last executing test programs: 6m54.20467007s ago: executing program 3 (id=414): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_udp(0xa, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x3, 0x3, &(0x7f0000000100)=@framed={{0x62, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0x76}}, &(0x7f0000000140)='GPL\x00'}, 0x90) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000640)={'ip6tnl0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x0, 0x2}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_DQ_RATE_ESTIMATOR={0x8, 0xc, 0x1}]}}]}, 0x3c}}, 0x20008000) connect$packet(0xffffffffffffffff, &(0x7f0000000740)={0x11, 0x1a, r2, 0x1, 0xf, 0x6, @broadcast}, 0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_DATA={0x10, 0x5, 0x0, 0x1, [{0xa}]}]}}}]}, 0x44}}, 0x0) r5 = socket$inet6(0xa, 0x800, 0x7) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000880)=@raw={'raw\x00', 0x3c1, 0x3, 0x318, 0x0, 0x18c, 0x203, 0x0, 0x19030000, 0x248, 0x2e0, 0x2e0, 0x248, 0x2e0, 0x7fffffe, 0x0, {[{{@uncond, 0x300, 0xf0, 0x158, 0x0, {0x1000000}, [@common=@unspec=@limit={{0x48}, {0x2000007a, 0x0, 0x40, 0x8, 0xe6, 0x75800a43, 0xfffffffffffffff9}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x15, 0x8, 0x6, 0x465, 'syz1\x00', 'syz0\x00', {0x1}}}}, {{@ipv6={@remote, @loopback, [0xff, 0xffffffff, 0xff, 0xffffffff], [0xffffff, 0xffffff00, 0xff000000, 0xffffff00], 'nr0\x00', 'bond_slave_1\x00', {}, {}, 0x33, 0x0, 0x3, 0x3d}, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz0\x00', {0x6cb}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x378) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x14, 0x31, 0x9, 0x70bd29, 0xfffffffc, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x30046051}, 0x4080040) 6m53.896516322s ago: executing program 3 (id=421): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x33, &(0x7f0000000040)=0x80000000, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f0000000100)="05804ab382844306d758e620b9dc", 0x0, 0x12c4, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$inet_mptcp(0x2, 0x1, 0x106) socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newsa={0x140, 0x10, 0x401, 0x0, 0x0, {{@in=@local, @in=@rand_addr=0x64010101, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x73}, {@in=@local, 0x4d2, 0x32}, @in=@remote, {0x7fffffffffffffff, 0x7fffffffffffffff, 0x7fffffffffffffff, 0x7fffffffffffffff}, {0x80}, {0x0, 0x0, 0x3}, 0x0, 0x0, 0x2, 0x5, 0x9, 0x9}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @sa_dir={0x5, 0x21, 0x1}]}, 0x140}, 0x1, 0x0, 0x0, 0x20040014}, 0x0) syz_emit_ethernet(0x30, &(0x7f0000000300)={@local, @remote, @void, {@ipv4={0x800, @esp={{0x5, 0x4, 0x0, 0x0, 0x22, 0x0, 0x0, 0x40, 0x32, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @local}, {0x4d2, 0xffff}}}}}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00'}) 6m53.798547675s ago: executing program 3 (id=424): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x3, &(0x7f00000018c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000001900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffff9}, 0x94) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000001940)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000001980)={r0, r2}, 0x10) syz_emit_ethernet(0xfdef, &(0x7f00000019c0)={@local, @local, @void, {@ipv6}}, 0x0) (async) r3 = socket$inet6(0xa, 0x2, 0x0) (async, rerun: 64) r4 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) sendmsg$nl_route(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001540)={&(0x7f0000001580)=ANY=[@ANYBLOB="600000001000010600000000000000000000000000000000000000000000001e0d0003006261726520f5181f4d85681a300012000c00010062617265756470002000020006000100b5120000060002"], 0x60}}, 0x20008000) bind$inet6(r3, &(0x7f0000000440)={0xa, 0x4e20, 0x0, @empty}, 0x1c) (async) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r5, 0x29, 0x36, &(0x7f0000000480)=ANY=[], 0x8) (async) sendto$inet6(r5, 0x0, 0x0, 0x0, &(0x7f00000014c0)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) (async) recvmmsg(r3, &(0x7f0000001500)=[{{0x0, 0x0, 0x0}, 0xb041}], 0x1, 0x2, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x20, 0x4, &(0x7f00000003c0)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0xc}]}, &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001ac0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000001b80)=ANY=[@ANYBLOB="18000000000000000000000008"], 0x0, 0x10000, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x24}, 0x94) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001bc0)={0x6, 0x3, &(0x7f0000001c80)=ANY=[@ANYBLOB="1800000003000000000000000000000095"], &(0x7f0000001cc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20000000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001d00)={r7, 0x0, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x63, 0x0, &(0x7f0000001d80)='\x00', 0x0}, 0x48) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000001600)=@base={0xa, 0x16, 0xb4, 0x7f}, 0x48) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001680)={0x3, 0x0, 0x0, 0x0, 0x8}, 0x94) r8 = openat$cgroup(0xffffffffffffffff, &(0x7f0000001dc0)='syz1\x00', 0x200002, 0x0) r9 = openat$cgroup_ro(r8, &(0x7f0000001740)='blkio.bfq.dequeue\x00', 0x275a, 0x0) write$cgroup_subtree(r9, &(0x7f0000001780)=ANY=[], 0x10448) (async, rerun: 64) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r11 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001780), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_ADD_DEV(r10, &(0x7f0000001a80)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001a40)={&(0x7f0000001e00)=ANY=[@ANYBLOB="40ef4394d8a45a000000d3bc347b275ffff80e13245299", @ANYRES16=r11, @ANYBLOB="000228bd7000fbdbdf252a000000060006000300001e050037004b4000000c000500000000000000000006000600fcff000006000400a1aa0000"], 0x40}}, 0x80c0) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r9, 0x0) (async) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000017c0)={0xffffffffffffffff, 0x0, 0x0}, 0x20) (async, rerun: 32) sendmsg$nl_generic(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501"], 0x14}}, 0x44014) (rerun: 32) recvmmsg(r6, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000004c0)=""/4078, 0xe5c}, {&(0x7f0000000100)=""/120, 0x78}, {&(0x7f0000000180)=""/226, 0xe2}], 0x3}, 0x5}], 0x1, 0x2, 0x0) 6m53.4033342s ago: executing program 3 (id=432): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$ETHTOOL_MSG_WOL_SET(0xffffffffffffffff, 0x0, 0x0) r2 = socket$tipc(0x1e, 0x2, 0x0) ioctl$BTRFS_IOC_SEND(r0, 0x40489426, &(0x7f0000000440)={{r1}, 0x2, &(0x7f0000000400)=[0x5, 0x0], 0x6, 0x5, 0x1}) bind$tipc(r2, 0x0, 0x0) bind$tipc(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000004c0), r4) sendmsg$NLBL_MGMT_C_ADD(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=ANY=[@ANYBLOB='0 \x00', @ANYRES16=r5, @ANYBLOB="f78c00000000000000000100000008000200030000001200010076657468305f6d616376746170000000"], 0x30}}, 0x0) sendmsg$netlink(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002e000100000000000000000008000000", @ANYRES32, @ANYBLOB="0b000080976b6408686030001400018099"], 0x38}], 0x1}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a01040000010000000000000000010900010073797a31000000002c0004802800018007000100637400001c00020500030001000000080002400000000908000140000000090900020073797a3200000000140000001100010000000000000000000200000a"], 0x80}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000640)={'veth0_vlan\x00', 0x0}) r8 = gettid() r9 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r9, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="4400000010000304f9fff2ffbedbdf2500007400", @ANYRES32=r7, @ANYBLOB="089805000750050008001300", @ANYRES32=r8], 0x44}, 0x1, 0x0, 0x0, 0x44882}, 0x4000010) sendmsg$AUDIT_SET(r3, &(0x7f00000007c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x3c, 0x3e9, 0x300, 0x70bd2b, 0x25dfdbfd, {0x0, 0x1, 0x2, r8, 0x76df, 0x3, 0x5, 0x7, 0x0, 0x2, 0x49}, ["", "", ""]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x24000815) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000002c0)={@map, 0x36, 0x6595d904020e1262, 0xee30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) syz_emit_ethernet(0x5e, &(0x7f0000000240)=ANY=[@ANYBLOB="e33110495bfdaaaaaaaaaa0086dd60cb653e00283aff000000000000000000000000a81c2f00000000ff020000000000000000000000000001890090780000000020010000000000000000000000000000fc0100"/94], 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000340)=@newlink={0x30, 0x10, 0x503, 0x4, 0xffffffff, {}, [@IFLA_TARGET_NETNSID={0x8}, @IFLA_NET_NS_FD={0x8}]}, 0x30}}, 0x0) 6m52.995988767s ago: executing program 3 (id=439): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) r1 = accept$phonet_pipe(r0, &(0x7f0000000000), &(0x7f0000000040)=0x10) connect$phonet_pipe(r1, &(0x7f0000000480)={0x23, 0x2, 0x6, 0x81}, 0x10) sendmsg$key(0xffffffffffffffff, &(0x7f0000000440)={0x3, 0x0, &(0x7f0000000600)={&(0x7f00000006c0)=ANY=[@ANYBLOB="020300030e000000000700000000000004000900a000000001d78771b90bd8a3b4914783c58777003d5b953800000000030006000000000002000000000000000009000000000000020001"], 0x70}, 0x1, 0x7}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {}, {0x8, 0x10}}}, 0x24}}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000940)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000a00)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f0000000a40), 0x40000000000009f, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0x8, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32, @ANYBLOB="00000000004aae2f5c03000000000000850000000d000000b70000000000000095"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000080)=@bpf_lsm={0x6, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000180)='GPL\x00'}, 0x80) r4 = bpf$ITER_CREATE(0xb, &(0x7f00000001c0)={r3}, 0x8) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb01001800000000000000200000002000000004000000010000000000000104000000200000000100000000000001"], 0x0, 0x3c}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x7, 0x9, &(0x7f0000000340)=@raw=[@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xe}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}], &(0x7f00000003c0)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x2d, '\x00', 0x0, @fallback=0x33, r5, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r4, 0x1, 0x0, &(0x7f0000000400)=[{0x0, 0x1, 0xb, 0x6}], 0x10, 0x3ff}, 0x94) setsockopt$PNPIPE_ENCAP(r0, 0x113, 0x1, &(0x7f0000000680)=0x1, 0x4) 6m52.758821205s ago: executing program 3 (id=441): r0 = socket$nl_generic(0x10, 0x3, 0x10) unshare(0x400) r1 = socket$kcm(0x2, 0x922000000001, 0x106) setsockopt$sock_attach_bpf(r1, 0x1, 0xd, 0x0, 0x0) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000040000000400000004"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1f, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xfffffffffffffd38) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400), &(0x7f0000000440), 0xfffffff8, r3}, 0x38) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000480)={r4, 0x1}, 0xc) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x38, r2, 0x1, 0x2, 0xffffffff, {}, [@ETHTOOL_A_DEBUG_HEADER={0xffffffffffffffcf, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @ETHTOOL_A_DEBUG_HEADER={0x18}]}, 0x38}}, 0x4048086) 6m37.687773971s ago: executing program 32 (id=441): r0 = socket$nl_generic(0x10, 0x3, 0x10) unshare(0x400) r1 = socket$kcm(0x2, 0x922000000001, 0x106) setsockopt$sock_attach_bpf(r1, 0x1, 0xd, 0x0, 0x0) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000040000000400000004"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1f, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xfffffffffffffd38) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400), &(0x7f0000000440), 0xfffffff8, r3}, 0x38) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000480)={r4, 0x1}, 0xc) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x38, r2, 0x1, 0x2, 0xffffffff, {}, [@ETHTOOL_A_DEBUG_HEADER={0xffffffffffffffcf, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @ETHTOOL_A_DEBUG_HEADER={0x18}]}, 0x38}}, 0x4048086) 5.094469383s ago: executing program 5 (id=4075): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)) socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r0, &(0x7f0000000080), 0x12) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000100)={0x6, 0x4, 0x1a00}, 0x980) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) socket$packet(0x11, 0x2, 0x300) socketpair(0x1, 0x1, 0x0, &(0x7f00000000c0)) setsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000180)=0x7, 0x4) socket$kcm(0x10, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x3, 0x8, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f0000001780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f00000017c0)={@fallback=r1, r1, 0x2f}, 0x20) r2 = socket(0x10, 0x3, 0x0) write(r2, &(0x7f0000000580)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) 4.444007378s ago: executing program 5 (id=4079): mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1, 0x9, 0x10001, 0x9, 0x1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r1, &(0x7f0000000100), &(0x7f0000000140)=""/109}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r1, &(0x7f0000000200), &(0x7f0000000240)=@tcp6, 0x1}, 0x20) pipe(&(0x7f0000002740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$FS_IOC_FSGETXATTR(r2, 0x801c581f, &(0x7f0000000000)={0x7, 0xffff5e3d, 0x3, 0x1, 0x8}) 4.401717173s ago: executing program 4 (id=4081): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@getchain={0x24, 0x66, 0x0, 0x0, 0x2000}, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000010000104000000000100000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000280012800b000100697036746e6c00001800028014000300ff"], 0x48}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="3c00000010000104000000000001000000000000", @ANYRES32=r3, @ANYBLOB="000100006c3000001c0012800b000100697036746e6c00000c000280", @ANYBLOB], 0x3c}}, 0xeb64d656001f6f32) getsockname$packet(r2, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000380)=0x14) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="940000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000640012800b00010067656e657665000054000280050004000100000005000900000000000500090000000000050008000000000008000200e00000010800020064010102050009000100000005000a00000000000500040009000000050008000000000008000500", @ANYRES32=0x0, @ANYBLOB="08000300a5eb1e25"], 0x94}}, 0x0) 4.058447579s ago: executing program 1 (id=4084): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000002800010026bdf000fcdbdf2500000000"], 0x14}, 0x1, 0x0, 0x0, 0xadb093008d8e0f0b}, 0x10) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@private2, 0x0, 0x0, 0x103, 0x1}, 0x20) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) connect$802154_dgram(r2, &(0x7f0000000000)={0x24, @long={0x2}}, 0x8) close(r1) 4.057956351s ago: executing program 5 (id=4085): r0 = socket(0x10, 0x803, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@getchain={0x24, 0x66, 0x0, 0x0, 0x2000}, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="4800000010000104000000000100000000000000", @ANYRES32=r2, @ANYBLOB="0000000000000000280012800b000100697036746e6c00001800028014000300ff"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@newlink={0x70, 0x10, 0x401, 0x0, 0x100, {0x0, 0x0, 0x0, r2, 0x100, 0x306c}, [@IFLA_LINKINFO={0x50, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x40, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x3}, @IFLA_IPTUN_ENCAP_LIMIT={0x5, 0x6, 0x1}, @IFLA_IPTUN_FLOWINFO={0x8, 0x7, 0x100}, @IFLA_IPTUN_ENCAP_LIMIT={0x5, 0x6, 0x7}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0x4}]}}}]}, 0x70}}, 0xeb64d656001f6f32) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="61128c000000000061138a0000000000bf20000000000000070000000f0000003d030100000000009500ffb1000000006926000000000000bf6700000000000036000b000fff52004507000015300000d60600000ee60000bf050000000000003d63000000000000650700000200000007070000fbffffff1f75000000000000bf54000000000000070000000410f900bd430100000000009500000000000000050000000000000095000000000000001c15a3ce747c693a74b62fd0758b15f09429c09074bc4b2bd2dc480dd7a064b8673e2060162cc43bcba1060999eef9d60bb39d0af449deaa27ea949e8f9000d885deea2783835e29eba8546fc020c1966f8b5f32b095f566edf66b7751828da9dbd5b996b9e8d897e461c01c697671d100000000400036c17fb01dde179c1f26cac1c7b21bde7d1a55d6ebe700b3be005e47ef55e0dd81244b18590e000000000000356d82e43407a6d7fa94b21002f06cd247b126b6349ab62d7b07ba0a71a72145edade9941f49f300a8c8913e0e4ea9e4c77740ab3312edee62a4dc2fc85755d387d8a1bc8eb71fbe11b2216cc8d1f0160c237d929b49d828724b95555b459f4763c6222175c974be2f76fb5f330b015a68587a75c013000000000000000000000003000000000000d6ddc46e58eff8f4fbadfc6a3af8123b7f4240713a4c0cdc9d7820c4eb67cc0f8b5fe9258eeacb5776aebbab3d5c55020000006082778366dadfc36029633e0514cbcee1f3928970bde148c940434f33acd377cbad17673b2d30b6339255c98eba97efb4e9ac1f11be815dd6045592edcbee7f253ec74c7c1313505bd7ff8fd58b3a6569c91dbdef1df585aeaea7346a2a65caee5c85f9eddeeeee3c8a2e523c864ac430eb47cb4d0c8767b9d4125661b5a1a170c04b64da3a99ddb93bf14fae3ca2d1e882375b8dbac83978e136c34f90b33cc0eeb57debcfe26589efc08125d5d62a7e593c9738a50171adf051ea4f07e7e7e770c2016eeacbe8511afffffbea75759a1ea5404f5453c0b5c46c9700808c096cf8cf5223f341cbea3841b5cd224c1b381d56afebe9f99a00e3cd94dc0bb7af9e8709db487cc4d9b3b96723d69d512ddd57b0dee9b9f6ae80a502cce352098603e77f9ecced07fa25e99e9e415414c91f8bfd1c150570512f26c4ee34a64c131dce3800000000000000006c86287945bd8d258442870e000000000000000000000000f7e6a10de4bf7369b0d5b5373829b09bf5b7b34099b27ac7770fca449d4c4ca15f88b588b2429af2e1d1a4e1fa44cb80fcfae6e50d7e5b4675d7e0be706224f34e6eed553b40e2b897e73752fc7d1e4b0f4c5967eefd7448d5fde5841fa464a67267c631052bd7333769a4b8d19d4794357edce762e8136ab9d7ed34a72baffd849b90579b96b3"], &(0x7f0000000100)='GPL\x00'}, 0x48) 4.056702566s ago: executing program 4 (id=4086): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000600)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x80000001, 0x4, 0x32, 0x0, 0x2}, 0x9c) (async) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000006c0)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x1, 0xfffe, 0x0, 0x6, 0x8a}, 0x9c) (async, rerun: 32) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000940), 0x40082, 0x0) (rerun: 32) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000980)) (async, rerun: 64) ioctl$PPPIOCGUNIT(r2, 0x80047456, &(0x7f00000009c0)) (async, rerun: 64) sendto$inet6(r1, &(0x7f0000000780)="89", 0x1, 0x6d051, &(0x7f00000007c0)={0xa, 0x4e27, 0x200, @remote, 0xb}, 0x1c) (async, rerun: 32) ioctl$XFS_IOC_FD_TO_HANDLE(r0, 0xc038586a, &(0x7f00000002c0)={r0, &(0x7f0000000140)='syzkaller0\x00', 0x28000, &(0x7f0000000180)={@align=0xffffffff7fffffff, {0x6, 0x3, 0xffffffff, 0xb}}, 0x7, &(0x7f00000001c0), &(0x7f0000000280)=0x8004}) (rerun: 32) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000340), r3) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x6810000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x34, r4, 0x10, 0x70bd2c, 0x25dfdbfc, {{}, {}, {0x18, 0x17, {0x7, 0x65ae, @udp='udp:syz0\x00'}}}, ["", "", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x40080}, 0x1) (async) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x80000000000002, &(0x7f0000000a00)=0x79, 0x4) (async) bind$inet(r6, &(0x7f0000000a40)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r6, 0x0, 0x0, 0x200007fd, &(0x7f0000000a80)={0x2, 0x4e23, @local}, 0x10) (async) sendmmsg$inet(r6, &(0x7f0000000ac0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000bc0)=[{0x0}], 0x1}}, {{0x0, 0x0, &(0x7f0000000c00)}}, {{0x0, 0x0, &(0x7f0000000c40)=[{0x0}, {&(0x7f0000000c80)="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", 0x103}, {&(0x7f0000000dc0)="f14d2f9588ecd8f9a4816db9910586f4c9f73bfa7063d778472b1daca90692b69cb1033fd3d2066fa155a76d948e90eb3e77e752f90bfbc92d290840a6489629ffbb80e643fccd31b3cdc763801b9e4f9eaa3b07d87c86f152726c1c4019a60829dfe76594890fa95414c904a4c41d8f841e1db33da5a315cf87481c39109f83fabb9f208b528b580efb8f7ad01fedca2cd7941ea61e2d35076dd70365800511643a0688693e94779aed429703753eb9cc", 0xb1}], 0x3}}], 0x4, 0x40028d0) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0d0000000a0000000400000001"], 0x48) (async, rerun: 64) r9 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r9, 0x890b, &(0x7f00000005c0)) ioctl$sock_kcm_SIOCKCMCLONE(r9, 0x890c, &(0x7f0000000900)) r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r8, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000880)={0x54, r10, 0x1, 0x70bd29, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1f40, 0x8e, 0x2}, {0xc, 0x8f, 0x8}, {0xc, 0x90, 0x1}}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x48000) (async) sendmsg$nl_route(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=@newlink={0x50, 0x10, 0x44b, 0x0, 0x0, {0x7a}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_BR_AGEING_TIME={0x8, 0x8, 0xffffa888}, @IFLA_BR_VLAN_FILTERING={0x5, 0x7, 0x7}, @IFLA_BR_GROUP_ADDR={0xa, 0x14, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xd}}]}}}]}, 0x50}}, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r11, {0x0, 0x8}, {}, {0xa}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x20, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x1c, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x2}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_HWID={0x5, 0x4, 0xfe}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_DIR={0x5, 0x3, 0x1}]}]}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x220008e8}, 0x804) 3.801494349s ago: executing program 0 (id=4088): bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0), 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x16, 0x4, &(0x7f0000000040)=ANY=[@ANYRES32=0x0], &(0x7f0000000180)='syzkaller\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x40f00, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x80000000}, 0x94) sendmsg$MPTCP_PM_CMD_ANNOUNCE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xa00000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, 0x0, 0x20, 0x70bd26, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x1}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x30, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0xc}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1f}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}, @MPTCP_PM_ATTR_LOC_ID={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x8040}, 0x8001) 3.603746979s ago: executing program 5 (id=4089): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x14, 0x27, 0x1, 0x70bd28, 0x25dfdbff, {0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x24004910) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000380)={0x24, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x10001}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x5c90}]}, 0x24}}, 0x20014885) 3.36386014s ago: executing program 0 (id=4090): r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000240)=ANY=[@ANYBLOB="140100003b000100ff000000fcdbdf250301f280080018000300000014000100"], 0x114}], 0x1, 0x0, 0x0, 0x20044805}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a8c"], 0xb4}}, 0x0) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r2, &(0x7f0000001c40)={&(0x7f0000001b40)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001c00)={&(0x7f0000001b80)={0x60, 0x140f, 0x200, 0x70bd25, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x9, 0x45, 'umad\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_CHARDEV_TYPE={0xc, 0x45, 'ib_srpt\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x884}, 0x20000081) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000006000000040000000000000e0400000000000000000000000000000d000000000000000000000010040000000000000000000009030000000000000061"], 0x0, 0x52}, 0x28) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80}, 0x28) r4 = socket$inet_sctp(0x2, 0x5, 0x84) bpf$PROG_LOAD(0x5, &(0x7f0000001940)={0x6, 0x1c, &(0x7f0000001a00)=ANY=[@ANYBLOB="bf16000000000000b7020000ff8500007b2af8ff000000007b2af0ff000000007b2ae8ff000000007b2ae0fe000000007b2ad8ff000000007b2ad0ff000000007b2ac8ff000000007b2ac0ff00000000b702000002000000732ac0ff00000000b702000000000000632ac4ff00000000180200000a0000010000000000000000632accff00000000180200000a0000020000000000000000632ac0ff00000000bf61000000000000bfa200000000000007020000c0ffffffb7030000b7000000b7040000000000008500000045000000b70000000200000095"], &(0x7f0000001b00)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet_sctp_SCTP_AUTH_KEY(r4, 0x84, 0x17, &(0x7f0000000680)=ANY=[@ANYRES32=0x0, @ANYBLOB="020004b81f5157dc85bebcaaf886f1cfb83accdd6430533cf641e290b981c1f82ce068b9a0c552af630743b9a3851440e7f0c4c61c8379ad50c3f6d69b7d8b17ea5e25b3def2fdf512b1af41a1eeefabaa42843f3ef96368e6a56f0d61653fb38969580631db03539fc8b56b3ef1c6bec870670000000023f3bdacf75443f1eb63132027d9967a4526611861a41c82c66da9331044916b3bd5e730fa28084a265f59cb267828cefa18ebf52f61801c21dfc1e3bdfdae0671c9659bb7594b1c57ffb869eadabaaee2105c25c30e756dc67b"], 0xc) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r3, @ANYBLOB="01000000000000ec0000000000000000351700"/28], 0x5f) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="180000000000000000000000000000001850000000000020000000000000000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffff0, 0x0, 0x0, 0x0, &(0x7f0000000640)}, 0x9a) sendmsg$inet_sctp(r0, &(0x7f0000000000)={&(0x7f0000000040)=@in={0x2, 0x4e20, @loopback=0x7f0000fd}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)="db34", 0x2}], 0x1, &(0x7f0000000180)=ANY=[@ANYRESDEC=r1], 0x18, 0x240488d1}, 0x8c4) r6 = socket$vsock_seqpacket(0x28, 0x5, 0x0) connect$vsock_stream(r6, &(0x7f0000000140)={0x28, 0x0, 0xffffffff, @hyper}, 0x10) r7 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000640)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000001780)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f0000001800)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {0x0, 0x7ffe}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x20000002, 0x8, 0x1, 0x2, 0x2}, 0x5, 0x1, 0x80000000, 0x2, 0x7, 0x17, 0x4, 0x1e, 0x0, 0x800000e, {0x2000, 0x7fff, 0x225, 0x3, 0x9, 0x4}}}}]}, 0x78}}, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r7, 0x84, 0x1c, &(0x7f0000001880), &(0x7f00000018c0)=0x4) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000780)={{r3}, 0x0, 0xe, @unused=[0xfff, 0x7ff, 0x1, 0x10001], @subvolid=0x6}) r9 = socket$inet6(0xa, 0x3, 0xff) setsockopt$inet6_mreq(r9, 0x3a, 0x0, 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r5, 0x894b, &(0x7f0000001900)) 3.315284573s ago: executing program 2 (id=4091): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=@newtaction={0x18, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$vsock_stream(0x28, 0x1, 0x0) socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f00000001c0)={0x28, 0x0, 0x0, @host, 0x1}, 0x10) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_udp_int(r2, 0x11, 0x67, &(0x7f0000000000)=0x5e25, 0x4) setsockopt$inet6_udp_int(r2, 0x11, 0x65, &(0x7f0000000080)=0x3, 0x4) r3 = socket(0xa, 0x1, 0x0) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, 0x0) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x41, 0x0, 0x0) bind$can_j1939(r4, 0x0, 0x0) setsockopt$SO_J1939_ERRQUEUE(r4, 0x6b, 0x4, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000140)={'syztnl1\x00', 0x0}) sendto$inet6(r2, 0x0, 0x0, 0x400ad80, &(0x7f00000000c0)={0xa, 0x4c24, 0x78a2, @dev={0xfe, 0x80, '\x00', 0x22}}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000000100)=[{{0x0, 0x0, 0x0}, 0xb00}], 0x1, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0xe, 0x6, &(0x7f0000000880)=ANY=[@ANYBLOB="050000000000000071118400000000008510000002000000850000004800000095000000000000009500a50000008000"], &(0x7f0000000040)='syzkaller\x00', 0x5, 0xc3, &(0x7f0000000900)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x94) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x36, 0x0, 0x0) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000440)=0x10001, 0x4) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000a00)) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c40)={'dummy0\x00', 0x0}) r7 = gettid() r8 = socket(0x10, 0x803, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) sendmsg$nl_route(r8, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000d00)=ANY=[@ANYBLOB="4400000010000304f9fff2ffbedbdf2500007400", @ANYRES32=r6, @ANYBLOB="089805000750050008001300", @ANYRES32=r7, @ANYBLOB="08002c00050000001400030076"], 0x44}, 0x1, 0x0, 0x0, 0x44882}, 0x4000010) 3.173878427s ago: executing program 1 (id=4092): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000012c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xb000000}, {{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1c}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x4}, {0x3, 0x0, 0x3, 0xa, 0x2}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x4, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) 3.068428982s ago: executing program 0 (id=4093): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="aaaa69f608000000000000000000"], 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000780), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000007c0)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000800)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000008c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x5}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000e80)={&(0x7f0000000ec0)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x4, 0xfff3}, {}, {0x9, 0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) sendmsg$nl_route_sched(r2, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000f40)={&(0x7f0000000f80)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r4, {0xc, 0xc}, {0x0, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000fc0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000240)=@gettfilter={0x44, 0x2e, 0x800, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0xfff3}, {0x3, 0xffff}, {0x7, 0xb}}, [{0x8, 0xb, 0x4}, {0x8, 0xb, 0x5}, {0x8, 0xb, 0xf}, {0x8, 0xb, 0xf7fffff9}]}, 0x44}, 0x1, 0x0, 0x0, 0x4894}, 0x2) syz_genetlink_get_family_id$nl80211(&(0x7f00000010c0), r2) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x1, 0x0, &(0x7f0000000000)) r7 = socket$can_bcm(0x1d, 0x2, 0x2) r8 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x3c1, 0x3, 0x438, 0x228, 0x18c, 0x203, 0x0, 0x19030000, 0x368, 0x2e0, 0x2e0, 0x368, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x1e0, 0x228, 0x0, {}, [@common=@rt={{0x138}, {0x4, [0x3, 0x511e], 0x5df9b3d1, 0x2, 0x5, [@ipv4={'\x00', '\xff\xff', @loopback}, @dev={0xfe, 0x80, '\x00', 0x3e}, @empty, @empty, @private2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @local, @mcast1, @private0={0xfc, 0x0, '\x00', 0x1}, @loopback, @empty, @mcast2, @private1={0xfc, 0x1, '\x00', 0x1}], 0x13}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x1, 'syz0\x00', {0x9}}}}, {{@uncond, 0x0, 0xf8, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xb}}, @inet=@rpfilter={{0x28}, {0xc}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz1\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x498) sendmsg$can_bcm(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_TDLS_MGMT(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)={0x44, 0x0, 0x1, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r13}, @void}}, [@NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0x3}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_IE={0x4}, @NL80211_ATTR_TDLS_PEER_CAPABILITY={0x8, 0xcb, 0x10}, @NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5, 0x89, 0xd9}]}, 0x17}, 0x1, 0x0, 0x0, 0x10}, 0x0) r14 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000500), r10) sendmsg$NLBL_MGMT_C_ADD(r10, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRESDEC=r14, @ANYBLOB="01002cbf7000000000000200000008000c0001000000060001005d"], 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$NFNL_MSG_ACCT_GET(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000900)={0x14, 0x1, 0x7, 0x5, 0x0, 0x0, {0x1}}, 0x14}}, 0x0) sendmsg$NL80211_CMD_NEW_KEY(r11, &(0x7f0000000740)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x38, r12, 0x20, 0x70bd28, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "3a9be8aa4a4f5c39f1fb2abd5f"}]}, 0x38}, 0x1, 0x0, 0x0, 0x8084}, 0x0) 2.852300419s ago: executing program 5 (id=4094): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$XFS_IOC_PATH_TO_HANDLE(r1, 0xc0385869, &(0x7f00000001c0)={r0, &(0x7f0000000200)='\x19\xcdB\x00'/15, 0x101000, &(0x7f0000000040)={@_ha_fsid={[0x7ff, 0xd]}, {0x7, 0x7, 0x6, 0x80}}, 0x4, &(0x7f0000000080), &(0x7f00000000c0)=0x7}) write$bt_hci(r2, &(0x7f0000000340)={0x1, @write_eir={{0xc52, 0xf1}, {0x6, "d6ac0c6a097b87e096b06fb993506f44d8ff21abfff1d3b2c187cdf2f36dedcf8a9dfa43483604c1ad4b665a7e01ec58ce600abdc2ce81c261298abbb305d021ef90ab2365558448c76c2749d142a30fdf0b98373378b7815b1a6977096378503641dba504057d2fd0a3f56746abeadeeb9f1ae5413322be3f01a827458928fb0c4c1a79ae24b12c7b02c1515c5a633a722c34f07d6e3b139fc60bed9662fb6d3cf0816152abfee5452af130757b258fef6035f5e36bfb4b281a85c76ef51271a0fb338191a36f6ddc649553fd88360056c7edd5a93c6c76c72c9d6f6190d24b9e344fa3b164e87129dd603a2f1f3736"}}}, 0xf5) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001480)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}}, 0x20040084) 2.814556497s ago: executing program 4 (id=4095): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x478, 0x0, 0xffffffff, 0xffffffff, 0x120, 0xffffffff, 0x3a8, 0xffffffff, 0xffffffff, 0x3a8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x2}}, @common=@eui64={{0x28}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, [], [], 'erspan0\x00', 'gre0\x00', {}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x1, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'pim6reg\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x4d8) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), r0) sendmsg$IPVS_CMD_FLUSH(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)=ANY=[@ANYBLOB="14004bb5", @ANYRES16=r2, @ANYBLOB="270025bd7000ffdbdf2511000000"], 0x14}, 0x1, 0x0, 0x0, 0x28000000}, 0x40004) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFCONF(r3, 0x8912, &(0x7f0000000000)=@buf) setsockopt$kcm_KCM_RECV_DISABLE(r3, 0x119, 0x1, &(0x7f0000000040)=0x400, 0x4) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$igmp6(0xa, 0x3, 0x2) (async) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x478, 0x0, 0xffffffff, 0xffffffff, 0x120, 0xffffffff, 0x3a8, 0xffffffff, 0xffffffff, 0x3a8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x2}}, @common=@eui64={{0x28}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, [], [], 'erspan0\x00', 'gre0\x00', {}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x1, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'pim6reg\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x4d8) (async) syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), r0) (async) sendmsg$IPVS_CMD_FLUSH(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)=ANY=[@ANYBLOB="14004bb5", @ANYRES16=r2, @ANYBLOB="270025bd7000ffdbdf2511000000"], 0x14}, 0x1, 0x0, 0x0, 0x28000000}, 0x40004) (async) socket(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFCONF(r3, 0x8912, &(0x7f0000000000)=@buf) (async) setsockopt$kcm_KCM_RECV_DISABLE(r3, 0x119, 0x1, &(0x7f0000000040)=0x400, 0x4) (async) 2.463976137s ago: executing program 0 (id=4096): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) socket(0x11, 0x10000d, 0x4) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000000800)={0x0, {0x2, 0x0, @empty}, {0x4, 0x0, @loopback}, {0x2, 0x0, @remote}, 0x4, 0x0, 0x0, 0xfdffffffffffffff, 0x0, &(0x7f0000000880)='lo\x00', 0x5, 0x0, 0x3}) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000000940)={0x0, {0x2, 0xfffd, @empty}, {0x2, 0x4000, @loopback}, {0x2, 0x0, @private}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1}) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c0000001400010400060000fedbdf250a400000", @ANYRES32=0x1, @ANYBLOB="91040100000000010000008fc200000000000000dcdf86e782e8baa0a1704ebd87ddde73b3d43683ab2dba2d0c906686790095743f188705c9e8328262b226311c6f18ef15188eb8a9bdbc2ee72c6d9643e47a80db6d92458c20a414ec87"], 0x2c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r6, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f0000000280), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r6, 0x10e, 0x4, &(0x7f0000000380)=0x7, 0x4) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@newtaction={0x18, 0x31, 0x3d, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=@newtaction={0xcc, 0x30, 0xffff, 0x70bd27, 0x0, {}, [{0xb8, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x10000, 0x0, 0x0, 0x0, 0x0, {0x0, 0x2, 0x0, 0x0, 0x27}, {0x0, 0x0, 0x0, 0x0, 0xfffd}}}]]}, {0x4}, {0xfffffffffffffd8e}, {0xc, 0x8, {0x0, 0x2}}}}, @m_gact={0x48, 0x2, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x1}}]}, {0x4}, {0xc, 0x3}, {0xc}}}]}]}, 0xcc}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r9, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=ANY=[@ANYBLOB="400000000906810800000000000000000200ffff0900020073797a310000000008000940040000390500010007000000100008800c"], 0x40}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) sendmsg$nl_route_sched(r8, &(0x7f0000000680)={0x0, 0x1e5, &(0x7f00000006c0)={&(0x7f0000000700)=@deltaction={0x28, 0x31, 0x101, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}]}]}, 0x28}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@delchain={0x3c, 0x64, 0xf31, 0xfffffffb, 0x2, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_FLAGS_MASK={0x8, 0x30, 0x80}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) 2.1968939s ago: executing program 2 (id=4097): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x40000c0}, 0x0) (async) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r2, 0x0, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0x5c, 0x41, 0x1, 0x0, 0x0, {0x3, 0x1}, [@generic="0f000000", @typed={0x3a, 0x1, 0x0, 0x0, @binary="00112233445566778899aabb86dd2c00001c0000060001110000010101010253aa58fe6cbdf0357065ae44132403b1fd606412c3258e"}, @nested={0x4, 0x8002}, @nested={0x4, 0x8003}]}, 0x5c}}, 0x0) setsockopt$sock_int(r2, 0x1, 0x7, &(0x7f00000001c0)=0xdac, 0x4) (async) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000140)={0x1f, 0xffffffffffffffff, 0x1}, 0x6) (async) r5 = socket$inet_udp(0x2, 0x2, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) (async) sendmsg$IPSET_CMD_FLUSH(r1, &(0x7f0000000400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x5c, 0x4, 0x6, 0x401, 0x0, 0x0, {0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40488c4) (async) sendto$inet(r5, &(0x7f0000000200)="11223344", 0x4, 0x0, &(0x7f0000000300)={0x2, 0x4d2, @remote}, 0x10) 2.189672143s ago: executing program 4 (id=4098): r0 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000040), 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'wg0\x00', 0x0}) (async) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="040100001000010000000000000000000a0101010000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000bb000000002b00000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d78f299a000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000a000200000000000000000014000e"], 0x104}}, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000300)={{{@in=@local, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x4e22, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x4, 0xff}, {}, 0x0, 0x0, 0x1}, {{@in=@remote, 0x0, 0x2b}, 0xa, @in6=@empty, 0x0, 0x2}}, 0xe8) (async, rerun: 32) sendto$inet6(r4, 0x0, 0x0, 0x0, &(0x7f0000000400)={0xa, 0x1234, 0x0, @remote, 0x11}, 0x1c) (async, rerun: 32) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) (async) r6 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f0000000440)={'ip6gre0\x00', &(0x7f0000000480)={'ip6tnl0\x00', 0x0, 0x4, 0x3, 0x9, 0x8, 0x40, @mcast2, @local, 0x7, 0x700, 0x6, 0x5}}) (async) shutdown(r5, 0x0) listen(r5, 0xfff) r7 = openat$nci(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r7, 0x0, &(0x7f0000000540)=0x0) (async) ioctl$sock_inet6_udp_SIOCOUTQ(r4, 0x5411, &(0x7f00000007c0)) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nfc(&(0x7f0000000580), r9) sendmsg$NFC_CMD_DEV_UP(r9, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)={0x1c, r10, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r8}]}, 0x1c}}, 0x0) write$nci(r7, &(0x7f0000000680)=@NCI_OP_RF_INTF_ACTIVATED_NTF={0x1, 0x0, 0x3, 0x5, 0xc3, @a={0x6b, 0x2, 0x2, 0x0, 0x3e, 0x9, 0xfe, {0x8, 0x7a, "da3ade292e832638c027c71e919069e837445af79ebce7772f846b933318fc4d7ba6b0a4b2109e4b358df7a701606456166ee72b3c29b3be63c1c67dd9b61f77ede6ae880293fdc98ec1300a6230693499d11028ddcd308bb746782c59c25a4c0188d4c53612029597fc2064a2c4eec44868f7c28b1021a50a08", 0x2, 0x8}, 0x3, 0x5, 0x6, 0xf, 0x7b, "5ce72fccc05f5602332293fb87cbb4772f33fb91cd1ee43ce161c5eda8a511627d7c6e9f15177ba020ec81e58f74c05522469c3cea898b3b30f415c2d30d4f2706638d798a4897f8bbd147ac15bbc696eb0b6314941450dd8a06cf942c4604d065eb5ee7390899b6b2c0e2bbcd21663e0968a21e23c2161694974e"}}, 0x108) (async, rerun: 64) accept(r5, 0xfffffffffffffffd, 0x0) (rerun: 64) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@bridge_getneigh={0x28, 0x1e, 0x3c964e403b131b43, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x7048, 0x77219}, [@IFLA_MASTER={0x8, 0xa, r2}]}, 0x28}}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x20, 0x1c, &(0x7f0000000900)=ANY=[@ANYBLOB="bf16000000000000b7020000ff8500007b2af8ff000000007b2af0ff000000007b2ae8ff000000007b2ae0fe000000007b2ad8ff000000007b2ad0ff000000007b2ac8ff000000007b2ac0ff00000000b702000002000000732ac0ff00000000b702000000000000632ac4ff00000000180200000a0000010000000000000000632accff00000000180200000a0000020000000000000000632ac0ff00000000bf61000000000000bfa200000000000007020000c0ffffffb7030000b7000000b7040000000000008500000045000000b70000000200000095"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.116179221s ago: executing program 1 (id=4099): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x32600) r1 = socket(0x10, 0x80002, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1e, 0xe, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f00000009c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000a00)={0xfffffffc}, 0x8, 0x10, &(0x7f0000000a40)={0x0, 0x40000000}, 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a80)={r2, 0x18000000000002a0, 0x29, 0x0, &(0x7f0000000b00)="b90703600000f007049e0ff088471fffffe10ec53308633a77fbac141441e0022001be3e7d2a2007ff", 0x0, 0x104, 0xa000000, 0x10c, 0x0, &(0x7f0000000b40)="9209558f0c5fb25cd57f98113135c3171b8b331fbc04f0e6955a796ff8e3aae3cac46cec3030dfc999058aea02f0e6dcf2f9d480d328655aca003927bd50ed49d4843c8a0a2a4b26ceb747947200bd644c85e7a8a7d7cfce840c02a7d69c9e0b3290abbbf3131e1fa8bd8c3e5f19d5a491d3d4c1a0fe47de9eebaf073ac3da6256bdb681d18fbd607c9b0d710442bcf78bc36fd3c035812bde582a262bff0e4d6181c818fccf542868c6e602d97bea23a101955dc76bcc984142ab305387aa348566d688edd291a3e9d08952adbdf60462bb7f7faebcdfccf17115708b0d73d0f3a469ce7d8374219b3f92c92bcec4958d474bb281c26691949d054b784a5866f081e53eb9cfd7", &(0x7f0000000c80), 0x3, 0x0, 0x4}, 0x19) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x48}}, 0x400400c0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="280000001e0001"], 0x28}}, 0x0) sendmmsg$alg(r1, &(0x7f0000000200), 0x492492492492627, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) setsockopt$inet_udp_int(r0, 0x11, 0x67, &(0x7f00000000c0)=0x2, 0x4) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="140100001400210200000000fcdbdf2502"], 0x114}], 0x1}, 0x0) 1.947558936s ago: executing program 1 (id=4100): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001b40)=ANY=[@ANYBLOB="4000000010001b1d00000000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="04000000000000001800128000000100767469000cb531a2d700028008004aab7f9b9a0500ac1414bb08001f"], 0x40}}, 0x0) (async) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000000)={'sit0\x00', &(0x7f0000000080)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x5, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0xd1, 0x0, 0x0, @multicast2, @broadcast}}}}) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f5, &(0x7f00000000c0)={'syztnl0\x00', 0x0}) (async) r3 = socket$inet(0x2, 0x1, 0x6) (async) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000100)={0x32, @loopback, 0x1500, 0x0, 'wlc\x00', 0x3d, 0x0, 0x36}, 0x2c) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000009c0)="074276dcbab2f8bfcc63bbe613121e61166d140ee803db361f1191780779f0c0c5f2abe65020c6483e47d1f0e1bbcb4faffb4adf71a1cdddf0092fb473d2cc352c90615d0e9993292c6f7b33fcdf96e85de55411791d49c9fadff29fc2e2877ed97d0c53ab30e5b17ed180fd46cefe4f2fdcfddab3750ed6dd752bd3320f422949c344fee4ebb7166c838f56b7acaa14fed4621fde2a81ea6212eb923b9b906832a9c5ad020d8c55757f35b2b242b5b6bc9d37b72ff87a6b0b1801ab3809bb8867", 0xc1}], 0x1}, 0x8891) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$bt_hci(r4, 0x84, 0x7d, &(0x7f0000000ac0)=""/4127, &(0x7f0000001b00)=0x101f) connect$inet(0xffffffffffffffff, 0x0, 0x0) connect(r3, &(0x7f00000001c0)=@in={0x2, 0x1500, @loopback}, 0x10) (async) bind$inet6(0xffffffffffffffff, 0x0, 0x0) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) listen(0xffffffffffffffff, 0x0) (async) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="7c010000130001010000000000000000640101020000000000000000000000006401010200"/48, @ANYRES16, @ANYRES32, @ANYRES16], 0x17c}, 0x1, 0x0, 0x0, 0x20048000}, 0x4000880) (async) r5 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r5, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0x201}}, @init={0x18, 0x84, 0x0, {0x9, 0x7, 0xd, 0x434}}], 0x48}, 0x0) sendmsg$ETHTOOL_MSG_RINGS_GET(0xffffffffffffffff, &(0x7f0000001f40)={&(0x7f0000001d40)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001f00)={&(0x7f0000001dc0)={0x138, 0x0, 0x20, 0x70bd26, 0x25dfdbfe, {}, [@HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x38b991f9a890c644}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x138}}, 0x44008800) (async) syz_emit_ethernet(0x4a, &(0x7f0000001f80)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd600a843500140601fe8000000000000000000000000000bbfe8000000000000000000000000000aa00004e22210e3afd7d94093bfc4eeb61bc4f1110ff6e64d31e0bed570c7e7a8a5d9f37c50b36013ca36aaa79def46c336bfa8d42cdf765b123e0c6086cea5f30366246ba7a890990c2dbe494baa8411159da66811dec131c00827f3c33abf691c7ce612f64591f71c75dfd1b63058c37ece3b4305f3908aa7adeed270b4955801c41a15781b63db3b2a0fce0f98355d0b369a88689d8086517e2c1e0e3180e8a4bf9fad09e1b23ff367566a8ba49c850ec5609e07e2539ae6146fb19673fbd64f1b335", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5040000090780000"], 0x0) (async) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x48241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000001bc0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000001c00)={'syzkaller1\x00', @link_local}) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000001c40)={'ip_vti0\x00', &(0x7f0000001c80)={'ip_vti0\x00', 0x0, 0x80, 0x10, 0x4000009, 0x4, {{0x5, 0x4, 0x3, 0x8, 0x14, 0x67, 0x0, 0xf7, 0x2f, 0x0, @multicast2, @multicast2}}}}) (async) write$tun(r6, &(0x7f0000001cc0)=ANY=[@ANYBLOB="70000000ffff00004000002f90780000655800189078040000000000000086dd"], 0xfdef) (async) r7 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000000500)=@mangle={'mangle\x00', 0x44, 0x6, 0x418, 0x2e0, 0x2e0, 0x0, 0x168, 0x2e0, 0x380, 0x380, 0x380, 0x380, 0x380, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x1, 0xc}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffff, [0x0, 0x3, 0x0, 0x3]}, {0xffff, [0x2, 0x6, 0x0, 0x2, 0x4]}}}}, {{@uncond, 0x0, 0x70, 0xe0}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x528d, 0x800, 0x2, 0x1, 0x0, "7bb6e1db6012e8a415416c3a753950639a046f7874289da47089813ebcebd75818b373a6560a0fa4c1513e591be9c70fcb89ed995a5b8d8e2e4f54dabf205fa3"}}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x11}, @empty, 0x0, 0xffffff00, 'syzkaller0\x00', 'pimreg0\x00', {}, {}, 0x0, 0x2, 0x10}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@local, @broadcast, 0xff000000, 0xff, 'ip6gre0\x00', 'vlan1\x00', {}, {}, 0x99, 0x3, 0xd}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x7ffe, 0xe29e, @multicast1, 0x4e34}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x478) (async) setsockopt$inet_tcp_int(r3, 0x6, 0xc, &(0x7f00000004c0)=0x9, 0x4) (async) ioctl$XFS_IOC_SET_RESBLKS(r7, 0xc0105872, &(0x7f0000000980)={0xffffffffffffffff, 0x4}) 1.596615086s ago: executing program 2 (id=4101): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1c0000000400000008000000000000000100"/48, @ANYRES32=r0, @ANYBLOB="0100000002"], 0x40) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c00)={0x11, 0xf, &(0x7f0000000240)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x86}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000002c0)='GPL\x00', 0x5, 0x0, 0x0, 0x41000, 0x1e}, 0x94) (fail_nth: 50) 1.140073974s ago: executing program 0 (id=4102): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x3, [@enum64={0x7, 0x3, 0x0, 0x13, 0x0, 0x5, [{0x2, 0x9, 0x2}, {0xc, 0x0, 0x2}, {0x6, 0xc}]}]}, {0x0, [0x0]}}, &(0x7f0000000280)=""/88, 0x4b, 0x58, 0x1, 0x8, 0x10000}, 0x28) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2d}, 0x90) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_DEFER_SETUP(r4, 0x112, 0x7, &(0x7f0000000a40), &(0x7f0000000a80)=0x4) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000500)={'syzkaller1\x00', 0x0}) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000540)={0x3, 0x0}, 0x8) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000580)={r3, r6, 0x25, 0x0, @val=@target_btf_id=r7}, 0x14) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x18, 0x9, &(0x7f00000005c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@map_idx_val={0x18, 0xb, 0x6, 0x0, 0xb, 0x0, 0x0, 0x0, 0xc}, @map_val={0x18, 0x5, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0xa}, @cb_func={0x18, 0xb, 0x4, 0x0, 0x3}]}, &(0x7f0000000640)='syzkaller\x00', 0x6, 0x42, &(0x7f0000000680)=""/66, 0x40f00, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000700)={0x9, 0x4}, 0x8, 0x10, &(0x7f0000000740)={0x5, 0x10, 0x10000, 0x6}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd}, 0x94) r9 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000840)={0x0, 0x4, 0x10}, 0xc) r10 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000008c0)=@o_path={&(0x7f0000000880)='./file0\x00', 0x0, 0x30, r0}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0xe, 0x5, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3e0}, [@map_fd={0x18, 0x4, 0x1, 0x0, 0x1}]}, &(0x7f0000000140)='GPL\x00', 0x8, 0x32, &(0x7f0000000180)=""/50, 0x41000, 0x1, '\x00', r1, @sk_skb=0x5, r2, 0x8, &(0x7f0000000340)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000380)={0x0, 0x5, 0xfffffff9, 0x80000001}, 0x10, r7, r8, 0x3, &(0x7f0000000900)=[r9, r10], &(0x7f0000000940)=[{0x1, 0x5, 0x6, 0xb}, {0x5, 0x3, 0xd}, {0x2, 0x5, 0x4, 0x8}], 0x10, 0x2}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r11, @ANYBLOB="0800a0009e09000008009f000400000008002600800900000800a1000519"], 0x3c}}, 0x0) 1.13820384s ago: executing program 2 (id=4103): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000e00)={&(0x7f0000000c40)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x3, [@struct={0x2, 0x1, 0x0, 0x3, 0x0, 0x0, [{}]}]}, {0x0, [0x0]}}, 0x0, 0x33, 0x0, 0x1}, 0x28) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f00000000c0)={0x3, &(0x7f0000000100)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x28, 0x0, 0x0, 0xeffff034}, {0x16}]}, 0x10) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000240)) ioctl$PPPIOCSMAXCID(r2, 0x40047451, &(0x7f0000000280)=0x8) ioctl$PPPIOCSFLAGS1(r2, 0x40047459, &(0x7f00000002c0)=0x4) pwritev(r2, &(0x7f0000000300)=[{&(0x7f0000000340)="00214500002c00000000400600000a0000010a000002005000500000000100000001601003f60000000001010101", 0x2e}], 0x1, 0x6, 0x0) pwritev(r2, &(0x7f0000000380)=[{&(0x7f00000003c0)="00214500001400000000400600000a0000010a000002005000500000ffff00000001683003e80000e40201010101", 0x2e}], 0x1, 0x3, 0x0) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)="ed8769cb", 0x4}], 0x1}, 0x0) r3 = gettid() r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000040)=0xb3fa, 0x4) syz_open_procfs$namespace(r3, &(0x7f0000000000)='ns/time\x00') 997.94278ms ago: executing program 5 (id=4104): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000700)={'syzkaller0\x00', 0x7101}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) close(r4) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000780)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000c40)=@newqdisc={0x8c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xffe0}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x5c, 0x2, {{0x7, 0x3, 0x6364, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_CORRUPT={0xc, 0x4, {0x4, 0xb18}}, @TCA_NETEM_DELAY_DIST={0x32, 0x2, "f6c0fb91a9709ae1edb4940657362808fd5025333309baf83a4a478c6a2573590f9f2755553b30bfcda41dc6f85a"}]}}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000940)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b92a, 0x25dfdc01, {0x0, 0x0, 0x0, r6, {}, {0xc, 0xb}, {0xffff, 0xfff1}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0x7}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x240048e4}, 0x4890) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000980)={'syzkaller0\x00', @broadcast}) r7 = socket$kcm(0x11, 0x3, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000009c0)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f0000000a00), 0x56) sendmsg$kcm(r7, &(0x7f0000000a40)={&(0x7f0000000a80)=@xdp={0x2c, 0x0, r9, 0x3e}, 0x80, &(0x7f0000000b00)=[{&(0x7f0000000b40)="27030200592b14120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) getsockopt$IPT_SO_GET_ENTRIES(r2, 0x0, 0x41, 0x0, &(0x7f0000000240)) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) r11 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r11, 0x6, 0x25, &(0x7f0000000b80), 0x4) syz_80211_inject_frame(&(0x7f0000000440)=@device_b, &(0x7f0000000480)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f00000004c0)={0x0, 0x2faf080}, &(0x7f0000000500)) syz_80211_inject_frame(&(0x7f0000000540)=@device_b, &(0x7f0000000580)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f00000005c0)={0x0, 0x2faf080}, &(0x7f0000000600)) syz_80211_inject_frame(&(0x7f0000000640)=@device_b, &(0x7f0000000680)=@mgmt_frame=@assoc_resp={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) r12 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$netlink(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000280)={0x114, 0x27, 0x1, 0x0, 0x0, "", [@nested={0x101, 0x35, 0x0, 0x1, [@generic="1c656e78d5e39beda6b6b59e88fd3b8cc30c584bd6a4f8c482adf628a73140ab4c3c1c9b09978cdb3f4dc35b04eb34cb88c37dcd1bb18230d16da9a9bb724d57844e7d24fc78b6d59f2cc26a71ab5229ccd11879b03781fd88a82ea273c1376b767ab5c44b81b166fba28e38aa7dd465418efbf784db1969a13134389bf850e963c0e257091a6a157fecd7dc6e88d5b957a5738be1f78623c35d6b11f10e474bcb4560225c346219fe093da71425fb2f2cf0fc049906056379d1d50ce4b92ba89892eb353684643ea3ea549753effd4861da1c2137dba9df1ca692ce0599ec59b6e7435dca9b8fa089206136aa63be49c9656f88163462f8d033ed929e"]}]}, 0x114}], 0x1}, 0x0) 897.536063ms ago: executing program 4 (id=4105): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = accept$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000240)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@ipv6_newroute={0x44, 0x18, 0x1, 0x70bd2c, 0x25dfdbfc, {0xa, 0x80, 0x0, 0x0, 0xff, 0x0, 0xff, 0x0, 0x400}, [@RTA_OIF={0x8, 0x4, r3}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x3}, @RTA_ENCAP={0x18, 0x16, 0x0, 0x1, @SEG6_IPTUNNEL_SRH={0xb, 0x1, {{0x1, {0x5c, 0x0, 0x4, 0x0, 0xff, 0x58, 0x7}}}}}]}, 0x44}}, 0x0) (async) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000280)={@empty, @private2, @local, 0x6, 0x0, 0x9, 0x0, 0x3, 0x4010200}) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f0000000000)={@private1={0xfc, 0x1, '\x00', 0x1}, @private0, @rand_addr=' \x01\x00', 0x6, 0x3, 0x7fff, 0x400, 0x5, 0x1000090}) (async) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x1a, &(0x7f0000000300)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x7}, {}, {}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @ldst={0x2, 0x2, 0x3, 0x7, 0x9, 0xffffffffffffffff, 0xfffffffffffffffc}, @ldst={0x1, 0x3, 0x1, 0x1, 0x4, 0x4, 0x10}, @func={0x85, 0x0, 0x1, 0x0, 0x2}, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x7}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000400)='GPL\x00', 0x2, 0x0, 0x0, 0x1e00, 0x72, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000440)={0x1, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000480)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff], &(0x7f00000004c0)=[{0x2, 0x1, 0x6}, {0x5, 0x2, 0xb, 0xa}, {0x1, 0x4, 0x3, 0x5}], 0x10, 0x80000001}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001800)={r4, 0x0, 0xea, 0x5a, &(0x7f00000005c0)="b2df13f6e798b06e0965713ea0835d8be0ff34142d08cc6d030cdb36e3b4dafd60721f62d1e39786ec49c997cd5e62ebe6373fd36a0bdc7f0318a41f25b7dd09b1e1d137c15f6e7bc8b59729f20f42fedc093ed7c183db68b7453bce6f6552b8c5a85e377136afa98cf4f7e4a893da71ad7172ec5e7e94bc4fdf89bb570d7d1a274e9b044d1c9e0a12ed36232b6a2c80d6972a6287c5dd24e46beb114c4f11089a79573ef535cff296d295b4d0f4ac7cebe6561e027158a671eade74883f7e4be4552369b4e0e489a7e0d588d41ceb073ae4c0314eec5446831f2dee77b617b0049e8e76cad48dfe58ae", &(0x7f00000006c0)=""/90, 0x5, 0x0, 0xbf, 0x1000, &(0x7f0000000740)="0a91424b4939a2c565ba71b84ba562b7e535ea312fa07d306ec04003140ba757f899e3d7e239178561289208264a3d00d5946dba783734d75d392b2f0b1b8fe58e573a4699b4d5bd7f94dcf87c78e53c42de2ed48cc8f405faa330f01b99f9aac297a68946cfb28c0f003db9af11051d06c4ccd493616d1eb87df43d7eee2fe6f3eba87abed22efcf0324416d6eaf35b42cdd8fd683f616e2cce10356ba020182becbee0062d8194f3058f05ecf42e206bf4379af2e220dbcbecc3dbfd9be2", &(0x7f0000000800)="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", 0x4, 0x0, 0xfffffff8}, 0x50) (async) ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6611) 791.954708ms ago: executing program 1 (id=4106): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=ANY=[@ANYBLOB="0a00000016000000b30000007f"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000000000080851000000600000018100000", @ANYRES32=r0, @ANYBLOB="00000000000000006600000000000000180000000000000000000000000000009500000000000000360a000000000006180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222}, 0x78) (async) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454ca, &(0x7f0000000100)=ANY=[@ANYBLOB='..']) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x4000010, r1, 0x0) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/ipc\x00') openat$cgroup(r2, &(0x7f0000000340)='syz1\x00', 0x200002, 0x0) 539.461725ms ago: executing program 2 (id=4107): socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getsockname$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x5) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r0, 0x110, 0x5, &(0x7f00000000c0)=[0x4, 0x3], 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000140)={'syzkaller0\x00', 0x2}) r3 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000001c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=@newtfilter={0x54, 0x2c, 0xd3f, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0xc, 0x4}, {0x0, 0x9}, {0x10, 0x9}}, [@filter_kind_options=@f_fw={{0x7}, {0x28, 0x2, [@TCA_FW_CLASSID={0x4, 0x1, {0xfff1, 0xc}}, @TCA_FW_MASK={0x8, 0x5, 0x1ff}, @TCA_FW_INDEV={0x14, 0x3, 'bridge_slave_1\x00'}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x84}, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x5c, 0x0, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={'\x00', '\xff\xff', @multicast1}}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}]}, 0x5c}, 0x1, 0x620b}, 0x0) 427.789301ms ago: executing program 4 (id=4108): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f00000002c0)={0x0, 0xfffffffffffffed9, &(0x7f0000000080), 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4000014) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)={0x28, 0x18, 0x1, 0x0, 0x0, "", [@nested={0x18, 0x0, 0x0, 0x1, [@typed={0x14, 0x1, 0x0, 0x0, @ipv6=@local}]}]}, 0x28}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000200)=""/141, 0x8d}, {&(0x7f0000001a40)=""/4140, 0x102c}, {&(0x7f00000017c0)=""/231, 0xe7}, {&(0x7f00000018c0)=""/182, 0xb6}, {&(0x7f0000001980)=""/165, 0xa5}, {&(0x7f0000000440)=""/211, 0xd3}, {&(0x7f0000000540)=""/108, 0x6c}], 0x7}, 0x10102) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'dvmrp1\x00'}) 223.811605ms ago: executing program 1 (id=4109): r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000180)=ANY=[@ANYBLOB="0a00000016000000b30000007f"], 0x48) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="020000"], 0x10}}, 0x0) (async) r2 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000440)=@generic={&(0x7f0000000400)='./file0\x00', 0x0, 0x18}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{r0}, &(0x7f00000003c0), &(0x7f0000000480)=r2}, 0x20) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000a00)={0x14, 0x23, 0x301, 0x270bda5, 0x259fdbfa, {0x1}}, 0x14}}, 0x80) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000780)={'veth1_to_batadv\x00', &(0x7f00000007c0)=@ethtool_modinfo={0x42, 0x5, 0xf}}) (async) r5 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r1, 0xc0385868, &(0x7f0000000600)={r5, &(0x7f0000000500)='GPL\x00', 0x0, &(0x7f0000000540)={@align=0x8000, {0x9, 0x7f, 0x0, 0xa6cc}}, 0x2, &(0x7f0000000580)={@_ha_fsid}, &(0x7f00000005c0)}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)=@mpls_delroute={0x24, 0x19, 0x9, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_TTL_PROPAGATE={0x5, 0x5}]}, 0x24}}, 0x0) getsockopt$bt_BT_FLUSHABLE(r6, 0x112, 0x8, &(0x7f0000000640)=0x6, &(0x7f0000000680)=0x4) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000800)={&(0x7f0000000840)=ANY=[@ANYBLOB="9feb0100180000000000000018000000180000000200000000000000010000130200"/50], &(0x7f0000000880)=""/233, 0x32, 0x31, 0x1}, 0x20) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000a40)='./cgroup.cpu/syz1\x00', 0x1ff) (async) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000a80), 0x200002, 0x0) r9 = openat$cgroup_int(r8, &(0x7f0000000ac0)='notify_on_release\x00', 0x2, 0x0) writev(r9, &(0x7f0000000b00)=[{&(0x7f0000000b40)='t', 0x1}], 0x1) sendmsg$TCPDIAG_GETSOCK(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c0000001200010003950000000000000a0900004001000000000000000000000000ffff"], 0x4c}}, 0x4) r10 = socket(0xa, 0x1, 0x0) close(r10) (async) socket$inet_sctp(0x2, 0x5, 0x84) sendmmsg$inet_sctp(r10, &(0x7f00000001c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="30000000000000008400000001000000000000000802000000000000000000000000000000000000007202a611"], 0x30}], 0x1, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18030000000000000000000000000000851000000600000018100000", @ANYRES32=r0, @ANYBLOB="00000000000000006600000001000000180000000000000000000000010080009500000000000000970300001000320095"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4c}, 0x94) 82.195357ms ago: executing program 0 (id=4110): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x2c, 0x24, 0xd0f, 0x70bd26, 0x0, {0x60, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@TCA_RATE={0x6, 0x5, {0x6, 0x4}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20}, 0x24008045) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000002e80)={0x0, 0x0, &(0x7f0000002ec0)={&(0x7f0000002f00)=@ipv4_newrule={0x1c, 0x20, 0xf4db158ec847dc81, 0xfffffff8, 0x25dfdbfd, {0x2, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x8, 0x1f}}, 0x1c}, 0x1, 0x0, 0x0, 0x81}, 0x44004) r1 = socket(0x10, 0x3, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000200400ae"], 0x18}, 0x1, 0x0, 0x0, 0x850}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000002cc0)={0x0, 0x0, &(0x7f0000002d00)={&(0x7f0000002d40)={0x20, 0x25, 0x1, 0x70bd2e, 0x25dfdbfb, {0x5, 0x7c}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x2, 0x0, 0x0, @u32=0x1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4048011}, 0x8800) (async) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=ANY=[@ANYBLOB="f800001016000100000000000000000000000000000000000000000000000000ff0100000000000000000000000000010000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fe8800000000000000000000000000010000000033000000ff"], 0xf8}}, 0x810) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f00000006c0)={0x80}, 0x10) (async) sendmsg$nl_route(r4, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000002940)=ANY=[@ANYBLOB="1c0000001a00010000000000000000000a80"], 0x1c}}, 0x0) (async) recvmsg(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000002d80)=[{&(0x7f0000000300)=""/259, 0x103}, {&(0x7f00000007c0)=""/4124, 0x101c}, {&(0x7f0000001800)=""/112, 0x70}, {&(0x7f0000001880)=""/4094, 0xffe}, {&(0x7f0000002880)=""/179, 0xb3}, {&(0x7f0000000440)=""/119, 0x77}, {&(0x7f00000029c0)=""/109, 0x6d}, {&(0x7f0000003dc0)=""/4086, 0xff6}, {&(0x7f0000003a40)=""/232, 0xe8}, {&(0x7f0000003b40)=""/142, 0x8e}, {&(0x7f00000004c0)=""/259, 0x103}, {&(0x7f0000003d00)=""/158, 0x9e}], 0xc}, 0x10082) bpf$MAP_CREATE(0x0, &(0x7f0000002f80)=@base={0x0, 0xfffffffb}, 0x48) (async) r5 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r5, &(0x7f0000003040)=ANY=[@ANYBLOB="33fe00006600"], 0xfe33) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000003000)={&(0x7f0000002f40)=ANY=[@ANYBLOB="3800000010005fba000000400000000000000000", @ANYRES32=0x0, @ANYRES64=r3], 0x38}}, 0x0) (async) sendmsg$AUDIT_SET_FEATURE(r1, &(0x7f0000002e40)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x20, 0x3fa, 0x200, 0x70bd2c, 0x25dfdbfc, {0x1, 0x1, 0x1, 0x1}, ["", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0xc804) (async) r6 = socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r4, 0x4058587a, &(0x7f0000002c00)={{r6, &(0x7f0000002980)='${-\x00', 0x247001, &(0x7f0000002a40)={@_ha_fsid={[0xd48a, 0x80]}, {0x4, 0x3, 0x6, 0xff}}, 0xa, &(0x7f0000002a80)={@_ha_fsid}, &(0x7f0000002ac0)}, {[0x2, 0x8849, 0x10, 0x4]}, 0x4, 0xed, &(0x7f0000002b00)=""/237}) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000002c80)={'ip6_vti0\x00', 0x20}) 0s ago: executing program 2 (id=4111): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r0) (async) r2 = socket$packet(0x11, 0x2, 0x300) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x1c, 0x29, 0x1, 0x0, 0x0, {0x12}, [@typed={0x8, 0x1, 0x0, 0x0, @fd=r2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$DEVLINK_CMD_PORT_GET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000180)={0x3c, r1, 0x1, 0xffffffff, 0x0, {0x39}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x73}}}]}, 0x3c}}, 0x0) kernel console output (not intermixed with test programs): 603] CPU: 0 UID: 0 PID: 18603 Comm: syz.0.3243 Not tainted syzkaller #0 PREEMPT(full) [ 408.498776][T18603] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 408.498787][T18603] Call Trace: [ 408.498794][T18603] [ 408.498802][T18603] dump_stack_lvl+0xe8/0x150 [ 408.498838][T18603] warn_alloc+0x24d/0x270 [ 408.498863][T18603] ? lockdep_hardirqs_on+0x7b/0x110 [ 408.498887][T18603] ? __pfx_warn_alloc+0x10/0x10 [ 408.498909][T18603] ? kfree+0x1c5/0x650 [ 408.498935][T18603] ? __get_vm_area_node+0x219/0x2f0 [ 408.498963][T18603] __vmalloc_node_range_noprof+0x396/0x16f0 [ 408.498985][T18603] ? lock_acquire+0x115/0x350 [ 408.499012][T18603] ? __lock_acquire+0x747/0x2de0 [ 408.499050][T18603] ? hook_capable+0x1c3/0x5e0 [ 408.499078][T18603] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 408.499109][T18603] ? bpf_prog_alloc_no_stats+0x47/0x550 [ 408.499127][T18603] __vmalloc_noprof+0xd2/0x120 [ 408.499148][T18603] ? bpf_prog_alloc_no_stats+0x47/0x550 [ 408.499169][T18603] bpf_prog_alloc_no_stats+0x47/0x550 [ 408.499185][T18603] ? bpf_prog_alloc+0x2a/0x1a0 [ 408.499206][T18603] bpf_prog_alloc+0x3c/0x1a0 [ 408.499227][T18603] bpf_prog_load+0x7f8/0x1c60 [ 408.499259][T18603] ? __pfx_bpf_prog_load+0x10/0x10 [ 408.499293][T18603] ? __might_fault+0xaf/0x130 [ 408.499320][T18603] __sys_bpf+0xd86/0xe00 [ 408.499347][T18603] ? __pfx___sys_bpf+0x10/0x10 [ 408.499383][T18603] ? __fget_files+0x2a/0x420 [ 408.499424][T18603] ? ksys_write+0x242/0x270 [ 408.499452][T18603] ? __pfx_ksys_write+0x10/0x10 [ 408.499481][T18603] __x64_sys_bpf+0xba/0xd0 [ 408.499512][T18603] do_syscall_64+0x166/0x520 [ 408.499532][T18603] ? trace_irq_disable+0x3b/0x140 [ 408.499558][T18603] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 408.499578][T18603] ? clear_bhb_loop+0x70/0xc0 [ 408.499600][T18603] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 408.499619][T18603] RIP: 0033:0x7f36a279f559 [ 408.499638][T18603] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 408.499655][T18603] RSP: 002b:00007f36a359d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 408.499674][T18603] RAX: ffffffffffffffda RBX: 00007f36a2a25fa0 RCX: 00007f36a279f559 [ 408.499688][T18603] RDX: 0000000000000094 RSI: 0000200000001c00 RDI: 0000000000000005 [ 408.499700][T18603] RBP: 00007f36a359d090 R08: 0000000000000000 R09: 0000000000000000 [ 408.499712][T18603] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 408.499724][T18603] R13: 00007f36a2a26038 R14: 00007f36a2a25fa0 R15: 00007ffcd0be2888 [ 408.499756][T18603] [ 408.499770][T18603] Mem-Info: [ 408.499780][T18603] active_anon:6124 inactive_anon:0 isolated_anon:0 [ 408.499780][T18603] active_file:2 inactive_file:43284 isolated_file:0 [ 408.499780][T18603] unevictable:0 dirty:174 writeback:0 [ 408.499780][T18603] slab_reclaimable:13091 slab_unreclaimable:131923 [ 408.499780][T18603] mapped:29402 shmem:541 pagetables:1387 [ 408.499780][T18603] sec_pagetables:0 bounce:0 [ 408.499780][T18603] kernel_misc_reclaimable:0 [ 408.499780][T18603] free:1245612 free_pcp:11396 free_cma:0 [ 408.499837][T18603] Node 0 active_anon:24496kB inactive_anon:0kB active_file:8kB inactive_file:172936kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:117608kB dirty:692kB writeback:0kB shmem:2164kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:16352kB pagetables:5404kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 408.499890][T18603] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:144kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 408.499941][T18603] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 408.499996][T18603] lowmem_reserve[]: 0 2463 2465 2465 2465 [ 408.500029][T18603] Node 0 DMA32 free:1050652kB boost:0kB min:33936kB low:42420kB high:50904kB reserved_highatomic:0kB free_highatomic:0kB active_anon:24496kB inactive_anon:0kB active_file:8kB inactive_file:172936kB unevictable:0kB writepending:692kB zspages:0kB present:3129332kB managed:2523112kB mlocked:0kB bounce:0kB free_pcp:40356kB local_pcp:19824kB free_cma:0kB [ 408.500088][T18603] lowmem_reserve[]: 0 0 1 1 1 [ 408.500119][T18603] Node 0 Normal free:0kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1660kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:0kB free_cma:0kB [ 408.500173][T18603] lowmem_reserve[]: 0 0 0 0 0 [ 408.500203][T18603] Node 1 Normal free:3916436kB boost:0kB min:55940kB low:69924kB high:83908kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:0kB writepending:4kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:5224kB local_pcp:2752kB free_cma:0kB [ 408.500259][T18603] lowmem_reserve[]: 0 0 0 0 0 [ 408.500290][T18603] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 408.500408][T18603] Node 0 DMA32: 497*4kB (UME) 261*8kB (UM) 917*16kB (UME) 197*32kB (UME) 149*64kB (UME) 62*128kB (UM) 46*256kB (UME) 26*512kB (UME) 16*1024kB (UME) 6*2048kB (ME) 233*4096kB (UM) = 1050652kB [ 408.500556][T18603] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 408.500648][T18603] Node 1 Normal: 4*4kB (UM) 1*8kB (M) 1*16kB (M) 3*32kB (UM) 3*64kB (UM) 3*128kB (UM) 4*256kB (UM) 2*512kB (M) 2*1024kB (UM) 0*2048kB 955*4096kB (UM) = 3916488kB [ 408.500782][T18603] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 408.500798][T18603] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 408.500813][T18603] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 408.500827][T18603] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 408.500840][T18603] 43823 total pagecache pages [ 408.500852][T18603] 0 pages in swap cache [ 408.500857][T18603] Free swap = 124996kB [ 408.500864][T18603] Total swap = 124996kB [ 408.500871][T18603] 2097051 pages RAM [ 408.500877][T18603] 0 pages HighMem/MovableOnly [ 408.500883][T18603] 434242 pages reserved [ 408.500889][T18603] 0 pages cma reserved [ 409.735180][T18612] IPVS: set_ctl: invalid protocol: 60 172.20.20.170:20002 [ 409.752001][T18615] IPVS: set_ctl: invalid protocol: 60 172.20.20.170:20002 [ 410.169581][T18625] __nla_validate_parse: 3 callbacks suppressed [ 410.169600][T18625] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3253'. [ 410.206602][T18625] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3253'. [ 410.533260][T18625] bridge0: port 1(bridge_slave_0) entered forwarding state [ 410.665679][T18632] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3254'. [ 411.123587][T18644] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 411.364427][T18627] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3251'. [ 411.388682][T18658] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3263'. [ 411.491761][T18623] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 411.564723][T18658] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3263'. [ 411.739363][T18670] netlink: 80 bytes leftover after parsing attributes in process `syz.2.3265'. [ 411.978071][ T30] audit: type=1107 audit(1793481007.170:8): pid=18675 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='jGU/;n'WE]AհF^v?,Cz]z A޵϶4̷C[hoԹ^%+F/0_z.' [ 412.039808][T12313] net_ratelimit: 26 callbacks suppressed [ 412.039829][T12313] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 412.155612][T12301] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 412.194656][T18674] tc action pedit 'at' offset 5 out of bounds [ 412.194680][T18674] tc action pedit 'at' offset 5 out of bounds [ 412.194691][T18674] tc action pedit 'at' offset 5 out of bounds [ 412.194701][T18674] tc action pedit 'at' offset 5 out of bounds [ 412.194711][T18674] tc action pedit 'at' offset 5 out of bounds [ 412.194721][T18674] tc action pedit 'at' offset 5 out of bounds [ 412.194732][T18674] tc action pedit 'at' offset 5 out of bounds [ 412.194741][T18674] tc action pedit 'at' offset 5 out of bounds [ 412.194751][T18674] tc action pedit 'at' offset 5 out of bounds [ 412.194761][T18674] tc action pedit 'at' offset 5 out of bounds [ 412.194783][T18674] 0: reclassify loop, rule prio 0, protocol 800 [ 412.307463][T12306] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 412.600768][ T43] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 412.720617][ T8845] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 412.818786][T18703] netlink: 'syz.1.3276': attribute type 30 has an invalid length. [ 412.897431][T18701] netlink: 'syz.0.3274': attribute type 1 has an invalid length. [ 412.898957][T12315] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 412.939748][T18706] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3278'. [ 413.057045][T18710] netlink: 'syz.5.3277': attribute type 10 has an invalid length. [ 413.287547][T18726] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3281'. [ 413.318523][ T43] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 413.448844][T12315] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 413.489471][T18732] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3281'. [ 413.598645][T12317] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 415.267237][T18795] netlink: 'syz.0.3296': attribute type 10 has an invalid length. [ 415.377335][T18795] 8021q: adding VLAN 0 to HW filter on device team0 [ 415.401229][T18795] .`: (slave team0): Enslaving as an active interface with an up link [ 416.195015][T18802] syzkaller1: entered promiscuous mode [ 416.195040][T18802] syzkaller1: entered allmulticast mode [ 416.267299][T18817] __nla_validate_parse: 2 callbacks suppressed [ 416.267323][T18817] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3300'. [ 416.688659][T18833] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3306'. [ 417.077521][T18844] pim6reg: entered allmulticast mode [ 417.130135][ T43] net_ratelimit: 14 callbacks suppressed [ 417.130158][ T43] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 417.238621][T12301] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 417.350648][ T8845] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 417.465193][ T8845] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 417.527537][T18860] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 417.539356][T18860] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 417.570122][T12281] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 417.612877][T18848] syzkaller1: entered promiscuous mode [ 417.613068][T18848] syzkaller1: entered allmulticast mode [ 417.802017][T12301] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 417.903651][T18874] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3316'. [ 417.922333][T12301] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 417.990744][T18877] bridge0: port 1(bridge_slave_0) entered disabled state [ 418.008104][T18877] bridge_slave_0 (unregistering): left allmulticast mode [ 418.008130][T18877] bridge_slave_0 (unregistering): left promiscuous mode [ 418.008222][T18877] bridge0: port 1(bridge_slave_0) entered disabled state [ 418.071035][T12301] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 418.296601][T18896] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3318'. [ 418.643696][T18903] netlink: 23 bytes leftover after parsing attributes in process `syz.1.3323'. [ 418.664859][T18903] netlink: 23 bytes leftover after parsing attributes in process `syz.1.3323'. [ 419.143453][T18922] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3325'. [ 419.243823][T18934] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3331'. [ 419.294758][T18934] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3331'. [ 419.294780][T18934] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3331'. [ 419.296813][T18934] vlan0: entered promiscuous mode [ 419.591802][T18947] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 419.606196][T18946] netdevsim netdevsim4 netdevsim0: left promiscuous mode [ 420.508295][T18980] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 420.715113][T18980] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 421.377365][T18994] netlink: 'syz.2.3347': attribute type 1 has an invalid length. [ 421.477433][T19000] xt_NETMAP: bad rangesize 37. [ 422.206131][T19029] __nla_validate_parse: 6 callbacks suppressed [ 422.206154][T19029] netlink: 84 bytes leftover after parsing attributes in process `syz.2.3360'. [ 422.226718][T12315] net_ratelimit: 33 callbacks suppressed [ 422.226738][T12315] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 422.498640][T12301] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 422.619261][ T1175] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 422.729403][T12301] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 422.851098][T12301] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 422.924232][T12317] IPVS: starting estimator thread 0... [ 422.945029][T19048] netlink: 'syz.2.3365': attribute type 1 has an invalid length. [ 422.945052][T19048] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3365'. [ 422.970913][ T1175] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 423.030138][T19051] IPVS: using max 31 ests per chain, 74400 per kthread [ 423.091069][T12313] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 423.110350][T19055] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3367'. [ 423.201649][T12315] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 423.312207][T12280] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 423.449993][T12313] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 423.524007][T19072] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3373'. [ 423.588878][T19071] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3371'. [ 423.592976][T19074] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3371'. [ 423.651792][T19079] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3374'. [ 423.733716][T19083] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3375'. [ 424.205794][T19093] netlink: 'syz.0.3379': attribute type 1 has an invalid length. [ 424.247929][T19093] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3379'. [ 424.759233][T19113] bridge2: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 424.802302][T19116] mac80211_hwsim hwsim48 wlan0: entered promiscuous mode [ 424.976351][T19122] bond0: option arp_all_targets: invalid value (18446744073709551613) [ 425.088342][T19122] bond0 (unregistering): Released all slaves [ 425.642441][T19152] netlink: 'syz.5.3398': attribute type 3 has an invalid length. [ 425.825717][T19154] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3399'. [ 425.855500][T19154] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 425.915330][T19157] x_tables: duplicate underflow at hook 1 [ 426.545065][T19186] netlink: 'syz.1.3405': attribute type 3 has an invalid length. [ 426.614400][T19188] netlink: 'syz.4.3406': attribute type 32 has an invalid length. [ 426.687292][T19188] bond1: option coupled_control: invalid value (192) [ 426.707334][T19188] bond1 (unregistering): Released all slaves [ 427.280631][T12280] net_ratelimit: 24 callbacks suppressed [ 427.280654][T12280] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 427.402889][ T1175] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 427.509151][T19204] __nla_validate_parse: 3 callbacks suppressed [ 427.509171][T19204] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3412'. [ 427.510205][ T1175] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 427.512699][T19204] netlink: 'syz.5.3412': attribute type 1 has an invalid length. [ 427.512715][T19204] netlink: 'syz.5.3412': attribute type 7 has an invalid length. [ 427.512728][T19204] netlink: 'syz.5.3412': attribute type 8 has an invalid length. [ 427.512740][T19204] netlink: 208 bytes leftover after parsing attributes in process `syz.5.3412'. [ 427.512775][T19204] NCSI netlink: No device for ifindex 65584 [ 427.621969][T12280] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 427.728642][T12313] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 427.840401][T12280] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 427.960501][T12317] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 428.007183][T19215] 0XD: left allmulticast mode [ 428.238907][T19215] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 428.240779][ T1175] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 428.395511][T12317] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 428.520824][T19229] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3421'. [ 428.642603][T19236] lo speed is unknown, defaulting to 1000 [ 428.786780][T19239] syzkaller0: entered promiscuous mode [ 428.786803][T19239] syzkaller0: entered allmulticast mode [ 429.268386][T19253] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3430'. [ 429.312832][T19236] lo speed is unknown, defaulting to 1000 [ 429.315634][T19236] rxe_eth0 speed is unknown, defaulting to 1000 [ 429.794962][T19263] netlink: 188 bytes leftover after parsing attributes in process `syz.4.3433'. [ 429.794987][T19263] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3433'. [ 430.384079][T19270] netlink: 'syz.4.3436': attribute type 15 has an invalid length. [ 430.384101][T19270] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3436'. [ 430.452759][T19270] netlink: 'syz.4.3436': attribute type 15 has an invalid length. [ 430.452782][T19270] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3436'. [ 430.454601][T12313] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 2816 - 0 [ 430.455279][T12313] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 2816 - 0 [ 430.455462][T12313] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 2816 - 0 [ 430.455495][T12313] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 2816 - 0 [ 430.754969][T19281] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3440'. [ 430.847013][T19286] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3443'. [ 430.980101][T19286] macvtap1: entered promiscuous mode [ 430.980125][T19286] hsr0: entered promiscuous mode [ 430.981676][T19286] macvtap1: entered allmulticast mode [ 430.981693][T19286] hsr0: entered allmulticast mode [ 430.981705][T19286] hsr_slave_0: entered allmulticast mode [ 430.981720][T19286] hsr_slave_1: entered allmulticast mode [ 431.825104][T19311] trusted_key: syz.5.3448 sent an empty control message without MSG_MORE. [ 431.876808][T19313] netlink: 'syz.4.3449': attribute type 1 has an invalid length. [ 431.999089][T19317] netlink: 'syz.2.3451': attribute type 20 has an invalid length. [ 432.021514][T19322] netlink: 'syz.4.3453': attribute type 1 has an invalid length. [ 432.067468][T19324] netlink: 'syz.4.3453': attribute type 1 has an invalid length. [ 432.067490][T19324] netlink: 'syz.4.3453': attribute type 4 has an invalid length. [ 432.378791][T12313] net_ratelimit: 22 callbacks suppressed [ 432.378811][T12313] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 432.489474][T12317] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 432.527081][T19340] __nla_validate_parse: 7 callbacks suppressed [ 432.527102][T19340] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3455'. [ 432.527120][T19340] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 432.527138][T19340] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 432.572194][T19340] batman_adv: batadv0: Interface deactivated: syz_tun [ 432.572220][T19340] batman_adv: batadv0: Removing interface: syz_tun [ 432.681556][T12313] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 432.787605][T12313] IPVS: starting estimator thread 0... [ 432.866988][T19354] vlan2: entered allmulticast mode [ 432.867014][T19354] bond0: entered allmulticast mode [ 432.884693][T12313] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 432.898234][T19358] IPVS: using max 28 ests per chain, 67200 per kthread [ 432.991405][T12317] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 433.100953][T12313] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 433.194954][T19366] netlink: 'syz.0.3464': attribute type 1 has an invalid length. [ 433.209884][T12317] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 433.319928][T12317] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 433.429482][T12281] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 433.541546][T12280] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 433.717044][T19387] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 433.733632][T19387] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 433.736577][T19387] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 433.764306][T19387] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 433.767613][T19387] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 433.868158][T19387] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 433.894149][T19387] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 433.895805][T19387] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 433.897355][T19387] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 433.954226][T19387] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 433.955771][T19387] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 433.957257][T19387] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 433.989544][T19387] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 433.991185][T19387] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 433.992702][T19387] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 433.994172][T19387] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 433.995647][T19387] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 433.997188][T19387] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 434.068811][T19387] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 434.070389][T19387] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 434.071856][T19387] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 434.073315][T19387] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 434.074790][T19387] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 434.076256][T19387] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 434.077722][T19387] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 434.179563][T19387] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 434.230616][T19406] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3480'. [ 434.275722][T19387] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 434.353005][T19387] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 434.375999][T19387] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 434.393535][T19387] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 434.408854][T19387] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 434.414144][T19387] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 434.480609][T19387] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 434.482229][T19387] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 434.483759][T19387] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 434.485329][T19387] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 434.486798][T19387] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 434.545656][T19387] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 434.547631][T19387] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 434.571433][T19387] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 434.572966][T19387] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 434.574561][T19387] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 434.576072][T19387] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 434.577520][T19387] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 434.686976][T19387] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 434.724129][T19387] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 434.725831][T19387] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 434.727441][T19387] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 434.762198][T19387] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 434.763688][T19387] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 434.765174][T19387] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 434.766640][T19387] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 434.768173][T19387] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 434.834155][T19387] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 434.835713][T19387] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 434.837224][T19387] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 434.933330][T19387] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 435.022157][T19387] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 435.065818][T19387] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 435.097780][T19387] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 435.110488][T19387] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 435.112048][T19387] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 435.113520][T19387] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 435.115054][T19387] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 435.116495][T19387] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 435.178390][T19427] netlink: 'syz.4.3487': attribute type 2 has an invalid length. [ 435.353428][T19431] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3488'. [ 435.353489][T19431] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3488'. [ 435.354422][T19431] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3488'. [ 435.357223][T19431] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3488'. [ 435.569537][T19444] ip6t_rt: `--rt-type 0' required before `--rt-0-*' [ 436.206540][T19462] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 436.220911][T19462] bond0 (unregistering): Released all slaves [ 436.354343][T19476] netlink: 'syz.5.3499': attribute type 1 has an invalid length. [ 436.587779][T19485] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3501'. [ 436.706025][T19485] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 436.738320][T19484] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3500'. [ 436.780549][T19476] bridge4: entered promiscuous mode [ 436.817781][T19476] bond8: (slave bridge4): making interface the new active one [ 436.826527][T19476] bond8: (slave bridge4): Enslaving as an active interface with an up link [ 436.899568][T19497] netlink: 'syz.4.3505': attribute type 1 has an invalid length. [ 436.924135][T19497] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3505'. [ 437.560917][T12315] net_ratelimit: 21 callbacks suppressed [ 437.560938][T12315] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 437.670348][T12280] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 437.789380][T12317] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 437.900345][T12317] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 437.997871][T19537] x_tables: duplicate entry at hook 1 [ 438.006344][T19537] netlink: 'syz.4.3513': attribute type 13 has an invalid length. [ 438.069071][T12280] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 438.272610][T12280] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 438.324233][T19539] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3516'. [ 438.324254][T19539] netlink: 25 bytes leftover after parsing attributes in process `syz.2.3516'. [ 438.389715][T12306] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 438.500803][ T1175] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 438.614487][T12280] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 438.733532][T12301] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 438.910346][T19563] netlink: 10 bytes leftover after parsing attributes in process `syz.5.3520'. [ 439.876673][T19592] netlink: 'syz.2.3530': attribute type 1 has an invalid length. [ 439.960208][T19589] batman_adv: batadv0: Adding interface: gretap0 [ 439.960227][T19589] batman_adv: batadv0: The MTU of interface gretap0 is too small (1236) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 439.960256][T19589] batman_adv: batadv0: Interface activated: gretap0 [ 439.970448][T19591] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3530'. [ 440.073773][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.195880][T19592] 8021q: adding VLAN 0 to HW filter on device bond1 [ 440.474203][T19612] netlink: 'syz.2.3534': attribute type 4 has an invalid length. [ 440.474227][T19612] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3534'. [ 440.476756][T19616] vcan0: tx drop: invalid sa for name 0x0000000000000002 [ 440.875291][T19628] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3540'. [ 440.912744][T19624] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3538'. [ 441.717440][T19667] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3551'. [ 441.895319][T19683] netlink: 'syz.4.3555': attribute type 10 has an invalid length. [ 441.924001][T19683] team0: Device wg2 is of different type [ 442.269459][T19676] syzkaller0: entered promiscuous mode [ 442.269649][T19676] syzkaller0: entered allmulticast mode [ 442.463284][T19699] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3560'. [ 442.700670][T19713] Cannot find add_set index 4 as target [ 442.858373][T19727] netlink: 45349 bytes leftover after parsing attributes in process `syz.2.3568'. [ 442.937264][T19730] netlink: 'syz.2.3568': attribute type 1 has an invalid length. [ 445.257898][T19727] 0XD: renamed from gretap0 (while UP) [ 445.276457][T19727] 0XD: entered allmulticast mode [ 445.292654][T12301] net_ratelimit: 29 callbacks suppressed [ 445.292673][T12301] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 445.457821][T19730] 8021q: adding VLAN 0 to HW filter on device bond2 [ 445.477166][T19730] netlink: 'syz.2.3568': attribute type 1 has an invalid length. [ 445.521825][T12306] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 445.522169][T19745] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3572'. [ 445.599316][T19730] netlink: 'syz.2.3568': attribute type 1 has an invalid length. [ 445.600201][T19730] netlink: 'syz.2.3568': attribute type 1 has an invalid length. [ 445.600976][T19730] netlink: 'syz.2.3568': attribute type 1 has an invalid length. [ 445.601830][T19730] netlink: 'syz.2.3568': attribute type 1 has an invalid length. [ 445.608042][T19730] netlink: 'syz.2.3568': attribute type 1 has an invalid length. [ 445.642327][T12301] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 445.643262][T19730] netlink: 'syz.2.3568': attribute type 1 has an invalid length. [ 445.644116][T19730] netlink: 'syz.2.3568': attribute type 1 has an invalid length. [ 445.644951][T19730] netlink: 'syz.2.3568': attribute type 1 has an invalid length. [ 445.771275][T12306] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 445.900700][ T1175] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 445.955913][T19748] 0: reclassify loop, rule prio 0, protocol 03 [ 446.098242][T19762] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3577'. [ 446.152291][T19762] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3577'. [ 446.160411][ T1175] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 446.192548][T19764] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3578'. [ 446.280999][T12280] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 446.309236][T19765] openvswitch: netlink: Key 6 has unexpected len 132 expected 2 [ 446.402725][T12301] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 446.735210][T19782] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3580'. [ 447.046196][T19796] can: request_module (can-proto-0) failed. [ 447.632209][T19826] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3593'. [ 447.741552][T19828] tipc: Enabling of bearer rejected, failed to enable media [ 448.121559][T19848] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3600'. [ 448.153293][T19843] bond1: option lacp_active: mode dependency failed, not supported in mode active-backup(1) [ 448.157687][T19843] bond1 (unregistering): Released all slaves [ 448.230853][T19840] netlink: 80 bytes leftover after parsing attributes in process `syz.0.3599'. [ 448.342013][T19843] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3600'. [ 448.342061][T19843] block nbd2: Unsupported socket: should be TCP or UNIX. [ 449.777652][T19909] nbd: socks must be embedded in a SOCK_ITEM attr [ 449.951447][T19918] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3618'. [ 449.954198][T19918] validate_nla: 22 callbacks suppressed [ 449.954214][T19918] netlink: 'syz.4.3618': attribute type 10 has an invalid length. [ 449.989853][T19918] team0: Device wg2 is of different type [ 450.250337][T19925] bond10: entered promiscuous mode [ 450.252983][T19925] bond10: entered allmulticast mode [ 450.255794][T19925] 8021q: adding VLAN 0 to HW filter on device bond10 [ 450.400202][T12313] net_ratelimit: 28 callbacks suppressed [ 450.400224][T12313] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 450.497340][T19940] netlink: 'syz.4.3623': attribute type 32 has an invalid length. [ 450.635601][T19940] bond1: Setting coupled_control to off (0) [ 450.637792][T19942] veth1_macvtap: left promiscuous mode [ 450.637818][T19942] macsec0: entered allmulticast mode [ 450.755530][T19945] veth1_macvtap: entered promiscuous mode [ 450.755555][T19945] veth1_macvtap: entered allmulticast mode [ 450.755634][T19945] macsec0: left allmulticast mode [ 450.755648][T19945] veth1_macvtap: left allmulticast mode [ 450.798935][T12313] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 450.920142][T12306] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 451.030585][T12306] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 451.141325][T12313] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 451.250112][T12306] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 451.361662][T12306] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 451.472270][T12317] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 451.515483][T19965] __nla_validate_parse: 1 callbacks suppressed [ 451.515504][T19965] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3629'. [ 451.585777][T12280] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 451.642495][T19971] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3631'. [ 451.645426][T19972] ip_tables: iptables: counters copy to user failed while replacing table [ 451.656922][T19971] Unsupported ieee802154 address type: 0 [ 452.196621][T19988] FAULT_INJECTION: forcing a failure. [ 452.196621][T19988] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 452.196653][T19988] CPU: 1 UID: 0 PID: 19988 Comm: syz.5.3634 Not tainted syzkaller #0 PREEMPT(full) [ 452.196675][T19988] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 452.196688][T19988] Call Trace: [ 452.196697][T19988] [ 452.196706][T19988] dump_stack_lvl+0xe8/0x150 [ 452.196745][T19988] should_fail_ex+0x3eb/0x540 [ 452.196775][T19988] prepare_alloc_pages+0x21e/0x5f0 [ 452.196808][T19988] __alloc_frozen_pages_noprof+0x17c/0x410 [ 452.196839][T19988] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 452.196864][T19988] ? __alloc_frozen_pages_noprof+0x24c/0x410 [ 452.196894][T19988] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 452.196932][T19988] __alloc_pages_noprof+0x10/0x100 [ 452.196959][T19988] alloc_pages_bulk_noprof+0x67a/0x8a0 [ 452.196999][T19988] ? alloc_pages_noprof+0x140/0x2b0 [ 452.197033][T19988] __kasan_populate_vmalloc+0xb7/0x1c0 [ 452.197065][T19988] alloc_vmap_area+0xd10/0x1410 [ 452.197102][T19988] ? __pfx_alloc_vmap_area+0x10/0x10 [ 452.197119][T19988] ? __kmalloc_cache_node_noprof+0x3cc/0x620 [ 452.197145][T19988] ? __kmalloc_cache_node_noprof+0x1f2/0x620 [ 452.197170][T19988] ? __get_vm_area_node+0x155/0x2f0 [ 452.197196][T19988] __get_vm_area_node+0x200/0x2f0 [ 452.197224][T19988] __vmalloc_node_range_noprof+0x36e/0x16f0 [ 452.197247][T19988] ? bpf_check+0x14ae/0x34e0 [ 452.197307][T19988] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 452.197336][T19988] ? __kasan_kmalloc+0x93/0xb0 [ 452.197364][T19988] ? __kmalloc_cache_noprof+0x31c/0x600 [ 452.197388][T19988] ? __kmalloc_cache_noprof+0x148/0x600 [ 452.197411][T19988] ? bpf_diag_init+0x87/0x140 [ 452.197436][T19988] ? bpf_diag_init+0x87/0x140 [ 452.197465][T19988] ? bpf_check+0x14ae/0x34e0 [ 452.197483][T19988] __vmalloc_noprof+0xd2/0x120 [ 452.197504][T19988] ? bpf_check+0x14ae/0x34e0 [ 452.197528][T19988] bpf_check+0x14ae/0x34e0 [ 452.197560][T19988] ? ktime_get_with_offset+0x93/0x2d0 [ 452.197589][T19988] ? ktime_get_with_offset+0x93/0x2d0 [ 452.197616][T19988] ? __pfx_bpf_check+0x10/0x10 [ 452.197641][T19988] ? bpf_obj_name_cpy+0x194/0x1e0 [ 452.197671][T19988] bpf_prog_load+0x14da/0x1c60 [ 452.197704][T19988] ? __pfx_bpf_prog_load+0x10/0x10 [ 452.197742][T19988] ? __might_fault+0xaf/0x130 [ 452.197770][T19988] __sys_bpf+0xd86/0xe00 [ 452.197799][T19988] ? __pfx___sys_bpf+0x10/0x10 [ 452.197830][T19988] ? __fget_files+0x2a/0x420 [ 452.197874][T19988] ? ksys_write+0x242/0x270 [ 452.197903][T19988] ? __pfx_ksys_write+0x10/0x10 [ 452.197934][T19988] __x64_sys_bpf+0xba/0xd0 [ 452.197966][T19988] do_syscall_64+0x166/0x520 [ 452.197988][T19988] ? trace_irq_disable+0x3b/0x140 [ 452.198015][T19988] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 452.198035][T19988] ? clear_bhb_loop+0x70/0xc0 [ 452.198060][T19988] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 452.198081][T19988] RIP: 0033:0x7f21f219f559 [ 452.198100][T19988] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 452.198118][T19988] RSP: 002b:00007f21f2fae028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 452.198139][T19988] RAX: ffffffffffffffda RBX: 00007f21f2425fa0 RCX: 00007f21f219f559 [ 452.198154][T19988] RDX: 0000000000000094 RSI: 0000200000001c00 RDI: 0000000000000005 [ 452.198167][T19988] RBP: 00007f21f2fae090 R08: 0000000000000000 R09: 0000000000000000 [ 452.198180][T19988] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 452.198192][T19988] R13: 00007f21f2426038 R14: 00007f21f2425fa0 R15: 00007ffd93f34b38 [ 452.198227][T19988] [ 452.312142][T19988] syz.5.3634: vmalloc error: size 3000, align 0x1, vm_struct allocation failed, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 452.312213][T19988] CPU: 1 UID: 0 PID: 19988 Comm: syz.5.3634 Not tainted syzkaller #0 PREEMPT(full) [ 452.312235][T19988] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 452.312248][T19988] Call Trace: [ 452.312256][T19988] [ 452.312263][T19988] dump_stack_lvl+0xe8/0x150 [ 452.312301][T19988] warn_alloc+0x24d/0x270 [ 452.312328][T19988] ? lockdep_hardirqs_on+0x7b/0x110 [ 452.312360][T19988] ? __pfx_warn_alloc+0x10/0x10 [ 452.312383][T19988] ? kfree+0x1c5/0x650 [ 452.312412][T19988] ? __get_vm_area_node+0x219/0x2f0 [ 452.312441][T19988] __vmalloc_node_range_noprof+0x396/0x16f0 [ 452.312502][T19988] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 452.312524][T19988] ? __kasan_kmalloc+0x93/0xb0 [ 452.312553][T19988] ? __kmalloc_cache_noprof+0x31c/0x600 [ 452.312578][T19988] ? __kmalloc_cache_noprof+0x148/0x600 [ 452.312600][T19988] ? bpf_diag_init+0x87/0x140 [ 452.312625][T19988] ? bpf_diag_init+0x87/0x140 [ 452.312654][T19988] ? bpf_check+0x14ae/0x34e0 [ 452.312673][T19988] __vmalloc_noprof+0xd2/0x120 [ 452.312695][T19988] ? bpf_check+0x14ae/0x34e0 [ 452.312718][T19988] bpf_check+0x14ae/0x34e0 [ 452.312751][T19988] ? ktime_get_with_offset+0x93/0x2d0 [ 452.312779][T19988] ? ktime_get_with_offset+0x93/0x2d0 [ 452.312827][T19988] ? __pfx_bpf_check+0x10/0x10 [ 452.312850][T19988] ? bpf_obj_name_cpy+0x194/0x1e0 [ 452.312880][T19988] bpf_prog_load+0x14da/0x1c60 [ 452.312914][T19988] ? __pfx_bpf_prog_load+0x10/0x10 [ 452.312951][T19988] ? __might_fault+0xaf/0x130 [ 452.312978][T19988] __sys_bpf+0xd86/0xe00 [ 452.313006][T19988] ? __pfx___sys_bpf+0x10/0x10 [ 452.313037][T19988] ? __fget_files+0x2a/0x420 [ 452.313081][T19988] ? ksys_write+0x242/0x270 [ 452.313109][T19988] ? __pfx_ksys_write+0x10/0x10 [ 452.313140][T19988] __x64_sys_bpf+0xba/0xd0 [ 452.313172][T19988] do_syscall_64+0x166/0x520 [ 452.313193][T19988] ? trace_irq_disable+0x3b/0x140 [ 452.313219][T19988] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 452.313239][T19988] ? clear_bhb_loop+0x70/0xc0 [ 452.313264][T19988] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 452.313285][T19988] RIP: 0033:0x7f21f219f559 [ 452.313304][T19988] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 452.313321][T19988] RSP: 002b:00007f21f2fae028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 452.313341][T19988] RAX: ffffffffffffffda RBX: 00007f21f2425fa0 RCX: 00007f21f219f559 [ 452.313363][T19988] RDX: 0000000000000094 RSI: 0000200000001c00 RDI: 0000000000000005 [ 452.313376][T19988] RBP: 00007f21f2fae090 R08: 0000000000000000 R09: 0000000000000000 [ 452.313388][T19988] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 452.313400][T19988] R13: 00007f21f2426038 R14: 00007f21f2425fa0 R15: 00007ffd93f34b38 [ 452.313434][T19988] [ 452.339456][T19988] Mem-Info: [ 452.339472][T19988] active_anon:9047 inactive_anon:0 isolated_anon:0 [ 452.339472][T19988] active_file:2 inactive_file:43301 isolated_file:0 [ 452.339472][T19988] unevictable:0 dirty:60 writeback:0 [ 452.339472][T19988] slab_reclaimable:13197 slab_unreclaimable:133729 [ 452.339472][T19988] mapped:32243 shmem:3411 pagetables:1431 [ 452.339472][T19988] sec_pagetables:0 bounce:0 [ 452.339472][T19988] kernel_misc_reclaimable:0 [ 452.339472][T19988] free:1242456 free_pcp:8821 free_cma:0 [ 452.339812][T19988] Node 0 active_anon:36188kB inactive_anon:0kB active_file:8kB inactive_file:173004kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:128972kB dirty:236kB writeback:0kB shmem:13644kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:17028kB pagetables:5580kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 452.339874][T19988] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:144kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 452.339924][T19988] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 452.339982][T19988] lowmem_reserve[]: 0 2463 2465 2465 2465 [ 452.340016][T19988] Node 0 DMA32 free:1032708kB boost:0kB min:33936kB low:42420kB high:50904kB reserved_highatomic:0kB free_highatomic:0kB active_anon:36188kB inactive_anon:0kB active_file:8kB inactive_file:173004kB unevictable:0kB writepending:236kB zspages:0kB present:3129332kB managed:2523112kB mlocked:0kB bounce:0kB free_pcp:35280kB local_pcp:20044kB free_cma:0kB [ 452.340257][T19988] lowmem_reserve[]: 0 0 1 1 1 [ 452.340288][T19988] Node 0 Normal free:0kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:1660kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:0kB free_cma:0kB [ 452.340342][T19988] lowmem_reserve[]: 0 0 0 0 0 [ 452.340374][T19988] Node 1 Normal free:3921756kB boost:0kB min:55940kB low:69924kB high:83908kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:0kB writepending:4kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 452.340430][T19988] lowmem_reserve[]: 0 0 0 0 0 [ 452.340461][T19988] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 452.341693][T19988] Node 0 DMA32: 121*4kB (UM) 18*8kB (UM) 565*16kB (UM) 173*32kB (UM) 133*64kB (UME) 60*128kB (UME) 43*256kB (UME) 22*512kB (UME) 16*1024kB (UME) 6*2048kB (M) 232*4096kB (UM) = 1032612kB [ 452.341841][T19988] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 452.342011][T19988] Node 1 Normal: 5*4kB (UM) 9*8kB (UM) 12*16kB (UM) 14*32kB (UM) 8*64kB (UM) 7*128kB (UM) 5*256kB (UM) 5*512kB (UM) 2*1024kB (UM) 1*2048kB (U) 955*4096kB (UM) = 3921756kB [ 452.342157][T19988] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 452.342172][T19988] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 452.342188][T19988] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 452.342203][T19988] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 452.342219][T19988] 46710 total pagecache pages [ 452.342226][T19988] 0 pages in swap cache [ 452.342233][T19988] Free swap = 124996kB [ 452.342240][T19988] Total swap = 124996kB [ 452.342247][T19988] 2097051 pages RAM [ 452.342254][T19988] 0 pages HighMem/MovableOnly [ 452.342261][T19988] 434242 pages reserved [ 452.342267][T19988] 0 pages cma reserved [ 453.094595][T19927] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 453.752637][T20004] netlink: 144 bytes leftover after parsing attributes in process `syz.2.3638'. [ 453.767831][T20004] siw: device registration error -23 [ 454.340603][T20024] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3640'. [ 454.383570][T20024] team0 (unregistering): Port device team_slave_0 removed [ 454.413301][T20024] team0 (unregistering): Port device team_slave_1 removed [ 454.618310][T20038] netlink: 112 bytes leftover after parsing attributes in process `syz.1.3648'. [ 454.760026][T20038] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3648'. [ 454.861712][T20041] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3648'. [ 454.898747][T20042] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3649'. [ 455.356558][T20057] netlink: 'syz.0.3654': attribute type 1 has an invalid length. [ 455.356582][T20057] netlink: 228 bytes leftover after parsing attributes in process `syz.0.3654'. [ 455.555140][T12281] batadv1: left allmulticast mode [ 455.555194][T12281] batadv1: left promiscuous mode [ 455.557114][T12281] bridge0: port 3(batadv1) entered disabled state [ 455.606628][T12281] bridge_slave_1: left allmulticast mode [ 455.606654][T12281] bridge_slave_1: left promiscuous mode [ 455.608845][T12281] bridge0: port 2(bridge_slave_1) entered disabled state [ 455.657836][T12281] bridge_slave_0: left allmulticast mode [ 455.657861][T12281] bridge_slave_0: left promiscuous mode [ 455.658049][T12281] bridge0: port 1(bridge_slave_0) entered disabled state [ 455.683112][T20067] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3658'. [ 455.722244][T20074] FAULT_INJECTION: forcing a failure. [ 455.722244][T20074] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 455.722271][T20074] CPU: 0 UID: 0 PID: 20074 Comm: syz.1.3660 Not tainted syzkaller #0 PREEMPT(full) [ 455.722293][T20074] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 455.722304][T20074] Call Trace: [ 455.722311][T20074] [ 455.722320][T20074] dump_stack_lvl+0xe8/0x150 [ 455.722356][T20074] should_fail_ex+0x3eb/0x540 [ 455.722386][T20074] prepare_alloc_pages+0x21e/0x5f0 [ 455.722418][T20074] __alloc_frozen_pages_noprof+0x17c/0x410 [ 455.722444][T20074] ? __lock_acquire+0x747/0x2de0 [ 455.722471][T20074] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 455.722501][T20074] ? __kmalloc_cache_node_noprof+0x3cc/0x620 [ 455.722534][T20074] ? __get_vm_area_node+0x155/0x2f0 [ 455.722552][T20074] ? __vmalloc_node_range_noprof+0x36e/0x16f0 [ 455.722575][T20074] ? policy_nodemask+0x31b/0x980 [ 455.722602][T20074] ? __sys_bpf+0xd86/0xe00 [ 455.722618][T20074] ? __x64_sys_bpf+0xba/0xd0 [ 455.722644][T20074] ? do_syscall_64+0x166/0x520 [ 455.722665][T20074] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 455.722690][T20074] alloc_pages_mpol+0x21e/0x390 [ 455.722726][T20074] alloc_pages_noprof+0xb1/0x2b0 [ 455.722758][T20074] get_free_pages_noprof+0xf/0x80 [ 455.722783][T20074] __kasan_populate_vmalloc+0x38/0x1c0 [ 455.722807][T20074] ? do_raw_spin_unlock+0xf5/0x200 [ 455.722833][T20074] alloc_vmap_area+0xd10/0x1410 [ 455.722869][T20074] ? __pfx_alloc_vmap_area+0x10/0x10 [ 455.722886][T20074] ? __kmalloc_cache_node_noprof+0x3cc/0x620 [ 455.722912][T20074] ? __kmalloc_cache_node_noprof+0x1f2/0x620 [ 455.722935][T20074] ? __get_vm_area_node+0x155/0x2f0 [ 455.722961][T20074] __get_vm_area_node+0x200/0x2f0 [ 455.722989][T20074] __vmalloc_node_range_noprof+0x36e/0x16f0 [ 455.723011][T20074] ? bpf_prog_calc_tag+0x51/0x370 [ 455.723036][T20074] ? __sys_bpf+0xd81/0xe00 [ 455.723052][T20074] ? __x64_sys_bpf+0xba/0xd0 [ 455.723077][T20074] ? do_syscall_64+0x166/0x520 [ 455.723102][T20074] ? kasan_save_track+0x4f/0x80 [ 455.723126][T20074] ? kasan_save_track+0x3e/0x80 [ 455.723149][T20074] ? __kvmalloc_node_noprof+0x50a/0x820 [ 455.723178][T20074] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 455.723212][T20074] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 455.723246][T20074] ? bpf_prog_calc_tag+0x51/0x370 [ 455.723269][T20074] __vmalloc_noprof+0xd2/0x120 [ 455.723290][T20074] ? bpf_prog_calc_tag+0x51/0x370 [ 455.723313][T20074] bpf_prog_calc_tag+0x51/0x370 [ 455.723337][T20074] check_and_resolve_insns+0xc0/0x28e0 [ 455.723361][T20074] ? __asan_memset+0x22/0x50 [ 455.723383][T20074] ? add_subprog+0x40b/0x550 [ 455.723406][T20074] ? bpf_check+0x1934/0x34e0 [ 455.723428][T20074] ? __pfx_check_and_resolve_insns+0x10/0x10 [ 455.723448][T20074] ? check_subprogs+0x413/0x540 [ 455.723480][T20074] bpf_check+0x1c12/0x34e0 [ 455.723512][T20074] ? ktime_get_with_offset+0x93/0x2d0 [ 455.723545][T20074] ? ktime_get_with_offset+0x93/0x2d0 [ 455.723572][T20074] ? __pfx_bpf_check+0x10/0x10 [ 455.723597][T20074] ? bpf_obj_name_cpy+0x194/0x1e0 [ 455.723624][T20074] bpf_prog_load+0x14da/0x1c60 [ 455.723656][T20074] ? __pfx_bpf_prog_load+0x10/0x10 [ 455.723692][T20074] ? __might_fault+0xaf/0x130 [ 455.723718][T20074] __sys_bpf+0xd86/0xe00 [ 455.723745][T20074] ? __pfx___sys_bpf+0x10/0x10 [ 455.723776][T20074] ? __fget_files+0x2a/0x420 [ 455.723818][T20074] ? ksys_write+0x242/0x270 [ 455.723845][T20074] ? __pfx_ksys_write+0x10/0x10 [ 455.723875][T20074] __x64_sys_bpf+0xba/0xd0 [ 455.723906][T20074] do_syscall_64+0x166/0x520 [ 455.723928][T20074] ? trace_irq_disable+0x3b/0x140 [ 455.723953][T20074] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 455.723973][T20074] ? clear_bhb_loop+0x70/0xc0 [ 455.723996][T20074] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 455.724016][T20074] RIP: 0033:0x7fbf2eb9f559 [ 455.724034][T20074] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 455.724050][T20074] RSP: 002b:00007fbf2f9d2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 455.724071][T20074] RAX: ffffffffffffffda RBX: 00007fbf2ee25fa0 RCX: 00007fbf2eb9f559 [ 455.724085][T20074] RDX: 0000000000000094 RSI: 0000200000001c00 RDI: 0000000000000005 [ 455.724098][T20074] RBP: 00007fbf2f9d2090 R08: 0000000000000000 R09: 0000000000000000 [ 455.724110][T20074] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 455.724122][T20074] R13: 00007fbf2ee26038 R14: 00007fbf2ee25fa0 R15: 00007fffa22a8c98 [ 455.724156][T20074] [ 455.726190][T12281] dvmrp0: left allmulticast mode [ 455.726301][T12281] dvmrp6: left allmulticast mode [ 455.956783][T12281] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 456.057844][T20085] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 456.298641][T20087] net_ratelimit: 26 callbacks suppressed [ 456.298663][T20087] openvswitch: netlink: Flow key attr not present in new flow. [ 456.737052][T12281] geneve1 (unregistering): left promiscuous mode [ 456.802897][T12281] batman_adv: batadv0: Removing interface: syzkaller0 [ 456.955989][T12281] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 456.968240][T12281] bond0 (unregistering): Released all slaves [ 456.984457][T12281] bond1 (unregistering): Released all slaves [ 457.014206][T12281] bond2 (unregistering): Released all slaves [ 457.042483][T12281] bond3 (unregistering): Released all slaves [ 457.067616][T12281] bond4 (unregistering): Released all slaves [ 457.087814][T12281] bond5 (unregistering): Released all slaves [ 457.114420][T12281] bond6 (unregistering): Released all slaves [ 457.134380][T12281] bond7 (unregistering): Released all slaves [ 457.164896][T12281] bond8 (unregistering): Released all slaves [ 457.239051][T12280] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 457.250595][T20100] __nla_validate_parse: 3 callbacks suppressed [ 457.250614][T20100] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3665'. [ 457.317090][T20100] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3665'. [ 457.362392][T12301] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 457.483860][T12280] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 457.589612][T12301] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 457.719080][T12301] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 457.746460][T20114] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3671'. [ 457.919874][T12313] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 458.038918][T12280] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 458.062185][T12281] IPVS: stopping master sync thread 7732 ... [ 458.124484][T12281] IPVS: stopping backup sync thread 15471 ... [ 458.154887][T12301] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 458.288354][T20133] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3674'. [ 458.299827][T20112] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3668'. [ 458.528588][ T1175] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 458.643885][T20134] netlink: 132 bytes leftover after parsing attributes in process `syz.5.3673'. [ 459.057880][T20157] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3683'. [ 459.167368][T20161] netlink: 'syz.0.3685': attribute type 1 has an invalid length. [ 459.369055][T20161] bond0: entered promiscuous mode [ 459.369555][T20161] 8021q: adding VLAN 0 to HW filter on device bond0 [ 459.565963][T20178] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3686'. [ 459.658441][T20185] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3688'. [ 459.668887][T20183] syzkaller0: entered promiscuous mode [ 459.669069][T20183] syzkaller0: entered allmulticast mode [ 459.841532][ T1175] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 459.843743][ T1175] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 459.844941][T20192] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.3693'. [ 459.870285][ T9] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 459.921841][T20195] netlink: 'syz.0.3691': attribute type 10 has an invalid length. [ 460.038130][T20195] team0: Port device dummy0 added [ 460.140983][T20195] netlink: 'syz.0.3691': attribute type 10 has an invalid length. [ 460.223862][ T2257] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 460.422755][T20214] xt_hashlimit: size too large, truncated to 1048576 [ 460.511760][T20216] xt_hashlimit: size too large, truncated to 1048576 [ 460.550621][ T9] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 460.930361][T20225] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 461.342428][T12301] net_ratelimit: 8 callbacks suppressed [ 461.342450][T12301] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 461.456542][ T8845] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 461.572946][ T8845] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 461.679191][T12280] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 461.789911][T12280] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 461.901260][T12306] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 462.080984][ T1175] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 462.125651][T20249] netlink: 'syz.2.3705': attribute type 11 has an invalid length. [ 462.188698][ T1175] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 462.328880][ T8845] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 462.418846][T20256] __nla_validate_parse: 6 callbacks suppressed [ 462.418866][T20256] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3706'. [ 462.445730][ T8845] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 462.647459][T12281] hsr_slave_0: left promiscuous mode [ 462.648202][T12281] hsr_slave_1: left promiscuous mode [ 462.665625][T12281] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 462.665646][T12281] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 462.685786][T12281] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 462.685808][T12281] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 462.889983][T12281] vlan0: left allmulticast mode [ 462.890005][T12281] veth0_vlan: left allmulticast mode [ 462.891083][T12281] vlan0: left promiscuous mode [ 462.894562][T12281] veth1_macvtap: left promiscuous mode [ 462.895096][T12281] veth0_macvtap: left promiscuous mode [ 462.899925][T12281] veth0_vlan: left promiscuous mode [ 463.531350][ T5650] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 463.548686][ T5650] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 463.551098][ T5650] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 463.552526][ T5650] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 463.553510][ T5650] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 463.669081][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 464.311096][T20296] netlink: 'syz.0.3713': attribute type 1 has an invalid length. [ 464.311120][T20296] netlink: 16179 bytes leftover after parsing attributes in process `syz.0.3713'. [ 465.234023][T12281] team0 (unregistering): Port device team_slave_1 removed [ 465.259595][T12281] team0 (unregistering): Port device team_slave_0 removed [ 465.675924][ T5638] Bluetooth: hci0: command tx timeout [ 465.681286][T20279] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 465.761721][T20298] vlan0: entered promiscuous mode [ 466.100672][T20323] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3716'. [ 466.263500][T20329] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3718'. [ 466.263524][T20329] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3718'. [ 466.391495][T12280] net_ratelimit: 5 callbacks suppressed [ 466.391542][T12280] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 466.552004][ T8845] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 466.658744][T12313] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 466.744779][T12281] IPVS: stop unused estimator thread 0... [ 466.771867][ T8845] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 466.812985][T20280] lo speed is unknown, defaulting to 1000 [ 466.868782][T20348] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3721'. [ 466.872909][T20347] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3721'. [ 466.888147][ T8845] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 466.913283][T20348] netlink: 'syz.2.3721': attribute type 64 has an invalid length. [ 466.913303][T20348] netlink: 5 bytes leftover after parsing attributes in process `syz.2.3721'. [ 466.929446][T20347] netlink: 'syz.2.3721': attribute type 10 has an invalid length. [ 466.932349][T20348] netlink: 'syz.2.3721': attribute type 10 has an invalid length. [ 466.992756][T12313] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 467.124807][T12306] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 467.247864][T12313] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 467.350950][ T1175] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 467.691968][ T1175] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 467.749200][ T5638] Bluetooth: hci0: command tx timeout [ 467.754224][T20361] netlink: 'syz.4.3725': attribute type 4 has an invalid length. [ 467.817096][T20356] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 468.165258][T20280] lo speed is unknown, defaulting to 1000 [ 468.182526][T20280] rxe_eth0 speed is unknown, defaulting to 1000 [ 468.662196][T20386] netlink: 'syz.2.3729': attribute type 21 has an invalid length. [ 469.829889][ T5638] Bluetooth: hci0: command tx timeout [ 470.531988][T20280] bridge0: port 1(bridge_slave_0) entered blocking state [ 470.534008][T20280] bridge0: port 1(bridge_slave_0) entered disabled state [ 470.534458][T20280] bridge_slave_0: entered allmulticast mode [ 470.567179][T20280] bridge_slave_0: entered promiscuous mode [ 470.585831][T20280] bridge0: port 2(bridge_slave_1) entered blocking state [ 470.585988][T20280] bridge0: port 2(bridge_slave_1) entered disabled state [ 470.586468][T20280] bridge_slave_1: entered allmulticast mode [ 470.619456][T20280] bridge_slave_1: entered promiscuous mode [ 470.661061][T20361] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 470.971877][T20280] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 470.991462][T20280] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 471.203399][T20280] team0: Port device team_slave_0 added [ 471.233334][T20280] team0: Port device team_slave_1 added [ 471.273625][T20442] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3735'. [ 471.363278][T20441] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3734'. [ 471.372082][T20451] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3734'. [ 471.372332][T20280] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 471.372344][T20280] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 471.372368][T20280] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 471.420734][T20280] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 471.420751][T20280] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 471.420778][T20280] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 471.829073][T20280] hsr_slave_0: entered promiscuous mode [ 471.835708][T20280] hsr_slave_1: entered promiscuous mode [ 471.859280][T12306] net_ratelimit: 15 callbacks suppressed [ 471.859390][T12306] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 471.909199][ T5638] Bluetooth: hci0: command tx timeout [ 472.068608][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 472.777403][T20482] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3739'. [ 472.777429][T20482] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3739'. [ 472.805508][T20487] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 472.840749][T20487] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3740'. [ 472.872063][ T5638] Bluetooth: hci3: command 0x0406 tx timeout [ 472.991331][T20492] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3739'. [ 472.991355][T20492] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3739'. [ 472.991726][T12310] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 473.161042][ T8845] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 473.256088][T20499] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3743'. [ 473.296733][T20499] ipvlan2: entered allmulticast mode [ 473.296756][T20499] virt_wifi0: entered allmulticast mode [ 473.310256][T20499] batman_adv: batadv0: Adding interface: ipvlan2 [ 473.310274][T20499] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 473.310305][T20499] batman_adv: batadv0: Interface activated: ipvlan2 [ 473.341339][T20499] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3743'. [ 473.609297][T20280] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 473.609335][T20280] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 473.609361][T20280] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 2] type 2 family 0 port 54793 - 0 [ 473.759812][T20499] ipvlan3: entered allmulticast mode [ 473.786281][T20499] batman_adv: batadv0: Adding interface: ipvlan3 [ 473.786299][T20499] batman_adv: batadv0: The MTU of interface ipvlan3 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 473.786327][T20499] batman_adv: The newly added mac address (2e:26:3c:f3:7e:4e) already exists on: ipvlan2 [ 473.786344][T20499] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 473.786356][T20499] batman_adv: batadv0: Interface activated: ipvlan3 [ 473.835084][ T8845] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 473.982735][T20280] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 473.982772][T20280] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 473.982798][T20280] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 2] type 2 family 0 port 54793 - 0 [ 474.072182][T12313] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 474.294913][T20280] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 474.305923][T20280] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 474.317105][T20280] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 2] type 2 family 0 port 54793 - 0 [ 474.422268][ T8845] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 474.703871][T20280] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 474.703908][T20280] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 474.703934][T20280] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 2] type 2 family 0 port 54793 - 0 [ 474.773931][ T8845] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 474.891028][T12301] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 475.000582][T12315] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 475.670892][T20280] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 475.713945][T20280] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 475.715078][T20280] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 475.758292][T20280] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 476.032933][T20280] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 476.074569][T20280] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 476.195759][T20280] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 476.246262][T20280] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 476.501000][T20611] __nla_validate_parse: 3 callbacks suppressed [ 476.501111][T20611] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3764'. [ 476.528751][T20612] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3765'. [ 476.813114][T20621] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3767'. [ 476.833603][T20613] bond3: Unable to set peer notification delay as MII monitoring is disabled [ 476.842970][T20613] bond3 (unregistering): Released all slaves [ 476.863963][T20624] netlink: 'syz.4.3768': attribute type 2 has an invalid length. [ 476.863982][T20624] netlink: 'syz.4.3768': attribute type 2 has an invalid length. [ 477.040217][T12313] net_ratelimit: 5 callbacks suppressed [ 477.040239][T12313] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 477.086686][T20629] netlink: 92 bytes leftover after parsing attributes in process `syz.2.3769'. [ 477.178642][T12313] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 477.331541][T12315] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 477.542898][T20280] 8021q: adding VLAN 0 to HW filter on device bond0 [ 477.549907][T12313] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 477.728247][T20280] 8021q: adding VLAN 0 to HW filter on device team0 [ 477.730212][T20643] netlink: 39 bytes leftover after parsing attributes in process `syz.4.3770'. [ 477.730233][T20643] netlink: 39 bytes leftover after parsing attributes in process `syz.4.3770'. [ 477.753539][T12313] bridge0: port 1(bridge_slave_0) entered blocking state [ 477.753658][T12313] bridge0: port 1(bridge_slave_0) entered forwarding state [ 477.788308][T12313] bridge0: port 2(bridge_slave_1) entered blocking state [ 477.788480][T12313] bridge0: port 2(bridge_slave_1) entered forwarding state [ 477.813843][T12310] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 477.930076][T12313] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 477.999573][ T5638] Bluetooth: hci1: command 0x0406 tx timeout [ 478.026712][T20649] openvswitch: netlink: Duplicate or invalid key (type 0). [ 478.026746][T20649] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 478.128976][T12310] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 478.240663][ T8845] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 478.553215][T20657] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3776'. [ 479.349232][T20690] netlink: 14463 bytes leftover after parsing attributes in process `syz.1.3783'. [ 479.802532][T20703] netlink: 'syz.1.3785': attribute type 11 has an invalid length. [ 479.802555][T20703] netlink: 'syz.1.3785': attribute type 4 has an invalid length. [ 479.802569][T20703] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3785'. [ 480.337104][T20280] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 480.741602][T20727] Bluetooth: MGMT ver 1.23 [ 481.094501][T20744] netlink: 'syz.1.3795': attribute type 1 has an invalid length. [ 481.094523][T20744] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3795'. [ 481.857459][T20280] veth0_vlan: entered promiscuous mode [ 481.920484][T20280] veth1_vlan: entered promiscuous mode [ 482.051869][T12315] net_ratelimit: 27 callbacks suppressed [ 482.051889][T12315] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 482.158666][T12315] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 482.206439][T20280] veth0_macvtap: entered promiscuous mode [ 482.283936][T20280] veth1_macvtap: entered promiscuous mode [ 482.314430][T12301] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 482.543261][T20280] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 482.621793][ T8844] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 482.667296][T20280] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 482.683550][T20778] netlink: 'syz.4.3800': attribute type 1 has an invalid length. [ 482.790105][T12315] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 482.800357][T12310] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 482.800398][T12310] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 482.801236][T12310] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 482.801269][T12310] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 482.968730][T12280] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 483.105203][T12280] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 483.212823][T12280] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 483.322901][T12315] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 483.367375][T20808] --map-set only usable from mangle table [ 483.451992][T20809] netlink: 'syz.4.3805': attribute type 1 has an invalid length. [ 483.465091][T12315] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 483.465110][T12315] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 483.479632][T12313] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 483.622144][T20816] netlink: 'syz.4.3805': attribute type 1 has an invalid length. [ 483.979791][T12282] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 483.979813][T12282] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 484.291129][T20833] 8021q: VLANs not supported on tunl0 [ 484.978165][T20858] netlink: 'syz.4.3814': attribute type 29 has an invalid length. [ 484.984076][T20858] netlink: 'syz.4.3814': attribute type 29 has an invalid length. [ 485.017306][T20852] netlink: 'syz.4.3814': attribute type 29 has an invalid length. [ 486.645630][T20907] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3822'. [ 486.674683][T20907] netlink: 104 bytes leftover after parsing attributes in process `syz.5.3822'. [ 486.681430][T20910] tunl0: entered promiscuous mode [ 486.686971][T20910] netlink: 'syz.0.3820': attribute type 3 has an invalid length. [ 486.686988][T20910] netlink: 9 bytes leftover after parsing attributes in process `syz.0.3820'. [ 487.058594][T12280] net_ratelimit: 15 callbacks suppressed [ 487.058615][T12280] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 487.168440][T20919] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3825'. [ 487.169918][T12313] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 487.205989][T20919] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3825'. [ 487.280465][T12315] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 487.389185][T12280] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 487.428609][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 487.520783][T12313] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 487.634933][T20928] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3829'. [ 487.634956][T20928] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3829'. [ 488.018963][T12313] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 488.128873][ T1175] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 488.228650][ T5650] Bluetooth: hci4: command 0x0406 tx timeout [ 488.292051][T12313] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 488.418875][ T1175] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 488.535695][T20952] erspan0: entered promiscuous mode [ 488.535720][T20952] erspan0: entered allmulticast mode [ 488.619589][T12315] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 488.625889][T20952] netlink: 256 bytes leftover after parsing attributes in process `syz.4.3834'. [ 488.822134][T20965] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3836'. [ 489.233544][T20973] ip6t_srh: unknown srh invflags 4000 [ 489.233671][T20973] ip6t_srh: unknown srh invflags 4000 [ 489.233769][T20973] ip6t_srh: unknown srh invflags 4000 [ 489.233867][T20973] ip6t_srh: unknown srh invflags 4000 [ 489.233978][T20973] ip6t_srh: unknown srh invflags 4000 [ 489.234073][T20973] ip6t_srh: unknown srh invflags 4000 [ 489.234169][T20973] ip6t_srh: unknown srh invflags 4000 [ 489.234266][T20973] ip6t_srh: unknown srh invflags 4000 [ 489.234364][T20973] ip6t_srh: unknown srh invflags 4000 [ 489.234460][T20973] ip6t_srh: unknown srh invflags 4000 [ 489.371090][ T30] audit: type=1107 audit(1793481084.560:9): pid=20961 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='ً5%UA٠0ltݕ/ 6򊨊' [ 489.516939][T20988] gretap2: entered promiscuous mode [ 489.694319][T20996] netlink: 256 bytes leftover after parsing attributes in process `syz.5.3841'. [ 491.198779][T12310] netdevsim netdevsim4 netdevsim0: set [0, 1] type 1 family 0 port 8472 - 0 [ 491.210303][T12315] netdevsim netdevsim4 netdevsim3: set [0, 1] type 1 family 0 port 8472 - 0 [ 491.213156][T12310] netdevsim netdevsim4 netdevsim2: set [0, 1] type 1 family 0 port 8472 - 0 [ 491.213235][T12310] netdevsim netdevsim4 netdevsim1: set [0, 1] type 1 family 0 port 8472 - 0 [ 491.271660][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 492.190412][T12317] net_ratelimit: 19 callbacks suppressed [ 492.190434][T12317] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 492.299005][T12317] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 492.418082][T21087] __nla_validate_parse: 3 callbacks suppressed [ 492.418103][T21087] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3862'. [ 492.418116][T21087] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3862'. [ 492.614211][T21098] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3865'. [ 492.632045][T21086] 8021q: adding VLAN 0 to HW filter on device bond1 [ 492.650528][T12317] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 492.771077][T12317] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 492.773893][T21105] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3867'. [ 492.887089][T12317] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 492.990365][T12280] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 493.099639][T12315] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 493.220976][T12313] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 493.333952][T12315] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 493.434947][T21135] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3873'. [ 493.450512][T12315] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 494.425441][T21167] bond3: entered promiscuous mode [ 494.438503][T21167] 8021q: adding VLAN 0 to HW filter on device bond3 [ 494.555134][T21173] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3881'. [ 494.867813][ T5300] veth1_vlan: left promiscuous mode [ 496.557413][T21143] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 497.040152][T21194] x_tables: duplicate underflow at hook 2 [ 497.215369][ T1175] net_ratelimit: 28 callbacks suppressed [ 497.215392][ T1175] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 497.323656][ T1175] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 497.433162][ T1175] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 497.539805][ T1175] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 497.651003][ T1175] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 497.769565][ T1175] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 497.862666][T21214] netlink: 68 bytes leftover after parsing attributes in process `syz.5.3892'. [ 497.863097][T21215] netlink: 'syz.5.3892': attribute type 1 has an invalid length. [ 497.863112][T21215] netlink: 224 bytes leftover after parsing attributes in process `syz.5.3892'. [ 497.893902][T12313] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 497.991316][ T1175] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 498.114923][ T1175] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 498.220555][ T1175] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 498.258259][T21224] FAULT_INJECTION: forcing a failure. [ 498.258259][T21224] name failslab, interval 1, probability 0, space 0, times 1 [ 498.258288][T21224] CPU: 1 UID: 0 PID: 21224 Comm: syz.5.3894 Not tainted syzkaller #0 PREEMPT(full) [ 498.258311][T21224] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 498.258323][T21224] Call Trace: [ 498.258418][T21224] [ 498.258461][T21224] dump_stack_lvl+0xe8/0x150 [ 498.258603][T21224] should_fail_ex+0x3eb/0x540 [ 498.258698][T21224] should_failslab+0xa8/0x100 [ 498.258751][T21224] __kvmalloc_node_noprof+0x171/0x820 [ 498.258784][T21224] ? __kvmalloc_node_noprof+0x340/0x820 [ 498.258840][T21224] ? bpf_compute_postorder+0x127/0x9a0 [ 498.258885][T21224] ? bpf_compute_postorder+0x127/0x9a0 [ 498.258918][T21224] bpf_compute_postorder+0x127/0x9a0 [ 498.258947][T21224] ? __pfx_resolve_func_ptrs+0x10/0x10 [ 498.258992][T21224] bpf_check+0x298f/0x34e0 [ 498.259025][T21224] ? ktime_get_with_offset+0x93/0x2d0 [ 498.259065][T21224] ? ktime_get_with_offset+0x93/0x2d0 [ 498.259093][T21224] ? __pfx_bpf_check+0x10/0x10 [ 498.259117][T21224] ? bpf_obj_name_cpy+0x194/0x1e0 [ 498.259146][T21224] bpf_prog_load+0x14da/0x1c60 [ 498.259179][T21224] ? __pfx_bpf_prog_load+0x10/0x10 [ 498.259215][T21224] ? __might_fault+0xaf/0x130 [ 498.259253][T21224] __sys_bpf+0xd86/0xe00 [ 498.259282][T21224] ? __pfx___sys_bpf+0x10/0x10 [ 498.259313][T21224] ? __fget_files+0x2a/0x420 [ 498.259400][T21224] ? ksys_write+0x242/0x270 [ 498.259438][T21224] ? __pfx_ksys_write+0x10/0x10 [ 498.259469][T21224] __x64_sys_bpf+0xba/0xd0 [ 498.259501][T21224] do_syscall_64+0x166/0x520 [ 498.259584][T21224] ? trace_irq_disable+0x3b/0x140 [ 498.259610][T21224] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 498.259650][T21224] ? clear_bhb_loop+0x70/0xc0 [ 498.259681][T21224] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 498.259702][T21224] RIP: 0033:0x7f50b499f559 [ 498.259750][T21224] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 498.259767][T21224] RSP: 002b:00007f50b579a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 498.259819][T21224] RAX: ffffffffffffffda RBX: 00007f50b4c25fa0 RCX: 00007f50b499f559 [ 498.259833][T21224] RDX: 0000000000000094 RSI: 0000200000001c00 RDI: 0000000000000005 [ 498.259846][T21224] RBP: 00007f50b579a090 R08: 0000000000000000 R09: 0000000000000000 [ 498.259859][T21224] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 498.259871][T21224] R13: 00007f50b4c26038 R14: 00007f50b4c25fa0 R15: 00007ffe795867e8 [ 498.259905][T21224] [ 498.473747][T21227] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3895'. [ 498.606267][T21234] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3898'. [ 498.606301][T21234] netlink: 'syz.5.3898': attribute type 5 has an invalid length. [ 498.606315][T21234] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3898'. [ 498.675555][T21234] geneve2: entered promiscuous mode [ 498.675580][T21234] geneve2: entered allmulticast mode [ 498.699773][T12317] netdevsim netdevsim5 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 498.701534][T12280] netdevsim netdevsim5 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 498.701572][T12280] netdevsim netdevsim5 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 498.701605][T12280] netdevsim netdevsim5 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 499.589156][T21266] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3906'. [ 499.623754][T21268] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3906'. [ 499.672992][T21271] FAULT_INJECTION: forcing a failure. [ 499.672992][T21271] name failslab, interval 1, probability 0, space 0, times 0 [ 499.673023][T21271] CPU: 1 UID: 0 PID: 21271 Comm: syz.0.3908 Not tainted syzkaller #0 PREEMPT(full) [ 499.673047][T21271] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 499.673059][T21271] Call Trace: [ 499.673069][T21271] [ 499.673077][T21271] dump_stack_lvl+0xe8/0x150 [ 499.673116][T21271] should_fail_ex+0x3eb/0x540 [ 499.673146][T21271] should_failslab+0xa8/0x100 [ 499.673178][T21271] __kvmalloc_node_noprof+0x171/0x820 [ 499.673206][T21271] ? bpf_compute_postorder+0x87f/0x9a0 [ 499.673237][T21271] ? bpf_stack_liveness_init+0x29/0x90 [ 499.673262][T21271] ? bpf_stack_liveness_init+0x29/0x90 [ 499.673295][T21271] bpf_stack_liveness_init+0x29/0x90 [ 499.673323][T21271] bpf_check+0x29af/0x34e0 [ 499.673358][T21271] ? ktime_get_with_offset+0x93/0x2d0 [ 499.673386][T21271] ? ktime_get_with_offset+0x93/0x2d0 [ 499.673415][T21271] ? __pfx_bpf_check+0x10/0x10 [ 499.673441][T21271] ? bpf_obj_name_cpy+0x194/0x1e0 [ 499.673470][T21271] bpf_prog_load+0x14da/0x1c60 [ 499.673505][T21271] ? __pfx_bpf_prog_load+0x10/0x10 [ 499.673543][T21271] ? __might_fault+0xaf/0x130 [ 499.673572][T21271] __sys_bpf+0xd86/0xe00 [ 499.673602][T21271] ? __pfx___sys_bpf+0x10/0x10 [ 499.673636][T21271] ? __fget_files+0x2a/0x420 [ 499.673679][T21271] ? ksys_write+0x242/0x270 [ 499.673709][T21271] ? __pfx_ksys_write+0x10/0x10 [ 499.673742][T21271] __x64_sys_bpf+0xba/0xd0 [ 499.673774][T21271] do_syscall_64+0x166/0x520 [ 499.673798][T21271] ? trace_irq_disable+0x3b/0x140 [ 499.673825][T21271] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 499.673847][T21271] ? clear_bhb_loop+0x70/0xc0 [ 499.673873][T21271] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 499.673894][T21271] RIP: 0033:0x7f36a279f559 [ 499.673913][T21271] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 499.673931][T21271] RSP: 002b:00007f36a359d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 499.673952][T21271] RAX: ffffffffffffffda RBX: 00007f36a2a25fa0 RCX: 00007f36a279f559 [ 499.673973][T21271] RDX: 0000000000000094 RSI: 0000200000001c00 RDI: 0000000000000005 [ 499.673986][T21271] RBP: 00007f36a359d090 R08: 0000000000000000 R09: 0000000000000000 [ 499.673998][T21271] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 499.674011][T21271] R13: 00007f36a2a26038 R14: 00007f36a2a25fa0 R15: 00007ffcd0be2888 [ 499.674045][T21271] [ 500.133265][T21281] netlink: 'syz.4.3912': attribute type 2 has an invalid length. [ 500.260030][T21278] bond3: option lacp_active: mode dependency failed, not supported in mode active-backup(1) [ 500.271828][T21278] bond3 (unregistering): Released all slaves [ 500.351965][ T5796] hid-generic 0005:4C4A:4155.0002: unknown main item tag 0x0 [ 500.364224][ T5796] hid-generic 0005:4C4A:4155.0002: hidraw0: BLUETOOTH HID v0.01 Device [syz0] on aa:aa:aa:aa:aa:aa [ 500.590311][T21302] netlink: 104 bytes leftover after parsing attributes in process `syz.4.3916'. [ 500.967107][T21309] veth7: entered allmulticast mode [ 501.512948][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 502.240950][T12315] net_ratelimit: 28 callbacks suppressed [ 502.240975][T12315] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 502.357086][T12280] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 502.462312][T12317] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 502.575731][T12317] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 502.689872][T12315] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 502.788329][T21377] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 502.804834][T12280] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 502.814363][T21377] netlink: 'syz.5.3935': attribute type 9 has an invalid length. [ 502.857090][T21382] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3936'. [ 502.945024][T12310] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 503.049489][T12315] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 503.160605][T12315] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 503.367478][T21395] tc action pedit offset must be on 32 bit boundaries [ 503.367500][T21395] tc action pedit offset must be on 32 bit boundaries [ 503.367511][T21395] tc action pedit offset must be on 32 bit boundaries [ 503.367522][T21395] tc action pedit offset must be on 32 bit boundaries [ 503.367532][T21395] tc action pedit offset must be on 32 bit boundaries [ 503.367543][T21395] tc action pedit offset must be on 32 bit boundaries [ 503.367553][T21395] tc action pedit offset must be on 32 bit boundaries [ 503.367564][T21395] tc action pedit offset must be on 32 bit boundaries [ 503.367574][T21395] tc action pedit offset must be on 32 bit boundaries [ 503.367584][T21395] tc action pedit offset must be on 32 bit boundaries [ 503.546509][T21406] Cannot find del_set index 0 as target [ 503.575910][T21373] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3932'. [ 504.526176][T21426] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3950'. [ 504.643678][T21428] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3949'. [ 504.769512][T21436] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3949'. [ 505.038353][T21450] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3954'. [ 505.042628][T21450] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3954'. [ 505.042814][T21450] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3954'. [ 505.043010][T21450] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3954'. [ 505.043187][T21450] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3954'. [ 505.043353][T21450] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3954'. [ 506.164152][T21488] FAULT_INJECTION: forcing a failure. [ 506.164152][T21488] name failslab, interval 1, probability 0, space 0, times 0 [ 506.164182][T21488] CPU: 1 UID: 0 PID: 21488 Comm: syz.2.3966 Not tainted syzkaller #0 PREEMPT(full) [ 506.164204][T21488] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 506.164219][T21488] Call Trace: [ 506.164227][T21488] [ 506.164235][T21488] dump_stack_lvl+0xe8/0x150 [ 506.164274][T21488] should_fail_ex+0x3eb/0x540 [ 506.164304][T21488] should_failslab+0xa8/0x100 [ 506.164334][T21488] __kvmalloc_node_noprof+0x171/0x820 [ 506.164358][T21488] ? kasan_save_track+0x3e/0x80 [ 506.164380][T21488] ? __kvmalloc_node_noprof+0x50a/0x820 [ 506.164404][T21488] ? bpf_stack_liveness_init+0x29/0x90 [ 506.164428][T21488] ? bpf_check+0x29af/0x34e0 [ 506.164448][T21488] ? bpf_compute_const_regs+0x18c/0x34e0 [ 506.164474][T21488] ? bpf_compute_const_regs+0x18c/0x34e0 [ 506.164509][T21488] bpf_compute_const_regs+0x18c/0x34e0 [ 506.164558][T21488] ? __pfx_bpf_compute_const_regs+0x10/0x10 [ 506.164584][T21488] ? check_attach_btf_id+0x296/0x1b80 [ 506.164614][T21488] ? rcu_is_watching+0x16/0xb0 [ 506.164681][T21488] ? bpf_stack_liveness_init+0x29/0x90 [ 506.164704][T21488] ? trace_kmalloc+0x2a/0xf0 [ 506.164724][T21488] ? __pfx_check_attach_btf_id+0x10/0x10 [ 506.164745][T21488] ? bpf_stack_liveness_init+0x29/0x90 [ 506.164768][T21488] ? __kvmalloc_node_noprof+0x52a/0x820 [ 506.164803][T21488] ? __asan_memset+0x22/0x50 [ 506.164827][T21488] bpf_check+0x2c04/0x34e0 [ 506.164860][T21488] ? ktime_get_with_offset+0x93/0x2d0 [ 506.164888][T21488] ? ktime_get_with_offset+0x93/0x2d0 [ 506.164915][T21488] ? __pfx_bpf_check+0x10/0x10 [ 506.164939][T21488] ? bpf_obj_name_cpy+0x194/0x1e0 [ 506.164968][T21488] bpf_prog_load+0x14da/0x1c60 [ 506.165001][T21488] ? __pfx_bpf_prog_load+0x10/0x10 [ 506.165036][T21488] ? __might_fault+0xaf/0x130 [ 506.165068][T21488] __sys_bpf+0xd86/0xe00 [ 506.165095][T21488] ? __pfx___sys_bpf+0x10/0x10 [ 506.165125][T21488] ? __fget_files+0x2a/0x420 [ 506.165165][T21488] ? ksys_write+0x242/0x270 [ 506.165193][T21488] ? __pfx_ksys_write+0x10/0x10 [ 506.165224][T21488] __x64_sys_bpf+0xba/0xd0 [ 506.165257][T21488] do_syscall_64+0x166/0x520 [ 506.165280][T21488] ? trace_irq_disable+0x3b/0x140 [ 506.165306][T21488] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 506.165326][T21488] ? clear_bhb_loop+0x70/0xc0 [ 506.165350][T21488] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 506.165369][T21488] RIP: 0033:0x7fdfd4b9f559 [ 506.165386][T21488] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 506.165403][T21488] RSP: 002b:00007fdfd5ab5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 506.165424][T21488] RAX: ffffffffffffffda RBX: 00007fdfd4e25fa0 RCX: 00007fdfd4b9f559 [ 506.165437][T21488] RDX: 0000000000000094 RSI: 0000200000001c00 RDI: 0000000000000005 [ 506.165449][T21488] RBP: 00007fdfd5ab5090 R08: 0000000000000000 R09: 0000000000000000 [ 506.165462][T21488] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 506.165474][T21488] R13: 00007fdfd4e26038 R14: 00007fdfd4e25fa0 R15: 00007ffedd456d58 [ 506.165505][T21488] [ 506.257217][T21490] netlink: 'syz.4.3968': attribute type 1 has an invalid length. [ 507.380568][T12280] net_ratelimit: 30 callbacks suppressed [ 507.380589][T12280] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 507.490058][T12310] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 507.609353][T12306] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 507.618266][T21538] sctp: [Deprecated]: syz.2.3978 (pid 21538) Use of struct sctp_assoc_value in delayed_ack socket option. [ 507.618266][T21538] Use struct sctp_sack_info instead [ 507.719619][T12282] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 507.828716][T12306] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 508.002731][T12306] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 508.115737][T12280] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 508.218765][ T1175] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 508.330056][T21558] netlink: 'syz.5.3983': attribute type 2 has an invalid length. [ 508.367798][T12282] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 508.474646][T12282] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 509.001954][T21578] block nbd0: reconnected socket [ 509.006347][ T5650] block nbd0: Receive control failed (result -32) [ 509.220716][T21583] netlink: 'syz.5.3990': attribute type 1 has an invalid length. [ 509.308093][T21583] bond2: (slave veth0_to_bond): making interface the new active one [ 509.316603][T21583] bond2: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 509.328959][T21586] __nla_validate_parse: 61 callbacks suppressed [ 509.328976][T21586] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3991'. [ 509.334372][T21583] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3990'. [ 509.341201][T21583] 8021q: adding VLAN 0 to HW filter on device bond2 [ 509.665728][T21600] veth0_to_bond: entered allmulticast mode [ 509.740549][T21599] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 509.764842][T21599] netlink: 132 bytes leftover after parsing attributes in process `syz.4.3994'. [ 509.777491][T21605] veth1_macvtap: left promiscuous mode [ 509.777518][T21605] macsec0: entered promiscuous mode [ 509.820092][T21599] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3994'. [ 510.417649][T21625] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4000'. [ 510.746448][T21633] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4003'. [ 510.827829][T21633] netlink: 44 bytes leftover after parsing attributes in process `syz.5.4003'. [ 510.827858][T21633] netlink: 43 bytes leftover after parsing attributes in process `syz.5.4003'. [ 510.827873][T21633] netlink: 'syz.5.4003': attribute type 6 has an invalid length. [ 510.827955][T21633] netlink: 'syz.5.4003': attribute type 5 has an invalid length. [ 510.827968][T21633] netlink: 43 bytes leftover after parsing attributes in process `syz.5.4003'. [ 511.304405][T21644] netlink: 'syz.2.4006': attribute type 10 has an invalid length. [ 511.624974][T21654] FAULT_INJECTION: forcing a failure. [ 511.624974][T21654] name failslab, interval 1, probability 0, space 0, times 0 [ 511.625011][T21654] CPU: 0 UID: 0 PID: 21654 Comm: syz.4.4010 Not tainted syzkaller #0 PREEMPT(full) [ 511.625034][T21654] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 511.625045][T21654] Call Trace: [ 511.625053][T21654] [ 511.625062][T21654] dump_stack_lvl+0xe8/0x150 [ 511.625098][T21654] should_fail_ex+0x3eb/0x540 [ 511.625128][T21654] should_failslab+0xa8/0x100 [ 511.625158][T21654] __kvmalloc_node_noprof+0x171/0x820 [ 511.625186][T21654] ? __kvmalloc_node_noprof+0x340/0x820 [ 511.625210][T21654] ? bpf_compute_scc+0xec/0xdb0 [ 511.625236][T21654] ? bpf_compute_scc+0xec/0xdb0 [ 511.625269][T21654] bpf_compute_scc+0xec/0xdb0 [ 511.625295][T21654] ? sort_subprogs_topo+0xe5f/0x1130 [ 511.625340][T21654] bpf_check+0x2c70/0x34e0 [ 511.625371][T21654] ? ktime_get_with_offset+0x93/0x2d0 [ 511.625398][T21654] ? ktime_get_with_offset+0x93/0x2d0 [ 511.625423][T21654] ? __pfx_bpf_check+0x10/0x10 [ 511.625446][T21654] ? bpf_obj_name_cpy+0x194/0x1e0 [ 511.625474][T21654] bpf_prog_load+0x14da/0x1c60 [ 511.625507][T21654] ? __pfx_bpf_prog_load+0x10/0x10 [ 511.625538][T21654] ? __might_fault+0xaf/0x130 [ 511.625564][T21654] __sys_bpf+0xd86/0xe00 [ 511.625592][T21654] ? __pfx___sys_bpf+0x10/0x10 [ 511.625621][T21654] ? __fget_files+0x2a/0x420 [ 511.625659][T21654] ? ksys_write+0x242/0x270 [ 511.625686][T21654] ? __pfx_ksys_write+0x10/0x10 [ 511.625716][T21654] __x64_sys_bpf+0xba/0xd0 [ 511.625747][T21654] do_syscall_64+0x166/0x520 [ 511.625768][T21654] ? trace_irq_disable+0x3b/0x140 [ 511.625793][T21654] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 511.625813][T21654] ? clear_bhb_loop+0x70/0xc0 [ 511.625839][T21654] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 511.625859][T21654] RIP: 0033:0x7f864f79f559 [ 511.625878][T21654] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 511.625895][T21654] RSP: 002b:00007f86506e7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 511.625917][T21654] RAX: ffffffffffffffda RBX: 00007f864fa25fa0 RCX: 00007f864f79f559 [ 511.625932][T21654] RDX: 0000000000000094 RSI: 0000200000001c00 RDI: 0000000000000005 [ 511.625946][T21654] RBP: 00007f86506e7090 R08: 0000000000000000 R09: 0000000000000000 [ 511.625958][T21654] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 511.625971][T21654] R13: 00007f864fa26038 R14: 00007f864fa25fa0 R15: 00007ffdfdca00e8 [ 511.626013][T21654] [ 512.261021][T21664] netlink: 'syz.4.4013': attribute type 10 has an invalid length. [ 512.543376][T21660] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 512.543416][T21660] netdevsim netdevsim5 netdevsim3: unset [1, 1] type 2 family 0 port 256 - 0 [ 512.789091][T12313] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 512.789148][T12313] net_ratelimit: 22 callbacks suppressed [ 512.789162][T12313] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 512.903704][T12282] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 513.018667][T12315] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 513.128848][ T62] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 513.239667][T12306] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 513.350269][T12282] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 513.379614][T21683] netlink: 'syz.5.4018': attribute type 1 has an invalid length. [ 513.426881][T21682] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4020'. [ 513.528359][T21691] ieee802154 phy0 wpan0: encryption failed: -22 [ 513.536820][T21683] 8021q: adding VLAN 0 to HW filter on device bond3 [ 513.636198][T21691] openvswitch: netlink: Key type 31 is not supported [ 513.636753][T21683] netlink: 'syz.5.4018': attribute type 10 has an invalid length. [ 513.656342][T21695] ieee802154 phy0 wpan0: encryption failed: -22 [ 513.742342][T21695] openvswitch: netlink: Key type 31 is not supported [ 513.820413][T21690] bond3: (slave dummy0): making interface the new active one [ 513.869721][T21690] bond3: (slave dummy0): Enslaving as an active interface with an up link [ 513.893725][T12313] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 513.894886][T21683] dummy0: entered promiscuous mode [ 513.955901][T21683] bond3: (slave dummy0): Releasing active interface [ 514.020190][ T1175] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 514.347257][T21715] FAULT_INJECTION: forcing a failure. [ 514.347257][T21715] name failslab, interval 1, probability 0, space 0, times 0 [ 514.347288][T21715] CPU: 1 UID: 0 PID: 21715 Comm: syz.4.4023 Not tainted syzkaller #0 PREEMPT(full) [ 514.347309][T21715] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 514.347322][T21715] Call Trace: [ 514.347330][T21715] [ 514.347338][T21715] dump_stack_lvl+0xe8/0x150 [ 514.347377][T21715] should_fail_ex+0x3eb/0x540 [ 514.347408][T21715] should_failslab+0xa8/0x100 [ 514.347440][T21715] __kvmalloc_node_noprof+0x171/0x820 [ 514.347469][T21715] ? __kvmalloc_node_noprof+0x340/0x820 [ 514.347494][T21715] ? bpf_compute_scc+0x120/0xdb0 [ 514.347521][T21715] ? bpf_compute_scc+0x120/0xdb0 [ 514.347555][T21715] bpf_compute_scc+0x120/0xdb0 [ 514.347581][T21715] ? sort_subprogs_topo+0xe5f/0x1130 [ 514.347628][T21715] bpf_check+0x2c70/0x34e0 [ 514.347661][T21715] ? ktime_get_with_offset+0x93/0x2d0 [ 514.347688][T21715] ? ktime_get_with_offset+0x93/0x2d0 [ 514.347716][T21715] ? __pfx_bpf_check+0x10/0x10 [ 514.347741][T21715] ? bpf_obj_name_cpy+0x194/0x1e0 [ 514.347770][T21715] bpf_prog_load+0x14da/0x1c60 [ 514.347811][T21715] ? __pfx_bpf_prog_load+0x10/0x10 [ 514.347848][T21715] ? __might_fault+0xaf/0x130 [ 514.347875][T21715] __sys_bpf+0xd86/0xe00 [ 514.347904][T21715] ? __pfx___sys_bpf+0x10/0x10 [ 514.347936][T21715] ? __fget_files+0x2a/0x420 [ 514.347979][T21715] ? ksys_write+0x242/0x270 [ 514.348008][T21715] ? __pfx_ksys_write+0x10/0x10 [ 514.348040][T21715] __x64_sys_bpf+0xba/0xd0 [ 514.348071][T21715] do_syscall_64+0x166/0x520 [ 514.348094][T21715] ? trace_irq_disable+0x3b/0x140 [ 514.348121][T21715] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 514.348141][T21715] ? clear_bhb_loop+0x70/0xc0 [ 514.348166][T21715] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 514.348186][T21715] RIP: 0033:0x7f864f79f559 [ 514.348205][T21715] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 514.348222][T21715] RSP: 002b:00007f86506e7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 514.348244][T21715] RAX: ffffffffffffffda RBX: 00007f864fa25fa0 RCX: 00007f864f79f559 [ 514.348259][T21715] RDX: 0000000000000094 RSI: 0000200000001c00 RDI: 0000000000000005 [ 514.348272][T21715] RBP: 00007f86506e7090 R08: 0000000000000000 R09: 0000000000000000 [ 514.348284][T21715] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 514.348297][T21715] R13: 00007f864fa26038 R14: 00007f864fa25fa0 R15: 00007ffdfdca00e8 [ 514.348330][T21715] [ 514.843479][T21730] netlink: 'syz.4.4026': attribute type 18 has an invalid length. [ 515.087540][T21741] netlink: 'syz.1.4028': attribute type 12 has an invalid length. [ 515.103659][T21738] netlink: 'syz.1.4028': attribute type 12 has an invalid length. [ 515.120847][T21742] __nla_validate_parse: 2 callbacks suppressed [ 515.120868][T21742] netlink: 256 bytes leftover after parsing attributes in process `syz.0.4027'. [ 515.338176][T21738] tipc: Started in network mode [ 515.338207][T21738] tipc: Node identity ac14142f, cluster identity 4711 [ 515.346611][T21738] tipc: Enabled bearer , priority 10 [ 515.347211][T21738] tipc: Can't add remote ip to TIPC UDP multicast bearer [ 515.601696][T21749] bond0: entered promiscuous mode [ 515.601721][T21749] bond_slave_0: entered promiscuous mode [ 515.602596][T21749] bond_slave_1: entered promiscuous mode [ 515.625272][T21749] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4030'. [ 515.625294][T21749] netlink: 224 bytes leftover after parsing attributes in process `syz.5.4030'. [ 515.625310][T21749] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4030'. [ 515.797427][T21754] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4030'. [ 515.797450][T21754] netlink: 224 bytes leftover after parsing attributes in process `syz.5.4030'. [ 515.797465][T21754] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4030'. [ 516.477464][ T5759] tipc: Node number set to 2886997039 [ 516.708368][T21782] bridge1: entered allmulticast mode [ 516.796117][ T5300] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 516.844774][T21792] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4042'. [ 516.967009][T21788] bridge2: entered allmulticast mode [ 517.133462][T21794] syzkaller1: entered allmulticast mode [ 517.140427][ T5650] Bluetooth: hci2: link tx timeout [ 517.140446][ T5650] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 517.184573][T21803] Bluetooth: hci2: link tx timeout [ 517.184594][T21803] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 517.185442][T21803] Bluetooth: hci2: link tx timeout [ 517.185454][T21803] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 517.185836][T21803] Bluetooth: hci2: link tx timeout [ 517.185847][T21803] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 517.185935][T21803] Bluetooth: hci2: link tx timeout [ 517.185945][T21803] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 517.185969][T21803] Bluetooth: hci2: link tx timeout [ 517.185979][T21803] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 517.186001][T21803] Bluetooth: hci2: link tx timeout [ 517.186015][T21803] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 517.186220][T21803] Bluetooth: hci2: link tx timeout [ 517.186231][T21803] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 517.186253][T21803] Bluetooth: hci2: link tx timeout [ 517.186262][T21803] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 517.186285][T21803] Bluetooth: hci2: link tx timeout [ 517.186294][T21803] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 517.186374][T21803] Bluetooth: hci2: link tx timeout [ 517.186384][T21803] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 517.186407][T21803] Bluetooth: hci2: link tx timeout [ 517.186417][T21803] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 517.186439][T21803] Bluetooth: hci2: link tx timeout [ 517.186448][T21803] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 517.186541][T21803] Bluetooth: hci2: link tx timeout [ 517.186552][T21803] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 517.186616][T21803] Bluetooth: hci2: link tx timeout [ 517.186626][T21803] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 517.186649][T21803] Bluetooth: hci2: link tx timeout [ 517.186658][T21803] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 517.186680][T21803] Bluetooth: hci2: link tx timeout [ 517.186688][T21803] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 517.186776][T21803] Bluetooth: hci2: link tx timeout [ 517.186786][T21803] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 517.231834][T21803] Bluetooth: hci2: link tx timeout [ 517.231853][T21803] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 517.231880][T21803] Bluetooth: hci2: link tx timeout [ 517.231889][T21803] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 517.231912][T21803] Bluetooth: hci2: link tx timeout [ 517.231921][T21803] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 517.231977][T21803] Bluetooth: hci2: link tx timeout [ 517.231987][T21803] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 517.232011][T21803] Bluetooth: hci2: link tx timeout [ 517.232020][T21803] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 517.232110][T21803] Bluetooth: hci2: link tx timeout [ 517.232120][T21803] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 517.232144][T21803] Bluetooth: hci2: link tx timeout [ 517.232153][T21803] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 517.232204][T21803] Bluetooth: hci2: link tx timeout [ 517.232214][T21803] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 517.232267][T21803] Bluetooth: hci2: link tx timeout [ 517.232278][T21803] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 517.232328][T21803] Bluetooth: hci2: link tx timeout [ 517.232339][T21803] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 517.232386][T21803] Bluetooth: hci2: link tx timeout [ 517.232396][T21803] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 517.232452][T21803] Bluetooth: hci2: link tx timeout [ 517.232463][T21803] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 517.232485][T21803] Bluetooth: hci2: link tx timeout [ 517.232494][T21803] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 517.232545][T21803] Bluetooth: hci2: link tx timeout [ 517.232555][T21803] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 517.232645][T21803] Bluetooth: hci2: link tx timeout [ 517.232655][T21803] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 517.872980][T12315] net_ratelimit: 28 callbacks suppressed [ 517.873003][T12315] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 517.906086][T21814] netlink: 'syz.1.4047': attribute type 21 has an invalid length. [ 517.906175][T21814] netlink: 132 bytes leftover after parsing attributes in process `syz.1.4047'. [ 518.078565][T12310] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 518.190758][T12315] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 518.300878][T12315] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 518.394182][T21835] netlink: 256 bytes leftover after parsing attributes in process `syz.1.4053'. [ 518.418128][T21838] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 518.421992][T12306] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 518.529475][T12315] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 518.640659][T12315] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 518.757098][T12282] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 518.788609][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 518.871258][T12282] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 519.191299][T21803] Bluetooth: hci2: command 0x0405 tx timeout [ 520.763687][T21872] vlan1 (unregistering): left allmulticast mode [ 520.763711][T21872] veth0_vlan (unregistering): left allmulticast mode [ 521.334943][T21928] __nla_validate_parse: 5 callbacks suppressed [ 521.334965][T21928] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4073'. [ 521.450534][T21934] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4074'. [ 521.514826][T21928] syzkaller0: left promiscuous mode [ 521.514849][T21928] syzkaller0: left allmulticast mode [ 521.571662][T21928] tc action pedit unable to extract header offset for header type (0x4) [ 521.571688][T21928] tc action pedit unable to extract header offset for header type (0x4) [ 521.571701][T21928] tc action pedit unable to extract header offset for header type (0x4) [ 521.571713][T21928] tc action pedit unable to extract header offset for header type (0x4) [ 521.571726][T21928] tc action pedit unable to extract header offset for header type (0x4) [ 521.571769][T21928] tc action pedit unable to extract header offset for header type (0x4) [ 521.571783][T21928] tc action pedit unable to extract header offset for header type (0x4) [ 521.571795][T21928] tc action pedit unable to extract header offset for header type (0x4) [ 521.571807][T21928] tc action pedit unable to extract header offset for header type (0x4) [ 521.571820][T21928] tc action pedit unable to extract header offset for header type (0x4) [ 522.513687][T21957] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4080'. [ 522.516945][T21953] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4078'. [ 522.543710][T21957] netlink: 'syz.0.4080': attribute type 8 has an invalid length. [ 522.666267][T21960] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4081'. [ 522.804983][T21969] x_tables: duplicate underflow at hook 3 [ 522.929531][T12313] net_ratelimit: 21 callbacks suppressed [ 522.929553][T12313] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 523.035366][T21981] FAULT_INJECTION: forcing a failure. [ 523.035366][T21981] name failslab, interval 1, probability 0, space 0, times 0 [ 523.035398][T21981] CPU: 1 UID: 0 PID: 21981 Comm: syz.2.4087 Not tainted syzkaller #0 PREEMPT(full) [ 523.035424][T21981] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 523.035437][T21981] Call Trace: [ 523.035445][T21981] [ 523.035453][T21981] dump_stack_lvl+0xe8/0x150 [ 523.035494][T21981] should_fail_ex+0x3eb/0x540 [ 523.035524][T21981] should_failslab+0xa8/0x100 [ 523.035556][T21981] __kvmalloc_node_noprof+0x171/0x820 [ 523.035582][T21981] ? lockdep_hardirqs_on+0x7b/0x110 [ 523.035703][T21981] ? bpf_compute_loops+0x103/0x3e80 [ 523.035724][T21981] ? bpf_compute_loops+0x103/0x3e80 [ 523.035744][T21981] ? bpf_compute_idoms+0x18b5/0x1940 [ 523.035768][T21981] bpf_compute_loops+0x103/0x3e80 [ 523.035789][T21981] ? bpf_compute_idoms+0x18b5/0x1940 [ 523.035832][T21981] bpf_check+0x2ce7/0x34e0 [ 523.035864][T21981] ? ktime_get_with_offset+0x93/0x2d0 [ 523.035891][T21981] ? ktime_get_with_offset+0x93/0x2d0 [ 523.035916][T21981] ? __pfx_bpf_check+0x10/0x10 [ 523.035937][T21981] ? bpf_obj_name_cpy+0x194/0x1e0 [ 523.035966][T21981] bpf_prog_load+0x14da/0x1c60 [ 523.036005][T21981] ? __pfx_bpf_prog_load+0x10/0x10 [ 523.036041][T21981] ? __might_fault+0xaf/0x130 [ 523.036068][T21981] __sys_bpf+0xd86/0xe00 [ 523.036096][T21981] ? __pfx___sys_bpf+0x10/0x10 [ 523.036127][T21981] ? __fget_files+0x2a/0x420 [ 523.036169][T21981] ? ksys_write+0x242/0x270 [ 523.036196][T21981] ? __pfx_ksys_write+0x10/0x10 [ 523.036226][T21981] __x64_sys_bpf+0xba/0xd0 [ 523.036257][T21981] do_syscall_64+0x166/0x520 [ 523.036278][T21981] ? trace_irq_disable+0x3b/0x140 [ 523.036301][T21981] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 523.036321][T21981] ? clear_bhb_loop+0x70/0xc0 [ 523.036343][T21981] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 523.036361][T21981] RIP: 0033:0x7fdfd4b9f559 [ 523.036379][T21981] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 523.036396][T21981] RSP: 002b:00007fdfd5ab5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 523.036418][T21981] RAX: ffffffffffffffda RBX: 00007fdfd4e25fa0 RCX: 00007fdfd4b9f559 [ 523.036433][T21981] RDX: 0000000000000094 RSI: 0000200000001c00 RDI: 0000000000000005 [ 523.036445][T21981] RBP: 00007fdfd5ab5090 R08: 0000000000000000 R09: 0000000000000000 [ 523.036458][T21981] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 523.036469][T21981] R13: 00007fdfd4e26038 R14: 00007fdfd4e25fa0 R15: 00007ffedd456d58 [ 523.036502][T21981] [ 523.039247][T12282] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 523.149207][ T1175] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 523.195200][T21972] netlink: 'syz.4.4086': attribute type 8 has an invalid length. [ 523.446941][T21990] netlink: 228 bytes leftover after parsing attributes in process `syz.0.4090'. [ 523.571100][ T62] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 523.680078][ T62] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 523.794679][T22001] ip6t_rt: too many addresses specified [ 523.816044][ T62] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 523.919548][ T62] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 524.121083][T12282] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 524.179758][T22013] xt_hashlimit: size too large, truncated to 1048576 [ 524.235877][T22018] xt_hashlimit: size too large, truncated to 1048576 [ 524.269149][ T8845] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 524.399105][ T62] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 524.702649][T22027] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4096'. [ 524.706710][T22027] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4096'. [ 524.757136][T22027] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4096'. [ 524.757161][T22027] netlink: 'syz.0.4096': attribute type 3 has an invalid length. [ 524.757176][T22027] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4096'. [ 524.757925][T22027] netlink: 'syz.0.4096': attribute type 3 has an invalid length. [ 525.287546][T22057] FAULT_INJECTION: forcing a failure. [ 525.287546][T22057] name failslab, interval 1, probability 0, space 0, times 0 [ 525.287578][T22057] CPU: 1 UID: 0 PID: 22057 Comm: syz.2.4101 Not tainted syzkaller #0 PREEMPT(full) [ 525.287600][T22057] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 525.287612][T22057] Call Trace: [ 525.287620][T22057] [ 525.287628][T22057] dump_stack_lvl+0xe8/0x150 [ 525.287666][T22057] should_fail_ex+0x3eb/0x540 [ 525.287696][T22057] should_failslab+0xa8/0x100 [ 525.287728][T22057] __kvmalloc_node_noprof+0x171/0x820 [ 525.287763][T22057] ? __kvmalloc_node_noprof+0x340/0x820 [ 525.287792][T22057] ? bpf_compute_subprog_arg_access+0x194/0x15c0 [ 525.287818][T22057] ? bpf_compute_subprog_arg_access+0x194/0x15c0 [ 525.287853][T22057] bpf_compute_subprog_arg_access+0x194/0x15c0 [ 525.287904][T22057] ? __pfx_bpf_compute_subprog_arg_access+0x10/0x10 [ 525.287937][T22057] ? __kvmalloc_node_noprof+0x340/0x820 [ 525.287962][T22057] ? bpf_compute_live_registers+0x142/0x1df0 [ 525.287987][T22057] ? bpf_compute_live_registers+0x142/0x1df0 [ 525.288022][T22057] bpf_compute_live_registers+0x10b0/0x1df0 [ 525.288073][T22057] ? __pfx_bpf_compute_live_registers+0x10/0x10 [ 525.288112][T22057] bpf_check+0x2d0b/0x34e0 [ 525.288147][T22057] ? ktime_get_with_offset+0x93/0x2d0 [ 525.288175][T22057] ? ktime_get_with_offset+0x93/0x2d0 [ 525.288202][T22057] ? __pfx_bpf_check+0x10/0x10 [ 525.288226][T22057] ? bpf_obj_name_cpy+0x194/0x1e0 [ 525.288255][T22057] bpf_prog_load+0x14da/0x1c60 [ 525.288289][T22057] ? __pfx_bpf_prog_load+0x10/0x10 [ 525.288325][T22057] ? __might_fault+0xaf/0x130 [ 525.288353][T22057] __sys_bpf+0xd86/0xe00 [ 525.288382][T22057] ? __pfx___sys_bpf+0x10/0x10 [ 525.288410][T22057] ? __fget_files+0x2a/0x420 [ 525.288447][T22057] ? ksys_write+0x242/0x270 [ 525.288472][T22057] ? __pfx_ksys_write+0x10/0x10 [ 525.288500][T22057] __x64_sys_bpf+0xba/0xd0 [ 525.288531][T22057] do_syscall_64+0x166/0x520 [ 525.288554][T22057] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 525.288575][T22057] ? clear_bhb_loop+0x70/0xc0 [ 525.288599][T22057] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 525.288619][T22057] RIP: 0033:0x7fdfd4b9f559 [ 525.288637][T22057] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 525.288654][T22057] RSP: 002b:00007fdfd5ab5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 525.288676][T22057] RAX: ffffffffffffffda RBX: 00007fdfd4e25fa0 RCX: 00007fdfd4b9f559 [ 525.288691][T22057] RDX: 0000000000000094 RSI: 0000200000001c00 RDI: 0000000000000005 [ 525.288704][T22057] RBP: 00007fdfd5ab5090 R08: 0000000000000000 R09: 0000000000000000 [ 525.288717][T22057] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 525.288729][T22057] R13: 00007fdfd4e26038 R14: 00007fdfd4e25fa0 R15: 00007ffedd456d58 [ 525.288770][T22057] [ 526.273189][T22069] syzkaller0: entered promiscuous mode [ 526.273376][T22069] syzkaller0: entered allmulticast mode [ 526.458088][T22086] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 526.724699][T22091] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 526.756865][T22090] netlink: 'syz.2.4107': attribute type 1 has an invalid length. [ 526.779460][T12281] ------------[ cut here ]------------ [ 526.779475][T12281] conntrack cleanup blocked for 60s [ 526.779491][T12281] WARNING: net/netfilter/nf_conntrack_core.c:2504 at nf_conntrack_cleanup_net_list+0x21a/0x370, CPU#0: kworker/u8:16/12281 [ 526.803912][T12281] Modules linked in: [ 526.807920][T12281] CPU: 0 UID: 0 PID: 12281 Comm: kworker/u8:16 Not tainted syzkaller #0 PREEMPT(full) [ 526.817725][T12281] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 526.828160][T12281] Workqueue: netns cleanup_net [ 526.833177][T12281] RIP: 0010:nf_conntrack_cleanup_net_list+0x21a/0x370 [ 526.840043][T12281] Code: 4c 89 ef e8 a8 6e 25 f8 4d 8b 7d 00 4d 39 ef 74 69 e8 0a 91 ae f7 45 31 e4 e9 aa fe ff ff e8 fd 90 ae f7 48 8d 3d b6 b2 92 07 <67> 48 0f b9 3a eb c0 89 e9 80 e1 07 80 c1 03 38 c1 0f 8c da fe ff [ 526.857965][T22084] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 526.870020][T12281] RSP: 0018:ffffc900037ff8b0 EFLAGS: 00010293 [ 526.876317][T12281] RAX: ffffffff8a1a84d3 RBX: dffffc0000000000 RCX: ffff888055ea5dc0 [ 526.884403][T12281] RDX: 0000000000000000 RSI: fffffffffffffffd RDI: ffffffff91ad3790 [ 526.892871][T12281] RBP: 0000000000000001 R08: ffff888032430003 R09: 1ffff11006486000 [ 526.900955][T12281] R10: dffffc0000000000 R11: ffffed1006486001 R12: 00000001000057dc [ 526.909013][T12281] R13: ffffc900037ffa50 R14: ffffc900037ffa50 R15: 00000001000057df [ 526.917075][T12281] FS: 0000000000000000(0000) GS:ffff88812361f000(0000) knlGS:0000000000000000 [ 526.923070][T22106] __nla_validate_parse: 2 callbacks suppressed [ 526.923088][T22106] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4110'. [ 526.941703][T12281] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 526.948307][T12281] CR2: 00007f36a29f84b8 CR3: 000000000fd48000 CR4: 00000000003526f0 [ 526.956801][T12281] Call Trace: [ 526.960470][T12281] [ 526.963425][T12281] ? __pfx_nf_conntrack_pernet_exit+0x10/0x10 [ 526.969630][T12281] ops_undo_list+0x4d7/0x8f0 [ 526.974364][T12281] ? __pfx_ops_undo_list+0x10/0x10 [ 526.979884][T12281] ? idr_destroy+0x227/0x290 [ 526.984608][T12281] cleanup_net+0x572/0x810 [ 526.989159][T12281] ? __pfx_cleanup_net+0x10/0x10 [ 526.994120][T12281] ? rcu_is_watching+0x16/0xb0 [ 526.999051][T12281] ? process_scheduled_works+0x97a/0x1630 [ 527.004881][T12281] process_scheduled_works+0xc3d/0x1630 [ 527.010613][T12281] ? __pfx_process_scheduled_works+0x10/0x10 [ 527.016992][T12281] ? assign_work+0x3cf/0x5d0 [ 527.021755][T12281] worker_thread+0xa47/0xfb0 [ 527.026402][T12281] kthread+0x38b/0x480 [ 527.030611][T12281] ? __pfx_worker_thread+0x10/0x10 [ 527.035741][T12281] ? __pfx_kthread+0x10/0x10 [ 527.040735][T12281] ret_from_fork+0x514/0xb70 [ 527.045412][T12281] ? save_fpregs_to_fpstate+0x176/0x200 [ 527.051081][T12281] ? __pfx_ret_from_fork+0x10/0x10 [ 527.056213][T12281] ? __switch_to+0xc78/0x1410 [ 527.061026][T12281] ? __pfx_kthread+0x10/0x10 [ 527.065635][T12281] ret_from_fork_asm+0x1a/0x30 [ 527.070884][T12281] [ 527.073937][T12281] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 527.081222][T12281] CPU: 0 UID: 0 PID: 12281 Comm: kworker/u8:16 Not tainted syzkaller #0 PREEMPT(full) [ 527.090860][T12281] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 527.100930][T12281] Workqueue: netns cleanup_net [ 527.105720][T12281] Call Trace: [ 527.109008][T12281] [ 527.111944][T12281] vpanic+0x26f/0x710 [ 527.115984][T12281] panic+0xc5/0xd0 [ 527.119714][T12281] ? __pfx_panic+0x10/0x10 [ 527.124156][T12281] ? ret_from_fork_asm+0x1a/0x30 [ 527.129113][T12281] __warn+0x315/0x4c0 [ 527.133106][T12281] ? nf_conntrack_cleanup_net_list+0x21a/0x370 [ 527.139281][T12281] ? nf_conntrack_cleanup_net_list+0x21a/0x370 [ 527.145446][T12281] __report_bug+0x276/0x570 [ 527.150063][T12281] ? nf_conntrack_cleanup_net_list+0x21a/0x370 [ 527.156243][T12281] ? __pfx___report_bug+0x10/0x10 [ 527.161297][T12281] ? nf_conntrack_cleanup_net_list+0x131/0x370 [ 527.167469][T12281] report_bug_entry+0x19b/0x290 [ 527.172342][T12281] ? nf_conntrack_cleanup_net_list+0x21a/0x370 [ 527.178513][T12281] ? nf_conntrack_cleanup_net_list+0x21f/0x370 [ 527.184689][T12281] handle_bug+0xce/0x200 [ 527.188947][T12281] exc_invalid_op+0x1a/0x50 [ 527.193560][T12281] asm_exc_invalid_op+0x1a/0x20 [ 527.198423][T12281] RIP: 0010:nf_conntrack_cleanup_net_list+0x21a/0x370 [ 527.205215][T12281] Code: 4c 89 ef e8 a8 6e 25 f8 4d 8b 7d 00 4d 39 ef 74 69 e8 0a 91 ae f7 45 31 e4 e9 aa fe ff ff e8 fd 90 ae f7 48 8d 3d b6 b2 92 07 <67> 48 0f b9 3a eb c0 89 e9 80 e1 07 80 c1 03 38 c1 0f 8c da fe ff [ 527.224835][T12281] RSP: 0018:ffffc900037ff8b0 EFLAGS: 00010293 [ 527.230921][T12281] RAX: ffffffff8a1a84d3 RBX: dffffc0000000000 RCX: ffff888055ea5dc0 [ 527.238910][T12281] RDX: 0000000000000000 RSI: fffffffffffffffd RDI: ffffffff91ad3790 [ 527.246895][T12281] RBP: 0000000000000001 R08: ffff888032430003 R09: 1ffff11006486000 [ 527.254885][T12281] R10: dffffc0000000000 R11: ffffed1006486001 R12: 00000001000057dc [ 527.262868][T12281] R13: ffffc900037ffa50 R14: ffffc900037ffa50 R15: 00000001000057df [ 527.270870][T12281] ? nf_conntrack_cleanup_net_list+0x213/0x370 [ 527.277064][T12281] ? __pfx_nf_conntrack_pernet_exit+0x10/0x10 [ 527.283151][T12281] ops_undo_list+0x4d7/0x8f0 [ 527.287782][T12281] ? __pfx_ops_undo_list+0x10/0x10 [ 527.292919][T12281] ? idr_destroy+0x227/0x290 [ 527.297529][T12281] cleanup_net+0x572/0x810 [ 527.301965][T12281] ? __pfx_cleanup_net+0x10/0x10 [ 527.306924][T12281] ? rcu_is_watching+0x16/0xb0 [ 527.311706][T12281] ? process_scheduled_works+0x97a/0x1630 [ 527.317452][T12281] process_scheduled_works+0xc3d/0x1630 [ 527.323062][T12281] ? __pfx_process_scheduled_works+0x10/0x10 [ 527.329076][T12281] ? assign_work+0x3cf/0x5d0 [ 527.333695][T12281] worker_thread+0xa47/0xfb0 [ 527.338326][T12281] kthread+0x38b/0x480 [ 527.342403][T12281] ? __pfx_worker_thread+0x10/0x10 [ 527.347526][T12281] ? __pfx_kthread+0x10/0x10 [ 527.352126][T12281] ret_from_fork+0x514/0xb70 [ 527.356718][T12281] ? save_fpregs_to_fpstate+0x176/0x200 [ 527.362290][T12281] ? __pfx_ret_from_fork+0x10/0x10 [ 527.367419][T12281] ? __switch_to+0xc78/0x1410 [ 527.372128][T12281] ? __pfx_kthread+0x10/0x10 [ 527.376735][T12281] ret_from_fork_asm+0x1a/0x30 [ 527.381536][T12281] [ 527.384715][T12281] Kernel Offset: disabled [ 527.389034][T12281] Rebooting in 86400 seconds..