last executing test programs: 7m28.02714896s ago: executing program 3 (id=2183): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x80000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x13, &(0x7f00000004c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x9d}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c00000000010104000000000000000002001000240002801400018008000100e000000108000200e00000010c00028005000100000000001c0010800800014000000000d97405010000000008000240000000000800", @ANYRES64=r3], 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x24}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newqdisc={0x60, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28}, @TCA_TBF_BURST={0x8, 0x6, 0x58}]}}]}, 0x60}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="6c000000000101040000000000000000020000002c0001801400018008000100e01b000108000200ac1414000c00028005000100000000000600034000040000240002801400018008000100e000000108000200e00000010c00028005000100000000000800074000000003"], 0x6c}, 0x1, 0x0, 0x0, 0x40}, 0x0) r6 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r6, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) r7 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r7, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, &(0x7f00000002c0)=[{&(0x7f0000000380)='/', 0x1}], 0x1, 0x0, 0x0, 0x40010}, 0x0) recvmsg(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000040)=""/35, 0x23}], 0x1, 0x0, 0x18}, 0x10040) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="6800000000010104000000000000000002000000240001801400018008000100e000000108000200ac1414000c0002800500010000000000240002801400018008000100e000000108000200e00000010c00028005000100000000000800074000000000040006"], 0x68}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@gettclass={0x24, 0x2a, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x7}, {}, {0x0, 0x7}}}, 0x24}}, 0x800) 7m27.104149645s ago: executing program 3 (id=2195): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'virt_wifi0\x00', 0x0}) (async) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000400000008000000000000000100"/48, @ANYRES32=r3, @ANYBLOB="0100000002"], 0x40) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001000010428bd70000000000000000000", @ANYRES16=r1, @ANYRES32=r4, @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES16=r1], 0x4c}, 0x1, 0x0, 0x0, 0x240008c4}, 0x20008004) 7m26.623639909s ago: executing program 3 (id=2199): r0 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000010c0)={0xfffd, 0x478, 0x1ff, 0xce}, 0x8) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x5001}) r2 = socket$inet6(0xa, 0x2, 0x0) socket$packet(0x11, 0x3, 0x300) socket$inet6_sctp(0xa, 0x1, 0x84) r3 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r3, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r3, 0x28, 0x2, &(0x7f00000000c0)=0x33, 0x8) listen(r3, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) r5 = accept4(r3, 0x0, 0x0, 0x0) sendto(r5, &(0x7f0000000000), 0xfeb5, 0x0, 0x0, 0x0) recvfrom(r4, &(0x7f00000001c0)=""/62, 0xfeb5, 0x10120, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000000)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x8000000000000000}, 0x0, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', 0x1}) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x42, 0x0}}]}, &(0x7f0000000180)=0x10) syz_genetlink_get_family_id$team(&(0x7f0000000080), r0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="800000000201010100000000000000000000000208001a40000000012c0018800800024000000009080003400000000808000240000000000800034000000009080001400000000008cc59a420062865130005800e0001007369702d32303030300000001c001700fffffffe0000000900000003ffffffff000000010000000b"], 0x80}, 0x1, 0x0, 0x0, 0x8000}, 0x10) sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000540)=@newqdisc={0x98, 0x24, 0x605, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x2a, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x68, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x1, [], 0x8, [0x1, 0x56, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd, 0x2], [0x0, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}}, @TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME={0xc, 0x8, 0x30}]}}]}, 0x98}}, 0x0) 7m25.270388354s ago: executing program 3 (id=2210): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000100)=@bpf_ext={0x1c, 0x0, 0x0, 0x0, 0xf0f, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1313b, 0xffffffffffffffff, 0x0, 0x0, &(0x7f00000003c0), 0x10, 0x1ff}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x40900, 0x0) close(r2) r3 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x81}, 0x4000818) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$AUDIT_DEL_RULE(r3, &(0x7f0000000ac0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000a80)={&(0x7f0000000640)={0x438, 0x3f4, 0x400, 0x70bd2b, 0x25dfdbfe, {0x1, 0x2, 0xc, [0x1824, 0x2000, 0xfffff639, 0x3, 0x7, 0x2, 0x4, 0xffffffff, 0xff, 0xfffffffb, 0x9, 0xffffffff, 0x5, 0x4, 0x0, 0x0, 0x6, 0xff, 0x3, 0xffff, 0xc7, 0x11c9, 0x4, 0x0, 0x4, 0x7, 0x1, 0x3, 0x5, 0x3, 0x7, 0x2, 0x5, 0x5, 0x0, 0x8, 0x3, 0x800, 0x4, 0x1, 0x3, 0x4, 0x3, 0x6, 0xfffffffd, 0x2, 0x2, 0x4, 0x2, 0x7, 0xffff, 0xffffffce, 0x7fffffff, 0x9, 0xf3, 0x2, 0x7, 0x3, 0x5, 0x0, 0x6, 0x2, 0x6c78bbf3, 0xb9f], [0xa2, 0x357, 0x4, 0x3d5, 0x4, 0x0, 0x8, 0x3, 0x2, 0x4, 0x1, 0x7, 0x6, 0xf518, 0x1, 0x9, 0x4, 0x3, 0x5, 0x7, 0x7a0, 0x2, 0x0, 0xa27, 0x3, 0x80, 0x401, 0xfffffff7, 0x2b, 0xb, 0xfffffffa, 0x3, 0x9, 0x101, 0x6, 0x2, 0xfffffff9, 0xff, 0x8, 0xcbc3, 0x7fff, 0x7, 0xf55b, 0x5, 0xd, 0x5, 0x9, 0x6, 0xd94, 0x800, 0x1000, 0x10, 0x400, 0x1, 0x1, 0x33, 0x33, 0x0, 0x1, 0x5a0a, 0x575, 0x317d, 0x7, 0xe], [0x8, 0x401, 0x876, 0xffff, 0x8, 0x7, 0x1, 0x1, 0x2, 0x51be, 0x6, 0x8105, 0x8, 0xffff, 0x0, 0x8, 0xfffffffc, 0xffffff80, 0x2da, 0x0, 0x316b7866, 0x7, 0x3, 0x0, 0x9, 0x101, 0x2, 0x6, 0x0, 0x6, 0x100, 0x3, 0x5, 0xb1c7, 0x3, 0x50d, 0x0, 0x7ff, 0x5, 0x9, 0x7, 0xf, 0x2, 0x1, 0xf7, 0xb, 0x3c8, 0x81, 0x8, 0x40, 0x0, 0x5, 0x7, 0x8, 0x6, 0x0, 0xffff, 0xff, 0x3ff, 0x7, 0x8f, 0x3, 0x1, 0x3], [0x2, 0x2, 0x0, 0x1, 0xff, 0x7f, 0xc, 0x3ff, 0xa9, 0x4, 0x0, 0x4, 0xfffffffb, 0x5a4, 0x7, 0x0, 0x8, 0x3, 0x400, 0x8, 0x100, 0x8, 0xfff, 0x8, 0x1, 0xfffffc00, 0x2, 0xfffffff8, 0x338, 0x0, 0x0, 0x4, 0xf3c, 0xaff, 0xf, 0xcf, 0x42, 0x3, 0xcf2, 0x5b381e8, 0x8001, 0xc, 0x2, 0x8000, 0xe, 0xc8, 0x1200, 0xcef0, 0x4, 0x0, 0x8, 0xb, 0xfffffff9, 0x8, 0x1, 0x0, 0xffffaa1d, 0x3, 0x2d7, 0x7f, 0x8001, 0x400, 0x4, 0xffff], 0x15, ['/dev/ppp\x00', 'flow\x00', '\x00', '\x00', 'csum\x00']}, ["", ""]}, 0x438}, 0x1, 0x0, 0x0, 0x800}, 0x4000000) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2c, 0x2, {0x0, 0x0, 0x0, r6, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29d}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x8, 0x1, 0x3}, 0x20}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x4894}, 0x2) r7 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r7, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f0000000440)=[{&(0x7f00000001c0)="27030200dc0f14000e0005000024c1020000ff1107c2fb7fe0406e52534b4f6b3d327db412f40000000020000000", 0x2e}], 0x1}, 0x20004801) close(r0) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r8, 0xc004743e, 0x110e22fff6) unshare(0xe040400) ioctl$TUNGETVNETLE(r0, 0x4010744d, &(0x7f0000000180)) 7m24.958144932s ago: executing program 3 (id=2214): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r0) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)={0x34, r1, 0x2799f5eec7981083, 0x170bd26, 0x25dfdbfc, {}, [@ETHTOOL_A_PAUSE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_PAUSE_TX={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x20040080}, 0x80) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$XFS_IOC_PATH_TO_HANDLE(r2, 0xc0385869, &(0x7f0000000440)={r2, &(0x7f0000000040)='TIPC\x00', 0x0, &(0x7f0000000080)={@align=0x9, {0x1ff, 0x7, 0x4, 0x7}}, 0x1bb, &(0x7f0000000180)={@_ha_fsid}, &(0x7f00000001c0)=0x8}) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000280), r2) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$l2tp6(0xa, 0x2, 0x73) sendmsg$inet6(r6, &(0x7f0000000000)={&(0x7f0000000040)={0xa, 0x4e20, 0x0, @private1}, 0x1c, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000000029000000040000008200000000000000180000000000000069000000370000006400000000000000280000000000000029000000050000000002020100000000fe8000000000000000000000000000bb24"], 0x80}, 0x40080) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x70}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @sk_msg}, 0x48) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r3, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0xcc, r4, 0x800, 0x70bd2d, 0x25dfdbfb, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x2}, {0x6, 0x16, 0x7}, {0x5}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x9}, {0x6, 0x16, 0x27da}, {0x5}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x7}, {0x6, 0x16, 0x2}, {0x5}}]}, 0xcc}}, 0x4010) r7 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x148}}, 0x0) r9 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r9, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r9, 0x6, 0x14, &(0x7f0000000540)=0x2, 0x4) connect$inet(r9, &(0x7f0000000040)={0x2, 0x4e23, @remote}, 0x10) sendmmsg$inet(r9, &(0x7f0000006740)=[{{0x0, 0x0, &(0x7f0000002740)=[{0x0}, {&(0x7f0000000100)}, {0x0}, {&(0x7f0000000080)="09ebb34c6e6b9bcb890e8fc488c52697590da70578e206547182de9cd141c0012e4926791de3eea4aa103ad545198bf93c390bbdb6f1faf1c0924adb7ebc658f62f9f47ed5f8d851dea2d62af8d6aa9af055c1975558eef4", 0x58}, {&(0x7f0000001580)="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", 0xb35}], 0x5}}, {{0x0, 0x0, 0x0}}], 0x3fffffffffffe97, 0x2404c845) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r9, 0x6, 0x21, &(0x7f0000000480)="7a988c4622aef4290206cad470a5d0ec", 0x10) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x34, r7, 0x1, 0x70bd25, 0x25dfdbfc, {{}, {}, {0x18, 0x17, {0x18, 0x7, @udp='udp:syz0\x00'}}}}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x4000) 7m24.632515559s ago: executing program 3 (id=2218): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) (async, rerun: 64) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (rerun: 64) openat$cgroup_freezer_state(r0, &(0x7f00000000c0), 0x2, 0x0) (async, rerun: 32) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000080)={0x0, 0x5, 0x80, 0x8, 0x0, 0x8}, &(0x7f00000000c0)=0x14) (async, rerun: 32) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1c0000000400000008000000000000000100"/48, @ANYRES32=r1, @ANYBLOB="0100000002"], 0x40) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000300)={r2, &(0x7f00000000c0), 0x0}, 0x20) (async, rerun: 64) r3 = openat$cgroup_procs(r0, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) (rerun: 64) write$cgroup_pid(r3, &(0x7f0000000180), 0x12) (async) r4 = openat$cgroup_freezer_state(r0, &(0x7f0000000080), 0x2, 0x0) write$cgroup_freezer_state(r4, &(0x7f0000000100)='FROZEN\x00', 0x6) 7m8.661889887s ago: executing program 32 (id=2218): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) (async, rerun: 64) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (rerun: 64) openat$cgroup_freezer_state(r0, &(0x7f00000000c0), 0x2, 0x0) (async, rerun: 32) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000080)={0x0, 0x5, 0x80, 0x8, 0x0, 0x8}, &(0x7f00000000c0)=0x14) (async, rerun: 32) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1c0000000400000008000000000000000100"/48, @ANYRES32=r1, @ANYBLOB="0100000002"], 0x40) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000300)={r2, &(0x7f00000000c0), 0x0}, 0x20) (async, rerun: 64) r3 = openat$cgroup_procs(r0, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) (rerun: 64) write$cgroup_pid(r3, &(0x7f0000000180), 0x12) (async) r4 = openat$cgroup_freezer_state(r0, &(0x7f0000000080), 0x2, 0x0) write$cgroup_freezer_state(r4, &(0x7f0000000100)='FROZEN\x00', 0x6) 5.110899199s ago: executing program 5 (id=4988): sendmsg$netlink(0xffffffffffffffff, &(0x7f00000047c0)={0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="180000007a00010600000000fbdbdf2507"], 0x18}], 0x1, 0x0, 0x0, 0x4000050}, 0x80) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[], 0xa0}, 0x1, 0x0, 0x0, 0x24048010}, 0x40080) r0 = socket(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f00000001c0)={0x28, 0x0, 0x2710, @host}, 0x10) getsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000040)={0x0, 0x8}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f00000000c0)=@assoc_value={r2, 0xa9}, 0x8) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x4001}) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f000000cd40)={0x0, 0x0, &(0x7f000000cd00)={&(0x7f00000005c0)=@delchain={0x10c, 0x65, 0x20, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0x8}, {0x3, 0xfff3}, {0x5, 0xf}}, [@f_rsvp={{0x9}, {0x4}}, @f_rsvp6={{0xa}, {0x20, 0x2, [@TCA_RSVP_CLASSID={0x8, 0x1, {0xfff3, 0x9}}, @TCA_RSVP_DST={0x14, 0x2, @empty}]}}, @f_rsvp={{0x9}, {0xa0, 0x2, [@TCA_RSVP_PINFO={0x20, 0x4, {{0x2, 0x4, 0x4}, {0x4, 0x0, 0x1000}, 0x32, 0x1, 0x81}}, @TCA_RSVP_CLASSID={0x8, 0x1, {0xa, 0x5}}, @TCA_RSVP_PINFO={0x20, 0x4, {{0x10, 0x8, 0x4}, {0x3, 0x40, 0x7fff}, 0x5c, 0x1, 0x1}}, @TCA_RSVP_SRC={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}, @TCA_RSVP_CLASSID={0x8, 0x1, {0x8, 0xf}}, @TCA_RSVP_SRC={0x8, 0x3, @rand_addr=0x64010101}, @TCA_RSVP_DST={0x8, 0x2, @multicast1}, @TCA_RSVP_ACT={0x34, 0x6, [@m_police={0x30, 0x1b, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x3}}}}]}]}}]}, 0x10c}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) listen(0xffffffffffffffff, 0x5) write$tun(r3, 0x0, 0x6a) r4 = socket(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="d5"], 0x24}}, 0x0) recvmmsg$unix(r4, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f00000030c0)=[{&(0x7f00000016c0)=""/172, 0xac}, {0x0}, {&(0x7f0000001980)=""/236, 0xec}, {0x0}, {&(0x7f0000001480)=""/195, 0xc3}, {&(0x7f00000002c0)=""/236, 0xec}, {&(0x7f0000000080)=""/116, 0x74}, {&(0x7f00000018c0)=""/133, 0x85}, {&(0x7f00000004c0)=""/250, 0xfa}, {&(0x7f0000001a80)=""/4096, 0x1000}, {&(0x7f0000002a80)=""/190, 0xbe}, {&(0x7f0000002b80)=""/116, 0x74}, {&(0x7f0000002c00)=""/246, 0xf6}, {&(0x7f0000002d00)=""/136, 0x88}, {&(0x7f0000002dc0)=""/140, 0x8c}, {&(0x7f0000002e80)=""/99, 0x63}, {&(0x7f0000002f00)=""/202, 0xca}, {&(0x7f0000003000)=""/125, 0x7d}], 0x12}}], 0x1, 0x40032142, 0x0) socket$kcm(0x29, 0x5, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xca02}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x8c, 0x10, 0x421, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4060}, [@IFLA_LINKINFO={0x6c, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x58, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_LOCAL={0x14, 0x6, @private1={0xfc, 0x1, '\x00', 0xa}}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0x10}, @IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e24}, @IFLA_GRE_ERSPAN_INDEX={0x8, 0x15, 0xe915}, @IFLA_GRE_FLOWINFO={0x8, 0xc, 0x120}, @IFLA_GRE_REMOTE={0x14, 0x7, @empty}, @IFLA_GRE_ERSPAN_DIR={0x5}]}}}]}, 0x8c}}, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r5, 0x8983, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8914, 0x0) write(r4, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) accept4$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000140)=0x14, 0x40000) 4.988947737s ago: executing program 4 (id=4989): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newsa={0x1c8, 0x10, 0x713, 0x70bd26, 0x3, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in=@dev={0xac, 0x14, 0x14, 0x13}, 0x4e22, 0x1, 0x0, 0x3, 0x2, 0x0, 0x0, 0x61, 0x0, 0xffffffffffffffff}, {@in6=@remote, 0x0, 0x32}, @in6=@local, {0x0, 0x0, 0x8, 0xa, 0x6, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x2, 0xfffffffffffffff8}, {0xc, 0x0, 0x2}, 0x70bd29, 0x0, 0x2, 0x1, 0x0, 0x28}, [@algo_aead={0x4c, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x0, 0x80}}, @tmpl={0x84, 0x5, [{{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x4d6, 0x2b}, 0xa, @in6=@dev={0xfe, 0x80, '\x00', 0x30}, 0x3501, 0x3, 0x3, 0xb5, 0x1ff, 0x2, 0x1}, {{@in=@empty, 0x4d2, 0x32}, 0x2, @in=@dev={0xac, 0x14, 0x14, 0x36}, 0x0, 0x1, 0x1, 0x7, 0xfffffffe, 0x0, 0x9}]}, @iptfs_init_delay={0x8, 0x27, 0xf3ee}]}, 0x1c8}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 4.779781273s ago: executing program 4 (id=4991): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'batadv_slave_0\x00', &(0x7f0000000340)=@ethtool_drvinfo={0x3, "bf1b4087edfe5c4e7dbc31ec412ad7e146e549d45ef8ffffffffffffff00", "0b427558163b547e4025a26d22b39efd15a79bf13a99cfb77cc869a43447e49f", "87a906824296668daf4ebd4e96f95ec6d39d32a7238872c45dc65a18f8bf52af", "d8f28fdc3ec20b8facef9aa9d6f53dd7527511d9bb717ba90adf6ac47453a1f1", "53c9ba9b2a1007c3cb8fe4f81000946b00000000000200", "6ef390e675e608f371455a4e", 0x400003, 0x2ac7, 0x7e0, 0x87d42, 0x9e}}) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2241, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @sk_msg}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r1, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)={0x14, r2, 0x200, 0x70bd27, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x48000) 4.674890435s ago: executing program 5 (id=4994): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_PORT_GET(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0xf4, 0x0, 0x800, 0x70bd25, 0x25dfdbff, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}}]}, 0xf4}, 0x1, 0x0, 0x0, 0x4040030}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_LIST(r1, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000240)={0x158, r2, 0x300, 0x70bd26, 0x25dfdbfd, {}, [@NLBL_CIPSOV4_A_MLSLVLLST={0x144, 0x8, 0x0, 0x1, [{0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x20}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x89}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x15}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4b948765}]}, {0x4c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2f979711}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x56430622}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7329e6f2}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x61448827}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa3}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3c4a60a5}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x64a6e4a0}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1c421ff8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x9}]}, {0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x62a6e036}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x98}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x441242fb}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xc73818d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x31720a54}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb6}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x17731c69}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x280d25f}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x7}]}, {0x44, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xf5c3767}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x33}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x55}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x69}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5dbaf61}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1bdf78c3}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x17}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe2}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x73}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x817d44e}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa5}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x49b22dbd}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5d262803}]}]}]}, 0x158}, 0x1, 0x0, 0x0, 0x8080}, 0x5ef80aef54568324) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000480), r1) sendmsg$IEEE802154_SCAN_REQ(r1, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x3c, r3, 0x8, 0x70bd28, 0x25dfdbfc, {}, [@IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x1d}, @IEEE802154_ATTR_DURATION={0x5, 0x15, 0x3b}, @IEEE802154_ATTR_DURATION={0x5, 0x15, 0x3}, @IEEE802154_ATTR_CHANNELS={0x8, 0x14, 0x13}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x14}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000010}, 0x4000000) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x54, 0x0, 0x300, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_KEY_SEQ={0xb, 0xa, "53a291488adb80"}, @NL80211_ATTR_KEY={0x18, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "6e2e540c763983ec4b07e69f4e"}]}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0xc, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}]}, 0x54}, 0x1, 0x0, 0x0, 0x10}, 0x8094) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000700), r0) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x24, r4, 0x20, 0x70bd2c, 0x25dfdbfc, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) connect$inet6(r5, &(0x7f0000000800)={0xa, 0x4e23, 0x0, @empty, 0xb5fb}, 0x1c) socket$inet_sctp(0x2, 0x0, 0x84) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000880)={'wpan1\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r1, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x88260202}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x2c, r3, 0x300, 0x70bd27, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x5}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000000}, 0x8000) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000ec0)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000e80)={&(0x7f00000009c0)={0x488, r2, 0x300, 0x70bd27, 0x25dfdbfd, {}, [@NLBL_CIPSOV4_A_MLSLVLLST={0x154, 0x8, 0x0, 0x1, [{0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2327078a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6bbf86d5}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x46616705}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x1c}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xbb}]}, {0x4}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4f63175f}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe3}]}, {0x4c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x59c642b6}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xab}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xaa}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x120bfe1f}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x65248d5c}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xa72109d}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4f}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xaf}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x43}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x28}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7f9d9f46}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb9}]}, {0x4}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7a49d0e1}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf6}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x35}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x496f61e1}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xae}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x695babd5}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x5b}]}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xaf}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x63}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4f5e2f2a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x67}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x34b04d4e}]}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x28}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x6}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x19}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x30b85090}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x37}]}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xffffffffffffffff}, @NLBL_CIPSOV4_A_MLSLVLLST={0x84, 0x8, 0x0, 0x1, [{0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2825d8e4}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x5}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x43aac0a9}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xf551282}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1dfcddf9}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x64}]}, {0x44, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x328521a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x595ddd64}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4f2d3628}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xeb}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x23}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7ce087ed}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x8a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xcf8011b}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x184, 0x8, 0x0, 0x1, [{0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2d079998}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x45192a6f}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb0}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x90}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7bfc5419}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4e}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3be4d4f}]}, {0x4c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x677b8bb2}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4ea37fa8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1c092399}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x20}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x20}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2ab02b92}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x55060215}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x21}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf5}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x9}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2b388923}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc6}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1efbc946}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4d}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xa986c11}]}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x31932b5c}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb1}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x1e}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x27}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc9}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7349080f}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x96}]}, {0x54, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x26e7d11d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5867db47}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3b34d14e}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x6d}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf4}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x43}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xbd}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x73c91e94}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x31608e21}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xac}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x775110dd}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x70}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xfe}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x110, 0x8, 0x0, 0x1, [{0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x5a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc7}]}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x76}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb1}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x8a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4e}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x17bf57cf}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5fb867cc}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x52}]}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x76}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x28}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x11836939}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xac}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x49}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7190d565}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4f}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4a1f627b}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x37161a0b}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x40}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xaf}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1506179c}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7e7b59d5}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x18a9decb}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd4}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5cf83062}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x61779eca}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xad}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe4}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1300a965}]}]}]}, 0x488}, 0x1, 0x0, 0x0, 0x41}, 0x44041) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f40), r7) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000f80)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f0000001040)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x180}, 0xc, &(0x7f0000001000)={&(0x7f0000000fc0)={0x1c, r8, 0x20, 0x70bd27, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r9}, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x841}, 0x24008010) r10 = socket$tipc(0x1e, 0x2, 0x0) r11 = syz_genetlink_get_family_id$devlink(&(0x7f00000010c0), r0) sendmsg$DEVLINK_CMD_SB_POOL_SET(r7, &(0x7f00000011c0)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001180)={&(0x7f0000001100)={0x54, r11, 0x400, 0x70bd26, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x8}, {0x6, 0x11, 0x15b}, {0x8, 0x13, 0x5}, {0x5, 0x14, 0x1}}]}, 0x54}}, 0x4) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r10, 0x89f0, &(0x7f0000001300)={'sit0\x00', &(0x7f0000001240)={'gre0\x00', 0x0, 0x0, 0x0, 0x2, 0x0, {{0x27, 0x4, 0x3, 0x3, 0x9c, 0x67, 0x0, 0xfc, 0x4, 0x0, @multicast2, @empty, {[@ra={0x94, 0x4}, @timestamp_prespec={0x44, 0xc, 0x88, 0x3, 0x6, [{@rand_addr=0x64010102, 0x78f49e96}]}, @cipso={0x86, 0x64, 0x2, [{0x0, 0x7, "85076259e0"}, {0x2, 0x10, "881b2e7e4d0315cfdad4bf88e822"}, {0x5, 0x12, "da4baa22ff651251f0b78257451af7c9"}, {0x2, 0xa, "ef21ec8e4f7a6be3"}, {0x1, 0xb, "10ab6d264cce5f0589"}, {0x5, 0x10, "7a823397bc5ad86337ae593b81fb"}, {0x6, 0x10, "3926e96fd9cbd0d2c1d7c29290ee"}]}, @lsrr={0x83, 0x13, 0x44, [@private=0xa010101, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast]}, @end]}}}}}) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f00000013c0)={&(0x7f0000001200)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001380)={&(0x7f0000001340)={0x3c, r4, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r12}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x8}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40800}, 0x40) r13 = socket$unix(0x1, 0x2, 0x0) ioctl$BTRFS_IOC_BALANCE_CTL(r13, 0x40049421, 0x3) syz_init_net_socket$llc(0x1a, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000001400), 0xffffffffffffffff) 4.63774904s ago: executing program 2 (id=4995): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)) r0 = socket(0xa, 0x3, 0xff) sendmsg$inet6(r0, &(0x7f0000001c00)={&(0x7f0000000140)={0xa, 0x3, 0x3, @dev={0xfe, 0x80, '\x00', 0x36}}, 0x1c, &(0x7f0000000440)=[{&(0x7f0000000480)="6797f04cdb6f2b8ff1c912acb0da67dc3bf442976fc916f5fe40c3a4bb8423c058dd95ffbb65d4a51d4b99564d9d6466da7ab0bd17e9281956c6ba7e10b7932de5be24106e3afc007cdf7620e0c61175af571e506a21f16330", 0x59}], 0x1}, 0x80) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r1 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e22, 0xb, @mcast2, 0xb}, 0x1c) sendto$inet6(r1, &(0x7f0000000040)="800037bbfa9ba1ce", 0xffe9, 0x0, 0x0, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@ipv4_newrule={0x24, 0x20, 0xf4db158ec847dc81, 0x70bd2b, 0x25dfdbfe, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x17}, [@FRA_GENERIC_POLICY=@FRA_DPORT_RANGE={0x8, 0x18, {0x4e24, 0x4e24}}]}, 0x24}, 0x1, 0x0, 0x0, 0x20004054}, 0x44004) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002f00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x1b, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="080100001900010000000000612afd6f00000000000000000000000000000000ac1414bb0000000000000000000000000000fffd000000000a00008000000000", @ANYRES32=r2, @ANYRES32=r2, @ANYBLOB="0000000000000000fdffffffffffffff00000000000000000400000000000000000000000000000000000000000000000200000000000000ffffffffffffffff0000000000fcca0d0bb2da43bf0000000000000000000000000000000000000000000000b86b6e00000002000000000044000500ac1414aa000000000000000000000000000000002b00000000000000ffffffff000000000000000000000000000000000000000007000000a8000000000000000c0008"], 0x108}, 0x1, 0x0, 0x0, 0x9}, 0x20000040) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet(r0, &(0x7f0000000580)={0x2, 0x4e23, @remote}, 0x10) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newqdisc={0x54, 0x10, 0x1, 0x70bd25, 0x25dfdbfc, {0x6, 0x0, 0x8100, 0x0, {0x1, 0x10}, {0xfff1}, {0xe, 0x10}}, [@TCA_RATE={0x6, 0x5, {0xfc}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x400c800}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) syz_emit_ethernet(0x6e, &(0x7f0000000340)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "02adf7", 0x38, 0x3a, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast2, {[], @time_exceed={0x2, 0x3, 0x0, 0x0, '\x00', {0x0, 0x6, "ed906b", 0x38, 0x3a, 0x0, @mcast1, @loopback={0x0, 0xffffac1414aa}, [], "1e520b4c811ee12e"}}}}}}}, 0x0) r6 = socket(0x10, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x56) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000fdffffde18000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000043000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001000390400000000fbdbdf2500000000", @ANYRES32=r7, @ANYBLOB="11980400419804001c001280da0c01007866726d000000000c0002800800020004000000"], 0x3c}, 0x1, 0x0, 0x0, 0x20000884}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000780)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x9b, 0x9b, 0x2, [@datasec={0x5, 0x5, 0x0, 0xf, 0x2, [{0x2, 0xfff, 0x7}, {0x5, 0x3, 0xa}, {0x4, 0xe1c, 0x1}, {0x4, 0x0, 0x8000}, {0x5, 0x20000000, 0x10000}], "b9b6"}, @decl_tag={0x10, 0x0, 0x0, 0x11, 0x5, 0x3}, @int={0xf, 0x0, 0x0, 0x1, 0x0, 0x5f, 0x0, 0x1a}, @volatile={0xb, 0x0, 0x0, 0x9, 0x3}, @datasec={0xf, 0x2, 0x0, 0xf, 0x1, [{0x1, 0xd593, 0xfef}, {0x3, 0x2, 0x10}], '9'}]}}, &(0x7f0000000540)=""/51, 0xb6, 0x33, 0x7f, 0x6, 0x10000, @value=r6}, 0x28) r8 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r8, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x8, r7, 0x20017}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000280)="82", 0x1}], 0x1}, 0x4) 4.539414591s ago: executing program 4 (id=4996): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000980)={0x802}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 4.507647723s ago: executing program 0 (id=4997): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000040)='notify_on_release\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f00000003c0)=0xfffffffffffffffc, 0x12) mkdirat$cgroup(r0, &(0x7f0000000140)='syz0\x00', 0x1ff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0xd, 0x9, &(0x7f0000000680)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000500000085000000a0000000be0000000000000018000000000000000000000000000000950000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x13}, 0x94) socket$netlink(0x10, 0x3, 0xa) r2 = socket$inet(0x2, 0x3, 0xa) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x338, 0x0, 0xe138, 0x198, 0x1c0, 0x198, 0x2a0, 0x358, 0x358, 0x2a0, 0x358, 0x3, 0x0, {[{{@ip={@broadcast, @loopback, 0x0, 0x0, '\x00', 'veth0_to_bond\x00', {}, {}, 0x21}, 0x0, 0x158, 0x1c0, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'fsm\x00', "0d000400000000000e000004fff0cf81dfd28c89544e14cd3e01dd24289831867846c88621039b284c3ff45c42995560a99952bed40cf5a8c1df6cdbdb7e2378d5afd35f4c16827f55b3af494e39e8fb330200000000000032b6a99a8d87298e88a94cb519f5c17631af916a0002000000000000000000000000000000000049", 0x8}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x4, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00', {0xfffffffffffffffc}}}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x398) 4.371016843s ago: executing program 4 (id=4998): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'bridge_slave_1\x00', 0x0}) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)=@newqdisc={0x150, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x255fdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0x6}, {0xffff, 0xffff}, {0x1, 0x8}}, [@qdisc_kind_options=@q_red={{0x8}, {0x124, 0x2, [@TCA_RED_STAB={0x104, 0x2, "d392dbd2abd7965fc4101242a649c66d46efa665aa691684ef699dadd34754db38c5164ae304df695e2f04fcf03bf32692223fc6d0fdd57f68685d2c2998d6439b3dc8a2deadeba5b901e0d0a680b942e2e748d8d6af3e149859f01d7729dfb17177d0a269c9b28c9eddd271aa7ee75a719096284f82e880fe5a696bd3c729c8770d400c5738e8f6a26a0deaf6cfa74c2e5f605eee3b54e9ac3ff007d12d953bd996e363c3a90e4d36dde8947f6b67d0073383863d7c3d92891c4d76c39e85fcc01fe43fe841daa87942177f8ce5368383a1e72990692291e61862c1f292634ad1de6eff9bc92bd05503b1abd2dee9006cd218777a856313e530e2b067310ad6"}, @TCA_RED_MAX_P={0x8, 0x3, 0x6}, @TCA_RED_PARMS={0x14, 0x1, {0x4, 0x2000000, 0x9, 0x1a, 0x4, 0x1b, 0x5}}]}}]}, 0x150}}, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="a0000000420001000000000000000000030100000f0000007d00010000112233445566778899aabb86dd2c00001c00003a0001110000010101010253aa58fe6cbdf035bc6eae44132403b1fd606412c3258e6248ffa62e9e156d23cfd72ddb80723d4613dc929cbc86ba94e0cd05c4a639eee919c4b391a38f086b58225d45c1b4106bb4754aebb15e0feff76718ef7ff9be52ec9c00000004000280040003"], 0xa0}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="5400000010000104000000000200000000000000", @ANYRES32=r1, @ANYBLOB="0000faffffff000034001280110001006272696467655f736c617665000000001c000580050021000000000006001f0000000000080022"], 0x54}}, 0x0) (async, rerun: 32) r6 = syz_init_net_socket$x25(0x9, 0x5, 0x0) (async, rerun: 32) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x0, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) preadv(r7, &(0x7f0000000480)=[{&(0x7f0000000400)=""/119, 0x77}], 0x1, 0x1, 0x8f5) (async) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@union]}}, 0x0, 0x26, 0x0, 0x0, 0x8000000}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0xf, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2}, {}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0xcc02a6b5058cb77c}, {0x85, 0x0, 0x0, 0x1}}}, &(0x7f0000000080)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r8, 0x8, 0x0, 0x0, 0x30, &(0x7f00000001c0)={0x0, 0x1, 0x0, 0x1}, 0x10}, 0x94) ioctl$SIOCX25GDTEFACILITIES(r6, 0x89ea, &(0x7f0000000ac0)) 3.639010813s ago: executing program 5 (id=5001): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) connect$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3, 0x1}, 0xe) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x100000d, 0x6031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x2000000, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) sendto$inet6(r2, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r2, 0x604ab000) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000001380)=""/4080, 0xfffffffffffffdcc, 0x0, 0x0, 0xffffffffffffff87}, &(0x7f0000000000)=0x40) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'veth1_to_bond\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r4, {0x0, 0xfff3}, {0xffff, 0xffff}, {0x2, 0x9}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x4c, 0x2, [@TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x9}, @TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x6}, @TCA_HTB_INIT={0x18, 0x2, {0x3, 0x3, 0x6}}, @TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x1}, @TCA_HTB_INIT={0x18, 0x2, {0x3, 0x3, 0x1}}]}}]}, 0x78}, 0x1, 0x0, 0x0, 0x998ed4ed88999c63}, 0x4c840) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=@newtfilter={0x4c, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x2, 0x4}, {0x0, 0xfff3}, {0x10, 0xc}}, [@filter_kind_options=@f_flow={{0x9}, {0x1c, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x11386}, @TCA_FLOW_PERTURB={0x8, 0xc, 0x1}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x24041091}, 0x844) sendmsg$can_raw(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000000c0)={0x1d, r4}, 0x10, &(0x7f00000002c0)={&(0x7f0000000100)=@can={{0x2, 0x0, 0x1}, 0x2, 0x1, 0x0, 0x0, "126cbff16efcd238"}, 0x10}, 0x1, 0x0, 0x0, 0x800}, 0x20000800) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000740)={&(0x7f0000fff000/0x1000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffc8, 0x1, 0x0}, &(0x7f0000000780)=0x40) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110c230000) ioctl$TUNSETOFFLOAD(r0, 0x40047452, 0x17) 3.587907774s ago: executing program 0 (id=5002): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r0, 0x6, 0x9, &(0x7f00000004c0)={{0x1d, @rand_addr=0x64010100, 0xdffd, 0xfffffffe, 'nq\x00', 0x3d, 0x2000031, 0x3}, {@multicast2, 0xfffb, 0x4, 0x8, 0xfffffffe, 0x2000040}}, 0x44) (async) getsockopt$inet_tcp_int(r0, 0x6, 0x9, 0x0, &(0x7f0000000040)) (async) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(0xffffffffffffffff, &(0x7f00000019c0)={0x0, 0x0, &(0x7f0000001980)={&(0x7f0000000140)=ANY=[@ANYBLOB="00000000bb001d7c20adcdc3ac"], 0x4c}}, 0x0) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r1) (async) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f00000000c0)={'wpan1\x00', 0x0}) (async) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x204c84c}, 0x20040000) sendmsg$IEEE802154_LLSEC_ADD_KEY(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="290e29bd7000fbdbdf0527960000050031000e0000001400300053e0e85290ceb080fb816d3cdadf198b08000200", @ANYRES32=r3, @ANYBLOB='$\x002'], 0x5c}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000003f000500010000000000000001010000000000000f0001006f76732d7302082100000000080002"], 0x30}}, 0x0) 3.582495118s ago: executing program 2 (id=5003): r0 = socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x5005}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) (async) r7 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r7, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) (async, rerun: 64) sendmsg$nl_route_sched(r5, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newqdisc={0x30, 0x24, 0x401, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) (async, rerun: 64) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=@newtfilter={0x7c, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x1}, {0xfff1, 0xffff}, {0x8, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x4c, 0x2, [@TCA_BASIC_ACT={0x48, 0x3, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x0, 0x20000000}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x7c}}, 0x0) (async) write$tun(r4, &(0x7f0000000240)=ANY=[@ANYBLOB="1a030800030016000c0045"], 0x3a) r8 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r8, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfc, 0x2ffffffff}, 0xc) (async) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0x1}, {0xfff1, 0xffff}, {0x8, 0x1}}}, 0x24}}, 0x0) (async) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) socket$packet(0x11, 0x2, 0x300) (async) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="640000001000030427bd70000300000000000000", @ANYRES32=0x0, @ANYBLOB="46040900000000003c00128009000100766c616e000000002c00028006000100010000000600050088a80000100004800c0001000500000001000000860c05008100000008000500", @ANYRES32=r11], 0x64}, 0x1, 0x0, 0x0, 0x20000600}, 0x0) (async) r12 = socket$netlink(0x10, 0x3, 0x0) r13 = socket(0x10, 0x803, 0x4) sendmsg$IPVS_CMD_SET_INFO(r13, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r13, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r12, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4400000010001fff000000008000000000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00?\x00\x00\b\x00\n\x00', @ANYRES32=r14, @ANYBLOB="1c0012800b00010062726964676500000c0002800500070006"], 0x44}, 0x1, 0x0, 0x0, 0x2000c051}, 0x40000) 3.307327355s ago: executing program 4 (id=5005): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f00000001c0)="9a5be948f5fe13ee19cf97661a98fa33025197433e80884e3711ca03692a0ce9df1d", 0x22}, {&(0x7f0000000740)="3560d47a409202437c0f1c250ba1dcfaacbc7a3ffc16316eb7099ebebf06de2aa6982eb4c9ea4796ffdb6374357e9b41e530a9cbed389f9e2ec4dabb6749f93a839380c6efd2e4023f00fc728806c5ee76062a169419f29c2deae4ddd0db52926fa50c7a528225053856d335f079e35b4461ec08a4e89f29f21a88047d0959bf02af72b56c748fb7a16ded0fd1af33d1244d7a5132634a4649ebb4356e52afece560c0dbdfe88850351186d5d2c452292b8723a0d62ee71d218b3efefc0d626592569bb98974978dcda464d101343f0cc0931edb60929222018431e7f220da76bff2828e84765b56f53b526d21510e15668e1b84a8db49ac3f6d0451a5e2d129cd177bae098ae8a4efa62de4f39d14cc3a82887f799d5e809ce4ae4791d4285feaf55b8a34648f29539f03241257e1aa679421044da717853593bef60afa1a78b50dfbe20ee86834f78e3524d85c56edb05e82c6ab6cde4c639aeadb9cff0215fc797fce188b2abb62d256f99a3e76c436cbc10ab91ad48e0c4e6b284a304708b637642fa6d785fe9ed8a053273d2ff89e252e722a5e5c2650395dfad7b7e60ae8110ca6719fb3339b5340ee657a271f509478f3da279065da2942e9d3ee0cac478040fffb19980a965279071296ccb401cbb9cdb35a6f16809ee2a355643c4e551d032f689bde910464cd7cd9088bb750c9d638d3ef319c72db9a89546cb58b76f60f1d27df8cf7334d8abd2f0c19363b273151365c9531b37299ea1598c98aacd6e331ed10521ef230b561f0a856bd8e2716d073086cfd9b76395e0e5b4cdfbe55adf09bb4c2b08068950f8e4e399a0003450dad12529340e06d520e105a8b4e85d8c359aeb05b5c7fbff67c78faaed177b97be44afae2c40091160078681d5c64808af501b0d46a70c3a0a7e5712c38600351674676b3c37893089c2177b28b1fec1d450f619b264dace5019ca55c111227a0bf643ce01d7f3111cab70c97c45c0eca75002cc8bcae5f3363b649500e3488e4e79a438a251e57f7106b55ce6373802541421111846eaeb4538835619bd06e3693b3e2277cb89a3ccf88f5701710a5b5205b4067aef9b16c4ea696e1139997e64b0ffdae82724c86ca9272ac8cd6e0bbc5cee963d518439b1e55a58a1ecbb244c37f3254a22418a782ca1e16af11b69a46ce5f6139eee35bb01c71b36ddad955cbe461021d84b93bf15f7706b27bb24f9795b742396dc560f022dc950ed7055161b72e4c3f0ac751caa4d8e5a42d01ede074744e81c825a36de223cfb17d68cd320d87e6682866cd9ac15e273a3443123ad07a6e42f89d6c64f30e28100ee69889235bc436102849e403b1a2d690e1402cea1f9eb37479cb4f407c42628567c8e54a8f391627d7a964aabe008772632fbc6c99e163c6717e353f64f4f492e6aa849d68624ae168856b39931e72a777dfd546e67e7bbca6ffb6f7a845058f0380ddb0c11a91f0e2845a5a53de6253999200e41a9300fc795f1c9747737746a4931535e56a02b8bb99ff5ba3faa721fa1ae0a11036b870a1f1b00d816fe08549898a786bd13cd37738c866a8e7aa7df7013557dc9550a841e9470b95b22de4cce8ac2dc76bb4d258dbf9b9ad896bf108f261b4d6217df46bb8f92161660cbafd75f64c710fc4bb2733feb9c1e1255e6d0482f4bd074efd38f51cd45c", 0x4af}], 0x2, 0x0, 0x0, 0xc4}, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000000)={0x0, 0x4}, 0x8) close(r1) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r1) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000100)='vegas', 0x5) getsockopt$inet_tcp_buf(r2, 0x6, 0x1a, 0x0, &(0x7f00000000c0)) 2.812101789s ago: executing program 4 (id=5006): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000240)={0x0, 0x11, &(0x7f0000000200)={&(0x7f0000000000)={0x38, 0x1403, 0xc23, 0x70bd2e, 0x25dfdbff, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'bond_slave_1\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x14f7325d9d03b00}, 0x4000) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000980)={0x802}, 0x10) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="5800000018000104000000000000000002180000fe03000100000000080001000a01010008000400010000000600150005000000240016002000010001000000000204"], 0x58}, 0x1, 0x0, 0x0, 0x8010}, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r6 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a03000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000180003801400020000007468305f746f5f68737200000000080002"], 0xe8}}, 0x0) write$tun(r5, &(0x7f00000001c0)={@val={0x0, 0x1c}, @void, @eth={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x29}, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @val={@void}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x4000, 0x9, 0x11, 0x0, @multicast2, @empty}, {0x0, 0x17c1, 0x8}}}}}}, 0x32) sendmsg$inet(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x33fe0}], 0x1}, 0x3) shutdown(r3, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r8, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r8, &(0x7f0000000440)={0xa, 0x4e24, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, 0xc}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r8, 0x6, 0x1f, &(0x7f0000000540), 0x28) setsockopt$inet6_tcp_int(r8, 0x11a, 0x3, 0x0, 0x0) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x72, 0xffffffffffffffff, 0x2bebc000) getsockopt$inet6_opts(r9, 0x29, 0x4d, 0x0, &(0x7f00000001c0)) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x18, 0x52, 0x1, 0xfffffffc, 0x0, {0x2}, [@typed={0x4, 0x1, 0x0, 0x0, @binary}]}, 0x18}}, 0x0) 2.622386948s ago: executing program 0 (id=5007): ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xca02}) socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x66, 0x800, 0x80000001) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f00000002c0)={0x0, 'ip6gretap0\x00', {0x1}, 0xb5}) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) preadv(r0, &(0x7f0000000400), 0x0, 0x6bbf, 0xce5) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xca02}) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket(0x66, 0x800, 0x80000001) (async) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f00000002c0)={0x0, 'ip6gretap0\x00', {0x1}, 0xb5}) (async) socket$netlink(0x10, 0x3, 0x0) (async) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) (async) preadv(r0, &(0x7f0000000400), 0x0, 0x6bbf, 0xce5) (async) 2.29592423s ago: executing program 1 (id=5009): write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200102f00fe80000000000000875a65059ff57b00000000000000000000000000ac1414aa35"], 0xcfa4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="002832dfbf00642d3b1c88b8b4142894e90a9d0006000000f003090000100000149e49df9b"], 0x0}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedc0790700117df37538e486dd6317ce220005"], 0xfdef) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x11, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 2.269170874s ago: executing program 2 (id=5010): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[], 0x18}}, 0x0) (async) r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000980)=@newtaction={0x50, 0x30, 0xb, 0x0, 0x0, {}, [{0x3c, 0x1, [@m_skbedit={0x38, 0x1, 0x0, 0x0, {{0xffffffffffffffea}, {0xffffffffffffffb6, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x5}]}, {0x4, 0x6, "5284913d689c7712195cdcc368270d536203adc8884cbdbc41a14618d37342e89876d99760d8d10f948da91bc3e460be8426e98f7163198b1d"}, {0xc, 0xa, {0x1}}, {0xc, 0x9, {0xf5}}}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x84}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WOWLAN(r0, &(0x7f0000001840)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001800)={&(0x7f00000001c0)={0x14dc, 0x0, 0x200, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x1, 0xd}, @val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x7fff, 0x10}}}}, [@NL80211_ATTR_WOWLAN_TRIGGERS={0x14ac, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_PKT_PATTERN={0x14a0, 0x4, 0x0, 0x1, [{0x4}, {0xf8, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_OFFSET={0x8, 0x3, 0xa4}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x5}, @NL80211_PKTPAT_MASK={0x42, 0x1, "85b163fecf5dddc0316c487bb5c303ca89a62d12a9dbcc872dcb7a174b38792f50bfbdbf34071ed11f606087d0e4e3c6fec4e4a4a0078b7ad785e890109a"}, @NL80211_PKTPAT_PATTERN={0x97, 0x2, "8947a8423862d92e133bdce69ceed965c6ca082f6285579d37d8982088192b315640d9835fd937b634c05857967d9e7e94dd28ce09c5f0a440ea56c48d65101d7cafcaf052c53782145843402b4f1bff28c2fd2daf74cf568b2e53332b2e911a69097c7e5397dd83ed827b280e4222ce4981ff3786137cd992b428d5812b6638a122b540058da9eb0295766e0ca323387a3bd1"}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x7f}]}, {0x1220, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_MASK={0xf7, 0x1, "ccc5ed3d06c7b5ae40e48bd19f0957028b723cd6d02ad601623333369d8247bb846fd6ab712ec69349023f784ac3a1519399520b01b13b12441c77f399dad19f0052eaa4a4e19ca08fd5bebccfd948c973a3ed9cca2292fd3e85438d112aa222e107a50792632bcd07730ad9ca0a1eeac303628d7c6734d38abedf6590fb519bffd2893685315dd86202f8304555a5e340dc03cfd940d3508bbfd27d5966b970d6a6f7dc37aa1e2d418946466c0e093ef89ad46e6138b45882ff20c6dc224e5930ec936b7bd8c36b3508cef7afe4819961f8f352d45e752706a1ba9a9c157c78c2cfd985da7c9e8ba265d1e2f91a40a5d472c3"}, @NL80211_PKTPAT_MASK={0x62, 0x1, "565dbd0411987c7e232c7a47fe05097f9bcbd4c80f1b30608d2a8beb06a56e87d5215ced84e49040f0eb57f5fd3ce111a1221c900ee7a8d892079d87acf05cf98af61f62b5b1c5aa435228ef29991d9539c8820357d9aecf801adb69e5b4"}, @NL80211_PKTPAT_PATTERN={0xc, 0x2, "a18bea3a71bf903d"}, @NL80211_PKTPAT_PATTERN={0x49, 0x2, "8afefe3c681647d7e48c44c7299d6551ca0a365299a086072c172395477d668a66925c7669e7374bb98744ef1c0c6a20c950a6b52db324c0c9cd9d2577f1934b4d54df4f49"}, @NL80211_PKTPAT_PATTERN={0x1004, 0x2, "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"}, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x2}, @NL80211_PKTPAT_PATTERN={0x54, 0x2, "131e50bcba0d72cd2364f9607a9b20f4f094a0649944dc5dc648f44d6e23e062d93e5aed5514821892c275583bef5c035922043a699d5217cd1f82c78963fee52659f2c59d80883b9bdd3ce531018018"}, @NL80211_PKTPAT_MASK={0x7, 0x1, "4354e5"}]}, {0x4}, {0x17c, 0x0, 0x0, 0x1, [@NL80211_PKTPAT_MASK={0x42, 0x1, "91fdca176330780e07413518c3564da0fb606ba9bea45de1bbd72cd88282fb0f5578fc71076660440398da4c64cf32e524468bb6a5314bf1e95faca419d1"}, @NL80211_PKTPAT_PATTERN={0x56, 0x2, "8952f9569708936afe23893d61d97784a72c6af807895ff98c03b1b24abdd484ef8d69ef628a9d63262f73d42e84479089becfcb5979e9a9618ec78346d463a2c892ace752b662283d1bf1f13506c00fae4b"}, @NL80211_PKTPAT_PATTERN={0xdb, 0x2, "236e8a6c85ad10d65fa27ea84cb3d4a89e65f0789f8a0ed9a0b07f271f34f22ea0fe0fea029f41191915c5809898e31e5dc5bbad5491a5c1fc8dae128c3fbe57297ec11720f9cb85ae26cec68fd74551de0a41bcbad5ebe08fbaa8ff951ef4d24df61fd873e4717b3d5cdb6403634cad10460de13281926b7cfd75546ccd892a6531792d02d59fc59614b8dff94e9aa131bd725713af9b00ac7104b25cd0b75d13ee3330ca4ba07d7b43b1d42d843ce8894ad3df44f2c11fd69b553dab7d36695ac1487382918268a6b514a1028e88f76faf37363057fb"}]}]}, @NL80211_WOWLAN_TRIG_DISCONNECT={0x4}, @NL80211_WOWLAN_TRIG_RFKILL_RELEASE={0x4}]}]}, 0x14dc}, 0x1, 0x0, 0x0, 0x90}, 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="48000000100001060100000000000000000000000000000000000000000000001000032073797a6b616c6c65723000001800128008000100767266000c000280080001"], 0x48}, 0x1, 0x0, 0x0, 0x20044040}, 0x0) (async) sendmmsg(r0, &(0x7f0000000000), 0x0, 0xfc) 2.063439355s ago: executing program 1 (id=5011): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x9, 0x4, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="46060900040100626f6e64000000070c008280080209000300"/36], 0x3c}, 0x1, 0x0, 0x0, 0x40e95}, 0x2404c050) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="5c00000002060108000000000000000001000008140007800800124000000005050015000900c5490500010006000000050005000a00000005000400000000000900020073797a300000000010000300686173683a69702c6d616300"], 0x5c}, 0x1, 0x0, 0x0, 0xc0d1}, 0x8800) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x4) sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="300000001a0020002cbd7000ffdbdf251c102008ff010004001700000c00090080000009", @ANYRES32=r2, @ANYBLOB="0800bf63980d3ea8170fb4920bc614e286010000000000"], 0x30}, 0x1, 0x0, 0x0, 0x24044191}, 0x40000) socket$netlink(0x10, 0x3, 0x0) (async) socket(0x9, 0x4, 0x0) (async) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) (async) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) (async) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) (async) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="46060900040100626f6e64000000070c008280080209000300"/36], 0x3c}, 0x1, 0x0, 0x0, 0x40e95}, 0x2404c050) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="5c00000002060108000000000000000001000008140007800800124000000005050015000900c5490500010006000000050005000a00000005000400000000000900020073797a300000000010000300686173683a69702c6d616300"], 0x5c}, 0x1, 0x0, 0x0, 0xc0d1}, 0x8800) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) (async) socket(0x10, 0x803, 0x4) (async) sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r6, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="300000001a0020002cbd7000ffdbdf251c102008ff010004001700000c00090080000009", @ANYRES32=r2, @ANYBLOB="0800bf63980d3ea8170fb4920bc614e286010000000000"], 0x30}, 0x1, 0x0, 0x0, 0x24044191}, 0x40000) (async) 1.679550401s ago: executing program 2 (id=5012): r0 = socket(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r0, &(0x7f00000001c0)={0x11, 0x0, r1}, 0x14) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000600)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010024bd7000fcdbdf2503000000180001801400020074756e6c3000000000000010000000009667bb2ec261af98811b44c159a89f76cf0f20d62ba5687c489eca6a877513cf2797012de7e32b32d66c02a09f032cbd177301fe79ac97a909000000000000004866e491a6ecdbc3b71ccf56ff8d0c91ff3485ef29b6044c88ca46d1550b1998579b702114c58d5b87eeef844f74a7213260dd09594d5fb233c1e442fd6492058bceb004d295a21541008754db738b2200000000000000000000000072e81bc011394ad7346470d048d67830220d54d53b4f632c6ff6be88c273ee9973ecf76935457b231dc4f3ce349fa9f41085e33a739538f12d23d3ef4612d5526bba6b88763b49b9c9b9f055bc8225257072f7ab144bc0c24cafd82b516405a4b958396b3cef58882c3e2d248cf4518790c7953802b58ec3a9f86d2744460aa474d1811e0c4b1bf6cc5a7bcc16f124435d54ffdfa556e66b1a82524f0361f3596d2762a18764325563313e87c253ea0b6060907b666d070f0067a19fe963f317dc38c6555198baa72757d5fdd3416a12309dcdd4c8ee8100fbf75191f8edaab7dddc6850fe4b8c561f9428b24eb3e8c1999855195a433f1b612b4f642b59"], 0x2c}, 0x1, 0x0, 0x0, 0x20009005}, 0x4000080) r4 = socket$nl_rdma(0x10, 0x3, 0x14) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x3c, 0x3c, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x4, 0x8000}}, @ptr={0x0, 0x0, 0x0, 0xa}, @ptr={0x0, 0x0, 0x0, 0x2, 0x4}, @volatile={0x0, 0x0, 0x0, 0xb, 0x2}]}}, 0x0, 0x56}, 0x28) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="20000000171401"], 0x20}}, 0x0) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000040)=0x93bd, 0x4) sendmsg$netlink(r0, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000002100)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="0201140084dc18000e1a80009f0001852900002f0600ac141430e0000001808a8972bd0b72e41082b1a3d206"], 0xdd12}], 0x1, 0x0, 0x0, 0x14048802}, 0x40488d0) 1.540572754s ago: executing program 1 (id=5013): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a01080000000000000000030000200900010073797a310000000014000000020a0104000000000000000007000000540000001f0a030000000000000000000300000008000340000000000900010073797a310000000009000200", @ANYRESHEX=r0], 0xb0}, 0x1, 0x0, 0x0, 0x4040840}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0x4f89}]}}}]}, 0x3c}}, 0x8000) 1.525112401s ago: executing program 5 (id=5014): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000500), 0x50) r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0xe8001, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x4000}) ioctl$TUNSETTXFILTER(r3, 0x400454d1, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000ffc19cd11bfb922d6ab7c2f8e63502d622b1b83d9449e3e2cf8e47222ca8b619f46232c45afb3a8feb8db8ff"]) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) setsockopt$inet6_IPV6_RTHDR(r4, 0x29, 0x39, &(0x7f00000000c0)=ANY=[@ANYBLOB="84020201"], 0x18) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x7a, &(0x7f0000000340)={r5, @in6={{0xa, 0x0, 0x1000, @dev={0xfe, 0x80, '\x00', 0x41}, 0x2}}}, &(0x7f0000000040)=0x84) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0xffff}, 0x1c) listen(r2, 0x0) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendto$inet(r6, &(0x7f0000000040)="a6", 0xffffff4c, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TLS_TX(r6, 0x6, 0x1, &(0x7f0000000080)=@ccm_128={{0x304}, "3533670244f9c17b", "fd73b0610edb2d71e52c522eddc7014d", "421c1beb", "2302ad114616d7c6"}, 0x28) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000020000103feffffff0000000002000000000000000400010008000a000008000005001e"], 0x50}}, 0x4000850) sendmmsg$alg(r7, &(0x7f0000000140), 0x4924b68, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000100)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {0x0}, {&(0x7f0000000440)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3b45d1032005eabe97b4de33a47d3a158da988cbce88726b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead340ee988f55c527e299f7f9c02030000000000000072d70992e2c017c79dd30838882d44b6a0f5fb766412a4077a1114b306510b8b098a19d0923182661fe2", 0x90}], 0x3, 0x0, 0x0, 0x40000}], 0x1, 0x40800) close(0x4) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r8 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x24, 0x2c, 0xd27, 0x170bd2c, 0x2, {0x0, 0x0, 0x0, r9, {0x10, 0xd}, {}, {0x8, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x4894}, 0x2) socket$kcm(0x11, 0x3, 0x0) 1.347401461s ago: executing program 0 (id=5015): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000080000002d"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000006c0)={r3, r2, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x7a, &(0x7f0000003140)={@link_local, @broadcast, @void, {@ipv6={0x86dd, @gre_packet={0x9, 0x6, "f67c15", 0x44, 0x2f, 0x0, @private2, @ipv4={'\x00', '\xff\xff', @multicast1}, {[], {{0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x1}, {0x1, 0x0, 0x0, 0x1}, {0x1, 0x0, 0x1}, {0x8, 0x88be, 0x4, {{0x2, 0x1, 0x1, 0x3, 0x0, 0x3, 0x0, 0xe}, 0x1, {0x9}}}, {0x8, 0x22eb, 0x0, {{0x8, 0x2, 0x6, 0x0, 0x0, 0x0, 0x6, 0xd9}, 0x2, {0x6, 0x55, 0x1, 0x3, 0x0, 0x1, 0x0, 0x1, 0x1}}}, {0x8, 0x6558, 0x4}}}}}}}, 0x0) 1.342022764s ago: executing program 2 (id=5016): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x6, 0x0) (async) close(r2) (async) write(r0, 0x0, 0x0) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x2, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x39, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) write$cgroup_subtree(r4, &(0x7f0000000280)=ANY=[], 0x10448) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={0x0, 0x0, 0xffffffffffffffbd, 0x0, 0x1001, 0x2, 0x11fe726f7e78fcf0}, 0x28) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x100000d, 0x6031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x100000e, 0x13, r2, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_EVENTS(r5, 0x84, 0xb, &(0x7f0000000080), &(0x7f0000000100)=0xe) 964.744541ms ago: executing program 1 (id=5017): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@ipv4_newrule={0x30, 0x20, 0x1, 0xffffffff, 0x25dfdbfe, {0x2, 0x0, 0x20, 0x0, 0xfe, 0x0, 0x0, 0x7}, [@FRA_SRC={0x8, 0x2, @private=0xa010101}, @FRA_GENERIC_POLICY=@FRA_UID_RANGE={0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x40008c4}, 0x88c0) (fail_nth: 5) 775.096154ms ago: executing program 1 (id=5018): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x6, 0x4, 0x4096, 0x89, 0x0, 0xffffffffffffffff, 0x100000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5}, 0x50) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000070000100000000000000000007000000", @ANYRES32=r2, @ANYBLOB="0c0001800800010003000100200001"], 0x44}}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r3, 0x6, 0x21, &(0x7f0000000040)="5766b1b827f6003300", 0x10) bind$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@gettclass={0x24, 0x2a, 0x1, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xf, 0x8}, {0x0, 0xfff1}, {0x2, 0x4}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x10) r4 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x20000004}, 0x5) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x20004015) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="500000001000090425bbe5cafb1698ff46276600", @ANYRES64=r4, @ANYRES8=r3], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r5 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0xe0) listen(r3, 0x5) r6 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) listen(r5, 0x101) socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'veth0_macvtap\x00'}) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x4004810) shutdown(r3, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) 679.466193ms ago: executing program 0 (id=5019): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)=@getrule={0xfffffffffffffde2, 0x22, 0x8, 0x70bd2c, 0x25dfdbfd, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x54}, 0x2000080) unshare(0x22020400) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x12, 0x3a, 0x8, 0x2, 0x400}, 0x50) bpf$BPF_PROG_ATTACH(0x1c, &(0x7f00000010c0)={@map=r1, 0xffffffffffffffff, 0x2c}, 0x20) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000240)=@bridge_getneigh={0x20, 0x1e, 0xe278d8d026561325, 0x70bd28, 0x25dfdbfe, {0x7, 0x0, 0x0, 0x0, 0x21040, 0x88}}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0xc844) 581.155142ms ago: executing program 5 (id=5020): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000980)={0x802}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x14, 0x52, 0x1, 0xfffffffc, 0x0, {0x2}}, 0x14}}, 0x0) (fail_nth: 1) 326.807059ms ago: executing program 0 (id=5021): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="2100000000000000000000000000100000040000", @ANYRES32, @ANYBLOB="0000000000000000000000000000e9ffffff0000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000001800"/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000180)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000000)="38000000010001", 0x7) r1 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000001780)={&(0x7f0000000240)=@in={0x2, 0x4e22, @multicast2}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000100)="99c0c8a64944a05e9c346de4d3d3a9bb39a0f78b255ad412db84b364a11507d57ebe76f665aa34319949d11ac4742b1e21768d7255e6fadbe63c5361ffa11811d2b17ec2289c7a18786e0a", 0x4b}, {&(0x7f0000000340)="e85adb6a4d1a8746eac7dfbfc4425e242d0b83bf6a5d7eddee7f42ebd47e3e45498f220f7a0a57909dcf6199cbcad1a4310a9164af92b63381eb4ec1585cf5ce4b7b56ac8e2bb8c522148434f8794629edc06d", 0x53}, {&(0x7f00000003c0)="58eb2c5f4861f02f200c15a24904c3bee774847f569bed51040025a08a0191a5eb14d91b8c8c510d600553f4ed0ee0a928e2ccbd303cff39", 0x38}, {&(0x7f0000000400)="51380ec09bd99ead10314c60dd84ede5853a989a50373ac712415d8507e6932ddee21ea42c5a23ae95e79250499276fccb9664194c8cd6c2fae81193d8b3b9be16f971daedea10580316cb74311dc5554dda3033aef6740c3e40681e462f186b9ea4f4492a52a98681e1b274cf9426a421b972aa87496a4dcde299", 0x7b}, {0x0}], 0x5, &(0x7f00000017c0)=ANY=[@ANYBLOB="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"], 0x1150}, 0x0) r2 = socket$key(0xf, 0x3, 0x2) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) unshare(0x26020480) socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0xa, 0x1, 0xfffff800, 0x1, 0x4, 0x9, 0xa4, 0xff9, 0x7, 0xb69, 0xc1, 0x4, 0x1, 0x3, 0x5, 0x101, 0xffc, 0x1, 0x702, 0x3, 0x1, 0xfffffffa, 0xe, 0xa, 0x9, 0xf, 0x7, 0x10001, 0x100000, 0x762, 0x1, 0xd, 0xe, 0x2b12, 0x80100, 0x6, 0x1c00, 0xb, 0x7, 0xbed4, 0x8, 0x8000100, 0x3, 0x0, 0x10fdf, 0x8, 0x5, 0x79b, 0x2, 0x1, 0x7f, 0x4, 0xa, 0x7, 0xf, 0x101, 0xd3, 0x1fa0860a, 0x7, 0xaa, 0x81, 0x4002, 0x180000, 0xd, 0x8b, 0x5, 0x2b3, 0xf7, 0x5, 0x2, 0x6, 0x9, 0x4, 0x7, 0x4009, 0x0, 0x4, 0x100002, 0x9, 0x27f, 0x0, 0x3, 0x0, 0x10001, 0x2, 0x1, 0x6, 0x6, 0x9, 0x80000000, 0xfdfffffe, 0x2, 0x2, 0x800084, 0x100, 0x5, 0x1, 0x6, 0xb, 0x5, 0x20006, 0x8, 0x15, 0xb, 0x2, 0xd9a, 0xd, 0x2a2, 0xfffffffd, 0xffffffff, 0xfffffffe, 0x5, 0x8, 0x0, 0x4, 0x2, 0x40, 0x8, 0x4, 0x4, 0x401, 0x66cd, 0x8, 0x8000, 0x1, 0x9fc, 0xc5c, 0xffffffff]}}) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=ANY=[@ANYBLOB="5c010000", @ANYRES16=r4, @ANYBLOB="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"], 0x15c}}, 0x24008050) sendmsg$key(r2, &(0x7f00000001c0)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="020300030c000000000700000000000002000900400000000000000000000017030006000000000002000000e2000002000000000000000002000100000000000000050200000000030005000000000002"], 0x60}, 0x1, 0x7}, 0x10) setsockopt$kcm_KCM_RECV_DISABLE(r1, 0x119, 0x1, &(0x7f00000000c0)=0x4, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x12, 0x4, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 288.197033ms ago: executing program 5 (id=5022): ioctl$PPPIOCSMRU(0xffffffffffffffff, 0x40047452, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x7, 0x7fe2, 0x3}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x5, 0x9, 0x7, 0x7, 0x0, r0, 0x100}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x9, 0x0, r1, 0xd}, 0x50) r2 = socket(0x1d, 0x2, 0x6) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000040)={'wlan1\x00', &(0x7f0000000b00)=@ethtool_per_queue_op={0x4b, 0xe, [0xd, 0x6, 0x210ef38b, 0x800002, 0x3, 0x1000, 0x7, 0xdf, 0x7f, 0x9, 0x80000000, 0x2ddb, 0x80000001, 0x8, 0x8, 0x756c, 0x0, 0x5, 0x7, 0xb, 0xd5c, 0x1, 0x9, 0x10, 0x7, 0xda2, 0xc6be, 0x0, 0x80000007, 0x7, 0x9, 0x9, 0x81, 0xc0, 0x6, 0x7fffffff, 0xc, 0x7, 0x1000, 0xa0, 0xfff, 0x5, 0xfffffffa, 0x5, 0x2, 0x7, 0x81, 0x9, 0x10, 0x4, 0xc, 0x800, 0x4, 0x9, 0x4b9e5199, 0x246d5d8f, 0x6, 0x7, 0x1, 0x3, 0x7fff, 0x8, 0x5, 0x27, 0x6, 0xdc, 0xd, 0x9, 0x9, 0x7fffffff, 0x3, 0x7, 0x1, 0xa8, 0x4, 0x4, 0x1, 0x7, 0xb, 0xfffffffd, 0x3, 0x9, 0x2, 0x8, 0x0, 0x5, 0x9, 0x7, 0x7, 0x0, 0xffffffff, 0x4, 0x65, 0x6, 0xd7, 0x6, 0x5, 0x0, 0x1000, 0xff80000, 0x28, 0x2, 0x3, 0xffffffff, 0x76, 0x5, 0x7, 0x3, 0x5, 0x20009, 0x40, 0xab, 0x7ff, 0x2, 0x7, 0x1, 0x4, 0x19072ffc, 0x6, 0x1ff, 0x20e3, 0x3, 0x9, 0x5, 0x5, 0xb4, 0xfffffff4, 0x2c61], "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"}}) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000180)={0x0, 0x0}, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1e, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000611924000000000095ad84508b41acc7"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=r3, 0x4) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060", @ANYRESOCT], 0xb8}}, 0x20040014) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300000101000000fbdbdf25fc000000000000003d484979935204780de100000000000080017f000001000000e2ffffff00000000f1ffffff030000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="09000000000000000200000000000000000000000000000000000000000002004000000000000000fdfdffffffffffff50000000000000004d6b000000000000050000000000000000000000000000000000000000000000000000000000000006000000000000400001020000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) sendmsg$nl_xfrm(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e"], 0xb8}}, 0x20004000) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x10}}], 0x10}, 0x0) sendmsg$nl_xfrm(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000020000000000fc0000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80c0}, 0x0) sendmsg$nl_xfrm(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="b80000001300e9990500000000000000fc000000000000000000000000000000fc00000000000000000000000000000000000000000000000a0030"], 0xb8}}, 0x4000) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000730121000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r6, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000340)=@newlink={0x5c, 0x10, 0xffffffffffffffff, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x50ab2, 0x70823}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @loopback={0xfec0ffffffffffff}}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3d}}}]}}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20060090}, 0x24000800) socket$inet6(0x10, 0x3, 0x0) unshare(0x22020400) r8 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000001c0), 0x10, r3}, 0x94) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x8, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000140)=ANY=[@ANYRES32=r9, @ANYRES32=r8, @ANYBLOB='&'], 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000040)={@map=r9, 0x26, 0x0, 0xf51, &(0x7f0000001440)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 26.811751ms ago: executing program 2 (id=5023): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x10005, 0x0, 0x0, 0x41100, 0x42, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffffe2}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) ioctl(r1, 0x8b1a, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8b04, &(0x7f0000000040)={'wlan1\x00', @random="0300"}) 0s ago: executing program 1 (id=5024): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="b40800000000000073114200000000008510000002000000b70000000000c200000000009500001200000000"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195}, 0x70) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write(r1, &(0x7f0000000200)="34000000070001020304050601", 0xd) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f00000007c0)={0x400000000000000, 0x0, &(0x7f0000000700)={&(0x7f0000001900)=ANY=[@ANYBLOB="020f000015000000000000000000000005000500000000000a00000000000000000000000000000000432e0000000000000000000000000008001200000002000000f1edc4ea00000600000000000000000000000000000000000000000000000000000000000000fc01000000000000000000000000810005000600000000000a00000000000000ff0200000000000000000000000000010000000000000000010018"], 0xa8}}, 0x40080) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={r0, 0xe0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x8, &(0x7f0000000340)}}, 0x10) r5 = socket$kcm(0x10, 0xf, 0x10) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r6, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r6, 0x84, 0x72, &(0x7f00000000c0)={r7, 0x3, 0x30}, &(0x7f00000003c0)=0xc) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="200000002f00090027bd7000000000000400001b0800180002ac0f0004001e"], 0x20}, 0x1, 0x0, 0x0, 0x42804}, 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000c40)=@delqdisc={0x58, 0x25, 0x200, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0xc, 0xc}, {0x4, 0x6}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x2c, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x2, 0x2, 0x0, 0x6, 0x1, 0xd865}, {0xdd, 0x2, 0xf, 0x8000, 0x1, 0x3}, 0x7ff, 0xff800000, 0x3a2}}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x8000001}, 0x90) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803002d000b12d25a80648c2594f90224fc60100c024002000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000180)={r9, r10, 0x26, 0x0, @void}, 0x10) r11 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040)=r4, 0x4) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000940)={&(0x7f0000000800)={0x10c, 0x0, 0x2, 0x70bd25, 0x25dfdbfe, {}, [@ETHTOOL_A_DEBUG_HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @ETHTOOL_A_DEBUG_HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x74, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x5d, 0x5, "4f83ae6bde194f4394b564758613ba63619d28a46251d14327d84bceac0cb935472a4de263611a0f68851dfc9f7c791427a34850e5da2cc495261bcc465a95456f0afbd281a746ef6aff57c6090bf00bc0940c9f4774a90bbf"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x4}]}]}, 0x10c}}, 0x4000044) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000000c0)={0x3, 0x4, 0x4, 0xa, 0x0, r10, 0x3, '\x00', r3, r11, 0x3, 0x5, 0x2}, 0x50) kernel console output (not intermixed with test programs): : invalid protocol: 37 172.20.20.56:20000 [ 555.867744][T22494] IPVS: set_ctl: invalid protocol: 37 172.20.20.56:20000 [ 555.867776][T22494] IPVS: set_ctl: invalid protocol: 37 172.20.20.56:20000 [ 555.867799][T22494] IPVS: set_ctl: invalid protocol: 37 172.20.20.56:20000 [ 555.867822][T22494] IPVS: set_ctl: invalid protocol: 37 172.20.20.56:20000 [ 555.867846][T22494] IPVS: set_ctl: invalid protocol: 37 172.20.20.56:20000 [ 555.867869][T22494] IPVS: set_ctl: invalid protocol: 37 172.20.20.56:20000 [ 555.867892][T22494] IPVS: set_ctl: invalid protocol: 37 172.20.20.56:20000 [ 555.867915][T22494] IPVS: set_ctl: invalid protocol: 37 172.20.20.56:20000 [ 555.867939][T22494] IPVS: set_ctl: invalid protocol: 37 172.20.20.56:20000 [ 555.869174][T22494] IPVS: set_ctl: invalid protocol: 37 172.20.20.56:20000 [ 555.869212][T22494] IPVS: set_ctl: invalid protocol: 37 172.20.20.56:20000 [ 555.869236][T22494] IPVS: set_ctl: invalid protocol: 37 172.20.20.56:20000 [ 555.869258][T22494] IPVS: set_ctl: invalid protocol: 37 172.20.20.56:20000 [ 555.869281][T22494] IPVS: set_ctl: invalid protocol: 37 172.20.20.56:20000 [ 555.869303][T22494] IPVS: set_ctl: invalid protocol: 37 172.20.20.56:20000 [ 555.869325][T22494] IPVS: set_ctl: invalid protocol: 37 172.20.20.56:20000 [ 555.869347][T22494] IPVS: set_ctl: invalid protocol: 37 172.20.20.56:20000 [ 555.869368][T22494] IPVS: set_ctl: invalid protocol: 37 172.20.20.56:20000 [ 555.869391][T22494] IPVS: set_ctl: invalid protocol: 37 172.20.20.56:20000 [ 555.869412][T22494] IPVS: set_ctl: invalid protocol: 37 172.20.20.56:20000 [ 555.869434][T22494] IPVS: set_ctl: invalid protocol: 37 172.20.20.56:20000 [ 555.869456][T22494] IPVS: set_ctl: invalid protocol: 37 172.20.20.56:20000 [ 555.869478][T22494] IPVS: set_ctl: invalid protocol: 37 172.20.20.56:20000 [ 555.869500][T22494] IPVS: set_ctl: invalid protocol: 37 172.20.20.56:20000 [ 555.869522][T22494] IPVS: set_ctl: invalid protocol: 37 172.20.20.56:20000 [ 555.869543][T22494] IPVS: set_ctl: invalid protocol: 37 172.20.20.56:20000 [ 555.869565][T22494] IPVS: set_ctl: invalid protocol: 37 172.20.20.56:20000 [ 555.869587][T22494] IPVS: set_ctl: invalid protocol: 37 172.20.20.56:20000 [ 555.869609][T22494] IPVS: set_ctl: invalid protocol: 37 172.20.20.56:20000 [ 555.869629][T22494] IPVS: set_ctl: invalid protocol: 37 172.20.20.56:20000 [ 555.869651][T22494] IPVS: set_ctl: invalid protocol: 37 172.20.20.56:20000 [ 555.869670][T22494] IPVS: set_ctl: invalid protocol: 37 172.20.20.56:20000 [ 555.869687][T22494] IPVS: set_ctl: invalid protocol: 37 172.20.20.56:20000 [ 555.869707][T22494] IPVS: set_ctl: invalid protocol: 37 172.20.20.56:20000 [ 555.869728][T22494] IPVS: set_ctl: invalid protocol: 37 172.20.20.56:20000 [ 555.869749][T22494] IPVS: set_ctl: invalid protocol: 37 172.20.20.56:20000 [ 555.869781][T22494] IPVS: set_ctl: invalid protocol: 37 172.20.20.56:20000 [ 555.869803][T22494] IPVS: set_ctl: invalid protocol: 37 172.20.20.56:20000 [ 555.869824][T22494] IPVS: set_ctl: invalid protocol: 37 172.20.20.56:20000 [ 555.869843][T22494] IPVS: set_ctl: invalid protocol: 37 172.20.20.56:20000 [ 555.869864][T22494] IPVS: set_ctl: invalid protocol: 37 172.20.20.56:20000 [ 555.869886][T22494] IPVS: set_ctl: invalid protocol: 37 172.20.20.56:20000 [ 555.869908][T22494] IPVS: set_ctl: invalid protocol: 37 172.20.20.56:20000 [ 555.869930][T22494] IPVS: set_ctl: invalid protocol: 37 172.20.20.56:20000 [ 555.869951][T22494] IPVS: set_ctl: invalid protocol: 37 172.20.20.56:20000 [ 555.869972][T22494] IPVS: set_ctl: invalid protocol: 37 172.20.20.56:20000 [ 556.589197][T22508] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3919'. [ 556.832048][T22523] IPVS: set_ctl: invalid protocol: 108 172.20.20.55:20003 [ 557.422282][T22552] netlink: 'syz.0.3929': attribute type 4 has an invalid length. [ 557.468491][T22550] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3928'. [ 557.933263][T22563] 8021q: adding VLAN 0 to HW filter on device bond0 [ 557.934963][T22563] 8021q: adding VLAN 0 to HW filter on device team0 [ 557.954298][T22563] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 558.507581][T22563] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 558.507605][T22563] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 558.549610][T22563] veth0_vlan: left promiscuous mode [ 558.552338][T22563] veth0_vlan: entered promiscuous mode [ 558.557416][T22563] macvlan0: left promiscuous mode [ 558.585076][T22563] veth1_macvtap: left promiscuous mode [ 558.588291][T22563] veth0_macvtap: left promiscuous mode [ 558.590227][T22563] veth0_macvtap: entered promiscuous mode [ 558.593944][T22563] veth1_macvtap: entered promiscuous mode [ 558.624317][T22563] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 558.625481][T22563] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 558.626626][T22563] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 558.670834][T22563] ip6gre1: left promiscuous mode [ 558.676964][T22563] veth0_to_bridge: entered promiscuous mode [ 558.677666][T22563] geneve2: left promiscuous mode [ 558.696382][T22563] bridge3: left promiscuous mode [ 558.697515][T22563] batman_adv: batadv0: Interface activated: vlan3 [ 558.797135][T19050] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 558.852337][T19050] net_ratelimit: 21 callbacks suppressed [ 558.852358][T19050] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 558.960458][T17715] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 559.071538][ T7375] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 559.179716][T19050] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 559.221741][ T31] audit: type=1800 audit(1790794061.885:10): pid=22646 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.3945" name=FFFFFFFF01 dev="tmpfs" ino=1513 res=0 errno=0 [ 559.222523][ T31] audit: type=1804 audit(1790794061.885:11): pid=22646 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.3945" name=2F6E6577726F6F742F3239322FFFFFFFFF01 dev="tmpfs" ino=1513 res=1 errno=0 [ 559.288143][T19050] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 559.393538][T22643] ip_tables: iptables: counters copy to user failed while replacing table [ 559.398807][T17715] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 559.492348][T22653] tc action pedit unable to extract header offset for header type (0x4) [ 559.492374][T22653] tc action pedit unable to extract header offset for header type (0x4) [ 559.492386][T22653] tc action pedit unable to extract header offset for header type (0x4) [ 559.492397][T22653] tc action pedit unable to extract header offset for header type (0x4) [ 559.492408][T22653] tc action pedit unable to extract header offset for header type (0x4) [ 559.492419][T22653] tc action pedit unable to extract header offset for header type (0x4) [ 559.492430][T22653] tc action pedit unable to extract header offset for header type (0x4) [ 559.492441][T22653] tc action pedit unable to extract header offset for header type (0x4) [ 559.492450][T22653] tc action pedit unable to extract header offset for header type (0x4) [ 559.492461][T22653] tc action pedit unable to extract header offset for header type (0x4) [ 559.492482][T22653] 0: reclassify loop, rule prio 0, protocol 800 [ 559.540146][T19050] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 559.642471][T19050] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 559.759715][T22664] sctp: [Deprecated]: syz.0.3949 (pid 22664) Use of int in maxseg socket option. [ 559.759715][T22664] Use struct sctp_assoc_value instead [ 560.225549][T22682] netlink: 'syz.0.3954': attribute type 1 has an invalid length. [ 560.225571][T22682] netlink: 248 bytes leftover after parsing attributes in process `syz.0.3954'. [ 560.617064][T22695] netlink: 92 bytes leftover after parsing attributes in process `syz.1.3958'. [ 560.726560][T22706] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3960'. [ 560.894059][T22716] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3962'. [ 561.028244][ T5632] Bluetooth: hci4: command 0x0405 tx timeout [ 561.312010][T22730] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 561.313576][T22725] syzkaller0: entered promiscuous mode [ 561.313595][T22725] syzkaller0: entered allmulticast mode [ 561.344577][T22730] tipc: MTU too low for tipc bearer [ 561.384813][T22734] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3967'. [ 561.502374][T22741] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3969'. [ 561.542886][T22737] syzkaller0: entered promiscuous mode [ 561.542909][T22737] syzkaller0: entered allmulticast mode [ 561.664277][T22744] x_tables: duplicate entry at hook 2 [ 562.016330][T22768] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3977'. [ 562.029439][T22768] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3977'. [ 562.231273][T22779] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3978'. [ 562.281373][T22784] bond5: option all_slaves_active: invalid value (255) [ 562.286647][T22784] bond5 (unregistering): Released all slaves [ 562.330660][T22788] netlink: 'syz.2.3982': attribute type 11 has an invalid length. [ 562.717257][T22817] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3984'. [ 562.953693][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 563.415624][T22839] bond3: option fail_over_mac: invalid value (127) [ 563.432384][T22839] bond3 (unregistering): Released all slaves [ 563.517530][T22845] bond3: option fail_over_mac: invalid value (127) [ 563.549534][T22845] bond3 (unregistering): Released all slaves [ 563.912902][T22874] netlink: 'syz.2.3992': attribute type 1 has an invalid length. [ 563.984224][T22873] 8021q: adding VLAN 0 to HW filter on device team0 [ 563.984717][T22873] tipc: Resetting bearer [ 564.014729][T22873] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 564.082598][T22873] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 564.084999][T22873] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 564.106279][T22873] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 564.123887][T22873] veth1_vlan: left promiscuous mode [ 564.125015][T22873] veth0_vlan: left promiscuous mode [ 564.126578][T22873] veth0_vlan: entered promiscuous mode [ 564.145804][T22873] veth1_vlan: entered promiscuous mode [ 564.164086][T22873] veth1_macvtap: left promiscuous mode [ 564.165256][T22873] veth0_macvtap: left promiscuous mode [ 564.166441][T22873] veth0_macvtap: entered promiscuous mode [ 564.167708][T22873] veth1_macvtap: entered promiscuous mode [ 564.199213][T22873] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 564.200774][T22873] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 564.201840][T22873] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 564.203021][T22873] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 564.240820][T22873] 8021q: adding VLAN 0 to HW filter on device bond1 [ 564.247664][T22873] 8021q: adding VLAN 0 to HW filter on device bond0 [ 564.265516][T22873] 8021q: adding VLAN 0 to HW filter on device bond2 [ 564.287675][ T7375] bridge0: port 1(bridge_slave_0) entered blocking state [ 564.287810][ T7375] bridge0: port 1(bridge_slave_0) entered forwarding state [ 564.296820][ T7375] bridge0: port 2(bridge_slave_1) entered blocking state [ 564.296930][ T7375] bridge0: port 2(bridge_slave_1) entered forwarding state [ 564.414900][T22875] netlink: 'syz.1.3993': attribute type 3 has an invalid length. [ 564.415161][T22875] netlink: 'syz.1.3993': attribute type 3 has an invalid length. [ 564.461098][T22885] bond5: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 564.551140][T22885] bond5 (unregistering): Released all slaves [ 564.749250][T19053] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 564.749307][T19053] net_ratelimit: 104 callbacks suppressed [ 564.749320][T19053] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 564.749623][T19053] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 564.773467][ T6882] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 564.792878][T19053] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 564.800847][T19052] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 564.859977][ T7375] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 564.967298][T22909] openvswitch: netlink: Missing key (keys=c0, expected=480) [ 564.969098][T19053] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 564.969473][T19053] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 565.078633][T19050] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 565.232201][T19049] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 565.235874][T22922] netlink: zone id is out of range [ 565.235889][T22922] netlink: zone id is out of range [ 565.235897][T22922] netlink: zone id is out of range [ 565.235904][T22922] netlink: zone id is out of range [ 565.391423][ T6880] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 565.460810][T22933] netlink: 'syz.4.4005': attribute type 1 has an invalid length. [ 565.460829][T22933] __nla_validate_parse: 5 callbacks suppressed [ 565.460838][T22933] netlink: 244 bytes leftover after parsing attributes in process `syz.4.4005'. [ 565.510534][T22936] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4006'. [ 565.544736][T22939] netlink: 'syz.4.4007': attribute type 30 has an invalid length. [ 565.567324][T22942] netlink: 52 bytes leftover after parsing attributes in process `syz.2.4006'. [ 565.567349][T22942] nbd: must specify at least one socket [ 565.580636][T22942] netlink: 'syz.2.4006': attribute type 2 has an invalid length. [ 565.770982][T22945] netlink: 'syz.2.4008': attribute type 1 has an invalid length. [ 565.771002][T22945] netlink: 224 bytes leftover after parsing attributes in process `syz.2.4008'. [ 565.812566][T22946] bond5: entered allmulticast mode [ 566.029200][T22955] bond6: option min_links: invalid value (18446744073709551612) [ 566.029224][T22955] bond6: option min_links: allowed values 0 - 2147483647 [ 566.034552][T22955] bond6 (unregistering): Released all slaves [ 566.076701][T22965] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4012'. [ 566.082832][T22965] netlink: 56 bytes leftover after parsing attributes in process `syz.5.4012'. [ 566.104780][T19050] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 566.105193][T19050] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 566.147815][T22971] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4013'. [ 566.344214][T22960] tipc: Enabled bearer , priority 0 [ 566.347097][ T6882] bridge0: entered promiscuous mode [ 566.565672][T22985] netlink: 'syz.5.4017': attribute type 1 has an invalid length. [ 566.565696][T22985] netlink: 244 bytes leftover after parsing attributes in process `syz.5.4017'. [ 566.588370][ T10] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 566.656871][T22987] syzkaller0: entered promiscuous mode [ 566.656893][T22987] syzkaller0: entered allmulticast mode [ 566.742543][T22994] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4021'. [ 566.866959][T23000] netlink: 224 bytes leftover after parsing attributes in process `syz.2.4018'. [ 567.470530][T23029] batman_adv: batadv0: Adding interface: veth0 [ 567.470560][T23029] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 567.470587][T23029] batman_adv: batadv0: Interface activated: veth0 [ 567.527335][T23029] batman_adv: batadv0: Interface deactivated: vlan3 [ 567.527361][T23029] batman_adv: batadv0: Removing interface: vlan3 [ 567.675428][T23029] batman_adv: batadv0: Interface deactivated: veth0 [ 567.675452][T23029] batman_adv: batadv0: Removing interface: veth0 [ 567.769125][T23031] netlink: 'syz.1.4032': attribute type 1 has an invalid length. [ 567.981864][T23044] netlink: 'syz.1.4035': attribute type 1 has an invalid length. [ 568.042449][T23044] 8021q: adding VLAN 0 to HW filter on device bond3 [ 568.096685][T23044] netlink: 'syz.1.4035': attribute type 1 has an invalid length. [ 568.188380][T23058] netlink: 'syz.0.4037': attribute type 1 has an invalid length. [ 568.281592][T23063] netlink: 'syz.4.4038': attribute type 10 has an invalid length. [ 569.204888][T23050] bond3: (slave geneve2): making interface the new active one [ 569.221001][T23050] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 569.313697][T23058] bond1: option mode: invalid value (8) [ 569.317239][T23058] bond1 (unregistering): Released all slaves [ 569.697566][T23088] tipc: Enabling of bearer rejected, failed to enable media [ 569.779374][T19053] net_ratelimit: 516 callbacks suppressed [ 569.779396][T19053] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 569.817608][T23098] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 569.888487][ T7375] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 569.908447][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 569.992877][T23114] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 570.000339][T19053] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 570.029324][T23110] Cannot find map_set index 2 as target [ 570.109828][T19049] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 570.210701][T23121] bond4: option primary_reselect: invalid value (6) [ 570.213639][T23121] bond4 (unregistering): Released all slaves [ 570.291344][T19053] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 570.398150][T19053] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 570.508154][T19053] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 570.608043][T23141] tipc: Enabling of bearer rejected, already enabled [ 570.618180][T19052] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 570.703910][T23147] validate_nla: 1 callbacks suppressed [ 570.703932][T23147] netlink: 'syz.2.4059': attribute type 2 has an invalid length. [ 570.728563][T19053] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 571.062922][T23161] netlink: 'syz.5.4065': attribute type 1 has an invalid length. [ 571.062945][T23161] __nla_validate_parse: 12 callbacks suppressed [ 571.062957][T23161] netlink: 140 bytes leftover after parsing attributes in process `syz.5.4065'. [ 571.062971][T23161] netlink: 'syz.5.4065': attribute type 1 has an invalid length. [ 571.062982][T23161] netlink: 'syz.5.4065': attribute type 2 has an invalid length. [ 571.605226][T23185] tipc: Enabling of bearer rejected, failed to enable media [ 571.745706][T23197] FAULT_INJECTION: forcing a failure. [ 571.745706][T23197] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 571.745740][T23197] CPU: 1 UID: 0 PID: 23197 Comm: syz.0.4073 Not tainted syzkaller #0 PREEMPT(full) [ 571.745768][T23197] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 571.745779][T23197] Call Trace: [ 571.745787][T23197] [ 571.745795][T23197] dump_stack_lvl+0xe8/0x150 [ 571.745827][T23197] should_fail_ex+0x410/0x560 [ 571.745853][T23197] _copy_from_user+0x2d/0xb0 [ 571.745879][T23197] ___sys_sendmsg+0x1c6/0x360 [ 571.745902][T23197] ? __lock_acquire+0x747/0x2de0 [ 571.745925][T23197] ? __pfx____sys_sendmsg+0x10/0x10 [ 571.745980][T23197] ? __fget_files+0x2a/0x420 [ 571.746003][T23197] ? __fget_files+0x3a2/0x420 [ 571.746036][T23197] __x64_sys_sendmsg+0x1b1/0x290 [ 571.746062][T23197] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 571.746106][T23197] do_syscall_64+0x166/0x520 [ 571.746127][T23197] ? trace_irq_disable+0x3b/0x140 [ 571.746145][T23197] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 571.746162][T23197] ? clear_bhb_loop+0x70/0xc0 [ 571.746184][T23197] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 571.746202][T23197] RIP: 0033:0x7f714af9e159 [ 571.746219][T23197] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 571.746234][T23197] RSP: 002b:00007f714be26028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 571.746255][T23197] RAX: ffffffffffffffda RBX: 00007f714b225fa0 RCX: 00007f714af9e159 [ 571.746268][T23197] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 571.746279][T23197] RBP: 00007f714be26090 R08: 0000000000000000 R09: 0000000000000000 [ 571.746291][T23197] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 571.746301][T23197] R13: 00007f714b226038 R14: 00007f714b225fa0 R15: 00007ffe40e84878 [ 571.746329][T23197] [ 571.886375][T23168] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 571.910095][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 572.092564][T23208] netlink: 'syz.5.4077': attribute type 1 has an invalid length. [ 572.092594][T23208] netlink: 244 bytes leftover after parsing attributes in process `syz.5.4077'. [ 572.616293][T23231] netlink: 52 bytes leftover after parsing attributes in process `syz.0.4081'. [ 572.616317][T23231] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4081'. [ 572.741080][T23235] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4082'. [ 572.901820][T23241] vxcan0: tx drop: invalid da for name 0x00000000000000c8 [ 572.962104][T23244] ip6gre1: entered promiscuous mode [ 572.962126][T23244] ip6gre1: entered allmulticast mode [ 572.984408][T23244] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 572.998396][T23247] FAULT_INJECTION: forcing a failure. [ 572.998396][T23247] name failslab, interval 1, probability 0, space 0, times 0 [ 572.998428][T23247] CPU: 1 UID: 0 PID: 23247 Comm: syz.5.4086 Not tainted syzkaller #0 PREEMPT(full) [ 572.998448][T23247] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 572.998459][T23247] Call Trace: [ 572.998467][T23247] [ 572.998475][T23247] dump_stack_lvl+0xe8/0x150 [ 572.998505][T23247] should_fail_ex+0x410/0x560 [ 572.998530][T23247] ? __alloc_skb+0x1db/0x7a0 [ 572.998552][T23247] should_failslab+0xa8/0x100 [ 572.998576][T23247] ? __alloc_skb+0x1db/0x7a0 [ 572.998595][T23247] kmem_cache_alloc_node_noprof+0xa1/0x610 [ 572.998623][T23247] ? __alloc_skb+0x18d/0x7a0 [ 572.998645][T23247] ? __alloc_skb+0x1db/0x7a0 [ 572.998674][T23247] __alloc_skb+0x1db/0x7a0 [ 572.998700][T23247] netlink_sendmsg+0x5d4/0xb40 [ 572.998729][T23247] ? __pfx_netlink_sendmsg+0x10/0x10 [ 572.998755][T23247] ? apparmor_socket_sendmsg+0x98/0x360 [ 572.998779][T23247] ? __pfx_netlink_sendmsg+0x10/0x10 [ 572.998796][T23247] sock_sendmsg_nosec+0x14e/0x190 [ 572.998818][T23247] ____sys_sendmsg+0x54e/0x850 [ 572.998849][T23247] ? __pfx_____sys_sendmsg+0x10/0x10 [ 572.998881][T23247] ? import_iovec+0x73/0xa0 [ 572.998906][T23247] ___sys_sendmsg+0x2a5/0x360 [ 572.998928][T23247] ? __lock_acquire+0x747/0x2de0 [ 572.998950][T23247] ? __pfx____sys_sendmsg+0x10/0x10 [ 572.999016][T23247] ? __fget_files+0x2a/0x420 [ 572.999041][T23247] ? __fget_files+0x3a2/0x420 [ 572.999076][T23247] __x64_sys_sendmsg+0x1b1/0x290 [ 572.999104][T23247] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 572.999152][T23247] do_syscall_64+0x166/0x520 [ 572.999176][T23247] ? trace_irq_disable+0x3b/0x140 [ 572.999195][T23247] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 572.999214][T23247] ? clear_bhb_loop+0x70/0xc0 [ 572.999236][T23247] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 572.999255][T23247] RIP: 0033:0x7fee6679e159 [ 572.999273][T23247] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 572.999287][T23247] RSP: 002b:00007fee6774c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 572.999307][T23247] RAX: ffffffffffffffda RBX: 00007fee66a25fa0 RCX: 00007fee6679e159 [ 572.999321][T23247] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 572.999333][T23247] RBP: 00007fee6774c090 R08: 0000000000000000 R09: 0000000000000000 [ 572.999344][T23247] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 572.999355][T23247] R13: 00007fee66a26038 R14: 00007fee66a25fa0 R15: 00007ffed40a7628 [ 572.999386][T23247] [ 573.452854][T19049] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 573.454487][T19049] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 573.479365][ T6882] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 573.763872][T23259] xt_policy: output policy not valid in PREROUTING and INPUT [ 573.767184][T23262] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4089'. [ 573.798718][ T6882] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 573.911959][T23270] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4089'. [ 573.939808][T23270] vlan4: entered allmulticast mode [ 573.939829][T23270] bridge_slave_0: entered allmulticast mode [ 574.016882][T23262] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4089'. [ 574.232389][ T6882] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 574.859103][T19052] net_ratelimit: 27 callbacks suppressed [ 574.859494][T19052] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 574.968117][T19052] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 575.080791][T19053] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 575.211448][T19052] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 575.318323][T19050] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 575.428426][T19050] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 575.538363][T19049] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 575.648556][T19052] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 575.758235][T17715] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 575.868732][T17715] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 577.268584][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 577.670194][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 579.958343][T19052] net_ratelimit: 36 callbacks suppressed [ 579.958365][T19052] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 580.068975][T19050] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 580.178423][T19050] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 580.288294][T19049] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 580.398623][T19050] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 580.519603][T19052] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 580.629369][T17715] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 580.739052][T17715] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 580.849335][T19049] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 580.958780][T19049] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 585.030755][ T7375] net_ratelimit: 36 callbacks suppressed [ 585.030786][ T7375] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 585.138562][T19053] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 585.249454][ T7375] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 585.348588][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 585.359109][T19049] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 585.469981][ T39] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 585.579822][T19049] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 585.689033][ T39] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 585.799537][ T39] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 585.908766][T19052] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 586.020148][T19052] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 589.828620][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 590.129648][T19053] net_ratelimit: 36 callbacks suppressed [ 590.129671][T19053] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 590.238517][T19052] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 590.348577][T19052] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 590.458437][ T7375] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 590.568694][T19053] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 590.678693][ T39] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 590.789879][ T7375] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 590.898558][T19049] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 591.008543][ T7375] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 591.118816][ T39] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 591.748604][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 595.208742][T19053] net_ratelimit: 36 callbacks suppressed [ 595.208764][T19053] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 595.318923][T19052] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 595.429954][ T39] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 595.538258][T19049] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 595.650270][ T39] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 595.758535][ T39] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 595.869626][T19049] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 595.979118][T19052] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 596.089445][ T39] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 596.198619][T19049] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 598.789835][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 600.269221][T19049] net_ratelimit: 36 callbacks suppressed [ 600.269244][T19049] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 600.378850][T19052] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 600.488811][T19052] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 600.598836][T19050] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 600.708648][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 600.710491][ T39] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 600.818359][T19049] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 600.929130][T19049] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 601.038724][T19049] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 601.148593][ T39] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 601.259098][ T39] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 605.338703][ T39] net_ratelimit: 36 callbacks suppressed [ 605.338727][ T39] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 605.449087][ T39] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 605.558378][T19049] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 605.669457][T19049] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 605.778445][T19049] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 605.888395][T19053] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 605.998939][T19049] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 606.108530][T19050] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 606.218515][T19052] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 606.329297][T19050] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 610.348980][T19050] net_ratelimit: 36 callbacks suppressed [ 610.349003][T19050] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 610.458415][T19049] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 610.568568][T19052] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 610.688395][ T39] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 610.798626][T19049] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 610.908355][T19049] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 611.018223][T19049] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 611.128224][T19052] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 611.238217][ T39] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 611.348231][T19052] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 611.431290][T23325] tipc: Enabling of bearer rejected, failed to enable media [ 611.435166][T23325] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4104'. [ 611.440359][T23332] netlink: 'syz.1.4103': attribute type 1 has an invalid length. [ 611.503025][T23332] 8021q: adding VLAN 0 to HW filter on device bond4 [ 611.667921][T23353] x_tables: duplicate underflow at hook 4 [ 611.942676][T23362] FAULT_INJECTION: forcing a failure. [ 611.942676][T23362] name failslab, interval 1, probability 0, space 0, times 0 [ 611.942721][T23362] CPU: 1 UID: 0 PID: 23362 Comm: syz.0.4110 Not tainted syzkaller #0 PREEMPT(full) [ 611.942747][T23362] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 611.942756][T23362] Call Trace: [ 611.942762][T23362] [ 611.942769][T23362] dump_stack_lvl+0xe8/0x150 [ 611.942797][T23362] should_fail_ex+0x410/0x560 [ 611.942822][T23362] should_failslab+0xa8/0x100 [ 611.942841][T23362] ? skb_clone+0x212/0x3a0 [ 611.942860][T23362] kmem_cache_alloc_noprof+0xa1/0x600 [ 611.942884][T23362] ? skb_clone+0x212/0x3a0 [ 611.942908][T23362] skb_clone+0x212/0x3a0 [ 611.942931][T23362] __netlink_deliver_tap+0x355/0x6e0 [ 611.942965][T23362] ? netlink_deliver_tap+0x2e/0x1b0 [ 611.942986][T23362] netlink_deliver_tap+0x19c/0x1b0 [ 611.943008][T23362] netlink_unicast+0x781/0x940 [ 611.943040][T23362] netlink_sendmsg+0x813/0xb40 [ 611.943064][T23362] ? __pfx_netlink_sendmsg+0x10/0x10 [ 611.943086][T23362] ? apparmor_socket_sendmsg+0x98/0x360 [ 611.943107][T23362] ? __pfx_netlink_sendmsg+0x10/0x10 [ 611.943122][T23362] sock_sendmsg_nosec+0x14e/0x190 [ 611.943143][T23362] ____sys_sendmsg+0x54e/0x850 [ 611.943167][T23362] ? __pfx_____sys_sendmsg+0x10/0x10 [ 611.943194][T23362] ? import_iovec+0x73/0xa0 [ 611.943219][T23362] ___sys_sendmsg+0x2a5/0x360 [ 611.943241][T23362] ? __lock_acquire+0x747/0x2de0 [ 611.943264][T23362] ? __pfx____sys_sendmsg+0x10/0x10 [ 611.943308][T23362] ? __fget_files+0x2a/0x420 [ 611.943328][T23362] ? __fget_files+0x3a2/0x420 [ 611.943357][T23362] __x64_sys_sendmsg+0x1b1/0x290 [ 611.943381][T23362] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 611.943416][T23362] do_syscall_64+0x166/0x520 [ 611.943435][T23362] ? trace_irq_disable+0x3b/0x140 [ 611.943451][T23362] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 611.943469][T23362] ? clear_bhb_loop+0x70/0xc0 [ 611.943488][T23362] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 611.943504][T23362] RIP: 0033:0x7f714af9e159 [ 611.943520][T23362] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 611.943535][T23362] RSP: 002b:00007f714be26028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 611.943553][T23362] RAX: ffffffffffffffda RBX: 00007f714b225fa0 RCX: 00007f714af9e159 [ 611.943564][T23362] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 611.943572][T23362] RBP: 00007f714be26090 R08: 0000000000000000 R09: 0000000000000000 [ 611.943581][T23362] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 611.943590][T23362] R13: 00007f714b226038 R14: 00007f714b225fa0 R15: 00007ffe40e84878 [ 611.943616][T23362] [ 612.942230][T23399] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4118'. [ 613.381527][T23416] netlink: 9 bytes leftover after parsing attributes in process `syz.4.4124'. [ 613.402512][T23416] 0{X功: entered promiscuous mode [ 613.467920][T23416] netlink: 5 bytes leftover after parsing attributes in process `syz.4.4124'. [ 613.468251][T23416] 1{X功: renamed from 30{X功 [ 613.485369][T23416] 1{X功: left promiscuous mode [ 613.485395][T23416] 1{X功: entered allmulticast mode [ 613.948439][T23457] xt_CT: You must specify a L4 protocol and not use inversions on it [ 615.329315][T23499] IPVS: Scheduler module ip_vs_sip not found [ 615.418488][T19053] net_ratelimit: 34 callbacks suppressed [ 615.418509][T19053] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 615.529132][T19052] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 615.638448][T19052] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 615.751656][T19053] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 615.780090][T23513] x_tables: unsorted underflow at hook 2 [ 615.858824][T19053] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 615.867268][T23519] openvswitch: netlink: Flow actions attr not present in new flow. [ 615.956945][T23522] netlink: 'syz.4.4155': attribute type 1 has an invalid length. [ 615.956978][T23522] netlink: 244 bytes leftover after parsing attributes in process `syz.4.4155'. [ 615.968713][T19049] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 616.118375][T19050] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 616.205550][T23526] netlink: 'syz.5.4156': attribute type 1 has an invalid length. [ 616.213194][T23536] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4159'. [ 616.243205][T23530] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4158'. [ 616.270593][T23546] xt_CT: You must specify a L4 protocol and not use inversions on it [ 616.295354][T23536] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4159'. [ 616.347301][T23526] bond5: entered promiscuous mode [ 616.356137][T23526] 8021q: adding VLAN 0 to HW filter on device bond5 [ 616.358960][ T39] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 616.498531][T19049] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 616.527258][T23553] netlink: 'syz.2.4161': attribute type 2 has an invalid length. [ 616.527283][T23553] netlink: 'syz.2.4161': attribute type 2 has an invalid length. [ 616.613641][T23556] erspan0: entered promiscuous mode [ 619.908903][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 620.488434][T19052] net_ratelimit: 35 callbacks suppressed [ 620.488457][T19052] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 620.598546][T19049] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 620.710137][ T39] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 620.818259][T19052] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 620.928769][T19052] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 621.038285][ T39] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 621.148380][T19050] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 621.258296][T19050] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 621.368374][T19049] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 621.478207][T19050] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 624.389779][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 625.559245][T19052] net_ratelimit: 36 callbacks suppressed [ 625.559268][T19052] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 625.680562][T19049] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 625.788762][T19052] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 625.898934][T19049] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 626.008299][T19049] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 626.118575][T17715] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 626.229124][T17715] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 626.338516][T17715] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 626.448822][T19049] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 626.558556][ T7375] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 630.648532][T19052] net_ratelimit: 36 callbacks suppressed [ 630.648555][T19052] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 630.758225][T17715] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 630.868544][ T39] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 630.978288][T19052] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 631.088534][T19052] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 631.198247][T17715] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 631.308867][T19052] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 631.418530][T19050] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 631.428531][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 631.528221][T19050] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 631.638482][T19052] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 635.718688][T17715] net_ratelimit: 36 callbacks suppressed [ 635.718712][T17715] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 635.831323][ T7375] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 635.938234][ T7375] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 636.048903][ T7375] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 636.158434][ T7375] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 636.268268][ T39] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 636.378692][T19050] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 636.488728][T17715] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 636.598356][ T7375] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 636.708708][ T39] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 640.778371][ T7375] net_ratelimit: 36 callbacks suppressed [ 640.778391][ T7375] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 640.888546][ T7375] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 640.998947][ T39] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 641.108745][ T7375] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 641.218427][T19050] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 641.328309][ T7375] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 641.438878][T19050] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 641.548694][T19049] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 641.658601][T19050] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 641.768732][T19049] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 645.849143][T19050] net_ratelimit: 36 callbacks suppressed [ 645.849166][T19050] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 645.959012][T17715] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 646.068323][T17715] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 646.178569][T17715] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 646.288252][ T39] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 646.409707][T19050] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 646.519526][T19050] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 646.630614][T19050] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 646.739928][T19050] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 646.849401][T19050] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 650.929989][T17715] net_ratelimit: 36 callbacks suppressed [ 650.930012][T17715] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 651.039091][T19049] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 651.148608][ T7375] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 651.258507][T19049] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 651.369198][T19050] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 651.478463][T19050] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 651.590541][T17715] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 651.709081][T17715] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 651.819263][T17715] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 651.928573][T19050] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 655.486333][ T39] bridge1 (unregistering): left promiscuous mode [ 655.486985][ T39] team0: Port device bridge1 removed [ 655.534257][ T39] team0: Port device bridge5 removed [ 655.552545][ T39] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 655.566865][ T39] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 655.582387][ T39] bond0 (unregistering): Released all slaves [ 655.595720][ T39] bond1 (unregistering): Released all slaves [ 655.612686][ T39] bond2 (unregistering): Released all slaves [ 655.629907][ T7375] smbdirect: ib_dev[syz1] removed [ 655.630387][ T39] bond3 (unregistering): Released all slaves [ 655.671011][ T39] bond4 (unregistering): Released all slaves [ 655.697808][ T39] bond5 (unregistering): Released all slaves [ 655.714326][ T39] bond6 (unregistering): Released all slaves [ 655.725436][ T39] bond7 (unregistering): Released all slaves [ 655.736055][ T39] bond8 (unregistering): Released all slaves [ 655.746348][ T39] bond9 (unregistering): Released all slaves [ 655.759560][ T39] bond10 (unregistering): Released all slaves [ 655.784849][ T39] bond11 (unregistering): Released all slaves [ 655.795331][ T39] bond12 (unregistering): Released all slaves [ 655.806691][ T39] bond13 (unregistering): Released all slaves [ 655.820791][ T6880] infiniband syz1: ib_query_port failed (-19) [ 655.941696][T19050] net_ratelimit: 29 callbacks suppressed [ 655.941717][T19050] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 656.025752][ T39] : left promiscuous mode [ 656.139008][T19050] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 656.194390][ T39] tipc: Disabling bearer [ 656.220208][ T39] tipc: Left network mode [ 656.250111][T17715] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 656.388387][T17715] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 656.499869][T19050] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 656.705143][ T39] team0 (unregistering): Port device team_slave_0 removed [ 656.858221][T17715] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 656.980099][T19049] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 657.090942][T19050] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 657.135809][ T39] IPVS: stop unused estimator thread 0... [ 657.198818][ T7375] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 657.308225][T19050] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 658.482823][T23575] tipc: Cannot configure node identity twice [ 658.502042][T23567] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4163'. [ 658.543428][T23575] tipc: New replicast peer: 127.0.0.1 [ 658.546545][T23575] tipc: Enabled bearer , priority 10 [ 658.704631][T23576] lo speed is unknown, defaulting to 1000 [ 658.743855][T23578] sctp: [Deprecated]: syz.5.4166 (pid 23578) Use of struct sctp_assoc_value in delayed_ack socket option. [ 658.743855][T23578] Use struct sctp_sack_info instead [ 658.744263][T23578] sctp: [Deprecated]: syz.5.4166 (pid 23578) Use of struct sctp_assoc_value in delayed_ack socket option. [ 658.744263][T23578] Use struct sctp_sack_info instead [ 658.826383][T23587] netlink: 'syz.4.4171': attribute type 1 has an invalid length. [ 658.826403][T23587] netlink: 244 bytes leftover after parsing attributes in process `syz.4.4171'. [ 658.943901][T23590] syzkaller1: entered promiscuous mode [ 658.943924][T23590] syzkaller1: entered allmulticast mode [ 659.104850][T23598] ovs-system: entered promiscuous mode [ 659.133411][T23598] netlink: 68 bytes leftover after parsing attributes in process `syz.1.4175'. [ 659.301005][T23602] tipc: Started in network mode [ 659.301037][T23602] tipc: Node identity ac14140f, cluster identity 4711 [ 659.301395][T23602] tipc: New replicast peer: 255.255.255.255 [ 659.310506][T23602] tipc: Enabled bearer , priority 10 [ 659.316273][T23602] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4176'. [ 659.339496][T23602] netlink: 'syz.4.4176': attribute type 1 has an invalid length. [ 659.398964][T23605] netlink: 'syz.2.4177': attribute type 39 has an invalid length. [ 659.450949][T23606] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4176'. [ 659.476425][T23602] bond5: entered promiscuous mode [ 659.483884][T23602] 8021q: adding VLAN 0 to HW filter on device bond5 [ 659.606347][T23602] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4176'. [ 659.694928][T23602] bond5: (slave bridge0): making interface the new active one [ 659.694956][T23602] bridge0: entered promiscuous mode [ 659.696118][T23602] bond5: (slave bridge0): Enslaving as an active interface with an up link [ 659.698077][ T6882] tipc: Node number set to 3132433243 [ 659.902370][T23613] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4179'. [ 660.132385][T23626] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4185'. [ 660.132417][T23626] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4185'. [ 660.133255][T23626] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4185'. [ 660.235222][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 661.039076][T19050] net_ratelimit: 21 callbacks suppressed [ 661.039098][T19050] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 661.046594][T16822] tipc: Node number set to 2886997007 [ 661.151459][T19053] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 661.261696][T17715] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 661.372297][T17715] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 661.479443][T17715] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 661.592036][T19050] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 661.700466][T17715] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 661.812641][ T39] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 661.918797][T19049] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 662.032285][T19049] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 671.162429][T23813] __nla_validate_parse: 1 callbacks suppressed [ 671.162453][T23813] netlink: 58351 bytes leftover after parsing attributes in process `syz.1.4273'. [ 671.169220][T19053] net_ratelimit: 16 callbacks suppressed [ 671.169239][T19053] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 671.278083][T17715] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 671.299921][T23819] macsec2: entered promiscuous mode [ 671.299944][T23819] macsec2: entered allmulticast mode [ 671.390006][T19053] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 671.498367][T17715] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 671.645843][T23835] syzkaller0: entered promiscuous mode [ 671.645857][T23835] syzkaller0: entered allmulticast mode [ 671.668108][T19053] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 671.778584][ T7375] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 671.888627][ T127] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 671.999492][ T7375] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 672.173147][T23867] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4300'. [ 672.216067][T23867] ip6gre2: entered promiscuous mode [ 672.216089][T23867] ip6gre2: entered allmulticast mode [ 672.229480][T23872] ip_tables: iptables: counters copy to user failed while replacing table [ 672.240748][ T7375] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 672.645823][T23892] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4312'. [ 672.793288][T23896] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4314'. [ 672.797783][T23902] syzkaller0: left promiscuous mode [ 672.797807][T23902] syzkaller0: left allmulticast mode [ 673.067652][T23918] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input8 [ 673.559789][T23941] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4330'. [ 673.559813][T23941] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4330'. [ 673.891802][ T10] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 673.900196][T23959] bridge_slave_0: left allmulticast mode [ 673.900228][T23959] bridge_slave_0: left promiscuous mode [ 673.900425][T23959] bridge0: port 1(bridge_slave_0) entered disabled state [ 673.936702][T23960] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4339'. [ 673.944344][T23959] bridge_slave_1: left allmulticast mode [ 673.944366][T23959] bridge_slave_1: left promiscuous mode [ 673.944564][T23959] bridge0: port 2(bridge_slave_1) entered disabled state [ 674.037408][T23959] team0: Port device team_slave_0 removed [ 674.101891][T23959] team0: Port device team_slave_1 removed [ 674.106061][T23959] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 674.106085][T23959] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 674.141494][T23959] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 674.182772][ T978] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 674.187379][T23959] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 674.216404][ T7375] tipc: Resetting bearer [ 674.785180][T23976] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4341'. [ 674.962435][T19049] wlan1: Trigger new scan to find an IBSS to join [ 675.170882][T23989] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4342'. [ 675.170904][T23989] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4342'. [ 675.170929][T23989] netlink: 'syz.4.4342': attribute type 13 has an invalid length. [ 675.170942][T23989] netlink: 'syz.4.4342': attribute type 12 has an invalid length. [ 675.536569][T24005] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 675.588610][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 676.368077][ T7375] net_ratelimit: 28 callbacks suppressed [ 676.368101][ T7375] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 676.407108][T24033] __nla_validate_parse: 1 callbacks suppressed [ 676.407128][T24033] netlink: 72 bytes leftover after parsing attributes in process `syz.4.4353'. [ 676.412502][T24035] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4354'. [ 676.497029][T24038] netlink: zone id is out of range [ 676.497046][T24038] netlink: zone id is out of range [ 676.497055][T24038] netlink: zone id is out of range [ 676.497062][T24038] netlink: zone id is out of range [ 676.497071][T24038] netlink: zone id is out of range [ 676.497079][T24038] netlink: zone id is out of range [ 676.497090][T24038] netlink: zone id is out of range [ 676.497098][T24038] netlink: zone id is out of range [ 676.497107][T24038] netlink: zone id is out of range [ 676.645143][T24035] dummy0: left promiscuous mode [ 676.882957][T24035] gretap1: left promiscuous mode [ 676.894619][T24035] ip6gre1: left promiscuous mode [ 676.896459][T24035] geneve3: left promiscuous mode [ 676.911460][T24035] bond5: left allmulticast mode [ 677.004736][T24041] syzkaller0: entered promiscuous mode [ 677.004762][T24041] syzkaller0: entered allmulticast mode [ 677.020068][T17715] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 677.020146][T17715] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 677.020183][T17715] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 677.020215][T17715] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 677.522542][T24072] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4364'. [ 678.365565][T24075] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 678.507311][T24103] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4369'. [ 678.671968][T24110] netlink: 72 bytes leftover after parsing attributes in process `syz.4.4370'. [ 678.671995][T24110] netlink: 72 bytes leftover after parsing attributes in process `syz.4.4370'. [ 678.721037][T24110] netlink: 72 bytes leftover after parsing attributes in process `syz.4.4370'. [ 678.721064][T24110] netlink: 72 bytes leftover after parsing attributes in process `syz.4.4370'. [ 678.868433][ T127] wlan1: Trigger new scan to find an IBSS to join [ 679.703476][T24146] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4381'. [ 679.731700][T24146] batadv0: entered promiscuous mode [ 679.732084][T24146] macvlan2: entered promiscuous mode [ 679.735115][T24146] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 679.736616][T24146] batadv0: left promiscuous mode [ 679.883178][T24153] netlink: 'syz.5.4383': attribute type 2 has an invalid length. [ 679.886336][T24153] netlink: 'syz.5.4383': attribute type 2 has an invalid length. [ 679.886391][T24153] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4383'. [ 680.290058][T24162] lo speed is unknown, defaulting to 1000 [ 680.402852][T24171] netlink: 'syz.4.4390': attribute type 1 has an invalid length. [ 680.868543][T17715] wlan1: Creating new IBSS network, BSSID b6:cb:f0:b0:91:1c [ 681.555288][T24199] __nla_validate_parse: 3 callbacks suppressed [ 681.555309][T24199] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4396'. [ 681.618452][ T127] net_ratelimit: 532 callbacks suppressed [ 681.618493][ T127] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 681.796253][T24204] tipc: Enabling of bearer rejected, already enabled [ 681.809978][T19050] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 681.920540][ T7375] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 682.081905][T24213] syzkaller0: entered promiscuous mode [ 682.081930][T24213] syzkaller0: entered allmulticast mode [ 682.246408][T24224] openvswitch: netlink: Missing key (keys=c0, expected=480) [ 682.408445][T17715] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 682.553841][T24228] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4406'. [ 682.597820][T24221] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 682.786194][T24244] netlink: 'syz.2.4407': attribute type 1 has an invalid length. [ 682.786234][T24244] netlink: 244 bytes leftover after parsing attributes in process `syz.2.4407'. [ 682.937501][T24249] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4408'. [ 682.956064][T24228] 8021q: adding VLAN 0 to HW filter on device bond1 [ 682.966904][T24248] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4408'. [ 682.968296][ T39] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 683.079417][ T7375] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 683.191940][ T127] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 683.300877][ T127] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 683.501077][T24260] tipc: Enabling of bearer rejected, failed to enable media [ 683.780887][T24268] veth0_to_bridge: entered promiscuous mode [ 683.781109][T24268] macvtap1: entered allmulticast mode [ 683.781123][T24268] veth0_to_bridge: entered allmulticast mode [ 683.814697][T24268] veth0_to_bridge: left allmulticast mode [ 683.814730][T24268] veth0_to_bridge: left promiscuous mode [ 684.122718][T24278] veth0_to_bridge: entered promiscuous mode [ 684.122979][T24278] macvtap0: entered allmulticast mode [ 684.122993][T24278] veth0_to_bridge: entered allmulticast mode [ 684.156094][T24291] netlink: 'syz.1.4420': attribute type 1 has an invalid length. [ 684.203336][T24278] veth0_to_bridge: left allmulticast mode [ 684.203363][T24278] veth0_to_bridge: left promiscuous mode [ 684.284454][T24279] bridge_slave_0: left allmulticast mode [ 684.284478][T24279] bridge_slave_0: left promiscuous mode [ 684.284718][T24279] bridge0: port 1(bridge_slave_0) entered disabled state [ 684.325459][T24281] bridge_slave_1: left allmulticast mode [ 684.325484][T24281] bridge_slave_1: left promiscuous mode [ 684.325836][T24281] bridge0: port 2(bridge_slave_1) entered disabled state [ 684.370536][T24298] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4420'. [ 684.562559][T24303] netlink: 'syz.2.4422': attribute type 16 has an invalid length. [ 684.649004][T24295] bond5: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 684.654394][T24306] netlink: 52 bytes leftover after parsing attributes in process `syz.5.4423'. [ 684.710685][T24296] veth5: entered promiscuous mode [ 684.714014][T24296] bond5: (slave veth5): Enslaving as a backup interface with a down link [ 684.715406][T24298] 8021q: adding VLAN 0 to HW filter on device bond5 [ 685.053430][T24326] syzkaller0: entered promiscuous mode [ 685.053452][T24326] syzkaller0: entered allmulticast mode [ 685.098848][T24319] pim6reg: entered allmulticast mode [ 685.721765][T24349] bridge5: entered allmulticast mode [ 685.765748][T24349] netlink: 'syz.2.4433': attribute type 178 has an invalid length. [ 685.767843][T24350] netlink: 'syz.2.4433': attribute type 178 has an invalid length. [ 686.086907][T24354] tipc: Enabling of bearer rejected, failed to enable media [ 686.436224][T24363] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4436'. [ 686.597319][T24363] batadv0: entered promiscuous mode [ 686.597752][T24363] macvlan2: entered promiscuous mode [ 686.626164][T24363] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 686.635970][T24363] batadv0: left promiscuous mode [ 686.718185][ T39] net_ratelimit: 16 callbacks suppressed [ 686.718205][ T39] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 686.832021][T19053] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 686.896043][T24388] netlink: 'syz.1.4442': attribute type 1 has an invalid length. [ 686.994652][T24391] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4442'. [ 687.076227][T24396] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4443'. [ 687.099374][T24391] 8021q: adding VLAN 0 to HW filter on device bond6 [ 687.101021][T24393] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 687.169212][T19053] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 687.237523][T24396] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4443'. [ 687.272950][T24400] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4444'. [ 687.391115][T24388] 8021q: adding VLAN 0 to HW filter on device bond6 [ 687.447288][T24388] bond6: (slave geneve3): making interface the new active one [ 687.483203][T24388] bond6: (slave geneve3): Enslaving as an active interface with an up link [ 687.490181][ T7375] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 687.725323][T24407] tipc: Enabling of bearer rejected, failed to enable media [ 687.760335][ T7375] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 687.760389][ T7375] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 687.760715][ T7375] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 687.760755][ T7375] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 687.868960][ T175] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 687.984829][T19050] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 688.089726][T19050] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 688.200680][ T127] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 688.308522][ T127] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 688.418827][T19050] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 688.727544][T24455] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4454'. [ 690.950199][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 691.326485][T22081] Bluetooth: hci1: Received unexpected HCI Event 0x00 [ 691.327159][T24472] netlink: 100 bytes leftover after parsing attributes in process `syz.0.4456'. [ 691.379301][T24472] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4456'. [ 691.512922][T24478] macsec0: entered promiscuous mode [ 691.515972][T24478] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4458'. [ 691.565796][T24478] batadv_slave_1: left promiscuous mode [ 691.623127][T24478] macsec0 (unregistering): left promiscuous mode [ 691.821589][T19053] net_ratelimit: 7 callbacks suppressed [ 691.821611][T19053] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 691.936181][T17715] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 692.042073][T17715] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 692.081470][T24493] tipc: Enabling of bearer rejected, failed to enable media [ 692.148856][ T39] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 692.151961][T24468] udevd[24468]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 692.184341][T24471] udevd[24471]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 692.242251][T24496] ip_tables: iptables: counters copy to user failed while replacing table [ 692.259592][T19050] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 692.410276][ T39] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 692.518391][ T39] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 692.629566][T19050] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 692.738267][ T7375] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 693.273130][T24541] netlink: 'syz.4.4475': attribute type 4 has an invalid length. [ 693.275440][T24539] netlink: 'syz.4.4475': attribute type 4 has an invalid length. [ 693.277780][T24543] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4474'. [ 695.413724][T24515] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 695.633859][T24549] tipc: Enabling of bearer rejected, failed to enable media [ 695.814000][T24555] netlink: 'syz.4.4480': attribute type 1 has an invalid length. [ 695.833539][T24553] netlink: 'syz.4.4480': attribute type 1 has an invalid length. [ 695.845164][T24553] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4480'. [ 695.981336][T24561] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4481'. [ 696.009623][T24558] netlink: 'syz.2.4482': attribute type 16 has an invalid length. [ 696.009724][T24558] netlink: 'syz.2.4482': attribute type 17 has an invalid length. [ 696.076704][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 696.156360][T24558] bridge5: left allmulticast mode [ 696.774278][T24575] netlink: 'syz.2.4487': attribute type 61 has an invalid length. [ 696.774304][T24575] netlink: 'syz.2.4487': attribute type 105 has an invalid length. [ 696.908228][ T127] net_ratelimit: 34 callbacks suppressed [ 696.908275][ T127] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 697.018523][ T127] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 697.128375][T19050] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 697.223952][T24583] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4490'. [ 697.223981][T24583] netlink: 14 bytes leftover after parsing attributes in process `syz.5.4490'. [ 697.224824][T24583] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4490'. [ 697.246747][ T127] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 697.356849][T19053] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 697.460795][ T39] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 697.460949][T24596] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4495'. [ 697.492717][T24596] o鰏-system: entered promiscuous mode [ 697.553270][T24598] syzkaller0: left promiscuous mode [ 697.572603][T19053] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 697.682947][ T7375] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 697.788390][ T127] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 697.900784][ T7375] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 698.032515][T24608] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4499'. [ 698.037488][T24614] netlink: 128 bytes leftover after parsing attributes in process `syz.2.4501'. [ 699.153935][T24659] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4514'. [ 699.494406][T24681] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4520'. [ 699.500473][T24681] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4520'. [ 699.644197][T24691] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4523'. [ 699.690137][T24688] xt_recent: hitcount (268435462) is larger than allowed maximum (65535) [ 700.015226][T24709] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4526'. [ 702.980862][T19053] net_ratelimit: 21 callbacks suppressed [ 702.980885][T19053] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 703.088367][T17715] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 703.258164][T19049] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 703.363531][T24739] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4537'. [ 703.371241][ T127] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 703.479157][ T7375] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 703.531981][T24737] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4538'. [ 703.688251][ T127] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 703.768598][T24756] syzkaller0: entered promiscuous mode [ 703.768624][T24756] syzkaller0: entered allmulticast mode [ 703.772250][T24756] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 703.848455][T17715] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 704.028643][T19050] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 704.071037][T24763] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4548'. [ 704.138793][T19049] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 704.248200][T19049] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 704.297450][T24772] syzkaller0: left allmulticast mode [ 704.955419][T24802] netlink: 'syz.1.4560': attribute type 83 has an invalid length. [ 705.160196][T24809] Bluetooth: hci0: invalid length 0, exp 2 for type 23 [ 705.250644][T24814] xt_TCPMSS: Only works on TCP SYN packets [ 705.278499][T24815] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4562'. [ 705.404059][T24817] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4563'. [ 705.466594][T24820] netlink: 'syz.4.4566': attribute type 1 has an invalid length. [ 705.536523][T24820] bond6: entered promiscuous mode [ 705.537441][T24820] 8021q: adding VLAN 0 to HW filter on device bond6 [ 705.554731][T22081] Bluetooth: hci1: connection err: -111 [ 705.566974][T24823] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4564'. [ 705.581879][T24826] netlink: 'syz.1.4565': attribute type 2 has an invalid length. [ 705.607856][T24826] : entered promiscuous mode [ 705.813564][T24831] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4567'. [ 706.383932][T24846] bond6: (slave bridge3): making interface the new active one [ 706.383962][T24846] bridge3: entered promiscuous mode [ 706.404483][T24846] bond6: (slave bridge3): Enslaving as an active interface with an up link [ 706.731942][T24855] bond7: entered allmulticast mode [ 706.762772][T24864] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4577'. [ 706.763263][T24864] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4577'. [ 706.777700][T24864] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4577'. [ 706.779105][T24864] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4577'. [ 706.779464][T24864] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4577'. [ 706.783006][T24864] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4577'. [ 706.927237][T24855] bond7: (slave wireguard0): The slave device specified does not support setting the MAC address [ 706.929357][T24855] bond7: (slave wireguard0): Error -95 calling set_mac_address [ 706.989436][T24875] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 707.059865][T24868] 8021q: adding VLAN 0 to HW filter on device bond8 [ 707.122301][T24885] netlink: 'syz.5.4579': attribute type 1 has an invalid length. [ 707.167827][T24875] macvlan0: entered promiscuous mode [ 707.169378][T24875] macvlan0: entered allmulticast mode [ 707.708596][T24909] netlink: 'syz.0.4589': attribute type 2 has an invalid length. [ 708.019566][T19049] net_ratelimit: 26 callbacks suppressed [ 708.019589][T19049] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 708.128418][ T39] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 708.239410][T19050] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 708.348676][ T39] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 708.456979][T24932] netlink: 'syz.5.4597': attribute type 5 has an invalid length. [ 708.481485][T19049] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 708.589882][T19049] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 708.700202][ T39] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 708.808783][ T39] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 708.918837][ T39] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 709.031357][T19049] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 709.214709][T24963] tipc: Enabling of bearer rejected, already enabled [ 709.439140][T17715] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 709.439444][T17715] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 709.439531][T17715] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 709.439597][T17715] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 710.514567][T25026] __nla_validate_parse: 18 callbacks suppressed [ 710.514613][T25026] netlink: 47 bytes leftover after parsing attributes in process `syz.1.4620'. [ 710.514627][T25026] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4620'. [ 710.551821][ T10] dummy0: entered promiscuous mode [ 710.552275][T25026] macvtap1: entered allmulticast mode [ 710.552294][T25026] dummy0: entered allmulticast mode [ 710.555634][T25026] dummy0: left allmulticast mode [ 710.600088][ T10] dummy0: left promiscuous mode [ 711.286754][T25045] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4626'. [ 712.131871][T25081] netlink: 'syz.4.4631': attribute type 9 has an invalid length. [ 712.818808][T25110] netlink: 'syz.1.4638': attribute type 2 has an invalid length. [ 713.068740][T25121] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4639'. [ 713.188564][ T39] net_ratelimit: 26 callbacks suppressed [ 713.188586][ T39] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 713.298375][T19050] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 713.301391][ T5632] Bluetooth: hci4: link tx timeout [ 713.327444][ T5632] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 713.353397][ T5632] Bluetooth: hci4: link tx timeout [ 713.353435][ T5632] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 713.375842][T25125] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4640'. [ 713.388794][T25125] tipc: Resetting bearer [ 713.509705][T22081] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 713.600799][T25125] tipc: Disabling bearer [ 713.636495][T19050] nci: nci_rf_discover_ntf_packet: unsupported rf_tech_and_mode 0x6c [ 713.665238][T19049] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 713.682167][T25133] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 713.772381][T19049] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 713.852619][T25149] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4647'. [ 713.938414][T19050] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 714.051340][ T39] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 714.159326][ T127] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 714.268314][ T127] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 714.363117][T25191] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4650'. [ 714.379564][ T127] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 714.488482][ T127] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 715.258572][T25229] netlink: 56 bytes leftover after parsing attributes in process `syz.2.4660'. [ 715.443016][T22081] Bluetooth: hci4: command 0x0405 tx timeout [ 715.967010][T25252] tipc: Enabling of bearer rejected, failed to enable media [ 716.241062][T25262] netlink: 124 bytes leftover after parsing attributes in process `syz.0.4667'. [ 716.451002][T25269] netlink: 'syz.0.4669': attribute type 2 has an invalid length. [ 716.451027][T25269] netlink: 'syz.0.4669': attribute type 1 has an invalid length. [ 717.057610][T25300] netlink: 964 bytes leftover after parsing attributes in process `syz.5.4674'. [ 717.085387][T25301] netlink: 112 bytes leftover after parsing attributes in process `syz.1.4673'. [ 717.348791][T25309] netlink: 100 bytes leftover after parsing attributes in process `syz.1.4676'. [ 717.588070][ T5632] Bluetooth: hci4: command 0x0405 tx timeout [ 717.653775][T25330] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4681'. [ 717.814744][T25336] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4681'. [ 717.902652][T25330] 8021q: adding VLAN 0 to HW filter on device bond9 [ 718.222259][ T7375] net_ratelimit: 30 callbacks suppressed [ 718.222281][ T7375] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 718.332308][T19050] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 718.519679][T19049] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 718.580747][T25354] : renamed from vlan0 [ 718.593321][T25348] syzkaller0: entered promiscuous mode [ 718.594723][T25348] syzkaller0: entered allmulticast mode [ 718.664805][T25351] syzkaller0: entered promiscuous mode [ 718.664832][T25351] syzkaller0: entered allmulticast mode [ 718.766612][T25361] netlink: 'syz.4.4687': attribute type 10 has an invalid length. [ 718.874026][T25363] netlink: 'syz.4.4687': attribute type 10 has an invalid length. [ 723.699056][T25361] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 723.703505][T25361] team0: Port device netdevsim1 added [ 723.736221][T25363] team0: Port device netdevsim1 removed [ 723.760698][T25363] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 723.859663][T19052] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 723.869920][T25382] netlink: 132 bytes leftover after parsing attributes in process `syz.5.4694'. [ 723.969838][T19049] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 724.066336][T25396] FAULT_INJECTION: forcing a failure. [ 724.066336][T25396] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 724.066399][T25396] CPU: 1 UID: 0 PID: 25396 Comm: syz.2.4698 Not tainted syzkaller #0 PREEMPT(full) [ 724.066423][T25396] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 724.066435][T25396] Call Trace: [ 724.066444][T25396] [ 724.066452][T25396] dump_stack_lvl+0xe8/0x150 [ 724.066485][T25396] should_fail_ex+0x410/0x560 [ 724.066513][T25396] _copy_to_user+0x31/0xb0 [ 724.066539][T25396] simple_read_from_buffer+0xe1/0x170 [ 724.066570][T25396] proc_fail_nth_read+0x1bb/0x230 [ 724.066589][T25396] ? common_file_perm+0x20e/0x2b0 [ 724.066615][T25396] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 724.066638][T25396] ? rw_verify_area+0x24a/0x4c0 [ 724.066668][T25396] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 724.066687][T25396] vfs_read+0x213/0xa80 [ 724.066719][T25396] ? __pfx___mutex_lock+0x10/0x10 [ 724.066745][T25396] ? __pfx_vfs_read+0x10/0x10 [ 724.066774][T25396] ? __fget_files+0x2a/0x420 [ 724.066804][T25396] ? __fget_files+0x3a2/0x420 [ 724.066829][T25396] ? __fget_files+0x2a/0x420 [ 724.066863][T25396] ksys_read+0x150/0x270 [ 724.066893][T25396] ? __pfx_ksys_read+0x10/0x10 [ 724.066932][T25396] do_syscall_64+0x166/0x520 [ 724.066956][T25396] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 724.066976][T25396] ? clear_bhb_loop+0x70/0xc0 [ 724.067000][T25396] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 724.067019][T25396] RIP: 0033:0x7efe2835e98e [ 724.067037][T25396] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 724.067053][T25396] RSP: 002b:00007efe2920afe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 724.067075][T25396] RAX: ffffffffffffffda RBX: 00007efe2920b6c0 RCX: 00007efe2835e98e [ 724.067089][T25396] RDX: 000000000000000f RSI: 00007efe2920b0a0 RDI: 0000000000000005 [ 724.067102][T25396] RBP: 00007efe2920b090 R08: 0000000000000000 R09: 0000000000000000 [ 724.067115][T25396] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 724.067126][T25396] R13: 00007efe28626038 R14: 00007efe28625fa0 R15: 00007ffc82b51f98 [ 724.067160][T25396] [ 724.089923][T19051] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 724.189993][ T7370] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 724.363732][T25403] TC_ACT_REPEAT abuse ? [ 724.414074][T25401] openvswitch: netlink: Message has 8 unknown bytes. [ 724.510682][T25399] vlan0: left promiscuous mode [ 724.524937][T25412] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4700'. [ 724.524992][T25412] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4700'. [ 724.553253][T25399] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 724.554408][T25399] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 724.582017][T25399] 8021q: adding VLAN 0 to HW filter on device bond2 [ 724.586773][T25399] ip6gre1: left promiscuous mode [ 724.588473][T19052] bond1: (slave ip6gretap1): link status up again after 0 ms [ 724.608330][T19052] bond1: (slave ip6gretap1): link status up again after 0 ms [ 724.613084][T25399] 8021q: adding VLAN 0 to HW filter on device bond4 [ 724.624977][T25399] bond5: left promiscuous mode [ 724.625000][T25399] bridge0: left promiscuous mode [ 724.630120][ T7370] bond1: (slave ip6gretap1): link status up again after 0 ms [ 724.647852][T25399] bond6: left promiscuous mode [ 724.650083][ T7370] bond1: (slave ip6gretap1): link status up again after 0 ms [ 724.661715][T25399] bridge3: left promiscuous mode [ 724.741240][ T7370] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 724.741335][ T7370] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 724.741403][ T7370] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 724.741468][ T7370] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 724.756582][T25391] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 724.965029][T25419] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4703'. [ 725.406008][T25434] sch_tbf: peakrate 7 is lower than or equals to rate 7 ! [ 725.510584][T25436] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4708'. [ 725.910176][ T127] wlan1: Trigger new scan to find an IBSS to join [ 726.133402][T25460] netlink: 'syz.1.4715': attribute type 21 has an invalid length. [ 726.133426][T25460] netlink: 128 bytes leftover after parsing attributes in process `syz.1.4715'. [ 726.136783][T25461] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4715'. [ 726.171303][T25460] netlink: 'syz.1.4715': attribute type 4 has an invalid length. [ 726.171327][T25460] netlink: 3 bytes leftover after parsing attributes in process `syz.1.4715'. [ 726.176266][T25461] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4715'. [ 726.637583][T25464] syzkaller0: entered promiscuous mode [ 726.637610][T25464] syzkaller0: entered allmulticast mode [ 727.045144][T25503] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4721'. [ 729.746753][T25484] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 729.922568][T19052] wlan1: Trigger new scan to find an IBSS to join [ 731.600085][T19049] net_ratelimit: 18 callbacks suppressed [ 731.600108][T19049] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 731.710847][T19049] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 731.906568][ T127] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 731.913675][ T127] wlan1: Creating new IBSS network, BSSID 82:1f:9d:63:ae:fa [ 732.010259][T19049] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 732.073699][T25526] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4727'. [ 732.118651][T19049] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 732.230691][T19051] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 732.233797][T25535] netlink: 9 bytes leftover after parsing attributes in process `syz.2.4730'. [ 732.237556][T25536] netlink: 'syz.1.4731': attribute type 2 has an invalid length. [ 732.269841][T25535] gretap0: entered promiscuous mode [ 732.276163][T25535] netlink: 5 bytes leftover after parsing attributes in process `syz.2.4730'. [ 732.276284][T25535] 0{X功: renamed from gretap0 [ 732.304721][T25535] 0{X功: left promiscuous mode [ 732.304745][T25535] 0{X功: entered allmulticast mode [ 732.320706][T25535] A link change request failed with some changes committed already. Interface 30{X功 may have been left with an inconsistent configuration, please check. [ 732.340070][ T127] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 732.385505][T25538] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4732'. [ 732.463736][T25540] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4733'. [ 732.472356][T19049] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 732.578603][T19051] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 732.632982][T25543] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4735'. [ 732.633005][T25543] bridge_slave_1: default FDB implementation only supports local addresses [ 732.732544][T25547] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4737'. [ 732.733517][T25544] pimreg9: entered allmulticast mode [ 732.759607][T25549] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 733.272073][T25575] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4746'. [ 734.022648][T25598] Cannot find map_set index 2 as target [ 735.166584][T25637] netlink: 'syz.4.4758': attribute type 10 has an invalid length. [ 735.222669][T25637] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 735.255732][T25637] team0: Port device netdevsim1 added [ 735.272634][T25634] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4759'. [ 735.327449][T25637] netlink: 'syz.4.4758': attribute type 10 has an invalid length. [ 735.330806][T25641] netlink: 'syz.4.4758': attribute type 10 has an invalid length. [ 735.370510][T25637] team0: Port device netdevsim1 removed [ 735.381551][T25637] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 735.460439][T25641] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 735.538851][T25649] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4761'. [ 735.591550][T25642] lo speed is unknown, defaulting to 1000 [ 735.853610][T25663] Bluetooth: hci0: unsupported parameter 5135 [ 735.853642][T25663] Bluetooth: hci0: unsupported parameter 8192 [ 735.853655][T25663] Bluetooth: hci0: unsupported parameter 5135 [ 735.853667][T25663] Bluetooth: hci0: unsupported parameter 8192 [ 736.471252][T25675] batman_adv: batadv0: Adding interface: syzkaller0 [ 736.471289][T25675] batman_adv: batadv0: The MTU of interface syzkaller0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 736.471491][T25675] batman_adv: batadv0: Interface activated: syzkaller0 [ 736.608845][T19051] net_ratelimit: 27 callbacks suppressed [ 736.608869][T19051] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 736.651167][T25675] netlink: 'syz.2.4763': attribute type 1 has an invalid length. [ 736.795739][T25675] bond10: entered promiscuous mode [ 736.796662][T25675] 8021q: adding VLAN 0 to HW filter on device bond10 [ 736.826404][T25692] ip_tables: iptables: counters copy to user failed while replacing table [ 736.835708][T25692] netlink: 'syz.5.4773': attribute type 1 has an invalid length. [ 736.863252][T25683] 8021q: adding VLAN 0 to HW filter on device bond10 [ 736.864873][T25683] bond10: (slave gre1): The slave device specified does not support setting the MAC address [ 736.864917][T25683] bond10: (slave gre1): Setting fail_over_mac to active for active-backup mode [ 736.900820][T25683] bond10: (slave gre1): making interface the new active one [ 736.900843][T25683] gre1: entered promiscuous mode [ 736.903915][T25683] bond10: (slave gre1): Enslaving as an active interface with an up link [ 737.032871][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 737.268864][T25695] bond7: (slave veth7): Enslaving as an active interface with a down link [ 737.325521][T25696] bond7: (slave veth9): Enslaving as an active interface with a down link [ 737.341075][T25674] batman_adv: batadv0: Interface deactivated: syzkaller0 [ 737.369145][T25674] batman_adv: batadv0: Removing interface: syzkaller0 [ 737.550863][T25697] veth11: entered allmulticast mode [ 737.575245][T25697] bond7: (slave veth11): Enslaving as an active interface with a down link [ 737.706058][T25707] geneve5: entered promiscuous mode [ 737.880463][ T7375] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 738.038863][ T7370] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 738.160853][T19049] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 738.268129][T25742] __nla_validate_parse: 1 callbacks suppressed [ 738.268150][T25742] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4786'. [ 738.268273][T25742] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4786'. [ 738.303362][T25742] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4786'. [ 738.333073][T25742] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4786'. [ 738.489596][ T7370] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 738.592102][T25749] netlink: 'syz.5.4788': attribute type 1 has an invalid length. [ 738.601213][ T7375] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 738.603798][T25749] netlink: 15574 bytes leftover after parsing attributes in process `syz.5.4788'. [ 738.711215][ T7370] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 738.822347][T19049] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 738.933194][ T7370] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 739.135695][T25769] FAULT_INJECTION: forcing a failure. [ 739.135695][T25769] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 739.135727][T25769] CPU: 0 UID: 0 PID: 25769 Comm: syz.2.4795 Not tainted syzkaller #0 PREEMPT(full) [ 739.135747][T25769] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 739.135756][T25769] Call Trace: [ 739.135763][T25769] [ 739.135770][T25769] dump_stack_lvl+0xe8/0x150 [ 739.135796][T25769] should_fail_ex+0x410/0x560 [ 739.135818][T25769] _copy_from_user+0x2d/0xb0 [ 739.135838][T25769] ___sys_sendmsg+0x1c6/0x360 [ 739.135859][T25769] ? __lock_acquire+0x747/0x2de0 [ 739.135884][T25769] ? __pfx____sys_sendmsg+0x10/0x10 [ 739.135943][T25769] ? __fget_files+0x2a/0x420 [ 739.135968][T25769] ? __fget_files+0x3a2/0x420 [ 739.136003][T25769] __x64_sys_sendmsg+0x1b1/0x290 [ 739.136029][T25769] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 739.136079][T25769] do_syscall_64+0x166/0x520 [ 739.136101][T25769] ? trace_irq_disable+0x3b/0x140 [ 739.136120][T25769] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 739.136138][T25769] ? clear_bhb_loop+0x70/0xc0 [ 739.136162][T25769] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 739.136181][T25769] RIP: 0033:0x7efe2839e159 [ 739.136199][T25769] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 739.136215][T25769] RSP: 002b:00007efe2920b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 739.136235][T25769] RAX: ffffffffffffffda RBX: 00007efe28625fa0 RCX: 00007efe2839e159 [ 739.136257][T25769] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 739.136269][T25769] RBP: 00007efe2920b090 R08: 0000000000000000 R09: 0000000000000000 [ 739.136281][T25769] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 739.136293][T25769] R13: 00007efe28626038 R14: 00007efe28625fa0 R15: 00007ffc82b51f98 [ 739.136323][T25769] [ 739.646350][T25785] netlink: 2 bytes leftover after parsing attributes in process `syz.2.4799'. [ 740.049721][T25802] netlink: 64 bytes leftover after parsing attributes in process `syz.5.4805'. [ 740.164251][T25810] netlink: 'syz.1.4804': attribute type 8 has an invalid length. [ 740.164274][T25810] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4804'. [ 740.504107][T25821] FAULT_INJECTION: forcing a failure. [ 740.504107][T25821] name failslab, interval 1, probability 0, space 0, times 0 [ 740.504172][T25821] CPU: 1 UID: 0 PID: 25821 Comm: syz.4.4811 Not tainted syzkaller #0 PREEMPT(full) [ 740.504203][T25821] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 740.504215][T25821] Call Trace: [ 740.504223][T25821] [ 740.504232][T25821] dump_stack_lvl+0xe8/0x150 [ 740.504263][T25821] should_fail_ex+0x410/0x560 [ 740.504290][T25821] ? __alloc_skb+0x1db/0x7a0 [ 740.504312][T25821] should_failslab+0xa8/0x100 [ 740.504337][T25821] ? __alloc_skb+0x1db/0x7a0 [ 740.504357][T25821] kmem_cache_alloc_node_noprof+0xa1/0x610 [ 740.504386][T25821] ? __alloc_skb+0x18d/0x7a0 [ 740.504409][T25821] ? __alloc_skb+0x1db/0x7a0 [ 740.504437][T25821] __alloc_skb+0x1db/0x7a0 [ 740.504465][T25821] netlink_sendmsg+0x5d4/0xb40 [ 740.504494][T25821] ? __pfx_netlink_sendmsg+0x10/0x10 [ 740.504521][T25821] ? apparmor_socket_sendmsg+0x98/0x360 [ 740.504545][T25821] ? __pfx_netlink_sendmsg+0x10/0x10 [ 740.504563][T25821] sock_sendmsg_nosec+0x14e/0x190 [ 740.504586][T25821] ____sys_sendmsg+0x54e/0x850 [ 740.504617][T25821] ? __pfx_____sys_sendmsg+0x10/0x10 [ 740.504651][T25821] ? import_iovec+0x73/0xa0 [ 740.504677][T25821] ___sys_sendmsg+0x2a5/0x360 [ 740.504706][T25821] ? __lock_acquire+0x747/0x2de0 [ 740.504730][T25821] ? __pfx____sys_sendmsg+0x10/0x10 [ 740.504790][T25821] ? __fget_files+0x2a/0x420 [ 740.504819][T25821] ? __fget_files+0x3a2/0x420 [ 740.504854][T25821] __x64_sys_sendmsg+0x1b1/0x290 [ 740.504882][T25821] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 740.504929][T25821] do_syscall_64+0x166/0x520 [ 740.504953][T25821] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 740.504972][T25821] ? clear_bhb_loop+0x70/0xc0 [ 740.504996][T25821] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 740.505015][T25821] RIP: 0033:0x7f1651b9e159 [ 740.505032][T25821] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 740.505047][T25821] RSP: 002b:00007f16529e1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 740.505068][T25821] RAX: ffffffffffffffda RBX: 00007f1651e25fa0 RCX: 00007f1651b9e159 [ 740.505082][T25821] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 740.505094][T25821] RBP: 00007f16529e1090 R08: 0000000000000000 R09: 0000000000000000 [ 740.505105][T25821] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 740.505116][T25821] R13: 00007f1651e26038 R14: 00007f1651e25fa0 R15: 00007fffeba32e58 [ 740.505146][T25821] [ 740.864680][T25827] syzkaller0: entered promiscuous mode [ 740.864701][T25827] syzkaller0: entered allmulticast mode [ 740.867479][T25827] netlink: 1 bytes leftover after parsing attributes in process `syz.2.4812'. [ 740.867497][T25827] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4812'. [ 741.198418][T25839] netlink: 'syz.5.4816': attribute type 4 has an invalid length. [ 741.230993][T25838] tipc: Enabling of bearer rejected, failed to enable media [ 741.618641][ T7370] net_ratelimit: 18 callbacks suppressed [ 741.618663][ T7370] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 741.729340][T19049] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 741.841411][T19049] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 741.949847][ T7370] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 742.058457][T19052] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 742.168747][T19049] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 742.290084][ T127] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 742.418598][ T127] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 742.550297][T19049] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 742.670036][T19051] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 743.285505][T25922] netlink: 'syz.1.4839': attribute type 1 has an invalid length. [ 743.286243][T25922] ipt_ECN: cannot use operation on non-tcp rule [ 743.390535][T25932] __nla_validate_parse: 4 callbacks suppressed [ 743.390558][T25932] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4841'. [ 743.467310][T25939] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4841'. [ 743.526251][T25925] tipc: Enabling of bearer rejected, failed to enable media [ 743.716270][ T31] audit: type=1804 audit(1790794246.375:12): pid=25942 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.4842" name="/newroot/369/cgroup.controllers" dev="tmpfs" ino=1904 res=1 errno=0 [ 743.716323][ T31] audit: type=1800 audit(1790794246.375:13): pid=25942 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.4842" name="cgroup.controllers" dev="tmpfs" ino=1904 res=0 errno=0 [ 743.822109][T25953] netlink: 55631 bytes leftover after parsing attributes in process `syz.4.4849'. [ 743.849528][T25954] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4847'. [ 743.892058][T25958] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4847'. [ 744.066292][T25967] netlink: 76 bytes leftover after parsing attributes in process `syz.5.4852'. [ 744.453419][T25988] FAULT_INJECTION: forcing a failure. [ 744.453419][T25988] name failslab, interval 1, probability 0, space 0, times 0 [ 744.453451][T25988] CPU: 0 UID: 0 PID: 25988 Comm: syz.1.4858 Not tainted syzkaller #0 PREEMPT(full) [ 744.453473][T25988] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 744.453485][T25988] Call Trace: [ 744.453492][T25988] [ 744.453502][T25988] dump_stack_lvl+0xe8/0x150 [ 744.453534][T25988] should_fail_ex+0x410/0x560 [ 744.453560][T25988] ? __alloc_skb+0x1db/0x7a0 [ 744.453584][T25988] should_failslab+0xa8/0x100 [ 744.453609][T25988] ? __alloc_skb+0x1db/0x7a0 [ 744.453629][T25988] kmem_cache_alloc_node_noprof+0xa1/0x610 [ 744.453658][T25988] ? __alloc_skb+0x18d/0x7a0 [ 744.453680][T25988] ? __alloc_skb+0x1db/0x7a0 [ 744.453711][T25988] __alloc_skb+0x1db/0x7a0 [ 744.453738][T25988] netlink_ack+0x136/0xb30 [ 744.453764][T25988] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 744.453791][T25988] ? __copy_skb_header+0xa3/0x4a0 [ 744.453827][T25988] netlink_rcv_skb+0x2a4/0x4a0 [ 744.453856][T25988] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 744.453881][T25988] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 744.453923][T25988] ? netlink_deliver_tap+0x2e/0x1b0 [ 744.453951][T25988] ? netlink_deliver_tap+0x2e/0x1b0 [ 744.453985][T25988] netlink_unicast+0x7bd/0x940 [ 744.454023][T25988] netlink_sendmsg+0x813/0xb40 [ 744.454051][T25988] ? __pfx_netlink_sendmsg+0x10/0x10 [ 744.454078][T25988] ? apparmor_socket_sendmsg+0x98/0x360 [ 744.454100][T25988] ? __pfx_netlink_sendmsg+0x10/0x10 [ 744.454118][T25988] sock_sendmsg_nosec+0x14e/0x190 [ 744.454140][T25988] ____sys_sendmsg+0x54e/0x850 [ 744.454171][T25988] ? __pfx_____sys_sendmsg+0x10/0x10 [ 744.454207][T25988] ? import_iovec+0x73/0xa0 [ 744.454235][T25988] ___sys_sendmsg+0x2a5/0x360 [ 744.454259][T25988] ? __lock_acquire+0x747/0x2de0 [ 744.454284][T25988] ? __pfx____sys_sendmsg+0x10/0x10 [ 744.454353][T25988] ? __fget_files+0x2a/0x420 [ 744.454378][T25988] ? __fget_files+0x3a2/0x420 [ 744.454414][T25988] __x64_sys_sendmsg+0x1b1/0x290 [ 744.454442][T25988] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 744.454489][T25988] do_syscall_64+0x166/0x520 [ 744.454513][T25988] ? trace_irq_disable+0x3b/0x140 [ 744.454532][T25988] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 744.454551][T25988] ? clear_bhb_loop+0x70/0xc0 [ 744.454573][T25988] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 744.454591][T25988] RIP: 0033:0x7f4134b9e159 [ 744.454607][T25988] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 744.454622][T25988] RSP: 002b:00007f4135abd028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 744.454643][T25988] RAX: ffffffffffffffda RBX: 00007f4134e25fa0 RCX: 00007f4134b9e159 [ 744.454657][T25988] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 744.454681][T25988] RBP: 00007f4135abd090 R08: 0000000000000000 R09: 0000000000000000 [ 744.454693][T25988] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 744.454704][T25988] R13: 00007f4134e26038 R14: 00007f4134e25fa0 R15: 00007ffc9483ca08 [ 744.454734][T25988] [ 744.482026][T25986] netlink: 10652 bytes leftover after parsing attributes in process `syz.4.4854'. [ 744.482062][T25986] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4854'. [ 744.539146][T25985] netlink: 10652 bytes leftover after parsing attributes in process `syz.4.4854'. [ 744.539184][T25985] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4854'. [ 745.625006][T26028] tipc: Enabling of bearer rejected, failed to enable media [ 746.688202][ T127] net_ratelimit: 32 callbacks suppressed [ 746.688240][ T127] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 746.798267][T19049] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 746.908246][ T127] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 747.019272][ T127] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 747.128377][T19052] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 747.238295][ T127] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 748.069502][ T7375] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 748.178278][ T7370] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 748.241708][T26096] tipc: Resetting bearer [ 748.250173][ T6882] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 748.343350][T26096] veth0_to_batadv: entered promiscuous mode [ 748.343374][T26096] veth0_to_batadv: entered allmulticast mode [ 748.349716][ T7370] bond5: (slave ip6gretap1): link status up again after 0 ms [ 748.359598][T25294] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 748.372159][ T7370] bond5: (slave ip6gretap1): link status up again after 0 ms [ 748.407065][T26096] 8021q: adding VLAN 0 to HW filter on device bond7 [ 748.453954][ T7375] bond5: (slave veth5): link status definitely up, 10000 Mbps full duplex [ 748.454335][ T7375] bond5: active interface up! [ 748.638807][ T6881] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 748.868980][T19049] wlan1: Trigger new scan to find an IBSS to join [ 749.349732][T25294] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 749.777715][T26071] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 749.789983][T26075] tipc: Enabling of bearer rejected, failed to enable media [ 750.333225][T26134] __nla_validate_parse: 5 callbacks suppressed [ 750.333245][T26134] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4892'. [ 750.422617][T26134] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4892'. [ 750.514265][T26141] netlink: 'syz.2.4896': attribute type 1 has an invalid length. [ 750.620484][T26141] 8021q: adding VLAN 0 to HW filter on device bond11 [ 750.688315][T26143] bond11: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 750.890199][T26149] tipc: Enabling of bearer rejected, failed to enable media [ 750.995067][T26155] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 751.734616][T26176] net_ratelimit: 58 callbacks suppressed [ 751.734638][T26176] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 751.747565][ T7375] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 751.762147][ T7375] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 751.807014][T26166] syzkaller1: entered promiscuous mode [ 751.807038][T26166] syzkaller1: entered allmulticast mode [ 751.908336][T19051] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 751.908433][T19051] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 752.018699][ T127] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 752.018794][ T127] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 752.067168][T26177] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4907'. [ 752.067259][T26177] netlink: 'syz.4.4907': attribute type 10 has an invalid length. [ 752.067293][T26177] netlink: 'syz.4.4907': attribute type 5 has an invalid length. [ 752.067323][T26177] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4907'. [ 752.152624][T26177] geneve3: entered promiscuous mode [ 752.152684][T26177] geneve3: entered allmulticast mode [ 752.181667][ T127] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 36943 - 0 [ 752.181719][ T127] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 752.181757][ T127] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 752.181798][ T127] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 36943 - 0 [ 752.181831][ T127] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 36943 - 0 [ 752.181862][ T127] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 36943 - 0 [ 752.290078][ T127] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 752.343465][T26195] tipc: Enabling of bearer rejected, failed to enable media [ 752.574125][T26202] syzkaller0: entered promiscuous mode [ 752.574146][T26202] syzkaller0: entered allmulticast mode [ 752.602118][T26203] tipc: Enabled bearer , priority 0 [ 752.639990][T26207] tipc: Enabling of bearer rejected, already enabled [ 752.653739][T26202] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4912'. [ 752.654054][T26203] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4912'. [ 752.684906][T26201] tipc: Resetting bearer [ 752.836345][T26201] tipc: Disabling bearer [ 753.096973][T26233] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4920'. [ 753.096996][T26233] bridge_slave_1: default FDB implementation only supports local addresses [ 753.703583][T26254] tipc: Enabling of bearer rejected, failed to enable media [ 753.914729][T26259] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4926'. [ 754.637758][T26291] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4933'. [ 754.637782][T26291] bridge_slave_1: default FDB implementation only supports local addresses [ 754.734492][T26293] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4932'. [ 755.043206][T26295] tipc: Enabling of bearer rejected, failed to enable media [ 755.436536][T26306] netlink: 'syz.0.4935': attribute type 1 has an invalid length. [ 755.456935][T26299] netlink: 56 bytes leftover after parsing attributes in process `syz.0.4935'. [ 756.542266][T26342] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4948'. [ 756.835147][T26348] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4949'. [ 758.518619][ T7370] net_ratelimit: 64 callbacks suppressed [ 758.518641][ T7370] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 758.519577][ T7370] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 758.648665][T19052] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 758.650475][T19052] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 758.663630][T26369] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4952'. [ 758.758693][T17715] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 758.758740][T17715] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 758.868841][T19052] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 758.868918][T19052] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 758.909990][T26378] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4956'. [ 758.910016][T26378] batman_adv: batadv0: Removing interface: macvtap1 [ 759.018437][T17715] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 759.018486][T17715] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 759.549048][T26409] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4964'. [ 759.910608][T26417] netlink: 72 bytes leftover after parsing attributes in process `syz.1.4967'. [ 759.976211][T26421] syzkaller0: entered promiscuous mode [ 759.976232][T26421] syzkaller0: entered allmulticast mode [ 759.987690][T26422] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4968'. [ 760.013316][T26424] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4970'. [ 760.015000][T26422] ip6gre2: entered promiscuous mode [ 760.015020][T26422] ip6gre2: entered allmulticast mode [ 760.123897][T19052] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 760.124566][T19052] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 760.160407][T25283] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 760.219031][T26436] FAULT_INJECTION: forcing a failure. [ 760.219031][T26436] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 760.219078][T26436] CPU: 1 UID: 0 PID: 26436 Comm: syz.4.4973 Not tainted syzkaller #0 PREEMPT(full) [ 760.219100][T26436] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 760.219110][T26436] Call Trace: [ 760.219117][T26436] [ 760.219125][T26436] dump_stack_lvl+0xe8/0x150 [ 760.219154][T26436] should_fail_ex+0x410/0x560 [ 760.219179][T26436] _copy_from_user+0x2d/0xb0 [ 760.219199][T26436] ___sys_sendmsg+0x1c6/0x360 [ 760.219219][T26436] ? __lock_acquire+0x747/0x2de0 [ 760.219239][T26436] ? __pfx____sys_sendmsg+0x10/0x10 [ 760.219292][T26436] ? __fget_files+0x2a/0x420 [ 760.219314][T26436] ? __fget_files+0x3a2/0x420 [ 760.219350][T26436] __x64_sys_sendmsg+0x1b1/0x290 [ 760.219378][T26436] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 760.219426][T26436] do_syscall_64+0x166/0x520 [ 760.219449][T26436] ? trace_irq_disable+0x3b/0x140 [ 760.219468][T26436] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 760.219487][T26436] ? clear_bhb_loop+0x70/0xc0 [ 760.219511][T26436] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 760.219529][T26436] RIP: 0033:0x7f1651b9e159 [ 760.219547][T26436] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 760.219603][T26436] RSP: 002b:00007f16529e1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 760.219624][T26436] RAX: ffffffffffffffda RBX: 00007f1651e25fa0 RCX: 00007f1651b9e159 [ 760.219638][T26436] RDX: 00000000000088c0 RSI: 00002000000002c0 RDI: 0000000000000003 [ 760.219651][T26436] RBP: 00007f16529e1090 R08: 0000000000000000 R09: 0000000000000000 [ 760.219740][T26436] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 760.219753][T26436] R13: 00007f1651e26038 R14: 00007f1651e25fa0 R15: 00007fffeba32e58 [ 760.219785][T26436] [ 760.274965][T26438] IPVS: length: 106 != 24 [ 760.389232][T25284] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 760.617812][T26448] netlink: 1004 bytes leftover after parsing attributes in process `syz.0.4979'. [ 760.623558][T26446] nbd5: detected capacity change from 0 to 63 [ 760.641299][T26446] syzkaller1: entered promiscuous mode [ 760.641321][T26446] syzkaller1: entered allmulticast mode [ 760.664080][ T5632] block nbd5: Receive control failed (result -104) [ 760.739058][T25284] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 760.746708][T26451] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4979'. [ 761.480372][T26470] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4982'. [ 761.558185][T19049] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 761.570690][T19051] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 761.570742][T19051] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 761.570777][T19051] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 761.574131][T26470] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4982'. [ 761.741464][T26453] xt_policy: output policy not valid in PREROUTING and INPUT [ 761.791341][T26481] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4985'. [ 761.797818][T26481] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4985'. [ 761.819855][T26481] bond_slave_0: entered promiscuous mode [ 761.819899][T26481] bond_slave_0: entered allmulticast mode [ 761.880531][T26483] bond12 (unregistering): Released all slaves [ 762.144941][ T127] bond2: (slave veth0_to_bond): link status definitely down, disabling slave [ 762.190715][ T127] bond2: now running without any active interface! [ 762.405439][T26507] netlink: 'syz.2.4995': attribute type 16 has an invalid length. [ 762.405460][T26507] netlink: 'syz.2.4995': attribute type 17 has an invalid length. [ 762.474554][T26507] 0{X功: left allmulticast mode [ 762.516504][T26513] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4995'. [ 762.682529][T26507] 8021q: adding VLAN 0 to HW filter on device bond0 [ 762.692600][T26507] 8021q: adding VLAN 0 to HW filter on device team0 [ 762.830888][T26507] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 762.830955][T26507] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 762.877626][T26507] veth1_macvtap: left promiscuous mode [ 762.886728][T26507] veth0_macvtap: left promiscuous mode [ 762.894846][T26507] veth0_macvtap: entered promiscuous mode [ 762.895989][T26507] veth1_macvtap: entered promiscuous mode [ 762.896311][T26519] xt_CT: No such helper "snmp_trap" [ 762.993363][T26507] 8021q: adding VLAN 0 to HW filter on device bond1 [ 762.995261][T26507] 8021q: adding VLAN 0 to HW filter on device bond3 [ 763.002273][T26507] mac80211_hwsim hwsim46 wlan1: entered promiscuous mode [ 763.008318][T26507] 8021q: adding VLAN 0 to HW filter on device bond2 [ 763.047631][T26507] 8021q: adding VLAN 0 to HW filter on device bond4 [ 763.069491][T26507] 8021q: adding VLAN 0 to HW filter on device bond5 [ 763.081217][T26507] 8021q: adding VLAN 0 to HW filter on device bond6 [ 763.083256][T26507] 8021q: adding VLAN 0 to HW filter on device bond7 [ 763.089683][T26507] bond8: entered allmulticast mode [ 763.089723][T26507] bond8: entered promiscuous mode [ 763.090102][T26507] macvlan0: left promiscuous mode [ 763.090115][T26507] bond8: left promiscuous mode [ 763.090290][T26507] macvlan0: left allmulticast mode [ 763.090301][T26507] bond8: left allmulticast mode [ 763.090779][T26507] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 763.094538][T26507] 8021q: adding VLAN 0 to HW filter on device eth0 [ 763.097669][T26507] 8021q: adding VLAN 0 to HW filter on device eth1 [ 763.101597][T26507] 8021q: adding VLAN 0 to HW filter on device eth2 [ 763.104740][T26507] 8021q: adding VLAN 0 to HW filter on device eth3 [ 763.105860][T26507] bond10: left promiscuous mode [ 763.105897][T26507] gre1: left promiscuous mode [ 763.336464][ T5632] block nbd2: Receive control failed (result -32) [ 763.359320][T17715] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 763.359538][T17715] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 763.365900][T17715] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 763.366141][T17715] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 763.457048][T25283] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 763.459427][T17715] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 763.459469][T17715] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 763.459634][T17715] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 763.459665][T17715] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 763.497122][T26543] netlink: 'syz.2.5003': attribute type 1 has an invalid length. [ 763.744838][T26543] 8021q: adding VLAN 0 to HW filter on device bond12 [ 763.806538][T26558] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5003'. [ 764.127106][T26538] ovs-s!: entered promiscuous mode [ 764.132038][T19049] net_ratelimit: 42 callbacks suppressed [ 764.132067][T19049] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 764.133225][T19049] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 764.311986][T26543] bond12: (slave bridge6): making interface the new active one [ 764.341019][T26543] bond12: (slave bridge6): Enslaving as an active interface with an up link [ 764.472143][T19049] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 764.472205][T19049] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 764.582694][T17715] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 764.659630][ T7375] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 764.925003][T26603] netlink: 'syz.1.5011': attribute type 1 has an invalid length. [ 764.979622][T26604] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5011'. [ 765.032935][T26605] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5011'. [ 765.095474][T26606] netlink: 'syz.1.5011': attribute type 1 has an invalid length. [ 765.154076][T26580] syzkaller1: entered promiscuous mode [ 765.154100][T26580] syzkaller1: entered allmulticast mode [ 765.358724][ T127] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 765.358777][ T127] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 765.784316][T26618] 8021q: adding VLAN 0 to HW filter on device bond8 [ 766.016402][T26634] FAULT_INJECTION: forcing a failure. [ 766.016402][T26634] name failslab, interval 1, probability 0, space 0, times 0 [ 766.016442][T26634] CPU: 1 UID: 0 PID: 26634 Comm: syz.1.5017 Not tainted syzkaller #0 PREEMPT(full) [ 766.016455][T26634] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 766.016461][T26634] Call Trace: [ 766.016466][T26634] [ 766.016471][T26634] dump_stack_lvl+0xe8/0x150 [ 766.016492][T26634] should_fail_ex+0x410/0x560 [ 766.016509][T26634] should_failslab+0xa8/0x100 [ 766.016522][T26634] ? skb_clone+0x212/0x3a0 [ 766.016537][T26634] kmem_cache_alloc_noprof+0xa1/0x600 [ 766.016554][T26634] ? skb_clone+0x212/0x3a0 [ 766.016571][T26634] skb_clone+0x212/0x3a0 [ 766.016587][T26634] __netlink_deliver_tap+0x355/0x6e0 [ 766.016609][T26634] ? netlink_deliver_tap+0x2e/0x1b0 [ 766.016626][T26634] netlink_deliver_tap+0x19c/0x1b0 [ 766.016642][T26634] netlink_unicast+0x781/0x940 [ 766.016661][T26634] netlink_sendmsg+0x813/0xb40 [ 766.016676][T26634] ? __pfx_netlink_sendmsg+0x10/0x10 [ 766.016691][T26634] ? apparmor_socket_sendmsg+0x98/0x360 [ 766.016705][T26634] ? __pfx_netlink_sendmsg+0x10/0x10 [ 766.016714][T26634] sock_sendmsg_nosec+0x14e/0x190 [ 766.016727][T26634] ____sys_sendmsg+0x54e/0x850 [ 766.016748][T26634] ? __pfx_____sys_sendmsg+0x10/0x10 [ 766.016773][T26634] ? import_iovec+0x73/0xa0 [ 766.016790][T26634] ___sys_sendmsg+0x2a5/0x360 [ 766.016802][T26634] ? __lock_acquire+0x747/0x2de0 [ 766.016816][T26634] ? __pfx____sys_sendmsg+0x10/0x10 [ 766.016849][T26634] ? __fget_files+0x2a/0x420 [ 766.016863][T26634] ? __fget_files+0x3a2/0x420 [ 766.016890][T26634] __x64_sys_sendmsg+0x1b1/0x290 [ 766.016914][T26634] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 766.016953][T26634] do_syscall_64+0x166/0x520 [ 766.016967][T26634] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 766.016978][T26634] ? clear_bhb_loop+0x70/0xc0 [ 766.016991][T26634] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 766.017002][T26634] RIP: 0033:0x7f4134b9e159 [ 766.017013][T26634] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 766.017022][T26634] RSP: 002b:00007f4135abd028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 766.017036][T26634] RAX: ffffffffffffffda RBX: 00007f4134e25fa0 RCX: 00007f4134b9e159 [ 766.017049][T26634] RDX: 00000000000088c0 RSI: 00002000000002c0 RDI: 0000000000000003 [ 766.017061][T26634] RBP: 00007f4135abd090 R08: 0000000000000000 R09: 0000000000000000 [ 766.017071][T26634] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 766.017082][T26634] R13: 00007f4134e26038 R14: 00007f4134e25fa0 R15: 00007ffc9483ca08 [ 766.017110][T26634] [ 766.130172][T19049] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 766.130231][T19049] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 766.404356][T26640] FAULT_INJECTION: forcing a failure. [ 766.404356][T26640] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 766.404415][T26640] CPU: 1 UID: 0 PID: 26640 Comm: syz.5.5020 Not tainted syzkaller #0 PREEMPT(full) [ 766.404437][T26640] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 766.404448][T26640] Call Trace: [ 766.404456][T26640] [ 766.404464][T26640] dump_stack_lvl+0xe8/0x150 [ 766.404496][T26640] should_fail_ex+0x410/0x560 [ 766.404523][T26640] _copy_from_user+0x2d/0xb0 [ 766.404549][T26640] ___sys_sendmsg+0x1c6/0x360 [ 766.404574][T26640] ? __lock_acquire+0x747/0x2de0 [ 766.404598][T26640] ? __pfx____sys_sendmsg+0x10/0x10 [ 766.404659][T26640] ? __fget_files+0x2a/0x420 [ 766.404682][T26640] ? __fget_files+0x3a2/0x420 [ 766.404717][T26640] __x64_sys_sendmsg+0x1b1/0x290 [ 766.404745][T26640] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 766.404791][T26640] do_syscall_64+0x166/0x520 [ 766.404812][T26640] ? trace_irq_disable+0x3b/0x140 [ 766.404831][T26640] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 766.404851][T26640] ? clear_bhb_loop+0x70/0xc0 [ 766.404874][T26640] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 766.404892][T26640] RIP: 0033:0x7fee6679e159 [ 766.404909][T26640] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 766.404924][T26640] RSP: 002b:00007fee6774c028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 766.404944][T26640] RAX: ffffffffffffffda RBX: 00007fee66a25fa0 RCX: 00007fee6679e159 [ 766.404957][T26640] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 766.404968][T26640] RBP: 00007fee6774c090 R08: 0000000000000000 R09: 0000000000000000 [ 766.404978][T26640] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 766.404989][T26640] R13: 00007fee66a26038 R14: 00007fee66a25fa0 R15: 00007ffed40a7628 [ 766.405019][T26640] [ 766.612191][T26642] __nla_validate_parse: 5 callbacks suppressed [ 766.612211][T26642] netlink: 48 bytes leftover after parsing attributes in process `syz.1.5018'. [ 766.612377][T26642] netlink: 48 bytes leftover after parsing attributes in process `syz.1.5018'. [ 766.963568][T26571] infiniband syz0: set active [ 766.963589][T26571] infiniband syz0: added bond_slave_1 [ 766.995574][T26571] [ 766.997954][T26571] ====================================================== [ 767.004980][T26571] WARNING: possible circular locking dependency detected [ 767.012032][T26571] syzkaller #0 Not tainted [ 767.016456][T26571] ------------------------------------------------------ [ 767.023476][T26571] syz.4.5006/26571 is trying to acquire lock: [ 767.029545][T26571] ffffffff8ee904e0 (fs_reclaim){+.+.}-{0:0}, at: __kmalloc_noprof+0xbc/0x720 [ 767.038382][T26571] [ 767.038382][T26571] but task is already holding lock: [ 767.045828][T26571] ffffffff8ebf9100 (wq_pool_mutex){+.+.}-{4:4}, at: __alloc_workqueue+0xa4f/0x1fe0 [ 767.055228][T26571] [ 767.055228][T26571] which lock already depends on the new lock. [ 767.055228][T26571] [ 767.065719][T26571] [ 767.065719][T26571] the existing dependency chain (in reverse order) is: [ 767.074736][T26571] [ 767.074736][T26571] -> #7 (wq_pool_mutex){+.+.}-{4:4}: [ 767.082218][T26571] __mutex_lock+0x19d/0x1550 [ 767.087341][T26571] __alloc_workqueue+0xa4f/0x1fe0 [ 767.092892][T26571] alloc_workqueue_noprof+0xe3/0x210 [ 767.098973][T26571] padata_alloc+0xbe/0x360 [ 767.103915][T26571] pcrypt_init_padata+0x27/0x100 [ 767.109388][T26571] pcrypt_init+0x60/0xc0 [ 767.114190][T26571] do_one_initcall+0x250/0x870 [ 767.119485][T26571] do_initcall_level+0x10a/0x1a0 [ 767.124948][T26571] do_initcalls+0x59/0xa0 [ 767.129820][T26571] kernel_init_freeable+0x29d/0x3e0 [ 767.135936][T26571] kernel_init+0x22/0x1d0 [ 767.140828][T26571] ret_from_fork+0x514/0xb70 [ 767.145945][T26571] ret_from_fork_asm+0x1a/0x30 [ 767.151236][T26571] [ 767.151236][T26571] -> #6 (cpu_hotplug_lock){++++}-{0:0}: [ 767.158974][T26571] cpus_read_lock+0x42/0x160 [ 767.164091][T26571] static_key_slow_inc+0x12/0x30 [ 767.169554][T26571] nbd_genl_reconnect_sock_cb+0x69a/0xbb0 [ 767.175796][T26571] nbd_genl_foreach_sock+0x265/0x450 [ 767.181602][T26571] nbd_genl_reconfigure+0xbbb/0x1040 [ 767.187412][T26571] genl_family_rcv_msg_doit+0x233/0x340 [ 767.193486][T26571] genl_rcv_msg+0x614/0x7a0 [ 767.198523][T26571] netlink_rcv_skb+0x226/0x4a0 [ 767.203821][T26571] genl_rcv+0x28/0x40 [ 767.208327][T26571] netlink_unicast+0x7bd/0x940 [ 767.213786][T26571] netlink_sendmsg+0x813/0xb40 [ 767.219074][T26571] sock_sendmsg_nosec+0x14e/0x190 [ 767.224626][T26571] ____sys_sendmsg+0x54e/0x850 [ 767.229942][T26571] ___sys_sendmsg+0x2a5/0x360 [ 767.235153][T26571] __x64_sys_sendmsg+0x1b1/0x290 [ 767.240627][T26571] do_syscall_64+0x166/0x520 [ 767.245759][T26571] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 767.252195][T26571] [ 767.252195][T26571] -> #5 (&nsock->tx_lock){+.+.}-{4:4}: [ 767.259850][T26571] __mutex_lock+0x19d/0x1550 [ 767.264974][T26571] nbd_queue_rq+0x373/0xff0 [ 767.269999][T26571] blk_mq_dispatch_rq_list+0x499/0x1990 [ 767.276067][T26571] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 767.282921][T26571] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 767.289435][T26571] blk_mq_run_work_fn+0x16c/0x300 [ 767.295018][T26571] process_scheduled_works+0xc3d/0x1630 [ 767.301118][T26571] worker_thread+0xa47/0xfb0 [ 767.306261][T26571] kthread+0x38b/0x480 [ 767.310862][T26571] ret_from_fork+0x514/0xb70 [ 767.316031][T26571] ret_from_fork_asm+0x1a/0x30 [ 767.321435][T26571] [ 767.321435][T26571] -> #4 (&cmd->lock){+.+.}-{4:4}: [ 767.328669][T26571] __mutex_lock+0x19d/0x1550 [ 767.333799][T26571] nbd_queue_rq+0xc1/0xff0 [ 767.338744][T26571] blk_mq_dispatch_rq_list+0x499/0x1990 [ 767.344813][T26571] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 767.351698][T26571] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 767.358208][T26571] blk_mq_run_work_fn+0x16c/0x300 [ 767.363763][T26571] process_scheduled_works+0xc3d/0x1630 [ 767.369838][T26571] worker_thread+0xa47/0xfb0 [ 767.374959][T26571] kthread+0x38b/0x480 [ 767.379548][T26571] ret_from_fork+0x514/0xb70 [ 767.384657][T26571] ret_from_fork_asm+0x1a/0x30 [ 767.389950][T26571] [ 767.389950][T26571] -> #3 (set->srcu){.+.+}-{0:0}: [ 767.397081][T26571] __synchronize_srcu+0xc9/0x2f0 [ 767.402553][T26571] elevator_switch+0x1e8/0x7b0 [ 767.407847][T26571] elevator_change+0x2fa/0x480 [ 767.413157][T26571] elevator_set_default+0x375/0x440 [ 767.418888][T26571] blk_register_queue+0x3f3/0x4e0 [ 767.424449][T26571] __add_disk+0x6b8/0xdb0 [ 767.429308][T26571] add_disk_fwnode+0x100/0x3a0 [ 767.434630][T26571] nbd_dev_add+0x733/0xb60 [ 767.439594][T26571] nbd_init+0x168/0x1f0 [ 767.444276][T26571] do_one_initcall+0x250/0x870 [ 767.449572][T26571] do_initcall_level+0x10a/0x1a0 [ 767.455059][T26571] do_initcalls+0x59/0xa0 [ 767.459940][T26571] kernel_init_freeable+0x29d/0x3e0 [ 767.465662][T26571] kernel_init+0x22/0x1d0 [ 767.470522][T26571] ret_from_fork+0x514/0xb70 [ 767.475637][T26571] ret_from_fork_asm+0x1a/0x30 [ 767.480961][T26571] [ 767.480961][T26571] -> #2 (&q->elevator_lock){+.+.}-{4:4}: [ 767.488780][T26571] __mutex_lock+0x19d/0x1550 [ 767.493907][T26571] elevator_change+0x1af/0x480 [ 767.499195][T26571] elevator_set_none+0xb5/0x140 [ 767.504569][T26571] blk_mq_update_nr_hw_queues+0x5ef/0x19f0 [ 767.510907][T26571] nbd_start_device+0x189/0xb30 [ 767.516381][T26571] nbd_genl_connect+0x167d/0x1cd0 [ 767.521965][T26571] genl_family_rcv_msg_doit+0x233/0x340 [ 767.528038][T26571] genl_rcv_msg+0x614/0x7a0 [ 767.533068][T26571] netlink_rcv_skb+0x226/0x4a0 [ 767.538363][T26571] genl_rcv+0x28/0x40 [ 767.542955][T26571] netlink_unicast+0x7bd/0x940 [ 767.548254][T26571] netlink_sendmsg+0x813/0xb40 [ 767.553545][T26571] sock_sendmsg_nosec+0x14e/0x190 [ 767.559094][T26571] ____sys_sendmsg+0x54e/0x850 [ 767.564384][T26571] ___sys_sendmsg+0x2a5/0x360 [ 767.569600][T26571] __x64_sys_sendmsg+0x1b1/0x290 [ 767.575090][T26571] do_syscall_64+0x166/0x520 [ 767.580216][T26571] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 767.586632][T26571] [ 767.586632][T26571] -> #1 (&q->q_usage_counter(io)#49){++++}-{0:0}: [ 767.595247][T26571] blk_alloc_queue+0x544/0x690 [ 767.600563][T26571] __blk_mq_alloc_disk+0x194/0x390 [ 767.606202][T26571] nbd_dev_add+0x494/0xb60 [ 767.611167][T26571] nbd_init+0x168/0x1f0 [ 767.615850][T26571] do_one_initcall+0x250/0x870 [ 767.621144][T26571] do_initcall_level+0x10a/0x1a0 [ 767.626609][T26571] do_initcalls+0x59/0xa0 [ 767.631460][T26571] kernel_init_freeable+0x29d/0x3e0 [ 767.637190][T26571] kernel_init+0x22/0x1d0 [ 767.642051][T26571] ret_from_fork+0x514/0xb70 [ 767.647166][T26571] ret_from_fork_asm+0x1a/0x30 [ 767.652458][T26571] [ 767.652458][T26571] -> #0 (fs_reclaim){+.+.}-{0:0}: [ 767.659679][T26571] __lock_acquire+0x164c/0x2de0 [ 767.665058][T26571] lock_acquire+0x115/0x350 [ 767.670088][T26571] fs_reclaim_acquire+0x71/0x100 [ 767.675556][T26571] __kmalloc_noprof+0xbc/0x720 [ 767.680845][T26571] apply_wqattrs_prepare+0xee/0xdc0 [ 767.686571][T26571] __alloc_workqueue+0x11be/0x1fe0 [ 767.692205][T26571] alloc_workqueue_noprof+0xe3/0x210 [ 767.698015][T26571] ib_mad_init_device+0x993/0x2150 [ 767.703658][T26571] add_client_context+0x37c/0x7b0 [ 767.709248][T26571] enable_device_and_get+0x19c/0x3e0 [ 767.715065][T26571] ib_register_device+0xdc8/0x1080 [ 767.720708][T26571] rxe_register_device+0x1e3/0x350 [ 767.726373][T26571] rxe_net_add+0x81/0x110 [ 767.731249][T26571] rxe_newlink+0xf4/0x1c0 [ 767.736126][T26571] nldev_newlink+0x5be/0x650 [ 767.741245][T26571] rdma_nl_rcv+0x6ef/0xa40 [ 767.746188][T26571] netlink_unicast+0x7bd/0x940 [ 767.751489][T26571] netlink_sendmsg+0x813/0xb40 [ 767.756790][T26571] sock_sendmsg_nosec+0x14e/0x190 [ 767.762359][T26571] ____sys_sendmsg+0x54e/0x850 [ 767.767766][T26571] ___sys_sendmsg+0x2a5/0x360 [ 767.773262][T26571] __x64_sys_sendmsg+0x1b1/0x290 [ 767.778765][T26571] do_syscall_64+0x166/0x520 [ 767.783893][T26571] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 767.790319][T26571] [ 767.790319][T26571] other info that might help us debug this: [ 767.790319][T26571] [ 767.800555][T26571] Chain exists of: [ 767.800555][T26571] fs_reclaim --> cpu_hotplug_lock --> wq_pool_mutex [ 767.800555][T26571] [ 767.813096][T26571] Possible unsafe locking scenario: [ 767.813096][T26571] [ 767.820559][T26571] CPU0 CPU1 [ 767.826018][T26571] ---- ---- [ 767.831385][T26571] lock(wq_pool_mutex); [ 767.835652][T26571] lock(cpu_hotplug_lock); [ 767.842686][T26571] lock(wq_pool_mutex); [ 767.849459][T26571] lock(fs_reclaim); [ 767.853457][T26571] [ 767.853457][T26571] *** DEADLOCK *** [ 767.853457][T26571] [ 767.861595][T26571] locks held by syz.4.5006/26571: 6, last CPU#0: [ 767.867922][T26571] #0: ffffffff9ad94ac8 (&rdma_nl_types[idx].sem){.+.+}-{4:4}, at: rdma_nl_rcv+0x33d/0xa40 [ 767.877950][T26571] #1: ffffffff8ffb0488 (link_ops_rwsem){++++}-{4:4}, at: nldev_newlink+0x42b/0x650 [ 767.887370][T26571] #2: ffffffff8ffa15a8 (devices_rwsem){++++}-{4:4}, at: enable_device_and_get+0xff/0x3e0 [ 767.897391][T26571] #3: ffffffff8ffa18a8 (clients_rwsem){++++}-{4:4}, at: enable_device_and_get+0x165/0x3e0 [ 767.907421][T26571] #4: ffff888050bf8658 (&device->client_data_rwsem){++++}-{4:4}, at: add_client_context+0x33e/0x7b0 [ 767.918316][T26571] #5: ffffffff8ebf9100 (wq_pool_mutex){+.+.}-{4:4}, at: __alloc_workqueue+0xa4f/0x1fe0 [ 767.928073][T26571] [ 767.928073][T26571] stack backtrace: [ 767.933964][T26571] CPU: 0 UID: 0 PID: 26571 Comm: syz.4.5006 Not tainted syzkaller #0 PREEMPT(full) [ 767.943442][T26571] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 767.953682][T26571] Call Trace: [ 767.956968][T26571] [ 767.959897][T26571] dump_stack_lvl+0xe8/0x150 [ 767.964503][T26571] print_circular_bug+0x2e2/0x300 [ 767.969540][T26571] check_noncircular+0x12f/0x150 [ 767.974502][T26571] __lock_acquire+0x164c/0x2de0 [ 767.979363][T26571] ? check_path+0x21/0x40 [ 767.983700][T26571] ? check_noncircular+0xdb/0x150 [ 767.988740][T26571] ? lockdep_unlock+0x5c/0xd0 [ 767.993419][T26571] lock_acquire+0x115/0x350 [ 767.997933][T26571] ? __kmalloc_noprof+0xbc/0x720 [ 768.002883][T26571] ? pcpu_alloc_noprof+0xde2/0x1900 [ 768.008098][T26571] ? apply_wqattrs_prepare+0xee/0xdc0 [ 768.013484][T26571] fs_reclaim_acquire+0x71/0x100 [ 768.018424][T26571] ? __kmalloc_noprof+0xbc/0x720 [ 768.023363][T26571] __kmalloc_noprof+0xbc/0x720 [ 768.028256][T26571] ? apply_wqattrs_prepare+0xee/0xdc0 [ 768.033652][T26571] ? apply_wqattrs_prepare+0xee/0xdc0 [ 768.039073][T26571] apply_wqattrs_prepare+0xee/0xdc0 [ 768.044300][T26571] ? pcpu_memcg_post_alloc_hook+0x8c/0x630 [ 768.050313][T26571] ? pcpu_alloc_noprof+0x100f/0x1900 [ 768.055632][T26571] ? pcpu_alloc_noprof+0x1036/0x1900 [ 768.060951][T26571] __alloc_workqueue+0x11be/0x1fe0 [ 768.066091][T26571] alloc_workqueue_noprof+0xe3/0x210 [ 768.071395][T26571] ? __pfx_alloc_workqueue_noprof+0x10/0x10 [ 768.077316][T26571] ? __ib_alloc_pd+0x451/0x5c0 [ 768.082102][T26571] ib_mad_init_device+0x993/0x2150 [ 768.087231][T26571] ? __pfx_ib_mad_init_device+0x10/0x10 [ 768.092774][T26571] ? do_raw_spin_unlock+0xf5/0x200 [ 768.097905][T26571] ? _raw_spin_unlock+0x28/0x50 [ 768.102769][T26571] add_client_context+0x37c/0x7b0 [ 768.107898][T26571] ? __pfx_add_client_context+0x10/0x10 [ 768.113624][T26571] ? xa_find+0x25b/0x2b0 [ 768.117878][T26571] enable_device_and_get+0x19c/0x3e0 [ 768.123180][T26571] ? __pfx_enable_device_and_get+0x10/0x10 [ 768.129001][T26571] ? device_add+0x6f6/0xb80 [ 768.133511][T26571] ib_register_device+0xdc8/0x1080 [ 768.138638][T26571] ? __pfx_ib_register_device+0x10/0x10 [ 768.144192][T26571] ? ib_device_set_netdev+0x5c9/0x6d0 [ 768.149671][T26571] rxe_register_device+0x1e3/0x350 [ 768.154801][T26571] rxe_net_add+0x81/0x110 [ 768.159149][T26571] rxe_newlink+0xf4/0x1c0 [ 768.163502][T26571] nldev_newlink+0x5be/0x650 [ 768.168112][T26571] ? __pfx_nldev_newlink+0x10/0x10 [ 768.173278][T26571] ? apparmor_capable+0x126/0x170 [ 768.178324][T26571] ? security_capable+0x7e/0x2c0 [ 768.183284][T26571] ? __pfx_nldev_newlink+0x10/0x10 [ 768.188417][T26571] rdma_nl_rcv+0x6ef/0xa40 [ 768.192853][T26571] ? __pfx_rdma_nl_rcv+0x10/0x10 [ 768.197805][T26571] ? irqentry_exit+0x218/0x910 [ 768.202582][T26571] ? lockdep_hardirqs_on+0x7b/0x110 [ 768.207790][T26571] ? irqentry_exit+0x218/0x910 [ 768.212659][T26571] ? __pfx_rdma_nl_rcv+0x10/0x10 [ 768.217621][T26571] netlink_unicast+0x7bd/0x940 [ 768.222403][T26571] netlink_sendmsg+0x813/0xb40 [ 768.227208][T26571] ? __pfx_netlink_sendmsg+0x10/0x10 [ 768.232498][T26571] ? apparmor_socket_sendmsg+0x98/0x360 [ 768.238057][T26571] ? __pfx_netlink_sendmsg+0x10/0x10 [ 768.243366][T26571] sock_sendmsg_nosec+0x14e/0x190 [ 768.248418][T26571] ____sys_sendmsg+0x54e/0x850 [ 768.253202][T26571] ? __pfx_____sys_sendmsg+0x10/0x10 [ 768.258511][T26571] ? import_iovec+0x73/0xa0 [ 768.263033][T26571] ___sys_sendmsg+0x2a5/0x360 [ 768.267720][T26571] ? __lock_acquire+0x747/0x2de0 [ 768.272657][T26571] ? __pfx____sys_sendmsg+0x10/0x10 [ 768.277874][T26571] ? __fget_files+0x2a/0x420 [ 768.282480][T26571] ? __fget_files+0x3a2/0x420 [ 768.287172][T26571] __x64_sys_sendmsg+0x1b1/0x290 [ 768.292119][T26571] ? net_tx_action+0x5bb/0xc30 [ 768.296888][T26571] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 768.302364][T26571] ? handle_softirqs+0x720/0x860 [ 768.307319][T26571] do_syscall_64+0x166/0x520 [ 768.311920][T26571] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 768.317996][T26571] ? clear_bhb_loop+0x70/0xc0 [ 768.322685][T26571] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 768.328581][T26571] RIP: 0033:0x7f1651b9e159 [ 768.332999][T26571] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 768.352609][T26571] RSP: 002b:00007f16529e1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 768.361037][T26571] RAX: ffffffffffffffda RBX: 00007f1651e25fa0 RCX: 00007f1651b9e159 [ 768.369047][T26571] RDX: 0000000000004000 RSI: 0000200000000240 RDI: 0000000000000004 [ 768.377034][T26571] RBP: 00007f1651c3506b R08: 0000000000000000 R09: 0000000000000000 [ 768.385015][T26571] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 768.392999][T26571] R13: 00007f1651e26038 R14: 00007f1651e25fa0 R15: 00007fffeba32e58 [ 768.400994][T26571] [ 768.408986][ C0] ip6_tnl_xmit_ctl: 6 callbacks suppressed [ 768.409009][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 768.416600][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 768.467318][T26571] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 768.474361][T26571] infiniband syz0: Couldn't open port 1 [ 768.474996][T26571] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 768.475028][T26571] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 768.475064][T26571] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 768.562840][T26571] RDS/IB: syz0: added [ 768.562906][T26571] smc: adding ib device syz0 with port count 1 [ 768.562933][T26571] smc: ib device syz0 port 1 has no pnetid [ 769.228111][T19049] net_ratelimit: 27 callbacks suppressed [ 769.228145][T19049] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 769.228219][ T127] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 769.338063][T19052] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 769.338125][T19052] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 769.448059][T19051] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 769.448124][T19051] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 769.557979][T19049] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 769.558025][T19049] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 769.668757][T19049] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 769.668796][T19049] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 770.948453][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 774.278664][ T7366] net_ratelimit: 81 callbacks suppressed [ 774.278687][ T7366] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 774.308051][ T7366] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 774.388693][ T7366] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 774.418075][ T7366] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 774.499194][T19054] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 774.538300][ T127] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 774.608659][ T127] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 774.648297][T19054] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 774.719540][T19054] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 774.758074][ T7366] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 776.068230][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured!