last executing test programs: 18.623914178s ago: executing program 2 (id=3309): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x45, &(0x7f0000000000)=0xc9, 0x4) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r3, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e6400"], 0x3c}}, 0x40000) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r4) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f00000000c0)={'wpan1\x00', 0x0}) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r7, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000006c0)={0x2c, r5, 0xe215691cdce0287b, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_SEC_DEVKEY={0x10, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0202}}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x810}, 0x4004000) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x4) sendmsg$IPVS_CMD_SET_INFO(r9, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r9, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_MASTER={0x8, 0xa, r10}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2000c051}, 0x40000) 17.970617512s ago: executing program 2 (id=3313): r0 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x1234, 0x2, 0x10, {0x2, 0x5678, @empty}}, 0x24) listen(r0, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) accept4$phonet_pipe(r1, 0x0, 0x0, 0x80800) sendmsg(r0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[{0x10, 0x110, 0xe}], 0x10}, 0x0) r2 = socket$rxrpc(0x21, 0x2, 0x2) sendmsg(r2, &(0x7f0000000100)={&(0x7f0000000800)=@rxrpc=@in4={0x21, 0x1234, 0x2, 0x10, {0x2, 0x5678, @loopback}}, 0x24, &(0x7f0000000200)=[{&(0x7f0000000300), 0x1000}], 0x1, &(0x7f0000000400)=[{0x18, 0x110, 0x1, "0100000000000000"}], 0x18}, 0x0) r3 = socket(0x2, 0x80805, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x7a, &(0x7f0000000340)={0x0, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r3, &(0x7f0000001bc0)=[{&(0x7f0000000300)=@in6={0xa, 0x4e21, 0x8, @local, 0x200}, 0x1c, &(0x7f0000000dc0)=[{&(0x7f0000000600)='Cqk', 0x3}], 0x1, &(0x7f0000000e40)=[@sndrcv={0x30, 0x84, 0x1, {0xf50f, 0x5, 0x2, 0x1, 0x9, 0x6, 0xc0000, 0x6, r5}}], 0x30, 0x81}], 0x1, 0x40000) recvmsg(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000280)=""/227, 0xe3}], 0x1}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newtaction={0x88, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x74, 0x1, [@m_mirred={0x70, 0x1, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x4, {{0xffdff7e8, 0x0, 0x3, 0x407}}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x0, 0x1, 0x400, 0xfffffffb}, 0x2}}]}, {0x1}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x4040880}, 0x0) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) listen(r7, 0x2) socket$kcm(0x10, 0x2, 0x4) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r8, 0x84, 0xc, &(0x7f0000000280)=@assoc_value={0x0}, &(0x7f0000000880)=0x8) r10 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r10, &(0x7f0000000c00)=[{{&(0x7f0000000140)={0x2, 0x0, @rand_addr=0x64010100}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000240)='P', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r10, 0x84, 0x7c, &(0x7f0000000100)={r9, 0x100, 0x12}, 0x8) socket$nl_netfilter(0x10, 0x3, 0xc) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="60000000100001060000000000000000000000000000000000000000000000000d000300626172657564703000000000300012000c00010062617265756470002000020006000100b51200000600020000080000060003"], 0x60}}, 0x0) 17.561422563s ago: executing program 2 (id=3316): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_ADD_TX_TS(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, 0x0, 0x8, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x3}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xf}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x38}, 0x1, 0x0, 0x0, 0x880}, 0x840) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0700000004000000000900000100000028"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x9, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000ffffffff000000000300000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000001b000000b700000000000000850000000700000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x45, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r3}, 0xc) 17.190833619s ago: executing program 2 (id=3320): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) r3 = accept4$alg(r2, 0x0, 0x0, 0x0) sendmmsg$sock(r3, &(0x7f0000003380)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000002380)="fb", 0x1}], 0x1}}], 0x1, 0x20000000) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r4, 0x0, 0x10000008ebc, 0x5) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=ANY=[@ANYBLOB="bc000000000105060100000000000000020000003400018014000180080001007f000001080002007f0000011c00028005000100060000000600020030390000060003"], 0xbc}}, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100fcfffffffcdbdf250700000008000300", @ANYRES32=r5, @ANYBLOB="140004006e6963766630000000000000000000000800050006000000140017800400"], 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="380000001c00010229bd7000ffdbfa2507000000", @ANYRES32, @ANYBLOB="40004c060a0002"], 0x38}, 0x1, 0x0, 0x0, 0x44801}, 0x840) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="280000000000220609000240736c77d65c14c0af802000000000000000000000db7d2708087ddffc663a23d3f958e7d8f6a8d9d0c64a93bb94623209010701b868dfb344ef1b2c001d758945cf3798063482d782ee03faf03ea479cd8d129580a37c0a08ef34db69a7fb200a9d83c78e5ef94f60332424e3a961362bc29284a31db4187e87e36f27d4091a82ffadd7c7160c470d0123c9cb35113f69776e2331385b8799351427f2b70953c8ef4e428a62927e331a8c82fc60f83dd5cb3156d9ef97f5d2c88f8d12"], 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r6) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="340000001c00010429bd7000fddbdf2507000000", @ANYRES32=r8], 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x20040040) 16.548357677s ago: executing program 2 (id=3325): r0 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x1234, 0x2, 0x10, {0x2, 0x5678, @empty}}, 0x24) listen(r0, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) accept4$phonet_pipe(r1, 0x0, 0x0, 0x80800) sendmsg(r0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[{0x10, 0x110, 0x1}, {0x10, 0x110, 0xe}], 0x20}, 0x0) r2 = socket$rxrpc(0x21, 0x2, 0x2) sendmsg(r2, &(0x7f0000000100)={&(0x7f0000000800)=@rxrpc=@in4={0x21, 0x1234, 0x2, 0x10, {0x2, 0x5678, @loopback}}, 0x24, &(0x7f0000000200)=[{&(0x7f0000000300), 0x1000}], 0x1, &(0x7f0000000400)=[{0x18, 0x110, 0x1, "0100000000000000"}], 0x18}, 0x0) r3 = socket(0x2, 0x80805, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x7a, &(0x7f0000000340)={0x0, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r3, &(0x7f0000001bc0)=[{&(0x7f0000000300)=@in6={0xa, 0x4e21, 0x8, @local, 0x200}, 0x1c, &(0x7f0000000dc0)=[{&(0x7f0000000600)='Cqk', 0x3}], 0x1, &(0x7f0000000e40)=[@sndrcv={0x30, 0x84, 0x1, {0xf50f, 0x5, 0x2, 0x1, 0x9, 0x6, 0xc0000, 0x6, r5}}], 0x30, 0x81}], 0x1, 0x40000) recvmsg(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000280)=""/227, 0xe3}], 0x1}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newtaction={0x88, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x74, 0x1, [@m_mirred={0x70, 0x1, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x4, {{0xffdff7e8, 0x0, 0x3, 0x407}}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x0, 0x1, 0x400, 0xfffffffb}, 0x2}}]}, {0x1}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x4040880}, 0x0) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) listen(r7, 0x2) socket$kcm(0x10, 0x2, 0x4) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r8, 0x84, 0xc, &(0x7f0000000280)=@assoc_value={0x0}, &(0x7f0000000880)=0x8) r10 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r10, &(0x7f0000000c00)=[{{&(0x7f0000000140)={0x2, 0x0, @rand_addr=0x64010100}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000240)='P', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r10, 0x84, 0x7c, &(0x7f0000000100)={r9, 0x100, 0x12}, 0x8) socket$nl_netfilter(0x10, 0x3, 0xc) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="60000000100001060000000000000000000000000000000000000000000000000d000300626172657564703000000000300012000c00010062617265756470002000020006000100b51200000600020000080000060003"], 0x60}}, 0x0) 15.924429812s ago: executing program 2 (id=3328): close(0x3) r0 = socket$inet_tcp(0x2, 0x1, 0x6) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_buf(r0, 0x6, 0x1f, &(0x7f0000000400)='espintcp', 0x8) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x32600) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) r2 = socket(0x2, 0x80805, 0x0) socket$inet_sctp(0x2, 0x0, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xc, &(0x7f0000000180)=@assoc_value={0x0}, &(0x7f0000000280)=0x4e) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f00000001c0)={r3, 0x407}, 0x8) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r1, 0x84, 0x23, &(0x7f0000000040)={r3, 0x7}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000200)=[@in6={0xa, 0x4e21, 0x401, @private2, 0xb}]}, &(0x7f0000000240)=0x10) syz_emit_ethernet(0x25e, &(0x7f0000000100)=ANY=[@ANYBLOB="eaab5c573b92bbbbbbbbbbbb86dd6000cd0402283afffe8000000000000000000000000000bbff02000000000000000000000000000186009078010000000000000000000000050aa78c000005dc8080a2030003004003493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34060600000000000000dac15084dbaf736b41e5af050200010000050000200000260004000218fe906d26efe39393fe08f73eabc57d7b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e464a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf3915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978001d06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee4d7452448917928745f24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"], 0x0) r4 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r4, 0x10f, 0x87, &(0x7f00000008c0), 0x43) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r5 = socket(0x28, 0x5, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) recvmmsg$unix(r5, &(0x7f0000004fc0)=[{{&(0x7f0000001740), 0x6e, &(0x7f0000000bc0)=[{&(0x7f00000004c0)=""/62, 0x3e}, {&(0x7f0000000600)=""/177, 0xb1}, {&(0x7f00000006c0)=""/154, 0x9a}, {&(0x7f0000000780)=""/231, 0xe7}, {&(0x7f0000000900)=""/254, 0xfe}, {&(0x7f0000000a00)=""/145, 0x91}, {&(0x7f0000000ac0)=""/218, 0xda}], 0x7, &(0x7f0000000c40)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xe8}}, {{&(0x7f0000000d40), 0x6e, &(0x7f0000001000)=[{&(0x7f0000000dc0)=""/19, 0x13}, {&(0x7f0000000e00)=""/165, 0xa5}, {&(0x7f00000017c0)=""/257, 0x101}, {&(0x7f0000000fc0)=""/24, 0x18}], 0x4, &(0x7f0000001040)=[@rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x68}}, {{&(0x7f0000000500)=@abs, 0x6e, &(0x7f00000011c0)=[{&(0x7f0000001140)=""/66, 0x42}], 0x1}}, {{&(0x7f0000000440)=@abs, 0x6e, &(0x7f0000001400)=[{&(0x7f0000001300)=""/246, 0xf6}], 0x1}}, {{&(0x7f0000001440)=@abs, 0x6e, &(0x7f0000003340)=[{&(0x7f00000014c0)=""/181, 0xb5}, {&(0x7f0000001580)=""/199, 0xc7}, {&(0x7f0000001680)=""/51, 0x33}, {&(0x7f00000016c0)=""/116, 0x74}, {&(0x7f0000002340)=""/4096, 0x1000}], 0x5, &(0x7f00000033c0)=[@cred={{0x1c}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x100}}, {{&(0x7f00000034c0), 0x6e, &(0x7f0000003780)=[{&(0x7f0000003540)=""/159, 0x9f}, {&(0x7f0000003600)=""/249, 0xf9}, {&(0x7f0000003700)=""/62, 0x3e}, {&(0x7f00000010c0)=""/70, 0x46}], 0x4}}, {{&(0x7f00000037c0), 0x6e, &(0x7f0000003880)=[{&(0x7f0000003840)}], 0x1, &(0x7f00000038c0)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xb8}}, {{&(0x7f0000003980), 0x6e, &(0x7f0000004d40), 0x0, &(0x7f0000000ec0)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x88}}, {{&(0x7f0000004e40)=@abs, 0x6e, &(0x7f0000004f40)=[{&(0x7f0000004ec0)=""/108, 0x6c}], 0x1, &(0x7f0000000080)=[@cred={{0x1c}}], 0x20}}], 0x9, 0x40002002, &(0x7f0000005240)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x20}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1, 0x8}}}]}, 0xfffffffffffffe7b}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002300)=@newtfilter={0x40, 0x2c, 0xd27, 0x30bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r8, {0x0, 0x9}, {}, {0x10, 0x10}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_FLAGS={0x8, 0x3, 0x6}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20048084}, 0x2008c010) sendmsg$MPTCP_PM_CMD_REMOVE(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x40081}, 0x10001) r9 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r9, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbf9, 0x2ffffffff}, 0xc) setsockopt$sock_int(r9, 0x1, 0x8, &(0x7f0000000200), 0x4) 4.280712312s ago: executing program 3 (id=3388): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x0, [{0xfffffdff, 0x1}]}]}}, 0x0, 0x32, 0x0, 0x1}, 0x28) socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'erspan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'erspan0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0x405, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x1}, @IFLA_GRE_ERSPAN_VER={0x5}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x40010) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="a7000000a7dc15378d7ea5ad651bcef1515bfafd154a7faa0990361acfa95bfe4ba089a9026c5cb02b3e880e1f61651e069b0efce2a66a96c610248bbf32160c08f4aaf1e37a0ac8f8d3629c7ccf2f15a2992affaa66ac7a71c2e7f44186c38f71ed59ecd4d97bd883f1a51b6b20b6ae37cddb35585b6801af0553df92", @ANYRES16=r1, @ANYBLOB="01002ebd7000000000001400000018000180140002006e657464657673696d3000000000000008001400b0000000"], 0x34}}, 0x0) 3.689410154s ago: executing program 3 (id=3390): unshare(0x20000400) r0 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r0, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}}, 0x10) 3.60275311s ago: executing program 1 (id=3391): bind$unix(0xffffffffffffffff, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) accept$inet(0xffffffffffffffff, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000004f80)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000002540)={0x2, 0x4e23, @loopback}, 0x10, 0x0}}], 0x2, 0x4044880) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, 0x0, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) syz_emit_ethernet(0xf5, &(0x7f0000000300)={@link_local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x34}, @val={@void}, {@ipv6={0x86dd, @udp={0x0, 0x6, "910100", 0xbb, 0x11, 0xff, @remote, @local, {[], {0x0, 0xe22, 0xbb, 0x0, @opaque="9f79e0ec785db2cff0f3194b8c0dde32e97fa3c8ea2d080032d903ab9f0daaba1e72f5be2a8cf109237713eb7f31c304a084268cc0fc5b577e2427f57c27ffa66bf26fd96a79d3662c927bab0a80b2698d740907196ffd801598b51ff315b323b82ec752626178fbd6ebbb62ac8e326d7cef6d3787cd094763de7109e405551ff4f442c3dee7aeb5b2358407d674b4854d6af2d21cea55002c13acb864b27c3f9791295ea96376ddd9813e29b1630ad4195582"}}}}}}, 0x0) 3.479252683s ago: executing program 3 (id=3392): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2000000010000104d10070008000000000000000", @ANYRES32=0x0, @ANYBLOB="136f020000000000"], 0x20}, 0x1, 0x0, 0x0, 0x2004d808}, 0x4000) r0 = socket$inet6(0xa, 0x3, 0x8000000003c) r1 = socket(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000003c80)=[{{&(0x7f0000000340)=@l2tp6={0xa, 0x0, 0x0, @ipv4}, 0x80, &(0x7f0000003680)=[{&(0x7f00000003c0)=""/104, 0x68}, {&(0x7f0000000440)=""/104, 0x68}, {&(0x7f00000004c0)=""/4096, 0x1000}, {&(0x7f00000014c0)=""/146, 0x92}, {&(0x7f00000023c0)=""/4096, 0x1000}, {&(0x7f00000033c0)=""/72, 0x48}, {&(0x7f0000003440)=""/50, 0x32}, {&(0x7f0000003480)=""/197, 0xc5}, {&(0x7f0000003580)=""/229, 0xe5}], 0x9, &(0x7f0000003740)=""/113, 0x71}, 0x5}, {{&(0x7f00000037c0)=@can, 0x80, &(0x7f0000003b80)=[{&(0x7f0000003840)=""/122, 0x7a}, {&(0x7f00000038c0)=""/153, 0x99}, {&(0x7f0000003980)=""/13, 0xd}, {&(0x7f00000039c0)=""/124, 0x7c}, {&(0x7f0000003a40)=""/84, 0x54}, {&(0x7f0000003ac0)=""/162, 0xa2}], 0x6, &(0x7f0000003c00)=""/87, 0x57}, 0xfffff1c1}], 0x2, 0x2, &(0x7f0000003d00)={0x77359400}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="540000001100010000000000000000", @ANYRES32=r3, @ANYBLOB="000000000000000034001a8006000000020000002800058024000180080001000100000008000200000000000800030000000100080004"], 0x54}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000030000000000000000000000050003000000000018420000030000000000000000000800850000004f0000000500fcff0000000095"], &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x3, 0x3, @dev={0xfe, 0x80, '\x00', 0xd}, 0x9}, 0x1c) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c0000005e00679a3601ffc4910710007e570966f4366ec9d4"], 0x1c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f00000015c0), r1) sendmsg$IPVS_CMD_GET_INFO(r5, &(0x7f0000001800)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001700)={0xc0, r7, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e24}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5fb}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9f}, @IPVS_CMD_ATTR_DEST={0x60, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x2}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0xc}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0xe}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x9184}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@empty}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e24}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x6}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x1}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x40}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x81}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfffffffe}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfffffff7}]}, 0xc0}}, 0x890) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r8, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) recvmmsg$unix(r4, &(0x7f0000002380)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001840)=ANY=[@ANYBLOB="44c40000001000010426bd70000000000000000000739a876f2d07ac1929e3284b7d45e63d1e2fb61036a75e1794957e298f53b9db485bd6af26ce0293e7887f7b1b7ab66498c0d66b973b81962feeb572219b8f9a56a2d8e98b824df7f552cbd2e553fd6a90551fc54d691a3eabf2fb325cdaab48be270fbfcd7d451afa3dc49543e4d147edef37d0be12ac18ea7a31a30a4aa897da53d85b875f7809eb8a95857a6c81ae89ee3f2d0743dd22c75134dda9512c0ca81fe5d79b89551d5a6159c7169cffa66e9e42bcbb7867b6949aaaaeedb8d93519070e01a9451de3d515d61043f623ceb3a245a06ed98f86ada6f2d74cd42bc0ca34b5c2989d8cef69c7e4ce16d3db079922855843a6982583f9203b0844d3c745cd7756ddca46075aa4cc9d1c14261e9841d42be75a82bdeea45c8bad8ba4", @ANYRES32=0x0, @ANYBLOB="03000000000000002400128009000100626f6e640000000014000280080014000100000005001d0049000000"], 0x44}}, 0x0) sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="50000000100001060100000000000000000000006400000000000000000000000c00030076786c616e300000240012800c00010076786c616e00000014000280050019000100000005001e0001"], 0x50}}, 0x0) sendmsg$nl_route(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c000000780001040200000000000000070000006400000014000180080001006400000008000200c8"], 0x2c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000001600)={0x0, 0xfffffffffffffe7c, &(0x7f0000000080)={&(0x7f0000001640)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x8010}, 0x4000085) sendmsg$NFT_BATCH(r9, 0x0, 0x24000840) sendmmsg$unix(r0, &(0x7f000000a140)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000010}}], 0x1, 0x2000c080) 3.210391908s ago: executing program 0 (id=3395): r0 = socket$unix(0x1, 0x1, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$sock_buf(r1, 0x1, 0x10, 0x0, &(0x7f00000000c0)=0xd) bind$unix(r0, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) listen(r0, 0x5) openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x20000, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="c2ff0000190001002bbd7037f000000014010900"], 0x14}}, 0x0) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)={0x4c, 0x14, 0x101, 0x70bd25, 0x25dfdbfd, {0x1, 0x9, 0x8, 0x1, {0x4e24, 0x4e22, [0x3, 0x2000000a, 0xf, 0xc3], [0x6, 0x0, 0x7fffffff, 0x7], 0x0, [0x1, 0x7ffffffb]}, 0x80, 0xc7}}, 0x4c}, 0x1, 0x0, 0x0, 0x40480cc}, 0x80) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000240)) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001ac0)=@base={0x2, 0x4, 0x8, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x1}, 0x50) setsockopt$bt_hci_HCI_DATA_DIR(r2, 0x0, 0x1, &(0x7f0000000200)=0x9, 0x4) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000001c00)=ANY=[@ANYBLOB="200100001f00010000000000000000000d0100800c00010004000000000000000926b3eb9e87f8c8b3a6caa09a1a38d124a173def80bde05b592a5f49cb8056fef80a90fc8c487e1b6004db5feaf0d98b43fc34265f6f01ce7fed79fa135fe637b9fdc8c89e7777e70aecc0b9c372af84eb990d7d32d6c563a42d4889ed3925ac319f32db2703ff85c5b143715d335c94f3fd06ba27da8f5fe0788f669730c4358c2be63e25072bf9e08009600", @ANYRES32=r6, @ANYBLOB="61007a8014006400fc000000000000000000000000000000741194f25eec40f4e2ba2a00d51d6b66e9d985c86f6af8d238212a3fde4b46e23817e54664da29c4693e5eb2b5492c0a116d51211a8c40bf30dcd91e7d481e5a4608000800000018000000000800c300", @ANYRES32, @ANYBLOB="00000044da7b6bac68f0226c3f0b402ee643bccbfcec6d7344435d15de62493ddea54464b0e97654139a6b16cd1b385e30946348e68b9b968ed6657d4d580edc95d64c46ebf4e628472e65e6301e90de60b6"], 0x120}], 0x1, 0x0, 0x0, 0x20000090}, 0x4000010) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_inet_SIOCGIFPFLAGS(r1, 0x8935, &(0x7f00000002c0)) sendmsg$TIPC_NL_KEY_SET(r7, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010028bd7000fcdbdf251700000044000680040003003c00040067636d28616573000000000000000000000000001c0000009ea2d328893918792a"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x0) ioctl$BTRFS_IOC_RM_DEV(r4, 0x5000940b, &(0x7f0000000700)={{r7}, "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"}) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r5, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000001b40)={0x2, 0x6, &(0x7f0000000100)=ANY=[@ANYRES64, @ANYRES32=r9, @ANYRESHEX=r5, @ANYRES32=r5, @ANYBLOB="000000000000000085000000020000009500000000000000"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0}, 0x94) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000018c0)=ANY=[@ANYBLOB="5000020000548eeedc00000000000000000003076a8206d539f8516973e82c499c31f1b93cdeb0ad88750d152a8587f7e0f3f1faddf178b3b09b53dd492f2e2d0b760a8ae913efa2a45c1286fa9355746f56281d6d1de09aa7e6e6360b4375d8b33c49cc537dc79202283154f19085a1b1c44185b4521525fc96049d039ae2f3301c0224e570d377dd129e37b8593892c355326ac69052b0cf9ac1819dfadc9678654b1277abc078ed98530d1e68510df2ed249e9e249f8a62947c65b8015bf56a988eb592fd7cae2cae03364ae5db4a8b2cbafe8028a9cfb9e7855ee19636a76e1cfff86fa1adf25e8afb2faf5893bbaa7f0b3e5ff5dcc13a4b657e9c375604fe8ebd29f07c56cff02e3685380c395674a26688de25234d6d5f9fa18d036b44f2b6a1f2fe6ac5d9c695d4dae778daeb18f435bd08a03fa6d3b131d448f7de8ea97e513c8ed7e540e2ee9e22672d9377d01e0cd3c3dfb07dfd75de0019d3bb650eb3452a7a626c", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b00010065727370616e00000c00028006000200300000001400350065727370616e30000000000000000000"], 0x50}}, 0x0) setsockopt$inet6_int(r4, 0x29, 0x5, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r2, 0x84, 0x1b, &(0x7f0000001700), &(0x7f0000001780)=0x8) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r11, 0x29, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x3c1, 0x3, 0x318, 0x168, 0x6c, 0x0, 0x168, 0x0, 0x248, 0x258, 0x258, 0x248, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @private0, [], [], 'wlan1\x00', 'ip6gre0\x00', {}, {}, 0x11, 0x0, 0x0, 0x48}, 0x0, 0x100, 0x168, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x2, 0x0, 0x5}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0xfffffffd, 'netbios-ns\x00', 'syz1\x00'}}}, {{@ipv6={@dev, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'netdevsim0\x00', 'lo\x00'}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x2001}}, {0x28}}}}, 0x378) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) 3.102753818s ago: executing program 1 (id=3396): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000600)=ANY=[@ANYBLOB="fc0000001900010027bd70000000000000000000000000000000000000000001fc02000000000000000000000000000000010000ecff00000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000c00000000000000000000000000000000000000000000003c00000000000000ffffffffffffffff00000000002000000000000000000000abcd0000000000002f0000000000000005000000000000000200000000000008010000000000000001000000000000004400050000000000000000000000000000000000000000003c00000002000000fe80000000000000000000000000003a06000000040100"/180], 0xfc}, 0x1, 0x0, 0x0, 0x20}, 0x4048050) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00'}) setsockopt$inet6_int(r3, 0x29, 0x3e, &(0x7f00000000c0)=0x3, 0x4) sendmsg$nl_generic(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="400000004100070127bd04000000ffff047c000008004280040008000c00018006000600800a0000180007"], 0x40}, 0x1, 0x0, 0x0, 0x4048011}, 0xc0d4) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xc, 0xe, &(0x7f00000000c0)=ANY=[], &(0x7f0000000340)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002300)={r4, 0x18000000000002a0, 0x22, 0x0, &(0x7f0000000580)="b9ff0300600d698cff9e13f008004de7f9c764360000000100135433f6e31e17128c", 0x0, 0xfffffffe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$inet_udp(0x2, 0x2, 0x0) 2.970562241s ago: executing program 0 (id=3397): r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000b80)=0x14) (async, rerun: 32) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async, rerun: 64) r2 = socket$tipc(0x1e, 0x2, 0x0) (rerun: 64) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f00000000c0)={0x41, 0x12}, 0x10) (async, rerun: 32) r3 = socket$tipc(0x1e, 0x2, 0x0) (rerun: 32) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10) (async, rerun: 32) r4 = socket$tipc(0x1e, 0x2, 0x0) (rerun: 32) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000280)={0x41, 0x3}, 0x10) (async, rerun: 64) socket$tipc(0x1e, 0x2, 0x0) (async, rerun: 64) close(0x3) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a78000000060a010400000000000000000a0000010900010073797a31000000004c0004802800018007000100637400001c00020005000300010000000800014000000009080002400000000c20000180070001006374000014000280080002400000000a08000140000000010900020073797a32"], 0xa0}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) (async) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[], 0x6c}, 0x1, 0x0, 0x0, 0x48800}, 0x4014) r5 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r5, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) (async) r6 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r6, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, &(0x7f0000000340)=[{&(0x7f0000000380)='/', 0x1}], 0x1, 0x0, 0x0, 0x40010}, 0x0) (async, rerun: 64) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffc9c, 0x0, 0x0, 0x0}, 0x94) (rerun: 64) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x5, &(0x7f0000000200)=ANY=[@ANYRESOCT=r7], 0x0, 0x40, 0x0, 0x0, 0x41100, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r8], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r9, 0x0, 0x0, 0x0, 0x0}, 0x94) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r11, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000890424000000000095000000"], &(0x7f00000003c0)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) (async) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_TEST_RUN_LIVE(0xa, &(0x7f0000001e40)={r10, 0x0, 0xdd, 0x0, &(0x7f00000004c0)="20b6a148a128d7bf67a5040a0ddc7a337b98b1ef84075194595de7714ccdf7c22b41530a7e7a880ad1f710d52ddca433aa93b404f2d2f783a631313b24e3f878eaf561600867e2bcb0d99aa344bb8eb3b61c08232e92e9b95400440abfbc9b18ba8130f77e7882449b2727d2de27cdb6fad2b1c4a78eb4c3445625f22b633538d167299d840f9bc883bff7e94620b6f74a751e3b1592bb1e3290bd6a437c325e98bd4836e122e0c1af126d7649e4d38bca095316fa3d19c580cc2143c951d700eae2b6d783b7a329b046ae509278f0111f3b27dc23a088de4b4b9ed112", 0x0, 0xff, 0x0, 0x1000, 0x0, &(0x7f0000000e40)="81b23ef2f217f4913ee89b5cb3037b386c5b5608088806197bae7f5a91b0ec707afa53eb59173451364d4257241502ff4c8c5e20994adc7585a288eb0def8523fbd0100573db02b4c32acf9282622487c3ddfe622cadd951afbd1aa7e661b94bd76705bbbcf0beefb8cb05b195d5b195bc51666f7d0f812767c7126eea0dc8d43a527de107218eef57c9581653e5af441657bbf70bf22037aa2831ceb7213e7cd7f7a72444c4a11c3092c7553129c63ddcdaa956e2adc507eae7b1d39a31079ac231eb51b7b5e42b92ae3d32744b6e2b62c67bcef27009ddef6d5d84c0c276395db4388de3858bdc0dfe06169a144f3d602fff954e85cfd991625161ef98d3dd5be6436d50b24d26cad237ff454a2a2fa3920d136e5de51254d008cd9fa59ed41862a0b861eb8903f83010d361fe6f78dff461575ddaac5458e828f378f696999d421538a4c5e4e6288625f4b3a1eb9d93a7bd3103c9a49afeace2c7502e858b0b9aa805750dc2b2a39c6e68f42043dd5eb1bb4ef20c6ed2ccd882a6f937fd895423f66b798aebfc5ae35fc45d6f141a6893b0655354ee86b2830bab20d25f374ee74fcccd39cec56b54bce5d3a9f436ff7d29d96069a89a951b8728b53a90a9fa8db343fa266953bba104baf7c9c4f0541632305c77727f444d2f6d2af2c4f170feeda2a1d097d693ea400e4868512bfda10a5e800fe9c114de652fb41f23ea06e3eff77f94a686d1dbd76f9d042b8efb8d7701d8932f808562908036266d0af053a57b89b842b99e1fda5ce499e3b899992ec2fb2b3d6003e213c7aae5b512a1903a0fa8f0539d6678234fcf9b971e78e98eb40ab763ae3b2d6bbc8d01076d4fd299af49f75be2829a0995cacb66f2e662a3b08e7c273e6023f60019e090bdd7b19c1565275da5200f30a6bbfb364a15b24490b55600719ee3ce6db3e39210ea799924415508b2b081158e0d455923154d4a7b7aa68a7e8286fca3468cf5cb9e0438e5ca1e5860659bcc1dfe66cf4cfb61fc30537c4dd11ace0fefc8c09dfe43d1f73951ea67ca499c638352d936da482cf5f994c10842ffc4b8f83087e52823a4c64f23222b1a53dc3397587a5c00c4af3ad1a5449c906d83af72a0a49feebfe7df2fb6bcbfc12fc29404cca552d0d06b2197eb93953127fba49a1e5ad3416dd227124886074a5e09f8aedbf9231641a026899578cae4ffb7da13e8a278f205bb57de6758de2d81732db007b730abff5de5080d2f09b0b38a67a83b69a07f54871a049c177f1f6f71f657fe885870b23909faef127cb68d4802a89d5295d48c2beae9559a3d28f7c4d7820e9e8126b8a7ab9cede5ef065e934865bd93d065bdbd52bf893d592e1af1eff0c38a6a547c59532af138f12539e842c654fcef2370f1cc76bb3e78a8b47a926c5eddda0692f3374b8e4071194d54488455b21185c197f9c33263867396bca98ba124bee5a54c7e26b9cbbcc135db05e9d1e924578e78f234f70f985731723da73c6595f304f1173ba6293c030e5e30bef69096c3cebe0dc2688369281b670aed036f86d0e27831a82132471c29c439accdffe429f93098a51e3bfe9bc0d7277718143074807dbc2f7296d9639011f463d774c121fea5d86fc04fe8a7cf8de64b421e223a19834a152fd97883018238a03db49bfa00ed49b2eb43b0e22eb198d24434710dbe1bdff5a0b848795563806583160bd0f95157f59449c772a1682813312385b7c8606de03cb07bb95110f108d154484206196fb9524fdd11356a8ffec28b4605d5b58182cdbbb0178b83e74550f1eec47f2b1878a097f2229a62e255c9afd526d20c13736abde109fa925ff01897ef5ceadd324945112c225c02f80350a0361fb88ba946b045e0b32541610667d963d8c5fc2b68260ef385a072e183982c6bdef0c4b7a28471c569edd35f3a74e897a975a8c854ca4d4c9bf85d5b92272a00a9d933023eeabbcc6b1e704ac81bb702f05b60ac73ec315808252515c0082944928c203cc40355800fa3742805a6165f8f0d4096939c3724d68dfa31149960cadc9b2677de2ab627b09a08c48174bd2777c815fa474d7ee6caec8213871cb4c20b2edf5964249ef97bfc0810637dd2a3da3ee26509f8bcd0ea2a4768ef9029c5fb7b10135eccce056b5a38132c505760d330c09fd71c0ae3a8dc6305f6e4d118a66c2bc8055d909e51b5e3c89fe9991593e425cc9db1c3ebfcfae982237b82ec6bb63d0824813737660a9fc84dff40c3a7118501658429ee942db7adbfe441e0f6ccfc47b9a8982740dae8f73735a9b22c75e987e9050be45b25975f015e33cd3df6f4cf811f870e8277fd472c7c4b818e21cc67fa4d8212fedd5c17862db1ab07e1729c539c2835676655e40b519fed13509ae3a5486d7d9c76ae612c752ce742083ee8b7c5e4534e9ac7a7fe147d8ac30d33cc951a2851e887c17fdd95a432a8f585456cdd26e276dbe1e6ebfcded5c0b0074f1ab30d46c809e3545382a00cbd5e89f895e3703fd16d63e8a5a32b24c6e8c5c2ffa27cb0341df20a5761c2641eee10b5408f6584390b5dc8890defa211f8c3205d4f25023fb9ddf7f9c36e51ddf45106084d2c7c3c0cecf15377c3c5f28525f65b735f496dd0999d8ad84645995d9307cf2035407a1715fdfeb1d2066022e474e8509bbac2a2bd3ec1e70ad08439895cf2a6e714dfee858877984d8fb71b283d14934ca96b84700197ccb36b3a1acb1217402d36383f3f637e60918970030ddac3628faed6da48d87c37bc7dddd8073d67160dd66b70d5e8d5150dd65cebd092b30511804cacf659ce28142763f71072b651e7947059d28a9b9498948d09a2f8319e362e079bf0a1ef14417162e1edcb526f341ce93c32e8fb6ae23019fdf41c95cc0847cccc9e7882066d08bfed5fa3ecb5ca2c4b3ce1747f1589392d34e85703be752f70bc1fe4e53ecffbd0f1512845fb48a0ff47ca4174cc67498fc0595bfec41e17a78475db827d3dbe41029984c22979cba3a5e3c6eee239197659fc6a24d904dd1ddd1d0be1cfc979728bebead278eeec6fa56a5d275bfc9db4a905260db592e30fc870a803fa85b946f5244cbf4bcab2b40b4dbd01d7905a7cbf1b3097402ec264f0edff47c04187566c4bc6835b89cf88bfd17f0e26eae9f3c660f14372fb69fc02cfd74708e24acc51ba51b23b1493f749f322d61aaaa348305e0abf3963e572cd7059b74c3f9f7600a5f5955ad49d945d7ffbf38e0254c1fdc49313bfedd093989e5e5d2851253857e6ace1792057e293739d8c00913116f2b9f5be1507b2b40cbcbe092347322eb279553529a0eb0b51a20ae0c41390acd7406cdc524111a9e29c1ec414d824a719b8ef3f6f04f0850b6c1b7faea103a706c498263fdaade896b03b28b0475708860f3cf98a5d3de97aa6a718d171da7136ac4839f77b2da64d9c642196acda9106af0d743a32cef0fbbac420c7bf773f6beb7fc01f9537824ea8d896471d29b80fc7eb50cc81a8da79edebb019c6a1aa3be133171e154c7245fe926718f66e227c2352982a87da58818a467095989a65f58ecfe4fee58018674b8aef8985e5bd1342764aed6f9c25b130efb949d6afa384db69582508aa77dd36fc33b00cdf2cc93b2ca921965840698073736afead1008ea9ab1f3fa6c03d8ed41c5a127f52826647046a5a9780b86965853a2b8d53bd0ababf36b57a887fbf3921f2235767199a392db116f2b4ddbcb9888a744f2229b354dbc47b6d1bc2483ee22edb660f007aab14ef06b25eaca0a2f51b1ea758cf1de12fb6fb9cef9085f8ce5e8cc42cbc25ef14382977a75708f113088df3c9aeb62aed29252da5266d73c425d860179d8f0aea83aea38dd661596bacf619383b479ebc455aa9f86f785cfbb7992382c9526b3ac060b85f2dca226ee63b6ab1827a231072a0e96a3c92a8d40f54fde908a414e1bafb0998b65254c617fe401a4d943dab779afd38c13b077affad12d1cee4b5ec4e2f4906a495d44221d9affa58cbb7e9fa58b925a1040c87c56b5caffcb5a9cd5c586f1b6f6fbc35c70446f25873124aaaa8b1c457cdf4ea593422fd6e1c64106c809ec0607f7e7202176f774362cb752c9e203c3eb3a29c0d9cc7c4a084717c7dc9e98652fc110eeb31ecd53aafd68c655a31f31a689145399e319280646133c9c5bc4209c124050f978791a0c2f3b448593415d128f532509ad875553daa11ed682d7e5bf8156ebe4612d073e7016ed82e7d2cf8da13d4701276a1992f17375229293192d9f9ea02d54036fd9dd60aa2734b1d38f41c3bc9a3d48b2c835166b3af9ff925d8e4b54006c8e4a7b09026db0e732e8343dbb937fa99c116bc494a63922894d7aff6091769c7b69fd22627dda2e67d668dcc45d198cbc7cc8df53a92680e414e456b05d15f11bbf8d9b3e9aba469e590180eb4de155018368fe7c111946b1cd756c99977b43e6b3b14a1f660f7281ca3c032a972d00a3c0af62d6d8e822226c445fae93be87dd8534a3f90ac148a271527187b115a847f4b81a430e70ceafa6c8ffdcb70b6f1eead3b23a7f9444e2c0142e32628670e912bd9e0b4cb3b0e11d28aa17fb6afbcf228aa096e9d4a83efb69ada344a2455134b2f0bf0759a7d19dd9bdf2ef3277b35bf7a5ede22ff18c9b78b984866d6f20c6ceca21e242a1aa2262a0714c9cd6d833147608a8be144c65699ad0a9db01e6663a2ab23c58e9c598fdcbf78bf5122c518b5789e951d8a881d249bada23afc9108fb0ce6988602043788eca2813c5a4e41efae67eb8bd23ad3f7297a6adf381a501dcb7ee4a53d1037e4ee26b31e3fadbc742b6f5c0edd3c47eed1c9468a95fd5fe100f015ba0ddca27802548322ca6307b2e017b647a7c33ad0ddc05498886a9dfd178bf91b3ff986c16cdf7f685cdce25dcc5ee998c132b8617a470f93b4500b115b80288804be9b7fb4f53d87de41f3f74f0d42eb674cd58516bf0c8e746d86aa16873886d0d6ebd799b57626f99fc311ab615aa79d97826ee108cd24c9fbaa20be1893ef41129aeb80a7dfee68a2cf5090ea67583febcb1b6c67af9232b2b0eb694de2b96f90be7c085b50a080925d7501734242bb8533a3a12f9b25f2cbf43feccab7ce4f1d62070eae82e271ea2eef05af69d3933af843c4b65665b776c1a35662178b74f813b8ac798123b3dfdaf044967d67d3b05413ae26214cef4669f5be9ef174a3b4dc3de7e9230e4125df7618dea2fc27646a7ebdd3ed4eea86f0fcfd728fb488f61895e6af1f6644814451e6b32052f0d01195864af4cf80836cda1eddf354a5989981faf1fb3e0eef74ad07bc7750a4a87ece2937c547c3e9481154dd8f65123b92d06e52977a56d7a7b64ac2abc2ade60df442bb1ffaa635117752927e3591fa27703a51cfbf137736cdc8a75ce20b42558e11a91ede7f947cb0156c25757a12767c8b13075c946b6cca59f69876a9262b88b0428fa5c3dbb15965870dcf5c891102d29457066ba246430e1fb9d08806a8fa5f757584eeeec6c0fd39d97475c9550f688e83b3e8f8ce322de2435c41cb91c0c33a299f9a177276140a1509b1639d038c5d77441207fbd28453ac7c0cb0d977eb9a141f9f5a20ec6ca164a5005efd47114f10379d3c769f64e8fe51ff6ced4210418e5780a49f0fc0db586d7338c4ffcc3969247d3d0788397aecc080fd876b4b418c913b5ed075ad1d66753d47208122ac5a9fbadbac28391b2537384d0c6090b2eb2fd4f4d4bf4233ddebbc24b76ad3b2136cd7889", 0x0, 0x2, 0x0, 0x4}, 0x50) (async) sendmsg$NFT_BATCH(r12, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a00)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a050000000000000000000100fffc0900010073797a30000000002c000000030a01010000000000000000010000000900030073797a30000000000900010073797a300000000054000000060a01040000000000000000010000002c0004802800018007000100637400001c00028005000300010000000800014000000012080002400000000e08000b40000000000900010073797a300000"], 0xc8}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 2.889850987s ago: executing program 1 (id=3398): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newsa={0x184, 0x10, 0x1, 0x0, 0x0, {{@in6=@private2, @in6=@private2, 0x0, 0xecdf, 0x0, 0x3}, {@in=@broadcast, 0x0, 0x32}, @in=@rand_addr=0x640100fe, {0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x6}, {0x0, 0x1, 0x80000000}, {0x0, 0x0, 0x2}, 0x0, 0x0, 0x2, 0x0, 0x73, 0x4c}, [@algo_auth_trunc={0x4c, 0x14, {{'hmac(sha256)\x00'}, 0x0, 0x80}}, @algo_crypt={0x48, 0x2, {{'ecb-twofish-avx\x00'}}}]}, 0x184}, 0x1, 0x0, 0x0, 0x4040000}, 0x28048884) 2.803503629s ago: executing program 1 (id=3399): r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000040)={'syztnl0\x00', r1, 0x2f, 0x7, 0x2, 0x2, 0x4, @empty, @loopback, 0x20, 0x1, 0xfffffffe}}) r2 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) getsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, &(0x7f0000000100), &(0x7f0000000140)=0x4) ioctl$XFS_IOC_GETBMAPX(r2, 0xc0205838, &(0x7f0000000180)={0x2, 0x4, 0x9a4e, 0x100, 0x8, 0x1, 0xf}) ioctl$sock_SIOCDELRT(r2, 0x890c, &(0x7f00000001c0)={0x0, @in={0x2, 0x4e23, @empty}, @qipcrtr={0x2a, 0x2, 0x7fff}, @generic={0xf, "b9dde0fa8bfc6b9353d0fd338745"}, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x3, 0x9, 0x9}) r3 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000240)={0x0, 0x6}, 0x8) unshare(0x40400) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000280)={r0, 0xffffffffffffffff}, 0x4) ioctl$XFS_IOC_FSGEOMETRY_V4(r4, 0x8070587c, &(0x7f00000002c0)) ioctl$BTRFS_IOC_RM_DEV(r4, 0x5000940b, &(0x7f0000000340)={{r4}, "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"}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001380), r4) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r3, &(0x7f0000001480)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x2030485}, 0xc, &(0x7f0000001440)={&(0x7f0000001400)={0x34, r5, 0x200, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x4c, 0x6a}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x6}]}, 0x34}, 0x1, 0x0, 0x0, 0x4020811}, 0x4008840) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f00000014c0)=0x3, 0x4) r7 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$bt_hci(r7, 0x0, 0x3, &(0x7f0000001500)=""/113, &(0x7f0000001580)=0x71) r8 = socket$kcm(0x29, 0x0, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000001600)=@o_path={&(0x7f00000015c0)='./file0\x00', r4, 0x4000, r8}, 0x18) socket$kcm(0x29, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000001640)={r8, 0xffffffff, 0xfffffffffffffffd, 0x2}) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r9, 0x8040942d, &(0x7f0000001680)) r10 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_STATUS(r9, 0x84, 0xe, &(0x7f00000016c0)={0x0, 0x6, 0x3ff, 0x4b, 0x6, 0x7, 0x3363, 0x9, {0x0, @in6={{0xa, 0x4e24, 0x6, @dev={0xfe, 0x80, '\x00', 0x1b}, 0x80}}, 0x7, 0xfffffffa, 0x7, 0x9137, 0x1}}, &(0x7f0000001780)=0xb0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r10, 0x84, 0x13, &(0x7f00000017c0)={r11, 0x4}, &(0x7f0000001800)=0x8) writev(r9, &(0x7f0000001a00)=[{&(0x7f0000001840)="18c73d52db6c0a607e3ff181b9340e46c876e60f17dd78bcdb07f16605a4963ce54afd69b071ed199bd01e5ab0895431aa2b819a419d2843f2372836ef64fe42ec39476960c075dd98e2bc317fc8eaf789708769874a6690fbe74cd6f9cf336f98cf40b23f8577abc67bf349bda30d9e201fa7015fe1899a08d89d740903b0305c96160f4b80fac77b443fa00eb474b9fc212a1a768f4f1f27146c8ad29b9a81fad08cd2fd74ea2e2396923bf8b72102c838", 0xb2}, {&(0x7f0000001900)="13cb1c29e2a2422c2bf768c3f5803c0657ea50f8f8cc9f8b2b105dba8fdfc420c5fb4c70372dbd55b06e7d71fb25a4875b9c3639376fc94d491addef5fdc5842b83524f030348ec47f4097277d43020ce5e085bf6778393f4796082bfc2f1b62876ef47e308a5a379e79c18e99300e5978bf66251c1701d93b309e43cf6a4bc95363327bf42dc11a2965e650addf17b601d66ca55549891d517d6750d2665ee5ab8a11a388919ba3c38f0c5c2aa7fe9fd725aeecca345633ce0e4c619637777524c6ad56e740ca526843aaf3554f14d86d01923a9535da82e3c61ab507d4e3c53ab7f2c164c0d299f85e03ded315eafc8db6712835", 0xf5}], 0x2) r12 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001a80), r9) sendmsg$TIPC_NL_MEDIA_SET(r9, &(0x7f0000001ec0)={&(0x7f0000001a40)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001e80)={&(0x7f0000001ac0)={0x3b8, r12, 0x200, 0x70bd29, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0x20, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x64b}]}]}, @TIPC_NLA_BEARER={0x74, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xc, 0x1, @l2={'eth', 0x3a, 'wg2\x00'}}, @TIPC_NLA_BEARER_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x26fd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fffffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x47ed}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfbe0}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_MON={0x3c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffffd}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x80000000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x40}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}]}, @TIPC_NLA_LINK={0xd0, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xaf2e}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x24}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}]}]}, @TIPC_NLA_NET={0x20, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}]}, @TIPC_NLA_LINK={0x84, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x840aebed}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1000}]}]}, @TIPC_NLA_LINK={0xc0, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xdc0}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x4}]}, @TIPC_NLA_SOCK={0x78, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x460}]}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4e}]}, @TIPC_NLA_SOCK_CON={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xe0}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xffff}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}]}]}, 0x3b8}, 0x1, 0x0, 0x0, 0x40811}, 0x0) 1.837768552s ago: executing program 4 (id=3400): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)=@newqdisc={0x38, 0x24, 0x3fe3aa0262d8c583, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x6de9608e9ceab21f}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_REFILL_DELAY={0x8, 0x9, 0xfffffff8}]}}]}, 0x38}}, 0x20044018) (async) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) r3 = socket$inet_icmp(0x2, 0x2, 0x1) ioctl$FIDEDUPERANGE(r3, 0xc0189436, &(0x7f0000000000)={0xfffffffffffffffc, 0xe, 0x1, 0x0, 0x0, [{{}, 0xf}]}) (async) r4 = epoll_create(0x7) (async) r5 = epoll_create1(0x0) r6 = epoll_create(0x7) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, &(0x7f0000000240)) r7 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f0000000100)) (async) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r4, &(0x7f0000000140)={0x60000000}) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) (async) ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x110e22fff6) (async) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r8, 0x11c, 0x2, &(0x7f0000000040)=""/31, &(0x7f00000000c0)=0x1f) (async) unshare(0xe040400) (async) ioctl$OCFS2_IOC_INFO(r2, 0x80106f05, 0x0) (async) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r8) sendmsg$NL80211_CMD_TESTMODE(r0, &(0x7f0000000580)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000540)={&(0x7f00000006c0)=ANY=[@ANYBLOB="b76ca36248c97232c58c020000", @ANYRES16=r9, @ANYBLOB="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"], 0x28c}, 0x1, 0x0, 0x0, 0x4004}, 0x80) 1.762021775s ago: executing program 0 (id=3401): unshare(0x20000400) r0 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r0, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}}, 0x10) 1.700787671s ago: executing program 1 (id=3402): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket(0x400000000010, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) socket(0x80000000000000a, 0x2, 0x0) (async) r3 = socket(0x80000000000000a, 0x2, 0x0) sendmsg$NFNL_MSG_ACCT_NEW(r3, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000540)=ANY=[@ANYBLOB="2c000000002d4cc549e33a585b5c730ba8030000000000000029e861694cb05a2d8b2b418e8fa407cb0000000a0010020c00064000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x8880}, 0x0) (async) sendmsg$NFNL_MSG_ACCT_NEW(r3, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000540)=ANY=[@ANYBLOB="2c000000002d4cc549e33a585b5c730ba8030000000000000029e861694cb05a2d8b2b418e8fa407cb0000000a0010020c00064000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x8880}, 0x0) r4 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x2}}, {{0xa, 0x0, 0xffffffff, @remote}}}, 0x108) r5 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r5, 0x29, 0x2a, &(0x7f0000000080)={0x20, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) (async) setsockopt$inet6_group_source_req(r5, 0x29, 0x2a, &(0x7f0000000080)={0x20, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(r5, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0xffff, 0x0, @mcast1={0xff, 0x7}, 0x10000}}, {{0xa, 0x4e23, 0x0, @mcast1}}}, 0x108) setsockopt$inet6_group_source_req(r5, 0x29, 0x2b, &(0x7f0000000200)={0x5, {{0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, 0x108) close(r4) (async) close(r4) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe, 0xa93}}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe, 0xa93}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000003340)=@newtfilter={0x24, 0x2c, 0xf3f, 0x70fd2c, 0x25dddbbd, {0x0, 0x0, 0x0, r2, {0xc, 0x3da48c8682330ab8}, {}, {0x7, 0x9}}}, 0x24}, 0x1, 0x0, 0x0, 0x20045080}, 0x4880) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000480)={'syztnl2\x00', &(0x7f0000000380)={'tunl0\x00', 0x0, 0x700, 0x7, 0xc270, 0x59, {{0x11, 0x4, 0x3, 0x25, 0x44, 0x66, 0x0, 0x5, 0x61c0ea4f8593989c, 0x0, @rand_addr=0x64010101, @empty, {[@generic={0x89, 0xf, "712bfed2452b56fab19e6f5cd5"}, @noop, @ssrr={0x89, 0xf, 0x40, [@multicast2, @loopback, @remote]}, @generic={0x182c8c33f7e56035, 0xe, "9b7c11cf993fa55378576d91"}]}}}}}) bind$packet(r1, &(0x7f00000004c0)={0x11, 0x2, r6, 0x1, 0x2d, 0x6, @broadcast}, 0x14) (async) bind$packet(r1, &(0x7f00000004c0)={0x11, 0x2, r6, 0x1, 0x2d, 0x6, @broadcast}, 0x14) socket$igmp(0x2, 0x3, 0x2) (async) socket$igmp(0x2, 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r7, 0xc004743e, &(0x7f0000000000)) ioctl$PPPIOCSPASS(r7, 0x40107447, &(0x7f00000000c0)={0xfe55, 0xfffffffffffffffc}) socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) socket$inet6_udp(0xa, 0x2, 0x0) (async) socket$inet6_udp(0xa, 0x2, 0x0) socket(0x10, 0x3, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r9, 0x5, 0x35, 0x0, &(0x7f0000000080)="14a8658cae116fc300000001e370d0ebe624a8912d7bb18226c9df12bc597b4c8553aa5ef99d55ad4f8f84e898339608cabdec4b88", 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x50) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000040)="2e00000011008188040f80ec59acbc0413a1f8480b0000005e140602000000000e0027001000000002800000121f", 0x2e}], 0x1}, 0x0) (async) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000040)="2e00000011008188040f80ec59acbc0413a1f8480b0000005e140602000000000e0027001000000002800000121f", 0x2e}], 0x1}, 0x0) 1.602331301s ago: executing program 3 (id=3403): r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_DEV(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r0, @ANYBLOB="04002dbd7000fbdbc9c2a17d6b2384f800"/29, @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x1) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x4, 0x1c, &(0x7f0000000400)=ANY=[@ANYBLOB="bf16000000000000b7020000ff8500007b2af8ff000000007b2af0ff000000007b2ae8ff000000007b2ae0ff000000007b2ad8ff000000007b2ad0ff000000007b2ac8ff000000007b2ac0ff00000000b702000002000000732ac0ff00000000b702000001000000632ac4ff00000000180200000a0000010000000000000000632accff00000000180200000a0000020000000000000000632ac0ff00000000bf61000000000000bfa200000000000007020000c0ffffffb703000040000000b7040000000000008500000045000000b70000000200000095"], &(0x7f0000000340)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffa}, 0x94) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x20, 0x9, &(0x7f0000000540)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1a, 0x0, 0x0, 0x0, 0x101}, [@exit, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4a, 0x0, 0x0, 0x0, 0x3}, @call={0x85, 0x0, 0x0, 0x80}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}]}, &(0x7f00000005c0)='syzkaller\x00', 0x0, 0xab, &(0x7f0000000740)=""/171, 0x41000, 0x6, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x8, &(0x7f0000000800)={0xa, 0x4}, 0x8, 0x10, &(0x7f0000000840)={0x5, 0x4, 0x0, 0x99e}, 0x10, 0x0, r2, 0x1, &(0x7f0000000880)=[r1], &(0x7f00000008c0)=[{0x2, 0x4, 0x6, 0x4}], 0x10, 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d00)={r4, 0x0, 0xc2, 0x3e, &(0x7f0000000a80)="779597b2edaa9c1cdff69e8337b8e85d65df14113c3eeb910e978f1679c89904a9052af635c733772ce802e1b48a921b775ad0418c7df7aeded54eaa1f3f5b1cf623ad5c9b37180fcafc59f17c6b11118aca3fa6f6f71521aec717616d6574f3d4d72a5497d54e3d3bf672a704826b35c76e3d96d986e22d83dcea72faaa003ecf2df755dcccb9a07eeb5111e0efc3ec6e4ec71b0ed9ecc214dbe625dcd838d4fbf0520d8a2ee55e56f4541dbfcd011a4f68a44a614b5fc0b562eb95cb20614f75c9", &(0x7f0000000b80)=""/62, 0xfff, 0x0, 0x59, 0xaa, &(0x7f0000000bc0)="f20622250e0b391b9d63907185b503dbb64f88d39c4a05588eb7f7e09824010fb6088c16123f76de63cdf3bf5b5131d7afd3dbfe425eb0f6202946f96818510972f7d6a6c3d0a8b2a4f80d1fcfa88bbf423d0c3b19c20e2b53", &(0x7f0000000c40)="5a31383e1c7dfeb1370375599df8759768d01e2091ea610651b02adbd730b39c9eb61191521186e89789e572b4d7dab432345d3e3c4be8c707482d99e0930ccf91d902ebd097d9fa7397d88f16f76171afc231cd6557c7c8e1b2445a5ad52a57b61727c1ddf06ca178ee409dca5edea01fea0691ec19c72c0cfa1a50309d6a85a117054e21b0e88c9679ec2a34dbb78578257bcc9fcc77e111ceda1fa6172c3d0446cbc596fb9e356518", 0x4, 0x0, 0xfe000000}, 0x50) sendmsg$NL802154_CMD_SET_CHANNEL(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000280)={0x74, r0, 0x10, 0x70bd28, 0x25dfdbfb, {}, [@NL802154_ATTR_CHANNEL={0x5, 0x8, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_CHANNEL={0x5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0x16}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0x9}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x74}, 0x1, 0x0, 0x0, 0x8844}, 0x4040080) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="5800000042000100000000000000000003010000000000002600010000112233445566778899aabb0800450000140000000001060000000203040506070800000c0002000600200086dd00000c000300"], 0x58}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xb, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="18080000d0ffffff000000000000001718110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b706000014000000b7030000000d00008500000005000000bca900000000000035090100000000009500000000000000b7020000000000007b6af8ff00000000b50902000f0000007baaf0ff00000000bf8700000000000007080000fffdffffbf2400000000000007060000f0ffffff740200000800000018200000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7010000080000004608f0ff76000000bf9800000000000079080000000000008500000005000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0xd, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$NL802154_CMD_GET_SEC_DEV(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r0, @ANYBLOB="04002dbd7000fbdbc9c2a17d6b2384f800"/29, @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x1) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x4, 0x1c, &(0x7f0000000400)=ANY=[@ANYBLOB="bf16000000000000b7020000ff8500007b2af8ff000000007b2af0ff000000007b2ae8ff000000007b2ae0ff000000007b2ad8ff000000007b2ad0ff000000007b2ac8ff000000007b2ac0ff00000000b702000002000000732ac0ff00000000b702000001000000632ac4ff00000000180200000a0000010000000000000000632accff00000000180200000a0000020000000000000000632ac0ff00000000bf61000000000000bfa200000000000007020000c0ffffffb703000040000000b7040000000000008500000045000000b70000000200000095"], &(0x7f0000000340)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffa}, 0x94) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x20, 0x9, &(0x7f0000000540)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1a, 0x0, 0x0, 0x0, 0x101}, [@exit, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @initr0={0x18, 0x0, 0x0, 0x0, 0x4a, 0x0, 0x0, 0x0, 0x3}, @call={0x85, 0x0, 0x0, 0x80}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}]}, &(0x7f00000005c0)='syzkaller\x00', 0x0, 0xab, &(0x7f0000000740)=""/171, 0x41000, 0x6, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x8, &(0x7f0000000800)={0xa, 0x4}, 0x8, 0x10, &(0x7f0000000840)={0x5, 0x4, 0x0, 0x99e}, 0x10, 0x0, r2, 0x1, &(0x7f0000000880)=[r1], &(0x7f00000008c0)=[{0x2, 0x4, 0x6, 0x4}], 0x10, 0x3}, 0x94) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d00)={r4, 0x0, 0xc2, 0x3e, &(0x7f0000000a80)="779597b2edaa9c1cdff69e8337b8e85d65df14113c3eeb910e978f1679c89904a9052af635c733772ce802e1b48a921b775ad0418c7df7aeded54eaa1f3f5b1cf623ad5c9b37180fcafc59f17c6b11118aca3fa6f6f71521aec717616d6574f3d4d72a5497d54e3d3bf672a704826b35c76e3d96d986e22d83dcea72faaa003ecf2df755dcccb9a07eeb5111e0efc3ec6e4ec71b0ed9ecc214dbe625dcd838d4fbf0520d8a2ee55e56f4541dbfcd011a4f68a44a614b5fc0b562eb95cb20614f75c9", &(0x7f0000000b80)=""/62, 0xfff, 0x0, 0x59, 0xaa, &(0x7f0000000bc0)="f20622250e0b391b9d63907185b503dbb64f88d39c4a05588eb7f7e09824010fb6088c16123f76de63cdf3bf5b5131d7afd3dbfe425eb0f6202946f96818510972f7d6a6c3d0a8b2a4f80d1fcfa88bbf423d0c3b19c20e2b53", &(0x7f0000000c40)="5a31383e1c7dfeb1370375599df8759768d01e2091ea610651b02adbd730b39c9eb61191521186e89789e572b4d7dab432345d3e3c4be8c707482d99e0930ccf91d902ebd097d9fa7397d88f16f76171afc231cd6557c7c8e1b2445a5ad52a57b61727c1ddf06ca178ee409dca5edea01fea0691ec19c72c0cfa1a50309d6a85a117054e21b0e88c9679ec2a34dbb78578257bcc9fcc77e111ceda1fa6172c3d0446cbc596fb9e356518", 0x4, 0x0, 0xfe000000}, 0x50) (async) sendmsg$NL802154_CMD_SET_CHANNEL(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000280)={0x74, r0, 0x10, 0x70bd28, 0x25dfdbfb, {}, [@NL802154_ATTR_CHANNEL={0x5, 0x8, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_CHANNEL={0x5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0x16}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0x9}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x74}, 0x1, 0x0, 0x0, 0x8844}, 0x4040080) (async) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="5800000042000100000000000000000003010000000000002600010000112233445566778899aabb0800450000140000000001060000000203040506070800000c0002000600200086dd00000c000300"], 0x58}}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xb, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="18080000d0ffffff000000000000001718110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b706000014000000b7030000000d00008500000005000000bca900000000000035090100000000009500000000000000b7020000000000007b6af8ff00000000b50902000f0000007baaf0ff00000000bf8700000000000007080000fffdffffbf2400000000000007060000f0ffffff740200000800000018200000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7010000080000004608f0ff76000000bf9800000000000079080000000000008500000005000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0xd, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) 1.45094155s ago: executing program 0 (id=3404): r0 = socket(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000440)=ANY=[@ANYBLOB="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"/3344], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfe37}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000001a00)="b907ef23f66ad4f05c13e542703f", 0x0, 0x2000000, 0x18000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) (async) r2 = accept4$nfc_llcp(r0, &(0x7f0000000000), &(0x7f0000000080)=0x60, 0x400) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r2, 0x8983, &(0x7f00000000c0)={0x8, 'caif0\x00', {'veth1\x00'}, 0x5}) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000002d40)=@newtaction={0x18, 0x31, 0x1, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x8000) 1.338577158s ago: executing program 4 (id=3405): bind$unix(0xffffffffffffffff, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) accept$inet(0xffffffffffffffff, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000004f80)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000002540)={0x2, 0x4e23, @loopback}, 0x10, 0x0}}], 0x2, 0x4044880) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) bind$inet6(r1, 0x0, 0x0) syz_emit_ethernet(0xf5, &(0x7f0000000300)={@link_local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x34}, @val={@void}, {@ipv6={0x86dd, @udp={0x0, 0x6, "910100", 0xbb, 0x11, 0xff, @remote, @local, {[], {0x0, 0xe22, 0xbb, 0x0, @opaque="9f79e0ec785db2cff0f3194b8c0dde32e97fa3c8ea2d080032d903ab9f0daaba1e72f5be2a8cf109237713eb7f31c304a084268cc0fc5b577e2427f57c27ffa66bf26fd96a79d3662c927bab0a80b2698d740907196ffd801598b51ff315b323b82ec752626178fbd6ebbb62ac8e326d7cef6d3787cd094763de7109e405551ff4f442c3dee7aeb5b2358407d674b4854d6af2d21cea55002c13acb864b27c3f9791295ea96376ddd9813e29b1630ad4195582"}}}}}}, 0x0) 697.879093ms ago: executing program 4 (id=3406): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_SIOCGSKNS(r1, 0x894c, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x16, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={r2, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c0000001d00070f000000000000000007000000", @ANYRES32=r4, @ANYBLOB="0000520006000500010000000800", @ANYRES16=r3], 0x2c}}, 0x20008000) r5 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)={0x48, r5, 0x1, 0x3, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x2}, @NLBL_CIPSOV4_A_TAGLST={0x24, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x2}, {0x5, 0x3, 0x1}, {0x5}, {0x5, 0x3, 0x1}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x48}, 0x1, 0x0, 0x0, 0xc082}, 0x20004080) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000680)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x44, r8, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x8, 0x34}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xc}]}, 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r6, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x2c, r8, 0x300, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x52e}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x790}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x0) 523.134208ms ago: executing program 3 (id=3407): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000d00)=@newtaction={0x3a4, 0x30, 0x871a15abc695fb3f, 0x70bd2d, 0x25dfdbfe, {}, [{0x390, 0x1, [@m_connmark={0x34, 0x1, 0x0, 0x0, {{0xd}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_xt={0x358, 0xafc, 0x0, 0x0, {{0x7}, {0x230, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'nat\x00'}, @TCA_IPT_TARG={0x75, 0x6, {0x3555, 'security\x00', 0x0, 0x1, "541ef989bbc214e07f8d0d330fb31e8583475ff8108b4f494f3fe32c38c1ecb38b2a98750b712c3c812e2b6600cd9c4de139536e27176a3eaec328d55d5bc46b6ebf18007b88666a7016b7"}}, @TCA_IPT_TARG={0x4a, 0x6, {0x7dd, 'security\x00', 0x2, 0x1, "008041bbaf026554ad715491ecc811b63472baf1b88e0bead2a3b9d5dfa6e956"}}, @TCA_IPT_TARG={0xf2, 0x6, {0x1fcd, 'mangle\x00', 0xb1, 0xf, "172816ce56ba4e6c8d4dbe63210a892902e5528365bf7238ff87ccc8e3a339c916766f6f68581a8edd47710482cc240e0d4fd6d1404a1f8107672fd4b156b289041028beb6d4afc0813ef854e7c47f74cb348520995f6a3376de0c7fd990f41459629bfafb7abaa1bb6570a05b25021b4da1fe18b266959b9422706212d2624fe0f1bf8208b51526c06d450192bdb838c4274347828da2dac6b4bb6d57fe371924f9ecafcf16dd655964edb8bbf8aeda8a7655ba42992be1b4c5289ea19a29de128a23b213ace861"}}, @TCA_IPT_TABLE={0x24, 0x1, 'filter\x00'}, @TCA_IPT_TABLE={0x24, 0x1, 'filter\x00'}, @TCA_IPT_INDEX={0x8, 0x3, 0x7}]}, {0x101, 0x6, "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"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x4, 0x1}}}}]}]}, 0x3a4}, 0x1, 0x0, 0x0, 0x11}, 0x4000054) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454ca, &(0x7f0000000100)=ANY=[@ANYBLOB='..']) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000700000002000000ffff000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000700850000002d"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$inet(0x10, 0x3, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000002180)=ANY=[@ANYBLOB="b8000000290001000000000000080000ac1414bb000000000000000000000000fc00000000000000000000000000000000000000100000000200200000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000ea4400000000000000005f0833f0000000000000000000000000010000000000000009000000000000000a00dfec800000000000000000000000160000040000000002"], 0xb8}, 0x1, 0x0, 0x0, 0x2404c931}, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r6 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r6, 0x10e, 0xb, &(0x7f0000000000)=0x3ff, 0x4) sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000480)=@newqdisc={0x40, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r5, {}, {0xffff, 0xffff}, {0x2, 0xd}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x10, 0x2, [@TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME={0xc, 0x8, 0xffffffffffffffff}]}}]}, 0x40}}, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0), 0xc) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000040)={0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000080)=0x20) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000240)=ANY=[@ANYBLOB="4c00000047000701feffffffffffffff017c0020380004804e2d4e3a382f", @ANYRESDEC=r7], 0x4c}, 0x1, 0x0, 0x0, 0x2400c881}, 0x2400c014) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x2000000, 0x12, r1, 0xa83db000) syz_genetlink_get_family_id$wireguard(&(0x7f0000000340), r1) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/pid\x00') unshare(0x22020600) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x8, &(0x7f00000002c0)=0x72d7, 0x4) ioctl$INCFS_IOC_FILL_BLOCKS(r3, 0x80106720, &(0x7f00000009c0)={0x3, &(0x7f0000000500)=[{0x8, 0x71, &(0x7f0000000380)="3d2cfa33f729fac6651923837b25f57796835b0dcd2ec70b1488143a056be523130d63bbd8e2a307063afbbe3e21c53de865a93f6f1e45d2184739543e35d94753920ba7891b6b86a52905b4a9ad2daf70adabd9807c60da89c8add7a12a6a127aed4447665a6a75c7d412ab51794ff2e7", 0x1}, {0xd, 0x3e, &(0x7f00000005c0)="cd8ef4b2abe005f2e9608382becfcc2eb316b1a4b1ca568abb0cadd0a382fd1a8f03c9e838711eb465e499854490ec118d1866e07c5338e9a9823d9c0a8e", 0x1, 0x1}, {0xffffff81, 0xa1, &(0x7f0000000880)="f54b41ae1c263527913755149571a935f90d2e691f6917bfd49025aae6751324a5bdb93db7607465edc92e4db3b8a690672c6c09373978fd06cde7119f7a3e4ae2d93a70ec74becbea16f39ea8622dee61ec07dfde3d41c0c9761e7af4f87b32b9f67d18d8eda99197d7982f4169872ef1ec07c608405bf01fe772b8570cc8af71f81c62b1b53236d24797d527dfc5fdbcfb3ada3efa51856ccd1964b8ba7fe860"}]}) r8 = accept$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, &(0x7f0000000140)=0x10) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000280)=@req={0x2, 0x7, 0x3, 0x39}, 0x10) ioctl$sock_inet_SIOCRTMSG(r8, 0x890d, &(0x7f0000000200)={0x0, {0x2, 0x4e23, @remote}, {0x2, 0x4e23, @empty}, {0x2, 0x4e23, @local}, 0x0, 0x0, 0x0, 0x0, 0xfcbd, &(0x7f0000000180)='bond_slave_0\x00', 0x7, 0x0, 0xf89d}) 453.592392ms ago: executing program 0 (id=3408): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newsa={0x144, 0x10, 0x1, 0x0, 0x0, {{@in6=@private2, @in6=@private2, 0x0, 0xecdf, 0x0, 0x3}, {@in=@broadcast, 0x0, 0x32}, @in=@rand_addr=0x640100fe, {0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x6}, {0x0, 0x1, 0x80000000}, {0x0, 0x0, 0x2}, 0x0, 0x0, 0x2, 0x0, 0x73, 0x4c}, [@algo_auth_trunc={0x4c, 0x14, {{'hmac(sha256)\x00'}, 0x0, 0x80}}, @iptfs_max_qsize={0x8}]}, 0x144}, 0x1, 0x0, 0x0, 0x4040000}, 0x28048884) 359.089443ms ago: executing program 0 (id=3409): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x2000cc80) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f000000b500), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r2, &(0x7f000000d040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)={0x3c, r1, 0x8de13c6b70ae92c3, 0x41003, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x20, 0x11d, 0x0, 0x1, [{0xfffffffffffffcec, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xe}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}]}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$NL80211_CMD_REQ_SET_REG(r0, &(0x7f0000000500)={&(0x7f00000001c0), 0xc, &(0x7f00000004c0)={&(0x7f0000000540)={0xfeff, r1, 0x400, 0x70bd29, 0x25dfdbfb, {}, [@NL80211_ATTR_REG_RULES={0x48, 0x22, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x3}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x1}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x8}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x1}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0xfffffffb}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x4}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0xff}]}]}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x4d}, @NL80211_ATTR_REG_RULES={0x4c, 0x22, 0x0, 0x1, [{0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xcd8}, @NL80211_ATTR_DFS_CAC_TIME={0x8}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0xa}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0xd}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x2}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x81}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x4}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x7f}]}]}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x81}, @NL80211_ATTR_REG_RULES={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0xc0}, 0x1, 0x0, 0x0, 0x40000000}, 0x8010) (async) sendmsg$NL80211_CMD_REQ_SET_REG(r0, &(0x7f0000000500)={&(0x7f00000001c0), 0xc, &(0x7f00000004c0)={&(0x7f0000000540)={0xfeff, r1, 0x400, 0x70bd29, 0x25dfdbfb, {}, [@NL80211_ATTR_REG_RULES={0x48, 0x22, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x3}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x1}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x8}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x1}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0xfffffffb}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x4}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0xff}]}]}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x4d}, @NL80211_ATTR_REG_RULES={0x4c, 0x22, 0x0, 0x1, [{0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xcd8}, @NL80211_ATTR_DFS_CAC_TIME={0x8}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0xa}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0xd}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x2}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x81}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x4}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x7f}]}]}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x81}, @NL80211_ATTR_REG_RULES={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0xc0}, 0x1, 0x0, 0x0, 0x40000000}, 0x8010) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0xc011}, 0x20000004) socket$inet(0x2, 0x2, 0x0) (async) r4 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r4, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) (async) setsockopt$inet_opts(r4, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_DELLINK(r5, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x40, 0x1404, 0x821, 0x70bd28, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0x8}, 0x20040804) sendto$inet(r4, 0x0, 0x0, 0x40010, &(0x7f0000000840)={0x2, 0x4e22, @multicast1}, 0x10) pipe(0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000140)) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010000104000000000000000000a80000", @ANYRES32=0x0, @ANYBLOB="4060000002400000140012800800010067726500080002800400120008001f00ff"], 0x3c}, 0x1, 0x0, 0x0, 0x40c0000}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001500010300000000000000000b000000fffa7b208cef4d4660909bc85572ad21923632778dca32b3c73b21e2064796ac44161997e66fb9b4806a818043b98a537ed167db4c0c45"], 0x14}}, 0x40088c0) (async) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001500010300000000000000000b000000fffa7b208cef4d4660909bc85572ad21923632778dca32b3c73b21e2064796ac44161997e66fb9b4806a818043b98a537ed167db4c0c45"], 0x14}}, 0x40088c0) 211.484258ms ago: executing program 4 (id=3410): r0 = socket(0xa, 0x5, 0x0) listen(r0, 0x1ff) (async) r1 = socket$inet_icmp(0x2, 0x2, 0x1) ioctl$sock_SIOCBRDELBR(r1, 0x89a1, &(0x7f0000000000)='veth0_virt_wifi\x00') (async) pread64(r0, &(0x7f0000000080)=""/124, 0x7c, 0x0) sendmsg$inet_sctp(r0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="30000000000000008400000001", @ANYRESDEC=r1, @ANYRES16=0x0, @ANYRES8=r1, @ANYRES32=r0], 0x30}, 0x4000040) 157.758499ms ago: executing program 1 (id=3411): sendmsg(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000280)=@in6={0xa, 0x4e23, 0x40, @mcast2, 0xfff}, 0x80, 0x0, 0x0, &(0x7f00000008c0)=[{0xf8, 0x10b, 0x3, "b38ad0fa5344f86392a8a624588a9ebd811192cbcbc48c43148a7cc729a98cdc74f191ae2cd62d2652d78d6acf62b5eb8f161c8b04b3b2b547119b38e2badd726674a4693c080fe5c3492cb155656387a02c999695975d3d6137c986cb152d529c9225c772f2f854bf5ab89e259312dacf6b9debd2bf43be3dc19840f0c35b2d960ac50a9f2bcf98156f76700462166d7eb6416b2a7510be974b3f7a06c8927e28a62f708cce515c9c922c8c0c8daf4646e725d7282571b819097b58963d71992c2938f34c3516c547423d99a2f90f3a146a044cb732f4f4a0305c9d37fcb667e5"}, {0x28, 0xd, 0x800, "c133a12a91872b3730467c92a3a5050f02b82b"}, {0x50, 0x112, 0x3ff, "ae15b1a3e016bb782adb738fa764d4487026530ac6f50e3b31ec875a38f17bac40e87117dbd6ba47cf721b216e5b8cb28d424f1b5ed9793f5167"}, {0x30, 0x10a, 0xa63, "fa08ab919987305c8ad63785f4a4bc842436d5cb79f70a5d76"}, {0x10, 0x113, 0x9}, {0x10, 0x110, 0x400004}], 0x1c0}, 0x4000c010) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000005000000fd0900008400000005010000", @ANYRES32=0xffffffffffffffff, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000f6"], 0x50) close(0x3) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="0a00000004000000080000000a"], 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x6, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000800000002000000ffff000005"], 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0x4, 0x1, 0x100, 0x0, 0x0, 0x3b8000, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000611800000000000018110000", @ANYRES32=r3, @ANYRES32=r1, @ANYRES16=0x0, @ANYBLOB="0000000000000000bfa200000000000007020000f8ffffff850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0xe, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r5}, 0xc) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, &(0x7f0000000840)=""/121, &(0x7f0000000680), &(0x7f0000000540), 0x6c, r0}, 0x38) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), r6) sendmsg$IPVS_CMD_NEW_DEST(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a80)=ANY=[@ANYBLOB="8c000000", @ANYRESOCT=r4, @ANYBLOB="01000000000000f4ff000500000030000180060001000a00000006000200110000001400030000000000000000000000000000000001060004001f900000480002803400010000000000000000000000000000000000060002001f90000008000300020000000c00040001000000080005"], 0x8c}}, 0x0) r7 = socket(0x1e, 0x6, 0x0) setsockopt$sock_int(r7, 0x1, 0x2e, &(0x7f0000000040)=0x3, 0x4) pipe(&(0x7f0000019480)={0xffffffffffffffff, 0xffffffffffffffff}) close(r8) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r9, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) setsockopt$inet_tcp_TCP_REPAIR(r8, 0x6, 0x13, &(0x7f0000000300)=0x1, 0x4) connect$inet(r9, &(0x7f00000006c0)={0x2, 0x0, @empty}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r9, 0x6, 0x13, &(0x7f0000000900)=0xffffffffffffffff, 0x4) write$cgroup_subtree(r8, &(0x7f0000000000)={[{0x2b, 'hugetlb'}]}, 0x9) sendmmsg$inet(r9, &(0x7f0000000f00)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000080)="b5", 0x1}, {&(0x7f0000000200)="c9", 0x1}, {&(0x7f0000000340)="01", 0x1}, {&(0x7f0000000400)='Q', 0x1}, {&(0x7f0000000500)="d7", 0x1}, {&(0x7f0000000600)='J', 0x1}, {&(0x7f0000000700)=')', 0x1}, {&(0x7f0000000180)='<', 0x1}], 0x8}}, {{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000a40)="db", 0x1}, {&(0x7f0000001a40)="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", 0x5c1}, {&(0x7f0000000840)="e3", 0x1}, {&(0x7f0000000680)="a7", 0x1}, {&(0x7f0000000540)='k', 0x1}, {&(0x7f00000002c0)="c8", 0x1}, {&(0x7f0000002bc0)='>', 0x1}, {&(0x7f0000000440)="cb508b0e", 0x4}], 0x8}}], 0x2, 0x4008440) epoll_create1(0x0) 67.486403ms ago: executing program 4 (id=3412): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4c, &(0x7f0000000280)=0x8001, 0x4) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in6=@mcast1, 0x0, 0x0, 0xffff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x1}, {0x0, 0x1}, 0x0, 0x0, 0x1}, {{@in6=@remote, 0x4d5, 0x33}, 0x2, @in=@rand_addr=0x64010100, 0x0, 0x0, 0x0, 0xb7, 0x0, 0x8000001}}, 0xe8) r1 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r1, &(0x7f0000000600)={&(0x7f0000000040)={0x2, 0xefff, @empty}, 0x10, &(0x7f00000000c0)=[{&(0x7f00000002c0)="2a00a0df167e6d22", 0x8}], 0x1, &(0x7f0000000340)=ANY=[@ANYBLOB="1c000000000000000000000007000000830b040a0101027f000001010e0000001c"], 0x40}, 0x0) 2.985432ms ago: executing program 3 (id=3413): unshare(0x20000400) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={0x0, 0x0, 0x26, 0x0, 0x1, 0xfffffffd}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r0, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}}, 0x10) 0s ago: executing program 4 (id=3414): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x4000002, 0x3032, 0xffffffffffffffff, 0x2a1cf000) (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x3, 0x28011, r0, 0xc6e9f000) (async, rerun: 64) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) (async, rerun: 64) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000840)={r2, r1}, 0xc) (async) mmap$xdp(&(0x7f00002ec000/0x3000)=nil, 0x3000, 0x2000001, 0x110, 0xffffffffffffffff, 0x80000000) bind$vsock_stream(r0, &(0x7f00000000c0)={0x28, 0x0, 0x2710, @local}, 0x10) (async) ioctl$OCFS2_IOC_UNRESVSP64(r0, 0x4030582b, &(0x7f0000000080)={0x1, 0x1, 0xfb, 0x4, 0x6, 0x4}) kernel console output (not intermixed with test programs): arding state [ 587.167502][ T6559] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 587.237318][ C1] Dropped outbound packet type=88ca [ 587.326966][T17830] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 587.351142][T17834] 8021q: adding VLAN 0 to HW filter on device bond12 [ 587.418481][ T6566] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 587.531970][ T6590] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 587.532877][T17843] bridge0: port 3(syz_tun) entered blocking state [ 587.532966][T17843] bridge0: port 3(syz_tun) entered disabled state [ 587.533130][T17843] syz_tun: entered allmulticast mode [ 587.540293][T17843] syz_tun: entered promiscuous mode [ 587.621615][T17843] bridge0: port 4(ip6gretap0) entered blocking state [ 587.621717][T17843] bridge0: port 4(ip6gretap0) entered disabled state [ 587.621872][T17843] ip6gretap0: entered allmulticast mode [ 587.644492][T17843] ip6gretap0: left allmulticast mode [ 587.648591][ T6590] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 587.731756][T17845] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2814'. [ 587.784299][T17848] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2815'. [ 587.911231][T17851] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2816'. [ 587.911256][T17851] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2816'. [ 587.911271][T17851] netlink: 'syz.4.2816': attribute type 4 has an invalid length. [ 587.994551][T17851] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2816'. [ 588.277079][ C1] Dropped outbound packet type=88ca [ 588.694648][T17897] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2826'. [ 588.791058][T17505] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 588.906151][T17906] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2830'. [ 588.906174][T17906] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2830'. [ 588.906188][T17906] netlink: 'syz.2.2830': attribute type 4 has an invalid length. [ 588.951250][T17906] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2830'. [ 589.000387][T17505] veth0_vlan: entered promiscuous mode [ 589.059303][T17505] veth1_vlan: entered promiscuous mode [ 589.136503][T17505] veth0_macvtap: entered promiscuous mode [ 589.161296][T17505] veth1_macvtap: entered promiscuous mode [ 589.317180][ C1] Dropped outbound packet type=88ca [ 589.584783][T17921] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2831'. [ 589.645330][T17505] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 589.672618][T17505] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 590.137116][T17939] netlink: 'syz.4.2833': attribute type 1 has an invalid length. [ 590.137580][ T6500] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 590.137657][ T6500] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 590.137693][ T6500] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 590.137726][ T6500] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 590.357135][ C1] Dropped outbound packet type=88ca [ 590.592238][ T6568] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 590.592260][ T6568] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 590.695644][T17951] vlan2: entered promiscuous mode [ 590.695667][T17951] bridge0: entered promiscuous mode [ 590.843089][ T6559] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 590.843110][ T6559] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 591.072823][T17958] netlink: 'syz.0.2840': attribute type 4 has an invalid length. [ 591.215188][T17968] netlink: 'syz.1.2843': attribute type 23 has an invalid length. [ 591.322716][ T6566] net_ratelimit: 21 callbacks suppressed [ 591.322738][ T6566] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 591.397090][ C1] Dropped outbound packet type=88ca [ 591.428863][ T6566] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 591.551879][ T6566] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 591.658303][ T6568] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 591.771553][ T6559] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 591.878848][ T6559] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 591.992125][ T6559] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 592.116622][T17992] FAULT_INJECTION: forcing a failure. [ 592.116622][T17992] name failslab, interval 1, probability 0, space 0, times 0 [ 592.116654][T17992] CPU: 0 UID: 0 PID: 17992 Comm: syz.2.2850 Not tainted syzkaller #0 PREEMPT(full) [ 592.116675][T17992] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 592.116686][T17992] Call Trace: [ 592.116694][T17992] [ 592.116705][T17992] dump_stack_lvl+0xe8/0x150 [ 592.116740][T17992] should_fail_ex+0x410/0x560 [ 592.116769][T17992] should_failslab+0xa8/0x100 [ 592.116795][T17992] __kvmalloc_node_noprof+0x176/0x820 [ 592.116818][T17992] ? __kvmalloc_node_noprof+0x345/0x820 [ 592.116836][T17992] ? bpf_compute_postorder+0xda/0x970 [ 592.116864][T17992] ? bpf_compute_postorder+0xda/0x970 [ 592.116899][T17992] bpf_compute_postorder+0xda/0x970 [ 592.116928][T17992] ? __pfx_check_and_resolve_insns+0x10/0x10 [ 592.116952][T17992] ? add_kfuncs+0x251/0x2e0 [ 592.116976][T17992] bpf_check+0x261f/0x2ef0 [ 592.117015][T17992] ? __pfx_bpf_check+0x10/0x10 [ 592.117042][T17992] ? bpf_obj_name_cpy+0x194/0x1e0 [ 592.117069][T17992] bpf_prog_load+0x14d6/0x1c20 [ 592.117100][T17992] ? __pfx_bpf_prog_load+0x10/0x10 [ 592.117144][T17992] __sys_bpf+0xd0d/0xd90 [ 592.117171][T17992] ? __pfx___sys_bpf+0x10/0x10 [ 592.117201][T17992] ? __fget_files+0x2a/0x420 [ 592.117243][T17992] ? ksys_write+0x242/0x270 [ 592.117270][T17992] ? __pfx_ksys_write+0x10/0x10 [ 592.117302][T17992] __x64_sys_bpf+0xba/0xd0 [ 592.117323][T17992] do_syscall_64+0x166/0x520 [ 592.117351][T17992] ? trace_irq_disable+0x3b/0x140 [ 592.117370][T17992] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 592.117390][T17992] ? clear_bhb_loop+0x70/0xc0 [ 592.117413][T17992] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 592.117432][T17992] RIP: 0033:0x7f10be79e159 [ 592.117450][T17992] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 592.117465][T17992] RSP: 002b:00007f10bf722028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 592.117485][T17992] RAX: ffffffffffffffda RBX: 00007f10bea25fa0 RCX: 00007f10be79e159 [ 592.117499][T17992] RDX: 0000000000000094 RSI: 0000200000000300 RDI: 0000000000000005 [ 592.117510][T17992] RBP: 00007f10bf722090 R08: 0000000000000000 R09: 0000000000000000 [ 592.117522][T17992] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 592.117533][T17992] R13: 00007f10bea26038 R14: 00007f10bea25fa0 R15: 00007ffde5b189a8 [ 592.117565][T17992] [ 592.119407][ T6559] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 592.228182][ T6566] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 592.341321][ T6500] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 592.414424][T17995] netlink: 'syz.0.2851': attribute type 10 has an invalid length. [ 592.414517][T17995] tipc: Resetting bearer [ 592.437078][ C1] Dropped outbound packet type=88ca [ 592.586264][T17995] bridge0: port 2(team0) entered disabled state [ 592.724406][T17995] team0 (unregistering): left allmulticast mode [ 592.725291][T17995] team0 (unregistering): left promiscuous mode [ 592.726360][T17995] bridge0: port 2(team0) entered disabled state [ 592.838496][T18010] __nla_validate_parse: 7 callbacks suppressed [ 592.838516][T18010] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2854'. [ 592.984227][T17995] tipc: Disabling bearer [ 593.044755][T17995] team0 (unregistering): Port device bridge8 removed [ 593.060634][T18002] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2853'. [ 593.061068][T18004] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2854'. [ 593.061089][T18004] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2854'. [ 593.061182][T18004] netlink: 'syz.1.2854': attribute type 4 has an invalid length. [ 593.470164][T18032] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2861'. [ 593.477088][ C1] Dropped outbound packet type=88ca [ 593.624594][T18028] xt_check_table_hooks: 25 callbacks suppressed [ 593.624714][T18028] x_tables: duplicate underflow at hook 2 [ 593.653584][T18024] syzkaller0: entered promiscuous mode [ 593.653608][T18024] syzkaller0: entered allmulticast mode [ 594.517071][ C1] Dropped outbound packet type=88ca [ 594.610647][T18055] netlink: 'syz.4.2864': attribute type 5 has an invalid length. [ 594.645434][T18054] FAULT_INJECTION: forcing a failure. [ 594.645434][T18054] name failslab, interval 1, probability 0, space 0, times 0 [ 594.645465][T18054] CPU: 1 UID: 0 PID: 18054 Comm: syz.2.2863 Not tainted syzkaller #0 PREEMPT(full) [ 594.645485][T18054] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 594.645496][T18054] Call Trace: [ 594.645504][T18054] [ 594.645512][T18054] dump_stack_lvl+0xe8/0x150 [ 594.645543][T18054] should_fail_ex+0x410/0x560 [ 594.645574][T18054] should_failslab+0xa8/0x100 [ 594.645598][T18054] __kvmalloc_node_noprof+0x176/0x820 [ 594.645617][T18054] ? __pfx_bpf_compute_const_regs+0x10/0x10 [ 594.645643][T18054] ? sort_subprogs_topo+0xbf/0xf20 [ 594.645662][T18054] ? sort_subprogs_topo+0xbf/0xf20 [ 594.645688][T18054] sort_subprogs_topo+0xbf/0xf20 [ 594.645709][T18054] ? bpf_prune_dead_branches+0xa3b/0xab0 [ 594.645750][T18054] bpf_check+0x26fa/0x2ef0 [ 594.645787][T18054] ? __pfx_bpf_check+0x10/0x10 [ 594.645811][T18054] ? bpf_obj_name_cpy+0x194/0x1e0 [ 594.645839][T18054] bpf_prog_load+0x14d6/0x1c20 [ 594.645872][T18054] ? __pfx_bpf_prog_load+0x10/0x10 [ 594.645919][T18054] __sys_bpf+0xd0d/0xd90 [ 594.645946][T18054] ? __pfx___sys_bpf+0x10/0x10 [ 594.645977][T18054] ? __fget_files+0x2a/0x420 [ 594.646020][T18054] ? ksys_write+0x242/0x270 [ 594.646049][T18054] ? __pfx_ksys_write+0x10/0x10 [ 594.646081][T18054] __x64_sys_bpf+0xba/0xd0 [ 594.646102][T18054] do_syscall_64+0x166/0x520 [ 594.646127][T18054] ? trace_irq_disable+0x3b/0x140 [ 594.646145][T18054] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 594.646164][T18054] ? clear_bhb_loop+0x70/0xc0 [ 594.646187][T18054] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 594.646211][T18054] RIP: 0033:0x7f10be79e159 [ 594.646229][T18054] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 594.646244][T18054] RSP: 002b:00007f10bf722028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 594.646263][T18054] RAX: ffffffffffffffda RBX: 00007f10bea25fa0 RCX: 00007f10be79e159 [ 594.646277][T18054] RDX: 0000000000000094 RSI: 0000200000000300 RDI: 0000000000000005 [ 594.646289][T18054] RBP: 00007f10bf722090 R08: 0000000000000000 R09: 0000000000000000 [ 594.646301][T18054] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 594.646313][T18054] R13: 00007f10bea26038 R14: 00007f10bea25fa0 R15: 00007ffde5b189a8 [ 594.646350][T18054] [ 595.089515][T18055] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2864'. [ 595.244253][T18069] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2868'. [ 595.244278][T18069] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2868'. [ 595.244293][T18069] netlink: 'syz.3.2868': attribute type 4 has an invalid length. [ 595.262531][T18069] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2868'. [ 595.556173][T18079] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2869'. [ 595.557137][ C1] Dropped outbound packet type=88ca [ 595.606779][T18081] xt_l2tp: wrong L2TP version: 0 [ 596.045791][T18094] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 596.058993][T18094] tc_dump_action: action bad kind [ 596.178308][T18096] vlan2: entered promiscuous mode [ 596.447519][T13914] net_ratelimit: 18 callbacks suppressed [ 596.447541][T13914] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 596.472696][T18119] netlink: 'syz.2.2880': attribute type 2 has an invalid length. [ 596.597134][ C1] Dropped outbound packet type=88ca [ 596.827346][ T6559] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 596.937162][ T6568] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 597.057319][ T6559] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 597.171822][ T6568] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 597.287107][ T6568] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 597.310117][T18146] dummy0: left promiscuous mode [ 597.312062][T18146] bridge_slave_0: left promiscuous mode [ 597.312079][T18146] bridge_slave_0: left allmulticast mode [ 597.389300][T18146] gtp0: left promiscuous mode [ 597.389322][T18146] gtp0: left allmulticast mode [ 597.394825][T18146] bond2: left promiscuous mode [ 597.394844][T18146] wireguard0: left promiscuous mode [ 597.395291][T18146] vxcan3: left allmulticast mode [ 597.395402][T18146] xfrm1: left allmulticast mode [ 597.395876][T18146] bond4: left promiscuous mode [ 597.395889][T18146] gre1: left promiscuous mode [ 597.434665][T18148] netlink: zone id is out of range [ 597.434679][T18148] netlink: zone id is out of range [ 597.434686][T18148] netlink: zone id is out of range [ 597.434693][T18148] netlink: zone id is out of range [ 597.450477][T18146] bond6: left allmulticast mode [ 597.464228][T18146] bond8: left promiscuous mode [ 597.464250][T18146] ip6gre1: left promiscuous mode [ 597.477163][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 597.477959][T18146] macsec1: left allmulticast mode [ 597.478076][T18146] erspan1: left promiscuous mode [ 597.478202][T18146] bond9: left promiscuous mode [ 597.478215][T18146] bond9: left allmulticast mode [ 597.478886][T18146] ip6gre2: left promiscuous mode [ 597.478900][T18146] ip6gre2: left allmulticast mode [ 597.483853][T18146] geneve4: left promiscuous mode [ 597.544177][T18146] vxlan1: left promiscuous mode [ 597.544200][T18146] vxlan1: left allmulticast mode [ 597.546547][T18146] vxlan2: left promiscuous mode [ 597.546568][T18146] vxlan2: left allmulticast mode [ 597.619807][T18146] bond12: left promiscuous mode [ 597.620573][T18146] macvtap1: left allmulticast mode [ 597.620735][T18146] macvtap2: left allmulticast mode [ 597.620922][T18146] macvtap3: left allmulticast mode [ 597.622774][ T6500] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 597.622804][ T6500] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 597.622842][ T6500] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 597.622865][ T6500] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 597.622901][ T6500] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 597.622926][ T6500] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 597.637180][ C1] Dropped outbound packet type=88ca [ 597.721662][ T6559] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 597.721696][ T6559] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 597.772203][T18152] syzkaller0: entered promiscuous mode [ 597.772387][T18152] syzkaller0: entered allmulticast mode [ 597.827100][T18161] FAULT_INJECTION: forcing a failure. [ 597.827100][T18161] name failslab, interval 1, probability 0, space 0, times 0 [ 597.827129][T18161] CPU: 0 UID: 0 PID: 18161 Comm: syz.2.2893 Not tainted syzkaller #0 PREEMPT(full) [ 597.827157][T18161] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 597.827167][T18161] Call Trace: [ 597.827175][T18161] [ 597.827183][T18161] dump_stack_lvl+0xe8/0x150 [ 597.827212][T18161] should_fail_ex+0x410/0x560 [ 597.827238][T18161] should_failslab+0xa8/0x100 [ 597.827260][T18161] __kvmalloc_node_noprof+0x176/0x820 [ 597.827281][T18161] ? __kvmalloc_node_noprof+0x345/0x820 [ 597.827297][T18161] ? bpf_compute_scc+0xd2/0xb10 [ 597.827324][T18161] ? bpf_compute_scc+0xd2/0xb10 [ 597.827359][T18161] bpf_compute_scc+0xd2/0xb10 [ 597.827401][T18161] bpf_check+0x2720/0x2ef0 [ 597.827430][T18161] ? __pfx_bpf_check+0x10/0x10 [ 597.827448][T18161] ? bpf_obj_name_cpy+0x194/0x1e0 [ 597.827470][T18161] bpf_prog_load+0x14d6/0x1c20 [ 597.827495][T18161] ? __pfx_bpf_prog_load+0x10/0x10 [ 597.827530][T18161] __sys_bpf+0xd0d/0xd90 [ 597.827551][T18161] ? __pfx___sys_bpf+0x10/0x10 [ 597.827575][T18161] ? __fget_files+0x2a/0x420 [ 597.827607][T18161] ? ksys_write+0x242/0x270 [ 597.827629][T18161] ? __pfx_ksys_write+0x10/0x10 [ 597.827654][T18161] __x64_sys_bpf+0xba/0xd0 [ 597.827671][T18161] do_syscall_64+0x166/0x520 [ 597.827690][T18161] ? trace_irq_disable+0x3b/0x140 [ 597.827703][T18161] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 597.827718][T18161] ? clear_bhb_loop+0x70/0xc0 [ 597.827736][T18161] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 597.827750][T18161] RIP: 0033:0x7f10be79e159 [ 597.827764][T18161] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 597.827775][T18161] RSP: 002b:00007f10bf722028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 597.827791][T18161] RAX: ffffffffffffffda RBX: 00007f10bea25fa0 RCX: 00007f10be79e159 [ 597.827802][T18161] RDX: 0000000000000094 RSI: 0000200000000300 RDI: 0000000000000005 [ 597.827811][T18161] RBP: 00007f10bf722090 R08: 0000000000000000 R09: 0000000000000000 [ 597.827820][T18161] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 597.827828][T18161] R13: 00007f10bea26038 R14: 00007f10bea25fa0 R15: 00007ffde5b189a8 [ 597.827852][T18161] [ 598.677179][ C1] Dropped outbound packet type=88ca [ 598.824576][T18204] __nla_validate_parse: 3 callbacks suppressed [ 598.824595][T18204] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2901'. [ 598.881005][T18209] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2900'. [ 598.920235][T18194] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2901'. [ 598.920260][T18194] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2901'. [ 598.920276][T18194] netlink: 'syz.4.2901': attribute type 4 has an invalid length. [ 599.086757][T18215] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2902'. [ 599.155033][T18214] syzkaller1: entered promiscuous mode [ 599.155053][T18214] syzkaller1: entered allmulticast mode [ 599.334065][T18223] FAULT_INJECTION: forcing a failure. [ 599.334065][T18223] name failslab, interval 1, probability 0, space 0, times 0 [ 599.334095][T18223] CPU: 0 UID: 0 PID: 18223 Comm: syz.4.2905 Not tainted syzkaller #0 PREEMPT(full) [ 599.334116][T18223] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 599.334127][T18223] Call Trace: [ 599.334133][T18223] [ 599.334141][T18223] dump_stack_lvl+0xe8/0x150 [ 599.334170][T18223] should_fail_ex+0x410/0x560 [ 599.334195][T18223] should_failslab+0xa8/0x100 [ 599.334219][T18223] __kvmalloc_node_noprof+0x176/0x820 [ 599.334241][T18223] ? bpf_compute_scc+0xb8/0xb10 [ 599.334266][T18223] ? bpf_compute_scc+0xb8/0xb10 [ 599.334298][T18223] bpf_compute_scc+0xb8/0xb10 [ 599.334345][T18223] bpf_check+0x2720/0x2ef0 [ 599.334379][T18223] ? __pfx_bpf_check+0x10/0x10 [ 599.334400][T18223] ? bpf_obj_name_cpy+0x194/0x1e0 [ 599.334425][T18223] bpf_prog_load+0x14d6/0x1c20 [ 599.334464][T18223] ? __pfx_bpf_prog_load+0x10/0x10 [ 599.334508][T18223] __sys_bpf+0xd0d/0xd90 [ 599.334534][T18223] ? __pfx___sys_bpf+0x10/0x10 [ 599.334562][T18223] ? __fget_files+0x2a/0x420 [ 599.334599][T18223] ? ksys_write+0x242/0x270 [ 599.334625][T18223] ? __pfx_ksys_write+0x10/0x10 [ 599.334653][T18223] __x64_sys_bpf+0xba/0xd0 [ 599.334673][T18223] do_syscall_64+0x166/0x520 [ 599.334696][T18223] ? trace_irq_disable+0x3b/0x140 [ 599.334713][T18223] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 599.334732][T18223] ? clear_bhb_loop+0x70/0xc0 [ 599.334755][T18223] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 599.334773][T18223] RIP: 0033:0x7f20c5d9e159 [ 599.334790][T18223] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 599.334805][T18223] RSP: 002b:00007f20c6c77028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 599.334824][T18223] RAX: ffffffffffffffda RBX: 00007f20c6025fa0 RCX: 00007f20c5d9e159 [ 599.334837][T18223] RDX: 0000000000000094 RSI: 0000200000000300 RDI: 0000000000000005 [ 599.334849][T18223] RBP: 00007f20c6c77090 R08: 0000000000000000 R09: 0000000000000000 [ 599.334860][T18223] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 599.334871][T18223] R13: 00007f20c6026038 R14: 00007f20c6025fa0 R15: 00007ffe76d33898 [ 599.334901][T18223] [ 599.717342][ C1] Dropped outbound packet type=88ca [ 599.785738][T18228] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2907'. [ 599.785757][T18228] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2907'. [ 599.786464][T18228] bond0: left allmulticast mode [ 599.786485][T18228] netdevsim netdevsim3 netdevsim1: left allmulticast mode [ 599.787396][T18228] bond0: left promiscuous mode [ 599.787415][T18228] netdevsim netdevsim3 netdevsim1: left promiscuous mode [ 599.790544][T18228] bridge0: port 2(bond0) entered disabled state [ 599.926732][T18235] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2909'. [ 600.699870][T18267] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2914'. [ 600.757136][ C1] Dropped outbound packet type=88ca [ 601.165267][T13914] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 601.165313][T13914] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 601.165344][T13914] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 601.165374][T13914] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 601.337501][T18281] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2917'. [ 601.613849][T18289] FAULT_INJECTION: forcing a failure. [ 601.613849][T18289] name failslab, interval 1, probability 0, space 0, times 0 [ 601.613882][T18289] CPU: 0 UID: 0 PID: 18289 Comm: syz.4.2919 Not tainted syzkaller #0 PREEMPT(full) [ 601.613903][T18289] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 601.613914][T18289] Call Trace: [ 601.613921][T18289] [ 601.613930][T18289] dump_stack_lvl+0xe8/0x150 [ 601.613961][T18289] should_fail_ex+0x410/0x560 [ 601.613988][T18289] should_failslab+0xa8/0x100 [ 601.614012][T18289] __kvmalloc_node_noprof+0x176/0x820 [ 601.614035][T18289] ? __kvmalloc_node_noprof+0x345/0x820 [ 601.614054][T18289] ? bpf_compute_scc+0x106/0xb10 [ 601.614080][T18289] ? bpf_compute_scc+0x106/0xb10 [ 601.614114][T18289] bpf_compute_scc+0x106/0xb10 [ 601.614161][T18289] bpf_check+0x2720/0x2ef0 [ 601.614202][T18289] ? __pfx_bpf_check+0x10/0x10 [ 601.614224][T18289] ? bpf_obj_name_cpy+0x194/0x1e0 [ 601.614254][T18289] bpf_prog_load+0x14d6/0x1c20 [ 601.614287][T18289] ? __pfx_bpf_prog_load+0x10/0x10 [ 601.614333][T18289] __sys_bpf+0xd0d/0xd90 [ 601.614368][T18289] ? __pfx___sys_bpf+0x10/0x10 [ 601.614400][T18289] ? __fget_files+0x2a/0x420 [ 601.614441][T18289] ? ksys_write+0x242/0x270 [ 601.614469][T18289] ? __pfx_ksys_write+0x10/0x10 [ 601.614501][T18289] __x64_sys_bpf+0xba/0xd0 [ 601.614522][T18289] do_syscall_64+0x166/0x520 [ 601.614547][T18289] ? trace_irq_disable+0x3b/0x140 [ 601.614565][T18289] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 601.614585][T18289] ? clear_bhb_loop+0x70/0xc0 [ 601.614608][T18289] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 601.614626][T18289] RIP: 0033:0x7f20c5d9e159 [ 601.614644][T18289] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 601.614659][T18289] RSP: 002b:00007f20c6c77028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 601.614680][T18289] RAX: ffffffffffffffda RBX: 00007f20c6025fa0 RCX: 00007f20c5d9e159 [ 601.614693][T18289] RDX: 0000000000000094 RSI: 0000200000000300 RDI: 0000000000000005 [ 601.614706][T18289] RBP: 00007f20c6c77090 R08: 0000000000000000 R09: 0000000000000000 [ 601.614717][T18289] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 601.614728][T18289] R13: 00007f20c6026038 R14: 00007f20c6025fa0 R15: 00007ffe76d33898 [ 601.614759][T18289] [ 601.797148][ C1] Dropped outbound packet type=88ca [ 601.967710][ T6500] net_ratelimit: 531 callbacks suppressed [ 601.967732][ T6500] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 602.081046][T13914] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 602.187283][ T6559] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 602.297459][ T6558] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 602.407147][T13914] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 602.478534][T18300] syzkaller1: entered promiscuous mode [ 602.478556][T18300] syzkaller1: entered allmulticast mode [ 602.517544][ T6559] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 602.761267][ T6558] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 602.837186][ C1] Dropped outbound packet type=88ca [ 602.879332][ T6558] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 603.039226][T13914] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 603.076274][T18322] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 603.147369][ T6558] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 603.846835][T18350] x_tables: ip6_tables: cgroup.0 match: invalid size 8 (kernel) != (user) 536 [ 603.860201][T18351] __nla_validate_parse: 3 callbacks suppressed [ 603.860218][T18351] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2936'. [ 603.860300][T18351] dummy0: left allmulticast mode [ 603.860503][T18351] dummy0: left promiscuous mode [ 603.860865][T18351] bridge0: port 3(dummy0) entered disabled state [ 603.877499][ C1] Dropped outbound packet type=88ca [ 603.915289][T18351] bridge_slave_1: left allmulticast mode [ 603.915595][T18351] bridge_slave_1: left promiscuous mode [ 603.916476][T18351] bridge0: port 2(bridge_slave_1) entered disabled state [ 603.976202][T18351] bridge_slave_0: left allmulticast mode [ 603.976547][T18351] bridge_slave_0: left promiscuous mode [ 603.980625][T18351] bridge0: port 1(bridge_slave_0) entered disabled state [ 604.191829][T18357] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2938'. [ 604.683038][T18389] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2947'. [ 604.893135][T18390] netlink: 'syz.3.2946': attribute type 2 has an invalid length. [ 604.917068][ C1] Dropped outbound packet type=88ca [ 605.174129][T18413] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2952'. [ 605.661258][T18433] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2958'. [ 605.789939][T18438] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2959'. [ 605.957077][ C1] Dropped outbound packet type=88ca [ 606.011703][T18447] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2960'. [ 606.326587][T18465] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2963'. [ 606.557771][T18471] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2966'. [ 606.997877][ C1] Dropped outbound packet type=88ca [ 607.057129][ T6559] net_ratelimit: 29 callbacks suppressed [ 607.057149][ T6559] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 607.168411][T18494] FAULT_INJECTION: forcing a failure. [ 607.168411][T18494] name failslab, interval 1, probability 0, space 0, times 0 [ 607.168449][T18494] CPU: 0 UID: 0 PID: 18494 Comm: syz.3.2972 Not tainted syzkaller #0 PREEMPT(full) [ 607.168470][T18494] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 607.168482][T18494] Call Trace: [ 607.168489][T18494] [ 607.168497][T18494] dump_stack_lvl+0xe8/0x150 [ 607.168537][T18494] should_fail_ex+0x410/0x560 [ 607.168564][T18494] should_failslab+0xa8/0x100 [ 607.168588][T18494] __kvmalloc_node_noprof+0x176/0x820 [ 607.168610][T18494] ? __kvmalloc_node_noprof+0x345/0x820 [ 607.168629][T18494] ? bpf_compute_scc+0xa26/0xb10 [ 607.168656][T18494] ? bpf_compute_scc+0xa26/0xb10 [ 607.168690][T18494] bpf_compute_scc+0xa26/0xb10 [ 607.168739][T18494] bpf_check+0x2720/0x2ef0 [ 607.168776][T18494] ? __pfx_bpf_check+0x10/0x10 [ 607.168799][T18494] ? bpf_obj_name_cpy+0x194/0x1e0 [ 607.168829][T18494] bpf_prog_load+0x14d6/0x1c20 [ 607.168862][T18494] ? __pfx_bpf_prog_load+0x10/0x10 [ 607.168925][T18494] __sys_bpf+0xd0d/0xd90 [ 607.168954][T18494] ? __pfx___sys_bpf+0x10/0x10 [ 607.168986][T18494] ? __fget_files+0x2a/0x420 [ 607.169024][T18494] ? ksys_write+0x242/0x270 [ 607.169053][T18494] ? __pfx_ksys_write+0x10/0x10 [ 607.169084][T18494] __x64_sys_bpf+0xba/0xd0 [ 607.169105][T18494] do_syscall_64+0x166/0x520 [ 607.169130][T18494] ? trace_irq_disable+0x3b/0x140 [ 607.169147][T18494] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 607.169166][T18494] ? clear_bhb_loop+0x70/0xc0 [ 607.169189][T18494] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 607.169207][T18494] RIP: 0033:0x7fa34459e159 [ 607.169224][T18494] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 607.169239][T18494] RSP: 002b:00007fa345444028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 607.169258][T18494] RAX: ffffffffffffffda RBX: 00007fa344825fa0 RCX: 00007fa34459e159 [ 607.169271][T18494] RDX: 0000000000000094 RSI: 0000200000000300 RDI: 0000000000000005 [ 607.169281][T18494] RBP: 00007fa345444090 R08: 0000000000000000 R09: 0000000000000000 [ 607.169281][ T6590] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 607.169292][T18494] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 607.169303][T18494] R13: 00007fa344826038 R14: 00007fa344825fa0 R15: 00007ffe02651808 [ 607.169335][T18494] [ 607.284216][ T6568] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 607.387180][ T6566] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 607.497130][ T6558] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 607.617587][ T6568] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 607.731636][ T6558] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 607.796539][T18498] gre3: entered promiscuous mode [ 607.839040][ T6559] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 608.019609][ T6558] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 608.037082][ C1] Dropped outbound packet type=88ca [ 608.148422][ T6558] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 608.447523][T18522] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2979'. [ 608.574477][T18514] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 608.574664][T18514] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 608.589208][T18514] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 608.589391][T18514] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 608.679243][T18525] vcan0: tx drop: invalid da for name 0x0000000000000002 [ 608.768367][T18529] SET target dimension over the limit! [ 609.077281][ C1] Dropped outbound packet type=88ca [ 609.519032][T18544] FAULT_INJECTION: forcing a failure. [ 609.519032][T18544] name failslab, interval 1, probability 0, space 0, times 0 [ 609.519067][T18544] CPU: 0 UID: 0 PID: 18544 Comm: syz.3.2984 Not tainted syzkaller #0 PREEMPT(full) [ 609.519089][T18544] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 609.519100][T18544] Call Trace: [ 609.519108][T18544] [ 609.519117][T18544] dump_stack_lvl+0xe8/0x150 [ 609.519148][T18544] should_fail_ex+0x410/0x560 [ 609.519175][T18544] should_failslab+0xa8/0x100 [ 609.519200][T18544] __kvmalloc_node_noprof+0x176/0x820 [ 609.519222][T18544] ? __kvmalloc_node_noprof+0x345/0x820 [ 609.519241][T18544] ? bpf_compute_scc+0x106/0xb10 [ 609.519268][T18544] ? bpf_compute_scc+0x106/0xb10 [ 609.519302][T18544] bpf_compute_scc+0x106/0xb10 [ 609.519350][T18544] bpf_check+0x2720/0x2ef0 [ 609.519397][T18544] ? __pfx_bpf_check+0x10/0x10 [ 609.519419][T18544] ? bpf_obj_name_cpy+0x194/0x1e0 [ 609.519449][T18544] bpf_prog_load+0x14d6/0x1c20 [ 609.519482][T18544] ? __pfx_bpf_prog_load+0x10/0x10 [ 609.519530][T18544] __sys_bpf+0xd0d/0xd90 [ 609.519558][T18544] ? __pfx___sys_bpf+0x10/0x10 [ 609.519589][T18544] ? __fget_files+0x2a/0x420 [ 609.519632][T18544] ? ksys_write+0x242/0x270 [ 609.519661][T18544] ? __pfx_ksys_write+0x10/0x10 [ 609.519693][T18544] __x64_sys_bpf+0xba/0xd0 [ 609.519714][T18544] do_syscall_64+0x166/0x520 [ 609.519738][T18544] ? trace_irq_disable+0x3b/0x140 [ 609.519756][T18544] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 609.519775][T18544] ? clear_bhb_loop+0x70/0xc0 [ 609.519798][T18544] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 609.519817][T18544] RIP: 0033:0x7fa34459e159 [ 609.519834][T18544] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 609.519850][T18544] RSP: 002b:00007fa345444028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 609.519869][T18544] RAX: ffffffffffffffda RBX: 00007fa344825fa0 RCX: 00007fa34459e159 [ 609.519883][T18544] RDX: 0000000000000094 RSI: 0000200000000300 RDI: 0000000000000005 [ 609.519895][T18544] RBP: 00007fa345444090 R08: 0000000000000000 R09: 0000000000000000 [ 609.519908][T18544] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 609.519919][T18544] R13: 00007fa344826038 R14: 00007fa344825fa0 R15: 00007ffe02651808 [ 609.519950][T18544] [ 610.117439][ C1] Dropped outbound packet type=88ca [ 610.281234][ T5623] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 610.303075][ T5623] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 610.304112][ T5623] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 610.325188][ T5623] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 610.340629][ T5623] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 610.371017][T18554] __nla_validate_parse: 1 callbacks suppressed [ 610.371036][T18554] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2989'. [ 610.371054][T18554] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2989'. [ 610.371069][T18554] netlink: 'syz.1.2989': attribute type 4 has an invalid length. [ 610.448789][T18554] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2989'. [ 610.835710][T18573] netlink: 'syz.0.2992': attribute type 5 has an invalid length. [ 610.879459][ T6510] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 611.157550][ C1] Dropped outbound packet type=88ca [ 611.187326][T18587] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2994'. [ 611.241636][T18584] tipc: Resetting bearer [ 611.245448][T18584] tipc: Resetting bearer [ 611.287215][T18592] FAULT_INJECTION: forcing a failure. [ 611.287215][T18592] name failslab, interval 1, probability 0, space 0, times 0 [ 611.287248][T18592] CPU: 1 UID: 0 PID: 18592 Comm: syz.2.2996 Not tainted syzkaller #0 PREEMPT(full) [ 611.287268][T18592] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 611.287279][T18592] Call Trace: [ 611.287286][T18592] [ 611.287294][T18592] dump_stack_lvl+0xe8/0x150 [ 611.287325][T18592] should_fail_ex+0x410/0x560 [ 611.287352][T18592] should_failslab+0xa8/0x100 [ 611.287374][T18592] __kvmalloc_node_noprof+0x176/0x820 [ 611.287393][T18592] ? rcu_is_watching+0x16/0xb0 [ 611.287415][T18592] ? analyze_subprog+0x846/0x9e00 [ 611.287434][T18592] ? analyze_subprog+0x846/0x9e00 [ 611.287459][T18592] analyze_subprog+0x846/0x9e00 [ 611.287478][T18592] ? is_bpf_text_address+0x292/0x2b0 [ 611.287506][T18592] ? kernel_text_address+0xa5/0xe0 [ 611.287531][T18592] ? arch_stack_walk+0xfb/0x150 [ 611.287566][T18592] ? __pfx_stack_trace_save+0x10/0x10 [ 611.287608][T18592] ? call_instance+0x263/0x560 [ 611.287624][T18592] ? bpf_compute_subprog_arg_access+0x2a3/0x14d0 [ 611.287643][T18592] ? bpf_compute_live_registers+0x8d3/0x1ff0 [ 611.287663][T18592] ? __pfx_analyze_subprog+0x10/0x10 [ 611.287679][T18592] ? __x64_sys_bpf+0xba/0xd0 [ 611.287694][T18592] ? do_syscall_64+0x166/0x520 [ 611.287718][T18592] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 611.287782][T18592] ? call_instance+0x263/0x560 [ 611.287800][T18592] ? rcu_is_watching+0x16/0xb0 [ 611.287821][T18592] ? call_instance+0x263/0x560 [ 611.287838][T18592] ? trace_kmalloc+0x2a/0xf0 [ 611.287869][T18592] ? call_instance+0x263/0x560 [ 611.287886][T18592] ? __kvmalloc_node_noprof+0x52f/0x820 [ 611.287906][T18592] ? __kvmalloc_node_noprof+0x345/0x820 [ 611.287925][T18592] ? call_instance+0x263/0x560 [ 611.287942][T18592] ? call_instance+0x263/0x560 [ 611.287969][T18592] ? call_instance+0x42e/0x560 [ 611.287996][T18592] bpf_compute_subprog_arg_access+0x2c9/0x14d0 [ 611.288017][T18592] ? bpf_base_func_proto+0x1d0/0xb00 [ 611.288040][T18592] ? __pfx_bpf_nf_func_proto+0x10/0x10 [ 611.288094][T18592] ? __pfx_bpf_compute_subprog_arg_access+0x10/0x10 [ 611.288121][T18592] ? __kvmalloc_node_noprof+0x345/0x820 [ 611.288140][T18592] ? bpf_compute_live_registers+0x14f/0x1ff0 [ 611.288159][T18592] ? bpf_compute_live_registers+0x14f/0x1ff0 [ 611.288187][T18592] bpf_compute_live_registers+0x8d3/0x1ff0 [ 611.288226][T18592] ? __pfx_bpf_compute_live_registers+0x10/0x10 [ 611.288256][T18592] bpf_check+0x2746/0x2ef0 [ 611.288294][T18592] ? __pfx_bpf_check+0x10/0x10 [ 611.288316][T18592] ? bpf_obj_name_cpy+0x194/0x1e0 [ 611.288344][T18592] bpf_prog_load+0x14d6/0x1c20 [ 611.288377][T18592] ? __pfx_bpf_prog_load+0x10/0x10 [ 611.288424][T18592] __sys_bpf+0xd0d/0xd90 [ 611.288453][T18592] ? __pfx___sys_bpf+0x10/0x10 [ 611.288484][T18592] ? __fget_files+0x2a/0x420 [ 611.288525][T18592] ? ksys_write+0x242/0x270 [ 611.288553][T18592] ? __pfx_ksys_write+0x10/0x10 [ 611.288583][T18592] __x64_sys_bpf+0xba/0xd0 [ 611.288604][T18592] do_syscall_64+0x166/0x520 [ 611.288647][T18592] ? trace_irq_disable+0x3b/0x140 [ 611.288665][T18592] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 611.288683][T18592] ? clear_bhb_loop+0x70/0xc0 [ 611.288704][T18592] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 611.288718][T18592] RIP: 0033:0x7f10be79e159 [ 611.288734][T18592] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 611.288752][T18592] RSP: 002b:00007f10bf722028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 611.288768][T18592] RAX: ffffffffffffffda RBX: 00007f10bea25fa0 RCX: 00007f10be79e159 [ 611.288777][T18592] RDX: 0000000000000094 RSI: 0000200000000300 RDI: 0000000000000005 [ 611.288787][T18592] RBP: 00007f10bf722090 R08: 0000000000000000 R09: 0000000000000000 [ 611.288796][T18592] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 611.288804][T18592] R13: 00007f10bea26038 R14: 00007f10bea25fa0 R15: 00007ffde5b189a8 [ 611.288826][T18592] [ 611.293215][T18584] 8021q: adding VLAN 0 to HW filter on device bond0 [ 611.395210][T18584] 8021q: adding VLAN 0 to HW filter on device bond16 [ 611.729595][T18584] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode [ 611.764326][T18584] 8021q: adding VLAN 0 to HW filter on device bond17 [ 611.785034][T18584] 8021q: adding VLAN 0 to HW filter on device bond18 [ 611.785900][T18584] bond18: entered allmulticast mode [ 611.786593][T18584] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 611.811230][T18584] 8021q: adding VLAN 0 to HW filter on device bond19 [ 611.835445][T18595] netlink: 'syz.2.2997': attribute type 83 has an invalid length. [ 611.847342][T17914] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 611.853472][T18587] macsec2: entered promiscuous mode [ 611.853493][T18587] macsec2: entered allmulticast mode [ 612.045528][T18601] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2998'. [ 612.077353][T17914] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 612.260002][T18610] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2998'. [ 612.314426][ T6510] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 612.331476][T18614] netlink: 'syz.1.3000': attribute type 1 has an invalid length. [ 612.387270][ T6568] net_ratelimit: 17 callbacks suppressed [ 612.387293][ T6568] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 612.438041][ T5622] Bluetooth: hci2: command tx timeout [ 612.442652][T18607] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2999'. [ 612.502669][T18618] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2999'. [ 612.545494][T18614] bond1: entered promiscuous mode [ 612.545547][T18614] bond1: entered allmulticast mode [ 612.546105][T18614] 8021q: adding VLAN 0 to HW filter on device bond1 [ 612.558462][T13949] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 612.618026][T18624] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2999'. [ 612.765102][ T6510] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 613.453467][ T6510] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 613.593654][T18557] lo speed is unknown, defaulting to 1000 [ 613.607578][T13914] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 613.718530][ T6590] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 613.935700][T18645] FAULT_INJECTION: forcing a failure. [ 613.935700][T18645] name failslab, interval 1, probability 0, space 0, times 0 [ 613.935732][T18645] CPU: 0 UID: 0 PID: 18645 Comm: syz.3.3006 Not tainted syzkaller #0 PREEMPT(full) [ 613.935754][T18645] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 613.935765][T18645] Call Trace: [ 613.935772][T18645] [ 613.935781][T18645] dump_stack_lvl+0xe8/0x150 [ 613.935812][T18645] should_fail_ex+0x410/0x560 [ 613.935839][T18645] should_failslab+0xa8/0x100 [ 613.935863][T18645] __kvmalloc_node_noprof+0x176/0x820 [ 613.935885][T18645] ? rcu_is_watching+0x16/0xb0 [ 613.935909][T18645] ? analyze_subprog+0x846/0x9e00 [ 613.935929][T18645] ? analyze_subprog+0x846/0x9e00 [ 613.935956][T18645] analyze_subprog+0x846/0x9e00 [ 613.935975][T18645] ? is_bpf_text_address+0x292/0x2b0 [ 613.936002][T18645] ? kernel_text_address+0xa5/0xe0 [ 613.936028][T18645] ? arch_stack_walk+0xfb/0x150 [ 613.936063][T18645] ? __pfx_stack_trace_save+0x10/0x10 [ 613.936105][T18645] ? call_instance+0x263/0x560 [ 613.936123][T18645] ? bpf_compute_subprog_arg_access+0x2a3/0x14d0 [ 613.936143][T18645] ? bpf_compute_live_registers+0x8d3/0x1ff0 [ 613.936164][T18645] ? __pfx_analyze_subprog+0x10/0x10 [ 613.936183][T18645] ? __x64_sys_bpf+0xba/0xd0 [ 613.936198][T18645] ? do_syscall_64+0x166/0x520 [ 613.936222][T18645] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 613.936275][T18645] ? call_instance+0x263/0x560 [ 613.936293][T18645] ? rcu_is_watching+0x16/0xb0 [ 613.936312][T18645] ? call_instance+0x263/0x560 [ 613.936330][T18645] ? trace_kmalloc+0x2a/0xf0 [ 613.936357][T18645] ? call_instance+0x263/0x560 [ 613.936374][T18645] ? __kvmalloc_node_noprof+0x52f/0x820 [ 613.936393][T18645] ? __kvmalloc_node_noprof+0x345/0x820 [ 613.936411][T18645] ? call_instance+0x263/0x560 [ 613.936428][T18645] ? call_instance+0x263/0x560 [ 613.936453][T18645] ? call_instance+0x42e/0x560 [ 613.936477][T18645] bpf_compute_subprog_arg_access+0x2c9/0x14d0 [ 613.936496][T18645] ? bpf_base_func_proto+0x1d0/0xb00 [ 613.936517][T18645] ? __pfx_bpf_nf_func_proto+0x10/0x10 [ 613.936573][T18645] ? __pfx_bpf_compute_subprog_arg_access+0x10/0x10 [ 613.936598][T18645] ? __kvmalloc_node_noprof+0x345/0x820 [ 613.936616][T18645] ? bpf_compute_live_registers+0x14f/0x1ff0 [ 613.936635][T18645] ? bpf_compute_live_registers+0x14f/0x1ff0 [ 613.936661][T18645] bpf_compute_live_registers+0x8d3/0x1ff0 [ 613.936699][T18645] ? __pfx_bpf_compute_live_registers+0x10/0x10 [ 613.936730][T18645] bpf_check+0x2746/0x2ef0 [ 613.936769][T18645] ? __pfx_bpf_check+0x10/0x10 [ 613.936791][T18645] ? bpf_obj_name_cpy+0x194/0x1e0 [ 613.936819][T18645] bpf_prog_load+0x14d6/0x1c20 [ 613.936851][T18645] ? __pfx_bpf_prog_load+0x10/0x10 [ 613.936895][T18645] __sys_bpf+0xd0d/0xd90 [ 613.936924][T18645] ? __pfx___sys_bpf+0x10/0x10 [ 613.936956][T18645] ? __fget_files+0x2a/0x420 [ 613.936994][T18645] ? ksys_write+0x242/0x270 [ 613.937020][T18645] ? __pfx_ksys_write+0x10/0x10 [ 613.937047][T18645] __x64_sys_bpf+0xba/0xd0 [ 613.937067][T18645] do_syscall_64+0x166/0x520 [ 613.937091][T18645] ? trace_irq_disable+0x3b/0x140 [ 613.937108][T18645] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 613.937127][T18645] ? clear_bhb_loop+0x70/0xc0 [ 613.937150][T18645] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 613.937169][T18645] RIP: 0033:0x7fa34459e159 [ 613.937187][T18645] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 613.937203][T18645] RSP: 002b:00007fa345444028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 613.937223][T18645] RAX: ffffffffffffffda RBX: 00007fa344825fa0 RCX: 00007fa34459e159 [ 613.937237][T18645] RDX: 0000000000000094 RSI: 0000200000000300 RDI: 0000000000000005 [ 613.937247][T18645] RBP: 00007fa345444090 R08: 0000000000000000 R09: 0000000000000000 [ 613.937256][T18645] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 613.937267][T18645] R13: 00007fa344826038 R14: 00007fa344825fa0 R15: 00007ffe02651808 [ 613.937297][T18645] [ 614.076408][T18644] netlink: 96 bytes leftover after parsing attributes in process `syz.1.3007'. [ 614.338589][ T6566] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 614.387486][T18644] vlan2: entered allmulticast mode [ 614.387508][T18644] gretap0: entered allmulticast mode [ 614.517917][ T5622] Bluetooth: hci2: command tx timeout [ 614.527477][ T6559] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 614.808438][T18673] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 614.847493][ T6500] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 614.985446][T18671] netlink: 'syz.1.3012': attribute type 4 has an invalid length. [ 615.202478][ T6510] bond0: left allmulticast mode [ 615.202527][ T6510] bond0: left promiscuous mode [ 615.203438][ T6510] bridge0: port 1(bond0) entered disabled state [ 615.325606][ T6510] pim6reg99999999: left allmulticast mode [ 616.599883][ T5622] Bluetooth: hci2: command tx timeout [ 616.716124][ T6510] bond11 (unregistering): (slave xfrm1): Releasing backup interface [ 616.716207][ T6510] xfrm1 (unregistering): left promiscuous mode [ 616.901185][ T6510] bond12 (unregistering): (slave gretap1): Releasing active interface [ 617.075007][ T6510] team0: Port device bridge4 removed [ 617.102806][ T6510] bond0 (unregistering): Released all slaves [ 617.124653][ T6510] bond1 (unregistering): Released all slaves [ 617.159799][ T6510] bond2 (unregistering): Released all slaves [ 617.183009][ T6510] bond3 (unregistering): Released all slaves [ 617.215543][ T6510] bond4 (unregistering): Released all slaves [ 617.247350][ T6510] bond5 (unregistering): Released all slaves [ 617.278340][ T6510] bond6 (unregistering): Released all slaves [ 617.301447][ T6510] bond7 (unregistering): Released all slaves [ 617.334778][ T6510] bond8 (unregistering): Released all slaves [ 617.355585][ T6510] bond9 (unregistering): Released all slaves [ 617.389983][ T6510] bond10 (unregistering): Released all slaves [ 617.412356][ T6510] bond11 (unregistering): Released all slaves [ 617.439153][ T6510] bond12 (unregistering): Released all slaves [ 617.741977][ T5280] 8021q: adding VLAN 0 to HW filter on device eth1 [ 617.747599][ T50] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 617.816765][ T6510] tipc: Disabling bearer [ 617.841445][ T6510] tipc: Left network mode [ 618.044295][T18732] IPVS: sync thread started: state = MASTER, mcast_ifn = lo, syncid = 0, id = 0 [ 618.055360][T18719] IPVS: stopping master sync thread 18732 ... [ 618.114167][T18731] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 618.172394][ T50] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 618.677454][ T5622] Bluetooth: hci2: command tx timeout [ 618.743966][ T6559] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 618.917222][ T6566] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 618.971263][T18758] __nla_validate_parse: 1 callbacks suppressed [ 618.971283][T18758] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3019'. [ 619.508182][ T6590] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 619.509531][T18773] openvswitch: netlink: Message has 8 unknown bytes. [ 619.937955][ T50] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 620.404165][T18557] bridge0: port 1(bridge_slave_0) entered blocking state [ 620.404274][T18557] bridge0: port 1(bridge_slave_0) entered disabled state [ 620.404415][T18557] bridge_slave_0: entered allmulticast mode [ 620.416488][T18557] bridge_slave_0: entered promiscuous mode [ 620.538498][T18808] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3029'. [ 620.549516][T18810] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3029'. [ 620.574742][T18557] bridge0: port 2(bridge_slave_1) entered blocking state [ 620.593016][T18557] bridge0: port 2(bridge_slave_1) entered disabled state [ 620.593206][T18557] bridge_slave_1: entered allmulticast mode [ 620.607140][T18557] bridge_slave_1: entered promiscuous mode [ 620.636750][ T5280] 8021q: adding VLAN 0 to HW filter on device eth2 [ 620.813951][T18557] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 620.830415][T18557] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 620.923280][T18817] FAULT_INJECTION: forcing a failure. [ 620.923280][T18817] name failslab, interval 1, probability 0, space 0, times 0 [ 620.923405][T18817] CPU: 0 UID: 0 PID: 18817 Comm: syz.3.3030 Not tainted syzkaller #0 PREEMPT(full) [ 620.923427][T18817] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 620.923438][T18817] Call Trace: [ 620.923446][T18817] [ 620.923454][T18817] dump_stack_lvl+0xe8/0x150 [ 620.923486][T18817] should_fail_ex+0x410/0x560 [ 620.923512][T18817] should_failslab+0xa8/0x100 [ 620.923537][T18817] __kvmalloc_node_noprof+0x176/0x820 [ 620.923560][T18817] ? __kvmalloc_node_noprof+0x345/0x820 [ 620.923579][T18817] ? analyze_subprog+0x8ac/0x9e00 [ 620.923602][T18817] ? analyze_subprog+0x8ac/0x9e00 [ 620.923629][T18817] analyze_subprog+0x8ac/0x9e00 [ 620.923648][T18817] ? is_bpf_text_address+0x292/0x2b0 [ 620.923675][T18817] ? kernel_text_address+0xa5/0xe0 [ 620.923719][T18817] ? __pfx_stack_trace_save+0x10/0x10 [ 620.923763][T18817] ? call_instance+0x263/0x560 [ 620.923781][T18817] ? bpf_compute_subprog_arg_access+0x2a3/0x14d0 [ 620.923801][T18817] ? bpf_compute_live_registers+0x8d3/0x1ff0 [ 620.923823][T18817] ? __pfx_analyze_subprog+0x10/0x10 [ 620.923840][T18817] ? __x64_sys_bpf+0xba/0xd0 [ 620.923856][T18817] ? do_syscall_64+0x166/0x520 [ 620.923879][T18817] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 620.923937][T18817] ? call_instance+0x263/0x560 [ 620.923956][T18817] ? rcu_is_watching+0x16/0xb0 [ 620.923977][T18817] ? call_instance+0x263/0x560 [ 620.923995][T18817] ? trace_kmalloc+0x2a/0xf0 [ 620.924023][T18817] ? call_instance+0x263/0x560 [ 620.924042][T18817] ? __kvmalloc_node_noprof+0x52f/0x820 [ 620.924063][T18817] ? __kvmalloc_node_noprof+0x345/0x820 [ 620.924082][T18817] ? call_instance+0x263/0x560 [ 620.924099][T18817] ? call_instance+0x263/0x560 [ 620.924132][T18817] ? call_instance+0x42e/0x560 [ 620.924159][T18817] bpf_compute_subprog_arg_access+0x2c9/0x14d0 [ 620.924180][T18817] ? bpf_base_func_proto+0x1d0/0xb00 [ 620.924203][T18817] ? __pfx_bpf_nf_func_proto+0x10/0x10 [ 620.924255][T18817] ? __pfx_bpf_compute_subprog_arg_access+0x10/0x10 [ 620.924282][T18817] ? __kvmalloc_node_noprof+0x345/0x820 [ 620.924302][T18817] ? bpf_compute_live_registers+0x14f/0x1ff0 [ 620.924321][T18817] ? bpf_compute_live_registers+0x14f/0x1ff0 [ 620.924350][T18817] bpf_compute_live_registers+0x8d3/0x1ff0 [ 620.924390][T18817] ? __pfx_bpf_compute_live_registers+0x10/0x10 [ 620.924423][T18817] bpf_check+0x2746/0x2ef0 [ 620.924461][T18817] ? __pfx_bpf_check+0x10/0x10 [ 620.924484][T18817] ? bpf_obj_name_cpy+0x194/0x1e0 [ 620.924512][T18817] bpf_prog_load+0x14d6/0x1c20 [ 620.924546][T18817] ? __pfx_bpf_prog_load+0x10/0x10 [ 620.924593][T18817] __sys_bpf+0xd0d/0xd90 [ 620.924621][T18817] ? __pfx___sys_bpf+0x10/0x10 [ 620.924653][T18817] ? __fget_files+0x2a/0x420 [ 620.924695][T18817] ? ksys_write+0x242/0x270 [ 620.924724][T18817] ? __pfx_ksys_write+0x10/0x10 [ 620.924755][T18817] __x64_sys_bpf+0xba/0xd0 [ 620.924776][T18817] do_syscall_64+0x166/0x520 [ 620.924800][T18817] ? trace_irq_disable+0x3b/0x140 [ 620.924817][T18817] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 620.924836][T18817] ? clear_bhb_loop+0x70/0xc0 [ 620.924859][T18817] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 620.924878][T18817] RIP: 0033:0x7fa34459e159 [ 620.924895][T18817] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 620.924910][T18817] RSP: 002b:00007fa345444028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 620.924930][T18817] RAX: ffffffffffffffda RBX: 00007fa344825fa0 RCX: 00007fa34459e159 [ 620.924944][T18817] RDX: 0000000000000094 RSI: 0000200000000300 RDI: 0000000000000005 [ 620.924956][T18817] RBP: 00007fa345444090 R08: 0000000000000000 R09: 0000000000000000 [ 620.924967][T18817] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 620.924979][T18817] R13: 00007fa344826038 R14: 00007fa344825fa0 R15: 00007ffe02651808 [ 620.925010][T18817] [ 621.450514][ T6590] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 621.496088][T18557] team0: Port device team_slave_0 added [ 621.682474][T18557] team0: Port device team_slave_1 added [ 621.804268][ T6590] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 622.224685][T18841] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3034'. [ 622.534461][T18557] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 622.534479][T18557] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 622.534501][T18557] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 622.606303][T18557] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 622.606323][T18557] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 622.606348][T18557] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 622.806033][ T6500] net_ratelimit: 1 callbacks suppressed [ 622.806054][ T6500] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 623.278194][T18865] netlink: 804 bytes leftover after parsing attributes in process `syz.1.3039'. [ 623.383615][T18557] hsr_slave_0: entered promiscuous mode [ 623.386890][T18557] hsr_slave_1: entered promiscuous mode [ 623.408676][T18557] debugfs: 'hsr0' already exists in 'hsr' [ 623.408698][T18557] Cannot create hsr debugfs directory [ 623.594037][T18871] FAULT_INJECTION: forcing a failure. [ 623.594037][T18871] name failslab, interval 1, probability 0, space 0, times 0 [ 623.594069][T18871] CPU: 0 UID: 0 PID: 18871 Comm: syz.2.3040 Not tainted syzkaller #0 PREEMPT(full) [ 623.594089][T18871] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 623.594098][T18871] Call Trace: [ 623.594105][T18871] [ 623.594113][T18871] dump_stack_lvl+0xe8/0x150 [ 623.594144][T18871] should_fail_ex+0x410/0x560 [ 623.594171][T18871] should_failslab+0xa8/0x100 [ 623.594195][T18871] __kmalloc_cache_noprof+0xa3/0x600 [ 623.594212][T18871] ? __pfx_bpf_nf_func_proto+0x10/0x10 [ 623.594240][T18871] ? do_check_common+0x26e/0x55c0 [ 623.594262][T18871] ? do_check_common+0x26e/0x55c0 [ 623.594291][T18871] do_check_common+0x26e/0x55c0 [ 623.594332][T18871] ? bpf_compute_live_registers+0x1f40/0x1ff0 [ 623.594352][T18871] ? bpf_insn_def32+0x1ae/0x650 [ 623.594389][T18871] ? mark_fastcall_patterns+0xf32/0xf90 [ 623.594413][T18871] ? __pfx_do_check_common+0x10/0x10 [ 623.594458][T18871] do_check_main+0xa2/0x1f0 [ 623.594481][T18871] bpf_check+0x2777/0x2ef0 [ 623.594519][T18871] ? __pfx_bpf_check+0x10/0x10 [ 623.594540][T18871] ? bpf_obj_name_cpy+0x194/0x1e0 [ 623.594569][T18871] bpf_prog_load+0x14d6/0x1c20 [ 623.594602][T18871] ? __pfx_bpf_prog_load+0x10/0x10 [ 623.594650][T18871] __sys_bpf+0xd0d/0xd90 [ 623.594679][T18871] ? __pfx___sys_bpf+0x10/0x10 [ 623.594711][T18871] ? __fget_files+0x2a/0x420 [ 623.594753][T18871] ? ksys_write+0x242/0x270 [ 623.594782][T18871] ? __pfx_ksys_write+0x10/0x10 [ 623.594814][T18871] __x64_sys_bpf+0xba/0xd0 [ 623.594835][T18871] do_syscall_64+0x166/0x520 [ 623.594859][T18871] ? trace_irq_disable+0x3b/0x140 [ 623.594876][T18871] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 623.594895][T18871] ? clear_bhb_loop+0x70/0xc0 [ 623.594918][T18871] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 623.594936][T18871] RIP: 0033:0x7f10be79e159 [ 623.594955][T18871] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 623.594970][T18871] RSP: 002b:00007f10bf722028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 623.594994][T18871] RAX: ffffffffffffffda RBX: 00007f10bea25fa0 RCX: 00007f10be79e159 [ 623.595007][T18871] RDX: 0000000000000094 RSI: 0000200000000300 RDI: 0000000000000005 [ 623.595019][T18871] RBP: 00007f10bf722090 R08: 0000000000000000 R09: 0000000000000000 [ 623.595031][T18871] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 623.595043][T18871] R13: 00007f10bea26038 R14: 00007f10bea25fa0 R15: 00007ffde5b189a8 [ 623.595074][T18871] [ 624.367449][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 625.328102][T18901] bond4: option mode: unable to set because the bond device is up [ 625.339505][T18904] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 625.345134][T18904] bond4: (slave macvlan2): Enslaving as an active interface with a down link [ 625.346553][ T5280] 8021q: adding VLAN 0 to HW filter on device eth3 [ 625.429577][T13914] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 625.629382][T13914] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 625.833160][ T13] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 625.852179][T18927] FAULT_INJECTION: forcing a failure. [ 625.852179][T18927] name failslab, interval 1, probability 0, space 0, times 0 [ 625.852209][T18927] CPU: 1 UID: 0 PID: 18927 Comm: syz.1.3052 Not tainted syzkaller #0 PREEMPT(full) [ 625.852232][T18927] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 625.852243][T18927] Call Trace: [ 625.852251][T18927] [ 625.852259][T18927] dump_stack_lvl+0xe8/0x150 [ 625.852297][T18927] should_fail_ex+0x410/0x560 [ 625.852321][T18927] should_failslab+0xa8/0x100 [ 625.852346][T18927] __kmalloc_node_track_caller_noprof+0xfb/0x720 [ 625.852365][T18927] ? realloc_array+0x76/0x130 [ 625.852383][T18927] ? realloc_array+0x76/0x130 [ 625.852405][T18927] ? realloc_array+0x76/0x130 [ 625.852427][T18927] krealloc_node_align_noprof+0x19a/0x390 [ 625.852452][T18927] realloc_array+0x76/0x130 [ 625.852476][T18927] acquire_reference+0xaa/0x310 [ 625.852504][T18927] do_check_insn+0x13e71/0x17d00 [ 625.852543][T18927] ? bpf_prog_load+0x13f0/0x1c20 [ 625.852571][T18927] ? __pfx_do_check_insn+0x10/0x10 [ 625.852619][T18927] ? rcu_is_watching+0x16/0xb0 [ 625.852646][T18927] ? __asan_memset+0x22/0x50 [ 625.852669][T18927] ? cnum32_from_urange+0xf/0x30 [ 625.852696][T18927] ? cnum32_from_urange+0xf/0x30 [ 625.852716][T18927] ? __mark_reg_known+0x125/0x1a0 [ 625.852739][T18927] do_check_common+0x35fa/0x55c0 [ 625.852796][T18927] ? __pfx_do_check_common+0x10/0x10 [ 625.852831][T18927] do_check_main+0xa2/0x1f0 [ 625.852853][T18927] bpf_check+0x2777/0x2ef0 [ 625.852889][T18927] ? __pfx_bpf_check+0x10/0x10 [ 625.852909][T18927] ? bpf_obj_name_cpy+0x194/0x1e0 [ 625.852938][T18927] bpf_prog_load+0x14d6/0x1c20 [ 625.852968][T18927] ? __pfx_bpf_prog_load+0x10/0x10 [ 625.853012][T18927] __sys_bpf+0xd0d/0xd90 [ 625.853040][T18927] ? __pfx___sys_bpf+0x10/0x10 [ 625.853070][T18927] ? __fget_files+0x2a/0x420 [ 625.853110][T18927] ? ksys_write+0x242/0x270 [ 625.853138][T18927] ? __pfx_ksys_write+0x10/0x10 [ 625.853169][T18927] __x64_sys_bpf+0xba/0xd0 [ 625.853190][T18927] do_syscall_64+0x166/0x520 [ 625.853214][T18927] ? trace_irq_disable+0x3b/0x140 [ 625.853231][T18927] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 625.853249][T18927] ? clear_bhb_loop+0x70/0xc0 [ 625.853272][T18927] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 625.853297][T18927] RIP: 0033:0x7f0981d9e159 [ 625.853313][T18927] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 625.853329][T18927] RSP: 002b:00007f097fff6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 625.853348][T18927] RAX: ffffffffffffffda RBX: 00007f0982025fa0 RCX: 00007f0981d9e159 [ 625.853362][T18927] RDX: 0000000000000094 RSI: 0000200000000300 RDI: 0000000000000005 [ 625.853373][T18927] RBP: 00007f097fff6090 R08: 0000000000000000 R09: 0000000000000000 [ 625.853385][T18927] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 625.853396][T18927] R13: 00007f0982026038 R14: 00007f0982025fa0 R15: 00007ffdf741c048 [ 625.853424][T18927] [ 625.868685][T18928] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3050'. [ 626.284400][T18934] netlink: 'syz.1.3053': attribute type 2 has an invalid length. [ 626.289727][T18928] 8021q: adding VLAN 0 to HW filter on device bond13 [ 626.291338][T18929] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3051'. [ 626.409631][ T6510] IPVS: stop unused estimator thread 0... [ 626.461317][T13914] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 626.864195][T18956] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3057'. [ 626.864466][T18956] unsupported nlmsg_type 40 [ 626.968701][T13914] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 627.005937][T18969] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3058'. [ 627.115362][T18951] syzkaller1: entered promiscuous mode [ 627.115546][T18951] syzkaller1: entered allmulticast mode [ 627.413155][T18984] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3059'. [ 627.558683][ T6590] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 627.560405][T18957] syzkaller1: entered promiscuous mode [ 627.560424][T18957] syzkaller1: entered allmulticast mode [ 627.773287][T18982] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3059'. [ 627.773311][T18982] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3059'. [ 627.773327][T18982] netlink: 'syz.2.3059': attribute type 4 has an invalid length. [ 627.789040][ T6500] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 627.909627][T18992] netlink: 'syz.0.3061': attribute type 1 has an invalid length. [ 628.055788][T19000] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3061'. [ 628.187820][ T6558] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 628.319592][T18992] 8021q: adding VLAN 0 to HW filter on device bond20 [ 628.384679][T18996] 8021q: adding VLAN 0 to HW filter on device bond20 [ 628.385272][T18996] bond20: (slave gre3): The slave device specified does not support setting the MAC address [ 628.386194][T18996] bond20: (slave gre3): Error -95 calling set_mac_address [ 628.499625][T19018] netlink: 'syz.2.3065': attribute type 2 has an invalid length. [ 628.499647][T19018] netlink: 232 bytes leftover after parsing attributes in process `syz.2.3065'. [ 628.555111][T19001] 8021q: adding VLAN 0 to HW filter on device bond21 [ 628.564541][T19001] bond20: (slave bond21): Enslaving as an active interface with a down link [ 628.679089][T18992] bond20 (unregistering): (slave bond21): Releasing active interface [ 628.805005][T18992] bond20 (unregistering): Released all slaves [ 628.892796][T19036] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3066'. [ 629.417415][ T6559] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 629.508658][T19046] syzkaller0: entered promiscuous mode [ 629.508681][T19046] syzkaller0: entered allmulticast mode [ 629.527143][ T6500] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 629.644530][ T6566] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 629.748245][ T50] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 629.852009][T19067] bond20: option arp_validate: mode dependency failed, not supported in mode 802.3ad(4) [ 629.891598][T19067] bond20 (unregistering): Released all slaves [ 629.966065][T19070] netlink: 'syz.2.3071': attribute type 4 has an invalid length. [ 629.968030][ T13] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 630.930835][ T13] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 630.968962][T18557] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 630.997716][T18557] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 631.004961][T18557] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 631.060064][T18557] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 631.066033][T19101] macvtap0: entered promiscuous mode [ 631.068475][T19101] tipc: Resetting bearer [ 631.069818][T19101] tipc: Resetting bearer [ 631.073642][ T6566] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 631.075383][T18557] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 631.112477][T18557] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 631.113392][T18557] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 631.134655][T18557] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 631.222287][T13914] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 631.413329][T19120] ip6tnl3: entered promiscuous mode [ 631.497203][ T6590] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 631.845456][T18557] 8021q: adding VLAN 0 to HW filter on device bond0 [ 631.953966][T18557] 8021q: adding VLAN 0 to HW filter on device team0 [ 631.956049][T19136] __nla_validate_parse: 5 callbacks suppressed [ 631.956065][T19136] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3081'. [ 632.004588][ T6590] bridge0: port 1(bridge_slave_0) entered blocking state [ 632.004709][ T6590] bridge0: port 1(bridge_slave_0) entered forwarding state [ 632.078555][T19141] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3082'. [ 632.078582][T19141] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3082'. [ 632.078599][T19141] netlink: 'syz.1.3082': attribute type 4 has an invalid length. [ 632.135160][ T6566] bridge0: port 2(bridge_slave_1) entered blocking state [ 632.135269][ T6566] bridge0: port 2(bridge_slave_1) entered forwarding state [ 632.189559][T19141] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3082'. [ 632.305330][T19149] ip6gretap2: entered allmulticast mode [ 632.320285][T19149] batman_adv: batadv0: Adding interface: ip6gretap2 [ 632.320302][T19149] batman_adv: batadv0: The MTU of interface ip6gretap2 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 632.328443][T19149] batman_adv: batadv0: Interface activated: ip6gretap2 [ 632.437471][T19160] FAULT_INJECTION: forcing a failure. [ 632.437471][T19160] name failslab, interval 1, probability 0, space 0, times 0 [ 632.437501][T19160] CPU: 0 UID: 0 PID: 19160 Comm: syz.2.3086 Not tainted syzkaller #0 PREEMPT(full) [ 632.437521][T19160] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 632.437532][T19160] Call Trace: [ 632.437539][T19160] [ 632.437547][T19160] dump_stack_lvl+0xe8/0x150 [ 632.437577][T19160] should_fail_ex+0x410/0x560 [ 632.437603][T19160] should_failslab+0xa8/0x100 [ 632.437626][T19160] __kmalloc_node_track_caller_noprof+0xfb/0x720 [ 632.437647][T19160] ? realloc_array+0x76/0x130 [ 632.437667][T19160] ? realloc_array+0x76/0x130 [ 632.437688][T19160] ? realloc_array+0x76/0x130 [ 632.437710][T19160] krealloc_node_align_noprof+0x19a/0x390 [ 632.437736][T19160] realloc_array+0x76/0x130 [ 632.437761][T19160] acquire_reference+0xaa/0x310 [ 632.437790][T19160] do_check_insn+0x13e71/0x17d00 [ 632.437830][T19160] ? bpf_prog_load+0x13f0/0x1c20 [ 632.437859][T19160] ? __pfx_do_check_insn+0x10/0x10 [ 632.437912][T19160] ? rcu_is_watching+0x16/0xb0 [ 632.437940][T19160] ? __asan_memset+0x22/0x50 [ 632.437965][T19160] ? cnum32_from_urange+0xf/0x30 [ 632.437994][T19160] ? cnum32_from_urange+0xf/0x30 [ 632.438019][T19160] ? __mark_reg_known+0x125/0x1a0 [ 632.438043][T19160] do_check_common+0x35fa/0x55c0 [ 632.438103][T19160] ? __pfx_do_check_common+0x10/0x10 [ 632.438140][T19160] do_check_main+0xa2/0x1f0 [ 632.438163][T19160] bpf_check+0x2777/0x2ef0 [ 632.438200][T19160] ? __pfx_bpf_check+0x10/0x10 [ 632.438223][T19160] ? bpf_obj_name_cpy+0x194/0x1e0 [ 632.438252][T19160] bpf_prog_load+0x14d6/0x1c20 [ 632.438286][T19160] ? __pfx_bpf_prog_load+0x10/0x10 [ 632.438332][T19160] __sys_bpf+0xd0d/0xd90 [ 632.438368][T19160] ? __pfx___sys_bpf+0x10/0x10 [ 632.438399][T19160] ? __fget_files+0x2a/0x420 [ 632.438441][T19160] ? ksys_write+0x242/0x270 [ 632.438471][T19160] ? __pfx_ksys_write+0x10/0x10 [ 632.438503][T19160] __x64_sys_bpf+0xba/0xd0 [ 632.438524][T19160] do_syscall_64+0x166/0x520 [ 632.438549][T19160] ? trace_irq_disable+0x3b/0x140 [ 632.438566][T19160] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 632.438586][T19160] ? clear_bhb_loop+0x70/0xc0 [ 632.438610][T19160] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 632.438629][T19160] RIP: 0033:0x7f10be79e159 [ 632.438648][T19160] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 632.438664][T19160] RSP: 002b:00007f10bf722028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 632.438685][T19160] RAX: ffffffffffffffda RBX: 00007f10bea25fa0 RCX: 00007f10be79e159 [ 632.438698][T19160] RDX: 0000000000000094 RSI: 0000200000000300 RDI: 0000000000000005 [ 632.438710][T19160] RBP: 00007f10bf722090 R08: 0000000000000000 R09: 0000000000000000 [ 632.438721][T19160] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 632.438731][T19160] R13: 00007f10bea26038 R14: 00007f10bea25fa0 R15: 00007ffde5b189a8 [ 632.438763][T19160] [ 633.084371][T19167] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3087'. [ 633.224046][T19175] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3087'. [ 633.228232][T19176] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3087'. [ 633.237526][ T6590] net_ratelimit: 6 callbacks suppressed [ 633.237546][ T6590] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 633.349653][ T6590] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 633.566352][ T6558] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 633.667958][ T6566] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 633.788109][ T50] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 634.202436][T13914] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 634.308118][T13914] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 634.417169][ T6590] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 634.653649][T19219] xt_hashlimit: size too large, truncated to 1048576 [ 634.681055][ T50] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 634.716473][T19232] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3096'. [ 634.716500][T19232] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3096'. [ 634.716516][T19232] netlink: 'syz.1.3096': attribute type 4 has an invalid length. [ 634.790611][T19232] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3096'. [ 634.867423][T13914] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 635.041651][T19243] FAULT_INJECTION: forcing a failure. [ 635.041651][T19243] name failslab, interval 1, probability 0, space 0, times 0 [ 635.041683][T19243] CPU: 0 UID: 0 PID: 19243 Comm: syz.1.3098 Not tainted syzkaller #0 PREEMPT(full) [ 635.041705][T19243] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 635.041716][T19243] Call Trace: [ 635.041724][T19243] [ 635.041733][T19243] dump_stack_lvl+0xe8/0x150 [ 635.041764][T19243] should_fail_ex+0x410/0x560 [ 635.041791][T19243] should_failslab+0xa8/0x100 [ 635.041817][T19243] __kmalloc_node_track_caller_noprof+0xfb/0x720 [ 635.041839][T19243] ? realloc_array+0x76/0x130 [ 635.041871][T19243] ? realloc_array+0x76/0x130 [ 635.041895][T19243] ? realloc_array+0x76/0x130 [ 635.041918][T19243] krealloc_node_align_noprof+0x19a/0x390 [ 635.041946][T19243] realloc_array+0x76/0x130 [ 635.041972][T19243] acquire_reference+0xaa/0x310 [ 635.042003][T19243] do_check_insn+0x13e71/0x17d00 [ 635.042042][T19243] ? bpf_prog_load+0x13f0/0x1c20 [ 635.042070][T19243] ? __pfx_do_check_insn+0x10/0x10 [ 635.042120][T19243] ? rcu_is_watching+0x16/0xb0 [ 635.042145][T19243] ? __asan_memset+0x22/0x50 [ 635.042170][T19243] ? cnum32_from_urange+0xf/0x30 [ 635.042201][T19243] ? cnum32_from_urange+0xf/0x30 [ 635.042225][T19243] ? __mark_reg_known+0x125/0x1a0 [ 635.042250][T19243] do_check_common+0x35fa/0x55c0 [ 635.042304][T19243] ? __pfx_do_check_common+0x10/0x10 [ 635.042343][T19243] do_check_main+0xa2/0x1f0 [ 635.042366][T19243] bpf_check+0x2777/0x2ef0 [ 635.042402][T19243] ? __pfx_bpf_check+0x10/0x10 [ 635.042424][T19243] ? bpf_obj_name_cpy+0x194/0x1e0 [ 635.042452][T19243] bpf_prog_load+0x14d6/0x1c20 [ 635.042485][T19243] ? __pfx_bpf_prog_load+0x10/0x10 [ 635.042531][T19243] __sys_bpf+0xd0d/0xd90 [ 635.042560][T19243] ? __pfx___sys_bpf+0x10/0x10 [ 635.042592][T19243] ? __fget_files+0x2a/0x420 [ 635.042635][T19243] ? ksys_write+0x242/0x270 [ 635.042672][T19243] ? __pfx_ksys_write+0x10/0x10 [ 635.042704][T19243] __x64_sys_bpf+0xba/0xd0 [ 635.042726][T19243] do_syscall_64+0x166/0x520 [ 635.042751][T19243] ? trace_irq_disable+0x3b/0x140 [ 635.042770][T19243] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 635.042789][T19243] ? clear_bhb_loop+0x70/0xc0 [ 635.042813][T19243] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 635.042832][T19243] RIP: 0033:0x7f0981d9e159 [ 635.042850][T19243] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 635.042865][T19243] RSP: 002b:00007f097fff6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 635.042887][T19243] RAX: ffffffffffffffda RBX: 00007f0982025fa0 RCX: 00007f0981d9e159 [ 635.042901][T19243] RDX: 0000000000000094 RSI: 0000200000000300 RDI: 0000000000000005 [ 635.042914][T19243] RBP: 00007f097fff6090 R08: 0000000000000000 R09: 0000000000000000 [ 635.042926][T19243] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 635.042938][T19243] R13: 00007f0982026038 R14: 00007f0982025fa0 R15: 00007ffdf741c048 [ 635.042970][T19243] [ 635.653844][T19251] sctp: [Deprecated]: syz.2.3099 (pid 19251) Use of int in max_burst socket option. [ 635.653844][T19251] Use struct sctp_assoc_value instead [ 635.805277][T18557] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 636.744518][T19279] lo speed is unknown, defaulting to 1000 [ 636.778309][T19286] netlink: 'syz.1.3107': attribute type 4 has an invalid length. [ 636.919929][T19290] netlink: 'syz.2.3106': attribute type 14 has an invalid length. [ 636.919961][T19290] bond0: option xmit_hash_policy: invalid value (22) [ 637.195155][T18557] veth0_vlan: entered promiscuous mode [ 637.350168][T18557] veth1_vlan: entered promiscuous mode [ 637.438168][T19300] __nla_validate_parse: 5 callbacks suppressed [ 637.438188][T19300] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3110'. [ 637.512176][T18557] veth0_macvtap: entered promiscuous mode [ 637.633912][T19308] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3109'. [ 637.662456][T18557] veth1_macvtap: entered promiscuous mode [ 637.770022][T18557] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 637.835269][T18557] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 637.897831][ T6590] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 637.898698][ T6590] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 637.898733][ T6590] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 637.898766][ T6590] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 638.261144][ T5622] Bluetooth: hci1: connection err: -111 [ 638.261941][T19315] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3114'. [ 638.284461][T19298] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 638.380525][T13914] net_ratelimit: 22 callbacks suppressed [ 638.380608][T13914] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 638.490061][ T6559] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 638.658919][T13914] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 638.658942][T13914] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 638.669191][T13914] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 638.713694][T19320] netlink: 'syz.3.3116': attribute type 11 has an invalid length. [ 638.746748][T19318] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3115'. [ 638.975381][T19326] netlink: 'syz.1.3115': attribute type 1 has an invalid length. [ 638.975403][T19326] netlink: 92 bytes leftover after parsing attributes in process `syz.1.3115'. [ 639.008560][T19327] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3117'. [ 639.008586][T19327] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3117'. [ 639.008602][T19327] netlink: 'syz.2.3117': attribute type 4 has an invalid length. [ 639.013694][ T6559] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 639.090393][T19327] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3117'. [ 639.189586][T13914] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 639.189607][T13914] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 639.257905][ T6559] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 639.367792][T13914] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 639.480699][ T6566] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 639.600200][ T6559] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 639.680723][T19340] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3122'. [ 639.699215][T19342] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3122'. [ 639.707597][T13914] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 639.997477][ T6559] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 640.248113][T19355] bond0: (slave netdevsim0): Error: Device can not be enslaved while up [ 640.349175][T19363] netlink: 'syz.0.3128': attribute type 1 has an invalid length. [ 640.403197][ T5623] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 640.411631][ T5623] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 640.414381][ T5623] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 640.423275][ T5623] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 640.429072][ T5623] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 640.467620][T19359] netlink: 'syz.2.3127': attribute type 219 has an invalid length. [ 640.587594][T19363] 8021q: adding VLAN 0 to HW filter on device bond20 [ 640.907807][T19369] bond20: (slave geneve3): making interface the new active one [ 640.932709][T19369] bond20: (slave geneve3): Enslaving as an active interface with an up link [ 641.182759][ T5614] syz_tun (unregistering): left allmulticast mode [ 641.182785][ T5614] syz_tun (unregistering): left promiscuous mode [ 641.182875][ T5614] bridge0: port 3(syz_tun) entered disabled state [ 641.744142][T19390] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 641.759311][T19383] netlink: 'syz.4.3130': attribute type 4 has an invalid length. [ 642.086351][T19360] lo speed is unknown, defaulting to 1000 [ 642.262369][ T6566] bond0: (slave netdevsim1): Releasing backup interface [ 642.439041][ T5623] Bluetooth: hci3: command tx timeout [ 642.628545][ T6566] netdevsim netdevsim3 netdevsim0 (unregistering): left promiscuous mode [ 642.632469][ T6566] bridge0: port 1(netdevsim0) entered disabled state [ 643.480578][T19412] __nla_validate_parse: 4 callbacks suppressed [ 643.480601][T19412] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3139'. [ 643.569386][ T6590] net_ratelimit: 16 callbacks suppressed [ 643.569410][ T6590] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 643.695604][T19411] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3139'. [ 644.358331][ T13] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 644.483969][ T6566] dvmrp0: left allmulticast mode [ 644.484076][ T6566] pimreg: left allmulticast mode [ 644.517605][ T5623] Bluetooth: hci3: command tx timeout [ 644.556790][ T6566] bond8 (unregistering): (slave ip6gre1): Releasing backup interface [ 644.698017][T19437] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3143'. [ 644.890468][T19438] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3145'. [ 645.088237][T19434] netlink: 104 bytes leftover after parsing attributes in process `syz.0.3144'. [ 645.640246][ T6566] bond4 (unregistering): (slave gre1): Releasing backup interface [ 645.733461][T19457] ip_tables: iptables: counters copy to user failed while replacing table [ 646.030658][ T6566] bond3 (unregistering): (slave geneve2): Releasing active interface [ 646.388308][ T6566] bond0 (unregistering): Released all slaves [ 646.409402][ T6566] bond1 (unregistering): Released all slaves [ 646.462717][ T6566] bond2 (unregistering): (slave wireguard0): Releasing backup interface [ 646.463297][ T6566] bond2 (unregistering): Released all slaves [ 646.597143][ T5623] Bluetooth: hci3: command tx timeout [ 646.622155][ T6566] bond3 (unregistering): Released all slaves [ 646.642998][ T6566] bond4 (unregistering): Released all slaves [ 646.654047][T19470] openvswitch: netlink: IPv4 frag type 228 is out of range max 2 [ 646.677385][ T6566] bond5 (unregistering): Released all slaves [ 646.711768][ T6566] bond6 (unregistering): Released all slaves [ 646.734089][ T6566] bond7 (unregistering): (slave veth5): Releasing active interface [ 646.762428][ T6566] bond7 (unregistering): Released all slaves [ 646.787959][ T6566] bond8 (unregistering): Released all slaves [ 646.811496][ T6566] bond9 (unregistering): Released all slaves [ 646.912976][ T6566] bond10 (unregistering): Released all slaves [ 646.958556][ T6566] bond11 (unregistering): Released all slaves [ 647.097497][ T6566] bond12 (unregistering): Released all slaves [ 647.142291][T19430] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3143'. [ 647.142315][T19430] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3143'. [ 647.142331][T19430] netlink: 'syz.2.3143': attribute type 4 has an invalid length. [ 647.333383][ T5280] 8021q: adding VLAN 0 to HW filter on device eth1 [ 647.347530][ T50] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 647.458131][ T6590] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 647.508138][ T6566] tipc: Disabling bearer [ 647.508258][ T6566] tipc: Left network mode [ 647.567114][ T6559] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 647.680630][ T50] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 647.849394][T13914] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 647.958294][ T6559] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 648.063406][T19500] netlink: 7 bytes leftover after parsing attributes in process `syz.0.3156'. [ 648.309060][T19505] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 648.677825][ T5623] Bluetooth: hci3: command tx timeout [ 648.981059][T13914] net_ratelimit: 2 callbacks suppressed [ 648.981080][T13914] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 648.987497][T19360] bridge0: port 1(bridge_slave_0) entered blocking state [ 648.987916][T19360] bridge0: port 1(bridge_slave_0) entered disabled state [ 648.988226][T19360] bridge_slave_0: entered allmulticast mode [ 648.991035][T19360] bridge_slave_0: entered promiscuous mode [ 649.015874][T19360] bridge0: port 2(bridge_slave_1) entered blocking state [ 649.016375][T19360] bridge0: port 2(bridge_slave_1) entered disabled state [ 649.016704][T19360] bridge_slave_1: entered allmulticast mode [ 649.047675][T19360] bridge_slave_1: entered promiscuous mode [ 649.149941][T19360] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 649.155447][T19360] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 649.304170][T19360] team0: Port device team_slave_0 added [ 649.331520][T19360] team0: Port device team_slave_1 added [ 649.460776][T19546] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3161'. [ 649.542695][T19541] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3161'. [ 649.542727][T19541] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3161'. [ 649.542743][T19541] netlink: 'syz.4.3161': attribute type 4 has an invalid length. [ 649.543774][T19534] syzkaller0: entered promiscuous mode [ 649.543973][T19534] syzkaller0: entered allmulticast mode [ 649.576100][ T5280] 8021q: adding VLAN 0 to HW filter on device eth2 [ 649.581457][T13914] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 649.653543][T19360] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 649.653560][T19360] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 649.653580][T19360] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 649.687822][ T6559] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 649.710327][T19360] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 649.710344][T19360] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 649.710368][T19360] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 650.118082][ T6566] hsr_slave_0: left promiscuous mode [ 650.603868][ T50] IPVS: starting estimator thread 0... [ 650.717466][T19579] IPVS: using max 30 ests per chain, 72000 per kthread [ 653.393565][T19583] openvswitch: netlink: Unexpected mask (mask=100000090, allowed=100010058) [ 653.669106][T19585] nbd: couldn't find a device at index 0 [ 653.743716][ T6559] smc: removing ib device syz0 [ 653.768868][T19552] veth0_to_bond: entered allmulticast mode [ 653.843887][ T6559] smbdirect: ib_dev[syz0] removed [ 654.246547][T19360] hsr_slave_0: entered promiscuous mode [ 654.277757][T19360] hsr_slave_1: entered promiscuous mode [ 654.365468][T19576] geneve2: entered promiscuous mode [ 654.367124][ T6558] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 654.553200][T19601] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3173'. [ 654.752270][T19596] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3173'. [ 654.752298][T19596] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3173'. [ 654.752314][T19596] netlink: 'syz.0.3173': attribute type 4 has an invalid length. [ 654.957038][T19605] netlink: 'syz.1.3174': attribute type 11 has an invalid length. [ 655.053014][T19609] IPv6: addrconf: prefix option has invalid lifetime [ 655.158737][ T6510] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 655.471669][T13914] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 656.043435][T19638] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3179'. [ 656.145275][T19647] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3179'. [ 656.309382][T13914] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 656.667673][ T5280] 8021q: adding VLAN 0 to HW filter on device eth3 [ 656.698220][T19659] Cannot find del_set index 3 as target [ 656.868083][T19661] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3183'. [ 656.930379][ T6510] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 656.953598][T19659] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3183'. [ 657.079304][ T13] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 657.187664][ T6510] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 657.589938][T19677] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3185'. [ 657.634667][T19672] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3185'. [ 657.634695][T19672] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3185'. [ 657.634711][T19672] netlink: 'syz.0.3185': attribute type 4 has an invalid length. [ 657.648417][ T13] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 657.707598][T19680] sctp: [Deprecated]: syz.4.3188 (pid 19680) Use of struct sctp_assoc_value in delayed_ack socket option. [ 657.707598][T19680] Use struct sctp_sack_info instead [ 657.759276][ T6590] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 659.178370][T19733] xt_IDLETIMER: timeout value is too big [ 659.184622][ T6566] IPVS: stop unused estimator thread 0... [ 659.427638][ T50] net_ratelimit: 8 callbacks suppressed [ 659.427659][ T50] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 659.532171][T19739] netlink: 'syz.1.3200': attribute type 2 has an invalid length. [ 659.537798][ T6566] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 659.597929][T19739] : renamed from bridge_slave_1 (while UP) [ 659.719287][T19751] __nla_validate_parse: 2 callbacks suppressed [ 659.719306][T19751] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3199'. [ 659.850010][T19741] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3199'. [ 659.850035][T19741] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3199'. [ 659.850051][T19741] netlink: 'syz.2.3199': attribute type 4 has an invalid length. [ 660.027561][ T6590] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 660.032159][T19754] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3202'. [ 660.245102][T19763] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3204'. [ 660.296911][T19769] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3204'. [ 660.319133][T13914] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 660.332783][T19360] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 660.382166][T19360] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 660.383114][T19360] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 660.394271][T19759] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3202'. [ 660.436230][T19360] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 660.509688][T19360] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 660.531156][T19360] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 660.533793][T19360] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 660.546099][T19763] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3204'. [ 660.555233][T19360] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 660.969068][ T6566] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 661.406723][T19360] 8021q: adding VLAN 0 to HW filter on device bond0 [ 661.447781][T13914] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 661.494765][T19360] 8021q: adding VLAN 0 to HW filter on device team0 [ 661.542377][T19806] netlink: zone id is out of range [ 661.542394][T19806] netlink: zone id is out of range [ 661.542402][T19806] netlink: zone id is out of range [ 661.542410][T19806] netlink: zone id is out of range [ 661.580077][ T6566] bridge0: port 1(bridge_slave_0) entered blocking state [ 661.580193][ T6566] bridge0: port 1(bridge_slave_0) entered forwarding state [ 661.645049][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 661.645158][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 661.946737][T19816] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3213'. [ 661.946762][T19816] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3213'. [ 661.946778][T19816] netlink: 'syz.1.3213': attribute type 4 has an invalid length. [ 662.350048][T19837] netlink: 'syz.1.3218': attribute type 18 has an invalid length. [ 662.450466][ T6510] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 662.450714][ T6510] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 662.450751][ T6510] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 662.460505][ T13] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 663.777709][T19893] gretap0: entered promiscuous mode [ 663.905806][T19895] 0{X功: renamed from gretap0 [ 663.975746][T19895] 0{X功: left promiscuous mode [ 663.975775][T19895] 0{X功: entered allmulticast mode [ 664.056801][T19903] 1{X功: renamed from 30{X功 (while UP) [ 664.113723][T19911] sctp: [Deprecated]: syz.0.3226 (pid 19911) Use of int in maxseg socket option. [ 664.113723][T19911] Use struct sctp_assoc_value instead [ 664.137594][T19898] netlink: 'syz.1.3227': attribute type 4 has an invalid length. [ 664.512668][T19360] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 664.622381][T19919] syzkaller0: entered promiscuous mode [ 664.622404][T19919] syzkaller0: entered allmulticast mode [ 664.665398][T19360] veth0_vlan: entered promiscuous mode [ 664.708281][T19360] veth1_vlan: entered promiscuous mode [ 664.761757][T13914] net_ratelimit: 522 callbacks suppressed [ 664.761780][T13914] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 664.879849][ T6559] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 664.902885][T19360] veth0_macvtap: entered promiscuous mode [ 665.113393][T19360] veth1_macvtap: entered promiscuous mode [ 665.212494][T19940] netlink: 'syz.4.3233': attribute type 2 has an invalid length. [ 665.409246][T19360] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 665.409499][ T6568] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 665.465023][T19360] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 665.524685][ T6568] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 665.604092][T19947] Bluetooth: hci0: invalid length 0, exp 2 for type 25 [ 665.617794][ T50] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 665.618362][ T6559] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 665.618403][ T6559] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 665.618438][ T6559] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 665.778383][ T6568] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 666.058736][T13914] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 666.269207][T19967] __nla_validate_parse: 9 callbacks suppressed [ 666.269226][T19967] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3238'. [ 666.409291][ T6568] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 666.607698][T19961] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3238'. [ 666.607726][T19961] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3238'. [ 666.607742][T19961] netlink: 'syz.0.3238': attribute type 4 has an invalid length. [ 666.711001][ T13] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 666.732914][ T6568] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 666.732934][ T6568] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 666.835363][ T6568] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 666.835385][ T6568] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 666.872770][ T6559] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 666.877536][T19983] netlink: 34 bytes leftover after parsing attributes in process `syz.0.3242'. [ 667.018882][ T13] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 667.218990][T20000] geneve1: entered promiscuous mode [ 667.270720][T19999] siw: device registration error -23 [ 667.406847][T20005] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3246'. [ 667.710351][ T5623] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 667.713037][ T5623] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 667.715087][ T5623] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 667.741960][ T5623] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 667.744066][ T5623] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 667.920423][T20017] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3246'. [ 668.425716][T20024] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3249'. [ 668.707938][T20028] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3251'. [ 668.707965][T20028] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3251'. [ 668.707981][T20028] netlink: 'syz.3.3251': attribute type 4 has an invalid length. [ 668.826432][T20028] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3251'. [ 668.994760][T20046] netlink: 'syz.1.3254': attribute type 5 has an invalid length. [ 669.212739][T20041] svc: failed to register nfsdv3 RPC service (errno 111). [ 669.236022][T20041] svc: failed to register nfsaclv3 RPC service (errno 111). [ 669.390827][T20057] netlink: 'syz.1.3256': attribute type 1 has an invalid length. [ 669.473016][T20057] 8021q: adding VLAN 0 to HW filter on device bond2 [ 669.798497][ T5622] Bluetooth: hci1: command tx timeout [ 670.204282][ T6566] net_ratelimit: 16 callbacks suppressed [ 670.204306][ T6566] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 670.263782][T20074] syzkaller0: entered promiscuous mode [ 670.263806][T20074] syzkaller0: entered allmulticast mode [ 670.266316][ T6566] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 670.339086][ T6559] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 670.371450][T20086] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 670.419237][T20074] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 670.863251][T20084] raw_sendmsg: syz.1.3261 forgot to set AF_INET. Fix it! [ 671.286658][T20105] __nla_validate_parse: 7 callbacks suppressed [ 671.286677][T20105] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3264'. [ 671.286692][T20105] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3264'. [ 671.286706][T20105] netlink: 'syz.4.3264': attribute type 4 has an invalid length. [ 671.310200][T20105] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3264'. [ 671.331894][ T13] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 671.466583][T20012] bridge0: port 1(bridge_slave_0) entered blocking state [ 671.468168][T20012] bridge0: port 1(bridge_slave_0) entered disabled state [ 671.468486][T20012] bridge_slave_0: entered allmulticast mode [ 671.474804][T20012] bridge_slave_0: entered promiscuous mode [ 671.487478][T20012] bridge0: port 2(bridge_slave_1) entered blocking state [ 671.487978][T20012] bridge0: port 2(bridge_slave_1) entered disabled state [ 671.488287][T20012] bridge_slave_1: entered allmulticast mode [ 671.493183][T20012] bridge_slave_1: entered promiscuous mode [ 671.605150][T20012] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 671.617864][T20012] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 671.680765][T20012] team0: Port device team_slave_0 added [ 671.694006][T20012] team0: Port device team_slave_1 added [ 671.827957][T20121] netlink: 'syz.1.3269': attribute type 4 has an invalid length. [ 671.827979][T20121] netlink: 152 bytes leftover after parsing attributes in process `syz.1.3269'. [ 671.866801][T20121] .`: renamed from bond0 (while UP) [ 671.877964][ T5622] Bluetooth: hci1: command tx timeout [ 671.915246][T20012] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 671.915264][T20012] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 671.915288][T20012] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 671.918465][ T6500] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 672.046399][T20126] xt_CT: You must specify a L4 protocol and not use inversions on it [ 672.081044][T20012] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 672.081062][T20012] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 672.081086][T20012] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 672.210808][T20012] hsr_slave_0: entered promiscuous mode [ 672.211942][T20012] hsr_slave_1: entered promiscuous mode [ 672.212870][T20012] debugfs: 'hsr0' already exists in 'hsr' [ 672.212890][T20012] Cannot create hsr debugfs directory [ 672.412461][T20132] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3274'. [ 672.433485][T20131] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3272'. [ 672.455534][T20132] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3274'. [ 672.560597][T20137] netlink: 'syz.3.3272': attribute type 10 has an invalid length. [ 673.022377][T20137] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 673.050203][T20137] team0: Port device netdevsim1 added [ 673.403900][T20154] Bluetooth: MGMT ver 1.23 [ 673.415367][T20154] Bluetooth: MGMT ver 1.23 [ 673.428090][T20154] Bluetooth: MGMT ver 1.23 [ 673.496758][T20012] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 673.496792][T20012] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 673.496813][T20012] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 673.580418][T20158] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3277'. [ 673.666645][T20164] FAULT_INJECTION: forcing a failure. [ 673.666645][T20164] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 673.666671][T20164] CPU: 0 UID: 0 PID: 20164 Comm: syz.4.3279 Not tainted syzkaller #0 PREEMPT(full) [ 673.666690][T20164] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 673.666699][T20164] Call Trace: [ 673.666705][T20164] [ 673.666712][T20164] dump_stack_lvl+0xe8/0x150 [ 673.666739][T20164] should_fail_ex+0x410/0x560 [ 673.666760][T20164] _copy_to_user+0x31/0xb0 [ 673.666783][T20164] simple_read_from_buffer+0xe1/0x170 [ 673.666807][T20164] proc_fail_nth_read+0x1bb/0x230 [ 673.666867][T20164] ? common_file_perm+0x20e/0x2b0 [ 673.666889][T20164] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 673.666913][T20164] ? rw_verify_area+0x24a/0x4c0 [ 673.666934][T20164] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 673.666957][T20164] vfs_read+0x213/0xa80 [ 673.666982][T20164] ? __pfx___mutex_lock+0x10/0x10 [ 673.667006][T20164] ? __pfx_vfs_read+0x10/0x10 [ 673.667029][T20164] ? __fget_files+0x2a/0x420 [ 673.667051][T20164] ? __fget_files+0x3a2/0x420 [ 673.667068][T20164] ? __fget_files+0x2a/0x420 [ 673.667096][T20164] ksys_read+0x150/0x270 [ 673.667120][T20164] ? __pfx_ksys_read+0x10/0x10 [ 673.667153][T20164] do_syscall_64+0x166/0x520 [ 673.667174][T20164] ? trace_irq_disable+0x3b/0x140 [ 673.667191][T20164] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 673.667209][T20164] ? clear_bhb_loop+0x70/0xc0 [ 673.667228][T20164] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 673.667242][T20164] RIP: 0033:0x7f8b8015e98e [ 673.667258][T20164] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 673.667271][T20164] RSP: 002b:00007f8b810c6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 673.667288][T20164] RAX: ffffffffffffffda RBX: 00007f8b810c76c0 RCX: 00007f8b8015e98e [ 673.667299][T20164] RDX: 000000000000000f RSI: 00007f8b810c70a0 RDI: 0000000000000007 [ 673.667309][T20164] RBP: 00007f8b810c7090 R08: 0000000000000000 R09: 0000000000000000 [ 673.667319][T20164] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 673.667330][T20164] R13: 00007f8b80426038 R14: 00007f8b80425fa0 R15: 00007ffd71fe4958 [ 673.667358][T20164] [ 673.848240][ T6558] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 673.957179][ T5622] Bluetooth: hci1: command tx timeout [ 673.958488][ T6566] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 674.091396][T20150] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3277'. [ 674.091422][T20150] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3277'. [ 674.091439][T20150] netlink: 'syz.3.3277': attribute type 4 has an invalid length. [ 674.417690][T20179] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 674.798282][T20012] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 674.798319][T20012] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 674.798344][T20012] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 674.896212][T20184] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 674.896831][T20184] batman_adv: batadv0: Adding interface: gretap1 [ 674.896844][T20184] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 674.896871][T20184] batman_adv: batadv0: Interface activated: gretap1 [ 675.097689][T20012] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 675.097725][T20012] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 675.097749][T20012] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 675.209307][ T13] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 675.569438][T20012] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 675.569473][T20012] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 675.569497][T20012] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 675.765813][T20210] netlink: 'syz.4.3291': attribute type 4 has an invalid length. [ 675.787857][ T13] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 675.900326][ T6590] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 676.008303][ T13] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 676.037677][ T5622] Bluetooth: hci1: command tx timeout [ 676.119479][ T50] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 676.500764][T20232] __nla_validate_parse: 7 callbacks suppressed [ 676.500786][T20232] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3297'. [ 676.500880][T20232] netlink: 'syz.2.3297': attribute type 10 has an invalid length. [ 676.500896][T20232] netlink: 'syz.2.3297': attribute type 5 has an invalid length. [ 676.500908][T20232] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3297'. [ 676.752495][T20232] geneve2: entered promiscuous mode [ 676.752520][T20232] geneve2: entered allmulticast mode [ 676.791310][ T6590] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 51459 - 0 [ 676.791361][ T6590] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 51459 - 0 [ 676.791397][ T6590] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 51459 - 0 [ 676.986526][T20230] pim6reg: entered allmulticast mode [ 676.994918][T20012] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 677.025830][T20012] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 677.034823][T20012] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 677.049553][T20012] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 677.049979][T20229] pim6reg: left allmulticast mode [ 677.084088][T20012] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 677.110128][T20012] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 677.112583][T20012] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 677.138294][T20012] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 677.328295][ T50] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 677.525027][T20264] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3302'. [ 677.525054][T20264] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3302'. [ 677.525070][T20264] netlink: 'syz.4.3302': attribute type 4 has an invalid length. [ 677.627492][ T6500] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 677.629400][T20264] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3302'. [ 677.693630][T20012] 8021q: adding VLAN 0 to HW filter on device bond0 [ 677.758284][T20012] 8021q: adding VLAN 0 to HW filter on device team0 [ 677.805388][ T6558] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 678.013084][T13914] bridge0: port 1(bridge_slave_0) entered blocking state [ 678.013193][T13914] bridge0: port 1(bridge_slave_0) entered forwarding state [ 678.074711][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 678.074816][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 678.084969][ T6590] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 678.210258][ T6566] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 678.613631][T20288] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3306'. [ 678.635953][T20295] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3309'. [ 678.655517][T20296] ieee802154 phy0 wpan0: encryption failed: -22 [ 678.747820][T20295] bond14: entered promiscuous mode [ 678.749697][T20295] 8021q: adding VLAN 0 to HW filter on device bond14 [ 678.752131][T20296] tipc: Enabling of bearer rejected, failed to enable media [ 678.874618][T20307] x_tables: duplicate underflow at hook 3 [ 678.951000][T20316] netlink: 'syz.4.3310': attribute type 1 has an invalid length. [ 678.979232][T20307] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3311'. [ 679.013232][T20299] bridge0: entered promiscuous mode [ 679.015757][T20299] bond14: (slave bridge0): Enslaving as an active interface with an up link [ 679.302322][T20326] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3313'. [ 679.414137][T20321] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3313'. [ 679.414166][T20321] netlink: 'syz.2.3313': attribute type 4 has an invalid length. [ 679.570953][T20329] netlink: 'syz.3.3315': attribute type 1 has an invalid length. [ 679.838824][T20012] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 680.050010][T20012] veth0_vlan: entered promiscuous mode [ 680.104514][T20012] veth1_vlan: entered promiscuous mode [ 680.226776][T20012] veth0_macvtap: entered promiscuous mode [ 680.251755][T20012] veth1_macvtap: entered promiscuous mode [ 680.289719][ T6559] net_ratelimit: 7 callbacks suppressed [ 680.289738][ T6559] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 680.291661][T20012] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 680.344852][T20012] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 680.419513][T13914] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 680.419564][T13914] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 680.448962][ T50] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 680.679607][ T6500] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 680.679669][ T6500] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 680.729993][ T6590] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 680.900186][T20362] vlan2: entered promiscuous mode [ 680.900208][T20362] bridge0: entered promiscuous mode [ 681.001368][T20367] netlink: 'syz.2.3325': attribute type 4 has an invalid length. [ 681.003903][ T50] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 681.082075][ T6559] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 681.082094][ T6559] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 681.154590][ T6590] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 681.154610][ T6590] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 681.179158][ T50] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 681.305772][T20374] bridge0: port 3(macsec1) entered blocking state [ 681.309370][T20374] bridge0: port 3(macsec1) entered disabled state [ 681.309726][T20374] macsec1: entered allmulticast mode [ 681.309744][T20374] bridge0: entered allmulticast mode [ 681.316184][T20374] bridge0: entered promiscuous mode [ 681.441889][T20374] macsec1: left allmulticast mode [ 681.441915][T20374] bridge0: left allmulticast mode [ 681.514778][ T30] bridge0: left promiscuous mode [ 681.574967][ T6590] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 681.622783][T20386] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 681.682131][T13914] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 681.793657][T13914] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 681.901190][ T6566] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 682.150137][T20395] syzkaller1: entered allmulticast mode [ 682.752814][ T5623] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 682.754721][ T5623] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 682.776447][ T5623] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 682.786415][ T5623] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 682.796912][ T5623] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 683.292569][T20418] Unsupported ieee802154 address type: 0 [ 683.450330][T20423] tipc: Started in network mode [ 683.450361][T20423] tipc: Node identity 9eb0cdb3c83d, cluster identity 4711 [ 683.450530][T20423] tipc: Enabled bearer , priority 0 [ 683.791749][T20423] syzkaller0: entered promiscuous mode [ 683.791928][T20423] syzkaller0: entered allmulticast mode [ 683.795981][T20423] tipc: Resetting bearer [ 684.049477][T20450] __nla_validate_parse: 6 callbacks suppressed [ 684.049500][T20450] netlink: 76 bytes leftover after parsing attributes in process `syz.0.3345'. [ 684.049608][T20450] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3345'. [ 684.129834][ T13] tipc: Resetting bearer [ 684.166895][T20422] tipc: Resetting bearer [ 684.918043][ T5623] Bluetooth: hci4: command tx timeout [ 685.005820][T20467] netlink: 'syz.0.3349': attribute type 9 has an invalid length. [ 685.038825][T20467] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3349'. [ 685.040823][T20468] netlink: 'syz.0.3349': attribute type 9 has an invalid length. [ 685.043283][T20467] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3349'. [ 685.820790][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 687.005701][ T5623] Bluetooth: hci4: command tx timeout [ 688.713649][T20422] tipc: Disabling bearer [ 688.737147][ T13] net_ratelimit: 11 callbacks suppressed [ 688.737167][ T13] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 688.739234][T12665] tipc: Node number set to 1452133811 [ 688.947119][ T13] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 689.058152][ T6559] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 689.087661][ T5623] Bluetooth: hci4: command tx timeout [ 689.297657][T13914] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 689.487214][ T6590] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 689.647473][ T50] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 689.759450][ T6568] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 690.241019][T20404] bridge0: port 1(bridge_slave_0) entered blocking state [ 690.244635][T20404] bridge0: port 1(bridge_slave_0) entered disabled state [ 690.244827][T20404] bridge_slave_0: entered allmulticast mode [ 690.276411][T20404] bridge_slave_0: entered promiscuous mode [ 690.309898][T20404] bridge0: port 2(bridge_slave_1) entered blocking state [ 690.309981][T20404] bridge0: port 2(bridge_slave_1) entered disabled state [ 690.310110][T20404] bridge_slave_1: entered allmulticast mode [ 690.343598][T20404] bridge_slave_1: entered promiscuous mode [ 690.425815][T20404] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 690.439472][T20404] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 690.482397][T20404] team0: Port device team_slave_0 added [ 690.544552][T20404] team0: Port device team_slave_1 added [ 690.671117][T20404] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 690.671135][T20404] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 690.671158][T20404] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 690.674831][T20404] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 690.674845][T20404] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 690.674868][T20404] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 690.683519][ T6559] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 690.913202][T20557] netlink: 'syz.0.3370': attribute type 32 has an invalid length. [ 690.937544][T20557] netlink: 'syz.0.3370': attribute type 2 has an invalid length. [ 691.029793][T20558] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 691.157184][ T5623] Bluetooth: hci4: command tx timeout [ 691.157293][T13914] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 691.196396][T20404] hsr_slave_0: entered promiscuous mode [ 691.212453][T20404] hsr_slave_1: entered promiscuous mode [ 691.215716][T20404] debugfs: 'hsr0' already exists in 'hsr' [ 691.215741][T20404] Cannot create hsr debugfs directory [ 691.216821][T20567] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3373'. [ 691.742342][T20592] netlink: 'syz.1.3378': attribute type 1 has an invalid length. [ 691.763190][T20593] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 693.322979][T20404] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 693.323014][T20404] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 693.323040][T20404] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 51459 - 0 [ 693.729849][T20404] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 693.729884][T20404] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 693.729909][T20404] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 51459 - 0 [ 693.834989][T20645] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3393'. [ 693.893783][ T13] net_ratelimit: 5 callbacks suppressed [ 693.893804][ T13] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 693.997974][ T6566] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 694.018303][T20651] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3392'. [ 694.022942][T20650] xt_CT: You must specify a L4 protocol and not use inversions on it [ 694.023784][T20651] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3392'. [ 694.096365][T20651] bridge_slave_0: left allmulticast mode [ 694.096392][T20651] bridge_slave_0: left promiscuous mode [ 694.096597][T20651] bridge0: port 1(bridge_slave_0) entered disabled state [ 694.201720][T20651] bridge_slave_1: left allmulticast mode [ 694.201746][T20651] bridge_slave_1: left promiscuous mode [ 694.201960][T20651] bridge0: port 2(bridge_slave_1) entered disabled state [ 694.271183][T20651] bond0: (slave bond_slave_0): Releasing backup interface [ 694.326487][T20651] bond0: (slave bond_slave_1): Releasing backup interface [ 694.377810][T20651] team0: Port device team_slave_0 removed [ 694.396813][T20651] team0: Port device team_slave_1 removed [ 694.403913][T20651] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 694.403938][T20651] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 694.443764][T20651] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 694.443790][T20651] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 694.466794][T20651] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 695.214494][T20404] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 695.214529][T20404] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 695.214554][T20404] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 51459 - 0 [ 695.477951][ T6568] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 695.589398][ T6568] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 695.759656][ T50] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 695.987847][ T6566] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 696.149928][T20686] netlink: 'syz.1.3402': attribute type 39 has an invalid length. [ 696.150624][T20694] netlink: 'syz.1.3402': attribute type 39 has an invalid length. [ 696.705680][T20714] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3407'. [ 696.829514][ T6559] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 697.003689][ T50] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 697.019851][T20404] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 697.076721][T20404] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 697.290609][T20732] check_preemption_disabled: 121 callbacks suppressed [ 697.290663][T20732] BUG: using smp_processor_id() in preemptible [00000000] code: syz.1.3411/20732 [ 697.290680][T20732] caller is bpf_mem_cache_free_rcu+0x48/0xc0 [ 697.290713][T20732] CPU: 0 UID: 0 PID: 20732 Comm: syz.1.3411 Not tainted syzkaller #0 PREEMPT(full) [ 697.290735][T20732] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 697.290746][T20732] Call Trace: [ 697.290755][T20732] [ 697.290764][T20732] dump_stack_lvl+0xe8/0x150 [ 697.290794][T20732] check_preemption_disabled+0xcd/0xd0 [ 697.290827][T20732] bpf_mem_cache_free_rcu+0x48/0xc0 [ 697.290853][T20732] rhtab_delete_elem+0x1826/0x1b00 [ 697.290884][T20732] ? rhtab_delete_elem+0x15f/0x1b00 [ 697.290906][T20732] ? check_and_init_map_value+0x57/0x410 [ 697.290936][T20732] __rhtab_map_lookup_and_delete_batch+0x935/0xcb0 [ 697.290980][T20732] ? __pfx_rhtab_map_lookup_and_delete_batch+0x10/0x10 [ 697.291014][T20732] bpf_map_do_batch+0x445/0x630 [ 697.291044][T20732] __sys_bpf+0x906/0xd90 [ 697.291074][T20732] ? __pfx___sys_bpf+0x10/0x10 [ 697.291099][T20732] ? do_futex+0x458/0x4e0 [ 697.291165][T20732] ? rcu_is_watching+0x16/0xb0 [ 697.291196][T20732] __x64_sys_bpf+0xba/0xd0 [ 697.291219][T20732] do_syscall_64+0x166/0x520 [ 697.291245][T20732] ? trace_irq_disable+0x3b/0x140 [ 697.291263][T20732] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 697.291283][T20732] ? clear_bhb_loop+0x70/0xc0 [ 697.291308][T20732] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 697.291327][T20732] RIP: 0033:0x7f0981d9e159 [ 697.291345][T20732] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 697.291360][T20732] RSP: 002b:00007f097fff6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 697.291381][T20732] RAX: ffffffffffffffda RBX: 00007f0982025fa0 RCX: 00007f0981d9e159 [ 697.291395][T20732] RDX: 0000000000000038 RSI: 0000200000000800 RDI: 0000000000000019 [ 697.291409][T20732] RBP: 00007f0981e3506b R08: 0000000000000000 R09: 0000000000000000 [ 697.291421][T20732] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 697.291433][T20732] R13: 00007f0982026038 R14: 00007f0982025fa0 R15: 00007ffdf741c048 [ 697.291467][T20732] [ 697.348931][T20732] BUG: using smp_processor_id() in preemptible [00000000] code: syz.1.3411/20732 [ 697.348954][T20732] caller is bpf_mem_cache_free_rcu+0x48/0xc0 [ 697.348986][T20732] CPU: 1 UID: 0 PID: 20732 Comm: syz.1.3411 Not tainted syzkaller #0 PREEMPT(full) [ 697.349005][T20732] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 697.349017][T20732] Call Trace: [ 697.349025][T20732] [ 697.349034][T20732] dump_stack_lvl+0xe8/0x150 [ 697.349071][T20732] check_preemption_disabled+0xcd/0xd0 [ 697.349103][T20732] bpf_mem_cache_free_rcu+0x48/0xc0 [ 697.349128][T20732] rhtab_delete_elem+0x1826/0x1b00 [ 697.349157][T20732] ? rhtab_delete_elem+0x15f/0x1b00 [ 697.349177][T20732] ? check_and_init_map_value+0x57/0x410 [ 697.349205][T20732] __rhtab_map_lookup_and_delete_batch+0x935/0xcb0 [ 697.349247][T20732] ? __pfx_rhtab_map_lookup_and_delete_batch+0x10/0x10 [ 697.349278][T20732] bpf_map_do_batch+0x445/0x630 [ 697.349307][T20732] __sys_bpf+0x906/0xd90 [ 697.349337][T20732] ? __pfx___sys_bpf+0x10/0x10 [ 697.349360][T20732] ? do_futex+0x458/0x4e0 [ 697.349418][T20732] ? rcu_is_watching+0x16/0xb0 [ 697.349447][T20732] __x64_sys_bpf+0xba/0xd0 [ 697.349469][T20732] do_syscall_64+0x166/0x520 [ 697.349492][T20732] ? trace_irq_disable+0x3b/0x140 [ 697.349510][T20732] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 697.349529][T20732] ? clear_bhb_loop+0x70/0xc0 [ 697.349553][T20732] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 697.349571][T20732] RIP: 0033:0x7f0981d9e159 [ 697.349587][T20732] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 697.349603][T20732] RSP: 002b:00007f097fff6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 697.349623][T20732] RAX: ffffffffffffffda RBX: 00007f0982025fa0 RCX: 00007f0981d9e159 [ 697.349639][T20732] RDX: 0000000000000038 RSI: 0000200000000800 RDI: 0000000000000019 [ 697.349651][T20732] RBP: 00007f0981e3506b R08: 0000000000000000 R09: 0000000000000000 [ 697.349663][T20732] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 697.349675][T20732] R13: 00007f0982026038 R14: 00007f0982025fa0 R15: 00007ffdf741c048 [ 697.349706][T20732] [ 697.377720][T20732] BUG: using smp_processor_id() in preemptible [00000000] code: syz.1.3411/20732 [ 697.377921][T20732] caller is bpf_mem_cache_free_rcu+0x48/0xc0 [ 697.377955][T20732] CPU: 1 UID: 0 PID: 20732 Comm: syz.1.3411 Not tainted syzkaller #0 PREEMPT(full) [ 697.377977][T20732] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 697.377990][T20732] Call Trace: [ 697.377997][T20732] [ 697.378007][T20732] dump_stack_lvl+0xe8/0x150 [ 697.378041][T20732] check_preemption_disabled+0xcd/0xd0 [ 697.378079][T20732] bpf_mem_cache_free_rcu+0x48/0xc0 [ 697.378105][T20732] rhtab_delete_elem+0x1826/0x1b00 [ 697.378133][T20732] ? rhtab_delete_elem+0x15f/0x1b00 [ 697.378155][T20732] ? check_and_init_map_value+0x57/0x410 [ 697.378183][T20732] __rhtab_map_lookup_and_delete_batch+0x935/0xcb0 [ 697.378225][T20732] ? __pfx_rhtab_map_lookup_and_delete_batch+0x10/0x10 [ 697.378257][T20732] bpf_map_do_batch+0x445/0x630 [ 697.378285][T20732] __sys_bpf+0x906/0xd90 [ 697.378314][T20732] ? __pfx___sys_bpf+0x10/0x10 [ 697.378338][T20732] ? do_futex+0x458/0x4e0 [ 697.378391][T20732] ? rcu_is_watching+0x16/0xb0 [ 697.378420][T20732] __x64_sys_bpf+0xba/0xd0 [ 697.378442][T20732] do_syscall_64+0x166/0x520 [ 697.378466][T20732] ? trace_irq_disable+0x3b/0x140 [ 697.378483][T20732] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 697.378502][T20732] ? clear_bhb_loop+0x70/0xc0 [ 697.378525][T20732] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 697.378544][T20732] RIP: 0033:0x7f0981d9e159 [ 697.378562][T20732] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 697.378578][T20732] RSP: 002b:00007f097fff6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 697.378597][T20732] RAX: ffffffffffffffda RBX: 00007f0982025fa0 RCX: 00007f0981d9e159 [ 697.378611][T20732] RDX: 0000000000000038 RSI: 0000200000000800 RDI: 0000000000000019 [ 697.378624][T20732] RBP: 00007f0981e3506b R08: 0000000000000000 R09: 0000000000000000 [ 697.378636][T20732] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 697.378648][T20732] R13: 00007f0982026038 R14: 00007f0982025fa0 R15: 00007ffdf741c048 [ 697.378681][T20732] [ 697.379146][T20732] BUG: using smp_processor_id() in preemptible [00000000] code: syz.1.3411/20732 [ 697.379162][T20732] caller is bpf_mem_cache_free_rcu+0x48/0xc0 [ 697.379187][T20732] CPU: 1 UID: 0 PID: 20732 Comm: syz.1.3411 Not tainted syzkaller #0 PREEMPT(full) [ 697.379207][T20732] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 697.379218][T20732] Call Trace: [ 697.379226][T20732] [ 697.379233][T20732] dump_stack_lvl+0xe8/0x150 [ 697.379259][T20732] check_preemption_disabled+0xcd/0xd0 [ 697.379289][T20732] bpf_mem_cache_free_rcu+0x48/0xc0 [ 697.379313][T20732] rhtab_delete_elem+0x1826/0x1b00 [ 697.379341][T20732] ? rhtab_delete_elem+0x15f/0x1b00 [ 697.379362][T20732] ? check_and_init_map_value+0x57/0x410 [ 697.379389][T20732] __rhtab_map_lookup_and_delete_batch+0x935/0xcb0 [ 697.379431][T20732] ? __pfx_rhtab_map_lookup_and_delete_batch+0x10/0x10 [ 697.379462][T20732] bpf_map_do_batch+0x445/0x630 [ 697.379490][T20732] __sys_bpf+0x906/0xd90 [ 697.379518][T20732] ? __pfx___sys_bpf+0x10/0x10 [ 697.379542][T20732] ? do_futex+0x458/0x4e0 [ 697.379594][T20732] ? rcu_is_watching+0x16/0xb0 [ 697.379622][T20732] __x64_sys_bpf+0xba/0xd0 [ 697.379642][T20732] do_syscall_64+0x166/0x520 [ 697.379666][T20732] ? trace_irq_disable+0x3b/0x140 [ 697.379684][T20732] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 697.379702][T20732] ? clear_bhb_loop+0x70/0xc0 [ 697.379725][T20732] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 697.379744][T20732] RIP: 0033:0x7f0981d9e159 [ 697.379760][T20732] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 697.379776][T20732] RSP: 002b:00007f097fff6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 697.379795][T20732] RAX: ffffffffffffffda RBX: 00007f0982025fa0 RCX: 00007f0981d9e159 [ 697.379808][T20732] RDX: 0000000000000038 RSI: 0000200000000800 RDI: 0000000000000019 [ 697.379820][T20732] RBP: 00007f0981e3506b R08: 0000000000000000 R09: 0000000000000000 [ 697.379832][T20732] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 697.379843][T20732] R13: 00007f0982026038 R14: 00007f0982025fa0 R15: 00007ffdf741c048 [ 697.379875][T20732] [ 697.379887][T20732] BUG: using smp_processor_id() in preemptible [00000000] code: syz.1.3411/20732 [ 697.379900][T20732] caller is bpf_mem_cache_free_rcu+0x48/0xc0 [ 697.379922][T20732] CPU: 1 UID: 0 PID: 20732 Comm: syz.1.3411 Not tainted syzkaller #0 PREEMPT(full) [ 697.379941][T20732] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 697.379953][T20732] Call Trace: [ 697.379960][T20732] [ 697.379967][T20732] dump_stack_lvl+0xe8/0x150 [ 697.379999][T20732] check_preemption_disabled+0xcd/0xd0 [ 697.380028][T20732] bpf_mem_cache_free_rcu+0x48/0xc0 [ 697.380051][T20732] rhtab_delete_elem+0x1826/0x1b00 [ 697.380086][T20732] ? rhtab_delete_elem+0x15f/0x1b00 [ 697.380106][T20732] ? check_and_init_map_value+0x57/0x410 [ 697.380136][T20732] __rhtab_map_lookup_and_delete_batch+0x935/0xcb0 [ 697.380177][T20732] ? __pfx_rhtab_map_lookup_and_delete_batch+0x10/0x10 [ 697.380209][T20732] bpf_map_do_batch+0x445/0x630 [ 697.380237][T20732] __sys_bpf+0x906/0xd90 [ 697.380266][T20732] ? __pfx___sys_bpf+0x10/0x10 [ 697.380291][T20732] ? do_futex+0x458/0x4e0 [ 697.380344][T20732] ? rcu_is_watching+0x16/0xb0 [ 697.380371][T20732] __x64_sys_bpf+0xba/0xd0 [ 697.380393][T20732] do_syscall_64+0x166/0x520 [ 697.380416][T20732] ? trace_irq_disable+0x3b/0x140 [ 697.380433][T20732] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 697.380452][T20732] ? clear_bhb_loop+0x70/0xc0 [ 697.380474][T20732] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 697.380493][T20732] RIP: 0033:0x7f0981d9e159 [ 697.380508][T20732] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 697.380522][T20732] RSP: 002b:00007f097fff6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 697.380540][T20732] RAX: ffffffffffffffda RBX: 00007f0982025fa0 RCX: 00007f0981d9e159 [ 697.380553][T20732] RDX: 0000000000000038 RSI: 0000200000000800 RDI: 0000000000000019 [ 697.380565][T20732] RBP: 00007f0981e3506b R08: 0000000000000000 R09: 0000000000000000 [ 697.380578][T20732] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 697.380589][T20732] R13: 00007f0982026038 R14: 00007f0982025fa0 R15: 00007ffdf741c048 [ 697.380621][T20732] [ 697.414985][T20732] BUG: using smp_processor_id() in preemptible [00000000] code: syz.1.3411/20732 [ 697.415007][T20732] caller is bpf_mem_cache_free_rcu+0x48/0xc0 [ 697.415038][T20732] CPU: 1 UID: 0 PID: 20732 Comm: syz.1.3411 Not tainted syzkaller #0 PREEMPT(full) [ 697.415067][T20732] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 697.415085][T20732] Call Trace: [ 697.415093][T20732] [ 697.415102][T20732] dump_stack_lvl+0xe8/0x150 [ 697.415131][T20732] check_preemption_disabled+0xcd/0xd0 [ 697.415163][T20732] bpf_mem_cache_free_rcu+0x48/0xc0 [ 697.415188][T20732] rhtab_delete_elem+0x1826/0x1b00 [ 697.415217][T20732] ? rhtab_delete_elem+0x15f/0x1b00 [ 697.415238][T20732] ? check_and_init_map_value+0x57/0x410 [ 697.415267][T20732] __rhtab_map_lookup_and_delete_batch+0x935/0xcb0 [ 697.415309][T20732] ? __pfx_rhtab_map_lookup_and_delete_batch+0x10/0x10 [ 697.415340][T20732] bpf_map_do_batch+0x445/0x630 [ 697.415369][T20732] __sys_bpf+0x906/0xd90 [ 697.415398][T20732] ? __pfx___sys_bpf+0x10/0x10 [ 697.415422][T20732] ? do_futex+0x458/0x4e0 [ 697.415476][T20732] ? rcu_is_watching+0x16/0xb0 [ 697.415504][T20732] __x64_sys_bpf+0xba/0xd0 [ 697.415525][T20732] do_syscall_64+0x166/0x520 [ 697.415549][T20732] ? trace_irq_disable+0x3b/0x140 [ 697.415567][T20732] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 697.415587][T20732] ? clear_bhb_loop+0x70/0xc0 [ 697.415610][T20732] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 697.415628][T20732] RIP: 0033:0x7f0981d9e159 [ 697.415646][T20732] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 697.415662][T20732] RSP: 002b:00007f097fff6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 697.415682][T20732] RAX: ffffffffffffffda RBX: 00007f0982025fa0 RCX: 00007f0981d9e159 [ 697.415696][T20732] RDX: 0000000000000038 RSI: 0000200000000800 RDI: 0000000000000019 [ 697.415708][T20732] RBP: 00007f0981e3506b R08: 0000000000000000 R09: 0000000000000000 [ 697.415721][T20732] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 697.415732][T20732] R13: 00007f0982026038 R14: 00007f0982025fa0 R15: 00007ffdf741c048 [ 697.415765][T20732] [ 697.441656][T20732] BUG: using smp_processor_id() in preemptible [00000000] code: syz.1.3411/20732 [ 697.441678][T20732] caller is bpf_mem_cache_free_rcu+0x48/0xc0 [ 697.441709][T20732] CPU: 1 UID: 0 PID: 20732 Comm: syz.1.3411 Not tainted syzkaller #0 PREEMPT(full) [ 697.441729][T20732] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 697.441742][T20732] Call Trace: [ 697.441751][T20732] [ 697.441759][T20732] dump_stack_lvl+0xe8/0x150 [ 697.441790][T20732] check_preemption_disabled+0xcd/0xd0 [ 697.441821][T20732] bpf_mem_cache_free_rcu+0x48/0xc0 [ 697.441846][T20732] rhtab_delete_elem+0x1826/0x1b00 [ 697.441875][T20732] ? rhtab_delete_elem+0x15f/0x1b00 [ 697.441896][T20732] ? check_and_init_map_value+0x57/0x410 [ 697.441924][T20732] __rhtab_map_lookup_and_delete_batch+0x935/0xcb0 [ 697.441966][T20732] ? __pfx_rhtab_map_lookup_and_delete_batch+0x10/0x10 [ 697.441997][T20732] bpf_map_do_batch+0x445/0x630 [ 697.442026][T20732] __sys_bpf+0x906/0xd90 [ 697.442062][T20732] ? __pfx___sys_bpf+0x10/0x10 [ 697.442088][T20732] ? do_futex+0x458/0x4e0 [ 697.442142][T20732] ? rcu_is_watching+0x16/0xb0 [ 697.442171][T20732] __x64_sys_bpf+0xba/0xd0 [ 697.442194][T20732] do_syscall_64+0x166/0x520 [ 697.442217][T20732] ? trace_irq_disable+0x3b/0x140 [ 697.442235][T20732] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 697.442255][T20732] ? clear_bhb_loop+0x70/0xc0 [ 697.442278][T20732] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 697.442297][T20732] RIP: 0033:0x7f0981d9e159 [ 697.442314][T20732] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 697.442330][T20732] RSP: 002b:00007f097fff6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 697.442350][T20732] RAX: ffffffffffffffda RBX: 00007f0982025fa0 RCX: 00007f0981d9e159 [ 697.442364][T20732] RDX: 0000000000000038 RSI: 0000200000000800 RDI: 0000000000000019 [ 697.442377][T20732] RBP: 00007f0981e3506b R08: 0000000000000000 R09: 0000000000000000 [ 697.442389][T20732] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 697.442401][T20732] R13: 00007f0982026038 R14: 00007f0982025fa0 R15: 00007ffdf741c048 [ 697.442432][T20732] [ 697.442445][T20732] BUG: using smp_processor_id() in preemptible [00000000] code: syz.1.3411/20732 [ 697.442459][T20732] caller is bpf_mem_cache_free_rcu+0x48/0xc0 [ 697.442482][T20732] CPU: 1 UID: 0 PID: 20732 Comm: syz.1.3411 Not tainted syzkaller #0 PREEMPT(full) [ 697.442502][T20732] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 697.442512][T20732] Call Trace: [ 697.442519][T20732] [ 697.442527][T20732] dump_stack_lvl+0xe8/0x150 [ 697.442552][T20732] check_preemption_disabled+0xcd/0xd0 [ 697.442581][T20732] bpf_mem_cache_free_rcu+0x48/0xc0 [ 697.442605][T20732] rhtab_delete_elem+0x1826/0x1b00 [ 697.442633][T20732] ? rhtab_delete_elem+0x15f/0x1b00 [ 697.442654][T20732] ? check_and_init_map_value+0x57/0x410 [ 697.442685][T20732] __rhtab_map_lookup_and_delete_batch+0x935/0xcb0 [ 697.442726][T20732] ? __pfx_rhtab_map_lookup_and_delete_batch+0x10/0x10 [ 697.442758][T20732] bpf_map_do_batch+0x445/0x630 [ 697.442786][T20732] __sys_bpf+0x906/0xd90 [ 697.442815][T20732] ? __pfx___sys_bpf+0x10/0x10 [ 697.442838][T20732] ? do_futex+0x458/0x4e0 [ 697.442891][T20732] ? rcu_is_watching+0x16/0xb0 [ 697.442919][T20732] __x64_sys_bpf+0xba/0xd0 [ 697.442956][T20732] do_syscall_64+0x166/0x520 [ 697.442980][T20732] ? trace_irq_disable+0x3b/0x140 [ 697.442997][T20732] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 697.443017][T20732] ? clear_bhb_loop+0x70/0xc0 [ 697.443041][T20732] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 697.443064][T20732] RIP: 0033:0x7f0981d9e159 [ 697.443081][T20732] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 697.443096][T20732] RSP: 002b:00007f097fff6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 697.443114][T20732] RAX: ffffffffffffffda RBX: 00007f0982025fa0 RCX: 00007f0981d9e159 [ 697.443127][T20732] RDX: 0000000000000038 RSI: 0000200000000800 RDI: 0000000000000019 [ 697.443139][T20732] RBP: 00007f0981e3506b R08: 0000000000000000 R09: 0000000000000000 [ 697.443151][T20732] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 697.443162][T20732] R13: 00007f0982026038 R14: 00007f0982025fa0 R15: 00007ffdf741c048 [ 697.443195][T20732] [ 697.532277][T20732] BUG: using smp_processor_id() in preemptible [00000000] code: syz.1.3411/20732 [ 697.532299][T20732] caller is bpf_mem_cache_free_rcu+0x48/0xc0 [ 697.532332][T20732] CPU: 1 UID: 0 PID: 20732 Comm: syz.1.3411 Not tainted syzkaller #0 PREEMPT(full) [ 697.532353][T20732] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 697.532365][T20732] Call Trace: [ 697.532374][T20732] [ 697.532382][T20732] dump_stack_lvl+0xe8/0x150 [ 697.532412][T20732] check_preemption_disabled+0xcd/0xd0 [ 697.532443][T20732] bpf_mem_cache_free_rcu+0x48/0xc0 [ 697.532468][T20732] rhtab_delete_elem+0x1826/0x1b00 [ 697.532497][T20732] ? rhtab_delete_elem+0x15f/0x1b00 [ 697.532517][T20732] ? check_and_init_map_value+0x57/0x410 [ 697.532546][T20732] __rhtab_map_lookup_and_delete_batch+0x935/0xcb0 [ 697.532593][T20732] ? __pfx_rhtab_map_lookup_and_delete_batch+0x10/0x10 [ 697.532624][T20732] bpf_map_do_batch+0x445/0x630 [ 697.532652][T20732] __sys_bpf+0x906/0xd90 [ 697.532682][T20732] ? __pfx___sys_bpf+0x10/0x10 [ 697.532707][T20732] ? do_futex+0x458/0x4e0 [ 697.532759][T20732] ? rcu_is_watching+0x16/0xb0 [ 697.532789][T20732] __x64_sys_bpf+0xba/0xd0 [ 697.532811][T20732] do_syscall_64+0x166/0x520 [ 697.532835][T20732] ? trace_irq_disable+0x3b/0x140 [ 697.532853][T20732] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 697.532872][T20732] ? clear_bhb_loop+0x70/0xc0 [ 697.532895][T20732] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 697.532914][T20732] RIP: 0033:0x7f0981d9e159 [ 697.532932][T20732] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 697.532947][T20732] RSP: 002b:00007f097fff6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 697.532967][T20732] RAX: ffffffffffffffda RBX: 00007f0982025fa0 RCX: 00007f0981d9e159 [ 697.532981][T20732] RDX: 0000000000000038 RSI: 0000200000000800 RDI: 0000000000000019 [ 697.532993][T20732] RBP: 00007f0981e3506b R08: 0000000000000000 R09: 0000000000000000 [ 697.533005][T20732] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 697.533016][T20732] R13: 00007f0982026038 R14: 00007f0982025fa0 R15: 00007ffdf741c048 [ 697.533054][T20732] [ 697.534900][T20732] BUG: using smp_processor_id() in preemptible [00000000] code: syz.1.3411/20732 [ 697.534920][T20732] caller is bpf_mem_cache_free_rcu+0x48/0xc0 [ 697.534946][T20732] CPU: 1 UID: 0 PID: 20732 Comm: syz.1.3411 Not tainted syzkaller #0 PREEMPT(full) [ 697.534968][T20732] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 697.534980][T20732] Call Trace: [ 697.534988][T20732] [ 697.534997][T20732] dump_stack_lvl+0xe8/0x150 [ 697.535023][T20732] check_preemption_disabled+0xcd/0xd0 [ 697.535062][T20732] bpf_mem_cache_free_rcu+0x48/0xc0 [ 697.535088][T20732] rhtab_delete_elem+0x1826/0x1b00 [ 697.535117][T20732] ? rhtab_delete_elem+0x15f/0x1b00 [ 697.535138][T20732] ? check_and_init_map_value+0x57/0x410 [ 697.535167][T20732] __rhtab_map_lookup_and_delete_batch+0x935/0xcb0 [ 697.535210][T20732] ? __pfx_rhtab_map_lookup_and_delete_batch+0x10/0x10 [ 697.535240][T20732] bpf_map_do_batch+0x445/0x630 [ 697.535272][T20732] __sys_bpf+0x906/0xd90 [ 697.535301][T20732] ? __pfx___sys_bpf+0x10/0x10 [ 697.535325][T20732] ? do_futex+0x458/0x4e0 [ 697.535378][T20732] ? rcu_is_watching+0x16/0xb0 [ 697.535406][T20732] __x64_sys_bpf+0xba/0xd0 [ 697.535427][T20732] do_syscall_64+0x166/0x520 [ 697.535451][T20732] ? trace_irq_disable+0x3b/0x140 [ 697.535469][T20732] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 697.535488][T20732] ? clear_bhb_loop+0x70/0xc0 [ 697.535511][T20732] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 697.535530][T20732] RIP: 0033:0x7f0981d9e159 [ 697.535547][T20732] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 697.535562][T20732] RSP: 002b:00007f097fff6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 697.535581][T20732] RAX: ffffffffffffffda RBX: 00007f0982025fa0 RCX: 00007f0981d9e159 [ 697.535595][T20732] RDX: 0000000000000038 RSI: 0000200000000800 RDI: 0000000000000019 [ 697.535608][T20732] RBP: 00007f0981e3506b R08: 0000000000000000 R09: 0000000000000000 [ 697.535620][T20732] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 697.535632][T20732] R13: 00007f0982026038 R14: 00007f0982025fa0 R15: 00007ffdf741c048 [ 697.535665][T20732] [ 698.117157][ T5622] Bluetooth: hci5: command 0x0406 tx timeout [ 699.858935][T20404] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 699.864204][T20404] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 699.865473][T20404] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 699.913270][T20404] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 699.916271][T20404] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 699.948891][T20404] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 699.987127][ T13] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 700.110252][T20404] 8021q: adding VLAN 0 to HW filter on device bond0 [ 700.145313][T20404] 8021q: adding VLAN 0 to HW filter on device team0 [ 700.173644][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 700.173706][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 700.195069][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 700.195134][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 700.205532][ T6566] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 700.347186][ T6500] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 700.464081][ T13] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 700.569019][ T13] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 700.680957][ T13] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 700.793811][ T13] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 700.860881][T20404] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 700.931624][T20404] veth0_vlan: entered promiscuous mode [ 700.968050][T20404] veth1_vlan: entered promiscuous mode [ 701.006632][T20404] veth0_macvtap: entered promiscuous mode [ 701.048531][T20404] veth1_macvtap: entered promiscuous mode [ 701.068456][ T13] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 701.075536][T20404] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 701.109273][T20404] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 701.179766][ T6510] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 701.179819][ T6510] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 701.180139][ T6510] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 701.180291][ T6510] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 701.187351][ T6510] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 701.349021][ T6500] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 701.415133][ T6500] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 701.415155][ T6500] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 701.471368][ T6566] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 701.471389][ T6566] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 705.007121][T13914] net_ratelimit: 32 callbacks suppressed [ 705.007144][T13914] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 705.130678][T13914] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 705.239150][ T6590] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 705.347501][ T6500] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 705.457073][ T6510] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 705.570680][ T6510] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 705.752497][T13914] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 705.857363][T13914] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 705.967364][ T6510] bond6: (slave ip6gretap1): failed to get link speed/duplex [ 706.077097][T13914] bond6: (slave ip6gretap1): failed to get link speed/duplex