last executing test programs:

2m40.496220464s ago: executing program 2 (id=7361):
r0 = socket$inet6(0xa, 0x3, 0x2)
socket(0xb, 0x80000, 0x4)
connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0)
syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff)
connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e24, 0x0, @empty, 0x3}, 0x1c)
sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20000080)
sendto(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e24, 0x4, @loopback, 0x3}, 0x1c)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000020000006b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000300000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r2)
sendmsg$NLBL_CIPSOV4_C_ADD(r2, 0x0, 0x0)

2m39.732502202s ago: executing program 2 (id=7474):
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4)
setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000180)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7fe, 0xf83, 0x8}, 0x1c)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000fc0)=ANY=[], 0xd4}}, 0x0)

2m39.461206172s ago: executing program 2 (id=7477):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa30e, 0x1, 0xfffffffa}}}}]}, 0x44}}, 0x0)
r4 = socket(0x400000000010, 0x3, 0x0)
r5 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001d80)=@newtfilter={0x30, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r6, {0x0, 0xffe0}, {}, {0xa}}, [@filter_kind_options=@f_u32={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000080}, 0x20000000)

2m38.931815289s ago: executing program 2 (id=7481):
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000040)={0x0, 0xff80, 0x90}, 0x8)
getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x74, &(0x7f0000000040)=""/184, &(0x7f0000000000)=0xb8)

2m38.647761522s ago: executing program 2 (id=7482):
r0 = socket$kcm(0x21, 0x2, 0x2)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x3, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000fcffffff000000000000000095"], &(0x7f0000000300)='syzkaller\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10)
sendmsg$kcm(r0, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0xffff, 0x2, 0x10, {0x2, 0x4e21, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x20044010)

2m38.460022485s ago: executing program 2 (id=7486):
openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000000)='GPL\x00'}, 0x90)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x8, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="7a0a00ff00000000711081000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000010040b7080000000000007b8af8ff00000000b7080000000000107b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb702000008"], 0x0, 0x9, 0x0, 0x0, 0x0, 0xa}, 0x94)
socket$nl_route(0x10, 0x3, 0x0)
socket$xdp(0x2c, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_HWID={0x6, 0x18, 0x9}, @IFLA_GRE_ERSPAN_DIR={0x5, 0x17, 0x1}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}]}}}]}, 0x54}}, 0x0)
socket(0x10, 0x2, 0x0)
socket$kcm(0x10, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000001080)=ANY=[@ANYBLOB="0a000000050000000200000007"], 0x50)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r2 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)={0x18, 0x1404, 0x1, 0x70bd2d, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0)
unshare(0x64000600)
r3 = socket$inet6(0x10, 0x2, 0x0)
write(r3, &(0x7f0000000000)="fc0000001c000705ab092509b86813000aab080102000000b85b0e93210001c0f0060848050000010000000000039815fa2c53c28648000000b937799f377a00bc000c00f0036cdf0db400600033d44000040060b16a482c0a3c313012dafd5a32e273fc83ab82d710f74cec18444ef90d475ef8b2863ef3d92c94170e5bba2e177312e081f691bc5110556888100000463ae4f5df1b394cfd6239ec2a0f0d1bcae5f5502943283f4b9e611183b102b2b8f5566791cb19020191bd0733802e0784f2013cd1890058a10000c880ac801fe4af000049f0d4794eedfca92c09d776e7a90ab79a6f00a1960548deac279c00"/252, 0xfc)

2m23.353038296s ago: executing program 32 (id=7486):
openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000000)='GPL\x00'}, 0x90)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x8, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="7a0a00ff00000000711081000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000010040b7080000000000007b8af8ff00000000b7080000000000107b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb702000008"], 0x0, 0x9, 0x0, 0x0, 0x0, 0xa}, 0x94)
socket$nl_route(0x10, 0x3, 0x0)
socket$xdp(0x2c, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x54, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_HWID={0x6, 0x18, 0x9}, @IFLA_GRE_ERSPAN_DIR={0x5, 0x17, 0x1}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}]}}}]}, 0x54}}, 0x0)
socket(0x10, 0x2, 0x0)
socket$kcm(0x10, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000001080)=ANY=[@ANYBLOB="0a000000050000000200000007"], 0x50)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r2 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)={0x18, 0x1404, 0x1, 0x70bd2d, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0)
unshare(0x64000600)
r3 = socket$inet6(0x10, 0x2, 0x0)
write(r3, &(0x7f0000000000)="fc0000001c000705ab092509b86813000aab080102000000b85b0e93210001c0f0060848050000010000000000039815fa2c53c28648000000b937799f377a00bc000c00f0036cdf0db400600033d44000040060b16a482c0a3c313012dafd5a32e273fc83ab82d710f74cec18444ef90d475ef8b2863ef3d92c94170e5bba2e177312e081f691bc5110556888100000463ae4f5df1b394cfd6239ec2a0f0d1bcae5f5502943283f4b9e611183b102b2b8f5566791cb19020191bd0733802e0784f2013cd1890058a10000c880ac801fe4af000049f0d4794eedfca92c09d776e7a90ab79a6f00a1960548deac279c00"/252, 0xfc)

1m28.861676972s ago: executing program 0 (id=8488):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[], 0x0, 0x1c}, 0x28)
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)
listen(r0, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000240)=ANY=[@ANYBLOB="3000000003080500000000000000000001000000050003000100000006000240000000000c0004"], 0x30}}, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$IP_VS_SO_GET_VERSION(r2, 0x0, 0x480, &(0x7f0000000180), &(0x7f0000000300)=0x40)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00'}, 0x10)
bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x4040)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r3 = accept4(r1, 0x0, 0x0, 0x800)
sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
syz_emit_ethernet(0x4e, &(0x7f0000000340)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x5a}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f900f5", 0x18, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x2}]}}}}}}}}, 0x0)

1m28.739770196s ago: executing program 0 (id=8490):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112})
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00', r1}, 0x10)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x112})
ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000000100)={'vlan0\x00', 0x400})

1m28.567077405s ago: executing program 0 (id=8494):
r0 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'syz_tun\x00', <r1=>0x0})
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="180200"/13], &(0x7f00000005c0)='GPL\x00'}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r2, r1, 0x25, 0x0, @void}, 0x10)
syz_emit_ethernet(0xfdef, &(0x7f0000000a40)=ANY=[], 0x0)

1m28.418055631s ago: executing program 0 (id=8495):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r2=>0x0})
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x10, &(0x7f0000000280)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000540)={r3, &(0x7f00000003c0), &(0x7f0000000340)=@udp6=r0}, 0x20)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000380)={r4, r2, 0x25, 0x2, @val=@tcx}, 0x1c)
syz_emit_ethernet(0x3e, &(0x7f00000000c0)=ANY=[], 0x0)

1m28.278952291s ago: executing program 0 (id=8499):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c)
bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000240)="af", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000b80)="bda033176eb146b36ef41f221a4e7ce4a02598d750606488520915c6806affc0a913781c7211ce1fcd59a12b5d5afdaf9d723f092ce9d1eed16e208f2e79831ca049e8979ad94621175c2c48c10e33b29f2def51498743b057efc21efe4be4d9f02e9d236f27190c29c5da0f3799452f5e3640340502fde4ae8c56b303e1b79b3d1842bf6277771bef544c745e7a80c9e7efdd1c619f69b9d01839aa326776d335689e4db7cb7e32fad8f4c40e943b43eb4ea173d720bf5998149625a731643636c8ddbe61e1d7d4736f8414a84acc40557012c82697d8a59c873424aefb3c7ff0dba302efaaf887a477b1ab7ea6c1def9db3514e444c1ef36c6cf42cde90d4bbb2e923a5d16a1bb191ad91cab867cd55037d507a12803f3df1b81f1857fad085dbc5c46aac14230d7a4f8b36d6bc63b4a16cd309b7697b421a662b83001b5ce5ab3ff80800243107df7aa6cae9a5db6a8f2a53ef7d6c6aeac76b83a15466c74a9cdbcde8505e3d14c0c3a47a36bf464168202dc88e25f4c1da57faf0eaa7ff16bdd751c2ae5778e169c8ffba57c9a20e24ad51e6e8e02b721e8ca94f131cc98e03b34b615a1db4080362de4ef215d5a0541aeb0c742a2636ac5af8538ceb3585ef9dca8037df55baa072096073b005b53eff0b899de59bc2b5d687d109520571eeacb30124c4012fe6cb9e3bf451be3d219206ddc35099101533cff5aee6c4783e00e6dd391f664052a6c66c62f62a49fde8fbe336543bf99b55e53b801e54c1d0a292da83db26a8a870ac1d8751c4bc0d495277295cd3a17f9e9a25d70214a17b981b62d5c75356ed025df3557a8b59648edd9d1dbdf169d91f9d85cfac11a57db0a14f03e8934a2cc98d389912a0d9942a40c3ee98d35da61d3bab1a32c9d788e9f74ee57012ca5bfd0dc090b591c64aae6a205fbd349fc372bbd7429983a69cae26ff8b5b019144d318ba225e46bc6cf8d7d3e5952333042542b2fd4fb4d88a3651dd8e14ecc2845d4e71f7dfd128e9e2ee2ab0062a3e701bb2477bfd73d7396ae522f11fa481078d1c7f7905e0846fb072dcf7c06102b3816ec4a3518514c7166d7385b680469f5184a93953258952554e68d93ea8f789c4f13982b65996d7d9cf19f0b39b72e1dc9079d84413bbc30d24fc481e24ef1beacb8bc15f50c2663d684d16a1c71b2c8a568481f4f1b254ccd66fbef4cacfc3e13f2c943a264e429824bef7297f93076aea55ed9cf12512ce3ac3df331695024bd1e53369a87caf6894fce811a64dad315402678de76", 0x390}], 0x1}}], 0x2, 0x0)

1m27.987955446s ago: executing program 0 (id=8505):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000980)={0x1, 0x80000000}, 0x8)
bind$inet(r0, &(0x7f0000000040)={0x2, 0xfffd, @local}, 0x10)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000180)={0xffffffffffffffff, &(0x7f00000000c0)="4036f6a280d025c6e30e12947e34dbfb7882b0718e5dad27f649b1cb", &(0x7f0000000100)=""/114}, 0x20)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00')
unshare(0x6a060000)
openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[], 0x0, 0xfffffef8, 0x0, 0x0, 0x200000}, 0x28)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x14}}, 0x0)
socketpair(0x1, 0x1, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r2)
r3 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xf}, 0x1c)
listen(r3, 0x0)
r4 = socket$inet_mptcp(0x2, 0x1, 0x106)
accept(r2, 0x0, &(0x7f0000000200))
connect$inet(r4, &(0x7f0000000140)={0x2, 0x4e22, @loopback}, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100000000000000000001000000280001801400040000000000000000000000ffffac1414aa060001000a0080000800060003"], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000)

1m12.886113716s ago: executing program 33 (id=8505):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000980)={0x1, 0x80000000}, 0x8)
bind$inet(r0, &(0x7f0000000040)={0x2, 0xfffd, @local}, 0x10)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000180)={0xffffffffffffffff, &(0x7f00000000c0)="4036f6a280d025c6e30e12947e34dbfb7882b0718e5dad27f649b1cb", &(0x7f0000000100)=""/114}, 0x20)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00')
unshare(0x6a060000)
openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[], 0x0, 0xfffffef8, 0x0, 0x0, 0x200000}, 0x28)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x14}}, 0x0)
socketpair(0x1, 0x1, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r2)
r3 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xf}, 0x1c)
listen(r3, 0x0)
r4 = socket$inet_mptcp(0x2, 0x1, 0x106)
accept(r2, 0x0, &(0x7f0000000200))
connect$inet(r4, &(0x7f0000000140)={0x2, 0x4e22, @loopback}, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100000000000000000001000000280001801400040000000000000000000000ffffac1414aa060001000a0080000800060003"], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000)

26.236351543s ago: executing program 6 (id=9285):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[], 0x0, 0x1c}, 0x28)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)={0x10, 0x34, 0x1, 0x0, 0x25dfdbff}, 0x10}], 0x1}, 0x0)
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)
listen(r0, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000240)=ANY=[], 0x30}}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00'}, 0x10)
bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x4040)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r2 = accept4(r1, 0x0, 0x0, 0x800)
sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
syz_emit_ethernet(0x4e, &(0x7f0000000340)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x5a}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f900f5", 0x18, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x2}]}}}}}}}}, 0x0)

26.023138678s ago: executing program 6 (id=9288):
r0 = socket$can_raw(0x1d, 0x3, 0x1)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000067c0)=[{{0x0, 0x0, &(0x7f0000002700)=[{0x0}], 0x1}}], 0x1, 0x8080)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
ioctl$FS_IOC_RESVSP(r1, 0x40305829, &(0x7f0000000380)={0x0, 0x0, 0x3fffffff, 0x7})
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vxcan1\x00', <r2=>0x0})
bind$can_raw(r0, &(0x7f00000005c0), 0x10)
read(r0, &(0x7f00000027c0)=""/4073, 0xfe9)
setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000040)=0x2, 0x4)
sendmsg$can_raw(r0, &(0x7f0000000240)={&(0x7f0000000780)={0x1d, r2}, 0x10, &(0x7f0000000200)={&(0x7f00000007c0)=@can={{0x2, 0x0, 0x1, 0x1}, 0x1, 0x3f57955e7be81d83, 0x0, 0x0, "f97003b8750e5566"}, 0x10}}, 0x4000040)

25.744976998s ago: executing program 6 (id=9293):
r0 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', <r1=>0x0})
bind$can_j1939(r0, &(0x7f0000000100)={0x1d, r1, 0x3, {0x2, 0x0, 0x4}, 0xfd}, 0x18)
sendmsg$can_j1939(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x44010}, 0x40)

25.6650155s ago: executing program 6 (id=9295):
r0 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$nl_crypto(0x10, 0x3, 0x15)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="0b00000007000000010001000900000005"], 0x48)
bpf$MAP_LOOKUP_BATCH(0x1a, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000001840), 0xfffffff7, r3}, 0x38)
r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
sendmsg(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000400)='<', 0x1}], 0x1}, 0x4000080)
sendmsg$netlink(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000008c0)=ANY=[@ANYBLOB="e000000010000b0500002000000000006f6d8864d32a3f2ffaa46c88bca90000002b0e13e735a3184f1b3d6da2f1acfac0ee50d2b184b27db1f302de337c0004060000000000bf852c89867f6691b01b2d44e4ff5f5f"], 0xe0}], 0x1}, 0x0)
ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r2, 0x4018f50b, &(0x7f0000000100)={0x1, 0x828b, 0x9})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', <r5=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r5, {0x0, 0xa}, {0xffff, 0xffff}, {0x1a, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x2, 0x0, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0xffffffd}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x44080)

25.178001581s ago: executing program 6 (id=9303):
r0 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'syz_tun\x00', <r1=>0x0})
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000001700000095"], &(0x7f00000005c0)='GPL\x00'}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r2, r1, 0x25, 0x0, @void}, 0x10)
syz_emit_ethernet(0xfdef, &(0x7f0000000a40)=ANY=[], 0x0) (fail_nth: 1)

24.684945433s ago: executing program 6 (id=9307):
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) (async)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0xedc623580215bdcd, 0x12, r0, 0x0) (async)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000980)={0x1, 0x80000000}, 0x8) (async)
bind$inet(r1, &(0x7f0000000040)={0x2, 0xfffd, @local}, 0x10) (async)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000180)={0xffffffffffffffff, &(0x7f00000000c0)="4036f6a280d025c6e30e12947e34dbfb7882b0718e5dad27f649b1cb", &(0x7f0000000100)=""/114}, 0x20)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/uts\x00')
unshare(0x6a060000)
openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x0, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[], 0x0, 0xfffffef8, 0x0, 0x0, 0x200000}, 0x28) (async, rerun: 64)
r2 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64)
sendmsg$nl_generic(r2, &(0x7f00000001c0)={0x0, 0x31, &(0x7f00000000c0)={0x0}}, 0x0) (async)
socketpair(0x1, 0x1, 0x0, 0x0) (async, rerun: 32)
socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r3) (async)
r4 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xf}, 0x1c) (async)
listen(r4, 0x0) (async, rerun: 64)
socket$kcm(0x29, 0x0, 0x0) (async, rerun: 64)
r5 = socket$inet_mptcp(0x2, 0x1, 0x106)
accept(r3, 0x0, &(0x7f0000000200))
connect$inet(r5, &(0x7f0000000140)={0x2, 0x4e22, @loopback}, 0x10) (async)
socket$nl_generic(0x10, 0x3, 0x10)

9.560938927s ago: executing program 34 (id=9307):
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) (async)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0xedc623580215bdcd, 0x12, r0, 0x0) (async)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000980)={0x1, 0x80000000}, 0x8) (async)
bind$inet(r1, &(0x7f0000000040)={0x2, 0xfffd, @local}, 0x10) (async)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000180)={0xffffffffffffffff, &(0x7f00000000c0)="4036f6a280d025c6e30e12947e34dbfb7882b0718e5dad27f649b1cb", &(0x7f0000000100)=""/114}, 0x20)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/uts\x00')
unshare(0x6a060000)
openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x0, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[], 0x0, 0xfffffef8, 0x0, 0x0, 0x200000}, 0x28) (async, rerun: 64)
r2 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64)
sendmsg$nl_generic(r2, &(0x7f00000001c0)={0x0, 0x31, &(0x7f00000000c0)={0x0}}, 0x0) (async)
socketpair(0x1, 0x1, 0x0, 0x0) (async, rerun: 32)
socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r3) (async)
r4 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xf}, 0x1c) (async)
listen(r4, 0x0) (async, rerun: 64)
socket$kcm(0x29, 0x0, 0x0) (async, rerun: 64)
r5 = socket$inet_mptcp(0x2, 0x1, 0x106)
accept(r3, 0x0, &(0x7f0000000200))
connect$inet(r5, &(0x7f0000000140)={0x2, 0x4e22, @loopback}, 0x10) (async)
socket$nl_generic(0x10, 0x3, 0x10)

4.035390302s ago: executing program 5 (id=9476):
r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
write$rfkill(r0, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8)
ioctl$RFKILL_IOCTL_NOINPUT(r0, 0x5201)

3.487427612s ago: executing program 1 (id=9479):
socket$inet6_sctp(0xa, 0x801, 0x84)
r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
r1 = accept4$x25(r0, &(0x7f0000000000), &(0x7f0000000040)=0x12, 0x800)
setsockopt$X25_QBITINCL(r1, 0x106, 0x1, &(0x7f0000000140)=0x1, 0x4)
r2 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_drop_memb(r2, 0x107, 0x2, &(0x7f0000000200)={0x0, 0x1, 0x6, @multicast}, 0x10)
sendmsg$RDMA_NLDEV_CMD_RES_GET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="300000000914e73f"], 0x30}, 0x1, 0x0, 0x0, 0xbe9b70533f0d9e1}, 0x0)
recvfrom(r0, 0x0, 0x0, 0x20, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0)
pselect6(0x42, &(0x7f0000000400)={0x0, 0x3, 0x2, 0xffffffff, 0x10001, 0xa, 0x3, 0x100000000}, 0x0, 0x0, 0x0, &(0x7f0000000240)={&(0x7f0000002840)={[0x81]}, 0x8})
socket$nl_xfrm(0x10, 0x3, 0x6)
socket$nl_netfilter(0x10, 0x3, 0xc)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
socket(0x400000000010, 0x3, 0x0)
socket$unix(0x1, 0x1, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
socket$nl_route(0x10, 0x3, 0x0)
socket(0x22, 0x2, 0x4)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000180)=ANY=[@ANYRESHEX=r3, @ANYRES32, @ANYRES64=r4], 0x20)
ioctl$sock_SIOCOUTQ(r0, 0x5411, &(0x7f0000000080))
r5 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1)
recvmmsg(r5, &(0x7f0000004400), 0x3fffffffffffff2, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000005, 0x8031, 0xffffffffffffffff, 0x0)

2.559997458s ago: executing program 3 (id=9484):
r0 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10)
r1 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r1, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10)
bind$tipc(r0, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42, 0x20000003}}}, 0x10)
bind$tipc(r1, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10)
bind$tipc(r1, &(0x7f0000000440)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x3}}, 0x10)
bind$tipc(r0, 0x0, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_buf(r2, 0x6, 0x1f, &(0x7f0000000280)='\x00', 0x1)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000800)={0x3d8, r3, 0x100, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_CSA_IES={0x328, 0xb9, 0x0, 0x1, [@beacon_params=[@NL80211_ATTR_PROBE_RESP={0x21c, 0x91, "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"}, @NL80211_ATTR_BEACON_HEAD={0x108, 0xe, {{{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}, {}, @device_a, @device_b, @random="e9b3cec7155f", {0x6, 0x93}, @value=@ver_80211n={0x0, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}}, 0x7659924e, @random=0x4, 0x2000, @void, @void, @void, @void, @val={0x6, 0x2, 0x9}, @void, @val={0x25, 0x3, {0x1, 0x7c, 0x5}}, @void, @void, @void, @void, @val={0x71, 0x7, {0x0, 0x0, 0x40, 0x0, 0xffffffffffffffff, 0x0, 0x8}}, @void, [{0xdd, 0xc8, "c5a5bb992cf8cde90317a80ddd6678f71624d905fe5bb19926c2cfdab8de0b574ce3e5c079de2012e4f3cf56eb30b1eaa554dde0d6390869dc0b100335583d0987d186bc7867c9cbf5bd4aff94350de8f1aa2225377c3ebbf69c33c8d58844b49bd1aeaaab83f83ad9d70eac3a13ecf67c8f8ae2427f3233f052aa612b4b476224208ef62196e3328e87c19ef0d3bd2fdd10276acf1254d8e8556156b2973500d97047fda813c8af9b140a39f68418f6cd7b2fd37b8103db25e809ffde16924debabf59b97039353"}]}}]]}, @NL80211_ATTR_CSA_IES={0x70, 0xb9, 0x0, 0x1, [@NL80211_ATTR_CSA_C_OFF_BEACON={0x4}, @NL80211_ATTR_CSA_C_OFF_PRESP={0x10, 0xbb, [0x4c71, 0x3, 0x3, 0x8, 0xf860, 0xdb1f]}, @NL80211_ATTR_CSA_C_OFF_BEACON={0x8, 0xba, [0x2, 0x80]}, @NL80211_ATTR_CSA_C_OFF_BEACON={0x8, 0xba, [0x9, 0x9]}, @NL80211_ATTR_CSA_C_OFF_BEACON={0x12, 0xba, [0x2d56, 0x0, 0x81, 0xfd31, 0x3, 0x9cc6, 0x7]}, @NL80211_ATTR_CSA_C_OFF_PRESP={0xc, 0xbb, [0x7, 0x3, 0x6, 0x8]}, @NL80211_ATTR_CSA_C_OFF_BEACON={0x8, 0xba, [0x2, 0x4]}, @NL80211_ATTR_CSA_C_OFF_PRESP={0x18, 0xbb, [0x8, 0x6, 0x1, 0x10, 0x4, 0x5, 0x8, 0x5433, 0x5, 0x4]}, @NL80211_ATTR_CSA_C_OFF_PRESP={0x8, 0xbb, [0x7, 0x6]}]}, @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x33}, @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x14}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x15b}, @NL80211_ATTR_CENTER_FREQ1={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1630}], @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}]}, 0x3d8}, 0x1, 0x0, 0x0, 0x8004}, 0x40000)
r4 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
connect$802154_dgram(r4, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', <r6=>0x0})
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000700)={{0xffffffffffffffff, <r7=>0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f00000006c0)}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000007c0)={{r7}, &(0x7f0000000740), &(0x7f0000000780)}, 0x20)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r6, @ANYBLOB="00001700000000001c0037800b"], 0x44}, 0x1, 0x0, 0x0, 0x4008010}, 0x0)
setsockopt$inet6_mreq(r2, 0x29, 0x1b, &(0x7f0000000140)={@loopback, r6}, 0x14)
r9 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r9, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f0000000200)={<r10=>0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0xffff, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}}]}, &(0x7f0000000240)=0x10)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r9, 0x84, 0x7a, &(0x7f0000000340)={r10, @in6={{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, &(0x7f0000000040)=0x84)
listen(r9, 0x8)
setsockopt$inet6_tcp_int(r2, 0x6, 0x1b, &(0x7f0000000080)=0x1d06037, 0xffffffffffffffbb)

2.387065542s ago: executing program 5 (id=9485):
unshare(0x6020400)
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20)
r1 = socket$igmp6(0xa, 0x3, 0x2)
write(r0, &(0x7f0000000280)="29d50268540a9a1a9149ac55e07f4f1fa4dea75f8ca76fd26ea4db2bb3d8db569125fb4c2045ccb16004309a3febb334680a747ab99c0552c42f93419e0f38ce8227aad4336ba690cfc784bbe942f7d9403ddb7243baf5171ff0ddb277c71e4347a515f722b6ac3a1bb5798e5a1e26f0d630c43071d891291587753794cfaac4776b6957af280794a9ec5e07ade9549c1168dd242376cf44d1bce20515c5b6", 0x9f)
ioctl$sock_SIOCGSKNS(r1, 0x894c, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffc89, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000c40)=[{0x0, 0x40, 0x4, 0x5}, {0x5}, {0x280400, 0x4, 0x1000a, 0x6}], 0x10, 0xfffffff6}, 0x94)
r2 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xd18c9b35, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030036000b05d25a806c8c6f94f90424fc60100005000a000200053582c137153e37000c0980fc0b10000300", 0x33fe0}], 0x1}, 0x0)
r3 = socket(0x10, 0x3, 0x0)
write(r3, &(0x7f00000000c0)="240000005a001f001007f4f9002304000a04f51108000500020100020800038005000000", 0x24)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_netdev_private(r4, 0x8943, &(0x7f0000000000)="a6b4046e3a")
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f0000014800)={0x0, 0x0, &(0x7f00000147c0)={&(0x7f0000000180)=@allocspi={0xf8, 0x16, 0x1, 0x70bd25, 0x25dfdbff, {{{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, @in6=@dev={0xfe, 0x80, '\x00', 0x21}, 0x4e23, 0x0, 0x4e20, 0x3, 0x2, 0x20, 0x10}, {@in=@loopback, 0x4d2, 0x33}, @in=@local, {0x1, 0x10, 0x4, 0x8001, 0x8, 0x7f7, 0xaaf0, 0x2}, {0x500000, 0x4, 0x4, 0x2}, {0xc908, 0x2127268a, 0x8}, 0x70bd2b, 0x3507, 0xa, 0x0, 0x0, 0x10}, 0xff, 0x80000002}}, 0xf8}, 0x1, 0x0, 0x0, 0x880}, 0x48000)
r6 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'lo\x00', <r8=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x40, 0x24, 0xf0b, 0x3, 0x0, {0x60, 0x0, 0x0, r8, {0x0, 0xffe0}, {0xffff, 0xffff}, {0xfff7}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x55, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x1000, 0xb, 0x4}}}}]}, 0x40}}, 0x0)
sendto$packet(r3, &(0x7f0000000400)="4b0a8a86cd640e1db69d817692b75ebfd15faf979d33c7f11385568ea2f5254f4931ead7826cc0f5462d5559be0d92c959ca5acee8052103ae491ab1d0a6be7c8e35d34186bfada81241b728891f9701d1c1ba5c13daec384f4a12995a66ae6d1e64e712f866599c85f07968abafb88407070450f933a4a8de4c7e4a2fd31fb06e6dd8a22b9d1267d72ab08ed99966221d5b76b718aae79f5242e65baaf484bde9541d367e0243b35a023379b613e85fd22c6edd3a60034be70422efadd070f05cb6a162a3ca7fc4c9d92fe0011d5cf4fb08021f5dd0299097246e5d28f6b3889bcbbc0876f2678646d080cc", 0xec, 0x8000, &(0x7f0000000100)={0x11, 0x4, r8, 0x1, 0xf3, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x37}}, 0x14)

2.220226216s ago: executing program 4 (id=9486):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_int(r2, 0x29, 0x1000000000021, &(0x7f0000000180)=0x1, 0x23)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e22, 0x380000, @rand_addr=' \x01\x00'}, 0x1c)
socket$isdn_base(0x22, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
socket$netlink(0x10, 0x3, 0xe)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xe, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c0200001900010000ffea0010000000e0000001000000000000000000000000ac1414bb00"/48, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000084010500ac1414aa000000000000000000000000000000003c00000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000ac1414aa00"/197], 0x23c}}, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newtaction={0x64, 0x30, 0x29, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x0, 0x1880}, 0x2}}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x40)
bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16)
r6 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_int(r6, 0x29, 0xb, 0x0, 0x0)
connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000540), 0xffffffffffffffff)
getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x6d, &(0x7f0000000740)={<r7=>0x0, 0xe00, "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"}, &(0x7f0000000040)=0xe08)
setsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000080)=@assoc_value={r7, 0x1b3}, 0x8)
sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x0)
syz_emit_ethernet(0xfdef, &(0x7f0000000440)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x88, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @parameter_prob={0xc, 0x0, 0x0, 0x0, 0xb, 0x3, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast1, @multicast2}}}}}}, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'syz_tun\x00', <r8=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0xb00, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r8, {}, {}, {0xfff3}}}, 0x24}}, 0x0)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$SEG6_CMD_SETHMAC(r9, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x34, r10, 0x1, 0x70bd26, 0x0, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x401}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x0]}, @SEG6_ATTR_ALGID={0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x1}]}, 0x34}}, 0x0)
sendmsg$RDMA_NLDEV_CMD_RES_GET(r1, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x30, 0x1409, 0x100, 0x70bd2a, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x20008004}, 0x4000000)
sendmsg$SEG6_CMD_SETHMAC(r9, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x2c, r10, 0x1, 0x0, 0x0, {}, [@SEG6_ATTR_SECRETLEN={0x5}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x7}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x1}]}, 0x2c}}, 0x0)
poll(&(0x7f0000000040)=[{r0, 0xa148}], 0x1, 0x2000000)

2.184543037s ago: executing program 3 (id=9487):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0xfffc}, 0x8)
sendto$inet6(r0, &(0x7f0000000580)="81", 0x1, 0xc001, &(0x7f0000000280)={0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x81}, 0x1c)
setsockopt$inet6_IPV6_DSTOPTS(r0, 0x84, 0x3b, 0x0, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000240)={'team0\x00', <r3=>0x0})
sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="d0000000", @ANYRES16=r2, @ANYBLOB="01002abd7000fcdbdf250100000008000100", @ANYRES32=r3, @ANYBLOB="b400028038000100240001006d636173745f72656a6f696e5f696e74657276616c0000000000000000000000050003000300000008000400"], 0xd0}, 0x1, 0x0, 0x0, 0x24004000}, 0x24044880)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r1}, 0x8)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010007000000000000000100000a20000000000a03000000000000000000010000000900010073797a300000000048000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f0c00098008000140000100075c0000000e0a01020000000000000000010000000900020073797a3200000000090001"], 0xec}, 0x1, 0x0, 0x0, 0x4004}, 0x0)
mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2000003, 0x50, r4, 0xebcd7000)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1d, 0x4, &(0x7f00000000c0)=ANY=[@ANYRES16=0x0], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', r3, @lsm=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94)

2.056586154s ago: executing program 1 (id=9488):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000)
recvmmsg(r0, &(0x7f00000052c0)=[{{0x0, 0x0, 0x0}, 0x200001}, {{0x0, 0x0, 0x0}, 0x409}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, 0x0}, 0x101}, {{0x0, 0x0, 0x0}, 0x2046}, {{0x0, 0x0, &(0x7f0000000600)}, 0x2}, {{0x0, 0x0, 0x0}, 0x20008}, {{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, 0x0}, 0xb68d}], 0x9, 0x40002000, 0x0)

1.869723349s ago: executing program 1 (id=9489):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[], 0x0, 0x1c}, 0x28)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)={0x14, 0x34, 0x1, 0x0, 0x25dfdbff, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0)
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)
listen(r0, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000240)=ANY=[@ANYBLOB="3000000003080500000000000000000001000000050003000100000006000240000000000c0004"], 0x30}}, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$IP_VS_SO_GET_VERSION(r2, 0x0, 0x480, &(0x7f0000000180), &(0x7f0000000300)=0x40)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00'}, 0x10)
bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x4040)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r3 = accept4(r1, 0x0, 0x0, 0x800)
sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
syz_emit_ethernet(0x4e, &(0x7f0000000340)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x5a}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f900f5", 0x18, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x2}]}}}}}}}}, 0x0)

1.77189797s ago: executing program 5 (id=9490):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000)
recvmmsg(r0, 0x0, 0x0, 0x40002000, 0x0)

1.592458624s ago: executing program 1 (id=9491):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000200)=@o_path={0x0}, 0x18)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x20000080)
accept$alg(0xffffffffffffffff, 0x0, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000300)='rcu_utilization\x00', r1, 0x0, 0x4}, 0x18)
socket$xdp(0x2c, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x400000000000004)
r3 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f00000001c0)=0x100000, 0x4)
writev(r2, &(0x7f0000000000), 0x0)
setsockopt$XDP_TX_RING(r3, 0x11b, 0x3, &(0x7f0000000040), 0x4)
setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, 0x0, 0x0)
r5 = accept(r4, 0x0, 0x0)
sendmsg$TEAM_CMD_OPTIONS_SET(r5, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000980)={0x0}}, 0x8800)
syz_genetlink_get_family_id$wireguard(0x0, r5)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000340)={0x0, 0xcc}, 0x8)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
sendmmsg$inet6(r0, &(0x7f0000000780)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x4, @loopback, 0x3}, 0x1c, &(0x7f0000000500)=[{&(0x7f00000034c0)='\x00', 0x1}], 0x1}}], 0x1, 0x3404c8d4)
setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000b40)=ANY=[@ANYRES32, @ANYBLOB="f70003000412"], 0xe)

1.559742097s ago: executing program 5 (id=9492):
socket$nl_generic(0x10, 0x3, 0x10)
socket$netlink(0x10, 0x3, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
socket(0x10, 0x2, 0x0)
socket$netlink(0x10, 0x3, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$l2tp6(0xa, 0x2, 0x73)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$pppl2tp(0x18, 0x1, 0x1)
socket$inet6_udp(0xa, 0x2, 0x0)
socket$inet6_sctp(0xa, 0x801, 0x84)
socket$igmp(0x2, 0x3, 0x2)
socket$nl_route(0x10, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0xb)
socket$nl_generic(0x10, 0x3, 0x10)
pipe(0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040))
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r0], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0)

1.322143485s ago: executing program 5 (id=9493):
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x4, '\x00', 0x0, 0x0, 0x5, 0x0, 0x2}, 0x50)
bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000850000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
r1 = accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x80000)
sendto$packet(r1, &(0x7f0000000240), 0x0, 0x20000000, 0x0, 0x0)
r2 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f00000000c0)=<r4=>0x0)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r5)
r7 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="d80000001c0081044e81f782db44b904021d080201000000120000a118000c000600142603600e3b08000f0100810401a8001600200001400300000803600cfab94dcf5c0461c1d67ffc94007134cf6ee08000a0e408e8d8ef075c11503c13223e3f52a98516277ce06bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006000000000000008065b44f95caae586a81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0)
sendmsg$NFC_CMD_DEV_UP(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r6, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r4}]}, 0x1c}}, 0x0)
write$nci(r3, &(0x7f0000000000)=@NCI_OP_RF_DEACTIVATE_NTF={0x1, 0x1, 0x3, 0x6, 0x1, {0x5, 0x2}}, 0x5)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000740)='=q', 0x2}], 0x1}, 0x1)
recvmsg$unix(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x8, 0x0}, 0x60000121)
r8 = socket(0x2, 0x80805, 0x0)
getsockopt$inet6_mreq(r8, 0x29, 0x0, &(0x7f0000000440)={@dev, <r9=>0x0}, &(0x7f0000000480)=0x14)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)={0x1b, 0x0, 0x0, 0xbe, 0x0, r2, 0x4, '\x00', r9, 0xffffffffffffffff, 0x3, 0x4, 0x1}, 0x50)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
socket$inet6_sctp(0xa, 0x5, 0x84)

1.289851723s ago: executing program 4 (id=9494):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x4, 0x4, 0x1}, 0x48)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7, r1}, 0x38)
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}}, 0x4044004)
recvmmsg(r0, &(0x7f00000086c0)=[{{0x0, 0x0, 0x0}, 0x4008101}, {{0x0, 0x0, 0x0}, 0x10000}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f0000001a00)=[{&(0x7f00000000c0)=""/177, 0xb1}, {&(0x7f0000000dc0)=""/273, 0x111}, {&(0x7f0000000040)=""/43, 0x2b}, {&(0x7f0000000440)=""/84, 0x54}, {&(0x7f0000001a80)=""/4109, 0x100d}, {&(0x7f00000017c0)=""/227, 0xe3}, {&(0x7f0000000340)=""/218, 0xda}], 0x7}, 0x80000000}], 0x4, 0x0, 0x0)

1.150012888s ago: executing program 7 (id=9438):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000980)={0x1, 0x80000000}, 0x8)
bind$inet(r0, &(0x7f0000000040)={0x2, 0xfffd, @local}, 0x10)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000180)={0xffffffffffffffff, &(0x7f00000000c0)="4036f6a280d025c6e30e12947e34dbfb7882b0718e5dad27f649b1cb", &(0x7f0000000100)=""/114}, 0x20)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00')
unshare(0x6a060000)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x14}}, 0x0)
socketpair(0x1, 0x1, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r2)
r3 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xf}, 0x1c)
listen(r3, 0x0)
socket$kcm(0x29, 0x0, 0x0)
r4 = socket$inet_mptcp(0x2, 0x1, 0x106)
accept(r2, 0x0, &(0x7f0000000200))
connect$inet(r4, &(0x7f0000000140)={0x2, 0x4e22, @loopback}, 0x10)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100000000000000000001000000280001801400040000000000000000000000ffffac1414aa060001000a0080000800060003"], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000)
socket$nl_generic(0x10, 0x3, 0x10)

1.115903715s ago: executing program 4 (id=9495):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a010400000000000000000100ffff0900010073797a30000000002c000000030a01010001000000000000010040000900010073797a30000000000900030073797a310000000094000000060a010400000000000000000100000008000b40000000006c000480340001800b000100657874686472000024000280080001400000000c080003400000000008000440000000220500020007000000340001800c00010062697477697365002400028008000140000000140800034000000002080002400000001208000800000000000900010073797a3000"], 0x108}}, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x40)
unshare(0x6a040000)
socket$nl_route(0x10, 0x3, 0x0)
syz_init_net_socket$rose(0xb, 0x5, 0x0)
bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0)
r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r2 = socket$inet_sctp(0x2, 0x5, 0x84)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x4, &(0x7f0000000540)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20000e, 0x0, 0x0, 0x0, 0x8}, [@call={0x85, 0x0, 0x0, 0xaf}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000100)={<r3=>0x0, @in={{0x2, 0x4e24, @broadcast}}, 0x6, 0x8, 0x7ff, 0x1ff, 0x5, 0x10, 0x9}, &(0x7f0000000040)=0x9c)
setsockopt$inet_sctp_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000080)={r3, 0x0, 0x5, 0x8001}, 0x10)
sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000021c0)=ANY=[@ANYBLOB="181600002400e5ff25bd7000fedbdf25051600800c00010002"], 0x1618}], 0x1}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x60}, [@ldst={0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0x3, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
recvmsg(r1, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x2000)

875.799966ms ago: executing program 3 (id=9496):
r0 = socket$inet6(0xa, 0x2, 0x3a)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
shutdown(r1, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000180)=0x10)
shutdown(r1, 0x1)
r2 = socket$inet(0x2, 0x80001, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r3=>0x0}, &(0x7f0000000040)=0x8)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000080)={r3, @in={{0x2, 0x0, @empty}}}, &(0x7f0000000540)=0x9c)
sendmmsg$inet6(r0, &(0x7f0000003340)=[{{&(0x7f00000000c0)={0xa, 0x0, 0x0, @empty, 0x80002006}, 0x1c, &(0x7f0000000540)=[{&(0x7f0000000100)="8000102e75243301", 0x8}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x40000000)

747.601759ms ago: executing program 1 (id=9497):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet6_mreq(r2, 0x29, 0x14, 0x0, 0x0)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x4c, r4, 0x800, 0x70bd28, 0x25dfdbfe, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x40}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x885}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x1ff}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40080d0}, 0xc090)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan0\x00', <r5=>0x0})
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x2c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_PRIVACY={0x4}]}, 0x2c}}, 0x0)

739.003786ms ago: executing program 3 (id=9498):
r0 = socket$can_raw(0x1d, 0x3, 0x1)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000067c0)=[{{0x0, 0x0, &(0x7f0000002700)=[{0x0}], 0x1}}], 0x1, 0x8080)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vxcan1\x00', <r1=>0x0})
bind$can_raw(r0, &(0x7f00000005c0), 0x10)
read(r0, &(0x7f00000027c0)=""/4073, 0xfe9) (fail_nth: 2)
setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000040)=0x2, 0x4)
sendmsg$can_raw(r0, &(0x7f0000000240)={&(0x7f0000000780)={0x1d, r1}, 0x10, &(0x7f0000000200)={&(0x7f00000007c0)=@can={{0x2, 0x0, 0x1, 0x1}, 0x1, 0x3f57955e7be81d83, 0x0, 0x0, "f97003b8750e5566"}, 0x10}}, 0x4000040)

725.599001ms ago: executing program 4 (id=9499):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2000}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r0, 0x0, 0xd76}, 0x18)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000040000000030a01020000000000000000010000000900010073797a30000000000900030073797a3000000000140004800800024000000000080001400000000568000000060a010400000008000000000100000008000b4000000000400004803c0001800a0001006d617463680000002c0002800800010065636e000c000300e4edf2b75cc7c0a308000240000000000c000100706b7474797065000900010073797a300000000014000000110001"], 0xf0}}, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r4 = socket(0x400000000010, 0x3, 0x0)
r5 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
r7 = socket(0x400000000010, 0x3, 0x0)
r8 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x4, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x66, 0x903, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0xe, 0x7}, {0xf, 0xfff1}, {0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x40088c8}, 0x20004804)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000540)={'wlan0\x00', <r11=>0x0})
sendmsg$NL80211_CMD_NEW_KEY(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000000c0)={0x1c, r2, 0x801, 0x60bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r11}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x40905}, 0x0)

263.743189ms ago: executing program 3 (id=9500):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[], 0x0, 0x1c}, 0x28)
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)
listen(r0, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000240)=ANY=[@ANYBLOB="3000000003080500000000000000000001000000050003000100000006000240000000"], 0x30}}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00'}, 0x10)
bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x4040)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r2 = accept4(r1, 0x0, 0x0, 0x800)
sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
syz_emit_ethernet(0x4e, &(0x7f0000000340)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x5a}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f900f5", 0x18, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x2}]}}}}}}}}, 0x0)

224.627185ms ago: executing program 7 (id=9501):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000)
recvmmsg(r0, 0x0, 0x0, 0x40002000, 0x0)

203.744463ms ago: executing program 4 (id=9502):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000480)="5c00000012006bab9a3fe3d86e17aa0b046b876c1d0048380019001931a0e69ee517d34460bc06000000a701251e6182949a3651f60a84c9f4d4938037e70e4509c51c268811000000000000000000002571cd53b9851b30599980bc", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
recvmsg$kcm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000300)=""/270, 0x10e}, {&(0x7f0000000b00)=""/192, 0xc0}, {0x0}, {&(0x7f0000000c00)=""/193, 0xc1}, {&(0x7f0000000d00)=""/175, 0xaf}, {&(0x7f0000000a00)=""/233, 0xe9}, {&(0x7f0000005100)=""/4077, 0xfed}, {&(0x7f0000000780)=""/230, 0xe6}, {&(0x7f0000000940)=""/164, 0xa4}, {&(0x7f0000000100)=""/238, 0xee}], 0xa}, 0x40002102)
recvmsg$kcm(r0, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500}, 0x0)

133.510058ms ago: executing program 4 (id=9503):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000)
recvmmsg(r0, &(0x7f00000052c0), 0x0, 0x40002000, 0x0)

112.667285ms ago: executing program 1 (id=9504):
r0 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'syz_tun\x00', <r1=>0x0})
r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000001700000095"], &(0x7f00000005c0)='GPL\x00'}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r2, r1, 0x25, 0x0, @void}, 0x10)
syz_emit_ethernet(0xfdef, &(0x7f0000000a40)=ANY=[], 0x0) (fail_nth: 2)

12.38582ms ago: executing program 3 (id=9505):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
recvmmsg(r0, &(0x7f0000002c00)=[{{0x0, 0x0, 0x0}, 0x8794}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000340)=""/257, 0x101}, {&(0x7f0000001a00)=""/4120, 0x1018}], 0x2}, 0x80000000}, {{0x0, 0x0, 0x0}, 0x40}, {{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000540)=""/130, 0x82}, {&(0x7f0000001900)=""/229, 0xe5}, {&(0x7f0000005e40)=""/4095, 0xfff}, {&(0x7f0000002e00)=""/4103, 0x1007}, {&(0x7f0000000480)=""/88, 0x58}], 0x5}, 0xb1}, {{0x0, 0x0, 0x0}, 0x4a}], 0x8, 0x0, 0x0)

0s ago: executing program 5 (id=9506):
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1a, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000200)="580000001400192340834b80040d8c560a0677bc45ff8105fe000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000004fcff", 0x58}], 0x1) (fail_nth: 2)

kernel console output (not intermixed with test programs):

81 - 0
[ 1542.465341][ T2991] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1542.491637][ T2991] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1542.571437][ T2991] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1542.623203][T19133] net_ratelimit: 9 callbacks suppressed
[ 1542.623223][T19133] bond2: (slave ip6gretap2): failed to get link speed/duplex
[ 1542.668500][ T2407] netlink: 'syz.4.7637': attribute type 4 has an invalid length.
[ 1542.740602][ T1326] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1542.748485][ T1326] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1542.891744][ T1326] bond2: (slave ip6gretap2): failed to get link speed/duplex
[ 1542.927277][ T1326] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1542.938321][ T1326] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1543.021756][ T1326] bond2: (slave ip6gretap2): failed to get link speed/duplex
[ 1543.140762][ T1326] bond2: (slave ip6gretap2): failed to get link speed/duplex
[ 1543.271530][ T2991] bond2: (slave ip6gretap2): failed to get link speed/duplex
[ 1543.381024][ T1326] bond2: (slave ip6gretap2): failed to get link speed/duplex
[ 1544.363026][T19391] Bluetooth: hci3: command tx timeout
[ 1545.436230][T19135] bond2: (slave ip6gretap2): failed to get link speed/duplex
[ 1545.572153][T19135] bond2: (slave ip6gretap2): failed to get link speed/duplex
[ 1545.681364][T19135] bond2: (slave ip6gretap2): failed to get link speed/duplex
[ 1545.761268][ T2474] __nla_validate_parse: 3 callbacks suppressed
[ 1545.761287][ T2474] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7661'.
[ 1545.826597][T23614] IPVS: starting estimator thread 0...
[ 1545.921796][ T2484] IPVS: using max 28 ests per chain, 67200 per kthread
[ 1546.031256][T19135] bond2: (slave ip6gretap2): failed to get link speed/duplex
[ 1546.460714][T19391] Bluetooth: hci3: command tx timeout
[ 1546.524728][ T2472] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[ 1546.725449][ T2472] Bluetooth: hci5: Error when powering off device on rfkill (-4)
[ 1547.524782][ T2472] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 1547.550778][ T2472] Bluetooth: hci1: Error when powering off device on rfkill (-4)
[ 1547.735608][ T2472] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[ 1547.741995][ T3529] net_ratelimit: 13 callbacks suppressed
[ 1547.742013][ T3529] bond2: (slave ip6gretap2): failed to get link speed/duplex
[ 1547.743302][ T2472] Bluetooth: hci0: Error when powering off device on rfkill (-4)
[ 1547.850779][ T1326] bond2: (slave ip6gretap2): failed to get link speed/duplex
[ 1547.925559][ T2472] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[ 1547.950781][ T2472] Bluetooth: hci2: Error when powering off device on rfkill (-4)
[ 1547.974235][ T2991] bond2: (slave ip6gretap2): failed to get link speed/duplex
[ 1548.104900][ T2472] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[ 1548.124068][T19135] bond2: (slave ip6gretap2): failed to get link speed/duplex
[ 1548.128347][ T2472] Bluetooth: hci3: Error when powering off device on rfkill (-4)
[ 1548.213475][ T2563] netlink: 'syz.4.7693': attribute type 1 has an invalid length.
[ 1548.319259][ T2570] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7693'.
[ 1548.782776][ T5882] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[ 1548.809907][ T5882] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[ 1548.827453][ T5882] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[ 1548.836290][ T5882] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[ 1548.851144][ T5882] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[ 1548.896083][T19391] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[ 1548.904623][T19391] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[ 1548.913706][T19391] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[ 1548.923232][T19391] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[ 1548.938830][T19391] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[ 1548.958566][ T2566] 8021q: adding VLAN 0 to HW filter on device bond2
[ 1548.973241][ T2566] bond1: (slave bond2): making interface the new active one
[ 1548.991925][ T2566] bond1: (slave bond2): Enslaving as an active interface with an up link
[ 1549.022140][ T2570] bond1: entered promiscuous mode
[ 1549.091158][ T2570] bond2: entered promiscuous mode
[ 1549.098020][ T2570] bond1: entered allmulticast mode
[ 1549.144060][ T2570] bond2: entered allmulticast mode
[ 1549.155572][ T2570] 8021q: adding VLAN 0 to HW filter on device bond1
[ 1549.213295][T19130] bond2: (slave ip6gretap2): failed to get link speed/duplex
[ 1549.222287][ T2582] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[ 1549.361905][ T1326] bond2: (slave ip6gretap2): failed to get link speed/duplex
[ 1549.641769][   T49] bond2: (slave ip6gretap2): failed to get link speed/duplex
[ 1549.717620][ T2521] chnl_net:caif_netlink_parms(): no params data found
[ 1549.934584][ T2615] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7708'.
[ 1549.958894][ T2521] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1549.997598][ T2521] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1550.015137][ T2521] bridge_slave_0: entered allmulticast mode
[ 1550.028144][ T2521] bridge_slave_0: entered promiscuous mode
[ 1550.045707][ T2521] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1550.056511][ T2521] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1550.064093][ T2521] bridge_slave_1: entered allmulticast mode
[ 1550.073171][ T2521] bridge_slave_1: entered promiscuous mode
[ 1550.219602][ T2521] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1550.272680][ T2521] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1550.638705][ T2521] team0: Port device team_slave_0 added
[ 1550.686829][ T2521] team0: Port device team_slave_1 added
[ 1550.805472][ T2521] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1550.818720][ T2521] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1550.853317][ T2521] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1550.913455][ T2521] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1550.961311][ T2521] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1551.000988][ T5882] Bluetooth: hci4: command tx timeout
[ 1551.028140][ T2521] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1551.092047][   T49] bond2: (slave ip6gretap2): failed to get link speed/duplex
[ 1551.238022][ T2521] hsr_slave_0: entered promiscuous mode
[ 1551.255711][ T2521] hsr_slave_1: entered promiscuous mode
[ 1551.273032][ T2521] debugfs: 'hsr0' already exists in 'hsr'
[ 1551.285435][ T2521] Cannot create hsr debugfs directory
[ 1551.591262][ T1326] bond2: (slave ip6gretap2): failed to get link speed/duplex
[ 1551.609219][ T2694] netlink: 60 bytes leftover after parsing attributes in process `syz.3.7735'.
[ 1551.637497][ T2691] netlink: 60 bytes leftover after parsing attributes in process `syz.3.7735'.
[ 1551.662014][ T2694] netlink: 60 bytes leftover after parsing attributes in process `syz.3.7735'.
[ 1551.751542][ T1326] bond2: (slave ip6gretap2): failed to get link speed/duplex
[ 1551.826955][ T2521] netdevsim netdevsim5 netdevsim0: renamed from eth0
[ 1551.833910][ T2700] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7738'.
[ 1551.858003][ T2521] netdevsim netdevsim5 netdevsim1: renamed from eth1
[ 1551.897064][ T2521] netdevsim netdevsim5 netdevsim2: renamed from eth2
[ 1551.897090][ T2705] netlink: 7 bytes leftover after parsing attributes in process `syz.3.7740'.
[ 1551.957076][ T2521] netdevsim netdevsim5 netdevsim3: renamed from eth3
[ 1552.288225][ T2521] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1552.353538][ T2521] 8021q: adding VLAN 0 to HW filter on device team0
[ 1552.386579][ T2991] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1552.393772][ T2991] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1552.455723][   T49] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1552.462958][   T49] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1552.822709][   T49] net_ratelimit: 4 callbacks suppressed
[ 1552.822728][   T49] bond2: (slave ip6gretap2): failed to get link speed/duplex
[ 1552.945145][ T2770] netlink: 132 bytes leftover after parsing attributes in process `syz.0.7761'.
[ 1552.972477][   T49] bond2: (slave ip6gretap2): failed to get link speed/duplex
[ 1553.015343][ T2521] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1553.082644][ T5882] Bluetooth: hci4: command tx timeout
[ 1553.101838][ T3529] bond2: (slave ip6gretap2): failed to get link speed/duplex
[ 1553.140179][ T2778] Bluetooth: MGMT ver 1.23
[ 1553.231037][T19130] bond2: (slave ip6gretap2): failed to get link speed/duplex
[ 1553.354675][   T49] bond2: (slave ip6gretap2): failed to get link speed/duplex
[ 1553.482017][ T1326] bond2: (slave ip6gretap2): failed to get link speed/duplex
[ 1553.613489][ T2795] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7769'.
[ 1553.628994][ T2521] veth0_vlan: entered promiscuous mode
[ 1553.660817][ T2521] veth1_vlan: entered promiscuous mode
[ 1553.711146][T19133] bond2: (slave ip6gretap2): failed to get link speed/duplex
[ 1553.762867][ T2521] veth0_macvtap: entered promiscuous mode
[ 1553.795730][ T2521] veth1_macvtap: entered promiscuous mode
[ 1553.872799][ T2521] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1553.889219][ T2521] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1553.912084][T19130] bond2: (slave ip6gretap2): failed to get link speed/duplex
[ 1553.987430][ T1326] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1554.018252][ T1326] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1554.035468][ T2820] netlink: 104 bytes leftover after parsing attributes in process `syz.3.7777'.
[ 1554.057657][ T2812] netlink: 'syz.4.7778': attribute type 49 has an invalid length.
[ 1554.066694][T19130] bond2: (slave ip6gretap2): failed to get link speed/duplex
[ 1554.096098][ T1326] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1554.121687][ T1326] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1554.228716][ T2825] netlink: 60 bytes leftover after parsing attributes in process `syz.0.7780'.
[ 1554.282574][ T2830] netlink: 60 bytes leftover after parsing attributes in process `syz.0.7780'.
[ 1554.311242][T19133] bond2: (slave ip6gretap2): failed to get link speed/duplex
[ 1554.408151][   T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1554.420673][   T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1554.501145][   T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1554.504440][ T2844] netlink: 'syz.0.7788': attribute type 29 has an invalid length.
[ 1554.509078][   T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1554.567498][ T2844] netlink: 'syz.0.7788': attribute type 29 has an invalid length.
[ 1555.161334][ T5882] Bluetooth: hci4: command tx timeout
[ 1556.984893][ T2983] __nla_validate_parse: 4 callbacks suppressed
[ 1556.984913][ T2983] netlink: 60 bytes leftover after parsing attributes in process `syz.3.7850'.
[ 1557.023994][ T2983] netlink: 60 bytes leftover after parsing attributes in process `syz.3.7850'.
[ 1557.050190][ T2992] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7854'.
[ 1557.074396][ T2992] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7854'.
[ 1557.110783][ T2992] netlink: 19 bytes leftover after parsing attributes in process `syz.0.7854'.
[ 1557.241386][ T5882] Bluetooth: hci4: command tx timeout
[ 1557.467783][ T3013] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7864'.
[ 1557.501821][ T3013] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7864'.
[ 1557.539892][ T3015] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7865'.
[ 1557.833118][ T1326] net_ratelimit: 29 callbacks suppressed
[ 1557.833139][ T1326] bond2: (slave ip6gretap2): failed to get link speed/duplex
[ 1557.981026][ T3529] bond2: (slave ip6gretap2): failed to get link speed/duplex
[ 1558.101094][ T1326] bond2: (slave ip6gretap2): failed to get link speed/duplex
[ 1558.211027][T19133] bond2: (slave ip6gretap2): failed to get link speed/duplex
[ 1558.322262][T19133] bond2: (slave ip6gretap2): failed to get link speed/duplex
[ 1558.451135][T19130] bond2: (slave ip6gretap2): failed to get link speed/duplex
[ 1558.561072][T19133] bond2: (slave ip6gretap2): failed to get link speed/duplex
[ 1558.670812][T19130] bond2: (slave ip6gretap2): failed to get link speed/duplex
[ 1558.715642][ T3081] netlink: 104 bytes leftover after parsing attributes in process `syz.1.7897'.
[ 1558.793259][   T49] bond2: (slave ip6gretap2): failed to get link speed/duplex
[ 1558.865223][ T3087] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[ 1558.912896][ T3529] bond2: (slave ip6gretap2): failed to get link speed/duplex
[ 1559.377061][ T3107] netlink: 'syz.4.7910': attribute type 24 has an invalid length.
[ 1559.572388][ T3121] netlink: 128 bytes leftover after parsing attributes in process `syz.0.7914'.
[ 1559.859356][ T3134] rdma_rxe: rxe_newlink: failed to add lo
[ 1560.570040][ T3154] batman_adv: batadv0: Adding interface: ip6gretap1
[ 1560.592791][ T3154] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1560.655630][ T3154] batman_adv: batadv0: Interface activated: ip6gretap1
[ 1562.703947][ T3233] __nla_validate_parse: 1 callbacks suppressed
[ 1562.703966][ T3233] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7959'.
[ 1562.745297][ T3235] netlink: 32 bytes leftover after parsing attributes in process `syz.1.7960'.
[ 1562.970927][ T3529] net_ratelimit: 32 callbacks suppressed
[ 1562.970949][ T3529] bond2: (slave ip6gretap2): failed to get link speed/duplex
[ 1563.111253][T19130] bond2: (slave ip6gretap2): failed to get link speed/duplex
[ 1563.145672][ T3245] netlink: 36 bytes leftover after parsing attributes in process `syz.4.7962'.
[ 1563.179717][ T3245] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7962'.
[ 1563.189377][ T3245] netlink: 36 bytes leftover after parsing attributes in process `syz.4.7962'.
[ 1563.199765][ T3245] netlink: 36 bytes leftover after parsing attributes in process `syz.4.7962'.
[ 1563.219911][ T3247] netlink: 'syz.5.7966': attribute type 25 has an invalid length.
[ 1563.227985][T19130] bond2: (slave ip6gretap2): failed to get link speed/duplex
[ 1563.341303][ T3529] bond2: (slave ip6gretap2): failed to get link speed/duplex
[ 1563.464703][ T1326] bond2: (slave ip6gretap2): failed to get link speed/duplex
[ 1563.485820][ T3257] netlink: 'syz.0.7970': attribute type 49 has an invalid length.
[ 1563.552017][ T3259] netlink: 32 bytes leftover after parsing attributes in process `syz.5.7971'.
[ 1563.592708][T19130] bond2: (slave ip6gretap2): failed to get link speed/duplex
[ 1563.650197][ T3265] vcan0: tx drop: invalid sa for name 0x0000000000000003
[ 1563.711897][T19133] bond2: (slave ip6gretap2): failed to get link speed/duplex
[ 1563.835159][ T3272] netlink: 'syz.3.7978': attribute type 25 has an invalid length.
[ 1563.851152][ T3529] bond2: (slave ip6gretap2): failed to get link speed/duplex
[ 1563.967972][ T3529] bond2: (slave ip6gretap2): failed to get link speed/duplex
[ 1564.125889][ T3529] bond2: (slave ip6gretap2): failed to get link speed/duplex
[ 1565.386495][ T3328] netlink: 104 bytes leftover after parsing attributes in process `syz.0.7995'.
[ 1565.502688][ T3327] syzkaller0: entered promiscuous mode
[ 1565.520312][ T3327] syzkaller0: entered allmulticast mode
[ 1566.530879][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[ 1567.084696][ T3377] netlink: 104 bytes leftover after parsing attributes in process `syz.0.8014'.
[ 1567.159191][ T3379] netlink: 'syz.0.8015': attribute type 25 has an invalid length.
[ 1567.641084][T19391] Bluetooth: hci4: command 0x0405 tx timeout
[ 1568.730956][ T3383] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8017'.
[ 1568.758539][ T2991] net_ratelimit: 11 callbacks suppressed
[ 1568.758558][ T2991] bond2: (slave ip6gretap2): failed to get link speed/duplex
[ 1568.882523][T19130] bond2: (slave ip6gretap2): failed to get link speed/duplex
[ 1568.947900][ T3394] netlink: 92 bytes leftover after parsing attributes in process `syz.4.8020'.
[ 1568.991010][T19130] bond2: (slave ip6gretap2): failed to get link speed/duplex
[ 1569.012478][ T3394] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8020'.
[ 1569.030771][ T3394] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8020'.
[ 1569.111159][T19130] bond2: (slave ip6gretap2): failed to get link speed/duplex
[ 1569.220922][T19130] bond2: (slave ip6gretap2): failed to get link speed/duplex
[ 1569.296813][ T3405] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8027'.
[ 1569.340884][T19130] bond2: (slave ip6gretap2): failed to get link speed/duplex
[ 1569.387054][ T3407] netlink: 56 bytes leftover after parsing attributes in process `syz.5.8026'.
[ 1569.453877][ T2991] bond2: (slave ip6gretap2): failed to get link speed/duplex
[ 1569.570928][ T2991] bond2: (slave ip6gretap2): failed to get link speed/duplex
[ 1569.683029][   T49] bond2: (slave ip6gretap2): failed to get link speed/duplex
[ 1569.790835][   T49] bond2: (slave ip6gretap2): failed to get link speed/duplex
[ 1570.917708][ T3455] netlink: 56 bytes leftover after parsing attributes in process `syz.3.8040'.
[ 1571.482590][ T3483] netlink: 92 bytes leftover after parsing attributes in process `syz.5.8054'.
[ 1571.531174][ T3483] netlink: 24 bytes leftover after parsing attributes in process `syz.5.8054'.
[ 1571.580859][ T3483] netlink: 24 bytes leftover after parsing attributes in process `syz.5.8054'.
[ 1571.702233][ T3496] mac80211_hwsim hwsim58 syzkaller0: entered promiscuous mode
[ 1571.709968][ T3496] mac80211_hwsim hwsim58 syzkaller0: entered allmulticast mode
[ 1573.028478][ T3548] bridge_slave_0: left allmulticast mode
[ 1573.046749][ T3548] bridge_slave_0: left promiscuous mode
[ 1573.068108][ T3548] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1573.831016][   T49] net_ratelimit: 29 callbacks suppressed
[ 1573.831037][   T49] bond2: (slave ip6gretap2): failed to get link speed/duplex
[ 1573.963163][ T2991] bond2: (slave ip6gretap2): failed to get link speed/duplex
[ 1573.974310][ T3593] __nla_validate_parse: 6 callbacks suppressed
[ 1573.974327][ T3593] netlink: 64 bytes leftover after parsing attributes in process `syz.1.8100'.
[ 1574.081032][ T2991] bond2: (slave ip6gretap2): failed to get link speed/duplex
[ 1574.201868][   T49] bond2: (slave ip6gretap2): failed to get link speed/duplex
[ 1574.310998][   T49] bond2: (slave ip6gretap2): failed to get link speed/duplex
[ 1574.445020][   T49] bond2: (slave ip6gretap2): failed to get link speed/duplex
[ 1574.571114][   T49] bond2: (slave ip6gretap2): failed to get link speed/duplex
[ 1574.681381][   T49] bond2: (slave ip6gretap2): failed to get link speed/duplex
[ 1574.811388][T19130] bond2: (slave ip6gretap2): failed to get link speed/duplex
[ 1574.827049][ T3632] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8117'.
[ 1574.931534][T19130] bond2: (slave ip6gretap2): failed to get link speed/duplex
[ 1575.169438][ T3641] netlink: 32 bytes leftover after parsing attributes in process `syz.0.8120'.
[ 1575.177059][ T3642] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[ 1575.737273][ T3667] netlink: 36 bytes leftover after parsing attributes in process `syz.1.8127'.
[ 1575.782978][ T3667] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8127'.
[ 1575.820077][ T3667] netlink: 36 bytes leftover after parsing attributes in process `syz.1.8127'.
[ 1575.865228][ T3667] netlink: 36 bytes leftover after parsing attributes in process `syz.1.8127'.
[ 1575.904133][ T3670] netlink: 92 bytes leftover after parsing attributes in process `syz.4.8130'.
[ 1575.927609][ T3670] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8130'.
[ 1575.957190][ T3670] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8130'.
[ 1576.914257][ T3707] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[ 1577.844685][ T3736] netlink: 'syz.3.8157': attribute type 25 has an invalid length.
[ 1578.291737][ T3752] sch_tbf: burst 19872 is lower than device lo mtu (11337746) !
[ 1578.790515][ T3769] vcan0: tx drop: invalid sa for name 0x0000000000000003
[ 1578.922330][T19130] net_ratelimit: 30 callbacks suppressed
[ 1578.922357][T19130] bond2: (slave ip6gretap2): failed to get link speed/duplex
[ 1579.083364][T19130] bond2: (slave ip6gretap2): failed to get link speed/duplex
[ 1579.220860][ T1326] bond2: (slave ip6gretap2): failed to get link speed/duplex
[ 1579.360825][ T1326] bond2: (slave ip6gretap2): failed to get link speed/duplex
[ 1579.472087][ T2991] bond2: (slave ip6gretap2): failed to get link speed/duplex
[ 1579.555025][ T3808] __nla_validate_parse: 2 callbacks suppressed
[ 1579.555160][ T3808] netlink: 72 bytes leftover after parsing attributes in process `syz.5.8188'.
[ 1579.592066][ T2991] bond2: (slave ip6gretap2): failed to get link speed/duplex
[ 1579.702442][ T1326] bond2: (slave ip6gretap2): failed to get link speed/duplex
[ 1579.811945][T19130] bond2: (slave ip6gretap2): failed to get link speed/duplex
[ 1579.921868][T19130] bond2: (slave ip6gretap2): failed to get link speed/duplex
[ 1580.032288][ T2991] bond2: (slave ip6gretap2): failed to get link speed/duplex
[ 1580.272858][ T3821] sch_tbf: burst 19872 is lower than device lo mtu (11337746) !
[ 1580.956817][ T3853] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[ 1581.243776][ T3873] netlink: 'syz.4.8218': attribute type 49 has an invalid length.
[ 1581.481693][ T3882] netlink: 128 bytes leftover after parsing attributes in process `syz.3.8222'.
[ 1581.491373][ T3882] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8222'.
[ 1582.147499][ T3911] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8232'.
[ 1582.458354][ T3923] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[ 1582.620031][ T3930] netlink: 72 bytes leftover after parsing attributes in process `syz.3.8243'.
[ 1583.318831][ T3960] netlink: 'syz.3.8256': attribute type 25 has an invalid length.
[ 1583.470323][ T3968] netlink: 104 bytes leftover after parsing attributes in process `syz.0.8259'.
[ 1583.559178][ T3974] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8261'.
[ 1583.931772][   T49] net_ratelimit: 31 callbacks suppressed
[ 1583.931794][   T49] bond2: (slave ip6gretap2): failed to get link speed/duplex
[ 1584.060814][ T2991] bond2: (slave ip6gretap2): failed to get link speed/duplex
[ 1584.180775][T19135] bond2: (slave ip6gretap2): failed to get link speed/duplex
[ 1584.191765][ T4012] netlink: 104 bytes leftover after parsing attributes in process `syz.1.8280'.
[ 1584.383564][ T4014] syzkaller0: entered promiscuous mode
[ 1584.403792][ T4014] syzkaller0: entered allmulticast mode
[ 1584.672540][ T1326] bond2: (slave ip6gretap2): failed to get link speed/duplex
[ 1584.725349][ T4034] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8288'.
[ 1584.803546][T19130] bond2: (slave ip6gretap2): failed to get link speed/duplex
[ 1584.920743][   T49] bond2: (slave ip6gretap2): failed to get link speed/duplex
[ 1587.141144][T19130] bond2: (slave ip6gretap2): failed to get link speed/duplex
[ 1587.251895][ T2991] bond2: (slave ip6gretap2): failed to get link speed/duplex
[ 1587.294524][ T4070] netlink: 'syz.0.8300': attribute type 25 has an invalid length.
[ 1587.303716][ T4072] netlink: 64 bytes leftover after parsing attributes in process `syz.5.8299'.
[ 1587.401753][ T1326] bond2: (slave ip6gretap2): failed to get link speed/duplex
[ 1587.536074][   T49] bond2: (slave ip6gretap2): failed to get link speed/duplex
[ 1587.811932][ T4097] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8309'.
[ 1588.308198][ T4119] netlink: 64 bytes leftover after parsing attributes in process `syz.4.8315'.
[ 1588.468314][ T4122] netlink: 'syz.4.8316': attribute type 25 has an invalid length.
[ 1588.544565][ T4125] netlink: 104 bytes leftover after parsing attributes in process `syz.4.8318'.
[ 1588.982482][ T4148] netlink: 56 bytes leftover after parsing attributes in process `syz.1.8327'.
[ 1589.001185][T19130] net_ratelimit: 10 callbacks suppressed
[ 1589.001205][T19130] bond2: (slave ip6gretap2): failed to get link speed/duplex
[ 1589.007067][ T4145] netlink: 36 bytes leftover after parsing attributes in process `syz.0.8326'.
[ 1589.036431][ T4145] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8326'.
[ 1589.064783][ T4145] netlink: 36 bytes leftover after parsing attributes in process `syz.0.8326'.
[ 1589.084544][ T4145] netlink: 36 bytes leftover after parsing attributes in process `syz.0.8326'.
[ 1589.161151][   T49] bond2: (slave ip6gretap2): failed to get link speed/duplex
[ 1589.280880][   T49] bond2: (slave ip6gretap2): failed to get link speed/duplex
[ 1589.401282][T19130] bond2: (slave ip6gretap2): failed to get link speed/duplex
[ 1589.510892][ T2991] bond2: (slave ip6gretap2): failed to get link speed/duplex
[ 1589.621542][ T2991] bond2: (slave ip6gretap2): failed to get link speed/duplex
[ 1589.741242][   T49] bond2: (slave ip6gretap2): failed to get link speed/duplex
[ 1589.824446][ T4172] sch_tbf: burst 19872 is lower than device lo mtu (11337746) !
[ 1589.861917][ T2991] bond2: (slave ip6gretap2): failed to get link speed/duplex
[ 1590.004177][ T2991] bond2: (slave ip6gretap2): failed to get link speed/duplex
[ 1590.058789][ T4179] netlink: 56 bytes leftover after parsing attributes in process `syz.4.8339'.
[ 1590.256921][T19130] bond2: (slave ip6gretap2): failed to get link speed/duplex
[ 1590.433287][ T4200] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[ 1591.067298][ T4228] netlink: 36 bytes leftover after parsing attributes in process `syz.3.8357'.
[ 1591.084611][ T4228] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8357'.
[ 1591.125877][ T4228] netlink: 36 bytes leftover after parsing attributes in process `syz.3.8357'.
[ 1591.138219][ T4228] netlink: 36 bytes leftover after parsing attributes in process `syz.3.8357'.
[ 1591.204354][ T4236] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[ 1591.221487][ T4234] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8361'.
[ 1591.547468][ T4248] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8370'.
[ 1593.673357][ T4312] netlink: 32 bytes leftover after parsing attributes in process `syz.3.8393'.
[ 1593.994036][ T4331] netlink: 'syz.0.8399': attribute type 25 has an invalid length.
[ 1594.020836][T19135] net_ratelimit: 21 callbacks suppressed
[ 1594.020857][T19135] bond2: (slave ip6gretap2): failed to get link speed/duplex
[ 1594.144754][ T4337] netlink: 76 bytes leftover after parsing attributes in process `syz.0.8402'.
[ 1594.156735][ T4337] netlink: 76 bytes leftover after parsing attributes in process `syz.0.8402'.
[ 1594.171091][   T49] bond2: (slave ip6gretap2): failed to get link speed/duplex
[ 1594.291022][T19130] bond2: (slave ip6gretap2): failed to get link speed/duplex
[ 1594.401114][   T49] bond2: (slave ip6gretap2): failed to get link speed/duplex
[ 1594.510754][T19130] bond2: (slave ip6gretap2): failed to get link speed/duplex
[ 1594.642117][T19130] bond2: (slave ip6gretap2): failed to get link speed/duplex
[ 1594.692798][ T4357] netlink: 'syz.5.8410': attribute type 25 has an invalid length.
[ 1594.771693][T19135] bond2: (slave ip6gretap2): failed to get link speed/duplex
[ 1594.910818][ T1326] bond2: (slave ip6gretap2): failed to get link speed/duplex
[ 1595.021869][ T2991] bond2: (slave ip6gretap2): failed to get link speed/duplex
[ 1595.131361][ T2991] bond2: (slave ip6gretap2): failed to get link speed/duplex
[ 1596.013612][ T4407] __nla_validate_parse: 5 callbacks suppressed
[ 1596.013629][ T4407] netlink: 32 bytes leftover after parsing attributes in process `syz.0.8426'.
[ 1596.171106][ T4409] netlink: 'syz.4.8428': attribute type 25 has an invalid length.
[ 1597.100196][ T4444] netlink: 32 bytes leftover after parsing attributes in process `syz.3.8440'.
[ 1598.084695][ T4473] netlink: 'syz.5.8450': attribute type 25 has an invalid length.
[ 1598.121325][ T4475] netlink: 32 bytes leftover after parsing attributes in process `syz.3.8451'.
[ 1599.070868][ T1326] net_ratelimit: 32 callbacks suppressed
[ 1599.070887][ T1326] bond2: (slave ip6gretap2): failed to get link speed/duplex
[ 1599.083321][ T4511] netlink: 32 bytes leftover after parsing attributes in process `syz.5.8465'.
[ 1599.221196][T19130] bond2: (slave ip6gretap2): failed to get link speed/duplex
[ 1599.330881][ T2991] bond2: (slave ip6gretap2): failed to get link speed/duplex
[ 1599.440882][T19130] bond2: (slave ip6gretap2): failed to get link speed/duplex
[ 1599.551158][T19130] bond2: (slave ip6gretap2): failed to get link speed/duplex
[ 1599.661440][T19135] bond2: (slave ip6gretap2): failed to get link speed/duplex
[ 1599.792153][   T49] bond2: (slave ip6gretap2): failed to get link speed/duplex
[ 1599.911468][   T49] bond2: (slave ip6gretap2): failed to get link speed/duplex
[ 1600.051939][   T49] bond2: (slave ip6gretap2): failed to get link speed/duplex
[ 1600.201164][   T49] bond2: (slave ip6gretap2): failed to get link speed/duplex
[ 1600.913511][ T4581] netlink: 'syz.5.8493': attribute type 25 has an invalid length.
[ 1600.967523][ T4579] syzkaller0: entered promiscuous mode
[ 1600.980543][ T4579] syzkaller0: entered allmulticast mode
[ 1601.846092][ T4622] netlink: 'syz.1.8510': attribute type 1 has an invalid length.
[ 1601.862764][ T4622] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8510'.
[ 1604.141968][T19130] net_ratelimit: 12 callbacks suppressed
[ 1604.141988][T19130] bond2: (slave ip6gretap2): failed to get link speed/duplex
[ 1604.301010][T19135] bond2: (slave ip6gretap2): failed to get link speed/duplex
[ 1604.410816][T19135] bond2: (slave ip6gretap2): failed to get link speed/duplex
[ 1604.423940][ T4669] netlink: 64 bytes leftover after parsing attributes in process `syz.4.8530'.
[ 1604.505326][ T4671] netlink: 32 bytes leftover after parsing attributes in process `syz.1.8531'.
[ 1604.521619][ T2991] bond2: (slave ip6gretap2): failed to get link speed/duplex
[ 1604.632526][ T2991] bond2: (slave ip6gretap2): failed to get link speed/duplex
[ 1604.751426][T19130] bond2: (slave ip6gretap2): failed to get link speed/duplex
[ 1604.813258][ T4687] netlink: 40 bytes leftover after parsing attributes in process `syz.4.8538'.
[ 1604.861183][T19135] bond2: (slave ip6gretap2): failed to get link speed/duplex
[ 1604.970935][T19130] bond2: (slave ip6gretap2): failed to get link speed/duplex
[ 1605.053052][ T4696] netlink: 56 bytes leftover after parsing attributes in process `syz.4.8541'.
[ 1605.083211][T19135] bond2: (slave ip6gretap2): failed to get link speed/duplex
[ 1605.167522][ T4700] netlink: 64 bytes leftover after parsing attributes in process `syz.5.8544'.
[ 1605.220923][T19135] bond2: (slave ip6gretap2): failed to get link speed/duplex
[ 1605.464919][ T4718] netlink: 40 bytes leftover after parsing attributes in process `syz.5.8552'.
[ 1607.184910][ T4768] sch_tbf: burst 19872 is lower than device lo mtu (11337746) !
[ 1607.433675][ T4778] netlink: 24 bytes leftover after parsing attributes in process `syz.5.8576'.
[ 1608.221527][ T4799] syzkaller0: entered promiscuous mode
[ 1608.227200][ T4799] syzkaller0: entered allmulticast mode
[ 1611.761132][ T3529] net_ratelimit: 32 callbacks suppressed
[ 1611.761154][ T3529] bond2: (slave ip6gretap2): failed to get link speed/duplex
[ 1611.890840][ T2991] bond2: (slave ip6gretap2): failed to get link speed/duplex
[ 1611.891593][ T4859] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8606'.
[ 1612.051905][T19135] bond2: (slave ip6gretap2): failed to get link speed/duplex
[ 1612.170881][T19135] bond2: (slave ip6gretap2): failed to get link speed/duplex
[ 1612.283147][   T49] bond2: (slave ip6gretap2): failed to get link speed/duplex
[ 1612.411182][T19135] bond2: (slave ip6gretap2): failed to get link speed/duplex
[ 1612.422710][ T4879] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[ 1612.521055][ T1326] bond2: (slave ip6gretap2): failed to get link speed/duplex
[ 1612.641374][ T3529] bond2: (slave ip6gretap2): failed to get link speed/duplex
[ 1612.781737][   T49] bond2: (slave ip6gretap2): failed to get link speed/duplex
[ 1612.900849][   T49] bond2: (slave ip6gretap2): failed to get link speed/duplex
[ 1613.169121][ T4907] netlink: 36 bytes leftover after parsing attributes in process `syz.4.8625'.
[ 1613.179096][ T4907] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8625'.
[ 1613.188583][ T4907] netlink: 36 bytes leftover after parsing attributes in process `syz.4.8625'.
[ 1613.198737][ T4907] netlink: 36 bytes leftover after parsing attributes in process `syz.4.8625'.
[ 1614.033076][ T4920] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8634'.
[ 1614.054200][ T4920] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8634'.
[ 1614.094703][ T4924] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8636'.
[ 1616.187105][ T5007] netlink: 'syz.4.8668': attribute type 29 has an invalid length.
[ 1616.764204][ T5023] batman_adv: batadv0: Adding interface: ip6gretap1
[ 1616.791038][ T5023] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1616.851606][ T5023] batman_adv: batadv0: Interface activated: ip6gretap1
[ 1616.862786][ T2991] net_ratelimit: 34 callbacks suppressed
[ 1616.862807][ T2991] bond2: (slave ip6gretap2): failed to get link speed/duplex
[ 1616.991088][T19135] bond2: (slave ip6gretap2): failed to get link speed/duplex
[ 1617.111324][ T1326] bond2: (slave ip6gretap2): failed to get link speed/duplex
[ 1617.230762][ T3529] bond2: (slave ip6gretap2): failed to get link speed/duplex
[ 1617.287083][T19391] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[ 1617.297549][T19391] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[ 1617.305616][T19391] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[ 1617.313859][T19391] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[ 1617.322734][T19391] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[ 1617.352181][T19135] bond2: (slave ip6gretap2): failed to get link speed/duplex
[ 1617.471072][ T3529] bond2: (slave ip6gretap2): failed to get link speed/duplex
[ 1617.651236][T19130] bond2: (slave ip6gretap2): failed to get link speed/duplex
[ 1617.871199][T19130] bond2: (slave ip6gretap2): failed to get link speed/duplex
[ 1617.980977][   T49] bond2: (slave ip6gretap2): failed to get link speed/duplex
[ 1618.135519][ T5036] chnl_net:caif_netlink_parms(): no params data found
[ 1618.200890][T19130] bond2: (slave ip6gretap2): failed to get link speed/duplex
[ 1618.450966][ T5070] netlink: 'syz.5.8691': attribute type 29 has an invalid length.
[ 1618.506947][ T5070] netlink: 'syz.5.8691': attribute type 29 has an invalid length.
[ 1618.575981][ T5036] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1618.602525][ T5036] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1618.631171][ T5036] bridge_slave_0: entered allmulticast mode
[ 1618.647729][ T5036] bridge_slave_0: entered promiscuous mode
[ 1618.683581][ T5036] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1618.731144][ T5036] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1618.738466][ T5036] bridge_slave_1: entered allmulticast mode
[ 1618.774105][ T5036] bridge_slave_1: entered promiscuous mode
[ 1618.861221][ T5078] batman_adv: batadv0: Adding interface: ip6gretap1
[ 1618.875241][ T5078] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1618.902860][ T5078] batman_adv: batadv0: Interface activated: ip6gretap1
[ 1618.963913][ T5036] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1619.018518][ T5036] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1619.111829][ T5083] syzkaller0: entered promiscuous mode
[ 1619.117338][ T5083] syzkaller0: entered allmulticast mode
[ 1619.179526][ T5036] team0: Port device team_slave_0 added
[ 1619.222979][ T5036] team0: Port device team_slave_1 added
[ 1619.331306][ T5095] netlink: 'syz.1.8700': attribute type 25 has an invalid length.
[ 1619.401134][T19391] Bluetooth: hci6: command tx timeout
[ 1621.484691][T19391] Bluetooth: hci6: command 0x041b tx timeout
[ 1621.763268][ T5036] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1621.780771][ T5036] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1621.833665][ T5036] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1621.871779][ T3529] net_ratelimit: 1 callbacks suppressed
[ 1621.871799][ T3529] bond2: (slave ip6gretap2): failed to get link speed/duplex
[ 1621.921735][ T5036] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1621.938975][ T5036] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1621.955397][ T5139] netlink: 36 bytes leftover after parsing attributes in process `syz.3.8712'.
[ 1621.980776][ T5139] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8712'.
[ 1622.002221][ T5139] netlink: 36 bytes leftover after parsing attributes in process `syz.3.8712'.
[ 1622.014384][ T5036] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1622.028308][ T5139] netlink: 36 bytes leftover after parsing attributes in process `syz.3.8712'.
[ 1622.066762][ T5138] netlink: 'syz.1.8713': attribute type 29 has an invalid length.
[ 1622.077264][ T5140] netlink: 'syz.1.8713': attribute type 29 has an invalid length.
[ 1622.160959][   T49] bond2: (slave ip6gretap2): failed to get link speed/duplex
[ 1622.203521][ T5036] hsr_slave_0: entered promiscuous mode
[ 1622.220737][ T5036] hsr_slave_1: entered promiscuous mode
[ 1622.230467][ T5036] debugfs: 'hsr0' already exists in 'hsr'
[ 1622.249684][ T5036] Cannot create hsr debugfs directory
[ 1622.641228][   T49] bond2: (slave ip6gretap2): failed to get link speed/duplex
[ 1622.892017][T19130] bond2: (slave ip6gretap2): failed to get link speed/duplex
[ 1622.967673][ T5036] netdevsim netdevsim6 netdevsim0: renamed from eth0
[ 1623.003462][ T5036] netdevsim netdevsim6 netdevsim1: renamed from eth1
[ 1623.026601][ T5036] netdevsim netdevsim6 netdevsim2: renamed from eth2
[ 1623.050535][ T5036] netdevsim netdevsim6 netdevsim3: renamed from eth3
[ 1623.120951][T19135] bond2: (slave ip6gretap2): failed to get link speed/duplex
[ 1623.272561][ T5036] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1623.301045][ T3529] bond2: (slave ip6gretap2): failed to get link speed/duplex
[ 1623.350210][ T5036] 8021q: adding VLAN 0 to HW filter on device team0
[ 1623.416140][T19135] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1623.423484][T19135] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1623.458088][T19135] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1623.465301][T19135] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1623.531351][ T3529] bond2: (slave ip6gretap2): failed to get link speed/duplex
[ 1623.561354][T19391] Bluetooth: hci6: command 0x041b tx timeout
[ 1623.622926][ T5203] netlink: 'syz.5.8733': attribute type 24 has an invalid length.
[ 1623.721282][T19130] bond2: (slave ip6gretap2): failed to get link speed/duplex
[ 1623.851368][T19135] bond2: (slave ip6gretap2): failed to get link speed/duplex
[ 1623.973636][ T3529] bond2: (slave ip6gretap2): failed to get link speed/duplex
[ 1624.038189][ T5036] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1624.273332][ T5223] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8736'.
[ 1624.585744][ T5036] veth0_vlan: entered promiscuous mode
[ 1624.637331][ T5036] veth1_vlan: entered promiscuous mode
[ 1624.771592][ T5036] veth0_macvtap: entered promiscuous mode
[ 1624.800125][ T5036] veth1_macvtap: entered promiscuous mode
[ 1624.838709][ T5238] netlink: 'syz.4.8739': attribute type 12 has an invalid length.
[ 1624.864710][ T5036] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1624.913876][ T5036] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1624.938342][   T49] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1624.984829][   T49] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1625.012198][   T49] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1625.127182][ T5247] netlink: 'syz.4.8743': attribute type 24 has an invalid length.
[ 1625.641975][T19391] Bluetooth: hci6: command 0x041b tx timeout
[ 1625.687210][   T49] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1625.709484][ T5244] netlink: 'syz.5.8742': attribute type 12 has an invalid length.
[ 1625.939154][   T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1625.967739][   T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1626.008849][   T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1626.018745][   T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1626.375817][ T5276] netlink: 64 bytes leftover after parsing attributes in process `syz.3.8754'.
[ 1626.910900][T19133] net_ratelimit: 16 callbacks suppressed
[ 1626.911010][T19133] bond2: (slave ip6gretap2): failed to get link speed/duplex
[ 1627.041718][ T2991] bond2: (slave ip6gretap2): failed to get link speed/duplex
[ 1627.073710][ T5305] netlink: 'syz.6.8766': attribute type 12 has an invalid length.
[ 1627.181494][   T12] bond2: (slave ip6gretap2): failed to get link speed/duplex
[ 1627.182189][ T5311] netlink: 64 bytes leftover after parsing attributes in process `syz.6.8769'.
[ 1627.291652][ T2991] bond2: (slave ip6gretap2): failed to get link speed/duplex
[ 1627.421650][   T12] bond2: (slave ip6gretap2): failed to get link speed/duplex
[ 1627.530947][ T2991] bond2: (slave ip6gretap2): failed to get link speed/duplex
[ 1627.664447][T19133] bond2: (slave ip6gretap2): failed to get link speed/duplex
[ 1627.720908][T19391] Bluetooth: hci6: command 0x041b tx timeout
[ 1627.801372][   T12] bond2: (slave ip6gretap2): failed to get link speed/duplex
[ 1627.921086][   T12] bond2: (slave ip6gretap2): failed to get link speed/duplex
[ 1628.041516][   T12] bond2: (slave ip6gretap2): failed to get link speed/duplex
[ 1628.314522][ T5347] netlink: 64 bytes leftover after parsing attributes in process `syz.4.8781'.
[ 1628.584918][ T5359] netlink: 'syz.6.8784': attribute type 12 has an invalid length.
[ 1628.722935][T19133] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1628.731223][T19133] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1629.177773][ T5381] netlink: 'syz.6.8796': attribute type 29 has an invalid length.
[ 1629.189009][ T5381] netlink: 'syz.6.8796': attribute type 29 has an invalid length.
[ 1629.994759][   T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1630.018914][   T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1630.045432][ T5415] batman_adv: batadv0: Adding interface: ip6gretap1
[ 1630.061166][ T5415] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1630.105583][ T5415] batman_adv: batadv0: Interface activated: ip6gretap1
[ 1631.992743][T19135] net_ratelimit: 31 callbacks suppressed
[ 1631.992764][T19135] bond2: (slave ip6gretap2): failed to get link speed/duplex
[ 1632.120867][ T3529] bond2: (slave ip6gretap2): failed to get link speed/duplex
[ 1632.231082][T19133] bond2: (slave ip6gretap2): failed to get link speed/duplex
[ 1632.342070][T19133] bond2: (slave ip6gretap2): failed to get link speed/duplex
[ 1632.471079][   T49] bond2: (slave ip6gretap2): failed to get link speed/duplex
[ 1632.580940][T19135] bond2: (slave ip6gretap2): failed to get link speed/duplex
[ 1632.633397][ T5518] syzkaller1: entered promiscuous mode
[ 1632.638899][ T5518] syzkaller1: entered allmulticast mode
[ 1632.649618][ T5518] netlink: 212 bytes leftover after parsing attributes in process `syz.1.8847'.
[ 1632.712745][ T3529] bond2: (slave ip6gretap2): failed to get link speed/duplex
[ 1632.821560][ T2991] bond2: (slave ip6gretap2): failed to get link speed/duplex
[ 1632.932454][T19135] bond2: (slave ip6gretap2): failed to get link speed/duplex
[ 1633.093602][T19135] bond2: (slave ip6gretap2): failed to get link speed/duplex
[ 1633.156008][ T5538] netlink: 36 bytes leftover after parsing attributes in process `syz.4.8852'.
[ 1633.180693][ T5538] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8852'.
[ 1633.196096][ T5538] netlink: 36 bytes leftover after parsing attributes in process `syz.4.8852'.
[ 1633.230833][ T5538] netlink: 36 bytes leftover after parsing attributes in process `syz.4.8852'.
[ 1633.731013][ T5556] netlink: 56 bytes leftover after parsing attributes in process `syz.5.8858'.
[ 1634.519533][ T2991] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1634.539700][ T2991] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1635.010366][ T5599] netlink: 'syz.3.8877': attribute type 29 has an invalid length.
[ 1635.046544][ T5604] netlink: 'syz.3.8877': attribute type 29 has an invalid length.
[ 1635.065992][ T5606] netlink: 48 bytes leftover after parsing attributes in process `syz.4.8880'.
[ 1635.342351][ T5618] netlink: 'syz.5.8884': attribute type 12 has an invalid length.
[ 1635.356621][ T5618] netlink: 132 bytes leftover after parsing attributes in process `syz.5.8884'.
[ 1635.781001][ T5649] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8892'.
[ 1635.907811][ T5651] netlink: 'syz.1.8893': attribute type 29 has an invalid length.
[ 1635.935635][ T5651] netlink: 'syz.1.8893': attribute type 29 has an invalid length.
[ 1636.743738][ T5678] netlink: 16 bytes leftover after parsing attributes in process `syz.5.8904'.
[ 1636.778159][ T5678] bond0: entered promiscuous mode
[ 1636.790781][ T5678] bond_slave_0: entered promiscuous mode
[ 1636.806769][ T5678] bond_slave_1: entered promiscuous mode
[ 1636.833818][ T5678] bond0: left promiscuous mode
[ 1636.838622][ T5678] bond_slave_0: left promiscuous mode
[ 1636.853995][ T5678] bond_slave_1: left promiscuous mode
[ 1636.892337][ T5676] syzkaller1: entered promiscuous mode
[ 1636.897839][ T5676] syzkaller1: entered allmulticast mode
[ 1637.000874][   T12] net_ratelimit: 30 callbacks suppressed
[ 1637.000893][   T12] bond2: (slave ip6gretap2): failed to get link speed/duplex
[ 1637.133649][ T2991] bond2: (slave ip6gretap2): failed to get link speed/duplex
[ 1637.260066][ T3529] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1637.284241][   T12] bond2: (slave ip6gretap2): failed to get link speed/duplex
[ 1637.290674][ T3529] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1637.410996][   T49] bond2: (slave ip6gretap2): failed to get link speed/duplex
[ 1637.521419][   T49] bond2: (slave ip6gretap2): failed to get link speed/duplex
[ 1637.651156][T19133] bond2: (slave ip6gretap2): failed to get link speed/duplex
[ 1637.733706][ T2991] wlan0: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID
[ 1637.801196][   T49] bond2: (slave ip6gretap2): failed to get link speed/duplex
[ 1637.922439][   T49] bond2: (slave ip6gretap2): failed to get link speed/duplex
[ 1638.042072][   T49] bond2: (slave ip6gretap2): failed to get link speed/duplex
[ 1638.161120][ T2991] bond2: (slave ip6gretap2): failed to get link speed/duplex
[ 1638.422797][ T2991] wlan0: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID
[ 1638.740310][ T5756] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8938'.
[ 1639.349468][T19135] wlan0: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID
[ 1639.514060][ T5782] netlink: 60 bytes leftover after parsing attributes in process `syz.1.8949'.
[ 1639.562105][ T5782] netlink: 60 bytes leftover after parsing attributes in process `syz.1.8949'.
[ 1639.573726][ T5782] netlink: 60 bytes leftover after parsing attributes in process `syz.1.8949'.
[ 1639.613709][ T5786] netlink: 'syz.4.8951': attribute type 13 has an invalid length.
[ 1639.657373][ T5786] netlink: 'syz.4.8951': attribute type 17 has an invalid length.
[ 1639.692256][ T5788] kthread_run failed with err -4
[ 1640.371332][    T9] IPVS: starting estimator thread 0...
[ 1640.399318][ T5821] IPVS: set_ctl: invalid protocol: 12 172.20.20.36:20003
[ 1640.502077][ T5822] IPVS: using max 28 ests per chain, 67200 per kthread
[ 1640.580791][ T5830] netlink: 'syz.1.8967': attribute type 12 has an invalid length.
[ 1640.888965][ T5839] netlink: 36 bytes leftover after parsing attributes in process `syz.6.8974'.
[ 1640.898192][ T5839] netlink: 16 bytes leftover after parsing attributes in process `syz.6.8974'.
[ 1640.941921][ T5839] netlink: 36 bytes leftover after parsing attributes in process `syz.6.8974'.
[ 1640.972419][ T5839] netlink: 36 bytes leftover after parsing attributes in process `syz.6.8974'.
[ 1641.199776][ T5862] netlink: 'syz.6.8981': attribute type 12 has an invalid length.
[ 1641.235903][ T5866] netlink: 60 bytes leftover after parsing attributes in process `syz.4.8983'.
[ 1641.289429][ T5866] netlink: 60 bytes leftover after parsing attributes in process `syz.4.8983'.
[ 1641.963940][ T5912] netlink: 'syz.1.8997': attribute type 12 has an invalid length.
[ 1642.050801][   T12] net_ratelimit: 29 callbacks suppressed
[ 1642.050822][   T12] bond2: (slave ip6gretap2): failed to get link speed/duplex
[ 1642.227799][ T2991] wlan0: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID
[ 1642.293043][ T2991] bond2: (slave ip6gretap2): failed to get link speed/duplex
[ 1642.412359][ T2991] bond2: (slave ip6gretap2): failed to get link speed/duplex
[ 1642.478378][ T5962] netlink: 'syz.4.9003': attribute type 12 has an invalid length.
[ 1642.562110][ T2991] bond2: (slave ip6gretap2): failed to get link speed/duplex
[ 1642.671093][ T2991] bond2: (slave ip6gretap2): failed to get link speed/duplex
[ 1642.791179][T19135] bond2: (slave ip6gretap2): failed to get link speed/duplex
[ 1642.910797][ T2991] bond2: (slave ip6gretap2): failed to get link speed/duplex
[ 1643.021055][ T2991] bond2: (slave ip6gretap2): failed to get link speed/duplex
[ 1643.130843][T19135] bond2: (slave ip6gretap2): failed to get link speed/duplex
[ 1643.242591][ T2991] bond2: (slave ip6gretap2): failed to get link speed/duplex
[ 1643.314906][ T5984] netlink: 'syz.5.9013': attribute type 12 has an invalid length.
[ 1645.215343][T19133] wlan0: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID
[ 1645.359083][ T6059] netlink: 'syz.4.9040': attribute type 1 has an invalid length.
[ 1645.396743][ T6059] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR
[ 1646.595852][ T6096] netlink: 'syz.1.9052': attribute type 12 has an invalid length.
[ 1646.691710][ T6101] __nla_validate_parse: 3 callbacks suppressed
[ 1646.691729][ T6101] netlink: 40 bytes leftover after parsing attributes in process `syz.6.9056'.
[ 1647.141168][   T12] net_ratelimit: 27 callbacks suppressed
[ 1647.141189][   T12] bond2: (slave ip6gretap2): failed to get link speed/duplex
[ 1647.254432][ T2991] wlan0: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID
[ 1647.272684][ T3529] bond2: (slave ip6gretap2): failed to get link speed/duplex
[ 1647.392196][   T49] bond2: (slave ip6gretap2): failed to get link speed/duplex
[ 1647.500942][   T49] bond2: (slave ip6gretap2): failed to get link speed/duplex
[ 1647.641230][T19130] bond2: (slave ip6gretap2): failed to get link speed/duplex
[ 1647.734653][ T6138] netlink: 'syz.5.9071': attribute type 12 has an invalid length.
[ 1647.792608][T19130] bond2: (slave ip6gretap2): failed to get link speed/duplex
[ 1647.940768][T19133] bond2: (slave ip6gretap2): failed to get link speed/duplex
[ 1648.070947][T19133] bond2: (slave ip6gretap2): failed to get link speed/duplex
[ 1648.093553][ T6155] netlink: 'syz.5.9075': attribute type 10 has an invalid length.
[ 1648.124900][ T6155] netlink: 2 bytes leftover after parsing attributes in process `syz.5.9075'.
[ 1648.152795][ T6157] netlink: 60 bytes leftover after parsing attributes in process `syz.4.9078'.
[ 1648.201749][ T6155] team0: entered promiscuous mode
[ 1648.206867][ T6155] team_slave_0: entered promiscuous mode
[ 1648.213012][ T6155] team_slave_1: entered promiscuous mode
[ 1648.219674][ T6155] bridge0: port 3(team0) entered blocking state
[ 1648.241583][ T6155] bridge0: port 3(team0) entered disabled state
[ 1648.248331][ T6155] team0: entered allmulticast mode
[ 1648.269521][ T6155] team_slave_0: entered allmulticast mode
[ 1648.286430][ T6155] team_slave_1: entered allmulticast mode
[ 1648.315061][ T6155] bridge0: port 3(team0) entered blocking state
[ 1648.321634][ T6155] bridge0: port 3(team0) entered forwarding state
[ 1648.357555][ T6157] netlink: 60 bytes leftover after parsing attributes in process `syz.4.9078'.
[ 1648.392874][ T6165] netlink: 60 bytes leftover after parsing attributes in process `syz.4.9078'.
[ 1648.444165][   T12] bond2: (slave ip6gretap2): failed to get link speed/duplex
[ 1648.572287][T19133] bond2: (slave ip6gretap2): failed to get link speed/duplex
[ 1648.582931][ T6174] netlink: 24 bytes leftover after parsing attributes in process `syz.6.9082'.
[ 1648.961330][ T6187] netlink: 72 bytes leftover after parsing attributes in process `syz.4.9088'.
[ 1649.449437][ T6203] netlink: 60 bytes leftover after parsing attributes in process `syz.5.9093'.
[ 1649.481404][ T6203] netlink: 60 bytes leftover after parsing attributes in process `syz.5.9093'.
[ 1649.507397][ T6203] netlink: 60 bytes leftover after parsing attributes in process `syz.5.9093'.
[ 1652.165147][ T2991] wlan0: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID
[ 1652.241202][ T2991] net_ratelimit: 29 callbacks suppressed
[ 1652.241224][ T2991] bond2: (slave ip6gretap2): failed to get link speed/duplex
[ 1652.363469][ T6320] __nla_validate_parse: 8 callbacks suppressed
[ 1652.363488][ T6320] netlink: 64 bytes leftover after parsing attributes in process `syz.6.9140'.
[ 1652.381711][T19130] bond2: (slave ip6gretap2): failed to get link speed/duplex
[ 1652.490957][ T3529] bond2: (slave ip6gretap2): failed to get link speed/duplex
[ 1652.564991][ T6328] netlink: 36 bytes leftover after parsing attributes in process `syz.4.9142'.
[ 1652.585332][ T6328] netlink: 16 bytes leftover after parsing attributes in process `syz.4.9142'.
[ 1652.598421][ T6332] netlink: 'syz.6.9141': attribute type 12 has an invalid length.
[ 1652.609021][ T6328] netlink: 36 bytes leftover after parsing attributes in process `syz.4.9142'.
[ 1652.628800][ T6328] netlink: 36 bytes leftover after parsing attributes in process `syz.4.9142'.
[ 1652.650924][   T49] bond2: (slave ip6gretap2): failed to get link speed/duplex
[ 1652.782252][T19133] bond2: (slave ip6gretap2): failed to get link speed/duplex
[ 1652.851025][ T6339] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9146'.
[ 1652.915921][   T12] bond2: (slave ip6gretap2): failed to get link speed/duplex
[ 1652.916716][ T6344] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9147'.
[ 1652.967524][ T6344] geneve2: entered promiscuous mode
[ 1653.007092][ T6344] geneve2: entered allmulticast mode
[ 1653.050866][   T49] bond2: (slave ip6gretap2): failed to get link speed/duplex
[ 1653.085044][ T6351] netlink: 'syz.3.9149': attribute type 12 has an invalid length.
[ 1653.108231][ T6351] netlink: 132 bytes leftover after parsing attributes in process `syz.3.9149'.
[ 1653.181563][ T2991] bond2: (slave ip6gretap2): failed to get link speed/duplex
[ 1653.189732][ T6349] netlink: 'syz.4.9148': attribute type 12 has an invalid length.
[ 1653.291124][T19130] bond2: (slave ip6gretap2): failed to get link speed/duplex
[ 1653.387207][ T6364] FAULT_INJECTION: forcing a failure.
[ 1653.387207][ T6364] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1653.403757][ T6364] CPU: 0 UID: 0 PID: 6364 Comm: syz.4.9153 Not tainted 6.16.0-syzkaller-12071-gf8262b8dadfa #0 PREEMPT(full) 
[ 1653.403785][ T6364] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[ 1653.403796][ T6364] Call Trace:
[ 1653.403803][ T6364]  <TASK>
[ 1653.403811][ T6364]  dump_stack_lvl+0x189/0x250
[ 1653.403839][ T6364]  ? __pfx____ratelimit+0x10/0x10
[ 1653.403863][ T6364]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1653.403885][ T6364]  ? __pfx__printk+0x10/0x10
[ 1653.403910][ T6364]  ? __might_fault+0xb0/0x130
[ 1653.403945][ T6364]  should_fail_ex+0x414/0x560
[ 1653.403973][ T6364]  _copy_from_user+0x2d/0xb0
[ 1653.403992][ T6364]  ___sys_sendmsg+0x158/0x2a0
[ 1653.404021][ T6364]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1653.404083][ T6364]  ? __fget_files+0x2a/0x420
[ 1653.404108][ T6364]  ? __fget_files+0x3a0/0x420
[ 1653.404144][ T6364]  __x64_sys_sendmsg+0x19b/0x260
[ 1653.404173][ T6364]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 1653.404209][ T6364]  ? __pfx_ksys_write+0x10/0x10
[ 1653.404238][ T6364]  ? do_syscall_64+0xbe/0x3b0
[ 1653.404265][ T6364]  do_syscall_64+0xfa/0x3b0
[ 1653.404286][ T6364]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1653.404308][ T6364]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1653.404327][ T6364]  ? clear_bhb_loop+0x60/0xb0
[ 1653.404350][ T6364]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1653.404369][ T6364] RIP: 0033:0x7fc5d5f8ebe9
[ 1653.404387][ T6364] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1653.404404][ T6364] RSP: 002b:00007fc5d6d7b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1653.404424][ T6364] RAX: ffffffffffffffda RBX: 00007fc5d61b6090 RCX: 00007fc5d5f8ebe9
[ 1653.404438][ T6364] RDX: 0000000020000000 RSI: 00002000000007c0 RDI: 0000000000000003
[ 1653.404451][ T6364] RBP: 00007fc5d6d7b090 R08: 0000000000000000 R09: 0000000000000000
[ 1653.404461][ T6364] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1653.404473][ T6364] R13: 00007fc5d61b6128 R14: 00007fc5d61b6090 R15: 00007ffd45123068
[ 1653.404508][ T6364]  </TASK>
[ 1653.612307][   T12] bond2: (slave ip6gretap2): failed to get link speed/duplex
[ 1654.048334][ T6373] netlink: 60 bytes leftover after parsing attributes in process `syz.6.9158'.
[ 1654.059919][ T6373] netlink: 60 bytes leftover after parsing attributes in process `syz.6.9158'.
[ 1654.272067][   T49] wlan0: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID
[ 1654.289599][ T6390] FAULT_INJECTION: forcing a failure.
[ 1654.289599][ T6390] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1654.352224][ T6390] CPU: 0 UID: 0 PID: 6390 Comm: syz.1.9161 Not tainted 6.16.0-syzkaller-12071-gf8262b8dadfa #0 PREEMPT(full) 
[ 1654.352252][ T6390] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[ 1654.352263][ T6390] Call Trace:
[ 1654.352272][ T6390]  <TASK>
[ 1654.352281][ T6390]  dump_stack_lvl+0x189/0x250
[ 1654.352309][ T6390]  ? __pfx____ratelimit+0x10/0x10
[ 1654.352332][ T6390]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1654.352355][ T6390]  ? __pfx__printk+0x10/0x10
[ 1654.352379][ T6390]  ? __might_fault+0xb0/0x130
[ 1654.352415][ T6390]  should_fail_ex+0x414/0x560
[ 1654.352441][ T6390]  _copy_from_user+0x2d/0xb0
[ 1654.352462][ T6390]  ___sys_sendmsg+0x158/0x2a0
[ 1654.352491][ T6390]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1654.352553][ T6390]  ? __fget_files+0x2a/0x420
[ 1654.352578][ T6390]  ? __fget_files+0x3a0/0x420
[ 1654.352614][ T6390]  __x64_sys_sendmsg+0x19b/0x260
[ 1654.352643][ T6390]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 1654.352680][ T6390]  ? __pfx_ksys_write+0x10/0x10
[ 1654.352701][ T6390]  ? rcu_is_watching+0x15/0xb0
[ 1654.352726][ T6390]  ? do_syscall_64+0xbe/0x3b0
[ 1654.352753][ T6390]  do_syscall_64+0xfa/0x3b0
[ 1654.352774][ T6390]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1654.352796][ T6390]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1654.352816][ T6390]  ? clear_bhb_loop+0x60/0xb0
[ 1654.352838][ T6390]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1654.352857][ T6390] RIP: 0033:0x7fecb538ebe9
[ 1654.352874][ T6390] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1654.352890][ T6390] RSP: 002b:00007fecb6229038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1654.352911][ T6390] RAX: ffffffffffffffda RBX: 00007fecb55b5fa0 RCX: 00007fecb538ebe9
[ 1654.352924][ T6390] RDX: 0000000000048000 RSI: 0000200000014800 RDI: 0000000000000003
[ 1654.352935][ T6390] RBP: 00007fecb6229090 R08: 0000000000000000 R09: 0000000000000000
[ 1654.352947][ T6390] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1654.352957][ T6390] R13: 00007fecb55b6038 R14: 00007fecb55b5fa0 R15: 00007ffdae38c418
[ 1654.352985][ T6390]  </TASK>
[ 1654.697558][ T6401] netlink: 'syz.3.9167': attribute type 12 has an invalid length.
[ 1654.981413][ T6420] netlink: 'syz.6.9175': attribute type 29 has an invalid length.
[ 1654.991343][ T6420] netlink: 'syz.6.9175': attribute type 29 has an invalid length.
[ 1655.626250][ T6439] netlink: 'syz.3.9183': attribute type 25 has an invalid length.
[ 1655.835310][ T6455] syzkaller1: entered promiscuous mode
[ 1655.841264][ T6455] syzkaller1: entered allmulticast mode
[ 1655.856260][ T6453] netlink: 'syz.3.9188': attribute type 4 has an invalid length.
[ 1655.925048][ T6459] netlink: 'syz.3.9188': attribute type 4 has an invalid length.
[ 1656.450060][ T6486] FAULT_INJECTION: forcing a failure.
[ 1656.450060][ T6486] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1656.474053][ T6486] CPU: 0 UID: 0 PID: 6486 Comm: syz.4.9199 Not tainted 6.16.0-syzkaller-12071-gf8262b8dadfa #0 PREEMPT(full) 
[ 1656.474081][ T6486] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[ 1656.474092][ T6486] Call Trace:
[ 1656.474100][ T6486]  <TASK>
[ 1656.474108][ T6486]  dump_stack_lvl+0x189/0x250
[ 1656.474143][ T6486]  ? __pfx____ratelimit+0x10/0x10
[ 1656.474166][ T6486]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1656.474187][ T6486]  ? __pfx__printk+0x10/0x10
[ 1656.474211][ T6486]  ? __might_fault+0xb0/0x130
[ 1656.474244][ T6486]  should_fail_ex+0x414/0x560
[ 1656.474271][ T6486]  _copy_from_user+0x2d/0xb0
[ 1656.474290][ T6486]  ___sys_sendmsg+0x158/0x2a0
[ 1656.474320][ T6486]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1656.474380][ T6486]  ? __fget_files+0x2a/0x420
[ 1656.474405][ T6486]  ? __fget_files+0x3a0/0x420
[ 1656.474446][ T6486]  __x64_sys_sendmsg+0x19b/0x260
[ 1656.474475][ T6486]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 1656.474510][ T6486]  ? __pfx_ksys_write+0x10/0x10
[ 1656.474532][ T6486]  ? rcu_is_watching+0x15/0xb0
[ 1656.474557][ T6486]  ? do_syscall_64+0xbe/0x3b0
[ 1656.474583][ T6486]  do_syscall_64+0xfa/0x3b0
[ 1656.474604][ T6486]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1656.474626][ T6486]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1656.474648][ T6486]  ? clear_bhb_loop+0x60/0xb0
[ 1656.474668][ T6486]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1656.474686][ T6486] RIP: 0033:0x7fc5d5f8ebe9
[ 1656.474703][ T6486] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1656.474718][ T6486] RSP: 002b:00007fc5d6d7b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1656.474738][ T6486] RAX: ffffffffffffffda RBX: 00007fc5d61b6090 RCX: 00007fc5d5f8ebe9
[ 1656.474749][ T6486] RDX: 0000000000000010 RSI: 0000200000000680 RDI: 0000000000000007
[ 1656.474758][ T6486] RBP: 00007fc5d6d7b090 R08: 0000000000000000 R09: 0000000000000000
[ 1656.474769][ T6486] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1656.474779][ T6486] R13: 00007fc5d61b6128 R14: 00007fc5d61b6090 R15: 00007ffd45123068
[ 1656.474807][ T6486]  </TASK>
[ 1657.109829][ T6501] tipc: Started in network mode
[ 1657.119554][ T6501] tipc: Node identity 080211, cluster identity 4711
[ 1657.126540][ T6501] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1657.149278][ T6502] pimreg: entered allmulticast mode
[ 1657.330800][ T3529] net_ratelimit: 28 callbacks suppressed
[ 1657.330820][ T3529] bond2: (slave ip6gretap2): failed to get link speed/duplex
[ 1657.470870][T19130] bond2: (slave ip6gretap2): failed to get link speed/duplex
[ 1657.497949][ T6515] netlink: 'syz.1.9212': attribute type 25 has an invalid length.
[ 1657.592423][T19130] bond2: (slave ip6gretap2): failed to get link speed/duplex
[ 1657.701255][T19130] bond2: (slave ip6gretap2): failed to get link speed/duplex
[ 1657.758128][ T6528] __nla_validate_parse: 15 callbacks suppressed
[ 1657.758147][ T6528] netlink: 16 bytes leftover after parsing attributes in process `syz.5.9217'.
[ 1657.821406][T19135] bond2: (slave ip6gretap2): failed to get link speed/duplex
[ 1657.941125][T19130] bond2: (slave ip6gretap2): failed to get link speed/duplex
[ 1658.072192][   T12] bond2: (slave ip6gretap2): failed to get link speed/duplex
[ 1658.122489][    T9] tipc: Node number set to 134353152
[ 1658.181273][T19135] bond2: (slave ip6gretap2): failed to get link speed/duplex
[ 1658.320986][T19133] bond2: (slave ip6gretap2): failed to get link speed/duplex
[ 1658.430860][T19135] bond2: (slave ip6gretap2): failed to get link speed/duplex
[ 1658.627583][ T6568] netlink: 16 bytes leftover after parsing attributes in process `syz.5.9230'.
[ 1658.746671][ T6563] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1658.821865][ T6571] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9231'.
[ 1658.893887][ T6571] sch_fq: defrate 53322 ignored.
[ 1659.032531][ T6581] netlink: 'syz.5.9234': attribute type 12 has an invalid length.
[ 1659.127291][ T6583] FAULT_INJECTION: forcing a failure.
[ 1659.127291][ T6583] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1659.152948][ T6583] CPU: 0 UID: 0 PID: 6583 Comm: syz.1.9235 Not tainted 6.16.0-syzkaller-12071-gf8262b8dadfa #0 PREEMPT(full) 
[ 1659.152976][ T6583] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[ 1659.152988][ T6583] Call Trace:
[ 1659.152996][ T6583]  <TASK>
[ 1659.153005][ T6583]  dump_stack_lvl+0x189/0x250
[ 1659.153033][ T6583]  ? __pfx____ratelimit+0x10/0x10
[ 1659.153057][ T6583]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1659.153078][ T6583]  ? __pfx__printk+0x10/0x10
[ 1659.153103][ T6583]  ? __might_fault+0xb0/0x130
[ 1659.153138][ T6583]  should_fail_ex+0x414/0x560
[ 1659.153165][ T6583]  _copy_from_user+0x2d/0xb0
[ 1659.153184][ T6583]  ___sys_sendmsg+0x158/0x2a0
[ 1659.153213][ T6583]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1659.153274][ T6583]  ? __fget_files+0x2a/0x420
[ 1659.153299][ T6583]  ? __fget_files+0x3a0/0x420
[ 1659.153335][ T6583]  __x64_sys_sendmsg+0x19b/0x260
[ 1659.153363][ T6583]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 1659.153399][ T6583]  ? __pfx_ksys_write+0x10/0x10
[ 1659.153420][ T6583]  ? rcu_is_watching+0x15/0xb0
[ 1659.153445][ T6583]  ? do_syscall_64+0xbe/0x3b0
[ 1659.153471][ T6583]  do_syscall_64+0xfa/0x3b0
[ 1659.153493][ T6583]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1659.153515][ T6583]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1659.153535][ T6583]  ? clear_bhb_loop+0x60/0xb0
[ 1659.153557][ T6583]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1659.153576][ T6583] RIP: 0033:0x7fecb538ebe9
[ 1659.153593][ T6583] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1659.153608][ T6583] RSP: 002b:00007fecb6229038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1659.153628][ T6583] RAX: ffffffffffffffda RBX: 00007fecb55b5fa0 RCX: 00007fecb538ebe9
[ 1659.153641][ T6583] RDX: 0000000000004010 RSI: 0000200000000180 RDI: 0000000000000003
[ 1659.153654][ T6583] RBP: 00007fecb6229090 R08: 0000000000000000 R09: 0000000000000000
[ 1659.153668][ T6583] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1659.153679][ T6583] R13: 00007fecb55b6038 R14: 00007fecb55b5fa0 R15: 00007ffdae38c418
[ 1659.153710][ T6583]  </TASK>
[ 1659.716877][ T6602] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9243'.
[ 1660.478326][ T6627] FAULT_INJECTION: forcing a failure.
[ 1660.478326][ T6627] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1660.506369][ T6627] CPU: 1 UID: 0 PID: 6627 Comm: syz.5.9255 Not tainted 6.16.0-syzkaller-12071-gf8262b8dadfa #0 PREEMPT(full) 
[ 1660.506397][ T6627] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[ 1660.506408][ T6627] Call Trace:
[ 1660.506415][ T6627]  <TASK>
[ 1660.506423][ T6627]  dump_stack_lvl+0x189/0x250
[ 1660.506450][ T6627]  ? __pfx____ratelimit+0x10/0x10
[ 1660.506472][ T6627]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1660.506495][ T6627]  ? __pfx__printk+0x10/0x10
[ 1660.506519][ T6627]  ? __might_fault+0xb0/0x130
[ 1660.506555][ T6627]  should_fail_ex+0x414/0x560
[ 1660.506582][ T6627]  _copy_from_user+0x2d/0xb0
[ 1660.506602][ T6627]  __sys_sendto+0x25c/0x520
[ 1660.506629][ T6627]  ? __pfx___sys_sendto+0x10/0x10
[ 1660.506650][ T6627]  ? __mutex_unlock_slowpath+0x1a1/0x760
[ 1660.506688][ T6627]  ? __fget_files+0x3a0/0x420
[ 1660.506723][ T6627]  ? ksys_write+0x22a/0x250
[ 1660.506748][ T6627]  ? __pfx_ksys_write+0x10/0x10
[ 1660.506769][ T6627]  ? rcu_is_watching+0x15/0xb0
[ 1660.506794][ T6627]  __x64_sys_sendto+0xde/0x100
[ 1660.506821][ T6627]  do_syscall_64+0xfa/0x3b0
[ 1660.506853][ T6627]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1660.506874][ T6627]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1660.506894][ T6627]  ? clear_bhb_loop+0x60/0xb0
[ 1660.506917][ T6627]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1660.506936][ T6627] RIP: 0033:0x7f123858ebe9
[ 1660.506953][ T6627] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1660.506971][ T6627] RSP: 002b:00007f123940e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[ 1660.506991][ T6627] RAX: ffffffffffffffda RBX: 00007f12387b5fa0 RCX: 00007f123858ebe9
[ 1660.507005][ T6627] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000006
[ 1660.507017][ T6627] RBP: 00007f123940e090 R08: 00002000000001c0 R09: 000000000000001c
[ 1660.507029][ T6627] R10: 0000000020000045 R11: 0000000000000246 R12: 0000000000000001
[ 1660.507041][ T6627] R13: 00007f12387b6038 R14: 00007f12387b5fa0 R15: 00007ffeb5276018
[ 1660.507072][ T6627]  </TASK>
[ 1660.884572][ T6634] FAULT_INJECTION: forcing a failure.
[ 1660.884572][ T6634] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1660.906744][ T6637] tipc: Started in network mode
[ 1660.912367][ T6637] tipc: Node identity 7e2b0b499831, cluster identity 4711
[ 1660.919682][ T6637] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1660.920742][ T6634] CPU: 0 UID: 0 PID: 6634 Comm: syz.3.9258 Not tainted 6.16.0-syzkaller-12071-gf8262b8dadfa #0 PREEMPT(full) 
[ 1660.920767][ T6634] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[ 1660.920777][ T6634] Call Trace:
[ 1660.920785][ T6634]  <TASK>
[ 1660.920793][ T6634]  dump_stack_lvl+0x189/0x250
[ 1660.920820][ T6634]  ? __pfx____ratelimit+0x10/0x10
[ 1660.920843][ T6634]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1660.920865][ T6634]  ? __pfx__printk+0x10/0x10
[ 1660.920890][ T6634]  ? __might_fault+0xb0/0x130
[ 1660.920925][ T6634]  should_fail_ex+0x414/0x560
[ 1660.920951][ T6634]  _copy_from_user+0x2d/0xb0
[ 1660.920970][ T6634]  ___sys_sendmsg+0x158/0x2a0
[ 1660.920998][ T6634]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1660.921066][ T6634]  ? __fget_files+0x2a/0x420
[ 1660.921090][ T6634]  ? __fget_files+0x3a0/0x420
[ 1660.921126][ T6634]  __x64_sys_sendmsg+0x19b/0x260
[ 1660.921153][ T6634]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 1660.921189][ T6634]  ? __pfx_ksys_write+0x10/0x10
[ 1660.921209][ T6634]  ? rcu_is_watching+0x15/0xb0
[ 1660.921234][ T6634]  ? do_syscall_64+0xbe/0x3b0
[ 1660.921260][ T6634]  do_syscall_64+0xfa/0x3b0
[ 1660.921281][ T6634]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1660.921302][ T6634]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1660.921321][ T6634]  ? clear_bhb_loop+0x60/0xb0
[ 1660.921343][ T6634]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1660.921360][ T6634] RIP: 0033:0x7fc63f58ebe9
[ 1660.921378][ T6634] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1660.921394][ T6634] RSP: 002b:00007fc64042e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1660.921413][ T6634] RAX: ffffffffffffffda RBX: 00007fc63f7b6090 RCX: 00007fc63f58ebe9
[ 1660.921427][ T6634] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000008
[ 1660.921438][ T6634] RBP: 00007fc64042e090 R08: 0000000000000000 R09: 0000000000000000
[ 1660.921449][ T6634] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1660.921460][ T6634] R13: 00007fc63f7b6128 R14: 00007fc63f7b6090 R15: 00007ffce3f5cfd8
[ 1660.921489][ T6634]  </TASK>
[ 1661.157613][ T6636] tipc: Disabling bearer <eth:syzkaller0>
[ 1661.580565][ T6665] FAULT_INJECTION: forcing a failure.
[ 1661.580565][ T6665] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1661.619295][ T6665] CPU: 0 UID: 0 PID: 6665 Comm: syz.4.9270 Not tainted 6.16.0-syzkaller-12071-gf8262b8dadfa #0 PREEMPT(full) 
[ 1661.619323][ T6665] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[ 1661.619334][ T6665] Call Trace:
[ 1661.619343][ T6665]  <TASK>
[ 1661.619351][ T6665]  dump_stack_lvl+0x189/0x250
[ 1661.619378][ T6665]  ? __pfx____ratelimit+0x10/0x10
[ 1661.619400][ T6665]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1661.619422][ T6665]  ? __pfx__printk+0x10/0x10
[ 1661.619447][ T6665]  ? __might_fault+0xb0/0x130
[ 1661.619482][ T6665]  should_fail_ex+0x414/0x560
[ 1661.619510][ T6665]  _copy_from_user+0x2d/0xb0
[ 1661.619529][ T6665]  ___sys_sendmsg+0x158/0x2a0
[ 1661.619558][ T6665]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1661.619616][ T6665]  ? __fget_files+0x2a/0x420
[ 1661.619640][ T6665]  ? __fget_files+0x3a0/0x420
[ 1661.619677][ T6665]  __x64_sys_sendmsg+0x19b/0x260
[ 1661.619705][ T6665]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 1661.619740][ T6665]  ? __pfx_ksys_write+0x10/0x10
[ 1661.619761][ T6665]  ? rcu_is_watching+0x15/0xb0
[ 1661.619786][ T6665]  ? do_syscall_64+0xbe/0x3b0
[ 1661.619811][ T6665]  do_syscall_64+0xfa/0x3b0
[ 1661.619832][ T6665]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1661.619852][ T6665]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1661.619870][ T6665]  ? clear_bhb_loop+0x60/0xb0
[ 1661.619892][ T6665]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1661.619910][ T6665] RIP: 0033:0x7fc5d5f8ebe9
[ 1661.619926][ T6665] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1661.619943][ T6665] RSP: 002b:00007fc5d6d9c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1661.619963][ T6665] RAX: ffffffffffffffda RBX: 00007fc5d61b5fa0 RCX: 00007fc5d5f8ebe9
[ 1661.619976][ T6665] RDX: 0000000000000004 RSI: 00002000000000c0 RDI: 0000000000000003
[ 1661.619988][ T6665] RBP: 00007fc5d6d9c090 R08: 0000000000000000 R09: 0000000000000000
[ 1661.620007][ T6665] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1661.620018][ T6665] R13: 00007fc5d61b6038 R14: 00007fc5d61b5fa0 R15: 00007ffd45123068
[ 1661.620047][ T6665]  </TASK>
[ 1661.909667][ T6669] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9273'.
[ 1662.071336][ T6677] FAULT_INJECTION: forcing a failure.
[ 1662.071336][ T6677] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1662.120829][ T6677] CPU: 0 UID: 0 PID: 6677 Comm: syz.3.9276 Not tainted 6.16.0-syzkaller-12071-gf8262b8dadfa #0 PREEMPT(full) 
[ 1662.120856][ T6677] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[ 1662.120867][ T6677] Call Trace:
[ 1662.120875][ T6677]  <TASK>
[ 1662.120884][ T6677]  dump_stack_lvl+0x189/0x250
[ 1662.120912][ T6677]  ? __pfx____ratelimit+0x10/0x10
[ 1662.120935][ T6677]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1662.120957][ T6677]  ? __pfx__printk+0x10/0x10
[ 1662.120982][ T6677]  ? __might_fault+0xb0/0x130
[ 1662.121026][ T6677]  should_fail_ex+0x414/0x560
[ 1662.121053][ T6677]  _copy_from_user+0x2d/0xb0
[ 1662.121071][ T6677]  __sys_bpf+0x1ed/0x870
[ 1662.121095][ T6677]  ? __pfx___sys_bpf+0x10/0x10
[ 1662.121128][ T6677]  ? ksys_write+0x22a/0x250
[ 1662.121150][ T6677]  ? __pfx_ksys_write+0x10/0x10
[ 1662.121168][ T6677]  ? rcu_is_watching+0x15/0xb0
[ 1662.121194][ T6677]  __x64_sys_bpf+0x7c/0x90
[ 1662.121216][ T6677]  do_syscall_64+0xfa/0x3b0
[ 1662.121237][ T6677]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1662.121256][ T6677]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1662.121274][ T6677]  ? clear_bhb_loop+0x60/0xb0
[ 1662.121296][ T6677]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1662.121313][ T6677] RIP: 0033:0x7fc63f58ebe9
[ 1662.121331][ T6677] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1662.121347][ T6677] RSP: 002b:00007fc64044f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 1662.121367][ T6677] RAX: ffffffffffffffda RBX: 00007fc63f7b5fa0 RCX: 00007fc63f58ebe9
[ 1662.121382][ T6677] RDX: 0000000000000020 RSI: 0000200000000280 RDI: 0000000000000012
[ 1662.121394][ T6677] RBP: 00007fc64044f090 R08: 0000000000000000 R09: 0000000000000000
[ 1662.121407][ T6677] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1662.121418][ T6677] R13: 00007fc63f7b6038 R14: 00007fc63f7b5fa0 R15: 00007ffce3f5cfd8
[ 1662.121448][ T6677]  </TASK>
[ 1662.446033][T19135] net_ratelimit: 28 callbacks suppressed
[ 1662.446054][T19135] bond2: (slave ip6gretap2): failed to get link speed/duplex
[ 1662.567331][ T6687] FAULT_INJECTION: forcing a failure.
[ 1662.567331][ T6687] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1662.580905][   T12] bond2: (slave ip6gretap2): failed to get link speed/duplex
[ 1662.588379][ T6687] CPU: 0 UID: 0 PID: 6687 Comm: syz.3.9279 Not tainted 6.16.0-syzkaller-12071-gf8262b8dadfa #0 PREEMPT(full) 
[ 1662.588405][ T6687] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[ 1662.588416][ T6687] Call Trace:
[ 1662.588424][ T6687]  <TASK>
[ 1662.588432][ T6687]  dump_stack_lvl+0x189/0x250
[ 1662.588460][ T6687]  ? __pfx____ratelimit+0x10/0x10
[ 1662.588483][ T6687]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1662.588504][ T6687]  ? __pfx__printk+0x10/0x10
[ 1662.588530][ T6687]  ? __might_fault+0xb0/0x130
[ 1662.588565][ T6687]  should_fail_ex+0x414/0x560
[ 1662.588590][ T6687]  _copy_from_user+0x2d/0xb0
[ 1662.588609][ T6687]  ___sys_sendmsg+0x158/0x2a0
[ 1662.588638][ T6687]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1662.588699][ T6687]  ? __fget_files+0x2a/0x420
[ 1662.588722][ T6687]  ? __fget_files+0x3a0/0x420
[ 1662.588755][ T6687]  __x64_sys_sendmsg+0x19b/0x260
[ 1662.588784][ T6687]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 1662.588818][ T6687]  ? __pfx_ksys_write+0x10/0x10
[ 1662.588840][ T6687]  ? rcu_is_watching+0x15/0xb0
[ 1662.588863][ T6687]  ? do_syscall_64+0xbe/0x3b0
[ 1662.588889][ T6687]  do_syscall_64+0xfa/0x3b0
[ 1662.588917][ T6687]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1662.588938][ T6687]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1662.588957][ T6687]  ? clear_bhb_loop+0x60/0xb0
[ 1662.588980][ T6687]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1662.588999][ T6687] RIP: 0033:0x7fc63f58ebe9
[ 1662.589016][ T6687] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1662.589031][ T6687] RSP: 002b:00007fc64044f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1662.589049][ T6687] RAX: ffffffffffffffda RBX: 00007fc63f7b5fa0 RCX: 00007fc63f58ebe9
[ 1662.589062][ T6687] RDX: 0000000000000000 RSI: 0000200000001480 RDI: 0000000000000005
[ 1662.589074][ T6687] RBP: 00007fc64044f090 R08: 0000000000000000 R09: 0000000000000000
[ 1662.589086][ T6687] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1662.589097][ T6687] R13: 00007fc63f7b6038 R14: 00007fc63f7b5fa0 R15: 00007ffce3f5cfd8
[ 1662.589128][ T6687]  </TASK>
[ 1662.803520][   T12] bond2: (slave ip6gretap2): failed to get link speed/duplex
[ 1662.827966][ T6684] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[ 1662.835258][ T6684] IPv6: NLM_F_CREATE should be set when creating new route
[ 1662.847423][ T6684] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[ 1662.921210][   T49] bond2: (slave ip6gretap2): failed to get link speed/duplex
[ 1663.030870][   T49] bond2: (slave ip6gretap2): failed to get link speed/duplex
[ 1663.162154][ T3529] bond2: (slave ip6gretap2): failed to get link speed/duplex
[ 1663.290790][ T3529] bond2: (slave ip6gretap2): failed to get link speed/duplex
[ 1663.329858][ T6709] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1663.345097][ T6710] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1663.363663][ T6709] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1663.392195][ T6710] netlink: 'syz.1.9286': attribute type 1 has an invalid length.
[ 1663.405732][ T6711] netlink: 'syz.1.9286': attribute type 1 has an invalid length.
[ 1663.524804][ T6710] 8021q: adding VLAN 0 to HW filter on device bond2
[ 1663.579204][ T6709] bond2: (slave veth3): Enslaving as an active interface with a down link
[ 1664.006786][ T6741] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[ 1664.089785][ T6746] ip6gre1: entered allmulticast mode
[ 1664.260051][ T6753] netlink: 'syz.1.9302': attribute type 29 has an invalid length.
[ 1664.286688][ T6753] netlink: 'syz.1.9302': attribute type 29 has an invalid length.
[ 1664.346427][ T6759] FAULT_INJECTION: forcing a failure.
[ 1664.346427][ T6759] name failslab, interval 1, probability 0, space 0, times 0
[ 1664.372400][ T6759] CPU: 1 UID: 0 PID: 6759 Comm: syz.6.9303 Not tainted 6.16.0-syzkaller-12071-gf8262b8dadfa #0 PREEMPT(full) 
[ 1664.372428][ T6759] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[ 1664.372439][ T6759] Call Trace:
[ 1664.372447][ T6759]  <TASK>
[ 1664.372456][ T6759]  dump_stack_lvl+0x189/0x250
[ 1664.372485][ T6759]  ? __pfx____ratelimit+0x10/0x10
[ 1664.372508][ T6759]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1664.372530][ T6759]  ? __pfx__printk+0x10/0x10
[ 1664.372557][ T6759]  ? __pfx___might_resched+0x10/0x10
[ 1664.372575][ T6759]  ? fs_reclaim_acquire+0x7d/0x100
[ 1664.372607][ T6759]  should_fail_ex+0x414/0x560
[ 1664.372634][ T6759]  should_failslab+0xa8/0x100
[ 1664.372661][ T6759]  kmem_cache_alloc_node_noprof+0x76/0x3c0
[ 1664.372687][ T6759]  ? __alloc_skb+0x112/0x2d0
[ 1664.372715][ T6759]  __alloc_skb+0x112/0x2d0
[ 1664.372742][ T6759]  alloc_skb_with_frags+0xca/0x890
[ 1664.372771][ T6759]  ? __lock_acquire+0xab9/0xd20
[ 1664.372805][ T6759]  sock_alloc_send_pskb+0x857/0x990
[ 1664.372850][ T6759]  ? __pfx_sock_alloc_send_pskb+0x10/0x10
[ 1664.372887][ T6759]  tun_get_user+0xa43/0x3e20
[ 1664.372933][ T6759]  ? aa_file_perm+0x44d/0x1550
[ 1664.372960][ T6759]  ? __pfx_tun_get_user+0x10/0x10
[ 1664.372984][ T6759]  ? _parse_integer_limit+0x1ae/0x1f0
[ 1664.373016][ T6759]  ? __lock_acquire+0xab9/0xd20
[ 1664.373047][ T6759]  ? ref_tracker_alloc+0x318/0x460
[ 1664.373068][ T6759]  ? __lock_acquire+0xab9/0xd20
[ 1664.373094][ T6759]  ? __pfx_ref_tracker_alloc+0x10/0x10
[ 1664.373122][ T6759]  ? tun_get+0x1c/0x2f0
[ 1664.373152][ T6759]  ? tun_get+0x1c/0x2f0
[ 1664.373175][ T6759]  ? tun_get+0x1c/0x2f0
[ 1664.373203][ T6759]  tun_chr_write_iter+0x113/0x200
[ 1664.373231][ T6759]  vfs_write+0x548/0xa90
[ 1664.373259][ T6759]  ? __pfx_tun_chr_write_iter+0x10/0x10
[ 1664.373286][ T6759]  ? __pfx_vfs_write+0x10/0x10
[ 1664.373320][ T6759]  ? __fget_files+0x2a/0x420
[ 1664.373355][ T6759]  ksys_write+0x145/0x250
[ 1664.373381][ T6759]  ? __pfx_ksys_write+0x10/0x10
[ 1664.373405][ T6759]  ? rcu_is_watching+0x15/0xb0
[ 1664.373430][ T6759]  ? do_syscall_64+0xbe/0x3b0
[ 1664.373457][ T6759]  do_syscall_64+0xfa/0x3b0
[ 1664.373479][ T6759]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1664.373500][ T6759]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1664.373520][ T6759]  ? clear_bhb_loop+0x60/0xb0
[ 1664.373543][ T6759]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1664.373561][ T6759] RIP: 0033:0x7f62df18d69f
[ 1664.373578][ T6759] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48
[ 1664.373596][ T6759] RSP: 002b:00007f62e00e1000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001
[ 1664.373615][ T6759] RAX: ffffffffffffffda RBX: 00007f62df3b5fa0 RCX: 00007f62df18d69f
[ 1664.373629][ T6759] RDX: 000000000000fdef RSI: 0000200000000a40 RDI: 00000000000000c8
[ 1664.373642][ T6759] RBP: 00007f62e00e1090 R08: 0000000000000000 R09: 0000000000000000
[ 1664.373654][ T6759] R10: 000000000000fdef R11: 0000000000000293 R12: 0000000000000001
[ 1664.373666][ T6759] R13: 00007f62df3b6038 R14: 00007f62df3b5fa0 R15: 00007ffea4d94758
[ 1664.373696][ T6759]  </TASK>
[ 1665.001198][ T5882] Bluetooth: hci6: command 0x041b tx timeout
[ 1665.053564][ T6781] FAULT_INJECTION: forcing a failure.
[ 1665.053564][ T6781] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1665.080034][ T6781] CPU: 0 UID: 0 PID: 6781 Comm: syz.5.9309 Not tainted 6.16.0-syzkaller-12071-gf8262b8dadfa #0 PREEMPT(full) 
[ 1665.080058][ T6781] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[ 1665.080067][ T6781] Call Trace:
[ 1665.080076][ T6781]  <TASK>
[ 1665.080084][ T6781]  dump_stack_lvl+0x189/0x250
[ 1665.080110][ T6781]  ? __pfx____ratelimit+0x10/0x10
[ 1665.080132][ T6781]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1665.080152][ T6781]  ? __pfx__printk+0x10/0x10
[ 1665.080175][ T6781]  ? __might_fault+0xb0/0x130
[ 1665.080210][ T6781]  should_fail_ex+0x414/0x560
[ 1665.080236][ T6781]  _copy_from_user+0x2d/0xb0
[ 1665.080256][ T6781]  ___sys_sendmsg+0x158/0x2a0
[ 1665.080284][ T6781]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1665.080345][ T6781]  ? __fget_files+0x2a/0x420
[ 1665.080370][ T6781]  ? __fget_files+0x3a0/0x420
[ 1665.080405][ T6781]  __x64_sys_sendmsg+0x19b/0x260
[ 1665.080434][ T6781]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 1665.080469][ T6781]  ? __pfx_ksys_write+0x10/0x10
[ 1665.080490][ T6781]  ? rcu_is_watching+0x15/0xb0
[ 1665.080514][ T6781]  ? do_syscall_64+0xbe/0x3b0
[ 1665.080541][ T6781]  do_syscall_64+0xfa/0x3b0
[ 1665.080569][ T6781]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1665.080591][ T6781]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1665.080610][ T6781]  ? clear_bhb_loop+0x60/0xb0
[ 1665.080635][ T6781]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1665.080652][ T6781] RIP: 0033:0x7f123858ebe9
[ 1665.080668][ T6781] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1665.080683][ T6781] RSP: 002b:00007f123940e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1665.080702][ T6781] RAX: ffffffffffffffda RBX: 00007f12387b5fa0 RCX: 00007f123858ebe9
[ 1665.080715][ T6781] RDX: 0000000020000000 RSI: 0000200000000c80 RDI: 0000000000000004
[ 1665.080726][ T6781] RBP: 00007f123940e090 R08: 0000000000000000 R09: 0000000000000000
[ 1665.080737][ T6781] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1665.080748][ T6781] R13: 00007f12387b6038 R14: 00007f12387b5fa0 R15: 00007ffeb5276018
[ 1665.080774][ T6781]  </TASK>
[ 1665.153123][ T6785] netlink: 64 bytes leftover after parsing attributes in process `syz.3.9310'.
[ 1665.404410][ T6789] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9312'.
[ 1665.533872][ T6792] netlink: 256 bytes leftover after parsing attributes in process `syz.3.9313'.
[ 1666.257906][ T6822] netlink: 'syz.3.9323': attribute type 29 has an invalid length.
[ 1666.267198][ T6822] netlink: 'syz.3.9323': attribute type 29 has an invalid length.
[ 1666.418908][ T6824] netlink: 248 bytes leftover after parsing attributes in process `syz.3.9324'.
[ 1667.281020][ T6828] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[ 1667.543899][ T3529] net_ratelimit: 30 callbacks suppressed
[ 1667.543919][ T3529] bond2: (slave ip6gretap2): failed to get link speed/duplex
[ 1667.595048][ T6855] FAULT_INJECTION: forcing a failure.
[ 1667.595048][ T6855] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1667.638878][ T6855] CPU: 0 UID: 0 PID: 6855 Comm: syz.3.9334 Not tainted 6.16.0-syzkaller-12071-gf8262b8dadfa #0 PREEMPT(full) 
[ 1667.638906][ T6855] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[ 1667.638917][ T6855] Call Trace:
[ 1667.638925][ T6855]  <TASK>
[ 1667.638933][ T6855]  dump_stack_lvl+0x189/0x250
[ 1667.638962][ T6855]  ? __pfx____ratelimit+0x10/0x10
[ 1667.638985][ T6855]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1667.639008][ T6855]  ? __pfx__printk+0x10/0x10
[ 1667.639032][ T6855]  ? __might_fault+0xb0/0x130
[ 1667.639067][ T6855]  should_fail_ex+0x414/0x560
[ 1667.639094][ T6855]  _copy_from_user+0x2d/0xb0
[ 1667.639114][ T6855]  ___sys_sendmsg+0x158/0x2a0
[ 1667.639143][ T6855]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1667.639205][ T6855]  ? __fget_files+0x2a/0x420
[ 1667.639229][ T6855]  ? __fget_files+0x3a0/0x420
[ 1667.639265][ T6855]  __x64_sys_sendmsg+0x19b/0x260
[ 1667.639293][ T6855]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 1667.639329][ T6855]  ? __pfx_ksys_write+0x10/0x10
[ 1667.639350][ T6855]  ? rcu_is_watching+0x15/0xb0
[ 1667.639375][ T6855]  ? do_syscall_64+0xbe/0x3b0
[ 1667.639402][ T6855]  do_syscall_64+0xfa/0x3b0
[ 1667.639423][ T6855]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1667.639444][ T6855]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1667.639464][ T6855]  ? clear_bhb_loop+0x60/0xb0
[ 1667.639487][ T6855]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1667.639507][ T6855] RIP: 0033:0x7fc63f58ebe9
[ 1667.639524][ T6855] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1667.639540][ T6855] RSP: 002b:00007fc64044f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1667.639560][ T6855] RAX: ffffffffffffffda RBX: 00007fc63f7b5fa0 RCX: 00007fc63f58ebe9
[ 1667.639574][ T6855] RDX: 000000002008c014 RSI: 0000200000000580 RDI: 0000000000000004
[ 1667.639587][ T6855] RBP: 00007fc64044f090 R08: 0000000000000000 R09: 0000000000000000
[ 1667.639605][ T6855] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1667.639617][ T6855] R13: 00007fc63f7b6038 R14: 00007fc63f7b5fa0 R15: 00007ffce3f5cfd8
[ 1667.639648][ T6855]  </TASK>
[ 1667.934353][ T6860] netlink: 36 bytes leftover after parsing attributes in process `syz.1.9335'.
[ 1667.943371][ T6860] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9335'.
[ 1667.952555][ T6860] netlink: 36 bytes leftover after parsing attributes in process `syz.1.9335'.
[ 1667.962252][ T6860] netlink: 36 bytes leftover after parsing attributes in process `syz.1.9335'.
[ 1668.048452][ T6864] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9337'.
[ 1668.082789][   T49] bond2: (slave ip6gretap2): failed to get link speed/duplex
[ 1668.147762][ T6867] FAULT_INJECTION: forcing a failure.
[ 1668.147762][ T6867] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1668.173962][ T6867] CPU: 1 UID: 0 PID: 6867 Comm: syz.1.9338 Not tainted 6.16.0-syzkaller-12071-gf8262b8dadfa #0 PREEMPT(full) 
[ 1668.173990][ T6867] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[ 1668.174001][ T6867] Call Trace:
[ 1668.174009][ T6867]  <TASK>
[ 1668.174017][ T6867]  dump_stack_lvl+0x189/0x250
[ 1668.174044][ T6867]  ? __pfx____ratelimit+0x10/0x10
[ 1668.174067][ T6867]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1668.174088][ T6867]  ? __pfx__printk+0x10/0x10
[ 1668.174112][ T6867]  ? __might_fault+0xb0/0x130
[ 1668.174148][ T6867]  should_fail_ex+0x414/0x560
[ 1668.174174][ T6867]  _copy_from_user+0x2d/0xb0
[ 1668.174193][ T6867]  ___sys_sendmsg+0x158/0x2a0
[ 1668.174222][ T6867]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1668.174287][ T6867]  ? __fget_files+0x2a/0x420
[ 1668.174319][ T6867]  ? __fget_files+0x3a0/0x420
[ 1668.174355][ T6867]  __x64_sys_sendmsg+0x19b/0x260
[ 1668.174383][ T6867]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 1668.174418][ T6867]  ? __pfx_ksys_write+0x10/0x10
[ 1668.174443][ T6867]  ? rcu_is_watching+0x15/0xb0
[ 1668.174468][ T6867]  ? do_syscall_64+0xbe/0x3b0
[ 1668.174495][ T6867]  do_syscall_64+0xfa/0x3b0
[ 1668.174516][ T6867]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1668.174537][ T6867]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1668.174556][ T6867]  ? clear_bhb_loop+0x60/0xb0
[ 1668.174578][ T6867]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1668.174597][ T6867] RIP: 0033:0x7fecb538ebe9
[ 1668.174615][ T6867] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1668.174632][ T6867] RSP: 002b:00007fecb6229038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1668.174652][ T6867] RAX: ffffffffffffffda RBX: 00007fecb55b5fa0 RCX: 00007fecb538ebe9
[ 1668.174666][ T6867] RDX: 0000000000000000 RSI: 0000200000000540 RDI: 0000000000000004
[ 1668.174677][ T6867] RBP: 00007fecb6229090 R08: 0000000000000000 R09: 0000000000000000
[ 1668.174688][ T6867] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1668.174699][ T6867] R13: 00007fecb55b6038 R14: 00007fecb55b5fa0 R15: 00007ffdae38c418
[ 1668.174728][ T6867]  </TASK>
[ 1668.556508][T19135] bond2: (slave ip6gretap2): failed to get link speed/duplex
[ 1668.563983][ T6879] FAULT_INJECTION: forcing a failure.
[ 1668.563983][ T6879] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1668.564014][ T6879] CPU: 0 UID: 0 PID: 6879 Comm: syz.3.9343 Not tainted 6.16.0-syzkaller-12071-gf8262b8dadfa #0 PREEMPT(full) 
[ 1668.564034][ T6879] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[ 1668.564045][ T6879] Call Trace:
[ 1668.564052][ T6879]  <TASK>
[ 1668.564060][ T6879]  dump_stack_lvl+0x189/0x250
[ 1668.564086][ T6879]  ? __pfx____ratelimit+0x10/0x10
[ 1668.564109][ T6879]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1668.564131][ T6879]  ? __pfx__printk+0x10/0x10
[ 1668.564156][ T6879]  ? __might_fault+0xb0/0x130
[ 1668.564190][ T6879]  should_fail_ex+0x414/0x560
[ 1668.564217][ T6879]  _copy_from_user+0x2d/0xb0
[ 1668.564235][ T6879]  generic_map_update_batch+0x572/0x7f0
[ 1668.564267][ T6879]  ? __pfx_generic_map_update_batch+0x10/0x10
[ 1668.564297][ T6879]  ? __pfx_generic_map_update_batch+0x10/0x10
[ 1668.564316][ T6879]  bpf_map_do_batch+0x369/0x5f0
[ 1668.564346][ T6879]  __sys_bpf+0x6af/0x870
[ 1668.564370][ T6879]  ? __pfx___sys_bpf+0x10/0x10
[ 1668.564406][ T6879]  ? ksys_write+0x1e1/0x250
[ 1668.564437][ T6879]  ? __pfx_ksys_write+0x10/0x10
[ 1668.564456][ T6879]  ? rcu_is_watching+0x15/0xb0
[ 1668.564482][ T6879]  __x64_sys_bpf+0x7c/0x90
[ 1668.564504][ T6879]  do_syscall_64+0xfa/0x3b0
[ 1668.564531][ T6879]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1668.564552][ T6879]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1668.564571][ T6879]  ? clear_bhb_loop+0x60/0xb0
[ 1668.564593][ T6879]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1668.564611][ T6879] RIP: 0033:0x7fc63f58ebe9
[ 1668.564628][ T6879] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1668.564645][ T6879] RSP: 002b:00007fc64044f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 1668.564664][ T6879] RAX: ffffffffffffffda RBX: 00007fc63f7b5fa0 RCX: 00007fc63f58ebe9
[ 1668.564677][ T6879] RDX: 0000000000000038 RSI: 0000200000000640 RDI: 000000000000001a
[ 1668.564689][ T6879] RBP: 00007fc64044f090 R08: 0000000000000000 R09: 0000000000000000
[ 1668.564701][ T6879] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1668.564712][ T6879] R13: 00007fc63f7b6038 R14: 00007fc63f7b5fa0 R15: 00007ffce3f5cfd8
[ 1668.564741][ T6879]  </TASK>
[ 1669.048349][ T6900] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9349'.
[ 1669.161044][ T1326] bond2: (slave ip6gretap2): failed to get link speed/duplex
[ 1669.270981][T19135] bond2: (slave ip6gretap2): failed to get link speed/duplex
[ 1669.375283][ T6908] netlink: 'syz.4.9351': attribute type 12 has an invalid length.
[ 1669.401058][ T1326] bond2: (slave ip6gretap2): failed to get link speed/duplex
[ 1669.511034][T19135] bond2: (slave ip6gretap2): failed to get link speed/duplex
[ 1669.620854][T19135] bond2: (slave ip6gretap2): failed to get link speed/duplex
[ 1669.730891][ T1326] bond2: (slave ip6gretap2): failed to get link speed/duplex
[ 1669.840769][T19130] bond2: (slave ip6gretap2): failed to get link speed/duplex
[ 1670.524608][ T6946] __nla_validate_parse: 5 callbacks suppressed
[ 1670.524627][ T6946] netlink: 212376 bytes leftover after parsing attributes in process `syz.5.9365'.
[ 1670.557886][ T6948] netlink: 'syz.4.9366': attribute type 9 has an invalid length.
[ 1670.578412][ T6948] netlink: 'syz.4.9366': attribute type 6 has an invalid length.
[ 1673.421196][T19130] net_ratelimit: 6 callbacks suppressed
[ 1673.421218][T19130] bond2: (slave ip6gretap2): failed to get link speed/duplex
[ 1673.464302][ T6956] tipc: Started in network mode
[ 1673.469205][ T6956] tipc: Node identity a235d8a16149, cluster identity 4711
[ 1673.477538][ T6956] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1673.495414][ T6954] syzkaller0: entered promiscuous mode
[ 1673.520728][ T6954] syzkaller0: entered allmulticast mode
[ 1673.568507][ T6954] tipc: Resetting bearer <eth:syzkaller0>
[ 1673.587207][ T6953] tipc: Resetting bearer <eth:syzkaller0>
[ 1673.668599][ T6953] tipc: Disabling bearer <eth:syzkaller0>
[ 1673.721631][T19133] bond2: (slave ip6gretap2): failed to get link speed/duplex
[ 1673.783290][ T6970] netlink: 60 bytes leftover after parsing attributes in process `syz.3.9373'.
[ 1673.833314][T19135] bond2: (slave ip6gretap2): failed to get link speed/duplex
[ 1673.881382][ T6973] FAULT_INJECTION: forcing a failure.
[ 1673.881382][ T6973] name failslab, interval 1, probability 0, space 0, times 0
[ 1673.894626][ T6973] CPU: 0 UID: 0 PID: 6973 Comm: syz.3.9374 Not tainted 6.16.0-syzkaller-12071-gf8262b8dadfa #0 PREEMPT(full) 
[ 1673.894653][ T6973] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[ 1673.894664][ T6973] Call Trace:
[ 1673.894672][ T6973]  <TASK>
[ 1673.894681][ T6973]  dump_stack_lvl+0x189/0x250
[ 1673.894709][ T6973]  ? __pfx____ratelimit+0x10/0x10
[ 1673.894732][ T6973]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1673.894754][ T6973]  ? __pfx__printk+0x10/0x10
[ 1673.894784][ T6973]  ? __pfx___might_resched+0x10/0x10
[ 1673.894807][ T6973]  should_fail_ex+0x414/0x560
[ 1673.894833][ T6973]  should_failslab+0xa8/0x100
[ 1673.894860][ T6973]  kmem_cache_alloc_node_noprof+0x76/0x3c0
[ 1673.894886][ T6973]  ? __alloc_skb+0x112/0x2d0
[ 1673.894913][ T6973]  __alloc_skb+0x112/0x2d0
[ 1673.894941][ T6973]  netlink_sendmsg+0x5c6/0xb30
[ 1673.894973][ T6973]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1673.895000][ T6973]  ? aa_sock_msg_perm+0xf1/0x1d0
[ 1673.895026][ T6973]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[ 1673.895046][ T6973]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1673.895070][ T6973]  __sock_sendmsg+0x21c/0x270
[ 1673.895094][ T6973]  sock_write_iter+0x258/0x330
[ 1673.895117][ T6973]  ? __pfx_sock_write_iter+0x10/0x10
[ 1673.895148][ T6973]  ? __lock_acquire+0xab9/0xd20
[ 1673.895182][ T6973]  do_iter_readv_writev+0x56b/0x7f0
[ 1673.895218][ T6973]  ? __pfx_do_iter_readv_writev+0x10/0x10
[ 1673.895241][ T6973]  ? common_file_perm+0x1b5/0x230
[ 1673.895268][ T6973]  ? bpf_lsm_file_permission+0x9/0x20
[ 1673.895288][ T6973]  ? security_file_permission+0x75/0x290
[ 1673.895310][ T6973]  ? rw_verify_area+0x255/0x4d0
[ 1673.895336][ T6973]  vfs_writev+0x31a/0x960
[ 1673.895359][ T6973]  ? __lock_acquire+0xab9/0xd20
[ 1673.895385][ T6973]  ? __pfx_vfs_writev+0x10/0x10
[ 1673.895419][ T6973]  ? __fget_files+0x2a/0x420
[ 1673.895449][ T6973]  ? __fget_files+0x3a0/0x420
[ 1673.895472][ T6973]  ? __fget_files+0x2a/0x420
[ 1673.895506][ T6973]  do_writev+0x14d/0x2d0
[ 1673.895531][ T6973]  ? __pfx_do_writev+0x10/0x10
[ 1673.895547][ T6973]  ? rcu_is_watching+0x15/0xb0
[ 1673.895571][ T6973]  ? do_syscall_64+0xbe/0x3b0
[ 1673.895597][ T6973]  do_syscall_64+0xfa/0x3b0
[ 1673.895619][ T6973]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1673.895640][ T6973]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1673.895660][ T6973]  ? clear_bhb_loop+0x60/0xb0
[ 1673.895683][ T6973]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1673.895702][ T6973] RIP: 0033:0x7fc63f58ebe9
[ 1673.895720][ T6973] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1673.895737][ T6973] RSP: 002b:00007fc64044f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014
[ 1673.895758][ T6973] RAX: ffffffffffffffda RBX: 00007fc63f7b5fa0 RCX: 00007fc63f58ebe9
[ 1673.895773][ T6973] RDX: 0000000000000001 RSI: 0000200000000000 RDI: 0000000000000003
[ 1673.895785][ T6973] RBP: 00007fc64044f090 R08: 0000000000000000 R09: 0000000000000000
[ 1673.895797][ T6973] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1673.895809][ T6973] R13: 00007fc63f7b6038 R14: 00007fc63f7b5fa0 R15: 00007ffce3f5cfd8
[ 1673.895840][ T6973]  </TASK>
[ 1674.205820][T19133] bond2: (slave ip6gretap2): failed to get link speed/duplex
[ 1674.309069][ T6978] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9376'.
[ 1674.352893][ T3529] bond2: (slave ip6gretap2): failed to get link speed/duplex
[ 1674.392801][ T6982] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9378'.
[ 1674.473321][ T3529] bond2: (slave ip6gretap2): failed to get link speed/duplex
[ 1674.602114][T19133] bond2: (slave ip6gretap2): failed to get link speed/duplex
[ 1674.691771][ T6991] netlink: 'syz.5.9381': attribute type 12 has an invalid length.
[ 1674.709865][ T6991] netlink: 132 bytes leftover after parsing attributes in process `syz.5.9381'.
[ 1674.741155][T19133] bond2: (slave ip6gretap2): failed to get link speed/duplex
[ 1674.850776][ T3529] bond2: (slave ip6gretap2): failed to get link speed/duplex
[ 1674.960766][T19133] bond2: (slave ip6gretap2): failed to get link speed/duplex
[ 1675.879209][ T7024] netlink: 2 bytes leftover after parsing attributes in process `syz.3.9392'.
[ 1676.013253][ T7027] netlink: 240 bytes leftover after parsing attributes in process `syz.3.9392'.
[ 1676.039545][ T7027] netlink: 48 bytes leftover after parsing attributes in process `syz.3.9392'.
[ 1676.075963][ T7029] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9393'.
[ 1676.282889][ T5882] Bluetooth: hci4: command 0x0405 tx timeout
[ 1676.488584][ T7040] netlink: 'syz.1.9399': attribute type 12 has an invalid length.
[ 1676.507032][ T7040] netlink: 132 bytes leftover after parsing attributes in process `syz.1.9399'.
[ 1676.521473][ T7045] netlink: 'syz.5.9398': attribute type 12 has an invalid length.
[ 1677.675932][   T49] wlan0: Selected IBSS BSSID 50:50:50:50:50:50 based on configured SSID
[ 1677.815101][ T7093] netlink: 'syz.1.9415': attribute type 12 has an invalid length.
[ 1678.029774][ T7103] netlink: 'syz.3.9420': attribute type 30 has an invalid length.
[ 1678.047732][ T7103] (unnamed net_device) (uninitialized): option arp_missed_max: invalid value (0)
[ 1678.069177][ T7103] (unnamed net_device) (uninitialized): option arp_missed_max: allowed values 1 - 255
[ 1678.254524][ T7114] tipc: Cannot configure node identity twice
[ 1678.433767][T19133] net_ratelimit: 28 callbacks suppressed
[ 1678.433789][T19133] bond2: (slave ip6gretap2): failed to get link speed/duplex
[ 1678.595254][ T7124] netlink: 32 bytes leftover after parsing attributes in process `syz.3.9426'.
[ 1678.634975][ T7124] netlink: 32 bytes leftover after parsing attributes in process `syz.3.9426'.
[ 1678.721304][ T2991] bond2: (slave ip6gretap2): failed to get link speed/duplex
[ 1678.831033][T19133] bond2: (slave ip6gretap2): failed to get link speed/duplex
[ 1678.970876][ T2991] bond2: (slave ip6gretap2): failed to get link speed/duplex
[ 1679.093598][ T7131] netlink: 'syz.4.9429': attribute type 12 has an invalid length.
[ 1679.151018][T19133] bond2: (slave ip6gretap2): failed to get link speed/duplex
[ 1679.417430][ T2991] bond2: (slave ip6gretap2): failed to get link speed/duplex
[ 1679.530788][ T2991] bond2: (slave ip6gretap2): failed to get link speed/duplex
[ 1679.673861][ T1326] bond2: (slave ip6gretap2): failed to get link speed/duplex
[ 1679.734041][ T7140] netlink: 20 bytes leftover after parsing attributes in process `syz.5.9428'.
[ 1679.791834][T19135] bond2: (slave ip6gretap2): failed to get link speed/duplex
[ 1679.825006][ T7148] tipc: Started in network mode
[ 1679.839930][ T7148] tipc: Node identity 2e0b9500a15c, cluster identity 4711
[ 1679.858292][ T7148] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[ 1679.911588][ T7150] syzkaller0: entered promiscuous mode
[ 1679.917092][ T7150] syzkaller0: entered allmulticast mode
[ 1680.084436][ T7148] tipc: Resetting bearer <eth:syzkaller0>
[ 1680.095602][ T1326] bond2: (slave ip6gretap2): failed to get link speed/duplex
[ 1680.624220][ T5882] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[ 1680.645236][ T5882] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[ 1680.657769][ T5882] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[ 1680.668317][ T5882] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[ 1680.692161][ T5882] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[ 1680.940898][T23464] tipc: Node number set to 2404881664
[ 1681.369431][ T7166] chnl_net:caif_netlink_parms(): no params data found
[ 1681.782695][ T7166] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1681.789958][ T7166] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1681.798292][ T7166] bridge_slave_0: entered allmulticast mode
[ 1681.813257][ T7166] bridge_slave_0: entered promiscuous mode
[ 1681.915916][ T7166] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1681.931060][ T7166] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1681.944579][ T7166] bridge_slave_1: entered allmulticast mode
[ 1681.953143][ T7166] bridge_slave_1: entered promiscuous mode
[ 1682.150035][ T7209] FAULT_INJECTION: forcing a failure.
[ 1682.150035][ T7209] name failslab, interval 1, probability 0, space 0, times 0
[ 1682.158416][ T7166] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1682.199620][ T7209] CPU: 0 UID: 0 PID: 7209 Comm: syz.4.9451 Not tainted 6.16.0-syzkaller-12071-gf8262b8dadfa #0 PREEMPT(full) 
[ 1682.199658][ T7209] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[ 1682.199670][ T7209] Call Trace:
[ 1682.199678][ T7209]  <TASK>
[ 1682.199687][ T7209]  dump_stack_lvl+0x189/0x250
[ 1682.199714][ T7209]  ? __pfx____ratelimit+0x10/0x10
[ 1682.199737][ T7209]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1682.199759][ T7209]  ? __pfx__printk+0x10/0x10
[ 1682.199786][ T7209]  ? __pfx___might_resched+0x10/0x10
[ 1682.199805][ T7209]  ? fs_reclaim_acquire+0x7d/0x100
[ 1682.199836][ T7209]  should_fail_ex+0x414/0x560
[ 1682.199863][ T7209]  should_failslab+0xa8/0x100
[ 1682.199890][ T7209]  kmem_cache_alloc_node_noprof+0x76/0x3c0
[ 1682.199915][ T7209]  ? __alloc_skb+0x112/0x2d0
[ 1682.199943][ T7209]  __alloc_skb+0x112/0x2d0
[ 1682.199970][ T7209]  tcp_send_active_reset+0x8c/0x6d0
[ 1682.200004][ T7209]  tcp_disconnect+0x171/0x1b40
[ 1682.200032][ T7209]  __inet_stream_connect+0x396/0xe80
[ 1682.200064][ T7209]  ? __local_bh_enable_ip+0x12d/0x1c0
[ 1682.200081][ T7209]  ? __pfx___inet_stream_connect+0x10/0x10
[ 1682.200101][ T7209]  ? __local_bh_enable_ip+0x12d/0x1c0
[ 1682.200119][ T7209]  ? __pfx___local_bh_enable_ip+0x10/0x10
[ 1682.200149][ T7209]  inet_stream_connect+0x66/0xa0
[ 1682.200171][ T7209]  __sys_connect+0x316/0x440
[ 1682.200193][ T7209]  ? __fget_files+0x3a0/0x420
[ 1682.200219][ T7209]  ? __pfx___sys_connect+0x10/0x10
[ 1682.200255][ T7209]  ? __pfx_ksys_write+0x10/0x10
[ 1682.200285][ T7209]  __x64_sys_connect+0x7a/0x90
[ 1682.200309][ T7209]  do_syscall_64+0xfa/0x3b0
[ 1682.200330][ T7209]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1682.200350][ T7209]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1682.200370][ T7209]  ? clear_bhb_loop+0x60/0xb0
[ 1682.200393][ T7209]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1682.200410][ T7209] RIP: 0033:0x7fc5d5f8ebe9
[ 1682.200428][ T7209] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1682.200444][ T7209] RSP: 002b:00007fc5d6d7b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a
[ 1682.200464][ T7209] RAX: ffffffffffffffda RBX: 00007fc5d61b6090 RCX: 00007fc5d5f8ebe9
[ 1682.200477][ T7209] RDX: 000000000000000c RSI: 0000200000000740 RDI: 0000000000000003
[ 1682.200488][ T7209] RBP: 00007fc5d6d7b090 R08: 0000000000000000 R09: 0000000000000000
[ 1682.200498][ T7209] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1682.200507][ T7209] R13: 00007fc5d61b6128 R14: 00007fc5d61b6090 R15: 00007ffd45123068
[ 1682.200536][ T7209]  </TASK>
[ 1682.583975][ T7166] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1682.761722][T19391] Bluetooth: hci7: command tx timeout
[ 1682.782822][ T7166] team0: Port device team_slave_0 added
[ 1682.817859][ T7166] team0: Port device team_slave_1 added
[ 1682.907149][ T7166] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1682.931049][ T7166] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1683.021788][ T7166] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1683.043767][ T7166] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1683.061045][ T7166] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1683.121181][ T7166] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1683.326148][ T7166] hsr_slave_0: entered promiscuous mode
[ 1683.345855][ T7166] hsr_slave_1: entered promiscuous mode
[ 1683.354149][ T7222] FAULT_INJECTION: forcing a failure.
[ 1683.354149][ T7222] name failslab, interval 1, probability 0, space 0, times 0
[ 1683.361816][ T7166] debugfs: 'hsr0' already exists in 'hsr'
[ 1683.381710][ T7166] Cannot create hsr debugfs directory
[ 1683.401168][ T7222] CPU: 1 UID: 0 PID: 7222 Comm: syz.5.9456 Not tainted 6.16.0-syzkaller-12071-gf8262b8dadfa #0 PREEMPT(full) 
[ 1683.401196][ T7222] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[ 1683.401208][ T7222] Call Trace:
[ 1683.401216][ T7222]  <TASK>
[ 1683.401225][ T7222]  dump_stack_lvl+0x189/0x250
[ 1683.401252][ T7222]  ? __pfx____ratelimit+0x10/0x10
[ 1683.401273][ T7222]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1683.401293][ T7222]  ? __pfx__printk+0x10/0x10
[ 1683.401323][ T7222]  ? __pfx___might_resched+0x10/0x10
[ 1683.401347][ T7222]  should_fail_ex+0x414/0x560
[ 1683.401374][ T7222]  should_failslab+0xa8/0x100
[ 1683.401400][ T7222]  kmem_cache_alloc_node_noprof+0x76/0x3c0
[ 1683.401425][ T7222]  ? __alloc_skb+0x112/0x2d0
[ 1683.401453][ T7222]  __alloc_skb+0x112/0x2d0
[ 1683.401481][ T7222]  netlink_sendmsg+0x5c6/0xb30
[ 1683.401515][ T7222]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1683.401550][ T7222]  ? aa_sock_msg_perm+0xf1/0x1d0
[ 1683.401577][ T7222]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[ 1683.401597][ T7222]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1683.401622][ T7222]  __sock_sendmsg+0x21c/0x270
[ 1683.401646][ T7222]  ____sys_sendmsg+0x505/0x830
[ 1683.401678][ T7222]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1683.401714][ T7222]  ? import_iovec+0x74/0xa0
[ 1683.401736][ T7222]  ___sys_sendmsg+0x21f/0x2a0
[ 1683.401765][ T7222]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1683.401825][ T7222]  ? __fget_files+0x2a/0x420
[ 1683.401849][ T7222]  ? __fget_files+0x3a0/0x420
[ 1683.401886][ T7222]  __x64_sys_sendmsg+0x19b/0x260
[ 1683.401914][ T7222]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 1683.401949][ T7222]  ? __pfx_ksys_write+0x10/0x10
[ 1683.401979][ T7222]  ? do_syscall_64+0xbe/0x3b0
[ 1683.402007][ T7222]  do_syscall_64+0xfa/0x3b0
[ 1683.402029][ T7222]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1683.402050][ T7222]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1683.402069][ T7222]  ? clear_bhb_loop+0x60/0xb0
[ 1683.402090][ T7222]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1683.402109][ T7222] RIP: 0033:0x7f123858ebe9
[ 1683.402126][ T7222] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1683.402145][ T7222] RSP: 002b:00007f123940e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1683.402165][ T7222] RAX: ffffffffffffffda RBX: 00007f12387b5fa0 RCX: 00007f123858ebe9
[ 1683.402179][ T7222] RDX: 0000000000044000 RSI: 0000200000005d00 RDI: 0000000000000003
[ 1683.402192][ T7222] RBP: 00007f123940e090 R08: 0000000000000000 R09: 0000000000000000
[ 1683.402205][ T7222] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1683.402217][ T7222] R13: 00007f12387b6038 R14: 00007f12387b5fa0 R15: 00007ffeb5276018
[ 1683.402248][ T7222]  </TASK>
[ 1683.770445][ T7229] netlink: 'syz.3.9458': attribute type 10 has an invalid length.
[ 1683.821560][ T7229] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1683.867585][ T7229] bond0: (slave batadv0): Enslaving as an active interface with an up link
[ 1683.948785][ T7240] FAULT_INJECTION: forcing a failure.
[ 1683.948785][ T7240] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1684.002496][ T7240] CPU: 0 UID: 0 PID: 7240 Comm: syz.4.9462 Not tainted 6.16.0-syzkaller-12071-gf8262b8dadfa #0 PREEMPT(full) 
[ 1684.002525][ T7240] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[ 1684.002536][ T7240] Call Trace:
[ 1684.002543][ T7240]  <TASK>
[ 1684.002552][ T7240]  dump_stack_lvl+0x189/0x250
[ 1684.002578][ T7240]  ? __pfx____ratelimit+0x10/0x10
[ 1684.002602][ T7240]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1684.002624][ T7240]  ? __pfx__printk+0x10/0x10
[ 1684.002661][ T7240]  should_fail_ex+0x414/0x560
[ 1684.002688][ T7240]  _copy_from_user+0x2d/0xb0
[ 1684.002709][ T7240]  __copy_msghdr+0x3c5/0x5b0
[ 1684.002737][ T7240]  ___sys_sendmsg+0x1a5/0x2a0
[ 1684.002759][ T7240]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1684.002820][ T7240]  ? __fget_files+0x2a/0x420
[ 1684.002847][ T7240]  ? __fget_files+0x3a0/0x420
[ 1684.002882][ T7240]  __x64_sys_sendmsg+0x19b/0x260
[ 1684.002908][ T7240]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 1684.002941][ T7240]  ? __pfx_ksys_write+0x10/0x10
[ 1684.002959][ T7240]  ? rcu_is_watching+0x15/0xb0
[ 1684.002978][ T7240]  ? do_syscall_64+0xbe/0x3b0
[ 1684.002999][ T7240]  do_syscall_64+0xfa/0x3b0
[ 1684.003016][ T7240]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1684.003032][ T7240]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1684.003047][ T7240]  ? clear_bhb_loop+0x60/0xb0
[ 1684.003066][ T7240]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1684.003083][ T7240] RIP: 0033:0x7fc5d5f8ebe9
[ 1684.003100][ T7240] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1684.003114][ T7240] RSP: 002b:00007fc5d6d9c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1684.003130][ T7240] RAX: ffffffffffffffda RBX: 00007fc5d61b5fa0 RCX: 00007fc5d5f8ebe9
[ 1684.003141][ T7240] RDX: 0000000020002800 RSI: 0000200000001640 RDI: 0000000000000005
[ 1684.003151][ T7240] RBP: 00007fc5d6d9c090 R08: 0000000000000000 R09: 0000000000000000
[ 1684.003161][ T7240] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1684.003170][ T7240] R13: 00007fc5d61b6038 R14: 00007fc5d61b5fa0 R15: 00007ffd45123068
[ 1684.003197][ T7240]  </TASK>
[ 1684.289332][ T7166] netdevsim netdevsim7 netdevsim0: renamed from eth0
[ 1684.311914][ T7245] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9465'.
[ 1684.328292][ T7166] netdevsim netdevsim7 netdevsim1: renamed from eth1
[ 1684.344953][ T7166] netdevsim netdevsim7 netdevsim2: renamed from eth2
[ 1684.371429][ T7166] netdevsim netdevsim7 netdevsim3: renamed from eth3
[ 1684.633841][ T7261] netlink: 52 bytes leftover after parsing attributes in process `syz.5.9466'.
[ 1684.650780][ T1326] net_ratelimit: 11 callbacks suppressed
[ 1684.650804][ T1326] bond2: (slave ip6gretap2): failed to get link speed/duplex
[ 1684.735814][ T7249] netlink: 192 bytes leftover after parsing attributes in process `syz.3.9465'.
[ 1684.843961][T19391] Bluetooth: hci7: command tx timeout
[ 1684.860730][T19133] bond2: (slave ip6gretap2): failed to get link speed/duplex
[ 1684.998860][ T7271] FAULT_INJECTION: forcing a failure.
[ 1684.998860][ T7271] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1685.007209][ T7166] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1685.041561][ T7271] CPU: 0 UID: 0 PID: 7271 Comm: syz.1.9470 Not tainted 6.16.0-syzkaller-12071-gf8262b8dadfa #0 PREEMPT(full) 
[ 1685.041588][ T7271] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[ 1685.041600][ T7271] Call Trace:
[ 1685.041608][ T7271]  <TASK>
[ 1685.041617][ T7271]  dump_stack_lvl+0x189/0x250
[ 1685.041644][ T7271]  ? __pfx____ratelimit+0x10/0x10
[ 1685.041667][ T7271]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1685.041688][ T7271]  ? __pfx__printk+0x10/0x10
[ 1685.041722][ T7271]  should_fail_ex+0x414/0x560
[ 1685.041748][ T7271]  _copy_from_user+0x2d/0xb0
[ 1685.041766][ T7271]  __copy_msghdr+0x3c5/0x5b0
[ 1685.041796][ T7271]  ___sys_sendmsg+0x1a5/0x2a0
[ 1685.041822][ T7271]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1685.041882][ T7271]  ? __fget_files+0x2a/0x420
[ 1685.041906][ T7271]  ? __fget_files+0x3a0/0x420
[ 1685.041941][ T7271]  __sys_sendmmsg+0x227/0x430
[ 1685.041972][ T7271]  ? __pfx___sys_sendmmsg+0x10/0x10
[ 1685.041995][ T7271]  ? __mutex_unlock_slowpath+0x1a1/0x760
[ 1685.042045][ T7271]  ? ksys_write+0x22a/0x250
[ 1685.042071][ T7271]  ? __pfx_ksys_write+0x10/0x10
[ 1685.042091][ T7271]  ? rcu_is_watching+0x15/0xb0
[ 1685.042117][ T7271]  __x64_sys_sendmmsg+0xa0/0xc0
[ 1685.042144][ T7271]  do_syscall_64+0xfa/0x3b0
[ 1685.042165][ T7271]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1685.042185][ T7271]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1685.042203][ T7271]  ? clear_bhb_loop+0x60/0xb0
[ 1685.042223][ T7271]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1685.042241][ T7271] RIP: 0033:0x7fecb538ebe9
[ 1685.042266][ T7271] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1685.042282][ T7271] RSP: 002b:00007fecb6229038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[ 1685.042302][ T7271] RAX: ffffffffffffffda RBX: 00007fecb55b5fa0 RCX: 00007fecb538ebe9
[ 1685.042317][ T7271] RDX: 0000000000000002 RSI: 0000200000003340 RDI: 0000000000000003
[ 1685.042329][ T7271] RBP: 00007fecb6229090 R08: 0000000000000000 R09: 0000000000000000
[ 1685.042341][ T7271] R10: 0000000040000000 R11: 0000000000000246 R12: 0000000000000001
[ 1685.042353][ T7271] R13: 00007fecb55b6038 R14: 00007fecb55b5fa0 R15: 00007ffdae38c418
[ 1685.042384][ T7271]  </TASK>
[ 1685.138589][ T7166] 8021q: adding VLAN 0 to HW filter on device team0
[ 1685.407238][T19133] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1685.414430][T19133] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1685.445568][ T1326] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1685.452817][ T1326] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1685.593311][ T2991] bond2: (slave ip6gretap2): failed to get link speed/duplex
[ 1685.741347][   T12] bond2: (slave ip6gretap2): failed to get link speed/duplex
[ 1685.860871][T19135] bond2: (slave ip6gretap2): failed to get link speed/duplex
[ 1686.006532][ T7166] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1686.064444][ T2991] bond2: (slave ip6gretap2): failed to get link speed/duplex
[ 1686.190764][   T49] bond2: (slave ip6gretap2): failed to get link speed/duplex
[ 1686.203011][ T7309] netlink: 56 bytes leftover after parsing attributes in process `syz.4.9480'.
[ 1686.311209][   T49] bond2: (slave ip6gretap2): failed to get link speed/duplex
[ 1686.363459][ T7315] netlink: 'syz.3.9481': attribute type 1 has an invalid length.
[ 1686.374261][ T7286] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[ 1686.385259][ T7286] Bluetooth: hci4: Error when powering off device on rfkill (-4)
[ 1686.454083][ T7319] bond1: entered promiscuous mode
[ 1686.459190][ T7319] bond1: entered allmulticast mode
[ 1686.528664][ T7319] 8021q: adding VLAN 0 to HW filter on device bond1
[ 1686.617968][ T7319] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9481'.
[ 1686.671130][ T2991] bond2: (slave ip6gretap2): failed to get link speed/duplex
[ 1686.732166][ T7286] Bluetooth: hci6: Opcode 0x0c1a failed: -4
[ 1686.758971][ T7286] Bluetooth: hci6: Error when powering off device on rfkill (-4)
[ 1686.898561][ T7286] Bluetooth: hci7: Opcode 0x0c1a failed: -4
[ 1686.901150][ T1326] bond2: (slave ip6gretap2): failed to get link speed/duplex
[ 1686.915998][ T7286] Bluetooth: hci7: Error when powering off device on rfkill (-4)
[ 1686.924040][T19391] Bluetooth: hci7: command tx timeout
[ 1686.939844][ T7166] veth0_vlan: entered promiscuous mode
[ 1686.993726][ T7166] veth1_vlan: entered promiscuous mode
[ 1687.038237][ T7330] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9484'.
[ 1687.099678][ T7330] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9484'.
[ 1687.201771][ T7166] veth0_macvtap: entered promiscuous mode
[ 1687.214953][ T7333] netlink: 209836 bytes leftover after parsing attributes in process `syz.5.9485'.
[ 1687.234057][ T7166] veth1_macvtap: entered promiscuous mode
[ 1687.291787][ T7335] netlink: 20 bytes leftover after parsing attributes in process `syz.5.9485'.
[ 1687.345602][ T7166] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1687.397493][ T7166] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1687.446875][ T2991] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1687.481516][ T2991] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1687.506726][ T2991] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1687.507708][ T7337] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9486'.
[ 1687.575652][T19133] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1688.045486][T19130] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1688.085195][T19130] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1688.162605][ T2991] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1688.184025][ T2991] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1688.341015][ T7361] netlink: 'syz.5.9493': attribute type 12 has an invalid length.
[ 1688.571322][ T7374] netlink: 'syz.4.9495': attribute type 1 has an invalid length.
[ 1688.831997][ T7384] FAULT_INJECTION: forcing a failure.
[ 1688.831997][ T7384] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1688.846331][ T7384] CPU: 0 UID: 0 PID: 7384 Comm: syz.3.9498 Not tainted 6.16.0-syzkaller-12071-gf8262b8dadfa #0 PREEMPT(full) 
[ 1688.846368][ T7384] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[ 1688.846380][ T7384] Call Trace:
[ 1688.846388][ T7384]  <TASK>
[ 1688.846398][ T7384]  dump_stack_lvl+0x189/0x250
[ 1688.846424][ T7384]  ? __pfx____ratelimit+0x10/0x10
[ 1688.846447][ T7384]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1688.846469][ T7384]  ? __pfx__printk+0x10/0x10
[ 1688.846507][ T7384]  should_fail_ex+0x414/0x560
[ 1688.846534][ T7384]  _copy_to_user+0x31/0xb0
[ 1688.846555][ T7384]  simple_read_from_buffer+0xe1/0x170
[ 1688.846586][ T7384]  proc_fail_nth_read+0x1b3/0x220
[ 1688.846611][ T7384]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1688.846636][ T7384]  ? rw_verify_area+0x2a6/0x4d0
[ 1688.846658][ T7384]  ? __lock_acquire+0xab9/0xd20
[ 1688.846682][ T7384]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1688.846705][ T7384]  vfs_read+0x200/0x980
[ 1688.846727][ T7384]  ? fdget_pos+0x247/0x320
[ 1688.846748][ T7384]  ? __pfx___mutex_lock+0x10/0x10
[ 1688.846772][ T7384]  ? __pfx_vfs_read+0x10/0x10
[ 1688.846797][ T7384]  ? __fget_files+0x2a/0x420
[ 1688.846827][ T7384]  ? __fget_files+0x3a0/0x420
[ 1688.846857][ T7384]  ? __fget_files+0x2a/0x420
[ 1688.846892][ T7384]  ksys_read+0x145/0x250
[ 1688.846917][ T7384]  ? __pfx_ksys_read+0x10/0x10
[ 1688.846937][ T7384]  ? rcu_is_watching+0x15/0xb0
[ 1688.846963][ T7384]  ? do_syscall_64+0xbe/0x3b0
[ 1688.846990][ T7384]  do_syscall_64+0xfa/0x3b0
[ 1688.847010][ T7384]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1688.847038][ T7384]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1688.847059][ T7384]  ? clear_bhb_loop+0x60/0xb0
[ 1688.847082][ T7384]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1688.847101][ T7384] RIP: 0033:0x7fc63f58d5fc
[ 1688.847119][ T7384] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[ 1688.847136][ T7384] RSP: 002b:00007fc64044f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 1688.847156][ T7384] RAX: ffffffffffffffda RBX: 00007fc63f7b5fa0 RCX: 00007fc63f58d5fc
[ 1688.847171][ T7384] RDX: 000000000000000f RSI: 00007fc64044f0a0 RDI: 0000000000000004
[ 1688.847183][ T7384] RBP: 00007fc64044f090 R08: 0000000000000000 R09: 0000000000000000
[ 1688.847195][ T7384] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1688.847206][ T7384] R13: 00007fc63f7b6038 R14: 00007fc63f7b5fa0 R15: 00007ffce3f5cfd8
[ 1688.847243][ T7384]  </TASK>
[ 1689.403714][   T31] INFO: task kworker/u8:7:1336 blocked for more than 143 seconds.
[ 1689.415284][   T31]       Not tainted 6.16.0-syzkaller-12071-gf8262b8dadfa #0
[ 1689.440865][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 1689.449587][   T31] task:kworker/u8:7    state:D stack:20416 pid:1336  tgid:1336  ppid:2      task_flags:0x4208160 flags:0x00004000
[ 1689.484187][   T31] Workqueue: netns cleanup_net
[ 1689.489280][   T31] Call Trace:
[ 1689.510671][   T31]  <TASK>
[ 1689.520730][   T31]  __schedule+0x1798/0x4cc0
[ 1689.525385][   T31]  ? __lock_acquire+0xab9/0xd20
[ 1689.536396][   T31]  ? __lock_acquire+0xab9/0xd20
[ 1689.548837][   T31]  ? __pfx___schedule+0x10/0x10
[ 1689.554014][   T31]  ? schedule+0x91/0x360
[ 1689.559334][   T31]  schedule+0x165/0x360
[ 1689.563872][   T31]  schedule_preempt_disabled+0x13/0x30
[ 1689.569561][   T31]  __mutex_lock+0x7e6/0x1360
[ 1689.574527][   T31]  ? __mutex_lock+0x5b6/0x1360
[ 1689.579471][   T31]  ? rdma_dev_change_netns+0x39/0x300
[ 1689.586168][   T31]  ? __pfx___mutex_lock+0x10/0x10
[ 1689.591407][   T31]  ? __mutex_unlock_slowpath+0x1a1/0x760
[ 1689.597298][   T31]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[ 1689.611101][   T31]  ? do_raw_spin_unlock+0x122/0x240
[ 1689.616499][   T31]  ? _raw_spin_unlock+0x28/0x50
[ 1689.622208][   T31]  rdma_dev_change_netns+0x39/0x300
[ 1689.627614][   T31]  rdma_dev_exit_net+0x203/0x340
[ 1689.633238][   T31]  ? __pfx___might_resched+0x10/0x10
[ 1689.638740][   T31]  ? __pfx_rdma_dev_exit_net+0x10/0x10
[ 1689.645359][   T31]  ? net_generic+0x1e/0x240
[ 1689.650109][   T31]  ? mutex_is_locked+0x17/0x50
[ 1689.669589][   T31]  ? rtnl_is_locked+0x15/0x20
[ 1689.677037][   T31]  ops_undo_list+0x497/0x990
[ 1689.682963][   T31]  ? __pfx_ops_undo_list+0x10/0x10
[ 1689.688638][   T31]  ? do_raw_spin_unlock+0x122/0x240
[ 1689.694225][   T31]  cleanup_net+0x4c5/0x800
[ 1689.698866][   T31]  ? __pfx_cleanup_net+0x10/0x10
[ 1689.704881][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1689.710348][   T31]  ? process_scheduled_works+0x9ef/0x17b0
[ 1689.717015][   T31]  ? process_scheduled_works+0x9ef/0x17b0
[ 1689.725490][   T31]  process_scheduled_works+0xade/0x17b0
[ 1689.731990][   T31]  ? __pfx_process_scheduled_works+0x10/0x10
[ 1689.738965][   T31]  worker_thread+0x8a0/0xda0
[ 1689.744782][   T31]  kthread+0x70e/0x8a0
[ 1689.749301][   T31]  ? __pfx_worker_thread+0x10/0x10
[ 1689.756162][   T31]  ? __pfx_kthread+0x10/0x10
[ 1689.763289][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1689.774188][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1689.780282][   T31]  ? __pfx_kthread+0x10/0x10
[ 1689.786848][   T31]  ret_from_fork+0x3fc/0x770
[ 1689.792743][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[ 1689.798272][   T31]  ? __switch_to_asm+0x39/0x70
[ 1689.804762][   T31]  ? __switch_to_asm+0x33/0x70
[ 1689.809977][   T31]  ? __pfx_kthread+0x10/0x10
[ 1689.815050][   T31]  ret_from_fork_asm+0x1a/0x30
[ 1689.820311][   T31]  </TASK>
[ 1689.824735][   T31] INFO: task syz.2.7486:1994 blocked for more than 143 seconds.
[ 1689.834826][   T31]       Not tainted 6.16.0-syzkaller-12071-gf8262b8dadfa #0
[ 1689.842924][   T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 1689.852045][   T31] task:syz.2.7486      state:D stack:23080 pid:1994  tgid:1993  ppid:1564   task_flags:0x400140 flags:0x00004004
[ 1689.865098][   T31] Call Trace:
[ 1689.868673][   T31]  <TASK>
[ 1689.872956][   T31]  __schedule+0x1798/0x4cc0
[ 1689.877904][   T31]  ? validate_chain+0x897/0x2140
[ 1689.906954][   T31]  ? __lock_acquire+0xab9/0xd20
[ 1689.917525][   T31]  ? __pfx___schedule+0x10/0x10
[ 1689.922881][   T31]  ? schedule+0x91/0x360
[ 1689.927301][   T31]  schedule+0x165/0x360
[ 1689.931785][   T31]  schedule_timeout+0x9a/0x270
[ 1689.936860][   T31]  ? __pfx_schedule_timeout+0x10/0x10
[ 1689.943023][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1689.948588][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1689.954200][   T31]  ? wait_for_completion+0x267/0x5d0
[ 1689.960000][   T31]  wait_for_completion+0x2bf/0x5d0
[ 1689.966287][   T31]  ? __pfx_wait_for_completion+0x10/0x10
[ 1689.973246][   T31]  ? up_write+0x1c4/0x420
[ 1689.977879][   T31]  ? remove_client_context+0xc0/0x1e0
[ 1689.985006][   T31]  disable_device+0x1c6/0x320
[ 1689.990122][   T31]  ? __pfx_disable_device+0x10/0x10
[ 1689.996327][   T31]  __ib_unregister_device+0x2cb/0x3f0
[ 1690.005738][   T31]  ? __pfx_ib_device_get_by_index+0x10/0x10
[ 1690.013390][   T31]  ib_unregister_device_and_put+0xb8/0xf0
[ 1690.019567][   T31]  nldev_dellink+0x2d1/0x320
[ 1690.025190][   T31]  ? __pfx_nldev_dellink+0x10/0x10
[ 1690.030927][   T31]  ? apparmor_capable+0x137/0x1b0
[ 1690.036478][   T31]  ? bpf_lsm_capable+0x9/0x20
[ 1690.046449][   T31]  ? security_capable+0x7e/0x2e0
[ 1690.052784][   T31]  ? __pfx_nldev_dellink+0x10/0x10
[ 1690.058146][   T31]  rdma_nl_rcv+0x6ab/0x980
[ 1690.063456][   T31]  ? __pfx_rdma_nl_rcv+0x10/0x10
[ 1690.068709][   T31]  ? __lock_acquire+0xab9/0xd20
[ 1690.073906][   T31]  ? netlink_deliver_tap+0x2e/0x1b0
[ 1690.079346][   T31]  netlink_unicast+0x82c/0x9e0
[ 1690.084604][   T31]  ? __pfx_netlink_unicast+0x10/0x10
[ 1690.090087][   T31]  ? netlink_sendmsg+0x642/0xb30
[ 1690.095295][   T31]  ? skb_put+0x11b/0x210
[ 1690.099677][   T31]  netlink_sendmsg+0x805/0xb30
[ 1690.104885][   T31]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1690.110320][   T31]  ? aa_sock_msg_perm+0xf1/0x1d0
[ 1690.115728][   T31]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[ 1690.129691][   T31]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1690.135359][   T31]  __sock_sendmsg+0x21c/0x270
[ 1690.140237][   T31]  ____sys_sendmsg+0x505/0x830
[ 1690.145382][   T31]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1690.150933][   T31]  ? import_iovec+0x74/0xa0
[ 1690.155578][   T31]  ___sys_sendmsg+0x21f/0x2a0
[ 1690.160396][   T31]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1690.166044][   T31]  ? __fget_files+0x2a/0x420
[ 1690.170910][   T31]  ? __fget_files+0x3a0/0x420
[ 1690.175791][   T31]  __x64_sys_sendmsg+0x19b/0x260
[ 1690.181224][   T31]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 1690.186875][   T31]  ? rcu_is_watching+0x15/0xb0
[ 1690.192127][   T31]  ? do_syscall_64+0xbe/0x3b0
[ 1690.196973][   T31]  do_syscall_64+0xfa/0x3b0
[ 1690.202106][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1690.207515][   T31]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1690.213821][   T31]  ? clear_bhb_loop+0x60/0xb0
[ 1690.218708][   T31]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1690.224986][   T31] RIP: 0033:0x7f9049d8ebe9
[ 1690.229580][   T31] RSP: 002b:00007f904acbc038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1690.238426][   T31] RAX: ffffffffffffffda RBX: 00007f9049fb5fa0 RCX: 00007f9049d8ebe9
[ 1690.246791][   T31] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 000000000000000c
[ 1690.255048][   T31] RBP: 00007f9049e11e19 R08: 0000000000000000 R09: 0000000000000000
[ 1690.263482][   T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1690.271692][   T31] R13: 00007f9049fb6038 R14: 00007f9049fb5fa0 R15: 00007fffaa041938
[ 1690.279890][   T31]  </TASK>
[ 1690.284839][   T31] 
[ 1690.284839][   T31] Showing all locks held in the system:
[ 1690.300292][   T31] 2 locks held by kworker/u8:0/12:
[ 1690.305995][   T31] 1 lock held by khungtaskd/31:
[ 1690.309168][T19133] net_ratelimit: 14 callbacks suppressed
[ 1690.309185][T19133] bond2: (slave ip6gretap2): failed to get link speed/duplex
[ 1690.311081][   T31]  #0: ffffffff8e139ee0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[ 1690.311164][   T31] 4 locks held by kworker/u8:7/1336:
[ 1690.311177][   T31]  #0: ffff88801b2fe948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[ 1690.311230][   T31]  #1: ffffc900044ffbc0 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[ 1690.311282][   T31]  #2: ffffffff8f527b10 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf7/0x800
[ 1690.311338][   T31]  #3: ffff888073908700 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300
[ 1690.311401][   T31] 2 locks held by getty/5626:
[ 1690.409991][   T31]  #0: ffff88814d7890a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[ 1690.420216][   T31]  #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400
[ 1690.430832][   T31] 2 locks held by syz.2.7486/1994:
[ 1690.431501][ T2991] bond2: (slave ip6gretap2): failed to get link speed/duplex
[ 1690.436150][   T31]  #0: ffffffff99e619d8 (&rdma_nl_types[idx].sem){.+.+}-{4:4}, at: rdma_nl_rcv+0x302/0x980
[ 1690.453908][   T31]  #1: ffff888073908700 (&device->unregistration_lock){+.+.}-{4:4}, at: __ib_unregister_device+0x284/0x3f0
[ 1690.465619][   T31] 2 locks held by syz.0.8505/4613:
[ 1690.470966][   T31]  #0: ffffffff8f527b10 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x304/0x4d0
[ 1690.480485][   T31]  #1: ffff888073908700 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300
[ 1690.492082][   T31] 2 locks held by syz.6.9307/6771:
[ 1690.497369][   T31]  #0: ffffffff8f527b10 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x304/0x4d0
[ 1690.507214][   T31]  #1: ffff888073908700 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x39/0x300
[ 1690.518786][   T31] 
[ 1690.522198][   T31] =============================================
[ 1690.522198][   T31] 
[ 1690.533956][   T31] NMI backtrace for cpu 1
[ 1690.533975][   T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-syzkaller-12071-gf8262b8dadfa #0 PREEMPT(full) 
[ 1690.533997][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[ 1690.534008][   T31] Call Trace:
[ 1690.534016][   T31]  <TASK>
[ 1690.534025][   T31]  dump_stack_lvl+0x189/0x250
[ 1690.534055][   T31]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1690.534077][   T31]  ? __pfx__printk+0x10/0x10
[ 1690.534113][   T31]  nmi_cpu_backtrace+0x39e/0x3d0
[ 1690.534136][   T31]  ? __pfx_nmi_cpu_backtrace+0x10/0x10
[ 1690.534158][   T31]  ? __pfx__printk+0x10/0x10
[ 1690.534186][   T31]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[ 1690.534216][   T31]  nmi_trigger_cpumask_backtrace+0x17a/0x300
[ 1690.534239][   T31]  watchdog+0xf93/0xfe0
[ 1690.534268][   T31]  ? watchdog+0x1de/0xfe0
[ 1690.534297][   T31]  kthread+0x70e/0x8a0
[ 1690.534322][   T31]  ? __pfx_watchdog+0x10/0x10
[ 1690.534345][   T31]  ? __pfx_kthread+0x10/0x10
[ 1690.534368][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1690.534389][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1690.534409][   T31]  ? __pfx_kthread+0x10/0x10
[ 1690.534432][   T31]  ret_from_fork+0x3fc/0x770
[ 1690.534454][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[ 1690.534480][   T31]  ? __switch_to_asm+0x39/0x70
[ 1690.534501][   T31]  ? __switch_to_asm+0x33/0x70
[ 1690.534522][   T31]  ? __pfx_kthread+0x10/0x10
[ 1690.534544][   T31]  ret_from_fork_asm+0x1a/0x30
[ 1690.534582][   T31]  </TASK>
[ 1690.534589][   T31] Sending NMI from CPU 1 to CPUs 0:
[ 1690.571794][T19133] bond2: (slave ip6gretap2): failed to get link speed/duplex
[ 1690.691678][ T2991] bond2: (slave ip6gretap2): failed to get link speed/duplex
[ 1690.699108][    C0] NMI backtrace for cpu 0
[ 1690.699126][    C0] CPU: 0 UID: 0 PID: 12 Comm: kworker/u8:0 Not tainted 6.16.0-syzkaller-12071-gf8262b8dadfa #0 PREEMPT(full) 
[ 1690.699145][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[ 1690.699156][    C0] Workqueue: bat_events batadv_nc_worker
[ 1690.699179][    C0] RIP: 0010:check_preemption_disabled+0x63/0x120
[ 1690.699202][    C0] Code: 08 0f 85 cc 00 00 00 48 83 c4 10 5b 41 5e 41 5f 5d e9 41 ca 02 00 cc 48 c7 04 24 00 00 00 00 9c 8f 04 24 f7 04 24 00 02 00 00 <74> c8 65 4c 8b 3c 25 08 f0 9f 92 41 f6 47 2f 04 74 0a 41 83 bf 18
[ 1690.699218][    C0] RSP: 0018:ffffc90000117980 EFLAGS: 00000046
[ 1690.699232][    C0] RAX: 0000000000000000 RBX: 0000000000000202 RCX: 0000000080000000
[ 1690.699244][    C0] RDX: 0000000000000000 RSI: ffffffff8d9c8438 RDI: ffffffff8be32680
[ 1690.699255][    C0] RBP: fffffffffffffe38 R08: 0000000000000000 R09: ffffffff8b4645c2
[ 1690.699267][    C0] R10: dffffc0000000000 R11: ffffffff8b4644f0 R12: dffffc0000000000
[ 1690.699279][    C0] R13: ffffffff8b4645c2 R14: ffffffff8e139ee0 R15: ffff88801ce95a00
[ 1690.699292][    C0] FS:  0000000000000000(0000) GS:ffff888125c21000(0000) knlGS:0000000000000000
[ 1690.699306][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1690.699317][    C0] CR2: 00007ffdae38aef8 CR3: 0000000079d82000 CR4: 00000000003526f0
[ 1690.699332][    C0] Call Trace:
[ 1690.699340][    C0]  <TASK>
[ 1690.699351][    C0]  lock_release+0xbc/0x3e0
[ 1690.699376][    C0]  ? batadv_nc_worker+0xd2/0x610
[ 1690.699393][    C0]  batadv_nc_worker+0x28c/0x610
[ 1690.699411][    C0]  ? process_scheduled_works+0x9ef/0x17b0
[ 1690.699429][    C0]  process_scheduled_works+0xade/0x17b0
[ 1690.699458][    C0]  ? __pfx_process_scheduled_works+0x10/0x10
[ 1690.699483][    C0]  worker_thread+0x8a0/0xda0
[ 1690.699511][    C0]  kthread+0x70e/0x8a0
[ 1690.699530][    C0]  ? __pfx_worker_thread+0x10/0x10
[ 1690.699546][    C0]  ? __pfx_kthread+0x10/0x10
[ 1690.699565][    C0]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1690.699583][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1690.699600][    C0]  ? __pfx_kthread+0x10/0x10
[ 1690.699618][    C0]  ret_from_fork+0x3fc/0x770
[ 1690.699636][    C0]  ? __pfx_ret_from_fork+0x10/0x10
[ 1690.699655][    C0]  ? __switch_to_asm+0x39/0x70
[ 1690.699674][    C0]  ? __switch_to_asm+0x33/0x70
[ 1690.699692][    C0]  ? __pfx_kthread+0x10/0x10
[ 1690.699711][    C0]  ret_from_fork_asm+0x1a/0x30
[ 1690.699738][    C0]  </TASK>
[ 1690.700343][   T31] Kernel panic - not syncing: hung_task: blocked tasks
[ 1690.936244][   T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-syzkaller-12071-gf8262b8dadfa #0 PREEMPT(full) 
[ 1690.947686][   T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[ 1690.957729][   T31] Call Trace:
[ 1690.961000][   T31]  <TASK>
[ 1690.963928][   T31]  dump_stack_lvl+0x99/0x250
[ 1690.968509][   T31]  ? __asan_memcpy+0x40/0x70
[ 1690.973089][   T31]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1690.978275][   T31]  ? __pfx__printk+0x10/0x10
[ 1690.982865][   T31]  vpanic+0x281/0x750
[ 1690.986839][   T31]  ? __pfx_vpanic+0x10/0x10
[ 1690.991331][   T31]  ? preempt_schedule+0xae/0xc0
[ 1690.996179][   T31]  ? preempt_schedule_common+0x83/0xd0
[ 1691.001633][   T31]  panic+0xb9/0xc0
[ 1691.005348][   T31]  ? __pfx_panic+0x10/0x10
[ 1691.009780][   T31]  ? preempt_schedule_thunk+0x16/0x30
[ 1691.015150][   T31]  ? nmi_trigger_cpumask_backtrace+0x2bb/0x300
[ 1691.021293][   T31]  watchdog+0xfd2/0xfe0
[ 1691.025443][   T31]  ? watchdog+0x1de/0xfe0
[ 1691.029767][   T31]  kthread+0x70e/0x8a0
[ 1691.033828][   T31]  ? __pfx_watchdog+0x10/0x10
[ 1691.038506][   T31]  ? __pfx_kthread+0x10/0x10
[ 1691.043102][   T31]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1691.048299][   T31]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1691.053491][   T31]  ? __pfx_kthread+0x10/0x10
[ 1691.058079][   T31]  ret_from_fork+0x3fc/0x770
[ 1691.062662][   T31]  ? __pfx_ret_from_fork+0x10/0x10
[ 1691.067766][   T31]  ? __switch_to_asm+0x39/0x70
[ 1691.072526][   T31]  ? __switch_to_asm+0x33/0x70
[ 1691.077279][   T31]  ? __pfx_kthread+0x10/0x10
[ 1691.081862][   T31]  ret_from_fork_asm+0x1a/0x30
[ 1691.086627][   T31]  </TASK>
[ 1691.089893][   T31] Kernel Offset: disabled
[ 1691.094203][   T31] Rebooting in 86400 seconds..