last executing test programs: 7m31.854720353s ago: executing program 1 (id=15360): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)={0x24, 0x40, 0x107, 0x70ad2b, 0x0, {0x1, 0x7c}, [@nested={0xc, 0x2fc, 0x0, 0x1, [@nested={0x8, 0x1, 0x0, 0x1, [@generic="feff0000"]}]}, @nested={0x4, 0x2}]}, 0x24}, 0x1, 0x4000, 0x0, 0xc000}, 0x4040) 7m31.560311299s ago: executing program 1 (id=15364): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) close(0x3) (async) r1 = socket$pppoe(0x18, 0x1, 0x0) (async) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(r2, 0x89e3, &(0x7f00000005c0)={0x0, 0x0, 0xa, 0xb}) (async, rerun: 64) connect$pppoe(r1, &(0x7f0000000000)={0x18, 0x0, {0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x35}, 'macvlan1\x00'}}, 0x1e) (async, rerun: 64) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF_FLAGS(0xffffffffffffffff, 0x84, 0x7a, &(0x7f0000000140)={0x1, 0xffffffffffffffff, 0x80800}, &(0x7f00000001c0)=0xc) (async) r4 = socket(0x2, 0x80805, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=@newlink={0x48, 0x10, 0x1, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x421a2}, [@IFLA_IFNAME={0x14, 0x3, 'wlan0\x00'}, @IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0xfffffffc, 0x3}}]}]}]}, 0x48}}, 0x0) (async) sendmmsg$inet(r4, &(0x7f0000000200)=[{{&(0x7f0000000280)={0x2, 0x4e22, @private=0xa010101}, 0x10, &(0x7f0000000340)=[{&(0x7f0000000380)="9c", 0x1}], 0x1}}, {{&(0x7f00000003c0)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10, &(0x7f0000000400)=[{&(0x7f0000000440)="99", 0x1}], 0x1}}], 0x2, 0x48000) (async) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xc, &(0x7f0000000480)=@assoc_value={0x0}, &(0x7f00000004c0)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r4, 0x84, 0x23, &(0x7f0000000500)={r6, 0x2}, 0x8) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000540)={r6, 0x4, 0x20}, &(0x7f0000000580)=0xc) (async) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x1c, 0x0, 0x1, 0x70bd29, 0x4, {{}, {@val={0x8}, @void}}}, 0x5ea}, 0x1, 0x0, 0x0, 0x4804}, 0x80) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) (async, rerun: 64) r8 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="18000000", @ANYRES16=r7, @ANYBLOB="05f300000000000000002000000004000380"], 0x18}}, 0x0) 7m30.312949161s ago: executing program 1 (id=15375): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) close(0xffffffffffffffff) close(0xffffffffffffffff) close(0xffffffffffffffff) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r1, 0x4048587b, &(0x7f0000000780)={{r1, &(0x7f00000001c0)='%^\x00', 0x200081, &(0x7f0000000200)={@_ha_fsid={[0xfffff801, 0x61]}, {0xe3c, 0xa51e, 0x0, 0xff}}, 0xfffffff9, &(0x7f0000000240)={@_ha_fsid}, &(0x7f0000000280)=0x9}, 0x3, &(0x7f0000000700)=[{0x3, 0x4, &(0x7f00000002c0)='&\x00', &(0x7f0000000300)="37ced121dd2811686987833372b0f21506bbe7d9b0bdb8fcdfb3957d6d9897f4885ac99b01f057317f51413913a3d128837f21cf4f1dd4447c61abc2e5f814a7fdb30fba0e7dd1c95c1048c59ea4c25ce4e28805cb84d7c4d872ce801b8f06a20e98002bd4ee1b8cf55f675cccd17d7aa16bc42dc8720bb04ee112b8c687b5ac01a7a7cfdced81ee9eefaa2eac07ea4b51b6524884e74d9402155bc2ceceaae27fa5308ab5c8d5aca5a2f3811e7d78e968f1176b18df697335a9c4ab0cd4a6aacc1ec9fbd06a6b336bd74ee138af164e27dfbf203bdfd28cee013ccaa97d1073d718a0ec3f3735f48b5d1ffa0571e9ab0e690fdc", 0xf4, 0x20}, {0x3, 0x6, &(0x7f0000000400)='+^\\)@-/,+:\x00', &(0x7f0000000540)="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", 0xfb}, {0x2, 0x5, &(0x7f0000000640)='\x00', &(0x7f0000000680)="351f8acadd9620e0d2649e4fe680ea18069a7d3f4e8f2e484663209eab3b1fc074420ed5ed53c6a00301b89634cc361453b1a5ac0cf26858cb75257560dfe229cb20fcf34bf4d7a0368113174b302e4130a476af29b10bc3b2f5", 0x5a, 0x28}]}) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r2, 0x111, 0x1, 0x81, 0x4) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010141000000000000000a000007090001002d0a73797a31000000000900030073797a32000000001400000011"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x40000) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000440)={0x1f, 0xffff, 0x3}, 0x6) write(r3, &(0x7f0000000480)="2e000300010000", 0x7) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a540500000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000028050380180000800c000180060001"], 0x57c}, 0x1, 0x0, 0x0, 0x4000851}, 0x40) 7m30.094566326s ago: executing program 1 (id=15379): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001280)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x2}, [@NFTA_RULE_COMPAT={0x44, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x6c}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x5e}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x29}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0x2f}, @NFTA_RULE_COMPAT_PROTO_IPV4={0x8, 0x1, 0x1, 0x0, 0xff}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0xf9}, @NFTA_RULE_COMPAT_PROTO_IPV6={0x8, 0x1, 0x1, 0x0, 0x21}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELRULE={0x14, 0x8, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x6}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa0}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) 7m30.001728765s ago: executing program 1 (id=15381): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) listen(r0, 0x6d5) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="2800000014001901000000000000000228"], 0x28}, 0x1, 0xfffffffffffffff0}, 0x0) 7m29.853006225s ago: executing program 1 (id=15382): bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@arena={0x21, 0x0, 0x0, 0xc, 0x60400, 0xffffffffffffffff, 0x101, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x4}, 0x50) r0 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff, 0x2b, 0x0, @void}, 0x10) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000180)={0x2, 0x0, 0x0, @private1}, 0xf) bpf$LINK_DETACH(0x22, &(0x7f0000000040)=r0, 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x78, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @local}}, @IPSET_ATTR_TIMEOUT={0x8}, @IPSET_ATTR_CADT_FLAGS={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x78}}, 0x0) tee(r0, r2, 0x8000, 0x2) 7m14.789707913s ago: executing program 32 (id=15382): bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@arena={0x21, 0x0, 0x0, 0xc, 0x60400, 0xffffffffffffffff, 0x101, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x4}, 0x50) r0 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff, 0x2b, 0x0, @void}, 0x10) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000180)={0x2, 0x0, 0x0, @private1}, 0xf) bpf$LINK_DETACH(0x22, &(0x7f0000000040)=r0, 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x78, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @local}}, @IPSET_ATTR_TIMEOUT={0x8}, @IPSET_ATTR_CADT_FLAGS={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x78}}, 0x0) tee(r0, r2, 0x8000, 0x2) 14.742479758s ago: executing program 0 (id=18510): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x44, 0x44, 0x4, [@var={0x2, 0x0, 0x0, 0x11, 0x4}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x1}}, @func_proto={0x2, 0x0, 0x0, 0x12, 0x2}, @var={0x2, 0x0, 0x0, 0xe, 0x3}]}, {0x0, [0x0, 0x61]}}, 0x0, 0x60}, 0x20) syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_DEL_KEY(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x100}, 0x4) r1 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000140)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @empty, 0x0, 0x8, 0x80000001}}) r2 = socket$inet6(0xa, 0x3, 0x3) connect$inet6(r2, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44}, 0x0) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0xd, 0x0, 0x0) readv(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000380)=""/244, 0xf4}], 0x1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000480)={'syztnl1\x00', &(0x7f00000004c0)={'ip6tnl0\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0x0, @dev, @private0={0xfc, 0x0, '\x00', 0x1}, 0x20, 0x0, 0x10}}) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@arena={0x21, 0x0, 0x0, 0x3b, 0x20400, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0, 0x4, 0x4, 0x2}, 0x50) 13.736528016s ago: executing program 0 (id=18517): socketpair(0x2a, 0x2, 0xa, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r1, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f0000000080)={0x188, 0x0, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x79}, {0x6, 0x16, 0x5}, {0x5, 0x12, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x7}, {0x6, 0x16, 0x3}, {0x5, 0x12, 0x1}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x9}, {0x6, 0x16, 0xff}, {0x5}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0xfff}, {0x6, 0x16, 0x4}, {0x5}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x6}, {0x6, 0x16, 0x171a}, {0x5}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x401}, {0x6, 0x16, 0x1}, {0x5}}]}, 0x188}, 0x1, 0x0, 0x0, 0x8001}, 0x1) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r0, &(0x7f0000000600)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000005c0)={&(0x7f0000000380)={0x1f0, r2, 0x1, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IE={0x12, 0x2a, [@channel_switch={0x25, 0x3, {0x1, 0x7c, 0xaf}}, @mesh_config={0x71, 0x7, {0x1, 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x0, 0x69}}]}, @NL80211_ATTR_IE={0x1a4, 0x2a, [@measure_req={0x26, 0x22, {0xe, 0x8, 0x6, "78743e27f9efa0ca6d70431d068ce65afc7f4872b3c66e3ee127d7e7309322"}}, @perr={0x84, 0xe9, {0x4, 0xf, [{{}, @broadcast, 0xfff, @void, 0x1c}, {{0x0, 0x1}, @device_a, 0x7fffffff, @value, 0x42}, {{}, @device_b, 0x9, @void, 0xf}, {{}, @device_a, 0xa, @void, 0x30}, {{}, @device_a, 0x7, @void, 0x8}, {{}, @device_a, 0x5, @void, 0x11}, {{}, @device_b, 0x5, @void, 0x4}, {{}, @device_a, 0x2, @void, 0x4}, {{}, @broadcast, 0x6, @void, 0x2a}, {{0x0, 0x1}, @device_b, 0x4, @value=@device_b, 0x7}, {{0x0, 0x1}, @broadcast, 0xffffffff, @value=@device_b}, {{0x0, 0x1}, @broadcast, 0x4, @value=@broadcast, 0x9}, {{0x0, 0x1}, @device_b, 0x6, @value=@broadcast, 0x3f}, {{0x0, 0x1}, @device_b, 0x8, @value=@broadcast, 0x2}, {{}, @device_b, 0xe7, @void, 0x29}]}}, @erp={0x2a, 0x1, {0x1, 0x1}}, @prep={0x83, 0x25, {{0x0, 0x1}, 0x8, 0x5, @broadcast, 0x0, @value=@device_b, 0xffffffff, 0x0, @broadcast, 0x81}}, @tim={0x5, 0x65, {0x58, 0x7b, 0x0, "e68a598dc72d76da21c4cf7c3b55584c849151cf38d8a445b14eda575ed1caf1b98f06ddcaf8cc4ec911c2253b0ea7fd15f3431b293126d10c8e1fe3d521c4d24cfdbb77e0e2b32e11a793a29fcc8d425315a58b7481ac732229b561dd3788ee9e5d"}}]}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x50}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x14}]}, 0x1f0}, 0x1, 0x0, 0x0, 0x4}, 0x4) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r5, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x44, 0x0, 0x4, 0x70bd26, 0x25dfdbff, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x1}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x21}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xe}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x20004000) sendmsg$NL80211_CMD_ADD_TX_TS(r1, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x48, r2, 0x100, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x4, 0x25}}}}, [@NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x4}, @NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x5}, @NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0x2}, @NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0x8}]}, 0x48}}, 0x0) r6 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000900), r5) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x1c, r6, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x81}, 0x10) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x1c, r2, 0x2, 0x70bd29, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_4ADDR={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x5) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r1, 0xf503, 0x0) r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000b40), r5) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000000c00)={&(0x7f0000000b00), 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x2c, r7, 0x200, 0x70bd2a, 0x25dfdbff, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x12c}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000004}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000c40), 0x80000, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r8, &(0x7f0000000e40)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000e00)={&(0x7f0000000cc0)={0x118, r2, 0x1, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x0, 0x6}}}}, [@NL80211_ATTR_FRAME_MATCH={0xe8, 0x5b, "f0c548a4639d9f2fcb6981c0419c28323ab18a1169d3a94dfefb59a6e3336a08607fd5efaec3ea7fa10ad735cfbc5aaac814291e4567868a0126fab7f792869f85e6e141db368e1924bdbee8ef475fadbb4400dcd2cfce168f5470d04c1894391404775b088b8eebfb304fd1feb26ab820bf6f9dcb9880ab5f1ceff0a63c9f2ba8d75bcd8fbc85cb88ee66c605b883826d1b6ed6fb562362935547b264be2071130d18aa3b6d181ff0b2227f1a34105f17c8d6a214cad041f402169b6994a340c43988ef99e06630a8b6c1c5409e0cc88138297b319296b7927de35a7c6a9627cca9c8bd"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x5}]}, 0x118}, 0x1, 0x0, 0x0, 0x4004804}, 0x8000) ioctl$F2FS_IOC_SET_PIN_FILE(r1, 0x4004f50d, &(0x7f0000000e80)) syz_genetlink_get_family_id$fou(&(0x7f0000000ec0), r8) r9 = syz_genetlink_get_family_id$gtp(&(0x7f0000000f40), r1) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000001000)={'syztnl0\x00', &(0x7f0000000f80)={'syztnl0\x00', 0x0, 0x2f, 0xe3, 0x7, 0x6, 0x2a, @dev={0xfe, 0x80, '\x00', 0x3b}, @mcast2, 0x1, 0x7800, 0x10000, 0xfffff000}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f00000010c0)={'ip6tnl0\x00', &(0x7f0000001040)={'ip6gre0\x00', 0x0, 0x29, 0x2, 0x1, 0xd351, 0x8, @dev={0xfe, 0x80, '\x00', 0x1b}, @mcast1, 0x8, 0x700, 0xdfe, 0x4}}) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f00000011c0)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001180)={&(0x7f0000001100)={0x4c, r9, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x20}}, @GTPA_PEER_ADDR6={0x14, 0xb, @private1={0xfc, 0x1, '\x00', 0x1}}, @GTPA_LINK={0x8, 0x1, r10}, @GTPA_LINK={0x8, 0x1, r11}, @GTPA_TID={0xc, 0x3, 0x2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$nl_route(r0, &(0x7f0000001300)={&(0x7f0000001200)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000012c0)={&(0x7f0000001240)=@bridge_getneigh={0x54, 0x1e, 0x3, 0x70bd28, 0x25dfdbfd, {0x7, 0x0, 0x0, 0x0, 0x400, 0x4008}, [@IFLA_MAP={0x24, 0xe, {0x9, 0x3, 0x7f, 0xfffc, 0x4, 0x3}}, @IFLA_CARRIER_CHANGES={0x8, 0x23, 0x2}, @IFLA_EVENT={0x8, 0x2c, 0x4}]}, 0x54}, 0x1, 0x0, 0x0, 0x20040001}, 0x40d4) sendmsg$NBD_CMD_RECONFIGURE(r5, &(0x7f00000014c0)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001480)={&(0x7f0000001380)={0xd0, r7, 0x20, 0x70bd2a, 0x25dfdbff, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x6a}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x800}, @NBD_ATTR_BACKEND_IDENTIFIER={0x11, 0xa, 'NLBL_CIPSOv4\x00'}, @NBD_ATTR_SOCKETS={0x64, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r0}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r0}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r0}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r1}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r0}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r1}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r0}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r0}}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x2}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x8000000000000000}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x1ff}]}, 0xd0}}, 0x4000) sendmsg$NLBL_MGMT_C_REMOVE(r5, &(0x7f00000015c0)={&(0x7f0000001500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001580)={&(0x7f0000001540)={0x38, 0x0, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @local}}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}]}, 0x38}, 0x1, 0x0, 0x0, 0x810}, 0x4008800) sendmsg$xdp(r0, &(0x7f00000017c0)={&(0x7f0000001600)={0x2c, 0x9, r10, 0xe}, 0x10, &(0x7f0000001780)=[{&(0x7f0000001640)="57e95e1307694c969923596b2f595d99a3a0b189d672d2ef0a16a3ac3750f488e746d430afd10a04dd5786059d85b7db88870f61592f845816fccc74db2ef410ad7a2b663557912cdba90dbcd0503ef0d1337a029241f3d2de73fc32256c6427b18a8ca528049bac80715bc1077efd2b189c5c5c44f5c5677e023815342cc6b40e850148ea3e923614f1af879e35aee9dac1d3ca52f0863e5104d1063527b1badcbc267e8b7ccd9cd6c173672287545d", 0xb0}, {&(0x7f0000001700)="a59e4c806144944f08a32e23cd78bb1bfb95302d7556d9a595a7595c5b2f444cfdd306ced9bb5ce28049b5a2d1dc4f87b2abbcb300956fd3d8ca0de09cf7fe5d2112a8e23b4d2bc3fbad971897e0cbd218457a654e0c818dc126144559d67d9c8e4c76e737211c6709bed66eb4f58f5760ff5dd8f70261ad05d4ed971de5c75e", 0x80}], 0x2, 0x0, 0x0, 0x4044010}, 0x41) ioctl(r4, 0x3, &(0x7f0000001800)="c36686cf39d84abfcda231104b291be9") sendmsg$NL802154_CMD_SET_CHANNEL(r5, &(0x7f0000001940)={&(0x7f0000001840)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001900)={&(0x7f00000018c0)={0x24, 0x0, 0x816, 0x70bd2a, 0x25dfdbfb, {}, [@NL802154_ATTR_PAGE={0x5, 0x7, 0x16}, @NL802154_ATTR_PAGE={0x5, 0x7, 0xd}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x40011) 13.332309268s ago: executing program 0 (id=18519): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ip6gretap0\x00'}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x58, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x406, 0x0, 0xc15}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0xffffffffffffff4c, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @private1={0xfc, 0x1, '\x00', 0x1}}]}}}, @IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}}]}, 0x58}, 0x1, 0x0, 0x0, 0x28001}, 0x8000) 12.910853339s ago: executing program 0 (id=18522): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x4a0, 0x288, 0x5802, 0x294, 0x288, 0x294, 0x3d0, 0x325, 0x378, 0x3d0, 0x378, 0x3, 0x0, {[{{@uncond, 0x0, 0x220, 0x288, 0x52020000, {}, [@common=@inet=@hashlimit2={{0x150}, {'netpci0\x00', {0xfffffffffffffffd, 0x4, 0x0, 0x0, 0x0, 0x6, 0x7fffffff, 0x40, 0x78}}}, @common=@ipv6header={{0x28}, {0x88, 0xa}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x8, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x120, 0x148, 0x0, {}, [@common=@dst={{0x48}, {0x1, 0x0, 0x0, [0x8, 0x7, 0x8, 0x6, 0x101, 0x800, 0x8, 0x8000, 0x4a, 0x9, 0xff, 0x1000, 0x1, 0x8, 0x4c8, 0xa68], 0xa}}, @common=@frag={{0x30}, {[0x3]}}]}, @common=@unspec=@NFQUEUE0={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x500) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f0000000040)="5766b1b827f6003300", 0x10) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) listen(r1, 0x5) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000380)={@multicast2, @empty, @broadcast}, 0xc) r2 = socket$inet_smc(0x2b, 0x1, 0x0) syz_emit_ethernet(0x83, &(0x7f00000002c0)=ANY=[@ANYBLOB="0180c2000000ffffffffffff86dd60ecff80004d1101fc0000000000000000000000000000000000000000070000000000000000000100004e22004d9078f7a8080887faa66d31ffb9d83063e4f63a5b1fc73bb065e1eeafb27ee706f0cb741342588d0ad1c71e67bf4a203e6c1f721856178394815bca6bb213639ed583dece835a51fa9c5a0767"], 0x0) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) shutdown(r1, 0x0) 11.760046366s ago: executing program 0 (id=18529): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB, @ANYRES32=r3, @ANYBLOB="08002600851600000a00180000000000000000001c005a80180001801400"], 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 11.020027456s ago: executing program 0 (id=18532): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c00000029000100000000000000000002000000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 6.058179485s ago: executing program 5 (id=18565): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000002100), 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x8, &(0x7f0000000000)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}]}, &(0x7f0000000640)='syzkaller\x00', 0x7, 0xf9, &(0x7f0000000080)=""/249}, 0x70) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 5.812431964s ago: executing program 5 (id=18568): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000", @ANYRES32=r3, @ANYBLOB="08002600851600000a00180000000000000000001c005a80180001801400"], 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 5.495890603s ago: executing program 5 (id=18571): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x1234, @loopback}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x4, 0x4, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1e, 0x11, &(0x7f00000004c0)=ANY=[@ANYBLOB="bf16000000000000620afcff00000000bfa200000000000007020000fcffffff1851000000000000000000000000000085000000010000001500070000000000bf07000000000000bf61000000000000bf72000000000000b703000000000000850000007c000000bf710000000000008500000056000000b70000000100000095"], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[r1], 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, &(0x7f0000000680)='\x00\x00\x00\x00\x00\x00\x00\x00\n', 0x0}, 0x50) 5.392976685s ago: executing program 5 (id=18572): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(0x3) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r2, &(0x7f0000000040)=[{{&(0x7f00000000c0)={0xa, 0x4e22, 0x7fff, @loopback, 0x5}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000000180)='g', 0x1}], 0x1}}, {{&(0x7f0000000500)={0xa, 0x4e20, 0x8, @private1={0xfc, 0x1, '\x00', 0x1}, 0x3}, 0x1c, &(0x7f0000000200)=[{&(0x7f0000000240)="1b", 0x1}], 0x1}}], 0x2, 0x40) sendto$inet6(r2, &(0x7f0000000280)="8b", 0x34000, 0x0, &(0x7f00000002c0)={0xa, 0x0, 0x0, @private1}, 0x1c) socket$inet6_tcp(0xa, 0x1, 0x0) shutdown(r2, 0x1) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f0000000380)=0xffff1884, 0x4) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(0xffffffffffffffff, 0x28, 0x2, 0x0, 0x0) socket$inet(0x2, 0x4, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="c4000000190001000000000000000000e00000020000000000000000000000000000000000000000000000000000000000000000000000000a00000087000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000500000000000000fbffffffffffffff0000000000000000000000000000400000000000000000020000000000000000020000000000000000000000000000000c0015006dc7350002"], 0xc4}, 0x1, 0x0, 0x0, 0x4000015}, 0x2c000010) 4.331894062s ago: executing program 5 (id=18583): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newtaction={0x98, 0x30, 0x301, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x84, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0x2a}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20}]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0x30, 0x0, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000400)={0x28, r2, 0x1, 0x70bd2a, 0x2, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xfffffffffffffffd}]}, 0x28}, 0x1, 0x0, 0x0, 0x40800}, 0x4) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x10, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8ab8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000010000000850000006900000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r4, 0x0, 0xe, 0x0, &(0x7f0000000380)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$packet(0x11, 0x2, 0x300) 3.10902862s ago: executing program 5 (id=18590): socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=@bridge_dellink={0x34, 0x13, 0x1, 0x70bd25, 0x25dfdbfd, {0x7, 0x0, 0x0, r3, 0x20004, 0x9118}, [@IFLA_AF_SPEC={0x14, 0x1a, 0x0, 0x1, [@AF_INET={0x10, 0x4, 0x0, 0x1, {0xc, 0x3, 0x0, 0x1, [{0x8, 0x96, 0x0, 0x0, 0xe5e7}]}}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000001}, 0x40000) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000006300)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000390000000000000000000000850000004100000085000000a000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r5, r4, 0x25, 0x2, @void}, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xc}]}, @NFT_MSG_NEWSETELEM={0x4c, 0xc, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x24, 0x3, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x8}, @NFTA_SET_ELEM_EXPRESSIONS={0x18, 0xb, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @counter={{0x10}, @val={0x4}}}]}]}]}]}], {0x14, 0x10}}, 0xd0}}, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r12, 0x6, 0x2, &(0x7f00000004c0)=0x7ff, 0x4) bind$inet6(r12, &(0x7f0000000500)={0xa, 0x8000002, 0x2004}, 0x1c) sendto$inet6(r12, 0x0, 0x0, 0x220080c1, &(0x7f0000000540)={0xa, 0x2, 0x2, @loopback, 0xfffffffd}, 0x1c) sendto$inet6(r12, &(0x7f00000006c0)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0) splice(r12, 0x0, r11, 0x0, 0x406f413, 0x0) r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x6, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000001c00000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000100)={r13, r8, 0x25, 0x0, @val=@target_btf_id=0xffffffffffffffff}, 0x14) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@setlink={0x28, 0x13, 0x1, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, r10, 0x41014, 0x54c1f}, [@IFLA_MASTER={0x8, 0xa, r8}]}, 0x28}}, 0x20040000) 2.974975924s ago: executing program 4 (id=18593): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(0x3) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r2, &(0x7f0000000040)=[{{&(0x7f00000000c0)={0xa, 0x4e22, 0x7fff, @loopback, 0x5}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000000180)='g', 0x1}], 0x1}}, {{&(0x7f0000000500)={0xa, 0x4e20, 0x8, @private1={0xfc, 0x1, '\x00', 0x1}, 0x3}, 0x1c, &(0x7f0000000200)=[{&(0x7f0000000240)="1b", 0x1}], 0x1}}], 0x2, 0x40) sendto$inet6(r2, &(0x7f0000000280)="8b", 0x34000, 0x0, &(0x7f00000002c0)={0xa, 0x0, 0x0, @private1}, 0x1c) socket$inet6_tcp(0xa, 0x1, 0x0) shutdown(r2, 0x1) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f0000000380)=0xffff1884, 0x4) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(0xffffffffffffffff, 0x28, 0x2, 0x0, 0x0) socket$inet(0x2, 0x4, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="c4000000190001000000000000000000e00000020000000000000000000000000000000000000000000000000000000000000000000000000a00000087000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000500000000000000fbffffffffffffff0000000000000000000000000000400000000000000000020000000000000000020000000000000000000000000000000c0015006dc7350002"], 0xc4}, 0x1, 0x0, 0x0, 0x4000015}, 0x2c000010) 2.302304912s ago: executing program 4 (id=18598): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400c081}, 0x0) 2.16165701s ago: executing program 4 (id=18600): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000080)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000380)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000440)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000480)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000580)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x48, 0x0, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_IFTYPE={0x8, 0x5, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_PHY={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x8010}, 0x4000040) sendmmsg$alg(r3, &(0x7f00000000c0)=[{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)="13050b249d4ec4744f3c26e3653a77725fbac5b82ef06586b41dc10b9b457613b3ff7f303f41e812bba19e1b24cbc3774f930241b7d889b3861c150efb87377231c07e9a1170aff7c696cb66", 0x4c}], 0x1, 0x0, 0x0, 0x81817f961ce36e31}], 0x1, 0x4044800) recvmsg(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000240)=""/75, 0x4b}, {&(0x7f00000002c0)=""/105, 0x69}], 0x2}, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000400)={0x28, r1, 0x1, 0x70bd2a, 0x2, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xfffffffffffffffd}]}, 0x28}, 0x1, 0x0, 0x0, 0x40800}, 0x4) 2.066876358s ago: executing program 3 (id=18601): r0 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r0, 0x89b0, &(0x7f0000000080)={'bond0\x00', &(0x7f00000000c0)=@ethtool_channels={0x1, 0x0, 0x0, 0xfffffffd}}) r1 = bpf$LINK_GET_FD_BY_ID(0x1e, 0x0, 0x0) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000180)={r1}, 0x8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, 0x0}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000340)=0x9, 0x4) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000380)={0x1, 0x8000}, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) sendto$packet(r3, &(0x7f0000000400)="0b03feff4f12021202004788aa96a13bb1000011000088ca1a00", 0x1fffc, 0x0, &(0x7f0000000440)={0x11, 0x0, r4}, 0x14) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x3, &(0x7f00000005c0)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000600)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r5, 0x8, &(0x7f0000000640)={0x0, 0x1}, 0x1}, 0x94) pipe(0x0) r6 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000b80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000c40)=@newqdisc={0x40, 0x24, 0xd0f, 0x400000, 0x25dfdbfa, {0x60, 0x0, 0x0, r8, {0x0, 0xd}, {0xffff, 0xffff}, {0xffff, 0x2}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x14, 0x2, [@TCA_HHF_ADMIT_BYTES={0x8, 0x5, 0x3}, @TCA_HHF_EVICT_TIMEOUT={0x8, 0x6, 0x2ee5}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40001}, 0x0) r9 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r9, &(0x7f0000000c80)={0xa, 0x4e21, 0x0, @empty}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r9, 0x84, 0x9, &(0x7f0000000d00)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xb3550aa4ba878396}, 0x9c) setsockopt$inet_MCAST_MSFILTER(r6, 0x0, 0x30, 0x0, 0x410) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@bloom_filter={0x1e, 0x8, 0xd2e, 0x5, 0x40180, r2, 0xd, '\x00', 0x0, r2, 0x0, 0x2, 0x0, 0xf}, 0x50) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000a40)=@bpf_ext={0x1c, 0xd, &(0x7f0000000dc0)=ANY=[@ANYBLOB="ac51030000000400000000000000ff000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000b1050000850000000600000085100000f8fffffff4f5b1f7e02b6a00dbbf0d20deddcaec22cb563ce18b1fc7a6f15292614bc9fb1bcab348"], &(0x7f0000000300)='syzkaller\x00', 0x8, 0x0, 0x0, 0x40f00, 0x27, '\x00', r4, 0x0, r5, 0x8, &(0x7f00000008c0)={0x6, 0x3}, 0x8, 0x10, &(0x7f0000000900)={0x4, 0xd, 0x9, 0x2}, 0x10, 0x2b62f, r2, 0x4, &(0x7f00000009c0)=[r10], &(0x7f0000000a00)=[{0x5, 0x4, 0x3, 0xa}, {0x1, 0x1, 0x3, 0x8}, {0x4, 0x2, 0xf}, {0x0, 0x101, 0x6, 0xa}], 0x10, 0x2}, 0x94) socket$inet6_udp(0xa, 0x2, 0x0) r11 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), r2) sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x840}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="00022bbd7000fcdbdf25010000000000000008410000004c0018000000307564700000000000000000000000000000000000000000000000e5ffffffffffffff000000000000000000907200"/98], 0x68}, 0x1, 0x0, 0x0, 0x800}, 0x8000) 1.893509928s ago: executing program 3 (id=18602): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000200)=@raw={'raw\x00', 0x4001, 0x3, 0x398, 0x230, 0x700001b, 0x148, 0x230, 0x148, 0x340, 0x206, 0x240, 0x340, 0x240, 0x7fffffe, 0x0, {[{{@ip={@local, @rand_addr, 0x0, 0x0, 'tunl0\x00', 'bond_slave_1\x00', {0xff}}, 0x1ea, 0x1e8, 0x230, 0x0, {0x390, 0x8f00}, [@common=@inet=@hashlimit2={{0x150}, {'pim6reg1\x00', {0x5, 0x1ff, 0x1, 0x1, 0x1, 0x100, 0x1, 0x88, 0x20}, {0x8}}}, @common=@inet=@socket2={{0x28}, 0x4}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x8, 0x9, 'snmp\x00', {0xc000}}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x4, [0x3, 0x6, 0x2, 0xa, 0x6], 0x2, 0x2}, {0xffffffffffffffff, [0x0, 0x0, 0x0, 0x0, 0x1], 0x5, 0x1}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f8) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0xffff, 0x0, 0x4000000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0xea}]}}}, @IFLA_IFNAME={0x14, 0x3, 'xfrm0\x00'}]}, 0x50}}, 0x0) 1.667144843s ago: executing program 2 (id=18604): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000044000000", @ANYRES32=r3, @ANYBLOB="08002600851600000a00180000000000000000001c005a80180001801400"], 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 1.52897741s ago: executing program 4 (id=18605): r0 = epoll_create1(0x0) ioctl$XFS_IOC_FSBULKSTAT_SINGLE(r0, 0xc0205866, &(0x7f0000000480)={&(0x7f0000000280)=0x200, 0x0, &(0x7f00000002c0)=[{}, {}], &(0x7f0000000440)}) (async) r1 = socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='devices.list\x00', 0x26e1, 0x0) close(0x3) (async) r5 = socket$inet_tcp(0x2, 0x1, 0x6) setsockopt$inet_tcp_buf(r5, 0x6, 0x1f, &(0x7f0000000100)='espintcp', 0x8) (async) sendmsg$NL80211_CMD_DEL_INTERFACE(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x28, 0x0, 0x100, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x2, 0x53}}}}}, 0xfffd}, 0x1, 0x0, 0x0, 0x800}, 0x40) (async) ioctl$AUTOFS_IOC_EXPIRE(r2, 0x810c9365, &(0x7f00000004c0)={{0x1ff, 0x2}, 0x100, './file0\x00'}) (async) ioctl$XFS_IOC_GET_RESBLKS(r4, 0x80105873, &(0x7f0000000600)) (async) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=@newlink={0x48, 0x10, 0x503, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21111, 0x8831}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_MACSEC_CIPHER_SUITE={0xc, 0x4, 0x80c20001000004}]}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x48}, 0x1, 0x0, 0x0, 0x48890}, 0x4000) 1.469167344s ago: executing program 3 (id=18606): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r2, @ANYBLOB="0c00990003e70000000000000800a000ea15000008009f0003000000080026000816"], 0x40}}, 0x0) 1.465190714s ago: executing program 2 (id=18607): r0 = socket(0xf, 0x1, 0x7) bind$vsock_stream(r0, &(0x7f0000000040), 0x10) listen(r0, 0x0) r1 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r1, &(0x7f0000000080), 0x10) setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f0000000180)={0x1, 0x5}, 0x8) sendmmsg(r1, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000002080)=[{&(0x7f0000001d80)="16", 0x1}], 0x1}}], 0x1, 0x24008094) close(0x3) close(0x4) socket$netlink(0x10, 0x3, 0x7) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f00000000c0)={0x1d, r4, 0x0, {0x2, 0xf0, 0x4}, 0xfe}, 0x18) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x74, r4, {0x2, 0x8}, {0xf, 0xc}, {0x1}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x2004c016}, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=@newspdinfo={0x1c, 0x24, 0x21, 0x0, 0x0, 0x0, [@XFRMA_SPD_IPV6_HTHRESH={0x6}]}, 0x1c}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f0000000300)={'tunl0\x00', &(0x7f0000000240)={'gretap0\x00', r4, 0x8000, 0x7800, 0x10001, 0x8, {{0x27, 0x4, 0x0, 0x2, 0x9c, 0x67, 0x0, 0x9, 0x0, 0x0, @remote, @private=0xa010102, {[@end, @cipso={0x86, 0x3d, 0x3, [{0x0, 0x11, "08f6c7191148ff9eeadd772eca6d2c"}, {0x7, 0x2}, {0x6, 0xb, "de00aa0581698fa81b"}, {0x2, 0x2}, {0x5, 0x9, "2fa916e8816365"}, {0x7, 0xe, "3b73fefc3191471583c8b65d"}]}, @cipso={0x86, 0x48, 0x0, [{0x7, 0x5, "d1582f"}, {0x0, 0x11, "f2b0a884e6eb26b248a85a2d54a1ff"}, {0x7, 0xa, "0338b1d84df0ffa7"}, {0x0, 0x4, '{.'}, {0x5, 0x10, "698479719193b7bcf4928b58fbc6"}, {0x0, 0xe, "094c27a8902d3f3a9770a180"}]}]}}}}}) 1.256673015s ago: executing program 4 (id=18608): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(0x3) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r2, &(0x7f0000000040)=[{{&(0x7f00000000c0)={0xa, 0x4e22, 0x7fff, @loopback, 0x5}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000000180)='g', 0x1}], 0x1}}, {{&(0x7f0000000500)={0xa, 0x4e20, 0x8, @private1={0xfc, 0x1, '\x00', 0x1}, 0x3}, 0x1c, &(0x7f0000000200)=[{&(0x7f0000000240)="1b", 0x1}], 0x1}}], 0x2, 0x40) sendto$inet6(r2, &(0x7f0000000280)="8b", 0x34000, 0x0, &(0x7f00000002c0)={0xa, 0x0, 0x0, @private1}, 0x1c) shutdown(r2, 0x1) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f0000000380)=0xffff1884, 0x4) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(0xffffffffffffffff, 0x28, 0x2, 0x0, 0x0) socket$inet(0x2, 0x4, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="c4000000190001000000000000000000e00000020000000000000000000000000000000000000000000000000000000000000000000000000a00000087000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000500000000000000fbffffffffffffff0000000000000000000000000000400000000000000000020000000000000000020000000000000000000000000000000c0015006dc7350002"], 0xc4}, 0x1, 0x0, 0x0, 0x4000015}, 0x2c000010) 1.178152721s ago: executing program 3 (id=18609): socket$nl_route(0x10, 0x3, 0x0) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_BSS(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)={0x24, r0, 0x1, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0xcc}]}, 0x24}, 0x1, 0x0, 0x0, 0x20040845}, 0x8010) 1.151879572s ago: executing program 2 (id=18610): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400c081}, 0x0) 964.295245ms ago: executing program 2 (id=18611): r0 = socket(0x10, 0x803, 0x0) bind$netlink(r0, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000600)="2e00000010008188040f80ec59acbc0413a181000b00000000010000000000000e000a000f000000028002002d1f", 0x2e}], 0x1}, 0x0) getsockname$packet(r0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x40d, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, 0x100, 0x4}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x4}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40040}, 0x40100) r3 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}}, 0x0) (fail_nth: 6) 891.614124ms ago: executing program 3 (id=18612): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2}, 0x94) r0 = accept$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @local}, &(0x7f0000000040)=0x1c) r1 = socket(0x1e, 0x805, 0x0) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x71, 0xffffffffffffffff, 0x46e4c000) connect$tipc(r1, &(0x7f0000000080)=@id, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000140)={0x0, @in={{0x2, 0x4e23, @private=0xa010101}}, [0x3, 0x9, 0xffffffff, 0x81, 0x5, 0x2, 0x46a, 0x1, 0xb7c4, 0x4, 0x97, 0x8, 0xa, 0x6299c512, 0x1]}, &(0x7f0000000240)=0x100) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000280)={r2, 0x200, 0x3, [0xd, 0x7f, 0x4]}, 0xe) 638.80296ms ago: executing program 3 (id=18613): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, 0x0, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) listen(r0, 0x5) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000380)={@multicast2, @empty, @broadcast}, 0xc) r1 = socket$inet_smc(0x2b, 0x1, 0x0) syz_emit_ethernet(0x83, &(0x7f00000002c0)=ANY=[@ANYBLOB="0180c2000000ffffffffffff86dd60ecff80004d1101fc0000000000000000000000000000000000000000070000000000000000000100004e22004d9078f7a8080887faa66d31ffb9d83063e4f63a5b1fc73bb065e1eeafb27ee706f0cb741342588d0ad1c71e67bf4a203e6c1f721856178394815bca6bb213639ed583dece835a51fa9c5a0767"], 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) shutdown(r0, 0x0) 215.05222ms ago: executing program 4 (id=18614): bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB], 0x50) r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_int(r0, 0x29, 0x3, 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, 0x0, 0x0) sendmsg$nl_generic(r1, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000480)) sendmsg$nl_route(r3, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8004010}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, 0x0, 0x0) vmsplice(r5, 0x0, 0x0, 0x2) r6 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r6, 0x8922, &(0x7f0000000580)={'dummy0\x00'}) sendmsg$inet(r2, &(0x7f00000005c0)={0x0, 0xffc3, &(0x7f0000000600)=[{&(0x7f0000000640)="5c00000013006bcd9e3fe3dc6e48aa31086b8703130000001f03000000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4000004) socket$nl_route(0x10, 0x3, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000002cc0)=ANY=[@ANYBLOB="0e010000040000010800000005fe64ef8e031d66160eba6a6ebcd7e6c35623df19bf9a88a597d8d579d85a65b5994e42bbd836c31a161d297dd31c36ba3c621253ea20911ba6024a4718576c3ae380962e38f5b663823a18519ab161cc78ef8278854db78dc93e7115e5acdd3bf26e22463674b2188cb4c108e3944eb5fd9b7c02b4aea11bbddfafb0b05a4e1bf8a3f02181d6189dd60178a7e4bea20bb6027212a2ead562adc6ce52db5e1dbb81f1f215b6819e3974de8bc172a4", @ANYRESHEX=r0], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r7}, &(0x7f0000000340), &(0x7f0000000380)}, 0x20) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x14048001}, 0x4000) sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x1, 0x2, 0x201, 0x0, 0x0, {0xa, 0x0, 0x1}, [@CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x1}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x8}]}, 0x24}}, 0x20000004) 48.118162ms ago: executing program 2 (id=18615): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="8b330000060000000b000000000008000300", @ANYRES32=0x0, @ANYBLOB="0c009900000000000000000024001d80200000801c000d8018000300050004000100000009000200059f1d233d000000"], 0x4c}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x24, r4, 0x200, 0x470bd2d, 0x25dfdbfb, {}, [@NL80211_ATTR_WIPHY_RETRY_SHORT={0x5, 0x3d, 0x2}, @NL80211_ATTR_TXQ_LIMIT={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40488d1}, 0x20040080) sendmsg$NL80211_CMD_SET_COALESCE(r3, &(0x7f0000000300)={0x0, 0xffffffffffffff8c, &(0x7f0000000340)={&(0x7f0000000380)={0x28, r4, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r5}, @void}}}, 0x28}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WOWLAN(r0, &(0x7f0000005300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000052c0)={&(0x7f0000002a00)={0x28b4, r4, 0x1, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_WOWLAN_TRIGGERS={0x8, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_GTK_REKEY_FAILURE={0x4}]}, @NL80211_ATTR_WOWLAN_TRIGGERS={0x273c, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_TCP_CONNECTION={0xc, 0xe, 0x0, 0x1, [@NL80211_WOWLAN_TCP_DATA_INTERVAL={0x8, 0x9, 0x2}]}, @NL80211_WOWLAN_TRIG_GTK_REKEY_FAILURE={0x4}, @NL80211_WOWLAN_TRIG_PKT_PATTERN={0x2728, 0x4, 0x0, 0x1, [{0xc8, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x7}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0xee}, @NL80211_PKTPAT_PATTERN={0xb1, 0x2, "3811ce9a7eee23d6af2d81821a7643607273a3ddba5c7c51887c3dc86ea30e7d46e0c2e5d3fda484c266045310302c4254dd0544cf28762f4e88176b385d43c6220817ebb66cf14ac4f27bc1df5a803e2e551099e5a3a5c7f90d553e2d6a27af8906b6b9744055915e13effc70aeb957fa707fd86e710786a6891b27365f8c9d78dea94ed10c24cada8cbe9dff14a5e5954b08411698f9e45ad593885a7eb2e3335b4a0d9d6093e8ee2c6d424c"}]}, {0x120c, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_MASK={0x1c, 0x1, "d68c8ea978c2ea59ccef66f02e13d2a01200aeab6ebfe3e8"}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x3}, @NL80211_PKTPAT_MASK={0x64, 0x1, "be0267be294e11cef06254cead6780d1245003e0e9a23b6909b8b109e1a90cac89667d7a7990087e76660db71c95924cf6d79d24be1790d003df1dfaf17fc71441742019204a05e1869cf8370dae313362d494d937fa91aa624e81dce62056a9"}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x1}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x8}, @NL80211_PKTPAT_PATTERN={0xb3, 0x2, "cf138cf9e1f394fb46e2fd04e7d8e362dc3fb6025a005570ace3938fc8406f25d89b37d7062aa37f26bcc4ffaa3698c64108df753b1e7fd3153a8e454221c5c8dcacd31ffda8420b8bd0601b5dbf9e39c6da96265f756ae34248518f0287760c7ac21a34d3528b5d6f21a7f8642dc1753fd01350f0c1f51978fdbefb743395883322a8bd161f6a63d5f0a1814d7365aca81fb946e35050070add21aec8ed8bfd5c5fb83e7d5d5db3f97c246ab5a6d4"}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0xffffff30}, @NL80211_PKTPAT_MASK={0xad, 0x1, "58a6c4602b726492e340f5ee6c833856b30edfb0cdcdc26a1808aacf637f127a628fff53ef99ef6e29fb078177405e4c927d4c8d69a1cc5526d7d7e0e5772da8d0a15d06660955f0ad79987a63b087cfd2a5c3ba7b630e0a3ea75470a7c5933fdf2ec8323f226ff97f2a297452ad136dc95d5e9ddc5a3ad3ab6910a204ee05c03c7056688ca656dd17db5d975c2dd831ba2670c69abe879c8bc9feb52bf7a441de8ed3a47b9ea3d40a"}, @NL80211_PKTPAT_MASK={0x1004, 0x1, "b6610b202e23cfc33916c61c17773d9c337dc5769d6b17f855a616769ca5c205a2adfdfd347bb31e7e08ba86ec898e89fea68c798ed96babcebaee117cf9d58beb91444de4abbfa903a683ee8919949b8804ef82e655fd16997fca1c1283add30e496aa6720c9932487aba43fe447e5b9bec8ef5d695e4b2d2cbd70a118d8cce244952f153219d01703f4e4c0b6260e399b69c36fd974a4bd901af3d545b5f07362747076abd839ee83ca450359f22c8189fd685e0b56de3d51f7f1b758ac80f982165cbc06a4cd0a12de1ffbe4d8aa8a5182babe07ac37b917d0d8fd87af85c4ddb4fbc35198312213e807074a03ddca744472052ba2fb9cd7f89cde68e0f59818195902da5d10e50b79e819a98b5e1d55298e32759c74ee9f5dbc6c64d1003dd3b5d3ab2bbebea0d90355bb8be6a8be14e801cfaddbebea94e68d6e4ac27c850d83cb3d904434fee160c7e14046fe205aeac782037371d18254d7b53b7da0ada59184072a74b178f973dc5904619360631f228bd9276fd08391c3b9071a92a04baa5d4d826e5ecbcb0ed86d3ff198a2a8301916fb07f51faec64b801b1364cfc8f0e48ba5047704906ad42bc1496085fddeba833dd221582293293bdb9d8797c277e8652ae77d8fbdec94f7ef49d42722820b8ba5959bafa9c356277ffacd63a2364b915814619a26854ee754fa8a02dee3855233e6f74c09ad7fad424280daf4d07019bb6c83af875d4f975ab214e38b049c8cf5014cb8d7be112d447ac23aa33b036c081939afa53067dcab452d1404d92c5c75911c901e9edccb8e5969b4507bf47b7b9645b4a734d1e02db5169a6deace02e77a71859e0e864c4d000264310cfdb9cf0fa7134df4164f390530d88a0d0b5ac899fa1bea50eda6a534bbbe3032e27a470b0f505c2c009c51ffaa7d0903434ae44d1b3a6abc2697fa98a041b6ed1e63d2f5983f77ddaedd1964dbf50ec11f49db867e0f01322c0c66ae7a552ca845eb4cd106a903c6c30d73b1573660b1d541c37604aa3d3e8dbdc0bc3c18cc51974da585acafa48e940c4d7e2468dd65961515fcd201a52a6a849d456dec874f6a313a6dd58b165eb0d9af7ed41ac86d3e8b709999d5978904a843dbbba709e7b0a321b20b5f86f7a9f605ef0513bd6df90b083fc251708e3def8c311a0ac900ac7df4b6b33078159626cf6c23ee08d281101e67232dbd34033ad1135d2eb3b6eda850085f8cff76282fd7ab1d578dcf3f634643fe4660fa508b203943149e5db82709774ad31f301c698d4de2c0964202904632f5a446e99a4b5ede74b800d430e38f293c0cab329d66eef8b8fb2c8e7f21d744d72a845f92da5aba12718682c839ce9cff6782dd8b206dfa0edd644f241f02aca18a4ac78fda18166192e0cdff67b01231dfb9059bcdaf595ed448d5689245aa955b65e00eaf2fb24ded59c1f14b298d01626c89562bde0dcb5bbb41c2a8135bc5f81e3f8a8c7727069682a0d26962ee1957b22c70f3f21802de2915636648cd61b522dd2f29e0c352b759f90f412f79c9e8e6cf6582da0643f8fe5e62d064ebf2ccedf7c2e869503728ce88fc4c8c9206ba7b0cdb6dece606d8234043e2a9acb1373b10a36caaa9d5c092912b378c8fe39376d8d70bc05d5d57edbaba2db816076961fbfbaac2f702434c8abd7e269be79cd918d9b8006578e292dee7285e00aeda0b218eea66e15cea081a383e318e68152eaaaecbef8b929c8e81dd80d3b8b8e9c86074305519b83f1056c97b2a11fd0db64b63d1d9c2937aa63408e3a4db5cac8bdfad96564fab15b167494b87edda0d3914cd1813fba74cae690bccc1a79c02949885bcda4852e804012d0f7919f4c9cee13cfe4dce6d674867f295df778846864fda41b02e30cf3fc05318ebf56d1633b6e97ca8152c302ce01e153df18b7f035153f2c847f2cb38589f9d4e3a67091b9ec172574d6b0f85fd146cd626779e338fa51f49a88d00bfe3f365a4b4fc383ee516b95bafcd932e8bac33775ed16411a4b8533cea5826589a28aed47b468f8f0812cb16f6d50b15cdaadbe559b994c0ec43aacb5d942ca980774720bd8dae50234166857448eaa9378d7e722fc4d91f7f25cf0532a020ea36b8d7082e8bc819d4da018e47ea4e8122f70fae1fc633f74086b2b05e7aa44ed717980cd0d807ef29468c8f0f4ad794208920905f185e6ccbff17d2267d3ddf76a2ca69c10f1ee02fc8e3b6d925c73738103fbc2a943f914ebb5514af615e3547cfb2b81147315c120d89ab0ef289a4a852a8b37140c2f64266192ee5f285f21e2b47a24f63f7f8598d22008393be0d0b00a2e904328538a62b38996dd3fdb05856774aef7e39caa47397374c86a616235a3c23066a2f155e0ef77cbe57179c3dccdbbd4147c8238727926970d34684cb7a8d9ac738247751f08c2b5e1f9394021a377dec1434a19c5a3090c225c77ced6320e3d1f4c8bef39ffc006b34db8bd47f19fe65c33ba1e68af61c528a8ddb945460fd1f87fdc4158facf8908b36d94ea12d9b95acaf5cc0f8972829311d73360f6598bbaad3396e13ad7debf942f1cc6ebaaef87437090b97dea364b2fbcfad07768312aac78f54502e0d6f18362df0a33a51b9384a8af5209517a81a07823e2b648e04cdd310f9b863c94624a3e0ede3ea968d8e79e7b36a8a14d622a0ef0deafcef3e41f8808e16576a537ba7bf3a1a89ccedde016675a4690706d52c55a2ee25fed3360479a4f633b5681bb666793c3621901cade60ecaa71ca8fe7407aa430add38c05b197789efda5c4c1baf1458b8c801d053c348c447c9865d9580a86ee06df58a47b446bb93d91dd2e5ab605307d5e01a23add5aceb9bcdfe63572807f668dfc9e4d06a49c7d07488d328044338dc43af0705e6e09693ddaba104842a8687553a7d9b907bb3e4bc45eaadfa7d3023265a0b067ac49921c6c6928a7f4ae0ea63c183b62eca9d114385ad2278841f951eeac4ac6965ee65e7bd99691500515a17fd2f8b11b7e0e3924c68eea9c63845661cad0c57763763042dc8d47a0e7449aeebfb45d6db3ca08203f22791d844bdfe5d22184961cd20802ab2dfcf69c6a4512d7f5021cab91868550a742555964736148226872e9132a7e1c05ec911ffb7726312f05c17e98d0f2ef08222f1f54a3120b8b4a6998a737e0a4916bfc741cd0a870909ee715da5ad840dede72fb9cfec2f44fc37ede2e05fc3f908f5ac761e401f3f71bccd29a9e2d58a912403b547a097fd7bf7fca348b3bb0d9e9291ddf014782658f6730be4a3613fa31ecb98629b89dc09e5c10c861a83b2d8111b510217ef18fe9676c4f466a2426709893956bd9f637a4114d6ff9bd1613186e9712f2d0cbeea3c065e7ef12e86e80a32abe706c749f083a8d00a24bfcf9eee1f6ee3f039460b1004f4135c571f953334ad7cbde5e4f6edb57ea1638dd3af3f186b6768b5ec8678777f3c38c648b38309cb7fdcaba86470b6e261326fe7489f89e3ab0519257bdeeae7d7675bd2be42a3b87d45fc4ad65ad62cbfbfb01dfe6d2fd1238c29a136cafe03edff15b9732139843fab0bfd8eae5778548ac9d9b0dc1d1e9d05e0a8e9e26b935b0c163a62453bce163afdf53e3c63e9c2a866dd34e42ed0ee07fbb174f5e7d6ff84cf6a11f74b59dfc0783b6f2d3e3c924248f1d811ff298decd34e22c589aa2a58f02f232b28f1412c3b8ceeab820292f2da097a7efff20910926fddb408f54b787ef96584bfc5c4ce240295cad2aa3c1a92231b0280c9f1117452da6c478d9c400f5dba0c1e32854dfb4fc0dfb926bae9fed19ed0241f113e41ac13b17ac6c23700b04c234ebd7a422d6245ec56dd66e9d22f5db3d453e37d0c36ba1c61aa84adab5e811ed7df49b7a2158cf2165dfc0520204cccc6fd6769313221a19776aec3b1e7afd6b1edcf80be41faa8981e9408a1f588ecf7ede55d1a5c2f49676fd0b9854dff16725454a18807200873ae4b3ccc64f38444f330795dfe414625e0e8f198e90026d969021eb0a0581e706b54f9cde619d949185466d97229d07ae3da164036d907dbcf05bd31df8600a869f9ee420924cfa13741505bbd49bbc53bf5688d7b2d8e243792a11e0e67da5741b906760d8bf752bfea3ce48d0908d6b75d9d4a4531e6aaf3558afd8e48ab78cd981002d76ed56d205a6456f9d637a4bd9d5d3c55eb18097adca0a1bbed28987a629398423735a46dda870117ae4c4ad5de8570ca29905fcb5aaab6fcba52fc6bcf347d3a3c907dbbdf82fdbd3581e629aa5314b563717a33ab4d5e281fe72038da3c975116b8321946856d44ba6227c4575a41557882a877ca81057edce63bc8a24090cddd88fa2d596dd6f3e61af05b05a71f7aa7a73cc2492cb424591762e5a0a90f874630080cf53bbff77b46126e5a6ab34107536d78b3606458207158df6ea3fff112f61668c4f6561bb1f1a403760028b45e608db7724f4589f9ad9597d45c45b25f4c5f123f9e6283045fa156c678709804d7513270527853aa37456909969f2267210038d038d91043c2459326983f25f287c6ae5c95f14595683a37a06756b6d4db1a129b7f107f7fe62de3e2d19d0dc6e6fb793c0e9996e270e676e060a88bccaa5a50ecdefd9168f1e088bbde8227465ad30309dac2be9ceeb891139934a38587908b71fcf961e99abde27fdaece3845575ac6b73f7b331114f8eae39799f195ce69be4c6b7cf9b3e80b0764d9f11dcb56843e50b8363f5fc68fc5025c75c377ea4942b7a6ed5d5e09e11b95290bf6e081dc79db37dbaa00364a6670c503c3e0f3142d5ddbc83a187e13998f3e1ff17954a7b1a4d0d8624359fef4032752c389353ce20c03d96d01f9e8e896d3555e938b56120f04ecaa184baf640946e9a714dffb5a959d49234252b2f8f49dd782a32e015e602085f10ec3c4f81789163e593cf180ea8433b016a942fa02dd28434f912bcc3a98d8859c727d6fa68ef18f52996e5a6209b92afb93834143ab5da72779dbfdbda5d463cd1cf8898beb5e0fcb38b3d6750c4a8e631ac45fe4fff1fcb9ef26d2c13a8d69a82051076081d242938c340336c9b95ff8be71e041ef3a33f691841369bc3722287aa5fe4e387dbb25a6137c6e2c8b8e5dc26134f74db3acda1a24fe179a28eccf629685e50b3a7779011645d0af8382cd7d7cc00a861d8cee6770bd3eb4c9969dd40838a29b1cf7801b293d8f140e3911480a5965fbd2cc375559cfad4e496ae33053f3798f48b85e145ba9ce0f7ca10b3e31560f3e575eddec6b3160db205138d0499d37f4ae06e40abb50c4c2dba40b4ffa24faa2cffc4734b316744323cd8a6f2687be5e031c0841b524b363c81d7fb1dfe5f7af0e3f0566c17481e7435d9e52231dab36d1cfb82a07df8b4ea91088274e610d7e4a878c361d7c368a66a0120694cbd44f6c3ead5b18ddc3c9318ccb865f7e20305e41b24a20f4ecd037e06e5f2d78eacaac04d99c9f510342d3c741300562e670ace36955d7b02999155a7ae7d39bc741860b25e2d143cdadb8c197ad8a9433b44480ced4c7cd844be29597c5676058a477b25a5726bc29baae7c7fa8db6d1294b9e84e04597af6c5536e00a10e0db6dabe49b6819811769baba874c54be91c8485283a3a8d36e1aaba7dd856a5a11c13013752f219c80d291538cf4c69d8db56e6275a8bbc5f209c241ffe0a43fe4c4c6659328417c01a4db025c77358bc5b14bc97a85f54c4299f0de1692f16e82be056231e00c05711cb0b86af504a18ba82b8"}]}, {0xdc, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_MASK={0xd7, 0x1, "4c1f66eb24bca4c37eb608016a3b7c4a550097a8fc93bcd0d82853769c4ecefe49f6050c12c0b0db20a483fda5fa3373f2a170234871d37eb59a5df6d7a6a0e339ba914d4580781b1c2c4cbd742878743e46b89ab93e3ffb4cb5937e5b1660e2e8b5ea1606f6d70d02d7fe963eabdb5309a6a95092d86e43de6a907960ddd6f624a629a58f4fde8f6281c7a68254b03061d6055b69869963db7fb0ab9e877b0a0b4a30f557fcfe2a50805de6652c87fa5417af28399ff09fc2af577dd7c0b20cd8840b73f84e664384c94b732fd636670863a8"}]}, {0x88, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_MASK={0x67, 0x1, "b894551a66d14ca4cd1aab040822d4a541191f9a862626833f340f89322132311c4357f8ee810d69889d80b9094d2bdbb54c07ce711a08ba2104d976942a4b2538c5ec71ddbff6ac199cfe85fddbb63fb9ce80de2fedb41b52c5169c94266b41029985"}, @NL80211_PKTPAT_PATTERN={0x1c, 0x2, "29fe869425aba0e72ec8329ac70f98cc0dae399962d72315"}]}, {0x1248, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_MASK={0x9f, 0x1, "132a795cb0e7e2e74167d61b7447a8212ef7c4cece1e193b80819173fc97b10ae3306ed24c281e07fc868d9a5273b9336612ab61bcdcce9704fd9d47e175ac7b351f4d5d64601f28949f7ee439d8cad3f21e04a9c9fac44d61b46f54a0ecf947c57fd9122b543f5be84596a02de09c6b9cffbf11c79dd7d876151a82b768d01e479dca60ba0b2d59a1048356d1cd0755393aeacd8f221970c43ca2"}, @NL80211_PKTPAT_PATTERN={0x2c, 0x2, "52404b476aec90c1d1c9d8f390e3283c192aea50fab3574accbd666e135388f036ae78fc4bff3844"}, @NL80211_PKTPAT_MASK={0xc6, 0x1, "fb5249277bc42022fd97c65bcd0b3e70c6d7f4a6f276c8b2ead0afcacf5f6a16e387ee9435ec59bb7ae89885ebcc3d8f8b64419acd12a05f907fa1b2189bc4c7c4c367a015ab7fe62cdd4774e8dc2522c9c6b1f569c901920cdcf1a5d9e5d01566a440264579ed0b57c18dd4d31aca8fd65fb3cf1f8a34510ddebd9856852170f930c89ea874c54308de7fb684db10e5cdabf0b54354a44ecdf30b04012c0e30d8b255f839ef024b630212ea26ef0b6fffed64a5416578ce39ae7b70830950ccab9e"}, @NL80211_PKTPAT_PATTERN={0x1a, 0x2, "38a4d1f9da53d0f758d597214ffa161d6d877464dcd8"}, @NL80211_PKTPAT_OFFSET={0x8}, @NL80211_PKTPAT_MASK={0x49, 0x1, "c22659d368f1888d59c18762bbbaf2c5dc7f0cc2e0ddb545113190a01a9e167adda0cdefc603751ecdbcde3fbd84bdedde0d3f4dfaf8f826d80fba20abd851bc3357fcead0"}, @NL80211_PKTPAT_MASK={0x3c, 0x1, "608aec02a1400cd01706208f8dbf05d88cd06d3e975f3137c24cc29e1edfce7affc45bcafc8f3aa13bbf5ded1d376c62862a1c29989af10f"}, @NL80211_PKTPAT_PATTERN={0x1004, 0x2, "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"}]}, {0xa4, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_PATTERN={0x23, 0x2, "b9fff4129f72ab1f31d704b47d5bdb3a7b7063f278376900a26d780676fc03"}, @NL80211_PKTPAT_MASK={0x7c, 0x1, "2f1ace38176545cd7b6de3ec33891889a071f784e0e14274bbd61ace4959b6211b09f845eb148e93d8033cc2e94c8b710b05fa467083c0d37101f48c4c3d78935c8b6a56dc4c112e9b9f315d4786cfb932469b56d80285f0a97e81aa69602f3d56dfa70c8dac1a6a2fcae8bf984db1f52d1ee6a94ddff22f"}]}]}]}, @NL80211_ATTR_WOWLAN_TRIGGERS={0xc, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_MAGIC_PKT={0x4}, @NL80211_WOWLAN_TRIG_RFKILL_RELEASE={0x4}]}, @NL80211_ATTR_WOWLAN_TRIGGERS={0x148, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_NET_DETECT={0x11c, 0x12, 0x0, 0x1, [@NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x3}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x6}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}, @NL80211_ATTR_BSSID={0xa, 0xf5, @from_mac=@device_b}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}, @NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}, @NL80211_ATTR_SCHED_SCAN_MATCH={0x74, 0x84, 0x0, 0x1, [{0x48, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0x44, 0x6, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x8, 0x3, 0x573}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x7}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x8}, @NL80211_BAND_6GHZ={0x8, 0x3, 0x1}, @NL80211_BAND_LC={0x8, 0x5, 0x8}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x6}, @NL80211_BAND_LC={0x8, 0x5, 0x1}, @NL80211_BAND_2GHZ={0x8, 0x0, 0x10}]}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_SCHED_SCAN_MATCH_ATTR_SSID={0xa, 0x1, @default_ap_ssid}, @NL80211_SCHED_SCAN_MATCH_PER_BAND_RSSI={0xc, 0x6, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x8, 0x2, 0xc}]}, @NL80211_SCHED_SCAN_MATCH_ATTR_BSSID={0xa}]}]}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x3}, @NL80211_ATTR_IE={0x6d, 0x2a, [@tim={0x5, 0x61, {0x0, 0xa0, 0x3, "eceb567e6bc72bf6a197fa1611d7a05eb9e7c1bb4c5d070fb288bbb9cad0804d93d641c29a7fdabfd2c713bac5ed831a43ec63feeb8635ab627a26585f18f174c1506f3e226ca1cfeed9c1288d93deb0134a6b91084a33505bbc175c7fb4"}}, @challenge={0x10, 0x1, 0xda}, @challenge={0x10, 0x1, 0xe3}]}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}]}, @NL80211_WOWLAN_TRIG_MAGIC_PKT={0x4}, @NL80211_WOWLAN_TRIG_ANY={0x4}, @NL80211_WOWLAN_TRIG_RFKILL_RELEASE={0x4}, @NL80211_WOWLAN_TRIG_NET_DETECT={0x1c, 0x12, 0x0, 0x1, [@NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x8000}]}]}]}, 0x28b4}, 0x1, 0x0, 0x0, 0x20}, 0x20040014) sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000008c0)=ANY=[@ANYBLOB="1800de000010080107d04e000000000080007d8f"], 0x18}}, 0x0) 0s ago: executing program 2 (id=18616): r0 = socket$inet6(0xa, 0x802, 0x0) sendmsg$inet(r0, &(0x7f0000001000)={&(0x7f0000001040)={0x2, 0x4e22, @local}, 0x10, 0x0, 0x0, &(0x7f0000001080)=[@ip_tos_u8={{0x11}}, @ip_retopts={{0x1c, 0x0, 0x7, {[@timestamp={0x44, 0xc, 0x7, 0x0, 0x0, [0x0, 0x0]}]}}}], 0x38}, 0x0) setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f00000010c0)={{0xa, 0x3, 0x8000, @private0={0xfc, 0x0, '\x00', 0x1}, 0x101}, {0xa, 0x4e21, 0x5, @mcast2, 0x80000001}, 0x1, {[0x8, 0x5, 0x0, 0x8001, 0x3, 0x4, 0x2, 0x57da]}}, 0x5c) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{0x1, 0xffffffffffffffff}, &(0x7f0000000500), &(0x7f0000000540)}, 0x20) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000007c0)=@bpf_lsm={0x6, 0x3, &(0x7f0000000880)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f00000008c0)='GPL\x00'}, 0x80) r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000900)={r3}, 0x8) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000940)={&(0x7f0000000980)=ANY=[@ANYBLOB="9feb01001800000000000000200000002000000004000000010000000000000104000000200000000100000000000001"], 0x0, 0x3c}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x7, 0x9, &(0x7f0000000a80)=@raw=[@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xe}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}], &(0x7f0000000b00)='GPL\x00', 0x2, 0x0, 0x0, 0x41100, 0x2d, '\x00', 0x0, @fallback=0x33, r5, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r4, 0x1, 0x0, &(0x7f0000000b40)=[{0x0, 0x1, 0xb, 0x6}], 0x10, 0x3ff}, 0x94) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000001140)={'team0\x00', 0x0}) getpid() sendmsg$nl_route(r6, &(0x7f0000001180)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000001200)=@newlink={0x28, 0x10, 0x401, 0x20000, 0x0, {0x0, 0x0, 0x0, r7, 0xc003}, [@IFLA_MASTER={0x8, 0xa, r7}]}, 0x28}, 0x1, 0x0, 0x0, 0x20004885}, 0x4054) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000c80)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000c00), &(0x7f0000000c40)='%+9llu \x00'}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000d40)={{0x1, 0xffffffffffffffff}, &(0x7f0000000cc0), &(0x7f0000000d00)='%pI4 \x00'}, 0x20) r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000d80)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xffffffff, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2, 0x5}, 0x50) r11 = socket$kcm(0x2, 0x1000000000000002, 0x0) pipe(&(0x7f0000000e00)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r11, 0x1, 0x3e, &(0x7f0000000e40)=r12, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000f40)={0x11, 0xa, &(0x7f0000000640)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x9}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}}, @map_idx_val={0x18, 0x6, 0x6, 0x0, 0x9, 0x0, 0x0, 0x0, 0x46de}]}, &(0x7f00000006c0)='GPL\x00', 0x0, 0x9f, &(0x7f0000000700)=""/159, 0x41000, 0x60, '\x00', 0x0, 0x0, r4, 0x8, &(0x7f0000000b80)={0x1, 0x2}, 0x8, 0x10, &(0x7f0000000bc0)={0x1, 0x1, 0x1, 0x8}, 0x10, 0x0, 0x0, 0x8, &(0x7f0000000e80)=[r8, r9, r10, r12], &(0x7f0000000ec0)=[{0x5, 0x1, 0xc, 0x9}, {0x4, 0x2, 0x7, 0x8}, {0x2, 0x2, 0x7}, {0x2, 0x4, 0x0, 0xb}, {0x5, 0x5, 0x10, 0x5}, {0x2, 0x5, 0x3, 0x4}, {0x0, 0x2, 0x1, 0xc}, {0x1, 0x1, 0xb, 0x3}], 0x10, 0x40}, 0x94) r13 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r13) sendmsg$NFC_CMD_VENDOR(r13, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x2c, r14, 0x501, 0x70bd2c, 0x25dfdbfb, {}, [@NFC_ATTR_VENDOR_ID={0x8, 0x1d, 0x4}, @NFC_ATTR_VENDOR_SUBCMD={0x8, 0x1e, 0xb30}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4004005}, 0x8000) sendmsg$NFC_CMD_GET_SE(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r14, 0x8, 0x70bd2b, 0x25dfdbfe, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x4010}, 0x840) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x20, 0x3, &(0x7f00000002c0)=@framed, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) r15 = socket(0x840000000002, 0x3, 0xff) sendmsg$inet(r15, &(0x7f0000000340)={&(0x7f0000000380)={0x2, 0x4e23, @multicast1}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000480)="9745010000004000012c8cc5ffff", 0x5aa}], 0x1, &(0x7f00000004c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x16}, @rand_addr=0x64010100}}}], 0x20}, 0x400c804) r16 = syz_genetlink_get_family_id$nbd(&(0x7f00000003c0), r1) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000400)={0x28, r16, 0x1, 0x70bd2a, 0x2, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xfffffffffffffffd}]}, 0x28}, 0x1, 0x0, 0x0, 0x40800}, 0x4) kernel console output (not intermixed with test programs): 0 UID: 0 PID: 20241 Comm: syz.5.17954 Not tainted syzkaller #0 PREEMPT(full) [ 1702.916662][T20241] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1702.916675][T20241] Call Trace: [ 1702.916685][T20241] [ 1702.916696][T20241] dump_stack_lvl+0xe8/0x150 [ 1702.916735][T20241] should_fail_ex+0x410/0x560 [ 1702.916771][T20241] _copy_from_user+0x2d/0xb0 [ 1702.916802][T20241] __sys_sendto+0x2a9/0x5a0 [ 1702.916836][T20241] ? ksys_write+0x1e6/0x270 [ 1702.916865][T20241] ? __pfx___sys_sendto+0x10/0x10 [ 1702.916890][T20241] ? __mutex_unlock_slowpath+0x731/0x900 [ 1702.916946][T20241] ? fdget+0x1ac/0x250 [ 1702.916982][T20241] ? __pfx_ksys_write+0x10/0x10 [ 1702.917011][T20241] __x64_sys_sendto+0xde/0x100 [ 1702.917050][T20241] do_syscall_64+0x166/0x520 [ 1702.917070][T20241] ? trace_irq_disable+0x3b/0x140 [ 1702.917094][T20241] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1702.917115][T20241] ? clear_bhb_loop+0x70/0xc0 [ 1702.917140][T20241] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1702.917161][T20241] RIP: 0033:0x7f9b3239f559 [ 1702.917182][T20241] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1702.917200][T20241] RSP: 002b:00007f9b332ff028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1702.917224][T20241] RAX: ffffffffffffffda RBX: 00007f9b32625fa0 RCX: 00007f9b3239f559 [ 1702.917240][T20241] RDX: 0000000000000002 RSI: 0000200000000500 RDI: 0000000000000006 [ 1702.917253][T20241] RBP: 00007f9b332ff090 R08: 0000200000000600 R09: 0000000000000010 [ 1702.917266][T20241] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1702.917279][T20241] R13: 00007f9b32626038 R14: 00007f9b32625fa0 R15: 00007ffca2036a58 [ 1702.917313][T20241] [ 1702.943945][T20239] netlink: 80 bytes leftover after parsing attributes in process `syz.3.17955'. [ 1703.173027][T20243] syzkaller1: entered promiscuous mode [ 1703.173053][T20243] syzkaller1: entered allmulticast mode [ 1703.210874][T20243] netlink: 60 bytes leftover after parsing attributes in process `syz.4.17956'. [ 1703.216979][T20226] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1703.805375][T20263] netlink: 16 bytes leftover after parsing attributes in process `syz.0.17964'. [ 1704.002504][T20268] netlink: 8 bytes leftover after parsing attributes in process `syz.2.17966'. [ 1704.002541][T20268] netlink: 32 bytes leftover after parsing attributes in process `syz.2.17966'. [ 1704.156125][T20271] FAULT_INJECTION: forcing a failure. [ 1704.156125][T20271] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1704.156162][T20271] CPU: 0 UID: 0 PID: 20271 Comm: syz.3.17967 Not tainted syzkaller #0 PREEMPT(full) [ 1704.156186][T20271] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1704.156199][T20271] Call Trace: [ 1704.156208][T20271] [ 1704.156217][T20271] dump_stack_lvl+0xe8/0x150 [ 1704.156258][T20271] should_fail_ex+0x410/0x560 [ 1704.156295][T20271] _copy_to_user+0x31/0xb0 [ 1704.156327][T20271] simple_read_from_buffer+0xe1/0x170 [ 1704.156358][T20271] proc_fail_nth_read+0x1bb/0x230 [ 1704.156394][T20271] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1704.156427][T20271] ? rw_verify_area+0x24a/0x4c0 [ 1704.156455][T20271] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1704.156483][T20271] vfs_read+0x213/0xa80 [ 1704.156515][T20271] ? __pfx___mutex_lock+0x10/0x10 [ 1704.156539][T20271] ? __pfx_vfs_read+0x10/0x10 [ 1704.156566][T20271] ? __fget_files+0x2a/0x420 [ 1704.156588][T20271] ? __fget_files+0x3a2/0x420 [ 1704.156610][T20271] ? __fget_files+0x2a/0x420 [ 1704.156638][T20271] ? fdget+0x1ac/0x250 [ 1704.156677][T20271] ksys_read+0x150/0x270 [ 1704.156705][T20271] ? __pfx_ksys_read+0x10/0x10 [ 1704.156744][T20271] do_syscall_64+0x166/0x520 [ 1704.156764][T20271] ? trace_irq_disable+0x3b/0x140 [ 1704.156789][T20271] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1704.156811][T20271] ? clear_bhb_loop+0x70/0xc0 [ 1704.156837][T20271] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1704.156858][T20271] RIP: 0033:0x7f0e7855fd8e [ 1704.156880][T20271] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1704.156898][T20271] RSP: 002b:00007f0e79525fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1704.156939][T20271] RAX: ffffffffffffffda RBX: 00007f0e795266c0 RCX: 00007f0e7855fd8e [ 1704.156955][T20271] RDX: 000000000000000f RSI: 00007f0e795260a0 RDI: 0000000000000004 [ 1704.156970][T20271] RBP: 00007f0e79526090 R08: 0000000000000000 R09: 0000000000000000 [ 1704.156984][T20271] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1704.156997][T20271] R13: 00007f0e78826038 R14: 00007f0e78825fa0 R15: 00007ffcf51fd4f8 [ 1704.157033][T20271] [ 1704.539681][T31415] Bluetooth: hci0: command 0x0c3a tx timeout [ 1704.748985][T20277] netlink: 4 bytes leftover after parsing attributes in process `syz.2.17971'. [ 1705.553828][T20300] netlink: 80 bytes leftover after parsing attributes in process `syz.5.17978'. [ 1705.921120][T32461] net_ratelimit: 235 callbacks suppressed [ 1705.921163][T32461] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 1705.921203][T32461] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 1706.000627][T20312] netlink: 8 bytes leftover after parsing attributes in process `syz.4.17980'. [ 1706.000652][T20312] netlink: 2 bytes leftover after parsing attributes in process `syz.4.17980'. [ 1706.036821][T16431] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 1706.036868][T16431] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 1706.077157][T20307] netlink: 36 bytes leftover after parsing attributes in process `syz.2.17981'. [ 1706.139222][T20311] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1706.175478][ T3339] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 1706.175525][ T3339] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 1706.299794][T16429] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 1706.299844][T16429] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 1706.411448][ T3339] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 1707.342449][T20346] syzkaller1: entered promiscuous mode [ 1707.342542][T20346] syzkaller1: entered allmulticast mode [ 1707.904382][T20363] FAULT_INJECTION: forcing a failure. [ 1707.904382][T20363] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1707.905463][T20363] CPU: 0 UID: 0 PID: 20363 Comm: syz.5.17997 Not tainted syzkaller #0 PREEMPT(full) [ 1707.905489][T20363] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1707.905502][T20363] Call Trace: [ 1707.905512][T20363] [ 1707.905522][T20363] dump_stack_lvl+0xe8/0x150 [ 1707.905559][T20363] should_fail_ex+0x410/0x560 [ 1707.905598][T20363] prepare_alloc_pages+0x21e/0x5f0 [ 1707.905634][T20363] __alloc_frozen_pages_noprof+0x185/0x5a0 [ 1707.905667][T20363] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1707.905699][T20363] ? __pfx_policy_nodemask+0x10/0x10 [ 1707.905731][T20363] ? __mutex_unlock_slowpath+0x731/0x900 [ 1707.905762][T20363] alloc_pages_mpol+0x21e/0x390 [ 1707.905798][T20363] ___kmalloc_large_node+0x4f/0x120 [ 1707.905827][T20363] __kmalloc_large_noprof+0x1a/0x90 [ 1707.905854][T20363] hidp_connection_add+0x3bd/0x1a00 [ 1707.905983][T20363] hidp_sock_ioctl+0x403/0x650 [ 1707.906017][T20363] ? __pfx_hidp_sock_ioctl+0x10/0x10 [ 1707.906104][T20363] ? do_vfs_ioctl+0x116f/0x1530 [ 1707.906146][T20363] sock_do_ioctl+0x101/0x320 [ 1707.906174][T20363] ? __pfx_sock_do_ioctl+0x10/0x10 [ 1707.906216][T20363] sock_ioctl+0x57a/0x7e0 [ 1707.906240][T20363] ? __fget_files+0x2a/0x420 [ 1707.906262][T20363] ? __pfx_sock_ioctl+0x10/0x10 [ 1707.906285][T20363] ? __fget_files+0x2a/0x420 [ 1707.906307][T20363] ? __fget_files+0x2a/0x420 [ 1707.906333][T20363] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1707.906356][T20363] ? __pfx_sock_ioctl+0x10/0x10 [ 1707.906380][T20363] __se_sys_ioctl+0xfc/0x170 [ 1707.906409][T20363] do_syscall_64+0x166/0x520 [ 1707.906429][T20363] ? trace_irq_disable+0x3b/0x140 [ 1707.906452][T20363] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1707.906473][T20363] ? clear_bhb_loop+0x70/0xc0 [ 1707.906498][T20363] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1707.906518][T20363] RIP: 0033:0x7f9b3239f559 [ 1707.906538][T20363] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1707.906556][T20363] RSP: 002b:00007f9b332ff028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1707.906580][T20363] RAX: ffffffffffffffda RBX: 00007f9b32625fa0 RCX: 00007f9b3239f559 [ 1707.906596][T20363] RDX: 0000200000000ac0 RSI: 00000000400448c8 RDI: 0000000000000005 [ 1707.906611][T20363] RBP: 00007f9b332ff090 R08: 0000000000000000 R09: 0000000000000000 [ 1707.906624][T20363] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1707.906636][T20363] R13: 00007f9b32626038 R14: 00007f9b32625fa0 R15: 00007ffca2036a58 [ 1707.906671][T20363] [ 1708.386370][T20370] __nla_validate_parse: 1 callbacks suppressed [ 1708.386394][T20370] netlink: 80 bytes leftover after parsing attributes in process `syz.3.18000'. [ 1709.137625][T20392] bond1: Removing last ns target with arp_interval on [ 1709.582610][T20405] netlink: 8 bytes leftover after parsing attributes in process `syz.3.18016'. [ 1709.617665][T20405] netlink: 100 bytes leftover after parsing attributes in process `syz.3.18016'. [ 1709.625930][T20414] netlink: 8 bytes leftover after parsing attributes in process `syz.4.18019'. [ 1709.788857][T20414] netlink: 8 bytes leftover after parsing attributes in process `syz.4.18019'. [ 1710.031032][T20432] FAULT_INJECTION: forcing a failure. [ 1710.031032][T20432] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1710.031322][T20432] CPU: 1 UID: 0 PID: 20432 Comm: syz.2.18023 Not tainted syzkaller #0 PREEMPT(full) [ 1710.031348][T20432] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1710.031361][T20432] Call Trace: [ 1710.031370][T20432] [ 1710.031381][T20432] dump_stack_lvl+0xe8/0x150 [ 1710.031425][T20432] should_fail_ex+0x410/0x560 [ 1710.031466][T20432] _copy_from_user+0x2d/0xb0 [ 1710.031500][T20432] ___sys_sendmsg+0x1c6/0x360 [ 1710.031536][T20432] ? __lock_acquire+0x747/0x2de0 [ 1710.031570][T20432] ? __pfx____sys_sendmsg+0x10/0x10 [ 1710.031620][T20432] ? kstrtouint+0x6e/0xe0 [ 1710.031679][T20432] ? __fget_files+0x3a2/0x420 [ 1710.031705][T20432] ? __fget_files+0x2a/0x420 [ 1710.031741][T20432] __sys_sendmmsg+0x273/0x4e0 [ 1710.031771][T20432] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1710.031805][T20432] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1710.031850][T20432] ? ksys_write+0x242/0x270 [ 1710.031880][T20432] ? __pfx_ksys_write+0x10/0x10 [ 1710.031915][T20432] __x64_sys_sendmmsg+0xa0/0xc0 [ 1710.031948][T20432] do_syscall_64+0x166/0x520 [ 1710.031969][T20432] ? trace_irq_disable+0x3b/0x140 [ 1710.031996][T20432] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1710.032020][T20432] ? clear_bhb_loop+0x70/0xc0 [ 1710.032046][T20432] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1710.032068][T20432] RIP: 0033:0x7f1fc7f9f559 [ 1710.032088][T20432] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1710.032106][T20432] RSP: 002b:00007f1fc8e9e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1710.032130][T20432] RAX: ffffffffffffffda RBX: 00007f1fc8225fa0 RCX: 00007f1fc7f9f559 [ 1710.032147][T20432] RDX: 0000000000000001 RSI: 0000200000000000 RDI: 0000000000000003 [ 1710.032162][T20432] RBP: 00007f1fc8e9e090 R08: 0000000000000000 R09: 0000000000000000 [ 1710.032176][T20432] R10: 0000000000040004 R11: 0000000000000246 R12: 0000000000000001 [ 1710.032190][T20432] R13: 00007f1fc8226038 R14: 00007f1fc8225fa0 R15: 00007ffe07f3f458 [ 1710.032226][T20432] [ 1710.575290][T20442] netlink: 12 bytes leftover after parsing attributes in process `syz.2.18028'. [ 1710.716234][T20442] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input5 [ 1710.924291][T20433] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 1711.024585][T16428] net_ratelimit: 296 callbacks suppressed [ 1711.024613][T16428] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 1711.024654][T16428] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 1711.130192][T32460] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 1711.130241][T32460] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 1711.240091][ T3339] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 1711.240141][ T3339] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 1711.329264][T20461] netlink: 8 bytes leftover after parsing attributes in process `syz.0.18034'. [ 1711.351832][T32124] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 1711.351881][T32124] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 1711.451069][T20467] xt_REDIRECT: bad MAP_IPS. [ 1711.459052][T16428] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 1711.459095][T16428] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 1711.695942][T20472] FAULT_INJECTION: forcing a failure. [ 1711.695942][T20472] name failslab, interval 1, probability 0, space 0, times 0 [ 1711.696015][T20472] CPU: 0 UID: 0 PID: 20472 Comm: syz.0.18039 Not tainted syzkaller #0 PREEMPT(full) [ 1711.696039][T20472] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1711.696052][T20472] Call Trace: [ 1711.696061][T20472] [ 1711.696070][T20472] dump_stack_lvl+0xe8/0x150 [ 1711.696109][T20472] should_fail_ex+0x410/0x560 [ 1711.696145][T20472] should_failslab+0xa8/0x100 [ 1711.696180][T20472] __kvmalloc_node_noprof+0x171/0x820 [ 1711.696212][T20472] ? __rhashtable_init_noprof+0x5fa/0xbd0 [ 1711.696238][T20472] ? __rhashtable_init_noprof+0x5fa/0xbd0 [ 1711.696272][T20472] __rhashtable_init_noprof+0x5fa/0xbd0 [ 1711.696305][T20472] __rhltable_init_noprof+0x26/0x70 [ 1711.696334][T20472] nf_tables_newtable+0x6e0/0x1990 [ 1711.696383][T20472] nfnetlink_rcv+0x1288/0x28c0 [ 1711.696449][T20472] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 1711.696529][T20472] ? skb_clone+0x246/0x3a0 [ 1711.696568][T20472] ? netlink_deliver_tap+0x2e/0x1b0 [ 1711.696595][T20472] ? netlink_deliver_tap+0x2e/0x1b0 [ 1711.696628][T20472] netlink_unicast+0x8ef/0xa80 [ 1711.696672][T20472] netlink_sendmsg+0x7f0/0xb20 [ 1711.696706][T20472] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1711.696737][T20472] ? aa_sock_msg_perm+0x144/0x210 [ 1711.696772][T20472] ? apparmor_socket_sendmsg+0x98/0x360 [ 1711.696798][T20472] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1711.696824][T20472] sock_sendmsg_nosec+0x14e/0x190 [ 1711.696853][T20472] ____sys_sendmsg+0x54e/0x850 [ 1711.696952][T20472] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1711.696994][T20472] ? import_iovec+0x73/0xa0 [ 1711.697028][T20472] ___sys_sendmsg+0x2a5/0x360 [ 1711.697057][T20472] ? __lock_acquire+0x747/0x2de0 [ 1711.697088][T20472] ? __pfx____sys_sendmsg+0x10/0x10 [ 1711.697161][T20472] ? __fget_files+0x3a2/0x420 [ 1711.697184][T20472] ? __fget_files+0x2a/0x420 [ 1711.697218][T20472] __x64_sys_sendmsg+0x1b1/0x290 [ 1711.697242][T20472] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1711.697299][T20472] do_syscall_64+0x166/0x520 [ 1711.697321][T20472] ? trace_irq_disable+0x3b/0x140 [ 1711.697347][T20472] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1711.697369][T20472] ? clear_bhb_loop+0x70/0xc0 [ 1711.697396][T20472] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1711.697417][T20472] RIP: 0033:0x7f1c9c99f559 [ 1711.697439][T20472] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1711.697458][T20472] RSP: 002b:00007f1c9d884028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1711.697482][T20472] RAX: ffffffffffffffda RBX: 00007f1c9cc25fa0 RCX: 00007f1c9c99f559 [ 1711.697499][T20472] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 1711.697513][T20472] RBP: 00007f1c9d884090 R08: 0000000000000000 R09: 0000000000000000 [ 1711.697527][T20472] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1711.697540][T20472] R13: 00007f1c9cc26038 R14: 00007f1c9cc25fa0 R15: 00007ffe2af28d88 [ 1711.697576][T20472] [ 1711.713424][T20470] xt_REDIRECT: bad MAP_IPS. [ 1712.190708][T20488] xt_l2tp: unknown flags: 43 [ 1712.219000][T31415] Bluetooth: hci0: command 0x0c3a tx timeout [ 1712.256393][T32461] IPVS: starting estimator thread 0... [ 1712.340299][T20492] IPVS: using max 32 ests per chain, 76800 per kthread [ 1712.572613][T20502] FAULT_INJECTION: forcing a failure. [ 1712.572613][T20502] name failslab, interval 1, probability 0, space 0, times 0 [ 1712.572651][T20502] CPU: 0 UID: 0 PID: 20502 Comm: syz.5.18050 Not tainted syzkaller #0 PREEMPT(full) [ 1712.572676][T20502] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1712.572688][T20502] Call Trace: [ 1712.572697][T20502] [ 1712.572707][T20502] dump_stack_lvl+0xe8/0x150 [ 1712.572745][T20502] should_fail_ex+0x410/0x560 [ 1712.572781][T20502] should_failslab+0xa8/0x100 [ 1712.572814][T20502] __kmalloc_cache_noprof+0x9e/0x600 [ 1712.572842][T20502] ? nfnetlink_rcv+0x1021/0x28c0 [ 1712.572866][T20502] ? nfnetlink_rcv+0x1021/0x28c0 [ 1712.572896][T20502] nfnetlink_rcv+0x1021/0x28c0 [ 1712.572963][T20502] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 1712.573039][T20502] ? skb_clone+0x246/0x3a0 [ 1712.573077][T20502] ? netlink_deliver_tap+0x2e/0x1b0 [ 1712.573102][T20502] ? netlink_deliver_tap+0x2e/0x1b0 [ 1712.573134][T20502] netlink_unicast+0x8ef/0xa80 [ 1712.573179][T20502] netlink_sendmsg+0x7f0/0xb20 [ 1712.573213][T20502] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1712.573243][T20502] ? aa_sock_msg_perm+0x144/0x210 [ 1712.573277][T20502] ? apparmor_socket_sendmsg+0x98/0x360 [ 1712.573303][T20502] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1712.573329][T20502] sock_sendmsg_nosec+0x14e/0x190 [ 1712.573358][T20502] ____sys_sendmsg+0x54e/0x850 [ 1712.573395][T20502] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1712.573437][T20502] ? import_iovec+0x73/0xa0 [ 1712.573473][T20502] ___sys_sendmsg+0x2a5/0x360 [ 1712.573502][T20502] ? __lock_acquire+0x747/0x2de0 [ 1712.573531][T20502] ? __pfx____sys_sendmsg+0x10/0x10 [ 1712.573611][T20502] ? __fget_files+0x3a2/0x420 [ 1712.573633][T20502] ? __fget_files+0x2a/0x420 [ 1712.573666][T20502] __x64_sys_sendmsg+0x1b1/0x290 [ 1712.573690][T20502] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1712.573746][T20502] do_syscall_64+0x166/0x520 [ 1712.573766][T20502] ? trace_irq_disable+0x3b/0x140 [ 1712.573790][T20502] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1712.573811][T20502] ? clear_bhb_loop+0x70/0xc0 [ 1712.573836][T20502] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1712.573856][T20502] RIP: 0033:0x7f9b3239f559 [ 1712.573878][T20502] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1712.573896][T20502] RSP: 002b:00007f9b332ff028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1712.573920][T20502] RAX: ffffffffffffffda RBX: 00007f9b32625fa0 RCX: 00007f9b3239f559 [ 1712.573935][T20502] RDX: 0000000000000000 RSI: 0000200000000bc0 RDI: 0000000000000003 [ 1712.573949][T20502] RBP: 00007f9b332ff090 R08: 0000000000000000 R09: 0000000000000000 [ 1712.573961][T20502] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1712.573974][T20502] R13: 00007f9b32626038 R14: 00007f9b32625fa0 R15: 00007ffca2036a58 [ 1712.574010][T20502] [ 1713.148340][T20516] syzkaller0: entered promiscuous mode [ 1713.148607][T20516] syzkaller0: entered allmulticast mode [ 1713.175869][T20517] tipc: Enabled bearer , priority 0 [ 1713.278160][T20515] tipc: Resetting bearer [ 1713.453918][T20515] tipc: Disabling bearer [ 1713.731517][T20534] netlink: 84 bytes leftover after parsing attributes in process `syz.3.18060'. [ 1713.747172][T20534] netlink: 'syz.3.18060': attribute type 83 has an invalid length. [ 1713.780002][T20538] IPVS: set_ctl: invalid protocol: 0 172.20.20.139:21 [ 1714.314758][T20548] netlink: 8 bytes leftover after parsing attributes in process `syz.3.18066'. [ 1714.314797][T20548] netlink: 32 bytes leftover after parsing attributes in process `syz.3.18066'. [ 1714.767272][T20562] netlink: 8 bytes leftover after parsing attributes in process `syz.0.18071'. [ 1715.117250][T20573] FAULT_INJECTION: forcing a failure. [ 1715.117250][T20573] name failslab, interval 1, probability 0, space 0, times 0 [ 1715.117288][T20573] CPU: 0 UID: 0 PID: 20573 Comm: syz.5.18077 Not tainted syzkaller #0 PREEMPT(full) [ 1715.117313][T20573] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1715.117325][T20573] Call Trace: [ 1715.117334][T20573] [ 1715.117344][T20573] dump_stack_lvl+0xe8/0x150 [ 1715.117382][T20573] should_fail_ex+0x410/0x560 [ 1715.117418][T20573] should_failslab+0xa8/0x100 [ 1715.117450][T20573] __kmalloc_noprof+0xf9/0x710 [ 1715.117474][T20573] ? __kasan_kmalloc+0x93/0xb0 [ 1715.117506][T20573] ? nla_strdup+0x9d/0x140 [ 1715.117524][T20573] ? nla_strdup+0x9d/0x140 [ 1715.117546][T20573] ? __kmalloc_cache_noprof+0x148/0x600 [ 1715.117576][T20573] nla_strdup+0x9d/0x140 [ 1715.117599][T20573] nf_tables_newchain+0x1aba/0x28b0 [ 1715.117644][T20573] ? __pfx_nf_tables_newchain+0x10/0x10 [ 1715.117707][T20573] ? nfnl_pernet+0x23/0x240 [ 1715.117742][T20573] ? __nla_parse+0x40/0x60 [ 1715.117769][T20573] nfnetlink_rcv+0x1288/0x28c0 [ 1715.117832][T20573] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 1715.117906][T20573] ? skb_clone+0x246/0x3a0 [ 1715.117944][T20573] ? netlink_deliver_tap+0x2e/0x1b0 [ 1715.117970][T20573] ? netlink_deliver_tap+0x2e/0x1b0 [ 1715.118002][T20573] netlink_unicast+0x8ef/0xa80 [ 1715.118052][T20573] netlink_sendmsg+0x7f0/0xb20 [ 1715.118086][T20573] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1715.118116][T20573] ? aa_sock_msg_perm+0x144/0x210 [ 1715.118148][T20573] ? apparmor_socket_sendmsg+0x98/0x360 [ 1715.118174][T20573] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1715.118198][T20573] sock_sendmsg_nosec+0x14e/0x190 [ 1715.118227][T20573] ____sys_sendmsg+0x54e/0x850 [ 1715.118265][T20573] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1715.118304][T20573] ? import_iovec+0x73/0xa0 [ 1715.118339][T20573] ___sys_sendmsg+0x2a5/0x360 [ 1715.118367][T20573] ? __lock_acquire+0x747/0x2de0 [ 1715.118398][T20573] ? __pfx____sys_sendmsg+0x10/0x10 [ 1715.118470][T20573] ? __fget_files+0x3a2/0x420 [ 1715.118493][T20573] ? __fget_files+0x2a/0x420 [ 1715.118527][T20573] __x64_sys_sendmsg+0x1b1/0x290 [ 1715.118551][T20573] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1715.118609][T20573] do_syscall_64+0x166/0x520 [ 1715.118629][T20573] ? trace_irq_disable+0x3b/0x140 [ 1715.118654][T20573] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1715.118676][T20573] ? clear_bhb_loop+0x70/0xc0 [ 1715.118704][T20573] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1715.118724][T20573] RIP: 0033:0x7f9b3239f559 [ 1715.118745][T20573] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1715.118763][T20573] RSP: 002b:00007f9b332ff028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1715.118786][T20573] RAX: ffffffffffffffda RBX: 00007f9b32625fa0 RCX: 00007f9b3239f559 [ 1715.118801][T20573] RDX: 0000000000000000 RSI: 0000200000000bc0 RDI: 0000000000000003 [ 1715.118814][T20573] RBP: 00007f9b332ff090 R08: 0000000000000000 R09: 0000000000000000 [ 1715.118827][T20573] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1715.118839][T20573] R13: 00007f9b32626038 R14: 00007f9b32625fa0 R15: 00007ffca2036a58 [ 1715.118875][T20573] [ 1715.544973][T20582] netlink: 8 bytes leftover after parsing attributes in process `syz.4.18081'. [ 1715.725371][T20582] bridge0: port 2(bridge_slave_1) entered disabled state [ 1715.727375][T20582] bridge0: port 1(bridge_slave_0) entered disabled state [ 1715.821381][T20589] netlink: 'syz.2.18082': attribute type 1 has an invalid length. [ 1715.897067][T20592] netlink: 20 bytes leftover after parsing attributes in process `syz.2.18082'. [ 1716.064445][ T3339] net_ratelimit: 126 callbacks suppressed [ 1716.064473][ T3339] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 1716.064510][ T3339] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 1716.172220][T16431] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 1716.172273][T16431] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 1716.272267][T20599] FAULT_INJECTION: forcing a failure. [ 1716.272267][T20599] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1716.275976][T20599] CPU: 0 UID: 0 PID: 20599 Comm: syz.5.18088 Not tainted syzkaller #0 PREEMPT(full) [ 1716.276008][T20599] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1716.276021][T20599] Call Trace: [ 1716.276032][T20599] [ 1716.276043][T20599] dump_stack_lvl+0xe8/0x150 [ 1716.276081][T20599] should_fail_ex+0x410/0x560 [ 1716.276117][T20599] _copy_from_user+0x2d/0xb0 [ 1716.276168][T20599] ___sys_recvmsg+0x173/0x5a0 [ 1716.276202][T20599] ? __pfx____sys_recvmsg+0x10/0x10 [ 1716.276228][T20599] ? lock_acquire+0x115/0x350 [ 1716.276285][T20599] do_recvmmsg+0x31a/0x800 [ 1716.276316][T20599] ? __pfx_do_recvmmsg+0x10/0x10 [ 1716.276351][T20599] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1716.276378][T20599] ? fdget+0x1ac/0x250 [ 1716.276410][T20599] __x64_sys_recvmmsg+0x198/0x250 [ 1716.276444][T20599] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1716.276480][T20599] do_syscall_64+0x166/0x520 [ 1716.276500][T20599] ? trace_irq_disable+0x3b/0x140 [ 1716.276524][T20599] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1716.276545][T20599] ? clear_bhb_loop+0x70/0xc0 [ 1716.276570][T20599] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1716.276591][T20599] RIP: 0033:0x7f9b3239f559 [ 1716.276612][T20599] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1716.276629][T20599] RSP: 002b:00007f9b332ff028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1716.276660][T20599] RAX: ffffffffffffffda RBX: 00007f9b32625fa0 RCX: 00007f9b3239f559 [ 1716.276675][T20599] RDX: 0000000000000007 RSI: 0000200000001300 RDI: 0000000000000003 [ 1716.276689][T20599] RBP: 00007f9b332ff090 R08: 0000000000000000 R09: 0000000000000000 [ 1716.276702][T20599] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000002 [ 1716.276715][T20599] R13: 00007f9b32626038 R14: 00007f9b32625fa0 R15: 00007ffca2036a58 [ 1716.276749][T20599] [ 1716.278706][T16428] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 1716.278742][T16428] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 1716.377270][T20603] netlink: 'syz.0.18089': attribute type 21 has an invalid length. [ 1716.398586][T32461] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 1716.398630][T32461] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 1716.510111][ T3339] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 1716.510172][ T3339] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 1716.587323][T20589] netlink: 20 bytes leftover after parsing attributes in process `syz.2.18082'. [ 1716.587356][T20589] nbd: device at index 64 is going down [ 1717.190740][T31415] Bluetooth: hci0: Opcode 0x0c3a failed: -110 [ 1717.191167][T31415] Bluetooth: hci0: command 0x0c3a tx timeout [ 1717.261699][T20608] udevd[20608]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1717.320680][T20604] udevd[20604]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1717.396002][T20619] netlink: 28 bytes leftover after parsing attributes in process `syz.5.18095'. [ 1717.746489][T20641] netlink: 8 bytes leftover after parsing attributes in process `syz.2.18101'. [ 1717.746529][T20641] netlink: 32 bytes leftover after parsing attributes in process `syz.2.18101'. [ 1718.052023][T20653] FAULT_INJECTION: forcing a failure. [ 1718.052023][T20653] name failslab, interval 1, probability 0, space 0, times 0 [ 1718.052064][T20653] CPU: 0 UID: 0 PID: 20653 Comm: syz.2.18107 Not tainted syzkaller #0 PREEMPT(full) [ 1718.052090][T20653] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1718.052104][T20653] Call Trace: [ 1718.052113][T20653] [ 1718.052124][T20653] dump_stack_lvl+0xe8/0x150 [ 1718.052162][T20653] should_fail_ex+0x410/0x560 [ 1718.052200][T20653] should_failslab+0xa8/0x100 [ 1718.052233][T20653] ? skb_clone+0x212/0x3a0 [ 1718.052256][T20653] kmem_cache_alloc_noprof+0x9c/0x600 [ 1718.052289][T20653] ? skb_clone+0x212/0x3a0 [ 1718.052319][T20653] skb_clone+0x212/0x3a0 [ 1718.052346][T20653] __netlink_deliver_tap+0x355/0x6e0 [ 1718.052388][T20653] ? netlink_deliver_tap+0x2e/0x1b0 [ 1718.052417][T20653] netlink_deliver_tap+0x19c/0x1b0 [ 1718.052446][T20653] netlink_sendskb+0x68/0x140 [ 1718.052474][T20653] nfnetlink_rcv+0x260c/0x28c0 [ 1718.052554][T20653] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 1718.052633][T20653] ? skb_clone+0x246/0x3a0 [ 1718.052672][T20653] ? netlink_deliver_tap+0x2e/0x1b0 [ 1718.052698][T20653] ? netlink_deliver_tap+0x2e/0x1b0 [ 1718.052731][T20653] netlink_unicast+0x8ef/0xa80 [ 1718.052777][T20653] netlink_sendmsg+0x7f0/0xb20 [ 1718.052812][T20653] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1718.052844][T20653] ? aa_sock_msg_perm+0x144/0x210 [ 1718.052877][T20653] ? apparmor_socket_sendmsg+0x98/0x360 [ 1718.052903][T20653] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1718.052930][T20653] sock_sendmsg_nosec+0x14e/0x190 [ 1718.052959][T20653] ____sys_sendmsg+0x54e/0x850 [ 1718.052999][T20653] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1718.053041][T20653] ? import_iovec+0x73/0xa0 [ 1718.053077][T20653] ___sys_sendmsg+0x2a5/0x360 [ 1718.053106][T20653] ? __lock_acquire+0x747/0x2de0 [ 1718.053137][T20653] ? __pfx____sys_sendmsg+0x10/0x10 [ 1718.053214][T20653] ? __fget_files+0x3a2/0x420 [ 1718.053237][T20653] ? __fget_files+0x2a/0x420 [ 1718.053272][T20653] __x64_sys_sendmsg+0x1b1/0x290 [ 1718.053297][T20653] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1718.053355][T20653] do_syscall_64+0x166/0x520 [ 1718.053377][T20653] ? trace_irq_disable+0x3b/0x140 [ 1718.053402][T20653] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1718.053425][T20653] ? clear_bhb_loop+0x70/0xc0 [ 1718.053453][T20653] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1718.053474][T20653] RIP: 0033:0x7f1fc7f9f559 [ 1718.053496][T20653] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1718.053515][T20653] RSP: 002b:00007f1fc8e9e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1718.053548][T20653] RAX: ffffffffffffffda RBX: 00007f1fc8225fa0 RCX: 00007f1fc7f9f559 [ 1718.053565][T20653] RDX: 0000000000000000 RSI: 0000200000000bc0 RDI: 0000000000000003 [ 1718.053579][T20653] RBP: 00007f1fc8e9e090 R08: 0000000000000000 R09: 0000000000000000 [ 1718.053592][T20653] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1718.053605][T20653] R13: 00007f1fc8226038 R14: 00007f1fc8225fa0 R15: 00007ffe07f3f458 [ 1718.053643][T20653] [ 1718.566350][T20664] netlink: 'syz.3.18108': attribute type 10 has an invalid length. [ 1718.603737][T20666] xt_NETMAP: bad rangesize 37. [ 1718.608246][T20664] batadv0: entered promiscuous mode [ 1718.608273][T20664] batadv0: entered allmulticast mode [ 1718.634156][T20664] bridge0: port 3(batadv0) entered blocking state [ 1718.638431][T20664] bridge0: port 3(batadv0) entered disabled state [ 1718.667834][T20664] bridge0: port 3(batadv0) entered blocking state [ 1718.668035][T20664] bridge0: port 3(batadv0) entered forwarding state [ 1718.865914][T20672] __nla_validate_parse: 2 callbacks suppressed [ 1718.865940][T20672] netlink: 28 bytes leftover after parsing attributes in process `syz.4.18112'. [ 1718.865989][T20672] netlink: 28 bytes leftover after parsing attributes in process `syz.4.18112'. [ 1718.893860][ T3339] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 1718.893884][ T3339] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 1718.917063][T20673] netlink: 28 bytes leftover after parsing attributes in process `syz.4.18112'. [ 1718.917094][T20673] netlink: 28 bytes leftover after parsing attributes in process `syz.4.18112'. [ 1719.458070][T20682] syz.4.18115: vmalloc error: size 8589938688, exceeds total pages, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1719.458193][T20682] CPU: 0 UID: 0 PID: 20682 Comm: syz.4.18115 Not tainted syzkaller #0 PREEMPT(full) [ 1719.458219][T20682] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1719.458232][T20682] Call Trace: [ 1719.458241][T20682] [ 1719.458252][T20682] dump_stack_lvl+0xe8/0x150 [ 1719.458296][T20682] warn_alloc+0x24d/0x270 [ 1719.458325][T20682] ? kasan_save_track+0x4f/0x80 [ 1719.458354][T20682] ? kasan_save_track+0x3e/0x80 [ 1719.458384][T20682] ? __pfx_warn_alloc+0x10/0x10 [ 1719.458408][T20682] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 1719.458439][T20682] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1719.458483][T20682] __vmalloc_node_range_noprof+0x127/0x1540 [ 1719.458534][T20682] ? rcu_is_watching+0x16/0xb0 [ 1719.458571][T20682] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1719.458595][T20682] ? __kmalloc_cache_noprof+0x31c/0x600 [ 1719.458623][T20682] ? __kmalloc_cache_noprof+0x148/0x600 [ 1719.458649][T20682] ? xskq_create+0x56/0x220 [ 1719.458773][T20682] xskq_create+0x148/0x220 [ 1719.458804][T20682] ? xsk_init_queue+0x8a/0xe0 [ 1719.458838][T20682] xsk_init_queue+0x8a/0xe0 [ 1719.458871][T20682] xsk_setsockopt+0x52a/0x960 [ 1719.458904][T20682] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1719.458942][T20682] ? __pfx_aa_sk_perm+0x10/0x10 [ 1719.458980][T20682] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 1719.459001][T20682] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1719.459032][T20682] do_sock_setsockopt+0x17c/0x1b0 [ 1719.459068][T20682] __x64_sys_setsockopt+0x13d/0x1b0 [ 1719.459105][T20682] do_syscall_64+0x166/0x520 [ 1719.459126][T20682] ? trace_irq_disable+0x3b/0x140 [ 1719.459152][T20682] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1719.459174][T20682] ? clear_bhb_loop+0x70/0xc0 [ 1719.459202][T20682] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1719.459223][T20682] RIP: 0033:0x7f489779f559 [ 1719.459246][T20682] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1719.459265][T20682] RSP: 002b:00007f48986ad028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1719.459289][T20682] RAX: ffffffffffffffda RBX: 00007f4897a25fa0 RCX: 00007f489779f559 [ 1719.459304][T20682] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000004 [ 1719.459318][T20682] RBP: 00007f4897836b20 R08: 0000000000000004 R09: 0000000000000000 [ 1719.459332][T20682] R10: 0000200000000300 R11: 0000000000000246 R12: 0000000000000000 [ 1719.459345][T20682] R13: 00007f4897a26038 R14: 00007f4897a25fa0 R15: 00007fff8a8fe178 [ 1719.459381][T20682] [ 1719.584048][T20682] Mem-Info: [ 1719.584067][T20682] active_anon:6765 inactive_anon:0 isolated_anon:0 [ 1719.584067][T20682] active_file:3 inactive_file:44452 isolated_file:0 [ 1719.584067][T20682] unevictable:0 dirty:176 writeback:0 [ 1719.584067][T20682] slab_reclaimable:13737 slab_unreclaimable:141804 [ 1719.584067][T20682] mapped:29828 shmem:551 pagetables:3616 [ 1719.584067][T20682] sec_pagetables:0 bounce:0 [ 1719.584067][T20682] kernel_misc_reclaimable:0 [ 1719.584067][T20682] free:1265458 free_pcp:9750 free_cma:0 [ 1719.584321][T20682] Node 0 active_anon:27060kB inactive_anon:0kB active_file:12kB inactive_file:177608kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:119312kB dirty:704kB writeback:0kB shmem:2204kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:19820kB pagetables:14316kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1719.584377][T20682] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:148kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1719.584427][T20682] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1719.584491][T20682] lowmem_reserve[]: 0 2467 2467 2467 2467 [ 1719.584529][T20682] Node 0 DMA32 free:1101956kB boost:0kB min:33980kB low:42472kB high:50964kB reserved_highatomic:0kB free_highatomic:0kB active_anon:27060kB inactive_anon:0kB active_file:12kB inactive_file:177608kB unevictable:0kB writepending:704kB zspages:0kB present:3129332kB managed:2526416kB mlocked:0kB bounce:0kB free_pcp:36748kB local_pcp:18076kB free_cma:0kB [ 1719.584584][T20682] lowmem_reserve[]: 0 0 0 0 0 [ 1719.584618][T20682] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:0kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1719.584669][T20682] lowmem_reserve[]: 0 0 0 0 0 [ 1719.584944][T20682] Node 1 Normal free:3944516kB boost:0kB min:55920kB low:69900kB high:83880kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:2252kB local_pcp:0kB free_cma:0kB [ 1719.584998][T20682] lowmem_reserve[]: 0 0 0 0 0 [ 1719.585033][T20682] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1719.585150][T20682] Node 0 DMA32: 971*4kB (UME) 225*8kB (UME) 207*16kB (M) 171*32kB (UME) 298*64kB (UME) 473*128kB (UM) 395*256kB (UME) 227*512kB (UM) 110*1024kB (U) 5*2048kB (UM) 163*4096kB (UM) = 1101956kB [ 1719.585310][T20682] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1719.585407][T20682] Node 1 Normal: 4*4kB (UM) 1*8kB (M) 2*16kB (UM) 2*32kB (UM) 2*64kB (UM) 3*128kB (UM) 4*256kB (UM) 5*512kB (UM) 2*1024kB (UM) 1*2048kB (U) 961*4096kB (UM) = 3944568kB [ 1719.585570][T20682] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1719.585586][T20682] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1719.585601][T20682] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1719.585617][T20682] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1719.585632][T20682] 45002 total pagecache pages [ 1719.585640][T20682] 0 pages in swap cache [ 1719.585648][T20682] Free swap = 124996kB [ 1719.585655][T20682] Total swap = 124996kB [ 1719.585664][T20682] 2097051 pages RAM [ 1719.585671][T20682] 0 pages HighMem/MovableOnly [ 1719.585678][T20682] 433831 pages reserved [ 1719.585686][T20682] 0 pages cma reserved [ 1720.120736][T20690] netlink: 24 bytes leftover after parsing attributes in process `syz.0.18118'. [ 1720.221506][T20690] netlink: 8 bytes leftover after parsing attributes in process `syz.0.18118'. [ 1720.225129][T20690] netlink: 80 bytes leftover after parsing attributes in process `syz.0.18118'. [ 1720.604128][T20702] netlink: 'syz.0.18124': attribute type 10 has an invalid length. [ 1720.604154][T20702] netlink: 40 bytes leftover after parsing attributes in process `syz.0.18124'. [ 1720.604183][T20702] batadv0: entered promiscuous mode [ 1720.604202][T20702] batadv0: entered allmulticast mode [ 1720.605315][T20702] bridge0: port 3(batadv0) entered blocking state [ 1720.606069][T20702] bridge0: port 3(batadv0) entered disabled state [ 1720.619978][T20702] bridge0: port 3(batadv0) entered blocking state [ 1720.620097][T20702] bridge0: port 3(batadv0) entered forwarding state [ 1720.733170][T20706] netlink: 32 bytes leftover after parsing attributes in process `syz.3.18126'. [ 1720.855896][T20706] ip6erspan0: entered allmulticast mode [ 1720.980264][T32125] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 1720.980286][T32125] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 1721.098134][T20719] netlink: 4 bytes leftover after parsing attributes in process `syz.0.18127'. [ 1721.100697][T32461] net_ratelimit: 69 callbacks suppressed [ 1721.100717][T32461] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 1721.100755][T32461] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 1721.221132][T16429] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 1721.221179][T16429] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 1721.333215][ T3339] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 1721.333269][ T3339] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 1721.424666][T20722] openvswitch: netlink: EtherType 547 is less than min 600 [ 1721.441784][T16432] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 1721.441830][T16432] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 1721.549668][T16429] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 1721.579810][ T3958] hid-generic 0005:15C2:5500.0001: hidraw0: BLUETOOTH HID v0.43 Device [syz0] on aa:aa:aa:aa:aa:aa [ 1721.763089][T20734] FAULT_INJECTION: forcing a failure. [ 1721.763089][T20734] name failslab, interval 1, probability 0, space 0, times 0 [ 1721.763127][T20734] CPU: 0 UID: 0 PID: 20734 Comm: syz.5.18133 Not tainted syzkaller #0 PREEMPT(full) [ 1721.763152][T20734] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1721.763166][T20734] Call Trace: [ 1721.763174][T20734] [ 1721.763184][T20734] dump_stack_lvl+0xe8/0x150 [ 1721.763223][T20734] should_fail_ex+0x410/0x560 [ 1721.763260][T20734] should_failslab+0xa8/0x100 [ 1721.763291][T20734] __kmalloc_node_track_caller_noprof+0xf6/0x720 [ 1721.763320][T20734] ? mgmt_pending_new+0xc4/0x1e0 [ 1721.763418][T20734] ? mgmt_pending_new+0xc4/0x1e0 [ 1721.763448][T20734] ? mgmt_pending_new+0x65/0x1e0 [ 1721.763483][T20734] kmemdup_noprof+0x2b/0x70 [ 1721.763516][T20734] mgmt_pending_new+0xc4/0x1e0 [ 1721.763553][T20734] mgmt_pending_add+0x35/0x140 [ 1721.763586][T20734] ? set_discoverable+0x842/0xc60 [ 1721.763654][T20734] set_discoverable+0x86c/0xc60 [ 1721.763691][T20734] hci_mgmt_cmd+0xa2c/0xfc0 [ 1721.763754][T20734] hci_sock_sendmsg+0x6e8/0xfd0 [ 1721.763798][T20734] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 1721.763836][T20734] ? apparmor_socket_sendmsg+0x98/0x360 [ 1721.763859][T20734] ? lock_acquire+0x115/0x350 [ 1721.763886][T20734] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 1721.763916][T20734] sock_sendmsg_nosec+0x14e/0x190 [ 1721.763947][T20734] sock_write_iter+0x2de/0x3e0 [ 1721.763975][T20734] ? __pfx_sock_write_iter+0x10/0x10 [ 1721.764011][T20734] ? bpf_lsm_file_permission+0x9/0x20 [ 1721.764043][T20734] ? security_file_permission+0x75/0x260 [ 1721.764079][T20734] vfs_write+0x612/0xba0 [ 1721.764116][T20734] ? __pfx_vfs_write+0x10/0x10 [ 1721.764145][T20734] ? __fget_files+0x3a2/0x420 [ 1721.764168][T20734] ? __fget_files+0x2a/0x420 [ 1721.764197][T20734] ? fdget+0x1ac/0x250 [ 1721.764229][T20734] ksys_write+0x150/0x270 [ 1721.764259][T20734] ? __pfx_ksys_write+0x10/0x10 [ 1721.764299][T20734] do_syscall_64+0x166/0x520 [ 1721.764320][T20734] ? trace_irq_disable+0x3b/0x140 [ 1721.764346][T20734] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1721.764370][T20734] ? clear_bhb_loop+0x70/0xc0 [ 1721.764397][T20734] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1721.764419][T20734] RIP: 0033:0x7f9b3239f559 [ 1721.764441][T20734] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1721.764461][T20734] RSP: 002b:00007f9b332ff028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1721.764485][T20734] RAX: ffffffffffffffda RBX: 00007f9b32625fa0 RCX: 00007f9b3239f559 [ 1721.764501][T20734] RDX: 0000000000000009 RSI: 0000200000000b80 RDI: 0000000000000004 [ 1721.764515][T20734] RBP: 00007f9b332ff090 R08: 0000000000000000 R09: 0000000000000000 [ 1721.764530][T20734] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1721.764543][T20734] R13: 00007f9b32626038 R14: 00007f9b32625fa0 R15: 00007ffca2036a58 [ 1721.764581][T20734] [ 1722.893284][T20761] FAULT_INJECTION: forcing a failure. [ 1722.893284][T20761] name failslab, interval 1, probability 0, space 0, times 0 [ 1722.893412][T20761] CPU: 0 UID: 0 PID: 20761 Comm: syz.0.18140 Not tainted syzkaller #0 PREEMPT(full) [ 1722.893438][T20761] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1722.893451][T20761] Call Trace: [ 1722.893460][T20761] [ 1722.893470][T20761] dump_stack_lvl+0xe8/0x150 [ 1722.893508][T20761] should_fail_ex+0x410/0x560 [ 1722.893543][T20761] ? __alloc_skb+0x1db/0x7a0 [ 1722.893570][T20761] should_failslab+0xa8/0x100 [ 1722.893603][T20761] ? __alloc_skb+0x1db/0x7a0 [ 1722.893628][T20761] kmem_cache_alloc_node_noprof+0x9c/0x600 [ 1722.893653][T20761] ? __alloc_skb+0x18d/0x7a0 [ 1722.893682][T20761] ? __alloc_skb+0x1db/0x7a0 [ 1722.893717][T20761] __alloc_skb+0x1db/0x7a0 [ 1722.893749][T20761] netlink_ack+0x136/0xb30 [ 1722.893774][T20761] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1722.893824][T20761] netlink_rcv_skb+0x2a4/0x4a0 [ 1722.893850][T20761] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1722.893895][T20761] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1722.893938][T20761] ? down_read+0x2b9/0x320 [ 1722.893968][T20761] genl_rcv+0x28/0x40 [ 1722.893996][T20761] netlink_unicast+0x8ef/0xa80 [ 1722.894039][T20761] netlink_sendmsg+0x7f0/0xb20 [ 1722.894073][T20761] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1722.894103][T20761] ? aa_sock_msg_perm+0x144/0x210 [ 1722.894135][T20761] ? apparmor_socket_sendmsg+0x98/0x360 [ 1722.894162][T20761] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1722.894186][T20761] sock_sendmsg_nosec+0x14e/0x190 [ 1722.894217][T20761] ____sys_sendmsg+0x54e/0x850 [ 1722.894264][T20761] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1722.894306][T20761] ? import_iovec+0x73/0xa0 [ 1722.894340][T20761] ___sys_sendmsg+0x2a5/0x360 [ 1722.894368][T20761] ? __lock_acquire+0x747/0x2de0 [ 1722.894395][T20761] ? __pfx____sys_sendmsg+0x10/0x10 [ 1722.894467][T20761] ? __fget_files+0x3a2/0x420 [ 1722.894490][T20761] ? __fget_files+0x2a/0x420 [ 1722.894524][T20761] __x64_sys_sendmsg+0x1b1/0x290 [ 1722.894550][T20761] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1722.894608][T20761] do_syscall_64+0x166/0x520 [ 1722.894629][T20761] ? trace_irq_disable+0x3b/0x140 [ 1722.894653][T20761] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1722.894675][T20761] ? clear_bhb_loop+0x70/0xc0 [ 1722.894702][T20761] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1722.894724][T20761] RIP: 0033:0x7f1c9c99f559 [ 1722.894746][T20761] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1722.894765][T20761] RSP: 002b:00007f1c9d884028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1722.894789][T20761] RAX: ffffffffffffffda RBX: 00007f1c9cc25fa0 RCX: 00007f1c9c99f559 [ 1722.894805][T20761] RDX: 000000000000c000 RSI: 0000200000000040 RDI: 0000000000000003 [ 1722.894819][T20761] RBP: 00007f1c9d884090 R08: 0000000000000000 R09: 0000000000000000 [ 1722.894832][T20761] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1722.894845][T20761] R13: 00007f1c9cc26038 R14: 00007f1c9cc25fa0 R15: 00007ffe2af28d88 [ 1722.894936][T20761] [ 1723.625782][T20774] x_tables: duplicate underflow at hook 1 [ 1723.782391][T20776] FAULT_INJECTION: forcing a failure. [ 1723.782391][T20776] name failslab, interval 1, probability 0, space 0, times 0 [ 1723.782441][T20776] CPU: 0 UID: 0 PID: 20776 Comm: syz.3.18145 Not tainted syzkaller #0 PREEMPT(full) [ 1723.782465][T20776] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1723.782478][T20776] Call Trace: [ 1723.782488][T20776] [ 1723.782505][T20776] dump_stack_lvl+0xe8/0x150 [ 1723.782544][T20776] should_fail_ex+0x410/0x560 [ 1723.782577][T20776] ? __pfx_set_discoverable_sync+0x10/0x10 [ 1723.782610][T20776] should_failslab+0xa8/0x100 [ 1723.782644][T20776] __kmalloc_cache_noprof+0x9e/0x600 [ 1723.782672][T20776] ? hci_cmd_sync_submit+0xc4/0x2d0 [ 1723.782696][T20776] ? hci_cmd_sync_submit+0xc4/0x2d0 [ 1723.782720][T20776] ? __cancel_work+0x17f/0x230 [ 1723.782754][T20776] ? __pfx_set_discoverable_sync+0x10/0x10 [ 1723.782785][T20776] hci_cmd_sync_submit+0xc4/0x2d0 [ 1723.782808][T20776] ? __pfx_mgmt_set_discoverable_complete+0x10/0x10 [ 1723.782893][T20776] set_discoverable+0x97a/0xc60 [ 1723.782934][T20776] hci_mgmt_cmd+0xa2c/0xfc0 [ 1723.782968][T20776] hci_sock_sendmsg+0x6e8/0xfd0 [ 1723.783018][T20776] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 1723.783057][T20776] ? apparmor_socket_sendmsg+0x98/0x360 [ 1723.783080][T20776] ? lock_acquire+0x115/0x350 [ 1723.783104][T20776] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 1723.783134][T20776] sock_sendmsg_nosec+0x14e/0x190 [ 1723.783164][T20776] sock_write_iter+0x2de/0x3e0 [ 1723.783191][T20776] ? __pfx_sock_write_iter+0x10/0x10 [ 1723.783225][T20776] ? bpf_lsm_file_permission+0x9/0x20 [ 1723.783246][T20776] ? security_file_permission+0x75/0x260 [ 1723.783278][T20776] vfs_write+0x612/0xba0 [ 1723.783312][T20776] ? __pfx_vfs_write+0x10/0x10 [ 1723.783341][T20776] ? __fget_files+0x3a2/0x420 [ 1723.783362][T20776] ? __fget_files+0x2a/0x420 [ 1723.783399][T20776] ? fdget+0x1ac/0x250 [ 1723.783431][T20776] ksys_write+0x150/0x270 [ 1723.783458][T20776] ? __pfx_ksys_write+0x10/0x10 [ 1723.783496][T20776] do_syscall_64+0x166/0x520 [ 1723.783517][T20776] ? trace_irq_disable+0x3b/0x140 [ 1723.783540][T20776] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1723.783562][T20776] ? clear_bhb_loop+0x70/0xc0 [ 1723.783589][T20776] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1723.783616][T20776] RIP: 0033:0x7f0e7859f559 [ 1723.783638][T20776] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1723.783657][T20776] RSP: 002b:00007f0e79526028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1723.783680][T20776] RAX: ffffffffffffffda RBX: 00007f0e78825fa0 RCX: 00007f0e7859f559 [ 1723.783696][T20776] RDX: 0000000000000009 RSI: 0000200000000b80 RDI: 0000000000000004 [ 1723.783709][T20776] RBP: 00007f0e79526090 R08: 0000000000000000 R09: 0000000000000000 [ 1723.783723][T20776] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1723.783736][T20776] R13: 00007f0e78826038 R14: 00007f0e78825fa0 R15: 00007ffcf51fd4f8 [ 1723.783774][T20776] [ 1724.277813][T20780] __nla_validate_parse: 3 callbacks suppressed [ 1724.277837][T20780] netlink: 8 bytes leftover after parsing attributes in process `syz.0.18147'. [ 1724.277853][T20780] netlink: 12 bytes leftover after parsing attributes in process `syz.0.18147'. [ 1724.277878][T20780] netlink: 4 bytes leftover after parsing attributes in process `syz.0.18147'. [ 1724.561789][T20797] netlink: 4 bytes leftover after parsing attributes in process `syz.5.18148'. [ 1725.418488][ C1] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 1725.817340][T20829] netlink: 16 bytes leftover after parsing attributes in process `syz.3.18161'. [ 1725.818440][T20826] netlink: 12 bytes leftover after parsing attributes in process `syz.3.18161'. [ 1725.818465][T20826] netlink: 12 bytes leftover after parsing attributes in process `syz.3.18161'. [ 1726.034604][T20833] netlink: 4 bytes leftover after parsing attributes in process `syz.0.18162'. [ 1726.180610][T16429] net_ratelimit: 66 callbacks suppressed [ 1726.180636][T16429] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 1726.180718][T16429] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 1726.302008][T20841] netlink: 8 bytes leftover after parsing attributes in process `syz.2.18163'. [ 1726.302046][T20841] netlink: 12 bytes leftover after parsing attributes in process `syz.2.18163'. [ 1726.743214][T20855] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 1726.903805][T20861] netlink: 'syz.3.18169': attribute type 6 has an invalid length. [ 1727.926077][T20877] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 1728.952220][T20879] openvswitch: netlink: Missing key (keys=40, expected=100) [ 1729.234139][T20858] bond1: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-alb(6) [ 1729.237138][T20858] bond1 (unregistering): Released all slaves [ 1729.337418][T20863] syz_tun: entered allmulticast mode [ 1729.340875][T32125] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1729.341003][T32125] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 1729.341040][T32125] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 1729.342172][T32125] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1729.425381][T32460] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1729.451629][T20865] dvmrp8: entered allmulticast mode [ 1729.499203][T32460] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1729.499269][T32460] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 1729.499311][T32460] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 1729.505594][T20885] netlink: zone id is out of range [ 1730.354054][T20895] veth1_to_bond: entered allmulticast mode [ 1730.425040][T20908] __nla_validate_parse: 7 callbacks suppressed [ 1730.425065][T20908] netlink: 24 bytes leftover after parsing attributes in process `syz.5.18181'. [ 1730.606565][T20912] netlink: 12 bytes leftover after parsing attributes in process `syz.5.18181'. [ 1730.877167][T20916] veth3: entered allmulticast mode [ 1730.967370][T20923] netlink: 'syz.3.18184': attribute type 6 has an invalid length. [ 1731.008873][T20920] bond1: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-alb(6) [ 1731.128760][T20920] bond1 (unregistering): Released all slaves [ 1731.240880][T20928] netlink: 8 bytes leftover after parsing attributes in process `syz.0.18187'. [ 1731.326923][T32460] net_ratelimit: 67 callbacks suppressed [ 1731.326949][T32460] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 1731.326991][T32460] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 1731.405351][T20893] veth1_to_bond: left allmulticast mode [ 1731.406230][T20935] FAULT_INJECTION: forcing a failure. [ 1731.406230][T20935] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1731.406263][T20935] CPU: 0 UID: 0 PID: 20935 Comm: syz.5.18189 Not tainted syzkaller #0 PREEMPT(full) [ 1731.406287][T20935] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1731.406299][T20935] Call Trace: [ 1731.406309][T20935] [ 1731.406318][T20935] dump_stack_lvl+0xe8/0x150 [ 1731.406357][T20935] should_fail_ex+0x410/0x560 [ 1731.406393][T20935] _copy_to_user+0x31/0xb0 [ 1731.406426][T20935] simple_read_from_buffer+0xe1/0x170 [ 1731.406457][T20935] proc_fail_nth_read+0x1bb/0x230 [ 1731.406494][T20935] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1731.406527][T20935] ? rw_verify_area+0x24a/0x4c0 [ 1731.406554][T20935] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1731.406582][T20935] vfs_read+0x213/0xa80 [ 1731.406612][T20935] ? __pfx___mutex_lock+0x10/0x10 [ 1731.406637][T20935] ? __pfx_vfs_read+0x10/0x10 [ 1731.406664][T20935] ? __fget_files+0x2a/0x420 [ 1731.406685][T20935] ? __fget_files+0x3a2/0x420 [ 1731.406710][T20935] ? __fget_files+0x2a/0x420 [ 1731.406738][T20935] ? fdget+0x1ac/0x250 [ 1731.406768][T20935] ksys_read+0x150/0x270 [ 1731.406796][T20935] ? __pfx_ksys_read+0x10/0x10 [ 1731.406833][T20935] do_syscall_64+0x166/0x520 [ 1731.406855][T20935] ? trace_irq_disable+0x3b/0x140 [ 1731.406878][T20935] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1731.406901][T20935] ? clear_bhb_loop+0x70/0xc0 [ 1731.406927][T20935] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1731.406948][T20935] RIP: 0033:0x7f9b3235fd8e [ 1731.406969][T20935] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1731.406988][T20935] RSP: 002b:00007f9b332fefe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1731.407020][T20935] RAX: ffffffffffffffda RBX: 00007f9b332ff6c0 RCX: 00007f9b3235fd8e [ 1731.407036][T20935] RDX: 000000000000000f RSI: 00007f9b332ff0a0 RDI: 0000000000000006 [ 1731.407050][T20935] RBP: 00007f9b332ff090 R08: 0000000000000000 R09: 0000000000000000 [ 1731.407063][T20935] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1731.407077][T20935] R13: 00007f9b32626038 R14: 00007f9b32625fa0 R15: 00007ffca2036a58 [ 1731.407113][T20935] [ 1731.442017][T16433] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 1731.442063][T16433] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 1731.619146][T32124] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 1731.624207][T16429] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 1731.730289][T32124] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 1731.730365][T32124] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 1731.841588][T32460] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 1731.841651][T32460] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 1732.726477][T20955] bridge0: entered promiscuous mode [ 1732.726703][T20955] bridge0: entered allmulticast mode [ 1732.843681][T20963] bond1: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-alb(6) [ 1732.937695][T20965] netlink: 'syz.3.18200': attribute type 6 has an invalid length. [ 1733.016615][T20963] bond1 (unregistering): Released all slaves [ 1733.174723][T20968] netlink: 'syz.4.18202': attribute type 12 has an invalid length. [ 1733.174785][T20968] netlink: 12 bytes leftover after parsing attributes in process `syz.4.18202'. [ 1733.175024][T20966] syzkaller0: left promiscuous mode [ 1733.175044][T20966] syzkaller0: left allmulticast mode [ 1733.176712][T20971] tipc: Started in network mode [ 1733.176821][T20971] tipc: Node identity b6157d6893dd, cluster identity 4711 [ 1733.177481][T20971] tipc: Enabled bearer , priority 10 [ 1733.186446][T20975] FAULT_INJECTION: forcing a failure. [ 1733.186446][T20975] name failslab, interval 1, probability 0, space 0, times 0 [ 1733.186479][T20975] CPU: 1 UID: 0 PID: 20975 Comm: syz.2.18203 Not tainted syzkaller #0 PREEMPT(full) [ 1733.186501][T20975] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1733.186513][T20975] Call Trace: [ 1733.186522][T20975] [ 1733.186531][T20975] dump_stack_lvl+0xe8/0x150 [ 1733.186570][T20975] should_fail_ex+0x410/0x560 [ 1733.186603][T20975] should_failslab+0xa8/0x100 [ 1733.186634][T20975] __kmalloc_node_track_caller_noprof+0xf6/0x720 [ 1733.186662][T20975] ? kobject_set_name_vargs+0x61/0x110 [ 1733.186685][T20975] ? kobject_set_name_vargs+0x61/0x110 [ 1733.186715][T20975] kstrdup+0x42/0x100 [ 1733.186742][T20975] kobject_set_name_vargs+0x61/0x110 [ 1733.186768][T20975] dev_set_name+0xe2/0x140 [ 1733.186801][T20975] ? __pfx_dev_set_name+0x10/0x10 [ 1733.186825][T20975] ? __init_waitqueue_head+0xa8/0x150 [ 1733.186856][T20975] ? device_initialize+0x394/0x470 [ 1733.186885][T20975] netdev_register_kobject+0xb7/0x350 [ 1733.186989][T20975] register_netdevice+0x17be/0x2280 [ 1733.187029][T20975] ? __pfx_register_netdevice+0x10/0x10 [ 1733.187053][T20975] ? macvlan_changelink_sources+0x84b/0x1650 [ 1733.187126][T20975] macvlan_common_newlink+0x12e5/0x1a50 [ 1733.187150][T20975] ? alloc_netdev_mqs+0xd5b/0x1240 [ 1733.187171][T20975] ? alloc_netdev_mqs+0xd5b/0x1240 [ 1733.187206][T20975] ? __pfx_macvlan_common_newlink+0x10/0x10 [ 1733.187234][T20975] ? rtnl_create_link+0xa04/0xd70 [ 1733.187259][T20975] ? __pfx_macvlan_newlink+0x10/0x10 [ 1733.187296][T20975] rtnl_newlink_create+0x305/0x7b0 [ 1733.187325][T20975] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 1733.187350][T20975] ? __pfx___mutex_lock+0x10/0x10 [ 1733.187383][T20975] ? ns_capable+0x84/0xe0 [ 1733.187412][T20975] rtnl_newlink+0x167a/0x1c30 [ 1733.187458][T20975] ? __pfx_rtnl_newlink+0x10/0x10 [ 1733.187491][T20975] ? finish_task_switch+0x40e/0xc60 [ 1733.187517][T20975] ? lockdep_hardirqs_on+0x7b/0x110 [ 1733.187540][T20975] ? rcu_is_watching+0x16/0xb0 [ 1733.187566][T20975] ? trace_sched_exit_tp+0x3a/0x130 [ 1733.187592][T20975] ? __schedule+0x17f3/0x5820 [ 1733.187641][T20975] ? kasan_quarantine_put+0xbb/0x1f0 [ 1733.187672][T20975] ? __pfx___schedule+0x10/0x10 [ 1733.187697][T20975] ? nlmon_xmit+0xb0/0x100 [ 1733.187729][T20975] ? __lock_acquire+0x747/0x2de0 [ 1733.187758][T20975] ? __pfx_hook_capable+0x10/0x10 [ 1733.187783][T20975] ? __dev_queue_xmit+0x29b/0x3920 [ 1733.187805][T20975] ? preempt_schedule_thunk+0x16/0x40 [ 1733.187830][T20975] ? __pfx_hook_capable+0x10/0x10 [ 1733.187886][T20975] ? __pfx_rtnl_newlink+0x10/0x10 [ 1733.187913][T20975] rtnetlink_rcv_msg+0x802/0xc00 [ 1733.187945][T20975] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 1733.187972][T20975] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1733.188004][T20975] ? __copy_skb_header+0xa3/0x4a0 [ 1733.188038][T20975] netlink_rcv_skb+0x226/0x4a0 [ 1733.188063][T20975] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1733.188094][T20975] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1733.188145][T20975] netlink_unicast+0x8ef/0xa80 [ 1733.188186][T20975] netlink_sendmsg+0x7f0/0xb20 [ 1733.188220][T20975] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1733.188252][T20975] ? aa_sock_msg_perm+0x144/0x210 [ 1733.188295][T20975] ? apparmor_socket_sendmsg+0x98/0x360 [ 1733.188323][T20975] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1733.188348][T20975] sock_sendmsg_nosec+0x14e/0x190 [ 1733.188378][T20975] ____sys_sendmsg+0x54e/0x850 [ 1733.188418][T20975] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1733.188461][T20975] ? import_iovec+0x73/0xa0 [ 1733.188496][T20975] ___sys_sendmsg+0x2a5/0x360 [ 1733.188525][T20975] ? __lock_acquire+0x747/0x2de0 [ 1733.188554][T20975] ? __pfx____sys_sendmsg+0x10/0x10 [ 1733.188630][T20975] ? __fget_files+0x3a2/0x420 [ 1733.188652][T20975] ? __fget_files+0x2a/0x420 [ 1733.188686][T20975] __x64_sys_sendmsg+0x1b1/0x290 [ 1733.188710][T20975] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1733.188767][T20975] do_syscall_64+0x166/0x520 [ 1733.188787][T20975] ? trace_irq_disable+0x3b/0x140 [ 1733.188812][T20975] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1733.188833][T20975] ? clear_bhb_loop+0x70/0xc0 [ 1733.188859][T20975] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1733.188880][T20975] RIP: 0033:0x7f1fc7f9f559 [ 1733.188901][T20975] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1733.188921][T20975] RSP: 002b:00007f1fc8e9e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1733.188945][T20975] RAX: ffffffffffffffda RBX: 00007f1fc8225fa0 RCX: 00007f1fc7f9f559 [ 1733.188961][T20975] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000003 [ 1733.188976][T20975] RBP: 00007f1fc8e9e090 R08: 0000000000000000 R09: 0000000000000000 [ 1733.188989][T20975] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1733.189003][T20975] R13: 00007f1fc8226038 R14: 00007f1fc8225fa0 R15: 00007ffe07f3f458 [ 1733.189040][T20975] [ 1733.508657][T20962] netlink: 80 bytes leftover after parsing attributes in process `syz.0.18201'. [ 1734.188732][T17438] tipc: Node number set to 633896296 [ 1734.442542][T32460] tipc: Subscription rejected, illegal request [ 1734.579211][T20989] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input6 [ 1734.616300][T20998] netlink: 80 bytes leftover after parsing attributes in process `syz.0.18213'. [ 1734.823768][T21001] netlink: 32 bytes leftover after parsing attributes in process `syz.2.18212'. [ 1734.825274][T21000] netlink: 32 bytes leftover after parsing attributes in process `syz.2.18212'. [ 1735.256401][T21014] netlink: 32 bytes leftover after parsing attributes in process `syz.0.18217'. [ 1735.256729][T21014] netlink: 32 bytes leftover after parsing attributes in process `syz.0.18217'. [ 1735.496148][T21014] __nla_validate_parse: 63 callbacks suppressed [ 1735.496172][T21014] netlink: 40 bytes leftover after parsing attributes in process `syz.0.18217'. [ 1735.583381][T21011] bridge0: port 4(vlan2) entered blocking state [ 1735.583610][T21011] bridge0: port 4(vlan2) entered disabled state [ 1735.583752][T21011] vlan2: entered allmulticast mode [ 1735.585732][T21011] vlan2: entered promiscuous mode [ 1735.628042][T21012] bridge0: port 3(batadv0) entered disabled state [ 1735.651789][T21012] bridge0: port 1(bridge_slave_0) entered disabled state [ 1735.696315][T21012] bridge_slave_1: left allmulticast mode [ 1735.696355][T21012] bridge_slave_1: left promiscuous mode [ 1735.696559][T21012] bridge0: port 2(bridge_slave_1) entered disabled state [ 1735.746609][T21012] bond3: (slave veth0_to_bond): Releasing backup interface [ 1735.971565][T21012] bond0: (slave bond_slave_0): Releasing backup interface [ 1736.047540][T21012] bond0: (slave bond_slave_1): Releasing backup interface [ 1736.161739][T21012] team0: Port device team_slave_0 removed [ 1736.199293][T21012] team0: Port device team_slave_1 removed [ 1736.202100][T21012] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1736.202124][T21012] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1736.428640][T16435] net_ratelimit: 50 callbacks suppressed [ 1736.428665][T16435] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 1736.428703][T16435] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 1736.539808][T16431] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 1736.539855][T16431] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 1736.597496][T21031] FAULT_INJECTION: forcing a failure. [ 1736.597496][T21031] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1736.597533][T21031] CPU: 0 UID: 0 PID: 21031 Comm: syz.3.18223 Not tainted syzkaller #0 PREEMPT(full) [ 1736.597557][T21031] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1736.597570][T21031] Call Trace: [ 1736.597578][T21031] [ 1736.597588][T21031] dump_stack_lvl+0xe8/0x150 [ 1736.597624][T21031] should_fail_ex+0x410/0x560 [ 1736.597659][T21031] _copy_from_iter+0x1d3/0x1660 [ 1736.597691][T21031] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1736.597726][T21031] ? __pfx_policy_nodemask+0x10/0x10 [ 1736.597758][T21031] ? lock_acquire+0x115/0x350 [ 1736.597781][T21031] ? __pfx__copy_from_iter+0x10/0x10 [ 1736.597810][T21031] ? alloc_pages_mpol+0x256/0x390 [ 1736.597850][T21031] copy_page_from_iter+0x219/0x2d0 [ 1736.597882][T21031] tun_get_user+0x212d/0x4470 [ 1736.597965][T21031] ? tun_get_user+0x6f9/0x4470 [ 1736.598003][T21031] ? aa_file_perm+0x4ed/0x15f0 [ 1736.598030][T21031] ? __pfx_tun_get_user+0x10/0x10 [ 1736.598084][T21031] ? __lock_acquire+0x747/0x2de0 [ 1736.598122][T21031] ? ref_tracker_alloc+0x172/0x530 [ 1736.598153][T21031] ? lock_acquire+0x115/0x350 [ 1736.598177][T21031] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 1736.598210][T21031] ? lock_acquire+0x115/0x350 [ 1736.598233][T21031] ? tun_get+0x1c/0x2f0 [ 1736.598269][T21031] ? tun_get+0x1c/0x2f0 [ 1736.598304][T21031] ? tun_get+0x1c/0x2f0 [ 1736.598339][T21031] tun_chr_write_iter+0x113/0x200 [ 1736.598373][T21031] vfs_write+0x612/0xba0 [ 1736.598407][T21031] ? __pfx_vfs_write+0x10/0x10 [ 1736.598435][T21031] ? __fget_files+0x3a2/0x420 [ 1736.598456][T21031] ? __fget_files+0x2a/0x420 [ 1736.598482][T21031] ? fdget+0x1ac/0x250 [ 1736.598511][T21031] ksys_write+0x150/0x270 [ 1736.598538][T21031] ? __pfx_ksys_write+0x10/0x10 [ 1736.598574][T21031] do_syscall_64+0x166/0x520 [ 1736.598595][T21031] ? trace_irq_disable+0x3b/0x140 [ 1736.598617][T21031] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1736.598636][T21031] ? clear_bhb_loop+0x70/0xc0 [ 1736.598661][T21031] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1736.598682][T21031] RIP: 0033:0x7f0e7855fd8e [ 1736.598703][T21031] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1736.598721][T21031] RSP: 002b:00007f0e79525fb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1736.598745][T21031] RAX: ffffffffffffffda RBX: 00007f0e795266c0 RCX: 00007f0e7855fd8e [ 1736.598761][T21031] RDX: 0000000000000066 RSI: 0000200000000840 RDI: 00000000000000c8 [ 1736.598775][T21031] RBP: 00007f0e79526090 R08: 0000000000000000 R09: 0000000000000000 [ 1736.598788][T21031] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1736.598801][T21031] R13: 00007f0e78826038 R14: 00007f0e78825fa0 R15: 00007ffcf51fd4f8 [ 1736.598837][T21031] [ 1736.666598][T16431] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 1736.666650][T16431] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 1736.779818][T32460] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 1736.779862][T32460] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 1736.981017][T21040] netlink: 52 bytes leftover after parsing attributes in process `syz.4.18226'. [ 1737.036536][T32461] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 1737.036595][T32461] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 1737.127845][T21035] FAULT_INJECTION: forcing a failure. [ 1737.127845][T21035] name failslab, interval 1, probability 0, space 0, times 0 [ 1737.127882][T21035] CPU: 0 UID: 0 PID: 21035 Comm: syz.2.18225 Not tainted syzkaller #0 PREEMPT(full) [ 1737.127905][T21035] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1737.127918][T21035] Call Trace: [ 1737.127927][T21035] [ 1737.127941][T21035] dump_stack_lvl+0xe8/0x150 [ 1737.127978][T21035] should_fail_ex+0x410/0x560 [ 1737.128014][T21035] should_failslab+0xa8/0x100 [ 1737.128044][T21035] ? __kernfs_new_node+0xe6/0x980 [ 1737.128144][T21035] kmem_cache_alloc_noprof+0x9c/0x600 [ 1737.128169][T21035] ? kstrdup+0x81/0x100 [ 1737.128196][T21035] ? __kernfs_new_node+0xe6/0x980 [ 1737.128232][T21035] __kernfs_new_node+0xe6/0x980 [ 1737.128270][T21035] ? __pfx___kernfs_new_node+0x10/0x10 [ 1737.128299][T21035] ? kernfs_root+0x1c/0x230 [ 1737.128334][T21035] ? kernfs_root+0x1c/0x230 [ 1737.128369][T21035] ? kernfs_root+0x1c/0x230 [ 1737.128395][T21035] ? kernfs_root+0x1c/0x230 [ 1737.128428][T21035] kernfs_create_dir_ns+0xf7/0x220 [ 1737.128455][T21035] sysfs_create_dir_ns+0x12f/0x2a0 [ 1737.128516][T21035] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 1737.128548][T21035] ? do_raw_spin_unlock+0xf5/0x200 [ 1737.128584][T21035] kobject_add_internal+0x622/0xcd0 [ 1737.128620][T21035] kobject_add+0x163/0x240 [ 1737.128653][T21035] ? __pfx_kobject_add+0x10/0x10 [ 1737.128675][T21035] ? kobject_put+0x50f/0x550 [ 1737.128706][T21035] ? get_device_parent+0x366/0x3a0 [ 1737.128742][T21035] device_add+0x3fa/0xb80 [ 1737.128775][T21035] netdev_register_kobject+0x197/0x350 [ 1737.128809][T21035] register_netdevice+0x17be/0x2280 [ 1737.128851][T21035] ? __pfx_register_netdevice+0x10/0x10 [ 1737.128876][T21035] ? macvlan_changelink_sources+0x84b/0x1650 [ 1737.128917][T21035] macvlan_common_newlink+0x12e5/0x1a50 [ 1737.128942][T21035] ? alloc_netdev_mqs+0xd5b/0x1240 [ 1737.128963][T21035] ? alloc_netdev_mqs+0xd5b/0x1240 [ 1737.128999][T21035] ? __pfx_macvlan_common_newlink+0x10/0x10 [ 1737.129029][T21035] ? rtnl_create_link+0xa04/0xd70 [ 1737.129055][T21035] ? __pfx_macvlan_newlink+0x10/0x10 [ 1737.129086][T21035] rtnl_newlink_create+0x305/0x7b0 [ 1737.129116][T21035] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 1737.129142][T21035] ? __pfx___mutex_lock+0x10/0x10 [ 1737.129176][T21035] ? ns_capable+0x84/0xe0 [ 1737.129207][T21035] rtnl_newlink+0x167a/0x1c30 [ 1737.129255][T21035] ? __pfx_rtnl_newlink+0x10/0x10 [ 1737.129283][T21035] ? __netlink_deliver_tap+0x4f1/0x6e0 [ 1737.129307][T21035] ? netlink_deliver_tap+0x19c/0x1b0 [ 1737.129330][T21035] ? netlink_unicast+0x8c1/0xa80 [ 1737.129350][T21035] ? netlink_sendmsg+0x7f0/0xb20 [ 1737.129382][T21035] ? sock_sendmsg_nosec+0x14e/0x190 [ 1737.129406][T21035] ? ____sys_sendmsg+0x54e/0x850 [ 1737.129433][T21035] ? ___sys_sendmsg+0x2a5/0x360 [ 1737.129461][T21035] ? __x64_sys_sendmsg+0x1b1/0x290 [ 1737.129479][T21035] ? do_syscall_64+0x166/0x520 [ 1737.129498][T21035] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1737.129561][T21035] ? kasan_quarantine_put+0xbb/0x1f0 [ 1737.129587][T21035] ? lockdep_hardirqs_on+0x7b/0x110 [ 1737.129612][T21035] ? nlmon_xmit+0xb0/0x100 [ 1737.129631][T21035] ? kmem_cache_free+0x182/0x650 [ 1737.129668][T21035] ? __lock_acquire+0x747/0x2de0 [ 1737.129699][T21035] ? __pfx_hook_capable+0x10/0x10 [ 1737.129723][T21035] ? __dev_queue_xmit+0x29b/0x3920 [ 1737.129750][T21035] ? __pfx_hook_capable+0x10/0x10 [ 1737.129775][T21035] ? lockdep_hardirqs_on+0x7b/0x110 [ 1737.129825][T21035] ? __pfx_rtnl_newlink+0x10/0x10 [ 1737.129854][T21035] rtnetlink_rcv_msg+0x802/0xc00 [ 1737.129887][T21035] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 1737.129916][T21035] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1737.129948][T21035] ? __copy_skb_header+0xa3/0x4a0 [ 1737.129983][T21035] netlink_rcv_skb+0x226/0x4a0 [ 1737.130010][T21035] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1737.130042][T21035] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1737.130083][T21035] ? netlink_deliver_tap+0x2e/0x1b0 [ 1737.130109][T21035] ? netlink_deliver_tap+0x2e/0x1b0 [ 1737.130141][T21035] netlink_unicast+0x8ef/0xa80 [ 1737.130192][T21035] netlink_sendmsg+0x7f0/0xb20 [ 1737.130225][T21035] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1737.130255][T21035] ? aa_sock_msg_perm+0x144/0x210 [ 1737.130286][T21035] ? apparmor_socket_sendmsg+0x98/0x360 [ 1737.130311][T21035] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1737.130336][T21035] sock_sendmsg_nosec+0x14e/0x190 [ 1737.130372][T21035] ____sys_sendmsg+0x54e/0x850 [ 1737.130409][T21035] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1737.130451][T21035] ? import_iovec+0x73/0xa0 [ 1737.130486][T21035] ___sys_sendmsg+0x2a5/0x360 [ 1737.130514][T21035] ? __lock_acquire+0x747/0x2de0 [ 1737.130542][T21035] ? __pfx____sys_sendmsg+0x10/0x10 [ 1737.130616][T21035] ? __fget_files+0x3a2/0x420 [ 1737.130638][T21035] ? __fget_files+0x2a/0x420 [ 1737.130671][T21035] __x64_sys_sendmsg+0x1b1/0x290 [ 1737.130696][T21035] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1737.130752][T21035] do_syscall_64+0x166/0x520 [ 1737.130772][T21035] ? trace_irq_disable+0x3b/0x140 [ 1737.130796][T21035] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1737.130817][T21035] ? clear_bhb_loop+0x70/0xc0 [ 1737.130843][T21035] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1737.130863][T21035] RIP: 0033:0x7f1fc7f9f559 [ 1737.130885][T21035] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1737.130902][T21035] RSP: 002b:00007f1fc8e9e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1737.130927][T21035] RAX: ffffffffffffffda RBX: 00007f1fc8225fa0 RCX: 00007f1fc7f9f559 [ 1737.130942][T21035] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000003 [ 1737.130956][T21035] RBP: 00007f1fc8e9e090 R08: 0000000000000000 R09: 0000000000000000 [ 1737.130969][T21035] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1737.130982][T21035] R13: 00007f1fc8226038 R14: 00007f1fc8225fa0 R15: 00007ffe07f3f458 [ 1737.131018][T21035] [ 1737.489825][T21035] kobject: kobject_add_internal failed for macvlan4 (error: -12 parent: net) [ 1737.861911][T31415] Bluetooth: hci1: command 0x0406 tx timeout [ 1737.976602][T21051] netlink: 'syz.4.18228': attribute type 10 has an invalid length. [ 1737.976634][T21051] netlink: 40 bytes leftover after parsing attributes in process `syz.4.18228'. [ 1738.146366][T21051] batadv0: entered promiscuous mode [ 1738.146396][T21051] batadv0: entered allmulticast mode [ 1738.147221][T21051] bridge0: port 3(batadv0) entered blocking state [ 1738.147339][T21051] bridge0: port 3(batadv0) entered disabled state [ 1738.453496][T16433] batman_adv: batadv0: IGMP Querier appeared [ 1738.453517][T16433] batman_adv: batadv0: MLD Querier appeared [ 1738.758869][T21069] netlink: 4 bytes leftover after parsing attributes in process `syz.2.18231'. [ 1738.766677][T21072] netlink: 24 bytes leftover after parsing attributes in process `syz.4.18234'. [ 1739.196101][T21080] netlink: 8 bytes leftover after parsing attributes in process `syz.4.18237'. [ 1739.196140][T21080] netlink: 32 bytes leftover after parsing attributes in process `syz.4.18237'. [ 1739.863421][T21098] netlink: 24 bytes leftover after parsing attributes in process `syz.4.18245'. [ 1740.205470][T21111] netlink: 4 bytes leftover after parsing attributes in process `syz.0.18251'. [ 1740.419681][T21111] netlink: 20 bytes leftover after parsing attributes in process `syz.0.18251'. [ 1740.515410][T21125] netlink: 24 bytes leftover after parsing attributes in process `syz.2.18257'. [ 1741.061903][T21139] netlink: 72 bytes leftover after parsing attributes in process `syz.2.18262'. [ 1741.353793][T21150] netlink: 'syz.3.18264': attribute type 10 has an invalid length. [ 1741.353819][T21150] netlink: 40 bytes leftover after parsing attributes in process `syz.3.18264'. [ 1741.494488][T16427] net_ratelimit: 61 callbacks suppressed [ 1741.494514][T16427] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 1741.520620][ T3339] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 1741.612242][T32461] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 1741.640475][T32461] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 1741.722958][T32461] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 1741.763023][T16433] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 1741.843348][T16433] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 1741.869625][T16433] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 1741.951090][T32461] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 1741.984522][T21158] netlink: 80 bytes leftover after parsing attributes in process `syz.5.18269'. [ 1741.984558][T21158] openvswitch: netlink: Missing key (keys=40, expected=100) [ 1742.275355][T21174] IPVS: length: 249 != 8 [ 1742.601208][T21192] netlink: 8 bytes leftover after parsing attributes in process `syz.3.18275'. [ 1742.601247][T21192] netlink: 32 bytes leftover after parsing attributes in process `syz.3.18275'. [ 1742.817464][T21194] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 1742.965418][T21196] netlink: 'syz.2.18276': attribute type 10 has an invalid length. [ 1742.965444][T21196] netlink: 40 bytes leftover after parsing attributes in process `syz.2.18276'. [ 1742.965491][T21196] batadv0: entered promiscuous mode [ 1742.965510][T21196] batadv0: entered allmulticast mode [ 1742.966313][T21196] bridge0: port 3(batadv0) entered blocking state [ 1742.966439][T21196] bridge0: port 3(batadv0) entered disabled state [ 1743.061779][T21196] bridge0: port 3(batadv0) entered blocking state [ 1743.061906][T21196] bridge0: port 3(batadv0) entered forwarding state [ 1743.065316][T21198] netlink: 24 bytes leftover after parsing attributes in process `syz.3.18277'. [ 1743.934819][T21226] netlink: 8 bytes leftover after parsing attributes in process `syz.0.18288'. [ 1743.934859][T21226] netlink: 32 bytes leftover after parsing attributes in process `syz.0.18288'. [ 1744.316577][T16435] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 1744.316632][T16435] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 1744.723997][T21232] nbd: must specify at least one socket [ 1744.891501][T21241] 8021q: adding VLAN 0 to HW filter on device ipvlan3 [ 1745.271175][T31415] Bluetooth: hci0: command 0x0c3a tx timeout [ 1745.271850][T31111] Bluetooth: hci0: Opcode 0x0c3a failed: -110 [ 1746.069508][T21284] __nla_validate_parse: 5 callbacks suppressed [ 1746.069534][T21284] netlink: 104 bytes leftover after parsing attributes in process `syz.5.18307'. [ 1746.072523][T21282] netlink: 104 bytes leftover after parsing attributes in process `syz.5.18307'. [ 1746.199806][T21289] netlink: 8 bytes leftover after parsing attributes in process `syz.3.18309'. [ 1746.519790][T16431] net_ratelimit: 71 callbacks suppressed [ 1746.519815][T16431] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 1746.519852][T16431] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 1746.636442][T32461] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 1746.636490][T32461] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 1746.741064][T16432] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 1746.741113][T16432] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 1746.814627][T21303] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1746.863690][T16427] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 1746.863744][T16427] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 1746.980285][T16431] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 1747.413523][T21327] tipc: Resetting bearer [ 1747.553709][T21319] syzkaller0: entered promiscuous mode [ 1747.553752][T21319] syzkaller0: entered allmulticast mode [ 1747.558013][T21320] tipc: Enabling of bearer rejected, already enabled [ 1747.991174][T31415] Bluetooth: hci0: command 0x0c3a tx timeout [ 1747.991319][T31111] Bluetooth: hci0: Opcode 0x0c24 failed: -110 [ 1748.532631][T21358] netlink: 8 bytes leftover after parsing attributes in process `syz.2.18329'. [ 1748.532667][T21358] netlink: 8 bytes leftover after parsing attributes in process `syz.2.18329'. [ 1748.648017][T21362] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 1748.662313][T21363] netlink: 8 bytes leftover after parsing attributes in process `syz.5.18332'. [ 1748.692751][T21364] netlink: 8 bytes leftover after parsing attributes in process `syz.5.18332'. [ 1749.612877][T21392] x_tables: unsorted entry at hook 3 [ 1750.029380][T21400] netlink: 'syz.0.18339': attribute type 11 has an invalid length. [ 1750.115341][T21401] netlink: 8 bytes leftover after parsing attributes in process `syz.0.18339'. [ 1750.157616][T21400] netlink: 'syz.0.18339': attribute type 11 has an invalid length. [ 1750.172549][T21400] netlink: 'syz.0.18339': attribute type 11 has an invalid length. [ 1750.182631][T21400] netlink: 'syz.0.18339': attribute type 11 has an invalid length. [ 1750.192974][T21400] netlink: 'syz.0.18339': attribute type 11 has an invalid length. [ 1750.193168][T21400] debugfs: 'netdev@ffff88804c7b8720' already exists in 'ref_tracker' [ 1750.193820][T21400] netlink: 'syz.0.18339': attribute type 11 has an invalid length. [ 1750.193925][T21400] debugfs: 'netdev@ffff88804c7b8720' already exists in 'ref_tracker' [ 1750.194747][T21400] netlink: 'syz.0.18339': attribute type 11 has an invalid length. [ 1750.234534][T21400] netlink: 'syz.0.18339': attribute type 11 has an invalid length. [ 1750.262713][T21400] netlink: 'syz.0.18339': attribute type 11 has an invalid length. [ 1750.278204][T21400] netlink: 'syz.0.18339': attribute type 11 has an invalid length. [ 1750.565001][T21415] FAULT_INJECTION: forcing a failure. [ 1750.565001][T21415] name failslab, interval 1, probability 0, space 0, times 0 [ 1750.565040][T21415] CPU: 0 UID: 0 PID: 21415 Comm: syz.5.18344 Not tainted syzkaller #0 PREEMPT(full) [ 1750.565066][T21415] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1750.565078][T21415] Call Trace: [ 1750.565088][T21415] [ 1750.565097][T21415] dump_stack_lvl+0xe8/0x150 [ 1750.565134][T21415] should_fail_ex+0x410/0x560 [ 1750.565171][T21415] should_failslab+0xa8/0x100 [ 1750.565203][T21415] __kmalloc_cache_noprof+0x9e/0x600 [ 1750.565232][T21415] ? nf_tables_newchain+0x1098/0x28b0 [ 1750.565256][T21415] ? nf_tables_newchain+0x1098/0x28b0 [ 1750.565293][T21415] nf_tables_newchain+0x1098/0x28b0 [ 1750.565335][T21415] ? __pfx_nf_tables_newchain+0x10/0x10 [ 1750.565398][T21415] ? nfnl_pernet+0x23/0x240 [ 1750.565433][T21415] ? __nla_parse+0x40/0x60 [ 1750.565460][T21415] nfnetlink_rcv+0x1288/0x28c0 [ 1750.565523][T21415] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 1750.565598][T21415] ? skb_clone+0x246/0x3a0 [ 1750.565636][T21415] ? netlink_deliver_tap+0x2e/0x1b0 [ 1750.565663][T21415] ? netlink_deliver_tap+0x2e/0x1b0 [ 1750.565694][T21415] netlink_unicast+0x8ef/0xa80 [ 1750.565738][T21415] netlink_sendmsg+0x7f0/0xb20 [ 1750.565771][T21415] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1750.565802][T21415] ? aa_sock_msg_perm+0x144/0x210 [ 1750.565843][T21415] ? apparmor_socket_sendmsg+0x98/0x360 [ 1750.565869][T21415] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1750.565893][T21415] sock_sendmsg_nosec+0x14e/0x190 [ 1750.565923][T21415] ____sys_sendmsg+0x54e/0x850 [ 1750.565960][T21415] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1750.566002][T21415] ? import_iovec+0x73/0xa0 [ 1750.566035][T21415] ___sys_sendmsg+0x2a5/0x360 [ 1750.566063][T21415] ? __lock_acquire+0x747/0x2de0 [ 1750.566093][T21415] ? __pfx____sys_sendmsg+0x10/0x10 [ 1750.566164][T21415] ? __fget_files+0x3a2/0x420 [ 1750.566186][T21415] ? __fget_files+0x2a/0x420 [ 1750.566219][T21415] __x64_sys_sendmsg+0x1b1/0x290 [ 1750.566243][T21415] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1750.566297][T21415] do_syscall_64+0x166/0x520 [ 1750.566317][T21415] ? trace_irq_disable+0x3b/0x140 [ 1750.566341][T21415] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1750.566362][T21415] ? clear_bhb_loop+0x70/0xc0 [ 1750.566388][T21415] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1750.566409][T21415] RIP: 0033:0x7f9b3239f559 [ 1750.566430][T21415] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1750.566448][T21415] RSP: 002b:00007f9b332ff028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1750.566472][T21415] RAX: ffffffffffffffda RBX: 00007f9b32625fa0 RCX: 00007f9b3239f559 [ 1750.566487][T21415] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 1750.566501][T21415] RBP: 00007f9b332ff090 R08: 0000000000000000 R09: 0000000000000000 [ 1750.566514][T21415] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1750.566527][T21415] R13: 00007f9b32626038 R14: 00007f9b32625fa0 R15: 00007ffca2036a58 [ 1750.566562][T21415] [ 1750.864530][T21416] netlink: 'syz.4.18345': attribute type 1 has an invalid length. [ 1751.397567][T21416] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1751.451197][T21433] Cannot find set identified by id 0 to match [ 1751.478324][T21434] netlink: 20 bytes leftover after parsing attributes in process `syz.2.18348'. [ 1751.653612][T21441] netlink: 12 bytes leftover after parsing attributes in process `syz.5.18352'. [ 1751.653680][T21441] netlink: 12 bytes leftover after parsing attributes in process `syz.5.18352'. [ 1751.676632][T21417] bond2: (slave gretap1): making interface the new active one [ 1751.688070][T21417] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 1751.699412][T16427] net_ratelimit: 247 callbacks suppressed [ 1751.699437][T16427] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 1751.699477][T16427] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 1751.804091][T21446] netlink: zone id is out of range [ 1751.804112][T21446] netlink: zone id is out of range [ 1751.804122][T21446] netlink: zone id is out of range [ 1751.804131][T21446] netlink: zone id is out of range [ 1751.804141][T21446] netlink: zone id is out of range [ 1751.804149][T21446] netlink: zone id is out of range [ 1751.804159][T21446] netlink: zone id is out of range [ 1751.804167][T21446] netlink: zone id is out of range [ 1752.036763][T21450] xt_nfacct: accounting object `' does not exist [ 1752.641635][T21463] Cannot find set identified by id 0 to match [ 1753.023170][T21469] netlink: 'syz.2.18364': attribute type 10 has an invalid length. [ 1753.023199][T21469] netlink: 40 bytes leftover after parsing attributes in process `syz.2.18364'. [ 1753.404389][T21487] netlink: 24 bytes leftover after parsing attributes in process `syz.5.18370'. [ 1753.892691][T21499] Cannot find set identified by id 0 to match [ 1754.416923][T21514] netlink: 20 bytes leftover after parsing attributes in process `syz.0.18378'. [ 1754.470971][T31415] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1754.490478][T31415] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1754.507981][T31415] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1754.521417][T31415] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1754.522209][T31415] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1754.805327][T21524] netlink: 8 bytes leftover after parsing attributes in process `syz.2.18381'. [ 1755.211823][T21533] netlink: 'syz.4.18384': attribute type 13 has an invalid length. [ 1755.211853][T21533] netlink: 4 bytes leftover after parsing attributes in process `syz.4.18384'. [ 1755.281869][T21533] netlink: 'syz.4.18384': attribute type 13 has an invalid length. [ 1755.281897][T21533] netlink: 4 bytes leftover after parsing attributes in process `syz.4.18384'. [ 1755.290486][T16427] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1755.310627][T16427] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1755.323683][T16432] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1755.323732][T16432] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1755.965659][T21552] netlink: 48 bytes leftover after parsing attributes in process `syz.4.18388'. [ 1756.564358][T21568] Cannot find set identified by id 0 to match [ 1756.605402][T16430] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1756.619914][T21560] Bluetooth: hci4: command tx timeout [ 1756.758736][T16427] net_ratelimit: 296 callbacks suppressed [ 1756.758772][T16427] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 1756.758810][T16427] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 1756.857291][T21580] netlink: 8 bytes leftover after parsing attributes in process `syz.3.18396'. [ 1756.972114][T21580] netlink: 16 bytes leftover after parsing attributes in process `syz.3.18396'. [ 1757.263542][T16430] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1757.263584][T16430] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1757.347410][T21597] netlink: 'syz.0.18398': attribute type 6 has an invalid length. [ 1757.654141][T16430] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1757.654190][T16430] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1757.739387][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1757.740996][T21503] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 1757.741038][T21503] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 1757.929395][T16422] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 1757.929441][T16422] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 1757.995433][T21609] netlink: 4 bytes leftover after parsing attributes in process `syz.3.18401'. [ 1758.044522][T21503] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 1758.044569][T21503] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 1758.168053][T16431] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 1758.218717][T21560] Bluetooth: hci3: command 0x0406 tx timeout [ 1758.288715][T21611] netlink: 48 bytes leftover after parsing attributes in process `syz.2.18400'. [ 1758.592219][T16430] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1758.592261][T16430] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1758.698971][T31111] Bluetooth: hci4: command tx timeout [ 1758.742139][T21621] netlink: 'syz.2.18405': attribute type 6 has an invalid length. [ 1758.839187][T21617] bond3: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-alb(6) [ 1758.879758][T21617] bond3 (unregistering): Released all slaves [ 1759.254816][T21517] lo speed is unknown, defaulting to 1000 [ 1759.529548][T21637] netlink: 52 bytes leftover after parsing attributes in process `syz.3.18409'. [ 1759.529582][T21637] netlink: 52 bytes leftover after parsing attributes in process `syz.3.18409'. [ 1759.529600][T21637] netlink: 52 bytes leftover after parsing attributes in process `syz.3.18409'. [ 1759.598091][ T12] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1759.605934][T16427] netdevsim netdevsim5 eth4: set [1, 0] type 2 family 0 port 6081 - 0 [ 1759.606295][T16427] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1759.606332][T16427] netdevsim netdevsim5 eth5: set [1, 0] type 2 family 0 port 6081 - 0 [ 1759.651634][T21643] netlink: 'syz.0.18411': attribute type 12 has an invalid length. [ 1760.023532][T21649] xt_nfacct: accounting object `' does not exist [ 1760.071575][T16430] veth0: left allmulticast mode [ 1760.072299][T16430] veth0: left promiscuous mode [ 1760.125564][T16430] bridge0: port 3(veth0) entered disabled state [ 1760.276753][T16430] bridge_slave_1: left allmulticast mode [ 1760.278169][T16430] bridge_slave_1: left promiscuous mode [ 1760.280615][T16430] bridge0: port 2(bridge_slave_1) entered disabled state [ 1760.319071][T16430] bridge_slave_0: left allmulticast mode [ 1760.319560][T16430] bridge_slave_0: left promiscuous mode [ 1760.320690][T16430] bridge0: port 1(bridge_slave_0) entered disabled state [ 1760.483304][T16430] pimreg3: left allmulticast mode [ 1760.563749][T21662] xt_policy: neither incoming nor outgoing policy selected [ 1760.752395][T21662] xt_policy: neither incoming nor outgoing policy selected [ 1760.789739][T31111] Bluetooth: hci4: command tx timeout [ 1761.747001][T16430] bond1 (unregistering): Released all slaves [ 1761.774988][T16430] bond2 (unregistering): Released all slaves [ 1761.805566][T16430] bond3 (unregistering): Released all slaves [ 1761.835580][T16430] bond4 (unregistering): Released all slaves [ 1761.884412][T16430] bond0 (unregistering): Released all slaves [ 1761.908577][ C0] net_ratelimit: 17 callbacks suppressed [ 1761.908603][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1761.915360][T16430] bond5 (unregistering): Released all slaves [ 1761.956740][T16430] bond6 (unregistering): Released all slaves [ 1761.994523][T16430] bond7 (unregistering): Released all slaves [ 1762.017168][T16430] bond8 (unregistering): Released all slaves [ 1762.058060][T16430] bond9 (unregistering): Released all slaves [ 1762.081759][T16430] bond10 (unregistering): Released all slaves [ 1762.104282][T16430] bond11 (unregistering): Released all slaves [ 1762.144351][T16430] bond12 (unregistering): Released all slaves [ 1762.167523][T16430] bond13 (unregistering): Released all slaves [ 1762.205076][T16430] bond14 (unregistering): Released all slaves [ 1762.227510][T16430] bond15 (unregistering): Released all slaves [ 1762.264763][T16430] bond16 (unregistering): Released all slaves [ 1762.287527][T16430] bond17 (unregistering): Released all slaves [ 1762.317885][T16430] bond18 (unregistering): Released all slaves [ 1762.345829][T16430] bond19 (unregistering): Released all slaves [ 1762.370067][T16430] bond20 (unregistering): Released all slaves [ 1762.392003][T16430] bond21 (unregistering): Released all slaves [ 1762.448701][ T3320] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 1762.449442][ T3320] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 1762.452726][T21645] lo: entered promiscuous mode [ 1762.481534][T21645] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1762.529006][T21652] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1762.613119][T16427] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 1762.613177][T16427] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 1762.707036][ T5296] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1762.869737][T31111] Bluetooth: hci4: command tx timeout [ 1762.941897][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1763.248726][T16431] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 1763.248775][T16431] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 1763.405688][T21693] bond3: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-alb(6) [ 1763.476846][T21695] netlink: 28 bytes leftover after parsing attributes in process `syz.0.18421'. [ 1763.492817][T21698] netlink: 28 bytes leftover after parsing attributes in process `syz.0.18421'. [ 1763.532080][T21693] bond3 (unregistering): Released all slaves [ 1763.654187][T21695] netlink: 28 bytes leftover after parsing attributes in process `syz.0.18421'. [ 1763.821436][T16430] tipc: Left network mode [ 1763.956419][T21695] veth1_macvtap: left promiscuous mode [ 1764.603788][T21718] gretap1: entered promiscuous mode [ 1764.626722][T21718] batman_adv: batadv0: Adding interface: gretap1 [ 1764.626823][T21718] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1764.626856][T21718] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active [ 1764.699597][T21517] bridge0: port 1(bridge_slave_0) entered blocking state [ 1764.701383][T21517] bridge0: port 1(bridge_slave_0) entered disabled state [ 1764.701545][T21517] bridge_slave_0: entered allmulticast mode [ 1764.704816][T21517] bridge_slave_0: entered promiscuous mode [ 1764.737279][T21517] bridge0: port 2(bridge_slave_1) entered blocking state [ 1764.737529][T21517] bridge0: port 2(bridge_slave_1) entered disabled state [ 1764.737699][T21517] bridge_slave_1: entered allmulticast mode [ 1764.763764][T21517] bridge_slave_1: entered promiscuous mode [ 1765.034561][T21739] netlink: 36 bytes leftover after parsing attributes in process `syz.3.18426'. [ 1765.712153][T21517] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1765.942853][T21756] netlink: 16 bytes leftover after parsing attributes in process `syz.0.18431'. [ 1766.024911][T21517] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1766.060615][T21759] netlink: 16 bytes leftover after parsing attributes in process `syz.0.18431'. [ 1766.195809][T21763] netlink: 44 bytes leftover after parsing attributes in process `syz.2.18430'. [ 1766.727826][T21517] team0: Port device team_slave_0 added [ 1766.820772][T21517] team0: Port device team_slave_1 added [ 1767.100165][ C0] net_ratelimit: 8 callbacks suppressed [ 1767.100192][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1767.296802][T21777] xt_hashlimit: overflow, try lower: 18446744073709551613/4 [ 1767.327472][T21778] xt_hashlimit: overflow, try lower: 18446744073709551613/4 [ 1767.496826][T21517] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1767.496847][T21517] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1767.496875][T21517] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1767.544658][ T12] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 1767.544714][ T12] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 1767.604817][T21517] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1767.604839][T21517] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1767.604868][T21517] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1767.777586][ T5296] 8021q: adding VLAN 0 to HW filter on device eth3 [ 1767.789205][T16432] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 1767.789255][T16432] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 1767.983617][T21786] vxlan: RTM_NEWNEIGH with invalid state 0x10 [ 1768.139220][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1768.163843][T21794] Bluetooth: ISO socket layer initialized [ 1768.164991][T31111] Bluetooth: hci1: unexpected event for opcode 0x2003 [ 1768.360161][T16422] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 1768.402733][T21517] hsr_slave_0: entered promiscuous mode [ 1768.405768][T21517] hsr_slave_1: entered promiscuous mode [ 1768.417877][T21801] netlink: 20 bytes leftover after parsing attributes in process `syz.2.18443'. [ 1768.423737][T21517] debugfs: 'hsr0' already exists in 'hsr' [ 1768.423764][T21517] Cannot create hsr debugfs directory [ 1768.507205][T21804] netlink: 20 bytes leftover after parsing attributes in process `syz.2.18443'. [ 1768.619917][T21809] netlink: 36 bytes leftover after parsing attributes in process `syz.0.18446'. [ 1768.741304][T21801] ip6gre1: entered allmulticast mode [ 1768.877280][T16433] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 1769.188572][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1769.279061][ T12] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 1769.825649][T21835] xt_hashlimit: overflow, try lower: 18446744073709551613/4 [ 1770.804210][T21517] netdevsim netdevsim5 eth5 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1771.128680][T16430] hsr_slave_0: left promiscuous mode [ 1771.136889][T16430] hsr_slave_1: left promiscuous mode [ 1771.139827][T16430] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1771.140086][T16430] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1772.185263][T21892] x_tables: duplicate entry at hook 2 [ 1772.187908][T16430] team0 (unregistering): Port device team_slave_1 removed [ 1772.239526][T16430] team0 (unregistering): Port device team_slave_0 removed [ 1772.308602][ C0] net_ratelimit: 7 callbacks suppressed [ 1772.308629][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1772.484468][T16430] team0 (unregistering): Port device dummy0 removed [ 1772.569665][T21506] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 1772.569727][T21506] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 1772.690383][ T3320] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 1772.690438][ T3320] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 1772.793008][T21896] netlink: 4 bytes leftover after parsing attributes in process `syz.3.18467'. [ 1772.806745][T21517] netdevsim netdevsim5 eth4 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1772.844732][T21877] netlink: 76 bytes leftover after parsing attributes in process `syz.4.18465'. [ 1772.878377][T21889] syzkaller1: left promiscuous mode [ 1772.878643][T21889] syzkaller1: left allmulticast mode [ 1772.947786][T21896] bridge0: port 3(batadv0) entered disabled state [ 1772.981207][T21896] bridge_slave_1: left allmulticast mode [ 1772.988872][T21896] bridge_slave_1: left promiscuous mode [ 1772.989882][T21896] bridge0: port 2(bridge_slave_1) entered disabled state [ 1773.002408][T21896] bridge_slave_0: left allmulticast mode [ 1773.011102][T21896] bridge_slave_0: left promiscuous mode [ 1773.011942][T21896] bridge0: port 1(bridge_slave_0) entered disabled state [ 1773.220371][T21506] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 1773.220446][T21506] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 1773.331081][T21506] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 1773.331143][T21506] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 1773.341111][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1773.512159][T21900] xt_nfacct: accounting object `' does not exist [ 1773.540893][T21517] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1773.610401][T21902] xt_hashlimit: overflow, try lower: 18446744073709551613/4 [ 1773.853081][T21911] Cannot find set identified by id 0 to match [ 1773.938184][T21909] netlink: 48 bytes leftover after parsing attributes in process `syz.0.18469'. [ 1774.226620][T21517] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1774.375347][T16430] IPVS: stop unused estimator thread 0... [ 1774.920123][T21517] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1774.944279][T21517] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1774.952323][T21517] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1774.978225][T21941] Cannot find del_set index 2 as target [ 1774.995004][T21517] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1775.008130][T21517] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1775.055143][T21944] xt_ecn: cannot match TCP bits for non-tcp packets [ 1775.084405][T21517] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1775.097335][T21517] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1775.114070][T21942] netlink: 32 bytes leftover after parsing attributes in process `syz.3.18482'. [ 1775.152083][T21517] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1775.500138][T21957] netlink: 48 bytes leftover after parsing attributes in process `syz.0.18486'. [ 1775.747319][T21517] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1775.854298][T21517] 8021q: adding VLAN 0 to HW filter on device team0 [ 1775.894850][T16427] bridge0: port 1(bridge_slave_0) entered blocking state [ 1775.894983][T16427] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1776.039142][T16430] bridge0: port 2(bridge_slave_1) entered blocking state [ 1776.039278][T16430] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1776.967601][T22004] netlink: 48 bytes leftover after parsing attributes in process `syz.3.18498'. [ 1777.380241][T21506] net_ratelimit: 34 callbacks suppressed [ 1777.380267][T21506] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 1777.380310][T21506] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 1777.497082][ T12] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 1777.497126][ T12] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 1777.513716][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1777.612502][T16430] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 1777.612564][T16430] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 1777.754667][T16430] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 1777.754720][T16430] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 1777.871467][T21506] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 1778.286678][T22031] netlink: 16 bytes leftover after parsing attributes in process `syz.3.18505'. [ 1778.313093][T22035] netlink: 4 bytes leftover after parsing attributes in process `syz.2.18502'. [ 1778.704092][T21560] Bluetooth: hci0: command 0x0c3a tx timeout [ 1778.895137][T22048] netlink: 24 bytes leftover after parsing attributes in process `syz.0.18507'. [ 1779.332641][T22061] netlink: 48 bytes leftover after parsing attributes in process `syz.2.18509'. [ 1779.936085][T21517] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1780.192730][T22087] bond3: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-alb(6) [ 1780.201447][T22087] bond3 (unregistering): Released all slaves [ 1780.286912][T22094] netlink: 8 bytes leftover after parsing attributes in process `syz.3.18516'. [ 1780.286981][T22094] netlink: 32 bytes leftover after parsing attributes in process `syz.3.18516'. [ 1780.774411][T22103] netlink: 24 bytes leftover after parsing attributes in process `syz.0.18519'. [ 1780.912842][T22109] xt_TCPMSS: Only works on TCP SYN packets [ 1781.200338][T22120] xt_hashlimit: overflow, try lower: 18446744073709551613/4 [ 1781.485995][T21517] veth0_vlan: entered promiscuous mode [ 1781.535345][T21517] veth1_vlan: entered promiscuous mode [ 1781.627143][T22129] netlink: 14 bytes leftover after parsing attributes in process `syz.2.18525'. [ 1781.768838][T21517] veth0_macvtap: entered promiscuous mode [ 1781.810906][T21517] veth1_macvtap: entered promiscuous mode [ 1781.913465][T21517] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1781.951009][T21517] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1781.965082][T22138] netlink: 8 bytes leftover after parsing attributes in process `syz.3.18527'. [ 1781.965118][T22138] netlink: 32 bytes leftover after parsing attributes in process `syz.3.18527'. [ 1782.071946][T16430] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1782.072092][T16430] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1782.072127][T16430] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1782.072161][T16430] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1782.330708][T16430] nci: nci_extract_activation_params_nfc_dep: unsupported activation_rf_tech_and_mode 0x6 [ 1782.501284][T16431] net_ratelimit: 62 callbacks suppressed [ 1782.501310][T16431] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 1782.501356][T16431] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 1782.658686][ T3320] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 1782.658733][ T3320] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 1782.708604][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1782.719692][T16431] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1782.719715][T16431] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1782.864867][T16433] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 1782.864918][T16433] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 1783.018298][T16433] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1783.018323][T16433] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1783.024362][T21506] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 1783.039543][T16430] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 1783.146349][T16427] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 1783.672766][T22136] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 1784.038228][T22181] netlink: 16 bytes leftover after parsing attributes in process `syz.5.18375'. [ 1784.059960][T22183] batman_adv: batadv0: Adding interface: gretap2 [ 1784.059980][T22183] batman_adv: batadv0: The MTU of interface gretap2 is too small (1438) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1784.060016][T22183] batman_adv: batadv0: Interface activated: gretap2 [ 1784.410306][T22189] xt_hashlimit: overflow, try lower: 18446744073709551613/4 [ 1784.543602][T22191] netlink: 8 bytes leftover after parsing attributes in process `syz.5.18539'. [ 1784.543643][T22191] netlink: 32 bytes leftover after parsing attributes in process `syz.5.18539'. [ 1785.128353][T22215] netlink: 8 bytes leftover after parsing attributes in process `syz.4.18546'. [ 1785.149331][T22207] bond3: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-alb(6) [ 1785.291066][T22207] bond3 (unregistering): Released all slaves [ 1785.622713][T22226] netlink: 'syz.5.18547': attribute type 10 has an invalid length. [ 1785.625551][T22226] syz_tun: entered promiscuous mode [ 1785.665104][T22226] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 1785.886592][T22230] xfrm0: entered promiscuous mode [ 1785.886622][T22230] xfrm0: entered allmulticast mode [ 1785.969652][T16429] IPVS: starting estimator thread 0... [ 1786.079937][T22235] IPVS: using max 27 ests per chain, 64800 per kthread [ 1786.103311][T22240] netlink: 76 bytes leftover after parsing attributes in process `syz.5.18551'. [ 1786.146603][T22244] FAULT_INJECTION: forcing a failure. [ 1786.146603][T22244] name failslab, interval 1, probability 0, space 0, times 0 [ 1786.146641][T22244] CPU: 0 UID: 0 PID: 22244 Comm: syz.3.18554 Not tainted syzkaller #0 PREEMPT(full) [ 1786.146665][T22244] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1786.146679][T22244] Call Trace: [ 1786.146688][T22244] [ 1786.146699][T22244] dump_stack_lvl+0xe8/0x150 [ 1786.146736][T22244] should_fail_ex+0x410/0x560 [ 1786.146773][T22244] should_failslab+0xa8/0x100 [ 1786.146806][T22244] __kmalloc_noprof+0xf9/0x710 [ 1786.146833][T22244] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 1786.146860][T22244] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 1786.146890][T22244] genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 1786.146921][T22244] genl_family_rcv_msg_doit+0xda/0x340 [ 1786.146950][T22244] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1786.146991][T22244] ? apparmor_capable+0x126/0x170 [ 1786.147023][T22244] ? bpf_lsm_capable+0x9/0x20 [ 1786.147047][T22244] ? security_capable+0x7e/0x2c0 [ 1786.147080][T22244] genl_rcv_msg+0x614/0x7a0 [ 1786.147119][T22244] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1786.147148][T22244] ? __pfx_tipc_nl_bearer_set+0x10/0x10 [ 1786.147190][T22244] netlink_rcv_skb+0x226/0x4a0 [ 1786.147219][T22244] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1786.147252][T22244] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1786.147296][T22244] ? down_read+0x2b9/0x320 [ 1786.147325][T22244] genl_rcv+0x28/0x40 [ 1786.147354][T22244] netlink_unicast+0x8ef/0xa80 [ 1786.147398][T22244] netlink_sendmsg+0x7f0/0xb20 [ 1786.147432][T22244] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1786.147464][T22244] ? aa_sock_msg_perm+0x144/0x210 [ 1786.147496][T22244] ? apparmor_socket_sendmsg+0x98/0x360 [ 1786.147531][T22244] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1786.147557][T22244] sock_sendmsg_nosec+0x14e/0x190 [ 1786.147588][T22244] ____sys_sendmsg+0x54e/0x850 [ 1786.147626][T22244] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1786.147669][T22244] ? import_iovec+0x73/0xa0 [ 1786.147703][T22244] ___sys_sendmsg+0x2a5/0x360 [ 1786.147733][T22244] ? __lock_acquire+0x747/0x2de0 [ 1786.147762][T22244] ? __pfx____sys_sendmsg+0x10/0x10 [ 1786.147837][T22244] ? __fget_files+0x3a2/0x420 [ 1786.147859][T22244] ? __fget_files+0x2a/0x420 [ 1786.147894][T22244] __x64_sys_sendmsg+0x1b1/0x290 [ 1786.147919][T22244] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1786.147976][T22244] do_syscall_64+0x166/0x520 [ 1786.147998][T22244] ? trace_irq_disable+0x3b/0x140 [ 1786.148023][T22244] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1786.148045][T22244] ? clear_bhb_loop+0x70/0xc0 [ 1786.148072][T22244] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1786.148093][T22244] RIP: 0033:0x7f0e7859f559 [ 1786.148116][T22244] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1786.148135][T22244] RSP: 002b:00007f0e79526028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1786.148158][T22244] RAX: ffffffffffffffda RBX: 00007f0e78825fa0 RCX: 00007f0e7859f559 [ 1786.148174][T22244] RDX: 0000000004040140 RSI: 00002000000009c0 RDI: 0000000000000003 [ 1786.148189][T22244] RBP: 00007f0e79526090 R08: 0000000000000000 R09: 0000000000000000 [ 1786.148203][T22244] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1786.148216][T22244] R13: 00007f0e78826038 R14: 00007f0e78825fa0 R15: 00007ffcf51fd4f8 [ 1786.148253][T22244] [ 1787.415814][T22260] syz_tun: left promiscuous mode [ 1787.452627][T22260] bond0: (slave bond_slave_1): Error -28 calling ndo_bpf [ 1787.719518][T21506] net_ratelimit: 60 callbacks suppressed [ 1787.719545][T21506] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 1787.719582][T21506] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 1787.828514][ T3320] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 1787.828559][ T3320] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 1787.898739][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1787.960630][T22274] bond1: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-alb(6) [ 1787.966960][T22274] bond1 (unregistering): Released all slaves [ 1788.062440][ T3320] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 1788.062490][ T3320] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 1788.180708][T16433] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 1788.180754][T16433] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 1788.315332][T16435] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 1788.740872][T22304] FAULT_INJECTION: forcing a failure. [ 1788.740872][T22304] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1788.740909][T22304] CPU: 0 UID: 0 PID: 22304 Comm: syz.4.18575 Not tainted syzkaller #0 PREEMPT(full) [ 1788.740937][T22304] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1788.740950][T22304] Call Trace: [ 1788.740959][T22304] [ 1788.740969][T22304] dump_stack_lvl+0xe8/0x150 [ 1788.741005][T22304] should_fail_ex+0x410/0x560 [ 1788.741041][T22304] _copy_from_user+0x2d/0xb0 [ 1788.741072][T22304] ___sys_sendmsg+0x1c6/0x360 [ 1788.741117][T22304] ? __lock_acquire+0x747/0x2de0 [ 1788.741147][T22304] ? __pfx____sys_sendmsg+0x10/0x10 [ 1788.741224][T22304] ? __fget_files+0x3a2/0x420 [ 1788.741247][T22304] ? __fget_files+0x2a/0x420 [ 1788.741279][T22304] __x64_sys_sendmsg+0x1b1/0x290 [ 1788.741304][T22304] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1788.741377][T22304] do_syscall_64+0x166/0x520 [ 1788.741398][T22304] ? trace_irq_disable+0x3b/0x140 [ 1788.741422][T22304] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1788.741444][T22304] ? clear_bhb_loop+0x70/0xc0 [ 1788.741469][T22304] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1788.741490][T22304] RIP: 0033:0x7f489779f559 [ 1788.741511][T22304] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1788.741529][T22304] RSP: 002b:00007f48986ad028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1788.741553][T22304] RAX: ffffffffffffffda RBX: 00007f4897a25fa0 RCX: 00007f489779f559 [ 1788.741570][T22304] RDX: 0000000004000004 RSI: 00002000000005c0 RDI: 0000000000000005 [ 1788.741584][T22304] RBP: 00007f48986ad090 R08: 0000000000000000 R09: 0000000000000000 [ 1788.741597][T22304] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1788.741610][T22304] R13: 00007f4897a26038 R14: 00007f4897a25fa0 R15: 00007fff8a8fe178 [ 1788.741644][T22304] [ 1789.405386][T22320] netlink: 'syz.2.18582': attribute type 4 has an invalid length. [ 1789.405414][T22320] netlink: 152 bytes leftover after parsing attributes in process `syz.2.18582'. [ 1789.479621][T22320] .`: renamed from bond0 (while UP) [ 1789.689810][T22328] netlink: 32 bytes leftover after parsing attributes in process `syz.5.18583'. [ 1789.972763][T22339] netlink: 8 bytes leftover after parsing attributes in process `syz.2.18585'. [ 1790.918967][T22359] netlink: 56 bytes leftover after parsing attributes in process `syz.2.18592'. [ 1791.137395][T22371] netlink: 32 bytes leftover after parsing attributes in process `syz.3.18595'. [ 1791.192993][T22374] bond0: (slave bond_slave_1): Error -28 calling ndo_bpf [ 1791.364892][T22378] xt_nfacct: accounting object `' does not exist [ 1792.057150][T22398] nbd: couldn't find a device at index 4 [ 1792.320907][T22405] netlink: 56 bytes leftover after parsing attributes in process `syz.2.18604'. [ 1792.380542][T31111] Bluetooth: hci4: command tx timeout [ 1792.512307][T22414] netlink: 4 bytes leftover after parsing attributes in process `syz.2.18607'. [ 1792.828677][T16429] net_ratelimit: 66 callbacks suppressed [ 1792.828704][T16429] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 1792.828741][T16429] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 1792.916423][T22429] netlink: 'syz.2.18611': attribute type 10 has an invalid length. [ 1792.928234][T22429] syz_tun: entered promiscuous mode [ 1792.972156][T21503] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 1792.972251][T21503] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 1793.047910][T22431] FAULT_INJECTION: forcing a failure. [ 1793.047910][T22431] name failslab, interval 1, probability 0, space 0, times 0 [ 1793.047948][T22431] CPU: 1 UID: 0 PID: 22431 Comm: syz.2.18611 Not tainted syzkaller #0 PREEMPT(full) [ 1793.047971][T22431] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1793.047983][T22431] Call Trace: [ 1793.047993][T22431] [ 1793.048004][T22431] dump_stack_lvl+0xe8/0x150 [ 1793.048044][T22431] should_fail_ex+0x410/0x560 [ 1793.048082][T22431] should_failslab+0xa8/0x100 [ 1793.048122][T22431] __kvmalloc_node_noprof+0x171/0x820 [ 1793.048170][T22431] ? alloc_netdev_mqs+0xa9/0x1240 [ 1793.048194][T22431] ? alloc_netdev_mqs+0xa9/0x1240 [ 1793.048227][T22431] alloc_netdev_mqs+0xa9/0x1240 [ 1793.048249][T22431] ? __pfx_snprintf+0x10/0x10 [ 1793.048276][T22431] ? __pfx_macvlan_setup+0x10/0x10 [ 1793.048313][T22431] rtnl_create_link+0x321/0xd70 [ 1793.048357][T22431] rtnl_newlink_create+0x258/0x7b0 [ 1793.048389][T22431] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 1793.048416][T22431] ? __pfx___mutex_lock+0x10/0x10 [ 1793.048451][T22431] ? ns_capable+0x84/0xe0 [ 1793.048490][T22431] rtnl_newlink+0x167a/0x1c30 [ 1793.048542][T22431] ? __pfx_rtnl_newlink+0x10/0x10 [ 1793.048571][T22431] ? __netlink_deliver_tap+0x4f1/0x6e0 [ 1793.048597][T22431] ? netlink_deliver_tap+0x19c/0x1b0 [ 1793.048621][T22431] ? netlink_unicast+0x8c1/0xa80 [ 1793.048642][T22431] ? netlink_sendmsg+0x7f0/0xb20 [ 1793.048667][T22431] ? sock_sendmsg_nosec+0x14e/0x190 [ 1793.048691][T22431] ? ____sys_sendmsg+0x54e/0x850 [ 1793.048721][T22431] ? ___sys_sendmsg+0x2a5/0x360 [ 1793.048750][T22431] ? __x64_sys_sendmsg+0x1b1/0x290 [ 1793.048769][T22431] ? do_syscall_64+0x166/0x520 [ 1793.048789][T22431] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1793.048856][T22431] ? kasan_quarantine_put+0xbb/0x1f0 [ 1793.048883][T22431] ? lockdep_hardirqs_on+0x7b/0x110 [ 1793.048911][T22431] ? nlmon_xmit+0xb0/0x100 [ 1793.048930][T22431] ? kmem_cache_free+0x182/0x650 [ 1793.048969][T22431] ? __lock_acquire+0x747/0x2de0 [ 1793.049002][T22431] ? __pfx_hook_capable+0x10/0x10 [ 1793.049028][T22431] ? __dev_queue_xmit+0x29b/0x3920 [ 1793.049057][T22431] ? __pfx_hook_capable+0x10/0x10 [ 1793.049084][T22431] ? lockdep_hardirqs_on+0x7b/0x110 [ 1793.049137][T22431] ? __pfx_rtnl_newlink+0x10/0x10 [ 1793.049176][T22431] rtnetlink_rcv_msg+0x802/0xc00 [ 1793.049213][T22431] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 1793.049244][T22431] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1793.049279][T22431] ? __copy_skb_header+0xa3/0x4a0 [ 1793.049315][T22431] netlink_rcv_skb+0x226/0x4a0 [ 1793.049343][T22431] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1793.049377][T22431] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1793.049421][T22431] ? netlink_deliver_tap+0x2e/0x1b0 [ 1793.049446][T22431] ? netlink_deliver_tap+0x2e/0x1b0 [ 1793.049481][T22431] netlink_unicast+0x8ef/0xa80 [ 1793.049527][T22431] netlink_sendmsg+0x7f0/0xb20 [ 1793.049560][T22431] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1793.049593][T22431] ? aa_sock_msg_perm+0x144/0x210 [ 1793.049626][T22431] ? apparmor_socket_sendmsg+0x98/0x360 [ 1793.049652][T22431] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1793.049678][T22431] sock_sendmsg_nosec+0x14e/0x190 [ 1793.049709][T22431] ____sys_sendmsg+0x54e/0x850 [ 1793.049748][T22431] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1793.049794][T22431] ? import_iovec+0x73/0xa0 [ 1793.049830][T22431] ___sys_sendmsg+0x2a5/0x360 [ 1793.049860][T22431] ? __lock_acquire+0x747/0x2de0 [ 1793.049890][T22431] ? __pfx____sys_sendmsg+0x10/0x10 [ 1793.049966][T22431] ? __fget_files+0x3a2/0x420 [ 1793.049990][T22431] ? __fget_files+0x2a/0x420 [ 1793.050025][T22431] __x64_sys_sendmsg+0x1b1/0x290 [ 1793.050051][T22431] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1793.050110][T22431] do_syscall_64+0x166/0x520 [ 1793.050131][T22431] ? trace_irq_disable+0x3b/0x140 [ 1793.050164][T22431] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1793.050191][T22431] ? clear_bhb_loop+0x70/0xc0 [ 1793.050219][T22431] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1793.050241][T22431] RIP: 0033:0x7f1fc7f9f559 [ 1793.050262][T22431] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1793.050282][T22431] RSP: 002b:00007f1fc8e7d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1793.050307][T22431] RAX: ffffffffffffffda RBX: 00007f1fc8226090 RCX: 00007f1fc7f9f559 [ 1793.050323][T22431] RDX: 0000000000000000 RSI: 0000200000000640 RDI: 0000000000000006 [ 1793.050338][T22431] RBP: 00007f1fc8e7d090 R08: 0000000000000000 R09: 0000000000000000 [ 1793.050352][T22431] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1793.050365][T22431] R13: 00007f1fc8226128 R14: 00007f1fc8226090 R15: 00007ffe07f3f458 [ 1793.050403][T22431] [ 1793.087567][T21503] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 1793.087613][T21503] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 1793.100857][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1793.190368][ T12] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 1793.190410][ T12] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 1793.321820][ T12] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 1793.758203][T22439] netlink: 'syz.4.18614': attribute type 10 has an invalid length. [ 1793.758229][T22439] netlink: 40 bytes leftover after parsing attributes in process `syz.4.18614'. [ 1793.834884][T22441] netlink: 12 bytes leftover after parsing attributes in process `syz.2.18615'. [ 1793.923637][T22444] team0: Cannot enslave team device to itself [ 1793.937718][T22436] [ 1793.938878][T22444] nbd: couldn't find a device at index 2 [ 1793.945726][T22436] ====================================================== [ 1793.952789][T22436] WARNING: possible circular locking dependency detected [ 1793.959942][T22436] syzkaller #0 Not tainted [ 1793.964383][T22436] ------------------------------------------------------ [ 1793.971463][T22436] syz.3.18613/22436 is trying to acquire lock: [ 1793.972276][T22446] netlink: 56 bytes leftover after parsing attributes in process `syz.2.18617'. [ 1793.986664][T22436] ffff88802dfa3c70 ((work_completion)(&new_smc->smc_listen_work)){+.+.}-{0:0}, at: __flush_work+0x101/0xd30 [ 1793.998283][T22436] [ 1793.998283][T22436] but task is already holding lock: [ 1794.005657][T22436] ffff8880351a0ee0 (sk_lock-AF_SMC/1){+.+.}-{0:0}, at: smc_release+0x24d/0x550 [ 1794.014715][T22436] [ 1794.014715][T22436] which lock already depends on the new lock. [ 1794.014715][T22436] [ 1794.025217][T22436] [ 1794.025217][T22436] the existing dependency chain (in reverse order) is: [ 1794.034224][T22436] [ 1794.034224][T22436] -> #1 (sk_lock-AF_SMC/1){+.+.}-{0:0}: [ 1794.042011][T22436] lock_sock_nested+0x41/0x100 [ 1794.047311][T22436] smc_listen_out+0xd4/0x3d0 [ 1794.052475][T22436] smc_listen_work+0x81d/0x1410 [ 1794.057854][T22436] process_scheduled_works+0xc3d/0x1630 [ 1794.063927][T22436] worker_thread+0xa47/0xfb0 [ 1794.069041][T22436] kthread+0x38b/0x480 [ 1794.073629][T22436] ret_from_fork+0x514/0xb70 [ 1794.078744][T22436] ret_from_fork_asm+0x1a/0x30 [ 1794.084115][T22436] [ 1794.084115][T22436] -> #0 ((work_completion)(&new_smc->smc_listen_work)){+.+.}-{0:0}: [ 1794.094279][T22436] __lock_acquire+0x164c/0x2de0 [ 1794.099678][T22436] lock_acquire+0x115/0x350 [ 1794.104704][T22436] __flush_work+0x7a6/0xd30 [ 1794.109731][T22436] cancel_work_sync+0xb8/0xf0 [ 1794.114938][T22436] smc_clcsock_release+0x60/0xf0 [ 1794.120474][T22436] __smc_release+0x64e/0x7c0 [ 1794.125599][T22436] smc_close_non_accepted+0xd5/0x1f0 [ 1794.131407][T22436] smc_close_active+0xbd8/0x1000 [ 1794.136867][T22436] __smc_release+0x9c/0x7c0 [ 1794.141900][T22436] smc_release+0x2c5/0x550 [ 1794.146848][T22436] __sock_release+0xa0/0x1f0 [ 1794.152223][T22436] sock_close+0x1c/0x30 [ 1794.156898][T22436] __fput+0x408/0xa40 [ 1794.161404][T22436] fput_close_sync+0x11f/0x240 [ 1794.166685][T22436] filp_close_sync+0x6e/0xa0 [ 1794.171809][T22436] __se_sys_close_range+0xa77/0xef0 [ 1794.177530][T22436] do_syscall_64+0x166/0x520 [ 1794.182641][T22436] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1794.189055][T22436] [ 1794.189055][T22436] other info that might help us debug this: [ 1794.189055][T22436] [ 1794.199279][T22436] Possible unsafe locking scenario: [ 1794.199279][T22436] [ 1794.206756][T22436] CPU0 CPU1 [ 1794.212122][T22436] ---- ---- [ 1794.217492][T22436] lock(sk_lock-AF_SMC/1); [ 1794.222004][T22436] lock((work_completion)(&new_smc->smc_listen_work)); [ 1794.231460][T22436] lock(sk_lock-AF_SMC/1); [ 1794.238502][T22436] lock((work_completion)(&new_smc->smc_listen_work)); [ 1794.245448][T22436] [ 1794.245448][T22436] *** DEADLOCK *** [ 1794.245448][T22436] [ 1794.253589][T22436] locks held by syz.3.18613/22436: 3, last CPU#1: [ 1794.260058][T22436] #0: ffff888039cf2a80 (&sb->s_type->i_mutex_key#13){+.+.}-{4:4}, at: __sock_release+0x7a/0x1f0 [ 1794.270597][T22436] #1: ffff8880351a0ee0 (sk_lock-AF_SMC/1){+.+.}-{0:0}, at: smc_release+0x24d/0x550 [ 1794.280007][T22436] #2: ffffffff8fd59ca0 (rcu_read_lock){....}-{1:3}, at: __flush_work+0x101/0xd30 [ 1794.289265][T22436] [ 1794.289265][T22436] stack backtrace: [ 1794.295171][T22436] CPU: 1 UID: 0 PID: 22436 Comm: syz.3.18613 Not tainted syzkaller #0 PREEMPT(full) [ 1794.304642][T22436] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 1794.314705][T22436] Call Trace: [ 1794.317986][T22436] [ 1794.321007][T22436] dump_stack_lvl+0xe8/0x150 [ 1794.325614][T22436] print_circular_bug+0x2e2/0x300 [ 1794.330644][T22436] check_noncircular+0x12f/0x150 [ 1794.335588][T22436] __lock_acquire+0x164c/0x2de0 [ 1794.340445][T22436] ? __pfx___schedule+0x10/0x10 [ 1794.345313][T22436] ? irqentry_exit+0x2a0/0x9b0 [ 1794.350079][T22436] ? irqentry_exit+0x2a0/0x9b0 [ 1794.354863][T22436] ? trace_irq_disable+0x3b/0x140 [ 1794.359897][T22436] lock_acquire+0x115/0x350 [ 1794.364417][T22436] ? __flush_work+0x101/0xd30 [ 1794.369102][T22436] ? preempt_schedule_thunk+0x16/0x40 [ 1794.374477][T22436] ? __flush_work+0x101/0xd30 [ 1794.379166][T22436] __flush_work+0x7a6/0xd30 [ 1794.383673][T22436] ? __flush_work+0x101/0xd30 [ 1794.388359][T22436] ? __flush_work+0x101/0xd30 [ 1794.393061][T22436] ? __pfx___flush_work+0x10/0x10 [ 1794.398099][T22436] ? __pfx_wq_barrier_func+0x10/0x10 [ 1794.403397][T22436] ? cancel_work_sync+0x5a/0xf0 [ 1794.408257][T22436] cancel_work_sync+0xb8/0xf0 [ 1794.412949][T22436] smc_clcsock_release+0x60/0xf0 [ 1794.417893][T22436] __smc_release+0x64e/0x7c0 [ 1794.422498][T22436] smc_close_non_accepted+0xd5/0x1f0 [ 1794.427794][T22436] smc_close_active+0xbd8/0x1000 [ 1794.432729][T22436] ? __pfx_sock_def_readable+0x10/0x10 [ 1794.438211][T22436] __smc_release+0x9c/0x7c0 [ 1794.442726][T22436] ? __local_bh_enable_ip+0xd6/0x140 [ 1794.448020][T22436] smc_release+0x2c5/0x550 [ 1794.452461][T22436] __sock_release+0xa0/0x1f0 [ 1794.457059][T22436] ? __pfx_sock_close+0x10/0x10 [ 1794.461911][T22436] sock_close+0x1c/0x30 [ 1794.466070][T22436] __fput+0x408/0xa40 [ 1794.470053][T22436] fput_close_sync+0x11f/0x240 [ 1794.474821][T22436] ? __pfx_fput_close_sync+0x10/0x10 [ 1794.480111][T22436] filp_close_sync+0x6e/0xa0 [ 1794.484707][T22436] __se_sys_close_range+0xa77/0xef0 [ 1794.489927][T22436] ? __pfx___se_sys_close_range+0x10/0x10 [ 1794.495672][T22436] do_syscall_64+0x166/0x520 [ 1794.500267][T22436] ? trace_irq_disable+0x3b/0x140 [ 1794.505382][T22436] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1794.511454][T22436] ? clear_bhb_loop+0x70/0xc0 [ 1794.516137][T22436] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1794.522031][T22436] RIP: 0033:0x7f0e7859f559 [ 1794.526449][T22436] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1794.546070][T22436] RSP: 002b:00007ffcf51fd658 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 1794.554505][T22436] RAX: ffffffffffffffda RBX: 00007f0e78827da0 RCX: 00007f0e7859f559 [ 1794.562486][T22436] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 1794.570457][T22436] RBP: 00007f0e78827da0 R08: 00007f0e78826038 R09: 0000000000000000 [ 1794.578435][T22436] R10: 00000000003ffb64 R11: 0000000000000246 R12: 00000000001b61dc [ 1794.586411][T22436] R13: 00007f0e7882609c R14: 00000000001b5f2e R15: 00007f0e78826090 [ 1794.594394][T22436] [ 1797.858692][T16432] net_ratelimit: 71 callbacks suppressed [ 1797.858718][T16432] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 1797.858754][T16432] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 1797.981018][T16432] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 1797.984387][ T12] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 1798.089466][T16422] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 1798.089520][T16422] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 1798.200390][T21506] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 1798.200441][T21506] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 1798.298316][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1798.317706][T16422] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 1802.929291][T16432] net_ratelimit: 87 callbacks suppressed [ 1802.929317][T16432] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 1802.929365][T16432] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 1803.039833][T21506] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 1803.040516][ T12] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 1803.149057][T16432] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 1803.149149][T21506] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 1803.260020][T21506] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 1803.260079][T21506] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 1803.369883][ T12] bond7: (slave ip6gretap1): failed to get link speed/duplex [ 1803.369956][ T12] bond7: (slave ip6gretap1): failed to get link speed/duplex