last executing test programs: 4.081310798s ago: executing program 1 (id=2310): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)=ANY=[@ANYBLOB], 0x7c}}, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmsg$IPVS_CMD_NEW_SERVICE(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="10002cbd70864b7d412501000000"], 0x14}, 0x1, 0x0, 0x0, 0x40005}, 0x24000081) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r3, 0x84, 0x2, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, 0x0, &(0x7f0000000640)) setsockopt$inet_sctp6_SCTP_INITMSG(r3, 0x84, 0x2, &(0x7f0000000000)={0xd, 0x1, 0x9b, 0x800}, 0x1) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x74, &(0x7f0000000380)=[@in={0x2, 0x4e23, @empty}, @in6={0xa, 0x4e22, 0x1, @mcast2, 0x9}, @in6={0xa, 0x4e21, 0x9000, @private1, 0x7b4}, @in6={0xa, 0x4e20, 0x4, @local, 0x3}, @in={0x2, 0x4e20, @empty}]}, &(0x7f0000000140)=0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060", @ANYRESOCT], 0xb8}}, 0x20040014) sendmsg$nl_xfrm(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300100000000000fbdbdf2500000000000000000000000000000001ac1414bb00000000000000000000000000000004000000000a0060803b000000", @ANYRES32=r0, @ANYRES32=0xee01, @ANYBLOB="00000000000000000400000000000000000000000000000000000000000000000700000000000000fdffffffffffffff02000000000000000000000000000000feffffffff007246f6000000000000000000000000000000000000000000000006000000c06b6e0000"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x20000050) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r5, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x20004000) sendmsg$nl_xfrm(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000020000000000fc0000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80c0}, 0x0) sendmsg$nl_xfrm(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="b80000001300e9990500000000000000fc000000000000000000000000000000fc00000000000000000000000000000000000000000000000a0030"], 0xb8}}, 0x4000) 3.992058681s ago: executing program 1 (id=2313): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x30, r3, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@TIPC_NLA_MON={0x4}, @TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x5}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) 2.579957825s ago: executing program 1 (id=2321): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0xfff3}, {0xffff, 0xffff}, {0x8, 0x9}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x24040084) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@getchain={0x24, 0x66, 0x1, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0xe, 0x4}, {0xc, 0xfff3}, {0xfff1, 0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$pppl2tp(0x18, 0x1, 0x1) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) connect$pppl2tp(r5, &(0x7f0000000000)=@pppol2tpin6={0x18, 0x1, {0x0, r6, 0x2, 0x0, 0x2, 0x0, {0xa, 0x4e23, 0x40, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8}}}, 0x32) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0x10000}, {0x0, 0xb}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x2}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000280)=@newtfilter={0x8c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r7, {0xfff3, 0x5}, {}, {0x7, 0x3}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x8, 0x8, 0x0, 0xa, 0x3}, 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x2}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x404c000}, 0x4000) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) select(0x40, &(0x7f00000000c0)={0x4, 0x7, 0x7fff, 0x40, 0x7fff, 0x1000, 0xf4, 0x4d39}, &(0x7f00000001c0)={0x97d, 0x0, 0x6, 0x5, 0x5, 0xf41, 0x5, 0x116e}, &(0x7f0000000200)={0x1, 0xffffffffffffffff, 0x81, 0x0, 0x10000, 0x8001, 0x0, 0x2}, &(0x7f00000003c0)={r8, r9/1000+60000}) 2.317491407s ago: executing program 3 (id=2325): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x122}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) unshare(0x6020400) pselect6(0x40, &(0x7f00000003c0)={0x4, 0x8, 0x833, 0x1, 0x7, 0x2, 0xd, 0x1}, 0x0, &(0x7f0000000440)={0x8, 0x7, 0x80000001, 0x3, 0x3, 0xfffffffffffffffd, 0x2, 0x2}, &(0x7f0000000480)={0x0, 0x3938700}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYRES16=r6], 0x158}, 0x0) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) 2.31704138s ago: executing program 2 (id=2326): r0 = socket$inet_icmp(0x2, 0x2, 0x1) sendmmsg$inet(r0, &(0x7f0000000340)=[{{&(0x7f0000000200)={0x2, 0x4e22, @local}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000400)='\b\x00\x00\x00(\x00\x00\x00', 0x8}, {0x0}], 0x2}}, {{0x0, 0x0, &(0x7f00000003c0)}}], 0x2, 0xc000) 2.239373555s ago: executing program 2 (id=2327): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x1f, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000180100002020642500000000002020207b1af8ff0000000fbfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x70}, 0x94) 2.216193051s ago: executing program 0 (id=2328): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000aa4000000060a010400000000000000000a0600010900010073797a31000000000900020073797a3200000000780004806400018009000100686173680000000054000280080007400000000108000540"], 0xcc}}, 0x24000840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=@deltclass={0x24, 0x29, 0x300, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x10, 0xe}, {0x0, 0xffff}, {0xffe0, 0xfff3}}}, 0x24}}, 0x0) sendmsg$NL802154_CMD_SET_TX_POWER(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={0x64, 0x0, 0x1, 0x74bd29, 0x25dfdbff, {}, [@NL802154_ATTR_TX_POWER={0x8, 0xb, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_TX_POWER={0x8}]}, 0x64}, 0x1, 0x0, 0x0, 0x2000}, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000040000701fcffffff00000100017c0000040042800c0001800600060065580000100002800c000b"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="740000001000010400"/20, @ANYRESDEC=r0, @ANYBLOB="2b030040000000004c0012800b00010067656e65766500003c0002800800010001000000140007000000000000000005000000000000000108000f"], 0x74}}, 0x24005000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58) r2 = socket$kcm(0x29, 0x2, 0x0) sendmmsg$inet(r2, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000280)="fd", 0x1}], 0x1}}], 0x1, 0x0) r3 = socket$kcm(0x29, 0x2, 0x0) sendmmsg$sock(r3, &(0x7f0000001c00)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000300)="95cb57f7f9f5e9b19422fdbba16052a29a2d3be6e213bd75a97b56c7dc217216090e7c97", 0x34000}], 0x1}}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000880)="05ba8c1cfb03f631fd2d06121541e78e6718599f7482f9b4b4464ff2d795", 0x1e}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x3, 0x40) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000011c0)=@newtaction={0xe70, 0x30, 0x25, 0x0, 0x0, {}, [{0xe5c, 0x1, [@m_pedit={0xe58, 0x1, 0x0, 0x0, {{0xa}, {0xe2c, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x8, 0x5, 0x0, 0x1, [{0x4}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe70}}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r6, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r6, 0x84, 0x15, 0x0, 0x0) connect$inet6(r5, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) r7 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r7, &(0x7f00000000c0)='blkio.bfq.group_wait_time\x00', 0x0, 0x0) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r8, 0x6, 0x3, &(0x7f0000000340)=0x32, 0x4) connect$bt_l2cap(r8, &(0x7f0000000080)={0x1f, 0x9, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r9 = getpid() sendmsg$unix(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000000c0)="10", 0x33880}], 0x20, &(0x7f00000004c0)=[@cred={{0x1c, 0x1, 0x2, {r9}}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x38}, 0x8841) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) 2.065520911s ago: executing program 0 (id=2329): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r3, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000001340)="94da", 0x2}], 0x1}, 0x20000001) recvmmsg(r2, &(0x7f0000004440)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)=""/193, 0xc1}], 0x1}, 0xffffffff}, {{0x0, 0x0, 0x0}, 0x9}], 0x2, 0x10000, 0x0) r4 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r4, &(0x7f0000000040), 0x10) listen(r4, 0x0) r5 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r5, &(0x7f0000000300), 0x10) r6 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000400)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) readv(r6, 0x0, 0x0) setsockopt$sock_linger(r5, 0x1, 0x3c, &(0x7f0000000180)={0x1, 0x5}, 0x8) sendmmsg(r5, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='\t', 0x1}], 0x1}}], 0x1, 0x24048094) r7 = accept4$unix(r4, 0x0, 0x0, 0x0) recvfrom$unix(r7, &(0x7f0000000140)=""/263, 0x107, 0x0, 0x0, 0x0) recvfrom$unix(r5, 0x0, 0x0, 0x2002, 0x0, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) r10 = socket$l2tp6(0xa, 0x2, 0x73) bpf$PROG_LOAD(0x5, 0x0, 0x0) bind$l2tp6(r10, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x20) r11 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r11, &(0x7f0000000180)={0xa, 0x0, 0x404000, @loopback, 0x7cfd1f0f}, 0x20) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_INTERFACE(r12, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="2508007a0000000000030700000008000300", @ANYRES32=r9, @ANYBLOB="1415060064756d6d793000000000000000000000140004007665c139315f746f5f626f01640000000500d233010000000800050004"], 0x54}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_SET(r4, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="2ae0403205551c70db70d7c2b450b13dd2125daa1c741f132a756603b2268521c48f2b790814ca363f1368a1e3876c025214228f8755795dc868029f40620a506d8279", @ANYRES16=r6, @ANYRESDEC], 0x54}, 0x1, 0x0, 0x0, 0x4000004}, 0x4) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000007df886eada20df0a70f1460a64000000060a0b1600000000000000000200000838000480340001800b0001006e756d67656e00002400028008000240fffffff8080001400031d389abf8dab2d200000008000440ffffffff0900010073797a30000000000900020073797a3200000000140000001100010000"], 0x8c}, 0x1, 0x0, 0x0, 0x850}, 0x4040080) socket$kcm(0x10, 0x2, 0x0) 2.063828768s ago: executing program 2 (id=2330): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="300000001c00070c000000000000000002000000", @ANYBLOB="820000000a7700000000000000000000e4ff00000000"], 0x30}, 0x1, 0x0, 0x0, 0x8001}, 0x20024090) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000003000000080001"], 0x28}}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000001780)='ns/ipc\x00') syz_open_procfs$namespace(0x0, &(0x7f0000001780)='ns/ipc\x00') r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r5 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32=r4, @ANYBLOB="00000000100000001c001a80", @ANYRES16=r5], 0x44}}, 0x2000800) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000600), r5) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x14, r7, 0x1, 0x70bd2c, 0x25dfdbff}, 0x14}}, 0x800) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="3000b6b6", @ANYRES16=r10, @ANYBLOB="010000000001000000003f00000008000300", @ANYRES32=r9, @ANYBLOB="14005e8008000100ffffffff08000200fcffffff"], 0x30}}, 0x0) r11 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000680)={'bridge0\x00', 0x0}) sendmsg$nl_route(r11, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5800000055003d07000000000001000007000000", @ANYRES32=r12, @ANYBLOB="20000280", @ANYRES32=r11, @ANYBLOB="0000000000000000000000000a0000000000000000000014200001"], 0x58}}, 0x0) sendmsg$NL80211_CMD_START_AP(r6, &(0x7f0000000440)={&(0x7f0000000040), 0xc, &(0x7f0000000400)={&(0x7f00000002c0)={0x50, r10, 0x2, 0x70bd27, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x367}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x2}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x9a3}], @NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x50}, 0x1, 0x0, 0x0, 0x20048804}, 0x20004000) socket(0x400000000010, 0x3, 0x0) r13 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000000), r13) sendmsg$NLBL_MGMT_C_ADDDEF(r13, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)={0x24, r14, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x2}]}, 0x24}}, 0x0) r15 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000100), r0) sendmsg$NLBL_MGMT_C_PROTOCOLS(r13, &(0x7f00000005c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x50, r15, 0x4, 0x70bd2d, 0x25dfdbfb, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @remote}, @NLBL_MGMT_A_DOMAIN={0xd, 0x1, 'mptcp_pm\x00'}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @rand_addr=0x64010100}]}, 0x50}, 0x1, 0x0, 0x0, 0x880}, 0x40) 1.944141647s ago: executing program 0 (id=2331): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x30, r3, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@TIPC_NLA_MON={0x4}, @TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x5}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x8000) 1.91171619s ago: executing program 4 (id=2332): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@func={0x1, 0x0, 0x0, 0xc, 0x2}, @func_proto={0x0, 0x200000000000013d, 0x0, 0xd, 0x0, [{0xf}, {0x0, 0x2}]}]}}, 0x0, 0x42}, 0x28) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r0, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x3, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000007000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1}, 0x94) 1.890783075s ago: executing program 2 (id=2333): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000020a010200000000000000000a0000060900010073797a310000000008000240000000018c000000020a010100000000000000000000000369000600e62807258a6d38caf4cb1d7a776a7a05e57912414e63207c5e61d47bb4016b21bd5593b033b0968722f2f0f4818a1a13fbb43e79d0ae674d071c0164df9d3701cc15211300766b6ebe326ada9e49cca5c2a07460e46e35eabfb48a4cd2cd83790d7e705b010000000900010073797a31000000001c000000090a030000000000000000000a0000e107000c"], 0xf8}, 0x1, 0x0, 0x0, 0x2000c814}, 0x4000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000004000ffff0900010073797a30000000000900020073797a3100000000140003800800014000000000"], 0x138}, 0x1, 0x0, 0x0, 0x20040855}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd0002800800"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bond_slave_0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[], 0x20}}, 0x8000) syz_genetlink_get_family_id$nfc(&(0x7f0000000000), 0xffffffffffffffff) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet_smc(0x2b, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket(0x10, 0x803, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r3) socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_timeval(r3, 0x1, 0x15, &(0x7f0000000040)={0x0, 0xea60}, 0x10) setsockopt$inet6_tcp_int(r3, 0x6, 0x1e, &(0x7f0000000000)=0x400000001, 0x4) setsockopt$inet6_tcp_int(r3, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e23, 0xa4e4, @private1={0xfc, 0x1, '\x00', 0x1}, 0x6}, 0xfffffffffffffedb) sendmmsg(r3, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000000bc0)}}], 0x1, 0x400c011) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000ac0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x4}, {0xffff, 0xffff}, {0xb, 0xfff3}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x10, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x2}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4004084}, 0x480c4) socket(0x10, 0x803, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'team_slave_1\x00'}) 1.71002409s ago: executing program 4 (id=2334): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xb, 0xc, 0x4, 0xc4f, 0x1, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000100), 0x6c7, r0}, 0x38) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000080)=0x2200, 0x4) (async) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x1e}}, @dest_unreach={0x3, 0xa, 0x0, 0x0, 0x4, 0x7, {0x5, 0x4, 0x2, 0x8, 0x8d6, 0x64, 0xb, 0x3, 0x4, 0x2, @broadcast, @broadcast}}}}}}, 0x0) (async) r2 = syz_genetlink_get_family_id$fou(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$FOU_CMD_GET(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000e61b8455eb1c6c1ee8cbcca96be1b27a19be432664107519871260ebe18fd1dbdda3f5a8d71deb4e23b1c05aec07da665aa129ea992d593e206326e9d988e271ec43c9bd9f132cdbafd2efca24bd64061dce3b26273d408", @ANYRES16=r2, @ANYBLOB="150128bd7000f8dbdf2503000000"], 0x14}, 0x1, 0x0, 0x0, 0x24040015}, 0x48054) 1.664155262s ago: executing program 4 (id=2335): write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc00082c00db5b6861589bcfe8875a060300000023000000000000000000000000ac1414aa33"], 0xfdef) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a84000000060a0b04000000000000000002000000580004802c0001800b000100736f636b657400001c000280080001400000000308007f00000000820800024000000002280001800b0001006f626a72656600001800028008000340000000170900040073797a30000000000900010073797a30000000000900020073797a32"], 0xac}, 0x1, 0x0, 0x0, 0xc0}, 0x20008000) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000940)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000a00)=ANY=[@ANYRESDEC=r1, @ANYBLOB="ad7d0ff3a2315532a274675b6a71f84416a8360e2d16943d09fc6958a5dbc3e0ddeafcadda8e1450beb09ef237f2209cd86d52382d2c6ffbdf5029c209424e", @ANYRES8=r1, @ANYRESDEC, @ANYBLOB="18612f699917d0a85da9ab6049c649449242f2b3cc69c9369bc8d1bf29634b27cd931347eebf58a074a4e7e12f3f175313fff7e9886f0831e0834b5675a83a5899e1734a8584bc907eb0bc179d95344e10e23f78015fe06d4a41a357e04c3c451c5c518ee039ee3b5c1987fa9ae0a4eebfb1357a5fbca3292135512009ea314ccf928b7408fb47e80976430700c12aa81d4150eca31c94e3e554c28ee4fb71d9b2bbe1af57d20675f5bc84b730063fbc1f6e16a845f12d46e353e304253db58d074123a49271bc795af1c62c196def703c10aa259faa6a7de07a69f24cc45bdad3c0e9c8adbf5aac8299ad79a3e543c86417db6b6d59284fc22d69fa"], &(0x7f00000002c0)='GPL\x00'}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x3, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="18020000000000000000000000000000850000009700000095000000000000233145db56c85f16db5dc554b4654b53e1ad25d9c1dce96c0fae143c71d790ac2c84d7901158905695f22c4c0ec0755a9bc2c9a7f773c7b3011100d3467ced5881df1343ec9e8d75fd43172d9a6e6f16f1daaabb34f2389971f84c6be413b0313bcc38af8b8bb89f0572632720fe31bff42652a58736d8c0b2a9c2833f0000000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x101}, 0x94) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000280)=@assoc_value={0x0}, &(0x7f0000000880)=0x8) r3 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r3, &(0x7f0000000c00)=[{{&(0x7f0000000140)={0x2, 0x0, @rand_addr=0x64010100}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000240)='P', 0x1}], 0x1}}, {{&(0x7f0000000180)={0x2, 0x4e20, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f00000004c0)="89", 0x1}], 0x1}}], 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x24, 0x24, 0xd0f, 0x3, 0x0, {0x60, 0x0, 0x0, 0x0, {0x0, 0x3}, {0xffff, 0x8}, {0x5, 0x6}}}, 0x24}, 0x1, 0x0, 0x0, 0x200001d4}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r5, 0x0, r7, 0x0, 0x6, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r8, &(0x7f0000000280)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r8, 0x0) write$cgroup_devices(r6, &(0x7f00000000c0)=ANY=[], 0x6) close(r6) write(r4, 0x0, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x100000d, 0x6031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ece000/0x1000)=nil, 0x1000, 0x3000007, 0x31, 0xffffffffffffffff, 0x5480f000) r9 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_ERRQUEUE(r9, 0x6b, 0x4, 0xffffffffffffffff, &(0x7f0000000080)) getpeername$qrtr(r6, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x17, &(0x7f0000001140)=@sack_info={r2, 0xef, 0x6}, 0xc) socket(0x2c, 0x5, 0x8) 1.542689893s ago: executing program 2 (id=2336): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r4 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r4, 0x0, 0x0, 0x2, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x4008054) write$nci(r0, &(0x7f0000000240)=ANY=[@ANYBLOB='p\x00\t'], 0xc) r5 = socket(0x1e, 0x4, 0x0) write$nci(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="5001", @ANYRES8=r1, @ANYRES16=r5], 0x14) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001000000000000000000200100000000000000000000000000006401010200000000000000000000000000000005000000030200200000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000ac00000000000000ff0f000000000000ffffffffffffffff0000000000000000ffffffffffffffffffffff7f0000000000000100000000000200000000020000000000000000000000000000008040000000000000e90108000000000000000001000003000000004400050000005167420000000000000000000000000004d23c0000000a000000ffffffff00000000000000000000000000000000000308"], 0xfc}}, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000064010100000000000000000000000000fc01000000000000000000000000000000000000000000000a0000"], 0xfc}}, 0x0) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) r8 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r8, &(0x7f0000002dc0)={&(0x7f0000001640)=@l2tp6={0xa, 0x0, 0x6, @local, 0x7}, 0x80, &(0x7f0000000440)=[{&(0x7f00000000c0)="c4", 0x1}], 0x1}, 0x240280d1) 1.394314803s ago: executing program 3 (id=2337): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0x17, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x43}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfeff}, {0x85, 0x0, 0x0, 0x86}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x80000000}}, [@printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x35e}, {0x85, 0x0, 0x0, 0xad}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x84}, {0x7, 0x0, 0xb, 0x0, 0x0, 0x0, 0x500}}, {0x95, 0x0, 0x0, 0x1700}}, &(0x7f0000000080)='GPL\x00', 0x3, 0x0, 0x0, 0x41000, 0x41, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000d}, 0x94) 1.224252138s ago: executing program 1 (id=2338): bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000002200)={0xffffffffffffffff, 0x0, 0x0}, 0x10) (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000900)=@bpf_ext={0x1c, 0x24, &(0x7f00000009c0)=ANY=[@ANYBLOB="180000000100000000000000ff7f000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018240000", @ANYRES32=r0, @ANYBLOB="000000000300000004961800040000001865000006000000000000006605000017b0fcff0000000018310000040000000000000000000000b7080000000000007b8af8ff00000000b7080000810000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb702000008000000182300009d4b2f48c04c24624c0b7a8f5e54e0c3e274751fb787354bc412e033d630323a9e5e594f293d35ebb90bce57c4eefbfab536a42f5d1a354ef02d0947a46f26ad5c1066cd4dc1ce4afc68947ec7ebc2f21683c20cd7797e3711c5492ce43c5ee8029e075f4e17b603525cb629e8912a91", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a5000000bf91000000000000b7020000010000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000700)='syzkaller\x00', 0x0, 0x8d, &(0x7f0000000740)=""/141, 0x40f00, 0x11, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f0000000880)={0x0, 0x2}, 0x8, 0x10, &(0x7f00000008c0)={0x1, 0x3, 0xa, 0x5}, 0x10, 0x22174, r0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000000000000000000000000008500000022000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000080)='GPL\x00'}, 0x94) (async) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) socket(0x1a, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f0000000400)=@ethtool_flash={0x33, 0xb619, '.\x00'}}) unshare(0x2a020400) (async) openat$pidfd(0xffffffffffffff9c, &(0x7f0000001100), 0x200200, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="5c0000000206050000000000000000000000000005d1f5000000000005000100070000000900020073797a32000000000500050000000000140007800500150003000000080012400073683a6d616300000000"], 0x5c}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000002000000851000000600000018020000", @ANYRES32, @ANYBLOB="000000000000000066000200f3ffffff180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], 0x0, 0x2, 0xde, &(0x7f0000000340)=""/222}, 0x94) (async, rerun: 32) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (rerun: 32) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) (async, rerun: 64) ioctl$int_in(r3, 0x5452, &(0x7f0000000440)=0x6) (async, rerun: 64) sendmsg$NFQNL_MSG_CONFIG(r2, 0x0, 0x804) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) (async) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) (async) r4 = socket$inet(0x2, 0x3, 0x7f) bind$inet(r4, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) (async) setsockopt$inet_int(r4, 0x0, 0x3, &(0x7f0000000080)=0xfffffffa, 0x4) (async) connect$inet(r4, &(0x7f0000000040)={0x2, 0x3, @multicast1}, 0x10) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c001e"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x840) (async) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r6, 0x0, 0x2e, &(0x7f0000000340)={0x3, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @loopback}}}, 0x108) 1.12231138s ago: executing program 3 (id=2339): close(0x3) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) close(0xffffffffffffffff) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x6, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0xffffffff}, 0x50) close(0x3) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="2c0000001800010a00000000ffffffff021000100000fe0800000000080005000000000008"], 0x2c}}, 0x4040818) r2 = socket$kcm(0x29, 0x2, 0x0) close(r2) r3 = socket$kcm(0x2b, 0x1, 0x0) close(r3) socket$l2tp6(0xa, 0x2, 0x73) setsockopt$sock_attach_bpf(r2, 0x1, 0xd, &(0x7f00000000c0), 0xfe11) close(r3) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000c00000009"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xe, 0x1a, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0x8}, @cb_func={0x18, 0x0, 0x4, 0x0, 0x4}, @jmp={0x5, 0x1, 0x3a33fa9864a6e4c0, 0x1, 0x0, 0x8}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @map_idx={0x18, 0x1, 0x5, 0x0, 0x2}, @ldst={0x0, 0x3, 0x1, 0xb, 0x2, 0xfffffffffffffffe}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x0, 0xffffffffffffffff, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000180)={r5, r0}, 0xc) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000080850000008200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffff"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f00000021c0)={r8, 0x0, 0x0}, 0x10) r9 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000001c0), 0x4) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000500)={@cgroup, 0x12, 0x0, 0x2, &(0x7f0000000200)=[0x0], 0x1, 0x0, &(0x7f0000000440)=[0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000004c0)=[0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000540)={@fallback=r0, r9, 0x35, 0x5, r8, @void, @value=r6, @void, @void, r10}, 0x20) writev(r8, &(0x7f0000001c80)=[{&(0x7f0000000a00)="b16f0c6fdbcdb906d369e1cbeeda0f5b9de9e8a1787b1ac21dc7add5d94aa5bd419f503b8c6bec08ca7c42bd073bfcfcbae049d8be0f5974f3beb9211ab859171c784774f1efaed9bb5cec77f0a145a0f5301adaa5b3380bf40e9542292e1c56dbe69f72294be341e097ccbdd4d0416a4298dd15718dbffb8f3dc35c31638ef281dc4516cb167dd7c8f6c88f6e60be17b11fa42d0f8c283317e2d262b39a7e2f61c69a33d96add40de1d1869867ac45956bbd572f7a87b3dc7fd83a0046aa0351f2bc5dbb8ae74b4a16a8644c23614b14b15334e8f36bfa5b82abf9283a852e3dcc9e83b78ae392ae1c2b7ecbb902fe66c29e19f06b172069d02a479bdca77d6626f58b8d3fd5d3eca5b8839a9508b293ef1efc17417ec61882b7a550beda5f54e311d24a79986edb8c5a5889b519b90db8665f1af7f85f0e91ab0adf96c52cc240fb7d7082453aa34b5b919ac65d8f68550ce71e5c75108c600301f89b668971be05149783d64fbe938c9e7c289d3840058db81ea62e2118264297525bf10dd165b8682c91ba6456ad6ca3fb3d3fe6ca331fe466143ace9b69cd254f6f2139bf88be3038b1cd231d67a7a59f226ad9a3a3f14bcadce482661439ea82bf6e036bc51b8b30c93e3dd118b4d453bdec58a63e09725bd208d762fab37aef36bf7f7be2d0ac4f220a1dbc4e8cd4a5e1c6381f9d8248a199effda0df00b6c8d24745adbff97d925e30fa4f6dee635d9158dcfa8326e8db1e1584e7c1a1521337370522c46afca2f5b61aa321828349b798549a577a688a909a5eca35c6b40e1791f1ac6418f0ad9579376f8916149b02098914162152a3417c7c9a0707ec5230121896592c0a93e9fcd2571a7cb1ff9981205800381c9c593ff81c3970ea23168461423509368ecd76aad8dc42131b022bccbbe60344492238f990424f8e4f80deb1ae5eba5ef360f1c6845a314c3f63b9308cc126588b7c428c7406cbda4870f7d8980dab23e08901028be2e0173786d6022ce99672940cb8e731ad4e77fa8c9d14767a8f6623c3bf8566cf73aa60fb182a816625a1a501b53b9bd974b80e5dc4bc548940cfdf5f6dedef7265992e7527dcb15b1728e82a121d6a2797feaa0794bacfb6e0e273c2596f9b9025fd7574824bb675f953f01ef001ad5f2aaacdcee5d61138db31f37e33487ae5a4926d1115f8c43a8e196bb4b5e30799c0b1f1428f7fa009a1be9289155912528a92716af2b5f7a555434c12b005650ecfdd70c9f8e61379e2829634c80b847691faaf4cdf9229b894143e772c754c73e721a9d02eee0db75373c69e5cdc44ebe3ea44ad003706bb45d8ab68818e26976c29d7a5ed2aee91d5cdec51bbf11000953802d5b937de15b5b9ca0eba1928de7a32632894a777e541c3144e711f949e5149b52a735747865ef58a5e824aef23f4c3099224d7b34f966e637234c2a3437f13ea7927686045d50bacc3d1d402196ce8588c788391cce647e22667e3362efbebac96504ae8d9394cb48c99bc5a4f1b153424e3fe2e97123875fa3cac502a23c09c8406f573a3718ccbd37bd4277bac7d64b456b3b8bdb81067acbf0540f5fd2e434a1f7a02d6f28ccca80e0d2ac3a49dc9a860158a62a20838f22d6326e7920985191e933d8dd27d23308382315b2a9012314e7bf632b931b9b7ae8bfe52888233b36932f43f1a06b5330af6d34cc8362a66b5969032c5e9c2a84ad898a3595bc368c6453b26ae72271c59c83a80eac84e87470b7ce75c347730b982f57ae195349ee5409d7b298af54d480161d42c90ca83dc21a601e552668c15169510703426c2c2b198d9a821eaa5fea8d96f1dc784d241bf760b69b594adc65db6e220947f2e9ea56d384f7a549b0d99908496f67839aad6c5784f5d006401f08bcdf98c004c5f75645448b74a3b35c875d4d2321e51305b7eb46350dc39c15b468d14cae29c91181ecfd6903a89ba192ce8e4a725e804ef30e3b9664f2607a9ad40c11a125bf4269b73b692173903cab251925fd86aef3fcc18cfc5eb56790e77d5fd97b1382a02b6745c14f67f9ab615cf0489c4b323194ca5edac9fda9c2d496ddf49911d1cbd4bf57601fc82bdafe75870ca15bc4ee9bf1da934a6ef17ee4ecc8b8a051e2960b4010b9aab93a5f5f6dcac9b75637cf307e0fee02942199cfd45be613ddacae2dcfbea90bae80a4badf14a57da13edb1437ea7847396a70ea96ea7109d4e1a2fd53bb533c44ec6ff2c312493cd03c6168abf0b53c8c5baa237e1ce5c10eb90f26d146dc9bb92aef1248081031e252402c50ac2ac397efdd90bf4e8ccbb45c990a153c01014ae1dc364b3756d575b1032d4f517b8b6926cf04828d4913d8622edb86a207de2e8d261f8c855f54f065a22bdadbc3c9c43d563f4e6122ed3df5052e33d959ba9572aa08a1453625c17ebd2b06e84c3b1a584dbac12ed57c3d43d25e03f22ba549dd7b6e0fe0ba8f20132971fedfdbf0429e5e4877961f5e3344f8c67919adc653a715939696cadbb539a1fa36d42b5425a1fa4588f5ed05eee96712211f7b4233448fcd9b57bd8c7f3716b1592d5ad3905c092ef075d0dc0a05928d7f1f0ce90dd6ed19f9436e5a7d449870731602c647dc1bc6a1dd66922b2545391a439f09110d71c76548298effd0d47044266c455d0a94411a4b4b7c5e0e6ccec6d2cad522827c74819bc7d9f0d054fac1b0954bdeb0bc4b59547e48bf6008d6b246f6c53c42c0d74ef1f4cdae85ce865f7c720d1f4e96e2fe2446641ae8bbe86f664f667c20c5b38d7283080143adf17568e71c57aa2713d9eef35feed2ffaa2970ecf4d7bcea1b490ba033fd8b36e19a99561d05c3784f7a2081e04e627ce1ad68004e817e4a83629c93a60c2741b9537677622ee48e93f27011dd5e5565093ff724934dd0035635d09138381f7d3171fce878ebf51826ab8ff1cf5e4b0bd609ba4c22fe6a5a7fb5fd162ca0f8a18468136a7bdb8bbadae2b2e4c03c134fd9802cc1bc01a73b89906b94bccafa56c4480946332baadc45224b5c073badfea32eed321bc502c57455c0c9ecbb3a23a3b93e1a0440936d135ef3a59bbb92cda7b514edd9384da3805ea3904f8520c8b3c668838320e6653ef333b30386bdaba0cc3c182c380e61deeb0f5629b65a140c949a29e6565ab18501193d37659b4ec22d766a31fd34e1724a30c46910f1004ffba4fb551ba6c06da8921f78962c67bd83a17885aa2ce204d5d9757245f18e57bc7031c58cd7be98e4848ad19b12557593ac310dd5d9ec30d82895d25c1c816cf28c323feb9b8bc4850b4dcf7b0b7e80249ca1325666632706651e12e288bc0ab5e4aa8ec05cb3d215d55b4a7199bf1b9d15dabe22f01f5170ad8e99fadd0e86aeac80e65efbecc47e7e7082a6310d78e4c34c7977bb77789de0d8db3e525f58d088c1c277cf30b5e9269cd4f24ec8a2c3c52827da2eac6656cd4d22e0540240beb8db35b55414445dc436bb75cb59e3f76672949092aeca861dc2b2d45a2df0c739817636cd4f7b2a378cb5372229dade5e704c69d3ce3321c9f32d07b9950f73c2c248e2ba803bc7c97883c918c8b295f26a3897db7d0f5f9d5fcdfe65b2c73af6af97d3410fe1281c3e8f5a00d9febe0bd6ade6518a4b0b678d8b144903cade7ac988b8fdecc51fcc8783a55cc7aadcde8009fbd6b7d4d0263e4a5bb2ec181a7bb9a7f6ceb6de4888456d745f696a72b6322c0d0be0156fa97b6871b2521391157809a2b18311c2818bedee60e74e7dd23fceb76152229410b6a8a223637e74cc3b386e90e222088faf36264a2868121caac02dd24ee6b200523dcd94d230b62d4004b295088e193a8e8936302d836d7f75dddcf1dda4aff28000b6cb90a1ed3d999e3e6dd7d016e224fd60d3fe5cdef9544778fc41a53cf42448ef5bc6e219f863b1dfd6e62d26c665aebfd5614b24609bfa95853adede5818fea392cb8f1a18758b1ffd19714213a0e68aa9057f035222e7a63420faf17e45f4ea6f0c6d98e8f22d0797d78c65489ff326630c314148acc7bc997036f5e3359875a5abc24fd8339cb0bc446067ef9ed576c26f6fba920064d3d8d28cb8bdfb8b5e03b726daa47bbf03cba4c49af97a177bc727e5c0c3224de28ee15c3a5754e70970ccd9dab0112a6a4226d82ee2df32b320a4881a15ff919fd2b8e88826a192bee355dd4dbdab6b1de0a464bb0d4ac3d68daf6f4690ec63f5d1e7793ca7d3886744b6db2fed66d3d9c9b55c2320742632c343746439b71159b5e575b1eebe634fc02bcee49fbccc16a8b12acbd9c91696b7fd89a842203edf8b3d3dfb73e94502c2161f040096514fa9ca97a215148ec9fc75c3f58cac061dcdc8a08f04c67541b899cdb885c859b4f5b04a327d347c171349ebcc09345c00d6caf9565975a6acbc7280f303908e813cd537006e66ffb13d5841b5ba11cb772dcba3fdc6bc9d3a2989a966692ad4a5e2bafba9f64c558c37017532b15162118e17af2c28858f617f92055f894bdb4bce540028c2dbf944d01aa9b75bba0d012117f7fe6d2c3be49f39bf03d3bcf56056b10071ce9416f1284ec79380e9b876fdf6130e3776bc7628a14184bf998e1479e3a9fac794c2e94e9234ae6fbc1e352cec4a6cd9c8174a9641b741a07225a23bd8ed056025e5ad77283eeb8f5fe99e658f642a1d1697aa68e8b3b7e846d3d3e81a567889fd1f753046839f79dd72432c4e7a8a2316ca5a5a9e62008f2aeb74f59ede82b30226483f1478c70dcc4055f69bec3f56c623d7ddf663e42fba1332e704f1c0bb08357c0e0797e18ffe2614bc1bb390186d09917dcd735a2b4530c8919f0eb69ead474640a88dfc8851d008c5ddab7aeeeb37c498a49a5e24df59f9e81b7df7cb1babf26eb0d34e0b510875bb054ae45e5b519fef936a81ebf76aca45817ee69c42a3fd540ff35104378fce32e369be6c59f21aa84e286c0f3fed841bc2910c894ef1849d0e6104a70c7b1df6d51e004fae9e33b5286de5c09a26605c041a2c4c0b7b38ef1e5ccd403211f85a246114a6f2e4c9025575fc96fb7dca42ca4b7275e1ed255ad82f44a34c3ba5bb6156fd4c1265642c0c7571054db63cf888719aff49488d9dce039cb7a184a15a6b4fcd401751e7730ef91783d9e2e9072066c5096d5cdbd5669ea5056d9a9f6f25ff65a9000bf8922d0c9777e14dcfdf54bdc8a4a736060740c2ff073262fd91312e137d13ee00e00d6012c4e206c6b9100f29ae6b024a0e8471a39281df30c4e171d66d72c86865eea4d7de9ad2454af305b94a5d0c8ff730482493b66f9896e97e44a3397ccc87fe755d7cd8dd71882e8c600bc2e52a1b1e80dabe71507b9bcaeeb99118b07016a36eea5082584a72f7fee1dc48f36e4e5edfc89fce9b48775302875987f01b72ae222f89359268aa5b9630a8bde40c17cae9f6e54f727ac055d882e8325715c69b5ceedd3261b489645c1e920efbb3f761bae42e2383e32943f54b631693dfcf5510a30fdd43c0794870aff225c4c90fb1fa89776c7747786c4b83dca018c5c4891e87ecd84182bac69d8962c9763b3e16cc8675ea24791e59dee0df6e0190a46a40522af2a6589b70b4e215a35b2e1558d46dde0537fc61a65065efd242df407168a05ea6b3c734b5a12cdea2eed66ffccf34d504ae8f60fe831e2654ef895c6a8a746ac37f0037a5a01df2ea80bd7415fafeae4ce1a34e34a87a4b42867ecfb67ca5b9176b389719c1bad53d0b1e20eaf1793c59f7134fbddb5c3c2de7e202b8e0", 0x1000}, {&(0x7f0000001a00)="98e0c9f5399ecafc85", 0x9}, {&(0x7f0000001a40)="0026671904c54b141a028a9bd78d5b3f36f835d3d38d3c516261d1d9b6f524279f04fb5950578aa765abcd3042b1db64467b7f5584dfe7436f4257df4e83fe2b2350d621d69ee5db5d17a2d7eec71e85ae9084f437ba12c3dec064c9c5729df4cdc1d3287dfc", 0x66}, {&(0x7f0000001ac0)="e99bc72da348b488d2d42c261d0290f4dd2a28fc9f5fa807f8f3af9301c3eb3df5f9678acf3c0e705847c1ee3f1cc76c59d34cad1846df176e0df84623ec341a4b2de99a81037c94461522d48de31ec627c55d5af6c91f6a91a6ccc1103265b81d30e1eb61cbd528bfe0b5129ab35e5e56e54d8d9503405a0f2699482f1a08ef2f2c9da5700cc4c2d0130e9e4107557626ba48bcdf134bdd73812ea12fca483addd847c90d43a0c37cff458a8df3d87425c46fc5f3acdc19f56a854f6f572a0bf47a81", 0xc3}, {&(0x7f0000001bc0)="9212f08653a3c34f888941f4c09f900fbb2ce5491a9dfc33e9cbc8ca47fac031205bad86688980f97b0b06d487e30692077b94e0f66ef710ea46c7f2bcdf8b0dfae3abf434dd0760402f56f8977b24040399b6f5570f4f60f8db57f3be07ccf56f4b16d536700d49339b301abe309a813698e7c5bf0966ac674b48f9eb1172a2646604464f7b01e98abd7d14a325d997d0020931399cf3e7", 0x98}], 0x5) 829.513196ms ago: executing program 3 (id=2340): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x3, 0x13, &(0x7f0000000400)=@framed={{0x18, 0x2, 0x0, 0x0, 0x10ab6a, 0x0, 0x0, 0x0, 0x4}, [@printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}}, @printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xffffffff}, {0x85, 0x0, 0x0, 0x70}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f00000002c0)='blkio.throttle.write_iops_device\x00', 0x2, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_COALESCE(r7, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x14}}, 0x0) getsockname$packet(r7, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x3f) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x2c, 0x40, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x10, 0x1, 0x0, 0x1, [@typed={0x4, 0x1c}, @typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x4, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=ANY=[@ANYRES32=r9, @ANYRES16=0x0, @ANYRESOCT=r10, @ANYRESDEC=r1, @ANYRES32=r5], 0x3c}}, 0x8081) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=@newtfilter={0x2c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x74, r8, {}, {0xffff, 0x1}, {0xa, 0x1}}, [@TCA_RATE={0x6, 0x5, {0x5, 0x80}}]}, 0x2c}, 0x1, 0xf0ffffffffffff, 0x0, 0x60001d0}, 0xc084) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r11, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1, 0x8}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000007c0)=@newtfilter={0x114, 0x2c, 0x0, 0x30bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r11, {0x0, 0x9}, {}, {0x10, 0x10}}, [@filter_kind_options=@f_flow={{0x9}, {0xe4, 0x2, [@TCA_FLOW_EMATCHES={0xe0, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xff}}, @TCA_EMATCH_TREE_LIST={0xd4, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0xc, 0x1, 0x0, 0x0, {{0xe6a7}}}, @TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0x2, 0x1, 0x1}, {0x2, 0x81, 0x0, 0x4, 0xc, 0x2, 0x7b92d9d7904f19fd}}}, @TCF_EM_CONTAINER={0xac, 0x3, 0x0, 0x0, {{0x5, 0x0, 0x5}, "7b8a2faf2120d4fbbb425039eb8a4803a44e7361cf8bfc0e440420f50db1d9e460222f486ffbe1b95262b518b38d989c91874904e9c86381bc016aa1e967f417322b5079a36d923df5f63b92b296e744cb394f3161dafa2e30c1fe7eeeca1261f2dbb526f3c7d9ddc7d2afee2fdb717abedb671bb1538bd87816f39ff6c3e1e20e8c8d4094932b1a70a89ae9cf184810f510a4c43488310c8a93d90ce7"}}]}]}]}}]}, 0x114}, 0x1, 0x0, 0x0, 0x20048084}, 0x2008c010) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a050000000000000000000200000a0900010073797a310000000034000000030a010100000000000000000200000108000b400000000208000a40000000040900010073797a310000000004000c0014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) write$cgroup_int(r2, &(0x7f0000000600)=0xfffffffffffffffa, 0x12) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0xe, 0x0, &(0x7f0000000300)="e09f547ed3f02dc1fd3c6487775b", 0x0, 0xa60, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 802.760343ms ago: executing program 1 (id=2341): mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x8, 0x32, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0x1f, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x43}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfeff}, {0x85, 0x0, 0x0, 0x86}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x80000000}}, [@printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x35e}}, @printk={@li, {}, {0x7, 0x1, 0xb, 0x1, 0xa, 0x20}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xf}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x1f00, 0x84}, {0x7, 0x0, 0xb, 0x0, 0x0, 0x0, 0x500}}}, &(0x7f0000000080)='GPL\x00', 0x3, 0xff8, &(0x7f0000000780)=""/4088, 0x41000, 0x41, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000d}, 0x94) 742.118834ms ago: executing program 4 (id=2342): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r2 = syz_genetlink_get_family_id$SEG6(&(0x7f00000000c0), r0) sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x38, r2, 0x300, 0x70bd25, 0x25dfdbfe, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x8}, @SEG6_ATTR_SECRETLEN={0x5}, @SEG6_ATTR_SECRET={0x14, 0x4, [0xe, 0xa, 0x3, 0x2]}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x880) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000080)={0x34, r1, 0x483, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x1c, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}]}]}, @ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x34}}, 0x0) 432.031327ms ago: executing program 2 (id=2343): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000880)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast5-avx\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000500)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000580)=[@op={0x2a, 0x117, 0x3, 0x1}, @op], 0x4}, {0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000280)="9d743c98d6ba81ce36d9efebfb6de188b7b617f3d155b430231050738b9aaeba5db4f14f166043fc6657ba56868d9a1444b779e27d584d557c50ef38b1662cfa43ebd2d820caeb07be36f11ea68da7b6cee5a11f46592f4380025bfe93a0e0fffef7ae6033cae128915a7cc47209cd7b7387efb03bae9746"}], 0x0, &(0x7f0000000340)=[@assoc={0x0, 0x117, 0x4, 0x3c0c}, @assoc={0x0, 0x117, 0x4, 0x18}], 0x0, 0x10}], 0x1, 0x800) (async) sendmsg(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)=@ll={0x11, 0x3, 0x0, 0x1, 0xe5, 0x6, @broadcast}, 0x80, &(0x7f0000000240)=[{&(0x7f00000003c0)="020195ff002d3922ff65b4355e953d23d254f00000000000", 0x18}, {&(0x7f00000001c0)="2cf2565b0e508224b706a643e98dc932f5fc6d8e51626cdbf9ff02dbb8b2d2ca2be0dfa8f2a777f680c590257a0641579678f72a6ff270a8989633cbe781bf372d4a0e61", 0xff87}], 0x2}, 0x44000) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000900)={'veth0_macvtap\x00', 0x0}) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000f40)={r1, 0xe0, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000940)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, &(0x7f0000000980)=[0x0], &(0x7f00000009c0)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x76, &(0x7f0000000a00)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000a40), &(0x7f0000000a80), 0x8, 0x59, 0x8, 0x8, &(0x7f0000000ac0)}}, 0x10) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001300)={0xffffffffffffffff, 0xe0, &(0x7f0000001200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000f80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x8, &(0x7f0000000fc0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000010c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x13, &(0x7f0000001100)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000001140), &(0x7f0000001180), 0x8, 0xb0, 0x8, 0x8, &(0x7f00000011c0)}}, 0x10) sendmsg$ETHTOOL_MSG_STRSET_GET(r2, &(0x7f0000001580)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001540)={&(0x7f0000001340)={0x1e0, 0x0, 0x20, 0x70bd2a, 0x25dfdbfb, {}, [@ETHTOOL_A_STRSET_HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_STRSET_HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_STRSET_HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}]}, @ETHTOOL_A_STRSET_STRINGSETS={0x20, 0x2, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}]}]}, 0x1e0}, 0x1, 0x0, 0x0, 0x4000010}, 0x50) (async) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) (async) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/ipc\x00') (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, r6, 0x215eb000) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) close(r8) (async) r10 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r10) sendmsg$nl_generic(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001800)=ANY=[@ANYBLOB="180000002500010324bd7002ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) (async) recvmmsg(r10, &(0x7f0000004380)=[{{0x0, 0x0, 0x0}, 0xe1c0}, {{0x0, 0x0, &(0x7f0000002c80)=[{&(0x7f0000000b80)=""/198, 0xc6}, {&(0x7f0000000d80)=""/213, 0xd5}, {&(0x7f0000000e80)=""/132, 0x84}, {&(0x7f0000000080)=""/160, 0xa0}, {&(0x7f0000001000)=""/14, 0xe}, {&(0x7f0000001040)=""/116, 0x74}, {&(0x7f0000002d00)=""/4105, 0x1009}], 0x7}, 0x1}, {{0x0, 0x0, 0x0}, 0x1c7}], 0x3, 0x0, 0x0) (async) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r11, 0x0, r9, 0x0, 0xffffffbfffff8000, 0x8) close(r12) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) ioctl$TUNSETLINK(r7, 0x400454cd, 0x10f) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x4, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000070060000000000001900007311320000000000950000000000000000"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r9, 0x84, 0x1d, &(0x7f0000000140)={0x2, [0x0, 0x0]}, &(0x7f0000000180)=0xc) 310.796184ms ago: executing program 1 (id=2344): getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, 0x0, &(0x7f0000000680)) r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz0\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000080)='blkio.bfq.io_queued_recursive\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r6 = getpid() sendmsg$unix(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000000c0)="10", 0x33880}], 0x20, &(0x7f00000004c0)=[@cred={{0x1c, 0x1, 0x2, {r6}}}, @rights={{0x14, 0x1, 0x1, [r5]}}], 0x38}, 0x8841) write$cgroup_pid(r4, &(0x7f00000000c0)=r6, 0x12) splice(r3, 0x0, r4, 0x0, 0xf3a, 0x0) write$cgroup_pid(r4, &(0x7f0000000000), 0xffffff98) ioctl$sock_inet_tcp_SIOCINQ(r4, 0x541b, 0x0) write(r2, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22052, r1, 0x0) 310.34648ms ago: executing program 4 (id=2345): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xa, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000007b8a00fe0000000087080000000000007b8af0ff00000000bda100000000000027000000f8ffffffbfa400000000000007040000f0ffffffb702ff900800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000008000000850000004900000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 308.804247ms ago: executing program 0 (id=2346): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000000900010073797a30000000004c000000090a01040000000000000000070000000900020073797a31000000000900010073797a3000000000080005400000001c08000a4000000000080003400000004008000f"], 0xdc}, 0x20}, 0x0) 279.02188ms ago: executing program 3 (id=2347): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0xbc, 0x0, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x5}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x41}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'pim6reg\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x13}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xb37b}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_SERVICE={0x18, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@empty}]}, @IPVS_CMD_ATTR_DEST={0x3c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x8000}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x80000001}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x8}]}]}, 0xbc}}, 0x4000000) r1 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0xd, &(0x7f0000000080), 0x24) close(r1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = socket(0x40000000015, 0x5, 0x0) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000500), r3) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000540)={'team0\x00', 0x0}) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r0, &(0x7f00000010c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001080)={&(0x7f0000002000)={0x7bc, r4, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@ETHTOOL_A_PRIVFLAGS_FLAGS={0x100, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0xa8, 0x3, 0x0, 0x1, [{0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3ff}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'pim6reg\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5627}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}]}, {0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xdd9d}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xa}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'nl80211\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, '-]&]^+*\x00'}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_NAME={0x12, 0x2, 'memory.events\x00'}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x8}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x5}, @ETHTOOL_A_BITSET_BITS={0x44, 0x3, 0x0, 0x1, [{0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0x24, 0x2, '\xdb\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff\xff'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xc08}]}]}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x484, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0xce, 0x5, "edd774c7c6ed4249f9f6bd2c74463463907ea4e0ec55e74af28bbe6d62c9a6f5f5e7710ea226aaeae7fe91ad090692f6fadd337af65d379105a57d76bdfed803a763a3700a1ab85e621c6fb8138e6a1080cb0e6137c71bdd4b18ad2b0d068fdbb0a88330951679fb060492e057d330a14641eeb7497919bd351bc3777f0d63f149307b2fac65f7d822c5f98e9007ba4cbeb35fcad4e4676dd3ee032ba9e96b61595322901a81b2292f155b9f840c4ffe63efdfe18939f0106a050370756af6c7d7aeac50b682568cd629"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0xe1, 0x5, "cba70422cda90b66d4f71ef80edb11d17459942ef65715c8424ed8b0cec8217bdd2d2b02ae95176fa9c11c9ef2ae20eeabc6d334cbba59595a3e50172274ee88132edd391e191b80a710d83c5da9f9631db8f46683575620463b13d1d8dacd9ceadb47473abe52e856f60321629fff8ab0ea71f8110c8adb1c9eef1d6e59e06c7f72bf592df9bf40ba30553f453186cae4d83dc60170bec534e9009341a643107a338ee7f5b5e6b14024fe1286638bad514371c393c1dfd08b533505664298ef6e3deb6454c8fe81f46e990fff927d171b5b48c0bf2822835b53aae129"}, @ETHTOOL_A_BITSET_MASK={0x9d, 0x5, "b6df456a8fae1cc53200863854ea1ae61e159526adf6b6a42ba95fd3366b6eb7a2d23e482ea491913621c54c0f21c9ae2f013ad8c9f412c9581f8862d29321d5c81e7ebe2aed64ac666938588cd67a85f5914ad1fb8e0e7074cd15bd94fb6d18c296a42c6591d74ac03ba30f033fac423af378f9feb780c92962e5881cba0db16f4d16df77e96e5451233ee111d462510bcbf30cdd617a0b33"}, @ETHTOOL_A_BITSET_BITS={0x220, 0x3, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, 'wireguard\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, ')^.\xc0,%@#\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'nl80211\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffbff}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '[@#\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xf}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}]}, {0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, 'nl802154\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8000000}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x24, 0x2, '\xa0\xcb\x87\x9aG\xf5\xbcdL\x0ei?\xa6\xd01\xc7J\x15S\xb6\xe9\x01\xb9\xff/Q\x8cx\x04/\xb5B'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '{\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, ']\x00'}]}, {0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, 'nl802154\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x10, 0x2, '^(@\x1a:(@.+\\^\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0xc8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, '^\xfb(\xf3[\'\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7fff}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_NAME={0x24, 0x2, '\xa0\xcb\x87\x9aG\xf5\xbcdL\x0ei?\xa6\xd01\xc7J\x15S\xb6\xe9\x01\xb9\xff/Q\x8cx\x04/\xb5B'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x66, 0x2, '\xa0\xcb\x87\x9aG\xf5\xbcdL\x0ei?\xa6\xd01\xc7J\x15S\xb6\xe9\x01\xb9\xff/Q\x8cx\x04/\xb5B-\x15\x9a\xa3\xf7\a\xd6\x18\xd9\xb3y\x7f\t\xb5\xf6\xa8-\x05\x10\x15\xc8H\xf9\vk?\"%/\x92\xfd\xd4E\x8f\xa2z\v\xff\x04<\xdd\x7f\xc3\xf5>\x05\t\x8d\xb9\x95\x8e,\xdc5\xe0\xf0\xb6A_\xa1X\x90s\xf9g\x9e'}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'pim6reg\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xaca}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x15c, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x51, 0x5, "a60a28389dd75133011cb5cadc23e51873db941bb819c623a7180ba201a5e39a13ed070cd599228b54a496da61dc1e60f4a9b5ae70f771d78c74368f702ce9bfe94f21c13a86ef44a1c6a18c83"}, @ETHTOOL_A_BITSET_MASK={0xd7, 0x5, "ab27bc3d593eeafc367923ede74c93d696ca34343f59efd587136f5c5cd932a45fc8083afcd3abb8fdf3e25e9767f86bd809764902737ed3daa488e5338d5c525e458022cc0f3708862c9da77581ac1fb55fe65bc1048b8975872f30a8d0c732dc30353343c5fa09c7fe7f83c3e64a5a7e1c3ea0548d9a9e54485b79ed8d7906fec2250a95d172d51bb1934b1bd5c05d4ceca544976e6c211b171cfea167e5f75bc61e9c049639f2120a9813993fc4277620774efbe9e6d94a5bcad3676626410e26a882458ae22c3d6bb3350662de2f8dbc2f"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x8c3}, @ETHTOOL_A_BITSET_SIZE={0x8}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0x12, 0x5, "eb94abb97d5a68dc4bc2bfea4ad9"}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0xac, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x2f, 0x5, "dbf3914dcbcd51f5b81cc46c04c353eb5180495dd62cb0e21a3316f9932b5cd27ff19d67aecc241c278153"}, @ETHTOOL_A_BITSET_MASK={0x78, 0x5, "01a0c155a036bc193309810346713cd984ac8ba37a05c6d45bd42f09ff977b006985b73da7c61715566fce1530e31c47d5ef12e55aff12916bb1e0ebef3a55e2a172616f48f3a63f3f977d01c718f243b04e6fd783ba2a7ddd90351112b64b854f922967ed3eb010a54c958f23fab5fa45b16956"}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x7bc}, 0x1, 0x0, 0x0, 0x40001}, 0x20040000) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r3) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='memory.events\x00', 0x7a05, 0x1700) ioctl$FICLONERANGE(r8, 0x4020940d, &(0x7f0000000000)={{r7}, 0x2a, 0x80000007ff, 0x2}) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f0000000600)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="d8000000", @ANYRES16=r6, @ANYBLOB="00082dbd7000ffdbdf256700000008000100530000000c00990008000000470000002900c500330d0b1202f8d01eae09854e7fda478921c77000fb1f3ffc4d0849fe6f5fe9a940ef8f3b0a00000008007176010000800800c404000000000800c400e4009f000800c300060000000800c400ff0f00004100c50098e50d19612ef01230da1d7da58599742bc035621d83b7c8ec51f16b219b5a983fb2eeffafb5d3b364a0cf7f1e42b417cabd10bef0e3b655a2982869c1c546fae22de8ba504a13d708addd280000001600c500385c600086a935cf6e40950e3b985725ba620000"], 0xd8}, 0x1, 0x0, 0x0, 0x4040041}, 0x0) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000300)={'batadv0\x00', 0x600}) setsockopt$SO_RDS_TRANSPORT(r3, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_TX_POWER(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r9, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) r10 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)={0xac, r10, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @c}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_PEERS={0x60, 0x8, 0x0, 0x1, [{0x5c, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x1}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @multicast1}}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_FLAGS={0x8, 0x3, 0x1}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_FLAGS={0x8}]}]}]}, 0xac}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) 166.511599ms ago: executing program 4 (id=2348): r0 = socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) (async) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0x0, 0x4004001}, 0x40040) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001840), r3) sendmsg$TIPC_NL_MEDIA_SET(r3, &(0x7f0000001a40)={0x0, 0x0, &(0x7f0000001a00)={&(0x7f0000001880)={0x34, r4, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0x20, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x4, 0x3, 0x800}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4020}, 0x8084) (async, rerun: 64) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) (rerun: 64) ioctl$TUNSETQUEUE(r5, 0x400454d9, &(0x7f0000000000)={'ip6gre0\x00', 0x400}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000001c0)=@newlink={0x50, 0x10, 0x503, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21111, 0x8a33}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_MACSEC_CIPHER_SUITE={0xc, 0x4, 0x80020001000001}, @IFLA_MACSEC_WINDOW={0x8, 0x5, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x50}, 0x1, 0x0, 0x0, 0x48890}, 0x0) 104.997442ms ago: executing program 0 (id=2349): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan3\x00'}) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x48, r1, 0x300, 0x70bd2c, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0x4008040}, 0x4008001) syz_genetlink_get_family_id$nfc(&(0x7f0000000200), r0) (async) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000200), r0) sendmsg$NFC_CMD_GET_TARGET(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r3, 0x8, 0x70bd2c, 0x25dfdbff, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4010}, 0x8080) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r4, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x20, 0xd, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x7}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x4050040}, 0x95) ioctl$XFS_IOC_START_COMMIT(r4, 0x80585882, &(0x7f0000000400)={0xffffffffffffffff}) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_FLUSH(r5, &(0x7f0000000640)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000600)={&(0x7f0000000500)={0xc8, r6, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x20, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @remote}]}, @IPVS_CMD_ATTR_DAEMON={0x2c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xa}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfff}, @IPVS_CMD_ATTR_SERVICE={0x44, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xda7}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x7}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x55}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x4}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xffff243c}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x10000}]}, 0xc8}, 0x1, 0x0, 0x0, 0x20008000}, 0x4000000) sendto$inet(r5, &(0x7f0000000680)="b42b7633bf3baa89637911992ac35debb1c7eca65e2a60c011104d7f36412013390339a9b7a0817893800183526113a2b9326d2a2acfffe3ee4addb008db7477a5a722d0c3896d9950b82846851235ef1a8467d26b8b31a23bdd59d65debf3c7e5af472dcf34ea683b00f33d23ebcd8e088e982407c197833c888637880bded7f8967acb38c49e353fa793288236dcd0e269a400b0342cdbcb479f8769", 0x9d, 0x20000000, 0x0, 0x0) (async) sendto$inet(r5, &(0x7f0000000680)="b42b7633bf3baa89637911992ac35debb1c7eca65e2a60c011104d7f36412013390339a9b7a0817893800183526113a2b9326d2a2acfffe3ee4addb008db7477a5a722d0c3896d9950b82846851235ef1a8467d26b8b31a23bdd59d65debf3c7e5af472dcf34ea683b00f33d23ebcd8e088e982407c197833c888637880bded7f8967acb38c49e353fa793288236dcd0e269a400b0342cdbcb479f8769", 0x9d, 0x20000000, 0x0, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000780), r5) (async) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000780), r5) sendmsg$DEVLINK_CMD_RATE_GET(r5, &(0x7f0000000900)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000008c0)={&(0x7f00000007c0)={0xdc, r7, 0x20, 0x70bd28, 0x25dfdbfb, {}, [@DEVLINK_ATTR_PORT_INDEX={0x8}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_NODE_NAME={0xe}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0xdc}, 0x1, 0x0, 0x0, 0x20085}, 0x20000844) connect$unix(r5, &(0x7f0000000940)=@abs={0x0, 0x0, 0x4e24}, 0x6e) (async) connect$unix(r5, &(0x7f0000000940)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmsg$NFNL_MSG_COMPAT_GET(r4, &(0x7f0000000ac0)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a00)={0x4c, 0x0, 0xb, 0x101, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFTA_COMPAT_TYPE={0x8}, @NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_COMPAT_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_COMPAT_TYPE={0x8}, @NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_COMPAT_TYPE={0x8}, @NFTA_COMPAT_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20040004}, 0x4000004) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r5, 0x89f8, &(0x7f0000000c00)={'tunl0\x00', &(0x7f0000000b40)={'sit0\x00', 0x0, 0x8000, 0x80, 0x3, 0x8001, {{0x22, 0x4, 0x2, 0x28, 0x88, 0x65, 0x0, 0x0, 0x2f, 0x0, @broadcast, @multicast2, {[@ssrr={0x89, 0x23, 0x7f, [@broadcast, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x12}, @empty, @rand_addr=0x64010100, @empty, @remote]}, @lsrr={0x83, 0x23, 0xeb, [@loopback, @dev={0xac, 0x14, 0x14, 0x10}, @private=0xa010102, @broadcast, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty, @loopback]}, @rr={0x7, 0x2b, 0x32, [@empty, @private=0xa010102, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x35}, @loopback, @rand_addr=0x64010100, @rand_addr=0x64010102, @broadcast, @remote, @private=0xa010100]}]}}}}}) getsockopt$inet6_mreq(r5, 0x29, 0x15, &(0x7f0000000c40)={@remote}, &(0x7f0000000c80)=0x14) (async) getsockopt$inet6_mreq(r5, 0x29, 0x15, &(0x7f0000000c40)={@remote, 0x0}, &(0x7f0000000c80)=0x14) sendmsg$nl_route(r5, &(0x7f0000000f80)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000f40)={&(0x7f0000000cc0)=@dellinkprop={0x258, 0x6d, 0x300, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, 0x40300, 0x44204}, [@IFLA_GROUP={0x8, 0x1b, 0x80000001}, @IFLA_AF_SPEC={0x70, 0x1a, 0x0, 0x1, [@AF_INET6={0x6c, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @dev={0xfe, 0x80, '\x00', 0x23}}, @IFLA_INET6_TOKEN={0x14, 0x7, @remote}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x2}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0xb}, @IFLA_INET6_TOKEN={0x14, 0x7, @private2}, @IFLA_INET6_TOKEN={0x14, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x3}]}]}, @IFLA_VF_PORTS={0xb8, 0x18, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "3d9257dfd0f1dcb30a4ad6097422e969"}]}, {0x40, 0x1, 0x0, 0x1, [@IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "02053ece40950caa9c65e420022a22eb"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "7b74d8a2ad912fa117bda3af0f878af7"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "9fdb6911a615eac54f73e9f4b857c235"}]}, {0x3c, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8, 0x1, 0x4}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "460b958fab935ea68af1a247bad13d3c"}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "89cee6275e9f91bd7e91016acd1fbcb6"}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x7f}]}, {0x20, 0x1, 0x0, 0x1, [@IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "d3d7b9d6155fb0e440edfe159ca0a0a5"}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x7}]}]}, @IFLA_LINK_NETNSID={0x8, 0x25, 0x1}, @IFLA_PROMISCUITY={0x8, 0x1e, 0x7}, @IFLA_VFINFO_LIST={0xbc, 0x16, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x6, 0xffffffffffffffff}}]}, {0x1c, 0x1, 0x0, 0x1, [@IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x6, 0x2}}, @IFLA_VF_TX_RATE={0xc, 0x3, {0x3, 0x40}}]}, {0x4}, {0x80, 0x1, 0x0, 0x1, [@IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0xfffffff8, 0x5}}, @IFLA_VF_RATE={0x10, 0x6, {0x2, 0xf, 0x2}}, @IFLA_VF_MAC={0x28, 0x1, {0x504, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x24}}}, @IFLA_VF_VLAN={0x10, 0x2, {0xfffffff9, 0xd7e, 0xf5}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x1}}, @IFLA_VF_TRUST={0xc, 0x9, {0x7, 0x9}}]}]}, @IFLA_MAP={0x24, 0xe, {0xd8, 0x9, 0x6, 0x9, 0x60, 0x2}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_CARRIER={0x5}, @IFLA_NET_NS_FD={0x8, 0x1c, r5}]}, 0x258}, 0x1, 0x0, 0x0, 0x4000000}, 0x4) sendmsg$NL802154_CMD_SET_CCA_MODE(r0, &(0x7f0000001080)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001040)={&(0x7f0000001000)={0x3c, r1, 0x800, 0x70bd28, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_CCA_MODE={0x8, 0xc, 0x5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_CCA_OPT={0x8}, @NL802154_ATTR_CCA_MODE={0x8, 0xc, 0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x4010) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f0000001240)={'gretap0\x00', &(0x7f00000010c0)={'sit0\x00', r8, 0x20, 0x80, 0xa, 0x4, {{0x50, 0x4, 0x2, 0x3, 0x140, 0x67, 0x0, 0x3, 0x4, 0x0, @multicast1, @local, {[@rr={0x7, 0xb, 0x28, [@broadcast, @loopback]}, @cipso={0x86, 0x19, 0x3, [{0x7, 0x8, "688e5d47b904"}, {0x2, 0xb, "3098250fee0f588582"}]}, @noop, @timestamp_addr={0x44, 0x3c, 0x14, 0x1, 0x1, [{@local, 0x6}, {@remote, 0xfff}, {@private=0xa010101, 0x5}, {@broadcast, 0x2}, {@empty, 0x9}, {@multicast2, 0x2}, {@multicast1, 0x6}]}, @timestamp={0x44, 0x20, 0x7b, 0x0, 0x3, [0x7, 0xfff, 0x9, 0x6, 0x6, 0x3d97, 0x101]}, @cipso={0x86, 0x60, 0x2, [{0x7, 0x12, "bbea7b0f5649365808bb9efaa8ceee00"}, {0x1, 0x7, "7b2d42f3a0"}, {0x0, 0x3, '}'}, {0x7, 0x12, "c5adf01335d737c8aec59776aa3b5b2e"}, {0x7, 0x10, "8c7e8d08c074d995b57c081d62f8"}, {0x2, 0xc, "df02ff2372bcd1bd9bde"}, {0x2, 0x5, "71e7df"}, {0x2, 0xb, "cd84beaf4ebbe2359e"}]}, @rr={0x7, 0x1f, 0xd7, [@private=0xa010102, @broadcast, @rand_addr=0x64010102, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @rand_addr=0x64010101]}, @ssrr={0x89, 0x23, 0xab, [@broadcast, @remote, @broadcast, @multicast2, @rand_addr=0x64010100, @private=0xa010101, @local, @empty]}, @noop, @rr={0x7, 0x7, 0x82, [@empty]}]}}}}}) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f0000001240)={'gretap0\x00', &(0x7f00000010c0)={'sit0\x00', r8, 0x20, 0x80, 0xa, 0x4, {{0x50, 0x4, 0x2, 0x3, 0x140, 0x67, 0x0, 0x3, 0x4, 0x0, @multicast1, @local, {[@rr={0x7, 0xb, 0x28, [@broadcast, @loopback]}, @cipso={0x86, 0x19, 0x3, [{0x7, 0x8, "688e5d47b904"}, {0x2, 0xb, "3098250fee0f588582"}]}, @noop, @timestamp_addr={0x44, 0x3c, 0x14, 0x1, 0x1, [{@local, 0x6}, {@remote, 0xfff}, {@private=0xa010101, 0x5}, {@broadcast, 0x2}, {@empty, 0x9}, {@multicast2, 0x2}, {@multicast1, 0x6}]}, @timestamp={0x44, 0x20, 0x7b, 0x0, 0x3, [0x7, 0xfff, 0x9, 0x6, 0x6, 0x3d97, 0x101]}, @cipso={0x86, 0x60, 0x2, [{0x7, 0x12, "bbea7b0f5649365808bb9efaa8ceee00"}, {0x1, 0x7, "7b2d42f3a0"}, {0x0, 0x3, '}'}, {0x7, 0x12, "c5adf01335d737c8aec59776aa3b5b2e"}, {0x7, 0x10, "8c7e8d08c074d995b57c081d62f8"}, {0x2, 0xc, "df02ff2372bcd1bd9bde"}, {0x2, 0x5, "71e7df"}, {0x2, 0xb, "cd84beaf4ebbe2359e"}]}, @rr={0x7, 0x1f, 0xd7, [@private=0xa010102, @broadcast, @rand_addr=0x64010102, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @rand_addr=0x64010101]}, @ssrr={0x89, 0x23, 0xab, [@broadcast, @remote, @broadcast, @multicast2, @rand_addr=0x64010100, @private=0xa010101, @local, @empty]}, @noop, @rr={0x7, 0x7, 0x82, [@empty]}]}}}}}) r10 = syz_genetlink_get_family_id$smc(&(0x7f00000012c0), r5) sendmsg$SMC_PNETID_DEL(r5, &(0x7f00000013c0)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001380)={&(0x7f0000001300)={0x64, r10, 0x2, 0x70bd27, 0x25dfdbfb, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'syzkaller1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'batadv_slave_1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'erspan0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth1_to_hsr\x00'}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0xc0) syz_genetlink_get_family_id$nl80211(&(0x7f0000001440), r5) (async) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001440), r5) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r5, &(0x7f0000001500)={&(0x7f0000001400)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000014c0)={&(0x7f0000001480)={0x2c, r11, 0x1, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0x91}, 0x4000000) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000001600)={&(0x7f0000001540)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000015c0)={&(0x7f0000001580)={0x28, r1, 0x100, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_PAGE={0x5, 0x7, 0x9}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x28}}, 0x20000011) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000001680)={'wlan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000001680)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(r5, &(0x7f0000001900)={&(0x7f0000001640)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000018c0)={&(0x7f00000016c0)={0x1f4, r11, 0x92c, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0xef, 0x5b, "3614e86c03d78d0200ff4ec979714770d7f011f41fca37612927eacbe1657932340c26b6937946c5dc000b2277c7c4223dea5bca0a019b28e954cbde7ab9dcb7d4c9e1fe59a4a98fd72e261a3bd8591dfefaeac53031fa743c928e94f27aa3503540575b963d1d8988d7d29e5bebf440651c465522efe92cd1f086e7f195163390313742f7f1f220f1dc27d986b99871c3ba2f499638db37aab195a1463dc79cd800c1d4a0c830b02298b02b2b466103af7a102b58ed7a9b9b5be8e3d522b7c373b54ad81447fab9a5b59349ef9271063c26450be2b9c750b2e93d0bb34e14c156e3538bc1b4192c6ae643"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x4}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x8}, @NL80211_ATTR_FRAME_MATCH={0xc8, 0x5b, "26b07e186f4d20465b2f4895dc1eb37d460d627fe200ef014208c687c83ba9265d7b199091e0ad6300d6030efe90f227c6365ff13b272721a8e5fa99ef1d1b3d347f908ca5af895a3d17bfb20ee734004624ea9e5ab715fe1dc6d58e3083073a527c2ba4da4da7598a51adf48b0571d92726e08e2742e7cbfc8802ecd3ee836d79fc68dc7b33826c31dd37023390495f1282bf8a8ecdb70cffc20fcbc4b59338172f8f866f9545c82fff3a4a170120140bf39e2bfc8937b53c35ecd1b0c948abbf01a89a"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x80}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x40}]}, 0x1f4}, 0x1, 0x0, 0x0, 0x4800}, 0x0) sendmsg$NL80211_CMD_ABORT_SCAN(r5, &(0x7f0000001a00)={&(0x7f0000001940)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000019c0)={&(0x7f0000001980)={0x1c, r11, 0x300, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r12}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x41}, 0x20000010) getsockopt$TIPC_IMPORTANCE(0xffffffffffffffff, 0x10f, 0x7f, &(0x7f0000001a40), &(0x7f0000001a80)=0x4) 68.248326ms ago: executing program 3 (id=2350): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, 0x0, 0x4008000) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x24, 0x2e, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0x4, 0x1d, 0x0, 0x0, @binary}, @typed={0xc, 0x9, 0x0, 0x0, @u64=0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x42804}, 0x4000000) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000440), 0xffffffffffffffff) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000040)={0x0}, &(0x7f0000000180)=0xc) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={0x34, r3, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@NL802154_ATTR_PID={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_NETNS_FD={0x8}, @NL802154_ATTR_PID={0x8, 0x1c, r5}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008804}, 0x890) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r4) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) getgid() write$tun(r0, &(0x7f0000000580)={@val={0x0, 0x86dd}, @val={0x0, 0x1, 0x11, 0x4, 0x0, 0xca6}, @mpls={[], @ipv6=@gre_packet={0xe, 0x6, "ec00be", 0x197, 0x2f, 0xff, @local, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x88be, 0xd1, 0x3, [], "7904905358bd4f14253ba80355fb0d7775042ac864edb525a3f952a9cf33d4b39f3a7058487ed3468a5d95fbd52e58440521d9880e2a99c0049211f7af4de90363fc2e1d81c97562211e41fb06370c02733a3b0de59424f6543fbc0b03e9b024284f10a4e6f739be061aea0ac74c8f90a40b4f65192bdaed8e2885fe5e249f6e9783133057b7bd975dee4c79ff8a6a6db9427dac2c0897d9783706e706372effc4aec9d4d0ce0a17f79538be4a38ba2801d7704a6aadf5e3d0dc79d71e5c1231b62844c218f757732b10abab30ab159a6f"}, {0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x800, [0x3ff]}, {0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x86dd, [], "306b206a93e40fa08f417926a162debca6660eff29ed4181577bd12a695ee8c346a0923d000e777ed5545cebade5d76fcfb7fbcf80c5f024c5b0c59efaa69d987e6b23eb26b6e047a065577a5212b1e4eed45aa74dff7c37916bc1876a76fe21ce172c1c63861dfa7293dcf9b0d81a3e265642601ed9d7a12f4346695e5bfbfd"}, {0xa888, 0x88be, 0x4, {{0x6, 0x1, 0x0, 0x2, 0x1, 0x0, 0x3, 0x5}, 0x1, {0x88a8}}}, {0x8, 0x22eb, 0x20000, {{0x0, 0x2, 0x9, 0x0, 0x0, 0x2, 0x7, 0x8}, 0x2, {0x2, 0x4, 0x0, 0x5, 0x1, 0x1, 0x1}}}, {0x8, 0x6558, 0x1}}}}}}, 0x1cd) 0s ago: executing program 0 (id=2351): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000940)=ANY=[@ANYBLOB="9feb0100180000000000000024000000240000000a000000080000000100000f0500010002000000030000005600000009000000000000900600000000000000cf0200002e"], 0x0, 0x46, 0x0, 0x6}, 0x28) r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000c40)={0x2c, 0x40, 0x107, 0x70bd2b, 0x25dfdbfe, {0x3, 0x7c}, [@nested={0x4, 0x1c2}, @nested={0x10, 0x1, 0x0, 0x1, [@nested={0xc, 0x10, 0x0, 0x1, [@typed={0x8, 0xca, 0x0, 0x0, @u32=0xa7f}]}]}, @typed={0x4, 0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4c090}, 0xc000) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newlink={0x64, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x11d15}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x20, 0x2, 0x0, 0x1, [@IFLA_VLAN_EGRESS_QOS={0x4}, @IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_INGRESS_QOS={0x4}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0x1a, 0x1a}}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_ADDRESS={0xa, 0x1, @random="baeead4459ac"}]}, 0x64}, 0x1, 0x0, 0x0, 0x28001}, 0x8000) setsockopt$inet6_tcp_buf(r0, 0x6, 0x1a, &(0x7f0000000040)="59e62e063f0c7c4dcbdff7c7dfff40ada554ef9ce4871eafb9", 0x19) write(r0, &(0x7f00000000c0)="1c0000001e005f0214fffffffffffff8070000001700000000000000", 0x1c) syz_emit_ethernet(0x6a, &(0x7f0000000080)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a37f2", 0x34, 0x2c, 0x0, @remote, @local, {[], {{0x3a00, 0x5, 0x41424344, 0x41424344, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, {[@window={0x3, 0x3, 0x7f}, @sack={0x5, 0x1a, [0x10000, 0x6, 0x1, 0x9, 0x7, 0x8]}]}}}}}}}}, 0x0) kernel console output (not intermixed with test programs): 261.060090][T10144] netlink: 9286 bytes leftover after parsing attributes in process `syz.2.1086'. [ 261.447778][T10160] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1092'. [ 262.037582][T10180] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1099'. [ 262.108852][T10185] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1096'. [ 262.308569][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 262.605249][T10186] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 262.638415][T10186] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 262.943736][T10204] netlink: 'syz.1.1103': attribute type 11 has an invalid length. [ 263.040937][T10183] tc_dump_action: action bad kind [ 263.077233][ T7509] syz0: Port: 1 Link DOWN [ 263.080674][ T8929] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 263.117152][ T8929] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.162694][ T8929] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 263.210678][ T8929] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.249598][ T5912] net_ratelimit: 24 callbacks suppressed [ 263.249619][ T5912] bond3: (slave bridge2): failed to get link speed/duplex [ 263.354888][ T8929] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 263.414582][ T8929] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.484730][ T8929] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 263.555991][ T8929] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.731498][T10229] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 263.868691][ T8930] bond3: (slave bridge2): failed to get link speed/duplex [ 264.029614][ T8930] bond3: (slave bridge2): failed to get link speed/duplex [ 264.098052][T10235] __nla_validate_parse: 4 callbacks suppressed [ 264.098073][T10235] netlink: 292 bytes leftover after parsing attributes in process `syz.1.1111'. [ 264.155792][T10235] tunl0: Caught tx_queue_len zero misconfig [ 264.301273][T10241] bond5: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 264.320069][T10241] bond5 (unregistering): Released all slaves [ 264.359159][T10242] batadv0: entered promiscuous mode [ 264.364678][T10242] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 264.398376][ T8931] bond3: (slave bridge2): failed to get link speed/duplex [ 264.528178][ T8927] bond3: (slave bridge2): failed to get link speed/duplex [ 264.659141][ T5912] bond3: (slave bridge2): failed to get link speed/duplex [ 264.697845][T10253] tipc: Can't bind to reserved service type 2 [ 264.820033][ T8931] bond3: (slave bridge2): failed to get link speed/duplex [ 264.957817][T10260] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1118'. [ 264.958276][ T8930] bond3: (slave bridge2): failed to get link speed/duplex [ 264.997263][T10264] netlink: 164 bytes leftover after parsing attributes in process `syz.3.1121'. [ 265.267225][T10276] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1124'. [ 265.893720][T10294] GUP no longer grows the stack in syz.0.1126 (10294): 200000003000-20000000a000 (200000001000) [ 265.954907][T10294] CPU: 0 UID: 0 PID: 10294 Comm: syz.0.1126 Not tainted syzkaller #0 PREEMPT(full) [ 265.954937][T10294] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 265.954949][T10294] Call Trace: [ 265.954956][T10294] [ 265.954965][T10294] dump_stack_lvl+0xe8/0x150 [ 265.954995][T10294] __get_user_pages+0x238c/0x2720 [ 265.955047][T10294] ? down_read_killable+0x1bb/0x340 [ 265.955079][T10294] __gup_longterm_locked+0xd52/0x15c0 [ 265.955105][T10294] ? lock_acquire+0x106/0x350 [ 265.955144][T10294] gup_fast_fallback+0x1d82/0x20d0 [ 265.955202][T10294] ? __pfx_gup_fast_fallback+0x10/0x10 [ 265.955227][T10294] ? futex_unqueue+0x22/0x240 [ 265.955247][T10294] ? is_valid_gup_args+0x11f/0x200 [ 265.955273][T10294] ? get_user_pages_fast+0x4d/0xb0 [ 265.955299][T10294] __iov_iter_get_pages_alloc+0x378/0xa40 [ 265.955329][T10294] ? __pfx_pipe_clear_nowait+0x10/0x10 [ 265.955362][T10294] iov_iter_get_pages2+0x5e/0xa0 [ 265.955388][T10294] __se_sys_vmsplice+0x7b5/0x1660 [ 265.955440][T10294] ? __pfx___se_sys_vmsplice+0x10/0x10 [ 265.955467][T10294] ? __pfx_futex_wait+0x10/0x10 [ 265.955499][T10294] ? __might_fault+0xaf/0x130 [ 265.955534][T10294] ? fdget+0x148/0x1e0 [ 265.955576][T10294] ? put_files_struct+0x24f/0x350 [ 265.955598][T10294] ? 0xffffffffff600000 [ 265.955652][T10294] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 265.955675][T10294] do_syscall_64+0x174/0x580 [ 265.955696][T10294] ? trace_irq_disable+0x3b/0x140 [ 265.955724][T10294] ? clear_bhb_loop+0x40/0x90 [ 265.955749][T10294] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 265.955768][T10294] RIP: 0033:0x7fe8eeb9ce59 [ 265.955786][T10294] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 265.955803][T10294] RSP: 002b:00007fe8efa77028 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 265.955826][T10294] RAX: ffffffffffffffda RBX: 00007fe8eee15fa0 RCX: 00007fe8eeb9ce59 [ 265.955840][T10294] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 000000000000000c [ 265.955853][T10294] RBP: 00007fe8eec32d6f R08: 0000000000000000 R09: 0000000000000000 [ 265.955864][T10294] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 265.955875][T10294] R13: 00007fe8eee16038 R14: 00007fe8eee15fa0 R15: 00007ffe6a5e6e18 [ 265.955908][T10294] [ 266.427295][T10307] netlink: 'syz.2.1130': attribute type 1 has an invalid length. [ 266.530828][T10310] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1130'. [ 266.564680][T10307] bond5: entered promiscuous mode [ 266.584763][T10307] 8021q: adding VLAN 0 to HW filter on device bond5 [ 266.785867][T10307] bond5: (slave bridge4): making interface the new active one [ 266.835692][T10307] bridge4: entered promiscuous mode [ 266.891485][T10307] bond5: (slave bridge4): Enslaving as an active interface with an up link [ 267.301852][T10330] netlink: 'syz.2.1135': attribute type 1 has an invalid length. [ 267.524253][T10330] 8021q: adding VLAN 0 to HW filter on device bond6 [ 267.731358][T10341] vlan3: entered allmulticast mode [ 267.766379][T10341] bond6: entered allmulticast mode [ 267.786532][T10342] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1138'. [ 267.836602][T10330] bond6: (slave geneve3): making interface the new active one [ 267.898041][T10330] geneve3: entered allmulticast mode [ 267.958182][T10330] bond6: (slave geneve3): Enslaving as an active interface with an up link [ 268.017141][T10350] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1139'. [ 268.026243][ T8927] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.040733][ T8927] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.052750][T10350] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1139'. [ 268.065004][T10350] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1139'. [ 268.075981][ T8927] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.091022][ T8927] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.848712][ T1171] net_ratelimit: 17 callbacks suppressed [ 268.848735][ T1171] bond3: (slave bridge2): failed to get link speed/duplex [ 268.997803][ T8931] bond3: (slave bridge2): failed to get link speed/duplex [ 269.031006][T10372] netlink: 'syz.0.1145': attribute type 1 has an invalid length. [ 269.041413][T10372] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1145'. [ 269.128141][ T8931] bond3: (slave bridge2): failed to get link speed/duplex [ 269.248687][ T8931] bond3: (slave bridge2): failed to get link speed/duplex [ 269.379944][ T8931] bond3: (slave bridge2): failed to get link speed/duplex [ 269.508582][ T8927] bond3: (slave bridge2): failed to get link speed/duplex [ 269.638746][ T8927] bond3: (slave bridge2): failed to get link speed/duplex [ 269.659932][T10385] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1148'. [ 269.786449][ T8931] bond3: (slave bridge2): failed to get link speed/duplex [ 269.910621][ T8931] bond3: (slave bridge2): failed to get link speed/duplex [ 270.032335][ T8931] bond3: (slave bridge2): failed to get link speed/duplex [ 271.232538][T10393] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1150'. [ 272.391755][T10409] syzkaller0: entered promiscuous mode [ 272.428199][T10409] syzkaller0: entered allmulticast mode [ 273.053180][ T8931] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 273.129759][T10426] netlink: 'syz.4.1162': attribute type 12 has an invalid length. [ 273.245160][T10427] netlink: 'syz.1.1161': attribute type 58 has an invalid length. [ 273.296287][T10427] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1161'. [ 273.422837][T10435] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1164'. [ 273.468345][T10435] netlink: 261 bytes leftover after parsing attributes in process `syz.0.1164'. [ 273.900130][ T8927] net_ratelimit: 21 callbacks suppressed [ 273.900152][ T8927] bond3: (slave bridge2): failed to get link speed/duplex [ 274.071020][ T8929] bond3: (slave bridge2): failed to get link speed/duplex [ 274.209719][ T8929] bond3: (slave bridge2): failed to get link speed/duplex [ 274.368351][ T8931] bond3: (slave bridge2): failed to get link speed/duplex [ 274.499200][ T8931] bond3: (slave bridge2): failed to get link speed/duplex [ 274.562732][T10453] bond0: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 274.595214][T10453] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 274.639193][ T8927] bond3: (slave bridge2): failed to get link speed/duplex [ 274.655368][T10453] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1171'. [ 274.740050][T10453] ip6gre1: entered promiscuous mode [ 274.746067][T10453] ip6gre1: entered allmulticast mode [ 274.795610][ T8931] bond3: (slave bridge2): failed to get link speed/duplex [ 274.929276][ T8927] bond3: (slave bridge2): failed to get link speed/duplex [ 275.078089][ T8927] bond3: (slave bridge2): failed to get link speed/duplex [ 275.372019][T10458] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 275.564754][T10472] syzkaller0: entered promiscuous mode [ 275.582687][T10472] syzkaller0: entered allmulticast mode [ 277.305303][T10512] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1187'. [ 278.638301][T10526] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 280.023828][T10530] netlink: 'syz.4.1192': attribute type 2 has an invalid length. [ 280.104071][ T8931] net_ratelimit: 3 callbacks suppressed [ 280.104131][ T8931] bond3: (slave bridge2): failed to get link speed/duplex [ 280.265204][ T71] bond3: (slave bridge2): failed to get link speed/duplex [ 280.438654][ T8923] bond3: (slave bridge2): failed to get link speed/duplex [ 280.558086][ T8931] bond3: (slave bridge2): failed to get link speed/duplex [ 280.678634][ T8931] bond3: (slave bridge2): failed to get link speed/duplex [ 280.701254][T10545] netlink: 'syz.0.1197': attribute type 4 has an invalid length. [ 280.798754][ T8931] bond3: (slave bridge2): failed to get link speed/duplex [ 280.929336][ T8927] bond3: (slave bridge2): failed to get link speed/duplex [ 281.049387][ T8927] bond3: (slave bridge2): failed to get link speed/duplex [ 281.280207][ T71] bond3: (slave bridge2): failed to get link speed/duplex [ 281.512307][ T8927] bond3: (slave bridge2): failed to get link speed/duplex [ 281.573534][T10562] TCP: TCP_TX_DELAY enabled [ 281.626309][T10561] netlink: 9 bytes leftover after parsing attributes in process `syz.4.1201'. [ 281.673817][T10561] 0·: renamed from hsr0 (while UP) [ 281.749929][T10561] 0·: entered allmulticast mode [ 281.790771][T10561] hsr_slave_0: entered allmulticast mode [ 281.824962][T10561] hsr_slave_1: entered allmulticast mode [ 282.564674][T10579] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1206'. [ 282.736866][T10575] syzkaller0: entered promiscuous mode [ 282.738656][T10582] netlink: 'syz.3.1205': attribute type 362 has an invalid length. [ 282.765369][T10575] syzkaller0: entered allmulticast mode [ 286.134999][T10579] veth0_macvtap: left promiscuous mode [ 286.265161][T10587] veth1_macvtap: renamed from vlan0 [ 286.362988][T10591] ip6erspan0: entered allmulticast mode [ 286.398314][ T8931] net_ratelimit: 5 callbacks suppressed [ 286.398335][ T8931] bond3: (slave bridge2): failed to get link speed/duplex [ 286.648456][ T8927] bond3: (slave bridge2): failed to get link speed/duplex [ 286.885701][ T8927] bond3: (slave bridge2): failed to get link speed/duplex [ 287.033261][ T8927] bond3: (slave bridge2): failed to get link speed/duplex [ 287.201701][ T8929] bond3: (slave bridge2): failed to get link speed/duplex [ 287.360044][ T8927] bond3: (slave bridge2): failed to get link speed/duplex [ 287.417152][T10624] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1217'. [ 287.498785][ T8927] bond3: (slave bridge2): failed to get link speed/duplex [ 287.658494][ T8929] bond3: (slave bridge2): failed to get link speed/duplex [ 287.829647][ T8931] bond3: (slave bridge2): failed to get link speed/duplex [ 288.208365][T10633] syzkaller0: entered promiscuous mode [ 288.243002][T10633] syzkaller0: entered allmulticast mode [ 292.003487][T10643] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1221'. [ 292.170206][ T8923] bond3: (slave bridge2): failed to get link speed/duplex [ 292.310078][ T8927] bond3: (slave bridge2): failed to get link speed/duplex [ 292.416024][T10680] syzkaller0: entered promiscuous mode [ 292.459607][T10680] syzkaller0: entered allmulticast mode [ 292.529195][ T8931] bond3: (slave bridge2): failed to get link speed/duplex [ 292.710485][ T8931] bond3: (slave bridge2): failed to get link speed/duplex [ 292.908108][ T8930] bond3: (slave bridge2): failed to get link speed/duplex [ 293.050398][ T8930] bond3: (slave bridge2): failed to get link speed/duplex [ 293.190536][ T8930] bond3: (slave bridge2): failed to get link speed/duplex [ 293.461922][ T8927] bond3: (slave bridge2): failed to get link speed/duplex [ 293.698349][ T8931] bond3: (slave bridge2): failed to get link speed/duplex [ 293.858132][ T8931] bond3: (slave bridge2): failed to get link speed/duplex [ 294.012086][T10711] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1235'. [ 294.074412][T10714] x_tables: duplicate underflow at hook 3 [ 296.307852][T10721] syzkaller0: entered promiscuous mode [ 296.316552][T10721] syzkaller0: entered allmulticast mode [ 299.154759][T10746] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 299.165388][T10747] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 299.198658][ T8929] net_ratelimit: 5 callbacks suppressed [ 299.198717][ T8929] bond3: (slave bridge2): failed to get link speed/duplex [ 299.369875][ T8927] bond3: (slave bridge2): failed to get link speed/duplex [ 299.412389][T10754] netlink: 'syz.3.1241': attribute type 1 has an invalid length. [ 299.778763][ T8930] bond3: (slave bridge2): failed to get link speed/duplex [ 299.941133][ T8927] bond3: (slave bridge2): failed to get link speed/duplex [ 300.069562][ T8927] bond3: (slave bridge2): failed to get link speed/duplex [ 300.210207][ T8923] bond3: (slave bridge2): failed to get link speed/duplex [ 300.358262][ T8927] bond3: (slave bridge2): failed to get link speed/duplex [ 300.514019][ T8927] bond3: (slave bridge2): failed to get link speed/duplex [ 300.661675][ T1171] bond3: (slave bridge2): failed to get link speed/duplex [ 300.788423][ T1171] bond3: (slave bridge2): failed to get link speed/duplex [ 301.151696][T10806] syzkaller0: entered promiscuous mode [ 301.164182][T10806] syzkaller0: entered allmulticast mode [ 303.969168][T10809] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 304.084116][ T5912] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 304.549112][ T5912] bond3: (slave bridge2): failed to get link speed/duplex [ 304.776005][T10835] netlink: 136 bytes leftover after parsing attributes in process `syz.2.1257'. [ 304.822701][T10838] FAULT_INJECTION: forcing a failure. [ 304.822701][T10838] name failslab, interval 1, probability 0, space 0, times 0 [ 304.849632][T10838] CPU: 0 UID: 0 PID: 10838 Comm: syz.1.1259 Not tainted syzkaller #0 PREEMPT(full) [ 304.849661][T10838] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 304.849681][T10838] Call Trace: [ 304.849689][T10838] [ 304.849697][T10838] dump_stack_lvl+0xe8/0x150 [ 304.849727][T10838] should_fail_ex+0x40c/0x560 [ 304.849763][T10838] should_failslab+0xa8/0x100 [ 304.849799][T10838] ? rxrpc_alloc_call+0x27a/0xd90 [ 304.849828][T10838] kmem_cache_alloc_noprof+0x87/0x650 [ 304.849862][T10838] ? rxrpc_alloc_call+0x79/0xd90 [ 304.849888][T10838] rxrpc_alloc_call+0x27a/0xd90 [ 304.849922][T10838] rxrpc_new_client_call+0x11d/0x1500 [ 304.849949][T10838] ? __local_bh_enable_ip+0xd0/0x130 [ 304.849963][ T8923] bond3: (slave bridge2): failed to get link speed/duplex [ 304.849979][T10838] rxrpc_do_sendmsg+0xe8a/0x1280 [ 304.850022][T10838] ? __pfx_rxrpc_do_sendmsg+0x10/0x10 [ 304.850061][T10838] ? rxrpc_sendmsg+0x4ee/0x6b0 [ 304.850086][T10838] ? __pfx_rxrpc_sendmsg+0x10/0x10 [ 304.850112][T10838] ____sys_sendmsg+0x9b9/0xa20 [ 304.850141][T10838] ? __pfx_____sys_sendmsg+0x10/0x10 [ 304.850169][T10838] ? import_iovec+0x73/0xa0 [ 304.850194][T10838] ___sys_sendmsg+0x2a5/0x360 [ 304.850212][T10838] ? __lock_acquire+0x683/0x2cd0 [ 304.850236][T10838] ? __pfx____sys_sendmsg+0x10/0x10 [ 304.850290][T10838] ? __fget_files+0x2a/0x420 [ 304.850311][T10838] ? __fget_files+0x3a2/0x420 [ 304.850344][T10838] __x64_sys_sendmsg+0x1bd/0x2a0 [ 304.850366][T10838] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 304.850395][T10838] ? __pfx_ksys_write+0x10/0x10 [ 304.850430][T10838] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 304.850450][T10838] do_syscall_64+0x174/0x580 [ 304.850472][T10838] ? clear_bhb_loop+0x40/0x90 [ 304.850495][T10838] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 304.850513][T10838] RIP: 0033:0x7f531699ce59 [ 304.850531][T10838] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 304.850546][T10838] RSP: 002b:00007f53178ea028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 304.850565][T10838] RAX: ffffffffffffffda RBX: 00007f5316c15fa0 RCX: 00007f531699ce59 [ 304.850579][T10838] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000004 [ 304.850590][T10838] RBP: 00007f53178ea090 R08: 0000000000000000 R09: 0000000000000000 [ 304.850601][T10838] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 304.850612][T10838] R13: 00007f5316c16038 R14: 00007f5316c15fa0 R15: 00007ffd056e3d98 [ 304.850642][T10838] [ 305.378141][ T8923] bond3: (slave bridge2): failed to get link speed/duplex [ 305.518255][ T8931] bond3: (slave bridge2): failed to get link speed/duplex [ 305.648285][ T5912] bond3: (slave bridge2): failed to get link speed/duplex [ 305.928693][ T5912] bond3: (slave bridge2): failed to get link speed/duplex [ 306.034951][T10871] netlink: 'syz.1.1267': attribute type 13 has an invalid length. [ 306.093263][T10873] netlink: 'syz.2.1268': attribute type 1 has an invalid length. [ 306.135340][T10871] gretap0: refused to change device tx_queue_len [ 306.142132][T10871] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 306.160790][T10860] syzkaller1: entered promiscuous mode [ 306.170585][T10860] syzkaller1: entered allmulticast mode [ 306.281413][T10873] 8021q: adding VLAN 0 to HW filter on device bond7 [ 306.554376][T10883] FAULT_INJECTION: forcing a failure. [ 306.554376][T10883] name failslab, interval 1, probability 0, space 0, times 0 [ 306.578378][T10883] CPU: 1 UID: 0 PID: 10883 Comm: syz.3.1271 Not tainted syzkaller #0 PREEMPT(full) [ 306.578409][T10883] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 306.578420][T10883] Call Trace: [ 306.578429][T10883] [ 306.578437][T10883] dump_stack_lvl+0xe8/0x150 [ 306.578467][T10883] should_fail_ex+0x40c/0x560 [ 306.578505][T10883] should_failslab+0xa8/0x100 [ 306.578536][T10883] ? dst_alloc+0x105/0x170 [ 306.578561][T10883] kmem_cache_alloc_noprof+0x87/0x650 [ 306.578588][T10883] ? xfrm_policy_get_afinfo+0x30/0x1b0 [ 306.578625][T10883] dst_alloc+0x105/0x170 [ 306.578674][T10883] ipv4_blackhole_route+0x32/0x6a0 [ 306.578709][T10883] xfrm_lookup_route+0xd7/0x1c0 [ 306.578752][T10883] rxrpc_assess_MTU_size+0x42b/0xc10 [ 306.578784][T10883] ? __pfx_rxrpc_assess_MTU_size+0x10/0x10 [ 306.578819][T10883] ? trace_rxrpc_peer+0x82/0x200 [ 306.578841][T10883] ? rxrpc_lookup_peer+0x416/0xa50 [ 306.578871][T10883] rxrpc_lookup_peer+0x56b/0xa50 [ 306.578911][T10883] ? _raw_read_unlock+0x28/0x50 [ 306.578937][T10883] rxrpc_do_sendmsg+0xb31/0x1280 [ 306.578978][T10883] ? __pfx_rxrpc_do_sendmsg+0x10/0x10 [ 306.579003][T10883] ? rxrpc_sendmsg+0x11e/0x6b0 [ 306.579043][T10883] ? rxrpc_sendmsg+0x4ee/0x6b0 [ 306.579073][T10883] ? __pfx_rxrpc_sendmsg+0x10/0x10 [ 306.579117][T10883] ____sys_sendmsg+0x9b9/0xa20 [ 306.579151][T10883] ? __pfx_____sys_sendmsg+0x10/0x10 [ 306.579184][T10883] ? import_iovec+0x73/0xa0 [ 306.579212][T10883] ___sys_sendmsg+0x2a5/0x360 [ 306.579232][T10883] ? __lock_acquire+0x683/0x2cd0 [ 306.579259][T10883] ? __pfx____sys_sendmsg+0x10/0x10 [ 306.579324][T10883] ? __fget_files+0x2a/0x420 [ 306.579347][T10883] ? __fget_files+0x3a2/0x420 [ 306.579382][T10883] __x64_sys_sendmsg+0x1bd/0x2a0 [ 306.579408][T10883] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 306.579440][T10883] ? __pfx_ksys_write+0x10/0x10 [ 306.579478][T10883] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 306.579501][T10883] do_syscall_64+0x174/0x580 [ 306.579522][T10883] ? trace_irq_disable+0x3b/0x140 [ 306.579551][T10883] ? clear_bhb_loop+0x40/0x90 [ 306.579576][T10883] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 306.579597][T10883] RIP: 0033:0x7f2f4619ce59 [ 306.579617][T10883] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 306.579634][T10883] RSP: 002b:00007f2f470f7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 306.579656][T10883] RAX: ffffffffffffffda RBX: 00007f2f46415fa0 RCX: 00007f2f4619ce59 [ 306.579670][T10883] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000004 [ 306.579683][T10883] RBP: 00007f2f470f7090 R08: 0000000000000000 R09: 0000000000000000 [ 306.579695][T10883] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 306.579706][T10883] R13: 00007f2f46416038 R14: 00007f2f46415fa0 R15: 00007ffcbce17f38 [ 306.579751][T10883] [ 306.646024][T10888] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1270'. [ 306.801424][ T5912] bond3: (slave bridge2): failed to get link speed/duplex [ 307.033266][ T5912] bond3: (slave bridge2): failed to get link speed/duplex [ 307.055920][T10892] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1274'. [ 307.070391][T10893] bridge0: port 3(ip6gretap0) entered disabled state [ 307.092193][T10893] bridge0: port 1(bridge_slave_0) entered disabled state [ 307.114070][T10893] bridge0: port 2(bridge_slave_1) entered disabled state [ 307.293527][T10892] ipvlan1: entered promiscuous mode [ 307.300288][T10892] ipvlan1: left promiscuous mode [ 307.426597][T10899] bridge0: port 3(ip6gretap0) entered blocking state [ 307.433475][T10899] bridge0: port 3(ip6gretap0) entered forwarding state [ 307.447784][T10899] bridge0: port 1(bridge_slave_0) entered blocking state [ 307.450892][T10903] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1277'. [ 307.455283][T10899] bridge0: port 1(bridge_slave_0) entered forwarding state [ 307.474423][T10899] bridge0: port 2(bridge_slave_1) entered blocking state [ 307.481730][T10899] bridge0: port 2(bridge_slave_1) entered forwarding state [ 307.604809][ T1171] bond3: (slave bridge2): failed to get link speed/duplex [ 307.652183][ T29] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 307.666884][T10903] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 307.721312][T10903] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 307.729038][T10906] netlink: 'syz.0.1278': attribute type 1 has an invalid length. [ 307.826200][T10915] team0: left promiscuous mode [ 307.831059][T10915] team_slave_0: left promiscuous mode [ 307.875940][T10915] team_slave_1: left promiscuous mode [ 307.881608][T10915] team0: left allmulticast mode [ 307.886509][T10915] team_slave_0: left allmulticast mode [ 307.892097][T10915] team_slave_1: left allmulticast mode [ 307.898239][T10915] batadv0: left promiscuous mode [ 307.952420][T10919] netlink: 'syz.1.1279': attribute type 10 has an invalid length. [ 307.965492][T10919] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1279'. [ 308.056253][T10915] vlan2: left promiscuous mode [ 308.085087][T10915] bridge0: left promiscuous mode [ 308.131147][T10915] ip6tnl2: left allmulticast mode [ 308.148282][T10915] bond2: left promiscuous mode [ 308.165820][ T7515] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 308.179247][T10915] bridge1: left promiscuous mode [ 308.184427][T10915] bond2: left allmulticast mode [ 308.199723][T10915] bridge1: left allmulticast mode [ 308.205671][T10915] macsec0: left promiscuous mode [ 308.280478][T10919] team0: entered promiscuous mode [ 308.289160][T10919] team_slave_0: entered promiscuous mode [ 308.295068][T10919] team_slave_1: entered promiscuous mode [ 308.318950][T10934] FAULT_INJECTION: forcing a failure. [ 308.318950][T10934] name failslab, interval 1, probability 0, space 0, times 0 [ 308.332039][T10919] team0: entered allmulticast mode [ 308.337199][T10919] team_slave_0: entered allmulticast mode [ 308.342949][T10919] team_slave_1: entered allmulticast mode [ 308.350022][T10919] 8021q: adding VLAN 0 to HW filter on device team0 [ 308.357393][T10919] bridge0: port 3(team0) entered blocking state [ 308.363764][T10934] CPU: 1 UID: 0 PID: 10934 Comm: syz.2.1283 Not tainted syzkaller #0 PREEMPT(full) [ 308.363792][T10934] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 308.363804][T10934] Call Trace: [ 308.363812][T10934] [ 308.363820][T10934] dump_stack_lvl+0xe8/0x150 [ 308.363849][T10934] should_fail_ex+0x40c/0x560 [ 308.363885][T10934] should_failslab+0xa8/0x100 [ 308.363917][T10934] __kmalloc_cache_noprof+0x88/0x660 [ 308.363947][T10934] ? rxrpc_send_data+0xc37/0x2150 [ 308.363971][T10934] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 308.363995][T10934] rxrpc_send_data+0xc37/0x2150 [ 308.364032][T10934] ? rxrpc_send_data+0x32a/0x2150 [ 308.364077][T10934] ? __pfx_rxrpc_send_data+0x10/0x10 [ 308.364102][T10934] ? __pfx_default_wake_function+0x10/0x10 [ 308.364124][T10934] ? rxrpc_new_client_call+0xf24/0x1500 [ 308.364156][T10934] ? trace_rxrpc_peer+0x82/0x200 [ 308.364179][T10934] rxrpc_do_sendmsg+0x10d5/0x1280 [ 308.364215][T10934] ? __pfx_rxrpc_do_sendmsg+0x10/0x10 [ 308.364255][T10934] ? rxrpc_sendmsg+0x4ee/0x6b0 [ 308.364285][T10934] ? __pfx_rxrpc_sendmsg+0x10/0x10 [ 308.364314][T10934] ____sys_sendmsg+0x9b9/0xa20 [ 308.364347][T10934] ? __pfx_____sys_sendmsg+0x10/0x10 [ 308.364380][T10934] ? import_iovec+0x73/0xa0 [ 308.364408][T10934] ___sys_sendmsg+0x2a5/0x360 [ 308.364429][T10934] ? __lock_acquire+0x683/0x2cd0 [ 308.364455][T10934] ? __pfx____sys_sendmsg+0x10/0x10 [ 308.364518][T10934] ? __fget_files+0x2a/0x420 [ 308.364542][T10934] ? __fget_files+0x3a2/0x420 [ 308.364578][T10934] __x64_sys_sendmsg+0x1bd/0x2a0 [ 308.364604][T10934] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 308.364648][T10934] ? __pfx_ksys_write+0x10/0x10 [ 308.364687][T10934] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 308.364710][T10934] do_syscall_64+0x174/0x580 [ 308.364731][T10934] ? trace_irq_disable+0x3b/0x140 [ 308.364759][T10934] ? clear_bhb_loop+0x40/0x90 [ 308.364784][T10934] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 308.364803][T10934] RIP: 0033:0x7f420af9ce59 [ 308.364824][T10934] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 308.364842][T10934] RSP: 002b:00007f420bf13028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 308.364865][T10934] RAX: ffffffffffffffda RBX: 00007f420b215fa0 RCX: 00007f420af9ce59 [ 308.364879][T10934] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000004 [ 308.364892][T10934] RBP: 00007f420bf13090 R08: 0000000000000000 R09: 0000000000000000 [ 308.364904][T10934] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 308.364916][T10934] R13: 00007f420b216038 R14: 00007f420b215fa0 R15: 00007fff0722f308 [ 308.364951][T10934] [ 308.675504][T10919] bridge0: port 3(team0) entered disabled state [ 308.725118][ T71] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 308.761906][ T71] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 308.809989][ T71] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 308.846018][ T71] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 309.079659][T10942] syzkaller0: entered promiscuous mode [ 309.119597][T10942] syzkaller0: entered allmulticast mode [ 309.148819][T10944] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 309.179292][T10944] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 309.300066][T10960] erspan1: entered promiscuous mode [ 309.305976][T10960] erspan1: entered allmulticast mode [ 309.313614][T10952] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1288'. [ 309.588612][ T8923] net_ratelimit: 6 callbacks suppressed [ 309.588636][ T8923] bond3: (slave bridge2): failed to get link speed/duplex [ 309.718319][ T1171] bond3: (slave bridge2): failed to get link speed/duplex [ 309.838030][ T8923] bond3: (slave bridge2): failed to get link speed/duplex [ 309.948141][ T1171] bond3: (slave bridge2): failed to get link speed/duplex [ 310.078245][ T5912] bond3: (slave bridge2): failed to get link speed/duplex [ 310.188201][ T1171] bond3: (slave bridge2): failed to get link speed/duplex [ 310.298274][ T8923] bond3: (slave bridge2): failed to get link speed/duplex [ 310.471035][ T71] bond3: (slave bridge2): failed to get link speed/duplex [ 310.524400][T11009] netlink: 'syz.3.1308': attribute type 1 has an invalid length. [ 310.608206][T11009] bond7: (slave geneve2): making interface the new active one [ 310.633962][T11009] bond7: (slave geneve2): Enslaving as an active interface with an up link [ 310.644318][ T5912] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 310.670430][ T5912] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 310.704911][T11009] bond7 (unregistering): (slave geneve2): Releasing active interface [ 310.727073][T11009] bond7 (unregistering): Released all slaves [ 310.768242][ T5912] bond3: (slave bridge2): failed to get link speed/duplex [ 310.775643][ T5912] netdevsim netdevsim3 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 310.791509][T11019] vlan0: entered promiscuous mode [ 310.827136][ T5912] netdevsim netdevsim3 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 310.916724][ T5912] bond3: (slave bridge2): failed to get link speed/duplex [ 311.162015][T11031] syzkaller0: entered promiscuous mode [ 311.179601][T11031] syzkaller0: entered allmulticast mode [ 311.373173][T11044] netlink: 'syz.0.1317': attribute type 1 has an invalid length. [ 311.420329][T11044] 8021q: adding VLAN 0 to HW filter on device bond5 [ 311.904293][T11044] bond5: (slave veth3): Enslaving as a backup interface with a down link [ 312.880045][T11099] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1322'. [ 312.889196][T11099] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1322'. [ 313.225876][T11111] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1326'. [ 313.489125][T11123] xfrm1: entered allmulticast mode [ 313.610594][T11128] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1330'. [ 313.956131][T11139] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1335'. [ 313.992481][T11139] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1335'. [ 314.002303][T11139] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1335'. [ 314.192936][T11140] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1334'. [ 314.610882][ T8931] net_ratelimit: 17 callbacks suppressed [ 314.610904][ T8931] bond3: (slave bridge2): failed to get link speed/duplex [ 314.739003][ T8931] bond3: (slave bridge2): failed to get link speed/duplex [ 314.966183][ T1171] bond3: (slave bridge2): failed to get link speed/duplex [ 315.100291][ T8923] bond3: (slave bridge2): failed to get link speed/duplex [ 315.208086][ T1171] bond3: (slave bridge2): failed to get link speed/duplex [ 315.370807][ T5636] block nbd0: Receive control failed (result -32) [ 315.373963][ T5639] block nbd0: Receive control failed (result -32) [ 315.513048][ T1171] bond3: (slave bridge2): failed to get link speed/duplex [ 315.684769][T11178] netlink: 'syz.0.1343': attribute type 2 has an invalid length. [ 315.828389][ T8923] bond3: (slave bridge2): failed to get link speed/duplex [ 315.976164][T11189] 8021q: adding VLAN 0 to HW filter on device bond6 [ 315.988213][ T71] bond3: (slave bridge2): failed to get link speed/duplex [ 316.109207][ T8927] bond3: (slave bridge2): failed to get link speed/duplex [ 316.218377][ T8923] bond3: (slave bridge2): failed to get link speed/duplex [ 316.450356][T11193] bond5: (slave dummy0): Releasing active interface [ 316.506318][T11193] bridge_slave_1: left allmulticast mode [ 316.514862][T11193] bridge_slave_1: left promiscuous mode [ 316.525949][T11193] bridge0: port 2(bridge_slave_1) entered disabled state [ 316.562765][T11195] netlink: 80 bytes leftover after parsing attributes in process `syz.4.1347'. [ 316.620060][T11193] bond0: (slave bond_slave_0): Releasing backup interface [ 316.802463][T11193] bond0: (slave bond_slave_1): Releasing backup interface [ 316.853179][T11193] team0: Failed to send options change via netlink (err -105) [ 316.873316][T11193] team0: Failed to send port change of device team_slave_0 via netlink (err -105) [ 316.884690][T11193] team0: Port device team_slave_0 removed [ 316.915466][T11193] team0: Failed to send options change via netlink (err -105) [ 316.923515][T11193] team0: Failed to send port change of device team_slave_1 via netlink (err -105) [ 316.933195][T11193] team0: Port device team_slave_1 removed [ 316.940101][T11193] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 316.947526][T11193] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 316.956022][T11193] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 317.316457][T11204] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1352'. [ 317.348294][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 317.726446][T11216] netlink: 'syz.3.1357': attribute type 1 has an invalid length. [ 317.750950][T11217] vlan4: entered promiscuous mode [ 317.756114][T11217] geneve1: entered promiscuous mode [ 317.762045][T11217] vlan4: entered allmulticast mode [ 317.767403][T11217] geneve1: entered allmulticast mode [ 318.034902][T11226] __nla_validate_parse: 4 callbacks suppressed [ 318.034947][T11226] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1361'. [ 318.088627][T11226] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1361'. [ 318.362512][T11234] FAULT_INJECTION: forcing a failure. [ 318.362512][T11234] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 318.377794][T11234] CPU: 1 UID: 0 PID: 11234 Comm: syz.2.1364 Not tainted syzkaller #0 PREEMPT(full) [ 318.377824][T11234] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 318.377836][T11234] Call Trace: [ 318.377844][T11234] [ 318.377851][T11234] dump_stack_lvl+0xe8/0x150 [ 318.377881][T11234] should_fail_ex+0x40c/0x560 [ 318.377919][T11234] _copy_from_iter+0x4ff/0x1660 [ 318.377943][T11234] ? __page_frag_cache_refill+0x50/0x140 [ 318.377977][T11234] ? __pfx__copy_from_iter+0x10/0x10 [ 318.377996][T11234] ? trace_rxrpc_txbuf+0x89/0x230 [ 318.378037][T11234] ? rxrpc_alloc_data_txbuf+0x3b5/0x5a0 [ 318.378072][T11234] rxrpc_send_data+0x1032/0x2150 [ 318.378113][T11234] ? preempt_schedule_thunk+0x16/0x30 [ 318.378158][T11234] ? __pfx_rxrpc_send_data+0x10/0x10 [ 318.378183][T11234] ? __pfx_default_wake_function+0x10/0x10 [ 318.378204][T11234] ? rxrpc_new_client_call+0xf24/0x1500 [ 318.378238][T11234] ? trace_rxrpc_peer+0x82/0x200 [ 318.378263][T11234] rxrpc_do_sendmsg+0x10d5/0x1280 [ 318.378304][T11234] ? __pfx_rxrpc_do_sendmsg+0x10/0x10 [ 318.378344][T11234] ? rxrpc_sendmsg+0x4ee/0x6b0 [ 318.378373][T11234] ? __pfx_rxrpc_sendmsg+0x10/0x10 [ 318.378403][T11234] ____sys_sendmsg+0x9b9/0xa20 [ 318.378434][T11234] ? __pfx_____sys_sendmsg+0x10/0x10 [ 318.378466][T11234] ? import_iovec+0x73/0xa0 [ 318.378494][T11234] ___sys_sendmsg+0x2a5/0x360 [ 318.378514][T11234] ? __lock_acquire+0x683/0x2cd0 [ 318.378540][T11234] ? __pfx____sys_sendmsg+0x10/0x10 [ 318.378604][T11234] ? __fget_files+0x2a/0x420 [ 318.378628][T11234] ? __fget_files+0x3a2/0x420 [ 318.378665][T11234] __x64_sys_sendmsg+0x1bd/0x2a0 [ 318.378690][T11234] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 318.378724][T11234] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 318.378756][T11234] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 318.378778][T11234] do_syscall_64+0x174/0x580 [ 318.378803][T11234] ? clear_bhb_loop+0x40/0x90 [ 318.378828][T11234] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 318.378848][T11234] RIP: 0033:0x7f420af9ce59 [ 318.378868][T11234] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 318.378885][T11234] RSP: 002b:00007f420bf13028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 318.378908][T11234] RAX: ffffffffffffffda RBX: 00007f420b215fa0 RCX: 00007f420af9ce59 [ 318.378922][T11234] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000004 [ 318.378935][T11234] RBP: 00007f420bf13090 R08: 0000000000000000 R09: 0000000000000000 [ 318.378947][T11234] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 318.378960][T11234] R13: 00007f420b216038 R14: 00007f420b215fa0 R15: 00007fff0722f308 [ 318.378995][T11234] [ 318.429369][T11240] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1365'. [ 318.740203][T11250] netlink: 'syz.4.1371': attribute type 1 has an invalid length. [ 318.788106][T11253] netlink: 124 bytes leftover after parsing attributes in process `syz.2.1370'. [ 318.851096][T11250] bond6: entered promiscuous mode [ 318.868572][T11250] 8021q: adding VLAN 0 to HW filter on device bond6 [ 318.906692][T11260] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1365'. [ 319.196848][T11250] 8021q: adding VLAN 0 to HW filter on device bond6 [ 319.204239][T11250] bond6: (slave ip6gre2): The slave device specified does not support setting the MAC address [ 319.245183][T11268] netlink: 'syz.4.1371': attribute type 11 has an invalid length. [ 319.253325][T11250] bond6: (slave ip6gre2): Setting fail_over_mac to active for active-backup mode [ 319.310389][T11250] bond6: (slave ip6gre2): making interface the new active one [ 319.318018][T11250] ip6gre2: entered promiscuous mode [ 319.325151][T11250] bond6: (slave ip6gre2): Enslaving as an active interface with an up link [ 319.463606][T11260] syz_tun (unregistering): left allmulticast mode [ 319.483530][ T71] smc: removing ib device syz1 [ 319.553161][ T7509] syz1: Port: 1 Link DOWN [ 319.668423][T11287] net_ratelimit: 16 callbacks suppressed [ 319.668444][T11287] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 319.698673][ T8930] bond3: (slave bridge2): failed to get link speed/duplex [ 319.715005][ T71] smbdirect: ib_dev[syz1] removed [ 319.809092][ T8923] bond3: (slave bridge2): failed to get link speed/duplex [ 319.846368][T11293] xt_hashlimit: size too large, truncated to 1048576 [ 319.892432][T11295] netlink: 6 bytes leftover after parsing attributes in process `syz.4.1376'. [ 319.918478][ T8927] bond3: (slave bridge2): failed to get link speed/duplex [ 319.942648][T11295] netlink: 'syz.4.1376': attribute type 1 has an invalid length. [ 319.956286][T11295] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1376'. [ 320.051913][ T1171] bond3: (slave bridge2): failed to get link speed/duplex [ 320.169766][ T8930] bond3: (slave bridge2): failed to get link speed/duplex [ 320.298033][ T8929] bond3: (slave bridge2): failed to get link speed/duplex [ 320.477984][ T8929] bond3: (slave bridge2): failed to get link speed/duplex [ 320.565113][T11307] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1380'. [ 320.941025][ T1171] bond3: (slave bridge2): failed to get link speed/duplex [ 321.161401][T11318] netlink: 140 bytes leftover after parsing attributes in process `syz.1.1384'. [ 321.210701][T11318] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1384'. [ 321.271864][ T8930] bond3: (slave bridge2): failed to get link speed/duplex [ 321.477661][T11323] syzkaller0: entered promiscuous mode [ 321.496325][T11323] syzkaller0: entered allmulticast mode [ 324.750759][ T71] net_ratelimit: 3 callbacks suppressed [ 324.750783][ T71] bond3: (slave bridge2): failed to get link speed/duplex [ 324.850450][T11352] netlink: 'syz.4.1392': attribute type 1 has an invalid length. [ 324.859418][T11352] netlink: 13 bytes leftover after parsing attributes in process `syz.4.1392'. [ 324.879353][ T8930] bond3: (slave bridge2): failed to get link speed/duplex [ 324.988493][ T71] bond3: (slave bridge2): failed to get link speed/duplex [ 325.108437][ T8930] bond3: (slave bridge2): failed to get link speed/duplex [ 325.305900][ T8927] bond3: (slave bridge2): failed to get link speed/duplex [ 325.422183][T11375] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1399'. [ 325.429447][ T5912] bond3: (slave bridge2): failed to get link speed/duplex [ 325.548071][ T8927] bond3: (slave bridge2): failed to get link speed/duplex [ 325.670287][ T71] bond3: (slave bridge2): failed to get link speed/duplex [ 325.838296][ T8930] bond3: (slave bridge2): failed to get link speed/duplex [ 326.069949][ T71] bond3: (slave bridge2): failed to get link speed/duplex [ 327.557698][T11342] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 327.885800][ T5912] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 327.913983][ T5912] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 327.922114][T11394] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1404'. [ 328.031581][ T5639] block nbd1: Receive control failed (result -1) [ 328.115884][T11404] FAULT_INJECTION: forcing a failure. [ 328.115884][T11404] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 328.198861][T11404] CPU: 1 UID: 0 PID: 11404 Comm: syz.1.1407 Not tainted syzkaller #0 PREEMPT(full) [ 328.198892][T11404] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 328.198905][T11404] Call Trace: [ 328.198913][T11404] [ 328.198922][T11404] dump_stack_lvl+0xe8/0x150 [ 328.198952][T11404] should_fail_ex+0x40c/0x560 [ 328.198988][T11404] _copy_from_user+0x2d/0xb0 [ 328.199012][T11404] ___sys_sendmsg+0x1c6/0x360 [ 328.199047][T11404] ? __lock_acquire+0x683/0x2cd0 [ 328.199074][T11404] ? __pfx____sys_sendmsg+0x10/0x10 [ 328.199098][T11404] ? __lock_acquire+0x683/0x2cd0 [ 328.199149][T11404] ? __fget_files+0x2a/0x420 [ 328.199175][T11404] ? __fget_files+0x3a2/0x420 [ 328.199210][T11404] __x64_sys_sendmsg+0x1bd/0x2a0 [ 328.199236][T11404] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 328.199269][T11404] ? handle_softirqs+0x70f/0x840 [ 328.199297][T11404] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 328.199319][T11404] do_syscall_64+0x174/0x580 [ 328.199343][T11404] ? clear_bhb_loop+0x40/0x90 [ 328.199368][T11404] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 328.199388][T11404] RIP: 0033:0x7f531699ce59 [ 328.199408][T11404] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 328.199425][T11404] RSP: 002b:00007f53178ea028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 328.199446][T11404] RAX: ffffffffffffffda RBX: 00007f5316c15fa0 RCX: 00007f531699ce59 [ 328.199461][T11404] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 328.199474][T11404] RBP: 00007f53178ea090 R08: 0000000000000000 R09: 0000000000000000 [ 328.199486][T11404] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 328.199498][T11404] R13: 00007f5316c16038 R14: 00007f5316c15fa0 R15: 00007ffd056e3d98 [ 328.199532][T11404] [ 328.866177][T11417] netlink: 'syz.1.1409': attribute type 1 has an invalid length. [ 328.903916][T11417] 8021q: adding VLAN 0 to HW filter on device bond8 [ 328.947474][T11417] bond8: (slave veth3): Enslaving as a backup interface with a down link [ 329.088836][T11423] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1413'. [ 329.108851][T11413] bond8: (slave dummy0): Enslaving as a backup interface with an up link [ 329.289117][T11435] netlink: 'syz.0.1414': attribute type 1 has an invalid length. [ 329.297249][T11428] tipc: Started in network mode [ 329.302592][T11428] tipc: Node identity ac14140f, cluster identity 4711 [ 329.313870][T11428] tipc: Enabled bearer , priority 10 [ 329.331124][T11434] tipc: Enabling of bearer rejected, already enabled [ 329.939887][T11452] 8021q: adding VLAN 0 to HW filter on device bond8 [ 329.960294][T11452] bridge0: port 1(bond8) entered blocking state [ 330.016176][T11452] bridge0: port 1(bond8) entered disabled state [ 330.043862][T11452] bond8: entered allmulticast mode [ 330.068381][T11452] bond8: entered promiscuous mode [ 330.075905][T11462] tipc: Enabling of bearer rejected, failed to enable media [ 330.122708][ T5912] net_ratelimit: 29 callbacks suppressed [ 330.122763][ T5912] bond3: (slave bridge2): failed to get link speed/duplex [ 330.210303][T11466] netlink: 'syz.0.1426': attribute type 3 has an invalid length. [ 330.278133][ T8930] bond3: (slave bridge2): failed to get link speed/duplex [ 330.385424][T11476] netlink: 'syz.0.1429': attribute type 1 has an invalid length. [ 330.435577][T11476] 8021q: adding VLAN 0 to HW filter on device bond7 [ 330.445834][ T7506] tipc: Node number set to 2886997007 [ 330.542089][T11485] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1428'. [ 330.770732][T11484] bond7: (slave geneve2): making interface the new active one [ 330.786769][T11484] bond7: (slave geneve2): Enslaving as an active interface with an up link [ 330.802290][T11491] netlink: 'syz.2.1430': attribute type 1 has an invalid length. [ 330.818761][ T8928] bond3: (slave bridge2): failed to get link speed/duplex [ 330.868920][T11491] bond9: entered promiscuous mode [ 330.884260][T11491] 8021q: adding VLAN 0 to HW filter on device bond9 [ 330.931392][T11491] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1430'. [ 330.944762][T11491] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1430'. [ 331.126964][T11491] bond9: (slave bridge6): making interface the new active one [ 331.172548][T11491] bridge6: entered promiscuous mode [ 331.235172][T11491] bond9: (slave bridge6): Enslaving as an active interface with an up link [ 331.772519][ T8928] bond3: (slave bridge2): failed to get link speed/duplex [ 331.993852][ T71] bond3: (slave bridge2): failed to get link speed/duplex [ 332.114926][T11504] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 332.121143][T11504] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 332.145970][ T8928] bond3: (slave bridge2): failed to get link speed/duplex [ 332.171555][T11504] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 332.177699][T11504] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 332.208472][T11540] veth0: entered promiscuous mode [ 332.226493][T11540] veth0: left promiscuous mode [ 332.380915][T11504] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 332.386974][T11504] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 332.426530][T11544] veth13: entered promiscuous mode [ 332.498124][ T8930] bond3: (slave bridge2): failed to get link speed/duplex [ 332.498819][T11504] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 332.514202][T11504] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 332.536263][T11504] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 332.542222][T11504] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 332.640929][T11545] workqueue: name exceeds WQ_NAME_LEN. Truncating to: 1ùà^!‚Y‡°”õËí [ 332.640929][T11545] 3ìUH†5rºBnœæ [ 332.656860][ T71] bond3: (slave bridge2): failed to get link speed/duplex [ 333.998011][ T8927] bond3: (slave bridge2): failed to get link speed/duplex [ 334.138495][ T8927] bond3: (slave bridge2): failed to get link speed/duplex [ 334.351202][T11612] xt_CT: You must specify a L4 protocol and not use inversions on it [ 334.984004][T11630] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1461'. [ 335.127479][T11630] netlink: 'syz.0.1461': attribute type 1 has an invalid length. [ 335.139217][ T8927] net_ratelimit: 5 callbacks suppressed [ 335.139239][ T8927] bond3: (slave bridge2): failed to get link speed/duplex [ 335.288781][ T8929] bond3: (slave bridge2): failed to get link speed/duplex [ 335.398316][ T5912] bond3: (slave bridge2): failed to get link speed/duplex [ 335.781801][ T8927] bond3: (slave bridge2): failed to get link speed/duplex [ 335.899599][ T8927] bond3: (slave bridge2): failed to get link speed/duplex [ 336.018400][ T8927] bond3: (slave bridge2): failed to get link speed/duplex [ 336.164893][ T5912] bond3: (slave bridge2): failed to get link speed/duplex [ 336.298497][ T5912] bond3: (slave bridge2): failed to get link speed/duplex [ 336.479044][ T8927] bond3: (slave bridge2): failed to get link speed/duplex [ 336.598468][ T8927] bond3: (slave bridge2): failed to get link speed/duplex [ 337.529385][T11731] netlink: 'syz.4.1480': attribute type 21 has an invalid length. [ 337.537272][T11731] netlink: 'syz.4.1480': attribute type 22 has an invalid length. [ 337.545196][T11731] netlink: 'syz.4.1480': attribute type 23 has an invalid length. [ 337.554329][T11731] netlink: 'syz.4.1480': attribute type 25 has an invalid length. [ 337.577105][T11731] netlink: 'syz.4.1480': attribute type 26 has an invalid length. [ 337.599196][T11731] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1480'. [ 337.677243][T11731] netlink: 'syz.4.1480': attribute type 1 has an invalid length. [ 337.758849][T11731] 8021q: adding VLAN 0 to HW filter on device bond7 [ 337.799036][T11735] bond7: (slave gretap1): making interface the new active one [ 337.809332][T11735] bond7: (slave gretap1): Enslaving as an active interface with an up link [ 339.696388][T11796] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_tx_wq": -EINTR [ 340.115104][T11822] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1499'. [ 340.146859][T11823] netlink: 244 bytes leftover after parsing attributes in process `syz.2.1498'. [ 340.249856][T11834] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1498'. [ 340.265785][T11831] netlink: 'syz.0.1500': attribute type 13 has an invalid length. [ 340.378434][ T8927] net_ratelimit: 19 callbacks suppressed [ 340.378456][ T8927] bond3: (slave bridge2): failed to get link speed/duplex [ 340.407334][T11834] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1498'. [ 340.420937][T11831] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 340.538283][ T71] bond3: (slave bridge2): failed to get link speed/duplex [ 340.548880][T11834] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1498'. [ 340.652101][ T5912] bond3: (slave bridge2): failed to get link speed/duplex [ 340.786251][ T71] bond3: (slave bridge2): failed to get link speed/duplex [ 340.923472][ T8929] bond3: (slave bridge2): failed to get link speed/duplex [ 341.182328][T11868] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 341.218548][T11869] syzkaller0: entered promiscuous mode [ 341.224435][T11869] syzkaller0: entered allmulticast mode [ 341.253740][ T71] bond3: (slave bridge2): failed to get link speed/duplex [ 341.679571][T11883] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 341.704511][ T8930] bond3: (slave bridge2): failed to get link speed/duplex [ 341.872753][T11889] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1519'. [ 341.960862][T11889] netlink: 'syz.3.1519': attribute type 10 has an invalid length. [ 341.970920][ T8927] bond3: (slave bridge2): failed to get link speed/duplex [ 342.047322][T11893] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1521'. [ 342.228063][T11909] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1525'. [ 342.229352][T11908] RDS: rds_bind could not find a transport for fc01::, load rds_tcp or rds_rdma? [ 342.732933][T11933] netlink: 'syz.1.1528': attribute type 1 has an invalid length. [ 342.755797][T11933] netlink: 'syz.1.1528': attribute type 1 has an invalid length. [ 342.777606][T11933] netlink: 'syz.1.1528': attribute type 2 has an invalid length. [ 342.797859][T11933] netlink: 'syz.1.1528': attribute type 1 has an invalid length. [ 343.335567][T11950] geneve4: entered promiscuous mode [ 343.390485][ T8927] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 48299 - 0 [ 343.430326][ T8927] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 48299 - 0 [ 343.495684][ T71] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 48299 - 0 [ 343.504649][ T71] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 48299 - 0 [ 343.864212][T11965] pim6reg0: tun_chr_ioctl cmd 1074812118 [ 344.203611][T11987] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1543'. [ 344.212539][T11987] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1543'. [ 344.221810][T11987] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1543'. [ 344.244772][T11987] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1543'. [ 344.553380][T12006] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1549'. [ 345.053834][T12004] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1547'. [ 345.204064][T12014] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1547'. [ 345.335634][T12036] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1558'. [ 345.431970][T12036] 8021q: adding VLAN 0 to HW filter on device bond9 [ 345.578512][T12043] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.589311][T12043] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 48299 - 0 [ 345.688472][ T8929] net_ratelimit: 21 callbacks suppressed [ 345.688494][ T8929] bond3: (slave bridge2): failed to get link speed/duplex [ 345.765568][T12045] 8021q: adding VLAN 0 to HW filter on device bond9 [ 345.779814][T12045] bond9: (slave vti0): The slave device specified does not support setting the MAC address [ 345.801871][T12045] bond9: (slave vti0): Error -95 calling set_mac_address [ 345.834819][T12051] bond8: (slave dummy0): Removing an active aggregator [ 345.851587][T12051] bond8: (slave dummy0): Releasing backup interface [ 345.910033][T12051] bond9: (slave dummy0): Error -99 calling set_mac_address [ 345.986808][ T8929] bond3: (slave bridge2): failed to get link speed/duplex [ 346.014399][T12065] netlink: 'syz.3.1562': attribute type 1 has an invalid length. [ 346.022277][T12065] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1562'. [ 346.160097][T12043] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.200596][T12043] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 48299 - 0 [ 346.416552][T12077] bridge0: port 1(bridge_slave_0) entered disabled state [ 346.454925][T12077] bridge_slave_0 (unregistering): left allmulticast mode [ 346.462032][T12077] bridge_slave_0 (unregistering): left promiscuous mode [ 346.469090][T12077] bridge0: port 1(bridge_slave_0) entered disabled state [ 346.526095][T12078] tipc: Enabling of bearer rejected, already enabled [ 346.608120][ T71] bond3: (slave bridge2): failed to get link speed/duplex [ 346.767809][T12043] bond0: (slave netdevsim1): Releasing backup interface [ 346.823930][T12043] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.836897][T12043] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 48299 - 0 [ 346.911815][T12080] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1564'. [ 347.024487][T12088] bond10: option active_slave: mode dependency failed, not supported in mode balance-xor(2) [ 347.049334][T12088] bond10 (unregistering): Released all slaves [ 347.308465][ T5912] bond3: (slave bridge2): failed to get link speed/duplex [ 347.470090][ T7515] IPVS: starting estimator thread 0... [ 347.475751][T12112] bridge5: entered promiscuous mode [ 347.475779][T12112] bridge5: entered allmulticast mode [ 347.539074][T12112] team0: Port device bridge5 added [ 347.588199][T12121] IPVS: using max 27 ests per chain, 64800 per kthread [ 347.622119][T12043] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.633708][T12043] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 48299 - 0 [ 347.698982][T12110] bridge6: entered promiscuous mode [ 347.734468][T12110] bridge6: entered allmulticast mode [ 347.803260][T12110] team0: Port device bridge6 added [ 347.938410][ T5912] bond3: (slave bridge2): failed to get link speed/duplex [ 348.055402][ T5912] bond3: (slave bridge2): failed to get link speed/duplex [ 348.193256][ T5912] bond3: (slave bridge2): failed to get link speed/duplex [ 348.353935][T12148] FAULT_INJECTION: forcing a failure. [ 348.353935][T12148] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 348.367146][T12148] CPU: 1 UID: 0 PID: 12148 Comm: syz.1.1574 Not tainted syzkaller #0 PREEMPT(full) [ 348.367175][T12148] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 348.367188][T12148] Call Trace: [ 348.367198][T12148] [ 348.367208][T12148] dump_stack_lvl+0xe8/0x150 [ 348.367240][T12148] should_fail_ex+0x40c/0x560 [ 348.367278][T12148] _copy_from_iter+0x1d3/0x1660 [ 348.367304][T12148] ? rcu_is_watching+0x15/0xb0 [ 348.367334][T12148] ? __pfx__copy_from_iter+0x10/0x10 [ 348.367352][T12148] ? kmem_cache_alloc_node_noprof+0x3ca/0x680 [ 348.367390][T12148] ? netlink_sendmsg+0x650/0xb40 [ 348.367412][T12148] ? skb_put+0x112/0x210 [ 348.367436][T12148] netlink_sendmsg+0x6c0/0xb40 [ 348.367469][T12148] ? __pfx_netlink_sendmsg+0x10/0x10 [ 348.367495][T12148] ? aa_sock_msg_perm+0xf1/0x1b0 [ 348.367545][T12148] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 348.367570][T12148] ? __pfx_netlink_sendmsg+0x10/0x10 [ 348.367594][T12148] ____sys_sendmsg+0x9b9/0xa20 [ 348.367616][T12148] ? __might_fault+0xaf/0x130 [ 348.367648][T12148] ? __pfx_____sys_sendmsg+0x10/0x10 [ 348.367681][T12148] ? import_iovec+0x73/0xa0 [ 348.367708][T12148] ___sys_sendmsg+0x2a5/0x360 [ 348.367741][T12148] ? __lock_acquire+0x683/0x2cd0 [ 348.367767][T12148] ? __pfx____sys_sendmsg+0x10/0x10 [ 348.367828][T12148] ? __fget_files+0x2a/0x420 [ 348.367852][T12148] ? __fget_files+0x3a2/0x420 [ 348.367884][T12148] __x64_sys_sendmsg+0x1bd/0x2a0 [ 348.367906][T12148] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 348.367935][T12148] ? __pfx_ksys_write+0x10/0x10 [ 348.367973][T12148] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 348.368005][T12148] do_syscall_64+0x174/0x580 [ 348.368027][T12148] ? trace_irq_disable+0x3b/0x140 [ 348.368056][T12148] ? clear_bhb_loop+0x40/0x90 [ 348.368082][T12148] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 348.368103][T12148] RIP: 0033:0x7f531699ce59 [ 348.368124][T12148] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 348.368142][T12148] RSP: 002b:00007f53178ea028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 348.368164][T12148] RAX: ffffffffffffffda RBX: 00007f5316c15fa0 RCX: 00007f531699ce59 [ 348.368179][T12148] RDX: 0000000024008004 RSI: 0000200000000300 RDI: 0000000000000005 [ 348.368193][T12148] RBP: 00007f53178ea090 R08: 0000000000000000 R09: 0000000000000000 [ 348.368206][T12148] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 348.368218][T12148] R13: 00007f5316c16038 R14: 00007f5316c15fa0 R15: 00007ffd056e3d98 [ 348.368251][T12148] [ 349.024873][ T8928] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 48299 - 0 [ 349.033204][ T8928] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 349.041670][ T8928] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 48299 - 0 [ 349.050071][ T8928] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 349.075202][ T8930] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 48299 - 0 [ 349.110192][ T8930] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 349.126165][ T8930] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 48299 - 0 [ 349.134583][ T8930] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 349.206075][ T8927] bond3: (slave bridge2): failed to get link speed/duplex [ 349.349244][ T8930] bond3: (slave bridge2): failed to get link speed/duplex [ 349.394217][T12179] netlink: 'syz.0.1583': attribute type 36 has an invalid length. [ 349.465537][T12176] __nla_validate_parse: 5 callbacks suppressed [ 349.465588][T12176] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1582'. [ 349.553946][ T8930] bond3: (slave bridge2): failed to get link speed/duplex [ 349.589041][T12179] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1583'. [ 349.614179][T12192] team0: entered promiscuous mode [ 349.652764][T12176] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1582'. [ 349.680616][T12192] team_slave_0: entered promiscuous mode [ 349.686605][T12192] team_slave_1: entered promiscuous mode [ 349.692684][T12192] team0: entered allmulticast mode [ 349.698039][T12192] team_slave_0: entered allmulticast mode [ 349.704329][T12192] team_slave_1: entered allmulticast mode [ 349.710373][T12192] team0: Cannot enslave team device to itself [ 349.834273][T12203] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1582'. [ 349.888901][T12203] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1582'. [ 350.052526][T12206] ip6t_srh: unknown srh match flags 4000 [ 350.360352][T12218] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1589'. [ 350.681427][T12233] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1593'. [ 350.702445][T12234] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1593'. [ 350.725732][T12234] net_ratelimit: 6 callbacks suppressed [ 350.725821][T12234] openvswitch: netlink: Geneve opt len 1 is not a multiple of 4. [ 350.769489][T12233] openvswitch: netlink: Geneve opt len 1 is not a multiple of 4. [ 350.778583][T12235] syzkaller0: entered promiscuous mode [ 350.785630][ T8930] bond3: (slave bridge2): failed to get link speed/duplex [ 350.814829][T12237] netlink: 'syz.3.1595': attribute type 1 has an invalid length. [ 350.824134][T12233] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1593'. [ 350.876743][T12237] bond7: entered promiscuous mode [ 350.882963][T12237] bond7: entered allmulticast mode [ 350.889971][T12237] 8021q: adding VLAN 0 to HW filter on device bond7 [ 350.918229][T12240] erspan1: entered allmulticast mode [ 350.961149][T12240] bond7: (slave erspan1): making interface the new active one [ 350.969036][T12240] erspan1: entered promiscuous mode [ 350.990519][T12240] bond7: (slave erspan1): Enslaving as an active interface with an up link [ 351.024060][T12237] syz.3.1595 (12237) used obsolete PPPIOCDETACH ioctl [ 351.105706][ T1171] bond3: (slave bridge2): failed to get link speed/duplex [ 351.264612][ T8930] bond3: (slave bridge2): failed to get link speed/duplex [ 351.372046][T12245] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1597'. [ 351.438614][ T8930] bond3: (slave bridge2): failed to get link speed/duplex [ 351.573589][ T5918] bond3: (slave bridge2): failed to get link speed/duplex [ 351.703198][ T5912] bond3: (slave bridge2): failed to get link speed/duplex [ 351.839300][ T5912] bond3: (slave bridge2): failed to get link speed/duplex [ 352.019301][ T1171] bond3: (slave bridge2): failed to get link speed/duplex [ 352.235750][T12272] pim6reg0: tun_chr_ioctl cmd 35111 [ 352.563871][T12281] IPVS: set_ctl: invalid protocol: 20 0.0.0.0:256 [ 352.958985][T12302] syzkaller0: entered promiscuous mode [ 352.964701][T12302] syzkaller0: entered allmulticast mode [ 354.236556][T12358] netlink: 'syz.4.1630': attribute type 89 has an invalid length. [ 354.262670][T12358] netlink: 'syz.4.1630': attribute type 1 has an invalid length. [ 354.297109][T12358] 8021q: adding VLAN 0 to HW filter on device bond8 [ 354.342957][T12358] bond8: (slave veth13): Enslaving as an active interface with a down link [ 354.385019][T12358] bond8: (slave dummy0): making interface the new active one [ 354.393356][T12358] bond8: (slave dummy0): Enslaving as an active interface with an up link [ 354.406627][T12358] netlink: 'syz.4.1630': attribute type 10 has an invalid length. [ 354.415889][T12358] dummy0: entered promiscuous mode [ 354.423979][T12358] bond8: (slave dummy0): Releasing active interface [ 354.885245][T12386] rdma_op ffff88805422d9f0 conn xmit_rdma 0000000000000000 [ 354.896130][T12386] syzkaller0: entered promiscuous mode [ 354.901653][T12386] syzkaller0: entered allmulticast mode [ 355.450302][T12400] syzkaller0: entered promiscuous mode [ 355.455859][T12400] syzkaller0: entered allmulticast mode [ 355.978764][ T8930] net_ratelimit: 26 callbacks suppressed [ 355.978786][ T8930] bond3: (slave bridge2): failed to get link speed/duplex [ 356.108262][ T8931] bond3: (slave bridge2): failed to get link speed/duplex [ 356.283953][ T8930] bond3: (slave bridge2): failed to get link speed/duplex [ 356.504536][ T5918] bond3: (slave bridge2): failed to get link speed/duplex [ 356.629108][ T5912] bond3: (slave bridge2): failed to get link speed/duplex [ 356.662102][T12440] __nla_validate_parse: 12 callbacks suppressed [ 356.662126][T12440] netlink: 91 bytes leftover after parsing attributes in process `syz.3.1657'. [ 356.749590][ T8931] bond3: (slave bridge2): failed to get link speed/duplex [ 356.878893][ T8931] bond3: (slave bridge2): failed to get link speed/duplex [ 357.018392][ T8931] bond3: (slave bridge2): failed to get link speed/duplex [ 357.144328][ T8931] bond3: (slave bridge2): failed to get link speed/duplex [ 357.268852][ T8931] bond3: (slave bridge2): failed to get link speed/duplex [ 357.611654][T12485] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1673'. [ 357.649995][T12487] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1669'. [ 357.660651][T12486] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1673'. [ 357.675095][T12484] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1673'. [ 358.488119][T12529] syzkaller0: entered promiscuous mode [ 358.493743][T12529] syzkaller0: entered allmulticast mode [ 358.699526][T12533] netlink: 'syz.3.1680': attribute type 1 has an invalid length. [ 358.707327][T12533] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1680'. [ 359.197330][T12553] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1685'. [ 359.255344][T12555] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1686'. [ 359.390653][T12557] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1687'. [ 359.860654][T12578] netlink: 'syz.4.1693': attribute type 1 has an invalid length. [ 360.669160][T12599] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1698'. [ 362.522142][T12608] tipc: Enabled bearer , priority 0 [ 362.529121][T12609] syzkaller0: entered promiscuous mode [ 362.578735][T12609] syzkaller0: entered allmulticast mode [ 362.666309][ T1109] net_ratelimit: 13 callbacks suppressed [ 362.666328][ T1109] bond3: (slave bridge2): failed to get link speed/duplex [ 362.697243][T12620] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 362.813803][T12620] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1702'. [ 362.828770][T12623] netlink: 'syz.4.1702': attribute type 1 has an invalid length. [ 362.840953][T12612] tipc: Resetting bearer [ 362.900498][T12612] tipc: Disabling bearer [ 362.979620][T12632] netlink: 'syz.4.1702': attribute type 10 has an invalid length. [ 362.994263][T12632] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1702'. [ 363.015982][T12623] 8021q: adding VLAN 0 to HW filter on device bond9 [ 363.023810][T12627] dummy0: left promiscuous mode [ 363.043002][T12627] bond9: (slave dummy0): Enslaving as a backup interface with an up link [ 363.056874][T12632] dummy0: entered promiscuous mode [ 363.084801][T12632] bond9: (slave dummy0): Releasing backup interface [ 363.131699][ T1171] bond3: (slave bridge2): failed to get link speed/duplex [ 363.332885][ T8928] bond3: (slave bridge2): failed to get link speed/duplex [ 363.458592][ T48] bond3: (slave bridge2): failed to get link speed/duplex [ 363.574174][T12654] tipc: Enabling of bearer rejected, failed to enable media [ 363.677994][ T1109] bond3: (slave bridge2): failed to get link speed/duplex [ 363.890236][ T1109] bond3: (slave bridge2): failed to get link speed/duplex [ 363.911088][T12670] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1713'. [ 364.105406][ T48] bond3: (slave bridge2): failed to get link speed/duplex [ 364.218169][ T8928] bond3: (slave bridge2): failed to get link speed/duplex [ 364.332721][T12692] netlink: 'syz.3.1718': attribute type 39 has an invalid length. [ 364.342325][ T8928] bond3: (slave bridge2): failed to get link speed/duplex [ 364.619948][T12698] bond10 (unregistering): Released all slaves [ 364.724691][T12708] netlink: 'syz.1.1725': attribute type 83 has an invalid length. [ 365.419459][T12729] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1732'. [ 365.436399][T12729] vlan3: entered promiscuous mode [ 365.511711][ T7506] IPVS: starting estimator thread 0... [ 365.628219][T12735] IPVS: using max 31 ests per chain, 74400 per kthread [ 365.815123][T12750] FAULT_INJECTION: forcing a failure. [ 365.815123][T12750] name failslab, interval 1, probability 0, space 0, times 0 [ 365.827887][T12750] CPU: 1 UID: 0 PID: 12750 Comm: syz.0.1737 Not tainted syzkaller #0 PREEMPT(full) [ 365.827914][T12750] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 365.827925][T12750] Call Trace: [ 365.828003][T12750] [ 365.828043][T12750] dump_stack_lvl+0xe8/0x150 [ 365.828171][T12750] should_fail_ex+0x40c/0x560 [ 365.828246][T12750] should_failslab+0xa8/0x100 [ 365.828306][T12750] kmem_cache_alloc_node_noprof+0x8f/0x680 [ 365.828344][T12750] ? __alloc_skb+0x189/0x7a0 [ 365.828443][T12750] ? __alloc_skb+0x1d7/0x7a0 [ 365.828469][T12750] ? __local_bh_enable_ip+0xd0/0x130 [ 365.828524][T12750] __alloc_skb+0x1d7/0x7a0 [ 365.828558][T12750] netlink_sendmsg+0x5d4/0xb40 [ 365.828604][T12750] ? __pfx_netlink_sendmsg+0x10/0x10 [ 365.828631][T12750] ? aa_sock_msg_perm+0xf1/0x1b0 [ 365.828685][T12750] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 365.828733][T12750] ? __pfx_netlink_sendmsg+0x10/0x10 [ 365.828757][T12750] ____sys_sendmsg+0x9b9/0xa20 [ 365.828779][T12750] ? __might_fault+0xaf/0x130 [ 365.828811][T12750] ? __pfx_____sys_sendmsg+0x10/0x10 [ 365.828842][T12750] ? import_iovec+0x73/0xa0 [ 365.828869][T12750] ___sys_sendmsg+0x2a5/0x360 [ 365.828889][T12750] ? __lock_acquire+0x683/0x2cd0 [ 365.828927][T12750] ? __pfx____sys_sendmsg+0x10/0x10 [ 365.828986][T12750] ? __fget_files+0x2a/0x420 [ 365.829026][T12750] ? __fget_files+0x3a2/0x420 [ 365.829059][T12750] __x64_sys_sendmsg+0x1bd/0x2a0 [ 365.829084][T12750] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 365.829115][T12750] ? __pfx_ksys_write+0x10/0x10 [ 365.829153][T12750] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 365.829198][T12750] do_syscall_64+0x174/0x580 [ 365.829257][T12750] ? trace_irq_disable+0x3b/0x140 [ 365.829302][T12750] ? clear_bhb_loop+0x40/0x90 [ 365.829326][T12750] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 365.829346][T12750] RIP: 0033:0x7fe8eeb9ce59 [ 365.829396][T12750] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 365.829437][T12750] RSP: 002b:00007fe8efa77028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 365.829480][T12750] RAX: ffffffffffffffda RBX: 00007fe8eee15fa0 RCX: 00007fe8eeb9ce59 [ 365.829495][T12750] RDX: 0000000000000080 RSI: 0000200000000f00 RDI: 0000000000000005 [ 365.829508][T12750] RBP: 00007fe8efa77090 R08: 0000000000000000 R09: 0000000000000000 [ 365.829521][T12750] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 365.829533][T12750] R13: 00007fe8eee16038 R14: 00007fe8eee15fa0 R15: 00007ffe6a5e6e18 [ 365.829567][T12750] [ 366.428572][T12765] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1740'. [ 366.523889][T12760] dummy0: left promiscuous mode [ 366.601354][T12773] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1740'. [ 366.758404][T12767] bond8: option mode: invalid value (20) [ 366.781525][T12767] bond8 (unregistering): Released all slaves [ 367.554130][T12814] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1751'. [ 367.751803][ T8931] net_ratelimit: 15 callbacks suppressed [ 367.751828][ T8931] bond3: (slave bridge2): failed to get link speed/duplex [ 367.839112][T12821] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1755'. [ 367.878348][ T8931] bond3: (slave bridge2): failed to get link speed/duplex [ 367.984996][T12831] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1756'. [ 367.988023][ T48] bond3: (slave bridge2): failed to get link speed/duplex [ 368.064573][T12830] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1757'. [ 368.091412][T12821] IPVS: persistence engine module ip_vs_pe_À not found [ 368.125642][T12830] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1757'. [ 368.134845][ T8931] bond3: (slave bridge2): failed to get link speed/duplex [ 368.144302][T12836] netlink: 'syz.3.1758': attribute type 1 has an invalid length. [ 368.152713][T12836] netlink: 476 bytes leftover after parsing attributes in process `syz.3.1758'. [ 368.162379][T12836] netlink: 1041 bytes leftover after parsing attributes in process `syz.3.1758'. [ 368.162674][T12830] netlink: 124 bytes leftover after parsing attributes in process `syz.2.1757'. [ 368.206772][T12839] netlink: 204 bytes leftover after parsing attributes in process `syz.2.1757'. [ 368.233354][T12839] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1757'. [ 368.313054][ T8931] bond3: (slave bridge2): failed to get link speed/duplex [ 368.342308][T12837] netlink: 84 bytes leftover after parsing attributes in process `syz.3.1758'. [ 368.378206][T12838] bridge0: adding interface bridge_slave_0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 368.399513][T12838] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 368.519070][T12847] syz_tun: entered allmulticast mode [ 369.248520][ T1109] bond3: (slave bridge2): failed to get link speed/duplex [ 369.358747][ T48] bond3: (slave bridge2): failed to get link speed/duplex [ 369.488350][ T48] bond3: (slave bridge2): failed to get link speed/duplex [ 369.504690][T12868] netlink: 'syz.3.1765': attribute type 1 has an invalid length. [ 369.521110][T12869] netlink: 'syz.3.1765': attribute type 1 has an invalid length. [ 369.593106][T12873] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 369.816695][T12875] syzkaller0: entered promiscuous mode [ 369.822245][T12875] syzkaller0: entered allmulticast mode [ 370.099614][T12893] netlink: 'syz.2.1768': attribute type 12 has an invalid length. [ 373.260884][T12888] syzkaller1: entered promiscuous mode [ 373.266384][T12888] syzkaller1: entered allmulticast mode [ 375.824025][T12924] netlink: 'syz.3.1776': attribute type 2 has an invalid length. [ 375.841891][T12926] netlink: 'syz.3.1776': attribute type 2 has an invalid length. [ 375.879040][ T8930] net_ratelimit: 2 callbacks suppressed [ 375.879094][ T8930] bond3: (slave bridge2): failed to get link speed/duplex [ 376.167406][ T8930] bond3: (slave bridge2): failed to get link speed/duplex [ 376.279330][ T1109] bond3: (slave bridge2): failed to get link speed/duplex [ 376.357665][T12935] __nla_validate_parse: 1 callbacks suppressed [ 376.357687][T12935] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1780'. [ 376.389925][ T48] bond3: (slave bridge2): failed to get link speed/duplex [ 376.528852][ T71] bond3: (slave bridge2): failed to get link speed/duplex [ 376.650139][T12960] syzkaller0: entered promiscuous mode [ 376.660560][T12960] syzkaller0: entered allmulticast mode [ 376.993015][T12981] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1792'. [ 377.083522][T12983] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 377.128696][ T1171] bond3: (slave bridge2): failed to get link speed/duplex [ 377.248811][ T1171] bond3: (slave bridge2): failed to get link speed/duplex [ 377.388752][ T1171] bond3: (slave bridge2): failed to get link speed/duplex [ 377.715022][T12995] 8021q: adding VLAN 0 to HW filter on device bond0 [ 377.923165][T12995] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 377.974148][T13002] workqueue: Failed to create a rescuer kthread for wq "bond10": -EINTR [ 377.977116][ T8930] bridge0: port 1(bridge_slave_0) entered blocking state [ 377.992863][ T8930] bridge0: port 1(bridge_slave_0) entered forwarding state [ 378.029985][ T8930] bridge0: port 2(bridge_slave_1) entered blocking state [ 378.037311][ T8930] bridge0: port 2(bridge_slave_1) entered forwarding state [ 378.362698][ T8930] bridge0: port 3(team0) entered blocking state [ 378.369183][ T8930] bridge0: port 3(team0) entered forwarding state [ 378.442938][T13013] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1801'. [ 378.677068][T13016] : renamed from veth0_to_bond [ 379.100094][T13046] sit0: entered promiscuous mode [ 379.145869][T13046] netlink: 'syz.4.1808': attribute type 1 has an invalid length. [ 379.160822][T13046] netlink: 1 bytes leftover after parsing attributes in process `syz.4.1808'. [ 379.538977][T13061] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1816'. [ 379.707861][T13068] netlink: 160 bytes leftover after parsing attributes in process `syz.2.1818'. [ 379.759812][T13068] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1818'. [ 379.775252][T13068] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 379.783575][T13068] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 379.792025][T13068] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 380.341626][T13088] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1825'. [ 380.352127][T13088] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1825'. [ 380.998208][ T167] net_ratelimit: 18 callbacks suppressed [ 380.998231][ T167] bond3: (slave bridge2): failed to get link speed/duplex [ 381.213562][ T167] bond3: (slave bridge2): failed to get link speed/duplex [ 381.417531][ T8931] bond3: (slave bridge2): failed to get link speed/duplex [ 381.529883][ T8931] bond3: (slave bridge2): failed to get link speed/duplex [ 381.681104][ T8931] bond3: (slave bridge2): failed to get link speed/duplex [ 381.818383][ T48] bond3: (slave bridge2): failed to get link speed/duplex [ 382.008013][ T1171] bond3: (slave bridge2): failed to get link speed/duplex [ 382.131145][T13151] sctp: [Deprecated]: syz.3.1843 (pid 13151) Use of struct sctp_assoc_value in delayed_ack socket option. [ 382.131145][T13151] Use struct sctp_sack_info instead [ 382.178734][T13158] netlink: 'syz.4.1845': attribute type 1 has an invalid length. [ 382.312824][ T167] bond3: (slave bridge2): failed to get link speed/duplex [ 382.323005][T13164] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1846'. [ 382.342474][T13167] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1847'. [ 382.383260][T13164] ip6gre1: entered promiscuous mode [ 382.388571][T13164] ip6gre1: entered allmulticast mode [ 382.540762][ T1109] bond3: (slave bridge2): failed to get link speed/duplex [ 382.562604][T13179] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1850'. [ 382.602915][T13179] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 382.610757][T13179] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 382.618503][T13179] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1850'. [ 382.701682][T13186] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1853'. [ 382.834848][T13197] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1853'. [ 382.868376][ T8930] bond3: (slave bridge2): failed to get link speed/duplex [ 383.293443][T13217] syzkaller0: entered promiscuous mode [ 383.302919][T13217] syzkaller0: entered allmulticast mode [ 383.373612][T13210] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 383.427411][T13210] batman_adv: batadv0: Adding interface: gretap2 [ 383.461830][T13210] batman_adv: batadv0: The MTU of interface gretap2 is too small (1462) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1500. [ 383.499636][T13210] batman_adv: batadv0: Interface activated: gretap2 [ 384.181884][T13242] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1870'. [ 384.219429][T13242] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1870'. [ 384.846434][T13256] netlink: 10 bytes leftover after parsing attributes in process `syz.1.1874'. [ 384.954685][T13262] sch_fq: defrate 4294967293 ignored. [ 384.973973][T13262] x_tables: ip6_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 385.105305][T13267] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1877'. [ 386.111885][ T8930] net_ratelimit: 17 callbacks suppressed [ 386.111909][ T8930] bond3: (slave bridge2): failed to get link speed/duplex [ 386.677769][ T8930] bond3: (slave bridge2): failed to get link speed/duplex [ 386.808326][ T48] bond3: (slave bridge2): failed to get link speed/duplex [ 387.015560][ T8930] bond3: (slave bridge2): failed to get link speed/duplex [ 387.158733][ T48] bond3: (slave bridge2): failed to get link speed/duplex [ 387.356702][ T71] bond3: (slave bridge2): failed to get link speed/duplex [ 387.501846][ T167] bond3: (slave bridge2): failed to get link speed/duplex [ 387.541632][T13350] netlink: 'syz.3.1908': attribute type 1 has an invalid length. [ 387.747077][T13350] 8021q: adding VLAN 0 to HW filter on device bond8 [ 387.836691][T13364] netlink: 'syz.4.1912': attribute type 1 has an invalid length. [ 387.890841][T13356] 8021q: adding VLAN 0 to HW filter on device bond8 [ 387.907555][T13356] bond8: (slave gre2): The slave device specified does not support setting the MAC address [ 387.922092][T13356] bond8: (slave gre2): Error -95 calling set_mac_address [ 387.962098][T13359] macvlan2: entered promiscuous mode [ 387.967818][T13359] macvlan2: entered allmulticast mode [ 387.975639][T13359] bond8: entered promiscuous mode [ 387.982478][T13359] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 388.003756][T13359] bond8: left promiscuous mode [ 388.141706][T13364] 8021q: adding VLAN 0 to HW filter on device bond11 [ 388.167999][ T71] bond3: (slave bridge2): failed to get link speed/duplex [ 388.209141][T13372] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 388.231387][T13373] __nla_validate_parse: 1 callbacks suppressed [ 388.231409][T13373] netlink: 43 bytes leftover after parsing attributes in process `syz.0.1914'. [ 388.423653][ T48] bond3: (slave bridge2): failed to get link speed/duplex [ 389.205895][T13406] netlink: 43 bytes leftover after parsing attributes in process `syz.0.1927'. [ 390.131419][T13431] netlink: 'syz.3.1935': attribute type 3 has an invalid length. [ 390.162208][T13431] netlink: 'syz.3.1935': attribute type 3 has an invalid length. [ 390.211793][T13436] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1937'. [ 390.647362][T13451] netlink: 43 bytes leftover after parsing attributes in process `syz.1.1941'. [ 391.184512][ T1171] net_ratelimit: 18 callbacks suppressed [ 391.184536][ T1171] bond3: (slave bridge2): failed to get link speed/duplex [ 391.329199][ T167] bond3: (slave bridge2): failed to get link speed/duplex [ 391.506412][ T8928] bond3: (slave bridge2): failed to get link speed/duplex [ 391.638071][ T5908] bond3: (slave bridge2): failed to get link speed/duplex [ 391.778689][T13493] netlink: 43 bytes leftover after parsing attributes in process `syz.1.1953'. [ 391.788125][ T8928] bond3: (slave bridge2): failed to get link speed/duplex [ 391.913944][ T5908] bond3: (slave bridge2): failed to get link speed/duplex [ 392.108169][ T5908] bond3: (slave bridge2): failed to get link speed/duplex [ 392.147012][T13515] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1957'. [ 392.168729][T13515] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1957'. [ 392.190211][T13515] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1957'. [ 392.221097][T13515] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1957'. [ 392.231498][ T5918] bond3: (slave bridge2): failed to get link speed/duplex [ 392.256296][T13515] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1957'. [ 392.350591][ T5918] bond3: (slave bridge2): failed to get link speed/duplex [ 392.478072][ T5918] bond3: (slave bridge2): failed to get link speed/duplex [ 393.365130][T13558] netlink: 'syz.4.1974': attribute type 1 has an invalid length. [ 393.469430][T13550] IPVS: length: 35 != 24 [ 393.555524][T13558] bond12: entered promiscuous mode [ 393.575237][T13558] 8021q: adding VLAN 0 to HW filter on device bond12 [ 393.584665][T13539] sch_tbf: burst 32855 is lower than device lo mtu (4685839) ! [ 393.608997][T13565] macvtap0: entered allmulticast mode [ 393.696103][T13562] __nla_validate_parse: 1 callbacks suppressed [ 393.696124][T13562] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1974'. [ 393.714582][T13558] macvtap2: entered allmulticast mode [ 394.201149][T13594] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1986'. [ 394.211151][T13594] netlink: 261 bytes leftover after parsing attributes in process `syz.2.1986'. [ 394.526738][T13606] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1989'. [ 395.002814][T13626] netlink: 67 bytes leftover after parsing attributes in process `syz.0.1996'. [ 395.659063][T13644] syzkaller0: entered promiscuous mode [ 395.664881][T13644] syzkaller0: entered allmulticast mode [ 395.690181][T13646] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2002'. [ 396.120632][T13652] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2002'. [ 396.279885][ T167] net_ratelimit: 28 callbacks suppressed [ 396.279910][ T167] bond3: (slave bridge2): failed to get link speed/duplex [ 396.371136][T13670] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 396.420409][ T8928] bond3: (slave bridge2): failed to get link speed/duplex [ 396.526409][T13672] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2010'. [ 396.616399][ T1171] bond3: (slave bridge2): failed to get link speed/duplex [ 396.781391][ T5908] bond3: (slave bridge2): failed to get link speed/duplex [ 396.917023][T13693] syzkaller0: entered promiscuous mode [ 396.922554][T13693] syzkaller0: entered allmulticast mode [ 397.217822][T13708] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2021'. [ 397.311488][ T5908] bond3: (slave bridge2): failed to get link speed/duplex [ 397.517904][ T5908] bond3: (slave bridge2): failed to get link speed/duplex [ 397.755631][ T8928] bond3: (slave bridge2): failed to get link speed/duplex [ 397.939639][T13741] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2032'. [ 397.970939][ T1171] bond3: (slave bridge2): failed to get link speed/duplex [ 398.033532][T13745] netlink: 'syz.0.2033': attribute type 1 has an invalid length. [ 398.097566][T13745] 8021q: adding VLAN 0 to HW filter on device bond8 [ 398.145279][T13749] bond8: (slave veth0_to_bond): making interface the new active one [ 398.162146][T13749] bond8: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 398.187763][ T1171] bond3: (slave bridge2): failed to get link speed/duplex [ 398.275464][T13753] syzkaller0: entered promiscuous mode [ 398.281806][T13753] syzkaller0: entered allmulticast mode [ 398.729606][T13757] bridge0: port 2(bridge_slave_1) entered disabled state [ 398.813554][T13764] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2038'. [ 399.774274][T13791] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2046'. [ 399.802410][T13787] Cannot find del_set index 3 as target [ 400.023232][T13796] syzkaller0: entered promiscuous mode [ 400.044499][T13796] syzkaller0: entered allmulticast mode [ 400.167548][T13804] netlink: 'syz.2.2050': attribute type 13 has an invalid length. [ 400.222341][ T7508] IPVS: starting estimator thread 0... [ 400.319948][T13806] IPVS: using max 24 ests per chain, 57600 per kthread [ 400.894847][T13821] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2053'. [ 400.960608][T13825] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2055'. [ 401.045930][T13830] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2056'. [ 401.157541][T13825] bond0: Unable to set up delay as MII monitoring is disabled [ 401.183824][T13828] tipc: Enabled bearer , priority 0 [ 401.213060][T13828] syzkaller0: entered promiscuous mode [ 401.227237][T13828] syzkaller0: entered allmulticast mode [ 401.313211][T13821] tipc: Resetting bearer [ 401.348970][ T1171] net_ratelimit: 12 callbacks suppressed [ 401.348993][ T1171] bond3: (slave bridge2): failed to get link speed/duplex [ 401.520096][ T1171] bond3: (slave bridge2): failed to get link speed/duplex [ 401.649430][ T167] bond3: (slave bridge2): failed to get link speed/duplex [ 401.755004][T13849] IPVS: set_ctl: invalid protocol: 58 100.1.1.2:20003 [ 401.781338][ T1171] bond3: (slave bridge2): failed to get link speed/duplex [ 402.197520][T13861] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 402.225700][T13820] tipc: Resetting bearer [ 402.251340][T13820] tipc: Disabling bearer [ 402.338368][ T5907] bond3: (slave bridge2): failed to get link speed/duplex [ 402.405569][T13854] syzkaller0: entered promiscuous mode [ 402.426158][T13854] syzkaller0: entered allmulticast mode [ 402.458376][ T1171] bond3: (slave bridge2): failed to get link speed/duplex [ 402.692209][T13880] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2068'. [ 405.481047][ T1171] bond3: (slave bridge2): failed to get link speed/duplex [ 405.606525][ T5906] bond3: (slave bridge2): failed to get link speed/duplex [ 405.819542][ T1171] bond3: (slave bridge2): failed to get link speed/duplex [ 406.292180][T13935] netlink: 'syz.3.2084': attribute type 33 has an invalid length. [ 406.438073][T13940] syzkaller0: entered promiscuous mode [ 406.462103][T13940] syzkaller0: entered allmulticast mode [ 406.489069][T13940] FAULT_INJECTION: forcing a failure. [ 406.489069][T13940] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 406.516588][ T5906] net_ratelimit: 3 callbacks suppressed [ 406.516610][ T5906] bond3: (slave bridge2): failed to get link speed/duplex [ 406.532184][T13940] CPU: 0 UID: 0 PID: 13940 Comm: syz.2.2085 Not tainted syzkaller #0 PREEMPT(full) [ 406.532215][T13940] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 406.532227][T13940] Call Trace: [ 406.532236][T13940] [ 406.532245][T13940] dump_stack_lvl+0xe8/0x150 [ 406.532276][T13940] should_fail_ex+0x40c/0x560 [ 406.532314][T13940] _copy_from_user+0x2d/0xb0 [ 406.532339][T13940] ___sys_sendmsg+0x1c6/0x360 [ 406.532360][T13940] ? __lock_acquire+0x683/0x2cd0 [ 406.532387][T13940] ? __pfx____sys_sendmsg+0x10/0x10 [ 406.532448][T13940] ? __fget_files+0x2a/0x420 [ 406.532473][T13940] ? __fget_files+0x3a2/0x420 [ 406.532517][T13940] __x64_sys_sendmsg+0x1bd/0x2a0 [ 406.532542][T13940] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 406.532574][T13940] ? __pfx_ksys_write+0x10/0x10 [ 406.532612][T13940] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 406.532635][T13940] do_syscall_64+0x174/0x580 [ 406.532656][T13940] ? trace_irq_disable+0x3b/0x140 [ 406.532686][T13940] ? clear_bhb_loop+0x40/0x90 [ 406.532711][T13940] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 406.532732][T13940] RIP: 0033:0x7f420af9ce59 [ 406.532752][T13940] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 406.532769][T13940] RSP: 002b:00007f420bf13028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 406.532792][T13940] RAX: ffffffffffffffda RBX: 00007f420b215fa0 RCX: 00007f420af9ce59 [ 406.532806][T13940] RDX: 0000000000000004 RSI: 00002000000000c0 RDI: 0000000000000005 [ 406.532818][T13940] RBP: 00007f420bf13090 R08: 0000000000000000 R09: 0000000000000000 [ 406.532831][T13940] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 406.532847][T13940] R13: 00007f420b216038 R14: 00007f420b215fa0 R15: 00007fff0722f308 [ 406.532880][T13940] [ 406.746365][ T5918] bond3: (slave bridge2): failed to get link speed/duplex [ 407.196445][ T5906] bond3: (slave bridge2): failed to get link speed/duplex [ 407.308832][ T5907] bond3: (slave bridge2): failed to get link speed/duplex [ 407.432383][ T5918] bond3: (slave bridge2): failed to get link speed/duplex [ 407.649240][T13978] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2092'. [ 407.670953][T13969] vti0: entered promiscuous mode [ 407.684585][T13978] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2092'. [ 407.764830][T13980] batadv0: entered promiscuous mode [ 407.792622][T13980] veth1_to_hsr: entered promiscuous mode [ 407.807521][T13983] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2095'. [ 407.811673][T13980] hsr1: Slave A (batadv0) is not up; please bring it up to get a fully working HSR network [ 407.826670][T13980] hsr1: Slave B (veth1_to_hsr) is not up; please bring it up to get a fully working HSR network [ 407.840231][T13980] hsr1: entered allmulticast mode [ 407.845314][T13980] batadv0: entered allmulticast mode [ 407.850628][T13980] veth1_to_hsr: entered allmulticast mode [ 408.044903][T13992] x_tables: duplicate entry at hook 2 [ 408.241318][ T82] bond3: (slave bridge2): failed to get link speed/duplex [ 408.323898][T14003] netlink: 7890 bytes leftover after parsing attributes in process `syz.2.2099'. [ 408.368103][ T82] bond3: (slave bridge2): failed to get link speed/duplex [ 408.544014][ T167] bond3: (slave bridge2): failed to get link speed/duplex [ 408.567687][T14013] FAULT_INJECTION: forcing a failure. [ 408.567687][T14013] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 408.598794][T14013] CPU: 1 UID: 0 PID: 14013 Comm: syz.0.2101 Not tainted syzkaller #0 PREEMPT(full) [ 408.598825][T14013] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 408.598837][T14013] Call Trace: [ 408.598845][T14013] [ 408.598854][T14013] dump_stack_lvl+0xe8/0x150 [ 408.598884][T14013] should_fail_ex+0x40c/0x560 [ 408.598921][T14013] _copy_from_user+0x2d/0xb0 [ 408.598945][T14013] ___sys_sendmsg+0x1c6/0x360 [ 408.598965][T14013] ? __lock_acquire+0x683/0x2cd0 [ 408.599002][T14013] ? __pfx____sys_sendmsg+0x10/0x10 [ 408.599030][T14013] ? kstrtouint+0x6e/0xe0 [ 408.599087][T14013] ? __fget_files+0x2a/0x420 [ 408.599112][T14013] ? __fget_files+0x3a2/0x420 [ 408.599148][T14013] __sys_sendmmsg+0x27c/0x4e0 [ 408.599177][T14013] ? __pfx___sys_sendmmsg+0x10/0x10 [ 408.599196][T14013] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 408.599249][T14013] ? ksys_write+0x242/0x270 [ 408.599281][T14013] ? __pfx_ksys_write+0x10/0x10 [ 408.599319][T14013] __x64_sys_sendmmsg+0xa0/0xc0 [ 408.599341][T14013] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 408.599363][T14013] do_syscall_64+0x174/0x580 [ 408.599384][T14013] ? trace_irq_disable+0x3b/0x140 [ 408.599413][T14013] ? clear_bhb_loop+0x40/0x90 [ 408.599439][T14013] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 408.599458][T14013] RIP: 0033:0x7fe8eeb9ce59 [ 408.599478][T14013] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 408.599496][T14013] RSP: 002b:00007fe8efa56028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 408.599520][T14013] RAX: ffffffffffffffda RBX: 00007fe8eee16090 RCX: 00007fe8eeb9ce59 [ 408.599535][T14013] RDX: 0000000000000004 RSI: 0000200000000d00 RDI: 0000000000000007 [ 408.599547][T14013] RBP: 00007fe8efa56090 R08: 0000000000000000 R09: 0000000000000000 [ 408.599560][T14013] R10: 0000000004000000 R11: 0000000000000246 R12: 0000000000000001 [ 408.599573][T14013] R13: 00007fe8eee16128 R14: 00007fe8eee16090 R15: 00007ffe6a5e6e18 [ 408.599607][T14013] [ 408.862274][ T5918] bond3: (slave bridge2): failed to get link speed/duplex [ 409.095943][ T167] bond3: (slave bridge2): failed to get link speed/duplex [ 409.479190][T14032] netlink: 7890 bytes leftover after parsing attributes in process `syz.3.2109'. [ 409.941707][T14056] netlink: 'syz.0.2115': attribute type 1 has an invalid length. [ 409.961530][T14056] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR [ 410.228283][T14070] netlink: 272 bytes leftover after parsing attributes in process `syz.3.2117'. [ 411.526408][ T1171] net_ratelimit: 13 callbacks suppressed [ 411.526431][ T1171] bond3: (slave bridge2): failed to get link speed/duplex [ 411.691215][T14131] syzkaller0: entered promiscuous mode [ 411.696840][T14131] syzkaller0: entered allmulticast mode [ 411.979920][ T1171] bond3: (slave bridge2): failed to get link speed/duplex [ 412.302384][ T71] bond3: (slave bridge2): failed to get link speed/duplex [ 412.448407][ T5918] bond3: (slave bridge2): failed to get link speed/duplex [ 412.688120][ T71] bond3: (slave bridge2): failed to get link speed/duplex [ 412.888225][ T5918] bond3: (slave bridge2): failed to get link speed/duplex [ 412.950491][T14148] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 412.998489][ T71] bond3: (slave bridge2): failed to get link speed/duplex [ 413.121411][ T71] bond3: (slave bridge2): failed to get link speed/duplex [ 413.165579][T14152] syzkaller0: entered promiscuous mode [ 413.171120][T14152] syzkaller0: entered allmulticast mode [ 414.381145][ T1171] bond3: (slave bridge2): failed to get link speed/duplex [ 414.401565][T14178] syzkaller0: entered promiscuous mode [ 414.407231][T14178] syzkaller0: entered allmulticast mode [ 414.961551][T14201] syzkaller0: entered promiscuous mode [ 414.967078][T14201] syzkaller0: entered allmulticast mode [ 415.437405][T14216] syzkaller0: entered promiscuous mode [ 415.443870][T14216] syzkaller0: entered allmulticast mode [ 416.116621][T14235] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2168'. [ 416.396175][T14246] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2171'. [ 416.405552][T14246] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2171'. [ 416.415954][T14246] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2171'. [ 416.425241][T14246] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2171'. [ 416.434502][T14246] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2171'. [ 416.443910][T14246] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2171'. [ 416.453169][T14246] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2171'. [ 416.495689][T14246] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2171'. [ 416.505854][T14246] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2171'. [ 416.629315][ T5918] net_ratelimit: 15 callbacks suppressed [ 416.629355][ T5918] bond3: (slave bridge2): failed to get link speed/duplex [ 416.809084][ T5918] bond3: (slave bridge2): failed to get link speed/duplex [ 416.928432][ T5907] bond3: (slave bridge2): failed to get link speed/duplex [ 417.091331][T14266] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 417.118769][ T5918] bond3: (slave bridge2): failed to get link speed/duplex [ 417.336630][T14271] syzkaller0: entered promiscuous mode [ 417.347642][T14271] syzkaller0: entered allmulticast mode [ 417.365999][T14271] tipc: Started in network mode [ 417.373172][T14271] tipc: Node identity f688d01bb908, cluster identity 4711 [ 417.385819][T14271] tipc: Enabled bearer , priority 0 [ 417.422830][T14276] syzkaller0: entered promiscuous mode [ 417.428367][T14276] syzkaller0: entered allmulticast mode [ 417.715956][T14270] tipc: Resetting bearer [ 417.756430][T14270] tipc: Disabling bearer [ 417.798421][T14286] tap0: tun_chr_ioctl cmd 1074025677 [ 417.809968][T14286] tap0: linktype set to 774 [ 417.822038][ T5918] bond3: (slave bridge2): failed to get link speed/duplex [ 418.047010][ T82] bond3: (slave bridge2): failed to get link speed/duplex [ 418.119919][T14301] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 418.178267][ T82] bond3: (slave bridge2): failed to get link speed/duplex [ 418.338844][ T82] bond3: (slave bridge2): failed to get link speed/duplex [ 418.967397][T14313] bond13 (unregistering): Released all slaves [ 419.231487][T14339] syzkaller0: entered promiscuous mode [ 419.237535][T14339] syzkaller0: entered allmulticast mode [ 419.599206][T14353] syzkaller0: entered promiscuous mode [ 419.606589][T14353] syzkaller0: entered allmulticast mode [ 420.522230][T14379] bond0: ARP target 170.170.170.170 is already present [ 420.529231][T14379] bond0: option arp_ip_target: invalid value (2863311530) [ 420.795803][T14389] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 420.852030][T14389] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 421.093994][T14407] netlink: 'syz.2.2220': attribute type 13 has an invalid length. [ 421.856626][ T5906] net_ratelimit: 14 callbacks suppressed [ 421.856649][ T5906] bond3: (slave bridge2): failed to get link speed/duplex [ 422.057752][T14434] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 422.134937][ T5918] bond3: (slave bridge2): failed to get link speed/duplex [ 422.151525][T14437] __nla_validate_parse: 31 callbacks suppressed [ 422.151546][T14437] netlink: 7 bytes leftover after parsing attributes in process `syz.1.2229'. [ 422.264475][ T5918] bond3: (slave bridge2): failed to get link speed/duplex [ 422.553587][ T1171] bond3: (slave bridge2): failed to get link speed/duplex [ 422.558219][T14457] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2237'. [ 422.573859][T14457] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2237'. [ 422.585242][T14457] netlink: 'syz.3.2237': attribute type 3 has an invalid length. [ 422.605188][T14457] netlink: 324 bytes leftover after parsing attributes in process `syz.3.2237'. [ 422.756450][ T1171] bond3: (slave bridge2): failed to get link speed/duplex [ 422.773032][T14464] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 422.791364][T14466] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2240'. [ 422.846297][T14472] netlink: 'syz.1.2240': attribute type 13 has an invalid length. [ 422.939629][ T1171] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 422.955239][T14472] netlink: 'syz.1.2240': attribute type 13 has an invalid length. [ 422.978927][ T82] bond3: (slave bridge2): failed to get link speed/duplex [ 423.008354][ T5918] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 423.018604][T14475] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 423.026660][ T5918] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 423.047458][ T5918] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 423.110847][ T167] bond3: (slave bridge2): failed to get link speed/duplex [ 423.549683][T14494] FAULT_INJECTION: forcing a failure. [ 423.549683][T14494] name failslab, interval 1, probability 0, space 0, times 0 [ 423.562354][T14494] CPU: 1 UID: 0 PID: 14494 Comm: syz.3.2251 Not tainted syzkaller #0 PREEMPT(full) [ 423.562374][T14494] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 423.562381][T14494] Call Trace: [ 423.562387][T14494] [ 423.562393][T14494] dump_stack_lvl+0xe8/0x150 [ 423.562414][T14494] should_fail_ex+0x40c/0x560 [ 423.562437][T14494] should_failslab+0xa8/0x100 [ 423.562458][T14494] kmem_cache_alloc_node_noprof+0x8f/0x680 [ 423.562476][T14494] ? __alloc_skb+0x189/0x7a0 [ 423.562495][T14494] ? __alloc_skb+0x1d7/0x7a0 [ 423.562511][T14494] ? __local_bh_enable_ip+0xd0/0x130 [ 423.562527][T14494] __alloc_skb+0x1d7/0x7a0 [ 423.562547][T14494] netlink_sendmsg+0x5d4/0xb40 [ 423.562566][T14494] ? __pfx_netlink_sendmsg+0x10/0x10 [ 423.562581][T14494] ? aa_sock_msg_perm+0xf1/0x1b0 [ 423.562600][T14494] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 423.562615][T14494] ? __pfx_netlink_sendmsg+0x10/0x10 [ 423.562630][T14494] ____sys_sendmsg+0x9b9/0xa20 [ 423.562642][T14494] ? __might_fault+0xaf/0x130 [ 423.562661][T14494] ? __pfx_____sys_sendmsg+0x10/0x10 [ 423.562679][T14494] ? import_iovec+0x73/0xa0 [ 423.562695][T14494] ___sys_sendmsg+0x2a5/0x360 [ 423.562707][T14494] ? __lock_acquire+0x683/0x2cd0 [ 423.562722][T14494] ? __pfx____sys_sendmsg+0x10/0x10 [ 423.562754][T14494] ? __fget_files+0x2a/0x420 [ 423.562768][T14494] ? __fget_files+0x3a2/0x420 [ 423.562788][T14494] __x64_sys_sendmsg+0x1bd/0x2a0 [ 423.562803][T14494] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 423.562821][T14494] ? __pfx_ksys_write+0x10/0x10 [ 423.562846][T14494] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 423.562859][T14494] do_syscall_64+0x174/0x580 [ 423.562873][T14494] ? trace_irq_disable+0x3b/0x140 [ 423.562890][T14494] ? clear_bhb_loop+0x40/0x90 [ 423.562905][T14494] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 423.562917][T14494] RIP: 0033:0x7f2f4619ce59 [ 423.562930][T14494] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 423.562940][T14494] RSP: 002b:00007f2f470f7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 423.562956][T14494] RAX: ffffffffffffffda RBX: 00007f2f46415fa0 RCX: 00007f2f4619ce59 [ 423.562965][T14494] RDX: 0000000020040054 RSI: 0000200000001a40 RDI: 0000000000000004 [ 423.562973][T14494] RBP: 00007f2f470f7090 R08: 0000000000000000 R09: 0000000000000000 [ 423.562980][T14494] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 423.562987][T14494] R13: 00007f2f46416038 R14: 00007f2f46415fa0 R15: 00007ffcbce17f38 [ 423.563005][T14494] [ 423.959112][T14501] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2252'. [ 424.469257][T14517] syzkaller0: entered promiscuous mode [ 424.474803][T14517] syzkaller0: entered allmulticast mode [ 424.876740][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 425.186567][T14530] FAULT_INJECTION: forcing a failure. [ 425.186567][T14530] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 425.202799][T14530] CPU: 0 UID: 0 PID: 14530 Comm: syz.4.2262 Not tainted syzkaller #0 PREEMPT(full) [ 425.202828][T14530] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 425.202840][T14530] Call Trace: [ 425.202849][T14530] [ 425.202857][T14530] dump_stack_lvl+0xe8/0x150 [ 425.202893][T14530] should_fail_ex+0x40c/0x560 [ 425.202931][T14530] _copy_from_iter+0x1d3/0x1660 [ 425.202957][T14530] ? rcu_is_watching+0x15/0xb0 [ 425.203017][T14530] ? __pfx__copy_from_iter+0x10/0x10 [ 425.203035][T14530] ? kmem_cache_alloc_node_noprof+0x3ca/0x680 [ 425.203071][T14530] ? netlink_sendmsg+0x650/0xb40 [ 425.203093][T14530] ? skb_put+0x112/0x210 [ 425.203116][T14530] netlink_sendmsg+0x6c0/0xb40 [ 425.203149][T14530] ? __pfx_netlink_sendmsg+0x10/0x10 [ 425.203175][T14530] ? aa_sock_msg_perm+0xf1/0x1b0 [ 425.203206][T14530] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 425.203232][T14530] ? __pfx_netlink_sendmsg+0x10/0x10 [ 425.203256][T14530] ____sys_sendmsg+0x9b9/0xa20 [ 425.203285][T14530] ? __might_fault+0xaf/0x130 [ 425.203318][T14530] ? __pfx_____sys_sendmsg+0x10/0x10 [ 425.203349][T14530] ? import_iovec+0x73/0xa0 [ 425.203377][T14530] ___sys_sendmsg+0x2a5/0x360 [ 425.203397][T14530] ? __lock_acquire+0x683/0x2cd0 [ 425.203423][T14530] ? __pfx____sys_sendmsg+0x10/0x10 [ 425.203484][T14530] ? __fget_files+0x2a/0x420 [ 425.203507][T14530] ? __fget_files+0x3a2/0x420 [ 425.203543][T14530] __x64_sys_sendmsg+0x1bd/0x2a0 [ 425.203568][T14530] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 425.203600][T14530] ? __pfx_ksys_write+0x10/0x10 [ 425.203639][T14530] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 425.203661][T14530] do_syscall_64+0x174/0x580 [ 425.203684][T14530] ? trace_irq_disable+0x3b/0x140 [ 425.203713][T14530] ? clear_bhb_loop+0x40/0x90 [ 425.203739][T14530] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 425.203759][T14530] RIP: 0033:0x7fd37979ce59 [ 425.203778][T14530] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 425.203796][T14530] RSP: 002b:00007fd37a6b7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 425.203819][T14530] RAX: ffffffffffffffda RBX: 00007fd379a15fa0 RCX: 00007fd37979ce59 [ 425.203834][T14530] RDX: 0000000020040054 RSI: 0000200000001a40 RDI: 0000000000000004 [ 425.203847][T14530] RBP: 00007fd37a6b7090 R08: 0000000000000000 R09: 0000000000000000 [ 425.203860][T14530] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 425.203872][T14530] R13: 00007fd379a16038 R14: 00007fd379a15fa0 R15: 00007fff4de77a28 [ 425.203907][T14530] [ 425.535515][T14535] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2260'. [ 425.619062][T14533] bond13: option active_slave: mode dependency failed, not supported in mode balance-xor(2) [ 425.675327][T14539] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2264'. [ 425.677006][T14533] bond13 (unregistering): Released all slaves [ 425.744174][T14539] bond9: option ad_actor_system: mode dependency failed, not supported in mode balance-rr(0) [ 425.770649][T14539] bond9 (unregistering): Released all slaves [ 426.605218][T14552] netlink: 148 bytes leftover after parsing attributes in process `syz.3.2267'. [ 428.474658][T14549] net_ratelimit: 6 callbacks suppressed [ 428.474681][T14549] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 428.548916][ T1171] bond3: (slave bridge2): failed to get link speed/duplex [ 428.659354][ T167] bond3: (slave bridge2): failed to get link speed/duplex [ 428.704474][T14554] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 428.789550][ T71] bond3: (slave bridge2): failed to get link speed/duplex [ 428.900073][T14558] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2270'. [ 428.920082][ T1171] bond3: (slave bridge2): failed to get link speed/duplex [ 428.942241][T14560] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.2272'. [ 428.944750][T14558] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2270'. [ 429.049290][ T5906] bond3: (slave bridge2): failed to get link speed/duplex [ 429.102953][T14567] netlink: 'syz.4.2274': attribute type 3 has an invalid length. [ 429.114763][T14567] rdma_op ffff888055f4b9f0 conn xmit_rdma 0000000000000000 [ 429.144357][T14569] netlink: 'syz.2.2273': attribute type 32 has an invalid length. [ 429.177994][ T1171] bond3: (slave bridge2): failed to get link speed/duplex [ 429.308326][ T167] bond3: (slave bridge2): failed to get link speed/duplex [ 429.405472][T14577] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 429.738004][T14591] netlink: 'syz.4.2279': attribute type 1 has an invalid length. [ 429.745892][T14591] netlink: 'syz.4.2279': attribute type 2 has an invalid length. [ 429.762499][T14591] netlink: 'syz.4.2279': attribute type 1 has an invalid length. [ 429.770374][T14591] netlink: 'syz.4.2279': attribute type 2 has an invalid length. [ 429.894022][T14593] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2278'. [ 430.903399][T14640] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.2287'. [ 431.169395][T14653] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2291'. [ 431.196351][T14647] bond9: entered promiscuous mode [ 431.463656][T14664] bond0: Caught tx_queue_len zero misconfig [ 431.538564][T14660] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2294'. [ 431.902738][T14683] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2301'. [ 431.946548][T14683] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2301'. [ 432.824414][T14718] netlink: 7 bytes leftover after parsing attributes in process `syz.3.2311'. [ 433.389338][T14746] syz.0.2319: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 433.437426][T14746] CPU: 0 UID: 0 PID: 14746 Comm: syz.0.2319 Not tainted syzkaller #0 PREEMPT(full) [ 433.437459][T14746] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 433.437472][T14746] Call Trace: [ 433.437481][T14746] [ 433.437491][T14746] dump_stack_lvl+0xe8/0x150 [ 433.437524][T14746] warn_alloc+0x249/0x340 [ 433.437555][T14746] ? __pfx_stack_trace_save+0x10/0x10 [ 433.437593][T14746] ? __pfx_warn_alloc+0x10/0x10 [ 433.437630][T14746] ? __kasan_kmalloc+0x93/0xb0 [ 433.437658][T14746] ? __kmalloc_cache_noprof+0x318/0x660 [ 433.437688][T14746] ? xskq_create+0x56/0x170 [ 433.437750][T14746] ? xsk_init_queue+0x8a/0xe0 [ 433.437777][T14746] ? xsk_setsockopt+0x52a/0x960 [ 433.437805][T14746] ? do_sock_setsockopt+0x17c/0x1b0 [ 433.437824][T14746] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 433.437849][T14746] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 433.437877][T14746] __vmalloc_node_range_noprof+0x12c/0x1730 [ 433.437937][T14746] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 433.437975][T14746] ? __kasan_kmalloc+0x93/0xb0 [ 433.438011][T14746] vmalloc_user_noprof+0xad/0xe0 [ 433.438040][T14746] ? xskq_create+0xbf/0x170 [ 433.438073][T14746] xskq_create+0xbf/0x170 [ 433.438108][T14746] xsk_init_queue+0x8a/0xe0 [ 433.438142][T14746] xsk_setsockopt+0x52a/0x960 [ 433.438172][T14746] ? __fget_files+0x2a/0x420 [ 433.438199][T14746] ? __pfx_xsk_setsockopt+0x10/0x10 [ 433.438238][T14746] ? __pfx_aa_sk_perm+0x10/0x10 [ 433.438272][T14746] ? aa_sock_opt_perm+0xff/0x1a0 [ 433.438306][T14746] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 433.438334][T14746] ? __pfx_xsk_setsockopt+0x10/0x10 [ 433.438366][T14746] do_sock_setsockopt+0x17c/0x1b0 [ 433.438393][T14746] __x64_sys_setsockopt+0x13d/0x1b0 [ 433.438418][T14746] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 433.438441][T14746] do_syscall_64+0x174/0x580 [ 433.438465][T14746] ? trace_irq_disable+0x3b/0x140 [ 433.438495][T14746] ? clear_bhb_loop+0x40/0x90 [ 433.438524][T14746] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 433.438546][T14746] RIP: 0033:0x7fe8eeb9ce59 [ 433.438567][T14746] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 433.438586][T14746] RSP: 002b:00007fe8efa77028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 433.438610][T14746] RAX: ffffffffffffffda RBX: 00007fe8eee15fa0 RCX: 00007fe8eeb9ce59 [ 433.438626][T14746] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000009 [ 433.438639][T14746] RBP: 00007fe8eec32d6f R08: 0000000000000004 R09: 0000000000000000 [ 433.438652][T14746] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 433.438666][T14746] R13: 00007fe8eee16038 R14: 00007fe8eee15fa0 R15: 00007ffe6a5e6e18 [ 433.438702][T14746] [ 433.712167][ T5906] net_ratelimit: 32 callbacks suppressed [ 433.712192][ T5906] bond3: (slave bridge2): failed to get link speed/duplex [ 433.776622][T14746] Mem-Info: [ 433.779817][T14746] active_anon:9587 inactive_anon:0 isolated_anon:0 [ 433.779817][T14746] active_file:3712 inactive_file:40092 isolated_file:0 [ 433.779817][T14746] unevictable:768 dirty:183 writeback:0 [ 433.779817][T14746] slab_reclaimable:11248 slab_unreclaimable:118141 [ 433.779817][T14746] mapped:30907 shmem:1292 pagetables:1315 [ 433.779817][T14746] sec_pagetables:0 bounce:0 [ 433.779817][T14746] kernel_misc_reclaimable:0 [ 433.779817][T14746] free:1293405 free_pcp:10048 free_cma:0 [ 433.803290][T14751] bond13: Unable to set up delay as MII monitoring is disabled [ 433.825340][T14746] Node 0 active_anon:38348kB inactive_anon:0kB active_file:14848kB inactive_file:160168kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:123628kB dirty:728kB writeback:0kB shmem:3632kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:15040kB pagetables:5124kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 433.825451][T14746] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:136kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 433.825510][T14746] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 433.825576][T14746] lowmem_reserve[]: 0 2493 2493 2493 2493 [ 433.825624][T14746] Node 0 DMA32 free:1215448kB boost:0kB min:34188kB low:42732kB high:51276kB reserved_highatomic:0KB free_highatomic:0KB active_anon:38348kB inactive_anon:0kB active_file:14848kB inactive_file:160168kB unevictable:1536kB writepending:728kB zspages:0kB present:3129332kB managed:2552928kB mlocked:0kB bounce:0kB free_pcp:40152kB local_pcp:20320kB free_cma:0kB [ 433.825697][T14746] lowmem_reserve[]: 0 0 0 0 0 [ 433.825743][T14746] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:680kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:4kB free_cma:0kB [ 433.825805][T14746] lowmem_reserve[]: 0 0 0 0 0 [ 433.825854][T14746] Node 1 Normal free:3942812kB boost:0kB min:55704kB low:69628kB high:83552kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 433.825933][T14746] lowmem_reserve[]: 0 0 0 0 0 [ 433.825980][T14746] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 433.826133][T14746] Node 0 DMA32: 2090*4kB (UME) 4102*8kB (UE) 2040*16kB (UM) 344*32kB (UM) 132*64kB (UME) 115*128kB (UME) 158*256kB (UME) 118*512kB (UM) 79*1024kB (UM) 40*2048kB (UE) 206*4096kB (UM) = 1215448kB [ 433.826343][T14746] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 433.826469][T14746] Node 1 Normal: 1*4kB (U) 3*8kB (UM) 10*16kB (UM) [ 434.160535][T14751] bond13 (unregistering): Released all slaves [ 434.225389][T14746] 5*32kB (UM) 7*64kB (UM) 5*128kB (UM) 4*256kB (UM) 4*512kB (UM) 2*1024kB (UM) 2*2048kB (U) 960*4096kB (M) = 3942812kB [ 434.268263][T14746] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 434.279933][T14746] Node 0 hugepages_total=6 hugepages_free=0 hugepages_surp=4 hugepages_size=2048kB [ 434.300351][T14763] __nla_validate_parse: 1 callbacks suppressed [ 434.300371][T14763] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2324'. [ 434.316768][T14746] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 434.335115][ T5918] bond3: (slave bridge2): failed to get link speed/duplex [ 434.357637][T14746] Node 1 hugepages_total=2 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 434.393306][T14746] 45092 total pagecache pages [ 434.409875][T14746] 0 pages in swap cache [ 434.417335][T14746] Free swap = 124996kB [ 434.422902][T14746] Total swap = 124996kB [ 434.427296][T14746] 2097051 pages RAM [ 434.431803][T14746] 0 pages HighMem/MovableOnly [ 434.436602][T14746] 427034 pages reserved [ 434.441577][T14746] 0 pages cma reserved [ 434.454415][ T5918] bond3: (slave bridge2): failed to get link speed/duplex [ 434.536051][T14772] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 434.571542][ T71] bond3: (slave bridge2): failed to get link speed/duplex [ 434.693079][T14778] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2330'. [ 434.714420][T14778] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2330'. [ 434.720862][T14776] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2329'. [ 434.780556][ T71] bond3: (slave bridge2): failed to get link speed/duplex [ 434.846803][T14780] netlink: 212348 bytes leftover after parsing attributes in process `syz.2.2333'. [ 434.864860][T14780] netlink: Conntrack attr has 3 unknown bytes [ 434.891887][ T5906] bond3: (slave bridge2): failed to get link speed/duplex [ 435.017609][ T5918] bond3: (slave bridge2): failed to get link speed/duplex [ 435.047787][T14780] team_slave_1: Caught tx_queue_len zero misconfig [ 435.179144][T14793] tipc: Cannot configure node identity twice [ 435.243450][ T5906] bond3: (slave bridge2): failed to get link speed/duplex [ 435.685848][T14810] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 435.716393][T14810] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 435.758836][T14810] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 436.053811][T14819] nftables ruleset with unbound chain [ 436.661384][T14855] netlink: 'syz.4.2348': attribute type 3 has an invalid length. [ 436.737664][T14860] erspan0: entered promiscuous mode [ 436.746345][T14855] netlink: 'syz.4.2348': attribute type 3 has an invalid length. [ 436.756858][T14859] netlink: 'syz.3.2350': attribute type 9 has an invalid length. [ 436.779693][T14855] netlink: 'syz.4.2348': attribute type 3 has an invalid length. [ 436.829016][T14862] vlan4: entered promiscuous mode [ 436.834118][T14862] bridge0: entered promiscuous mode [ 436.918959][T14855] netlink: 'syz.4.2348': attribute type 3 has an invalid length. [ 436.933221][T14855] netlink: 'syz.4.2348': attribute type 3 has an invalid length. [ 436.941971][T14855] netlink: 'syz.4.2348': attribute type 3 has an invalid length. [ 436.953629][T14855] netlink: 'syz.4.2348': attribute type 3 has an invalid length. [ 436.955917][ C1] ================================================================== [ 436.962233][T14855] netlink: 'syz.4.2348': attribute type 3 has an invalid length. [ 436.969493][ C1] BUG: KASAN: use-after-free in qdisc_pkt_len_segs_init+0x7f7/0xa30 [ 436.969616][ C1] Read of size 2 at addr ffff888178f14074 by task syz.3.2350/14859 [ 436.969655][ C1] [ 436.969690][ C1] CPU: 1 UID: 0 PID: 14859 Comm: syz.3.2350 Not tainted syzkaller #0 PREEMPT(full) [ 436.969732][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 436.969744][ C1] Call Trace: [ 436.969752][ C1] [ 436.969760][ C1] dump_stack_lvl+0xe8/0x150 [ 436.969783][ C1] print_address_description+0x55/0x1e0 [ 436.969817][ C1] ? qdisc_pkt_len_segs_init+0x7f7/0xa30 [ 436.969839][ C1] print_report+0x58/0x70 [ 436.969855][ C1] kasan_report+0x117/0x150 [ 436.969880][ C1] ? __lock_acquire+0x683/0x2cd0 [ 436.969900][ C1] ? qdisc_pkt_len_segs_init+0x7f7/0xa30 [ 436.969924][ C1] qdisc_pkt_len_segs_init+0x7f7/0xa30 [ 436.969951][ C1] __dev_queue_xmit+0x27f/0x37f0 [ 436.969975][ C1] ? __local_bh_enable_ip+0xd0/0x130 [ 436.969993][ C1] ? lockdep_hardirqs_on+0x7a/0x110 [ 436.970012][ C1] ? ebt_do_table+0x2605/0x27d0 [ 436.970059][ C1] ? __local_bh_enable_ip+0xd0/0x130 [ 436.970076][ C1] ? ebt_do_table+0x2605/0x27d0 [ 436.970097][ C1] ? __pfx___dev_queue_xmit+0x10/0x10 [ 436.970124][ C1] ? __local_bh_enable_ip+0xd0/0x130 [ 436.970145][ C1] ? br_nf_post_routing+0x1d0/0xee0 [ 436.970174][ C1] br_dev_queue_push_xmit+0x370/0x4b0 [ 436.970205][ C1] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 436.970228][ C1] NF_HOOK+0x360/0x3f0 [ 436.970248][ C1] ? net_generic+0x1e/0x240 [ 436.970271][ C1] ? NF_HOOK+0xa2/0x3f0 [ 436.970291][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 436.970313][ C1] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 436.970340][ C1] br_forward_finish+0xd3/0x130 [ 436.970368][ C1] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 436.970390][ C1] ? __pfx_br_forward_finish+0x10/0x10 [ 436.970412][ C1] NF_HOOK+0x360/0x3f0 [ 436.970434][ C1] ? NF_HOOK+0xa2/0x3f0 [ 436.970454][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 436.970476][ C1] ? __pfx_br_forward_finish+0x10/0x10 [ 436.970499][ C1] ? br_handle_vlan+0x5e/0x530 [ 436.970520][ C1] __br_forward+0x397/0x540 [ 436.970541][ C1] ? __pfx_br_forward_finish+0x10/0x10 [ 436.970563][ C1] br_flood+0x3e6/0x8d0 [ 436.970590][ C1] br_handle_frame_finish+0x1175/0x1990 [ 436.970620][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 436.970644][ C1] ? net_generic+0x1e/0x240 [ 436.970666][ C1] ? net_generic+0x1e/0x240 [ 436.970687][ C1] ? net_generic+0x1e/0x240 [ 436.970709][ C1] ? br_mrp_ring_role_parse+0x160/0x390 [ 436.970731][ C1] ? br_nf_pre_routing+0xc41/0x14b0 [ 436.970758][ C1] br_handle_frame+0x81b/0x1510 [ 436.970785][ C1] ? __pfx_br_handle_frame+0x10/0x10 [ 436.970808][ C1] ? lock_acquire+0x106/0x350 [ 436.970824][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 436.970848][ C1] ? __lock_acquire+0x683/0x2cd0 [ 436.970868][ C1] ? __pfx_br_handle_frame+0x10/0x10 [ 436.970890][ C1] __netif_receive_skb_core+0x989/0x30b0 [ 436.970917][ C1] ? unwind_next_frame+0x8f/0x2550 [ 436.970944][ C1] ? lock_acquire+0x106/0x350 [ 436.970961][ C1] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 436.970982][ C1] ? lock_acquire+0x106/0x350 [ 436.971000][ C1] ? unwind_next_frame+0x8f/0x2550 [ 436.971024][ C1] ? unwind_next_frame+0x8f/0x2550 [ 436.971045][ C1] ? unwind_next_frame+0x1baf/0x2550 [ 436.971066][ C1] __netif_receive_skb_list_core+0x24d/0x830 [ 436.971093][ C1] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 436.971116][ C1] ? common_startup_64+0x13e/0x147 [ 436.971153][ C1] netif_receive_skb_list_internal+0x995/0xcf0 [ 436.971177][ C1] ? netif_receive_skb_list_internal+0x501/0xcf0 [ 436.971199][ C1] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 436.971221][ C1] ? dev_gro_receive+0x1097/0x2380 [ 436.971255][ C1] ? default_idle_call+0x72/0xb0 [ 436.971274][ C1] ? do_idle+0x36a/0x5f0 [ 436.971300][ C1] napi_complete_done+0x299/0x730 [ 436.971323][ C1] ? __pfx_napi_complete_done+0x10/0x10 [ 436.971353][ C1] ? gro_cell_poll+0x175/0x5d0 [ 436.971385][ C1] gro_cell_poll+0x5ab/0x5d0 [ 436.971412][ C1] ? gro_cell_poll+0x175/0x5d0 [ 436.971435][ C1] __napi_poll+0xaa/0x330 [ 436.971458][ C1] net_rx_action+0x61d/0xf50 [ 436.971487][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 436.971508][ C1] ? kvm_sched_clock_read+0x11/0x20 [ 436.971529][ C1] ? __pfx_sched_clock_cpu+0x10/0x10 [ 436.971546][ C1] ? kvm_sched_clock_read+0x11/0x20 [ 436.971562][ C1] ? sched_clock+0x3f/0x60 [ 436.971590][ C1] handle_softirqs+0x225/0x840 [ 436.971609][ C1] ? do_softirq+0x76/0xd0 [ 436.971627][ C1] ? tun_rx_batched+0x185/0x790 [ 436.971676][ C1] do_softirq+0x76/0xd0 [ 436.971692][ C1] [ 436.971698][ C1] [ 436.971705][ C1] __local_bh_enable_ip+0xf8/0x130 [ 436.971721][ C1] ? tun_rx_batched+0x185/0x790 [ 436.971737][ C1] tun_rx_batched+0x616/0x790 [ 436.971755][ C1] ? __pfx_tun_rx_batched+0x10/0x10 [ 436.971771][ C1] ? tun_get_user+0x26ca/0x4350 [ 436.971787][ C1] ? tun_get_user+0x26ca/0x4350 [ 436.971803][ C1] ? tun_get_user+0x2373/0x4350 [ 436.971818][ C1] ? tun_get_user+0x2373/0x4350 [ 436.971834][ C1] ? __local_bh_enable_ip+0xd0/0x130 [ 436.971853][ C1] tun_get_user+0x2b04/0x4350 [ 436.971875][ C1] ? tun_get_user+0x26ca/0x4350 [ 436.971889][ C1] ? aa_file_perm+0x18b/0x15f0 [ 436.971907][ C1] ? aa_file_perm+0x4ed/0x15f0 [ 436.971922][ C1] ? __pfx_tun_get_user+0x10/0x10 [ 436.971938][ C1] ? __lock_acquire+0x683/0x2cd0 [ 436.971957][ C1] ? __pfx___futex_wait+0x10/0x10 [ 436.971994][ C1] ? ref_tracker_alloc+0x341/0x4b0 [ 436.972026][ C1] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 436.972044][ C1] ? tun_get+0x1c/0x2f0 [ 436.972059][ C1] ? tun_get+0x1c/0x2f0 [ 436.972076][ C1] ? tun_get+0x1c/0x2f0 [ 436.972090][ C1] ? tun_get+0x1c/0x2f0 [ 436.972107][ C1] tun_chr_write_iter+0x113/0x200 [ 436.972133][ C1] vfs_write+0x612/0xba0 [ 436.972161][ C1] ? __pfx_vfs_write+0x10/0x10 [ 436.972187][ C1] ? __fget_files+0x2a/0x420 [ 436.972211][ C1] ksys_write+0x150/0x270 [ 436.972234][ C1] ? __pfx_ksys_write+0x10/0x10 [ 436.972260][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 436.972278][ C1] do_syscall_64+0x174/0x580 [ 436.972296][ C1] ? trace_irq_disable+0x3b/0x140 [ 436.972319][ C1] ? clear_bhb_loop+0x40/0x90 [ 436.972338][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 436.972361][ C1] RIP: 0033:0x7f2f4619ce59 [ 436.972378][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 436.972394][ C1] RSP: 002b:00007f2f470f7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 436.972414][ C1] RAX: ffffffffffffffda RBX: 00007f2f46415fa0 RCX: 00007f2f4619ce59 [ 436.972427][ C1] RDX: 00000000000001cd RSI: 0000200000000580 RDI: 0000000000000003 [ 436.972438][ C1] RBP: 00007f2f46232d6f R08: 0000000000000000 R09: 0000000000000000 [ 436.972449][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 436.972460][ C1] R13: 00007f2f46416038 R14: 00007f2f46415fa0 R15: 00007ffcbce17f38 [ 436.972480][ C1] [ 436.972486][ C1] [ 436.990484][T14855] netlink: 'syz.4.2348': attribute type 3 has an invalid length. [ 436.993620][ C1] The buggy address belongs to the physical page: [ 436.993635][ C1] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x178f14 [ 436.993656][ C1] flags: 0x57ff00000000000(node=1|zone=2|lastcpupid=0x7ff) [ 436.993682][ C1] raw: 057ff00000000000 ffffea0005e3c508 ffffea0005e3c508 0000000000000000 [ 437.716594][ C1] raw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000 [ 437.725262][ C1] page dumped because: kasan: bad access detected [ 437.731710][ C1] page_owner info is not present (never set?) [ 437.737852][ C1] [ 437.740228][ C1] Memory state around the buggy address: [ 437.745910][ C1] ffff888178f13f00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 437.753970][ C1] ffff888178f13f80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 437.762029][ C1] >ffff888178f14000: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 437.770093][ C1] ^ [ 437.777831][ C1] ffff888178f14080: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 437.785910][ C1] ffff888178f14100: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 437.793993][ C1] ================================================================== [ 437.853828][ C1] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 437.861259][ C1] CPU: 1 UID: 0 PID: 14859 Comm: syz.3.2350 Not tainted syzkaller #0 PREEMPT(full) [ 437.870661][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 437.880922][ C1] Call Trace: [ 437.884220][ C1] [ 437.887087][ C1] vpanic+0x56c/0xa60 [ 437.891072][ C1] ? __pfx_vpanic+0x10/0x10 [ 437.895592][ C1] panic+0xc5/0xd0 [ 437.899363][ C1] ? __pfx_panic+0x10/0x10 [ 437.903805][ C1] ? qdisc_pkt_len_segs_init+0x7f7/0xa30 [ 437.909458][ C1] ? qdisc_pkt_len_segs_init+0x7f7/0xa30 [ 437.915125][ C1] check_panic_on_warn+0x89/0xb0 [ 437.920091][ C1] ? qdisc_pkt_len_segs_init+0x7f7/0xa30 [ 437.925768][ C1] end_report+0x73/0x170 [ 437.930125][ C1] ? qdisc_pkt_len_segs_init+0x7f7/0xa30 [ 437.935880][ C1] kasan_report+0x128/0x150 [ 437.940425][ C1] ? __lock_acquire+0x683/0x2cd0 [ 437.945390][ C1] ? qdisc_pkt_len_segs_init+0x7f7/0xa30 [ 437.951058][ C1] qdisc_pkt_len_segs_init+0x7f7/0xa30 [ 437.956545][ C1] __dev_queue_xmit+0x27f/0x37f0 [ 437.961496][ C1] ? __local_bh_enable_ip+0xd0/0x130 [ 437.966786][ C1] ? lockdep_hardirqs_on+0x7a/0x110 [ 437.972103][ C1] ? ebt_do_table+0x2605/0x27d0 [ 437.976963][ C1] ? __local_bh_enable_ip+0xd0/0x130 [ 437.982285][ C1] ? ebt_do_table+0x2605/0x27d0 [ 437.987147][ C1] ? __pfx___dev_queue_xmit+0x10/0x10 [ 437.992628][ C1] ? __local_bh_enable_ip+0xd0/0x130 [ 437.997925][ C1] ? br_nf_post_routing+0x1d0/0xee0 [ 438.003148][ C1] br_dev_queue_push_xmit+0x370/0x4b0 [ 438.008527][ C1] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 438.014422][ C1] NF_HOOK+0x360/0x3f0 [ 438.018493][ C1] ? net_generic+0x1e/0x240 [ 438.023019][ C1] ? NF_HOOK+0xa2/0x3f0 [ 438.027309][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 438.031903][ C1] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 438.037831][ C1] br_forward_finish+0xd3/0x130 [ 438.042709][ C1] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 438.048634][ C1] ? __pfx_br_forward_finish+0x10/0x10 [ 438.054123][ C1] NF_HOOK+0x360/0x3f0 [ 438.058209][ C1] ? NF_HOOK+0xa2/0x3f0 [ 438.062382][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 438.067088][ C1] ? __pfx_br_forward_finish+0x10/0x10 [ 438.072561][ C1] ? br_handle_vlan+0x5e/0x530 [ 438.077518][ C1] __br_forward+0x397/0x540 [ 438.082136][ C1] ? __pfx_br_forward_finish+0x10/0x10 [ 438.087694][ C1] br_flood+0x3e6/0x8d0 [ 438.091870][ C1] br_handle_frame_finish+0x1175/0x1990 [ 438.097428][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 438.103528][ C1] ? net_generic+0x1e/0x240 [ 438.108043][ C1] ? net_generic+0x1e/0x240 [ 438.112559][ C1] ? net_generic+0x1e/0x240 [ 438.117158][ C1] ? br_mrp_ring_role_parse+0x160/0x390 [ 438.122708][ C1] ? br_nf_pre_routing+0xc41/0x14b0 [ 438.127920][ C1] br_handle_frame+0x81b/0x1510 [ 438.132781][ C1] ? __pfx_br_handle_frame+0x10/0x10 [ 438.138074][ C1] ? lock_acquire+0x106/0x350 [ 438.142759][ C1] ? __pfx_br_handle_frame_finish+0x10/0x10 [ 438.148660][ C1] ? __lock_acquire+0x683/0x2cd0 [ 438.153599][ C1] ? __pfx_br_handle_frame+0x10/0x10 [ 438.158897][ C1] __netif_receive_skb_core+0x989/0x30b0 [ 438.164539][ C1] ? unwind_next_frame+0x8f/0x2550 [ 438.169656][ C1] ? lock_acquire+0x106/0x350 [ 438.174334][ C1] ? __pfx___netif_receive_skb_core+0x10/0x10 [ 438.180402][ C1] ? lock_acquire+0x106/0x350 [ 438.185081][ C1] ? unwind_next_frame+0x8f/0x2550 [ 438.190198][ C1] ? unwind_next_frame+0x8f/0x2550 [ 438.195318][ C1] ? unwind_next_frame+0x1baf/0x2550 [ 438.200609][ C1] __netif_receive_skb_list_core+0x24d/0x830 [ 438.206606][ C1] ? __pfx___netif_receive_skb_list_core+0x10/0x10 [ 438.213210][ C1] ? common_startup_64+0x13e/0x147 [ 438.218431][ C1] netif_receive_skb_list_internal+0x995/0xcf0 [ 438.224595][ C1] ? netif_receive_skb_list_internal+0x501/0xcf0 [ 438.230935][ C1] ? __pfx_netif_receive_skb_list_internal+0x10/0x10 [ 438.237619][ C1] ? dev_gro_receive+0x1097/0x2380 [ 438.242748][ C1] ? default_idle_call+0x72/0xb0 [ 438.247697][ C1] ? do_idle+0x36a/0x5f0 [ 438.251943][ C1] napi_complete_done+0x299/0x730 [ 438.257238][ C1] ? __pfx_napi_complete_done+0x10/0x10 [ 438.262795][ C1] ? gro_cell_poll+0x175/0x5d0 [ 438.267567][ C1] gro_cell_poll+0x5ab/0x5d0 [ 438.272169][ C1] ? gro_cell_poll+0x175/0x5d0 [ 438.277022][ C1] __napi_poll+0xaa/0x330 [ 438.281354][ C1] net_rx_action+0x61d/0xf50 [ 438.285955][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 438.291080][ C1] ? kvm_sched_clock_read+0x11/0x20 [ 438.296372][ C1] ? __pfx_sched_clock_cpu+0x10/0x10 [ 438.301759][ C1] ? kvm_sched_clock_read+0x11/0x20 [ 438.306984][ C1] ? sched_clock+0x3f/0x60 [ 438.311419][ C1] handle_softirqs+0x225/0x840 [ 438.316278][ C1] ? do_softirq+0x76/0xd0 [ 438.320610][ C1] ? tun_rx_batched+0x185/0x790 [ 438.325465][ C1] do_softirq+0x76/0xd0 [ 438.329631][ C1] [ 438.332570][ C1] [ 438.335500][ C1] __local_bh_enable_ip+0xf8/0x130 [ 438.340610][ C1] ? tun_rx_batched+0x185/0x790 [ 438.345468][ C1] tun_rx_batched+0x616/0x790 [ 438.350147][ C1] ? __pfx_tun_rx_batched+0x10/0x10 [ 438.355350][ C1] ? tun_get_user+0x26ca/0x4350 [ 438.360205][ C1] ? tun_get_user+0x26ca/0x4350 [ 438.365063][ C1] ? tun_get_user+0x2373/0x4350 [ 438.369915][ C1] ? tun_get_user+0x2373/0x4350 [ 438.374767][ C1] ? __local_bh_enable_ip+0xd0/0x130 [ 438.380057][ C1] tun_get_user+0x2b04/0x4350 [ 438.384743][ C1] ? tun_get_user+0x26ca/0x4350 [ 438.389591][ C1] ? aa_file_perm+0x18b/0x15f0 [ 438.394368][ C1] ? aa_file_perm+0x4ed/0x15f0 [ 438.399132][ C1] ? __pfx_tun_get_user+0x10/0x10 [ 438.404249][ C1] ? __lock_acquire+0x683/0x2cd0 [ 438.409278][ C1] ? __pfx___futex_wait+0x10/0x10 [ 438.414679][ C1] ? ref_tracker_alloc+0x341/0x4b0 [ 438.419885][ C1] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 438.425359][ C1] ? tun_get+0x1c/0x2f0 [ 438.429517][ C1] ? tun_get+0x1c/0x2f0 [ 438.433684][ C1] ? tun_get+0x1c/0x2f0 [ 438.437868][ C1] ? tun_get+0x1c/0x2f0 [ 438.442122][ C1] tun_chr_write_iter+0x113/0x200 [ 438.447259][ C1] vfs_write+0x612/0xba0 [ 438.451516][ C1] ? __pfx_vfs_write+0x10/0x10 [ 438.456383][ C1] ? __fget_files+0x2a/0x420 [ 438.461068][ C1] ksys_write+0x150/0x270 [ 438.465419][ C1] ? __pfx_ksys_write+0x10/0x10 [ 438.470280][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 438.476535][ C1] do_syscall_64+0x174/0x580 [ 438.481141][ C1] ? trace_irq_disable+0x3b/0x140 [ 438.486176][ C1] ? clear_bhb_loop+0x40/0x90 [ 438.491044][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 438.496939][ C1] RIP: 0033:0x7f2f4619ce59 [ 438.501361][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 438.521090][ C1] RSP: 002b:00007f2f470f7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 438.529607][ C1] RAX: ffffffffffffffda RBX: 00007f2f46415fa0 RCX: 00007f2f4619ce59 [ 438.537673][ C1] RDX: 00000000000001cd RSI: 0000200000000580 RDI: 0000000000000003 [ 438.545652][ C1] RBP: 00007f2f46232d6f R08: 0000000000000000 R09: 0000000000000000 [ 438.553806][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 438.561779][ C1] R13: 00007f2f46416038 R14: 00007f2f46415fa0 R15: 00007ffcbce17f38 [ 438.569854][ C1] [ 438.573014][ C1] Kernel Offset: disabled [ 438.577353][ C1] Rebooting in 86400 seconds..