last executing test programs: 8.613138886s ago: executing program 1 (id=6061): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000020a010200000000000000000a0000060900010073797a310000000008000240000000018c000000020a010100000000000000000000000369000600e62807258a6d38caf4cb1d7a776a7a05e57912414e63207c5e61d47bb4016b21bd5593b033b0968722f2f0f4818a1a13fbb43e79d0ae674d071c0164df9d3701cc15211300766b6ebe326ada9e49cca5c2a07460e46e35eabfb48a4cd2cd83790d7e705b010000000900010073797a31000000001c000000090a030000000000000000000a00000208"], 0xf8}, 0x1, 0x0, 0x0, 0x2000c814}, 0x4000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000004000ffff0900010073797a30000000000900020073797a3100000000140003800800014000000000"], 0x138}, 0x1, 0x0, 0x0, 0x20040855}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd0002800800"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) (fail_nth: 6) 8.100726227s ago: executing program 1 (id=6064): r0 = socket$inet6(0xa, 0x80002, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE(0xffffffffffffffff, 0x50009401, 0x0) getsockopt$inet6_mptcp_buf(0xffffffffffffffff, 0x11c, 0x3, 0x0, 0x0) socket$inet6(0xa, 0x80002, 0x0) r2 = accept4$nfc_llcp(0xffffffffffffffff, 0x0, 0x0, 0x800) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000006000000020000002c0084802800018008000100666962001c0002800800024000000001080001400000000008000340000000110900010073797a3000000000090002"], 0x80}}, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000020a010200000000000000000a0000060900010073797a310000000008000240000000018c000000020a010100000000000000000000000369000600e62807258a6d38caf4cb1d7a776a7a05e57912414e63207c5e61d47bb4016b21bd5593b033b0968722f2f0f4818a1a13fbb43e79d0ae674d071c0164df9d3701cc15211300766b6ebe326ada9e49cca5c2a07460e46e35eabfb48a4cd2cd83790d7e705b010000000900010073797a31000000001c000000090a030000000000000000000a00000208000c4004"], 0xf8}, 0x1, 0x0, 0x0, 0x2000c814}, 0x4000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000004000ffff0900010073797a30000000000900020073797a3100000000140003800800014000000000"], 0x138}, 0x1, 0x0, 0x0, 0x20040855}, 0x0) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd0002800800"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r2, 0x118, 0x1, &(0x7f0000000540)=0x530, 0x4) r4 = socket$kcm(0x10, 0x3, 0x0) sendmsg$inet(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000080)="5c00000013006bec9e3be35c6e17aa31076b876c1d0000007ea60864160af36507001ac0043f020234000c0004000000eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d000", 0x4b}, {&(0x7f0000000100)="e8903b5f7f2ff044d2a8a35ab937c0e666", 0x11}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @empty, 0xffffffff}, 0x1c) r5 = socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x5, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000004830000000000000fa40000007010000080020007500feff000082009500"], &(0x7f0000000000)='GPL\x00', 0x4, 0xfa, &(0x7f0000000140)=""/250}, 0x94) bind$inet(r5, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x21) r6 = socket$igmp(0x2, 0x3, 0x2) sendmmsg$inet(r6, &(0x7f0000003e40)=[{{&(0x7f0000000180)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x39}}, 0x10, 0x0, 0x0, &(0x7f0000001440)=[@ip_retopts={{0x1c, 0x0, 0x7, {[@timestamp_prespec={0x44, 0xc, 0x5, 0x3, 0x5, [{@remote, 0x9}]}]}}}], 0x20}}], 0x1, 0x0) socket$rds(0x15, 0x5, 0x0) 7.908911233s ago: executing program 1 (id=6067): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000940)=ANY=[@ANYBLOB="4400000013002901800000000000000007000000", @ANYRES32=r1, @ANYBLOB="00000000000000011c001a800800058004000500080000003e"], 0x44}}, 0x0) 7.718953672s ago: executing program 1 (id=6068): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="b40000000000000061143c000008e569c646aca37af09141ed69000004000000000000009500000092dccfe6"], &(0x7f0000000080)='GPL\x00', 0x4, 0x3e0, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffff80, 0x10, &(0x7f0000000000), 0x76}, 0x48) r0 = socket(0x1d, 0x2, 0x6) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa2c"], 0xfdef) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r1, &(0x7f00000060c0)=[{{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000140)="40024193d18113b61f80858b31e7a81a015bd22a92ae499318e13855be8aafa30e46fbd1f5caabf496c0914c42b86d4747143e29cf011c3092566b783af5bcdcea090c5599d251b6509528c37c27f72d5a5dd3756f015b8c787fdb5f91", 0x5d}, {&(0x7f00000007c0)="7967fc", 0x3}, {&(0x7f0000000540)="e796825829f8a1d6c3293c79395ae15b8a95e2716fec5a83165fb3fc921096068b8528a92e2935f27a179090bbcc699334df808b6b7aae724a2bb4c359efacc84eaca60ac56b540d", 0x48}, {&(0x7f0000000300)="238beccb6a", 0x5}, {0x0}, {&(0x7f00000009c0)="7e1765", 0x3}, {&(0x7f00000006c0)="5a24db9776d2e4af28d72b1c1112cf4eb625ee92fca668fb882bfba9f56c46a4b28a25cfc63bf0904f31474b440eaaa568465c3e9c748adeccc5da1589f687df11f31914c0304ad3496732b5e479b856b3dfc0b5829c63a7093ef3f34258ff8ccea318755fbd0608ffb92071cb7f9f1989dc117924fa1d873c5ba279246d6d0ac70f212e2e5dbfb4ae770e8225daf71e8590f6ce4950863204e25256e37a6df7b0678ed87d8dd89752577cdbd2e8e3a9b9f888d14ede5f116fa485ca45961c1c57454f26a2f7d7ce385e", 0xca}], 0x7, &(0x7f0000006200)}}, {{&(0x7f0000001000)={0x2, 0x4e24, @rand_addr=0x64010101}, 0x10, &(0x7f00000035c0)=[{&(0x7f0000000800)="fc31f79cd38a279d05381b246582009186a88000e9f2c72e4b2f934229397b1774c04cf6e4b13b38e380045adf10fd1e2d0f7c5cdea52fc51ce4dc0a06e4e11edc8361970f5decf3fa4ecf677db43452a8dab8ad", 0x54}, {&(0x7f0000001080)="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", 0xd3f}, {&(0x7f0000002180)="2dd1", 0x2}, {&(0x7f0000002240)="52e8da01534b68eb517df185ded372b2df74fb80d9310eacd6ce72c95d0b9037c6572b7da359effd164297fce36fa377e7", 0x31}, {0x0}, {&(0x7f00000033c0)="c6a19f723c5b8c82ea8bf6f4c4e509930580", 0x12}, {&(0x7f00000034c0)="5bc6c2", 0x3}, {&(0x7f0000002080)="64824011397588d999f31dfd6821b05202aa677c", 0x14}, {&(0x7f0000003580)="949709d742", 0x5}], 0x9, &(0x7f0000003680)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x4}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xd}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast2, @multicast1}}}], 0x50}}, {{0x0, 0x0, &(0x7f0000003a00)=[{&(0x7f00000037c0)="f9e2dcf64a03da0a77e48a7ba72668c93696f1b19d12dc43e8b2b9149c41de374b02f9a530c477d7c54fa05a1149e6ab73ed257a44f9a21bf3949d037ddcb1224b25dd186f9e3ad6cb21c30b63d9ea16a82714", 0x53}, {&(0x7f0000003880)="3d8f2f300b6687174697", 0xa}, {&(0x7f0000003900)="cd52c0793e0c", 0x6}], 0x3}}], 0x3, 0x4000000) setsockopt$sock_int(r1, 0x1, 0x20, &(0x7f0000000000)=0x7fffffff, 0x4) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f00000002c0)={0x9c1, 0x7, 0x2, 0xb, 0x2, 0x786b, 0xfffffff8, 0x58}, 0x20) syz_80211_join_ibss(0x0, 0x0, 0x0, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f00000002c0)={'veth1_virt_wifi\x00', @random="0100000025b2"}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b80)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x4, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc}, 0x94) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000240)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x1300, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r4 = epoll_create(0x40) ioctl$F2FS_IOC_GET_COMPRESS_OPTION(r4, 0x8002f515, &(0x7f0000000100)) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r0, &(0x7f0000001840)={0x90000001}) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000380)={0x1d, r5, 0x1, {0x0, 0x0, 0x1}, 0xfd}, 0x18) sendmsg$inet6(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000280)="cdf9bd4d", 0x4}], 0x1}, 0x8801) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0) r6 = socket$inet6(0xa, 0x2, 0x3a) sendto$inet6(r6, &(0x7f0000000080)="800037bbfa9ba1ce", 0x8, 0x4000, &(0x7f0000001100)={0xa, 0x4e20, 0x0, @loopback={0xff00}, 0x7}, 0x1c) unshare(0x26020480) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) bind$inet6(r7, &(0x7f0000000640)={0xa, 0x4e20, 0x8, @dev={0xfe, 0x80, '\x00', 0x13}}, 0x1c) 6.879820303s ago: executing program 1 (id=6072): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) socket$kcm(0x2, 0x3, 0x2) r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_netrom_SIOCADDRT(r0, 0x8915, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1d19cb307b3472ab9cdb042d2", "643fcbb2c5a57df67d074af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000a47d0000000000000100000c22", @ANYRESOCT, @ANYRES32], 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070}, 0x94) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000014c0)=ANY=[@ANYBLOB="380000002300010324bd7002fadbdf25010000001800028014001c0000000000000003f86f161ed927187f830000000000ac1414bb00"/66], 0x38}}, 0xc004) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x2c, r4, 0x301, 0x70bd29, 0x25dfdbfc, {0x24}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8041}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) socket$inet6_sctp(0xa, 0x801, 0x84) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, 0x0, 0x8000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) ioctl$sock_netrom_SIOCDELRT(r0, 0x890c, &(0x7f00000003c0)={0x0, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bpq0, 0x49f9, 'syz1\x00', @default, 0x10001, 0x7, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @bcast, @default, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'macvtap0\x00'}) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x80c0) recvmmsg(r1, &(0x7f0000000940)=[{{0x0, 0x0, &(0x7f0000000540), 0x2}, 0x3}], 0x4000048, 0x406, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, 0x0, &(0x7f0000000040)='syzkaller\x00'}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x8, 0x1000000}, 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x94) 5.917650172s ago: executing program 1 (id=6075): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000b00)=@newtaction={0x60, 0x30, 0x871a15abc695fc3d, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_ctinfo={0x48, 0x1, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0x0, 0x0, 0x1000000}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x20014004}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000f000000050030000000000005002f000000000008", @ANYRES32=r4], 0x2c}}, 0x4000000) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x45) r6 = accept4(r5, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) readv(r6, &(0x7f0000000140)=[{&(0x7f0000000600)=""/152, 0x98}], 0x1) recvmmsg(r6, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) read$alg(r6, &(0x7f0000000080)=""/47, 0x2f) sendmmsg$unix(r6, &(0x7f00000000c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4004004}}], 0x1, 0xc000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000840}, 0x800) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000002000)=ANY=[], 0x0, 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x403, 0x70bd25, 0xffffffff, {0x0, 0x0, 0x0, 0x0, 0x4540}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x27b2}]}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000881}, 0x48004) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r2, 0x4058587a, &(0x7f0000000480)={{r2, &(0x7f00000000c0)='.:){\x00', 0xc0, &(0x7f0000000340)={@align=0x40, {0x9, 0x3, 0x982c, 0xfffffffffffffffc}}, 0x0, &(0x7f0000000380)={@_ha_fsid}, &(0x7f00000003c0)}, {[0xc179, 0xffffffff, 0x1, 0x7]}, 0xffff8000, 0xd4, &(0x7f0000000700)=""/212}) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYRESHEX=r2], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', r4}, 0x94) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000100)={0x2c, r8, 0x10ada85e65c25349, 0x70bd2a, 0x0, {{0x67}, {@val={0x8}, @val={0xc, 0x99, {0x8, 0x27}}}}, [@NL80211_ATTR_TID_CONFIG={0x4}]}, 0x2c}}, 0x6048004) sendmsg$NL80211_CMD_DEL_STATION(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000680)={&(0x7f0000000800)={0x6c, r8, 0x8, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x7, 0x1b}}}}, [@NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x3}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x3}, @NL80211_ATTR_STA_PLINK_ACTION={0x5, 0x19, 0x2}, @NL80211_ATTR_STA_WME={0x1c, 0x81, [@NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x4}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x3}, @NL80211_STA_WME_UAPSD_QUEUES={0x5}]}, @NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xa}, @NL80211_ATTR_STA_VLAN={0x8}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x3}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4}, 0x20040040) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r10 = socket$packet(0x11, 0x3, 0x300) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[], 0x58}, 0x1, 0x0, 0x0, 0x20040001}, 0x8000) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8b04, &(0x7f0000000040)={'wlan0\x00'}) 3.333004043s ago: executing program 0 (id=6088): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)={0x34, 0x40, 0x1, 0x7fffc, 0x4, {0x1}, [@nested={0x4, 0x48}, @nested={0x14, 0x1, 0x0, 0x1, [@nested={0x10, 0x10, 0x0, 0x1, [@typed={0x6, 0x9, 0x0, 0x0, @str=':\x00'}, @generic="18c65db2"]}]}, @typed={0x8, 0x2, 0x0, 0x0, @fd=r0}]}, 0x34}, 0x1, 0x0, 0x0, 0xf558ef4a3515ffc3}, 0x4008094) 3.196753647s ago: executing program 0 (id=6089): socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) socket$alg(0x26, 0x5, 0x0) ioctl$AUTOFS_IOC_PROTOVER(0xffffffffffffffff, 0x80049363, &(0x7f0000000040)) socket(0x400000000010, 0x3, 0x0) r0 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="300000001000010029bd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="211000000300000008001b000000000008000400000500003ad6e478d7ce2299757d1f9fd91d29157621d81527765dd0ff981c1e7ce2e9b90644aab86d792f1b81e0801d04a20375f7fc6cec0d79ad9d4c6b95a652873ee1ce50d36e9944f0"], 0x30}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) 2.947782321s ago: executing program 3 (id=6091): socket$nl_generic(0x10, 0x3, 0x10) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}, 0x2}}, 0x26) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r0) getsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x4, &(0x7f0000000680), 0xfffffffffffffffc) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) r1 = openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$caif_seqpacket(0x25, 0x5, 0x5) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000880), r2) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r4], 0x1c}}, 0x840) write$nci(r1, &(0x7f0000000100)=ANY=[@ANYRES32=r3], 0x13) 2.756322648s ago: executing program 0 (id=6093): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) socket$packet(0x11, 0x2, 0x300) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001980)={&(0x7f0000009b80)=@newchain={0x24, 0x64, 0x300, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x7, 0xfff2}, {0xf, 0xffff}, {0xa, 0x1ffe4}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x600, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="440000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000008001b000000000004001a80180002"], 0x44}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x1400) unshare(0x400) socket$kcm(0xa, 0x3, 0x73) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x40010160) 2.742475764s ago: executing program 3 (id=6094): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)={0x38, r1, 0x1, 0x70bd2d, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x81, 0x200, 0x153e, 0x6, 0x3, 0x9, 0x6, 0x5]}}]}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x4000040) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) r4 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r3}, 0x8) close(r4) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000600)={@cgroup=r5, r5, 0x2f, 0x1c, 0x4}, 0x20) 2.175549456s ago: executing program 3 (id=6098): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000740)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="77ba00000000000000001f001600080001"], 0x48}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) 2.092955411s ago: executing program 4 (id=6099): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)={0x34, 0x40, 0x1, 0x7fffc, 0x4, {0x1}, [@nested={0x4, 0x48}, @nested={0x14, 0x1, 0x0, 0x1, [@nested={0x10, 0x10, 0x0, 0x1, [@typed={0x6, 0x9, 0x0, 0x0, @str=':\x00'}, @generic="18c65db2"]}]}, @typed={0x8, 0x2, 0x0, 0x0, @fd}]}, 0x34}, 0x1, 0x0, 0x0, 0xf558ef4a3515ffc3}, 0x4008094) 2.090580151s ago: executing program 3 (id=6100): close(0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') socket$kcm(0x10, 0x2, 0x4) close(0x3) socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001800)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="03000000000402001c0012800c0001006d6163766c616e000c000280080001000800000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x4c}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) 2.072956743s ago: executing program 0 (id=6101): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) socket$kcm(0x2, 0x3, 0x2) r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_netrom_SIOCADDRT(r0, 0x8915, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1d19cb307b3472ab9cdb042d2", "643fcbb2c5a57df67d074af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000a47d0000000000000100000c22", @ANYRESOCT, @ANYRES32], 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070}, 0x94) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000014c0)=ANY=[@ANYBLOB="380000002300010324bd7002fadbdf25010000001800028014001c0000000000000003f86f161ed927187f830000000000ac1414bb00"/66], 0x38}}, 0xc004) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x2c, r4, 0x301, 0x70bd29, 0x25dfdbfc, {0x24}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8041}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) socket$inet6_sctp(0xa, 0x801, 0x84) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x8000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) ioctl$sock_netrom_SIOCDELRT(r0, 0x890c, &(0x7f00000003c0)={0x0, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bpq0, 0x49f9, 'syz1\x00', @default, 0x10001, 0x7, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @bcast, @default, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'macvtap0\x00'}) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x80c0) recvmmsg(r1, &(0x7f0000000940)=[{{0x0, 0x0, &(0x7f0000000540), 0x2}, 0x3}], 0x4000048, 0x406, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, 0x0, &(0x7f0000000040)='syzkaller\x00'}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x8, 0x1000000}, 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x94) 2.002586356s ago: executing program 4 (id=6103): socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4e22, 0xcc15, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x9}, 0x1c) socket$xdp(0x2c, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(0x0) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0xf3a, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000380)=[{0x0}], 0x1, 0x0) ioctl$BTRFS_IOC_SET_FEATURES(0xffffffffffffffff, 0x40309439, &(0x7f0000000280)={0x3, 0x1, 0xb}) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz0\x00', 0x1ff) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r3, &(0x7f0000000140)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) writev(r3, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x11) shutdown(r3, 0x1) write$cgroup_int(r2, &(0x7f0000000200)=0x10001, 0x12) sendfile(r2, r1, 0x0, 0xf03a0005) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a44, 0x1700) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000009b80)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x38, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFT_MSG_DELSETELEM={0x28b8, 0xe, 0xa, 0x301, 0x0, 0x0, {0x0, 0x0, 0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x2890, 0x3, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0x4}, @NFTA_SET_ELEM_USERDATA={0x4}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x6}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0xf}]}, {0x2a4, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_DATA={0x254, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x26, 0x1, "44126097e174f6b0d440804b146a60ecc25cdaa1951ce7cf3d69f7100bb028675391"}, @NFTA_DATA_VALUE={0x75, 0x1, "6e0414f564ec1135b47176782dd0cb97a252f504471cf4ef0733cd3c4c030f672e7ed1ffecb26df96e85239f587541a035ba1e46cfde2a2df6442c5d7f17f76d1dcefd6920371b2911b1bfaa37046e671af78a806503c8f6ae9a89ee498b9b657d02d9de7035a129350ae3be5917d7acb1"}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VALUE={0xc1, 0x1, "d73542c204261d29880f8c90d6bbb7e15b1b9c60970fecc7661cd9193f7ed846242986860e80812897b390e769529c4ccedf74d9a5d388b10fc2ba347411e60be80bb0614a113dd2176cbeb971b84ad975a038214e8fee2b1999b976a640044d4f2f2fab7d1e650aec96b0acc56783647795a9ca7d8de50a053c407605efafba84a09c285ec6ee09c94f66286d588d51bf71a53de3e3ef8ec39c9cd0134c4ae1d54f71bc6a8f4988000f1ec783e0e03a2a29aa1504ba06b1baee3e84a8"}, @NFTA_DATA_VERDICT={0x54, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VALUE={0x1e, 0x1, "0aa6b692121d050fffc5ba5d9bd6b377767018fdc7572b7c1941"}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x5}, @NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @match={{0xa}, @void}}, @NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @inner={{0xa}, @void}}]}, {0x368, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x8}, @NFTA_SET_ELEM_DATA={0x68, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VERDICT={0x48, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8}]}]}, @NFTA_SET_ELEM_EXPRESSIONS={0x2c4, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @hash={{0x9}, @void}}, {0x14, 0x1, 0x0, 0x1, @connlimit={{0xe}, @void}}, {0x214, 0x1, 0x0, 0x1, @dynset={{0xb}, @val={0x204, 0x2, 0x0, 0x1, [@NFTA_DYNSET_EXPRESSIONS={0xbc, 0xa, 0x0, 0x1, [{0xb8, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0xa8, 0x2, 0x0, 0x1, [@NFTA_INNER_EXPR={0x14, 0x5, 0x0, 0x1, @immediate={{0xe}, @void}}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0x19}, @NFTA_INNER_EXPR={0x4c, 0x5, 0x0, 0x1, @payload={{0xc}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x84}, @NFTA_PAYLOAD_SREG={0x8, 0x5, 0x1, 0x0, 0x15}, @NFTA_PAYLOAD_CSUM_TYPE={0x8, 0x6, 0x1, 0x0, 0x2}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x2c}, @NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0x15}, @NFTA_PAYLOAD_BASE={0x8}]}}}, @NFTA_INNER_EXPR={0x14, 0x5, 0x0, 0x1, @immediate={{0xe}, @void}}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0xa6}]}}}]}, @NFTA_DYNSET_SREG_KEY={0x8, 0x4, 0x1, 0x0, 0x10}, @NFTA_DYNSET_EXPR={0x50, 0x7, 0x0, 0x1, {{0xb}, @val={0x40, 0x2, 0x0, 0x1, [@NFTA_LOOKUP_SREG={0x8}, @NFTA_LOOKUP_SET_ID={0x8}, @NFTA_LOOKUP_SREG={0x8, 0x2, 0x1, 0x0, 0x10}, @NFTA_LOOKUP_DREG={0x8}, @NFTA_LOOKUP_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_LOOKUP_SET={0x9, 0x1, 'syz0\x00'}, @NFTA_LOOKUP_DREG={0x8, 0x3, 0x1, 0x0, 0x14}]}}}, @NFTA_DYNSET_EXPRESSIONS={0xd8, 0xa, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @masq={{0x9}, @void}}, {0x60, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x4c, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8}, @NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0xce756db776511cab}, @NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_IMMEDIATE_DATA={0x30, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}}}, {0x10, 0x1, 0x0, 0x1, @meta={{0x9}, @void}}, {0xc, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @void}}, {0x38, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0xe}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x15}, @NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0x14}, @NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0xb}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x13}]}}}, {0x10, 0x1, 0x0, 0x1, @tunnel={{0xb}, @void}}]}, @NFTA_DYNSET_SET_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_DYNSET_SREG_KEY={0x8, 0x4, 0x1, 0x0, 0x15}]}}}, {0x10, 0x1, 0x0, 0x1, @target={{0xb}, @void}}, {0x10, 0x1, 0x0, 0x1, @reject={{0xb}, @void}}, {0x10, 0x1, 0x0, 0x1, @masq={{0x9}, @void}}, {0x58, 0x1, 0x0, 0x1, @range={{0xa}, @val={0x48, 0x2, 0x0, 0x1, [@NFTA_RANGE_TO_DATA={0x14, 0x4, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}]}, @NFTA_RANGE_OP={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_RANGE_SREG={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_RANGE_OP={0x8}, @NFTA_RANGE_SREG={0x8, 0x1, 0x1, 0x0, 0x16}, @NFTA_RANGE_OP={0x8}, @NFTA_RANGE_OP={0x8, 0x2, 0x1, 0x0, 0x1}]}}}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x9}, @NFTA_SET_ELEM_EXPRESSIONS={0x20, 0xb, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @ct={{0x7}, @void}}, {0x10, 0x1, 0x0, 0x1, @dynset={{0xb}, @void}}]}]}, {0x44c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0x60, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VERDICT={0x4}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x80000001}, @NFTA_SET_ELEM_KEY_END={0x2a4, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x95, 0x1, "df1fc0bb9a62c41ce99a96724660d00899844e39ed7824f5823e0d90e257063a5699add6a1f9c90618f7dce17570461fc4cf4da4c8af861f3614a74d967a60670d5083c0fdad23f1caa7b03aa01a90098fdcdb54abf7d5f181c363e65ca48e3c29fb144f21d7857a5e723f0cb4dae4e7b53506b4a15b2fbd3a266e5d43d0c6723bdd836bcbea8384f1ece40263794fcf04"}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VALUE={0x15, 0x1, "691c0d68d8c0c29527fc212e8a0542803a"}, @NFTA_DATA_VALUE={0x80, 0x1, "741b591e4af0a57b368b10ffd85f8353381b0bb5c5ccf781b2e5a519a0854e543c5a9573e620f2fd7ee6ae86b2b1b7354c6c73ac387ea68f3587f0fc17bdd160659c7bde6cf438f0bed844a1239be775b89cba70c947d13a3eea8b43776b3be1aa9db983b89537bfb04669f9a26e92ef137850c5bb7865c871448850"}, @NFTA_DATA_VALUE={0xcf, 0x1, "9a7a5ad88c2716e2e59ca2b7ee2cbce7379aae232cce1816019cad047a084af0fc6048fdea235dfe476a43944cc82311f7e27b7b544372d427a11fdf63cfadc8c8fc588c06a72e07c695be6a26978229e3916e5838aece1c9c1138c410f84e20fa040292d67c53f67d28fb819fa33b678e88b3e3e559d339755cc69f82a9e0d82d891fe39be51bf718f54e1dc81c6505e5ce0d367cc3776b5507752335943a7dd3f99d56d31acd78ca9777f63d4277dc29047b82dacfb371b179fc23396542572c77a00b327c9eead082b7"}, @NFTA_DATA_VERDICT={0x44, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VERDICT={0x48, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}]}, @NFTA_SET_ELEM_DATA={0x14, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}]}, @NFTA_SET_ELEM_EXPRESSIONS={0x24, 0xb, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @byteorder={{0xe}, @void}}, {0xc, 0x1, 0x0, 0x1, @ct={{0x7}, @void}}]}, @NFTA_SET_ELEM_EXPRESSIONS={0x4}, @NFTA_SET_ELEM_USERDATA={0xfa, 0x6, 0x1, 0x0, "0bfdcdbe25c9b0e1b8a16b5195be76ced3fc4e67b542f735a4f3ef4d8d464511e45b9b914999ae9b2aae3ea8c2927c38f74c2211165c25da35d8f76d740509f765ec565b0f7a8fa9dcae4bb4b86a38eabfc6bb3a9f32c0a6cb0c94c1e8281419c03b229c46b188b31d2a369c3bd680e8e14ed22c20ee254102ed9e20f842a96d008bf6319843185160944121c17ab247e17df10f17cad8d62a2e432e55099f2bfbdabac4641f31a9a7fbd54c14fdc071523a5656f4bbafde683596dc8d19ee4738ba44041dd5395a5f3fd205a50d59ca2123cdf33ea7f29ca19030d97a28c86a2f32a4afa8a5ee477b78460ccadb1d314a54998a47e7"}]}, {0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}]}, {0x50c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0x88, 0xb, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @lookup={{0xb}, @val={0x4}}}, {0x10, 0x1, 0x0, 0x1, @reject={{0xb}, @void}}, {0x60, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x50, 0x2, 0x0, 0x1, [@NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x1}, @NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x2}, @NFTA_QUOTA_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x100}, @NFTA_QUOTA_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_QUOTA_CONSUMED={0xc, 0x4, 0x1, 0x0, 0x8000}, @NFTA_QUOTA_CONSUMED={0xc, 0x4, 0x1, 0x0, 0xc}]}}}]}, @NFTA_SET_ELEM_KEY={0x3b8, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xcd43c5158346d8c9}]}, @NFTA_DATA_VALUE={0x9f, 0x1, "f82060d9f17642156281e36e65f2de8a9c2173bf5cd6a477c78955d666e64319f8736cbf0c750f54f5b6c9640cb4d49600aeb39ef2cd92ffbe7b045450de682ef7d62ff45d8a59db2eb70cb8decf5055b08bf0980cec9bcf1a28f8910c0b50ac5e754a598693b88a01f3e0efbad3a7e71154163ac764c7d31b0717ad5b1d3c42e7888c61f9a7544bc27e88fe7fdb8c0c424976fc6b4eaad35b11b7"}, @NFTA_DATA_VERDICT={0x50, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0xbd, 0x1, "7f1be3a560247d2e47af3b302b465c564ba799da21a93fe951fe21639616c2b510eb39b01ca58643b78b829960cc984f0041a46904d179c3dc871547b9219a6fed2e1b9d74aaa63183cfb7ab456f189b1e83edf9520d640463885d1e71013621367e2290ff1a8ab4a8e0d4220d01f4055930dfdf8865e2dce50415c3565fe937a55ce08bca95d0c0f55302962f9b1d030dd5d1b6a9b4ce2ec963a060acd7082c42c08ed5ec5843d70e184908242cdc512726b3753f95d92a37"}, @NFTA_DATA_VALUE={0xab, 0x1, "8d4978ade942017cd2a5bf4a41569810c566202ea013d7fa7082b5bbae5158c202a4471a2597440058565d54210db4d85fc2fa1a3915047951cd8a1d881ed3a019cfffa7a6383479c15b588d164ab922c16dc37668d66891db9a6977e2f5b70a74275c2a41267706b8e8810b1945007f2ce2c073490b653358df014a6751eb6048b3dcd35bec1232d6ef034880c72d528c527c82f913c246fa72116a227c1ca64302f7199ee874"}, @NFTA_DATA_VALUE={0xac, 0x1, "7249331db47ec9dbcfdf5c371e182fc786fbe4c6f719587add6842bf33a0110fb00222c933bda9a22497af8265200103aedc22f036a64ca65c956cd2d7292df44aa82a85568dbff8a237debabcaaf892dda320438034e36a966b83b044ad6dcd764acd3477dac1193ec04bcffbf22a2bd3d65979652f3395fb1a63dda09dd0d9fb1f34abd36ee6f81f8d07a8731e632ae790763ea632765abbbbfa0c963998658cd6b99cc9e6778b"}, @NFTA_DATA_VALUE={0x71, 0x1, "ec863f2136e17106179105ffe311f8ec77fab141c2fe7625b86ec06d24b58065ac3702f0e796e3d40cb2cb0a42bbc08c3e595834971ab0a69499e79e571d819187fcc308f34703231ea1df468cc002dd00414f0f554105a6268261ba4fa4a519acadacd6d2913c2580fffd055d"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}]}, @NFTA_SET_ELEM_EXPRESSIONS={0x6c, 0xb, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @nat={{0x8}, @void}}, {0x3c, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_REDIR_REG_PROTO_MIN={0x8, 0x1, 0x1, 0x0, 0xd}, @NFTA_REDIR_REG_PROTO_MIN={0x8, 0x1, 0x1, 0x0, 0x15}, @NFTA_REDIR_REG_PROTO_MAX={0x8, 0x2, 0x1, 0x0, 0x16}, @NFTA_REDIR_FLAGS={0x8, 0x3, 0x1, 0x0, 0x46}, @NFTA_REDIR_REG_PROTO_MIN={0x8, 0x1, 0x1, 0x0, 0x9}]}}}, {0x20, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x1}]}}}]}, @NFTA_SET_ELEM_KEY_END={0x48, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4}, @NFTA_DATA_VALUE={0x4}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VALUE={0xb, 0x1, "3c5eca1c48c5c7"}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}]}, {0x1c8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0x7a, 0x6, 0x1, 0x0, "0c7ed8bc286b21ebb74107777ed4b99dd2f4bf9ce2f2d820a836e58c5e1d5a31d5713dc043a8e1730cbde4a4041fb7add14d98719e4c1f90058a79113b1710cb756b86d1b62434e1f854d4353a7cb738e594de0885983bd55a56f48be45c2ff6c714838558b914d0b65e1f7e3a546455945335d9bb7d"}, @NFTA_SET_ELEM_EXPRESSIONS={0x50, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @range={{0xa}, @void}}, {0x3c, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_REDIR_REG_PROTO_MIN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_REDIR_REG_PROTO_MIN={0x8, 0x1, 0x1, 0x0, 0x15}, @NFTA_REDIR_REG_PROTO_MAX={0x8}, @NFTA_REDIR_REG_PROTO_MIN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_REDIR_FLAGS={0x8, 0x3, 0x1, 0x0, 0x33}]}}}]}, @NFTA_SET_ELEM_KEY={0xf0, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VALUE={0xab, 0x1, "8a90df11f5fc3f81a9cc15c6cdf79d2e045f26b10ed2f813f8cd0f4d566c517517214b73ddd7a771c91bc6f45f5d552ddaf9d88b9978920ca63050ce332a4b67b8683979f7ecbe124c017bcaff739657b2a5e1293be034ad07e0f9d1da0d013d50263572ada067653fb17136aa93ffdec593ab6167aee692c674fd11c7df4b2317361eac0741ae63f984fbe6e5f73ca704a7cad9c0651d90a5d1aab87148b7846d131554dfac18"}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VERDICT={0x4}, @NFTA_DATA_VERDICT={0x4}, @NFTA_DATA_VERDICT={0x4}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}, {0x1730, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0x16c, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0x41, 0x1, "a18954313c31743b3615f60296d2acc4a50bda0743b219e6320ea5db4f8d882c109499c57b2c1b6bd79696e4e00c4e1c56400f11ac3aa26d7140a6e9a8"}, @NFTA_DATA_VALUE={0x74, 0x1, "80fcaa6121eeb5b97ec831b0b06268a78130ef9fdf33d72fe375c1eedd89f858f974073763f52e49b91387b9583cc6a1abdafd416489fd850fd7c897f91df46c2df48cb56a143dbaf4528083bd47979a636938ee733d46e861ad59f61540aab28edcc33791ac6ede887d647249272070"}, @NFTA_DATA_VALUE={0x8, 0x1, "65ce0f9c"}, @NFTA_DATA_VALUE={0xe, 0x1, "5380b76f8943e01607f6"}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VERDICT={0x50, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VALUE={0x4}]}, @NFTA_SET_ELEM_KEY_END={0x1c, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPR={0x24, 0x7, 0x0, 0x1, @redir={{0xa}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_REDIR_REG_PROTO_MIN={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_REDIR_REG_PROTO_MIN={0x8, 0x1, 0x1, 0x0, 0x14}]}}}, @NFTA_SET_ELEM_DATA={0x1bc, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x2a, 0x1, "01eaff98547575e3491a010450097e22698555278850c4cd1a7e41e8ec6bb13794f36d184326"}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VALUE={0x9b, 0x1, "739517302d6f6c830a99ba0b990350e2ac2c90ad8b7c78ce9b3e34dacca7ddf80a9883e163030ad98a10be5bd981f92831a28bf6cd78eec81f4f2aedb1cb0027b052484b11ae5871dba0095f233a5b2a6120b7ac5545342d9457742109628a516e2c42d240caf5b0172b74ffbd7e0fe428b5effdfbb0ead32be2d22de0fa1ee2cd33cdcb1b2eee9ff8a1da807709b6ec5c0209191b1eb8"}, @NFTA_DATA_VALUE={0x8e, 0x1, "100cdc8749270538c809f08cfa8b1d3da11e8359dcee55f1d95a5c2d2f17e2109d3cc8ee3510ab5680b48237be9909e1dede2b50e77b03d30e03fed4fb32e54b5b2363578102fabdefa599f61d154b52309fa38a4b3e22a557b3c11b3961a4c3e6372a11e18c076992aad1fbbd8eb40a6edbe7102f8fdd4d1fda3026591a0d55b770e9dd154fc9e9073b"}, @NFTA_DATA_VALUE={0x35, 0x1, "03118142be55cf694c6bebc42bc060e4cfa2135ed1a2e43f0f6cdc33483540a4d768dbd14d0592c19422c9061501f616d6"}]}, @NFTA_SET_ELEM_EXPR={0x135c, 0x7, 0x0, 0x1, @range={{0xa}, @val={0x134c, 0x2, 0x0, 0x1, [@NFTA_RANGE_FROM_DATA={0x2f4, 0x3, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x58, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VALUE={0xce, 0x1, "2c640cb24331b069e3ad14dd17b50a67c9d835a800cbf597cc52bf9e59eb5c0095d53da28c23d3d118523d1bd2b70d5bf74bee1a3de49cd2927207d489053fb1ec81a11317347546cb4d13a5cadfc919ba05c882780bb2617382716d06c7ebf52f3f8ac0523110e8dd8add15d7c84c881a0a84bc4df3a0f597c4dc23c3de2fa22ecd3ace9e058aa0c590d29d59ee6725f4c1d4acbec91f2a370dc92e68d579f3d29ec6f45ae1e34db6b8e1011dc629adea280f10274d98ced6dc011a748be7480972f1150406c0c90da3"}, @NFTA_DATA_VALUE={0xf4, 0x1, "e79bed69a73a3841634417cf6ded666997469389ac580897805cddf0dfb324e71deb3078777fe1cfe496a75e1ae3ee776515835532ef48416519ae7d44a65be5696224a689702d7acbebb1b6e9e3f3dbfc03b1a87e9b29cc276f63d6e354a669ffc29224768452201c9644c82bdf9395a51f5127e247d528cc1d8f4475a889998edbd692ed7291a275e22f244206a7b74fcab11f032c8dea1f0d8b534be4f33cddaa435ecf562fe4e40f6f2971fa2ba4091c0541abf38d9712ad102f536381b9ee6defe02551c6a5d9273596839019780781c93e3f689b1be8c5c2d49d44bd8923617b131334110aa6d1c536b88eb006"}, @NFTA_DATA_VALUE={0x4b, 0x1, "d8c3a7a9be331d860d29065f425a6170f184f4ce039b3fcbcdf4c28a802c7914166b8a9885bca6d5c937b79cd8551dcf220fad8253f4c744523c47d5a2a3703cf69a96a3e0d226"}, @NFTA_DATA_VALUE={0x68, 0x1, "7d3fbe9cdddecf43eea6aff96c49c8fca6766c889919636be870bec5c4cbb39a2b8df94287cd25df12757a8c77f8dba272b6fd9b8d1ac49ddb755089c046d94c6e71908473b2eaf8c3593cdfabe53ea8e588121a4ccf81a3274837212a42e17f5523eff8"}, @NFTA_DATA_VERDICT={0x20, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}]}, @NFTA_RANGE_FROM_DATA={0xe5c, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4}, @NFTA_DATA_VALUE={0x50, 0x1, "f1efb16426a5d56e7889f84e1b4d39514d15f071b2d046482f5c6cd2e8a8a7f8eb54749146488ef0f9c047df93a94769a8cb636ab650c1e68090a70b626704d5a98da427424e708fc8918ca5"}, @NFTA_DATA_VALUE={0xe02, 0x1, "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"}]}, @NFTA_RANGE_FROM_DATA={0x1d0, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5f, 0x1, "16f37efd896137dc2230cdd18f47d7e17189b4f08977288e22bbedb83d5d4b0ab3f44b991f958763a2145b351c7679f5383529254e3edd4431e72308fbe796fc4bd24fd8f2fa7fd00ba72464e8f8514d7d19de150d0231db907b57"}, @NFTA_DATA_VALUE={0xf8, 0x1, "3c3b038a4f426b68049c8fec7a7700bdd3a215e079f799ee63fd084aeede41bf0ed09fdf6abfd256b5865fdf1aacb7aa50e85075d12949cffd2ac130fffd32bfcb71d76c5fb0b42104b213e770c8070e4925ea9412be8a8afa07ca9507794663dc6e7c9721c440426b5fa61cc8161d4aabe62fce1bbc862776a46b7c493fda624f294865d29169bd21a04a81da474c109407b6c3f0aacae40fefc4b339f37b2144ec4f39e5ea237337ca96ec112ece2a57834ffe5ab3a787e9ed4c80b3c902b74937848f2d3e0e41e6e286e41e722846a8820585c5d70a7e9c5941a3a298bb2f8707e025fcb4103a13ced369f63c272095f994fe"}, @NFTA_DATA_VALUE={0x73, 0x1, "deef6de2ae30fd3473e2c097243d03564e462c89a8d244cd3f6a681323398c1ba5c045cb85727d110b0b9a006f9cb896686b7eab07add3e9323159580c39ae53b3b645d384b9a054e271e8dacfb98198af5d56d743c142d91a7e7ab97ad01d3fd54830c5ff5ab5a30724f64b846110"}]}, @NFTA_RANGE_OP={0x8}, @NFTA_RANGE_FROM_DATA={0x20, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x1b, 0x1, "872ae721dbe44bdb6ee037fba4e44113f3aeb8f5b6c3c6"}]}]}}}, @NFTA_SET_ELEM_EXPRESSIONS={0x60, 0xb, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_BURST={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_LIMIT_RATE={0xc}, @NFTA_LIMIT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x5}]}}}, {0x20, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_MATCH_NAME={0xc, 0x1, 'cluster\x00'}]}}}]}]}]}, @NFTA_SET_ELEM_LIST_SET_ID={0x8}]}, @NFT_MSG_DELSETELEM={0x2c, 0xe, 0xa, 0x201, 0x0, 0x0, {0xa}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x2944}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r7, 0x0, 0x4000084) write$cgroup_type(r6, &(0x7f00000000c0), 0x9) sendfile(r6, r4, 0x0, 0x10000) 1.764393404s ago: executing program 3 (id=6104): socket$nl_generic(0x10, 0x3, 0x10) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}, 0x2}}, 0x26) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r0) getsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x4, &(0x7f0000000680), 0xfffffffffffffffc) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) r1 = openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$caif_seqpacket(0x25, 0x5, 0x5) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000880), r2) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r4], 0x1c}}, 0x840) write$nci(r1, &(0x7f0000000100)=ANY=[@ANYRES32=r3], 0x13) 1.763801366s ago: executing program 2 (id=6105): socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) socket$alg(0x26, 0x5, 0x0) ioctl$AUTOFS_IOC_PROTOVER(0xffffffffffffffff, 0x80049363, &(0x7f0000000040)) socket(0x400000000010, 0x3, 0x0) r0 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="300000001000010029bd7000fddbdf2500ffffff", @ANYRES32=0x0, @ANYBLOB="211000000300000008001b000000000008000400000500003ad6e478d7ce2299757d1f9fd91d29157621d81527765dd0ff981c1e7ce2e9b90644aab86d792f1b81e0801d04a20375f7fc6cec0d79ad9d4c6b95a652873ee1ce50d36e9944f0"], 0x30}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) 1.696765896s ago: executing program 3 (id=6106): r0 = accept4$x25(0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000040)=0x12, 0x100800) ioctl$SIOCX25SFACILITIES(r0, 0x89e3, &(0x7f0000000080)={0x4c, 0x1, 0x7, 0x6, 0x8, 0x81}) r1 = socket$kcm(0x1e, 0x719db84c40870a72, 0x0) sendmsg$kcm(r1, &(0x7f0000000540)={&(0x7f0000000280)=@tipc=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000300)="80", 0x1}], 0x13}, 0x44) recvmmsg(r1, &(0x7f0000000a00)=[{{&(0x7f00000001c0)=@pppol2tpv3, 0x80, &(0x7f0000000400)=[{&(0x7f0000000240)=""/50, 0x32}, {&(0x7f0000000340)=""/135, 0x87}], 0x2, &(0x7f0000000700)=""/146, 0x92}, 0xf168}, {{&(0x7f00000007c0)=@nfc, 0x80, &(0x7f0000000440)=[{&(0x7f0000000840)=""/242, 0xf2}, {&(0x7f0000000940)=""/175, 0xaf}], 0x2}, 0x6}], 0x2, 0x2040, &(0x7f0000000580)={0x0, 0x989680}) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') unshare(0x6a040000) ioctl$BTRFS_IOC_DEFRAG(r2, 0x50009402, 0x0) r3 = socket$inet6(0xa, 0x80002, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) unshare(0x40000480) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f00000001c0)=0x6533, 0x4) connect$inet(r4, &(0x7f00000002c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$sock_int(r4, 0x1, 0x29, &(0x7f0000000000)=0x7b, 0x4) recvfrom$inet(r4, 0x0, 0x0, 0x2043, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r5 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r5, 0x0, 0x487, &(0x7f0000002100), &(0x7f0000000000)=0x30) connect$inet6(r3, &(0x7f0000002140)={0xa, 0x4e25, 0x1, @mcast2, 0x7}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) r6 = socket(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000180)={'gre0\x00', &(0x7f0000000040)={'erspan0\x00', 0x0, 0x7800, 0x1, 0x3, 0x6, {{0x2c, 0x4, 0x1, 0xa, 0xb0, 0x64, 0x0, 0xc, 0x29, 0x0, @remote, @multicast1, {[@ssrr={0x89, 0xb, 0x63, [@initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @timestamp_addr={0x44, 0x34, 0x4a, 0x1, 0x6, [{@local, 0x6}, {@dev={0xac, 0x14, 0x14, 0x1c}, 0xc8f}, {@multicast1, 0xff}, {@broadcast, 0x2}, {@remote, 0xc}, {@multicast2, 0x8}]}, @noop, @timestamp={0x44, 0x1c, 0xb7, 0x0, 0x5, [0x0, 0xffffffff, 0x8, 0x43, 0x80000001, 0x7fffffff]}, @lsrr={0x83, 0x17, 0xf, [@dev={0xac, 0x14, 0x14, 0x30}, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010101, @dev={0xac, 0x14, 0x14, 0x30}]}, @generic={0x44, 0x10, "a263b6b846a853be63b19e5adc89"}, @ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0x13, 0x4, [@private=0xa010101, @multicast1, @loopback, @remote]}]}}}}}) sendmsg$nl_route(r6, 0x0, 0x0) recvmsg(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000005c0)=""/219, 0xdb}], 0x1, &(0x7f0000000480)=""/19, 0x13}, 0x40000010) r7 = accept4$netrom(0xffffffffffffffff, &(0x7f0000000100)={{0x3, @netrom}, [@default, @remote, @remote, @remote, @null, @netrom, @null, @null]}, &(0x7f0000000000)=0x48, 0x80000) setsockopt$netrom_NETROM_T1(r7, 0x103, 0x1, &(0x7f0000000180)=0x30, 0x4) 1.315816906s ago: executing program 2 (id=6107): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000140)={0x2, 0x3, 0x0, 0x3, 0xc, 0x0, 0xeff, 0x0, [@sadb_key={0x2, 0x9, 0x40, 0x0, "61449fffcd6281ae"}, @sadb_address={0x3, 0x6, 0x0, 0x20, 0x0, @in={0x2, 0x20, @private}}, @sadb_sa={0x2, 0x1, 0x4d3, 0x0, 0x0, 0x5, 0x2, 0xe0000000}, @sadb_address={0x3, 0x5, 0x3c, 0x0, 0x0, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}}]}, 0x60}, 0x1, 0x7}, 0x0) 1.095522834s ago: executing program 0 (id=6108): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) socket$packet(0x11, 0x2, 0x300) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001980)={&(0x7f0000009b80)=@newchain={0x24, 0x64, 0x300, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x7, 0xfff2}, {0xf, 0xffff}, {0xa, 0x1ffe4}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x600, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="440000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000008001b000000000004001a80180002"], 0x44}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x14000000) unshare(0x400) socket$kcm(0xa, 0x3, 0x73) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x40010160) 1.094716485s ago: executing program 2 (id=6109): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={0x0}, 0x1, 0x0, 0x0, 0x20000080}, 0x2400c814) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x6c}, 0x1, 0x0, 0x0, 0x1}, 0x0) r3 = socket(0x10, 0x803, 0x2) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=ANY=[@ANYBLOB="3000000040000100fefffffffbdbdf25017c0000040042800c00018006000600800a00a1bc000c000280080019800400"], 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0x800c000) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f00000003c0)=@req3={0x10000, 0x1, 0x100, 0x100, 0xe, 0x0, 0x8003}, 0x58) setsockopt$packet_int(r4, 0x107, 0xa, &(0x7f0000000a40)=0x2, 0x4) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYRES16=r3, @ANYRESHEX=r1, @ANYRESHEX=r4, @ANYRES64=r0, @ANYRESDEC=r4, @ANYRESDEC=r3, @ANYRES8=r1], 0x48) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x2c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={0xffffffffffffffff, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="55544f4661848c20dfdbd28891f4", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000005000000020000000400000005"], 0x48) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x15, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000100850000000100000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000010000850000008200000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={r7, 0xe0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x6, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x74, &(0x7f0000000600)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000680), &(0x7f00000006c0), 0x8, 0x2b, 0x8, 0x8, &(0x7f0000000700)}}, 0x10) r11 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000008c0)={0x1b, 0x0, 0x0, 0xa0000000, 0x0, r6, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x2, 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000001b40)={0x0, 0x23, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0xbb3, 0x0, 0x0, 0x0, 0x8}, [@map_val={0x18, 0x8, 0x2, 0x0, r9, 0x0, 0x0, 0x0, 0x9}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r6}}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x3}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0x9}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x9}}, @cb_func={0x18, 0x5, 0x4, 0x0, 0xfffffffffffffffb}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x1}, @generic={0x7, 0xa, 0x0, 0xb2, 0xffff0000}]}, &(0x7f0000000040)='syzkaller\x00', 0xffd5, 0x1000, &(0x7f0000000b40)=""/4096, 0x40f00, 0x68, '\x00', 0x0, @fallback=0x15, r7, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000140)={0x7, 0xc, 0x6, 0x200}, 0x10, r10, r7, 0x2, &(0x7f0000000940)=[r6, r11], &(0x7f0000000980)=[{0x4, 0x2, 0x1, 0x4}, {0x2, 0x2, 0xa, 0x8}], 0x10, 0x9}, 0x94) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x74, 0x0, {0x10, 0x10}, {0xfff1, 0xf950bf1007c934cc}, {0x5, 0x8}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x48044}, 0x40000) 849.568939ms ago: executing program 4 (id=6110): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)=@newtfilter={0x44, 0x28, 0x575ac7824d421509, 0x70bd29, 0x4, {0x0, 0x0, 0x0, r5, {0x9}, {0xffff}, {0x10, 0x5}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0xb, 0x4}}]}}, @TCA_RATE={0x6, 0x5, {0x0, 0x1}}]}, 0x44}, 0x1, 0x0, 0x0, 0x11}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x4, 0x3, &(0x7f0000000700)=ANY=[@ANYBLOB='1\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) r6 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r6, &(0x7f0000000140), 0x4924b68, 0x0) r7 = openat$cgroup_int(r1, &(0x7f0000000080)='hugetlb.2MB.failcnt\x00', 0x2, 0x0) pwrite64(r7, &(0x7f0000000380)='k', 0x1, 0xc) r8 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000180)={r0, r1, 0x28, 0x0, @void}, 0x10) r9 = bpf$ITER_CREATE(0xb, &(0x7f0000000040)={r8}, 0x8) close(r9) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000600)={@cgroup=r10, r10, 0x2f, 0x1c, 0x4}, 0x20) 848.038239ms ago: executing program 2 (id=6111): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffffff, 0x1, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xff90, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df33c9f7b9a60000000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 673.800352ms ago: executing program 2 (id=6112): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r0, &(0x7f0000000a40)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000200)="db", 0x1}], 0x1}}], 0x1, 0x40040) sendmmsg(r0, &(0x7f0000006b40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f00000014c0)='\t', 0x1}], 0x1, &(0x7f0000001880)=ANY=[], 0x10}}], 0x2, 0x4044044) 480.964175ms ago: executing program 4 (id=6113): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)={0x34, 0x40, 0x1, 0x7fffc, 0x4, {0x1}, [@nested={0x4, 0x48}, @nested={0x14, 0x1, 0x0, 0x1, [@nested={0x10, 0x10, 0x0, 0x1, [@typed={0x6, 0x9, 0x0, 0x0, @str=':\x00'}, @generic="18c65db2"]}]}, @typed={0x8, 0x2, 0x0, 0x0, @fd}]}, 0x34}, 0x1, 0x0, 0x0, 0xf558ef4a3515ffc3}, 0x4008094) 464.460325ms ago: executing program 0 (id=6114): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000003c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x4c, 0x4c, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x4}}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x20}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2, 0xc}}, @restrict={0x0, 0x0, 0x0, 0xb, 0x3}]}}, 0x0, 0x66}, 0x28) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f00000006c0)=0x81, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000240)={0xa, 0x4e21, 0x0, @mcast1, 0x80004}, 0x1c) socket$inet6(0xa, 0x5, 0x81) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendmsg$nl_route(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x200e3}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FLAGS={0x8, 0x3, 0x3}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0) 462.023465ms ago: executing program 2 (id=6115): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) r0 = socket$kcm(0x10, 0x2, 0x4) shutdown(0xffffffffffffffff, 0x1) sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3e7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00121000a6400d0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000013c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="050027bd7000000000000600000008000300", @ANYRES32=r4, @ANYBLOB="08004d01"], 0x24}, 0x1, 0x0, 0x0, 0x20040091}, 0x4) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x50, r2, 0x800, 0x70bd29, 0x4913, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x0, 0x18}}}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1ef}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x6}], @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x171b}]]}, 0x50}, 0x1, 0x0, 0x0, 0x20042094}, 0x8041) 360.132019ms ago: executing program 4 (id=6116): socket$nl_generic(0x10, 0x3, 0x10) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}, 0x2}}, 0x26) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r0) getsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x4, &(0x7f0000000680), 0xfffffffffffffffc) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$caif_seqpacket(0x25, 0x5, 0x5) r3 = syz_genetlink_get_family_id$nfc(0x0, r2) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r4], 0x1c}}, 0x840) write$nci(r1, &(0x7f0000000100)=ANY=[@ANYRES32=r3], 0x13) 0s ago: executing program 4 (id=6117): getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f00000003c0)={@loopback, 0x0}, &(0x7f0000000400)=0x14) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x18, 0x15, &(0x7f0000000540)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x11}, [@tail_call, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}]}, &(0x7f0000000600)='syzkaller\x00', 0x401, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x5, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000680)=[0x1, 0x1], &(0x7f00000006c0)=[{0x4, 0x4, 0x10, 0x5}, {0x1, 0x3, 0xb, 0x5}, {0x0, 0x5, 0xf, 0x8}], 0x10, 0xb}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f00000007c0)=ANY=[@ANYBLOB="e5ff00000000000071118200000000008510000002000000850000000500000095000000000000009500a50500000000", @ANYRES64=r1, @ANYRESHEX=0x0, @ANYRES64=r1, @ANYRES64], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', r0, @sk_skb, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r1}, 0x94) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x48, 0x0, 0x10, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DEST={0x34, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x6}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x100}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x9}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x9}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x40081c4}, 0x44000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001c00110c0000001400000f0007000000", @ANYRES32=r3, @ANYBLOB="800202000a000200577f0000aabb000020000e80"], 0x48}}, 0x40800) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100626f6e640000000018000280140008"], 0x48}}, 0x0) (async, rerun: 64) sendmmsg$inet(r4, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) (async, rerun: 64) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000000100), 0xffffffffffffffff) (rerun: 32) sendmsg$NBD_CMD_STATUS(r5, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000340)={&(0x7f0000000180)={0x20, r6, 0x20, 0x70bd2c, 0x25dfdbff, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x9}]}, 0x20}}, 0x4048040) kernel console output (not intermixed with test programs): obability 0, space 0, times 0 [ 641.895132][T22850] CPU: 1 UID: 0 PID: 22850 Comm: syz.2.5146 Not tainted syzkaller #0 PREEMPT(full) [ 641.895162][T22850] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 641.895175][T22850] Call Trace: [ 641.895184][T22850] [ 641.895194][T22850] dump_stack_lvl+0xe8/0x150 [ 641.895229][T22850] should_fail_ex+0x412/0x560 [ 641.895264][T22850] should_failslab+0xa8/0x100 [ 641.895294][T22850] __kmalloc_noprof+0xe8/0x760 [ 641.895319][T22850] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 641.895356][T22850] tomoyo_realpath_from_path+0xe3/0x5d0 [ 641.895395][T22850] ? tomoyo_path_number_perm+0x219/0x630 [ 641.895421][T22850] tomoyo_path_number_perm+0x246/0x630 [ 641.895448][T22850] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 641.895477][T22850] ? __lock_acquire+0x6b5/0x2cf0 [ 641.895517][T22850] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 641.895562][T22850] ? __fget_files+0x2a/0x420 [ 641.895594][T22850] ? __fget_files+0x2a/0x420 [ 641.895624][T22850] ? __fget_files+0x3a0/0x420 [ 641.895653][T22850] ? __fget_files+0x2a/0x420 [ 641.895688][T22850] security_file_ioctl+0xc3/0x2a0 [ 641.895714][T22850] __se_sys_ioctl+0x47/0x170 [ 641.895743][T22850] do_syscall_64+0x14d/0xf80 [ 641.895762][T22850] ? trace_irq_disable+0x3b/0x150 [ 641.895794][T22850] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 641.895816][T22850] ? clear_bhb_loop+0x40/0x90 [ 641.895843][T22850] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 641.895866][T22850] RIP: 0033:0x7f84ac59c799 [ 641.895887][T22850] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 641.895907][T22850] RSP: 002b:00007f84aa7f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 641.895930][T22850] RAX: ffffffffffffffda RBX: 00007f84ac815fa0 RCX: 00007f84ac59c799 [ 641.895955][T22850] RDX: 0000200000000100 RSI: 00000000400454ca RDI: 0000000000000004 [ 641.895970][T22850] RBP: 00007f84aa7f6090 R08: 0000000000000000 R09: 0000000000000000 [ 641.895984][T22850] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 641.895997][T22850] R13: 00007f84ac816038 R14: 00007f84ac815fa0 R15: 00007ffee307b398 [ 641.896032][T22850] [ 642.125389][T22850] ERROR: Out of memory at tomoyo_realpath_from_path. [ 642.207938][T22861] netlink: 'syz.4.5150': attribute type 1 has an invalid length. [ 642.259529][T22863] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5150'. [ 642.268929][T22863] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5150'. [ 642.355139][T22861] bond56: entered promiscuous mode [ 642.364941][T22861] 8021q: adding VLAN 0 to HW filter on device bond56 [ 642.481762][T22874] netlink: 'syz.2.5152': attribute type 11 has an invalid length. [ 642.517757][T22864] bond56: (slave bridge28): making interface the new active one [ 642.573162][T22864] bridge28: entered promiscuous mode [ 642.592556][T22864] bond56: (slave bridge28): Enslaving as an active interface with an up link [ 642.713340][T22883] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.5153'. [ 643.007059][T22892] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5157'. [ 643.288075][T22905] FAULT_INJECTION: forcing a failure. [ 643.288075][T22905] name failslab, interval 1, probability 0, space 0, times 0 [ 643.301066][T22905] CPU: 1 UID: 0 PID: 22905 Comm: syz.0.5162 Not tainted syzkaller #0 PREEMPT(full) [ 643.301094][T22905] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 643.301107][T22905] Call Trace: [ 643.301116][T22905] [ 643.301125][T22905] dump_stack_lvl+0xe8/0x150 [ 643.301162][T22905] should_fail_ex+0x412/0x560 [ 643.301196][T22905] should_failslab+0xa8/0x100 [ 643.301226][T22905] __kmalloc_noprof+0xe8/0x760 [ 643.301250][T22905] ? tomoyo_encode+0x28b/0x550 [ 643.301285][T22905] tomoyo_encode+0x28b/0x550 [ 643.301329][T22905] tomoyo_realpath_from_path+0x58d/0x5d0 [ 643.301372][T22905] ? tomoyo_path_number_perm+0x219/0x630 [ 643.301397][T22905] tomoyo_path_number_perm+0x246/0x630 [ 643.301426][T22905] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 643.301455][T22905] ? __lock_acquire+0x6b5/0x2cf0 [ 643.301496][T22905] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 643.301541][T22905] ? __fget_files+0x2a/0x420 [ 643.301576][T22905] ? __fget_files+0x2a/0x420 [ 643.301606][T22905] ? __fget_files+0x3a0/0x420 [ 643.301637][T22905] ? __fget_files+0x2a/0x420 [ 643.301672][T22905] security_file_ioctl+0xc3/0x2a0 [ 643.301698][T22905] __se_sys_ioctl+0x47/0x170 [ 643.301726][T22905] do_syscall_64+0x14d/0xf80 [ 643.301746][T22905] ? trace_irq_disable+0x3b/0x150 [ 643.301777][T22905] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 643.301806][T22905] ? clear_bhb_loop+0x40/0x90 [ 643.301852][T22905] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 643.301874][T22905] RIP: 0033:0x7ffba4d9c799 [ 643.301895][T22905] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 643.301915][T22905] RSP: 002b:00007ffba5c37028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 643.301939][T22905] RAX: ffffffffffffffda RBX: 00007ffba5015fa0 RCX: 00007ffba4d9c799 [ 643.301956][T22905] RDX: 0000200000000100 RSI: 00000000400454ca RDI: 0000000000000004 [ 643.301971][T22905] RBP: 00007ffba5c37090 R08: 0000000000000000 R09: 0000000000000000 [ 643.301986][T22905] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 643.301999][T22905] R13: 00007ffba5016038 R14: 00007ffba5015fa0 R15: 00007ffe6bea8cb8 [ 643.302035][T22905] [ 643.302058][T22905] ERROR: Out of memory at tomoyo_realpath_from_path. [ 643.574970][T22908] netlink: 'syz.4.5165': attribute type 142 has an invalid length. [ 643.586753][T22908] netlink: 48 bytes leftover after parsing attributes in process `syz.4.5165'. [ 643.841115][T22925] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5171'. [ 643.873798][T22929] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5171'. [ 644.030148][T22936] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5173'. [ 644.304994][ T49] net_ratelimit: 22 callbacks suppressed [ 644.305019][ T49] bond34: (slave bridge15): failed to get link speed/duplex [ 644.357144][T22951] FAULT_INJECTION: forcing a failure. [ 644.357144][T22951] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 644.401906][T22951] CPU: 1 UID: 0 PID: 22951 Comm: syz.0.5178 Not tainted syzkaller #0 PREEMPT(full) [ 644.401936][T22951] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 644.401949][T22951] Call Trace: [ 644.401958][T22951] [ 644.401968][T22951] dump_stack_lvl+0xe8/0x150 [ 644.402002][T22951] should_fail_ex+0x412/0x560 [ 644.402034][T22951] _copy_from_user+0x2d/0xb0 [ 644.402068][T22951] ___sys_sendmsg+0x1c6/0x360 [ 644.402093][T22951] ? __pfx____sys_sendmsg+0x10/0x10 [ 644.402153][T22951] ? __fget_files+0x2a/0x420 [ 644.402185][T22951] ? __fget_files+0x3a0/0x420 [ 644.402226][T22951] __x64_sys_sendmsg+0x1bd/0x2a0 [ 644.402250][T22951] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 644.402289][T22951] ? __pfx_ksys_write+0x10/0x10 [ 644.402326][T22951] do_syscall_64+0x14d/0xf80 [ 644.402347][T22951] ? trace_irq_disable+0x3b/0x150 [ 644.402378][T22951] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 644.402401][T22951] ? clear_bhb_loop+0x40/0x90 [ 644.402428][T22951] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 644.402450][T22951] RIP: 0033:0x7ffba4d9c799 [ 644.402471][T22951] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 644.402490][T22951] RSP: 002b:00007ffba5c37028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 644.402513][T22951] RAX: ffffffffffffffda RBX: 00007ffba5015fa0 RCX: 00007ffba4d9c799 [ 644.402530][T22951] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 644.402544][T22951] RBP: 00007ffba5c37090 R08: 0000000000000000 R09: 0000000000000000 [ 644.402559][T22951] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 644.402573][T22951] R13: 00007ffba5016038 R14: 00007ffba5015fa0 R15: 00007ffe6bea8cb8 [ 644.402607][T22951] [ 644.582642][ T3535] bond34: (slave bridge15): failed to get link speed/duplex [ 644.734702][ T49] bond34: (slave bridge15): failed to get link speed/duplex [ 644.844799][ T144] bond34: (slave bridge15): failed to get link speed/duplex [ 644.955383][ T49] bond34: (slave bridge15): failed to get link speed/duplex [ 644.991055][T22970] ip6t_rpfilter: unknown options [ 645.074129][ T3535] bond34: (slave bridge15): failed to get link speed/duplex [ 645.126493][T22973] bond43: entered promiscuous mode [ 645.132190][T22973] 8021q: adding VLAN 0 to HW filter on device bond43 [ 645.212757][T22978] 8021q: adding VLAN 0 to HW filter on device bond43 [ 645.241863][T22978] bond43: (slave ip6tnl5): The slave device specified does not support setting the MAC address [ 645.255401][T22978] bond43: (slave ip6tnl5): Error -95 calling set_mac_address [ 645.291133][ T49] bond34: (slave bridge15): failed to get link speed/duplex [ 645.389785][T22979] lo speed is unknown, defaulting to 1000 [ 645.415148][ T3535] bond34: (slave bridge15): failed to get link speed/duplex [ 645.424174][T22982] lo speed is unknown, defaulting to 1000 [ 645.432539][T22979] wlan1 speed is unknown, defaulting to 1000 [ 645.466334][T22974] lo speed is unknown, defaulting to 1000 [ 645.488572][T22982] wlan1 speed is unknown, defaulting to 1000 [ 645.502546][T22979] lo speed is unknown, defaulting to 1000 [ 645.524171][ T49] bond34: (slave bridge15): failed to get link speed/duplex [ 645.534433][T22974] wlan1 speed is unknown, defaulting to 1000 [ 645.634433][ T3535] bond34: (slave bridge15): failed to get link speed/duplex [ 645.944240][T23002] __nla_validate_parse: 5 callbacks suppressed [ 645.944260][T23002] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5194'. [ 645.958775][T23005] netlink: 240 bytes leftover after parsing attributes in process `syz.2.5194'. [ 646.041058][T23008] netlink: 211856 bytes leftover after parsing attributes in process `syz.3.5196'. [ 646.292271][T23022] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5200'. [ 646.302634][T23022] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5200'. [ 646.315239][T23022] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5200'. [ 646.347659][T23022] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5200'. [ 646.582147][T22974] lo speed is unknown, defaulting to 1000 [ 646.636195][T23039] FAULT_INJECTION: forcing a failure. [ 646.636195][T23039] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 646.679746][T23039] CPU: 0 UID: 0 PID: 23039 Comm: syz.0.5206 Not tainted syzkaller #0 PREEMPT(full) [ 646.679778][T23039] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 646.679793][T23039] Call Trace: [ 646.679803][T23039] [ 646.679813][T23039] dump_stack_lvl+0xe8/0x150 [ 646.679850][T23039] should_fail_ex+0x412/0x560 [ 646.679886][T23039] _copy_from_iter+0x1d3/0x1670 [ 646.679923][T23039] ? rcu_is_watching+0x15/0xb0 [ 646.679972][T23039] ? __pfx__copy_from_iter+0x10/0x10 [ 646.680012][T23039] ? __alloc_skb+0x4e5/0x7d0 [ 646.680044][T23039] ? skb_put+0x11b/0x210 [ 646.680078][T23039] pfkey_sendmsg+0x265/0x1120 [ 646.680119][T23039] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 646.680147][T23039] ? aa_sk_perm+0x6d5/0x900 [ 646.680181][T23039] ? __pfx_aa_sk_perm+0x10/0x10 [ 646.680206][T23039] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 646.680244][T23039] ? aa_sock_msg_perm+0xf1/0x1b0 [ 646.680273][T23039] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 646.680302][T23039] ____sys_sendmsg+0x972/0x9f0 [ 646.680334][T23039] ? __pfx_____sys_sendmsg+0x10/0x10 [ 646.680367][T23039] ? import_iovec+0x73/0xa0 [ 646.680403][T23039] ___sys_sendmsg+0x2a5/0x360 [ 646.680432][T23039] ? __pfx____sys_sendmsg+0x10/0x10 [ 646.680492][T23039] ? __fget_files+0x2a/0x420 [ 646.680524][T23039] ? __fget_files+0x3a0/0x420 [ 646.680567][T23039] __x64_sys_sendmsg+0x1bd/0x2a0 [ 646.680592][T23039] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 646.680623][T23039] ? __pfx_ksys_write+0x10/0x10 [ 646.680661][T23039] do_syscall_64+0x14d/0xf80 [ 646.680682][T23039] ? trace_irq_disable+0x3b/0x150 [ 646.680714][T23039] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 646.680737][T23039] ? clear_bhb_loop+0x40/0x90 [ 646.680765][T23039] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 646.680788][T23039] RIP: 0033:0x7ffba4d9c799 [ 646.680809][T23039] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 646.680829][T23039] RSP: 002b:00007ffba5c37028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 646.680853][T23039] RAX: ffffffffffffffda RBX: 00007ffba5015fa0 RCX: 00007ffba4d9c799 [ 646.680870][T23039] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 646.680884][T23039] RBP: 00007ffba5c37090 R08: 0000000000000000 R09: 0000000000000000 [ 646.680899][T23039] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 646.680912][T23039] R13: 00007ffba5016038 R14: 00007ffba5015fa0 R15: 00007ffe6bea8cb8 [ 646.680947][T23039] [ 647.239078][T22982] lo speed is unknown, defaulting to 1000 [ 647.564309][T23066] syzkaller1: entered promiscuous mode [ 647.589132][T23066] syzkaller1: entered allmulticast mode [ 647.688055][T23070] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.5216'. [ 647.808262][T23074] netlink: 'syz.1.5218': attribute type 1 has an invalid length. [ 647.912369][T23080] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5218'. [ 647.930555][T23084] netlink: 'syz.0.5221': attribute type 1 has an invalid length. [ 647.938555][T23080] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5218'. [ 648.148289][T23074] bond38: entered promiscuous mode [ 648.165643][T23074] 8021q: adding VLAN 0 to HW filter on device bond38 [ 648.360686][T23084] bond34: entered promiscuous mode [ 648.369322][T23084] 8021q: adding VLAN 0 to HW filter on device bond34 [ 648.403746][T23085] bond38: (slave bridge18): making interface the new active one [ 648.411857][T23085] bridge18: entered promiscuous mode [ 648.419490][T23085] bond38: (slave bridge18): Enslaving as an active interface with an up link [ 648.469934][T23091] bond34: (slave bridge18): making interface the new active one [ 648.477980][T23091] bridge18: entered promiscuous mode [ 648.487877][T23091] bond34: (slave bridge18): Enslaving as an active interface with an up link [ 648.644151][T23093] syzkaller0: entered promiscuous mode [ 648.649776][T23093] syzkaller0: entered allmulticast mode [ 650.286439][ T1096] net_ratelimit: 13 callbacks suppressed [ 650.286464][ T1096] bond34: (slave bridge15): failed to get link speed/duplex [ 650.412121][ T36] bond34: (slave bridge15): failed to get link speed/duplex [ 650.524194][ T36] bond34: (slave bridge15): failed to get link speed/duplex [ 650.661338][T23128] lo speed is unknown, defaulting to 1000 [ 650.674216][ T36] bond34: (slave bridge15): failed to get link speed/duplex [ 650.689500][T23128] wlan1 speed is unknown, defaulting to 1000 [ 650.711446][T23136] lo speed is unknown, defaulting to 1000 [ 650.718122][T23128] lo speed is unknown, defaulting to 1000 [ 650.794303][T23136] wlan1 speed is unknown, defaulting to 1000 [ 650.822011][ T36] bond34: (slave bridge15): failed to get link speed/duplex [ 651.007610][T23136] lo speed is unknown, defaulting to 1000 [ 651.081553][ T49] bond34: (slave bridge15): failed to get link speed/duplex [ 651.104586][T23142] syzkaller0: entered promiscuous mode [ 651.120146][T23142] syzkaller0: entered allmulticast mode [ 651.214339][ T1096] bond34: (slave bridge15): failed to get link speed/duplex [ 651.572768][ T36] bond34: (slave bridge15): failed to get link speed/duplex [ 651.628862][T23162] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 651.752242][T23165] __nla_validate_parse: 5 callbacks suppressed [ 651.752268][T23165] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5236'. [ 651.810078][T23166] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5236'. [ 651.924393][T23165] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5236'. [ 651.926461][T23166] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5236'. [ 651.970955][ T49] bond34: (slave bridge15): failed to get link speed/duplex [ 652.183534][T23178] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 652.258702][T23182] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5243'. [ 652.394999][ T59] bond34: (slave bridge15): failed to get link speed/duplex [ 652.406385][T23188] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5246'. [ 652.453928][T23188] netlink: 'syz.2.5246': attribute type 1 has an invalid length. [ 652.478754][T23188] netlink: 'syz.2.5246': attribute type 4 has an invalid length. [ 652.514155][T23188] netlink: 'syz.2.5246': attribute type 1 has an invalid length. [ 652.554325][T23188] netlink: 228 bytes leftover after parsing attributes in process `syz.2.5246'. [ 652.808243][T23204] netlink: 'syz.4.5252': attribute type 1 has an invalid length. [ 652.862821][T23204] bond57: entered promiscuous mode [ 652.870596][T23204] 8021q: adding VLAN 0 to HW filter on device bond57 [ 652.872609][T23211] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5252'. [ 652.884676][T23210] netlink: 'syz.0.5254': attribute type 1 has an invalid length. [ 652.914187][T23211] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5252'. [ 652.960239][T23210] 8021q: adding VLAN 0 to HW filter on device bond35 [ 652.982762][T23204] bond57: (slave bridge29): making interface the new active one [ 652.991948][T23204] bridge29: entered promiscuous mode [ 652.999065][T23204] bond57: (slave bridge29): Enslaving as an active interface with an up link [ 653.121976][T23216] bond35: (slave veth71): Enslaving as an active interface with a down link [ 653.232356][T23210] bond35: (slave veth73): Enslaving as an active interface with a down link [ 653.650060][T23253] ipvlan0: entered promiscuous mode [ 653.719191][T23254] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 653.976705][T23267] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5270'. [ 654.014870][T21608] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 654.047634][T23271] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1280) ! [ 654.138625][T23273] FAULT_INJECTION: forcing a failure. [ 654.138625][T23273] name failslab, interval 1, probability 0, space 0, times 0 [ 654.168572][T23275] ip6t_rpfilter: unknown options [ 654.181866][T23273] CPU: 0 UID: 0 PID: 23273 Comm: syz.1.5273 Not tainted syzkaller #0 PREEMPT(full) [ 654.181898][T23273] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 654.181912][T23273] Call Trace: [ 654.181922][T23273] [ 654.181932][T23273] dump_stack_lvl+0xe8/0x150 [ 654.181969][T23273] should_fail_ex+0x412/0x560 [ 654.182004][T23273] should_failslab+0xa8/0x100 [ 654.182035][T23273] __kmalloc_noprof+0xe8/0x760 [ 654.182060][T23273] ? pfkey_add+0x1500/0x2df0 [ 654.182091][T23273] pfkey_add+0x1500/0x2df0 [ 654.182136][T23273] ? __pfx_pfkey_add+0x10/0x10 [ 654.182164][T23273] ? pfkey_broadcast+0x3c2/0x3e0 [ 654.182201][T23273] pfkey_sendmsg+0xc56/0x1120 [ 654.182243][T23273] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 654.182303][T23273] ? aa_sock_msg_perm+0xf1/0x1b0 [ 654.182335][T23273] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 654.182365][T23273] ____sys_sendmsg+0x972/0x9f0 [ 654.182399][T23273] ? __pfx_____sys_sendmsg+0x10/0x10 [ 654.182432][T23273] ? import_iovec+0x73/0xa0 [ 654.182470][T23273] ___sys_sendmsg+0x2a5/0x360 [ 654.182499][T23273] ? __pfx____sys_sendmsg+0x10/0x10 [ 654.182562][T23273] ? __fget_files+0x2a/0x420 [ 654.182594][T23273] ? __fget_files+0x3a0/0x420 [ 654.182639][T23273] __x64_sys_sendmsg+0x1bd/0x2a0 [ 654.182665][T23273] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 654.182699][T23273] ? __pfx_ksys_write+0x10/0x10 [ 654.182737][T23273] do_syscall_64+0x14d/0xf80 [ 654.182758][T23273] ? trace_irq_disable+0x3b/0x150 [ 654.182790][T23273] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 654.182813][T23273] ? clear_bhb_loop+0x40/0x90 [ 654.182841][T23273] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 654.182863][T23273] RIP: 0033:0x7f2ed1d9c799 [ 654.182884][T23273] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 654.182904][T23273] RSP: 002b:00007f2ed2d02028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 654.182928][T23273] RAX: ffffffffffffffda RBX: 00007f2ed2015fa0 RCX: 00007f2ed1d9c799 [ 654.182945][T23273] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 654.182959][T23273] RBP: 00007f2ed2d02090 R08: 0000000000000000 R09: 0000000000000000 [ 654.182974][T23273] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 654.182988][T23273] R13: 00007f2ed2016038 R14: 00007f2ed2015fa0 R15: 00007ffcffdb23d8 [ 654.183024][T23273] [ 654.247536][T21608] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 654.482165][ T49] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 654.501611][ T49] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 654.524851][ T49] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 654.554465][ T49] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 654.607227][T23284] lo speed is unknown, defaulting to 1000 [ 654.647843][T23284] wlan1 speed is unknown, defaulting to 1000 [ 654.729719][T23284] lo speed is unknown, defaulting to 1000 [ 654.787454][T23285] lo speed is unknown, defaulting to 1000 [ 654.803239][T23285] wlan1 speed is unknown, defaulting to 1000 [ 655.220102][T23285] lo speed is unknown, defaulting to 1000 [ 655.354190][ T1096] net_ratelimit: 17 callbacks suppressed [ 655.354213][ T1096] bond34: (slave bridge15): failed to get link speed/duplex [ 655.494207][ T1096] bond34: (slave bridge15): failed to get link speed/duplex [ 655.624338][ T49] bond34: (slave bridge15): failed to get link speed/duplex [ 655.651408][T23337] netlink: 'syz.3.5297': attribute type 1 has an invalid length. [ 655.807316][T23337] bond44: entered promiscuous mode [ 655.813247][T23337] 8021q: adding VLAN 0 to HW filter on device bond44 [ 655.824348][ T1096] bond34: (slave bridge15): failed to get link speed/duplex [ 655.860485][T23344] bond44: (slave bridge15): making interface the new active one [ 655.868357][T23344] bridge15: entered promiscuous mode [ 655.875969][T23344] bond44: (slave bridge15): Enslaving as an active interface with an up link [ 656.283591][T23360] netlink: 'syz.2.5301': attribute type 1 has an invalid length. [ 656.314607][ T1151] bond34: (slave bridge15): failed to get link speed/duplex [ 656.324756][T23359] ip6t_rpfilter: unknown options [ 656.355552][T23354] netlink: 'syz.2.5301': attribute type 4 has an invalid length. [ 656.375826][T23354] netlink: 'syz.2.5301': attribute type 1 has an invalid length. [ 656.434345][ T49] bond34: (slave bridge15): failed to get link speed/duplex [ 656.551937][ T1151] bond34: (slave bridge15): failed to get link speed/duplex [ 656.695918][ T36] bond34: (slave bridge15): failed to get link speed/duplex [ 656.811935][T23379] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 656.894479][T22879] bond34: (slave bridge15): failed to get link speed/duplex [ 656.967219][T23385] __nla_validate_parse: 12 callbacks suppressed [ 656.967240][T23385] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5313'. [ 657.015318][T23385] netlink: 'syz.3.5313': attribute type 21 has an invalid length. [ 657.033622][T23385] netlink: 128 bytes leftover after parsing attributes in process `syz.3.5313'. [ 657.064141][T23385] netlink: 'syz.3.5313': attribute type 4 has an invalid length. [ 657.108792][T23385] netlink: 'syz.3.5313': attribute type 5 has an invalid length. [ 657.159758][T23385] netlink: 3 bytes leftover after parsing attributes in process `syz.3.5313'. [ 657.488133][T23405] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5319'. [ 657.531598][T23405] netlink: 'syz.0.5319': attribute type 4 has an invalid length. [ 657.545999][T23405] netlink: 'syz.0.5319': attribute type 1 has an invalid length. [ 657.557811][T23405] netlink: 228 bytes leftover after parsing attributes in process `syz.0.5319'. [ 657.880276][T23417] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.5322'. [ 658.197871][T23438] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5330'. [ 658.212775][T23438] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5330'. [ 658.248524][T23440] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.5331'. [ 658.276179][T23443] netlink: 'syz.4.5333': attribute type 1 has an invalid length. [ 658.329581][T23443] bond58: entered promiscuous mode [ 658.337756][T23443] 8021q: adding VLAN 0 to HW filter on device bond58 [ 658.388948][T23443] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5333'. [ 658.442364][T23450] bridge19: entered allmulticast mode [ 658.488695][T23443] bond58: (slave bridge30): making interface the new active one [ 658.498036][T23443] bridge30: entered promiscuous mode [ 658.509050][T23443] bond58: (slave bridge30): Enslaving as an active interface with an up link [ 658.648471][T23457] FAULT_INJECTION: forcing a failure. [ 658.648471][T23457] name failslab, interval 1, probability 0, space 0, times 0 [ 658.704548][T23457] CPU: 1 UID: 0 PID: 23457 Comm: syz.2.5338 Not tainted syzkaller #0 PREEMPT(full) [ 658.704580][T23457] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 658.704594][T23457] Call Trace: [ 658.704603][T23457] [ 658.704613][T23457] dump_stack_lvl+0xe8/0x150 [ 658.704653][T23457] should_fail_ex+0x412/0x560 [ 658.704687][T23457] should_failslab+0xa8/0x100 [ 658.704734][T23457] __kmalloc_noprof+0xe8/0x760 [ 658.704758][T23457] ? pfkey_add+0x1500/0x2df0 [ 658.704790][T23457] pfkey_add+0x1500/0x2df0 [ 658.704833][T23457] ? __pfx_pfkey_add+0x10/0x10 [ 658.704855][T23457] ? pfkey_broadcast+0x3c2/0x3e0 [ 658.704891][T23457] pfkey_sendmsg+0xc56/0x1120 [ 658.704932][T23457] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 658.704984][T23457] ? aa_sock_msg_perm+0xf1/0x1b0 [ 658.705016][T23457] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 658.705045][T23457] ____sys_sendmsg+0x972/0x9f0 [ 658.705078][T23457] ? __pfx_____sys_sendmsg+0x10/0x10 [ 658.705111][T23457] ? import_iovec+0x73/0xa0 [ 658.705148][T23457] ___sys_sendmsg+0x2a5/0x360 [ 658.705176][T23457] ? __pfx____sys_sendmsg+0x10/0x10 [ 658.705236][T23457] ? __fget_files+0x2a/0x420 [ 658.705268][T23457] ? __fget_files+0x3a0/0x420 [ 658.705312][T23457] __x64_sys_sendmsg+0x1bd/0x2a0 [ 658.705346][T23457] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 658.705379][T23457] ? __pfx_ksys_write+0x10/0x10 [ 658.705417][T23457] do_syscall_64+0x14d/0xf80 [ 658.705439][T23457] ? trace_irq_disable+0x3b/0x150 [ 658.705471][T23457] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 658.705493][T23457] ? clear_bhb_loop+0x40/0x90 [ 658.705521][T23457] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 658.705544][T23457] RIP: 0033:0x7f84ac59c799 [ 658.705564][T23457] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 658.705584][T23457] RSP: 002b:00007f84aa7f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 658.705608][T23457] RAX: ffffffffffffffda RBX: 00007f84ac815fa0 RCX: 00007f84ac59c799 [ 658.705624][T23457] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 658.705638][T23457] RBP: 00007f84aa7f6090 R08: 0000000000000000 R09: 0000000000000000 [ 658.705651][T23457] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 658.705663][T23457] R13: 00007f84ac816038 R14: 00007f84ac815fa0 R15: 00007ffee307b398 [ 658.705698][T23457] [ 659.243898][T23472] netlink: 'syz.3.5347': attribute type 5 has an invalid length. [ 659.434934][T23484] ksmbd: Unknown IPC event: 1, ignore. [ 659.721348][T23500] FAULT_INJECTION: forcing a failure. [ 659.721348][T23500] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 659.774413][T23500] CPU: 0 UID: 0 PID: 23500 Comm: syz.0.5354 Not tainted syzkaller #0 PREEMPT(full) [ 659.774443][T23500] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 659.774476][T23500] Call Trace: [ 659.774485][T23500] [ 659.774495][T23500] dump_stack_lvl+0xe8/0x150 [ 659.774532][T23500] should_fail_ex+0x412/0x560 [ 659.774567][T23500] _copy_from_iter+0x1d3/0x1670 [ 659.774603][T23500] ? rcu_is_watching+0x15/0xb0 [ 659.774640][T23500] ? __pfx__copy_from_iter+0x10/0x10 [ 659.774680][T23500] ? netlink_sendmsg+0x650/0xb40 [ 659.774710][T23500] ? skb_put+0x11b/0x210 [ 659.774758][T23500] netlink_sendmsg+0x6c0/0xb40 [ 659.774810][T23500] ? __pfx_netlink_sendmsg+0x10/0x10 [ 659.774843][T23500] ? aa_sock_msg_perm+0xf1/0x1b0 [ 659.774873][T23500] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 659.774901][T23500] ____sys_sendmsg+0x972/0x9f0 [ 659.774921][T23500] ? __lock_acquire+0x6b5/0x2cf0 [ 659.774957][T23500] ? __pfx_____sys_sendmsg+0x10/0x10 [ 659.774988][T23500] ? import_iovec+0x73/0xa0 [ 659.775023][T23500] ___sys_sendmsg+0x2a5/0x360 [ 659.775051][T23500] ? __pfx____sys_sendmsg+0x10/0x10 [ 659.775123][T23500] __sys_sendmmsg+0x27c/0x4e0 [ 659.775150][T23500] ? __pfx___sys_sendmmsg+0x10/0x10 [ 659.775169][T23500] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 659.775219][T23500] ? ksys_write+0x242/0x270 [ 659.775245][T23500] ? __pfx_ksys_write+0x10/0x10 [ 659.775276][T23500] __x64_sys_sendmmsg+0xa0/0xc0 [ 659.775300][T23500] do_syscall_64+0x14d/0xf80 [ 659.775319][T23500] ? trace_irq_disable+0x3b/0x150 [ 659.775351][T23500] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 659.775373][T23500] ? clear_bhb_loop+0x40/0x90 [ 659.775400][T23500] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 659.775421][T23500] RIP: 0033:0x7ffba4d9c799 [ 659.775442][T23500] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 659.775461][T23500] RSP: 002b:00007ffba5c37028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 659.775485][T23500] RAX: ffffffffffffffda RBX: 00007ffba5015fa0 RCX: 00007ffba4d9c799 [ 659.775501][T23500] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000003 [ 659.775516][T23500] RBP: 00007ffba5c37090 R08: 0000000000000000 R09: 0000000000000000 [ 659.775530][T23500] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 659.775543][T23500] R13: 00007ffba5016038 R14: 00007ffba5015fa0 R15: 00007ffe6bea8cb8 [ 659.775596][T23500] [ 660.151380][T23517] FAULT_INJECTION: forcing a failure. [ 660.151380][T23517] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 660.204310][T23517] CPU: 1 UID: 0 PID: 23517 Comm: syz.3.5358 Not tainted syzkaller #0 PREEMPT(full) [ 660.204341][T23517] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 660.204355][T23517] Call Trace: [ 660.204365][T23517] [ 660.204375][T23517] dump_stack_lvl+0xe8/0x150 [ 660.204414][T23517] should_fail_ex+0x412/0x560 [ 660.204449][T23517] _copy_to_user+0x31/0xb0 [ 660.204486][T23517] simple_read_from_buffer+0xe1/0x170 [ 660.204524][T23517] proc_fail_nth_read+0x1bb/0x230 [ 660.204561][T23517] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 660.204597][T23517] ? rw_verify_area+0x2a6/0x4d0 [ 660.204620][T23517] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 660.204653][T23517] vfs_read+0x20c/0xa70 [ 660.204684][T23517] ? fdget_pos+0x246/0x320 [ 660.204721][T23517] ? __pfx___mutex_lock+0x10/0x10 [ 660.204745][T23517] ? __pfx_vfs_read+0x10/0x10 [ 660.204771][T23517] ? __fget_files+0x2a/0x420 [ 660.204808][T23517] ? __fget_files+0x3a0/0x420 [ 660.204839][T23517] ? __fget_files+0x2a/0x420 [ 660.204882][T23517] ksys_read+0x150/0x270 [ 660.204908][T23517] ? __pfx_ksys_read+0x10/0x10 [ 660.204945][T23517] do_syscall_64+0x14d/0xf80 [ 660.204966][T23517] ? trace_irq_disable+0x3b/0x150 [ 660.204998][T23517] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 660.205021][T23517] ? clear_bhb_loop+0x40/0x90 [ 660.205049][T23517] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 660.205072][T23517] RIP: 0033:0x7fea35f5cfce [ 660.205092][T23517] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 660.205113][T23517] RSP: 002b:00007fea341f5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 660.205137][T23517] RAX: ffffffffffffffda RBX: 00007fea341f66c0 RCX: 00007fea35f5cfce [ 660.205154][T23517] RDX: 000000000000000f RSI: 00007fea341f60a0 RDI: 0000000000000006 [ 660.205169][T23517] RBP: 00007fea341f6090 R08: 0000000000000000 R09: 0000000000000000 [ 660.205183][T23517] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 660.205196][T23517] R13: 00007fea36216128 R14: 00007fea36216090 R15: 00007ffea2a69e38 [ 660.205233][T23517] [ 660.428277][T23530] FAULT_INJECTION: forcing a failure. [ 660.428277][T23530] name failslab, interval 1, probability 0, space 0, times 0 [ 660.438129][ T49] net_ratelimit: 24 callbacks suppressed [ 660.438211][ T49] bond34: (slave bridge15): failed to get link speed/duplex [ 660.441718][T23530] CPU: 1 UID: 0 PID: 23530 Comm: syz.0.5361 Not tainted syzkaller #0 PREEMPT(full) [ 660.441782][T23530] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 660.441831][T23530] Call Trace: [ 660.441872][T23530] [ 660.441894][T23530] dump_stack_lvl+0xe8/0x150 [ 660.441997][T23530] should_fail_ex+0x412/0x560 [ 660.442084][T23530] should_failslab+0xa8/0x100 [ 660.442168][T23530] __kmalloc_node_noprof+0xf0/0x7c0 [ 660.442244][T23530] ? crypto_create_tfm_node+0x83/0x3f0 [ 660.442475][T23530] crypto_create_tfm_node+0x83/0x3f0 [ 660.442577][T23530] crypto_ahash_init_tfm+0x162/0x770 [ 660.442726][T23530] crypto_create_tfm_node+0x18c/0x3f0 [ 660.442811][T23530] crypto_spawn_tfm2+0x5c/0x90 [ 660.442925][T23530] crypto_authenc_init_tfm+0x47/0x1c0 [ 660.443076][T23530] crypto_create_tfm_node+0x18c/0x3f0 [ 660.443174][T23530] crypto_spawn_tfm2+0x5c/0x90 [ 660.443254][T23530] aead_init_geniv+0x169/0x240 [ 660.443329][T23530] crypto_create_tfm_node+0x18c/0x3f0 [ 660.443421][T23530] crypto_alloc_tfm_node+0x172/0x3f0 [ 660.443514][T23530] esp_init_state+0x63c/0x1240 [ 660.443633][T23530] ? ___sys_sendmsg+0x2a5/0x360 [ 660.443765][T23530] ? __pfx_esp_init_state+0x10/0x10 [ 660.443972][T23530] ? __xfrm_init_state+0x842/0x1460 [ 660.444091][T23530] __xfrm_init_state+0xac9/0x1460 [ 660.444156][T23530] ? __xfrm_init_state+0x842/0x1460 [ 660.444236][T23530] xfrm_init_state+0x18/0xa0 [ 660.444299][T23530] pfkey_add+0x1d34/0x2df0 [ 660.444415][T23530] ? __pfx_pfkey_add+0x10/0x10 [ 660.444474][T23530] ? pfkey_broadcast+0x3c2/0x3e0 [ 660.444570][T23530] pfkey_sendmsg+0xc56/0x1120 [ 660.444673][T23530] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 660.444815][T23530] ? aa_sock_msg_perm+0xf1/0x1b0 [ 660.444895][T23530] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 660.444977][T23530] ____sys_sendmsg+0x972/0x9f0 [ 660.445051][T23530] ? __pfx_____sys_sendmsg+0x10/0x10 [ 660.445141][T23530] ? import_iovec+0x73/0xa0 [ 660.445248][T23530] ___sys_sendmsg+0x2a5/0x360 [ 660.445335][T23530] ? __pfx____sys_sendmsg+0x10/0x10 [ 660.445492][T23530] ? __fget_files+0x2a/0x420 [ 660.445577][T23530] ? __fget_files+0x3a0/0x420 [ 660.445699][T23530] __x64_sys_sendmsg+0x1bd/0x2a0 [ 660.445764][T23530] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 660.445850][T23530] ? __pfx_ksys_write+0x10/0x10 [ 660.445947][T23530] do_syscall_64+0x14d/0xf80 [ 660.446001][T23530] ? trace_irq_disable+0x3b/0x150 [ 660.446085][T23530] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 660.446148][T23530] ? clear_bhb_loop+0x40/0x90 [ 660.446217][T23530] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 660.446280][T23530] RIP: 0033:0x7ffba4d9c799 [ 660.446334][T23530] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 660.446386][T23530] RSP: 002b:00007ffba5c37028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 660.446449][T23530] RAX: ffffffffffffffda RBX: 00007ffba5015fa0 RCX: 00007ffba4d9c799 [ 660.446492][T23530] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 660.446532][T23530] RBP: 00007ffba5c37090 R08: 0000000000000000 R09: 0000000000000000 [ 660.446568][T23530] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 660.446581][T23530] R13: 00007ffba5016038 R14: 00007ffba5015fa0 R15: 00007ffe6bea8cb8 [ 660.446615][T23530] [ 661.054174][ T49] bond34: (slave bridge15): failed to get link speed/duplex [ 661.184150][ T1096] bond34: (slave bridge15): failed to get link speed/duplex [ 661.281762][T23555] ip6t_rpfilter: unknown options [ 661.294242][ T3535] bond34: (slave bridge15): failed to get link speed/duplex [ 661.339926][T23551] lo speed is unknown, defaulting to 1000 [ 661.360894][T23551] wlan1 speed is unknown, defaulting to 1000 [ 661.389204][T23551] lo speed is unknown, defaulting to 1000 [ 661.406103][ T3535] bond34: (slave bridge15): failed to get link speed/duplex [ 662.155049][ T3535] bond34: (slave bridge15): failed to get link speed/duplex [ 662.182906][T23588] __nla_validate_parse: 8 callbacks suppressed [ 662.182926][T23588] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5377'. [ 662.821357][T23596] syz_tun: entered promiscuous mode [ 662.925319][T23596] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 662.964781][ T49] bond34: (slave bridge15): failed to get link speed/duplex [ 663.094185][ T1151] bond34: (slave bridge15): failed to get link speed/duplex [ 663.210696][ T49] bond34: (slave bridge15): failed to get link speed/duplex [ 663.324705][T23608] netlink: 666 bytes leftover after parsing attributes in process `syz.2.5383'. [ 663.384393][T23608] netlink: 48 bytes leftover after parsing attributes in process `syz.2.5383'. [ 663.445707][T23610] ip6t_rpfilter: unknown options [ 663.755846][T23616] lo speed is unknown, defaulting to 1000 [ 663.785135][T23616] wlan1 speed is unknown, defaulting to 1000 [ 663.793034][T23616] lo speed is unknown, defaulting to 1000 [ 663.813170][T23613] lo speed is unknown, defaulting to 1000 [ 663.827964][T23613] wlan1 speed is unknown, defaulting to 1000 [ 663.883683][T23621] sctp: [Deprecated]: syz.4.5388 (pid 23621) Use of struct sctp_assoc_value in delayed_ack socket option. [ 663.883683][T23621] Use struct sctp_sack_info instead [ 663.934275][T23621] sctp: [Deprecated]: syz.4.5388 (pid 23621) Use of struct sctp_assoc_value in delayed_ack socket option. [ 663.934275][T23621] Use struct sctp_sack_info instead [ 663.987641][T23621] sctp: [Deprecated]: syz.4.5388 (pid 23621) Use of struct sctp_assoc_value in delayed_ack socket option. [ 663.987641][T23621] Use struct sctp_sack_info instead [ 664.433616][T23637] netlink: 44 bytes leftover after parsing attributes in process `syz.1.5391'. [ 664.739256][T23639] syzkaller0: entered promiscuous mode [ 664.744937][T23639] syzkaller0: entered allmulticast mode [ 665.211164][T23613] lo speed is unknown, defaulting to 1000 [ 665.392446][T23646] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5395'. [ 665.452939][T23646] netlink: 'syz.1.5395': attribute type 1 has an invalid length. [ 665.476897][T23646] netlink: 'syz.1.5395': attribute type 4 has an invalid length. [ 665.496956][T23646] netlink: 'syz.1.5395': attribute type 1 has an invalid length. [ 665.507065][T23646] netlink: 228 bytes leftover after parsing attributes in process `syz.1.5395'. [ 665.655736][T23655] ip6t_rpfilter: unknown options [ 665.781079][T23661] netlink: 104 bytes leftover after parsing attributes in process `syz.1.5399'. [ 665.883205][T23652] syzkaller0: entered promiscuous mode [ 665.889087][T23652] syzkaller0: entered allmulticast mode [ 665.896835][ T1096] net_ratelimit: 16 callbacks suppressed [ 665.896856][ T1096] bond34: (slave bridge15): failed to get link speed/duplex [ 665.916724][T23661] netlink: 104 bytes leftover after parsing attributes in process `syz.1.5399'. [ 666.202353][T23663] FAULT_INJECTION: forcing a failure. [ 666.202353][T23663] name failslab, interval 1, probability 0, space 0, times 0 [ 666.233932][T23663] CPU: 1 UID: 0 PID: 23663 Comm: syz.0.5400 Not tainted syzkaller #0 PREEMPT(full) [ 666.233967][T23663] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 666.233982][T23663] Call Trace: [ 666.233991][T23663] [ 666.234002][T23663] dump_stack_lvl+0xe8/0x150 [ 666.234039][T23663] should_fail_ex+0x412/0x560 [ 666.234073][T23663] should_failslab+0xa8/0x100 [ 666.234111][T23663] __kmalloc_node_noprof+0xf0/0x7c0 [ 666.234138][T23663] ? crypto_create_tfm_node+0x83/0x3f0 [ 666.234171][T23663] crypto_create_tfm_node+0x83/0x3f0 [ 666.234204][T23663] crypto_init_lskcipher_ops_sg+0x5b/0xe0 [ 666.234234][T23663] crypto_create_tfm_node+0x18c/0x3f0 [ 666.234266][T23663] crypto_spawn_tfm2+0x5c/0x90 [ 666.234300][T23663] crypto_authenc_init_tfm+0x69/0x1c0 [ 666.234335][T23663] crypto_create_tfm_node+0x18c/0x3f0 [ 666.234367][T23663] crypto_spawn_tfm2+0x5c/0x90 [ 666.234400][T23663] aead_init_geniv+0x169/0x240 [ 666.234429][T23663] crypto_create_tfm_node+0x18c/0x3f0 [ 666.234462][T23663] crypto_alloc_tfm_node+0x172/0x3f0 [ 666.234499][T23663] esp_init_state+0x63c/0x1240 [ 666.234527][T23663] ? ___sys_sendmsg+0x2a5/0x360 [ 666.234562][T23663] ? __pfx_esp_init_state+0x10/0x10 [ 666.234626][T23663] ? __xfrm_init_state+0x842/0x1460 [ 666.234657][T23663] __xfrm_init_state+0xac9/0x1460 [ 666.234681][T23663] ? __xfrm_init_state+0x842/0x1460 [ 666.234722][T23663] xfrm_init_state+0x18/0xa0 [ 666.234743][T23663] pfkey_add+0x1d34/0x2df0 [ 666.234787][T23663] ? __pfx_pfkey_add+0x10/0x10 [ 666.234808][T23663] ? pfkey_broadcast+0x3c2/0x3e0 [ 666.234844][T23663] pfkey_sendmsg+0xc56/0x1120 [ 666.234884][T23663] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 666.234936][T23663] ? aa_sock_msg_perm+0xf1/0x1b0 [ 666.234966][T23663] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 666.234994][T23663] ____sys_sendmsg+0x972/0x9f0 [ 666.235025][T23663] ? __pfx_____sys_sendmsg+0x10/0x10 [ 666.235057][T23663] ? import_iovec+0x73/0xa0 [ 666.235094][T23663] ___sys_sendmsg+0x2a5/0x360 [ 666.235130][T23663] ? __pfx____sys_sendmsg+0x10/0x10 [ 666.235190][T23663] ? __fget_files+0x2a/0x420 [ 666.235221][T23663] ? __fget_files+0x3a0/0x420 [ 666.235264][T23663] __x64_sys_sendmsg+0x1bd/0x2a0 [ 666.235306][T23663] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 666.235340][T23663] ? __pfx_ksys_write+0x10/0x10 [ 666.235377][T23663] do_syscall_64+0x14d/0xf80 [ 666.235399][T23663] ? trace_irq_disable+0x3b/0x150 [ 666.235431][T23663] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 666.235465][T23663] ? clear_bhb_loop+0x40/0x90 [ 666.235492][T23663] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 666.235514][T23663] RIP: 0033:0x7ffba4d9c799 [ 666.235534][T23663] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 666.235553][T23663] RSP: 002b:00007ffba5c37028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 666.235576][T23663] RAX: ffffffffffffffda RBX: 00007ffba5015fa0 RCX: 00007ffba4d9c799 [ 666.235593][T23663] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 666.235607][T23663] RBP: 00007ffba5c37090 R08: 0000000000000000 R09: 0000000000000000 [ 666.235621][T23663] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 666.235634][T23663] R13: 00007ffba5016038 R14: 00007ffba5015fa0 R15: 00007ffe6bea8cb8 [ 666.235670][T23663] [ 667.156502][T23677] netlink: 84 bytes leftover after parsing attributes in process `syz.0.5402'. [ 668.533911][T23692] netlink: 'syz.1.5408': attribute type 3 has an invalid length. [ 668.604527][ T1151] bond34: (slave bridge15): failed to get link speed/duplex [ 668.695157][T23701] netlink: 'syz.3.5411': attribute type 29 has an invalid length. [ 668.719137][ T49] bond34: (slave bridge15): failed to get link speed/duplex [ 669.111527][T14368] wlan1 speed is unknown, defaulting to 1000 [ 669.184628][T23730] bond34: (slave bridge15): failed to get link speed/duplex [ 669.326663][T23749] syzkaller0: entered promiscuous mode [ 669.332653][T23749] syzkaller0: entered allmulticast mode [ 669.832680][T23776] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5426'. [ 671.737253][T23733] bond34: (slave bridge15): failed to get link speed/duplex [ 671.846205][T23791] netlink: 'syz.2.5430': attribute type 1 has an invalid length. [ 671.898916][T23791] 8021q: adding VLAN 0 to HW filter on device bond29 [ 671.904668][T23796] sctp: [Deprecated]: syz.1.5432 (pid 23796) Use of struct sctp_assoc_value in delayed_ack socket option. [ 671.904668][T23796] Use struct sctp_sack_info instead [ 671.985576][T23800] bond29: (slave veth65): Enslaving as an active interface with a down link [ 672.015514][ T49] bond34: (slave bridge15): failed to get link speed/duplex [ 672.023654][T23796] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5432'. [ 672.035936][T23796] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5432'. [ 672.091482][T23801] bond39 (unregistering): Released all slaves [ 672.160963][T23791] bond29: (slave veth67): Enslaving as an active interface with a down link [ 672.234702][T23730] bond34: (slave bridge15): failed to get link speed/duplex [ 672.345059][T23730] bond34: (slave bridge15): failed to get link speed/duplex [ 672.464554][T23733] bond34: (slave bridge15): failed to get link speed/duplex [ 672.575139][T23733] bond34: (slave bridge15): failed to get link speed/duplex [ 672.647686][T23824] netlink: 'syz.2.5443': attribute type 1 has an invalid length. [ 672.685441][T23824] 8021q: adding VLAN 0 to HW filter on device bond30 [ 672.746992][T23823] syzkaller0: entered promiscuous mode [ 672.752536][T23823] syzkaller0: entered allmulticast mode [ 672.852351][T23828] bond30: (slave veth69): Enslaving as an active interface with a down link [ 672.903085][T23824] bond30: (slave veth71): Enslaving as an active interface with a down link [ 673.876108][T23863] IPVS: set_ctl: invalid protocol: 102 172.30.1.5:20002 [ 675.392929][T23743] bond34: (slave bridge15): failed to get link speed/duplex [ 675.429062][T23878] tipc: Enabled bearer , priority 0 [ 675.445266][T23879] syzkaller0: entered promiscuous mode [ 675.450800][T23879] syzkaller0: entered allmulticast mode [ 675.514189][T23743] bond34: (slave bridge15): failed to get link speed/duplex [ 675.522047][T23844] lo speed is unknown, defaulting to 1000 [ 675.536648][T23848] lo speed is unknown, defaulting to 1000 [ 675.553666][T23844] wlan1 speed is unknown, defaulting to 1000 [ 675.578168][T23848] wlan1 speed is unknown, defaulting to 1000 [ 675.589695][T23844] lo speed is unknown, defaulting to 1000 [ 675.627548][T23891] vlan13: entered allmulticast mode [ 675.642267][T23891] hsr0: entered allmulticast mode [ 675.647832][T23891] hsr_slave_0: entered allmulticast mode [ 675.653628][T23891] hsr_slave_1: entered allmulticast mode [ 675.692321][T23879] tipc: Resetting bearer [ 675.738749][T23879] tipc: Disabling bearer [ 675.773245][T23898] syzkaller1: left promiscuous mode [ 675.784195][T23898] syzkaller1: left allmulticast mode [ 675.904880][T23733] bond34: (slave bridge15): failed to get link speed/duplex [ 675.972960][T23848] lo speed is unknown, defaulting to 1000 [ 676.120051][T23911] netlink: 220 bytes leftover after parsing attributes in process `syz.0.5467'. [ 676.455096][T23733] bond34: (slave bridge15): failed to get link speed/duplex [ 676.859252][T23925] FAULT_INJECTION: forcing a failure. [ 676.859252][T23925] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 676.910778][T23925] CPU: 1 UID: 0 PID: 23925 Comm: syz.1.5470 Not tainted syzkaller #0 PREEMPT(full) [ 676.910810][T23925] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 676.910825][T23925] Call Trace: [ 676.910835][T23925] [ 676.910844][T23925] dump_stack_lvl+0xe8/0x150 [ 676.910885][T23925] should_fail_ex+0x412/0x560 [ 676.910920][T23925] _copy_from_user+0x2d/0xb0 [ 676.910956][T23925] __copy_msghdr+0x3c5/0x5b0 [ 676.910984][T23925] ___sys_sendmsg+0x213/0x360 [ 676.911012][T23925] ? __pfx____sys_sendmsg+0x10/0x10 [ 676.911041][T23925] ? kstrtouint+0x6e/0xe0 [ 676.911093][T23925] ? __fget_files+0x2a/0x420 [ 676.911126][T23925] ? __fget_files+0x3a0/0x420 [ 676.911169][T23925] __sys_sendmmsg+0x27c/0x4e0 [ 676.911198][T23925] ? __pfx___sys_sendmmsg+0x10/0x10 [ 676.911219][T23925] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 676.911270][T23925] ? ksys_write+0x242/0x270 [ 676.911297][T23925] ? __pfx_ksys_write+0x10/0x10 [ 676.911329][T23925] __x64_sys_sendmmsg+0xa0/0xc0 [ 676.911354][T23925] do_syscall_64+0x14d/0xf80 [ 676.911375][T23925] ? trace_irq_disable+0x3b/0x150 [ 676.911408][T23925] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 676.911431][T23925] ? clear_bhb_loop+0x40/0x90 [ 676.911459][T23925] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 676.911481][T23925] RIP: 0033:0x7f2ed1d9c799 [ 676.911503][T23925] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 676.911523][T23925] RSP: 002b:00007f2ed2d02028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 676.911547][T23925] RAX: ffffffffffffffda RBX: 00007f2ed2015fa0 RCX: 00007f2ed1d9c799 [ 676.911564][T23925] RDX: 0000000000000001 RSI: 0000200000003e40 RDI: 0000000000000003 [ 676.911587][T23925] RBP: 00007f2ed2d02090 R08: 0000000000000000 R09: 0000000000000000 [ 676.911601][T23925] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 676.911615][T23925] R13: 00007f2ed2016038 R14: 00007f2ed2015fa0 R15: 00007ffcffdb23d8 [ 676.911650][T23925] [ 677.453388][T23937] netlink: 'syz.1.5475': attribute type 1 has an invalid length. [ 677.529488][T23940] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5475'. [ 677.541018][ T1096] net_ratelimit: 2 callbacks suppressed [ 677.541040][ T1096] bond34: (slave bridge15): failed to get link speed/duplex [ 677.562358][T23940] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5475'. [ 677.879606][T23937] bond39: entered promiscuous mode [ 677.885596][T23937] 8021q: adding VLAN 0 to HW filter on device bond39 [ 677.916828][T23942] bond39: (slave bridge21): making interface the new active one [ 677.924934][T23942] bridge21: entered promiscuous mode [ 677.932488][T23942] bond39: (slave bridge21): Enslaving as an active interface with an up link [ 677.985360][T23730] bond34: (slave bridge15): failed to get link speed/duplex [ 678.144412][ T49] bond34: (slave bridge15): failed to get link speed/duplex [ 678.282242][T23960] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5481'. [ 678.340574][T23962] FAULT_INJECTION: forcing a failure. [ 678.340574][T23962] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 678.354932][T23962] CPU: 0 UID: 0 PID: 23962 Comm: syz.3.5482 Not tainted syzkaller #0 PREEMPT(full) [ 678.354962][T23962] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 678.354976][T23962] Call Trace: [ 678.354985][T23962] [ 678.354995][T23962] dump_stack_lvl+0xe8/0x150 [ 678.355033][T23962] should_fail_ex+0x412/0x560 [ 678.355066][T23962] _copy_from_user+0x2d/0xb0 [ 678.355101][T23962] ____sys_sendmsg+0x308/0x9f0 [ 678.355133][T23962] ? __pfx_____sys_sendmsg+0x10/0x10 [ 678.355165][T23962] ? import_iovec+0x73/0xa0 [ 678.355202][T23962] ___sys_sendmsg+0x2a5/0x360 [ 678.355230][T23962] ? __pfx____sys_sendmsg+0x10/0x10 [ 678.355258][T23962] ? kstrtouint+0x6e/0xe0 [ 678.355311][T23962] ? __fget_files+0x2a/0x420 [ 678.355342][T23962] ? __fget_files+0x3a0/0x420 [ 678.355381][T23962] __sys_sendmmsg+0x27c/0x4e0 [ 678.355408][T23962] ? __pfx___sys_sendmmsg+0x10/0x10 [ 678.355428][T23962] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 678.355483][T23962] ? ksys_write+0x242/0x270 [ 678.355505][T23962] ? __pfx_ksys_write+0x10/0x10 [ 678.355530][T23962] __x64_sys_sendmmsg+0xa0/0xc0 [ 678.355551][T23962] do_syscall_64+0x14d/0xf80 [ 678.355567][T23962] ? trace_irq_disable+0x3b/0x150 [ 678.355597][T23962] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 678.355620][T23962] ? clear_bhb_loop+0x40/0x90 [ 678.355648][T23962] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 678.355670][T23962] RIP: 0033:0x7fea35f9c799 [ 678.355691][T23962] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 678.355711][T23962] RSP: 002b:00007fea36d73028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 678.355734][T23962] RAX: ffffffffffffffda RBX: 00007fea36215fa0 RCX: 00007fea35f9c799 [ 678.355751][T23962] RDX: 0000000000000001 RSI: 0000200000003e40 RDI: 0000000000000003 [ 678.355765][T23962] RBP: 00007fea36d73090 R08: 0000000000000000 R09: 0000000000000000 [ 678.355779][T23962] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 678.355792][T23962] R13: 00007fea36216038 R14: 00007fea36215fa0 R15: 00007ffea2a69e38 [ 678.355826][T23962] [ 678.671541][T23968] netlink: 'syz.3.5485': attribute type 2 has an invalid length. [ 678.687051][T23968] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5485'. [ 678.690841][T23732] bond34: (slave bridge15): failed to get link speed/duplex [ 678.701557][T23968] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 678.804219][ T1096] bond34: (slave bridge15): failed to get link speed/duplex [ 678.934670][T23730] bond34: (slave bridge15): failed to get link speed/duplex [ 679.065158][T23732] bond34: (slave bridge15): failed to get link speed/duplex [ 679.178696][ T1096] bond34: (slave bridge15): failed to get link speed/duplex [ 679.201966][T24000] ip6t_rpfilter: unknown options [ 679.295503][ T1096] bond34: (slave bridge15): failed to get link speed/duplex [ 679.304468][T24003] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5495'. [ 679.326219][T24008] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5497'. [ 679.338375][T24003] netlink: 'syz.4.5495': attribute type 7 has an invalid length. [ 679.354573][T24003] netlink: 'syz.4.5495': attribute type 8 has an invalid length. [ 679.376977][T24003] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5495'. [ 679.532452][T24016] netlink: 'syz.4.5502': attribute type 19 has an invalid length. [ 679.953476][T24048] netlink: 'syz.1.5511': attribute type 15 has an invalid length. [ 679.994477][T24048] netlink: 'syz.1.5511': attribute type 1 has an invalid length. [ 680.149966][T24048] 8021q: adding VLAN 0 to HW filter on device bond40 [ 680.262827][T24056] veth0_to_batadv: left promiscuous mode [ 680.286866][T24056] veth0_to_batadv: left allmulticast mode [ 680.532220][T24069] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5518'. [ 680.974634][T24090] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5525'. [ 681.258604][T24107] FAULT_INJECTION: forcing a failure. [ 681.258604][T24107] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 681.275290][T24107] CPU: 1 UID: 0 PID: 24107 Comm: syz.2.5534 Not tainted syzkaller #0 PREEMPT(full) [ 681.275320][T24107] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 681.275335][T24107] Call Trace: [ 681.275344][T24107] [ 681.275354][T24107] dump_stack_lvl+0xe8/0x150 [ 681.275393][T24107] should_fail_ex+0x412/0x560 [ 681.275430][T24107] _copy_to_user+0x31/0xb0 [ 681.275467][T24107] simple_read_from_buffer+0xe1/0x170 [ 681.275507][T24107] proc_fail_nth_read+0x1bb/0x230 [ 681.275544][T24107] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 681.275579][T24107] ? rw_verify_area+0x2a6/0x4d0 [ 681.275602][T24107] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 681.275635][T24107] vfs_read+0x20c/0xa70 [ 681.275656][T24107] ? fdget_pos+0x246/0x320 [ 681.275693][T24107] ? __pfx___mutex_lock+0x10/0x10 [ 681.275720][T24107] ? __pfx_vfs_read+0x10/0x10 [ 681.275745][T24107] ? __fget_files+0x2a/0x420 [ 681.275782][T24107] ? __fget_files+0x3a0/0x420 [ 681.275814][T24107] ? __fget_files+0x2a/0x420 [ 681.275855][T24107] ksys_read+0x150/0x270 [ 681.275882][T24107] ? __pfx_ksys_read+0x10/0x10 [ 681.275919][T24107] do_syscall_64+0x14d/0xf80 [ 681.275941][T24107] ? trace_irq_disable+0x3b/0x150 [ 681.275974][T24107] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 681.275999][T24107] ? clear_bhb_loop+0x40/0x90 [ 681.276027][T24107] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 681.276049][T24107] RIP: 0033:0x7f84ac55cfce [ 681.276071][T24107] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 681.276090][T24107] RSP: 002b:00007f84aa7f5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 681.276115][T24107] RAX: ffffffffffffffda RBX: 00007f84aa7f66c0 RCX: 00007f84ac55cfce [ 681.276131][T24107] RDX: 000000000000000f RSI: 00007f84aa7f60a0 RDI: 0000000000000004 [ 681.276146][T24107] RBP: 00007f84aa7f6090 R08: 0000000000000000 R09: 0000000000000000 [ 681.276160][T24107] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 681.276173][T24107] R13: 00007f84ac816038 R14: 00007f84ac815fa0 R15: 00007ffee307b398 [ 681.276220][T24107] [ 681.418321][T24104] lo speed is unknown, defaulting to 1000 [ 681.522147][T24113] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5533'. [ 681.522756][T24104] wlan1 speed is unknown, defaulting to 1000 [ 681.539330][T24104] lo speed is unknown, defaulting to 1000 [ 681.730433][T24124] netlink: 'syz.1.5538': attribute type 1 has an invalid length. [ 681.806816][T24124] bond42: entered promiscuous mode [ 681.812704][T24124] 8021q: adding VLAN 0 to HW filter on device bond42 [ 681.838593][T24124] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5538'. [ 681.848748][T24124] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5538'. [ 681.914561][T24124] bond42: (slave bridge23): making interface the new active one [ 681.935178][T24124] bridge23: entered promiscuous mode [ 681.942482][T24124] bond42: (slave bridge23): Enslaving as an active interface with an up link [ 682.262859][T24140] tipc: New replicast peer: 255.255.255.255 [ 682.269697][T24140] tipc: Enabled bearer , priority 26 [ 682.401338][T24139] syzkaller0: entered promiscuous mode [ 682.412905][T24139] syzkaller0: entered allmulticast mode [ 682.611990][T24159] netlink: 'syz.3.5549': attribute type 10 has an invalid length. [ 682.663409][T24163] netlink: 'syz.3.5549': attribute type 10 has an invalid length. [ 684.427572][T24159] team0: Port device dummy0 added [ 684.436076][T24168] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1280) ! [ 684.525952][T23727] net_ratelimit: 22 callbacks suppressed [ 684.525974][T23727] bond34: (slave bridge15): failed to get link speed/duplex [ 684.546809][T24174] tipc: Enabled bearer , priority 0 [ 684.556856][T24175] syzkaller0: entered promiscuous mode [ 684.564621][T24175] syzkaller0: entered allmulticast mode [ 684.574610][ T5939] tipc: Node number set to 2 [ 684.581733][T24178] tipc: Resetting bearer [ 684.588404][T24152] lo speed is unknown, defaulting to 1000 [ 684.622673][T24152] wlan1 speed is unknown, defaulting to 1000 [ 684.655313][T24154] lo speed is unknown, defaulting to 1000 [ 684.664380][T23727] bond34: (slave bridge15): failed to get link speed/duplex [ 684.725739][T24178] tipc: Resetting bearer [ 684.771602][T24178] tipc: Disabling bearer [ 684.796331][T24154] wlan1 speed is unknown, defaulting to 1000 [ 684.806033][T23732] bond34: (slave bridge15): failed to get link speed/duplex [ 684.813650][T24152] lo speed is unknown, defaulting to 1000 [ 684.864329][T24205] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5559'. [ 684.893325][T24205] netlink: 'syz.1.5559': attribute type 1 has an invalid length. [ 684.906758][T24205] netlink: 'syz.1.5559': attribute type 4 has an invalid length. [ 684.914781][T24205] netlink: 'syz.1.5559': attribute type 1 has an invalid length. [ 684.922556][T24205] netlink: 228 bytes leftover after parsing attributes in process `syz.1.5559'. [ 684.932520][T23732] bond34: (slave bridge15): failed to get link speed/duplex [ 685.105652][T24213] syzkaller0: entered promiscuous mode [ 685.111214][T24213] syzkaller0: entered allmulticast mode [ 685.154169][T23730] bond34: (slave bridge15): failed to get link speed/duplex [ 685.284165][T23733] bond34: (slave bridge15): failed to get link speed/duplex [ 685.291776][T24219] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5564'. [ 685.356103][T24223] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5566'. [ 685.374262][T24223] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5566'. [ 685.408113][T24225] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5566'. [ 685.445822][T24225] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5566'. [ 685.473718][T24221] syzkaller0: entered promiscuous mode [ 685.489038][T24221] syzkaller0: entered allmulticast mode [ 685.508781][T24154] lo speed is unknown, defaulting to 1000 [ 685.514915][T23730] bond34: (slave bridge15): failed to get link speed/duplex [ 685.766258][T24234] openvswitch: netlink: Flow actions attr not present in new flow. [ 685.911248][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.920919][ T1301] lec:lec_start_xmit: lec0:No lecd attached [ 687.290741][T24232] dummy0: entered promiscuous mode [ 687.297518][T24232] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 687.306000][T24232] dummy0: left promiscuous mode [ 687.370430][T23727] bond34: (slave bridge15): failed to get link speed/duplex [ 687.499681][T24262] pimreg: tun_chr_ioctl cmd 1074025677 [ 687.517011][T24262] pimreg: linktype set to 1 [ 687.534146][T23730] bond34: (slave bridge15): failed to get link speed/duplex [ 688.207206][T24254] infiniband syz1: set down [ 688.226948][T24254] infiniband syz1: added bond0 [ 688.249394][T24254] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 688.260459][T24254] infiniband syz1: Couldn't open port 1 [ 688.296096][T24288] netlink: 'syz.3.5586': attribute type 1 has an invalid length. [ 688.347516][T24288] netlink: 'syz.3.5586': attribute type 4 has an invalid length. [ 688.357214][T24288] netlink: 'syz.3.5586': attribute type 1 has an invalid length. [ 688.358149][T24290] lo speed is unknown, defaulting to 1000 [ 688.373705][T24288] __nla_validate_parse: 6 callbacks suppressed [ 688.373722][T24288] netlink: 228 bytes leftover after parsing attributes in process `syz.3.5586'. [ 688.416457][T24290] wlan1 speed is unknown, defaulting to 1000 [ 688.441964][T24254] RDS/IB: syz1: added [ 688.452646][T24254] smc: adding ib device syz1 with port count 1 [ 688.468126][T24293] ip6t_rpfilter: unknown options [ 688.475329][T24254] smc: ib device syz1 port 1 has no pnetid [ 688.557984][T24290] lo speed is unknown, defaulting to 1000 [ 688.586173][T24285] lo speed is unknown, defaulting to 1000 [ 688.713639][T24296] syzkaller0: entered promiscuous mode [ 688.734182][T24296] syzkaller0: entered allmulticast mode [ 688.782337][T24285] wlan1 speed is unknown, defaulting to 1000 [ 690.624919][T24311] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1280) ! [ 690.633602][T24285] lo speed is unknown, defaulting to 1000 [ 690.644724][T23727] net_ratelimit: 9 callbacks suppressed [ 690.644745][T23727] bond34: (slave bridge15): failed to get link speed/duplex [ 690.761197][T24313] netlink: 'syz.3.5594': attribute type 1 has an invalid length. [ 690.784310][T23727] bond34: (slave bridge15): failed to get link speed/duplex [ 690.827670][T24313] 8021q: adding VLAN 0 to HW filter on device bond45 [ 690.917956][T24313] bond45: (slave veth103): Enslaving as an active interface with a down link [ 691.014049][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5090 ms [ 691.022153][ C0] lec:lec_tx_timeout: lec0 [ 691.096557][T24317] bond45: (slave veth105): Enslaving as an active interface with a down link [ 691.115826][T24322] bond45: entered allmulticast mode [ 691.154424][T23730] bond34: (slave bridge15): failed to get link speed/duplex [ 691.261354][T24329] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5598'. [ 691.281543][T24329] vlan15: entered promiscuous mode [ 691.287058][T24329] ip6gretap0: entered promiscuous mode [ 691.335622][T23730] bond34: (slave bridge15): failed to get link speed/duplex [ 691.344801][T24331] netlink: 'syz.1.5599': attribute type 1 has an invalid length. [ 691.356537][T24331] netlink: 'syz.1.5599': attribute type 4 has an invalid length. [ 691.374115][T24331] netlink: 'syz.1.5599': attribute type 1 has an invalid length. [ 691.381918][T24331] netlink: 228 bytes leftover after parsing attributes in process `syz.1.5599'. [ 691.444351][T23730] bond34: (slave bridge15): failed to get link speed/duplex [ 691.554863][T23727] bond34: (slave bridge15): failed to get link speed/duplex [ 691.616089][T24339] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 691.664954][T23727] bond34: (slave bridge15): failed to get link speed/duplex [ 691.725872][T24345] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5604'. [ 691.784167][T23730] bond34: (slave bridge15): failed to get link speed/duplex [ 691.895896][T24347] syzkaller0: entered promiscuous mode [ 691.903677][T24347] syzkaller0: entered allmulticast mode [ 692.173916][T24354] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.5608'. [ 692.185826][T24354] netlink: Unknown conntrack attr (0) [ 693.818561][T24375] netlink: 44 bytes leftover after parsing attributes in process `syz.1.5614'. [ 693.843159][T24373] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5613'. [ 693.859179][T24373] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5613'. [ 694.226872][T24390] netlink: 'syz.3.5617': attribute type 21 has an invalid length. [ 694.245128][T24390] IPv6: NLM_F_CREATE should be specified when creating new route [ 694.399960][T24396] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5619'. [ 694.858535][T24409] syzkaller0: entered promiscuous mode [ 694.874525][T24409] syzkaller0: entered allmulticast mode [ 694.917721][T24411] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5623'. [ 695.489065][T14810] lec:lec_start_xmit: lec0:No lecd attached [ 696.546665][T23730] net_ratelimit: 10 callbacks suppressed [ 696.546687][T23730] bond34: (slave bridge15): failed to get link speed/duplex [ 696.674202][T23727] bond34: (slave bridge15): failed to get link speed/duplex [ 696.697840][T24424] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5627'. [ 696.760493][T24427] FAULT_INJECTION: forcing a failure. [ 696.760493][T24427] name failslab, interval 1, probability 0, space 0, times 0 [ 696.784117][T23743] bond34: (slave bridge15): failed to get link speed/duplex [ 696.794913][T24427] CPU: 0 UID: 0 PID: 24427 Comm: syz.1.5629 Not tainted syzkaller #0 PREEMPT(full) [ 696.794945][T24427] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 696.794959][T24427] Call Trace: [ 696.794968][T24427] [ 696.794979][T24427] dump_stack_lvl+0xe8/0x150 [ 696.795016][T24427] should_fail_ex+0x412/0x560 [ 696.795051][T24427] should_failslab+0xa8/0x100 [ 696.795083][T24427] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 696.795107][T24427] ? __alloc_skb+0x186/0x7d0 [ 696.795140][T24427] ? __alloc_skb+0x1d0/0x7d0 [ 696.795168][T24427] ? __local_bh_enable_ip+0xd0/0x130 [ 696.795203][T24427] __alloc_skb+0x1d0/0x7d0 [ 696.795240][T24427] netlink_sendmsg+0x5d4/0xb40 [ 696.795282][T24427] ? __pfx_netlink_sendmsg+0x10/0x10 [ 696.795316][T24427] ? aa_sock_msg_perm+0xf1/0x1b0 [ 696.795348][T24427] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 696.795386][T24427] ____sys_sendmsg+0x972/0x9f0 [ 696.795418][T24427] ? __pfx_____sys_sendmsg+0x10/0x10 [ 696.795450][T24427] ? import_iovec+0x73/0xa0 [ 696.795489][T24427] ___sys_sendmsg+0x2a5/0x360 [ 696.795516][T24427] ? __pfx____sys_sendmsg+0x10/0x10 [ 696.795588][T24427] ? __fget_files+0x2a/0x420 [ 696.795618][T24427] ? __fget_files+0x3a0/0x420 [ 696.795660][T24427] __x64_sys_sendmsg+0x1bd/0x2a0 [ 696.795684][T24427] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 696.795716][T24427] ? __pfx_ksys_write+0x10/0x10 [ 696.795752][T24427] do_syscall_64+0x14d/0xf80 [ 696.795773][T24427] ? trace_irq_disable+0x3b/0x150 [ 696.795803][T24427] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 696.795825][T24427] ? clear_bhb_loop+0x40/0x90 [ 696.795852][T24427] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 696.795874][T24427] RIP: 0033:0x7f2ed1d9c799 [ 696.795894][T24427] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 696.795914][T24427] RSP: 002b:00007f2ed2ce1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 696.795937][T24427] RAX: ffffffffffffffda RBX: 00007f2ed2016090 RCX: 00007f2ed1d9c799 [ 696.795953][T24427] RDX: 0000000004000000 RSI: 0000200000000200 RDI: 0000000000000007 [ 696.795967][T24427] RBP: 00007f2ed2ce1090 R08: 0000000000000000 R09: 0000000000000000 [ 696.795981][T24427] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 696.795994][T24427] R13: 00007f2ed2016128 R14: 00007f2ed2016090 R15: 00007ffcffdb23d8 [ 696.796028][T24427] [ 696.915876][T23743] bond34: (slave bridge15): failed to get link speed/duplex [ 697.148410][T24438] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5633'. [ 697.157591][T24438] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5633'. [ 697.199794][T23727] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 697.200005][T24438] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5633'. [ 697.217172][T23730] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 697.234269][T23730] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 697.249291][T24444] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5633'. [ 697.264418][T23730] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 697.318568][T24450] netlink: 'syz.0.5637': attribute type 1 has an invalid length. [ 697.406212][T24450] 8021q: adding VLAN 0 to HW filter on device bond36 [ 697.561270][T24454] bond36: (slave veth75): Enslaving as an active interface with a down link [ 697.615924][T24450] bond36: (slave veth77): Enslaving as an active interface with a down link [ 697.653566][T24460] syzkaller0: entered promiscuous mode [ 697.659343][T24460] syzkaller0: entered allmulticast mode [ 697.670798][T24468] netlink: 'syz.2.5642': attribute type 1 has an invalid length. [ 697.678878][T24459] bond36: entered allmulticast mode [ 697.695595][T24467] netlink: 'syz.2.5642': attribute type 4 has an invalid length. [ 697.703450][T24467] netlink: 'syz.2.5642': attribute type 1 has an invalid length. [ 698.049543][T24480] netlink: 'syz.4.5647': attribute type 1 has an invalid length. [ 699.323544][T24480] workqueue: Failed to create a rescuer kthread for wq "bond60": -EINTR [ 699.325385][ T59] bond34: (slave bridge15): failed to get link speed/duplex [ 699.521301][T24488] dummy0: entered promiscuous mode [ 699.529836][T24488] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 699.551621][T24488] dummy0: left promiscuous mode [ 699.595806][T23733] bond34: (slave bridge15): failed to get link speed/duplex [ 699.726416][T24500] vlan23: entered allmulticast mode [ 699.732042][T24500] bridge0: port 3(vlan23) entered blocking state [ 699.741008][T24500] bridge0: port 3(vlan23) entered disabled state [ 699.750407][T24500] vlan23: entered promiscuous mode [ 699.762002][T24503] __nla_validate_parse: 8 callbacks suppressed [ 699.762022][T24503] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5653'. [ 699.779332][T23727] bond34: (slave bridge15): failed to get link speed/duplex [ 699.811587][T24505] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5654'. [ 699.847414][T24500] netlink: 163508 bytes leftover after parsing attributes in process `syz.4.5652'. [ 699.896103][T23733] bond34: (slave bridge15): failed to get link speed/duplex [ 700.008725][T24509] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.5656'. [ 700.050553][T24509] netlink: Unknown conntrack attr (0) [ 700.131886][T24507] syzkaller0: entered promiscuous mode [ 700.156629][T24507] syzkaller0: entered allmulticast mode [ 700.186956][T23727] bond34: (slave bridge15): failed to get link speed/duplex [ 700.423612][T24528] FAULT_INJECTION: forcing a failure. [ 700.423612][T24528] name failslab, interval 1, probability 0, space 0, times 0 [ 700.461314][T24528] CPU: 1 UID: 0 PID: 24528 Comm: syz.0.5660 Not tainted syzkaller #0 PREEMPT(full) [ 700.461345][T24528] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 700.461360][T24528] Call Trace: [ 700.461369][T24528] [ 700.461379][T24528] dump_stack_lvl+0xe8/0x150 [ 700.461415][T24528] should_fail_ex+0x412/0x560 [ 700.461449][T24528] should_failslab+0xa8/0x100 [ 700.461479][T24528] __kmalloc_cache_noprof+0x88/0x660 [ 700.461499][T24528] ? __pfx_stack_trace_save+0x10/0x10 [ 700.461523][T24528] ? rtnl_newlink+0x136/0x1be0 [ 700.461558][T24528] rtnl_newlink+0x136/0x1be0 [ 700.461587][T24528] ? kasan_save_track+0x4f/0x80 [ 700.461607][T24528] ? kasan_save_track+0x3e/0x80 [ 700.461627][T24528] ? kasan_save_free_info+0x46/0x50 [ 700.461656][T24528] ? __kasan_slab_free+0x5c/0x80 [ 700.461677][T24528] ? kmem_cache_free+0x187/0x630 [ 700.461700][T24528] ? __dev_queue_xmit+0x17a7/0x38d0 [ 700.461722][T24528] ? __netlink_deliver_tap+0x5ad/0x850 [ 700.461750][T24528] ? netlink_deliver_tap+0x19c/0x1b0 [ 700.461775][T24528] ? netlink_unicast+0x7e3/0x9b0 [ 700.461798][T24528] ? netlink_sendmsg+0x813/0xb40 [ 700.461836][T24528] ? __pfx_rtnl_newlink+0x10/0x10 [ 700.461872][T24528] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 700.461930][T24528] ? kasan_quarantine_put+0xbb/0x1f0 [ 700.461952][T24528] ? lockdep_hardirqs_on+0x7a/0x110 [ 700.461990][T24528] ? kmem_cache_free+0x187/0x630 [ 700.462013][T24528] ? nlmon_xmit+0xb0/0x100 [ 700.462059][T24528] ? __lock_acquire+0x6b5/0x2cf0 [ 700.462091][T24528] ? __local_bh_enable_ip+0xd0/0x130 [ 700.462118][T24528] ? lockdep_hardirqs_on+0x7a/0x110 [ 700.462149][T24528] ? __dev_queue_xmit+0x28d/0x38d0 [ 700.462170][T24528] ? __local_bh_enable_ip+0xd0/0x130 [ 700.462194][T24528] ? __dev_queue_xmit+0x28d/0x38d0 [ 700.462241][T24528] ? __pfx_rtnl_newlink+0x10/0x10 [ 700.462275][T24528] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 700.462308][T24528] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 700.462335][T24528] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 700.462364][T24528] ? ref_tracker_free+0x693/0x840 [ 700.462390][T24528] ? __copy_skb_header+0xa3/0x4a0 [ 700.462413][T24528] ? __pfx_ref_tracker_free+0x10/0x10 [ 700.462451][T24528] netlink_rcv_skb+0x232/0x4b0 [ 700.462481][T24528] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 700.462511][T24528] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 700.462550][T24528] ? netlink_deliver_tap+0x2e/0x1b0 [ 700.462587][T24528] netlink_unicast+0x80f/0x9b0 [ 700.462621][T24528] ? __pfx_netlink_unicast+0x10/0x10 [ 700.462648][T24528] ? netlink_sendmsg+0x650/0xb40 [ 700.462675][T24528] ? skb_put+0x11b/0x210 [ 700.462709][T24528] netlink_sendmsg+0x813/0xb40 [ 700.462747][T24528] ? __pfx_netlink_sendmsg+0x10/0x10 [ 700.462779][T24528] ? aa_sock_msg_perm+0xf1/0x1b0 [ 700.462809][T24528] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 700.462836][T24528] ____sys_sendmsg+0x972/0x9f0 [ 700.462876][T24528] ? __pfx_____sys_sendmsg+0x10/0x10 [ 700.462906][T24528] ? import_iovec+0x73/0xa0 [ 700.462941][T24528] ___sys_sendmsg+0x2a5/0x360 [ 700.462967][T24528] ? __pfx____sys_sendmsg+0x10/0x10 [ 700.463024][T24528] ? __fget_files+0x2a/0x420 [ 700.463054][T24528] ? __fget_files+0x3a0/0x420 [ 700.463095][T24528] __x64_sys_sendmsg+0x1bd/0x2a0 [ 700.463118][T24528] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 700.463149][T24528] ? __pfx_ksys_write+0x10/0x10 [ 700.463183][T24528] do_syscall_64+0x14d/0xf80 [ 700.463203][T24528] ? trace_irq_disable+0x3b/0x150 [ 700.463232][T24528] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 700.463253][T24528] ? clear_bhb_loop+0x40/0x90 [ 700.463278][T24528] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 700.463299][T24528] RIP: 0033:0x7ffba4d9c799 [ 700.463320][T24528] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 700.463339][T24528] RSP: 002b:00007ffba5c16028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 700.463363][T24528] RAX: ffffffffffffffda RBX: 00007ffba5016090 RCX: 00007ffba4d9c799 [ 700.463379][T24528] RDX: 0000000004000000 RSI: 0000200000000200 RDI: 0000000000000007 [ 700.463393][T24528] RBP: 00007ffba5c16090 R08: 0000000000000000 R09: 0000000000000000 [ 700.463406][T24528] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 700.463418][T24528] R13: 00007ffba5016128 R14: 00007ffba5016090 R15: 00007ffe6bea8cb8 [ 700.463451][T24528] [ 701.020003][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5520 ms [ 701.028141][ C0] lec:lec_tx_timeout: lec0 [ 701.090469][T24543] netlink: 'syz.3.5662': attribute type 1 has an invalid length. [ 702.604209][T23733] bond34: (slave bridge15): failed to get link speed/duplex [ 702.644105][T24543] workqueue: Failed to create a rescuer kthread for wq "bond46": -EINTR [ 702.804069][T23732] bond34: (slave bridge15): failed to get link speed/duplex [ 702.944899][T23732] bond34: (slave bridge15): failed to get link speed/duplex [ 703.077649][ T59] bond34: (slave bridge15): failed to get link speed/duplex [ 703.092602][T24590] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5674'. [ 703.234240][ T59] bond34: (slave bridge15): failed to get link speed/duplex [ 703.247777][T24600] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.5675'. [ 703.265314][T24600] netlink: Unknown conntrack attr (0) [ 703.386107][T23732] bond34: (slave bridge15): failed to get link speed/duplex [ 703.515269][T24611] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5677'. [ 703.645501][T24610] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5678'. [ 703.654965][T23732] bond34: (slave bridge15): failed to get link speed/duplex [ 703.685896][T24610] netlink: 'syz.4.5678': attribute type 1 has an invalid length. [ 703.702518][T24610] netlink: 'syz.4.5678': attribute type 4 has an invalid length. [ 703.712895][T24610] netlink: 'syz.4.5678': attribute type 1 has an invalid length. [ 703.722716][T24610] netlink: 228 bytes leftover after parsing attributes in process `syz.4.5678'. [ 703.880574][T24613] syzkaller0: entered promiscuous mode [ 703.886411][T24613] syzkaller0: entered allmulticast mode [ 703.897087][T24617] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1280) ! [ 704.109595][T24621] netlink: 'syz.4.5681': attribute type 1 has an invalid length. [ 704.167885][T24623] netlink: 'syz.4.5681': attribute type 4 has an invalid length. [ 704.175902][T24623] netlink: 'syz.4.5681': attribute type 1 has an invalid length. [ 704.194413][T24623] netlink: 228 bytes leftover after parsing attributes in process `syz.4.5681'. [ 706.614255][ T59] bond34: (slave bridge15): failed to get link speed/duplex [ 706.726593][ T59] bond34: (slave bridge15): failed to get link speed/duplex [ 706.867860][T24637] syzkaller0: entered promiscuous mode [ 706.876322][T24637] syzkaller0: entered allmulticast mode [ 706.886990][T24644] syzkaller0: entered promiscuous mode [ 706.892693][T24644] syzkaller0: entered allmulticast mode [ 707.094986][T24653] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5691'. [ 708.647491][T24661] netlink: 'syz.1.5694': attribute type 1 has an invalid length. [ 708.869910][T24651] netlink: 'syz.0.5691': attribute type 29 has an invalid length. [ 708.878099][T24651] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5691'. [ 708.907543][T24655] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1280) ! [ 708.972414][T24666] netlink: 44 bytes leftover after parsing attributes in process `syz.0.5695'. [ 708.979749][T24661] bond43: entered promiscuous mode [ 708.987568][T24661] 8021q: adding VLAN 0 to HW filter on device bond43 [ 709.055743][T24663] bond43: (slave bridge25): making interface the new active one [ 709.063599][T24663] bridge25: entered promiscuous mode [ 709.072942][T24663] bridge25: left promiscuous mode [ 709.145422][T24672] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5698'. [ 709.209367][T24675] bond31: option ad_select: invalid value (34) [ 709.217940][T24675] bond31 (unregistering): Released all slaves [ 709.338285][T24680] syzkaller0: entered promiscuous mode [ 709.343826][T24680] syzkaller0: entered allmulticast mode [ 709.423263][ T59] net_ratelimit: 1 callbacks suppressed [ 709.423286][ T59] bond34: (slave bridge15): failed to get link speed/duplex [ 711.994427][T23727] bond34: (slave bridge15): failed to get link speed/duplex [ 712.104126][T23727] bond34: (slave bridge15): failed to get link speed/duplex [ 712.197870][T24711] tipc: Disabling bearer [ 712.244474][ T1096] bond34: (slave bridge15): failed to get link speed/duplex [ 712.370697][ T1096] bond34: (slave bridge15): failed to get link speed/duplex [ 712.432637][T24727] netlink: 'syz.3.5711': attribute type 3 has an invalid length. [ 712.507780][ T59] bond34: (slave bridge15): failed to get link speed/duplex [ 712.624471][ T1096] bond34: (slave bridge15): failed to get link speed/duplex [ 712.686805][T24740] netlink: 44 bytes leftover after parsing attributes in process `syz.4.5716'. [ 712.734112][ T59] bond34: (slave bridge15): failed to get link speed/duplex [ 712.874347][T23727] bond34: (slave bridge15): failed to get link speed/duplex [ 712.984121][ T59] bond34: (slave bridge15): failed to get link speed/duplex [ 713.180266][T24762] netlink: 4768 bytes leftover after parsing attributes in process `syz.4.5723'. [ 713.237730][T24762] bridge0: port 2(gretap0) entered blocking state [ 713.244922][T24762] bridge0: port 2(gretap0) entered forwarding state [ 713.275236][T24762] 8021q: adding VLAN 0 to HW filter on device bond0 [ 713.303568][T14366] lo speed is unknown, defaulting to 1000 [ 713.312219][T14366] sqz0: Port: 1 Link ACTIVE [ 713.324135][T14367] lo speed is unknown, defaulting to 1000 [ 713.403840][T24770] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5725'. [ 713.421502][T24770] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5725'. [ 713.494610][T24775] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5726'. [ 713.503691][T24775] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5726'. [ 713.516706][T24775] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5726'. [ 713.526725][T24775] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5726'. [ 713.538323][T24775] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5726'. [ 713.555207][T24775] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5726'. [ 713.647876][T24779] tipc: Enabling of bearer rejected, failed to enable media [ 714.504217][T23743] net_ratelimit: 12 callbacks suppressed [ 714.504242][T23743] bond34: (slave bridge15): failed to get link speed/duplex [ 714.675376][T24195] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 714.764373][T23743] bond34: (slave bridge15): failed to get link speed/duplex [ 714.952614][T23727] bond34: (slave bridge15): failed to get link speed/duplex [ 715.134228][T23727] bond34: (slave bridge15): failed to get link speed/duplex [ 715.274211][T23727] bond34: (slave bridge15): failed to get link speed/duplex [ 715.314138][T24846] lo speed is unknown, defaulting to 1000 [ 715.404268][T23727] bond34: (slave bridge15): failed to get link speed/duplex [ 715.499700][T24195] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 715.534207][T23727] bond34: (slave bridge15): link status up again after 0 ms [ 715.562821][T23727] bond34: (slave bridge15): failed to get link speed/duplex [ 715.598538][T24846] wlan1 speed is unknown, defaulting to 1000 [ 715.629641][T24843] lo speed is unknown, defaulting to 1000 [ 715.669448][T24846] lo speed is unknown, defaulting to 1000 [ 715.686105][T24843] wlan1 speed is unknown, defaulting to 1000 [ 715.704176][T23727] bond34: (slave bridge15): failed to get link speed/duplex [ 715.711663][T24858] netlink: 'syz.4.5753': attribute type 2 has an invalid length. [ 715.994105][T23727] bond34: (slave bridge15): failed to get link speed/duplex [ 716.143390][T24867] netlink: 'syz.3.5757': attribute type 1 has an invalid length. [ 716.182867][T24867] bond46: entered promiscuous mode [ 716.189104][T24867] 8021q: adding VLAN 0 to HW filter on device bond46 [ 716.344686][T24874] --map-set only usable from mangle table [ 716.430173][T24880] xt_socket: unknown flags 0x50 [ 716.473277][T24883] netlink: 'syz.3.5763': attribute type 1 has an invalid length. [ 716.658760][T24843] lo speed is unknown, defaulting to 1000 [ 716.735991][T24893] netlink: 'syz.2.5767': attribute type 1 has an invalid length. [ 716.877252][T24893] 8021q: adding VLAN 0 to HW filter on device bond31 [ 717.138451][T24895] bond31: (slave veth73): Enslaving as an active interface with a down link [ 717.329359][T24897] bond31: (slave veth75): Enslaving as an active interface with a down link [ 717.701175][T24914] netlink: 'syz.4.5771': attribute type 1 has an invalid length. [ 717.799930][T24916] __nla_validate_parse: 57 callbacks suppressed [ 717.799952][T24916] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5771'. [ 717.834890][T24916] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5771'. [ 717.909878][T24921] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5773'. [ 717.925668][T24914] bond60: entered promiscuous mode [ 717.944550][T24914] 8021q: adding VLAN 0 to HW filter on device bond60 [ 717.999255][T24921] vlan11: entered promiscuous mode [ 718.014296][T24921] ip6gretap0: entered promiscuous mode [ 718.128522][T24930] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5776'. [ 718.144473][T24931] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5776'. [ 718.371037][T24925] lo speed is unknown, defaulting to 1000 [ 718.391120][T24943] netlink: 'syz.1.5779': attribute type 1 has an invalid length. [ 718.651526][T24943] 8021q: adding VLAN 0 to HW filter on device bond44 [ 718.665795][T24923] lo speed is unknown, defaulting to 1000 [ 718.689361][T24925] wlan1 speed is unknown, defaulting to 1000 [ 718.738967][T24945] bond44: (slave veth71): Enslaving as an active interface with a down link [ 718.782003][T24948] bond44: (slave veth73): Enslaving as an active interface with a down link [ 718.792039][T24953] tipc: Enabling of bearer rejected, failed to enable media [ 718.800933][T24925] lo speed is unknown, defaulting to 1000 [ 718.853695][T24923] wlan1 speed is unknown, defaulting to 1000 [ 718.873195][T24954] tipc: Enabling of bearer rejected, failed to enable media [ 719.355130][T24977] netlink: 'syz.4.5788': attribute type 1 has an invalid length. [ 719.430020][T24977] 8021q: adding VLAN 0 to HW filter on device bond61 [ 719.566776][T24986] bond61: (slave veth129): Enslaving as an active interface with a down link [ 719.664363][T23727] net_ratelimit: 23 callbacks suppressed [ 719.664384][T23727] bond34: (slave bridge15): failed to get link speed/duplex [ 719.740348][T24977] bond61: (slave veth131): Enslaving as an active interface with a down link [ 719.771668][T24989] bond61: entered allmulticast mode [ 719.788568][T24923] lo speed is unknown, defaulting to 1000 [ 719.862447][T24991] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5792'. [ 719.901245][T24993] ip6t_rpfilter: unknown options [ 719.907267][T24991] netlink: 'syz.1.5792': attribute type 1 has an invalid length. [ 719.937726][T24991] netlink: 'syz.1.5792': attribute type 4 has an invalid length. [ 719.945813][T24991] netlink: 'syz.1.5792': attribute type 1 has an invalid length. [ 719.953587][T24991] netlink: 228 bytes leftover after parsing attributes in process `syz.1.5792'. [ 720.085909][T24998] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.5795'. [ 720.114380][T24998] netlink: Unknown conntrack attr (0) [ 720.328388][T23727] bond34: (slave bridge15): failed to get link speed/duplex [ 720.379169][T25000] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5796'. [ 720.444189][T23733] bond34: (slave bridge15): failed to get link speed/duplex [ 720.509204][T25009] FAULT_INJECTION: forcing a failure. [ 720.509204][T25009] name failslab, interval 1, probability 0, space 0, times 0 [ 720.525385][T25009] CPU: 0 UID: 0 PID: 25009 Comm: syz.2.5800 Not tainted syzkaller #0 PREEMPT(full) [ 720.525416][T25009] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 720.525430][T25009] Call Trace: [ 720.525440][T25009] [ 720.525450][T25009] dump_stack_lvl+0xe8/0x150 [ 720.525487][T25009] should_fail_ex+0x412/0x560 [ 720.525524][T25009] should_failslab+0xa8/0x100 [ 720.525553][T25009] ? dst_alloc+0x105/0x170 [ 720.525659][T25009] kmem_cache_alloc_noprof+0x87/0x650 [ 720.525682][T25009] ? __pfx_find_exception+0x10/0x10 [ 720.525767][T25009] dst_alloc+0x105/0x170 [ 720.525797][T25009] ip_route_output_key_hash_rcu+0x14d0/0x25d0 [ 720.525840][T25009] ? ip_route_output_key_hash+0xd8/0x2a0 [ 720.525876][T25009] ip_route_output_key_hash+0x18d/0x2a0 [ 720.525912][T25009] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 720.525951][T25009] ? ip_cmsg_send+0x9c3/0xa70 [ 720.526030][T25009] ip_route_output_flow+0x2a/0x150 [ 720.526059][T25009] ? security_sk_classify_flow+0x6d/0x150 [ 720.526087][T25009] raw_sendmsg+0x1199/0x1a50 [ 720.526167][T25009] ? __pfx_raw_sendmsg+0x10/0x10 [ 720.526217][T25009] ? aa_sk_perm+0x6d5/0x900 [ 720.526253][T25009] ? __pfx_aa_sk_perm+0x10/0x10 [ 720.526277][T25009] ? tomoyo_socket_sendmsg_permission+0x215/0x300 [ 720.526315][T25009] ? sock_rps_record_flow+0x19/0x350 [ 720.526398][T25009] ? inet_sendmsg+0x2f4/0x370 [ 720.526418][T25009] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 720.526447][T25009] ____sys_sendmsg+0x80a/0x9f0 [ 720.526478][T25009] ? __pfx_____sys_sendmsg+0x10/0x10 [ 720.526510][T25009] ? import_iovec+0x73/0xa0 [ 720.526547][T25009] ___sys_sendmsg+0x2a5/0x360 [ 720.526575][T25009] ? __pfx____sys_sendmsg+0x10/0x10 [ 720.526604][T25009] ? kstrtouint+0x6e/0xe0 [ 720.526660][T25009] ? __fget_files+0x2a/0x420 [ 720.526692][T25009] ? __fget_files+0x3a0/0x420 [ 720.526736][T25009] __sys_sendmmsg+0x27c/0x4e0 [ 720.526765][T25009] ? __pfx___sys_sendmmsg+0x10/0x10 [ 720.526785][T25009] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 720.526838][T25009] ? ksys_write+0x242/0x270 [ 720.526865][T25009] ? __pfx_ksys_write+0x10/0x10 [ 720.526897][T25009] __x64_sys_sendmmsg+0xa0/0xc0 [ 720.526922][T25009] do_syscall_64+0x14d/0xf80 [ 720.526943][T25009] ? trace_irq_disable+0x3b/0x150 [ 720.526975][T25009] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 720.527005][T25009] ? clear_bhb_loop+0x40/0x90 [ 720.527033][T25009] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 720.527056][T25009] RIP: 0033:0x7f84ac59c799 [ 720.527078][T25009] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 720.527098][T25009] RSP: 002b:00007f84aa7f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 720.527123][T25009] RAX: ffffffffffffffda RBX: 00007f84ac815fa0 RCX: 00007f84ac59c799 [ 720.527140][T25009] RDX: 0000000000000001 RSI: 0000200000003e40 RDI: 0000000000000003 [ 720.527155][T25009] RBP: 00007f84aa7f6090 R08: 0000000000000000 R09: 0000000000000000 [ 720.527169][T25009] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 720.527183][T25009] R13: 00007f84ac816038 R14: 00007f84ac815fa0 R15: 00007ffee307b398 [ 720.527219][T25009] [ 720.865842][T25011] netlink: 132 bytes leftover after parsing attributes in process `syz.4.5799'. [ 720.904585][ T1096] bond34: (slave bridge15): failed to get link speed/duplex [ 721.014997][T23727] bond34: (slave bridge15): failed to get link speed/duplex [ 721.190596][T23733] bond34: (slave bridge15): failed to get link speed/duplex [ 721.252813][T25030] openvswitch: netlink: IP tunnel TTL not specified. [ 721.262715][T25031] ip6t_rpfilter: unknown options [ 721.325917][T23727] bond34: (slave bridge15): failed to get link speed/duplex [ 721.434269][ T59] bond34: (slave bridge15): failed to get link speed/duplex [ 722.329918][T25058] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 723.791342][T25107] validate_nla: 1 callbacks suppressed [ 723.791363][T25107] netlink: 'syz.4.5821': attribute type 1 has an invalid length. [ 723.956370][T25107] 8021q: adding VLAN 0 to HW filter on device bond62 [ 724.147513][T25112] bond62: (slave veth133): Enslaving as an active interface with a down link [ 724.230691][T25119] ip6t_rpfilter: unknown options [ 724.306349][T25113] bond62: (slave veth135): Enslaving as an active interface with a down link [ 724.374897][T25122] __nla_validate_parse: 1 callbacks suppressed [ 724.374919][T25122] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5825'. [ 724.558378][T25128] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 724.765797][T23743] net_ratelimit: 12 callbacks suppressed [ 724.765821][T23743] bond34: (slave bridge15): failed to get link speed/duplex [ 724.917406][T23743] bond34: (slave bridge15): failed to get link speed/duplex [ 724.930230][T25144] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.5830'. [ 724.982455][T25144] netlink: Unknown conntrack attr (0) [ 725.034531][T23743] bond34: (slave bridge15): failed to get link speed/duplex [ 725.129460][T25150] openvswitch: netlink: IP tunnel TTL not specified. [ 725.154180][T23730] bond34: (slave bridge15): failed to get link speed/duplex [ 725.267533][ T1096] bond34: (slave bridge15): failed to get link speed/duplex [ 725.311811][T25156] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5837'. [ 725.345098][T25156] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5837'. [ 725.361179][T25156] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5837'. [ 725.385452][T23743] bond34: (slave bridge15): failed to get link speed/duplex [ 725.456541][T25156] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5837'. [ 725.494389][ T1096] bond34: (slave bridge15): failed to get link speed/duplex [ 725.604535][ T1096] bond34: (slave bridge15): failed to get link speed/duplex [ 725.775965][T25175] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5844'. [ 728.839460][T25179] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 729.022376][T25206] netlink: 'syz.0.5850': attribute type 1 has an invalid length. [ 729.103708][T25214] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5850'. [ 729.139409][T25206] bond37: entered promiscuous mode [ 729.144964][T25214] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5850'. [ 729.156279][T25206] 8021q: adding VLAN 0 to HW filter on device bond37 [ 729.164763][T25210] tipc: Disabling bearer [ 729.183626][T25217] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5855'. [ 729.211888][T25217] hsr_slave_0 (unregistering): left promiscuous mode [ 729.310249][T25222] FAULT_INJECTION: forcing a failure. [ 729.310249][T25222] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 729.325102][T25222] CPU: 1 UID: 0 PID: 25222 Comm: syz.0.5857 Not tainted syzkaller #0 PREEMPT(full) [ 729.325133][T25222] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 729.325156][T25222] Call Trace: [ 729.325166][T25222] [ 729.325175][T25222] dump_stack_lvl+0xe8/0x150 [ 729.325213][T25222] should_fail_ex+0x412/0x560 [ 729.325248][T25222] _copy_to_user+0x31/0xb0 [ 729.325284][T25222] simple_read_from_buffer+0xe1/0x170 [ 729.325322][T25222] proc_fail_nth_read+0x1bb/0x230 [ 729.325357][T25222] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 729.325393][T25222] ? rw_verify_area+0x2a6/0x4d0 [ 729.325416][T25222] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 729.325450][T25222] vfs_read+0x20c/0xa70 [ 729.325471][T25222] ? fdget_pos+0x246/0x320 [ 729.325509][T25222] ? __pfx___mutex_lock+0x10/0x10 [ 729.325534][T25222] ? __pfx_vfs_read+0x10/0x10 [ 729.325559][T25222] ? __fget_files+0x2a/0x420 [ 729.325596][T25222] ? __fget_files+0x3a0/0x420 [ 729.325627][T25222] ? __fget_files+0x2a/0x420 [ 729.325671][T25222] ksys_read+0x150/0x270 [ 729.325697][T25222] ? __pfx_ksys_read+0x10/0x10 [ 729.325734][T25222] do_syscall_64+0x14d/0xf80 [ 729.325755][T25222] ? trace_irq_disable+0x3b/0x150 [ 729.325788][T25222] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 729.325812][T25222] ? clear_bhb_loop+0x40/0x90 [ 729.325841][T25222] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 729.325864][T25222] RIP: 0033:0x7ffba4d5cfce [ 729.325885][T25222] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 729.325906][T25222] RSP: 002b:00007ffba5c36fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 729.325930][T25222] RAX: ffffffffffffffda RBX: 00007ffba5c376c0 RCX: 00007ffba4d5cfce [ 729.325947][T25222] RDX: 000000000000000f RSI: 00007ffba5c370a0 RDI: 0000000000000004 [ 729.325961][T25222] RBP: 00007ffba5c37090 R08: 0000000000000000 R09: 0000000000000000 [ 729.325975][T25222] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 729.325988][T25222] R13: 00007ffba5016038 R14: 00007ffba5015fa0 R15: 00007ffe6bea8cb8 [ 729.326023][T25222] [ 729.550315][T25224] netlink: 'syz.3.5856': attribute type 1 has an invalid length. [ 729.567147][T25219] netlink: 'syz.3.5856': attribute type 4 has an invalid length. [ 729.575333][T25219] netlink: 'syz.3.5856': attribute type 1 has an invalid length. [ 729.583106][T25219] __nla_validate_parse: 1 callbacks suppressed [ 729.583127][T25219] netlink: 228 bytes leftover after parsing attributes in process `syz.3.5856'. [ 729.774215][ T1096] net_ratelimit: 33 callbacks suppressed [ 729.774239][ T1096] bond34: (slave bridge15): failed to get link speed/duplex [ 729.977527][T25246] netlink: 48 bytes leftover after parsing attributes in process `syz.3.5864'. [ 730.180286][T23743] bond34: (slave bridge15): failed to get link speed/duplex [ 730.306792][ T1096] bond34: (slave bridge15): failed to get link speed/duplex [ 730.455938][ T1096] bond34: (slave bridge15): failed to get link speed/duplex [ 730.486836][T25264] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5870'. [ 730.568550][T23743] bond34: (slave bridge15): failed to get link speed/duplex [ 730.588151][T25268] netlink: 'syz.1.5871': attribute type 11 has an invalid length. [ 730.691513][T25273] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5874'. [ 730.701002][ T1096] bond34: (slave bridge15): failed to get link speed/duplex [ 730.718773][T25273] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5874'. [ 730.759984][T25273] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5874'. [ 730.784295][T25273] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5874'. [ 730.800900][T25273] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5874'. [ 730.805461][T25282] netlink: 44 bytes leftover after parsing attributes in process `syz.1.5876'. [ 730.810790][T25273] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5874'. [ 730.828303][ T1096] bond34: (slave bridge15): failed to get link speed/duplex [ 730.944108][ T1096] bond34: (slave bridge15): failed to get link speed/duplex [ 731.265079][ T49] bond34: (slave bridge15): link status up again after 0 ms [ 731.298316][ T49] bond34: (slave bridge15): link status up again after 0 ms [ 731.619848][T25310] geneve0: entered promiscuous mode [ 731.635931][T25310] geneve0: entered allmulticast mode [ 732.029469][T25342] veth1_to_batadv: entered promiscuous mode [ 732.084228][T25342] veth1_to_batadv: left promiscuous mode [ 733.172723][T25388] netlink: 'syz.0.5912': attribute type 3 has an invalid length. [ 733.191695][T25388] netlink: 'syz.0.5912': attribute type 3 has an invalid length. [ 733.885482][T25419] netlink: 'syz.3.5924': attribute type 1 has an invalid length. [ 733.935502][T25419] 8021q: adding VLAN 0 to HW filter on device bond47 [ 733.971479][T25425] bond47: (slave veth107): Enslaving as an active interface with a down link [ 734.078838][T25419] bond47: (slave veth109): Enslaving as an active interface with a down link [ 734.246309][T25439] netlink: 'syz.4.5931': attribute type 16 has an invalid length. [ 734.254536][T25439] netlink: 'syz.4.5931': attribute type 17 has an invalid length. [ 734.557545][T25457] netlink: 'syz.0.5936': attribute type 1 has an invalid length. [ 734.622657][T25457] bond38: (slave ip6gre2): The slave device specified does not support setting the MAC address [ 734.633319][T25457] bond38: (slave ip6gre2): Setting fail_over_mac to active for active-backup mode [ 734.647052][T25457] bond38: (slave ip6gre2): making interface the new active one [ 734.656169][T25457] bond38: (slave ip6gre2): Enslaving as an active interface with an up link [ 734.719659][T25465] netlink: 'syz.3.5939': attribute type 29 has an invalid length. [ 734.731050][T25465] netlink: 'syz.3.5939': attribute type 29 has an invalid length. [ 734.834390][T23730] net_ratelimit: 31 callbacks suppressed [ 734.834414][T23730] bond34: (slave bridge15): failed to get link speed/duplex [ 734.871639][T25471] __nla_validate_parse: 9 callbacks suppressed [ 734.871660][T25471] netlink: 524 bytes leftover after parsing attributes in process `syz.3.5939'. [ 734.892971][T25472] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5941'. [ 734.902236][T25472] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5941'. [ 734.912621][T25472] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5941'. [ 734.922338][T25472] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5941'. [ 734.937190][T25472] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5941'. [ 734.946520][T25472] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5941'. [ 734.976144][T23730] bond34: (slave bridge15): failed to get link speed/duplex [ 734.990127][T25472] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5941'. [ 735.018194][T25472] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5941'. [ 735.084131][T23730] bond34: (slave bridge15): failed to get link speed/duplex [ 735.182105][T25474] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 735.224322][T23732] bond34: (slave bridge15): failed to get link speed/duplex [ 735.343845][T25478] tipc: Resetting bearer [ 735.353821][T25478] tipc: Resetting bearer [ 735.428823][T25482] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 735.484983][T14366] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 735.506178][T23732] bond34: (slave bridge15): failed to get link speed/duplex [ 735.617941][T23730] bond34: (slave bridge15): failed to get link speed/duplex [ 735.712322][T25485] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5946'. [ 735.744295][T25490] netlink: Unknown conntrack attr (0) [ 735.774952][T23730] bond34: (slave bridge15): failed to get link speed/duplex [ 735.834551][T14366] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 735.934546][ T1096] bond34: (slave bridge15): failed to get link speed/duplex [ 735.941967][ T5939] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 736.007004][T25500] vlan25: entered promiscuous mode [ 736.033001][T25502] netlink: 'syz.0.5952': attribute type 1 has an invalid length. [ 736.088110][T25502] bond39: entered promiscuous mode [ 736.093859][T25502] 8021q: adding VLAN 0 to HW filter on device bond39 [ 736.226575][T25510] syz_tun: entered allmulticast mode [ 736.239706][T25510] 8021q: VLANs not supported on caif0 [ 736.248750][T25508] syz_tun: left allmulticast mode [ 736.507896][T25524] FAULT_INJECTION: forcing a failure. [ 736.507896][T25524] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 736.525333][ T5939] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 736.585130][T25524] CPU: 1 UID: 0 PID: 25524 Comm: syz.0.5961 Not tainted syzkaller #0 PREEMPT(full) [ 736.585161][T25524] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 736.585176][T25524] Call Trace: [ 736.585185][T25524] [ 736.585195][T25524] dump_stack_lvl+0xe8/0x150 [ 736.585237][T25524] should_fail_ex+0x412/0x560 [ 736.585272][T25524] _copy_from_iter+0x1d3/0x1670 [ 736.585307][T25524] ? rcu_is_watching+0x15/0xb0 [ 736.585345][T25524] ? __pfx__copy_from_iter+0x10/0x10 [ 736.585385][T25524] ? netlink_sendmsg+0x650/0xb40 [ 736.585415][T25524] ? skb_put+0x11b/0x210 [ 736.585451][T25524] netlink_sendmsg+0x6c0/0xb40 [ 736.585492][T25524] ? __pfx_netlink_sendmsg+0x10/0x10 [ 736.585536][T25524] ? aa_sock_msg_perm+0xf1/0x1b0 [ 736.585568][T25524] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 736.585598][T25524] ____sys_sendmsg+0x972/0x9f0 [ 736.585618][T25524] ? __lock_acquire+0x6b5/0x2cf0 [ 736.585656][T25524] ? __pfx_____sys_sendmsg+0x10/0x10 [ 736.585688][T25524] ? import_iovec+0x73/0xa0 [ 736.585725][T25524] ___sys_sendmsg+0x2a5/0x360 [ 736.585753][T25524] ? __pfx____sys_sendmsg+0x10/0x10 [ 736.585781][T25524] ? kstrtouint+0x6e/0xe0 [ 736.585836][T25524] ? __fget_files+0x2a/0x420 [ 736.585869][T25524] ? __fget_files+0x3a0/0x420 [ 736.585912][T25524] __sys_sendmmsg+0x27c/0x4e0 [ 736.585941][T25524] ? __pfx___sys_sendmmsg+0x10/0x10 [ 736.585962][T25524] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 736.586013][T25524] ? ksys_write+0x242/0x270 [ 736.586041][T25524] ? __pfx_ksys_write+0x10/0x10 [ 736.586072][T25524] __x64_sys_sendmmsg+0xa0/0xc0 [ 736.586096][T25524] do_syscall_64+0x14d/0xf80 [ 736.586117][T25524] ? trace_irq_disable+0x3b/0x150 [ 736.586149][T25524] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 736.586171][T25524] ? clear_bhb_loop+0x40/0x90 [ 736.586199][T25524] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 736.586221][T25524] RIP: 0033:0x7ffba4d9c799 [ 736.586242][T25524] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 736.586262][T25524] RSP: 002b:00007ffba5c37028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 736.586286][T25524] RAX: ffffffffffffffda RBX: 00007ffba5015fa0 RCX: 00007ffba4d9c799 [ 736.586302][T25524] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000004 [ 736.586318][T25524] RBP: 00007ffba5c37090 R08: 0000000000000000 R09: 0000000000000000 [ 736.586333][T25524] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 736.586346][T25524] R13: 00007ffba5016038 R14: 00007ffba5015fa0 R15: 00007ffe6bea8cb8 [ 736.586381][T25524] [ 736.959077][T25530] netlink: 'syz.1.5962': attribute type 1 has an invalid length. [ 737.015476][T25532] netlink: 'syz.0.5964': attribute type 1 has an invalid length. [ 737.069003][T25530] 8021q: adding VLAN 0 to HW filter on device bond45 [ 737.196068][T25532] 8021q: adding VLAN 0 to HW filter on device bond40 [ 737.203680][T25535] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1280) ! [ 737.240017][T25536] bond45: (slave veth75): Enslaving as an active interface with a down link [ 737.377452][T25540] bond40: (slave veth79): Enslaving as an active interface with a down link [ 737.443132][T25530] bond45: (slave veth77): Enslaving as an active interface with a down link [ 737.478071][T25543] bond40: (slave veth81): Enslaving as an active interface with a down link [ 737.507474][T25544] bond45: entered allmulticast mode [ 737.642341][T25565] FAULT_INJECTION: forcing a failure. [ 737.642341][T25565] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 737.674195][T25565] CPU: 0 UID: 0 PID: 25565 Comm: syz.2.5975 Not tainted syzkaller #0 PREEMPT(full) [ 737.674226][T25565] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 737.674241][T25565] Call Trace: [ 737.674251][T25565] [ 737.674261][T25565] dump_stack_lvl+0xe8/0x150 [ 737.674298][T25565] should_fail_ex+0x412/0x560 [ 737.674332][T25565] _copy_from_user+0x2d/0xb0 [ 737.674367][T25565] ___sys_sendmsg+0x1c6/0x360 [ 737.674407][T25565] ? __pfx____sys_sendmsg+0x10/0x10 [ 737.674466][T25565] ? __fget_files+0x2a/0x420 [ 737.674498][T25565] ? __fget_files+0x3a0/0x420 [ 737.674541][T25565] __x64_sys_sendmsg+0x1bd/0x2a0 [ 737.674566][T25565] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 737.674598][T25565] ? __pfx_ksys_write+0x10/0x10 [ 737.674634][T25565] do_syscall_64+0x14d/0xf80 [ 737.674656][T25565] ? trace_irq_disable+0x3b/0x150 [ 737.674688][T25565] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 737.674711][T25565] ? clear_bhb_loop+0x40/0x90 [ 737.674740][T25565] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 737.674761][T25565] RIP: 0033:0x7f84ac59c799 [ 737.674783][T25565] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 737.674803][T25565] RSP: 002b:00007f84aa7f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 737.674825][T25565] RAX: ffffffffffffffda RBX: 00007f84ac815fa0 RCX: 00007f84ac59c799 [ 737.674842][T25565] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 737.674856][T25565] RBP: 00007f84aa7f6090 R08: 0000000000000000 R09: 0000000000000000 [ 737.674871][T25565] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 737.674883][T25565] R13: 00007f84ac816038 R14: 00007f84ac815fa0 R15: 00007ffee307b398 [ 737.674918][T25565] [ 738.203797][T25585] syzkaller0: entered promiscuous mode [ 738.219297][T25585] syzkaller0: entered allmulticast mode [ 738.453200][T25592] tipc: Resetting bearer [ 738.479426][T25592] tipc: Resetting bearer [ 738.530833][T25598] x_tables: ip_tables: osf match: only valid for protocol 6 [ 738.574837][T25607] RDS: rds_bind could not find a transport for fc02::, load rds_tcp or rds_rdma? [ 738.634546][T21608] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 738.776181][T25613] pimreg: entered allmulticast mode [ 738.783748][T25613] pimreg: left allmulticast mode [ 738.875646][T25595] syzkaller0: entered promiscuous mode [ 738.881195][T25595] syzkaller0: entered allmulticast mode [ 739.068102][T25636] xt_hashlimit: size too large, truncated to 1048576 [ 739.511297][T21608] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 741.524995][T25672] SET target dimension over the limit! [ 741.563446][T25683] __nla_validate_parse: 11 callbacks suppressed [ 741.563470][T25683] netlink: 52 bytes leftover after parsing attributes in process `syz.3.6009'. [ 741.809951][T25690] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6011'. [ 741.819925][T24195] wlan1 speed is unknown, defaulting to 1000 [ 741.827003][T23732] net_ratelimit: 20 callbacks suppressed [ 741.827026][T23732] bond34: (slave bridge15): failed to get link speed/duplex [ 741.945142][T23727] bond34: (slave bridge15): failed to get link speed/duplex [ 742.084257][ T49] bond34: (slave bridge15): failed to get link speed/duplex [ 742.236422][T23743] bond34: (slave bridge15): failed to get link speed/duplex [ 742.340832][T25723] openvswitch: netlink: IP tunnel TTL not specified. [ 742.354501][ T36] bond34: (slave bridge15): failed to get link speed/duplex [ 742.474114][T23732] bond34: (slave bridge15): failed to get link speed/duplex [ 742.604104][T23743] bond34: (slave bridge15): failed to get link speed/duplex [ 742.683125][T25739] FAULT_INJECTION: forcing a failure. [ 742.683125][T25739] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 742.698883][T25739] CPU: 1 UID: 0 PID: 25739 Comm: syz.3.6022 Not tainted syzkaller #0 PREEMPT(full) [ 742.698912][T25739] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 742.698926][T25739] Call Trace: [ 742.698936][T25739] [ 742.698945][T25739] dump_stack_lvl+0xe8/0x150 [ 742.698979][T25739] should_fail_ex+0x412/0x560 [ 742.699020][T25739] _copy_from_iter+0x1d3/0x1670 [ 742.699050][T25739] ? rcu_is_watching+0x15/0xb0 [ 742.699085][T25739] ? trace_kmem_cache_alloc+0x29/0xf0 [ 742.699108][T25739] ? __build_skb+0x62/0x440 [ 742.699142][T25739] ? __build_skb+0x62/0x440 [ 742.699171][T25739] ? __pfx__copy_from_iter+0x10/0x10 [ 742.699205][T25739] ? __build_skb+0x2a2/0x440 [ 742.699237][T25739] ? netlink_sendmsg+0x650/0xb40 [ 742.699267][T25739] ? skb_put+0x11b/0x210 [ 742.699302][T25739] netlink_sendmsg+0x6c0/0xb40 [ 742.699342][T25739] ? __pfx_netlink_sendmsg+0x10/0x10 [ 742.699377][T25739] ? aa_sock_msg_perm+0xf1/0x1b0 [ 742.699408][T25739] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 742.699438][T25739] ____sys_sendmsg+0x972/0x9f0 [ 742.699469][T25739] ? __pfx_____sys_sendmsg+0x10/0x10 [ 742.699501][T25739] ? import_iovec+0x73/0xa0 [ 742.699537][T25739] ___sys_sendmsg+0x2a5/0x360 [ 742.699566][T25739] ? __pfx____sys_sendmsg+0x10/0x10 [ 742.699612][T25739] ? __fget_files+0x2a/0x420 [ 742.699638][T25739] ? __fget_files+0x3a0/0x420 [ 742.699674][T25739] __x64_sys_sendmsg+0x1bd/0x2a0 [ 742.699694][T25739] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 742.699731][T25739] ? __pfx_ksys_write+0x10/0x10 [ 742.699759][T25739] do_syscall_64+0x14d/0xf80 [ 742.699776][T25739] ? trace_irq_disable+0x3b/0x150 [ 742.699802][T25739] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 742.699820][T25739] ? clear_bhb_loop+0x40/0x90 [ 742.699842][T25739] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 742.699859][T25739] RIP: 0033:0x7fea35f9c799 [ 742.699876][T25739] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 742.699892][T25739] RSP: 002b:00007fea36d73028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 742.699911][T25739] RAX: ffffffffffffffda RBX: 00007fea36215fa0 RCX: 00007fea35f9c799 [ 742.699924][T25739] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 742.699936][T25739] RBP: 00007fea36d73090 R08: 0000000000000000 R09: 0000000000000000 [ 742.699947][T25739] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 742.699958][T25739] R13: 00007fea36216038 R14: 00007fea36215fa0 R15: 00007ffea2a69e38 [ 742.699985][T25739] [ 742.734709][ T49] bond34: (slave bridge15): failed to get link speed/duplex [ 743.040692][T25749] netlink: 'syz.3.6025': attribute type 3 has an invalid length. [ 743.100197][T25753] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 743.324530][T25768] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6028'. [ 743.600620][T25784] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.6035'. [ 743.626628][T25784] netlink: 'syz.0.6035': attribute type 1 has an invalid length. [ 743.657124][T25784] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6035'. [ 743.739578][T25788] netlink: 'syz.4.6037': attribute type 1 has an invalid length. [ 743.836081][T25796] netlink: 64 bytes leftover after parsing attributes in process `syz.4.6037'. [ 743.848058][T25794] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6039'. [ 743.857298][T25794] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6039'. [ 743.875268][T25788] 8021q: adding VLAN 0 to HW filter on device bond63 [ 744.042119][T25814] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6043'. [ 744.246096][T25827] x_tables: duplicate underflow at hook 1 [ 744.506996][T25839] bond48: option updelay: invalid value (18446744072924056005) [ 744.517801][T25842] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6054'. [ 744.565050][T25839] bond48: option updelay: allowed values 0 - 2147483647 [ 744.602302][T25839] bond48 (unregistering): Released all slaves [ 744.935706][T25857] FAULT_INJECTION: forcing a failure. [ 744.935706][T25857] name failslab, interval 1, probability 0, space 0, times 0 [ 744.970322][T25856] lo speed is unknown, defaulting to 1000 [ 744.987081][T25856] wlan1 speed is unknown, defaulting to 1000 [ 744.989962][T25857] CPU: 0 UID: 0 PID: 25857 Comm: syz.1.6061 Not tainted syzkaller #0 PREEMPT(full) [ 744.990057][T25857] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 744.990104][T25857] Call Trace: [ 744.990132][T25857] [ 744.990162][T25857] dump_stack_lvl+0xe8/0x150 [ 744.990271][T25857] should_fail_ex+0x412/0x560 [ 744.990355][T25857] should_failslab+0xa8/0x100 [ 744.990438][T25857] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 744.990511][T25857] ? __alloc_skb+0x1d0/0x7d0 [ 744.990594][T25857] ? __local_bh_enable_ip+0xd0/0x130 [ 744.990678][T25857] __alloc_skb+0x1d0/0x7d0 [ 744.990756][T25857] __netdev_alloc_skb+0xc1/0x810 [ 744.990849][T25857] ovs_packet_cmd_execute+0x205/0xea0 [ 744.990954][T25857] ? __pfx_ovs_packet_cmd_execute+0x10/0x10 [ 744.991047][T25857] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 744.991131][T25857] genl_family_rcv_msg_doit+0x22a/0x330 [ 744.991219][T25857] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 744.991312][T25857] ? bpf_lsm_capable+0x9/0x20 [ 744.991393][T25857] ? security_capable+0x7e/0x2c0 [ 744.991512][T25857] genl_rcv_msg+0x61c/0x7a0 [ 744.991592][T25857] ? __pfx_genl_rcv_msg+0x10/0x10 [ 744.991644][T25857] ? __pfx_ovs_packet_cmd_execute+0x10/0x10 [ 744.991722][T25857] ? __lock_acquire+0x6b5/0x2cf0 [ 744.991825][T25857] netlink_rcv_skb+0x232/0x4b0 [ 744.991920][T25857] ? __pfx_genl_rcv_msg+0x10/0x10 [ 744.991971][T25857] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 744.992104][T25857] ? down_read+0x272/0x2e0 [ 744.992160][T25857] ? genl_rcv+0xd/0x40 [ 744.992232][T25857] genl_rcv+0x28/0x40 [ 744.992285][T25857] netlink_unicast+0x80f/0x9b0 [ 744.992380][T25857] ? __pfx_netlink_unicast+0x10/0x10 [ 744.992462][T25857] ? netlink_sendmsg+0x650/0xb40 [ 744.992536][T25857] ? skb_put+0x11b/0x210 [ 744.992628][T25857] netlink_sendmsg+0x813/0xb40 [ 744.992735][T25857] ? __pfx_netlink_sendmsg+0x10/0x10 [ 744.992828][T25857] ? aa_sock_msg_perm+0xf1/0x1b0 [ 744.992914][T25857] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 744.992994][T25857] ____sys_sendmsg+0x972/0x9f0 [ 744.993091][T25857] ? __pfx_____sys_sendmsg+0x10/0x10 [ 744.993144][T25857] ? import_iovec+0x73/0xa0 [ 744.993205][T25857] ___sys_sendmsg+0x2a5/0x360 [ 744.993308][T25857] ? __pfx____sys_sendmsg+0x10/0x10 [ 744.993461][T25857] ? __fget_files+0x2a/0x420 [ 744.993530][T25857] ? __fget_files+0x3a0/0x420 [ 744.993633][T25857] __x64_sys_sendmsg+0x1bd/0x2a0 [ 744.993701][T25857] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 744.993803][T25857] ? __pfx_ksys_write+0x10/0x10 [ 744.993905][T25857] do_syscall_64+0x14d/0xf80 [ 744.993952][T25857] ? trace_irq_disable+0x3b/0x150 [ 744.994058][T25857] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 744.994122][T25857] ? clear_bhb_loop+0x40/0x90 [ 744.994197][T25857] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 744.994251][T25857] RIP: 0033:0x7f2ed1d9c799 [ 744.994304][T25857] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 744.994335][T25857] RSP: 002b:00007f2ed2d02028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 744.994384][T25857] RAX: ffffffffffffffda RBX: 00007f2ed2015fa0 RCX: 00007f2ed1d9c799 [ 744.994425][T25857] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 744.994500][T25857] RBP: 00007f2ed2d02090 R08: 0000000000000000 R09: 0000000000000000 [ 744.994541][T25857] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 744.994574][T25857] R13: 00007f2ed2016038 R14: 00007f2ed2015fa0 R15: 00007ffcffdb23d8 [ 744.994711][T25857] [ 745.351849][T25856] lo speed is unknown, defaulting to 1000 [ 745.645535][T25876] syz_tun: left promiscuous mode [ 745.659835][T25876] 8021q: adding VLAN 0 to HW filter on device bond0 [ 745.905565][T25880] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 746.001181][T25872] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 746.103448][T25887] lo speed is unknown, defaulting to 1000 [ 746.111423][T25887] wlan1 speed is unknown, defaulting to 1000 [ 746.120108][T25887] lo speed is unknown, defaulting to 1000 [ 746.579901][T25895] lo speed is unknown, defaulting to 1000 [ 746.612174][T25895] wlan1 speed is unknown, defaulting to 1000 [ 746.780240][T25895] lo speed is unknown, defaulting to 1000 [ 747.044233][T23732] net_ratelimit: 32 callbacks suppressed [ 747.044256][T23732] bond34: (slave bridge15): failed to get link speed/duplex [ 747.187855][T25910] openvswitch: netlink: IP tunnel TTL not specified. [ 747.254669][T23730] bond34: (slave bridge15): failed to get link speed/duplex [ 747.354792][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.363823][ T1301] lec:lec_start_xmit: lec0:No lecd attached [ 747.364883][T23730] bond34: (slave bridge15): failed to get link speed/duplex [ 747.715261][T25912] __nla_validate_parse: 11 callbacks suppressed [ 747.715282][T25912] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6075'. [ 747.799482][T23730] bond34: (slave bridge15): failed to get link speed/duplex [ 747.948378][T25919] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.6077'. [ 747.957941][T23732] bond34: (slave bridge15): failed to get link speed/duplex [ 747.965925][T25919] netlink: Unknown conntrack attr (0) [ 748.189483][T23732] bond34: (slave bridge15): failed to get link speed/duplex [ 748.260751][T25923] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6078'. [ 748.349708][T25923] vlan16: entered promiscuous mode [ 748.419474][T25925] openvswitch: netlink: IP tunnel TTL not specified. [ 748.654318][ T49] bond34: (slave bridge15): failed to get link speed/duplex [ 748.791113][T25932] ip6t_rpfilter: unknown options [ 749.184860][T25940] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6083'. [ 749.257318][T25942] netlink: 'syz.3.6083': attribute type 4 has an invalid length. [ 750.010243][T25950] netlink: 44 bytes leftover after parsing attributes in process `syz.0.6086'. [ 750.889961][T25967] tipc: Resetting bearer [ 750.935684][T25967] tipc: Resetting bearer [ 751.087012][T25975] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.6096'. [ 751.155251][T21608] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 751.354171][T25979] netlink: 44 bytes leftover after parsing attributes in process `syz.3.6098'. [ 751.522873][T25986] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6102'. [ 751.976198][ T5939] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 752.037360][T26001] lo speed is unknown, defaulting to 1000 [ 752.079359][T26001] wlan1 speed is unknown, defaulting to 1000 [ 752.092342][ T1096] net_ratelimit: 24 callbacks suppressed [ 752.092365][ T1096] bond34: (slave bridge15): failed to get link speed/duplex [ 752.182829][T26001] lo speed is unknown, defaulting to 1000 [ 752.217841][T26003] lo speed is unknown, defaulting to 1000 [ 752.228263][ T49] bond34: (slave bridge15): failed to get link speed/duplex [ 752.274930][T26003] wlan1 speed is unknown, defaulting to 1000 [ 752.344352][ T49] bond34: (slave bridge15): failed to get link speed/duplex [ 752.455407][ T49] bond34: (slave bridge15): failed to get link speed/duplex [ 752.492517][T26009] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6109'. [ 752.532003][T26009] openvswitch: netlink: Flow actions attr not present in new flow. [ 752.542902][T26010] tipc: Resetting bearer [ 752.559151][T26010] tipc: Resetting bearer [ 752.746530][T26016] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6110'. [ 752.774413][T14366] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 752.914663][ T49] bond34: (slave bridge15): failed to get link speed/duplex [ 752.956070][T26003] lo speed is unknown, defaulting to 1000 [ 753.013991][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5650 ms [ 753.022050][ C0] lec:lec_tx_timeout: lec0 [ 753.034092][ T1096] bond34: (slave bridge15): failed to get link speed/duplex [ 753.154612][T23743] bond34: (slave bridge15): failed to get link speed/duplex [ 753.425152][T14366] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 753.576345][T14366] [ 753.578736][T14366] ============================================ [ 753.584989][T14366] WARNING: possible recursive locking detected [ 753.591231][T14366] syzkaller #0 Not tainted [ 753.595672][T14366] -------------------------------------------- [ 753.601852][T14366] kworker/0:8/14366 is trying to acquire lock: [ 753.608032][T14366] ffff88805058f558 (&qdisc_xmit_lock_key#3){+.-.}-{3:3}, at: sch_direct_xmit+0x15f/0x4c0 [ 753.618038][T14366] [ 753.618038][T14366] but task is already holding lock: [ 753.625428][T14366] ffff88807c017d58 (&qdisc_xmit_lock_key#3){+.-.}-{3:3}, at: sch_direct_xmit+0x15f/0x4c0 [ 753.635324][T14366] [ 753.635324][T14366] other info that might help us debug this: [ 753.643399][T14366] Possible unsafe locking scenario: [ 753.643399][T14366] [ 753.650947][T14366] CPU0 [ 753.654237][T14366] ---- [ 753.657556][T14366] lock(&qdisc_xmit_lock_key#3); [ 753.662623][T14366] lock(&qdisc_xmit_lock_key#3); [ 753.667677][T14366] [ 753.667677][T14366] *** DEADLOCK *** [ 753.667677][T14366] [ 753.675830][T14366] May be due to missing lock nesting notation [ 753.675830][T14366] [ 753.684164][T14366] 15 locks held by kworker/0:8/14366: [ 753.689543][T14366] #0: ffff888031bb5948 ((wq_completion)mld){+.+.}-{0:0}, at: process_scheduled_works+0x9ea/0x1830 [ 753.700283][T14366] #1: ffffc9001c34fc40 ((work_completion)(&(&idev->mc_ifc_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa25/0x1830 [ 753.713449][T14366] #2: ffff88805327c538 (&idev->mc_lock){+.+.}-{4:4}, at: mld_ifc_work+0x2d/0xe70 [ 753.722786][T14366] #3: ffffffff8e7602e0 (rcu_read_lock){....}-{1:3}, at: mld_sendpack+0x213/0xe40 [ 753.732048][T14366] #4: ffffffff8e7602e0 (rcu_read_lock){....}-{1:3}, at: ip6_output+0x126/0x550 [ 753.741177][T14366] #5: ffffffff8e760340 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x28d/0x38d0 [ 753.751137][T14366] #6: ffffffff8e7602e0 (rcu_read_lock){....}-{1:3}, at: bond_start_xmit+0xb4/0x1900 [ 753.760748][T14366] #7: ffffffff8e760340 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x28d/0x38d0 [ 753.770710][T14366] #8: ffff888029e16228 (dev->qdisc_tx_busylock ?: &qdisc_tx_busylock#5){+...}-{3:3}, at: __dev_queue_xmit+0x10c0/0x38d0 [ 753.783389][T14366] #9: ffff88807c017d58 (&qdisc_xmit_lock_key#3){+.-.}-{3:3}, at: sch_direct_xmit+0x15f/0x4c0 [ 753.793706][T14366] #10: ffffffff8e7602e0 (rcu_read_lock){....}-{1:3}, at: ip_output+0x5b/0x450 [ 753.802718][T14366] #11: ffffffff8e7602e0 (rcu_read_lock){....}-{1:3}, at: ip_finish_output2+0x3c2/0x1070 [ 753.812588][T14366] #12: ffffffff8e7602e0 (rcu_read_lock){....}-{1:3}, at: arp_xmit+0x23/0x270 [ 753.821495][T14366] #13: ffffffff8e760340 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x28d/0x38d0 [ 753.831529][T14366] #14: ffff88805b15f228 (dev->qdisc_tx_busylock ?: &qdisc_tx_busylock#5){+...}-{3:3}, at: __dev_queue_xmit+0x10c0/0x38d0 [ 753.844262][T14366] [ 753.844262][T14366] stack backtrace: [ 753.850163][T14366] CPU: 0 UID: 0 PID: 14366 Comm: kworker/0:8 Not tainted syzkaller #0 PREEMPT(full) [ 753.850184][T14366] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 753.850198][T14366] Workqueue: mld mld_ifc_work [ 753.850223][T14366] Call Trace: [ 753.850232][T14366] [ 753.850241][T14366] dump_stack_lvl+0xe8/0x150 [ 753.850267][T14366] print_deadlock_bug+0x279/0x290 [ 753.850296][T14366] __lock_acquire+0x253f/0x2cf0 [ 753.850321][T14366] ? skb_network_protocol+0x23d/0x3f0 [ 753.850340][T14366] ? netif_skb_features+0x9bc/0xe40 [ 753.850356][T14366] ? ret_from_fork_asm+0x1a/0x30 [ 753.850384][T14366] ? validate_xmit_skb+0xc5f/0x14a0 [ 753.850403][T14366] lock_acquire+0xf0/0x2e0 [ 753.850425][T14366] ? sch_direct_xmit+0x15f/0x4c0 [ 753.850450][T14366] _raw_spin_lock+0x2e/0x40 [ 753.850535][T14366] ? sch_direct_xmit+0x15f/0x4c0 [ 753.850556][T14366] sch_direct_xmit+0x15f/0x4c0 [ 753.850579][T14366] ? __pfx_sch_direct_xmit+0x10/0x10 [ 753.850600][T14366] ? arp_create+0x150/0xa00 [ 753.850625][T14366] ? arp_send_dst+0xa7/0x2a0 [ 753.850652][T14366] __dev_queue_xmit+0x1615/0x38d0 [ 753.850674][T14366] ? __dev_queue_xmit+0x28d/0x38d0 [ 753.850697][T14366] ? arpt_do_table+0x261/0x1ec0 [ 753.850753][T14366] ? __pfx___dev_queue_xmit+0x10/0x10 [ 753.850775][T14366] ? __pfx_arpt_do_table+0x10/0x10 [ 753.850797][T14366] ? trace_kmem_cache_alloc+0x29/0xf0 [ 753.850828][T14366] ? NF_HOOK+0xa2/0x3c0 [ 753.850855][T14366] NF_HOOK+0x33a/0x3c0 [ 753.850891][T14366] ? __pfx_arp_xmit_finish+0x10/0x10 [ 753.850917][T14366] ? NF_HOOK+0xa2/0x3c0 [ 753.850942][T14366] ? __pfx_NF_HOOK+0x10/0x10 [ 753.850968][T14366] ? __pfx_arp_xmit_finish+0x10/0x10 [ 753.850999][T14366] arp_xmit+0x16c/0x270 [ 753.851023][T14366] ? arp_xmit+0x23/0x270 [ 753.851049][T14366] arp_solicit+0xbe0/0xe40 [ 753.851078][T14366] ? arp_solicit+0x119/0xe40 [ 753.851105][T14366] ? __pfx_arp_solicit+0x10/0x10 [ 753.851135][T14366] ? __neigh_event_send+0xe9d/0x1530 [ 753.851159][T14366] ? __pfx_arp_solicit+0x10/0x10 [ 753.851185][T14366] __neigh_event_send+0xf05/0x1530 [ 753.851212][T14366] neigh_resolve_output+0x198/0x750 [ 753.851237][T14366] ? __pfx_ip_neigh_gw4+0x10/0x10 [ 753.851268][T14366] ? ip_finish_output2+0x3c2/0x1070 [ 753.851294][T14366] ip_finish_output2+0xca9/0x1070 [ 753.851322][T14366] ? ip_skb_dst_mtu+0x80b/0xa50 [ 753.851348][T14366] ? ip_finish_output+0x40e/0x530 [ 753.851374][T14366] ip_output+0x29f/0x450 [ 753.851398][T14366] ? ip_output+0x5b/0x450 [ 753.851423][T14366] iptunnel_xmit+0x59f/0xa00 [ 753.851489][T14366] ip_tunnel_xmit+0x193a/0x1f20 [ 753.851525][T14366] ? __pfx_ip_tunnel_xmit+0x10/0x10 [ 753.851554][T14366] ? __pfx_gre_build_header+0x10/0x10 [ 753.851600][T14366] ? kfree+0x1c1/0x630 [ 753.851615][T14366] ? pskb_expand_head+0x560/0x1320 [ 753.851635][T14366] __gre_xmit+0x19e/0x240 [ 753.851660][T14366] ? __pfx___gre_xmit+0x10/0x10 [ 753.851687][T14366] erspan_xmit+0xa81/0x1670 [ 753.851719][T14366] ? __pfx_erspan_xmit+0x10/0x10 [ 753.851748][T14366] dev_hard_start_xmit+0x2d8/0x870 [ 753.851773][T14366] sch_direct_xmit+0x251/0x4c0 [ 753.851796][T14366] ? __pfx_sch_direct_xmit+0x10/0x10 [ 753.851826][T14366] __dev_queue_xmit+0x1615/0x38d0 [ 753.851848][T14366] ? __dev_queue_xmit+0x28d/0x38d0 [ 753.851874][T14366] ? __pfx___dev_queue_xmit+0x10/0x10 [ 753.851894][T14366] ? __lock_acquire+0x6b5/0x2cf0 [ 753.851924][T14366] ? bond_do_alb_xmit+0x600/0x820 [ 753.851969][T14366] ? bond_dev_queue_xmit+0x9c/0x150 [ 753.852017][T14366] bond_start_xmit+0x766/0x1900 [ 753.852041][T14366] ? bond_start_xmit+0xb4/0x1900 [ 753.852062][T14366] ? __pfx_bond_start_xmit+0x10/0x10 [ 753.852083][T14366] ? qdisc_pkt_len_segs_init+0x2c4/0x970 [ 753.852102][T14366] ? skb_network_protocol+0x23d/0x3f0 [ 753.852120][T14366] ? __pfx_passthru_features_check+0x10/0x10 [ 753.852141][T14366] dev_hard_start_xmit+0x2d8/0x870 [ 753.852165][T14366] __dev_queue_xmit+0x17a7/0x38d0 [ 753.852183][T14366] ? look_up_lock_class+0x57/0x110 [ 753.852200][T14366] ? __dev_queue_xmit+0x28d/0x38d0 [ 753.852222][T14366] ? __pfx_mroute6_is_socket+0x10/0x10 [ 753.852270][T14366] ? __pfx___dev_queue_xmit+0x10/0x10 [ 753.852292][T14366] ? ip6_output+0x340/0x550 [ 753.852320][T14366] ? ip6_finish_output2+0xd39/0x13e0 [ 753.852350][T14366] ? ip6_output+0x126/0x550 [ 753.852371][T14366] ip6_output+0x340/0x550 [ 753.852393][T14366] ? __pfx_ip6_output+0x10/0x10 [ 753.852415][T14366] NF_HOOK+0x177/0x4f0 [ 753.852440][T14366] ? __pfx_NF_HOOK+0x10/0x10 [ 753.852463][T14366] ? __pfx_dst_output+0x10/0x10 [ 753.852486][T14366] ? lockdep_hardirqs_on+0x7a/0x110 [ 753.852513][T14366] ? __local_bh_enable_ip+0xd0/0x130 [ 753.852536][T14366] ? icmp6_dst_alloc+0x3a6/0x440 [ 753.852582][T14366] mld_sendpack+0x8b4/0xe40 [ 753.852605][T14366] ? look_up_lock_class+0x57/0x110 [ 753.852627][T14366] ? mld_sendpack+0x213/0xe40 [ 753.852650][T14366] ? __pfx_mld_sendpack+0x10/0x10 [ 753.852681][T14366] mld_ifc_work+0x835/0xe70 [ 753.852706][T14366] ? process_scheduled_works+0xa25/0x1830 [ 753.852729][T14366] process_scheduled_works+0xb02/0x1830 [ 753.852763][T14366] ? __pfx_process_scheduled_works+0x10/0x10 [ 753.852788][T14366] ? assign_work+0x3d5/0x5e0 [ 753.852817][T14366] worker_thread+0xa50/0xfc0 [ 753.852852][T14366] kthread+0x388/0x470 [ 753.852869][T14366] ? __pfx_worker_thread+0x10/0x10 [ 753.852891][T14366] ? __pfx_kthread+0x10/0x10 [ 753.852907][T14366] ret_from_fork+0x51e/0xb90 [ 753.852932][T14366] ? __pfx_ret_from_fork+0x10/0x10 [ 753.852954][T14366] ? __switch_to+0xc7d/0x1450 [ 753.852991][T14366] ? __pfx_kthread+0x10/0x10 [ 753.853007][T14366] ret_from_fork_asm+0x1a/0x30 [ 753.853040][T14366] [ 754.960009][T26027] team0: left allmulticast mode [ 754.966024][T26027] team_slave_0: left allmulticast mode [ 754.971718][T26027] team_slave_1: left allmulticast mode [ 754.978055][T26027] veth29: left allmulticast mode [ 754.983254][T26027] team0: left promiscuous mode [ 754.989586][T26027] team_slave_0: left promiscuous mode [ 755.003188][T26027] team_slave_1: left promiscuous mode [ 755.015920][T26027] veth29: left promiscuous mode [ 755.503683][T26044] netlink: 'syz.4.6117': attribute type 1 has an invalid length. [ 755.521501][T26045] workqueue: Failed to create a rescuer kthread for wq "bond64": -EINTR [ 755.534019][T23743] bond34: (slave bridge15): failed to get link speed/duplex [ 755.555836][T23730] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 755.568822][T26030] lo speed is unknown, defaulting to 1000 [ 755.596211][T23730] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 755.605039][T26030] wlan1 speed is unknown, defaulting to 1000 [ 755.611234][T23730] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 755.621431][T26030] lo speed is unknown, defaulting to 1000 [ 755.657859][T23730] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 755.675260][T23730] bond34: (slave bridge15): failed to get link speed/duplex [ 757.184305][T23743] net_ratelimit: 11 callbacks suppressed [ 757.184329][T23743] bond34: (slave bridge15): failed to get link speed/duplex [ 757.304121][ T49] bond34: (slave bridge15): failed to get link speed/duplex [ 757.414130][T23743] bond34: (slave bridge15): failed to get link speed/duplex [ 757.524091][T23743] bond34: (slave bridge15): failed to get link speed/duplex [ 757.634103][T23743] bond34: (slave bridge15): failed to get link speed/duplex [ 757.744081][ T59] bond34: (slave bridge15): failed to get link speed/duplex [ 757.854079][ T59] bond34: (slave bridge15): failed to get link speed/duplex [ 757.964107][T23743] bond34: (slave bridge15): failed to get link speed/duplex [ 758.074135][T23743] bond34: (slave bridge15): failed to get link speed/duplex [ 758.184105][ T49] bond34: (slave bridge15): failed to get link speed/duplex [ 758.994885][T14810] lec:lec_start_xmit: lec0:No lecd attached [ 762.284084][T23730] net_ratelimit: 36 callbacks suppressed [ 762.284103][T23730] bond34: (slave bridge15): failed to get link speed/duplex [ 762.404153][T23730] bond34: (slave bridge15): failed to get link speed/duplex [ 762.514172][ T49] bond34: (slave bridge15): failed to get link speed/duplex [ 762.624096][T23730] bond34: (slave bridge15): failed to get link speed/duplex [ 762.734134][T23730] bond34: (slave bridge15): failed to get link speed/duplex [ 762.844196][ T49] bond34: (slave bridge15): failed to get link speed/duplex [ 762.954174][ T49] bond34: (slave bridge15): failed to get link speed/duplex [ 763.064166][ T49] bond34: (slave bridge15): failed to get link speed/duplex [ 763.174190][ T1096] bond34: (slave bridge15): failed to get link speed/duplex [ 763.284160][T23730] bond34: (slave bridge15): failed to get link speed/duplex