last executing test programs:

2m45.764063216s ago: executing program 0 (id=10597):
r0 = socket$inet6(0xa, 0x3, 0xff)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000002c0)=@filter={'filter\x00', 0xe, 0x4, 0x370, 0xffffffff, 0x0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x0, 0xd0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@ipv6={@empty, @empty, [], [], '\x00', '\x00', {}, {}, 0x11}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x3, 0x0, 0xf}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d0)
r1 = socket$inet6(0xa, 0x2, 0x0)
sendto$inet6(r1, 0x0, 0x0, 0x4098884, &(0x7f00000006c0)={0xa, 0x4e20, 0x10, @mcast2}, 0x1c)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)={0x0}}, 0x0)
sendto$inet6(r1, &(0x7f0000000780), 0x3000, 0x0, 0x0, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
mmap(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x1000001, 0x13, r2, 0x8cee000)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r3, &(0x7f0000000880)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2d}}, 0x6}, 0x1c)
connect$inet6(r3, &(0x7f00000008c0)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c)
setsockopt$inet6_tcp_int(r3, 0x6, 0x2, &(0x7f0000000900)=0xa61fbd23, 0x4)
sendmmsg$inet(r3, &(0x7f0000000940)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000a00)="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", 0x1000}], 0x1}}, {{0x0, 0x0, &(0x7f0000001a00)=[{&(0x7f0000001a40)="8b", 0x1}], 0x1}}], 0x2, 0x4001)
r4 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$IPT_SO_GET_REVISION_MATCH(r4, 0x0, 0x42, &(0x7f0000000000)={'TPROXY\x00'}, &(0x7f0000000100)=0x1e)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f0000001a80)={&(0x7f0000ff2000/0xd000)=nil, 0xd000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000001ac0)=0x40)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000009100000a78000000060a010400000000000000000a0004050900010073797a31000000004c000480480001800a000100696e6e6572000000380002800800044000000012140005800c0020007061796c6f616400040002800800034000000002080002400000008408000140000000000900020073797a3200000000140000001100010000000000000000000104000a"], 0xa0}, 0x1, 0x0, 0x0, 0x8890}, 0x24008000)

2m44.531794167s ago: executing program 0 (id=10603):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff)
r2 = socket$inet_icmp(0x2, 0x2, 0x1)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000380)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_GET_WOWLAN(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0103000000000000000005000000080001005d00000008000300", @ANYRES64=r3], 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x20048040)
recvmsg(r0, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0)

2m44.011685285s ago: executing program 0 (id=10607):
sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x2c, 0x0, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_PW_TYPE={0x6}]}, 0x2c}}, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010004000000020000003900000008000300", @ANYRES32=r3, @ANYBLOB="24005a80200004"], 0x40}, 0x1, 0x0, 0x0, 0x404c890}, 0x14)
socket(0x10, 0x3, 0x0)

2m44.009650353s ago: executing program 0 (id=10609):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000240)={'syzkaller1\x00', 0xc201})
writev(0xffffffffffffffff, &(0x7f0000000300)=[{&(0x7f0000002240)="390000001300034700bb65e1", 0xc}], 0x1)
r1 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000002280)=@req3={0x10000, 0x1, 0x100, 0x100, 0xe, 0x0, 0x3}, 0x1c)
sendmmsg(r1, &(0x7f00000022c0)=[{{&(0x7f0000002300)=@hci={0x1f, 0xffffffffffffffff, 0x2}, 0x80, 0x0, 0x0, &(0x7f0000002380)=ANY=[], 0x10}}], 0x1, 0x45)
r2 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local})
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x2, 0x4, 0x4, 0xbf22, 0x480}, 0x48)
mmap(&(0x7f0000fa2000/0x4000)=nil, 0x4000, 0x2, 0x82011, r3, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
socket(0x400000000010, 0x3, 0x0)
r5 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'syzkaller0\x00'})
r6 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000340)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=@delchain={0x2c, 0x66, 0x49404108a2eb2df, 0x30bd2c, 0x25dfdc00, {0x0, 0x0, 0x0, r7, {0x0, 0xfff3}, {}, {0xffeb, 0x1d0c5d7c03b59b98}}, [@TCA_CHAIN={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8848}, 0x20004800)

2m42.610283272s ago: executing program 0 (id=10616):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@ipv6_newrule={0x24, 0x1a, 0x1, 0x0, 0x0, {0x81}, [@FIB_RULE_POLICY=@FRA_TABLE={0x8, 0xf, 0xfe}]}, 0x24}, 0x1, 0x0, 0x0, 0x80ff}, 0x0)

2m41.919794018s ago: executing program 0 (id=10620):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
socket(0x10, 0x3, 0x0) (async)
r3 = socket(0x10, 0x3, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="200000006a0083130000000000000000000000000000000008000500d768d9f8"], 0x20}}, 0x0)
r5 = socket$inet6(0xa, 0x800000000000002, 0x0)
connect$inet6(r5, &(0x7f00000003c0)={0xa, 0x4e23, 0x3, @mcast1, 0x2}, 0x1c)
connect$inet6(r5, &(0x7f0000000400)={0xa, 0x4e20, 0x9, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c)
setsockopt$inet6_IPV6_ADDRFORM(r5, 0x29, 0x1, &(0x7f0000000440), 0x4) (async)
setsockopt$inet6_IPV6_ADDRFORM(r5, 0x29, 0x1, &(0x7f0000000440), 0x4)
setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, 0x0, 0x0) (async)
setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, 0x0, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000200)={0x3}, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x14, 0x22, 0xa01, 0x0, 0x0, {0x9}}, 0x14}, 0x1, 0x0, 0x0, 0xc000}, 0x0) (async)
sendmsg$nl_generic(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x14, 0x22, 0xa01, 0x0, 0x0, {0x9}}, 0x14}, 0x1, 0x0, 0x0, 0xc000}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r6=>0x0})
sendmsg$NL80211_CMD_SET_COALESCE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r6, @ANYBLOB="08002500f5ffffff0800020000006c00"], 0x2c}}, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x27, 0x1, 0x7fffd, 0x1000, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008090) (async)
sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x27, 0x1, 0x7fffd, 0x1000, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008090)

2m26.706483354s ago: executing program 32 (id=10620):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
socket(0x10, 0x3, 0x0) (async)
r3 = socket(0x10, 0x3, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="200000006a0083130000000000000000000000000000000008000500d768d9f8"], 0x20}}, 0x0)
r5 = socket$inet6(0xa, 0x800000000000002, 0x0)
connect$inet6(r5, &(0x7f00000003c0)={0xa, 0x4e23, 0x3, @mcast1, 0x2}, 0x1c)
connect$inet6(r5, &(0x7f0000000400)={0xa, 0x4e20, 0x9, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c)
setsockopt$inet6_IPV6_ADDRFORM(r5, 0x29, 0x1, &(0x7f0000000440), 0x4) (async)
setsockopt$inet6_IPV6_ADDRFORM(r5, 0x29, 0x1, &(0x7f0000000440), 0x4)
setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, 0x0, 0x0) (async)
setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, 0x0, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000200)={0x3}, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x14, 0x22, 0xa01, 0x0, 0x0, {0x9}}, 0x14}, 0x1, 0x0, 0x0, 0xc000}, 0x0) (async)
sendmsg$nl_generic(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x14, 0x22, 0xa01, 0x0, 0x0, {0x9}}, 0x14}, 0x1, 0x0, 0x0, 0xc000}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r6=>0x0})
sendmsg$NL80211_CMD_SET_COALESCE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r6, @ANYBLOB="08002500f5ffffff0800020000006c00"], 0x2c}}, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x27, 0x1, 0x7fffd, 0x1000, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008090) (async)
sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x27, 0x1, 0x7fffd, 0x1000, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008090)

5.030731704s ago: executing program 3 (id=11413):
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000000)=@bpf_lsm={0xd, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="450a000000ff03ffc311a400100100001800000000000000000000000000000095"], &(0x7f0000000100)='GPL\x00'}, 0x94)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)={0x44, 0xb, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}]}]}, 0x44}}, 0x0)

4.968219703s ago: executing program 1 (id=11414):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000340)=0x100000001, 0x4)
connect$inet6(r0, &(0x7f0000000380)={0xa, 0x4e23, 0x8000000, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000003c0), 0x4)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000400)=@gcm_128={{0x303}, "00000000008000", "8eff0000099433d7004000", "6a3a05b9", "12772541f8eb02bb"}, 0x7)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4000000)
r1 = socket$kcm(0xa, 0x1, 0x106)
sendmsg$kcm(r1, &(0x7f0000004e00)={&(0x7f0000004e40)=@in6={0xa, 0x3, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x2}, 0x80, 0x0}, 0xe07e872420dfefca)
mmap(&(0x7f0000196000/0x1000)=nil, 0x1000, 0x0, 0x840000000000a132, 0xffffffffffffffff, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000000))
mmap(&(0x7f0000196000/0x4000)=nil, 0x4000, 0xffffffffefffffff, 0x8032, 0xffffffffffffffff, 0x0)
r2 = socket$kcm(0x10, 0x2, 0x4)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000500)={'wlan1\x00', <r7=>0x0})
sendmsg$NL80211_CMD_CONNECT(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)={0x30, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x6}]}, 0x30}}, 0x0)
sendmsg$NL80211_CMD_STOP_NAN(r3, &(0x7f0000000680)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x1c, r4, 0x10, 0x70bd27, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r7}, @void}}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x48011}, 0x0)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={<r8=>0xffffffffffffffff})
sendmsg$tipc(r8, &(0x7f0000000300)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x1, {{0x41, 0x4}, 0x1}}, 0x10, &(0x7f00000001c0)=[{&(0x7f00000000c0)="76b846673e46198f3954858f23526810b49bd633db0e884fe5ee764066796eb62df92a60d091178d01e2f8e5940f773e20d09d7a0eb44733f2a30bb03db9329a3ff0cff5663177132763c5dea0a9288d1ed566527d08b2ac801be00ef2c56be7144a59e1b28bbbd9d6f1a35cdb75a2d6383f150547641214227bdc63ef7e0d7d5277ae339b1efbeff48755d886f9f20b809fc8db0feba3154153aab59f44d9cb030f0bc73f08cda98a1089c6fedc891aae17c3a27555ba637b70f22e79bb8db919b87dcbc8be7441f0b30ce3b070f316d4f66cc2bcf259cff79a0e3e6e720f5283abcd07a712fe5554b68e", 0xeb}], 0x1, &(0x7f0000000200)="9bdae823e04a0c502249a4e38b10adbaed98ec0491b780ff8b78a931e613ec44c9d6ef0049ca845f9d43e128b7f28d6bce4cc09590ba880148f86e4146d5929d2ca8164a1671f884529fd75fa5b1554753e4baf2b69900a3eab1771a84b60a044519ea6c29232fba6fc0e38b4dcb921b46688ff540b9e75dec1b6385209edbea9170c42fd424c15d9ad5eab1d4c8d231faf4596975cf75e24cfd6c5f019709e1066276607afa38554d152a458b58a2a5eab9619ffadd5f906968aedbe1e9fd147ddff665c402b165fa31fa36d1e93e2a6243", 0xd2, 0x40800}, 0x90)
socket$inet6_udp(0xa, 0x2, 0x0)
sendmsg$inet(r2, &(0x7f0000004ec0)={0x0, 0x0, &(0x7f0000004f00)=[{&(0x7f0000004f40)="5c00000012006bab9e3fe3d86e6c1d000014a10d00000303003904b68675f8001d000a00a0e69ee517d34460bc24eab556a705251e6182949a36c23d3b4cdfd8cdbf93675cdfadb20a64e9f4080003000601000004000200d7", 0x59}, {&(0x7f0000004fc0)="1ee306", 0x3}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x40804)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x40)

4.743490784s ago: executing program 3 (id=11417):
r0 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000480)={'sit0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000580)={0xffffffffffffffff, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="34fc00006800010000000000000000000a00000000000000140006000000000000000000000000000000000108000500", @ANYRES32=r1], 0x34}, 0x1, 0x0, 0x0, 0x810}, 0x0)

4.631026928s ago: executing program 1 (id=11420):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000100e40)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_BITWISE_XOR={0x4}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xc0}, 0x1, 0x0, 0x0, 0xffffffff}, 0x0)

4.004253317s ago: executing program 2 (id=11422):
bpf$MAP_CREATE(0x0, &(0x7f0000000940)=ANY=[], 0x48)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000001c0)={'syzkaller0\x00', 0x7101})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'syzkaller0\x00'})
bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0xa, 0x4, &(0x7f0000000a40)=ANY=[@ANYBLOB="180000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001d40)={0x1b, 0x5, &(0x7f00000003c0)=ANY=[], 0x0, 0x40, 0x0, 0x0, 0x41000, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x3c1, 0x3, 0x330, 0x0, 0x1170, 0x1398, 0x118, 0x1170, 0x260, 0x1398, 0x1398, 0x260, 0x1398, 0x3, 0x0, {[{{@ipv6={@mcast1, @loopback, [0xffffffff, 0xff000000], [0xffffffff, 0xffffffff], 'ip6tnl0\x00', 'veth0_to_hsr\x00', {0xff}, {0xff}, 0x6, 0x0, 0x0, 0x6f}, 0x3000000, 0xf8, 0x118, 0x0, {}, [@common=@inet=@ecn={{0x28}, {0x0, 0x0, 0x1}}, @inet=@rpfilter={{0x28}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0x100, 0x148, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x2}}, @common=@srh={{0x30}, {0x0, 0xf, 0x9, 0xbc, 0x0, 0x400, 0x1004}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', {0x55}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x390)

3.996818842s ago: executing program 3 (id=11423):
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth0_macvtap\x00'}) (async)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth0_macvtap\x00', <r1=>0x0})
setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000080)={r1, 0x3, 0x6, @random="7c6a97bead69"}, 0x10)
socket$nl_route(0x10, 0x3, 0x0) (async)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=@getchain={0x24, 0x11, 0x1, 0xfffffffc, 0x2000001, {0x0, 0x0, 0x0, r1, {0x7, 0xa}, {0xd, 0x9}, {0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x44090)
ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f0000000000)={0x2, 0x7, 0x8, 0xfffffff7, 0x3})

3.326061655s ago: executing program 4 (id=11425):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20044041}, 0x24008000)
syz_genetlink_get_family_id$nl80211(&(0x7f0000003840), 0xffffffffffffffff)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20040000)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r1, @ANYBLOB="08000100", @ANYRES32=r2], 0x90}, 0x1, 0x0, 0x2000000}, 0x0)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000003900)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8c4}, 0x0)

3.32578246s ago: executing program 1 (id=11426):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x1, 0x5, 0xd, 0xd9, 0x10}, {0x0, 0x2, 0x5, 0x3, 0x1}, 0x2, 0x5, 0x8d0}}, @TCA_TBF_BURST={0x8, 0x6, 0x10001}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40488c1}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r4 = socket$kcm(0x11, 0x3, 0x0)
r5 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56)
r7 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfe, {0x0, 0x0, 0x0, r8, {0x0, 0x8}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8, 0x3, 0x6, 0x1, 0xfffffffd, 0xd, 0xfff, 0xfffffffa, 0x8}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000b0}, 0x4890)
sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200e61114120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0)

3.298766213s ago: executing program 2 (id=11427):
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000940)=ANY=[@ANYBLOB="580000000202010800000000000000000a0000004400028006000340000000000c0002d905000100000000002c00018014000300fe88000000000000000000001a000001090004"], 0x58}}, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0) (async)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000002c0)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0x811}, 0x804)
socket$nl_route(0x10, 0x3, 0x0) (async)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@ipv4_newroute={0x34, 0x18, 0x1, 0x1000, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x400}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x5}, @RTA_ENCAP={0x10, 0x16, 0x0, 0x1, @LWT_BPF_OUT={0xc, 0x2, 0x0, 0x1, @LWT_BPF_PROG_FD={0x8}}}]}, 0x34}}, 0x44890)
setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000000)={0x6, @loopback, 0x15, 0x0, 'rr\x00'}, 0x2c)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000007c0)={'wlan1\x00'}) (async)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000007c0)={'wlan1\x00', <r6=>0x0})
sendmsg$NL80211_CMD_CONNECT(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000e40)=ANY=[@ANYBLOB="26c2e9e1a217953de93001e54486080007000000", @ANYRES16=r5, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=r6, @ANYBLOB="0a003400020202020202000004001501"], 0x2c}}, 0x0) (async)
sendmsg$NL80211_CMD_CONNECT(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000e40)=ANY=[@ANYBLOB="26c2e9e1a217953de93001e54486080007000000", @ANYRES16=r5, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=r6, @ANYBLOB="0a003400020202020202000004001501"], 0x2c}}, 0x0)
setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000040)={{0x6, @loopback, 0x16, 0x0, 'rr\x00', 0x11}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x13, 0x2000, 0x1}}, 0x44) (async)
setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000040)={{0x6, @loopback, 0x16, 0x0, 'rr\x00', 0x11}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x13, 0x2000, 0x1}}, 0x44)
setsockopt(r1, 0x0, 0x486, &(0x7f00000000c0)="060000007f00000100150000000000006d6800"/44, 0x2c)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$batadv(&(0x7f00000003c0), r7)
r9 = socket$nl_route(0x10, 0x3, 0x0)
r10 = bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000d40)='GPL\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d80)={r10, 0xffff0000, 0xe, 0x0, &(0x7f0000000e00)="2b206d074843b397737ea49da2aa", 0x0, 0xf000, 0x720e, 0x0, 0x0, 0x0, 0x0}, 0x50)
sendmsg$nl_route(r9, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="440000001000210400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000004180012800e000100697036677265746170000000040002800a000100bf5dba82feb30000"], 0x44}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000400)={'batadv0\x00', <r11=>0x0})
r12 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000540), r7)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x68, r12, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x3ff}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x5}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x7b}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x3}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x34}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x8}]}, 0x68}, 0x1, 0x0, 0x0, 0x1}, 0x404c090)
sendmsg$BATADV_CMD_GET_NEIGHBORS(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="31032bbd7000000000000900000008000300", @ANYRES32=r11, @ANYBLOB="080006001e4d8f"], 0x24}, 0x1, 0x0, 0x0, 0x26040001}, 0x0)
setsockopt(r1, 0x0, 0x489, &(0x7f0000000100)="060000007f00000100150000000000006d6800000000000000000000000000000000000000000000000000007f000001001500"/68, 0x44) (async)
setsockopt(r1, 0x0, 0x489, &(0x7f0000000100)="060000007f00000100150000000000006d6800000000000000000000000000000000000000000000000000007f000001001500"/68, 0x44)
setsockopt(r1, 0x0, 0x488, &(0x7f0000000180)="060000007f00000100150000000000006d6800000000000000000000000000000000000000000000000000007f000001001500"/68, 0x44)
setsockopt(r1, 0x0, 0x484, &(0x7f0000000200)="060000007f00000100150000000000006d6800"/44, 0x2c)
mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) (async)
mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0)
r13 = socket(0xa, 0x3, 0x3a)
ioctl$ifreq_SIOCGIFINDEX_team(r13, 0x89e1, 0x0) (async)
ioctl$ifreq_SIOCGIFINDEX_team(r13, 0x89e1, 0x0)

3.298480863s ago: executing program 4 (id=11428):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa0}}, 0x0)
r1 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000840)=@newqdisc={0x34, 0x24, 0x1, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x4}}]}, 0x34}}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa0}}, 0x0) (async)
socket(0x10, 0x3, 0x0) (async)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'ip6tnl0\x00'}) (async)
sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000840)=@newqdisc={0x34, 0x24, 0x1, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x4}}]}, 0x34}}, 0x0) (async)

3.181699142s ago: executing program 5 (id=11429):
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x79, 0x11, 0xc0}, [@call={0x85, 0x0, 0x0, 0x6b}], {0x95, 0x0, 0x0, 0xf3ffffff}}, &(0x7f00000002c0)='GPL\x00', 0x5, 0xfe01, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x222}, 0x21)

2.828346438s ago: executing program 5 (id=11430):
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vcan0\x00', <r1=>0x0})
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="9feb01001800000000000000200000002000000002000000000000000200000d"], 0x0, 0x3a, 0x0, 0x8}, 0x20) (async)
connect$can_bcm(r0, &(0x7f00000000c0)={0x1d, r1}, 0x10) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$BATADV_CMD_GET_VLAN(r2, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x3c, r3, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x4}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x100008d4)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x10, 0x4, &(0x7f0000000000)=ANY=[@ANYRESHEX], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', r1, 0x9}, 0x94)

2.640780835s ago: executing program 3 (id=11431):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000600)={0x0, 0x38}}, 0x0)
r1 = socket(0x10, 0x803, 0x0)
bind$netlink(r1, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc)
getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14)
sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x40d, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r2, 0x69b}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x4}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40040}, 0x4000000)
r3 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'bond0\x00', <r4=>0x0})
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x1, 0x803, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800c0001006d6163766c616e000400028008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r7], 0x44}}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0xc, 0x4, 0x4, 0x8001}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000ac0)={0x10, 0x8, &(0x7f0000000b80)=ANY=[@ANYBLOB="beaa00000000000079", @ANYRES32, @ANYBLOB="0000000000000000bf03000000000000850000006b000000b70000000000000095"], 0x0, 0xe, 0x0, 0x0, 0x41000}, 0x94)
bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0)
r8 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000d40)={0x0, 0x1}, 0xc)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000f00)={0x11, 0x1a, &(0x7f0000000800)=@raw=[@ldst={0x1, 0x1, 0x4, 0x2, 0x4, 0x20, 0xfffffffffffffffc}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}}, @cb_func={0x18, 0x8, 0x4, 0x0, 0xfffffffffffffffa}, @printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}, @cb_func={0x18, 0xa, 0x4, 0x0, 0xfffffffffffffffb}], &(0x7f0000000900)='syzkaller\x00', 0x6, 0xc8, &(0x7f0000000940)=""/200, 0x41100, 0x14, '\x00', r2, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000a40)={0x8, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000e80)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, r8, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000ec0)=[{0x1, 0x4, 0x1, 0x5}, {0x3, 0x5, 0x4, 0x1}], 0x10, 0x4}, 0x94)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000dc0)={0x20, 0x16, 0x107, 0x70bd2e, 0x25dfdbfb, {0x11, 0x7c}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x1, 0x0, 0x0, @fd}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4048011}, 0x80)
r9 = socket$kcm(0x10, 0x2, 0x0)
r10 = socket(0x1, 0x803, 0x0)
r11 = socket$nl_route(0x10, 0x3, 0x0)
getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, <r12=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800e0001006970366772657461700000001800028014000700ff01000000000000000000000000000108000a00", @ANYRES32=r12], 0x54}}, 0x0)
sendmsg$kcm(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)}, 0x0)

2.61580736s ago: executing program 2 (id=11432):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x14, 0x0, 0x4}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000004)
syz_genetlink_get_family_id$nfc(&(0x7f00000003c0), r1)
r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000fc0), r1)
sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="150b000000001900000001000000"], 0x14}}, 0x80) (async)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x7, 0x4, 0x180, 0x4, 0x28}, 0x50)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="07000000040000000001000001"], 0x50)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x8, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xcb13119f635c50e1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000540)={r4}, 0xc) (async)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000580)={r4}, 0xc) (async)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r0)
r5 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000100)={0x802}, 0x10) (async)
sendmsg$nl_generic(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x20, 0x52, 0x1, 0x0, 0x0, {0xa}, [@typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x20}}, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r5)

2.492089579s ago: executing program 4 (id=11433):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0)
sendfile(r3, r3, 0x0, 0xa)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000340)={@fallback=r0, r2, 0x35, 0x2, r3}, 0x20)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000100)={'sit0\x00', &(0x7f0000000080)={'sit0\x00', 0x0, 0x8, 0x0, 0x80, 0x1000, {{0xa, 0x4, 0x0, 0x8, 0x28, 0x67, 0x0, 0x9, 0x29, 0x0, @local, @multicast2, {[@noop, @lsrr={0x83, 0xb, 0xeb, [@empty, @rand_addr=0x64010100]}, @ra={0x94, 0x4, 0x1}, @noop, @noop]}}}}})
r4 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r4, &(0x7f0000000780)=[{&(0x7f0000000840)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100080c10000000000000000000", 0x58}], 0x1)
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r1, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000280)={&(0x7f00000008c0)=ANY=[@ANYBLOB, @ANYRES64=r4, @ANYBLOB="20002bbd7000fcdbdf2504000000080002000000000008000400ff01000008000400400000005400068014000400ff02000000000000000000000000000108000300ac1414aa05000200000000000500020007000000080006001e000000080003000000000014000400000000000000000000000000000000010800020005000000"], 0x88}, 0x1, 0x0, 0x0, 0x4}, 0x8000)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="280000001900010000000000000002001c140000fe00000101"], 0x28}}, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000380)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, <r5=>0x0})
write$cgroup_devices(r3, &(0x7f00000007c0)={'b', ' *:* ', 'rw\x00'}, 0x9)
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r2, 0xc0c89425, &(0x7f0000000580)={"7946734c7a389c9427354a720cb5271d", <r6=>0x0, 0x0, {0xfffffffffffffffa, 0x1}, {0x9, 0xfffeffff}, 0x5, [0x0, 0x6, 0x2, 0x5, 0x1, 0x9, 0x3, 0xa8f8, 0x7a4db4cb, 0x3, 0x80000001, 0x7, 0x8aa1, 0x2, 0x4, 0x1]})
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000680)={"6c1e473ba976f3dc579346a7e499b81c", r5, r6, {0x4, 0x4}, {0x1, 0x7ba}, 0x0, [0x5a, 0x2, 0x0, 0xffff, 0x4, 0x7, 0x9, 0x8000, 0xf0, 0x9, 0x4, 0x1b78800, 0x9, 0x52000000000, 0x7, 0x4]})
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000001c0), r7)
sendmsg$NLBL_MGMT_C_LISTDEF(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000b00)=ANY=[@ANYBLOB="2c000000e3d452de512b95589b72a5b73113f3b648600079e44b7406e8f77d3d491a22cf6637867ffd1727bf833d4e22102563bc39433a75d134258a8588b2c0543ad2e717d04db9a0b663626f514bbb3515fe5a6921cd26b516fee7b01f46243ac3490b0e5e21bf40d4e4f2a126f289e08ea4d70bf32001e76b11f36e0b2fdba8ac1cc0b1d8a3ac7f2e53f7e4138613570b2b7d5c8c9df7fc3cad093e1fb25e0ad7f3029989be92bcd8d1c2b998a42bb76e8e6c0e90ec7b1a4edfdf2f9c832b39534014c85c20168c1bff964f8ff61a4917a4a9d362b6c61494ce0f9fcc9342e49fd4e432e531e6db651c71", @ANYRES16=r8, @ANYBLOB="010027bd7000ffdbdf250600000006000b002c000000080004000300000008000700ffffffff"], 0x2c}, 0x1, 0x0, 0x0, 0x200448c4}, 0x850)
r9 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000009c0), 0xffffffffffffffff)
sendmsg$NLBL_CALIPSO_C_LIST(r7, &(0x7f0000000ac0)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x880}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a00)={0x4c, r9, 0x800, 0x70bd2b, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0xa800)

2.489346567s ago: executing program 1 (id=11434):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x18, 0x2f, 0x9, 0x30bd28, 0x0, {0x4}, [@nested={0x4, 0x1e}]}, 0x18}, 0x1, 0x0, 0x0, 0x42884}, 0x10)
sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newtaction={0x74, 0x30, 0x1, 0x0, 0xfffffffe, {}, [{0x60, 0x1, [@m_mpls={0x5c, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x0, 0x0, 0x0, 0x1}, 0x1}}, @TCA_MPLS_PROTO={0x6, 0x4, 0x8848}, @TCA_MPLS_TTL={0x5, 0x7, 0xd}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x74}}, 0x0)

2.461079202s ago: executing program 5 (id=11435):
r0 = socket(0x10, 0x80002, 0x0)
r1 = socket(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="4c0000004800010029bd7000ffdbdf250a008000", @ANYRES32=r2, @ANYBLOB="f9ffffff080002000b000000140001feff000000000000000000ffff00000000140001"], 0x4c}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[], 0x48}}, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000080)=ANY=[@ANYBLOB="180000003f00010327bd7000fbdbdf2503"], 0x20}, 0x1, 0x0, 0x0, 0x20048094}, 0x20000000)
read(r3, &(0x7f0000000240)=""/147, 0x93)

2.050389015s ago: executing program 3 (id=11436):
r0 = socket$netlink(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000000)=0x4, 0x4)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0600000004000000080000000a"], 0x50)
r2 = accept$packet(0xffffffffffffffff, &(0x7f0000000ac0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000bc0)=0x14)
sendto$packet(r2, &(0x7f0000000c00)="15a39231f9673a00cddea598d403", 0xe, 0x4000, 0x0, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x37e2f4aba9289b81, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0xb6)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000340), 0x80802, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000070000000900010073797a300000000049000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000040c000980080001408000"], 0x90}, 0x1, 0x0, 0x0, 0x20000080}, 0x0)
ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f0000000380))
ioctl$PPPIOCSACTIVE(r4, 0x40047459, &(0x7f00000003c0)={0xfffffffffffffe43, 0x0})
write$ppp(r4, &(0x7f0000000400)="5c6becf911", 0x5)
read(r4, 0x0, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='devices.list\x00', 0x275a, 0x0)
write$cgroup_subtree(r6, &(0x7f0000000300)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000780)={'team0\x00', <r7=>0x0})
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000800)={0x0, <r8=>0x0}, 0x8)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000840)=r8, 0x4)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000880)=@bpf_lsm={0x1a, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1a, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r8, 0x4}, 0x94)
r9 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000940)=@bpf_lsm={0x6, 0x3, &(0x7f0000000a00)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000a40)='GPL\x00'}, 0x80)
bpf$ITER_CREATE(0xb, &(0x7f0000000a80)={r9}, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0xa, 0x22, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000040000000000000000900000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000bd185c000010000000000000000000000075140200fcffffff18540000010000000000000000000000b7080000000000007b8af8ff00000000b7080000070000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70500000800000085000000a500000085100000f8ffffffbf91000000000000b7020000020000008500000000000000b7000000000000009500000000000000"], &(0x7f0000000640)='syzkaller\x00', 0x6, 0xfa, &(0x7f0000000680)=""/250, 0x41100, 0x6d, '\x00', r7, @fallback=0x13, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000007c0)={0x0, 0xc, 0x5, 0x6799}, 0x10, r8, r9, 0x0, 0x0, &(0x7f0000000ac0), 0x10, 0x8}, 0x94)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000300)={r3, r6, 0xc, 0x0, @val=@netkit={@void, @value=r9}}, 0x1c)
sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="240000005e00010100000000000000000080"], 0x24}], 0x1}, 0x0)

1.798554712s ago: executing program 5 (id=11437):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f00000001c0)={0x4, 0x801, 0x8006, 0xfffffffe, 0x7, 0x5, 0x151, 0x10000101}, 0x20)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000041000501010000000003000001010000000000001c0001000600060008000000100007007f0000017f000001910040001400020010000c000c0003"], 0x48}, 0x1, 0x0, 0x0, 0x2c04c010}, 0xe800)

1.70835803s ago: executing program 2 (id=11438):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000002400000024000000050000000000000001000084000000000300000002000000000000210000000000000005000000000000005f"], &(0x7f0000000240)=""/265, 0x41, 0x109, 0x1}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x2, &(0x7f0000000200)=ANY=[@ANYBLOB="85000000a9000000b188c1b39b717ca4"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94)

1.707782411s ago: executing program 4 (id=11439):
bpf$MAP_CREATE(0x0, &(0x7f0000000940)=ANY=[], 0x48)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000001c0)={'syzkaller0\x00', 0x7101})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'syzkaller0\x00'})
bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0xa, 0x4, &(0x7f0000000a40)=ANY=[@ANYBLOB="180000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001d40)={0x1b, 0x5, &(0x7f00000003c0)=ANY=[], 0x0, 0x40, 0x0, 0x0, 0x41000, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x3c1, 0x3, 0x330, 0x0, 0x1170, 0x1398, 0x118, 0x1170, 0x260, 0x1398, 0x1398, 0x260, 0x1398, 0x3, 0x0, {[{{@ipv6={@mcast1, @loopback, [0xffffffff, 0xff000000], [0xffffffff, 0xffffffff], 'ip6tnl0\x00', 'veth0_to_hsr\x00', {0xff}, {0xff}, 0x6, 0x0, 0x0, 0x6f}, 0x4000000, 0xf8, 0x118, 0x0, {}, [@common=@inet=@ecn={{0x28}, {0x0, 0x0, 0x1}}, @inet=@rpfilter={{0x28}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0x100, 0x148, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x2}}, @common=@srh={{0x30}, {0x0, 0xf, 0x9, 0xbc, 0x0, 0x400, 0x1004}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', {0x55}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x390)

1.632888137s ago: executing program 1 (id=11440):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x48004}, 0x0)
recvmmsg(r0, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000780)=""/238, 0xee}, {&(0x7f0000000880)=""/62, 0x3e}, {&(0x7f00000008c0)=""/4092, 0xffc}], 0x3}, 0xfffffffa}, {{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, 0x0, 0x810}, 0x4}, {{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, 0x0}, 0xfffffffd}, {{0x0, 0x0, 0x0}, 0xff}, {{0x0, 0x0, &(0x7f00000018c0)=[{&(0x7f0000001900)=""/4090, 0xffa}, {&(0x7f0000002900)=""/4092, 0xffc}, {&(0x7f0000003900)=""/203, 0xcb}], 0x3}, 0x900000}], 0x7, 0x2, 0x0)

1.303091337s ago: executing program 5 (id=11441):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000580), 0x82c03, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000001840)={'syzkaller0\x00', 0x7101})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000003a00), 0x0, 0x0)
close(r1)
r2 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000003a40)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000003b40)={0x0, 0x0, &(0x7f0000003b80)={&(0x7f0000003bc0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8001, 0x2, 0x0, 0x5, 0x4, 0xdd9, 0x2, 0x8, 0x8000}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40004}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000003c40)={'syzkaller0\x00', @multicast})
r4 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000003c80)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000003d00)={&(0x7f0000003d40)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2c, 0x2, {0x0, 0x0, 0x0, r5, {0x0, 0x10}, {}, {0x8, 0x3}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29d}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0xa, 0x0, 0x20000000, 0x80000001, 0x7}, 0x1e}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xfffffffffffffcb6, 0x8, {0x0, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x20000080}, 0x20000412)
r6 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000003e00), 0x56)
sendmsg$kcm(r6, &(0x7f0000003e40)={&(0x7f0000003e80)=@xdp={0x2c, 0x0, r5, 0x42}, 0x80, &(0x7f0000003f00)=[{&(0x7f0000003f40)="27030200dc0f14000e0003000014c1020000ff8407c2fb7fe0406e52534b4f6b3d327db412f4fffe000000000000", 0x2e}], 0x1}, 0x4005)

1.088187566s ago: executing program 1 (id=11442):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000280)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_SET_PMK(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010029bd7040fcdb35311d53000008000300", @ANYRES32=r3, @ANYBLOB="0a0006000802110000010000140002016f0e2f164854f7e80171fad959"], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x84)
sendmsg$NL80211_CMD_DISCONNECT(r0, 0x0, 0x4000845)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NL80211_CMD_SET_CQM(0xffffffffffffffff, 0x0, 0x1)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r6=>0x0})
r7 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="230000000800000002000000ffff000001"], 0x48)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0xffffffff, r7}, 0x38)
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5400000013000500010000000000000007000000", @ANYRES32=r6, @ANYBLOB="000000000000000034001a8008000000020000002800048024000180080001000100000008000200", @ANYRES32, @ANYBLOB="08000300", @ANYRES32, @ANYBLOB="060004"], 0x54}}, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'dummy0\x00'})
sendmsg$ETHTOOL_MSG_CHANNELS_GET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000040)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x8d4}, 0x20008000)

1.087473113s ago: executing program 2 (id=11443):
r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan3\x00', <r1=>0x0}) (async, rerun: 64)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000000c0)={<r2=>0x0, <r3=>0x0}, &(0x7f0000000100)=0xc) (rerun: 64)
sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x2c, r0, 0x2, 0x70bd29, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_PID={0x8, 0x1c, 0xffffffffffffffff}, @NL802154_ATTR_PID={0x8, 0x1c, r2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80d4}, 0x20048084)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6) (async)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000002c0)={'gre0\x00', &(0x7f0000000240)={'gretap0\x00', <r5=>0x0, 0x80, 0x1, 0x2, 0x5, {{0xd, 0x4, 0x0, 0x7, 0x34, 0x67, 0x0, 0xd, 0x2f, 0x0, @remote, @loopback, {[@ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x1b, 0x4d, [@loopback, @rand_addr=0x64010100, @local, @private=0xa010102, @multicast2, @broadcast]}, @noop]}}}}})
sendmsg$nl_xfrm(r4, &(0x7f0000000480)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)=@expire={0x124, 0x18, 0x400, 0x70bd27, 0x25dfdbfc, {{{@in=@multicast1, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x4e23, 0x8001, 0x4e22, 0x4, 0x2, 0x0, 0xa0, 0x3a, r5, r3}, {@in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x11}}, 0x4d3, 0x2b}, @in=@multicast1, {0x26, 0x3, 0x4, 0x5, 0x1, 0x8, 0xffffffffd6b62f9b, 0xffffffff}, {0x3, 0xf422, 0x6b, 0x3ae}, {0x5, 0x8ed, 0x3}, 0x70bd29, 0x3502, 0xa, 0x2, 0x7, 0x7b}, 0x8}, [@coaddr={0x14, 0xe, @in=@remote}, @sa_dir={0x5}, @iptfs_init_delay={0x8, 0x27, 0x8}, @XFRMA_IF_ID={0x8, 0x1f, 0x4}]}, 0x124}, 0x1, 0x0, 0x0, 0x20000000}, 0x4080)
r6 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000500), 0xffffffffffffffff)
sendmsg$TIPC_NL_MON_SET(r6, &(0x7f0000000680)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000640)={&(0x7f0000000540)={0xe0, r7, 0x2, 0x70bd29, 0x25dfdbfe, {}, [@TIPC_NLA_LINK={0xcc, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x200}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1d8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xd}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x37}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0xe0}}, 0x40000) (async)
getpid()
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), r6) (async)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000740)={'wlan0\x00', <r9=>0x0})
sendmsg$NL80211_CMD_NEW_STATION(r6, &(0x7f0000000800)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x30, r8, 0x100, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0x6}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000080}, 0x80)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000840)) (async)
sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000880)={0x1, 0x50, 0x4, {}, {0x0, 0x2710}, {0x3, 0x0, 0x1, 0x1}, 0x1, @canfd={{0x1, 0x1}, 0x35, 0x2, 0x0, 0x0, "c8c2eaba177b2ee2112dadef163fef46bc36148bbeb4958897918997311708f19dffdd804b58c7368f8d4823d9e3de9e194f0f9d4898b7c1ea4cdb6cf45d0d0e"}}, 0x80}, 0x1, 0x0, 0x0, 0x4000000}, 0x40005) (async)
r10 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF_FLAGS(0xffffffffffffffff, 0x84, 0x7a, &(0x7f0000000980)={<r11=>0x2, <r12=>0xffffffffffffffff, 0x80000}, &(0x7f00000009c0)=0xc)
setsockopt$inet_sctp_SCTP_RTOINFO(r10, 0x84, 0x0, &(0x7f0000000a00)={r11, 0x4e9b, 0xa1e, 0x7}, 0x10)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r12, 0x84, 0x6f, &(0x7f0000000b40)={r11, 0xd8, &(0x7f0000000a40)=[@in6={0xa, 0x4e21, 0x401, @remote, 0xfff}, @in6={0xa, 0x4e23, 0x9, @private2, 0x1}, @in6={0xa, 0x4e20, 0xbf71, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xfffffffc}, @in={0x2, 0x4e20, @rand_addr=0x64010101}, @in={0x2, 0x4e20, @multicast1}, @in6={0xa, 0x4e22, 0x9, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x43997d59}, @in6={0xa, 0x4e22, 0x11, @local, 0x97f0}, @in6={0xa, 0x4e23, 0x9, @mcast1, 0x3}, @in={0x2, 0x4e24, @private=0xa010102}]}, &(0x7f0000000b80)=0x10) (async)
r13 = socket$inet_udp(0x2, 0x2, 0x0) (async, rerun: 64)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000c40)={'ip6gre0\x00', &(0x7f0000000bc0)={'ip6tnl0\x00', <r14=>r5, 0x29, 0x7, 0x5, 0x40b8, 0x41, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x34}}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x700, 0x8, 0x400, 0x7b3}}) (rerun: 64)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r13, 0x89f2, &(0x7f0000000cc0)={'syztnl1\x00', &(0x7f0000000c80)={'erspan0\x00', r14, 0x8, 0x8, 0x6, 0x2, {{0x7, 0x4, 0x3, 0xc, 0x1c, 0x65, 0x0, 0x0, 0x2f, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0xd}, {[@ssrr={0x89, 0x7, 0xd0, [@remote]}]}}}}}) (async)
ioctl$sock_bt_hci(r12, 0x800448f0, &(0x7f0000000d00)="e33abf09eb67cbca31fefc8e6f4ab9ef8a3f3c965683a832c2214deaf9f25075ddcc6416c7d936876a80d51099621d7dccaa2f41f8adcd6bdf2a0ef7eca437084c0d52594a60359d8b8bcde3237023b586d653a49769bbcd2b954809cbf3c188b3c10015b8fb128bdb273c8ffff84a763d9df6cc7ec011d2d0391b3314f4814c16801f0807ed917bf31e094a96cde68de1f8789df8cd30775d82d434b1")
socket$nl_route(0x10, 0x3, 0x0) (async)
getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r10, 0x84, 0x1e, &(0x7f0000000dc0), &(0x7f0000000e00)=0x4)
ioctl$XFS_IOC_PATH_TO_HANDLE(r12, 0xc0385869, &(0x7f0000000f40)={<r15=>0xffffffffffffffff, &(0x7f0000000e40)='[[@])\x1a\x00', 0xd02, &(0x7f0000000e80)={@align=0x7ff, {0x7, 0x3, 0x1, 0x2}}, 0x5, &(0x7f0000000ec0), &(0x7f0000000f00)=0x5})
sendmsg$NL80211_CMD_GET_SURVEY(r15, &(0x7f0000001040)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001000)={&(0x7f0000000fc0)={0x1c, r8, 0x100, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r9}, @void}}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x2000c800}, 0x40880)
r16 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_tcp_buf(r16, 0x6, 0x1c, &(0x7f0000001080)="5571fc36238c9ac8d766422fc6fa06e6e0dda616538c3a9356b412b747afd40eac25dd29004a68d96d9fb8eca5f669b5f99bcd518074e94af84a8831947a3bce1107a139ee8f0b4d7534bd535095e4649e25dd7dbd736c2d581529fb65c32a31a260b80763b29dc8e5649cedff557191e5acf04954722816033b3139fc6a3983a939d031d74c0a0126877cdc8066e3e1255d2265f449bdb33bff28d7b5c7092adeb2a7535c11e9b8026571d71b99f0370f773fbb9a2ec6defed53d48305e", 0xbe)

1.026309599s ago: executing program 4 (id=11444):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="220000000400000010000000"], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000001c0)={r0}, 0x4) (async)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000001c0)={r0}, 0x4)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0900000004000000080000000a"], 0x50)
bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) (async)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1, 0xc, &(0x7f0000000600)=@framed={{}, [@generic={0x61, 0x8, 0x1, 0xfffd}, @generic={0x8, 0xa, 0x7, 0x8, 0x4}, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffe}, @map_fd={0x18, 0x1, 0x1, 0x0, r1}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0x85, 0x0, 0x0, 0x0, 0x1}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x1d, &(0x7f0000000500)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0xfffffffe}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @exit, @ldst={0x7, 0x0, 0x0, 0x5, 0x2, 0x100, 0x8}, @jmp={0x5, 0x1, 0x6, 0x9, 0x3, 0x94e863df5a302523, 0xfffffffffffffffc}, @exit, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x5}, @map_fd={0x18, 0x1, 0x1, 0x0, r1}, @generic={0x2, 0xd, 0x5, 0x7, 0x8}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}}}, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f00000000c0)=""/195, 0x0, 0x7, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94)

797.362071ms ago: executing program 3 (id=11445):
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r1, &(0x7f0000000000), 0x10)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vxcan1\x00', <r2=>0x0})
sendmsg$can_bcm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="05"], 0x48}}, 0x80)
sendmsg$can_bcm(r1, &(0x7f0000000140)={&(0x7f0000000180)={0x1d, r2}, 0x10, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYRES32=r1], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000007940)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000000680)=@newtaction={0x180, 0x30, 0x216822a75a8bdd29, 0x0, 0x0, {}, [{0x16c, 0x1, [@m_connmark={0x50, 0x2, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0xd, 0x5, 0x0, 0x3}, 0x8}}]}, {0x4}, {0xc}, {0xc}}}, @m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0xd4, 0x3, 0x0, 0x0, {{0x9}, {0x58, 0x2, 0x0, 0x1, [@TCA_GACT_PROB={0x0, 0x3, {0x2, 0xea3, 0x7}}, @TCA_GACT_PROB={0xc, 0x3, {0x0, 0x1d28}}, @TCA_GACT_PARMS={0x18, 0x2, {0xb66, 0xb3, 0x10000000, 0x34e, 0xffff}}, @TCA_GACT_PARMS={0x18, 0x2, {0x7ff, 0xd8, 0x0, 0x9, 0x100000e0}}]}, {0x52, 0x6, "a06b1d1931f3579c6d7c5159238a286074602c3726c701f3c0d5382de62a6e8c4fb714fcd674c66cd306a4f78d3d05530609c9b04b7483bd084d70df8e77e6fbd503917aa0a6c737cef0ed021b60"}, {0xc}, {0x1, 0x8, {0x2, 0x2}}}}]}]}, 0x180}}, 0x0)

576.200681ms ago: executing program 4 (id=11446):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000600)={0x0, 0x38}}, 0x0)
r1 = socket(0x10, 0x803, 0x0)
bind$netlink(r1, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc)
getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14)
sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x40d, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r2, 0x69b}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x4}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40040}, 0x4000000)
r3 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'bond0\x00', <r4=>0x0})
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x1, 0x803, 0x0)
getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800c0001006d6163766c616e000400028008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r7], 0x44}}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0xc, 0x4, 0x4, 0x8001}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000ac0)={0x10, 0x8, &(0x7f0000000b80)=ANY=[@ANYBLOB="beaa00000000000079", @ANYRES32, @ANYBLOB="0000000000000000bf03000000000000850000006b000000b70000000000000095"], 0x0, 0xe, 0x0, 0x0, 0x41000}, 0x94)
bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0)
r8 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000d40)={0x0, 0x1}, 0xc)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000f00)={0x11, 0x1a, &(0x7f0000000800)=@raw=[@ldst={0x1, 0x1, 0x4, 0x2, 0x4, 0x20, 0xfffffffffffffffc}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}}, @cb_func={0x18, 0x8, 0x4, 0x0, 0xfffffffffffffffa}, @printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}, @cb_func={0x18, 0xa, 0x4, 0x0, 0xfffffffffffffffb}], &(0x7f0000000900)='syzkaller\x00', 0x6, 0xc8, &(0x7f0000000940)=""/200, 0x41100, 0x14, '\x00', r2, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000a40)={0x8, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000e80)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, r8, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000ec0)=[{0x1, 0x4, 0x1, 0x5}, {0x3, 0x5, 0x4, 0x1}], 0x10, 0x4}, 0x94)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000dc0)={0x20, 0x16, 0x107, 0x70bd2e, 0x25dfdbfb, {0x11, 0x7c}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x1, 0x0, 0x0, @fd}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4048011}, 0x80)
r9 = socket$kcm(0x10, 0x2, 0x0)
r10 = socket(0x1, 0x803, 0x0)
r11 = socket$nl_route(0x10, 0x3, 0x0)
getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, <r12=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800e0001006970366772657461700000001800028014000700ff01000000000000000000000000000108000a00", @ANYRES32=r12], 0x54}}, 0x0)
sendmsg$kcm(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{0x0}], 0x1}, 0x0)

91.185871ms ago: executing program 5 (id=11447):
r0 = socket(0x10, 0x80002, 0x0)
r1 = socket(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="4c0000004800010029bd7000ffdbdf250a008000", @ANYRES32=r2, @ANYBLOB="f9ffffff080002000b000000140001feff000000000000000000ffff00000000140001"], 0x4c}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[], 0x48}}, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000080)=ANY=[@ANYBLOB="180000003f00010327bd7000fbdbdf2503"], 0x20}, 0x1, 0x0, 0x0, 0x20048094}, 0x20000000)
read(r3, &(0x7f0000000240)=""/147, 0x93)

0s ago: executing program 2 (id=11448):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_DELAYED_SACK(r1, 0x84, 0x10, 0x0, &(0x7f0000001440)=0x8)
socket$nl_generic(0x11, 0x3, 0x10)
r2 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r2, &(0x7f0000001480)={0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000001500)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x0)
r3 = socket(0x11, 0x2, 0x0)
setsockopt(r3, 0x107, 0x1, &(0x7f0000001540)="110000000000060000071a80010061cc", 0x10)
r4 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r4, &(0x7f0000001580)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000001600)="2e00000011008188040f46ecdb4cb9cca7480e1211000000e3bd012a128748b429021627e305dd2b7a146efb4400", 0x2e}], 0x1}, 0x4048004)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge0\x00', <r5=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=@delneigh={0x30, 0x1d, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r5, 0x0, 0x96, 0x4}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}, @NDA_VLAN={0x6, 0x5, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x4040000}, 0x20000090)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f00000001c0)={0x4, 0x801, 0x8006, 0xfffffffe, 0x7, 0x5, 0x151, 0x10000101}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x3, 0x16, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], &(0x7f0000001400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48)
sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000041000501010000000000000001010000000000001c0001000600060008000000100007007f0000017f000001910040001400020010000c000c0003"], 0x48}, 0x1, 0x0, 0x0, 0x2c04c010}, 0xe800)
sendmsg$nl_generic(r6, &(0x7f0000000500)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000200)={0x2b0, 0x3f, 0x400, 0x70bd29, 0x25dfdbff, {0x5}, [@nested={0x1b2, 0x125, 0x0, 0x1, [@generic, @nested={0x4, 0xa9}, @generic="179b6da6ff59b22afe6d78e85968ce6df6fea087ae8d6bffc9b7", @typed={0x8, 0x8, 0x0, 0x0, @ipv4=@broadcast}, @typed={0x8, 0xb8, 0x0, 0x0, @u32=0x362}, @nested={0x4, 0x158}, @generic="13dfdc5696a607984061cc1fbbe0a8e59ba2cba7ac463a04f23065f8f53503b4a51df4acde874bab407032dbfb2340a3ed10c290bb7f7d822fcabb51f2724a35a356e9951d29d290a2955821c39a7018f2da9f8fab109e1f42efda59e9d3203fa00c019a8ba282c24dc41e93352953b63fefe7e72254b4ee3751698e66b38e29051a3ba5c7eb4f5d966f436716a4c36f58cf02fecbad1b9f36995f3ed2471bf2736e70c3c6aa6cbcdd4c32aa8e", @generic="0a45d657bcf03af290ad859a5bd0cb79d2244fe27b10d7d792b1bb15d2aaea3945f43ccb273b4aec4419c63e8936bac9bad40501e1eae06788c1f7812c721893f46b14bd23e357e42c058e3a7f337fe4b9950d6a32c8c5fc6dd0d6078cd29273d3752cdb29c8194813b8eba01cd9d353243ea83c6796afa8bb6b0864fb949b92130e10f87b76f360ca2892398325fdaaa72f1dbbbdb238f42ca8a6f0e020827268099614d0067d4c24ecbf5ae81708853070b52a2bd81b9c80d65d86b280cb6064a1b793c569eaa6ad38f5", @typed={0x4, 0x7d}]}, @typed={0x8, 0x8, 0x0, 0x0, @u32=0x6}, @typed={0xdf, 0xc1, 0x0, 0x0, @binary="0c38dd9525d5a9c36d66b310801861e487eb377ba6193ae02f16542083b5c6d472ea8e50ad8852918095d863e2496771a46d6fb01c5a01d8b26dea7c1cee92b9b5348b1f6bf1bed3c46aee8b25fa24c97ab0ad54e26334d9630fbbee741f292b39a0b076e54d5fb23f9afb5402b46a8c7beffada48be60f4a0006ad116b489b6341812ca93858513fb20a619adb648d5f786b13c4855f2b9daeea4fcd565042625d7b5071dfb9accf1b9c3205ab59c092734affc81403239ce965245602cbad79fbdadf00b7b3b90fda427fb18617166dc0ecce5ce52bcb635717e"}]}, 0x2b0}, 0x1, 0x0, 0x0, 0x40800}, 0x20008800)

kernel console output (not intermixed with test programs):

08: 0000000000000000 R09: 0000000000000000
[ 1022.086271][ T4930] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1022.086286][ T4930] R13: 00007f08cee26038 R14: 00007f08cee25fa0 R15: 00007fff230e87a8
[ 1022.086325][ T4930]  </TASK>
[ 1022.413413][ T8619] net_ratelimit: 180 callbacks suppressed
[ 1022.413436][ T8619] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1022.413461][ T8619] bond7: (slave ip6gretap1): failed to get link speed/duplex
[ 1022.413497][ T8619] bond13: (slave ip6gretap2): failed to get link speed/duplex
[ 1022.413517][ T8619] bond13: (slave macvlan8): failed to get link speed/duplex
[ 1022.522342][   T84] bond13: (slave ip6gretap2): failed to get link speed/duplex
[ 1022.522373][   T84] bond13: (slave macvlan8): failed to get link speed/duplex
[ 1022.522407][   T84] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1022.522429][   T84] bond7: (slave ip6gretap1): failed to get link speed/duplex
[ 1022.631270][T15567] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1022.631307][T15567] bond7: (slave ip6gretap1): failed to get link speed/duplex
[ 1022.985101][T25952] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[ 1022.988681][T25952] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[ 1022.989597][T25952] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[ 1023.017927][T25952] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[ 1023.029233][T25952] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[ 1023.941385][ T4967] wireguard2: entered promiscuous mode
[ 1023.972844][ T4982] netlink: 52 bytes leftover after parsing attributes in process `syz.2.10726'.
[ 1023.972877][ T4982] netlink: 52 bytes leftover after parsing attributes in process `syz.2.10726'.
[ 1024.195445][ T4984] netlink: 32 bytes leftover after parsing attributes in process `syz.1.10725'.
[ 1024.212032][ T4984] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10725'.
[ 1024.288666][ T4991] bond0: option mode: unable to set because the bond device has slaves
[ 1024.485769][ T4991] bond0: (slave macvlan6): Error -98 calling set_mac_address
[ 1024.523657][ T4993] netlink: 14 bytes leftover after parsing attributes in process `syz.4.10728'.
[ 1025.112643][ T5623] Bluetooth: hci5: command tx timeout
[ 1025.147351][ T5003] netlink: 28 bytes leftover after parsing attributes in process `syz.4.10731'.
[ 1025.147386][ T5003] IPVS: Unknown mcast interface: vcan0
[ 1025.323349][ T5009] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10734'.
[ 1025.505525][ T5015] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10735'.
[ 1025.782971][ T4938] rxe_eth0 speed is unknown, defaulting to 1000
[ 1027.059393][ T5019] virtio_blk virtio4: 1/0/0 default/read/poll queues
[ 1027.169440][ T5019] virtio_blk virtio4: [vda] 262144 512-byte logical blocks (134 MB/128 MiB)
[ 1027.191462][ T5623] Bluetooth: hci5: command tx timeout
[ 1027.430480][T21251] net_ratelimit: 175 callbacks suppressed
[ 1027.430508][T21251] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1027.430534][T21251] bond7: (slave ip6gretap1): failed to get link speed/duplex
[ 1027.430570][T21251] bond13: (slave ip6gretap2): failed to get link speed/duplex
[ 1027.430591][T21251] bond13: (slave macvlan8): failed to get link speed/duplex
[ 1027.541582][ T8615] bond13: (slave ip6gretap2): failed to get link speed/duplex
[ 1027.541614][ T8615] bond13: (slave macvlan8): failed to get link speed/duplex
[ 1027.541648][ T8615] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1027.541670][ T8615] bond7: (slave ip6gretap1): failed to get link speed/duplex
[ 1027.684123][T20529] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1027.684161][T20529] bond7: (slave ip6gretap1): failed to get link speed/duplex
[ 1028.366852][ T5053] netlink: 108 bytes leftover after parsing attributes in process `syz.4.10743'.
[ 1028.452438][ T5050] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10744'.
[ 1029.248388][ T4938] syzkaller0 speed is unknown, defaulting to 1000
[ 1029.270706][ T5623] Bluetooth: hci5: command tx timeout
[ 1029.293402][ T4938] wg0 speed is unknown, defaulting to 1000
[ 1030.274960][ T5096] FAULT_INJECTION: forcing a failure.
[ 1030.274960][ T5096] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1030.275000][ T5096] CPU: 1 UID: 0 PID: 5096 Comm: syz.1.10754 Not tainted syzkaller #0 PREEMPT(full) 
[ 1030.275027][ T5096] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[ 1030.275042][ T5096] Call Trace:
[ 1030.275052][ T5096]  <TASK>
[ 1030.275064][ T5096]  dump_stack_lvl+0xe8/0x150
[ 1030.275113][ T5096]  should_fail_ex+0x410/0x560
[ 1030.275154][ T5096]  _copy_from_user+0x2d/0xb0
[ 1030.275193][ T5096]  ___sys_recvmsg+0x173/0x5a0
[ 1030.275231][ T5096]  ? __pfx____sys_recvmsg+0x10/0x10
[ 1030.275266][ T5096]  ? lock_acquire+0x115/0x350
[ 1030.275329][ T5096]  do_recvmmsg+0x31a/0x7f0
[ 1030.275367][ T5096]  ? __pfx_do_recvmmsg+0x10/0x10
[ 1030.275409][ T5096]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[ 1030.275453][ T5096]  ? __fget_files+0x3a2/0x420
[ 1030.275488][ T5096]  __x64_sys_recvmmsg+0x198/0x250
[ 1030.275519][ T5096]  ? __pfx___x64_sys_recvmmsg+0x10/0x10
[ 1030.275560][ T5096]  do_syscall_64+0x166/0x520
[ 1030.275588][ T5096]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1030.275612][ T5096]  ? clear_bhb_loop+0x70/0xc0
[ 1030.275641][ T5096]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1030.275664][ T5096] RIP: 0033:0x7fe6c459e559
[ 1030.275686][ T5096] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1030.275707][ T5096] RSP: 002b:00007fe6c53b8028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[ 1030.275732][ T5096] RAX: ffffffffffffffda RBX: 00007fe6c4825fa0 RCX: 00007fe6c459e559
[ 1030.275750][ T5096] RDX: 0000000000000004 RSI: 0000200000000280 RDI: 0000000000000005
[ 1030.275765][ T5096] RBP: 00007fe6c53b8090 R08: 0000000000000000 R09: 0000000000000000
[ 1030.275780][ T5096] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1030.275794][ T5096] R13: 00007fe6c4826038 R14: 00007fe6c4825fa0 R15: 00007ffc668be008
[ 1030.275850][ T5096]  </TASK>
[ 1031.165802][ T5106] xt_LOG: prefix is not null-terminated
[ 1031.263166][ T4938] lo speed is unknown, defaulting to 1000
[ 1031.352719][ T5623] Bluetooth: hci5: command tx timeout
[ 1032.116186][ T5123] __nla_validate_parse: 2 callbacks suppressed
[ 1032.116212][ T5123] netlink: 28 bytes leftover after parsing attributes in process `syz.3.10764'.
[ 1032.379303][ T5128] netlink: 16 bytes leftover after parsing attributes in process `syz.1.10766'.
[ 1032.481534][ T8620] net_ratelimit: 183 callbacks suppressed
[ 1032.481562][ T8620] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1032.481590][ T8620] bond7: (slave ip6gretap1): failed to get link speed/duplex
[ 1032.481632][ T8620] bond13: (slave ip6gretap2): failed to get link speed/duplex
[ 1032.481655][ T8620] bond13: (slave macvlan8): failed to get link speed/duplex
[ 1032.590579][ T8620] bond13: (slave ip6gretap2): failed to get link speed/duplex
[ 1032.590613][ T8620] bond13: (slave macvlan8): failed to get link speed/duplex
[ 1032.590649][ T8620] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1032.590673][ T8620] bond7: (slave ip6gretap1): failed to get link speed/duplex
[ 1032.664999][ T5133] IPVS: ip_vs_add_dest(): server weight less than zero
[ 1032.669108][ T5133] netlink: 'syz.1.10766': attribute type 1 has an invalid length.
[ 1032.703353][  T996] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1032.721835][T20529] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1033.017648][ T5133] 8021q: adding VLAN 0 to HW filter on device bond27
[ 1033.612418][ T5157] xt_LOG: prefix is not null-terminated
[ 1033.819349][ T4938] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1033.827782][ T4938] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1033.827970][ T4938] bridge_slave_0: entered allmulticast mode
[ 1033.874732][ T4938] bridge_slave_0: entered promiscuous mode
[ 1033.889653][ T4938] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1033.898105][ T4938] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1033.898268][ T4938] bridge_slave_1: entered allmulticast mode
[ 1033.941454][ T4938] bridge_slave_1: entered promiscuous mode
[ 1034.121764][ T5166] netlink: 2 bytes leftover after parsing attributes in process `syz.2.10778'.
[ 1034.145559][ T4938] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1034.187310][ T4938] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1034.239611][ T4938] team0: Port device team_slave_0 added
[ 1034.249354][ T4938] team0: Port device team_slave_1 added
[ 1034.316707][ T4938] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1034.316728][ T4938] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1034.316759][ T4938] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1034.373018][ T4938] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1034.373038][ T4938] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1034.373071][ T4938] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1034.679364][ T4938] hsr_slave_0: entered promiscuous mode
[ 1034.697060][ T4938] hsr_slave_1: entered promiscuous mode
[ 1034.709957][ T4938] debugfs: 'hsr0' already exists in 'hsr'
[ 1034.709985][ T4938] Cannot create hsr debugfs directory
[ 1034.845434][ T5168] netlink: 'syz.1.10780': attribute type 4 has an invalid length.
[ 1035.531880][ T5188] netlink: 'syz.4.10785': attribute type 4 has an invalid length.
[ 1035.531907][ T5188] netlink: 13951 bytes leftover after parsing attributes in process `syz.4.10785'.
[ 1035.574200][ T5186] netlink: 16 bytes leftover after parsing attributes in process `syz.3.10786'.
[ 1035.574249][ T5186] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10786'.
[ 1036.233883][ T5204] netlink: 52 bytes leftover after parsing attributes in process `syz.2.10790'.
[ 1036.233918][ T5204] netlink: 52 bytes leftover after parsing attributes in process `syz.2.10790'.
[ 1036.312922][ T5194] netlink: 'syz.1.10788': attribute type 4 has an invalid length.
[ 1036.395619][ T5203] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10791'.
[ 1036.470464][ T5206] netlink: 24 bytes leftover after parsing attributes in process `syz.4.10792'.
[ 1036.956773][ T4938] netdevsim netdevsim5 netdevsim0: renamed from eth0
[ 1037.151685][ T4938] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 1037.156416][ T4938] netdevsim netdevsim5 netdevsim1: renamed from eth1
[ 1037.199369][ T4938] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 1037.214840][ T4938] netdevsim netdevsim5 netdevsim2: renamed from eth2
[ 1037.255913][ T4938] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 1037.270036][ T4938] netdevsim netdevsim5 netdevsim3: renamed from eth3
[ 1037.362258][ T4938] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 1037.501695][ T8620] net_ratelimit: 201 callbacks suppressed
[ 1037.501720][ T8620] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1037.501749][ T8620] bond7: (slave ip6gretap1): failed to get link speed/duplex
[ 1037.501789][ T8620] bond13: (slave ip6gretap2): failed to get link speed/duplex
[ 1037.501812][ T8620] bond13: (slave macvlan8): failed to get link speed/duplex
[ 1037.610662][ T8620] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1037.631525][ T8615] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1037.651577][ T8620] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1037.675152][ T8620] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1037.691308][T15567] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1037.716125][ T8614] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1038.333548][ T4938] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1038.477487][ T5237] netlink: 16 bytes leftover after parsing attributes in process `syz.1.10800'.
[ 1038.477530][ T5237] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10800'.
[ 1038.566537][ T4938] 8021q: adding VLAN 0 to HW filter on device team0
[ 1038.579838][ T5240] netlink: 144 bytes leftover after parsing attributes in process `syz.2.10799'.
[ 1038.667025][T20529] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1038.667144][T20529] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1038.756928][  T987] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1038.757044][  T987] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1040.160669][ T5268] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10809'.
[ 1040.496370][ T5274] netlink: 52 bytes leftover after parsing attributes in process `syz.3.10810'.
[ 1040.496403][ T5274] netlink: 52 bytes leftover after parsing attributes in process `syz.3.10810'.
[ 1040.994699][ T5286] syzkaller0: entered promiscuous mode
[ 1040.994726][ T5286] syzkaller0: entered allmulticast mode
[ 1041.146405][ T5289] bond7: option mode: unable to set because the bond device has slaves
[ 1041.254520][ T5289] bond7: (slave macvlan3): Error -98 calling set_mac_address
[ 1041.297358][ T5293] netlink: 14 bytes leftover after parsing attributes in process `syz.1.10815'.
[ 1042.073309][ T5307] netlink: 16 bytes leftover after parsing attributes in process `syz.2.10821'.
[ 1042.073354][ T5307] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10821'.
[ 1042.209014][ T4938] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1042.520597][  T996] net_ratelimit: 189 callbacks suppressed
[ 1042.520624][  T996] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1042.551242][T15563] bond13: (slave ip6gretap2): failed to get link speed/duplex
[ 1042.551272][T15563] bond13: (slave macvlan8): failed to get link speed/duplex
[ 1042.551307][T15563] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1042.551328][T15563] bond7: (slave ip6gretap1): failed to get link speed/duplex
[ 1042.670497][T15563] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1042.670534][T15563] bond7: (slave ip6gretap1): failed to get link speed/duplex
[ 1042.670570][T15563] bond13: (slave ip6gretap2): failed to get link speed/duplex
[ 1042.670590][T15563] bond13: (slave macvlan8): failed to get link speed/duplex
[ 1042.722141][ T5326] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10825'.
[ 1042.831878][T20529] bond13: (slave ip6gretap2): failed to get link speed/duplex
[ 1043.724435][ T5338] tc_dump_action: action bad kind
[ 1044.438320][ T5352] netlink: 'syz.1.10831': attribute type 4 has an invalid length.
[ 1044.460966][ T5358] xt_LOG: prefix is not null-terminated
[ 1045.109975][ T4938] veth0_vlan: entered promiscuous mode
[ 1045.161468][ T5364] __nla_validate_parse: 1 callbacks suppressed
[ 1045.161492][ T5364] netlink: 16 bytes leftover after parsing attributes in process `syz.4.10833'.
[ 1045.161534][ T5364] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10833'.
[ 1045.205941][ T4938] veth1_vlan: entered promiscuous mode
[ 1045.374689][ T5366] netlink: 16 bytes leftover after parsing attributes in process `syz.3.10834'.
[ 1045.433342][ T4938] veth0_macvtap: entered promiscuous mode
[ 1045.479293][ T4938] veth1_macvtap: entered promiscuous mode
[ 1045.523928][ T5366] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10834'.
[ 1045.552060][ T5367] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10834'.
[ 1045.668468][ T4938] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1045.726218][ T4938] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1045.739904][ T5366] workqueue: name exceeds WQ_NAME_LEN. Truncating to: 1ùà^!00000000000000000000003ÿÿÿ
[ 1045.955082][ T5387] FAULT_INJECTION: forcing a failure.
[ 1045.955082][ T5387] name failslab, interval 1, probability 0, space 0, times 0
[ 1045.959317][ T5387] CPU: 1 UID: 0 PID: 5387 Comm: syz.2.10838 Not tainted syzkaller #0 PREEMPT(full) 
[ 1045.959347][ T5387] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[ 1045.959362][ T5387] Call Trace:
[ 1045.959372][ T5387]  <TASK>
[ 1045.959384][ T5387]  dump_stack_lvl+0xe8/0x150
[ 1045.959426][ T5387]  should_fail_ex+0x410/0x560
[ 1045.959466][ T5387]  ? __alloc_skb+0x1db/0x7a0
[ 1045.959503][ T5387]  should_failslab+0xa8/0x100
[ 1045.959539][ T5387]  ? __alloc_skb+0x1db/0x7a0
[ 1045.959573][ T5387]  kmem_cache_alloc_node_noprof+0xa1/0x610
[ 1045.959600][ T5387]  ? __alloc_skb+0x18d/0x7a0
[ 1045.959637][ T5387]  ? __alloc_skb+0x1db/0x7a0
[ 1045.959681][ T5387]  __alloc_skb+0x1db/0x7a0
[ 1045.959724][ T5387]  netlink_dump+0x1e7/0xee0
[ 1045.959756][ T5387]  ? __nla_parse+0x40/0x60
[ 1045.959784][ T5387]  ? ip_set_dump_start+0x174/0x420
[ 1045.959906][ T5387]  ? __pfx_netlink_dump+0x10/0x10
[ 1045.959957][ T5387]  ? netlink_lookup+0x30/0x200
[ 1045.959985][ T5387]  ? netlink_lookup+0x30/0x200
[ 1045.960021][ T5387]  __netlink_dump_start+0x589/0x7b0
[ 1045.960060][ T5387]  ip_set_dump+0x15b/0x1f0
[ 1045.960091][ T5387]  ? __pfx_ip_set_dump+0x10/0x10
[ 1045.960121][ T5387]  ? __pfx_ip_set_dump_start+0x10/0x10
[ 1045.960152][ T5387]  ? __pfx_ip_set_dump_do+0x10/0x10
[ 1045.960182][ T5387]  ? __pfx_ip_set_dump_done+0x10/0x10
[ 1045.960238][ T5387]  nfnetlink_rcv_msg+0xcc2/0x12b0
[ 1045.960266][ T5387]  ? unwind_get_return_address+0x4d/0x90
[ 1045.960297][ T5387]  ? nfnetlink_rcv_msg+0x228/0x12b0
[ 1045.960348][ T5387]  ? __pfx_nfnetlink_rcv_msg+0x10/0x10
[ 1045.960435][ T5387]  netlink_rcv_skb+0x226/0x4a0
[ 1045.960467][ T5387]  ? __pfx_nfnetlink_rcv_msg+0x10/0x10
[ 1045.960497][ T5387]  ? __pfx_netlink_rcv_skb+0x10/0x10
[ 1045.960542][ T5387]  ? bpf_lsm_capable+0x9/0x20
[ 1045.960567][ T5387]  ? security_capable+0x7e/0x2c0
[ 1045.960613][ T5387]  nfnetlink_rcv+0x2b9/0x28c0
[ 1045.960644][ T5387]  ? __dev_queue_xmit+0x29b/0x3920
[ 1045.960678][ T5387]  ? __local_bh_enable_ip+0xd6/0x140
[ 1045.960711][ T5387]  ? lockdep_hardirqs_on+0x7b/0x110
[ 1045.960740][ T5387]  ? __dev_queue_xmit+0x29b/0x3920
[ 1045.960766][ T5387]  ? __local_bh_enable_ip+0xd6/0x140
[ 1045.960798][ T5387]  ? __dev_queue_xmit+0x29b/0x3920
[ 1045.960825][ T5387]  ? __dev_queue_xmit+0x1efb/0x3920
[ 1045.960851][ T5387]  ? do_syscall_64+0x166/0x520
[ 1045.960884][ T5387]  ? __dev_queue_xmit+0x29b/0x3920
[ 1045.960932][ T5387]  ? __pfx_nfnetlink_rcv+0x10/0x10
[ 1045.960967][ T5387]  ? __pfx___dev_queue_xmit+0x10/0x10
[ 1045.961005][ T5387]  ? ref_tracker_free+0x689/0x830
[ 1045.961046][ T5387]  ? __pfx_ref_tracker_free+0x10/0x10
[ 1045.961093][ T5387]  ? __skb_clone+0x449/0x6c0
[ 1045.961127][ T5387]  ? skb_clone+0x246/0x3a0
[ 1045.961159][ T5387]  ? __netlink_deliver_tap+0x811/0x860
[ 1045.961187][ T5387]  ? netlink_deliver_tap+0x2e/0x1b0
[ 1045.961226][ T5387]  ? netlink_deliver_tap+0x2e/0x1b0
[ 1045.961255][ T5387]  ? netlink_deliver_tap+0x2e/0x1b0
[ 1045.961293][ T5387]  netlink_unicast+0x8ef/0xa80
[ 1045.961343][ T5387]  netlink_sendmsg+0x813/0xb40
[ 1045.961385][ T5387]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1045.961427][ T5387]  ? apparmor_socket_sendmsg+0x98/0x360
[ 1045.961464][ T5387]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1045.961493][ T5387]  sock_sendmsg_nosec+0x13a/0x180
[ 1045.961530][ T5387]  ____sys_sendmsg+0x54e/0x850
[ 1045.961563][ T5387]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1045.961603][ T5387]  ? import_iovec+0x73/0xa0
[ 1045.961645][ T5387]  ___sys_sendmsg+0x2a5/0x360
[ 1045.961671][ T5387]  ? __lock_acquire+0x747/0x2de0
[ 1045.961704][ T5387]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1045.961777][ T5387]  ? __fget_files+0x2a/0x420
[ 1045.961798][ T5387]  ? __fget_files+0x3a2/0x420
[ 1045.961834][ T5387]  __x64_sys_sendmsg+0x1b1/0x290
[ 1045.961865][ T5387]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 1045.961925][ T5387]  do_syscall_64+0x166/0x520
[ 1045.961953][ T5387]  ? trace_irq_disable+0x3b/0x140
[ 1045.961979][ T5387]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1045.962004][ T5387]  ? clear_bhb_loop+0x70/0xc0
[ 1045.962034][ T5387]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1045.962059][ T5387] RIP: 0033:0x7f9bee39e559
[ 1045.962082][ T5387] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1045.962103][ T5387] RSP: 002b:00007f9bef2f0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1045.962131][ T5387] RAX: ffffffffffffffda RBX: 00007f9bee626180 RCX: 00007f9bee39e559
[ 1045.962150][ T5387] RDX: 0000000000000000 RSI: 0000200000000380 RDI: 0000000000000006
[ 1045.962165][ T5387] RBP: 00007f9bef2f0090 R08: 0000000000000000 R09: 0000000000000000
[ 1045.962182][ T5387] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1045.962197][ T5387] R13: 00007f9bee626218 R14: 00007f9bee626180 R15: 00007ffd3c090788
[ 1045.962238][ T5387]  </TASK>
[ 1046.610780][   T57] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1046.763926][  T987] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1046.765199][  T987] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1046.765245][  T987] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1047.397320][ T5399] bond13: option mode: unable to set because the bond device has slaves
[ 1047.513730][ T5399] bond13: (slave macvlan9): Error -98 calling set_mac_address
[ 1047.535377][  T987] net_ratelimit: 168 callbacks suppressed
[ 1047.535399][  T987] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1047.556045][   T84] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1047.571385][T21251] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1047.593373][T21251] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1047.610519][T15563] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1047.632828][T15563] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1047.658081][  T987] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1047.678303][  T987] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1047.692249][ T8614] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1047.712346][  T987] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1047.715956][ T5405] netlink: 14 bytes leftover after parsing attributes in process `syz.3.10841'.
[ 1047.751059][ T8619] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1047.751084][ T8619] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1048.088798][   T84] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1048.088825][   T84] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1048.347669][ T5416] netlink: 16 bytes leftover after parsing attributes in process `syz.4.10846'.
[ 1048.347713][ T5416] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10846'.
[ 1048.471446][ T5418] IPv6: NLM_F_CREATE should be specified when creating new route
[ 1048.860586][ T5426] C: renamed from lo (while UP)
[ 1048.942630][ T5426] netlink: 24 bytes leftover after parsing attributes in process `syz.2.10849'.
[ 1049.116736][ T5431] netlink: 32 bytes leftover after parsing attributes in process `syz.5.10712'.
[ 1050.156139][ T5458] bond1: entered allmulticast mode
[ 1050.156640][ T5458] 8021q: adding VLAN 0 to HW filter on device bond1
[ 1050.269493][ T5461] 8021q: adding VLAN 0 to HW filter on device macvlan2
[ 1050.296881][ T5462] __nla_validate_parse: 1 callbacks suppressed
[ 1050.296917][ T5462] netlink: 14 bytes leftover after parsing attributes in process `syz.5.10854'.
[ 1050.331963][ T5461] macvlan2: entered allmulticast mode
[ 1050.331989][ T5461] bond0: entered allmulticast mode
[ 1050.332006][ T5461] bond_slave_0: entered allmulticast mode
[ 1050.332026][ T5461] bond_slave_1: entered allmulticast mode
[ 1050.332105][ T5461] bond_slave_0: entered promiscuous mode
[ 1050.332147][ T5461] bond_slave_1: entered promiscuous mode
[ 1050.332881][ T5461] bond1: (slave macvlan2): Enslaving as an active interface with an up link
[ 1050.552160][ T5466] netlink: 16 bytes leftover after parsing attributes in process `syz.2.10859'.
[ 1050.552211][ T5466] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10859'.
[ 1050.659395][ T5458] ip6gretap1: entered allmulticast mode
[ 1050.705608][ T5458] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link
[ 1050.730656][ T5462] bond_slave_0: left promiscuous mode
[ 1050.730692][ T5462] bond_slave_1: left promiscuous mode
[ 1050.784271][ T5462] bond0 (unregistering): left allmulticast mode
[ 1050.784300][ T5462] bond_slave_0: left allmulticast mode
[ 1050.784319][ T5462] bond_slave_1: left allmulticast mode
[ 1050.864727][ T5462] bond1: (slave macvlan2): Removing an active aggregator
[ 1050.886919][ T5462] bond1: (slave macvlan2): Releasing backup interface
[ 1050.886960][ T5462] bond1: (slave macvlan2): the permanent HWaddr of slave - e2:89:d6:95:fe:fc - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts
[ 1050.927515][ T5462] macvlan2 (unregistering): left allmulticast mode
[ 1051.047029][ T5462] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1051.097542][ T5462] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1051.136699][ T5462] bond0 (unregistering): Released all slaves
[ 1052.041865][ T5495] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10867'.
[ 1052.043151][ T5495] netlink: 28 bytes leftover after parsing attributes in process `syz.4.10867'.
[ 1052.043185][ T5495] netlink: 28 bytes leftover after parsing attributes in process `syz.4.10867'.
[ 1052.049657][ T5497] netlink: 32 bytes leftover after parsing attributes in process `syz.1.10868'.
[ 1052.394703][ T5501] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10869'.
[ 1052.541512][ T8619] net_ratelimit: 199 callbacks suppressed
[ 1052.541536][ T8619] bond13: (slave ip6gretap2): failed to get link speed/duplex
[ 1052.541560][ T8619] bond13: (slave macvlan8): failed to get link speed/duplex
[ 1052.541596][ T8619] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1052.541617][ T8619] bond7: (slave ip6gretap1): failed to get link speed/duplex
[ 1052.654452][ T8619] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1052.654491][ T8619] bond7: (slave ip6gretap1): failed to get link speed/duplex
[ 1052.654532][ T8619] bond13: (slave ip6gretap2): failed to get link speed/duplex
[ 1052.654556][ T8619] bond13: (slave macvlan8): failed to get link speed/duplex
[ 1052.761595][   T57] bond13: (slave ip6gretap2): failed to get link speed/duplex
[ 1052.761629][   T57] bond13: (slave macvlan8): failed to get link speed/duplex
[ 1052.903873][ T5513] netlink: 16 bytes leftover after parsing attributes in process `syz.1.10874'.
[ 1052.903931][ T5513] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10874'.
[ 1053.617997][ T5521] bond2: option mode: unable to set because the bond device has slaves
[ 1053.791896][ T5521] bond2: (slave macvlan5): Error -98 calling set_mac_address
[ 1054.429100][ T5533] bond28: Removing last ns target with arp_interval on
[ 1054.787295][ T5552] veth1_macvtap: left promiscuous mode
[ 1055.402268][ T5564] syzkaller0: entered promiscuous mode
[ 1055.402295][ T5564] syzkaller0: entered allmulticast mode
[ 1055.606799][ T5576] __nla_validate_parse: 4 callbacks suppressed
[ 1055.606825][ T5576] netlink: 16 bytes leftover after parsing attributes in process `syz.5.10890'.
[ 1055.606866][ T5576] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10890'.
[ 1056.187015][ T5586] netlink: 60 bytes leftover after parsing attributes in process `syz.2.10895'.
[ 1056.238332][ T5587] bond1: option mode: unable to set because the bond device has slaves
[ 1056.284318][ T5586] netlink: 24 bytes leftover after parsing attributes in process `syz.2.10895'.
[ 1056.494899][ T5589] netlink: 14 bytes leftover after parsing attributes in process `syz.5.10896'.
[ 1056.585500][ T5591] netlink: 'syz.3.10897': attribute type 21 has an invalid length.
[ 1056.585644][ T5591] netlink: 156 bytes leftover after parsing attributes in process `syz.3.10897'.
[ 1057.294486][ T5624] netlink: 16 bytes leftover after parsing attributes in process `syz.1.10906'.
[ 1057.294551][ T5624] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10906'.
[ 1057.573632][T15564] net_ratelimit: 193 callbacks suppressed
[ 1057.573656][T15564] bond13: (slave ip6gretap2): failed to get link speed/duplex
[ 1057.573680][T15564] bond13: (slave macvlan8): failed to get link speed/duplex
[ 1057.573712][T15564] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1057.573733][T15564] bond7: (slave ip6gretap1): failed to get link speed/duplex
[ 1057.681643][   T57] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1057.700506][   T84] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1057.720461][T15564] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1057.750884][   T84] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1057.771876][ T5638] syzkaller0: entered promiscuous mode
[ 1057.771900][ T5638] syzkaller0: entered allmulticast mode
[ 1057.776156][ T5638] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10909'.
[ 1057.776183][ T5638] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10909'.
[ 1057.779327][ T5638] 0: reclassify loop, rule prio 0, protocol 800
[ 1057.822817][T21251] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1058.454230][ T5650] rxe_eth0 speed is unknown, defaulting to 1000
[ 1058.697943][ T5661] FAULT_INJECTION: forcing a failure.
[ 1058.697943][ T5661] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1058.697981][ T5661] CPU: 1 UID: 0 PID: 5661 Comm: syz.2.10917 Not tainted syzkaller #0 PREEMPT(full) 
[ 1058.698008][ T5661] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[ 1058.698024][ T5661] Call Trace:
[ 1058.698034][ T5661]  <TASK>
[ 1058.698045][ T5661]  dump_stack_lvl+0xe8/0x150
[ 1058.698091][ T5661]  should_fail_ex+0x410/0x560
[ 1058.698131][ T5661]  _copy_from_iter+0x1d3/0x1660
[ 1058.698167][ T5661]  ? __alloc_skb+0x27a/0x7a0
[ 1058.698207][ T5661]  ? __alloc_skb+0x27a/0x7a0
[ 1058.698246][ T5661]  ? __alloc_skb+0x27a/0x7a0
[ 1058.698281][ T5661]  ? __pfx__copy_from_iter+0x10/0x10
[ 1058.698313][ T5661]  ? kmem_cache_alloc_node_noprof+0x1f9/0x610
[ 1058.698340][ T5661]  ? __alloc_skb+0x27a/0x7a0
[ 1058.698373][ T5661]  ? __alloc_skb+0x27a/0x7a0
[ 1058.698417][ T5661]  ? netlink_sendmsg+0x650/0xb40
[ 1058.698447][ T5661]  ? skb_put+0x112/0x210
[ 1058.698474][ T5661]  netlink_sendmsg+0x6c0/0xb40
[ 1058.698516][ T5661]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1058.698557][ T5661]  ? apparmor_socket_sendmsg+0x18b/0x360
[ 1058.698593][ T5661]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1058.698622][ T5661]  sock_sendmsg_nosec+0x13a/0x180
[ 1058.698665][ T5661]  ____sys_sendmsg+0x54e/0x850
[ 1058.698699][ T5661]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1058.698736][ T5661]  ? import_iovec+0x73/0xa0
[ 1058.698777][ T5661]  ___sys_sendmsg+0x2a5/0x360
[ 1058.698801][ T5661]  ? __lock_acquire+0x747/0x2de0
[ 1058.698834][ T5661]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1058.698902][ T5661]  ? __fget_files+0x2a/0x420
[ 1058.698923][ T5661]  ? __fget_files+0x3a2/0x420
[ 1058.698958][ T5661]  __x64_sys_sendmsg+0x1b1/0x290
[ 1058.698988][ T5661]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 1058.699041][ T5661]  do_syscall_64+0x166/0x520
[ 1058.699068][ T5661]  ? trace_irq_disable+0x3b/0x140
[ 1058.699095][ T5661]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1058.699119][ T5661]  ? clear_bhb_loop+0x70/0xc0
[ 1058.699149][ T5661]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1058.699174][ T5661] RIP: 0033:0x7f9bee39e559
[ 1058.699196][ T5661] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1058.699216][ T5661] RSP: 002b:00007f9bef332028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1058.699242][ T5661] RAX: ffffffffffffffda RBX: 00007f9bee625fa0 RCX: 00007f9bee39e559
[ 1058.699261][ T5661] RDX: 0000000020008000 RSI: 0000200000000640 RDI: 0000000000000003
[ 1058.699277][ T5661] RBP: 00007f9bef332090 R08: 0000000000000000 R09: 0000000000000000
[ 1058.699292][ T5661] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1058.699307][ T5661] R13: 00007f9bee626038 R14: 00007f9bee625fa0 R15: 00007ffd3c090788
[ 1058.699347][ T5661]  </TASK>
[ 1059.909708][ T5676] xt_ipcomp: unknown flags 1D
[ 1060.866700][ T5700] __nla_validate_parse: 6 callbacks suppressed
[ 1060.866724][ T5700] netlink: 80 bytes leftover after parsing attributes in process `syz.3.10929'.
[ 1060.945044][ T5713] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10930'.
[ 1061.638394][ T5735] x_tables: ip_tables: osf match: only valid for protocol 6
[ 1062.196630][ T5650] syzkaller0 speed is unknown, defaulting to 1000
[ 1062.224589][ T5650] wg0 speed is unknown, defaulting to 1000
[ 1062.265049][ T5756] syzkaller0: entered promiscuous mode
[ 1062.265075][ T5756] syzkaller0: entered allmulticast mode
[ 1062.394208][ T5762] netlink: 28 bytes leftover after parsing attributes in process `syz.4.10940'.
[ 1062.394243][ T5762] IPVS: Unknown mcast interface: vcan0
[ 1062.588126][   T84] net_ratelimit: 179 callbacks suppressed
[ 1062.588154][   T84] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1062.605920][T15563] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1062.623337][   T84] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1062.644555][   T57] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1062.660767][T15563] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1062.682828][   T57] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1062.703353][   T84] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1062.723256][   T57] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1062.775621][   T84] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1062.793457][   T57] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1062.874431][ T5767] netlink: 'syz.3.10942': attribute type 1 has an invalid length.
[ 1063.139799][ T5767] 8021q: adding VLAN 0 to HW filter on device bond23
[ 1063.589302][ T5777] syzkaller0: entered promiscuous mode
[ 1063.589330][ T5777] syzkaller0: entered allmulticast mode
[ 1063.624846][ T5781] Bluetooth: hci0: unsupported parameter 5134
[ 1063.624889][ T5781] Bluetooth: hci0: unsupported parameter 8192
[ 1063.624905][ T5781] Bluetooth: hci0: unsupported parameter 5134
[ 1063.624919][ T5781] Bluetooth: hci0: unsupported parameter 8192
[ 1063.845071][ T5650] lo speed is unknown, defaulting to 1000
[ 1063.869657][ T5785] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10948'.
[ 1064.622456][ T5807] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10952'.
[ 1065.926902][ T5833] netlink: 'syz.4.10957': attribute type 1 has an invalid length.
[ 1066.352630][ T5833] 8021q: adding VLAN 0 to HW filter on device bond29
[ 1066.497233][ T5837] bond27: (slave veth0_to_bond): Releasing backup interface
[ 1066.684171][ T5837] bond29: (slave veth0_to_bond): Enslaving as an active interface with an up link
[ 1067.331480][ T5847] veth0: entered promiscuous mode
[ 1067.608352][ T5859] veth0: left promiscuous mode
[ 1067.642673][   T84] net_ratelimit: 220 callbacks suppressed
[ 1067.642697][   T84] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1067.642723][   T84] bond7: (slave ip6gretap1): failed to get link speed/duplex
[ 1067.642777][   T84] bond13: (slave ip6gretap2): failed to get link speed/duplex
[ 1067.642800][   T84] bond13: (slave macvlan8): failed to get link speed/duplex
[ 1067.768622][ T8615] bond13: (slave ip6gretap2): failed to get link speed/duplex
[ 1067.768655][ T8615] bond13: (slave macvlan8): failed to get link speed/duplex
[ 1067.768689][ T8615] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1067.768712][ T8615] bond7: (slave ip6gretap1): failed to get link speed/duplex
[ 1067.876138][   T84] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1067.876172][   T84] bond7: (slave ip6gretap1): failed to get link speed/duplex
[ 1068.307735][ T5877] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10962'.
[ 1068.601986][ T5886] bond1: option mode: unable to set because the bond device has slaves
[ 1068.895415][ T5887] netlink: 14 bytes leftover after parsing attributes in process `syz.5.10963'.
[ 1069.495790][ T5894] syzkaller0: entered promiscuous mode
[ 1069.495818][ T5894] syzkaller0: entered allmulticast mode
[ 1069.738846][ T5897] bond2: option mode: unable to set because the bond device has slaves
[ 1069.857310][ T5897] bond2: (slave macvlan5): Error -98 calling set_mac_address
[ 1069.925616][ T5900] netlink: 52 bytes leftover after parsing attributes in process `syz.2.10965'.
[ 1069.978506][ T5904] netlink: 14 bytes leftover after parsing attributes in process `syz.2.10965'.
[ 1070.003992][ T5903] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10966'.
[ 1070.317688][ T5902] netlink: 'syz.4.10967': attribute type 4 has an invalid length.
[ 1070.740788][ T5906] netlink: 220 bytes leftover after parsing attributes in process `syz.5.10966'.
[ 1070.740817][ T5906] tc_dump_action: action bad kind
[ 1070.947278][ T5908] rxe_eth0 speed is unknown, defaulting to 1000
[ 1071.503857][ T5920] netlink: 'syz.4.10970': attribute type 1 has an invalid length.
[ 1071.911945][ T5920] 8021q: adding VLAN 0 to HW filter on device bond30
[ 1072.033059][ T5925] bond29: (slave veth0_to_bond): Releasing backup interface
[ 1072.069757][ T5935] netlink: 232 bytes leftover after parsing attributes in process `syz.3.10972'.
[ 1072.194027][ T5925] bond30: (slave veth0_to_bond): Enslaving as an active interface with an up link
[ 1072.248887][ T5941] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10972'.
[ 1072.303768][ T5942] pim6reg: left allmulticast mode
[ 1072.303884][ T5942] syz_tun: left allmulticast mode
[ 1072.736134][ T8614] net_ratelimit: 188 callbacks suppressed
[ 1072.736162][ T8614] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1072.736190][ T8614] bond7: (slave ip6gretap1): failed to get link speed/duplex
[ 1072.736226][ T8614] bond13: (slave ip6gretap2): failed to get link speed/duplex
[ 1072.736248][ T8614] bond13: (slave macvlan8): failed to get link speed/duplex
[ 1072.840669][   T13] bond13: (slave ip6gretap2): failed to get link speed/duplex
[ 1072.840700][   T13] bond13: (slave macvlan8): failed to get link speed/duplex
[ 1072.840734][   T13] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1072.840756][   T13] bond7: (slave ip6gretap1): failed to get link speed/duplex
[ 1072.963464][ T8614] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1072.963500][ T8614] bond7: (slave ip6gretap1): failed to get link speed/duplex
[ 1073.161717][ T5957] netlink: 196 bytes leftover after parsing attributes in process `syz.2.10978'.
[ 1073.162505][ T5957] netlink: 196 bytes leftover after parsing attributes in process `syz.2.10978'.
[ 1074.325726][ T5908] syzkaller0 speed is unknown, defaulting to 1000
[ 1074.327623][ T5908] wg0 speed is unknown, defaulting to 1000
[ 1074.477592][ T5979] bond13: option mode: unable to set because the bond device has slaves
[ 1074.593837][ T5979] bond13: (slave macvlan9): Error -98 calling set_mac_address
[ 1074.599374][ T5980] __nla_validate_parse: 1 callbacks suppressed
[ 1074.599397][ T5980] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10983'.
[ 1074.599414][ T5980] netlink: 24 bytes leftover after parsing attributes in process `syz.3.10983'.
[ 1074.668578][ T5983] netlink: 14 bytes leftover after parsing attributes in process `syz.3.10983'.
[ 1074.870463][    C1] ip6_tunnel: ip6gre3 xmit: Local address not yet configured!
[ 1075.017625][ T5988] vlan0: left promiscuous mode
[ 1075.017651][ T5988] bond0: left promiscuous mode
[ 1075.036749][ T5988] ip6gretap1: left promiscuous mode
[ 1075.057623][ T5988] gretap8: left promiscuous mode
[ 1075.629569][ T6000] netlink: 'syz.1.10989': attribute type 4 has an invalid length.
[ 1075.791831][ T6003] netlink: 28 bytes leftover after parsing attributes in process `syz.4.10990'.
[ 1075.791866][ T6003] IPVS: Unknown mcast interface: vcan0
[ 1075.948231][ T5908] lo speed is unknown, defaulting to 1000
[ 1075.965650][ T6007] IPVS: set_ctl: invalid protocol: 51 224.0.0.2:20002
[ 1076.069347][ T6010] Bluetooth: hci0: unsupported parameter 5161
[ 1076.069372][ T6010] Bluetooth: hci0: unsupported parameter 8192
[ 1076.069386][ T6010] Bluetooth: hci0: unsupported parameter 5161
[ 1076.069401][ T6010] Bluetooth: hci0: unsupported parameter 8192
[ 1076.569081][ T6017] siw: device registration error -23
[ 1076.625569][ T6015] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10995'.
[ 1077.088794][ T6028] tipc: Enabled bearer <eth:xfrm0>, priority 11
[ 1077.146443][ T6033] tipc: Enabling of bearer <eth:xfrm0> rejected, already enabled
[ 1077.558393][ T6044] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11001'.
[ 1077.558420][ T6044] netlink: 2 bytes leftover after parsing attributes in process `syz.3.11001'.
[ 1077.632321][ T6048] netlink: 28 bytes leftover after parsing attributes in process `syz.1.11003'.
[ 1077.741576][ T8619] net_ratelimit: 264 callbacks suppressed
[ 1077.741614][ T8619] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1077.763948][ T8614] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1077.780859][ T8615] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1077.803023][ T8619] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1077.821531][ T8615] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1077.841529][ T8619] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1077.867725][ T8615] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1077.880538][ T8614] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1077.906427][ T8615] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1077.921688][T15564] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1078.173865][ T6049] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0
[ 1078.457799][ T6053] x_tables: duplicate underflow at hook 1
[ 1078.648936][ T6057] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 1079.233059][ T6067] FAULT_INJECTION: forcing a failure.
[ 1079.233059][ T6067] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1079.233097][ T6067] CPU: 1 UID: 0 PID: 6067 Comm: syz.4.11009 Not tainted syzkaller #0 PREEMPT(full) 
[ 1079.233124][ T6067] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[ 1079.233139][ T6067] Call Trace:
[ 1079.233154][ T6067]  <TASK>
[ 1079.233166][ T6067]  dump_stack_lvl+0xe8/0x150
[ 1079.233211][ T6067]  should_fail_ex+0x410/0x560
[ 1079.233252][ T6067]  _copy_from_user+0x2d/0xb0
[ 1079.233291][ T6067]  ___sys_recvmsg+0x173/0x5a0
[ 1079.233327][ T6067]  ? __pfx____sys_recvmsg+0x10/0x10
[ 1079.233362][ T6067]  ? lock_acquire+0x115/0x350
[ 1079.233409][ T6067]  ? __fget_files+0x3a2/0x420
[ 1079.233445][ T6067]  __x64_sys_recvmsg+0x1ae/0x290
[ 1079.233485][ T6067]  ? __pfx___x64_sys_recvmsg+0x10/0x10
[ 1079.233539][ T6067]  do_syscall_64+0x166/0x520
[ 1079.233568][ T6067]  ? trace_irq_disable+0x3b/0x140
[ 1079.233595][ T6067]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1079.233620][ T6067]  ? clear_bhb_loop+0x70/0xc0
[ 1079.233650][ T6067]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1079.233674][ T6067] RIP: 0033:0x7f08ceb9e559
[ 1079.233696][ T6067] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1079.233717][ T6067] RSP: 002b:00007f08cf9bf028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f
[ 1079.233743][ T6067] RAX: ffffffffffffffda RBX: 00007f08cee26090 RCX: 00007f08ceb9e559
[ 1079.233762][ T6067] RDX: 0000000000000000 RSI: 0000200000000480 RDI: 0000000000000003
[ 1079.233777][ T6067] RBP: 00007f08cf9bf090 R08: 0000000000000000 R09: 0000000000000000
[ 1079.233793][ T6067] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1079.233808][ T6067] R13: 00007f08cee26128 R14: 00007f08cee26090 R15: 00007fff230e87a8
[ 1079.233847][ T6067]  </TASK>
[ 1079.237266][ T6064] netlink: 28 bytes leftover after parsing attributes in process `syz.4.11009'.
[ 1079.598180][ T6061] syzkaller0: entered promiscuous mode
[ 1079.598206][ T6061] syzkaller0: entered allmulticast mode
[ 1080.257267][ T6075] netlink: 52 bytes leftover after parsing attributes in process `syz.4.11011'.
[ 1080.373509][ T6078] Bluetooth: hci0: unsupported parameter 5135
[ 1080.373534][ T6078] Bluetooth: hci0: unsupported parameter 8192
[ 1080.373548][ T6078] Bluetooth: hci0: unsupported parameter 5135
[ 1080.373563][ T6078] Bluetooth: hci0: unsupported parameter 8192
[ 1081.526111][ T6100] netlink: 36 bytes leftover after parsing attributes in process `syz.1.11014'.
[ 1081.574535][ T6100] sctp: [Deprecated]: syz.1.11014 (pid 6100) Use of int in maxseg socket option.
[ 1081.574535][ T6100] Use struct sctp_assoc_value instead
[ 1082.097944][ T6109] netlink: 28 bytes leftover after parsing attributes in process `syz.1.11017'.
[ 1082.234440][ T6113] Bluetooth: hci0: unsupported parameter 5135
[ 1082.234475][ T6113] Bluetooth: hci0: unsupported parameter 8192
[ 1082.234491][ T6113] Bluetooth: hci0: unsupported parameter 5135
[ 1082.234507][ T6113] Bluetooth: hci0: unsupported parameter 8192
[ 1082.527349][ T6116] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11018'.
[ 1082.601570][ T6118] netlink: 28 bytes leftover after parsing attributes in process `syz.1.11019'.
[ 1082.775908][ T6124] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11020'.
[ 1082.791417][T21251] net_ratelimit: 183 callbacks suppressed
[ 1082.791441][T21251] bond13: (slave ip6gretap2): failed to get link speed/duplex
[ 1082.791465][T21251] bond13: (slave macvlan8): failed to get link speed/duplex
[ 1082.791502][T21251] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1082.791524][T21251] bond7: (slave ip6gretap1): failed to get link speed/duplex
[ 1082.892939][ T6124] netlink: 16 bytes leftover after parsing attributes in process `syz.2.11020'.
[ 1082.892986][ T6124] netlink: 16 bytes leftover after parsing attributes in process `syz.2.11020'.
[ 1082.912577][ T8619] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1082.912610][ T8619] bond7: (slave ip6gretap1): failed to get link speed/duplex
[ 1082.912675][ T8619] bond13: (slave ip6gretap2): failed to get link speed/duplex
[ 1082.912698][ T8619] bond13: (slave macvlan8): failed to get link speed/duplex
[ 1083.023612][T15563] bond13: (slave ip6gretap2): failed to get link speed/duplex
[ 1083.023646][T15563] bond13: (slave macvlan8): failed to get link speed/duplex
[ 1084.041772][ T6148] netlink: 52 bytes leftover after parsing attributes in process `syz.2.11027'.
[ 1084.041802][ T6148] netlink: 52 bytes leftover after parsing attributes in process `syz.2.11027'.
[ 1084.128204][ T6151] syzkaller1: entered promiscuous mode
[ 1084.128230][ T6151] syzkaller1: entered allmulticast mode
[ 1085.247817][ T6176] tc_dump_action: action bad kind
[ 1085.868809][ T6186] bond2: option mode: unable to set because the bond device has slaves
[ 1085.937178][ T6186] bond2: (slave macvlan5): Error -98 calling set_mac_address
[ 1085.938405][ T6190] FAULT_INJECTION: forcing a failure.
[ 1085.938405][ T6190] name failslab, interval 1, probability 0, space 0, times 0
[ 1085.938438][ T6190] CPU: 1 UID: 0 PID: 6190 Comm: syz.4.11045 Not tainted syzkaller #0 PREEMPT(full) 
[ 1085.938464][ T6190] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[ 1085.938479][ T6190] Call Trace:
[ 1085.938489][ T6190]  <TASK>
[ 1085.938500][ T6190]  dump_stack_lvl+0xe8/0x150
[ 1085.938542][ T6190]  should_fail_ex+0x410/0x560
[ 1085.938582][ T6190]  ? __alloc_skb+0x1db/0x7a0
[ 1085.938618][ T6190]  should_failslab+0xa8/0x100
[ 1085.938654][ T6190]  ? __alloc_skb+0x1db/0x7a0
[ 1085.938688][ T6190]  kmem_cache_alloc_node_noprof+0xa1/0x610
[ 1085.938716][ T6190]  ? __alloc_skb+0x18d/0x7a0
[ 1085.938752][ T6190]  ? __alloc_skb+0x1db/0x7a0
[ 1085.938795][ T6190]  __alloc_skb+0x1db/0x7a0
[ 1085.938837][ T6190]  netlink_sendmsg+0x5d4/0xb40
[ 1085.938880][ T6190]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1085.938921][ T6190]  ? apparmor_socket_sendmsg+0x98/0x360
[ 1085.938965][ T6190]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1085.938995][ T6190]  sock_sendmsg_nosec+0x13a/0x180
[ 1085.939031][ T6190]  __sys_sendto+0x408/0x5a0
[ 1085.939056][ T6190]  ? ksys_write+0x1e6/0x270
[ 1085.939088][ T6190]  ? __pfx___sys_sendto+0x10/0x10
[ 1085.939124][ T6190]  ? __mutex_unlock_slowpath+0x731/0x900
[ 1085.939190][ T6190]  ? __pfx_ksys_write+0x10/0x10
[ 1085.939223][ T6190]  __x64_sys_sendto+0xde/0x100
[ 1085.939251][ T6190]  do_syscall_64+0x166/0x520
[ 1085.939280][ T6190]  ? trace_irq_disable+0x3b/0x140
[ 1085.939307][ T6190]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1085.939333][ T6190]  ? clear_bhb_loop+0x70/0xc0
[ 1085.939364][ T6190]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1085.939391][ T6190] RIP: 0033:0x7f08ceb5ed8e
[ 1085.939414][ T6190] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 1085.939435][ T6190] RSP: 002b:00007f08cf9dee88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[ 1085.939461][ T6190] RAX: ffffffffffffffda RBX: 00007f08cf9e06c0 RCX: 00007f08ceb5ed8e
[ 1085.939480][ T6190] RDX: 0000000000000024 RSI: 00007f08cf9df000 RDI: 0000000000000004
[ 1085.939496][ T6190] RBP: 0000000000000000 R08: 00007f08cf9def04 R09: 000000000000000c
[ 1085.939512][ T6190] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004
[ 1085.939527][ T6190] R13: 00007f08cf9def58 R14: 00007f08cf9df000 R15: 0000000000000000
[ 1085.939565][ T6190]  </TASK>
[ 1086.369240][ T6193] __nla_validate_parse: 3 callbacks suppressed
[ 1086.369265][ T6193] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11043'.
[ 1086.419424][ T6195] netlink: 14 bytes leftover after parsing attributes in process `syz.2.11043'.
[ 1086.772191][ T6202] netlink: 12 bytes leftover after parsing attributes in process `syz.5.11048'.
[ 1086.889699][ T6207] netlink: 28 bytes leftover after parsing attributes in process `syz.1.11049'.
[ 1087.106416][ T6216] netlink: 28 bytes leftover after parsing attributes in process `syz.2.11052'.
[ 1087.106449][ T6216] IPVS: Unknown mcast interface: vcan0
[ 1087.832003][T20529] net_ratelimit: 172 callbacks suppressed
[ 1087.832028][T20529] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1087.832054][T20529] bond7: (slave ip6gretap1): failed to get link speed/duplex
[ 1087.832092][T20529] bond13: (slave ip6gretap2): failed to get link speed/duplex
[ 1087.832114][T20529] bond13: (slave macvlan8): failed to get link speed/duplex
[ 1087.942714][T21251] bond13: (slave ip6gretap2): failed to get link speed/duplex
[ 1087.942747][T21251] bond13: (slave macvlan8): failed to get link speed/duplex
[ 1087.942778][T21251] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1087.942800][T21251] bond7: (slave ip6gretap1): failed to get link speed/duplex
[ 1088.052460][   T13] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1088.052496][   T13] bond7: (slave ip6gretap1): failed to get link speed/duplex
[ 1088.137801][ T6241] netlink: 24 bytes leftover after parsing attributes in process `syz.3.11058'.
[ 1088.160142][ T6243] netlink: 'syz.2.11059': attribute type 1 has an invalid length.
[ 1088.533608][ T6250] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11060'.
[ 1088.536637][ T6243] 8021q: adding VLAN 0 to HW filter on device bond24
[ 1088.623035][ T6252] netlink: 14 bytes leftover after parsing attributes in process `syz.4.11060'.
[ 1088.684069][ T6246] bond24: (slave veth0_to_bond): Enslaving as an active interface with an up link
[ 1088.703910][ T6247] bond0: option mode: unable to set because the bond device has slaves
[ 1088.797791][ T6249] bond0: (slave macvlan6): Error -98 calling set_mac_address
[ 1089.528334][ T6262] netlink: 28 bytes leftover after parsing attributes in process `syz.4.11064'.
[ 1090.042443][ T6271] netlink: 28 bytes leftover after parsing attributes in process `syz.3.11066'.
[ 1090.337358][ T6272] bond0: option mode: unable to set because the bond device has slaves
[ 1091.119020][ T6276] bond0: (slave macvlan6): Error -98 calling set_mac_address
[ 1092.845360][   T57] net_ratelimit: 220 callbacks suppressed
[ 1092.845386][   T57] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1092.866549][   T84] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1092.880607][   T84] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1092.901517][   T84] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1092.920900][   T84] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1092.940470][T20529] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1092.977021][T20529] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1093.003443][ T8619] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1093.029136][T21251] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1093.051783][   T57] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1097.542977][ T6294] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR
[ 1097.682039][ T6298] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR
[ 1097.924516][   T13] net_ratelimit: 203 callbacks suppressed
[ 1097.924544][   T13] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1097.924570][   T13] bond7: (slave ip6gretap1): failed to get link speed/duplex
[ 1097.924616][   T13] bond13: (slave ip6gretap2): failed to get link speed/duplex
[ 1097.924637][   T13] bond13: (slave macvlan8): failed to get link speed/duplex
[ 1098.033104][T15563] bond13: (slave ip6gretap2): failed to get link speed/duplex
[ 1098.033137][T15563] bond13: (slave macvlan8): failed to get link speed/duplex
[ 1098.033171][T15563] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1098.033193][T15563] bond7: (slave ip6gretap1): failed to get link speed/duplex
[ 1098.075019][ T6308] openvswitch: netlink: IP tunnel TTL not specified.
[ 1098.075055][ T6308] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1098.260788][ T6310] syzkaller0: entered promiscuous mode
[ 1098.260813][ T6310] syzkaller0: entered allmulticast mode
[ 1098.688609][ T6321] __nla_validate_parse: 1 callbacks suppressed
[ 1098.688634][ T6321] netlink: 24 bytes leftover after parsing attributes in process `syz.5.11078'.
[ 1098.782728][ T6325] netlink: 28 bytes leftover after parsing attributes in process `syz.2.11079'.
[ 1098.852452][ T6325] IPVS: Unknown mcast interface: vcan0
[ 1099.099192][ T6332] netlink: 'syz.5.11080': attribute type 1 has an invalid length.
[ 1099.280608][ T6334] bond2: option mode: unable to set because the bond device has slaves
[ 1099.358415][ T6334] bond2: (slave macvlan5): Error -98 calling set_mac_address
[ 1099.679529][ T6339] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11083'.
[ 1099.701041][ T6339] syzkaller1: entered promiscuous mode
[ 1099.701070][ T6339] syzkaller1: entered allmulticast mode
[ 1099.847470][ T6339] netlink: 28 bytes leftover after parsing attributes in process `syz.3.11083'.
[ 1100.539496][ T6366] netlink: 40 bytes leftover after parsing attributes in process `syz.4.11090'.
[ 1100.578360][ T6366] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11090'.
[ 1100.656835][ T6369] netlink: 28 bytes leftover after parsing attributes in process `syz.1.11091'.
[ 1100.699693][ T6366] netlink: 60 bytes leftover after parsing attributes in process `syz.4.11090'.
[ 1101.513422][ T6383] netlink: 24 bytes leftover after parsing attributes in process `syz.2.11096'.
[ 1101.798077][ T6393] netlink: 20 bytes leftover after parsing attributes in process `syz.3.11098'.
[ 1101.826056][ T6394] bond1: option mode: unable to set because the bond device has slaves
[ 1101.908634][ T6400] sctp: [Deprecated]: syz.2.11100 (pid 6400) Use of int in maxseg socket option.
[ 1101.908634][ T6400] Use struct sctp_assoc_value instead
[ 1102.053866][ T6400] team0 (unregistering): Port device xfrm0 removed
[ 1102.734624][ T6411] syzkaller0: entered promiscuous mode
[ 1102.734661][ T6411] syzkaller0: entered allmulticast mode
[ 1103.038006][  T987] net_ratelimit: 190 callbacks suppressed
[ 1103.038032][  T987] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1103.038058][  T987] bond7: (slave ip6gretap1): failed to get link speed/duplex
[ 1103.038095][  T987] bond13: (slave ip6gretap2): failed to get link speed/duplex
[ 1103.038117][  T987] bond13: (slave macvlan8): failed to get link speed/duplex
[ 1103.144618][T20529] bond13: (slave ip6gretap2): failed to get link speed/duplex
[ 1103.144651][T20529] bond13: (slave macvlan8): failed to get link speed/duplex
[ 1103.144715][T20529] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1103.144738][T20529] bond7: (slave ip6gretap1): failed to get link speed/duplex
[ 1103.186096][ T6423] FAULT_INJECTION: forcing a failure.
[ 1103.186096][ T6423] name failslab, interval 1, probability 0, space 0, times 0
[ 1103.186132][ T6423] CPU: 1 UID: 0 PID: 6423 Comm: syz.1.11107 Not tainted syzkaller #0 PREEMPT(full) 
[ 1103.186158][ T6423] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[ 1103.186173][ T6423] Call Trace:
[ 1103.186182][ T6423]  <TASK>
[ 1103.186193][ T6423]  dump_stack_lvl+0xe8/0x150
[ 1103.186237][ T6423]  should_fail_ex+0x410/0x560
[ 1103.186277][ T6423]  ? __alloc_skb+0x1db/0x7a0
[ 1103.186318][ T6423]  should_failslab+0xa8/0x100
[ 1103.186354][ T6423]  ? __alloc_skb+0x1db/0x7a0
[ 1103.186387][ T6423]  kmem_cache_alloc_node_noprof+0xa1/0x610
[ 1103.186414][ T6423]  ? __alloc_skb+0x18d/0x7a0
[ 1103.186450][ T6423]  ? __alloc_skb+0x1db/0x7a0
[ 1103.186493][ T6423]  __alloc_skb+0x1db/0x7a0
[ 1103.186534][ T6423]  xfrm_send_state_notify+0x782/0x18d0
[ 1103.186664][ T6423]  ? lock_acquire+0x115/0x350
[ 1103.186693][ T6423]  ? __pfx_xfrm_send_state_notify+0x10/0x10
[ 1103.186729][ T6423]  ? kmem_cache_free+0x182/0x650
[ 1103.186761][ T6423]  ? km_state_notify+0x25/0x1f0
[ 1103.186820][ T6423]  ? km_state_notify+0x25/0x1f0
[ 1103.186860][ T6423]  ? __pfx_xfrm_send_state_notify+0x10/0x10
[ 1103.186894][ T6423]  km_state_notify+0x110/0x1f0
[ 1103.186932][ T6423]  pfkey_flush+0x227/0x360
[ 1103.186994][ T6423]  ? __pfx_pfkey_flush+0x10/0x10
[ 1103.187041][ T6423]  pfkey_sendmsg+0xceb/0x11d0
[ 1103.187086][ T6423]  ? __pfx_pfkey_sendmsg+0x10/0x10
[ 1103.187143][ T6423]  ? aa_sock_msg_perm+0x144/0x210
[ 1103.187186][ T6423]  ? apparmor_socket_sendmsg+0x98/0x360
[ 1103.187221][ T6423]  ? __pfx_pfkey_sendmsg+0x10/0x10
[ 1103.187250][ T6423]  sock_sendmsg_nosec+0x13a/0x180
[ 1103.187285][ T6423]  ____sys_sendmsg+0x54e/0x850
[ 1103.187317][ T6423]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1103.187353][ T6423]  ? import_iovec+0x73/0xa0
[ 1103.187393][ T6423]  ___sys_sendmsg+0x2a5/0x360
[ 1103.187435][ T6423]  ? __lock_acquire+0x747/0x2de0
[ 1103.187467][ T6423]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1103.187539][ T6423]  ? __fget_files+0x2a/0x420
[ 1103.187562][ T6423]  ? __fget_files+0x3a2/0x420
[ 1103.187598][ T6423]  __x64_sys_sendmsg+0x1b1/0x290
[ 1103.187640][ T6423]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 1103.187693][ T6423]  do_syscall_64+0x166/0x520
[ 1103.187722][ T6423]  ? trace_irq_disable+0x3b/0x140
[ 1103.187749][ T6423]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1103.187774][ T6423]  ? clear_bhb_loop+0x70/0xc0
[ 1103.187802][ T6423]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1103.187826][ T6423] RIP: 0033:0x7fe6c459e559
[ 1103.187865][ T6423] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1103.187886][ T6423] RSP: 002b:00007fe6c5397028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1103.187910][ T6423] RAX: ffffffffffffffda RBX: 00007fe6c4826090 RCX: 00007fe6c459e559
[ 1103.187928][ T6423] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000006
[ 1103.187943][ T6423] RBP: 00007fe6c5397090 R08: 0000000000000000 R09: 0000000000000000
[ 1103.187958][ T6423] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1103.187973][ T6423] R13: 00007fe6c4826128 R14: 00007fe6c4826090 R15: 00007ffc668be008
[ 1103.188012][ T6423]  </TASK>
[ 1103.388477][ T8619] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1103.443773][ T8614] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1104.192473][ T6437] __nla_validate_parse: 2 callbacks suppressed
[ 1104.192498][ T6437] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11112'.
[ 1104.192516][ T6437] netlink: 2 bytes leftover after parsing attributes in process `syz.1.11112'.
[ 1104.252445][ T6440] netlink: 20 bytes leftover after parsing attributes in process `syz.5.11111'.
[ 1104.628367][ T6447] netlink: 28 bytes leftover after parsing attributes in process `syz.1.11115'.
[ 1104.628408][ T6447] netlink: 28 bytes leftover after parsing attributes in process `syz.1.11115'.
[ 1104.995446][ T6453] netlink: 24 bytes leftover after parsing attributes in process `syz.2.11117'.
[ 1105.127422][ T6460] netlink: 28 bytes leftover after parsing attributes in process `syz.1.11121'.
[ 1105.590521][    C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!
[ 1105.845151][ T6477] FAULT_INJECTION: forcing a failure.
[ 1105.845151][ T6477] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1105.845190][ T6477] CPU: 1 UID: 0 PID: 6477 Comm: syz.1.11123 Not tainted syzkaller #0 PREEMPT(full) 
[ 1105.845218][ T6477] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[ 1105.845233][ T6477] Call Trace:
[ 1105.845243][ T6477]  <TASK>
[ 1105.845254][ T6477]  dump_stack_lvl+0xe8/0x150
[ 1105.845296][ T6477]  should_fail_ex+0x410/0x560
[ 1105.845339][ T6477]  _copy_from_user+0x2d/0xb0
[ 1105.845380][ T6477]  kstrtouint_from_user+0xd6/0x180
[ 1105.845417][ T6477]  ? __pfx_kstrtouint_from_user+0x10/0x10
[ 1105.845459][ T6477]  ? lock_acquire+0x115/0x350
[ 1105.845493][ T6477]  proc_fail_nth_write+0x8e/0x210
[ 1105.845533][ T6477]  ? __pfx_proc_fail_nth_write+0x10/0x10
[ 1105.845573][ T6477]  ? __pfx_proc_fail_nth_write+0x10/0x10
[ 1105.845601][ T6477]  vfs_write+0x296/0xba0
[ 1105.845639][ T6477]  ? __pfx_vfs_write+0x10/0x10
[ 1105.845667][ T6477]  ? __fget_files+0x2a/0x420
[ 1105.845695][ T6477]  ? __fget_files+0x3a2/0x420
[ 1105.845717][ T6477]  ? __fget_files+0x2a/0x420
[ 1105.845750][ T6477]  ksys_write+0x150/0x270
[ 1105.845781][ T6477]  ? __pfx_ksys_write+0x10/0x10
[ 1105.845821][ T6477]  do_syscall_64+0x166/0x520
[ 1105.845855][ T6477]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1105.845881][ T6477]  ? clear_bhb_loop+0x70/0xc0
[ 1105.845911][ T6477]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1105.845935][ T6477] RIP: 0033:0x7fe6c455ed8e
[ 1105.845959][ T6477] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 1105.845980][ T6477] RSP: 002b:00007fe6c53b7fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 1105.846006][ T6477] RAX: ffffffffffffffda RBX: 00007fe6c53b86c0 RCX: 00007fe6c455ed8e
[ 1105.846024][ T6477] RDX: 0000000000000001 RSI: 00007fe6c53b80a0 RDI: 0000000000000008
[ 1105.846039][ T6477] RBP: 00007fe6c53b8090 R08: 0000000000000000 R09: 0000000000000000
[ 1105.846055][ T6477] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1105.846070][ T6477] R13: 00007fe6c4826038 R14: 00007fe6c4825fa0 R15: 00007ffc668be008
[ 1105.846111][ T6477]  </TASK>
[ 1107.294825][ T6504] netlink: 8 bytes leftover after parsing attributes in process `syz.5.11130'.
[ 1108.027824][ T6522] syzkaller0: entered promiscuous mode
[ 1108.027850][ T6522] syzkaller0: entered allmulticast mode
[ 1108.061518][T20529] net_ratelimit: 165 callbacks suppressed
[ 1108.061544][T20529] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1108.089526][T15563] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1108.100743][   T13] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1108.122634][T20529] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1108.141225][T15563] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1108.164097][   T84] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1108.182612][ T8619] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1108.201334][ T8619] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1108.222157][ T8619] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1108.242550][   T84] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1108.669066][ T6536] bond13: option mode: unable to set because the bond device has slaves
[ 1108.819493][ T6536] bond13: (slave macvlan9): Error -98 calling set_mac_address
[ 1109.043772][ T6542] netlink: 14 bytes leftover after parsing attributes in process `syz.3.11139'.
[ 1109.620497][ T6555] netlink: 36 bytes leftover after parsing attributes in process `syz.3.11146'.
[ 1109.777949][ T6558] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11146'.
[ 1110.410559][ T6571] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11148'.
[ 1111.115462][ T6579] tc_dump_action: action bad kind
[ 1112.085393][ T6597] netlink: 'syz.2.11156': attribute type 1 has an invalid length.
[ 1112.085447][ T6597] netlink: 'syz.2.11156': attribute type 1 has an invalid length.
[ 1112.184557][ T6604] netlink: 'syz.2.11160': attribute type 7 has an invalid length.
[ 1112.245087][ T6602] netlink: 92 bytes leftover after parsing attributes in process `syz.3.11158'.
[ 1112.731798][ T6613] syzkaller1: entered promiscuous mode
[ 1112.733509][ T6613] syzkaller1: entered allmulticast mode
[ 1113.009085][ T6613] netlink: 'syz.3.11158': attribute type 32 has an invalid length.
[ 1113.009114][ T6613] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11158'.
[ 1113.080703][ T6086] net_ratelimit: 186 callbacks suppressed
[ 1113.080728][ T6086] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1113.104661][T15564] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1113.127338][ T6086] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1113.140462][  T996] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1113.162485][   T57] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1113.192243][T15564] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1113.218893][   T57] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1113.231919][   T57] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1113.251432][T15564] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1113.275227][T15563] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1113.497673][ T6626] netlink: 'syz.1.11161': attribute type 1 has an invalid length.
[ 1113.683751][ T6613] bond24: Setting coupled_control to off (0)
[ 1114.264589][ T6626] 8021q: adding VLAN 0 to HW filter on device bond28
[ 1114.281065][ T6637] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11164'.
[ 1114.304845][ T6627] bond28: (slave veth0_to_bond): Enslaving as an active interface with an up link
[ 1114.493109][ T6641] netlink: 24 bytes leftover after parsing attributes in process `syz.2.11165'.
[ 1114.514176][ T6645] netlink: 28 bytes leftover after parsing attributes in process `syz.1.11168'.
[ 1114.514218][ T6645] netlink: 28 bytes leftover after parsing attributes in process `syz.1.11168'.
[ 1115.180015][ T6658] netlink: 28 bytes leftover after parsing attributes in process `syz.2.11171'.
[ 1115.180045][ T6658] IPVS: Unknown mcast interface: vcan0
[ 1115.812899][ T6669] bond7: option mode: unable to set because the bond device has slaves
[ 1115.988189][ T6669] bond7: (slave macvlan3): Error -98 calling set_mac_address
[ 1116.091268][ T6675] netlink: 14 bytes leftover after parsing attributes in process `syz.1.11175'.
[ 1116.778697][ T6695] FAULT_INJECTION: forcing a failure.
[ 1116.778697][ T6695] name failslab, interval 1, probability 0, space 0, times 0
[ 1116.778744][ T6695] CPU: 1 UID: 0 PID: 6695 Comm: syz.4.11182 Not tainted syzkaller #0 PREEMPT(full) 
[ 1116.778770][ T6695] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[ 1116.778785][ T6695] Call Trace:
[ 1116.778795][ T6695]  <TASK>
[ 1116.778806][ T6695]  dump_stack_lvl+0xe8/0x150
[ 1116.778852][ T6695]  should_fail_ex+0x410/0x560
[ 1116.778891][ T6695]  ? __alloc_skb+0x1db/0x7a0
[ 1116.778928][ T6695]  should_failslab+0xa8/0x100
[ 1116.778963][ T6695]  ? __alloc_skb+0x1db/0x7a0
[ 1116.778997][ T6695]  kmem_cache_alloc_node_noprof+0xa1/0x610
[ 1116.779024][ T6695]  ? __alloc_skb+0x18d/0x7a0
[ 1116.779061][ T6695]  ? __alloc_skb+0x1db/0x7a0
[ 1116.779104][ T6695]  __alloc_skb+0x1db/0x7a0
[ 1116.779146][ T6695]  netlink_sendmsg+0x5d4/0xb40
[ 1116.779190][ T6695]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1116.779231][ T6695]  ? apparmor_socket_sendmsg+0x98/0x360
[ 1116.779267][ T6695]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1116.779296][ T6695]  sock_sendmsg_nosec+0x13a/0x180
[ 1116.779333][ T6695]  ____sys_sendmsg+0x54e/0x850
[ 1116.779366][ T6695]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1116.779403][ T6695]  ? import_iovec+0x73/0xa0
[ 1116.779443][ T6695]  ___sys_sendmsg+0x2a5/0x360
[ 1116.779468][ T6695]  ? __lock_acquire+0x747/0x2de0
[ 1116.779501][ T6695]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1116.779525][ T6695]  ? __lock_acquire+0x747/0x2de0
[ 1116.779558][ T6695]  ? kstrtouint+0x6e/0xe0
[ 1116.779642][ T6695]  __sys_sendmmsg+0x273/0x4d0
[ 1116.779675][ T6695]  ? __pfx___sys_sendmmsg+0x10/0x10
[ 1116.779719][ T6695]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[ 1116.779768][ T6695]  ? ksys_write+0x242/0x270
[ 1116.779797][ T6695]  ? __pfx_ksys_write+0x10/0x10
[ 1116.779832][ T6695]  __x64_sys_sendmmsg+0xa0/0xc0
[ 1116.779862][ T6695]  do_syscall_64+0x166/0x520
[ 1116.779889][ T6695]  ? trace_irq_disable+0x3b/0x140
[ 1116.779916][ T6695]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1116.779941][ T6695]  ? clear_bhb_loop+0x70/0xc0
[ 1116.779971][ T6695]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1116.779995][ T6695] RIP: 0033:0x7f08ceb9e559
[ 1116.780017][ T6695] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1116.780038][ T6695] RSP: 002b:00007f08cf9e0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[ 1116.780063][ T6695] RAX: ffffffffffffffda RBX: 00007f08cee25fa0 RCX: 00007f08ceb9e559
[ 1116.780089][ T6695] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000003
[ 1116.780106][ T6695] RBP: 00007f08cf9e0090 R08: 0000000000000000 R09: 0000000000000000
[ 1116.780122][ T6695] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1116.780136][ T6695] R13: 00007f08cee26038 R14: 00007f08cee25fa0 R15: 00007fff230e87a8
[ 1116.780174][ T6695]  </TASK>
[ 1117.329863][ T6690] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 1117.819067][ T6702] netlink: 'syz.4.11184': attribute type 22 has an invalid length.
[ 1117.819094][ T6702] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11184'.
[ 1117.819256][ T6702] netlink: 'syz.4.11184': attribute type 22 has an invalid length.
[ 1117.819281][ T6702] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11184'.
[ 1118.105334][ T6712] netlink: 'syz.3.11185': attribute type 1 has an invalid length.
[ 1118.105360][ T6712] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11185'.
[ 1118.110905][  T996] net_ratelimit: 188 callbacks suppressed
[ 1118.110925][  T996] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1118.141205][ T6086] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1118.175000][ T8620] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1118.175033][ T8620] bond7: (slave ip6gretap1): failed to get link speed/duplex
[ 1118.190593][  T996] bond13: (slave ip6gretap2): failed to get link speed/duplex
[ 1118.190669][  T996] bond13: (slave macvlan8): failed to get link speed/duplex
[ 1118.293548][  T987] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1118.293584][  T987] bond7: (slave ip6gretap1): failed to get link speed/duplex
[ 1118.293622][  T987] bond13: (slave ip6gretap2): failed to get link speed/duplex
[ 1118.293643][  T987] bond13: (slave macvlan8): failed to get link speed/duplex
[ 1118.736285][ T6726] netlink: 32 bytes leftover after parsing attributes in process `syz.1.11190'.
[ 1118.738458][ T6721] netlink: 32 bytes leftover after parsing attributes in process `syz.1.11190'.
[ 1118.839218][ T6730] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6gre0, syncid = 2, id = 0
[ 1118.869192][ T6725] bond1: option mode: unable to set because the bond device has slaves
[ 1119.019602][ T6734] netlink: 188 bytes leftover after parsing attributes in process `syz.2.11192'.
[ 1119.119945][ T6729] netlink: 14 bytes leftover after parsing attributes in process `syz.5.11191'.
[ 1119.717680][ T6748] netlink: 28 bytes leftover after parsing attributes in process `syz.4.11195'.
[ 1120.070934][ T6754] syzkaller0: entered promiscuous mode
[ 1120.070959][ T6754] syzkaller0: entered allmulticast mode
[ 1120.105484][ T6757] bond7: option mode: unable to set because the bond device has slaves
[ 1120.505284][ T6765] __nla_validate_parse: 3 callbacks suppressed
[ 1120.505311][ T6765] netlink: 14 bytes leftover after parsing attributes in process `syz.1.11198'.
[ 1120.614813][ T6757] bond7: (slave macvlan3): Error -98 calling set_mac_address
[ 1120.825889][ T6763] netlink: 20 bytes leftover after parsing attributes in process `syz.4.11199'.
[ 1122.413153][ T6805] bond2: option mode: unable to set because the bond device has slaves
[ 1122.633155][ T6805] bond2: (slave macvlan5): Error -98 calling set_mac_address
[ 1122.669204][ T6809] netlink: 52 bytes leftover after parsing attributes in process `syz.2.11207'.
[ 1122.765040][ T6813] netlink: 14 bytes leftover after parsing attributes in process `syz.2.11207'.
[ 1122.983322][ T6814] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 1123.126688][ T8620] net_ratelimit: 191 callbacks suppressed
[ 1123.126715][ T8620] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1123.157806][ T6086] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1123.170849][ T6086] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1123.194896][ T8620] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1123.214581][T15563] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1123.230761][ T8620] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1123.230792][ T8620] bond7: (slave ip6gretap1): failed to get link speed/duplex
[ 1123.230830][ T8620] bond13: (slave ip6gretap2): failed to get link speed/duplex
[ 1123.230851][ T8620] bond13: (slave macvlan8): failed to get link speed/duplex
[ 1123.291312][ T6821] netlink: 'syz.5.11210': attribute type 11 has an invalid length.
[ 1123.291338][ T6821] netlink: 'syz.5.11210': attribute type 4 has an invalid length.
[ 1123.291355][ T6821] netlink: 224 bytes leftover after parsing attributes in process `syz.5.11210'.
[ 1123.340997][T15563] bond13: (slave ip6gretap2): failed to get link speed/duplex
[ 1123.913946][ T6829] netlink: 28 bytes leftover after parsing attributes in process `syz.4.11213'.
[ 1123.913986][ T6829] netlink: 28 bytes leftover after parsing attributes in process `syz.4.11213'.
[ 1124.877961][ T6849] netlink: 16 bytes leftover after parsing attributes in process `syz.3.11219'.
[ 1124.942061][ T6853] netlink: 'syz.4.11223': attribute type 22 has an invalid length.
[ 1124.942094][ T6853] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11223'.
[ 1124.942141][ T6853] FAULT_INJECTION: forcing a failure.
[ 1124.942141][ T6853] name failslab, interval 1, probability 0, space 0, times 0
[ 1124.942171][ T6853] CPU: 1 UID: 0 PID: 6853 Comm: syz.4.11223 Not tainted syzkaller #0 PREEMPT(full) 
[ 1124.942198][ T6853] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[ 1124.942212][ T6853] Call Trace:
[ 1124.942222][ T6853]  <TASK>
[ 1124.942233][ T6853]  dump_stack_lvl+0xe8/0x150
[ 1124.942274][ T6853]  should_fail_ex+0x410/0x560
[ 1124.942313][ T6853]  ? __alloc_skb+0x1db/0x7a0
[ 1124.942350][ T6853]  should_failslab+0xa8/0x100
[ 1124.942386][ T6853]  ? __alloc_skb+0x1db/0x7a0
[ 1124.942423][ T6853]  kmem_cache_alloc_node_noprof+0xa1/0x610
[ 1124.942462][ T6853]  ? __alloc_skb+0x18d/0x7a0
[ 1124.942496][ T6853]  ? __alloc_skb+0x1db/0x7a0
[ 1124.942538][ T6853]  __alloc_skb+0x1db/0x7a0
[ 1124.942578][ T6853]  netlink_ack+0x136/0xb30
[ 1124.942604][ T6853]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[ 1124.942643][ T6853]  ? __lock_acquire+0x747/0x2de0
[ 1124.942684][ T6853]  netlink_rcv_skb+0x2a4/0x4a0
[ 1124.942714][ T6853]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[ 1124.942753][ T6853]  ? __pfx_netlink_rcv_skb+0x10/0x10
[ 1124.942814][ T6853]  ? netlink_deliver_tap+0x2e/0x1b0
[ 1124.942844][ T6853]  ? netlink_deliver_tap+0x2e/0x1b0
[ 1124.942880][ T6853]  netlink_unicast+0x8ef/0xa80
[ 1124.942928][ T6853]  netlink_sendmsg+0x813/0xb40
[ 1124.942970][ T6853]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1124.943010][ T6853]  ? apparmor_socket_sendmsg+0x98/0x360
[ 1124.943055][ T6853]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1124.943092][ T6853]  sock_sendmsg_nosec+0x13a/0x180
[ 1124.943129][ T6853]  ____sys_sendmsg+0x54e/0x850
[ 1124.943168][ T6853]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1124.943214][ T6853]  ? import_iovec+0x73/0xa0
[ 1124.943256][ T6853]  ___sys_sendmsg+0x2a5/0x360
[ 1124.943281][ T6853]  ? __lock_acquire+0x747/0x2de0
[ 1124.943312][ T6853]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1124.943335][ T6853]  ? __lock_acquire+0x747/0x2de0
[ 1124.943368][ T6853]  ? kstrtouint+0x6e/0xe0
[ 1124.943446][ T6853]  __sys_sendmmsg+0x273/0x4d0
[ 1124.943480][ T6853]  ? __pfx___sys_sendmmsg+0x10/0x10
[ 1124.943518][ T6853]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[ 1124.943566][ T6853]  ? ksys_write+0x242/0x270
[ 1124.943595][ T6853]  ? __pfx_ksys_write+0x10/0x10
[ 1124.943630][ T6853]  __x64_sys_sendmmsg+0xa0/0xc0
[ 1124.943659][ T6853]  do_syscall_64+0x166/0x520
[ 1124.943687][ T6853]  ? trace_irq_disable+0x3b/0x140
[ 1124.943721][ T6853]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1124.943746][ T6853]  ? clear_bhb_loop+0x70/0xc0
[ 1124.943776][ T6853]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1124.943801][ T6853] RIP: 0033:0x7f08ceb9e559
[ 1124.943823][ T6853] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1124.943844][ T6853] RSP: 002b:00007f08cf9e0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[ 1124.943870][ T6853] RAX: ffffffffffffffda RBX: 00007f08cee25fa0 RCX: 00007f08ceb9e559
[ 1124.943888][ T6853] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000003
[ 1124.943905][ T6853] RBP: 00007f08cf9e0090 R08: 0000000000000000 R09: 0000000000000000
[ 1124.943920][ T6853] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1124.943935][ T6853] R13: 00007f08cee26038 R14: 00007f08cee25fa0 R15: 00007fff230e87a8
[ 1124.943974][ T6853]  </TASK>
[ 1124.944186][ T6853] netlink: 'syz.4.11223': attribute type 22 has an invalid length.
[ 1124.944203][ T6853] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11223'.
[ 1125.573849][ T6849] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11219'.
[ 1125.579679][ T6867] netlink: 56 bytes leftover after parsing attributes in process `syz.1.11221'.
[ 1126.157687][ T6878] netlink: 'syz.5.11225': attribute type 4 has an invalid length.
[ 1126.203378][ T6878] Cannot find add_set index 0 as target
[ 1126.203549][ T6878] Cannot find add_set index 0 as target
[ 1126.203681][ T6878] Cannot find add_set index 0 as target
[ 1126.203799][ T6878] Cannot find add_set index 0 as target
[ 1126.203916][ T6878] Cannot find add_set index 0 as target
[ 1126.204040][ T6878] Cannot find add_set index 0 as target
[ 1126.286563][ T6878] Cannot find add_set index 0 as target
[ 1126.286707][ T6878] Cannot find add_set index 0 as target
[ 1126.286828][ T6878] Cannot find add_set index 0 as target
[ 1126.286949][ T6878] Cannot find add_set index 0 as target
[ 1126.561585][ T6882] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 1126.672413][ T6887] bond2: option mode: unable to set because the bond device has slaves
[ 1126.834824][ T6887] bond2: (slave macvlan5): Error -98 calling set_mac_address
[ 1126.981289][ T6899] netlink: 14 bytes leftover after parsing attributes in process `syz.2.11227'.
[ 1127.192847][ T6889] xt_bpf: check failed: parse error
[ 1127.292782][ T6908] netlink: 24 bytes leftover after parsing attributes in process `syz.4.11231'.
[ 1127.433716][ T6890] Bluetooth: hci0: unsupported parameter 5135
[ 1127.433744][ T6890] Bluetooth: hci0: unsupported parameter 8192
[ 1127.433761][ T6890] Bluetooth: hci0: unsupported parameter 5135
[ 1127.433775][ T6890] Bluetooth: hci0: unsupported parameter 8192
[ 1127.775755][ T6914] bond0: option mode: unable to set because the bond device has slaves
[ 1127.802280][ T6914] netlink: 52 bytes leftover after parsing attributes in process `syz.4.11233'.
[ 1127.862972][ T6918] netlink: 14 bytes leftover after parsing attributes in process `syz.4.11233'.
[ 1127.906820][ T6917] bond0: (slave macvlan6): Error -98 calling set_mac_address
[ 1128.087160][ T6920] FAULT_INJECTION: forcing a failure.
[ 1128.087160][ T6920] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1128.087202][ T6920] CPU: 1 UID: 0 PID: 6920 Comm: syz.3.11234 Not tainted syzkaller #0 PREEMPT(full) 
[ 1128.087230][ T6920] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[ 1128.087245][ T6920] Call Trace:
[ 1128.087255][ T6920]  <TASK>
[ 1128.087267][ T6920]  dump_stack_lvl+0xe8/0x150
[ 1128.087309][ T6920]  should_fail_ex+0x410/0x560
[ 1128.087360][ T6920]  _copy_from_iter+0x1d3/0x1660
[ 1128.087396][ T6920]  ? __alloc_skb+0x27a/0x7a0
[ 1128.087436][ T6920]  ? __alloc_skb+0x27a/0x7a0
[ 1128.087474][ T6920]  ? __alloc_skb+0x27a/0x7a0
[ 1128.087510][ T6920]  ? __pfx__copy_from_iter+0x10/0x10
[ 1128.087541][ T6920]  ? kmem_cache_alloc_node_noprof+0x1f9/0x610
[ 1128.087569][ T6920]  ? __alloc_skb+0x27a/0x7a0
[ 1128.087603][ T6920]  ? __alloc_skb+0x27a/0x7a0
[ 1128.087646][ T6920]  ? netlink_sendmsg+0x650/0xb40
[ 1128.087676][ T6920]  ? skb_put+0x112/0x210
[ 1128.087703][ T6920]  netlink_sendmsg+0x6c0/0xb40
[ 1128.087745][ T6920]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1128.087786][ T6920]  ? apparmor_socket_sendmsg+0x98/0x360
[ 1128.087821][ T6920]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1128.087851][ T6920]  sock_sendmsg_nosec+0x13a/0x180
[ 1128.087887][ T6920]  ____sys_sendmsg+0x54e/0x850
[ 1128.087920][ T6920]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1128.087957][ T6920]  ? import_iovec+0x73/0xa0
[ 1128.087999][ T6920]  ___sys_sendmsg+0x2a5/0x360
[ 1128.088023][ T6920]  ? __lock_acquire+0x747/0x2de0
[ 1128.088056][ T6920]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1128.088079][ T6920]  ? __lock_acquire+0x747/0x2de0
[ 1128.088112][ T6920]  ? kstrtouint+0x6e/0xe0
[ 1128.088190][ T6920]  __sys_sendmmsg+0x273/0x4d0
[ 1128.088224][ T6920]  ? __pfx___sys_sendmmsg+0x10/0x10
[ 1128.088262][ T6920]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[ 1128.088310][ T6920]  ? ksys_write+0x242/0x270
[ 1128.088344][ T6920]  ? __pfx_ksys_write+0x10/0x10
[ 1128.088379][ T6920]  __x64_sys_sendmmsg+0xa0/0xc0
[ 1128.088408][ T6920]  do_syscall_64+0x166/0x520
[ 1128.088435][ T6920]  ? trace_irq_disable+0x3b/0x140
[ 1128.088463][ T6920]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1128.088488][ T6920]  ? clear_bhb_loop+0x70/0xc0
[ 1128.088518][ T6920]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1128.088542][ T6920] RIP: 0033:0x7fcb55b9e559
[ 1128.088564][ T6920] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1128.088603][ T6920] RSP: 002b:00007fcb569c2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[ 1128.088629][ T6920] RAX: ffffffffffffffda RBX: 00007fcb55e25fa0 RCX: 00007fcb55b9e559
[ 1128.088647][ T6920] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000003
[ 1128.088665][ T6920] RBP: 00007fcb569c2090 R08: 0000000000000000 R09: 0000000000000000
[ 1128.088680][ T6920] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1128.088695][ T6920] R13: 00007fcb55e26038 R14: 00007fcb55e25fa0 R15: 00007ffc8ed9e668
[ 1128.088734][ T6920]  </TASK>
[ 1128.267057][T15563] net_ratelimit: 183 callbacks suppressed
[ 1128.267080][T15563] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1128.267106][T15563] bond7: (slave ip6gretap1): failed to get link speed/duplex
[ 1128.267142][T15563] bond13: (slave ip6gretap2): failed to get link speed/duplex
[ 1128.267164][T15563] bond13: (slave macvlan8): failed to get link speed/duplex
[ 1128.526486][   T13] bond13: (slave ip6gretap2): failed to get link speed/duplex
[ 1128.526518][   T13] bond13: (slave macvlan8): failed to get link speed/duplex
[ 1128.526558][   T13] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1128.526579][   T13] bond7: (slave ip6gretap1): failed to get link speed/duplex
[ 1128.607490][ T6922] netlink: 28 bytes leftover after parsing attributes in process `syz.2.11235'.
[ 1128.607530][ T6922] netlink: 36 bytes leftover after parsing attributes in process `syz.2.11235'.
[ 1128.639605][ T6086] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1128.639640][ T6086] bond7: (slave ip6gretap1): failed to get link speed/duplex
[ 1129.252372][ T6941] Cannot find add_set index 3 as target
[ 1129.517223][ T6948] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11237'.
[ 1129.517255][ T6948] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11237'.
[ 1130.075431][ T6954] xt_LOG: prefix is not null-terminated
[ 1130.878903][ T6966] IPv6: sit5: Disabled Multicast RS
[ 1131.065737][ T6976] netlink: 28 bytes leftover after parsing attributes in process `syz.3.11249'.
[ 1131.065779][ T6976] netlink: 28 bytes leftover after parsing attributes in process `syz.3.11249'.
[ 1131.114764][ T5623] Bluetooth: hci2: ISO packet too small
[ 1131.251051][ T5623] Bluetooth: hci2: ISO packet too small
[ 1131.983153][ T6995] netlink: 45349 bytes leftover after parsing attributes in process `syz.3.11253'.
[ 1131.983325][ T6995] 0ªX¹¦Dö»: renamed from gretap0 (while UP)
[ 1131.983393][ T6995] FAULT_INJECTION: forcing a failure.
[ 1131.983393][ T6995] name failslab, interval 1, probability 0, space 0, times 0
[ 1131.983423][ T6995] CPU: 1 UID: 0 PID: 6995 Comm: syz.3.11253 Not tainted syzkaller #0 PREEMPT(full) 
[ 1131.983449][ T6995] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[ 1131.983464][ T6995] Call Trace:
[ 1131.983475][ T6995]  <TASK>
[ 1131.983486][ T6995]  dump_stack_lvl+0xe8/0x150
[ 1131.983528][ T6995]  should_fail_ex+0x410/0x560
[ 1131.983570][ T6995]  should_failslab+0xa8/0x100
[ 1131.983609][ T6995]  __kmalloc_node_track_caller_noprof+0xfb/0x720
[ 1131.983648][ T6995]  ? kernfs_root+0x1c/0x230
[ 1131.983673][ T6995]  ? kernfs_root+0x1c/0x230
[ 1131.983700][ T6995]  ? kernfs_rename_ns+0x46f/0x930
[ 1131.983731][ T6995]  ? kernfs_rename_ns+0x46f/0x930
[ 1131.983772][ T6995]  kstrdup+0x42/0x100
[ 1131.983803][ T6995]  kernfs_rename_ns+0x46f/0x930
[ 1131.983851][ T6995]  sysfs_rename_link_ns+0x16e/0x1b0
[ 1131.983885][ T6995]  device_rename+0x110/0x210
[ 1131.983926][ T6995]  netif_change_name+0x27a/0x970
[ 1131.983965][ T6995]  ? do_setlink+0xb66/0x4670
[ 1131.983992][ T6995]  ? __irq_work_queue_local+0x1c0/0x4f0
[ 1131.984026][ T6995]  ? __pfx_netif_change_name+0x10/0x10
[ 1131.984070][ T6995]  ? nla_strscpy+0x10f/0x170
[ 1131.984097][ T6995]  do_setlink+0xb66/0x4670
[ 1131.984121][ T6995]  ? __wake_up_klogd+0xf0/0x130
[ 1131.984165][ T6995]  ? __pfx_vprintk_emit+0x10/0x10
[ 1131.984206][ T6995]  ? __pfx_do_setlink+0x10/0x10
[ 1131.984233][ T6995]  ? __lock_acquire+0x747/0x2de0
[ 1131.984279][ T6995]  ? rcu_is_watching+0x16/0xb0
[ 1131.984312][ T6995]  ? do_trace_netlink_extack+0x80/0x1d0
[ 1131.984342][ T6995]  ? __mutex_trylock_common+0x15f/0x270
[ 1131.984380][ T6995]  ? __pfx___mutex_trylock_common+0x10/0x10
[ 1131.984418][ T6995]  ? rcu_is_watching+0x16/0xb0
[ 1131.984449][ T6995]  ? trace_contention_end+0x3d/0x140
[ 1131.984485][ T6995]  ? __mutex_lock+0x30b/0x1550
[ 1131.984528][ T6995]  ? rtnl_setlink+0x4ac/0x810
[ 1131.984555][ T6995]  ? __pfx___mutex_lock+0x10/0x10
[ 1131.984596][ T6995]  ? ns_capable+0x89/0xe0
[ 1131.984640][ T6995]  ? rtnl_nets_add+0x16c/0x300
[ 1131.984670][ T6995]  rtnl_setlink+0x571/0x810
[ 1131.984702][ T6995]  ? __pfx_rtnl_setlink+0x10/0x10
[ 1131.984733][ T6995]  ? do_raw_spin_lock+0x12b/0x2f0
[ 1131.984771][ T6995]  ? __pfx_do_raw_spin_lock+0x10/0x10
[ 1131.984879][ T6995]  ? lock_acquire+0x115/0x350
[ 1131.984923][ T6995]  ? __pfx_rtnl_setlink+0x10/0x10
[ 1131.984944][ T6995]  rtnetlink_rcv_msg+0x802/0xc00
[ 1131.984972][ T6995]  ? rtnetlink_rcv_msg+0x1c9/0xc00
[ 1131.984994][ T6995]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[ 1131.985027][ T6995]  ? ref_tracker_free+0x689/0x830
[ 1131.985065][ T6995]  ? __pfx_ref_tracker_free+0x10/0x10
[ 1131.985112][ T6995]  netlink_rcv_skb+0x226/0x4a0
[ 1131.985143][ T6995]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[ 1131.985184][ T6995]  ? __pfx_netlink_rcv_skb+0x10/0x10
[ 1131.985230][ T6995]  ? netlink_deliver_tap+0x2e/0x1b0
[ 1131.985260][ T6995]  ? netlink_deliver_tap+0x2e/0x1b0
[ 1131.985298][ T6995]  netlink_unicast+0x8ef/0xa80
[ 1131.985348][ T6995]  netlink_sendmsg+0x813/0xb40
[ 1131.985392][ T6995]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1131.985433][ T6995]  ? apparmor_socket_sendmsg+0x98/0x360
[ 1131.985471][ T6995]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1131.985501][ T6995]  sock_sendmsg_nosec+0x13a/0x180
[ 1131.985538][ T6995]  sock_write_iter+0x2de/0x3e0
[ 1131.985571][ T6995]  ? __pfx_sock_write_iter+0x10/0x10
[ 1131.985634][ T6995]  do_iter_readv_writev+0x612/0x8c0
[ 1131.985668][ T6995]  ? __pfx_do_iter_readv_writev+0x10/0x10
[ 1131.985703][ T6995]  ? bpf_lsm_file_permission+0x9/0x20
[ 1131.985726][ T6995]  ? security_file_permission+0x75/0x260
[ 1131.985760][ T6995]  ? rw_verify_area+0x203/0x4c0
[ 1131.985791][ T6995]  vfs_writev+0x343/0x990
[ 1131.985834][ T6995]  ? __pfx_vfs_writev+0x10/0x10
[ 1131.985885][ T6995]  ? __fget_files+0x2a/0x420
[ 1131.985915][ T6995]  ? __fget_files+0x3a2/0x420
[ 1131.985937][ T6995]  ? __fget_files+0x2a/0x420
[ 1131.985971][ T6995]  do_writev+0x154/0x2e0
[ 1131.986007][ T6995]  ? __pfx_do_writev+0x10/0x10
[ 1131.986055][ T6995]  do_syscall_64+0x166/0x520
[ 1131.986083][ T6995]  ? trace_irq_disable+0x3b/0x140
[ 1131.986109][ T6995]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1131.986134][ T6995]  ? clear_bhb_loop+0x70/0xc0
[ 1131.986165][ T6995]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1131.986190][ T6995] RIP: 0033:0x7fcb55b9e559
[ 1131.986213][ T6995] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1131.986234][ T6995] RSP: 002b:00007fcb569c2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014
[ 1131.986260][ T6995] RAX: ffffffffffffffda RBX: 00007fcb55e25fa0 RCX: 00007fcb55b9e559
[ 1131.986279][ T6995] RDX: 0000000000000001 RSI: 00002000000010c0 RDI: 0000000000000003
[ 1131.986294][ T6995] RBP: 00007fcb569c2090 R08: 0000000000000000 R09: 0000000000000000
[ 1131.986310][ T6995] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1131.986324][ T6995] R13: 00007fcb55e26038 R14: 00007fcb55e25fa0 R15: 00007ffc8ed9e668
[ 1131.986365][ T6995]  </TASK>
[ 1132.818917][ T6999] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11254'.
[ 1132.837398][ T6998] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11255'.
[ 1133.239230][ T7008] netlink: 52 bytes leftover after parsing attributes in process `syz.3.11257'.
[ 1133.257265][ T7008] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1133.257587][ T7008] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1133.276517][ T6086] net_ratelimit: 167 callbacks suppressed
[ 1133.276539][ T6086] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1133.290528][  T987] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1133.316584][  T987] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1133.331107][ T8614] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1133.350990][T15564] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1133.371064][ T8614] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1133.391366][ T8614] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1133.412086][ T8614] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1133.446667][ T8619] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1133.463595][T15563] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1133.554134][ T5623] Bluetooth: hci5: link tx timeout
[ 1133.554158][ T5623] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa
[ 1133.655525][ T7013] tipc: Failed to remove unknown binding: 66,0,0/3321340098:2868975495/2868975496
[ 1133.657508][ T7013] tipc: Failed to remove unknown binding: 66,0,0/3321340098:2868975495/2868975496
[ 1133.727172][ T5623] Bluetooth: hci5: link tx timeout
[ 1133.727198][ T5623] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa
[ 1133.839237][ T7011] netlink: 52 bytes leftover after parsing attributes in process `syz.3.11257'.
[ 1134.064031][ T7025] netlink: 24 bytes leftover after parsing attributes in process `syz.5.11261'.
[ 1134.336411][ T7027] netlink: 'syz.4.11262': attribute type 23 has an invalid length.
[ 1134.605906][ T7041] pim6reg: left allmulticast mode
[ 1134.859977][ T7046] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11268'.
[ 1135.388419][ T7061] xt_LOG: prefix is not null-terminated
[ 1135.539251][ T7047] syzkaller0: entered promiscuous mode
[ 1135.539280][ T7047] syzkaller0: entered allmulticast mode
[ 1135.566500][ T7064] netlink: 'syz.5.11272': attribute type 1 has an invalid length.
[ 1135.596753][ T5623] Bluetooth: hci5: command 0x0406 tx timeout
[ 1136.289267][ T7064] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR
[ 1136.528265][ T7079] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.11274'.
[ 1136.622352][ T7081] netlink: 28 bytes leftover after parsing attributes in process `syz.2.11275'.
[ 1137.028241][ T7086] netlink: 24 bytes leftover after parsing attributes in process `syz.3.11276'.
[ 1138.307934][ T8619] net_ratelimit: 210 callbacks suppressed
[ 1138.307961][ T8619] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1138.323921][T15563] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1138.346853][T15563] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1138.361986][T15563] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1138.396061][ T8620] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1138.410447][ T8619] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1138.437525][ T8614] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1138.451901][ T8614] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1138.470466][ T8619] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1138.503456][T15563] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1143.146274][ T7081] IPVS: Unknown mcast interface: vcan0
[ 1143.312008][ T7101] secmark_tg_check: 23 callbacks suppressed
[ 1143.312102][ T7101] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 9
[ 1143.392714][ T7105] netlink: 16 bytes leftover after parsing attributes in process `syz.3.11280'.
[ 1143.392772][ T7105] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11280'.
[ 1143.446525][ T7108] netlink: 52 bytes leftover after parsing attributes in process `syz.4.11279'.
[ 1143.446559][ T7108] netlink: 52 bytes leftover after parsing attributes in process `syz.4.11279'.
[ 1143.446575][ T7108] netlink: 52 bytes leftover after parsing attributes in process `syz.4.11279'.
[ 1143.463808][   T13] net_ratelimit: 198 callbacks suppressed
[ 1143.463860][   T13] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1143.463925][   T13] bond7: (slave ip6gretap1): failed to get link speed/duplex
[ 1143.464036][   T13] bond13: (slave ip6gretap2): failed to get link speed/duplex
[ 1143.464088][   T13] bond13: (slave macvlan8): failed to get link speed/duplex
[ 1143.610490][ T8619] bond13: (slave ip6gretap2): failed to get link speed/duplex
[ 1143.610522][ T8619] bond13: (slave macvlan8): failed to get link speed/duplex
[ 1143.610558][ T8619] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1143.610579][ T8619] bond7: (slave ip6gretap1): failed to get link speed/duplex
[ 1143.717249][ T7112] netlink: 52 bytes leftover after parsing attributes in process `syz.4.11279'.
[ 1143.717287][ T7112] netlink: 52 bytes leftover after parsing attributes in process `syz.4.11279'.
[ 1143.717306][ T7112] netlink: 52 bytes leftover after parsing attributes in process `syz.4.11279'.
[ 1143.721571][  T987] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1143.721603][  T987] bond7: (slave ip6gretap1): failed to get link speed/duplex
[ 1143.892612][ T7114] FAULT_INJECTION: forcing a failure.
[ 1143.892612][ T7114] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1143.892651][ T7114] CPU: 1 UID: 0 PID: 7114 Comm: syz.5.11281 Not tainted syzkaller #0 PREEMPT(full) 
[ 1143.892677][ T7114] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[ 1143.892693][ T7114] Call Trace:
[ 1143.892702][ T7114]  <TASK>
[ 1143.892713][ T7114]  dump_stack_lvl+0xe8/0x150
[ 1143.892755][ T7114]  should_fail_ex+0x410/0x560
[ 1143.892795][ T7114]  _copy_from_iter+0x3b0/0x1660
[ 1143.892831][ T7114]  ? __alloc_skb+0x27a/0x7a0
[ 1143.892875][ T7114]  ? __alloc_skb+0x27a/0x7a0
[ 1143.892911][ T7114]  ? __pfx__copy_from_iter+0x10/0x10
[ 1143.892943][ T7114]  ? kmem_cache_alloc_node_noprof+0x1f9/0x610
[ 1143.892970][ T7114]  ? __alloc_skb+0x27a/0x7a0
[ 1143.893003][ T7114]  ? __alloc_skb+0x27a/0x7a0
[ 1143.893045][ T7114]  ? netlink_sendmsg+0x650/0xb40
[ 1143.893075][ T7114]  ? skb_put+0x112/0x210
[ 1143.893102][ T7114]  netlink_sendmsg+0x6c0/0xb40
[ 1143.893144][ T7114]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1143.893184][ T7114]  ? apparmor_socket_sendmsg+0x98/0x360
[ 1143.893220][ T7114]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1143.893250][ T7114]  sock_sendmsg_nosec+0x13a/0x180
[ 1143.893286][ T7114]  ____sys_sendmsg+0x54e/0x850
[ 1143.893319][ T7114]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1143.893357][ T7114]  ? import_iovec+0x73/0xa0
[ 1143.893404][ T7114]  ___sys_sendmsg+0x2a5/0x360
[ 1143.893429][ T7114]  ? __lock_acquire+0x747/0x2de0
[ 1143.893462][ T7114]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1143.893531][ T7114]  ? __fget_files+0x2a/0x420
[ 1143.893553][ T7114]  ? __fget_files+0x3a2/0x420
[ 1143.893588][ T7114]  __x64_sys_sendmsg+0x1b1/0x290
[ 1143.893618][ T7114]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 1143.893675][ T7114]  do_syscall_64+0x166/0x520
[ 1143.893703][ T7114]  ? trace_irq_disable+0x3b/0x140
[ 1143.893730][ T7114]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1143.893755][ T7114]  ? clear_bhb_loop+0x70/0xc0
[ 1143.893784][ T7114]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1143.893808][ T7114] RIP: 0033:0x7f10fbf9e559
[ 1143.893830][ T7114] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1143.893850][ T7114] RSP: 002b:00007f10fce5c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1143.893876][ T7114] RAX: ffffffffffffffda RBX: 00007f10fc225fa0 RCX: 00007f10fbf9e559
[ 1143.893894][ T7114] RDX: 0000000000040804 RSI: 0000200000004ec0 RDI: 0000000000000004
[ 1143.893911][ T7114] RBP: 00007f10fce5c090 R08: 0000000000000000 R09: 0000000000000000
[ 1143.893926][ T7114] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1143.893941][ T7114] R13: 00007f10fc226038 R14: 00007f10fc225fa0 R15: 00007ffe1c8e4508
[ 1143.893980][ T7114]  </TASK>
[ 1144.652236][ T7129] xt_LOG: prefix is not null-terminated
[ 1144.864865][ T7134] netlink: 28 bytes leftover after parsing attributes in process `syz.3.11288'.
[ 1144.939853][ T7137] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11291'.
[ 1145.141112][ T7145] netlink: 'syz.3.11292': attribute type 1 has an invalid length.
[ 1145.172760][ T7147] netlink: 'syz.1.11290': attribute type 29 has an invalid length.
[ 1145.223417][ T7145] 8021q: adding VLAN 0 to HW filter on device bond25
[ 1145.258481][ T7148] bond6: (slave veth0_to_bond): Releasing active interface
[ 1145.314467][ T7148] bond25: (slave veth0_to_bond): Enslaving as an active interface with an up link
[ 1145.473516][ T7156] FAULT_INJECTION: forcing a failure.
[ 1145.473516][ T7156] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1145.473552][ T7156] CPU: 0 UID: 0 PID: 7156 Comm: syz.4.11295 Not tainted syzkaller #0 PREEMPT(full) 
[ 1145.473578][ T7156] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[ 1145.473592][ T7156] Call Trace:
[ 1145.473601][ T7156]  <TASK>
[ 1145.473612][ T7156]  dump_stack_lvl+0xe8/0x150
[ 1145.473654][ T7156]  should_fail_ex+0x410/0x560
[ 1145.473694][ T7156]  _copy_from_iter+0x4ff/0x1660
[ 1145.473739][ T7156]  ? __alloc_skb+0x27a/0x7a0
[ 1145.473777][ T7156]  ? __pfx__copy_from_iter+0x10/0x10
[ 1145.473809][ T7156]  ? kmem_cache_alloc_node_noprof+0x1f9/0x610
[ 1145.473835][ T7156]  ? __alloc_skb+0x27a/0x7a0
[ 1145.473872][ T7156]  ? __alloc_skb+0x27a/0x7a0
[ 1145.473914][ T7156]  ? netlink_sendmsg+0x650/0xb40
[ 1145.473944][ T7156]  ? skb_put+0x112/0x210
[ 1145.473971][ T7156]  netlink_sendmsg+0x6c0/0xb40
[ 1145.474011][ T7156]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1145.474051][ T7156]  ? apparmor_socket_sendmsg+0x98/0x360
[ 1145.474086][ T7156]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1145.474115][ T7156]  sock_sendmsg_nosec+0x13a/0x180
[ 1145.474159][ T7156]  ____sys_sendmsg+0x54e/0x850
[ 1145.474191][ T7156]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1145.474228][ T7156]  ? import_iovec+0x73/0xa0
[ 1145.474268][ T7156]  ___sys_sendmsg+0x2a5/0x360
[ 1145.474292][ T7156]  ? __lock_acquire+0x747/0x2de0
[ 1145.474324][ T7156]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1145.474391][ T7156]  ? __fget_files+0x2a/0x420
[ 1145.474412][ T7156]  ? __fget_files+0x3a2/0x420
[ 1145.474447][ T7156]  __x64_sys_sendmsg+0x1b1/0x290
[ 1145.474476][ T7156]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 1145.474526][ T7156]  do_syscall_64+0x166/0x520
[ 1145.474554][ T7156]  ? trace_irq_disable+0x3b/0x140
[ 1145.474580][ T7156]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1145.474605][ T7156]  ? clear_bhb_loop+0x70/0xc0
[ 1145.474633][ T7156]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1145.474657][ T7156] RIP: 0033:0x7f08ceb9e559
[ 1145.474679][ T7156] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1145.474699][ T7156] RSP: 002b:00007f08cf9e0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1145.474725][ T7156] RAX: ffffffffffffffda RBX: 00007f08cee25fa0 RCX: 00007f08ceb9e559
[ 1145.474743][ T7156] RDX: 0000000000040804 RSI: 0000200000004ec0 RDI: 0000000000000004
[ 1145.474759][ T7156] RBP: 00007f08cf9e0090 R08: 0000000000000000 R09: 0000000000000000
[ 1145.474774][ T7156] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1145.474789][ T7156] R13: 00007f08cee26038 R14: 00007f08cee25fa0 R15: 00007fff230e87a8
[ 1145.474827][ T7156]  </TASK>
[ 1146.051487][ T7164] lo: entered allmulticast mode
[ 1146.670133][ T7178] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 1147.658115][ T7197] bond13: option mode: unable to set because the bond device has slaves
[ 1147.677425][ T7196] sctp: [Deprecated]: syz.2.11311 (pid 7196) Use of struct sctp_assoc_value in delayed_ack socket option.
[ 1147.677425][ T7196] Use struct sctp_sack_info instead
[ 1147.732137][ T7201] netlink: 'syz.5.11312': attribute type 5 has an invalid length.
[ 1147.739526][ T7197] bond13: (slave macvlan9): Error -98 calling set_mac_address
[ 1148.550928][  T987] net_ratelimit: 180 callbacks suppressed
[ 1148.550954][  T987] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1148.550981][  T987] bond7: (slave ip6gretap1): failed to get link speed/duplex
[ 1148.551020][  T987] bond13: (slave ip6gretap2): failed to get link speed/duplex
[ 1148.551042][  T987] bond13: (slave macvlan8): failed to get link speed/duplex
[ 1148.663048][T15563] bond13: (slave ip6gretap2): failed to get link speed/duplex
[ 1148.663080][T15563] bond13: (slave macvlan8): failed to get link speed/duplex
[ 1148.663115][T15563] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1148.663139][T15563] bond7: (slave ip6gretap1): failed to get link speed/duplex
[ 1148.770620][   T57] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1148.770654][   T57] bond7: (slave ip6gretap1): failed to get link speed/duplex
[ 1148.877214][ T7233] __nla_validate_parse: 5 callbacks suppressed
[ 1148.877238][ T7233] netlink: 20 bytes leftover after parsing attributes in process `syz.4.11321'.
[ 1149.100954][ T7238] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11322'.
[ 1150.102383][ T7251] syzkaller0: entered promiscuous mode
[ 1150.102417][ T7251] syzkaller0: entered allmulticast mode
[ 1150.570101][ T7260] netlink: 'syz.2.11328': attribute type 1 has an invalid length.
[ 1151.283789][ T7259] bond13: option mode: unable to set because the bond device has slaves
[ 1151.285630][ T7260] workqueue: Failed to create a rescuer kthread for wq "bond25": -EINTR
[ 1151.320136][ T7261] bond13: (slave macvlan9): Error -98 calling set_mac_address
[ 1151.458206][ T7262] bond24: (slave veth0_to_bond): Releasing backup interface
[ 1151.488543][ T7265] netlink: 'syz.5.11330': attribute type 4 has an invalid length.
[ 1151.916936][ T7281] xt_LOG: prefix is not null-terminated
[ 1152.256293][ T7295] netlink: 45349 bytes leftover after parsing attributes in process `syz.4.11342'.
[ 1152.258282][ T7291] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 1152.282077][ T7295] 0ªX¹¦Dö»: renamed from gretap0
[ 1152.303948][ T7295] 0ªX¹¦Dö»: entered allmulticast mode
[ 1152.598533][ T7289] netlink: 5120 bytes leftover after parsing attributes in process `syz.1.11338'.
[ 1152.774086][ T7303] netlink: 'syz.3.11344': attribute type 4 has an invalid length.
[ 1153.316797][ T7317] sctp: [Deprecated]: syz.3.11348 (pid 7317) Use of struct sctp_assoc_value in delayed_ack socket option.
[ 1153.316797][ T7317] Use struct sctp_sack_info instead
[ 1153.644121][ T7325] xt_LOG: prefix is not null-terminated
[ 1153.661479][T15564] net_ratelimit: 193 callbacks suppressed
[ 1153.661504][T15564] bond13: (slave ip6gretap2): failed to get link speed/duplex
[ 1153.661528][T15564] bond13: (slave macvlan8): failed to get link speed/duplex
[ 1153.661563][T15564] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1153.661584][T15564] bond7: (slave ip6gretap1): failed to get link speed/duplex
[ 1153.774596][ T8620] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1153.774631][ T8620] bond7: (slave ip6gretap1): failed to get link speed/duplex
[ 1153.774669][ T8620] bond13: (slave ip6gretap2): failed to get link speed/duplex
[ 1153.774690][ T8620] bond13: (slave macvlan8): failed to get link speed/duplex
[ 1153.881638][ T6086] bond13: (slave ip6gretap2): failed to get link speed/duplex
[ 1153.881672][ T6086] bond13: (slave macvlan8): failed to get link speed/duplex
[ 1154.056780][ T7329] netlink: 45349 bytes leftover after parsing attributes in process `syz.1.11354'.
[ 1154.056949][ T7329] 1ªX¹¦Dö»: renamed from 
00ªX¹¦Dö» (while UP)
[ 1154.086799][ T7329] FAULT_INJECTION: forcing a failure.
[ 1154.086799][ T7329] name failslab, interval 1, probability 0, space 0, times 0
[ 1154.086837][ T7329] CPU: 1 UID: 0 PID: 7329 Comm: syz.1.11354 Not tainted syzkaller #0 PREEMPT(full) 
[ 1154.086864][ T7329] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[ 1154.086879][ T7329] Call Trace:
[ 1154.086889][ T7329]  <TASK>
[ 1154.086900][ T7329]  dump_stack_lvl+0xe8/0x150
[ 1154.086942][ T7329]  should_fail_ex+0x410/0x560
[ 1154.086989][ T7329]  ? __alloc_skb+0x1db/0x7a0
[ 1154.087024][ T7329]  should_failslab+0xa8/0x100
[ 1154.087060][ T7329]  ? __alloc_skb+0x1db/0x7a0
[ 1154.087094][ T7329]  kmem_cache_alloc_node_noprof+0xa1/0x610
[ 1154.087121][ T7329]  ? __alloc_skb+0x18d/0x7a0
[ 1154.087162][ T7329]  ? __alloc_skb+0x1db/0x7a0
[ 1154.087205][ T7329]  __alloc_skb+0x1db/0x7a0
[ 1154.087248][ T7329]  rtmsg_ifinfo_build_skb+0x7f/0x260
[ 1154.087292][ T7329]  rtnetlink_event+0x1b7/0x270
[ 1154.087322][ T7329]  notifier_call_chain+0x1a5/0x3d0
[ 1154.087358][ T7329]  netif_change_name+0x5f3/0x970
[ 1154.087397][ T7329]  ? do_setlink+0xb66/0x4670
[ 1154.087429][ T7329]  ? __pfx_netif_change_name+0x10/0x10
[ 1154.087472][ T7329]  ? nla_strscpy+0x10f/0x170
[ 1154.087499][ T7329]  do_setlink+0xb66/0x4670
[ 1154.087523][ T7329]  ? __wake_up_klogd+0xf0/0x130
[ 1154.087567][ T7329]  ? __pfx_vprintk_emit+0x10/0x10
[ 1154.087608][ T7329]  ? __pfx_do_setlink+0x10/0x10
[ 1154.087635][ T7329]  ? __lock_acquire+0x747/0x2de0
[ 1154.087681][ T7329]  ? rcu_is_watching+0x16/0xb0
[ 1154.087713][ T7329]  ? do_trace_netlink_extack+0x80/0x1d0
[ 1154.087746][ T7329]  ? __mutex_trylock_common+0x15f/0x270
[ 1154.087783][ T7329]  ? __pfx___mutex_trylock_common+0x10/0x10
[ 1154.087820][ T7329]  ? rcu_is_watching+0x16/0xb0
[ 1154.087850][ T7329]  ? trace_contention_end+0x3d/0x140
[ 1154.087886][ T7329]  ? __mutex_lock+0x30b/0x1550
[ 1154.087929][ T7329]  ? rtnl_setlink+0x4ac/0x810
[ 1154.087955][ T7329]  ? __pfx___mutex_lock+0x10/0x10
[ 1154.088004][ T7329]  ? ns_capable+0x89/0xe0
[ 1154.088037][ T7329]  ? rtnl_nets_add+0x16c/0x300
[ 1154.088068][ T7329]  rtnl_setlink+0x571/0x810
[ 1154.088089][ T7329]  ? do_syscall_64+0x166/0x520
[ 1154.088116][ T7329]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1154.088147][ T7329]  ? __pfx_rtnl_setlink+0x10/0x10
[ 1154.088268][ T7329]  ? lock_acquire+0x115/0x350
[ 1154.088313][ T7329]  ? __pfx_rtnl_setlink+0x10/0x10
[ 1154.088335][ T7329]  rtnetlink_rcv_msg+0x802/0xc00
[ 1154.088364][ T7329]  ? rtnetlink_rcv_msg+0x1c9/0xc00
[ 1154.088387][ T7329]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[ 1154.088423][ T7329]  ? ref_tracker_free+0x689/0x830
[ 1154.088462][ T7329]  ? __pfx_ref_tracker_free+0x10/0x10
[ 1154.088512][ T7329]  netlink_rcv_skb+0x226/0x4a0
[ 1154.088543][ T7329]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[ 1154.088584][ T7329]  ? __pfx_netlink_rcv_skb+0x10/0x10
[ 1154.088630][ T7329]  ? netlink_deliver_tap+0x2e/0x1b0
[ 1154.088660][ T7329]  ? netlink_deliver_tap+0x2e/0x1b0
[ 1154.088697][ T7329]  netlink_unicast+0x8ef/0xa80
[ 1154.088746][ T7329]  netlink_sendmsg+0x813/0xb40
[ 1154.088789][ T7329]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1154.088830][ T7329]  ? apparmor_socket_sendmsg+0x98/0x360
[ 1154.088867][ T7329]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1154.088897][ T7329]  sock_sendmsg_nosec+0x13a/0x180
[ 1154.088933][ T7329]  sock_write_iter+0x2de/0x3e0
[ 1154.088968][ T7329]  ? __pfx_sock_write_iter+0x10/0x10
[ 1154.089030][ T7329]  do_iter_readv_writev+0x612/0x8c0
[ 1154.089062][ T7329]  ? __pfx_do_iter_readv_writev+0x10/0x10
[ 1154.089098][ T7329]  ? bpf_lsm_file_permission+0x9/0x20
[ 1154.089120][ T7329]  ? security_file_permission+0x75/0x260
[ 1154.089152][ T7329]  ? rw_verify_area+0x203/0x4c0
[ 1154.089182][ T7329]  vfs_writev+0x343/0x990
[ 1154.089225][ T7329]  ? __pfx_vfs_writev+0x10/0x10
[ 1154.089275][ T7329]  ? __fget_files+0x2a/0x420
[ 1154.089304][ T7329]  ? __fget_files+0x3a2/0x420
[ 1154.089325][ T7329]  ? __fget_files+0x2a/0x420
[ 1154.089359][ T7329]  do_writev+0x154/0x2e0
[ 1154.089394][ T7329]  ? __pfx_do_writev+0x10/0x10
[ 1154.089440][ T7329]  do_syscall_64+0x166/0x520
[ 1154.089467][ T7329]  ? trace_irq_disable+0x3b/0x140
[ 1154.089493][ T7329]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1154.089518][ T7329]  ? clear_bhb_loop+0x70/0xc0
[ 1154.089549][ T7329]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1154.089572][ T7329] RIP: 0033:0x7fe6c459e559
[ 1154.089596][ T7329] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1154.089616][ T7329] RSP: 002b:00007fe6c53b8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014
[ 1154.089642][ T7329] RAX: ffffffffffffffda RBX: 00007fe6c4825fa0 RCX: 00007fe6c459e559
[ 1154.089660][ T7329] RDX: 0000000000000001 RSI: 00002000000010c0 RDI: 0000000000000003
[ 1154.089676][ T7329] RBP: 00007fe6c53b8090 R08: 0000000000000000 R09: 0000000000000000
[ 1154.089691][ T7329] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1154.089706][ T7329] R13: 00007fe6c4826038 R14: 00007fe6c4825fa0 R15: 00007ffc668be008
[ 1154.089746][ T7329]  </TASK>
[ 1155.085097][ T7336] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11358'.
[ 1155.169647][ T7337] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11358'.
[ 1155.242473][ T7336] xfrm1: entered promiscuous mode
[ 1155.242499][ T7336] xfrm1: entered allmulticast mode
[ 1155.429016][ T7341] netlink: 'syz.3.11359': attribute type 4 has an invalid length.
[ 1155.835906][ T7350] netlink: 44 bytes leftover after parsing attributes in process `syz.1.11363'.
[ 1156.285084][ T7363] netlink: 52 bytes leftover after parsing attributes in process `syz.3.11366'.
[ 1156.310459][ T7363] netlink: 36 bytes leftover after parsing attributes in process `syz.3.11366'.
[ 1156.621997][ T7369] netlink: 28 bytes leftover after parsing attributes in process `syz.5.11369'.
[ 1156.622039][ T7369] netlink: 28 bytes leftover after parsing attributes in process `syz.5.11369'.
[ 1156.776199][ T7369] erspan0: entered promiscuous mode
[ 1156.863578][ T7369] gretap0: entered promiscuous mode
[ 1156.885183][ T7369] debugfs: 'hsr1' already exists in 'hsr'
[ 1156.885212][ T7369] Cannot create hsr debugfs directory
[ 1157.043314][ T7376] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11371'.
[ 1157.139403][ T7378] netlink: 'syz.1.11374': attribute type 1 has an invalid length.
[ 1157.265828][ T7378] 8021q: adding VLAN 0 to HW filter on device bond29
[ 1157.334752][ T7381] bond28: (slave veth0_to_bond): Releasing backup interface
[ 1157.719993][ T7381] bond29: (slave veth0_to_bond): Enslaving as an active interface with an up link
[ 1158.488323][ T7414] syzkaller0: entered promiscuous mode
[ 1158.488350][ T7414] syzkaller0: entered allmulticast mode
[ 1158.507413][ T7418] netlink: 48 bytes leftover after parsing attributes in process `syz.5.11384'.
[ 1158.548679][ T7418] xt_recent: hitcount (4294901760) is larger than allowed maximum (65535)
[ 1158.713811][ T7421] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[ 1158.730709][ T8620] net_ratelimit: 173 callbacks suppressed
[ 1158.730732][ T8620] bond13: (slave ip6gretap2): failed to get link speed/duplex
[ 1158.730757][ T8620] bond13: (slave macvlan8): failed to get link speed/duplex
[ 1158.730792][ T8620] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1158.730813][ T8620] bond7: (slave ip6gretap1): failed to get link speed/duplex
[ 1158.859340][ T8614] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1158.872912][  T996] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1158.890522][ T8614] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1158.910394][ T8614] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1158.931807][  T996] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1158.953766][T20529] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1159.573877][ T7432] vlan2: entered promiscuous mode
[ 1159.573905][ T7432] hsr0: entered promiscuous mode
[ 1159.615901][ T7432] vlan2: entered allmulticast mode
[ 1159.615928][ T7432] hsr0: entered allmulticast mode
[ 1159.615944][ T7432] hsr_slave_0: entered allmulticast mode
[ 1159.615962][ T7432] hsr_slave_1: entered allmulticast mode
[ 1159.933930][ T7442] FAULT_INJECTION: forcing a failure.
[ 1159.933930][ T7442] name failslab, interval 1, probability 0, space 0, times 0
[ 1159.933971][ T7442] CPU: 1 UID: 0 PID: 7442 Comm: syz.2.11392 Not tainted syzkaller #0 PREEMPT(full) 
[ 1159.933999][ T7442] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[ 1159.934015][ T7442] Call Trace:
[ 1159.934025][ T7442]  <TASK>
[ 1159.934037][ T7442]  dump_stack_lvl+0xe8/0x150
[ 1159.934086][ T7442]  should_fail_ex+0x410/0x560
[ 1159.934128][ T7442]  should_failslab+0xa8/0x100
[ 1159.934165][ T7442]  __kmalloc_cache_noprof+0xa3/0x600
[ 1159.934196][ T7442]  ? nla_memcpy+0x5b/0xc0
[ 1159.934219][ T7442]  ? rtm_new_nexthop+0x29a4/0x8310
[ 1159.934324][ T7442]  ? rtm_new_nexthop+0x29a4/0x8310
[ 1159.934363][ T7442]  rtm_new_nexthop+0x29a4/0x8310
[ 1159.934392][ T7442]  ? nlmon_xmit+0xb0/0x100
[ 1159.934430][ T7442]  ? netlink_sendmsg+0x813/0xb40
[ 1159.934459][ T7442]  ? sock_sendmsg_nosec+0x13a/0x180
[ 1159.934490][ T7442]  ? ____sys_sendmsg+0x54e/0x850
[ 1159.934515][ T7442]  ? do_syscall_64+0x166/0x520
[ 1159.934543][ T7442]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1159.934579][ T7442]  ? __pfx_rtm_new_nexthop+0x10/0x10
[ 1159.934638][ T7442]  ? kasan_quarantine_put+0xbb/0x1f0
[ 1159.934668][ T7442]  ? lockdep_hardirqs_on+0x7b/0x110
[ 1159.934700][ T7442]  ? nlmon_xmit+0xb0/0x100
[ 1159.934731][ T7442]  ? kmem_cache_free+0x182/0x650
[ 1159.934775][ T7442]  ? __lock_acquire+0x747/0x2de0
[ 1159.934819][ T7442]  ? __dev_queue_xmit+0x29b/0x3920
[ 1159.934848][ T7442]  ? __local_bh_enable_ip+0xd6/0x140
[ 1159.934914][ T7442]  ? __pfx_rtm_new_nexthop+0x10/0x10
[ 1159.934943][ T7442]  rtnetlink_rcv_msg+0x802/0xc00
[ 1159.934971][ T7442]  ? rtnetlink_rcv_msg+0x1c9/0xc00
[ 1159.934995][ T7442]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[ 1159.935030][ T7442]  ? ref_tracker_free+0x689/0x830
[ 1159.935070][ T7442]  ? __pfx_ref_tracker_free+0x10/0x10
[ 1159.935126][ T7442]  netlink_rcv_skb+0x226/0x4a0
[ 1159.935158][ T7442]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[ 1159.935198][ T7442]  ? __pfx_netlink_rcv_skb+0x10/0x10
[ 1159.935244][ T7442]  ? netlink_deliver_tap+0x2e/0x1b0
[ 1159.935273][ T7442]  ? netlink_deliver_tap+0x2e/0x1b0
[ 1159.935310][ T7442]  netlink_unicast+0x8ef/0xa80
[ 1159.935359][ T7442]  netlink_sendmsg+0x813/0xb40
[ 1159.935401][ T7442]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1159.935443][ T7442]  ? apparmor_socket_sendmsg+0x98/0x360
[ 1159.935480][ T7442]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1159.935510][ T7442]  sock_sendmsg_nosec+0x13a/0x180
[ 1159.935546][ T7442]  ____sys_sendmsg+0x54e/0x850
[ 1159.935580][ T7442]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1159.935618][ T7442]  ? import_iovec+0x73/0xa0
[ 1159.935660][ T7442]  ___sys_sendmsg+0x2a5/0x360
[ 1159.935686][ T7442]  ? __lock_acquire+0x747/0x2de0
[ 1159.935718][ T7442]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1159.935789][ T7442]  ? __fget_files+0x2a/0x420
[ 1159.935811][ T7442]  ? __fget_files+0x3a2/0x420
[ 1159.935847][ T7442]  __x64_sys_sendmsg+0x1b1/0x290
[ 1159.935878][ T7442]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 1159.935932][ T7442]  do_syscall_64+0x166/0x520
[ 1159.935959][ T7442]  ? trace_irq_disable+0x3b/0x140
[ 1159.935986][ T7442]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1159.936011][ T7442]  ? clear_bhb_loop+0x70/0xc0
[ 1159.936041][ T7442]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1159.936065][ T7442] RIP: 0033:0x7f9bee39e559
[ 1159.936096][ T7442] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1159.936116][ T7442] RSP: 002b:00007f9bef332028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1159.936142][ T7442] RAX: ffffffffffffffda RBX: 00007f9bee625fa0 RCX: 00007f9bee39e559
[ 1159.936161][ T7442] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 0000000000000003
[ 1159.936177][ T7442] RBP: 00007f9bef332090 R08: 0000000000000000 R09: 0000000000000000
[ 1159.936193][ T7442] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1159.936208][ T7442] R13: 00007f9bee626038 R14: 00007f9bee625fa0 R15: 00007ffd3c090788
[ 1159.936248][ T7442]  </TASK>
[ 1161.136392][ T7460] bond2: option mode: unable to set because the bond device has slaves
[ 1161.307254][ T7460] bond2: (slave macvlan5): Error -98 calling set_mac_address
[ 1161.469165][ T7461] netlink: 40 bytes leftover after parsing attributes in process `syz.1.11398'.
[ 1161.485810][ T7466] netlink: 14 bytes leftover after parsing attributes in process `syz.2.11397'.
[ 1161.733686][ T7475] syzkaller0: entered promiscuous mode
[ 1161.733714][ T7475] syzkaller0: entered allmulticast mode
[ 1162.110219][ T7482] netlink: 'syz.3.11403': attribute type 1 has an invalid length.
[ 1162.245033][ T7482] 8021q: adding VLAN 0 to HW filter on device bond26
[ 1162.438502][ T7482] bond25: (slave veth0_to_bond): Releasing backup interface
[ 1162.510052][ T7482] bond26: (slave veth0_to_bond): Enslaving as an active interface with an up link
[ 1163.735449][ T7523] FAULT_INJECTION: forcing a failure.
[ 1163.735449][ T7523] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1163.735489][ T7523] CPU: 1 UID: 0 PID: 7523 Comm: syz.2.11419 Not tainted syzkaller #0 PREEMPT(full) 
[ 1163.735515][ T7523] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[ 1163.735531][ T7523] Call Trace:
[ 1163.735541][ T7523]  <TASK>
[ 1163.735552][ T7523]  dump_stack_lvl+0xe8/0x150
[ 1163.735595][ T7523]  should_fail_ex+0x410/0x560
[ 1163.735636][ T7523]  _copy_from_iter+0x1d3/0x1660
[ 1163.735670][ T7523]  ? __alloc_skb+0x27a/0x7a0
[ 1163.735728][ T7523]  ? __alloc_skb+0x27a/0x7a0
[ 1163.735766][ T7523]  ? __alloc_skb+0x27a/0x7a0
[ 1163.735802][ T7523]  ? __pfx__copy_from_iter+0x10/0x10
[ 1163.735834][ T7523]  ? kmem_cache_alloc_node_noprof+0x1f9/0x610
[ 1163.735862][ T7523]  ? __alloc_skb+0x27a/0x7a0
[ 1163.735899][ T7523]  ? __alloc_skb+0x27a/0x7a0
[ 1163.735942][ T7523]  ? netlink_sendmsg+0x650/0xb40
[ 1163.735974][ T7523]  ? skb_put+0x112/0x210
[ 1163.736000][ T7523]  netlink_sendmsg+0x6c0/0xb40
[ 1163.736042][ T7523]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1163.736083][ T7523]  ? apparmor_socket_sendmsg+0x18b/0x360
[ 1163.736120][ T7523]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1163.736150][ T7523]  sock_sendmsg_nosec+0x13a/0x180
[ 1163.736186][ T7523]  ____sys_sendmsg+0x54e/0x850
[ 1163.736219][ T7523]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1163.736256][ T7523]  ? import_iovec+0x73/0xa0
[ 1163.736296][ T7523]  ___sys_sendmsg+0x2a5/0x360
[ 1163.736322][ T7523]  ? __lock_acquire+0x747/0x2de0
[ 1163.736355][ T7523]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1163.736424][ T7523]  ? __fget_files+0x2a/0x420
[ 1163.736445][ T7523]  ? __fget_files+0x3a2/0x420
[ 1163.736480][ T7523]  __x64_sys_sendmsg+0x1b1/0x290
[ 1163.736511][ T7523]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 1163.736563][ T7523]  do_syscall_64+0x166/0x520
[ 1163.736592][ T7523]  ? trace_irq_disable+0x3b/0x140
[ 1163.736618][ T7523]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1163.736644][ T7523]  ? clear_bhb_loop+0x70/0xc0
[ 1163.736674][ T7523]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1163.736698][ T7523] RIP: 0033:0x7f9bee39e559
[ 1163.736728][ T7523] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1163.736749][ T7523] RSP: 002b:00007f9bef332028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1163.736775][ T7523] RAX: ffffffffffffffda RBX: 00007f9bee625fa0 RCX: 00007f9bee39e559
[ 1163.736794][ T7523] RDX: 000000002000c800 RSI: 0000200000000080 RDI: 0000000000000003
[ 1163.736810][ T7523] RBP: 00007f9bef332090 R08: 0000000000000000 R09: 0000000000000000
[ 1163.736825][ T7523] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1163.736839][ T7523] R13: 00007f9bee626038 R14: 00007f9bee625fa0 R15: 00007ffd3c090788
[ 1163.736877][ T7523]  </TASK>
[ 1163.835124][   T13] net_ratelimit: 188 callbacks suppressed
[ 1163.835185][   T13] bond13: (slave ip6gretap2): failed to get link speed/duplex
[ 1163.835256][   T13] bond13: (slave macvlan8): failed to get link speed/duplex
[ 1163.835341][   T13] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1163.835393][   T13] bond7: (slave ip6gretap1): failed to get link speed/duplex
[ 1163.962415][T15564] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1163.962467][T15564] bond7: (slave ip6gretap1): failed to get link speed/duplex
[ 1163.962506][T15564] bond13: (slave ip6gretap2): failed to get link speed/duplex
[ 1163.962526][T15564] bond13: (slave macvlan8): failed to get link speed/duplex
[ 1164.101471][  T996] bond13: (slave ip6gretap2): failed to get link speed/duplex
[ 1164.101499][  T996] bond13: (slave macvlan8): failed to get link speed/duplex
[ 1164.599570][ T7529] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 1164.725485][ T7543] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11423'.
[ 1164.825478][ T7541] syzkaller0: entered promiscuous mode
[ 1164.825503][ T7541] syzkaller0: entered allmulticast mode
[ 1165.932027][ T7574] bond13: option mode: unable to set because the bond device has slaves
[ 1165.968824][ T7574] bond13: (slave macvlan9): Error -98 calling set_mac_address
[ 1166.049976][ T7585] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11433'.
[ 1166.589920][ T7590] netlink: 1 bytes leftover after parsing attributes in process `syz.3.11436'.
[ 1166.983138][ T7596] xt_CT: You must specify a L4 protocol and not use inversions on it
[ 1167.350929][ T7603] syzkaller0: entered promiscuous mode
[ 1167.351144][ T7603] syzkaller0: entered allmulticast mode
[ 1167.373743][ T7603] netlink: 12 bytes leftover after parsing attributes in process `syz.5.11441'.
[ 1167.373770][ T7603] netlink: 12 bytes leftover after parsing attributes in process `syz.5.11441'.
[ 1167.853345][ T7619] netlink: 108 bytes leftover after parsing attributes in process `syz.3.11445'.
[ 1167.853772][ T7619] netlink: 108 bytes leftover after parsing attributes in process `syz.3.11445'.
[ 1167.853794][ T7619] netlink: 84 bytes leftover after parsing attributes in process `syz.3.11445'.
[ 1168.037716][ T7622] bond0: option mode: unable to set because the bond device has slaves
[ 1168.305576][ T7622] bond0: (slave macvlan6): Error -98 calling set_mac_address
[ 1168.321257][   T33] INFO: task syz.0.10620:4622 blocked for more than 143 seconds.
[ 1168.321286][   T33]       Not tainted syzkaller #0
[ 1168.321299][   T33] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 1168.321312][   T33] task:syz.0.10620     state:D stack:25952 pid:4622  tgid:4620  ppid:5615   task_flags:0x400140 flags:0x00080002
[ 1168.321380][   T33] Call Trace:
[ 1168.321389][   T33]  <TASK>
[ 1168.321406][   T33]  __schedule+0x17db/0x58f0
[ 1168.321474][   T33]  ? __pfx___schedule+0x10/0x10
[ 1168.321513][   T33]  ? schedule+0x90/0x2b0
[ 1168.321543][   T33]  schedule+0x164/0x2b0
[ 1168.321573][   T33]  schedule_preempt_disabled+0x13/0x30
[ 1168.321599][   T33]  __mutex_lock+0x7c1/0x1550
[ 1168.321635][   T33]  ? __mutex_lock+0x5d4/0x1550
[ 1168.321670][   T33]  ? nfsd_nl_listener_set_doit+0x53d/0x1ab0
[ 1168.431175][   T33]  ? __pfx___mutex_lock+0x10/0x10
[ 1168.486776][   T33]  ? __kasan_kmalloc+0x93/0xb0
[ 1168.486831][   T33]  ? __nla_validate_parse+0x2429/0x2d50
[ 1168.486857][   T33]  ? do_syscall_64+0x166/0x520
[ 1168.486885][   T33]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1168.486923][   T33]  nfsd_nl_listener_set_doit+0x53d/0x1ab0
[ 1168.486970][   T33]  ? __pfx___nla_validate_parse+0x10/0x10
[ 1168.487022][   T33]  ? __pfx_nfsd_nl_listener_set_doit+0x10/0x10
[ 1168.487060][   T33]  ? trace_kmalloc+0x2a/0xf0
[ 1168.487091][   T33]  ? __kmalloc_noprof+0x38c/0x720
[ 1168.487123][   T33]  ? __nla_parse+0x40/0x60
[ 1168.487151][   T33]  ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0
[ 1168.487191][   T33]  ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0
[ 1168.487241][   T33]  genl_family_rcv_msg_doit+0x233/0x340
[ 1168.487288][   T33]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[ 1168.487342][   T33]  ? bpf_lsm_capable+0x9/0x20
[ 1168.487369][   T33]  ? security_capable+0x7e/0x2c0
[ 1168.487412][   T33]  genl_rcv_msg+0x614/0x7a0
[ 1168.487458][   T33]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 1168.487495][   T33]  ? __pfx_nfsd_nl_listener_set_doit+0x10/0x10
[ 1168.487549][   T33]  netlink_rcv_skb+0x226/0x4a0
[ 1168.487581][   T33]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 1168.487621][   T33]  ? __pfx_netlink_rcv_skb+0x10/0x10
[ 1168.487670][   T33]  ? down_read+0x2be/0x330
[ 1168.487707][   T33]  genl_rcv+0x28/0x40
[ 1168.487741][   T33]  netlink_unicast+0x8ef/0xa80
[ 1168.487791][   T33]  netlink_sendmsg+0x813/0xb40
[ 1168.487833][   T33]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1168.487875][   T33]  ? apparmor_socket_sendmsg+0x98/0x360
[ 1168.487912][   T33]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1168.487943][   T33]  sock_sendmsg_nosec+0x13a/0x180
[ 1168.487986][   T33]  ____sys_sendmsg+0x54e/0x850
[ 1168.488021][   T33]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1168.488059][   T33]  ? import_iovec+0x73/0xa0
[ 1168.488127][   T33]  ___sys_sendmsg+0x2a5/0x360
[ 1168.488153][   T33]  ? __lock_acquire+0x747/0x2de0
[ 1168.488187][   T33]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1168.488219][   T33]  ? futex_wait+0x2a2/0x390
[ 1168.488281][   T33]  ? __fget_files+0x2a/0x420
[ 1168.488303][   T33]  ? __fget_files+0x3a2/0x420
[ 1168.488339][   T33]  __x64_sys_sendmsg+0x1b1/0x290
[ 1168.488370][   T33]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 1168.488424][   T33]  do_syscall_64+0x166/0x520
[ 1168.488452][   T33]  ? trace_irq_disable+0x3b/0x140
[ 1168.488479][   T33]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1168.488504][   T33]  ? clear_bhb_loop+0x70/0xc0
[ 1168.488535][   T33]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1168.488560][   T33] RIP: 0033:0x7fc35e39e559
[ 1168.488583][   T33] RSP: 002b:00007fc35f2b4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1168.488610][   T33] RAX: ffffffffffffffda RBX: 00007fc35e626090 RCX: 00007fc35e39e559
[ 1168.488628][   T33] RDX: 0000000004008090 RSI: 0000200000000140 RDI: 0000000000000003
[ 1168.488645][   T33] RBP: 00007fc35e435ad8 R08: 0000000000000000 R09: 0000000000000000
[ 1168.488661][   T33] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1168.488676][   T33] R13: 00007fc35e626128 R14: 00007fc35e626090 R15: 00007fff80c44b48
[ 1168.488717][   T33]  </TASK>
[ 1168.488789][   T33] 
[ 1168.488789][   T33] Showing all locks held in the system:
[ 1168.488801][   T33] locks held by kworker/u8:1/13: 3, last CPU#0:
[ 1168.488918][   T33]  #0: ffff88801c0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[ 1168.489026][   T33]  #1: ffffc90000127c40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[ 1168.489094][   T33]  #2: ffff88807b193258 (&devlink->lock_key#3){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xb40
[ 1168.489227][   T33] locks held by khungtaskd/33: 1, last CPU#1:
[ 1168.489244][   T33]  #0: ffffffff8fd5c8e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[ 1168.489314][   T33] locks held by kworker/u8:7/987: 4, last CPU#0:
[ 1168.489330][   T33]  #0: ffff88802b3ae940 ((wq_completion)krds_cp_wq#12/2){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[ 1168.489391][   T33]  #1: ffffc90004b7fc40 ((work_completion)(&(&cp->cp_conn_w)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[ 1168.489457][   T33]  #2: ffff88805651f380 (&tc->t_conn_path_lock){+.+.}-{4:4}, at: rds_tcp_conn_path_connect+0x1cc/0x920
[ 1168.489570][   T33]  #3: ffff8880336f60e0 (k-sk_lock-AF_INET6){+.+.}-{0:0}, at: __inet6_bind+0x301/0xf30
[ 1168.489650][   T33] locks held by syslogd/4965: 2, last CPU#0:
[ 1168.489667][   T33]  #0: ffff88807f9605f0 (&u->iolock){+.+.}-{4:4}, at: __unix_dgram_recvmsg+0x1e3/0xd70
[ 1168.489727][   T33]  #1: ffffffff8fd5c8e0 (rcu_read_lock){....}-{1:3}, at: psi_task_switch+0x57/0x7d0
[ 1168.489788][   T33] locks held by getty/5373: 2, on CPU#1:
[ 1168.489805][   T33]  #0: ffff8880362910a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[ 1168.489935][   T33]  #1: ffffc9000323b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360
[ 1168.490012][   T33] locks held by syz-executor/5614: 4, last CPU#0:
[ 1168.490030][   T33]  #0: ffffffff8fe36570 (dup_mmap_sem){++++}-{0:0}, at: copy_mm+0x10a/0x480
[ 1168.490094][   T33]  #1: ffff8880325b5900 (&mm->mmap_lock){++++}-{4:4}, at: dup_mmap+0x195/0x1dc0
[ 1168.852822][  T996] net_ratelimit: 179 callbacks suppressed
[ 1168.852847][  T996] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1168.980564][ T6086] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1169.122908][   T33]  #2: ffff88807c313440 (&mm->mmap_lock/1){+.+.}-{4:4}, at: dup_mmap+0x221/0x1dc0
[ 1169.122996][   T33]  #3: ffffffff8fd5c8e0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240
[ 1169.123128][   T33] locks held by kworker/u8:11/8614: 4, last CPU#1:
[ 1169.123149][   T33]  #0: ffff88807abdf940 ((wq_completion)krds_cp_wq#12/3){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[ 1169.123260][   T33]  #1: ffffc9000e53fc40 ((work_completion)(&(&cp->cp_conn_w)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[ 1169.123336][   T33]  #2: ffff88805651f080 (&tc->t_conn_path_lock){+.+.}-{4:4}, at: rds_tcp_conn_path_connect+0x1cc/0x920
[ 1169.123410][   T33]  #3: ffff88804b45c5e0 (k-sk_lock-AF_INET6){+.+.}-{0:0}, at: __inet6_bind+0x301/0xf30
[ 1169.149348][   T33] locks held by kworker/u8:14/8619: 3, last CPU#1:
[ 1169.149370][   T33]  #0: ffff88801c0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[ 1169.149447][   T33]  #1: ffffc9000ea0fc40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[ 1169.149524][   T33]  #2: ffff88807b193258 (&devlink->lock_key#3){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xb40
[ 1169.149601][   T33] locks held by kworker/u8:15/8620: 6, last CPU#1:
[ 1169.149621][   T33]  #0: ffff88802b3a8140 ((wq_completion)krds_cp_wq#12/1){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[ 1169.149695][   T33]  #1: ffffc9000ea1fc40 ((work_completion)(&(&cp->cp_conn_w)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[ 1169.149769][   T33]  #2: ffff88805651f680 (&tc->t_conn_path_lock){+.+.}-{4:4}, at: rds_tcp_conn_path_connect+0x1cc/0x920
[ 1169.149850][   T33]  #3: ffff88804b459d60 (k-sk_lock-AF_INET6){+.+.}-{0:0}, at: __inet6_bind+0x301/0xf30
[ 1169.149921][   T33]  #4: ffffffff8fd5c8e0 (rcu_read_lock){....}-{1:3}, at: __inet6_bind+0x49b/0xf30
[ 1169.149992][   T33]  #5: ffffffff8fd5c8e0 (rcu_read_lock){....}-{1:3}, at: __ipv6_chk_addr_and_flags+0x184/0x7e0
[ 1169.160575][   T33] locks held by kworker/u8:19/15563: 3, last CPU#1:
[ 1169.160603][   T33]  #0: ffff88801c0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[ 1169.160689][   T33]  #1: ffffc9000ca4fc40 ((work_completion)(&(&nsim_dev->trap_data->trap_report_dw)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[ 1169.160766][   T33]  #2: ffff88807621b258 (&devlink->lock_key#6){+.+.}-{4:4}, at: nsim_dev_trap_report_work+0x57/0xb40
[ 1169.160852][   T33] locks held by kworker/u8:20/15564: 4, last CPU#1:
[ 1169.160872][   T33]  #0: ffff888076216140 ((wq_completion)wg-kex-wg2){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[ 1169.160945][   T33]  #1: ffffc9000db1fc40 ((work_completion)(&peer->transmit_handshake_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[ 1169.161019][   T33]  #2: ffff888035855440 (&wg->static_identity.lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x12e/0x810
[ 1169.161157][   T33]  #3: ffff888031eb4888 (&handshake->lock){++++}-{4:4}, at: wg_noise_handshake_create_initiation+0x13f/0x810
[ 1169.161232][   T33] locks held by kworker/u8:24/20529: 4, last CPU#1:
[ 1169.161252][   T33]  #0: ffff88807ba14940 ((wq_completion)krds_cp_wq#12/4){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[ 1169.161325][   T33]  #1: ffffc90023dafc40 ((work_completion)(&(&cp->cp_conn_w)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[ 1169.208326][T15563] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1169.248415][ T8615] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1169.269657][T21251] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1169.285273][ T8619] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1169.343739][   T33]  #2: ffff88805651ed80 (&tc->t_conn_path_lock){+.+.}-{4:4}, at: rds_tcp_conn_path_connect+0x1cc/0x920
[ 1169.343830][   T33]  #3: ffff8880b853bb20 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2d/0x160
[ 1169.343909][   T33] locks held by kworker/1:6/30403: 3, on CPU#1:
[ 1169.343928][   T33]  #0: ffff88801c06b140 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[ 1169.343994][   T33]  #1: ffffc9000581fc40 ((work_completion)(&aux->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[ 1169.344059][   T33]  #2: ffffffff91255cc0 (rtnl_mutex){+.+.}-{4:4}, at: bpf_prog_dev_bound_destroy+0x29/0x3f0
[ 1169.344134][   T33] locks held by syz.0.10620/4621: 2, on CPU#1:
[ 1169.344152][   T33]  #0: ffffffff912c6888 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[ 1169.344219][   T33]  #1: ffffffff9009f9a0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x53d/0x1ab0
[ 1169.344289][   T33] locks held by syz.0.10620/4622: 2, on CPU#1:
[ 1169.344303][   T33]  #0: ffffffff912c6888 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[ 1169.344369][   T33]  #1: ffffffff9009f9a0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x53d/0x1ab0
[ 1169.344440][   T33] locks held by kworker/u8:0/6086: 3, on CPU#1:
[ 1169.344458][   T33]  #0: ffff88801c0ac140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[ 1169.344524][   T33]  #1: ffffc9001b7c7c40 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630
[ 1169.344588][   T33]  #2: ffffffff91255cc0 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60
[ 1169.344652][   T33] locks held by udevd/7582: 2, last CPU#1:
[ 1169.344669][   T33]  #0: ffff888023329bc0 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x1a4/0x9f0
[ 1169.344725][   T33]  #1: ffffffff8fd5c8e0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240
[ 1169.344801][   T33] locks held by syz.1.11442/7615: 2, last CPU#1:
[ 1169.344818][   T33]  #0: ffff88807a520340 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x2d8/0x9f0
[ 1169.344880][   T33]  #1: ffffffff8fd5c8e0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550
[ 1169.344943][   T33] locks held by syz.3.11445/7614: 3, on CPU#0:
[ 1169.344960][   T33]  #0: ffff88807664e400 (&sb->s_type->i_mutex_key#13){+.+.}-{4:4}, at: __sock_release+0x7a/0x1f0
[ 1169.345030][   T33]  #1: ffff888066b23260 (sk_lock-AF_CAN){+.+.}-{0:0}, at: bcm_release+0x1d4/0xa30
[ 1169.345179][   T33]  #2: ffffffff8fd62ca8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x38d/0x770
[ 1169.372002][ T8619] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1169.433793][ T8615] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1169.513876][ T8619] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1169.544567][   T33] locks held by syz.4.11446/7622: 4, last CPU#1:
[ 1169.544594][   T33]  #0: ffffffff9099a708 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250
[ 1169.544668][   T33]  #1: ffffffff91255cc0 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0xc10/0x1c30
[ 1169.544724][   T33]  #2: ffff88801d2d4aa0 (&root->kernfs_supers_rwsem){++++}-{4:4}, at: kernfs_remove_by_name_ns+0x3f/0x140
[ 1169.544802][   T33]  #3: ffff88801d2d4980 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_remove_by_name_ns+0x4e/0x140
[ 1169.544873][   T33] locks held by syz-executor/7626: 4, last CPU#1:
[ 1169.544891][   T33]  #0: ffff888024345e48 (vm_lock){++++}-{0:0}, at: lock_vma_under_rcu+0x1d1/0x500
[ 1169.544948][   T33]  #1: ffffffff8fd5c8e0 (rcu_read_lock){....}-{1:3}, at: do_pte_missing+0x140c/0x34b0
[ 1169.545008][   T33]  #2: ffffffff8fd5c8e0 (rcu_read_lock){....}-{1:3}, at: filemap_map_pages+0x1d1/0x2170
[ 1169.545063][   T33]  #3: ffffffff8fd5c8e0 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240
[ 1169.545158][   T33] 
[ 1169.545166][   T33] =============================================
[ 1169.545166][   T33] 
[ 1169.545191][   T33] NMI backtrace for cpu 1
[ 1169.545208][   T33] CPU: 1 UID: 0 PID: 33 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[ 1169.545233][   T33] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[ 1169.545247][   T33] Call Trace:
[ 1169.545257][   T33]  <TASK>
[ 1169.545269][   T33]  dump_stack_lvl+0xe8/0x150
[ 1169.545307][   T33]  nmi_cpu_backtrace+0x274/0x2d0
[ 1169.545345][   T33]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[ 1169.545388][   T33]  nmi_trigger_cpumask_backtrace+0x17d/0x390
[ 1169.545428][   T33]  sys_info+0x135/0x170
[ 1169.545461][   T33]  watchdog+0xfd7/0x1030
[ 1169.545497][   T33]  ? watchdog+0x1c7/0x1030
[ 1169.545545][   T33]  kthread+0x38b/0x480
[ 1169.545570][   T33]  ? __pfx_watchdog+0x10/0x10
[ 1169.545594][   T33]  ? __pfx_kthread+0x10/0x10
[ 1169.545620][   T33]  ret_from_fork+0x514/0xb70
[ 1169.545681][   T33]  ? __pfx_ret_from_fork+0x10/0x10
[ 1169.545705][   T33]  ? __switch_to+0xc89/0x1420
[ 1169.545742][   T33]  ? __pfx_kthread+0x10/0x10
[ 1169.545768][   T33]  ret_from_fork_asm+0x1a/0x30
[ 1169.545818][   T33]  </TASK>
[ 1169.545828][   T33] Sending NMI from CPU 1 to CPUs 0:
[ 1169.545860][    C0] NMI backtrace for cpu 0
[ 1169.545875][    C0] CPU: 0 UID: 0 PID: 8614 Comm: kworker/u8:11 Not tainted syzkaller #0 PREEMPT(full) 
[ 1169.545897][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[ 1169.545910][    C0] Workqueue: krds_cp_wq#12/3 rds_connect_worker
[ 1169.545986][    C0] RIP: 0010:lock_release+0x111/0x3c0
[ 1169.546010][    C0] Code: 24 83 f8 32 0f 83 38 02 00 00 4a 8d 1c ad 00 00 00 00 4c 01 eb 48 8d 6c dd 00 48 89 ef 4c 89 f6 e8 04 41 45 0a 44 89 64 24 14 <45> 89 e5 85 c0 0f 84 e1 00 00 00 48 85 ed 0f 84 1d 01 00 00 48 8b
[ 1169.546026][    C0] RSP: 0018:ffffc90000007ed8 EFLAGS: 00000046
[ 1169.546042][    C0] RAX: 0000000000000001 RBX: 000000000000000f RCX: 8000000000000102
[ 1169.546056][    C0] RDX: 8000000000000100 RSI: ffff8880b8428298 RDI: ffff8880550369e8
[ 1169.546071][    C0] RBP: ffff8880550369e8 R08: 0000000000000100 R09: 0000000000000001
[ 1169.546085][    C0] R10: 0000000000000003 R11: ffffffff81756510 R12: 0000000000000003
[ 1169.546099][    C0] R13: 0000000000000003 R14: ffff8880b8428298 R15: ffff888055035dc0
[ 1169.546116][    C0] FS:  0000000000000000(0000) GS:ffff888123abf000(0000) knlGS:0000000000000000
[ 1169.546132][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1169.546146][    C0] CR2: 000000110c3d783f CR3: 000000007e92a000 CR4: 00000000003526f0
[ 1169.546164][    C0] Call Trace:
[ 1169.546172][    C0]  <IRQ>
[ 1169.546181][    C0]  ? handle_softirqs+0x226/0x860
[ 1169.546211][    C0]  _raw_spin_unlock_irqrestore+0x1b/0x80
[ 1169.546239][    C0]  handle_softirqs+0x226/0x860
[ 1169.546266][    C0]  ? do_softirq+0x77/0xd0
[ 1169.546301][    C0]  ? __inet6_bind+0x386/0xf30
[ 1169.546326][    C0]  do_softirq+0x77/0xd0
[ 1169.546350][    C0]  </IRQ>
[ 1169.546356][    C0]  <TASK>
[ 1169.546364][    C0]  __local_bh_enable_ip+0x100/0x140
[ 1169.546390][    C0]  __inet6_bind+0x386/0xf30
[ 1169.546421][    C0]  kernel_bind+0x13e/0x1c0
[ 1169.546446][    C0]  ? __pfx_kernel_bind+0x10/0x10
[ 1169.546476][    C0]  ? rds_tcp_conn_path_connect+0x55a/0x920
[ 1169.546505][    C0]  rds_tcp_conn_path_connect+0x53b/0x920
[ 1169.546537][    C0]  ? __pfx_rds_tcp_conn_path_connect+0x10/0x10
[ 1169.546566][    C0]  ? lock_acquire+0x115/0x350
[ 1169.546592][    C0]  rds_connect_worker+0x1d8/0x290
[ 1169.546611][    C0]  ? process_scheduled_works+0x97a/0x1630
[ 1169.546638][    C0]  process_scheduled_works+0xc3d/0x1630
[ 1169.546681][    C0]  ? __pfx_process_scheduled_works+0x10/0x10
[ 1169.546711][    C0]  ? assign_work+0x3cf/0x5d0
[ 1169.546738][    C0]  worker_thread+0xa47/0xfb0
[ 1169.546781][    C0]  kthread+0x38b/0x480
[ 1169.546799][    C0]  ? __pfx_worker_thread+0x10/0x10
[ 1169.546825][    C0]  ? __pfx_kthread+0x10/0x10
[ 1169.546844][    C0]  ret_from_fork+0x514/0xb70
[ 1169.546865][    C0]  ? __pfx_ret_from_fork+0x10/0x10
[ 1169.546883][    C0]  ? __switch_to+0xc89/0x1420
[ 1169.546911][    C0]  ? __pfx_kthread+0x10/0x10
[ 1169.546930][    C0]  ret_from_fork_asm+0x1a/0x30
[ 1169.546957][    C0]  </TASK>
[ 1169.559074][T15564] bond7: (slave ip6gretap1): link status up, enabling it in 0 ms
[ 1169.993106][   T33] Kernel panic - not syncing: hung_task: blocked tasks
[ 1170.473723][   T33] CPU: 1 UID: 0 PID: 33 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[ 1170.482867][   T33] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[ 1170.493032][   T33] Call Trace:
[ 1170.496336][   T33]  <TASK>
[ 1170.499286][   T33]  vpanic+0x56d/0xa60
[ 1170.503323][   T33]  ? __pfx_vpanic+0x10/0x10
[ 1170.507883][   T33]  ? irqentry_exit+0x218/0x920
[ 1170.512693][   T33]  panic+0xc5/0xd0
[ 1170.516462][   T33]  ? __pfx_panic+0x10/0x10
[ 1170.520944][   T33]  watchdog+0x1030/0x1030
[ 1170.525315][   T33]  ? watchdog+0x1c7/0x1030
[ 1170.529768][   T33]  kthread+0x38b/0x480
[ 1170.533872][   T33]  ? __pfx_watchdog+0x10/0x10
[ 1170.538581][   T33]  ? __pfx_kthread+0x10/0x10
[ 1170.543204][   T33]  ret_from_fork+0x514/0xb70
[ 1170.547832][   T33]  ? __pfx_ret_from_fork+0x10/0x10
[ 1170.552979][   T33]  ? __switch_to+0xc89/0x1420
[ 1170.557694][   T33]  ? __pfx_kthread+0x10/0x10
[ 1170.562323][   T33]  ret_from_fork_asm+0x1a/0x30
[ 1170.567135][   T33]  </TASK>
[ 1170.570797][   T33] Kernel Offset: disabled
[ 1170.575145][   T33] Rebooting in 86400 seconds..