last executing test programs: 8.990496746s ago: executing program 3 (id=3889): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4001c00) close(0xffffffffffffffff) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x3, 0xc, &(0x7f0000002380)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x4f}, @printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}, {0x85, 0x0, 0x0, 0x71}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x2f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x2f, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xa5bc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, 0x0, 0x0) r2 = socket(0x1, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r3, &(0x7f0000000180), &(0x7f00000000c0)=@tcp6=r2}, 0x20) bind$unix(r2, &(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000001680)=[{{&(0x7f0000000380)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}], 0x1, 0x0) recvmmsg(r2, &(0x7f0000000d40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000500)=""/65, 0x41}], 0x1}}], 0x2, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f0000000000)={'syztnl0\x00', 0x0, 0x29, 0x6, 0x9, 0x1b, 0x0, @private0, @ipv4={'\x00', '\xff\xff', @remote}, 0x10, 0x1, 0x3, 0xd}}) setsockopt$packet_drop_memb(r2, 0x107, 0x2, &(0x7f0000000140)={r4, 0x1, 0x6, @random="8a21b4c5594f"}, 0x10) writev(r1, &(0x7f0000000100)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) unshare(0x6a040000) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) (async) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4001c00) (async) close(0xffffffffffffffff) (async) bpf$MAP_CREATE(0x0, 0x0, 0x48) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x3, 0xc, &(0x7f0000002380)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x4f}, @printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}, {0x85, 0x0, 0x0, 0x71}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x2f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x2f, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xa5bc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) (async) writev(r1, 0x0, 0x0) (async) socket(0x1, 0x2, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) (async) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r3, &(0x7f0000000180), &(0x7f00000000c0)=@tcp6=r2}, 0x20) (async) bind$unix(r2, &(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e) (async) sendmmsg$unix(r2, &(0x7f0000001680)=[{{&(0x7f0000000380)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}], 0x1, 0x0) (async) recvmmsg(r2, &(0x7f0000000d40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000500)=""/65, 0x41}], 0x1}}], 0x2, 0x0, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f0000000000)={'syztnl0\x00', 0x0, 0x29, 0x6, 0x9, 0x1b, 0x0, @private0, @ipv4={'\x00', '\xff\xff', @remote}, 0x10, 0x1, 0x3, 0xd}}) (async) setsockopt$packet_drop_memb(r2, 0x107, 0x2, &(0x7f0000000140)={r4, 0x1, 0x6, @random="8a21b4c5594f"}, 0x10) (async) writev(r1, &(0x7f0000000100)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) (async) 4.833408082s ago: executing program 2 (id=3911): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="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"], 0x28}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003580)={0x20, 0x24, 0x107, 0x70bd2e, 0x25dfdbfb, {0x2, 0x7c}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x2, 0x0, 0x0, @u32=0x1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4048011}, 0x8010) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000080)={0xa, 0x2, 0x201, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r3, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r3, &(0x7f00000003c0)="a6", 0x1, 0x2404c081, &(0x7f0000000300)={0xa, 0x2, 0xffef, @loopback, 0x9}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000180)='highspeed', 0x9) shutdown(r3, 0x1) 4.415692286s ago: executing program 2 (id=3914): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=@base={0x10, 0x4, 0x4, 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0xc, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xf81}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f0000000180)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="18000000", @ANYRES16=r2, @ANYBLOB="014b00004000000000f70100000004000180"], 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x0) ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f00000000c0)) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADD(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x0) 4.099596039s ago: executing program 0 (id=3916): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000002a0000000100000000000001040000002000000105000000010000040400000013000000010000000000000017000000020000040800000021000000010000000000000025000000020000002000000000696e74006270665f7370696e5f6c6f636b0076616c006d61705f76616c756500636e74006c"], 0x0, 0x8e}, 0x28) unshare(0x22020400) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socket$key(0xf, 0x3, 0x2) ioctl$SIOCGSKNS(r2, 0x894c, 0x0) r3 = socket(0x10, 0x3, 0x0) write(r3, &(0x7f00000000c0)="240000005a001f001007f4f9002304000a04f51108000500020100020800038005000000", 0x24) setsockopt$inet6_tcp_int(r1, 0x6, 0x2e, &(0x7f0000000080)=0x3, 0x4) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x2, 0x4, 0x8, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, r0, 0x1, 0x3}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x3, 0x10, &(0x7f0000000400)=ANY=[@ANYBLOB="bfa200000000000007020000fcfeffff620200000000000018110000", @ANYRES32=r4, @ANYBLOB="000000000000000085000000010000001500070000000000bf06000000000000bf610000000000000701000004000000850000005d000000bfa00000000000000701000004000000850000005e000c00b70000000000000095"], &(0x7f0000000500)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getsockopt$bt_hci(r1, 0x0, 0x3, &(0x7f0000000280)=""/115, &(0x7f00000003c0)=0x73) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000000061112c00000000000600000000000000eb7dcc6e18695504"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xb682, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000008c0)={r5, 0xe0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, &(0x7f0000000640)=[0x0], &(0x7f0000000680)=[0x0, 0x0], 0x0, 0xbe, &(0x7f00000006c0)=[{}, {}], 0x10, 0x10, &(0x7f0000000700), &(0x7f0000000740), 0x8, 0x6e, 0x8, 0x8, &(0x7f0000000780)}}, 0x10) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@remote, 0x5, 0x1, 0x0, 0xc, 0x10, 0x11}, 0x20) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'wlan0\x00', 0xfffffffe}) ioctl(r7, 0x8b22, &(0x7f0000000040)) r8 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000940)=@o_path={&(0x7f0000000900)='./file0\x00', 0x0, 0x4018, r5}, 0x18) r9 = socket(0x2, 0x400000000002, 0x0) setsockopt(r9, 0x0, 0x20, &(0x7f00000012c0)="15020000", 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x8, 0x0, &(0x7f00000001c0), &(0x7f0000000480)='syzkaller\x00', 0x8, 0x59, &(0x7f0000000540)=""/89, 0x41000, 0x20, '\x00', 0x0, @fallback=0xd, r0, 0x8, &(0x7f00000005c0)={0x4, 0x2}, 0x8, 0x10, 0x0, 0x0, r6, r8, 0x4, &(0x7f0000000980)=[r4, r4, r4, r4, r4, r4, r4, r4, r4, r4], &(0x7f00000009c0)=[{0x0, 0x5, 0x2}, {0x3, 0x2, 0xd, 0x9}, {0x0, 0x4, 0x9, 0x7}, {0x1, 0x5, 0xc, 0x5}], 0x10, 0x1000}, 0x94) 3.876168528s ago: executing program 2 (id=3918): r0 = socket$inet(0x2, 0x3, 0x2) socket(0x26, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0xe0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x7, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x15, &(0x7f0000000180)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f00000001c0), &(0x7f0000000200), 0x8, 0xde, 0x8, 0x8, &(0x7f0000000240)}}, 0x10) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000440)={{{@in6=@loopback, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6=@mcast1}}, &(0x7f0000000540)=0xe8) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000680)={{{@in=@multicast2, @in6=@empty, 0x4e23, 0x0, 0x4e23, 0x8, 0x2, 0x80, 0x20, 0x5e, r1, r2}, {0x7, 0x5, 0x6, 0x3, 0x2, 0xb, 0xffffffffffffff00, 0xb7c}, {0x100000001, 0x100000000, 0x101, 0x7fffffffffffffff}, 0x6, 0x6e6bc0, 0x2, 0x1, 0x6, 0x1}, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x4d4, 0x33}, 0xa, @in6=@private2, 0x3505, 0x5, 0x0, 0xc, 0x2, 0x7f, 0x88a}}, 0xe8) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x840000000002, 0x3, 0x100) socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x20001) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$unix(0x1, 0x1, 0x0) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f0000000040)) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000080), r5) sendmsg$NFC_CMD_DEV_UP(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x1c}}, 0x0) write$nci(r4, 0x0, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r6, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2={0xff, 0x3}}, 0x1c) sendmmsg$sock(r6, &(0x7f0000003d80)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="b628043d9a", 0x5}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[@timestamping={{0x14, 0x1, 0x25, 0x75}}], 0x18}}], 0x2, 0x0) sendmsg$NFT_MSG_GETSET(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)={0x14, 0xa, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x40055}, 0x8080) 3.570837732s ago: executing program 0 (id=3920): bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYRESDEC=0x0], 0x48) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000006, 0x4132, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x5, &(0x7f0000000180)=0x1, 0x4) r0 = socket$vsock_stream(0x28, 0x1, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) pipe(&(0x7f0000002740)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000e80)={'wlan0\x00', 0x0}) bpf$PROG_BIND_MAP(0x23, 0x0, 0x0) sendmsg$NL80211_CMD_GET_SURVEY(r2, 0x0, 0x8800) sendmsg$NL80211_CMD_DEL_KEY(r2, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010020bd7100fbdbdf250c00000008000300", @ANYRES32=r3, @ANYBLOB="181b0800030005ac0f00090001004e96a90d93001000"], 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x8890) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$EBT_SO_GET_INIT_INFO(r4, 0x0, 0x82, &(0x7f0000000040)={'broute\x00', 0x0, 0x0, 0x0, [0x1ff, 0x4, 0xffffffffffffe738, 0xffffffffffff9008, 0x100, 0x228]}, &(0x7f00000000c0)=0x78) r6 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000005c0)=ANY=[@ANYBLOB="30000000111401002cdb700104000000080001000000000008004b001300000008004a00000000000800030001000000"], 0x30}}, 0x240440c4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r5) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r7, 0x6, 0x13, &(0x7f0000000000)=0x4, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r7, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e21, 0x2, @empty, 0x8ac2d78a}}, 0x0, 0x0, 0x43, 0x0, "ee8b0e650926a96ecc136e7fb980e989db9e8bf9b93129488f651a8de213eb94cd46e19d9c65a018444a131f4da58ae36556dd38ea6c029607462029add09240005c6776267517308a3d40aa1c788df6"}, 0xd8) connect$inet6(r7, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r7, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r7, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x304}, "6ae04425ace3f60c", "acba84f0a6731f234db1cc7f3f382ad796bd667cb12ea99509873931d2873103", "0f9dafb4", "ec3fff9afd96e6c0"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r7, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) ioctl$int_in(r7, 0x5421, &(0x7f0000000140)=0xffff) writev(r7, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) close(0x3) 3.569825614s ago: executing program 2 (id=3921): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000002000)=@raw={'raw\x00', 0x8, 0x3, 0x3a0, 0x0, 0x11, 0x148, 0x0, 0x0, 0x308, 0x2a8, 0x2a8, 0x308, 0x2a8, 0x3, 0x0, {[{{@ip={@loopback, @loopback, 0xff000000, 0xff, 'syz_tun\x00', 'sit0\x00', {0xff}, {}, 0x6c, 0x1, 0x77}, 0x0, 0x190, 0x1d8, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x9, 0x0, 0x3, 0x3, 0x7, 0x0, 0xb0d452e9002af204}, {0x2}}}, @common=@unspec=@conntrack3={{0xc8}, {{@ipv4=@broadcast, [0xff, 0xff, 0x0, 0xff], @ipv6=@mcast2, [0xffffffff, 0xffffff00, 0x0, 0xffffffff], @ipv4=@empty, [0xff, 0x0, 0x0, 0xff000000], @ipv4=@multicast2, [0x0, 0x0, 0x0, 0xffffff00], 0x6, 0x6, 0x0, 0x4e23, 0x4e24, 0x4e22, 0x4e23, 0x81}, 0x0, 0x480, 0x0, 0x0, 0x0, 0x4e20}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x20, 0x0, 'netbios-ns\x00'}}}, {{@uncond, 0x0, 0xd0, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@quota={{0x38}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x3, [0x2, 0x0, 0x1, 0x7, 0x2, 0x5], 0x3, 0x1}, {0xffffffffffffffff, [0x3, 0x0, 0x2, 0x7, 0x1, 0x2], 0x2}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x400) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xb, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000041ffffff0000000008000000911158000000000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}, 0x94) (async) r4 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r4, 0x84, 0x7a, &(0x7f0000000340)={0x8, 0x8, 0x6, 0x10, 0x39c1, 0x4, 0x5}, &(0x7f0000000840)=0x20) (async) setsockopt$inet_MCAST_JOIN_GROUP(r4, 0x0, 0x2a, &(0x7f0000000540)={0xff, {{0x2, 0x4e23, @multicast2}}}, 0x88) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r2, 0x20000001, 0x7f, &(0x7f00000003c0)="3ce3ffffff0880ffff", 0x9) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000007d40)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000200)={r6, 0xffffffffffffffff}, 0x4) (async, rerun: 32) getpeername$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000100)=0x14) (rerun: 32) sendmsg$xdp(r3, &(0x7f0000000500)={&(0x7f00000002c0)={0x2c, 0x5, r8, 0x14}, 0x10, &(0x7f00000004c0), 0x0, 0x0, 0x0, 0x4}, 0x4040000) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000d40)={0x16, 0x11, &(0x7f0000000c80)=ANY=[@ANYBLOB="18000000fd3f02000000000009000000b7080000000000007b8af8ff00000000b7080000060000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70500000800000085000001a5008000850000007d0000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r9, 0x0, 0xe, 0x0, &(0x7f00000000c0)="00000000000000ce94327fc1a80c", 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) (async, rerun: 64) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (rerun: 64) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r11 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r12 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r12, 0x1, 0x1a, &(0x7f0000000240)={0x3, &(0x7f0000000280)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x20, 0x0, 0x8, 0xfffff00c}, {0x6, 0xba, 0x2, 0xffff}]}, 0x10) (async) write$tun(r10, &(0x7f0000000380)=ANY=[@ANYBLOB="000086dd0001110004000000a60c6111b712000011"], 0xfdef) sendmsg$ETHTOOL_MSG_TSINFO_GET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="9444b458c43bb542", @ANYRES32=r8, @ANYRES16=r5, @ANYRESOCT=r12, @ANYBLOB="74ecd034bd7246d492d7d2f026e4dc0eba6d3fbffdf29fef2d85aaaacf6ada5618c2f4c1240443998a6ab3e98e55a834684344e4e116a5de15198e6ad8b6562162dc065d58907fc2ccc9cae1dc80385009a56f090cee006cc8014914809fa9639fd1a97c74dc253aa2a0cee08c4ef79fe14bf724746fd1ac0a92bbc0d44e9dcad06e5dfc24329a0ae1a80f73033ba0959c5fbf7bc9275d45a4e57b59b9f033", @ANYRES32=r10], 0x34}}, 0x44800) (async, rerun: 32) write$cgroup_int(r0, &(0x7f0000000200), 0xffffffc1) (async, rerun: 32) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x30, r0, 0x0) mmap(&(0x7f00007a6000/0x3000)=nil, 0x3000, 0x100000c, 0x22051, r0, 0x0) (async, rerun: 64) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0xba0c29e690d41d4b, 0x20000000ec071, 0xffffffffffffffff, 0x0) (async, rerun: 64) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(r0, 0x8008f511, &(0x7f0000000000)) 3.195595136s ago: executing program 1 (id=3923): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0xf, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r0, &(0x7f0000000100)='blkio.bfq.io_serviced\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$kcm(0xa, 0x1, 0x0) socket$kcm(0xa, 0x5, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'vlan0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="340000001000050025bd7000fadbdf2500000000", @ANYRES32=r3, @ANYBLOB="00000000010400000a0001"], 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x4000) socket(0xa, 0x3, 0x87) socket$kcm(0xa, 0x5, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000180)={0xffffffffffffffff, r4, 0x5, 0x0, @val=@iter={0x0}}, 0x20) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) socket$l2tp6(0xa, 0x2, 0x73) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@newtfilter={0x24, 0x2c, 0xd3f, 0x70ad25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x30, 0x4}, {0x0, 0x9}, {0xf, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x20040054) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r5], 0x5c}, 0x1, 0x0, 0x0, 0x40800}, 0x40090) 3.070475548s ago: executing program 3 (id=3924): r0 = socket$rds(0x15, 0x5, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) close(0x3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x30, r4, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}]}]}, 0x30}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x90) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0x28, r6, 0x1, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1a}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x20008080) write$cgroup_int(r2, &(0x7f0000000200), 0x806000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000000300)="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", 0xcb3}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) recvmsg$unix(r8, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x2}, 0x40000300) ioctl$FS_IOC_RESVSP(r2, 0x40305829, &(0x7f0000000380)={0x0, 0x0, 0x4000, 0x9ffffc}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, r1, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) close(0x3) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f0000000000)=0x2, 0x4) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) bind$rds(r0, &(0x7f0000000080)={0x2, 0x4e22, @multicast2}, 0x10) sendmsg$rds(r0, &(0x7f0000000100)={&(0x7f00000000c0)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000800)=[{&(0x7f0000000300)=""/100, 0x64}, {&(0x7f0000000740)=""/142, 0x8e}], 0x2, &(0x7f0000000400)=[@zcopy_cookie={0x18, 0x114, 0xc, 0x1}], 0x18}, 0x4000000) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) close(r0) 2.974875211s ago: executing program 4 (id=3925): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000000)={0x5, 0x2, 0xff, 0x0, 0x4, 0x9, 0x8, 0x8, 0xfd, 0x0, 0xff, 0x5, 0x6, 0x7}, 0xe) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x14, r2, 0x309, 0x0, 0x0, {0x2a}}, 0x14}}, 0x0) mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r0}, 0x8) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x7, 0xa, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000040)={r3, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x8, 0x0, 0x0}}, 0x10) r4 = socket(0x1d, 0x2, 0x6) setsockopt$RDS_CANCEL_SENT_TO(r4, 0x6a, 0x1, 0x0, 0xc) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f00000014c0)=@nat={'nat\x00', 0x62, 0x5, 0x430, 0x398, 0x2a0, 0xffffffff, 0xe0, 0x188, 0x398, 0x398, 0xffffffff, 0x398, 0x398, 0x5, 0x0, {[{{@ip={@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth0_to_bond\x00', 'wg1\x00'}, 0x0, 0xa8, 0xe0, 0x0, {0x22e}, [@common=@unspec=@statistic={{0x38}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x0, @multicast1, @remote, @icmp_id, @icmp_id}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @multicast1, @empty, @gre_key, @icmp_id}}}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, 'veth1_to_hsr\x00', 'ipvlan0\x00'}, 0x0, 0xe0, 0x118, 0x0, {}, [@common=@socket0={{0x20}}, @common=@osf={{0x50}, {'syz0\x00'}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @private, @multicast2, @gre_key}}}}, {{@ip={@remote, @empty, 0x0, 0x0, 'veth1_to_batadv\x00', 'pim6reg\x00', {0xff}}, 0x0, 0xc0, 0xf8, 0x0, {}, [@common=@ttl={{0x28}}, @common=@inet=@tcpmss={{0x28}, {0xf}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x16, @remote, @broadcast, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x490) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x1, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @mcast1}, 0x1c) r6 = socket$inet6(0xa, 0x3, 0x3a) getsockopt$inet6_buf(r6, 0x29, 0x20, &(0x7f00000000c0)=""/77, &(0x7f0000000000)=0x4d) close(0x3) 2.636017372s ago: executing program 1 (id=3926): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x9}, 0x50) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_sfeatures={0x51, 0x1, [{0x7457e7be, 0x1}]}}) (async) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_sfeatures={0x51, 0x1, [{0x7457e7be, 0x1}]}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x11, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x700}, {0x85, 0x0, 0x0, 0x86}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x41}}, [@jmp={0x5, 0x0, 0xc, 0x0, 0x0, 0x2, 0xffffffffffffffff}, @jmp={0x5, 0x1, 0x6, 0x0, 0xdad1124f55525050, 0xfffffffffffffffc}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x23}, 0x94) 2.498610354s ago: executing program 0 (id=3927): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x48000}, 0x8000004) unshare(0x8040480) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060", @ANYRESOCT], 0xb8}}, 0x20040014) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x100, 0x0, 0x25dfdbfb, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in=@multicast2, 0x0, 0x4, 0x0, 0x0, 0xa, 0x60, 0x80, 0x3b, 0x0, 0xee01}, {0x0, 0x2, 0x0, 0x2000000000000, 0x40, 0xfffffffffffffdfd, 0x50}, {0x5}, 0x6, 0x40000000, 0x0, 0x1, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000"], 0xb8}}, 0x20004000) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000020000000000fc0000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80c0}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="b80000001300e9990500000000000000fc000000000000000000000000000000fc00000000000000000000000030000000000000000000000a0030"], 0xb8}}, 0x4000) 2.436140392s ago: executing program 4 (id=3928): unshare(0x2a020400) r0 = socket(0x15, 0x5, 0x0) close(0x3) socket$inet_tcp(0x2, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0xfffffffd, @empty, 0x1ff}, 0x1c) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) ioctl$FS_IOC_ENABLE_VERITY(r1, 0x40806685, &(0x7f0000000400)={0x1, 0x3, 0x1000, 0xab, &(0x7f0000000040)="185ccc3b7cff6777c3182cf61aafe973da0b23e0efda95e61c01022539c58619ac145a130c90527f43e10c9c5ec3071e5c0e74439d8e871d39e610b6ff8d3fe296a150513eb0c560a1cc68ddae752c57f92dfb4836359e00845f15dad1d8c27a81f2e7424ab289977640e2630d4f6155b12fc1812072dd78a0371c19fe2394c0cf78b785c79f8aac20e76662d947947cdcce96b44cecd056662c36350dc825d39358eb2d67077abf629362", 0xd0, 0x0, &(0x7f0000000300)="217886050b8c9aa8078bc0c7c6abed5784a0a6cc95aee1ed0b647e44186941a7acdbcec9dd341d55fbb942597dd43e3be6ad1fd9ee188c721b42733efde259a1f2a69db7529f1792dc34159ec86c16e4108fc7340999c1fbec4195a888e12c36bf5e2bd0443d230ace3d4b320944f36399020f84d32240f141b3f1e0fedc95180252cde32f4d3d121fa0ebd5678c6079e911c38f577acd530f1509fffb20bdb3de762ec2747f64c09b52131bd1fffa8f8f6e2e75668dfe043d3340c56ff3cb1834c8a5943f5f87bd52141aa821c43c42"}) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0xc) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000480)={{{@in6=@mcast1, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@loopback}}, &(0x7f0000000580)=0xe8) sendmsg$nl_xfrm(r4, &(0x7f0000000800)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000007c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="c80100001e0004002bbd7000fbdbdf257f000001000000000000000000000000000004d30a00330000000000000000000000ffff0a01010201000000ff340000ac00070000000000000000000000000000000000ac1e01010000000000000000000000004e2100044e2100060200a0902b000000", @ANYRES32=r2, @ANYRES32=r5, @ANYBLOB="080000000000000007000000000000001c00000000000000f9ffffffffffffff000000000000000000000000000000000900000000000000070000000000000003000000000000000400000000000000620a000000000000000000000000000081000000ba6b6e000201050200000000ac000700fc8000000000000000000000000000aaac1414aa0000000000000000000000004e2200044e2201ff0a00a02084000000", @ANYRES32=r2, @ANYRES32=r6, @ANYBLOB="400000000000000000000100000000000200000000000000000000000000000002000000000000000e00000000000000ffffffffffffffff01040000000000003bfd000000000000090000000000000000000000000000000500000000000000eaa2000000000000000003000000000028001a00200100000000000000000000000000010a0101000000000000000000000000000200064808000c0002000000"], 0x1c8}, 0x1, 0x0, 0x0, 0x8000}, 0xc80) r7 = socket(0x2b, 0x80801, 0x1) r8 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r8, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r8, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x4}, 0x1c) ioctl$EXT4_IOC_MIGRATE(r8, 0x6609) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r9 = socket(0x1f, 0x800, 0x0) r10 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r7, &(0x7f0000000cc0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c40)={0x30, 0x0, 0x8, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x101, 0x61}}}}, [@NL80211_ATTR_IFINDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x1) setsockopt$sock_int(r10, 0x1, 0xf, &(0x7f0000000000)=0x800, 0x4) r11 = socket$key(0xf, 0x3, 0x2) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r9, &(0x7f0000001140)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001100)={&(0x7f0000001080)=ANY=[@ANYBLOB="c8371a24", @ANYBLOB="000228bd70001bd7ec256600000008000300", @ANYRES32=0x0, @ANYRESHEX=r10], 0x50}, 0x1, 0x0, 0x0, 0x8}, 0x4044055) sendmsg$key(r11, &(0x7f0000000000)={0x3, 0x0, &(0x7f0000000040)={&(0x7f0000000980)=ANY=[@ANYBLOB="02030003160000002cbd7000ffdbdf2502000900080000001c00000000000000050006003c0000000a004e2400000008ff01000000000000000000000000000100000000000000000200010000000000000009fd000000c005000500000000000a004e24000000090000000000000000000000000000000006000000030000000600080009"], 0xb0}, 0x1, 0x7}, 0x18004) setsockopt$inet6_int(r7, 0x29, 0x1e, &(0x7f0000000080)=0x9447, 0x4) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r7, 0x84, 0x6, 0x0, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r9, 0x40806685, &(0x7f0000000b40)={0x1, 0x3, 0x1000, 0xee, &(0x7f0000000840)="4fbb26cebcda73e16ceb76f28f1e8f725880f9cc713a1cb79b1642bad7c8f051ac36ab775a973c76a8702caf3c0171ee619b4dddc332047e77d1ee152f181640760376d19638f96ccae08b9ed37fbcf3bf9f97971519f9372b32ecc482f23665495b49974e53ff52228eb39f7cdc00e237ba296e71ea3f3cfac3516e5b7fcdbde08957a579d42c5ff2d02c024e089acabf6eb9428b8f1416c08a9b271f0e673f5a17abba5dbef36f2ecf4f1b0a35c8fe2b2fc37d15515bae3c08afca97fb4a313a11ad964c6baa7d33fe5520cb15cf3a3f35b27c3ec24b01a5b68dfb6ac0e19a62613a13c01bd44fac28cbb40150", 0xf3, 0x0, &(0x7f0000000a40)="308917701ea05a2416e756cd38d30b755d125aa5a317ea0a2fccf4a741652d525f8da3e4fcda0a45779b0088dbfd508861aa004637e05b027df758c52dbebc523d3f59731f4aeb5fb7f6933d080ec8a526474c257ce166bb55821528ca2a85ee54693d38316abe54f59346da0f0839b9ce4daf370eec89b3d2194beb80ed8ad2cabc46a34092f56ac47982dd03dd4a3c114b2a6621850485a6972804fbc19e089b36b4a13e7a39b41f665849e9db2617c80dfd7075bd56ed3a5f5c40b846ed36784164effa7a150a22dd6d40303439f70543b0fdac1957e94e26b50410e6feb5f9dcc0f2afc4a71c6cd38423d4d12692625d7b"}) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="1c58c69318251a92b0c21bcde9bc6b8cc0d17e6bf727bf802f0000001000010428bd", @ANYRES32=0x0, @ANYBLOB="0386000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r3, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x240008c4}, 0x20008004) 2.321956956s ago: executing program 2 (id=3929): socket$netlink(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x5, 0x5, 0x7, 0x9, 0x40}, 0x50) close(0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r1}, 0x38) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, 0x0, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d65b"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x68}, 0x1, 0x0, 0x0, 0x24000840}, 0x40) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000cc0)=[{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000040)="128b3b8a2c5102e4013618666fa3bb497d", 0x11}], 0x1}], 0x1, 0x600008d0) recvmmsg(r5, &(0x7f0000002b80)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000280)=""/8, 0x8}, {&(0x7f0000001780)=""/4096, 0x1000}], 0x2}, 0x11}], 0x1, 0x40000140, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000600)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x130, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x104, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}, {0xf0, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x100000001}, @NFTA_SET_ELEM_EXPR={0x20, 0x7, 0x0, 0x1, @fwd={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_FWD_SREG_DEV={0x8, 0x1, 0x1, 0x0, 0x15}, @NFTA_FWD_SREG_DEV={0x8, 0x1, 0x1, 0x0, 0x14}]}}}, @NFTA_SET_ELEM_USERDATA={0xb5, 0x6, 0x1, 0x0, "09ec8e11ad2cee5262716e9aa61f8360627c8ec5082b5895d40a552b5fb19cffeace1a53603de64612b3d14ef3f3a5f8434147a508350e348607e7566c25d6085c17f926946a65fa3067f062565906428463d3e159137197f6172735322f15b1262d26b9dc2e7dcda92aea0c764bb61cb858575a03765e9e013b90f89c2b6cbb205a96516e612b8c09ce0b0de93fe6d16fb34eeb4b1014831049c36a5271af54fb0797fa5fb62efe76ac31e42f79a7f4ca"}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x158}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018260000", @ANYRES32=r0, @ANYBLOB="000000010000000095000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r6}, 0xc) r7 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r7, &(0x7f00000002c0)={&(0x7f0000000100)=@phonet={0x23, 0x8, 0x10, 0x30}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000340)="000000000000000010000000810097ff892f", 0x12}], 0x1}, 0x4040000) syz_init_net_socket$llc(0x1a, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x15, 0x17, &(0x7f00000007c0)=ANY=[@ANYBLOB="1807000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000180100002020702500000000002020207b1bf8ff00000000bda1000000000000a7010000f8ffffffb702000008000000b7030000000000007209000006000000bf91000000000000b5020000000000008500000085000000b70000000000000095"], &(0x7f0000000040)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sk_reuseport, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x74}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x4}, @IFLA_BOND_AD_ACTOR_SYS_PRIO={0x6, 0x18, 0xffff}]}}}]}, 0x44}}, 0x0) 2.238372082s ago: executing program 1 (id=3930): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000780)={&(0x7f00000004c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x2, [@enum64={0x3, 0x3, 0x0, 0x13, 0x1, 0x1, [{0x4, 0x7, 0x9}, {0xd, 0x45d, 0x680}, {0xb, 0x6, 0xfffff68b}]}]}}, 0x0, 0x4a, 0x0, 0x0, 0x6, 0x10000}, 0x28) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0x0, 0xffffffffffffffff, 0x4}, 0x38) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r0, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000010c30000000003000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000116608000000000000180000000000000000000000000010009500000000000000360a020000000001180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xa, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x78) unshare(0x20040600) r1 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80}, 0x28) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0200000004000000080000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000010000000000000", @ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB="010000000300000000"], 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000001bc0)={0x0, 0x0, 0x0, 0x0, 0x3, r3, 0x4}, 0x38) syz_emit_ethernet(0x23a, &(0x7f0000000740)={@link_local, @dev, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x200, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x2, 0x1, 0x0, 0x500, {0x0, 0x6, "508359", 0x0, 0x33, 0x0, @private1, @mcast1={0xff, 0x0, '\x00', 0x0}, [@hopopts={0x33, 0x38, '\x00', [@generic={0x81, 0xa1, "cf72baa61c1def1453f404209ccb9b5a11d8440f3bdc1faa0bbb9855e7ee09949493df7648c72d4ce6154b920592fadb4f10ee0e9a71b413e4577e6e4115d95059ad5324c5c8634c89f6965b2fc6a92f2b9533aebb085063eab7e2cf141b254c9f585eeea68b17584d4fc794d7dfb79ca3099c7a530526a599c2cae6fe4a962f8ad6be22cf924cc6f8bf0d35c4c88e69f8b73592d78ce57bc2fc0b7264652975df"}, @generic={0xf, 0xe5, "17654f43addd3c5ad32c482c522540a36fcfebc85509ef1b6f3214336f5aef6d71fa7128cfd07db603a74df6c46cb938230ccb9f6f0f0ff4ac38703a0af362f41d37e5baa5926cbd326c7292da6f7bf399860f647ba0104a180125ae27a720e54e27378a9a5e9be95b7d074b8f1c9451219f36ddc0b0e55ab646ca515fdd0b4d60d3024393e1fa2b5823a7e4a8c7d34ace0c0156d1f0baf94f5deedf4cdae5181de5d0d3120bad456519359d429bc3ad81b99b4c82941dc6762091b450d19404aa1a8146db91e511e7f96ace3849f84cfa72ec0a8de3ad86d7e32c2764b5f8ec6356804a71"}, @calipso={0x7, 0x10, {0x1, 0x2, 0x5, 0x9, [0x80]}}, @pad1, @calipso={0x7, 0x20, {0x3, 0x6, 0x5, 0x7fff, [0x1, 0xb1c, 0x401]}}]}]}}}}}}}, 0x0) poll(&(0x7f00000000c0)=[{r1, 0x8088}], 0x1, 0x3) socket$inet6(0xa, 0x2, 0x1ff) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$tun(r4, &(0x7f0000000800)=ANY=[], 0x141) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f00000001c0)='syz_tun\x00', 0x10) syz_emit_ethernet(0x6e, &(0x7f0000000600)=ANY=[@ANYBLOB="0180c2000003aa2aaaaaaaaa86dd6080000000383aff7d800eff0000000000000000000000bbff020000000000000000000000000001f0"], 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r4, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a44, 0x1700) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000006, 0x13, r6, 0x13246000) 2.23771945s ago: executing program 0 (id=3931): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000002a0000000100000000000001040000002000000105000000010000040400000013000000010000000000000017000000020000040800000021000000010000000000000025000000020000002000000000696e74006270665f7370696e5f6c6f636b0076616c006d61705f76616c756500636e74006c"], 0x0, 0x8e}, 0x28) unshare(0x22020400) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socket$key(0xf, 0x3, 0x2) ioctl$SIOCGSKNS(r2, 0x894c, 0x0) r3 = socket(0x10, 0x3, 0x0) write(r3, &(0x7f00000000c0)="240000005a001f001007f4f9002304000a04f51108000500020100020800038005000000", 0x24) setsockopt$inet6_tcp_int(r1, 0x6, 0x2e, &(0x7f0000000080)=0x3, 0x4) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x2, 0x4, 0x8, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, r0, 0x1, 0x3}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x3, 0x10, &(0x7f0000000400)=ANY=[@ANYBLOB="bfa200000000000007020000fcfeffff620200000000000018110000", @ANYRES32=r4, @ANYBLOB="000000000000000085000000010000001500070000000000bf06000000000000bf610000000000000701000004000000850000005d000000bfa00000000000000701000004000000850000005e000d00b70000000000000095"], &(0x7f0000000500)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getsockopt$bt_hci(r1, 0x0, 0x3, &(0x7f0000000280)=""/115, &(0x7f00000003c0)=0x73) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000000061112c00000000000600000000000000eb7dcc6e18695504"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xb682, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000008c0)={r5, 0xe0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, &(0x7f0000000640)=[0x0], &(0x7f0000000680)=[0x0, 0x0], 0x0, 0xbe, &(0x7f00000006c0)=[{}, {}], 0x10, 0x10, &(0x7f0000000700), &(0x7f0000000740), 0x8, 0x6e, 0x8, 0x8, &(0x7f0000000780)}}, 0x10) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@remote, 0x5, 0x1, 0x0, 0xc, 0x10, 0x11}, 0x20) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'wlan0\x00', 0xfffffffe}) ioctl(r7, 0x8b22, &(0x7f0000000040)) r8 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000940)=@o_path={&(0x7f0000000900)='./file0\x00', 0x0, 0x4018, r5}, 0x18) r9 = socket(0x2, 0x400000000002, 0x0) setsockopt(r9, 0x0, 0x20, &(0x7f00000012c0)="15020000", 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x8, 0x0, &(0x7f00000001c0), &(0x7f0000000480)='syzkaller\x00', 0x8, 0x59, &(0x7f0000000540)=""/89, 0x41000, 0x20, '\x00', 0x0, @fallback=0xd, r0, 0x8, &(0x7f00000005c0)={0x4, 0x2}, 0x8, 0x10, 0x0, 0x0, r6, r8, 0x4, &(0x7f0000000980)=[r4, r4, r4, r4, r4, r4, r4, r4, r4, r4], &(0x7f00000009c0)=[{0x0, 0x5, 0x2}, {0x3, 0x2, 0xd, 0x9}, {0x0, 0x4, 0x9, 0x7}, {0x1, 0x5, 0xc, 0x5}], 0x10, 0x1000}, 0x94) 1.938807372s ago: executing program 1 (id=3932): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)={0x28, 0x42, 0x301, 0x270bd1d, 0x25dfdbf7, {0x15}, [@nested={0x14, 0x37, 0x0, 0x1, [@typed={0xe, 0x10b, 0x0, 0x0, @str='syzkaller\x00'}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x88c4}, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000d40)=@newqdisc={0x154, 0x24, 0x3fe3aa0262d8c7b1, 0x0, 0x4, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0xc}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x124, 0x2, [@TCA_CHOKE_MAX_P={0x8, 0x3, 0x1}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x100, 0x7fff, 0xfd9, 0x6, 0x2, 0xe}}]}}]}, 0x154}}, 0x4008014) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r1) sendmsg$NL80211_CMD_GET_MPP(r2, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x2c, r5, 0x1, 0x70bd28, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008010}, 0x4000001) r6 = socket(0x10, 0x803, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f00000017c0)=@mangle={'mangle\x00', 0x2, 0x6, 0x578, 0x3d8, 0x3d8, 0xd0, 0xd0, 0x2e8, 0x4a8, 0x4a8, 0x4a8, 0x4a8, 0x4a8, 0x6, 0x0, {[{{@ipv6={@mcast2, @ipv4={'\x00', '\xff\xff', @remote}, [0x0, 0xff, 0xff000000, 0xff000000], [0x0, 0xffffff00, 0xffffff00, 0xffffffff], 'gretap0\x00', 'batadv0\x00', {}, {0xff}, 0x11, 0x5, 0x1, 0x18}, 0x0, 0xa8, 0xd0, 0x0, {0x7a00000010000000}}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x0, 0xfc, 0x6}, {0x11}, {0xfffc}}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0xb4}, @empty, [0x0, 0xff], [0xffffff00], 'ip6gre0\x00', 'bond_slave_0\x00', {}, {0xff}}, 0x0, 0xf0, 0x138, 0x48000000, {}, [@common=@dst={{0x48}, {0xff, 0x4, 0x0, [0x1, 0x7a, 0xfffd, 0x3f4, 0x0, 0x3, 0x5, 0x0, 0x8, 0x30, 0xe5, 0x4, 0x1, 0x6, 0x0, 0x7], 0x6}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, 'ip6gre0\x00', {0x4}}}}, {{@ipv6={@remote, @dev={0xfe, 0x80, '\x00', 0xd}, [0x0, 0xffff00, 0xffffffff], [0xffffff00, 0xffffff00, 0xffffff00, 0xff000000], 'nr0\x00', 'vxcan1\x00', {}, {}, 0x62, 0x5, 0x3, 0x20}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@remote, @ipv6=@mcast1, 0x6, 0x27, 0xd}}}, {{@ipv6={@loopback, @private0, [0xff000000, 0xffffff, 0x0, 0xffffff00], [0xffffff00, 0xffffff00, 0xff, 0xff000000], 'virt_wifi0\x00', 'ip6erspan0\x00', {}, {}, 0x6c, 0x80, 0x5, 0x61}, 0x0, 0xa8, 0xd0}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5d8) getsockopt$IP_VS_SO_GET_INFO(r7, 0x0, 0x481, &(0x7f0000000000), &(0x7f0000000100)=0xc) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r6) getsockname$packet(r6, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000010003704060000000000001000080000317d8f1a4a19c2be224b8b1557e67a4bf5e0624e1e9e5f0fa2e04bcb23218eba1dac61e036000000000020b200008e07915c", @ANYRES32=r8, @ANYBLOB="c30803000b2ebe262800128008000100736974001c00028008000300e000000206000f0002000000060011004e230000"], 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmmsg$inet(r0, &(0x7f00000018c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000080)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r8, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880) 1.873788104s ago: executing program 3 (id=3933): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000500)="0000d9269d790000c8aeec0ed69cad990000000045", 0x15}], 0x1) 1.845194573s ago: executing program 2 (id=3934): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2, 0x0, @empty, 0x3}, 0x1c) socket$inet6_tcp(0xa, 0x1, 0x0) shutdown(r2, 0x2) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0xfffefffe, 0x0, 0x0, 0x40f00, 0x28, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x64) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000040)={0xa, 0xe22, 0x0, @loopback, 0xdf}, 0x1c) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x4e25, 0xe5, @ipv4={'\x00', '\xff\xff', @local}, 0x12}, 0x1c) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) shutdown(0xffffffffffffffff, 0x1) write$rfkill(r4, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x3, 0xfd}, 0x8) socket$inet6_sctp(0xa, 0x1, 0x84) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x3377}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x4, 0x9, 0x0, 0x0, 0x7fffffff, 0x6}, 0x0, 0x0) write$rfkill(r4, &(0x7f0000000340)={0x6, 0x0, 0x3, 0x0, 0x1}, 0x8) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20008045, &(0x7f00000001c0)={0xa, 0x2, 0x40, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) sendmsg$NFT_MSG_GETSET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="2c0000000a0a0144000000000000fc1e0a0000000900010073797a31"], 0x2c}, 0x1, 0x0, 0x0, 0x20000084}, 0x44) 1.766363579s ago: executing program 0 (id=3935): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x33, &(0x7f0000000040)={0x0, 0x0}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000002000010000000000000000000a0020400000000700000a001400110076657468105f746f5f62726964676500080017004e224e24140002"], 0x4c}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async, rerun: 32) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (rerun: 32) sendmsg$NFT_BATCH(r1, &(0x7f0000000500)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELRULE={0x11c, 0x8, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x2}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x3}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x3}, @NFTA_RULE_COMPAT={0x44, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x1e}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x6004}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x67}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x89}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x88}]}, @NFTA_RULE_COMPAT={0x1c, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x1d}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0xf6}]}, @NFTA_RULE_USERDATA={0x85, 0x7, 0x1, 0x0, "c5619e114553e5ef516d26727e2d9fa667b76f64faa91ce1ba7d6f4f59b964dbbeec454e65fe076223fd05b26314056c296c2f7b3253cfa22c7b803794502842f05f78a7d630e9e9f547d8396ffe388b8c2a25e5e63e6b72966db1c8f2ceb7d8fa2a524dfda9e8298e413ce4390eb23c41e3371b1258b469cbd86bad41ac1ed4aa"}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWTABLE={0x30, 0x0, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}]}], {0x14}}, 0x174}, 0x1, 0x0, 0x0, 0xc8c1}, 0x20000000) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0100000004000000e27f000001"], 0x50) (async) r3 = socket$kcm(0x2, 0x0, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) (async, rerun: 64) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000600)={'gretap0\x00', &(0x7f0000000540)={'erspan0\x00', 0x0, 0x8000, 0x8000, 0xfffffffd, 0x8, {{0x1d, 0x4, 0x0, 0x0, 0x74, 0x65, 0x0, 0x5, 0x2f, 0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp_addr={0x44, 0x3c, 0xf9, 0x1, 0xa, [{@local, 0x1}, {@local, 0x2}, {@local, 0x8}, {@dev={0xac, 0x14, 0x14, 0x3a}}, {@broadcast, 0x3ff}, {@multicast1, 0x8}, {@multicast1, 0x80000001}]}, @lsrr={0x83, 0xf, 0x74, [@broadcast, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @end, @ra={0x94, 0x4, 0x1}, @rr={0x7, 0xf, 0xf, [@loopback, @rand_addr=0x64010101, @multicast2]}]}}}}}) (async, rerun: 64) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000640)=0xffffffffffffffff, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x5, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xf6, 0x0, 0x0, 0x0, 0x635}, [@cb_func={0x18, 0xa, 0x4, 0x0, 0xfffffffb}]}, &(0x7f0000000140)='GPL\x00', 0x2, 0xe, &(0x7f00000001c0)=""/14, 0x41100, 0x14, '\x00', r4, 0x25, r5, 0x8, &(0x7f0000000680)={0x9, 0x2}, 0x8, 0x10, &(0x7f00000006c0)={0x1, 0xa, 0x80000001, 0x3}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000700), &(0x7f0000000740)=[{0x3, 0x1, 0xb, 0x4}]}, 0x94) (async) write$tun(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="016f0800010027000000270000004608003f00000000008490783fffff20ac1414aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="ba0007009078001809c40005020000000000000b000002d58838000391000000"], 0xfd6c) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 1.665324486s ago: executing program 3 (id=3936): syz_init_net_socket$llc(0x1a, 0x2, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)={0xb0, 0x47, 0x107, 0xfffffffe, 0xffffffff, {0x1, 0x7c}, [@nested={0x9c, 0x3, 0x0, 0x1, [@nested={0x95, 0xc9, 0x0, 0x1, [@generic="af1a32d5ac8a58454645e34db8000d05131d4764224e99cada1fa1be6037c2b41cda8b0fe0ff06186691008323af658ef90cc4b96e92cdd3201c9dea1e9ef6f264b0e5a10b957c1aa15c78f7aedad74cedb1b3ef2173b6c600851afbc73df31b649e9e3f0f19f59af54bf0fff17c8dbc74cf32bc7876f4ec101911960d4b60972d41c03abccf39153d3d72f1f868149f53"]}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x2404c0d1}, 0xc000) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000940)=@updpolicy={0x23c, 0x19, 0x1, 0x0, 0x0, {{@in=@empty, @in6=@empty, 0x0, 0xffff, 0x0, 0x0, 0x2, 0x0, 0x20, 0x8}, {0x0, 0x1, 0x800000000, 0x0, 0x0, 0x0, 0x0, 0x1d}, {0x0, 0x0, 0x0, 0x2dd}, 0x0, 0x0, 0x0, 0x1}, [@tmpl={0x184, 0x5, [{{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x0, 0x2b}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x18}, 0x0, 0x0, 0x0, 0xfb, 0x0, 0x510d3f49}, {{@in6=@loopback, 0x4d2, 0x2b}, 0x2, @in6=@private2={0xfc, 0x2, '\x00', 0x1}}, {{@in6=@loopback, 0x0, 0x3c}, 0x2, @in=@broadcast, 0x0, 0x1, 0x3, 0x0, 0x0, 0x2cd6}, {{@in6=@mcast2, 0x0, 0x3c}, 0x2, @in=@remote, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3}, {{@in=@loopback, 0x0, 0x2b}, 0x2, @in6=@loopback, 0xffffffff, 0x0, 0x0, 0x0, 0xfffffffd}, {{@in=@rand_addr=0x64010100, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x1, 0x2, 0x80, 0x0, 0x2}]}]}, 0x23c}, 0x1, 0x0, 0x0, 0x60004000}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'virt_wifi0\x00', 0x0}) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000000000)={@remote, r4}, 0x14) setsockopt$inet6_mreq(r3, 0x29, 0x1c, &(0x7f0000000040)={@remote, r4}, 0x14) getsockopt$bt_rfcomm_RFCOMM_LM(r0, 0x12, 0x3, &(0x7f00000000c0), &(0x7f00000002c0)=0x4) r5 = socket$inet_tcp(0x2, 0x1, 0x0) shutdown(r5, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0xfee7, &(0x7f0000000140)=[{&(0x7f00000001c0)="d80000001c0081064e81f782db44b9040a1d08040000000000000aa1180002000607002603600e12080b0f0000810401a8001605200001400200000803604e0cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee422fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef5d2defd5ccae8d3fb7c27a1059ae31c60e2234d732", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x400c0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r6, &(0x7f00000001c0)={0x2, 0x1, @local}, 0x10) setsockopt$inet_mreq(r5, 0x0, 0x24, &(0x7f00000003c0)={@multicast1, @broadcast}, 0x8) connect$inet(r6, &(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10) sendmmsg(r6, &(0x7f0000007fc0), 0x800001d, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x30, 0x10, 0x1, 0x70bd25, 0x25dfdbf9, {0x0, 0x0, 0x600, 0x0, 0x48815, 0x40103}, [@IFLA_GROUP={0x8}, @IFLA_TXQLEN={0x8, 0xd, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="450a0000000000006111880000000000f50d00000000000000000000006a71ba6600000000000000"], &(0x7f0000000000)='GPL\x00'}, 0x80) 1.558303292s ago: executing program 4 (id=3937): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, &(0x7f0000002300)=ANY=[@ANYBLOB="b702000000001700bfa300000000000007030000f0ffffff720af0ff1100000079a4f0ff00000000b706000000000081ad64020000000000450404000100ff0f1704000001130a00b7050000000100006a0af2fe0000000085000000a3000000b700000000000000950000000000000000e154cd844a954b26c933f7ffffffffe4fbffffff55bb2007ee51050512b5b42128aa090a79507df79f298129da487130d5f24bf901115e17392ac627c87881c000006146001e04aeacea799a22a2fa798b5adc43eb27d53319d0ad229e5752548300000000dbc2777df150b7cdd77b85b941092314fd085f028f2ed1a4b9535550614e09d6378198a6097a670838337af2abd55a87ac0394b2f92ffab7d153d62058d0a413b2173619ccf55520f22c9ca8b6712f3024a0041b1df65b3e1b9bf115646d14ce53d13d0ccacda1efc5f9094fa737c28b994a8512c816fdcceaede3faedc51d29a47fc813a2ec00f4c7a53ac271d6d7f4fdc4b4861004eefbc17f54f82a804d4a69bf9bc5fa77ee2922bd165a5a68488e010030166565a097b103b44b451de736bb6d43db8db03d4b7745fef1d04ec633dee254a6d491b849a5a787e814c4fd21a18986252a70f8f940b6f0e8c7db4bf23242a1f2c28159f09943b1b0452d1b72183aacf4a84f9130b775dd4e9e3070756f97ad791fa99dac06b57479321a0574fb30ff0000001989328c8ddc20ea011bf5742e0e0d4334db8b20ce3f9f16cb7fc20fb4791ec85821d0c48fb657c2d7f22b0d22772c25a61ec45c3af97a8f17da954aff3fc8c108755f75ca13fb7c8bbd8b6e7dac1aba4b20dc7de058a4dfa7e85a8bdf1d41a2d8bda74d66f47cc180f82c5f573c6d294d366501753a7ac7fedb8d34f5bc381604fcd46105c457e7dd13cab6692422a47e9ffe2d4a2d32f7528751313694bf5700b20ef0c248ddd3da32396a614cacad4aff2066bb5d4045c9585638c2153a6eee01738b0c10671f4f559b7dcb98a6273b8c651e24d9f679e4fbe948dfb4cc4a389469608241730459f0123fd39206000000000000eb55dad46de56ef907b059b90b8aa49afb9a79ae5498f6589880ed6eea7b9c670100be05e7de0940313c5870786554df26236ebced9390cb6941b8375d936a7d2120eca291963eb2d537d8ee4de5c183c160119451c31539b22809e1d7f0cda06a9fa87d64cb77872a2cd8a104e16bb1a2bacf13464ca03aff14a9aa4bd9539f5096412b92012e095b84c20243ff98df3347f0e399d1b9f27e3c33269c0e153b28b2d4410572bc45b9d3fa02208d300e4d455c36300000000022320178b00cc6ed7966130b547dbf8b497af002000000cd1d0000002000000001c800000000000000000000000928ee53595a779d243a48cea769470424d28804c024ab7f4a5c81921f0128dfd70b438af60b060000000000000056642b49b745f3bf2cf7908b6d7d74bf0a305790c9d644735efbf3411718d6ee7aebf9ef40662d7836d252c566f5ee934c679dbfae9fb4a79f8a836804ed3a1079b0282a12043408cd60b687dcff91af19010000000000000000456f7d2a42bd13da2022f23daec61854f640f701db0276652f6c031578e93046aaddea8ec4ca37f71c2710a7ea8ae0dc214e1cc275b26adfa892e6de92000000000000000000ddff004cff9ec780f535e62f4eeee50e5bafecea4d4134f9d006c8d6883eca5c9c58c9e93311ab5009c68c73de2f04f15d005387577f480000ea65559eb00e76e9d0ada209bcbb5c252b28a60ca770663da451790cc36000906d5a9fad98c308e39bd5ffb6155e3633be3f00000015762e5f5a3a0bc33fdbe28a5ffc83f2f085185cc92fe7f791e8f6429309d6adab4b7e508e5bf024ed8f8a005f2bcdb7c89739f5d81e750d50517a59a3ad09e8802e8f4f535447cc0facd5f99a73145dfcedad69da9cd4375c624600e78f4458542b14f29611f95d4a31838eeb20c20bb82aa31771cd379ec83554cea5b473332f2011e6539db7384e1f58d81f2f2653c4d9818708e27c89b552d3fcd116bce9c764c714c9402c21d181aae59efb28d4f91652f6750b6ec962802c0320f8059195729d60c534ee8e8ff0755367fe4c25edb85bcff24c757aa8090000000000008c420eb4304f66e3a37aaf00000048d2570f0e9dd5fd545470f862f8c3c14fa9ecd1e877b0d8ca84c044859e85e6158f9184bc61a9a284db80e4636c25b96174327d82761c26e329555f9290af4100000000000000749e1338636555009edf66be445d6975d534b8d63e4ca3b671f2de1cdf519192c6b59a601fd419adc16e2055b85058f793484305d7a1759782e4c571ee855a47bc00edf5e9020c09ab0043ebf7c79a953e023f74afad591821610b857e8717764b633b21cb32f09f4db033e03280e09758bd445ab91d20baca005452b79d7b574a247f1d2fe45b3c4e93da3d51de647c10dd49944dc87c92332af00f191b66b6a6f732a91f0e2e9120be61e58c79d497247d278888901d442ad7f8536605a644e9e3d769db497c1960dfde12182334caee994adc38a436367a54b9e182b78e9a0ceb9a2c4f63902c1ad1a7c5a08d0920a23c2a86abbdf357849a651733e57f31019876026888c8ccb85c86b4f8ffffff7f000000002c331fca0e541b7ca211c28ed61c525708a13d115b43f8b1894c8fa8a14dc4810f61ae96c18cc7130000000000002100000000000000000000000027c9a46157a3609b6fd9843ee19ec647249a9375de5858818f3c4a4fa6ce46f4d42b07199de8b99231ace58c77819ee214e49666c464d35ca9b5143ed3b3dc8c17a23692759ccf5a205311b7ab22532697b861dfb54609fd88e6043bd5c17d5486b0c8a6c769f952283a1f4e3842edb3d42c68a27ef6a1296dff7aa46e820a74f9530bdcc198e353047db70686d147357024eb3cb94f1e89cb5ba0a56aa046b4dc521a3d9356b4b8b5917c4c860495b240e80063bde261fdca4e9eda0072f6df342f3e7071e28ef6806bc8e139c49b91c76b0d3958f7f05b47d3e519f1634e8fbd8d31330d89069f9648a2ff93060ff073b3a113e47edf76f7d116d2b0976cf2ec447c030931651dd315003b7a6a5433a2bb560ae99ec4b227eda2e63a1c31a2c2bd48a822cbe92b6524e0cd8020ecaa34e19e7194d1eb3de6a5f99f301f89c2ee627e949cdd22000026a9960503a26e9a714ee5f72d8805dd1bfbd081f6a5d1f1289dfe14cb9194e26a44fac273461fc5c0e0a33db7f2d43ea8086cf059f40fa2640000cd9e7f2e236ef5f1e3a94b108eb9750b6bfb74dd35f5a31059c01517cf4b6641fce9a24b96767b837ca037a2050000c375c705c798e0e208e4a5259d0bda526b462af45a6e9a84aebe025c8a7f65819f397574db7ab01bd2b3e3cd28c5aec50f8edfe39a00bafd688a7eea04efdeed96f67012bc3f795edb68b5dec80ad31a858eb756c815e7695d00000000000000000000000000000000000000000000000000007ccf0ce549d97510f7f8765408bb702f0000006d4754d98b7064cf31a681421994e1f307f0ab4ff2e33d3c88fea5d218a276b77adfee7c8fb145783ee1f8cf632c2604eab3a62a28611da1cae5ce60003111ce5c96a1d6e45ee144ffa3dcca32a33f8f0ce2995b7b7aa0bce228cbf37412e1bdebae06edb51a134301b4627d4927287daf9dcae6720334862f3a18094f1edd9e3503379815dcfbbc8141f6e1bbb0901ae91357677fd9d2bb00d4f17fb441c2dfa2b424bf46ae299d68ac27792cdac2f09e99f4ab5546ba1e5ad6a329f24e73a9c38eec34bd4dcc1609f6150e2de72f6599a2310c3841f4bb7f39cabc82c9fdfff5587ed4fa84090635fa3445c4cc54478b2f98320944ac7cb1c4e414556f7b0b763a00a84327cec7e11b3470f0384b27bbfdd8b2472497e7fe8c5df7e0a00641872472efa21c9ad3979e642dcc85c17ca8e084aa9689b83426e2fdaa01f500000000000000000000f9fd84fa991466ff749afe900d02281b2bb60d458340c4f68ec34835760ceca945bf181a000000c000000000b4a76515564ae189de7c1765f0ff68a0388ca8dd2aa831d0e01f0d7ce74401a58cef60e63e97a50c18de54121ce66380224ab7b9c0d4710f2347bad2c9b3e41cc738c1092728687f33e5cdb077223dc82c2137b4e3ba6791a2cd764e654f904c9505b7c5e3b2897072e747534952dcda50cde3e4deb6ebf85a04c3e415112b01eed6515c845a8a20519cd21787d560e9d8283fa8ff0c17b63ba06577c26678ff45420a1f85df47dbfc44e534f71aae5693fb5df61c5096219091ce0cd8e1e2e79bf9d37779e52007c66a00e6ded1499ed3892ed1544d1577906b52e16c734d4aec07dd15faa768c97298be87dd34ce704ffe3da8b46708cf972de4f31c0705ac933db80bdcfcb35c0d4620d4ec270ff7c9ce1b78994dd2b28b9d1c5c469d4c1a61781dce2f1b54d6138bd3f7df9e9ca613bec407c1b8d1bd0c7cb9d76eebf2f17c"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x1000) (async) r1 = socket$tipc(0x1e, 0x5, 0x0) (async) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0xe, 0x4, 0x298, 0xffffffff, 0x0, 0x168, 0x168, 0xffffffff, 0xffffffff, 0xd0, 0x168, 0x200, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0, 0x0, {}, [@common=@unspec=@time={{0x38}, {0x0, 0x7fffffff, 0x0, 0x1517f, 0xffffffff, 0xfe}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xffffffff}}}}, 0x1000) (async) bind$tipc(r1, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) (async) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) (async) sendmsg$tipc(r1, &(0x7f00000005c0)={&(0x7f0000000000), 0x10, &(0x7f0000000480)=[{&(0x7f0000000180)="f7", 0x6d47}], 0x1}, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x7, &(0x7f0000000340)=r0, 0x4) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000680)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000340)="b9ff05000700008d9c18ed0f6fd2", 0x0, 0xfea, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x9}, 0x50) (async) r3 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001080)=ANY=[@ANYBLOB="e0000000100001002dbd7000fddbdf257874732874776f6669732829"], 0xe0}, 0x1, 0x0, 0x0, 0x44}, 0x80) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x40, 0x10, 0x421, 0x0, 0x2, {0x0, 0x0, 0x0, 0x0, 0x0, 0x460d64e1825b0c8}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x4}}}, @IFLA_ADDRESS={0xa}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000810}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000380)={'team0\x00', 0x0}) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'macvtap0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@bridge_newneigh={0x30, 0x1c, 0x1, 0x70bd2c, 0x25dfdbfc, {0x7, 0x0, 0x0, r8, 0x2, 0x26, 0xa}, [@NDA_LLADDR={0xa, 0x2, @multicast}, @NDA_VLAN={0x6, 0x5, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) (async) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000e8"], 0x50) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000003000000000000000000850000001100000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r10, r9}, 0xc) sendmsg$nl_route(r4, &(0x7f0000000640)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000600)={&(0x7f00000004c0)=@mpls_delroute={0xf4, 0x19, 0x200, 0x70bd2a, 0x25dfdbfd, {0x1c, 0x10, 0x80, 0xff, 0xfc, 0x3, 0xfd, 0x5, 0x400}, [@RTA_TTL_PROPAGATE={0x5, 0x1a, 0x9}, @RTA_VIA={0x14, 0x12, {0x15, "95b9b24870cb4fda3f2c505a9c53"}}, @RTA_MULTIPATH={0xc, 0x9, {0x40, 0x2, 0x0, r6}}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0x4}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0x1}, @RTA_NEWDST={0x84, 0x13, [{}, {0x1, 0x0, 0x1}, {0x6, 0x0, 0x1}, {0x3}, {0x1000}, {0x4}, {0xfff4a}, {0x4}, {0x2, 0x0, 0x1}, {0x5, 0x0, 0x1}, {0x1000, 0x0, 0x1}, {0x4}, {0x5, 0x0, 0x1}, {0xf92a, 0x0, 0x1}, {0x9, 0x0, 0x1}, {0x5}, {0x3}, {0x7}, {0x9, 0x0, 0x1}, {0x9, 0x0, 0x1}, {0xffff7, 0x0, 0x1}, {0x0, 0x0, 0x1}, {0x8}, {0x96, 0x0, 0x1}, {0xffff7, 0x0, 0x1}, {0x5}, {0x8001}, {0x7}, {0xa, 0x0, 0x1}, {0x9}, {0x3, 0x0, 0x1}, {0x100}]}, @RTA_VIA={0x14, 0x12, {0x27, "8bf3f90916046e78ee58b5840f0a"}}, @RTA_OIF={0x8, 0x4, r8}]}, 0xf4}, 0x1, 0x0, 0x0, 0x11}, 0x40000000) 1.442383045s ago: executing program 1 (id=3938): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b0000000000000700003dc87152598055ee00e8", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1, 0xfffffffc, '\x00', 0x0, r1}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000010000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000003000000850000008600000018110000", @ANYRES32=r2, @ANYRESHEX=r2], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r3, 0x2000012, 0xe, 0x0, &(0x7f00000001c0)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000008c0)={'syztnl2\x00', &(0x7f0000000800)={'gretap0\x00', 0x0, 0x7, 0x700, 0xda23, 0x445, {{0x1c, 0x4, 0x3, 0x37, 0x70, 0x65, 0x0, 0x23, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x16}, @dev={0xac, 0x14, 0x14, 0x1b}, {[@rr={0x7, 0xb, 0x41, [@multicast1, @private=0xa010102]}, @timestamp_addr={0x44, 0x34, 0x93, 0x1, 0x8, [{@remote, 0x4}, {@multicast1, 0x80000001}, {@dev={0xac, 0x14, 0x14, 0x12}, 0x1}, {@private=0xa010102, 0x83}, {@local, 0x9}, {@local, 0xe}]}, @timestamp={0x44, 0x1c, 0x70, 0x0, 0x1, [0x639, 0x7, 0x0, 0x5, 0xffff0000, 0x6]}]}}}}}) bind$packet(r4, &(0x7f0000000940)={0x11, 0xf8, r5, 0x1, 0x1, 0x6, @random="b1c4e16a1fab"}, 0x14) r6 = socket$kcm(0x2, 0xa, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="85000000070000006a0a00ff000000000c00000000000000950000000000000018100000", @ANYRES32, @ANYBLOB="000000000000000005000000000000009500000000000000b1f8306e05d1e4aab009c16b5c05077115d0749619ca39f89974785ae0619b77c6585f678ac92a3b6b4148f56b43c3dd75d75f97c8f92f60a2def458df05e2fbfb3e849b2b3cffd4f29446ae60dd76654b2639b2bc14350706214a6ab7a712d4317fbc3ca01d0d3ed6110b3775903141a5091a4d3db8eb335414fbdb288aba73aaf6d18000a3a2a069cf7f9402e1425bb6bc370576aa1faea0fe222671ecf99038fce8dba53dcb11f87cca"], &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x2000800) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_buf(r7, 0x1, 0x2b, &(0x7f00000006c0)=""/197, &(0x7f00000007c0)=0xc5) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0f00000004000000040000001600000000000000", @ANYRES32, @ANYBLOB="fdffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000b02918b57b52bae6bcf613ff969febcc9be0f3a0fe4b2db270cc44ffee042b1348eee588a6ea3c63b06f78fc7329dd816b12951a740211"], 0x50) ioctl$sock_SIOCSPGRP(r9, 0x8902, &(0x7f00000004c0)=0xffffffffffffffff) r11 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002e00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000180)=ANY=[@ANYRES32=r10, @ANYRES32=r11, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r10}, &(0x7f00000006c0), &(0x7f0000000700)=r9}, 0x20) sendmsg$inet(r8, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x27}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0xfd5e, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffff20, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x700, 0x0, 0x18, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2, 0xffffff07, 0xffc1}, @generic={0x0, 0x2, "d588380003c1"}]}}}}}}, 0xfd6c) 1.131350913s ago: executing program 4 (id=3939): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001000)=@base={0xa, 0x4, 0x8, 0xa, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50) close(0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0600000004000000040000000001"], 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) close(0x3) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0xfffffff8}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r3, &(0x7f00000002c0), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="184b1e6100ffff000000ffff00000000000000611800000000001618110000", @ANYRES32=r1, @ANYBLOB="000000006ecbf5f7acc8f7c30020000005080200", @ANYRES32=r2, @ANYBLOB="0000000000000000bfa200000000000007020000f8ffffff850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0xe, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$sock(r5, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000a00)="54000000100001040000000000000000000000000000000000000000000000000f00030073797a6b616c6c6572300000240012000a00010076786c616e00000014000200080001007b000000080002007f000001", 0x54}], 0x1}, 0x0) r6 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000300)={'syzkaller0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@bridge_newneigh={0x28, 0x1c, 0xc01, 0x0, 0x0, {0x7, 0x0, 0x0, r7, 0x80, 0x2}, [@NDA_LLADDR={0xa, 0x2, @broadcast}]}, 0x28}}, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r4}, 0xc) 553.207521ms ago: executing program 3 (id=3940): bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xb, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="8500010011000000630a04ff000000004000000000740000950000000000000018100000", @ANYRES32, @ANYBLOB="000000000000000005000000000000009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r1, &(0x7f0000000180)=ANY=[@ANYBLOB='c 122532'], 0xa) r2 = socket$packet(0x11, 0x3, 0x300) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r2) 371.622092ms ago: executing program 4 (id=3941): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'gre0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0xffffffffffffff2d, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r1, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=@newtfilter={0x64, 0x2c, 0xf3f, 0x30bd29, 0x25dfd3f5, {0x0, 0x0, 0x0, r1, {0x1, 0xfff2}, {}, {0x7, 0x4}}, [@filter_kind_options=@f_flower={{0xb}, {0x34, 0x2, [@TCA_FLOWER_KEY_ENC_IPV6_SRC={0x14, 0x1f, @empty}, @TCA_FLOWER_KEY_UDP_DST_MASK={0x6, 0x26, 0x5}, @TCA_FLOWER_KEY_ENC_IPV6_DST={0x14, 0x21, @loopback}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x20041890}, 0x8864000000000000) 369.590576ms ago: executing program 0 (id=3942): syz_emit_ethernet(0x86, &(0x7f0000000000)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2e}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x1b59, 0x64, 0x0, @wg=@response={0x2, 0x3, 0x0, "0002000000753904030405a024f0dd00", "9384bbeb3018ad591b661fe808b21b77", {"694c875dfb1be5d2a0057a62022a1564", "a329d3a14a1d8c6900"}}}}}}}, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) (async, rerun: 64) r2 = socket(0x10, 0x3, 0x0) (rerun: 64) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x7) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x8}, {0xfff1, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=@delchain={0x24, 0x66, 0xf31, 0xfffffff8, 0x0, {0x0, 0x0, 0x0, r3, {0xb, 0xc}, {0x10, 0xffff}, {0xd, 0x1b}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r5 = socket$can_bcm(0x1d, 0x2, 0x2) (rerun: 64) connect$can_bcm(r5, &(0x7f0000000080), 0x10) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) sendmsg$can_bcm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="05"], 0x48}}, 0x80) (async) sendmsg$can_bcm(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)=ANY=[@ANYBLOB="0500000000e0ffffffffffff", @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000008001"], 0x48}}, 0x40000) (async) sendmsg$can_bcm(r5, &(0x7f00000002c0)={&(0x7f0000000000)={0x1d, r6}, 0x10, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYRES32=r5], 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async, rerun: 64) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'team0\x00', 0x0}) (async, rerun: 64) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000280)={'sit0\x00', &(0x7f0000000200)={'sit0\x00', 0x0, 0x7f07, 0x7800, 0x5, 0x3ff, {{0xb, 0x4, 0x3, 0x18, 0x2c, 0x3ff, 0x0, 0x8, 0x29, 0x0, @broadcast, @private=0xa010100, {[@timestamp={0x44, 0x18, 0x18, 0x0, 0x8, [0xbe, 0x7, 0x7fffffff, 0x3, 0x400]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'vxcan1\x00', 0x0}) (async, rerun: 64) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'batadv_slave_1\x00', 0x0}) (async, rerun: 64) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000003c0)={'ip6_vti0\x00', &(0x7f0000000340)={'syztnl2\x00', 0x0, 0x29, 0x3, 0xfd, 0x6, 0x12, @mcast2, @loopback, 0x20, 0x7800, 0x2, 0x4}}) (async) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) (async) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r13, &(0x7f0000000480)={&(0x7f0000000280), 0xc, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[@ANYBLOB="300000001a00000429bd7000fedbdf2507000007fe01fd0b0008000008000300", @ANYRES32=r12, @ANYBLOB="0c0016800600060000100000"], 0x30}, 0x1, 0x0, 0x0, 0x4814}, 0xa0) (async, rerun: 32) r14 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r15 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r16 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r16, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r14, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)={0x34, r15, 0x301, 0x70bd28, 0x25dfdbfe, {0x1c}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r17}]}]}, 0x34}}, 0x48010) (async) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000400)={0x1b4, 0x0, 0x8, 0x70bd2d, 0x25dfdbff, {}, [@HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}]}, @HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r17}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}]}]}, 0x1b4}, 0x1, 0x0, 0x0, 0x4001}, 0x40000) 213.594483ms ago: executing program 3 (id=3943): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x32000, 0x0) write$tun(r0, &(0x7f0000000040)={@val={0x0, 0x88a8}, @void, @ipv4=@gre={{0x10, 0x4, 0x3, 0x33, 0x224, 0x64, 0x0, 0x6, 0x2f, 0x0, @private=0xa010101, @local, {[@ra={0x94, 0x4}, @lsrr={0x83, 0x27, 0xe5, [@initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x1b}, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010100, @broadcast, @multicast1, @multicast2, @remote, @broadcast]}, @end]}}, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x53, 0x2, [0x0, 0x6], "1ff7180497b3e3556c08c8162a1f0cb5930ba955a008d004c4b329cfea9bc10a199510338c3339637981ba9ae3014b4c384517f549991b8037c6890cfa7b79b66b2b15e5e95f3cc97b2f4c625074e7f34620ea"}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, [0x3, 0x7f, 0x4], "a22ed69556bad580c3a626900b34b90b8c4593e06003b8e16d119a3f89d3bd7682f91bfacd32160d30972454b52efd74f50cb4d430a9c8014477cdbf40d97bfe3861e52bee952f6e28ffc1b118efc7810e46f50582822116ba6cae862c7eecf1f3c44087675d684b4ecad27d745e29fa691226b4669008265fd0dbd7418a6556c8d4894af954"}, {0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x86dd, [0x5, 0x3], "7fdf6c1aad2d5b4a2792054e7b783ef4d725b805c637c65def954a642855339ff0bb3392e08e1de59d537d19677442026e5745e94451a8e042253185e37fa675cf081b9cfe952a94e9afbf7db5092e69a9eac110a318e3d1296d76b483c26cc8461a326121a65df80f081e04f81e0576de144820345ac03bcbb1f2bb7b174f1a3e9da0d627ac5613efbaba2524f054e2a5ddf935890604283da1f18289562f42b4fe5222f4f231ff86ee86eb3870c601fb658b66972442da3d"}, {0x8, 0x88be, 0x0, {{0xd, 0x1, 0x7, 0x2, 0x1, 0x1, 0x0, 0xf}, 0x1, {0xb}}}, {0x8, 0x22eb, 0x2, {{0xb, 0x2, 0x2, 0x2, 0x0, 0x3, 0x5, 0x6}, 0x2, {0x8, 0x2, 0x3, 0xb, 0x0, 0x1, 0x3}}}, {0x8, 0x6558, 0x3}}}}, 0x228) ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0) splice(r0, &(0x7f0000000280)=0xffff, r0, &(0x7f00000002c0)=0x2, 0x7fffffffffffffff, 0x2) sendto$x25(0xffffffffffffffff, &(0x7f0000000300)="19966eea02279b93495a0fa4afa3dd78dee5e6a04b62abb930cbed2e59cbbce47c9997f3e36b2cd61090b8f80d8e67465c57b63b0c2a3d4bd2e571a37e6cf60b14272e0be4d2774757303177cf4ed5d61fea55", 0x53, 0x40800, &(0x7f0000000380), 0x12) r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000400)={'veth0_virt_wifi\x00', &(0x7f00000003c0)=@ethtool_pauseparam={0x13, 0x1, 0x8}}) r2 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000480)=@generic={&(0x7f0000000440)='./file0\x00', 0x0, 0x8}, 0x18) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000004c0)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xe, 0x200, 0x3, 0x6, 0x4, r2, 0xe0, '\x00', 0x0, r3, 0x5, 0x5, 0x5}, 0x50) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r0, 0xf502, 0x0) r4 = socket$netlink(0x10, 0x3, 0x13) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r4, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x12040}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x28, r5, 0x4, 0x70bd2b, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x40010}, 0x50) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000700), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000740)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r6, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0xb0, r7, 0x200, 0x70bd26, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_KEY={0x84, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "c5ab6129bc96ca9e3aca72e2b65cb4ad"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0xe1}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "4b181b462279095b3e2cbe5c8b1e3ba3"}, @NL802154_KEY_ATTR_ID={0x50, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x44, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xfffe}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5}]}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}]}, 0xb0}, 0x1, 0x0, 0x0, 0x840}, 0x40) socket$inet_mptcp(0x2, 0x1, 0x106) r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000900), r6) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r6, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x34, r9, 0x10, 0x70bd28, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x4}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008050}, 0x20004005) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000a00)={'ipvlan1\x00'}) ioctl$EXT4_IOC_SWAP_BOOT(r4, 0x6611) r10 = syz_genetlink_get_family_id$nfc(&(0x7f0000000a80), r6) sendmsg$NFC_CMD_ACTIVATE_TARGET(r6, &(0x7f0000000b40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x34, r10, 0x8, 0x70bd28, 0x25dfdbfd, {}, [@NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x4}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0x1}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0x1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x4004800}, 0x4000045) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000bc0)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_CHANNEL(r6, &(0x7f0000000c80)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x34, r7, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@NL802154_ATTR_PAGE={0x5, 0x7, 0x12}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0x12}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r11}]}, 0x34}, 0x1, 0x0, 0x0, 0x24000081}, 0x4040000) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000d00), r6) sendmsg$IEEE802154_LLSEC_ADD_KEY(r12, &(0x7f0000000e00)={&(0x7f0000000cc0), 0xc, &(0x7f0000000dc0)={&(0x7f0000000d40)={0x60, r13, 0x4, 0x70bd2c, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0xfff}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_LLSEC_KEY_USAGE_COMMANDS={0x24, 0x32, "751129e52619c59dfedb02807cfff2c7690e3eae5dc1b4ed8e9034fdd162e221"}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xfffe}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x60}}, 0x805) 122.449047ms ago: executing program 1 (id=3944): socket$netlink(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x5, 0x5, 0x7, 0x9, 0x40}, 0x50) close(0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r1}, 0x38) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, 0x0, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d65b"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x68}, 0x1, 0x0, 0x0, 0x24000840}, 0x40) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000cc0)=[{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000040)="128b3b8a2c5102e4013618666fa3bb497d", 0x11}], 0x1}], 0x1, 0x600008d0) recvmmsg(r5, &(0x7f0000002b80)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000280)=""/8, 0x8}, {&(0x7f0000001780)=""/4096, 0x1000}], 0x2}, 0x11}], 0x1, 0x40000140, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000600)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x130, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x104, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}, {0xf0, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x100000001}, @NFTA_SET_ELEM_EXPR={0x20, 0x7, 0x0, 0x1, @fwd={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_FWD_SREG_DEV={0x8, 0x1, 0x1, 0x0, 0x15}, @NFTA_FWD_SREG_DEV={0x8, 0x1, 0x1, 0x0, 0x14}]}}}, @NFTA_SET_ELEM_USERDATA={0xb5, 0x6, 0x1, 0x0, "09ec8e11ad2cee5262716e9aa61f8360627c8ec5082b5895d40a552b5fb19cffeace1a53603de64612b3d14ef3f3a5f8434147a508350e348607e7566c25d6085c17f926946a65fa3067f062565906428463d3e159137197f6172735322f15b1262d26b9dc2e7dcda92aea0c764bb61cb858575a03765e9e013b90f89c2b6cbb205a96516e612b8c09ce0b0de93fe6d16fb34eeb4b1014831049c36a5271af54fb0797fa5fb62efe76ac31e42f79a7f4ca"}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x158}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018260000", @ANYRES32=r0, @ANYBLOB="000000010000000095000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r6}, 0xc) r7 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r7, &(0x7f00000002c0)={&(0x7f0000000100)=@phonet={0x23, 0x8, 0x10, 0x30}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000340)="000000000000000010000000810097ff892f", 0x12}], 0x1}, 0x4040000) syz_init_net_socket$llc(0x1a, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x15, 0x17, &(0x7f00000007c0)=ANY=[@ANYBLOB="1807000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000180100002020702500000000002020207b1bf8ff00000000bda1000000000000a7010000f8ffffffb702000008000000b7030000000000007209000006000000bf91000000000000b5020000000000008500000085000000b70000000000000095"], &(0x7f0000000040)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sk_reuseport, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x74}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x4}, @IFLA_BOND_AD_ACTOR_SYS_PRIO={0x6, 0x18, 0xffff}]}}}]}, 0x44}}, 0x0) 0s ago: executing program 4 (id=3945): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)={0x1b, 0x0, 0x0, 0x800000, 0x4}, 0x50) (async) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) (async) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x6, 0x0) (async) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x31, r2, 0x0) write$tun(r2, 0x0, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001a00)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x20, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x2, 0x1c, &(0x7f0000000040)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca900000000000035090100980000001500030000000000b7020000000000007b9af8ff00000000b509000000000000dbaaf8fff1000000bf8600000000000007080000f8ffffffbfa400000000000007090000f0ffffffc70200000800000018290000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608f1ff76000000bf9800000000000056080000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 32) r4 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000e80)=ANY=[@ANYBLOB="581300004100070127bd7000fefdffff047c000008004280040008000c000180060006000806"], 0x1358}, 0x1, 0x0, 0x0, 0x4048011}, 0xc0d4) (async) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newtaction={0x70, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_ctinfo={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x3f00}, @TCA_CTINFO_ACT={0x18, 0x3, {0xfa, 0x0, 0x0, 0x100}}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x6}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x200488c0}, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$sock_timeval(r6, 0x1, 0x15, &(0x7f0000000300)={0x0, 0x2710}, 0x10) (async) sendto$inet6(r6, &(0x7f0000000240)="d3", 0x1, 0x81, &(0x7f0000000280)={0xa, 0x4e24, 0x8, @remote, 0x7}, 0x1c) (async) socket(0x10, 0x803, 0x0) (async) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0xe, &(0x7f0000001480)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000703000000feffff7a0af0fff8ffff1971a4f0ff00000000b7060000080000001e6400000000000045040400010000001704000001000a00b7040000000100006a0af2fe00000000850000001a000000b70000000000000095000000000000009e17f199a68b06d83298a8cdc21ce784909b849d5550ad857d0454d8877a6db61d69f2ffcaa10350e11cb97c8adf1bc9a0c4eeceb9971e43405d621ffbc9ce000000d8ca56b50d0c010d631f6dde53a9a53608c10556e5734eb84049761451ce540c772e2d9f8004e26f7fcc059c062234d55906000000000f0000fd9ac3d09e29a9d542ca9d85a5c9c88474895d679838def0a83a733dc6a39b63a5ed69d32394c53361d7e43c5cbd8000000000000080231c61ccd106cb937b450f859ce8122a79c3e40000b59b0fc46d6cec3c0802882add4e1179bd4a44f231b6d753a7be428ba953df4aece69311687f4122073a236c3a32efa04137d4524847d2638da3261c8162bb7c7824be6195a66d2e17e122040e1100000000928612a29fc691e4f1f7bd053abb885f39381f1759410b1059f05684261f332d606834669b49ec99320ca7712d7e79bd5bf5ed818ecc7640917f6a559a47db608fcf9f6c131b84e41c354c66838f72b9e12d36e996f316f0812ca83efb30c7f6c6d57c4a64590401eec22523dd712c680013e87f649a1ede7142ca9d5d8a8c9f9b440fe4331ad5532c74d9a31a5d737537f7a2caa30581253d14dd3e92af7dc836686365ae01bdec561c0402b67801267a8df97d2f85426a5963d4fa3e26cc05972c162f223f000000d999e80de00fcbcc02d0aed7bb8f7ba337d59c14f39dcd4aad4139ef6425a9367f1bd1467fc6b95a4df7669839771ce9ccd5788029901e5a79d8b9990ace8f74087f25ad50c4608800"/686], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340)}, 0x42) (async, rerun: 64) bpf$PROG_LOAD(0x5, 0x0, 0x0) (rerun: 64) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$FOU_CMD_DEL(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x24, r9, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_PEER_V4={0x8, 0x8, @multicast2}]}, 0x24}, 0x1, 0x0, 0x0, 0x810}, 0x4000080) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r7, 0x0, 0xe, 0x0, &(0x7f0000000380)="0b0000000000d4e0080036004c33", 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x9) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000180)={0x5c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xfffffffe}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0xffff}]}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4028055}, 0x0) kernel console output (not intermixed with test programs): rror on dev nbd4, logical block 2, async page read [ 512.289801][ T1736] I/O error, dev nbd4, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 512.289824][ T1736] Buffer I/O error on dev nbd4, logical block 3, async page read [ 512.290421][ T1736] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 512.290445][ T1736] Buffer I/O error on dev nbd4, logical block 0, async page read [ 512.290545][ T1736] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 512.290766][ T1736] Buffer I/O error on dev nbd4, logical block 1, async page read [ 512.347318][ T5638] ldm_validate_partition_table(): Disk read failed. [ 512.416769][ T5638] Dev nbd4: unable to read RDB block 0 [ 512.429413][ T5638] nbd4: unable to read partition table [ 512.518182][T19569] netlink: 'syz.4.3257': attribute type 1 has an invalid length. [ 512.730932][T19571] netlink: 'syz.4.3257': attribute type 9 has an invalid length. [ 512.895745][ T5638] ldm_validate_partition_table(): Disk read failed. [ 512.911985][ T5638] Dev nbd4: unable to read RDB block 0 [ 512.912671][ T5638] nbd4: unable to read partition table [ 513.030179][T19569] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 513.316769][ T6796] net_ratelimit: 6 callbacks suppressed [ 513.316792][ T6796] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 513.484008][T19588] bridge: RTM_NEWNEIGH with invalid state 0x0 [ 513.519056][ T6796] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 513.619930][T19590] netlink: 'syz.4.3261': attribute type 4 has an invalid length. [ 513.651526][T19589] 8021q: adding VLAN 0 to HW filter on device bond0 [ 513.689084][T19589] bond2: (slave bond0): making interface the new active one [ 513.693097][T19589] bond2: (slave bond0): Enslaving as an active interface with an up link [ 513.722744][T19590] .`: renamed from bond0 (while UP) [ 513.736580][T19595] batman_adv: batadv0: Adding interface: dummy0 [ 513.736597][T19595] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 513.736631][T19595] batman_adv: batadv0: Interface activated: dummy0 [ 513.741291][T19589] batadv0: mtu less than device minimum [ 513.743239][T19589] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 513.744561][T19589] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 513.746724][T19589] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 513.748028][T19589] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 513.749300][T19589] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 513.750581][T19589] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 513.751807][T19589] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 514.090101][T19177] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 514.258930][T19604] netlink: 'syz.3.3262': attribute type 1 has an invalid length. [ 514.283357][T19608] xt_IDLETIMER: timeout value is zero [ 514.344094][T19604] 8021q: adding VLAN 0 to HW filter on device bond1 [ 514.438373][T19611] bond1: (slave veth3): Enslaving as an active interface with a down link [ 514.454758][T19611] __nla_validate_parse: 9 callbacks suppressed [ 514.454774][T19611] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3262'. [ 514.502443][T19611] bond1 (unregistering): (slave veth3): Releasing active interface [ 514.505337][T19611] bond1 (unregistering): Released all slaves [ 514.577236][T19177] veth0_vlan: entered promiscuous mode [ 514.670828][T19177] veth1_vlan: entered promiscuous mode [ 514.711227][T19619] syzkaller1: entered promiscuous mode [ 514.711250][T19619] syzkaller1: entered allmulticast mode [ 514.766987][T19177] veth0_macvtap: entered promiscuous mode [ 514.823263][T19177] veth1_macvtap: entered promiscuous mode [ 514.982043][T19177] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 515.041296][T19177] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 515.384407][T19641] netlink: 72 bytes leftover after parsing attributes in process `syz.3.3271'. [ 515.455129][ T6798] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 515.516538][ T8926] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 515.516589][ T8926] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 515.516630][ T8926] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 515.747503][ T8926] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 515.747538][ T8926] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 515.926046][T19652] syzkaller1: entered promiscuous mode [ 515.926069][T19652] syzkaller1: entered allmulticast mode [ 516.019846][ T6798] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 516.019866][ T6798] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 516.261744][T19653] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3273'. [ 516.265352][T19659] netlink: 'syz.0.3273': attribute type 4 has an invalid length. [ 516.452502][T19654] wg2 speed is unknown, defaulting to 1000 [ 516.525284][T19678] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3276'. [ 516.525436][T19679] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3276'. [ 516.625799][T19654] lo speed is unknown, defaulting to 1000 [ 517.279560][T18029] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 517.284893][T18029] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 517.301486][T18029] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 517.302949][T18029] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 517.304445][T18029] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 517.511214][T19698] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3284'. [ 517.993718][T19716] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3286'. [ 518.366208][ T6796] net_ratelimit: 39 callbacks suppressed [ 518.366231][ T6796] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 518.558873][ T1236] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 518.657757][T19733] FAULT_INJECTION: forcing a failure. [ 518.657757][T19733] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 518.657789][T19733] CPU: 0 UID: 0 PID: 19733 Comm: syz.3.3290 Not tainted syzkaller #0 PREEMPT(full) [ 518.657812][T19733] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026 [ 518.657824][T19733] Call Trace: [ 518.657831][T19733] [ 518.657840][T19733] dump_stack_lvl+0xe8/0x150 [ 518.657873][T19733] should_fail_ex+0x410/0x560 [ 518.657908][T19733] prepare_alloc_pages+0x223/0x600 [ 518.657940][T19733] __alloc_frozen_pages_noprof+0x185/0x5a0 [ 518.657967][T19733] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 518.657989][T19733] ? __alloc_frozen_pages_noprof+0x29e/0x5a0 [ 518.658015][T19733] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 518.658042][T19733] ? __pfx_policy_nodemask+0x10/0x10 [ 518.658066][T19733] ? __get_vm_area_node+0x155/0x2f0 [ 518.658093][T19733] ? __vmalloc_node_range_noprof+0x343/0x1540 [ 518.658120][T19733] ? __vmalloc_noprof+0xd2/0x120 [ 518.658151][T19733] __alloc_pages_noprof+0x10/0x100 [ 518.658174][T19733] alloc_pages_bulk_noprof+0x5fa/0x7c0 [ 518.658204][T19733] ? alloc_pages_noprof+0x140/0x2b0 [ 518.658233][T19733] __kasan_populate_vmalloc+0xb7/0x1c0 [ 518.658260][T19733] alloc_vmap_area+0xd1a/0x1420 [ 518.658303][T19733] ? __pfx_alloc_vmap_area+0x10/0x10 [ 518.658328][T19733] ? __kmalloc_cache_node_noprof+0x3d1/0x620 [ 518.658350][T19733] ? __kmalloc_cache_node_noprof+0x1f7/0x620 [ 518.658371][T19733] ? __get_vm_area_node+0x155/0x2f0 [ 518.658404][T19733] __get_vm_area_node+0x200/0x2f0 [ 518.658439][T19733] __vmalloc_node_range_noprof+0x343/0x1540 [ 518.658470][T19733] ? bpf_prog_calc_tag+0x51/0x370 [ 518.658495][T19733] ? __sys_bpf+0xcd1/0xd90 [ 518.658514][T19733] ? __x64_sys_bpf+0xba/0xd0 [ 518.658531][T19733] ? do_syscall_64+0x166/0x520 [ 518.658559][T19733] ? __kasan_kmalloc+0x93/0xb0 [ 518.658581][T19733] ? bpf_prog_load+0x14d6/0x1c20 [ 518.658603][T19733] ? __sys_bpf+0xd0d/0xd90 [ 518.658622][T19733] ? __x64_sys_bpf+0xba/0xd0 [ 518.658654][T19733] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 518.658695][T19733] ? bpf_prog_calc_tag+0x51/0x370 [ 518.658717][T19733] __vmalloc_noprof+0xd2/0x120 [ 518.658747][T19733] ? bpf_prog_calc_tag+0x51/0x370 [ 518.658773][T19733] bpf_prog_calc_tag+0x51/0x370 [ 518.658796][T19733] ? __pfx_cmp_subprogs+0x10/0x10 [ 518.658824][T19733] check_and_resolve_insns+0xbb/0x21d0 [ 518.658850][T19733] ? __pfx_bpf_check_btf_info+0x10/0x10 [ 518.658872][T19733] ? add_subprog+0x2e2/0x3f0 [ 518.658903][T19733] ? __pfx_check_and_resolve_insns+0x10/0x10 [ 518.658938][T19733] bpf_check+0x180a/0x2e10 [ 518.658971][T19733] ? ktime_get_with_offset+0x93/0x2d0 [ 518.658996][T19733] ? __pfx_bpf_check+0x10/0x10 [ 518.659021][T19733] ? bpf_obj_name_cpy+0x194/0x1e0 [ 518.659054][T19733] bpf_prog_load+0x14d6/0x1c20 [ 518.659089][T19733] ? __pfx_bpf_prog_load+0x10/0x10 [ 518.659137][T19733] __sys_bpf+0xd0d/0xd90 [ 518.659168][T19733] ? __pfx___sys_bpf+0x10/0x10 [ 518.659202][T19733] ? __fget_files+0x2a/0x420 [ 518.659247][T19733] ? ksys_write+0x242/0x270 [ 518.659280][T19733] ? __pfx_ksys_write+0x10/0x10 [ 518.659315][T19733] __x64_sys_bpf+0xba/0xd0 [ 518.659338][T19733] do_syscall_64+0x166/0x520 [ 518.659358][T19733] ? trace_irq_disable+0x3b/0x140 [ 518.659378][T19733] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 518.659399][T19733] ? clear_bhb_loop+0x70/0xc0 [ 518.659424][T19733] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 518.659444][T19733] RIP: 0033:0x7ffb2d39e159 [ 518.659462][T19733] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 518.659479][T19733] RSP: 002b:00007ffb2e2c6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 518.659501][T19733] RAX: ffffffffffffffda RBX: 00007ffb2d625fa0 RCX: 00007ffb2d39e159 [ 518.659516][T19733] RDX: 0000000000000094 RSI: 0000200000000800 RDI: 0000000000000005 [ 518.659529][T19733] RBP: 00007ffb2e2c6090 R08: 0000000000000000 R09: 0000000000000000 [ 518.659542][T19733] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 518.659554][T19733] R13: 00007ffb2d626038 R14: 00007ffb2d625fa0 R15: 00007fff9ee09cf8 [ 518.659586][T19733] [ 518.666533][ T3021] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 518.893707][T19733] syz.3.3290: vmalloc error: size 128, align 0x1, vm_struct allocation failed, mode:0x400cc0(GFP_KERNEL_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 518.893790][T19733] CPU: 0 UID: 0 PID: 19733 Comm: syz.3.3290 Not tainted syzkaller #0 PREEMPT(full) [ 518.893813][T19733] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026 [ 518.893825][T19733] Call Trace: [ 518.893832][T19733] [ 518.893841][T19733] dump_stack_lvl+0xe8/0x150 [ 518.893874][T19733] warn_alloc+0x24d/0x270 [ 518.893902][T19733] ? lockdep_hardirqs_on+0x7b/0x110 [ 518.893989][T19733] ? __pfx_warn_alloc+0x10/0x10 [ 518.894008][T19733] ? kfree+0x1c5/0x650 [ 518.894042][T19733] ? __get_vm_area_node+0x219/0x2f0 [ 518.894079][T19733] __vmalloc_node_range_noprof+0x36b/0x1540 [ 518.894110][T19733] ? __sys_bpf+0xcd1/0xd90 [ 518.894130][T19733] ? __x64_sys_bpf+0xba/0xd0 [ 518.894148][T19733] ? do_syscall_64+0x166/0x520 [ 518.894174][T19733] ? __kasan_kmalloc+0x93/0xb0 [ 518.894196][T19733] ? bpf_prog_load+0x14d6/0x1c20 [ 518.894217][T19733] ? __sys_bpf+0xd0d/0xd90 [ 518.894236][T19733] ? __x64_sys_bpf+0xba/0xd0 [ 518.894268][T19733] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 518.894309][T19733] ? bpf_prog_calc_tag+0x51/0x370 [ 518.894349][T19733] __vmalloc_noprof+0xd2/0x120 [ 518.894379][T19733] ? bpf_prog_calc_tag+0x51/0x370 [ 518.894407][T19733] bpf_prog_calc_tag+0x51/0x370 [ 518.894432][T19733] ? __pfx_cmp_subprogs+0x10/0x10 [ 518.894461][T19733] check_and_resolve_insns+0xbb/0x21d0 [ 518.894489][T19733] ? __pfx_bpf_check_btf_info+0x10/0x10 [ 518.894512][T19733] ? add_subprog+0x2e2/0x3f0 [ 518.894540][T19733] ? __pfx_check_and_resolve_insns+0x10/0x10 [ 518.894576][T19733] bpf_check+0x180a/0x2e10 [ 518.894610][T19733] ? ktime_get_with_offset+0x93/0x2d0 [ 518.894640][T19733] ? __pfx_bpf_check+0x10/0x10 [ 518.894667][T19733] ? bpf_obj_name_cpy+0x194/0x1e0 [ 518.894712][T19733] bpf_prog_load+0x14d6/0x1c20 [ 518.894747][T19733] ? __pfx_bpf_prog_load+0x10/0x10 [ 518.894796][T19733] __sys_bpf+0xd0d/0xd90 [ 518.894827][T19733] ? __pfx___sys_bpf+0x10/0x10 [ 518.894860][T19733] ? __fget_files+0x2a/0x420 [ 518.894911][T19733] ? ksys_write+0x242/0x270 [ 518.894944][T19733] ? __pfx_ksys_write+0x10/0x10 [ 518.894980][T19733] __x64_sys_bpf+0xba/0xd0 [ 518.895003][T19733] do_syscall_64+0x166/0x520 [ 518.895023][T19733] ? trace_irq_disable+0x3b/0x140 [ 518.895042][T19733] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 518.895063][T19733] ? clear_bhb_loop+0x70/0xc0 [ 518.895088][T19733] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 518.895108][T19733] RIP: 0033:0x7ffb2d39e159 [ 518.895127][T19733] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 518.895143][T19733] RSP: 002b:00007ffb2e2c6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 518.895163][T19733] RAX: ffffffffffffffda RBX: 00007ffb2d625fa0 RCX: 00007ffb2d39e159 [ 518.895178][T19733] RDX: 0000000000000094 RSI: 0000200000000800 RDI: 0000000000000005 [ 518.895191][T19733] RBP: 00007ffb2e2c6090 R08: 0000000000000000 R09: 0000000000000000 [ 518.895203][T19733] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 518.895215][T19733] R13: 00007ffb2d626038 R14: 00007ffb2d625fa0 R15: 00007fff9ee09cf8 [ 518.895247][T19733] [ 519.128638][T19733] Mem-Info: [ 519.128678][T19733] active_anon:9199 inactive_anon:0 isolated_anon:0 [ 519.128678][T19733] active_file:0 inactive_file:43631 isolated_file:0 [ 519.128678][T19733] unevictable:0 dirty:241 writeback:0 [ 519.128678][T19733] slab_reclaimable:12447 slab_unreclaimable:129304 [ 519.128678][T19733] mapped:32683 shmem:3399 pagetables:1313 [ 519.128678][T19733] sec_pagetables:0 bounce:0 [ 519.128678][T19733] kernel_misc_reclaimable:0 [ 519.128678][T19733] free:1252812 free_pcp:9145 free_cma:0 [ 519.128797][T19733] Node 0 active_anon:36796kB inactive_anon:0kB active_file:0kB inactive_file:174324kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:130732kB dirty:960kB writeback:0kB shmem:13596kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:18168kB pagetables:5128kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 519.128934][T19733] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:124kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 519.129054][T19733] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 519.129210][T19733] lowmem_reserve[]: 0 2486 2486 2486 2486 [ 519.129313][T19733] Node 0 DMA32 free:1043188kB boost:0kB min:34140kB low:42672kB high:51204kB reserved_highatomic:0kB free_highatomic:0kB active_anon:36796kB inactive_anon:0kB active_file:0kB inactive_file:174324kB unevictable:0kB writepending:960kB zspages:0kB present:3129332kB managed:2546612kB mlocked:0kB bounce:0kB free_pcp:36080kB local_pcp:21292kB free_cma:0kB [ 519.129487][T19733] lowmem_reserve[]: 0 0 0 0 0 [ 519.129581][T19733] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:0kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 519.130161][T19733] lowmem_reserve[]: 0 0 0 0 0 [ 519.130274][T19733] Node 1 Normal free:3952700kB boost:0kB min:55760kB low:69700kB high:83640kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:0kB writepending:4kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:500kB local_pcp:0kB free_cma:0kB [ 519.130417][T19733] lowmem_reserve[]: 0 0 0 0 0 [ 519.130505][T19733] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 519.130770][T19733] Node 0 DMA32: 479*4kB (UM) 298*8kB (UME) 376*16kB (UM) 207*32kB (UME) 54*64kB (UM) 20*128kB (UME) 31*256kB (UME) 13*512kB (M) 6*1024kB (ME) 4*2048kB (M) 242*4096kB (UM) = 1043116kB [ 519.131147][T19733] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 519.131406][T19733] Node 1 Normal: 1*4kB (M) 1*8kB (M) 1*16kB (M) 1*32kB (M) 4*64kB (UM) 6*128kB (UM) 4*256kB (UM) 4*512kB (UM) 2*1024kB (UM) 1*2048kB (U) 963*4096kB (M) = 3952700kB [ 519.180769][T19733] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 519.180807][T19733] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 519.180859][T19733] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 519.180891][T19733] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 519.180933][T19733] 47026 total pagecache pages [ 519.180959][T19733] 0 pages in swap cache [ 519.180976][T19733] Free swap = 124996kB [ 519.180994][T19733] Total swap = 124996kB [ 519.181013][T19733] 2097051 pages RAM [ 519.181030][T19733] 0 pages HighMem/MovableOnly [ 519.181047][T19733] 428782 pages reserved [ 519.181066][T19733] 0 pages cma reserved [ 519.426675][ T5624] Bluetooth: hci4: command tx timeout [ 519.908149][ T9514] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 520.573428][ T6798] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 520.599811][T19691] wg2 speed is unknown, defaulting to 1000 [ 520.612976][T19691] lo speed is unknown, defaulting to 1000 [ 520.679647][ T1236] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 520.788647][ T6798] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 520.897442][ T6798] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 521.010347][ T6798] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 521.117833][ T8926] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 521.481704][T19772] FAULT_INJECTION: forcing a failure. [ 521.481704][T19772] name failslab, interval 1, probability 0, space 0, times 0 [ 521.481737][T19772] CPU: 0 UID: 0 PID: 19772 Comm: syz.2.3301 Not tainted syzkaller #0 PREEMPT(full) [ 521.481759][T19772] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026 [ 521.481772][T19772] Call Trace: [ 521.481779][T19772] [ 521.481788][T19772] dump_stack_lvl+0xe8/0x150 [ 521.481822][T19772] should_fail_ex+0x410/0x560 [ 521.481850][T19772] should_failslab+0xa8/0x100 [ 521.481878][T19772] __kmalloc_node_noprof+0x100/0x720 [ 521.481897][T19772] ? __get_vm_area_node+0x200/0x2f0 [ 521.481927][T19772] ? __get_vm_area_node+0x283/0x2f0 [ 521.481953][T19772] ? __vmalloc_node_range_noprof+0x5b4/0x1540 [ 521.481983][T19772] ? __vmalloc_node_range_noprof+0x5b4/0x1540 [ 521.482019][T19772] __vmalloc_node_range_noprof+0x5b4/0x1540 [ 521.482051][T19772] ? __sys_bpf+0xcd1/0xd90 [ 521.482071][T19772] ? __x64_sys_bpf+0xba/0xd0 [ 521.482098][T19772] ? bpf_prog_load+0x14d6/0x1c20 [ 521.482119][T19772] ? __sys_bpf+0xd0d/0xd90 [ 521.482153][T19772] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 521.482200][T19772] ? bpf_prog_calc_tag+0x51/0x370 [ 521.482223][T19772] __vmalloc_noprof+0xd2/0x120 [ 521.482252][T19772] ? bpf_prog_calc_tag+0x51/0x370 [ 521.482279][T19772] bpf_prog_calc_tag+0x51/0x370 [ 521.482301][T19772] ? __pfx_cmp_subprogs+0x10/0x10 [ 521.482329][T19772] check_and_resolve_insns+0xbb/0x21d0 [ 521.482355][T19772] ? __pfx_bpf_check_btf_info+0x10/0x10 [ 521.482377][T19772] ? add_subprog+0x2e2/0x3f0 [ 521.482404][T19772] ? __pfx_check_and_resolve_insns+0x10/0x10 [ 521.482436][T19772] bpf_check+0x180a/0x2e10 [ 521.482468][T19772] ? ktime_get_with_offset+0x93/0x2d0 [ 521.482492][T19772] ? __pfx_bpf_check+0x10/0x10 [ 521.482517][T19772] ? bpf_obj_name_cpy+0x194/0x1e0 [ 521.482550][T19772] bpf_prog_load+0x14d6/0x1c20 [ 521.482584][T19772] ? __pfx_bpf_prog_load+0x10/0x10 [ 521.482633][T19772] __sys_bpf+0xd0d/0xd90 [ 521.482662][T19772] ? __pfx___sys_bpf+0x10/0x10 [ 521.482696][T19772] ? __fget_files+0x2a/0x420 [ 521.482740][T19772] ? ksys_write+0x242/0x270 [ 521.482773][T19772] ? __pfx_ksys_write+0x10/0x10 [ 521.482808][T19772] __x64_sys_bpf+0xba/0xd0 [ 521.482830][T19772] do_syscall_64+0x166/0x520 [ 521.482852][T19772] ? trace_irq_disable+0x3b/0x140 [ 521.482871][T19772] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 521.482892][T19772] ? clear_bhb_loop+0x70/0xc0 [ 521.482917][T19772] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 521.482937][T19772] RIP: 0033:0x7efeaeb9e159 [ 521.482956][T19772] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 521.482972][T19772] RSP: 002b:00007efeaf980028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 521.482993][T19772] RAX: ffffffffffffffda RBX: 00007efeaee25fa0 RCX: 00007efeaeb9e159 [ 521.483008][T19772] RDX: 0000000000000094 RSI: 0000200000000800 RDI: 0000000000000005 [ 521.483021][T19772] RBP: 00007efeaf980090 R08: 0000000000000000 R09: 0000000000000000 [ 521.483034][T19772] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 521.483045][T19772] R13: 00007efeaee26038 R14: 00007efeaee25fa0 R15: 00007ffe607d7c58 [ 521.483078][T19772] [ 521.514661][ T5624] Bluetooth: hci4: command tx timeout [ 521.974362][T19776] netlink: 'syz.2.3302': attribute type 2 has an invalid length. [ 521.974383][T19776] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3302'. [ 522.004424][T19776] ¿: entered promiscuous mode [ 522.004832][T19776] netlink: 'syz.2.3302': attribute type 2 has an invalid length. [ 522.004848][T19776] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3302'. [ 522.181265][T19780] syzkaller0: entered promiscuous mode [ 522.181287][T19780] syzkaller0: entered allmulticast mode [ 522.232312][T19780] FAULT_INJECTION: forcing a failure. [ 522.232312][T19780] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 522.232343][T19780] CPU: 1 UID: 0 PID: 19780 Comm: syz.4.3304 Not tainted syzkaller #0 PREEMPT(full) [ 522.232366][T19780] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026 [ 522.232377][T19780] Call Trace: [ 522.232385][T19780] [ 522.232393][T19780] dump_stack_lvl+0xe8/0x150 [ 522.232426][T19780] should_fail_ex+0x410/0x560 [ 522.232453][T19780] _copy_from_iter+0x3b0/0x1660 [ 522.232485][T19780] ? __pfx__copy_from_iter+0x10/0x10 [ 522.232512][T19780] ? __pfx__copy_from_iter+0x10/0x10 [ 522.232541][T19780] copy_page_from_iter+0x219/0x2d0 [ 522.232568][T19780] skb_copy_datagram_from_iter+0x2f4/0x720 [ 522.232608][T19780] packet_sendmsg+0x35e2/0x4f80 [ 522.232627][T19780] ? up_write+0x19d/0x4a0 [ 522.232662][T19780] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 522.232705][T19780] ? lock_acquire+0x115/0x350 [ 522.232727][T19780] ? __lock_acquire+0x747/0x2de0 [ 522.232756][T19780] ? __pfx_packet_sendmsg+0x10/0x10 [ 522.232774][T19780] ? aa_sk_perm+0x713/0x900 [ 522.232793][T19780] ? __lock_acquire+0x747/0x2de0 [ 522.232818][T19780] ? debug_mutex_add_waiter+0x1be/0x1f0 [ 522.232848][T19780] ? __pfx_aa_sk_perm+0x10/0x10 [ 522.232873][T19780] ? aa_sock_msg_perm+0x144/0x210 [ 522.232902][T19780] ? apparmor_socket_sendmsg+0x98/0x360 [ 522.232925][T19780] ? __pfx_packet_sendmsg+0x10/0x10 [ 522.232944][T19780] sock_sendmsg_nosec+0x13a/0x180 [ 522.232977][T19780] ____sys_sendmsg+0x54e/0x850 [ 522.233008][T19780] ? __pfx_____sys_sendmsg+0x10/0x10 [ 522.233048][T19780] ? import_iovec+0x73/0xa0 [ 522.233075][T19780] ___sys_sendmsg+0x2a5/0x360 [ 522.233099][T19780] ? __lock_acquire+0x747/0x2de0 [ 522.233123][T19780] ? __pfx____sys_sendmsg+0x10/0x10 [ 522.233189][T19780] ? __fget_files+0x2a/0x420 [ 522.233216][T19780] ? __fget_files+0x3a2/0x420 [ 522.233252][T19780] __x64_sys_sendmsg+0x1b1/0x290 [ 522.233280][T19780] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 522.233327][T19780] do_syscall_64+0x166/0x520 [ 522.233348][T19780] ? trace_irq_disable+0x3b/0x140 [ 522.233368][T19780] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 522.233388][T19780] ? clear_bhb_loop+0x70/0xc0 [ 522.233412][T19780] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 522.233432][T19780] RIP: 0033:0x7ff231d9e159 [ 522.233449][T19780] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 522.233466][T19780] RSP: 002b:00007ff232c73028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 522.233487][T19780] RAX: ffffffffffffffda RBX: 00007ff232025fa0 RCX: 00007ff231d9e159 [ 522.233502][T19780] RDX: 0000000000008000 RSI: 00002000000000c0 RDI: 0000000000000008 [ 522.233515][T19780] RBP: 00007ff232c73090 R08: 0000000000000000 R09: 0000000000000000 [ 522.233528][T19780] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 522.233540][T19780] R13: 00007ff232026038 R14: 00007ff232025fa0 R15: 00007ffd71fb54d8 [ 522.233570][T19780] [ 522.608488][T19784] sctp: [Deprecated]: syz.0.3305 (pid 19784) Use of int in maxseg socket option. [ 522.608488][T19784] Use struct sctp_assoc_value instead [ 523.401499][T19810] FAULT_INJECTION: forcing a failure. [ 523.401499][T19810] name failslab, interval 1, probability 0, space 0, times 0 [ 523.401531][T19810] CPU: 1 UID: 0 PID: 19810 Comm: syz.3.3311 Not tainted syzkaller #0 PREEMPT(full) [ 523.401553][T19810] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026 [ 523.401573][T19810] Call Trace: [ 523.401581][T19810] [ 523.401589][T19810] dump_stack_lvl+0xe8/0x150 [ 523.401621][T19810] should_fail_ex+0x410/0x560 [ 523.401647][T19810] should_failslab+0xa8/0x100 [ 523.401675][T19810] __kmalloc_node_noprof+0x100/0x720 [ 523.401693][T19810] ? __get_vm_area_node+0x200/0x2f0 [ 523.401720][T19810] ? __get_vm_area_node+0x283/0x2f0 [ 523.401746][T19810] ? __vmalloc_node_range_noprof+0x5b4/0x1540 [ 523.401774][T19810] ? __vmalloc_node_range_noprof+0x5b4/0x1540 [ 523.401810][T19810] __vmalloc_node_range_noprof+0x5b4/0x1540 [ 523.401840][T19810] ? __sys_bpf+0xcd1/0xd90 [ 523.401861][T19810] ? __x64_sys_bpf+0xba/0xd0 [ 523.401886][T19810] ? bpf_prog_load+0x14d6/0x1c20 [ 523.401907][T19810] ? __sys_bpf+0xd0d/0xd90 [ 523.401941][T19810] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 523.401981][T19810] ? bpf_prog_calc_tag+0x51/0x370 [ 523.402003][T19810] __vmalloc_noprof+0xd2/0x120 [ 523.402032][T19810] ? bpf_prog_calc_tag+0x51/0x370 [ 523.402057][T19810] bpf_prog_calc_tag+0x51/0x370 [ 523.402079][T19810] ? __pfx_cmp_subprogs+0x10/0x10 [ 523.402107][T19810] check_and_resolve_insns+0xbb/0x21d0 [ 523.402132][T19810] ? __pfx_bpf_check_btf_info+0x10/0x10 [ 523.402154][T19810] ? add_subprog+0x2e2/0x3f0 [ 523.402180][T19810] ? __pfx_check_and_resolve_insns+0x10/0x10 [ 523.402214][T19810] bpf_check+0x180a/0x2e10 [ 523.402246][T19810] ? ktime_get_with_offset+0x93/0x2d0 [ 523.402272][T19810] ? __pfx_bpf_check+0x10/0x10 [ 523.402296][T19810] ? bpf_obj_name_cpy+0x194/0x1e0 [ 523.402334][T19810] bpf_prog_load+0x14d6/0x1c20 [ 523.402388][T19810] ? __pfx_bpf_prog_load+0x10/0x10 [ 523.402462][T19810] __sys_bpf+0xd0d/0xd90 [ 523.402498][T19810] ? __pfx___sys_bpf+0x10/0x10 [ 523.402537][T19810] ? __fget_files+0x2a/0x420 [ 523.402597][T19810] ? ksys_write+0x242/0x270 [ 523.402636][T19810] ? __pfx_ksys_write+0x10/0x10 [ 523.402677][T19810] __x64_sys_bpf+0xba/0xd0 [ 523.402703][T19810] do_syscall_64+0x166/0x520 [ 523.402728][T19810] ? trace_irq_disable+0x3b/0x140 [ 523.402750][T19810] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 523.402781][T19810] ? clear_bhb_loop+0x70/0xc0 [ 523.402810][T19810] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 523.402833][T19810] RIP: 0033:0x7ffb2d39e159 [ 523.402854][T19810] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 523.402874][T19810] RSP: 002b:00007ffb2e2c6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 523.402900][T19810] RAX: ffffffffffffffda RBX: 00007ffb2d625fa0 RCX: 00007ffb2d39e159 [ 523.402917][T19810] RDX: 0000000000000094 RSI: 0000200000000800 RDI: 0000000000000005 [ 523.402932][T19810] RBP: 00007ffb2e2c6090 R08: 0000000000000000 R09: 0000000000000000 [ 523.402947][T19810] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 523.402961][T19810] R13: 00007ffb2d626038 R14: 00007ffb2d625fa0 R15: 00007fff9ee09cf8 [ 523.402998][T19810] [ 523.587732][ T5624] Bluetooth: hci4: command tx timeout [ 523.828198][ T5349] net_ratelimit: 14 callbacks suppressed [ 523.828217][ T5349] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 523.916626][ T8926] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 524.076130][ T6789] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 524.247413][ T1236] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 524.631654][T19861] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 524.686447][T19691] bridge0: port 1(bridge_slave_0) entered blocking state [ 524.686691][T19691] bridge0: port 1(bridge_slave_0) entered disabled state [ 524.713086][T19691] bridge_slave_0: entered allmulticast mode [ 524.723794][T19857] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 524.736756][T19691] bridge_slave_0: entered promiscuous mode [ 524.748263][T19691] bridge0: port 2(bridge_slave_1) entered blocking state [ 524.748512][T19691] bridge0: port 2(bridge_slave_1) entered disabled state [ 524.748961][T19691] bridge_slave_1: entered allmulticast mode [ 524.753014][T19691] bridge_slave_1: entered promiscuous mode [ 524.797157][T19857] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 524.923656][T19840] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3315'. [ 524.923681][T19840] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3315'. [ 524.923695][T19840] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3315'. [ 524.956752][T19691] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 524.960313][T19691] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 525.008352][T19691] team0: Port device team_slave_0 added [ 525.011324][T19691] team0: Port device team_slave_1 added [ 525.053839][T19691] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 525.053853][T19691] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 525.053878][T19691] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 525.061298][ T3021] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 525.110885][T19691] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 525.110900][T19691] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 525.110926][T19691] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 525.240382][T19840] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3315'. [ 525.240408][T19840] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3315'. [ 525.240424][T19840] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3315'. [ 525.282640][T19691] hsr_slave_0: entered promiscuous mode [ 525.283639][T19691] hsr_slave_1: entered promiscuous mode [ 525.297863][T19691] debugfs: 'hsr0' already exists in 'hsr' [ 525.297883][T19691] Cannot create hsr debugfs directory [ 525.483443][T19840] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3315'. [ 525.483468][T19840] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3315'. [ 525.618320][ T1236] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 525.678857][ T5624] Bluetooth: hci4: command tx timeout [ 525.702948][T19868] syzkaller0: entered promiscuous mode [ 525.702967][T19868] syzkaller0: entered allmulticast mode [ 525.728609][ T1236] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 525.993017][T19815] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 526.116083][ T3021] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 526.266138][ T1236] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 526.890813][T19895] geneve2: entered promiscuous mode [ 527.221734][T19691] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 527.265055][T19691] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 527.279316][T19691] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 527.334746][T19691] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 527.338254][T19691] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 527.443693][T19691] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 527.448508][T19691] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 527.479173][T19691] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 528.630093][T19954] __nla_validate_parse: 2 callbacks suppressed [ 528.630113][T19954] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3332'. [ 528.835424][T19956] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3331'. [ 528.858703][T19952] syzkaller0: entered promiscuous mode [ 528.858724][T19952] syzkaller0: entered allmulticast mode [ 528.870026][T19937] net_ratelimit: 11 callbacks suppressed [ 528.870041][T19937] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 529.027123][T10558] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 531.776186][T19940] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 531.777875][T19968] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3333'. [ 531.886543][T19943] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 532.000170][T19937] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 532.046343][T19941] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 532.072001][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 532.097878][T10556] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 532.303244][T19691] 8021q: adding VLAN 0 to HW filter on device bond0 [ 532.320444][T19942] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 532.422590][T19691] 8021q: adding VLAN 0 to HW filter on device team0 [ 532.436229][T19941] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 532.489671][T19941] bridge0: port 1(bridge_slave_0) entered blocking state [ 532.489785][T19941] bridge0: port 1(bridge_slave_0) entered forwarding state [ 532.555506][T19937] bridge0: port 2(bridge_slave_1) entered blocking state [ 532.555615][T19937] bridge0: port 2(bridge_slave_1) entered forwarding state [ 532.695860][T19988] tipc: Invalid UDP bearer configuration [ 532.695906][T19988] tipc: Enabling of bearer rejected, failed to enable media [ 532.698817][T19940] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 533.071551][T20008] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3344'. [ 533.703533][T19942] IPVS: starting estimator thread 0... [ 533.786594][T20038] IPVS: using max 25 ests per chain, 60000 per kthread [ 533.885378][T20051] net_ratelimit: 14 callbacks suppressed [ 533.885395][T20051] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 533.902384][T19937] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 534.005734][T19691] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 534.026775][T19942] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 534.153157][T19691] veth0_vlan: entered promiscuous mode [ 534.176229][ T59] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 534.187682][T19691] veth1_vlan: entered promiscuous mode [ 534.274252][T19691] veth0_macvtap: entered promiscuous mode [ 534.295371][T19691] veth1_macvtap: entered promiscuous mode [ 534.317621][T19943] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 534.378452][T19691] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 534.408026][T19691] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 534.552471][T19942] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 534.554080][T19942] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 534.588354][T19942] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 534.591328][T19941] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 534.591367][T19941] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 534.633096][T19943] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 534.676146][ T59] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 534.789110][T19940] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 534.896409][ T59] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 536.260593][T20020] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 536.469352][T19937] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 536.469371][T19937] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 536.531954][T20057] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3351'. [ 536.631830][T19930] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 536.632668][T19930] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 536.948167][T20073] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3353'. [ 537.636875][T20109] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3362'. [ 537.636899][T20109] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3362'. [ 537.736494][T20105] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3360'. [ 537.757901][T20106] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3360'. [ 537.781975][T20104] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 537.782853][T20104] ip6t_REJECT: ECHOREPLY is not supported [ 537.837384][T20107] syzkaller1: entered promiscuous mode [ 537.837404][T20107] syzkaller1: entered allmulticast mode [ 538.076827][T20126] netlink: 256 bytes leftover after parsing attributes in process `syz.3.3365'. [ 538.076850][T20126] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3365'. [ 539.016037][T19941] net_ratelimit: 30 callbacks suppressed [ 539.016059][T19941] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 539.127217][T19941] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 539.237912][T19941] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 539.314733][T20162] netlink: 'syz.4.3376': attribute type 8 has an invalid length. [ 539.314752][T20162] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3376'. [ 539.315094][T20162] bridge0: port 2(bridge_slave_1) entered disabled state [ 539.315900][T20162] bridge0: port 1(bridge_slave_0) entered disabled state [ 539.366145][T19942] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 539.415726][T20167] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3377'. [ 539.750997][T19941] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 539.808306][T19942] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 539.916953][T19937] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 540.011643][T20188] openvswitch: netlink: Missing key (keys=c0, expected=500) [ 540.026381][ T59] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 540.136255][T19930] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 540.808741][T20204] vlan2: entered promiscuous mode [ 540.808762][T20204] bridge0: entered promiscuous mode [ 541.375556][T20248] netlink: 'syz.0.3396': attribute type 1 has an invalid length. [ 541.586700][T20248] 8021q: adding VLAN 0 to HW filter on device bond3 [ 542.049223][T20235] syzkaller0: entered promiscuous mode [ 542.049623][T20235] syzkaller0: entered allmulticast mode [ 543.088100][T20290] __nla_validate_parse: 3 callbacks suppressed [ 543.088121][T20290] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3403'. [ 544.230984][T10550] net_ratelimit: 14 callbacks suppressed [ 544.231006][T10550] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 545.525483][T19937] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 546.396886][T19941] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 546.506706][T19941] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 546.610358][T20296] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3404'. [ 546.619273][T19940] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 546.667612][T20296] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3404'. [ 546.726758][T19940] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 546.839044][T19941] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 546.855393][T20301] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3404'. [ 546.949960][T19943] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 547.267656][T10550] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 547.337125][T19919] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 547.426964][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 547.725331][T20329] Cannot find add_set index 0 as target [ 547.762884][T20330] vcan0: tx drop: invalid sa for name 0x0000004000000000 [ 547.776177][T20330] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3412'. [ 547.776212][T20330] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3412'. [ 547.958742][T19941] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 547.958806][T19941] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 547.958841][T19941] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 547.958875][T19941] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 548.143814][T20325] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3410'. [ 548.143836][T20325] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3410'. [ 548.379576][T20341] bond3: option primary_reselect: invalid value (6) [ 548.429906][T20341] bond3 (unregistering): Released all slaves [ 549.059959][T20335] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 549.060000][T20335] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 549.060034][T20335] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 549.355682][T19934] net_ratelimit: 7 callbacks suppressed [ 549.355704][T19934] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 549.529203][T19934] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 549.636271][T19937] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 549.738818][T20392] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3426'. [ 549.739234][T20392] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3426'. [ 549.739624][T20392] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3426'. [ 549.740039][T20392] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3426'. [ 549.740438][T20392] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3426'. [ 549.740834][T20392] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3426'. [ 549.741243][T20392] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3426'. [ 549.741644][T20392] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3426'. [ 549.755269][T19940] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 549.876139][T19942] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 549.903986][T20398] netlink: Conntrack attr has 1 unknown bytes [ 549.904016][T20398] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 549.995062][T19937] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 550.190270][T19930] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 550.297057][T19930] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 551.404557][T20457] Bluetooth: MGMT ver 1.23 [ 551.746178][T20463] veth1_to_bond: entered allmulticast mode [ 551.794851][T20463] veth1_to_bond: left allmulticast mode [ 551.983994][T20465] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 552.655549][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 553.148257][T20497] __nla_validate_parse: 128 callbacks suppressed [ 553.148279][T20497] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3446'. [ 553.207295][T20520] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 553.207344][T20520] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 553.207383][T20520] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 553.207421][T20520] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 553.576761][T20534] netlink: 'syz.0.3450': attribute type 3 has an invalid length. [ 553.576803][T20534] netlink: 'syz.0.3450': attribute type 7 has an invalid length. [ 554.096466][T20554] netlink: 'syz.1.3454': attribute type 4 has an invalid length. [ 554.096490][T20554] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3454'. [ 554.467169][T20517] net_ratelimit: 24 callbacks suppressed [ 554.467194][T20517] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 554.658993][T19941] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 554.777574][T19941] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 554.889475][T20518] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 555.099272][T20581] batman_adv: batadv0: Adding interface: veth0 [ 555.099290][T20581] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 555.099320][T20581] batman_adv: batadv0: Interface activated: veth0 [ 555.105773][T20587] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 555.121095][T19941] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 555.162287][T20587] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 555.163089][T20587] batman_adv: batadv0: Interface deactivated: veth0 [ 555.163108][T20587] batman_adv: batadv0: Removing interface: veth0 [ 555.286990][T20517] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 555.396872][T19941] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 555.472988][T20590] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3462'. [ 555.577415][T19941] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 555.686741][T19941] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 555.796383][T20513] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 555.969851][T20599] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3466'. [ 555.994467][T20600] bridge2: the hash_elasticity option has been deprecated and is always 16 [ 559.527011][T20513] net_ratelimit: 35 callbacks suppressed [ 559.527037][T20513] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 559.637254][T20520] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 559.748577][T20513] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 559.857496][T20513] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 559.967029][T20517] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 560.077303][T19941] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 560.187078][T20520] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 560.227851][T20520] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 560.297422][T20517] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 560.407036][T20520] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 564.588207][T19941] net_ratelimit: 40 callbacks suppressed [ 564.588232][T19941] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 564.700436][T20520] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 564.808983][T20513] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 564.874466][T18029] Bluetooth: hci1: command 0x0406 tx timeout [ 564.917517][T19941] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 565.037277][T20520] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 565.147314][T19941] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 565.257041][T20505] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 565.368626][T20520] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 565.476702][T20520] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 565.506495][T10563] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 569.658145][T20520] net_ratelimit: 40 callbacks suppressed [ 569.658171][T20520] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 569.767079][T20517] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 569.879650][T20520] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 569.987212][T20520] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 570.097334][T20505] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 570.207008][T20513] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 570.317918][T20517] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 570.436943][T20513] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 570.547861][T20517] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 570.656939][T20517] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 574.759321][T20520] net_ratelimit: 41 callbacks suppressed [ 574.759347][T20520] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 574.867038][T20517] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 574.978086][T20517] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 575.086722][T20517] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 575.197857][T19941] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 575.306337][T20513] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 575.417885][T20505] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 575.526917][T20517] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 575.639202][T20513] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 575.746485][T20505] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 579.830278][T20503] net_ratelimit: 39 callbacks suppressed [ 579.830301][T20503] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 579.936720][T20505] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 580.046969][T20505] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 580.156883][T20503] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 580.266913][T20503] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 580.377740][T20517] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 580.489397][T20503] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 580.597667][T20517] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 580.707709][T19819] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 580.709755][T20513] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 584.887824][T20517] net_ratelimit: 41 callbacks suppressed [ 584.887855][T20517] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 584.997647][T20513] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 585.108312][T20517] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 585.217023][T20513] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 585.327728][T20513] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 585.346441][ T5624] Bluetooth: hci5: command 0x041b tx timeout [ 585.437633][T20520] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 585.548056][T20517] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 585.657945][T20503] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 585.767889][T20517] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 585.877566][T20503] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 589.966109][T20513] net_ratelimit: 42 callbacks suppressed [ 589.966134][T20513] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 590.076811][T20513] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 590.186161][T20513] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 590.296107][T20517] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 590.406118][T20513] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 590.516152][T20517] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 590.629656][T20517] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 590.736120][T20517] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 590.846092][T20505] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 590.947894][T10552] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 595.026113][T19941] net_ratelimit: 40 callbacks suppressed [ 595.026138][T19941] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 595.136092][T19941] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 595.246169][T20517] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 595.356027][T20517] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 595.466540][T20513] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 595.576108][T20513] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 595.686153][T20517] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 595.797676][T20517] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 595.906201][T19941] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 595.906429][T19819] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 600.086160][T20505] net_ratelimit: 39 callbacks suppressed [ 600.086187][T20505] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 600.196241][T20505] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 600.306169][T20505] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 600.416074][T20517] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 600.526382][T20505] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 600.546948][T10563] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 600.548453][T20517] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 600.636053][T19941] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 600.746104][T20513] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 600.856079][T19941] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 605.146113][T19941] net_ratelimit: 41 callbacks suppressed [ 605.146138][T19941] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 605.256147][T19941] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 605.366131][T19941] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 605.476019][T20513] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 605.586068][T20513] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 605.696175][T20513] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 605.806119][T20505] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 605.916306][T20505] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 606.026092][T20505] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 606.136127][T20505] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 610.226099][T19941] net_ratelimit: 40 callbacks suppressed [ 610.226123][T19941] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 610.336162][T19941] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 610.446385][T20513] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 610.557551][T20520] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 610.666116][T20505] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 610.776438][T20505] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 610.886115][T20513] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 610.996106][T20505] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 611.106555][T10563] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 611.108382][T20513] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 615.286128][T20513] net_ratelimit: 39 callbacks suppressed [ 615.286153][T20513] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 615.396403][T20520] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 615.506476][T20520] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 615.616160][T20520] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 615.726335][T20513] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 615.836437][T19941] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 615.908314][T20520] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 615.946178][T20513] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 616.056579][T20520] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 616.066672][T18454] Bluetooth: hci3: command 0x0406 tx timeout [ 616.166181][T19941] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 620.356174][T19941] net_ratelimit: 41 callbacks suppressed [ 620.356198][T19941] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 620.467281][T20520] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 620.576134][T20520] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 620.687066][T20520] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 620.796943][T20513] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 620.907139][T20513] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 620.947548][T20520] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 621.016429][T20520] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 621.127171][T20520] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 621.237149][T20520] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 625.428322][T20505] net_ratelimit: 39 callbacks suppressed [ 625.428347][T20505] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 625.537092][T19941] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 625.646437][T20513] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 625.757463][T20513] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 625.866188][T19941] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 625.976292][T19941] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 626.002637][T19941] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 626.087443][T20505] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 626.196987][T20517] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 626.306476][T20517] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 630.487112][T19941] net_ratelimit: 41 callbacks suppressed [ 630.487134][T19941] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 630.597102][T20513] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 630.706477][T20513] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 630.817165][T20513] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 630.926120][T20513] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 631.038745][T19941] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 631.146176][T20505] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 631.257106][T20513] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 631.279011][T19941] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 631.366221][T20513] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 635.546353][T20505] net_ratelimit: 40 callbacks suppressed [ 635.546379][T20505] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 635.657108][T20517] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 635.766139][T20517] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 635.877223][T20517] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 635.988399][T20518] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 636.097122][T20505] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 636.206359][T20518] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 636.317082][T20505] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 636.426439][T20505] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 636.537298][T20517] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 640.606384][T20513] net_ratelimit: 39 callbacks suppressed [ 640.606412][T20513] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 640.717040][T19941] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 640.837576][T19941] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 640.947102][T20517] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 641.056457][T19941] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 641.178024][T20518] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 641.286153][T20505] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 641.398193][T20517] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 641.506756][T10563] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 641.507690][T20518] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 645.687091][T20517] net_ratelimit: 39 callbacks suppressed [ 645.687115][T20517] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 645.797275][T20518] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 645.906108][T20513] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 646.017001][T20513] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 646.127356][T20517] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 646.237011][T20513] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 646.346127][T20517] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 646.457252][T20513] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 646.567083][T20518] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 646.677038][T20513] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 650.746338][T19941] net_ratelimit: 40 callbacks suppressed [ 650.746364][T19941] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 650.857124][T20513] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 650.966240][T20505] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 651.077346][T20505] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 651.109008][T20505] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 651.186293][T20513] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 651.297452][T20518] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 651.406613][T20518] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 651.527574][T20505] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 651.637106][T20505] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 655.836154][T20505] net_ratelimit: 38 callbacks suppressed [ 655.836179][T20505] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 655.947151][T20513] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 656.056363][T20513] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 656.167115][T20505] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 656.230279][T20513] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 656.276246][T20520] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 656.386680][T20503] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 656.496233][T20505] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 656.607201][T20513] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 656.706649][T19819] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 660.896262][T20505] net_ratelimit: 44 callbacks suppressed [ 660.896289][T20505] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 661.007049][T20503] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 661.117187][T20505] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 661.227059][T20503] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 661.336398][T20503] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 661.447048][T20505] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 661.556136][T20503] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 661.669943][T20520] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 661.777036][T20520] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 661.887091][T20520] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 664.190357][T20624] team0: entered promiscuous mode [ 664.190383][T20624] team_slave_0: entered promiscuous mode [ 664.190612][T20624] team_slave_1: entered promiscuous mode [ 664.190792][T20624] team0: entered allmulticast mode [ 664.190806][T20624] team_slave_0: entered allmulticast mode [ 664.190820][T20624] team_slave_1: entered allmulticast mode [ 664.399893][T20626] smbdirect: ib_dev[syz2] removed [ 664.621520][T20644] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3473'. [ 665.113752][T20658] netlink: 'syz.2.3476': attribute type 1 has an invalid length. [ 665.113774][T20658] netlink: 16142 bytes leftover after parsing attributes in process `syz.2.3476'. [ 665.125097][T20658] netlink: 'syz.2.3476': attribute type 1 has an invalid length. [ 665.125119][T20658] netlink: 16142 bytes leftover after parsing attributes in process `syz.2.3476'. [ 665.185210][T20659] syzkaller0: entered promiscuous mode [ 665.185234][T20659] syzkaller0: entered allmulticast mode [ 665.187479][ C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 665.609774][T20518] IPVS: starting estimator thread 0... [ 665.707901][T20677] IPVS: using max 22 ests per chain, 52800 per kthread [ 665.800922][T20683] sctp: [Deprecated]: syz.4.3484 (pid 20683) Use of int in max_burst socket option. [ 665.800922][T20683] Use struct sctp_assoc_value instead [ 665.801595][T20683] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3484'. [ 665.871678][T20675] bridge0: port 1(bridge_slave_0) entered disabled state [ 665.874486][T20675] bridge0: port 2(bridge_slave_1) entered disabled state [ 665.875241][ T31] audit: type=1800 audit(1789545508.200:20): pid=20679 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3481" name="memory.events" dev="tmpfs" ino=146 res=0 errno=0 [ 666.163777][T20683] ip6tnl1: entered allmulticast mode [ 666.191235][T20518] net_ratelimit: 35 callbacks suppressed [ 666.191258][T20518] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 666.334322][T20697] syzkaller0: entered promiscuous mode [ 666.334358][T20697] syzkaller0: entered allmulticast mode [ 666.456843][T19941] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 666.456949][T20688] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3483'. [ 666.824240][T20704] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3487'. [ 667.274740][T20719] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3487'. [ 667.422687][T20728] xt_hl: Unknown TTL match mode: 237 [ 667.759478][T19822] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 667.763504][T19941] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 667.764459][T19941] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 668.870037][T10563] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 670.314290][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 670.598574][T20711] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3487'. [ 670.616709][T20718] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3490'. [ 670.956069][T20520] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 670.960148][T20748] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3495'. [ 671.068818][T20492] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 671.177281][T20517] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 671.297405][T20520] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 671.367039][T20759] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3498'. [ 671.372717][T20759] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3498'. [ 671.372735][T20759] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3498'. [ 671.407134][T20492] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 671.517789][T20492] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 671.562978][T20765] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 671.615368][T20764] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3500'. [ 671.637113][T20492] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 671.738014][T20776] : renamed from ip6gre0 (while UP) [ 671.765736][T20774] Bluetooth: hci0: unsupported parameter 512 [ 671.765757][T20774] Bluetooth: hci0: unsupported parameter 4608 [ 671.765871][T20774] Bluetooth: hci0: invalid length 0, exp 2 for type 2 [ 671.786977][T20492] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 671.802005][T20770] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3498'. [ 671.906447][T19822] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 671.909341][T20775] bond2: option fail_over_mac: invalid value (127) [ 671.913508][T20775] bond2 (unregistering): Released all slaves [ 672.068230][T19941] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 672.176172][T20520] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 672.286351][T20520] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 672.386745][T18454] Bluetooth: hci4: command 0x0406 tx timeout [ 672.407843][T19941] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 672.678959][T20796] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3508'. [ 672.883591][T20796] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3508'. [ 673.497547][T20814] veth2: entered allmulticast mode [ 673.585189][T20819] Bluetooth: ISO socket layer initialized [ 674.164269][T20834] x_tables: duplicate entry at hook 3 [ 674.183103][T20837] netlink: 'syz.4.3519': attribute type 29 has an invalid length. [ 674.298818][T20840] .`: (slave syz_tun): Releasing backup interface [ 674.361959][T20840] bond2: (slave .`): Releasing active interface [ 674.383789][T20840] batman_adv: batadv0: Interface deactivated: dummy0 [ 674.383810][T20840] batman_adv: batadv0: Removing interface: dummy0 [ 674.423475][T20840] bridge_slave_0: left allmulticast mode [ 674.423496][T20840] bridge_slave_0: left promiscuous mode [ 674.423688][T20840] bridge0: port 1(bridge_slave_0) entered disabled state [ 674.470358][T20840] bridge_slave_1: left allmulticast mode [ 674.470380][T20840] bridge_slave_1: left promiscuous mode [ 674.470567][T20840] bridge0: port 2(bridge_slave_1) entered disabled state [ 674.511520][T20840] .`: (slave bond_slave_0): Releasing backup interface [ 674.533586][T20840] .`: (slave bond_slave_1): Releasing backup interface [ 674.596041][T20840] team0: Port device team_slave_0 removed [ 674.604436][T20840] team0: Port device team_slave_1 removed [ 674.605461][T20840] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 674.605480][T20840] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 674.614314][T20840] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 674.614354][T20840] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 674.668647][T20847] C: renamed from veth1_to_team (while UP) [ 674.674126][T20847] netlink: 'syz.2.3520': attribute type 2 has an invalid length. [ 675.114053][T20858] bond2: entered allmulticast mode [ 675.155130][T10563] dummy0: entered promiscuous mode [ 675.162692][T10563] dummy0: left promiscuous mode [ 675.219380][T20858] macvlan2: entered promiscuous mode [ 675.219402][T20858] macvlan2: entered allmulticast mode [ 675.230808][T20858] bond2: entered promiscuous mode [ 675.245322][T20858] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 675.290427][T20858] bond2: left promiscuous mode [ 676.347334][T20517] net_ratelimit: 33 callbacks suppressed [ 676.347358][T20517] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 676.567108][T20513] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 676.678982][T20517] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 676.787261][T20513] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 676.885493][T20898] veth0: entered promiscuous mode [ 676.908495][T20895] veth0: left promiscuous mode [ 676.936529][T20517] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 677.047169][T20518] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 677.156075][T20518] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 677.349369][T19822] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 677.893217][T20513] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 677.988597][T10563] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 678.249705][T20931] __nla_validate_parse: 6 callbacks suppressed [ 678.249725][T20931] netlink: 176 bytes leftover after parsing attributes in process `syz.1.3538'. [ 678.390881][T20944] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3538'. [ 678.534903][T20942] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3541'. [ 679.585484][T19941] tipc: Subscription rejected, illegal request [ 680.001420][T20978] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.3551'. [ 680.086893][T20978] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.3551'. [ 680.488908][T20987] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3555'. [ 680.489103][T20988] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3555'. [ 680.489248][T20988] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3555'. [ 680.489382][T20988] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3555'. [ 680.489535][T20988] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3555'. [ 680.702110][T20988] IPVS: set_ctl: invalid protocol: 0 47.115.121.122:32769 [ 681.088911][T20993] netlink: 'syz.2.3556': attribute type 11 has an invalid length. [ 681.091048][ T31] audit: type=1804 audit(1789545523.420:21): pid=20993 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.3556" name="/newroot/68/cgroup.controllers" dev="tmpfs" ino=370 res=1 errno=0 [ 681.091259][ T31] audit: type=1800 audit(1789545523.420:22): pid=20993 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3556" name="cgroup.controllers" dev="tmpfs" ino=370 res=0 errno=0 [ 681.092225][T21002] netlink: 'syz.3.3559': attribute type 40 has an invalid length. [ 681.357949][ T31] audit: type=1804 audit(1789545523.690:23): pid=20993 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.3556" name="/newroot/68/cgroup.controllers" dev="tmpfs" ino=370 res=1 errno=0 [ 681.409003][T20513] net_ratelimit: 26 callbacks suppressed [ 681.409022][T20513] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 681.516189][T20518] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 681.626253][T20520] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 681.736296][T20513] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 681.849997][T20517] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 681.968595][T19941] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 682.063005][T21034] netlink: 'syz.1.3568': attribute type 8 has an invalid length. [ 682.065208][T21034] syzkaller0: entered promiscuous mode [ 682.065226][T21034] syzkaller0: entered allmulticast mode [ 682.121716][T20520] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 682.181248][T21035] syzkaller0: entered promiscuous mode [ 682.181271][T21035] syzkaller0: entered allmulticast mode [ 682.406732][T21039] openvswitch: netlink: Missing key (keys=c0, expected=20100) [ 683.774204][T19941] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 684.066358][T10552] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 685.248210][T21076] FAULT_INJECTION: forcing a failure. [ 685.248210][T21076] name failslab, interval 1, probability 0, space 0, times 0 [ 685.248243][T21076] CPU: 0 UID: 0 PID: 21076 Comm: syz.3.3574 Not tainted syzkaller #0 PREEMPT(full) [ 685.248278][T21076] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026 [ 685.248296][T21076] Call Trace: [ 685.248304][T21076] [ 685.248313][T21076] dump_stack_lvl+0xe8/0x150 [ 685.248345][T21076] should_fail_ex+0x410/0x560 [ 685.248372][T21076] ? __alloc_skb+0x1db/0x7a0 [ 685.248393][T21076] should_failslab+0xa8/0x100 [ 685.248419][T21076] ? __alloc_skb+0x1db/0x7a0 [ 685.248439][T21076] kmem_cache_alloc_node_noprof+0xa1/0x610 [ 685.248469][T21076] ? __alloc_skb+0x18d/0x7a0 [ 685.248490][T21076] ? __alloc_skb+0x1db/0x7a0 [ 685.248518][T21076] __alloc_skb+0x1db/0x7a0 [ 685.248544][T21076] netlink_sendmsg+0x5d4/0xb40 [ 685.248647][T21076] ? __pfx_netlink_sendmsg+0x10/0x10 [ 685.248686][T21076] ? apparmor_socket_sendmsg+0x18b/0x360 [ 685.248717][T21076] ? __pfx_netlink_sendmsg+0x10/0x10 [ 685.248745][T21076] sock_sendmsg_nosec+0x13a/0x180 [ 685.248778][T21076] ____sys_sendmsg+0x54e/0x850 [ 685.248809][T21076] ? __pfx_____sys_sendmsg+0x10/0x10 [ 685.248842][T21076] ? import_iovec+0x73/0xa0 [ 685.248870][T21076] ___sys_sendmsg+0x2a5/0x360 [ 685.248894][T21076] ? __lock_acquire+0x747/0x2de0 [ 685.248918][T21076] ? __pfx____sys_sendmsg+0x10/0x10 [ 685.248977][T21076] ? __fget_files+0x2a/0x420 [ 685.249004][T21076] ? __fget_files+0x3a2/0x420 [ 685.249040][T21076] __x64_sys_sendmsg+0x1b1/0x290 [ 685.249068][T21076] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 685.249114][T21076] do_syscall_64+0x166/0x520 [ 685.249136][T21076] ? trace_irq_disable+0x3b/0x140 [ 685.249155][T21076] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 685.249175][T21076] ? clear_bhb_loop+0x70/0xc0 [ 685.249200][T21076] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 685.249219][T21076] RIP: 0033:0x7ffb2d39e159 [ 685.249237][T21076] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 685.249253][T21076] RSP: 002b:00007ffb2e2c6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 685.249274][T21076] RAX: ffffffffffffffda RBX: 00007ffb2d625fa0 RCX: 00007ffb2d39e159 [ 685.249288][T21076] RDX: 0000000024008000 RSI: 0000200000000040 RDI: 0000000000000003 [ 685.249302][T21076] RBP: 00007ffb2e2c6090 R08: 0000000000000000 R09: 0000000000000000 [ 685.249314][T21076] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 685.249325][T21076] R13: 00007ffb2d626038 R14: 00007ffb2d625fa0 R15: 00007fff9ee09cf8 [ 685.249356][T21076] [ 685.710020][T21078] __nla_validate_parse: 38 callbacks suppressed [ 685.710040][T21078] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3575'. [ 685.710057][T21078] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3575'. [ 687.011398][T10563] net_ratelimit: 1 callbacks suppressed [ 687.011420][T10563] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 687.111176][T10552] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 687.506150][ T6802] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 687.838520][T20518] batman_adv: batadv0: Interface deactivated: gretap2 [ 687.968869][T21100] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 688.243906][T21097] netlink: Failed to add GPL helper -22 [ 688.243958][T21097] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 689.433243][T20505] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 689.508124][T20518] batman_adv: batadv0: Removing interface: gretap2 [ 689.553973][T19941] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 689.584513][T21136] netlink: 'syz.1.3584': attribute type 8 has an invalid length. [ 689.984808][T20518] bond1 (unregistering): Released all slaves [ 690.013344][T20518] bond2 (unregistering): Released all slaves [ 690.037159][T20518] bond3 (unregistering): Released all slaves [ 690.063242][T20518] bond0 (unregistering): Released all slaves [ 690.093448][T20518] bond4 (unregistering): Released all slaves [ 690.117881][T20518] bond5 (unregistering): Released all slaves [ 690.141948][T20518] bond6 (unregistering): Released all slaves [ 690.152744][T10563] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 690.179253][T20518] bond7 (unregistering): Released all slaves [ 690.201716][T20518] bond8 (unregistering): Released all slaves [ 690.231373][T20518] bond9 (unregistering): Released all slaves [ 690.258144][T20518] bond10 (unregistering): Released all slaves [ 690.296222][T20518] bond11 (unregistering): Released all slaves [ 690.374560][T20518] bond12 (unregistering): Released all slaves [ 690.396869][T20518] bond13 (unregistering): Released all slaves [ 690.459136][T20518] bond14 (unregistering): Released all slaves [ 690.483273][T20518] bond15 (unregistering): Released all slaves [ 690.509841][T20518] bond16 (unregistering): Released all slaves [ 690.559169][T20518] bond17 (unregistering): Released all slaves [ 690.592618][T20518] bond18 (unregistering): Released all slaves [ 690.619741][T20518] bond19 (unregistering): Released all slaves [ 692.400384][T20517] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 692.656816][T20517] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 692.766086][T20517] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 692.801981][T21141] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3584'. [ 692.843947][T21152] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3587'. [ 692.898691][T21157] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 693.147143][T20513] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 693.197396][T10552] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 693.466051][T20517] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 693.522570][T21174] ip_tables: iptables: counters copy to user failed while replacing table [ 693.531509][T20518] : left promiscuous mode [ 693.627543][T21175] netlink: 'syz.3.3593': attribute type 23 has an invalid length. [ 694.372848][T20518] tipc: Disabling bearer [ 694.373033][T20518] tipc: Left network mode [ 694.390143][T20492] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 694.496833][T20513] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 694.532981][T21195] FAULT_INJECTION: forcing a failure. [ 694.532981][T21195] name failslab, interval 1, probability 0, space 0, times 0 [ 694.533012][T21195] CPU: 0 UID: 0 PID: 21195 Comm: syz.4.3598 Not tainted syzkaller #0 PREEMPT(full) [ 694.533034][T21195] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026 [ 694.533047][T21195] Call Trace: [ 694.533055][T21195] [ 694.533063][T21195] dump_stack_lvl+0xe8/0x150 [ 694.533099][T21195] should_fail_ex+0x410/0x560 [ 694.533129][T21195] should_failslab+0xa8/0x100 [ 694.533154][T21195] ? skb_clone+0x212/0x3a0 [ 694.533181][T21195] kmem_cache_alloc_noprof+0xa1/0x600 [ 694.533215][T21195] ? skb_clone+0x212/0x3a0 [ 694.533247][T21195] skb_clone+0x212/0x3a0 [ 694.533272][T21195] ? nfnetlink_rcv+0x4b0/0x28c0 [ 694.533372][T21195] nfnetlink_rcv+0x4de/0x28c0 [ 694.533402][T21195] ? __dev_queue_xmit+0x29b/0x3820 [ 694.533465][T21195] ? __local_bh_enable_ip+0xd6/0x140 [ 694.533495][T21195] ? lockdep_hardirqs_on+0x7b/0x110 [ 694.533517][T21195] ? __dev_queue_xmit+0x29b/0x3820 [ 694.533544][T21195] ? __local_bh_enable_ip+0xd6/0x140 [ 694.533568][T21195] ? __dev_queue_xmit+0x29b/0x3820 [ 694.533595][T21195] ? __dev_queue_xmit+0x1edc/0x3820 [ 694.533621][T21195] ? do_syscall_64+0x166/0x520 [ 694.533701][T21195] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 694.533739][T21195] ? __dev_queue_xmit+0x29b/0x3820 [ 694.533768][T21195] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 694.533812][T21195] ? ref_tracker_free+0x689/0x830 [ 694.533906][T21195] ? __pfx_ref_tracker_free+0x10/0x10 [ 694.533939][T21195] ? __skb_clone+0x449/0x6c0 [ 694.533971][T21195] ? skb_clone+0x246/0x3a0 [ 694.534001][T21195] ? __netlink_deliver_tap+0x811/0x860 [ 694.534029][T21195] ? netlink_deliver_tap+0x2e/0x1b0 [ 694.534064][T21195] ? netlink_deliver_tap+0x2e/0x1b0 [ 694.534093][T21195] ? netlink_deliver_tap+0x2e/0x1b0 [ 694.534133][T21195] netlink_unicast+0x7bd/0x940 [ 694.534176][T21195] netlink_sendmsg+0x813/0xb40 [ 694.534215][T21195] ? __pfx_netlink_sendmsg+0x10/0x10 [ 694.534253][T21195] ? apparmor_socket_sendmsg+0x18b/0x360 [ 694.534278][T21195] ? __pfx_netlink_sendmsg+0x10/0x10 [ 694.534306][T21195] sock_sendmsg_nosec+0x13a/0x180 [ 694.534341][T21195] ____sys_sendmsg+0x54e/0x850 [ 694.534373][T21195] ? __pfx_____sys_sendmsg+0x10/0x10 [ 694.534408][T21195] ? import_iovec+0x73/0xa0 [ 694.534437][T21195] ___sys_sendmsg+0x2a5/0x360 [ 694.534462][T21195] ? __lock_acquire+0x747/0x2de0 [ 694.534488][T21195] ? __pfx____sys_sendmsg+0x10/0x10 [ 694.534548][T21195] ? __fget_files+0x2a/0x420 [ 694.534594][T21195] ? __fget_files+0x3a2/0x420 [ 694.534641][T21195] __x64_sys_sendmsg+0x1b1/0x290 [ 694.534672][T21195] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 694.534723][T21195] do_syscall_64+0x166/0x520 [ 694.534745][T21195] ? trace_irq_disable+0x3b/0x140 [ 694.534767][T21195] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 694.534789][T21195] ? clear_bhb_loop+0x70/0xc0 [ 694.534816][T21195] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 694.534838][T21195] RIP: 0033:0x7ff231d9e159 [ 694.534858][T21195] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 694.534877][T21195] RSP: 002b:00007ff232c73028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 694.534900][T21195] RAX: ffffffffffffffda RBX: 00007ff232025fa0 RCX: 00007ff231d9e159 [ 694.534917][T21195] RDX: 0000000024008000 RSI: 0000200000000040 RDI: 0000000000000003 [ 694.534932][T21195] RBP: 00007ff232c73090 R08: 0000000000000000 R09: 0000000000000000 [ 694.534946][T21195] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 694.534958][T21195] R13: 00007ff232026038 R14: 00007ff232025fa0 R15: 00007ffd71fb54d8 [ 694.534992][T21195] [ 694.953847][T20518] IPVS: stopping backup sync thread 14019 ... [ 695.518226][T21211] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3602'. [ 695.568025][T21201] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3599'. [ 695.573700][T21207] netlink: 'syz.3.3600': attribute type 8 has an invalid length. [ 695.834780][T21207] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3600'. [ 696.001498][T21223] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3604'. [ 696.347353][T21233] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3605'. [ 696.347379][T21233] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3605'. [ 696.579001][T21231] IPVS: Scheduler module ip_vs_sip not found [ 696.719886][T21249] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3609'. [ 696.719909][T21249] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3609'. [ 696.751779][T21235] IPVS: Scheduler module ip_vs_sip not found [ 696.764017][T21254] xt_l2tp: invalid flags combination: 8 [ 697.435845][T21277] Bluetooth: hci0: invalid length 0, exp 2 for type 23 [ 697.576216][T20517] net_ratelimit: 18 callbacks suppressed [ 697.576242][T20517] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 697.660359][T21280] netlink: 'syz.0.3617': attribute type 8 has an invalid length. [ 697.660684][T21280] syzkaller0: entered promiscuous mode [ 697.660701][T21280] syzkaller0: entered allmulticast mode [ 697.687225][T20505] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 698.030756][T21290] netlink: 'syz.4.3620': attribute type 1 has an invalid length. [ 698.198375][T21302] __nla_validate_parse: 3 callbacks suppressed [ 698.198399][T21302] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3619'. [ 698.351733][T21290] bond4: entered promiscuous mode [ 698.355858][T21290] 8021q: adding VLAN 0 to HW filter on device bond4 [ 698.582174][T20517] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 698.718333][T21301] 8021q: adding VLAN 0 to HW filter on device bond4 [ 698.718712][T21301] bond4: (slave ipip0): The slave device specified does not support setting the MAC address [ 698.718732][T21301] bond4: (slave ipip0): Setting fail_over_mac to active for active-backup mode [ 698.757247][T21301] bond4: (slave ipip0): making interface the new active one [ 698.757270][T21301] ipip0: entered promiscuous mode [ 698.759977][T21301] bond4: (slave ipip0): Enslaving as an active interface with an up link [ 698.838726][T20518] batadv0: left allmulticast mode [ 698.838925][T20518] batadv0: left promiscuous mode [ 698.844539][T20518] veth1_macvtap: left promiscuous mode [ 698.845240][T20518] veth0_macvtap: left promiscuous mode [ 698.882441][T20518] veth1_vlan: left promiscuous mode [ 698.882532][T20518] veth0_vlan: left promiscuous mode [ 699.270171][T19822] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 699.548313][T21333] FAULT_INJECTION: forcing a failure. [ 699.548313][T21333] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 699.548354][T21333] CPU: 0 UID: 0 PID: 21333 Comm: syz.4.3627 Not tainted syzkaller #0 PREEMPT(full) [ 699.548379][T21333] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026 [ 699.548392][T21333] Call Trace: [ 699.548400][T21333] [ 699.548409][T21333] dump_stack_lvl+0xe8/0x150 [ 699.548449][T21333] should_fail_ex+0x410/0x560 [ 699.548479][T21333] _copy_from_user+0x2d/0xb0 [ 699.548574][T21333] ___sys_sendmsg+0x1c6/0x360 [ 699.548602][T21333] ? __lock_acquire+0x747/0x2de0 [ 699.548629][T21333] ? __pfx____sys_sendmsg+0x10/0x10 [ 699.548692][T21333] ? __fget_files+0x2a/0x420 [ 699.548721][T21333] ? __fget_files+0x3a2/0x420 [ 699.548762][T21333] __x64_sys_sendmsg+0x1b1/0x290 [ 699.548794][T21333] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 699.548845][T21333] do_syscall_64+0x166/0x520 [ 699.548868][T21333] ? trace_irq_disable+0x3b/0x140 [ 699.548890][T21333] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 699.548912][T21333] ? clear_bhb_loop+0x70/0xc0 [ 699.548939][T21333] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 699.548961][T21333] RIP: 0033:0x7ff231d9e159 [ 699.548981][T21333] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 699.548999][T21333] RSP: 002b:00007ff232c52028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 699.549022][T21333] RAX: ffffffffffffffda RBX: 00007ff232026090 RCX: 00007ff231d9e159 [ 699.549039][T21333] RDX: 00000000040040d4 RSI: 0000200000000200 RDI: 0000000000000005 [ 699.549053][T21333] RBP: 00007ff232c52090 R08: 0000000000000000 R09: 0000000000000000 [ 699.549067][T21333] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 699.549079][T21333] R13: 00007ff232026128 R14: 00007ff232026090 R15: 00007ffd71fb54d8 [ 699.549113][T21333] [ 700.706938][T20513] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 700.816966][ T6802] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 700.936935][ T6802] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 701.031877][ T6802] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 701.032775][ T6802] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 701.054333][T20513] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 701.074422][T21352] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3632'. [ 702.012505][T21360] 8021q: VLANs not supported on ip6gre0 [ 702.057174][T21356] team0: left promiscuous mode [ 702.057196][T21356] team_slave_0: left promiscuous mode [ 702.058035][T21356] team_slave_1: left promiscuous mode [ 702.271982][T20513] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 702.547742][T21381] gretap1: entered promiscuous mode [ 702.596215][ T6789] net_ratelimit: 4 callbacks suppressed [ 702.596235][ T6789] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 702.776800][T20505] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 702.804533][T21377] syzkaller0: entered promiscuous mode [ 702.804554][T21377] syzkaller0: entered allmulticast mode [ 703.338130][T21404] netlink: 'syz.4.3641': attribute type 8 has an invalid length. [ 703.446205][T20513] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 703.569413][T19941] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 703.686171][T20505] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 703.710258][T20518] IPVS: stop unused estimator thread 0... [ 703.898532][T20505] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 704.047644][T20505] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 704.050683][T21433] syzkaller0: entered promiscuous mode [ 704.050729][T21433] syzkaller0: entered allmulticast mode [ 704.099818][T21433] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3646'. [ 704.762333][T21447] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3650'. [ 704.786169][T18454] Bluetooth: hci4: command 0x0406 tx timeout [ 705.172009][T21447] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 705.175091][T21447] batadv1: entered allmulticast mode [ 705.195700][T21447] team0: Port device batadv1 added [ 705.206307][T19941] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 705.317928][T20518] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 705.427278][T20517] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 705.981555][T19941] tipc: Subscription rejected, illegal request [ 705.991683][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 706.395703][T21491] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3666'. [ 706.410184][T21491] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3666'. [ 706.425668][T21491] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3666'. [ 706.437055][T21491] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3666'. [ 706.438262][T21491] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3666'. [ 706.438715][T21491] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3666'. [ 706.440605][T21491] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3666'. [ 706.440990][T21491] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3666'. [ 707.686251][T20517] net_ratelimit: 22 callbacks suppressed [ 707.686279][T20517] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 707.749252][T21541] tipc: Started in network mode [ 707.749283][T21541] tipc: Node identity ac14140f, cluster identity 4711 [ 707.812502][T21541] tipc: New replicast peer: 255.255.255.255 [ 707.813511][T21541] tipc: Enabled bearer , priority 10 [ 707.818692][T20505] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 707.934336][T20505] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 708.037235][T20518] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 708.154519][T20513] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 708.259144][T19941] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 708.370403][T20513] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 708.480710][T20513] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 708.617975][ T6802] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 708.627797][T19822] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 708.748533][T21554] xt_cgroup: path and classid specified [ 708.868377][T21560] netlink: 'syz.1.3686': attribute type 3 has an invalid length. [ 709.205939][ T25] tipc: Node number set to 2886997007 [ 709.253144][T21571] __nla_validate_parse: 63 callbacks suppressed [ 709.253161][T21571] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3689'. [ 709.401247][T21577] netlink: 'syz.4.3691': attribute type 34 has an invalid length. [ 709.401266][T21577] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3691'. [ 709.712449][T21577] bond5: option lacp_strict: invalid value (64) [ 709.816952][T21577] bond5 (unregistering): Released all slaves [ 710.903769][T21603] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3698'. [ 710.938933][T21600] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 710.982684][T21600] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 710.993539][T21609] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3696'. [ 711.021544][T21600] bond0 (unregistering): Released all slaves [ 711.071938][T21611] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3696'. [ 711.484315][T21622] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3701'. [ 711.498151][T21622] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3701'. [ 711.498470][T21622] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3701'. [ 711.499195][T21622] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3701'. [ 711.499428][T21622] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3701'. [ 712.009091][T21628] lo speed is unknown, defaulting to 1000 [ 712.307299][T21644] block nbd0: Unsupported socket: should be TCP or UNIX. [ 712.650025][T21654] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 712.798244][ T6789] net_ratelimit: 26 callbacks suppressed [ 712.798267][ T6789] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 712.949468][T20517] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 713.038620][T21665] syzkaller0: entered promiscuous mode [ 713.038968][T21665] syzkaller0: entered allmulticast mode [ 713.079049][T20513] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 713.186216][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 713.514072][T21677] netlink: 'syz.4.3720': attribute type 7 has an invalid length. [ 713.514091][T21677] netlink: 'syz.4.3720': attribute type 8 has an invalid length. [ 713.514102][T21677] netlink: 'syz.4.3720': attribute type 13 has an invalid length. [ 714.136772][T20517] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 714.262291][T20513] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 714.366344][ T6789] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 714.509866][T20513] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 714.617266][T20513] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 714.728392][T20518] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 714.786322][T19822] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 715.177646][T21711] __nla_validate_parse: 4 callbacks suppressed [ 715.177666][T21711] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3731'. [ 715.772762][T21724] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3735'. [ 716.098679][T21736] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3738'. [ 716.136674][T21738] netlink: 'syz.4.3736': attribute type 8 has an invalid length. [ 716.244507][T21736] veth5: entered allmulticast mode [ 716.714165][T21753] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3741'. [ 716.811755][T21753] netlink: 'syz.2.3741': attribute type 3 has an invalid length. [ 716.811777][T21753] netlink: 'syz.2.3741': attribute type 2 has an invalid length. [ 716.811790][T21753] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3741'. [ 716.811864][T21749] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3742'. [ 716.976387][T21761] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3746'. [ 716.976413][T21761] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3746'. [ 717.019956][T21761] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3746'. [ 717.019978][T21761] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3746'. [ 717.392709][T21769] syzkaller0: entered promiscuous mode [ 717.392733][T21769] syzkaller0: entered allmulticast mode [ 717.420189][T21768] syzkaller0: entered promiscuous mode [ 717.420208][T21768] syzkaller0: entered allmulticast mode [ 717.867590][T21793] FAULT_INJECTION: forcing a failure. [ 717.867590][T21793] name failslab, interval 1, probability 0, space 0, times 0 [ 717.867623][T21793] CPU: 0 UID: 0 PID: 21793 Comm: syz.1.3754 Not tainted syzkaller #0 PREEMPT(full) [ 717.867646][T21793] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026 [ 717.867658][T21793] Call Trace: [ 717.867666][T21793] [ 717.867675][T21793] dump_stack_lvl+0xe8/0x150 [ 717.867708][T21793] should_fail_ex+0x410/0x560 [ 717.867737][T21793] should_failslab+0xa8/0x100 [ 717.867764][T21793] __kmalloc_cache_noprof+0xa3/0x600 [ 717.867784][T21793] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 717.867883][T21793] ? __request_module+0x2d0/0x630 [ 717.867907][T21793] ? __request_module+0x2d0/0x630 [ 717.867938][T21793] __request_module+0x2d0/0x630 [ 717.867966][T21793] ? rtnl_link_ops_get+0x23/0x250 [ 717.868025][T21793] ? __pfx___request_module+0x10/0x10 [ 717.868062][T21793] ? rtnl_link_ops_get+0x23/0x250 [ 717.868085][T21793] ? rtnl_link_ops_get+0x23/0x250 [ 717.868112][T21793] ? rtnl_link_ops_get+0x215/0x250 [ 717.868140][T21793] rtnl_newlink+0x66c/0x1c30 [ 717.868167][T21793] ? kasan_save_track+0x4f/0x80 [ 717.868187][T21793] ? kasan_save_track+0x3e/0x80 [ 717.868206][T21793] ? kasan_save_free_info+0x40/0x50 [ 717.868240][T21793] ? __kasan_slab_free+0x5c/0x80 [ 717.868261][T21793] ? kmem_cache_free+0x182/0x650 [ 717.868280][T21793] ? nlmon_xmit+0xb0/0x100 [ 717.868329][T21793] ? dev_hard_start_xmit+0x2cd/0x830 [ 717.868353][T21793] ? __dev_queue_xmit+0x14c0/0x3820 [ 717.868382][T21793] ? __pfx_rtnl_newlink+0x10/0x10 [ 717.868404][T21793] ? sock_sendmsg_nosec+0x13a/0x180 [ 717.868434][T21793] ? ____sys_sendmsg+0x54e/0x850 [ 717.868458][T21793] ? ___sys_sendmsg+0x2a5/0x360 [ 717.868481][T21793] ? __x64_sys_sendmsg+0x1b1/0x290 [ 717.868504][T21793] ? do_syscall_64+0x166/0x520 [ 717.868523][T21793] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 717.868577][T21793] ? kasan_quarantine_put+0xbb/0x1f0 [ 717.868597][T21793] ? lockdep_hardirqs_on+0x7b/0x110 [ 717.868622][T21793] ? nlmon_xmit+0xb0/0x100 [ 717.868641][T21793] ? kmem_cache_free+0x182/0x650 [ 717.868672][T21793] ? __lock_acquire+0x747/0x2de0 [ 717.868700][T21793] ? __local_bh_enable_ip+0xd6/0x140 [ 717.868728][T21793] ? lockdep_hardirqs_on+0x7b/0x110 [ 717.868748][T21793] ? __dev_queue_xmit+0x29b/0x3820 [ 717.868775][T21793] ? __local_bh_enable_ip+0xd6/0x140 [ 717.868800][T21793] ? __dev_queue_xmit+0x29b/0x3820 [ 717.868852][T21793] ? __pfx_rtnl_newlink+0x10/0x10 [ 717.868875][T21793] rtnetlink_rcv_msg+0x802/0xc00 [ 717.868902][T21793] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 717.868926][T21793] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 717.868948][T21793] ? ref_tracker_free+0x689/0x830 [ 717.868975][T21793] ? __pfx_ref_tracker_free+0x10/0x10 [ 717.869010][T21793] netlink_rcv_skb+0x226/0x4a0 [ 717.869041][T21793] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 717.869067][T21793] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 717.869109][T21793] ? netlink_deliver_tap+0x2e/0x1b0 [ 717.869138][T21793] ? netlink_deliver_tap+0x2e/0x1b0 [ 717.869173][T21793] netlink_unicast+0x7bd/0x940 [ 717.869210][T21793] netlink_sendmsg+0x813/0xb40 [ 717.869256][T21793] ? __pfx_netlink_sendmsg+0x10/0x10 [ 717.869295][T21793] ? apparmor_socket_sendmsg+0x98/0x360 [ 717.869321][T21793] ? __pfx_netlink_sendmsg+0x10/0x10 [ 717.869349][T21793] sock_sendmsg_nosec+0x13a/0x180 [ 717.869384][T21793] ____sys_sendmsg+0x54e/0x850 [ 717.869416][T21793] ? __pfx_____sys_sendmsg+0x10/0x10 [ 717.869451][T21793] ? import_iovec+0x73/0xa0 [ 717.869480][T21793] ___sys_sendmsg+0x2a5/0x360 [ 717.869505][T21793] ? __lock_acquire+0x747/0x2de0 [ 717.869530][T21793] ? __pfx____sys_sendmsg+0x10/0x10 [ 717.869591][T21793] ? __fget_files+0x2a/0x420 [ 717.869618][T21793] ? __fget_files+0x3a2/0x420 [ 717.869656][T21793] __x64_sys_sendmsg+0x1b1/0x290 [ 717.869686][T21793] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 717.869732][T21793] do_syscall_64+0x166/0x520 [ 717.869754][T21793] ? trace_irq_disable+0x3b/0x140 [ 717.869774][T21793] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 717.869795][T21793] ? clear_bhb_loop+0x70/0xc0 [ 717.869822][T21793] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 717.869842][T21793] RIP: 0033:0x7f5f0499e159 [ 717.869862][T21793] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 717.869878][T21793] RSP: 002b:00007f5f058c5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 717.869900][T21793] RAX: ffffffffffffffda RBX: 00007f5f04c26090 RCX: 00007f5f0499e159 [ 717.869913][T21793] RDX: 00000000040040d4 RSI: 0000200000000200 RDI: 0000000000000005 [ 717.869926][T21793] RBP: 00007f5f058c5090 R08: 0000000000000000 R09: 0000000000000000 [ 717.869939][T21793] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 717.869951][T21793] R13: 00007f5f04c26128 R14: 00007f5f04c26090 R15: 00007ffebf141f98 [ 717.869982][T21793] [ 717.892375][T10552] net_ratelimit: 19 callbacks suppressed [ 717.892391][T10552] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 718.329456][T20518] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 718.425094][T21800] netlink: 'syz.4.3755': attribute type 1 has an invalid length. [ 718.727430][T20513] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 719.020551][T21800] 8021q: adding VLAN 0 to HW filter on device bond6 [ 719.056491][T20505] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 719.166111][T19941] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 719.275968][T19941] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 719.386388][T20505] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 719.595688][T21819] bridge2: entered promiscuous mode [ 719.736638][T20513] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 719.887602][T20517] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 719.997447][T20517] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 720.503439][T21845] netlink: 'syz.0.3765': attribute type 15 has an invalid length. [ 720.780414][T21852] syzkaller0: entered promiscuous mode [ 720.780439][T21852] syzkaller0: entered allmulticast mode [ 720.830286][T21852] __nla_validate_parse: 3 callbacks suppressed [ 720.830305][T21852] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3766'. [ 721.163698][T21870] netlink: 'syz.3.3771': attribute type 46 has an invalid length. [ 721.379927][T21872] netlink: 136 bytes leftover after parsing attributes in process `syz.2.3772'. [ 721.439757][T21874] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3770'. [ 721.439791][T21874] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3770'. [ 721.549420][T21874] bridge0: entered promiscuous mode [ 721.563441][T21874] syz_tun: entered promiscuous mode [ 721.571535][T21874] hsr1: Slave A (bridge0) is not up; please bring it up to get a fully working HSR network [ 721.571557][T21874] hsr1: Slave B (syz_tun) is not up; please bring it up to get a fully working HSR network [ 721.892403][T21891] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3777'. [ 722.986332][T20517] net_ratelimit: 17 callbacks suppressed [ 722.986356][T20517] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 723.098165][T19941] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 723.211040][T20517] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 723.317394][T19941] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 723.430261][T20503] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 723.452597][T20520] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 723.557399][T20517] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 723.560774][T21922] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3785'. [ 723.562469][T21921] ip_tables: iptables: counters copy to user failed while replacing table [ 723.672925][T20517] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 723.777592][T20503] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 723.913705][T21924] RDS: rds_bind could not find a transport for ::a:2800:0, load rds_tcp or rds_rdma? [ 724.290792][T21936] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3790'. [ 724.372352][T21943] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3790'. [ 724.407989][T21944] syzkaller0: entered promiscuous mode [ 724.408010][T21944] syzkaller0: entered allmulticast mode [ 724.981929][T21959] netlink: 'syz.2.3795': attribute type 1 has an invalid length. [ 724.982354][T21960] netlink: 'syz.2.3795': attribute type 1 has an invalid length. [ 725.606300][T21959] 8021q: adding VLAN 0 to HW filter on device bond0 [ 725.649591][T21961] bond0: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 725.650407][T21966] bond0: entered promiscuous mode [ 725.650426][T21966] bond0: entered allmulticast mode [ 725.683675][T21970] macvlan2: entered promiscuous mode [ 725.683693][T21970] macvlan2: entered allmulticast mode [ 725.684853][T21970] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 725.728571][T21972] netlink: 164 bytes leftover after parsing attributes in process `syz.1.3799'. [ 725.952462][T21989] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3802'. [ 725.980731][T21987] netlink: 'syz.4.3801': attribute type 7 has an invalid length. [ 725.982112][T21987] netlink: 'syz.4.3801': attribute type 8 has an invalid length. [ 726.025916][T21989] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3802'. [ 726.071267][T21992] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3803'. [ 727.266174][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 727.604752][T22016] xt_connbytes: Forcing CT accounting to be enabled [ 727.778658][T22021] netlink: 'syz.3.3813': attribute type 10 has an invalid length. [ 727.816160][T22021] team0 (unregistering): Port device team_slave_0 removed [ 727.840622][T22021] team0 (unregistering): Port device team_slave_1 removed [ 727.852005][T22026] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3813'. [ 728.017003][T19941] net_ratelimit: 20 callbacks suppressed [ 728.017023][T19941] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 728.084589][T22034] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3817'. [ 728.084617][T22034] openvswitch: netlink: Missing key (keys=c0, expected=1100) [ 728.126547][T20503] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 728.206353][T22037] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3818'. [ 728.286410][T22037] macvtap1: entered promiscuous mode [ 728.286435][T22037] syz_tun: entered promiscuous mode [ 728.295265][T22037] macvtap1: entered allmulticast mode [ 728.295284][T22037] syz_tun: entered allmulticast mode [ 728.329163][ T6793] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 728.363016][T22040] syz_tun: left allmulticast mode [ 728.363346][T22040] syz_tun: left promiscuous mode [ 728.364977][T22040] macvtap1: left promiscuous mode [ 728.365158][T22040] macvtap1: left allmulticast mode [ 728.608092][T22038] 8021q: adding VLAN 0 to HW filter on device .` [ 728.900657][T22038] 8021q: adding VLAN 0 to HW filter on device bond2 [ 728.932260][T22038] 8021q: adding VLAN 0 to HW filter on device bond0 [ 728.966233][T22038] 8021q: adding VLAN 0 to HW filter on device bond3 [ 728.975689][T22038] 8021q: adding VLAN 0 to HW filter on device bond5 [ 728.999265][T20520] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 729.036142][T20520] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 729.045810][ T31] audit: type=1804 audit(1789545571.370:24): pid=22065 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.3825" name="/newroot/135/memory.events" dev="tmpfs" ino=713 res=1 errno=0 [ 729.046102][ T31] audit: type=1800 audit(1789545571.380:25): pid=22065 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.3825" name="memory.events" dev="tmpfs" ino=713 res=0 errno=0 [ 729.057393][ T31] audit: type=1804 audit(1789545571.380:26): pid=22065 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.3825" name="/newroot/135/memory.events" dev="tmpfs" ino=713 res=1 errno=0 [ 729.148027][ T6802] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 729.171417][T20517] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 729.240529][T20503] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 729.269509][T22069] netlink: 'syz.0.3827': attribute type 32 has an invalid length. [ 729.287928][ T6802] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 729.411833][T20503] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 729.497727][T22071] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3829'. [ 729.574822][T22077] IPVS: set_ctl: invalid protocol: 4 172.20.20.46:20004 [ 729.724621][T22085] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3832'. [ 729.724647][T22085] netlink: 'syz.3.3832': attribute type 1 has an invalid length. [ 729.765576][T22085] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3832'. [ 729.954649][T22089] netlink: 60 bytes leftover after parsing attributes in process `syz.3.3832'. [ 730.089966][T22089] bond1: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 730.092971][T22089] bond1 (unregistering): Released all slaves [ 731.027754][T22113] __nla_validate_parse: 3 callbacks suppressed [ 731.027775][T22113] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3837'. [ 731.607521][T22113] hsr_slave_0: left promiscuous mode [ 731.609277][T22113] hsr_slave_1: left promiscuous mode [ 731.837344][T22120] netlink: 136 bytes leftover after parsing attributes in process `syz.1.3840'. [ 732.435738][T22127] gretap2: entered promiscuous mode [ 733.109202][T10563] net_ratelimit: 14 callbacks suppressed [ 733.109223][T10563] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 733.276166][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 733.341000][T20517] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 733.410320][T22155] syzkaller0: entered promiscuous mode [ 733.410529][T22155] syzkaller0: entered allmulticast mode [ 733.476307][T20517] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 733.596011][T20517] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 733.725790][T22164] netlink: 'syz.4.3852': attribute type 2 has an invalid length. [ 733.731104][T20503] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 733.871813][T20520] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 733.980006][T20503] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 734.106764][T20513] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 734.217550][ T6802] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 734.308308][T19941] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 734.657093][T22199] netlink: 116 bytes leftover after parsing attributes in process `syz.0.3862'. [ 734.748782][T22203] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3862'. [ 734.748815][T22203] bond0: ARP target 0.0.0.2 is already present [ 734.748834][T22203] bond0: option arp_ip_target: invalid value (33554432) [ 735.000539][T22217] netlink: 108 bytes leftover after parsing attributes in process `syz.2.3863'. [ 735.950570][T22208] 8021q: adding VLAN 0 to HW filter on device bond1 [ 736.139861][T22208] 8021q: adding VLAN 0 to HW filter on device bond2 [ 736.394496][T22208] bond0: left promiscuous mode [ 736.395679][T22208] 8021q: adding VLAN 0 to HW filter on device bond0 [ 736.411301][T22208] gretap2: left promiscuous mode [ 736.427886][T22208] 8021q: adding VLAN 0 to HW filter on device bond3 [ 736.480985][T20503] bond0: (slave veth0_to_bond): link status definitely up, 10000 Mbps full duplex [ 736.481228][T20503] bond0: (slave veth0_to_bond): making interface the new active one [ 736.481245][T20503] veth0_to_bond: entered allmulticast mode [ 736.484650][T20503] bond0: active interface up! [ 736.605087][T22234] syzkaller1: entered promiscuous mode [ 736.605106][T22234] syzkaller1: entered allmulticast mode [ 737.036523][T22250] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3873'. [ 737.591999][T22274] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3880'. [ 737.617001][T22275] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3880'. [ 737.955542][T22297] netlink: 'syz.2.3883': attribute type 1 has an invalid length. [ 737.968417][T22301] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3887'. [ 737.971494][T22300] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3886'. [ 738.026401][T22302] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3887'. [ 738.137102][T20518] net_ratelimit: 19 callbacks suppressed [ 738.137124][T20518] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 738.182173][T22297] netlink: 84 bytes leftover after parsing attributes in process `syz.2.3883'. [ 738.242770][T22303] netlink: 'syz.2.3883': attribute type 1 has an invalid length. [ 738.258716][T22306] lo speed is unknown, defaulting to 1000 [ 738.341269][T22312] netlink: 'syz.3.3889': attribute type 4 has an invalid length. [ 738.478818][T20517] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 738.586786][T19941] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 738.696194][T20518] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 738.807548][T20517] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 738.918094][T20517] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 739.027813][ T6802] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 739.055498][T22321] netlink: 64587 bytes leftover after parsing attributes in process `syz.1.3893'. [ 739.137543][T19941] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 739.186863][T19822] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 739.255803][T19941] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 739.678852][T22345] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3898'. [ 739.680620][T22348] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3896'. [ 739.879248][T22335] lo speed is unknown, defaulting to 1000 [ 740.397677][T22381] netlink: 'syz.3.3889': attribute type 4 has an invalid length. [ 740.556207][T20520] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 740.559845][T20503] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 740.559885][T20503] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 740.559919][T20503] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 740.594375][T22368] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 741.987940][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 742.511197][T22427] netlink: 'syz.4.3912': attribute type 6 has an invalid length. [ 742.526477][T22425] netlink: 'syz.2.3911': attribute type 2 has an invalid length. [ 742.526501][T22425] netlink: 'syz.2.3911': attribute type 2 has an invalid length. [ 742.701294][T22428] ip6t_srh: unknown srh match flags 4000 [ 743.315426][T20513] net_ratelimit: 12 callbacks suppressed [ 743.315466][T20513] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 743.414935][T22449] batman_adv: batadv0: Adding interface: gretap1 [ 743.414951][T22449] batman_adv: batadv0: The MTU of interface gretap1 is too small (1396) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 743.414981][T22449] batman_adv: batadv0: Interface activated: gretap1 [ 743.476770][T20505] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 743.588770][ T6802] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 743.706305][T20513] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 743.809031][T22461] xt_CT: You must specify a L4 protocol and not use inversions on it [ 743.816893][T19941] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 743.926457][T19941] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 744.037944][ T6802] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 744.157223][T20505] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 744.208837][T22476] __nla_validate_parse: 1 callbacks suppressed [ 744.208855][T22476] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3923'. [ 744.268299][ T6802] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 744.377798][T20513] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 744.538862][T22481] x_tables: ip_tables: osf match: only valid for protocol 6 [ 745.464834][T22510] Cannot find add_set index 0 as target [ 745.484576][T22510] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3932'. [ 745.645571][T22516] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3935'. [ 745.789421][T22529] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3934'. [ 746.332338][T22534] 8021q: adding VLAN 0 to HW filter on device bond0 [ 746.633217][T20513] bridge0: port 1(bridge_slave_0) entered blocking state [ 746.633318][T20513] bridge0: port 1(bridge_slave_0) entered forwarding state [ 746.658599][T20513] bridge0: port 2(bridge_slave_1) entered blocking state [ 746.658692][T20513] bridge0: port 2(bridge_slave_1) entered forwarding state [ 746.990016][T22550] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3942'. [ 747.287219][T22514] ------------[ cut here ]------------ [ 747.287236][T22514] !chanctx_conf [ 747.287249][T22514] WARNING: net/mac80211/tx.c:6509 at ieee80211_tx_skb_tid+0x3b8/0x480, CPU#0: syz.2.3934/22514 [ 747.307437][T22514] Modules linked in: [ 747.311352][T22514] CPU: 0 UID: 0 PID: 22514 Comm: syz.2.3934 Not tainted syzkaller #0 PREEMPT(full) [ 747.320764][T22514] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026 [ 747.330879][T22514] RIP: 0010:ieee80211_tx_skb_tid+0x3b8/0x480 [ 747.336961][T22514] Code: 0c 43 f6 e9 b1 fe ff ff e8 35 61 67 f6 90 0f 0b 90 e9 e2 fe ff ff e8 27 61 67 f6 90 0f 0b 90 e9 2a fe ff ff e8 19 61 67 f6 90 <0f> 0b 90 e8 10 b2 fd ff 31 ff 48 8b 34 24 ba 02 00 00 00 48 83 c4 [ 747.356661][T22514] RSP: 0018:ffffc90005897318 EFLAGS: 00010287 [ 747.362776][T22514] RAX: ffffffff8b606997 RBX: ffffffff8b60660f RCX: 0000000000080000 [ 747.370816][T22514] RDX: ffffc90006601000 RSI: 0000000000041dbd RDI: 0000000000041dbe [ 747.378837][T22514] RBP: 00000000ffffffff R08: ffffffff8b60660f R09: 0000000000000000 [ 747.386894][T22514] R10: dffffc0000000000 R11: ffffed100fce4e8e R12: ffff888044bacec0 [ 747.394884][T22514] R13: 0000000000000000 R14: 0000000000000001 R15: dffffc0000000000 [ 747.402896][T22514] FS: 00007efeaf9806c0(0000) GS:ffff888124cd1000(0000) knlGS:0000000000000000 [ 747.411875][T22514] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 747.418509][T22514] CR2: 00007ff232c72ff8 CR3: 000000003dcb8000 CR4: 00000000003526f0 [ 747.426552][T22514] Call Trace: [ 747.429863][T22514] [ 747.432818][T22514] mesh_plink_frame_tx+0x73d/0xc30 [ 747.438058][T22514] ? __pfx_mesh_plink_frame_tx+0x10/0x10 [ 747.443718][T22514] ? mesh_plink_timer+0x400/0x850 [ 747.448801][T22514] mesh_plink_deactivate+0x18b/0x2f0 [ 747.454114][T22514] mesh_sta_cleanup+0x42/0x150 [ 747.458991][T22514] cleanup_single_sta+0x3ff/0x660 [ 747.464246][T22514] __sta_info_flush+0x5bb/0x700 [ 747.469175][T22514] ? __pfx___sta_info_flush+0x10/0x10 [ 747.474593][T22514] ieee80211_do_stop+0x3cd/0x2410 [ 747.479770][T22514] ? __pfx_ieee80211_do_stop+0x10/0x10 [ 747.485282][T22514] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 747.491164][T22514] ieee80211_stop+0x1ab/0x200 [ 747.495906][T22514] ? __pfx_ieee80211_stop+0x10/0x10 [ 747.501151][T22514] __dev_close_many+0x366/0x6e0 [ 747.506087][T22514] ? kasan_save_track+0x4f/0x80 [ 747.510970][T22514] ? kasan_save_track+0x3e/0x80 [ 747.515906][T22514] ? __pfx___dev_close_many+0x10/0x10 [ 747.521327][T22514] ? __mutex_trylock_common+0x15f/0x270 [ 747.526975][T22514] netif_close_many+0x249/0x660 [ 747.531870][T22514] ? rcu_is_watching+0x16/0xb0 [ 747.536714][T22514] ? __pfx_netif_close_many+0x10/0x10 [ 747.542146][T22514] ? __mutex_lock+0x30b/0x1550 [ 747.546986][T22514] ? rfkill_fill_event+0x29c/0x3f0 [ 747.552176][T22514] netif_close+0x160/0x220 [ 747.556685][T22514] ? __pfx_netif_close+0x10/0x10 [ 747.561664][T22514] ? __pfx___mutex_lock+0x10/0x10 [ 747.566757][T22514] ? do_raw_spin_lock+0x12b/0x2f0 [ 747.571861][T22514] dev_close+0xf7/0x210 [ 747.576187][T22514] cfg80211_shutdown_all_interfaces+0xb0/0x220 [ 747.582466][T22514] ? __pfx_cfg80211_rfkill_set_block+0x10/0x10 [ 747.588730][T22514] cfg80211_rfkill_set_block+0x2d/0x50 [ 747.594252][T22514] rfkill_set_block+0x19f/0x4d0 [ 747.599235][T22514] rfkill_fop_write+0x43b/0x560 [ 747.604151][T22514] ? common_file_perm+0x20e/0x2b0 [ 747.609239][T22514] ? __pfx_rfkill_fop_write+0x10/0x10 [ 747.614634][T22514] ? security_file_permission+0x10/0x260 [ 747.620429][T22514] ? rw_verify_area+0x203/0x4c0 [ 747.625434][T22514] ? __pfx_rfkill_fop_write+0x10/0x10 [ 747.630865][T22514] vfs_write+0x296/0xba0 [ 747.635189][T22514] ? __pfx_vfs_write+0x10/0x10 [ 747.640049][T22514] ? __fget_files+0x2a/0x420 [ 747.644695][T22514] ? __fget_files+0x2a/0x420 [ 747.649347][T22514] ? __fget_files+0x3a2/0x420 [ 747.654064][T22514] ? __fget_files+0x2a/0x420 [ 747.658727][T22514] ksys_write+0x150/0x270 [ 747.663096][T22514] ? __pfx_ksys_write+0x10/0x10 [ 747.668022][T22514] do_syscall_64+0x166/0x520 [ 747.672641][T22514] ? trace_irq_disable+0x3b/0x140 [ 747.677734][T22514] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 747.683831][T22514] ? clear_bhb_loop+0x70/0xc0 [ 747.688573][T22514] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 747.694497][T22514] RIP: 0033:0x7efeaeb9e159 [ 747.698965][T22514] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 747.718628][T22514] RSP: 002b:00007efeaf980028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 747.727103][T22514] RAX: ffffffffffffffda RBX: 00007efeaee25fa0 RCX: 00007efeaeb9e159 [ 747.735103][T22514] RDX: 0000000000000008 RSI: 0000200000000080 RDI: 000000000000000b [ 747.743186][T22514] RBP: 00007efeaec3506b R08: 0000000000000000 R09: 0000000000000000 [ 747.751216][T22514] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 747.759237][T22514] R13: 00007efeaee26038 R14: 00007efeaee25fa0 R15: 00007ffe607d7c58 [ 747.767280][T22514] [ 747.770348][T22514] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 747.777659][T22514] CPU: 0 UID: 0 PID: 22514 Comm: syz.2.3934 Not tainted syzkaller #0 PREEMPT(full) [ 747.787064][T22514] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026 [ 747.797134][T22514] Call Trace: [ 747.800430][T22514] [ 747.803385][T22514] vpanic+0x56d/0xa60 [ 747.807411][T22514] ? __pfx__printk+0x10/0x10 [ 747.812026][T22514] ? __pfx_vpanic+0x10/0x10 [ 747.816565][T22514] ? is_bpf_text_address+0x292/0x2b0 [ 747.821894][T22514] ? is_bpf_text_address+0x26/0x2b0 [ 747.827133][T22514] panic+0xc5/0xd0 [ 747.830895][T22514] ? __pfx_panic+0x10/0x10 [ 747.835403][T22514] __warn+0x315/0x4c0 [ 747.839426][T22514] ? ieee80211_tx_skb_tid+0x3b8/0x480 [ 747.844826][T22514] ? ieee80211_tx_skb_tid+0x3b8/0x480 [ 747.850231][T22514] __report_bug+0x276/0x570 [ 747.854869][T22514] ? ieee80211_tx_skb_tid+0x3b8/0x480 [ 747.860279][T22514] ? __pfx___report_bug+0x10/0x10 [ 747.865346][T22514] ? __lock_acquire+0x747/0x2de0 [ 747.870331][T22514] ? ieee80211_tx_skb_tid+0x3b8/0x480 [ 747.875741][T22514] report_bug+0x16b/0x220 [ 747.880144][T22514] ? ieee80211_tx_skb_tid+0x3b8/0x480 [ 747.885538][T22514] ? ieee80211_tx_skb_tid+0x3ba/0x480 [ 747.890933][T22514] handle_bug+0x9c/0x200 [ 747.895204][T22514] exc_invalid_op+0x1a/0x50 [ 747.899759][T22514] asm_exc_invalid_op+0x1a/0x20 [ 747.904638][T22514] RIP: 0010:ieee80211_tx_skb_tid+0x3b8/0x480 [ 747.910643][T22514] Code: 0c 43 f6 e9 b1 fe ff ff e8 35 61 67 f6 90 0f 0b 90 e9 e2 fe ff ff e8 27 61 67 f6 90 0f 0b 90 e9 2a fe ff ff e8 19 61 67 f6 90 <0f> 0b 90 e8 10 b2 fd ff 31 ff 48 8b 34 24 ba 02 00 00 00 48 83 c4 [ 747.930264][T22514] RSP: 0018:ffffc90005897318 EFLAGS: 00010287 [ 747.936353][T22514] RAX: ffffffff8b606997 RBX: ffffffff8b60660f RCX: 0000000000080000 [ 747.944361][T22514] RDX: ffffc90006601000 RSI: 0000000000041dbd RDI: 0000000000041dbe [ 747.952354][T22514] RBP: 00000000ffffffff R08: ffffffff8b60660f R09: 0000000000000000 [ 747.960349][T22514] R10: dffffc0000000000 R11: ffffed100fce4e8e R12: ffff888044bacec0 [ 747.968348][T22514] R13: 0000000000000000 R14: 0000000000000001 R15: dffffc0000000000 [ 747.976356][T22514] ? ieee80211_tx_skb_tid+0x2f/0x480 [ 747.981690][T22514] ? ieee80211_tx_skb_tid+0x2f/0x480 [ 747.987017][T22514] ? ieee80211_tx_skb_tid+0x3b7/0x480 [ 747.992426][T22514] ? ieee80211_tx_skb_tid+0x3b7/0x480 [ 747.997828][T22514] mesh_plink_frame_tx+0x73d/0xc30 [ 748.002969][T22514] ? __pfx_mesh_plink_frame_tx+0x10/0x10 [ 748.008623][T22514] ? mesh_plink_timer+0x400/0x850 [ 748.013684][T22514] mesh_plink_deactivate+0x18b/0x2f0 [ 748.019000][T22514] mesh_sta_cleanup+0x42/0x150 [ 748.023793][T22514] cleanup_single_sta+0x3ff/0x660 [ 748.028859][T22514] __sta_info_flush+0x5bb/0x700 [ 748.033752][T22514] ? __pfx___sta_info_flush+0x10/0x10 [ 748.039164][T22514] ieee80211_do_stop+0x3cd/0x2410 [ 748.044242][T22514] ? __pfx_ieee80211_do_stop+0x10/0x10 [ 748.049781][T22514] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 748.055632][T22514] ieee80211_stop+0x1ab/0x200 [ 748.060349][T22514] ? __pfx_ieee80211_stop+0x10/0x10 [ 748.065611][T22514] __dev_close_many+0x366/0x6e0 [ 748.070499][T22514] ? kasan_save_track+0x4f/0x80 [ 748.075403][T22514] ? kasan_save_track+0x3e/0x80 [ 748.080292][T22514] ? __pfx___dev_close_many+0x10/0x10 [ 748.085697][T22514] ? __mutex_trylock_common+0x15f/0x270 [ 748.091308][T22514] netif_close_many+0x249/0x660 [ 748.096204][T22514] ? rcu_is_watching+0x16/0xb0 [ 748.101014][T22514] ? __pfx_netif_close_many+0x10/0x10 [ 748.106415][T22514] ? __mutex_lock+0x30b/0x1550 [ 748.111214][T22514] ? rfkill_fill_event+0x29c/0x3f0 [ 748.116361][T22514] netif_close+0x160/0x220 [ 748.120824][T22514] ? __pfx_netif_close+0x10/0x10 [ 748.125790][T22514] ? __pfx___mutex_lock+0x10/0x10 [ 748.130851][T22514] ? do_raw_spin_lock+0x12b/0x2f0 [ 748.135914][T22514] dev_close+0xf7/0x210 [ 748.140113][T22514] cfg80211_shutdown_all_interfaces+0xb0/0x220 [ 748.146321][T22514] ? __pfx_cfg80211_rfkill_set_block+0x10/0x10 [ 748.152622][T22514] cfg80211_rfkill_set_block+0x2d/0x50 [ 748.158131][T22514] rfkill_set_block+0x19f/0x4d0 [ 748.163020][T22514] rfkill_fop_write+0x43b/0x560 [ 748.167906][T22514] ? common_file_perm+0x20e/0x2b0 [ 748.172966][T22514] ? __pfx_rfkill_fop_write+0x10/0x10 [ 748.178374][T22514] ? security_file_permission+0x10/0x260 [ 748.184040][T22514] ? rw_verify_area+0x203/0x4c0 [ 748.188926][T22514] ? __pfx_rfkill_fop_write+0x10/0x10 [ 748.194325][T22514] vfs_write+0x296/0xba0 [ 748.198614][T22514] ? __pfx_vfs_write+0x10/0x10 [ 748.203410][T22514] ? __fget_files+0x2a/0x420 [ 748.208027][T22514] ? __fget_files+0x2a/0x420 [ 748.212670][T22514] ? __fget_files+0x3a2/0x420 [ 748.217377][T22514] ? __fget_files+0x2a/0x420 [ 748.222003][T22514] ksys_write+0x150/0x270 [ 748.226382][T22514] ? __pfx_ksys_write+0x10/0x10 [ 748.231287][T22514] do_syscall_64+0x166/0x520 [ 748.235908][T22514] ? trace_irq_disable+0x3b/0x140 [ 748.240967][T22514] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 748.247053][T22514] ? clear_bhb_loop+0x70/0xc0 [ 748.251758][T22514] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 748.257757][T22514] RIP: 0033:0x7efeaeb9e159 [ 748.262195][T22514] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 748.281817][T22514] RSP: 002b:00007efeaf980028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 748.290254][T22514] RAX: ffffffffffffffda RBX: 00007efeaee25fa0 RCX: 00007efeaeb9e159 [ 748.298247][T22514] RDX: 0000000000000008 RSI: 0000200000000080 RDI: 000000000000000b [ 748.306263][T22514] RBP: 00007efeaec3506b R08: 0000000000000000 R09: 0000000000000000 [ 748.314261][T22514] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 748.322249][T22514] R13: 00007efeaee26038 R14: 00007efeaee25fa0 R15: 00007ffe607d7c58 [ 748.330260][T22514] [ 748.333906][T22514] Kernel Offset: disabled [ 748.338248][T22514] Rebooting in 86400 seconds..