last executing test programs: 26.463981434s ago: executing program 3 (id=2893): r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x1}}, 0x40) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000100)={r2, 0x0, 0x0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0xb, 0x13, &(0x7f00000009c0)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207baaf8ff00000000bda106000000000047010000f8ffffffb702000008000000b70300000040000085000000050000001801000020696c250000000000202021db1af8ff51000000bda102000000000007010000f8ffffffb702000008000000b703000000000000850000007b00000095", @ANYRES8], &(0x7f0000000100)='syzkaller\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000840)=ANY=[@ANYBLOB="2400000079a183199eb81c0000bec846f75861179f1f320c7c4366c6b4f51ac332d1b80b9122226befea479a621e7c38bad723ffee73172e0a4e9d32238aea313355d34f48931cf3f2844f3ec9cf3f0f8fce4bcf3cc552e110fb7c17ea0abcc7693009b018cff032742a65db", @ANYRES16, @ANYBLOB="050000000000000000", @ANYRES32=r3, @ANYBLOB="0800050003000000"], 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x7c, 0x0, 0x5, 0xfffffffc, 0x0, {{}, {@void, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x42, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x18, @random="e111f3df3ca210255dcfdeb3646a8c1077db25a3144ec03d"}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x2}, @NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x7c}}, 0x48000) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000300), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000640)=0xcde, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0x3c1, 0x3, 0x450, 0x150, 0x168, 0x9, 0x0, 0xb, 0x380, 0x250, 0x250, 0x380, 0x250, 0x3, 0x0, {[{{@ipv6={@remote, @rand_addr=' \x01\x00', [], [], 'veth0_to_bridge\x00', 'sit0\x00', {}, {}, 0x6c}, 0x6000000, 0x108, 0x150, 0x0, {0x0, 0x28e}, [@common=@inet=@ipcomp={{0x30}}, @common=@inet=@ipcomp={{0x30}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'dvmrp0\x00'}}}, {{@uncond, 0x0, 0x200, 0x230, 0x0, {}, [@common=@inet=@policy={{0x158}, {[{@ipv4=@local, [0x0, 0xff000000, 0xffffffff, 0xff000000], @ipv6=@private1, [0x0, 0x1fffffeff, 0xff000000, 0xffffff00], 0x4d6, 0x0, 0x0, 0x0, 0x10, 0x2}, {@ipv4=@remote, [0xff000000, 0xffffff00, 0xffffff00, 0xff], @ipv6=@local, [0x7f, 0xff000000, 0xffffff00, 0xff], 0x4d4, 0x34ff, 0x6c, 0x0, 0x12, 0x4}, {@ipv6=@mcast1, [0xffffffff, 0xffffffff, 0xffffffff, 0xff], @ipv6=@mcast2, [0xffffff00, 0x0, 0xffff00, 0xff000000], 0x4d2, 0x0, 0x0, 0x1, 0x0, 0xd}, {@ipv6=@ipv4={'\x00', '\xff\xff', @multicast2}, [0xffffffff, 0xffffff00], @ipv4=@rand_addr=0x64010100, [0xffffffff, 0xffffff00, 0xffffffff], 0x4d4, 0x3502, 0x32, 0x0, 0x0, 0x6}], 0xa, 0x4}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{}, {0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b0) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r4, 0x29, 0x37, &(0x7f0000000300)={0x32, 0x3, '\x00', [@jumbo={0xc2, 0x4, 0x7}, @hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x20) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f0000000380)={@in6={{0xa, 0x4e24, 0xffffffb8, @loopback, 0x9}}, 0x0, 0x0, 0x33, 0x0, "aae37be4753f0a28060a80cdd60fe31d6ba25cec257a3a485a338d600a8402d23df4854ed4cf29109f0e30e8d115e434392db157494620680fffb8cb989ab0cfc17eb88225e0fb0a062dd7a81eb098d3"}, 0xd8) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000740), r0) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$sock_SIOCINQ(r8, 0x541b, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x1c, r7, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x300}]}, 0x1c}, 0x1, 0x0, 0x0, 0x811}, 0x4000000) sendmsg$TIPC_NL_MON_GET(r6, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16, @ANYBLOB="000327bd7000fedbdf251200000024000980080002000000000008000100020000000800010016f80000080002008100000024000980080002000400000800020080000000080002004000000008000100010000"], 0x5c}, 0x1, 0x0, 0x0, 0x2000c050}, 0x8010) sendmmsg$inet6(r5, &(0x7f0000000140)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x2, @empty, 0xfe5}, 0x1c, &(0x7f0000000680)=[{&(0x7f0000000000)="fbcb37d4b602407e380d05c2cfab553433380ae1ea5fe76b88f56925b0500c144f7ec56a5ca5c409c384299080b09076f9d21d0ac4d37d30f03626ae1a93d3ddaa87df04b3866f3101af348f1fd2afb29e52910a48ccb191e145621cbdd3ec9376a10097b652266b16bf359cac92d29d99091df7d403fa664191c43e723976fb09907728328da39a2a55c6724c26bb285eb50de1fefe3826b67d5d5cb5ae73232f8ffdfd8750b3c729734deea37286518c4229ac181e61642848e74c7afbe48cbb48ad0f2ac790e8d2e6d89e9ac35b5ef3b84b240204fc753d43e99561adc369ee13b0dec9f0a7c61a9bbbec80", 0xed}, {&(0x7f0000000540)}], 0x2}}], 0x1, 0x200880d8) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x20, 0x2f, 0x9, 0x70bd25, 0x0, {0x4}, [@typed={0x8, 0xc, 0x0, 0x0, @u32=0x2}, @typed={0x4, 0x1f}]}, 0x20}, 0x1, 0x0, 0x0, 0x42014}, 0x4080040) 21.205690559s ago: executing program 3 (id=2912): sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x2, 0xb, 0xe, 0x8, 0x6, 0x0, 0x70bd25, 0x25dfdbfe, [@sadb_lifetime={0x4, 0x3, 0x4, 0x5, 0xf, 0x10000000000001}]}, 0x30}}, 0x4000) (async) r0 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e24, @empty}}, 0x24) listen(r0, 0x5) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000003a40)=ANY=[@ANYBLOB="1800000000000000100100000100000012000000000000001000000000000000100100000e"], 0x28}, 0x0) listen(r0, 0x0) (async) close(0x3) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000a900)={&(0x7f00000002c0)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x24048850}, 0x11) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={0x40, r3, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_OURS={0x14, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x9}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x41}, 0x0) (async) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000180)=0x20800001, 0x4) r5 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$6lowpan_control(r5, &(0x7f0000000400)='disconnect aa:aa:aa:aa:aa:10 1', 0x10) bind$inet6(r4, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) (async) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r6, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) (async) bind$inet6(r6, &(0x7f0000000140)={0xa, 0x4e22, 0xfffffffd, @empty}, 0x1c) (async) listen(r6, 0x0) shutdown(r6, 0x0) (async) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000041000701fefffffffeffffff017c0000040042800c00018006000600800a000014000280100003800c"], 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), r1) 20.015921095s ago: executing program 3 (id=2914): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000180)={{0x1, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000140)='%pi6 \x00'}, 0x20) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000004c0)={'wg1\x00', 0x0}) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000007c0)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xd7, 0xd7, 0x4, [@const={0x3, 0x0, 0x0, 0xa, 0x4}, @func={0x10, 0x0, 0x0, 0xc, 0x3}, @fwd={0xc}, @func={0xb, 0x0, 0x0, 0xc, 0x1}, @datasec={0x9, 0x6, 0x0, 0xf, 0x3, [{0x4, 0x8, 0x6}, {0x4, 0x40, 0x4}, {0x5, 0x1, 0xfff}, {0x5, 0x1}, {0x2, 0x9, 0x1ff}, {0x3, 0x9, 0x6}], "68e63c"}, @restrict={0x8}, @float={0x9, 0x0, 0x0, 0x10, 0xc}, @volatile={0x5, 0x0, 0x0, 0x9, 0x1}, @func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{0x4}, {0x6, 0x2}]}, @decl_tag={0xa, 0x0, 0x0, 0x11, 0x5, 0x3}]}, {0x0, [0x61, 0xdeef038ba3f36bba]}}, &(0x7f00000006c0)=""/203, 0xf4, 0xcb, 0x1}, 0x28) r5 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)=@generic={&(0x7f0000000880)='./file0\x00', 0x0, 0x18}, 0x18) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000980)={0x18, 0xc, &(0x7f0000000200)=@raw=[@printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7a38}}, @map_fd={0x18, 0x4, 0x1, 0x0, r2}, @map_idx={0x18, 0x4, 0x5, 0x0, 0x3}], &(0x7f0000000280)='syzkaller\x00', 0x6, 0xf8, &(0x7f00000003c0)=""/248, 0x1e00, 0x50, '\x00', r3, 0x0, r4, 0x8, &(0x7f0000000800)={0xa, 0x4}, 0x8, 0x10, &(0x7f0000000840)={0x2, 0xa, 0x0, 0x1}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000940)=[r5, 0xffffffffffffffff, r6], 0x0, 0x10, 0x81}, 0x94) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000680)={0x28, 0x2d, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee00}, @nested={0x8, 0x0, 0x0, 0x1, [@typed={0x4, 0x1, 0x0, 0x0, @binary}]}]}, 0x28}], 0x1}, 0x0) r7 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$ARPT_SO_SET_REPLACE(r7, 0x0, 0x60, &(0x7f0000001480)={'filter\x00', 0x5, 0x4, 0x410, 0x110, 0x218, 0x110, 0x328, 0x328, 0x328, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @private, @empty}}}, {{@uncond, 0xc0, 0x108}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00', 0x1, 0x800, {0x8000000000000001}}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @multicast1, @loopback, 0x0, 0xffffffff}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x460) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000141000001c00128009000100626f6e64000000000c00028005001f"], 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000) 18.901217554s ago: executing program 3 (id=2917): ioctl$PPPIOCSMRU(0xffffffffffffffff, 0x40047452, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="30000000100001006c4789ec390bca4900000000", @ANYRES32=0x0, @ANYBLOB="211000000300000008001b0000000000080040"], 0x30}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r1, 0x29, 0x3b, &(0x7f0000000040)={0x3b, 0xb, '\x00', [@padn={0x1, 0x1, [0x0]}, @calipso={0x7, 0x28, {0x2, 0x8, 0x7f, 0x80, [0x7, 0x4, 0x800, 0x0]}}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x9}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @enc_lim={0x4, 0x1, 0x6}, @ra={0x5, 0x2, 0x6}, @pad1, @hao={0xc9, 0x10, @mcast2}, @enc_lim={0x4, 0x1, 0x3}]}, 0x68) sendto$inet6(r0, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 15.341349195s ago: executing program 3 (id=2923): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc010000190001000000000010000000e0000001000000000000000000000000fe8000000000000000000000000000244e22000bffff00000a00808000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x1fc}}, 0x80c4) 14.884301004s ago: executing program 3 (id=2927): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r1, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000a40)={0x1c, 0x3, 0x1, 0x201, 0x0, 0x0, {0x2, 0x0, 0x9}, [@CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000004) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)={0x2c, 0x10, 0x1, 0x0, 0x25dfdbfe, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd=r0}, @typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0x8, 0x1a, 0x0, 0x1, [@generic="63224b9e"]}, @nested={0x4, 0x37}]}, 0x2c}], 0x1}, 0x4040010) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x63, 0x11, 0x34}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x23}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) 11.22700986s ago: executing program 0 (id=2941): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0xffb2) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000180)=@ccm_128={{0x304}, "e3d9162be1b07411", "726c84d47b8e1c777b43316b24f98517", "6284695f", "296d4442c1ff8da4"}, 0x28) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x4, &(0x7f0000000100)=@gcm_256={{0x303}, "24747942338921a1", "d830ce0a000000000000a7173985202bbfb61b36f3678de8ea2d0d6616076243", "559edb33", "7c5cec21291a43fe"}, 0x38) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="b400000000000000791048000000000079003000000000009500000000000000db74589d4b38cc306ac390649f8edea0e50e2317db042855d6c74ff3493c7e31e3f6c643155a8e2e01d50bc3347475be393b1f1e4aba75a0750472719cc516eec8b02df8ef39db6e67fa14b769e7f385ba72c64242263c05ddab05e37efe81b8bffc35cdf2ac0d93263ff755d611c4cca1684b1470af6a83366aa430ad2d700b186da622d6fba7000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xb1, &(0x7f000000cf3d)=""/173, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x53) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newsa={0x148, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@private0, @in=@multicast2, 0x1, 0x716, 0x4e23, 0x7, 0x0, 0x0, 0x0, 0x3a}, {@in6=@dev={0xfe, 0x80, '\x00', 0x1d}, 0x4d8, 0x6c}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, {0x0, 0x192, 0x1, 0xffff, 0x8253c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0xffffffffffffffff, 0x800, 0x8000000000000000}, {0x3, 0x8}, 0x70bd2c, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'lzs\x00'}}}, @sa_dir={0x5, 0x21, 0x2}, @iptfs_reorder_window={0x6, 0x25, 0x5}]}, 0x148}, 0x1, 0x0, 0x0, 0x8801}, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000000), 0x12) ioctl$FS_IOC_RESVSP(r4, 0x40305829, &(0x7f0000000440)={0x1100, 0x0, 0x0, 0x10000}) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xa, 0x10, &(0x7f0000000000)=@framed={{0x18, 0x6, 0x0, 0x0, 0x40000}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r5}, {}, {}, {0x7, 0x0, 0xb, 0x7}}, @printk]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet_MCAST_LEAVE_GROUP(r1, 0x0, 0x2d, &(0x7f0000000300)={0x2, {{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, 0x88) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r5}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000200)={r4, r2, 0x0, r2}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) (async) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) (async) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) (async) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0xffb2) (async) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000180)=@ccm_128={{0x304}, "e3d9162be1b07411", "726c84d47b8e1c777b43316b24f98517", "6284695f", "296d4442c1ff8da4"}, 0x28) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) (async) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x4, &(0x7f0000000100)=@gcm_256={{0x303}, "24747942338921a1", "d830ce0a000000000000a7173985202bbfb61b36f3678de8ea2d0d6616076243", "559edb33", "7c5cec21291a43fe"}, 0x38) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="b400000000000000791048000000000079003000000000009500000000000000db74589d4b38cc306ac390649f8edea0e50e2317db042855d6c74ff3493c7e31e3f6c643155a8e2e01d50bc3347475be393b1f1e4aba75a0750472719cc516eec8b02df8ef39db6e67fa14b769e7f385ba72c64242263c05ddab05e37efe81b8bffc35cdf2ac0d93263ff755d611c4cca1684b1470af6a83366aa430ad2d700b186da622d6fba7000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xb1, &(0x7f000000cf3d)=""/173, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x53) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newsa={0x148, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@private0, @in=@multicast2, 0x1, 0x716, 0x4e23, 0x7, 0x0, 0x0, 0x0, 0x3a}, {@in6=@dev={0xfe, 0x80, '\x00', 0x1d}, 0x4d8, 0x6c}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, {0x0, 0x192, 0x1, 0xffff, 0x8253c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0xffffffffffffffff, 0x800, 0x8000000000000000}, {0x3, 0x8}, 0x70bd2c, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'lzs\x00'}}}, @sa_dir={0x5, 0x21, 0x2}, @iptfs_reorder_window={0x6, 0x25, 0x5}]}, 0x148}, 0x1, 0x0, 0x0, 0x8801}, 0x0) (async) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) (async) write$cgroup_int(r4, &(0x7f0000000000), 0x12) (async) ioctl$FS_IOC_RESVSP(r4, 0x40305829, &(0x7f0000000440)={0x1100, 0x0, 0x0, 0x10000}) (async) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xa, 0x10, &(0x7f0000000000)=@framed={{0x18, 0x6, 0x0, 0x0, 0x40000}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r5}, {}, {}, {0x7, 0x0, 0xb, 0x7}}, @printk]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) setsockopt$inet_MCAST_LEAVE_GROUP(r1, 0x0, 0x2d, &(0x7f0000000300)={0x2, {{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, 0x88) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r5}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000200)={r4, r2, 0x0, r2}, 0x10) (async) 10.061051993s ago: executing program 0 (id=2946): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@newtclass={0x24, 0x28, 0x0, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x9, 0x4}, {0x7, 0xfffc}, {0xb, 0xf}}}, 0x24}}, 0x80800) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x18, 0x803, 0x2) r2 = accept4$unix(r1, &(0x7f0000001280)=@abs, &(0x7f0000001300)=0x6e, 0x80800) setsockopt(r2, 0xa, 0x9, &(0x7f0000001340)="4dc5d206851af8759729b5fd372cef42cd42c48f7debc5679245066bd1833e292a02f86a3aae0da9f2b5ff2da60a00b9f45d7d6aabd708e14a4cef68566a46363f4ca2c7fafeeb85a9068ba795e003e30524ab00220fc8055a5816861c3feb587dc69399998a30b96301f7715f465e9fba268dff27b244c7fce81220f0091589195f63362b8ad5ef54886f79467ea5c7", 0x90) getsockname$packet(r1, 0x0, &(0x7f00000003c0)) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x810) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x1e00, 0x2c}, 0x94) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="34000000100001080000e3015b08162335a00000", @ANYRES32=0x0, @ANYBLOB="80400100000001000c002b8008000100", @ANYRES32=r3, @ANYBLOB="08001b"], 0x34}, 0x1, 0x0, 0x0, 0x20004040}, 0x0) r5 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) r6 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_SIOCADDRT(r6, 0x890b, &(0x7f0000001200)={0x0, @ethernet={0x307, @local}, @llc={0x1a, 0x102, 0x4, 0x1, 0xff, 0xd2, @local}, @phonet={0x23, 0x1, 0x7f, 0x8a}, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000080)='team0\x00', 0xef4, 0x40000000, 0x4}) writev(r5, &(0x7f00000001c0)=[{&(0x7f0000000240)="20a0218aa5", 0x5}, {&(0x7f0000000100)="3d682b1e2e948303206a1c7fc6c9386fa4dca836195f57d176245bbabff82f7a08733f793bdc7c8b30f7d0b744c745fcb2caeb0fe251fdd1de6a6423ac60931287c6e878d216f16a8c3579d231b3efbf9c72c113132bf88b9731f41a0273572305b510e94943a98c9dd18458696fa78fa7333c64762f1370d8910df46624bca10ed5", 0x82}, {&(0x7f0000000280)="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", 0xf79}], 0x3) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 9.144724828s ago: executing program 0 (id=2950): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000980)=@newsa={0x154, 0x10, 0x1, 0x1000000, 0x0, {{@in6=@mcast2, @in6=@loopback, 0x0, 0xecdf, 0x0, 0x3}, {@in=@broadcast, 0x0, 0x32}, @in=@rand_addr=0x640100fe, {0x0, 0x0, 0x1, 0x0, 0x40000000000000, 0xfffffffffffffffc}, {0x3, 0x1, 0x7fff, 0x2}, {0x10, 0x0, 0x2}, 0x70bd28, 0x0, 0x2, 0x4, 0x73}, [@algo_crypt={0x48, 0x2, {{'cbc(serpent)\x00'}}}, @encap={0x1c, 0x4, {0xffffffffffffffff, 0x4e24, 0x4e23, @in=@rand_addr=0x64010100}}]}, 0x154}}, 0x0) 8.622059404s ago: executing program 0 (id=2952): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000001480)=ANY=[@ANYBLOB="180000000000000090c0c63cb14d4acc2cbffa5acf0000008da59811", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) pwritev(r0, 0x0, 0x0, 0x8001, 0x80) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000001500)={0xfb, 0xc09649413e0f2d48}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000240)=@gcm_128={{0x304}, "7f3900005200", "9a5d38a17f00c500000000feff00", "a1e3837f", "542924b4eab9743a"}, 0x28) recvfrom(r2, &(0x7f0000000440)=""/4070, 0xfe6, 0x117, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_P2P_DEVICE(0xffffffffffffffff, &(0x7f0000001440)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000280)={0x14, r3, 0x400, 0x70bd26, 0x25dfdbfd, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x10) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffe07}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r4, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r5, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) 7.387114038s ago: executing program 2 (id=2954): r0 = socket(0x400000000010, 0x3, 0x0) (async) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) ppoll(&(0x7f0000000100)=[{r1, 0x1a0}], 0x1, 0x0, 0x0, 0x0) sendto$inet6(r1, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) (async) shutdown(r1, 0x1) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000000000000000000000000008500000022000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000080)='GPL\x00'}, 0x94) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET(r2, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)={0x28, 0x1, 0x7, 0x301, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFACCT_FILTER={0x14, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x2b4}, @NFACCT_FILTER_VALUE={0x8}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x24000840}, 0x20008800) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0600000004000000080000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000cd0000000000474400"/28], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, r3}, 0x38) (async) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) (async) r4 = socket$inet_tcp(0x2, 0x1, 0x0) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{r5}, &(0x7f0000000400), &(0x7f00000004c0)=r6}, 0x20) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) (async) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x22, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0xedc623580215bdcd, 0x12, 0xffffffffffffffff, 0x0) (async) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r8, r7, 0x25, 0x0, @void}, 0x10) (async) syz_emit_ethernet(0x16, &(0x7f0000000080)=ANY=[], 0x0) (async) socket(0x1a, 0x3, 0x0) (async) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r9, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f0000000400)=@ethtool_flash={0x33, 0xb619, '.\x00'}}) (async) unshare(0x2a020400) (async) openat$pidfd(0xffffffffffffff9c, &(0x7f0000001100), 0x200200, 0x0) syz_emit_ethernet(0x7e, &(0x7f0000000140)={@multicast, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x48, 0x3a, 0x0, @rand_addr=' \x01\x00', @mcast2, {[], @dest_unreach={0x1, 0x3, 0x0, 0x7f, '\x00', {0x0, 0x6, "e1f588", 0x7, 0x0, 0xff, @mcast2, @mcast2, [@fragment={0x2f, 0x0, 0xf, 0x0, 0x0, 0x0, 0x65}, @hopopts={0xbe}], "01a102e9493a5d5b"}}}}}}}, 0x0) (async) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)={0x5c, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x3}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x9}]}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r10, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x38, 0x2, 0x3, 0x201, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFQA_CFG_PARAMS={0x9, 0x2, {0x9}}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x431}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x20}, @NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x1a}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000004}, 0x804) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) 7.085360078s ago: executing program 1 (id=2955): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) connect$tipc(r5, &(0x7f00000000c0)=@name={0x1e, 0x2, 0x3, {{0x43, 0x3}, 0x2}}, 0x10) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000200)={@map=r6, 0x35, 0x0, 0x1, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x0, &(0x7f0000000140)=[0x0, 0x0], &(0x7f0000000180)=[0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f00000002c0)={0x7, 0x0}, 0x8) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000240)={@cgroup=r6, 0xffffffffffffffff, 0x34, 0x2029, r6, @void, @void, @value=r8, @void, r7}, 0x20) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r0, 0x4058587a, &(0x7f0000000380)={{r5, &(0x7f0000000180)='batadv0\x00', 0xdc7cd8f9d1608afc, &(0x7f00000001c0)={@align=0x911e, {0x0, 0xe5c, 0x3}}, 0x1, &(0x7f0000000200)={@_ha_fsid}, &(0x7f0000000240)=0xffffff01}, {[0x6, 0x8, 0x9, 0x2]}, 0x10000, 0xd5, &(0x7f0000000280)=""/213}) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r10, 0x84, 0x71, 0x0, &(0x7f0000000600)=0xf) r11 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000006c0)=@bpf_ext={0x1c, 0x10, &(0x7f0000000480)=@raw=[@map_val={0x18, 0x2, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x6}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x4}, @printk={@li, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xffff8000}}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0x6}, @cb_func={0x18, 0x2, 0x4, 0x0, 0x5}], &(0x7f0000000500)='GPL\x00', 0x0, 0x2c, &(0x7f0000000580)=""/44, 0x41000, 0x48, '\x00', r4, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000005c0)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000000600)={0x5, 0xc, 0x0, 0x2}, 0x10, 0x260a0, 0xffffffffffffffff, 0x2, &(0x7f0000000640)=[0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1, 0x1], &(0x7f0000000680)=[{0x2, 0x1, 0xb, 0xa}, {0x5, 0x3, 0x2, 0x6}], 0x10, 0x1000}, 0x94) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000100)={@cgroup=r9, 0xffffffffffffffff, 0x3, 0x8, 0x0, @void, @value=r11, @void, @void, r7}, 0x20) sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000840)={0x2c, r3, 0x1, 0x4070bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0x3c, 0x2}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2004a0a0}, 0x18) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000140)={0x3, &(0x7f0000000000)=[{0x30, 0x1, 0xfd, 0x5ae9}, {0x30, 0x7f, 0x4, 0xfffff00c}, {0x6, 0x23, 0x7, 0xfffffff8}]}, 0x10) sendmmsg$inet(r0, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="2a73ed35", 0x732a}], 0x1}}], 0x400000000000292, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000780)={'syz_tun\x00'}) 6.821314473s ago: executing program 0 (id=2957): r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x1}}, 0x40) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000100)={r2, 0x20, &(0x7f00000010c0)={0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0xb, 0x13, 0x0, &(0x7f0000000100)='syzkaller\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000840)=ANY=[@ANYBLOB="2400000079a183199eb81c0000bec846f75861179f1f320c7c4366c6b4f51ac332d1b80b9122226befea479a621e7c38bad723ffee73172e0a4e9d32238aea313355d34f48931cf3f2844f3ec9cf3f0f8fce4bcf3cc552e110fb7c17ea0abcc7693009b018cff032742a65db", @ANYRES16, @ANYBLOB="050000000000000000", @ANYRES32=r4, @ANYBLOB="0800050003000000"], 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x7c, 0x0, 0x5, 0xfffffffc, 0x0, {{}, {@void, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x42, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x18, @random="e111f3df3ca210255dcfdeb3646a8c1077db25a3144ec03d"}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x2}, @NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x7c}}, 0x48000) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000300), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000640)=0xcde, 0x4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0x3c1, 0x3, 0x450, 0x150, 0x168, 0x9, 0x0, 0xb, 0x380, 0x250, 0x250, 0x380, 0x250, 0x3, 0x0, {[{{@ipv6={@remote, @rand_addr=' \x01\x00', [], [], 'veth0_to_bridge\x00', 'sit0\x00', {}, {}, 0x6c}, 0x6000000, 0x108, 0x150, 0x0, {0x0, 0x28e}, [@common=@inet=@ipcomp={{0x30}}, @common=@inet=@ipcomp={{0x30}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'dvmrp0\x00'}}}, {{@uncond, 0x0, 0x200, 0x230, 0x0, {}, [@common=@inet=@policy={{0x158}, {[{@ipv4=@local, [0x0, 0xff000000, 0xffffffff, 0xff000000], @ipv6=@private1, [0x0, 0x1fffffeff, 0xff000000, 0xffffff00], 0x4d6, 0x0, 0x0, 0x0, 0x10, 0x2}, {@ipv4=@remote, [0xff000000, 0xffffff00, 0xffffff00, 0xff], @ipv6=@local, [0x7f, 0xff000000, 0xffffff00, 0xff], 0x4d4, 0x34ff, 0x6c, 0x0, 0x12, 0x4}, {@ipv6=@mcast1, [0xffffffff, 0xffffffff, 0xffffffff, 0xff], @ipv6=@mcast2, [0xffffff00, 0x0, 0xffff00, 0xff000000], 0x4d2, 0x0, 0x0, 0x1, 0x0, 0xd}, {@ipv6=@ipv4={'\x00', '\xff\xff', @multicast2}, [0xffffffff, 0xffffff00], @ipv4=@rand_addr=0x64010100, [0xffffffff, 0xffffff00, 0xffffffff], 0x4d4, 0x3502, 0x32, 0x0, 0x0, 0x6}], 0xa, 0x4}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{}, {0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b0) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r5, 0x29, 0x37, &(0x7f0000000300)={0x32, 0x3, '\x00', [@jumbo={0xc2, 0x4, 0x7}, @hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x20) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r6, 0x6, 0xe, &(0x7f0000000380)={@in6={{0xa, 0x4e24, 0xffffffb8, @loopback, 0x9}}, 0x0, 0x0, 0x33, 0x0, "aae37be4753f0a28060a80cdd60fe31d6ba25cec257a3a485a338d600a8402d23df4854ed4cf29109f0e30e8d115e434392db157494620680fffb8cb989ab0cfc17eb88225e0fb0a062dd7a81eb098d3"}, 0xd8) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000740), r0) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$sock_SIOCINQ(r9, 0x541b, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x1c, r8, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x300}]}, 0x1c}, 0x1, 0x0, 0x0, 0x811}, 0x4000000) sendmsg$TIPC_NL_MON_GET(r7, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16, @ANYBLOB="000327bd7000fedbdf251200000024000980080002000000000008000100020000000800010016f80000080002008100000024000980080002000400000800020080000000080002004000000008000100010000"], 0x5c}, 0x1, 0x0, 0x0, 0x2000c050}, 0x8010) sendmmsg$inet6(r6, &(0x7f0000000140)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x2, @empty, 0xfe5}, 0x1c, &(0x7f0000000680)=[{&(0x7f0000000000)="fbcb37d4b602407e380d05c2cfab553433380ae1ea5fe76b88f56925b0500c144f7ec56a5ca5c409c384299080b09076f9d21d0ac4d37d30f03626ae1a93d3ddaa87df04b3866f3101af348f1fd2afb29e52910a48ccb191e145621cbdd3ec9376a10097b652266b16bf359cac92d29d99091df7d403fa664191c43e723976fb09907728328da39a2a55c6724c26bb285eb50de1fefe3826b67d5d5cb5ae73232f8ffdfd8750b3c729734deea37286518c4229ac181e61642848e74c7afbe48cbb48ad0f2ac790e8d2e6d89e9ac35b5ef3b84b240204fc753d43e99561adc369ee13b0dec9f0a7c61a9bbbec80", 0xed}, {&(0x7f0000000540)}], 0x2}}], 0x1, 0x200880d8) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x20, 0x2f, 0x9, 0x70bd25, 0x0, {0x4}, [@typed={0x8, 0xc, 0x0, 0x0, @u32=0x2}, @typed={0x4, 0x1f}]}, 0x20}, 0x1, 0x0, 0x0, 0x42014}, 0x4080040) 5.667912414s ago: executing program 2 (id=2959): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1000000000021, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) close(r2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socket(0x10, 0x803, 0x0) sendmsg$unix(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000340)="ff2d", 0x2}], 0x1, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [r3]}}], 0x18, 0x10}, 0x30040001) recvmsg(r3, &(0x7f00000001c0)={0x0, 0x80000001, 0x0}, 0x2002) sendmmsg(0xffffffffffffffff, &(0x7f0000001500)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @dev={0xfe, 0x80, '\x00', 0x40}, 0x4, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="fed3733bda7a17349858affefa4c5a7db6d7c4b8aa2e76f06840b1376f89eeabe54e7e2fc0a6ab06694eec04b161a4149347d046ef4d46"], 0x10}}], 0x1, 0x4000000) socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'veth0_vlan\x00'}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) recvmmsg(0xffffffffffffffff, &(0x7f0000002680)=[{{0x0, 0x0, &(0x7f00000023c0)=[{0x0}, {&(0x7f0000002340)=""/68, 0x44}], 0x2}, 0x8}], 0x1, 0x60, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000ff000000000000000000008500000020000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007c00000095"], &(0x7f0000000080)='syzkaller\x00'}, 0x94) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r4, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000540)=ANY=[@ANYBLOB="01000000647a5d8823c2f394755e2d944ff11ab0b0f32f428b629a92b79112938372cc5538904dfe9abcd8476ffb0c4f5df88767d96b95e6045708a7", @ANYRES16=r5, @ANYBLOB="010027bd7000fddbdf2510000000"], 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x8000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070}, 0x94) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x530, 0x0, 0x18c, 0x203, 0x348, 0x19030000, 0x460, 0x2e0, 0x2e0, 0x460, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x300, 0x348, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x15}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x80}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x1}, {}, {0x16}, {0xfffc}, {}, {}, {}, {}, {}, {0x0, 0x0, 0xfe}, {}, {}, {}, {0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x2}, {}, {}, {0x0, 0x0, 0x0, 0x2000}, {0x0, 0x1}, {0x0, 0x0, 0xc}]}}, @common=@hl={{0x28}, {0x0, 0xfc}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@ipv6={@local, @mcast1, [0x0, 0xff000000, 0xffff00, 0xffffff00], [0xff000000, 0xffffffff, 0xffffff00, 0xffffffff], 'bridge_slave_1\x00', 'veth0_to_bridge\x00', {0xff}, {0xff}, 0x3a, 0xb, 0x1, 0x2}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x590) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000000)=0x8, 0xfdb2) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x23, @empty, 0x23}, 0x1c) 5.666897622s ago: executing program 1 (id=2960): socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) socket(0x2, 0x80805, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, &(0x7f0000002300)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback=0x78, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x94) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x0, @none, 0x0, 0x1}, 0xe) setsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0xf, &(0x7f0000000080), 0x4) connect$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xe}, 0xe) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r5, 0x0, 0x1, 0x0) write$rfkill(r5, &(0x7f0000000040)={0x2, 0x5, 0x3, 0x1, 0x1}, 0x8) vmsplice(r5, &(0x7f0000000c40)=[{&(0x7f0000000400)="6f1e276ca370a2520de548d3e44ee1e85e15325cb34ade2d862ff0a312ca05c7fd37a1847ec78670d0de8dfb6908bdf0c8f569806db2ba255b09280e2f7cf506704a2fd48e9586aea6b4d6066d37135ceacc2d5f5e3147066eb124ddf07e88d563d5fe4e37545ad489116418c30c3856a3d4ffa06d51d46b2ede05547f5c6e97fd033800f8c362abf4dae255c66df7fa852ed4334c8a43432760b75e9ffb2d1fb218bdea7253bf61f6a2bdb345b038b8191bfd07a3a7d67093742e97a44b63f4b82e2e17d255f215d8b100", 0xcb}, {0x0}, {&(0x7f0000001100)="a6", 0x1}], 0x3, 0x0) ioctl$sock_inet_udp_SIOCINQ(r5, 0x541b, 0x0) write(r3, 0x0, 0x0) sendmmsg$sock(r1, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x130}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x6}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x38, 0xd, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) shutdown(r1, 0x1) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB="38000000100039042cfd7000eaffffff1c0003e4", @ANYRES32=0x0, @ANYBLOB="03000000c31006001800128008000100736974000c00028008000300ac141400"], 0x38}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="5a6e41dea43e63a3f70cff11c72b", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) 4.435864423s ago: executing program 2 (id=2961): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_icmp(0x2, 0x2, 0x1) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x11}}, {0x2, 0x4e20, @broadcast}, {0x2, 0x4e27, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x1f4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8000000000579, 0x8}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'veth0_to_team\x00'}) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r2, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x5, 0x2, 0xa}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x4) write(r3, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000080)='syz0\x00', 0x1ff) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[], 0x68}}, 0x20000880) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f00000001c0), 0x10) sendmsg$can_bcm(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000300)=ANY=[@ANYBLOB="0500000000080000ca08000000000000", @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x77359400, @ANYBLOB='\x00\x00\x00@'], 0x80}, 0x1, 0x0, 0x0, 0x3f9bbfad8c226d7a}, 0x20000040) sendmsg$can_bcm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000e80)=ANY=[], 0x80}, 0x1, 0x0, 0x0, 0x800}, 0x4000) r5 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r5, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='hugetlb.1GB.usage_in_bytes\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r5, 0x1, 0x3e, &(0x7f0000000100)=r6, 0x4) sendmsg$kcm(r5, &(0x7f0000002480)={0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f0000000e40)="97", 0x1}], 0x1}, 0x10) sendmsg$inet(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0x2ee0}], 0x13, 0x0, 0x0, 0x10000000}, 0x12cd) socket(0x10, 0x3, 0x0) 4.0435651s ago: executing program 1 (id=2964): socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$XFS_IOC_GETVERSION(0xffffffffffffffff, 0x80087601, &(0x7f0000000000)) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="0c04000010000104000000000000000000480000", @ANYRES32=r0, @ANYBLOB="101000000000000008000d0005000000e4031680a40001800c00070000000000adffffff0c00", @ANYRES16=r0], 0x40c}}, 0x0) 3.326113071s ago: executing program 2 (id=2966): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_icmp(0x2, 0x2, 0x1) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x11}}, {0x2, 0x4e20, @broadcast}, {0x2, 0x4e27, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x1f4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8000000000579, 0x8}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'veth0_to_team\x00'}) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r2, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x5, 0x2, 0xa}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0x4) write(r3, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000080)='syz0\x00', 0x1ff) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[], 0x68}}, 0x20000880) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f00000001c0), 0x10) sendmsg$can_bcm(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000300)=ANY=[@ANYBLOB="0500000000080000ca08000000000000", @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x77359400, @ANYBLOB='\x00\x00\x00@'], 0x80}, 0x1, 0x0, 0x0, 0x3f9bbfad8c226d7a}, 0x20000040) sendmsg$can_bcm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000e80)=ANY=[], 0x80}, 0x1, 0x0, 0x0, 0x800}, 0x4000) r5 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r5, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='hugetlb.1GB.usage_in_bytes\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r5, 0x1, 0x3e, &(0x7f0000000100)=r6, 0x4) sendmsg$kcm(r5, &(0x7f0000002480)={0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f0000000e40)="97", 0x1}], 0x1}, 0x10) sendmsg$inet(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0x2ee0}], 0x13, 0x0, 0x0, 0x10000000}, 0x12cd) socket(0x10, 0x3, 0x0) 3.298435203s ago: executing program 0 (id=2967): r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x1}}, 0x40) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000100)={r2, 0x20, &(0x7f00000010c0)={0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000840)=ANY=[@ANYBLOB="2400000079a183199eb81c0000bec846f75861179f1f320c7c4366c6b4f51ac332d1b80b9122226befea479a621e7c38bad723ffee73172e0a4e9d32238aea313355d34f48931cf3f2844f3ec9cf3f0f8fce4bcf3cc552e110fb7c17ea0abcc7693009b018cff032742a65db", @ANYRES16, @ANYBLOB="050000000000000000", @ANYRES32=r3, @ANYBLOB="0800050003000000"], 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x7c, 0x0, 0x5, 0xfffffffc, 0x0, {{}, {@void, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x42, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x18, @random="e111f3df3ca210255dcfdeb3646a8c1077db25a3144ec03d"}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x2}, @NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x7c}}, 0x48000) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000300), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000640)=0xcde, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0x3c1, 0x3, 0x450, 0x150, 0x168, 0x9, 0x0, 0xb, 0x380, 0x250, 0x250, 0x380, 0x250, 0x3, 0x0, {[{{@ipv6={@remote, @rand_addr=' \x01\x00', [], [], 'veth0_to_bridge\x00', 'sit0\x00', {}, {}, 0x6c}, 0x6000000, 0x108, 0x150, 0x0, {0x0, 0x28e}, [@common=@inet=@ipcomp={{0x30}}, @common=@inet=@ipcomp={{0x30}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'dvmrp0\x00'}}}, {{@uncond, 0x0, 0x200, 0x230, 0x0, {}, [@common=@inet=@policy={{0x158}, {[{@ipv4=@local, [0x0, 0xff000000, 0xffffffff, 0xff000000], @ipv6=@private1, [0x0, 0x1fffffeff, 0xff000000, 0xffffff00], 0x4d6, 0x0, 0x0, 0x0, 0x10, 0x2}, {@ipv4=@remote, [0xff000000, 0xffffff00, 0xffffff00, 0xff], @ipv6=@local, [0x7f, 0xff000000, 0xffffff00, 0xff], 0x4d4, 0x34ff, 0x6c, 0x0, 0x12, 0x4}, {@ipv6=@mcast1, [0xffffffff, 0xffffffff, 0xffffffff, 0xff], @ipv6=@mcast2, [0xffffff00, 0x0, 0xffff00, 0xff000000], 0x4d2, 0x0, 0x0, 0x1, 0x0, 0xd}, {@ipv6=@ipv4={'\x00', '\xff\xff', @multicast2}, [0xffffffff, 0xffffff00], @ipv4=@rand_addr=0x64010100, [0xffffffff, 0xffffff00, 0xffffffff], 0x4d4, 0x3502, 0x32, 0x0, 0x0, 0x6}], 0xa, 0x4}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{}, {0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b0) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r4, 0x29, 0x37, &(0x7f0000000300)={0x32, 0x3, '\x00', [@jumbo={0xc2, 0x4, 0x7}, @hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x20) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f0000000380)={@in6={{0xa, 0x4e24, 0xffffffb8, @loopback, 0x9}}, 0x0, 0x0, 0x33, 0x0, "aae37be4753f0a28060a80cdd60fe31d6ba25cec257a3a485a338d600a8402d23df4854ed4cf29109f0e30e8d115e434392db157494620680fffb8cb989ab0cfc17eb88225e0fb0a062dd7a81eb098d3"}, 0xd8) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000740), r0) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$sock_SIOCINQ(r8, 0x541b, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x1c, r7, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x300}]}, 0x1c}, 0x1, 0x0, 0x0, 0x811}, 0x4000000) sendmsg$TIPC_NL_MON_GET(r6, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16, @ANYBLOB="000327bd7000fedbdf251200000024000980080002000000000008000100020000000800010016f80000080002008100000024000980080002000400000800020080000000080002004000000008000100010000"], 0x5c}, 0x1, 0x0, 0x0, 0x2000c050}, 0x8010) sendmmsg$inet6(r5, &(0x7f0000000140)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x2, @empty, 0xfe5}, 0x1c, &(0x7f0000000680)=[{&(0x7f0000000000)="fbcb37d4b602407e380d05c2cfab553433380ae1ea5fe76b88f56925b0500c144f7ec56a5ca5c409c384299080b09076f9d21d0ac4d37d30f03626ae1a93d3ddaa87df04b3866f3101af348f1fd2afb29e52910a48ccb191e145621cbdd3ec9376a10097b652266b16bf359cac92d29d99091df7d403fa664191c43e723976fb09907728328da39a2a55c6724c26bb285eb50de1fefe3826b67d5d5cb5ae73232f8ffdfd8750b3c729734deea37286518c4229ac181e61642848e74c7afbe48cbb48ad0f2ac790e8d2e6d89e9ac35b5ef3b84b240204fc753d43e99561adc369ee13b0dec9f0a7c61a9bbbec80", 0xed}, {&(0x7f0000000540)}], 0x2}}], 0x1, 0x200880d8) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x20, 0x2f, 0x9, 0x70bd25, 0x0, {0x4}, [@typed={0x8, 0xc, 0x0, 0x0, @u32=0x2}, @typed={0x4, 0x1f}]}, 0x20}, 0x1, 0x0, 0x0, 0x42014}, 0x4080040) 3.16831962s ago: executing program 1 (id=2968): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x1e, 0x805, 0x0) connect$tipc(r2, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x5b6578b832f83042, 0x4, 0x3}}, 0x10) recvfrom$inet6(r2, &(0x7f0000000440)=""/197, 0xc5, 0x101, &(0x7f0000000540)={0xa, 0x4e20, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}, 0xab0}, 0x1c) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYRESDEC=r0, @ANYRES32=r4, @ANYBLOB="010000626f6e64000000000c0022000800010006000000000000000000000000006916ce0cb014671091a20f7b3550c4af882edd798f8b074bb2643ed92a224882c2819ec3dd390ed1b57f2e02a10dc6b7c726c9f88f2dbc9a93621ca6"], 0x3c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) openat$ppp(0xffffffffffffff9c, &(0x7f00000005c0), 0x242, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r7, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r7, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0xa, 0x6, &(0x7f00000000c0)=ANY=[@ANYBLOB="7b0b00000000000071115700000000008510000002000000850000007600000095000000000000009500a505000000009bf05fd3afbdff712d4e9ee5199a679c7341e526d961aa3d219c2f32dae6fb6a117602bc5a1c9a9844ed3e67ab"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newlink={0x44, 0x10, 0x403, 0x70bd27, 0x3, {0x0, 0x0, 0x0, 0x0, 0x90446}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000600}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x8008, 0x4408}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TOS={0x5, 0x4, 0x1}]}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_START_SCHED_SCAN(r8, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x20, r0, 0x400, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x9) sendmsg$L2TP_CMD_TUNNEL_CREATE(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0xc6, r9, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e24}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @loopback}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @L2TP_ATTR_ENCAP_TYPE={0x6}]}, 0x64}, 0x1, 0x620b, 0x0, 0x400c000}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)={0x20, r0, 0x1, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x4810) 2.813928095s ago: executing program 4 (id=2969): sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="900000001c001f4d154a817393278bff0a80a57802000000e503740014000100ac1414bb0542d6401051a2d708f37ac8", 0x30, 0x20000004, 0x0, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000fcdbdf25120000001800018014000200766574683000000000000000080000000800"], 0x3c}, 0x1, 0x0, 0x0, 0x400c000}, 0x2004c0a0) r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c000000190001000000000000000000021800000000fd000000ed0008000100ac1414003400080004"], 0x2c}}, 0x0) sendto$inet6(r0, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) (fail_nth: 6) 2.251056813s ago: executing program 4 (id=2970): mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x8, 0x32, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x18, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8b, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfeff}, {0x85, 0x0, 0x0, 0x86}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x80000000}}, [@printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xffff}}, @call={0x85, 0x0, 0x0, 0x24}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x20}, {0x85, 0x0, 0x0, 0x84}, {0x7, 0x0, 0xb, 0x0, 0x0, 0x0, 0x500}}}, &(0x7f0000000080)='GPL\x00', 0x3, 0xfec, &(0x7f0000000780)=""/4076, 0x41000, 0x4b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000d}, 0x94) (fail_nth: 9) 1.993320946s ago: executing program 1 (id=2971): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1, 0xc, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0xda, 0x0, 0x0, 0x0, 0xff}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000900)=r1, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4389}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x8d, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1.938852012s ago: executing program 2 (id=2972): r0 = socket$kcm(0x29, 0x5, 0x0) getsockopt$IP_VS_SO_GET_INFO(r0, 0x119, 0x481, 0x0, &(0x7f0000000080)) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x8, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r1, 0x8010661b, &(0x7f0000000000)) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="3793000076000907fdffffff0000000007020000", @ANYRES32=0x0, @ANYBLOB="0c0001800500030001000000"], 0x24}, 0x1, 0x5502000000000000, 0x0, 0x48008}, 0x40854) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x18, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8f, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfeff}, {0x85, 0x0, 0x0, 0x86}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x80000000}}, [@printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}, @call={0x85, 0x0, 0x0, 0x24}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x20}, {0x85, 0x0, 0x0, 0x84}, {0x7, 0x0, 0xb, 0x0, 0x0, 0x0, 0x500}}}, &(0x7f0000000080)='GPL\x00', 0x3, 0xfec, &(0x7f0000000780)=""/4076, 0x41000, 0x4b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000d}, 0x94) ioctl$FS_IOC_MEASURE_VERITY(r2, 0xc0046686, &(0x7f0000000340)={0x1, 0xfd, "9d19675a5950d2689b7be3e341a45e23696458f7e4213465195c1859d7a81b1ac065c3eeac505d261bfd941263ae7548bbf938f731ab5b23a0eb273bc73e491098aa6b4b9237c14eab15fa048520d033a61cb6dd16ea129abd4f49c7fa04df8bab941f96ea0f6ac7940ac172d56875ea28c428655a869c3813467c126e645d3075d0476b1e14752b10e0ff94972b96da3f9af8277651be0140d8d4ec3fc75c99b9b6003f9bc6363900641cf8d43f8493dee3291406905824250c219e45948d414b087456880f9bb92f404479659bb5ea3125970a385787790a483ff6b6aad368399b6e21c18a26bbe8708cc5be142b6222b96df42701959904adbc9517"}) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, r3, 0x4, 0xd, 0xfffffffffffffff8, 0x7ff}) 1.400979699s ago: executing program 4 (id=2973): sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="900000001c001f4d154a817393278bff0a80a57802000000e503740014000100ac1414bb0542d6401051a2d708f37ac8", 0x30, 0x20000004, 0x0, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000fcdbdf25120000001800018014000200766574683000000000000000080000000800"], 0x3c}, 0x1, 0x0, 0x0, 0x400c000}, 0x2004c0a0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x2c, 0x17, 0xa, 0x3, 0x0, 0x0, {0x5, 0x0, 0x5}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) r1 = socket$inet6(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYRESDEC=r0], 0x2c}}, 0x0) sendto$inet6(r1, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 1.120695968s ago: executing program 1 (id=2974): socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) socket(0x2, 0x80805, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, &(0x7f0000002300)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback=0x78, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x94) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x0, @none, 0x0, 0x1}, 0xe) setsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0xf, &(0x7f0000000080), 0x4) connect$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xe}, 0xe) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r5, 0x0, 0x1, 0x0) write$rfkill(r5, &(0x7f0000000040)={0x2, 0x5, 0x3, 0x1, 0x1}, 0x8) vmsplice(r5, &(0x7f0000000c40)=[{&(0x7f0000000400)="6f1e276ca370a2520de548d3e44ee1e85e15325cb34ade2d862ff0a312ca05c7fd37a1847ec78670d0de8dfb6908bdf0c8f569806db2ba255b09280e2f7cf506704a2fd48e9586aea6b4d6066d37135ceacc2d5f5e3147066eb124ddf07e88d563d5fe4e37545ad489116418c30c3856a3d4ffa06d51d46b2ede05547f5c6e97fd033800f8c362abf4dae255c66df7fa852ed4334c8a43432760b75e9ffb2d1fb218bdea7253bf61f6a2bdb345b038b8191bfd07a3a7d67093742e97a44b63f4b82e2e17d255f215d8b100", 0xcb}, {0x0}, {&(0x7f0000001100)="a6", 0x1}], 0x3, 0x0) ioctl$sock_inet_udp_SIOCINQ(r5, 0x541b, 0x0) write(r3, 0x0, 0x0) sendmmsg$sock(r1, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x130}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x6}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x38, 0xd, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) shutdown(r1, 0x1) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB="38000000100039042cfd7000eaffffff1c0003e4", @ANYRES32=0x0, @ANYBLOB="03000000c31006001800128008000100736974000c00028008000300ac141400"], 0x38}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="5a6e41dea43e63a3f70cff11c72b", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) 1.095880777s ago: executing program 4 (id=2975): mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x8, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$igmp(0x2, 0x3, 0x2) getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, &(0x7f0000000000), &(0x7f0000000040)=0xc) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x17, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8b, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfeff}, {0x85, 0x0, 0x0, 0x86}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x80000000}}, [@printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xffff}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x20}, {0x85, 0x0, 0x0, 0x84}, {0x7, 0x0, 0xb, 0x0, 0x0, 0x0, 0x500}}}, &(0x7f0000000080)='GPL\x00', 0x3, 0xfec, &(0x7f0000000780)=""/4076, 0x41000, 0x4b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000d}, 0x94) 1.036556009s ago: executing program 2 (id=2976): r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x1}}, 0x40) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000100)={r2, 0x20, &(0x7f00000010c0)={0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0xb, 0x13, 0x0, &(0x7f0000000100)='syzkaller\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000840)=ANY=[@ANYBLOB="2400000079a183199eb81c0000bec846f75861179f1f320c7c4366c6b4f51ac332d1b80b9122226befea479a621e7c38bad723ffee73172e0a4e9d32238aea313355d34f48931cf3f2844f3ec9cf3f0f8fce4bcf3cc552e110fb7c17ea0abcc7693009b018cff032742a65db", @ANYRES16, @ANYBLOB="050000000000000000", @ANYRES32=r4, @ANYBLOB="0800050003000000"], 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x7c, 0x0, 0x5, 0xfffffffc, 0x0, {{}, {@void, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x42, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x18, @random="e111f3df3ca210255dcfdeb3646a8c1077db25a3144ec03d"}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x2}, @NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x7c}}, 0x48000) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000300), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000640)=0xcde, 0x4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0x3c1, 0x3, 0x450, 0x150, 0x168, 0x9, 0x0, 0xb, 0x380, 0x250, 0x250, 0x380, 0x250, 0x3, 0x0, {[{{@ipv6={@remote, @rand_addr=' \x01\x00', [], [], 'veth0_to_bridge\x00', 'sit0\x00', {}, {}, 0x6c}, 0x6000000, 0x108, 0x150, 0x0, {0x0, 0x28e}, [@common=@inet=@ipcomp={{0x30}}, @common=@inet=@ipcomp={{0x30}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'dvmrp0\x00'}}}, {{@uncond, 0x0, 0x200, 0x230, 0x0, {}, [@common=@inet=@policy={{0x158}, {[{@ipv4=@local, [0x0, 0xff000000, 0xffffffff, 0xff000000], @ipv6=@private1, [0x0, 0x1fffffeff, 0xff000000, 0xffffff00], 0x4d6, 0x0, 0x0, 0x0, 0x10, 0x2}, {@ipv4=@remote, [0xff000000, 0xffffff00, 0xffffff00, 0xff], @ipv6=@local, [0x7f, 0xff000000, 0xffffff00, 0xff], 0x4d4, 0x34ff, 0x6c, 0x0, 0x12, 0x4}, {@ipv6=@mcast1, [0xffffffff, 0xffffffff, 0xffffffff, 0xff], @ipv6=@mcast2, [0xffffff00, 0x0, 0xffff00, 0xff000000], 0x4d2, 0x0, 0x0, 0x1, 0x0, 0xd}, {@ipv6=@ipv4={'\x00', '\xff\xff', @multicast2}, [0xffffffff, 0xffffff00], @ipv4=@rand_addr=0x64010100, [0xffffffff, 0xffffff00, 0xffffffff], 0x4d4, 0x3502, 0x32, 0x0, 0x0, 0x6}], 0xa, 0x4}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{}, {0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b0) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r5, 0x29, 0x37, &(0x7f0000000300)={0x32, 0x3, '\x00', [@jumbo={0xc2, 0x4, 0x7}, @hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x20) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r6, 0x6, 0xe, &(0x7f0000000380)={@in6={{0xa, 0x4e24, 0xffffffb8, @loopback, 0x9}}, 0x0, 0x0, 0x33, 0x0, "aae37be4753f0a28060a80cdd60fe31d6ba25cec257a3a485a338d600a8402d23df4854ed4cf29109f0e30e8d115e434392db157494620680fffb8cb989ab0cfc17eb88225e0fb0a062dd7a81eb098d3"}, 0xd8) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000740), r0) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$sock_SIOCINQ(r9, 0x541b, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x1c, r8, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x300}]}, 0x1c}, 0x1, 0x0, 0x0, 0x811}, 0x4000000) sendmsg$TIPC_NL_MON_GET(r7, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16, @ANYBLOB="000327bd7000fedbdf251200000024000980080002000000000008000100020000000800010016f80000080002008100000024000980080002000400000800020080000000080002004000000008000100010000"], 0x5c}, 0x1, 0x0, 0x0, 0x2000c050}, 0x8010) sendmmsg$inet6(r6, &(0x7f0000000140)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x2, @empty, 0xfe5}, 0x1c, &(0x7f0000000680)=[{&(0x7f0000000000)="fbcb37d4b602407e380d05c2cfab553433380ae1ea5fe76b88f56925b0500c144f7ec56a5ca5c409c384299080b09076f9d21d0ac4d37d30f03626ae1a93d3ddaa87df04b3866f3101af348f1fd2afb29e52910a48ccb191e145621cbdd3ec9376a10097b652266b16bf359cac92d29d99091df7d403fa664191c43e723976fb09907728328da39a2a55c6724c26bb285eb50de1fefe3826b67d5d5cb5ae73232f8ffdfd8750b3c729734deea37286518c4229ac181e61642848e74c7afbe48cbb48ad0f2ac790e8d2e6d89e9ac35b5ef3b84b240204fc753d43e99561adc369ee13b0dec9f0a7c61a9bbbec80", 0xed}, {&(0x7f0000000540)}], 0x2}}], 0x1, 0x200880d8) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x20, 0x2f, 0x9, 0x70bd25, 0x0, {0x4}, [@typed={0x8, 0xc, 0x0, 0x0, @u32=0x2}, @typed={0x4, 0x1f}]}, 0x20}, 0x1, 0x0, 0x0, 0x42014}, 0x4080040) 505.831578ms ago: executing program 4 (id=2977): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xa00042, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), r1) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r1, 0x4058587a, &(0x7f0000000280)={{r1, &(0x7f0000000080)='-#^,\xf9\x00', 0x50800, &(0x7f00000000c0)={@_ha_fsid={[0x8fb, 0x80000001]}, {0x724, 0x2, 0xc, 0x4}}, 0x2, &(0x7f0000000100)={@_ha_fsid}, &(0x7f0000000140)=0x3}, {[0x9, 0x7f, 0x9, 0x6]}, 0xf, 0xde, &(0x7f0000000180)=""/222}) ioctl$SIOCX25SCAUSEDIAG(r2, 0x89ec, &(0x7f0000000300)={0x9, 0x6}) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000340)={'macvlan1\x00', @link_local}) getsockopt$inet_sctp_SCTP_STATUS(r2, 0x84, 0xe, &(0x7f0000000380)={0x0, 0xa, 0x1, 0x2, 0xfbff, 0x0, 0x4, 0xa, {0x0, @in={{0x2, 0x4e20, @empty}}, 0x101, 0x0, 0x4, 0x8001, 0x81}}, &(0x7f0000000440)=0xb0) ioctl$SIOCGSKNS(r0, 0x894c, &(0x7f0000000480)={'nicvf0\x00', 0x400}) r3 = accept4$unix(r2, &(0x7f00000004c0)=@abs, &(0x7f0000000540)=0x6e, 0x80000) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r3, 0x8010661b, &(0x7f0000000580)) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r2, 0x114, 0xa, &(0x7f00000005c0)={0x3, "c7ef00"}, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000600)={0xffffffffffffffff}) syz_genetlink_get_family_id$ethtool(&(0x7f0000000640), r1) sendmsg$IPSET_CMD_SAVE(r2, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x3c, 0x8, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x24000000) syz_genetlink_get_family_id$nl802154(&(0x7f0000000780), 0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000007c0)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000800)={'veth1_macvtap\x00'}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000009c0)={r2, 0x0, 0x39, 0xd, &(0x7f0000000840)="445411336a6b7dec8ad087f5743dfdb8e420316b6c8d9462c25c5ef186512a2ab2680e48faafdfa245a43abe479293b672813eb922a707ab73", &(0x7f0000000880)=""/13, 0x10000, 0x0, 0x7, 0x8d, &(0x7f00000008c0)="6a3a82f226390f", &(0x7f0000000900)="9699510692a4faaa1a709bd33d83e45698261be258ec841a430d5d3eab845acf3cce8b71b1f3045144370d57b82013cdba872a8f431d3c5d05481900f25891342a695810d39c7dff8b4dbc63855319b4757470dc99216f2d00e9f6d847ae48a6bfbd3e15d20bf64f6fd1426c49f97b2e0c14160aa5cdaca8bd63063c7cce27e49bb002f1c65959e952a81a1e68", 0x0, 0x0, 0x7fff}, 0x50) sendmsg$802154_dgram(r2, &(0x7f0000000b00)={&(0x7f0000000a40)={0x24, @long={0x3, 0x2, {0xaaaaaaaaaaaa0102}}}, 0x14, &(0x7f0000000ac0)={&(0x7f0000000a80)="d3081eefe5", 0x5}}, 0x10040000) ioctl$FAT_IOCTL_GET_VOLUME_ID(r4, 0x80047213, &(0x7f0000000b40)) socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x28, 0x5, 0x5) syz_genetlink_get_family_id$devlink(&(0x7f0000000b80), r6) ioctl$sock_inet_SIOCSIFPFLAGS(r5, 0x8934, &(0x7f0000000bc0)={'virt_wifi0\x00', 0x80000001}) recvfrom$unix(r6, &(0x7f0000000c00)=""/213, 0xd5, 0x40010020, 0x0, 0x0) preadv(r1, &(0x7f0000001dc0)=[{&(0x7f0000000d00)=""/67, 0x43}, {&(0x7f0000000d80)=""/4096, 0x1000}, {&(0x7f0000001d80)=""/27, 0x1b}], 0x3, 0x7, 0xffffffff) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000001e00)) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000002040)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_GETPARAMS(r7, &(0x7f0000002180)={&(0x7f0000002000)={0x10, 0x0, 0x0, 0x80028250}, 0xc, &(0x7f0000002140)={&(0x7f00000020c0)={0x64, 0x0, 0x101, 0x70bd2c, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}]}, 0x64}, 0x1, 0x0, 0x0, 0x1}, 0x44000) 0s ago: executing program 4 (id=2978): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x38, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r1, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x4}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x38}]}, 0x38}}, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00') bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000240)={0xffffffffffffffff, &(0x7f0000000040)="5c9a1d438fb254ebd086324911eaaec41b0d2407bca026ed5fc098e3c2f618c87b04e58fcbcee1466c132fcd6cd89286a8d75fec47ddb3ea88cc4cb7cdab10a9c3da963559374a2ac971f6374d7a49d0da52018881705a70bde6973d235db9c59b26b1aa0c3345f383f85e840cea9629bc95497bf68048cae121c8d512fe03e069c82e311eec40623d9f495f19c2f64be438da07c7a633ab2e564d8011baff4f2b402f5f13191489cb2e59e0af0608143ccd17ed6ffa6e86edc70d57decacb545baab7d523", &(0x7f0000000140)=""/227}, 0x20) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0x20, 0x0, 0x0) socket(0x2a, 0x2, 0x0) ioctl$BTRFS_IOC_ENCODED_READ(r2, 0x891a, 0x0) kernel console output (not intermixed with test programs): _dequeue+0x250/0x540 [ 432.103470][T13991] ? sched_clock_cpu+0x74/0x440 [ 432.103507][T13991] ? __irq_exit_rcu+0xcb/0x220 [ 432.103536][T13991] ? handle_softirqs+0x720/0x860 [ 432.103563][T13991] __x64_sys_bpf+0xba/0xd0 [ 432.103585][T13991] do_syscall_64+0x166/0x520 [ 432.103609][T13991] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 432.103628][T13991] ? clear_bhb_loop+0x70/0xc0 [ 432.103651][T13991] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 432.103670][T13991] RIP: 0033:0x7f0a7859e159 [ 432.103688][T13991] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 432.103705][T13991] RSP: 002b:00007f0a793d1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 432.103726][T13991] RAX: ffffffffffffffda RBX: 00007f0a78825fa0 RCX: 00007f0a7859e159 [ 432.103740][T13991] RDX: 0000000000000094 RSI: 0000200000000280 RDI: 0000000000000005 [ 432.103752][T13991] RBP: 00007f0a793d1090 R08: 0000000000000000 R09: 0000000000000000 [ 432.103764][T13991] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 432.103775][T13991] R13: 00007f0a78826038 R14: 00007f0a78825fa0 R15: 00007ffc4d0e0d78 [ 432.103805][T13991] [ 432.237147][T13986] net_ratelimit: 1 callbacks suppressed [ 432.237186][T13986] ip_tables: iptables: counters copy to user failed while replacing table [ 432.465614][T13982] 8021q: adding VLAN 0 to HW filter on device bond5 [ 432.511982][T13982] bond5: (slave xfrm1): The slave device specified does not support setting the MAC address [ 432.513261][T13982] bond5: (slave xfrm1): Error -95 calling set_mac_address [ 432.821946][T13983] bond5: (slave dummy0): making interface the new active one [ 432.838589][T13983] bond5: (slave dummy0): Enslaving as an active interface with an up link [ 432.872969][T13987] 8021q: VLANs not supported on vcan0 [ 433.439567][ T59] bond1: (slave dummy0): failed to get link speed/duplex [ 433.459449][ T13] bond3: (slave ip6gretap0): failed to get link speed/duplex [ 433.555182][T11744] bond1: (slave dummy0): failed to get link speed/duplex [ 433.573629][T11744] bond3: (slave ip6gretap0): failed to get link speed/duplex [ 434.049219][T11743] bond1: (slave dummy0): failed to get link speed/duplex [ 434.049267][T11743] bond3: (slave ip6gretap0): failed to get link speed/duplex [ 434.159253][T11743] bond3: (slave ip6gretap0): failed to get link speed/duplex [ 434.159301][T11743] bond1: (slave dummy0): failed to get link speed/duplex [ 434.199132][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 434.636553][T14034] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2273'. [ 435.203981][T14044] FAULT_INJECTION: forcing a failure. [ 435.203981][T14044] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 435.204014][T14044] CPU: 0 UID: 0 PID: 14044 Comm: syz.3.2276 Not tainted syzkaller #0 PREEMPT(full) [ 435.204034][T14044] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 435.204045][T14044] Call Trace: [ 435.204053][T14044] [ 435.204060][T14044] dump_stack_lvl+0xe8/0x150 [ 435.204093][T14044] should_fail_ex+0x410/0x560 [ 435.204120][T14044] _copy_to_user+0x31/0xb0 [ 435.204145][T14044] bpf_verifier_vlog+0x496/0x900 [ 435.204175][T14044] verbose+0x11d/0x1a0 [ 435.204201][T14044] ? __pfx_snprintf+0x10/0x10 [ 435.204224][T14044] ? __pfx_verbose+0x10/0x10 [ 435.204241][T14044] ? lock_acquire+0x115/0x350 [ 435.204264][T14044] ? __func_imm_name+0xab/0xc0 [ 435.204289][T14044] print_bpf_insn+0x1a01/0x2930 [ 435.204313][T14044] ? __pfx_verbose+0x10/0x10 [ 435.204331][T14044] ? __pfx_print_bpf_insn+0x10/0x10 [ 435.204358][T14044] ? bpf_verifier_vlog+0x58d/0x900 [ 435.204386][T14044] ? bpf_verifier_log_write+0x11d/0x1a0 [ 435.204408][T14044] bpf_verbose_insn+0xcb/0x130 [ 435.204426][T14044] ? __pfx_bpf_verbose_insn+0x10/0x10 [ 435.204444][T14044] ? __pfx_verbose+0x10/0x10 [ 435.204459][T14044] ? __pfx_bpf_disasm_kfunc_name+0x10/0x10 [ 435.204477][T14044] ? __pfx_cmp_instances+0x10/0x10 [ 435.204498][T14044] ? bpf_compute_subprog_arg_access+0x509/0x14d0 [ 435.204519][T14044] ? bpf_compute_subprog_arg_access+0x509/0x14d0 [ 435.204548][T14044] bpf_compute_subprog_arg_access+0x9d1/0x14d0 [ 435.204570][T14044] ? bpf_tracing_func_proto+0x72/0x180 [ 435.204617][T14044] ? __pfx_bpf_compute_subprog_arg_access+0x10/0x10 [ 435.204645][T14044] ? __kvmalloc_node_noprof+0x345/0x820 [ 435.204665][T14044] ? bpf_compute_live_registers+0x14f/0x1ff0 [ 435.204684][T14044] ? bpf_compute_live_registers+0x14f/0x1ff0 [ 435.204713][T14044] bpf_compute_live_registers+0x8d3/0x1ff0 [ 435.204752][T14044] ? __pfx_bpf_compute_live_registers+0x10/0x10 [ 435.204790][T14044] bpf_check+0x25ed/0x2e10 [ 435.204824][T14044] ? ktime_get_with_offset+0x93/0x2d0 [ 435.204847][T14044] ? __pfx_bpf_check+0x10/0x10 [ 435.204869][T14044] ? bpf_obj_name_cpy+0x194/0x1e0 [ 435.204899][T14044] bpf_prog_load+0x14d6/0x1c20 [ 435.204932][T14044] ? __pfx_bpf_prog_load+0x10/0x10 [ 435.204977][T14044] __sys_bpf+0xd0d/0xd90 [ 435.205005][T14044] ? __pfx___sys_bpf+0x10/0x10 [ 435.205037][T14044] ? __fget_files+0x2a/0x420 [ 435.205078][T14044] ? ksys_write+0x242/0x270 [ 435.205105][T14044] ? __pfx_ksys_write+0x10/0x10 [ 435.205136][T14044] __x64_sys_bpf+0xba/0xd0 [ 435.205157][T14044] do_syscall_64+0x166/0x520 [ 435.205187][T14044] ? trace_irq_disable+0x3b/0x140 [ 435.205205][T14044] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 435.205225][T14044] ? clear_bhb_loop+0x70/0xc0 [ 435.205245][T14044] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 435.205263][T14044] RIP: 0033:0x7fe76239e159 [ 435.205279][T14044] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 435.205293][T14044] RSP: 002b:00007fe763206028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 435.205313][T14044] RAX: ffffffffffffffda RBX: 00007fe762625fa0 RCX: 00007fe76239e159 [ 435.205327][T14044] RDX: 0000000000000094 RSI: 0000200000000280 RDI: 0000000000000005 [ 435.205336][T14044] RBP: 00007fe763206090 R08: 0000000000000000 R09: 0000000000000000 [ 435.205346][T14044] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 435.205357][T14044] R13: 00007fe762626038 R14: 00007fe762625fa0 R15: 00007ffd19e31678 [ 435.205383][T14044] [ 435.339905][T14046] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2277'. [ 435.998856][T14048] 8021q: VLANs not supported on vcan0 [ 436.054438][T14062] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2281'. [ 436.078436][T14061] macvtap1: entered promiscuous mode [ 436.078462][T14061] vlan0: entered promiscuous mode [ 436.092669][T14061] macvtap1: entered allmulticast mode [ 436.092692][T14061] vlan0: entered allmulticast mode [ 436.092706][T14061] veth0_vlan: entered allmulticast mode [ 436.401415][T14061] macvtap2: entered promiscuous mode [ 436.402631][T14061] macvtap2: entered allmulticast mode [ 436.507573][T14072] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2282'. [ 436.848213][T14075] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2283'. [ 437.218167][T14083] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2286'. [ 437.246492][ T59] net_ratelimit: 39 callbacks suppressed [ 437.246515][ T59] bond1: (slave dummy0): failed to get link speed/duplex [ 437.246555][ T59] bond3: (slave ip6gretap0): failed to get link speed/duplex [ 437.285865][T14087] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2286'. [ 437.355855][T11743] bond3: (slave ip6gretap0): failed to get link speed/duplex [ 437.355959][T11743] bond1: (slave dummy0): failed to get link speed/duplex [ 437.451586][T14085] tipc: Enabling of bearer rejected, failed to enable media [ 437.462289][ T59] bond1: (slave dummy0): failed to get link speed/duplex [ 437.462366][ T59] bond3: (slave ip6gretap0): failed to get link speed/duplex [ 437.589796][T11744] bond3: (slave ip6gretap0): failed to get link speed/duplex [ 437.589896][T11744] bond1: (slave dummy0): failed to get link speed/duplex [ 437.707249][ T13] bond1: (slave dummy0): failed to get link speed/duplex [ 437.756065][T11743] bond3: (slave ip6gretap0): failed to get link speed/duplex [ 437.948462][T14095] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2290'. [ 438.013794][T14097] tipc: Can't bind to reserved service type 2 [ 438.063804][T14095] hsr_slave_1 (unregistering): left promiscuous mode [ 438.639690][T14104] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2293'. [ 439.462507][T14124] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2301'. [ 439.859024][ T30] audit: type=1804 audit(1789986169.132:17): pid=14133 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.2299" name="/newroot/444/cgroup.controllers" dev="tmpfs" ino=2285 res=1 errno=0 [ 439.859121][ T30] audit: type=1800 audit(1789986169.132:18): pid=14133 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2299" name="cgroup.controllers" dev="tmpfs" ino=2285 res=0 errno=0 [ 440.040358][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.137726][T14133] No such timeout policy "syz0" [ 440.626469][T14139] tipc: Enabling of bearer rejected, already enabled [ 441.140483][T14114] xt_policy: output policy not valid in PREROUTING and INPUT [ 442.319768][T11744] net_ratelimit: 58 callbacks suppressed [ 442.319795][T11744] bond3: (slave ip6gretap0): failed to get link speed/duplex [ 442.353228][T11743] bond1: (slave dummy0): failed to get link speed/duplex [ 442.430104][ T201] bond3: (slave ip6gretap0): failed to get link speed/duplex [ 442.463041][T11743] bond1: (slave dummy0): failed to get link speed/duplex [ 442.556080][ T201] bond3: (slave ip6gretap0): failed to get link speed/duplex [ 442.571641][ T13] bond1: (slave dummy0): failed to get link speed/duplex [ 442.673845][ T201] bond3: (slave ip6gretap0): failed to get link speed/duplex [ 442.679848][T11743] bond1: (slave dummy0): failed to get link speed/duplex [ 442.813671][T14170] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2311'. [ 442.939300][T11743] bond1: (slave dummy0): failed to get link speed/duplex [ 442.939398][T11743] bond3: (slave ip6gretap0): failed to get link speed/duplex [ 443.009889][T14168] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2309'. [ 443.904609][T14186] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2313'. [ 444.329294][T14191] wg2 speed is unknown, defaulting to 1000 [ 444.520186][T14202] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2316'. [ 444.814268][T14210] tap0: tun_chr_ioctl cmd 1074025677 [ 444.814555][T14210] tap0: linktype set to 804 [ 444.815439][T14207] tipc: Enabling of bearer rejected, already enabled [ 446.991080][T14254] netlink: 165 bytes leftover after parsing attributes in process `syz.4.2328'. [ 447.040316][T14254] netlink: 'syz.4.2328': attribute type 1 has an invalid length. [ 447.040338][T14254] netlink: 248 bytes leftover after parsing attributes in process `syz.4.2328'. [ 447.413124][T14262] netlink: 'syz.0.2324': attribute type 16 has an invalid length. [ 447.413148][T14262] netlink: 'syz.0.2324': attribute type 17 has an invalid length. [ 447.544441][T14262] veth1: left promiscuous mode [ 447.547354][T14262] veth1: left allmulticast mode [ 447.805338][T14262] ip6gre1: left promiscuous mode [ 447.805521][T14262] ip6gre1: left allmulticast mode [ 447.820709][T14262] geneve2: left promiscuous mode [ 447.820905][T14262] geneve2: left allmulticast mode [ 447.884948][T14262] bridge2: left promiscuous mode [ 447.919152][T14262] bond7: left promiscuous mode [ 447.947807][T14262] bond8: left promiscuous mode [ 447.947834][T14262] veth0_to_bond: left promiscuous mode [ 447.961706][T14262] bond8: left allmulticast mode [ 447.961732][T14262] veth0_to_bond: left allmulticast mode [ 448.013052][T14252] netlink: 144 bytes leftover after parsing attributes in process `syz.0.2324'. [ 448.478254][T14260] tipc: Resetting bearer [ 448.489164][T14260] tipc: Resetting bearer [ 448.608765][ T6819] wg2 speed is unknown, defaulting to 1000 [ 448.703632][ T59] net_ratelimit: 36 callbacks suppressed [ 448.703690][ T59] bond3: (slave ip6gretap0): failed to get link speed/duplex [ 448.703768][ T59] bond1: (slave dummy0): failed to get link speed/duplex [ 448.821112][ T59] bond1: (slave dummy0): failed to get link speed/duplex [ 448.821207][ T59] bond3: (slave ip6gretap0): failed to get link speed/duplex [ 448.931022][ T59] bond1: (slave dummy0): failed to get link speed/duplex [ 448.931139][ T59] bond3: (slave ip6gretap0): failed to get link speed/duplex [ 449.040617][T11738] tipc: Resetting bearer [ 449.041649][T11738] tipc: Resetting bearer [ 449.043745][T11744] bond1: (slave dummy0): failed to get link speed/duplex [ 449.047999][ T59] bond3: (slave ip6gretap0): failed to get link speed/duplex [ 449.167613][T11744] bond1: (slave dummy0): failed to get link speed/duplex [ 449.198108][T11744] bond3: (slave ip6gretap0): failed to get link speed/duplex [ 449.776943][T14289] FAULT_INJECTION: forcing a failure. [ 449.776943][T14289] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 449.777009][T14289] CPU: 1 UID: 0 PID: 14289 Comm: syz.0.2334 Not tainted syzkaller #0 PREEMPT(full) [ 449.777033][T14289] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 449.777045][T14289] Call Trace: [ 449.777052][T14289] [ 449.777060][T14289] dump_stack_lvl+0xe8/0x150 [ 449.777089][T14289] should_fail_ex+0x410/0x560 [ 449.777116][T14289] _copy_to_user+0x31/0xb0 [ 449.777143][T14289] bpf_verifier_vlog+0x496/0x900 [ 449.777173][T14289] verbose+0x11d/0x1a0 [ 449.777190][T14289] ? __pfx_snprintf+0x10/0x10 [ 449.777213][T14289] ? __pfx_verbose+0x10/0x10 [ 449.777232][T14289] ? lock_acquire+0x115/0x350 [ 449.777255][T14289] ? __func_imm_name+0xab/0xc0 [ 449.777290][T14289] print_bpf_insn+0x1a01/0x2930 [ 449.777314][T14289] ? __pfx_verbose+0x10/0x10 [ 449.777333][T14289] ? __pfx_print_bpf_insn+0x10/0x10 [ 449.777360][T14289] ? bpf_verifier_vlog+0x58d/0x900 [ 449.777389][T14289] ? bpf_verifier_log_write+0x11d/0x1a0 [ 449.777411][T14289] bpf_verbose_insn+0xcb/0x130 [ 449.777430][T14289] ? __pfx_bpf_verbose_insn+0x10/0x10 [ 449.777448][T14289] ? __pfx_verbose+0x10/0x10 [ 449.777473][T14289] ? __pfx_bpf_disasm_kfunc_name+0x10/0x10 [ 449.777497][T14289] ? bpf_vlog_reset+0x2aa/0x340 [ 449.777519][T14289] bpf_compute_subprog_arg_access+0x9d1/0x14d0 [ 449.777541][T14289] ? bpf_tracing_func_proto+0x72/0x180 [ 449.777590][T14289] ? __pfx_bpf_compute_subprog_arg_access+0x10/0x10 [ 449.777618][T14289] ? __kvmalloc_node_noprof+0x345/0x820 [ 449.777639][T14289] ? bpf_compute_live_registers+0x14f/0x1ff0 [ 449.777660][T14289] ? bpf_compute_live_registers+0x14f/0x1ff0 [ 449.777689][T14289] bpf_compute_live_registers+0x8d3/0x1ff0 [ 449.777729][T14289] ? __pfx_bpf_compute_live_registers+0x10/0x10 [ 449.777762][T14289] bpf_check+0x25ed/0x2e10 [ 449.777794][T14289] ? ktime_get_with_offset+0x93/0x2d0 [ 449.777818][T14289] ? __pfx_bpf_check+0x10/0x10 [ 449.777841][T14289] ? bpf_obj_name_cpy+0x194/0x1e0 [ 449.777871][T14289] bpf_prog_load+0x14d6/0x1c20 [ 449.777905][T14289] ? __pfx_bpf_prog_load+0x10/0x10 [ 449.777952][T14289] __sys_bpf+0xd0d/0xd90 [ 449.777980][T14289] ? __pfx___sys_bpf+0x10/0x10 [ 449.778006][T14289] ? __fget_files+0x2a/0x420 [ 449.778044][T14289] ? ksys_write+0x242/0x270 [ 449.778071][T14289] ? __pfx_ksys_write+0x10/0x10 [ 449.778096][T14289] __x64_sys_bpf+0xba/0xd0 [ 449.778115][T14289] do_syscall_64+0x166/0x520 [ 449.778135][T14289] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 449.778152][T14289] ? clear_bhb_loop+0x70/0xc0 [ 449.778174][T14289] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 449.778193][T14289] RIP: 0033:0x7f232919e159 [ 449.778209][T14289] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 449.778222][T14289] RSP: 002b:00007f232a102028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 449.778241][T14289] RAX: ffffffffffffffda RBX: 00007f2329425fa0 RCX: 00007f232919e159 [ 449.778255][T14289] RDX: 0000000000000094 RSI: 0000200000000280 RDI: 0000000000000005 [ 449.778267][T14289] RBP: 00007f232a102090 R08: 0000000000000000 R09: 0000000000000000 [ 449.778287][T14289] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 449.778296][T14289] R13: 00007f2329426038 R14: 00007f2329425fa0 R15: 00007ffdf35e87e8 [ 449.778326][T14289] [ 450.007106][T14292] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2332'. [ 450.007151][T14292] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2332'. [ 450.049291][T14292] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2332'. [ 452.261864][T14326] netlink: 'syz.4.2343': attribute type 10 has an invalid length. [ 452.261891][T14326] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2343'. [ 453.256855][T14349] netlink: 'syz.0.2350': attribute type 1 has an invalid length. [ 453.944991][T14366] netlink: 'syz.3.2353': attribute type 1 has an invalid length. [ 453.945016][T14366] netlink: 'syz.3.2353': attribute type 12 has an invalid length. [ 453.945028][T14366] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2353'. [ 453.962948][T14354] gretap1: entered allmulticast mode [ 454.041335][ C1] net_ratelimit: 40 callbacks suppressed [ 454.041376][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 454.041894][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 454.085284][T14369] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2352'. [ 454.086618][T14354] bond9: (slave gretap1): making interface the new active one [ 454.275935][T14354] bond9: (slave gretap1): Enslaving as an active interface with an up link [ 454.389100][T14369] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2352'. [ 454.396154][T14371] tap0: tun_chr_ioctl cmd 1074025677 [ 454.396447][T14371] tap0: linktype set to 804 [ 454.400024][ T201] bond3: (slave ip6gretap0): failed to get link speed/duplex [ 454.400099][ T201] bond1: (slave dummy0): failed to get link speed/duplex [ 454.735682][T11743] bond3: (slave ip6gretap0): failed to get link speed/duplex [ 454.735805][T11743] bond1: (slave dummy0): failed to get link speed/duplex [ 454.842380][ T201] bond1: (slave dummy0): failed to get link speed/duplex [ 454.842477][ T201] bond3: (slave ip6gretap0): failed to get link speed/duplex [ 454.962860][ T1276] bond3: (slave ip6gretap0): failed to get link speed/duplex [ 454.962940][ T1276] bond1: (slave dummy0): failed to get link speed/duplex [ 456.175188][T14407] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2361'. [ 456.653776][T14418] macvlan5: entered promiscuous mode [ 456.730465][T14410] netlink: 'syz.3.2363': attribute type 5 has an invalid length. [ 456.921805][T14427] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2366'. [ 457.225534][T14438] netlink: 87 bytes leftover after parsing attributes in process `syz.4.2367'. [ 457.944888][T14462] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2368'. [ 457.946524][T14454] netlink: 'syz.0.2369': attribute type 10 has an invalid length. [ 457.989273][T14456] netlink: 'syz.0.2369': attribute type 10 has an invalid length. [ 458.355049][T14440] ieee802154 phy0 wpan0: encryption failed: -126 [ 458.536551][T14472] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2371'. [ 458.821050][T14456] team0: Port device dummy0 removed [ 459.098283][T14433] virtio_blk virtio4: 1/0/0 default/read/poll queues [ 459.119591][ T59] net_ratelimit: 36 callbacks suppressed [ 459.119639][ T59] bond3: (slave ip6gretap0): failed to get link speed/duplex [ 459.119710][ T12] bond1: (slave dummy0): failed to get link speed/duplex [ 459.159586][T14433] virtio_blk virtio4: [vda] 262144 512-byte logical blocks (134 MB/128 MiB) [ 459.230664][ T12] bond3: (slave ip6gretap0): failed to get link speed/duplex [ 459.230761][ T12] bond1: (slave dummy0): failed to get link speed/duplex [ 459.339238][ T12] bond1: (slave dummy0): failed to get link speed/duplex [ 459.339332][ T12] bond3: (slave ip6gretap0): failed to get link speed/duplex [ 459.454351][T11738] bond3: (slave ip6gretap0): failed to get link speed/duplex [ 459.470470][ T1276] bond1: (slave dummy0): failed to get link speed/duplex [ 459.722738][ T1276] bond1: (slave dummy0): failed to get link speed/duplex [ 459.722783][ T1276] bond3: (slave ip6gretap0): failed to get link speed/duplex [ 460.106782][T14496] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2376'. [ 460.106806][T14496] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2376'. [ 460.106831][T14496] netlink: 'syz.4.2376': attribute type 13 has an invalid length. [ 460.106844][T14496] netlink: 'syz.4.2376': attribute type 12 has an invalid length. [ 460.292642][T14496] netlink: 'syz.4.2376': attribute type 11 has an invalid length. [ 460.424570][T14505] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2376'. [ 460.424592][T14505] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2376'. [ 460.424617][T14505] netlink: 'syz.4.2376': attribute type 13 has an invalid length. [ 460.424630][T14505] netlink: 'syz.4.2376': attribute type 12 has an invalid length. [ 461.228406][T14524] syzkaller0: entered promiscuous mode [ 461.228593][T14524] syzkaller0: entered allmulticast mode [ 462.313274][T14553] netlink: 'syz.2.2388': attribute type 11 has an invalid length. [ 462.745305][T14545] xt_policy: output policy not valid in PREROUTING and INPUT [ 462.903135][T14565] netlink: 'syz.2.2392': attribute type 28 has an invalid length. [ 463.121815][T14557] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2389'. [ 464.150711][ T1276] net_ratelimit: 71 callbacks suppressed [ 464.150759][ T1276] bond1: (slave dummy0): failed to get link speed/duplex [ 464.150834][ T1276] bond3: (slave ip6gretap0): failed to get link speed/duplex [ 464.261747][ T50] bond3: (slave ip6gretap0): failed to get link speed/duplex [ 464.261855][ T50] bond1: (slave dummy0): failed to get link speed/duplex [ 464.374814][ T59] bond1: (slave dummy0): failed to get link speed/duplex [ 464.375107][ T59] bond3: (slave ip6gretap0): failed to get link speed/duplex [ 464.480195][ T50] bond3: (slave ip6gretap0): failed to get link speed/duplex [ 464.480418][ T50] bond1: (slave dummy0): failed to get link speed/duplex [ 464.604092][ T59] bond1: (slave dummy0): failed to get link speed/duplex [ 464.604218][ T59] bond3: (slave ip6gretap0): failed to get link speed/duplex [ 466.917951][T14622] netlink: 'syz.4.2404': attribute type 9 has an invalid length. [ 468.012461][T14649] netlink: 'syz.2.2409': attribute type 4 has an invalid length. [ 468.012524][T14649] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2409'. [ 468.157001][T14649] .`: renamed from bond0 (while UP) [ 468.399010][T14645] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2409'. [ 469.170235][ T1276] net_ratelimit: 62 callbacks suppressed [ 469.170258][ T1276] bond3: (slave ip6gretap0): failed to get link speed/duplex [ 469.170297][ T1276] bond1: (slave dummy0): failed to get link speed/duplex [ 469.446193][T14674] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 470.267847][T14690] netlink: 'syz.3.2416': attribute type 22 has an invalid length. [ 470.267891][T14690] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2416'. [ 471.241553][T14690] netlink: 'syz.3.2416': attribute type 22 has an invalid length. [ 471.241578][T14690] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2416'. [ 471.370212][T14709] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 471.545065][T14696] syzkaller1: entered promiscuous mode [ 471.545122][T14696] syzkaller1: entered allmulticast mode [ 471.582443][ T59] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 471.582569][ T59] bond1: (slave dummy0): failed to get link speed/duplex [ 471.582641][ T59] bond3: (slave ip6gretap0): failed to get link speed/duplex [ 471.582706][ T59] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 471.582777][ T59] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 471.582877][ T59] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 471.635395][T14703] tipc: Enabling of bearer rejected, already enabled [ 471.909290][T14717] FAULT_INJECTION: forcing a failure. [ 471.909290][T14717] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 471.909349][T14717] CPU: 1 UID: 0 PID: 14717 Comm: syz.2.2422 Not tainted syzkaller #0 PREEMPT(full) [ 471.909374][T14717] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 471.909386][T14717] Call Trace: [ 471.909394][T14717] [ 471.909403][T14717] dump_stack_lvl+0xe8/0x150 [ 471.909436][T14717] should_fail_ex+0x410/0x560 [ 471.909463][T14717] prepare_alloc_pages+0x223/0x600 [ 471.909491][T14717] __alloc_frozen_pages_noprof+0x185/0x5a0 [ 471.909518][T14717] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 471.909543][T14717] ? __pfx_policy_nodemask+0x10/0x10 [ 471.909568][T14717] ? __pfx_mmap_region+0x10/0x10 [ 471.909592][T14717] ? stack_depot_save_flags+0x33/0x7f0 [ 471.909612][T14717] ? __lock_acquire+0x747/0x2de0 [ 471.909635][T14717] alloc_pages_mpol+0x21e/0x390 [ 471.909665][T14717] alloc_pages_noprof+0xb1/0x2b0 [ 471.909691][T14717] pte_alloc_one+0x22/0x370 [ 471.909716][T14717] do_pte_missing+0x13c8/0x34b0 [ 471.909741][T14717] ? __pfx___thp_vma_allowable_orders+0x10/0x10 [ 471.909765][T14717] ? mtree_range_walk+0x707/0x8b0 [ 471.909798][T14717] handle_mm_fault+0x1a53/0x3750 [ 471.909824][T14717] ? mt_find+0x186/0x630 [ 471.909856][T14717] ? handle_mm_fault+0xf1/0x3750 [ 471.909891][T14717] ? __pfx_handle_mm_fault+0x10/0x10 [ 471.909944][T14717] __get_user_pages+0x1675/0x2750 [ 471.910003][T14717] populate_vma_page_range+0x2be/0x3c0 [ 471.910029][T14717] ? __pfx_populate_vma_page_range+0x10/0x10 [ 471.910054][T14717] ? down_read+0x2be/0x330 [ 471.910082][T14717] __mm_populate+0x25f/0x390 [ 471.910107][T14717] ? __pfx___mm_populate+0x10/0x10 [ 471.910149][T14717] vm_mmap_pgoff+0x353/0x4e0 [ 471.910170][T14717] ? lock_acquire+0x115/0x350 [ 471.910193][T14717] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 471.910218][T14717] ? __fget_files+0x2a/0x420 [ 471.910248][T14717] ? __fget_files+0x3a2/0x420 [ 471.910272][T14717] ? __fget_files+0x2a/0x420 [ 471.910301][T14717] ksys_mmap_pgoff+0x4dc/0x760 [ 471.910333][T14717] do_syscall_64+0x166/0x520 [ 471.910357][T14717] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 471.910377][T14717] ? clear_bhb_loop+0x70/0xc0 [ 471.910400][T14717] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 471.910420][T14717] RIP: 0033:0x7ff22bb9e159 [ 471.910439][T14717] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 471.910454][T14717] RSP: 002b:00007ff22ca4a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 471.910473][T14717] RAX: ffffffffffffffda RBX: 00007ff22be25fa0 RCX: 00007ff22bb9e159 [ 471.910487][T14717] RDX: 000000000100000c RSI: 0000000000003000 RDI: 00002000007a6000 [ 471.910500][T14717] RBP: 00007ff22ca4a090 R08: 0000000000000003 R09: 0000000000000000 [ 471.910512][T14717] R10: 0000000000022051 R11: 0000000000000246 R12: 0000000000000002 [ 471.910524][T14717] R13: 00007ff22be26038 R14: 00007ff22be25fa0 R15: 00007ffc99fba128 [ 471.910577][T14717] [ 471.962962][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 471.963326][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 471.963649][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 471.987017][T14708] wg2 speed is unknown, defaulting to 1000 [ 473.050401][ T12] bond3: (slave ip6gretap0): failed to get link speed/duplex [ 473.050526][ T12] bond1: (slave dummy0): failed to get link speed/duplex [ 473.372811][T14712] xt_policy: output policy not valid in PREROUTING and INPUT [ 473.881033][T14744] netlink: 'syz.3.2432': attribute type 2 has an invalid length. [ 473.949260][T14746] netlink: 'syz.3.2432': attribute type 2 has an invalid length. [ 473.949286][T14746] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2432'. [ 474.004004][T14743] syzkaller1: entered promiscuous mode [ 474.004192][T14743] syzkaller1: entered allmulticast mode [ 474.179492][T14748] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2431'. [ 474.271329][T14748] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2431'. [ 474.289909][ T201] net_ratelimit: 8 callbacks suppressed [ 474.289933][ T201] bond1: (slave dummy0): failed to get link speed/duplex [ 474.290158][ T201] bond3: (slave ip6gretap0): failed to get link speed/duplex [ 474.479681][T11738] bond3: (slave ip6gretap0): failed to get link speed/duplex [ 474.479778][T11738] bond1: (slave dummy0): failed to get link speed/duplex [ 474.596418][T11738] bond1: (slave dummy0): failed to get link speed/duplex [ 474.596466][T11738] bond3: (slave ip6gretap0): failed to get link speed/duplex [ 475.158961][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 475.159215][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 475.159590][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 475.731451][ T50] bond1: (slave dummy0): failed to get link speed/duplex [ 476.327127][T14776] bond6: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 476.670313][T14776] bond6 (unregistering): Released all slaves [ 477.850398][T14784] xt_policy: output policy not valid in PREROUTING and INPUT [ 478.308475][T14810] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2456'. [ 478.312870][T14810] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2456'. [ 479.369424][ T12] net_ratelimit: 49 callbacks suppressed [ 479.369449][ T12] bond1: (slave dummy0): failed to get link speed/duplex [ 479.369484][ T12] bond3: (slave ip6gretap0): failed to get link speed/duplex [ 479.483927][ T12] bond3: (slave ip6gretap0): failed to get link speed/duplex [ 479.484061][ T12] bond1: (slave dummy0): failed to get link speed/duplex [ 479.593354][ T12] bond1: (slave dummy0): failed to get link speed/duplex [ 479.593449][ T12] bond3: (slave ip6gretap0): failed to get link speed/duplex [ 479.699691][ T12] bond3: (slave ip6gretap0): failed to get link speed/duplex [ 479.699738][ T12] bond1: (slave dummy0): failed to get link speed/duplex [ 479.809133][ T12] bond1: (slave dummy0): failed to get link speed/duplex [ 479.809175][ T12] bond3: (slave ip6gretap0): failed to get link speed/duplex [ 479.963046][T14839] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2460'. [ 480.065113][T14839] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2460'. [ 480.494771][T14848] sctp: [Deprecated]: syz.2.2461 (pid 14848) Use of int in maxseg socket option. [ 480.494771][T14848] Use struct sctp_assoc_value instead [ 480.625840][T14848] netlink: 'syz.2.2461': attribute type 1 has an invalid length. [ 480.941455][T14848] 8021q: adding VLAN 0 to HW filter on device bond0 [ 482.729438][T14890] netlink: 'syz.4.2471': attribute type 2 has an invalid length. [ 483.305889][T14872] xt_policy: output policy not valid in PREROUTING and INPUT [ 484.056494][T14912] netlink: 'syz.2.2480': attribute type 1 has an invalid length. [ 484.160257][T14916] netlink: 'syz.2.2480': attribute type 1 has an invalid length. [ 484.944262][ T61] net_ratelimit: 116 callbacks suppressed [ 484.944320][ T61] bond1: (slave dummy0): failed to get link speed/duplex [ 484.944393][ T61] bond3: (slave ip6gretap0): failed to get link speed/duplex [ 485.359940][ T12] bond3: (slave ip6gretap0): failed to get link speed/duplex [ 485.360064][ T61] bond1: (slave dummy0): failed to get link speed/duplex [ 485.470135][ T12] bond1: (slave dummy0): failed to get link speed/duplex [ 485.470228][ T12] bond3: (slave ip6gretap0): failed to get link speed/duplex [ 485.583741][ T12] bond3: (slave ip6gretap0): failed to get link speed/duplex [ 485.583842][ T12] bond1: (slave dummy0): failed to get link speed/duplex [ 485.633660][T14933] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2486'. [ 485.640507][T14933] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2486'. [ 485.830860][ T61] bond1: (slave dummy0): failed to get link speed/duplex [ 485.850132][ T61] bond3: (slave ip6gretap0): failed to get link speed/duplex [ 486.345760][T14951] netlink: 'syz.1.2491': attribute type 6 has an invalid length. [ 486.418310][T14951] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2491'. [ 486.874655][T14959] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 486.984043][T14963] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2493'. [ 488.257796][T14984] syzkaller0: entered promiscuous mode [ 488.257979][T14984] syzkaller0: entered allmulticast mode [ 488.649079][T14991] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2501'. [ 488.650261][T14991] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2501'. [ 488.931071][T14996] netlink: 'syz.0.2504': attribute type 1 has an invalid length. [ 489.166275][T15004] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2508'. [ 489.166342][T15004] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2508'. [ 489.324328][T15007] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2504'. [ 489.756366][T14996] bridge7: entered promiscuous mode [ 489.839686][T14996] bond10: (slave bridge7): making interface the new active one [ 489.992689][T14996] bond10: (slave bridge7): Enslaving as an active interface with an up link [ 490.000712][ T61] net_ratelimit: 109 callbacks suppressed [ 490.000770][ T61] bond3: (slave ip6gretap0): failed to get link speed/duplex [ 490.000881][ T61] bond1: (slave dummy0): failed to get link speed/duplex [ 490.120705][ T50] bond1: (slave dummy0): failed to get link speed/duplex [ 490.120810][ T50] bond3: (slave ip6gretap0): failed to get link speed/duplex [ 490.230216][ T50] bond3: (slave ip6gretap0): failed to get link speed/duplex [ 490.230268][ T50] bond1: (slave dummy0): failed to get link speed/duplex [ 490.342692][ T50] bond1: (slave dummy0): failed to get link speed/duplex [ 490.342815][ T50] bond3: (slave ip6gretap0): failed to get link speed/duplex [ 490.454332][ T50] bond3: (slave ip6gretap0): failed to get link speed/duplex [ 490.454432][ T50] bond1: (slave dummy0): failed to get link speed/duplex [ 491.492224][T15043] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2514'. [ 492.168611][T15045] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2516'. [ 493.519344][T15070] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2523'. [ 494.668524][T15094] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2529'. [ 494.710887][T15094] netlink: 'syz.2.2529': attribute type 39 has an invalid length. [ 495.102296][ T61] net_ratelimit: 66 callbacks suppressed [ 495.102348][ T61] bond3: (slave ip6gretap0): failed to get link speed/duplex [ 495.102449][ T61] bond1: (slave dummy0): failed to get link speed/duplex [ 495.222817][ T50] bond1: (slave dummy0): failed to get link speed/duplex [ 495.224286][ T50] bond3: (slave ip6gretap0): failed to get link speed/duplex [ 495.330922][T11738] bond3: (slave ip6gretap0): failed to get link speed/duplex [ 495.330973][T11738] bond1: (slave dummy0): failed to get link speed/duplex [ 495.446340][ T12] bond1: (slave dummy0): failed to get link speed/duplex [ 495.446391][ T12] bond3: (slave ip6gretap0): failed to get link speed/duplex [ 495.481501][T15105] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2533'. [ 495.528547][T15107] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 495.549380][ T50] bond3: (slave ip6gretap0): failed to get link speed/duplex [ 495.549429][ T50] bond1: (slave dummy0): failed to get link speed/duplex [ 496.993555][T15124] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2538'. [ 497.279501][T15132] netlink: 'syz.2.2540': attribute type 4 has an invalid length. [ 497.279529][T15132] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2540'. [ 497.678603][T15150] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2546'. [ 497.679655][T15150] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2546'. [ 498.612725][ T5624] block nbd1: Receive control failed (result -32) [ 500.206944][ T61] net_ratelimit: 70 callbacks suppressed [ 500.207003][ T61] bond3: (slave ip6gretap0): failed to get link speed/duplex [ 500.207077][ T61] bond1: (slave dummy0): failed to get link speed/duplex [ 500.309801][ T61] bond1: (slave dummy0): failed to get link speed/duplex [ 500.309932][ T61] bond3: (slave ip6gretap0): failed to get link speed/duplex [ 500.418899][ T50] bond3: (slave ip6gretap0): failed to get link speed/duplex [ 500.418947][ T50] bond1: (slave dummy0): failed to get link speed/duplex [ 500.533471][ T59] bond1: (slave dummy0): failed to get link speed/duplex [ 500.533521][ T59] bond3: (slave ip6gretap0): failed to get link speed/duplex [ 500.640742][ T61] bond3: (slave ip6gretap0): failed to get link speed/duplex [ 500.640791][ T61] bond1: (slave dummy0): failed to get link speed/duplex [ 500.787206][T15218] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2559'. [ 501.484042][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 503.894604][T15309] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2574'. [ 503.925696][T15309] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2574'. [ 504.516040][T15326] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2577'. [ 504.516064][T15326] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 504.516201][T15326] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 506.273074][ T61] net_ratelimit: 60 callbacks suppressed [ 506.273130][ T61] bond3: (slave ip6gretap0): failed to get link speed/duplex [ 506.273206][ T61] bond1: (slave dummy0): failed to get link speed/duplex [ 506.463782][ T13] bond1: (slave dummy0): failed to get link speed/duplex [ 506.463883][ T13] bond3: (slave ip6gretap0): failed to get link speed/duplex [ 506.573824][T11746] bond3: (slave ip6gretap0): failed to get link speed/duplex [ 506.573925][T11746] bond1: (slave dummy0): failed to get link speed/duplex [ 506.683370][ T50] bond1: (slave dummy0): failed to get link speed/duplex [ 506.683474][ T50] bond3: (slave ip6gretap0): failed to get link speed/duplex [ 507.052254][ T61] bond1: (slave dummy0): failed to get link speed/duplex [ 507.052375][ T61] bond3: (slave ip6gretap0): failed to get link speed/duplex [ 507.685475][T15390] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2586'. [ 507.685507][T15390] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2586'. [ 507.736506][T15392] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 64993 [ 507.757822][T15390] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2586'. [ 507.817769][T15390] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2586'. [ 507.817808][T15390] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2586'. [ 511.286647][T11746] net_ratelimit: 45 callbacks suppressed [ 511.286669][T11746] bond1: (slave dummy0): failed to get link speed/duplex [ 511.286706][T11746] bond3: (slave ip6gretap0): failed to get link speed/duplex [ 511.419370][ T59] bond3: (slave ip6gretap0): failed to get link speed/duplex [ 511.419471][ T59] bond1: (slave dummy0): failed to get link speed/duplex [ 511.536543][T11746] bond1: (slave dummy0): failed to get link speed/duplex [ 511.536589][T11746] bond3: (slave ip6gretap0): failed to get link speed/duplex [ 511.659803][ T59] bond3: (slave ip6gretap0): failed to get link speed/duplex [ 511.659900][ T59] bond1: (slave dummy0): failed to get link speed/duplex [ 511.737801][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 511.738023][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 512.535748][T15451] wg2 speed is unknown, defaulting to 1000 [ 513.690468][T15471] netlink: 'syz.1.2608': attribute type 1 has an invalid length. [ 514.076095][T15473] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2608'. [ 514.255756][T15471] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2608'. [ 514.727011][T15481] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2609'. [ 514.814505][T15482] netlink: 196 bytes leftover after parsing attributes in process `syz.1.2610'. [ 514.968177][T15476] netlink: 'syz.4.2602': attribute type 15 has an invalid length. [ 514.968203][T15476] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2602'. [ 515.126000][T15493] netlink: 'syz.4.2602': attribute type 4 has an invalid length. [ 516.448942][T11746] net_ratelimit: 42 callbacks suppressed [ 516.448964][T11746] bond3: (slave ip6gretap0): failed to get link speed/duplex [ 516.449002][T11746] bond1: (slave dummy0): failed to get link speed/duplex [ 516.525656][T15509] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2613'. [ 516.561580][T11738] bond1: (slave dummy0): failed to get link speed/duplex [ 516.561625][T11738] bond3: (slave ip6gretap0): failed to get link speed/duplex [ 516.670994][ T201] bond3: (slave ip6gretap0): failed to get link speed/duplex [ 516.671096][ T201] bond1: (slave dummy0): failed to get link speed/duplex [ 516.796615][ T12] bond1: (slave dummy0): failed to get link speed/duplex [ 516.796658][ T12] bond3: (slave ip6gretap0): failed to get link speed/duplex [ 516.905461][T11738] bond3: (slave ip6gretap0): failed to get link speed/duplex [ 516.905509][T11738] bond1: (slave dummy0): failed to get link speed/duplex [ 517.114069][T15513] 8021q: adding VLAN 0 to HW filter on device macsec0 [ 517.231835][T15531] Bluetooth: hci3: Opcode 0x0401 failed: -22 [ 517.232572][T15531] Bluetooth: hci3: Opcode 0x0401 failed: -22 [ 517.311291][T15531] Bluetooth: hci3: Opcode 0x0401 failed: -22 [ 517.312104][T15531] Bluetooth: hci3: Opcode 0x0401 failed: -22 [ 517.312966][T15531] Bluetooth: hci3: Opcode 0x0401 failed: -22 [ 517.313699][T15531] Bluetooth: hci3: Opcode 0x0401 failed: -22 [ 517.314408][T15531] Bluetooth: hci3: Opcode 0x0401 failed: -22 [ 517.315320][T15531] Bluetooth: hci3: Opcode 0x0401 failed: -22 [ 517.316033][T15531] Bluetooth: hci3: Opcode 0x0401 failed: -22 [ 517.316750][T15531] Bluetooth: hci3: Opcode 0x0401 failed: -22 [ 517.317459][T15531] Bluetooth: hci3: Opcode 0x0401 failed: -22 [ 517.318191][T15531] Bluetooth: hci3: Opcode 0x0401 failed: -22 [ 517.332216][T15531] Bluetooth: hci3: Opcode 0x0401 failed: -22 [ 517.389856][T15531] Bluetooth: hci3: Opcode 0x0401 failed: -22 [ 517.390798][T15531] Bluetooth: hci3: Opcode 0x0401 failed: -22 [ 517.391668][T15531] Bluetooth: hci3: Opcode 0x0401 failed: -22 [ 517.392372][T15531] Bluetooth: hci3: Opcode 0x0401 failed: -22 [ 517.393082][T15531] Bluetooth: hci3: Opcode 0x0401 failed: -22 [ 517.393851][T15531] Bluetooth: hci3: Opcode 0x0401 failed: -22 [ 517.422805][T15531] Bluetooth: hci3: Opcode 0x0401 failed: -22 [ 517.424808][T15531] Bluetooth: hci3: Opcode 0x0401 failed: -22 [ 517.426716][T15531] Bluetooth: hci3: Opcode 0x0401 failed: -22 [ 517.435783][T15531] Bluetooth: hci3: Opcode 0x0401 failed: -22 [ 517.442250][T15531] Bluetooth: hci3: Opcode 0x0401 failed: -22 [ 517.446325][T15531] Bluetooth: hci3: Opcode 0x0401 failed: -22 [ 517.455978][T15531] Bluetooth: hci3: Opcode 0x0401 failed: -22 [ 517.463009][T15531] Bluetooth: hci3: Opcode 0x0401 failed: -22 [ 517.463810][T15531] Bluetooth: hci3: Opcode 0x0401 failed: -22 [ 517.464473][T15531] Bluetooth: hci3: Opcode 0x0401 failed: -22 [ 517.466521][T15531] Bluetooth: hci3: Opcode 0x0401 failed: -22 [ 517.469769][T15531] Bluetooth: hci3: Opcode 0x0401 failed: -22 [ 517.474102][T15531] Bluetooth: hci3: Opcode 0x0401 failed: -22 [ 517.477008][T15531] Bluetooth: hci3: Opcode 0x0401 failed: -22 [ 517.485034][T15531] Bluetooth: hci3: Opcode 0x0401 failed: -22 [ 517.485736][T15531] Bluetooth: hci3: Opcode 0x0401 failed: -22 [ 517.491321][T15531] Bluetooth: hci3: Opcode 0x0401 failed: -22 [ 517.496563][T15531] Bluetooth: hci3: Opcode 0x0401 failed: -22 [ 517.498405][T15531] Bluetooth: hci3: Opcode 0x0401 failed: -22 [ 517.502820][T15531] Bluetooth: hci3: Opcode 0x0401 failed: -22 [ 517.506751][T15531] Bluetooth: hci3: Opcode 0x0401 failed: -22 [ 517.516456][T15531] Bluetooth: hci3: Opcode 0x0401 failed: -22 [ 517.517728][T15531] Bluetooth: hci3: Opcode 0x0401 failed: -22 [ 517.524477][T15531] Bluetooth: hci3: Opcode 0x0401 failed: -22 [ 517.525277][T15531] Bluetooth: hci3: Opcode 0x0401 failed: -22 [ 517.536966][T15531] Bluetooth: hci3: Opcode 0x0401 failed: -22 [ 517.537794][T15531] Bluetooth: hci3: Opcode 0x0401 failed: -22 [ 517.538509][T15531] Bluetooth: hci3: Opcode 0x0401 failed: -22 [ 517.553255][T15531] Bluetooth: hci3: Opcode 0x0401 failed: -22 [ 517.564028][T15531] Bluetooth: hci3: Opcode 0x0401 failed: -22 [ 517.574107][T15531] Bluetooth: hci3: Opcode 0x0401 failed: -22 [ 517.582787][T15531] Bluetooth: hci3: Opcode 0x0401 failed: -22 [ 517.590314][T15531] Bluetooth: hci3: Opcode 0x0401 failed: -22 [ 517.591107][T15531] Bluetooth: hci3: Opcode 0x0401 failed: -22 [ 517.595435][T15531] Bluetooth: hci3: Opcode 0x0401 failed: -22 [ 517.596141][T15531] Bluetooth: hci3: Opcode 0x0401 failed: -22 [ 517.597572][T15531] Bluetooth: hci3: Opcode 0x0401 failed: -22 [ 517.604951][T15531] Bluetooth: hci3: Opcode 0x0401 failed: -22 [ 517.743830][T15540] FAULT_INJECTION: forcing a failure. [ 517.743830][T15540] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 517.743865][T15540] CPU: 0 UID: 0 PID: 15540 Comm: syz.1.2621 Not tainted syzkaller #0 PREEMPT(full) [ 517.743886][T15540] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 517.743897][T15540] Call Trace: [ 517.743905][T15540] [ 517.743913][T15540] dump_stack_lvl+0xe8/0x150 [ 517.743946][T15540] should_fail_ex+0x410/0x560 [ 517.743972][T15540] prepare_alloc_pages+0x223/0x600 [ 517.743999][T15540] __alloc_frozen_pages_noprof+0x185/0x5a0 [ 517.744023][T15540] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 517.744043][T15540] ? __alloc_frozen_pages_noprof+0x29e/0x5a0 [ 517.744066][T15540] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 517.744090][T15540] ? __pfx_policy_nodemask+0x10/0x10 [ 517.744117][T15540] __alloc_pages_noprof+0x10/0x100 [ 517.744137][T15540] alloc_pages_bulk_noprof+0x5fa/0x7c0 [ 517.744165][T15540] ? alloc_pages_noprof+0x140/0x2b0 [ 517.744192][T15540] __kasan_populate_vmalloc+0xb7/0x1c0 [ 517.744217][T15540] alloc_vmap_area+0xd1a/0x1420 [ 517.744257][T15540] ? __pfx_alloc_vmap_area+0x10/0x10 [ 517.744279][T15540] ? __kmalloc_cache_node_noprof+0x3d1/0x620 [ 517.744299][T15540] ? __kmalloc_cache_node_noprof+0x1f7/0x620 [ 517.744318][T15540] ? __get_vm_area_node+0x155/0x2f0 [ 517.744347][T15540] __get_vm_area_node+0x200/0x2f0 [ 517.744379][T15540] __vmalloc_node_range_noprof+0x343/0x1540 [ 517.744405][T15540] ? bpf_prog_alloc_no_stats+0x47/0x560 [ 517.744428][T15540] ? __lock_acquire+0x747/0x2de0 [ 517.744471][T15540] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 517.744496][T15540] ? lock_acquire+0x115/0x350 [ 517.744524][T15540] ? bpf_prog_alloc_no_stats+0x47/0x560 [ 517.744543][T15540] __vmalloc_noprof+0xd2/0x120 [ 517.744569][T15540] ? bpf_prog_alloc_no_stats+0x47/0x560 [ 517.744593][T15540] bpf_prog_alloc_no_stats+0x47/0x560 [ 517.744612][T15540] ? bpf_prog_alloc+0x2a/0x1a0 [ 517.744642][T15540] bpf_prog_alloc+0x3c/0x1a0 [ 517.744665][T15540] __get_filter+0xf2/0x420 [ 517.744689][T15540] sk_attach_filter+0x24/0x140 [ 517.744709][T15540] sk_setsockopt+0x2635/0x2f10 [ 517.744738][T15540] ? __pfx_sk_setsockopt+0x10/0x10 [ 517.744760][T15540] ? __lock_acquire+0x747/0x2de0 [ 517.744779][T15540] ? __pfx_aa_unix_opt_perm+0x10/0x10 [ 517.744823][T15540] ? lock_acquire+0x115/0x350 [ 517.744845][T15540] unix_setsockopt+0x15f/0x340 [ 517.744874][T15540] ? __pfx_unix_setsockopt+0x10/0x10 [ 517.744903][T15540] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 517.744925][T15540] ? __pfx_unix_setsockopt+0x10/0x10 [ 517.744952][T15540] do_sock_setsockopt+0x17c/0x1b0 [ 517.744980][T15540] __x64_sys_setsockopt+0x13d/0x1b0 [ 517.745007][T15540] do_syscall_64+0x166/0x520 [ 517.745029][T15540] ? trace_irq_disable+0x3b/0x140 [ 517.745047][T15540] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 517.745065][T15540] ? clear_bhb_loop+0x70/0xc0 [ 517.745088][T15540] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 517.745106][T15540] RIP: 0033:0x7f6f6959e159 [ 517.745124][T15540] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 517.745139][T15540] RSP: 002b:00007f6f6a421028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 517.745159][T15540] RAX: ffffffffffffffda RBX: 00007f6f69825fa0 RCX: 00007f6f6959e159 [ 517.745172][T15540] RDX: 000000000000001a RSI: 0000000000000001 RDI: 0000000000000004 [ 517.745184][T15540] RBP: 00007f6f6a421090 R08: 0000000000000010 R09: 0000000000000000 [ 517.745195][T15540] R10: 00002000000001c0 R11: 0000000000000246 R12: 0000000000000001 [ 517.745207][T15540] R13: 00007f6f69826038 R14: 00007f6f69825fa0 R15: 00007ffdfcee2688 [ 517.745237][T15540] [ 517.745427][T15540] syz.1.2621: vmalloc error: size 4096, align 0x1, vm_struct allocation failed, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 517.745524][T15540] CPU: 0 UID: 0 PID: 15540 Comm: syz.1.2621 Not tainted syzkaller #0 PREEMPT(full) [ 517.745544][T15540] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 517.745555][T15540] Call Trace: [ 517.745563][T15540] [ 517.745570][T15540] dump_stack_lvl+0xe8/0x150 [ 517.745597][T15540] warn_alloc+0x24d/0x270 [ 517.745616][T15540] ? lockdep_hardirqs_on+0x7b/0x110 [ 517.745739][T15540] ? __pfx_warn_alloc+0x10/0x10 [ 517.745759][T15540] ? kfree+0x1c5/0x650 [ 517.745791][T15540] ? __get_vm_area_node+0x219/0x2f0 [ 517.745823][T15540] __vmalloc_node_range_noprof+0x36b/0x1540 [ 517.745853][T15540] ? __lock_acquire+0x747/0x2de0 [ 517.745896][T15540] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 517.745921][T15540] ? lock_acquire+0x115/0x350 [ 517.745949][T15540] ? bpf_prog_alloc_no_stats+0x47/0x560 [ 517.745969][T15540] __vmalloc_noprof+0xd2/0x120 [ 517.745996][T15540] ? bpf_prog_alloc_no_stats+0x47/0x560 [ 517.746019][T15540] bpf_prog_alloc_no_stats+0x47/0x560 [ 517.746038][T15540] ? bpf_prog_alloc+0x2a/0x1a0 [ 517.746061][T15540] bpf_prog_alloc+0x3c/0x1a0 [ 517.746097][T15540] __get_filter+0xf2/0x420 [ 517.746122][T15540] sk_attach_filter+0x24/0x140 [ 517.746142][T15540] sk_setsockopt+0x2635/0x2f10 [ 517.746169][T15540] ? __pfx_sk_setsockopt+0x10/0x10 [ 517.746192][T15540] ? __lock_acquire+0x747/0x2de0 [ 517.746209][T15540] ? __pfx_aa_unix_opt_perm+0x10/0x10 [ 517.746253][T15540] ? lock_acquire+0x115/0x350 [ 517.746277][T15540] unix_setsockopt+0x15f/0x340 [ 517.746306][T15540] ? __pfx_unix_setsockopt+0x10/0x10 [ 517.746337][T15540] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 517.746359][T15540] ? __pfx_unix_setsockopt+0x10/0x10 [ 517.746386][T15540] do_sock_setsockopt+0x17c/0x1b0 [ 517.746414][T15540] __x64_sys_setsockopt+0x13d/0x1b0 [ 517.746442][T15540] do_syscall_64+0x166/0x520 [ 517.746463][T15540] ? trace_irq_disable+0x3b/0x140 [ 517.746481][T15540] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 517.746500][T15540] ? clear_bhb_loop+0x70/0xc0 [ 517.746523][T15540] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 517.746541][T15540] RIP: 0033:0x7f6f6959e159 [ 517.746557][T15540] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 517.746573][T15540] RSP: 002b:00007f6f6a421028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 517.746593][T15540] RAX: ffffffffffffffda RBX: 00007f6f69825fa0 RCX: 00007f6f6959e159 [ 517.746608][T15540] RDX: 000000000000001a RSI: 0000000000000001 RDI: 0000000000000004 [ 517.746619][T15540] RBP: 00007f6f6a421090 R08: 0000000000000010 R09: 0000000000000000 [ 517.746632][T15540] R10: 00002000000001c0 R11: 0000000000000246 R12: 0000000000000001 [ 517.746652][T15540] R13: 00007f6f69826038 R14: 00007f6f69825fa0 R15: 00007ffdfcee2688 [ 517.746685][T15540] [ 517.746706][T15540] Mem-Info: [ 517.746717][T15540] active_anon:5876 inactive_anon:0 isolated_anon:0 [ 517.746717][T15540] active_file:0 inactive_file:43767 isolated_file:0 [ 517.746717][T15540] unevictable:0 dirty:86 writeback:0 [ 517.746717][T15540] slab_reclaimable:11816 slab_unreclaimable:114321 [ 517.746717][T15540] mapped:30889 shmem:522 pagetables:1308 [ 517.746717][T15540] sec_pagetables:0 bounce:0 [ 517.746717][T15540] kernel_misc_reclaimable:0 [ 517.746717][T15540] free:1265569 free_pcp:11461 free_cma:0 [ 517.746766][T15540] Node 0 active_anon:23504kB inactive_anon:0kB active_file:0kB inactive_file:174868kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:123556kB dirty:344kB writeback:0kB shmem:2088kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:13760kB pagetables:5092kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 517.746819][T15540] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:140kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 517.746870][T15540] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 517.746924][T15540] lowmem_reserve[]: 0 2487 2487 2487 2487 [ 517.746961][T15540] Node 0 DMA32 free:1111556kB boost:0kB min:34140kB low:42672kB high:51204kB reserved_highatomic:0kB free_highatomic:0kB active_anon:23504kB inactive_anon:0kB active_file:0kB inactive_file:174868kB unevictable:0kB writepending:244kB zspages:0kB present:3129332kB managed:2546940kB mlocked:0kB bounce:0kB free_pcp:38792kB local_pcp:17780kB free_cma:0kB [ 517.747017][T15540] lowmem_reserve[]: 0 0 0 0 0 [ 517.747049][T15540] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:0kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 517.747154][T15540] lowmem_reserve[]: 0 0 0 0 0 [ 517.747193][T15540] Node 1 Normal free:3935360kB boost:0kB min:55760kB low:69700kB high:83640kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:7052kB local_pcp:7052kB free_cma:0kB [ 517.747247][T15540] lowmem_reserve[]: 0 0 0 0 0 [ 517.747282][T15540] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 517.747412][T15540] Node 0 DMA32: 817*4kB (UM) 675*8kB (UME) 209*16kB (UM) 1623*32kB (UM) 839*64kB (UM) 284*128kB (UME) 76*256kB (UME) 4*512kB (M) 2*1024kB (M) 6*2048kB (UM) 225*4096kB (UM) = 1111436kB [ 517.747553][T15540] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 517.747653][T15540] Node 1 Normal: 2*4kB (UM) 1*8kB (M) 1*16kB (M) 1*32kB (M) 1*64kB (M) 2*128kB (UM) 3*256kB (UM) 2*512kB (M) 1*1024kB (M) 0*2048kB 960*4096kB (UM) = 3935360kB [ 517.747788][T15540] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 517.747804][T15540] Node 0 hugepages_total=6 hugepages_free=0 hugepages_surp=4 hugepages_size=2048kB [ 517.747828][T15540] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 517.760127][T15531] Bluetooth: hci3: Opcode 0x0401 failed: -22 [ 517.767211][T15531] Bluetooth: hci3: Opcode 0x0401 failed: -22 [ 517.780876][T15531] Bluetooth: hci3: Opcode 0x0401 failed: -22 [ 517.791907][T15531] Bluetooth: hci3: Opcode 0x0401 failed: -22 [ 517.808551][T15531] Bluetooth: hci3: Opcode 0x0401 failed: -22 [ 517.814919][T15531] Bluetooth: hci3: Opcode 0x0401 failed: -22 [ 517.821821][T15531] Bluetooth: hci3: Opcode 0x0401 failed: -22 [ 517.822576][T15531] Bluetooth: hci3: Opcode 0x0401 failed: -22 [ 517.882688][T15540] Node 1 hugepages_total=2 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 517.882713][T15540] 44285 total pagecache pages [ 517.882732][T15540] 0 pages in swap cache [ 517.882740][T15540] Free swap = 124996kB [ 517.882747][T15540] Total swap = 124996kB [ 517.882755][T15540] 2097051 pages RAM [ 517.882762][T15540] 0 pages HighMem/MovableOnly [ 517.882769][T15540] 428700 pages reserved [ 517.882776][T15540] 0 pages cma reserved [ 520.302850][ T30] audit: type=1804 audit(1789986249.572:19): pid=15566 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.2626" name="/newroot/549/cgroup.controllers" dev="tmpfs" ino=2844 res=1 errno=0 [ 520.302951][ T30] audit: type=1800 audit(1789986249.572:20): pid=15566 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2626" name="cgroup.controllers" dev="tmpfs" ino=2844 res=0 errno=0 [ 520.625919][T15578] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2629'. [ 520.689005][T15577] xt_cgroup: invalid path, errno=-2 [ 521.471029][T15589] tipc: Resetting bearer [ 521.475590][T15592] FAULT_INJECTION: forcing a failure. [ 521.475590][T15592] name failslab, interval 1, probability 0, space 0, times 0 [ 521.475654][T15592] CPU: 1 UID: 0 PID: 15592 Comm: syz.1.2633 Not tainted syzkaller #0 PREEMPT(full) [ 521.475678][T15592] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 521.475691][T15592] Call Trace: [ 521.475699][T15592] [ 521.475709][T15592] dump_stack_lvl+0xe8/0x150 [ 521.475743][T15592] should_fail_ex+0x410/0x560 [ 521.475771][T15592] should_failslab+0xa8/0x100 [ 521.475798][T15592] __kmalloc_cache_noprof+0xa3/0x600 [ 521.475817][T15592] ? bpf_prog_alloc_no_stats+0xd8/0x560 [ 521.475836][T15592] ? bpf_prog_alloc_no_stats+0xd8/0x560 [ 521.475866][T15592] bpf_prog_alloc_no_stats+0xd8/0x560 [ 521.475887][T15592] ? bpf_prog_alloc+0x2a/0x1a0 [ 521.475911][T15592] bpf_prog_alloc+0x3c/0x1a0 [ 521.475936][T15592] __get_filter+0xf2/0x420 [ 521.475963][T15592] sk_attach_filter+0x24/0x140 [ 521.475986][T15592] sk_setsockopt+0x2635/0x2f10 [ 521.476016][T15592] ? __pfx_sk_setsockopt+0x10/0x10 [ 521.476039][T15592] ? __lock_acquire+0x747/0x2de0 [ 521.476060][T15592] ? __pfx_aa_unix_opt_perm+0x10/0x10 [ 521.476107][T15592] ? lock_acquire+0x115/0x350 [ 521.476131][T15592] unix_setsockopt+0x15f/0x340 [ 521.476163][T15592] ? __pfx_unix_setsockopt+0x10/0x10 [ 521.476193][T15592] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 521.476218][T15592] ? __pfx_unix_setsockopt+0x10/0x10 [ 521.476246][T15592] do_sock_setsockopt+0x17c/0x1b0 [ 521.476275][T15592] __x64_sys_setsockopt+0x13d/0x1b0 [ 521.476316][T15592] do_syscall_64+0x166/0x520 [ 521.476339][T15592] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 521.476359][T15592] ? clear_bhb_loop+0x70/0xc0 [ 521.476384][T15592] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 521.476403][T15592] RIP: 0033:0x7f6f6959e159 [ 521.476423][T15592] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 521.476438][T15592] RSP: 002b:00007f6f6a421028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 521.476459][T15592] RAX: ffffffffffffffda RBX: 00007f6f69825fa0 RCX: 00007f6f6959e159 [ 521.476473][T15592] RDX: 000000000000001a RSI: 0000000000000001 RDI: 0000000000000004 [ 521.476485][T15592] RBP: 00007f6f6a421090 R08: 0000000000000010 R09: 0000000000000000 [ 521.476497][T15592] R10: 00002000000001c0 R11: 0000000000000246 R12: 0000000000000001 [ 521.476510][T15592] R13: 00007f6f69826038 R14: 00007f6f69825fa0 R15: 00007ffdfcee2688 [ 521.476542][T15592] [ 522.220221][T11746] net_ratelimit: 56 callbacks suppressed [ 522.220248][T11746] bond1: (slave dummy0): failed to get link speed/duplex [ 522.220287][T11746] bond3: (slave ip6gretap0): failed to get link speed/duplex [ 522.288734][T15594] netlink: 1004 bytes leftover after parsing attributes in process `syz.4.2634'. [ 522.328977][ T201] bond3: (slave ip6gretap0): failed to get link speed/duplex [ 522.329027][ T201] bond1: (slave dummy0): failed to get link speed/duplex [ 522.439151][T11746] bond1: (slave dummy0): failed to get link speed/duplex [ 522.439251][T11746] bond3: (slave ip6gretap0): failed to get link speed/duplex [ 522.549070][ T201] bond3: (slave ip6gretap0): failed to get link speed/duplex [ 522.549197][ T201] bond1: (slave dummy0): failed to get link speed/duplex [ 522.659800][ T13] bond1: (slave dummy0): failed to get link speed/duplex [ 522.659888][ T13] bond3: (slave ip6gretap0): failed to get link speed/duplex [ 523.023315][T15610] netlink: 'syz.2.2638': attribute type 10 has an invalid length. [ 523.316068][T15616] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2636'. [ 523.663411][T15610] team0: Port device dummy0 added [ 524.796491][T15639] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 524.966137][T15648] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2648'. [ 525.771635][T15659] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2650'. [ 527.320897][ T59] net_ratelimit: 65 callbacks suppressed [ 527.320947][ T59] bond1: (slave dummy0): failed to get link speed/duplex [ 527.321045][ T59] bond3: (slave ip6gretap0): failed to get link speed/duplex [ 527.430463][ T59] bond3: (slave ip6gretap0): failed to get link speed/duplex [ 527.430590][ T59] bond1: (slave dummy0): failed to get link speed/duplex [ 527.543590][ T59] bond1: (slave dummy0): failed to get link speed/duplex [ 527.543706][ T59] bond3: (slave ip6gretap0): failed to get link speed/duplex [ 527.651952][T11746] bond3: (slave ip6gretap0): failed to get link speed/duplex [ 527.652078][T11746] bond1: (slave dummy0): failed to get link speed/duplex [ 527.763955][T11746] bond3: (slave ip6gretap0): failed to get link speed/duplex [ 527.785974][ T201] bond1: (slave dummy0): failed to get link speed/duplex [ 528.229476][T15682] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2655'. [ 528.400661][T15685] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2655'. [ 528.849117][T15690] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2657'. [ 528.851389][T15690] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2657'. [ 529.752543][T15701] netlink: 'syz.3.2661': attribute type 1 has an invalid length. [ 530.093600][T15706] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2661'. [ 530.192529][T15701] bond6: entered promiscuous mode [ 530.206840][T15701] 8021q: adding VLAN 0 to HW filter on device bond6 [ 530.400906][T15706] 8021q: adding VLAN 0 to HW filter on device bond6 [ 530.401950][T15706] bond6: (slave wireguard0): The slave device specified does not support setting the MAC address [ 530.401974][T15706] bond6: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 530.482142][T15706] bond6: (slave wireguard0): making interface the new active one [ 530.482169][T15706] wireguard0: entered promiscuous mode [ 530.517955][T15706] bond6: (slave wireguard0): Enslaving as an active interface with an up link [ 530.540850][T15713] netlink: 324 bytes leftover after parsing attributes in process `syz.0.2663'. [ 530.688206][T15714] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2662'. [ 531.204300][T15721] 8021q: adding VLAN 0 to HW filter on device bond0 [ 531.301038][T15692] xt_policy: output policy not valid in PREROUTING and INPUT [ 531.315822][T15721] bond0 (unregistering): Released all slaves [ 532.263072][T15738] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2670'. [ 532.263916][T15738] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2670'. [ 532.331929][T11746] net_ratelimit: 54 callbacks suppressed [ 532.331953][T11746] bond3: (slave ip6gretap0): failed to get link speed/duplex [ 532.331999][T11746] bond1: (slave dummy0): failed to get link speed/duplex [ 532.441811][ T13] bond1: (slave dummy0): failed to get link speed/duplex [ 532.441855][ T13] bond3: (slave ip6gretap0): failed to get link speed/duplex [ 532.536340][T15729] xt_policy: output policy not valid in PREROUTING and INPUT [ 532.553236][T11746] bond3: (slave ip6gretap0): failed to get link speed/duplex [ 532.553290][T11746] bond1: (slave dummy0): failed to get link speed/duplex [ 532.660026][ T201] bond1: (slave dummy0): failed to get link speed/duplex [ 532.660068][ T201] bond3: (slave ip6gretap0): failed to get link speed/duplex [ 532.810436][ T13] bond3: (slave ip6gretap0): failed to get link speed/duplex [ 532.810540][ T13] bond1: (slave dummy0): failed to get link speed/duplex [ 534.293954][T15776] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2679'. [ 534.331734][T15771] team0: Port device team_slave_0 removed [ 534.381952][T15771] team0: Port device team_slave_1 removed [ 534.383171][T15771] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 534.418518][T15784] netlink: 'syz.2.2681': attribute type 4 has an invalid length. [ 534.418581][T15784] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2681'. [ 534.437829][T15771] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 535.096879][T15793] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2682'. [ 535.125485][T15793] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2682'. [ 536.493387][T15822] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2692'. [ 536.548953][T15822] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2692'. [ 537.255126][T15831] bond0 (unregistering): Released all slaves [ 537.315937][T15841] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2695'. [ 537.433125][T15839] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2697'. [ 537.442498][T15839] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2697'. [ 537.488646][T15834] netlink: 'syz.3.2694': attribute type 39 has an invalid length. [ 537.490789][T11746] net_ratelimit: 60 callbacks suppressed [ 537.490815][T11746] bond1: (slave dummy0): failed to get link speed/duplex [ 537.673983][ T13] bond3: (slave ip6gretap0): failed to get link speed/duplex [ 537.674037][ T13] bond1: (slave dummy0): failed to get link speed/duplex [ 537.767345][T15843] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.2694'. [ 537.790396][T11738] bond1: (slave dummy0): failed to get link speed/duplex [ 537.790444][T11738] bond3: (slave ip6gretap0): failed to get link speed/duplex [ 537.906001][ T61] bond3: (slave ip6gretap0): failed to get link speed/duplex [ 537.906047][ T61] bond1: (slave dummy0): failed to get link speed/duplex [ 538.009799][T15840] wg2 speed is unknown, defaulting to 1000 [ 538.439108][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 538.439801][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 538.440342][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 540.666308][T15890] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2710'. [ 541.017251][T15890] bond7: entered promiscuous mode [ 541.021100][T15890] 8021q: adding VLAN 0 to HW filter on device bond7 [ 541.263426][T15897] 8021q: adding VLAN 0 to HW filter on device bond7 [ 541.266148][T15897] bond7: (slave sit1): The slave device specified does not support setting the MAC address [ 541.297365][T15897] bond7: (slave sit1): Error -95 calling set_mac_address [ 541.366695][T15902] netlink: 'syz.2.2712': attribute type 11 has an invalid length. [ 541.641951][T15912] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2714'. [ 541.827026][T15919] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2715'. [ 542.577662][T15936] netlink: 'syz.2.2720': attribute type 8 has an invalid length. [ 542.598279][T15932] veth7: entered allmulticast mode [ 542.635295][ T61] net_ratelimit: 46 callbacks suppressed [ 542.635318][ T61] bond1: (slave dummy0): failed to get link speed/duplex [ 542.635354][ T61] bond3: (slave ip6gretap0): failed to get link speed/duplex [ 542.745549][T11746] bond3: (slave ip6gretap0): failed to get link speed/duplex [ 542.745597][T11746] bond1: (slave dummy0): failed to get link speed/duplex [ 542.872842][T11746] bond1: (slave dummy0): failed to get link speed/duplex [ 542.872945][T11746] bond3: (slave ip6gretap0): failed to get link speed/duplex [ 542.979447][ T13] bond3: (slave ip6gretap0): failed to get link speed/duplex [ 542.979550][ T13] bond1: (slave dummy0): failed to get link speed/duplex [ 543.092951][ T61] bond1: (slave dummy0): failed to get link speed/duplex [ 543.093049][ T61] bond3: (slave ip6gretap0): failed to get link speed/duplex [ 543.663334][T15948] bridge0: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 543.865876][T15948] netlink: 'syz.4.2722': attribute type 70 has an invalid length. [ 544.726630][T15965] bridge8: entered allmulticast mode [ 544.915758][T15971] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2727'. [ 545.153006][T15985] netlink: 'syz.1.2732': attribute type 1 has an invalid length. [ 545.224750][T15981] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2731'. [ 545.256263][T15976] netlink: 'syz.4.2729': attribute type 6 has an invalid length. [ 546.023907][T15997] netlink: 'syz.0.2733': attribute type 2 has an invalid length. [ 546.053440][T15997] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2733'. [ 546.225280][T16007] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2734'. [ 546.225811][T16007] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2734'. [ 546.226655][T16007] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2734'. [ 546.258507][T16007] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2734'. [ 546.259419][T16007] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2734'. [ 546.260208][T16007] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2734'. [ 546.260900][T16007] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2734'. [ 547.657512][T16029] netlink: 'syz.0.2740': attribute type 3 has an invalid length. [ 547.713527][ T61] net_ratelimit: 68 callbacks suppressed [ 547.713575][ T61] bond1: (slave dummy0): failed to get link speed/duplex [ 547.726465][ T61] bond3: (slave ip6gretap0): failed to get link speed/duplex [ 547.822315][ T201] bond1: (slave dummy0): failed to get link speed/duplex [ 547.838434][ T201] bond3: (slave ip6gretap0): failed to get link speed/duplex [ 547.929009][T11738] bond1: (slave dummy0): failed to get link speed/duplex [ 547.938966][T11746] bond3: (slave ip6gretap0): failed to get link speed/duplex [ 548.045577][T11746] bond1: (slave dummy0): failed to get link speed/duplex [ 548.052676][T11738] bond3: (slave ip6gretap0): failed to get link speed/duplex [ 548.157707][ T13] bond1: (slave dummy0): failed to get link speed/duplex [ 548.160851][ T13] bond3: (slave ip6gretap0): failed to get link speed/duplex [ 548.574938][T16047] xt_l2tp: missing protocol rule (udp|l2tpip) [ 548.666508][T16042] vlan4: entered promiscuous mode [ 550.405098][T16060] team0 (unregistering): Port device team_slave_0 removed [ 550.487450][T16060] team0 (unregistering): Port device team_slave_1 removed [ 550.647486][T16060] team0 (unregistering): Port device dummy0 removed [ 552.805860][ T13] net_ratelimit: 38 callbacks suppressed [ 552.805911][ T13] bond1: (slave dummy0): failed to get link speed/duplex [ 552.805985][ T13] bond3: (slave ip6gretap0): failed to get link speed/duplex [ 552.919131][ T13] bond3: (slave ip6gretap0): failed to get link speed/duplex [ 552.919178][ T13] bond1: (slave dummy0): failed to get link speed/duplex [ 553.036016][ T50] bond1: (slave dummy0): failed to get link speed/duplex [ 553.036108][ T50] bond3: (slave ip6gretap0): failed to get link speed/duplex [ 553.142274][ T1276] bond3: (slave ip6gretap0): failed to get link speed/duplex [ 553.142319][ T1276] bond1: (slave dummy0): failed to get link speed/duplex [ 553.233638][T16121] netlink: 'syz.0.2761': attribute type 4 has an invalid length. [ 553.252002][ T13] bond1: (slave dummy0): failed to get link speed/duplex [ 553.252047][ T13] bond3: (slave ip6gretap0): failed to get link speed/duplex [ 553.617713][T16129] __nla_validate_parse: 62 callbacks suppressed [ 553.617754][T16129] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2762'. [ 554.128178][T16134] macsec1: entered promiscuous mode [ 555.169665][T16158] netlink: 'syz.0.2769': attribute type 10 has an invalid length. [ 555.169705][T16158] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2769'. [ 555.421664][T16161] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2769'. [ 555.421723][T16161] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2769'. [ 555.573811][T16167] netlink: 'syz.2.2770': attribute type 3 has an invalid length. [ 555.574332][T16167] netlink: 'syz.2.2770': attribute type 3 has an invalid length. [ 555.574688][T16167] netlink: 'syz.2.2770': attribute type 3 has an invalid length. [ 555.575265][T16167] netlink: 'syz.2.2770': attribute type 3 has an invalid length. [ 555.591618][T16166] ieee802154 phy0 wpan0: encryption failed: -126 [ 555.641506][T16167] netlink: 'syz.2.2770': attribute type 3 has an invalid length. [ 555.641931][T16167] netlink: 'syz.2.2770': attribute type 3 has an invalid length. [ 555.642293][T16167] netlink: 'syz.2.2770': attribute type 3 has an invalid length. [ 555.642787][T16167] netlink: 'syz.2.2770': attribute type 3 has an invalid length. [ 556.155331][ T5283] veth0_macvtap: left promiscuous mode [ 556.817885][T16150] xt_policy: output policy not valid in PREROUTING and INPUT [ 556.938278][T16199] ksmbd: Unknown IPC event: 1, ignore. [ 556.938775][T16199] ksmbd: Unknown IPC event: 1, ignore. [ 556.943706][T16199] ksmbd: Unknown IPC event: 1, ignore. [ 556.944593][T16199] ksmbd: Unknown IPC event: 1, ignore. [ 556.945019][T16199] ksmbd: Unknown IPC event: 1, ignore. [ 556.945440][T16199] ksmbd: Unknown IPC event: 1, ignore. [ 556.945753][T16199] ksmbd: Unknown IPC event: 1, ignore. [ 556.946173][T16199] ksmbd: Unknown IPC event: 1, ignore. [ 556.946607][T16199] ksmbd: Unknown IPC event: 1, ignore. [ 556.947025][T16199] ksmbd: Unknown IPC event: 1, ignore. [ 556.947444][T16199] ksmbd: Unknown IPC event: 1, ignore. [ 556.947873][T16199] ksmbd: Unknown IPC event: 1, ignore. [ 556.948300][T16199] ksmbd: Unknown IPC event: 1, ignore. [ 556.979825][T16199] ksmbd: Unknown IPC event: 1, ignore. [ 556.980320][T16199] ksmbd: Unknown IPC event: 1, ignore. [ 556.980754][T16199] ksmbd: Unknown IPC event: 1, ignore. [ 556.981174][T16199] ksmbd: Unknown IPC event: 1, ignore. [ 556.982823][T16199] ksmbd: Unknown IPC event: 1, ignore. [ 556.983259][T16199] ksmbd: Unknown IPC event: 1, ignore. [ 556.983864][T16199] ksmbd: Unknown IPC event: 1, ignore. [ 556.984298][T16199] ksmbd: Unknown IPC event: 1, ignore. [ 556.984738][T16199] ksmbd: Unknown IPC event: 1, ignore. [ 557.260645][T16199] ksmbd: Unknown IPC event: 1, ignore. [ 557.435910][T16207] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 557.458906][T16207] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 557.462625][T16207] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 557.466083][T16207] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 557.507726][T16207] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 557.769471][ T5624] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 557.775824][ T5624] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 557.788292][ T5624] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 557.848325][T11746] net_ratelimit: 65 callbacks suppressed [ 557.848352][T11746] bond3: (slave ip6gretap0): failed to get link speed/duplex [ 557.848392][T11746] bond1: (slave dummy0): failed to get link speed/duplex [ 557.870509][ T5624] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 557.872575][ T5624] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 558.124489][T16220] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2777'. [ 558.289996][T11738] bond1: (slave dummy0): failed to get link speed/duplex [ 558.290099][T11738] bond3: (slave ip6gretap0): failed to get link speed/duplex [ 558.616119][ T50] bond1: (slave dummy0): failed to get link speed/duplex [ 558.616243][ T50] bond3: (slave ip6gretap0): failed to get link speed/duplex [ 558.778875][ T59] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 49581 - 0 [ 558.860607][T16229] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2780'. [ 558.863714][T11738] bond3: (slave ip6gretap0): failed to get link speed/duplex [ 558.864254][T11738] bond1: (slave dummy0): failed to get link speed/duplex [ 558.954683][T16224] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2780'. [ 558.969227][ T50] bond1: (slave dummy0): failed to get link speed/duplex [ 558.969271][ T50] bond3: (slave ip6gretap0): failed to get link speed/duplex [ 559.112035][T16233] Unsupported ieee802154 address type: 0 [ 559.116504][T16233] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2783'. [ 559.137680][ T59] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 49581 - 0 [ 559.367483][T16240] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2783'. [ 559.875263][ T59] team0: Port device netdevsim1 removed [ 559.959349][T16207] Bluetooth: hci5: command tx timeout [ 559.976823][ T59] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 49581 - 0 [ 560.043011][ T30] audit: type=1800 audit(1789986289.322:21): pid=16256 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2788" name=CB dev="tmpfs" ino=3000 res=0 errno=0 [ 560.355619][ T59] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 49581 - 0 [ 560.878907][T11746] IPVS: starting estimator thread 0... [ 560.969578][T16279] IPVS: using max 29 ests per chain, 69600 per kthread [ 561.067001][T16204] wg2 speed is unknown, defaulting to 1000 [ 562.039358][T16207] Bluetooth: hci5: command tx timeout [ 562.434356][T16288] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR [ 562.441990][T16285] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR [ 562.722129][T16307] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2799'. [ 562.926836][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 564.008576][ T59] batman_adv: batadv0: Removing interface: ip6gretap1 [ 564.118950][T16207] Bluetooth: hci5: command tx timeout [ 564.397635][ T59] bond9 (unregistering): (slave gretap1): Releasing active interface [ 564.653470][ T59] bond3 (unregistering): (slave bridge1): Releasing backup interface [ 564.808139][ T59] bond10 (unregistering): (slave bridge7): Releasing backup interface [ 564.873923][ T59] bond1 (unregistering): Released all slaves [ 564.945114][ T59] bond2 (unregistering): Released all slaves [ 564.991886][ T59] bond3 (unregistering): Released all slaves [ 565.028617][ T59] bond4 (unregistering): Released all slaves [ 565.079500][ T59] bond5 (unregistering): Released all slaves [ 565.124043][ T59] bond0 (unregistering): Released all slaves [ 565.175358][ T59] bond6 (unregistering): (slave veth3): Releasing active interface [ 565.175452][ T59] batadv1: entered promiscuous mode [ 565.205569][ T59] bond6 (unregistering): (slave batadv1): Releasing active interface [ 565.205600][ T59] batadv1: left promiscuous mode [ 565.207732][ T59] bond6 (unregistering): Released all slaves [ 565.263536][ T59] bond7 (unregistering): Released all slaves [ 565.307080][ T59] bond8 (unregistering): (slave veth0_to_bond): Releasing active interface [ 565.333305][ T59] bond8 (unregistering): Released all slaves [ 565.354597][ T59] bond9 (unregistering): Released all slaves [ 565.384645][ T59] bond10 (unregistering): Released all slaves [ 565.399399][ C1] net_ratelimit: 21 callbacks suppressed [ 565.399436][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 565.399814][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 565.400154][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 565.428193][ T59] bond11 (unregistering): Released all slaves [ 565.529031][ T1276] bond1: (slave dummy0): failed to get link speed/duplex [ 565.529134][ T1276] bond3: (slave ip6gretap0): failed to get link speed/duplex [ 565.689896][ T1276] bond1: (slave dummy0): link status up again after 0 ms [ 565.715644][ T50] bond1: (slave dummy0): link status up again after 0 ms [ 565.734126][ T1276] bond1: (slave dummy0): link status up again after 0 ms [ 565.750410][T16315] tipc: Resetting bearer [ 565.773489][ T50] bond1: (slave dummy0): link status up again after 0 ms [ 565.796917][ T1276] bond1: (slave dummy0): link status up again after 0 ms [ 565.938793][ T5720] wg2 speed is unknown, defaulting to 1000 [ 565.938857][ T5720] syz2: Port: 1 Link DOWN [ 566.199000][T16207] Bluetooth: hci5: command tx timeout [ 566.228501][ T59] tipc: Disabling bearer [ 566.247680][ T59] tipc: Disabling bearer [ 566.261413][ T59] tipc: Left network mode [ 566.685844][T16342] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2809'. [ 566.785203][T16348] validate_nla: 1 callbacks suppressed [ 566.785255][T16348] netlink: 'syz.2.2810': attribute type 21 has an invalid length. [ 566.785364][T16348] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2810'. [ 566.913613][T16352] xt_hl: Unknown Hop Limit match mode: 4 [ 566.925846][T16354] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2809'. [ 567.101182][T16354] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 567.116196][T16354] netlink: 'syz.1.2809': attribute type 1 has an invalid length. [ 568.250075][T16382] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2815'. [ 568.284089][T16377] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2813'. [ 569.057510][T16382] tipc: Resetting bearer [ 569.081990][T16382] tipc: Resetting bearer [ 570.225628][T16417] ieee802154 phy0 wpan0: encryption failed: -126 [ 570.251066][ T5283] 8021q: adding VLAN 0 to HW filter on device eth1 [ 570.412778][T16431] ieee802154 phy0 wpan0: encryption failed: -126 [ 570.576455][T16419] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 570.584398][T16423] netlink: 'syz.1.2822': attribute type 3 has an invalid length. [ 570.584895][T16419] net_ratelimit: 24 callbacks suppressed [ 570.584925][T16419] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 570.589439][ T50] bond3: (slave ip6gretap0): failed to get link speed/duplex [ 570.589487][ T50] bond1: (slave dummy0): failed to get link speed/duplex [ 571.159367][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 571.159615][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 571.159800][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 571.159988][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 571.370689][ T61] bond1: (slave dummy0): failed to get link speed/duplex [ 571.370740][ T61] bond3: (slave ip6gretap0): failed to get link speed/duplex [ 571.371130][T16204] bridge0: port 1(bridge_slave_0) entered blocking state [ 571.371648][T16204] bridge0: port 1(bridge_slave_0) entered disabled state [ 571.372048][T16204] bridge_slave_0: entered allmulticast mode [ 571.410897][T16204] bridge_slave_0: entered promiscuous mode [ 571.445201][T16440] syzkaller0: entered promiscuous mode [ 571.445245][T16440] syzkaller0: entered allmulticast mode [ 571.499189][ T13] bond1: (slave dummy0): failed to get link speed/duplex [ 571.508053][T16204] bridge0: port 2(bridge_slave_1) entered blocking state [ 571.508284][T16204] bridge0: port 2(bridge_slave_1) entered disabled state [ 571.509011][T16204] bridge_slave_1: entered allmulticast mode [ 571.536897][T16204] bridge_slave_1: entered promiscuous mode [ 572.433730][T16204] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 572.614663][T16207] Bluetooth: hci5: command tx timeout [ 572.865553][T16204] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 573.667436][T16492] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2832'. [ 574.620094][T16204] team0: Port device team_slave_0 added [ 575.716580][T16204] team0: Port device team_slave_1 added [ 575.778489][T11738] net_ratelimit: 7 callbacks suppressed [ 575.778542][T11738] bond1: (slave dummy0): failed to get link speed/duplex [ 575.778641][T11738] bond3: (slave ip6gretap0): failed to get link speed/duplex [ 576.030139][T16503] syzkaller0: entered promiscuous mode [ 576.030185][T16503] syzkaller0: entered allmulticast mode [ 576.066429][ T5283] 8021q: adding VLAN 0 to HW filter on device eth2 [ 576.079398][ T13] bond1: (slave dummy0): failed to get link speed/duplex [ 576.079524][ T13] bond3: (slave ip6gretap0): failed to get link speed/duplex [ 576.279120][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 576.279589][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 576.279982][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 576.280494][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 576.410108][ T201] bond1: (slave dummy0): failed to get link speed/duplex [ 576.410233][ T201] bond3: (slave ip6gretap0): failed to get link speed/duplex [ 576.516796][T13334] udevd[13334]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 577.088155][T16204] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 577.088195][T16204] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 577.088252][T16204] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 577.167565][T16204] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 577.167621][T16204] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 577.167681][T16204] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 577.208706][ C0] sched: DL replenish lagged too much [ 577.698606][T16204] hsr_slave_0: entered promiscuous mode [ 577.717176][T16204] hsr_slave_1: entered promiscuous mode [ 577.717872][T16204] debugfs: 'hsr0' already exists in 'hsr' [ 577.717891][T16204] Cannot create hsr debugfs directory [ 579.842134][T16558] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2841'. [ 581.399573][ C1] net_ratelimit: 6 callbacks suppressed [ 581.399614][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 581.400095][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 581.400497][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 581.400907][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 585.611006][T11746] bond1: (slave dummy0): failed to get link speed/duplex [ 585.615283][ T1276] bond3: (slave ip6gretap0): failed to get link speed/duplex [ 585.800345][T16558] .`: (slave bond_slave_1): Releasing backup interface [ 585.805828][T16558] bond_slave_1 (unregistering): left promiscuous mode [ 585.860332][ T1276] bond1: (slave dummy0): failed to get link speed/duplex [ 585.860383][ T1276] bond3: (slave ip6gretap0): failed to get link speed/duplex [ 585.878796][ T5283] 8021q: adding VLAN 0 to HW filter on device eth3 [ 586.098084][T11738] bond1: (slave dummy0): failed to get link speed/duplex [ 586.098183][T11738] bond3: (slave ip6gretap0): failed to get link speed/duplex [ 586.378143][ T59] hsr_slave_0: left promiscuous mode [ 586.382601][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 586.383115][ T59] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 586.744984][T16605] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2853'. [ 586.997637][T16612] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2853'. [ 587.159489][ C1] net_ratelimit: 2 callbacks suppressed [ 587.159535][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 587.160038][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 587.160460][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 587.160869][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 588.305069][T16583] udevd[16583]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 588.653720][T16622] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2855'. [ 588.713213][T16623] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2855'. [ 588.957293][ T59] team0 (unregistering): Port device team_slave_1 removed [ 588.994416][ T59] team0 (unregistering): Port device team_slave_0 removed [ 589.334422][T11746] smbdirect: ib_dev[syz2] removed [ 589.535346][T16607] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR [ 589.841722][ T1276] bond1: (slave dummy0): failed to get link speed/duplex [ 589.841841][ T1276] bond3: (slave ip6gretap0): failed to get link speed/duplex [ 590.249043][T11746] bond3: (slave ip6gretap0): failed to get link speed/duplex [ 590.487136][T16634] 8021q: adding VLAN 0 to HW filter on device .` [ 590.744461][T16641] netlink: 'syz.3.2858': attribute type 4 has an invalid length. [ 590.744501][T16641] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2858'. [ 591.330315][T16634] veth0_to_team: entered promiscuous mode [ 591.449989][T16634] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 591.475119][T16654] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 591.600402][T16634] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 591.669628][ T12] bond1: (slave dummy0): failed to get link speed/duplex [ 591.669677][ T12] bond3: (slave ip6gretap0): failed to get link speed/duplex [ 591.853117][T16639] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2858'. [ 592.244211][ T61] net_ratelimit: 3 callbacks suppressed [ 592.244332][ T61] bond1: (slave dummy0): failed to get link speed/duplex [ 592.244472][ T61] bond3: (slave ip6gretap0): failed to get link speed/duplex [ 592.279241][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 592.279690][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 592.280052][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 592.280479][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 592.360286][ T61] bond3: (slave ip6gretap0): failed to get link speed/duplex [ 592.360332][ T61] bond1: (slave dummy0): failed to get link speed/duplex [ 593.091601][T16664] ip_tables: iptables: counters copy to user failed while replacing table [ 593.136934][ T61] bond1: (slave dummy0): failed to get link speed/duplex [ 593.776710][T16673] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2866'. [ 594.968000][T16690] xt_policy: output policy not valid in PREROUTING and INPUT [ 595.113300][ T59] IPVS: stop unused estimator thread 0... [ 595.605527][T16697] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2872'. [ 595.904998][T16697] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2872'. [ 595.961849][T16697] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2872'. [ 595.998757][T16697] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2872'. [ 596.000069][T16697] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2872'. [ 596.046439][T16697] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2872'. [ 596.055042][T16697] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2872'. [ 597.151624][T16730] netlink: 'syz.3.2877': attribute type 32 has an invalid length. [ 597.610100][ T1276] net_ratelimit: 29 callbacks suppressed [ 597.610157][ T1276] bond3: (slave ip6gretap0): failed to get link speed/duplex [ 597.610230][ T1276] bond1: (slave dummy0): failed to get link speed/duplex [ 597.719552][ T1276] bond1: (slave dummy0): failed to get link speed/duplex [ 597.719601][ T1276] bond3: (slave ip6gretap0): failed to get link speed/duplex [ 597.748510][T16204] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 597.770210][T16743] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2878'. [ 597.794658][T16204] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 597.796648][T16204] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 597.857037][T16204] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 597.862063][T16204] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 597.913920][T16204] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 597.915053][T16204] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 597.958104][T16204] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 598.014756][ T61] bond1: (slave dummy0): failed to get link speed/duplex [ 598.014800][ T61] bond3: (slave ip6gretap0): failed to get link speed/duplex [ 598.039085][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 598.039557][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 598.039891][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 598.040284][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 598.957655][T16761] dvmrp6: entered allmulticast mode [ 600.043877][T16204] 8021q: adding VLAN 0 to HW filter on device bond0 [ 600.328081][T16204] 8021q: adding VLAN 0 to HW filter on device team0 [ 600.521289][T11738] bridge0: port 1(bridge_slave_0) entered blocking state [ 600.521396][T11738] bridge0: port 1(bridge_slave_0) entered forwarding state [ 600.659102][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 600.659209][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 601.141804][T16804] ipip0: entered promiscuous mode [ 601.319671][T16813] IPVS: length: 217 != 24 [ 601.815512][T16817] netlink: 'syz.4.2894': attribute type 2 has an invalid length. [ 601.949178][T16817] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2894'. [ 602.622405][T11746] net_ratelimit: 37 callbacks suppressed [ 602.622437][T11746] bond3: (slave ip6gretap0): failed to get link speed/duplex [ 602.622471][T11746] bond1: (slave dummy0): failed to get link speed/duplex [ 602.730847][ T201] bond1: (slave dummy0): failed to get link speed/duplex [ 602.730969][ T201] bond3: (slave ip6gretap0): failed to get link speed/duplex [ 602.846333][ T50] bond3: (slave ip6gretap0): failed to get link speed/duplex [ 602.846397][ T50] bond1: (slave dummy0): failed to get link speed/duplex [ 602.955241][T11746] bond1: (slave dummy0): failed to get link speed/duplex [ 602.955290][T11746] bond3: (slave ip6gretap0): failed to get link speed/duplex [ 603.065934][ T50] bond3: (slave ip6gretap0): failed to get link speed/duplex [ 603.065982][ T50] bond1: (slave dummy0): failed to get link speed/duplex [ 603.430135][T16854] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2899'. [ 603.554325][T16855] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2901'. [ 603.818052][T16822] xt_policy: output policy not valid in PREROUTING and INPUT [ 603.860219][T16854] hsr_slave_0 (unregistering): left promiscuous mode [ 603.862584][T16854] tipc: Resetting bearer [ 603.949808][T16854] tipc: Disabling bearer [ 604.032814][T16863] lo speed is unknown, defaulting to 1000 [ 604.032903][T16863] lo speed is unknown, defaulting to 1000 [ 604.471130][T16865] ip6gretap2: left promiscuous mode [ 604.573740][T16863] lo speed is unknown, defaulting to 1000 [ 604.692066][T16863] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 604.692130][T16863] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 604.692190][T16863] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 604.938387][T16863] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 604.943067][T16204] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 605.236086][T16863] lo speed is unknown, defaulting to 1000 [ 605.276506][T16863] lo speed is unknown, defaulting to 1000 [ 605.318061][T16863] lo speed is unknown, defaulting to 1000 [ 605.320561][T16863] lo speed is unknown, defaulting to 1000 [ 605.351357][T16882] netlink: 'syz.4.2905': attribute type 2 has an invalid length. [ 605.419232][T16863] lo speed is unknown, defaulting to 1000 [ 605.538993][T16885] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2906'. [ 605.539017][T16885] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2906'. [ 605.758267][T16204] veth0_vlan: entered promiscuous mode [ 605.851916][T16204] veth1_vlan: entered promiscuous mode [ 606.083502][T16204] veth0_macvtap: entered promiscuous mode [ 606.201780][T16204] veth1_macvtap: entered promiscuous mode [ 606.399361][T16204] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 606.547450][T16204] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 606.710792][ T61] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 606.789208][ T201] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 606.961174][ T201] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 607.211280][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 607.688532][ T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 607.688586][ T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 608.069466][T16931] x_tables: duplicate underflow at hook 2 [ 608.110889][T16931] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2914'. [ 608.110948][T16931] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2914'. [ 608.918924][ C0] net_ratelimit: 44 callbacks suppressed [ 608.918947][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 608.919149][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 608.919332][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 609.277432][T16943] netlink: 67 bytes leftover after parsing attributes in process `syz.3.2917'. [ 609.312781][ T1276] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 609.312822][ T1276] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 609.768572][T16943] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 612.129123][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 612.129567][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 612.192630][T16943] 8021q: adding VLAN 0 to HW filter on device bond1 [ 612.196484][T16943] veth0_to_team: entered promiscuous mode [ 612.240041][T16943] 8021q: adding VLAN 0 to HW filter on device bond3 [ 612.244633][T16943] 8021q: adding VLAN 0 to HW filter on device bond4 [ 612.248624][T16943] hsr1: Slave A (veth1_to_team) is not up; please bring it up to get a fully working HSR network [ 612.283593][T16943] hsr1: Slave B (wlan1) is not up; please bring it up to get a fully working HSR network [ 612.315218][T16943] 8021q: adding VLAN 0 to HW filter on device bond5 [ 612.327574][T16943] geneve1: entered promiscuous mode [ 612.350551][T16943] 8021q: adding VLAN 0 to HW filter on device bond7 [ 612.353394][T16943] A link change request failed with some changes committed already. Interface vxlan0 may have been left with an inconsistent configuration, please check. [ 612.358022][ T1276] bond1: (slave dummy0): failed to get link speed/duplex [ 612.358081][ T61] bond3: (slave ip6gretap0): failed to get link speed/duplex [ 612.643587][ T13] bond1: (slave dummy0): failed to get link speed/duplex [ 612.643688][ T13] bond3: (slave ip6gretap0): failed to get link speed/duplex [ 613.360222][T16978] netlink: 9 bytes leftover after parsing attributes in process `syz.4.2925'. [ 614.669513][ T1276] net_ratelimit: 21 callbacks suppressed [ 614.669559][ T1276] bond1: (slave dummy0): failed to get link speed/duplex [ 614.669632][ T1276] bond3: (slave ip6gretap0): failed to get link speed/duplex [ 614.789759][ T201] bond3: (slave ip6gretap0): failed to get link speed/duplex [ 614.789855][ T201] bond1: (slave dummy0): failed to get link speed/duplex [ 614.905537][ T201] bond1: (slave dummy0): failed to get link speed/duplex [ 614.905636][ T201] bond3: (slave ip6gretap0): failed to get link speed/duplex [ 615.013585][T16998] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2931'. [ 615.015905][ T13] bond3: (slave ip6gretap0): failed to get link speed/duplex [ 615.016002][ T13] bond1: (slave dummy0): failed to get link speed/duplex [ 615.133775][ T61] bond1: (slave dummy0): failed to get link speed/duplex [ 615.133869][ T61] bond3: (slave ip6gretap0): failed to get link speed/duplex [ 615.354134][ T5624] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 615.374250][ T5624] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 615.386542][ T5624] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 615.403253][ T5624] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 615.405376][ T5624] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 616.161458][T17020] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2936'. [ 616.161500][T17020] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2936'. [ 616.262778][T17020] geneve2: entered promiscuous mode [ 616.262965][T17020] geneve2: entered allmulticast mode [ 616.943068][T17035] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 617.488875][T16207] Bluetooth: hci0: command tx timeout [ 617.721393][T17052] netlink: 67 bytes leftover after parsing attributes in process `syz.2.2944'. [ 618.887325][T17071] FAULT_INJECTION: forcing a failure. [ 618.887325][T17071] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 618.887396][T17071] CPU: 1 UID: 0 PID: 17071 Comm: syz.1.2949 Not tainted syzkaller #0 PREEMPT(full) [ 618.887420][T17071] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 618.887433][T17071] Call Trace: [ 618.887441][T17071] [ 618.887451][T17071] dump_stack_lvl+0xe8/0x150 [ 618.887494][T17071] should_fail_ex+0x410/0x560 [ 618.887521][T17071] prepare_alloc_pages+0x223/0x600 [ 618.887549][T17071] __alloc_frozen_pages_noprof+0x185/0x5a0 [ 618.887572][T17071] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 618.887599][T17071] ? __alloc_frozen_pages_noprof+0x5/0x5a0 [ 618.887623][T17071] __alloc_pages_noprof+0x10/0x100 [ 618.887645][T17071] alloc_pages_bulk_noprof+0x5fa/0x7c0 [ 618.887674][T17071] ? alloc_pages_noprof+0x140/0x2b0 [ 618.887703][T17071] __kasan_populate_vmalloc+0xb7/0x1c0 [ 618.887728][T17071] alloc_vmap_area+0xd1a/0x1420 [ 618.887768][T17071] ? __pfx_alloc_vmap_area+0x10/0x10 [ 618.887792][T17071] ? __kmalloc_cache_node_noprof+0x3d1/0x620 [ 618.887813][T17071] ? __kmalloc_cache_node_noprof+0x1f7/0x620 [ 618.887832][T17071] ? __get_vm_area_node+0x155/0x2f0 [ 618.887861][T17071] __get_vm_area_node+0x200/0x2f0 [ 618.887893][T17071] __vmalloc_node_range_noprof+0x343/0x1540 [ 618.887921][T17071] ? bpf_prog_alloc_no_stats+0x47/0x560 [ 618.887944][T17071] ? __lock_acquire+0x747/0x2de0 [ 618.887984][T17071] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 618.888017][T17071] ? bpf_prog_alloc_no_stats+0x47/0x560 [ 618.888034][T17071] __vmalloc_noprof+0xd2/0x120 [ 618.888061][T17071] ? bpf_prog_alloc_no_stats+0x47/0x560 [ 618.888084][T17071] bpf_prog_alloc_no_stats+0x47/0x560 [ 618.888105][T17071] ? bpf_prog_alloc+0x2a/0x1a0 [ 618.888129][T17071] bpf_prog_alloc+0x3c/0x1a0 [ 618.888153][T17071] bpf_prog_load+0x7f8/0x1c20 [ 618.888186][T17071] ? __pfx_bpf_prog_load+0x10/0x10 [ 618.888231][T17071] __sys_bpf+0xd0d/0xd90 [ 618.888261][T17071] ? __pfx___sys_bpf+0x10/0x10 [ 618.888282][T17071] ? taprio_dequeue+0x250/0x540 [ 618.888318][T17071] ? sched_clock_cpu+0x74/0x440 [ 618.888356][T17071] ? __irq_exit_rcu+0xcb/0x220 [ 618.888385][T17071] ? handle_softirqs+0x720/0x860 [ 618.888413][T17071] __x64_sys_bpf+0xba/0xd0 [ 618.888436][T17071] do_syscall_64+0x166/0x520 [ 618.888459][T17071] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 618.888487][T17071] ? clear_bhb_loop+0x70/0xc0 [ 618.888511][T17071] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 618.888530][T17071] RIP: 0033:0x7f6f6959e159 [ 618.888550][T17071] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 618.888566][T17071] RSP: 002b:00007f6f6a421028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 618.888587][T17071] RAX: ffffffffffffffda RBX: 00007f6f69825fa0 RCX: 00007f6f6959e159 [ 618.888602][T17071] RDX: 0000000000000094 RSI: 0000200000000280 RDI: 0000000000000005 [ 618.888614][T17071] RBP: 00007f6f6a421090 R08: 0000000000000000 R09: 0000000000000000 [ 618.888625][T17071] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 618.888638][T17071] R13: 00007f6f69826038 R14: 00007f6f69825fa0 R15: 00007ffdfcee2688 [ 618.888663][T17071] [ 618.982424][T17071] syz.1.2949: vmalloc error: size 4096, align 0x1, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 618.982500][T17071] CPU: 0 UID: 0 PID: 17071 Comm: syz.1.2949 Not tainted syzkaller #0 PREEMPT(full) [ 618.982521][T17071] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 618.982533][T17071] Call Trace: [ 618.982542][T17071] [ 618.982550][T17071] dump_stack_lvl+0xe8/0x150 [ 618.982590][T17071] warn_alloc+0x24d/0x270 [ 618.982610][T17071] ? lockdep_hardirqs_on+0x7b/0x110 [ 618.982636][T17071] ? __pfx_warn_alloc+0x10/0x10 [ 618.982654][T17071] ? kfree+0x1c5/0x650 [ 618.982690][T17071] ? __get_vm_area_node+0x219/0x2f0 [ 618.982748][T17071] __vmalloc_node_range_noprof+0x36b/0x1540 [ 618.982804][T17071] ? __lock_acquire+0x747/0x2de0 [ 618.982858][T17071] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 618.982894][T17071] ? bpf_prog_alloc_no_stats+0x47/0x560 [ 618.982921][T17071] __vmalloc_noprof+0xd2/0x120 [ 618.982948][T17071] ? bpf_prog_alloc_no_stats+0x47/0x560 [ 618.982979][T17071] bpf_prog_alloc_no_stats+0x47/0x560 [ 618.982999][T17071] ? bpf_prog_alloc+0x2a/0x1a0 [ 618.983022][T17071] bpf_prog_alloc+0x3c/0x1a0 [ 618.983047][T17071] bpf_prog_load+0x7f8/0x1c20 [ 618.983079][T17071] ? __pfx_bpf_prog_load+0x10/0x10 [ 618.983123][T17071] __sys_bpf+0xd0d/0xd90 [ 618.983151][T17071] ? __pfx___sys_bpf+0x10/0x10 [ 618.983172][T17071] ? taprio_dequeue+0x250/0x540 [ 618.983209][T17071] ? sched_clock_cpu+0x74/0x440 [ 618.983247][T17071] ? __irq_exit_rcu+0xcb/0x220 [ 618.983274][T17071] ? handle_softirqs+0x720/0x860 [ 618.983301][T17071] __x64_sys_bpf+0xba/0xd0 [ 618.983322][T17071] do_syscall_64+0x166/0x520 [ 618.983344][T17071] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 618.983362][T17071] ? clear_bhb_loop+0x70/0xc0 [ 618.983386][T17071] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 618.983404][T17071] RIP: 0033:0x7f6f6959e159 [ 618.983421][T17071] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 618.983437][T17071] RSP: 002b:00007f6f6a421028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 618.983455][T17071] RAX: ffffffffffffffda RBX: 00007f6f69825fa0 RCX: 00007f6f6959e159 [ 618.983468][T17071] RDX: 0000000000000094 RSI: 0000200000000280 RDI: 0000000000000005 [ 618.983480][T17071] RBP: 00007f6f6a421090 R08: 0000000000000000 R09: 0000000000000000 [ 618.983492][T17071] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 618.983503][T17071] R13: 00007f6f69826038 R14: 00007f6f69825fa0 R15: 00007ffdfcee2688 [ 618.983531][T17071] [ 618.983539][T17071] Mem-Info: [ 618.983548][T17071] active_anon:7432 inactive_anon:0 isolated_anon:0 [ 618.983548][T17071] active_file:0 inactive_file:43945 isolated_file:0 [ 618.983548][T17071] unevictable:63 dirty:254 writeback:0 [ 618.983548][T17071] slab_reclaimable:11815 slab_unreclaimable:167177 [ 618.983548][T17071] mapped:30834 shmem:2061 pagetables:1262 [ 618.983548][T17071] sec_pagetables:0 bounce:0 [ 618.983548][T17071] kernel_misc_reclaimable:0 [ 618.983548][T17071] free:1217935 free_pcp:6494 free_cma:0 [ 618.983608][T17071] Node 0 active_anon:29728kB inactive_anon:0kB active_file:0kB inactive_file:175580kB unevictable:252kB isolated(anon):0kB isolated(file):0kB mapped:123336kB dirty:1012kB writeback:0kB shmem:8244kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12700kB pagetables:4908kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 618.983664][T17071] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:140kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 618.983715][T17071] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 618.983766][T17071] lowmem_reserve[]: 0 2487 2487 2487 2487 [ 618.983799][T17071] Node 0 DMA32 free:913968kB boost:0kB min:34140kB low:42672kB high:51204kB reserved_highatomic:0kB free_highatomic:0kB active_anon:29728kB inactive_anon:0kB active_file:0kB inactive_file:175580kB unevictable:252kB writepending:1012kB zspages:0kB present:3129332kB managed:2546940kB mlocked:252kB bounce:0kB free_pcp:25976kB local_pcp:16256kB free_cma:0kB [ 618.983866][T17071] lowmem_reserve[]: 0 0 0 0 0 [ 618.983903][T17071] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:0kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 618.983951][T17071] lowmem_reserve[]: 0 0 0 0 0 [ 618.983982][T17071] Node 1 Normal free:3942412kB boost:0kB min:55760kB low:69700kB high:83640kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:0kB writepending:4kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 618.984033][T17071] lowmem_reserve[]: 0 0 0 0 0 [ 618.984064][T17071] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 618.984174][T17071] Node 0 DMA32: 2*4kB (UE) 21*8kB (UME) 18*16kB (UM) 141*32kB (ME) 101*64kB (ME) 49*128kB (UM) 19*256kB (UME) 5*512kB (ME) 2*1024kB (M) 7*2048kB (UME) 213*4096kB (UM) = 913968kB [ 618.984332][T17071] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 619.023788][T17071] Node 1 Normal: 1*4kB (M) 1*8kB (M) 8*16kB (UM) 2*32kB (UM) 11*64kB (UM) 5*128kB (UM) 2*256kB (M) 4*512kB (UM) 2*1024kB (UM) 2*2048kB (U) 960*4096kB (UM) = 3942412kB [ 619.023936][T17071] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 619.023952][T17071] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 619.023968][T17071] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 619.023983][T17071] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 619.023997][T17071] 46002 total pagecache pages [ 619.024005][T17071] 0 pages in swap cache [ 619.024012][T17071] Free swap = 124996kB [ 619.024019][T17071] Total swap = 124996kB [ 619.024026][T17071] 2097051 pages RAM [ 619.024033][T17071] 0 pages HighMem/MovableOnly [ 619.024039][T17071] 428700 pages reserved [ 619.024044][T17071] 0 pages cma reserved [ 619.559967][T16207] Bluetooth: hci0: command tx timeout [ 619.930486][ T50] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 619.930521][ T50] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 620.004901][T17081] FAULT_INJECTION: forcing a failure. [ 620.004901][T17081] name failslab, interval 1, probability 0, space 0, times 0 [ 620.004934][T17081] CPU: 0 UID: 0 PID: 17081 Comm: syz.1.2953 Not tainted syzkaller #0 PREEMPT(full) [ 620.004956][T17081] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 620.004967][T17081] Call Trace: [ 620.004976][T17081] [ 620.004985][T17081] dump_stack_lvl+0xe8/0x150 [ 620.005018][T17081] should_fail_ex+0x410/0x560 [ 620.005045][T17081] should_failslab+0xa8/0x100 [ 620.005069][T17081] ? skb_clone+0x212/0x3a0 [ 620.005095][T17081] kmem_cache_alloc_noprof+0xa1/0x600 [ 620.005126][T17081] ? skb_clone+0x212/0x3a0 [ 620.005157][T17081] skb_clone+0x212/0x3a0 [ 620.005186][T17081] __netlink_deliver_tap+0x413/0x860 [ 620.005226][T17081] ? netlink_deliver_tap+0x2e/0x1b0 [ 620.005262][T17081] netlink_deliver_tap+0x19c/0x1b0 [ 620.005292][T17081] netlink_unicast+0x781/0x940 [ 620.005326][T17081] netlink_sendmsg+0x813/0xb40 [ 620.005357][T17081] ? __pfx_netlink_sendmsg+0x10/0x10 [ 620.005391][T17081] ? apparmor_socket_sendmsg+0x98/0x360 [ 620.005412][T17081] ? __pfx_netlink_sendmsg+0x10/0x10 [ 620.005437][T17081] sock_sendmsg_nosec+0x13a/0x180 [ 620.005459][T17081] __sys_sendto+0x408/0x5a0 [ 620.005479][T17081] ? ksys_write+0x1e6/0x270 [ 620.005508][T17081] ? __pfx___sys_sendto+0x10/0x10 [ 620.005528][T17081] ? __mutex_unlock_slowpath+0x731/0x900 [ 620.005575][T17081] ? __pfx_ksys_write+0x10/0x10 [ 620.005607][T17081] __x64_sys_sendto+0xde/0x100 [ 620.005632][T17081] do_syscall_64+0x166/0x520 [ 620.005653][T17081] ? trace_irq_disable+0x3b/0x140 [ 620.005672][T17081] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 620.005691][T17081] ? clear_bhb_loop+0x70/0xc0 [ 620.005713][T17081] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 620.005731][T17081] RIP: 0033:0x7f6f6959e159 [ 620.005747][T17081] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 620.005767][T17081] RSP: 002b:00007f6f6a421028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 620.005788][T17081] RAX: ffffffffffffffda RBX: 00007f6f69825fa0 RCX: 00007f6f6959e159 [ 620.005800][T17081] RDX: 0000000000010a73 RSI: 0000200000000000 RDI: 0000000000000003 [ 620.005812][T17081] RBP: 00007f6f6a421090 R08: 0000000000000000 R09: 4b6ae4f95a5de35b [ 620.005825][T17081] R10: 0000000000000800 R11: 0000000000000246 R12: 0000000000000001 [ 620.005836][T17081] R13: 00007f6f69826038 R14: 00007f6f69825fa0 R15: 00007ffdfcee2688 [ 620.005866][T17081] [ 620.025779][T17081] netlink: 27 bytes leftover after parsing attributes in process `syz.1.2953'. [ 620.383221][ T13] net_ratelimit: 50 callbacks suppressed [ 620.383244][ T13] bond3: (slave ip6gretap0): failed to get link speed/duplex [ 620.383291][ T13] bond1: (slave dummy0): failed to get link speed/duplex [ 620.438978][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 620.439211][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 620.439428][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 620.490731][T11746] bond1: (slave dummy0): failed to get link speed/duplex [ 620.490775][T11746] bond3: (slave ip6gretap0): failed to get link speed/duplex [ 620.584503][T17004] lo speed is unknown, defaulting to 1000 [ 621.499711][ T50] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 621.499770][ T50] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 621.639533][T16207] Bluetooth: hci0: command tx timeout [ 621.668883][T11746] bond3: (slave ip6gretap0): failed to get link speed/duplex [ 621.668981][T11746] bond1: (slave dummy0): failed to get link speed/duplex [ 622.063690][ T50] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 622.063757][ T50] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 622.319843][T17112] bridge0: port 1(vlan2) entered blocking state [ 622.323935][T17112] bridge0: port 1(vlan2) entered disabled state [ 622.324284][T17112] vlan2: entered allmulticast mode [ 622.324300][T17112] geneve0: entered allmulticast mode [ 622.351380][T17112] vlan2: entered promiscuous mode [ 622.778501][T17128] xt_policy: output policy not valid in PREROUTING and INPUT [ 623.242654][ T50] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 623.242716][ T50] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 623.718934][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 623.719555][T16207] Bluetooth: hci0: command tx timeout [ 624.079432][T17151] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2963'. [ 624.365746][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.406311][T17156] netlink: 136 bytes leftover after parsing attributes in process `syz.1.2964'. [ 625.123226][T17174] netlink: 27 bytes leftover after parsing attributes in process `syz.4.2969'. [ 625.190113][T17174] FAULT_INJECTION: forcing a failure. [ 625.190113][T17174] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 625.190178][T17174] CPU: 1 UID: 0 PID: 17174 Comm: syz.4.2969 Not tainted syzkaller #0 PREEMPT(full) [ 625.190203][T17174] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 625.190215][T17174] Call Trace: [ 625.190223][T17174] [ 625.190241][T17174] dump_stack_lvl+0xe8/0x150 [ 625.190273][T17174] should_fail_ex+0x410/0x560 [ 625.190301][T17174] _copy_to_user+0x31/0xb0 [ 625.190327][T17174] simple_read_from_buffer+0xe1/0x170 [ 625.190359][T17174] proc_fail_nth_read+0x1bb/0x230 [ 625.190387][T17174] ? common_file_perm+0x20e/0x2b0 [ 625.190412][T17174] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 625.190441][T17174] ? rw_verify_area+0x24a/0x4c0 [ 625.190466][T17174] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 625.190494][T17174] vfs_read+0x213/0xa80 [ 625.190526][T17174] ? __pfx___mutex_lock+0x10/0x10 [ 625.190552][T17174] ? __pfx_vfs_read+0x10/0x10 [ 625.190580][T17174] ? __fget_files+0x2a/0x420 [ 625.190610][T17174] ? __fget_files+0x3a2/0x420 [ 625.190634][T17174] ? __fget_files+0x2a/0x420 [ 625.190668][T17174] ksys_read+0x150/0x270 [ 625.190696][T17174] ? __pfx_ksys_read+0x10/0x10 [ 625.190732][T17174] do_syscall_64+0x166/0x520 [ 625.190755][T17174] ? trace_irq_disable+0x3b/0x140 [ 625.190775][T17174] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 625.190795][T17174] ? clear_bhb_loop+0x70/0xc0 [ 625.190819][T17174] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 625.190838][T17174] RIP: 0033:0x7f0a7855e98e [ 625.190856][T17174] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 625.190872][T17174] RSP: 002b:00007f0a793d0fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 625.190893][T17174] RAX: ffffffffffffffda RBX: 00007f0a793d16c0 RCX: 00007f0a7855e98e [ 625.190907][T17174] RDX: 000000000000000f RSI: 00007f0a793d10a0 RDI: 0000000000000004 [ 625.190918][T17174] RBP: 00007f0a793d1090 R08: 0000000000000000 R09: 0000000000000000 [ 625.190928][T17174] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 625.190938][T17174] R13: 00007f0a78826038 R14: 00007f0a78825fa0 R15: 00007ffc4d0e0d78 [ 625.190963][T17174] [ 625.435101][ T61] net_ratelimit: 10 callbacks suppressed [ 625.435155][ T61] bond3: (slave ip6gretap0): failed to get link speed/duplex [ 625.435229][ T61] bond1: (slave dummy0): failed to get link speed/duplex [ 625.995584][T17177] FAULT_INJECTION: forcing a failure. [ 625.995584][T17177] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 625.995618][T17177] CPU: 0 UID: 0 PID: 17177 Comm: syz.4.2970 Not tainted syzkaller #0 PREEMPT(full) [ 625.995639][T17177] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 625.995659][T17177] Call Trace: [ 625.995667][T17177] [ 625.995676][T17177] dump_stack_lvl+0xe8/0x150 [ 625.995708][T17177] should_fail_ex+0x410/0x560 [ 625.995736][T17177] strncpy_from_user+0x36/0x2c0 [ 625.995761][T17177] bpf_prog_load+0xdef/0x1c20 [ 625.995793][T17177] ? __pfx_bpf_prog_load+0x10/0x10 [ 625.995835][T17177] __sys_bpf+0xd0d/0xd90 [ 625.995863][T17177] ? __pfx___sys_bpf+0x10/0x10 [ 625.995895][T17177] ? __fget_files+0x2a/0x420 [ 625.995936][T17177] ? ksys_write+0x242/0x270 [ 625.995965][T17177] ? __pfx_ksys_write+0x10/0x10 [ 625.995997][T17177] __x64_sys_bpf+0xba/0xd0 [ 625.996019][T17177] do_syscall_64+0x166/0x520 [ 625.996039][T17177] ? trace_irq_disable+0x3b/0x140 [ 625.996058][T17177] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 625.996077][T17177] ? clear_bhb_loop+0x70/0xc0 [ 625.996100][T17177] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 625.996119][T17177] RIP: 0033:0x7f0a7859e159 [ 625.996137][T17177] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 625.996152][T17177] RSP: 002b:00007f0a793d1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 625.996173][T17177] RAX: ffffffffffffffda RBX: 00007f0a78825fa0 RCX: 00007f0a7859e159 [ 625.996187][T17177] RDX: 0000000000000094 RSI: 0000200000000280 RDI: 0000000000000005 [ 625.996199][T17177] RBP: 00007f0a793d1090 R08: 0000000000000000 R09: 0000000000000000 [ 625.996209][T17177] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 625.996221][T17177] R13: 00007f0a78826038 R14: 00007f0a78825fa0 R15: 00007ffc4d0e0d78 [ 625.996250][T17177] [ 626.734417][ T50] bridge_slave_1: left allmulticast mode [ 626.734477][ T50] bridge_slave_1: left promiscuous mode [ 626.740279][ T50] bridge0: port 2(bridge_slave_1) entered disabled state [ 626.838884][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 626.839073][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 626.839287][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 626.869132][ T50] bridge_slave_0: left allmulticast mode [ 626.869192][ T50] bridge_slave_0: left promiscuous mode [ 626.869761][ T50] bridge0: port 1(bridge_slave_0) entered disabled state [ 627.058540][ T50] pimreg: left allmulticast mode [ 627.076227][ T50] dvmrp6: left allmulticast mode [ 627.629281][T17166] xt_policy: output policy not valid in PREROUTING and INPUT [ 628.265238][T17188] xt_policy: output policy not valid in PREROUTING and INPUT [ 631.319694][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 631.320117][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 631.320505][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 632.484313][ T50] Increase LOCKDEP_CIRCULAR_QUEUE_BITS to avoid this warning: [ 632.484365][ T50] ------------[ cut here ]------------ [ 632.484373][ T50] lockdep bfs error:-1 [ 632.484392][ T50] WARNING: kernel/locking/lockdep.c:2103 at print_bfs_bug+0x20/0x40, CPU#1: kworker/u8:3/50 [ 632.513356][ T50] Modules linked in: [ 632.518865][ T50] CPU: 1 UID: 0 PID: 50 Comm: kworker/u8:3 Not tainted syzkaller #0 PREEMPT(full) [ 632.529746][ T50] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 632.539819][ T50] Workqueue: netns cleanup_net [ 632.545224][ T50] RIP: 0010:print_bfs_bug+0x22/0x40 [ 632.550707][ T50] Code: 90 90 90 90 90 90 90 90 55 53 89 fb e8 47 eb 37 03 89 c5 e8 c0 85 ff ff 85 ed 74 13 83 fb ff 74 16 48 8d 3d e0 fa d9 0e 89 de <67> 48 0f b9 3a 5b 5d e9 02 8c 45 0a cc 48 c7 c7 40 a0 5a 8e e8 45 [ 632.572633][ T50] RSP: 0018:ffffc90000bb7068 EFLAGS: 00010046 [ 632.579319][ T50] RAX: 000000000000003b RBX: 00000000ffffffff RCX: 86688a8044ccdb00 [ 632.587465][ T50] RDX: 0000000000000000 RSI: 00000000ffffffff RDI: ffffffff907d8830 [ 632.595861][ T50] RBP: 0000000000000001 R08: ffffc90000bb6de7 R09: 1ffff92000176dbc [ 632.604456][ T50] R10: dffffc0000000000 R11: fffff52000176dbd R12: 000000000000005b [ 632.612777][ T50] R13: ffffffff9445fe28 R14: ffffffff973c9868 R15: ffffffff973c98d8 [ 632.620742][ T50] FS: 0000000000000000(0000) GS:ffff888124dcd000(0000) knlGS:0000000000000000 [ 632.629660][ T50] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 632.636250][ T50] CR2: 00007fa82567820d CR3: 000000000eb48000 CR4: 00000000003526f0 [ 632.644307][ T50] Call Trace: [ 632.647765][ T50] [ 632.650698][ T50] __lock_acquire+0x25ed/0x2de0 [ 632.655542][ T50] ? __pfx_stack_trace_save+0x10/0x10 [ 632.661013][ T50] lock_acquire+0x115/0x350 [ 632.665525][ T50] ? ktime_get+0x45/0x220 [ 632.670580][ T50] ? ktime_get+0x45/0x220 [ 632.675370][ T50] seqcount_lockdep_reader_access+0x55/0x100 [ 632.681440][ T50] ? ktime_get+0x45/0x220 [ 632.686618][ T50] ktime_get+0x45/0x220 [ 632.690754][ T50] clockevents_program_event+0x290/0x630 [ 632.696385][ T50] ? __pfx_clockevents_program_event+0x10/0x10 [ 632.702542][ T50] ? tick_program_event+0x8f/0x120 [ 632.707661][ T50] __hrtimer_rearm_deferred+0x36c/0x4b0 [ 632.713203][ T50] irqentry_exit+0x8d3/0x910 [ 632.717805][ T50] ? trace_irq_disable+0x3b/0x140 [ 632.722827][ T50] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 632.728820][ T50] RIP: 0010:lock_acquire+0x232/0x350 [ 632.734108][ T50] Code: ff ff ff e8 50 e5 42 0a f7 44 24 10 00 02 00 00 0f 84 38 ff ff ff 65 48 8b 05 a2 00 f2 11 48 3b 44 24 50 75 33 fb 48 83 c4 58 <5b> 41 5c 41 5d 41 5e 41 5f 5d e9 bf e9 45 0a cc 48 8d 3d 97 52 da [ 632.755793][ T50] RSP: 0018:ffffc90000bb74c8 EFLAGS: 00000282 [ 632.761967][ T50] RAX: 86688a8044ccdb00 RBX: 0000000000000001 RCX: 8000000000000402 [ 632.770013][ T50] RDX: ffff88801bbaea38 RSI: ffffffff8e69bb10 RDI: ffffffff8c6da080 [ 632.777977][ T50] RBP: ffff88801bbaddc0 R08: 0000000000000008 R09: ffffffff96ce8ca0 [ 632.786903][ T50] R10: 00000000500d8bc2 R11: 000000007bea95b3 R12: ffff88803b7a1170 [ 632.794872][ T50] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000246 [ 632.802907][ T50] ? dev_reset_queue+0x138/0x1b0 [ 632.807879][ T50] _raw_spin_lock_bh+0x36/0x50 [ 632.812708][ T50] ? dev_reset_queue+0x138/0x1b0 [ 632.817934][ T50] dev_reset_queue+0x138/0x1b0 [ 632.823102][ T50] dev_deactivate_many+0x778/0xda0 [ 632.828332][ T50] ? dev_deactivate_many+0x25d/0xda0 [ 632.833713][ T50] __dev_close_many+0x180/0x6e0 [ 632.838678][ T50] ? kasan_save_stack+0x3e/0x60 [ 632.844121][ T50] ? kasan_record_aux_stack+0xbd/0xd0 [ 632.849494][ T50] ? call_rcu+0xee/0x8b0 [ 632.853833][ T50] ? ip_fib_net_exit+0x2c6/0x330 [ 632.858841][ T50] ? process_scheduled_works+0xc3d/0x1630 [ 632.864656][ T50] ? worker_thread+0xa47/0xfb0 [ 632.869429][ T50] ? __pfx___dev_close_many+0x10/0x10 [ 632.875055][ T50] ? irqentry_exit+0x218/0x910 [ 632.880024][ T50] ? lockdep_hardirqs_on+0x7b/0x110 [ 632.885317][ T50] netif_close_many+0x249/0x660 [ 632.890201][ T50] ? __pfx_netif_close_many+0x10/0x10 [ 632.895588][ T50] unregister_netdevice_many_notify+0xb76/0x2140 [ 632.902015][ T50] ? lockdep_hardirqs_on+0x7b/0x110 [ 632.907216][ T50] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 632.914070][ T50] ? __pfx_nexthop_net_exit_rtnl+0x10/0x10 [ 632.919981][ T50] ? rtnl_is_locked+0x15/0x20 [ 632.925001][ T50] ? nexthop_net_exit_rtnl+0x258/0x2a0 [ 632.930666][ T50] ops_undo_list+0x391/0x8d0 [ 632.935273][ T50] ? __pfx_ops_undo_list+0x10/0x10 [ 632.940371][ T50] ? idr_destroy+0x218/0x290 [ 632.945044][ T50] ? do_raw_spin_unlock+0xf5/0x200 [ 632.950270][ T50] cleanup_net+0x572/0x810 [ 632.954678][ T50] ? __pfx_cleanup_net+0x10/0x10 [ 632.959656][ T50] ? rcu_is_watching+0x16/0xb0 [ 632.964408][ T50] ? process_scheduled_works+0x97a/0x1630 [ 632.970122][ T50] process_scheduled_works+0xc3d/0x1630 [ 632.975682][ T50] ? __pfx_process_scheduled_works+0x10/0x10 [ 632.981659][ T50] ? assign_work+0x3cf/0x5d0 [ 632.986246][ T50] worker_thread+0xa47/0xfb0 [ 632.990828][ T50] kthread+0x38b/0x480 [ 632.994917][ T50] ? __pfx_worker_thread+0x10/0x10 [ 633.000013][ T50] ? __pfx_kthread+0x10/0x10 [ 633.004587][ T50] ret_from_fork+0x514/0xb70 [ 633.009162][ T50] ? __pfx_ret_from_fork+0x10/0x10 [ 633.014272][ T50] ? __switch_to+0xc89/0x1420 [ 633.018973][ T50] ? __pfx_kthread+0x10/0x10 [ 633.023655][ T50] ret_from_fork_asm+0x1a/0x30 [ 633.028447][ T50] [ 633.031473][ T50] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 633.038835][ T50] CPU: 1 UID: 0 PID: 50 Comm: kworker/u8:3 Not tainted syzkaller #0 PREEMPT(full) [ 633.048327][ T50] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 633.059288][ T50] Workqueue: netns cleanup_net [ 633.064220][ T50] Call Trace: [ 633.067693][ T50] [ 633.070640][ T50] vpanic+0x56d/0xa60 [ 633.075408][ T50] ? __pfx__printk+0x10/0x10 [ 633.080159][ T50] ? __pfx_vpanic+0x10/0x10 [ 633.084662][ T50] ? is_bpf_text_address+0x292/0x2b0 [ 633.089977][ T50] ? is_bpf_text_address+0x26/0x2b0 [ 633.095185][ T50] panic+0xc5/0xd0 [ 633.098898][ T50] ? __pfx_panic+0x10/0x10 [ 633.103304][ T50] ? ret_from_fork_asm+0x1a/0x30 [ 633.108321][ T50] __warn+0x315/0x4c0 [ 633.112372][ T50] ? print_bfs_bug+0x20/0x40 [ 633.117035][ T50] ? print_bfs_bug+0x20/0x40 [ 633.121628][ T50] __report_bug+0x276/0x570 [ 633.126118][ T50] ? print_bfs_bug+0x20/0x40 [ 633.130686][ T50] ? __pfx___report_bug+0x10/0x10 [ 633.135712][ T50] ? __kasan_check_byte+0x12/0x40 [ 633.140724][ T50] ? __pfx_vprintk_emit+0x10/0x10 [ 633.145824][ T50] ? lock_release+0x4b/0x3c0 [ 633.150400][ T50] report_bug_entry+0x19b/0x290 [ 633.155405][ T50] ? print_bfs_bug+0x22/0x40 [ 633.160430][ T50] ? print_bfs_bug+0x27/0x40 [ 633.165488][ T50] handle_bug+0xce/0x200 [ 633.169736][ T50] exc_invalid_op+0x1a/0x50 [ 633.174242][ T50] asm_exc_invalid_op+0x1a/0x20 [ 633.179110][ T50] RIP: 0010:print_bfs_bug+0x22/0x40 [ 633.184297][ T50] Code: 90 90 90 90 90 90 90 90 55 53 89 fb e8 47 eb 37 03 89 c5 e8 c0 85 ff ff 85 ed 74 13 83 fb ff 74 16 48 8d 3d e0 fa d9 0e 89 de <67> 48 0f b9 3a 5b 5d e9 02 8c 45 0a cc 48 c7 c7 40 a0 5a 8e e8 45 [ 633.203886][ T50] RSP: 0018:ffffc90000bb7068 EFLAGS: 00010046 [ 633.209942][ T50] RAX: 000000000000003b RBX: 00000000ffffffff RCX: 86688a8044ccdb00 [ 633.218011][ T50] RDX: 0000000000000000 RSI: 00000000ffffffff RDI: ffffffff907d8830 [ 633.225987][ T50] RBP: 0000000000000001 R08: ffffc90000bb6de7 R09: 1ffff92000176dbc [ 633.233968][ T50] R10: dffffc0000000000 R11: fffff52000176dbd R12: 000000000000005b [ 633.241929][ T50] R13: ffffffff9445fe28 R14: ffffffff973c9868 R15: ffffffff973c98d8 [ 633.249913][ T50] ? print_bfs_bug+0x3b/0x40 [ 633.254591][ T50] __lock_acquire+0x25ed/0x2de0 [ 633.259443][ T50] ? __pfx_stack_trace_save+0x10/0x10 [ 633.264845][ T50] lock_acquire+0x115/0x350 [ 633.269442][ T50] ? ktime_get+0x45/0x220 [ 633.273753][ T50] ? ktime_get+0x45/0x220 [ 633.278071][ T50] seqcount_lockdep_reader_access+0x55/0x100 [ 633.284047][ T50] ? ktime_get+0x45/0x220 [ 633.288385][ T50] ktime_get+0x45/0x220 [ 633.292539][ T50] clockevents_program_event+0x290/0x630 [ 633.298177][ T50] ? __pfx_clockevents_program_event+0x10/0x10 [ 633.304339][ T50] ? tick_program_event+0x8f/0x120 [ 633.309448][ T50] __hrtimer_rearm_deferred+0x36c/0x4b0 [ 633.314989][ T50] irqentry_exit+0x8d3/0x910 [ 633.319583][ T50] ? trace_irq_disable+0x3b/0x140 [ 633.324638][ T50] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 633.330641][ T50] RIP: 0010:lock_acquire+0x232/0x350 [ 633.335924][ T50] Code: ff ff ff e8 50 e5 42 0a f7 44 24 10 00 02 00 00 0f 84 38 ff ff ff 65 48 8b 05 a2 00 f2 11 48 3b 44 24 50 75 33 fb 48 83 c4 58 <5b> 41 5c 41 5d 41 5e 41 5f 5d e9 bf e9 45 0a cc 48 8d 3d 97 52 da [ 633.355525][ T50] RSP: 0018:ffffc90000bb74c8 EFLAGS: 00000282 [ 633.361603][ T50] RAX: 86688a8044ccdb00 RBX: 0000000000000001 RCX: 8000000000000402 [ 633.369572][ T50] RDX: ffff88801bbaea38 RSI: ffffffff8e69bb10 RDI: ffffffff8c6da080 [ 633.377634][ T50] RBP: ffff88801bbaddc0 R08: 0000000000000008 R09: ffffffff96ce8ca0 [ 633.385603][ T50] R10: 00000000500d8bc2 R11: 000000007bea95b3 R12: ffff88803b7a1170 [ 633.393591][ T50] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000246 [ 633.401666][ T50] ? dev_reset_queue+0x138/0x1b0 [ 633.406614][ T50] _raw_spin_lock_bh+0x36/0x50 [ 633.411372][ T50] ? dev_reset_queue+0x138/0x1b0 [ 633.416307][ T50] dev_reset_queue+0x138/0x1b0 [ 633.421074][ T50] dev_deactivate_many+0x778/0xda0 [ 633.426325][ T50] ? dev_deactivate_many+0x25d/0xda0 [ 633.431615][ T50] __dev_close_many+0x180/0x6e0 [ 633.436474][ T50] ? kasan_save_stack+0x3e/0x60 [ 633.441305][ T50] ? kasan_record_aux_stack+0xbd/0xd0 [ 633.446673][ T50] ? call_rcu+0xee/0x8b0 [ 633.450917][ T50] ? ip_fib_net_exit+0x2c6/0x330 [ 633.455842][ T50] ? process_scheduled_works+0xc3d/0x1630 [ 633.461552][ T50] ? worker_thread+0xa47/0xfb0 [ 633.466301][ T50] ? __pfx___dev_close_many+0x10/0x10 [ 633.471666][ T50] ? irqentry_exit+0x218/0x910 [ 633.476429][ T50] ? lockdep_hardirqs_on+0x7b/0x110 [ 633.481713][ T50] netif_close_many+0x249/0x660 [ 633.486553][ T50] ? __pfx_netif_close_many+0x10/0x10 [ 633.492001][ T50] unregister_netdevice_many_notify+0xb76/0x2140 [ 633.498492][ T50] ? lockdep_hardirqs_on+0x7b/0x110 [ 633.503962][ T50] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 633.510730][ T50] ? __pfx_nexthop_net_exit_rtnl+0x10/0x10 [ 633.516526][ T50] ? rtnl_is_locked+0x15/0x20 [ 633.521216][ T50] ? nexthop_net_exit_rtnl+0x258/0x2a0 [ 633.526658][ T50] ops_undo_list+0x391/0x8d0 [ 633.531239][ T50] ? __pfx_ops_undo_list+0x10/0x10 [ 633.536335][ T50] ? idr_destroy+0x218/0x290 [ 633.540903][ T50] ? do_raw_spin_unlock+0xf5/0x200 [ 633.546009][ T50] cleanup_net+0x572/0x810 [ 633.550444][ T50] ? __pfx_cleanup_net+0x10/0x10 [ 633.555363][ T50] ? rcu_is_watching+0x16/0xb0 [ 633.560121][ T50] ? process_scheduled_works+0x97a/0x1630 [ 633.565826][ T50] process_scheduled_works+0xc3d/0x1630 [ 633.571393][ T50] ? __pfx_process_scheduled_works+0x10/0x10 [ 633.577360][ T50] ? assign_work+0x3cf/0x5d0 [ 633.582443][ T50] worker_thread+0xa47/0xfb0 [ 633.587043][ T50] kthread+0x38b/0x480 [ 633.591111][ T50] ? __pfx_worker_thread+0x10/0x10 [ 633.596207][ T50] ? __pfx_kthread+0x10/0x10 [ 633.600790][ T50] ret_from_fork+0x514/0xb70 [ 633.605379][ T50] ? __pfx_ret_from_fork+0x10/0x10 [ 633.610469][ T50] ? __switch_to+0xc89/0x1420 [ 633.615129][ T50] ? __pfx_kthread+0x10/0x10 [ 633.619697][ T50] ret_from_fork_asm+0x1a/0x30 [ 633.624446][ T50] [ 634.722813][ T50] Shutting down cpus with NMI [ 634.728559][ T50] Kernel Offset: disabled [ 634.733029][ T50] Rebooting in 86400 seconds..