ 1184.916529][ T6289] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 1184.929657][ T6289] bond9: (slave dummy0): failed to get link speed/duplex [ 1185.024558][ T6976] __nla_validate_parse: 4 callbacks suppressed [ 1185.024577][ T6976] netlink: 68 bytes leftover after parsing attributes in process `syz.0.9615'. [ 1185.116181][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1185.124572][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1185.132911][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1185.173861][ T6300] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 1185.187277][T30907] bond9: (slave dummy0): failed to get link speed/duplex [ 1185.199351][ T5635] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1185.212071][ T5635] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1185.236758][ T5635] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1185.257947][ T5635] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1185.265622][ T5635] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1185.347694][ T6983] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.9618'. [ 1185.370216][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1185.381451][ T13] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 1185.412908][ T6289] bond9: (slave dummy0): failed to get link speed/duplex [ 1185.503747][ T6988] netlink: 'syz.1.9617': attribute type 1 has an invalid length. [ 1185.615362][ T6988] workqueue: Failed to create a rescuer kthread for wq "bond10": -EINTR [ 1185.766885][ T6997] bridge1: entered promiscuous mode [ 1185.848591][ T6997] bridge1: entered allmulticast mode [ 1186.092010][ T7010] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9623'. [ 1186.161856][ T7005] netlink: 'syz.1.9622': attribute type 4 has an invalid length. [ 1186.165134][T27798] syz_tun (unregistering): left allmulticast mode [ 1186.171798][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 1186.468478][ T7016] bond4 (unregistering): Released all slaves [ 1186.596375][ T7029] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1187.006571][ T7035] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9628'. [ 1187.372895][ T4946] Bluetooth: hci2: command tx timeout [ 1187.380798][ T7041] tap0: tun_chr_ioctl cmd 1074025692 [ 1187.432558][ T7046] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9634'. [ 1187.548383][ T7047] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.9633'. [ 1187.864239][ T7064] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9638'. [ 1187.883101][ T6977] bridge0: port 1(bridge_slave_0) entered blocking state [ 1187.890388][ T6977] bridge0: port 1(bridge_slave_0) entered disabled state [ 1187.897665][ T6977] bridge_slave_0: entered allmulticast mode [ 1187.959247][ T6977] bridge_slave_0: entered promiscuous mode [ 1187.990121][ T6977] bridge0: port 2(bridge_slave_1) entered blocking state [ 1188.013096][ T6977] bridge0: port 2(bridge_slave_1) entered disabled state [ 1188.080853][ T6977] bridge_slave_1: entered allmulticast mode [ 1188.088887][ T6977] bridge_slave_1: entered promiscuous mode [ 1188.234968][ T6977] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1188.288100][ T6977] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1188.352305][ T6977] team0: Port device team_slave_0 added [ 1188.464695][ T6977] team0: Port device team_slave_1 added [ 1188.624011][ T6977] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1188.631012][ T6977] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1188.656917][ T6977] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1188.669650][ T6977] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1188.676713][ T6977] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1188.733505][ T6977] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1188.869602][ T6977] hsr_slave_0: entered promiscuous mode [ 1188.876456][ T6977] hsr_slave_1: entered promiscuous mode [ 1188.886669][ T7103] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9651'. [ 1188.889568][ T7102] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1188.896493][ T6977] debugfs: 'hsr0' already exists in 'hsr' [ 1188.896513][ T6977] Cannot create hsr debugfs directory [ 1189.365165][ T7116] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.9655'. [ 1189.450864][ T4946] Bluetooth: hci2: command tx timeout [ 1189.700496][ T7125] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9658'. [ 1189.752979][ T6977] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 1189.900207][ T6977] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 1190.052692][ T6300] net_ratelimit: 31 callbacks suppressed [ 1190.052714][ T6300] bond9: (slave dummy0): failed to get link speed/duplex [ 1190.081362][ T6289] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 1190.131164][ T6977] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 1190.211062][ T7134] __nla_validate_parse: 1 callbacks suppressed [ 1190.211081][ T7134] netlink: 44 bytes leftover after parsing attributes in process `syz.1.9662'. [ 1190.260841][T30907] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 1190.288985][ T7137] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 1190.405243][ T7144] netlink: 'syz.4.9664': attribute type 89 has an invalid length. [ 1190.467936][T30908] bond9: (slave dummy0): failed to get link speed/duplex [ 1190.513642][ T6289] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 1190.570136][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1190.580635][ T6977] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 1190.746386][ T6289] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 1190.770743][T30907] bond9: (slave dummy0): failed to get link speed/duplex [ 1190.890941][ T1108] bond9: (slave dummy0): failed to get link speed/duplex [ 1190.949907][ T6300] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 1191.101104][ T7152] bond10: (slave tunl0): Device is not bonding slave [ 1191.128220][ T7152] bond10: option active_slave: invalid value (tunl0) [ 1191.180502][ T7152] bond10 (unregistering): Released all slaves [ 1191.337081][ T7167] netlink: 4356 bytes leftover after parsing attributes in process `syz.3.9669'. [ 1191.361120][ T7167] netlink: 4356 bytes leftover after parsing attributes in process `syz.3.9669'. [ 1191.494392][ T6977] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1191.531691][ T4946] Bluetooth: hci2: command tx timeout [ 1191.567419][ T6977] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1191.629654][ T6977] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1191.694639][ T6977] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1191.711462][ T6977] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1191.748233][ T6977] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1191.756190][ T6977] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1191.782936][ T6977] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1191.928495][ T7182] bridge0: port 2(bridge_slave_1) entered disabled state [ 1191.971259][ T7182] bridge_slave_1: left allmulticast mode [ 1191.976972][ T7182] bridge_slave_1: left promiscuous mode [ 1192.005691][ T7182] bridge0: port 2(bridge_slave_1) entered disabled state [ 1192.284347][ T6977] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1192.369702][ T6977] 8021q: adding VLAN 0 to HW filter on device team0 [ 1192.396545][ T7194] netlink: 'syz.0.9676': attribute type 89 has an invalid length. [ 1192.445795][ T6289] bridge0: port 1(bridge_slave_0) entered blocking state [ 1192.452958][ T6289] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1192.477308][ T6289] bridge0: port 2(bridge_slave_1) entered blocking state [ 1192.484495][ T6289] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1192.643389][ T6977] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1192.718978][ T6977] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1192.933721][ T7203] xt_cgroup: xt_cgroup: no path or classid specified [ 1193.165086][ T7210] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1193.230797][ T7213] netlink: 128 bytes leftover after parsing attributes in process `syz.4.9681'. [ 1193.611136][ T4946] Bluetooth: hci2: command tx timeout [ 1193.942818][ T7227] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 1194.041732][ T6977] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1194.257693][ T7242] mac80211_hwsim hwsim81 wlan0: entered promiscuous mode [ 1194.266017][ T7242] mac80211_hwsim hwsim81 wlan0: entered allmulticast mode [ 1194.348115][ T7242] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9688'. [ 1194.444596][ T6290] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1194.455562][ T7242] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9688'. [ 1194.463864][ T6977] veth0_vlan: entered promiscuous mode [ 1194.473387][ T6300] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1194.488249][ T7252] netlink: 'syz.1.9687': attribute type 89 has an invalid length. [ 1194.563235][ T6977] veth1_vlan: entered promiscuous mode [ 1194.578804][ T6300] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1194.587584][ T6300] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1194.670779][ T7254] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 1194.693358][ T6977] veth0_macvtap: entered promiscuous mode [ 1194.704330][ T6977] veth1_macvtap: entered promiscuous mode [ 1194.780365][ T6977] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1194.794965][ T6977] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1194.817353][ T6300] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1194.833770][ T6300] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1194.874419][ T1108] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1194.892834][ T1108] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1194.928216][ T7258] xt_cgroup: xt_cgroup: no path or classid specified [ 1195.033425][ T7261] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9692'. [ 1195.111098][ T7261] bond1 (unregistering): Released all slaves [ 1195.130163][ C0] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1195.137482][ C0] bridge0: topology change detected, propagating [ 1195.144216][ C0] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1195.151473][ C0] bridge0: topology change detected, propagating [ 1195.184842][ T1108] net_ratelimit: 36 callbacks suppressed [ 1195.184862][ T1108] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 1195.230760][ T6300] bond9: (slave dummy0): failed to get link speed/duplex [ 1195.346831][ T7267] netlink: 24 bytes leftover after parsing attributes in process `syz.3.9694'. [ 1195.409641][ T6300] bond9: (slave dummy0): failed to get link speed/duplex [ 1195.417650][ T6300] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 1195.501443][ T7273] tun0: tun_chr_ioctl cmd 2148553947 [ 1195.631719][ T13] bond9: (slave dummy0): failed to get link speed/duplex [ 1195.639170][ T13] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 1195.770499][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1195.781961][ T13] bond9: (slave dummy0): failed to get link speed/duplex [ 1195.867555][ T6290] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 1196.000101][ T13] bond9: (slave dummy0): failed to get link speed/duplex [ 1196.752301][ T7291] xt_cgroup: xt_cgroup: no path or classid specified [ 1196.817941][ T7293] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input10 [ 1197.126103][ T7299] RDS: rds_bind could not find a transport for ::ffff:10.1.1.3, load rds_tcp or rds_rdma? [ 1197.300755][ T7246] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1197.499753][ T6300] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1197.538138][ T6300] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1197.609584][ T6289] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1197.670866][ T6289] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1198.862964][ T7331] syzkaller0: entered promiscuous mode [ 1198.868495][ T7331] syzkaller0: entered allmulticast mode [ 1199.103573][ T7337] batadv_slave_1: left promiscuous mode [ 1199.141309][ T7337] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1200.043199][ T7353] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9714'. [ 1200.246285][ T7355] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9714'. [ 1200.332393][ T6290] net_ratelimit: 35 callbacks suppressed [ 1200.332412][ T6290] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 1200.360908][ T6289] bond9: (slave dummy0): failed to get link speed/duplex [ 1200.382981][ T7346] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1200.521199][ T13] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 1200.530886][ T13] bond9: (slave dummy0): failed to get link speed/duplex [ 1200.739717][ T6289] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 1200.754690][ T7361] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9715'. [ 1200.807156][ T7361] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9715'. [ 1200.849482][ T6289] bond9: (slave dummy0): failed to get link speed/duplex [ 1200.970180][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1201.243535][ T6290] bond9: (slave dummy0): failed to get link speed/duplex [ 1201.251184][ T6290] bond8: (slave ip6gretap1): failed to get link speed/duplex [ 1202.344864][ T42] IPVS: starting estimator thread 0... [ 1202.629633][ T7381] IPVS: using max 28 ests per chain, 67200 per kthread [ 1202.747491][ T7395] netlink: 80 bytes leftover after parsing attributes in process `syz.1.9718'. [ 1202.810307][ C0] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 1202.927525][ T13] erspan0: left allmulticast mode [ 1202.941582][ T13] erspan0: left promiscuous mode [ 1202.953243][ T13] bridge6: port 1(erspan0) entered disabled state [ 1202.994170][ T13] pimreg: left allmulticast mode [ 1203.376941][ T13] bond3 (unregistering): (slave geneve3): Releasing active interface [ 1203.450213][ T13] bond2 (unregistering): (slave bridge3): Releasing backup interface [ 1203.498018][ T13] bond5 (unregistering): (slave bridge7): Releasing backup interface [ 1203.506148][ T13] bridge7 (unregistering): left promiscuous mode [ 1203.512728][ T13] bridge7 (unregistering): left allmulticast mode [ 1203.609811][ T13] bond0 (unregistering): Released all slaves [ 1203.622805][ T13] bond1 (unregistering): Released all slaves [ 1203.654888][ T13] bond2 (unregistering): Released all slaves [ 1203.673935][ T13] bond3 (unregistering): Released all slaves [ 1203.692508][ T13] bond4 (unregistering): Released all slaves [ 1203.711455][ T13] bond5 (unregistering): Released all slaves [ 1203.730670][ T13] bond6 (unregistering): Released all slaves [ 1204.026874][ T13] tipc: Disabling bearer [ 1204.052620][ T13] tipc: Left network mode [ 1204.111639][ T7409] syzkaller1: entered promiscuous mode [ 1204.117244][ T7409] syzkaller1: entered allmulticast mode [ 1204.320429][ T13] ================================================================== [ 1204.328557][ T13] BUG: KASAN: slab-use-after-free in fib_rules_lookup+0x15e/0xeb0 [ 1204.336505][ T13] Read of size 8 at addr ffff888049e0d180 by task kworker/u8:1/13 [ 1204.344351][ T13] [ 1204.346728][ T13] CPU: 1 UID: 0 PID: 13 Comm: kworker/u8:1 Not tainted syzkaller #0 PREEMPT(full) [ 1204.346751][ T13] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1204.346765][ T13] Workqueue: netns cleanup_net [ 1204.346799][ T13] Call Trace: [ 1204.346808][ T13] [ 1204.346816][ T13] dump_stack_lvl+0xe8/0x150 [ 1204.346839][ T13] print_address_description+0x55/0x1e0 [ 1204.346861][ T13] ? fib_rules_lookup+0x15e/0xeb0 [ 1204.346883][ T13] print_report+0x58/0x70 [ 1204.346900][ T13] kasan_report+0x117/0x150 [ 1204.346943][ T13] ? fib_rules_lookup+0x15e/0xeb0 [ 1204.346965][ T13] ? fib_rules_lookup+0x99/0xeb0 [ 1204.346984][ T13] fib_rules_lookup+0x15e/0xeb0 [ 1204.347006][ T13] ? fib_rules_lookup+0x99/0xeb0 [ 1204.347029][ T13] ? __pfx_fib_rules_lookup+0x10/0x10 [ 1204.347049][ T13] ? l3mdev_update_flow+0x26/0x610 [ 1204.347072][ T13] ? l3mdev_update_flow+0x4ad/0x610 [ 1204.347118][ T13] __fib_lookup+0x106/0x210 [ 1204.347137][ T13] ? unwind_next_frame+0x8f/0x2550 [ 1204.347161][ T13] ? __pfx___fib_lookup+0x10/0x10 [ 1204.347183][ T13] ? unwind_next_frame+0x8f/0x2550 [ 1204.347217][ T13] ? fib_lookup+0x49/0x440 [ 1204.347240][ T13] ? ip_route_output_key_hash_rcu+0x274/0x2720 [ 1204.347286][ T13] ip_route_output_key_hash_rcu+0x294/0x2720 [ 1204.347319][ T13] ? ip_route_output_key_hash+0xd8/0x2a0 [ 1204.347347][ T13] ? ip_route_output_key_hash+0xd8/0x2a0 [ 1204.347376][ T13] ip_route_output_key_hash+0x18d/0x2a0 [ 1204.347406][ T13] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 1204.347437][ T13] ? lock_acquire+0x106/0x350 [ 1204.347462][ T13] ip_route_output_flow+0x2a/0x150 [ 1204.347490][ T13] ip4_datagram_release_cb+0x89d/0xbe0 [ 1204.347516][ T13] ? ip4_datagram_release_cb+0xa2/0xbe0 [ 1204.347543][ T13] ? __pfx_ip4_datagram_release_cb+0x10/0x10 [ 1204.347573][ T13] ? do_raw_spin_lock+0x12b/0x2f0 [ 1204.347605][ T13] ? release_sock+0x2f/0x260 [ 1204.347634][ T13] release_sock+0x206/0x260 [ 1204.347662][ T13] inet_shutdown+0x2b1/0x390 [ 1204.347691][ T13] udp_tunnel_sock_release+0x6d/0x80 [ 1204.347721][ T13] fou_exit_net+0x17d/0x1f0 [ 1204.347745][ T13] ops_undo_list+0x43d/0x8d0 [ 1204.347777][ T13] ? __pfx_ops_undo_list+0x10/0x10 [ 1204.347807][ T13] ? idr_destroy+0x218/0x290 [ 1204.347826][ T13] ? do_raw_spin_unlock+0xf5/0x210 [ 1204.347856][ T13] cleanup_net+0x572/0x810 [ 1204.347886][ T13] ? __pfx_cleanup_net+0x10/0x10 [ 1204.347917][ T13] ? rcu_is_watching+0x15/0xb0 [ 1204.347942][ T13] ? process_scheduled_works+0xa20/0x14e0 [ 1204.347961][ T13] process_scheduled_works+0xa8e/0x14e0 [ 1204.347995][ T13] ? __pfx_process_scheduled_works+0x10/0x10 [ 1204.348019][ T13] ? assign_work+0x3cf/0x5d0 [ 1204.348040][ T13] worker_thread+0xa47/0xfb0 [ 1204.348074][ T13] kthread+0x389/0x470 [ 1204.348100][ T13] ? __pfx_worker_thread+0x10/0x10 [ 1204.348119][ T13] ? __pfx_kthread+0x10/0x10 [ 1204.348144][ T13] ret_from_fork+0x514/0xb70 [ 1204.348166][ T13] ? __pfx_ret_from_fork+0x10/0x10 [ 1204.348185][ T13] ? __switch_to+0xc89/0x1420 [ 1204.348215][ T13] ? __pfx_kthread+0x10/0x10 [ 1204.348251][ T13] ret_from_fork_asm+0x1a/0x30 [ 1204.348281][ T13] [ 1204.348288][ T13] [ 1204.655637][ T13] Allocated by task 27798: [ 1204.660061][ T13] kasan_save_track+0x3e/0x80 [ 1204.664770][ T13] __kasan_kmalloc+0x93/0xb0 [ 1204.669398][ T13] __kmalloc_node_track_caller_noprof+0x4d7/0x7b0 [ 1204.675850][ T13] kmemdup_noprof+0x2b/0x70 [ 1204.680375][ T13] fib_rules_register+0x2f/0x400 [ 1204.685449][ T13] fib4_rules_init+0x21/0x160 [ 1204.690168][ T13] fib_net_init+0x17a/0x3e0 [ 1204.694696][ T13] ops_init+0x35d/0x5d0 [ 1204.698908][ T13] setup_net+0x118/0x350 [ 1204.703170][ T13] copy_net_ns+0x4f9/0x720 [ 1204.707610][ T13] create_new_namespaces+0x3f0/0x6b0 [ 1204.712922][ T13] unshare_nsproxy_namespaces+0x149/0x190 [ 1204.718665][ T13] ksys_unshare+0x57d/0xa00 [ 1204.723178][ T13] __x64_sys_unshare+0x38/0x50 [ 1204.727966][ T13] do_syscall_64+0x174/0x580 [ 1204.732575][ T13] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1204.738526][ T13] [ 1204.740855][ T13] Freed by task 23: [ 1204.744671][ T13] kasan_save_track+0x3e/0x80 [ 1204.749454][ T13] kasan_save_free_info+0x40/0x50 [ 1204.754498][ T13] __kasan_slab_free+0x5c/0x80 [ 1204.759286][ T13] __rcu_free_sheaf_prepare+0x12d/0x2a0 [ 1204.764843][ T13] rcu_free_sheaf+0x31/0x200 [ 1204.769445][ T13] rcu_core+0x78b/0x10a0 [ 1204.773701][ T13] handle_softirqs+0x225/0x840 [ 1204.778480][ T13] run_ksoftirqd+0x36/0x60 [ 1204.782918][ T13] smpboot_thread_fn+0x57c/0xa80 [ 1204.787875][ T13] kthread+0x389/0x470 [ 1204.791976][ T13] ret_from_fork+0x514/0xb70 [ 1204.796578][ T13] ret_from_fork_asm+0x1a/0x30 [ 1204.801373][ T13] [ 1204.803711][ T13] The buggy address belongs to the object at ffff888049e0d100 [ 1204.803711][ T13] which belongs to the cache kmalloc-192 of size 192 [ 1204.817788][ T13] The buggy address is located 128 bytes inside of [ 1204.817788][ T13] freed 192-byte region [ffff888049e0d100, ffff888049e0d1c0) [ 1204.831598][ T13] [ 1204.833928][ T13] The buggy address belongs to the physical page: [ 1204.840353][ T13] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x49e0d [ 1204.849123][ T13] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 1204.856244][ T13] page_type: f5(slab) [ 1204.860237][ T13] raw: 00fff00000000000 ffff88813fe163c0 dead000000000100 dead000000000122 [ 1204.868853][ T13] raw: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000 [ 1204.877460][ T13] page dumped because: kasan: bad access detected [ 1204.883882][ T13] page_owner tracks the page as allocated [ 1204.889623][ T13] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xd2cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 15517, tgid 15517 (syz-executor), ts 367957528832, free_ts 367141483112 [ 1204.910824][ T13] post_alloc_hook+0x22d/0x280 [ 1204.915617][ T13] get_page_from_freelist+0x24ae/0x2530 [ 1204.921187][ T13] __alloc_frozen_pages_noprof+0x18d/0x380 [ 1204.927021][ T13] allocate_slab+0x77/0x660 [ 1204.931536][ T13] refill_objects+0x336/0x3d0 [ 1204.936233][ T13] __pcs_replace_empty_main+0x320/0x720 [ 1204.941795][ T13] __kmalloc_noprof+0x464/0x750 [ 1204.946679][ T13] memcg_list_lru_alloc+0x273/0x800 [ 1204.951885][ T13] __memcg_slab_post_alloc_hook+0x395/0xe60 [ 1204.957802][ T13] kmem_cache_alloc_lru_noprof+0x342/0x640 [ 1204.963623][ T13] __d_alloc+0x37/0x6e0 [ 1204.967797][ T13] d_alloc_parallel+0xe3/0x1600 [ 1204.972775][ T13] __lookup_slow+0x137/0x410 [ 1204.977385][ T13] lookup_slow+0x53/0x70 [ 1204.981637][ T13] link_path_walk+0x12a5/0x1910 [ 1204.986509][ T13] path_openat+0x2c6/0x3890 [ 1204.991034][ T13] page last free pid 15477 tgid 15470 stack trace: [ 1204.997548][ T13] __free_frozen_pages+0xc0d/0xd20 [ 1205.002680][ T13] tlb_remove_table_rcu+0x85/0x100 [ 1205.007819][ T13] rcu_core+0x78b/0x10a0 [ 1205.012077][ T13] handle_softirqs+0x225/0x840 [ 1205.016858][ T13] __irq_exit_rcu+0xca/0x220 [ 1205.021464][ T13] irq_exit_rcu+0x9/0x30 [ 1205.025729][ T13] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1205.031373][ T13] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1205.037361][ T13] [ 1205.039699][ T13] Memory state around the buggy address: [ 1205.045348][ T13] ffff888049e0d080: 00 fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1205.053414][ T13] ffff888049e0d100: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1205.061483][ T13] >ffff888049e0d180: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 1205.069560][ T13] ^ [ 1205.073632][ T13] ffff888049e0d200: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1205.081701][ T13] ffff888049e0d280: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 1205.089771][ T13] ================================================================== [ 1205.137622][ T13] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1205.144877][ T13] CPU: 1 UID: 0 PID: 13 Comm: kworker/u8:1 Not tainted syzkaller #0 PREEMPT(full) [ 1205.154184][ T13] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1205.164270][ T13] Workqueue: netns cleanup_net [ 1205.169062][ T13] Call Trace: [ 1205.172355][ T13] [ 1205.175294][ T13] vpanic+0x56c/0xa60 [ 1205.179287][ T13] ? rcu_is_watching+0x15/0xb0 [ 1205.184066][ T13] ? __pfx_vpanic+0x10/0x10 [ 1205.188597][ T13] panic+0xc5/0xd0 [ 1205.192378][ T13] ? __pfx_panic+0x10/0x10 [ 1205.196814][ T13] ? fib_rules_lookup+0x15e/0xeb0 [ 1205.201874][ T13] ? fib_rules_lookup+0x15e/0xeb0 [ 1205.206910][ T13] check_panic_on_warn+0x89/0xb0 [ 1205.211871][ T13] ? fib_rules_lookup+0x15e/0xeb0 [ 1205.216927][ T13] end_report+0x73/0x170 [ 1205.221244][ T13] ? fib_rules_lookup+0x15e/0xeb0 [ 1205.226307][ T13] kasan_report+0x128/0x150 [ 1205.230864][ T13] ? fib_rules_lookup+0x15e/0xeb0 [ 1205.235913][ T13] ? fib_rules_lookup+0x99/0xeb0 [ 1205.240877][ T13] fib_rules_lookup+0x15e/0xeb0 [ 1205.245759][ T13] ? fib_rules_lookup+0x99/0xeb0 [ 1205.250713][ T13] ? __pfx_fib_rules_lookup+0x10/0x10 [ 1205.256145][ T13] ? l3mdev_update_flow+0x26/0x610 [ 1205.261277][ T13] ? l3mdev_update_flow+0x4ad/0x610 [ 1205.266495][ T13] __fib_lookup+0x106/0x210 [ 1205.271026][ T13] ? unwind_next_frame+0x8f/0x2550 [ 1205.276157][ T13] ? __pfx___fib_lookup+0x10/0x10 [ 1205.281198][ T13] ? unwind_next_frame+0x8f/0x2550 [ 1205.286349][ T13] ? fib_lookup+0x49/0x440 [ 1205.290801][ T13] ? ip_route_output_key_hash_rcu+0x274/0x2720 [ 1205.296998][ T13] ip_route_output_key_hash_rcu+0x294/0x2720 [ 1205.303008][ T13] ? ip_route_output_key_hash+0xd8/0x2a0 [ 1205.308663][ T13] ? ip_route_output_key_hash+0xd8/0x2a0 [ 1205.314314][ T13] ip_route_output_key_hash+0x18d/0x2a0 [ 1205.319891][ T13] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 1205.325986][ T13] ? lock_acquire+0x106/0x350 [ 1205.330688][ T13] ip_route_output_flow+0x2a/0x150 [ 1205.335833][ T13] ip4_datagram_release_cb+0x89d/0xbe0 [ 1205.341309][ T13] ? ip4_datagram_release_cb+0xa2/0xbe0 [ 1205.346892][ T13] ? __pfx_ip4_datagram_release_cb+0x10/0x10 [ 1205.352889][ T13] ? do_raw_spin_lock+0x12b/0x2f0 [ 1205.357954][ T13] ? release_sock+0x2f/0x260 [ 1205.362573][ T13] release_sock+0x206/0x260 [ 1205.367102][ T13] inet_shutdown+0x2b1/0x390 [ 1205.371716][ T13] udp_tunnel_sock_release+0x6d/0x80 [ 1205.377044][ T13] fou_exit_net+0x17d/0x1f0 [ 1205.381566][ T13] ops_undo_list+0x43d/0x8d0 [ 1205.386207][ T13] ? __pfx_ops_undo_list+0x10/0x10 [ 1205.391354][ T13] ? idr_destroy+0x218/0x290 [ 1205.395965][ T13] ? do_raw_spin_unlock+0xf5/0x210 [ 1205.401116][ T13] cleanup_net+0x572/0x810 [ 1205.405590][ T13] ? __pfx_cleanup_net+0x10/0x10 [ 1205.410569][ T13] ? rcu_is_watching+0x15/0xb0 [ 1205.415358][ T13] ? process_scheduled_works+0xa20/0x14e0 [ 1205.421105][ T13] process_scheduled_works+0xa8e/0x14e0 [ 1205.426691][ T13] ? __pfx_process_scheduled_works+0x10/0x10 [ 1205.432696][ T13] ? assign_work+0x3cf/0x5d0 [ 1205.437303][ T13] worker_thread+0xa47/0xfb0 [ 1205.441922][ T13] kthread+0x389/0x470 [ 1205.446012][ T13] ? __pfx_worker_thread+0x10/0x10 [ 1205.451136][ T13] ? __pfx_kthread+0x10/0x10 [ 1205.455759][ T13] ret_from_fork+0x514/0xb70 [ 1205.460382][ T13] ? __pfx_ret_from_fork+0x10/0x10 [ 1205.465529][ T13] ? __switch_to+0xc89/0x1420 [ 1205.470233][ T13] ? __pfx_kthread+0x10/0x10 [ 1205.474844][ T13] ret_from_fork_asm+0x1a/0x30 [ 1205.479629][ T13] [ 1205.483255][ T13] Kernel Offset: disabled [ 1205.487588][ T13] Rebooting in 86400 seconds..