last executing test programs: 4.010612244s ago: executing program 2 (id=2522): r0 = socket$igmp(0x2, 0x3, 0x2) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) write(r1, &(0x7f00000000c0)="240000001e005f0214fffffffffffff807f8ff000b000000000000001e000ac0b3c60600", 0x24) (async) getsockopt$MRT(r0, 0x0, 0xd0, &(0x7f0000000040), &(0x7f0000000080)=0x4) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) (async, rerun: 32) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (rerun: 32) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r5 = socket(0x400000000010, 0x3, 0x0) (async) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) (async, rerun: 32) sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000022c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r7, {0x0, 0x10}, {}, {0xc, 0xc695d31f854950dd}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29c}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0xc804}, 0x400c012) (rerun: 32) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r9, {0xc, 0x5}, {0x0, 0xfff1}, {0x0, 0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) (async) sendmmsg$unix(r3, &(0x7f0000002c80)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40209c0}}, {{&(0x7f0000000080)=@abs={0x1, 0x0, 0x4e23}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x20000000}}], 0x2, 0x20000000) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="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"], 0x118}], 0x1, 0x0, 0x0, 0x400c445}, 0x0) 3.931385371s ago: executing program 2 (id=2524): r0 = accept4$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f00000001c0), 0x80000) sendmmsg(0xffffffffffffffff, &(0x7f0000006600)=[{{0x0, 0x0, &(0x7f0000000380), 0x0, &(0x7f0000002a40)=ANY=[@ANYBLOB="e000000000000000180100008b0800004a2bd0d37e82e0e923f2b3ccd7c572dcab2bb8f223891aaefefd6b61706ad2b71a4450a047c320e95c41a9df7c0d92775e3868a71ae6d13a03ed33bd04419d6b964785ac1702fe42f5b0a27c513591ffd0faa79494d09c27adb9037d2c7a50d98f23d979a0fb75d44d25bf6fe1ec562706a590f2ca59a792e08bec44ee4226e43705f15ded52e275e57b960a9a57ab21260135146396241ddec7e38eaf7e6f59a0f940aa47bdc808fb7a3a1be053bc93c56ebd49d18ae226ace4d0ca4004763e5a25799647ec49b70524108c8e8f0000101000000000000015010000000001003dbd02485a9e099176cef6cb77ec023921d8d7ab559efbb64ced39c9685ca223815bbcadfce18d7ad88d0e7ef6d728458e531ecae4d18e20a51490bf39c36af1461c89d6a17a8e792929761b9b7f4907992c5b5deca7f37fd9a77b8cfec6892d836e009d1b9d31b5490e6559ec1a3a4a2ce4c1f0404bd8c91b617936191524ffc84d14c3966e547a3ebb664a6bf10d7ad88973a7738d516538bb15008cfbf3e782871f041d174bdb10aacc94a3ef176f307ba4ddcf86618566b2eff4e0815c6d26f7058a72c36ef923f6c2474c294045f583ca3284994057c6935edab26c695b9ec0f0cdbbd45b72adfcb18c45b4a1c64b38ded8b81105b07500aa9f148d37362cc1a34263aef73dace477aacec77cd3722fca78f3fda4ff544a2615d57a3ea97b096a3a99869cc135710db1ec153b0bae708c8d05b53fd7b9056e3191ee25a9a7dad23ca817533ba126a2ed277e6b8a579bccfb16dc285f570c4660e09274ac52b6cbb8b8dfd05d4b4c2c6fb4076c97845ed65bc2300f10b6376bdb93f606faf0ce73b997a8ac8e73cb20bbe63d4918be8a76a99d99e35a1f3c07d8cba01287a041990c6c624480f96aef78dc48f4465e8ed2a2057f7e35eae93c9cc6ff94b27c7b50b4822b919ecfa7dc4a2c34bc424866cee6327eb5ed36d631fee9772c968943bd158eb7c75f6ff9e244c322fd1a0b14bc19d1678fd3afff9129cb7fad47f5c179ec647755591e26408d0a397a05bcef16f70e62538c14fa08ce41c6184f638aaf2c52107a9cc8ad8e606121ad3ad193f6aa1731e4ed124db362368504e90665939ce5e04365ca30ec47cdcd68f89f74de49d6d63f21fe65e93ffcd1f29be702004cd2f0039df3a74bb37ab60d5e1130419b71326247cba4b9831ee2dbcf4b5c484286afab47494e864d478bb3c13680142349fbfa776d595bed3650a403db7d484c46a627a3659b10af0e04082eea4cab1cbe2d581d1e892e4ef45477b3022fbac335e37de0ff427288a537a5e0ed520eac4a800c7dfc7316c00bc79db04fad3199c2e8847db809f1092fee24fd8e212fe948acb4cf035bd5f94cfe3bc305ddbdfcd1f40233507c74bace37ca71a85c79f5d4e6671bcfa2e714b0ea83ca5e409d8a96310cf94836957008af17498b1e757daafd57330e71682fc646508b12d184d2231558c6c608f284e32c5432d312ebbd3e43baf5d1338c8a08bd9a24ccfae68c45886285d59f2c3577dbaaaaacedb2754d7d8f182a2bde77741ef8700c086dee7fe9dc300f48772bb3e95acfccb596e1c82371e0b95700736383976232c20e1ad888d2b37cdc8aecdb5bf94bdeaebaf16499e1c9c90889382d7a8e5fc9b647c1f8e68cb02964ea0ee06801c96acee773a30640c92d2cb2268f11ce2a3ec4add0dd5991c2b5684faab612c18d7ec366c8426f76f848d9c5d7467906e28704cacd832c07d30b0a33a19a5e86dc049eea2a5e1575fb9e3ff45003c27d28ff7bff7e75531c51050c3fad13459cff46aef420b627cfdca12481c2a4c5f260af5a05a7fc60eb8d0a3f6f52a6f3dddacecfe6128aeb74c7bfa94cb5a6e1475f46902cbd24cd1769f5625c5709b5048fe646e74b049be181ab152c376ff2e0679ac3e4c0d8a10aa41332fa203e8c6d5bfbbc35bffefa86a5dd9da8d84d60232c63c3607bc20b883b11a59ecd40cc7b36d6110ce4f018a9d019661b87becef7e04ddefb8de16736d57115bb03ee3ad99f8f0b51b9f35a2d5855e2e808f0bc384c26b2106e224e4e8a17b47af9b243d305aa53e7f7cbd7d0ff1b105585fa5a159c0bc610ad6e6a13dc935988d3dc4ea7f02f332088fadc49255d395927f51111890bbf62200ddbf6743e10c79a87a9a36a7a0d2749ff81d118c51ccc4a74b1f5ecad7748b7083aa588e5932db1b0c9c28081df444d54b02feee9df39bc50e2b6e2b78bcbb8078c1fc44334631aec7153f0bcc08501a38ce9e60cdc760d428d7f63d083d17d7c109529b8418635e7863b6c850f408fbe2fd518157b62c0668f177f2d7f8f59d556c04cadd0228b05a193f63f4f809ebf7d01596f9d30a68bdaf04831bc9d516c539d7f70469b92626879a3cd0054490a717f61004f8c2f21e6abe6a8fcf9d1a3d08b3ca0cc0e9bf14b8b0401bc94d991932f08e11727dd7d49a505c8b86ebf7f9e8b4ddba6fc31e1f4a6f44bc6b874465033dce41d91b64e6aad71a677f4196e878d738948483a90f7db7c57f33306274da424a1f13657ab56d3e22f28de04a29144868114c6835c363f73b0133f8b277f32ee61aa6b742ab7ab4a854cadc7795b843bf91c80d31ad7bebb81a2b62acd7c88bd04388467dd6999526bbb3efb55bfdeeff34b8a8a52df8cc512c4a387a54bec374e39032bfbdae7ebc68bb73cf0a9bddf5785cd08b34469e64f14921945491e80f5fa85c96d4c01d9866b0ca56cd6e7f7bccbf5395b906ad78f1807a1ed4ed549959d7e0a8443cf1466b2c02cea14159294fa6fcabc8f42a7a2ddbcf8cc297568da49a55cfc1578eec8613856e41acf40ae80e567a9f87f7c17d49d5fd7286fa4b4f62dbb00d8d5f4d2465399dc7d26a4f19f2080f1270a3c7cf831e7749ce0e256725138f6c843012e6861555576d8bcd81bebe99b7e5c7e36161fa9dc73905f96d69ac1de72d24b3ac1c0aef53a5cc648ea7e47c2d2a8db7da6d5a8a4c380e274524376e42c60c97ae4c2c306c4f1c7cdccd20c1081d4146093043e7c26d8a40bbf96ff3b47cb393c5a7cacc24ad4d2ca7ceab4f4be5a69cb0ad80ced2098a6bf90411deb692621721bcc99a6640e61b55915723ac03cbe990c6caf3256bcf3d332d938c7dbf43a5b609584b283778d8a1bd36591c0af5523a7427e5cbf2d2b0df6bbd659d30f6f273136914f8c752339fdd5aafe8f0bb73d4800f7d3e6743edede2670429a40b038b4260ab275a8dfea4f889024797ca2f4268f5d0a5bdf27f47ecf42669d0eb23976cad4b8ffd981ae650d438482cd44bec341f3e9847eb9d3fff9683240842436a4d69f4867c06c0693087cb584661d11f23607fe281640e3d9a0cdb270444e5272bf442f32370a2bbd8cd46ec0a8b7bcadeaea11abe892b804237e63e464043d3e98a7d0c0ac59b9d143f2357abb7c4d7ce5a32cf539357d36f0156ba009e0b578d25267725b91c240635cf5aa24a7c3284699162e21139a3ac0f3dcd413a87ad807c16f1045af3f5ebc2b1753a106feffe83bd09fbac5c68e46ce4078ac76e0dbe43228199f84b1daff661ac3ba5e83b94b7cdb6d0d6b1dbfc642f7006992234aee6dcebbdd300ad4188201ac72d0c84056135888bf3d7d695a0dd3f48de355b553797220ee732264498bd2a844b090f66f96fd2d68b3ca54c10a58fd7095a6f719250eb8c52d39b867a360b2bc9cf8d403aec8b70c7462334e08548a793963648c128524cd08e0045a91f5bcadc047835933e00f148d7c7cf5839db1c1d7201e033f60e967c0aea3edbffdbf629b1a5de8751a602042305393216508c6f53d0e2adadd88bc811ffc7db3e7137b86868a207716e855d0e406b7488855739f8b86ec4c5e07f6efdf6d47d174b1e9733b7f1784e748b4516fd55df872e38ddd607babaa85a4718542b1423a8d9be17780b9e7d253c1c05e15f3f8ead840e42c7a4f53f2e0eacfc2c43331010333be039e8ff920c38aaeb163e30cdf5ef5e6cd305ec40896d015495850cfeccd8349b18a9734af399f4cfc69dd3aa35fe1186be2c788be237351a1b09fffc09a64b5aedea7efed0c82f7a40c6029a93ea162f5501edfb6237097f6c4ebc47282d12d6d5ff3c2976e644bc187b047c02f036fe63712581133ba90c3f28abf7a056af6809a6111edc4dfa33ac0a80b20ff82e4993ff1fc30dcdbcc26d539d048a6cb25d7e874162903f4c9a05bc0c930242b62cef945cf50a94df2808d71db2508310d304d7570fef7469aaef303ebaab5d9b526b2d426e74494a26e22b2c893732e5fdb5a461ed79fbed9efbb32c6aeda967b97f0530b4f45ae52839f784fee94fce8a754c0e9692002fd69fc85260ed516dc38dca6516930093aee0f200f2333fffbe5cc189994a85196dcd89e1f0f6479f9298c6fca5dc9d924fdd7684b5566193f9b252e43642c30de6f6077e2f6c004f6d8f8cc14bda8eab2017824e32a55b0722b36a732373ee2ad145f1ff898660fb48323b36d34b75dd86d25d03b196973b400dda6a8553f9c6e5b17b495187776ff9d77b4871fa6890cddf3274b6cd2bc1edc6d439fc5e8e8502f5a244225d31f04893c74879c4ed1fca9a4b551beecd1eca9525379af60bddb6efc83f478d7ca082d4f50b5d1e75e074851e1c2e96a1774d0839b49414865d6d3c1b5d42d9b39239dea8521fb605c40f9eb39e6adc1561d012111ca22379a7f378a56c1d843089b732d400c477117f1ddd743569bbfbe8a17b7f32a39b2e55aaac46d188207c1dd5c6077c31f3919d6d88d1bd9adaa46f17ae374421d1e8a3839f1d05323964a45baeb7920244efbf3a2a29278e52a7e079568f2ecd848579b15e58403411f3b7da289fbb0c808542c06652e0bc61bb0c13f1b5763a7d40459414b60739bfa81df96c76565cbc8903d1ffa17742f7d2c24dd4466a293a29d2d183e1cd1890e35b26ffb4dfac3357fdf141a1e97c4f6018d647dfe0bf5019a92835aec7580c25cb824bcaa65ad6af181cef9bcfef9e2cd4aa38f613d79b08b99c7f15d02c26b4eb1b4c280cc261c148bac0c92fe7af9c1100b1201ae25ef29fc9bb9b5690ad923241647f162736f291a0ca8657cca095139e9e99e3e048e0bc5e5e0c2ee0b7475e53decddda6ecd54537d5d8c008bb0679c37a27e4f63de1209910a53c9b44325dde2cdefc387cc710dd7b240bee8207ef19a7ad5e241264c65f028c8a04efc06b6e33bb95c1ce18245ab35f4a837411a2149bb239058199e3005a5843e704014da4eafe5b42d80f80231aa96b5d9b53a1d05c40bc991fca6ff9e96dd0d343373051daa58234a7d559ea63d214727398061e9162d8439a6e3943f3413b7fed4aa84b018ea33c353d907b8539506dff4765c95ca64ffa449d84c99828ed5756fe26ac1581681e303bd688cef3cc9d47f892b1ff76145b40e6c44e6d14eb7d29afe4b4c80999dfcf6ecd3a0500b7355dbc5cd7669c1a1c2314a9816909cde5394127f88399e6f2662955417c7a2ac5923e84668d9361f23d4a427153332ba9cc4d30487bdc479afbf1e0bf4caf1018a0a6127fff39811fa214ba8982e731802f0bcf21fdb871c535818293d347e63600c871e6ed665f30e023c2d09184e76b0f81e7681c17e42c972f076bd207e31e8b7318fbdc2f103d2b7b832f301feba4c23faf5097ee52f178df049a2300fc338b33b096d1096316ba2196a842a41636663b623eae4c7f68d8dd3e9f96e40dad2ae95ea9f087b9107c7ad1a5319c7310161d40d24fa3030c83586f747b0f7be52a294c0af27faaa238131d6a6a9c1c6d80a31f9266cf2257b34ee815e056813add32763c84b8b8f9e97896f2d8dc68c36b294ea8920ce6e0bb3b21891d38e95c020deb60eea771820b2fb5c4574c96417a8d59c08e9a55c3b37605134a732acb45ed5df17886be969d9bbb9c5a933fbdaae2f776ef0550b80243b5851feaa3d22532aa5dbbe198baa5f1dfe0aff238ad8d6f1c40a4cb1d4c16255b98b9619da26179556190011e120db7b818111ea33750e94145cac8678d044c590e433c0e6dbca159570de60265564f3e0716ad15dbf3e6a1e44276cb312eee8c4a078d378a4818400de0d741f0f2bbdd98e7eacb11ae0000000000000000701000004000000dec5e9cfa0e63c7fd9d22fc3c12d6f35258d24be2cf1c5a7b16a084b4527781fd714c8f0e8ff586b1a0f53f12bcc5ec92db572bc66e75858d87bb37e4fe2779f42c3c393a680ac0f29b5ee2073b7e3004b9b20a80405a38ba00e246b5b1bde1b884c813e9ee3a1d3f4946a2f5a6ba77c4622835f0447b2a9225fb02668e055ac5c0ad01d89d7a07ca6e12f91183dcbbc51e8eddcfdd234d3b2df7a2d40ee40b334c5adac7caec01c5a9e406bd5a9668a6bedbd51b69ffa1c1c13de7ac1a13ee76f4c7212", @ANYRES64=r0], 0x44c}}, {{&(0x7f0000003c80)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x4e24, @remote}, 0x4, 0x2, 0x3}}, 0x80, &(0x7f00000004c0), 0x0, &(0x7f0000003d40)=ANY=[@ANYBLOB="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"], 0x218}}, {{&(0x7f0000003f80)=@l2tp6={0xa, 0x0, 0x7ff, @empty, 0x9, 0x2}, 0x80, &(0x7f00000044c0)=[{&(0x7f0000004000)="9069c8b1ad9c75c0831b6f3d638017a30de699626c5d22ce72141b105963ee912340bf57a9699bc1c2e3720a5a3f94d0d579b7b4b189594cf273e5f0de0fb4ece40666062d0022b99c4f1b8047efbb020f8543c1c3f66910b5b80454b09ffc8f640dce7cc93537ea9f261eb67a41feea6b2f8198d06bfb511a23d59a9806faa92727896a7251b2cf91071491127f32b97eb82513cfcc935a1537114dc72122a3e51801d5978dfae0cfa5f7c2fed70bfff3d8771e1d2d6277649c64da7ffc20ce3004252390e811fe20a2d4d98a46b119a5dae072b2422deeb14c", 0xda}, {&(0x7f0000000980)="86198dcb5072a46ebd5b83c07ac157a0daadc449f9ed45378932f9278916cedfc1dde8eac8adb8632f3da7ad974e058d7cec4a7f15c7c8f05272e9fedf8406ab7a81543b00701d0780fa8e66a24c96b761befaf948e83e338674a5684bda3d1ff546aee2db4cf625cb96db707f572616820c15bfd7326a6000267ed08cefc5002dc832a4763d21760438683bf7e0fefbe5e948a3a03c82c86e063d6fbcfced865210b544cfa378f17ae175285b6c7c020ea45a85a5c529c1f93121276d333f6be3066045e1a0cc5e27abf6c281f1d11d87706e7290c19e2059f2509684993f8e0e6326b4544c48de6dfe8884322b4b8ebbea5bab807d49e2516ce7426f928c21fdf12d307d46a9abd005d085a2e6da14c5ceafe3dbfb8d", 0x117}, {&(0x7f0000004200)="cc9e891ea95ac8ed0a6dec3ca9412a2a7a2685e956b2a55558e52c676055f06045cd87bd87bd204bb68b9145599ac104c7330f696d20194e3815306a86d25924529acbce6c3b62ef4d05d325b5d76c", 0x4f}, {&(0x7f0000004280)="1282d36bfb3b7f987f7422ce9396609c76f6aa2ace584b1b1c007b532b3d06fab499462916ec6e4e6435704d213a8eed48cbc0ac7f01c01e8674a5a1d9646776eeea9ccc2587a52fac69dcd25be1d7d4cc14a9071fb0a5125d9c7e8788df07d6c1aa9940ca534517d0d6183ed8aa7e99d2ab7c57083962ea770c8962f8e5ec632fc820e2c656", 0x86}, {&(0x7f0000004340)="e52ffc8455014bc6d4e80d4c4b8bb7fa8961ecabf22ae3b3cd7043ed7a2f27e615e688", 0x23}, {&(0x7f0000004380)="c83860afc7d6a1701a16d47b40a4f58504892945c810422e0957576c2bdafb957678a00d2b4c3d5b538e548feabf63b1f79c18c59b4e32cae94410fe7ead91d15b8d25a07f6de06f5ab9168388a7f0b24d7b9b7464fd60c75904c6fe2df68ab9b0fd761f37457a379f66af7848f1247e719a96997e03589ffc35c2da5bc5de8034e965e519d8eb7288dc2f86e2f28ff8ea71084681041fdc6de2cf6e92e710ee9a6f1674b29b044982189731898abe10147b7aabf70cad2d925ddcb24550793279bf", 0xc2}, {&(0x7f0000004480)="4675cdc76b0cd6885be02b7827394dc8eebf9b21e5705471a12c6c600997", 0x1e}], 0x7, &(0x7f0000000dc0)=ANY=[@ANYRES16=r0], 0x1a0}}, {{&(0x7f0000004700)=@generic={0x28, "5d771866b1ee067f7f11250b02dae223ece629dfa7807502e8f1edb996b2c5cd5a2f8e1ff4bea1ec95a42842400d0a2d32e89eb53ed6f3dfd76bb9b976eba9d0b892a55f2d42410938ab297590c59d65d8e594773c7ac7e925ba04786f8258e99e5cf51da4a4a8d2ef53fe0c6e34f5bb038c5d4cf81fc18b7d3da16184be"}, 0x80, &(0x7f0000004b40)=[{&(0x7f0000000940)="7b8a69eaeca61bc1f0041df93ec4a31271bf57ff3dcc472d900d2e62da6ddef96857c84a211e6cd207e6919363a5d6a273841a0b9a80167085a4fb2446faa0", 0x3f}, {&(0x7f00000047c0)="75b920644aa26ebb5ebd9a0910d92a675dfb93e5547abfe5698b55873e3e729f13e3ab93cbd401eba356b23a91c7940ae80f611b023b877354bcb16d0905663591dd4fbb1a08382afd2f5007e9b9114cf4a39d15bed0c233127eae9963d2cbdb2128c54fe99f01b3ebc6462a3c4852a4ec995b0365eeb334e05816e7ae3aee5cd0267e47b834e4f825c31c5ff5fecb556a9349d7eb41d87eb91d0e16177fe9a0010665498ac1cb7ed92b8fdba58b17705e6e63b620958d690a9483cd942ab3d2f787d18c2130046364c491b2808e1ebf33da3c1055ae5998df3c2ed5c5c055f42e451adb953e68f6d24e4d35f4e91f0dd018a2ea", 0xf4}, {&(0x7f00000048c0)="37c414ebd78ce9a85b2525c05fb1134bdf9cbf0e146de4c35ac14068ff85e02c80e934c63c645c7f8fa0e0c0a9de301f9702c755d374eb0fb01303bd20be001f44d517b394ee8cc3592f9b5d6694cfae50d823e564a8b0b232965a050cb980f454989adf219b3d1becf98d854ecee3be5bdf7824c6d5aea57a24e75ccc9673af01593206ac3aecd1591860a43dff4c1fc6cbe466ebd88c3c05d904e723c66d7951dcc92194785bb0b95c", 0xaa}, {&(0x7f0000004980)="fdf743b261dd09f440f627691504ef573743587e43a785bf69c480d5124b0308c76c6b4a698a30d75e3d46dba6f00c347d2457e0bc60003d13e73acb3f1f364414136a3cfdcfbb186bd5df0eaeeb4ebbedaa2a118d000000000000", 0x5b}, {&(0x7f0000004a00)="08f6e9756edf2d80187834d8e2c71db0a3fe001297092b247be354e96f2d44ade783c076e4497928f86a4fd61bd68fdead08d76e3d4df9dc3534ccdd42d7fb34222af3c6e7b0d838bd8a366111dd64c91c73d61a74a9751f1d85401da428ecb6bf4fae283c521132a4f0fbc6a579e88c72dac98dc928e735ff6205484eb95dcf7a28a1985e52570b6c9773cff7ba69797ba67887c074837c5270f03fc1cde228bf022c", 0xa3}, {&(0x7f0000004ac0)="802cd10a4d89a7a45df9ffd22bbf2a55300f766dc60bd24992db53d8f638f644458ad1c107bb686d6f6e4e69f69297b6f28a1f76a65aa63ab0431f16712bd4cbb429947223233626f44a14fe29124af83c445b2c9354dcfed62162f597ab8d8816de9792354282eb321959298b76de7874b04dada3e8", 0x76}], 0x6, &(0x7f0000004bc0)=ANY=[@ANYBLOB="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"], 0x1448}}, {{&(0x7f0000006040)=@rxrpc=@in4={0x21, 0x2, 0x2, 0x10, {0x2, 0x4e24, @loopback}}, 0x80, &(0x7f0000006240)=[{&(0x7f00000060c0)="00eeefaf8123221a1e19cd79076797defb1762750b9049966adc84c2ea5343905d3e1e04049628e48ad4bc5fd7fbb2b1542d79cef4a285f9835bc8ac658205077fe5529576a97bba8ffdea68a0cffc28c2cbc2c0f12a2a4f69539edd02b7e11072b7dce8db4d66535c75d8ecb2dbf6d91903ad4b6974a8251ff1d1f6dcd94fa107eaa25578afc413bbc70fb732b3fc6644a9f37541846bad763ff5ca7dcc356c6a6158f6ef55b7ff5a3758902d661d7bdf6bb1ef29cf99fb8445c8de16d9b2782ba5cdb537271b3465f1bc394256c8a33decdf77a73be4d69382e8b019a404c58e9d1cc0e59d1363c30377dc6d", 0xed}, {&(0x7f00000061c0)="374f8cd59ae59035ebcf8034c432509616a7a860dbd74f7930b859f89b4d32e56b13def689152ad50c12256fcdcd3de8f74796fd3241d2229657c156bdc165b27cff81", 0x43}], 0x2, &(0x7f0000000c40)=ANY=[@ANYBLOB="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"], 0x138}}, {{&(0x7f0000006300)=@isdn={0x22, 0x6, 0x4, 0x3, 0x2}, 0x80, &(0x7f00000065c0)=[{&(0x7f0000006380)="7e178bfa552e2e52fc76efd7b66db03a30d7d81c53b8071fd6a471bd3a5d49bc8fbadd31b4b38b8176", 0x29}, {&(0x7f00000004c0)="9ae0e58f3c447db53fc94e70238592f1b5def4ccb476c113f6f388ce5013aa619a921300bec1bf25dc417a1cc9c3b2fbf7f146fc064e1724c10f50ab207da2bd541a9ca0d4d58825014e48b8ca2557acd2de0d8fb64a52151b9e1e998bcd1e756f1a81f795344375b25e83adaf5d20c75361193a3a595dfb2d099816ee4a863e", 0x80}, {&(0x7f0000006440)="13f558f3d323c9f9737ff1dd616f7219a0522f7aea3d046ae56a3538d9137a0c7d1d567440abb5cf12ef887e79750fb67e5b9a99adef57051dafad9c54483a2ed86d3277274998b6ff1a8c50ff4fc3d8179b697f58c93ebc84f9f4a8d37095d50cca86022e4fcddef265b73dfe8ee820aca17580cb92953c73cc4de46788b72a7f28fa1b", 0x84}, {&(0x7f0000006500)="094280d1217111c847030a1baf2ea56999e86ca7cb5acfcbb8a745e01b8ec82d1ba302b505679adce8dba4fcad9e9d847c5ef35c469aab11954bc195eb33e4a7ad630fe4801a9ac24e47e30b2415fb9b33d8eeb6f4d8e096105e25cdf1fb75f6756d13bb86776e0b67b4dd0048226b3b73ae82bb704536202f562331a0f4f95f4b6a3884a147958b5beac672587431dcfecbff460c51b9d817521cc4b3c5a421ea5d34", 0xa3}], 0x4}}], 0x6, 0x804) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000002a00)={0x0, 0x0, &(0x7f00000029c0)={&(0x7f0000002940)=ANY=[@ANYBLOB="020a0707070000002bbd4295d548404508070000000000002505001a69bcf8db3b000000000000000000000090dac08b000000006bd53ca9"], 0x38}}, 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000000080), 0x800) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000580)={'gre0\x00', &(0x7f0000000800)={'syztnl2\x00', 0x0, 0x20, 0x8, 0x2, 0x5, {{0x12, 0x4, 0x2, 0x1b, 0x48, 0x68, 0x0, 0x80, 0x4, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, {[@noop, @timestamp={0x44, 0x24, 0x3c, 0x0, 0x9, [0x7, 0xa3a, 0x4, 0x7fffffff, 0x6, 0x8, 0x5, 0x8]}, @timestamp_addr={0x44, 0x4, 0xd4, 0x1, 0xa}, @ra={0x94, 0x4, 0x1}, @noop, @end, @noop, @rr={0x7, 0x3, 0xa3}, @noop]}}}}}) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001c40)=ANY=[@ANYBLOB="4400000010000104000800"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002400128009000100626f6e64000000001400028005000c000000000005000d0001000000"], 0x44}}, 0x0) getsockname$unix(0xffffffffffffffff, &(0x7f0000000340)=@abs, &(0x7f0000000ac0)=0x6e) socket(0x10, 0x803, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b80)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="18020000090000000000000004000034f4dd28a6f27a471fbcbef096210085000000500000001815000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r7, &(0x7f0000000100)={0x18, 0x0, {0x4, @local, 'ip_vti0\x00'}}, 0x1e) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="30000000100001006c4789ec390bca4900000000", @ANYRES32=0x0, @ANYBLOB="211000000300000008001b0000000000080004000180"], 0x30}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) connect$pppoe(r7, &(0x7f0000000040)={0x18, 0x0, {0x5, @remote, 'gre0\x00'}}, 0xfffffcde) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r5, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r8 = socket$inet_udp(0x2, 0x2, 0x0) socket$kcm(0x2, 0x3, 0x2) r9 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="4c000000140097f87059ae08060c040002ff0f0200000000000001870182fa73a69d35a2cca84708f7abca1b4e7d06a6bd7c493872f750375ed08a560400000003c48f93b82a03000000461e", 0x4c}], 0x1}, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r8, 0x89f1, &(0x7f0000001040)={'sit0\x00', &(0x7f0000001000)={'syztnl2\x00', 0x0, 0x0, 0x700, 0x7ff, 0xc, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x64, 0x2000, 0x0, 0x4, 0x0, @rand_addr=0x64010102, @loopback}}}}) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000440)={'lo\x00'}) r10 = socket$inet6(0xa, 0x3, 0x2) connect$inet6(r10, &(0x7f0000000240)={0xa, 0x4e25, 0x400, @empty, 0x100007}, 0x1c) sendmmsg(r10, &(0x7f00000092c0), 0x4ff, 0x0) 2.878471931s ago: executing program 2 (id=2539): close(0x3) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r3 = socket$packet(0x11, 0x2, 0x300) bind$packet(r3, &(0x7f0000000d00)={0x11, 0x5, r2, 0x1, 0x6, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14) writev(r0, 0x0, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000003190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) 2.42152714s ago: executing program 2 (id=2545): socket(0x10, 0x803, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'bond_slave_0\x00', 0x2}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0xde) syz_emit_ethernet(0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaace3502590a7f08"], 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYRESDEC=r0], 0x4c}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x6, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200e19}, 0x94) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffff7fff}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r4, 0x29, 0xb, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r4, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMP(r4, 0x1, 0x3f, &(0x7f0000000080)=0x1, 0x4) recvmmsg(r4, &(0x7f0000001600)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000c40)=""/39, 0x27}, 0x58}], 0x1, 0x2, 0x0) setsockopt$inet6_int(r4, 0x29, 0x46, 0x0, 0x0) setsockopt$inet6_int(r4, 0x29, 0x42, &(0x7f0000000100)=0x5, 0x4) sendto$inet6(r4, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a03000000000000000000050000000900010073797a30000000000900030073797a300000000008000c40000000032800048008000240000000120800014000000000140004"], 0xa4}}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="120000000818000004000000b4"], 0x50) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'team_slave_1\x00'}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @random="50a245d5cde0", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @broadcast}, @timestamp_reply={0x12, 0x0, 0x0, 0xe000, 0x2}}}}}, 0x0) splice(r6, &(0x7f0000000000)=0xffffffffffff5bc8, r5, &(0x7f0000000040)=0xfffffffffffff000, 0x2, 0x7) bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x1000) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000013c0)={0x30, 0x3, 0x8, 0x201, 0x0, 0x0, {0x0, 0x0, 0x20}, [@CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @gre=[@CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x7}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}]}, 0x30}}, 0x4000800) 2.420667071s ago: executing program 3 (id=2546): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="050000000b0000000080000004"], 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000003c0)={r0, &(0x7f0000000600), 0x0}, 0x20) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000000500000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000003880)=ANY=[@ANYBLOB="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"/4545], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) unshare(0x2c020400) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000400)=ANY=[@ANYRES32=r2, @ANYRES32=r2, @ANYBLOB="2f0000000000000000000000975277a3633f18ccdba3fd4e5af29f6845d1af69acf9aea72e3d6adb1e5ee1cf2fd44bfef37dae347c1045bcbf4d9d083db58561b17431946addc1833621be0bea335ee472d21e494da1937d893b73d556e2e8946fff8f93c4ba63649ea4bb19b697f8bac96cca04c5b285ffb6c41abf57c4a1a5b768b8005cf0ae8d574471cd1202fa1dffe14342a1e36ea1006aee7cbbb51707b9e6dbd9", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x20) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000540)={@cgroup=r2, r4, 0x2f, 0x18, 0x4, @void, @value=r3}, 0x20) r5 = socket$inet_smc(0x2b, 0x1, 0x0) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x118, 0x2f, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x106, 0xf2, 0x0, 0x1, [@typed={0xc, 0x2, 0x0, 0x0, @u64=0x8}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@mcast2}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43f9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd3f", @typed={0x4, 0xe9}]}]}, 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r5, 0x0, 0x48b, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x1, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x30}, [@alu={0x4, 0x0, 0x1, 0x0, 0x0, 0x1, 0xffffffffffffffff}]}, &(0x7f00000002c0)='GPL\x00', 0xf}, 0x94) setsockopt$IP_VS_SO_SET_STOPDAEMON(r5, 0x0, 0x48c, &(0x7f0000000600)={0x2, 'pimreg\x00', 0x1}, 0x18) sendmsg$NFT_BATCH(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_DELCHAIN={0x2c, 0x5, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x80}}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r7, &(0x7f0000000200), 0x806000) ioctl$FS_IOC_RESVSP(r7, 0x40305829, &(0x7f0000000380)={0x0, 0x0, 0x4000, 0x9ffffc}) r8 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r8, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r8, 0x11b, 0x6, &(0x7f0000000080)=0x4000, 0x4) setsockopt$XDP_RX_RING(r8, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r9, 0x8933, &(0x7f0000000340)={'batadv_slave_0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r8, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) bind$xdp(r8, &(0x7f0000000100)={0x2c, 0x0, r10, 0x1}, 0x10) setsockopt$XDP_TX_RING(r8, 0x11b, 0x3, &(0x7f0000000000)=0x3000, 0x4) 2.294587219s ago: executing program 1 (id=2548): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000001400000018"], 0x44}}, 0x0) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r5, &(0x7f00000000c0)='blkio.bfq.idle_time\x00', 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[@ANYBLOB="1400004c326e69dae8a6e4c270fba2ad0010000100000000001a0064af00000500000a140000001100010000000000000000000300"], 0x28}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r6 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r6, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) connect$inet(r6, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) sendmmsg$inet(r6, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x400000000000284, 0xf00) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r7, 0x400452c8, &(0x7f0000000100)) ioctl$FS_IOC_GETFSLABEL(r3, 0x400452c9, &(0x7f0000000100)) r8 = accept4(r2, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r8) sendmmsg$alg(r8, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000080)="f7", 0x1}], 0x1}], 0x1, 0x40800) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="44264b3391d9d341b7689b784c8e007cdb20f4ff29750000000ffbffff27bd7000fedbdf250000000032bc1053a9dd977ad5ad3ae11e50a8ede3ee2880e117ae8a06f710156d91d0e79b1a27a7f099f2ae6d8d5c62500926a34c40c2582fc3fcdcda245f024b95de", @ANYRES32=0x0, @ANYBLOB="5d4705006ffd0000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r1, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x28001}, 0x8000002) 2.129077153s ago: executing program 4 (id=2550): r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) openat$cgroup_pressure(r0, &(0x7f0000000040)='cpu.pressure\x00', 0x2, 0x0) socket$kcm(0x2, 0x1, 0x84) (async) r1 = socket$kcm(0x2, 0x1, 0x84) unshare(0x28000600) close(0x3) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x288840, 0x0) (async) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x288840, 0x0) sendmsg$inet(r1, 0x0, 0x4000080) openat$cgroup_ro(r0, &(0x7f0000000080)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) (async) r2 = openat$cgroup_ro(r0, &(0x7f0000000080)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x100010, r2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r3, 0x0, 0x2e, &(0x7f0000000340)={0x3, {{0x2, 0x4e22, @broadcast}}, {{0x2, 0x0, @multicast2}}}, 0x108) 2.001107527s ago: executing program 4 (id=2551): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x6b, 0x11, 0x9e}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call, @exit={0x95, 0x0, 0x700}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x70) (async) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r1, 0x0, 0x16, &(0x7f0000000000)=0x6, 0x4) sendto$inet(r1, &(0x7f00000000c0)="0c2ed4", 0x3, 0x0, &(0x7f0000000340)={0x2, 0x0, @rand_addr=0x64010101}, 0x10) (async) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) r3 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000100), 0x10) (async) openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r4, 0x8982, 0x0) (async) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(0xffffffffffffffff, 0x4048587b, &(0x7f0000000b80)={{0xffffffffffffffff, &(0x7f0000000540)='@^\x00', 0x10800, 0x0, 0x4, 0x0, 0x0}, 0x1, &(0x7f0000000b00)=[{0x3, 0x4, 0x0, &(0x7f0000000940), 0x0, 0x8}]}) (async) socket$kcm(0x10, 0x2, 0x0) (async) r5 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r5, 0x114, 0x1d, 0x0, 0x0) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r6, 0x0, 0x0) (async) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r2, 0x400, 0x70bd2a, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x8800}, 0x40800) (async) sendmsg$NFQNL_MSG_CONFIG(r6, 0x0, 0x240000c0) socket$packet(0x11, 0x3, 0x300) r7 = socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = socket$unix(0x1, 0x2, 0x0) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={0x3c, r9, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'dvmrp1\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4090}, 0x24044814) 1.959197384s ago: executing program 0 (id=2552): recvmmsg(0xffffffffffffffff, &(0x7f0000001d00)=[{{0x0, 0x0, &(0x7f0000001a00)=[{0x0}, {&(0x7f0000000500)=""/183, 0xb7}, {0x0}, {0x0}], 0x4}, 0x2}], 0x1, 0x2, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendmmsg$inet(r0, &(0x7f00000007c0)=[{{&(0x7f00000002c0)={0x2, 0x4e22, @local}, 0x10, 0x0}}], 0x400005c, 0x2400c8a0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'virt_wifi0\x00'}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f00000006c0), r2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020200600000000000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000008500000070000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1f, 0x13, &(0x7f0000000200)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000700)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEV(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="030027bd7000fddbdf251b00000008000300", @ANYRES32=r5, @ANYBLOB="10002e"], 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x200000c0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070}, 0x94) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000007300)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000006200)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @fallback=0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r7 = socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000001a00)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = socket(0xa, 0x3, 0xff) setsockopt$inet6_int(r8, 0x29, 0x10, &(0x7f0000000000)=0x8, 0x4) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_pid(r9, &(0x7f00000004c0), 0x12) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r9, 0x0) sendto$inet6(r8, 0x0, 0x0, 0x20008844, &(0x7f0000000100)={0xa, 0x4e24, 0x4, @remote, 0xfff}, 0x1c) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r7, 0x1, 0x32, &(0x7f0000000180)=r10, 0x4) 1.956357063s ago: executing program 1 (id=2553): r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$FAT_IOCTL_GET_ATTRIBUTES(r0, 0x80047210, &(0x7f0000000000)) getsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000040), &(0x7f0000000080)=0x4) socket$inet_sctp(0x2, 0x5, 0x84) (async) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f00000000c0), &(0x7f0000000100)=0xe) r2 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000140)={0x28, 0x0, 0x2711, @local}, 0x10, 0x80800) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r2, 0x28, 0x1, &(0x7f0000000180)=0x2, 0x8) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r4, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, 0x0, 0x8, 0x201, 0x0, 0x0, {0x0, 0x0, 0x6}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x3a}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40004}, 0x8000) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f00000002c0)={0x0, 0x3f02}, 0x8) (async) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f00000002c0)={0x0, 0x3f02}, 0x8) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r1, 0x4058587a, &(0x7f0000000500)={{r1, &(0x7f0000000340)='@\x8b\\\x00', 0x8000, &(0x7f0000000380)={@align=0xa39, {0x5, 0xaa, 0x10000, 0x5}}, 0x7, &(0x7f00000003c0), &(0x7f0000000400)=0x3e6f}, {[0x6, 0x1, 0x7fffffff, 0xffff]}, 0x5, 0x85, &(0x7f0000000440)=""/133}) syz_genetlink_get_family_id$devlink(&(0x7f0000000300), r5) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000580)) gettid() (async) gettid() syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), r5) (async) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), r5) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) r8 = ioctl$TUNGETDEVNETNS(r5, 0x54e3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000680)={'wlan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000680)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r5, &(0x7f0000000780)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x50, r6, 0x200, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x4d}, @val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x4, 0x80}}}}, [@NL80211_ATTR_NETNS_FD={0x8, 0xdb, r8}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r9}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x7e}]}, 0x50}, 0x1, 0x0, 0x0, 0x48844}, 0x48) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r5, 0x84, 0x75, &(0x7f00000007c0)={0x0, 0x6}, &(0x7f0000000800)=0x8) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r5, 0x84, 0x5, &(0x7f0000000840)={r10, @in6={{0xa, 0x4e20, 0x4, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x8000}}}, 0x84) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000940)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r5, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x3c, r6, 0x400, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r11}, @val={0xc, 0x99, {0x5, 0x6b}}}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "37d11d388f1cf2f3d8fa33e9f37082dd"}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x44) (async) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r5, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x3c, r6, 0x400, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r11}, @val={0xc, 0x99, {0x5, 0x6b}}}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "37d11d388f1cf2f3d8fa33e9f37082dd"}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x44) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r3, 0x8008f512, &(0x7f0000000a40)) socket$qrtr(0x2a, 0x2, 0x0) (async) r12 = socket$qrtr(0x2a, 0x2, 0x0) getsockname$qrtr(r12, &(0x7f0000000a80), &(0x7f0000000ac0)=0xc) (async) getsockname$qrtr(r12, &(0x7f0000000a80), &(0x7f0000000ac0)=0xc) getsockopt$bt_BT_RCVMTU(r5, 0x112, 0xd, &(0x7f0000000b00)=0x7, &(0x7f0000000b40)=0x2) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000dc0)={r5, 0x0, 0xb7, 0x83, &(0x7f0000000b80)="e820ebf9d08229c498ed06bccafcdf2f47ee861ebec0fb1e799733590549e30ed17074a15c7f0022202e05be3920632ef9f19c11c83953d9a92b55fd198379d9819b068d253630a3e39845cf74b48ddd760932ff31e928b60cbc21152a58bbce55cdb2aa64e7e57bd9ddade3aefa791e0af873f83df94973bd1c6966274fbd19bc2865bf5516a9a851d4f0ea466eeb05cf05b7ac1fe8fa0b087b88e08ec29e8e0785b63e47404d38e80cc9712a92b5eeb0d13d147091ce", &(0x7f0000000c40)=""/131, 0xffffffc3, 0x0, 0x79, 0x8, &(0x7f0000000d00)="fed818db194252bdd602c87d12329ad45c6201da83bbc8d058af4dddf10ae83ad1dd8a00e3dab9e11997c9a389592e1451caee6353523b82f3a7472cc5fc95c021e13a379001cd4a9a405265e2d9e852f52abde7397173984ca255e91dbbcfdf269e06da820a85e21345389e3e2dea6acd2b95c6a7968618e9", &(0x7f0000000d80)="6aadeb46ab2027da", 0x1, 0x0, 0x5}, 0x50) sendmsg$nl_route_sched(r5, &(0x7f00000014c0)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001480)={&(0x7f0000001180)=@newqdisc={0x2c4, 0x24, 0x4, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x7, 0x1}, {0x2, 0x10}, {0xffe0, 0x5}}, [@TCA_STAB={0x68, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x6, 0x7, 0x2, 0x5, 0x2, 0x40, 0x8, 0xa}}, {0x18, 0x2, [0x5, 0x0, 0x3ff, 0x4, 0x0, 0x800, 0x8, 0xa, 0x4, 0x731c]}}, {{0x1c, 0x1, {0x0, 0x2, 0x4, 0x8, 0x2, 0x5, 0x9, 0x7}}, {0x12, 0x2, [0x0, 0x9, 0x96, 0x6, 0x8001, 0xd, 0xfff6]}}]}, @TCA_STAB={0x1c0, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x7f, 0x1, 0xb, 0x1, 0x2, 0xbf, 0x4, 0x7}}, {0x12, 0x2, [0x0, 0xfff, 0x9, 0x7, 0x1ff, 0x2c, 0x1]}}, {{0x1c, 0x1, {0x0, 0x5, 0x7, 0xd9, 0x0, 0xe5, 0xb781, 0x6}}, {0x10, 0x2, [0xa, 0x3, 0x9, 0x6, 0x3, 0x2]}}, {{0x1c, 0x1, {0x7, 0x1, 0x7, 0x8d9, 0x0, 0x1, 0x200, 0x2}}, {0x8, 0x2, [0x1000, 0x17f]}}, {{0x1c, 0x1, {0x15, 0x7f, 0x3, 0xffff, 0x2, 0x40, 0x6, 0x7}}, {0x12, 0x2, [0x6, 0xd74, 0xa, 0x5, 0x6, 0x2, 0xbb]}}, {{0x1c, 0x1, {0x80, 0x3, 0xfffb, 0xd3, 0x2, 0x3, 0x6, 0x6}}, {0x10, 0x2, [0x8e3, 0x1, 0x2, 0x55, 0x622, 0x6]}}, {{0x1c, 0x1, {0x2, 0x9c, 0x3, 0x1, 0x2, 0x100, 0x5, 0x1}}, {0x6, 0x2, [0x9]}}, {{0x1c, 0x1, {0x8, 0x5, 0x7, 0x6a0, 0x0, 0x4, 0x6, 0xa}}, {0x18, 0x2, [0x7, 0x2, 0x2, 0x5, 0x9, 0x9, 0x0, 0xa98, 0x592b, 0xfffd]}}, {{0x1c, 0x1, {0x0, 0x1d, 0x88, 0x1f0e, 0x2, 0x9, 0x3, 0x1}}, {0x6, 0x2, [0x8000]}}, {{0x1c, 0x1, {0x7, 0xa, 0x79d8, 0x66ab, 0x1, 0x4, 0x7, 0x8}}, {0x14, 0x2, [0x1000, 0x5, 0x1000, 0x0, 0x8000, 0xe1, 0x2, 0x7]}}, {{0x1c, 0x1, {0x32, 0x2, 0x3, 0x8, 0x2, 0x7, 0x7, 0x9}}, {0x16, 0x2, [0x70f, 0x3, 0x5, 0x4, 0xf800, 0xfffc, 0x8, 0x8000, 0x3]}}]}, @TCA_RATE={0x6, 0x5, {0x2, 0x3}}, @qdisc_kind_options=@q_gred={{0x9}, {0x5c, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0xf, 0xc, 0x1, 0x6}}, @TCA_GRED_DPS={0x10, 0x3, {0xe, 0x5, 0x1, 0x4}}, @TCA_GRED_LIMIT={0x8, 0x5, 0x7fff}, @TCA_GRED_LIMIT={0x8, 0x5, 0x9}, @TCA_GRED_MAX_P={0x8, 0x4, 0x5280dea}, @TCA_GRED_DPS={0x10, 0x3, {0x8, 0x2, 0x0, 0x6}}, @TCA_GRED_LIMIT={0x8, 0x5, 0x7ff}, @TCA_GRED_MAX_P={0x8, 0x4, 0x7}]}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x1}]}, 0x2c4}, 0x1, 0x0, 0x0, 0x40000}, 0x40) 1.905654989s ago: executing program 3 (id=2554): r0 = socket(0x2b, 0x80801, 0x1) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="4c010000", @ANYRES16, @ANYBLOB="000826bd7000fbdbdf25120000004c0002803400038008000200070000000800010001000000080002000000000008000100070000000800010007000000080002000200000008000200e50b00000c0003"], 0x14c}, 0x1, 0x0, 0x0, 0x8010}, 0x4000800) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="840000000002010400000000000000000a00000004000180300003802c00018014000300fc00000000000000000000100000000014004400fe800000001f610000000000000000bb3c0002800c00028005000100000000002c00018014000300fc02000000000000000000000000000014"], 0x84}}, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYRES32, @ANYBLOB="14000100ff010000000000000000000000000001140006"], 0x70}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x9) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="a000000010003b0e2a1a86eb2636037f00000000", @ANYRES32=r3, @ANYBLOB="0200000000008000800012000800010076746936740002"], 0xa0}}, 0x0) setsockopt$inet6_int(r1, 0x29, 0x31, &(0x7f0000000440)=0x8, 0x4) getsockopt$inet6_buf(r1, 0x29, 0x6, &(0x7f0000001500)=""/3, &(0x7f00000000c0)=0xfec2) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r6) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000240)={'wlan0\x00', 0x0}) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010000304000080000000000000000000", @ANYRES32=0x0, @ANYBLOB="30080000000004002400128009000100626f6e640000000014fe018005000100040000000800070006000000"], 0x44}, 0x1, 0xba01}, 0x0) r10 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, &(0x7f0000000380)={'vxcan0\x00', 0x0}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x40014}, 0x804) bind$can_j1939(r10, &(0x7f0000000180)={0x1d, r11, 0x0, {0x0, 0x0, 0x1}, 0x2}, 0x18) ioctl$sock_SIOCETHTOOL(r10, 0x8946, 0x0) sendmsg$can_j1939(r10, &(0x7f00000002c0)={&(0x7f00000000c0)={0x1d, 0x0, 0x0, {0x0, 0x1ee}}, 0x18, &(0x7f00000004c0)={&(0x7f0000000140)='\x00', 0x8}}, 0x0) sendmsg$NL80211_CMD_VENDOR(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)={0x40, r7, 0x1, 0x70bd27, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x74}, @val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x8, 0xc}}}}, [@NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x4}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x40}}, 0x20048000) sendmsg$NL80211_CMD_GET_WOWLAN(r6, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r4, 0x300, 0x70bd29, 0x25dfdbff, {{}, {@void, @val={0x8, 0x3, r8}, @void}}, [""]}, 0x1c}}, 0x88d1) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r4, 0x200, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x100}]}, 0x24}, 0x1, 0x0, 0x0, 0x20008010}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x10, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x10000, @loopback, 0x1}, 0x1c) 1.759204964s ago: executing program 4 (id=2555): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="300000000306010400000000000000000a000009050001"], 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x84) socket$kcm(0x2, 0xa, 0x2) (async) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) write$tun(0xffffffffffffffff, &(0x7f0000000300)={@val={0x800e}, @void, @eth={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x41}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x4, 0x28, 0x0, 0x0, 0x0, 0x4, 0x0, @empty, @empty}, {0x0, 0x0, 0x14, 0x0, @gue={{0x2, 0x0, 0x0, 0x4, 0x100, @val=0x80}, "80f7c1d0"}}}}}}}, 0x3a) 1.649965366s ago: executing program 1 (id=2556): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$key(0xf, 0x3, 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) (async, rerun: 32) r4 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) getsockname$packet(0xffffffffffffffff, &(0x7f0000000340)={0x11, 0x0, 0x0}, &(0x7f0000000380)=0x14) (async, rerun: 32) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x6, 0x4, &(0x7f0000002180)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) (async, rerun: 32) r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'dummy0\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r7, r9, 0x25, 0x4, @val=@kprobe_multi=@syms={0x1, 0x0, 0x0, 0x0, 0xc5}}, 0x30) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000440)={'ip6_vti0\x00', &(0x7f00000003c0)={'syztnl2\x00', 0x0, 0x29, 0x88, 0x0, 0x0, 0x2, @loopback, @dev={0xfe, 0x80, '\x00', 0x38}, 0x7, 0x8, 0x5, 0x7fffffff}}) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000a00)=@newtfilter={0x64c, 0x2c, 0x10, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x4, 0x7}, {0x4, 0xffe0}, {0x6, 0x1}}, [@TCA_CHAIN={0x8, 0xb, 0x2}, @TCA_RATE={0x6, 0x5, {0x7, 0x8}}, @TCA_RATE={0x6, 0x5, {0xc, 0x5}}, @filter_kind_options=@f_basic={{0xa}, {0x5f4, 0x2, [@TCA_BASIC_POLICE={0x20, 0x4, [@TCA_POLICE_AVRATE={0x8, 0x4, 0x9}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x100000001}, @TCA_POLICE_RESULT={0x8, 0x5, 0x32}]}, @TCA_BASIC_EMATCHES={0x40, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x25}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x9}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x3}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x18, 0x1, 0x0, 0x0, {{0xfffd, 0x2, 0x1000}, {0x7f, 0x5, 0x1, 'DHr;R'}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x7f}}]}, @TCA_BASIC_CLASSID={0x8, 0x1, {0x6, 0x1}}, @TCA_BASIC_CLASSID={0x8, 0x1, {0x3, 0xffff}}, @TCA_BASIC_ACT={0x578, 0x3, [@m_mirred={0x180, 0x1c, 0x0, 0x0, {{0xb}, {0x84, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x5, 0x100, 0x5, 0x7, 0xffffffff}, 0x4, r6}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xf348, 0x1, 0x10000000, 0x7, 0x7}, 0x1}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0xc, 0xf, 0x9, 0x7}, 0x3, r9}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0x0, 0x8, 0x5, 0x3}, 0x3, r10}}]}, {0xd1, 0x6, "46355a84a7121ee9eb7072e1fe07f9d6f6f9762b6124b07fd7e14be99d22f985b5711d8ffe5fb67aac46d6fbf3c9232366cd289ecc3daa90aaf609ff6bcba748e224dfd327da741273dfc7202c4b49920e3ac7d361886aa0a2a9cd8029d4cccd5921108fcd0647aa30209663404cdbcc6ccd2f193f05716615c9ab7bb27ac5793b80a050881f6c6be8b8eb514a50927fd309d9bf69af3896f00a5d0a06e20e2b1f56d962042f5ef2158bbc1adca0bfda54e3b84ca734d9f5bac4e3e4cbd066921996660680e2b274a419e96433"}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}, @m_xt={0x2cc, 0xa, 0x0, 0x0, {{0x7}, {0x260, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0x10c, 0x6, {0x7, 'mangle\x00', 0x1, 0x400, "3ac4818dae5ec4b644f1300adaae7e0051c848ee818d43c16f7f5908eaeb3d8707e14efa0b197093ba52cdb37f9f8f1b64b839e153d7ad5b811f37518750a4f7cf90c807732b1626d10a3d014020a9613d28646732a05dee33ed8c35240a48093dfc38734f22d48ee8164896b035cf521ed79dfdbdc3edd316a778affd694c84ff383245dafa28878fb287f7ed0ba79e62918eb4a3cdd9e63c52c4b09bdf211d078ba4e2e0b4d0b30bae1b5895656d447baa745fdece3a7eae68cb69a2326536a4a873bdd621bca5e576bb0fb650ef1634149a97887c66426445aaf3b61d94e48199"}}, @TCA_IPT_INDEX={0x8, 0x3, 0x10000}, @TCA_IPT_TABLE={0x24, 0x1, 'filter\x00'}, @TCA_IPT_TARG={0x101, 0x6, {0xa7, 'raw\x00', 0x3, 0x4, "d336775a21fdcd473a10fcea5dc1a4d01163e0e9c37eba8097b7499612b6dec47a8a675fdeaa6feb6933a413eec9ea6d2c2ffa5942388c1ff35846993d590a41d501f3d20e31d81df0790abc0090309252287d589b7010ae9e75ab6e493d0ef8fbdd2216806c43e9eb0c8f5067a976be50a2175a0a5cb6227a6744e4790dafa4d08800ff9ce72ce62f7f3b8a3e2f13487f7d42603caba5c8ebdc4cb3ff9107e95d4b8c620a7e3669fa3865ffd36102fdc7ba4922427f3959a68d96f59c17900e58f59bb9cf391d0f528c6551dc8335ada8b8e20fb1f3d5"}}, @TCA_IPT_INDEX={0x8, 0x3, 0x9}, @TCA_IPT_INDEX={0x8, 0x3, 0x101}, @TCA_IPT_INDEX={0x8, 0x3, 0x5}, @TCA_IPT_HOOK={0x8}]}, {0x45, 0x6, "8da89f02e1d1232f4c1dccffc62747ccaad0c5fc3f7931bafec8cca40f4535d930c51a0981352835f895966c3b4d4a4336c0f8249cb2e9bbf814793679da6e7371"}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}, @m_simple={0x128, 0xe, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x5, 0x3, '\x00'}, @TCA_DEF_DATA={0x5, 0x3, '\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0xb4, 0x200, 0x6bb41b75edb23149, 0xfff, 0x3}}]}, {0xd1, 0x6, "fc198f2aae62f6a0ebf1a3b7481ae218d00d5bc360550d8531b02f7373e59f24ea226a32a3020d94c989eb2661a0cf5b804047eee5a517da40001d7eacbb2a3f87640b9ace6dcbcbcf758000800e8731076dac7e495877f286e7d152b3efa1fa07d57ee531abddcc2a7da60ca3081953e533c9ad62673fdfe16027e44787135b954455649d2effcdc2ea1dc7cbd6967f94490969b007d668570d20740ae259b88eaaa0527102f4c4cf1a5984e7c91af6c38face27f9e8dc87052fd885413764d418e6568aff9d2eb3f090b125f"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3}}}}]}, @TCA_BASIC_CLASSID={0x8, 0x1, {0x3163b75829e7c83d, 0xfff2}}]}}, @TCA_RATE={0x6, 0x5, {0x49, 0x2}}, @TCA_CHAIN={0x8, 0xb, 0x314b952b}]}, 0x64c}, 0x1, 0x0, 0x0, 0x8890}, 0x8050) (async) r11 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_int(r11, 0x29, 0x19, &(0x7f0000000000)=0x84, 0xfde1) r12 = accept4$vsock_stream(r4, &(0x7f00000004c0)={0x28, 0x0, 0x2711, @local}, 0x10, 0x0) connect$vsock_stream(r12, &(0x7f0000000500)={0x28, 0x0, 0x2711, @host}, 0x10) (async) sendto$inet6(r11, 0x0, 0x0, 0x200cc0c5, &(0x7f0000000080)={0xa, 0x4c20, 0x0, @mcast2}, 0x1c) (async) sendto$inet6(r11, &(0x7f0000001cc0)="2501d77b330b7e73d6b1d1b8a473ff7420b4b43ce0861f000000714fa228ee1f5b48", 0xfffffffffffffe57, 0x8000, 0x0, 0x0) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r13 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdirat$cgroup(r13, &(0x7f0000000080)='syz1\x00', 0x1ff) (async) r14 = openat$cgroup(r13, &(0x7f0000000180)='syz1\x00', 0x200002, 0x0) (async, rerun: 64) accept4(r8, 0x0, &(0x7f0000000480), 0x0) (rerun: 64) mkdirat$cgroup(r14, &(0x7f0000000380)='syz1\x00', 0x1ff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r2, &(0x7f0000001b80)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES16=r3, @ANYBLOB="010028bd7000fedbdf250c0000000c000380080002005fa000001800018014000200626f6e645f736c6176655f3100000000"], 0x38}, 0x1, 0x0, 0x0, 0x881}, 0x8000) (async) getsockopt$inet6_mreq(r11, 0x29, 0x1c, &(0x7f00000000c0)={@remote}, &(0x7f0000000100)=0x14) (async) sendmsg$key(r1, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="020d0000100000000000000000000000080012000200020000000000200000003000120003000000000000000000000010003300000000040000000000000000fc020000000000000000000000000000030005000000000002000000ac1414aa000000000000000003000600000000000200"], 0x80}}, 0x0) (async) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000001bc0)=0x9, 0x4) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="240000001a00040029bd7000fbdbdf251c00207e0003c800000800000800010000000600c3f77465736b29d2e2ae77bad1d379f1ee14f9b64ee45a7c354725479f2372aec25ac010d6f61a76b29af1d7fe695d8529ad137fc31794382451ecb940ec99bd6a035e234aea480ba94c71b4ac61d6347513cb1e4ed4d2af129bf833713ba332f63424e413c045d95b8bced9a135998af10fbe5fe6"], 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x10000084) 1.574546882s ago: executing program 3 (id=2557): syz_emit_ethernet(0x2a, &(0x7f0000000880)={@link_local, @remote, @val={@void, {0x8100, 0x1, 0x0, 0x2}}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x18, 0xfffe, 0x0, 0xa0, 0x2f, 0x0, @loopback, @multicast1}, {0x2001, 0x880b, 0x2, 0x0, @opaque="fddc606e6597bced93fa56f4865efb45a2e3a231b7e0565cf59718074c479f86eb89c02913feb3360f30ab79286dbd80d65c736315f3154426ed17adc0f1754bebac9f4248a4df5ad7aee3c0368f8bcfdb7f824c4fec2454e7699dcf6ec0fe5ecbb2b25cf3746f5977f86d6e09768e64762226417b61c8679b6a02e027e66273b3ebb36533acbb9bbbcb836c179a6989849bcb1c0747218fac98bcf1579b0429e25a82"}}}}}, 0x0) unshare(0x22020600) r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r0, 0x0, 0x0, 0x20008fbd, &(0x7f0000e68000)={0x2, 0x4e22, @loopback}, 0xfffffffffffffe91) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) 1.502869632s ago: executing program 0 (id=2558): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) socket$inet6(0xa, 0x80002, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000003"], 0x48) socket$qrtr(0x2a, 0x2, 0x0) socket$qrtr(0x2a, 0x2, 0x0) (async) r3 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r3, 0x0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket(0xa, 0x3, 0x3a) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0xc) (async) socket$netlink(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$unix(0x1, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYRES64, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000700000008000500", @ANYRES32=r4, @ANYRES16=r3, @ANYRES32], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}, 0x1, 0x0, 0x0, 0xc890}, 0x0) writev(r0, &(0x7f00000006c0)=[{&(0x7f0000000440)="2e9b3d0007e03dd65193dfb6c575963f8864", 0x12}, {&(0x7f00000001c0)="31020002", 0x4}, {&(0x7f0000000140)="683f0057954e837474512fcaea99bc671e3d", 0x12}, {&(0x7f0000000240)="a492e95857d9dad0c70b72425db11aaf3ffd93dad703501bc83d4e701379", 0x1e}], 0x4) (async) writev(r0, &(0x7f00000006c0)=[{&(0x7f0000000440)="2e9b3d0007e03dd65193dfb6c575963f8864", 0x12}, {&(0x7f00000001c0)="31020002", 0x4}, {&(0x7f0000000140)="683f0057954e837474512fcaea99bc671e3d", 0x12}, {&(0x7f0000000240)="a492e95857d9dad0c70b72425db11aaf3ffd93dad703501bc83d4e701379", 0x1e}], 0x4) 1.437679038s ago: executing program 1 (id=2559): r0 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000000)={'ip6_vti0\x00', &(0x7f00000009c0)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x1, 0x65b, 0x0, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x9}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000040)={'syztnl1\x00', &(0x7f0000000640)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x3, 0x0, 0x2b, @empty, @empty, 0x0, 0x10, 0x200, 0xa}}) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, 0x0, 0x0) (async) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, 0x0, 0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) socket$inet(0x2, 0x2, 0x1170000) close(r3) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, 0x0) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000000340)={0x1d, r5, 0x3, {0x2, 0x0, 0x6}, 0xfe}, 0x18) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, 0x0, 0x0) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, 0x0, 0x40000) getsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, 0x0, &(0x7f0000000400)) setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) (async) setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) (async) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) write$cgroup_subtree(r2, &(0x7f0000000140)=ANY=[], 0x48) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) (async) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) splice(r1, 0x0, r3, 0x0, 0x3000, 0x100000000000000d) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) r7 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000180)='io.max\x00', 0x2, 0x0) write$cgroup_int(r7, &(0x7f00000001c0)=0x2, 0x12) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-224\x00'}, 0x58) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) r9 = accept4(r8, 0x0, 0x0, 0x80800) writev(r9, &(0x7f00000017c0)=[{&(0x7f00000016c0)="d244", 0x2}], 0x1) (async) writev(r9, &(0x7f00000017c0)=[{&(0x7f00000016c0)="d244", 0x2}], 0x1) 1.409842196s ago: executing program 3 (id=2560): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="c40000001900674c2cbd70000000000000000000000000000000000000000000ac1eff0100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0100000000000000000000000000000000000020000000000000000000000000000000000000000000008000000000000000000000000000fcffffffffffffff0000000000000000b0ac00000000000000000000000000000000000000000000000400000000000000000002000000000a00100001"], 0xc4}}, 0x4c050) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000040000100fcff070004000000010000000800cb8004000880101201800c00108008000100050000000c0002000000000000000000"], 0x38}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000010c30000000003000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000116608000000000000180000000000000000000000000010009500000000000000360a020000000001180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50afdff0000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xa, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x78) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x28, 0x40, 0x119, 0xfffffffe, 0x0, {0x4, 0x7c}, [@nested={0x4, 0x141}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='e1'}]}, @nested={0x4, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x48814}, 0xc000) r6 = epoll_create1(0x0) ioctl$FS_IOC_SETFLAGS(r6, 0x40088a01, &(0x7f0000000000)=0x100) close(0x3) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r4, &(0x7f0000000240)={0xc0000008}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="034886dd010000000000140000006000000003082f00fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef) 1.383550188s ago: executing program 4 (id=2561): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@mpls_getnetconf={0x1c, 0x52, 0x1, 0x0, 0x0, {}, [@IGNORE_ROUTES_WITH_LINKDOWN={0x8}]}, 0x1c}}, 0x0) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=ANY=[@ANYBLOB="0a000000090000000800000002"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x6, &(0x7f0000000180)=ANY=[@ANYBLOB="1802000000000000000000000000200018130000", @ANYRES32=r1, @ANYBLOB="0000000000000000850000002600000095"], &(0x7f0000000000)='GPL\x00'}, 0x94) 1.359834356s ago: executing program 2 (id=2562): r0 = socket$igmp6(0xa, 0x3, 0x2) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000080)=0x4000, 0x4) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_TARGET_NETNSID={0x8, 0x2e, 0x4}, @IFLA_NET_NS_PID={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x400c89c) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000340)={'batadv_slave_0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) bind$xdp(r1, &(0x7f0000000100)={0x2c, 0x0, r4, 0x1}, 0x10) r5 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000180), 0x4) r6 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$ETHTOOL_MSG_RINGS_GET(r6, &(0x7f0000000300)={&(0x7f0000000200), 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x60, 0x0, 0x20, 0x70bd2d, 0x25dfdbfd, {}, [@HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x24001144}, 0x20008010) bpf$ITER_CREATE(0x21, &(0x7f00000001c0)={r5}, 0x8) socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000000)=0x3000, 0x4) socket$inet6_udp(0xa, 0x2, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r7) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a840300000c0a010300000000000000000a0000060900020073797a31000000000900010073797a3100000000580303803c0200800c00018006000100d103000010000780090001006c617374"], 0x3ac}, 0x1, 0x0, 0x0, 0x8000}, 0x50) r9 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$PPPIOCSFLAGS(r9, 0x40047459, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000c80)={'veth0_to_bridge\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f00000020c0)={@loopback, 0x84, r10}) 1.201376235s ago: executing program 4 (id=2563): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000792000/0x4000)=nil, 0x4000, 0x2, 0x13, r0, 0xffffb000) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000040)=@security={'security\x00', 0xe, 0x4, 0x610, 0xffffffff, 0x0, 0x230, 0x318, 0xffffffff, 0xffffffff, 0x540, 0x540, 0x540, 0xffffffff, 0x4, &(0x7f0000000000), {[{{@uncond, 0x0, 0x208, 0x230, 0x0, {}, [@common=@rt={{0x138}, {0x6000000, [0x8, 0xb0], 0x3, 0x20, 0x5, [@private1, @local, @ipv4={'\x00', '\xff\xff', @remote}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @loopback, @loopback, @local, @private1={0xfc, 0x1, '\x00', 0x1}, @private0, @mcast2, @dev={0xfe, 0x80, '\x00', 0x38}, @remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, @mcast2, @mcast2], 0xe}}, @common=@icmp6={{0x28}, {0x11, "cc11", 0x1}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x3}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x9, 0x2, 0x5, 0x5b65, 0x20000, 0x80000001, 0x1, 0x5]}}}, {{@uncond, 0x0, 0x1e0, 0x228, 0x0, {}, [@common=@rt={{0x138}, {0x5, [0x7, 0x6], 0x80000001, 0x10, 0x0, [@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1d}}, @mcast2, @dev={0xfe, 0x80, '\x00', 0x30}, @private2, @mcast1, @private0={0xfc, 0x0, '\x00', 0x1}, @private2={0xfc, 0x2, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast2, @remote, @local, @private1={0xfc, 0x1, '\x00', 0x1}, @private1, @empty, @remote, @private1={0xfc, 0x1, '\x00', 0x1}], 0x2}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@rand_addr=' \x01\x00', 'pimreg0\x00', {0xb93}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x670) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800006, 0x7000001, 0x6e073, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 1.200349379s ago: executing program 1 (id=2564): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3b071, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000900), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000007c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="1600005e96fd72831eed523a790ff344d511d4686c12d5549ccec43eed8ef4fcf134e0078ccb8b47a21909ddf36726d85bd49bb2ad3f36d504a66be4fec8e64ccd49b849c2f1203526ae3fe077e916de9def437d28b8cef878e5c4ca2522c9e01d809ef85e1f2922b17e8555226c588157f11e2edbd27ef821530451f7388f9146caad5cd4", @ANYRES16=r1, @ANYBLOB="010029bd7000fddbdf2507000000"], 0x14}, 0x1, 0x0, 0x0, 0x8004}, 0x800) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wpan3\x00', 0x0}) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) r5 = accept4(r4, 0x0, 0x0, 0x0) sendmsg$alg(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001600)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x24008090}, 0x40000) sendmsg$nl_generic(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f000000a1c0)=ANY=[], 0x3bfc}, 0x1, 0x0, 0x0, 0x4000}, 0x40040) r6 = socket$unix(0x1, 0x2, 0x0) bind$unix(r6, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x1c) r7 = socket$unix(0x1, 0x2, 0x0) bind$unix(r7, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x6e) r8 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000240)={0x4c, 0x14, 0x101, 0x70bd25, 0x25dfdbfd, {0x1, 0x1f, 0x8, 0x10, {0x4e26, 0x4e22, [0x3, 0x6, 0xe, 0xc3], [0x6, 0xe, 0x40000000, 0x7], 0x0, [0x1, 0x4]}, 0x9, 0xc7}}, 0x4c}, 0x1, 0x0, 0x0, 0x404c0c8}, 0x4040000) recvmsg$qrtr(r5, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000100)=""/17, 0x11}], 0x1, 0x0, 0x0, 0x10000}, 0x38, 0x0) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000700)={&(0x7f0000000640)={0x94, r1, 0x400, 0x70bd29, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_LEVEL={0x24, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x7}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x6}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_SEC_LEVEL={0x2c, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x8}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x3}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x94}, 0x1, 0x0, 0x0, 0x30000814}, 0x80) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x54, 0x0, 0x20, 0x70bd26, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_LEVEL={0xc, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x4}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r9}]}, 0x54}}, 0x8800) r10 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="050000000000000061102c0000000000d4000000100000009500000c00000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x48) r11 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) r12 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r12, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@updpolicy={0xb8, 0x1d, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x29}, {0x0, 0x0, 0x9, 0x0, 0x0, 0x2, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x7}}, 0xb8}}, 0x10) sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="0106000000000000000009000000240004801300010062726f6164486173742d6c690c40b4"], 0x38}, 0x1, 0x0, 0x0, 0x2400c005}, 0x40) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x6, &(0x7f0000000080)=ANY=[@ANYRES16=r10], &(0x7f0000000100)='GPL\x00', 0x4, 0x94, &(0x7f0000001300)=""/148, 0x20800, 0xb}, 0x94) 1.162275766s ago: executing program 0 (id=2565): r0 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="e8000000100001002dbd7000fddbdf257874732874776f6669736829000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c40000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000008"], 0xe8}, 0x1, 0x0, 0x0, 0x44}, 0x80) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001240)={0x18, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000020000000000000000000000850000002f000000180100002020752500000000002020207b1af8ff00000000bfa101000000000007010000f8ff1cffb702000008000000b70300006813000085000000b400000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) sendmsg$NL80211_CMD_REGISTER_FRAME(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)={0x28, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x8}, @NL80211_ATTR_FRAME_MATCH={0x4}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x18, 0x229, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x80, r4, 0x10d, 0x70bd29, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x200, 0x5a}}}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x9}, @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x143c}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x6}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x171}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x16a}], @NL80211_ATTR_DURATION={0x8, 0x57, 0xffffff86}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x9}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x2}]}, 0x80}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) 1.024884689s ago: executing program 4 (id=2566): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000880)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) (async) bind$bt_hci(r0, &(0x7f0000000880)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) recvmmsg(r0, &(0x7f0000001c80)=[{{0x0, 0xffffff7c, &(0x7f0000000440), 0x0, 0x0, 0xfffffeaa}, 0x8000}, {{&(0x7f0000000000)=@nl, 0x0, &(0x7f0000001b40)=[{&(0x7f0000000a80)=""/4096}, {&(0x7f0000001a80)=""/162}], 0x0, &(0x7f0000001b80)=""/242}, 0x10001}], 0x1, 0x40002142, 0x0) pipe(&(0x7f0000000440)) recvmmsg(r0, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0}, 0x5}], 0x40001af, 0x12122, 0x0) 768.6936ms ago: executing program 2 (id=2567): r0 = socket(0x10, 0x803, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000540)={'dummy0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0x10, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x100, 0x0, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@getqdisc={0x24, 0x26, 0x1, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x3}, {0x3, 0xb}, {0xa, 0x6}}}, 0x24}, 0x1, 0x0, 0x0, 0x24008061}, 0x4048000) unshare(0x6a040000) r4 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r4, 0x114, 0x8, &(0x7f00000008c0), 0x4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a03020002000000000000020000000900020073797a30000000000900010073797a30000000002c00038008000140000000000800024000000000180003801400010073797a5f74756e00000000000000000014000000110001"], 0x80}}, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000b40)={@local, @random="6a2ddcf6177a", @val={@void, {0x8100, 0x0, 0x0, 0x4}}, {@ipv4={0x8864, @dccp={{0x5, 0x4, 0x0, 0x12, 0x28, 0x64, 0x57, 0x10, 0x21, 0x0, @multicast2, @multicast1}, {{0x4e21, 0x4e23, 0x4, 0x1, 0x3, 0x0, 0x0, 0x1, 0x2, "091000", 0x3f, "4ff2f3"}, "7dbfe016"}}}}}, 0x0) close(r4) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="b4000000000000007911b000f200000006000000000000009500000c000000001cb7874e742ab841c9f849716d491c954f9dd1a5ff74e5cc8f168bc44a34b77e0041f329574a51"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x48) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000008c0)=@newtfilter={0x5c, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0x3}, {}, {0x4, 0xfff3}}, [@filter_kind_options=@f_u32={{0x8}, {0x30, 0x2, [@TCA_U32_CLASSID={0x8, 0x1, {0x0, 0x4}}, @TCA_U32_SEL={0x24, 0x5, {0xc, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0x3, 0x58f, [{0xebd, 0x1, 0x206, 0x7}]}}]}}]}, 0x5c}}, 0x24040084) 747.28973ms ago: executing program 3 (id=2568): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000400)={0x34, 0x0, 0x8, 0x401, 0x0, 0x0, {}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @icmpv6}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}]}, 0x34}}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r1, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)={&(0x7f0000000e80)={0x14, 0x1, 0x8, 0x301}, 0x14}}, 0x0) (async) recvmmsg(r1, &(0x7f00000020c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) (async) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000000)={0x0, 0x5}, &(0x7f0000000040)=0x8) (async) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x4, 0x4000010, r0, 0x824ec000) (async) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000180)={0xe, 0x7, 0x1, 0xf, 0x6, 0x4b, 0x7f, 0x5, 0x2, 0x0, 0x7, 0x72, 0xff, 0xd}, 0xe) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000080)={r2, @in6={{0xa, 0x4e23, 0x7, @remote, 0x40}}, 0x5, 0x6, 0x7, 0x0, 0x8, 0x9, 0xf1}, 0x9c) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[], 0x32600) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) r5 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$SEG6_CMD_SETHMAC(r4, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x14, r5, 0x300, 0x70bd2a, 0x25dfdbfd}, 0x14}}, 0x20004000) (async) r6 = socket(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f0000000000), 0x4000000000001f2, 0x0) (async) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r6, 0x84, 0x78, &(0x7f0000000140)=r2, 0x4) 579.503904ms ago: executing program 0 (id=2569): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3800000056000100000000000000000007"], 0x38}}, 0x0) connect$vsock_stream(r0, &(0x7f0000000000)={0x28, 0x0, 0x2710, @local}, 0x10) syz_emit_ethernet(0x4e, &(0x7f0000000340)={@random="cd1242bdc9ea", @empty, @void, {@ipv4={0x800, @icmp={{0x9, 0x4, 0x0, 0x0, 0x40, 0x4, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010102, @broadcast, {[@noop, @ra={0x94, 0x4, 0x1}, @ra={0x94, 0x4}, @ra={0x94, 0x4}]}}, @dest_unreach={0x3, 0x8, 0x0, 0x0, 0x6, 0x7f43, {0x5, 0x4, 0x3, 0x5, 0xfff, 0x65, 0xb9f9, 0xf5, 0x29, 0x8, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x4}}}}}}}, 0x0) 525.643046ms ago: executing program 3 (id=2570): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) close(0x3) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0x806000) r3 = socket$packet(0x11, 0x2, 0x300) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180200000700003b0000000000800000850000007500000095"], 0x0, 0x1000, 0x0, 0x0, 0x0, 0x2}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000180)=r5, 0x4) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2400000070000100000000000000000007000000", @ANYRES32=r7, @ANYBLOB="0c00028006"], 0x24}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r11, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r11, {0xffff}, {0xffff, 0xffff}, {0x2, 0xa}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000005c0)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r1, &(0x7f0000000700)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000006c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="c0000000", @ANYRES16=0x0, @ANYBLOB="020025bd7000fbdbdf25020000001c00018008000100", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="4800018008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="080003000200000008000300030000000800030001000000140002006e69637666300000000000000000000008000300030000004800018008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r7, @ANYBLOB="08000300020000001400020069703667726530000000000000000000080003000100000008000100", @ANYRES32=r11, @ANYBLOB="08000100", @ANYRES32=r12, @ANYBLOB], 0xc0}, 0x1, 0x0, 0x0, 0x20004005}, 0x10) socket$inet6_sctp(0xa, 0x801, 0x84) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r13, 0x0, 0x4) ioctl$FS_IOC_RESVSP(r2, 0x40305829, &(0x7f0000000380)={0x0, 0x0, 0x4000, 0x9ffffc}) r14 = socket(0x10, 0x2, 0x0) write(r14, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) recvmmsg(r14, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22052, r0, 0x0) 404.180588ms ago: executing program 0 (id=2571): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={0x0, 0xb0}, 0x1, 0x0, 0x0, 0x40001}, 0x0) (async, rerun: 64) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) (rerun: 64) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, 0x0, &(0x7f0000000040)) syz_emit_ethernet(0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffa214892ec08586dd61bcc1d700006cff1948547e0000000000000000000000bb"], 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) (async, rerun: 64) socket$inet_tcp(0x2, 0x1, 0x0) (async, rerun: 64) r2 = accept4$inet(0xffffffffffffffff, &(0x7f00000002c0)={0x2, 0x0, @private}, &(0x7f0000000300)=0x10, 0x0) (async) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r3, &(0x7f00000002c0)={0x1f, 0x0, @any, 0xfff8}, 0xe) connect$bt_l2cap(r3, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) (async) connect$bt_l2cap(r3, &(0x7f0000000040)={0x1f, 0x0, @any, 0x5, 0x1}, 0xe) (async, rerun: 32) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x41, 0x3, 0x200, 0x120, 0x0, 0x0, 0x120, 0x0, 0x1f0, 0x1f0, 0x1f0, 0x1f0, 0x1f0, 0x3, 0x0, {[{{@ip={@dev={0xac, 0x14, 0x14, 0x25}, @dev={0xac, 0x14, 0x14, 0x24}, 0x0, 0xff, 'macvlan1\x00', 'wg1\x00', {}, {}, 0x6, 0x3}, 0x0, 0x70, 0x98, 0x0, {0x0, 0xffffffffa0028000}}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0xf, 0x2, 0x8}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @remote, 0x8, 0xd, [0x2b, 0x10, 0x14, 0x19, 0x2c, 0x8, 0xe, 0x3e, 0x8, 0xc, 0x16, 0x29, 0xc81f, 0xd, 0x39, 0x1b], 0x0, 0x8, 0x40003}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x260) (rerun: 32) 225.17506ms ago: executing program 0 (id=2572): socket$inet_tcp(0x2, 0x1, 0x0) socket$kcm(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1b, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e00"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x3, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffbb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20004015}, 0x2404c8c0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0xe, 0x20000000000000bb, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb714000008"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xe, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x41100, 0x3a, '\x00', 0x0, @sk_skb=0x26, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0xa, 0x1, 0x5, 0x1ffff}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a600000000000000500000014000500200100000000000000000300000000001c00090008000000", @ANYRES32=r0], 0x4c}}, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'erspan0\x00', 0x0}) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f00000004c0)={r3, 0x3, 0x6, @broadcast}, 0x10) r4 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000140)={0x34, r4, 0x1, 0x70bd27, 0x5, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'wlan0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x0) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000240)={r3, 0x3, 0x6, @local}, 0x10) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f00000001c0)={r3, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r6 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001180)={0x11, 0xd, &(0x7f0000000080)=ANY=[@ANYBLOB="1802000000000000000000000000000085100000010000009500000000000000200000000001000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000002885000000c700000095"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0xac, &(0x7f0000001240)=""/172, 0x40f00, 0x4b}, 0x94) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_int(r7, &(0x7f0000000080)='hugetlb.1GB.rsvd.limit_in_bytes\x00', 0x2, 0x0) openat$cgroup_ro(r7, &(0x7f00000004c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r8, &(0x7f00000004c0)=ANY=[], 0x8) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000001000010025bd7000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="3a2906000300000008001b0000000000260016925bc2c7f7e0baad35fe2a1f270ce0a2401232ff0cad621512e701118b161c54e59eafe1023a8539141b4873098bb8e0a648f4f80e5d703177619b72b73c26be8b15cc293d88bbdd5a2d6a16833fd68ad49dd662d5575568b873af92f85531042617"], 0x28}, 0x1, 0x0, 0x0, 0x40845}, 0x4000000) 0s ago: executing program 1 (id=2573): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="18ce3c0000000000000000009500"/24], 0x0, 0x0, 0x0, 0x0, 0x1e00, 0x68, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x1c, 0x1402, 0x1, 0x70bd2a, 0x25dfdc02, "", [@RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x1d, 'syz2\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000801}, 0x40810) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=@newlink={0x5c, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x11d15}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x4}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_BROADCAST={0xa, 0x2, @remote}, @IFLA_ADDRESS={0xa, 0x1, @random="baeead4459ac"}]}, 0x5c}, 0x1, 0x0, 0x0, 0x28001}, 0x8000) epoll_create1(0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x1, 0x8c4b815a546142b8, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): nset [1, 0] type 2 family 0 port 6081 - 0 [ 632.757806][T10001] netlink: 'syz.1.1023': attribute type 1 has an invalid length. [ 632.804189][T10001] 8021q: adding VLAN 0 to HW filter on device bond4 [ 632.843579][T10005] bridge0: port 2(bridge_slave_1) entered disabled state [ 632.850885][T10005] bridge0: port 1(bridge_slave_0) entered disabled state [ 632.865288][T10005] bridge0: port 2(bridge_slave_1) entered blocking state [ 632.872628][T10005] bridge0: port 2(bridge_slave_1) entered forwarding state [ 632.880187][T10005] bridge0: port 1(bridge_slave_0) entered blocking state [ 632.887370][T10005] bridge0: port 1(bridge_slave_0) entered forwarding state [ 632.923969][T10005] bond4: (slave bridge0): Enslaving as a backup interface with an up link [ 632.933026][ T5712] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 632.977743][ T5712] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 633.011344][ T5712] bond4: (slave bridge0): link status up again after 0 ms [ 633.042724][ T5712] bond4: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 633.067804][ T81] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 633.092379][ T5712] bond4: (slave bridge0): link status up again after 0 ms [ 633.120613][ T81] bond4: (slave bridge0): link status up again after 0 ms [ 633.149337][ T6247] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 633.162287][ T81] bond4: (slave bridge0): link status up again after 0 ms [ 633.195143][ T81] bond4: (slave bridge0): failed to get link speed/duplex [ 633.204540][T10016] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1026'. [ 633.239528][ T81] bond4: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 633.254496][T10016] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1026'. [ 633.335801][T10016] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1026'. [ 633.351745][T10016] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1026'. [ 633.374189][ T5712] bond4: (slave bridge0): failed to get link speed/duplex [ 633.714797][T10043] : renamed from bond0 (while UP) [ 633.765243][T10048] netlink: 'syz.4.1034': attribute type 2 has an invalid length. [ 633.789440][T10047] netlink: 'syz.4.1034': attribute type 2 has an invalid length. [ 633.816035][T10043] team1: entered promiscuous mode [ 633.823725][T10043] team1: entered allmulticast mode [ 633.829263][T10043] 8021q: adding VLAN 0 to HW filter on device team1 [ 633.830882][T10048] netlink: 'syz.4.1034': attribute type 21 has an invalid length. [ 634.014252][T10062] netlink: 'syz.2.1039': attribute type 1 has an invalid length. [ 634.072594][T10062] 8021q: adding VLAN 0 to HW filter on device bond8 [ 634.128025][T10066] bond8: (slave ip6erspan1): making interface the new active one [ 634.154126][T10066] bond8: (slave ip6erspan1): Enslaving as an active interface with an up link [ 634.245634][T10078] __nla_validate_parse: 5 callbacks suppressed [ 634.245650][T10078] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1042'. [ 634.424562][T10084] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1045'. [ 634.655777][T10090] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1046'. [ 634.966129][T10099] netlink: 'syz.0.1049': attribute type 1 has an invalid length. [ 634.991306][T10100] netlink: 'syz.0.1049': attribute type 1 has an invalid length. [ 635.027401][T10105] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1051'. [ 635.103680][T10100] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1049'. [ 635.132955][T10106] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address [ 635.184674][T10111] netlink: 112 bytes leftover after parsing attributes in process `syz.3.1052'. [ 635.185858][T10106] bond4: (slave vxcan3): Error -95 calling set_mac_address [ 635.329254][T10100] bond4: (slave bridge6): Enslaving as an active interface with a down link [ 635.377444][T10111] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1052'. [ 635.386587][T10118] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1053'. [ 635.540040][ T5701] Bluetooth: hci4: command 0x0405 tx timeout [ 635.783456][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 636.124247][T10115] netlink: 5 bytes leftover after parsing attributes in process `syz.3.1052'. [ 636.128738][T10129] xt_CT: You must specify a L4 protocol and not use inversions on it [ 636.150090][T10115] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1052'. [ 636.219494][T10131] erspan0: entered promiscuous mode [ 636.237169][T10135] netlink: 'syz.4.1059': attribute type 10 has an invalid length. [ 636.258272][T10131] vlan2: entered promiscuous mode [ 636.356371][ T8648] net_ratelimit: 15 callbacks suppressed [ 636.356461][ T8648] bond4: (slave bridge0): failed to get link speed/duplex [ 636.510082][ T8648] bond4: (slave bridge0): failed to get link speed/duplex [ 636.643494][ T5712] bond4: (slave bridge0): failed to get link speed/duplex [ 636.780054][ T8648] bond4: (slave bridge0): failed to get link speed/duplex [ 636.910015][ T6247] bond4: (slave bridge0): failed to get link speed/duplex [ 637.030009][ T1172] bond4: (slave bridge0): failed to get link speed/duplex [ 637.160764][ T8648] bond4: (slave bridge0): failed to get link speed/duplex [ 637.200877][T10172] 5: entered promiscuous mode [ 637.218550][T10172] openvswitch: netlink: Message has 4 unknown bytes. [ 637.228391][T10174] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 637.250141][T10172] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 637.313813][ T5712] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 637.336260][ T5712] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 637.375059][ T5712] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 637.414751][ T5712] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 637.507372][T10181] bridge0: port 2(bridge_slave_1) entered disabled state [ 637.517269][T10181] bridge0: port 1(bridge_slave_0) entered disabled state [ 638.458404][T10193] syzkaller0: entered promiscuous mode [ 638.469173][T10193] syzkaller0: entered allmulticast mode [ 638.498831][T10207] FAULT_INJECTION: forcing a failure. [ 638.498831][T10207] name failslab, interval 1, probability 0, space 0, times 0 [ 638.535568][T10207] CPU: 0 UID: 0 PID: 10207 Comm: syz.3.1079 Not tainted syzkaller #0 PREEMPT(full) [ 638.535591][T10207] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 638.535600][T10207] Call Trace: [ 638.535607][T10207] [ 638.535615][T10207] dump_stack_lvl+0xe8/0x150 [ 638.535642][T10207] should_fail_ex+0x412/0x560 [ 638.535669][T10207] should_failslab+0xa8/0x100 [ 638.535694][T10207] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 638.535716][T10207] ? __alloc_skb+0x1d0/0x7d0 [ 638.535738][T10207] ? __local_bh_enable_ip+0xd0/0x130 [ 638.535784][T10207] __alloc_skb+0x1d0/0x7d0 [ 638.535809][T10207] nldev_stat_set_doit+0x403/0x920 [ 638.535842][T10207] ? __pfx_nldev_stat_set_doit+0x10/0x10 [ 638.535862][T10207] ? __lock_acquire+0x6b5/0x2cf0 [ 638.535971][T10207] ? apparmor_capable+0x126/0x170 [ 638.535990][T10207] ? bpf_lsm_capable+0x9/0x20 [ 638.536005][T10207] ? security_capable+0x7e/0x2c0 [ 638.536028][T10207] ? __pfx_nldev_stat_set_doit+0x10/0x10 [ 638.536049][T10207] rdma_nl_rcv+0x6d1/0xa10 [ 638.536081][T10207] ? __pfx_rdma_nl_rcv+0x10/0x10 [ 638.536122][T10207] ? netlink_deliver_tap+0x2e/0x1b0 [ 638.536138][T10207] ? netlink_deliver_tap+0x2e/0x1b0 [ 638.536159][T10207] netlink_unicast+0x75c/0x8e0 [ 638.536192][T10207] netlink_sendmsg+0x813/0xb40 [ 638.536218][T10207] ? __pfx_netlink_sendmsg+0x10/0x10 [ 638.536237][T10207] ? aa_sock_msg_perm+0xf1/0x1b0 [ 638.536258][T10207] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 638.536282][T10207] ____sys_sendmsg+0x972/0x9f0 [ 638.536298][T10207] ? __might_fault+0xaf/0x130 [ 638.536331][T10207] ? __pfx_____sys_sendmsg+0x10/0x10 [ 638.536356][T10207] ? import_iovec+0x73/0xa0 [ 638.536381][T10207] ___sys_sendmsg+0x2a5/0x360 [ 638.536396][T10207] ? __lock_acquire+0x6b5/0x2cf0 [ 638.536416][T10207] ? __pfx____sys_sendmsg+0x10/0x10 [ 638.536467][T10207] ? __fget_files+0x2a/0x420 [ 638.536485][T10207] ? __fget_files+0x3a0/0x420 [ 638.536513][T10207] __x64_sys_sendmsg+0x1bd/0x2a0 [ 638.536531][T10207] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 638.536559][T10207] ? __pfx_ksys_write+0x10/0x10 [ 638.536589][T10207] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 638.536605][T10207] do_syscall_64+0x15f/0xf80 [ 638.536628][T10207] ? trace_irq_disable+0x3b/0x140 [ 638.536650][T10207] ? clear_bhb_loop+0x40/0x90 [ 638.536669][T10207] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 638.536684][T10207] RIP: 0033:0x7f685f79ce59 [ 638.536700][T10207] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 638.536712][T10207] RSP: 002b:00007f68606f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 638.536729][T10207] RAX: ffffffffffffffda RBX: 00007f685fa15fa0 RCX: 00007f685f79ce59 [ 638.536740][T10207] RDX: 0000000004004080 RSI: 0000200000000280 RDI: 0000000000000003 [ 638.536755][T10207] RBP: 00007f68606f6090 R08: 0000000000000000 R09: 0000000000000000 [ 638.536764][T10207] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 638.536773][T10207] R13: 00007f685fa16038 R14: 00007f685fa15fa0 R15: 00007ffe6ca74b28 [ 638.536800][T10207] [ 638.851068][T10210] netlink: 'syz.0.1080': attribute type 7 has an invalid length. [ 638.860367][T10210] netlink: 'syz.0.1080': attribute type 8 has an invalid length. [ 639.153782][T10218] netlink: 'syz.1.1083': attribute type 10 has an invalid length. [ 639.277130][T10226] __nla_validate_parse: 12 callbacks suppressed [ 639.277147][T10226] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1083'. [ 641.219351][T10251] tipc: Enabled bearer , priority 10 [ 641.371519][ T12] net_ratelimit: 8 callbacks suppressed [ 641.371537][ T12] bond4: (slave bridge0): failed to get link speed/duplex [ 641.490646][ T12] bond4: (slave bridge0): failed to get link speed/duplex [ 641.557349][T10270] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1092'. [ 641.595199][T10270] tipc: Started in network mode [ 641.621021][T10270] tipc: Node identity _, cluster identity 4711 [ 641.642859][T10270] tipc: Enabling of bearer rejected, failed to enable media [ 641.670130][ T6247] bond4: (slave bridge0): failed to get link speed/duplex [ 641.711180][ T5693] Bluetooth: hci2: command 0x0406 tx timeout [ 641.717272][ T5702] Bluetooth: hci3: command 0x0401 tx timeout [ 641.723639][ T5689] Bluetooth: hci1: command 0x0406 tx timeout [ 641.799995][ T6247] bond4: (slave bridge0): failed to get link speed/duplex [ 641.951828][ T5712] bond4: (slave bridge0): failed to get link speed/duplex [ 641.998636][T10290] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1098'. [ 642.022525][T10290] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1098'. [ 642.086794][T10290] netlink: 'syz.2.1098': attribute type 12 has an invalid length. [ 642.106635][T10290] netlink: 'syz.2.1098': attribute type 11 has an invalid length. [ 642.162591][ T12] bond4: (slave bridge0): failed to get link speed/duplex [ 642.223254][ T5878] tipc: Node number set to 308778390 [ 642.300027][ T12] bond4: (slave bridge0): failed to get link speed/duplex [ 642.323726][T10305] tipc: Cannot configure node identity twice [ 642.414165][T10317] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1106'. [ 642.496920][T10324] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1104'. [ 642.549667][T10305] 8021q: adding VLAN 0 to HW filter on device bond5 [ 642.549725][T10318] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1106'. [ 642.628562][T10317] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 642.684474][T10317] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 642.738305][T10317] bond0 (unregistering): Released all slaves [ 642.851382][ T6247] bond4: (slave bridge0): failed to get link speed/duplex [ 642.907580][T10348] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.1109'. [ 642.980543][ T5712] bond4: (slave bridge0): failed to get link speed/duplex [ 643.099213][T10356] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1110'. [ 643.120110][ T1172] bond4: (slave bridge0): failed to get link speed/duplex [ 643.635099][T10379] lo speed is unknown, defaulting to 1000 [ 644.158466][T10405] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1123'. [ 644.389212][T10419] IPVS: set_ctl: invalid protocol: 24940 95.105.100.120:8242 [ 644.412336][T10419] IPVS: set_ctl: invalid protocol: 12626 102.112.48.10:28001 [ 644.584643][T10428] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1125'. [ 644.666687][T10431] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1126'. [ 644.713603][T10431] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1126'. [ 644.733760][T10431] netlink: 260 bytes leftover after parsing attributes in process `syz.2.1126'. [ 644.765096][T10446] netlink: 'syz.4.1127': attribute type 12 has an invalid length. [ 645.103010][T10452] tipc: Enabling not permitted [ 645.119687][T10452] tipc: Enabling of bearer rejected, failed to enable media [ 645.152854][T10443] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1127'. [ 645.174653][T10446] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1127'. [ 645.598180][T10477] netlink: 'syz.3.1134': attribute type 4 has an invalid length. [ 645.682513][T10480] batadv_slave_1: entered promiscuous mode [ 645.704283][T10479] batadv_slave_1: left promiscuous mode [ 645.777647][T10485] syzkaller0: entered promiscuous mode [ 645.784300][T10485] syzkaller0: entered allmulticast mode [ 645.809988][T10489] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1136'. [ 645.865884][T10486] bond4: option arp_validate: mode dependency failed, not supported in mode 802.3ad(4) [ 645.878722][T10486] bond4 (unregistering): Released all slaves [ 645.911543][T10496] bridge_slave_0: default FDB implementation only supports local addresses [ 646.201020][T10510] lo speed is unknown, defaulting to 1000 [ 646.289666][T10474] Bluetooth: hci2: Opcode 0x0401 failed: -4 [ 646.380225][ T12] net_ratelimit: 21 callbacks suppressed [ 646.380243][ T12] bond4: (slave bridge0): failed to get link speed/duplex [ 646.501273][T10527] netlink: 'syz.3.1147': attribute type 4 has an invalid length. [ 646.550663][ T12] bond4: (slave bridge0): failed to get link speed/duplex [ 646.645700][T10530] xt_CONNSECMARK: invalid mode: 0 [ 646.669553][T10530] netlink: 'syz.2.1145': attribute type 1 has an invalid length. [ 646.870520][ T1172] bond4: (slave bridge0): failed to get link speed/duplex [ 646.882257][T10543] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1150'. [ 646.958771][T10550] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1150'. [ 647.064080][T10553] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1154'. [ 647.450821][ T156] bond4: (slave bridge0): failed to get link speed/duplex [ 647.579996][ T156] bond4: (slave bridge0): failed to get link speed/duplex [ 647.630173][ T5701] Bluetooth: hci2: command 0x0406 tx timeout [ 647.721844][ T156] bond4: (slave bridge0): failed to get link speed/duplex [ 647.857318][T10579] netlink: 'syz.2.1159': attribute type 4 has an invalid length. [ 647.865410][ T156] bond4: (slave bridge0): failed to get link speed/duplex [ 647.993554][ T5712] bond4: (slave bridge0): failed to get link speed/duplex [ 648.140110][ T6247] bond4: (slave bridge0): failed to get link speed/duplex [ 648.290100][ T6247] bond4: (slave bridge0): failed to get link speed/duplex [ 648.329471][T10597] netlink: 'syz.0.1163': attribute type 9 has an invalid length. [ 648.409739][ T156] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 648.435939][ T156] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 648.445414][ T156] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 648.468072][ T156] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 648.630573][T10615] smc: ib device syz0 ibport 1 applied user defined pnetid SYZ2 [ 649.576860][T10654] hsr0: entered promiscuous mode [ 649.642503][T10651] __nla_validate_parse: 4 callbacks suppressed [ 649.642522][T10651] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1180'. [ 649.835975][T10659] syz_tun: entered promiscuous mode [ 649.858165][T10659] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1183'. [ 649.885406][T10659] syz_tun: left promiscuous mode [ 650.505304][T10687] syzkaller0: entered promiscuous mode [ 650.516970][T10687] syzkaller0: entered allmulticast mode [ 650.560416][T10688] netlink: 'syz.4.1190': attribute type 4 has an invalid length. [ 650.593842][T10689] netlink: 'syz.4.1190': attribute type 4 has an invalid length. [ 650.815176][T10693] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1192'. [ 650.879780][T10700] netlink: 100 bytes leftover after parsing attributes in process `syz.2.1195'. [ 651.026501][T10702] lo speed is unknown, defaulting to 1000 [ 651.140168][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 652.119748][T10752] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1206'. [ 652.498935][T10758] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1206'. [ 653.621310][ T81] net_ratelimit: 27 callbacks suppressed [ 653.621328][ T81] bond4: (slave bridge0): failed to get link speed/duplex [ 653.752711][T10770] bond9: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 653.767206][T10770] bond9 (unregistering): Released all slaves [ 653.980302][ T12] bond4: (slave bridge0): failed to get link speed/duplex [ 654.110005][ T156] bond4: (slave bridge0): failed to get link speed/duplex [ 654.231578][T10802] xt_TPROXY: Can be used only with -p tcp or -p udp [ 654.270247][ T156] bond4: (slave bridge0): failed to get link speed/duplex [ 654.390240][ T1172] bond4: (slave bridge0): failed to get link speed/duplex [ 654.544471][T10816] netlink: 'syz.0.1222': attribute type 11 has an invalid length. [ 654.555281][T10816] netlink: 199828 bytes leftover after parsing attributes in process `syz.0.1222'. [ 654.564626][ T6247] bond4: (slave bridge0): failed to get link speed/duplex [ 654.701433][ T156] bond4: (slave bridge0): failed to get link speed/duplex [ 654.727005][T10826] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1223'. [ 654.742146][T10826] hsr0: entered allmulticast mode [ 654.747669][T10826] hsr_slave_0: entered allmulticast mode [ 654.753873][T10826] hsr_slave_1: entered allmulticast mode [ 654.763211][T10825] hsr0: left allmulticast mode [ 654.768122][T10825] hsr_slave_0: left allmulticast mode [ 654.775213][T10825] hsr_slave_1: left allmulticast mode [ 654.821637][ T156] bond4: (slave bridge0): failed to get link speed/duplex [ 654.960021][ T1172] bond4: (slave bridge0): failed to get link speed/duplex [ 655.100600][ T12] bond4: (slave bridge0): failed to get link speed/duplex [ 655.645097][T10872] IPVS: sync thread started: state = BACKUP, mcast_ifn = bridge0, syncid = 1, id = 0 [ 655.689341][T10867] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1235'. [ 655.712398][T10867] netlink: 'syz.0.1235': attribute type 7 has an invalid length. [ 655.729003][T10867] netlink: 'syz.0.1235': attribute type 8 has an invalid length. [ 655.741173][T10867] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1235'. [ 655.785174][T10876] netlink: 'syz.2.1237': attribute type 5 has an invalid length. [ 656.205503][T10900] FAULT_INJECTION: forcing a failure. [ 656.205503][T10900] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 656.225209][T10900] CPU: 0 UID: 0 PID: 10900 Comm: syz.0.1244 Not tainted syzkaller #0 PREEMPT(full) [ 656.225231][T10900] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 656.225241][T10900] Call Trace: [ 656.225247][T10900] [ 656.225254][T10900] dump_stack_lvl+0xe8/0x150 [ 656.225280][T10900] should_fail_ex+0x412/0x560 [ 656.225306][T10900] _copy_from_iter+0x1d3/0x1670 [ 656.225339][T10900] ? rcu_is_watching+0x15/0xb0 [ 656.225365][T10900] ? __pfx__copy_from_iter+0x10/0x10 [ 656.225393][T10900] ? netlink_sendmsg+0x650/0xb40 [ 656.225409][T10900] ? skb_put+0x11b/0x210 [ 656.225434][T10900] netlink_sendmsg+0x6c0/0xb40 [ 656.225458][T10900] ? __pfx_netlink_sendmsg+0x10/0x10 [ 656.225477][T10900] ? aa_sock_msg_perm+0xf1/0x1b0 [ 656.225499][T10900] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 656.225524][T10900] ____sys_sendmsg+0x972/0x9f0 [ 656.225539][T10900] ? __might_fault+0xaf/0x130 [ 656.225567][T10900] ? __pfx_____sys_sendmsg+0x10/0x10 [ 656.225591][T10900] ? import_iovec+0x73/0xa0 [ 656.225616][T10900] ___sys_sendmsg+0x2a5/0x360 [ 656.225630][T10900] ? __lock_acquire+0x6b5/0x2cf0 [ 656.225651][T10900] ? __pfx____sys_sendmsg+0x10/0x10 [ 656.225698][T10900] ? __fget_files+0x2a/0x420 [ 656.225717][T10900] ? __fget_files+0x3a0/0x420 [ 656.225743][T10900] __x64_sys_sendmsg+0x1bd/0x2a0 [ 656.225761][T10900] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 656.225787][T10900] ? __pfx_ksys_write+0x10/0x10 [ 656.225815][T10900] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 656.225833][T10900] do_syscall_64+0x15f/0xf80 [ 656.225855][T10900] ? trace_irq_disable+0x3b/0x140 [ 656.225878][T10900] ? clear_bhb_loop+0x40/0x90 [ 656.225897][T10900] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 656.225912][T10900] RIP: 0033:0x7f4ed359ce59 [ 656.225928][T10900] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 656.225940][T10900] RSP: 002b:00007f4ed4393028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 656.225957][T10900] RAX: ffffffffffffffda RBX: 00007f4ed3815fa0 RCX: 00007f4ed359ce59 [ 656.225967][T10900] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 656.225977][T10900] RBP: 00007f4ed4393090 R08: 0000000000000000 R09: 0000000000000000 [ 656.225986][T10900] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 656.225995][T10900] R13: 00007f4ed3816038 R14: 00007f4ed3815fa0 R15: 00007ffdc49b2728 [ 656.226022][T10900] [ 656.255534][T10902] syzkaller0: entered promiscuous mode [ 656.477300][T10902] syzkaller0: entered allmulticast mode [ 656.484983][T10905] tipc: Enabled bearer , priority 0 [ 656.505032][T10901] tipc: Resetting bearer [ 656.520332][T10904] netlink: 'syz.0.1246': attribute type 4 has an invalid length. [ 656.588903][T10901] tipc: Disabling bearer [ 656.595322][T10906] netlink: 'syz.0.1246': attribute type 4 has an invalid length. [ 656.634750][T10914] netlink: 'syz.4.1248': attribute type 1 has an invalid length. [ 656.643033][T10914] netlink: 'syz.4.1248': attribute type 2 has an invalid length. [ 656.887775][T10926] syzkaller0: entered promiscuous mode [ 656.927050][T10926] syzkaller0: entered allmulticast mode [ 657.186875][T10952] lo speed is unknown, defaulting to 1000 [ 657.322422][T10960] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1261'. [ 657.515277][T10974] netlink: 'syz.2.1264': attribute type 1 has an invalid length. [ 657.679196][T10986] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1268'. [ 657.799135][T10991] netlink: 'syz.2.1269': attribute type 1 has an invalid length. [ 657.954195][T10991] 8021q: adding VLAN 0 to HW filter on device bond9 [ 657.972695][T10992] macvlan2: entered promiscuous mode [ 657.978036][T10992] macvlan2: entered allmulticast mode [ 657.985354][T10992] bond9: entered allmulticast mode [ 657.991065][T10992] bond9: entered promiscuous mode [ 657.996892][T10992] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 658.006145][T10992] team0: Port device macvlan2 added [ 658.018869][T11001] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1271'. [ 658.047847][T11001] netlink: 'syz.0.1271': attribute type 20 has an invalid length. [ 658.085565][T10993] bond9: (slave ip6gretap0): making interface the new active one [ 658.093516][T10993] ip6gretap0: entered promiscuous mode [ 658.099258][T10993] ip6gretap0: entered allmulticast mode [ 658.108333][T10993] bond9: (slave ip6gretap0): Enslaving as an active interface with an up link [ 658.615223][T11028] pimreg: tun_chr_ioctl cmd 1074025677 [ 658.626171][T11028] pimreg: linktype set to 823 [ 658.660154][ T1172] net_ratelimit: 23 callbacks suppressed [ 658.660224][ T1172] bond4: (slave bridge0): failed to get link speed/duplex [ 658.763495][T11037] FAULT_INJECTION: forcing a failure. [ 658.763495][T11037] name failslab, interval 1, probability 0, space 0, times 0 [ 658.777695][T11037] CPU: 0 UID: 0 PID: 11037 Comm: syz.0.1280 Not tainted syzkaller #0 PREEMPT(full) [ 658.777721][T11037] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 658.777731][T11037] Call Trace: [ 658.777738][T11037] [ 658.777745][T11037] dump_stack_lvl+0xe8/0x150 [ 658.777769][T11037] should_fail_ex+0x412/0x560 [ 658.777800][T11037] should_failslab+0xa8/0x100 [ 658.777845][T11037] ? skb_clone+0x212/0x3a0 [ 658.777862][T11037] kmem_cache_alloc_noprof+0x87/0x650 [ 658.777881][T11037] ? apparmor_capable+0x126/0x170 [ 658.777903][T11037] skb_clone+0x212/0x3a0 [ 658.777917][T11037] ? nfnetlink_rcv+0x4b0/0x27b0 [ 658.777942][T11037] nfnetlink_rcv+0x4de/0x27b0 [ 658.777973][T11037] ? lockdep_hardirqs_on+0x7a/0x110 [ 658.777996][T11037] ? __local_bh_enable_ip+0xd0/0x130 [ 658.778012][T11037] ? __dev_queue_xmit+0x2b6/0x3950 [ 658.778029][T11037] ? __dev_queue_xmit+0x1fe5/0x3950 [ 658.778044][T11037] ? __x64_sys_sendmsg+0x1bd/0x2a0 [ 658.778066][T11037] ? __dev_queue_xmit+0x2b6/0x3950 [ 658.778085][T11037] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 658.778120][T11037] ? ref_tracker_free+0x693/0x840 [ 658.778143][T11037] ? __pfx_ref_tracker_free+0x10/0x10 [ 658.778177][T11037] ? skb_clone+0x246/0x3a0 [ 658.778195][T11037] ? __netlink_deliver_tap+0x807/0x850 [ 658.778211][T11037] ? netlink_deliver_tap+0x2e/0x1b0 [ 658.778232][T11037] ? netlink_deliver_tap+0x2e/0x1b0 [ 658.778247][T11037] ? netlink_deliver_tap+0x2e/0x1b0 [ 658.778267][T11037] netlink_unicast+0x75c/0x8e0 [ 658.778298][T11037] netlink_sendmsg+0x813/0xb40 [ 658.778322][T11037] ? __pfx_netlink_sendmsg+0x10/0x10 [ 658.778340][T11037] ? aa_sock_msg_perm+0xf1/0x1b0 [ 658.778362][T11037] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 658.778385][T11037] ____sys_sendmsg+0x972/0x9f0 [ 658.778400][T11037] ? __might_fault+0xaf/0x130 [ 658.778425][T11037] ? __pfx_____sys_sendmsg+0x10/0x10 [ 658.778448][T11037] ? import_iovec+0x73/0xa0 [ 658.778472][T11037] ___sys_sendmsg+0x2a5/0x360 [ 658.778486][T11037] ? __lock_acquire+0x6b5/0x2cf0 [ 658.778507][T11037] ? __pfx____sys_sendmsg+0x10/0x10 [ 658.778553][T11037] ? __fget_files+0x2a/0x420 [ 658.778571][T11037] ? __fget_files+0x3a0/0x420 [ 658.778597][T11037] __x64_sys_sendmsg+0x1bd/0x2a0 [ 658.778615][T11037] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 658.778640][T11037] ? __pfx_ksys_write+0x10/0x10 [ 658.778667][T11037] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 658.778684][T11037] do_syscall_64+0x15f/0xf80 [ 658.778703][T11037] ? trace_irq_disable+0x3b/0x140 [ 658.778725][T11037] ? clear_bhb_loop+0x40/0x90 [ 658.778744][T11037] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 658.778760][T11037] RIP: 0033:0x7f4ed359ce59 [ 658.778775][T11037] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 658.778786][T11037] RSP: 002b:00007f4ed4393028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 658.778803][T11037] RAX: ffffffffffffffda RBX: 00007f4ed3815fa0 RCX: 00007f4ed359ce59 [ 658.778820][T11037] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 658.778830][T11037] RBP: 00007f4ed4393090 R08: 0000000000000000 R09: 0000000000000000 [ 658.778840][T11037] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 658.778848][T11037] R13: 00007f4ed3816038 R14: 00007f4ed3815fa0 R15: 00007ffdc49b2728 [ 658.778873][T11037] [ 658.778948][T11026] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0 [ 658.790011][ T156] bond4: (slave bridge0): failed to get link speed/duplex [ 659.240455][ T156] bond4: (slave bridge0): failed to get link speed/duplex [ 659.362200][ T1172] bond4: (slave bridge0): failed to get link speed/duplex [ 659.436421][T11064] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1286'. [ 659.534231][ T81] bond4: (slave bridge0): failed to get link speed/duplex [ 659.670099][ T81] bond4: (slave bridge0): failed to get link speed/duplex [ 659.803229][ T156] bond4: (slave bridge0): failed to get link speed/duplex [ 659.856458][T11094] netlink: 212368 bytes leftover after parsing attributes in process `syz.0.1295'. [ 659.888136][T11091] xt_hl: Unknown TTL match mode: 237 [ 659.915550][T11090] 8021q: adding VLAN 0 to HW filter on device bond5 [ 659.924140][T11091] bond5: entered promiscuous mode [ 659.934333][T11091] bond5: entered allmulticast mode [ 659.961519][ T1172] bond4: (slave bridge0): failed to get link speed/duplex [ 660.090761][ T81] bond4: (slave bridge0): failed to get link speed/duplex [ 660.116886][T11108] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1299'. [ 660.210285][ T1172] bond4: (slave bridge0): failed to get link speed/duplex [ 660.336489][T11124] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1304'. [ 660.488826][T11131] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1307'. [ 660.529795][T11133] nbd: must specify at least one socket [ 660.784671][T11145] xt_policy: output policy not valid in PREROUTING and INPUT [ 660.854140][T11147] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1312'. [ 660.881978][T11150] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1313'. [ 660.907297][T11147] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1312'. [ 660.907881][T11145] lo speed is unknown, defaulting to 1000 [ 661.168299][T11167] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1317'. [ 661.284173][T11173] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1318'. [ 661.290022][T11171] validate_nla: 12 callbacks suppressed [ 661.290039][T11171] netlink: 'syz.1.1319': attribute type 1 has an invalid length. [ 661.388982][T11176] netlink: 'syz.2.1320': attribute type 4 has an invalid length. [ 661.407447][T11176] netlink: 'syz.2.1320': attribute type 4 has an invalid length. [ 661.487755][T11178] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1321'. [ 661.873734][T11192] netlink: 'syz.2.1326': attribute type 1 has an invalid length. [ 662.323652][T11218] netlink: 'syz.1.1335': attribute type 1 has an invalid length. [ 662.334473][T11218] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 663.262662][T11246] netlink: 'syz.3.1342': attribute type 1 has an invalid length. [ 663.423513][T11255] netlink: 'syz.2.1343': attribute type 5 has an invalid length. [ 663.616349][T11261] veth0_to_bridge: entered promiscuous mode [ 663.641256][T11261] veth0_to_bridge: entered allmulticast mode [ 663.691654][ T156] net_ratelimit: 19 callbacks suppressed [ 663.691673][ T156] bond4: (slave bridge0): failed to get link speed/duplex [ 663.810102][ T81] bond4: (slave bridge0): failed to get link speed/duplex [ 663.920701][ T81] bond4: (slave bridge0): failed to get link speed/duplex [ 664.030186][ T8648] bond4: (slave bridge0): failed to get link speed/duplex [ 664.160060][ T8648] bond4: (slave bridge0): failed to get link speed/duplex [ 664.270015][ T5712] bond4: (slave bridge0): failed to get link speed/duplex [ 664.380070][ T5712] bond4: (slave bridge0): failed to get link speed/duplex [ 664.490372][ T8648] bond4: (slave bridge0): failed to get link speed/duplex [ 664.699990][ T5712] bond4: (slave bridge0): failed to get link speed/duplex [ 664.815358][T11303] bridge0: port 3(vlan0) entered blocking state [ 664.829672][T11303] bridge0: port 3(vlan0) entered disabled state [ 664.836789][T11303] vlan0: entered allmulticast mode [ 664.842077][ T8648] bond4: (slave bridge0): link status up again after 0 ms [ 664.862314][T11303] geneve0: entered allmulticast mode [ 664.877511][T11303] vlan0: entered promiscuous mode [ 664.885629][T11303] geneve0: entered promiscuous mode [ 665.021968][T11312] __nla_validate_parse: 10 callbacks suppressed [ 665.021986][T11312] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.1359'. [ 665.754051][T11357] netlink: 'syz.0.1372': attribute type 1 has an invalid length. [ 665.781322][T11357] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1372'. [ 666.053371][T11378] tipc: New replicast peer: 0.0.0.0 [ 666.059068][T11378] tipc: Enabled bearer , priority 10 [ 666.067591][T11378] tipc: New replicast peer: 224.0.0.1 [ 666.121641][T11380] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1378'. [ 666.582889][T11399] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1385'. [ 666.770390][T11413] netlink: 'syz.2.1387': attribute type 1 has an invalid length. [ 666.785853][T11413] netlink: 'syz.2.1387': attribute type 2 has an invalid length. [ 666.804772][T11413] netlink: 'syz.2.1387': attribute type 1 has an invalid length. [ 666.826083][T11413] netlink: 'syz.2.1387': attribute type 3 has an invalid length. [ 666.842201][T11413] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1387'. [ 666.915701][T11419] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1389'. [ 666.954672][T11419] bridge0: port 2(bridge_slave_1) entered disabled state [ 666.963230][T11419] bridge0: port 1(bridge_slave_0) entered disabled state [ 667.051769][ T5654] tipc: Node number set to 1593835523 [ 667.470027][T11451] syzkaller1: entered promiscuous mode [ 667.475933][T11451] syzkaller1: entered allmulticast mode [ 667.923823][T11477] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1404'. [ 668.339016][T11509] tipc: Enabling of bearer rejected, failed to enable media [ 668.447392][T11512] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1414'. [ 668.799361][T11539] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1417'. [ 668.866676][T11539] bond0: option primary_reselect: invalid value (133) [ 668.877731][T11539] bond0 (unregistering): Released all slaves [ 669.136543][T11558] netlink: 'syz.0.1424': attribute type 1 has an invalid length. [ 669.165497][T11560] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1423'. [ 669.225914][T11562] bond7: (slave vxcan3): The slave device specified does not support setting the MAC address [ 669.247820][T11562] bond7: (slave vxcan3): Error -95 calling set_mac_address [ 669.320340][T11558] bond7: (slave gretap2): making interface the new active one [ 669.331354][T11558] bond7: (slave gretap2): Enslaving as an active interface with an up link [ 669.346714][T11566] macvlan3: entered promiscuous mode [ 669.357411][T11566] macvlan3: entered allmulticast mode [ 669.364297][T11566] bond7: entered promiscuous mode [ 669.369444][T11566] gretap2: entered promiscuous mode [ 669.376145][T11566] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 669.388750][T11566] bond7: (slave macvlan3): the slave hw address is in use by the bond; giving it the hw address of gretap2 [ 669.408576][T11566] bond7: left promiscuous mode [ 669.415109][T11566] gretap2: left promiscuous mode [ 669.612035][T11574] ieee802154 phy0 wpan0: encryption failed: -22 [ 669.876842][T11590] net_ratelimit: 19 callbacks suppressed [ 669.876873][T11590] openvswitch: netlink: Port -1 exceeds max allowable 65535 [ 669.989030][T11597] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 670.000951][T11591] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 670.084658][T11609] netlink: 7064 bytes leftover after parsing attributes in process `syz.2.1433'. [ 670.151692][T11609] openvswitch: netlink: Missing key (keys=40, expected=100) [ 670.159264][T11612] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1435'. [ 670.197233][T11612] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1435'. [ 670.514723][T11626] batadv0: left promiscuous mode [ 670.540541][T11626] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 670.584994][T11626] veth0_to_bond: left allmulticast mode [ 670.617308][T11626] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 670.678669][T11635] xt_bpf: check failed: parse error [ 670.686606][T11635] netlink: 'syz.0.1440': attribute type 9 has an invalid length. [ 670.812954][T11638] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.1441'. [ 671.061184][T11645] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1442'. [ 671.256604][T11650] tipc: Enabled bearer , priority 0 [ 671.448556][T11656] netlink: 'syz.2.1445': attribute type 1 has an invalid length. [ 671.456973][T11651] syzkaller0: entered promiscuous mode [ 671.470989][T11651] syzkaller0: entered allmulticast mode [ 671.478151][T11651] tipc: Resetting bearer [ 671.493061][T11659] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 671.532733][T11659] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1446'. [ 671.546421][T11656] workqueue: Failed to create a rescuer kthread for wq "bond10": -EINTR [ 671.556634][T11646] tipc: Resetting bearer [ 671.636758][T11666] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1448'. [ 673.735012][T11646] tipc: Disabling bearer [ 673.805374][T11683] netlink: 'syz.4.1452': attribute type 1 has an invalid length. [ 673.862230][T11686] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1452'. [ 673.933845][T11683] bond4: entered promiscuous mode [ 673.939456][T11683] 8021q: adding VLAN 0 to HW filter on device bond4 [ 673.948983][T11686] bond4: entered allmulticast mode [ 674.057009][T11683] bond4: (slave bridge4): making interface the new active one [ 674.069317][T11683] bridge4: entered promiscuous mode [ 674.075274][T11683] bridge4: entered allmulticast mode [ 674.083667][T11683] bond4: (slave bridge4): Enslaving as an active interface with an up link [ 674.083839][T11703] netlink: 'syz.2.1457': attribute type 4 has an invalid length. [ 674.119108][T11697] netlink: 1319 bytes leftover after parsing attributes in process `syz.1.1455'. [ 674.187312][T11703] netlink: 'syz.2.1457': attribute type 4 has an invalid length. [ 674.263987][T11705] block nbd1: server does not support multiple connections per device. [ 674.316958][T11705] block nbd1: shutting down sockets [ 674.812047][T11736] netlink: 45 bytes leftover after parsing attributes in process `syz.4.1467'. [ 674.832510][T11736] Bluetooth: MGMT ver 1.23 [ 674.898128][T11739] IPVS: Error connecting to the multicast addr [ 674.992335][T11744] netlink: 'syz.2.1468': attribute type 1 has an invalid length. [ 675.007797][T11752] netlink: 'syz.4.1470': attribute type 13 has an invalid length. [ 675.101428][T11752] gretap0: refused to change device tx_queue_len [ 675.108220][T11752] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 675.149300][T11757] veth0_to_team: entered promiscuous mode [ 675.223598][T11751] bond10: (slave bridge5): making interface the new active one [ 675.244178][T11751] bond10: (slave bridge5): Enslaving as an active interface with an up link [ 675.263538][T11765] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 675.294836][T11765] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1474'. [ 675.474502][T11779] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1478'. [ 675.561250][T11785] netlink: 'syz.4.1480': attribute type 27 has an invalid length. [ 675.621575][T11789] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 675.658470][T11789] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 675.733323][T11789] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1481'. [ 676.033610][ T5701] Bluetooth: hci4: link tx timeout [ 676.045537][ T5701] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 676.548012][T11835] netlink: 'syz.1.1492': attribute type 4 has an invalid length. [ 676.580538][T11835] netlink: 'syz.1.1492': attribute type 4 has an invalid length. [ 676.592334][T11806] xt_hashlimit: size too large, truncated to 1048576 [ 677.080658][T11858] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1498'. [ 677.166682][T11859] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 677.436740][T11835] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 677.497397][T11835] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 678.112052][ T5705] Bluetooth: hci4: command 0x0405 tx timeout [ 678.324147][T11874] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1499'. [ 678.361997][T11874] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1499'. [ 678.405058][ T12] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 678.438577][ T12] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 678.448882][ T12] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 678.458379][ T12] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 678.472120][T11876] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1499'. [ 678.492799][T11876] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1499'. [ 678.531456][T11890] netlink: 'syz.1.1503': attribute type 10 has an invalid length. [ 678.548052][T11890] netlink: 228 bytes leftover after parsing attributes in process `syz.1.1503'. [ 678.610006][ T12] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 678.639140][ T12] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 678.657833][T11894] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1503'. [ 678.679544][ T12] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 678.702920][ T12] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 681.706324][T11987] __nla_validate_parse: 3 callbacks suppressed [ 681.706344][T11987] netlink: 212360 bytes leftover after parsing attributes in process `syz.3.1516'. [ 682.112755][T11910] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 682.338645][T11974] veth0_to_team: left promiscuous mode [ 682.835807][T11974] netdevsim netdevsim0 netdevsim0: left allmulticast mode [ 683.201430][ T8650] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 683.235290][ T8650] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 683.310314][ T8650] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 683.354643][ T8650] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 683.383462][ T8650] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 683.423822][ T8650] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 683.507257][ T8650] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 683.547717][ T8650] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 683.600061][T12042] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1526'. [ 684.238902][T12074] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1533'. [ 684.319973][T12076] syzkaller0: entered promiscuous mode [ 684.339425][T12076] syzkaller0: entered allmulticast mode [ 684.533648][T12084] lo speed is unknown, defaulting to 1000 [ 684.576491][T12095] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1537'. [ 685.158282][T12114] syzkaller0: entered promiscuous mode [ 685.183571][T12114] syzkaller0: entered allmulticast mode [ 685.228941][T12132] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1543'. [ 685.238298][T12132] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1543'. [ 685.264422][T12116] IPVS: Scheduler module ip_vs_sip not found [ 685.274397][T12132] RDS: rds_bind could not find a transport for ::ffff:8.1.1.0, load rds_tcp or rds_rdma? [ 685.573986][T12143] tipc: MTU too low for tipc bearer [ 685.703863][ T1314] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 685.712530][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.720483][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 687.924734][T12183] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1549'. [ 688.099663][ T29] audit: type=1804 audit(1778996123.779:8): pid=12200 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1551" name="/newroot/327/cgroup.controllers" dev="tmpfs" ino=1693 res=1 errno=0 [ 688.192363][ T29] audit: type=1800 audit(1778996123.779:9): pid=12200 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1551" name="cgroup.controllers" dev="tmpfs" ino=1693 res=0 errno=0 [ 688.285067][ T29] audit: type=1804 audit(1778996123.779:10): pid=12200 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.1551" name="/newroot/327/cgroup.controllers" dev="tmpfs" ino=1693 res=1 errno=0 [ 688.513075][T12227] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1561'. [ 688.525775][T12223] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1560'. [ 688.549710][T12223] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1560'. [ 688.567099][T12223] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1560'. [ 688.742319][T12231] netlink: 644 bytes leftover after parsing attributes in process `syz.4.1562'. [ 688.858829][T12253] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1567'. [ 689.204526][T12269] netlink: 'syz.1.1572': attribute type 1 has an invalid length. [ 689.317578][T12277] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1573'. [ 689.361610][T12277] netlink: 'syz.0.1573': attribute type 30 has an invalid length. [ 689.474987][T12277] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1573'. [ 689.477312][ T1172] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 689.535180][T12277] netlink: 'syz.0.1573': attribute type 30 has an invalid length. [ 689.557767][ T1172] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 689.586559][ T1172] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 689.683782][ T1172] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 689.754585][T12302] netlink: 'syz.4.1579': attribute type 13 has an invalid length. [ 689.757320][T12303] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1578'. [ 689.831892][T12306] netlink: 'syz.3.1580': attribute type 1 has an invalid length. [ 689.882617][T12306] netlink: 'syz.3.1580': attribute type 2 has an invalid length. [ 691.240960][T12369] lo: Caught tx_queue_len zero misconfig [ 691.333904][T12372] netlink: zone id is out of range [ 691.357496][T12372] netlink: zone id is out of range [ 691.389791][T12372] netlink: zone id is out of range [ 691.404382][T12372] netlink: zone id is out of range [ 691.409564][T12372] netlink: zone id is out of range [ 691.416029][T12372] netlink: zone id is out of range [ 691.423118][T12372] netlink: zone id is out of range [ 691.428504][T12372] netlink: zone id is out of range [ 691.434914][T12372] netlink: zone id is out of range [ 691.440611][T12372] netlink: zone id is out of range [ 691.664368][T12380] netlink: 'syz.4.1601': attribute type 58 has an invalid length. [ 691.664587][T12384] netlink: 'syz.0.1602': attribute type 41 has an invalid length. [ 691.839302][T12389] netlink: 'syz.1.1604': attribute type 1 has an invalid length. [ 691.905539][T12389] 8021q: adding VLAN 0 to HW filter on device bond8 [ 691.920880][T12389] bond8: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 691.932832][T12389] bond8: entered promiscuous mode [ 691.937986][T12389] bond8: entered allmulticast mode [ 692.005182][T12397] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 692.938625][T12439] RDS: rds_bind could not find a transport for 2001::, load rds_tcp or rds_rdma? [ 692.969783][T12440] RDS: rds_bind could not find a transport for 2001::, load rds_tcp or rds_rdma? [ 693.025573][T12443] netlink: 'syz.0.1617': attribute type 1 has an invalid length. [ 693.064624][T12443] __nla_validate_parse: 5 callbacks suppressed [ 693.064641][T12443] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1617'. [ 693.286932][T12453] syzkaller0: entered promiscuous mode [ 693.314709][T12453] syzkaller0: entered allmulticast mode [ 693.769439][T12475] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1628'. [ 694.100569][T12490] lo speed is unknown, defaulting to 1000 [ 694.273819][T12494] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1633'. [ 696.558967][T12519] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1642'. [ 696.703779][T12533] netlink: 'syz.2.1646': attribute type 1 has an invalid length. [ 696.728620][T12534] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1644'. [ 696.793931][T12529] IPVS: set_ctl: invalid protocol: 60 172.20.20.187:20001 [ 696.902901][T12544] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1642'. [ 696.932336][T12522] net_ratelimit: 390 callbacks suppressed [ 696.932355][T12522] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 696.962098][T12544] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1642'. [ 696.982798][T12545] netlink: 'syz.2.1646': attribute type 1 has an invalid length. [ 696.983296][T12544] netlink: 31 bytes leftover after parsing attributes in process `syz.3.1642'. [ 697.022283][T12544] netlink: 'syz.3.1642': attribute type 3 has an invalid length. [ 697.039456][T12544] netlink: 'syz.3.1642': attribute type 2 has an invalid length. [ 697.093962][T12544] netlink: 31 bytes leftover after parsing attributes in process `syz.3.1642'. [ 697.121390][T12519] 8021q: adding VLAN 0 to HW filter on device bond0 [ 697.151968][T12544] netlink: 'syz.3.1642': attribute type 2 has an invalid length. [ 697.166134][T12530] bond0: entered promiscuous mode [ 697.176122][T12530] bond0: entered allmulticast mode [ 697.195227][T12530] 8021q: adding VLAN 0 to HW filter on device bond0 [ 697.217950][T12530] team0: Port device bond0 added [ 697.277900][T12535] team_slave_1: entered promiscuous mode [ 697.316588][T12535] team_slave_1: entered allmulticast mode [ 697.339385][T12535] bond0: (slave team_slave_1): Enslaving as an active interface with an up link [ 697.449078][T12537] bond11: (slave geneve3): making interface the new active one [ 697.480711][T12537] bond11: (slave geneve3): Enslaving as an active interface with an up link [ 697.622727][T12540] tipc: Resetting bearer [ 697.746857][ T1172] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 20000 - 0 [ 697.767874][ T1172] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 20000 - 0 [ 697.804624][ T1172] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 20000 - 0 [ 697.829250][ T1172] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 20000 - 0 [ 697.978805][T12583] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1651'. [ 698.027917][T12587] netlink: 'syz.1.1653': attribute type 10 has an invalid length. [ 698.075521][T12587] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1653'. [ 698.202084][T12596] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 698.273985][T12600] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 698.584751][T12610] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1659'. [ 698.869705][T12618] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 699.001344][T12635] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1666'. [ 699.019753][ T156] tipc: Subscription rejected, illegal request [ 699.052491][T12631] netlink: 'syz.0.1665': attribute type 11 has an invalid length. [ 699.092921][T12637] ip6tnl1: left promiscuous mode [ 699.103766][T12637] bond5: left promiscuous mode [ 699.108654][T12637] bond5: left allmulticast mode [ 699.123389][T12640] netlink: 'syz.3.1667': attribute type 1 has an invalid length. [ 699.131283][T12637] bond8: left promiscuous mode [ 699.131306][T12637] bond8: left allmulticast mode [ 699.142538][T12640] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1667'. [ 699.299516][T12647] netlink: 'syz.0.1669': attribute type 1 has an invalid length. [ 699.350876][T12647] bond8: entered promiscuous mode [ 699.364225][T12647] 8021q: adding VLAN 0 to HW filter on device bond8 [ 699.405553][T12647] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1669'. [ 699.555985][T12658] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1674'. [ 699.583407][T12658] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1674'. [ 699.594076][T12662] netlink: 'syz.0.1672': attribute type 15 has an invalid length. [ 699.651540][ T5710] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 699.708083][ T5710] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 699.740541][ T5710] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 699.764091][ T5710] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 699.879327][T12676] netlink: 148 bytes leftover after parsing attributes in process `syz.0.1677'. [ 700.062870][T12679] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 700.364498][T12697] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1684'. [ 700.401970][T12697] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1684'. [ 700.421411][T12697] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 700.614241][T12708] tap0: tun_chr_ioctl cmd 1074025677 [ 700.630796][T12708] tap0: linktype set to 6 [ 700.971941][T12717] lo speed is unknown, defaulting to 1000 [ 701.157211][T12723] tipc: Enabling of bearer rejected, already enabled [ 701.684901][T12718] lo speed is unknown, defaulting to 1000 [ 702.502961][T12752] x_tables: duplicate underflow at hook 1 [ 703.723004][T12778] __nla_validate_parse: 5 callbacks suppressed [ 703.723043][T12778] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1707'. [ 703.899308][T12784] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1709'. [ 703.963252][T12784] syzkaller1: entered promiscuous mode [ 703.984568][T12784] syzkaller1: entered allmulticast mode [ 704.447541][T12798] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1713'. [ 704.913853][T12822] hsr0: entered promiscuous mode [ 704.956521][T12822] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1720'. [ 705.210912][T12832] netlink: 'syz.3.1723': attribute type 39 has an invalid length. [ 705.494790][T12843] IPv6: Can't replace route, no match found [ 705.662711][T12851] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1728'. [ 705.692458][T12851] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1728'. [ 705.721298][T12851] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1728'. [ 705.757385][T12854] IPVS: set_ctl: invalid protocol: 0 10.1.1.0:20001 [ 705.779843][T12851] netlink: 'syz.3.1728': attribute type 19 has an invalid length. [ 705.817352][T12851] netlink: 'syz.3.1728': attribute type 20 has an invalid length. [ 705.983790][ T5710] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 705.991385][T12860] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1732'. [ 705.994472][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 706.009426][T12860] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1732'. [ 706.045677][T12860] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1732'. [ 706.096033][ T5710] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 706.105746][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 706.140119][ T1172] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 706.148418][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 706.175588][ T1172] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 706.188213][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 706.224203][T12867] netlink: 'syz.4.1733': attribute type 1 has an invalid length. [ 706.239538][ T6247] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 706.248147][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 706.814143][T12878] vlan2: entered promiscuous mode [ 706.826857][T12878] bridge0: entered promiscuous mode [ 706.859380][ T1172] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 706.916861][T12883] : entered promiscuous mode [ 706.927584][T12882] openvswitch: : Dropping previously announced user features [ 706.935231][ T1172] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 706.946341][ T1172] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 706.976046][ T1172] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 707.149675][T12910] bond0: entered promiscuous mode [ 707.173663][T12910] batadv0: entered promiscuous mode [ 707.212647][T12910] debugfs: 'hsr0' already exists in 'hsr' [ 707.233253][T12910] Cannot create hsr debugfs directory [ 707.258651][T12910] hsr0: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 707.273502][T12914] FAULT_INJECTION: forcing a failure. [ 707.273502][T12914] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 707.278710][T12910] 8021q: adding VLAN 0 to HW filter on device hsr0 [ 707.304859][T12914] CPU: 0 UID: 0 PID: 12914 Comm: syz.0.1744 Not tainted syzkaller #0 PREEMPT(full) [ 707.304881][T12914] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 707.304891][T12914] Call Trace: [ 707.304897][T12914] [ 707.304904][T12914] dump_stack_lvl+0xe8/0x150 [ 707.304927][T12914] should_fail_ex+0x412/0x560 [ 707.304951][T12914] _copy_from_user+0x2d/0xb0 [ 707.304973][T12914] ___sys_sendmsg+0x1c6/0x360 [ 707.304989][T12914] ? __lock_acquire+0x6b5/0x2cf0 [ 707.305010][T12914] ? __pfx____sys_sendmsg+0x10/0x10 [ 707.305055][T12914] ? __fget_files+0x2a/0x420 [ 707.305072][T12914] ? __fget_files+0x3a0/0x420 [ 707.305098][T12914] __x64_sys_sendmsg+0x1bd/0x2a0 [ 707.305116][T12914] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 707.305140][T12914] ? __pfx_ksys_write+0x10/0x10 [ 707.305178][T12914] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 707.305196][T12914] do_syscall_64+0x15f/0xf80 [ 707.305218][T12914] ? trace_irq_disable+0x3b/0x140 [ 707.305240][T12914] ? clear_bhb_loop+0x40/0x90 [ 707.305259][T12914] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 707.305274][T12914] RIP: 0033:0x7f4ed359ce59 [ 707.305289][T12914] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 707.305302][T12914] RSP: 002b:00007f4ed4393028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 707.305320][T12914] RAX: ffffffffffffffda RBX: 00007f4ed3815fa0 RCX: 00007f4ed359ce59 [ 707.305330][T12914] RDX: 0000000000040880 RSI: 0000200000000200 RDI: 0000000000000003 [ 707.305338][T12914] RBP: 00007f4ed4393090 R08: 0000000000000000 R09: 0000000000000000 [ 707.305347][T12914] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 707.305359][T12914] R13: 00007f4ed3816038 R14: 00007f4ed3815fa0 R15: 00007ffdc49b2728 [ 707.305384][T12914] [ 707.545046][T12921] netlink: 'syz.2.1748': attribute type 1 has an invalid length. [ 707.650278][T12925] netlink: 'syz.0.1747': attribute type 1 has an invalid length. [ 707.658118][T12925] netlink: 'syz.0.1747': attribute type 2 has an invalid length. [ 707.755737][T12921] 8021q: adding VLAN 0 to HW filter on device bond13 [ 707.789449][T12921] bond12: (slave bond13): making interface the new active one [ 707.834967][T12921] bond12: (slave bond13): Enslaving as an active interface with an up link [ 708.151772][T12949] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 708.280801][T12949] netlink: 'syz.2.1753': attribute type 5 has an invalid length. [ 708.364304][T12966] FAULT_INJECTION: forcing a failure. [ 708.364304][T12966] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 708.387085][T12966] CPU: 1 UID: 0 PID: 12966 Comm: syz.0.1757 Not tainted syzkaller #0 PREEMPT(full) [ 708.387108][T12966] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 708.387117][T12966] Call Trace: [ 708.387123][T12966] [ 708.387130][T12966] dump_stack_lvl+0xe8/0x150 [ 708.387155][T12966] should_fail_ex+0x412/0x560 [ 708.387181][T12966] _copy_from_user+0x2d/0xb0 [ 708.387204][T12966] __copy_msghdr+0x3c5/0x5b0 [ 708.387224][T12966] ___sys_sendmsg+0x213/0x360 [ 708.387238][T12966] ? __lock_acquire+0x6b5/0x2cf0 [ 708.387260][T12966] ? __pfx____sys_sendmsg+0x10/0x10 [ 708.387308][T12966] ? __fget_files+0x2a/0x420 [ 708.387326][T12966] ? __fget_files+0x3a0/0x420 [ 708.387353][T12966] __x64_sys_sendmsg+0x1bd/0x2a0 [ 708.387372][T12966] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 708.387395][T12966] ? __pfx_ksys_write+0x10/0x10 [ 708.387427][T12966] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 708.387444][T12966] do_syscall_64+0x15f/0xf80 [ 708.387465][T12966] ? trace_irq_disable+0x3b/0x140 [ 708.387488][T12966] ? clear_bhb_loop+0x40/0x90 [ 708.387508][T12966] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 708.387523][T12966] RIP: 0033:0x7f4ed359ce59 [ 708.387539][T12966] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 708.387566][T12966] RSP: 002b:00007f4ed4393028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 708.387583][T12966] RAX: ffffffffffffffda RBX: 00007f4ed3815fa0 RCX: 00007f4ed359ce59 [ 708.387594][T12966] RDX: 0000000000040880 RSI: 0000200000000200 RDI: 0000000000000003 [ 708.387604][T12966] RBP: 00007f4ed4393090 R08: 0000000000000000 R09: 0000000000000000 [ 708.387614][T12966] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 708.387623][T12966] R13: 00007f4ed3816038 R14: 00007f4ed3815fa0 R15: 00007ffdc49b2728 [ 708.387650][T12966] [ 708.885051][T12984] __nla_validate_parse: 190 callbacks suppressed [ 708.885068][T12984] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1762'. [ 708.919136][T12984] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1762'. [ 709.185386][T12996] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1768'. [ 709.196378][T12994] lo speed is unknown, defaulting to 1000 [ 709.205925][T12996] netlink: 4212 bytes leftover after parsing attributes in process `syz.0.1768'. [ 709.217511][T12994] lo speed is unknown, defaulting to 1000 [ 709.229375][T12996] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1768'. [ 709.236816][T12999] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1767'. [ 709.243022][T12994] lo speed is unknown, defaulting to 1000 [ 709.265822][T12994] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 709.280644][T12994] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 709.379399][T12994] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 709.468890][T12994] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 709.511432][T12994] lo speed is unknown, defaulting to 1000 [ 709.520563][T12994] lo speed is unknown, defaulting to 1000 [ 709.536175][T12994] lo speed is unknown, defaulting to 1000 [ 709.561543][T12994] lo speed is unknown, defaulting to 1000 [ 709.592880][T12994] lo speed is unknown, defaulting to 1000 [ 709.903235][T13029] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1775'. [ 710.167486][T13036] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1776'. [ 710.466075][T13055] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1780'. [ 710.528671][T13057] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1780'. [ 710.612590][T13055] IPVS: length: 24 != 12312 [ 711.746107][T13076] netlink: 'syz.2.1786': attribute type 46 has an invalid length. [ 712.404324][T13018] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 712.797837][T13099] netlink: 'syz.3.1792': attribute type 3 has an invalid length. [ 712.982230][T13105] lo speed is unknown, defaulting to 1000 [ 713.967157][T13105] lo speed is unknown, defaulting to 1000 [ 714.678319][T13154] : renamed from wg2 [ 715.238070][T13169] __nla_validate_parse: 3 callbacks suppressed [ 715.238087][T13169] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1813'. [ 715.658539][T13179] netlink: 'syz.3.1815': attribute type 16 has an invalid length. [ 715.683309][T13179] netlink: 'syz.3.1815': attribute type 17 has an invalid length. [ 716.301092][T13206] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1823'. [ 716.354320][T13209] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1825'. [ 716.605799][T13217] netlink: 'syz.0.1827': attribute type 1 has an invalid length. [ 716.648897][T13221] netlink: 'syz.1.1829': attribute type 9 has an invalid length. [ 716.798922][T13217] bond9: entered promiscuous mode [ 716.845911][T13217] bond9: entered allmulticast mode [ 716.864148][T13217] 8021q: adding VLAN 0 to HW filter on device bond9 [ 716.936155][T13238] netlink: 100 bytes leftover after parsing attributes in process `syz.3.1832'. [ 716.990771][T13238] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1832'. [ 717.012616][T13238] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1832'. [ 717.056414][T13227] erspan1: entered allmulticast mode [ 717.057379][T13243] net_ratelimit: 5 callbacks suppressed [ 717.057394][T13243] openvswitch: netlink: Actions may not be safe on all matching packets [ 717.083188][T13227] bond9: (slave erspan1): making interface the new active one [ 717.107721][T13227] erspan1: entered promiscuous mode [ 717.130916][T13227] bond9: (slave erspan1): Enslaving as an active interface with an up link [ 717.189586][T13234] syz.0.1827 (13234) used obsolete PPPIOCDETACH ioctl [ 717.511155][T13253] netlink: 'syz.1.1838': attribute type 2 has an invalid length. [ 717.666390][T13271] netlink: 'syz.2.1842': attribute type 25 has an invalid length. [ 717.694429][T13271] netlink: 'syz.2.1842': attribute type 3 has an invalid length. [ 717.707347][T13271] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1842'. [ 717.898260][T13281] netlink: 'syz.0.1845': attribute type 83 has an invalid length. [ 718.024594][T13290] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1846'. [ 718.059006][T13293] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 718.165512][T13296] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 718.270729][T13303] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1849'. [ 718.333957][T13306] tipc: Enabled bearer , priority 0 [ 718.343435][T13306] syzkaller0: entered promiscuous mode [ 718.349191][T13306] syzkaller0: entered allmulticast mode [ 718.368419][T13306] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1851'. [ 718.398568][T13296] lo speed is unknown, defaulting to 1000 [ 718.463213][T13305] tipc: Resetting bearer [ 718.512209][T13305] tipc: Disabling bearer [ 718.694489][T13316] netlink: 'syz.0.1855': attribute type 1 has an invalid length. [ 718.724102][T13316] 8021q: adding VLAN 0 to HW filter on device bond10 [ 718.731573][T13296] lo speed is unknown, defaulting to 1000 [ 718.749807][T13316] bond10: (slave gretap3): making interface the new active one [ 718.758578][T13316] bond10: (slave gretap3): Enslaving as an active interface with an up link [ 719.156745][T13333] sctp: [Deprecated]: syz.0.1859 (pid 13333) Use of int in max_burst socket option. [ 719.156745][T13333] Use struct sctp_assoc_value instead [ 719.851743][T13367] netlink: 'syz.2.1869': attribute type 27 has an invalid length. [ 719.890892][T13363] syzkaller1: entered promiscuous mode [ 719.921672][T13363] syzkaller1: entered allmulticast mode [ 720.139142][T13383] netlink: 'syz.3.1873': attribute type 2 has an invalid length. [ 720.256939][T13393] __nla_validate_parse: 7 callbacks suppressed [ 720.256955][T13393] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1874'. [ 720.302438][T13395] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1874'. [ 720.317763][ T29] audit: type=1800 audit(1778996155.999:11): pid=13387 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1872" name=20 dev="tmpfs" ino=1971 res=0 errno=0 [ 720.319607][T13395] nbd: must specify a size in bytes for the device [ 720.568875][T13415] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1880'. [ 720.619637][T13415] netlink: 34 bytes leftover after parsing attributes in process `syz.0.1880'. [ 720.649832][T13415] veth5: entered allmulticast mode [ 720.844348][T13423] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1882'. [ 721.133944][T13445] netlink: 'syz.3.1887': attribute type 10 has an invalid length. [ 721.157354][T13445] netlink: 41 bytes leftover after parsing attributes in process `syz.3.1887'. [ 721.179046][T13445] netlink: 140 bytes leftover after parsing attributes in process `syz.3.1887'. [ 721.209107][T13445] netlink: 41 bytes leftover after parsing attributes in process `syz.3.1887'. [ 721.256227][T13450] netlink: 'syz.2.1891': attribute type 3 has an invalid length. [ 721.389357][T13450] bridge0: port 1(bridge_slave_0) entered blocking state [ 721.396584][T13450] bridge0: port 1(bridge_slave_0) entered forwarding state [ 721.415791][T13450] veth0_to_bridge: left promiscuous mode [ 721.425633][T13450] veth0_to_bridge: left allmulticast mode [ 721.443181][T13450] xfrm0: left allmulticast mode [ 721.469824][T13450] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 721.496866][T13052] bridge0: port 2(bridge_slave_1) entered blocking state [ 721.504112][T13052] bridge0: port 2(bridge_slave_1) entered forwarding state [ 721.532893][T13464] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1896'. [ 721.682254][T13468] bond5: (slave lo): Releasing backup interface [ 721.693202][T13468] bond5: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 721.703992][T13468] bond14: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 721.727455][T13468] bond14: (slave lo): Enslaving as an active interface with an up link [ 721.737647][T13468] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 721.861684][T13484] openvswitch: netlink: Flow key attr not present in new flow. [ 722.035430][T13494] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1903'. [ 722.205222][T13496] netlink: 'syz.2.1904': attribute type 5 has an invalid length. [ 722.987267][T13539] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 723.161780][T13544] validate_nla: 1 callbacks suppressed [ 723.161806][T13544] netlink: 'syz.0.1914': attribute type 1 has an invalid length. [ 723.284460][T13555] sctp: [Deprecated]: syz.1.1917 (pid 13555) Use of struct sctp_assoc_value in delayed_ack socket option. [ 723.284460][T13555] Use struct sctp_sack_info instead [ 723.328549][T13554] bond12: (slave geneve3): making interface the new active one [ 723.337194][T13554] bond12: (slave geneve3): Enslaving as an active interface with an up link [ 723.368388][T13556] sctp: [Deprecated]: syz.1.1917 (pid 13556) Use of struct sctp_assoc_value in delayed_ack socket option. [ 723.368388][T13556] Use struct sctp_sack_info instead [ 723.449239][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 20000 - 0 [ 723.474161][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0 [ 723.507225][T13544] 8021q: adding VLAN 0 to HW filter on device bond12 [ 723.647438][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0 [ 723.674948][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0 [ 723.704499][T13559] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 723.759483][T13559] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 723.872987][T13559] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 723.913548][T13559] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 724.035701][T13582] vlan1: entered allmulticast mode [ 724.058003][T13559] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 724.100890][T13559] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 724.211784][T13582]  (unregistering): left promiscuous mode [ 724.230561][T13582]  (unregistering): Released all slaves [ 724.297520][T13589] team2: entered promiscuous mode [ 724.303609][T13589] team2: entered allmulticast mode [ 724.311275][T13589] 8021q: adding VLAN 0 to HW filter on device team2 [ 724.352477][T13594] team3: entered promiscuous mode [ 724.370390][T13594] team3: entered allmulticast mode [ 724.388764][T13594] 8021q: adding VLAN 0 to HW filter on device team3 [ 724.448121][T13598] bond0: Error: Cannot enslave bond to itself. [ 724.523737][T13559] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 724.534577][T13559] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 724.717790][T13052] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 724.740215][T13052] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 724.793224][T13619] batadv_slave_0: entered promiscuous mode [ 724.805329][ T5710] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 724.828305][ T5710] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 724.976342][T13626] bridge0: port 1(bridge_slave_0) entered disabled state [ 724.995155][T13626] bridge_slave_0 (unregistering): left allmulticast mode [ 725.004435][T13626] bridge_slave_0 (unregistering): left promiscuous mode [ 725.012119][T13626] bridge0: port 1(bridge_slave_0) entered disabled state [ 725.045339][ T5710] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 725.054193][ T5710] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 725.062875][T13618] batadv_slave_0: left promiscuous mode [ 725.090982][ T5710] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 725.115620][ T5710] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 725.241783][T13644] netlink: 'syz.2.1940': attribute type 21 has an invalid length. [ 725.507560][T13659] sctp: [Deprecated]: syz.0.1943 (pid 13659) Use of int in maxseg socket option. [ 725.507560][T13659] Use struct sctp_assoc_value instead [ 725.533665][T13661] netlink: 'syz.2.1944': attribute type 15 has an invalid length. [ 725.549774][T13661] __nla_validate_parse: 15 callbacks suppressed [ 725.549792][T13661] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1944'. [ 725.627121][ T5710] netdevsim netdevsim2 eth0: set [0, 1] type 1 family 0 port 2816 - 0 [ 725.645923][T13661] netlink: 'syz.2.1944': attribute type 15 has an invalid length. [ 725.657742][ T5710] netdevsim netdevsim2 eth1: set [0, 1] type 1 family 0 port 2816 - 0 [ 725.668425][T13665] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1945'. [ 725.677541][T13661] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1944'. [ 725.694523][ T5710] netdevsim netdevsim2 eth2: set [0, 1] type 1 family 0 port 2816 - 0 [ 725.711144][T13664] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1946'. [ 725.724031][ T5710] netdevsim netdevsim2 eth3: set [0, 1] type 1 family 0 port 2816 - 0 [ 725.881492][T13641] netlink: 'syz.3.1939': attribute type 1 has an invalid length. [ 726.075853][T13687] netlink: 108 bytes leftover after parsing attributes in process `syz.4.1951'. [ 726.191766][T13696] netlink: 244 bytes leftover after parsing attributes in process `syz.4.1954'. [ 726.230114][T13698] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1955'. [ 726.266528][T13696] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1954'. [ 726.344902][T13708] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1957'. [ 726.453308][T13715] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1959'. [ 727.373124][T13751] veth1_to_bond: entered allmulticast mode [ 727.388352][T13750] rdma_rxe: rxe_newlink: failed to add syzkaller0 [ 727.399665][T13751] veth1_to_bond (unregistering): left allmulticast mode [ 728.010996][T13778] netlink: 'syz.1.1980': attribute type 17 has an invalid length. [ 728.379804][T13794] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 728.620510][T13804] netlink: 'syz.1.1988': attribute type 11 has an invalid length. [ 729.170572][T13827] netlink: 'syz.0.1994': attribute type 12 has an invalid length. [ 729.382493][T13843] netlink: 'syz.1.2000': attribute type 11 has an invalid length. [ 729.597592][T13852] sock: sock_timestamping_bind_phc: sock not bind to device [ 729.640434][T13862] netlink: 'syz.2.2005': attribute type 8 has an invalid length. [ 729.658015][T13862] openvswitch: netlink: Invalid VLAN frame [ 730.124889][T13892] netlink: 'syz.3.2012': attribute type 11 has an invalid length. [ 730.169535][T13895] sctp: [Deprecated]: syz.2.2014 (pid 13895) Use of struct sctp_assoc_value in delayed_ack socket option. [ 730.169535][T13895] Use struct sctp_sack_info instead [ 730.337181][T13908] netlink: 'syz.2.2017': attribute type 3 has an invalid length. [ 730.553315][T13918] netlink: 'syz.2.2020': attribute type 12 has an invalid length. [ 730.653321][T13925] netlink: 'syz.3.2024': attribute type 4 has an invalid length. [ 730.689293][T13922] netlink: 'syz.1.2023': attribute type 11 has an invalid length. [ 730.697794][T13925] netlink: 'syz.3.2024': attribute type 4 has an invalid length. [ 730.716402][T13928] __nla_validate_parse: 22 callbacks suppressed [ 730.716418][T13928] netlink: 112 bytes leftover after parsing attributes in process `syz.4.2025'. [ 731.205088][T13956] netlink: zone id is out of range [ 731.205809][T13958] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2034'. [ 731.219676][T13956] netlink: zone id is out of range [ 731.235613][T13956] netlink: zone id is out of range [ 731.264501][T13956] netlink: zone id is out of range [ 731.286073][T13956] netlink: zone id is out of range [ 731.295338][T13961] netlink: zone id is out of range [ 731.313080][T13956] netlink: zone id is out of range [ 731.318361][T13956] netlink: zone id is out of range [ 731.800404][T13991] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2043'. [ 731.832671][T13990] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2044'. [ 731.948889][T13997] netlink: 14140 bytes leftover after parsing attributes in process `syz.1.2046'. [ 732.083401][T14002] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2048'. [ 732.095801][T13998] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2046'. [ 732.104246][T14002] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2048'. [ 732.564958][T14040] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2056'. [ 732.620097][T14042] netlink: 'syz.3.2057': attribute type 11 has an invalid length. [ 732.654631][T14042] netlink: 199828 bytes leftover after parsing attributes in process `syz.3.2057'. [ 732.790962][T14052] syzkaller0: entered promiscuous mode [ 732.796627][T14052] syzkaller0: entered allmulticast mode [ 733.136211][T14071] veth12: entered allmulticast mode [ 733.264715][T14075] netlink: 'syz.2.2067': attribute type 1 has an invalid length. [ 733.389016][T14073] bridge0: entered promiscuous mode [ 733.419728][T14073] 8021q: adding VLAN 0 to HW filter on device bond0 [ 733.471857][T14073] 8021q: adding VLAN 0 to HW filter on device team0 [ 733.524706][T14073] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 733.727339][T14093] netlink: 'syz.1.2071': attribute type 11 has an invalid length. [ 733.865919][T14095] dvmrp0: entered allmulticast mode [ 733.924119][T14103] netlink: 'syz.4.2074': attribute type 2 has an invalid length. [ 733.964355][T14103] netlink: 'syz.4.2074': attribute type 2 has an invalid length. [ 734.345747][T14128] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 734.383579][T14124] netlink: 'syz.1.2080': attribute type 4 has an invalid length. [ 734.595307][T14152] lo speed is unknown, defaulting to 1000 [ 734.635457][T14162] netlink: 'syz.3.2086': attribute type 11 has an invalid length. [ 734.871288][T14169] netlink: 'syz.1.2080': attribute type 1 has an invalid length. [ 735.053946][T14126] bond4: (slave bridge0): Removing an active aggregator [ 735.063329][T14126] bond4: (slave bridge0): Releasing backup interface [ 735.077628][T14126] net_ratelimit: 101 callbacks suppressed [ 735.077643][T14126] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 735.172018][T14152] lo speed is unknown, defaulting to 1000 [ 735.549165][T14185] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 735.597111][T14184] lo speed is unknown, defaulting to 1000 [ 735.637110][T14187] syzkaller0: entered promiscuous mode [ 735.645642][T14187] syzkaller0: entered allmulticast mode [ 735.805935][T14195] netlink: 'syz.0.2097': attribute type 1 has an invalid length. [ 735.883962][T14195] bond14: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 735.894898][T14183] lo speed is unknown, defaulting to 1000 [ 735.898313][T14184] lo speed is unknown, defaulting to 1000 [ 735.903541][T14195] netlink: 'syz.0.2097': attribute type 1 has an invalid length. [ 735.954986][T14195] gretap5: entered allmulticast mode [ 735.990568][T14197] __nla_validate_parse: 10 callbacks suppressed [ 735.990587][T14197] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2097'. [ 736.067619][T14197] 8021q: adding VLAN 0 to HW filter on device bond14 [ 736.076247][T14151] bond14: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 736.200027][T14151] bond14: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 736.503627][T14209] netlink: 'syz.0.2100': attribute type 11 has an invalid length. [ 736.550984][T14209] netlink: 199828 bytes leftover after parsing attributes in process `syz.0.2100'. [ 736.656721][T14183] lo speed is unknown, defaulting to 1000 [ 737.047771][T14225] syzkaller1: tun_chr_ioctl cmd 2147767506 [ 737.238616][T14227] lo speed is unknown, defaulting to 1000 [ 737.560716][T14240] netlink: 'syz.4.2108': attribute type 4 has an invalid length. [ 737.693724][T14246] IPVS: Error connecting to the multicast addr [ 737.983463][T14258] bridge0: port 1(veth0_virt_wifi) entered disabled state [ 738.037687][T14227] lo speed is unknown, defaulting to 1000 [ 738.192209][T14270] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2115'. [ 738.568339][T14285] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2121'. [ 738.652734][T14283] netlink: 'syz.3.2119': attribute type 1 has an invalid length. [ 738.732581][T14292] netlink: 'syz.4.2122': attribute type 3 has an invalid length. [ 738.763151][T14292] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2122'. [ 739.214904][T14304] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2124'. [ 739.265098][T14300] lo speed is unknown, defaulting to 1000 [ 739.272024][T14304] netlink: 'syz.4.2124': attribute type 25 has an invalid length. [ 739.280513][T14304] netlink: 'syz.4.2124': attribute type 3 has an invalid length. [ 739.288287][T14304] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2124'. [ 739.317028][T14304] netlink: 352 bytes leftover after parsing attributes in process `syz.4.2124'. [ 739.578114][T14311] syzkaller1: entered promiscuous mode [ 739.602199][T14311] syzkaller1: entered allmulticast mode [ 739.619642][T14311] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2128'. [ 739.670338][T14311] syzkaller1: left promiscuous mode [ 739.680015][T14311] syzkaller1: left allmulticast mode [ 739.700465][T14320] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 739.796069][T14300] lo speed is unknown, defaulting to 1000 [ 739.802640][T14323] syzkaller1: entered promiscuous mode [ 739.817891][T14323] syzkaller1: entered allmulticast mode [ 739.866601][T14330] netlink: 'syz.1.2134': attribute type 8 has an invalid length. [ 739.882707][T14330] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2134'. [ 739.945735][T14330] veth1_to_team: entered promiscuous mode [ 739.953003][T14330] gretap0: entered promiscuous mode [ 739.960107][T14330] veth1_to_team: left promiscuous mode [ 739.964738][ T5692] block nbd1: Receive control failed (result -32) [ 739.965699][ T5705] block nbd1: Receive control failed (result -32) [ 739.981446][T14330] gretap0: left promiscuous mode [ 740.128837][T14335] mac80211_hwsim hwsim6 syzkaller0: entered promiscuous mode [ 740.150508][T14335] mac80211_hwsim hwsim6 syzkaller0: entered allmulticast mode [ 740.159387][T14341] netlink: 'syz.3.2135': attribute type 1 has an invalid length. [ 740.743209][ T5705] Bluetooth: hci4: command 0x0405 tx timeout [ 741.002378][T14366] syzkaller0: entered promiscuous mode [ 741.022005][T14366] syzkaller0: entered allmulticast mode [ 741.127720][T14368] __nla_validate_parse: 5 callbacks suppressed [ 741.127737][T14368] netlink: 1244 bytes leftover after parsing attributes in process `syz.2.2147'. [ 741.275529][T14384] --map-set only usable from mangle table [ 741.285536][T14375] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2153'. [ 741.483210][T14399] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2156'. [ 741.495130][T14399] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2156'. [ 741.552930][T14404] netlink: 'syz.2.2157': attribute type 5 has an invalid length. [ 741.575376][T14404] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 741.658590][T14406] macsec2: entered promiscuous mode [ 742.092668][T14382] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 742.101886][T14394] netlink: 'syz.3.2155': attribute type 2 has an invalid length. [ 742.110810][T14394] netlink: 'syz.3.2155': attribute type 2 has an invalid length. [ 742.685110][T14454] netlink: 'syz.2.2169': attribute type 6 has an invalid length. [ 742.703399][T14454] IPv6: NLM_F_CREATE should be specified when creating new route [ 742.749777][T14456] netlink: 'syz.4.2168': attribute type 1 has an invalid length. [ 742.771737][T14456] netlink: 224 bytes leftover after parsing attributes in process `syz.4.2168'. [ 742.982620][T14473] netlink: 'syz.4.2174': attribute type 11 has an invalid length. [ 743.000265][T14473] netlink: 199828 bytes leftover after parsing attributes in process `syz.4.2174'. [ 743.037483][T14473] netlink: 244 bytes leftover after parsing attributes in process `syz.4.2174'. [ 743.803026][T14489] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2178'. [ 743.894047][T14493] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 744.026540][T14497] netlink: 'syz.4.2183': attribute type 1 has an invalid length. [ 744.038527][T14503] IPVS: set_ctl: invalid protocol: 135 255.255.255.255:20003 [ 744.097898][T14507] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2186'. [ 744.258252][T14520] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2190'. [ 744.762387][T14549] team_slave_1: entered promiscuous mode [ 745.083899][T14577] lo speed is unknown, defaulting to 1000 [ 745.334441][T14591] 8021q: adding VLAN 0 to HW filter on device bond5 [ 745.345632][T14591] bond5: option mode: unable to set because the bond device is up [ 745.481809][T14577] lo speed is unknown, defaulting to 1000 [ 745.527730][T14605] netlink: 'syz.1.2214': attribute type 11 has an invalid length. [ 745.689832][T14615] bond0: option arp_validate: invalid value (55553) [ 745.741934][T14618] netlink: 'syz.1.2219': attribute type 4 has an invalid length. [ 745.753226][T14618] netlink: 'syz.1.2219': attribute type 8 has an invalid length. [ 745.770039][T14618] netlink: 'syz.1.2219': attribute type 1 has an invalid length. [ 745.783319][T14618] NCSI netlink: No device for ifindex 0 [ 745.817737][T14619] netlink: 'syz.1.2219': attribute type 4 has an invalid length. [ 745.846103][T14619] netlink: 'syz.1.2219': attribute type 8 has an invalid length. [ 745.863864][T14619] netlink: 'syz.1.2219': attribute type 1 has an invalid length. [ 745.876676][T14619] NCSI netlink: No device for ifindex 0 [ 746.000305][T14618] bond9: Unable to set down delay as MII monitoring is disabled [ 746.032873][T14618] bond9 (unregistering): Released all slaves [ 746.232038][T14635] netlink: 'syz.1.2222': attribute type 1 has an invalid length. [ 746.294607][T14640] veth0_to_bond: default FDB implementation only supports local addresses [ 746.397924][T14647] netlink: 'syz.1.2224': attribute type 7 has an invalid length. [ 746.449790][T14647] __nla_validate_parse: 8 callbacks suppressed [ 746.449806][T14647] netlink: 148 bytes leftover after parsing attributes in process `syz.1.2224'. [ 746.534544][T14647] syzkaller1: entered promiscuous mode [ 746.553384][T14647] syzkaller1: entered allmulticast mode [ 746.843225][T14662] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2227'. [ 746.923755][T14663] netlink: 5 bytes leftover after parsing attributes in process `syz.2.2229'. [ 746.992869][T14673] sctp: [Deprecated]: syz.4.2231 (pid 14673) Use of struct sctp_assoc_value in delayed_ack socket option. [ 746.992869][T14673] Use struct sctp_sack_info instead [ 747.150051][ T1314] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 747.326111][T14700] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2236'. [ 747.337481][T14700] netlink: 'syz.2.2236': attribute type 1 has an invalid length. [ 747.360269][T14700] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2236'. [ 747.538043][T14718] netlink: 96 bytes leftover after parsing attributes in process `syz.2.2240'. [ 747.561222][T14718] netlink: 1 bytes leftover after parsing attributes in process `syz.2.2240'. [ 747.602156][T14718] netlink: 658 bytes leftover after parsing attributes in process `syz.2.2240'. [ 747.913403][T14741] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2244'. [ 747.932170][T14741] team0: Cannot enslave team device to itself [ 748.273983][T14749] openvswitch: netlink: Actions may not be safe on all matching packets [ 748.825692][T14792] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2258'. [ 748.858157][ T29] audit: type=1107 audit(1778996184.539:12): pid=14795 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='xJ J mUtMl`|s5' [ 748.976456][T14800] FAULT_INJECTION: forcing a failure. [ 748.976456][T14800] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 748.996791][T14800] CPU: 0 UID: 0 PID: 14800 Comm: syz.3.2260 Not tainted syzkaller #0 PREEMPT(full) [ 748.996814][T14800] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 748.996825][T14800] Call Trace: [ 748.996831][T14800] [ 748.996838][T14800] dump_stack_lvl+0xe8/0x150 [ 748.996864][T14800] should_fail_ex+0x412/0x560 [ 748.996899][T14800] _copy_to_user+0x31/0xb0 [ 748.996924][T14800] simple_read_from_buffer+0xe1/0x170 [ 748.996950][T14800] proc_fail_nth_read+0x1bb/0x230 [ 748.996974][T14800] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 748.996998][T14800] ? rw_verify_area+0x2a6/0x4d0 [ 748.997019][T14800] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 748.997040][T14800] vfs_read+0x20c/0xa70 [ 748.997066][T14800] ? __pfx___mutex_lock+0x10/0x10 [ 748.997083][T14800] ? __pfx_vfs_read+0x10/0x10 [ 748.997105][T14800] ? __fget_files+0x2a/0x420 [ 748.997127][T14800] ? __fget_files+0x3a0/0x420 [ 748.997144][T14800] ? __fget_files+0x2a/0x420 [ 748.997171][T14800] ksys_read+0x150/0x270 [ 748.997194][T14800] ? __pfx_ksys_read+0x10/0x10 [ 748.997222][T14800] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 748.997240][T14800] do_syscall_64+0x15f/0xf80 [ 748.997261][T14800] ? trace_irq_disable+0x3b/0x140 [ 748.997284][T14800] ? clear_bhb_loop+0x40/0x90 [ 748.997310][T14800] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 748.997326][T14800] RIP: 0033:0x7f685f75d68e [ 748.997342][T14800] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 748.997355][T14800] RSP: 002b:00007f68606f5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 748.997371][T14800] RAX: ffffffffffffffda RBX: 00007f68606f66c0 RCX: 00007f685f75d68e [ 748.997381][T14800] RDX: 000000000000000f RSI: 00007f68606f60a0 RDI: 0000000000000008 [ 748.997390][T14800] RBP: 00007f68606f6090 R08: 0000000000000000 R09: 0000000000000000 [ 748.997399][T14800] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 748.997408][T14800] R13: 00007f685fa16038 R14: 00007f685fa15fa0 R15: 00007ffe6ca74b28 [ 748.997436][T14800] [ 750.232853][T14856] team0 (unregistering): Port device vlan0 removed [ 750.394355][T14860] netlink: 'syz.4.2277': attribute type 11 has an invalid length. [ 751.795550][T14911] __nla_validate_parse: 9 callbacks suppressed [ 751.795562][T14911] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2290'. [ 753.638180][T14872] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 753.672323][T14913] netlink: 'syz.1.2291': attribute type 11 has an invalid length. [ 753.703345][T14913] netlink: 199828 bytes leftover after parsing attributes in process `syz.1.2291'. [ 753.856557][T14923] x_tables: duplicate underflow at hook 1 [ 753.875972][T14927] x_tables: duplicate underflow at hook 1 [ 753.882815][T14928] validate_nla: 7 callbacks suppressed [ 753.882830][T14928] netlink: 'syz.1.2296': attribute type 2 has an invalid length. [ 753.934196][T14928] netlink: 'syz.1.2296': attribute type 1 has an invalid length. [ 753.971571][T14928] netlink: 'syz.1.2296': attribute type 1 has an invalid length. [ 754.081129][T14942] IPVS: set_ctl: invalid protocol: 43 172.20.20.187:20001 [ 754.099644][T14943] IPVS: set_ctl: invalid protocol: 43 172.20.20.187:20001 [ 754.116630][T14942] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2299'. [ 754.139863][T14942] unsupported nla_type 216 [ 754.163486][T14943] netlink: zone id is out of range [ 754.163591][T14945] netlink: zone id is out of range [ 754.198618][T14945] netlink: zone id is out of range [ 754.222586][T14945] netlink: zone id is out of range [ 754.226443][T14947] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2301'. [ 754.240833][T14943] netlink: zone id is out of range [ 754.254191][T14945] netlink: zone id is out of range [ 754.260279][T14943] netlink: zone id is out of range [ 754.285785][T14945] netlink: zone id is out of range [ 754.290668][T14943] netlink: zone id is out of range [ 754.310520][T14945] netlink: zone id is out of range [ 754.388353][T14961] syzkaller1: entered promiscuous mode [ 754.428752][T14961] syzkaller1: entered allmulticast mode [ 754.454901][T14966] netlink: 'syz.0.2306': attribute type 11 has an invalid length. [ 754.482872][T14966] netlink: 199828 bytes leftover after parsing attributes in process `syz.0.2306'. [ 754.526782][T14973] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2308'. [ 754.537273][T14966] netlink: 244 bytes leftover after parsing attributes in process `syz.0.2306'. [ 754.794168][T14988] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2312'. [ 754.991446][T15001] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2315'. [ 755.280516][T15015] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2320'. [ 755.313245][T15019] netlink: 'syz.2.2322': attribute type 11 has an invalid length. [ 755.438317][T15026] ip6tnl3: entered allmulticast mode [ 755.776879][T15037] smc: adding net device wlan0 with user defined pnetid SYZ0 [ 755.812494][T15043] tipc: Enabling not permitted [ 755.828476][T15043] tipc: Enabling of bearer rejected, failed to enable media [ 755.966071][T15050] ip6_vti0: entered allmulticast mode [ 755.987496][T15010] Bluetooth: hci2: Opcode 0x0401 failed: -4 [ 756.107100][T15055] ip6_vti0: left allmulticast mode [ 756.224017][T15065] FAULT_INJECTION: forcing a failure. [ 756.224017][T15065] name failslab, interval 1, probability 0, space 0, times 0 [ 756.302673][T15065] CPU: 1 UID: 0 PID: 15065 Comm: syz.4.2335 Not tainted syzkaller #0 PREEMPT(full) [ 756.302696][T15065] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 756.302706][T15065] Call Trace: [ 756.302712][T15065] [ 756.302720][T15065] dump_stack_lvl+0xe8/0x150 [ 756.302745][T15065] should_fail_ex+0x412/0x560 [ 756.302771][T15065] should_failslab+0xa8/0x100 [ 756.302796][T15065] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 756.302817][T15065] ? __alloc_skb+0x186/0x7d0 [ 756.302839][T15065] ? __alloc_skb+0x1d0/0x7d0 [ 756.302857][T15065] ? __local_bh_enable_ip+0xd0/0x130 [ 756.302877][T15065] __alloc_skb+0x1d0/0x7d0 [ 756.302909][T15065] netlink_sendmsg+0x5d4/0xb40 [ 756.302932][T15065] ? __pfx_netlink_sendmsg+0x10/0x10 [ 756.302950][T15065] ? aa_sock_msg_perm+0xf1/0x1b0 [ 756.302971][T15065] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 756.302993][T15065] ? __pfx_netlink_sendmsg+0x10/0x10 [ 756.303007][T15065] sock_write_iter+0x49b/0x4f0 [ 756.303028][T15065] ? __pfx_sock_write_iter+0x10/0x10 [ 756.303062][T15065] do_iter_readv_writev+0x619/0x8c0 [ 756.303085][T15065] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 756.303110][T15065] ? bpf_lsm_file_permission+0x9/0x20 [ 756.303131][T15065] ? security_file_permission+0x75/0x260 [ 756.303148][T15065] ? rw_verify_area+0x255/0x4d0 [ 756.303170][T15065] vfs_writev+0x33c/0x990 [ 756.303196][T15065] ? __pfx_vfs_writev+0x10/0x10 [ 756.303224][T15065] ? __fget_files+0x2a/0x420 [ 756.303243][T15065] ? __fget_files+0x3a0/0x420 [ 756.303258][T15065] ? __fget_files+0x2a/0x420 [ 756.303280][T15065] do_writev+0x154/0x2e0 [ 756.303297][T15065] ? __pfx_do_writev+0x10/0x10 [ 756.303321][T15065] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 756.303337][T15065] do_syscall_64+0x15f/0xf80 [ 756.303359][T15065] ? trace_irq_disable+0x3b/0x140 [ 756.303380][T15065] ? clear_bhb_loop+0x40/0x90 [ 756.303398][T15065] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 756.303413][T15065] RIP: 0033:0x7ff47ed9ce59 [ 756.303429][T15065] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 756.303441][T15065] RSP: 002b:00007ff47fcd8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 756.303458][T15065] RAX: ffffffffffffffda RBX: 00007ff47f015fa0 RCX: 00007ff47ed9ce59 [ 756.303469][T15065] RDX: 0000000000000001 RSI: 00002000000001c0 RDI: 0000000000000003 [ 756.303478][T15065] RBP: 00007ff47fcd8090 R08: 0000000000000000 R09: 0000000000000000 [ 756.303487][T15065] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 756.303496][T15065] R13: 00007ff47f016038 R14: 00007ff47f015fa0 R15: 00007ffebe852498 [ 756.303521][T15065] [ 756.819253][T15085] __nla_validate_parse: 9 callbacks suppressed [ 756.819270][T15085] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2342'. [ 756.846473][T15093] RDS: rds_bind could not find a transport for 2001::, load rds_tcp or rds_rdma? [ 757.105017][T15103] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2343'. [ 757.121143][T15111] veth5: entered allmulticast mode [ 757.224612][ T5701] Bluetooth: hci2: command 0x0406 tx timeout [ 757.307356][T15119] bond5 (unregistering): Released all slaves [ 757.431021][T15103] bond5: entered promiscuous mode [ 757.443956][T15103] 8021q: adding VLAN 0 to HW filter on device bond5 [ 757.452861][T15115] sit0: entered allmulticast mode [ 757.552472][T15109] veth5: left allmulticast mode [ 757.712462][T15146] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2353'. [ 757.726673][T15138] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2350'. [ 757.797408][T15151] lo speed is unknown, defaulting to 1000 [ 758.119795][T15162] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 758.197557][T15162] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 758.210937][T15162] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 758.236469][T15162] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 758.250988][ T5654] lo speed is unknown, defaulting to 1000 [ 758.261102][ T5654] syz2: Port: 1 Link ACTIVE [ 758.282626][T14153] bridge0: port 1(bridge_slave_0) entered blocking state [ 758.289833][T14153] bridge0: port 1(bridge_slave_0) entered listening state [ 758.310733][T14153] bridge0: port 2(bridge_slave_1) entered blocking state [ 758.317934][T14153] bridge0: port 2(bridge_slave_1) entered listening state [ 758.364699][T15151] lo speed is unknown, defaulting to 1000 [ 758.748313][T15180] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2361'. [ 758.776241][T15180] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2361'. [ 758.787989][T15180] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2361'. [ 758.824086][T15180] netlink: 11 bytes leftover after parsing attributes in process `syz.2.2361'. [ 759.722696][T15234] netlink: 'syz.4.2375': attribute type 9 has an invalid length. [ 759.748628][T15234] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2375'. [ 759.798496][T15235] netlink: 'syz.4.2375': attribute type 9 has an invalid length. [ 759.829155][T15234] erspan0: entered promiscuous mode [ 759.836255][T15244] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2376'. [ 759.863654][T15234] macvlan0: entered promiscuous mode [ 759.883339][T15234] macvlan0: entered allmulticast mode [ 759.897696][T15234] erspan0: entered allmulticast mode [ 759.931101][T15251] netlink: 'syz.1.2377': attribute type 1 has an invalid length. [ 759.933436][T15245] nbd: socks must be embedded in a SOCK_ITEM attr [ 759.944789][T15235] macvlan2: entered promiscuous mode [ 759.975286][T15251] netlink: 'syz.1.2377': attribute type 2 has an invalid length. [ 759.986938][T15235] macvlan2: entered allmulticast mode [ 760.032873][T15253] netlink: 'syz.3.2378': attribute type 29 has an invalid length. [ 760.093589][T15253] netlink: 'syz.3.2378': attribute type 29 has an invalid length. [ 760.121833][T15253] netlink: 'syz.3.2378': attribute type 29 has an invalid length. [ 760.165007][T15253] netlink: 'syz.3.2378': attribute type 29 has an invalid length. [ 760.181787][T15263] netlink: 'syz.4.2380': attribute type 30 has an invalid length. [ 760.233812][T15253] netlink: 'syz.3.2378': attribute type 29 has an invalid length. [ 760.393201][T15263] bond6: option arp_missed_max: mode dependency failed, not supported in mode 802.3ad(4) [ 760.483045][T15263] bond6 (unregistering): Released all slaves [ 760.699813][T15286] net_ratelimit: 50 callbacks suppressed [ 760.699832][T15286] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 760.714657][T15286] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 760.721554][T15286] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 760.728406][T15286] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 760.735383][T15286] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 760.742250][T15286] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 760.749061][T15286] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 760.755922][T15286] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 760.762874][T15286] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 760.769720][T15286] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 760.945243][T15263] bond6: option arp_missed_max: mode dependency failed, not supported in mode 802.3ad(4) [ 761.534023][T15263] bond6 (unregistering): Released all slaves [ 761.832372][T15296] veth0_macvtap: entered allmulticast mode [ 761.951828][T15299] FAULT_INJECTION: forcing a failure. [ 761.951828][T15299] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 761.970333][T15299] CPU: 0 UID: 0 PID: 15299 Comm: syz.3.2388 Not tainted syzkaller #0 PREEMPT(full) [ 761.970357][T15299] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 761.970366][T15299] Call Trace: [ 761.970372][T15299] [ 761.970380][T15299] dump_stack_lvl+0xe8/0x150 [ 761.970403][T15299] should_fail_ex+0x412/0x560 [ 761.970427][T15299] _copy_to_user+0x31/0xb0 [ 761.970450][T15299] simple_read_from_buffer+0xe1/0x170 [ 761.970475][T15299] proc_fail_nth_read+0x1bb/0x230 [ 761.970498][T15299] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 761.970521][T15299] ? rw_verify_area+0x2a6/0x4d0 [ 761.970542][T15299] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 761.970563][T15299] vfs_read+0x20c/0xa70 [ 761.970589][T15299] ? __pfx___mutex_lock+0x10/0x10 [ 761.970606][T15299] ? __pfx_vfs_read+0x10/0x10 [ 761.970629][T15299] ? __fget_files+0x2a/0x420 [ 761.970652][T15299] ? __fget_files+0x3a0/0x420 [ 761.970669][T15299] ? __fget_files+0x2a/0x420 [ 761.970695][T15299] ksys_read+0x150/0x270 [ 761.970718][T15299] ? __pfx_ksys_read+0x10/0x10 [ 761.970748][T15299] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 761.970765][T15299] do_syscall_64+0x15f/0xf80 [ 761.970785][T15299] ? trace_irq_disable+0x3b/0x140 [ 761.970809][T15299] ? clear_bhb_loop+0x40/0x90 [ 761.970829][T15299] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 761.970844][T15299] RIP: 0033:0x7f685f75d68e [ 761.970860][T15299] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 761.970874][T15299] RSP: 002b:00007f68606f5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 761.970891][T15299] RAX: ffffffffffffffda RBX: 00007f68606f66c0 RCX: 00007f685f75d68e [ 761.970902][T15299] RDX: 000000000000000f RSI: 00007f68606f60a0 RDI: 0000000000000006 [ 761.970912][T15299] RBP: 00007f68606f6090 R08: 0000000000000000 R09: 0000000000000000 [ 761.970921][T15299] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 761.970930][T15299] R13: 00007f685fa16038 R14: 00007f685fa15fa0 R15: 00007ffe6ca74b28 [ 761.970960][T15299] [ 762.473727][T15305] __nla_validate_parse: 41 callbacks suppressed [ 762.473744][T15305] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2389'. [ 762.589087][T15319] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2390'. [ 762.886740][T15329] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2394'. [ 763.253751][T15329] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2394'. [ 763.255719][T15342] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2397'. [ 763.464359][T15352] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2399'. [ 764.121735][T15382] netlink: 164 bytes leftover after parsing attributes in process `syz.4.2408'. [ 764.385031][T15387] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2410'. [ 764.529204][T15389] netlink: 9 bytes leftover after parsing attributes in process `syz.3.2412'. [ 764.576822][T15389] netlink: 9 bytes leftover after parsing attributes in process `syz.3.2412'. [ 764.794430][T15391] lo speed is unknown, defaulting to 1000 [ 765.307208][T15420] tipc: Started in network mode [ 765.320648][T15420] tipc: Node identity 080211, cluster identity 4711 [ 765.338654][T15420] tipc: Enabled bearer , priority 0 [ 765.411925][T15420] tipc: Resetting bearer [ 765.429354][T15417] lo speed is unknown, defaulting to 1000 [ 765.452513][T15391] lo speed is unknown, defaulting to 1000 [ 765.693766][T15433] validate_nla: 30 callbacks suppressed [ 765.693782][T15433] netlink: 'syz.0.2421': attribute type 1 has an invalid length. [ 766.186649][T15417] lo speed is unknown, defaulting to 1000 [ 766.232204][T15452] net_ratelimit: 2807 callbacks suppressed [ 766.232225][T15452] openvswitch: netlink: EtherType 50a is less than min 600 [ 766.552417][T15462] FAULT_INJECTION: forcing a failure. [ 766.552417][T15462] name failslab, interval 1, probability 0, space 0, times 0 [ 766.592051][T15462] CPU: 0 UID: 0 PID: 15462 Comm: syz.1.2430 Not tainted syzkaller #0 PREEMPT(full) [ 766.592075][T15462] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 766.592085][T15462] Call Trace: [ 766.592092][T15462] [ 766.592100][T15462] dump_stack_lvl+0xe8/0x150 [ 766.592125][T15462] should_fail_ex+0x412/0x560 [ 766.592151][T15462] should_failslab+0xa8/0x100 [ 766.592176][T15462] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 766.592196][T15462] ? __alloc_skb+0x186/0x7d0 [ 766.592216][T15462] ? __alloc_skb+0x1d0/0x7d0 [ 766.592234][T15462] ? __local_bh_enable_ip+0xd0/0x130 [ 766.592256][T15462] __alloc_skb+0x1d0/0x7d0 [ 766.592282][T15462] netlink_sendmsg+0x5d4/0xb40 [ 766.592308][T15462] ? __pfx_netlink_sendmsg+0x10/0x10 [ 766.592327][T15462] ? aa_sock_msg_perm+0xf1/0x1b0 [ 766.592348][T15462] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 766.592373][T15462] ____sys_sendmsg+0x972/0x9f0 [ 766.592389][T15462] ? __might_fault+0xaf/0x130 [ 766.592414][T15462] ? __pfx_____sys_sendmsg+0x10/0x10 [ 766.592436][T15462] ? import_iovec+0x73/0xa0 [ 766.592459][T15462] ___sys_sendmsg+0x2a5/0x360 [ 766.592473][T15462] ? __lock_acquire+0x6b5/0x2cf0 [ 766.592490][T15462] ? __pfx____sys_sendmsg+0x10/0x10 [ 766.592534][T15462] ? __fget_files+0x2a/0x420 [ 766.592551][T15462] ? __fget_files+0x3a0/0x420 [ 766.592578][T15462] __x64_sys_sendmsg+0x1bd/0x2a0 [ 766.592597][T15462] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 766.592622][T15462] ? __pfx_ksys_write+0x10/0x10 [ 766.592659][T15462] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 766.592676][T15462] do_syscall_64+0x15f/0xf80 [ 766.592698][T15462] ? trace_irq_disable+0x3b/0x140 [ 766.592720][T15462] ? clear_bhb_loop+0x40/0x90 [ 766.592739][T15462] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 766.592754][T15462] RIP: 0033:0x7f2a8ab9ce59 [ 766.592771][T15462] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 766.592784][T15462] RSP: 002b:00007f2a8b99a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 766.592801][T15462] RAX: ffffffffffffffda RBX: 00007f2a8ae15fa0 RCX: 00007f2a8ab9ce59 [ 766.592812][T15462] RDX: 0000000024040084 RSI: 0000200000006040 RDI: 0000000000000003 [ 766.592822][T15462] RBP: 00007f2a8b99a090 R08: 0000000000000000 R09: 0000000000000000 [ 766.592832][T15462] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 766.592841][T15462] R13: 00007f2a8ae16038 R14: 00007f2a8ae15fa0 R15: 00007ffec9ab4ef8 [ 766.592868][T15462] [ 766.942351][T15465] tc_dump_action: action bad kind [ 766.978416][ T5654] tipc: Node number set to 134353152 [ 767.153276][T15475] netlink: 'syz.0.2435': attribute type 1 has an invalid length. [ 767.333810][T15475] 8021q: adding VLAN 0 to HW filter on device bond15 [ 767.406747][T15479] bond15: (slave gretap5): making interface the new active one [ 767.422964][T15479] bond15: (slave gretap5): Enslaving as an active interface with an up link [ 767.449788][T15483] bond15 (unregistering): (slave gretap5): Releasing active interface [ 767.462850][T15483] bond15 (unregistering): Released all slaves [ 767.656613][T15497] FAULT_INJECTION: forcing a failure. [ 767.656613][T15497] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 767.684816][T15497] CPU: 0 UID: 0 PID: 15497 Comm: syz.3.2441 Not tainted syzkaller #0 PREEMPT(full) [ 767.684840][T15497] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 767.684848][T15497] Call Trace: [ 767.684855][T15497] [ 767.684861][T15497] dump_stack_lvl+0xe8/0x150 [ 767.684885][T15497] should_fail_ex+0x412/0x560 [ 767.684910][T15497] _copy_from_iter+0x1d3/0x1670 [ 767.684931][T15497] ? rcu_is_watching+0x15/0xb0 [ 767.684952][T15497] ? __pfx__copy_from_iter+0x10/0x10 [ 767.684985][T15497] ? netlink_sendmsg+0x650/0xb40 [ 767.685000][T15497] ? skb_put+0x11b/0x210 [ 767.685029][T15497] netlink_sendmsg+0x6c0/0xb40 [ 767.685050][T15497] ? __pfx_netlink_sendmsg+0x10/0x10 [ 767.685071][T15497] ? aa_sock_msg_perm+0xf1/0x1b0 [ 767.685091][T15497] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 767.685119][T15497] ____sys_sendmsg+0x972/0x9f0 [ 767.685134][T15497] ? __might_fault+0xaf/0x130 [ 767.685158][T15497] ? __pfx_____sys_sendmsg+0x10/0x10 [ 767.685181][T15497] ? import_iovec+0x73/0xa0 [ 767.685210][T15497] ___sys_sendmsg+0x2a5/0x360 [ 767.685224][T15497] ? __lock_acquire+0x6b5/0x2cf0 [ 767.685246][T15497] ? __pfx____sys_sendmsg+0x10/0x10 [ 767.685294][T15497] ? __fget_files+0x2a/0x420 [ 767.685309][T15497] ? __fget_files+0x3a0/0x420 [ 767.685334][T15497] __x64_sys_sendmsg+0x1bd/0x2a0 [ 767.685351][T15497] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 767.685373][T15497] ? __pfx_ksys_write+0x10/0x10 [ 767.685398][T15497] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 767.685413][T15497] do_syscall_64+0x15f/0xf80 [ 767.685435][T15497] ? trace_irq_disable+0x3b/0x140 [ 767.685457][T15497] ? clear_bhb_loop+0x40/0x90 [ 767.685475][T15497] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 767.685491][T15497] RIP: 0033:0x7f685f79ce59 [ 767.685508][T15497] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 767.685520][T15497] RSP: 002b:00007f68606f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 767.685536][T15497] RAX: ffffffffffffffda RBX: 00007f685fa15fa0 RCX: 00007f685f79ce59 [ 767.685545][T15497] RDX: 0000000024040084 RSI: 0000200000006040 RDI: 0000000000000003 [ 767.685555][T15497] RBP: 00007f68606f6090 R08: 0000000000000000 R09: 0000000000000000 [ 767.685565][T15497] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 767.685574][T15497] R13: 00007f685fa16038 R14: 00007f685fa15fa0 R15: 00007ffe6ca74b28 [ 767.685600][T15497] [ 768.268702][T15499] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 768.509212][T15526] xt_recent: hitcount (33554435) is larger than allowed maximum (65535) [ 768.720516][T15531] netlink: 'syz.3.2451': attribute type 2 has an invalid length. [ 768.728729][T15531] netlink: 'syz.3.2451': attribute type 9 has an invalid length. [ 768.738726][T15535] FAULT_INJECTION: forcing a failure. [ 768.738726][T15535] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 768.755020][T15531] __nla_validate_parse: 13 callbacks suppressed [ 768.755034][T15531] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2451'. [ 768.772629][T15535] CPU: 1 UID: 0 PID: 15535 Comm: syz.4.2452 Not tainted syzkaller #0 PREEMPT(full) [ 768.772650][T15535] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 768.772661][T15535] Call Trace: [ 768.772668][T15535] [ 768.772675][T15535] dump_stack_lvl+0xe8/0x150 [ 768.772700][T15535] should_fail_ex+0x412/0x560 [ 768.772724][T15535] _copy_from_iter+0x1d3/0x1670 [ 768.772746][T15535] ? rcu_is_watching+0x15/0xb0 [ 768.772770][T15535] ? __pfx__copy_from_iter+0x10/0x10 [ 768.772796][T15535] ? netlink_sendmsg+0x650/0xb40 [ 768.772811][T15535] ? skb_put+0x11b/0x210 [ 768.772837][T15535] netlink_sendmsg+0x6c0/0xb40 [ 768.772863][T15535] ? __pfx_netlink_sendmsg+0x10/0x10 [ 768.772881][T15535] ? aa_sock_msg_perm+0xf1/0x1b0 [ 768.772904][T15535] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 768.772929][T15535] ____sys_sendmsg+0x972/0x9f0 [ 768.772946][T15535] ? __might_fault+0xaf/0x130 [ 768.772972][T15535] ? __pfx_____sys_sendmsg+0x10/0x10 [ 768.772997][T15535] ? import_iovec+0x73/0xa0 [ 768.773023][T15535] ___sys_sendmsg+0x2a5/0x360 [ 768.773038][T15535] ? __lock_acquire+0x6b5/0x2cf0 [ 768.773060][T15535] ? __pfx____sys_sendmsg+0x10/0x10 [ 768.773108][T15535] ? __fget_files+0x2a/0x420 [ 768.773127][T15535] ? __fget_files+0x3a0/0x420 [ 768.773156][T15535] __x64_sys_sendmsg+0x1bd/0x2a0 [ 768.773181][T15535] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 768.773206][T15535] ? __pfx_ksys_write+0x10/0x10 [ 768.773236][T15535] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 768.773254][T15535] do_syscall_64+0x15f/0xf80 [ 768.773276][T15535] ? trace_irq_disable+0x3b/0x140 [ 768.773299][T15535] ? clear_bhb_loop+0x40/0x90 [ 768.773317][T15535] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 768.773334][T15535] RIP: 0033:0x7ff47ed9ce59 [ 768.773350][T15535] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 768.773365][T15535] RSP: 002b:00007ff47fcd8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 768.773391][T15535] RAX: ffffffffffffffda RBX: 00007ff47f015fa0 RCX: 00007ff47ed9ce59 [ 768.773402][T15535] RDX: 0000000024040084 RSI: 0000200000006040 RDI: 0000000000000003 [ 768.773413][T15535] RBP: 00007ff47fcd8090 R08: 0000000000000000 R09: 0000000000000000 [ 768.773423][T15535] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 768.773433][T15535] R13: 00007ff47f016038 R14: 00007ff47f015fa0 R15: 00007ffebe852498 [ 768.773461][T15535] [ 769.045558][T15539] xt_ecn: cannot match TCP bits for non-tcp packets [ 769.060410][T15538] netlink: 'syz.4.2454': attribute type 3 has an invalid length. [ 769.302293][T15551] netlink: 244 bytes leftover after parsing attributes in process `syz.2.2458'. [ 769.658722][T15523] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 770.063179][T15584] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2467'. [ 770.126640][T15577] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 770.154589][T15577] syzkaller1: linktype set to 1 [ 770.383278][T15604] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 770.457866][T15606] netlink: 124 bytes leftover after parsing attributes in process `syz.0.2473'. [ 770.471202][T15606] netlink: 124 bytes leftover after parsing attributes in process `syz.0.2473'. [ 770.573866][T15608] bridge9: entered promiscuous mode [ 770.599558][T15608] bridge9: entered allmulticast mode [ 770.626927][T15608] team0: Port device bridge9 added [ 770.726136][ T42] lo speed is unknown, defaulting to 1000 [ 770.751499][T15613] netlink: 'syz.0.2475': attribute type 1 has an invalid length. [ 770.759538][T15613] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 770.937687][T15615] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2476'. [ 771.165804][T15636] netlink: 112 bytes leftover after parsing attributes in process `syz.2.2483'. [ 771.311953][T15641] netlink: 'syz.1.2484': attribute type 10 has an invalid length. [ 771.343889][T15638] netlink: 'syz.1.2484': attribute type 10 has an invalid length. [ 771.412276][T15638] tap0: tun_chr_ioctl cmd 1074025673 [ 771.433456][T15638] tap0: tun_chr_ioctl cmd 1074025677 [ 771.455486][T15638] tap0: linktype set to 773 [ 771.554473][T15641] : entered promiscuous mode [ 771.584940][T15662] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2490'. [ 771.763303][T15671] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2494'. [ 772.224389][T15693] lo speed is unknown, defaulting to 1000 [ 772.371066][T15703] netlink: 'syz.0.2502': attribute type 13 has an invalid length. [ 772.570715][T14144] bond14: (slave ip6gretap1): link status up again after 0 ms [ 772.602752][T14144] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 772.677347][T15717] netlink: 148 bytes leftover after parsing attributes in process `syz.4.2505'. [ 773.264969][T15693] lo speed is unknown, defaulting to 1000 [ 773.581024][T14153] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 773.790143][T14153] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 773.990326][T14144] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 774.140708][T14153] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 774.142742][T15771] __nla_validate_parse: 2 callbacks suppressed [ 774.142816][T15771] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2518'. [ 774.274546][ T12] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 774.410311][T14144] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 774.422417][T15782] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2521'. [ 774.458288][T15784] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2522'. [ 774.540678][ T12] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 774.569218][T15791] hm3): entered promiscuous mode [ 774.696537][T15799] netlink: 'syz.0.2526': attribute type 4 has an invalid length. [ 774.771717][T15804] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2527'. [ 774.782451][ T12] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 775.142882][T15822] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2531'. [ 775.328908][T15831] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2534'. [ 775.350944][T15831] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2534'. [ 775.361975][T15831] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2534'. [ 775.367836][T15821] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2533'. [ 775.373347][T15831] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2534'. [ 775.743009][T15850] netlink: 'syz.2.2539': attribute type 4 has an invalid length. [ 776.134268][T15863] netlink: 'syz.3.2546': attribute type 1 has an invalid length. [ 776.607022][T15902] netlink: 'syz.3.2554': attribute type 1 has an invalid length. [ 776.615650][T15902] netlink: 'syz.3.2554': attribute type 6 has an invalid length. [ 776.624163][T15902] netlink: 'syz.3.2554': attribute type 3 has an invalid length. [ 777.117109][T15929] vcan0: tx drop: invalid sa for name 0x0000000000000003 [ 777.323753][T15940] x_tables: duplicate underflow at hook 2 [ 777.600522][T14144] net_ratelimit: 21 callbacks suppressed [ 777.600546][T14144] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 777.741370][ T8650] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 777.880915][ T8650] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 777.982542][T15966] lo speed is unknown, defaulting to 1000 [ 778.010386][T14153] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 778.174046][T14153] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 778.300700][T14153] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 778.356229][T15982] erspan0: entered promiscuous mode [ 778.388088][T15982] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 778.395419][T15982] IPv6: NLM_F_CREATE should be set when creating new route [ 778.430521][T14144] bond14: (slave ip6gretap1): failed to get link speed/duplex [ 778.503777][ C1] [ 778.506150][ C1] ============================================ [ 778.512376][ C1] WARNING: possible recursive locking detected [ 778.518663][ C1] syzkaller #0 Not tainted [ 778.523115][ C1] -------------------------------------------- [ 778.529319][ C1] syz.3.2570/15977 is trying to acquire lock: [ 778.535385][ C1] ffff8880323dc158 (&qdisc_xmit_lock_key#4){+.-.}-{3:3}, at: sch_direct_xmit+0x15f/0x4c0 [ 778.545426][ C1] [ 778.545426][ C1] but task is already holding lock: [ 778.552800][ C1] ffff888027c14d58 (&qdisc_xmit_lock_key#4){+.-.}-{3:3}, at: sch_direct_xmit+0x15f/0x4c0 [ 778.562671][ C1] [ 778.562671][ C1] other info that might help us debug this: [ 778.570720][ C1] Possible unsafe locking scenario: [ 778.570720][ C1] [ 778.578217][ C1] CPU0 [ 778.581497][ C1] ---- [ 778.584799][ C1] lock(&qdisc_xmit_lock_key#4); [ 778.589859][ C1] lock(&qdisc_xmit_lock_key#4); [ 778.594876][ C1] [ 778.594876][ C1] *** DEADLOCK *** [ 778.594876][ C1] [ 778.602998][ C1] May be due to missing lock nesting notation [ 778.602998][ C1] [ 778.611349][ C1] 13 locks held by syz.3.2570/15977: [ 778.616616][ C1] #0: ffffc90000a08cc0 ((&ndev->rs_timer)){+.-.}-{0:0}, at: call_timer_fn+0xd4/0x5e0 [ 778.626182][ C1] #1: ffffffff8e95cda0 (rcu_read_lock){....}-{1:3}, at: ndisc_send_skb+0x215/0x1670 [ 778.635677][ C1] #2: ffffffff8e95cda0 (rcu_read_lock){....}-{1:3}, at: ip6_output+0x126/0x550 [ 778.644741][ C1] #3: ffffffff8e95ce00 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x2b6/0x3950 [ 778.654655][ C1] #4: ffffffff8e95cda0 (rcu_read_lock){....}-{1:3}, at: bond_start_xmit+0xb4/0x1900 [ 778.664133][ C1] #5: ffffffff8e95ce00 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x2b6/0x3950 [ 778.674048][ C1] #6: ffff8880583b1228 (dev->qdisc_tx_busylock ?: &qdisc_tx_busylock#5){+...}-{3:3}, at: __dev_queue_xmit+0x11a6/0x3950 [ 778.686644][ C1] #7: ffff888027c14d58 (&qdisc_xmit_lock_key#4){+.-.}-{3:3}, at: sch_direct_xmit+0x15f/0x4c0 [ 778.696901][ C1] #8: ffffffff8e95cda0 (rcu_read_lock){....}-{1:3}, at: ip_output+0x5b/0x450 [ 778.705765][ C1] #9: ffffffff8e95cda0 (rcu_read_lock){....}-{1:3}, at: ip_finish_output2+0x3c2/0x1070 [ 778.715586][ C1] #10: ffffffff8e95cda0 (rcu_read_lock){....}-{1:3}, at: arp_xmit+0x23/0x270 [ 778.724456][ C1] #11: ffffffff8e95ce00 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x2b6/0x3950 [ 778.734444][ C1] #12: ffff8880795b4228 (dev->qdisc_tx_busylock ?: &qdisc_tx_busylock#5){+...}-{3:3}, at: __dev_queue_xmit+0x11a6/0x3950 [ 778.747126][ C1] [ 778.747126][ C1] stack backtrace: [ 778.753010][ C1] CPU: 1 UID: 0 PID: 15977 Comm: syz.3.2570 Not tainted syzkaller #0 PREEMPT(full) [ 778.753027][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 778.753036][ C1] Call Trace: [ 778.753044][ C1] [ 778.753052][ C1] dump_stack_lvl+0xe8/0x150 [ 778.753072][ C1] print_deadlock_bug+0x279/0x290 [ 778.753091][ C1] __lock_acquire+0x253f/0x2cf0 [ 778.753107][ C1] ? is_bpf_text_address+0x292/0x2b0 [ 778.753122][ C1] ? is_bpf_text_address+0x26/0x2b0 [ 778.753138][ C1] ? sch_direct_xmit+0x15f/0x4c0 [ 778.753155][ C1] lock_acquire+0x106/0x350 [ 778.753168][ C1] ? sch_direct_xmit+0x15f/0x4c0 [ 778.753190][ C1] _raw_spin_lock+0x2e/0x40 [ 778.753207][ C1] ? sch_direct_xmit+0x15f/0x4c0 [ 778.753224][ C1] sch_direct_xmit+0x15f/0x4c0 [ 778.753244][ C1] ? __pfx_sch_direct_xmit+0x10/0x10 [ 778.753261][ C1] ? arp_create+0x100/0x980 [ 778.753280][ C1] __dev_queue_xmit+0x180f/0x3950 [ 778.753297][ C1] ? __dev_queue_xmit+0x2b6/0x3950 [ 778.753313][ C1] ? arpt_do_table+0x256/0x1e30 [ 778.753329][ C1] ? __pfx___dev_queue_xmit+0x10/0x10 [ 778.753346][ C1] ? __pfx_arpt_do_table+0x10/0x10 [ 778.753359][ C1] ? trace_kmem_cache_alloc+0x29/0xe0 [ 778.753383][ C1] ? NF_HOOK+0xa2/0x3c0 [ 778.753400][ C1] NF_HOOK+0x33a/0x3c0 [ 778.753417][ C1] ? __pfx_arp_xmit_finish+0x10/0x10 [ 778.753433][ C1] ? NF_HOOK+0xa2/0x3c0 [ 778.753449][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 778.753464][ C1] ? lock_acquire+0x106/0x350 [ 778.753477][ C1] ? __pfx_arp_xmit_finish+0x10/0x10 [ 778.753494][ C1] ? inet_addr_type_dev_table+0x25/0x190 [ 778.753513][ C1] arp_xmit+0x16c/0x270 [ 778.753529][ C1] ? arp_xmit+0x23/0x270 [ 778.753545][ C1] arp_solicit+0xbe0/0xe40 [ 778.753563][ C1] ? arp_solicit+0x119/0xe40 [ 778.753580][ C1] ? __pfx_arp_solicit+0x10/0x10 [ 778.753601][ C1] ? __pfx_arp_solicit+0x10/0x10 [ 778.753617][ C1] __neigh_event_send+0xf05/0x14d0 [ 778.753639][ C1] neigh_resolve_output+0x198/0x750 [ 778.753658][ C1] ? __pfx_ip_neigh_gw4+0x10/0x10 [ 778.753679][ C1] ? ip_finish_output2+0x3c2/0x1070 [ 778.753696][ C1] ip_finish_output2+0xca9/0x1070 [ 778.753715][ C1] ? ip_skb_dst_mtu+0x80b/0xa50 [ 778.753753][ C1] ? ip_finish_output+0x40e/0x530 [ 778.753771][ C1] ip_output+0x29f/0x450 [ 778.753787][ C1] ? ip_output+0x5b/0x450 [ 778.753803][ C1] iptunnel_xmit+0x621/0xd10 [ 778.753827][ C1] ip_tunnel_xmit+0x193a/0x1f20 [ 778.753851][ C1] ? __pfx_ip_tunnel_xmit+0x10/0x10 [ 778.753869][ C1] ? __pfx_gre_build_header+0x10/0x10 [ 778.753887][ C1] __gre_xmit+0x19e/0x240 [ 778.753903][ C1] ? __pfx___gre_xmit+0x10/0x10 [ 778.753919][ C1] erspan_xmit+0xa41/0x14d0 [ 778.753936][ C1] ? dev_queue_xmit_nit+0x2d/0xad0 [ 778.753957][ C1] ? __pfx_erspan_xmit+0x10/0x10 [ 778.753975][ C1] dev_hard_start_xmit+0x2cd/0x830 [ 778.753993][ C1] sch_direct_xmit+0x251/0x4c0 [ 778.754012][ C1] ? __pfx_sch_direct_xmit+0x10/0x10 [ 778.754032][ C1] __dev_queue_xmit+0x180f/0x3950 [ 778.754045][ C1] ? stack_depot_save_flags+0x33/0x810 [ 778.754066][ C1] ? __dev_queue_xmit+0x2b6/0x3950 [ 778.754079][ C1] ? dev_queue_xmit_nit+0x29a/0xad0 [ 778.754099][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 778.754113][ C1] ? __pfx___dev_queue_xmit+0x10/0x10 [ 778.754136][ C1] ? bond_do_alb_xmit+0x600/0x820 [ 778.754153][ C1] ? bond_dev_queue_xmit+0x9c/0x150 [ 778.754170][ C1] bond_start_xmit+0x766/0x1900 [ 778.754184][ C1] ? bond_start_xmit+0xb4/0x1900 [ 778.754194][ C1] ? __pfx_bond_start_xmit+0x10/0x10 [ 778.754207][ C1] ? dev_queue_xmit_nit+0x969/0xad0 [ 778.754226][ C1] ? dev_queue_xmit_nit+0x2d/0xad0 [ 778.754248][ C1] dev_hard_start_xmit+0x2cd/0x830 [ 778.754265][ C1] __dev_queue_xmit+0x14d9/0x3950 [ 778.754281][ C1] ? __dev_queue_xmit+0x2b6/0x3950 [ 778.754298][ C1] ? __pfx___dev_queue_xmit+0x10/0x10 [ 778.754313][ C1] ? ip6_output+0x340/0x550 [ 778.754325][ C1] ? lock_acquire+0x106/0x350 [ 778.754338][ C1] ? ip6_output+0x340/0x550 [ 778.754355][ C1] ? ip6_finish_output2+0xd39/0x13e0 [ 778.754373][ C1] ? ip6_output+0x126/0x550 [ 778.754386][ C1] ip6_output+0x340/0x550 [ 778.754400][ C1] ? __pfx_ip6_output+0x10/0x10 [ 778.754412][ C1] ndisc_send_skb+0xd0b/0x1670 [ 778.754437][ C1] ? ndisc_send_skb+0x215/0x1670 [ 778.754457][ C1] ? __pfx_ndisc_send_skb+0x10/0x10 [ 778.754475][ C1] ? __pfx_dst_output+0x10/0x10 [ 778.754500][ C1] addrconf_rs_timer+0x395/0x6d0 [ 778.754519][ C1] ? __pfx_addrconf_rs_timer+0x10/0x10 [ 778.754534][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 778.754555][ C1] call_timer_fn+0x192/0x5e0 [ 778.754570][ C1] ? __pfx_addrconf_rs_timer+0x10/0x10 [ 778.754585][ C1] ? call_timer_fn+0xd4/0x5e0 [ 778.754599][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 778.754617][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 778.754634][ C1] ? __pfx_addrconf_rs_timer+0x10/0x10 [ 778.754650][ C1] __run_timer_base+0x652/0x8b0 [ 778.754664][ C1] ? ktime_get+0x45/0x220 [ 778.754686][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 778.754703][ C1] run_timer_softirq+0xb7/0x170 [ 778.754717][ C1] handle_softirqs+0x22a/0x840 [ 778.754736][ C1] ? __irq_exit_rcu+0xca/0x220 [ 778.754752][ C1] __irq_exit_rcu+0xca/0x220 [ 778.754765][ C1] irq_exit_rcu+0x9/0x30 [ 778.754776][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 778.754800][ C1] [ 778.754804][ C1] [ 778.754810][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 778.754825][ C1] RIP: 0010:seqcount_lockdep_reader_access+0xec/0x100 [ 778.754847][ C1] Code: 00 75 11 e8 66 e2 12 00 4d 85 ff 75 16 e8 5c e2 12 00 eb 15 e8 55 e2 12 00 e8 10 63 f7 09 4d 85 ff 74 ea e8 46 e2 12 00 fb 5b <41> 5e 41 5f c3 cc cc cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 90 90 [ 778.754859][ C1] RSP: 0018:ffffc90004b2fb68 EFLAGS: 00000287 [ 778.754871][ C1] RAX: ffffffff81b2e21a RBX: ffffc90004b2fd90 RCX: 0000000000080000 [ 778.754882][ C1] RDX: ffffc90010946000 RSI: 000000000004cd4a RDI: 000000000004cd4b [ 778.754890][ C1] RBP: ffffc90004b2fc30 R08: ffffffff90311bf7 R09: 1ffffffff206237e [ 778.754900][ C1] R10: dffffc0000000000 R11: fffffbfff206237f R12: 1ffff92000965f94 [ 778.754910][ C1] R13: 0000000000000d75 R14: ffffffff81b2f0e9 R15: 0000000000000200 [ 778.754919][ C1] ? ktime_get_ts64+0xa9/0x410 [ 778.754932][ C1] ? seqcount_lockdep_reader_access+0xea/0x100 [ 778.754955][ C1] ktime_get_ts64+0xa9/0x410 [ 778.754968][ C1] ? __pfx_ktime_get_ts64+0x10/0x10 [ 778.754980][ C1] ? __might_fault+0xaf/0x130 [ 778.754997][ C1] do_recvmmsg+0x400/0x800 [ 778.755013][ C1] ? __pfx_do_recvmmsg+0x10/0x10 [ 778.755030][ C1] ? _copy_from_user+0x94/0xb0 [ 778.755054][ C1] __x64_sys_recvmmsg+0x1b7/0x250 [ 778.755068][ C1] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 778.755084][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 778.755097][ C1] do_syscall_64+0x15f/0xf80 [ 778.755116][ C1] ? trace_irq_disable+0x3b/0x140 [ 778.755136][ C1] ? clear_bhb_loop+0x40/0x90 [ 778.755150][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 778.755163][ C1] RIP: 0033:0x7f685f79ce59 [ 778.755176][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 778.755187][ C1] RSP: 002b:00007f68606b4028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 778.755199][ C1] RAX: ffffffffffffffda RBX: 00007f685fa16180 RCX: 00007f685f79ce59 [ 778.755209][ C1] RDX: 0400000000000ec0 RSI: 0000200000002ec0 RDI: 000000000000000e [ 778.755218][ C1] RBP: 00007f685f832d6f R08: 00002000000001c0 R09: 0000000000000000 [ 778.755227][ C1] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 778.755235][ C1] R13: 00007f685fa16218 R14: 00007f685fa16180 R15: 00007ffe6ca74b28 [ 778.755250][ C1] [ 779.663349][T15966] lo speed is unknown, defaulting to 1000 [ 779.677407][T15986] vlan2: entered promiscuous mode [ 779.692890][T14143] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 779.702010][T14143] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 20000 - 0 [ 779.759738][T14143] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 779.802277][T14143] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 20000 - 0 [ 779.848819][T14143] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 779.859610][T14143] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 20000 - 0 [ 779.884391][T14143] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 779.894335][T14143] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 20000 - 0