last executing test programs: 27.931935088s ago: executing program 1 (id=19841): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) r5 = socket(0x400000000010, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) ioctl$FS_IOC_GETFSSYSFSPATH(r2, 0x80811501, &(0x7f0000000340)={0x80}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe, 0xa93}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=@newtfilter={0x87c, 0x2c, 0xf3f, 0x70fd2c, 0x25dfdbbd, {0x0, 0x0, 0x0, r6, {0xc, 0x3da48c8682330ab8}, {0x0, 0x5}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x84c, 0x2, [@TCA_BASIC_POLICE={0x848, 0x4, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x80, 0x5, 0xb, 0x3, 0x2, 0x3, 0x5, 0x1, 0x8, 0x4, 0x81, 0x5, 0x1, 0xe6, 0xf243, 0x8, 0x0, 0xeb6, 0x4, 0x401, 0x2, 0xffffffff, 0x44d7570, 0x92, 0x100, 0x100, 0x401, 0x7fffffff, 0x7ff, 0x7fff, 0x82a, 0x6, 0x1, 0xf236, 0x5, 0x2, 0x4, 0x8001, 0x200, 0x9, 0x4, 0x8, 0x2, 0xffff, 0xdf, 0xfc57, 0x8, 0x6, 0x7f, 0x7, 0x5, 0x6, 0x0, 0x4, 0x5, 0x5, 0x3, 0x4, 0x6, 0x4ae, 0x0, 0xff, 0x2, 0x6, 0x3ff, 0x80, 0x1, 0x80000, 0x8e0, 0x2, 0x0, 0x0, 0x5c, 0x7fffffff, 0x1b, 0xffffff58, 0x6, 0x6, 0x0, 0x5, 0x2, 0x2f, 0x6, 0xbe35, 0x9, 0x4, 0x1, 0xed22, 0x0, 0x7, 0x8, 0x400, 0x7f, 0x1, 0x1, 0x9, 0x2, 0x5, 0xfffffff9, 0xfffffff9, 0x10000, 0x101, 0x3bdb, 0xffffff80, 0x5, 0x2000, 0x6, 0x7, 0x10001, 0x8, 0x9, 0x78e6ffad, 0x6, 0x8, 0x1, 0x2, 0x9, 0x8, 0x0, 0x7f, 0xfffffff7, 0x80000001, 0x0, 0x9, 0x7d9b17c3, 0x9, 0x8, 0x80000000, 0x7ff, 0x7, 0x800, 0xffffffff, 0x1, 0x389, 0xffffffff, 0x5, 0x2, 0x7e90, 0x615, 0x8, 0x6, 0xd, 0x7, 0xc4, 0x7ff, 0x6, 0x6, 0x4, 0xfffffff8, 0x3, 0x7ff, 0x3, 0xfffff25d, 0x509, 0x480, 0x4, 0x0, 0x8, 0x3, 0x3, 0x8, 0x7, 0x9, 0x9, 0x9, 0x5, 0x4, 0xae397d9, 0x3, 0x9725, 0xf32, 0x2, 0x0, 0x0, 0x3, 0x101, 0x8, 0x3ff, 0x6, 0x7, 0x78, 0x5, 0x7, 0x9, 0x3, 0x4, 0x204000, 0x4, 0x4, 0x5, 0x9, 0x6, 0x40, 0x6, 0x3, 0x7fff, 0x3, 0x1, 0x5, 0x8, 0x7, 0x81, 0x2, 0x10, 0x7, 0x9a, 0x3, 0x10000, 0x80000000, 0x10, 0x3, 0x7, 0x5, 0x1, 0x1, 0x9, 0x5, 0x200, 0x1e5, 0x4, 0x9, 0x62a3, 0x9, 0x1, 0xd3, 0x0, 0x419, 0x200, 0x6, 0x3, 0x5, 0x2, 0xf586, 0xfffffff9, 0x80000001, 0x3, 0x0, 0x10000, 0x10001, 0x0, 0x1, 0x44d, 0x140, 0xf2b, 0x80000000, 0x95ca, 0x3aa880d5, 0x3ff, 0x6, 0x0, 0xfffffff8, 0x10000, 0x2, 0x3, 0x80000000, 0xffff]}, @TCA_POLICE_RATE={0x404, 0x2, [0xd, 0x59f, 0xe, 0x6, 0x3, 0x80000000, 0x7ff, 0x4, 0xc, 0x0, 0xb44d, 0x5, 0x8, 0xfff, 0x6, 0xf6, 0x0, 0x200, 0x1, 0x401, 0x8, 0x38, 0x7, 0xfff, 0xcd, 0x0, 0x6, 0x8001, 0x9, 0xb, 0x8, 0x7, 0x80, 0xe00, 0x8, 0xd5d, 0x1000, 0x0, 0xffff, 0x9, 0x1000, 0x80, 0x4, 0x40, 0x5, 0x1000, 0x4, 0x9, 0x4, 0x9, 0xff, 0x9, 0x0, 0x80, 0xfffffffd, 0xe, 0xba6, 0xd, 0x80000001, 0x6, 0x3, 0x3b2, 0x7, 0x75a, 0x4, 0x7ff, 0x10001, 0xabad, 0x8, 0x0, 0x7fff, 0x3, 0x1, 0x3, 0x80000000, 0xa, 0x1, 0xece, 0x8001, 0x4, 0xe, 0x1, 0x4, 0x8001, 0x7244548a, 0x4, 0x4, 0x1, 0x4f3c, 0x7, 0x4, 0x3, 0xdb1, 0x4c, 0x1, 0xa8, 0x3, 0xaa, 0x2, 0xfffffff7, 0x40, 0x5, 0x7, 0x40, 0x9, 0x3ff, 0xfffffff6, 0x8, 0x8001, 0x0, 0x7, 0xff, 0x0, 0x3, 0x0, 0x5, 0x7fff, 0x0, 0x5, 0x4b, 0x62b2, 0xe9, 0xff, 0xfff, 0x3, 0xff, 0x0, 0x2, 0x5, 0x0, 0xffff, 0x8, 0x48000, 0xfddc, 0x8, 0x8, 0xba, 0xdc1, 0x6, 0xa, 0x1, 0x5, 0x80000001, 0x6, 0xffffffff, 0x1, 0x8, 0x400, 0x9, 0xc, 0x9, 0x6, 0x5, 0xfffffffa, 0xf, 0xfffffff7, 0x7, 0x7, 0x0, 0x5, 0x2, 0xb000, 0x3, 0xa, 0x80, 0x7, 0x4, 0x400, 0x40, 0x4, 0x8, 0x3, 0x4, 0x2, 0x8, 0x5, 0x2, 0xe, 0x81, 0x0, 0x10000, 0x81, 0x101, 0x1, 0x9, 0x3, 0x8, 0x8, 0x4, 0x1ff, 0x6, 0x971, 0x32b, 0xfffffffe, 0x6, 0xb64, 0x0, 0xa0000000, 0x8, 0xd36, 0x3, 0x5f1d, 0x100, 0x1, 0xffff9797, 0x1ff, 0x1, 0x4, 0x5, 0x1, 0x6, 0xfffffffe, 0x3ff, 0x57, 0xff, 0x9, 0xd5fe, 0x6aa, 0x2, 0x0, 0xffffff00, 0x10df, 0x1fe6, 0x400, 0x0, 0xfffff6a0, 0x6, 0x1, 0x7, 0x1, 0x9, 0x5, 0x9, 0x401, 0x9, 0x6, 0xdf3b, 0x67, 0x86d8, 0x200, 0x3ff, 0x88, 0xe57b, 0x9, 0xffff, 0x6, 0x5, 0xff, 0x80000001, 0x8000, 0x8, 0x4, 0x9, 0x8001, 0x0, 0x3]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x2002, 0xe47c3c2e1beac361, 0xffffffff, 0x7ff, 0x3760, {0x1, 0x0, 0x4, 0x2, 0xb, 0x1c0000}, {0x5, 0x1, 0xf, 0xff01, 0x80, 0xa3c80}, 0x336, 0x100, 0x2}}]}]}}]}, 0x87c}, 0x1, 0x0, 0x0, 0x20045080}, 0x4880) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000500)=@xdp={0x2c, 0x7, r3, 0x3e}, 0x80, &(0x7f0000000640)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x20004014) 27.077245215s ago: executing program 1 (id=19849): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$RDMA_NLDEV_CMD_PORT_GET(0xffffffffffffffff, 0x0, 0x4000010) sendmsg$NFT_BATCH(r0, 0x0, 0x40) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000000900010073797a300000000734000000030a01010000000000f5ff000100000009000b0073797a31000000000900010073797a300000000008000a400000000414000000020a05"], 0x90}, 0x1, 0x0, 0x0, 0x40000c0}, 0x4000) 26.911889039s ago: executing program 1 (id=19853): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$kcm(0x23, 0x2, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000002fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000009c0)=@allocspi={0x2b0, 0x16, 0x1, 0x0, 0x0, {{{@in, @in6=@private2, 0x4e20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@local, 0x0, 0x33}, @in=@broadcast, {0x5, 0x1}, {0x0, 0x4}, {0x0, 0x1}, 0x0, 0x0, 0xa}, 0x5, 0x5}, [@lastused={0xc, 0xf, 0x10000}, @user_kmaddress={0x2c, 0x13, {@in6=@remote, @in=@remote}}, @etimer_thresh={0x8, 0xc, 0xca1e}, @algo_comp={0xb6, 0x3, {{'deflate\x00'}, 0x370, "3c0341649a63368b2c7d951d4c9d4d838e14fb146a6579800c75fc8a1d1c5cb1c378c355d3ebf3b458d2c6026c019f9df8d998af143622d3a62828128cb0627ed9b7d096eb49c972d31a7b8551094f4ad35c277bf00759bbab180f703934cf67200954c98ff0c647443b8d450888"}}, @srcaddr={0x14, 0xd, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, @policy={0xac, 0x7, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@rand_addr=0x64010101, 0x4e20, 0xff, 0x9, 0x1, 0x0, 0xa0, 0xc0}, {0x0, 0x1, 0x10, 0x60415abf, 0x5, 0x7, 0x1, 0xc3}, {0x81, 0x2, 0x100000001, 0x1ff}, 0x0, 0x6, 0x1, 0x0, 0x3, 0x3}}]}, 0x2b0}, 0x1, 0x0, 0x0, 0x1}, 0x4000080) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000002900)=r3, 0x4) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r5, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) epoll_create1(0x80000) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) sendmsg$tipc(r6, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, r9, {0x4}, {}, {0xd, 0x2}}, [@filter_kind_options=@f_cgroup={{0x6}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x8848}, 0x80) sendmsg$nl_route_sched(r7, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r9, {0xc, 0xc}, {0x0, 0xfff1}, {0x0, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x4041080) r10 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000600)={0x44, r10, 0x917, 0x0, 0x25dfdbff, {}, [@L2TP_ATTR_IP_SADDR={0x8, 0x18, @local}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}, @L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0xfeffffff}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast2}]}, 0x44}}, 0x4) 26.113500136s ago: executing program 2 (id=19860): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)={0x1c, r1, 0x701, 0x74bd6b, 0x0, {0x5}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0xa4f33603c8225b44}, 0x40804) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000005d00)={0x114, 0x2f, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x103, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0xfac08}, @typed={0xffffffffffffffb8, 0x1, 0x0, 0x0, @ipv6=@remote}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be", @typed={0x4, 0xe9}]}]}, 0x114}], 0x1, 0x0, 0x0, 0x20040000}, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000001100), r0) 26.072317781s ago: executing program 0 (id=19861): socket$inet_mptcp(0x2, 0x1, 0x106) r0 = socket$kcm(0x29, 0x5, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000380)=ANY=[@ANYBLOB="8400000010000305000000040000000000000000", @ANYRES32=0x0, @ANYBLOB="1546010007ef0000540012800c0001006d6163766c616e004400028006000200010000000800090001efa8210800030003000000080007000500000008000100100000000600020001000000040005800a000400aaaaaaaaaa2e000008000500", @ANYRES16=r0], 0x84}}, 0x20008040) 25.807653474s ago: executing program 0 (id=19866): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000100)={@ipv4={'\x00', '\xff\xff', @multicast2}, 0x56, r2}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c00000010000305000000000007138600000000", @ANYRES32=0x0, @ANYBLOB="0000000006100000140012800b00010062726964676500000400028008000a00", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x440b0) 24.297206189s ago: executing program 2 (id=19867): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x1c, r0, 0x1, 0xfffffffe, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}}, 0x24000040) 864.883757ms ago: executing program 4 (id=19869): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="c80000001000a54627bd7000fedbdf2500003e00", @ANYRES32=0x0, @ANYBLOB="150c000000000000a000128009000100766c616e000000009000028006000100040000000c0002001c00000010000000280004800c000142addfcb2b2c3477000c00010008000000f30000000bfa0100050000000b000003080003800c00010001800000ffff00000c0001000600000001f0ffff0c00010007000000040000000c00010001000100070000001c0004800c000100ff010000060000000c000100000000000a00000008000500", @ANYRES32=r1], 0xc8}, 0x1, 0x0, 0x0, 0x28001}, 0x8000) 864.632383ms ago: executing program 2 (id=19870): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x8044) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x1, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000080000008091117c00"], &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) clock_gettime(0x0, &(0x7f0000000000)) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=@newlink={0x28, 0x10, 0x801, 0xfffffffd, 0x8000000, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20421}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x8024) readv(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000001b80)=""/4096, 0x1000}], 0x1) socket(0x23, 0x80000, 0x5ca5) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="40000000090601020000000000000000000000000900020073797a31000000000500010007000000180007800c00018008000140fffffffe0500030008000000f51a8d02ed815caa50b59af5b1967772f03d8b143159dbff4120a73f32080119fd3d7adf86afde912f0c54fabb6503b66cf6acd5af74d0af0c24b1f1057b6c156fb0556ab69e31f1"], 0x40}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) recvmsg(0xffffffffffffffff, &(0x7f0000001700)={0x0, 0x0, 0x0}, 0x0) 864.50507ms ago: executing program 3 (id=19871): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x1000) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0xa, 0xb, 0x42, 0x3e, 0x42}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000180)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r1, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000280)}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x40000000}, {}, {0x7, 0x1, 0xb, 0x2, 0xa, 0x20}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x8, 0x1005, &(0x7f00000014c0)=""/4101, 0x0, 0xc}, 0x94) 862.187496ms ago: executing program 1 (id=19872): socket$packet(0x11, 0x3, 0x300) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000100)={@dev={0xfe, 0x80, '\x00', 0xa}}) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r1, 0x1000) getsockopt$inet6_mptcp_buf(r1, 0x11c, 0x2, &(0x7f0000000100)=""/222, &(0x7f0000000000)=0x80fe) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000280)=0x4) ioctl$PPPIOCSMAXCID(r2, 0x40047451, &(0x7f0000000200)=0x3) ioctl$PPPIOCSFLAGS1(r2, 0x40047459, &(0x7f0000000100)=0x2000004) pwritev(r2, &(0x7f00000005c0)=[{&(0x7f0000000040)="00213ae50deba8cd1caf190e1ae69f52cf98f3a1309b", 0x16}], 0x1, 0x807, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6000ed6a000b2c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa2c000003"], 0x0) r3 = socket$inet6(0xa, 0x3, 0x5) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x95af3000) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="1400000010000100f7000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000144c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d10300000c000440000000000000000114000000110001"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c00018006000100d1a3a700080003400000000114000000110001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x9c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x6c, 0x2, {{}, [@TCA_NETEM_LOSS={0x30, 0x2, 0x0, 0x1, [@NETEM_LOSS_GE={0x18}, @NETEM_LOSS_GI={0x18}]}, @TCA_NETEM_RATE={0x4, 0xd}, @TCA_NETEM_CORRUPT={0xc, 0x2}]}}}]}, 0x9c}}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f00000000c0)={@remote, 0x800, 0x0, 0x0, 0x9}, 0x20) setsockopt$inet6_int(r3, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4) sendmmsg(r3, &(0x7f0000000500)=[{{&(0x7f0000000380)=@l2tp6={0xa, 0x0, 0x7080000, @mcast1, 0x4, 0x1}, 0x80, 0x0}}], 0x1, 0x4040000) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000480)=ANY=[@ANYBLOB="200000005e000116a8c51571e67762000c030000010000000000008004000180"], 0x20}], 0x1}, 0x8000) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r9, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) 862.082647ms ago: executing program 0 (id=19873): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000240)='syzkaller\x00'}, 0x94) syz_emit_ethernet(0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffff000000003d892ec08586dd61bc81d700006cfffe8000000000000000000000000000bb000000000000000021"], 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) (fail_nth: 56) 861.868592ms ago: executing program 4 (id=19874): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) (async) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001d40)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_GET(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000001f0000540000000e0001006e657464657673696d0000000f0002"], 0x34}}, 0x0) (async) sendmsg$DEVLINK_CMD_GET(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000040)={0x14, r3, 0x1, 0x0, 0x0, {0x54}}, 0x14}}, 0x880) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r1, 0xffffffffffffffff}, &(0x7f0000000200), &(0x7f0000000240)=r0}, 0x20) r5 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$NILFS_IOCTL_GET_CPINFO(r5, 0x80186e82, &(0x7f0000000380)={&(0x7f0000000180)=[{0x2, 0x0, 0x1, 0x5, 0x84, 0x2, 0x10001, 0x1000}], 0x1, 0x38, 0x0, 0xc4e}) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xb, 0x4, &(0x7f00000000c0)=@framed={{0xffffffb4, 0x2, 0x0, 0x0, 0x0, 0x61, 0x11, 0x4c}, [@call={0x85, 0x0, 0x0, 0x1c}]}, &(0x7f0000000380)='GPL\x00', 0x5, 0xff92, &(0x7f00000003c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000100), 0x36c, 0x10, &(0x7f0000000000), 0x26}, 0x48) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) socket$packet(0x11, 0x2, 0x300) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r4}, &(0x7f00000002c0), &(0x7f0000000300)=r6}, 0x20) 861.779132ms ago: executing program 3 (id=19875): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="020300030e00000027bd70000000000004000900a800000001d78771b90bd8a3b4914783c5432d69ca5b9538a900000003000600000000000200000000000001000000000000000002000100010000000000031600000020020005000000000002"], 0x70}, 0x1, 0x7}, 0x10) 858.692602ms ago: executing program 2 (id=19876): setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000400)=@mangle={'mangle\x00', 0x1f, 0x6, 0x590, 0x0, 0xd0, 0x3d0, 0x2e0, 0x0, 0x518, 0x518, 0x518, 0x518, 0x518, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, @ipv4=@remote, 0x3c, 0x1d, 0x1}}}, {{@uncond, 0x0, 0xd8, 0x120, 0x0, {}, [@common=@frag={{0x30}, {[0x5, 0x4], 0x12, 0x3, 0x2}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @ipv4=@broadcast, 0x3e, 0x33, 0xf}}}, {{@ipv6={@mcast2, @private0, [0xff, 0x0, 0xffffff00], [0xff000000, 0xff, 0xff000000, 0xffffffff], 'gretap0\x00', 'pimreg1\x00', {}, {0xff}, 0x2c, 0x10, 0x6, 0x40}, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@multicast2, @ipv6=@ipv4={'\x00', '\xff\xff', @empty}, 0x38, 0x38}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@ipv4={'\x00', '\xff\xff', @loopback}, @ipv4=@multicast2, 0x23, 0x17, 0x9}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5f0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000740)=ANY=[@ANYBLOB="b8000000190001000000000000000100e000000200000000000000ef8697fb483f8f6c00000000000000ffffac1414aa00000000000000000a"], 0xb8}}, 0x4004) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b8000000190001000000000000000000e00000020000000000000000000000000000000000000002000000000000000000000000000000000a0000008700", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000020000629d56e31e3a89ff1311d00000000000000000000000000000000000000000000500000000000000fbffffffffffffff000000000000000000000000000040000000000000000002"], 0xb8}, 0x1, 0x0, 0x0, 0x4000015}, 0x2c000010) 858.614537ms ago: executing program 4 (id=19877): socket$nl_route(0x10, 0x3, 0x0) 857.523316ms ago: executing program 0 (id=19878): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xc}, 0x8) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000240)={r1, 0xfffffffffffffff0, 0xd, 0x7910000000}) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r2, 0x84, 0x6c, &(0x7f0000000280)={0x0, 0xed, "206c86a5b10b887ecc7212530ab7371e9b633daeafa6256f1412e1707222e47a29beb1ec623403c4e19871215e2971db94e943de29e62c8cfd0c0fc5ad0025b618bbb30ecdd592a663ca2d433263fbeb4eb1477d63ce040acc65a038366aa8454a0600818cd775dc785dfe4f677601640fe402540ae4278b723283525d4a1abdccee0ca916abb5b0180dbe834eebdf65830817015c36bf8b0890ed4bf804d2c7bd34ae709f87b70cd0fe0d995d369f5f245a41e4c9c473ef10861bfdabc8bcca6fd2578e31542d83799effea945041ea546279c9b7f42aed84e056cac99659f516f7fe5ef945b9bfe5af2247cc"}, &(0x7f00000003c0)=0xf5) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000001c0)={r3, 0x10, &(0x7f0000000200)=[@in={0x2, 0x4e24, @local}]}, &(0x7f0000000640)=0x10) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r1, 0x84, 0x74, 0x0, &(0x7f0000000140)) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000080), r0) sendmsg$NFC_CMD_LLC_GET_PARAMS(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="0100010500"/18, @ANYRES32=0x0, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x20000080}, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000110700)={0x9, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x7, "e81e98e4abedff"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000111700)={0x8f2, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x5, "dbc312f1a0d3d7"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000112700)={0x0, 0x0, "4e1d39f458a72cc6d7b339cecd8d38a19b381a0a50d26b5fb3702d3923629562bcea65f72907462847ad94953abbd4cf0702dfbf47f5aaca1eaa8ef19696b675900d28e2d217f8db90c553457f14e72f038c8f06492f860e70d06e1dbfc166a14bb795076f6ab2d08c62ed339723a6582966f3b112f8f5ecb8ddb068e7627f2c1ab8a6c6bb9e7daf39298acc4150224a869392a37f8d03cc457595eca675659d508edfb341a411938982bbda681a566de453e309963e7049ef3c1f5a95399ba062dc7a9f74e93c3e497dcf58eab8641508cecbfec6b5b1d2f322d371c14e1dacdc20507837e17cf1c384146f0c440f4cff1795f02b33235e45a2903ea78272c2", "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"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000113700)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000113900)={0x0, 0x0, "0151309af13c4c91782876741d285cfb2f769e281842d6e6996b7053910ca0e6ebe2f821c6e485d8df6f5c9c745952b874d7121bbf940f1ea6ab7ca43440ebb4e81564deb2883e94a79a193dc91c5be2cc0ffc780873f327a9e19f34ab0c2bde08b7e5d2aae9deb44511316be1ad5da5049f21a833af8694acd78a769abd83aee403d87bbe798e903f0a005320331478ccaa85f1d13f25eca8de30ab425cba7c8ac1b1fd3f1cc7d6281e381badb4d2fa6fffae2fcf3f89e6e850f48e7dcb05dc205c8785ccbd26d23e49e0d02bcd927f693377031871085a44e72375e73cd9174d5b887f1c842828205b169c00831666abd0e0c7a2fa5e9c8feabc0b57c77799", "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"}) r14 = socket$can_bcm(0x1d, 0x2, 0x2) write(r14, 0x0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000114900)={0x0, 0x0, "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", "91bf200ac305ccce866677a3886879576597ba3b4741a1fd1b2d404220762972b2d8072e1b574b50cb98fb56cfd806bbe8f705c54acd7f755f26563cdf90824f1072b12e686aa4234b774d748c17ca9989e034ec97f2013ca3b41f9174a592a82298a2ecb95c0f427d363287f1f152b24cdce5008e95e57dfc2ef4878ddd9bac87e94fca549a4f3ed2715c147188823e1b72c02188fa01bc8af45e76e21000fdf3010b1b83183cfa750eae1693429ef8c8236580c569e92f0190167fdc7c70ed63d070274fc189dd1e1cbf6218e1dc12aacc1079019cc5d4a23880899b884442028e234c1837f846b1844e2828e42eaf6bfe5c85022522d73006e747149f780e439a15280bb45af38c8a7f9f13e154363b12ee39787e8396bd76bc63ce67ea37caf673ad5291e6bb20aad0e1b8fb824dcf061203e6c034ecbdaafa3d41ee4c366f4ad542002d2dedf0e2050bb4a3029e3317941941779860bf0cd7dac0f150ff05a139c37e04974bb310289b85f09368bda593998c306fd22e82861c48c6e893aa378a377c5977d9d13ea9b5cdecc91c3a1f9bba96b4f704362933c9c827233005d9149d97096eee2c3509006125b15aab5b66acd281590b95efec3e12e6b4ed5f3103a7b66bd2c0cbd0499cd8c89bb79d4c2646f471a40e61860a23008fbe50bdd8f679ceae5d3e6df8b9462a6e0eb8d0e38960fef4e4e08e04efcc14abcfdb88606843512a207399ae6ac53f71f9fa75d1c2558453b8cf22bd02f24387b82f48f7826ad5b1a3e9032acf903eadb8eaf5df44d711994168fcbbf7585d73056a08e431aa83b9d34b98211d6d4562a8a375b0864beb618067735daa07543010935d5321571f0d461ec636b05f423a48b596c0dc80041f02b278f4534811af634641c4d3aff0d8803b6a29d956f44e81d08aaffcd405fbced700287b89464f3cda8eeb4d03253ad8437b849dc0e192c0ac1139c6ac90984611a34bc77da6f3cdd4f24e481f09e1c4d741c777dd2f659900ca4432923d9be8cfeebf57d77a737423a0ed167be043b07780bd9b7bab82cdd9c37df97e73cf6be732cb6e9c562b6b02b9dbfe0c783bef5aee3c1b830eb3a498feede12dac3a5a2204b02e4642af5e5dcbe6f811170e31d7ece11f1ad31f9963fb597183069a86462284b36a1982f0ba79182c5d0f09e0f3ed4ae3203d8b227168646933cfa69103528069320dbe71eb3e8bd8910045550cf2f2fcbde9a9664ba64c8c9ad6a2a30395829a7fc62c7212ac0a6e2e12eadb225c49d50b4494fc334c54c8ba6f25c43ee565671a454084f11b60f1fd0233e9bfb906332f2c48ed6ff223058e7bbd9a9750535e5eb13192c64d4afc44b027e3f921cbe64c6e3a5b8a7a86e7d44f78b4f25ac8e3bfa418f84338547caeebb575ba0e987425c3448faf423ca8ad2fd848e6a0b38763a3cfb3d3b3d81b9187e1be971d3ccccfc20885165e1f87d18ed2468449db7b2d69c3a004ca029598997ffa25f24e4c060fde66fca9f12cec83bb1d925ef6051faa9270573bf2d23f3264d8f43edccaddd8273ac09e02782b51f3ea6ef8dc17f8cb0d67abd2d1a7ba5df0192ab2bc45a8a407b8e7bc00e15de4b81577caf4e43f45a2d8af4329b6624c798ca62d6413d82c7f1767f2f0e27fc85453d7de54a1337e4aff05177dfe4c7443705d5f03d3ac7dede3faa1a1acdd5f829a5c1c630e88603ddb4ac2147b249bc1dc61ce00b3a099f9e728872aca0064b2d95ced7514f8fbd1809d4f4d35d7acd0b31f1b331ed80d26e883f3342982a9ba8c75e38921ba74ff1e1e9b8f40cde8071cc46b3d7369f6647cc40c7984ab29cdf361e3e4ba73c38fdc7864a63f91b352a9874cc0b8ab9202c36a49fc95d334824ee9e44a25c77a840107eabf6d0d3033329e50f972b1a2786b34d53571460f9d4c0bc0ad7820094429f49b9d0ff166404dd9ab135f25ac70a56699b3fe53f5b7131edae0038857036483cdb511f86c15900159ea0fb85fde06d408b4acbdfdd2bfaf2ae0ce2c5a1d3a90801f4df189a9474022c174dfbea1bb686981b0cdf20647c3ddc835e06beed822867932ac22b48f8c4e1820f832c68982974fae51c73fc571e3687f7acd0b0c9333f559dceb40d536a5c380588df804cdf11708a5fc710e9984834d6318921703e4e4322bb59379457c17b94e03626f1041a01ebb8b829f6c17c99b259a882aca0e09be35d30dc7152dca3028ae1f1a57fe4c7a8f0a6744034f307f5dc38b46fcbfc5aa8088a93d5d81586fe80b0a334443926c9de6781ad351d85d1580554b1f0cf1c6f928cd3569478c7d3a298f5a8814236f9dc3acc597b42741c9e84c746f682e4b98d2efdc056c27e61266beff0e75faa195b489a8eef75f0ab94acf3641c6dbf3df22d5c7fe8bf4bea75495ddd993f84a9fe57317401d3aba3fec264c8d39103b0ebe0c30fa7f2371dae724d6952267d61765372c59803358659a0b75ccab4db2faca54e5f3d5f641acf9e472ff84157521303f18b38a47f6ffa28cfd1c4bef647de96dcf6e9c5730cb50fc8db9a490c191ad50ef95a88aa0198cdfad3225bcc5ba7d67e36e6dcb6a351f82b1b1f4d80a22e8ac6ab58a41c22cfa2ebc6aa43423275fbe8660366e088d84ab0f3931e847543a151f20e7a313e4e82928ced4846054a4033c8610c5415479fd1a5899909cf0c71b2e184d010040ca0607bf2e53b522ef6d3412576dd2d4ccacb7bd6cfd027f1a21d8c05091ee619767c5eacde308d2c9e727f8e76a10ad31b6030c773821037d6ee187ab0315c8ec7d897976a2eab0e0324cc3537d6066b0918ce641386331c5d12a0bda83abc8dd4ba8a44a3460422cf53886448fecb744a0e07d81580bafcd8a0310d4a4239bc93474f21ed207feca78803a75fe27b5a15ef4669dfbbd56833030ad37d2389bba291e1332d73de4453cdd3eaec982d2e015614481d30e8df943d9c7d7ec4537402b16e5a74db5f662bde310790a995024fffcae82add920996d570be384d221209caff31e6313fde7b45a9b38a0f21646573a6a6ff23febd7446f544facebdcdca4c7286257c66ffe8e305be27e2aae5fe45d050ba9e2bf8934708442d7ca965f12a87683177e8b29587e5a19c07af96bcaac097c3a80ee4ae3ba79d1458090027cd50ffd3e3149d0b2d72814283e3f5746069e9de53fad5da5c900ea944648b32401f4148dd03620a1d79732c1961187dd5a1e9eecc914ccd4e330e54e4937867be2a75875372d8595888e05924c7731a70d07eb6871ec71e2b89d75303e13dbeeec2d77d9097b62b32bb0d0a8ac1fc090bf407b09eea21c72965e72062f1dde55e20c9234ced8e1df36aebe18993f1bb32a9afa1c6fe6357a706d58700a3cdc221b479ee62ac28e68dcf362144f231eae555484e0f4c14ed7490325d8ba7ef5f389602735acbd53bbb3dd1fbae10a5e8e56bb016c79ae1c6844ba9da5aa24dd1c4f023a2fd1427d1094a7f24b644f426e4cd95fcb6cb9a0487965fe2da463239399808edd8f24f18769cb3f129af98d1dd56fa0992ff865ffcb2529156808455f0634f252082f1a92b7216dbd6912f56be26df2170ceb57f962272821222d794dc72701a6be92fcf4cdcb9af5fb7aee8a875adf7a78b59c661c33921b5b38f5bb2084aad619511ebda60c1bd596eea467d42e65db0acf4c8dbf06347c71896b68340a75db4c1b9755f8daee5fbd73bebed363659de39c62e5ef0a53e1b4627390a6496c011b3a5eb6b5e66c7f26ab9bd189b9435b3cadf3be1513c59baf094d3cc1882bc1c43afe2b15f7cca8ab9a9457370b3335c2a5012c838ac965f222367473fd09b762dc6bff79bdc536f5cf23d9cad1af13506ab0d41b782bc46c84ebf1616a3d72c8546dfae4b106f043ebba5efe0972cdc8676961dcb9782aef779e554637c666092d87955bada453c3c8eda36512ded51192638b16faf83853c8259ee2658571a23543d5547be7a31b8df82557446281950976b66e9f111b86fef7c499849810c44867738f315cd05ab37ffb59bd6ae98477f7e8be90a1611e4a13a65ce9bb36112b712324f1c7ca8df867c587d2f73ef019f07b85dd29379643eea0652cd99ccb6931eb73f49d9f59e509819891b1deee8c1d17542a16aa92019a87fe01924dd79f611e6fe6bb72ba709a0c7d3c911a63e0ac948988fdfbc58af07664ca40020ea48437db42a362a40ed5600f6e1a799d9857dc6cd12ed073d2f23f2168b7dad6ded38cc87e8c7be88a334046e54a3134162bb7fd0989c06e39de44be263e1f8b1c231c3efc7459344d05f41047a440142596cc50f8534f78a0e43ca59f41af178fa2f83208455c87963771784130f12a437ebc3b52a88c063e2191a5e521f2a68791e082adb1ab14131ccc333a1ec70829483399b946c4d9a01285304b0f72189f09af092b4e0a7413b5f6144f00c7216925d34b4d13eaf707452eed8879b5d1ec0dbd4620d225b184cd76fb44a6515167cf4d1e0610f9d84ea12a054268cb300c4ac3236fffad9937696eb564dc9c1c242d2024a3622cfb26d9ce17f218de36fb36a46f77e7bb6f8348c3dac967239e718974422f2357c5189e7baa7c7036b4fc4e0cc2d950547b0ea37cf864c4f488ca9de99f8d193c8535c7f4c872a70f6c324241aecab2355b02911650f25b01c58c49a7a60861667b6ac279f21aff061c80240f8a152f481f9c7aae0e55b3921ac764be715ecdb2e1738799dcb5b4f945973e626e4142ec77c19d209b18b3ea5a0fe86d9afad8a122b3696203f9a127f490bfa3e03e0c0a8dc64378970e2121047c2a1fa90263a2d29ab2975c99c0a3fd653f794f33f12e78ef2d9c7350090ebf48a37c5c573b5823a84967fa93556a9ab9db5e7f7ad76aac574afae8702cec4327f50854c5d01ef7addec658709aeec88d485112ec6df02562ec60a10e3108f72676bb8199ae7dff5e24aef0b366338dcf5cfd69e0ce7d3dcf9a370d5c5a5ec2d213a237d883e3561696a27d8bb19b94eae90ccf5bffd4ad1f4144315a8c0af018c6cbc9acc677bf4b79f5e090f46aa64ac424e94a6b057551cbd1e70d949c9f745c91e0b8e5a21a11dc9b17c52f8a70ee542c3cfedab53c14b4cd7f26e7e810704e3c6cf802b12656065b46da373e067e2c27690f540cee28a879aaa73ab64d8b5c0f9b338d85aa7103e818d9be38b0a7745d28ef5eeb380a0b2bd98d8aeae77c227accf8bff86c9a81d3819442b095502925290e03506c3f747ca2195b5e94e2ec7517c53fb00abfdc7a46f8e2458b4cd7ff33a3cf4531ada4f2155938bc58ed61939f25d765f76b91d9e81bc403f405e4bddc54be5f02cdd41ff39705b89a5d1d7b0479d9a6ccdefaa07a75278a6b0d95371137851d1bc0854c0659"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000115900)={0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r10}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x4, "488ef106a320a3"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000116900)={0x9, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}], 0x1, "f45eea8aed62fb"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000117900)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000117b00)={{0x0, 0xab7e, 0x6, 0x4, 0x491, 0x5, 0x0, 0x3f5, 0x80, 0x80, 0x8, 0x4, 0x1, 0x1, 0x1}}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000118b00)={0x1, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r18}], 0x6, "7fc27c7dfa4ed5"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000119b00)={{0x0, 0x10, 0x8, 0xa90d, 0x35, 0x7, 0x9, 0x10, 0x4, 0x1, 0x0, 0x6, 0x7, 0x3, 0x2}, 0x40, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000119bc0)={0x5, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r5, r9}, {0x0, r11}, {r12, r13}, {0x0, r15}, {r17}, {r19, r20}, {r21, r24}, {r25}], 0x3, "c1650c01f470c2"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f00000be780)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f00000be980)={0x10, [{}, {}, {}, {}, {}, {}, {}, {}, {0x0, r22}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r16}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r23}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r12, r26}], 0x6, "70b3a04f97ed5f"}) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r27 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r27, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@newlink={0x20, 0x10, 0x437, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x40e89}}, 0x20}}, 0x0) 846.545107ms ago: executing program 1 (id=19879): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000003c0)={0x1c0, 0x2e, 0x1, 0x0, 0x25dfdbff, "", [@nested={0x1af, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0xfac08}, @generic="db2dc291169a81a398b2e1d01271cbf25aa6b38dd830c8c8cdfa5cd9fd2929b7155de732a8633744c5864a27375fff6a0906a1d17b9f9e5c47d77952bb17994fac08ecea0e6e01fb53db6b47e6610afa0da027a033361e8098f6212facc1c8b277abc3dd5f7660230e9d164486af7b0ea72babbcbe6078c1fcd4619f46aea8df1b82a1eadcf0532f65c7b24abcfb5f5e12ec57a59a3f6f4a6d23e97ef2e0b118d2350999620bbe31a5e58c93012bfd4cf0eea077731ca8fbd54d1e9995e0", @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd", @generic="3ed73cfc"]}]}, 0x1c0}], 0x1, 0x0, 0x0, 0x400c445}, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r2, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000014002101000000000000000002200000", @ANYRES32=r2, @ANYBLOB="080c0400ffffffff08000200e0"], 0x28}, 0x1, 0x0, 0x0, 0x8001}, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r4, &(0x7f0000000000)={0x1f, 0xe4, @fixed, 0x0, 0x1}, 0xe) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="280000001400212100000000000000000200"], 0x28}}, 0x0) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r8, 0x84, 0x6e, &(0x7f0000000180)=[@in6={0xa, 0x4, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9}, @in6={0xa, 0x4e23, 0x9ec, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x2}, @in={0x2, 0x4e23, @loopback}], 0x1e) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x0, 0xb0, 0x0, r7}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r0, 0x4008941a, &(0x7f0000000740)) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r6, 0x4048587b, &(0x7f0000000680)={{r1, &(0x7f0000000180)='-\x00', 0x8000, &(0x7f0000000240)={@_ha_fsid={[0x3ff, 0x4]}, {0x1, 0x9, 0x8, 0x77}}, 0x0, &(0x7f00000002c0)={@_ha_fsid}, &(0x7f0000000300)=0x1}, 0x2, &(0x7f0000000640)=[{0x3, 0x10, &(0x7f0000000340)='nl80211\x00', &(0x7f0000000580)="9ebc2825b032eac9d78a3fe36033548ffb3e9520a5f061dd51358aa9bea68f79e79c04f254896db73992", 0x2a}, {0x3, 0x6, &(0x7f00000005c0)='\xaa\xaa\xaa\xaa\xaa', &(0x7f0000000600)="535fc515a32fc394063d9f45f63511f39d61d6aefb478ddd4c3903f91aac4aabb8d1", 0x22, 0x72}]}) sendmsg$NL80211_CMD_AUTHENTICATE(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000700)=ANY=[@ANYRESOCT=r0], 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x40) 845.109754ms ago: executing program 2 (id=19880): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000100)={@multicast2, @local, @multicast1}, 0xc) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000c00)=ANY=[@ANYBLOB="020000000000000002004e1fe0000002000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000100000002"], 0x110) 844.576049ms ago: executing program 3 (id=19881): r0 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) ioctl$XFS_IOC_FSCOUNTS(r0, 0x80205871, &(0x7f0000000040)) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'syztnl1\x00', &(0x7f0000000100)={'syztnl1\x00', 0x0, 0x29, 0xfe, 0x0, 0x5b, 0x62, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x786, 0x87c0, 0x461, 0xd}}) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f00000001c0)={@rand_addr, @local, 0x0}, &(0x7f0000000200)=0xc) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wg0\x00', 0x0}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0x0, 0x0}, &(0x7f00000002c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'team0\x00', 0x0}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0x58, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000480)={'ip_vti0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x7800, 0x7800, 0x2ad, 0x80000001, {{0x16, 0x4, 0x0, 0x2, 0x58, 0x68, 0x0, 0xd, 0x4, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, {[@timestamp_addr={0x44, 0x2c, 0x37, 0x1, 0x1, [{@private=0xa010101}, {@remote, 0x527}, {@loopback, 0x1}, {@loopback, 0xbb}, {@rand_addr=0x64010102, 0xfffffc00}]}, @timestamp={0x44, 0x18, 0x77, 0x0, 0xa, [0xfffff001, 0x7, 0xfffffc01, 0xff, 0x4f]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'team0\x00', 0x0}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0x58, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'vxcan1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000680)={'syztnl0\x00', &(0x7f0000000600)={'syztnl2\x00', 0x0, 0x4, 0x7, 0x1, 0x8, 0x3, @remote, @empty, 0x80, 0x7800, 0x6, 0x80000000}}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000006c0)={'team0\x00', 0x0}) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000700)={@multicast1, @remote, 0x0}, &(0x7f0000000740)=0xc) getpeername$packet(0xffffffffffffffff, &(0x7f0000000780)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000007c0)=0x14) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000880)={0x1, 0x58, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000001100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000010c0)={&(0x7f00000008c0)={0x7c4, 0x0, 0x100, 0x70bd2a, 0x25dfdbfd, {}, [{{0x8, 0x1, r1}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}]}}, {{0x8, 0x1, r2}, {0x258, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x7bf}}, {0x8, 0x6, r3}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x74, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x44, 0x4, [{0x5, 0xdb, 0x8, 0x31b}, {0x6, 0xc, 0xf7, 0x9c28}, {0x6, 0x6, 0xd4, 0x2}, {0x18f, 0x7, 0xd}, {0x1, 0x5, 0x4, 0x195}, {0xfffa, 0x4, 0x5, 0xd}, {0x7fff, 0x8, 0xd, 0x1}, {0x9, 0x9f, 0x4, 0x1}]}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}]}}, {{0x8, 0x1, r6}, {0x7c, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r7}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r8}}}]}}, {{0x8, 0x1, r9}, {0x7c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r10}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8}, {0x194, 0x2, 0x0, 0x1, [{0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x101, 0x0, 0xf9, 0x7fffffff}, {0x4, 0x8, 0xc, 0xfffffcd8}]}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0x740, 0x4, 0x4, 0xec1}, {0x5, 0x4, 0x4a, 0x10001}, {0x8, 0x6, 0x8, 0x10}, {0x5, 0x26, 0xd6, 0xb}]}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r11}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x40}}, {0x8, 0x6, r12}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}]}}, {{0x8, 0x1, r13}, {0x1d4, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x10000}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r14}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x81}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}]}}, {{0x8, 0x1, r15}, {0x7c, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xfe5}}, {0x8, 0x6, r16}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}]}}]}, 0x7c4}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) setsockopt$TIPC_GROUP_LEAVE(0xffffffffffffffff, 0x10f, 0x88) pipe(&(0x7f0000001140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r18, 0x89f3, &(0x7f0000001240)={'ip_vti0\x00', &(0x7f0000001180)={'syztnl1\x00', r10, 0x8, 0x1, 0x7f, 0x0, {{0x1d, 0x4, 0x0, 0x5, 0x74, 0x64, 0x0, 0xd9, 0x4, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, {[@timestamp_prespec={0x44, 0x14, 0x7b, 0x3, 0x2, [{@loopback, 0x54e}, {@local, 0x3}]}, @ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0x24, 0x97, 0x0, 0xc, [0x72, 0x3, 0x5, 0x5, 0xffffffff, 0x105, 0xc, 0x3]}, @timestamp_addr={0x44, 0x14, 0xc, 0x1, 0x0, [{@loopback, 0x9}, {@remote, 0x174}]}, @end, @ssrr={0x89, 0xf, 0xb7, [@empty, @loopback, @local]}]}}}}}) ioctl$sock_bt_bnep_BNEPCONNADD(r17, 0x400442c8, &(0x7f0000001280)={r17, 0x4, 0x0, "054befe2a211114b68faccb459bbb3e4d05692b2d102284bd49d3ee6dfc34b7814e31fae18c93552947325b68f36299ad8ca3505a865a1f53a712d8def29433c6d7dbbfe8e9bfb96d0d5dd04a75ac5a9fc9f85ff19179a705a4e1728a4ed92"}) ioctl$XFS_IOC_FD_TO_HANDLE(r0, 0xc038586a, &(0x7f0000001400)={r18, &(0x7f0000001300)='[\x00', 0x101100, &(0x7f0000001340)={@align=0x5, {0x2, 0x10, 0x4, 0x2}}, 0x5, &(0x7f0000001380)={@_ha_fsid}, &(0x7f00000013c0)}) accept4$inet(r18, &(0x7f0000001440)={0x2, 0x0, @multicast1}, &(0x7f0000001480)=0x10, 0x80000) r19 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001500), r17) sendmsg$NL80211_CMD_GET_SCAN(r18, &(0x7f00000015c0)={&(0x7f00000014c0), 0xc, &(0x7f0000001580)={&(0x7f0000001540)={0x20, r19, 0x8, 0x70bd29, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x101, 0x4a}}}}, ["", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x20000010}, 0x40000) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r18, 0x4048587b, &(0x7f0000002cc0)={{r18, &(0x7f0000001600)='user_linkup_enabled\x00', 0x430083, &(0x7f0000001640)={@align=0x80000000, {0x100, 0x8f, 0x6, 0x5}}, 0x7ff, &(0x7f0000001680), &(0x7f00000016c0)=0x7ff}, 0x6, &(0x7f0000002c00)=[{0x1, 0x14, &(0x7f0000001700)='C\x00', &(0x7f0000001740)="4d9c69607ca95b9cbefd17729cf7eb6571b65c449a73714898f04b274eb0e0a35728db99f69fff000fd6772574788010ccf2a50e7cccd84e802bda85a9e861ec3bf771451a67ef6cfac0a736aa24bc5f50f94fb633cbf6b5bc0716f511089f97", 0x60, 0x10}, {0x2, 0xbcf, &(0x7f00000017c0)='notify_peers_count\x00', &(0x7f0000001800)="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", 0x1000, 0x20}, {0x3, 0x2, &(0x7f0000002800)=':$\x00', &(0x7f0000002840)="9eb6c8b96357db5951a95d772de91fcab9dbc00e1dbcb41a358743628d28b7ba255c712229c5f0f92da2aadf4829f6afaa96be7f798c2e079555b906620d67946f913dc2ab98a41056ba9ad2e28fbb6d850423d67ae62d1f6d7868110d8f3b7d639eceb319badff83c492fee4a8468120cb5ad3cbd836c9312a1c91806f7a62d8b9e0c494bf6a69cf7f9879cab49222156c5b71651adf5dcd4a5430236c2c46b615626ad3397997e0db879a3fb7c9237ef4fb62ee2c4618f98847be8209f387897930de29973b44bf1bc42dc79dc2fe87a9daa0a920758769a04ffd7ad10bac3c904e925ca0f0f83787d2bcfb8a91ec7265c07eac9", 0xf5}, {0x2, 0x2, &(0x7f0000002940)='-%#,\x00', &(0x7f0000002980)="8e36c141dc85054d53413b762f59143cce3dd8bfa4de0a45b68646955116568fe705fbc632cadb", 0x27, 0x2}, {0x4, 0xfffffe01, &(0x7f00000029c0)='\x00', &(0x7f0000002a00)="522d1cda6fb1ed16eaafd862915e9c81d65557c6f6bac04ac14e26ca3d3a3b6bf93267ee0d623f2ff3f4136140a9466cd5135dc5e6949f31e91f9363804c6b7bdd5f97aaac23d41fa0ed7e134585438023504952f4e1d2a6430cd450b25c68003618f98eee831475687fdd0dbf64b9520d685e0c05bbdc0ae63a2c3a01e8606b1c41922acd31abc1fdf80feb7d41425ed8da5579ccab89170c0b7d8f2477b6191bcbef51d1106ad82cccf4d958514333d3e007250be5b315607e7e881ed1bf48fcc1e9b1e5a3191ca924ac12", 0xcc, 0x38}, {0x2, 0x5, &(0x7f0000002b00)='notify_peers_count\x00', &(0x7f0000002b40)="4c876af67cc7ce0d88e8066a9965fafc0b51fd855f6e58026cda281c3a4e39c4eb74f81527632fdf55d494940d5f381375c95cbf0046601e7f4e75a0517fca3bdb55d2d290f5715b40cf837df37cf19e8db8719664e13eb7a318336b98c2086306c083edc5d38debeed3280fc2a2d2b9a75d0b81ce736e6ed4b165009780e2008f41e4c5fd32183c10a0bc792220beb47583aab65e41eeb9b2", 0x99, 0xa}]}) sendmsg$IPSET_CMD_LIST(r20, &(0x7f0000002e40)={&(0x7f0000002d40)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000002e00)={&(0x7f0000002d80)={0x54, 0x7, 0x6, 0x801, 0x0, 0x0, {0xa, 0x0, 0x4}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$DCCPDIAG_GETSOCK(r17, &(0x7f0000003240)={&(0x7f0000002e80)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000003200)={&(0x7f0000002ec0)={0x340, 0x13, 0x400, 0x70bd29, 0x25dfdbfb, {0x18, 0xff, 0x10, 0x6, {0x4e22, 0x4e20, [0x10001, 0x800, 0x2, 0x5], [0x1e4a, 0x3f800, 0xa0, 0x4], 0x0, [0x95, 0xffff0001]}, 0x5, 0x1}, [@INET_DIAG_REQ_BYTECODE={0x2a, 0x1, "ac52ab1c38bba703a4c9c635ca6c254b58cf09cbcc7c2030f665802b1d02fba91515d215b52c"}, @INET_DIAG_REQ_BYTECODE={0x83, 0x1, "9814cd8d6ab4b49c696d81526c0305fdb07a694e28bfed43d52eac0b1d0b4a264bca84613d4b1a3f833b87bd324bfaca5aabddde0cf698d3ff0dde9c1bee6f59c1f3e99069984c2c88bf5f24f2ffb1d39fd42070a5fa505fb2fdd72150a84beb93b71f4c024b379cef0605d256fbdbb722a096abc942fc46d2fa1d3b5cd376"}, @INET_DIAG_REQ_BYTECODE={0xf6, 0x1, "a61a445cb9954bcf7599455d3f4d58022d3824ce8af42814fcd844834022ba683b753543080a9af8395f2b5e08b61307a05450e1a427ed588839a673774b85b9883cb94147cef1cf3bd1d43e22b110d003db3d39fc8806eaf7567e5af391755ec0c77479f8bcee63c34814ab6bbda41593aa5f9d9f0c15a252a54fae9bf6779bb4a28a874b91d361ebf864b204ad8f96cdbb741f573354df57f2d925c03c0c21e1664b4f56fd207a8ce0fc8b4c6104443ddb5b234939b9d66f5b9b86d4cefe9dc06c1b7eb56b1f8ad5a0ef871d747db1a2816d435e4e029244030869ce5cf2e0d68bfac93df7932224ff349c4fb25e91f11b"}, @INET_DIAG_REQ_BYTECODE={0xd7, 0x1, "926603818b440e668f82a46b1c08a34ba98faeef0feccd69e42cf243148f546a78473dba0ce74f9a7661f4ba9103c11d85c4e5d9b836617375060484fd423a865e8aef5731a42c1b731afe2ae82e1a5c1407be62a60a732075c62490441a81a163b36d097b7ab99ce2876b8f3b5766f0616cfe68451787da939a6f08b066f88f99c4a7935285c4adde0a580ac32986c660bfb101ce5a82a803f764f809c3ca385a01ffdb739beb805e0ea1d5c1124b55891d505d3be6e95ecdfe9f07f759a2e940c2ab68b197bad34d09a8d74379301e569a79"}, @INET_DIAG_REQ_BYTECODE={0x73, 0x1, "d521486fd89f75d654380455aade32653eeadbc4b0ba069741b382d21d85b1ce1a60287649159f6d4a4bfe20b1efaaab309f51436a3483ce5dc0af5e6a5104fe6281b149b82392ba0351a1d8a05665b511b4b2a23881531c4ce612da7c8d4aebd613f292b254696970589df80539ac"}]}, 0x340}, 0x1, 0x0, 0x0, 0x2400c000}, 0x1) 844.520566ms ago: executing program 4 (id=19882): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000020000000900030073797a320000000009000100"], 0xc4}}, 0x0) 599.950248ms ago: executing program 3 (id=19883): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x1000) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0xa, 0xb, 0x42, 0x3e, 0x42}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f0000000180)}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r1, 0xffffffffffffffff}, &(0x7f0000000140), &(0x7f0000000280)}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x300}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x8, 0x1005, &(0x7f00000014c0)=""/4101, 0x0, 0xc}, 0x94) 598.187403ms ago: executing program 0 (id=19884): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x64}, 0x1, 0x0, 0x0, 0x94}, 0x24000000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000480000000100000a88000000090a050000000000000000000a0000040900020073797a310000000008000a40fffffffc0900010073797a3100000000080005400000000b44001280201101800a00010071756f7461000000100002800c0001400000000000000080140001800c000100636f756e746572000400028001000180080001006c6f670008000340000001"], 0xb0}, 0x1, 0x0, 0x0, 0x4044050}, 0x40) 597.717066ms ago: executing program 2 (id=19885): setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, &(0x7f0000000440)=@ccm_128={{0x304}, "80e6be7d21d5ab22", "99652368357f8adf9def72feea225052", "5446a72c", "f83f8e4f445ba0bc"}, 0x28) r0 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt(r0, 0x84, 0x14, &(0x7f00000002c0)="1a00000002000000", 0x8) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000440)="9f000000120081ae08060cdc030ec0007f03e3f70000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7811e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08123d00020008000140010000009bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff55e461247604821d35c86ee54bbab3eaf8956e2ca426", 0x9f}], 0x1}, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x3c8, 0x298, 0x0, 0x0, 0x200, 0x200, 0x368, 0x368, 0x368, 0x368, 0x368, 0x6, 0x0, {[{{@ip={@multicast1, @dev={0xac, 0x14, 0x14, 0x13}, 0xff, 0xff000000, 'pim6reg1\x00', 'bridge_slave_0\x00', {}, {0xff}, 0x88, 0x3}, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x368}}, {{@ip={@private=0xa010100, @local, 0x0, 0x0, 'vcan0\x00', 'veth0_virt_wifi\x00', {}, {0xff}, 0x0, 0x0, 0x3}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [], 0x1}, {0x0, [0x0, 0x0, 0x0, 0x2, 0x4]}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0xff, 0xff, 'dvmrp0\x00', 'veth1_virt_wifi\x00', {}, {0xff}, 0x5c, 0x2}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@private=0xa010102, @multicast1, 0x0, 0xffffff00, 'syzkaller0\x00', 'bond0\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@remote, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x428) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r2, 0x84, 0x21, &(0x7f0000000080), &(0x7f0000000100)=0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x8000, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r3, 0x0, 0x480, &(0x7f00000023c0), &(0x7f0000002400)=0x40) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETSNDBUF(r4, 0x400454d4, &(0x7f0000000380)=0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast}) poll(&(0x7f0000000240)=[{r4, 0x86}], 0x1, 0x9) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r6, 0x29, 0x3a, &(0x7f0000000040)=0x8, 0x4) r7 = accept4$inet6(r3, &(0x7f0000000280)={0xa, 0x0, 0x0, @remote}, &(0x7f00000002c0)=0x1c, 0x80000) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001a80)=@newqdisc={0x838, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0x7, 0xfff3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x80c, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0xdc, 0x9, 0x7, 0x4, 0x5, 0x1, 0xff5f, 0x3, 0x9, 0x1, 0x4, 0x3, 0x5, 0x120, 0x800, 0x9, 0x8, 0xfffffff9, 0x4, 0x3, 0x400, 0x4, 0x101, 0xa, 0x0, 0x10, 0x1, 0x0, 0x193, 0x3, 0xe6e, 0xff, 0x0, 0xef2ff58, 0x5, 0x4, 0x6, 0x780000, 0x0, 0x8, 0xfffffffb, 0x5, 0x3d8d, 0x5, 0x6, 0x101, 0x2, 0x8, 0x7, 0x1, 0x5, 0xffffffff, 0x6, 0x0, 0x798, 0xffffff00, 0x1e18000, 0x4, 0x2ca, 0x4, 0x6, 0xf6d9, 0x1, 0x5, 0x5, 0x9, 0x1, 0x7fffffff, 0x8000, 0x0, 0x8, 0x7ff, 0x1ff, 0x2, 0x6, 0x1000, 0x6, 0x34d6, 0x5, 0x3, 0xfffffff1, 0xc57, 0x8, 0x9, 0x29a, 0xd4, 0x10000, 0xffff, 0x401, 0x5, 0x7, 0x5, 0x9261, 0x9000000, 0x0, 0x7, 0x9, 0x9, 0x3b, 0x9, 0x9, 0x40, 0x71, 0x4, 0x1400, 0xdfb, 0x0, 0x2, 0x3, 0x4, 0x2, 0x0, 0x200, 0x6, 0x933, 0x83f0, 0x9, 0x8, 0x1, 0x5, 0x6, 0x4, 0xf, 0xc56a, 0xc5c4, 0x0, 0x81, 0xd87f, 0x8, 0x5e57, 0xb, 0x1, 0x1, 0x6, 0x51f3, 0x8000, 0x7fff, 0x100, 0x50000000, 0x1, 0x1, 0xf4, 0x4, 0x5, 0xc, 0x8, 0x1, 0x3ff, 0xee, 0x71, 0xffff, 0xa, 0x87a9, 0xa, 0x4, 0x6, 0x6, 0xffff, 0x9, 0x6, 0x5, 0x3, 0x1, 0x8, 0x5033, 0x25f, 0x3, 0x28, 0x5, 0x5, 0x3, 0x0, 0x8001, 0x6, 0x10000, 0xfffeffff, 0x7bbf, 0x3ff, 0x9, 0x4, 0x1, 0x2c9, 0x8, 0x2, 0xf3, 0x0, 0x2, 0xe8, 0x7, 0x8, 0x2, 0x3ff, 0x8, 0x10001, 0x8, 0xd0, 0x40000008, 0x2, 0x3, 0x7, 0x1, 0x9, 0x7, 0x10, 0x2, 0xfffffff0, 0x41, 0x404, 0x0, 0x1, 0x200, 0x3, 0x2, 0x200, 0x40, 0x7, 0x4, 0x78ca0424, 0x8, 0x9, 0x3, 0x101, 0x0, 0x10000, 0x8, 0x6eb, 0x0, 0x8, 0xffff8000, 0x2, 0x45, 0x97d, 0x1, 0xc062, 0x9, 0x4, 0x2, 0x4, 0x8f, 0x2676, 0xe, 0x6, 0x4, 0x3, 0x1, 0x2, 0x2, 0x9, 0x9, 0x2, 0x1, 0x7, 0x7, 0xd, 0x0, 0x8]}, @TCA_TBF_PTAB={0x404, 0x3, [0x0, 0x6, 0x6, 0x6, 0x76de, 0xfff, 0x9, 0x1, 0x5, 0x9, 0x9, 0xb4a, 0x40db, 0x3, 0xfffffff7, 0xf, 0x1, 0x7fffffff, 0x0, 0x3, 0x4, 0x3, 0x9, 0x8001, 0xc, 0x6123, 0x9, 0x6, 0x9, 0xffff0000, 0x9, 0x9, 0x6, 0xfff, 0x7ff, 0xfffffff8, 0x1, 0xbb, 0x2, 0x4, 0x8, 0x0, 0x800, 0xc, 0x8, 0x4, 0x1ff, 0x3ff, 0xffffffa3, 0x8, 0x9, 0xd, 0x9, 0x101, 0x6, 0x6, 0x394, 0x2, 0x8, 0xe0, 0x3, 0xfffffffa, 0x800, 0x2, 0x5, 0x66, 0x0, 0x6, 0xc0000000, 0x8, 0x32, 0x5, 0x3, 0x7fff, 0xffff7fff, 0x9, 0x9, 0x2c, 0x9, 0x1bf4, 0x661, 0x8, 0x9, 0x400, 0x1000, 0x0, 0x6, 0x4, 0xfffffff6, 0x6, 0x849b, 0x7, 0x36cd, 0x5, 0x4, 0x888, 0x2, 0x9, 0x2, 0xfff, 0xec3, 0x1, 0x7, 0x8, 0x4, 0x80, 0x101, 0x5, 0x3, 0x2, 0x10001, 0xfffffffa, 0xc89, 0xca53, 0x3, 0x2, 0x5, 0x5, 0xc8, 0xd40, 0xc85a, 0x7, 0x0, 0x8, 0x58, 0x4, 0x10, 0xffffff00, 0x24c00, 0x1, 0xffff4f22, 0x7, 0x67, 0xe, 0x2, 0x7, 0x1ff, 0xfffffffe, 0x9, 0x6, 0x8, 0x9, 0x3, 0x4, 0x40000004, 0x9, 0x1, 0xf, 0x4, 0x80000000, 0x5, 0x7, 0xfffffff9, 0x7, 0x4, 0x3f, 0x3, 0x5d23, 0x3, 0x9, 0x2a, 0xff9, 0x8, 0x9, 0xffe3, 0x5, 0x3, 0x50000000, 0x1, 0x6, 0x11, 0x4, 0x11, 0x1, 0x1, 0xe618, 0xd, 0x8cf9, 0x6, 0x6, 0x4, 0x2, 0x5, 0x81, 0x8, 0x10001, 0xe8, 0x5, 0x6, 0x7, 0x2, 0x9, 0x9, 0x0, 0x2, 0x800, 0x3, 0x1, 0x80000000, 0x1, 0x3, 0x7, 0x7fffffff, 0x2e, 0x2a0, 0x8, 0x3, 0x8, 0x7ff, 0xf3ad, 0x8, 0x8, 0x7, 0x5, 0x4, 0x58, 0x7f, 0x2, 0x401, 0x5, 0xce61, 0xb40, 0x4, 0xd, 0x9e1, 0x3, 0x777b379a, 0xffffff00, 0x7, 0xc, 0x8, 0x28, 0x6, 0x4f, 0x100, 0x9, 0x7, 0x6, 0x7f, 0x5, 0x9, 0x5, 0x24, 0x3, 0xb, 0x6, 0x1, 0x37, 0x4, 0x2, 0x1, 0x4, 0x9, 0x8, 0x1, 0xe3a]}]}}]}, 0x838}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$inet6(r7, &(0x7f0000001a40)={&(0x7f0000000300)={0xa, 0x4e23, 0x3, @mcast2, 0xf}, 0x1c, &(0x7f0000001780)=[{&(0x7f0000000340)}, {&(0x7f0000000440)="bd5c6cdf82d948126345607a9b2f1a39cf6deba167d287b3f0144c66ec088273c1d67bd443e170454623c8d3c3e89ff1b7ce5bdfe6c2f838d445abf0e2ee3f15ce5fc3b69aba2063bb394cde1b5f2bda40b441f031a074fa9efc69dafc45280c966f0085f1368529699ff810fba494c7ee4af321198eb73f3becad03954c6bae35f09b121afa354ff15d5ff9a4e2f485f8b67279fc6659737663b2ab78d901793ef10a97eae647f28594bec166fec449d1f6e900ec82dfada5fddfbe6fa151c998e8007b7fb813a3f7f1d851328911a9201ce2981d", 0xd5}, {&(0x7f0000000540)="3266b6c57d8cb49881ac5c6513810ab56e08d5f8fa7c789d1489fce66256453067138e2c7da5eca2a930f77fa86b888f941be2ea7ad1ffb7df46560ba30a40c4b7d2aad7ea45014da11e6c314178eb62d67732853c311942666bb6498ce4c1bc242038839a79914af36ec7c21aaccffb95db1e8423854fa8f56226e64168395a20d6c06eb080129e7fbb391ea9c4c2e8506269a40945db62da372edf424201ad6fa035b9fc8b07e779487a6ce299b1ed0c7b609131df6e368fe3cb2e8aebce0640012a981462da29fe188177a6f649c585fec631b79dadba576d17342894d032", 0xe0}, {&(0x7f0000000640)="72d41b00876da128c2b7e4eb90ead5568a30969b774850eb33148999c8f4aef7576b6391007ef751c91fb28531d1738eb15b13f1765c5417459cfd007f2080adc1f1061a602fde3bbd90d8f4678195288551d124ca80056af3b03c31d29c75275ea40ec9fe0a49f99292eab3727b", 0x6e}, {&(0x7f00000006c0)="ee6d87437f68d816730886ef05c22e1e51e460aded2612edf009628fa178496e9bbe0936e0d8b7cffe8a8e433538ffc557825a0c046142a9c08a7a9c9f80505b9ecbb9e10c6b5da1f03077b2fc9dc956ac8cb89c38550b71c1b28848d03773f9a19b7cbeb5d528612fdad28633b86c427f71f43d95529a66e8aa4e893f8cdf46f7403d1bdd3f08b3181bf1e7c2efd9c277dfa9442957f3096badbd39d1e273691768e3efd160c242506f23277c97d9ecd79b45d168e362062d4a", 0xba}, {&(0x7f0000000780)="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", 0x1000}], 0x6, &(0x7f0000001800)=ANY=[@ANYBLOB="980000000000000029000000390000005e10010000000000000000000000000000000000000000000000000000000000000000000000000020010000000000000000000000000002ff020000000000000000000000000001ff0200000000000000000000000000011c020000000000000000000000000001fc010000000000000000000000000001fe8000000000000000000000000000aa2400000000bbb03fbad7000790889300", @ANYRES32=r9, @ANYBLOB="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"], 0x220}, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000000)={'netdevsim0\x00', &(0x7f00000003c0)=@ethtool_coalesce={0x33, 0x0, 0x1, 0x0, 0xfffffffd, 0x2, 0x80000000, 0xfffffffe, 0xffff2ee0, 0xfffffffe, 0x8, 0x4000004, 0x0, 0x40000044, 0x0, 0x80000001, 0x0, 0x7, 0x20002, 0xffffffff, 0x2, 0x43, 0x3ff}}) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r2, 0x84, 0x21, &(0x7f00000000c0)=0xfdc, 0x4) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000003c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="0100fffffffb00000000010000000c0005001700000000000000100007800c00018008000100", @ANYRES32=r12, @ANYBLOB="0c0002008000000000004800"], 0x3c}}, 0x20000000) 512.568312ms ago: executing program 4 (id=19886): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0x1c, &(0x7f00000002c0)=ANY=[@ANYBLOB="1808000014000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca900000000000035090100200000009500000000000000b702000000000000739a3ffe00000000b50a0200550d0000639af8ff00000000bf8600000000000007080000fffdffffbfa4000000000000070400182200"/132, @ANYRES32, @ANYBLOB="0000000000000000b6090300080000004608f0ff760000007f9800000000000056080000020000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 410.598121ms ago: executing program 0 (id=19887): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc04, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xffff, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_TARGET={0x8, 0x8, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040a1}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r6, &(0x7f0000000240)="80", 0x12, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r5, 0x1, 0xd8, 0x6, @broadcast}, 0x14) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r7, 0x84, 0x1, &(0x7f0000000100)={0x0, 0x9, 0xc5, 0x8000000, 0x9}, 0x14) 339.901809ms ago: executing program 3 (id=19888): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x8044) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x1, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000080000008091117c00000000009500"], &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) clock_gettime(0x0, &(0x7f0000000000)) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=@newlink={0x28, 0x10, 0x801, 0xfffffffd, 0x8000000, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20421}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x8024) readv(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000001b80)=""/4096, 0x1000}], 0x1) socket(0x23, 0x80000, 0x5ca5) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="40000000090601020000000000000000000000000900020073797a31000000000500010007000000180007800c00018008000140fffffffe0500030008000000f51a8d02ed815caa50b59af5b1967772f03d8b143159dbff4120a73f32080119fd3d7adf86afde912f0c54fabb6503b66cf6acd5af74d0af0c24b1f1057b6c156fb0556ab69e31f1"], 0x40}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) recvmsg(0xffffffffffffffff, &(0x7f0000001700)={0x0, 0x0, 0x0}, 0x0) 315.786947ms ago: executing program 4 (id=19889): socket$packet(0x11, 0x3, 0x300) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000100)={@dev={0xfe, 0x80, '\x00', 0xa}}) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r1, 0x1000) getsockopt$inet6_mptcp_buf(r1, 0x11c, 0x2, &(0x7f0000000100)=""/222, &(0x7f0000000000)=0x80fe) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000280)=0x4) ioctl$PPPIOCSMAXCID(r2, 0x40047451, &(0x7f0000000200)=0x3) ioctl$PPPIOCSFLAGS1(r2, 0x40047459, &(0x7f0000000100)=0x2000004) pwritev(r2, &(0x7f00000005c0)=[{&(0x7f0000000040)="00213ae50deba8cd1caf190e1ae69f52cf98f3a1309b", 0x16}], 0x1, 0x807, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6000ed6a000b2c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa2c000003"], 0x0) r3 = socket$inet6(0xa, 0x3, 0x5) close(0xffffffffffffffff) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x95af3000) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="1400000010000100f7000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000144c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d10300000c000440000000000000000114000000110001"], 0xb8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c00018006000100d1a3a700080003400000000114000000110001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x9c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x6c, 0x2, {{}, [@TCA_NETEM_LOSS={0x30, 0x2, 0x0, 0x1, [@NETEM_LOSS_GE={0x18}, @NETEM_LOSS_GI={0x18}]}, @TCA_NETEM_RATE={0x4, 0xd}, @TCA_NETEM_CORRUPT={0xc, 0x2}]}}}]}, 0x9c}}, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f00000000c0)={@remote, 0x800, 0x0, 0x0, 0x9}, 0x20) setsockopt$inet6_int(r3, 0x29, 0x1000000000021, &(0x7f0000000000)=0xffffffc3, 0x4) sendmmsg(r3, &(0x7f0000000500)=[{{&(0x7f0000000380)=@l2tp6={0xa, 0x0, 0x7080000, @mcast1, 0x4, 0x1}, 0x80, 0x0}}], 0x1, 0x4040000) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000480)=ANY=[@ANYBLOB="200000005e000116a8c51571e67762000c030000010000000000008004000180"], 0x20}], 0x1}, 0x8000) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r8, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) 226.111058ms ago: executing program 1 (id=19890): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x220c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x3) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x1780) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x7) socket$inet_tcp(0x2, 0x1, 0x0) r6 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$DCCPDIAG_GETSOCK(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c00000012000301000000000000000000009db700000000000001000400000000000000000000000ec00000000000000000000000000000691d0f76e77044d1eb94e56239e4"], 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) 0s ago: executing program 3 (id=19891): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000c00)=ANY=[@ANYBLOB="14000000100004000000001d000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c00038008000140000000100800024000"], 0xfc}}, 0x0) kernel console output (not intermixed with test programs): ulticast mode [ 1593.518261][ T36] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1593.526484][T19345] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1593.553150][T31882] bridge_slave_0: entered promiscuous mode [ 1593.565435][ T36] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1593.590978][T32056] 8021q: adding VLAN 0 to HW filter on device bond28 [ 1593.615554][ T36] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1593.628429][T32058] bond25: (slave .`): Removing an active aggregator [ 1593.636961][T32058] bond25: (slave .`): Releasing backup interface [ 1593.652889][T32058] 8021q: adding VLAN 0 to HW filter on device .` [ 1593.668894][T32058] bond28: (slave .`): Enslaving as a backup interface with an up link [ 1593.698047][T31882] bridge0: port 2(bridge_slave_1) entered blocking state [ 1593.709167][T31882] bridge0: port 2(bridge_slave_1) entered disabled state [ 1593.723392][T31882] bridge_slave_1: entered allmulticast mode [ 1593.734671][T31882] bridge_slave_1: entered promiscuous mode [ 1593.864652][T31882] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1593.905710][T32076] FAULT_INJECTION: forcing a failure. [ 1593.905710][T32076] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1593.917895][T31882] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1593.920428][T32074] netlink: 20 bytes leftover after parsing attributes in process `syz.4.18848'. [ 1593.972752][T32076] CPU: 1 UID: 0 PID: 32076 Comm: syz.2.18849 Not tainted syzkaller #0 PREEMPT(full) [ 1593.972776][T32076] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1593.972786][T32076] Call Trace: [ 1593.972794][T32076] [ 1593.972802][T32076] dump_stack_lvl+0xe8/0x150 [ 1593.972828][T32076] should_fail_ex+0x412/0x560 [ 1593.972852][T32076] _copy_from_user+0x2d/0xb0 [ 1593.972873][T32076] get_user_ifreq+0x6b/0x180 [ 1593.972895][T32076] sock_ioctl+0x704/0x7f0 [ 1593.972917][T32076] ? __pfx_sock_ioctl+0x10/0x10 [ 1593.972940][T32076] ? __fget_files+0x3a0/0x420 [ 1593.972959][T32076] ? __fget_files+0x2a/0x420 [ 1593.972981][T32076] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1593.973003][T32076] ? __pfx_sock_ioctl+0x10/0x10 [ 1593.973023][T32076] __se_sys_ioctl+0xfc/0x170 [ 1593.973046][T32076] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1593.973064][T32076] do_syscall_64+0x174/0x580 [ 1593.973080][T32076] ? trace_irq_disable+0x3b/0x140 [ 1593.973102][T32076] ? clear_bhb_loop+0x40/0x90 [ 1593.973123][T32076] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1593.973139][T32076] RIP: 0033:0x7f361179ce59 [ 1593.973156][T32076] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1593.973168][T32076] RSP: 002b:00007f36125f1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1593.973186][T32076] RAX: ffffffffffffffda RBX: 00007f3611a15fa0 RCX: 00007f361179ce59 [ 1593.973197][T32076] RDX: 0000200000000000 RSI: 00000000000089f0 RDI: 0000000000000004 [ 1593.973207][T32076] RBP: 00007f36125f1090 R08: 0000000000000000 R09: 0000000000000000 [ 1593.973217][T32076] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1593.973226][T32076] R13: 00007f3611a16038 R14: 00007f3611a15fa0 R15: 00007ffd1c23cdd8 [ 1593.973252][T32076] [ 1594.101474][T31882] team0: Port device team_slave_0 added [ 1594.187635][ T5640] Bluetooth: hci5: command tx timeout [ 1594.195507][T32074] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1594.302720][T31882] team0: Port device team_slave_1 added [ 1594.480934][T31882] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1594.520205][T31882] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1594.535997][T32096] can: request_module (can-proto-0) failed. [ 1594.575703][T31882] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1594.600896][T31882] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1594.612353][T31882] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1594.667334][T31882] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1594.942192][T31882] hsr_slave_0: entered promiscuous mode [ 1594.953901][T31882] hsr_slave_1: entered promiscuous mode [ 1594.970299][T31882] debugfs: 'hsr0' already exists in 'hsr' [ 1594.970689][T32114] netlink: 68 bytes leftover after parsing attributes in process `syz.0.18859'. [ 1594.981204][T31882] Cannot create hsr debugfs directory [ 1595.432879][T32130] netlink: 'syz.4.18861': attribute type 10 has an invalid length. [ 1595.923358][T31882] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1595.961497][T31882] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1596.251922][ T5640] Bluetooth: hci5: command tx timeout [ 1596.320031][T31882] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1596.354613][T31882] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1596.576441][T32168] netlink: 'syz.2.18871': attribute type 1 has an invalid length. [ 1596.692771][T31882] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1596.722583][T31882] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1596.779357][T32180] netlink: 100 bytes leftover after parsing attributes in process `syz.0.18874'. [ 1596.822123][T32180] netlink: 40 bytes leftover after parsing attributes in process `syz.0.18874'. [ 1597.120907][T31882] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1597.158178][T31882] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1597.237528][T32204] xt_ecn: cannot match TCP bits for non-tcp packets [ 1597.737504][T32227] netlink: 'syz.3.18891': attribute type 1 has an invalid length. [ 1597.854150][T32227] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1597.919470][T32230] netlink: 8 bytes leftover after parsing attributes in process `syz.4.18892'. [ 1597.942699][T32234] bond5: (slave bond0): Removing an active aggregator [ 1597.972947][T32234] bond5: (slave bond0): Releasing backup interface [ 1597.998533][T32234] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1598.019828][T32234] bond7: (slave bond0): Enslaving as a backup interface with an up link [ 1598.069152][T32242] netlink: 'syz.4.18892': attribute type 1 has an invalid length. [ 1598.084278][T32237] pim6reg: entered allmulticast mode [ 1598.302245][T31882] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1598.314463][T31882] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1598.318850][T10782] net_ratelimit: 185 callbacks suppressed [ 1598.318872][T10782] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1598.324909][T31882] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1598.344897][ T5640] Bluetooth: hci5: command tx timeout [ 1598.369548][T31882] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1598.381282][ T36] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1598.385284][T31882] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1598.427581][T10782] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1598.428298][T31882] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1598.468868][T31882] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1598.476466][T10782] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1598.517621][T10782] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1598.523759][T31882] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1598.560077][T10781] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1598.605166][T10781] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1598.662647][T10782] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1598.704659][T32269] netlink: 8 bytes leftover after parsing attributes in process `syz.3.18898'. [ 1598.718696][T10782] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1598.727554][T28167] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1598.752408][T32269] macsec1: entered promiscuous mode [ 1598.758397][T32269] macsec1: entered allmulticast mode [ 1598.789455][T32271] xt_ecn: cannot match TCP bits for non-tcp packets [ 1598.914788][T32273] netlink: 44 bytes leftover after parsing attributes in process `syz.4.18901'. [ 1598.927483][T31882] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1598.942324][T32277] netlink: 8 bytes leftover after parsing attributes in process `syz.0.18904'. [ 1598.979965][T32277] macvlan1: entered allmulticast mode [ 1599.134534][T32287] netlink: 'syz.2.18905': attribute type 10 has an invalid length. [ 1599.164311][T31882] 8021q: adding VLAN 0 to HW filter on device team0 [ 1599.187472][T32287] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1599.204668][T32287] team0: Port device netdevsim1 added [ 1599.279354][T10782] bridge0: port 1(bridge_slave_0) entered blocking state [ 1599.286626][T10782] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1599.363867][T30613] bridge0: port 2(bridge_slave_1) entered blocking state [ 1599.371127][T30613] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1599.429213][T32305] netlink: 'syz.4.18910': attribute type 11 has an invalid length. [ 1599.680819][T32316] tipc: Started in network mode [ 1599.690773][T32316] tipc: Node identity 720f39355a12, cluster identity 4711 [ 1599.705820][T32316] tipc: Enabled bearer , priority 0 [ 1599.723151][T32318] tipc: Enabling of bearer rejected, already enabled [ 1599.747536][T32316] syzkaller0: entered promiscuous mode [ 1599.753657][T32316] syzkaller0: entered allmulticast mode [ 1599.836470][ T5865] IPVS: starting estimator thread 0... [ 1599.847147][T32316] tipc: Resetting bearer [ 1599.854569][T32327] netlink: 16 bytes leftover after parsing attributes in process `syz.3.18916'. [ 1599.920082][T32316] tipc: Disabling bearer [ 1599.936348][T32336] netlink: 8 bytes leftover after parsing attributes in process `syz.4.18919'. [ 1599.957257][T32336] macsec3: entered promiscuous mode [ 1599.962594][T32336] macsec3: entered allmulticast mode [ 1599.966062][T32330] IPVS: using max 31 ests per chain, 74400 per kthread [ 1599.986448][T32334] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1600.100894][T32344] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 1600.757580][T31882] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1601.027597][T31882] veth0_vlan: entered promiscuous mode [ 1601.102985][T32388] netlink: 4768 bytes leftover after parsing attributes in process `syz.4.18933'. [ 1601.112706][T31882] veth1_vlan: entered promiscuous mode [ 1601.429814][T31882] veth0_macvtap: entered promiscuous mode [ 1601.500176][T31882] veth1_macvtap: entered promiscuous mode [ 1601.603022][T31882] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1601.638187][T31882] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1601.722992][T30613] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1601.739607][T30613] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1601.754094][T30613] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1601.784548][T30613] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1601.811540][T32415] FAULT_INJECTION: forcing a failure. [ 1601.811540][T32415] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1601.825962][T32415] CPU: 1 UID: 0 PID: 32415 Comm: syz.4.18941 Not tainted syzkaller #0 PREEMPT(full) [ 1601.825990][T32415] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1601.826000][T32415] Call Trace: [ 1601.826008][T32415] [ 1601.826015][T32415] dump_stack_lvl+0xe8/0x150 [ 1601.826040][T32415] should_fail_ex+0x412/0x560 [ 1601.826062][T32415] _copy_from_iter+0x1d3/0x1670 [ 1601.826083][T32415] ? rcu_is_watching+0x15/0xb0 [ 1601.826107][T32415] ? __pfx__copy_from_iter+0x10/0x10 [ 1601.826127][T32415] ? netlink_sendmsg+0x650/0xb40 [ 1601.826144][T32415] ? skb_put+0x11b/0x210 [ 1601.826161][T32415] netlink_sendmsg+0x6c0/0xb40 [ 1601.826183][T32415] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1601.826199][T32415] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1601.826222][T32415] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1601.826241][T32415] ____sys_sendmsg+0x972/0x9f0 [ 1601.826255][T32415] ? __might_fault+0xaf/0x130 [ 1601.826275][T32415] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1601.826294][T32415] ? import_iovec+0x73/0xa0 [ 1601.826318][T32415] ___sys_sendmsg+0x2a5/0x360 [ 1601.826331][T32415] ? __lock_acquire+0x6b5/0x2cf0 [ 1601.826346][T32415] ? __pfx____sys_sendmsg+0x10/0x10 [ 1601.826383][T32415] ? __fget_files+0x2a/0x420 [ 1601.826400][T32415] ? __fget_files+0x3a0/0x420 [ 1601.826427][T32415] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1601.826447][T32415] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1601.826470][T32415] ? __pfx_ksys_write+0x10/0x10 [ 1601.826500][T32415] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1601.826517][T32415] do_syscall_64+0x174/0x580 [ 1601.826533][T32415] ? trace_irq_disable+0x3b/0x140 [ 1601.826555][T32415] ? clear_bhb_loop+0x40/0x90 [ 1601.826574][T32415] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1601.826589][T32415] RIP: 0033:0x7fc7c419ce59 [ 1601.826606][T32415] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1601.826619][T32415] RSP: 002b:00007fc7c4fa8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1601.826636][T32415] RAX: ffffffffffffffda RBX: 00007fc7c4415fa0 RCX: 00007fc7c419ce59 [ 1601.826647][T32415] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000006 [ 1601.826656][T32415] RBP: 00007fc7c4fa8090 R08: 0000000000000000 R09: 0000000000000000 [ 1601.826663][T32415] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1601.826670][T32415] R13: 00007fc7c4416038 R14: 00007fc7c4415fa0 R15: 00007ffeb8e98748 [ 1601.826689][T32415] [ 1602.264372][T10782] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1602.300133][T10782] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1602.361276][T32427] netlink: 8 bytes leftover after parsing attributes in process `syz.4.18945'. [ 1602.408897][T10782] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1602.430333][T32424] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1602.440486][T10782] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1602.473382][T32431] sock: sock_timestamping_bind_phc: sock not bind to device [ 1602.504925][T32424] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1602.579901][T32428] syz_tun: entered promiscuous mode [ 1602.603074][T32428] netlink: 8 bytes leftover after parsing attributes in process `syz.2.18944'. [ 1602.621013][T32433] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.18946'. [ 1602.645287][T32431] Bluetooth: MGMT ver 1.23 [ 1602.651541][T32435] netlink: 'syz.3.18947': attribute type 13 has an invalid length. [ 1602.676809][T32435] netlink: 'syz.3.18947': attribute type 17 has an invalid length. [ 1602.750024][T32438] netlink: 'syz.4.18948': attribute type 1 has an invalid length. [ 1602.803537][T32444] netlink: 'syz.2.18949': attribute type 29 has an invalid length. [ 1602.954826][T32434] bridge0: port 2(bridge_slave_1) entered disabled state [ 1602.962256][T32434] bridge0: port 1(bridge_slave_0) entered disabled state [ 1603.335194][T30613] net_ratelimit: 154 callbacks suppressed [ 1603.335214][T30613] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1603.389355][T30613] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1603.428123][T10774] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1603.455242][T10774] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1603.496762][T10774] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1603.526433][T10774] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1603.557777][T32434] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1603.565900][ T12] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1603.585521][T10774] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1603.601045][T32434] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1603.625747][ T12] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1603.658125][ T12] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1604.076583][T32435] bond7: (slave bond0): speed changed to 0 on port 1 [ 1604.083606][T32435] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1604.097715][T32435] 8021q: adding VLAN 0 to HW filter on device team0 [ 1604.109628][T32435] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1604.132861][T32435] bridge0: port 1(bridge_slave_0) entered blocking state [ 1604.140026][T32435] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1604.150900][T32435] bridge0: port 2(bridge_slave_1) entered blocking state [ 1604.158013][T32435] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1604.181511][T32435] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1604.191495][T32435] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1604.210253][T32435] veth1_vlan: left promiscuous mode [ 1604.218372][T32435] veth0_vlan: left promiscuous mode [ 1604.224705][T32435] veth0_vlan: entered promiscuous mode [ 1604.236778][T32435] veth1_vlan: entered promiscuous mode [ 1604.248378][T32435] veth1_macvtap: left promiscuous mode [ 1604.254750][T32435] veth0_macvtap: left promiscuous mode [ 1604.262154][T32435] veth0_macvtap: entered promiscuous mode [ 1604.269885][T32435] veth1_macvtap: entered promiscuous mode [ 1604.287817][T32435] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1604.296488][T32435] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1604.304423][T32435] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1604.313127][T32435] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1604.323389][T32435] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1604.342263][T32435] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1604.353476][T32435] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1604.363120][T32435] ip6gre2: left allmulticast mode [ 1604.371393][T32435] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1604.380032][T32435] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1604.391443][T32435] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1604.400696][T32435] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1604.409226][T32435] virt_wifi0: entered promiscuous mode [ 1604.414703][T32435] virt_wifi0: entered allmulticast mode [ 1604.420986][T32435] macsec1: left promiscuous mode [ 1604.426717][T32435] macsec1: left allmulticast mode [ 1604.431786][T32435] virt_wifi0: left allmulticast mode [ 1604.440603][T32438] workqueue: Failed to create a rescuer kthread for wq "bond30": -EINTR [ 1604.448834][T32445] bond28: (slave .`): Removing an active aggregator [ 1604.466655][T32445] bond28: (slave .`): Releasing backup interface [ 1604.481326][T10782] bond7: (slave bond0): link status definitely up, 40000 Mbps full duplex [ 1604.493877][T10782] bond7: active interface up! [ 1604.560501][T32479] wg1: entered allmulticast mode [ 1604.650951][T32478] ip6tnl0 speed is unknown, defaulting to 1000 [ 1604.749074][T10774] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1604.962015][T32504] netlink: 44 bytes leftover after parsing attributes in process `syz.1.18966'. [ 1605.018793][T16943] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1605.033817][T16943] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1605.043690][T16943] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1605.061239][T16943] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1605.080242][T16943] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1605.258906][T32513] netlink: 20 bytes leftover after parsing attributes in process `syz.3.18969'. [ 1605.272741][T32515] netlink: 24 bytes leftover after parsing attributes in process `syz.1.18970'. [ 1605.310624][T32513] netlink: 324 bytes leftover after parsing attributes in process `syz.3.18969'. [ 1605.353200][T32513] netlink: 12 bytes leftover after parsing attributes in process `syz.3.18969'. [ 1605.690878][T32529] netlink: 12 bytes leftover after parsing attributes in process `syz.1.18973'. [ 1605.736441][T32531] xt_ecn: cannot match TCP bits for non-tcp packets [ 1606.082820][T22352] bond15: (slave syz_tun): Removing an active aggregator [ 1606.103563][T22352] bond15: (slave syz_tun): Releasing backup interface [ 1606.331105][T32505] ip6tnl0 speed is unknown, defaulting to 1000 [ 1606.549407][T32555] netlink: 8 bytes leftover after parsing attributes in process `syz.2.18983'. [ 1606.594026][T32555] gretap0: entered promiscuous mode [ 1606.620918][T32555] macvlan2: entered allmulticast mode [ 1606.632063][T32555] gretap0: entered allmulticast mode [ 1606.760562][T32565] netlink: 'syz.3.18985': attribute type 10 has an invalid length. [ 1606.860456][T32565] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1606.907912][T32565] team0: Port device netdevsim1 added [ 1607.125789][ T5640] Bluetooth: hci0: command tx timeout [ 1607.413200][T32586] ip6t_srh: unknown srh invflags BA61 [ 1607.557532][T32588] netlink: 12 bytes leftover after parsing attributes in process `syz.3.18990'. [ 1607.612459][T32588] netdevsim netdevsim3: Direct firmware load for ./file0 failed with error -2 [ 1607.663575][T32588] netdevsim netdevsim3: Falling back to sysfs fallback for: ./file0 [ 1607.998917][T32601] netlink: 'syz.2.18995': attribute type 11 has an invalid length. [ 1608.073460][T32505] bridge0: port 1(bridge_slave_0) entered blocking state [ 1608.081424][T32505] bridge0: port 1(bridge_slave_0) entered disabled state [ 1608.089277][T32505] bridge_slave_0: entered allmulticast mode [ 1608.097650][T32505] bridge_slave_0: entered promiscuous mode [ 1608.107116][T32505] bridge0: port 2(bridge_slave_1) entered blocking state [ 1608.114349][T32505] bridge0: port 2(bridge_slave_1) entered disabled state [ 1608.121879][T32505] bridge_slave_1: entered allmulticast mode [ 1608.130759][T32505] bridge_slave_1: entered promiscuous mode [ 1608.178621][T32505] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1608.192271][T32505] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1608.301145][T32505] team0: Port device team_slave_0 added [ 1608.336674][T32505] team0: Port device team_slave_1 added [ 1608.346031][T30613] net_ratelimit: 164 callbacks suppressed [ 1608.346049][T30613] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1608.422818][T32617] netlink: 180 bytes leftover after parsing attributes in process `syz.3.19003'. [ 1608.426050][T30613] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1608.457220][T32619] netlink: 72 bytes leftover after parsing attributes in process `syz.2.19001'. [ 1608.469198][T32619] netlink: 12 bytes leftover after parsing attributes in process `syz.2.19001'. [ 1608.471430][T30613] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1608.478475][T32619] netlink: 4 bytes leftover after parsing attributes in process `syz.2.19001'. [ 1608.495097][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1608.520088][T32505] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1608.531273][T10777] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1608.540481][T32505] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1608.570868][T32505] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1608.587850][T10774] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1608.603040][T10774] bond10: (slave ip6gretap1): failed to get link speed/duplex [ 1608.633218][T32505] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1608.653423][T32505] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1608.698379][T32505] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1608.735510][T10774] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1608.765472][T30613] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1608.808071][T30613] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1608.832096][T32505] hsr_slave_0: entered promiscuous mode [ 1608.843942][T32637] netlink: 8 bytes leftover after parsing attributes in process `syz.2.19009'. [ 1608.844327][T32505] hsr_slave_1: entered promiscuous mode [ 1608.861377][T32505] debugfs: 'hsr0' already exists in 'hsr' [ 1608.867835][T32505] Cannot create hsr debugfs directory [ 1608.908057][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1608.933380][T32637] macvlan3: entered allmulticast mode [ 1609.021352][T32638] netlink: 28 bytes leftover after parsing attributes in process `syz.3.19008'. [ 1609.161236][T32642] bond1: Removing last ns target with arp_interval on [ 1609.205352][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1609.217524][ T5640] Bluetooth: hci0: command tx timeout [ 1609.527123][T32657] netlink: 'syz.1.19016': attribute type 11 has an invalid length. [ 1609.544624][T32659] netlink: 'syz.2.19017': attribute type 1 has an invalid length. [ 1609.668591][T32659] bond2: entered promiscuous mode [ 1609.684829][T32659] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1609.761137][T32662] bond2: (slave bridge1): making interface the new active one [ 1609.790823][T32662] bridge1: entered promiscuous mode [ 1609.803630][T32662] bond2: (slave bridge1): Enslaving as an active interface with an up link [ 1609.869639][T32677] netlink: 8 bytes leftover after parsing attributes in process `syz.3.19020'. [ 1610.177787][T32505] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1610.221239][T32505] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1610.349326][T32690] netlink: 'syz.0.19025': attribute type 3 has an invalid length. [ 1610.386307][T32693] bond3: Removing last ns target with arp_interval on [ 1610.520417][T32505] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1610.531395][T32505] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1610.669252][T32505] team0: Port device netdevsim1 removed [ 1610.719494][T32505] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1610.741814][T32505] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1610.760226][T32709] netlink: 'syz.2.19030': attribute type 10 has an invalid length. [ 1610.882710][T32505] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1610.909084][T32505] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1611.026693][T32723] netlink: 'syz.1.19032': attribute type 11 has an invalid length. [ 1611.156379][T32726] netlink: 20 bytes leftover after parsing attributes in process `syz.2.19036'. [ 1611.285117][ T5640] Bluetooth: hci0: command tx timeout [ 1611.430536][T32741] netlink: 20 bytes leftover after parsing attributes in process `syz.2.19042'. [ 1611.528567][T32744] tipc: Started in network mode [ 1611.533721][T32744] tipc: Node identity be54931f06e2, cluster identity 4711 [ 1611.542138][T32744] tipc: Enabled bearer , priority 0 [ 1611.613252][T32736] syzkaller0: entered promiscuous mode [ 1611.628093][T32736] syzkaller0: entered allmulticast mode [ 1611.635899][T32736] tipc: Resetting bearer [ 1611.684957][T32751] bridge0: port 1(bridge_slave_0) entered disabled state [ 1611.697914][T32751] bridge0: port 2(bridge_slave_1) entered disabled state [ 1611.841853][T32675] tipc: Resetting bearer [ 1611.928049][T32734] tipc: Resetting bearer [ 1612.576308][ T310] xt_hashlimit: size too large, truncated to 1048576 [ 1612.584403][ T310] xt_hashlimit: max too large, truncated to 1048576 [ 1613.356024][T32675] net_ratelimit: 196 callbacks suppressed [ 1613.356045][T32675] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1613.386685][T32675] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1613.394670][ T5640] Bluetooth: hci0: command tx timeout [ 1613.417645][T10774] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1613.461225][T10774] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1613.489775][T10774] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1613.524755][T10779] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1613.526280][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1613.560881][T10774] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1613.589106][T30613] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1613.633985][T30613] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1616.491728][T32734] tipc: Disabling bearer [ 1616.501096][T32764] __nla_validate_parse: 2 callbacks suppressed [ 1616.501109][T32764] netlink: 55631 bytes leftover after parsing attributes in process `syz.0.19049'. [ 1616.521977][T32765] tipc: Enabling of bearer rejected, failed to enable media [ 1616.549019][T19345] tipc: Node number set to 3098972959 [ 1616.594406][T32505] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1616.663006][T32505] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1616.681154][T32505] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1616.697287][T32505] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1616.711598][T32505] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1616.723906][ T321] netlink: 48 bytes leftover after parsing attributes in process `syz.3.19058'. [ 1616.746825][T32505] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1616.756440][T32505] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1616.788519][T32505] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1617.020474][ T338] block nbd0: reconnected socket [ 1617.022951][ T5640] block nbd0: Receive control failed (result -107) [ 1617.110157][T32505] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1617.147806][T32505] 8021q: adding VLAN 0 to HW filter on device team0 [ 1617.163133][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 1617.170295][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1617.253315][T30613] vlan2: left allmulticast mode [ 1617.261583][T30613] geneve0: left allmulticast mode [ 1617.279437][T30613] bridge0: port 1(vlan2) entered disabled state [ 1617.525414][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1617.537121][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1617.988917][T30613] team0: Port device bridge1 removed [ 1618.019240][T30613] team0: Port device bridge2 removed [ 1618.072602][T30613] team0: Port device bridge3 removed [ 1618.114935][T30613] team0: Port device bridge4 removed [ 1618.145899][T30613] team0: Port device bridge5 removed [ 1618.191542][T30613] team0: Port device bridge6 removed [ 1618.210141][T30613] bond5 (unregistering): (slave bridge7): Releasing backup interface [ 1618.221800][T30613] bridge7 (unregistering): left promiscuous mode [ 1618.265883][T30613] bond6 (unregistering): (slave bridge8): Releasing backup interface [ 1618.275808][T30613] bridge8 (unregistering): left promiscuous mode [ 1618.307306][T30613] team0: Port device bridge9 removed [ 1618.327737][T30613] team0: Port device bridge10 removed [ 1618.365161][ T36] net_ratelimit: 211 callbacks suppressed [ 1618.365181][ T36] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1618.380992][T30613] team0: Port device bridge11 removed [ 1618.426180][T30613] team0: Port device bridge12 removed [ 1618.436264][ T36] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1618.457989][T10777] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1618.479908][T30613] bond17 (unregistering): (slave bridge14): Releasing active interface [ 1618.489278][ T36] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1618.508894][T30613] bond19 (unregistering): (slave bridge15): Releasing backup interface [ 1618.519681][T10777] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1618.527604][T30613] bridge15 (unregistering): left promiscuous mode [ 1618.549800][T30613] bond0 (unregistering): Released all slaves [ 1618.562236][ T36] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1618.592094][T30613] bond1 (unregistering): Released all slaves [ 1618.606354][ T36] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1618.626992][T10777] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1618.641043][T30613] bond2 (unregistering): Released all slaves [ 1618.656981][T10779] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1618.664889][T30613] bond3 (unregistering): Released all slaves [ 1618.685807][T30613] bond4 (unregistering): Released all slaves [ 1618.686086][T10779] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1618.716630][T30613] bond5 (unregistering): Released all slaves [ 1618.742927][T30613] bond6 (unregistering): Released all slaves [ 1618.769263][T30613] bond7 (unregistering): Released all slaves [ 1618.792577][T30613] bond8 (unregistering): Released all slaves [ 1618.818134][T30613] bond9 (unregistering): (slave bond10): Releasing backup interface [ 1618.837857][T30613] bond9 (unregistering): Released all slaves [ 1618.870433][T30613] bond10 (unregistering): Released all slaves [ 1618.899128][T30613] bond11 (unregistering): Released all slaves [ 1618.923226][T30613] bond12 (unregistering): Released all slaves [ 1618.947297][T30613] bond13 (unregistering): Released all slaves [ 1618.969397][T30613] bond14 (unregistering): (slave bond15): Releasing backup interface [ 1618.982902][T30613] bond14 (unregistering): Released all slaves [ 1619.000028][T30613] bond15 (unregistering): Released all slaves [ 1619.014040][T30613] bond16 (unregistering): Released all slaves [ 1619.028182][T30613] bond17 (unregistering): Released all slaves [ 1619.053778][T30613] bond18 (unregistering): Released all slaves [ 1619.076997][T30613] bond19 (unregistering): Released all slaves [ 1619.093039][T30613] bond20 (unregistering): Released all slaves [ 1619.144483][T10781] bridge0: port 2(bridge_slave_1) entered blocking state [ 1619.151671][T10781] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1619.917243][ T398] bridge0: port 3(vlan3) entered blocking state [ 1619.924629][ T398] bridge0: port 3(vlan3) entered disabled state [ 1619.932521][ T398] vlan3: entered allmulticast mode [ 1619.939997][ T398] dummy0: entered allmulticast mode [ 1619.980578][ T398] vlan3: entered promiscuous mode [ 1620.018378][ T398] dummy0: entered promiscuous mode [ 1620.221777][T30613] tipc: Left network mode [ 1620.784027][T32505] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1621.523577][ T457] syzkaller0: entered promiscuous mode [ 1621.536467][ T457] syzkaller0: entered allmulticast mode [ 1621.700551][ T457] netlink: 4 bytes leftover after parsing attributes in process `syz.0.19097'. [ 1621.721592][ T457] netlink: 4 bytes leftover after parsing attributes in process `syz.0.19097'. [ 1622.335789][ T489] netlink: 8 bytes leftover after parsing attributes in process `syz.3.19108'. [ 1622.729304][ T489] gretap0: entered promiscuous mode [ 1622.734785][ T489] macvlan2: entered allmulticast mode [ 1622.741030][ T489] gretap0: entered allmulticast mode [ 1622.763962][ T493] netlink: 24 bytes leftover after parsing attributes in process `syz.1.19109'. [ 1622.911894][ T495] netlink: 16 bytes leftover after parsing attributes in process `syz.1.19109'. [ 1622.937065][ T495] netlink: 12 bytes leftover after parsing attributes in process `syz.1.19109'. [ 1622.975905][ T493] netlink: 24 bytes leftover after parsing attributes in process `syz.1.19109'. [ 1623.071344][T32505] veth0_vlan: entered promiscuous mode [ 1623.146318][ T507] netlink: 20 bytes leftover after parsing attributes in process `syz.0.19113'. [ 1623.171121][T32505] veth1_vlan: entered promiscuous mode [ 1623.193172][ T507] netlink: 324 bytes leftover after parsing attributes in process `syz.0.19113'. [ 1623.222182][ T511] netlink: 12 bytes leftover after parsing attributes in process `syz.1.19114'. [ 1623.303831][T32505] veth0_macvtap: entered promiscuous mode [ 1623.343340][T30613] IPVS: stop unused estimator thread 0... [ 1623.343891][T32505] veth1_macvtap: entered promiscuous mode [ 1623.380549][T10781] net_ratelimit: 177 callbacks suppressed [ 1623.380570][T10781] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1623.447550][T15634] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1623.489271][T32505] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1623.520396][T32505] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1623.534181][T10777] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1623.592608][T10780] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1623.613666][T15634] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1623.625673][T30613] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1623.634269][T15634] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1623.664317][T10782] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1623.682756][ T526] macsec1: entered promiscuous mode [ 1623.688596][ T526] macsec1: entered allmulticast mode [ 1623.699075][T15634] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1623.710077][T10781] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1623.737438][T30613] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1623.757196][T10780] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1623.797657][T30613] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1623.829479][T30613] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1624.006315][ T528] macsec1: left promiscuous mode [ 1624.015833][ T528] macsec1: left allmulticast mode [ 1624.021188][ T528] macvlan2: left allmulticast mode [ 1624.027670][ T528] macvlan3: left allmulticast mode [ 1624.033734][ T528] bond1: left allmulticast mode [ 1624.040609][ T528] ip6gre1: left promiscuous mode [ 1624.046046][ T528] ip6gre1: left allmulticast mode [ 1624.052097][ T528] macvlan0: left allmulticast mode [ 1624.059510][ T528] bond6: left promiscuous mode [ 1624.064311][ T528] bridge4: left promiscuous mode [ 1624.071242][ T528] macsec2: left promiscuous mode [ 1624.076981][ T528] macsec2: left allmulticast mode [ 1624.083115][ T528] macvlan1: left allmulticast mode [ 1624.090530][ T528] gretap0: left allmulticast mode [ 1624.311831][ T535] netlink: 'syz.2.19120': attribute type 1 has an invalid length. [ 1624.340392][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1624.359227][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1624.423413][T10779] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1624.452948][T10779] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1624.782880][ T558] FAULT_INJECTION: forcing a failure. [ 1624.782880][ T558] name failslab, interval 1, probability 0, space 0, times 0 [ 1624.855720][ T558] CPU: 1 UID: 0 PID: 558 Comm: syz.3.19129 Not tainted syzkaller #0 PREEMPT(full) [ 1624.855751][ T558] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1624.855761][ T558] Call Trace: [ 1624.855769][ T558] [ 1624.855776][ T558] dump_stack_lvl+0xe8/0x150 [ 1624.855803][ T558] should_fail_ex+0x412/0x560 [ 1624.855827][ T558] should_failslab+0xa8/0x100 [ 1624.855847][ T558] __kmalloc_cache_noprof+0x88/0x660 [ 1624.855866][ T558] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1624.855888][ T558] ? __xdp_reg_mem_model+0x1e3/0x5d0 [ 1624.855983][ T558] __xdp_reg_mem_model+0x1e3/0x5d0 [ 1624.856008][ T558] ? __pfx___xdp_reg_mem_model+0x10/0x10 [ 1624.856024][ T558] ? page_pool_list+0x20f/0x250 [ 1624.856043][ T558] ? page_pool_create_percpu+0x87b/0xc80 [ 1624.856068][ T558] xdp_reg_mem_model+0x22/0x40 [ 1624.856086][ T558] bpf_test_run_xdp_live+0x295/0x1cf0 [ 1624.856109][ T558] ? bpf_dispatcher_change_prog+0xae0/0xd70 [ 1624.856138][ T558] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1624.856166][ T558] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 1624.856204][ T558] ? 0xffffffffa0201854 [ 1624.856219][ T558] ? 0xffffffffa0201990 [ 1624.856257][ T558] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 1624.856287][ T558] ? _copy_from_user+0x94/0xb0 [ 1624.856307][ T558] ? bpf_test_init+0x113/0x150 [ 1624.856323][ T558] ? xdp_convert_md_to_buff+0x5b/0x330 [ 1624.856344][ T558] bpf_prog_test_run_xdp+0x81c/0x1160 [ 1624.856377][ T558] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 1624.856401][ T558] ? __fget_files+0x2a/0x420 [ 1624.856426][ T558] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 1624.856445][ T558] bpf_prog_test_run+0x2c7/0x340 [ 1624.856467][ T558] __sys_bpf+0x643/0x950 [ 1624.856491][ T558] ? __pfx___sys_bpf+0x10/0x10 [ 1624.856528][ T558] ? ksys_write+0x242/0x270 [ 1624.856552][ T558] ? __pfx_ksys_write+0x10/0x10 [ 1624.856578][ T558] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1624.856605][ T558] __x64_sys_bpf+0x7c/0x90 [ 1624.856626][ T558] do_syscall_64+0x174/0x580 [ 1624.856643][ T558] ? trace_irq_disable+0x3b/0x140 [ 1624.856664][ T558] ? clear_bhb_loop+0x40/0x90 [ 1624.856685][ T558] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1624.856700][ T558] RIP: 0033:0x7fcc88d9ce59 [ 1624.856716][ T558] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1624.856730][ T558] RSP: 002b:00007fcc89c75028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1624.856747][ T558] RAX: ffffffffffffffda RBX: 00007fcc89015fa0 RCX: 00007fcc88d9ce59 [ 1624.856759][ T558] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 1624.856769][ T558] RBP: 00007fcc89c75090 R08: 0000000000000000 R09: 0000000000000000 [ 1624.856780][ T558] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1624.856789][ T558] R13: 00007fcc89016038 R14: 00007fcc89015fa0 R15: 00007ffce0c4bfb8 [ 1624.856816][ T558] [ 1626.332717][ T597] netlink: 'syz.2.19142': attribute type 11 has an invalid length. [ 1626.991156][ T608] __nla_validate_parse: 11 callbacks suppressed [ 1626.991176][ T608] netlink: 40 bytes leftover after parsing attributes in process `syz.3.19145'. [ 1627.137363][ T613] FAULT_INJECTION: forcing a failure. [ 1627.137363][ T613] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1627.200345][ T613] CPU: 0 UID: 0 PID: 613 Comm: syz.2.19148 Not tainted syzkaller #0 PREEMPT(full) [ 1627.200370][ T613] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1627.200380][ T613] Call Trace: [ 1627.200388][ T613] [ 1627.200396][ T613] dump_stack_lvl+0xe8/0x150 [ 1627.200421][ T613] should_fail_ex+0x412/0x560 [ 1627.200446][ T613] _copy_from_iter+0x1d3/0x1670 [ 1627.200468][ T613] ? rcu_is_watching+0x15/0xb0 [ 1627.200493][ T613] ? __pfx__copy_from_iter+0x10/0x10 [ 1627.200518][ T613] ? netlink_sendmsg+0x650/0xb40 [ 1627.200537][ T613] ? skb_put+0x11b/0x210 [ 1627.200558][ T613] netlink_sendmsg+0x6c0/0xb40 [ 1627.200585][ T613] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1627.200607][ T613] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1627.200632][ T613] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1627.200656][ T613] ____sys_sendmsg+0x972/0x9f0 [ 1627.200674][ T613] ? __might_fault+0xaf/0x130 [ 1627.200700][ T613] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1627.200726][ T613] ? import_iovec+0x73/0xa0 [ 1627.200748][ T613] ___sys_sendmsg+0x2a5/0x360 [ 1627.200765][ T613] ? __lock_acquire+0x6b5/0x2cf0 [ 1627.200796][ T613] ? __pfx____sys_sendmsg+0x10/0x10 [ 1627.200851][ T613] ? __fget_files+0x2a/0x420 [ 1627.200869][ T613] ? __fget_files+0x3a0/0x420 [ 1627.200898][ T613] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1627.200919][ T613] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1627.200950][ T613] ? __pfx_ksys_write+0x10/0x10 [ 1627.200980][ T613] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1627.200998][ T613] do_syscall_64+0x174/0x580 [ 1627.201016][ T613] ? trace_irq_disable+0x3b/0x140 [ 1627.201038][ T613] ? clear_bhb_loop+0x40/0x90 [ 1627.201059][ T613] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1627.201075][ T613] RIP: 0033:0x7f361179ce59 [ 1627.201091][ T613] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1627.201105][ T613] RSP: 002b:00007f36125f1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1627.201123][ T613] RAX: ffffffffffffffda RBX: 00007f3611a15fa0 RCX: 00007f361179ce59 [ 1627.201134][ T613] RDX: 0000000000000080 RSI: 00002000000002c0 RDI: 0000000000000004 [ 1627.201144][ T613] RBP: 00007f36125f1090 R08: 0000000000000000 R09: 0000000000000000 [ 1627.201153][ T613] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1627.201162][ T613] R13: 00007f3611a16038 R14: 00007f3611a15fa0 R15: 00007ffd1c23cdd8 [ 1627.201191][ T613] [ 1627.948577][ T644] netlink: 28 bytes leftover after parsing attributes in process `syz.2.19162'. [ 1627.976850][ T644] netlink: 32 bytes leftover after parsing attributes in process `syz.2.19162'. [ 1627.987606][ T644] netlink: 28 bytes leftover after parsing attributes in process `syz.2.19162'. [ 1628.174384][ T662] netlink: 8 bytes leftover after parsing attributes in process `syz.3.19168'. [ 1628.304750][ T662] bond8: option ad_actor_sys_prio: invalid value (0) [ 1628.318173][ T675] FAULT_INJECTION: forcing a failure. [ 1628.318173][ T675] name failslab, interval 1, probability 0, space 0, times 0 [ 1628.325962][ T662] bond8: option ad_actor_sys_prio: allowed values 1 - 65535 [ 1628.355040][ T675] CPU: 0 UID: 0 PID: 675 Comm: syz.2.19171 Not tainted syzkaller #0 PREEMPT(full) [ 1628.355065][ T675] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1628.355075][ T675] Call Trace: [ 1628.355084][ T675] [ 1628.355093][ T675] dump_stack_lvl+0xe8/0x150 [ 1628.355118][ T675] should_fail_ex+0x412/0x560 [ 1628.355143][ T675] should_failslab+0xa8/0x100 [ 1628.355159][ T675] ? skb_clone+0x212/0x3a0 [ 1628.355178][ T675] kmem_cache_alloc_noprof+0x87/0x650 [ 1628.355200][ T675] ? __netlink_lookup+0xc6/0x8b0 [ 1628.355225][ T675] skb_clone+0x212/0x3a0 [ 1628.355247][ T675] __netlink_deliver_tap+0x404/0x850 [ 1628.355277][ T675] ? netlink_deliver_tap+0x2e/0x1b0 [ 1628.355297][ T675] netlink_deliver_tap+0x19c/0x1b0 [ 1628.355315][ T675] netlink_unicast+0x730/0x8e0 [ 1628.355344][ T675] netlink_sendmsg+0x813/0xb40 [ 1628.355372][ T675] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1628.355394][ T675] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1628.355419][ T675] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1628.355444][ T675] ____sys_sendmsg+0x972/0x9f0 [ 1628.355463][ T675] ? __might_fault+0xaf/0x130 [ 1628.355490][ T675] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1628.355518][ T675] ? import_iovec+0x73/0xa0 [ 1628.355540][ T675] ___sys_sendmsg+0x2a5/0x360 [ 1628.355556][ T675] ? __lock_acquire+0x6b5/0x2cf0 [ 1628.355576][ T675] ? __pfx____sys_sendmsg+0x10/0x10 [ 1628.355624][ T675] ? __fget_files+0x2a/0x420 [ 1628.355641][ T675] ? __fget_files+0x3a0/0x420 [ 1628.355674][ T675] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1628.355692][ T675] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1628.355716][ T675] ? __pfx_ksys_write+0x10/0x10 [ 1628.355743][ T675] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1628.355758][ T675] do_syscall_64+0x174/0x580 [ 1628.355774][ T675] ? trace_irq_disable+0x3b/0x140 [ 1628.355793][ T675] ? clear_bhb_loop+0x40/0x90 [ 1628.355811][ T675] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1628.355826][ T675] RIP: 0033:0x7f361179ce59 [ 1628.355844][ T675] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1628.355856][ T675] RSP: 002b:00007f36125f1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1628.355872][ T675] RAX: ffffffffffffffda RBX: 00007f3611a15fa0 RCX: 00007f361179ce59 [ 1628.355882][ T675] RDX: 0000000000000080 RSI: 00002000000002c0 RDI: 0000000000000004 [ 1628.355892][ T675] RBP: 00007f36125f1090 R08: 0000000000000000 R09: 0000000000000000 [ 1628.355901][ T675] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1628.355910][ T675] R13: 00007f3611a16038 R14: 00007f3611a15fa0 R15: 00007ffd1c23cdd8 [ 1628.355937][ T675] [ 1628.358003][ T662] bond8 (unregistering): Released all slaves [ 1628.397085][T10781] net_ratelimit: 108 callbacks suppressed [ 1628.397103][T10781] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1628.490085][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1628.570386][T28170] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1628.635724][T32675] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1628.729966][ T674] ip6tnl0 speed is unknown, defaulting to 1000 [ 1628.755087][T32675] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1628.781510][T32675] bond10: (slave ip6gretap1): failed to get link speed/duplex [ 1628.905674][T15634] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1628.913947][T15634] bond10: (slave ip6gretap1): failed to get link speed/duplex [ 1629.035548][T10781] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1629.043458][T10781] bond10: (slave ip6gretap1): failed to get link speed/duplex [ 1629.172422][ T695] netlink: 36 bytes leftover after parsing attributes in process `syz.0.19179'. [ 1629.183659][ T695] netlink: 36 bytes leftover after parsing attributes in process `syz.0.19179'. [ 1629.216060][ T695] netlink: 36 bytes leftover after parsing attributes in process `syz.0.19179'. [ 1629.382318][ T695] netlink: 36 bytes leftover after parsing attributes in process `syz.0.19179'. [ 1629.389533][ T700] can: request_module (can-proto-0) failed. [ 1629.415409][ T695] netlink: 36 bytes leftover after parsing attributes in process `syz.0.19179'. [ 1629.751756][ T5640] Bluetooth: hci4: link tx timeout [ 1629.764279][ T5640] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 1630.093325][ T727] netlink: 'syz.2.19187': attribute type 11 has an invalid length. [ 1630.480130][ T742] syzkaller0: entered promiscuous mode [ 1630.487020][ T742] syzkaller0: entered allmulticast mode [ 1631.257382][ T776] netlink: 'syz.4.19201': attribute type 12 has an invalid length. [ 1631.269817][ T776] netlink: 'syz.4.19201': attribute type 29 has an invalid length. [ 1631.283917][ T778] netlink: 'syz.4.19201': attribute type 12 has an invalid length. [ 1631.296184][ T778] netlink: 'syz.4.19201': attribute type 29 has an invalid length. [ 1631.328736][ T783] netlink: 'syz.2.19204': attribute type 28 has an invalid length. [ 1631.337908][ T783] netlink: 'syz.2.19204': attribute type 3 has an invalid length. [ 1631.390359][ T785] xt_ecn: cannot match TCP bits for non-tcp packets [ 1631.703278][ T808] bond8: Removing last ns target with arp_interval on [ 1631.845577][T16943] Bluetooth: hci4: command 0x0406 tx timeout [ 1631.962498][ T806] syzkaller0: entered promiscuous mode [ 1632.009446][ T806] syzkaller0: entered allmulticast mode [ 1632.040223][ T816] __nla_validate_parse: 14 callbacks suppressed [ 1632.040244][ T816] netlink: 13 bytes leftover after parsing attributes in process `syz.3.19215'. [ 1632.444674][ T837] netlink: 'syz.1.19218': attribute type 1 has an invalid length. [ 1632.522834][ T842] netlink: 12 bytes leftover after parsing attributes in process `syz.4.19217'. [ 1633.346359][ T865] FAULT_INJECTION: forcing a failure. [ 1633.346359][ T865] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1633.362826][ T865] CPU: 0 UID: 0 PID: 865 Comm: syz.3.19223 Not tainted syzkaller #0 PREEMPT(full) [ 1633.362848][ T865] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1633.362858][ T865] Call Trace: [ 1633.362865][ T865] [ 1633.362873][ T865] dump_stack_lvl+0xe8/0x150 [ 1633.362895][ T865] should_fail_ex+0x412/0x560 [ 1633.362916][ T865] _copy_from_user+0x2d/0xb0 [ 1633.362934][ T865] ___sys_sendmsg+0x1c6/0x360 [ 1633.362951][ T865] ? __lock_acquire+0x6b5/0x2cf0 [ 1633.362970][ T865] ? __pfx____sys_sendmsg+0x10/0x10 [ 1633.363015][ T865] ? __fget_files+0x2a/0x420 [ 1633.363031][ T865] ? __fget_files+0x3a0/0x420 [ 1633.363055][ T865] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1633.363074][ T865] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1633.363098][ T865] ? __pfx_ksys_write+0x10/0x10 [ 1633.363125][ T865] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1633.363140][ T865] do_syscall_64+0x174/0x580 [ 1633.363169][ T865] ? trace_irq_disable+0x3b/0x140 [ 1633.363189][ T865] ? clear_bhb_loop+0x40/0x90 [ 1633.363206][ T865] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1633.363220][ T865] RIP: 0033:0x7fcc88d9ce59 [ 1633.363235][ T865] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1633.363247][ T865] RSP: 002b:00007fcc89c75028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1633.363262][ T865] RAX: ffffffffffffffda RBX: 00007fcc89015fa0 RCX: 00007fcc88d9ce59 [ 1633.363272][ T865] RDX: 0000000000008010 RSI: 0000200000000700 RDI: 0000000000000003 [ 1633.363281][ T865] RBP: 00007fcc89c75090 R08: 0000000000000000 R09: 0000000000000000 [ 1633.363290][ T865] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1633.363298][ T865] R13: 00007fcc89016038 R14: 00007fcc89015fa0 R15: 00007ffce0c4bfb8 [ 1633.363322][ T865] [ 1633.415733][T10774] net_ratelimit: 141 callbacks suppressed [ 1633.415751][T10774] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1633.536063][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1633.565181][T10774] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1633.638610][T15634] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1633.665697][T10781] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1633.686424][T10781] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1633.703834][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1633.705462][T15634] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1633.751730][T15634] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1633.786705][T28167] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1633.787148][T10774] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1638.267354][ T837] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 1638.393096][ T846] netlink: 12 bytes leftover after parsing attributes in process `syz.4.19217'. [ 1638.434278][T30613] net_ratelimit: 193 callbacks suppressed [ 1638.434296][T30613] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1638.455414][ T886] netlink: 36 bytes leftover after parsing attributes in process `syz.0.19230'. [ 1638.495566][T30613] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1638.525272][T30613] bond10: (slave ip6gretap1): failed to get link speed/duplex [ 1638.657539][T30613] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1638.666094][T25118] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1638.714384][T30613] bond10: (slave ip6gretap1): failed to get link speed/duplex [ 1638.801528][ T901] ip6tnl0 speed is unknown, defaulting to 1000 [ 1638.811972][ T899] IPVS: Scheduler module ip_vs_sip not found [ 1638.862450][T10780] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1638.885956][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1638.907005][T10780] bond10: (slave ip6gretap1): failed to get link speed/duplex [ 1638.967082][T19345] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1639.001368][ T911] netlink: 48 bytes leftover after parsing attributes in process `syz.2.19237'. [ 1639.983759][ T966] netlink: 12 bytes leftover after parsing attributes in process `syz.2.19244'. [ 1640.171641][T16943] Bluetooth: hci2: command 0x0406 tx timeout [ 1640.532127][ T977] ip6gre1: entered promiscuous mode [ 1640.542777][ T977] ip6gre1: entered allmulticast mode [ 1640.600789][ T985] netlink: 'syz.3.19249': attribute type 1 has an invalid length. [ 1641.200628][ T1014] netlink: 'syz.1.19257': attribute type 1 has an invalid length. [ 1641.359274][ T1014] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1641.409761][ T1022] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1641.478112][ T1022] bond1: (slave bond0): Enslaving as a backup interface with an up link [ 1641.853828][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1642.230910][ T1069] vcan0: entered allmulticast mode [ 1642.341537][ T1077] netlink: 12 bytes leftover after parsing attributes in process `syz.0.19271'. [ 1642.377262][ T1077] netlink: 76 bytes leftover after parsing attributes in process `syz.0.19271'. [ 1642.668798][ T1094] netlink: 36 bytes leftover after parsing attributes in process `syz.1.19275'. [ 1642.702820][ T1094] netlink: 36 bytes leftover after parsing attributes in process `syz.1.19275'. [ 1642.739014][ T1094] netlink: 36 bytes leftover after parsing attributes in process `syz.1.19275'. [ 1642.808534][ T1106] netlink: 'syz.4.19279': attribute type 11 has an invalid length. [ 1642.954149][ T1104] can: request_module (can-proto-0) failed. [ 1642.991087][ T1094] netlink: 36 bytes leftover after parsing attributes in process `syz.1.19275'. [ 1643.447073][T30613] net_ratelimit: 139 callbacks suppressed [ 1643.447094][T30613] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1643.485804][T15634] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1643.516939][T15634] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1643.540817][T15634] bond10: (slave ip6gretap1): failed to get link speed/duplex [ 1643.680638][T15634] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1643.713327][ T1142] netlink: 'syz.4.19289': attribute type 15 has an invalid length. [ 1643.726828][ T1142] __nla_validate_parse: 5 callbacks suppressed [ 1643.726848][ T1142] netlink: 666 bytes leftover after parsing attributes in process `syz.4.19289'. [ 1643.743343][T10781] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1643.743954][ T1144] netlink: 80 bytes leftover after parsing attributes in process `syz.2.19287'. [ 1643.753856][T10781] bond10: (slave ip6gretap1): failed to get link speed/duplex [ 1643.918006][T30613] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1643.953591][ T1147] bridge0: port 1(bridge_slave_0) entered disabled state [ 1643.968047][T30613] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1644.006530][T30613] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1644.028472][ T1147] bridge0: port 2(bridge_slave_1) entered disabled state [ 1644.156555][ T1171] netlink: 12 bytes leftover after parsing attributes in process `syz.4.19295'. [ 1644.171815][ T1171] netlink: 76 bytes leftover after parsing attributes in process `syz.4.19295'. [ 1644.192811][ T1154] syz_tun: left promiscuous mode [ 1644.206914][ T1165] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1644.252953][ T1154] macvlan2: left allmulticast mode [ 1644.260718][ T1154] macvlan3: left allmulticast mode [ 1644.267432][ T1154] gretap0: left allmulticast mode [ 1644.274181][ T1154] bond2: left promiscuous mode [ 1644.280168][ T1154] bridge1: left promiscuous mode [ 1644.291151][ T1154] macsec1: left promiscuous mode [ 1644.296997][ T1154] macsec1: left allmulticast mode [ 1644.540815][ T1184] 8021q: adding VLAN 0 to HW filter on device team0 [ 1644.697910][ T1196] FAULT_INJECTION: forcing a failure. [ 1644.697910][ T1196] name failslab, interval 1, probability 0, space 0, times 0 [ 1644.711527][ T1196] CPU: 1 UID: 0 PID: 1196 Comm: syz.2.19302 Not tainted syzkaller #0 PREEMPT(full) [ 1644.711545][ T1196] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1644.711554][ T1196] Call Trace: [ 1644.711560][ T1196] [ 1644.711566][ T1196] dump_stack_lvl+0xe8/0x150 [ 1644.711586][ T1196] should_fail_ex+0x412/0x560 [ 1644.711608][ T1196] should_failslab+0xa8/0x100 [ 1644.711627][ T1196] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 1644.711648][ T1196] ? __alloc_skb+0x186/0x7d0 [ 1644.711662][ T1196] ? __alloc_skb+0x1d0/0x7d0 [ 1644.711675][ T1196] ? __local_bh_enable_ip+0xd0/0x130 [ 1644.711698][ T1196] __alloc_skb+0x1d0/0x7d0 [ 1644.711713][ T1196] ? __lock_acquire+0x6b5/0x2cf0 [ 1644.711742][ T1196] alloc_skb_with_frags+0xc8/0x760 [ 1644.711762][ T1196] ? __lock_acquire+0x6b5/0x2cf0 [ 1644.711787][ T1196] sock_alloc_send_pskb+0x878/0x990 [ 1644.711813][ T1196] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 1644.711838][ T1196] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 1644.711861][ T1196] ? dev_get_by_index+0x22/0x2e0 [ 1644.711881][ T1196] ? dev_get_by_index+0x22/0x2e0 [ 1644.711905][ T1196] packet_sendmsg+0x315a/0x4fb0 [ 1644.711937][ T1196] ? __lock_acquire+0x6b5/0x2cf0 [ 1644.711966][ T1196] ? __lock_acquire+0x6b5/0x2cf0 [ 1644.712004][ T1196] ? __pfx_packet_sendmsg+0x10/0x10 [ 1644.712020][ T1196] ? aa_sk_perm+0x6d5/0x900 [ 1644.712049][ T1196] ? __pfx_aa_sk_perm+0x10/0x10 [ 1644.712068][ T1196] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 1644.712098][ T1196] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1644.712125][ T1196] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1644.712147][ T1196] ? __pfx_packet_sendmsg+0x10/0x10 [ 1644.712166][ T1196] __sys_sendto+0x672/0x710 [ 1644.712186][ T1196] ? __pfx___sys_sendto+0x10/0x10 [ 1644.712200][ T1196] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 1644.712232][ T1196] ? __fget_files+0x3a0/0x420 [ 1644.712261][ T1196] ? ksys_write+0x242/0x270 [ 1644.712285][ T1196] ? __pfx_ksys_write+0x10/0x10 [ 1644.712310][ T1196] __x64_sys_sendto+0xde/0x100 [ 1644.712328][ T1196] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1644.712342][ T1196] do_syscall_64+0x174/0x580 [ 1644.712355][ T1196] ? trace_irq_disable+0x3b/0x140 [ 1644.712373][ T1196] ? clear_bhb_loop+0x40/0x90 [ 1644.712388][ T1196] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1644.712399][ T1196] RIP: 0033:0x7f361179ce59 [ 1644.712414][ T1196] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1644.712427][ T1196] RSP: 002b:00007f36125f1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1644.712445][ T1196] RAX: ffffffffffffffda RBX: 00007f3611a15fa0 RCX: 00007f361179ce59 [ 1644.712457][ T1196] RDX: 000000000000002a RSI: 0000200000000100 RDI: 0000000000000003 [ 1644.712467][ T1196] RBP: 00007f36125f1090 R08: 0000200000000200 R09: 0000000000000014 [ 1644.712478][ T1196] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1644.712488][ T1196] R13: 00007f3611a16038 R14: 00007f3611a15fa0 R15: 00007ffd1c23cdd8 [ 1644.712516][ T1196] [ 1644.723098][ T1184] virt_wifi0: entered promiscuous mode [ 1644.864452][ T1199] netlink: 24 bytes leftover after parsing attributes in process `syz.1.19304'. [ 1644.886539][ T1184] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1644.923627][ T1200] xt_ecn: cannot match TCP bits for non-tcp packets [ 1644.955998][ T1184] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1645.082857][ T1184] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1645.152577][ T1184] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1645.229474][ T1184] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1645.276492][ T1184] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1645.568726][ T1233] netlink: 12 bytes leftover after parsing attributes in process `syz.4.19310'. [ 1645.586782][ T1222] ip6tnl0 speed is unknown, defaulting to 1000 [ 1645.636287][ T1236] netlink: 80 bytes leftover after parsing attributes in process `syz.0.19311'. [ 1646.136477][ T1246] bridge_slave_0: left allmulticast mode [ 1646.154260][ T1246] bridge_slave_0: left promiscuous mode [ 1646.175747][ T1246] bridge0: port 1(bridge_slave_0) entered disabled state [ 1646.209298][ T1246] bridge_slave_1: left allmulticast mode [ 1646.227656][ T1246] bridge_slave_1: left promiscuous mode [ 1646.246248][ T1246] bridge0: port 2(bridge_slave_1) entered disabled state [ 1646.377865][ T1246] bond0: (slave bond_slave_0): Releasing backup interface [ 1646.509977][ T1246] bond0: (slave bond_slave_1): Releasing backup interface [ 1646.620186][ T1246] team0: Port device team_slave_0 removed [ 1646.699510][ T1246] team0: Port device team_slave_1 removed [ 1646.773803][ T1246] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1646.821654][ T1246] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1646.926209][ T1246] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1646.995934][ T1246] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1647.244934][ T1227] ip6tnl0 speed is unknown, defaulting to 1000 [ 1647.349304][ T1286] netlink: 72 bytes leftover after parsing attributes in process `syz.2.19318'. [ 1647.363481][ T1286] netlink: 12 bytes leftover after parsing attributes in process `syz.2.19318'. [ 1647.383851][ T1286] netlink: 4 bytes leftover after parsing attributes in process `syz.2.19318'. [ 1648.457244][T10782] net_ratelimit: 185 callbacks suppressed [ 1648.457273][T10782] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1648.478323][ T1310] netlink: 'syz.4.19319': attribute type 12 has an invalid length. [ 1648.485404][T10780] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1648.515871][T10780] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1648.545371][T10780] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1648.575461][T10779] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1648.618188][T10779] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1648.648480][ T1320] netlink: 'syz.0.19325': attribute type 1 has an invalid length. [ 1648.688099][T32675] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1648.749304][T10779] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1648.785774][T10779] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1648.815651][T30613] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1648.912190][ T1320] bond10: entered promiscuous mode [ 1648.919359][ T1320] 8021q: adding VLAN 0 to HW filter on device bond10 [ 1648.937528][ T1321] vcan0: left allmulticast mode [ 1649.063462][ T1321] ip6gre1: left promiscuous mode [ 1649.089523][ T1321] ip6gre1: left allmulticast mode [ 1649.210344][ T1327] bond10: (slave bridge6): making interface the new active one [ 1649.229238][ T1338] __nla_validate_parse: 2 callbacks suppressed [ 1649.229257][ T1338] netlink: 36 bytes leftover after parsing attributes in process `syz.4.19328'. [ 1649.232284][ T1327] bridge6: entered promiscuous mode [ 1649.246353][ T1338] netlink: 36 bytes leftover after parsing attributes in process `syz.4.19328'. [ 1649.260764][ T1338] netlink: 36 bytes leftover after parsing attributes in process `syz.4.19328'. [ 1649.270018][ T1327] bond10: (slave bridge6): Enslaving as an active interface with an up link [ 1649.364911][ T1338] netlink: 36 bytes leftover after parsing attributes in process `syz.4.19328'. [ 1649.413465][ T1339] can: request_module (can-proto-0) failed. [ 1649.422473][ T1338] netlink: 36 bytes leftover after parsing attributes in process `syz.4.19328'. [ 1649.444838][ T1338] netlink: 36 bytes leftover after parsing attributes in process `syz.4.19328'. [ 1649.469428][ T1346] netlink: 'syz.1.19330': attribute type 21 has an invalid length. [ 1649.491562][ T1346] IPv6: NLM_F_CREATE should be specified when creating new route [ 1649.511652][ T1346] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1649.519002][ T1346] IPv6: NLM_F_CREATE should be set when creating new route [ 1649.526601][ T1346] IPv6: NLM_F_CREATE should be set when creating new route [ 1649.533862][ T1346] IPv6: NLM_F_CREATE should be set when creating new route [ 1649.717411][ T1338] netlink: 36 bytes leftover after parsing attributes in process `syz.4.19328'. [ 1649.735766][ T1338] netlink: 36 bytes leftover after parsing attributes in process `syz.4.19328'. [ 1649.783553][ T1338] netlink: 36 bytes leftover after parsing attributes in process `syz.4.19328'. [ 1649.967156][ T1368] batadv_slave_1: entered promiscuous mode [ 1649.988406][ T1368] netlink: 'syz.4.19337': attribute type 1 has an invalid length. [ 1650.022347][ T1368] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1650.061065][ T1368] bond1: (slave gretap1): making interface the new active one [ 1650.074829][ T1368] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 1650.240843][ T1384] netlink: 80 bytes leftover after parsing attributes in process `syz.2.19340'. [ 1650.383968][ T1376] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1650.419562][ T1376] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1650.578803][ T1376] bond10: left promiscuous mode [ 1650.583801][ T1376] bridge6: left promiscuous mode [ 1650.597500][ T1367] batadv_slave_1: left promiscuous mode [ 1650.793426][T10782] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1650.832735][T10782] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1650.869059][T10782] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1650.884588][ T1413] xt_hashlimit: max too large, truncated to 1048576 [ 1650.894406][T10779] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1651.099306][ T1424] tipc: Started in network mode [ 1651.113503][ T1424] tipc: Node identity a6b32f16a4ff, cluster identity 4711 [ 1651.135897][ T1424] tipc: Enabled bearer , priority 0 [ 1651.157256][ T1427] gretap0: entered promiscuous mode [ 1651.163099][ T1427] macvlan3: entered allmulticast mode [ 1651.174876][ T1427] gretap0: entered allmulticast mode [ 1651.183274][ T1424] veth0_vlan: entered allmulticast mode [ 1651.232081][ T1424] tipc: Resetting bearer [ 1651.267158][ T1420] tipc: Disabling bearer [ 1651.600711][ T1456] netlink: 'syz.4.19368': attribute type 1 has an invalid length. [ 1651.655693][ T1456] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1651.780563][ T1456] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1651.790908][ T1456] bond2: (slave bond0): Enslaving as a backup interface with a down link [ 1651.893175][ T1461] macvlan3: left allmulticast mode [ 1651.903143][ T1461] gretap0: left allmulticast mode [ 1652.410329][ T1499] netlink: 'syz.2.19386': attribute type 10 has an invalid length. [ 1652.542117][ T1499] bond0: (slave team0): Releasing backup interface [ 1652.637713][ T1499] team0 (unregistering): Port device team_slave_0 removed [ 1652.700839][ T1499] team0 (unregistering): Port device team_slave_1 removed [ 1652.740822][ T1515] FAULT_INJECTION: forcing a failure. [ 1652.740822][ T1515] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1652.757565][ T1499] team0 (unregistering): Port device netdevsim1 removed [ 1652.760338][ T1515] CPU: 1 UID: 0 PID: 1515 Comm: syz.0.19388 Not tainted syzkaller #0 PREEMPT(full) [ 1652.760361][ T1515] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1652.760371][ T1515] Call Trace: [ 1652.760379][ T1515] [ 1652.760387][ T1515] dump_stack_lvl+0xe8/0x150 [ 1652.760411][ T1515] should_fail_ex+0x412/0x560 [ 1652.760434][ T1515] _copy_from_user+0x2d/0xb0 [ 1652.760455][ T1515] ___sys_sendmsg+0x1c6/0x360 [ 1652.760473][ T1515] ? __lock_acquire+0x6b5/0x2cf0 [ 1652.760495][ T1515] ? __pfx____sys_sendmsg+0x10/0x10 [ 1652.760545][ T1515] ? __fget_files+0x2a/0x420 [ 1652.760563][ T1515] ? __fget_files+0x3a0/0x420 [ 1652.760591][ T1515] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1652.760612][ T1515] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1652.760638][ T1515] ? __pfx_ksys_write+0x10/0x10 [ 1652.760669][ T1515] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1652.760687][ T1515] do_syscall_64+0x174/0x580 [ 1652.760704][ T1515] ? trace_irq_disable+0x3b/0x140 [ 1652.760726][ T1515] ? clear_bhb_loop+0x40/0x90 [ 1652.760746][ T1515] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1652.760762][ T1515] RIP: 0033:0x7f8b3199ce59 [ 1652.760778][ T1515] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1652.760793][ T1515] RSP: 002b:00007f8b32770028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1652.760809][ T1515] RAX: ffffffffffffffda RBX: 00007f8b31c15fa0 RCX: 00007f8b3199ce59 [ 1652.760824][ T1515] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 1652.760835][ T1515] RBP: 00007f8b32770090 R08: 0000000000000000 R09: 0000000000000000 [ 1652.760845][ T1515] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1652.760855][ T1515] R13: 00007f8b31c16038 R14: 00007f8b31c15fa0 R15: 00007fff0cfe9af8 [ 1652.760883][ T1515] [ 1652.985809][ T1511] macsec1: entered promiscuous mode [ 1652.991140][ T1511] macsec1: entered allmulticast mode [ 1653.369208][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1653.467646][T10780] net_ratelimit: 173 callbacks suppressed [ 1653.467675][T10780] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1653.505613][T10780] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1653.527002][T10780] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1653.536451][T19345] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1653.586861][ T595] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1653.618955][ T595] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1653.650431][ T595] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1653.682039][ T595] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1653.718733][T10780] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1653.771531][T10780] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1658.513491][ T12] net_ratelimit: 181 callbacks suppressed [ 1658.513505][ T12] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1658.550908][T10779] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1658.582535][T10779] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1658.605551][T10779] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1658.641561][T10779] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1658.650315][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1658.685508][T10779] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1658.722273][T32675] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1658.731267][T28167] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1658.763999][T10779] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1660.038570][ T1537] __nla_validate_parse: 8 callbacks suppressed [ 1660.038587][ T1537] netlink: 24 bytes leftover after parsing attributes in process `syz.0.19396'. [ 1660.056951][ T1537] netlink: 24 bytes leftover after parsing attributes in process `syz.0.19396'. [ 1660.069716][ T1537] netlink: 24 bytes leftover after parsing attributes in process `syz.0.19396'. [ 1660.101867][ T1537] netlink: 24 bytes leftover after parsing attributes in process `syz.0.19396'. [ 1660.112346][ T1537] netlink: 24 bytes leftover after parsing attributes in process `syz.0.19396'. [ 1660.123042][ T1537] netlink: 24 bytes leftover after parsing attributes in process `syz.0.19396'. [ 1660.133293][ T1537] netlink: 24 bytes leftover after parsing attributes in process `syz.0.19396'. [ 1660.144231][ T1537] netlink: 24 bytes leftover after parsing attributes in process `syz.0.19396'. [ 1660.151956][ T1557] netlink: 12 bytes leftover after parsing attributes in process `syz.3.19401'. [ 1660.159406][ T1537] netlink: 24 bytes leftover after parsing attributes in process `syz.0.19396'. [ 1660.218968][ T1557] can: request_module (can-proto-0) failed. [ 1660.254451][ T1544] macsec1: left promiscuous mode [ 1660.260239][ T1544] macsec1: left allmulticast mode [ 1660.311963][ T1562] netlink: 'syz.3.19402': attribute type 1 has an invalid length. [ 1660.493414][ T1562] 8021q: adding VLAN 0 to HW filter on device bond10 [ 1660.565075][ T1566] bond7: (slave bond0): Removing an active aggregator [ 1660.588902][ T1566] bond7: (slave bond0): Releasing backup interface [ 1660.664054][ T1566] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1660.696873][ T1566] bond10: (slave bond0): Enslaving as an active interface with an up link [ 1660.739787][ T30] audit: type=1804 audit(1780327683.206:29): pid=1574 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.19406" name="/newroot/307/cgroup.controllers" dev="tmpfs" ino=1582 res=1 errno=0 [ 1660.794413][ T30] audit: type=1800 audit(1780327683.206:30): pid=1574 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.19406" name="cgroup.controllers" dev="tmpfs" ino=1582 res=0 errno=0 [ 1660.896556][ T1586] hmac(sha224: entered promiscuous mode [ 1661.121461][ T1595] 0X: renamed from batadv0 (while UP) [ 1661.143607][ T1595] 0X: entered allmulticast mode [ 1661.159185][ T1595] netlink: 'syz.1.19414': attribute type 11 has an invalid length. [ 1661.508847][ T1621] netlink: 'syz.1.19422': attribute type 11 has an invalid length. [ 1661.660683][ T1623] can: request_module (can-proto-0) failed. [ 1661.922432][ T1640] netlink: 'syz.4.19428': attribute type 1 has an invalid length. [ 1662.001849][ T1640] bond3: entered promiscuous mode [ 1662.037814][ T1640] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1662.123029][ T1651] bond3: (slave bridge2): making interface the new active one [ 1662.131797][ T1651] bridge2: entered promiscuous mode [ 1662.140789][ T1651] bond3: (slave bridge2): Enslaving as an active interface with an up link [ 1662.190477][ T1641] ip6tnl0 speed is unknown, defaulting to 1000 [ 1662.946491][ T1676] 0X: left allmulticast mode [ 1662.972386][ T1679] nbd: socks must be embedded in a SOCK_ITEM attr [ 1662.989182][ T1679] block nbd10: shutting down sockets [ 1663.419151][ T1694] can: request_module (can-proto-0) failed. [ 1663.468434][ T1700] ip6tnl1: entered allmulticast mode [ 1663.477265][T10780] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1663.491643][T10780] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1663.507601][T28170] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1663.535774][T30613] net_ratelimit: 167 callbacks suppressed [ 1663.535795][T30613] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1663.567206][ T1700] bridge0: port 1(vlan2) entered blocking state [ 1663.587153][T30613] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1663.628745][ T1700] bridge0: port 1(vlan2) entered disabled state [ 1663.646539][T10780] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1663.659898][ T1700] vlan2: entered allmulticast mode [ 1663.669311][ T1700] bridge_slave_1: entered allmulticast mode [ 1663.678691][ T1700] vlan2: entered promiscuous mode [ 1663.684529][ T1700] bridge_slave_1: entered promiscuous mode [ 1663.696382][T10780] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1663.707169][T10780] bond10: (slave ip6gretap1): failed to get link speed/duplex [ 1663.708713][ T1705] IPVS: nq: FWM 3 0x00000003 - no destination available [ 1663.726986][T28170] IPVS: starting estimator thread 0... [ 1663.816046][T10779] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1663.827256][ T1707] IPVS: using max 35 ests per chain, 84000 per kthread [ 1663.838359][T10779] bond10: (slave ip6gretap1): failed to get link speed/duplex [ 1663.840086][ T1711] netlink: 'syz.1.19451': attribute type 1 has an invalid length. [ 1663.846833][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1663.884364][ T1714] netlink: 'syz.4.19452': attribute type 1 has an invalid length. [ 1663.896085][T28170] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1663.926843][T19337] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1663.983923][ T1714] bond4: entered promiscuous mode [ 1663.990520][ T1714] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1664.052960][ T1714] bond4: (slave bridge3): making interface the new active one [ 1664.061233][ T1714] bridge3: entered promiscuous mode [ 1664.068488][ T1714] bond4: (slave bridge3): Enslaving as an active interface with an up link [ 1664.329094][T28170] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1664.589111][ T1743] netlink: 'syz.2.19463': attribute type 1 has an invalid length. [ 1664.691652][ T1743] bond4: entered promiscuous mode [ 1664.698154][ T1743] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1665.010201][ T1768] netlink: 'syz.4.19473': attribute type 22 has an invalid length. [ 1665.049120][ T1768] netlink: 'syz.4.19473': attribute type 22 has an invalid length. [ 1665.057601][ T1768] __nla_validate_parse: 112 callbacks suppressed [ 1665.057620][ T1768] netlink: 4 bytes leftover after parsing attributes in process `syz.4.19473'. [ 1665.076131][T30613] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1665.089003][ T1766] netlink: 20 bytes leftover after parsing attributes in process `syz.0.19469'. [ 1665.098867][T30613] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1665.110578][T30613] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1665.123874][T30613] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1665.352312][ T1792] netlink: 12 bytes leftover after parsing attributes in process `syz.4.19482'. [ 1665.362530][ T1792] netlink: 36 bytes leftover after parsing attributes in process `syz.4.19482'. [ 1665.392339][ T1792] netlink: 12 bytes leftover after parsing attributes in process `syz.4.19482'. [ 1665.401212][ T1794] netlink: 48 bytes leftover after parsing attributes in process `syz.1.19483'. [ 1665.454585][ T1792] can: request_module (can-proto-0) failed. [ 1665.515162][ T1798] netlink: 'syz.1.19484': attribute type 4 has an invalid length. [ 1665.548571][ T1801] netlink: 'syz.4.19485': attribute type 11 has an invalid length. [ 1665.739925][ T1812] netlink: 24 bytes leftover after parsing attributes in process `syz.3.19490'. [ 1665.864355][ T1818] xt_ecn: cannot match TCP bits for non-tcp packets [ 1665.898956][ T1810] netlink: 12 bytes leftover after parsing attributes in process `syz.1.19489'. [ 1665.916409][ T1816] ip6tnl0 speed is unknown, defaulting to 1000 [ 1666.080253][ T1830] netlink: 36 bytes leftover after parsing attributes in process `syz.0.19498'. [ 1666.084283][ T1810] netlink: 12 bytes leftover after parsing attributes in process `syz.1.19489'. [ 1666.165512][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1666.261697][ T1830] can: request_module (can-proto-0) failed. [ 1666.413971][ T1842] macvlan3: entered allmulticast mode [ 1666.564047][ T1848] netlink: 'syz.0.19502': attribute type 1 has an invalid length. [ 1666.662516][ T1848] bond11: entered promiscuous mode [ 1666.669245][ T1848] 8021q: adding VLAN 0 to HW filter on device bond11 [ 1666.759635][ T1848] bond11: (slave bridge7): making interface the new active one [ 1666.773823][ T1848] bridge7: entered promiscuous mode [ 1666.783153][ T1848] bond11: (slave bridge7): Enslaving as an active interface with an up link [ 1667.205399][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1667.265837][T19345] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1667.465522][T28170] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1667.812163][ T1909] bridge0: port 1(bridge_slave_0) entered disabled state [ 1667.833253][ T1909] bridge0: port 2(bridge_slave_1) entered disabled state [ 1668.059163][ T1916] can: request_module (can-proto-0) failed. [ 1668.288628][ T1911] macvlan2: left allmulticast mode [ 1668.322012][ T1911] macvlan3: left allmulticast mode [ 1668.339908][ T1911] gretap0: left allmulticast mode [ 1668.612690][T15634] net_ratelimit: 152 callbacks suppressed [ 1668.612734][T15634] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1668.698148][T15634] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1668.741112][T15634] bond10: (slave ip6gretap1): failed to get link speed/duplex [ 1668.878031][T10779] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1668.910886][T10779] bond10: (slave ip6gretap1): failed to get link speed/duplex [ 1669.035358][T10782] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1669.045058][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1669.067840][T10782] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1669.107299][T10782] bond10: (slave ip6gretap1): failed to get link speed/duplex [ 1669.126803][T28170] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1669.167052][ T1964] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1669.279826][ T1967] netlink: 'syz.1.19528': attribute type 1 has an invalid length. [ 1669.292670][ T1971] xt_ecn: cannot match TCP bits for non-tcp packets [ 1669.499919][ T1967] bond2: entered promiscuous mode [ 1669.536260][ T1967] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1669.551864][ T1978] bond2: entered allmulticast mode [ 1669.883780][ T1978] bond2: (slave bridge1): making interface the new active one [ 1669.909551][ T1978] bridge1: entered promiscuous mode [ 1669.930852][ T1978] bridge1: entered allmulticast mode [ 1669.984547][ T1978] bond2: (slave bridge1): Enslaving as an active interface with an up link [ 1670.547904][ T2044] __nla_validate_parse: 11 callbacks suppressed [ 1670.547923][ T2044] netlink: 20 bytes leftover after parsing attributes in process `syz.3.19545'. [ 1670.584528][ T2044] netlink: 324 bytes leftover after parsing attributes in process `syz.3.19545'. [ 1670.626124][ T2044] netlink: 12 bytes leftover after parsing attributes in process `syz.3.19545'. [ 1670.667995][ T30] audit: type=1804 audit(1780327693.136:31): pid=2051 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.19548" name="/newroot/120/cgroup.controllers" dev="tmpfs" ino=629 res=1 errno=0 [ 1670.720987][ T30] audit: type=1800 audit(1780327693.136:32): pid=2051 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.19548" name="cgroup.controllers" dev="tmpfs" ino=629 res=0 errno=0 [ 1670.772720][ T30] audit: type=1800 audit(1780327693.136:33): pid=2052 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.19548" name="cgroup.controllers" dev="tmpfs" ino=629 res=0 errno=0 [ 1670.872973][ T2061] netlink: 132 bytes leftover after parsing attributes in process `syz.0.19552'. [ 1671.032798][ T2073] netlink: 52 bytes leftover after parsing attributes in process `syz.4.19555'. [ 1671.225808][ T5865] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1671.273484][ T2080] veth0_vlan: left allmulticast mode [ 1671.292895][ T2080] bond3: left promiscuous mode [ 1671.302212][ T2085] netlink: 4 bytes leftover after parsing attributes in process `syz.0.19560'. [ 1671.312313][ T2080] bridge2: left promiscuous mode [ 1671.321152][ T2080] ip6tnl1: left allmulticast mode [ 1671.327748][ T2080] bond4: left promiscuous mode [ 1671.332563][ T2080] bridge3: left promiscuous mode [ 1671.368548][ T2084] netlink: 4 bytes leftover after parsing attributes in process `syz.0.19560'. [ 1671.471207][ T2087] netlink: 8 bytes leftover after parsing attributes in process `syz.2.19561'. [ 1671.485889][ T5874] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1671.710893][ T2102] netlink: 'syz.0.19566': attribute type 7 has an invalid length. [ 1671.801570][ T2102] : entered promiscuous mode [ 1672.038588][ T2117] netlink: 'syz.1.19574': attribute type 1 has an invalid length. [ 1672.139119][ T2117] bond3: entered promiscuous mode [ 1672.144401][ T2117] bond3: entered allmulticast mode [ 1672.153580][ T2117] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1672.252627][ T2133] netlink: 'syz.2.19579': attribute type 1 has an invalid length. [ 1672.418416][ T2138] xt_ecn: cannot match TCP bits for non-tcp packets [ 1672.503993][ T2143] netlink: 211856 bytes leftover after parsing attributes in process `syz.3.19582'. [ 1672.761381][ T2150] netlink: 40 bytes leftover after parsing attributes in process `syz.4.19585'. [ 1673.179205][ T2188] xt_ecn: cannot match TCP bits for non-tcp packets [ 1673.280538][ T2179] syzkaller0: entered promiscuous mode [ 1673.308510][ T2179] syzkaller0: entered allmulticast mode [ 1673.513889][ T2206] netlink: 'syz.1.19599': attribute type 10 has an invalid length. [ 1673.625181][ T12] net_ratelimit: 156 callbacks suppressed [ 1673.625201][ T12] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1673.656266][T15634] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1673.709633][T15634] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1673.741259][T32675] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1673.775990][T15634] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1673.806597][T15634] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1673.844072][T32675] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1673.877073][T10782] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1673.916205][T10782] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1673.941377][T32675] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1674.725918][T15634] wlan1: Trigger new scan to find an IBSS to join [ 1675.132043][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1677.782474][T10774] wlan1: Trigger new scan to find an IBSS to join [ 1678.647310][T32675] net_ratelimit: 216 callbacks suppressed [ 1678.647332][T32675] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1678.675272][T32675] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1678.705543][T30613] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1678.726560][T10777] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1678.755251][T32675] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1678.789335][T10777] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1678.790088][T10779] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1678.829036][T30613] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1678.867376][T10779] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1678.907787][T10779] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1678.925344][T32675] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1679.918845][ T2206] bond0: (slave wlan2): Enslaving as an active interface with an up link [ 1680.226537][ T2233] syzkaller0: entered promiscuous mode [ 1680.234252][ T2251] __nla_validate_parse: 6 callbacks suppressed [ 1680.234269][ T2251] netlink: 7986 bytes leftover after parsing attributes in process `syz.0.19616'. [ 1680.257097][ T2233] syzkaller0: entered allmulticast mode [ 1680.264606][ T2251] netlink: 7986 bytes leftover after parsing attributes in process `syz.0.19616'. [ 1680.607036][ T2273] netlink: 'syz.4.19625': attribute type 13 has an invalid length. [ 1680.661467][T19345] IPVS: starting estimator thread 0... [ 1680.755612][ T2277] IPVS: using max 35 ests per chain, 84000 per kthread [ 1680.766338][ T2282] netlink: 'syz.0.19628': attribute type 1 has an invalid length. [ 1680.836063][ T2282] bond12: entered promiscuous mode [ 1680.841682][ T2282] 8021q: adding VLAN 0 to HW filter on device bond12 [ 1680.893301][ T2279] syzkaller0: entered promiscuous mode [ 1680.899498][ T2279] syzkaller0: entered allmulticast mode [ 1680.920660][ T2282] bond12: (slave bridge9): making interface the new active one [ 1680.928763][ T2282] bridge9: entered promiscuous mode [ 1680.938121][ T2282] bond12: (slave bridge9): Enslaving as an active interface with an up link [ 1680.970198][ T2285] IPVS: set_ctl: invalid protocol: 0 255.255.255.255:20002 [ 1681.123209][ T2299] netlink: 24 bytes leftover after parsing attributes in process `syz.0.19631'. [ 1683.656504][T10777] net_ratelimit: 194 callbacks suppressed [ 1683.656525][T10777] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1683.690821][T10777] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1683.699891][T28170] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1683.729650][T30613] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1683.760711][T10777] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1683.795907][T10782] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1683.815725][T10782] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1683.848355][T10777] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1683.876826][T32675] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1683.906005][T32675] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1686.019668][ T2309] netlink: 76 bytes leftover after parsing attributes in process `syz.0.19634'. [ 1686.360609][ T2329] netlink: 12 bytes leftover after parsing attributes in process `syz.4.19641'. [ 1686.388648][ T2333] netlink: 8 bytes leftover after parsing attributes in process `syz.1.19642'. [ 1686.443711][ T30] audit: type=1804 audit(1780327708.926:34): pid=2327 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.19639" name="/newroot/363/memory.events" dev="tmpfs" ino=1867 res=1 errno=0 [ 1686.510294][ T30] audit: type=1800 audit(1780327708.926:35): pid=2327 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.19639" name="memory.events" dev="tmpfs" ino=1867 res=0 errno=0 [ 1686.704098][ T2345] netlink: 36 bytes leftover after parsing attributes in process `syz.0.19644'. [ 1686.749599][ T2345] netlink: 36 bytes leftover after parsing attributes in process `syz.0.19644'. [ 1686.749697][ T2334] ip6tnl0 speed is unknown, defaulting to 1000 [ 1686.787337][ T2345] netlink: 36 bytes leftover after parsing attributes in process `syz.0.19644'. [ 1686.910453][ T2345] netlink: 36 bytes leftover after parsing attributes in process `syz.0.19644'. [ 1686.946891][ T2345] netlink: 36 bytes leftover after parsing attributes in process `syz.0.19644'. [ 1686.978916][ T2351] can: request_module (can-proto-0) failed. [ 1686.984548][ T2345] netlink: 36 bytes leftover after parsing attributes in process `syz.0.19644'. [ 1687.038520][ T2361] netlink: 28 bytes leftover after parsing attributes in process `syz.1.19648'. [ 1687.113153][ T2366] macsec1: entered promiscuous mode [ 1687.129670][ T2366] macsec1: entered allmulticast mode [ 1687.333033][ T2373] gretap0: entered promiscuous mode [ 1687.372059][ T2373] macvlan2: entered allmulticast mode [ 1687.412405][ T2373] gretap0: entered allmulticast mode [ 1687.638296][ T2386] syzkaller0: entered promiscuous mode [ 1687.661903][ T2386] syzkaller0: entered allmulticast mode [ 1687.731509][ T2391] macvlan4: entered allmulticast mode [ 1687.759491][ T2391] gretap0: entered allmulticast mode [ 1688.023298][ T2405] FAULT_INJECTION: forcing a failure. [ 1688.023298][ T2405] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1688.055310][ T2405] CPU: 0 UID: 0 PID: 2405 Comm: syz.1.19659 Not tainted syzkaller #0 PREEMPT(full) [ 1688.055334][ T2405] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1688.055344][ T2405] Call Trace: [ 1688.055352][ T2405] [ 1688.055360][ T2405] dump_stack_lvl+0xe8/0x150 [ 1688.055386][ T2405] should_fail_ex+0x412/0x560 [ 1688.055409][ T2405] _copy_from_user+0x2d/0xb0 [ 1688.055429][ T2405] ___sys_sendmsg+0x1c6/0x360 [ 1688.055447][ T2405] ? __lock_acquire+0x6b5/0x2cf0 [ 1688.055469][ T2405] ? __pfx____sys_sendmsg+0x10/0x10 [ 1688.055492][ T2405] ? kstrtouint+0x6e/0xe0 [ 1688.055538][ T2405] ? __fget_files+0x2a/0x420 [ 1688.055556][ T2405] ? __fget_files+0x3a0/0x420 [ 1688.055583][ T2405] __sys_sendmmsg+0x27c/0x4e0 [ 1688.055606][ T2405] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1688.055621][ T2405] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 1688.055664][ T2405] ? ksys_write+0x242/0x270 [ 1688.055686][ T2405] ? __pfx_ksys_write+0x10/0x10 [ 1688.055713][ T2405] __x64_sys_sendmmsg+0xa0/0xc0 [ 1688.055731][ T2405] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1688.055748][ T2405] do_syscall_64+0x174/0x580 [ 1688.055765][ T2405] ? trace_irq_disable+0x3b/0x140 [ 1688.055791][ T2405] ? clear_bhb_loop+0x40/0x90 [ 1688.055811][ T2405] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1688.055826][ T2405] RIP: 0033:0x7f2beb99ce59 [ 1688.055843][ T2405] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1688.055857][ T2405] RSP: 002b:00007f2bec846028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1688.055875][ T2405] RAX: ffffffffffffffda RBX: 00007f2bebc15fa0 RCX: 00007f2beb99ce59 [ 1688.055886][ T2405] RDX: 0400000000000172 RSI: 0000200000003cc0 RDI: 0000000000000003 [ 1688.055902][ T2405] RBP: 00007f2bec846090 R08: 0000000000000000 R09: 0000000000000000 [ 1688.055913][ T2405] R10: 0000000004000000 R11: 0000000000000246 R12: 0000000000000001 [ 1688.055927][ T2405] R13: 00007f2bebc16038 R14: 00007f2bebc15fa0 R15: 00007fffa01d5cb8 [ 1688.055955][ T2405] [ 1688.497577][ T2425] macsec2: entered promiscuous mode [ 1688.502998][ T2425] macsec2: entered allmulticast mode [ 1688.540596][ T2418] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 1688.665585][T10774] net_ratelimit: 170 callbacks suppressed [ 1688.665617][T10774] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1688.747074][T10782] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1688.756395][ T2429] can: request_module (can-proto-0) failed. [ 1688.775579][T10782] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1688.805960][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1688.807127][T10782] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1688.853656][ T2447] netlink: 'syz.1.19670': attribute type 12 has an invalid length. [ 1688.868184][T10782] bond10: (slave ip6gretap1): failed to get link speed/duplex [ 1688.885702][T28170] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1688.948502][ T2450] macvlan4: entered allmulticast mode [ 1688.972116][ T2450] gretap0: entered allmulticast mode [ 1688.995871][T10777] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1689.012947][T10777] bond10: (slave ip6gretap1): failed to get link speed/duplex [ 1689.167421][T10777] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1689.623073][ T2476] bond5: option active_slave: mode dependency failed, not supported in mode balance-xor(2) [ 1689.680498][ T2481] netlink: 'syz.4.19677': attribute type 1 has an invalid length. [ 1689.726298][ T2476] bond5 (unregistering): Released all slaves [ 1690.023242][ T2509] xt_ecn: cannot match TCP bits for non-tcp packets [ 1690.150682][ T2515] xt_hashlimit: size too large, truncated to 1048576 [ 1690.177489][ T2514] netlink: 'syz.3.19686': attribute type 1 has an invalid length. [ 1690.239350][ T2514] 8021q: adding VLAN 0 to HW filter on device bond11 [ 1690.278168][ T2526] bond10: (slave bond0): Removing an active aggregator [ 1690.333872][ T2526] bond10: (slave bond0): Releasing backup interface [ 1690.349979][ T2526] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1690.359502][ T2526] bond11: (slave bond0): Enslaving as a backup interface with an up link [ 1690.390740][ T2525] macvlan5: entered allmulticast mode [ 1690.578269][ T2540] netlink: 'syz.0.19691': attribute type 1 has an invalid length. [ 1690.588017][ T2530] lo: Caught tx_queue_len zero misconfig [ 1690.671527][ T2540] bond13: entered promiscuous mode [ 1690.677827][ T2540] 8021q: adding VLAN 0 to HW filter on device bond13 [ 1690.686594][ T2528] ip6tnl0 speed is unknown, defaulting to 1000 [ 1690.859328][ T2540] bond13: (slave bridge10): making interface the new active one [ 1690.888677][ T2540] bridge10: entered promiscuous mode [ 1690.914037][ T2540] bond13: (slave bridge10): Enslaving as an active interface with an up link [ 1691.125274][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1691.334620][ T2572] xt_nfacct: accounting object `syz0' does not exist [ 1691.400647][ T2575] xt_ecn: cannot match TCP bits for non-tcp packets [ 1691.432236][ T2569] can: request_module (can-proto-0) failed. [ 1691.663098][ T2570] __nla_validate_parse: 13 callbacks suppressed [ 1691.663118][ T2570] netlink: 12 bytes leftover after parsing attributes in process `syz.0.19698'. [ 1691.937995][ T2600] netlink: 8 bytes leftover after parsing attributes in process `syz.2.19707'. [ 1692.032646][ T2600] macvlan4: entered allmulticast mode [ 1692.044708][ T2600] gretap0: entered allmulticast mode [ 1692.261417][ T2604] netlink: 36 bytes leftover after parsing attributes in process `syz.2.19708'. [ 1692.302961][ T2604] netlink: 36 bytes leftover after parsing attributes in process `syz.2.19708'. [ 1692.321546][ T2610] netlink: 68 bytes leftover after parsing attributes in process `syz.2.19708'. [ 1692.358222][ T2604] netlink: 36 bytes leftover after parsing attributes in process `syz.2.19708'. [ 1692.363813][ T2615] netlink: 12 bytes leftover after parsing attributes in process `syz.3.19711'. [ 1692.417238][ T2616] netlink: 12 bytes leftover after parsing attributes in process `syz.3.19711'. [ 1692.418576][ T2604] netlink: 36 bytes leftover after parsing attributes in process `syz.2.19708'. [ 1692.480231][ T2604] netlink: 36 bytes leftover after parsing attributes in process `syz.2.19708'. [ 1692.977304][ T2604] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1693.384900][ T2604] gretap0: left allmulticast mode [ 1693.429603][ T12] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1693.454780][ T12] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1693.484213][ T12] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1693.530570][ T12] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1693.696895][T15634] net_ratelimit: 166 callbacks suppressed [ 1693.696913][T15634] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1693.737795][T15634] bond10: (slave ip6gretap1): failed to get link speed/duplex [ 1693.865742][T10777] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1693.876711][T10777] bond10: (slave ip6gretap1): failed to get link speed/duplex [ 1694.005069][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1694.014932][ T12] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1694.027210][ T12] bond10: (slave ip6gretap1): failed to get link speed/duplex [ 1694.079566][ T2680] netlink: 'syz.2.19728': attribute type 11 has an invalid length. [ 1694.089075][T28170] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1694.145835][T10782] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1694.154011][T10782] bond10: (slave ip6gretap1): failed to get link speed/duplex [ 1694.161187][ T2684] block nbd0: Unsupported socket: should be TCP or UNIX. [ 1694.310167][ T2689] syzkaller0: entered promiscuous mode [ 1694.322890][ T2689] syzkaller0: entered allmulticast mode [ 1694.341409][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1694.550292][ T2700] macvlan4: entered allmulticast mode [ 1694.563314][ T2700] gretap0: entered allmulticast mode [ 1694.571755][ T2702] netlink: 'syz.2.19736': attribute type 1 has an invalid length. [ 1694.679938][ T2702] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1694.701592][ T2706] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1694.758610][ T2706] bond6: (slave bond0): Enslaving as a backup interface with an up link [ 1695.220738][ T2745] netlink: 'syz.2.19751': attribute type 4 has an invalid length. [ 1695.274128][ T2745] netlink: 'syz.2.19751': attribute type 4 has an invalid length. [ 1695.428917][ T2764] netlink: 'syz.4.19756': attribute type 5 has an invalid length. [ 1695.496488][ T2766] macvlan5: entered allmulticast mode [ 1695.579570][ T2770] netlink: 'syz.0.19758': attribute type 10 has an invalid length. [ 1695.761442][ T2779] can: request_module (can-proto-0) failed. [ 1695.784910][ T2785] netlink: 'syz.0.19764': attribute type 1 has an invalid length. [ 1695.851372][ T2785] 8021q: adding VLAN 0 to HW filter on device bond14 [ 1695.877609][ T2794] bond7: (slave bond0): Removing an active aggregator [ 1695.887381][ T2794] bond7: (slave bond0): Releasing backup interface [ 1695.899955][ T2794] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1695.950620][ T2794] bond14: (slave bond0): Enslaving as a backup interface with an up link [ 1696.497330][ T2822] syzkaller0: entered promiscuous mode [ 1696.514683][ T2822] syzkaller0: entered allmulticast mode [ 1697.227754][ T2869] __nla_validate_parse: 175 callbacks suppressed [ 1697.227773][ T2869] netlink: 72 bytes leftover after parsing attributes in process `syz.4.19788'. [ 1697.246077][ T2869] netlink: 12 bytes leftover after parsing attributes in process `syz.4.19788'. [ 1697.255197][ T2869] netlink: 4 bytes leftover after parsing attributes in process `syz.4.19788'. [ 1698.715932][T15634] net_ratelimit: 159 callbacks suppressed [ 1698.715952][T15634] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1698.756242][T15634] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1698.784212][ T12] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1698.817122][T10777] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1698.845904][T10777] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1698.865881][ T12] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1698.899523][ T595] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1698.930716][T10777] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1698.958449][ T12] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1698.986618][T10777] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1701.609990][ T5640] Bluetooth: hci3: command 0x0406 tx timeout [ 1702.323866][ T2880] netlink: 'syz.0.19790': attribute type 1 has an invalid length. [ 1702.443327][ T2880] 8021q: adding VLAN 0 to HW filter on device bond15 [ 1702.502248][ T2894] bond14: (slave bond0): Removing an active aggregator [ 1702.529744][ T2894] bond14: (slave bond0): Releasing backup interface [ 1702.572195][ T2894] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1702.597702][ T2894] bond15: (slave bond0): Enslaving as a backup interface with an up link [ 1702.639084][ T2900] netlink: 8 bytes leftover after parsing attributes in process `syz.1.19794'. [ 1702.740369][ T2903] netlink: 8 bytes leftover after parsing attributes in process `syz.1.19794'. [ 1702.774059][ T2914] netlink: 4 bytes leftover after parsing attributes in process `syz.4.19800'. [ 1702.924742][ T2923] xt_ecn: cannot match TCP bits for non-tcp packets [ 1703.354809][ T2914] gretap0: left allmulticast mode [ 1703.428563][ T2941] bridge0: port 1(vlan0) entered blocking state [ 1703.438780][ T2941] bridge0: port 1(vlan0) entered disabled state [ 1703.446576][ T2941] vlan0: entered allmulticast mode [ 1703.454892][ T2941] vlan0: entered promiscuous mode [ 1703.462069][T10779] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1703.475901][T10779] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1703.492846][T10779] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1703.502695][T10779] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1703.559146][ T2947] netlink: 148 bytes leftover after parsing attributes in process `syz.1.19810'. [ 1703.596662][T10779] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1703.633200][T10779] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1703.679959][T10779] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1703.713045][T10779] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1703.728181][ T2955] netlink: 'syz.4.19812': attribute type 1 has an invalid length. [ 1703.736475][ T595] net_ratelimit: 202 callbacks suppressed [ 1703.736492][ T595] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1703.785635][ T595] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1703.822061][ T2963] netlink: 'syz.3.19816': attribute type 1 has an invalid length. [ 1703.823575][ T12] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1703.884641][ T2955] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1703.900339][ T2967] xt_ecn: cannot match TCP bits for non-tcp packets [ 1703.914609][ T2960] bond2: (slave bond0): Releasing backup interface [ 1703.929358][T30613] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1703.960339][ T2960] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1703.965557][T10779] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1703.997579][ T2960] bond5: (slave bond0): Enslaving as a backup interface with a down link [ 1704.008864][T10782] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1704.040383][ T2974] netlink: 'syz.1.19820': attribute type 10 has an invalid length. [ 1704.056500][T30613] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1704.091968][T10782] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1704.096301][ T2963] bond12: entered promiscuous mode [ 1704.107631][ T2963] 8021q: adding VLAN 0 to HW filter on device bond12 [ 1704.136690][ T12] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1704.159909][ T2977] can: request_module (can-proto-0) failed. [ 1704.178784][T10779] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1704.213153][ T2971] bond12: (slave bridge7): making interface the new active one [ 1704.240427][ T2985] netlink: 8 bytes leftover after parsing attributes in process `syz.0.19824'. [ 1704.241123][ T2971] bridge7: entered promiscuous mode [ 1704.261205][ T2971] bond12: (slave bridge7): Enslaving as an active interface with an up link [ 1704.285779][ T2974] 8021q: adding VLAN 0 to HW filter on device team0 [ 1704.304303][ T2974] bond0: (slave team0): Enslaving as an active interface with an up link [ 1704.320476][ T2983] tunl0: Caught tx_queue_len zero misconfig [ 1704.358966][ T2985] macsec3: entered promiscuous mode [ 1704.366949][ T2985] macsec3: entered allmulticast mode [ 1704.634751][ T3000] netlink: 28 bytes leftover after parsing attributes in process `syz.4.19828'. [ 1704.676330][ T3000] netlink: 8 bytes leftover after parsing attributes in process `syz.4.19828'. [ 1704.728959][ T3004] netlink: 12 bytes leftover after parsing attributes in process `syz.4.19828'. [ 1705.007492][ T3009] xt_ecn: cannot match TCP bits for non-tcp packets [ 1705.053440][ T2998] netlink: 28 bytes leftover after parsing attributes in process `syz.1.19829'. [ 1705.170471][ T3015] netlink: 'syz.2.19834': attribute type 13 has an invalid length. [ 1705.500476][ T3025] netlink: 'syz.0.19838': attribute type 1 has an invalid length. [ 1705.574793][ T3025] bond16: entered promiscuous mode [ 1705.582947][ T3025] 8021q: adding VLAN 0 to HW filter on device bond16 [ 1705.597164][ T3030] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 1705.632377][ T3030] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 1705.672036][ T3025] 8021q: adding VLAN 0 to HW filter on device bond16 [ 1705.682395][ T3030] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 1705.706506][ T3025] bond16: (slave vti0): The slave device specified does not support setting the MAC address [ 1705.745674][ T3025] bond16: (slave vti0): Setting fail_over_mac to active for active-backup mode [ 1705.762225][ T3025] bond16: (slave vti0): making interface the new active one [ 1705.772809][ T3025] vti0: entered promiscuous mode [ 1705.781093][ T3025] bond16: (slave vti0): Enslaving as an active interface with an up link [ 1705.793491][ T3046] syzkaller0: entered promiscuous mode [ 1705.820558][ T3046] syzkaller0: entered allmulticast mode [ 1705.980196][ T3050] FAULT_INJECTION: forcing a failure. [ 1705.980196][ T3050] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1706.017424][ T3050] CPU: 0 UID: 0 PID: 3050 Comm: syz.3.19846 Not tainted syzkaller #0 PREEMPT(full) [ 1706.017456][ T3050] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1706.017467][ T3050] Call Trace: [ 1706.017474][ T3050] [ 1706.017482][ T3050] dump_stack_lvl+0xe8/0x150 [ 1706.017506][ T3050] should_fail_ex+0x412/0x560 [ 1706.017529][ T3050] _copy_from_user+0x2d/0xb0 [ 1706.017549][ T3050] ___sys_sendmsg+0x1c6/0x360 [ 1706.017568][ T3050] ? __lock_acquire+0x6b5/0x2cf0 [ 1706.017590][ T3050] ? __pfx____sys_sendmsg+0x10/0x10 [ 1706.017640][ T3050] ? __fget_files+0x2a/0x420 [ 1706.017658][ T3050] ? __fget_files+0x3a0/0x420 [ 1706.017685][ T3050] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1706.017705][ T3050] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1706.017732][ T3050] ? __pfx_ksys_write+0x10/0x10 [ 1706.017761][ T3050] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1706.017778][ T3050] do_syscall_64+0x174/0x580 [ 1706.017795][ T3050] ? trace_irq_disable+0x3b/0x140 [ 1706.017817][ T3050] ? clear_bhb_loop+0x40/0x90 [ 1706.017837][ T3050] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1706.017853][ T3050] RIP: 0033:0x7fcc88d9ce59 [ 1706.017869][ T3050] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1706.017883][ T3050] RSP: 002b:00007fcc89c75028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1706.017899][ T3050] RAX: ffffffffffffffda RBX: 00007fcc89015fa0 RCX: 00007fcc88d9ce59 [ 1706.017909][ T3050] RDX: 00000000200040c4 RSI: 0000200000001640 RDI: 0000000000000006 [ 1706.017919][ T3050] RBP: 00007fcc89c75090 R08: 0000000000000000 R09: 0000000000000000 [ 1706.017928][ T3050] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1706.017938][ T3050] R13: 00007fcc89016038 R14: 00007fcc89015fa0 R15: 00007ffce0c4bfb8 [ 1706.017961][ T3050] [ 1706.278082][ T3038] netdevsim netdevsim2: Firmware load for '..' refused, path contains '..' component [ 1706.357399][ T3062] netlink: 'syz.1.19849': attribute type 11 has an invalid length. [ 1706.642212][ T3076] netlink: 'syz.4.19854': attribute type 1 has an invalid length. [ 1706.725286][ T3080] netlink: 8 bytes leftover after parsing attributes in process `syz.4.19854'. [ 1707.252117][ T3094] nbd: nbd4 already in use [ 1707.267035][ T3094] block nbd4: NBD_DISCONNECT [ 1707.272432][ T3094] block nbd4: Send disconnect failed -32 [ 1707.289476][ T3094] block nbd4: shutting down sockets [ 1707.342767][ T3099] ip6gre0: Caught tx_queue_len zero misconfig [ 1707.412912][ T3099] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 1707.462650][ T3103] macvlan6: entered allmulticast mode [ 1707.531648][T15634] veth0_virt_wifi: left allmulticast mode [ 1707.548505][T15634] veth0_virt_wifi: left promiscuous mode [ 1707.566681][T15634] bridge0: port 3(veth0_virt_wifi) entered disabled state [ 1707.574948][ T3115] netlink: 'syz.4.19864': attribute type 10 has an invalid length. [ 1707.587215][T15634] bridge_slave_1: left allmulticast mode [ 1707.591849][ T3117] netlink: 'syz.0.19866': attribute type 1 has an invalid length. [ 1707.593016][T15634] bridge_slave_1: left promiscuous mode [ 1707.609371][T15634] bridge0: port 2(bridge_slave_1) entered disabled state [ 1707.618627][T15634] bridge_slave_0: left allmulticast mode [ 1707.624272][T15634] bridge_slave_0: left promiscuous mode [ 1707.632137][T15634] bridge0: port 1(bridge_slave_0) entered disabled state [ 1707.680139][T15634] pimreg9: left allmulticast mode [ 1708.131381][T15634] bond4 (unregistering): (slave bridge3): Releasing backup interface [ 1708.174722][T15634] bond14 (unregistering): (slave bridge8): Releasing backup interface [ 1708.197650][T15634] bond16 (unregistering): (slave bridge9): Releasing backup interface [ 1708.250254][T15634] bond20 (unregistering): (slave bridge11): Releasing backup interface [ 1708.319076][T15634] bond25 (unregistering): (slave bridge14): Releasing active interface [ 1708.362410][T15634] bond17 (unregistering): (slave .`): Removing an active aggregator [ 1708.372267][T15634] bond17 (unregistering): (slave .`): Releasing backup interface [ 1708.383386][T15634] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 1708.398101][T15634] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 1708.412259][T15634] .` (unregistering): Released all slaves [ 1708.427281][T15634] bond1 (unregistering): (slave bond2): Releasing backup interface [ 1708.437553][T15634] bond1 (unregistering): Released all slaves [ 1708.452900][T15634] bond2 (unregistering): Released all slaves [ 1708.469969][T15634] bond3 (unregistering): Released all slaves [ 1708.484684][T15634] bond4 (unregistering): Released all slaves [ 1708.506254][T15634] bond5 (unregistering): Released all slaves [ 1708.523951][T15634] bond6 (unregistering): Released all slaves [ 1708.540837][T15634] bond7 (unregistering): Released all slaves [ 1708.554812][T15634] bond8 (unregistering): Released all slaves [ 1708.572955][T15634] bond9 (unregistering): Released all slaves [ 1708.591784][T15634] bond0 (unregistering): Released all slaves [ 1708.608356][T15634] bond10 (unregistering): Released all slaves [ 1708.626159][T15634] bond11 (unregistering): Released all slaves [ 1708.645796][T15634] bond12 (unregistering): Released all slaves [ 1708.664257][T15634] bond13 (unregistering): (slave dummy0): Releasing active interface [ 1708.683169][T15634] bond13 (unregistering): Released all slaves [ 1708.700629][T15634] bond14 (unregistering): Released all slaves [ 1708.714698][T15634] bond15 (unregistering): Released all slaves [ 1708.730885][T15634] bond16 (unregistering): Released all slaves [ 1708.749396][T15634] bond17 (unregistering): Released all slaves [ 1708.755502][T10774] net_ratelimit: 180 callbacks suppressed [ 1708.755520][T10774] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1708.778218][T32675] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1708.789013][T15634] bond18 (unregistering): Released all slaves [ 1708.805577][T10782] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1708.807947][T15634] bond19 (unregistering): Released all slaves [ 1708.825902][T10782] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1708.832260][T15634] bond20 (unregistering): Released all slaves [ 1708.845491][T10782] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1708.853717][T15634] bond21 (unregistering): Released all slaves [ 1708.865735][T10782] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1708.872684][T15634] bond22 (unregistering): Released all slaves [ 1708.888006][T10777] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1708.893437][T15634] bond23 (unregistering): Released all slaves [ 1708.918264][T15634] bond24 (unregistering): Released all slaves [ 1708.925918][T10782] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1708.937579][T15634] bond25 (unregistering): Released all slaves [ 1708.945996][T10782] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1708.955483][T10782] bond6: (slave bond0): failed to get link speed/duplex [ 1709.004518][ T3115] 8021q: adding VLAN 0 to HW filter on device team0 [ 1709.034089][ T3115] bond0: (slave team0): Enslaving as an active interface with an up link [ 1709.061437][ T3117] workqueue: Failed to create a rescuer kthread for wq "bond17": -EINTR [ 1709.150744][ T3125] nbd: must specify at least one socket [ 1709.246645][ T3127] __nla_validate_parse: 5 callbacks suppressed [ 1709.246662][ T3127] netlink: 72 bytes leftover after parsing attributes in process `syz.4.19869'. [ 1709.297409][ T3127] netlink: 12 bytes leftover after parsing attributes in process `syz.4.19869'. [ 1709.351630][ T3127] netlink: 4 bytes leftover after parsing attributes in process `syz.4.19869'. [ 1709.683516][T15634] hma(kX: left promiscuous mode [ 1709.690902][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1709.876353][T15634] 5n: left promiscuous mode [ 1710.030386][T15634] tipc: Disabling bearer [ 1710.062941][T15634] tipc: Disabling bearer [ 1710.084284][T15634] tipc: Left network mode [ 1710.103475][ T3138] netlink: 28 bytes leftover after parsing attributes in process `syz.1.19872'. [ 1710.802539][T15634] hsr_slave_0: left promiscuous mode [ 1710.813041][T15634] hsr_slave_1: left promiscuous mode [ 1710.822690][T15634] veth1_macvtap: left promiscuous mode [ 1710.836888][T15634] veth0_macvtap: left promiscuous mode [ 1711.645944][T15634] IPVS: stop unused estimator thread 0... [ 1713.796037][T30613] net_ratelimit: 183 callbacks suppressed [ 1713.796058][T30613] bond5: (slave bond0): failed to get link speed/duplex [ 1713.815819][T30613] bond6: (slave bond0): failed to get link speed/duplex [ 1713.815860][ T595] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1713.830909][ T595] bond10: (slave ip6gretap1): failed to get link speed/duplex [ 1713.915772][ T12] bond5: (slave bond0): failed to get link speed/duplex [ 1713.925757][T30613] bond6: (slave bond0): failed to get link speed/duplex [ 1713.945436][T30613] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1713.953274][T30613] bond10: (slave ip6gretap1): failed to get link speed/duplex [ 1714.035787][T30613] bond5: (slave bond0): failed to get link speed/duplex [ 1714.055673][T30613] bond6: (slave bond0): failed to get link speed/duplex [ 1718.806304][ T595] net_ratelimit: 171 callbacks suppressed [ 1718.806324][ T595] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1718.815864][T10782] bond6: (slave bond0): failed to get link speed/duplex [ 1718.836123][T10782] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1718.844006][T10782] bond10: (slave ip6gretap1): failed to get link speed/duplex [ 1718.877257][ T595] bond5: (slave bond0): failed to get link speed/duplex [ 1718.935910][T10782] bond6: (slave bond0): failed to get link speed/duplex [ 1718.956429][ T12] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1718.964478][ T12] bond10: (slave ip6gretap1): failed to get link speed/duplex [ 1718.986395][T10774] bond5: (slave bond0): failed to get link speed/duplex [ 1719.045528][T10782] bond6: (slave bond0): failed to get link speed/duplex [ 1722.005222][ T5640] Bluetooth: hci5: command 0x0406 tx timeout [ 1723.837322][T10777] net_ratelimit: 174 callbacks suppressed [ 1723.837343][T10777] bond5: (slave bond0): failed to get link speed/duplex [ 1723.896403][T10774] bond6: (slave bond0): failed to get link speed/duplex [ 1723.916212][T10774] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1723.924102][T10774] bond10: (slave ip6gretap1): failed to get link speed/duplex [ 1723.955670][T10782] bond5: (slave bond0): failed to get link speed/duplex [ 1724.005877][T10774] bond6: (slave bond0): failed to get link speed/duplex [ 1724.035573][T10782] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1724.043635][T10782] bond10: (slave ip6gretap1): failed to get link speed/duplex [ 1724.065220][T10782] bond5: (slave bond0): failed to get link speed/duplex [ 1724.116009][T10782] bond6: (slave bond0): failed to get link speed/duplex [ 1728.865854][T10774] net_ratelimit: 171 callbacks suppressed [ 1728.865876][T10774] bond6: (slave bond0): failed to get link speed/duplex [ 1728.896704][T10777] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1728.904613][T10777] bond10: (slave ip6gretap1): failed to get link speed/duplex [ 1728.917765][ T12] bond5: (slave bond0): failed to get link speed/duplex [ 1728.985578][T10777] bond6: (slave bond0): failed to get link speed/duplex [ 1729.015896][ T12] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1729.023741][ T12] bond10: (slave ip6gretap1): failed to get link speed/duplex [ 1729.036617][ T595] bond5: (slave bond0): failed to get link speed/duplex [ 1729.095749][ T595] bond6: (slave bond0): failed to get link speed/duplex [ 1729.146215][T10777] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1732.622637][ T3162] netlink: 24 bytes leftover after parsing attributes in process `syz.1.19879'. [ 1732.737477][ T3166] netlink: 16 bytes leftover after parsing attributes in process `syz.1.19879'. [ 1732.824715][ T3166] netlink: 16 bytes leftover after parsing attributes in process `syz.1.19879'. [ 1733.168931][ T3180] syzkaller0: entered promiscuous mode [ 1733.202607][ T3180] syzkaller0: entered allmulticast mode [ 1733.268854][ T3182] netdevsim netdevsim2: Direct firmware load for  failed with error -2 [ 1733.306807][ T3182] netdevsim netdevsim2: Falling back to sysfs fallback for:  [ 1733.446217][ T3186] nbd4: detected capacity change from 0 to 39582418599936 [ 1733.459872][ T3196] netlink: 24 bytes leftover after parsing attributes in process `syz.3.19891'. [ 1733.507704][ T3182] [ 1733.510122][ T3182] ====================================================== [ 1733.517175][ T3182] WARNING: possible circular locking dependency detected [ 1733.524278][ T3182] syzkaller #0 Not tainted [ 1733.528738][ T3182] ------------------------------------------------------ [ 1733.535831][ T3182] syz.2.19885/3182 is trying to acquire lock: [ 1733.541918][ T3182] ffff88801be8d180 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_add_one+0x41/0x5c0 [ 1733.551489][ T3182] [ 1733.551489][ T3182] but task is already holding lock: [ 1733.558866][ T3182] ffffffff8f390060 (gdp_mutex){+.+.}-{4:4}, at: get_device_parent+0x16f/0x3a0 [ 1733.567891][ T3182] [ 1733.567891][ T3182] which lock already depends on the new lock. [ 1733.567891][ T3182] [ 1733.578306][ T3182] [ 1733.578306][ T3182] the existing dependency chain (in reverse order) is: [ 1733.587340][ T3182] [ 1733.587340][ T3182] -> #9 (gdp_mutex){+.+.}-{4:4}: [ 1733.594985][ T3182] __mutex_lock+0x1a3/0x1550 [ 1733.600225][ T3182] get_device_parent+0x16f/0x3a0 [ 1733.605821][ T3182] device_add+0x2e1/0xbb0 [ 1733.610717][ T3182] device_create+0x269/0x300 [ 1733.615866][ T3182] msr_device_create+0x33/0x50 [ 1733.621287][ T3182] cpuhp_invoke_callback+0x445/0x860 [ 1733.627212][ T3182] cpuhp_thread_fun+0x36b/0x780 [ 1733.632714][ T3182] smpboot_thread_fn+0x541/0xa50 [ 1733.638459][ T3182] kthread+0x389/0x470 [ 1733.643341][ T3182] ret_from_fork+0x514/0xb70 [ 1733.649084][ T3182] ret_from_fork_asm+0x1a/0x30 [ 1733.654398][ T3182] [ 1733.654398][ T3182] -> #8 (cpuhp_state-up){+.+.}-{0:0}: [ 1733.661992][ T3182] cpuhp_thread_fun+0x127/0x780 [ 1733.667584][ T3182] smpboot_thread_fn+0x541/0xa50 [ 1733.673064][ T3182] kthread+0x389/0x470 [ 1733.677676][ T3182] ret_from_fork+0x514/0xb70 [ 1733.682849][ T3182] ret_from_fork_asm+0x1a/0x30 [ 1733.688156][ T3182] [ 1733.688156][ T3182] -> #7 (cpu_hotplug_lock){++++}-{0:0}: [ 1733.695917][ T3182] cpus_read_lock+0x42/0x160 [ 1733.701058][ T3182] static_key_slow_inc+0x12/0x30 [ 1733.706539][ T3182] nbd_genl_reconfigure+0x132f/0x1ea0 [ 1733.707659][T16943] block nbd4: Receive control failed (result -104) [ 1733.712541][ T3182] genl_family_rcv_msg_doit+0x22a/0x330 [ 1733.712574][ T3182] genl_rcv_msg+0x61c/0x7a0 [ 1733.712592][ T3182] netlink_rcv_skb+0x232/0x4b0 [ 1733.712608][ T3182] genl_rcv+0x28/0x40 [ 1733.739942][ T3182] netlink_unicast+0x75c/0x8e0 [ 1733.745348][ T3182] netlink_sendmsg+0x813/0xb40 [ 1733.750744][ T3182] ____sys_sendmsg+0x972/0x9f0 [ 1733.756048][ T3182] ___sys_sendmsg+0x2a5/0x360 [ 1733.761333][ T3182] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1733.766955][ T3182] do_syscall_64+0x174/0x580 [ 1733.772084][ T3182] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1733.778513][ T3182] [ 1733.778513][ T3182] -> #6 (&nsock->tx_lock){+.+.}-{4:4}: [ 1733.786499][ T3182] __mutex_lock+0x1a3/0x1550 [ 1733.791628][ T3182] nbd_queue_rq+0x37b/0x1100 [ 1733.796741][ T3182] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 1733.802871][ T3182] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 1733.809757][ T3182] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 1733.816305][ T3182] blk_mq_run_hw_queue+0x348/0x4f0 [ 1733.821940][ T3182] blk_mq_dispatch_list+0xd16/0xe10 [ 1733.827655][ T3182] blk_mq_flush_plug_list+0x48d/0x570 [ 1733.833548][ T3182] __blk_flush_plug+0x3ed/0x4d0 [ 1733.839063][ T3182] __submit_bio+0x28d/0x580 [ 1733.844099][ T3182] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 1733.850260][ T3182] block_read_full_folio+0x7b7/0x830 [ 1733.856079][ T3182] filemap_read_folio+0x137/0x3b0 [ 1733.861628][ T3182] do_read_cache_folio+0x358/0x590 [ 1733.867310][ T3182] read_part_sector+0xb6/0x2b0 [ 1733.872666][ T3182] adfspart_check_ICS+0xb1/0x960 [ 1733.878145][ T3182] bdev_disk_changed+0x817/0x1770 [ 1733.883695][ T3182] blkdev_get_whole+0x380/0x510 [ 1733.889172][ T3182] bdev_open+0x31e/0xd30 [ 1733.893947][ T3182] blkdev_open+0x470/0x610 [ 1733.898895][ T3182] do_dentry_open+0x822/0x13a0 [ 1733.904535][ T3182] vfs_open+0x3b/0x340 [ 1733.909118][ T3182] path_openat+0x2e08/0x3860 [ 1733.914232][ T3182] do_file_open+0x23e/0x4a0 [ 1733.919263][ T3182] do_sys_openat2+0x113/0x200 [ 1733.924461][ T3182] __x64_sys_openat+0x138/0x170 [ 1733.929926][ T3182] do_syscall_64+0x174/0x580 [ 1733.935214][ T3182] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1733.941744][ T3182] [ 1733.941744][ T3182] -> #5 (&cmd->lock){+.+.}-{4:4}: [ 1733.948965][ T3182] __mutex_lock+0x1a3/0x1550 [ 1733.954091][ T3182] nbd_queue_rq+0xc6/0x1100 [ 1733.959128][ T3182] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 1733.965537][ T3182] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 1733.972389][ T3182] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 1733.978904][ T3182] blk_mq_run_hw_queue+0x348/0x4f0 [ 1733.984545][ T3182] blk_mq_dispatch_list+0xd16/0xe10 [ 1733.990310][ T3182] blk_mq_flush_plug_list+0x48d/0x570 [ 1733.996314][ T3182] __blk_flush_plug+0x3ed/0x4d0 [ 1734.001799][ T3182] __submit_bio+0x28d/0x580 [ 1734.006859][ T3182] submit_bio_noacct_nocheck+0x2f4/0xa40 [ 1734.013022][ T3182] block_read_full_folio+0x7b7/0x830 [ 1734.018848][ T3182] filemap_read_folio+0x137/0x3b0 [ 1734.024506][ T3182] do_read_cache_folio+0x358/0x590 [ 1734.030239][ T3182] read_part_sector+0xb6/0x2b0 [ 1734.035537][ T3182] adfspart_check_ICS+0xb1/0x960 [ 1734.040986][ T3182] bdev_disk_changed+0x817/0x1770 [ 1734.046522][ T3182] blkdev_get_whole+0x380/0x510 [ 1734.051886][ T3182] bdev_open+0x31e/0xd30 [ 1734.056640][ T3182] blkdev_open+0x470/0x610 [ 1734.061566][ T3182] do_dentry_open+0x822/0x13a0 [ 1734.066855][ T3182] vfs_open+0x3b/0x340 [ 1734.071437][ T3182] path_openat+0x2e08/0x3860 [ 1734.076541][ T3182] do_file_open+0x23e/0x4a0 [ 1734.081562][ T3182] do_sys_openat2+0x113/0x200 [ 1734.086751][ T3182] __x64_sys_openat+0x138/0x170 [ 1734.092116][ T3182] do_syscall_64+0x174/0x580 [ 1734.097238][ T3182] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1734.103733][ T3182] [ 1734.103733][ T3182] -> #4 (set->srcu){.+.+}-{0:0}: [ 1734.110856][ T3182] __synchronize_srcu+0xca/0x300 [ 1734.116488][ T3182] elevator_switch+0x1e8/0x7a0 [ 1734.121774][ T3182] elevator_change+0x2cc/0x450 [ 1734.127133][ T3182] elevator_set_default+0x36c/0x430 [ 1734.132843][ T3182] blk_register_queue+0x3e9/0x4e0 [ 1734.138386][ T3182] __add_disk+0x677/0xd50 [ 1734.143265][ T3182] add_disk_fwnode+0xfb/0x480 [ 1734.148466][ T3182] nbd_dev_add+0x72c/0xb50 [ 1734.153395][ T3182] nbd_init+0x168/0x1f0 [ 1734.158163][ T3182] do_one_initcall+0x250/0x870 [ 1734.163441][ T3182] do_initcall_level+0x104/0x190 [ 1734.168981][ T3182] do_initcalls+0x59/0xa0 [ 1734.173834][ T3182] kernel_init_freeable+0x2a6/0x3e0 [ 1734.179554][ T3182] kernel_init+0x1d/0x1d0 [ 1734.184396][ T3182] ret_from_fork+0x514/0xb70 [ 1734.189504][ T3182] ret_from_fork_asm+0x1a/0x30 [ 1734.194778][ T3182] [ 1734.194778][ T3182] -> #3 (&q->elevator_lock){+.+.}-{4:4}: [ 1734.202600][ T3182] __mutex_lock+0x1a3/0x1550 [ 1734.207745][ T3182] elevator_change+0x1b3/0x450 [ 1734.213022][ T3182] elevator_set_none+0xb5/0x140 [ 1734.218383][ T3182] blk_mq_update_nr_hw_queues+0x5e7/0x1a60 [ 1734.224712][ T3182] nbd_start_device+0x17f/0xb10 [ 1734.230088][ T3182] nbd_genl_connect+0x165b/0x1cf0 [ 1734.235631][ T3182] genl_family_rcv_msg_doit+0x22a/0x330 [ 1734.241700][ T3182] genl_rcv_msg+0x61c/0x7a0 [ 1734.246732][ T3182] netlink_rcv_skb+0x232/0x4b0 [ 1734.252009][ T3182] genl_rcv+0x28/0x40 [ 1734.256506][ T3182] netlink_unicast+0x75c/0x8e0 [ 1734.261781][ T3182] netlink_sendmsg+0x813/0xb40 [ 1734.267069][ T3182] ____sys_sendmsg+0x972/0x9f0 [ 1734.272349][ T3182] ___sys_sendmsg+0x2a5/0x360 [ 1734.277534][ T3182] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1734.282984][ T3182] do_syscall_64+0x174/0x580 [ 1734.288085][ T3182] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1734.294489][ T3182] [ 1734.294489][ T3182] -> #2 (&q->q_usage_counter(io)#49){++++}-{0:0}: [ 1734.303152][ T3182] blk_alloc_queue+0x546/0x680 [ 1734.308432][ T3182] __blk_mq_alloc_disk+0x197/0x390 [ 1734.314085][ T3182] nbd_dev_add+0x499/0xb50 [ 1734.319021][ T3182] nbd_init+0x168/0x1f0 [ 1734.323734][ T3182] do_one_initcall+0x250/0x870 [ 1734.329012][ T3182] do_initcall_level+0x104/0x190 [ 1734.334471][ T3182] do_initcalls+0x59/0xa0 [ 1734.339311][ T3182] kernel_init_freeable+0x2a6/0x3e0 [ 1734.345020][ T3182] kernel_init+0x1d/0x1d0 [ 1734.349860][ T3182] ret_from_fork+0x514/0xb70 [ 1734.354956][ T3182] ret_from_fork_asm+0x1a/0x30 [ 1734.360240][ T3182] [ 1734.360240][ T3182] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 1734.367448][ T3182] fs_reclaim_acquire+0x71/0x100 [ 1734.372926][ T3182] kmem_cache_alloc_lru_noprof+0x45/0x640 [ 1734.379163][ T3182] alloc_inode+0xb8/0x1b0 [ 1734.384007][ T3182] iget_locked+0x131/0x6a0 [ 1734.388942][ T3182] kernfs_get_inode+0x4f/0x780 [ 1734.394262][ T3182] kernfs_get_tree+0x5cd/0x980 [ 1734.399543][ T3182] sysfs_get_tree+0x46/0x110 [ 1734.404647][ T3182] vfs_get_tree+0x92/0x2a0 [ 1734.409578][ T3182] do_new_mount+0x341/0xd30 [ 1734.414592][ T3182] __se_sys_mount+0x31d/0x420 [ 1734.419787][ T3182] do_syscall_64+0x174/0x580 [ 1734.424905][ T3182] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1734.431313][ T3182] [ 1734.431313][ T3182] -> #0 (&root->kernfs_rwsem){++++}-{4:4}: [ 1734.439486][ T3182] __lock_acquire+0x15a5/0x2cf0 [ 1734.444872][ T3182] lock_acquire+0x106/0x350 [ 1734.449891][ T3182] down_write+0x96/0x200 [ 1734.454664][ T3182] kernfs_add_one+0x41/0x5c0 [ 1734.459784][ T3182] kernfs_create_dir_ns+0xde/0x130 [ 1734.465424][ T3182] sysfs_create_dir_ns+0x12f/0x2a0 [ 1734.471069][ T3182] kobject_add_internal+0x62b/0xd00 [ 1734.476783][ T3182] kobject_add+0x163/0x240 [ 1734.481715][ T3182] get_device_parent+0x316/0x3a0 [ 1734.487168][ T3182] device_add+0x2e1/0xbb0 [ 1734.492107][ T3182] firmware_fallback_sysfs+0x2e4/0xa30 [ 1734.498178][ T3182] _request_firmware+0x1052/0x1780 [ 1734.503803][ T3182] request_firmware+0x36/0x50 [ 1734.508998][ T3182] devlink_compat_flash_update+0x15a/0x2c0 [ 1734.515483][ T3182] dev_ethtool+0x1874/0x1ae0 [ 1734.520595][ T3182] dev_ioctl+0x392/0x1150 [ 1734.525439][ T3182] sock_do_ioctl+0x23e/0x320 [ 1734.530551][ T3182] sock_ioctl+0x5c6/0x7f0 [ 1734.535411][ T3182] __se_sys_ioctl+0xfc/0x170 [ 1734.540524][ T3182] do_syscall_64+0x174/0x580 [ 1734.545623][ T3182] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1734.552030][ T3182] [ 1734.552030][ T3182] other info that might help us debug this: [ 1734.552030][ T3182] [ 1734.562253][ T3182] Chain exists of: [ 1734.562253][ T3182] &root->kernfs_rwsem --> cpuhp_state-up --> gdp_mutex [ 1734.562253][ T3182] [ 1734.575031][ T3182] Possible unsafe locking scenario: [ 1734.575031][ T3182] [ 1734.582522][ T3182] CPU0 CPU1 [ 1734.587936][ T3182] ---- ---- [ 1734.593290][ T3182] lock(gdp_mutex); [ 1734.597179][ T3182] lock(cpuhp_state-up); [ 1734.604105][ T3182] lock(gdp_mutex); [ 1734.610512][ T3182] lock(&root->kernfs_rwsem); [ 1734.615273][ T3182] [ 1734.615273][ T3182] *** DEADLOCK *** [ 1734.615273][ T3182] [ 1734.623485][ T3182] 3 locks held by syz.2.19885/3182: [ 1734.628681][ T3182] #0: ffff888068670258 (&devlink->lock_key#33){+.+.}-{4:4}, at: devlink_compat_flash_update+0xa6/0x2c0 [ 1734.639905][ T3182] #1: ffffffff8e7f99e8 (umhelper_sem){++++}-{4:4}, at: usermodehelper_read_trylock+0xfc/0x2c0 [ 1734.650261][ T3182] #2: ffffffff8f390060 (gdp_mutex){+.+.}-{4:4}, at: get_device_parent+0x16f/0x3a0 [ 1734.659914][ T3182] [ 1734.659914][ T3182] stack backtrace: [ 1734.665799][ T3182] CPU: 1 UID: 0 PID: 3182 Comm: syz.2.19885 Not tainted syzkaller #0 PREEMPT(full) [ 1734.665819][ T3182] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1734.665831][ T3182] Call Trace: [ 1734.665837][ T3182] [ 1734.665844][ T3182] dump_stack_lvl+0xe8/0x150 [ 1734.665865][ T3182] print_circular_bug+0x2e1/0x300 [ 1734.665886][ T3182] check_noncircular+0x12e/0x150 [ 1734.665906][ T3182] __lock_acquire+0x15a5/0x2cf0 [ 1734.665924][ T3182] ? __lock_acquire+0x6b5/0x2cf0 [ 1734.665941][ T3182] ? preempt_schedule_common+0x82/0xd0 [ 1734.665957][ T3182] ? preempt_schedule_thunk+0x16/0x30 [ 1734.665979][ T3182] ? kernfs_add_one+0x41/0x5c0 [ 1734.665997][ T3182] lock_acquire+0x106/0x350 [ 1734.666012][ T3182] ? kernfs_add_one+0x41/0x5c0 [ 1734.666037][ T3182] down_write+0x96/0x200 [ 1734.666053][ T3182] ? kernfs_add_one+0x41/0x5c0 [ 1734.666069][ T3182] ? __pfx_down_write+0x10/0x10 [ 1734.666085][ T3182] ? kernfs_root+0x1c/0x230 [ 1734.666100][ T3182] ? kernfs_root+0x1c/0x230 [ 1734.666118][ T3182] ? kernfs_root+0x1ea/0x230 [ 1734.666136][ T3182] kernfs_add_one+0x41/0x5c0 [ 1734.666159][ T3182] kernfs_create_dir_ns+0xde/0x130 [ 1734.666181][ T3182] sysfs_create_dir_ns+0x12f/0x2a0 [ 1734.666202][ T3182] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 1734.666223][ T3182] ? do_raw_spin_unlock+0xf5/0x210 [ 1734.666254][ T3182] kobject_add_internal+0x62b/0xd00 [ 1734.666280][ T3182] kobject_add+0x163/0x240 [ 1734.666298][ T3182] ? rcu_is_watching+0x15/0xb0 [ 1734.666318][ T3182] ? __pfx_kobject_add+0x10/0x10 [ 1734.666334][ T3182] ? __kasan_kmalloc+0x93/0xb0 [ 1734.666359][ T3182] ? kobject_init+0x83/0x1e0 [ 1734.666377][ T3182] get_device_parent+0x316/0x3a0 [ 1734.666401][ T3182] device_add+0x2e1/0xbb0 [ 1734.666423][ T3182] firmware_fallback_sysfs+0x2e4/0xa30 [ 1734.666446][ T3182] ? kfree+0x1c5/0x640 [ 1734.666467][ T3182] _request_firmware+0x1052/0x1780 [ 1734.666493][ T3182] ? __pfx__request_firmware+0x10/0x10 [ 1734.666512][ T3182] ? xa_get_mark+0x6fc/0x7b0 [ 1734.666530][ T3182] request_firmware+0x36/0x50 [ 1734.666546][ T3182] devlink_compat_flash_update+0x15a/0x2c0 [ 1734.666568][ T3182] ? __pfx_netdev_run_todo+0x10/0x10 [ 1734.666584][ T3182] ? __pfx_devlink_compat_flash_update+0x10/0x10 [ 1734.666604][ T3182] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1734.666623][ T3182] dev_ethtool+0x1874/0x1ae0 [ 1734.666644][ T3182] ? __pfx_dev_ethtool+0x10/0x10 [ 1734.666660][ T3182] ? dev_load+0x21/0x1f0 [ 1734.666676][ T3182] ? dev_load+0x21/0x1f0 [ 1734.666688][ T3182] dev_ioctl+0x392/0x1150 [ 1734.666700][ T3182] sock_do_ioctl+0x23e/0x320 [ 1734.666717][ T3182] ? __pfx_sock_do_ioctl+0x10/0x10 [ 1734.666731][ T3182] ? do_futex+0x395/0x420 [ 1734.666752][ T3182] sock_ioctl+0x5c6/0x7f0 [ 1734.666791][ T3182] ? __pfx_sock_ioctl+0x10/0x10 [ 1734.666806][ T3182] ? __fget_files+0x2a/0x420 [ 1734.666821][ T3182] ? __fget_files+0x3a0/0x420 [ 1734.666835][ T3182] ? __fget_files+0x2a/0x420 [ 1734.666850][ T3182] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1734.666869][ T3182] ? __pfx_sock_ioctl+0x10/0x10 [ 1734.666883][ T3182] __se_sys_ioctl+0xfc/0x170 [ 1734.666900][ T3182] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1734.666913][ T3182] do_syscall_64+0x174/0x580 [ 1734.666925][ T3182] ? trace_irq_disable+0x3b/0x140 [ 1734.666943][ T3182] ? clear_bhb_loop+0x40/0x90 [ 1734.666957][ T3182] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1734.666969][ T3182] RIP: 0033:0x7f361179ce59 [ 1734.666983][ T3182] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1734.666994][ T3182] RSP: 002b:00007f36125af028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1734.667008][ T3182] RAX: ffffffffffffffda RBX: 00007f3611a16180 RCX: 00007f361179ce59 [ 1734.667018][ T3182] RDX: 0000200000000000 RSI: 0000000000008946 RDI: 0000000000000006 [ 1734.667027][ T3182] RBP: 00007f3611832d6f R08: 0000000000000000 R09: 0000000000000000 [ 1734.667035][ T3182] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1734.667042][ T3182] R13: 00007f3611a16218 R14: 00007f3611a16180 R15: 00007ffd1c23cdd8 [ 1734.667058][ T3182] [ 1735.126986][ T12] net_ratelimit: 161 callbacks suppressed [ 1735.127008][ T12] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1735.164805][ T3194] netlink: 28 bytes leftover after parsing attributes in process `syz.4.19889'. [ 1735.176088][T32675] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1735.198533][T10781] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1735.207014][T10780] bond6: (slave bond0): failed to get link speed/duplex [ 1735.229419][T10780] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1735.255525][T10780] bond5: (slave bond0): failed to get link speed/duplex [ 1735.267006][T10780] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1735.274909][T10780] bond10: (slave ip6gretap1): failed to get link speed/duplex [ 1735.288555][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1735.325546][T10780] bond6: (slave bond0): failed to get link speed/duplex [ 1735.365746][T10781] bond5: (slave bond0): failed to get link speed/duplex [ 1740.155700][T10780] net_ratelimit: 172 callbacks suppressed [ 1740.155722][T10780] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1740.179056][T10780] bond10: (slave ip6gretap1): failed to get link speed/duplex [ 1740.187397][T10780] bond6: (slave bond0): failed to get link speed/duplex [ 1740.215662][T10781] bond5: (slave bond0): failed to get link speed/duplex [ 1740.305715][T10781] bond6: (slave bond0): failed to get link speed/duplex [ 1740.306661][T10780] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1740.321479][T10780] bond10: (slave ip6gretap1): failed to get link speed/duplex [ 1740.345754][T32675] bond5: (slave bond0): failed to get link speed/duplex [ 1740.406063][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1740.426653][T10777] bond6: (slave bond0): failed to get link speed/duplex [ 1740.436100][T10774] bond10: (slave ip6gretap1): link status up, enabling it in 0 ms [ 1742.485329][T16943] Bluetooth: hci0: command 0x0406 tx timeout