last executing test programs: 45.159300876s ago: executing program 4 (id=3143): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWCHAIN={0x5c, 0x3, 0xa, 0x405, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xa}, @NFTA_HOOK_DEV={0x14, 0x3, 'netdevsim0\x00'}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x84}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000580)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x74, 0x6, 0xa, 0xc05, 0x0, 0x0, {0x5}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x1}]}}}, {0x18, 0x1, 0x0, 0x1, @fwd={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_FWD_SREG_DEV={0x8, 0x1, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x3}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x9c}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="01000000060000000800", @ANYRES32, @ANYBLOB="000000000000e670d60000031c000000000000008e2663bee6ce1b0be34a6b1d87890f877f1f4aaa2ef1634d1ab671e70700d88e2d476e10de19e27f2bc8da0f706c0575ccb90ba91d444444f94977c5c7b1456faf6f40c80e7994449f120b81790040740a8fe89b8cedf240fe162ee8bab9d6ec603278730796f7a4e710059c8fffe854811cd71f827fec8c9cfa5c1d016146c71fb1f6a7c6f2c2b0c06b68e503b3a06eed59", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000740)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) bind$inet6(r1, &(0x7f0000000800)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="06000000040000000800000005"], 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000880)={&(0x7f00000008c0)="97", &(0x7f0000000c00)=""/4096, &(0x7f0000001c00), &(0x7f0000001c40), 0x5, r2}, 0x38) sendto$inet6(r1, &(0x7f0000001d80)='X', 0xfee4, 0x0, &(0x7f0000001dc0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 44.169937328s ago: executing program 4 (id=3149): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001400), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000001440)={'wlan0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x34, r3, 0x7, 0x8000, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_MASTER_SLAVE_CFG={0x5, 0x7, 0x3}]}, 0x34}}, 0x0) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000001480)={0x0, 0x0, &(0x7f00000014c0)={&(0x7f0000001500)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01002abd5400fcdbdf258100000008000300", @ANYRES32=r1], 0x4c}, 0x1, 0x0, 0x0, 0x4008001}, 0x20000014) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000740), r4) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r4, &(0x7f0000000780)={0x0, 0x300, &(0x7f00000007c0)={&(0x7f0000000800)={0x40, r5, 0x7, 0x2, 0x0, {}, [@ETHTOOL_A_LINKMODES_OURS={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_SPEED={0x8, 0x5, 0x2}]}, 0x40}, 0x1, 0x3000000, 0x0, 0x4060850}, 0x400d4) sendmsg$AUDIT_ADD_RULE(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000280)={0x434, 0x3f3, 0x8, 0x70bd2a, 0x25dfdbfc, {0x10, 0x1, 0x37, [0xc0c, 0x4, 0x5, 0xffffff81, 0x0, 0xf20, 0x3, 0x2, 0x8, 0x1, 0xfffffff3, 0x3, 0x6, 0x43222482, 0x8001, 0x3, 0x0, 0x1, 0x1, 0x200, 0x8, 0xff, 0xd495, 0x7ff, 0x100, 0x6, 0xd, 0x3, 0x6, 0x2, 0x8, 0x0, 0xffff, 0x6, 0xa, 0xffff8000, 0x2, 0x9, 0xffffffff, 0xa9, 0x1, 0x1, 0xb, 0xd93, 0x200, 0x1, 0x7, 0x101, 0x3, 0x5040, 0x9, 0x5, 0x1, 0x7fff, 0x9, 0xa, 0x3, 0x9, 0x7, 0x293, 0x0, 0x1, 0xffffffff, 0x8], [0x5, 0x3, 0x4, 0x6, 0x8, 0xfffff8a2, 0x9, 0x3, 0x1, 0x2, 0x1, 0x7f, 0x0, 0x6, 0x9, 0x9, 0x7, 0xc, 0x10000, 0x6e2, 0x7, 0x6, 0x8, 0x5, 0x8001, 0x7, 0x2, 0x7ff, 0x100, 0x7, 0x9, 0x8, 0xeb, 0xaa5a, 0x9, 0x9, 0x40, 0xc, 0x2, 0x9, 0xe, 0x401, 0x3, 0x1, 0x2, 0x1, 0x4, 0xe, 0x80000000, 0x81, 0x8001, 0x9, 0x0, 0x1, 0xfffffbff, 0x4, 0x401, 0x7, 0xd3, 0x2, 0x4, 0xffffffff, 0x81, 0x4], [0xffd4, 0x4, 0x4, 0x46802d93, 0x168400, 0x2, 0x10001, 0x80, 0x8cc, 0x4ad, 0xa777, 0x6, 0xb, 0x4da2, 0x4, 0xd7, 0x1000, 0x8a, 0x8, 0x6, 0x2, 0x4, 0x75, 0x0, 0xffff, 0x80000001, 0x3, 0x6, 0x6, 0x4, 0x6, 0x4, 0x8, 0xe, 0x7, 0x7, 0x1, 0xcc, 0x7, 0x200, 0x1, 0x1, 0x7ff, 0x84e3, 0x80000000, 0x9, 0x4, 0x401, 0xdc, 0xfffffffa, 0x0, 0x1aa, 0xff1d, 0xfffffffd, 0xfffff801, 0x5, 0x2, 0x3, 0x80000000, 0xa, 0x1, 0x8, 0x150f, 0x3670], [0x40, 0xdc, 0x0, 0x4, 0x9, 0x6, 0x6, 0x9, 0x17, 0x1, 0x5, 0x972, 0x7, 0x3, 0x1, 0x78da, 0x1, 0xc45, 0x2, 0x80000001, 0x1b, 0x41, 0x6, 0x795b8fcd, 0x2, 0x10001, 0xd87, 0x6, 0x5, 0x3, 0x9, 0x9, 0x5, 0x3, 0x7, 0x2, 0x7ff, 0x3, 0x10001, 0x7, 0xa, 0x2, 0x3, 0x1, 0x8, 0x400, 0x4, 0x8, 0x9, 0xa, 0x2, 0x3, 0x100, 0x7, 0x6, 0xffff, 0x101, 0x80000000, 0x7, 0x8001, 0x10, 0x7a9, 0x7fff], 0x12, ['nl80211\x00', 'nl80211\x00', '\xb4\x00']}}, 0x434}, 0x1, 0x0, 0x0, 0xc014}, 0x2400c040) sendmsg$NL80211_CMD_PROBE_MESH_LINK(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x6c, r0, 0x1, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0xf571, 0x7e}}}}, [@NL80211_ATTR_FRAME={0x14, 0x33, @ctrl_frame=@rts={{}, {}, @device_b}}, @NL80211_ATTR_FRAME={0x14, 0x33, @ctrl_frame=@cf_end_cf_ack={{}, {0x9}, @broadcast, @device_b}}, @NL80211_ATTR_FRAME={0x22, 0x33, @mgmt_frame=@deauth={{{0x0, 0x0, 0xc, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x4}, @broadcast, @broadcast, @initial, {0x6, 0x1}, @value=@ver_80211n={0x0, 0x1, 0x3, 0x3, 0x0, 0x1}}, 0x2c, @void}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4}, 0x1) 43.850221736s ago: executing program 4 (id=3150): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0a00000004000000080000000a"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="060000000400000004000000000100"], 0x50) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000a80)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000c00)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x10}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xc8}, 0x40) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000d00)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000d40)={0xc, 0x8, &(0x7f0000000e00)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f0000000e40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000f00)={r3, 0x3e8, 0xf, 0x0, &(0x7f0000000f80)="c1df0600000200000000000000a887", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 42.365734545s ago: executing program 4 (id=3154): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) close(r0) 41.991024679s ago: executing program 4 (id=3157): r0 = socket$inet(0x2, 0x3, 0x5) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r0, 0xc0385868, &(0x7f0000000100)={r0, &(0x7f0000000000)='\x00', 0x200, &(0x7f0000000040)={@_ha_fsid={[0x2c, 0x91e]}, {0x2, 0x7, 0x1, 0x2}}, 0x800, &(0x7f0000000080), &(0x7f00000000c0)=0x94df21c}) write$cgroup_netprio_ifpriomap(r1, &(0x7f0000000140)={'veth1_to_batadv', 0x32, 0x35}, 0x12) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x150}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1400000010000100000000000000000000000a0020000000000a01000000000000000000050000000900010073797a300000000064000000120a01000000000000000000050000000900010073797a30000000000900020073797a3100000000080003000000000630000480080001000000123414000280"], 0xb0}, 0x1, 0x0, 0x0, 0x20004081}, 0x40800) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000004c0)={'gre0\x00', &(0x7f0000000500)={'syztnl2\x00', 0x0, 0x2100, 0x0, 0xfffffffd, 0xfffffffc, {{0x5, 0x4, 0x0, 0x1, 0x14, 0x68, 0x0, 0x3, 0x2f, 0x0, @multicast2, @rand_addr=0x64010101}}}}) 41.216883427s ago: executing program 4 (id=3160): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x3, 0x1c, &(0x7f0000000280)=ANY=[@ANYBLOB="bf16000000000000b7020000300000007b2af8ff000000007b2af0ff000000007b2ae8ff000000007b2ae0ff000000007b2ad8ff000000007b2ad0ff000000007b2ac8ff000000007b2ac0ff00000000b702000002000000732ac0ff00000000b702000001000000632ac4ff00000000180200000a0000010000000000000000632accff00000000180200000a0000020000000000000000632ac0ff00000000bf61000000000000bfa200000000000007020000c0ffffffb703000040000000b7040000000000008500000045000000b70000000200000095"], &(0x7f0000000380)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000440)="0000000000002d9d8aaf5dc79048", 0x0, 0x8ce3, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x8040}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="2c0000007800010402000000000000000700000064000000140001"], 0x2c}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f0000000480), 0x40000000000009f, 0x0) socket$kcm(0x10, 0x2, 0x4) r2 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000600)) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x81000000) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000640)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000680)=ANY=[], 0x32600) r4 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000001080)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000001100), 0x318, 0x0) recvmmsg(r5, &(0x7f0000001140), 0x10106, 0x2, 0x0) r7 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r6, &(0x7f0000001180)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r4, &(0x7f00000011c0)={0xa0000001}) ppoll(&(0x7f0000001200)=[{r7, 0x1}], 0x1, 0x0, 0x0, 0x0) epoll_wait(r7, &(0x7f0000001240)=[{}], 0x1, 0xffffffff) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e3, &(0x7f00000006c0)={@tcp, r3}) socket$igmp(0x2, 0x3, 0x2) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)=@newtaction={0x4dc, 0x30, 0xffffffffffffffff, 0x0, 0x40002, {}, [{0x4c8, 0x1, [@m_bpf={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x64, 0x7, 0x8, 0x1}}, @TCA_ACT_BPF_FD={0x8}]}, {0x4}, {0xc}, {0xc}}}, @m_police={0x478, 0x2, 0x0, 0x0, {{0xb}, {0x44c, 0x2, 0x0, 0x1, [[@TCA_POLICE_AVRATE={0x8, 0x4, 0x8}], [], [@TCA_POLICE_RATE={0x404, 0x2, [0x6, 0x1ff, 0x4835, 0x4c30, 0x8, 0x8, 0xffffff68, 0x1000000, 0x7, 0x1d, 0x8000, 0xd3d9, 0x2, 0x82fd, 0x3, 0x8000, 0x7f, 0x401, 0x800, 0x2, 0xe3a2, 0x2, 0x9, 0x1, 0x401, 0x400, 0x1855af6b, 0xff, 0xfffffffa, 0xf5, 0xffff70f3, 0x8, 0xfff, 0x6, 0x8, 0x7, 0x0, 0xf61, 0x8, 0x80000000, 0x5, 0xc2, 0x14c6, 0x4, 0x2, 0xfffff800, 0x3d3, 0x4, 0x0, 0x1, 0x163af427, 0x6, 0xfffffff8, 0xffff5f90, 0x9, 0x5, 0x6, 0xca41, 0x4, 0xffffffff, 0x7, 0x80000001, 0x7, 0x6, 0x80, 0x3, 0x9, 0x9, 0x8, 0x40, 0xe5, 0x6, 0x0, 0x4, 0xe, 0x9, 0xc7f, 0x7, 0x7363, 0x3, 0xc0000000, 0x7d2, 0x200, 0x13e, 0x5, 0x4d, 0x10000, 0x2, 0x1e7, 0x8, 0x7fff, 0xfffffff8, 0xc, 0x6, 0x3, 0xfffffff9, 0xb, 0x8001, 0x7, 0xfffffffe, 0x7, 0x0, 0x954, 0x8, 0x3ff, 0x8, 0x0, 0xab2e, 0xaf, 0x8, 0x2, 0x4, 0x3, 0x3, 0x6, 0xe6, 0x8, 0x0, 0xfffffff8, 0x1, 0x2, 0xffffff52, 0x3, 0xf, 0x4, 0x2, 0x4, 0x6, 0x4, 0x3, 0x7, 0x7, 0xffffffff, 0x1, 0x9, 0x6, 0x4, 0x178, 0xbbfc, 0x8000, 0xc, 0x0, 0x7, 0x101, 0xfffffffd, 0xfff, 0x2, 0x4, 0x0, 0x2, 0x8, 0x0, 0x10, 0x8, 0x2, 0x62, 0x3, 0x6, 0x10000, 0x7, 0xe9, 0x6, 0x7f, 0x6, 0xfffffff8, 0x0, 0x0, 0x81, 0x2, 0x0, 0xd, 0x7f, 0x200000, 0x3, 0x2, 0x8839, 0x200, 0x80, 0xffff0000, 0x1ff, 0x6fc3eb4a, 0x8f, 0x2, 0x4, 0x6, 0x9, 0x7, 0x0, 0x1000, 0x7, 0x3, 0x8000, 0xb96, 0x200, 0x1, 0x80, 0xfff, 0xff, 0x400, 0xe7d, 0xd, 0x80000000, 0x9, 0xe122, 0x9, 0xffffff80, 0x2, 0x3, 0x3fffc000, 0x1ff, 0x6, 0x7, 0x0, 0x7, 0x7, 0x7, 0x6, 0x9000, 0xffffffff, 0x9, 0x800, 0x6, 0x1000, 0x0, 0xe, 0xcca, 0x7, 0x80, 0x0, 0x8, 0xef000000, 0x0, 0x3, 0x4, 0xba, 0x7ff, 0x1, 0x8, 0x5320, 0x7, 0xdd, 0x1, 0xfb, 0x1ff, 0x6, 0xc90, 0x40, 0xffffffff, 0x2, 0x7, 0xd, 0x1, 0x0, 0x1, 0x73be, 0x5]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0xfffffffffffffffa, 0xffff, 0x7, 0x401, {0x4, 0x2, 0x3ff, 0x5, 0x3ff, 0x2ddc}, {0xb, 0x0, 0x8, 0x6, 0x2, 0xc23}, 0x5, 0x800, 0xec3b}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}]}]}, 0x4dc}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_DEV(r9, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)={0x20, r10, 0x1, 0x70bd28, 0x25dddbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x41}, 0x20000010) 32.930905938s ago: executing program 2 (id=3186): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="01000000060000000800", @ANYRES32, @ANYBLOB="000000000000e670d60000031c000000000000008e2663bee6ce1b0be34a6b1d87890f877f1f4aaa2ef1634d1ab671e70700d88e2d476e10de19e27f2bc8da0f706c0575ccb90ba91d444444f94977c5c7b1456faf6f40c80e7994449f120b81790040740a8fe89b8cedf240fe162ee8bab9d6ec603278730796f7a4e710059c8fffe854811cd71f827fec8c9cfa5c1d016146c71fb1f6a7c6f2c2b0c06b68e503b3a06eed59", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000740)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) bind$inet6(r0, &(0x7f0000000800)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="06000000040000000800000005"], 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000880)={&(0x7f00000008c0)="97", &(0x7f0000000c00)=""/4096, &(0x7f0000001c00), &(0x7f0000001c40), 0x5, r1}, 0x38) sendto$inet6(r0, &(0x7f0000001d80)='X', 0xfee4, 0x0, &(0x7f0000001dc0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 32.494053969s ago: executing program 2 (id=3188): mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0xb, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0xb, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x42073, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x29, 0x5, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, &(0x7f0000000040)=0x5, 0x4) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000009, 0x200000006c832, 0xffffffffffffffff, 0x0) bind$inet(0xffffffffffffffff, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x10, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="b400000000000000791048000000000061042c000000000095000000"], &(0x7f00000001c0)='GPL\x00', 0x2, 0xfd90, &(0x7f0000000200)=""/195, 0x0, 0x1, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffd8b, 0xffffffffffffffff}, 0x48) write$cgroup_pressure(r0, &(0x7f0000000140)={'full', 0x20, 0x11}, 0xfffffdef) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f0000000000)={'tunl0\x00', {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}) 32.27721787s ago: executing program 2 (id=3190): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="c40000001900674c2cbd70000000000000000000000000000000000000000000ac1eff0100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0100000000000000000000000000000000000020000000000000000000000000000000000000000000008000000000000000000000000000fcffffffffffffff0000000000000000b0ac00000000000000000000000000000000000000000000000400000000000000000002000000000a00100001"], 0xc4}}, 0x4c050) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=@newpolicy={0x17c, 0x13, 0x101, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@rand_addr=0x64010102, 0x4e20, 0xd, 0x404, 0x9, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x2, 0x0, 0x0, 0x0, 0x6, 0x3, 0x5, 0xd}, {0x0, 0x1, 0x0, 0x100}, 0x100}, [@tmpl={0xc4, 0x5, [{{@in6=@loopback, 0x4d2, 0x2b}, 0xa, @in6=@empty, 0x0, 0x1, 0x1, 0x1, 0x5, 0x2, 0x80000009}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4d4, 0x2b}, 0xa, @in6=@remote, 0x3, 0x4, 0x2, 0x3, 0x0, 0x2, 0x6}, {{@in=@multicast2, 0x4d4, 0x2b}, 0xa, @in=@rand_addr=0x64010100, 0x0, 0x0, 0x0, 0x3, 0xfffffff9, 0x103ff, 0xd9}]}]}, 0x17c}, 0x1, 0x0, 0x0, 0x20048000}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) write$tun(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="034886dd010000000000140000006000000003082f00fe88a43de1a400000000000000007d01ff02ffffff0700000000000000000001"], 0xfdef) 29.557842872s ago: executing program 1 (id=3198): socket(0x2, 0x80805, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000002100)={0x0, 0x2c, &(0x7f0000002140)=[@in6={0xa, 0x4e24, 0x78, @dev={0xfe, 0x80, '\x00', 0x2d}, 0x2}, @in={0x2, 0x4e24, @loopback}]}, &(0x7f0000002180)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f00000021c0)={0x1, [0x0]}, &(0x7f0000002200)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000002240)={r1, @in={{0x2, 0x4e21, @empty}}, 0x0, 0xb92}, 0x90) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000002440)={&(0x7f0000002480)={0x74, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @rand_addr=0xfffffffd}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}, @CTA_HELP={0x10, 0x5, 0x0, 0x1, {0x9, 0x1, 'syz0\x00'}}]}, 0x74}}, 0x0) 29.386076093s ago: executing program 3 (id=3200): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='veno', 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='roccet', 0x6) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) 28.696777467s ago: executing program 2 (id=3201): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x3, 0x1c, &(0x7f0000000280)=ANY=[@ANYBLOB="bf16000000000000b7020000300000007b2af8ff000000007b2af0ff000000007b2ae8ff000000007b2ae0ff000000007b2ad8ff000000007b2ad0ff000000007b2ac8ff000000007b2ac0ff00000000b702000002000000732ac0ff00000000b702000001000000632ac4ff00000000180200000a0000010000000000000000632accff00000000180200000a0000020000000000000000632ac0ff00000000bf61000000000000bfa200000000000007020000c0ffffffb703000040000000b7040000000000008500000045000000b70000000200000095"], &(0x7f0000000380)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000440)="0000000000002d9d8aaf5dc79048", 0x0, 0x8ce3, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x8040}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="2c0000007800010402000000000000000700000064000000140001"], 0x2c}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f0000000480), 0x40000000000009f, 0x0) socket$kcm(0x10, 0x2, 0x4) r2 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000600)) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x81000000) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000640)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000680)=ANY=[], 0x32600) r4 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000001080)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000001100), 0x318, 0x0) recvmmsg(r5, &(0x7f0000001140), 0x10106, 0x2, 0x0) r7 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r6, &(0x7f0000001180)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r4, &(0x7f00000011c0)={0xa0000001}) ppoll(&(0x7f0000001200)=[{r7, 0x1}], 0x1, 0x0, 0x0, 0x0) epoll_wait(r7, &(0x7f0000001240)=[{}], 0x1, 0xffffffff) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e3, &(0x7f00000006c0)={@tcp, r3}) socket$igmp(0x2, 0x3, 0x2) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)=@newtaction={0x8d8, 0x30, 0xffffffffffffffff, 0x0, 0x40002, {}, [{0x8c4, 0x1, [@m_bpf={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x64, 0x7, 0x8, 0x1}}, @TCA_ACT_BPF_FD={0x8}]}, {0x4}, {0xc}, {0xc}}}, @m_police={0x874, 0x2, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x28, 0xfffffff8, 0x3, 0x4, 0xffffffc0, 0x6, 0x5, 0x5, 0x2, 0x117, 0x10000, 0x8001, 0x2, 0x1, 0x7, 0x9, 0x80000000, 0xaa, 0x3ff, 0x4, 0x9, 0x0, 0x51, 0xf, 0x2, 0x1, 0x10000, 0x200, 0x7, 0x2, 0x4, 0x8, 0x101, 0x8, 0x0, 0x3, 0xe, 0x66d, 0x80000000, 0x3, 0x1, 0x8, 0x2, 0x7fff, 0xd, 0x4, 0x1ff, 0xffff, 0x7f, 0xfffffffd, 0x40, 0x7, 0x3, 0x400, 0x6, 0x8, 0x2, 0x1, 0x7, 0x9, 0x594, 0x0, 0x2900, 0x100, 0x4, 0x305c000, 0x7, 0xfffffff7, 0x7, 0x800, 0x5, 0xf24, 0x5, 0x7fffffff, 0x923, 0x101, 0x1155, 0x3, 0x1, 0x0, 0xffffffff, 0xcd2, 0xfffffffa, 0x800, 0x4, 0x81, 0x3, 0x0, 0x3, 0xf, 0x1, 0x1, 0xe, 0x3b2, 0x6, 0x4, 0x1ff, 0x6, 0x5, 0x1000, 0xe6, 0x7fff, 0x1, 0x8c, 0x1, 0x80, 0xfffffffb, 0x5, 0x7f0, 0xfffffff0, 0xffff, 0xfffffff7, 0xcfb6, 0x6, 0x4, 0x1194, 0xaf, 0xa, 0x2, 0xe0, 0x0, 0x7f, 0x6, 0x0, 0x2, 0x9a7, 0x7a2, 0x5, 0x83f, 0xa36e58b, 0x100, 0x9, 0x7, 0x8, 0x2, 0x1, 0xfffffffe, 0x1242, 0x579, 0x3, 0x5, 0x7, 0x0, 0x4, 0x8d, 0x3, 0x4, 0x5, 0x8, 0xc, 0x6, 0xffffffff, 0xaebe, 0x9, 0x90a, 0x7, 0x3, 0x2, 0x80000000, 0x9, 0x9, 0x5, 0xfffffff1, 0x3cd, 0xc, 0x4, 0x2, 0x9, 0x6, 0x4, 0x4, 0x7, 0x0, 0x2, 0x1, 0x5, 0x7f, 0xe6ef, 0x9, 0x6, 0x1, 0x7, 0x0, 0x7fffffff, 0x7, 0x0, 0x8, 0x9, 0x5, 0x8, 0x0, 0x6, 0x7, 0x1, 0x401, 0x8762, 0x9, 0x0, 0x4, 0x4, 0xff, 0x3, 0xc, 0x8, 0xf, 0x2, 0x6, 0x80000000, 0x3, 0x7f, 0xfffffffc, 0x2, 0x62, 0x8, 0x100, 0x5, 0xc56, 0xe, 0x0, 0x8, 0x8, 0x6, 0x9, 0x5b0, 0x6, 0xffff, 0x5f3, 0xc5f8, 0x1000, 0x2, 0x9, 0x7, 0x1, 0x1, 0x3, 0x0, 0x2, 0x200, 0x253a, 0xb, 0x9, 0x3, 0x0, 0xf, 0x1, 0x4, 0x2, 0x1000, 0x7, 0xb96, 0x3, 0xff, 0x8, 0x9, 0xb]}], [@TCA_POLICE_RATE={0x404, 0x2, [0x6, 0x1ff, 0x4835, 0x4c30, 0x8, 0x8, 0xffffff68, 0x1000000, 0x7, 0x1d, 0x8000, 0xd3d9, 0x2, 0x82fd, 0x3, 0x8000, 0x7f, 0x401, 0x800, 0x2, 0xe3a2, 0x2, 0x9, 0x1, 0x401, 0x400, 0x1855af6b, 0xff, 0xfffffffa, 0xf5, 0xffff70f3, 0x8, 0xfff, 0x6, 0x8, 0x7, 0x0, 0xf61, 0x8, 0x80000000, 0x5, 0xc2, 0x14c6, 0x4, 0x2, 0xfffff800, 0x3d3, 0x4, 0x0, 0x1, 0x163af427, 0x6, 0xfffffff8, 0xffff5f90, 0x9, 0x5, 0x6, 0xca41, 0x4, 0xffffffff, 0x7, 0x80000001, 0x7, 0x6, 0x80, 0x3, 0x9, 0x9, 0x8, 0x40, 0xe5, 0x6, 0x0, 0x4, 0xe, 0x9, 0xc7f, 0x7, 0x7363, 0x3, 0xc0000000, 0x7d2, 0x200, 0x13e, 0x5, 0x4d, 0x10000, 0x2, 0x1e7, 0x8, 0x7fff, 0xfffffff8, 0xc, 0x6, 0x3, 0xfffffff9, 0xb, 0x8001, 0x7, 0xfffffffe, 0x7, 0x0, 0x954, 0x8, 0x3ff, 0x8, 0x0, 0xab2e, 0xaf, 0x8, 0x2, 0x4, 0x3, 0x3, 0x6, 0xe6, 0x8, 0x0, 0xfffffff8, 0x1, 0x2, 0xffffff52, 0x3, 0xf, 0x4, 0x2, 0x4, 0x6, 0x4, 0x3, 0x7, 0x7, 0xffffffff, 0x1, 0x9, 0x6, 0x4, 0x178, 0xbbfc, 0x8000, 0xc, 0x0, 0x7, 0x101, 0xfffffffd, 0xfff, 0x2, 0x4, 0x0, 0x2, 0x8, 0x0, 0x10, 0x8, 0x2, 0x62, 0x3, 0x6, 0x10000, 0x7, 0xe9, 0x6, 0x7f, 0x6, 0xfffffff8, 0x0, 0x0, 0x81, 0x2, 0x0, 0xd, 0x7f, 0x200000, 0x3, 0x2, 0x8839, 0x200, 0x80, 0xffff0000, 0x1ff, 0x6fc3eb4a, 0x8f, 0x2, 0x4, 0x6, 0x9, 0x7, 0x0, 0x1000, 0x7, 0x3, 0x8000, 0xb96, 0x200, 0x1, 0x80, 0xfff, 0xff, 0x400, 0xe7d, 0xd, 0x80000000, 0x9, 0xe122, 0x9, 0xffffff80, 0x2, 0x3, 0x3fffc000, 0x1ff, 0x6, 0x7, 0x0, 0x7, 0x7, 0x7, 0x6, 0x9000, 0xffffffff, 0x9, 0x800, 0x6, 0x1000, 0x0, 0xe, 0xcca, 0x7, 0x80, 0x0, 0x8, 0xef000000, 0x0, 0x3, 0x4, 0xba, 0x7ff, 0x1, 0x8, 0x5320, 0x7, 0xdd, 0x1, 0xfb, 0x1ff, 0x6, 0xc90, 0x40, 0xffffffff, 0x2, 0x7, 0xd, 0x1, 0x0, 0x1, 0x73be, 0x5]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0xfffffffffffffffa, 0xffff, 0x7, 0x401, {0x4, 0x2, 0x3ff, 0x5, 0x3ff, 0x2ddc}, {0xb, 0x0, 0x8, 0x6, 0x2, 0xc23}, 0x5, 0x800, 0xec3b}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}]}]}, 0x8d8}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_DEV(r9, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)={0x20, r10, 0x1, 0x70bd28, 0x25dddbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x41}, 0x20000010) 28.611466882s ago: executing program 1 (id=3202): bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="12000000070800000800000022"], 0x48) r0 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000004f40)={'gretap0\x00', &(0x7f00000005c0)={'tunl0\x00', 0x0, 0x40, 0x40, 0x58, 0x3598, {{0x15, 0x4, 0x1, 0x0, 0x54, 0x66, 0x0, 0x4, 0x29, 0x0, @empty, @dev={0xac, 0x14, 0x14, 0x36}, {[@timestamp_addr={0x44, 0x14, 0x3b, 0x1, 0x7, [{@multicast2}, {@local, 0x1ff}]}, @noop, @timestamp_addr={0x44, 0x14, 0x6, 0x1, 0x9, [{@broadcast, 0x1d}, {@multicast2, 0x5}]}, @end, @rr={0x7, 0x7, 0x63, [@multicast2]}, @timestamp_prespec={0x44, 0xc, 0x29, 0x3, 0x9, [{@private=0xa010101, 0x10}]}, @end, @end, @end]}}}}}) sendmmsg$inet(r0, &(0x7f0000007bc0)=[{{&(0x7f00000047c0)={0x2, 0x4e20, @rand_addr=0x64010100}, 0x10, &(0x7f0000004e00)=[{&(0x7f0000004fc0)="b671408734d9619025ed52b83fd6fb60b7750011f98b95a6d355b79fbd08ac64f9cd2fc42bcbdd15d0af6dfa5095ebcd0fbf537b21a6b6c4a4f1e08d4548dd53aecd24a3a4410f1420fbee9c2e0995df14ad5dfddd3cf2a44bd7869d8e492b25c83b4bd1807292ac6ea58c5e9fed499c1722cfda82fa14cf84cb0a6c2651ddcdf8728530bc08fcea", 0x88}, {&(0x7f00000048c0)="4c6874e9075dac72734680a5ca357295bb91346d4ab78715a3690822fb3bceff4024c2d947d41f76902cf3fa32c6b3013cbfe82efd6cf00be57c448ce00ad4ff9f094ab171f060ac2708087aea4e4d1abbe1dba69a20928e2e9b23ad6bb3da1a35e306029f674743ba5c9f6e3cbab2cbaee2c697927dd32bfea707bb2b2d292319badc42d48660e95d3e77ae8e48392c9916632b50c741d52a34eff8f9bd6b4e092d8cb42d27df66f2373ad2530efb6552980cc38eee6e48b50dcdd3ab3a6b30ded098e796a5e1aab4", 0xc9}, {&(0x7f00000049c0)="f55b422daf6b23bf48d2947cfeb38c5ab561435f71cb2217a7e01c742cff83ad99707042a2bf10a2d2017023d0bd39b7abca32ccfe2265e2d0f3a72664162a80749261b9d14a44dff6d2445b33c06c69668fe60e3f964426739c42aeb8320fea0d19a6de5f074449fd4cc9ec19be6a1a3efc3f0b4dbb76e022cab50e4be6eccaa2f3fae151863b6248800c35c4a6b21d85aba4bcf9c38ed8e9c61ac7e0961e25186c5ff3fdd4d8d9687d069915547eeea38bacb8f13814757c58fc488032d69642052be6f94347efa8ace7a99d0c452d8cab25811e2114c3c59cdb6464abc78c2e838d6a18a8f57b5a", 0xe9}, {&(0x7f0000004ac0)="29031381b5688b79841962a554783a58eb676aec245649b11004a2209d07e569de8ee03e0ee2adfb6d85668477bed2a6768948322d0b19e21d7a", 0x3a}, {&(0x7f0000004b00)="7410e19ff7dd987d49de6a9238abdeb192", 0x11}, {&(0x7f0000004b40)="7774fd5c9dabbf1247ffb9919e174bcaa5253ea16f80fee8dadf23f3a42f41396fb310b43d16849d89c26aeeaee7142f2bc4bc58b3a5057e4d50e1601f1ba46e13d33a9f", 0x44}, {&(0x7f0000004bc0)="329f9843d8954fe5cb53e3d60333bd4749c66f43bff5f27f7b444c7c52f741604d2e30d88f71dcbd31e9b81a60e66c9f17c0ad20ae88f396c5094eb0b5568ce877da6611e26c63e1c4c5beb7a11705cbef44f5b9e009580fb1a5862f7bdac5e163fac7aee4582b0a008759323f089ec34e1eab95e3a28ea996c9714f3b67333a5c4ab1f52228a33900f22396194e79626cec4776a7fdf043a7553c6f87470f4611d0b1b74cb894fdda658142", 0xac}, {&(0x7f0000004c80)="2210aa2ea6aef0da0319daca30a778ae4a039ffc39cd20da09f9114b2037c7cd8a8faa2e965e7248ccca788e1b99e39d2f690c9a28f588212ef5c6ca68723eab44736d8cf89d8750c0a16a4b0b221413b3d85e2cc8f648c48f", 0x59}, {&(0x7f0000004d00)="7e04d1d705ce9882683780bbb3fbf5d3576865ed8e918da566150350253fe8adb20c390681f79254a374d21f95f041d3c63307c5cca75c09aa6c77740c5530238cacf462daa3edbb89dc977bafc8b19061ab9cf856522ba63d39ec3e1cb564c20bdb2096bfa5f1d2b175ff1f0ba01fad729e9efc9c9726f81312ea3ba3fd14b815dbe81f257270c02d4e1f71236bd789659b453473a5b4dcf0238ea68e4fec83c91badc92e6726947654281df8a9a1f2b0c67d0371ca052589f29d2b04072c5b7f9832f23249664451b1", 0xca}], 0x9, &(0x7f0000007340)=ANY=[@ANYBLOB="6800000000000000000000000700000007137eac1414bbe00000027f0000017f000001940401000712c82e97b83ef8f7738bdabc01c947b2de442c2cd3e00000010000002eac1414aa000007ffac1e010100000007ac1e000100000000ac1414bb000000020000001c000000000000000000000008000000", @ANYRES32=r1, @ANYBLOB="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"], 0x1e0}}, {{&(0x7f0000005180)={0x2, 0x4e23, @multicast2}, 0x10, &(0x7f00000072c0)=[{&(0x7f00000051c0)="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", 0x1000}, {&(0x7f00000061c0)="15ecb757f274627b28c3e11d776307b0e6eaeb234166b210301f3990ec65b627501f02f0252c4e6e2558bc59c1d35988a52a4ded38dc68210080b35cf658cf50936b5be5dfd1d3205f93f956be5be7f49091a7de15d896543b9b305d9bb21ec7aee046f1d8d9a5eda3e0a37c4c813a9aeb1bd50a62a36105dfd112cdcefe8f0791178ad9b8ab127be03be60474c44af3d0ab0101e8a6a80d618012ab9029b7c17c7351c07e729822464e304b701c92694831a73038dbb8a9eb7833fa0a17a44a6400d38e06321ca4c2232fa3c6b741475a45e8da0064d7cdbcfc72090ece0e98841d5c7e4c7e072e333cafd140c24ede7ddb918572701138f48d117997802d", 0xff}, {&(0x7f00000062c0)="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", 0x1000}], 0x3}}, {{&(0x7f0000007300)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10, &(0x7f0000007780), 0x0, &(0x7f0000007800)}}, {{0x0, 0x0, &(0x7f0000007b40)=[{&(0x7f00000075c0)="b5077cb311650da040551ac86bb3a37d63938219a34e96521813555837ab28fa61112a78c10e328e5eda609727440a7c765788b890a62c5500c2fed2698a1b9fbdb76bd0bc329e579e1252a2f7b589515b091197c66c9be08636018ae919b53ba028a8b2a13accf218cd4650db0d99431bf75eb5802bd0b0b47f0a25943f3d7b421418931425ff246d0d74653b942bbe03c951d0100c8ca7e6c5f94f46ffe1f8a4568e0e8a3a4ec0389190686ece8f933e351d8145837671b36bca73a8e83577482e380dc2c98edb5a99c02de340a5285d8397bbdccd8ed59b060d8f", 0xdc}, {&(0x7f0000007980)="d4ce54135b4f538c45767c5638651f299c80d0c025136b039990fb9d029c7d27ff9673e498c935f6db386cfb5e23b951ceaed3867546eecbcf98171e925e049eddfab21cbd0ab9db519168fe06983e18a207b45a4e84b34d5a1918ad05861bca3297703fe241902207a03137036f7fc03068b61478d9465bac0dc0cbc9bac84674b6868ed21190231c4e4016b85960d490d7728e4432", 0x96}, {&(0x7f0000007a40)="9ccd5024ef60c974680bb452bc20a511d085b6d0", 0x14}, {&(0x7f0000007a80)="0537e4d8e82a4aba4d5049ef4babce1630574f310c3e841e8f77ad00f88d48a4048250602bac189c6f0d97310a9e7a4461d0cd89e3c70bceabff2c9228dfda10934177b5066cba851659a472311f9c8da792286dba9f5c2bc7f8710f497187cc5156676c0e6ea3cd5a6a0c24466294744cb4220c5930d3a77d9e8225d3dc2a90377d553c77f141a3098a1a75578243b977", 0x91}], 0x4, &(0x7f0000004f80)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r1, @rand_addr=0x64010102, @empty}}}], 0x40}}], 0x4, 0x44) r2 = socket$kcm(0x10, 0x400000002, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000004800)={0x16, 0x5, &(0x7f0000005080)=ANY=[@ANYRES8=r0], &(0x7f00000050c0)='syzkaller\x00', 0xbc8, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ffffffc}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000005100)={r3, 0x0, 0xe, 0x0, &(0x7f0000007580)="e02742e8680d85ff9782762f86dd", 0x0, 0xf000, 0xfffff000, 0x0, 0x0, 0x0, 0x0}, 0x4c) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000380)={0x0, 0x1c, &(0x7f00000003c0)=[@in6={0xa, 0x0, 0x0, @private0}]}, &(0x7f0000000400)=0x10) shutdown(r4, 0x1) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r4, 0x84, 0x18, &(0x7f0000000440)={0x2, 0x4}, 0x8) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000007ec0)={'wlan1\x00', 0x0}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r5) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r5, &(0x7f0000007f40)={0x0, 0x0, &(0x7f0000007f80)={&(0x7f0000007fc0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000003a00000008000300", @ANYRES32=r6, @ANYBLOB="04005b000620880000fe0000"], 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f0000008100)={&(0x7f0000007e80)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000080c0)={&(0x7f00000076c0)=ANY=[@ANYBLOB="a8000000", @ANYRES16=r7, @ANYRES8=r8], 0xa8}, 0x1, 0x0, 0x0, 0x800}, 0x8004) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1e00000009000000090000000180000001690600", @ANYRES32=0x1], 0x50) write$cgroup_subtree(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="24000000660091"], 0xfe33) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="200000002600090125bd8b00f9ffffff0200804e000000000000000000000100668b6ac717e6810000000000000000b59759d72d1dd92f0100f0cb9219"], 0x20}, 0x1, 0x0, 0x0, 0x1400c952}, 0x0) r10 = socket$igmp6(0xa, 0x3, 0x2) socket$inet6(0xa, 0x6, 0xe8) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r11, 0x0) r12 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r12, &(0x7f00000077c0)={0x2, 0x0, @broadcast}, 0x10) ioctl$sock_ifreq(r10, 0x8942, &(0x7f0000000100)={'bond0\x00', @ifru_names='dvmrp0\x00'}) ioctl$sock_netdev_private(r10, 0x89ff, &(0x7f0000000000)="79b2530e11392dfb163b531a34c00da9c33648ddb17a2647544cd9ff3263b1cfc0deee1593ddecf5c282d26a3269760ed515ffd83a6e2c90fded1e7e7880e6649810246b824615bf8c694963ff91abfb69ef9c5cf002e3ccf6775de90a792d4f98500922441ba153b17077ca5bed770803f53b90278fd4bb208c8e31fe1b3fa00647f8366186d56c87b0e198633480a8f76f6f5dafa0340c7287c76c7b12b86e8ce27b7f172b9f5aa8c21df93088ffe814cd7d8fe22efcccf1fd1b856b50d68a3efaeee7c822d4334eb9122817edf3") 28.479175028s ago: executing program 3 (id=3204): r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000100)=@base={0xa, 0x9, 0x8, 0x2}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0xe, 0x6, &(0x7f0000000300)=@framed={{0x18, 0x2, 0x0, 0x0, 0x3010000}, [@map_fd={0x18, 0x3, 0x1, 0x0, r0}, @call={0x85, 0x0, 0x0, 0x26}]}, &(0x7f0000000000)='syzkaller\x00'}, 0x94) 28.188482511s ago: executing program 3 (id=3206): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000000)="88037894", 0x4}], 0x1) 27.70122554s ago: executing program 1 (id=3208): bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x0) socket(0x10, 0x803, 0x0) r0 = socket$rxrpc(0x21, 0x2, 0x2) sendmsg(r0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000c40), 0x42082, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000c80)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000cc0), 0x0, 0x0) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000d00)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000dc0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xfff1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x1, 0x5, 0xd, 0xd9, 0x10}, {0x0, 0x2, 0x5, 0x3, 0x1}, 0x0, 0x5, 0x8d0}}, @TCA_TBF_BURST={0x8, 0x6, 0x10001}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x4040) ioctl$SIOCSIFHWADDR(r2, 0x8914, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000e80)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000fc0), 0x39) sendmsg$kcm(r5, &(0x7f0000001000)={&(0x7f0000001040)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f00000010c0)=[{0x0}], 0x1}, 0x0) 27.576949304s ago: executing program 3 (id=3209): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) close(r0) socket$netlink(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x10, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000000180)='GPL\x00', 0x2, 0xfd90, &(0x7f00000001c0)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x41000, 0x27, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10}, 0x94) sendmsg$inet(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000600)='>', 0x20000281}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000000640), 0x400023c, 0x300, 0x0) 26.649092327s ago: executing program 2 (id=3210): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt(r1, 0x1, 0x1, 0x0, &(0x7f00000009c0)) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a0b160000000000000000020000084c00048018000180080001006f7366000c000280080001400000000430000180080001006e6174002400028008000140000000000800074000000000080003400000001408000240000000020900010073797a30000000000900020073797a32"], 0xa0}, 0x1, 0x0, 0x0, 0x850}, 0x4040080) r3 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_udp(0xa, 0x2, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'veth1_to_hsr\x00', 0x0}) setsockopt$packet_int(r4, 0x107, 0x1f, &(0x7f0000000280)=0xf42, 0xffffffffffffff2a) sendto$packet(r4, &(0x7f0000000380)="3f031c000302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000400)={0xc9, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) socket$packet(0x11, 0x3, 0x300) r6 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000440), r6) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\t\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="05000000000000000400"/28], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="230000006d02000003001600adbddbff01"], 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="a52b321e11e7a830f5bf03cf5cc022a8303a7f442397808bd35721382d6e", @ANYRESOCT=r0, @ANYRESDEC=r3], 0x50) socket$netlink(0x10, 0x3, 0x0) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000b00)={'bridge0\x00'}) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000b40)={'bridge0\x00', 0x0}) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000c00)=ANY=[@ANYBLOB="6c0000001000010400d201000072f60000020000", @ANYRES32=r9, @ANYBLOB="05"], 0x6c}, 0x1, 0x0, 0x0, 0x10004000}, 0x0) socket$nl_route(0x10, 0x3, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) 26.373773077s ago: executing program 2 (id=3212): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$packet(0x11, 0x2, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0xc, 0xe, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], &(0x7f00000015c0)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001600)={r1, 0x18000000000002a0, 0x24, 0x4a, &(0x7f0000001680)="b9ff03076804268c989e14f088a847e089021416e0885a0400000000000081009fa79900", 0x0, 0x400, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}, 0x3d) socket$packet(0x11, 0xa, 0x300) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@ipv4_newrule={0x2c, 0x20, 0xf4db158ec847dc81, 0x70bd2a, 0x3, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1b}, [@FRA_GENERIC_POLICY=@FRA_IP_PROTO={0x5, 0x16, 0x4}, @FRA_GENERIC_POLICY=@FRA_SPORT_RANGE={0x8, 0x17, {0x4e22, 0x4e20}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x44004) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000240)={'syzkaller1\x00', 0xc201}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000002c0)={'syzkaller1\x00', 0x0}) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000340)={'syzkaller1\x00', 0x1}) sendmsg$nl_route_sched(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000700)=@newqdisc={0x54, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x24, 0x2, [@TCA_CAKE_FLOW_MODE={0x8, 0x5, 0x1}, @TCA_CAKE_OVERHEAD={0x8, 0x6, 0xfb}, @TCA_CAKE_TARGET={0x8, 0x8, 0x1}, @TCA_CAKE_MPU={0x8, 0xe, 0x2c}]}}]}, 0x54}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000640)=@newtfilter={0x80, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0xb, 0x7}, {0xfff1, 0xffff}, {0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4c, 0x2, [@TCA_MATCHALL_ACT={0x48, 0x2, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x0, 0x3}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}}]}, 0x80}}, 0x20044080) write$tun(r2, &(0x7f00000006c0)=ANY=[@ANYBLOB="0800080006000600080014000000450a0fc0006600000b11"], 0xfce) r6 = socket$kcm(0x10, 0x2, 0x4) r7 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r7) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r8 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r8, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) sendmsg$inet(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="5c00000015006b03000000d86e6c1d000a117ea6ea6567e71b59", 0xfe86}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 24.751972871s ago: executing program 0 (id=3214): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x18, 0x10, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1000000}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@jmp={0x5, 0x1, 0x1, 0xa, 0x3, 0xfffffffffffffff5}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}, {0x7, 0x0, 0xb, 0x0, 0x0, 0x0, 0x2000000}}}, &(0x7f00000001c0)='GPL\x00', 0xb, 0x100a, &(0x7f0000000200)=""/4106, 0x41100, 0xd, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400}, 0x94) 24.409526618s ago: executing program 0 (id=3215): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000fc0)={0x1a, 0x4, &(0x7f0000001080)=@framed={{0x18, 0x2, 0x0, 0x0, 0xb2b3, 0x0, 0x0, 0x0, 0x18}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x34a1d}]}, &(0x7f00000010c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, 0x3d, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value=0x900}, 0x94) 24.216872688s ago: executing program 0 (id=3216): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000a80)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000c00)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x10}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x10}}], 0xd8}, 0x40) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000d00)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000d40)={0xc, 0x8, &(0x7f0000000e00)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r2], &(0x7f0000000e40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000f00)={r3, 0x3e8, 0xf, 0x0, &(0x7f0000000f80)="c1df0600000200000000000000a887", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 23.836716092s ago: executing program 0 (id=3217): bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="12000000070800000800000022"], 0x48) r0 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000004f40)={'gretap0\x00', &(0x7f00000005c0)={'tunl0\x00', 0x0, 0x40, 0x40, 0x58, 0x3598, {{0x15, 0x4, 0x1, 0x0, 0x54, 0x66, 0x0, 0x4, 0x29, 0x0, @empty, @dev={0xac, 0x14, 0x14, 0x36}, {[@timestamp_addr={0x44, 0x14, 0x3b, 0x1, 0x7, [{@multicast2}, {@local, 0x1ff}]}, @noop, @timestamp_addr={0x44, 0x14, 0x6, 0x1, 0x9, [{@broadcast, 0x1d}, {@multicast2, 0x5}]}, @end, @rr={0x7, 0x7, 0x63, [@multicast2]}, @timestamp_prespec={0x44, 0xc, 0x29, 0x3, 0x9, [{@private=0xa010101, 0x10}]}, @end, @end, @end]}}}}}) sendmmsg$inet(r0, &(0x7f0000007bc0)=[{{&(0x7f00000047c0)={0x2, 0x4e20, @rand_addr=0x64010100}, 0x10, &(0x7f0000004e00)=[{&(0x7f0000004fc0)="b671408734d9619025ed52b83fd6fb60b7750011f98b95a6d355b79fbd08ac64f9cd2fc42bcbdd15d0af6dfa5095ebcd0fbf537b21a6b6c4a4f1e08d4548dd53aecd24a3a4410f1420fbee9c2e0995df14ad5dfddd3cf2a44bd7869d8e492b25c83b4bd1807292ac6ea58c5e9fed499c1722cfda82fa14cf84cb0a6c2651ddcdf8728530bc08fcea", 0x88}, {&(0x7f00000048c0)="4c6874e9075dac72734680a5ca357295bb91346d4ab78715a3690822fb3bceff4024c2d947d41f76902cf3fa32c6b3013cbfe82efd6cf00be57c448ce00ad4ff9f094ab171f060ac2708087aea4e4d1abbe1dba69a20928e2e9b23ad6bb3da1a35e306029f674743ba5c9f6e3cbab2cbaee2c697927dd32bfea707bb2b2d292319badc42d48660e95d3e77ae8e48392c9916632b50c741d52a34eff8f9bd6b4e092d8cb42d27df66f2373ad2530efb6552980cc38eee6e48b50dcdd3ab3a6b30ded098e796a5e1aab4", 0xc9}, {&(0x7f00000049c0)="f55b422daf6b23bf48d2947cfeb38c5ab561435f71cb2217a7e01c742cff83ad99707042a2bf10a2d2017023d0bd39b7abca32ccfe2265e2d0f3a72664162a80749261b9d14a44dff6d2445b33c06c69668fe60e3f964426739c42aeb8320fea0d19a6de5f074449fd4cc9ec19be6a1a3efc3f0b4dbb76e022cab50e4be6eccaa2f3fae151863b6248800c35c4a6b21d85aba4bcf9c38ed8e9c61ac7e0961e25186c5ff3fdd4d8d9687d069915547eeea38bacb8f13814757c58fc488032d69642052be6f94347efa8ace7a99d0c452d8cab25811e2114c3c59cdb6464abc78c2e838d6a18a8f57b5a", 0xe9}, {&(0x7f0000004ac0)="29031381b5688b79841962a554783a58eb676aec245649b11004a2209d07e569de8ee03e0ee2adfb6d85668477bed2a6768948322d0b19e21d7a", 0x3a}, {&(0x7f0000004b00)="7410e19ff7dd987d49de6a9238abdeb192", 0x11}, {&(0x7f0000004b40)="7774fd5c9dabbf1247ffb9919e174bcaa5253ea16f80fee8dadf23f3a42f41396fb310b43d16849d89c26aeeaee7142f2bc4bc58b3a5057e4d50e1601f1ba46e13d33a9f", 0x44}, {&(0x7f0000004bc0)="329f9843d8954fe5cb53e3d60333bd4749c66f43bff5f27f7b444c7c52f741604d2e30d88f71dcbd31e9b81a60e66c9f17c0ad20ae88f396c5094eb0b5568ce877da6611e26c63e1c4c5beb7a11705cbef44f5b9e009580fb1a5862f7bdac5e163fac7aee4582b0a008759323f089ec34e1eab95e3a28ea996c9714f3b67333a5c4ab1f52228a33900f22396194e79626cec4776a7fdf043a7553c6f87470f4611d0b1b74cb894fdda658142", 0xac}, {&(0x7f0000004c80)="2210aa2ea6aef0da0319daca30a778ae4a039ffc39cd20da09f9114b2037c7cd8a8faa2e965e7248ccca788e1b99e39d2f690c9a28f588212ef5c6ca68723eab44736d8cf89d8750c0a16a4b0b221413b3d85e2cc8f648c48f", 0x59}, {&(0x7f0000004d00)="7e04d1d705ce9882683780bbb3fbf5d3576865ed8e918da566150350253fe8adb20c390681f79254a374d21f95f041d3c63307c5cca75c09aa6c77740c5530238cacf462daa3edbb89dc977bafc8b19061ab9cf856522ba63d39ec3e1cb564c20bdb2096bfa5f1d2b175ff1f0ba01fad729e9efc9c9726f81312ea3ba3fd14b815dbe81f257270c02d4e1f71236bd789659b453473a5b4dcf0238ea68e4fec83c91badc92e6726947654281df8a9a1f2b0c67d0371ca052589f29d2b04072c5b7f9832f23249664451b1", 0xca}], 0x9, &(0x7f0000007340)=ANY=[@ANYBLOB="6800000000000000000000000700000007137eac1414bbe00000027f0000017f000001940401000712c82e97b83ef8f7738bdabc01c947b2de442c2cd3e00000010000002eac1414aa000007ffac1e010100000007ac1e000100000000ac1414bb000000020000001c000000000000000000000008000000", @ANYRES32=r1, @ANYBLOB="7f000001ffffffff00000000940000000000000000000000070000008917090a0101010a010101e0000001ac14143aac1414aa830b7dac1414aaac1414bb072bb400000000ac1414bb7f000001ffffffff64010101e0000001ac14141fac141422e0000002ac1414bb860d70faf47021d1d3440c7341e000000100000002440822f00000000494040000440c4a230a01010100000005940400000000000000001400000000000000000000000200000001000000000000008c000000000000000000000007000000440c9a71ffffffff0000009f94040000071b91640101017f0000010a010102ac1414270a010102e0000002072b19941414aa491e0101ac1e00010a010102ffffffff64010102e0000001000000007f00071ff764010100ac1e0101ffffffffe0000001ac1e0001ac0800000011000000000000000000000001000000f9000000000000003b2fa3984d64815b36a102ea505265b231effc647868fadd40cbf1c345f9e975a5d4cf57205bb3154ebda2b5941bc8a2595fa2ece7003520713a68da1b25f3c0beb81f00000000"], 0x1e0}}, {{&(0x7f0000005180)={0x2, 0x4e23, @multicast2}, 0x10, &(0x7f00000072c0)=[{&(0x7f00000051c0)="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", 0x1000}, {&(0x7f00000061c0)="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", 0xff}, {&(0x7f00000062c0)="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", 0x1000}], 0x3}}, {{&(0x7f0000007300)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10, &(0x7f0000007780), 0x0, &(0x7f0000007800)}}, {{0x0, 0x0, &(0x7f0000007b40)=[{&(0x7f00000075c0)="b5077cb311650da040551ac86bb3a37d63938219a34e96521813555837ab28fa61112a78c10e328e5eda609727440a7c765788b890a62c5500c2fed2698a1b9fbdb76bd0bc329e579e1252a2f7b589515b091197c66c9be08636018ae919b53ba028a8b2a13accf218cd4650db0d99431bf75eb5802bd0b0b47f0a25943f3d7b421418931425ff246d0d74653b942bbe03c951d0100c8ca7e6c5f94f46ffe1f8a4568e0e8a3a4ec0389190686ece8f933e351d8145837671b36bca73a8e83577482e380dc2c98edb5a99c02de340a5285d8397bbdccd8ed59b060d8f", 0xdc}, {&(0x7f0000007980)="d4ce54135b4f538c45767c5638651f299c80d0c025136b039990fb9d029c7d27ff9673e498c935f6db386cfb5e23b951ceaed3867546eecbcf98171e925e049eddfab21cbd0ab9db519168fe06983e18a207b45a4e84b34d5a1918ad05861bca3297703fe241902207a03137036f7fc03068b61478d9465bac0dc0cbc9bac84674b6868ed21190231c4e4016b85960d490d7728e4432", 0x96}, {&(0x7f0000007a40)="9ccd5024ef60c974680bb452bc20a511d085b6d0", 0x14}, {&(0x7f0000007a80)="0537e4d8e82a4aba4d5049ef4babce1630574f310c3e841e8f77ad00f88d48a4048250602bac189c6f0d97310a9e7a4461d0cd89e3c70bceabff2c9228dfda10934177b5066cba851659a472311f9c8da792286dba9f5c2bc7f8710f497187cc5156676c0e6ea3cd5a6a0c24466294744cb4220c5930d3a77d9e8225d3dc2a90377d553c77f141a3098a1a75578243b977", 0x91}], 0x4, &(0x7f0000004f80)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r1, @rand_addr=0x64010102, @empty}}}], 0x40}}], 0x4, 0x44) r2 = socket$kcm(0x10, 0x400000002, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000004800)={0x16, 0x5, &(0x7f0000005080)=ANY=[@ANYRES8=r0], &(0x7f00000050c0)='syzkaller\x00', 0xbc8, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ffffffc}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000005100)={r3, 0x0, 0xe, 0x0, &(0x7f0000007580)="e02742e8680d85ff9782762f86dd", 0x0, 0xf000, 0xfffff000, 0x0, 0x0, 0x0, 0x0}, 0x4c) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000380)={0x0, 0x1c, &(0x7f00000003c0)=[@in6={0xa, 0x0, 0x0, @private0}]}, &(0x7f0000000400)=0x10) shutdown(r4, 0x1) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r4, 0x84, 0x18, &(0x7f0000000440)={0x2, 0x4}, 0x8) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000007ec0)={'wlan1\x00', 0x0}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r5) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r5, &(0x7f0000007f40)={0x0, 0x0, &(0x7f0000007f80)={&(0x7f0000007fc0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000003a00000008000300", @ANYRES32=r6, @ANYBLOB="04005b000620880000fe0000"], 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f0000008100)={&(0x7f0000007e80)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000080c0)={&(0x7f00000076c0)=ANY=[@ANYBLOB="a8000000", @ANYRES16=r7, @ANYRES8=r8], 0xa8}, 0x1, 0x0, 0x0, 0x800}, 0x8004) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1e00000009000000090000000180000001690600", @ANYRES32=0x1], 0x50) write$cgroup_subtree(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="24000000660091"], 0xfe33) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="200000002600090125bd8b00f9ffffff0200804e000000000000000000000100668b6ac717e6810000000000000000b59759d72d1dd92f0100f0cb9219"], 0x20}, 0x1, 0x0, 0x0, 0x1400c952}, 0x0) r10 = socket$igmp6(0xa, 0x3, 0x2) socket$inet6(0xa, 0x6, 0xe8) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r11, 0x0) r12 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r12, &(0x7f00000077c0)={0x2, 0x0, @broadcast}, 0x10) ioctl$sock_ifreq(r10, 0x8942, &(0x7f0000000100)={'bond0\x00', @ifru_names='dvmrp0\x00'}) ioctl$sock_netdev_private(r10, 0x89ff, &(0x7f0000000000)="79b2530e11392dfb163b531a34c00da9c33648ddb17a2647544cd9ff3263b1cfc0deee1593ddecf5c282d26a3269760ed515ffd83a6e2c90fded1e7e7880e6649810246b824615bf8c694963ff91abfb69ef9c5cf002e3ccf6775de90a792d4f98500922441ba153b17077ca5bed770803f53b90278fd4bb208c8e31fe1b3fa00647f8366186d56c87b0e198633480a8f76f6f5dafa0340c7287c76c7b12b86e8ce27b7f172b9f5aa8c21df93088ffe814cd7d8fe22efcccf1fd1b856b50d68a3efaeee7c822d4334eb9122817edf3") 23.533188821s ago: executing program 3 (id=3218): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x5, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3ffd, 0x0, 0x0, 0x0, 0x9}, [@call={0x85, 0x0, 0x0, 0x7a}, @call={0x85, 0x0, 0x0, 0x11}]}, &(0x7f00000000c0)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 23.431649364s ago: executing program 3 (id=3219): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x3, 0x1c, &(0x7f0000000280)=ANY=[@ANYBLOB="bf16000000000000b7020000300000007b2af8ff000000007b2af0ff000000007b2ae8ff000000007b2ae0ff000000007b2ad8ff000000007b2ad0ff000000007b2ac8ff000000007b2ac0ff00000000b702000002000000732ac0ff00000000b702000001000000632ac4ff00000000180200000a0000010000000000000000632accff00000000180200000a0000020000000000000000632ac0ff00000000bf61000000000000bfa200000000000007020000c0ffffffb703000040000000b7040000000000008500000045000000b70000000200000095"], &(0x7f0000000380)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000440)="0000000000002d9d8aaf5dc79048", 0x0, 0x8ce3, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x8040}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="2c0000007800010402000000000000000700000064000000140001"], 0x2c}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f0000000480), 0x40000000000009f, 0x0) socket$kcm(0x10, 0x2, 0x4) r2 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000600)) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x81000000) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000640)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000680)=ANY=[], 0x32600) r4 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000001080)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000001100), 0x318, 0x0) recvmmsg(r5, &(0x7f0000001140), 0x10106, 0x2, 0x0) r7 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r6, &(0x7f0000001180)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r4, &(0x7f00000011c0)={0xa0000001}) ppoll(&(0x7f0000001200)=[{r7, 0x1}], 0x1, 0x0, 0x0, 0x0) epoll_wait(r7, &(0x7f0000001240)=[{}], 0x1, 0xffffffff) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e3, &(0x7f00000006c0)={@tcp, r3}) socket$igmp(0x2, 0x3, 0x2) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)=@newtaction={0x8d8, 0x30, 0xffffffffffffffff, 0x0, 0x40002, {}, [{0x8c4, 0x1, [@m_bpf={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x64, 0x7, 0x8, 0x1}}, @TCA_ACT_BPF_FD={0x8}]}, {0x4}, {0xc}, {0xc}}}, @m_police={0x874, 0x2, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x28, 0xfffffff8, 0x3, 0x4, 0xffffffc0, 0x6, 0x5, 0x5, 0x2, 0x117, 0x10000, 0x8001, 0x2, 0x1, 0x7, 0x9, 0x80000000, 0xaa, 0x3ff, 0x4, 0x9, 0x0, 0x51, 0xf, 0x2, 0x1, 0x10000, 0x200, 0x7, 0x2, 0x4, 0x8, 0x101, 0x8, 0x0, 0x3, 0xe, 0x66d, 0x80000000, 0x3, 0x1, 0x8, 0x2, 0x7fff, 0xd, 0x4, 0x1ff, 0xffff, 0x7f, 0xfffffffd, 0x40, 0x7, 0x3, 0x400, 0x6, 0x8, 0x2, 0x1, 0x7, 0x9, 0x594, 0x0, 0x2900, 0x100, 0x4, 0x305c000, 0x7, 0xfffffff7, 0x7, 0x800, 0x5, 0xf24, 0x5, 0x7fffffff, 0x923, 0x101, 0x1155, 0x3, 0x1, 0x0, 0xffffffff, 0xcd2, 0xfffffffa, 0x800, 0x4, 0x81, 0x3, 0x0, 0x3, 0xf, 0x1, 0x1, 0xe, 0x3b2, 0x6, 0x4, 0x1ff, 0x6, 0x5, 0x1000, 0xe6, 0x7fff, 0x1, 0x8c, 0x1, 0x80, 0xfffffffb, 0x5, 0x7f0, 0xfffffff0, 0xffff, 0xfffffff7, 0xcfb6, 0x6, 0x4, 0x1194, 0xaf, 0xa, 0x2, 0xe0, 0x0, 0x7f, 0x6, 0x0, 0x2, 0x9a7, 0x7a2, 0x5, 0x83f, 0xa36e58b, 0x100, 0x9, 0x7, 0x8, 0x2, 0x1, 0xfffffffe, 0x1242, 0x579, 0x3, 0x5, 0x7, 0x0, 0x4, 0x8d, 0x3, 0x4, 0x5, 0x8, 0xc, 0x6, 0xffffffff, 0xaebe, 0x9, 0x90a, 0x7, 0x3, 0x2, 0x80000000, 0x9, 0x9, 0x5, 0xfffffff1, 0x3cd, 0xc, 0x4, 0x2, 0x9, 0x6, 0x4, 0x4, 0x7, 0x0, 0x2, 0x1, 0x5, 0x7f, 0xe6ef, 0x9, 0x6, 0x1, 0x7, 0x0, 0x7fffffff, 0x7, 0x0, 0x8, 0x9, 0x5, 0x8, 0x0, 0x6, 0x7, 0x1, 0x401, 0x8762, 0x9, 0x0, 0x4, 0x4, 0xff, 0x3, 0xc, 0x8, 0xf, 0x2, 0x6, 0x80000000, 0x3, 0x7f, 0xfffffffc, 0x2, 0x62, 0x8, 0x100, 0x5, 0xc56, 0xe, 0x0, 0x8, 0x8, 0x6, 0x9, 0x5b0, 0x6, 0xffff, 0x5f3, 0xc5f8, 0x1000, 0x2, 0x9, 0x7, 0x1, 0x1, 0x3, 0x0, 0x2, 0x200, 0x253a, 0xb, 0x9, 0x3, 0x0, 0xf, 0x1, 0x4, 0x2, 0x1000, 0x7, 0xb96, 0x3, 0xff, 0x8, 0x9, 0xb]}], [@TCA_POLICE_RATE={0x404, 0x2, [0x6, 0x1ff, 0x4835, 0x4c30, 0x8, 0x8, 0xffffff68, 0x1000000, 0x7, 0x1d, 0x8000, 0xd3d9, 0x2, 0x82fd, 0x3, 0x8000, 0x7f, 0x401, 0x800, 0x2, 0xe3a2, 0x2, 0x9, 0x1, 0x401, 0x400, 0x1855af6b, 0xff, 0xfffffffa, 0xf5, 0xffff70f3, 0x8, 0xfff, 0x6, 0x8, 0x7, 0x0, 0xf61, 0x8, 0x80000000, 0x5, 0xc2, 0x14c6, 0x4, 0x2, 0xfffff800, 0x3d3, 0x4, 0x0, 0x1, 0x163af427, 0x6, 0xfffffff8, 0xffff5f90, 0x9, 0x5, 0x6, 0xca41, 0x4, 0xffffffff, 0x7, 0x80000001, 0x7, 0x6, 0x80, 0x3, 0x9, 0x9, 0x8, 0x40, 0xe5, 0x6, 0x0, 0x4, 0xe, 0x9, 0xc7f, 0x7, 0x7363, 0x3, 0xc0000000, 0x7d2, 0x200, 0x13e, 0x5, 0x4d, 0x10000, 0x2, 0x1e7, 0x8, 0x7fff, 0xfffffff8, 0xc, 0x6, 0x3, 0xfffffff9, 0xb, 0x8001, 0x7, 0xfffffffe, 0x7, 0x0, 0x954, 0x8, 0x3ff, 0x8, 0x0, 0xab2e, 0xaf, 0x8, 0x2, 0x4, 0x3, 0x3, 0x6, 0xe6, 0x8, 0x0, 0xfffffff8, 0x1, 0x2, 0xffffff52, 0x3, 0xf, 0x4, 0x2, 0x4, 0x6, 0x4, 0x3, 0x7, 0x7, 0xffffffff, 0x1, 0x9, 0x6, 0x4, 0x178, 0xbbfc, 0x8000, 0xc, 0x0, 0x7, 0x101, 0xfffffffd, 0xfff, 0x2, 0x4, 0x0, 0x2, 0x8, 0x0, 0x10, 0x8, 0x2, 0x62, 0x3, 0x6, 0x10000, 0x7, 0xe9, 0x6, 0x7f, 0x6, 0xfffffff8, 0x0, 0x0, 0x81, 0x2, 0x0, 0xd, 0x7f, 0x200000, 0x3, 0x2, 0x8839, 0x200, 0x80, 0xffff0000, 0x1ff, 0x6fc3eb4a, 0x8f, 0x2, 0x4, 0x6, 0x9, 0x7, 0x0, 0x1000, 0x7, 0x3, 0x8000, 0xb96, 0x200, 0x1, 0x80, 0xfff, 0xff, 0x400, 0xe7d, 0xd, 0x80000000, 0x9, 0xe122, 0x9, 0xffffff80, 0x2, 0x3, 0x3fffc000, 0x1ff, 0x6, 0x7, 0x0, 0x7, 0x7, 0x7, 0x6, 0x9000, 0xffffffff, 0x9, 0x800, 0x6, 0x1000, 0x0, 0xe, 0xcca, 0x7, 0x80, 0x0, 0x8, 0xef000000, 0x0, 0x3, 0x4, 0xba, 0x7ff, 0x1, 0x8, 0x5320, 0x7, 0xdd, 0x1, 0xfb, 0x1ff, 0x6, 0xc90, 0x40, 0xffffffff, 0x2, 0x7, 0xd, 0x1, 0x0, 0x1, 0x73be, 0x5]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0xfffffffffffffffa, 0xffff, 0x7, 0x401, {0x4, 0x2, 0x3ff, 0x5, 0x3ff, 0x2ddc}, {0xb, 0x0, 0x8, 0x6, 0x2, 0xc23}, 0x5, 0x800, 0xec3b}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}]}]}, 0x8d8}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_DEV(r9, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)={0x20, r10, 0x1, 0x70bd28, 0x25dddbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x41}, 0x20000010) 23.055745845s ago: executing program 1 (id=3220): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0a00000004000000080000000a"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="060000000400000004000000"], 0x50) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000a80)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000c00)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x10}}], 0xc8}, 0x40) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000d00)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000d40)={0xc, 0x8, &(0x7f0000000e00)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f0000000e40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000f00)={r3, 0x3e8, 0xf, 0x0, &(0x7f0000000f80)="c1df0600000200000000000000a887", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 23.046205684s ago: executing program 0 (id=3221): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000d80)=ANY=[@ANYBLOB="380000001000370400"/20, @ANYRES32=r3, @ANYBLOB="89040400000000001800128008000100736974000c00028008000100199eab94bcbbd5b2b7e4ff21c1cf6dc59c8d1bd7c3c34f5feb84be5c8f2585fcc7cc5973c5642faceaafb80589dc7a43dbc68a7dad7bda42f5a26c686a9c7e8cad1db12930f492d79bf7fb794c8b90b53954a946806af7f081dde58c0af50bbec8c98e633852c680e0f03f9f01a4a11d16bb2e186caa37a41f66422eed5f756b679a364b8f19b3942c91bc7b2eb00cff0cdd7a5b32b7445cba07efdd4d5a8e5786ce62690eaa21f3bac5a2f79e6921b71f18c63cacbd04eceec40fda8aaa374a2db3fac115e2a499dbc36d46e41689c97363e7cc5fdac250aedd00875b2a8355270cb68092efffff92e987d94e24c837", @ANYRES32=r3], 0x38}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000c80)=ANY=[@ANYBLOB="40000000100039040000000000000000000003e4", @ANYRES32=r3, @ANYBLOB="0000000000000200200012800800010073697400140002800800010059c471f3a4834b0c43045b27a5756624362a96e5fc043ae0952ba8b4ac51cca2", @ANYRES32=r3, @ANYBLOB="06000e00f7ff0000"], 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x80c0) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r5, 0x4004743d, 0x110e22fff6) r6 = socket$inet_udp(0x2, 0x2, 0x0) r7 = socket$kcm(0x29, 0x0, 0x0) bind$inet(r6, &(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10) sendmmsg$inet(r7, &(0x7f0000000100)=[{{&(0x7f00000001c0)={0x2, 0x6e23, @multicast1}, 0x10, 0x0}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000440)="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", 0x15b}, {&(0x7f00000005c0)="6242870f0e6b4396205a2c501f10b0602b64a04104bf0ef28ebfda215394bae4fc4333799a6fcd9a17ec83cfbb17c507aa27a3b4f2621e8caa786f3f6d7ebf1863150a9b64333542704a410fa62c556d76d8250364fa8445b75536a74b3dec286c7b5dba4cb16a12e4a1a7c96cf85432faa291cde51564e210d496637444e64540519a6f8a381cee6ddf4f4a5abbc88b9317684146d539489aaddc2b21909092ab26a1", 0xa3}, {&(0x7f0000000680)="55bbeefbb9a13c80fa527d489144bf9bdcfdf9108b8fbd754043e281e3c4af285fd285f0ccc9655dfb2c2330aba5e7f71f81f05b23afb867db3b29e2d37b802dfc57772a9a4a6f8e948f5bbcbb8308ae67d57e70daa13148536e5cfe1eec171afbbf0a99f64a3b0658fe289be98f34a3ac141f9996f71a6c32cd9e930f86b9aa8d31e566b3e6f38babdb6943940ad3a772bf979b09342c1efda704b79afa2bf5e196980baebe6f02d63e02f03dc1ac21f396193ecd7847747df6a9fce93ffac03710f38d0af3dd", 0xc7}, {&(0x7f0000000780)="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", 0x154}, {&(0x7f0000000900)="bfc1bfc99c5689c343747de08ca174e7537bba6643a8728bf280dab2e5d29eecc79b53bdc4d9e551904ceda1445fa16f896686a8046d3bc57c10f855dcb44b79c9d4bb0b9285a4590cd7ac862a4efeb27a62f1dac53434cb036335931f77b80f43fef6f7d01fcc8ef21a3611c200d37fba4b86c11fad0395115bf2414e311c5072016f851461ee4cd792f20c97617793b8604ab6ad654960779bed9c68fed82cfe4a5b41caab29552ef9e3eacee6e2d0628d474cb9455cc7a853c4dd2e0961f0c13a424789b26b8e2bc500e65da26e5e618ec40b4f", 0xd5}, {&(0x7f0000000a00)="ac6aed94fbb8c7fecccf1fbe0f823f4711e4d4e5831b1172b79994156deeb8f47a21f6bd119ffeb486267bd8dbaa3b868deca95efc3fea013ea88ddd3222ff7cc0a3448434dca51f5bc1972720dc071c5c5e2358a62bb3d9", 0x58}, {&(0x7f0000000a80)="2b8b2b325ad22295a5ffaf3efd1994e26bc74fde19fa2a4de9680446e09aceec3092596411789f9710534d21bda9f2ae6b34c7de081c1448b9f05dedb6c8e34bba9999b17c7c67179b66b7f8aaf7d81605bcd7c80825ae939b30561a6e1bf58cd680b6bb18d61f5dd0f8497b6feb9f13680a7766e26f938bcbbe", 0x7a}], 0x7}}], 0x2, 0x2000c0c0) writev(r6, &(0x7f0000000b00)=[{&(0x7f0000000b40)="9d", 0x1}], 0x1) getpeername$packet(r4, &(0x7f0000000d40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000d00)=0x11) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000ec0)=ANY=[@ANYBLOB="449e00000010000305bcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="91150200318800001c0012800b0001006d616373656300000c00028005000b000000000008000500", @ANYRES32=r8, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x48890}, 0x0) 22.559640372s ago: executing program 1 (id=3222): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000a80)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000c00)=[@rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}], 0x48}, 0x40) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000d00)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000d40)={0xc, 0x8, &(0x7f0000000e00)=ANY=[], &(0x7f0000000e40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000f00)={r2, 0x3e8, 0xf, 0x0, &(0x7f0000000f80)="c1df0600000200000000000000a887", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 22.354180101s ago: executing program 1 (id=3223): r0 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss={0x2, 0x4}, @mss={0x2, 0xffffffff}, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x6) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='veno', 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='roccet', 0x6) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) 21.988486769s ago: executing program 0 (id=3224): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001500)={0x5, 0x5, &(0x7f00000015c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000e5020000000000000000000095"], &(0x7f0000001600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) r1 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r1, &(0x7f0000001640)={&(0x7f0000001680)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0xae}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc) setsockopt$sock_attach_bpf(r1, 0x1, 0x12, &(0x7f00000016c0)=r0, 0x4) 0s ago: executing program 32 (id=3223): r0 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss={0x2, 0x4}, @mss={0x2, 0xffffffff}, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x6) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='veno', 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='roccet', 0x6) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) kernel console output (not intermixed with test programs): ributes in process `syz.2.2640'. [ 342.357247][T14299] FAULT_INJECTION: forcing a failure. [ 342.357247][T14299] name failslab, interval 1, probability 0, space 0, times 0 [ 342.357276][T14299] CPU: 1 UID: 0 PID: 14299 Comm: syz.1.2643 Not tainted syzkaller #0 PREEMPT(full) [ 342.357296][T14299] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 342.357306][T14299] Call Trace: [ 342.357313][T14299] [ 342.357321][T14299] dump_stack_lvl+0xe8/0x150 [ 342.357352][T14299] should_fail_ex+0x3eb/0x540 [ 342.357379][T14299] should_failslab+0xa8/0x100 [ 342.357399][T14299] __kmalloc_node_track_caller_noprof+0xf6/0x720 [ 342.357429][T14299] ? rcu_is_watching+0x16/0xb0 [ 342.357455][T14299] ? kvrealloc_node_align_noprof+0x7b/0xf0 [ 342.357478][T14299] ? kvrealloc_node_align_noprof+0x7b/0xf0 [ 342.357506][T14299] ? kvrealloc_node_align_noprof+0x7b/0xf0 [ 342.357536][T14299] krealloc_node_align_noprof+0x19a/0x390 [ 342.357560][T14299] ? rcu_is_watching+0x16/0xb0 [ 342.357590][T14299] kvrealloc_node_align_noprof+0x7b/0xf0 [ 342.357618][T14299] add_expr+0x42d/0x6e0 [ 342.357640][T14299] ? bpf_init_scev+0x167/0x460 [ 342.357672][T14299] bpf_init_scev+0x1a2/0x460 [ 342.357696][T14299] bpf_check+0x2fd8/0x34e0 [ 342.357732][T14299] ? ktime_get_with_offset+0x93/0x2d0 [ 342.357756][T14299] ? ktime_get_with_offset+0x93/0x2d0 [ 342.357780][T14299] ? __pfx_bpf_check+0x10/0x10 [ 342.357803][T14299] ? bpf_obj_name_cpy+0x194/0x1e0 [ 342.357830][T14299] bpf_prog_load+0x14da/0x1c60 [ 342.357862][T14299] ? __pfx_bpf_prog_load+0x10/0x10 [ 342.357897][T14299] ? __might_fault+0xaf/0x130 [ 342.357923][T14299] __sys_bpf+0xd86/0xe00 [ 342.357953][T14299] ? __pfx___sys_bpf+0x10/0x10 [ 342.357982][T14299] ? __fget_files+0x2a/0x420 [ 342.358026][T14299] ? ksys_write+0x242/0x270 [ 342.358050][T14299] ? __pfx_ksys_write+0x10/0x10 [ 342.358080][T14299] __x64_sys_bpf+0xba/0xd0 [ 342.358108][T14299] do_syscall_64+0x166/0x520 [ 342.358130][T14299] ? trace_irq_disable+0x3b/0x140 [ 342.358153][T14299] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 342.358171][T14299] ? clear_bhb_loop+0x70/0xc0 [ 342.358193][T14299] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 342.358215][T14299] RIP: 0033:0x7ff4e85a8f19 [ 342.358232][T14299] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 342.358248][T14299] RSP: 002b:00007ff4e941b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 342.358268][T14299] RAX: ffffffffffffffda RBX: 00007ff4e8825fa0 RCX: 00007ff4e85a8f19 [ 342.358281][T14299] RDX: 0000000000000094 RSI: 0000200000000340 RDI: 0000000000000005 [ 342.358293][T14299] RBP: 00007ff4e941b090 R08: 0000000000000000 R09: 0000000000000000 [ 342.358304][T14299] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 342.358316][T14299] R13: 00007ff4e8826038 R14: 00007ff4e8825fa0 R15: 00007ffc2651ee88 [ 342.358349][T14299] [ 342.820397][T14308] netlink: 'syz.1.2647': attribute type 30 has an invalid length. [ 343.067843][T14325] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2651'. [ 343.121434][T14326] netlink: 2 bytes leftover after parsing attributes in process `syz.3.2652'. [ 343.300673][T14338] hsr0: entered allmulticast mode [ 343.300697][T14338] hsr_slave_0: entered allmulticast mode [ 343.300713][T14338] hsr_slave_1: entered allmulticast mode [ 343.363470][T14338] syzkaller0: entered promiscuous mode [ 343.363493][T14338] syzkaller0: entered allmulticast mode [ 343.723370][T14334] hsr0: left allmulticast mode [ 343.723420][T14334] hsr_slave_0: left allmulticast mode [ 343.723437][T14334] hsr_slave_1: left allmulticast mode [ 344.359088][T14379] netlink: 2 bytes leftover after parsing attributes in process `syz.2.2667'. [ 344.514352][T14392] hsr0: entered allmulticast mode [ 344.514375][T14392] hsr_slave_0: entered allmulticast mode [ 344.514391][T14392] hsr_slave_1: entered allmulticast mode [ 344.541099][T14394] FAULT_INJECTION: forcing a failure. [ 344.541099][T14394] name failslab, interval 1, probability 0, space 0, times 0 [ 344.541127][T14394] CPU: 1 UID: 0 PID: 14394 Comm: syz.1.2672 Not tainted syzkaller #0 PREEMPT(full) [ 344.541161][T14394] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 344.541183][T14394] Call Trace: [ 344.541201][T14394] [ 344.541209][T14394] dump_stack_lvl+0xe8/0x150 [ 344.541242][T14394] should_fail_ex+0x3eb/0x540 [ 344.541266][T14394] should_failslab+0xa8/0x100 [ 344.541286][T14394] __kmalloc_cache_noprof+0x9e/0x600 [ 344.541309][T14394] ? __raw_spin_lock_init+0x45/0x100 [ 344.541326][T14394] ? bpf_prog_stream_init+0x24c/0x4a0 [ 344.541346][T14394] ? bpf_prog_stream_init+0x24c/0x4a0 [ 344.541376][T14394] bpf_prog_stream_init+0x24c/0x4a0 [ 344.541403][T14394] bpf_prog_load+0xcb8/0x1c60 [ 344.541436][T14394] ? __pfx_bpf_prog_load+0x10/0x10 [ 344.541472][T14394] ? __might_fault+0xaf/0x130 [ 344.541497][T14394] __sys_bpf+0xd86/0xe00 [ 344.541524][T14394] ? __pfx___sys_bpf+0x10/0x10 [ 344.541555][T14394] ? __fget_files+0x2a/0x420 [ 344.541597][T14394] ? ksys_write+0x242/0x270 [ 344.541624][T14394] ? __pfx_ksys_write+0x10/0x10 [ 344.541654][T14394] __x64_sys_bpf+0xba/0xd0 [ 344.541684][T14394] do_syscall_64+0x166/0x520 [ 344.541705][T14394] ? trace_irq_disable+0x3b/0x140 [ 344.541729][T14394] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 344.541746][T14394] ? clear_bhb_loop+0x70/0xc0 [ 344.541768][T14394] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 344.541786][T14394] RIP: 0033:0x7ff4e85a8f19 [ 344.541807][T14394] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 344.541822][T14394] RSP: 002b:00007ff4e941b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 344.541842][T14394] RAX: ffffffffffffffda RBX: 00007ff4e8825fa0 RCX: 00007ff4e85a8f19 [ 344.541856][T14394] RDX: 0000000000000048 RSI: 00002000000004c0 RDI: 0000000000000005 [ 344.541867][T14394] RBP: 00007ff4e941b090 R08: 0000000000000000 R09: 0000000000000000 [ 344.541879][T14394] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 344.541890][T14394] R13: 00007ff4e8826038 R14: 00007ff4e8825fa0 R15: 00007ffc2651ee88 [ 344.541923][T14394] [ 344.564641][T14392] syzkaller0: entered promiscuous mode [ 344.564663][T14392] syzkaller0: entered allmulticast mode [ 344.990113][T14410] FAULT_INJECTION: forcing a failure. [ 344.990113][T14410] name failslab, interval 1, probability 0, space 0, times 0 [ 344.990156][T14410] CPU: 0 UID: 0 PID: 14410 Comm: syz.4.2676 Not tainted syzkaller #0 PREEMPT(full) [ 344.990177][T14410] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 344.990188][T14410] Call Trace: [ 344.990195][T14410] [ 344.990204][T14410] dump_stack_lvl+0xe8/0x150 [ 344.990238][T14410] should_fail_ex+0x3eb/0x540 [ 344.990265][T14410] should_failslab+0xa8/0x100 [ 344.990285][T14410] __kmalloc_node_track_caller_noprof+0xf6/0x720 [ 344.990309][T14410] ? rcu_is_watching+0x16/0xb0 [ 344.990334][T14410] ? kvrealloc_node_align_noprof+0x7b/0xf0 [ 344.990358][T14410] ? kvrealloc_node_align_noprof+0x7b/0xf0 [ 344.990386][T14410] ? kvrealloc_node_align_noprof+0x7b/0xf0 [ 344.990412][T14410] krealloc_node_align_noprof+0x19a/0x390 [ 344.990443][T14410] kvrealloc_node_align_noprof+0x7b/0xf0 [ 344.990470][T14410] add_expr+0x2fd/0x6e0 [ 344.990503][T14410] bpf_compute_scev+0x1557/0x7520 [ 344.990548][T14410] ? bpf_init_scev+0x299/0x460 [ 344.990566][T14410] ? rcu_is_watching+0x16/0xb0 [ 344.990591][T14410] ? bpf_init_scev+0x299/0x460 [ 344.990615][T14410] ? trace_kmalloc+0x2a/0xf0 [ 344.990643][T14410] ? bpf_init_scev+0x299/0x460 [ 344.990663][T14410] ? __pfx_bpf_compute_scev+0x10/0x10 [ 344.990687][T14410] ? bpf_init_scev+0x2f7/0x460 [ 344.990708][T14410] bpf_check+0x2ff8/0x34e0 [ 344.990739][T14410] ? ktime_get_with_offset+0x93/0x2d0 [ 344.990764][T14410] ? ktime_get_with_offset+0x93/0x2d0 [ 344.990787][T14410] ? __pfx_bpf_check+0x10/0x10 [ 344.990807][T14410] ? bpf_obj_name_cpy+0x194/0x1e0 [ 344.990833][T14410] bpf_prog_load+0x14da/0x1c60 [ 344.990863][T14410] ? __pfx_bpf_prog_load+0x10/0x10 [ 344.990898][T14410] ? __might_fault+0xaf/0x130 [ 344.990925][T14410] __sys_bpf+0xd86/0xe00 [ 344.990951][T14410] ? __pfx___sys_bpf+0x10/0x10 [ 344.990981][T14410] ? __fget_files+0x2a/0x420 [ 344.991020][T14410] ? ksys_write+0x242/0x270 [ 344.991046][T14410] ? __pfx_ksys_write+0x10/0x10 [ 344.991071][T14410] __x64_sys_bpf+0xba/0xd0 [ 344.991098][T14410] do_syscall_64+0x166/0x520 [ 344.991122][T14410] ? trace_irq_disable+0x3b/0x140 [ 344.991144][T14410] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 344.991161][T14410] ? clear_bhb_loop+0x70/0xc0 [ 344.991183][T14410] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 344.991200][T14410] RIP: 0033:0x7f877b1a8f19 [ 344.991218][T14410] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 344.991232][T14410] RSP: 002b:00007f877bfb2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 344.991251][T14410] RAX: ffffffffffffffda RBX: 00007f877b425fa0 RCX: 00007f877b1a8f19 [ 344.991264][T14410] RDX: 0000000000000048 RSI: 00002000000011c0 RDI: 0000000000000005 [ 344.991276][T14410] RBP: 00007f877bfb2090 R08: 0000000000000000 R09: 0000000000000000 [ 344.991288][T14410] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 344.991299][T14410] R13: 00007f877b426038 R14: 00007f877b425fa0 R15: 00007fffe27f4628 [ 344.991330][T14410] [ 345.638810][T14391] hsr0: left allmulticast mode [ 345.638832][T14391] hsr_slave_0: left allmulticast mode [ 345.638848][T14391] hsr_slave_1: left allmulticast mode [ 345.702169][T14437] FAULT_INJECTION: forcing a failure. [ 345.702169][T14437] name failslab, interval 1, probability 0, space 0, times 0 [ 345.702199][T14437] CPU: 0 UID: 0 PID: 14437 Comm: syz.3.2680 Not tainted syzkaller #0 PREEMPT(full) [ 345.702220][T14437] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 345.702230][T14437] Call Trace: [ 345.702238][T14437] [ 345.702247][T14437] dump_stack_lvl+0xe8/0x150 [ 345.702281][T14437] should_fail_ex+0x3eb/0x540 [ 345.702307][T14437] should_failslab+0xa8/0x100 [ 345.702332][T14437] __kmalloc_cache_noprof+0x9e/0x600 [ 345.702357][T14437] ? __raw_spin_lock_init+0x45/0x100 [ 345.702373][T14437] ? ovs_flow_cmd_new+0x317/0xea0 [ 345.702393][T14437] ? ovs_flow_cmd_new+0x317/0xea0 [ 345.702421][T14437] ovs_flow_cmd_new+0x317/0xea0 [ 345.702447][T14437] ? __kasan_kmalloc+0x93/0xb0 [ 345.702478][T14437] ? __pfx_ovs_flow_cmd_new+0x10/0x10 [ 345.702556][T14437] ? __kmalloc_noprof+0x387/0x710 [ 345.702580][T14437] ? __nla_parse+0x40/0x60 [ 345.702615][T14437] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 345.702636][T14437] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 345.702666][T14437] genl_family_rcv_msg_doit+0x233/0x340 [ 345.702696][T14437] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 345.702732][T14437] ? bpf_lsm_capable+0x9/0x20 [ 345.702750][T14437] ? security_capable+0x7e/0x2c0 [ 345.702784][T14437] genl_rcv_msg+0x614/0x7a0 [ 345.702814][T14437] ? __pfx_genl_rcv_msg+0x10/0x10 [ 345.702834][T14437] ? __pfx_ovs_flow_cmd_new+0x10/0x10 [ 345.702894][T14437] netlink_rcv_skb+0x226/0x4a0 [ 345.702923][T14437] ? __pfx_genl_rcv_msg+0x10/0x10 [ 345.702943][T14437] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 345.702984][T14437] ? down_read+0x2b9/0x320 [ 345.703012][T14437] genl_rcv+0x28/0x40 [ 345.703031][T14437] netlink_unicast+0x8ef/0xa80 [ 345.703074][T14437] netlink_sendmsg+0x7f0/0xb20 [ 345.703099][T14437] ? __pfx_netlink_sendmsg+0x10/0x10 [ 345.703120][T14437] ? aa_sock_msg_perm+0x144/0x210 [ 345.703144][T14437] ? apparmor_socket_sendmsg+0x98/0x360 [ 345.703170][T14437] ? __pfx_netlink_sendmsg+0x10/0x10 [ 345.703205][T14437] sock_sendmsg_nosec+0x14e/0x190 [ 345.703234][T14437] ____sys_sendmsg+0x54e/0x850 [ 345.703257][T14437] ? __pfx_____sys_sendmsg+0x10/0x10 [ 345.703284][T14437] ? import_iovec+0x73/0xa0 [ 345.703307][T14437] ___sys_sendmsg+0x2a5/0x360 [ 345.703323][T14437] ? __lock_acquire+0x747/0x2de0 [ 345.703348][T14437] ? __pfx____sys_sendmsg+0x10/0x10 [ 345.703409][T14437] ? __fget_files+0x3a2/0x420 [ 345.703430][T14437] ? __fget_files+0x2a/0x420 [ 345.703463][T14437] __x64_sys_sendmsg+0x1b1/0x290 [ 345.703486][T14437] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 345.703530][T14437] do_syscall_64+0x166/0x520 [ 345.703553][T14437] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 345.703572][T14437] ? clear_bhb_loop+0x70/0xc0 [ 345.703595][T14437] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 345.703619][T14437] RIP: 0033:0x7f35c3da8f19 [ 345.703637][T14437] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 345.703652][T14437] RSP: 002b:00007f35c4c9e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 345.703672][T14437] RAX: ffffffffffffffda RBX: 00007f35c4025fa0 RCX: 00007f35c3da8f19 [ 345.703685][T14437] RDX: 000000000000c010 RSI: 0000200000000000 RDI: 0000000000000004 [ 345.703697][T14437] RBP: 00007f35c4c9e090 R08: 0000000000000000 R09: 0000000000000000 [ 345.703709][T14437] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 345.703721][T14437] R13: 00007f35c4026038 R14: 00007f35c4025fa0 R15: 00007ffe2d7afbf8 [ 345.703754][T14437] [ 345.967007][ T82] net_ratelimit: 66 callbacks suppressed [ 345.967027][ T82] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 345.967057][ T82] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 346.101506][T14445] netlink: 2 bytes leftover after parsing attributes in process `syz.3.2683'. [ 346.104556][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 346.105113][ T6786] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 346.105151][ T6786] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 346.134434][T14447] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2684'. [ 346.214462][ T62] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 346.214509][ T62] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 346.324683][ T6786] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 346.324726][ T6786] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 346.381383][T14458] netlink: 'syz.3.2689': attribute type 1 has an invalid length. [ 346.381418][T14458] netlink: 'syz.3.2689': attribute type 1 has an invalid length. [ 346.434332][ T6786] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 346.504054][T14463] hsr0: entered allmulticast mode [ 346.504076][T14463] hsr_slave_0: entered allmulticast mode [ 346.504806][T14463] hsr_slave_1: entered allmulticast mode [ 346.516964][T14463] syzkaller0: entered promiscuous mode [ 346.516987][T14463] syzkaller0: entered allmulticast mode [ 346.658853][T14465] syzkaller0: entered promiscuous mode [ 346.658869][T14465] syzkaller0: entered allmulticast mode [ 346.696342][T14462] hsr0: left allmulticast mode [ 346.696363][T14462] hsr_slave_0: left allmulticast mode [ 346.696379][T14462] hsr_slave_1: left allmulticast mode [ 346.733359][T14471] FAULT_INJECTION: forcing a failure. [ 346.733359][T14471] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 346.733378][T14471] CPU: 1 UID: 0 PID: 14471 Comm: syz.3.2694 Not tainted syzkaller #0 PREEMPT(full) [ 346.733389][T14471] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 346.733396][T14471] Call Trace: [ 346.733401][T14471] [ 346.733406][T14471] dump_stack_lvl+0xe8/0x150 [ 346.733426][T14471] should_fail_ex+0x3eb/0x540 [ 346.733442][T14471] _copy_to_user+0x31/0xb0 [ 346.733457][T14471] simple_read_from_buffer+0xe1/0x170 [ 346.733474][T14471] proc_fail_nth_read+0x1bb/0x230 [ 346.733493][T14471] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 346.733507][T14471] ? rw_verify_area+0x24a/0x4c0 [ 346.733522][T14471] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 346.733534][T14471] vfs_read+0x213/0xa80 [ 346.733550][T14471] ? __pfx___mutex_lock+0x10/0x10 [ 346.733565][T14471] ? __pfx_vfs_read+0x10/0x10 [ 346.733578][T14471] ? __fget_files+0x2a/0x420 [ 346.733590][T14471] ? __fget_files+0x3a2/0x420 [ 346.733601][T14471] ? __fget_files+0x2a/0x420 [ 346.733615][T14471] ? fdget+0x1ac/0x250 [ 346.733631][T14471] ksys_read+0x150/0x270 [ 346.733647][T14471] ? __pfx_ksys_read+0x10/0x10 [ 346.733667][T14471] do_syscall_64+0x166/0x520 [ 346.733679][T14471] ? trace_irq_disable+0x3b/0x140 [ 346.733693][T14471] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 346.733703][T14471] ? clear_bhb_loop+0x70/0xc0 [ 346.733719][T14471] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 346.733729][T14471] RIP: 0033:0x7f35c3d6974e [ 346.733740][T14471] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 346.733749][T14471] RSP: 002b:00007f35c4c9dfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 346.733761][T14471] RAX: ffffffffffffffda RBX: 00007f35c4c9e6c0 RCX: 00007f35c3d6974e [ 346.733769][T14471] RDX: 000000000000000f RSI: 00007f35c4c9e0a0 RDI: 0000000000000004 [ 346.733776][T14471] RBP: 00007f35c4c9e090 R08: 0000000000000000 R09: 0000000000000000 [ 346.733782][T14471] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 346.733788][T14471] R13: 00007f35c4026038 R14: 00007f35c4025fa0 R15: 00007ffe2d7afbf8 [ 346.733805][T14471] [ 347.307873][T14493] Bluetooth: hci0: invalid len left 17, exp >= 20 [ 347.645134][T14504] hsr0: entered allmulticast mode [ 347.645158][T14504] hsr_slave_0: entered allmulticast mode [ 347.645175][T14504] hsr_slave_1: entered allmulticast mode [ 348.070412][T14507] syzkaller0: entered promiscuous mode [ 348.070436][T14507] syzkaller0: entered allmulticast mode [ 348.585382][T14503] hsr0: left allmulticast mode [ 348.585405][T14503] hsr_slave_0: left allmulticast mode [ 348.585421][T14503] hsr_slave_1: left allmulticast mode [ 349.317660][T14578] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2723'. [ 349.487609][T14583] FAULT_INJECTION: forcing a failure. [ 349.487609][T14583] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 349.487659][T14583] CPU: 1 UID: 0 PID: 14583 Comm: syz.0.2725 Not tainted syzkaller #0 PREEMPT(full) [ 349.487679][T14583] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 349.487690][T14583] Call Trace: [ 349.487726][T14583] [ 349.487803][T14583] dump_stack_lvl+0xe8/0x150 [ 349.487858][T14583] should_fail_ex+0x3eb/0x540 [ 349.487885][T14583] _copy_from_user+0x2d/0xb0 [ 349.487909][T14583] ___sys_sendmsg+0x1c6/0x360 [ 349.487928][T14583] ? __lock_acquire+0x747/0x2de0 [ 349.487967][T14583] ? __pfx____sys_sendmsg+0x10/0x10 [ 349.488033][T14583] ? __fget_files+0x3a2/0x420 [ 349.488057][T14583] ? __fget_files+0x2a/0x420 [ 349.488096][T14583] __x64_sys_sendmsg+0x1b1/0x290 [ 349.488131][T14583] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 349.488176][T14583] do_syscall_64+0x166/0x520 [ 349.488198][T14583] ? trace_irq_disable+0x3b/0x140 [ 349.488240][T14583] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 349.488258][T14583] ? clear_bhb_loop+0x70/0xc0 [ 349.488280][T14583] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 349.488298][T14583] RIP: 0033:0x7fb329fa8f19 [ 349.488345][T14583] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 349.488387][T14583] RSP: 002b:00007fb32adbf028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 349.488406][T14583] RAX: ffffffffffffffda RBX: 00007fb32a225fa0 RCX: 00007fb329fa8f19 [ 349.488419][T14583] RDX: 0000000024000052 RSI: 0000200000000280 RDI: 0000000000000003 [ 349.488431][T14583] RBP: 00007fb32adbf090 R08: 0000000000000000 R09: 0000000000000000 [ 349.488443][T14583] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 349.488454][T14583] R13: 00007fb32a226038 R14: 00007fb32a225fa0 R15: 00007fffd44c0658 [ 349.488493][T14583] [ 350.724582][T14636] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2733'. [ 351.389001][ T10] net_ratelimit: 35 callbacks suppressed [ 351.389023][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 351.938421][T14659] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2735'. [ 352.058461][T14663] FAULT_INJECTION: forcing a failure. [ 352.058461][T14663] name failslab, interval 1, probability 0, space 0, times 0 [ 352.058491][T14663] CPU: 1 UID: 0 PID: 14663 Comm: syz.1.2737 Not tainted syzkaller #0 PREEMPT(full) [ 352.058510][T14663] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 352.058521][T14663] Call Trace: [ 352.058528][T14663] [ 352.058536][T14663] dump_stack_lvl+0xe8/0x150 [ 352.058570][T14663] should_fail_ex+0x3eb/0x540 [ 352.058596][T14663] ? __alloc_skb+0x1db/0x7a0 [ 352.058613][T14663] should_failslab+0xa8/0x100 [ 352.058633][T14663] ? __alloc_skb+0x1db/0x7a0 [ 352.058648][T14663] kmem_cache_alloc_node_noprof+0x9c/0x600 [ 352.058672][T14663] ? __alloc_skb+0x18d/0x7a0 [ 352.058689][T14663] ? __alloc_skb+0x1db/0x7a0 [ 352.058713][T14663] __alloc_skb+0x1db/0x7a0 [ 352.058735][T14663] xfrm_alloc_compat+0x1a6/0x1740 [ 352.058772][T14663] ? __pfx_xfrm_alloc_compat+0x10/0x10 [ 352.058799][T14663] xfrm_nlmsg_multicast+0xda/0x1f0 [ 352.058824][T14663] xfrm_send_state_notify+0xc5e/0x18d0 [ 352.058852][T14663] ? __pfx_xfrm_send_state_notify+0x10/0x10 [ 352.058877][T14663] ? xfrm_state_add+0x582/0xd50 [ 352.058893][T14663] ? __local_bh_enable_ip+0xd6/0x140 [ 352.058913][T14663] ? xfrm_state_add+0x8fa/0xd50 [ 352.058928][T14663] ? km_state_notify+0x25/0x1f0 [ 352.058944][T14663] ? km_state_notify+0x25/0x1f0 [ 352.058961][T14663] ? __pfx_xfrm_send_state_notify+0x10/0x10 [ 352.058979][T14663] km_state_notify+0x110/0x1f0 [ 352.058999][T14663] pfkey_add+0x204b/0x2e50 [ 352.059034][T14663] ? __pfx_pfkey_add+0x10/0x10 [ 352.059063][T14663] pfkey_sendmsg+0xceb/0x11d0 [ 352.059091][T14663] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 352.059128][T14663] ? aa_sock_msg_perm+0x144/0x210 [ 352.059159][T14663] ? apparmor_socket_sendmsg+0x98/0x360 [ 352.059183][T14663] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 352.059198][T14663] sock_sendmsg_nosec+0x14e/0x190 [ 352.059222][T14663] ____sys_sendmsg+0x54e/0x850 [ 352.059244][T14663] ? __pfx_____sys_sendmsg+0x10/0x10 [ 352.059270][T14663] ? import_iovec+0x73/0xa0 [ 352.059292][T14663] ___sys_sendmsg+0x2a5/0x360 [ 352.059307][T14663] ? __lock_acquire+0x747/0x2de0 [ 352.059330][T14663] ? __pfx____sys_sendmsg+0x10/0x10 [ 352.059382][T14663] ? __fget_files+0x3a2/0x420 [ 352.059400][T14663] ? __fget_files+0x2a/0x420 [ 352.059427][T14663] __x64_sys_sendmsg+0x1b1/0x290 [ 352.059447][T14663] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 352.059486][T14663] do_syscall_64+0x166/0x520 [ 352.059504][T14663] ? trace_irq_disable+0x3b/0x140 [ 352.059525][T14663] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 352.059540][T14663] ? clear_bhb_loop+0x70/0xc0 [ 352.059559][T14663] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 352.059573][T14663] RIP: 0033:0x7ff4e85a8f19 [ 352.059589][T14663] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 352.059602][T14663] RSP: 002b:00007ff4e941b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 352.059620][T14663] RAX: ffffffffffffffda RBX: 00007ff4e8825fa0 RCX: 00007ff4e85a8f19 [ 352.059631][T14663] RDX: 0000000000000000 RSI: 00002000000006c0 RDI: 0000000000000003 [ 352.059641][T14663] RBP: 00007ff4e941b090 R08: 0000000000000000 R09: 0000000000000000 [ 352.059651][T14663] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 352.059660][T14663] R13: 00007ff4e8826038 R14: 00007ff4e8825fa0 R15: 00007ffc2651ee88 [ 352.059687][T14663] [ 352.280438][T14667] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 352.280628][T14667] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 352.280872][T14667] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 352.281681][T14667] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 352.281831][T14667] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 352.282215][T14666] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 352.797044][T14678] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2741'. [ 352.974401][T14589] hsr0: entered allmulticast mode [ 352.974423][T14589] hsr_slave_0: entered allmulticast mode [ 352.974436][T14589] hsr_slave_1: entered allmulticast mode [ 352.974579][T14589] hsr0: left allmulticast mode [ 352.974592][T14589] hsr_slave_0: left allmulticast mode [ 352.974606][T14589] hsr_slave_1: left allmulticast mode [ 353.105231][T14676] netlink: 'syz.1.2741': attribute type 1 has an invalid length. [ 353.116290][ T6786] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 353.116334][ T6786] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 353.158477][ T6786] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 353.196044][T14682] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2742'. [ 353.400153][T14698] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2746'. [ 353.877494][T14714] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2748'. [ 354.001218][T14714] smc: ib device syz0 ibport 2 applied user defined pnetid SYZ2 [ 354.612763][T14756] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2758'. [ 354.756395][T14761] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2760'. [ 355.126786][T14778] netlink: 'syz.0.2763': attribute type 1 has an invalid length. [ 355.266990][T14765] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2761'. [ 355.313791][T14765] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2761'. [ 355.612553][T14793] sctp: [Deprecated]: syz.3.2769 (pid 14793) Use of struct sctp_assoc_value in delayed_ack socket option. [ 355.612553][T14793] Use struct sctp_sack_info instead [ 355.613399][T14794] netlink: 1 bytes leftover after parsing attributes in process `syz.2.2768'. [ 355.765332][T14798] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2771'. [ 356.044034][T14806] FAULT_INJECTION: forcing a failure. [ 356.044034][T14806] name failslab, interval 1, probability 0, space 0, times 0 [ 356.044066][T14806] CPU: 0 UID: 0 PID: 14806 Comm: syz.1.2775 Not tainted syzkaller #0 PREEMPT(full) [ 356.044090][T14806] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 356.044100][T14806] Call Trace: [ 356.044107][T14806] [ 356.044115][T14806] dump_stack_lvl+0xe8/0x150 [ 356.044150][T14806] should_fail_ex+0x3eb/0x540 [ 356.044183][T14806] should_failslab+0xa8/0x100 [ 356.044202][T14806] ? skb_clone+0x212/0x3a0 [ 356.044223][T14806] kmem_cache_alloc_noprof+0x9c/0x600 [ 356.044248][T14806] ? skb_clone+0x212/0x3a0 [ 356.044277][T14806] skb_clone+0x212/0x3a0 [ 356.044302][T14806] bpf_clone_redirect+0x170/0x4b0 [ 356.044329][T14806] ? bpf_test_run+0x1d1/0x830 [ 356.044354][T14806] bpf_prog_2f59963de350c2d2+0x5e/0x67 [ 356.044376][T14806] ? __kernel_text_address+0xd/0x30 [ 356.044402][T14806] ? arch_stack_walk+0xfb/0x150 [ 356.044431][T14806] ? __pfx___schedule+0x10/0x10 [ 356.044468][T14806] ? preempt_schedule_thunk+0x16/0x40 [ 356.044492][T14806] ? preempt_schedule_common+0x7f/0xd0 [ 356.044514][T14806] ? bpf_test_run+0x1d1/0x830 [ 356.044543][T14806] ? bpf_test_timer_continue+0x114/0x390 [ 356.044565][T14806] bpf_test_run+0x354/0x830 [ 356.044615][T14806] ? __pfx_bpf_test_run+0x10/0x10 [ 356.044658][T14806] ? __kasan_krealloc+0xec/0x110 [ 356.044687][T14806] ? eth_type_trans+0x33f/0x640 [ 356.044717][T14806] ? skb_dst_set+0x72/0x140 [ 356.044746][T14806] bpf_prog_test_run_skb+0xe7e/0x22e0 [ 356.044794][T14806] ? __fget_files+0x3a2/0x420 [ 356.044815][T14806] ? __fget_files+0x2a/0x420 [ 356.044843][T14806] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 356.044878][T14806] bpf_prog_test_run+0x2c5/0x340 [ 356.044902][T14806] __sys_bpf+0xb1e/0xe00 [ 356.044929][T14806] ? __pfx___sys_bpf+0x10/0x10 [ 356.044959][T14806] ? __fget_files+0x2a/0x420 [ 356.044999][T14806] ? ksys_write+0x242/0x270 [ 356.045026][T14806] ? __pfx_ksys_write+0x10/0x10 [ 356.045056][T14806] __x64_sys_bpf+0xba/0xd0 [ 356.045084][T14806] do_syscall_64+0x166/0x520 [ 356.045107][T14806] ? trace_irq_disable+0x3b/0x140 [ 356.045130][T14806] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 356.045164][T14806] ? clear_bhb_loop+0x70/0xc0 [ 356.045187][T14806] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 356.045204][T14806] RIP: 0033:0x7ff4e85a8f19 [ 356.045222][T14806] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 356.045237][T14806] RSP: 002b:00007ff4e941b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 356.045256][T14806] RAX: ffffffffffffffda RBX: 00007ff4e8825fa0 RCX: 00007ff4e85a8f19 [ 356.045268][T14806] RDX: 0000000000000028 RSI: 0000200000001f80 RDI: 000000000000000a [ 356.045279][T14806] RBP: 00007ff4e941b090 R08: 0000000000000000 R09: 0000000000000000 [ 356.045288][T14806] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 356.045299][T14806] R13: 00007ff4e8826038 R14: 00007ff4e8825fa0 R15: 00007ffc2651ee88 [ 356.045333][T14806] [ 356.414433][ T43] net_ratelimit: 59 callbacks suppressed [ 356.414456][ T43] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 356.414495][ T43] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 356.526106][ T43] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 356.526149][ T43] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 356.563483][T14825] netlink: 'syz.1.2778': attribute type 1 has an invalid length. [ 356.625406][T14825] veth9: entered allmulticast mode [ 356.631170][T14825] bond5: (slave veth9): Enslaving as an active interface with a down link [ 356.649073][ T152] bridge0: port 2(bridge_slave_1) entered disabled state [ 356.667004][T14825] bond3: (slave veth0_to_bond): Releasing active interface [ 356.672420][T14825] bond5: (slave veth0_to_bond): making interface the new active one [ 356.691575][T14825] bond5: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 356.694431][ T152] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 356.694467][ T152] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 356.765552][T14825] macvlan4: entered promiscuous mode [ 356.765576][T14825] macvlan4: entered allmulticast mode [ 356.766242][T14825] bond5: entered promiscuous mode [ 356.766260][T14825] veth0_to_bond: entered promiscuous mode [ 356.766674][T14825] bond5: entered allmulticast mode [ 356.766688][T14825] veth0_to_bond: entered allmulticast mode [ 356.767371][T14825] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 356.768210][T14825] bond5: (slave macvlan4): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 356.768311][T14825] bond5: left allmulticast mode [ 356.768325][T14825] veth0_to_bond: left allmulticast mode [ 356.768342][T14825] bond5: left promiscuous mode [ 356.768354][T14825] veth0_to_bond: left promiscuous mode [ 356.894973][ T152] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 356.895016][ T152] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 356.991122][T14834] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2782'. [ 357.004850][ T6786] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 357.004891][ T6786] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 357.302114][T14842] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2785'. [ 358.666389][T14864] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2792'. [ 358.666424][T14864] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2792'. [ 359.099674][T14810] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 359.537867][T14890] ieee802154 phy1 wpan1: encryption failed: -22 [ 361.065495][T14934] ieee802154 phy1 wpan1: encryption failed: -22 [ 361.434595][ T62] net_ratelimit: 25 callbacks suppressed [ 361.434621][ T62] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 361.435033][ T62] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 361.551642][ T6785] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 361.551933][ T160] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 361.654502][ T160] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 361.654545][ T160] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 361.764607][ T6785] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 361.764653][ T6785] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 361.875705][ T6785] bond2: (slave ip6gretap1): failed to get link speed/duplex [ 361.875746][ T6785] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 362.040073][ T5643] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 362.042313][ T5643] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 362.058974][ T5643] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 362.060684][ T5643] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 362.061257][ T5643] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 362.227213][T14977] ieee802154 phy1 wpan1: encryption failed: -22 [ 362.348520][T14984] bridge0: port 1(bridge_slave_0) entered disabled state [ 362.547728][T14990] __nla_validate_parse: 1 callbacks suppressed [ 362.547748][T14990] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2827'. [ 362.547761][T14990] tipc: Invalid UDP bearer configuration [ 362.547845][T14990] tipc: Enabling of bearer rejected, failed to enable media [ 362.987072][T14972] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 362.987101][T14972] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 363.170004][T14972] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 363.170031][T14972] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 363.204769][T14972] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 363.204790][T14972] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 363.315861][T14972] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 363.315884][T14972] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 363.364745][T15008] vcan0: tx address claim with dest, not broadcast [ 363.763707][T15020] ieee802154 phy1 wpan1: encryption failed: -22 [ 363.929983][ T6786] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 364.312711][ T6786] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 364.475535][ T6786] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 364.625227][T15049] ieee802154 phy1 wpan1: encryption failed: -22 [ 364.777450][T15053] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2848'. [ 364.778301][T15054] bridge0: port 1(veth0) entered blocking state [ 364.778405][T15054] bridge0: port 1(veth0) entered disabled state [ 364.778873][T15054] veth0: entered allmulticast mode [ 364.815722][T15054] veth0: entered promiscuous mode [ 365.061477][T15053] bond0: left allmulticast mode [ 365.433599][ T6786] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 365.477719][T15073] FAULT_INJECTION: forcing a failure. [ 365.477719][T15073] name failslab, interval 1, probability 0, space 0, times 0 [ 365.477746][T15073] CPU: 1 UID: 0 PID: 15073 Comm: syz.0.2854 Not tainted syzkaller #0 PREEMPT(full) [ 365.477765][T15073] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 365.477793][T15073] Call Trace: [ 365.477801][T15073] [ 365.477809][T15073] dump_stack_lvl+0xe8/0x150 [ 365.477842][T15073] should_fail_ex+0x3eb/0x540 [ 365.477868][T15073] ? __alloc_skb+0x1db/0x7a0 [ 365.477886][T15073] should_failslab+0xa8/0x100 [ 365.477906][T15073] ? __alloc_skb+0x1db/0x7a0 [ 365.477921][T15073] kmem_cache_alloc_node_noprof+0x9c/0x600 [ 365.477943][T15073] ? __alloc_skb+0x18d/0x7a0 [ 365.477961][T15073] ? __alloc_skb+0x1db/0x7a0 [ 365.477985][T15073] __alloc_skb+0x1db/0x7a0 [ 365.478008][T15073] netlink_ack+0x136/0xb30 [ 365.478040][T15073] ? __kmalloc_cache_noprof+0x148/0x600 [ 365.478062][T15073] ? nfnetlink_rcv+0x1021/0x28c0 [ 365.478093][T15073] nfnetlink_rcv+0x260c/0x28c0 [ 365.478152][T15073] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 365.478226][T15073] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 365.478250][T15073] ? rcu_preempt_deferred_qs_irqrestore+0x7b7/0xb90 [ 365.478292][T15073] netlink_unicast+0x8ef/0xa80 [ 365.478335][T15073] netlink_sendmsg+0x7f0/0xb20 [ 365.478359][T15073] ? __pfx_netlink_sendmsg+0x10/0x10 [ 365.478380][T15073] ? aa_sock_msg_perm+0x144/0x210 [ 365.478403][T15073] ? apparmor_socket_sendmsg+0x18b/0x360 [ 365.478433][T15073] ? __pfx_netlink_sendmsg+0x10/0x10 [ 365.478450][T15073] sock_sendmsg_nosec+0x14e/0x190 [ 365.478478][T15073] ____sys_sendmsg+0x54e/0x850 [ 365.478504][T15073] ? __pfx_____sys_sendmsg+0x10/0x10 [ 365.478534][T15073] ? import_iovec+0x73/0xa0 [ 365.478560][T15073] ___sys_sendmsg+0x2a5/0x360 [ 365.478579][T15073] ? __lock_acquire+0x747/0x2de0 [ 365.478606][T15073] ? __pfx____sys_sendmsg+0x10/0x10 [ 365.478659][T15073] ? __fget_files+0x3a2/0x420 [ 365.478680][T15073] ? __fget_files+0x2a/0x420 [ 365.478711][T15073] __x64_sys_sendmsg+0x1b1/0x290 [ 365.478734][T15073] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 365.478777][T15073] do_syscall_64+0x166/0x520 [ 365.478798][T15073] ? trace_irq_disable+0x3b/0x140 [ 365.478822][T15073] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 365.478841][T15073] ? clear_bhb_loop+0x70/0xc0 [ 365.478863][T15073] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 365.478881][T15073] RIP: 0033:0x7fb329fa8f19 [ 365.478899][T15073] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 365.478914][T15073] RSP: 002b:00007fb32adbf028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 365.478934][T15073] RAX: ffffffffffffffda RBX: 00007fb32a225fa0 RCX: 00007fb329fa8f19 [ 365.478947][T15073] RDX: 0000000024000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 365.478960][T15073] RBP: 00007fb32adbf090 R08: 0000000000000000 R09: 0000000000000000 [ 365.478971][T15073] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 365.478982][T15073] R13: 00007fb32a226038 R14: 00007fb32a225fa0 R15: 00007fffd44c0658 [ 365.479011][T15073] [ 365.806025][T14969] bridge0: port 1(bridge_slave_0) entered blocking state [ 365.806132][T14969] bridge0: port 1(bridge_slave_0) entered disabled state [ 365.806295][T14969] bridge_slave_0: entered allmulticast mode [ 365.821652][T14969] bridge_slave_0: entered promiscuous mode [ 365.853361][T14969] bridge0: port 2(bridge_slave_1) entered blocking state [ 365.854266][T14969] bridge0: port 2(bridge_slave_1) entered disabled state [ 365.855518][T14969] bridge_slave_1: entered allmulticast mode [ 365.872035][T14969] bridge_slave_1: entered promiscuous mode [ 365.910427][T15091] ieee802154 phy1 wpan1: encryption failed: -22 [ 366.023644][T14969] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 366.035054][T14969] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 366.057392][T15097] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2859'. [ 366.174638][T14969] team0: Port device team_slave_0 added [ 366.263767][T14969] team0: Port device team_slave_1 added [ 366.341957][ T152] netdevsim netdevsim1 eth4: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.368628][T14969] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 366.368645][T14969] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 366.368667][T14969] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 366.370766][T14969] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 366.370779][T14969] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 366.370801][T14969] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 366.516917][T14969] hsr_slave_0: entered promiscuous mode [ 366.518167][T14969] hsr_slave_1: entered promiscuous mode [ 366.518891][T14969] debugfs: 'hsr0' already exists in 'hsr' [ 366.518928][T14969] Cannot create hsr debugfs directory [ 366.585946][ T5783] net_ratelimit: 52 callbacks suppressed [ 366.585965][ T5783] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 366.616583][ T6786] bond1: left allmulticast mode [ 366.617923][ T6786] bond1: left promiscuous mode [ 366.619194][ T6786] bridge0: port 3(bond1) entered disabled state [ 366.655943][ T6786] bridge_slave_1: left allmulticast mode [ 366.655981][ T6786] bridge_slave_1: left promiscuous mode [ 366.656295][ T6786] bridge0: port 2(bridge_slave_1) entered disabled state [ 366.788348][ T6786] bond_slave_0: left promiscuous mode [ 366.788380][ T6786] bond_slave_1: left promiscuous mode [ 366.998209][ T6786] bond2 (unregistering): (slave ip6gretap1): Releasing backup interface [ 367.047921][T15126] netlink: 'syz.2.2869': attribute type 1 has an invalid length. [ 367.048223][T15126] netlink: 'syz.2.2869': attribute type 1 has an invalid length. [ 367.048487][T15126] netlink: 'syz.2.2869': attribute type 1 has an invalid length. [ 367.048746][T15126] netlink: 'syz.2.2869': attribute type 1 has an invalid length. [ 367.049011][T15126] netlink: 'syz.2.2869': attribute type 1 has an invalid length. [ 367.049270][T15126] netlink: 'syz.2.2869': attribute type 1 has an invalid length. [ 367.053549][T15126] netlink: 'syz.2.2869': attribute type 1 has an invalid length. [ 367.053831][T15126] netlink: 'syz.2.2869': attribute type 1 has an invalid length. [ 367.054189][T15126] netlink: 'syz.2.2869': attribute type 1 has an invalid length. [ 367.054441][T15126] netlink: 'syz.2.2869': attribute type 1 has an invalid length. [ 367.079895][T15130] netlink: 17279 bytes leftover after parsing attributes in process `syz.2.2869'. [ 367.558172][ T6786] bond2 (unregistering): (slave macvlan2): Removing an active aggregator [ 367.562678][ T6786] bond2 (unregistering): (slave macvlan2): Releasing backup interface [ 367.562699][ T6786] bond2 (unregistering): (slave macvlan2): the permanent HWaddr of slave - 86:de:0f:42:f9:35 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 367.609083][ T6786] bond2 (unregistering): (slave macvlan3): Releasing backup interface [ 367.650667][ T152] smc: removing ib device syz0 [ 367.669489][ T6786] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 367.693515][ T6786] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 367.704058][ T6786] bond0 (unregistering): Released all slaves [ 367.743170][ T6786] bond1 (unregistering): Released all slaves [ 367.810393][ T6786] bond2 (unregistering): Released all slaves [ 367.863755][ T6786] bond3 (unregistering): (slave veth5): Releasing active interface [ 367.891802][ T6786] bond3 (unregistering): Released all slaves [ 367.941461][ T6786] bond4 (unregistering): Released all slaves [ 368.002464][ T6786] bond5 (unregistering): (slave veth9): Releasing active interface [ 368.015138][ T6786] bond5 (unregistering): (slave veth0_to_bond): Releasing active interface [ 368.019432][ T6786] bond5 (unregistering): Released all slaves [ 368.171333][ T43] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 368.171402][ T6769] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 368.172067][ T43] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 368.172618][ T43] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 368.308295][ T152] smbdirect: ib_dev[syz0] removed [ 368.462807][ T5298] 8021q: adding VLAN 0 to HW filter on device eth1 [ 368.463326][T15160] tipc: Enabling of bearer rejected, failed to enable media [ 368.464419][ T62] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 368.926716][T15175] netlink: 2 bytes leftover after parsing attributes in process `syz.4.2874'. [ 369.534616][ T160] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 369.644636][ T62] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 369.841691][T14969] netdevsim netdevsim1 eth4 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 369.951718][T15210] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2882'. [ 370.015654][ T62] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 370.228104][ T6785] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 370.231667][ T5298] 8021q: adding VLAN 0 to HW filter on device eth2 [ 370.423922][T14969] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 370.597109][T15241] netlink: 2 bytes leftover after parsing attributes in process `syz.4.2889'. [ 370.669507][T14969] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 370.744361][ T62] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 370.831644][T15246] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2890'. [ 370.831668][T15246] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2890'. [ 370.855280][T14969] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 370.946775][ T160] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 371.040936][T15252] vxlan0: entered promiscuous mode [ 371.040962][T15252] vxlan0: entered allmulticast mode [ 371.065594][ T160] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 371.073727][ T6769] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 371.073792][ T6769] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 371.073863][ T6769] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 371.074040][ T6769] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 371.207863][T15263] FAULT_INJECTION: forcing a failure. [ 371.207863][T15263] name failslab, interval 1, probability 0, space 0, times 0 [ 371.207888][T15263] CPU: 0 UID: 0 PID: 15263 Comm: syz.2.2894 Not tainted syzkaller #0 PREEMPT(full) [ 371.207906][T15263] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 371.207915][T15263] Call Trace: [ 371.207922][T15263] [ 371.207930][T15263] dump_stack_lvl+0xe8/0x150 [ 371.207960][T15263] should_fail_ex+0x3eb/0x540 [ 371.207985][T15263] should_failslab+0xa8/0x100 [ 371.208003][T15263] __kmalloc_noprof+0xf9/0x710 [ 371.208022][T15263] ? sock_kmalloc+0xd6/0x160 [ 371.208038][T15263] ? sock_kmalloc+0xd6/0x160 [ 371.208061][T15263] sock_kmalloc+0xd6/0x160 [ 371.208082][T15263] ____sys_sendmsg+0x1be/0x850 [ 371.208102][T15263] ? __pfx_____sys_sendmsg+0x10/0x10 [ 371.208124][T15263] ? import_iovec+0x73/0xa0 [ 371.208146][T15263] ___sys_sendmsg+0x2a5/0x360 [ 371.208162][T15263] ? __lock_acquire+0x747/0x2de0 [ 371.208186][T15263] ? __pfx____sys_sendmsg+0x10/0x10 [ 371.208233][T15263] ? __fget_files+0x3a2/0x420 [ 371.208252][T15263] ? __fget_files+0x2a/0x420 [ 371.208279][T15263] __x64_sys_sendmsg+0x1b1/0x290 [ 371.208300][T15263] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 371.208334][T15263] do_syscall_64+0x166/0x520 [ 371.208353][T15263] ? trace_irq_disable+0x3b/0x140 [ 371.208375][T15263] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 371.208391][T15263] ? clear_bhb_loop+0x70/0xc0 [ 371.208410][T15263] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 371.208423][T15263] RIP: 0033:0x7ff5adda8f19 [ 371.208438][T15263] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 371.208451][T15263] RSP: 002b:00007ff5aecef028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 371.208468][T15263] RAX: ffffffffffffffda RBX: 00007ff5ae025fa0 RCX: 00007ff5adda8f19 [ 371.208480][T15263] RDX: 0000000024000052 RSI: 0000200000000280 RDI: 0000000000000003 [ 371.208490][T15263] RBP: 00007ff5aecef090 R08: 0000000000000000 R09: 0000000000000000 [ 371.208498][T15263] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 371.208506][T15263] R13: 00007ff5ae026038 R14: 00007ff5ae025fa0 R15: 00007ffff5a61128 [ 371.208532][T15263] [ 371.455991][T15267] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 371.636167][ T321] net_ratelimit: 4 callbacks suppressed [ 371.636186][ T321] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 371.980132][ T6786] !;: left promiscuous mode [ 372.364030][T15287] lo: entered allmulticast mode [ 372.371714][ T6786] tipc: Left network mode [ 372.384813][ T321] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 372.407120][T14969] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 372.450218][T14969] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 372.453906][T14969] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 372.508533][T14969] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 372.513106][T14969] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 372.541001][T14969] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 372.568795][T15282] lo: left allmulticast mode [ 372.570857][T14969] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 372.580123][T15302] netlink: 116 bytes leftover after parsing attributes in process `syz.3.2904'. [ 372.602206][T14969] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 372.623977][T15296] netlink: 2 bytes leftover after parsing attributes in process `syz.4.2901'. [ 372.634336][ T152] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 372.706949][T15308] sctp: [Deprecated]: syz.3.2904 (pid 15308) Use of struct sctp_assoc_value in delayed_ack socket option. [ 372.706949][T15308] Use struct sctp_sack_info instead [ 372.708747][T15310] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2905'. [ 372.708804][T15310] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2905'. [ 372.986222][ T321] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 373.153181][T15331] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2909'. [ 373.385906][T15340] validate_nla: 23 callbacks suppressed [ 373.385927][T15340] netlink: 'syz.3.2910': attribute type 1 has an invalid length. [ 373.419519][ T321] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 373.472510][T15340] 8021q: adding VLAN 0 to HW filter on device bond9 [ 373.519379][T15341] syzkaller0: entered promiscuous mode [ 373.519406][T15341] syzkaller0: entered allmulticast mode [ 373.586378][T15343] bond9: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 373.609746][T15340] bridge9: entered promiscuous mode [ 373.619614][T15340] bond9: (slave bridge9): Enslaving as an active interface with an up link [ 374.032037][T15364] __nla_validate_parse: 1 callbacks suppressed [ 374.032060][T15364] netlink: 2 bytes leftover after parsing attributes in process `syz.0.2916'. [ 375.910977][ T6786] hsr_slave_0: left promiscuous mode [ 375.918960][ T6786] hsr_slave_1: left promiscuous mode [ 375.920085][ T6786] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 375.920127][ T6786] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 375.927955][ T6786] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 375.928002][ T6786] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 376.019003][ T6786] veth1_macvtap: left promiscuous mode [ 376.019060][ T6786] veth0_macvtap: left promiscuous mode [ 376.019213][ T6786] veth1_vlan: left promiscuous mode [ 376.019305][ T6786] veth0_vlan: left promiscuous mode [ 376.123477][T15379] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2921'. [ 376.455736][T15391] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2922'. [ 376.496642][ T6786] team0 (unregistering): Port device team_slave_1 removed [ 376.505244][ T6786] team0 (unregistering): Port device team_slave_0 removed [ 376.559421][ T6769] smc: removing ib device syz2 [ 376.613773][ T6786] team0 (unregistering): Port device dummy0 removed [ 376.705051][T15373] bond4: Removing last arp target with arp_interval on [ 376.705067][T15373] bond4: Removing last ns target with arp_interval on [ 376.721370][T11167] infiniband syz2: ib_query_port failed (-19) [ 376.746504][ T321] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 376.849228][ T6769] smbdirect: ib_dev[syz2] removed [ 376.939275][T14969] 8021q: adding VLAN 0 to HW filter on device bond0 [ 376.974545][ T62] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 377.039199][T14969] 8021q: adding VLAN 0 to HW filter on device team0 [ 377.075409][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 377.075519][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 377.090436][ T160] bridge0: port 2(bridge_slave_1) entered blocking state [ 377.090540][ T160] bridge0: port 2(bridge_slave_1) entered forwarding state [ 377.112389][T15401] FAULT_INJECTION: forcing a failure. [ 377.112389][T15401] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 377.112417][T15401] CPU: 1 UID: 0 PID: 15401 Comm: syz.4.2926 Not tainted syzkaller #0 PREEMPT(full) [ 377.112437][T15401] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 377.112448][T15401] Call Trace: [ 377.112455][T15401] [ 377.112464][T15401] dump_stack_lvl+0xe8/0x150 [ 377.112497][T15401] should_fail_ex+0x3eb/0x540 [ 377.112525][T15401] _copy_to_user+0x31/0xb0 [ 377.112549][T15401] simple_read_from_buffer+0xe1/0x170 [ 377.112579][T15401] proc_fail_nth_read+0x1bb/0x230 [ 377.112601][T15401] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 377.112623][T15401] ? rw_verify_area+0x24a/0x4c0 [ 377.112648][T15401] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 377.112666][T15401] vfs_read+0x213/0xa80 [ 377.112695][T15401] ? __pfx___mutex_lock+0x10/0x10 [ 377.112719][T15401] ? __pfx_vfs_read+0x10/0x10 [ 377.112744][T15401] ? __fget_files+0x2a/0x420 [ 377.112764][T15401] ? __fget_files+0x3a2/0x420 [ 377.112784][T15401] ? __fget_files+0x2a/0x420 [ 377.112811][T15401] ? fdget+0x1ac/0x250 [ 377.112839][T15401] ksys_read+0x150/0x270 [ 377.112860][T15401] ? __pfx_ksys_read+0x10/0x10 [ 377.112895][T15401] do_syscall_64+0x166/0x520 [ 377.112917][T15401] ? trace_irq_disable+0x3b/0x140 [ 377.112940][T15401] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 377.112958][T15401] ? clear_bhb_loop+0x70/0xc0 [ 377.112980][T15401] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 377.112997][T15401] RIP: 0033:0x7f877b16974e [ 377.113014][T15401] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 377.113029][T15401] RSP: 002b:00007f877bfb1fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 377.113048][T15401] RAX: ffffffffffffffda RBX: 00007f877bfb26c0 RCX: 00007f877b16974e [ 377.113061][T15401] RDX: 000000000000000f RSI: 00007f877bfb20a0 RDI: 0000000000000005 [ 377.113073][T15401] RBP: 00007f877bfb2090 R08: 0000000000000000 R09: 0000000000000000 [ 377.113084][T15401] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 377.113095][T15401] R13: 00007f877b426038 R14: 00007f877b425fa0 R15: 00007fffe27f4628 [ 377.113127][T15401] [ 377.141694][ T160] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 377.376806][ T160] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 377.486360][ T152] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 377.594243][ T152] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 377.704987][ T321] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 377.783228][T15418] netlink: 2 bytes leftover after parsing attributes in process `syz.0.2928'. [ 377.816491][ T152] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 378.405262][ T62] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 378.537759][ T62] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 378.708148][T15431] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2933'. [ 378.708792][T15431] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2933'. [ 378.750887][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.969457][T15439] block nbd0: server does not support multiple connections per device. [ 378.969827][T15439] block nbd0: shutting down sockets [ 379.019219][T15440] netlink: 'syz.2.2934': attribute type 16 has an invalid length. [ 379.019242][T15440] netlink: 'syz.2.2934': attribute type 17 has an invalid length. [ 379.019350][T15440] lo: left promiscuous mode [ 379.188522][T15449] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2937'. [ 379.381125][T15440] bridge0: port 1(bridge_slave_0) entered blocking state [ 379.381261][T15440] bridge0: port 1(bridge_slave_0) entered forwarding state [ 379.548781][ T160] bridge0: port 2(bridge_slave_1) entered blocking state [ 379.548913][ T160] bridge0: port 2(bridge_slave_1) entered forwarding state [ 379.563448][T14969] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 379.731399][T15461] netlink: 2 bytes leftover after parsing attributes in process `syz.3.2941'. [ 379.820649][T14969] veth0_vlan: entered promiscuous mode [ 379.870565][T14969] veth1_vlan: entered promiscuous mode [ 379.970880][ T6786] IPVS: stop unused estimator thread 0... [ 380.080413][T14969] veth0_macvtap: entered promiscuous mode [ 380.117941][T14969] veth1_macvtap: entered promiscuous mode [ 380.257264][T14969] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 380.320044][T14969] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 380.384256][ T152] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.384301][ T152] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.384329][ T152] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.384359][ T152] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 380.684565][ T6769] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 380.684588][ T6769] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 380.750417][T15491] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2949'. [ 380.759586][ T160] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 380.759607][ T160] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 380.800571][T15491] gretap1: entered promiscuous mode [ 381.042698][T15503] netlink: 2 bytes leftover after parsing attributes in process `syz.3.2952'. [ 381.060160][T15499] bridge0: port 3(veth0) entered disabled state [ 381.060520][T15499] bridge0: port 2(bridge_slave_1) entered disabled state [ 381.060838][T15499] bridge0: port 1(bridge_slave_0) entered disabled state [ 381.088598][T15499] bridge0: entered allmulticast mode [ 381.139980][T15504] veth0: left allmulticast mode [ 381.140013][T15504] veth0: left promiscuous mode [ 381.141347][T15504] bridge0: port 3(veth0) entered disabled state [ 381.189159][T15504] bridge_slave_1: left allmulticast mode [ 381.189185][T15504] bridge_slave_1: left promiscuous mode [ 381.189392][T15504] bridge0: port 2(bridge_slave_1) entered disabled state [ 381.240015][T15504] bridge_slave_0: left allmulticast mode [ 381.251151][T15504] bridge_slave_0: left promiscuous mode [ 381.251348][T15504] bridge0: port 1(bridge_slave_0) entered disabled state [ 381.549303][T15526] bridge0: port 1(bridge_slave_0) entered disabled state [ 381.669145][ T5643] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 381.683075][ T5643] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 381.692190][ T5643] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 381.702000][ T5643] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 381.715100][ T5643] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 381.815255][ T82] net_ratelimit: 18 callbacks suppressed [ 381.815277][ T82] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 381.967169][ T160] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 382.075959][ T160] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 382.177088][T15546] netlink: 2 bytes leftover after parsing attributes in process `syz.1.2962'. [ 382.333209][T15548] syzkaller0: entered promiscuous mode [ 382.333234][T15548] syzkaller0: entered allmulticast mode [ 382.342355][T15551] tipc: Enabled bearer , priority 0 [ 382.352885][T15531] rxe_eth0 speed is unknown, defaulting to 1000 [ 382.359671][T15531] rxe_eth0 speed is unknown, defaulting to 1000 [ 382.360638][T15531] rxe_eth0 speed is unknown, defaulting to 1000 [ 382.375282][ T321] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 382.486713][ T6786] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 382.511082][T15558] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2965'. [ 382.511627][T15558] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2965'. [ 382.511914][T15558] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2965'. [ 382.512224][T15558] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2965'. [ 382.512849][T15558] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2965'. [ 382.605010][ T321] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 382.649227][T15531] infiniband rxe0: set active [ 382.649307][ T1234] rxe_eth0 speed is unknown, defaulting to 1000 [ 382.649366][T15531] infiniband rxe0: added rxe_eth0 [ 382.685061][T15531] smbdirect: ib_dev[rxe0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 382.685087][T15531] smbdirect: ib_dev[rxe0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 382.685106][T15531] smbdirect: ib_dev[rxe0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 382.741665][T15531] RDS/IB: rxe0: added [ 382.741716][T15531] smc: adding ib device rxe0 with port count 1 [ 382.741734][T15531] smc: ib device rxe0 port 1 has no pnetid [ 382.742520][T15531] rxe_eth0 speed is unknown, defaulting to 1000 [ 382.743019][T11167] rxe_eth0 speed is unknown, defaulting to 1000 [ 382.746716][ T152] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 382.856608][ T152] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 382.909985][T15544] tipc: Resetting bearer [ 382.955866][T15544] tipc: Disabling bearer [ 382.977333][ T160] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 383.039724][T15531] rxe_eth0 speed is unknown, defaulting to 1000 [ 383.104208][ T6786] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 383.359790][T15531] rxe_eth0 speed is unknown, defaulting to 1000 [ 383.488397][T15585] FAULT_INJECTION: forcing a failure. [ 383.488397][T15585] name failslab, interval 1, probability 0, space 0, times 0 [ 383.488427][T15585] CPU: 1 UID: 0 PID: 15585 Comm: syz.0.2976 Not tainted syzkaller #0 PREEMPT(full) [ 383.488447][T15585] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 383.488458][T15585] Call Trace: [ 383.488465][T15585] [ 383.488473][T15585] dump_stack_lvl+0xe8/0x150 [ 383.488506][T15585] should_fail_ex+0x3eb/0x540 [ 383.488534][T15585] should_failslab+0xa8/0x100 [ 383.488553][T15585] ? skb_clone+0x212/0x3a0 [ 383.488574][T15585] kmem_cache_alloc_noprof+0x9c/0x600 [ 383.488600][T15585] ? skb_clone+0x212/0x3a0 [ 383.488629][T15585] skb_clone+0x212/0x3a0 [ 383.488655][T15585] __netlink_deliver_tap+0x355/0x6e0 [ 383.488694][T15585] ? netlink_deliver_tap+0x2e/0x1b0 [ 383.488723][T15585] netlink_deliver_tap+0x19c/0x1b0 [ 383.488752][T15585] netlink_sendskb+0x68/0x140 [ 383.488779][T15585] netlink_rcv_skb+0x2a4/0x4a0 [ 383.488807][T15585] ? __pfx_genl_rcv_msg+0x10/0x10 [ 383.488831][T15585] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 383.488874][T15585] ? down_read+0x2b9/0x320 [ 383.488904][T15585] genl_rcv+0x28/0x40 [ 383.488924][T15585] netlink_unicast+0x8ef/0xa80 [ 383.488968][T15585] netlink_sendmsg+0x7f0/0xb20 [ 383.488993][T15585] ? __pfx_netlink_sendmsg+0x10/0x10 [ 383.489015][T15585] ? aa_sock_msg_perm+0x144/0x210 [ 383.489040][T15585] ? apparmor_socket_sendmsg+0x98/0x360 [ 383.489067][T15585] ? __pfx_netlink_sendmsg+0x10/0x10 [ 383.489084][T15585] sock_sendmsg_nosec+0x14e/0x190 [ 383.489112][T15585] ____sys_sendmsg+0x54e/0x850 [ 383.489139][T15585] ? __pfx_____sys_sendmsg+0x10/0x10 [ 383.489171][T15585] ? import_iovec+0x73/0xa0 [ 383.489197][T15585] ___sys_sendmsg+0x2a5/0x360 [ 383.489218][T15585] ? __lock_acquire+0x747/0x2de0 [ 383.489246][T15585] ? __pfx____sys_sendmsg+0x10/0x10 [ 383.489308][T15585] ? __fget_files+0x3a2/0x420 [ 383.489330][T15585] ? __fget_files+0x2a/0x420 [ 383.489370][T15585] __x64_sys_sendmsg+0x1b1/0x290 [ 383.489394][T15585] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 383.489440][T15585] do_syscall_64+0x166/0x520 [ 383.489462][T15585] ? trace_irq_disable+0x3b/0x140 [ 383.489486][T15585] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 383.489504][T15585] ? clear_bhb_loop+0x70/0xc0 [ 383.489527][T15585] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 383.489545][T15585] RIP: 0033:0x7fb329fa8f19 [ 383.489563][T15585] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 383.489577][T15585] RSP: 002b:00007fb32adbf028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 383.489597][T15585] RAX: ffffffffffffffda RBX: 00007fb32a225fa0 RCX: 00007fb329fa8f19 [ 383.489611][T15585] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003 [ 383.489622][T15585] RBP: 00007fb32adbf090 R08: 0000000000000000 R09: 0000000000000000 [ 383.489634][T15585] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 383.489645][T15585] R13: 00007fb32a226038 R14: 00007fb32a225fa0 R15: 00007fffd44c0658 [ 383.489678][T15585] [ 383.791825][ T53] Bluetooth: hci3: command tx timeout [ 383.870681][T15531] rxe_eth0 speed is unknown, defaulting to 1000 [ 384.309518][T15531] rxe_eth0 speed is unknown, defaulting to 1000 [ 384.409785][T15602] IPVS: length: 77 != 24 [ 384.727049][T15609] sctp: [Deprecated]: syz.4.2985 (pid 15609) Use of int in max_burst socket option. [ 384.727049][T15609] Use struct sctp_assoc_value instead [ 384.854731][T15531] rxe_eth0 speed is unknown, defaulting to 1000 [ 385.486754][T15616] sctp: [Deprecated]: syz.4.2988 (pid 15616) Use of int in max_burst socket option. [ 385.486754][T15616] Use struct sctp_assoc_value instead [ 385.740251][T15616] netlink: 'syz.4.2988': attribute type 13 has an invalid length. [ 385.740275][T15616] __nla_validate_parse: 4 callbacks suppressed [ 385.740286][T15616] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2988'. [ 385.864571][ T53] Bluetooth: hci3: command tx timeout [ 386.295704][T15531] bridge0: port 1(bridge_slave_0) entered blocking state [ 386.296156][T15531] bridge0: port 1(bridge_slave_0) entered disabled state [ 386.296295][T15531] bridge_slave_0: entered allmulticast mode [ 386.303659][T15531] bridge_slave_0: entered promiscuous mode [ 386.318075][T15531] bridge0: port 2(bridge_slave_1) entered blocking state [ 386.318185][T15531] bridge0: port 2(bridge_slave_1) entered disabled state [ 386.318338][T15531] bridge_slave_1: entered allmulticast mode [ 386.328322][T15531] bridge_slave_1: entered promiscuous mode [ 386.389226][T15531] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 386.392613][T15531] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 386.448172][T15531] team0: Port device team_slave_0 added [ 386.451272][T15531] team0: Port device team_slave_1 added [ 386.461243][T15642] netlink: 'syz.1.2995': attribute type 21 has an invalid length. [ 386.461264][T15642] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2995'. [ 386.493494][T15642] netlink: 'syz.1.2995': attribute type 6 has an invalid length. [ 386.493515][T15642] netlink: 3 bytes leftover after parsing attributes in process `syz.1.2995'. [ 386.543472][T15531] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 386.543492][T15531] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 386.543515][T15531] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 386.551717][T15531] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 386.551731][T15531] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 386.551753][T15531] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 386.699947][T15531] hsr_slave_0: entered promiscuous mode [ 386.712338][T15531] hsr_slave_1: entered promiscuous mode [ 387.125418][ T6786] net_ratelimit: 24 callbacks suppressed [ 387.125438][ T6786] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 387.204264][T15531] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 387.255133][ T82] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 387.372316][T15531] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 387.425305][ T82] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 387.482041][T15531] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 387.545550][ T6786] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 387.586240][T15531] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 387.665809][ T160] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 387.775165][ T82] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 387.855350][T15657] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 387.946417][ T53] Bluetooth: hci3: command tx timeout [ 388.106011][ T160] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 388.190501][T15531] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 388.208243][T15531] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 388.209106][T15531] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 388.252040][T15531] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 388.257439][T15531] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 388.275664][T15531] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 388.276816][T15531] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 388.290555][T15531] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 388.304247][ T6786] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 388.485209][ T82] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 388.512571][T15531] 8021q: adding VLAN 0 to HW filter on device bond0 [ 388.561336][T15531] 8021q: adding VLAN 0 to HW filter on device team0 [ 388.582537][ T152] bridge0: port 1(bridge_slave_0) entered blocking state [ 388.582671][ T152] bridge0: port 1(bridge_slave_0) entered forwarding state [ 388.619657][ T152] bridge0: port 2(bridge_slave_1) entered blocking state [ 388.619764][ T152] bridge0: port 2(bridge_slave_1) entered forwarding state [ 388.706026][ T6786] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 388.863068][T15696] IPVS: Error connecting to the multicast addr [ 389.094855][T15706] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3013'. [ 389.118122][T15703] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3012'. [ 389.455737][T15715] netlink: 'syz.2.3015': attribute type 10 has an invalid length. [ 389.848186][T15730] FAULT_INJECTION: forcing a failure. [ 389.848186][T15730] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 389.848215][T15730] CPU: 1 UID: 0 PID: 15730 Comm: syz.2.3018 Not tainted syzkaller #0 PREEMPT(full) [ 389.848234][T15730] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 389.848245][T15730] Call Trace: [ 389.848252][T15730] [ 389.848260][T15730] dump_stack_lvl+0xe8/0x150 [ 389.848293][T15730] should_fail_ex+0x3eb/0x540 [ 389.848321][T15730] _copy_to_user+0x31/0xb0 [ 389.848347][T15730] simple_read_from_buffer+0xe1/0x170 [ 389.848374][T15730] proc_fail_nth_read+0x1bb/0x230 [ 389.848397][T15730] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 389.848418][T15730] ? rw_verify_area+0x24a/0x4c0 [ 389.848444][T15730] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 389.848462][T15730] vfs_read+0x213/0xa80 [ 389.848491][T15730] ? __pfx___mutex_lock+0x10/0x10 [ 389.848515][T15730] ? __pfx_vfs_read+0x10/0x10 [ 389.848540][T15730] ? __fget_files+0x2a/0x420 [ 389.848560][T15730] ? __fget_files+0x3a2/0x420 [ 389.848581][T15730] ? __fget_files+0x2a/0x420 [ 389.848606][T15730] ? fdget+0x1ac/0x250 [ 389.848635][T15730] ksys_read+0x150/0x270 [ 389.848658][T15730] ? __pfx_ksys_read+0x10/0x10 [ 389.848692][T15730] do_syscall_64+0x166/0x520 [ 389.848715][T15730] ? trace_irq_disable+0x3b/0x140 [ 389.848738][T15730] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 389.848756][T15730] ? clear_bhb_loop+0x70/0xc0 [ 389.848778][T15730] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 389.848796][T15730] RIP: 0033:0x7ff5add6974e [ 389.848813][T15730] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 389.848837][T15730] RSP: 002b:00007ff5aeccdfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 389.848856][T15730] RAX: ffffffffffffffda RBX: 00007ff5aecce6c0 RCX: 00007ff5add6974e [ 389.848870][T15730] RDX: 000000000000000f RSI: 00007ff5aecce0a0 RDI: 0000000000000005 [ 389.848882][T15730] RBP: 00007ff5aecce090 R08: 0000000000000000 R09: 0000000000000000 [ 389.848893][T15730] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 389.848902][T15730] R13: 00007ff5ae026128 R14: 00007ff5ae026090 R15: 00007ffff5a61128 [ 389.848935][T15730] [ 390.048085][ T53] Bluetooth: hci3: command tx timeout [ 390.159828][T15531] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 390.353848][T15531] veth0_vlan: entered promiscuous mode [ 390.369188][T15531] veth1_vlan: entered promiscuous mode [ 390.420759][T15738] FAULT_INJECTION: forcing a failure. [ 390.420759][T15738] name failslab, interval 1, probability 0, space 0, times 0 [ 390.420789][T15738] CPU: 1 UID: 0 PID: 15738 Comm: syz.0.3021 Not tainted syzkaller #0 PREEMPT(full) [ 390.420808][T15738] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 390.420819][T15738] Call Trace: [ 390.420827][T15738] [ 390.420836][T15738] dump_stack_lvl+0xe8/0x150 [ 390.420868][T15738] should_fail_ex+0x3eb/0x540 [ 390.420896][T15738] should_failslab+0xa8/0x100 [ 390.420915][T15738] __kmalloc_cache_node_noprof+0xa5/0x620 [ 390.420940][T15738] ? kernel_text_address+0xa5/0xe0 [ 390.420962][T15738] ? __get_vm_area_node+0x155/0x2f0 [ 390.420979][T15738] ? __get_vm_area_node+0x155/0x2f0 [ 390.421004][T15738] __get_vm_area_node+0x155/0x2f0 [ 390.421028][T15738] __vmalloc_node_range_noprof+0x36e/0x16f0 [ 390.421049][T15738] ? bpf_prog_calc_tag+0x51/0x370 [ 390.421074][T15738] ? __sys_bpf+0xd21/0xe00 [ 390.421089][T15738] ? __x64_sys_bpf+0xba/0xd0 [ 390.421113][T15738] ? do_syscall_64+0x166/0x520 [ 390.421139][T15738] ? kasan_save_track+0x4f/0x80 [ 390.421162][T15738] ? kasan_save_track+0x3e/0x80 [ 390.421185][T15738] ? __kvmalloc_node_noprof+0x50a/0x820 [ 390.421211][T15738] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 390.421243][T15738] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 390.421275][T15738] ? bpf_prog_calc_tag+0x51/0x370 [ 390.421291][T15738] __vmalloc_noprof+0xd2/0x120 [ 390.421312][T15738] ? bpf_prog_calc_tag+0x51/0x370 [ 390.421332][T15738] bpf_prog_calc_tag+0x51/0x370 [ 390.421364][T15738] check_and_resolve_insns+0xc0/0x28e0 [ 390.421385][T15738] ? __asan_memset+0x22/0x50 [ 390.421407][T15738] ? add_subprog+0x40b/0x550 [ 390.421429][T15738] ? bpf_check+0x1934/0x34e0 [ 390.421452][T15738] ? __pfx_check_and_resolve_insns+0x10/0x10 [ 390.421471][T15738] ? check_subprogs+0x413/0x540 [ 390.421501][T15738] bpf_check+0x1c12/0x34e0 [ 390.421532][T15738] ? ktime_get_with_offset+0x93/0x2d0 [ 390.421556][T15738] ? ktime_get_with_offset+0x93/0x2d0 [ 390.421580][T15738] ? __pfx_bpf_check+0x10/0x10 [ 390.421602][T15738] ? bpf_obj_name_cpy+0x194/0x1e0 [ 390.421629][T15738] bpf_prog_load+0x14da/0x1c60 [ 390.421660][T15738] ? __pfx_bpf_prog_load+0x10/0x10 [ 390.421695][T15738] ? __might_fault+0xaf/0x130 [ 390.421722][T15738] __sys_bpf+0xd86/0xe00 [ 390.421748][T15738] ? __pfx___sys_bpf+0x10/0x10 [ 390.421778][T15738] ? __fget_files+0x2a/0x420 [ 390.421819][T15738] ? ksys_write+0x242/0x270 [ 390.421845][T15738] ? __pfx_ksys_write+0x10/0x10 [ 390.421874][T15738] __x64_sys_bpf+0xba/0xd0 [ 390.421903][T15738] do_syscall_64+0x166/0x520 [ 390.421924][T15738] ? trace_irq_disable+0x3b/0x140 [ 390.421947][T15738] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 390.421965][T15738] ? clear_bhb_loop+0x70/0xc0 [ 390.421987][T15738] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 390.422005][T15738] RIP: 0033:0x7fb329fa8f19 [ 390.422022][T15738] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 390.422037][T15738] RSP: 002b:00007fb32adbf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 390.422057][T15738] RAX: ffffffffffffffda RBX: 00007fb32a225fa0 RCX: 00007fb329fa8f19 [ 390.422070][T15738] RDX: 0000000000000094 RSI: 0000200000000400 RDI: 0000000000000005 [ 390.422082][T15738] RBP: 00007fb32adbf090 R08: 0000000000000000 R09: 0000000000000000 [ 390.422093][T15738] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 390.422104][T15738] R13: 00007fb32a226038 R14: 00007fb32a225fa0 R15: 00007fffd44c0658 [ 390.422135][T15738] [ 390.450279][T15738] syz.0.3021: vmalloc error: size 32, align 0x1, vm_struct allocation failed, mode:0x400cc0(GFP_KERNEL_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 390.450362][T15738] CPU: 1 UID: 0 PID: 15738 Comm: syz.0.3021 Not tainted syzkaller #0 PREEMPT(full) [ 390.450382][T15738] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 390.450393][T15738] Call Trace: [ 390.450400][T15738] [ 390.450409][T15738] dump_stack_lvl+0xe8/0x150 [ 390.450441][T15738] warn_alloc+0x24d/0x270 [ 390.450464][T15738] ? __kasan_kmalloc+0x22/0xb0 [ 390.450492][T15738] ? __pfx_warn_alloc+0x10/0x10 [ 390.450513][T15738] ? __get_vm_area_node+0x155/0x2f0 [ 390.450539][T15738] ? __get_vm_area_node+0x2a9/0x2f0 [ 390.450566][T15738] __vmalloc_node_range_noprof+0x396/0x16f0 [ 390.450593][T15738] ? __sys_bpf+0xd21/0xe00 [ 390.450608][T15738] ? __x64_sys_bpf+0xba/0xd0 [ 390.450630][T15738] ? do_syscall_64+0x166/0x520 [ 390.450656][T15738] ? kasan_save_track+0x4f/0x80 [ 390.450677][T15738] ? kasan_save_track+0x3e/0x80 [ 390.450699][T15738] ? __kvmalloc_node_noprof+0x50a/0x820 [ 390.450724][T15738] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 390.450755][T15738] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 390.450786][T15738] ? bpf_prog_calc_tag+0x51/0x370 [ 390.450801][T15738] __vmalloc_noprof+0xd2/0x120 [ 390.450821][T15738] ? bpf_prog_calc_tag+0x51/0x370 [ 390.450841][T15738] bpf_prog_calc_tag+0x51/0x370 [ 390.450863][T15738] check_and_resolve_insns+0xc0/0x28e0 [ 390.450884][T15738] ? __asan_memset+0x22/0x50 [ 390.450905][T15738] ? add_subprog+0x40b/0x550 [ 390.450925][T15738] ? bpf_check+0x1934/0x34e0 [ 390.450944][T15738] ? __pfx_check_and_resolve_insns+0x10/0x10 [ 390.450962][T15738] ? check_subprogs+0x413/0x540 [ 390.450991][T15738] bpf_check+0x1c12/0x34e0 [ 390.451021][T15738] ? ktime_get_with_offset+0x93/0x2d0 [ 390.451045][T15738] ? ktime_get_with_offset+0x93/0x2d0 [ 390.451069][T15738] ? __pfx_bpf_check+0x10/0x10 [ 390.451090][T15738] ? bpf_obj_name_cpy+0x194/0x1e0 [ 390.451115][T15738] bpf_prog_load+0x14da/0x1c60 [ 390.451146][T15738] ? __pfx_bpf_prog_load+0x10/0x10 [ 390.451181][T15738] ? __might_fault+0xaf/0x130 [ 390.451206][T15738] __sys_bpf+0xd86/0xe00 [ 390.451232][T15738] ? __pfx___sys_bpf+0x10/0x10 [ 390.451261][T15738] ? __fget_files+0x2a/0x420 [ 390.451300][T15738] ? ksys_write+0x242/0x270 [ 390.451327][T15738] ? __pfx_ksys_write+0x10/0x10 [ 390.451362][T15738] __x64_sys_bpf+0xba/0xd0 [ 390.451390][T15738] do_syscall_64+0x166/0x520 [ 390.451411][T15738] ? trace_irq_disable+0x3b/0x140 [ 390.451434][T15738] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 390.451452][T15738] ? clear_bhb_loop+0x70/0xc0 [ 390.451473][T15738] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 390.451490][T15738] RIP: 0033:0x7fb329fa8f19 [ 390.451508][T15738] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 390.451523][T15738] RSP: 002b:00007fb32adbf028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 390.451541][T15738] RAX: ffffffffffffffda RBX: 00007fb32a225fa0 RCX: 00007fb329fa8f19 [ 390.451554][T15738] RDX: 0000000000000094 RSI: 0000200000000400 RDI: 0000000000000005 [ 390.451565][T15738] RBP: 00007fb32adbf090 R08: 0000000000000000 R09: 0000000000000000 [ 390.451576][T15738] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 390.451587][T15738] R13: 00007fb32a226038 R14: 00007fb32a225fa0 R15: 00007fffd44c0658 [ 390.451617][T15738] [ 390.451625][T15738] Mem-Info: [ 390.451634][T15738] active_anon:6121 inactive_anon:0 isolated_anon:0 [ 390.451634][T15738] active_file:0 inactive_file:43974 isolated_file:0 [ 390.451634][T15738] unevictable:0 dirty:241 writeback:0 [ 390.451634][T15738] slab_reclaimable:11522 slab_unreclaimable:111909 [ 390.451634][T15738] mapped:30005 shmem:548 pagetables:1250 [ 390.451634][T15738] sec_pagetables:0 bounce:0 [ 390.451634][T15738] kernel_misc_reclaimable:0 [ 390.451634][T15738] free:1269814 free_pcp:10787 free_cma:0 [ 390.451698][T15738] Node 0 active_anon:24484kB inactive_anon:0kB active_file:0kB inactive_file:175684kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:120020kB dirty:964kB writeback:0kB shmem:2192kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14696kB pagetables:4856kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 390.451747][T15738] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:212kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:144kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 390.451792][T15738] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 390.458207][T15738] lowmem_reserve[]: 0 2463 2465 2465 2465 [ 390.458244][T15738] Node 0 DMA32 free:1131020kB boost:0kB min:33920kB low:42400kB high:50880kB reserved_highatomic:0kB free_highatomic:0kB active_anon:24484kB inactive_anon:0kB active_file:0kB inactive_file:175684kB unevictable:0kB writepending:964kB zspages:0kB present:3129332kB managed:2522824kB mlocked:0kB bounce:0kB free_pcp:41096kB local_pcp:14432kB free_cma:0kB [ 390.458294][T15738] lowmem_reserve[]: 0 0 1 1 1 [ 390.458320][T15738] Node 0 Normal free:0kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1392kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 390.458374][T15738] lowmem_reserve[]: 0 0 0 0 0 [ 390.458402][T15738] Node 1 Normal free:3932876kB boost:0kB min:55960kB low:69948kB high:83936kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:212kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:2012kB local_pcp:2012kB free_cma:0kB [ 390.458511][T15738] lowmem_reserve[]: 0 0 0 0 0 [ 390.458540][T15738] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 390.458635][T15738] Node 0 DMA32: 1445*4kB (UME) 585*8kB (UME) 215*16kB (UM) 224*32kB (UME) 244*64kB (UME) 82*128kB (UM) 46*256kB (UM) 16*512kB (UME) 7*1024kB (UME) 2*2048kB (UE) 257*4096kB (UM) = 1131084kB [ 390.464531][T15738] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 390.464616][T15738] Node 1 Normal: 3*4kB (UM) 2*8kB (UM) 1*16kB (M) 1*32kB (M) 2*64kB (UM) 2*128kB (UM) 3*256kB (UM) 3*512kB (UM) 2*1024kB (UM) 2*2048kB (U) 958*4096kB (M) = 3932876kB [ 390.464746][T15738] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 390.464760][T15738] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 390.464774][T15738] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 390.464789][T15738] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 390.464802][T15738] 44518 total pagecache pages [ 390.464809][T15738] 0 pages in swap cache [ 390.464816][T15738] Free swap = 124996kB [ 390.464822][T15738] Total swap = 124996kB [ 390.464830][T15738] 2097051 pages RAM [ 390.464836][T15738] 0 pages HighMem/MovableOnly [ 390.464842][T15738] 434381 pages reserved [ 390.464848][T15738] 0 pages cma reserved [ 390.527841][T15531] veth0_macvtap: entered promiscuous mode [ 390.567023][T15531] veth1_macvtap: entered promiscuous mode [ 390.580599][T15743] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3024'. [ 390.665218][T15531] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 390.727930][T15531] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 390.919996][ T6785] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 390.920069][ T6785] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 390.920102][ T6785] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 390.920133][ T6785] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 391.476224][ T321] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 391.476249][ T321] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 391.511806][T15764] netlink: 'syz.2.3031': attribute type 4 has an invalid length. [ 391.511828][T15764] netlink: 17 bytes leftover after parsing attributes in process `syz.2.3031'. [ 391.519826][T15763] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3030'. [ 391.519862][T15763] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3030'. [ 391.519875][T15763] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3030'. [ 391.952365][ T6785] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 391.952387][ T6785] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 392.726603][ T160] net_ratelimit: 17 callbacks suppressed [ 392.726626][ T160] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 392.751679][T15788] netlink: 'syz.2.3038': attribute type 11 has an invalid length. [ 392.834709][ T160] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 392.954856][ T160] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 393.052222][T15803] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3042'. [ 393.052289][T15803] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3042'. [ 393.069960][T15801] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2957'. [ 393.069992][T15801] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2957'. [ 393.080559][T15801] team0: entered promiscuous mode [ 393.080580][T15801] team_slave_0: entered promiscuous mode [ 393.083656][T15801] team_slave_1: entered promiscuous mode [ 393.091797][T15801] bond0: entered promiscuous mode [ 393.091819][T15801] bond_slave_0: entered promiscuous mode [ 393.092082][T15801] bond_slave_1: entered promiscuous mode [ 393.098391][T15801] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 393.143071][T15804] bond5: (slave syz_tun): Removing an active aggregator [ 393.143745][T15804] bond5: (slave syz_tun): Releasing backup interface [ 393.208892][T15807] ieee802154 phy1 wpan1: encryption failed: -22 [ 393.232936][T15804] team0: Port device dummy0 removed [ 393.291660][T15804] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 393.374227][ T321] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 393.471337][T15819] hsr0: entered allmulticast mode [ 393.471361][T15819] hsr_slave_0: entered allmulticast mode [ 393.471378][T15819] hsr_slave_1: entered allmulticast mode [ 393.486967][ T321] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 393.598799][T15818] hsr0: left allmulticast mode [ 393.598820][T15818] hsr_slave_0: left allmulticast mode [ 393.598836][T15818] hsr_slave_1: left allmulticast mode [ 393.608479][ T160] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 393.729490][ T82] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 393.775359][T15827] netlink: 'syz.0.3053': attribute type 1 has an invalid length. [ 393.775383][T15827] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3053'. [ 393.836347][ T321] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 393.926079][T15829] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3056'. [ 393.946791][ T82] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 393.981994][ T5643] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 393.985702][ T5643] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 393.988842][ T5643] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 393.992029][ T5643] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 393.992624][ T5643] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 394.265230][T15848] hsr0: entered allmulticast mode [ 394.265253][T15848] hsr_slave_0: entered allmulticast mode [ 394.265270][T15848] hsr_slave_1: entered allmulticast mode [ 394.435259][T15854] ieee802154 phy1 wpan1: encryption failed: -22 [ 394.621889][T15846] hsr0: left allmulticast mode [ 394.621909][T15846] hsr_slave_0: left allmulticast mode [ 394.621924][T15846] hsr_slave_1: left allmulticast mode [ 394.813313][ T160] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 394.813348][ T160] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 394.859135][T15831] rxe_eth0 speed is unknown, defaulting to 1000 [ 394.949017][T15865] bond1: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 394.955061][T15865] bond1 (unregistering): Released all slaves [ 395.108584][T15874] tipc: Enabled bearer , priority 10 [ 395.243885][T15879] xt_IDLETIMER: label is empty or not nul-terminated [ 395.299509][T15881] ieee802154 phy1 wpan1: encryption failed: -22 [ 395.377895][ T160] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 395.377929][ T160] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 395.551197][T15891] bond1: entered allmulticast mode [ 395.564552][T15891] 8021q: adding VLAN 0 to HW filter on device bond1 [ 395.623892][ T160] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 395.623928][ T160] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 395.715951][T15891] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 395.719088][T15891] macvlan2: entered allmulticast mode [ 395.719111][T15891] bond0: entered allmulticast mode [ 395.719125][T15891] bond_slave_0: entered allmulticast mode [ 395.719142][T15891] bond_slave_1: entered allmulticast mode [ 395.719244][T15891] bond_slave_0: entered promiscuous mode [ 395.719278][T15891] bond_slave_1: entered promiscuous mode [ 395.719833][T15891] bond1: (slave macvlan2): Enslaving as a backup interface with an up link [ 395.804615][T15894] ip6gretap1: entered allmulticast mode [ 395.805158][T15894] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 396.031344][ T53] Bluetooth: hci1: command tx timeout [ 396.119682][T15918] ieee802154 phy1 wpan1: encryption failed: -22 [ 396.747186][ T321] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 396.747316][ T321] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 396.799015][T15945] __nla_validate_parse: 4 callbacks suppressed [ 396.799037][T15945] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3099'. [ 396.943087][T15831] bridge0: port 1(bridge_slave_0) entered blocking state [ 396.945981][T15831] bridge0: port 1(bridge_slave_0) entered disabled state [ 396.948079][T15831] bridge_slave_0: entered allmulticast mode [ 396.953028][T15831] bridge_slave_0: entered promiscuous mode [ 396.996226][T15955] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3099'. [ 397.468512][T15961] FAULT_INJECTION: forcing a failure. [ 397.468512][T15961] name failslab, interval 1, probability 0, space 0, times 0 [ 397.468543][T15961] CPU: 0 UID: 0 PID: 15961 Comm: syz.4.3102 Not tainted syzkaller #0 PREEMPT(full) [ 397.468564][T15961] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 397.468576][T15961] Call Trace: [ 397.468583][T15961] [ 397.468593][T15961] dump_stack_lvl+0xe8/0x150 [ 397.468627][T15961] should_fail_ex+0x3eb/0x540 [ 397.468656][T15961] should_failslab+0xa8/0x100 [ 397.468674][T15961] ? skb_clone+0x212/0x3a0 [ 397.468697][T15961] kmem_cache_alloc_noprof+0x9c/0x600 [ 397.468725][T15961] ? skb_clone+0x212/0x3a0 [ 397.468754][T15961] skb_clone+0x212/0x3a0 [ 397.468780][T15961] __netlink_deliver_tap+0x355/0x6e0 [ 397.468819][T15961] ? netlink_deliver_tap+0x2e/0x1b0 [ 397.468847][T15961] netlink_deliver_tap+0x19c/0x1b0 [ 397.468873][T15961] netlink_sendskb+0x68/0x140 [ 397.468901][T15961] netlink_rcv_skb+0x2a4/0x4a0 [ 397.468929][T15961] ? __pfx_genl_rcv_msg+0x10/0x10 [ 397.468953][T15961] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 397.468997][T15961] ? down_read+0x2b9/0x320 [ 397.469028][T15961] genl_rcv+0x28/0x40 [ 397.469047][T15961] netlink_unicast+0x8ef/0xa80 [ 397.469087][T15961] netlink_sendmsg+0x7f0/0xb20 [ 397.469112][T15961] ? __pfx_netlink_sendmsg+0x10/0x10 [ 397.469134][T15961] ? aa_sock_msg_perm+0x144/0x210 [ 397.469158][T15961] ? apparmor_socket_sendmsg+0x98/0x360 [ 397.469185][T15961] ? __pfx_netlink_sendmsg+0x10/0x10 [ 397.469201][T15961] sock_sendmsg_nosec+0x14e/0x190 [ 397.469245][T15961] ____sys_sendmsg+0x54e/0x850 [ 397.469273][T15961] ? __pfx_____sys_sendmsg+0x10/0x10 [ 397.469304][T15961] ? import_iovec+0x73/0xa0 [ 397.469331][T15961] ___sys_sendmsg+0x2a5/0x360 [ 397.469356][T15961] ? __lock_acquire+0x747/0x2de0 [ 397.469384][T15961] ? __pfx____sys_sendmsg+0x10/0x10 [ 397.469446][T15961] ? __fget_files+0x3a2/0x420 [ 397.469468][T15961] ? __fget_files+0x2a/0x420 [ 397.469500][T15961] __x64_sys_sendmsg+0x1b1/0x290 [ 397.469525][T15961] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 397.469570][T15961] do_syscall_64+0x166/0x520 [ 397.469592][T15961] ? trace_irq_disable+0x3b/0x140 [ 397.469617][T15961] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 397.469636][T15961] ? clear_bhb_loop+0x70/0xc0 [ 397.469659][T15961] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 397.469677][T15961] RIP: 0033:0x7f877b1a8f19 [ 397.469695][T15961] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 397.469711][T15961] RSP: 002b:00007f877bfb2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 397.469731][T15961] RAX: ffffffffffffffda RBX: 00007f877b425fa0 RCX: 00007f877b1a8f19 [ 397.469745][T15961] RDX: 000000000000c010 RSI: 0000200000000000 RDI: 0000000000000004 [ 397.469757][T15961] RBP: 00007f877bfb2090 R08: 0000000000000000 R09: 0000000000000000 [ 397.469769][T15961] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 397.469780][T15961] R13: 00007f877b426038 R14: 00007f877b425fa0 R15: 00007fffe27f4628 [ 397.469814][T15961] [ 397.829125][ T160] dvmrp6: left allmulticast mode [ 397.999648][ T160] bond1 (unregistering): (slave ip6gretap1): Removing an active aggregator [ 397.999934][ T160] bond1 (unregistering): (slave ip6gretap1): Releasing backup interface [ 398.000231][ T160] ip6gretap1 (unregistering): left allmulticast mode [ 398.105183][ T53] Bluetooth: hci1: command tx timeout [ 398.422424][ T160]  (unregistering): (slave bond_slave_0): Releasing backup interface [ 398.433040][ T160]  (unregistering): (slave bond_slave_1): Releasing backup interface [ 398.445867][ T160]  (unregistering): Released all slaves [ 398.450389][ T160] bond0 (unregistering): left allmulticast mode [ 398.452388][ T160] bond1 (unregistering): (slave macvlan2): Releasing backup interface [ 398.452789][ T160] macvlan2 (unregistering): left allmulticast mode [ 398.475327][ T160] bond0 (unregistering): Released all slaves [ 398.492843][ T160] bond1 (unregistering): Released all slaves [ 398.507169][ T160] bond2 (unregistering): Released all slaves [ 398.515841][ T160] bond3 (unregistering): Released all slaves [ 398.529627][T15831] bridge0: port 2(bridge_slave_1) entered blocking state [ 398.529763][T15831] bridge0: port 2(bridge_slave_1) entered disabled state [ 398.529897][T15831] bridge_slave_1: entered allmulticast mode [ 398.530950][T15831] bridge_slave_1: entered promiscuous mode [ 398.610544][T15970] syzkaller0: entered promiscuous mode [ 398.610567][T15970] syzkaller0: entered allmulticast mode [ 398.626288][ T152] netdevsim netdevsim2 eth4: set [1, 0] type 2 family 0 port 6081 - 0 [ 398.626340][ T152] net_ratelimit: 9 callbacks suppressed [ 398.626352][ T152] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 398.626386][ T152] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 398.641825][T15831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 398.662252][T15831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 398.838134][ T160] !;: left promiscuous mode [ 398.926505][T15831] team0: Port device team_slave_0 added [ 398.926566][ T160] tipc: Disabling bearer [ 398.926791][ T160] tipc: Left network mode [ 399.044988][T15967] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 399.045012][T15967] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 399.169982][T15831] team0: Port device team_slave_1 added [ 399.336407][T15967] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 399.336429][T15967] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 399.381597][T15831] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 399.381614][T15831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 399.381634][T15831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 399.384770][ T152] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 399.386032][ T152] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 399.386533][ T62] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 399.386628][ T62] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 399.386661][ T62] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 399.474501][T15831] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 399.474517][T15831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 399.474540][T15831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 399.512849][T16006] netlink: 'syz.3.3113': attribute type 10 has an invalid length. [ 399.609491][T16010] FAULT_INJECTION: forcing a failure. [ 399.609491][T16010] name failslab, interval 1, probability 0, space 0, times 0 [ 399.609520][T16010] CPU: 1 UID: 0 PID: 16010 Comm: syz.0.3114 Not tainted syzkaller #0 PREEMPT(full) [ 399.609541][T16010] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 399.609552][T16010] Call Trace: [ 399.609559][T16010] [ 399.609567][T16010] dump_stack_lvl+0xe8/0x150 [ 399.609599][T16010] should_fail_ex+0x3eb/0x540 [ 399.609627][T16010] should_failslab+0xa8/0x100 [ 399.609644][T16010] ? skb_clone+0x212/0x3a0 [ 399.609666][T16010] kmem_cache_alloc_noprof+0x9c/0x600 [ 399.609701][T16010] ? skb_clone+0x212/0x3a0 [ 399.609729][T16010] skb_clone+0x212/0x3a0 [ 399.609755][T16010] __netlink_deliver_tap+0x355/0x6e0 [ 399.609793][T16010] ? netlink_deliver_tap+0x2e/0x1b0 [ 399.609822][T16010] netlink_deliver_tap+0x19c/0x1b0 [ 399.609850][T16010] netlink_unicast+0x8c1/0xa80 [ 399.609892][T16010] netlink_sendmsg+0x7f0/0xb20 [ 399.609917][T16010] ? __pfx_netlink_sendmsg+0x10/0x10 [ 399.609939][T16010] ? aa_sock_msg_perm+0x144/0x210 [ 399.609963][T16010] ? apparmor_socket_sendmsg+0x98/0x360 [ 399.609990][T16010] ? __pfx_netlink_sendmsg+0x10/0x10 [ 399.610007][T16010] sock_sendmsg_nosec+0x14e/0x190 [ 399.610035][T16010] ____sys_sendmsg+0x54e/0x850 [ 399.610062][T16010] ? __pfx_____sys_sendmsg+0x10/0x10 [ 399.610093][T16010] ? import_iovec+0x73/0xa0 [ 399.610119][T16010] ___sys_sendmsg+0x2a5/0x360 [ 399.610138][T16010] ? __lock_acquire+0x747/0x2de0 [ 399.610166][T16010] ? __pfx____sys_sendmsg+0x10/0x10 [ 399.610222][T16010] ? __fget_files+0x3a2/0x420 [ 399.610245][T16010] ? __fget_files+0x2a/0x420 [ 399.610277][T16010] __x64_sys_sendmsg+0x1b1/0x290 [ 399.610296][T16010] ? lockdep_hardirqs_on+0x7b/0x110 [ 399.610322][T16010] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 399.610365][T16010] do_syscall_64+0x166/0x520 [ 399.610387][T16010] ? trace_irq_disable+0x3b/0x140 [ 399.610411][T16010] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 399.610430][T16010] ? clear_bhb_loop+0x70/0xc0 [ 399.610452][T16010] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 399.610471][T16010] RIP: 0033:0x7fb329fa8f19 [ 399.610489][T16010] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 399.610505][T16010] RSP: 002b:00007fb32ad9e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 399.610525][T16010] RAX: ffffffffffffffda RBX: 00007fb32a226090 RCX: 00007fb329fa8f19 [ 399.610538][T16010] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003 [ 399.610550][T16010] RBP: 00007fb32ad9e090 R08: 0000000000000000 R09: 0000000000000000 [ 399.610562][T16010] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 399.610574][T16010] R13: 00007fb32a226128 R14: 00007fb32a226090 R15: 00007fffd44c0658 [ 399.610607][T16010] [ 399.838233][T16006] gre0: entered promiscuous mode [ 399.838378][T16006] team0: Device gre0 is of different type [ 400.148501][T15831] hsr_slave_0: entered promiscuous mode [ 400.154999][T15831] hsr_slave_1: entered promiscuous mode [ 400.162176][T15831] debugfs: 'hsr0' already exists in 'hsr' [ 400.162197][T15831] Cannot create hsr debugfs directory [ 400.166323][T16019] tap0: tun_chr_ioctl cmd 21731 [ 400.191075][T15999] tap0: tun_chr_ioctl cmd 1074025672 [ 400.191098][T15999] tap0: ignored: set checksum enabled [ 400.230647][T16025] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3116'. [ 400.325861][ T62] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 400.374830][ T5298] 8021q: adding VLAN 0 to HW filter on device eth1 [ 400.397780][T16027] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3116'. [ 401.464281][ T321] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 401.606881][ T160] hsr_slave_0: left promiscuous mode [ 401.607681][ T160] hsr_slave_1: left promiscuous mode [ 401.608567][T16054] openvswitch: netlink: Tunnel attr 254 out of range max 16 [ 401.646156][ T160] veth1_macvtap: left promiscuous mode [ 401.646196][ T160] veth0_macvtap: left promiscuous mode [ 401.646326][ T160] veth1_vlan: left promiscuous mode [ 401.646351][ T160] veth0_vlan: left promiscuous mode [ 401.729336][T16059] FAULT_INJECTION: forcing a failure. [ 401.729336][T16059] name failslab, interval 1, probability 0, space 0, times 0 [ 401.729366][T16059] CPU: 1 UID: 0 PID: 16059 Comm: syz.1.3127 Not tainted syzkaller #0 PREEMPT(full) [ 401.729387][T16059] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 401.729398][T16059] Call Trace: [ 401.729405][T16059] [ 401.729414][T16059] dump_stack_lvl+0xe8/0x150 [ 401.729446][T16059] should_fail_ex+0x3eb/0x540 [ 401.729474][T16059] should_failslab+0xa8/0x100 [ 401.729494][T16059] __kvmalloc_node_noprof+0x171/0x820 [ 401.729518][T16059] ? __pfx_bpf_compute_const_regs+0x10/0x10 [ 401.729555][T16059] ? sort_subprogs_topo+0xbe/0x1130 [ 401.729573][T16059] ? sort_subprogs_topo+0xbe/0x1130 [ 401.729601][T16059] sort_subprogs_topo+0xbe/0x1130 [ 401.729621][T16059] ? bpf_prune_dead_branches+0xb56/0xbc0 [ 401.729666][T16059] bpf_check+0x2c4c/0x34e0 [ 401.729698][T16059] ? ktime_get_with_offset+0x93/0x2d0 [ 401.729722][T16059] ? ktime_get_with_offset+0x93/0x2d0 [ 401.729747][T16059] ? __pfx_bpf_check+0x10/0x10 [ 401.729769][T16059] ? bpf_obj_name_cpy+0x194/0x1e0 [ 401.729795][T16059] bpf_prog_load+0x14da/0x1c60 [ 401.729827][T16059] ? __pfx_bpf_prog_load+0x10/0x10 [ 401.729862][T16059] ? __might_fault+0xaf/0x130 [ 401.729889][T16059] __sys_bpf+0xd86/0xe00 [ 401.729916][T16059] ? __pfx___sys_bpf+0x10/0x10 [ 401.729946][T16059] ? __fget_files+0x2a/0x420 [ 401.729986][T16059] ? ksys_write+0x242/0x270 [ 401.730013][T16059] ? __pfx_ksys_write+0x10/0x10 [ 401.730042][T16059] __x64_sys_bpf+0xba/0xd0 [ 401.730071][T16059] do_syscall_64+0x166/0x520 [ 401.730093][T16059] ? trace_irq_disable+0x3b/0x140 [ 401.730116][T16059] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 401.730135][T16059] ? clear_bhb_loop+0x70/0xc0 [ 401.730158][T16059] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 401.730175][T16059] RIP: 0033:0x7fe28a5a8f19 [ 401.730194][T16059] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 401.730209][T16059] RSP: 002b:00007fe28b505028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 401.730229][T16059] RAX: ffffffffffffffda RBX: 00007fe28a825fa0 RCX: 00007fe28a5a8f19 [ 401.730243][T16059] RDX: 0000000000000094 RSI: 0000200000000340 RDI: 0000000000000005 [ 401.730255][T16059] RBP: 00007fe28b505090 R08: 0000000000000000 R09: 0000000000000000 [ 401.730266][T16059] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 401.730278][T16059] R13: 00007fe28a826038 R14: 00007fe28a825fa0 R15: 00007ffdb7060a38 [ 401.730309][T16059] [ 402.175690][ T160] team0 (unregistering): Port device team_slave_1 removed [ 402.183333][ T160] team0 (unregistering): Port device team_slave_0 removed [ 402.263979][ T160] team0 (unregistering): Port device dummy0 removed [ 402.575301][ T5783] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 402.594709][ T62] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 402.639655][T15831] netdevsim netdevsim2 eth4 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 402.705563][ T62] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 402.734348][ T5783] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 402.761579][ T160] IPVS: stop unused estimator thread 0... [ 402.792958][T16083] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3134'. [ 402.815713][ T82] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 402.846205][T15831] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 402.928706][ T62] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 403.008540][T15831] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 403.085793][ T6769] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 403.311962][T15831] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 403.417592][T16107] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3141'. [ 403.477194][ T6769] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 403.556355][T16113] ieee802154 phy1 wpan1: encryption failed: -22 [ 403.915820][ T160] net_ratelimit: 2 callbacks suppressed [ 403.915841][ T160] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 403.987465][T15831] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 404.017431][T15831] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 404.027494][T15831] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 404.059094][T15831] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 404.061603][T15831] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 404.073406][T15831] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 404.093760][T15831] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 404.116024][T15831] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 404.176292][ T62] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 404.287559][ T82] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 404.414973][ T6769] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 404.495483][T15831] 8021q: adding VLAN 0 to HW filter on device bond0 [ 404.523163][ T6769] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 404.523393][ T6769] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 404.526114][ T152] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 404.593136][T15831] 8021q: adding VLAN 0 to HW filter on device team0 [ 404.615681][T11161] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 404.632036][ T160] bridge0: port 1(bridge_slave_0) entered blocking state [ 404.632139][ T160] bridge0: port 1(bridge_slave_0) entered forwarding state [ 404.670227][ T160] bridge0: port 2(bridge_slave_1) entered blocking state [ 404.670342][ T160] bridge0: port 2(bridge_slave_1) entered forwarding state [ 404.724255][T16147] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3148'. [ 404.724278][T16147] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3148'. [ 404.887505][ T6769] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 404.994271][ T6769] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 405.104475][ T62] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 405.234232][ T6769] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 405.435988][T16180] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3153'. [ 406.404290][ T160] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 406.885876][T15831] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 407.011531][T16209] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3156'. [ 407.036553][T15831] veth0_vlan: entered promiscuous mode [ 407.069516][T16209] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3156'. [ 407.070525][T15831] veth1_vlan: entered promiscuous mode [ 407.252187][T16219] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3157'. [ 407.252241][T16219] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3157'. [ 407.481149][T15831] veth0_macvtap: entered promiscuous mode [ 407.503627][T16222] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3159'. [ 407.545433][T15831] veth1_macvtap: entered promiscuous mode [ 407.692904][T15831] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 407.739651][T15831] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 407.835373][ T321] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 407.835441][ T321] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 407.835473][ T321] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 407.835503][ T321] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 408.429475][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 408.602877][ T321] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 408.602899][ T321] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 408.885539][ T82] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 408.885561][ T82] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 408.996524][ T152] net_ratelimit: 16 callbacks suppressed [ 408.996547][ T152] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 409.105322][ T6786] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 409.221205][ T6786] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 409.324363][ T152] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 409.434977][ T152] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 409.546803][ T82] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 409.654943][ T6786] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 409.764353][ T6786] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 409.874863][ T6786] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 409.986119][ T6786] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 410.552436][T16264] FAULT_INJECTION: forcing a failure. [ 410.552436][T16264] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 410.552466][T16264] CPU: 0 UID: 0 PID: 16264 Comm: syz.3.3169 Not tainted syzkaller #0 PREEMPT(full) [ 410.552485][T16264] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 410.552496][T16264] Call Trace: [ 410.552503][T16264] [ 410.552513][T16264] dump_stack_lvl+0xe8/0x150 [ 410.552548][T16264] should_fail_ex+0x3eb/0x540 [ 410.552577][T16264] _copy_to_user+0x31/0xb0 [ 410.552603][T16264] simple_read_from_buffer+0xe1/0x170 [ 410.552632][T16264] proc_fail_nth_read+0x1bb/0x230 [ 410.552655][T16264] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 410.552678][T16264] ? rw_verify_area+0x24a/0x4c0 [ 410.552704][T16264] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 410.552722][T16264] vfs_read+0x213/0xa80 [ 410.552753][T16264] ? __pfx___mutex_lock+0x10/0x10 [ 410.552778][T16264] ? __pfx_vfs_read+0x10/0x10 [ 410.552804][T16264] ? __fget_files+0x2a/0x420 [ 410.552824][T16264] ? __fget_files+0x3a2/0x420 [ 410.552845][T16264] ? __fget_files+0x2a/0x420 [ 410.552871][T16264] ? fdget+0x1ac/0x250 [ 410.552907][T16264] ksys_read+0x150/0x270 [ 410.552934][T16264] ? __pfx_ksys_read+0x10/0x10 [ 410.552971][T16264] do_syscall_64+0x166/0x520 [ 410.552993][T16264] ? trace_irq_disable+0x3b/0x140 [ 410.553017][T16264] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 410.553036][T16264] ? clear_bhb_loop+0x70/0xc0 [ 410.553058][T16264] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 410.553076][T16264] RIP: 0033:0x7f31a176974e [ 410.553094][T16264] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 410.553109][T16264] RSP: 002b:00007f31a274ffe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 410.553129][T16264] RAX: ffffffffffffffda RBX: 00007f31a27506c0 RCX: 00007f31a176974e [ 410.553142][T16264] RDX: 000000000000000f RSI: 00007f31a27500a0 RDI: 0000000000000005 [ 410.553153][T16264] RBP: 00007f31a2750090 R08: 0000000000000000 R09: 0000000000000000 [ 410.553165][T16264] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 410.553175][T16264] R13: 00007f31a1a26038 R14: 00007f31a1a25fa0 R15: 00007ffde219a288 [ 410.553212][T16264] [ 411.073478][T16271] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3172'. [ 411.102238][T16272] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3171'. [ 412.708046][ T5643] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 412.711789][ T5643] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 412.712555][ T5643] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 412.713540][ T5643] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 412.714265][ T5643] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 414.100168][ T6769] net_ratelimit: 32 callbacks suppressed [ 414.100193][ T6769] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 414.191298][T16296] openvswitch: netlink: Multiple metadata blocks provided [ 414.205486][ T82] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 414.315338][ T6769] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 414.425499][ T321] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 414.462781][T16296] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 414.535276][ T82] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 414.645452][ T82] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 414.755483][ T321] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 414.758762][T16282] rxe_eth0 speed is unknown, defaulting to 1000 [ 414.826805][ T5643] Bluetooth: hci4: command tx timeout [ 414.865461][ T6786] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 415.600497][T16314] x_tables: ip6_tables: NFQUEUE.0 target: invalid size 8 (kernel) != (user) 0 [ 416.508550][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 416.699791][ T6786] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 416.699827][ T6786] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 416.728927][T16335] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3189'. [ 416.904719][ T5643] Bluetooth: hci4: command tx timeout [ 417.212679][T16342] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3191'. [ 417.595256][ T62] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 417.595301][ T62] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 417.595332][ T62] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 417.595361][ T62] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 418.069195][T16282] bridge0: port 1(bridge_slave_0) entered blocking state [ 418.069379][T16282] bridge0: port 1(bridge_slave_0) entered disabled state [ 418.069504][T16282] bridge_slave_0: entered allmulticast mode [ 418.071259][T16282] bridge_slave_0: entered promiscuous mode [ 418.105367][T16282] bridge0: port 2(bridge_slave_1) entered blocking state [ 418.105520][T16282] bridge0: port 2(bridge_slave_1) entered disabled state [ 418.105704][T16282] bridge_slave_1: entered allmulticast mode [ 418.107521][T16282] bridge_slave_1: entered promiscuous mode [ 418.152769][T16282] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 418.157050][T16282] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 418.211149][T16282] team0: Port device team_slave_0 added [ 418.264619][T16282] team0: Port device team_slave_1 added [ 418.434558][T16282] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 418.434577][T16282] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 418.434600][T16282] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 418.441110][T16282] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 418.441129][T16282] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 418.441154][T16282] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 418.675024][T16358] syz_tun: entered allmulticast mode [ 418.730386][T16282] hsr_slave_0: entered promiscuous mode [ 418.733173][T16282] hsr_slave_1: entered promiscuous mode [ 418.748210][T16282] debugfs: 'hsr0' already exists in 'hsr' [ 418.748230][T16282] Cannot create hsr debugfs directory [ 418.749509][T16355] syz_tun: left allmulticast mode [ 418.984946][ T5643] Bluetooth: hci4: command tx timeout [ 419.144523][ T321] net_ratelimit: 12 callbacks suppressed [ 419.144549][ T321] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 419.256836][ T160] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 419.364276][ T321] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 419.474355][ T82] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 419.584311][ T321] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 419.694324][ T321] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 419.804296][ T160] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 419.914335][ T82] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 420.025068][ T321] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 420.309734][T16382] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3202'. [ 420.384465][T16387] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3202'. [ 420.713831][T16398] ieee802154 phy1 wpan1: encryption failed: -22 [ 420.714024][ T6786] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 420.714052][ T6786] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 420.935702][ T160] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 421.064669][ T5643] Bluetooth: hci4: command tx timeout [ 423.235453][ T6786] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 423.235488][ T6786] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 424.164948][ T321] net_ratelimit: 25 callbacks suppressed [ 424.164970][ T321] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 424.275616][ T6769] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 424.384991][ T6769] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 424.494839][ T6769] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 424.604978][ T321] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 424.714814][ T160] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 424.827541][ T6769] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 424.936810][ T321] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 425.044535][ T6769] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 425.154793][ T321] bond3: (slave ip6gretap1): failed to get link speed/duplex [ 425.402556][T16431] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3217'. [ 425.418985][T16431] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3217'. [ 425.854878][T16450] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3221'. [ 432.510935][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 433.563112][ C0] sched: DL replenish lagged too much [ 440.505779][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 464.510750][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 502.328009][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 527.239498][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 563.367328][ T1319] ieee802154 phy1 wpan1: encryption failed: -22 [ 565.511142][ T32] INFO: task syz-executor:16282 blocked for more than 145 seconds. [ 565.511169][ T32] Not tainted syzkaller #0 [ 565.511179][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 565.511188][ T32] task:syz-executor state:D stack:22504 pid:16282 tgid:16282 ppid:16278 task_flags:0x400140 flags:0x00080000 [ 565.511253][ T32] Call Trace: [ 565.511260][ T32] [ 565.511275][ T32] __schedule+0x17dd/0x5830 [ 565.511335][ T32] ? __pfx___schedule+0x10/0x10 [ 565.511368][ T32] ? schedule+0x90/0x2b0 [ 565.511393][ T32] schedule+0x164/0x2b0 [ 565.511418][ T32] schedule_preempt_disabled+0x13/0x30 [ 565.511439][ T32] __mutex_lock+0x7c4/0x15a0 [ 565.511469][ T32] ? __mutex_lock+0x5cd/0x15a0 [ 565.511497][ T32] ? device_del+0xa9/0x8f0 [ 565.511525][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 565.511581][ T32] device_del+0xa9/0x8f0 [ 565.511598][ T32] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 565.511627][ T32] ? ida_free+0x2d1/0x330 [ 565.527953][ T32] ? __pfx_ida_free+0x10/0x10 [ 565.527992][ T32] ? __pfx_device_del+0x10/0x10 [ 565.528024][ T32] device_unregister+0x21/0xf0 [ 565.528046][ T32] del_device_store+0x2b5/0x370 [ 565.528077][ T32] ? __pfx_del_device_store+0x10/0x10 [ 565.528104][ T32] ? sysfs_file_kobj+0x1e4/0x230 [ 565.528129][ T32] ? sysfs_kf_write+0x166/0x260 [ 565.528159][ T32] ? __pfx_sysfs_kf_write+0x10/0x10 [ 565.528182][ T32] kernfs_fop_write_iter+0x3a4/0x540 [ 565.528212][ T32] vfs_write+0x612/0xba0 [ 565.528247][ T32] ? __pfx_vfs_write+0x10/0x10 [ 565.528275][ T32] ? do_sys_openat2+0x18d/0x200 [ 565.528293][ T32] ? kmem_cache_free+0x182/0x650 [ 565.528323][ T32] ? fdget+0x16b/0x250 [ 565.528354][ T32] ksys_write+0x150/0x270 [ 565.528382][ T32] ? __pfx_ksys_write+0x10/0x10 [ 565.528420][ T32] do_syscall_64+0x166/0x520 [ 565.528443][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 565.528463][ T32] ? clear_bhb_loop+0x70/0xc0 [ 565.528486][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 565.528521][ T32] RIP: 0033:0x7efe7776974e [ 565.528540][ T32] RSP: 002b:00007ffd805cd658 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 565.528562][ T32] RAX: ffffffffffffffda RBX: 000055556edd9500 RCX: 00007efe7776974e [ 565.528576][ T32] RDX: 0000000000000001 RSI: 00007ffd805cd6e0 RDI: 0000000000000005 [ 565.528588][ T32] RBP: 00007efe7783883b R08: 0000000000000000 R09: 0000000000000000 [ 565.528600][ T32] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 565.528612][ T32] R13: 00007ffd805cd6e0 R14: 00007ffd805cdf20 R15: 0000000000000003 [ 565.545116][ T32] [ 565.545158][ T32] [ 565.545158][ T32] Showing all locks held in the system: [ 565.545166][ T32] locks held by kthreadd/2: 1, last CPU#0: [ 565.545181][ T32] #0: ffffffff902b1d10 (remove_cache_srcu){.+.+}-{0:0}, at: srcu_read_lock+0x27/0x60 [ 565.545245][ T32] locks held by kworker/0:1/10: 4, last CPU#0: [ 565.545258][ T32] #0: ffff88802bac0548 ((wq_completion)wg-kex-wg2#12){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 565.545314][ T32] #1: ffffc900000f7c40 ((work_completion)(&({ do { const void __attribute__((btf_type_tag("percpu"))) *__vpp_verify = (typeof((worker) + 0))((void *)0); (void)__vpp_verify; } while (0); ((typeof((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))))((unsigned long)((__typeof_unqual__(*((worker))) *)(( unsigned long)((worker)))) + (((__per_cpu_offset[(cpu)]))))); })->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 565.545375][ T32] #2: ffff88801356d480 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_response+0x14e/0x9f0 [ 565.545420][ T32] #3: ffff88802cf9a0e8 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_response+0x15f/0x9f0 [ 565.545464][ T32] locks held by kworker/u8:0/12: 4, last CPU#0: [ 565.545477][ T32] #0: ffff88802bad1148 ((wq_completion)wg-kex-wg0#11){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 565.545530][ T32] #1: ffffc90000117c40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 565.545580][ T32] #2: ffff888036151480 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x12e/0x810 [ 572.624117][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 572.875903][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P15531/1:b..l.. [ 572.885235][ C1] rcu: (detected by 1, t=10528 jiffies, g=73293, q=1054594 ncpus=2) [ 572.893342][ C1] task:syz-executor state:R running task stack:22280 pid:15531 tgid:15531 ppid:15517 task_flags:0x400140 flags:0x00080000 [ 572.907645][ C1] Call Trace: [ 572.911032][ C1] [ 572.914068][ C1] __schedule+0x17dd/0x5830 [ 572.918615][ C1] ? unwind_next_frame+0x1baf/0x2550 [ 572.924200][ C1] ? do_sys_openat2+0x115/0x200 [ 572.929169][ C1] ? __x64_sys_openat+0x138/0x170 [ 572.934247][ C1] ? __pfx___schedule+0x10/0x10 [ 572.939214][ C1] ? __lock_acquire+0x747/0x2de0 [ 572.944201][ C1] preempt_schedule_irq+0x4b/0x90 [ 572.949614][ C1] irqentry_exit+0x14f/0x9b0 [ 572.954251][ C1] ? trace_irq_disable+0x3b/0x140 [ 572.959321][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 572.965429][ C1] RIP: 0010:__sanitizer_cov_trace_const_cmp4+0x8/0xb0 [ 572.972320][ C1] Code: 01 10 4a 89 74 01 18 4a 89 44 01 20 c3 cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 8b 04 24 <65> 48 8b 15 a8 58 18 13 65 48 8b 0d a8 58 18 13 f7 c1 00 01 00 ff [ 572.992291][ C1] RSP: 0018:ffffc90019fc7440 EFLAGS: 00000246 [ 572.998387][ C1] RAX: ffffffff824c92eb RBX: ffffffff824c9152 RCX: 0000000000000046 [ 573.006387][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 573.014471][ C1] RBP: 0000000000000001 R08: ffffffff824c9152 R09: 0000000000000000 [ 573.022849][ C1] R10: dffffc0000000000 R11: fffff9400013a587 R12: 0000000000000080 [ 573.031262][ C1] R13: dffffc0000000000 R14: 00000000000274b0 R15: ffff88801ca00000 [ 573.039274][ C1] ? page_ext_get+0x22/0x2e0 [ 573.044884][ C1] ? page_ext_get+0x22/0x2e0 [ 573.049964][ C1] ? page_ext_get+0x1bb/0x2e0 [ 573.055132][ C1] page_ext_get+0x1bb/0x2e0 [ 573.059724][ C1] __reset_page_owner+0x29/0x2a0 [ 573.064706][ C1] __free_frozen_pages+0xc97/0xd90 [ 573.069863][ C1] __slab_free+0x269/0x2c0 [ 573.074411][ C1] qlist_free_all+0x99/0x100 [ 573.079039][ C1] kasan_quarantine_reduce+0x148/0x160 [ 573.084530][ C1] __kasan_slab_alloc+0x22/0x80 [ 573.089420][ C1] __kmalloc_noprof+0x302/0x710 [ 573.094299][ C1] ? __kmalloc_noprof+0x1a6/0x710 [ 573.099349][ C1] ? tomoyo_encode+0x2ad/0x570 [ 573.104130][ C1] ? tomoyo_encode+0x2ad/0x570 [ 573.109297][ C1] tomoyo_encode+0x2ad/0x570 [ 573.114173][ C1] tomoyo_realpath_from_path+0x5fd/0x640 [ 573.119863][ C1] tomoyo_check_open_permission+0x229/0x470 [ 573.125797][ C1] ? tomoyo_check_open_permission+0x1d3/0x470 [ 573.131902][ C1] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 573.138360][ C1] ? __asan_memset+0x22/0x50 [ 573.143040][ C1] security_file_open+0xa9/0x240 [ 573.148023][ C1] do_dentry_open+0x495/0x1360 [ 573.152827][ C1] vfs_open_consume+0x4a/0x350 [ 573.157613][ C1] ? path_openat+0x16e1/0x20f0 [ 573.162417][ C1] path_openat+0x16fc/0x20f0 [ 573.167083][ C1] do_file_open+0x23e/0x4a0 [ 573.171643][ C1] ? __pfx_do_file_open+0x10/0x10 [ 573.176725][ C1] ? _raw_spin_unlock+0x28/0x50 [ 573.181602][ C1] ? alloc_fd+0x6af/0x760 [ 573.185969][ C1] do_sys_openat2+0x115/0x200 [ 573.190683][ C1] ? __pfx_do_sys_openat2+0x10/0x10 [ 573.195991][ C1] ? __se_sys_clock_nanosleep+0x35b/0x3b0 [ 573.201743][ C1] ? __pfx___se_sys_clock_nanosleep+0x10/0x10 [ 573.207893][ C1] __x64_sys_openat+0x138/0x170 [ 573.212787][ C1] do_syscall_64+0x166/0x520 [ 573.217844][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 573.224910][ C1] ? clear_bhb_loop+0x70/0xc0 [ 573.230494][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 573.236941][ C1] RIP: 0033:0x7f31a17a823c [ 573.242612][ C1] RSP: 002b:00007ffde219a580 EFLAGS: 00000206 ORIG_RAX: 0000000000000101 [ 573.251046][ C1] RAX: ffffffffffffffda RBX: 0000000000000083 RCX: 00007f31a17a823c [ 573.259043][ C1] RDX: 0000000000090800 RSI: 00007f31a183785b RDI: 00000000ffffff9c [ 573.267297][ C1] RBP: 00007ffde219a62c R08: 0000000000000000 R09: 0000000000000000 [ 573.276423][ C1] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000032 [ 573.286085][ C1] R13: 0000000000000000 R14: 000000000006809e R15: 00007ffde219a680 [ 573.294100][ C1] [ 573.297250][ C1] rcu: rcu_preempt kthread starved for 1036 jiffies! g73293 f0x2 RCU_GP_WAIT_FQS(5) ->state=R ->cpu=0 [ 573.309512][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 573.320884][ C1] rcu: RCU grace-period kthread stack dump: [ 573.326787][ C1] task:rcu_preempt state:R running task stack:27496 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 573.340582][ C1] Call Trace: [ 573.343891][ C1] [ 573.347627][ C1] __schedule+0x17dd/0x5830 [ 573.352160][ C1] ? __lock_acquire+0x747/0x2de0 [ 573.357180][ C1] ? do_raw_spin_unlock+0xf5/0x200 [ 573.362410][ C1] ? __pfx___schedule+0x10/0x10 [ 573.367831][ C1] ? lock_acquire+0x115/0x350 [ 573.372547][ C1] ? schedule+0x90/0x2b0 [ 573.377799][ C1] schedule+0x164/0x2b0 [ 573.382295][ C1] schedule_timeout+0x152/0x2c0 [ 573.387311][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 573.394020][ C1] ? __pfx_process_timeout+0x10/0x10 [ 573.399695][ C1] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 573.406928][ C1] ? prepare_to_swait_event+0x220/0x3e0 [ 573.413030][ C1] ? prepare_to_swait_event+0x35e/0x3e0 [ 573.418974][ C1] rcu_gp_fqs_loop+0x30c/0x1230 [ 573.424703][ C1] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 573.431251][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 573.437113][ C1] ? _raw_spin_unlock_irq+0x2e/0x50 [ 573.443601][ C1] rcu_gp_kthread+0x9c/0x340 [ 573.448930][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 573.454969][ C1] ? __kthread_parkme+0x71/0x1f0 [ 573.459953][ C1] ? __kthread_parkme+0x199/0x1f0 [ 573.465237][ C1] kthread+0x38b/0x480 [ 573.470726][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 573.476038][ C1] ? __pfx_kthread+0x10/0x10 [ 573.480739][ C1] ret_from_fork+0x514/0xb70 [ 573.485625][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 573.491216][ C1] ? __switch_to+0xc78/0x1410 [ 573.496113][ C1] ? __pfx_kthread+0x10/0x10 [ 573.500828][ C1] ret_from_fork_asm+0x1a/0x30 [ 573.505735][ C1] [ 573.508969][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 573.516232][ C1] Sending NMI from CPU 1 to CPUs 0: [ 573.522163][ C0] NMI backtrace for cpu 0 [ 573.522193][ C0] CPU: 0 UID: 0 PID: 44 Comm: kworker/u8:3 Not tainted syzkaller #0 PREEMPT(full) [ 573.522215][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026 [ 573.522227][ C0] Workqueue: wg-kex-wg2 wg_packet_handshake_send_worker [ 573.522258][ C0] RIP: 0010:__lock_acquire+0x391/0x2de0 [ 573.522290][ C0] Code: 65 8b 15 0e 96 3d 13 31 f6 85 d2 40 0f 95 c6 31 d2 41 83 bf 8c 0b 00 00 00 0f 95 c2 c1 e2 0d c1 e6 0e 09 d6 8b 14 24 c1 e2 0f <0f> b7 d2 09 f2 8b 74 24 28 83 e6 03 c1 e6 10 09 d6 8b 54 24 40 c1 [ 573.522307][ C0] RSP: 0018:ffffc90000007038 EFLAGS: 00000046 [ 573.522322][ C0] RAX: 000000000000001e RBX: 0000000000000000 RCX: 0000000000000000 [ 573.522334][ C0] RDX: 0000000000000000 RSI: 0000000000002000 RDI: 000000000122dee6 [ 573.522347][ C0] RBP: 0000000000000000 R08: ffffffff84fb9177 R09: 0000000000000001 [ 573.522360][ C0] R10: dffffc0000000000 R11: fffffbfff237bf38 R12: 0000000000000000 [ 573.522373][ C0] R13: ffff888020af0bb0 R14: 0000000000000006 R15: ffff888020af0000 [ 573.522387][ C0] FS: 0000000000000000(0000) GS:ffff888123409000(0000) knlGS:0000000000000000 [ 573.522403][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 573.522416][ C0] CR2: 0000200000204030 CR3: 000000003365c000 CR4: 00000000003526f0 [ 573.522432][ C0] Call Trace: [ 573.522440][ C0] [ 573.522453][ C0] ? stack_depot_save_flags+0x33/0x810 [ 573.522478][ C0] ? __pfx_nf_confirm+0x10/0x10 [ 573.522503][ C0] ? kasan_save_stack+0x4d/0x60 [ 573.522529][ C0] ? kasan_save_stack+0x3e/0x60 [ 573.522559][ C0] ? kasan_record_aux_stack+0xbd/0xd0 [ 573.522579][ C0] ? call_rcu+0x86/0x300 [ 573.522606][ C0] ? skb_release_head_state+0x71/0x370 [ 573.522642][ C0] ? consume_skb+0x70/0x290 [ 573.522662][ C0] lock_acquire+0x115/0x350 [ 573.522683][ C0] ? debug_object_activate+0xb7/0x420 [ 573.522712][ C0] ? wg_noise_handshake_create_initiation+0x460/0x810 [ 573.522732][ C0] ? wg_packet_handshake_send_worker+0x18c/0x370 [ 573.522757][ C0] ? rcu_is_watching+0x16/0xb0 [ 573.522785][ C0] _raw_spin_lock_irqsave+0x40/0x60 [ 573.522806][ C0] ? debug_object_activate+0xb7/0x420 [ 573.522831][ C0] debug_object_activate+0xb7/0x420 [ 573.522860][ C0] ? __pfx_dst_destroy_rcu+0x10/0x10 [ 573.522887][ C0] rcu_do_enqueue+0x2a/0x870 [ 573.522913][ C0] ? __pfx_dst_destroy_rcu+0x10/0x10 [ 573.522939][ C0] call_rcu+0x20e/0x300 [ 573.522967][ C0] ? __pfx_call_rcu+0x10/0x10 [ 573.522997][ C0] ? dst_release+0x126/0x1b0 [ 573.523023][ C0] skb_release_head_state+0x71/0x370 [ 573.523044][ C0] consume_skb+0x70/0x290 [ 573.523063][ C0] nft_synproxy_eval_v4+0x36a/0x4e0 [ 573.523094][ C0] ? __pfx_nft_synproxy_eval_v4+0x10/0x10 [ 573.523121][ C0] ? nf_ip_checksum+0x13c/0x510 [ 573.523148][ C0] nft_synproxy_do_eval+0x389/0x5d0 [ 573.523177][ C0] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 573.523206][ C0] ? chacha_permute+0x4ce/0xf00 [ 573.523226][ C0] nft_do_chain+0x48d/0x1b10 [ 573.523261][ C0] ? __pfx_nft_do_chain+0x10/0x10 [ 573.523291][ C0] ? __local_bh_enable_ip+0xd6/0x140 [ 573.523316][ C0] ? lockdep_hardirqs_on+0x7b/0x110 [ 573.523353][ C0] nft_do_chain_ipv4+0x195/0x290 [ 573.523378][ C0] ? ipt_do_table+0x2b9/0x15d0 [ 573.523403][ C0] ? __pfx_nft_do_chain_ipv4+0x10/0x10 [ 573.523430][ C0] ? iptable_mangle_hook+0x18a/0x4c0 [ 573.523459][ C0] ? __pfx_nft_do_chain_ipv4+0x10/0x10 [ 573.523486][ C0] nf_hook_slow+0xc5/0x220 [ 573.523509][ C0] NF_HOOK+0x21f/0x3c0 [ 573.523536][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 573.523568][ C0] ? NF_HOOK+0x9e/0x3c0 [ 573.523593][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 573.523620][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 573.523650][ C0] ? ip_local_deliver+0x113/0x190 [ 573.523678][ C0] NF_HOOK+0x336/0x3c0 [ 573.523704][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 573.523730][ C0] ? NF_HOOK+0x9e/0x3c0 [ 573.523754][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 573.523780][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 573.523807][ C0] ? ip_rcv_core+0x88d/0xd50 [ 573.523835][ C0] ? __pfx_ip_rcv+0x10/0x10 [ 573.523862][ C0] ? __pfx_ip_rcv+0x10/0x10 [ 573.523887][ C0] process_backlog+0xa6b/0x18b0 [ 573.523908][ C0] ? process_backlog+0x3de/0x18b0 [ 573.523932][ C0] __napi_poll+0xaa/0x330 [ 573.523961][ C0] net_rx_action+0x61d/0xf50 [ 573.523985][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 573.524001][ C0] ? xfrm_dev_backlog+0x24b/0x3c0 [ 573.524027][ C0] ? net_tx_action+0x5bb/0xc30 [ 573.524046][ C0] ? net_tx_action+0xbff/0xc30 [ 573.524065][ C0] handle_softirqs+0x265/0x8d0 [ 573.524095][ C0] ? kernel_fpu_end+0x62/0x80 [ 573.524121][ C0] do_softirq+0x77/0xd0 [ 573.524145][ C0] [ 573.524151][ C0] [ 573.524159][ C0] __local_bh_enable_ip+0x100/0x140 [ 573.524183][ C0] blake2s_compress+0xfa/0x1c00 [ 573.524215][ C0] ? encode_point+0x8346/0x84b0 [ 573.524234][ C0] ? __crypto_xor+0xac6/0xd10 [ 573.524257][ C0] ? chacha_crypt+0x10b3/0x1120 [ 573.524275][ C0] ? __pfx_encode_point+0x10/0x10 [ 573.524295][ C0] ? __pfx_chacha_crypt+0x10/0x10 [ 573.524313][ C0] ? poly1305_blocks+0x2b7/0x450 [ 573.524336][ C0] ? __pfx_blake2s_compress+0x10/0x10 [ 573.524365][ C0] ? __asan_memset+0x22/0x50 [ 573.524390][ C0] ? __asan_memset+0x22/0x50 [ 573.524412][ C0] ? __chacha20poly1305_encrypt+0x316/0x350 [ 573.524438][ C0] blake2s_final+0x10f/0x270 [ 573.524456][ C0] hmac+0x204/0x3b0 [ 573.524475][ C0] ? __pfx_hmac+0x10/0x10 [ 573.524492][ C0] ? kernel_fpu_end+0x62/0x80 [ 573.524522][ C0] ? blake2s_compress+0x1b4d/0x1c00 [ 573.524568][ C0] ? kdf+0x13d/0x290 [ 573.524588][ C0] kdf+0x184/0x290 [ 573.524605][ C0] ? __pfx_blake2s_compress+0x10/0x10 [ 573.524635][ C0] ? __pfx_kdf+0x10/0x10 [ 573.524661][ C0] ? __asan_memset+0x22/0x50 [ 573.524685][ C0] wg_noise_handshake_create_initiation+0x460/0x810 [ 573.524708][ C0] ? __pfx_wg_noise_handshake_create_initiation+0x10/0x10 [ 573.524730][ C0] ? __lock_acquire+0x747/0x2de0 [ 573.524758][ C0] ? do_raw_spin_unlock+0xf5/0x200 [ 573.524782][ C0] ? lock_acquire+0x115/0x350 [ 573.524807][ C0] ? ktime_get_coarse_with_offset+0x8a/0x150 [ 573.524836][ C0] ? lockdep_hardirqs_on+0x7b/0x110 [ 573.524858][ C0] ? ktime_get_coarse_with_offset+0x8a/0x150 [ 573.524884][ C0] ? ktime_get_coarse_with_offset+0x102/0x150 [ 573.524910][ C0] wg_packet_handshake_send_worker+0x18c/0x370 [ 573.524936][ C0] ? __pfx_wg_packet_handshake_send_worker+0x10/0x10 [ 573.524958][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 573.524987][ C0] ? rcu_is_watching+0x16/0xb0 [ 573.525013][ C0] ? process_scheduled_works+0x97a/0x1630 [ 573.525049][ C0] process_scheduled_works+0xc3d/0x1630 [ 573.525093][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 573.525124][ C0] ? assign_work+0x3cf/0x5d0 [ 573.525152][ C0] worker_thread+0xa47/0xfb0 [ 573.525194][ C0] kthread+0x38b/0x480 [ 573.525215][ C0] ? __pfx_worker_thread+0x10/0x10 [ 573.525242][ C0] ? __pfx_kthread+0x10/0x10 [ 573.525269][ C0] ret_from_fork+0x514/0xb70 [ 573.525291][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 573.525311][ C0] ? __switch_to+0xc78/0x1410 [ 573.525340][ C0] ? __pfx_kthread+0x10/0x10 [ 573.525361][ C0] ret_from_fork_asm+0x1a/0x30 [ 573.525389][ C0] [ 573.789756][ T32] #3: ffff88802cf9f028 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x13f/0x810 [ 573.789821][ T32] locks held by kworker/u8:1/13: 4, last CPU#0: [ 573.789835][ T32] #0: ffff88802d67e948 ((wq_completion)wg-kex-wg2#3){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 573.789891][ T32] #1: ffffc90000127c40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 573.789941][ T32] #2: ffff888033d3d480 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x12e/0x810 [ 573.789985][ T32] #3: ffff88807adc1700 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x13f/0x810 [ 573.790031][ T32] locks held by khungtaskd/32: 1, last CPU#0: [ 573.790044][ T32] #0: ffffffff9015a2a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 573.790087][ T32] locks held by kcompactd0/35: 1, last CPU#0: [ 573.790100][ T32] #0: ffff888033523070 (&anon_vma->rwsem){++++}-{4:4}, at: rmap_walk_anon+0x144/0x910 [ 573.790146][ T32] locks held by kworker/u8:2/43: 3, last CPU#0: [ 573.790159][ T32] #0: ffff88813fe4c148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 573.790207][ T32] #1: ffffc90000b37c40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 573.790260][ T32] #2: ffff88807a1d6258 (&devlink->lock_key#6){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xb30 [ 573.790311][ T32] locks held by kworker/u8:3/44: 2, last CPU#0: [ 573.790324][ T32] #0: ffff88813fe4c148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 573.790371][ T32] #1: ffffc90000b47c40 ((work_completion)(&pool->idle_cull_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 573.790422][ T32] locks held by kworker/u8:4/62: 3, on CPU#1: [ 573.790434][ T32] #0: ffff88801eb52948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 573.790481][ T32] #1: ffffc9000203fc40 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 573.790529][ T32] #2: ffffffff916937a0 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x19/0x30 [ 573.790563][ T32] locks held by kworker/u8:5/82: 3, last CPU#0: [ 573.790573][ T32] #0: ffff88813fe4c148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630