last executing test programs: 5.892956578s ago: executing program 2 (id=13955): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xc4, 0x19, 0x1, 0x70bd2d, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@dev={0xac, 0x14, 0x14, 0x25}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0x0, 0x0, 0x1}, [@policy_type={0xa, 0x10, {0x1}}]}, 0xc4}}, 0x0) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x14, 0x4, 0x8, 0x6, 0x0, 0x1}, 0x48) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x800) recvmmsg$unix(r3, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}, 0x4000}], 0x600, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r1, &(0x7f0000000140), 0x0}, 0x20) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x4e21, 0x1, @loopback, 0x13}, 0x1c) r5 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r6, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x30, r5, 0x10ada85e65c25359, 0xfffffffc, 0x25dfdbfb, {{0x6b}, {@val={0x8}, @val={0xc, 0x99, {0x7431, 0x4e}}}}, [@NL80211_ATTR_TID_CONFIG={0x8, 0x11d, 0x0, 0x1, [{0x4}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x8441}, 0x4000000) sendmsg$NL80211_CMD_GET_WOWLAN(r3, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, r5, 0x100, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x7f}, @val={0x8}, @void}}, ["", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x4000004) 5.028900974s ago: executing program 2 (id=13960): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x20000080}, 0x2400c814) 4.820671798s ago: executing program 2 (id=13963): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) socket$kcm(0xa, 0x3, 0x87) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40241, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r3, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x27, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r4}, @IFLA_HSR_SLAVE2={0x8, 0x2, r4}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000100), 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1e00000000000000090000000900000000800000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=r4, @ANYRES32=r5, @ANYBLOB="0508000000000000050000000600000000000000", @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00'], 0x50) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r3, 0x84, 0x16, 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r6, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) r7 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r7, 0x0, &(0x7f00000000c0)=0x0) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_WPAN_PHY(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="6d9311000000f8dbdf250100"], 0x28}, 0x1, 0x0, 0x0, 0x48891}, 0x880) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000540), r10) syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r10) sendmmsg(r6, &(0x7f0000000440)=[{{&(0x7f0000000700)=@nfc={0x27, r8, 0x0, 0x3}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000500)="e257124e8281b23e99328aa630d9022e2f4ac4748a5fa3ff8d5c578644305cc5ed228241", 0x24}], 0x1}}], 0x1, 0x0) r11 = socket$kcm(0x2, 0xa, 0x2) pselect6(0x40, &(0x7f0000000040)={0x6, 0x8, 0xc97, 0x1000000dd41, 0x10000000001, 0x3c, 0x27, 0x2}, 0x0, 0x0, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @random="2b0436d23321"}) write$tun(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="034886dd120005000000140000006000000008008700fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000cc0)=ANY=[@ANYBLOB="000086dd0203050009000a004000683739ed202889fffe8000000000000000000000000000aaff020000000000000000000000000001"], 0xfdef) 3.59843436s ago: executing program 0 (id=13972): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e24, @private=0xa010101}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000200)={0x1, [0x0]}, &(0x7f00000001c0)=0x8) socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x3) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000003c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x6}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_MEMORY={0x8, 0xa, 0x1}, @TCA_CAKE_SPLIT_GSO={0x8, 0x11, 0x1}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x5, 0x3, {0x0, 0x0, 0x0, 0x0, 0x503}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @local}, @IFLA_IPTUN_LINK={0x8, 0x1, r5}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x9}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20004800}, 0x4000000) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)=ANY=[@ANYBLOB="1c00080200000000806e5ef29e6eedf6c8c7823453474c9aea777876fc15be25f083cf546c0f1d7886db895ddd56cf48d4f6d8921d0695949f6d7d9d76b5e54f57"], 0x14}}, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0xffffffffffffffff, 0x87}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r7, 0xffffffffffffffff}, 0x0}, 0x20) bpf$MAP_LOOKUP_ELEM(0x15, &(0x7f0000000200)={r8, 0x0, &(0x7f0000001780)=""/4096}, 0x20) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x24}}, 0x0) getsockname$packet(r10, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r11, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b80)=@delchain={0x1f04, 0x65, 0x4, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r11, {0xb, 0xb}, {0xf, 0x1}, {0xffff, 0x4}}, [@filter_kind_options=@f_u32={{0x8}, {0x1ec0, 0x2, [@TCA_U32_ACT={0x1ebc, 0x7, [@m_simple={0x9c, 0x12, 0x0, 0x0, {{0xb}, {0x14, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x5, 0x3, '\x00'}, @TCA_DEF_DATA={0x7, 0x3, 'tls'}]}, {0x5f, 0x6, "9c5946408771e688482e6c72c65a8a7844ab6503fada25ea95ac9d75a84879f6671cd847c1e4cbd992cce008a575466a5db116452adea6bfa9c9e9da82d3bffb83a380f36fbf35f7f5e6afdd204a3ec2d4e4d1be49376e1ef4f6a0"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_police={0x1d38, 0x5, 0x0, 0x0, {{0xb}, {0xd0c, 0x2, 0x0, 0x1, [[], [@TCA_POLICE_RATE={0x404, 0x2, [0xc, 0x3ff, 0x4, 0x8, 0x8000, 0x5, 0x7fffffff, 0x3, 0x25, 0x4, 0x7, 0x3, 0x8, 0x4, 0x6, 0x5, 0x6, 0x7f, 0x2158d6ae, 0x5031, 0x6, 0x8, 0x8, 0x3, 0x101, 0x5, 0x7fffffff, 0x80000000, 0x0, 0x7, 0x7, 0xb1b0, 0x4, 0x249818ff, 0x8, 0x2, 0x6, 0x7, 0x7, 0x5, 0x7, 0x1, 0x6, 0x1, 0x9, 0xff, 0x4b6, 0xffff, 0x5, 0xd, 0x1, 0x3ff, 0x70bd, 0x1, 0x0, 0x158b, 0x7f, 0x4, 0x2, 0x5, 0x7, 0x1ff, 0x64b, 0x1ff, 0x10, 0x6, 0xfffff6de, 0x1, 0x2, 0x10000, 0x0, 0xa2e, 0x8000, 0x2, 0x5, 0x3, 0xfffffff7, 0x81, 0xf2, 0x7, 0x6d7b, 0x7, 0x2, 0x10000, 0x93d, 0x3, 0x400, 0x2, 0x6, 0x6, 0xe, 0x9, 0x7, 0x2, 0x396e, 0x1, 0x3, 0x6, 0x82, 0x3ff, 0x5, 0x0, 0x4, 0x80000000, 0x7, 0x1000, 0x8000, 0x80000001, 0xe6, 0x1, 0x8, 0x8, 0x6, 0x8, 0x0, 0xc, 0x4, 0x3, 0x588, 0x5, 0x80000000, 0xffffffff, 0x200, 0x7d, 0x5, 0xfff, 0x1, 0x8, 0x51b, 0x0, 0x3ff, 0x2, 0x8, 0x7ff, 0x5, 0x7fff, 0x10000000, 0xfffffffc, 0xeda, 0x1, 0xfffffffa, 0x1, 0x400, 0x0, 0x6, 0xfffff064, 0x10, 0x10, 0x7, 0x8, 0x2, 0x8, 0xbde2, 0x3ff, 0x7, 0x1, 0xffffffff, 0x0, 0x6, 0x10, 0x1, 0x2, 0x6, 0x79b3395f, 0x8001, 0xd, 0x3, 0xd, 0x6, 0x6, 0xf, 0xfffffffe, 0x10, 0x7ff, 0x7ff, 0x9, 0x8, 0x4, 0x7, 0x2, 0x5, 0xfffffffd, 0x401, 0xc6da, 0x7, 0x2, 0x800000, 0xdd, 0x5, 0x4, 0x4, 0x4, 0x6, 0x7fff, 0x7, 0x3, 0x7, 0x0, 0xbb, 0x8, 0x40, 0x1ff, 0x8, 0x1ff, 0x80, 0x7, 0x6, 0xa, 0x3, 0x1, 0xa2, 0x1, 0xfffffff8, 0x5, 0x0, 0x19f9a756, 0x6, 0xffffffff, 0xc0e, 0x6, 0x9, 0xffffff9e, 0x3ff, 0x4, 0x1, 0x9, 0xcac4, 0x50000000, 0x0, 0x8, 0x1, 0x3, 0x1, 0x2, 0x6, 0x5a, 0xfffffff7, 0x7, 0x2, 0x9, 0x2, 0x3, 0x7, 0x8000, 0x7, 0x102, 0x680d, 0x0, 0x6, 0x100, 0x9, 0x7fffffff, 0x10001, 0x0, 0xe, 0x20000000]}], [@TCA_POLICE_AVRATE={0x8}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xc}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x4, 0x800, 0x1b95b510, 0xc, 0x0, 0x5, 0x6, 0x3, 0xbf1, 0x7fff, 0x9, 0x0, 0xdd, 0xd37, 0x6, 0xfffffffc, 0x101, 0x0, 0xdc1, 0xb0, 0x3ff, 0x4b9, 0xff, 0xc67, 0x9, 0x1, 0x100, 0x988, 0x76, 0x85e2, 0xdc, 0x3, 0x81, 0x6, 0xd3f, 0x8, 0x1, 0x2, 0x7, 0x7, 0x100, 0x0, 0x8, 0x2, 0x1, 0x6, 0x8, 0x7, 0x5, 0x4, 0xfff, 0x4, 0x0, 0xbf, 0xfb6b, 0xffffffff, 0xf, 0x6, 0x10001, 0x8, 0xfffffff9, 0x0, 0x2, 0x8000000, 0x80000000, 0x4, 0x4, 0x2, 0x4, 0x8d2, 0xffff, 0x6, 0x3, 0x1, 0x2, 0xff, 0x2, 0x55, 0x49, 0x1, 0x8, 0xb, 0x7, 0x8, 0x3d, 0x100, 0x3, 0x8, 0x2, 0x9, 0x9, 0x7fffffff, 0x8, 0x800, 0x7d6, 0x2, 0x6, 0x4, 0xff, 0x6, 0x4, 0x2, 0x30, 0x8, 0x5, 0x0, 0x9, 0xf, 0x6, 0x101, 0x4, 0x6, 0x0, 0x6, 0x1, 0x3, 0x5, 0x2, 0x9, 0x7, 0x2, 0x3, 0x5, 0x3, 0x10, 0xe2edfa24, 0x8b3, 0x4, 0x0, 0x9, 0x4, 0x0, 0x0, 0x7ff, 0xfffffffd, 0x8, 0x34, 0x6, 0x8, 0x848, 0x2cb1fb0c, 0x4, 0xc6b, 0xa420, 0x10, 0xe1, 0x81, 0x5, 0x5, 0xb3, 0x83d, 0xd4ce, 0xffffffff, 0x1, 0x400, 0x0, 0x2, 0x2, 0x80000001, 0xb, 0x5, 0x7, 0x34400, 0xef, 0x6, 0x2, 0xda, 0x8, 0xfcf1, 0x8001, 0x10, 0x10000, 0x0, 0x4, 0xb08, 0x3, 0xb84, 0xe18, 0x0, 0x7fffffff, 0x4894, 0x6, 0x9, 0x3, 0x6, 0x6a, 0x7fff, 0x3612, 0x100, 0x9, 0x8, 0x4, 0x7fffffff, 0x72e, 0xd, 0x4, 0x6, 0xd, 0x10001, 0xff, 0xffc0000, 0x101, 0x6, 0x6, 0x7f, 0x8b, 0xffff, 0xfffffffe, 0x6, 0x3, 0x4, 0x0, 0xe, 0x9, 0x6, 0x2, 0x8, 0x8, 0x3, 0xaca, 0x7, 0x3ff, 0x1d8, 0x758957a9, 0x0, 0x9, 0x2, 0x9, 0x7, 0x80000000, 0x1, 0x1000, 0x787d, 0x80000000, 0xff, 0x168, 0x6, 0x0, 0x8, 0x3, 0x56, 0x1, 0x10, 0x5, 0x0, 0x6, 0x4, 0x1, 0x0, 0x3, 0xd, 0x8001, 0x1000, 0x408, 0x5, 0x6]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x7}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x5}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x96, 0x6, 0x10001, 0x3, 0x8000, {0x7, 0x1, 0x3, 0x7, 0x9, 0x7}, {0x9, 0xf1e1fefa3953115, 0xeb1, 0xfff7, 0x3, 0x7fffffff}, 0x0, 0x80000000, 0x6}}], [], [@TCA_POLICE_TBF={0x3c, 0x1, {0x9, 0x3, 0x7796, 0x73d7, 0x4, {0xa, 0x2, 0x4, 0x0, 0x5, 0x8}, {0x5, 0x1, 0x3, 0x123, 0x5, 0x5}, 0x7590, 0xfff, 0x7}}, @TCA_POLICE_TBF={0x3c, 0x1, {0x2, 0x8, 0xa, 0x4, 0xa5, {0x7, 0x0, 0xe, 0x1000, 0x24a, 0x6}, {0x7, 0x1, 0x2, 0xb, 0xd2b, 0xfffffffc}, 0x5, 0x5c6, 0xd37}}, @TCA_POLICE_RATE64={0xc, 0x8, 0x6}], [@TCA_POLICE_RESULT={0x8, 0x5, 0x55a1}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x5, 0x463, 0x9, 0x10a00, 0x3, 0x7fffffff, 0x9, 0x8, 0x20000, 0x4, 0x6, 0x41, 0x9, 0x101, 0xe6, 0xd58e, 0x3, 0x1, 0x3, 0x0, 0x5, 0xb7, 0x9, 0x7a79, 0x2, 0xfffffffb, 0x2, 0x930, 0x3ff00000, 0xccf, 0x0, 0xe8d, 0x10, 0x2f, 0xfffffff9, 0x9, 0x401, 0x1, 0xe2b, 0x8, 0x7fff, 0x5b6, 0x1, 0x6f, 0x8, 0x5, 0x10, 0x6, 0x68, 0x5, 0x6a8, 0x1, 0x1ff, 0x6, 0x7ff, 0x30000000, 0x9, 0x0, 0x360, 0xe97, 0x6, 0x8000, 0x1ff, 0x200, 0x2, 0x3, 0x7, 0xe, 0xffffffff, 0xfffffffd, 0x80000001, 0x9, 0x0, 0xffffffff, 0xef2, 0x3, 0x3, 0xa223, 0x6, 0x2, 0x5, 0x2, 0x10000, 0x8, 0xfff, 0x5, 0x0, 0x3, 0x2, 0x8, 0x9, 0x1, 0x6, 0xeda0, 0x8, 0x2, 0x0, 0x7fffffff, 0x9, 0x1800000, 0xffffffff, 0x0, 0x4, 0x460, 0xfffffffe, 0x1000, 0x1, 0x0, 0x8, 0x0, 0xfffff72b, 0x8, 0xc4e, 0x7, 0x1, 0x2, 0x3, 0x6, 0x4, 0x64ae, 0x5, 0x5, 0x7, 0x352, 0x9, 0x9, 0x9, 0x1, 0x3, 0x9c1, 0x5, 0x1, 0x7, 0x0, 0x9, 0x1448d831, 0xb, 0x0, 0x1, 0x75, 0x4, 0x100, 0x5, 0x80000000, 0x5, 0x8, 0x693, 0xa6f, 0x2, 0x200, 0x47c9, 0x9c, 0x2, 0x1, 0x1, 0x4, 0x1, 0x0, 0x67, 0x0, 0x6, 0x5, 0x1000, 0x400, 0x9, 0x2, 0xb, 0xffffd5b9, 0x6, 0x8, 0x9, 0x5, 0x400, 0xb920ae7, 0xdb9, 0xdd02, 0x41, 0xa7f, 0x3, 0x222, 0xfffffffe, 0xbba, 0x72bd, 0x3, 0x470a, 0x0, 0xc, 0xfffffffd, 0x8, 0x5, 0x8238, 0x7, 0x3, 0x1, 0x3, 0x1, 0xf6, 0xcb1, 0xce2, 0x4, 0x4, 0x2, 0xfff, 0x2, 0xfffffffd, 0x2, 0x7, 0x3, 0x5, 0x5, 0xfffffff7, 0xfff, 0x73, 0x0, 0x0, 0x101, 0x5, 0x7, 0x2ce4, 0x4, 0x0, 0x0, 0x8, 0x2, 0x88c3, 0x4, 0x985, 0x4a4, 0x401, 0x4, 0x1, 0x5, 0xfe, 0xf, 0x200, 0x817, 0x1ff, 0x80000001, 0x0, 0x7, 0x7, 0x6, 0x3, 0x9, 0x10001, 0x80000001, 0x8001, 0x2a, 0x6, 0x8, 0x5, 0x3, 0x0, 0x40, 0x1, 0x3]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x200}], []]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1}}}}, @m_vlan={0xe4, 0xb, 0x0, 0x0, {{0x9}, {0x4}, {0xb8, 0x6, "38d0650393fac96c46ce1e456e3d90bc28724849384003226fe2be9313107cf040dd2b6913eb6332851a4dce8248430dc8d4b782762a1e46968e2e1d8366687de41403aee29768c25a15f8f3681085d6d14b80a76c580b65d29611971cd5a0d3805c8c67430416ce735f543dbd617ce9c31a5d591628e7cce2b0ecd8a14ac1544de0b7e90784c6b84f1e88188cff4513a07d16367813ab29264bed81dfc2a9052c4878ec25a92ac0c5c01b0da7efc1bbf0244661"}, {0xc}, {0xc, 0x8, {0x1}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0xe, 0x7}}, @TCA_RATE={0x6, 0x5, {0x5, 0x7}}, @TCA_CHAIN={0x8, 0xb, 0x84}]}, 0x1f04}}, 0x0) r12 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000b40)=ANY=[@ANYBLOB="14000000", @ANYRES16=r12, @ANYBLOB="01002cbd7000ffdbdf250c"], 0x48}, 0x1, 0x0, 0x0, 0x818}, 0x20000004) 3.567931946s ago: executing program 1 (id=13973): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000d00)=@mangle={'mangle\x00', 0x44, 0x6, 0xc80, 0x138, 0x138, 0x9b0, 0x9b0, 0xb48, 0xbe8, 0xbe8, 0x9b0, 0xbe8, 0xbe8, 0x6, 0x0, {[{{@ip={@broadcast, @multicast1=0xe0007600, 0x11000000, 0x0, 'geneve1\x00', 'ip6gre0\x00'}, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'batadv_slave_1\x00', 'veth1_virt_wifi\x00', {0xff}, {}, 0x11}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@uncond, 0x0, 0x850, 0x878, 0x0, {}, [@common=@unspec=@u32={{0x7e0}, {[{[{0x10, 0x3}, {0xffffffff, 0x1}, {0x1, 0x3}, {0x7, 0x2}, {0x6, 0x2}, {0x6, 0x2}, {0x1, 0x3}, {0x7, 0x2}, {0x6, 0x2}, {0x9, 0x3}, {0x9, 0x1}], [{0x6, 0x80000001}, {0xffffffc7, 0x4}, {0x7, 0x2}, {0x8, 0xffff}, {0x7, 0x81}, {0x3, 0x3}, {0x5}, {0x7, 0x3}, {0x7, 0x2}, {0x5, 0xfff}, {0x800, 0x1}], 0x9, 0x3}, {[{0x19008000}, {0x26bb, 0x2}, {0x7b3, 0x3}, {0x1}, {0xe, 0x2}, {}, {0x9, 0x2}, {0x10000, 0x1}, {0x0, 0x2}, {0x2fab, 0x1}, {0x597, 0x1}], [{0x7, 0x1}, {0x1, 0x5}, {0x7, 0x401}, {0x8, 0x9}, {0x8, 0x8}, {0x0, 0x4}, {0xfff, 0x4}, {0xd, 0x7ff}, {0x4, 0x6}, {0x3d, 0x5}, {0x942f}], 0x8, 0xa}, {[{0x5}, {0x4, 0x3}, {0x6, 0x2}, {0x0, 0x3}, {0x4, 0x3}, {0x7}, {0x4, 0x2}, {0x7, 0x2}, {0xffff, 0x1}, {0x4, 0x1}, {0xfffffff7, 0x2}], [{0xe547, 0x10000}, {0x4, 0xf78}, {0x81, 0x1c10}, {0x3}, {0x8000200, 0x5}, {0x4, 0x9}, {0x80000001, 0xffff}, {0xaf3d, 0x2}, {0x3c, 0xc}, {0x3e, 0x9}, {0x3, 0x4}], 0x0, 0x3}, {[{0x6, 0x2}, {0x5, 0x1}, {0x5}, {0x1, 0x1}, {0xdeca, 0x1}, {0xfd}, {0x401, 0x3}, {0x1, 0x2}, {0x0, 0x2}, {0x8, 0x2}, {0x81}], [{0x1, 0xfd0d}, {0x9, 0x4}, {0x80000001}, {0x4, 0x400}, {0x9, 0x3}, {0xa, 0xfffffff0}, {0x9, 0x4}, {0x4, 0x2}, {0x10, 0x59d}, {0x7, 0x1ff}, {0x4}], 0x8, 0xb}, {[{0xffffff11, 0x2}, {0x6, 0x2}, {0x902, 0x1}, {0xffffff00}, {0x9}, {0x1, 0x2}, {0xffff, 0x1}, {0x9, 0x3}, {0x4, 0x2}, {0x70c8}, {0x7, 0x3}], [{0x3b8a6dc3, 0x7}, {0x9, 0x2}, {0x8, 0x2}, {0xf, 0x3}, {0x5, 0xffffffff}, {0x1ff, 0xff}, {0x3, 0x96e}, {0xffffffff, 0x400}, {}, {0x3, 0x934}, {0x5, 0x7}], 0xb, 0x9}, {[{0x20c, 0x2}, {0x72, 0x1}, {0x2, 0x2}, {0x7, 0x1}, {0x7, 0x3}, {0x8, 0x1}, {0x5}, {0xffffbc3b, 0x1}, {0x7fffffff, 0x3}, {0x42, 0x2}, {0x8, 0x1}], [{0xe43}, {0xb, 0x8000}, {0x2, 0x5}, {0x3, 0xe9c0}, {0x5, 0x7f}, {0x9, 0x3}, {0x6, 0x40}, {0x11f, 0xffffffe9}, {0xc35a, 0xd16}, {0x6, 0x4}, {0x9, 0x18a}], 0x8, 0x3}, {[{0x7, 0x3}, {}, {0x9}, {0x0, 0x3}, {0x6, 0x2}, {0x6, 0x2}, {0x401, 0x2}, {0x6}, {0x9, 0x2}, {0x7c42, 0x3}, {0x40000000, 0x2}], [{0xdff, 0x4e}, {0x3, 0x7}, {0x1000, 0x1}, {0xfffffff8, 0x8001}, {0x9, 0xb34}, {0xfffffffa, 0xa}, {0xae9c, 0x7}, {0xe, 0x8}, {0x8, 0x7}, {0x6, 0x3}, {0x9, 0x92b}], 0xc, 0x7}, {[{0xfff}, {0x1, 0x2}, {0x2, 0x2}, {0xa640}, {0x0, 0x2}, {0x9}, {0x4, 0x1}, {0x0, 0x3}, {0x80000001, 0x3}, {0x0, 0x1}, {0x8}], [{0x1, 0x73}, {0x10000, 0x9}, {0xc, 0x3}, {0x8, 0xffffffff}, {0x7, 0x5}, {0x86, 0xf}, {0x3, 0x2fc3}, {0xf65, 0xa2f}, {0x15064f6, 0xede}, {0x8a2}, {0x2, 0x6}], 0x7}, {[{0x80000001}, {0x5, 0x2}, {0x687, 0x2}, {0x20000, 0x1}, {0xab50, 0x2}, {0x0, 0x3}, {0x7}, {}, {0x5, 0x1}, {0x5}, {0x7}], [{0x64d, 0x3}, {0x7, 0x7}, {0x10001, 0x2}, {0x1, 0x6}, {0x5, 0x9}, {0x0, 0xcba}, {0x40, 0x4}, {0x2, 0x4}, {0x2ca6, 0x9}, {0x80000000, 0xc9}, {0x6, 0x7}], 0x9, 0x3}, {[{0x9, 0x1}, {0xe35, 0x1}, {0xffffffab, 0x1}, {0x401, 0x3}, {0x4, 0x2}, {0xa}, {0xfffffeff, 0x1}, {0xc9, 0x2}, {0x6, 0x1}, {0x8, 0x1}, {0x3, 0x1}], [{0xb6f2, 0x80000000}, {0x0, 0x9}, {0x65, 0x4}, {0x3, 0x982}, {0x5, 0x7f}, {0x7, 0x9}, {0x6, 0x4}, {0x3ff, 0x4}, {0x1, 0x7ff}, {0x7, 0xffff}, {0x3, 0x1}], 0x6, 0x1}, {[{0x6cd8867f, 0x1}, {0xb42}, {0x7fff}, {0x4, 0x2}, {0x65b, 0x1}, {0x61, 0x3}, {0x78a8}, {0x4, 0x3}, {0x8001, 0x2}, {0x3, 0x2}, {0x5, 0x3}], [{0x4, 0xff6}, {0x0, 0x3}, {0x4, 0xe8aa}, {0x7, 0x4}, {0x0, 0x2}, {0x5, 0x3}, {0xfffffffc, 0x3}, {0x15c, 0x80000000}, {0x9, 0x3}, {0x91, 0x80000001}, {0xfffffff6, 0xbd}], 0x0, 0x5}], 0x9, 0x1}}]}, @unspec=@CHECKSUM={0x28}}, {{@ip={@loopback, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth1_to_team\x00'}, 0x0, 0x70, 0x198}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x0, 'system_u:object_r:dbusd_etc_t:s0\x00'}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00', {}, {}, 0x0, 0x3}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0xce0) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_WANTLQI(r1, 0x0, 0x3, &(0x7f00000000c0), 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0xd, &(0x7f0000000040)=ANY=[@ANYRES64=r1, @ANYRES32, @ANYRES8=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x75, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffff88, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r2 = socket$inet_udp(0x2, 0x2, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r3, 0x10f, 0x80, &(0x7f0000000080)=0x8ef, 0x4) ioctl$NILFS_IOCTL_GET_SUINFO(r2, 0x80186e84, &(0x7f0000000300)={&(0x7f0000000280)=[{0x10000, 0x3}, {0x9, 0x7, 0x1}, {0x7, 0xffffffff}, {0x0, 0x10001, 0x2}, {0x7, 0x8, 0x2}], 0x5, 0x10, 0xc, 0x2}) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r2, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x300) setsockopt$inet_int(r2, 0x0, 0x14, &(0x7f0000000440)=0x135, 0x4) recvmmsg(r2, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) 3.455216068s ago: executing program 2 (id=13974): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a050000000000000000000200000a0900010073797a310000000034000000030a010100000000000000000200000108000b400000000208000a40000000040900010073797a310000000004000c0014000000110001"], 0x7c}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000b80)=ANY=[@ANYBLOB="180000000000000000000000f2000000711203000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) getsockname$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000100)=0x14) r4 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x89e0, &(0x7f0000000140)={'wlan0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3b}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000380)={'ip_vti0\x00', &(0x7f0000000300)={'gretap0\x00', 0x0, 0x20, 0x7800, 0xc, 0x800, {{0x13, 0x4, 0x0, 0x4, 0x4c, 0x67, 0x0, 0x2, 0x29, 0x0, @multicast2, @rand_addr=0x64010101, {[@lsrr={0x83, 0xb, 0x55, [@empty, @rand_addr=0x64010102]}, @end, @ssrr={0x89, 0x2b, 0x5d, [@loopback, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, @private=0xa010101, @empty, @loopback, @local, @multicast2, @loopback]}]}}}}}) r6 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r6, 0x11b, 0x6, &(0x7f0000000000)=0x40000000, 0x4) r7 = socket(0x10, 0x803, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffb, {0x0, 0x0, 0x0, r9, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x6, 0x6, 0xc21, 0x101, 0x6, 0x5, 0xbd, 0x100, 0x4}}}}]}, 0x58}}, 0x0) sendmsg$ETHTOOL_MSG_PAUSE_SET(r1, &(0x7f0000000480)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x54, r2, 0x419b7efea70bb139, 0x70bd2b, 0x25dfdbfe, {}, [@ETHTOOL_A_PAUSE_RX={0x5}, @ETHTOOL_A_PAUSE_HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x8041}, 0x20044840) 2.579277956s ago: executing program 0 (id=13976): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, 0x0, 0x0) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) sendmmsg$inet(r0, &(0x7f0000001240)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000b80)="f77d2b5dd5f7d74f0748cf3d2cf218d644566a14103b1c7dd35fd2951bd022f10f2dc7f4ce0d8ac5f4abaca4b97b706153756913b7dd48248b5bfb10460019248bf238743fa2aeb5bef21ce832db670920dc5e911ef2ad63e849901d1001129dbacbfd4924d7545517fd18b5d29978f32a5b5c81755cb89cc0490958ba3211eb99df5cdbbc0f9c941aaa1495893dada02d8188acd26b5afd7476413f322c8f79de769debb56343f3eded2dca93ed6641e50fe595e1e0dbe84ed0f70abb4ed2dfb6648df7db", 0xc5}], 0x1}}, {{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000640)="42e013913edbeb683c44e18a52b5a2462064ddd92caaba941de80d06047dedb7eeeff3a27eacf4c416b6979d6c918608807c44d01535dbaab3b390086e4fd43c6b5931187023646d6beac2340fdc7a0d81214ac76a818f64d287311e8828dfd3e3dd67efdb129a6e52745d1540e570891f6bf411cc16a18c4d34e522a1f003498f1a03ea1f8828b6c902286c71a9bc21923972dacfa74fef6a0f", 0x9a}, {0x0}], 0x2}}], 0x2, 0x2090) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x1e, &(0x7f00000004c0)=0x1, 0x4) shutdown(0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001900)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94) close(0x3) 2.492510406s ago: executing program 3 (id=13977): r0 = socket$pppoe(0x18, 0x1, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000) connect$pppoe(r0, &(0x7f0000000080)={0x18, 0x0, {0x3, @local, 'geneve0\x00'}}, 0x1e) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f0000000100)=0x1) ioctl$PPPIOCCONNECT(r1, 0x4004743a, &(0x7f0000000380)) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nfc(0x0, r5) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f00000000c0)=0x0) r8 = socket(0x1, 0x80805, 0x3) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r8, 0x84, 0x1d, 0x0, 0x0) unshare(0x400) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) sendmsg$NFC_CMD_DEV_UP(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r7], 0x1c}}, 0x4008054) write$nci(r4, &(0x7f0000000000)=ANY=[], 0x4) setsockopt$IP_VS_SO_SET_STOPDAEMON(r3, 0x0, 0x48c, &(0x7f0000000040)={0x1, 'geneve1\x00', 0x2}, 0x18) r9 = socket(0x10, 0x803, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000000000000000005e1affd502000000090001005b79f8e273797a300000000008008ed67864edd5dafb0000209a8dc0b57a01030201030000e6ff00000000020000000900010073797a3000000000090073797a320000"], 0x7c}}, 0x20040800) sendmsg$NFT_BATCH(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x290}}, 0x4048010) sendmsg$IPVS_CMD_SET_INFO(r9, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r9, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r11, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) ioctl$FICLONE(r2, 0x40049409, r0) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) mmap(&(0x7f00009c5000/0x4000)=nil, 0x4000, 0x3, 0x28012, r12, 0x0) mmap(&(0x7f00009c6000/0x2000)=nil, 0x2000, 0x3, 0x28012, r12, 0x1000) 2.359451412s ago: executing program 0 (id=13978): bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000240)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="320000001400000000000000", @ANYRES32, @ANYBLOB="444fb68d6fa6fa77dd004043ac7a5f68c4328a4ba29b22a36b46f4367ce26e", @ANYRES64=0x0], 0x20) r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) socket$kcm(0x29, 0x5, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000500)={'macvlan1\x00', 0x20}) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000021c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0180000000000000000003020200090001"], 0x20}, 0x1, 0x40030000000000}, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_x25_SIOCDELRT(r4, 0x890c, &(0x7f00000006c0)={@remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x2}, 0x3, 'veth1_to_bridge\x00'}) setsockopt$inet6_udp_int(r1, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4) r5 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r6, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) ioctl$sock_bt_hidp_HIDPCONNADD(r5, 0x400448c8, &(0x7f0000000340)={r6, r6, 0x7fff, 0x0, 0x0, 0x9, 0xc1, 0x16c0, 0x9, 0x97d8, 0x1, 0x9, 'syz1\x00'}) ioctl$sock_bt_hidp_HIDPCONNDEL(r5, 0x400448c9, &(0x7f0000000000)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}) socket$kcm(0x2, 0xa, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB], 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x1, 0xc, &(0x7f00000004c0)=ANY=[@ANYRESDEC=r1, @ANYRES16=r2], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) 2.35452854s ago: executing program 4 (id=13979): socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet(0x2, 0x3, 0x2) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) socket$kcm(0x10, 0x2, 0x10) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000280)=ANY=[@ANYRES16=0x0, @ANYBLOB="df4800000000000000000c"], 0x20}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) ioctl$sock_SIOCBRDELBR(0xffffffffffffffff, 0x89a1, &(0x7f0000000500)='wg2\x00') r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f00000004"], 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r0, 0x0, &(0x7f00000000c0)=@tcp6}, 0x20) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x2) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5", 0x4) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000600)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x18, 0x6, 0xff, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x2}]}}}}}}}}, 0x0) 2.23906774s ago: executing program 4 (id=13980): socket$nl_generic(0x10, 0x3, 0x10) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/time\x00') socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) socket$kcm(0x2, 0xa, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) socket$packet(0x11, 0x2, 0x300) socket$nl_route(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_sctp(0xa, 0x5, 0x84) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$netlink(0x10, 0x3, 0xf) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)) socket(0x10, 0x803, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r0], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 1.804766237s ago: executing program 3 (id=13981): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1, 0x0, 0x0, 0xb305e06daeb01ab2}, 0x4000) 1.802322921s ago: executing program 2 (id=13982): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000001c0)={0x28, 0x1d, 0xfffffffb, 0xffffffff}, 0x10) write(r0, &(0x7f0000000040)="240000001e005f0214f6fffffffffff8070000000000000000000000080009a60d000000", 0x24) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$SIOCGSTAMPNS(r1, 0x8907, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r2, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) sendmmsg$inet(r2, &(0x7f00000023c0)=[{{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000001100)="05a76fc03b978589c358d1d2722d0d72b048fb091cf24f6e22363c864aa6979dbe570b7550ea1b72702ceca499306ce8b4713bb9ecbc6b9d4142a1e871fc93c427087e2f6133b4b77e5f7b3a3aacbd63948c2e507817", 0x56}, {0x0}, {0x0}], 0x3}}, {{0x0, 0x0, &(0x7f0000001c80)=[{&(0x7f0000001740)="c22fe821d2d0", 0x6}], 0x1}}], 0x2, 0x800) read(r1, &(0x7f0000000000)=""/149, 0xaa) 1.767506756s ago: executing program 4 (id=13983): socket$inet(0x2, 0x6, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000740)={@empty, @private=0xa010102}, 0xc) 1.694180583s ago: executing program 1 (id=13984): r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x4a, 0x0, &(0x7f0000000180)) ioctl$BTRFS_IOC_SUBVOL_CREATE(r0, 0x5000940e, &(0x7f00000001c0)={{r0}, "96e20b1384717f542c77fdb8dc004eddfdea7fe504a07157cfd5a7f4cf86a6e00f99ecb9d67d28747ce24c2ea922218e6b490c2d8e9c9b032baa5e5d821de4bddaeb83698e627f3b670f067b64ffbf12d52afed53a70513383e39d314ab4b0a5d56aedf37e8ed47699a4d141f4861517aaba588bb56a92555d999eb9228db8b66817555ea4da488c93916a5b0fead39a9fae9156ad898fee95b6679bf358be498b84fff77517e2f383339a8732a410bd7ed80ac73aa1a1226b8a29af0682bdde738e579e6ab2f2e41140435836813b94f518a8cda81c3e32e2a65b91299391ff5f7f2dc6dc08cc353bb70dc4203231803d35e00c239cd0d961824b310efa033da9798d63f13780a8d1a80d94b17b2321d0f2fa94ea35d16452bd8f342a3f0a074e3eca38050e43acaec11eabc27bdb980f7b0668e985586d19dbc2da02367c5d193448b8ba3ebacb446d652bd3738087df1c2bc92645249e0d3c02b84a4a4e6fcbaf5eb035d196840bcf0ac97e8e0cbc54ffe2c9375fb4751ea80acca6bb4e553cf5d17e06e71db93f152670fb0c57f96ef05c2dd590af66b3b63f5b6ee4561cde4b8180bed1d3b9eea618b43f85a264e1ff936cd6414ecbb7ace7ef4336682eb6734c80d406cb0c40c1073a9e09d9c9252d29a634c4306456d5988221d91182ca6c3c8ca1fd33be296c719a757c0ea2a426c88d2b6d7f9f687e1340ce70ae8a526590003785596c253d08885b2a1b015fcca6f7251f6f6c9f8f4cc54374abc39ccece7bc06239a7c516db8cfbb6ce2a6470338ea84df8b6ed50d7cb6aefcfcfaed40b9e307770a0edfe20cb8bd180a719fa7e234324d01d7975df9ed9d5da176aea30b03ba69a51160bf5deb999284b594b946250a7296659b2c3da4f256e1b5640b9b94760d331586ad7b3eec749b99f48225f1ba1eb48649d73a88ee0ca32e4f25aeb8f55cc1676b932a45b2df72b46dc20bcf11005579d8cd76369f02b77cfcef312faaab8e87088eddb76584e12e90efe02eb665c29a6de7b29c857c042e07b8cce817d51c3f6c030a76df473b1315bc2e91630ecc975910864f233c69a26a41d3ea40d6103d3030645e4de2d2c635c2ccaa1d9a8c5f74eec0e0b18088f90b76a11aa170480ade3e883467f08a1dc449b7697fe941b4e20a705208db62ea9913710967582336efa14f8fe9b6f0c048fe02f3a0151d22239302fc58e0e2920a65d6f5ac4cda1c6870a9019fdf7aa0a647e1ae60c0bed0fa53f1f1dc3a0778a24839a719453d827785e86562bbd7e975ca8a33e9fceed0d1a45dae96a2463eee701dd9ed66d2fb6cac9471b0e67a94e10bc8130b4f3da5378727deea99dc3dba48d568d87941026a85556f275ad7f76b2982b71ae20d6917a559397c4ae8b08ba8d04e908209c3fcc4f773620512f333da8625f30e3047a361b9f8cc31051fcb2dc81bbeaeada6f8e4648ea9498a799ba10f47ff3d918afbaf2497c4d0de3a0afdd00d16de5e887fe898a18e4e22ebdba5e9fd5db7c5a554666095c5802d20e18d13c73cbbdbe88bfbb1c812e2f5b54721e637e1614ebb2823be368ad26c271959018b4946d760f2bc28b59e1906ef6c79e828fca316c31124c4d04c5c19378d8e03f7d1fb4d003ea313bd6eced04e8beb22be7694b4028ff44c87525fa6c52a2fad81aaf40bceb2ee6d0ab6a123d5d6d0b45016ef3e6a49568a31df626d1947ec0f727cb0509e648572b1617f5f70e6f07ddfdb7edeec3ea82a47b609103bf306be08c44e07841682d435be07e4dd32b1aa9a6d451853ab275de57015235218d2838b72c475abeadda76cc84ef572e1d6ecd91c041886647f1af38150c67768dcc0a9e38dc49a19d9569a1cb5ff6f29fb1c9672d968bc7032851e2d827c2aa4a88df1c279e721a86edd3fed009332dd002e76d609432509024ae4f48c9560072b0c371df19e8eeb8c820c196da891f9e5f32f25d5a64c4fb3acda46171202560d8499a934ade4f199692cc0c669dd7134e783d123b03f1aaef51c88d1b97961fce49a16a9dba3b3df84264e532fffc33d135d96b8163f51b5dac5fb99332e4bbdc660acf10ba6dae2581a014a130361399a60432b914ae256875efb68e801b92097872519015662170d8d038df286067d3aa7f5a32ed93864316ae7f446d35d508b87f1304074f03fa91ecbfaba146dd0e59ecab069bd2302ac9206a47cbfcbb73fc5426d16830bc9de325e594821a0eb93eb9bf0f6dc4f6312d2e4f5668b17fa49bd188c9d558177b5f7133085a0052ace80f002c18a936257a970f2206e50952bdd2583a04c096d80f42e7ef6211106630b74af7c9a2e101446dcf7a7a39fc9e319fd745e2624d8652b286902fdb8300ae2416eda024b623f3ebcfde74b5a950c243fbd0c3c3acc77180f8e97009b4834c5fb6554f3c772060f08aa7a4948c4c86ca47e2918eb8a6b68eef288af9833e6b303b3b42ccbafc294661a71a08175216c6b903bcffe0613f62ddbb763ecdbef1e2bd91b815aae9e6fecaa532ca5b40ed59bf171d1b7a57ee81c0bda2da401a0a2773faa99db8a6178812913f2006d53524f2b4ede32a5b41e01561563a039970b442149452b2601944b6e854b385ee4582993750d6f13a8c0dad9d2993cb294a70230d0388cef5d260c46929e7288b6314575aeac583acf2fe8767502354d6e37e14e0a14bb24611244f4f66f0dd1b056893949967384ba30fcdc66c1aebc5065e36630de68b9f682bd9493a7963621cd6c2890827128922c3f4020c45b791be22d82e2154e75b16b9494feae2ba78f42b799e43070497e2f7ca14c642f4bf3ee325aba68cc8854b1800104eebd2ccd8ff7b198b5c634cc935adff7f2e568f902901bcf467ef312acd7d7451960c175f5b7f77cdf50ded4dcc30caa1669c901959db220c397826b6a815f3a25db7a624d9372d6858c239472c2943c852b9add968de0763134c9f4bf76e957ce8447c0bc144587bb5c38b315223df49bc86306ea0b587cbd71908e90c521ad2ff9b84a85e742b5d07825fe2920b66af06f582770e1bf22d1af04ccc5c4652630b96512b09507c105de9966cf7b9d26974a91bd5c47800598f986579f3653577ecbe86978e280bbc2461ea119c3333498d254b721c02db323f4c8d2031e5fae715977563165ddcefb82df79efea9ac60fb49eb2f3e23434025094904b171454dc3e1255e1629070ef4121a38d1a82febd2eb80f0efed1b3e417f5637981422b4287e19d38bf9c480a12e60b222b7ed7e0519587715b0cfb445166eded873d45e2eb2235b603b6cb1c5e02fb4a6d09fec259b22d6601579fa2255eb80a8d3434bdfa5d073926c9a0644748c0228b2e5d44aa6355fc953fc6d269fa98afbf756aaa4fc74892eb7d2a3452e0789aacaf4f41219a6ab1b581ec815ad9ae7f5234b86b6db2ba66ac308d65776312ce2be9c8c67a507056e1ee4cfc3be02da23e00e85ef63ee9e6ffcc8d74aca247326908fc8431509f6bb9b2c938a19344ad6055c1a72188960ca76eca1b5ec3f8ca898361e3cec7bf377f6ff28a1fe3e1bed4d0f9c3d164e54c2d3bcaa7870ac59d278de5f3888e784957a37ed99947b45111ae2a84f350756b378f54351cba21a2c9a20676cb93d3babb91b1968fd451afb72a1d0387e0e84f1b3f4d6b9dcf865a8ed3a1753edf107800ce2f8794a2b47b4b71e8abef17421517aa1d65d6f1e212da85272a26f35f9744f6102f5769f597f9d047ce0610690de4021f27b14ed75bac599bc463516cd6451c40c1c6ce5af9e9d6c51abb83e7fe348c0768b4ff4c61138ec9d4063b5948571271b22f7c2299b783a85d1e4b0c949c6999a924fef54fe0229ca0b1fd28f53f6c7a0f053b331c541628e64c8be676be6f83316e9fbc6553cb46310f490987bbca3079102b89cd2fafc42b48d188543f4065c11386a36d5bfb7844659eb13ccc32c4c43deeaa0be07efca1ebf2075ada0365b4f83a61779446470ce9ba723588eaa348fdeebd300278236ffe11c539988a9d3465f9b44c4a7d29c1923ae4da734f419e002e1aad6ee3afef8784c0830871bd70b9382fcefe4a3f0753fe2630f6db8e355b4a7b6354f5c7bf1bb42c1f339cf03305628c1116d1b0a9639d81b41adf56608e9f2c6e98f24c76e69907708d00289ec4b208c803d8992edce8e9e955d42e2cc76cf9d9a5583cc4311d748001f776b90aef9eadc814c852c0643791d4633bf3a3cd9eb4b55accdc67fa80046269a0dcef8dc5dfbb93574a80a73d9bf8aaf0ee1b0d1f1eaa1c26b3f3c9bfa5b8393fb7ec32f9b5a6f8764e7bc9286a328c4ca1b14128e16e344a6e835f75a0f949a7716685111304ed033e027b6db10da34c07583ce7c1dd55fd68857fb729a45306020cf6b936c3645be237bd5944a98b04ad1857a8892d4440fb36877702063df6c8a8d5bb322b54e7387dffde1826875b56b87d99417d28cf3257c9596dc04b00aaef7ced35156b7c8342ef7ee7b0e52370076702333b23d5488a4bdc9cf3584ae42014e9bb324a677b560701183eac97bd31792d5449ec7488462f0e0193633a052ea98fd45edc7263b790a4c9762216de12f087988e0fe2ce7329722ba3e39aed328b294b1e511f302dc4c0d510a32b779b4a77bfb680be12de78a572280013a5dd677e329d63e03cef4d0206b839fb6f240edca1395f558489885db4c3cc357190b6811903fad4fc5bac44b51d7358bcaca99165293dc35fb9f8e21c2090e4aaa714a24b9d13970cb19f0762f3e4cc262d96b3e8e6879fa4b3b00198950f5c2833cbb504749588b699e7b43344daf224b742d1aba12806c32a754aa82b8c4c538119e53d97c425b8ecda0ee25863940e89acbcffad38cb7a95181917624e299969bba34cb064f567836f164fec34f64b124ab2589ee239ff00268a1989fc2d50f561482b9e78f3d8767c5ff4ed1198954f9a1cd4da268b8e27e3afe86676552c309f119e6a4ea9466bf4dd8d0b0a54198c5ee9c23d5ad805d935455de53931e039a4127b984fbf9afbc861fb56562cdb12d741139ada28214a63cd140e3ee2f65ec2aca4c5f1a215f8b12a22280fcfd93f2f6b4663d0d74cf6eba0a71ece50483a72895d0870885406f784dac7217effb7c6234c57b3c78ac66134cfac23aca859175c6ad15cc60b6ddc1a4414d1b10d696cbd1338bf041c060f98bd8cfc5c68b9c855e688b456093e8836485b6793948078ebb293853cbb38a3f3b3355e75a0f532e38064092af327ee6cb29266fb41e11234c080f1502bef0a712c8de30d9f20dd7cddad761aa7eede4eb0a0e542d5ce9ea2c5446dbb5b91dfda204fedcc78123ccf224056a9de7da6cb60dd99e65c9332d25cc23f8733923891d0d545ee843e761a1c1ca4d62e0cea4d740a8cf6736957085c681cd7f5ba09c9f56e806b4b7492bbaff01d3defb1ff2d4336250cf5e6d65b3aa4a8c0153f6aecde15b2fd0254686a899783110511c7c0c15a4a35eb82b2323fedc68356ccac79bcdadad74c673608c0b047f0b6d7c867fcf99782d0a735c885ba36e15f93bb90ee105a4341c3ea75c11e1dbb6fb85ac4a620e5a909024b3d7f145c041ff210a456e930123ab922b478d62a91ee4a3016f79801749347b91bca07f3addeb33986f1c1fe9f2f0da616b96619a7fa13a34dc6078007b4e1f2791df5b449451d29866a3ced38d3ffb3cc3a897a26a835a0c22283d3ec4614cf2c7c6b0bd14ee696be2daef7235018468f82b1b7a71aa2b8887e05db910"}) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001680)={0x18, 0x2e, 0x107, 0x70bd2c, 0x25dfdbfd, {0x2, 0x7c}, [@nested={0x4, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) 1.626161281s ago: executing program 0 (id=13985): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r0, 0x8983, &(0x7f0000000000)={0x1, 'pimreg0\x00', {}, 0xcd}) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1400000010000100000000000000000005000c0a010400000000000000000a00000609e1010073797a31000000000900010073797a310000000014000380100000800c00018006000100d65b000013eb00001100010000000000000000000700000a"], 0x68}, 0x1, 0x0, 0x0, 0x24000840}, 0x40) getsockname(r0, &(0x7f0000000180)=@nfc_llcp, &(0x7f0000000340)) close(0x3) 1.524660568s ago: executing program 3 (id=13986): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) (async) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000014c0)=@newtaction={0x68, 0x30, 0xb, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0xfffffffffffffe7b, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x5, 0xff, 0x4, 0x6, 0x6}, 0x4}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x2000a804) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) syz_emit_ethernet(0x82, &(0x7f00000000c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x74, 0xfff8, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x3, 0x0, 0x0, {0x16, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, @remote, @loopback, {[@noop, @timestamp_addr={0x44, 0xc, 0x0, 0x1, 0x0, [{@local, 0x7}]}, @cipso={0x86, 0x28, 0x3, [{0x2, 0x6, "84924d89"}, {0x6, 0x2}, {0x2, 0xe, "f413567c09029e947789b807"}, {0x5, 0x8, "c92d3002d91d"}, {0x0, 0x2}, {0x0, 0x2}]}, @cipso={0x86, 0xc, 0x0, [{0x0, 0x6, "ade34b13"}]}]}}}}}}}, 0x0) (async) socket(0x400000000010, 0x3, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (async) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r6, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0xd68210}], 0x1, 0x0, 0x1f00000000000000, 0x200000}, 0x1f00) sendmsg$tipc(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) (async) recvmsg(r4, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) (async) sendmsg$tipc(r5, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x4) writev(r8, &(0x7f0000000300)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560aff820fffff5bab00070000002058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100030c100000000000224e0000", 0x58}], 0x1) (async) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x34, r9, 0x629, 0x170bd2a, 0x25dfdbff, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES_HIGH={0x8, 0x16, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x104}, 0x40000) (async) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_int(r10, &(0x7f0000000080)=0x4, 0xfffffe7d) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x14, 0x14, &(0x7f00000000c0)=ANY=[@ANYRES16=r2, @ANYRESDEC, @ANYRESOCT=r2, @ANYRES16=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80e872}, 0x94) (async) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)=ANY=[@ANYBLOB="380000006800010003001000fdffff7f00000000000000000c00020001000000150000000c000c80220001000000000006000300"], 0x38}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r1) (async) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000080)="f7", 0x1}], 0x1}], 0x1, 0x40800) 1.457965049s ago: executing program 2 (id=13987): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f00000002c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffff4, 0x0, 0x0, 0x0, 0xff20}, [@call={0x85, 0x0, 0x0, 0x36}, @call={0x85, 0x0, 0x0, 0x5}]}, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000240)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x50) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x0, 0xa, 0x7ffffffb, 0x14, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x2, 0x0, 0x2}, 0x50) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendto$inet6(0xffffffffffffffff, &(0x7f0000000140)='\x00', 0x1, 0x0, &(0x7f00000002c0)={0xa, 0x0, 0x1f0c, @private0={0xfc, 0x0, '\x00', 0x1}, 0xa}, 0x10) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x2, &(0x7f0000001c40)=ANY=[@ANYBLOB="85000000a800000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000060000000600000000000000", @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x50) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0c000000040000000400000009"], 0x48) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000000)={r5, r6}, 0xc) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000024c0), &(0x7f0000000140), 0x3, r6}, 0x38) r7 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$inet6(r7, &(0x7f0000000140)={&(0x7f0000000180)={0xa, 0x4e24, 0x80000, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x2}, 0x1c, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1400000000000000290000000b0000005c7d7808000005abb139b7bf0000"], 0x18}, 0x40e4) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0xf, 0xc}}, [@qdisc_kind_options=@q_fq={{0x7, 0x20}, {0x4}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}]}, 0x38}}, 0x0) r8 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r8, 0x11b, 0x3, &(0x7f00000001c0)=0x100000, 0x4) 1.388142253s ago: executing program 1 (id=13988): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x4, &(0x7f0000001440)=ANY=[@ANYBLOB="180000000000000000000000fdffffff850000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x59, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2000}, 0x94) 1.387308024s ago: executing program 0 (id=13989): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = accept$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @private2}, &(0x7f0000000100)=0x1c) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000400)={{{@in6=@private1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@initdev}}, &(0x7f0000000200)=0xe8) sendmsg$nl_generic(r1, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c0000002000010025c77000fcdbdf25601800000800a500", @ANYRES32=r3, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x20000851}, 0x24040004) getpeername$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000140)=0x14) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=@newsa={0x2ac, 0x10, 0x1, 0x0, 0x0, {{@in6=@remote, @in=@private, 0x0, 0xecdf, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, r3}, {@in6=@loopback, 0x0, 0x32}, @in6=@private1, {0x0, 0x0, 0x2, 0x4, 0x0, 0xfffffffffffffffc}, {0x3bc7, 0x7, 0x80000004}, {0x2, 0x0, 0xffffffff}, 0x70bd2d, 0x800000, 0x2, 0x4, 0x4, 0x4c}, [@sa={0xe4, 0x6, {{@in=@loopback, @in=@multicast1, 0x4e21, 0x6, 0x4e20, 0x0, 0x2, 0x20, 0xa0, 0x3c, r4, r3}, {@in6=@mcast2, 0x4d2, 0x3c}, @in=@empty, {0x100000001, 0x1000, 0x2, 0x22, 0x1, 0x5, 0x6, 0x7fff}, {0x6, 0x0, 0x7fffffffffffffff, 0x101}, {0x300, 0x0, 0xfff}, 0x70bd26, 0x3502, 0x2, 0x1, 0x1, 0x24}}, @algo_crypt={0x48, 0x2, {{'cbc(serpent)\x00'}}}, @algo_auth_trunc={0x8d, 0x14, {{'hmac(sha256)\x00'}, 0x208, 0x80, "aef356316f6f7d6ab0f8637b42ff0300008aa309bdd3f9dcffb669556b74c61e032441fd13571c4c64597441f3cf2a548c89a004673b82b4618529a52c676f7c94"}}]}, 0x2ac}}, 0x0) 1.208243645s ago: executing program 4 (id=13990): socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet(0x2, 0x3, 0x2) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) socket$kcm(0x10, 0x2, 0x10) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000280)=ANY=[@ANYRES16=0x0, @ANYBLOB="df4800000000000000000c"], 0x20}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) ioctl$sock_SIOCBRDELBR(0xffffffffffffffff, 0x89a1, &(0x7f0000000500)='wg2\x00') r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f00000004"], 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r0, 0x0, &(0x7f00000000c0)=@tcp6}, 0x20) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x2) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5", 0x4) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000600)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x18, 0x6, 0xff, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x2}]}}}}}}}}, 0x0) 1.188937329s ago: executing program 1 (id=13991): socket$pppoe(0x18, 0x1, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x1, @broadcast, 'tunl0\x00'}}, 0x1e) connect$pppoe(0xffffffffffffffff, &(0x7f0000000040)={0x18, 0x0, {0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x24}, 'macvlan0\x00'}}, 0x1e) socket$inet(0x2, 0x80008, 0x80000001) r1 = socket(0x2d, 0x2, 0x0) bind$xdp(r1, &(0x7f0000000080)={0x2d, 0xf, 0x0, 0xc}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendto$inet6(r2, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56) r3 = socket$inet(0xa, 0x801, 0x84) syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x100, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x1, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x64, 0x0, 0x0, 0x32, 0x0, @loopback, @loopback}, "00186371ae9b1c03"}}}}}, 0x0) connect$inet(r3, &(0x7f0000000280)={0x2, 0x3, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) accept4(r3, 0x0, 0x0, 0x80800) close(0x4) sendmmsg$inet6(r2, &(0x7f00000002c0), 0x0, 0x8800) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x604ab000) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000001380)=""/4080, 0xfffffffffffffdcc, 0x0, 0x0, 0xffffffffffffff87}, &(0x7f0000000000)=0x40) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000540)={&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000580)=0x40) 1.185320546s ago: executing program 3 (id=13992): recvmmsg(0xffffffffffffffff, &(0x7f0000003380)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/166, 0xa6}], 0x1, &(0x7f0000000200)=""/116, 0x74}, 0xb269}, {{&(0x7f0000000680)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private0}}}, 0x80, &(0x7f0000002180)=[{0x0}], 0x1, &(0x7f00000021c0)=""/232, 0xe8}, 0x3800000}, {{0x0, 0x0, &(0x7f00000024c0)=[{&(0x7f0000002340)=""/209, 0xd1}], 0x1}, 0xb}, {{0x0, 0x0, 0x0}, 0x7}, {{&(0x7f00000028c0)=@caif=@rfm, 0x80, &(0x7f0000002ac0)=[{&(0x7f0000002940)=""/87, 0x57}, {&(0x7f00000029c0)=""/81, 0x51}], 0x2}}, {{&(0x7f0000002c00)=@ethernet={0x0, @local}, 0x80, &(0x7f0000002e40)=[{&(0x7f0000002c80)=""/138, 0x8a}, {&(0x7f0000002d40)=""/216, 0xd8}], 0x2, &(0x7f0000002e80)=""/201, 0xc9}, 0x4}], 0x6, 0x1, &(0x7f0000003580)) r1 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r1, &(0x7f0000003b40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002580)=""/73, 0x49}, 0x1}], 0x1, 0x2, 0x0) setsockopt$inet_int(r1, 0x0, 0x6, &(0x7f0000000180)=0x80000001, 0x4) setsockopt$inet_int(r1, 0x0, 0x7, &(0x7f0000000140)=0x6, 0x4) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) ioctl$XFS_IOC_FD_TO_HANDLE(r2, 0xc038586a, &(0x7f0000000800)={r0, &(0x7f0000000000)='\xff\xff\xff\xff\xff\xff', 0x30000, &(0x7f0000000740)={@_ha_fsid={[0xc, 0x2]}, {0xfa2, 0x1, 0x9, 0x631}}, 0x8, &(0x7f0000000780), &(0x7f00000007c0)}) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000040)="a72d11a15c048c0a7d63aebc5cea1f815108f6091475aeec600831aa9d3944e60bc2ad06a619c560aa0118b28f68f1eb14549d633b4b23f179fb680716faa43414787559be90843c35ab30acad8a6740140e00721abc2eb362f7bde53b3c992d3e28ccc20ec84fdc569947047f6c09a647ee8c0a747b951e66c068ccf1af93ee9e6f9528ff79e2f989383b05a690a6bec4634b867c9446c1c644b3010e8a3514c6328323b4bbdd602b8f0dace6aea70902c4ddd2a2f2810f1348b0d0df3c1e6a5938fcfdc87e7580c6be0c6a06eca62d6f787dd16add086a21391c4c707d8b61929d1252681b84c245e0efafe2e6e73ad86a3cf59235ab0eacbb414af92ec3cdac420a064a98e8cc18bdf63f8997f96436e0fe6f06fdbf47fff353b01a861babd4a38d126bfe3e29049e6cc883e6efae6e70ef9ed124b1b09887a58c991e223b6420dca5ae238027e91b17b1707dc5c0d5f59f0ca95614f1ea1d263c1ee54dfe31ae35eb3c8e3b931dff7920c57fbba89adf2e392c1ad719b90c7ade0d38ff9792934ef1fb12f51d8e2fad12486d5883d5b1a46696fad128c6805cfb25bc6487e1e407d6b266971b09d0d864a7a550284e24b6cdc9f4ae1081a638175dffef002c76ac5558d23e41edbe68f4b4950a13aa000326dae5a857603dc5a40d6c6618a98c7b6e1eebd325ea2c14601a25658965f40864fd015d9b2fff83ee5ed3212ebd9fa429f0140f633556ac07c0c08e67a1848c9942ecc47dd4ffede9a429e9e0472be7cdbcd117e621ddf745c00a814ffff0224634472577dc0b35a9c153409f1a2bddc193b20b4d244d9cbbd59816c46000c596865f58b4e640ed4a9ab6086cede697fb113560925498da83273e67", 0x26f}], 0x1}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a3200000000140000001100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x4}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) r4 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r4, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r4, &(0x7f00000002c0)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x2940000, @mcast1, 0x9}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000780)="f4000900062b2c25fe80000000000000dc8b850f238466ccfe807a000000ad6e911b51818462b40011000001", 0x3a}], 0x1}, 0x0) 971.251299ms ago: executing program 1 (id=13993): bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000240)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="320000001400000000000000", @ANYRES32, @ANYBLOB="444fb68d6fa6fa77dd004043ac7a5f68c4328a4ba29b22a36b46f4367ce26e", @ANYRES64=0x0], 0x20) r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) socket$kcm(0x29, 0x5, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000500)={'macvlan1\x00', 0x20}) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000021c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0180000000000000000003020200090001"], 0x20}, 0x1, 0x40030000000000}, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_x25_SIOCDELRT(r4, 0x890c, &(0x7f00000006c0)={@remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x2}, 0x3, 'veth1_to_bridge\x00'}) setsockopt$inet6_udp_int(r1, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4) r5 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r6, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) ioctl$sock_bt_hidp_HIDPCONNADD(r5, 0x400448c8, &(0x7f0000000340)={r6, r6, 0x7fff, 0x0, 0x0, 0x9, 0xc1, 0x16c0, 0x9, 0x97d8, 0x1, 0x9, 'syz1\x00'}) ioctl$sock_bt_hidp_HIDPCONNDEL(r5, 0x400448c9, &(0x7f0000000000)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}) socket$kcm(0x2, 0xa, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB], 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x1, 0xc, &(0x7f00000004c0)=ANY=[@ANYRESDEC=r1, @ANYRES16=r2], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) 958.564009ms ago: executing program 4 (id=13994): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, 0x0, 0x0) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) sendmmsg$inet(r0, &(0x7f0000001240)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000b80)="f77d2b5dd5f7d74f0748cf3d2cf218d644566a14103b1c7dd35fd2951bd022f10f2dc7f4ce0d8ac5f4abaca4b97b706153756913b7dd48248b5bfb10460019248bf238743fa2aeb5bef21ce832db670920dc5e911ef2ad63e849901d1001129dbacbfd4924d7545517fd18b5d29978f32a5b5c81755cb89cc0490958ba3211eb99df5cdbbc0f9c941aaa1495893dada02d8188acd26b5afd7476413f322c8f79de769debb56343f3eded2dca93ed6641e50fe595e1e0dbe84ed0f70abb4ed2dfb6648df7db", 0xc5}], 0x1}}, {{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000640)="42e013913edbeb683c44e18a52b5a2462064ddd92caaba941de80d06047dedb7eeeff3a27eacf4c416b6979d6c918608807c44d01535dbaab3b390086e4fd43c6b5931187023646d6beac2340fdc7a0d81214ac76a818f64d287311e8828dfd3e3dd67efdb129a6e52745d1540e570891f6bf411cc16a18c4d34e522a1f003498f1a03ea1f8828b6c902286c71a9bc21923972dacfa74fef6a0f", 0x9a}, {0x0}], 0x2}}], 0x2, 0x2090) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x1e, &(0x7f00000004c0)=0x1, 0x4) shutdown(0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001900)=ANY=[@ANYBLOB="61106800000000006113740000000000bfa00000000000000700000008e0e6ffd503010017740040950000000000000069163a0000000000bf67000000000000350607000fff07201706000020190000160300000ee60060bf050000000000007b650000000000006507f9ff01000000070700004d83dde4c375000000000000bf54000000000000070400000400f9ffad4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f17540faf80250aa20c669a5e12814cb1cea5d4601d295c45a6a0b9bdb7dd399703cac4f6f3be4b369226066812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05000400c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b546cad3f1d5ab2af27546e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc8da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916dfec88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc206438b8ef4901fd03c16dfda44221b235c8ac86d8a297dff0445a15f21dce431e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076eb685d55c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20ceddf4d03723f1c932b3a6aa57f1ad2e99e0e67ab93716d20000009f0f53acbb40b4f8e2738270b31562ed834f2af97787f696649a462e7ee4bcf8b07a10fd7ed6735154beb4000000000000000000000000004000bc00f6746a9709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab43176e65ec1118d50d1e827f3472f4445d253887a5ad103649afa17690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43ea0ffb567b40407d000000210000000000000000005f37d8703f37ca364a601ae899a56715a0a62a34c1d926a0f6a5480a55c22fe3a5ac00000000000000000000000500002000000000fb79ea00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e14d90deae46e26c596f84eba90000000000000000fffb0000000082fb0d3cc3aa39ee4b1386bab561cda886fa642994cacd473b543ccb5f0d7b63924f17c67b13631d22a11dc3c693962895496d4f6e9cc54db6c7205a6b06ff7f0000000000007f31d7c8cc5d325c5379b0363ce8bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a1f37302f3b41eae59809fd05d12f6106f117b062df67d3a6473265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b3042065acaa10856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089e0b1c23c0f3cdad7a8710e0254f1b11cced7bc3c8da0c44d2ebf9f6f3ff3be4d1458077c2253b0c7c7a1a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631d22bad050e9856b48ae3a03a497c37758537650fe6db89da3c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94) close(0x3) 773.877834ms ago: executing program 4 (id=13995): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x6f}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) socket$inet(0x2, 0xa, 0x4) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a74000000060a090400000000000000000200000048000480100001800c0001006e6f747261636b00340001800c0001007061796c6f616400240002800800024000000000080001400000000a080003400000000508000440000000020900010073797a30000000000900020073797a32"], 0x9c}}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$inet_tcp(0x2, 0x1, 0x0) shutdown(r2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x1, @local}, 0x10) connect$inet(r4, &(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x30, 0x10, 0x1, 0x70bd25, 0x25dfdbf9, {0x0, 0x0, 0x600, 0x0, 0x48815, 0x40103}, [@IFLA_GROUP={0x8}, @IFLA_TXQLEN={0x8, 0xd, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x14, 0x2, 0x6, 0x201, 0xa, 0x0, {0x0, 0x0, 0x2000}}, 0x14}}, 0x40880) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a80)=ANY=[@ANYBLOB="5c01000010000100feffffff00010000fe880000000000000000000000000001fc010000000000000000000000000001000107144e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c00000020010000000000000000000000000002000800000000000092010000000000000600000000000000ffff0000000000001c250800000000000200000000000000f8ffffffffffffff0000000000000000ffffffffffffffff00000000000000001f00000000000000070000000000000002000000fcffffff000000002abd700004350000020001002000000000000000480003006465666c6174650000"], 0x15c}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000940)=@newsa={0x140, 0x1a, 0x1, 0xfffffffe, 0x100, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x717, 0x4e21, 0x5, 0xa, 0x0, 0x20, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, {0xfe, 0x1000000000000192, 0x8, 0xfffffffffffffffc, 0x8251c, 0x5, 0xfffffffffffffffc, 0x4}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffe, 0x3f9}, 0x7e, 0x0, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @XFRMA_IF_ID={0x8, 0x1f, 0x2}]}, 0x140}}, 0x20000844) r8 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_MCAST_MSFILTER(r8, 0x29, 0x30, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], 0x290) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) 667.80389ms ago: executing program 0 (id=13996): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000280)={'batadv_slave_0\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket(0x10, 0x3, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="09000000040000000c0000000b"], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000005000000010001000900000001"], 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000380)={r9}, 0xc) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000040)={0x8604}, 0x10) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="240000001a006da800000000000500001c140000000008"], 0x24}}, 0x0) sendmsg$BATADV_CMD_GET_ORIGINATORS(r6, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x4c, 0x0, 0x2, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r4}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x32c06ba6}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x3}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x4c}}, 0x0) r10 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) r11 = socket$alg(0x26, 0x5, 0x0) bind$alg(r11, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r11, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r12 = accept4(r11, 0x0, 0x0, 0x800) sendmmsg$alg(r12, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xffffffde}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380), 0x0, 0x4000000}], 0x32, 0x400c0) recvmsg(r12, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000006c0)=""/124, 0x7c}, {0x0}, {&(0x7f0000000800)=""/88, 0x58}, {&(0x7f00000002c0)=""/41, 0x29}], 0x4}, 0x40000001) ioctl$PPPIOCNEWUNIT(r10, 0xc004743e, &(0x7f0000000040)) ioctl$PPPIOCSACTIVE(r10, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010026bd7000fbdbdf251000000008000300", @ANYRES32=r2, @ANYBLOB="08000600", @ANYRES32=r4, @ANYBLOB="4ccc1ee63b2874710475986668"], 0x24}, 0x1, 0x0, 0x0, 0x200000c0}, 0x40) 531.864867ms ago: executing program 1 (id=13997): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$l2tp(0x2, 0x2, 0x73) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/uts\x00') unshare(0x6a040000) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00"/13], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000008500004f85cb9b9800", @ANYRES32=r4, @ANYRES64, @ANYRESDEC=r2], &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff0f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000440)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000200000000000000000000080000000000000000000800"/69], 0x48) r6 = socket(0x8, 0x4, 0x3) getpeername$packet(r6, &(0x7f0000000300)={0x11, 0x0, 0x0}, &(0x7f0000000340)=0x14) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r6, 0x4048587b, &(0x7f0000000740)={{r3, &(0x7f00000001c0)='\x84\x00', 0x8081, &(0x7f00000002c0)={@_ha_fsid={[0x7, 0x9e]}, {0x38e6, 0x9, 0x9, 0xd}}, 0x2, &(0x7f0000000380), &(0x7f00000003c0)=0x1}, 0x2, &(0x7f0000000700)=[{0x3, 0x8, &(0x7f0000000400)='ns/uts\x00', &(0x7f0000000540)="28ede321e9f114f91148a8fe5f4154cfddf25672d07fb718cf3eec494b2c86ef1eda1f8552e1bdaff74b6d5f3d7a1a589dacecf68ec5a00c723ba3197625c569a23092e3ebb68d3e66b00aeae49d685aa83e9262d089f305c7e5116729b27f162dcf683ed0c45ca4e1c09ee76912f8f7235f887b2ceab50d13d4d735fb9fe6083e17814d276dc6c103ca53f89e3f18b4c0e1ac5c949b59b2e367925a4ffd1bf0e9fb20c5cc71a8dfcc9db465eaa5d63e8ada8414e3479b261d1a7207bde9ebc45d23b8096187a8ffccd0d366957c23a49adf36db", 0xd4, 0x2}, {0x2, 0x6147b71, &(0x7f0000000640)='/$\x00', &(0x7f0000000680)="21323117fbe71e52af6c0bd8c68706944068baaf7e337ed1d2f7bd917fc96e96861a8e5d5c6a2d85382c360f96bc3a9816cc68075ac986011fe55645f601ab22755b63f5be910532640472f333e19da47ae70d7857543271a8ddda39ad4d59f75ad65b72bf96cc7a62f57e700e1e768fe488178003266517507f9ec3c020a697", 0x80, 0x4}]}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000007c0)={r8, r7, 0x25, 0x8, @val=@perf_event={0xd20}}, 0x18) socket(0x400000000010, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r5, 0x89f0, 0x0) r9 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$EBT_SO_SET_COUNTERS(r9, 0x0, 0x81, &(0x7f0000000200)={'nat\x00', 0x0, 0x0, 0x0, [0x3, 0x8, 0x9bc6, 0x8, 0x4, 0x7fffffff], 0x1, 0x0, 0x0, [{}]}, 0x88) accept4$inet(r1, &(0x7f0000000000)={0x2, 0x0, @multicast1}, &(0x7f0000000040)=0x10, 0x80000) sendmsg$inet6(r0, &(0x7f0000000080)={&(0x7f00000000c0)={0xa, 0x4e22, 0xd53, @rand_addr=' \x01\x00', 0x6}, 0x1c, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="240000000000000029000000320000000000000000000000000000fa684ed187", @ANYRES32=0x0, @ANYBLOB="000000001800000000000000290000003700"/28], 0x40}, 0x48001) 196.313552ms ago: executing program 3 (id=13998): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0xfffffffe, 0x0, 0x1, 0xfffffffc}, 0x50) socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x1, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3e}, 0x1c) 0s ago: executing program 3 (id=13999): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNGETSNDBUF(r2, 0x800454d3, &(0x7f0000000000)) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="440000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="010000001184f9bb1c0012800b0001006d616373656300000c00028005000f000200000008000500", @ANYRES32=r1], 0x44}}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0500000003f01f00040000007f00000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000240)={r3, &(0x7f0000000000), 0x0}, 0x20) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000c80)=ANY=[@ANYBLOB="200000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="44000008000000004944ae107614cee5227cba3f619e6cd69d15084e3160cd52aafb77ff822de1797d505c50e082c5856c138f7d4d2c56bada934b4794dbd00503bac8a7dd4d88282ce1cb96b2eb2e76c2a6f9ccf293dcfdddf9c51e47fdf6a879e34b44d4"], 0x20}}, 0x8054) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), r1) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000340)={'syztnl0\x00', &(0x7f00000002c0)={'tunl0\x00', 0x0, 0x7800, 0x257bb622c51ec659, 0x1, 0xb, {{0x12, 0x4, 0x2, 0x7, 0x48, 0x66, 0x0, 0x3, 0x29, 0x0, @loopback, @rand_addr=0x64010101, {[@end, @end, @timestamp={0x44, 0x8, 0xb4, 0x0, 0x9, [0xa0]}, @timestamp_prespec={0x44, 0x14, 0x76, 0x3, 0x5, [{@multicast2, 0x2}, {@dev={0xac, 0x14, 0x14, 0x27}, 0x8001}]}, @ra={0x94, 0x4}, @generic={0x44, 0x4, "109f"}, @generic={0x83, 0xc, "7d3fb92cca93dc62da32"}, @noop]}}}}}) sendmsg$MPTCP_PM_CMD_REMOVE(r0, &(0x7f0000000480)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x62000}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)=ANY=[@ANYBLOB="98000000", @ANYRES16=r5, @ANYBLOB="080029bd7000ffdbdf2509000000080002000700000024000180060005004e230000050002000700000008000700", @ANYRES32=0x0, @ANYBLOB="080006000200000008000300060000000500050000000000050005000200000008000400be030000240006800800060005000000080003000a010101060005004e20000008000700", @ANYRES32=0x0, @ANYBLOB="6bfd06800600010002000000080006000200000008000700", @ANYRES32=r6, @ANYBLOB="000001000a000000050005008000000008000400ff010000"], 0xb8}, 0x1, 0x0, 0x0, 0x90}, 0x81) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x5, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) r12 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r13, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x51, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, 0x0, {0xc, 0xa}, {0xffff, 0xffff}, {0x2, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r14, {0x4}, {}, {0x6, 0xffff}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0xc, 0xfff1}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0xc858}, 0x80) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8b1a, &(0x7f0000000000)={'wlan1\x00'}) socket$nl_route(0x10, 0x3, 0x0) socket$igmp(0x2, 0x3, 0x2) recvmmsg(r1, &(0x7f0000000c00)=[{{&(0x7f00000004c0)=@can, 0x80, &(0x7f0000000a80)=[{&(0x7f0000000540)=""/51, 0x33}, {&(0x7f0000000580)=""/194, 0xc2}, {&(0x7f0000000680)=""/144, 0x90}, {&(0x7f0000000740)=""/44, 0x2c}, {&(0x7f0000000780)=""/79, 0x4f}, {&(0x7f0000000800)=""/191, 0xbf}, {&(0x7f00000008c0)=""/142, 0x8e}, {&(0x7f0000000980)=""/66, 0x42}, {&(0x7f0000000a00)=""/77, 0x4d}], 0x9, &(0x7f0000000d00)=""/142, 0x8e}, 0x4}], 0x1, 0x10000, &(0x7f0000000c40)={0x0, 0x989680}) kernel console output (not intermixed with test programs): x [ 1630.826342][T16870] sctp: [Deprecated]: syz.3.13307 (pid 16870) Use of int in maxseg socket option. [ 1630.826342][T16870] Use struct sctp_assoc_value instead [ 1630.890582][T16870] netlink: 232 bytes leftover after parsing attributes in process `syz.3.13307'. [ 1630.895552][ T3278] bond7: (slave bridge0): failed to get link speed/duplex [ 1630.953258][T16875] netlink: 15672 bytes leftover after parsing attributes in process `syz.0.13310'. [ 1630.989950][T16876] mac80211_hwsim hwsim98 ªªªªª;: renamed from wlan0 [ 1631.026731][T16879] syz.2.13308: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1631.057838][T16881] netlink: 36 bytes leftover after parsing attributes in process `syz.1.13309'. [ 1631.067032][T16879] CPU: 1 UID: 0 PID: 16879 Comm: syz.2.13308 Not tainted syzkaller #0 PREEMPT(full) [ 1631.067057][T16879] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1631.067068][T16879] Call Trace: [ 1631.067075][T16879] [ 1631.067083][T16879] dump_stack_lvl+0xe8/0x150 [ 1631.067108][T16879] warn_alloc+0x249/0x340 [ 1631.067132][T16879] ? stack_trace_save+0xa9/0x100 [ 1631.067159][T16879] ? __pfx_warn_alloc+0x10/0x10 [ 1631.067189][T16879] ? kasan_save_track+0x4f/0x80 [ 1631.067209][T16879] ? kasan_save_track+0x3e/0x80 [ 1631.067229][T16879] ? __kasan_kmalloc+0x93/0xb0 [ 1631.067248][T16879] ? __kmalloc_cache_noprof+0x31c/0x660 [ 1631.067267][T16879] ? xskq_create+0x56/0x170 [ 1631.067287][T16879] ? xsk_setsockopt+0x54c/0x990 [ 1631.067304][T16879] ? do_sock_setsockopt+0x17c/0x1b0 [ 1631.067326][T16879] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 1631.067348][T16879] ? do_syscall_64+0x15f/0xf80 [ 1631.067374][T16879] __vmalloc_node_range_noprof+0x132/0x1750 [ 1631.067436][T16879] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1631.067464][T16879] ? __kasan_kmalloc+0x93/0xb0 [ 1631.067492][T16879] vmalloc_user_noprof+0xad/0xe0 [ 1631.067515][T16879] ? xskq_create+0xbf/0x170 [ 1631.067538][T16879] xskq_create+0xbf/0x170 [ 1631.067561][T16879] xsk_init_queue+0x8a/0xe0 [ 1631.067583][T16879] xsk_setsockopt+0x54c/0x990 [ 1631.067605][T16879] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1631.067623][T16879] ? __pfx_aa_sk_perm+0x10/0x10 [ 1631.067646][T16879] ? aa_sock_opt_perm+0xff/0x1a0 [ 1631.067669][T16879] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 1631.067690][T16879] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1631.067710][T16879] do_sock_setsockopt+0x17c/0x1b0 [ 1631.067737][T16879] __x64_sys_setsockopt+0x13d/0x1b0 [ 1631.067762][T16879] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1631.067780][T16879] do_syscall_64+0x15f/0xf80 [ 1631.067801][T16879] ? trace_irq_disable+0x3b/0x140 [ 1631.067823][T16879] ? clear_bhb_loop+0x40/0x90 [ 1631.067842][T16879] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1631.067858][T16879] RIP: 0033:0x7ff0ea19ce59 [ 1631.067874][T16879] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1631.067888][T16879] RSP: 002b:00007ff0e83cd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1631.067905][T16879] RAX: ffffffffffffffda RBX: 00007ff0ea416090 RCX: 00007ff0ea19ce59 [ 1631.067917][T16879] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000007 [ 1631.067927][T16879] RBP: 00007ff0ea232d6f R08: 0000000000000004 R09: 0000000000000000 [ 1631.067937][T16879] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1631.067947][T16879] R13: 00007ff0ea416128 R14: 00007ff0ea416090 R15: 00007fff5fd56998 [ 1631.067976][T16879] [ 1631.068062][T16879] Mem-Info: [ 1631.258866][T16888] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13311'. [ 1631.356813][T16877] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 1631.430262][T16888] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13311'. [ 1631.439456][ T9690] bond11: (slave bridge1): failed to get link speed/duplex [ 1631.439503][ T9690] bond7: (slave bridge0): failed to get link speed/duplex [ 1631.456407][T16888] netlink: 'syz.4.13311': attribute type 13 has an invalid length. [ 1631.472424][T16879] active_anon:5444 inactive_anon:6 isolated_anon:0 [ 1631.472424][T16879] active_file:2593 inactive_file:41361 isolated_file:0 [ 1631.472424][T16879] unevictable:768 dirty:136 writeback:0 [ 1631.472424][T16879] slab_reclaimable:14418 slab_unreclaimable:180393 [ 1631.472424][T16879] mapped:30591 shmem:1325 pagetables:1345 [ 1631.472424][T16879] sec_pagetables:0 bounce:0 [ 1631.472424][T16879] kernel_misc_reclaimable:0 [ 1631.472424][T16879] free:1215525 free_pcp:27050 free_cma:0 [ 1631.545445][T11018] bond7: (slave bridge0): failed to get link speed/duplex [ 1631.607071][T12970] bond11: (slave bridge1): failed to get link speed/duplex [ 1631.628292][T16879] Node 0 active_anon:21576kB inactive_anon:24kB active_file:10372kB inactive_file:165244kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:28260kB dirty:544kB writeback:0kB shmem:3764kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:22104kB pagetables:5120kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1631.765777][T16879] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:94204kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:164kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1631.907395][T16879] Node 0 DMA free:11204kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:60kB local_pcp:56kB free_cma:0kB [ 1632.006874][T16879] lowmem_reserve[]: 0 2492 2493 2493 2493 [ 1632.044737][T16879] Node 0 DMA32 free:1164816kB boost:0kB min:34184kB low:42728kB high:51272kB reserved_highatomic:0KB free_highatomic:0KB active_anon:21712kB inactive_anon:24kB active_file:10372kB inactive_file:165244kB unevictable:1536kB writepending:740kB zspages:0kB present:3129332kB managed:2552428kB mlocked:0kB bounce:0kB free_pcp:41444kB local_pcp:17496kB free_cma:0kB [ 1632.102161][T16879] lowmem_reserve[]: 0 0 0 0 0 [ 1632.107646][T16879] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:660kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:4kB free_cma:0kB [ 1632.158369][T16879] lowmem_reserve[]: 0 0 0 0 0 [ 1632.163209][T16879] Node 1 Normal free:3696040kB boost:0kB min:55704kB low:69628kB high:83552kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:60340kB local_pcp:34188kB free_cma:0kB [ 1632.197860][T16879] lowmem_reserve[]: 0 0 0 0 0 [ 1632.202637][T16879] Node 0 DMA: 1*4kB (U) 2*8kB (U) 1*16kB (U) 1*32kB (U) 2*64kB (U) 2*128kB (U) 2*256kB (U) 2*512kB (U) 3*1024kB (U) 3*2048kB (UM) 0*4096kB = 11204kB [ 1632.232557][T16879] Node 0 DMA32: 11387*4kB (UME) 8123*8kB (UME) 4961*16kB (UME) 611*32kB (UME) 677*64kB (UME) 963*128kB (UME) 675*256kB (UM) 351*512kB (UME) 212*1024kB (UME) 107*2048kB (UM) 0*4096kB = 1164788kB [ 1632.269181][T16905] netlink: 68 bytes leftover after parsing attributes in process `syz.4.13318'. [ 1632.302643][T16879] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1632.329276][T16879] Node 1 Normal: 9*4kB (UM) 7*8kB (UM) 16*16kB (UM) 10*32kB (UM) 17*64kB (UM) 12*128kB (UM) 11*256kB (UM) 13*512kB (UM) 11*1024kB (UM) 13*2048kB (U) 890*4096kB (UM) = 3696092kB [ 1632.349598][T16879] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1632.359796][T16879] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1632.369385][T16879] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1632.379618][T16879] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1632.389040][T16879] 45275 total pagecache pages [ 1632.393821][T16879] 0 pages in swap cache [ 1632.398066][T16879] Free swap = 124996kB [ 1632.402223][T16879] Total swap = 124996kB [ 1632.406943][T16879] 2097051 pages RAM [ 1632.410793][T16879] 0 pages HighMem/MovableOnly [ 1632.419789][T16879] 427164 pages reserved [ 1632.424003][T16879] 0 pages cma reserved [ 1632.481945][T16911] bridge0: entered allmulticast mode [ 1632.492894][T16911] bridge_slave_1: left allmulticast mode [ 1632.499849][T16911] bridge_slave_1: left promiscuous mode [ 1632.505983][T16911] bridge0: port 2(bridge_slave_1) entered disabled state [ 1632.570965][T16912] netlink: 20 bytes leftover after parsing attributes in process `syz.3.13319'. [ 1632.618612][T16914] sctp: [Deprecated]: syz.4.13322 (pid 16914) Use of int in maxseg socket option. [ 1632.618612][T16914] Use struct sctp_assoc_value instead [ 1632.672087][T16914] netlink: 232 bytes leftover after parsing attributes in process `syz.4.13322'. [ 1632.974698][T16929] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13325'. [ 1633.821009][T16951] FAULT_INJECTION: forcing a failure. [ 1633.821009][T16951] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1633.881657][T16951] CPU: 0 UID: 0 PID: 16951 Comm: syz.3.13330 Not tainted syzkaller #0 PREEMPT(full) [ 1633.881682][T16951] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1633.881692][T16951] Call Trace: [ 1633.881699][T16951] [ 1633.881707][T16951] dump_stack_lvl+0xe8/0x150 [ 1633.881732][T16951] should_fail_ex+0x412/0x560 [ 1633.881758][T16951] _copy_from_iter+0x1d3/0x1670 [ 1633.881783][T16951] ? rcu_is_watching+0x15/0xb0 [ 1633.881808][T16951] ? __pfx__copy_from_iter+0x10/0x10 [ 1633.881835][T16951] ? netlink_sendmsg+0x650/0xb40 [ 1633.881851][T16951] ? skb_put+0x11b/0x210 [ 1633.881876][T16951] netlink_sendmsg+0x6c0/0xb40 [ 1633.881900][T16951] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1633.881920][T16951] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1633.881942][T16951] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1633.881965][T16951] ____sys_sendmsg+0x972/0x9f0 [ 1633.881981][T16951] ? __might_fault+0xaf/0x130 [ 1633.882008][T16951] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1633.882041][T16951] ? import_iovec+0x73/0xa0 [ 1633.882065][T16951] ___sys_sendmsg+0x2a5/0x360 [ 1633.882079][T16951] ? __lock_acquire+0x6b5/0x2cf0 [ 1633.882100][T16951] ? __pfx____sys_sendmsg+0x10/0x10 [ 1633.882148][T16951] ? __fget_files+0x2a/0x420 [ 1633.882166][T16951] ? __fget_files+0x3a0/0x420 [ 1633.882192][T16951] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1633.882211][T16951] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1633.882235][T16951] ? __pfx_ksys_write+0x10/0x10 [ 1633.882266][T16951] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1633.882283][T16951] do_syscall_64+0x15f/0xf80 [ 1633.882304][T16951] ? trace_irq_disable+0x3b/0x140 [ 1633.882325][T16951] ? clear_bhb_loop+0x40/0x90 [ 1633.882344][T16951] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1633.882359][T16951] RIP: 0033:0x7f15b359ce59 [ 1633.882376][T16951] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1633.882389][T16951] RSP: 002b:00007f15b4374028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1633.882407][T16951] RAX: ffffffffffffffda RBX: 00007f15b3815fa0 RCX: 00007f15b359ce59 [ 1633.882418][T16951] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 1633.882428][T16951] RBP: 00007f15b4374090 R08: 0000000000000000 R09: 0000000000000000 [ 1633.882438][T16951] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1633.882447][T16951] R13: 00007f15b3816038 R14: 00007f15b3815fa0 R15: 00007ffdd1ae7618 [ 1633.882474][T16951] [ 1634.878184][T16981] netlink: 'syz.1.13337': attribute type 1 has an invalid length. [ 1634.886401][T16981] netlink: 96 bytes leftover after parsing attributes in process `syz.1.13337'. [ 1634.923984][T16981] netlink: 'syz.1.13337': attribute type 1 has an invalid length. [ 1635.558145][ T5727] IPVS: starting estimator thread 0... [ 1635.672513][T17004] netlink: 'syz.4.13344': attribute type 1 has an invalid length. [ 1635.685955][T16998] IPVS: using max 41 ests per chain, 98400 per kthread [ 1635.692920][T31918] net_ratelimit: 37 callbacks suppressed [ 1635.692938][T31918] bond11: (slave bridge1): failed to get link speed/duplex [ 1635.789234][T17004] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1635.812732][T17006] bond5: (slave geneve2): making interface the new active one [ 1635.833024][T17006] bond5: (slave geneve2): Enslaving as an active interface with an up link [ 1635.858045][ T1030] bond7: (slave bridge0): failed to get link speed/duplex [ 1635.895764][ T1030] bond11: (slave bridge1): failed to get link speed/duplex [ 1635.931721][T17012] __nla_validate_parse: 4 callbacks suppressed [ 1635.931740][T17012] netlink: 4340 bytes leftover after parsing attributes in process `syz.1.13347'. [ 1635.975769][T17012] openvswitch: netlink: Flow key attr not present in new flow. [ 1635.990024][T17015] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13350'. [ 1636.025788][T31517] bond11: (slave bridge1): failed to get link speed/duplex [ 1636.076003][T31914] bond7: (slave bridge0): failed to get link speed/duplex [ 1636.145470][T31914] bond11: (slave bridge1): failed to get link speed/duplex [ 1636.185776][ T1030] bond7: (slave bridge0): failed to get link speed/duplex [ 1636.204584][T17018] veth1_macvtap: left allmulticast mode [ 1636.211528][T17018] veth1_macvtap: left promiscuous mode [ 1636.218750][T17018] macsec0: entered promiscuous mode [ 1636.265502][ T48] bond11: (slave bridge1): failed to get link speed/duplex [ 1636.326429][ T1030] bond7: (slave bridge0): failed to get link speed/duplex [ 1636.817344][T17043] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13357'. [ 1636.943623][T17051] netlink: 6032 bytes leftover after parsing attributes in process `syz.4.13362'. [ 1637.351138][T17062] vlan2: entered promiscuous mode [ 1637.373368][T17062] bridge0: entered promiscuous mode [ 1637.613875][T17068] gretap0: entered promiscuous mode [ 1637.844833][T17074] netlink: 32 bytes leftover after parsing attributes in process `syz.4.13367'. [ 1637.989945][T17076] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input108 [ 1638.371881][T17084] FAULT_INJECTION: forcing a failure. [ 1638.371881][T17084] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1638.411532][T17084] CPU: 1 UID: 0 PID: 17084 Comm: syz.1.13371 Not tainted syzkaller #0 PREEMPT(full) [ 1638.411554][T17084] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1638.411563][T17084] Call Trace: [ 1638.411570][T17084] [ 1638.411577][T17084] dump_stack_lvl+0xe8/0x150 [ 1638.411600][T17084] should_fail_ex+0x412/0x560 [ 1638.411624][T17084] _copy_to_user+0x31/0xb0 [ 1638.411648][T17084] simple_read_from_buffer+0xe1/0x170 [ 1638.411669][T17084] proc_fail_nth_read+0x1bb/0x230 [ 1638.411691][T17084] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1638.411713][T17084] ? rw_verify_area+0x2a6/0x4d0 [ 1638.411731][T17084] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1638.411750][T17084] vfs_read+0x20c/0xa70 [ 1638.411775][T17084] ? __pfx___mutex_lock+0x10/0x10 [ 1638.411790][T17084] ? __pfx_vfs_read+0x10/0x10 [ 1638.411811][T17084] ? __fget_files+0x2a/0x420 [ 1638.411831][T17084] ? __fget_files+0x3a0/0x420 [ 1638.411846][T17084] ? __fget_files+0x2a/0x420 [ 1638.411868][T17084] ksys_read+0x150/0x270 [ 1638.411889][T17084] ? __pfx_ksys_read+0x10/0x10 [ 1638.411916][T17084] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1638.411932][T17084] do_syscall_64+0x15f/0xf80 [ 1638.411953][T17084] ? trace_irq_disable+0x3b/0x140 [ 1638.411974][T17084] ? clear_bhb_loop+0x40/0x90 [ 1638.411993][T17084] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1638.412007][T17084] RIP: 0033:0x7f31bf75d68e [ 1638.412023][T17084] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1638.412035][T17084] RSP: 002b:00007f31c068afe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1638.412052][T17084] RAX: ffffffffffffffda RBX: 00007f31c068b6c0 RCX: 00007f31bf75d68e [ 1638.412062][T17084] RDX: 000000000000000f RSI: 00007f31c068b0a0 RDI: 0000000000000005 [ 1638.412081][T17084] RBP: 00007f31c068b090 R08: 0000000000000000 R09: 0000000000000000 [ 1638.412090][T17084] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1638.412098][T17084] R13: 00007f31bfa16038 R14: 00007f31bfa15fa0 R15: 00007fff54719118 [ 1638.412126][T17084] [ 1638.831233][T17090] netlink: 15672 bytes leftover after parsing attributes in process `syz.2.13374'. [ 1639.008526][T17092] netlink: 12 bytes leftover after parsing attributes in process `syz.1.13375'. [ 1640.127501][T12995] Bluetooth: hci1: command 0x0406 tx timeout [ 1640.662571][T17112] netlink: 16 bytes leftover after parsing attributes in process `syz.4.13381'. [ 1640.697338][T17121] veth1_macvtap: left allmulticast mode [ 1640.712025][T17121] veth1_macvtap: left promiscuous mode [ 1640.712548][T17127] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13384'. [ 1640.745754][T17121] macsec0: entered promiscuous mode [ 1640.776855][ T36] net_ratelimit: 41 callbacks suppressed [ 1640.776875][ T36] bond7: (slave bridge0): failed to get link speed/duplex [ 1640.845862][ T48] bond11: (slave bridge1): failed to get link speed/duplex [ 1640.939274][T31918] bond7: (slave bridge0): failed to get link speed/duplex [ 1640.985613][ T48] bond11: (slave bridge1): failed to get link speed/duplex [ 1641.080545][ T1030] bond7: (slave bridge0): failed to get link speed/duplex [ 1641.091056][T17135] FAULT_INJECTION: forcing a failure. [ 1641.091056][T17135] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1641.126177][T17135] CPU: 0 UID: 0 PID: 17135 Comm: syz.1.13388 Not tainted syzkaller #0 PREEMPT(full) [ 1641.126199][T17135] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1641.126209][T17135] Call Trace: [ 1641.126216][T17135] [ 1641.126223][T17135] dump_stack_lvl+0xe8/0x150 [ 1641.126247][T17135] should_fail_ex+0x412/0x560 [ 1641.126283][T17135] _copy_from_user+0x2d/0xb0 [ 1641.126308][T17135] ___sys_recvmsg+0x175/0x590 [ 1641.126332][T17135] ? __pfx____sys_recvmsg+0x10/0x10 [ 1641.126352][T17135] ? __fget_files+0x2a/0x420 [ 1641.126387][T17135] ? __fget_files+0x3a0/0x420 [ 1641.126414][T17135] do_recvmmsg+0x334/0x800 [ 1641.126438][T17135] ? __pfx_do_recvmmsg+0x10/0x10 [ 1641.126465][T17135] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1641.126505][T17135] __x64_sys_recvmmsg+0x198/0x250 [ 1641.126524][T17135] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1641.126548][T17135] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1641.126566][T17135] do_syscall_64+0x15f/0xf80 [ 1641.126585][T17135] ? trace_irq_disable+0x3b/0x140 [ 1641.126606][T17135] ? clear_bhb_loop+0x40/0x90 [ 1641.126626][T17135] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1641.126641][T17135] RIP: 0033:0x7f31bf79ce59 [ 1641.126657][T17135] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1641.126670][T17135] RSP: 002b:00007f31c068b028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1641.126686][T17135] RAX: ffffffffffffffda RBX: 00007f31bfa15fa0 RCX: 00007f31bf79ce59 [ 1641.126697][T17135] RDX: 0000000000000001 RSI: 0000200000000280 RDI: 0000000000000003 [ 1641.126706][T17135] RBP: 00007f31c068b090 R08: 0000000000000000 R09: 0000000000000000 [ 1641.126714][T17135] R10: 0000000000004020 R11: 0000000000000246 R12: 0000000000000001 [ 1641.126723][T17135] R13: 00007f31bfa16038 R14: 00007f31bfa15fa0 R15: 00007fff54719118 [ 1641.126752][T17135] [ 1641.414736][T31517] bond11: (slave bridge1): failed to get link speed/duplex [ 1641.422179][T31517] bond7: (slave bridge0): failed to get link speed/duplex [ 1641.535521][T31914] bond11: (slave bridge1): failed to get link speed/duplex [ 1641.621007][T17148] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input109 [ 1641.635634][ T9690] bond7: (slave bridge0): failed to get link speed/duplex [ 1641.728489][ T36] bond11: (slave bridge1): failed to get link speed/duplex [ 1642.111601][T17162] netlink: 'syz.2.13395': attribute type 11 has an invalid length. [ 1642.472194][T17175] FAULT_INJECTION: forcing a failure. [ 1642.472194][T17175] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1642.513678][T17173] sctp: [Deprecated]: syz.0.13397 (pid 17173) Use of int in maxseg socket option. [ 1642.513678][T17173] Use struct sctp_assoc_value instead [ 1642.514877][T17175] CPU: 0 UID: 0 PID: 17175 Comm: syz.2.13398 Not tainted syzkaller #0 PREEMPT(full) [ 1642.514897][T17175] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1642.514907][T17175] Call Trace: [ 1642.514913][T17175] [ 1642.514921][T17175] dump_stack_lvl+0xe8/0x150 [ 1642.514947][T17175] should_fail_ex+0x412/0x560 [ 1642.514974][T17175] _copy_from_user+0x2d/0xb0 [ 1642.514996][T17175] ___sys_sendmsg+0x1c6/0x360 [ 1642.515012][T17175] ? __lock_acquire+0x6b5/0x2cf0 [ 1642.515033][T17175] ? __pfx____sys_sendmsg+0x10/0x10 [ 1642.515080][T17175] ? __fget_files+0x2a/0x420 [ 1642.515097][T17175] ? __fget_files+0x3a0/0x420 [ 1642.515123][T17175] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1642.515141][T17175] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1642.515165][T17175] ? rcu_is_watching+0x15/0xb0 [ 1642.515192][T17175] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1642.515209][T17175] do_syscall_64+0x15f/0xf80 [ 1642.515237][T17175] ? trace_irq_disable+0x3b/0x140 [ 1642.515259][T17175] ? clear_bhb_loop+0x40/0x90 [ 1642.515278][T17175] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1642.515293][T17175] RIP: 0033:0x7ff0ea19ce59 [ 1642.515308][T17175] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1642.515321][T17175] RSP: 002b:00007ff0e83ee028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1642.515337][T17175] RAX: ffffffffffffffda RBX: 00007ff0ea415fa0 RCX: 00007ff0ea19ce59 [ 1642.515348][T17175] RDX: 0000000020000000 RSI: 0000200000000200 RDI: 0000000000000003 [ 1642.515358][T17175] RBP: 00007ff0e83ee090 R08: 0000000000000000 R09: 0000000000000000 [ 1642.515367][T17175] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1642.515375][T17175] R13: 00007ff0ea416038 R14: 00007ff0ea415fa0 R15: 00007fff5fd56998 [ 1642.515401][T17175] [ 1642.797896][T17177] netlink: 232 bytes leftover after parsing attributes in process `syz.0.13397'. [ 1643.034153][T17185] netlink: 36 bytes leftover after parsing attributes in process `syz.1.13400'. [ 1643.539039][T17202] FAULT_INJECTION: forcing a failure. [ 1643.539039][T17202] name failslab, interval 1, probability 0, space 0, times 0 [ 1643.621499][T17202] CPU: 0 UID: 0 PID: 17202 Comm: syz.4.13408 Not tainted syzkaller #0 PREEMPT(full) [ 1643.621521][T17202] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1643.621531][T17202] Call Trace: [ 1643.621538][T17202] [ 1643.621546][T17202] dump_stack_lvl+0xe8/0x150 [ 1643.621570][T17202] should_fail_ex+0x412/0x560 [ 1643.621595][T17202] should_failslab+0xa8/0x100 [ 1643.621620][T17202] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 1643.621641][T17202] ? __alloc_skb+0x186/0x7d0 [ 1643.621661][T17202] ? __alloc_skb+0x1d0/0x7d0 [ 1643.621680][T17202] ? __local_bh_enable_ip+0xd0/0x130 [ 1643.621701][T17202] __alloc_skb+0x1d0/0x7d0 [ 1643.621721][T17202] ? netlink_ack_tlv_len+0x6c/0x210 [ 1643.621739][T17202] netlink_ack+0x146/0xa50 [ 1643.621771][T17202] netlink_rcv_skb+0x2b6/0x4b0 [ 1643.621788][T17202] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 1643.621806][T17202] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1643.621832][T17202] ? bpf_lsm_capable+0x9/0x20 [ 1643.621847][T17202] ? security_capable+0x7e/0x2c0 [ 1643.621872][T17202] nfnetlink_rcv+0x2c0/0x27b0 [ 1643.621895][T17202] ? __local_bh_enable_ip+0xd0/0x130 [ 1643.621911][T17202] ? lockdep_hardirqs_on+0x7a/0x110 [ 1643.621932][T17202] ? __dev_queue_xmit+0x2b6/0x3950 [ 1643.621948][T17202] ? __local_bh_enable_ip+0xd0/0x130 [ 1643.621962][T17202] ? __dev_queue_xmit+0x2b6/0x3950 [ 1643.621977][T17202] ? __dev_queue_xmit+0x1fe5/0x3950 [ 1643.621992][T17202] ? __x64_sys_sendmsg+0x1bd/0x2a0 [ 1643.622015][T17202] ? __dev_queue_xmit+0x2b6/0x3950 [ 1643.622036][T17202] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 1643.622057][T17202] ? __pfx___dev_queue_xmit+0x10/0x10 [ 1643.622080][T17202] ? ref_tracker_free+0x693/0x840 [ 1643.622103][T17202] ? __pfx_ref_tracker_free+0x10/0x10 [ 1643.622139][T17202] ? skb_clone+0x246/0x3a0 [ 1643.622158][T17202] ? __netlink_deliver_tap+0x807/0x850 [ 1643.622174][T17202] ? netlink_deliver_tap+0x2e/0x1b0 [ 1643.622195][T17202] ? netlink_deliver_tap+0x2e/0x1b0 [ 1643.622210][T17202] ? netlink_deliver_tap+0x2e/0x1b0 [ 1643.622231][T17202] netlink_unicast+0x75c/0x8e0 [ 1643.622265][T17202] netlink_sendmsg+0x813/0xb40 [ 1643.622290][T17202] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1643.622309][T17202] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1643.622330][T17202] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1643.622353][T17202] ____sys_sendmsg+0x972/0x9f0 [ 1643.622368][T17202] ? __might_fault+0xaf/0x130 [ 1643.622392][T17202] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1643.622416][T17202] ? import_iovec+0x73/0xa0 [ 1643.622445][T17202] ___sys_sendmsg+0x2a5/0x360 [ 1643.622460][T17202] ? __lock_acquire+0x6b5/0x2cf0 [ 1643.622481][T17202] ? __pfx____sys_sendmsg+0x10/0x10 [ 1643.622529][T17202] ? __fget_files+0x2a/0x420 [ 1643.622547][T17202] ? __fget_files+0x3a0/0x420 [ 1643.622574][T17202] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1643.622591][T17202] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1643.622616][T17202] ? __pfx_ksys_write+0x10/0x10 [ 1643.622646][T17202] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1643.622664][T17202] do_syscall_64+0x15f/0xf80 [ 1643.622685][T17202] ? trace_irq_disable+0x3b/0x140 [ 1643.622707][T17202] ? clear_bhb_loop+0x40/0x90 [ 1643.622726][T17202] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1643.622742][T17202] RIP: 0033:0x7f6ed9d9ce59 [ 1643.622758][T17202] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1643.622771][T17202] RSP: 002b:00007f6edace3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1643.622789][T17202] RAX: ffffffffffffffda RBX: 00007f6eda015fa0 RCX: 00007f6ed9d9ce59 [ 1643.622800][T17202] RDX: 0000000020004000 RSI: 0000200000000200 RDI: 0000000000000003 [ 1643.622810][T17202] RBP: 00007f6edace3090 R08: 0000000000000000 R09: 0000000000000000 [ 1643.622820][T17202] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1643.622829][T17202] R13: 00007f6eda016038 R14: 00007f6eda015fa0 R15: 00007ffe7a4e8538 [ 1643.622856][T17202] [ 1644.738314][T17220] ip6gre1: entered promiscuous mode [ 1644.777497][T17220] ip6gre1: entered allmulticast mode [ 1645.861276][ T3278] net_ratelimit: 45 callbacks suppressed [ 1645.861297][ T3278] bond7: (slave bridge0): failed to get link speed/duplex [ 1645.981119][T17253] netlink: 36 bytes leftover after parsing attributes in process `syz.3.13421'. [ 1646.005876][T17255] netlink: 16 bytes leftover after parsing attributes in process `syz.4.13419'. [ 1646.128291][T17250] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 1646.181374][T17249] netlink: 15672 bytes leftover after parsing attributes in process `syz.1.13422'. [ 1646.197605][T17255] netlink: 3 bytes leftover after parsing attributes in process `syz.4.13419'. [ 1646.216662][ T12] bond7: (slave bridge0): failed to get link speed/duplex [ 1646.236329][ T12] bond11: (slave bridge1): failed to get link speed/duplex [ 1646.354679][ T1030] bond7: (slave bridge0): failed to get link speed/duplex [ 1646.389674][ T1030] bond11: (slave bridge1): failed to get link speed/duplex [ 1646.490523][T17266] syzkaller0: entered promiscuous mode [ 1646.507927][T17266] syzkaller0: entered allmulticast mode [ 1646.585686][T31517] bond11: (slave bridge1): failed to get link speed/duplex [ 1646.831732][T17279] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input110 [ 1646.895558][T31918] bond11: (slave bridge1): failed to get link speed/duplex [ 1647.098108][ T1030] bond7: (slave bridge0): failed to get link speed/duplex [ 1647.313738][T17294] netlink: 36 bytes leftover after parsing attributes in process `syz.1.13431'. [ 1647.514116][T17291] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 1647.623304][T17298] netlink: 15672 bytes leftover after parsing attributes in process `syz.0.13435'. [ 1647.813803][T17305] bond3: option tlb_dynamic_lb: invalid value (5) [ 1647.822283][T17305] bond3 (unregistering): Released all slaves [ 1647.979172][T17314] netlink: 120 bytes leftover after parsing attributes in process `syz.0.13440'. [ 1648.006895][T17316] IPVS: set_ctl: invalid protocol: 58 127.0.0.1:20003 [ 1648.649764][T17324] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13443'. [ 1649.181842][T17346] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13450'. [ 1649.218193][T17346] netlink: 36 bytes leftover after parsing attributes in process `syz.2.13450'. [ 1649.518737][T17358] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13454'. [ 1649.953497][T17372] netlink: 12 bytes leftover after parsing attributes in process `syz.2.13457'. [ 1650.143478][T17376] IPVS: set_ctl: invalid protocol: 58 127.0.0.1:20003 [ 1651.113188][T17400] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13465'. [ 1651.448121][ T36] net_ratelimit: 44 callbacks suppressed [ 1651.448140][ T36] bond11: (slave bridge1): failed to get link speed/duplex [ 1651.661179][T17412] syz_tun: entered allmulticast mode [ 1651.695555][ T12] bond11: (slave bridge1): failed to get link speed/duplex [ 1651.762217][T17423] netlink: zone id is out of range [ 1651.776317][ T36] bond7: (slave bridge0): failed to get link speed/duplex [ 1651.784317][T17423] netlink: zone id is out of range [ 1651.812617][T17423] netlink: zone id is out of range [ 1651.826204][T31517] bond11: (slave bridge1): failed to get link speed/duplex [ 1651.832651][T17423] netlink: zone id is out of range [ 1651.870965][T17423] netlink: zone id is out of range [ 1651.905863][T17423] netlink: zone id is out of range [ 1652.239362][T17437] IPVS: set_ctl: invalid protocol: 58 127.0.0.1:20003 [ 1652.379527][T17439] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13476'. [ 1653.172674][T17452] syzkaller0: entered promiscuous mode [ 1653.191095][T17452] syzkaller0: entered allmulticast mode [ 1653.244043][T17453] netlink: 80 bytes leftover after parsing attributes in process `syz.2.13479'. [ 1653.395504][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1653.405557][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1653.559266][T17473] IPVS: set_ctl: invalid protocol: 43 172.20.20.187:20001 [ 1653.610562][T17476] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13485'. [ 1653.785226][T17470] netlink: 20 bytes leftover after parsing attributes in process `syz.0.13485'. [ 1654.277719][T17484] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13489'. [ 1654.464629][T17492] FAULT_INJECTION: forcing a failure. [ 1654.464629][T17492] name failslab, interval 1, probability 0, space 0, times 0 [ 1654.524588][T17492] CPU: 0 UID: 0 PID: 17492 Comm: syz.2.13493 Not tainted syzkaller #0 PREEMPT(full) [ 1654.524612][T17492] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1654.524622][T17492] Call Trace: [ 1654.524629][T17492] [ 1654.524637][T17492] dump_stack_lvl+0xe8/0x150 [ 1654.524663][T17492] should_fail_ex+0x412/0x560 [ 1654.524688][T17492] should_failslab+0xa8/0x100 [ 1654.524713][T17492] __kmalloc_cache_noprof+0x88/0x660 [ 1654.524733][T17492] ? __kasan_kmalloc+0x93/0xb0 [ 1654.524754][T17492] ? ovs_nla_get_identifier+0x72/0xd0 [ 1654.524782][T17492] ovs_nla_get_identifier+0x72/0xd0 [ 1654.524806][T17492] ovs_flow_cmd_new+0x505/0xe80 [ 1654.524836][T17492] ? __pfx_ovs_flow_cmd_new+0x10/0x10 [ 1654.524911][T17492] ? __nla_parse+0x40/0x60 [ 1654.524936][T17492] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 1654.524957][T17492] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 1654.524986][T17492] genl_family_rcv_msg_doit+0x22a/0x330 [ 1654.525014][T17492] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1654.525047][T17492] ? bpf_lsm_capable+0x9/0x20 [ 1654.525062][T17492] ? security_capable+0x7e/0x2c0 [ 1654.525088][T17492] genl_rcv_msg+0x61c/0x7a0 [ 1654.525114][T17492] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1654.525131][T17492] ? __pfx_ovs_flow_cmd_new+0x10/0x10 [ 1654.525162][T17492] netlink_rcv_skb+0x232/0x4b0 [ 1654.525179][T17492] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1654.525200][T17492] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1654.525232][T17492] ? down_read+0x270/0x2e0 [ 1654.525247][T17492] ? genl_rcv+0xd/0x40 [ 1654.525267][T17492] genl_rcv+0x28/0x40 [ 1654.525288][T17492] netlink_unicast+0x75c/0x8e0 [ 1654.525318][T17492] netlink_sendmsg+0x813/0xb40 [ 1654.525341][T17492] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1654.525359][T17492] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1654.525379][T17492] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1654.525402][T17492] ____sys_sendmsg+0x972/0x9f0 [ 1654.525417][T17492] ? __might_fault+0xaf/0x130 [ 1654.525443][T17492] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1654.525468][T17492] ? import_iovec+0x73/0xa0 [ 1654.525494][T17492] ___sys_sendmsg+0x2a5/0x360 [ 1654.525508][T17492] ? __lock_acquire+0x6b5/0x2cf0 [ 1654.525530][T17492] ? __pfx____sys_sendmsg+0x10/0x10 [ 1654.525580][T17492] ? __fget_files+0x2a/0x420 [ 1654.525598][T17492] ? __fget_files+0x3a0/0x420 [ 1654.525626][T17492] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1654.525645][T17492] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1654.525670][T17492] ? __pfx_ksys_write+0x10/0x10 [ 1654.525700][T17492] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1654.525719][T17492] do_syscall_64+0x15f/0xf80 [ 1654.525739][T17492] ? trace_irq_disable+0x3b/0x140 [ 1654.525762][T17492] ? clear_bhb_loop+0x40/0x90 [ 1654.525782][T17492] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1654.525797][T17492] RIP: 0033:0x7ff0ea19ce59 [ 1654.525814][T17492] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1654.525827][T17492] RSP: 002b:00007ff0e83ee028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1654.525844][T17492] RAX: ffffffffffffffda RBX: 00007ff0ea415fa0 RCX: 00007ff0ea19ce59 [ 1654.525855][T17492] RDX: 000000000000c000 RSI: 0000200000000000 RDI: 0000000000000004 [ 1654.525865][T17492] RBP: 00007ff0e83ee090 R08: 0000000000000000 R09: 0000000000000000 [ 1654.525875][T17492] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1654.525884][T17492] R13: 00007ff0ea416038 R14: 00007ff0ea415fa0 R15: 00007fff5fd56998 [ 1654.525913][T17492] [ 1655.260139][T17508] netlink: 'syz.4.13499': attribute type 1 has an invalid length. [ 1655.363516][T17513] netlink: 48 bytes leftover after parsing attributes in process `syz.4.13499'. [ 1655.471444][T17508] bond6: entered promiscuous mode [ 1655.477180][T17508] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1655.879316][T17523] IPVS: set_ctl: invalid protocol: 58 127.0.0.1:20003 [ 1656.019204][T17528] syz.4.13504: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1656.071203][T17528] CPU: 0 UID: 0 PID: 17528 Comm: syz.4.13504 Not tainted syzkaller #0 PREEMPT(full) [ 1656.071227][T17528] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1656.071238][T17528] Call Trace: [ 1656.071245][T17528] [ 1656.071254][T17528] dump_stack_lvl+0xe8/0x150 [ 1656.071281][T17528] warn_alloc+0x249/0x340 [ 1656.071307][T17528] ? stack_trace_save+0xa9/0x100 [ 1656.071335][T17528] ? __pfx_warn_alloc+0x10/0x10 [ 1656.071366][T17528] ? kasan_save_track+0x4f/0x80 [ 1656.071386][T17528] ? kasan_save_track+0x3e/0x80 [ 1656.071404][T17528] ? __kasan_kmalloc+0x93/0xb0 [ 1656.071424][T17528] ? __kmalloc_cache_noprof+0x31c/0x660 [ 1656.071444][T17528] ? xskq_create+0x56/0x170 [ 1656.071464][T17528] ? xsk_setsockopt+0x54c/0x990 [ 1656.071481][T17528] ? do_sock_setsockopt+0x17c/0x1b0 [ 1656.071514][T17528] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 1656.071536][T17528] ? do_syscall_64+0x15f/0xf80 [ 1656.071564][T17528] __vmalloc_node_range_noprof+0x132/0x1750 [ 1656.071617][T17528] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1656.071646][T17528] ? __kasan_kmalloc+0x93/0xb0 [ 1656.071673][T17528] vmalloc_user_noprof+0xad/0xe0 [ 1656.071695][T17528] ? xskq_create+0xbf/0x170 [ 1656.071716][T17528] xskq_create+0xbf/0x170 [ 1656.071739][T17528] xsk_init_queue+0x8a/0xe0 [ 1656.071762][T17528] xsk_setsockopt+0x54c/0x990 [ 1656.071784][T17528] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1656.071804][T17528] ? __pfx_aa_sk_perm+0x10/0x10 [ 1656.071828][T17528] ? aa_sock_opt_perm+0xff/0x1a0 [ 1656.071851][T17528] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 1656.071872][T17528] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1656.071893][T17528] do_sock_setsockopt+0x17c/0x1b0 [ 1656.071921][T17528] __x64_sys_setsockopt+0x13d/0x1b0 [ 1656.071964][T17528] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1656.071983][T17528] do_syscall_64+0x15f/0xf80 [ 1656.072006][T17528] ? trace_irq_disable+0x3b/0x140 [ 1656.072030][T17528] ? clear_bhb_loop+0x40/0x90 [ 1656.072050][T17528] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1656.072066][T17528] RIP: 0033:0x7f6ed9d9ce59 [ 1656.072082][T17528] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1656.072097][T17528] RSP: 002b:00007f6edacc2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1656.072116][T17528] RAX: ffffffffffffffda RBX: 00007f6eda016090 RCX: 00007f6ed9d9ce59 [ 1656.072129][T17528] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 1656.072139][T17528] RBP: 00007f6ed9e32d6f R08: 0000000000000004 R09: 0000000000000000 [ 1656.072149][T17528] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1656.072160][T17528] R13: 00007f6eda016128 R14: 00007f6eda016090 R15: 00007ffe7a4e8538 [ 1656.072191][T17528] [ 1656.072198][T17528] Mem-Info: [ 1656.359676][T17535] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13509'. [ 1656.387879][T17535] netlink: 12 bytes leftover after parsing attributes in process `syz.2.13509'. [ 1656.425546][T17528] active_anon:5516 inactive_anon:16 isolated_anon:0 [ 1656.425546][T17528] active_file:1917 inactive_file:41824 isolated_file:0 [ 1656.425546][T17528] unevictable:3197 dirty:59 writeback:0 [ 1656.425546][T17528] slab_reclaimable:14575 slab_unreclaimable:179790 [ 1656.425546][T17528] mapped:32118 shmem:3797 pagetables:1430 [ 1656.425546][T17528] sec_pagetables:0 bounce:0 [ 1656.425546][T17528] kernel_misc_reclaimable:0 [ 1656.425546][T17528] free:1155731 free_pcp:26094 free_cma:0 [ 1656.475033][T12970] net_ratelimit: 103 callbacks suppressed [ 1656.475052][T12970] bond11: (slave bridge1): failed to get link speed/duplex [ 1656.505516][T12970] bond7: (slave bridge0): failed to get link speed/duplex [ 1656.513174][T17535] netlink: 16 bytes leftover after parsing attributes in process `syz.2.13509'. [ 1656.560026][T17528] Node 0 active_anon:22064kB inactive_anon:64kB active_file:7668kB inactive_file:167096kB unevictable:13652kB isolated(anon):0kB isolated(file):0kB mapped:40660kB dirty:236kB writeback:0kB shmem:15952kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:22248kB pagetables:5556kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1656.615099][T17535] netlink: 'syz.2.13509': attribute type 21 has an invalid length. [ 1656.619485][ T36] bond11: (slave bridge1): failed to get link speed/duplex [ 1656.646751][T17521] netlink: 36 bytes leftover after parsing attributes in process `syz.0.13503'. [ 1656.671767][T17528] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:90112kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:164kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1656.705874][T31517] bond7: (slave bridge0): failed to get link speed/duplex [ 1656.738620][T17535] netlink: 'syz.2.13509': attribute type 6 has an invalid length. [ 1656.748772][T17535] netlink: 132 bytes leftover after parsing attributes in process `syz.2.13509'. [ 1656.771044][T17528] Node 0 DMA free:11204kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:60kB local_pcp:4kB free_cma:0kB [ 1656.878204][T17528] lowmem_reserve[]: 0 2492 2493 2493 2493 [ 1656.910921][T17528] Node 0 DMA32 free:1155456kB boost:0kB min:34184kB low:42728kB high:51272kB reserved_highatomic:0KB free_highatomic:0KB active_anon:34640kB inactive_anon:64kB active_file:7668kB inactive_file:167108kB unevictable:1624kB writepending:284kB zspages:8kB present:3129332kB managed:2552428kB mlocked:88kB bounce:0kB free_pcp:37064kB local_pcp:25400kB free_cma:0kB [ 1656.965409][T17528] lowmem_reserve[]: 0 0 0 0 0 [ 1656.990486][T17528] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:660kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:0kB free_cma:0kB [ 1657.084607][T17528] lowmem_reserve[]: 0 0 0 0 0 [ 1657.105677][T17528] Node 1 Normal free:3503984kB boost:0kB min:55704kB low:69628kB high:83552kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:59964kB local_pcp:28800kB free_cma:0kB [ 1657.194558][T17528] lowmem_reserve[]: 0 0 0 0 0 [ 1657.215372][T17528] Node 0 DMA: 1*4kB (U) 2*8kB (U) 1*16kB (U) 1*32kB (U) 2*64kB (U) 2*128kB (U) 2*256kB (U) 2*512kB (U) 3*1024kB (U) 3*2048kB (UM) 0*4096kB = 11204kB [ 1657.255359][T17528] Node 0 DMA32: 11817*4kB (UME) 8302*8kB (UME) 5008*16kB (UM) 923*32kB (UME) 691*64kB (UME) 961*128kB (UM) 677*256kB (UM) 358*512kB (UME) 205*1024kB (UME) 104*2048kB (U) 0*4096kB = 1170100kB [ 1657.334370][T17528] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1657.372976][T17528] Node 1 Normal: 9*4kB (UM) 11*8kB (UM) 17*16kB (UM) 12*32kB (UM) 17*64kB (UM) 15*128kB (UM) 12*256kB (UM) 12*512kB (UM) 13*1024kB (UM) 14*2048kB (U) 846*4096kB (UM) = 3520204kB [ 1657.489495][T17528] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1657.612175][T17528] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1657.733471][T17528] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1657.856686][T17528] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1657.911862][T17557] Cannot find del_set index 8192 as target [ 1657.964591][T17528] 45067 total pagecache pages [ 1658.022915][T17528] 2 pages in swap cache [ 1658.050590][T17528] Free swap = 124980kB [ 1658.059330][T17554] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1658.095848][T17528] Total swap = 124996kB [ 1658.113683][T17528] 2097051 pages RAM [ 1658.119065][T17528] 0 pages HighMem/MovableOnly [ 1658.123911][T17528] 427164 pages reserved [ 1658.128388][T17528] 0 pages cma reserved [ 1658.236503][ T36] bond11: (slave bridge1): failed to get link speed/duplex [ 1658.306370][T31914] bond7: (slave bridge0): failed to get link speed/duplex [ 1658.395476][T12970] bond11: (slave bridge1): failed to get link speed/duplex [ 1658.437070][ T1030] bond7: (slave bridge0): failed to get link speed/duplex [ 1658.470179][T17562] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 1658.528214][T31914] bond11: (slave bridge1): failed to get link speed/duplex [ 1658.586851][T31918] bond7: (slave bridge0): failed to get link speed/duplex [ 1659.045080][T17584] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input111 [ 1659.172954][T17588] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input112 [ 1659.217400][T17592] syzkaller0: entered promiscuous mode [ 1659.268299][T17592] syzkaller0: entered allmulticast mode [ 1659.639121][T17602] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13529'. [ 1660.149722][T17622] bridge_slave_0: left allmulticast mode [ 1660.211118][T17622] bridge_slave_0: left promiscuous mode [ 1660.237028][T17622] bridge0: port 1(bridge_slave_0) entered disabled state [ 1660.324648][T17622] bridge_slave_1: left allmulticast mode [ 1660.343721][T17632] netlink: 24 bytes leftover after parsing attributes in process `syz.0.13537'. [ 1660.366863][T17622] bridge_slave_1: left promiscuous mode [ 1660.391193][T17634] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input113 [ 1660.408666][T17622] bridge0: port 2(bridge_slave_1) entered disabled state [ 1660.479004][T17622] bond0: (slave bond_slave_0): Releasing backup interface [ 1660.527864][T17622] bond0: (slave bond_slave_1): Releasing backup interface [ 1660.555115][T17622] team0: Port device team_slave_0 removed [ 1660.615115][T17622] team0: Port device team_slave_1 removed [ 1660.641057][T17622] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1660.659120][T17622] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1660.686616][T17622] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1660.711561][T17622] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1661.360572][T17658] netlink: 36 bytes leftover after parsing attributes in process `syz.4.13542'. [ 1661.597796][ T36] net_ratelimit: 22 callbacks suppressed [ 1661.597814][ T36] bond11: (slave bridge1): failed to get link speed/duplex [ 1661.645580][T17664] netlink: 220 bytes leftover after parsing attributes in process `syz.0.13545'. [ 1661.704699][ T36] bond7: (slave bridge0): failed to get link speed/duplex [ 1661.806542][T11018] bond11: (slave bridge1): failed to get link speed/duplex [ 1661.871923][ T3278] bond7: (slave bridge0): failed to get link speed/duplex [ 1661.936082][T12970] bond11: (slave bridge1): failed to get link speed/duplex [ 1663.942086][T17672] macsec0: left promiscuous mode [ 1663.955428][T17672] macsec0: left allmulticast mode [ 1664.006306][T17672] mac80211_hwsim hwsim105 wlan0: left promiscuous mode [ 1664.256690][T12970] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1664.290310][T12970] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1664.302963][T12970] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1664.318508][T12970] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1664.348204][T31918] bond11: (slave bridge1): failed to get link speed/duplex [ 1664.406216][ T36] bond7: (slave bridge0): failed to get link speed/duplex [ 1664.495975][ T36] bond11: (slave bridge1): failed to get link speed/duplex [ 1664.594847][T17720] netlink: 36 bytes leftover after parsing attributes in process `syz.3.13555'. [ 1664.794200][T17717] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 1664.907050][T21005] bond11: (slave bridge1): failed to get link speed/duplex [ 1665.076027][T17731] sctp: [Deprecated]: syz.4.13560 (pid 17731) Use of int in maxseg socket option. [ 1665.076027][T17731] Use struct sctp_assoc_value instead [ 1665.173335][T17731] netlink: 232 bytes leftover after parsing attributes in process `syz.4.13560'. [ 1666.837806][T31517] net_ratelimit: 4 callbacks suppressed [ 1666.837826][T31517] bond7: (slave bridge0): failed to get link speed/duplex [ 1667.385941][T17767] netlink: 'syz.4.13572': attribute type 12 has an invalid length. [ 1667.415593][ T1030] bond11: (slave bridge1): failed to get link speed/duplex [ 1667.505871][T31517] bond7: (slave bridge0): failed to get link speed/duplex [ 1667.523417][T17777] netlink: 60 bytes leftover after parsing attributes in process `syz.2.13575'. [ 1667.625493][ T36] bond7: (slave bridge0): failed to get link speed/duplex [ 1667.655642][ T12] bond11: (slave bridge1): failed to get link speed/duplex [ 1668.244149][T17794] openvswitch: netlink: nsh attr 0 has unexpected len 12 expected 0 [ 1668.263067][T17794] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1668.686566][ T36] bond11: (slave bridge1): failed to get link speed/duplex [ 1668.832289][T17807] syzkaller0: entered promiscuous mode [ 1668.857529][T17807] syzkaller0: entered allmulticast mode [ 1669.039396][ T36] bond7: (slave bridge0): failed to get link speed/duplex [ 1669.135113][T17817] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13587'. [ 1669.259557][T31914] bond7: (slave bridge0): failed to get link speed/duplex [ 1669.691431][T17827] tipc: Enabled bearer , priority 0 [ 1669.711821][T17827] syzkaller0: entered promiscuous mode [ 1669.740664][T17827] syzkaller0: entered allmulticast mode [ 1669.781655][T17827] netlink: 16 bytes leftover after parsing attributes in process `syz.4.13590'. [ 1669.908111][T17827] tipc: Resetting bearer [ 1669.922724][T17826] tipc: Resetting bearer [ 1669.930785][T17834] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13591'. [ 1670.001875][T17834] FAULT_INJECTION: forcing a failure. [ 1670.001875][T17834] name failslab, interval 1, probability 0, space 0, times 0 [ 1670.017444][T17834] CPU: 0 UID: 0 PID: 17834 Comm: syz.2.13591 Not tainted syzkaller #0 PREEMPT(full) [ 1670.017466][T17834] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1670.017476][T17834] Call Trace: [ 1670.017484][T17834] [ 1670.017492][T17834] dump_stack_lvl+0xe8/0x150 [ 1670.017518][T17834] should_fail_ex+0x412/0x560 [ 1670.017545][T17834] should_failslab+0xa8/0x100 [ 1670.017569][T17834] ? xfrm_state_alloc+0x24/0x2f0 [ 1670.017589][T17834] kmem_cache_alloc_noprof+0x87/0x650 [ 1670.017620][T17834] xfrm_state_alloc+0x24/0x2f0 [ 1670.017640][T17834] __find_acq_core+0x816/0x1ce0 [ 1670.017677][T17834] xfrm_find_acq+0x78/0xa0 [ 1670.017707][T17834] xfrm_alloc_userspi+0x712/0xd50 [ 1670.017751][T17834] ? apparmor_capable+0x126/0x170 [ 1670.017767][T17834] ? __pfx_xfrm_alloc_userspi+0x10/0x10 [ 1670.017792][T17834] ? __nla_parse+0x40/0x60 [ 1670.017818][T17834] xfrm_user_rcv_msg+0x7ae/0xc40 [ 1670.017846][T17834] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 1670.017911][T17834] ? __pfx___mutex_trylock_common+0x10/0x10 [ 1670.017936][T17834] ? rcu_is_watching+0x15/0xb0 [ 1670.017956][T17834] ? trace_contention_end+0x3d/0x140 [ 1670.017978][T17834] ? __mutex_lock+0x319/0x1550 [ 1670.018002][T17834] netlink_rcv_skb+0x232/0x4b0 [ 1670.018021][T17834] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 1670.018045][T17834] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1670.018078][T17834] ? netlink_deliver_tap+0x2e/0x1b0 [ 1670.018094][T17834] ? netlink_deliver_tap+0x2e/0x1b0 [ 1670.018113][T17834] xfrm_netlink_rcv+0x79/0x90 [ 1670.018135][T17834] netlink_unicast+0x75c/0x8e0 [ 1670.018169][T17834] netlink_sendmsg+0x813/0xb40 [ 1670.018195][T17834] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1670.018215][T17834] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1670.018236][T17834] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1670.018258][T17834] ____sys_sendmsg+0x972/0x9f0 [ 1670.018274][T17834] ? __might_fault+0xaf/0x130 [ 1670.018299][T17834] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1670.018325][T17834] ? import_iovec+0x73/0xa0 [ 1670.018350][T17834] ___sys_sendmsg+0x2a5/0x360 [ 1670.018365][T17834] ? __lock_acquire+0x6b5/0x2cf0 [ 1670.018384][T17834] ? __pfx____sys_sendmsg+0x10/0x10 [ 1670.018436][T17834] ? __fget_files+0x2a/0x420 [ 1670.018454][T17834] ? __fget_files+0x3a0/0x420 [ 1670.018481][T17834] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1670.018500][T17834] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1670.018524][T17834] ? __pfx_ksys_write+0x10/0x10 [ 1670.018554][T17834] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1670.018571][T17834] do_syscall_64+0x15f/0xf80 [ 1670.018591][T17834] ? trace_irq_disable+0x3b/0x140 [ 1670.018613][T17834] ? clear_bhb_loop+0x40/0x90 [ 1670.018632][T17834] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1670.018647][T17834] RIP: 0033:0x7ff0ea19ce59 [ 1670.018663][T17834] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1670.018676][T17834] RSP: 002b:00007ff0e83ee028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1670.018693][T17834] RAX: ffffffffffffffda RBX: 00007ff0ea415fa0 RCX: 00007ff0ea19ce59 [ 1670.018704][T17834] RDX: 0000000000000000 RSI: 0000200000000540 RDI: 0000000000000003 [ 1670.018714][T17834] RBP: 00007ff0e83ee090 R08: 0000000000000000 R09: 0000000000000000 [ 1670.018723][T17834] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1670.018732][T17834] R13: 00007ff0ea416038 R14: 00007ff0ea415fa0 R15: 00007fff5fd56998 [ 1670.018761][T17834] [ 1670.056153][T17826] tipc: Disabling bearer [ 1670.386541][T17841] FAULT_INJECTION: forcing a failure. [ 1670.386541][T17841] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1670.404184][T17841] CPU: 1 UID: 0 PID: 17841 Comm: syz.0.13594 Not tainted syzkaller #0 PREEMPT(full) [ 1670.404206][T17841] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1670.404215][T17841] Call Trace: [ 1670.404222][T17841] [ 1670.404229][T17841] dump_stack_lvl+0xe8/0x150 [ 1670.404255][T17841] should_fail_ex+0x412/0x560 [ 1670.404280][T17841] _copy_from_iter+0x1d3/0x1670 [ 1670.404312][T17841] ? __pfx__copy_from_iter+0x10/0x10 [ 1670.404337][T17841] ? sock_alloc_send_pskb+0x896/0x990 [ 1670.404361][T17841] ? __pfx__copy_from_iter+0x10/0x10 [ 1670.404388][T17841] copy_page_from_iter+0x220/0x2d0 [ 1670.404409][T17841] skb_copy_datagram_from_iter+0x306/0x710 [ 1670.404436][T17841] tun_get_user+0xc5e/0x43e0 [ 1670.404468][T17841] ? aa_file_perm+0x192/0x15e0 [ 1670.404493][T17841] ? aa_file_perm+0x50e/0x15e0 [ 1670.404513][T17841] ? __pfx_tun_get_user+0x10/0x10 [ 1670.404535][T17841] ? __lock_acquire+0x6b5/0x2cf0 [ 1670.404555][T17841] ? kstrtoull+0x12f/0x1d0 [ 1670.404579][T17841] ? ref_tracker_alloc+0x35c/0x4c0 [ 1670.404602][T17841] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 1670.404623][T17841] ? tun_get+0x1c/0x2f0 [ 1670.404642][T17841] ? tun_get+0x1c/0x2f0 [ 1670.404663][T17841] ? tun_get+0x1c/0x2f0 [ 1670.404680][T17841] ? tun_get+0x1c/0x2f0 [ 1670.404703][T17841] tun_chr_write_iter+0x113/0x200 [ 1670.404723][T17841] vfs_write+0x61d/0xb90 [ 1670.404752][T17841] ? __pfx_vfs_write+0x10/0x10 [ 1670.404782][T17841] ? __fget_files+0x2a/0x420 [ 1670.404808][T17841] ksys_write+0x150/0x270 [ 1670.404831][T17841] ? __pfx_ksys_write+0x10/0x10 [ 1670.404859][T17841] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1670.404876][T17841] do_syscall_64+0x15f/0xf80 [ 1670.404896][T17841] ? trace_irq_disable+0x3b/0x140 [ 1670.404918][T17841] ? clear_bhb_loop+0x40/0x90 [ 1670.404937][T17841] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1670.404952][T17841] RIP: 0033:0x7f1ee935d68e [ 1670.404967][T17841] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1670.404981][T17841] RSP: 002b:00007f1eea1fffb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1670.404997][T17841] RAX: ffffffffffffffda RBX: 00007f1eea2006c0 RCX: 00007f1ee935d68e [ 1670.405009][T17841] RDX: 000000000000fdef RSI: 00002000000000c0 RDI: 00000000000000c8 [ 1670.405019][T17841] RBP: 00007f1eea200090 R08: 0000000000000000 R09: 0000000000000000 [ 1670.405028][T17841] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1670.405037][T17841] R13: 00007f1ee9616128 R14: 00007f1ee9616090 R15: 00007ffde16cba48 [ 1670.405063][T17841] [ 1671.312077][T17858] netlink: 36 bytes leftover after parsing attributes in process `syz.4.13599'. [ 1671.473087][T17867] netlink: 32 bytes leftover after parsing attributes in process `syz.0.13602'. [ 1671.917686][ T36] net_ratelimit: 23 callbacks suppressed [ 1671.917707][ T36] bond7: (slave bridge0): failed to get link speed/duplex [ 1671.986210][T12970] bond11: (slave bridge1): failed to get link speed/duplex [ 1672.076150][ T12] bond7: (slave bridge0): failed to get link speed/duplex [ 1672.147583][ T36] bond11: (slave bridge1): failed to get link speed/duplex [ 1672.208766][T31914] bond7: (slave bridge0): failed to get link speed/duplex [ 1672.275599][T12970] bond11: (slave bridge1): failed to get link speed/duplex [ 1672.346821][ T9690] bond7: (slave bridge0): failed to get link speed/duplex [ 1672.355006][T17897] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13608'. [ 1672.388111][T17894] xt_CT: No such helper "snmp" [ 1672.395523][T31517] bond11: (slave bridge1): failed to get link speed/duplex [ 1672.511273][ T9690] bond7: (slave bridge0): failed to get link speed/duplex [ 1672.527000][ T9690] bond11: (slave bridge1): failed to get link speed/duplex [ 1673.182228][T17912] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13614'. [ 1674.616683][T17870] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1675.162063][T17948] netlink: 24 bytes leftover after parsing attributes in process `syz.2.13625'. [ 1676.506695][T17978] x_tables: unsorted entry at hook 3 [ 1676.512495][T17978] IPVS: set_ctl: invalid protocol: 123 10.1.1.0:20003 [ 1676.628603][T17973] bond3: option arp_all_targets: invalid value (129) [ 1676.660092][T17973] bond3 (unregistering): Released all slaves [ 1676.831822][T17985] netlink: 16 bytes leftover after parsing attributes in process `syz.4.13634'. [ 1677.082890][ T9690] net_ratelimit: 58 callbacks suppressed [ 1677.082913][ T9690] bond7: (slave bridge0): failed to get link speed/duplex [ 1677.178463][ T9690] bond11: (slave bridge1): failed to get link speed/duplex [ 1677.253820][T17995] netlink: 'syz.0.13637': attribute type 3 has an invalid length. [ 1677.335480][T11018] bond7: (slave bridge0): failed to get link speed/duplex [ 1677.398941][ T48] bond11: (slave bridge1): failed to get link speed/duplex [ 1677.432648][T17995] block nbd0: NBD_DISCONNECT [ 1677.552718][T17995] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1677.573037][T17995] 8021q: adding VLAN 0 to HW filter on device team0 [ 1677.624753][T17995] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1677.744081][T17995] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1677.768116][T17995] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1677.835879][T17995] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 1677.880379][ T9685] bond11: (slave bridge1): failed to get link speed/duplex [ 1677.893614][T18001] syzkaller0: entered promiscuous mode [ 1677.899843][T18001] syzkaller0: entered allmulticast mode [ 1678.266070][ T3278] bond7: (slave bridge0): failed to get link speed/duplex [ 1678.309330][T12970] bond11: (slave bridge1): failed to get link speed/duplex [ 1678.324208][T18016] netlink: 'syz.0.13643': attribute type 8 has an invalid length. [ 1678.400277][T18016] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13643'. [ 1678.411877][ T48] bond7: (slave bridge0): failed to get link speed/duplex [ 1678.496412][ T3335] bond11: (slave bridge1): failed to get link speed/duplex [ 1678.588128][T18016] veth1_to_team: entered promiscuous mode [ 1678.624980][T18016] gretap0: entered promiscuous mode [ 1678.657332][T18016] veth1_to_team: left promiscuous mode [ 1678.697220][T18016] gretap0: left promiscuous mode [ 1679.290088][T18046] netlink: 36 bytes leftover after parsing attributes in process `syz.1.13647'. [ 1680.244814][T18050] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13649'. [ 1680.567724][T18054] FAULT_INJECTION: forcing a failure. [ 1680.567724][T18054] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1680.616247][T18054] CPU: 1 UID: 0 PID: 18054 Comm: syz.4.13651 Not tainted syzkaller #0 PREEMPT(full) [ 1680.616271][T18054] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1680.616279][T18054] Call Trace: [ 1680.616286][T18054] [ 1680.616295][T18054] dump_stack_lvl+0xe8/0x150 [ 1680.616319][T18054] should_fail_ex+0x412/0x560 [ 1680.616345][T18054] _copy_from_iter+0x1d3/0x1670 [ 1680.616368][T18054] ? rcu_is_watching+0x15/0xb0 [ 1680.616392][T18054] ? __pfx__copy_from_iter+0x10/0x10 [ 1680.616419][T18054] ? netlink_sendmsg+0x650/0xb40 [ 1680.616434][T18054] ? skb_put+0x11b/0x210 [ 1680.616459][T18054] netlink_sendmsg+0x6c0/0xb40 [ 1680.616483][T18054] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1680.616505][T18054] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1680.616526][T18054] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1680.616549][T18054] ____sys_sendmsg+0x972/0x9f0 [ 1680.616564][T18054] ? __might_fault+0xaf/0x130 [ 1680.616590][T18054] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1680.616614][T18054] ? import_iovec+0x73/0xa0 [ 1680.616637][T18054] ___sys_sendmsg+0x2a5/0x360 [ 1680.616651][T18054] ? __lock_acquire+0x6b5/0x2cf0 [ 1680.616671][T18054] ? __pfx____sys_sendmsg+0x10/0x10 [ 1680.616718][T18054] ? __fget_files+0x2a/0x420 [ 1680.616735][T18054] ? __fget_files+0x3a0/0x420 [ 1680.616762][T18054] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1680.616781][T18054] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1680.616815][T18054] ? __pfx_ksys_write+0x10/0x10 [ 1680.616845][T18054] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1680.616861][T18054] do_syscall_64+0x15f/0xf80 [ 1680.616882][T18054] ? trace_irq_disable+0x3b/0x140 [ 1680.616904][T18054] ? clear_bhb_loop+0x40/0x90 [ 1680.616924][T18054] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1680.616938][T18054] RIP: 0033:0x7f6ed9d9ce59 [ 1680.616954][T18054] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1680.616967][T18054] RSP: 002b:00007f6edace3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1680.616985][T18054] RAX: ffffffffffffffda RBX: 00007f6eda015fa0 RCX: 00007f6ed9d9ce59 [ 1680.616996][T18054] RDX: 0000000020004084 RSI: 0000200000000180 RDI: 0000000000000003 [ 1680.617006][T18054] RBP: 00007f6edace3090 R08: 0000000000000000 R09: 0000000000000000 [ 1680.617015][T18054] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1680.617025][T18054] R13: 00007f6eda016038 R14: 00007f6eda015fa0 R15: 00007ffe7a4e8538 [ 1680.617051][T18054] [ 1681.147378][T18064] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input114 [ 1681.599347][T18080] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1682.086495][ T3335] net_ratelimit: 31 callbacks suppressed [ 1682.086514][ T3335] bond11: (slave bridge1): failed to get link speed/duplex [ 1682.152138][ T3335] bond7: (slave bridge0): failed to get link speed/duplex [ 1682.175892][T18096] netlink: 12 bytes leftover after parsing attributes in process `syz.4.13664'. [ 1682.245697][ T3335] bond11: (slave bridge1): failed to get link speed/duplex [ 1682.261291][T18100] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13666'. [ 1682.281201][T12970] bond7: (slave bridge0): failed to get link speed/duplex [ 1682.284949][T18100] netlink: 48 bytes leftover after parsing attributes in process `syz.1.13666'. [ 1682.330135][T18100] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13666'. [ 1682.370909][T18100] openvswitch: netlink: Invalid VLAN frame [ 1682.386245][ T36] bond11: (slave bridge1): failed to get link speed/duplex [ 1682.446301][ T9685] bond7: (slave bridge0): failed to get link speed/duplex [ 1682.518008][ T12] bond11: (slave bridge1): failed to get link speed/duplex [ 1682.575468][ T9685] bond7: (slave bridge0): failed to get link speed/duplex [ 1682.645670][ T36] bond11: (slave bridge1): failed to get link speed/duplex [ 1683.086875][T18126] netlink: 24 bytes leftover after parsing attributes in process `syz.1.13671'. [ 1683.855780][T18122] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1684.210174][T18136] netlink: 'syz.0.13673': attribute type 1 has an invalid length. [ 1684.462115][T18136] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1684.957971][T18152] sctp: [Deprecated]: syz.1.13679 (pid 18152) Use of int in maxseg socket option. [ 1684.957971][T18152] Use struct sctp_assoc_value instead [ 1685.036429][T18152] netlink: 232 bytes leftover after parsing attributes in process `syz.1.13679'. [ 1685.390224][T18164] netlink: 'syz.3.13681': attribute type 1 has an invalid length. [ 1685.538222][T18160] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1685.745466][T18164] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1686.216005][T18171] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1686.250447][T18187] netlink: 28 bytes leftover after parsing attributes in process `syz.0.13685'. [ 1686.290237][T18187] netlink: 28 bytes leftover after parsing attributes in process `syz.0.13685'. [ 1686.407893][T18194] netlink: 12 bytes leftover after parsing attributes in process `syz.2.13691'. [ 1686.526160][T18199] syzkaller0: entered promiscuous mode [ 1686.546663][T18199] syzkaller0: entered allmulticast mode [ 1686.872870][T18215] netlink: 48 bytes leftover after parsing attributes in process `syz.3.13693'. [ 1687.165390][ T36] net_ratelimit: 23 callbacks suppressed [ 1687.165408][ T36] bond7: (slave bridge0): failed to get link speed/duplex [ 1687.590411][T18240] netlink: 36 bytes leftover after parsing attributes in process `syz.2.13699'. [ 1687.607908][ T9685] bond11: (slave bridge1): failed to get link speed/duplex [ 1687.728169][T18237] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1687.741412][T18237] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1687.859082][T18237] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1687.896875][T18237] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1687.940410][T18237] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1687.952673][T18237] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1688.012992][T18237] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 1688.276770][ T9685] bond7: (slave bridge0): failed to get link speed/duplex [ 1688.297547][ T12] bond11: (slave bridge1): failed to get link speed/duplex [ 1688.351806][T18255] FAULT_INJECTION: forcing a failure. [ 1688.351806][T18255] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1688.369348][T18255] CPU: 0 UID: 0 PID: 18255 Comm: syz.2.13702 Not tainted syzkaller #0 PREEMPT(full) [ 1688.369364][T18255] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1688.369370][T18255] Call Trace: [ 1688.369375][T18255] [ 1688.369381][T18255] dump_stack_lvl+0xe8/0x150 [ 1688.369447][T18255] should_fail_ex+0x412/0x560 [ 1688.369462][T18255] _copy_from_user+0x2d/0xb0 [ 1688.369477][T18255] ___sys_sendmsg+0x1c6/0x360 [ 1688.369488][T18255] ? __lock_acquire+0x6b5/0x2cf0 [ 1688.369501][T18255] ? __pfx____sys_sendmsg+0x10/0x10 [ 1688.369527][T18255] ? __fget_files+0x2a/0x420 [ 1688.369538][T18255] ? __fget_files+0x3a0/0x420 [ 1688.369554][T18255] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1688.369564][T18255] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1688.369577][T18255] ? __pfx_ksys_write+0x10/0x10 [ 1688.369595][T18255] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1688.369604][T18255] do_syscall_64+0x15f/0xf80 [ 1688.369619][T18255] ? trace_irq_disable+0x3b/0x140 [ 1688.369632][T18255] ? clear_bhb_loop+0x40/0x90 [ 1688.369643][T18255] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1688.369652][T18255] RIP: 0033:0x7ff0ea19ce59 [ 1688.369662][T18255] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1688.369670][T18255] RSP: 002b:00007ff0e83ee028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1688.369681][T18255] RAX: ffffffffffffffda RBX: 00007ff0ea415fa0 RCX: 00007ff0ea19ce59 [ 1688.369688][T18255] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 1688.369693][T18255] RBP: 00007ff0e83ee090 R08: 0000000000000000 R09: 0000000000000000 [ 1688.369699][T18255] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1688.369704][T18255] R13: 00007ff0ea416038 R14: 00007ff0ea415fa0 R15: 00007fff5fd56998 [ 1688.369719][T18255] [ 1688.587697][ T48] bond7: (slave bridge0): failed to get link speed/duplex [ 1688.596162][ T48] bond11: (slave bridge1): failed to get link speed/duplex [ 1688.665217][T18257] bond6: option all_slaves_active: invalid value (127) [ 1688.680360][T18257] bond6 (unregistering): Released all slaves [ 1688.728200][ T36] bond7: (slave bridge0): failed to get link speed/duplex [ 1688.745781][ T12] bond11: (slave bridge1): failed to get link speed/duplex [ 1688.847632][ T48] bond7: (slave bridge0): failed to get link speed/duplex [ 1690.145078][T18225] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1690.537036][T18279] FAULT_INJECTION: forcing a failure. [ 1690.537036][T18279] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1690.586339][T18279] CPU: 0 UID: 0 PID: 18279 Comm: syz.2.13709 Not tainted syzkaller #0 PREEMPT(full) [ 1690.586364][T18279] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1690.586374][T18279] Call Trace: [ 1690.586380][T18279] [ 1690.586388][T18279] dump_stack_lvl+0xe8/0x150 [ 1690.586413][T18279] should_fail_ex+0x412/0x560 [ 1690.586439][T18279] _copy_from_user+0x2d/0xb0 [ 1690.586463][T18279] copy_from_sockptr_offset+0x66/0xa0 [ 1690.586485][T18279] do_ip6t_set_ctl+0x93d/0xe10 [ 1690.586504][T18279] ? rcu_is_watching+0x15/0xb0 [ 1690.586524][T18279] ? trace_contention_end+0x3d/0x140 [ 1690.586546][T18279] ? __pfx_do_ip6t_set_ctl+0x10/0x10 [ 1690.586582][T18279] ? __pfx___mutex_lock+0x10/0x10 [ 1690.586599][T18279] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1690.586626][T18279] ? __pfx___mutex_lock+0x10/0x10 [ 1690.586661][T18279] nf_setsockopt+0x26f/0x290 [ 1690.586688][T18279] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 1690.586708][T18279] smc_setsockopt+0x224/0xad0 [ 1690.586738][T18279] ? __pfx_smc_setsockopt+0x10/0x10 [ 1690.586756][T18279] ? aa_sock_opt_perm+0xff/0x1a0 [ 1690.586780][T18279] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 1690.586800][T18279] ? __pfx_smc_setsockopt+0x10/0x10 [ 1690.586823][T18279] do_sock_setsockopt+0x17c/0x1b0 [ 1690.586850][T18279] __x64_sys_setsockopt+0x13d/0x1b0 [ 1690.586875][T18279] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1690.586893][T18279] do_syscall_64+0x15f/0xf80 [ 1690.586919][T18279] ? clear_bhb_loop+0x40/0x90 [ 1690.586939][T18279] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1690.586954][T18279] RIP: 0033:0x7ff0ea19ce59 [ 1690.586971][T18279] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1690.586984][T18279] RSP: 002b:00007ff0e83ee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1690.587002][T18279] RAX: ffffffffffffffda RBX: 00007ff0ea415fa0 RCX: 00007ff0ea19ce59 [ 1690.587013][T18279] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000007 [ 1690.587023][T18279] RBP: 00007ff0e83ee090 R08: 0000000000000228 R09: 0000000000000000 [ 1690.587033][T18279] R10: 0000200000000e00 R11: 0000000000000246 R12: 0000000000000001 [ 1690.587043][T18279] R13: 00007ff0ea416038 R14: 00007ff0ea415fa0 R15: 00007fff5fd56998 [ 1690.587070][T18279] [ 1691.021255][T18292] netlink: 24 bytes leftover after parsing attributes in process `syz.3.13712'. [ 1691.399440][T18304] IPVS: set_ctl: invalid protocol: 46 172.20.20.11:20004 [ 1691.577276][T18304] netlink: 16 bytes leftover after parsing attributes in process `syz.0.13715'. [ 1692.197146][ T36] net_ratelimit: 48 callbacks suppressed [ 1692.197165][ T36] bond11: (slave bridge1): failed to get link speed/duplex [ 1692.266074][T31518] bond7: (slave bridge0): failed to get link speed/duplex [ 1692.319037][T18343] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 1692.351208][T18343] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1692.368706][ T1030] bond11: (slave bridge1): failed to get link speed/duplex [ 1692.396222][ T1030] bond7: (slave bridge0): failed to get link speed/duplex [ 1692.496104][ T1030] bond11: (slave bridge1): failed to get link speed/duplex [ 1692.518233][T31518] bond7: (slave bridge0): failed to get link speed/duplex [ 1692.615475][ T1030] bond11: (slave bridge1): failed to get link speed/duplex [ 1692.655491][ T3278] bond7: (slave bridge0): failed to get link speed/duplex [ 1692.748694][T18332] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1693.245037][T18373] netlink: 28 bytes leftover after parsing attributes in process `syz.1.13737'. [ 1693.570124][T18393] ip6gre1: entered promiscuous mode [ 1693.575890][T18393] ip6gre1: entered allmulticast mode [ 1693.612483][T18393] netlink: 48 bytes leftover after parsing attributes in process `syz.3.13744'. [ 1693.621969][T18393] netlink: 40 bytes leftover after parsing attributes in process `syz.3.13744'. [ 1693.632494][T18393] netlink: 40 bytes leftover after parsing attributes in process `syz.3.13744'. [ 1693.973147][T18406] netlink: 28 bytes leftover after parsing attributes in process `syz.2.13749'. [ 1694.070952][T18411] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input115 [ 1694.788301][T18437] netlink: 24 bytes leftover after parsing attributes in process `syz.2.13757'. [ 1694.876576][T18441] netlink: 12 bytes leftover after parsing attributes in process `syz.1.13760'. [ 1695.309881][T18458] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13764'. [ 1695.339371][T18461] FAULT_INJECTION: forcing a failure. [ 1695.339371][T18461] name failslab, interval 1, probability 0, space 0, times 0 [ 1695.343862][T18462] netlink: 16 bytes leftover after parsing attributes in process `syz.0.13765'. [ 1695.354000][T18461] CPU: 1 UID: 0 PID: 18461 Comm: syz.4.13766 Not tainted syzkaller #0 PREEMPT(full) [ 1695.354025][T18461] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1695.354035][T18461] Call Trace: [ 1695.354042][T18461] [ 1695.354049][T18461] dump_stack_lvl+0xe8/0x150 [ 1695.354077][T18461] should_fail_ex+0x412/0x560 [ 1695.354104][T18461] should_failslab+0xa8/0x100 [ 1695.354128][T18461] ? alloc_vfsmnt+0x23/0x420 [ 1695.354151][T18461] kmem_cache_alloc_noprof+0x87/0x650 [ 1695.354179][T18461] alloc_vfsmnt+0x23/0x420 [ 1695.354203][T18461] clone_mnt+0x4b/0x9a0 [ 1695.354218][T18461] ? do_raw_spin_unlock+0xf5/0x210 [ 1695.354251][T18461] copy_tree+0x3d4/0x930 [ 1695.354278][T18461] copy_mnt_ns+0x3df/0xcb0 [ 1695.354301][T18461] ? rcu_is_watching+0x15/0xb0 [ 1695.354321][T18461] ? __pfx_copy_mnt_ns+0x10/0x10 [ 1695.354342][T18461] ? create_new_namespaces+0x33/0x6a0 [ 1695.354358][T18461] ? kmem_cache_alloc_noprof+0x15a/0x650 [ 1695.354382][T18461] create_new_namespaces+0xcf/0x6a0 [ 1695.354401][T18461] ? bpf_lsm_capable+0x9/0x20 [ 1695.354417][T18461] ? security_capable+0x7e/0x2c0 [ 1695.354448][T18461] unshare_nsproxy_namespaces+0x149/0x190 [ 1695.354467][T18461] ksys_unshare+0x57d/0x9f0 [ 1695.354495][T18461] ? __pfx_ksys_unshare+0x10/0x10 [ 1695.354512][T18461] ? __pfx_ksys_write+0x10/0x10 [ 1695.354553][T18461] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1695.354571][T18461] __x64_sys_unshare+0x38/0x50 [ 1695.354589][T18461] do_syscall_64+0x15f/0xf80 [ 1695.354613][T18461] ? trace_irq_disable+0x3b/0x140 [ 1695.354636][T18461] ? clear_bhb_loop+0x40/0x90 [ 1695.354655][T18461] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1695.354670][T18461] RIP: 0033:0x7f6ed9d9ce59 [ 1695.354685][T18461] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1695.354698][T18461] RSP: 002b:00007f6edace3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1695.354716][T18461] RAX: ffffffffffffffda RBX: 00007f6eda015fa0 RCX: 00007f6ed9d9ce59 [ 1695.354726][T18461] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000002c060000 [ 1695.354736][T18461] RBP: 00007f6edace3090 R08: 0000000000000000 R09: 0000000000000000 [ 1695.354745][T18461] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1695.354754][T18461] R13: 00007f6eda016038 R14: 00007f6eda015fa0 R15: 00007ffe7a4e8538 [ 1695.354781][T18461] [ 1695.789316][T18467] netlink: 28 bytes leftover after parsing attributes in process `syz.2.13767'. [ 1696.830057][T18499] netlink: 'syz.0.13776': attribute type 58 has an invalid length. [ 1696.901951][T18498] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input116 [ 1697.301319][ T3335] net_ratelimit: 107 callbacks suppressed [ 1697.301340][ T3335] bond11: (slave bridge1): failed to get link speed/duplex [ 1697.376706][T31517] bond7: (slave bridge0): failed to get link speed/duplex [ 1697.467577][T12970] bond11: (slave bridge1): failed to get link speed/duplex [ 1697.518662][T18511] netlink: 'syz.4.13780': attribute type 2 has an invalid length. [ 1697.527420][T31518] bond7: (slave bridge0): failed to get link speed/duplex [ 1697.551889][T18511] netlink: 'syz.4.13780': attribute type 2 has an invalid length. [ 1697.584895][T18511] netlink: 'syz.4.13780': attribute type 2 has an invalid length. [ 1697.596818][T12970] bond11: (slave bridge1): failed to get link speed/duplex [ 1697.638390][T12970] bond7: (slave bridge0): failed to get link speed/duplex [ 1697.717707][T12970] bond11: (slave bridge1): failed to get link speed/duplex [ 1697.757254][ T48] bond7: (slave bridge0): failed to get link speed/duplex [ 1697.855613][ T3278] bond11: (slave bridge1): failed to get link speed/duplex [ 1697.915607][ T3278] bond7: (slave bridge0): failed to get link speed/duplex [ 1698.580038][T18541] __nla_validate_parse: 7 callbacks suppressed [ 1698.580056][T18541] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13789'. [ 1698.595071][T18543] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13791'. [ 1698.801514][T18549] netlink: 52 bytes leftover after parsing attributes in process `syz.3.13792'. [ 1698.978320][T18555] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13795'. [ 1699.042976][T18557] netlink: 12 bytes leftover after parsing attributes in process `syz.3.13796'. [ 1699.410369][T18567] netlink: 16 bytes leftover after parsing attributes in process `syz.3.13800'. [ 1699.475768][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1699.601658][T18574] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13802'. [ 1699.643943][T18569] netlink: 'syz.2.13801': attribute type 1 has an invalid length. [ 1699.749675][T18569] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1699.987593][T18578] netlink: 28 bytes leftover after parsing attributes in process `syz.0.13803'. [ 1700.276999][T18590] netlink: 52 bytes leftover after parsing attributes in process `syz.1.13806'. [ 1700.302045][T18591] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13804'. [ 1700.503492][T18607] FAULT_INJECTION: forcing a failure. [ 1700.503492][T18607] name failslab, interval 1, probability 0, space 0, times 0 [ 1700.521224][T18607] CPU: 0 UID: 0 PID: 18607 Comm: syz.0.13813 Not tainted syzkaller #0 PREEMPT(full) [ 1700.521247][T18607] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1700.521257][T18607] Call Trace: [ 1700.521264][T18607] [ 1700.521271][T18607] dump_stack_lvl+0xe8/0x150 [ 1700.521297][T18607] should_fail_ex+0x412/0x560 [ 1700.521323][T18607] should_failslab+0xa8/0x100 [ 1700.521345][T18607] ? skb_clone+0x212/0x3a0 [ 1700.521365][T18607] kmem_cache_alloc_noprof+0x87/0x650 [ 1700.521383][T18607] ? __netlink_lookup+0xc6/0x8b0 [ 1700.521406][T18607] skb_clone+0x212/0x3a0 [ 1700.521425][T18607] __netlink_deliver_tap+0x404/0x850 [ 1700.521451][T18607] ? netlink_deliver_tap+0x2e/0x1b0 [ 1700.521469][T18607] netlink_deliver_tap+0x19c/0x1b0 [ 1700.521486][T18607] netlink_unicast+0x730/0x8e0 [ 1700.521519][T18607] netlink_sendmsg+0x813/0xb40 [ 1700.521545][T18607] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1700.521566][T18607] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1700.521588][T18607] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1700.521613][T18607] ____sys_sendmsg+0x972/0x9f0 [ 1700.521629][T18607] ? __might_fault+0xaf/0x130 [ 1700.521655][T18607] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1700.521680][T18607] ? import_iovec+0x73/0xa0 [ 1700.521705][T18607] ___sys_sendmsg+0x2a5/0x360 [ 1700.521720][T18607] ? __lock_acquire+0x6b5/0x2cf0 [ 1700.521741][T18607] ? __pfx____sys_sendmsg+0x10/0x10 [ 1700.521789][T18607] ? __fget_files+0x2a/0x420 [ 1700.521808][T18607] ? __fget_files+0x3a0/0x420 [ 1700.521834][T18607] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1700.521853][T18607] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1700.521887][T18607] ? __pfx_ksys_write+0x10/0x10 [ 1700.521916][T18607] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1700.521933][T18607] do_syscall_64+0x15f/0xf80 [ 1700.521954][T18607] ? trace_irq_disable+0x3b/0x140 [ 1700.521975][T18607] ? clear_bhb_loop+0x40/0x90 [ 1700.521995][T18607] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1700.522009][T18607] RIP: 0033:0x7f1ee939ce59 [ 1700.522025][T18607] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1700.522038][T18607] RSP: 002b:00007f1eea221028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1700.522055][T18607] RAX: ffffffffffffffda RBX: 00007f1ee9615fa0 RCX: 00007f1ee939ce59 [ 1700.522066][T18607] RDX: 0000000000004000 RSI: 0000200000000440 RDI: 0000000000000004 [ 1700.522077][T18607] RBP: 00007f1eea221090 R08: 0000000000000000 R09: 0000000000000000 [ 1700.522086][T18607] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1700.522095][T18607] R13: 00007f1ee9616038 R14: 00007f1ee9615fa0 R15: 00007ffde16cba48 [ 1700.522124][T18607] [ 1702.388085][T12970] net_ratelimit: 73 callbacks suppressed [ 1702.388103][T12970] bond11: (slave bridge1): failed to get link speed/duplex [ 1702.405990][T31518] bond7: (slave bridge0): failed to get link speed/duplex [ 1702.500344][T18657] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input117 [ 1702.517352][T12970] bond7: (slave bridge0): failed to get link speed/duplex [ 1702.535731][T31518] bond11: (slave bridge1): failed to get link speed/duplex [ 1702.635472][T31518] bond7: (slave bridge0): failed to get link speed/duplex [ 1702.680820][ T3335] bond11: (slave bridge1): failed to get link speed/duplex [ 1702.745831][ T3278] bond7: (slave bridge0): failed to get link speed/duplex [ 1702.795466][ T48] bond11: (slave bridge1): failed to get link speed/duplex [ 1702.855691][ T3278] bond7: (slave bridge0): failed to get link speed/duplex [ 1702.905531][ T3335] bond11: (slave bridge1): failed to get link speed/duplex [ 1703.056395][T18581] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1703.198992][T18660] FAULT_INJECTION: forcing a failure. [ 1703.198992][T18660] name failslab, interval 1, probability 0, space 0, times 0 [ 1703.224258][T18660] CPU: 1 UID: 0 PID: 18660 Comm: syz.3.13828 Not tainted syzkaller #0 PREEMPT(full) [ 1703.224280][T18660] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1703.224290][T18660] Call Trace: [ 1703.224297][T18660] [ 1703.224304][T18660] dump_stack_lvl+0xe8/0x150 [ 1703.224331][T18660] should_fail_ex+0x412/0x560 [ 1703.224357][T18660] should_failslab+0xa8/0x100 [ 1703.224380][T18660] ? skb_clone+0x212/0x3a0 [ 1703.224397][T18660] kmem_cache_alloc_noprof+0x87/0x650 [ 1703.224419][T18660] ? __netlink_lookup+0xc6/0x8b0 [ 1703.224442][T18660] skb_clone+0x212/0x3a0 [ 1703.224462][T18660] __netlink_deliver_tap+0x404/0x850 [ 1703.224490][T18660] ? netlink_deliver_tap+0x2e/0x1b0 [ 1703.224508][T18660] netlink_deliver_tap+0x19c/0x1b0 [ 1703.224526][T18660] netlink_unicast+0x730/0x8e0 [ 1703.224559][T18660] netlink_sendmsg+0x813/0xb40 [ 1703.224584][T18660] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1703.224604][T18660] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1703.224627][T18660] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1703.224651][T18660] ____sys_sendmsg+0x972/0x9f0 [ 1703.224667][T18660] ? __might_fault+0xaf/0x130 [ 1703.224700][T18660] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1703.224725][T18660] ? import_iovec+0x73/0xa0 [ 1703.224751][T18660] ___sys_sendmsg+0x2a5/0x360 [ 1703.224766][T18660] ? __lock_acquire+0x6b5/0x2cf0 [ 1703.224787][T18660] ? __pfx____sys_sendmsg+0x10/0x10 [ 1703.224838][T18660] ? __fget_files+0x2a/0x420 [ 1703.224856][T18660] ? __fget_files+0x3a0/0x420 [ 1703.224883][T18660] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1703.224901][T18660] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1703.224926][T18660] ? __pfx_ksys_write+0x10/0x10 [ 1703.224957][T18660] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1703.224975][T18660] do_syscall_64+0x15f/0xf80 [ 1703.224996][T18660] ? trace_irq_disable+0x3b/0x140 [ 1703.225018][T18660] ? clear_bhb_loop+0x40/0x90 [ 1703.225038][T18660] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1703.225054][T18660] RIP: 0033:0x7f15b359ce59 [ 1703.225069][T18660] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1703.225083][T18660] RSP: 002b:00007f15b4374028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1703.225101][T18660] RAX: ffffffffffffffda RBX: 00007f15b3815fa0 RCX: 00007f15b359ce59 [ 1703.225112][T18660] RDX: 0000000000000000 RSI: 0000200000000540 RDI: 0000000000000003 [ 1703.225120][T18660] RBP: 00007f15b4374090 R08: 0000000000000000 R09: 0000000000000000 [ 1703.225130][T18660] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1703.225139][T18660] R13: 00007f15b3816038 R14: 00007f15b3815fa0 R15: 00007ffdd1ae7618 [ 1703.225167][T18660] [ 1703.718334][T18674] ipip0: entered promiscuous mode [ 1703.729428][T18674] __nla_validate_parse: 5 callbacks suppressed [ 1703.729449][T18674] netlink: 24 bytes leftover after parsing attributes in process `syz.2.13830'. [ 1703.793249][T18680] FAULT_INJECTION: forcing a failure. [ 1703.793249][T18680] name failslab, interval 1, probability 0, space 0, times 0 [ 1703.824951][T18680] CPU: 0 UID: 0 PID: 18680 Comm: syz.0.13835 Not tainted syzkaller #0 PREEMPT(full) [ 1703.824975][T18680] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1703.824985][T18680] Call Trace: [ 1703.824992][T18680] [ 1703.825000][T18680] dump_stack_lvl+0xe8/0x150 [ 1703.825026][T18680] should_fail_ex+0x412/0x560 [ 1703.825052][T18680] should_failslab+0xa8/0x100 [ 1703.825075][T18680] __kmalloc_cache_noprof+0x88/0x660 [ 1703.825094][T18680] ? tcf_chain_tp_insert_unique+0xbe3/0xff0 [ 1703.825115][T18680] ? fl_change+0x159/0x3940 [ 1703.825138][T18680] fl_change+0x159/0x3940 [ 1703.825158][T18680] ? fl_get+0x9a/0x3b0 [ 1703.825177][T18680] ? fl_get+0x9a/0x3b0 [ 1703.825200][T18680] ? fl_get+0x9a/0x3b0 [ 1703.825217][T18680] ? fl_get+0x9a/0x3b0 [ 1703.825232][T18680] ? fl_get+0x9a/0x3b0 [ 1703.825250][T18680] ? fl_get+0x326/0x3b0 [ 1703.825264][T18680] ? __pfx_fl_change+0x10/0x10 [ 1703.825279][T18680] ? __pfx_fl_get+0x10/0x10 [ 1703.825301][T18680] tc_new_tfilter+0xff8/0x1780 [ 1703.825340][T18680] ? __pfx_tc_new_tfilter+0x10/0x10 [ 1703.825369][T18680] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 1703.825403][T18680] ? __pfx_tc_new_tfilter+0x10/0x10 [ 1703.825418][T18680] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 1703.825449][T18680] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 1703.825469][T18680] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1703.825486][T18680] ? ref_tracker_free+0x693/0x840 [ 1703.825509][T18680] ? __pfx_ref_tracker_free+0x10/0x10 [ 1703.825537][T18680] netlink_rcv_skb+0x232/0x4b0 [ 1703.825554][T18680] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1703.825574][T18680] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1703.825601][T18680] ? netlink_deliver_tap+0x2e/0x1b0 [ 1703.825616][T18680] ? netlink_deliver_tap+0x2e/0x1b0 [ 1703.825636][T18680] netlink_unicast+0x75c/0x8e0 [ 1703.825666][T18680] netlink_sendmsg+0x813/0xb40 [ 1703.825691][T18680] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1703.825709][T18680] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1703.825730][T18680] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1703.825753][T18680] ____sys_sendmsg+0x972/0x9f0 [ 1703.825769][T18680] ? __might_fault+0xaf/0x130 [ 1703.825792][T18680] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1703.825816][T18680] ? import_iovec+0x73/0xa0 [ 1703.825840][T18680] ___sys_sendmsg+0x2a5/0x360 [ 1703.825854][T18680] ? __lock_acquire+0x6b5/0x2cf0 [ 1703.825876][T18680] ? __pfx____sys_sendmsg+0x10/0x10 [ 1703.825920][T18680] ? __fget_files+0x2a/0x420 [ 1703.825937][T18680] ? __fget_files+0x3a0/0x420 [ 1703.825960][T18680] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1703.825979][T18680] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1703.826003][T18680] ? __pfx_ksys_write+0x10/0x10 [ 1703.826031][T18680] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1703.826047][T18680] do_syscall_64+0x15f/0xf80 [ 1703.826067][T18680] ? trace_irq_disable+0x3b/0x140 [ 1703.826087][T18680] ? clear_bhb_loop+0x40/0x90 [ 1703.826105][T18680] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1703.826118][T18680] RIP: 0033:0x7f1ee939ce59 [ 1703.826133][T18680] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1703.826146][T18680] RSP: 002b:00007f1eea221028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1703.826163][T18680] RAX: ffffffffffffffda RBX: 00007f1ee9615fa0 RCX: 00007f1ee939ce59 [ 1703.826174][T18680] RDX: 0000000020000800 RSI: 0000200000000900 RDI: 0000000000000004 [ 1703.826182][T18680] RBP: 00007f1eea221090 R08: 0000000000000000 R09: 0000000000000000 [ 1703.826192][T18680] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1703.826201][T18680] R13: 00007f1ee9616038 R14: 00007f1ee9615fa0 R15: 00007ffde16cba48 [ 1703.826228][T18680] [ 1704.607996][T18697] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input118 [ 1704.929710][T18710] bond0: (slave bond_slave_0): Releasing backup interface [ 1705.050266][T18710] bond0: (slave bond_slave_1): Releasing backup interface [ 1705.129553][T18710] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1705.179025][T18710] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1705.207743][T18710] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1705.227573][T18710] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1705.243651][T18729] netlink: 52 bytes leftover after parsing attributes in process `syz.0.13846'. [ 1705.365119][T18731] FAULT_INJECTION: forcing a failure. [ 1705.365119][T18731] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1705.379048][T18731] CPU: 1 UID: 0 PID: 18731 Comm: syz.4.13847 Not tainted syzkaller #0 PREEMPT(full) [ 1705.379071][T18731] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1705.379080][T18731] Call Trace: [ 1705.379086][T18731] [ 1705.379093][T18731] dump_stack_lvl+0xe8/0x150 [ 1705.379118][T18731] should_fail_ex+0x412/0x560 [ 1705.379142][T18731] _copy_to_user+0x31/0xb0 [ 1705.379165][T18731] simple_read_from_buffer+0xe1/0x170 [ 1705.379189][T18731] proc_fail_nth_read+0x1bb/0x230 [ 1705.379212][T18731] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1705.379233][T18731] ? rw_verify_area+0x2a6/0x4d0 [ 1705.379253][T18731] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1705.379273][T18731] vfs_read+0x20c/0xa70 [ 1705.379297][T18731] ? __pfx___mutex_lock+0x10/0x10 [ 1705.379323][T18731] ? __pfx_vfs_read+0x10/0x10 [ 1705.379344][T18731] ? __fget_files+0x2a/0x420 [ 1705.379364][T18731] ? __fget_files+0x3a0/0x420 [ 1705.379380][T18731] ? __fget_files+0x2a/0x420 [ 1705.379405][T18731] ksys_read+0x150/0x270 [ 1705.379427][T18731] ? __pfx_ksys_read+0x10/0x10 [ 1705.379455][T18731] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1705.379471][T18731] do_syscall_64+0x15f/0xf80 [ 1705.379490][T18731] ? trace_irq_disable+0x3b/0x140 [ 1705.379510][T18731] ? clear_bhb_loop+0x40/0x90 [ 1705.379529][T18731] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1705.379544][T18731] RIP: 0033:0x7f6ed9d5d68e [ 1705.379558][T18731] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1705.379570][T18731] RSP: 002b:00007f6edace2fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1705.379586][T18731] RAX: ffffffffffffffda RBX: 00007f6edace36c0 RCX: 00007f6ed9d5d68e [ 1705.379597][T18731] RDX: 000000000000000f RSI: 00007f6edace30a0 RDI: 000000000000000d [ 1705.379607][T18731] RBP: 00007f6edace3090 R08: 0000000000000000 R09: 0000000000000000 [ 1705.379616][T18731] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1705.379625][T18731] R13: 00007f6eda016038 R14: 00007f6eda015fa0 R15: 00007ffe7a4e8538 [ 1705.379652][T18731] [ 1706.121202][T18751] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input119 [ 1706.260448][T18755] netlink: 12 bytes leftover after parsing attributes in process `syz.3.13856'. [ 1706.339926][ T5638] block nbd0: Receive control failed (result -107) [ 1706.641172][T18763] netlink: 52 bytes leftover after parsing attributes in process `syz.3.13858'. [ 1706.808549][T18767] Bluetooth: MGMT ver 1.23 [ 1706.821134][T18767] FAULT_INJECTION: forcing a failure. [ 1706.821134][T18767] name failslab, interval 1, probability 0, space 0, times 0 [ 1706.827653][T18769] FAULT_INJECTION: forcing a failure. [ 1706.827653][T18769] name failslab, interval 1, probability 0, space 0, times 0 [ 1706.869651][T18769] CPU: 1 UID: 0 PID: 18769 Comm: syz.3.13860 Not tainted syzkaller #0 PREEMPT(full) [ 1706.869675][T18769] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1706.869685][T18769] Call Trace: [ 1706.869693][T18769] [ 1706.869702][T18769] dump_stack_lvl+0xe8/0x150 [ 1706.869727][T18769] should_fail_ex+0x412/0x560 [ 1706.869754][T18769] should_failslab+0xa8/0x100 [ 1706.869779][T18769] __kmalloc_noprof+0xe8/0x760 [ 1706.869801][T18769] ? nft_set_elem_expr_clone+0xe8/0xa90 [ 1706.869826][T18769] nft_set_elem_expr_clone+0xe8/0xa90 [ 1706.869852][T18769] nf_tables_newsetelem+0x1471/0x4340 [ 1706.869872][T18769] ? is_bpf_text_address+0x26/0x2b0 [ 1706.869926][T18769] ? __lock_acquire+0x6b5/0x2cf0 [ 1706.869944][T18769] ? __pfx_nf_tables_newsetelem+0x10/0x10 [ 1706.869966][T18769] ? stack_depot_save_flags+0x33/0x810 [ 1706.869995][T18769] ? nla_validate_array+0xfc/0x260 [ 1706.870039][T18769] ? __pfx___nla_validate_parse+0x10/0x10 [ 1706.870064][T18769] ? nfnetlink_rcv+0x8bc/0x27b0 [ 1706.870087][T18769] ? nfnl_pernet+0x23/0x240 [ 1706.870111][T18769] ? nfnl_pernet+0x23/0x240 [ 1706.870142][T18769] ? __nla_parse+0x40/0x60 [ 1706.870174][T18769] nfnetlink_rcv+0x123e/0x27b0 [ 1706.870224][T18769] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 1706.870256][T18769] ? ref_tracker_free+0x693/0x840 [ 1706.870307][T18769] ? __netlink_deliver_tap+0x807/0x850 [ 1706.870333][T18769] ? netlink_deliver_tap+0x2e/0x1b0 [ 1706.870348][T18769] ? netlink_deliver_tap+0x2e/0x1b0 [ 1706.870370][T18769] netlink_unicast+0x75c/0x8e0 [ 1706.870403][T18769] netlink_sendmsg+0x813/0xb40 [ 1706.870429][T18769] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1706.870449][T18769] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1706.870471][T18769] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1706.870495][T18769] ____sys_sendmsg+0x972/0x9f0 [ 1706.870512][T18769] ? __might_fault+0xaf/0x130 [ 1706.870538][T18769] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1706.870563][T18769] ? import_iovec+0x73/0xa0 [ 1706.870589][T18769] ___sys_sendmsg+0x2a5/0x360 [ 1706.870604][T18769] ? __lock_acquire+0x6b5/0x2cf0 [ 1706.870625][T18769] ? __pfx____sys_sendmsg+0x10/0x10 [ 1706.870676][T18769] ? __fget_files+0x2a/0x420 [ 1706.870694][T18769] ? __fget_files+0x3a0/0x420 [ 1706.870722][T18769] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1706.870741][T18769] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1706.870767][T18769] ? __pfx_ksys_write+0x10/0x10 [ 1706.870798][T18769] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1706.870816][T18769] do_syscall_64+0x15f/0xf80 [ 1706.870838][T18769] ? trace_irq_disable+0x3b/0x140 [ 1706.870860][T18769] ? clear_bhb_loop+0x40/0x90 [ 1706.870880][T18769] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1706.870895][T18769] RIP: 0033:0x7f15b359ce59 [ 1706.870912][T18769] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1706.870925][T18769] RSP: 002b:00007f15b4374028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1706.870943][T18769] RAX: ffffffffffffffda RBX: 00007f15b3815fa0 RCX: 00007f15b359ce59 [ 1706.870954][T18769] RDX: 0000000000000040 RSI: 0000200000009b40 RDI: 0000000000000003 [ 1706.870964][T18769] RBP: 00007f15b4374090 R08: 0000000000000000 R09: 0000000000000000 [ 1706.870974][T18769] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1706.870984][T18769] R13: 00007f15b3816038 R14: 00007f15b3815fa0 R15: 00007ffdd1ae7618 [ 1706.871013][T18769] [ 1706.884996][T18767] CPU: 0 UID: 0 PID: 18767 Comm: syz.4.13861 Not tainted syzkaller #0 PREEMPT(full) [ 1706.885019][T18767] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1706.885029][T18767] Call Trace: [ 1706.885037][T18767] [ 1706.885047][T18767] dump_stack_lvl+0xe8/0x150 [ 1706.885073][T18767] should_fail_ex+0x412/0x560 [ 1706.885099][T18767] should_failslab+0xa8/0x100 [ 1706.885124][T18767] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 1706.885147][T18767] ? __alloc_skb+0x1d0/0x7d0 [ 1706.885167][T18767] ? __local_bh_enable_ip+0xd0/0x130 [ 1706.885188][T18767] __alloc_skb+0x1d0/0x7d0 [ 1706.885209][T18767] ? __pfx_get_current_settings+0x10/0x10 [ 1706.885235][T18767] mgmt_cmd_complete+0x49/0x5f0 [ 1706.885254][T18767] ? pcpu_alloc+0x10/0x310 [ 1706.885280][T18767] set_debug_keys+0x302/0x5c0 [ 1706.885303][T18767] ? __pfx_set_debug_keys+0x10/0x10 [ 1706.885320][T18767] ? timer_init_key+0x161/0x2c0 [ 1706.885351][T18767] hci_mgmt_cmd+0xa14/0xfa0 [ 1706.885383][T18767] hci_sock_sendmsg+0x6dd/0xf40 [ 1706.885401][T18767] ? __pfx_aa_sk_perm+0x10/0x10 [ 1706.885428][T18767] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 1706.885447][T18767] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1706.885468][T18767] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1706.885490][T18767] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 1706.885507][T18767] sock_write_iter+0x49b/0x4f0 [ 1706.885529][T18767] ? __pfx_sock_write_iter+0x10/0x10 [ 1706.885557][T18767] ? bpf_lsm_file_permission+0x9/0x20 [ 1706.885577][T18767] ? security_file_permission+0x75/0x260 [ 1706.885603][T18767] vfs_write+0x61d/0xb90 [ 1706.885633][T18767] ? __pfx_vfs_write+0x10/0x10 [ 1706.885655][T18767] ? do_sys_openat2+0x14c/0x200 [ 1706.885671][T18767] ? kmem_cache_free+0x182/0x650 [ 1706.885689][T18767] ? fd_install+0x94/0x3d0 [ 1706.885721][T18767] ksys_write+0x150/0x270 [ 1706.885745][T18767] ? __pfx_ksys_write+0x10/0x10 [ 1706.885773][T18767] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1706.885790][T18767] do_syscall_64+0x15f/0xf80 [ 1706.885819][T18767] ? trace_irq_disable+0x3b/0x140 [ 1706.885841][T18767] ? clear_bhb_loop+0x40/0x90 [ 1706.885859][T18767] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1706.885875][T18767] RIP: 0033:0x7f6ed9d9ce59 [ 1706.885890][T18767] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1706.885903][T18767] RSP: 002b:00007f6edace3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1706.885924][T18767] RAX: ffffffffffffffda RBX: 00007f6eda015fa0 RCX: 00007f6ed9d9ce59 [ 1706.885935][T18767] RDX: 0000000000000007 RSI: 0000200000000000 RDI: 0000000000000007 [ 1706.885944][T18767] RBP: 00007f6edace3090 R08: 0000000000000000 R09: 0000000000000000 [ 1706.885953][T18767] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1706.885962][T18767] R13: 00007f6eda016038 R14: 00007f6eda015fa0 R15: 00007ffe7a4e8538 [ 1706.885990][T18767] [ 1707.548089][ T48] net_ratelimit: 50 callbacks suppressed [ 1707.548110][ T48] bond7: (slave bridge0): failed to get link speed/duplex [ 1707.883191][ T12] bond11: (slave bridge1): failed to get link speed/duplex [ 1708.047716][ T48] bond7: (slave bridge0): failed to get link speed/duplex [ 1708.245587][ T48] bond11: (slave bridge1): failed to get link speed/duplex [ 1708.311031][T18782] netlink: 12 bytes leftover after parsing attributes in process `syz.4.13868'. [ 1708.323808][T18780] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input120 [ 1708.355690][ T1030] bond7: (slave bridge0): failed to get link speed/duplex [ 1708.385570][ T1030] bond11: (slave bridge1): failed to get link speed/duplex [ 1708.488015][ T48] bond7: (slave bridge0): failed to get link speed/duplex [ 1708.519186][ T48] bond11: (slave bridge1): failed to get link speed/duplex [ 1708.641047][T18793] ipip0: entered promiscuous mode [ 1708.652695][T18795] netlink: 24 bytes leftover after parsing attributes in process `syz.0.13869'. [ 1708.676134][ T3278] bond11: (slave bridge1): failed to get link speed/duplex [ 1708.695836][ T3278] bond7: (slave bridge0): failed to get link speed/duplex [ 1708.718495][T18797] sctp: [Deprecated]: syz.2.13872 (pid 18797) Use of int in maxseg socket option. [ 1708.718495][T18797] Use struct sctp_assoc_value instead [ 1708.767007][T18797] netlink: 232 bytes leftover after parsing attributes in process `syz.2.13872'. [ 1708.812075][T18803] netlink: 36 bytes leftover after parsing attributes in process `syz.3.13875'. [ 1709.317920][T18821] netlink: 52 bytes leftover after parsing attributes in process `syz.4.13881'. [ 1709.712727][T18831] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input121 [ 1709.788630][T18516] udevd[18516]: setting mode of /dev/input/mouse1 to 020660 failed: No such file or directory [ 1709.800328][T18516] udevd[18516]: setting owner of /dev/input/mouse1 to uid=0, gid=104 failed: No such file or directory [ 1710.159020][T18847] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13884'. [ 1710.801620][T18860] FAULT_INJECTION: forcing a failure. [ 1710.801620][T18860] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1710.854531][T18860] CPU: 0 UID: 0 PID: 18860 Comm: syz.4.13886 Not tainted syzkaller #0 PREEMPT(full) [ 1710.854555][T18860] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1710.854565][T18860] Call Trace: [ 1710.854572][T18860] [ 1710.854579][T18860] dump_stack_lvl+0xe8/0x150 [ 1710.854604][T18860] should_fail_ex+0x412/0x560 [ 1710.854630][T18860] _copy_from_user+0x2d/0xb0 [ 1710.854653][T18860] ___sys_sendmsg+0x1c6/0x360 [ 1710.854676][T18860] ? __lock_acquire+0x6b5/0x2cf0 [ 1710.854698][T18860] ? __pfx____sys_sendmsg+0x10/0x10 [ 1710.854746][T18860] ? __fget_files+0x2a/0x420 [ 1710.854763][T18860] ? __fget_files+0x3a0/0x420 [ 1710.854790][T18860] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1710.854809][T18860] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1710.854834][T18860] ? __pfx_ksys_write+0x10/0x10 [ 1710.854861][T18860] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1710.854877][T18860] do_syscall_64+0x15f/0xf80 [ 1710.854897][T18860] ? trace_irq_disable+0x3b/0x140 [ 1710.854917][T18860] ? clear_bhb_loop+0x40/0x90 [ 1710.854936][T18860] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1710.854951][T18860] RIP: 0033:0x7f6ed9d9ce59 [ 1710.854966][T18860] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1710.854978][T18860] RSP: 002b:00007f6edace3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1710.854995][T18860] RAX: ffffffffffffffda RBX: 00007f6eda015fa0 RCX: 00007f6ed9d9ce59 [ 1710.855006][T18860] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 1710.855016][T18860] RBP: 00007f6edace3090 R08: 0000000000000000 R09: 0000000000000000 [ 1710.855026][T18860] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1710.855035][T18860] R13: 00007f6eda016038 R14: 00007f6eda015fa0 R15: 00007ffe7a4e8538 [ 1710.855062][T18860] [ 1711.378014][T18874] netlink: 24 bytes leftover after parsing attributes in process `syz.4.13889'. [ 1711.456324][T18875] sctp: [Deprecated]: syz.3.13887 (pid 18875) Use of int in maxseg socket option. [ 1711.456324][T18875] Use struct sctp_assoc_value instead [ 1711.538988][T18875] netlink: 232 bytes leftover after parsing attributes in process `syz.3.13887'. [ 1711.783744][T18890] netlink: 'syz.2.13891': attribute type 58 has an invalid length. [ 1711.830765][T18893] netlink: 52 bytes leftover after parsing attributes in process `syz.4.13893'. [ 1711.842310][T18890] netlink: 20 bytes leftover after parsing attributes in process `syz.2.13891'. [ 1711.956817][T18895] ipip0: entered promiscuous mode [ 1711.977845][T18901] netlink: 24 bytes leftover after parsing attributes in process `syz.3.13892'. [ 1712.101452][T18904] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input122 [ 1712.162593][T18909] netlink: 28 bytes leftover after parsing attributes in process `syz.0.13897'. [ 1712.586224][T31518] net_ratelimit: 33 callbacks suppressed [ 1712.586245][T31518] bond7: (slave bridge0): failed to get link speed/duplex [ 1712.659414][T12970] bond11: (slave bridge1): failed to get link speed/duplex [ 1712.677901][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1712.711526][T18931] sctp: [Deprecated]: syz.2.13902 (pid 18931) Use of int in maxseg socket option. [ 1712.711526][T18931] Use struct sctp_assoc_value instead [ 1712.746955][T31518] bond7: (slave bridge0): failed to get link speed/duplex [ 1712.796250][ T3278] bond11: (slave bridge1): failed to get link speed/duplex [ 1712.857808][T31518] bond7: (slave bridge0): failed to get link speed/duplex [ 1712.949764][ T12] bond11: (slave bridge1): failed to get link speed/duplex [ 1712.985802][ T12] bond7: (slave bridge0): failed to get link speed/duplex [ 1713.089592][T31518] bond11: (slave bridge1): failed to get link speed/duplex [ 1713.137841][T31518] bond7: (slave bridge0): failed to get link speed/duplex [ 1713.462426][T18965] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input123 [ 1713.474204][T18967] netlink: 'syz.4.13909': attribute type 58 has an invalid length. [ 1714.167656][T18987] __nla_validate_parse: 2 callbacks suppressed [ 1714.167673][T18987] netlink: 24 bytes leftover after parsing attributes in process `syz.3.13913'. [ 1714.836917][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1715.098936][T19004] netlink: 'syz.2.13922': attribute type 58 has an invalid length. [ 1715.178439][T19004] netlink: 20 bytes leftover after parsing attributes in process `syz.2.13922'. [ 1715.367409][T19010] tipc: Started in network mode [ 1715.386000][T19010] tipc: Node identity bea84498d597, cluster identity 4711 [ 1715.424090][T19010] tipc: Enabled bearer , priority 0 [ 1715.458406][T19013] syzkaller0: entered promiscuous mode [ 1715.491409][T19013] syzkaller0: entered allmulticast mode [ 1715.527884][T19010] tipc: Resetting bearer [ 1715.899472][T19009] tipc: Resetting bearer [ 1715.917061][T19027] netlink: 24 bytes leftover after parsing attributes in process `syz.3.13929'. [ 1715.987198][T19009] tipc: Disabling bearer [ 1716.318834][T19040] sctp: [Deprecated]: syz.1.13933 (pid 19040) Use of int in maxseg socket option. [ 1716.318834][T19040] Use struct sctp_assoc_value instead [ 1716.411363][T19040] netlink: 232 bytes leftover after parsing attributes in process `syz.1.13933'. [ 1716.707738][T19051] netlink: 'syz.0.13936': attribute type 2 has an invalid length. [ 1716.775112][T19051] netlink: 'syz.0.13936': attribute type 2 has an invalid length. [ 1716.789032][T19053] netlink: 'syz.1.13937': attribute type 58 has an invalid length. [ 1716.810045][T19053] netlink: 20 bytes leftover after parsing attributes in process `syz.1.13937'. [ 1717.152817][T19063] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input124 [ 1717.688965][T17996] net_ratelimit: 60 callbacks suppressed [ 1717.688984][T17996] bond11: (slave bridge1): failed to get link speed/duplex [ 1717.854976][T19082] netlink: 28 bytes leftover after parsing attributes in process `syz.3.13942'. [ 1717.875951][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1717.930659][T19082] netlink: 24 bytes leftover after parsing attributes in process `syz.3.13942'. [ 1717.965445][ T9685] bond11: (slave bridge1): failed to get link speed/duplex [ 1717.985725][ T9685] bond7: (slave bridge0): failed to get link speed/duplex [ 1718.014438][T19084] netlink: 36 bytes leftover after parsing attributes in process `syz.2.13943'. [ 1718.538553][T17996] bond7: (slave bridge0): failed to get link speed/duplex [ 1718.587156][T17996] bond11: (slave bridge1): failed to get link speed/duplex [ 1718.677814][ T3278] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1718.768648][T31518] bond7: (slave bridge0): failed to get link speed/duplex [ 1718.810695][ T3278] bond11: (slave bridge1): failed to get link speed/duplex [ 1718.898447][ T3335] bond7: (slave bridge0): failed to get link speed/duplex [ 1718.953262][T19095] sctp: [Deprecated]: syz.4.13947 (pid 19095) Use of int in maxseg socket option. [ 1718.953262][T19095] Use struct sctp_assoc_value instead [ 1719.077052][T19095] netlink: 232 bytes leftover after parsing attributes in process `syz.4.13947'. [ 1719.108319][T19103] netlink: 'syz.3.13950': attribute type 58 has an invalid length. [ 1719.131143][T19104] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13949'. [ 1719.539227][T19115] FAULT_INJECTION: forcing a failure. [ 1719.539227][T19115] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1719.596881][T19115] CPU: 1 UID: 0 PID: 19115 Comm: syz.3.13953 Not tainted syzkaller #0 PREEMPT(full) [ 1719.596909][T19115] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1719.596919][T19115] Call Trace: [ 1719.596926][T19115] [ 1719.596934][T19115] dump_stack_lvl+0xe8/0x150 [ 1719.596958][T19115] should_fail_ex+0x412/0x560 [ 1719.596984][T19115] _copy_from_user+0x2d/0xb0 [ 1719.597007][T19115] copy_from_sockptr_offset+0x66/0xa0 [ 1719.597035][T19115] do_tcp_getsockopt+0xda4/0x2940 [ 1719.597063][T19115] ? __pfx_do_tcp_getsockopt+0x10/0x10 [ 1719.597080][T19115] ? sock_common_getsockopt+0x20/0xb0 [ 1719.597101][T19115] ? aa_file_perm+0x192/0x15e0 [ 1719.597129][T19115] ? aa_label_sk_perm+0x532/0x6e0 [ 1719.597155][T19115] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 1719.597176][T19115] ? _parse_integer_limit+0x1ae/0x1f0 [ 1719.597202][T19115] ? __lock_acquire+0x6b5/0x2cf0 [ 1719.597256][T19115] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 1719.597277][T19115] tcp_getsockopt+0x83/0x130 [ 1719.597294][T19115] ? sock_common_getsockopt+0x20/0xb0 [ 1719.597313][T19115] ? sock_common_getsockopt+0x20/0xb0 [ 1719.597333][T19115] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 1719.597352][T19115] do_sock_getsockopt+0x51d/0x7e0 [ 1719.597380][T19115] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 1719.597418][T19115] ? __fget_files+0x3a0/0x420 [ 1719.597435][T19115] ? __fget_files+0x2a/0x420 [ 1719.597460][T19115] __x64_sys_getsockopt+0x1a4/0x240 [ 1719.597481][T19115] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1719.597499][T19115] do_syscall_64+0x15f/0xf80 [ 1719.597520][T19115] ? trace_irq_disable+0x3b/0x140 [ 1719.597542][T19115] ? clear_bhb_loop+0x40/0x90 [ 1719.597561][T19115] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1719.597576][T19115] RIP: 0033:0x7f15b359ce59 [ 1719.597592][T19115] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1719.597605][T19115] RSP: 002b:00007f15b4374028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 1719.597621][T19115] RAX: ffffffffffffffda RBX: 00007f15b3815fa0 RCX: 00007f15b359ce59 [ 1719.597632][T19115] RDX: 0000000000000023 RSI: 0000000000000006 RDI: 0000000000000005 [ 1719.597641][T19115] RBP: 00007f15b4374090 R08: 0000200000000580 R09: 0000000000000000 [ 1719.597651][T19115] R10: 0000200000000540 R11: 0000000000000246 R12: 0000000000000001 [ 1719.597660][T19115] R13: 00007f15b3816038 R14: 00007f15b3815fa0 R15: 00007ffdd1ae7618 [ 1719.597687][T19115] [ 1720.640939][T19140] netlink: 'syz.1.13961': attribute type 4 has an invalid length. [ 1720.672280][T19142] FAULT_INJECTION: forcing a failure. [ 1720.672280][T19142] name failslab, interval 1, probability 0, space 0, times 0 [ 1720.715730][T19140] netlink: 'syz.1.13961': attribute type 4 has an invalid length. [ 1720.761130][T19142] CPU: 0 UID: 0 PID: 19142 Comm: syz.4.13962 Not tainted syzkaller #0 PREEMPT(full) [ 1720.761152][T19142] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1720.761163][T19142] Call Trace: [ 1720.761170][T19142] [ 1720.761177][T19142] dump_stack_lvl+0xe8/0x150 [ 1720.761204][T19142] should_fail_ex+0x412/0x560 [ 1720.761230][T19142] should_failslab+0xa8/0x100 [ 1720.761255][T19142] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 1720.761276][T19142] ? __alloc_skb+0x186/0x7d0 [ 1720.761298][T19142] ? __alloc_skb+0x1d0/0x7d0 [ 1720.761316][T19142] ? __local_bh_enable_ip+0xd0/0x130 [ 1720.761337][T19142] __alloc_skb+0x1d0/0x7d0 [ 1720.761367][T19142] netlink_sendmsg+0x5d4/0xb40 [ 1720.761394][T19142] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1720.761413][T19142] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1720.761441][T19142] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1720.761465][T19142] ____sys_sendmsg+0x972/0x9f0 [ 1720.761481][T19142] ? __might_fault+0xaf/0x130 [ 1720.761506][T19142] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1720.761537][T19142] ? import_iovec+0x73/0xa0 [ 1720.761562][T19142] ___sys_sendmsg+0x2a5/0x360 [ 1720.761577][T19142] ? __lock_acquire+0x6b5/0x2cf0 [ 1720.761597][T19142] ? __pfx____sys_sendmsg+0x10/0x10 [ 1720.761647][T19142] ? __fget_files+0x2a/0x420 [ 1720.761664][T19142] ? __fget_files+0x3a0/0x420 [ 1720.761692][T19142] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1720.761710][T19142] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1720.761734][T19142] ? __pfx_ksys_write+0x10/0x10 [ 1720.761763][T19142] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1720.761780][T19142] do_syscall_64+0x15f/0xf80 [ 1720.761802][T19142] ? trace_irq_disable+0x3b/0x140 [ 1720.761823][T19142] ? clear_bhb_loop+0x40/0x90 [ 1720.761842][T19142] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1720.761858][T19142] RIP: 0033:0x7f6ed9d9ce59 [ 1720.761873][T19142] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1720.761886][T19142] RSP: 002b:00007f6edace3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1720.761903][T19142] RAX: ffffffffffffffda RBX: 00007f6eda015fa0 RCX: 00007f6ed9d9ce59 [ 1720.761914][T19142] RDX: 0000000000048000 RSI: 0000200000000000 RDI: 0000000000000003 [ 1720.761923][T19142] RBP: 00007f6edace3090 R08: 0000000000000000 R09: 0000000000000000 [ 1720.761932][T19142] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1720.761941][T19142] R13: 00007f6eda016038 R14: 00007f6eda015fa0 R15: 00007ffe7a4e8538 [ 1720.761968][T19142] [ 1720.769865][T19144] __nla_validate_parse: 1 callbacks suppressed [ 1720.769884][T19144] netlink: 20 bytes leftover after parsing attributes in process `syz.2.13963'. [ 1721.525753][T19157] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input125 [ 1721.924302][T19169] netlink: 12 bytes leftover after parsing attributes in process `syz.4.13971'. [ 1721.992333][T19173] netlink: 24 bytes leftover after parsing attributes in process `syz.0.13972'. [ 1722.127993][T19176] syz.2.13974: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1722.184442][T19178] IPVS: set_ctl: invalid protocol: 58 127.0.0.1:20003 [ 1722.191157][T19176] CPU: 1 UID: 0 PID: 19176 Comm: syz.2.13974 Not tainted syzkaller #0 PREEMPT(full) [ 1722.191182][T19176] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1722.191192][T19176] Call Trace: [ 1722.191200][T19176] [ 1722.191208][T19176] dump_stack_lvl+0xe8/0x150 [ 1722.191235][T19176] warn_alloc+0x249/0x340 [ 1722.191260][T19176] ? stack_trace_save+0xa9/0x100 [ 1722.191287][T19176] ? __pfx_warn_alloc+0x10/0x10 [ 1722.191316][T19176] ? kasan_save_track+0x4f/0x80 [ 1722.191336][T19176] ? kasan_save_track+0x3e/0x80 [ 1722.191354][T19176] ? __kasan_kmalloc+0x93/0xb0 [ 1722.191374][T19176] ? __kmalloc_cache_noprof+0x31c/0x660 [ 1722.191393][T19176] ? xskq_create+0x56/0x170 [ 1722.191414][T19176] ? xsk_setsockopt+0x54c/0x990 [ 1722.191430][T19176] ? do_sock_setsockopt+0x17c/0x1b0 [ 1722.191452][T19176] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 1722.191474][T19176] ? do_syscall_64+0x15f/0xf80 [ 1722.191498][T19176] __vmalloc_node_range_noprof+0x132/0x1750 [ 1722.191541][T19176] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1722.191567][T19176] ? __kasan_kmalloc+0x93/0xb0 [ 1722.191592][T19176] vmalloc_user_noprof+0xad/0xe0 [ 1722.191611][T19176] ? xskq_create+0xbf/0x170 [ 1722.191629][T19176] xskq_create+0xbf/0x170 [ 1722.191653][T19176] xsk_init_queue+0x8a/0xe0 [ 1722.191676][T19176] xsk_setsockopt+0x54c/0x990 [ 1722.191700][T19176] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1722.191719][T19176] ? __pfx_aa_sk_perm+0x10/0x10 [ 1722.191743][T19176] ? aa_sock_opt_perm+0xff/0x1a0 [ 1722.191767][T19176] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 1722.191788][T19176] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1722.191809][T19176] do_sock_setsockopt+0x17c/0x1b0 [ 1722.191838][T19176] __x64_sys_setsockopt+0x13d/0x1b0 [ 1722.191893][T19176] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1722.191911][T19176] do_syscall_64+0x15f/0xf80 [ 1722.191930][T19176] ? trace_irq_disable+0x3b/0x140 [ 1722.191951][T19176] ? clear_bhb_loop+0x40/0x90 [ 1722.191969][T19176] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1722.191983][T19176] RIP: 0033:0x7ff0ea19ce59 [ 1722.191999][T19176] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1722.192013][T19176] RSP: 002b:00007ff0e83ee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1722.192031][T19176] RAX: ffffffffffffffda RBX: 00007ff0ea415fa0 RCX: 00007ff0ea19ce59 [ 1722.192044][T19176] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000006 [ 1722.192055][T19176] RBP: 00007ff0ea232d6f R08: 0000000000000004 R09: 0000000000000000 [ 1722.192065][T19176] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1722.192075][T19176] R13: 00007ff0ea416038 R14: 00007ff0ea415fa0 R15: 00007fff5fd56998 [ 1722.192107][T19176] [ 1722.197065][T19176] Mem-Info: [ 1722.472707][T19176] active_anon:5972 inactive_anon:14 isolated_anon:0 [ 1722.472707][T19176] active_file:2052 inactive_file:41729 isolated_file:0 [ 1722.472707][T19176] unevictable:768 dirty:243 writeback:0 [ 1722.472707][T19176] slab_reclaimable:14755 slab_unreclaimable:180098 [ 1722.472707][T19176] mapped:30755 shmem:1459 pagetables:3619 [ 1722.472707][T19176] sec_pagetables:0 bounce:0 [ 1722.472707][T19176] kernel_misc_reclaimable:0 [ 1722.472707][T19176] free:1095867 free_pcp:25884 free_cma:0 [ 1722.582926][T19176] Node 0 active_anon:23888kB inactive_anon:56kB active_file:8208kB inactive_file:166716kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:28908kB dirty:972kB writeback:0kB shmem:4300kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:22660kB pagetables:14312kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1722.622207][T19176] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:94112kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:164kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1722.683143][T19176] Node 0 DMA free:11204kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:60kB local_pcp:4kB free_cma:0kB [ 1722.718797][T19176] lowmem_reserve[]: 0 2492 2493 2493 2493 [ 1722.724789][T19176] Node 0 DMA32 free:1094120kB boost:0kB min:34184kB low:42728kB high:51272kB reserved_highatomic:0KB free_highatomic:0KB active_anon:23888kB inactive_anon:56kB active_file:8208kB inactive_file:166616kB unevictable:1536kB writepending:972kB zspages:0kB present:3129332kB managed:2552428kB mlocked:0kB bounce:0kB free_pcp:27856kB local_pcp:13572kB free_cma:0kB [ 1722.766818][T17996] net_ratelimit: 63 callbacks suppressed [ 1722.766837][T17996] bond7: (slave bridge0): failed to get link speed/duplex [ 1722.808232][T19176] lowmem_reserve[]: 0 0 0 0 0 [ 1722.817134][ T3278] bond11: (slave bridge1): failed to get link speed/duplex [ 1722.849609][T19176] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:660kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:4kB free_cma:0kB [ 1722.916697][ T3278] bond7: (slave bridge0): failed to get link speed/duplex [ 1722.929322][T19176] lowmem_reserve[]: 0 0 0 0 0 [ 1722.950142][T19176] Node 1 Normal free:3217016kB boost:0kB min:55704kB low:69628kB high:83552kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:64820kB local_pcp:34060kB free_cma:0kB [ 1722.983344][T17996] bond11: (slave bridge1): failed to get link speed/duplex [ 1723.046340][ T36] bond7: (slave bridge0): failed to get link speed/duplex [ 1723.090396][T19176] lowmem_reserve[]: 0 0 0 0 0 [ 1723.125752][T17996] bond11: (slave bridge1): failed to get link speed/duplex [ 1723.127451][T19176] Node 0 [ 1723.149663][T19187] netlink: 'syz.3.13977': attribute type 1 has an invalid length. [ 1723.162293][ T8598] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1723.176639][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1723.190827][T17996] bond7: (slave bridge0): failed to get link speed/duplex [ 1723.194467][T19176] DMA: 1*4kB (U) 2*8kB (U) 1*16kB (U) 1*32kB (U) 2*64kB (U) 2*128kB (U) 2*256kB (U) 2*512kB (U) 3*1024kB (U) 3*2048kB (UM) 0*4096kB = 11204kB [ 1723.280827][T19176] Node 0 DMA32: 774*4kB (UME) 5846*8kB (UME) 5729*16kB (UME) 1380*32kB (UME) 990*64kB (UM) 1014*128kB (UME) 532*256kB (UM) 315*512kB (UME) 197*1024kB (UME) 105*2048kB (UM) 0*4096kB = 1093080kB [ 1723.322037][T19176] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1723.334289][T19176] Node 1 Normal: 13*4kB (UM) 12*8kB (UM) 22*16kB (UM) 11*32kB (UM) 18*64kB (UM) 18*128kB (UM) 13*256kB (UM) 16*512kB (UM) 14*1024kB (UM) 16*2048kB (U) 774*4096kB (UM) = 3233236kB [ 1723.352525][T19176] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1723.362487][T19176] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1723.372363][T19176] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1723.382633][T19176] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1723.392391][T19176] 45201 total pagecache pages [ 1723.397610][T19176] 3 pages in swap cache [ 1723.401821][T19176] Free swap = 124984kB [ 1723.406929][T19176] Total swap = 124996kB [ 1723.411256][T19176] 2097051 pages RAM [ 1723.415089][T19176] 0 pages HighMem/MovableOnly [ 1723.420511][T19176] 427164 pages reserved [ 1723.424499][T19196] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input126 [ 1723.439024][T19176] 0 pages cma reserved [ 1723.477088][ T5821] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1723.481146][T19187] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1724.014487][T19215] netlink: 64 bytes leftover after parsing attributes in process `syz.3.13986'. [ 1724.050306][T19215] netlink: 64 bytes leftover after parsing attributes in process `syz.3.13986'. [ 1724.588065][T19241] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input127 [ 1724.900989][T19253] netlink: 36 bytes leftover after parsing attributes in process `syz.4.13995'. [ 1725.164445][T19252] veth1_macvtap: entered promiscuous mode [ 1725.202764][T19252] veth1_macvtap: entered allmulticast mode [ 1725.249763][T19252] macsec0: left promiscuous mode [ 1725.430615][T19252] ipip0: left promiscuous mode [ 1725.503365][ T12] [ 1725.505727][ T12] ====================================================== [ 1725.512773][ T12] WARNING: possible circular locking dependency detected [ 1725.519945][ T12] syzkaller #0 Not tainted [ 1725.524389][ T12] ------------------------------------------------------ [ 1725.531480][ T12] kworker/u8:0/12 is trying to acquire lock: [ 1725.537468][ T12] ffffffff8ea85560 (fs_reclaim){+.+.}-{0:0}, at: kmem_cache_alloc_node_noprof+0x4a/0x690 [ 1725.547435][ T12] [ 1725.547435][ T12] but task is already holding lock: [ 1725.554890][ T12] ffff888056e0ee60 (k-sk_lock-AF_INET6){+.+.}-{0:0}, at: inet_stream_connect+0x51/0xa0 [ 1725.564562][ T12] [ 1725.564562][ T12] which lock already depends on the new lock. [ 1725.564562][ T12] [ 1725.574970][ T12] [ 1725.574970][ T12] the existing dependency chain (in reverse order) is: [ 1725.583993][ T12] [ 1725.583993][ T12] -> #7 (k-sk_lock-AF_INET6){+.+.}-{0:0}: [ 1725.592049][ T12] lock_sock_nested+0x41/0x100 [ 1725.597357][ T12] mptcp_connect+0x4c3/0x830 [ 1725.602574][ T12] __inet_stream_connect+0x25a/0xdd0 [ 1725.608402][ T12] inet_stream_connect+0x66/0xa0 [ 1725.613876][ T12] __sys_connect+0x312/0x450 [ 1725.619008][ T12] __x64_sys_connect+0x7a/0x90 [ 1725.624335][ T12] do_syscall_64+0x15f/0xf80 [ 1725.629460][ T12] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1725.635892][ T12] [ 1725.635892][ T12] -> #6 (sk_lock-AF_INET6){+.+.}-{0:0}: [ 1725.643634][ T12] lock_sock_nested+0x41/0x100 [ 1725.648938][ T12] inet_shutdown+0x6a/0x390 [ 1725.654056][ T12] nbd_mark_nsock_dead+0x2e9/0x560 [ 1725.659718][ T12] recv_work+0x1c2e/0x1d40 [ 1725.664673][ T12] process_scheduled_works+0xb5d/0x1860 [ 1725.670752][ T12] worker_thread+0xa53/0xfc0 [ 1725.675876][ T12] kthread+0x389/0x470 [ 1725.680571][ T12] ret_from_fork+0x514/0xb70 [ 1725.685809][ T12] ret_from_fork_asm+0x1a/0x30 [ 1725.691131][ T12] [ 1725.691131][ T12] -> #5 (&nsock->tx_lock){+.+.}-{4:4}: [ 1725.698805][ T12] __mutex_lock+0x1a3/0x1550 [ 1725.703948][ T12] nbd_queue_rq+0x37b/0x1100 [ 1725.709158][ T12] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 1725.715320][ T12] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 1725.722289][ T12] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 1725.728902][ T12] blk_mq_run_hw_queue+0x348/0x4f0 [ 1725.734562][ T12] blk_mq_dispatch_list+0xd16/0xe10 [ 1725.740297][ T12] blk_mq_flush_plug_list+0x48d/0x570 [ 1725.746217][ T12] __blk_flush_plug+0x3ed/0x4d0 [ 1725.751731][ T12] __submit_bio+0x28d/0x580 [ 1725.756765][ T12] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 1725.762946][ T12] block_read_full_folio+0x599/0x830 [ 1725.768994][ T12] filemap_read_folio+0x137/0x3b0 [ 1725.774577][ T12] do_read_cache_folio+0x358/0x590 [ 1725.780246][ T12] read_part_sector+0xb6/0x2b0 [ 1725.785557][ T12] adfspart_check_ICS+0xb1/0x960 [ 1725.791110][ T12] bdev_disk_changed+0x817/0x1770 [ 1725.796669][ T12] blkdev_get_whole+0x380/0x510 [ 1725.802162][ T12] bdev_open+0x31e/0xd30 [ 1725.806955][ T12] blkdev_open+0x470/0x610 [ 1725.811904][ T12] do_dentry_open+0x785/0x14e0 [ 1725.817205][ T12] vfs_open+0x3b/0x340 [ 1725.821827][ T12] path_openat+0x2e08/0x3860 [ 1725.826955][ T12] do_file_open+0x23e/0x4a0 [ 1725.831990][ T12] do_sys_openat2+0x113/0x200 [ 1725.837205][ T12] __x64_sys_openat+0x138/0x170 [ 1725.842585][ T12] do_syscall_64+0x15f/0xf80 [ 1725.847724][ T12] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1725.854176][ T12] [ 1725.854176][ T12] -> #4 (&cmd->lock){+.+.}-{4:4}: [ 1725.861409][ T12] __mutex_lock+0x1a3/0x1550 [ 1725.866539][ T12] nbd_queue_rq+0xc6/0x1100 [ 1725.871579][ T12] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 1725.877662][ T12] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 1725.884527][ T12] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 1725.891055][ T12] blk_mq_run_hw_queue+0x348/0x4f0 [ 1725.896716][ T12] blk_mq_dispatch_list+0xd16/0xe10 [ 1725.902454][ T12] blk_mq_flush_plug_list+0x48d/0x570 [ 1725.908380][ T12] __blk_flush_plug+0x3ed/0x4d0 [ 1725.913772][ T12] __submit_bio+0x28d/0x580 [ 1725.918901][ T12] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 1725.925119][ T12] block_read_full_folio+0x599/0x830 [ 1725.930940][ T12] filemap_read_folio+0x137/0x3b0 [ 1725.936507][ T12] do_read_cache_folio+0x358/0x590 [ 1725.942338][ T12] read_part_sector+0xb6/0x2b0 [ 1725.947641][ T12] adfspart_check_ICS+0xb1/0x960 [ 1725.953124][ T12] bdev_disk_changed+0x817/0x1770 [ 1725.958707][ T12] blkdev_get_whole+0x380/0x510 [ 1725.964098][ T12] bdev_open+0x31e/0xd30 [ 1725.968877][ T12] blkdev_open+0x470/0x610 [ 1725.973824][ T12] do_dentry_open+0x785/0x14e0 [ 1725.979122][ T12] vfs_open+0x3b/0x340 [ 1725.983733][ T12] path_openat+0x2e08/0x3860 [ 1725.988860][ T12] do_file_open+0x23e/0x4a0 [ 1725.993900][ T12] do_sys_openat2+0x113/0x200 [ 1725.999111][ T12] __x64_sys_openat+0x138/0x170 [ 1726.004498][ T12] do_syscall_64+0x15f/0xf80 [ 1726.009628][ T12] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1726.016057][ T12] [ 1726.016057][ T12] -> #3 (set->srcu){.+.+}-{0:0}: [ 1726.023193][ T12] __synchronize_srcu+0xca/0x300 [ 1726.028658][ T12] elevator_switch+0x1e8/0x7a0 [ 1726.033938][ T12] elevator_change+0x2cc/0x450 [ 1726.039207][ T12] elevator_set_default+0x36c/0x430 [ 1726.044913][ T12] blk_register_queue+0x3e9/0x4e0 [ 1726.050436][ T12] __add_disk+0x677/0xd50 [ 1726.055292][ T12] add_disk_fwnode+0xfb/0x480 [ 1726.060469][ T12] nbd_dev_add+0x72c/0xb50 [ 1726.065383][ T12] nbd_init+0x168/0x1f0 [ 1726.070238][ T12] do_one_initcall+0x250/0x870 [ 1726.075506][ T12] do_initcall_level+0x104/0x190 [ 1726.081114][ T12] do_initcalls+0x59/0xa0 [ 1726.085945][ T12] kernel_init_freeable+0x2a6/0x3e0 [ 1726.091645][ T12] kernel_init+0x1d/0x1d0 [ 1726.096475][ T12] ret_from_fork+0x514/0xb70 [ 1726.101567][ T12] ret_from_fork_asm+0x1a/0x30 [ 1726.106838][ T12] [ 1726.106838][ T12] -> #2 (&q->elevator_lock){+.+.}-{4:4}: [ 1726.114636][ T12] __mutex_lock+0x1a3/0x1550 [ 1726.119729][ T12] elevator_change+0x1b3/0x450 [ 1726.125002][ T12] elevator_set_none+0xb5/0x140 [ 1726.130355][ T12] blk_mq_update_nr_hw_queues+0x5e7/0x1a60 [ 1726.136664][ T12] nbd_start_device+0x17f/0xb10 [ 1726.142023][ T12] nbd_genl_connect+0x165b/0x1cf0 [ 1726.147987][ T12] genl_family_rcv_msg_doit+0x22a/0x330 [ 1726.154126][ T12] genl_rcv_msg+0x61c/0x7a0 [ 1726.159134][ T12] netlink_rcv_skb+0x232/0x4b0 [ 1726.164571][ T12] genl_rcv+0x28/0x40 [ 1726.169056][ T12] netlink_unicast+0x75c/0x8e0 [ 1726.174327][ T12] netlink_sendmsg+0x813/0xb40 [ 1726.179592][ T12] ____sys_sendmsg+0x972/0x9f0 [ 1726.184856][ T12] ___sys_sendmsg+0x2a5/0x360 [ 1726.190032][ T12] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1726.195474][ T12] do_syscall_64+0x15f/0xf80 [ 1726.200585][ T12] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1726.206985][ T12] [ 1726.206985][ T12] -> #1 (&q->q_usage_counter(io)#50){++++}-{0:0}: [ 1726.215657][ T12] blk_alloc_queue+0x546/0x680 [ 1726.220930][ T12] __blk_mq_alloc_disk+0x197/0x390 [ 1726.226541][ T12] nbd_dev_add+0x499/0xb50 [ 1726.231455][ T12] nbd_init+0x168/0x1f0 [ 1726.236113][ T12] do_one_initcall+0x250/0x870 [ 1726.241376][ T12] do_initcall_level+0x104/0x190 [ 1726.246827][ T12] do_initcalls+0x59/0xa0 [ 1726.251663][ T12] kernel_init_freeable+0x2a6/0x3e0 [ 1726.257372][ T12] kernel_init+0x1d/0x1d0 [ 1726.262212][ T12] ret_from_fork+0x514/0xb70 [ 1726.267304][ T12] ret_from_fork_asm+0x1a/0x30 [ 1726.272570][ T12] [ 1726.272570][ T12] -> #0 (fs_reclaim){+.+.}-{0:0}: [ 1726.279757][ T12] __lock_acquire+0x15a5/0x2cf0 [ 1726.285112][ T12] lock_acquire+0x106/0x350 [ 1726.290140][ T12] fs_reclaim_acquire+0x71/0x100 [ 1726.295584][ T12] kmem_cache_alloc_node_noprof+0x4a/0x690 [ 1726.301980][ T12] __alloc_skb+0x1d0/0x7d0 [ 1726.306905][ T12] tcp_stream_alloc_skb+0x3f/0x580 [ 1726.312522][ T12] tcp_connect+0x1570/0x5400 [ 1726.317806][ T12] tcp_v6_connect+0x1295/0x1b10 [ 1726.323167][ T12] __inet_stream_connect+0x25a/0xdd0 [ 1726.328956][ T12] inet_stream_connect+0x66/0xa0 [ 1726.334396][ T12] kernel_connect+0x141/0x1c0 [ 1726.339571][ T12] rds_tcp_conn_path_connect+0x6f6/0x930 [ 1726.345706][ T12] rds_connect_worker+0x1d8/0x290 [ 1726.351234][ T12] process_scheduled_works+0xb5d/0x1860 [ 1726.357281][ T12] worker_thread+0xa53/0xfc0 [ 1726.362389][ T12] kthread+0x389/0x470 [ 1726.366977][ T12] ret_from_fork+0x514/0xb70 [ 1726.372077][ T12] ret_from_fork_asm+0x1a/0x30 [ 1726.377352][ T12] [ 1726.377352][ T12] other info that might help us debug this: [ 1726.377352][ T12] [ 1726.387568][ T12] Chain exists of: [ 1726.387568][ T12] fs_reclaim --> sk_lock-AF_INET6 --> k-sk_lock-AF_INET6 [ 1726.387568][ T12] [ 1726.400506][ T12] Possible unsafe locking scenario: [ 1726.400506][ T12] [ 1726.408001][ T12] CPU0 CPU1 [ 1726.413395][ T12] ---- ---- [ 1726.418756][ T12] lock(k-sk_lock-AF_INET6); [ 1726.423418][ T12] lock(sk_lock-AF_INET6); [ 1726.430423][ T12] lock(k-sk_lock-AF_INET6); [ 1726.437598][ T12] lock(fs_reclaim); [ 1726.441566][ T12] [ 1726.441566][ T12] *** DEADLOCK *** [ 1726.441566][ T12] [ 1726.449773][ T12] 4 locks held by kworker/u8:0/12: [ 1726.454932][ T12] #0: ffff88804e445140 ((wq_completion)krds_cp_wq#23/0){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 1726.466683][ T12] #1: ffffc90000117c40 ((work_completion)(&(&cp->cp_conn_w)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 1726.479444][ T12] #2: ffff888043ddb380 (&tc->t_conn_path_lock){+.+.}-{4:4}, at: rds_tcp_conn_path_connect+0x1cc/0x930 [ 1726.490478][ T12] #3: ffff888056e0ee60 (k-sk_lock-AF_INET6){+.+.}-{0:0}, at: inet_stream_connect+0x51/0xa0 [ 1726.500638][ T12] [ 1726.500638][ T12] stack backtrace: [ 1726.506511][ T12] CPU: 0 UID: 0 PID: 12 Comm: kworker/u8:0 Not tainted syzkaller #0 PREEMPT(full) [ 1726.506526][ T12] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1726.506535][ T12] Workqueue: krds_cp_wq#23/0 rds_connect_worker [ 1726.506556][ T12] Call Trace: [ 1726.506564][ T12] [ 1726.506572][ T12] dump_stack_lvl+0xe8/0x150 [ 1726.506588][ T12] print_circular_bug+0x2e1/0x300 [ 1726.506604][ T12] check_noncircular+0x12e/0x150 [ 1726.506620][ T12] __lock_acquire+0x15a5/0x2cf0 [ 1726.506640][ T12] ? kmem_cache_alloc_node_noprof+0x4a/0x690 [ 1726.506655][ T12] lock_acquire+0x106/0x350 [ 1726.506666][ T12] ? kmem_cache_alloc_node_noprof+0x4a/0x690 [ 1726.506681][ T12] ? ip6_dst_check+0xe2/0x7e0 [ 1726.506696][ T12] fs_reclaim_acquire+0x71/0x100 [ 1726.506711][ T12] ? kmem_cache_alloc_node_noprof+0x4a/0x690 [ 1726.506724][ T12] kmem_cache_alloc_node_noprof+0x4a/0x690 [ 1726.506738][ T12] ? ip6_default_advmss+0x80/0x3b0 [ 1726.506753][ T12] ? __alloc_skb+0x1d0/0x7d0 [ 1726.506770][ T12] __alloc_skb+0x1d0/0x7d0 [ 1726.506786][ T12] tcp_stream_alloc_skb+0x3f/0x580 [ 1726.506802][ T12] ? __asan_memset+0x22/0x50 [ 1726.506817][ T12] tcp_connect+0x1570/0x5400 [ 1726.506838][ T12] ? ktime_get_with_offset+0x93/0x2d0 [ 1726.506857][ T12] ? __pfx_tcp_connect+0x10/0x10 [ 1726.506871][ T12] ? seqcount_lockdep_reader_access+0xa9/0x100 [ 1726.506887][ T12] ? lockdep_hardirqs_on+0x7a/0x110 [ 1726.506904][ T12] ? ktime_get_with_offset+0x93/0x2d0 [ 1726.506918][ T12] ? seqcount_lockdep_reader_access+0xea/0x100 [ 1726.506942][ T12] ? __asan_memset+0x22/0x50 [ 1726.506956][ T12] ? __pfx_tcp_fastopen_defer_connect+0x10/0x10 [ 1726.506971][ T12] ? inet6_hash_connect+0xeb/0x170 [ 1726.506990][ T12] tcp_v6_connect+0x1295/0x1b10 [ 1726.507012][ T12] ? __pfx_tcp_v6_connect+0x10/0x10 [ 1726.507027][ T12] ? finish_task_switch+0x41f/0xbe0 [ 1726.507038][ T12] ? lockdep_hardirqs_on+0x7a/0x110 [ 1726.507052][ T12] ? finish_task_switch+0x41f/0xbe0 [ 1726.507064][ T12] __inet_stream_connect+0x25a/0xdd0 [ 1726.507081][ T12] ? do_raw_spin_lock+0x12b/0x2f0 [ 1726.507095][ T12] ? lock_sock_nested+0x6a/0x100 [ 1726.507108][ T12] ? __pfx___inet_stream_connect+0x10/0x10 [ 1726.507124][ T12] ? inet_stream_connect+0x51/0xa0 [ 1726.507138][ T12] ? __local_bh_enable_ip+0xd0/0x130 [ 1726.507152][ T12] inet_stream_connect+0x66/0xa0 [ 1726.507167][ T12] kernel_connect+0x141/0x1c0 [ 1726.507179][ T12] ? net_generic+0x1e/0x240 [ 1726.507191][ T12] ? __pfx_kernel_connect+0x10/0x10 [ 1726.507206][ T12] ? preempt_schedule_thunk+0x16/0x30 [ 1726.507224][ T12] rds_tcp_conn_path_connect+0x6f6/0x930 [ 1726.507241][ T12] ? __pfx_rds_tcp_conn_path_connect+0x10/0x10 [ 1726.507254][ T12] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1726.507269][ T12] ? process_scheduled_works+0xa70/0x1860 [ 1726.507281][ T12] ? process_scheduled_works+0xa70/0x1860 [ 1726.507295][ T12] rds_connect_worker+0x1d8/0x290 [ 1726.507310][ T12] ? process_scheduled_works+0xa70/0x1860 [ 1726.507322][ T12] process_scheduled_works+0xb5d/0x1860 [ 1726.507343][ T12] ? __pfx_process_scheduled_works+0x10/0x10 [ 1726.507356][ T12] ? assign_work+0x3d5/0x5e0 [ 1726.507368][ T12] worker_thread+0xa53/0xfc0 [ 1726.507388][ T12] kthread+0x389/0x470 [ 1726.507402][ T12] ? __pfx_worker_thread+0x10/0x10 [ 1726.507412][ T12] ? __pfx_kthread+0x10/0x10 [ 1726.507427][ T12] ret_from_fork+0x514/0xb70 [ 1726.507440][ T12] ? __pfx_ret_from_fork+0x10/0x10 [ 1726.507451][ T12] ? __switch_to+0xc79/0x1410 [ 1726.507511][ T12] ? __pfx_kthread+0x10/0x10 [ 1726.507525][ T12] ret_from_fork_asm+0x1a/0x30 [ 1726.507543][ T12] [ 1727.060918][T19252] bond6: left promiscuous mode [ 1727.217523][T31518] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1727.262215][T31518] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1727.272093][T31518] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1727.357030][T31518] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1727.855347][T31518] net_ratelimit: 47 callbacks suppressed [ 1727.855366][T31518] bond11: (slave bridge1): failed to get link speed/duplex [ 1727.905791][T31517] bond7: (slave bridge0): failed to get link speed/duplex [ 1727.995694][ T1030] bond11: (slave bridge1): failed to get link speed/duplex [ 1728.026349][T31518] bond7: (slave bridge0): failed to get link speed/duplex [ 1728.036659][ T2172] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1728.105402][T31518] bond11: (slave bridge1): failed to get link speed/duplex [ 1728.135613][ T1030] bond7: (slave bridge0): failed to get link speed/duplex [ 1728.215603][ T1030] bond11: (slave bridge1): failed to get link speed/duplex [ 1728.245670][ T1030] bond7: (slave bridge0): failed to get link speed/duplex [ 1728.325539][T12970] bond11: (slave bridge1): failed to get link speed/duplex [ 1732.925626][ T36] net_ratelimit: 91 callbacks suppressed [ 1732.925646][ T36] bond11: (slave bridge1): failed to get link speed/duplex [ 1732.955910][T31518] bond7: (slave bridge0): failed to get link speed/duplex [ 1732.997218][ T9693] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1733.005862][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1733.055627][T31518] bond11: (slave bridge1): failed to get link speed/duplex [ 1733.065900][T31518] bond7: (slave bridge0): failed to get link speed/duplex [ 1733.165818][ T36] bond11: (slave bridge1): failed to get link speed/duplex [ 1733.175454][ T36] bond7: (slave bridge0): failed to get link speed/duplex [ 1733.245800][ T2172] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1733.275437][ T9685] bond11: (slave bridge1): failed to get link speed/duplex