last executing test programs: 10.048394772s ago: executing program 4 (id=2958): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth1_macvtap\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0xa8, 0x10, 0x401, 0xfffffffc, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x31943}, [@IFLA_LINKINFO={0x78, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x68, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x1}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_INGRESS_QOS={0x4c, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x6}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7, 0x754}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x8, 0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x10000, 0x9}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7}}]}, @IFLA_VLAN_ID={0x6, 0x1, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x6}]}, 0xa8}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) 9.855212178s ago: executing program 4 (id=2963): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback, 0x7ff}], 0x2c) sendto$inet6(r1, &(0x7f0000000a40)='\x00', 0x1, 0x0, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0x5}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000100)={0x7, 0x84, 0x2, 0x5, 0x5, 0xf2, 0x0, 0x0, 0xfa, 0x2, 0x3, 0x6, 0x2, 0x2}, 0xe) recvmsg(r1, &(0x7f0000001e40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001e00)=""/14, 0xe}, 0x40000000) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x2, &(0x7f0000004240)=0xc3, 0x4) recvmmsg(r0, &(0x7f0000005ac0)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000001, &(0x7f0000000300)={0xa, 0x4e20, 0x5, @mcast1}, 0x1c) 8.852403531s ago: executing program 4 (id=2972): syz_emit_ethernet(0x0, 0x0, 0x0) syz_emit_ethernet(0x7e, &(0x7f00000000c0)={@link_local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x48, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x500, {0x0, 0x6, "f19f00", 0x0, 0x0, 0x0, @private1, @private2, [@hopopts={0x3a, 0x1, '\x00', [@calipso={0x7, 0x8, {0x0, 0x0, 0x0, 0x80}}]}]}}}}}}}, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b40)=ANY=[@ANYBLOB="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"], 0x28}}, 0x200508d4) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x84, &(0x7f0000000280)={r2, @in={{0x2, 0x4e24, @empty}}, 0x0, 0x83}, 0x90) r3 = socket(0x1e, 0x4, 0x0) connect$tipc(r3, &(0x7f0000000340)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}, 0x1}}, 0x10) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f00000001c0)=[@in6={0xa, 0x4e21, 0x1, @private0, 0x400}, @in={0x2, 0x4e22, @broadcast}], 0x2c) r4 = socket$inet6(0xa, 0x3, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000001000)=@raw={'raw\x00', 0x8, 0x3, 0x430, 0xf0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x360, 0xffffffff, 0xffffffff, 0x360, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'vxcan1\x00', {0x8}}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @multicast2}, [], [0x0, 0xffffffff], 'pim6reg\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x228, 0x270, 0x0, {}, [@common=@inet=@length={{0x28}, {0x2, 0x0, 0x1}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x5}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'bridge_slave_0\x00', {0x53}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x490) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r3, 0x84, 0x8, &(0x7f0000000200), &(0x7f0000000240)=0x4) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x4001, 0x3, 0x3e8, 0x0, 0x0, 0x148, 0x158, 0x148, 0x350, 0x240, 0x240, 0x350, 0x240, 0x7fffffe, 0x0, {[{{@ip={@private=0xa010102, @local, 0x0, 0x0, 'ip6gretap0\x00', 'nicvf0\x00', {}, {}, 0x88, 0x3, 0x10}, 0x0, 0xf8, 0x158, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'wg1\x00', {0x0, 0x0, 0x1ff, 0x100000, 0x0, 0xea, 0x7}}}, @common=@unspec=@connmark={{0x30}, {0xfffffff9, 0x8}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, 0x85d, 0xf, [0x10, 0x32, 0x1e, 0x32, 0x2b, 0x25, 0x3f, 0x17, 0x19, 0x22, 0x2c, 0x3d, 0x7, 0x3f, 0x1e, 0x31], 0x0, 0x2, 0x2}}}, {{@ip={@rand_addr=0x64010101, @local, 0xff, 0x0, 'wg0\x00', 'lo\x00', {0xff}, {}, 0x2e, 0x3, 0x4}, 0x0, 0x190, 0x1f8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x8, 0x9, 0x1, 0x1, 'syz1\x00', 0x2}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0xfff, 0x7e, 0x1c, 'netbios-ns\x00', 'syz0\x00', {0x3}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x448) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x600}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xffffffff}, [@call={0x85, 0x0, 0x0, 0x20}, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x17}}]}, &(0x7f0000000000)='syzkaller\x00', 0x2, 0xff27, 0x0, 0x0, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000000}, 0x94) r7 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000040)={'dummy0\x00', &(0x7f0000000080)=@ethtool_pauseparam={0x26, 0x8000, 0x81, 0x8}}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r6, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 8.469992199s ago: executing program 4 (id=2973): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) bind$rds(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(0xffffffffffffffff, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000300)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x2c}], 0x1, 0x1000000000038}}, @cswp={0x58, 0x114, 0x7, {{0x7, 0x7}, &(0x7f0000000080)=0x6c, &(0x7f00000000c0)=0x8, 0x7, 0x2, 0x5, 0x201, 0x64, 0x16e6}}, @mask_cswp={0x58, 0x114, 0x9, {{0x0, 0xade}, &(0x7f0000000140)=0x6, &(0x7f0000000440)=0x9, 0x4f12, 0x4, 0x23, 0x1, 0x24, 0x4}}, @rdma_map={0x30, 0x114, 0x3, {{&(0x7f00000001c0)=""/239, 0xef}, 0x0, 0x2}}], 0x128}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001040)={&(0x7f00000002c0)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x28}, 0x1, 0x0, 0x0, 0x20008841}, 0x0) sendmsg$NL80211_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x34, r1, 0x2, 0x70bd27, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x1a}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x33}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x15}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x40}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x4000831) syz_genetlink_get_family_id$devlink(&(0x7f0000000440), r0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=@newqdisc={0x50, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, 0x0, {0xffff}, {0xffff, 0xffff}, {0x2, 0xa}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x8, '\x00', 0x7, 0x7f, 0x1, 0x7}}}}, @TCA_RATE={0x6, 0x5, {0x7}}]}, 0x50}, 0x1, 0x0, 0x0, 0x14028010}, 0x20004000) bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x10, 0xd, &(0x7f0000000b00)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9}, [@generic={0x8, 0x1, 0x3, 0x1000, 0x1}, @printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5dc8}}, @generic={0x9, 0x7, 0x9, 0x8000, 0x75}]}, &(0x7f0000000b80)='syzkaller\x00', 0xdbd, 0xda, &(0x7f0000000bc0)=""/218, 0x41000, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x8, &(0x7f0000000cc0)={0x1, 0x4}, 0x8, 0x10, &(0x7f0000000d00)={0x0, 0x9, 0x4, 0xb0}, 0x10, 0x0, 0xffffffffffffffff, 0x5, &(0x7f0000001040), &(0x7f0000001080)=[{0x4, 0x2, 0x0, 0x8}, {0x0, 0x2, 0xf, 0xb}, {0x0, 0x3, 0xd, 0x4}, {0x4, 0x1, 0x9, 0x1}, {0x3, 0x1, 0xb, 0x4}], 0x10, 0x7}, 0x94) setsockopt$RDS_CANCEL_SENT_TO(0xffffffffffffffff, 0x114, 0x1, &(0x7f00000011c0)={0x2, 0x4e21, @empty}, 0x10) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000200)={0x104, 0x0, 0x100, 0x70bd2d, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0xff, 0x6c}}}}, [@NL80211_ATTR_REKEY_DATA={0x14, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x9}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x8}]}, @NL80211_ATTR_REKEY_DATA={0x58, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x7}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="2d4303587ce99e25a5f1a9c8393eac68"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x800}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="4da815bd122b82d5119165a18521cf5b"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="63642dba03463b8d188cc4215c4644284ddda7de994d7db5"}]}, @NL80211_ATTR_REKEY_DATA={0x78, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="ffd53d76e91f1ac4d5fbbdf892a38073b85c6915c5d59948"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "685c8e443751ed3d"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "dc3ba6d12fa6f99d"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "186bae59522e758f"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "eb1e44fe14caf82b"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "80b60c0ec5794b69"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="dc35911f4f62bdeb3d8d23e3f9f5412a3f247bb5537d2534"}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x40010}, 0x80c0) 8.368478447s ago: executing program 4 (id=2974): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), r1) r3 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r3, &(0x7f00000000c0), 0x492492492492627, 0x0) (async) sendmsg$L2TP_CMD_SESSION_CREATE(r1, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000340)={0x2c, r2, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0xf3}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) (async) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001500), 0xffffffffffffffff) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r7 = socket(0x10, 0x80002, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE(r7, 0x50009401, &(0x7f0000001780)={{r0}, "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"}) (async) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r6, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYRES16=r7, @ANYRES32=r7], 0x44}}, 0x2000800) (async) sendmsg$ETHTOOL_MSG_STRSET_GET(r7, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001700)={&(0x7f0000001540)={0x30, r4, 0x6a4104b68300861d, 0x70bd2d, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x20040040}, 0x408b4) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20008850) (async) r8 = socket$inet_sctp(0x2, 0x5, 0x84) socket$nl_route(0x10, 0x3, 0x0) (async) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f00000001c0)=[@in={0x2, 0x4e21, @private=0xa010102}, @in={0x2, 0x4e21, @multicast2}, @in6={0xa, 0x4e23, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4}, @in={0x2, 0x4e23, @local}, @in6={0xa, 0x4e21, 0x9, @initdev={0xfe, 0x88, '\x00', 0xfa, 0x0}, 0xffffffff}, @in={0x2, 0x4e24, @multicast1}, @in={0x2, 0x4e20, @private=0xa010101}, @in6={0xa, 0x4e20, 0x6, @loopback, 0x6}], 0xa4) (async) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000180)={'geneve0\x00', 0x0}) (async) r11 = socket$nl_route(0x10, 0x3, 0x0) (async) r12 = socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x2000011, r12, 0x2000) (async) ioctl$sock_SIOCETHTOOL(r12, 0x8946, &(0x7f0000000000)={'syz_tun\x00', &(0x7f0000002fc0)=@ethtool_coalesce={0xf, 0x0, 0x0, 0x7f11b2d5, 0x8, 0x2, 0xd2d0, 0x1, 0x6, 0x0, 0x91, 0xffffffff, 0x200, 0x0, 0x0, 0x8000, 0x0, 0x799, 0x0, 0x0, 0x8, 0x40000c, 0x5}}) (async) sendmsg$nl_route(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newlink={0x44, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x1840}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_ID={0x8, 0x1, 0x4}, @IFLA_GENEVE_DF={0x5, 0xd, 0xf7}]}}}]}, 0x44}}, 0x0) (async) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="03000000000000001c0012800c0001006d6163766c616e000c000280080001000800000008000500", @ANYRES32=r10, @ANYBLOB="c4cb522e04e906eaf8f735b96535fc2b08000a00", @ANYRES32=r10, @ANYBLOB], 0x4c}}, 0x0) 8.23360812s ago: executing program 4 (id=2975): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newlink={0x38, 0x10, 0x403, 0x200000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x12080, 0x42}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD1={0x8, 0x2, @udp6}]}}}]}, 0x38}, 0x1, 0xba01}, 0x0) 3.124856926s ago: executing program 3 (id=3014): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000840)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(serpent)\x00'}, 0x58) r1 = socket$inet6(0xa, 0x2, 0x3a) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) setsockopt$inet_int(r2, 0x0, 0x22, &(0x7f0000000100)=0xcd, 0x4) connect$inet(r2, &(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x2000000) setsockopt$inet_int(r2, 0x0, 0x17, &(0x7f0000000040)=0xc8, 0x4) recvmmsg(r2, &(0x7f0000002880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000fc0)=""/88, 0x58}, 0xa1}], 0x1, 0x45833af92e4b39ff, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000002240)=@bpf_tracing={0x1a, 0x13, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000024000000000000000500000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000085100000faffffff852000000500000018580000010000000000000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095000000000000006b9cc759592eac286ec8136af0167af4a5a5ef26439dc55a44dc1bbbd98e591baef5b2d6156d989444b4313f92df84c1d9650ae2bf288008fa6d43cbb62b29f4f5f1b590da87d80cc830a4a589dc11f551eb2ac9d4ffa35369c901accd7cd39554aca084c5477029"], &(0x7f00000006c0)='GPL\x00', 0x8, 0x1000, &(0x7f0000001140)=""/4096, 0x40f00, 0x5c, '\x00', 0x0, 0x17, 0xffffffffffffffff, 0x8, &(0x7f0000002180)={0x4, 0x4}, 0x8, 0x10, &(0x7f00000021c0)={0x1, 0x2, 0x7fffffff, 0x1}, 0x10, 0x26620, 0xffffffffffffffff, 0x2, 0x0, &(0x7f0000002200)=[{0x3, 0x2, 0xd, 0x1}, {0x5, 0x1, 0x7, 0x8}], 0x10, 0x8}, 0x94) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet6_int(r3, 0x29, 0x38, 0x0, &(0x7f0000000400)) r4 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r4, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0xfffe, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r4, 0x29, 0x30, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000000000000a0000000000ff00ff010000000000000000000000000001000001000000000000000000e0ff00000000000000bd0000000000000000000000e4ec010000000040000000000000000000000000000000000000013da51fd47aa2e2f70000000000000000000000000000000000000000000000000000000000000067ff0000000000000005"], 0x310) setsockopt$inet6_MCAST_MSFILTER(r4, 0x29, 0x30, &(0x7f0000001080)=ANY=[@ANYBLOB="01000000000000000a00000300000000ff01000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000001"], 0x110) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x20000084}, 0x4000000) socket$packet(0x11, 0x3, 0x300) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r6, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r7 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r7, 0x400448c8, &(0x7f0000000600)={r6, r6, 0x8, 0x0, 0x0, 0x6, 0xfe, 0x10cf, 0x5, 0x5, 0x2, 0x1, 'syz0\x00'}) shutdown(r6, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) 1.956342161s ago: executing program 1 (id=3023): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000040)={r4, 0x7fff, 0x8, 0x1}, &(0x7f00000000c0)=0x10) r5 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000100)=@req={0x3fc, 0x0, 0x0, 0x6}, 0x10) r6 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r6, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) recvmmsg$unix(r5, &(0x7f0000001bc0)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000480)=""/4066, 0xfe2}], 0x1}}], 0x1, 0x0, 0x0) recvmmsg(r5, &(0x7f0000008280)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)=""/47, 0x2f}], 0x1}, 0x8}], 0x15, 0x0, 0x0) close(r6) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r7, 0x0, 0x1, 0x0) vmsplice(r7, &(0x7f0000000c40)=[{&(0x7f0000000180)='\r', 0x1}, {&(0x7f0000000840)="89", 0x1}, {&(0x7f0000001100)="a6", 0x1}, {&(0x7f0000000580)='F', 0x1}], 0x4, 0x6) ioctl$sock_inet_udp_SIOCINQ(r7, 0x541b, 0x0) write(r0, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) (async) socket$inet6_sctp(0xa, 0x1, 0x84) (async) socket(0x2, 0x80805, 0x0) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) (async) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) (async) getsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000040)={r4, 0x7fff, 0x8, 0x1}, &(0x7f00000000c0)=0x10) (async) socket(0x1e, 0x4, 0x0) (async) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000100)=@req={0x3fc, 0x0, 0x0, 0x6}, 0x10) (async) socket(0x1e, 0x4, 0x0) (async) setsockopt$packet_tx_ring(r6, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) (async) recvmmsg$unix(r5, &(0x7f0000001bc0)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000480)=""/4066, 0xfe2}], 0x1}}], 0x1, 0x0, 0x0) (async) recvmmsg(r5, &(0x7f0000008280)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)=""/47, 0x2f}], 0x1}, 0x8}], 0x15, 0x0, 0x0) (async) close(r6) (async) pipe(&(0x7f0000000080)) (async) splice(r1, 0x0, r7, 0x0, 0x1, 0x0) (async) vmsplice(r7, &(0x7f0000000c40)=[{&(0x7f0000000180)='\r', 0x1}, {&(0x7f0000000840)="89", 0x1}, {&(0x7f0000001100)="a6", 0x1}, {&(0x7f0000000580)='F', 0x1}], 0x4, 0x6) (async) ioctl$sock_inet_udp_SIOCINQ(r7, 0x541b, 0x0) (async) write(r0, 0x0, 0x0) (async) 1.900876868s ago: executing program 3 (id=3024): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a48000000060a010400000000000000000a0000040900010073797a31000000000900020073797a32000000001c000480180001800d00010073796e70726f78790000000004000280140000001100010000000000000000000103b3c4"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r1, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x3c, 0x0, 0x0, 0x70bd2c, 0x25dfdbff, {}, [@ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x7}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x5}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x7fff}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x8000}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x3}]}, 0x3c}}, 0x10000094) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x6, 0x104}}, 0x10) r4 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000100)={0x4000042, 0x82, 0x1}, 0x10) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) setsockopt$IP_VS_SO_SET_DEL(r5, 0x0, 0x484, 0x0, 0x0) socket$tipc(0x1e, 0x2, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x30, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0xfffc}, [@NFTA_TABLE_USERDATA={0x19, 0x6, "ab3a83fcf0c6257237d8b8575778e7960618faec16"}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x4}}}]}, @NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xc8}, 0x1, 0x0, 0x0, 0x24000890}, 0x0) 1.686397356s ago: executing program 3 (id=3027): r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RATE_DEL(r2, &(0x7f0000000540)={&(0x7f0000000200), 0xc, &(0x7f0000000580)={&(0x7f00000007c0)=ANY=[@ANYBLOB="dc9e0000", @ANYBLOB="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", @ANYRES64=r1], 0xdc}, 0x1, 0x0, 0x0, 0x20000000}, 0x24000000) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="3c00000010004b0400000000000000007a000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b00010062726964676500000c00028005002d00200000001ef540574773755e5e48dc7edb27394d97ad76e9d5a0bfc624177363d041a1d277a0385d27eae1b70fb6"], 0x3c}, 0x1, 0x0, 0x0, 0x4010}, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000040), 0x6) ioctl$sock_bt_hci(r3, 0x400448e7, &(0x7f0000000080)) write$rfkill(r0, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x3, 0xfd}, 0x8) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x4c854}, 0x0) sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c000000f702010100000000000000000500ab930800044000005932280002800600034000010000060003400005000004000180080001000a010100"], 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x4040000) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmsg$NL80211_CMD_LEAVE_OCB(r4, &(0x7f0000000600)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x14, r5, 0x4, 0x70bd26, 0x25dfdbfd, {{}, {@void, @void}}, ["", "", "", "", "", ""]}, 0x14}}, 0x20008894) connect$inet(r7, &(0x7f0000000480)={0x2, 0x4e24, @empty}, 0x10) sendto$inet(r7, &(0x7f0000000100)="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", 0xfffffffffffffdb0, 0x4040004, 0x0, 0xfffffffb) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYRESOCT], 0x13a0}, 0x1, 0x0, 0x0, 0x20000045}, 0xc000) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}, 0x1, 0x0, 0x0, 0x20000043}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000740)=ANY=[], 0x6c}, 0x1, 0x0, 0x0, 0x40094}, 0x880) accept$unix(0xffffffffffffffff, 0x0, 0x0) epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r9, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r10, &(0x7f00000bd000), 0x318, 0x0) 1.636733822s ago: executing program 1 (id=3028): sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000080)={0xa, 0x4e1e, 0x80000, @dev={0xfe, 0x80, '\x00', 0x41}, 0xffff0147}, 0x1c, 0x0}, 0x84) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) (async) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000040)={0x0, 0x3}, &(0x7f0000000080)=0xc) (async) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x200000c, 0x11, r1, 0x32f8c000) 1.520364554s ago: executing program 1 (id=3030): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = socket(0x10, 0x2, 0x0) sendto$inet6(r2, &(0x7f0000000300)="7800000018002507b9199b02ffff48000203be04020406050a02040c5c000900580006050a0000000d0085a168d0bf46d32345653600648d27000b000a00070849935ade4a460c89b6ec0cff3959547f509058ad86c902007a00004a32000407160012000a0000000000e000e21800003b6ed538f6523250", 0x78, 0x2251197285d76a80, 0x0, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmmsg$inet6(r4, &(0x7f0000003580)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000001400)='(8', 0x2}], 0x1}}], 0x1, 0x8004) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580), 0x100}, 0x0) select(0x2a, 0x0, 0x0, &(0x7f0000000400)={0xfefdffffffffffff, 0x1, 0x2, 0x300}, &(0x7f0000000440)={0x0, 0x2710}) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r7) sendmsg$NFC_CMD_DEV_UP(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="010023010000340200000200000008000100", @ANYRES32=r1], 0x1c}, 0x1, 0x0, 0x0, 0x20008801}, 0x0) write$nci(r0, &(0x7f0000000480)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x8, @f={0x6, 0x1, 0x2, 0x5, {0x4, 0x3, "93e130"}, 0x2}}, 0xd) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), 0xffffffffffffffff) syz_emit_ethernet(0x0, 0x0, 0x0) 1.417975325s ago: executing program 0 (id=3032): r0 = socket(0x10, 0x3, 0x0) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000000200)={0x32, 0x8, 0x1, 0x1, 0x0, [@private0, @empty, @remote, @loopback]}, 0x48) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x52, 0x1, 0x0, 0x0, {0x1c}, [@typed={0xe, 0x1, 0x0, 0x0, @str='\\,$!*(,,&\x00'}]}, 0x24}}, 0x0) sendmsg$NFNL_MSG_CTHELPER_GET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x14, 0x1, 0x9, 0x801, 0x0, 0x0, {0x2, 0x0, 0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b00)={{0x14}, [@NFT_MSG_NEWRULE={0x20, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x48}}, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000000c0)="f6", 0x1}], 0x1, 0x0, 0x50, 0x40488c2}, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f00000024c0)={&(0x7f0000000500)="839c8e9078d298fe3b896f9673d959fcfb2866f3a75392f1295ad14dfd4c1b2b2bc05da79ad4fbbf42798cae89ae585ee48f812ae8f391e67e4e7db7e7", &(0x7f0000001400)=""/4096, &(0x7f0000002400)="9eb85f2d8ba89a653def0817d5476825ef499cfcecaa0da2a5f44889c92e24e59e2562542fb3e37bd4e83ecb217e4258fbfd81660e27d1c412579b43ba661f26227144f10cf5a4949e0faddaa4f3a62fc573e62e8eee3d21d1b71efabd2f6441cc2011de3456f98f7830", &(0x7f0000002480)='W', 0x80000000, r4, 0x4}, 0x38) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1f, 0x18, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000000000000001000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000040000008500000006000000b708000000000000dbaaf8fff1000000b5080000020000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7050000ebff0000850000006a0000009500000000000000"], &(0x7f0000000600)='GPL\x00', 0xa, 0x0, 0x0, 0x41000, 0x1e, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000040)={r5}, 0xc) ioctl$F2FS_IOC_MOVE_RANGE(r4, 0xc020f509, &(0x7f0000000300)={r2, 0xa4b, 0x7, 0x3f}) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x6, 0x4, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000018000810000000000000000850000006300000095000000000000000419a78ee8d84873751e0b6c3adad6c884d956271446757b583ed9"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @fallback=0x14, r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0xd3) r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_DELLINK(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)={0x18, 0x1404, 0x1, 0x70bdad, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x4) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000640)={r6}, 0x4) syz_emit_ethernet(0xd0, &(0x7f0000000740)={@local, @random="6cf6566994c6", @val={@val={0x88a8, 0x4, 0x0, 0x4}, {0x8100, 0x0, 0x0, 0x1}}, {@ipv4={0x800, @tcp={{0x9, 0x4, 0x0, 0x2d, 0xba, 0x0, 0x0, 0xa3, 0x6, 0x0, @remote, @local, {[@rr={0x7, 0xf, 0x9, [@multicast2, @loopback, @empty]}]}}, {{0x4e22, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}, {"28c9624ac4c776def5799525026ef73263831c67303671b02526506d68f7957aa244e929321d1642b2236994419199859b2b80e7240fe84b92ea295cffc010e65b9419b0f892a3a019761a2f67901bd50070f4a5be55f260761f0f35f401e46e0ab3ff09e0b30cee48c8b49d03205044d626151b57b834e7f22d4b6d3e45af82f2d6"}}}}}}, 0x0) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r8, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r9, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r10, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="58000000100001082cbd7000fdffffff00000000", @ANYRES32=r1, @ANYBLOB="01310000048a00001c002b8008000100", @ANYRES32, @ANYBLOB="0800030019", @ANYRES32], 0x58}}, 0x400c040) 1.316105546s ago: executing program 2 (id=3033): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x8, &(0x7f0000001340)=ANY=[@ANYBLOB="beaa00000000000079a008000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000bf0300000000000085000000c9000000b70000000000000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, 0x1000000}, 0x94) 1.31357051s ago: executing program 2 (id=3034): r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@bloom_filter={0x1e, 0x9, 0x5, 0x2, 0xc2, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x3}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x4, 0x9, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2a}, [@map_idx_val={0x18, 0x4, 0x6, 0x0, 0xc, 0x0, 0x0, 0x0, 0x3}, @initr0={0x18, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0xfffffffe}, @map_idx_val={0x18, 0x5, 0x6, 0x0, 0xb, 0x0, 0x0, 0x0, 0x40}]}, &(0x7f0000000080)='syzkaller\x00', 0x80000001, 0xed, &(0x7f00000000c0)=""/237, 0x41100, 0x10, '\x00', 0x0, @fallback=0x37, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200)={0x5, 0x8, 0xa6bc, 0x10000}, 0x10, 0x0, 0xffffffffffffffff, 0x6, &(0x7f00000002c0)=[r1, 0xffffffffffffffff], &(0x7f0000000300)=[{0x4, 0x5, 0xc, 0x5}, {0x0, 0x2, 0x5, 0x9}, {0x5, 0x1, 0xe, 0xc}, {0x4, 0x2, 0xb, 0x4}, {0x5, 0x5, 0x5, 0x5}, {0x4, 0x4, 0x8, 0x5}], 0x10, 0x1ff9}, 0x94) r2 = socket$inet_udp(0x2, 0x2, 0x0) accept$inet(r2, &(0x7f0000000440)={0x2, 0x0, @private}, &(0x7f0000000480)=0x10) (async) r3 = accept$inet(r2, &(0x7f0000000440)={0x2, 0x0, @private}, &(0x7f0000000480)=0x10) sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x34, 0x0, 0x100, 0x70bd26, 0x25dfdbfe, {{}, {}, {0x18, 0x18, {0x1, @bearer=@l2={'eth', 0x3a, 'macvtap0\x00'}}}}, ["", "", ""]}, 0x34}, 0x1, 0x0, 0x0, 0x20000094}, 0x20000880) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000740)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000700)={&(0x7f0000000600)={{0x14}, [@NFT_MSG_DELSETELEM={0x44, 0xe, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELRULE={0x48, 0x8, 0xa, 0x5, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0xc5}, @NFTA_RULE_COMPAT={0x14, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x22f0}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0xd}]}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x2}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x4}]}, @NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xdc}, 0x1, 0x0, 0x0, 0x4000840}, 0x0) sendmsg$NFT_MSG_GETOBJ(r4, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x13e0efdc1d0d8d45}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x30, 0x13, 0xa, 0x801, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) (async) sendmsg$NFT_MSG_GETOBJ(r4, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x13e0efdc1d0d8d45}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x30, 0x13, 0xa, 0x801, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f00000008c0)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, &(0x7f0000000a00)={'sit0\x00', &(0x7f0000000900)={'syztnl1\x00', 0x0, 0x700, 0x7, 0x2, 0xfffffffc, {{0x34, 0x4, 0x1, 0x20, 0xd0, 0x68, 0x0, 0x3, 0x4, 0x0, @rand_addr=0x64010101, @loopback, {[@generic={0x83, 0x5, "b326f0"}, @timestamp_addr={0x44, 0xc, 0x63, 0x1, 0x1, [{@loopback, 0x401}]}, @cipso={0x86, 0x47, 0xffffffffffffffff, [{0x3, 0xe, "7d7cf20adf56f14e64b44426"}, {0x7, 0x5, 'l\rX'}, {0x6, 0xf, "0a26eba98d977abb7b28164b63"}, {0x1, 0xa, "a91456e4af504cf5"}, {0x5, 0xe, "8b669f523c27b569b8ea2f0e"}, {0x0, 0x7, "9728174839"}]}, @timestamp={0x44, 0x18, 0x9a, 0x0, 0x2, [0x1, 0x7, 0x0, 0x2, 0x1]}, @timestamp={0x44, 0x18, 0xd2, 0x0, 0xc, [0x2, 0x7ff, 0x6, 0xffffffff, 0xa8a]}, @ssrr={0x89, 0xf, 0x3d, [@multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty]}, @timestamp_prespec={0x44, 0x24, 0x47, 0x3, 0x2, [{@local, 0x9}, {@empty, 0x1}, {@empty, 0x38}, {@multicast2, 0x7}]}, @noop]}}}}}) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, &(0x7f0000000a00)={'sit0\x00', &(0x7f0000000900)={'syztnl1\x00', 0x0, 0x700, 0x7, 0x2, 0xfffffffc, {{0x34, 0x4, 0x1, 0x20, 0xd0, 0x68, 0x0, 0x3, 0x4, 0x0, @rand_addr=0x64010101, @loopback, {[@generic={0x83, 0x5, "b326f0"}, @timestamp_addr={0x44, 0xc, 0x63, 0x1, 0x1, [{@loopback, 0x401}]}, @cipso={0x86, 0x47, 0xffffffffffffffff, [{0x3, 0xe, "7d7cf20adf56f14e64b44426"}, {0x7, 0x5, 'l\rX'}, {0x6, 0xf, "0a26eba98d977abb7b28164b63"}, {0x1, 0xa, "a91456e4af504cf5"}, {0x5, 0xe, "8b669f523c27b569b8ea2f0e"}, {0x0, 0x7, "9728174839"}]}, @timestamp={0x44, 0x18, 0x9a, 0x0, 0x2, [0x1, 0x7, 0x0, 0x2, 0x1]}, @timestamp={0x44, 0x18, 0xd2, 0x0, 0xc, [0x2, 0x7ff, 0x6, 0xffffffff, 0xa8a]}, @ssrr={0x89, 0xf, 0x3d, [@multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty]}, @timestamp_prespec={0x44, 0x24, 0x47, 0x3, 0x2, [{@local, 0x9}, {@empty, 0x1}, {@empty, 0x38}, {@multicast2, 0x7}]}, @noop]}}}}}) getsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000a40)={@rand_addr, @empty}, &(0x7f0000000a80)=0xc) (async) getsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000a40)={@rand_addr, @empty, 0x0}, &(0x7f0000000a80)=0xc) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000ac0)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000b00)={'team0\x00', 0x0}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000b40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000b80)=0x14) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000c40)={'syztnl1\x00', &(0x7f0000000bc0)={'syztnl1\x00', 0x0, 0x4, 0xba, 0x48, 0xffffff50, 0x10, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, @local, 0x40, 0x1, 0x5, 0x3}}) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000c80)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000cc0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_NOOP(r4, &(0x7f0000001180)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001140)={&(0x7f0000000d00)={0x414, 0x0, 0x800, 0x70bd2b, 0x25dfdbfb, {}, [{{0x8, 0x1, r5}, {0x1f4, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xba02}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x6eed}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r7}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x8000}}}]}}, {{0x8, 0x1, r8}, {0x4}}, {{0x8, 0x1, r9}, {0xf8, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r10}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r11}}}]}}, {{0x8, 0x1, r12}, {0xf0, 0x2, 0x0, 0x1, [{0x74, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x44, 0x4, [{0x7, 0x3, 0x5, 0x2}, {0x9, 0x8, 0xc0, 0x2}, {0x0, 0xf, 0x4, 0x6}, {0x5, 0x4, 0x80, 0x7ff}, {0x987d, 0x0, 0xc, 0x5}, {0x80, 0x0, 0x1, 0xee}, {0x7, 0x4, 0x4, 0x7}, {0x191, 0x1, 0xd4, 0xc00}]}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xf5f1}}, {0x8, 0x6, r13}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8}}}]}}]}, 0x414}, 0x1, 0x0, 0x0, 0x40}, 0x8001) (async) sendmsg$TEAM_CMD_NOOP(r4, &(0x7f0000001180)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001140)={&(0x7f0000000d00)={0x414, 0x0, 0x800, 0x70bd2b, 0x25dfdbfb, {}, [{{0x8, 0x1, r5}, {0x1f4, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xba02}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x6eed}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r7}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x8000}}}]}}, {{0x8, 0x1, r8}, {0x4}}, {{0x8, 0x1, r9}, {0xf8, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r10}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r11}}}]}}, {{0x8, 0x1, r12}, {0xf0, 0x2, 0x0, 0x1, [{0x74, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x44, 0x4, [{0x7, 0x3, 0x5, 0x2}, {0x9, 0x8, 0xc0, 0x2}, {0x0, 0xf, 0x4, 0x6}, {0x5, 0x4, 0x80, 0x7ff}, {0x987d, 0x0, 0xc, 0x5}, {0x80, 0x0, 0x1, 0xee}, {0x7, 0x4, 0x4, 0x7}, {0x191, 0x1, 0xd4, 0xc00}]}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xf5f1}}, {0x8, 0x6, r13}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8}}}]}}]}, 0x414}, 0x1, 0x0, 0x0, 0x40}, 0x8001) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) r14 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ADD(r14, 0x0, 0x482, &(0x7f00000011c0)={0x73, @empty, 0x4e24, 0x1, 'lblc\x00', 0xc, 0x80, 0x36}, 0x2c) (async) setsockopt$IP_VS_SO_SET_ADD(r14, 0x0, 0x482, &(0x7f00000011c0)={0x73, @empty, 0x4e24, 0x1, 'lblc\x00', 0xc, 0x80, 0x36}, 0x2c) setsockopt$MRT_PIM(r3, 0x0, 0xcf, &(0x7f0000001200)=0x1, 0x4) r15 = syz_genetlink_get_family_id$mptcp(&(0x7f0000001280), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_REMOVE(0xffffffffffffffff, &(0x7f00000013c0)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001380)={&(0x7f00000012c0)={0xbc, r15, 0x2, 0x70bd2b, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x81}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x2e}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xe0}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xf}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x1c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x8}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x81}, @MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x9}]}, 0xbc}, 0x1, 0x0, 0x0, 0x8004040}, 0x0) r16 = socket(0x10, 0x80000, 0x10000) writev(r3, &(0x7f00000018c0)=[{&(0x7f0000001400)="ec4140a2ef3f3df57e577096d0061666267024e17dc5fcb83d34fe01243ddc319155cd54d84460ccf3c0df1e3f22745741af898652a368aeb6cf30a0d58508bf10fbaba79cc7848152740afe4782cbd23343c7ab", 0x54}, {&(0x7f0000001480)="308fcfc27a9be224327149fb6ff2431d5c5a0b6134dc1e6c0ced0b9483763aa217f111fe7ac343a617caa2a85c54193368005abcead731c81ae237603ac9899ad351b0bf096c75d9c6", 0x49}, {&(0x7f0000001500)="3f1d3336e9be384345233b6d8470ac1d54f93e75be03b264dbbe4fe3eac67e1c6fe6fddf88a6dcc3eceaebe23114bd280f23d26344d7be0814c1ef9a86278a7279fb4a1ab06068751c27f88fb22b8a61f9f58e990edb7655b633a712b619fd61dd5a82c9ba3b3e4e61b69ff12213a506b46eda20ff86b770f1a23b064a05bf6f58f23add7e6dcd4e28697f786e1983597d27d95d9372fe211ba981a28b51942b533397c8f179c916d8f9059db33c4a74a4ba78c59abc1aaf1880013750a10ff12b3b661cd2c49e40e1115b93f713f91a463a0f6941658b081cb000b83c04b5e53ace9945c6f802", 0xe7}, {&(0x7f0000001600)="d8be746675260c5d7f250c5dae2eb691215ea279ca05ca7f1a92f2a94aee74d4b0d22539ea20a9c0", 0x28}, {&(0x7f0000001640)="ca028c725bc04184874506ab64bc714ee1f4f960943bf49bc3d0f3", 0x1b}, {&(0x7f0000001680)="ed4c289c80da64501ecb597413a477c71d1c50d098b54bede780809e7159298fc06562a146430e56638fabd0111a41573941eba75edd86891e71dcc206ce3802669033f4dfc8161ed69d718233a644c9e5d0dd918afbfd4c68d0b72f4ffce702ee8d6a0e3c3bc78aaabd52b8bc4f4b7f3ea3bc2d106ed76fd831cc377ceae36722ce60ae5c443b5a5989f57dec64e4f76d44f22cb0801f96675ec0c6f06ff1371f5906c39f641fed8d244de14df28b9bdb5c0144a9483f2458f9ec8d3c", 0xbd}, {&(0x7f0000001740)="47fb9629a20c7b3097ce6f121cc2d3e100778168ac76385df392e641756cabc84a21c16cc48957f8e3446f345a13eddd5a6c272c366991", 0x37}, {&(0x7f0000001780)="901cc97ce606d46360df6fbca43a53be3e6b2c48edcb25eda7e586570c2d6b0103baaedc2d129a6fcc10d9042a24", 0x2e}, {&(0x7f00000017c0)="68de8f8c60787e9da6e7697f7bdbd33cc9240a58b6163df44f821d2c6a74e4f0f831edcc178b0d6df7e0cab3f94fea5b9a915778a70ebd8ee5a64ceb98d28f5b29a94a4701b34ef6df2b6433573dd647b4b2b2dde58d191a11e34316e926f22f2d14d76dad215e0dae1013e32c7c6c2efb325b3e04f6f3fb631e52bc25e16c1d2f1ee3a9ceb58c2755eb08e4975ca7a8a65e75cce82f4d5a236053cae1afa98e17e070cfa628c0c5ac019c1218e3d419e4", 0xb1}, {&(0x7f0000001880)="987cbd9231802c776fae94a1d86db0d2c89a0ebf014dd5e5eaf0f73e897a9522561ebff73049e66a4904d1e4755697152ccdcc6697d5989563af", 0x3a}], 0xa) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r16, 0x89f2, &(0x7f00000019c0)={'syztnl0\x00', &(0x7f0000001980)={'syztnl0\x00', r7, 0x80, 0x80, 0x7, 0x80000001, {{0x6, 0x4, 0x0, 0xe, 0x18, 0x64, 0x0, 0x5, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, {[@noop, @noop]}}}}}) close(r4) (async) close(r4) ioctl$sock_ifreq(r16, 0x89a3, &(0x7f0000001a00)={'syzkaller0\x00', @ifru_names='syz_tun\x00'}) (async) ioctl$sock_ifreq(r16, 0x89a3, &(0x7f0000001a00)={'syzkaller0\x00', @ifru_names='syz_tun\x00'}) sendto$x25(r16, &(0x7f0000001a40), 0x0, 0x10, &(0x7f0000001a80), 0x12) 1.17556534s ago: executing program 1 (id=3035): r0 = socket$inet(0x2, 0x2, 0x1) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10) (async) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000040)={0x4, 0x13f, 0x4, 0x5, 0x3, 0x0, [{0xf, 0x6, 0x9, '\x00', 0x200}, {0xfffffffffffffffb, 0x380, 0xb60}, {0x40, 0xf09, 0x200, '\x00', 0x901}]}) sendmsg$inet(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000005c0)='\b\x00', 0x2}, {&(0x7f0000000700)="61ffffffffff", 0x6}], 0x2}, 0x24000000) 1.148241795s ago: executing program 2 (id=3036): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000100)={{}, &(0x7f0000000080), &(0x7f00000000c0)='%-5lx \x00'}, 0x20) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000004600070128bd700000000000017c000030", @ANYRESOCT, @ANYBLOB="45e1"], 0x44}, 0x1, 0x0, 0x0, 0x404c011}, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000000fc0)={0x0, 0x0, {0x0, @struct}, {}, {0x0, @struct}}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x200800, 0x0) ioctl$TUNSETPERSIST(r1, 0x400454cb, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="010000000400100004112200a4e20000011d0f83f54770cb833412e80b750b62c8fb63df026298f59600d4b9c09cc43617abdbd6539723dc04"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)="01cf703f47554f8e72e0d3c6cfa3c5455149d0a9bfb18b6fae", &(0x7f0000000580), 0x2000cc0, r2}, 0x38) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x18, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)="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", 0x0, 0x1}, 0x38) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xa8001, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c) close(0x3) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x4001, 0x3, 0x568, 0x0, 0x0, 0x148, 0x2d0, 0x148, 0x4d0, 0x240, 0x240, 0x4d0, 0x240, 0x7fffffe, 0x0, {[{{@uncond, 0x0, 0x288, 0x2d0, 0x0, {}, [@common=@unspec=@comment={{0x120}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x6, 0x1, 0x1, 'syz1\x00', 0xc}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x8, 0x5, 0x1, 'netbios-ns\x00'}}}, {{@ip={@local, @multicast1, 0xff000000, 0xffffff00, 'tunl0\x00', 'pimreg1\x00', {0xff}, {0xff}, 0x11, 0x3, 0x60}, 0x0, 0x1b8, 0x200, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0xa, 0x9, 0x1, 0x0, 'syz1\x00', 0x10}}, @common=@inet=@multiport={{0x50}, {0x1, 0x6, [0x4e24, 0x4e22, 0x4e24, 0x4e22, 0x4e22, 0x4e24, 0x4e21, 0x4e21, 0xe20, 0x4e22, 0x4e20, 0x4e23, 0x4e23, 0x4e24, 0x4e24], [0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1], 0x1}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0xc7e, 0x8, 0x7, '\x00', {0x20}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x5c8) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'veth0_macvtap\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'wlan1\x00'}) r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r4) socket$inet6_tcp(0xa, 0x1, 0x0) sendto(0xffffffffffffffff, &(0x7f00000000c0)="120000001200e7ef007b00000000", 0xe, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000000100), 0xffffffffffffffff) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000bc0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRESDEC=r4, @ANYBLOB="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"], 0x38}, 0x1, 0x0, 0x0, 0x2008810}, 0x48080) syz_emit_ethernet(0x0, 0x0, 0x0) 989.163324ms ago: executing program 1 (id=3037): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a48000000060a010400000000000000000a0000040900010073797a31000000000900020073797a32000000001c000480180001800d00010073796e70726f78790000000004000280140000001100010000000000000000000103b3c4"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r1, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x3c, 0x0, 0x0, 0x70bd2c, 0x25dfdbff, {}, [@ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x7}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x5}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x7fff}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x8000}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x3}]}, 0x3c}}, 0x10000094) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x6, 0x104}}, 0x10) r4 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000100)={0x4000042, 0x82, 0x1}, 0x10) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) setsockopt$IP_VS_SO_SET_DEL(r5, 0x0, 0x484, 0x0, 0x0) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000002340)={&(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x42, 0x4}}}, 0x10, 0x0}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x30, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0xfffc}, [@NFTA_TABLE_USERDATA={0x19, 0x6, "ab3a83fcf0c6257237d8b8575778e7960618faec16"}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x4}}}]}, @NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xc8}, 0x1, 0x0, 0x0, 0x24000890}, 0x0) 927.61765ms ago: executing program 2 (id=3038): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000180)=ANY=[], 0x8) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) bind$tipc(r2, &(0x7f0000000180)=@name={0x1e, 0x2, 0x1, {{0x1, 0x3}, 0x1}}, 0x10) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) getsockname$packet(r2, 0x0, &(0x7f0000000200)) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000080)=ANY=[], 0x8) socket$netlink(0x10, 0x3, 0x10) pipe(0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, 0x0, 0x4000010) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) sendto$inet6(r0, 0x0, 0xfffd, 0x0, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 913.804016ms ago: executing program 0 (id=3039): sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000540)=[{0x0, 0xdd12}], 0x1}, 0x0) r0 = socket(0x10, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_OPERSTATE={0x5, 0x10, 0x6c}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_TXQLEN={0x8, 0xd, 0x4}]}, 0x44}}, 0x8000) ioctl$F2FS_IOC_SEC_TRIM_FILE(r0, 0x4018f514, &(0x7f0000000000)={0x59, 0x3b73, 0x3}) r1 = socket$rxrpc(0x21, 0x2, 0xa) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f00000000c0)={0x0, 0x0, 0x4, 0x0, '\x00', [{0x9, 0x8, 0x8, 0x2, 0x7, 0x1}, {0x400, 0x7, 0xee, 0x5, 0x4, 0x1}], ['\x00', '\x00', '\x00', '\x00']}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$sock_int(r2, 0x1, 0x10, &(0x7f0000000380)=0x3, 0x4) sendmmsg(r2, &(0x7f0000001c00), 0x400000000000159, 0x40840) 878.833651ms ago: executing program 1 (id=3040): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xaf1}, 0x8) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback, 0x1}, 0x70, &(0x7f0000000580)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000000)={0x0, 0x3, 0x1, [0x8]}, 0xa) 732.785002ms ago: executing program 2 (id=3041): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'dummy0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x1, 0x3}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x2d75000) pselect6(0x40, &(0x7f0000000400)={0x0, 0x6, 0x2, 0x100000001, 0x0, 0xa, 0x3, 0x80000001}, 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xe, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000cc0)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0x4000000, {0x0, 0x0, 0x0, r3, {0x0, 0x4}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x1, 0x2, 0x0, 0x1c, 0x0, 0xfffffb81}, {0xef, 0x0, 0x1}, 0x0, 0x1}}, @TCA_TBF_PTAB={0x404, 0x3, [0x1, 0x0, 0x167, 0x6, 0x9, 0x7ff, 0x7, 0x1, 0x6, 0x13f, 0x5, 0x8, 0x10000, 0x1ff, 0x1, 0x1ff, 0x9, 0x8, 0x5, 0xb, 0x8, 0xd, 0x6, 0x9, 0x8, 0x7, 0x16, 0x8, 0x80, 0x7fff, 0x8, 0x400, 0x8, 0x6, 0x3, 0x16, 0xfffffc00, 0xfffffffe, 0xfff, 0xf, 0x3ff, 0x80, 0x8001, 0xaf, 0x800, 0xd, 0x6, 0x3, 0x7f, 0x0, 0x40000000, 0x9b, 0x2, 0x4, 0x9, 0x5, 0x4, 0x8001, 0x4, 0x6, 0x1, 0x7, 0x7, 0x40, 0x0, 0x1000, 0x5a, 0x4, 0x6, 0x2, 0x4, 0x2, 0x5, 0x3, 0xc, 0x80000001, 0x7fff, 0x0, 0x2, 0x2, 0x7, 0x3, 0x1000, 0x0, 0x4, 0x9, 0xe, 0x900, 0x8, 0xd61, 0x5, 0x9, 0x6, 0x0, 0x5, 0x5, 0x0, 0x2, 0x6, 0x5, 0x5, 0x5, 0x80000000, 0x9, 0xe, 0xe5ea, 0x7, 0x73, 0x10001, 0x7, 0x8f1b, 0x3, 0x80000000, 0x602, 0xfffffffd, 0x3, 0x7, 0x80000000, 0xfffffff7, 0xfff, 0x4, 0x3, 0x7d, 0x3ff, 0x2, 0xfffffefe, 0x1, 0x244f, 0x8, 0xffffffff, 0x7fff, 0xfffffff8, 0x7f, 0x80, 0x2, 0x6, 0xa6e, 0x5, 0x1, 0x9, 0x3, 0xb, 0x9, 0x3, 0x30, 0x3, 0x3, 0x3, 0xfffffff9, 0x1, 0x101, 0x80, 0xd8, 0x10001, 0x8, 0x3, 0x3, 0x0, 0x200040, 0xfffffff7, 0xc, 0x3, 0x4cdd072, 0xd, 0x9, 0x0, 0xffff301e, 0x90000, 0x0, 0x2, 0x0, 0x606, 0x6, 0x4, 0x1, 0x80000001, 0xfffffffc, 0xd40e, 0xfffffff7, 0x1, 0xd3f, 0xe48e, 0x3, 0x8, 0x3, 0x8, 0x77, 0xf, 0xeca, 0x8d, 0xe051, 0x6, 0x4, 0xab5, 0x3, 0xffffffbc, 0x8, 0x7, 0x16e4, 0x5, 0x8, 0x5e, 0xffff, 0x8, 0x8000, 0x328, 0x5, 0x3, 0x515240d2, 0x1, 0x2, 0xe4, 0x4, 0xc1f5, 0x3, 0x9, 0x8, 0x3ff, 0x0, 0x11f, 0x8, 0xe8dd, 0x1, 0x8, 0x2, 0x8c, 0xffffffff, 0x9, 0x4, 0x46e, 0x7f, 0x0, 0x5, 0x1, 0x0, 0x5cd, 0x9, 0x277b, 0x3, 0x3, 0x5, 0x80000000, 0x80000000, 0x4, 0x0, 0x8, 0x8000, 0x100, 0x8000, 0x3, 0x1ff, 0x3069, 0xc, 0x400, 0x9, 0x400]}]}}]}, 0x45c}, 0x1, 0x0, 0x0, 0x4815}, 0x0) r5 = accept4$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000080)=0x14, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x9}, 0x20) setsockopt$inet6_int(r6, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) getsockname(r5, &(0x7f0000000200)=@tipc=@name, &(0x7f0000000500)=0x80) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_MCAST_RATE(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01022bbd7000fbdbdf255c00000008000300", @ANYRES32=r10], 0x24}, 0x1, 0x0, 0x0, 0x20000}, 0x4008040) getsockopt$SO_TIMESTAMP(r8, 0x1, 0x3f, &(0x7f0000000180), &(0x7f0000000980)=0x4) sendmsg$inet6(r6, &(0x7f0000000080)={&(0x7f00000001c0)={0xa, 0x4e21, 0x80000, @dev={0xfe, 0x80, '\x00', 0x19}, 0xfffffffd}, 0x1c, 0x0, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x18}, 0xc4) sendmsg(r5, &(0x7f00000007c0)={&(0x7f00000000c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x4, 0x0, 0x3, 0x0, {0xa, 0x4e22, 0xffffff6f, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x2}}}, 0x80, &(0x7f0000000740)=[{&(0x7f0000000300)="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", 0xfd}, {&(0x7f0000000400)="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", 0xff}, {&(0x7f0000000500)}, {&(0x7f0000000540)="0b85fbb0c16d9dd50202944ca49f2264da050ebe1059b0e72e6af39847ee55bb8f1343a9639877f277216958566de83933aa6e59f6ce3ff77e4950695168e31da2cba79277f653dc5768d606", 0x4c}, {&(0x7f00000005c0)="206d315380c9de01ccbe00a879e0e5d91d063c40abc10a0dde80d8c8a8945f9384e67d088e6b72acad4a2f110c08df6c2724c8b0e1e4410153db60e7534e92526b6649b9afdc2eee6f921bf73dc0e6531c9d81ee3a180f44d416053b3578218ea4d51637599e08fb8266e45202d59ab6987ba98e95387081df8c3030171e9e551b67b198c99b043a206f4849a65352", 0x8f}, {&(0x7f0000000680)="c0919929173a0747195acf9cdf9aa902188294a75e0dcbe0e58d87df6313e6c61c3d2e773f90a139ad009da35e07aee48648c394b64417519e0086ad8c188b1442fef9869167c0b8e9065aeee6e6a78b33368b4c7f915946de5091eab991e213036b8f0885e2ae80b877c32f8e91af88047a05a00a8131e5563defb41ba7ef8a9f7336120056be8d8e5c5398c42b6535fdb568a79c728f45868a8f6348ad187af1ec0732296141c3e5d0106e4c09971934da8110714a6c82017d3a61205d81", 0xbf}], 0x6}, 0x20000000) 686.011555ms ago: executing program 3 (id=3042): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newtfilter={0x78, 0x2c, 0xd27, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xe}, {}, {0x8, 0xc}}, [@filter_kind_options=@f_flow={{0x9}, {0x48, 0x2, [@TCA_FLOW_EMATCHES={0x44, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x20, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x7, 0x3, 0x67e4}, {0x9, 0x3, 0x5, 0x9}}}]}, @TCA_EMATCH_TREE_LIST={0x20, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x4, 0x3, 0x8}, {0x8000, 0x7fffffff, 0x3, 0x1}}}]}]}]}}]}, 0x78}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="050000000000000000005d00000008000300", @ANYRES32=r2, @ANYBLOB="17d38e2fa8ba0fb5f7e89f609eb41902f472f2e1bae4ef2dc1752eea62918efe82a3c70585a24d3a841663"], 0x1c}}, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts-aes-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x10) r4 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f0000000180)=0x10000800, 0x4) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r5, 0x4048587b, &(0x7f0000003680)={{0xffffffffffffffff, 0x0, 0x200000, &(0x7f0000000180)={@align=0x35, {0xfe, 0x80, 0xc, 0x2}}, 0x6, 0x0, &(0x7f00000002c0)=0xfff}, 0x0, 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000008000000000018000380140003801000018004000300080001"], 0x44}}, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001180)={0x38, r6, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x38}}, 0x0) r7 = accept4$alg(r3, 0x0, 0x0, 0x0) sendmmsg$alg(r7, &(0x7f00000005c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000001040)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x200068c0}], 0x1, 0xc0001) recvmmsg(r7, &(0x7f0000000b00)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000001080)=""/4096, 0x1000}], 0x1}, 0x40}], 0x1, 0x102, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000040000701fcffffff00000100017c0000040042800c0001800600060065580000100002800c0011800800"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), r8) 649.662185ms ago: executing program 0 (id=3043): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x34}, 0x20) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0xa, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xa00, r0, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1, 0x10, 0x0, 0xfffd}, 0x90) 567.355039ms ago: executing program 2 (id=3044): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x10, 0x12, 0x0, 0x1, @sit={{0x8}, {0x4}}}]}, 0x30}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r2, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)={0x38, r7, 0x537, 0x70bd25, 0x0, {{0x2}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x4, 0x6f}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9b4}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x19a}]]}, 0x38}, 0x1, 0x0, 0x0, 0x44814}, 0x4040000) sendmsg$NL80211_CMD_GET_POWER_SAVE(r1, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x20, r7, 0x4, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x8, 0x26}}}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x8040}, 0xc881) r9 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)=ANY=[@ANYRES32=r10, @ANYRES32=r9, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r10}, &(0x7f0000000000), &(0x7f0000000080)=r4}, 0x20) recvmsg$unix(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)=""/179, 0x1001}], 0x1, 0x0, 0x0, 0x300}, 0x0) sendmsg$inet(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000b00)="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", 0xfff}, {&(0x7f0000000180)="dd43", 0x2}], 0x2}, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) r11 = socket$inet6_sctp(0xa, 0x5, 0x84) r12 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r12, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private1, 0x1}]}, &(0x7f00000002c0)=0x10) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000001c0)={0x64, 0x2, 0x6, 0x3, 0x0, 0x0, {0x7}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x11}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xffff}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x64}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) getsockopt$inet_sctp6_SCTP_MAX_BURST(r12, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000004c0)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r11, 0x84, 0x17, &(0x7f00000000c0)={r13, 0xe, 0x1, 'w'}, 0x9) r14 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)={0x20, r14, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x48050}, 0x0) 495.428903ms ago: executing program 3 (id=3045): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "2d9421fe8a4c9563", "cf6ff9ff337ed301000100c747fbbfc1", "dbdc27ff", "16de86d67a8426bd"}, 0x28) recvmsg(r0, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000b40)=""/141, 0x8d}], 0x1}, 0x40000021) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r0) recvmmsg(r0, &(0x7f00000019c0)=[{{0x0, 0x0, 0x0}, 0x7fffffff}, {{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000180)=""/15, 0xf}], 0x1}, 0x9}], 0x2, 0x10100, 0x0) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f00000000c0)=0x8, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000040)=0x5440, 0x4) r2 = socket(0xa, 0x3, 0xff) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000002c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000000c0)="3638412c0107cc651c69315bb104e4f1", 0x10) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7be", 0x10) sendmsg$inet6(r2, &(0x7f0000001c00)={&(0x7f0000000000)={0xa, 0xa, 0x4, @mcast2}, 0x1c, 0x0}, 0x20008b98) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000009c0)=@newtaction={0x18, 0x30, 0xffff, 0x70bd2d, 0x25dfdbfb, {}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x24004040}, 0x0) 469.032404ms ago: executing program 0 (id=3046): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newlink={0x40, 0x10, 0x403, 0x200000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x12080, 0x42}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GTP_FD1={0x8, 0x2, @udp6}, @IFLA_GTP_FD0={0x8, 0x1, @udp6}]}}}]}, 0x40}, 0x1, 0xba01}, 0x0) (fail_nth: 2) 56.561112ms ago: executing program 3 (id=3047): socket$inet_tcp(0x2, 0x1, 0x0) (async) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000010c30000000003000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000116608000000000000180000000000000000000000000010009500000000000000360a020000000001180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000020b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x8}, 0x94) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@allocspi={0x1dc, 0x16, 0x1, 0x70bd2b, 0x25dfdbfe, {{{@in=@private=0xa010101, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4e23, 0x0, 0x4e24, 0x0, 0xa, 0x80, 0x20, 0x1d}, {@in6=@local, 0x4d5, 0x33}, @in=@dev={0xac, 0x14, 0x14, 0x10}, {0x8, 0x7b5, 0x0, 0x6, 0x9, 0xfffffffffffffffa, 0xffffffff, 0x3}, {0x2, 0x2, 0x1, 0xfffffffffffffffa}, {0x0, 0x10001, 0xfffffff9}, 0x70bd2a, 0x0, 0x2, 0x2, 0x6, 0x63}, 0x8, 0x74f}, [@sa={0xe4, 0x6, {{@in6=@mcast2, @in6=@private2, 0x4e24, 0x5, 0x4e22, 0x8175, 0x2, 0x80, 0x40, 0x16}, {@in=@multicast1, 0x4d2, 0xf7b07c621d3cd55b}, @in=@multicast1, {0x45, 0x1, 0x9, 0x9, 0x8, 0x8, 0xfffffffffffff800, 0x6}, {0x9, 0xc, 0x6}, {0x8, 0x3, 0x3}, 0x70bd2a, 0x3503, 0x2, 0x4, 0x6, 0x99}}]}, 0x1dc}, 0x1, 0x0, 0x0, 0x10}, 0x400c8c0) (async) sendmsg$nl_xfrm(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@allocspi={0x1dc, 0x16, 0x1, 0x70bd2b, 0x25dfdbfe, {{{@in=@private=0xa010101, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4e23, 0x0, 0x4e24, 0x0, 0xa, 0x80, 0x20, 0x1d}, {@in6=@local, 0x4d5, 0x33}, @in=@dev={0xac, 0x14, 0x14, 0x10}, {0x8, 0x7b5, 0x0, 0x6, 0x9, 0xfffffffffffffffa, 0xffffffff, 0x3}, {0x2, 0x2, 0x1, 0xfffffffffffffffa}, {0x0, 0x10001, 0xfffffff9}, 0x70bd2a, 0x0, 0x2, 0x2, 0x6, 0x63}, 0x8, 0x74f}, [@sa={0xe4, 0x6, {{@in6=@mcast2, @in6=@private2, 0x4e24, 0x5, 0x4e22, 0x8175, 0x2, 0x80, 0x40, 0x16}, {@in=@multicast1, 0x4d2, 0xf7b07c621d3cd55b}, @in=@multicast1, {0x45, 0x1, 0x9, 0x9, 0x8, 0x8, 0xfffffffffffff800, 0x6}, {0x9, 0xc, 0x6}, {0x8, 0x3, 0x3}, 0x70bd2a, 0x3503, 0x2, 0x4, 0x6, 0x99}}]}, 0x1dc}, 0x1, 0x0, 0x0, 0x10}, 0x400c8c0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2800000010000108fdffffff00000008fa000000", @ANYRES32=0x0, @ANYBLOB="000000002104020008001b0000000000"], 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x8024) r3 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, 0x0, 0x0) (async) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, 0x0, 0x0) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_DEL_VIF(r4, 0x0, 0x15, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3}, {}, {0xe, 0xd}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x14, 0x45, 0x9, 0x4, 0x25dfdbfd, {0x2}}, 0x14}}, 0x0) (async) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x14, 0x45, 0x9, 0x4, 0x25dfdbfd, {0x2}}, 0x14}}, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @loopback}, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000000c0)=@ipv6_newroute={0x2c, 0x18, 0x111, 0xffffffff, 0x0, {0xa, 0x60, 0x0, 0x0, 0xff, 0x0, 0xff, 0x6}, [@RTA_PRIORITY={0x8, 0x6, 0xf7}, @RTA_OIF={0x8}]}, 0x2c}}, 0x0) ioctl$NILFS_IOCTL_GET_VINFO(r9, 0xc0186e86, &(0x7f0000000300)={&(0x7f0000000280)=[{0x1, 0xbd53, 0xc, 0x6}, {0x7fff, 0xfffffffffffffffa, 0x5, 0x3}], 0x2, 0x20, 0x400, 0x1}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=@newlink={0x4c, 0x10, 0x1, 0x470bd27, 0x25dfd402, {0x0, 0x0, 0x0, r10, 0x64e90, 0x16ac1}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0x14, 0x5, 0x0, 0x1, [@IFLA_BRPORT_MCAST_FLOOD={0x5}, @IFLA_BRPORT_MCAST_TO_UCAST={0x5}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x400c080}, 0x200088c2) (async) sendmsg$nl_route(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=@newlink={0x4c, 0x10, 0x1, 0x470bd27, 0x25dfd402, {0x0, 0x0, 0x0, r10, 0x64e90, 0x16ac1}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0x14, 0x5, 0x0, 0x1, [@IFLA_BRPORT_MCAST_FLOOD={0x5}, @IFLA_BRPORT_MCAST_TO_UCAST={0x5}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x400c080}, 0x200088c2) ioctl$SIOCGIFHWADDR(r1, 0x8927, &(0x7f0000000240)={'xfrm0\x00'}) (async) ioctl$SIOCGIFHWADDR(r1, 0x8927, &(0x7f0000000240)={'xfrm0\x00'}) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000380)='htcp', 0x4) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000feff04000000"], 0x50) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000feff04000000"], 0x50) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) (async) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x7, 0x4, &(0x7f0000000480)=ANY=[], &(0x7f00000005c0)='syzkaller\x00', 0x6}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x7, 0x4, &(0x7f0000000480)=ANY=[], &(0x7f00000005c0)='syzkaller\x00', 0x6}, 0x94) 55.946252ms ago: executing program 0 (id=3048): socket$phonet_pipe(0x23, 0x5, 0x2) (async) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200087ad, &(0x7f0000e68000)={0x2, 0x4e20, @remote}, 0x10) (async) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='dctcp', 0x5) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000009400000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000340)={'syztnl0\x00', &(0x7f0000000280)={'syztnl1\x00', 0x0, 0x700, 0x40, 0x7, 0x1, {{0x14, 0x4, 0x1, 0x35, 0x50, 0x64, 0x0, 0x9, 0x29, 0x0, @empty, @private=0xa010100, {[@cipso={0x86, 0x17, 0x3, [{0x7, 0x8, "8331c24af919"}, {0x2, 0x9, "3ddc4ccf2d7388"}]}, @ra={0x94, 0x4}, @cipso={0x86, 0x10, 0x1, [{0x1, 0x6, "953503e7"}, {0x5, 0x4, "54a1"}]}, @noop, @cipso={0x86, 0xe, 0x2, [{0x5, 0x8, "3e4b672ce92c"}]}]}}}}}) (async) r2 = socket$kcm(0x10, 0x2, 0x4) (async) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000003900)={0x14, 0x16, 0xa01, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) (async) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000180)={0x26, 'aead\x00', 0x0, 0x0, 'authencesn(wp512-generic,cbc-camellia-aesni-avx2)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0) r5 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r5, &(0x7f0000002680)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000040)="18", 0x1}], 0x1}}, {{&(0x7f0000000140)={0xa, 0x4e20, 0x0, @private0, 0x80000001}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000180)="ed", 0x1}], 0x1}}], 0x2, 0x0) (async) close(0x3) (async) socketpair(0x26, 0x800, 0x6, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r8 = socket$inet_sctp(0x2, 0x5, 0x84) close(r8) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) (async) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r9, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) sendmsg$inet_sctp(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000440)="be6f88e904006dd2bd0117c586023380ec289d6c15d3fc0fb99d7337093227523ac2fe6bc9040e01b630dcecf43a9dc2ec73ca8323adbd5e3a0b91ebec615dfb1a23c01b1977a0b14dc32cafe1a70aaa8fb8a3683c7a114b56dd7f22da4178ffd809abddedaa6dfd4637286f12610033f3a62b203f7432b1ce1d701f3b38d77f0fd821733693a34566fd7aba12f7c8f6ff8092e2028fafa4bf4fa980508d371217af62f17c4eac6032968e543fd5a565b8efc372aa05a1b5add6c58ac7d8f828a9bfcb1081ffaecb10e29000"/219, 0xfe98}], 0x1, &(0x7f00000000c0)=ANY=[@ANYBLOB="2000000000000000840000000200000006000400280100000b008002", @ANYRES32=r10], 0x20, 0x6044}, 0x6) (async) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r6, 0x84, 0x13, &(0x7f0000000040)={r10, 0x40}, &(0x7f0000000140)=0x8) (async) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, 0x0, 0x0) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000380)="5c00000012006bab9e3fe3d86e6c1d000014a10d00000000000004b68675f8001d000a00a0e69ee517d34460bc24eab556a705251e6182949a36c23d3b48dffefffffffffffffff60a64c9f4080003fe060100000400020015b53631", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x94) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r7, 0x6, 0x1d, &(0x7f0000000100)={0xb, 0x5, 0x9068, 0x80, 0x101}, 0x14) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000a00)={0x14, 0x40, 0x10, 0x70bd2b, 0x0, {0x4, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 0s ago: executing program 0 (id=3049): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0xf, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000000000000003f00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b707000014000000b7060000000000008500000005000000bf0900000000000035090100000000009500000000000000bf910000000000005607fdff010000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x68, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1010000}, 0x94) kernel console output (not intermixed with test programs): 13616] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 374.953438][T13616] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.015073][T13616] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 375.031793][T13635] netlink: 'syz.4.2080': attribute type 13 has an invalid length. [ 375.039338][T13616] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.259386][T13642] netlink: 'syz.0.2082': attribute type 1 has an invalid length. [ 375.317176][T13616] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 375.327445][T13616] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.524187][T13651] __nla_validate_parse: 3 callbacks suppressed [ 375.524214][T13651] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2086'. [ 375.534377][T13653] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.2085'. [ 375.562138][ T693] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 375.564346][T13651] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2086'. [ 375.584608][ T693] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 375.628784][ T48] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 375.651257][ T48] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 375.733936][T13662] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2088'. [ 375.746806][T13662] xt_hashlimit: size too large, truncated to 1048576 [ 375.756912][ T693] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 375.782250][ T693] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 375.866431][ T693] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 375.902823][ T693] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.263590][T13685] netlink: 88 bytes leftover after parsing attributes in process `syz.2.2096'. [ 376.273168][T13685] nbd: must specify a size in bytes for the device [ 376.510050][T13696] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2099'. [ 376.529290][T13696] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2099'. [ 376.775961][T13710] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2104'. [ 376.795894][T13710] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2104'. [ 376.956809][T13710] pim6reg1: entered promiscuous mode [ 376.974457][T13710] pim6reg1: entered allmulticast mode [ 377.068210][T13721] netlink: 'syz.4.2108': attribute type 4 has an invalid length. [ 377.119089][T13724] netlink: 'syz.4.2108': attribute type 4 has an invalid length. [ 377.364840][T13731] netlink: 'syz.3.2110': attribute type 1 has an invalid length. [ 377.394504][T13731] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2110'. [ 377.416677][T13731] batman_adv: batadv0: Removing interface: dummy0 [ 377.433614][T13731] netlink: 'syz.3.2110': attribute type 10 has an invalid length. [ 377.450437][T13731] dummy0: entered promiscuous mode [ 377.581004][T13735] syzkaller1: entered promiscuous mode [ 377.586710][T13735] syzkaller1: entered allmulticast mode [ 377.856091][T13744] netlink: 'syz.0.2114': attribute type 18 has an invalid length. [ 377.972137][T13754] netlink: 'syz.4.2118': attribute type 1 has an invalid length. [ 377.982034][T13754] netlink: 'syz.4.2118': attribute type 1 has an invalid length. [ 377.991005][T13754] netlink: 'syz.4.2118': attribute type 8 has an invalid length. [ 378.196479][T13761] syzkaller0: entered promiscuous mode [ 378.220482][T13761] syzkaller0: entered allmulticast mode [ 378.374614][T13758] ip6tnl0 speed is unknown, defaulting to 1000 [ 378.456720][T13773] 8021q: adding VLAN 0 to HW filter on device bond24 [ 378.501639][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.286336][ T8601] net_ratelimit: 60 callbacks suppressed [ 379.286359][ T8601] bond29: (slave bridge6): failed to get link speed/duplex [ 379.316488][T11550] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 379.419419][ T8601] bond29: (slave bridge6): failed to get link speed/duplex [ 379.511810][ T3322] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 379.539300][ T8598] bond29: (slave bridge6): failed to get link speed/duplex [ 379.672446][T13826] tipc: Enabled bearer , priority 0 [ 379.811469][T13826] syzkaller0: entered promiscuous mode [ 379.827593][T13826] syzkaller0: entered allmulticast mode [ 379.840093][T13826] tipc: Resetting bearer [ 380.091890][ T3322] tipc: Resetting bearer [ 380.109528][ T3322] bond29: (slave bridge6): failed to get link speed/duplex [ 380.117819][T13824] tipc: Resetting bearer [ 380.351246][T11550] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 380.442592][T13874] xt_CT: You must specify a L4 protocol and not use inversions on it [ 380.582216][ T5765] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 380.659458][ T8601] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 381.062933][ T5765] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 382.131847][T13824] tipc: Disabling bearer [ 382.556320][T13898] ip6tnl0 speed is unknown, defaulting to 1000 [ 382.770264][T13899] FAULT_INJECTION: forcing a failure. [ 382.770264][T13899] name failslab, interval 1, probability 0, space 0, times 0 [ 382.798011][T13899] CPU: 1 UID: 0 PID: 13899 Comm: syz.2.2154 Not tainted syzkaller #0 PREEMPT(full) [ 382.798040][T13899] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 382.798053][T13899] Call Trace: [ 382.798061][T13899] [ 382.798069][T13899] dump_stack_lvl+0xe8/0x150 [ 382.798101][T13899] should_fail_ex+0x412/0x560 [ 382.798131][T13899] should_failslab+0xa8/0x100 [ 382.798153][T13899] ? ptlock_alloc+0x20/0x70 [ 382.798180][T13899] kmem_cache_alloc_noprof+0x87/0x650 [ 382.798206][T13899] ? alloc_pages_mpol+0x3c0/0x490 [ 382.798235][T13899] ptlock_alloc+0x20/0x70 [ 382.798261][T13899] pte_alloc_one+0x7a/0x370 [ 382.798291][T13899] __do_fault+0xd1/0x2a0 [ 382.798323][T13899] do_pte_missing+0x601/0x33f0 [ 382.798356][T13899] ? mtree_range_walk+0x6f9/0x8b0 [ 382.798528][T13899] handle_mm_fault+0x1bf2/0x3170 [ 382.798567][T13899] ? handle_mm_fault+0xf1/0x3170 [ 382.798600][T13899] ? __pfx_handle_mm_fault+0x10/0x10 [ 382.798651][T13899] ? lock_mm_and_find_vma+0xa7/0x340 [ 382.798701][T13899] do_user_addr_fault+0x75b/0x1340 [ 382.798740][T13899] exc_page_fault+0x6a/0xc0 [ 382.798764][T13899] asm_exc_page_fault+0x26/0x30 [ 382.798784][T13899] RIP: 0010:rep_movs_alternative+0x11/0x90 [ 382.798811][T13899] Code: e9 14 57 04 00 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 83 f9 40 73 44 83 f9 08 73 25 85 c9 74 0f 8a 06 <88> 07 48 ff c7 48 ff c6 48 ff c9 75 f1 c3 cc cc cc cc 66 2e 0f 1f [ 382.798828][T13899] RSP: 0018:ffffc9000e307060 EFLAGS: 00050202 [ 382.798847][T13899] RAX: ffffffff84b1c000 RBX: 0000000000000004 RCX: 0000000000000004 [ 382.798860][T13899] RDX: 0000000000000000 RSI: ffffc9000e307170 RDI: 0000200000000100 [ 382.798874][T13899] RBP: 0000000000000000 R08: 0000000000000003 R09: 0000000000000004 [ 382.798885][T13899] R10: dffffc0000000000 R11: fffff52001c60e2e R12: 0000200000000104 [ 382.798898][T13899] R13: 00007ffffffff000 R14: ffffc9000e307170 R15: 0000200000000100 [ 382.798921][T13899] ? _copy_to_user+0x30/0xb0 [ 382.798953][T13899] _copy_to_user+0x8a/0xb0 [ 382.798983][T13899] copy_to_sockptr+0x5e/0xa0 [ 382.799013][T13899] do_tcp_getsockopt+0x1e77/0x2940 [ 382.799050][T13899] ? __pfx_do_tcp_getsockopt+0x10/0x10 [ 382.799106][T13899] ? call_rcu+0x644/0x890 [ 382.799130][T13899] ? lockdep_hardirqs_on+0x7a/0x110 [ 382.799163][T13899] ? evict+0x95b/0xb10 [ 382.799192][T13899] ? __pfx_evict+0x10/0x10 [ 382.799225][T13899] ? _raw_spin_unlock+0x28/0x50 [ 382.799251][T13899] ? iput+0xb25/0xe80 [ 382.799283][T13899] ? __mptcp_nmpc_sk+0x607/0x790 [ 382.799313][T13899] tcp_getsockopt+0x83/0x130 [ 382.799346][T13899] mptcp_getsockopt+0x109f/0x1ed0 [ 382.799376][T13899] ? process_measurement+0x195e/0x1c80 [ 382.799400][T13899] ? process_measurement+0x311/0x1c80 [ 382.799422][T13899] ? __pfx_mptcp_getsockopt+0x10/0x10 [ 382.799456][T13899] ? __pfx_process_measurement+0x10/0x10 [ 382.799479][T13899] ? tomoyo_check_open_permission+0x38e/0x470 [ 382.799512][T13899] ? __lock_acquire+0x6b5/0x2cf0 [ 382.799540][T13899] ? __lock_acquire+0x6b5/0x2cf0 [ 382.799563][T13899] ? __lock_acquire+0x6b5/0x2cf0 [ 382.799594][T13899] ? unwind_next_frame+0xa6/0x2550 [ 382.799633][T13899] ? __lock_acquire+0x6b5/0x2cf0 [ 382.799668][T13899] ? __lock_acquire+0x6b5/0x2cf0 [ 382.799696][T13899] ? aa_file_perm+0x192/0x15e0 [ 382.799721][T13899] ? aa_label_sk_perm+0x532/0x6e0 [ 382.799756][T13899] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 382.799784][T13899] ? _parse_integer_limit+0x1ae/0x1f0 [ 382.799822][T13899] ? __lock_acquire+0x6b5/0x2cf0 [ 382.799867][T13899] ? __might_fault+0xaf/0x130 [ 382.799893][T13899] ? __might_fault+0xaf/0x130 [ 382.799932][T13899] ? sock_common_getsockopt+0x2d/0xb0 [ 382.799962][T13899] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 382.799990][T13899] do_sock_getsockopt+0x51d/0x7e0 [ 382.800018][T13899] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 382.800056][T13899] ? __fget_files+0x3a0/0x420 [ 382.800078][T13899] ? __fget_files+0x2a/0x420 [ 382.800109][T13899] __x64_sys_getsockopt+0x1a4/0x240 [ 382.800136][T13899] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 382.800157][T13899] do_syscall_64+0x174/0x580 [ 382.800176][T13899] ? trace_irq_disable+0x3b/0x140 [ 382.800204][T13899] ? clear_bhb_loop+0x40/0x90 [ 382.800228][T13899] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 382.800247][T13899] RIP: 0033:0x7fce17d9ce59 [ 382.800264][T13899] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 382.800279][T13899] RSP: 002b:00007fce18c0c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 382.800297][T13899] RAX: ffffffffffffffda RBX: 00007fce18016090 RCX: 00007fce17d9ce59 [ 382.800310][T13899] RDX: 000000000000001a RSI: 0000000000000006 RDI: 0000000000000005 [ 382.800321][T13899] RBP: 00007fce18c0c090 R08: 0000200000000100 R09: 0000000000000000 [ 382.800333][T13899] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 382.800343][T13899] R13: 00007fce18016128 R14: 00007fce18016090 R15: 00007fff49fb92f8 [ 382.800375][T13899] [ 383.601029][T13914] __nla_validate_parse: 10 callbacks suppressed [ 383.601048][T13914] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2159'. [ 383.671085][T13913] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2158'. [ 384.074752][T13927] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 384.299522][ T8601] net_ratelimit: 20 callbacks suppressed [ 384.299542][ T8601] bond29: (slave bridge6): failed to get link speed/duplex [ 384.439484][ T8598] bond29: (slave bridge6): failed to get link speed/duplex [ 384.506072][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 384.566380][ T8596] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 384.581652][ T8598] bond29: (slave bridge6): failed to get link speed/duplex [ 384.709353][ T8598] bond29: (slave bridge6): failed to get link speed/duplex [ 384.869322][ T693] bond29: (slave bridge6): failed to get link speed/duplex [ 385.039309][ T8596] bond29: (slave bridge6): failed to get link speed/duplex [ 385.054510][T13935] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2165'. [ 385.190274][ T8598] bond29: (slave bridge6): failed to get link speed/duplex [ 385.329466][ T8596] bond29: (slave bridge6): failed to get link speed/duplex [ 385.462365][T13958] ip6tnl0 speed is unknown, defaulting to 1000 [ 385.779418][T13970] x_tables: duplicate underflow at hook 1 [ 385.824171][T13972] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2176'. [ 385.847054][T13972] validate_nla: 1 callbacks suppressed [ 385.847070][T13972] netlink: 'syz.2.2176': attribute type 1 has an invalid length. [ 385.867982][T13974] IPVS: set_ctl: invalid protocol: 41 224.0.0.2:20003 [ 385.896234][T13974] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2177'. [ 385.928078][T13972] 8021q: adding VLAN 0 to HW filter on device bond25 [ 385.949868][T13979] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2177'. [ 385.976826][T13972] netlink: 840 bytes leftover after parsing attributes in process `syz.2.2176'. [ 385.999735][T13979] netlink: 348 bytes leftover after parsing attributes in process `syz.4.2177'. [ 386.009068][T13979] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2177'. [ 386.024353][T13979] netlink: 348 bytes leftover after parsing attributes in process `syz.4.2177'. [ 386.353290][T13989] batadv_slave_1: entered promiscuous mode [ 387.410107][T14034] 8021q: adding VLAN 0 to HW filter on device bond26 [ 387.498688][T14043] ip6tnl0 speed is unknown, defaulting to 1000 [ 387.922236][ T693] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 387.944246][ T693] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 387.971298][ T693] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 387.988243][ T693] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 388.527127][T14072] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 388.575251][T14072] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 388.804569][T14072] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 388.825421][T14087] __nla_validate_parse: 9 callbacks suppressed [ 388.825440][T14087] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2206'. [ 388.846371][T14072] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 389.074943][T14092] veth7: entered allmulticast mode [ 389.088427][T14092] bond21: (slave veth7): Enslaving as an active interface with an up link [ 389.117790][T14096] bond21 (unregistering): (slave veth7): Releasing backup interface [ 389.133292][T14096] bond21 (unregistering): Released all slaves [ 389.237023][T14072] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 389.251324][T14072] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 389.323455][T14072] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 389.333929][T14072] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 389.355379][T14099] tun0: tun_chr_ioctl cmd 1074025681 [ 389.419626][ T8604] net_ratelimit: 26 callbacks suppressed [ 389.419661][ T8604] bond29: (slave bridge6): failed to get link speed/duplex [ 389.497147][ T8604] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 389.525739][ T8604] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 389.593865][T14104] FAULT_INJECTION: forcing a failure. [ 389.593865][T14104] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 389.622568][ T8604] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 389.641807][ T8604] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 389.669960][T14104] CPU: 1 UID: 0 PID: 14104 Comm: syz.3.2210 Not tainted syzkaller #0 PREEMPT(full) [ 389.669987][T14104] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 389.670004][T14104] Call Trace: [ 389.670012][T14104] [ 389.670020][T14104] dump_stack_lvl+0xe8/0x150 [ 389.670047][T14104] should_fail_ex+0x412/0x560 [ 389.670072][T14104] _copy_from_user+0x2d/0xb0 [ 389.670097][T14104] ___sys_recvmsg+0x175/0x590 [ 389.670127][T14104] ? __pfx____sys_recvmsg+0x10/0x10 [ 389.670155][T14104] ? __fget_files+0x2a/0x420 [ 389.670209][T14104] do_recvmmsg+0x334/0x800 [ 389.670241][T14104] ? __pfx_do_recvmmsg+0x10/0x10 [ 389.670276][T14104] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 389.670317][T14104] __x64_sys_recvmmsg+0x198/0x250 [ 389.670343][T14104] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 389.670375][T14104] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 389.670396][T14104] do_syscall_64+0x174/0x580 [ 389.670415][T14104] ? trace_irq_disable+0x3b/0x140 [ 389.670443][T14104] ? clear_bhb_loop+0x40/0x90 [ 389.670466][T14104] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 389.670485][T14104] RIP: 0033:0x7fcb7019ce59 [ 389.670502][T14104] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 389.670519][T14104] RSP: 002b:00007fcb71113028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 389.670539][T14104] RAX: ffffffffffffffda RBX: 00007fcb70416090 RCX: 00007fcb7019ce59 [ 389.670552][T14104] RDX: 00000000000003d5 RSI: 0000200000000340 RDI: 0000000000000003 [ 389.670564][T14104] RBP: 00007fcb71113090 R08: 0000000000000000 R09: 0000000000000000 [ 389.670576][T14104] R10: 45833af92e4b38ff R11: 0000000000000246 R12: 0000000000000001 [ 389.670587][T14104] R13: 00007fcb70416128 R14: 00007fcb70416090 R15: 00007fff507d0198 [ 389.670618][T14104] [ 389.674268][T14107] tipc: Enabling of bearer rejected, failed to enable media [ 389.903839][ T8601] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 389.922893][ T8601] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 389.969880][T14116] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 390.030994][T14116] batadv_slave_1: entered promiscuous mode [ 390.062490][ T48] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 390.091284][ T48] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 390.129875][ T8601] bond29: (slave bridge6): failed to get link speed/duplex [ 390.160784][T14126] openvswitch: netlink: IP tunnel dst address not specified [ 390.211985][T14133] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2217'. [ 390.233804][T14133] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2217'. [ 390.242948][ T8596] bond29: (slave bridge6): failed to get link speed/duplex [ 390.341294][T14135] ip6tnl0 speed is unknown, defaulting to 1000 [ 390.359384][ T48] bond29: (slave bridge6): failed to get link speed/duplex [ 390.509522][ T693] bond29: (slave bridge6): failed to get link speed/duplex [ 390.629340][ T693] bond29: (slave bridge6): failed to get link speed/duplex [ 390.794716][T14146] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 390.869313][ T48] bond29: (slave bridge6): failed to get link speed/duplex [ 391.094752][T14167] FAULT_INJECTION: forcing a failure. [ 391.094752][T14167] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 391.185478][T14167] CPU: 0 UID: 0 PID: 14167 Comm: syz.0.2226 Not tainted syzkaller #0 PREEMPT(full) [ 391.185504][T14167] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 391.185515][T14167] Call Trace: [ 391.185522][T14167] [ 391.185529][T14167] dump_stack_lvl+0xe8/0x150 [ 391.185556][T14167] should_fail_ex+0x412/0x560 [ 391.185581][T14167] _copy_from_user+0x2d/0xb0 [ 391.185604][T14167] ___sys_recvmsg+0x175/0x590 [ 391.185632][T14167] ? __pfx____sys_recvmsg+0x10/0x10 [ 391.185657][T14167] ? __fget_files+0x2a/0x420 [ 391.185726][T14167] do_recvmmsg+0x334/0x800 [ 391.185758][T14167] ? __pfx_do_recvmmsg+0x10/0x10 [ 391.185792][T14167] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 391.185832][T14167] __x64_sys_recvmmsg+0x198/0x250 [ 391.185859][T14167] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 391.185891][T14167] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 391.185912][T14167] do_syscall_64+0x174/0x580 [ 391.185931][T14167] ? trace_irq_disable+0x3b/0x140 [ 391.185958][T14167] ? clear_bhb_loop+0x40/0x90 [ 391.185983][T14167] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 391.186001][T14167] RIP: 0033:0x7feafc59ce59 [ 391.186020][T14167] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 391.186036][T14167] RSP: 002b:00007feafd504028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 391.186055][T14167] RAX: ffffffffffffffda RBX: 00007feafc816090 RCX: 00007feafc59ce59 [ 391.186067][T14167] RDX: 00000000000003d5 RSI: 0000200000000340 RDI: 0000000000000003 [ 391.186079][T14167] RBP: 00007feafd504090 R08: 0000000000000000 R09: 0000000000000000 [ 391.186090][T14167] R10: 45833af92e4b38ff R11: 0000000000000246 R12: 0000000000000001 [ 391.186101][T14167] R13: 00007feafc816128 R14: 00007feafc816090 R15: 00007ffddc736bf8 [ 391.186132][T14167] [ 391.406820][T14174] xt_HMARK: proto mask must be zero with L3 mode [ 391.491295][ T8604] bond29: (slave bridge6): failed to get link speed/duplex [ 391.673941][T14178] bond18: entered promiscuous mode [ 391.708352][T14178] bond18: entered allmulticast mode [ 391.723764][T14187] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2230'. [ 391.741316][T14178] 8021q: adding VLAN 0 to HW filter on device bond18 [ 391.790760][T14182] pimreg: entered allmulticast mode [ 391.886446][T14164] syzkaller0: entered promiscuous mode [ 391.893789][T14164] syzkaller0: entered allmulticast mode [ 391.909316][ T8596] bond29: (slave bridge6): failed to get link speed/duplex [ 392.102792][T14205] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2234'. [ 392.143299][T14206] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2233'. [ 392.521220][T14210] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 394.598769][T14195] workqueue: Failed to create a rescuer kthread for wq "bond27": -EINTR [ 394.614584][T14206] veth1_to_team: entered promiscuous mode [ 394.663869][T14206] dummy0: entered promiscuous mode [ 394.689728][T14206] dummy0: left promiscuous mode [ 394.715658][T14206] veth1_to_team: left promiscuous mode [ 394.770601][ T3322] bond29: (slave bridge6): failed to get link speed/duplex [ 394.836750][T14212] ip6tnl0 speed is unknown, defaulting to 1000 [ 394.919351][ T3322] bond29: (slave bridge6): failed to get link speed/duplex [ 395.039713][ T165] bond29: (slave bridge6): failed to get link speed/duplex [ 395.152005][T14238] FAULT_INJECTION: forcing a failure. [ 395.152005][T14238] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 395.161644][ T8598] bond29: (slave bridge6): failed to get link speed/duplex [ 395.223362][T14238] CPU: 1 UID: 0 PID: 14238 Comm: syz.2.2240 Not tainted syzkaller #0 PREEMPT(full) [ 395.223387][T14238] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 395.223399][T14238] Call Trace: [ 395.223406][T14238] [ 395.223414][T14238] dump_stack_lvl+0xe8/0x150 [ 395.223442][T14238] should_fail_ex+0x412/0x560 [ 395.223467][T14238] _copy_from_user+0x2d/0xb0 [ 395.223500][T14238] ___sys_recvmsg+0x175/0x590 [ 395.223528][T14238] ? __pfx____sys_recvmsg+0x10/0x10 [ 395.223553][T14238] ? __fget_files+0x2a/0x420 [ 395.223605][T14238] do_recvmmsg+0x334/0x800 [ 395.223635][T14238] ? __pfx_do_recvmmsg+0x10/0x10 [ 395.223673][T14238] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 395.223712][T14238] __x64_sys_recvmmsg+0x198/0x250 [ 395.223738][T14238] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 395.223768][T14238] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 395.223789][T14238] do_syscall_64+0x174/0x580 [ 395.223807][T14238] ? trace_irq_disable+0x3b/0x140 [ 395.223836][T14238] ? clear_bhb_loop+0x40/0x90 [ 395.223859][T14238] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 395.223877][T14238] RIP: 0033:0x7fce17d9ce59 [ 395.223894][T14238] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 395.223909][T14238] RSP: 002b:00007fce18c0c028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 395.223929][T14238] RAX: ffffffffffffffda RBX: 00007fce18016090 RCX: 00007fce17d9ce59 [ 395.223942][T14238] RDX: 00000000000003d5 RSI: 0000200000000340 RDI: 0000000000000003 [ 395.223953][T14238] RBP: 00007fce18c0c090 R08: 0000000000000000 R09: 0000000000000000 [ 395.223964][T14238] R10: 45833af92e4b38ff R11: 0000000000000246 R12: 0000000000000001 [ 395.223975][T14238] R13: 00007fce18016128 R14: 00007fce18016090 R15: 00007fff49fb92f8 [ 395.224005][T14238] [ 395.418874][ T8601] bond29: (slave bridge6): failed to get link speed/duplex [ 395.440065][T14243] tipc: New replicast peer: 255.255.255.255 [ 395.448165][T14243] tipc: Enabled bearer , priority 10 [ 395.455074][T14243] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2243'. [ 395.465246][T14243] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2243'. [ 395.518577][T14240] syzkaller0: entered promiscuous mode [ 395.548824][T14240] syzkaller0: entered allmulticast mode [ 395.574110][ T8598] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 395.586605][T14240] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 395.679410][ T8598] bond29: (slave bridge6): failed to get link speed/duplex [ 395.728464][T14251] netlink: 'syz.2.2244': attribute type 1 has an invalid length. [ 395.839901][ T165] bond29: (slave bridge6): failed to get link speed/duplex [ 395.933461][T14257] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2248'. [ 395.962950][ T165] bond29: (slave bridge6): failed to get link speed/duplex [ 396.067473][T14267] netlink: 'syz.2.2251': attribute type 1 has an invalid length. [ 396.238764][T14267] 8021q: adding VLAN 0 to HW filter on device bond27 [ 396.338032][T14277] FAULT_INJECTION: forcing a failure. [ 396.338032][T14277] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 396.364066][T14277] CPU: 1 UID: 0 PID: 14277 Comm: syz.3.2254 Not tainted syzkaller #0 PREEMPT(full) [ 396.364093][T14277] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 396.364105][T14277] Call Trace: [ 396.364113][T14277] [ 396.364121][T14277] dump_stack_lvl+0xe8/0x150 [ 396.364148][T14277] should_fail_ex+0x412/0x560 [ 396.364175][T14277] _copy_from_user+0x2d/0xb0 [ 396.364199][T14277] ___sys_recvmsg+0x175/0x590 [ 396.364228][T14277] ? __pfx____sys_recvmsg+0x10/0x10 [ 396.364255][T14277] ? __fget_files+0x2a/0x420 [ 396.364309][T14277] do_recvmmsg+0x334/0x800 [ 396.364339][T14277] ? __pfx_do_recvmmsg+0x10/0x10 [ 396.364372][T14277] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 396.364411][T14277] __x64_sys_recvmmsg+0x198/0x250 [ 396.364437][T14277] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 396.364468][T14277] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 396.364489][T14277] do_syscall_64+0x174/0x580 [ 396.364508][T14277] ? trace_irq_disable+0x3b/0x140 [ 396.364537][T14277] ? clear_bhb_loop+0x40/0x90 [ 396.364560][T14277] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 396.364578][T14277] RIP: 0033:0x7fcb7019ce59 [ 396.364607][T14277] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 396.364621][T14277] RSP: 002b:00007fcb71113028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 396.364640][T14277] RAX: ffffffffffffffda RBX: 00007fcb70416090 RCX: 00007fcb7019ce59 [ 396.364653][T14277] RDX: 00000000000003d5 RSI: 0000200000000340 RDI: 0000000000000003 [ 396.364663][T14277] RBP: 00007fcb71113090 R08: 0000000000000000 R09: 0000000000000000 [ 396.364673][T14277] R10: 45833af92e4b38ff R11: 0000000000000246 R12: 0000000000000001 [ 396.364684][T14277] R13: 00007fcb70416128 R14: 00007fcb70416090 R15: 00007fff507d0198 [ 396.364713][T14277] [ 396.862582][T14296] xt_TPROXY: Can be used only with -p tcp or -p udp [ 396.909645][T14302] sctp: [Deprecated]: syz.0.2260 (pid 14302) Use of int in maxseg socket option. [ 396.909645][T14302] Use struct sctp_assoc_value instead [ 397.156024][T14304] bridge0: port 2(bridge_slave_1) entered disabled state [ 397.163633][T14304] bridge0: port 1(bridge_slave_0) entered disabled state [ 397.176962][T14314] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2267'. [ 397.214953][T14316] netlink: 'syz.1.2266': attribute type 1 has an invalid length. [ 397.304589][T14304] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 397.523516][T14316] 8021q: adding VLAN 0 to HW filter on device bond20 [ 397.534838][T14332] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2269'. [ 397.548981][ T3322] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 397.567517][ T3322] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 397.582568][ T3322] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 397.592584][ T3322] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 397.677508][T14332] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 397.701416][ T3322] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 397.713907][ T3322] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 397.744454][ T3322] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 397.761811][ T3322] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 397.778115][T14340] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2272'. [ 397.862691][T14346] xt_CT: You must specify a L4 protocol and not use inversions on it [ 397.912447][T14344] ip6tnl0 speed is unknown, defaulting to 1000 [ 398.070309][T14357] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2276'. [ 398.126815][T14350] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 398.156818][T14350] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 398.253191][T14350] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 398.264516][T14350] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 398.319667][T14350] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 398.342696][T14350] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 398.437498][T14350] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 398.462876][T14350] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 398.859406][T14377] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2283'. [ 398.883423][ T8598] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 398.918197][ T8598] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 399.016697][ T8598] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 399.042798][ T8598] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 399.078495][T14385] netlink: 'syz.1.2284': attribute type 10 has an invalid length. [ 399.285424][ T8598] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 399.302672][ T8598] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 399.322805][T14387] veth0_vlan: entered allmulticast mode [ 399.362209][ T8598] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 399.375548][ T8598] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 399.430006][T14393] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2288'. [ 399.465343][T14387] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2285'. [ 399.510117][ T30] audit: type=1804 audit(1780366262.660:6): pid=14395 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.2289" name="/newroot/463/cgroup.controllers" dev="tmpfs" ino=2383 res=1 errno=0 [ 399.591696][ T30] audit: type=1800 audit(1780366262.660:7): pid=14395 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2289" name="cgroup.controllers" dev="tmpfs" ino=2383 res=0 errno=0 [ 399.728688][T14400] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 399.761441][T14406] ip6tnl0 speed is unknown, defaulting to 1000 [ 399.879489][ T8598] net_ratelimit: 21 callbacks suppressed [ 399.879510][ T8598] bond29: (slave bridge6): failed to get link speed/duplex [ 400.028563][T14422] netlink: 'syz.3.2298': attribute type 1 has an invalid length. [ 400.131489][T14422] 8021q: adding VLAN 0 to HW filter on device bond21 [ 400.146606][T14433] IPVS: length: 35 != 24 [ 400.225626][T14424] veth3: entered allmulticast mode [ 400.240818][ T8596] bond29: (slave bridge6): failed to get link speed/duplex [ 400.293272][T14415] bond20 (unregistering): Released all slaves [ 400.400189][T14437] hsr0: entered promiscuous mode [ 400.440188][ T8598] bond29: (slave bridge6): failed to get link speed/duplex [ 400.530614][T14434] hsr0: left promiscuous mode [ 400.666889][T14456] __nla_validate_parse: 2 callbacks suppressed [ 400.666907][T14456] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2306'. [ 400.688154][T14458] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2307'. [ 400.705086][T14458] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2307'. [ 400.718041][T14458] netlink: 'syz.2.2307': attribute type 1 has an invalid length. [ 400.756305][T14463] openvswitch: netlink: Message has 4 unknown bytes. [ 400.769661][T14454] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2305'. [ 400.785945][T14463] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 400.809817][T14464] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 400.815559][ T8601] bond29: (slave bridge6): failed to get link speed/duplex [ 400.985444][T14468] bridge0: entered promiscuous mode [ 401.005763][T14468] bridge0: port 3(bond0) entered blocking state [ 401.012203][T14468] bridge0: port 3(bond0) entered forwarding state [ 401.039483][T14468] 8021q: adding VLAN 0 to HW filter on device bond0 [ 401.071103][T14468] 8021q: adding VLAN 0 to HW filter on device team0 [ 401.125298][T14468] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 401.295914][T14468] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 401.367665][T14468] veth1_vlan: left promiscuous mode [ 401.383275][T14468] veth1_vlan: entered promiscuous mode [ 401.398359][T14468] veth1_macvtap: left promiscuous mode [ 401.407085][T14468] veth0_macvtap: entered promiscuous mode [ 401.422499][ T8596] bridge0: port 2(bridge_slave_1) entered blocking state [ 401.429824][ T8596] bridge0: port 2(bridge_slave_1) entered forwarding state [ 401.671582][ T3322] bond29: (slave bridge6): failed to get link speed/duplex [ 401.732281][T14498] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2314'. [ 401.767517][T14494] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 401.775513][T14498] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2314'. [ 401.780428][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 401.795775][ T3322] bond29: (slave bridge6): failed to get link speed/duplex [ 401.808263][T14496] ip6tnl0 speed is unknown, defaulting to 1000 [ 401.946070][T14509] netlink: 'syz.4.2317': attribute type 62 has an invalid length. [ 401.973047][ T30] audit: type=1107 audit(1780366265.110:8): pid=14508 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 402.357309][T14526] netlink: 'syz.2.2321': attribute type 1 has an invalid length. [ 402.682332][T14526] 8021q: adding VLAN 0 to HW filter on device bond28 [ 402.884299][T14534] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2323'. [ 402.977876][T14541] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2324'. [ 403.721891][T14576] netlink: 'syz.4.2334': attribute type 1 has an invalid length. [ 403.833614][T14582] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2336'. [ 403.878715][T14576] 8021q: adding VLAN 0 to HW filter on device bond20 [ 403.904105][T14585] netlink: 212340 bytes leftover after parsing attributes in process `syz.3.2335'. [ 403.976837][T14588] netlink: 'syz.2.2337': attribute type 3 has an invalid length. [ 404.004349][T14588] netlink: 'syz.2.2337': attribute type 1 has an invalid length. [ 404.037720][T14588] NCSI netlink: No device for ifindex 0 [ 404.061563][T14588] netlink: 'syz.2.2337': attribute type 4 has an invalid length. [ 404.096554][T14588] netlink: 'syz.2.2337': attribute type 4 has an invalid length. [ 404.518373][T14616] netlink: 'syz.0.2346': attribute type 1 has an invalid length. [ 404.704182][T14616] 8021q: adding VLAN 0 to HW filter on device bond30 [ 404.950590][ T3322] net_ratelimit: 455 callbacks suppressed [ 404.950608][ T3322] bond29: (slave bridge6): failed to get link speed/duplex [ 404.962742][T14640] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 405.089261][ T8601] bond29: (slave bridge6): failed to get link speed/duplex [ 405.101373][ T8596] nci: nci_rx_work: unknown MT 0x6 [ 405.110217][T14636] bridge0: port 1(bond0) entered blocking state [ 405.138606][T14636] bridge0: port 1(bond0) entered disabled state [ 405.166985][T14636] bond0: entered allmulticast mode [ 405.194127][T14636] bond_slave_1: entered allmulticast mode [ 405.221335][T14636] syz_tun: entered allmulticast mode [ 405.257581][T14636] bond0: entered promiscuous mode [ 405.279033][T14636] bond_slave_1: entered promiscuous mode [ 405.293823][T14636] syz_tun: entered promiscuous mode [ 405.309314][ T8601] bond29: (slave bridge6): failed to get link speed/duplex [ 405.419743][ T3322] bond29: (slave bridge6): failed to get link speed/duplex [ 405.539336][ T8596] bond29: (slave bridge6): failed to get link speed/duplex [ 405.649282][ T8601] bond29: (slave bridge6): failed to get link speed/duplex [ 405.759284][ T8601] bond29: (slave bridge6): failed to get link speed/duplex [ 405.760811][T14634] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 405.869337][ T8601] bond29: (slave bridge6): failed to get link speed/duplex [ 405.960043][T14669] __nla_validate_parse: 7 callbacks suppressed [ 405.960059][T14669] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2358'. [ 406.032332][ T165] bond29: (slave bridge6): failed to get link speed/duplex [ 406.063472][T14681] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2359'. [ 406.080722][T14674] syzkaller1: tun_chr_ioctl cmd 2147767521 [ 406.167683][T14679] ip6tnl0 speed is unknown, defaulting to 1000 [ 406.305371][T14693] netlink: 256 bytes leftover after parsing attributes in process `syz.0.2363'. [ 406.349401][T14693] netlink: 80 bytes leftover after parsing attributes in process `syz.0.2363'. [ 406.807445][T14722] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2368'. [ 406.924119][ T5644] block nbd2: Receive control failed (result -32) [ 406.935230][ T5646] block nbd2: Receive control failed (result -32) [ 407.008192][T14727] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2371'. [ 407.127557][T14727] 8021q: adding VLAN 0 to HW filter on device bond21 [ 407.405241][T14753] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2376'. [ 407.647012][T14761] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2378'. [ 407.876597][T14770] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2381'. [ 408.105242][T14776] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2382'. [ 408.297942][T14783] netlink: 'syz.3.2384': attribute type 1 has an invalid length. [ 408.312803][T14788] netlink: 'syz.0.2386': attribute type 1 has an invalid length. [ 408.442782][T14783] 8021q: adding VLAN 0 to HW filter on device bond22 [ 408.861560][T14812] ip6tnl0 speed is unknown, defaulting to 1000 [ 409.021864][T14830] FAULT_INJECTION: forcing a failure. [ 409.021864][T14830] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 409.060655][T14830] CPU: 0 UID: 0 PID: 14830 Comm: syz.2.2396 Not tainted syzkaller #0 PREEMPT(full) [ 409.060682][T14830] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 409.060694][T14830] Call Trace: [ 409.060702][T14830] [ 409.060711][T14830] dump_stack_lvl+0xe8/0x150 [ 409.060740][T14830] should_fail_ex+0x412/0x560 [ 409.060768][T14830] _copy_to_user+0x31/0xb0 [ 409.060795][T14830] simple_read_from_buffer+0xe1/0x170 [ 409.060828][T14830] proc_fail_nth_read+0x1bb/0x230 [ 409.060908][T14830] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 409.060938][T14830] ? rw_verify_area+0x2a6/0x4d0 [ 409.060978][T14830] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 409.061005][T14830] vfs_read+0x20c/0xa70 [ 409.061038][T14830] ? __pfx___mutex_lock+0x10/0x10 [ 409.061061][T14830] ? __pfx_vfs_read+0x10/0x10 [ 409.061089][T14830] ? __fget_files+0x2a/0x420 [ 409.061115][T14830] ? __fget_files+0x3a0/0x420 [ 409.061136][T14830] ? __fget_files+0x2a/0x420 [ 409.061166][T14830] ksys_read+0x150/0x270 [ 409.061195][T14830] ? __pfx_ksys_read+0x10/0x10 [ 409.061230][T14830] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 409.061251][T14830] do_syscall_64+0x174/0x580 [ 409.061270][T14830] ? trace_irq_disable+0x3b/0x140 [ 409.061306][T14830] ? clear_bhb_loop+0x40/0x90 [ 409.061330][T14830] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 409.061348][T14830] RIP: 0033:0x7fce17d5d68e [ 409.061365][T14830] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 409.061381][T14830] RSP: 002b:00007fce18c0bfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 409.061400][T14830] RAX: ffffffffffffffda RBX: 00007fce18c0c6c0 RCX: 00007fce17d5d68e [ 409.061413][T14830] RDX: 000000000000000f RSI: 00007fce18c0c0a0 RDI: 0000000000000004 [ 409.061423][T14830] RBP: 00007fce18c0c090 R08: 0000000000000000 R09: 0000000000000000 [ 409.061435][T14830] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 409.061446][T14830] R13: 00007fce18016128 R14: 00007fce18016090 R15: 00007fff49fb92f8 [ 409.061477][T14830] [ 409.691850][T14829] ip6tnl0 speed is unknown, defaulting to 1000 [ 409.829535][T14846] netlink: 'syz.0.2401': attribute type 1 has an invalid length. [ 409.896014][T14846] 8021q: adding VLAN 0 to HW filter on device bond31 [ 409.954935][T14845] "syz.4.2400" (14845) uses obsolete ecb(arc4) skcipher [ 410.048773][T14849] bridge8: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 410.080848][ T8596] net_ratelimit: 31 callbacks suppressed [ 410.080867][ T8596] bond29: (slave bridge6): failed to get link speed/duplex [ 410.168229][T14855] syzkaller1: entered promiscuous mode [ 410.174592][T14855] syzkaller1: entered allmulticast mode [ 410.891108][ T8601] bond29: (slave bridge6): failed to get link speed/duplex [ 411.010005][ T3322] bond29: (slave bridge6): failed to get link speed/duplex [ 411.161485][ T693] bond29: (slave bridge6): failed to get link speed/duplex [ 411.268780][T14891] __nla_validate_parse: 6 callbacks suppressed [ 411.268798][T14891] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2415'. [ 411.293379][ T693] bond29: (slave bridge6): failed to get link speed/duplex [ 411.356482][T14893] tipc: Started in network mode [ 411.377077][T14893] tipc: Node identity ac14140f, cluster identity 4711 [ 411.391615][T14893] tipc: New replicast peer: 255.255.255.255 [ 411.405955][T14893] tipc: Enabled bearer , priority 10 [ 411.429623][ T8598] bond29: (slave bridge6): failed to get link speed/duplex [ 411.570099][ T8598] bond29: (slave bridge6): failed to get link speed/duplex [ 411.586531][T14903] netlink: 'syz.0.2414': attribute type 1 has an invalid length. [ 411.619340][T14903] netlink: 'syz.0.2414': attribute type 2 has an invalid length. [ 411.656131][T14906] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2420'. [ 411.671209][T14906] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2420'. [ 411.694865][ T693] bond29: (slave bridge6): failed to get link speed/duplex [ 411.819879][ T3305] bond29: (slave bridge6): failed to get link speed/duplex [ 411.837091][T14906] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2420'. [ 411.983210][ T693] bond29: (slave bridge6): failed to get link speed/duplex [ 412.423807][T14952] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2427'. [ 412.437192][T14955] netlink: 42 bytes leftover after parsing attributes in process `syz.1.2426'. [ 412.488042][T14958] netlink: 'syz.4.2429': attribute type 1 has an invalid length. [ 412.525878][T14962] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2430'. [ 412.561275][T14958] 8021q: adding VLAN 0 to HW filter on device bond22 [ 412.570120][T11547] tipc: Node number set to 2886997007 [ 412.765218][T14967] tipc: Failed to remove unknown binding: 66,0,0/0:1956979413/1956979415 [ 412.803209][T14967] tipc: Failed to remove unknown binding: 66,0,0/0:1956979413/1956979414 [ 412.821410][T14974] netlink: 'syz.3.2433': attribute type 11 has an invalid length. [ 412.896639][T14977] tipc: Failed to remove unknown binding: 66,0,0/0:1956979413/1956979415 [ 412.905894][T14977] tipc: Failed to remove unknown binding: 66,0,0/0:1956979413/1956979414 [ 412.980650][T14976] block nbd3: server does not support multiple connections per device. [ 413.002646][T14976] block nbd3: shutting down sockets [ 413.593906][T15016] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2445'. [ 414.127943][T15048] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2453'. [ 414.155242][T15048] bridge8: port 1(gretap4) entered blocking state [ 414.161972][T15048] bridge8: port 1(gretap4) entered disabled state [ 414.168552][T15048] gretap4: entered allmulticast mode [ 414.176085][T15048] gretap4: entered promiscuous mode [ 414.452212][T15061] xt_hashlimit: size too large, truncated to 1048576 [ 414.503357][T15063] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2459'. [ 414.786456][T15073] sctp: [Deprecated]: syz.3.2460 (pid 15073) Use of struct sctp_assoc_value in delayed_ack socket option. [ 414.786456][T15073] Use struct sctp_sack_info instead [ 414.895664][T15076] netlink: 'syz.1.2461': attribute type 1 has an invalid length. [ 414.964234][T15081] netlink: 'syz.0.2462': attribute type 13 has an invalid length. [ 415.202153][T15080] sch_tbf: burst 6 is lower than device gretap0 mtu (1476) ! [ 415.209708][ T48] net_ratelimit: 29 callbacks suppressed [ 415.209726][ T48] bond29: (slave bridge6): link status up again after 0 ms [ 415.239277][ T36] bond29: (slave bridge6): link status up again after 0 ms [ 415.250785][T15083] macvlan3: entered promiscuous mode [ 415.256199][T15083] macvlan3: entered allmulticast mode [ 415.263908][ T36] bond29: (slave bridge6): link status up again after 0 ms [ 415.289313][ T60] bond29: (slave bridge6): link status up again after 0 ms [ 415.296842][ T60] bond29: (slave bridge6): failed to get link speed/duplex [ 415.439865][ T48] bond29: (slave bridge6): failed to get link speed/duplex [ 415.600816][ T48] bond29: (slave bridge6): failed to get link speed/duplex [ 415.621650][ T5646] Bluetooth: hci3: command 0x0406 tx timeout [ 415.633538][T15105] tipc: Enabled bearer , priority 0 [ 415.641740][T15109] netlink: 'syz.0.2468': attribute type 11 has an invalid length. [ 415.671564][T15105] syzkaller0: entered promiscuous mode [ 415.702982][T15105] syzkaller0: entered allmulticast mode [ 415.739281][ T3346] bond29: (slave bridge6): failed to get link speed/duplex [ 415.833015][T15120] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 416.019552][ T60] bond29: (slave bridge6): failed to get link speed/duplex [ 416.042239][T15125] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 416.073392][T15104] tipc: Resetting bearer [ 416.134443][T15104] tipc: Disabling bearer [ 416.157908][T15134] pimreg9: entered allmulticast mode [ 416.169690][ T48] bond29: (slave bridge6): failed to get link speed/duplex [ 416.316200][T15141] dvmrp8: left allmulticast mode [ 416.512803][ T5646] block nbd3: Receive control failed (result -32) [ 417.027042][T15177] __nla_validate_parse: 9 callbacks suppressed [ 417.027062][T15177] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2488'. [ 417.074359][ T30] audit: type=1804 audit(1780366280.220:9): pid=15173 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.2486" name="/newroot/498/cgroup.controllers" dev="tmpfs" ino=2575 res=1 errno=0 [ 417.110618][ T30] audit: type=1800 audit(1780366280.220:10): pid=15173 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2486" name="cgroup.controllers" dev="tmpfs" ino=2575 res=0 errno=0 [ 417.186456][ T30] audit: type=1804 audit(1780366280.330:11): pid=15184 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.2486" name="/newroot/498/cgroup.controllers" dev="tmpfs" ino=2575 res=1 errno=0 [ 417.291727][T15190] netlink: 'syz.3.2493': attribute type 1 has an invalid length. [ 417.567439][T15190] workqueue: Failed to create a rescuer kthread for wq "bond23": -EINTR [ 418.195516][T15228] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma? [ 418.230184][T15216] bond23: (slave bond_slave_1): Device is not our slave [ 418.237182][T15216] bond23: option active_slave: invalid value (bond_slave_1) [ 418.292836][T15216] bond23 (unregistering): Released all slaves [ 418.564650][T15245] bond23: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 418.617700][T15245] bond23: (slave lo): Enslaving as an active interface with an up link [ 418.791732][T15261] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2512'. [ 418.801089][T15261] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2512'. [ 419.163818][T15276] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2516'. [ 419.236358][T15283] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2520'. [ 419.249689][T15283] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2520'. [ 419.282001][T15281] netlink: 'syz.2.2519': attribute type 16 has an invalid length. [ 419.293187][T15286] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2520'. [ 419.424699][T15283] tipc: Enabling of bearer rejected, failed to enable media [ 419.621593][T15294] Bluetooth: MGMT ver 1.23 [ 420.190537][T15321] netlink: 'syz.0.2526': attribute type 21 has an invalid length. [ 420.226356][T15321] netlink: 168 bytes leftover after parsing attributes in process `syz.0.2526'. [ 420.351717][T15330] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2529'. [ 420.367887][T15321] ipip0: entered promiscuous mode [ 420.400216][ T36] net_ratelimit: 32 callbacks suppressed [ 420.400237][ T36] bond29: (slave bridge6): failed to get link speed/duplex [ 420.447148][ T30] audit: type=1800 audit(1780366283.590:12): pid=15298 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2521" name="memory.events" dev="tmpfs" ino=2648 res=0 errno=0 [ 420.545782][T15333] ip6tnl0 speed is unknown, defaulting to 1000 [ 420.552461][ T8598] bond29: (slave bridge6): failed to get link speed/duplex [ 420.669538][ T8596] bond29: (slave bridge6): failed to get link speed/duplex [ 420.789645][ T8598] bond29: (slave bridge6): failed to get link speed/duplex [ 420.858760][T15343] bond0: Caught tx_queue_len zero misconfig [ 420.910407][ T60] bond29: (slave bridge6): failed to get link speed/duplex [ 421.013656][T15349] netlink: 'syz.3.2533': attribute type 5 has an invalid length. [ 421.049258][ T48] bond29: (slave bridge6): failed to get link speed/duplex [ 421.096150][T15352] sctp: [Deprecated]: syz.3.2533 (pid 15352) Use of int in maxseg socket option. [ 421.096150][T15352] Use struct sctp_assoc_value instead [ 421.377574][T15360] netlink: 'syz.3.2536': attribute type 1 has an invalid length. [ 421.452344][T15365] netlink: 'syz.4.2537': attribute type 1 has an invalid length. [ 421.650089][T15365] 8021q: adding VLAN 0 to HW filter on device bond24 [ 421.683847][T15381] sctp: [Deprecated]: syz.1.2540 (pid 15381) Use of int in max_burst socket option deprecated. [ 421.683847][T15381] Use struct sctp_assoc_value instead [ 421.726282][T15371] vlan3: entered allmulticast mode [ 421.741079][T15371] bond24: entered allmulticast mode [ 421.747457][T15379] netlink: 'syz.1.2540': attribute type 21 has an invalid length. [ 421.766504][ T48] bond29: (slave bridge6): failed to get link speed/duplex [ 421.787622][T15379] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2540'. [ 421.889904][ T48] bond29: (slave bridge6): failed to get link speed/duplex [ 422.023546][T15395] netlink: 'syz.4.2542': attribute type 12 has an invalid length. [ 422.061072][T15388] __nla_validate_parse: 1 callbacks suppressed [ 422.061087][T15388] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2543'. [ 422.112120][ T48] bond29: (slave bridge6): failed to get link speed/duplex [ 422.135026][T15402] netlink: 'syz.3.2544': attribute type 11 has an invalid length. [ 422.146616][T15392] ip6tnl0 speed is unknown, defaulting to 1000 [ 422.169828][T15402] netlink: 'syz.3.2544': attribute type 5 has an invalid length. [ 422.204188][T15402] netlink: 6548 bytes leftover after parsing attributes in process `syz.3.2544'. [ 422.309573][ T48] bond29: (slave bridge6): failed to get link speed/duplex [ 422.392020][T15410] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2547'. [ 422.571035][T15419] ip6tnl0 speed is unknown, defaulting to 1000 [ 422.834737][T15429] bond32: option xmit_hash_policy: invalid value (10) [ 422.844257][T15429] bond32 (unregistering): Released all slaves [ 425.382533][T15410] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 425.607020][T15440] netlink: 'syz.2.2552': attribute type 1 has an invalid length. [ 425.621478][T15441] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2553'. [ 425.676449][T15441] netlink: 312 bytes leftover after parsing attributes in process `syz.0.2553'. [ 425.710063][T15441] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2553'. [ 425.737892][T15440] 8021q: adding VLAN 0 to HW filter on device bond29 [ 425.747079][T15446] lo: Caught tx_queue_len zero misconfig [ 425.808688][T15444] vlan8: entered allmulticast mode [ 425.843564][T15444] bond29: entered allmulticast mode [ 425.871007][ T60] net_ratelimit: 24 callbacks suppressed [ 425.871026][ T60] bond29: (slave bridge6): failed to get link speed/duplex [ 426.039452][ T12] bond29: (slave bridge6): failed to get link speed/duplex [ 426.160291][ T60] bond29: (slave bridge6): failed to get link speed/duplex [ 426.168852][ T30] audit: type=1804 audit(1780366289.310:13): pid=15467 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.2563" name="/newroot/509/memory.events" dev="tmpfs" ino=2616 res=1 errno=0 [ 426.193238][T15464] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2561'. [ 426.213741][T15475] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2562'. [ 426.232183][T15467] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2563'. [ 426.254113][ T30] audit: type=1800 audit(1780366289.310:14): pid=15467 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2563" name="memory.events" dev="tmpfs" ino=2616 res=0 errno=0 [ 426.286605][ T30] audit: type=1804 audit(1780366289.380:15): pid=15467 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.2563" name="/newroot/509/memory.events" dev="tmpfs" ino=2616 res=1 errno=0 [ 426.350347][T15473] ip6tnl0 speed is unknown, defaulting to 1000 [ 426.361416][ T60] bond29: (slave bridge6): failed to get link speed/duplex [ 426.509385][ T12] bond29: (slave bridge6): failed to get link speed/duplex [ 426.671662][ T12] bond29: (slave bridge6): failed to get link speed/duplex [ 426.766542][ T8590] nci: nci_rx_work: unknown MT 0x1 [ 426.770962][T15491] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 426.789708][ T48] bond29: (slave bridge6): failed to get link speed/duplex [ 426.847113][T15474] ip6tnl0 speed is unknown, defaulting to 1000 [ 427.009354][ T12] bond29: (slave bridge6): failed to get link speed/duplex [ 427.072676][T15507] FAULT_INJECTION: forcing a failure. [ 427.072676][T15507] name failslab, interval 1, probability 0, space 0, times 0 [ 427.086866][T15507] CPU: 0 UID: 0 PID: 15507 Comm: syz.0.2573 Not tainted syzkaller #0 PREEMPT(full) [ 427.086888][T15507] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 427.086901][T15507] Call Trace: [ 427.086908][T15507] [ 427.086915][T15507] dump_stack_lvl+0xe8/0x150 [ 427.086939][T15507] should_fail_ex+0x412/0x560 [ 427.086961][T15507] should_failslab+0xa8/0x100 [ 427.086978][T15507] ? ovs_flow_alloc+0x24/0x1f0 [ 427.087108][T15507] kmem_cache_alloc_noprof+0x87/0x650 [ 427.087155][T15507] ovs_flow_alloc+0x24/0x1f0 [ 427.087175][T15507] ovs_flow_cmd_new+0x2b9/0xe80 [ 427.087197][T15507] ? kasan_save_track+0x3e/0x80 [ 427.087231][T15507] ? __pfx_ovs_flow_cmd_new+0x10/0x10 [ 427.087312][T15507] ? __nla_parse+0x40/0x60 [ 427.087339][T15507] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 427.087413][T15507] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 427.087449][T15507] genl_family_rcv_msg_doit+0x22a/0x330 [ 427.087483][T15507] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 427.087524][T15507] ? bpf_lsm_capable+0x9/0x20 [ 427.087554][T15507] ? security_capable+0x7e/0x2c0 [ 427.087588][T15507] genl_rcv_msg+0x61c/0x7a0 [ 427.087621][T15507] ? __pfx_genl_rcv_msg+0x10/0x10 [ 427.087647][T15507] ? __pfx_ovs_flow_cmd_new+0x10/0x10 [ 427.087674][T15507] ? __pfx_ref_tracker_free+0x10/0x10 [ 427.087734][T15507] netlink_rcv_skb+0x232/0x4b0 [ 427.087764][T15507] ? __pfx_genl_rcv_msg+0x10/0x10 [ 427.087792][T15507] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 427.087829][T15507] ? down_read+0x270/0x2e0 [ 427.087850][T15507] ? genl_rcv+0xd/0x40 [ 427.087877][T15507] genl_rcv+0x28/0x40 [ 427.087901][T15507] netlink_unicast+0x75c/0x8e0 [ 427.087932][T15507] netlink_sendmsg+0x813/0xb40 [ 427.087965][T15507] ? __pfx_netlink_sendmsg+0x10/0x10 [ 427.087991][T15507] ? aa_sock_msg_perm+0xf1/0x1b0 [ 427.088052][T15507] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 427.088081][T15507] ____sys_sendmsg+0x972/0x9f0 [ 427.088103][T15507] ? __might_fault+0xaf/0x130 [ 427.088135][T15507] ? __pfx_____sys_sendmsg+0x10/0x10 [ 427.088167][T15507] ? import_iovec+0x73/0xa0 [ 427.088215][T15507] ___sys_sendmsg+0x2a5/0x360 [ 427.088236][T15507] ? __lock_acquire+0x6b5/0x2cf0 [ 427.088260][T15507] ? __pfx____sys_sendmsg+0x10/0x10 [ 427.088320][T15507] ? __fget_files+0x2a/0x420 [ 427.088342][T15507] ? __fget_files+0x3a0/0x420 [ 427.088377][T15507] __x64_sys_sendmsg+0x1bd/0x2a0 [ 427.088402][T15507] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 427.088434][T15507] ? __pfx_ksys_write+0x10/0x10 [ 427.088472][T15507] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 427.088493][T15507] do_syscall_64+0x174/0x580 [ 427.088512][T15507] ? trace_irq_disable+0x3b/0x140 [ 427.088541][T15507] ? clear_bhb_loop+0x40/0x90 [ 427.088564][T15507] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 427.088583][T15507] RIP: 0033:0x7feafc59ce59 [ 427.088602][T15507] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 427.088617][T15507] RSP: 002b:00007feafd525028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 427.088638][T15507] RAX: ffffffffffffffda RBX: 00007feafc815fa0 RCX: 00007feafc59ce59 [ 427.088651][T15507] RDX: 000000000000c000 RSI: 0000200000000000 RDI: 0000000000000003 [ 427.088663][T15507] RBP: 00007feafd525090 R08: 0000000000000000 R09: 0000000000000000 [ 427.088675][T15507] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 427.088686][T15507] R13: 00007feafc816038 R14: 00007feafc815fa0 R15: 00007ffddc736bf8 [ 427.088719][T15507] [ 427.499017][T15510] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2574'. [ 427.569386][ T8590] bond29: (slave bridge6): failed to get link speed/duplex [ 427.637437][T15515] netlink: 'syz.3.2574': attribute type 3 has an invalid length. [ 427.679364][ T8590] bond29: (slave bridge6): failed to get link speed/duplex [ 427.719593][T15518] veth0_to_batadv: Caught tx_queue_len zero misconfig [ 427.733086][T15519] netlink: 160 bytes leftover after parsing attributes in process `syz.3.2574'. [ 428.066664][T15526] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2574'. [ 428.326522][T15531] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2578'. [ 428.460397][T15534] pim6reg: entered allmulticast mode [ 428.494589][T15534] pim6reg: left allmulticast mode [ 428.987427][T15551] FAULT_INJECTION: forcing a failure. [ 428.987427][T15551] name failslab, interval 1, probability 0, space 0, times 0 [ 429.003165][T15551] CPU: 1 UID: 0 PID: 15551 Comm: syz.3.2585 Not tainted syzkaller #0 PREEMPT(full) [ 429.003192][T15551] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 429.003203][T15551] Call Trace: [ 429.003211][T15551] [ 429.003220][T15551] dump_stack_lvl+0xe8/0x150 [ 429.003249][T15551] should_fail_ex+0x412/0x560 [ 429.003278][T15551] should_failslab+0xa8/0x100 [ 429.003298][T15551] ? ovs_flow_alloc+0x24/0x1f0 [ 429.003322][T15551] kmem_cache_alloc_noprof+0x87/0x650 [ 429.003358][T15551] ovs_flow_alloc+0x24/0x1f0 [ 429.003385][T15551] ovs_flow_cmd_new+0x2b9/0xe80 [ 429.003412][T15551] ? kasan_save_track+0x3e/0x80 [ 429.003450][T15551] ? __pfx_ovs_flow_cmd_new+0x10/0x10 [ 429.003554][T15551] ? __nla_parse+0x40/0x60 [ 429.003603][T15551] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 429.003634][T15551] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 429.003673][T15551] genl_family_rcv_msg_doit+0x22a/0x330 [ 429.003712][T15551] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 429.003763][T15551] ? bpf_lsm_capable+0x9/0x20 [ 429.003784][T15551] ? security_capable+0x7e/0x2c0 [ 429.003820][T15551] genl_rcv_msg+0x61c/0x7a0 [ 429.003857][T15551] ? __pfx_genl_rcv_msg+0x10/0x10 [ 429.003885][T15551] ? __pfx_ovs_flow_cmd_new+0x10/0x10 [ 429.003916][T15551] ? __pfx_ref_tracker_free+0x10/0x10 [ 429.003951][T15551] netlink_rcv_skb+0x232/0x4b0 [ 429.003976][T15551] ? __pfx_genl_rcv_msg+0x10/0x10 [ 429.004006][T15551] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 429.004056][T15551] ? down_read+0x270/0x2e0 [ 429.004077][T15551] ? genl_rcv+0xd/0x40 [ 429.004107][T15551] genl_rcv+0x28/0x40 [ 429.004134][T15551] netlink_unicast+0x75c/0x8e0 [ 429.004168][T15551] netlink_sendmsg+0x813/0xb40 [ 429.004203][T15551] ? __pfx_netlink_sendmsg+0x10/0x10 [ 429.004231][T15551] ? aa_sock_msg_perm+0xf1/0x1b0 [ 429.004264][T15551] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 429.004296][T15551] ____sys_sendmsg+0x972/0x9f0 [ 429.004320][T15551] ? __might_fault+0xaf/0x130 [ 429.004354][T15551] ? __pfx_____sys_sendmsg+0x10/0x10 [ 429.004389][T15551] ? import_iovec+0x73/0xa0 [ 429.004419][T15551] ___sys_sendmsg+0x2a5/0x360 [ 429.004441][T15551] ? __lock_acquire+0x6b5/0x2cf0 [ 429.004469][T15551] ? __pfx____sys_sendmsg+0x10/0x10 [ 429.004534][T15551] ? __fget_files+0x2a/0x420 [ 429.004559][T15551] ? __fget_files+0x3a0/0x420 [ 429.004597][T15551] __x64_sys_sendmsg+0x1bd/0x2a0 [ 429.004624][T15551] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 429.004659][T15551] ? __pfx_ksys_write+0x10/0x10 [ 429.004699][T15551] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 429.004724][T15551] do_syscall_64+0x174/0x580 [ 429.004745][T15551] ? trace_irq_disable+0x3b/0x140 [ 429.004776][T15551] ? clear_bhb_loop+0x40/0x90 [ 429.004801][T15551] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 429.004822][T15551] RIP: 0033:0x7fcb7019ce59 [ 429.004841][T15551] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 429.004859][T15551] RSP: 002b:00007fcb71134028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 429.004880][T15551] RAX: ffffffffffffffda RBX: 00007fcb70415fa0 RCX: 00007fcb7019ce59 [ 429.004895][T15551] RDX: 000000000000c000 RSI: 0000200000000000 RDI: 0000000000000003 [ 429.004920][T15551] RBP: 00007fcb71134090 R08: 0000000000000000 R09: 0000000000000000 [ 429.004932][T15551] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 429.004943][T15551] R13: 00007fcb70416038 R14: 00007fcb70415fa0 R15: 00007fff507d0198 [ 429.004978][T15551] [ 429.497857][T15564] x_tables: duplicate underflow at hook 2 [ 429.605212][T15569] virt_wifi0: entered allmulticast mode [ 429.754948][T15548] syzkaller1: entered promiscuous mode [ 429.761138][T15548] syzkaller1: entered allmulticast mode [ 429.791640][T15578] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2594'. [ 429.804121][T15579] IPVS: set_ctl: invalid protocol: 50 172.20.20.170:24097 [ 429.816092][T15578] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 429.852017][T15576] xt_CT: No such helper "snmp" [ 429.931273][ T30] audit: type=1804 audit(1780366293.080:16): pid=15576 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.2593" name="/newroot/530/cgroup.controllers" dev="tmpfs" ino=2731 res=1 errno=0 [ 429.960251][ T30] audit: type=1800 audit(1780366293.080:17): pid=15576 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2593" name="cgroup.controllers" dev="tmpfs" ino=2731 res=0 errno=0 [ 430.018417][ T30] audit: type=1800 audit(1780366293.080:18): pid=15576 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2593" name="cgroup.controllers" dev="tmpfs" ino=2731 res=0 errno=0 [ 430.115034][T15587] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2598'. [ 430.163618][T15591] netlink: 'syz.3.2599': attribute type 3 has an invalid length. [ 430.171633][T15591] netlink: 'syz.3.2599': attribute type 1 has an invalid length. [ 430.179588][T15591] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2599'. [ 430.188721][T15591] NCSI netlink: No device for ifindex 0 [ 430.199039][T15591] netlink: 'syz.3.2599': attribute type 9 has an invalid length. [ 430.213626][T15594] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2600'. [ 430.224861][T15594] IPVS: ip_vs_edit_dest(): server weight less than zero [ 430.436546][T15605] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2604'. [ 430.471116][T15605] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2604'. [ 430.985025][ T8590] net_ratelimit: 20 callbacks suppressed [ 430.985044][ T8590] bond29: (slave bridge6): failed to get link speed/duplex [ 431.129634][ T8590] bond29: (slave bridge6): failed to get link speed/duplex [ 431.259256][ T8590] bond29: (slave bridge6): failed to get link speed/duplex [ 431.379461][ T12] bond29: (slave bridge6): failed to get link speed/duplex [ 431.499352][ T8590] bond29: (slave bridge6): failed to get link speed/duplex [ 431.630202][ T12] bond29: (slave bridge6): failed to get link speed/duplex [ 431.759264][ T60] bond29: (slave bridge6): failed to get link speed/duplex [ 431.879251][ T8590] bond29: (slave bridge6): failed to get link speed/duplex [ 432.010361][ T8590] bond29: (slave bridge6): failed to get link speed/duplex [ 432.150515][ T8598] bond29: (slave bridge6): failed to get link speed/duplex [ 432.221741][T15677] ip6tnl0 speed is unknown, defaulting to 1000 [ 433.128198][T15717] __nla_validate_parse: 2 callbacks suppressed [ 433.128214][T15717] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2629'. [ 433.212098][T15724] netlink: 'syz.0.2631': attribute type 1 has an invalid length. [ 433.308767][T15724] bond32: entered promiscuous mode [ 433.314837][T15724] 8021q: adding VLAN 0 to HW filter on device bond32 [ 433.378448][T15724] 8021q: adding VLAN 0 to HW filter on device bond32 [ 433.393012][T15724] bond32: (slave gre3): The slave device specified does not support setting the MAC address [ 433.405263][T15724] bond32: (slave gre3): Setting fail_over_mac to active for active-backup mode [ 433.418396][T15724] bond32: (slave gre3): making interface the new active one [ 433.426507][T15724] gre3: entered promiscuous mode [ 433.433789][T15724] bond32: (slave gre3): Enslaving as an active interface with an up link [ 433.567604][T15736] syzkaller0: entered promiscuous mode [ 433.585134][T15736] syzkaller0: entered allmulticast mode [ 433.827242][T15745] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2638'. [ 433.838467][T15745] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2638'. [ 433.922247][T15749] veth0_macvtap: entered allmulticast mode [ 434.147936][T15756] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 434.158368][T15753] netlink: 'syz.1.2641': attribute type 61 has an invalid length. [ 434.190389][T15756] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode [ 434.562103][T15771] netlink: 'syz.3.2648': attribute type 61 has an invalid length. [ 434.611621][T15771] netlink: 184 bytes leftover after parsing attributes in process `syz.3.2648'. [ 435.024111][T15792] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2654'. [ 435.075169][T15799] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2653'. [ 435.085533][T15799] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2653'. [ 435.100130][T15792] 8021q: adding VLAN 0 to HW filter on device bond33 [ 435.128150][T15802] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2657'. [ 435.167070][T15794] ip6tnl0 speed is unknown, defaulting to 1000 [ 435.810199][T15816] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2661'. [ 435.820793][T15816] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2661'. [ 436.079238][ T3346] net_ratelimit: 31 callbacks suppressed [ 436.079258][ T3346] bond29: (slave bridge6): failed to get link speed/duplex [ 436.106046][T15826] PKCS7: Unknown OID: [4] (bad) [ 436.119744][T15826] PKCS7: Only support pkcs7_signedData type [ 436.240344][ T48] bond29: (slave bridge6): failed to get link speed/duplex [ 436.399276][ T60] bond29: (slave bridge6): failed to get link speed/duplex [ 436.414583][T15844] netlink: 'syz.1.2670': attribute type 1 has an invalid length. [ 436.528358][T15844] 8021q: adding VLAN 0 to HW filter on device bond23 [ 436.561557][T15848] vlan6: entered allmulticast mode [ 436.566852][T15848] bond23: entered allmulticast mode [ 436.590513][ T48] bond29: (slave bridge6): failed to get link speed/duplex [ 436.711041][ T48] bond29: (slave bridge6): failed to get link speed/duplex [ 436.815564][T15863] gretap0: entered promiscuous mode [ 436.855327][T15863] 0ªî{X¹¦: renamed from gretap0 [ 436.863543][T15863] 0ªî{X¹¦: left promiscuous mode [ 436.868761][T15863] 0ªî{X¹¦: entered allmulticast mode [ 436.877033][T15863] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 436.910623][ T36] bond29: (slave bridge6): failed to get link speed/duplex [ 437.029620][ T48] bond29: (slave bridge6): failed to get link speed/duplex [ 437.139652][ T48] bond29: (slave bridge6): failed to get link speed/duplex [ 437.260887][ T36] bond29: (slave bridge6): failed to get link speed/duplex [ 437.295103][ T36] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 437.311343][ T36] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 437.314565][T15889] netlink: 'syz.1.2683': attribute type 2 has an invalid length. [ 437.327831][ T36] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 437.327868][ T36] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 437.525139][T15889] ip6tnl0 speed is unknown, defaulting to 1000 [ 437.605581][T15900] netlink: 'syz.0.2686': attribute type 1 has an invalid length. [ 437.648438][T15903] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 438.160101][ T3346] nci: nci_extract_activation_params_iso_dep: unsupported activation_rf_tech_and_mode 0x80 [ 438.370638][T15932] __nla_validate_parse: 13 callbacks suppressed [ 438.370660][T15932] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2695'. [ 438.389945][T15932] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2695'. [ 438.905778][T15948] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2700'. [ 439.314436][T15978] ipvlan1: Caught tx_queue_len zero misconfig [ 439.393028][T15982] netlink: 'syz.0.2712': attribute type 1 has an invalid length. [ 439.400930][T15982] netlink: 'syz.0.2712': attribute type 2 has an invalid length. [ 439.940644][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 441.059440][T15918] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 441.120508][ T12] net_ratelimit: 34 callbacks suppressed [ 441.120531][ T12] bond29: (slave bridge6): failed to get link speed/duplex [ 441.250941][ T48] bond29: (slave bridge6): failed to get link speed/duplex [ 441.319072][T16007] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2719'. [ 441.345510][T16007] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2719'. [ 441.359770][T16013] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2717'. [ 441.370166][T16013] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2717'. [ 441.428029][T16009] syzkaller0: entered promiscuous mode [ 441.434427][T16009] syzkaller0: entered allmulticast mode [ 441.460021][ T12] bond29: (slave bridge6): failed to get link speed/duplex [ 441.531104][T16019] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 441.538713][T16019] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 441.579596][ T36] bond29: (slave bridge6): failed to get link speed/duplex [ 441.635633][T16020] ip6tnl0 speed is unknown, defaulting to 1000 [ 441.700999][ T48] bond29: (slave bridge6): failed to get link speed/duplex [ 441.721601][T16029] netlink: 'syz.1.2726': attribute type 7 has an invalid length. [ 441.760895][T16028] nbd: must specify at least one socket [ 441.767000][T16028] block nbd0: NBD_DISCONNECT [ 441.772669][T16028] block nbd0: Send disconnect failed -32 [ 441.780905][T16028] block nbd0: shutting down sockets [ 441.808805][T16031] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2727'. [ 441.909246][ T48] bond29: (slave bridge6): failed to get link speed/duplex [ 441.978592][T16037] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2729'. [ 442.059244][ T60] bond29: (slave bridge6): failed to get link speed/duplex [ 442.169654][ T12] bond29: (slave bridge6): failed to get link speed/duplex [ 442.217319][T16043] bridge0: port 1(bond0) entered blocking state [ 442.223796][T16043] bridge0: port 1(bond0) entered forwarding state [ 442.709666][ T29] IPVS: starting estimator thread 0... [ 442.826000][T16059] IPVS: using max 32 ests per chain, 76800 per kthread [ 442.985053][T16066] vlan10: entered promiscuous mode [ 443.002996][T16066] geneve1: entered promiscuous mode [ 443.016455][T16066] vlan10: entered allmulticast mode [ 443.032651][T16066] geneve1: entered allmulticast mode [ 443.137486][T16071] 8021q: VLANs not supported on vxcan1 [ 443.228445][T16075] block nbd0: not configured, cannot reconfigure [ 443.462677][T16085] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2743'. [ 443.488360][T16085] netlink: 'syz.0.2743': attribute type 5 has an invalid length. [ 443.510863][T16085] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2743'. [ 443.534938][T16085] geneve4: entered promiscuous mode [ 443.540774][T16085] geneve4: entered allmulticast mode [ 443.548181][ T12] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 55619 - 0 [ 443.558640][ T12] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 55619 - 0 [ 443.569839][ T12] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 55619 - 0 [ 443.578295][ T12] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 55619 - 0 [ 443.658050][T16099] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2751'. [ 443.691537][T16099] netlink: 'syz.4.2751': attribute type 1 has an invalid length. [ 443.699666][T16099] netlink: 244 bytes leftover after parsing attributes in process `syz.4.2751'. [ 443.710960][T16099] NCSI netlink: No device for ifindex 0 [ 444.024249][T16109] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2753'. [ 444.235623][T16125] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2759'. [ 444.470300][T16138] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2762'. [ 444.502926][T16138] ip6gre2: entered promiscuous mode [ 444.519340][T16138] ip6gre2: entered allmulticast mode [ 444.571784][T16138] netlink: 'syz.2.2762': attribute type 6 has an invalid length. [ 444.579975][T16138] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2762'. [ 444.758736][T16149] netlink: 'syz.3.2765': attribute type 11 has an invalid length. [ 444.771488][T16149] netlink: 199828 bytes leftover after parsing attributes in process `syz.3.2765'. [ 444.873059][T16156] netlink: 'syz.4.2768': attribute type 1 has an invalid length. [ 444.897043][T16156] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2768'. [ 445.223657][T16171] netlink: 'syz.0.2774': attribute type 1 has an invalid length. [ 445.395775][T16179] ip6tnl0 speed is unknown, defaulting to 1000 [ 445.477429][T16187] 8021q: adding VLAN 0 to HW filter on device bond34 [ 445.487167][T16185] syzkaller0: entered promiscuous mode [ 445.493396][T16185] syzkaller0: entered allmulticast mode [ 445.524222][T16187] bond34: (slave veth17): Enslaving as an active interface with an up link [ 445.563466][T16188] bond34: (slave veth19): Enslaving as an active interface with an up link [ 445.818119][T16188] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 445.827453][T16188] bond34: (slave batadv1): Enslaving as an active interface with an up link [ 446.316773][T16210] tipc: Enabled bearer , priority 0 [ 446.455323][T16210] syzkaller0: entered promiscuous mode [ 446.470553][T16210] syzkaller0: entered allmulticast mode [ 446.482257][T16210] tipc: Resetting bearer [ 446.678880][T16216] tipc: Resetting bearer [ 448.574030][T16216] tipc: Disabling bearer [ 448.583777][T16215] syzkaller1: entered promiscuous mode [ 448.590082][T16215] syzkaller1: entered allmulticast mode [ 448.719289][ T36] net_ratelimit: 32 callbacks suppressed [ 448.719317][ T36] bond29: (slave bridge6): failed to get link speed/duplex [ 448.871045][ T36] bond29: (slave bridge6): failed to get link speed/duplex [ 448.923469][T16248] netlink: 'syz.3.2793': attribute type 1 has an invalid length. [ 449.036904][T16254] FAULT_INJECTION: forcing a failure. [ 449.036904][T16254] name failslab, interval 1, probability 0, space 0, times 0 [ 449.051108][T16254] CPU: 1 UID: 0 PID: 16254 Comm: syz.3.2793 Not tainted syzkaller #0 PREEMPT(full) [ 449.051135][T16254] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 449.051147][T16254] Call Trace: [ 449.051160][T16254] [ 449.051167][T16254] dump_stack_lvl+0xe8/0x150 [ 449.051197][T16254] should_fail_ex+0x412/0x560 [ 449.051223][T16254] should_failslab+0xa8/0x100 [ 449.051246][T16254] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 449.051280][T16254] ? preempt_schedule_thunk+0x16/0x30 [ 449.051309][T16254] ? __alloc_skb+0x1d0/0x7d0 [ 449.051335][T16254] __alloc_skb+0x1d0/0x7d0 [ 449.051354][T16254] ? bpf_lsm_socket_getpeersec_dgram+0x9/0x20 [ 449.051388][T16254] netlink_sendmsg+0x5d4/0xb40 [ 449.051422][T16254] ? __pfx_netlink_sendmsg+0x10/0x10 [ 449.051449][T16254] ? aa_sock_msg_perm+0xf1/0x1b0 [ 449.051481][T16254] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 449.051510][T16254] ____sys_sendmsg+0x972/0x9f0 [ 449.051533][T16254] ? __might_fault+0xaf/0x130 [ 449.051566][T16254] ? __pfx_____sys_sendmsg+0x10/0x10 [ 449.051599][T16254] ? import_iovec+0x73/0xa0 [ 449.051627][T16254] ___sys_sendmsg+0x2a5/0x360 [ 449.051660][T16254] ? __lock_acquire+0x6b5/0x2cf0 [ 449.051685][T16254] ? __pfx____sys_sendmsg+0x10/0x10 [ 449.051741][T16254] ? __fget_files+0x2a/0x420 [ 449.051763][T16254] ? __fget_files+0x3a0/0x420 [ 449.051797][T16254] __x64_sys_sendmsg+0x1bd/0x2a0 [ 449.051821][T16254] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 449.051853][T16254] ? __pfx_ksys_write+0x10/0x10 [ 449.051889][T16254] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 449.051909][T16254] do_syscall_64+0x174/0x580 [ 449.051931][T16254] ? clear_bhb_loop+0x40/0x90 [ 449.051955][T16254] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 449.051974][T16254] RIP: 0033:0x7fcb7019ce59 [ 449.051992][T16254] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 449.052008][T16254] RSP: 002b:00007fcb710f2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 449.052028][T16254] RAX: ffffffffffffffda RBX: 00007fcb70416180 RCX: 00007fcb7019ce59 [ 449.052042][T16254] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000006 [ 449.052053][T16254] RBP: 00007fcb710f2090 R08: 0000000000000000 R09: 0000000000000000 [ 449.052064][T16254] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 449.052075][T16254] R13: 00007fcb70416218 R14: 00007fcb70416180 R15: 00007fff507d0198 [ 449.052105][T16254] [ 449.333175][T16248] 8021q: adding VLAN 0 to HW filter on device bond23 [ 449.347564][T16252] vlan8: entered allmulticast mode [ 449.352861][T16252] bond23: entered allmulticast mode [ 449.450129][ T36] bond29: (slave bridge6): failed to get link speed/duplex [ 449.570984][ T36] bond29: (slave bridge6): failed to get link speed/duplex [ 449.613883][T16258] __nla_validate_parse: 8 callbacks suppressed [ 449.613901][T16258] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2794'. [ 449.710244][ T48] bond29: (slave bridge6): failed to get link speed/duplex [ 449.819457][ T36] bond29: (slave bridge6): failed to get link speed/duplex [ 449.939369][ T60] bond29: (slave bridge6): failed to get link speed/duplex [ 449.984144][T16273] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2798'. [ 450.021595][T16277] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2799'. [ 450.047468][T16277] netlink: 'syz.2.2799': attribute type 6 has an invalid length. [ 450.070666][ T60] bond29: (slave bridge6): failed to get link speed/duplex [ 450.157199][T16282] sctp: [Deprecated]: syz.3.2800 (pid 16282) Use of int in maxseg socket option. [ 450.157199][T16282] Use struct sctp_assoc_value instead [ 450.200566][ T36] bond29: (slave bridge6): failed to get link speed/duplex [ 450.319474][ T36] bond29: (slave bridge6): failed to get link speed/duplex [ 450.825592][T16308] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2809'. [ 451.047855][T16315] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2810'. [ 451.530515][T16331] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 451.544195][T16337] ip6tnl0 speed is unknown, defaulting to 1000 [ 451.798841][T16355] netlink: 'syz.1.2823': attribute type 1 has an invalid length. [ 451.861881][T16355] 8021q: adding VLAN 0 to HW filter on device bond24 [ 451.893538][T16358] vlan7: entered allmulticast mode [ 451.898701][T16358] bond24: entered allmulticast mode [ 451.912247][T16342] ip6tnl0 speed is unknown, defaulting to 1000 [ 452.075398][T16360] tipc: Enabling of bearer rejected, already enabled [ 452.102826][T16360] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2824'. [ 452.366925][T16371] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2826'. [ 452.382393][T16368] ip6gretap1: entered allmulticast mode [ 453.029671][T16401] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2837'. [ 453.091054][T16402] netlink: 244 bytes leftover after parsing attributes in process `syz.3.2835'. [ 453.162859][T16407] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2835'. [ 453.758253][ T60] net_ratelimit: 24 callbacks suppressed [ 453.758274][ T60] bond29: (slave bridge6): failed to get link speed/duplex [ 453.919252][ T3346] bond29: (slave bridge6): failed to get link speed/duplex [ 454.064992][T16433] gre1: entered allmulticast mode [ 454.077897][T16439] bond0: left allmulticast mode [ 454.112997][T16439] bond_slave_1: left allmulticast mode [ 454.131397][T16439] syz_tun: left allmulticast mode [ 454.147249][T16439] bond0: left promiscuous mode [ 454.162976][T16439] bond_slave_1: left promiscuous mode [ 454.179690][T16439] syz_tun: left promiscuous mode [ 454.217760][T16439] bridge0: port 1(bond0) entered disabled state [ 454.389426][ T48] bond29: (slave bridge6): failed to get link speed/duplex [ 454.503939][ T60] bond29: (slave bridge6): failed to get link speed/duplex [ 454.619329][ T48] bond29: (slave bridge6): failed to get link speed/duplex [ 454.739775][ T60] bond29: (slave bridge6): failed to get link speed/duplex [ 454.788885][T16460] xt_bpf: check failed: parse error [ 454.870305][ T36] bond29: (slave bridge6): failed to get link speed/duplex [ 455.038952][T16469] syzkaller0: entered promiscuous mode [ 455.044997][T16469] syzkaller0: entered allmulticast mode [ 455.254800][T16485] __nla_validate_parse: 7 callbacks suppressed [ 455.254821][T16485] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2860'. [ 455.271611][T16485] block nbd0: not configured, cannot reconfigure [ 455.660446][ T36] bond29: (slave bridge6): failed to get link speed/duplex [ 455.839659][ T8590] bond29: (slave bridge6): failed to get link speed/duplex [ 455.872407][T16498] ip6tnl0 speed is unknown, defaulting to 1000 [ 455.961821][ T60] bond29: (slave bridge6): failed to get link speed/duplex [ 456.131496][T16506] FAULT_INJECTION: forcing a failure. [ 456.131496][T16506] name failslab, interval 1, probability 0, space 0, times 0 [ 456.178081][T16506] CPU: 0 UID: 0 PID: 16506 Comm: syz.2.2867 Not tainted syzkaller #0 PREEMPT(full) [ 456.178108][T16506] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 456.178120][T16506] Call Trace: [ 456.178128][T16506] [ 456.178137][T16506] dump_stack_lvl+0xe8/0x150 [ 456.178163][T16506] should_fail_ex+0x412/0x560 [ 456.178189][T16506] should_failslab+0xa8/0x100 [ 456.178210][T16506] __kmalloc_cache_noprof+0x88/0x660 [ 456.178237][T16506] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 456.178260][T16506] ? __xdp_reg_mem_model+0x1e3/0x5d0 [ 456.178384][T16506] __xdp_reg_mem_model+0x1e3/0x5d0 [ 456.178413][T16506] ? __pfx___xdp_reg_mem_model+0x10/0x10 [ 456.178434][T16506] ? page_pool_list+0x20f/0x250 [ 456.178480][T16506] ? page_pool_create_percpu+0x87b/0xc80 [ 456.178511][T16506] xdp_reg_mem_model+0x22/0x40 [ 456.178534][T16506] bpf_test_run_xdp_live+0x295/0x1cf0 [ 456.178587][T16506] ? bpf_dispatcher_change_prog+0xae0/0xd70 [ 456.178626][T16506] ? __pfx_autoremove_wake_function+0x10/0x10 [ 456.178658][T16506] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 456.178702][T16506] ? 0xffffffffa0201a3c [ 456.178726][T16506] ? 0xffffffffa0203588 [ 456.178768][T16506] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 456.178803][T16506] ? _copy_from_user+0x94/0xb0 [ 456.178826][T16506] ? bpf_test_init+0x113/0x150 [ 456.178846][T16506] ? xdp_convert_md_to_buff+0x5b/0x330 [ 456.178870][T16506] bpf_prog_test_run_xdp+0x81c/0x1160 [ 456.178909][T16506] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 456.178937][T16506] ? __fget_files+0x2a/0x420 [ 456.178966][T16506] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 456.178990][T16506] bpf_prog_test_run+0x2c7/0x340 [ 456.179022][T16506] __sys_bpf+0x643/0x950 [ 456.179052][T16506] ? __pfx___sys_bpf+0x10/0x10 [ 456.179096][T16506] ? ksys_write+0x242/0x270 [ 456.179128][T16506] ? __pfx_ksys_write+0x10/0x10 [ 456.179160][T16506] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 456.179182][T16506] __x64_sys_bpf+0x7c/0x90 [ 456.179208][T16506] do_syscall_64+0x174/0x580 [ 456.179227][T16506] ? trace_irq_disable+0x3b/0x140 [ 456.179255][T16506] ? clear_bhb_loop+0x40/0x90 [ 456.179279][T16506] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 456.179297][T16506] RIP: 0033:0x7fce17d9ce59 [ 456.179314][T16506] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 456.179330][T16506] RSP: 002b:00007fce18c2d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 456.179349][T16506] RAX: ffffffffffffffda RBX: 00007fce18015fa0 RCX: 00007fce17d9ce59 [ 456.179363][T16506] RDX: 0000000000000050 RSI: 0000200000000680 RDI: 000000000000000a [ 456.179374][T16506] RBP: 00007fce18c2d090 R08: 0000000000000000 R09: 0000000000000000 [ 456.179386][T16506] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 456.179396][T16506] R13: 00007fce18016038 R14: 00007fce18015fa0 R15: 00007fff49fb92f8 [ 456.179427][T16506] [ 457.102429][T16523] syzkaller0: entered promiscuous mode [ 457.119479][T16523] syzkaller0: entered allmulticast mode [ 457.636252][T16541] netlink: 104 bytes leftover after parsing attributes in process `syz.3.2876'. [ 457.718510][T16543] netlink: 'syz.3.2876': attribute type 32 has an invalid length. [ 457.731153][T16543] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2876'. [ 457.783644][T16543] bond24: option coupled_control: invalid value (128) [ 457.785831][T16548] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2876'. [ 457.845305][T16548] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2876'. [ 457.902344][T16543] bond24 (unregistering): Released all slaves [ 457.946729][T16556] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.2880'. [ 458.214315][T16561] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2881'. [ 458.431475][T16577] netlink: 'syz.2.2886': attribute type 10 has an invalid length. [ 458.444847][T16577] team0: Device bridge0 failed to register rx_handler [ 458.618002][T16586] netlink: 'syz.2.2891': attribute type 3 has an invalid length. [ 458.635977][T16586] nbd: nbd2 already in use [ 458.636966][T16587] netlink: 'syz.1.2890': attribute type 11 has an invalid length. [ 458.776246][T16591] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 458.821882][ T3346] net_ratelimit: 22 callbacks suppressed [ 458.821901][ T3346] bond29: (slave bridge6): failed to get link speed/duplex [ 458.969406][ T48] bond29: (slave bridge6): failed to get link speed/duplex [ 459.077922][T16616] FAULT_INJECTION: forcing a failure. [ 459.077922][T16616] name failslab, interval 1, probability 0, space 0, times 0 [ 459.091366][T16616] CPU: 1 UID: 0 PID: 16616 Comm: syz.2.2899 Not tainted syzkaller #0 PREEMPT(full) [ 459.091392][T16616] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 459.091404][T16616] Call Trace: [ 459.091412][T16616] [ 459.091419][T16616] dump_stack_lvl+0xe8/0x150 [ 459.091447][T16616] should_fail_ex+0x412/0x560 [ 459.091473][T16616] should_failslab+0xa8/0x100 [ 459.091495][T16616] __kmalloc_noprof+0xe8/0x760 [ 459.091523][T16616] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 459.091559][T16616] genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 459.091595][T16616] genl_family_rcv_msg_doit+0xd9/0x330 [ 459.091634][T16616] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 459.091670][T16616] ? apparmor_capable+0x126/0x170 [ 459.091695][T16616] ? bpf_lsm_capable+0x9/0x20 [ 459.091714][T16616] ? security_capable+0x7e/0x2c0 [ 459.091747][T16616] genl_rcv_msg+0x61c/0x7a0 [ 459.091781][T16616] ? __pfx_genl_rcv_msg+0x10/0x10 [ 459.091807][T16616] ? __pfx_ovs_flow_cmd_new+0x10/0x10 [ 459.091849][T16616] netlink_rcv_skb+0x232/0x4b0 [ 459.091873][T16616] ? __pfx_genl_rcv_msg+0x10/0x10 [ 459.091901][T16616] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 459.091938][T16616] ? down_read+0x270/0x2e0 [ 459.091967][T16616] ? genl_rcv+0xd/0x40 [ 459.091994][T16616] genl_rcv+0x28/0x40 [ 459.092019][T16616] netlink_unicast+0x75c/0x8e0 [ 459.092050][T16616] netlink_sendmsg+0x813/0xb40 [ 459.092081][T16616] ? __pfx_netlink_sendmsg+0x10/0x10 [ 459.092107][T16616] ? aa_sock_msg_perm+0xf1/0x1b0 [ 459.092154][T16616] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 459.092185][T16616] ____sys_sendmsg+0x972/0x9f0 [ 459.092210][T16616] ? __might_fault+0xaf/0x130 [ 459.092243][T16616] ? __pfx_____sys_sendmsg+0x10/0x10 [ 459.092317][T16616] ? import_iovec+0x73/0xa0 [ 459.092348][T16616] ___sys_sendmsg+0x2a5/0x360 [ 459.092371][T16616] ? __lock_acquire+0x6b5/0x2cf0 [ 459.092398][T16616] ? __pfx____sys_sendmsg+0x10/0x10 [ 459.092462][T16616] ? __fget_files+0x2a/0x420 [ 459.092488][T16616] ? __fget_files+0x3a0/0x420 [ 459.092527][T16616] __x64_sys_sendmsg+0x1bd/0x2a0 [ 459.092555][T16616] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 459.092590][T16616] ? __pfx_ksys_write+0x10/0x10 [ 459.092630][T16616] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 459.092654][T16616] do_syscall_64+0x174/0x580 [ 459.092674][T16616] ? trace_irq_disable+0x3b/0x140 [ 459.092705][T16616] ? clear_bhb_loop+0x40/0x90 [ 459.092732][T16616] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 459.092752][T16616] RIP: 0033:0x7fce17d9ce59 [ 459.092773][T16616] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 459.092791][T16616] RSP: 002b:00007fce18c2d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 459.092813][T16616] RAX: ffffffffffffffda RBX: 00007fce18015fa0 RCX: 00007fce17d9ce59 [ 459.092828][T16616] RDX: 000000000000c000 RSI: 0000200000000000 RDI: 0000000000000003 [ 459.092841][T16616] RBP: 00007fce18c2d090 R08: 0000000000000000 R09: 0000000000000000 [ 459.092854][T16616] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 459.092866][T16616] R13: 00007fce18016038 R14: 00007fce18015fa0 R15: 00007fff49fb92f8 [ 459.092901][T16616] [ 459.097945][T16619] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 459.141110][ T8590] bond29: (slave bridge6): failed to get link speed/duplex [ 459.540069][ T8590] bond29: (slave bridge6): failed to get link speed/duplex [ 459.666151][ T3346] bond29: (slave bridge6): failed to get link speed/duplex [ 459.691959][T16636] netlink: 'syz.3.2906': attribute type 22 has an invalid length. [ 459.841153][T16636] vlan9: entered promiscuous mode [ 459.851208][T16636] veth1_macvtap: entered promiscuous mode [ 460.077112][T16657] FAULT_INJECTION: forcing a failure. [ 460.077112][T16657] name failslab, interval 1, probability 0, space 0, times 0 [ 460.110155][T16657] CPU: 1 UID: 0 PID: 16657 Comm: syz.3.2913 Not tainted syzkaller #0 PREEMPT(full) [ 460.110176][T16657] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 460.110185][T16657] Call Trace: [ 460.110191][T16657] [ 460.110197][T16657] dump_stack_lvl+0xe8/0x150 [ 460.110218][T16657] should_fail_ex+0x412/0x560 [ 460.110238][T16657] should_failslab+0xa8/0x100 [ 460.110254][T16657] __kmalloc_noprof+0xe8/0x760 [ 460.110276][T16657] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 460.110304][T16657] genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 460.110331][T16657] genl_family_rcv_msg_doit+0xd9/0x330 [ 460.110358][T16657] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 460.110386][T16657] ? apparmor_capable+0x126/0x170 [ 460.110405][T16657] ? bpf_lsm_capable+0x9/0x20 [ 460.110419][T16657] ? security_capable+0x7e/0x2c0 [ 460.110445][T16657] genl_rcv_msg+0x61c/0x7a0 [ 460.110470][T16657] ? __pfx_genl_rcv_msg+0x10/0x10 [ 460.110490][T16657] ? __pfx_ovs_flow_cmd_new+0x10/0x10 [ 460.110512][T16657] ? __pfx_ref_tracker_free+0x10/0x10 [ 460.110536][T16657] netlink_rcv_skb+0x232/0x4b0 [ 460.110553][T16657] ? __pfx_genl_rcv_msg+0x10/0x10 [ 460.110574][T16657] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 460.110602][T16657] ? down_read+0x270/0x2e0 [ 460.110618][T16657] ? genl_rcv+0xd/0x40 [ 460.110639][T16657] genl_rcv+0x28/0x40 [ 460.110657][T16657] netlink_unicast+0x75c/0x8e0 [ 460.110679][T16657] netlink_sendmsg+0x813/0xb40 [ 460.110703][T16657] ? __pfx_netlink_sendmsg+0x10/0x10 [ 460.110723][T16657] ? aa_sock_msg_perm+0xf1/0x1b0 [ 460.110745][T16657] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 460.110767][T16657] ____sys_sendmsg+0x972/0x9f0 [ 460.110784][T16657] ? __might_fault+0xaf/0x130 [ 460.110808][T16657] ? __pfx_____sys_sendmsg+0x10/0x10 [ 460.110831][T16657] ? import_iovec+0x73/0xa0 [ 460.110851][T16657] ___sys_sendmsg+0x2a5/0x360 [ 460.110866][T16657] ? __lock_acquire+0x6b5/0x2cf0 [ 460.110892][T16657] ? __pfx____sys_sendmsg+0x10/0x10 [ 460.110936][T16657] ? __fget_files+0x2a/0x420 [ 460.110983][T16657] ? __fget_files+0x3a0/0x420 [ 460.111018][T16657] __x64_sys_sendmsg+0x1bd/0x2a0 [ 460.111045][T16657] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 460.111077][T16657] ? __pfx_ksys_write+0x10/0x10 [ 460.111105][T16657] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 460.111121][T16657] do_syscall_64+0x174/0x580 [ 460.111135][T16657] ? trace_irq_disable+0x3b/0x140 [ 460.111156][T16657] ? clear_bhb_loop+0x40/0x90 [ 460.111174][T16657] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 460.111187][T16657] RIP: 0033:0x7fcb7019ce59 [ 460.111201][T16657] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 460.111213][T16657] RSP: 002b:00007fcb71134028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 460.111227][T16657] RAX: ffffffffffffffda RBX: 00007fcb70415fa0 RCX: 00007fcb7019ce59 [ 460.111237][T16657] RDX: 000000000000c000 RSI: 0000200000000000 RDI: 0000000000000003 [ 460.111249][T16657] RBP: 00007fcb71134090 R08: 0000000000000000 R09: 0000000000000000 [ 460.111258][T16657] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 460.111266][T16657] R13: 00007fcb70416038 R14: 00007fcb70415fa0 R15: 00007fff507d0198 [ 460.111289][T16657] [ 462.160678][ T60] bond29: (slave bridge6): failed to get link speed/duplex [ 462.290381][ T48] bond29: (slave bridge6): failed to get link speed/duplex [ 462.324559][T16678] netlink: 'syz.3.2919': attribute type 1 has an invalid length. [ 462.358186][T16677] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2919'. [ 462.420467][ T60] bond29: (slave bridge6): failed to get link speed/duplex [ 462.492655][T16687] netlink: 27 bytes leftover after parsing attributes in process `syz.0.2921'. [ 462.539386][ T48] bond29: (slave bridge6): failed to get link speed/duplex [ 462.771486][T16710] ip6tnl0 speed is unknown, defaulting to 1000 [ 462.849339][T16717] team0: No ports can be present during mode change [ 463.052660][T16727] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 463.146973][T16727] geneve4: entered promiscuous mode [ 463.153125][T16727] geneve4: entered allmulticast mode [ 465.432810][ T36] net_ratelimit: 4 callbacks suppressed [ 465.432828][ T36] bond29: (slave bridge6): failed to get link speed/duplex [ 465.458600][T16753] FAULT_INJECTION: forcing a failure. [ 465.458600][T16753] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 465.511335][T16753] CPU: 1 UID: 0 PID: 16753 Comm: syz.4.2940 Not tainted syzkaller #0 PREEMPT(full) [ 465.511361][T16753] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 465.511372][T16753] Call Trace: [ 465.511380][T16753] [ 465.511388][T16753] dump_stack_lvl+0xe8/0x150 [ 465.511416][T16753] should_fail_ex+0x412/0x560 [ 465.511446][T16753] _copy_to_user+0x31/0xb0 [ 465.511472][T16753] simple_read_from_buffer+0xe1/0x170 [ 465.511501][T16753] proc_fail_nth_read+0x1bb/0x230 [ 465.511531][T16753] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 465.511560][T16753] ? rw_verify_area+0x2a6/0x4d0 [ 465.511586][T16753] ? __fget_files+0x2a/0x420 [ 465.511608][T16753] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 465.511635][T16753] vfs_read+0x20c/0xa70 [ 465.511668][T16753] ? __pfx___mutex_lock+0x10/0x10 [ 465.511690][T16753] ? __pfx_vfs_read+0x10/0x10 [ 465.511720][T16753] ? __fget_files+0x2a/0x420 [ 465.511748][T16753] ? __fget_files+0x3a0/0x420 [ 465.511789][T16753] ? __fget_files+0x2a/0x420 [ 465.511823][T16753] ksys_read+0x150/0x270 [ 465.511862][T16753] ? __pfx_ksys_read+0x10/0x10 [ 465.511901][T16753] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 465.511924][T16753] do_syscall_64+0x174/0x580 [ 465.511945][T16753] ? trace_irq_disable+0x3b/0x140 [ 465.511976][T16753] ? clear_bhb_loop+0x40/0x90 [ 465.512001][T16753] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 465.512021][T16753] RIP: 0033:0x7f108715d68e [ 465.512039][T16753] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 465.512056][T16753] RSP: 002b:00007f1087f98fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 465.512077][T16753] RAX: ffffffffffffffda RBX: 00007f1087f996c0 RCX: 00007f108715d68e [ 465.512091][T16753] RDX: 000000000000000f RSI: 00007f1087f990a0 RDI: 0000000000000004 [ 465.512103][T16753] RBP: 00007f1087f99090 R08: 0000000000000000 R09: 0000000000000000 [ 465.512115][T16753] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 465.512138][T16753] R13: 00007f1087416038 R14: 00007f1087415fa0 R15: 00007ffcf17af328 [ 465.512169][T16753] [ 465.591393][ T8590] bond29: (slave bridge6): failed to get link speed/duplex [ 465.805668][T16762] netlink: 'syz.4.2946': attribute type 21 has an invalid length. [ 465.872302][T16766] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2943'. [ 465.883548][T16766] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2943'. [ 465.893846][T16766] netlink: 'syz.2.2943': attribute type 18 has an invalid length. [ 465.920697][T16762] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2946'. [ 465.931229][T16762] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2946'. [ 466.015717][T16766] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 466.040723][ T36] bond29: (slave bridge6): failed to get link speed/duplex [ 466.056273][T16770] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2947'. [ 466.092601][T16770] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2947'. [ 466.170064][ T8590] bond29: (slave bridge6): failed to get link speed/duplex [ 466.255471][T16786] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2949'. [ 466.279812][ T60] bond29: (slave bridge6): failed to get link speed/duplex [ 466.326550][T16789] team0: Device veth1_virt_wifi is up. Set it down before adding it as a team port [ 466.389597][ T60] bond29: (slave bridge6): failed to get link speed/duplex [ 466.504024][ T60] bond29: (slave bridge6): failed to get link speed/duplex [ 466.619256][ T8604] bond29: (slave bridge6): failed to get link speed/duplex [ 466.729413][ T60] bond29: (slave bridge6): failed to get link speed/duplex [ 466.796831][T16796] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2953'. [ 466.821156][T16772] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 467.125005][T16816] vlan4: entered promiscuous mode [ 467.362950][T16833] ip6tnl0 speed is unknown, defaulting to 1000 [ 467.574107][T16835] ip6tnl0 speed is unknown, defaulting to 1000 [ 467.987349][T16822] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 468.249011][T16853] __nla_validate_parse: 2 callbacks suppressed [ 468.249032][T16853] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2969'. [ 468.285071][T16855] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma? [ 468.458435][T16862] ip6tnl0 speed is unknown, defaulting to 1000 [ 469.094206][ T5644] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 469.105617][ T5644] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 469.116408][ T5644] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 469.127087][ T5644] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 469.143748][ T5644] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 469.299090][T16890] batman_adv: batadv0: Adding interface: vlan11 [ 469.328290][T16890] batman_adv: batadv0: The MTU of interface vlan11 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 469.360757][T16890] batman_adv: batadv0: Not using interface vlan11 (retrying later): interface not active [ 469.371441][T16897] FAULT_INJECTION: forcing a failure. [ 469.371441][T16897] name failslab, interval 1, probability 0, space 0, times 0 [ 469.399794][T16897] CPU: 1 UID: 0 PID: 16897 Comm: syz.1.2980 Not tainted syzkaller #0 PREEMPT(full) [ 469.399817][T16897] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 469.399828][T16897] Call Trace: [ 469.399834][T16897] [ 469.399842][T16897] dump_stack_lvl+0xe8/0x150 [ 469.399885][T16897] should_fail_ex+0x412/0x560 [ 469.399911][T16897] should_failslab+0xa8/0x100 [ 469.399931][T16897] __kmalloc_cache_noprof+0x88/0x660 [ 469.399956][T16897] ? __kasan_kmalloc+0x93/0xb0 [ 469.399983][T16897] ? ovs_nla_get_identifier+0x72/0xd0 [ 469.400009][T16897] ovs_nla_get_identifier+0x72/0xd0 [ 469.400041][T16897] ovs_flow_cmd_new+0x505/0xe80 [ 469.400085][T16897] ? kasan_save_track+0x3e/0x80 [ 469.400121][T16897] ? __pfx_ovs_flow_cmd_new+0x10/0x10 [ 469.400216][T16897] ? __nla_parse+0x40/0x60 [ 469.400247][T16897] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 469.400278][T16897] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 469.400317][T16897] genl_family_rcv_msg_doit+0x22a/0x330 [ 469.400355][T16897] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 469.400400][T16897] ? bpf_lsm_capable+0x9/0x20 [ 469.400420][T16897] ? security_capable+0x7e/0x2c0 [ 469.400456][T16897] genl_rcv_msg+0x61c/0x7a0 [ 469.400493][T16897] ? __pfx_genl_rcv_msg+0x10/0x10 [ 469.400522][T16897] ? __pfx_ovs_flow_cmd_new+0x10/0x10 [ 469.400559][T16897] ? __pfx_ref_tracker_free+0x10/0x10 [ 469.400595][T16897] netlink_rcv_skb+0x232/0x4b0 [ 469.400623][T16897] ? __pfx_genl_rcv_msg+0x10/0x10 [ 469.400654][T16897] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 469.400697][T16897] ? down_read+0x270/0x2e0 [ 469.400719][T16897] ? genl_rcv+0xd/0x40 [ 469.400750][T16897] genl_rcv+0x28/0x40 [ 469.400776][T16897] netlink_unicast+0x75c/0x8e0 [ 469.400811][T16897] netlink_sendmsg+0x813/0xb40 [ 469.400846][T16897] ? __pfx_netlink_sendmsg+0x10/0x10 [ 469.400875][T16897] ? aa_sock_msg_perm+0xf1/0x1b0 [ 469.400907][T16897] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 469.400939][T16897] ____sys_sendmsg+0x972/0x9f0 [ 469.400963][T16897] ? __might_fault+0xaf/0x130 [ 469.400998][T16897] ? __pfx_____sys_sendmsg+0x10/0x10 [ 469.401033][T16897] ? import_iovec+0x73/0xa0 [ 469.401063][T16897] ___sys_sendmsg+0x2a5/0x360 [ 469.401086][T16897] ? __lock_acquire+0x6b5/0x2cf0 [ 469.401114][T16897] ? __pfx____sys_sendmsg+0x10/0x10 [ 469.401179][T16897] ? __fget_files+0x2a/0x420 [ 469.401204][T16897] ? __fget_files+0x3a0/0x420 [ 469.401243][T16897] __x64_sys_sendmsg+0x1bd/0x2a0 [ 469.401271][T16897] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 469.401307][T16897] ? __pfx_ksys_write+0x10/0x10 [ 469.401358][T16897] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 469.401380][T16897] do_syscall_64+0x174/0x580 [ 469.401399][T16897] ? trace_irq_disable+0x3b/0x140 [ 469.401427][T16897] ? clear_bhb_loop+0x40/0x90 [ 469.401450][T16897] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 469.401469][T16897] RIP: 0033:0x7fa67e19ce59 [ 469.401487][T16897] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 469.401503][T16897] RSP: 002b:00007fa67f003028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 469.401523][T16897] RAX: ffffffffffffffda RBX: 00007fa67e415fa0 RCX: 00007fa67e19ce59 [ 469.401537][T16897] RDX: 000000000000c000 RSI: 0000200000000000 RDI: 0000000000000003 [ 469.401554][T16897] RBP: 00007fa67f003090 R08: 0000000000000000 R09: 0000000000000000 [ 469.401565][T16897] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 469.401576][T16897] R13: 00007fa67e416038 R14: 00007fa67e415fa0 R15: 00007ffd4e09a8f8 [ 469.401606][T16897] [ 470.001681][ T5661] bond0: (slave syz_tun): Releasing backup interface [ 470.086300][T16895] ip6tnl0 speed is unknown, defaulting to 1000 [ 470.282735][T16914] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2983'. [ 470.414137][T16914] 8021q: adding VLAN 0 to HW filter on device bond35 [ 470.470352][T16918] bond35: (slave wireguard1): refused to change device type [ 470.509362][ T36] net_ratelimit: 20 callbacks suppressed [ 470.509377][ T36] bond29: (slave bridge6): failed to get link speed/duplex [ 470.598678][T16887] ip6tnl0 speed is unknown, defaulting to 1000 [ 470.700309][ T36] bond29: (slave bridge6): failed to get link speed/duplex [ 470.829371][ T48] bond29: (slave bridge6): failed to get link speed/duplex [ 470.939295][ T36] bond29: (slave bridge6): failed to get link speed/duplex [ 471.219272][ T5644] Bluetooth: hci5: command tx timeout [ 471.222490][T16928] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2986'. [ 471.329198][ T8604] bond29: (slave bridge6): failed to get link speed/duplex [ 471.420554][T16925] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 471.440209][ T8604] bond29: (slave bridge6): failed to get link speed/duplex [ 471.602359][T16947] FAULT_INJECTION: forcing a failure. [ 471.602359][T16947] name failslab, interval 1, probability 0, space 0, times 0 [ 471.615361][T16887] bridge0: port 1(bridge_slave_0) entered blocking state [ 471.615525][T16887] bridge0: port 1(bridge_slave_0) entered disabled state [ 471.630588][T16887] bridge_slave_0: entered allmulticast mode [ 471.638335][T16887] bridge_slave_0: entered promiscuous mode [ 471.647163][T16887] bridge0: port 2(bridge_slave_1) entered blocking state [ 471.655797][T16887] bridge0: port 2(bridge_slave_1) entered disabled state [ 471.663187][T16887] bridge_slave_1: entered allmulticast mode [ 471.670826][T16947] CPU: 1 UID: 0 PID: 16947 Comm: syz.3.2991 Not tainted syzkaller #0 PREEMPT(full) [ 471.670849][T16947] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 471.670861][T16947] Call Trace: [ 471.670868][T16947] [ 471.670894][T16947] dump_stack_lvl+0xe8/0x150 [ 471.670923][T16947] should_fail_ex+0x412/0x560 [ 471.670951][T16947] should_failslab+0xa8/0x100 [ 471.670974][T16947] __kmalloc_noprof+0xe8/0x760 [ 471.671002][T16947] ? __kasan_kmalloc+0x93/0xb0 [ 471.671031][T16947] ? ovs_nla_copy_actions+0x68/0x3d0 [ 471.671054][T16947] ? __kmalloc_cache_noprof+0x31c/0x660 [ 471.671087][T16947] ovs_nla_copy_actions+0x68/0x3d0 [ 471.671108][T16947] ? __asan_memcpy+0x40/0x70 [ 471.671139][T16947] ovs_flow_cmd_new+0x615/0xe80 [ 471.671167][T16947] ? kasan_save_track+0x3e/0x80 [ 471.671202][T16947] ? __pfx_ovs_flow_cmd_new+0x10/0x10 [ 471.671291][T16947] ? __nla_parse+0x40/0x60 [ 471.671319][T16947] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 471.671350][T16947] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 471.671385][T16947] genl_family_rcv_msg_doit+0x22a/0x330 [ 471.671398][T16887] bridge_slave_1: entered promiscuous mode [ 471.671421][T16947] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 471.671560][T16947] ? bpf_lsm_capable+0x9/0x20 [ 471.671640][T16947] ? security_capable+0x7e/0x2c0 [ 471.671731][T16947] genl_rcv_msg+0x61c/0x7a0 [ 471.671823][T16947] ? __pfx_genl_rcv_msg+0x10/0x10 [ 471.671891][T16947] ? __pfx_ovs_flow_cmd_new+0x10/0x10 [ 471.671965][T16947] ? __pfx_ref_tracker_free+0x10/0x10 [ 471.672048][T16947] netlink_rcv_skb+0x232/0x4b0 [ 471.672105][T16947] ? __pfx_genl_rcv_msg+0x10/0x10 [ 471.672187][T16947] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 471.672275][T16947] ? down_read+0x270/0x2e0 [ 471.672324][T16947] ? genl_rcv+0xd/0x40 [ 471.672393][T16947] genl_rcv+0x28/0x40 [ 471.672447][T16947] netlink_unicast+0x75c/0x8e0 [ 471.672512][T16947] netlink_sendmsg+0x813/0xb40 [ 471.672590][T16947] ? __pfx_netlink_sendmsg+0x10/0x10 [ 471.672652][T16947] ? aa_sock_msg_perm+0xf1/0x1b0 [ 471.672718][T16947] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 471.672794][T16947] ____sys_sendmsg+0x972/0x9f0 [ 471.672846][T16947] ? __might_fault+0xaf/0x130 [ 471.672925][T16947] ? __pfx_____sys_sendmsg+0x10/0x10 [ 471.673026][T16947] ? import_iovec+0x73/0xa0 [ 471.673088][T16947] ___sys_sendmsg+0x2a5/0x360 [ 471.673135][T16947] ? __lock_acquire+0x6b5/0x2cf0 [ 471.673191][T16947] ? __pfx____sys_sendmsg+0x10/0x10 [ 471.673339][T16947] ? __fget_files+0x2a/0x420 [ 471.673391][T16947] ? __fget_files+0x3a0/0x420 [ 471.673470][T16947] __x64_sys_sendmsg+0x1bd/0x2a0 [ 471.673543][T16947] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 471.673614][T16947] ? __pfx_ksys_write+0x10/0x10 [ 471.673701][T16947] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 471.673756][T16947] do_syscall_64+0x174/0x580 [ 471.673804][T16947] ? trace_irq_disable+0x3b/0x140 [ 471.673877][T16947] ? clear_bhb_loop+0x40/0x90 [ 471.673940][T16947] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 471.673987][T16947] RIP: 0033:0x7fcb7019ce59 [ 471.674034][T16947] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 471.674071][T16947] RSP: 002b:00007fcb71134028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 471.674121][T16947] RAX: ffffffffffffffda RBX: 00007fcb70415fa0 RCX: 00007fcb7019ce59 [ 471.674151][T16947] RDX: 000000000000c000 RSI: 0000200000000000 RDI: 0000000000000003 [ 471.674186][T16947] RBP: 00007fcb71134090 R08: 0000000000000000 R09: 0000000000000000 [ 471.674213][T16947] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 471.674235][T16947] R13: 00007fcb70416038 R14: 00007fcb70415fa0 R15: 00007fff507d0198 [ 471.674317][T16947] [ 471.692852][T16947] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 471.808966][T16887] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 472.137460][T16951] xt_hashlimit: size too large, truncated to 1048576 [ 472.164275][T16887] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 472.263057][T16956] xt_HMARK: proto mask must be zero with L3 mode [ 472.330396][T16887] team0: Port device team_slave_0 added [ 472.342270][T16958] syzkaller1: entered allmulticast mode [ 472.363594][T16887] team0: Port device team_slave_1 added [ 472.415191][T16887] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 472.429066][T16887] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 472.474869][T16887] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 472.501384][ T36] bond29: (slave bridge6): failed to get link speed/duplex [ 472.516140][T16887] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 472.523794][T16887] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 472.559910][T16887] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 472.589559][T16962] netlink: 120 bytes leftover after parsing attributes in process `syz.1.2997'. [ 472.618012][T16962] netlink: 'syz.1.2997': attribute type 1 has an invalid length. [ 472.629351][T16962] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2997'. [ 472.723455][T16887] hsr_slave_0: entered promiscuous mode [ 472.736797][T16887] hsr_slave_1: entered promiscuous mode [ 472.836877][T16976] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2999'. [ 472.869507][T16976] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2999'. [ 473.041670][T16887] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 473.054038][T16887] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 49083 - 0 [ 473.066685][T16982] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3002'. [ 473.068613][T16887] netdevsim netdevsim4 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 473.128940][T16984] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3003'. [ 473.171812][ T48] bond29: (slave bridge6): failed to get link speed/duplex [ 473.203593][T16887] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 473.215165][T16887] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 49083 - 0 [ 473.229456][T16887] netdevsim netdevsim4 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 473.299236][ T5644] Bluetooth: hci5: command tx timeout [ 473.310092][ T8590] bond29: (slave bridge6): failed to get link speed/duplex [ 473.340109][T16887] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 473.350286][T16887] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 49083 - 0 [ 473.362320][T16887] netdevsim netdevsim4 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 473.436870][T16887] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 473.454284][T16887] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 49083 - 0 [ 473.489519][T16887] netdevsim netdevsim4 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 473.737150][T17001] bond24: option lacp_active: invalid value (8) [ 473.759588][T17008] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3011'. [ 473.774876][T17001] bond24 (unregistering): Released all slaves [ 474.096205][T17025] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input7 [ 474.375719][T16887] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 474.415143][T16887] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 474.451610][T16887] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 474.505637][T16887] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 474.523340][T16887] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 474.555877][T16887] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 474.570324][T16887] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 474.597109][T16887] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 474.752212][T16887] 8021q: adding VLAN 0 to HW filter on device bond0 [ 474.794885][T16887] 8021q: adding VLAN 0 to HW filter on device team0 [ 474.833278][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 474.840499][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 474.892040][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 474.899258][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 475.003582][T17054] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3022'. [ 475.028555][T17054] team0: Port device team_slave_1 removed [ 475.061054][T17055] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3022'. [ 475.140090][T17055] team0: Port device syz_tun removed [ 475.389672][ T5644] Bluetooth: hci5: command tx timeout [ 475.576465][T17078] net_ratelimit: 15 callbacks suppressed [ 475.576485][T17078] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 475.649327][ T60] bond29: (slave bridge6): failed to get link speed/duplex [ 475.772539][T17095] IPVS: set_ctl: invalid protocol: 115 0.0.0.0:20004 [ 475.780766][T17094] IPVS: set_ctl: invalid protocol: 115 0.0.0.0:20004 [ 475.814187][ T36] bond29: (slave bridge6): failed to get link speed/duplex [ 475.842414][T17096] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3032'. [ 475.878918][T17096] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3032'. [ 475.960880][ T36] bond29: (slave bridge6): failed to get link speed/duplex [ 475.986326][T17103] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3036'. [ 475.995349][T17089] smbdirect: ib_dev[syz1] removed [ 476.123155][ T60] bond29: (slave bridge6): failed to get link speed/duplex [ 476.219704][T16887] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 476.280308][ T8590] bond29: (slave bridge6): failed to get link speed/duplex [ 476.410672][ T8590] bond29: (slave bridge6): failed to get link speed/duplex [ 476.491450][T17122] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 476.539674][ T8590] bond29: (slave bridge6): failed to get link speed/duplex [ 476.630920][T17133] FAULT_INJECTION: forcing a failure. [ 476.630920][T17133] name failslab, interval 1, probability 0, space 0, times 0 [ 476.643977][T17133] CPU: 1 UID: 0 PID: 17133 Comm: syz.0.3046 Not tainted syzkaller #0 PREEMPT(full) [ 476.644004][T17133] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 476.644027][T17133] Call Trace: [ 476.644036][T17133] [ 476.644044][T17133] dump_stack_lvl+0xe8/0x150 [ 476.644073][T17133] should_fail_ex+0x412/0x560 [ 476.644101][T17133] should_failslab+0xa8/0x100 [ 476.644122][T17133] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 476.644150][T17133] ? __alloc_skb+0x186/0x7d0 [ 476.644169][T17133] ? __alloc_skb+0x1d0/0x7d0 [ 476.644186][T17133] ? __local_bh_enable_ip+0xd0/0x130 [ 476.644212][T17133] __alloc_skb+0x1d0/0x7d0 [ 476.644237][T17133] netlink_sendmsg+0x5d4/0xb40 [ 476.644269][T17133] ? __pfx_netlink_sendmsg+0x10/0x10 [ 476.644295][T17133] ? aa_sock_msg_perm+0xf1/0x1b0 [ 476.644339][T17133] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 476.644376][T17133] ____sys_sendmsg+0x972/0x9f0 [ 476.644398][T17133] ? __might_fault+0xaf/0x130 [ 476.644427][T17133] ? __pfx_____sys_sendmsg+0x10/0x10 [ 476.644457][T17133] ? import_iovec+0x73/0xa0 [ 476.644481][T17133] ___sys_sendmsg+0x2a5/0x360 [ 476.644501][T17133] ? __lock_acquire+0x6b5/0x2cf0 [ 476.644525][T17133] ? __pfx____sys_sendmsg+0x10/0x10 [ 476.644580][T17133] ? __fget_files+0x2a/0x420 [ 476.644603][T17133] ? __fget_files+0x3a0/0x420 [ 476.644636][T17133] __x64_sys_sendmsg+0x1bd/0x2a0 [ 476.644660][T17133] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 476.644690][T17133] ? __pfx_ksys_write+0x10/0x10 [ 476.644726][T17133] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 476.644747][T17133] do_syscall_64+0x174/0x580 [ 476.644767][T17133] ? trace_irq_disable+0x3b/0x140 [ 476.644795][T17133] ? clear_bhb_loop+0x40/0x90 [ 476.644818][T17133] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 476.644836][T17133] RIP: 0033:0x7feafc59ce59 [ 476.644854][T17133] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 476.644870][T17133] RSP: 002b:00007feafd525028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 476.644889][T17133] RAX: ffffffffffffffda RBX: 00007feafc815fa0 RCX: 00007feafc59ce59 [ 476.644903][T17133] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 476.644914][T17133] RBP: 00007feafd525090 R08: 0000000000000000 R09: 0000000000000000 [ 476.644926][T17133] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 476.644937][T17133] R13: 00007feafc816038 R14: 00007feafc815fa0 R15: 00007ffddc736bf8 [ 476.644967][T17133] [ 476.896382][ T8604] bond29: (slave bridge6): failed to get link speed/duplex [ 476.917592][T16887] veth0_vlan: entered promiscuous mode [ 476.931612][T16887] veth1_vlan: entered promiscuous mode [ 476.997030][T16887] veth0_macvtap: entered promiscuous mode [ 477.014630][T16887] veth1_macvtap: entered promiscuous mode [ 477.093428][ T8604] [ 477.095921][ T8604] ============================================ [ 477.102085][ T8604] WARNING: possible recursive locking detected [ 477.108258][ T8604] syzkaller #0 Not tainted [ 477.112687][ T8604] -------------------------------------------- [ 477.118856][ T8604] kworker/u8:16/8604 is trying to acquire lock: [ 477.125099][ T8604] ffff88802a13e958 (&qdisc_xmit_lock_key#4){+.-.}-{3:3}, at: sch_direct_xmit+0x15f/0x4c0 [ 477.135055][ T8604] [ 477.135055][ T8604] but task is already holding lock: [ 477.142427][ T8604] ffff888054946158 (&qdisc_xmit_lock_key#4){+.-.}-{3:3}, at: sch_direct_xmit+0x15f/0x4c0 [ 477.152274][ T8604] [ 477.152274][ T8604] other info that might help us debug this: [ 477.160330][ T8604] Possible unsafe locking scenario: [ 477.160330][ T8604] [ 477.167779][ T8604] CPU0 [ 477.171057][ T8604] ---- [ 477.174340][ T8604] lock(&qdisc_xmit_lock_key#4); [ 477.179384][ T8604] lock(&qdisc_xmit_lock_key#4); [ 477.184419][ T8604] [ 477.184419][ T8604] *** DEADLOCK *** [ 477.184419][ T8604] [ 477.192571][ T8604] May be due to missing lock nesting notation [ 477.192571][ T8604] [ 477.200888][ T8604] 11 locks held by kworker/u8:16/8604: [ 477.206346][ T8604] #0: ffff8880362fd140 ((wq_completion)bond19#2){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 477.217503][ T8604] #1: ffffc900051afc40 ((work_completion)(&(&bond->alb_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 477.230398][ T8604] #2: ffffffff8e95cca0 (rcu_read_lock){....}-{1:3}, at: bond_alb_monitor+0xf8/0x17e0 [ 477.240097][ T8604] #3: ffffffff8e95cd00 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x2b6/0x3950 [ 477.250073][ T8604] #4: ffff88802fc38228 (dev->qdisc_tx_busylock ?: &qdisc_tx_busylock#5){+...}-{3:3}, at: __dev_queue_xmit+0x11a6/0x3950 [ 477.262731][ T8604] #5: ffff888054946158 (&qdisc_xmit_lock_key#4){+.-.}-{3:3}, at: sch_direct_xmit+0x15f/0x4c0 [ 477.273024][ T8604] #6: ffffffff8e95cca0 (rcu_read_lock){....}-{1:3}, at: ip_output+0x5b/0x450 [ 477.281998][ T8604] #7: ffffffff8e95cca0 (rcu_read_lock){....}-{1:3}, at: ip_finish_output2+0x3c2/0x1070 [ 477.291751][ T8604] #8: ffffffff8e95cca0 (rcu_read_lock){....}-{1:3}, at: arp_xmit+0x23/0x270 [ 477.300596][ T8604] #9: ffffffff8e95cd00 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x2b6/0x3950 [ 477.310519][ T8604] #10: ffff888078943228 (dev->qdisc_tx_busylock ?: &qdisc_tx_busylock#5){+...}-{3:3}, at: __dev_queue_xmit+0x11a6/0x3950 [ 477.323244][ T8604] [ 477.323244][ T8604] stack backtrace: [ 477.329141][ T8604] CPU: 0 UID: 0 PID: 8604 Comm: kworker/u8:16 Not tainted syzkaller #0 PREEMPT(full) [ 477.329160][ T8604] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 477.329171][ T8604] Workqueue: bond19 bond_alb_monitor [ 477.329188][ T8604] Call Trace: [ 477.329195][ T8604] [ 477.329202][ T8604] dump_stack_lvl+0xe8/0x150 [ 477.329220][ T8604] print_deadlock_bug+0x279/0x290 [ 477.329240][ T8604] __lock_acquire+0x253f/0x2cf0 [ 477.329259][ T8604] ? unwind_next_frame+0xa6/0x2550 [ 477.329282][ T8604] ? sch_direct_xmit+0x15f/0x4c0 [ 477.329303][ T8604] lock_acquire+0x106/0x350 [ 477.329317][ T8604] ? sch_direct_xmit+0x15f/0x4c0 [ 477.329345][ T8604] _raw_spin_lock+0x2e/0x40 [ 477.329366][ T8604] ? sch_direct_xmit+0x15f/0x4c0 [ 477.329387][ T8604] sch_direct_xmit+0x15f/0x4c0 [ 477.329411][ T8604] ? __pfx_sch_direct_xmit+0x10/0x10 [ 477.329433][ T8604] ? arp_create+0x130/0x980 [ 477.329456][ T8604] __dev_queue_xmit+0x180f/0x3950 [ 477.329476][ T8604] ? __dev_queue_xmit+0x2b6/0x3950 [ 477.329497][ T8604] ? arpt_do_table+0x256/0x1e30 [ 477.329595][ T8604] ? __pfx___dev_queue_xmit+0x10/0x10 [ 477.329615][ T8604] ? __pfx_arpt_do_table+0x10/0x10 [ 477.329631][ T8604] ? trace_kmem_cache_alloc+0x29/0xe0 [ 477.329656][ T8604] ? NF_HOOK+0xa2/0x3c0 [ 477.329676][ T8604] NF_HOOK+0x33a/0x3c0 [ 477.329695][ T8604] ? __pfx_arp_xmit_finish+0x10/0x10 [ 477.329714][ T8604] ? NF_HOOK+0xa2/0x3c0 [ 477.329732][ T8604] ? __pfx_NF_HOOK+0x10/0x10 [ 477.329750][ T8604] ? lock_acquire+0x106/0x350 [ 477.329764][ T8604] ? __pfx_arp_xmit_finish+0x10/0x10 [ 477.329783][ T8604] ? inet_addr_type_dev_table+0x25/0x190 [ 477.329845][ T8604] arp_xmit+0x16c/0x270 [ 477.329863][ T8604] ? arp_xmit+0x23/0x270 [ 477.329886][ T8604] arp_solicit+0xbe0/0xe40 [ 477.329908][ T8604] ? arp_solicit+0x119/0xe40 [ 477.329945][ T8604] ? __pfx_arp_solicit+0x10/0x10 [ 477.329973][ T8604] ? __pfx_arp_solicit+0x10/0x10 [ 477.329995][ T8604] __neigh_event_send+0xf05/0x14d0 [ 477.330074][ T8604] neigh_resolve_output+0x198/0x750 [ 477.330100][ T8604] ? __pfx_ip_neigh_gw4+0x10/0x10 [ 477.330119][ T8604] ? ip_finish_output2+0x3c2/0x1070 [ 477.330133][ T8604] ip_finish_output2+0xca9/0x1070 [ 477.330148][ T8604] ? ip_skb_dst_mtu+0x80b/0xa50 [ 477.330172][ T8604] ? ip_finish_output+0x40e/0x530 [ 477.330196][ T8604] ip_output+0x29f/0x450 [ 477.330219][ T8604] ? ip_output+0x5b/0x450 [ 477.330242][ T8604] iptunnel_xmit+0x621/0xd10 [ 477.330286][ T8604] ip_tunnel_xmit+0x193a/0x1f20 [ 477.330341][ T8604] ? __pfx_ip_tunnel_xmit+0x10/0x10 [ 477.330367][ T8604] ? __pfx_gre_build_header+0x10/0x10 [ 477.330414][ T8604] ? kfree+0x1c5/0x640 [ 477.330432][ T8604] ? pskb_expand_head+0x458/0x1390 [ 477.330473][ T8604] __gre_xmit+0x19e/0x240 [ 477.330494][ T8604] ? __pfx___gre_xmit+0x10/0x10 [ 477.330519][ T8604] erspan_xmit+0xa41/0x14d0 [ 477.330544][ T8604] ? ret_from_fork_asm+0x1a/0x30 [ 477.330564][ T8604] ? __pfx_erspan_xmit+0x10/0x10 [ 477.330590][ T8604] dev_hard_start_xmit+0x2cd/0x830 [ 477.330616][ T8604] sch_direct_xmit+0x251/0x4c0 [ 477.330642][ T8604] ? __pfx_sch_direct_xmit+0x10/0x10 [ 477.330666][ T8604] ? kthread+0x2e0/0x470 [ 477.330690][ T8604] __dev_queue_xmit+0x180f/0x3950 [ 477.330713][ T8604] ? __dev_queue_xmit+0x2b6/0x3950 [ 477.330738][ T8604] ? __pfx___dev_queue_xmit+0x10/0x10 [ 477.330758][ T8604] ? rcu_is_watching+0x15/0xb0 [ 477.330777][ T8604] ? trace_kmem_cache_alloc+0x29/0xe0 [ 477.330799][ T8604] ? kmem_cache_alloc_node_noprof+0x3ce/0x690 [ 477.330833][ T8604] ? alb_send_lp_vid+0x14e/0x550 [ 477.330852][ T8604] alb_send_lp_vid+0x348/0x550 [ 477.330872][ T8604] ? __pfx_alb_send_lp_vid+0x10/0x10 [ 477.330895][ T8604] alb_send_learning_packets+0x12c/0x300 [ 477.330913][ T8604] ? __pfx_alb_send_learning_packets+0x10/0x10 [ 477.330929][ T8604] ? bond_alb_monitor+0xf8/0x17e0 [ 477.330947][ T8604] ? netdev_lower_get_next_private_rcu+0x9f/0x100 [ 477.330975][ T8604] bond_alb_monitor+0x3d5/0x17e0 [ 477.330992][ T8604] ? bond_alb_monitor+0xf8/0x17e0 [ 477.331008][ T8604] ? __pfx_bond_alb_monitor+0x10/0x10 [ 477.331025][ T8604] ? process_scheduled_works+0xa70/0x1860 [ 477.331040][ T8604] ? process_scheduled_works+0xa70/0x1860 [ 477.331057][ T8604] process_scheduled_works+0xb5d/0x1860 [ 477.331085][ T8604] ? __pfx_process_scheduled_works+0x10/0x10 [ 477.331104][ T8604] ? assign_work+0x3d5/0x5e0 [ 477.331121][ T8604] worker_thread+0xa53/0xfc0 [ 477.331149][ T8604] kthread+0x389/0x470 [ 477.331169][ T8604] ? __pfx_worker_thread+0x10/0x10 [ 477.331184][ T8604] ? __pfx_kthread+0x10/0x10 [ 477.331204][ T8604] ret_from_fork+0x514/0xb70 [ 477.331234][ T8604] ? __pfx_ret_from_fork+0x10/0x10 [ 477.331260][ T8604] ? __switch_to+0xc79/0x1410 [ 477.331281][ T8604] ? __pfx_kthread+0x10/0x10 [ 477.331297][ T8604] ret_from_fork_asm+0x1a/0x30 [ 477.331320][ T8604] [ 477.795500][T17140] netlink: 'syz.3.3047': attribute type 13 has an invalid length. [ 477.803423][T17140] netlink: 'syz.3.3047': attribute type 17 has an invalid length. [ 477.821652][ T5644] Bluetooth: hci5: command tx timeout [ 477.914193][T17139] bridge0: port 3(bond0) entered disabled state [ 477.920731][T17139] bridge0: port 2(bridge_slave_1) entered disabled state [ 478.225024][T17139] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 478.600921][T17140] bridge0: left promiscuous mode [ 478.607537][T17140] bridge0: port 3(bond0) entered blocking state [ 478.613915][T17140] bridge0: port 3(bond0) entered forwarding state [ 478.622062][T17140] 8021q: adding VLAN 0 to HW filter on device bond0 [ 478.630240][T17140] 8021q: adding VLAN 0 to HW filter on device team0 [ 478.637653][T17140] dummy0: left promiscuous mode [ 478.645198][T17140] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 478.661140][T17140] bridge_slave_0: left promiscuous mode [ 478.670138][T17140] bridge0: port 2(bridge_slave_1) entered blocking state [ 478.677229][T17140] bridge0: port 2(bridge_slave_1) entered forwarding state [ 478.694248][T17140] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 478.722208][ T8590] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 478.730895][ T8590] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 478.741504][T16887] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 478.751726][ T8590] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 478.760698][ T8590] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 478.773073][T16887] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 478.785377][ T8590] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 478.795184][ T8590] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 478.804238][ T8590] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 478.814533][ T8590] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 478.849852][T16887] ieee80211 phy32: Selected rate control algorithm 'minstrel_ht' [ 478.884092][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 478.887961][T16887] ieee80211 phy33: Selected rate control algorithm 'minstrel_ht' [ 478.893437][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 478.924324][ T8604] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 478.933134][ T8604] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 480.589509][ T8590] net_ratelimit: 16 callbacks suppressed [ 480.589529][ T8590] bond29: (slave bridge6): failed to get link speed/duplex [ 480.709267][ T8596] bond29: (slave bridge6): failed to get link speed/duplex [ 480.819335][ T8604] bond29: (slave bridge6): failed to get link speed/duplex [ 480.929599][ T48] bond29: (slave bridge6): failed to get link speed/duplex [ 481.039451][ T36] bond29: (slave bridge6): failed to get link speed/duplex [ 481.149278][ T8598] bond29: (slave bridge6): failed to get link speed/duplex [ 481.259475][ T8598] bond29: (slave bridge6): failed to get link speed/duplex [ 481.369795][ T8590] bond29: (slave bridge6): failed to get link speed/duplex [ 481.479253][ T8590] bond29: (slave bridge6): failed to get link speed/duplex [ 481.589261][ T8596] bond29: (slave bridge6): failed to get link speed/duplex [ 485.669737][ T8596] net_ratelimit: 36 callbacks suppressed [ 485.669761][ T8596] bond29: (slave bridge6): failed to get link speed/duplex [ 485.789452][ T8598] bond29: (slave bridge6): failed to get link speed/duplex [ 485.899617][ T36] bond29: (slave bridge6): failed to get link speed/duplex [ 486.009454][ T8598] bond29: (slave bridge6): failed to get link speed/duplex [ 486.119687][ T36] bond29: (slave bridge6): failed to get link speed/duplex [ 486.229586][ T8598] bond29: (slave bridge6): failed to get link speed/duplex [ 486.339206][ T8598] bond29: (slave bridge6): failed to get link speed/duplex [ 486.449638][ T8598] bond29: (slave bridge6): failed to get link speed/duplex [ 486.559470][ T8590] bond29: (slave bridge6): failed to get link speed/duplex [ 486.669541][ T8604] bond29: (slave bridge6): failed to get link speed/duplex