last executing test programs: 4m3.279353831s ago: executing program 4 (id=20602): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000940)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000002000000e00000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000064010102000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x310) setsockopt$inet_group_source_req(r0, 0x0, 0x2f, &(0x7f0000000240)={0x2, {{0x2, 0x4e22, @empty}}, {{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x41}}}}, 0x108) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(0xffffffffffffffff, 0x4048587b, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x83, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_WOWLAN(r1, 0x0, 0x80) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x3a, 0x0, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f0000000180)=0x800, 0x4) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f00000000c0)=0x20000, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000400)={'dummy0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r2, &(0x7f0000000100)={0x2c, 0x0, r4}, 0x10) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000000)="150ac740ca522dd44d8a3a23992b70e9e8e524caa7fb12e8f02f85143c3ae9e82a09a8d75671b555d50cb0bc8631340d19b7b87bd70d2bf3c4ad12f906d6d763dc2d75837afc597f6116e10dcc8403706dff090ab943e5e0513429060bea57aa303f1a1df5e773f7e304440d1d0422aec21e1c2c43dde1900be41e579602fa192d6a7ced", 0x84}], 0x1) close(r0) 4m2.841551954s ago: executing program 4 (id=20607): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newtaction={0x60, 0x30, 0x105, 0x70bd28, 0x0, {}, [{0x4c, 0x1, [@m_simple={0x48, 0x1, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x2, 0xfffffff8, 0x1, 0x9, 0x7}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=0xffffffffffffffff, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e000000080000000000180003"], 0x44}}, 0x0) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)="d8000000100081044e81f782db44b904021d006a0f000000e8fe55a1290015000600142603600e120900040044000000a80016000a0003402e60000000000000b94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a985162f7ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d3220a7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360d", 0x9c}], 0x1}, 0x60044084) (async) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000004600070128b570000000008f017c0000080004804e2d"], 0x1c}}, 0x400c010) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="440000004600070128bd700000000000017c000030"], 0x44}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)=ANY=[], 0x118}], 0x1, 0x0, 0x0, 0x20008001}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001fd8)=ANY=[@ANYBLOB="85000000050000006d000000000000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x64}, 0x48) (async) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) (async, rerun: 32) r6 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) r7 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), r6) sendmsg$DEVLINK_CMD_RATE_SET(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)={0x3c, r7, 0x1, 0x0, 0x0, {0x2a}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x58}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4001}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000200)={'bond0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000240)={'wlan1\x00'}) (async, rerun: 64) sendmsg$nl_route(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000600)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="400d0000000000002800128008000100687372001c00028008000200", @ANYRES16=r1, @ANYBLOB="be5990b4f7c95756c478586f7c43e60f875c347edccf15ea9d555766d4f7413ea3c39f55c852a927db92837fc3d46988dfea9402e87b14a42dde1dfce993b78811e4bdb97e85496d67cf31570efed2cff49f780304dff7a0d6394cd4b6a84fbf99", @ANYRES32=r0, @ANYRES8=r0], 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x20008000) (async, rerun: 64) sendmsg$nl_route_sched(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000380)=@deltclass={0x44, 0x29, 0x10, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0xd, 0xe}, {0x4, 0x2}, {0xd, 0x10}}, [@tclass_kind_options=@c_multiq={0xb}, @tclass_kind_options=@c_drr={{0x8}, {0xc, 0x2, @TCA_DRR_QUANTUM={0x8, 0x1, 0x6eb}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) (async) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r9) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000030000000900010073797a300000000040000000030a03000000020000000000030000000900030073797a30000000000900010073797a300000000014000480080002406375fd82080001400000000028000000000a01040000000000000000030000000900010073797a3000000000080002400000000114000000110001"], 0xb0}}, 0x0) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r11, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async, rerun: 32) sendmsg$NFT_BATCH(r9, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000e0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c00018006000100d103000008000340000000011400"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (rerun: 32) 4m2.57172061s ago: executing program 4 (id=20611): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r1) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r2, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000020000001c0012000c000100626f6e6400"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000010001fff000000008100000000000000", @ANYRES32=0x0, @ANYBLOB="00000000003f0000200012800b00010067656e657665000010000280060005004e24000004000e0008000a00", @ANYRES32=r4], 0x48}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) 4m2.111888486s ago: executing program 4 (id=20617): r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000480)={'wlan0\x00', &(0x7f0000000000)=@ethtool_gstrings={0x1b, 0x1}}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r2, @ANYBLOB="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"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f00000004c0)) ioctl$sock_inet_SIOCSIFBRDADDR(r0, 0x891a, &(0x7f0000000200)={'bridge_slave_0\x00', {0x2, 0x4e22, @rand_addr=0x64010101}}) socket(0x10, 0x80002, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r9) r10 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r12 = socket(0x400000000010, 0x3, 0x0) r13 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r12, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000022c0)=@newtfilter={0xe8c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r14, {0x5, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe58, 0x2, [@TCA_MATCHALL_ACT={0xe54, 0x2, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x0, 0x5, 0x5, 0x9206, 0x5}, 0x3, 0x4}, [{0xe, 0x7, 0x3, 0x8, 0x3, 0x4df}, {0x8, 0x8, 0x40, 0x8, 0x5, 0x1}, {0x7e12f9c5, 0xffffff61, 0x0, 0x6b5, 0x80000000, 0x101}, {0x9, 0xb1f, 0x3, 0x1, 0x1, 0x2}, {0xfffffe01, 0x5, 0xb91, 0x8, 0x6, 0x4}, {0xfffffffe, 0x0, 0x0, 0xe49, 0x4, 0x15}, {0x1, 0xa, 0xc79, 0x5, 0x401, 0xfffffff4}, {0x7, 0x8c0, 0x5, 0xffffffff, 0x2, 0x10001}, {0xfffffffa, 0x1, 0x7, 0xffffffff, 0x1, 0xffffffff}, {0x1, 0x100, 0x0, 0x80000000, 0x7f6b, 0x1}, {0x154, 0x8, 0xb, 0x2, 0x7fffffff, 0xb3e4}, {0x36, 0x7, 0xffff, 0xfffffff7, 0x10, 0xf7bb}, {0x8, 0x7, 0x401, 0x1, 0x400, 0x8565}, {0x5, 0x4, 0x80000000, 0xc50, 0x7, 0xfffffffd}, {0x4, 0x101, 0x2, 0x6, 0x6, 0x2}, {0x1000, 0x800, 0xe, 0x1, 0x7ff, 0xe}, {0x1, 0x9, 0x7, 0x3, 0xfffffff9, 0x4}, {0x1, 0x200, 0x975f, 0x2, 0x400, 0x3dc4}, {0x100, 0x200, 0x98, 0xf9d6, 0xb}, {0x1, 0x83, 0xf9, 0x5, 0x6}, {0x8000, 0x7, 0x1, 0x9, 0xc9d, 0x2}, {0x81, 0x7fffffff, 0x2, 0x7fff, 0x7, 0x5}, {0x80, 0x4, 0x2, 0x1, 0xf403, 0xfffffff1}, {0xffff, 0xedf, 0xc, 0x8, 0x5, 0x1}, {0x0, 0x4, 0x8000, 0xfa8, 0x6, 0x1}, {0xa7d, 0x6, 0x6, 0x80, 0x3f9, 0x9}, {0x2f, 0xdfb, 0x8, 0x4b, 0x7, 0x1}, {0x9, 0x7ff, 0xa, 0x280000, 0x2, 0x1}, {0x138, 0x51d, 0xf, 0x6, 0x4, 0x7}, {0x1ff, 0x6, 0x8, 0x8, 0x4, 0xb}, {0x4, 0x2be2, 0x79f29323, 0x3ff, 0x2, 0x4}, {0xd4, 0x5, 0x5, 0x7, 0xea4c, 0xa4b1}, {0x993, 0x4, 0xfff, 0x23b06916, 0x6, 0xfffffffc}, {0x6, 0x4a6, 0x3, 0x80, 0x7ff, 0xa}, {0x7, 0xfffffffb, 0x0, 0xffffffff, 0x1, 0xfb3}, {0x5, 0xe6, 0xfff, 0x0, 0x1, 0x400}, {0xfffff1a2, 0xa, 0x7, 0xa1, 0x5, 0x4}, {0xbe, 0x2000, 0xffffffff, 0xfffffc00, 0xe06, 0x6}, {0x100, 0x7fffffff, 0x8, 0x4, 0x4, 0x9497}, {0xd, 0x8001, 0xf2b, 0xffffffff, 0x3, 0xfffffff3}, {0x2, 0x80000000, 0x5a, 0x1, 0x5, 0x6}, {0x4, 0xc378, 0x8, 0xf, 0x7, 0x8144}, {0x6, 0x81, 0x5, 0x5, 0x3}, {0x9, 0x8001, 0xe10, 0x783, 0x7, 0x3}, {0x7fff, 0x1, 0xe05, 0xffffad2a, 0x4, 0x99c}, {0x99eb, 0x6, 0x5, 0x2, 0x2, 0x1fe0000}, {0x800, 0x9, 0x2a3b, 0x4, 0x7, 0x9}, {0x2, 0x6, 0x0, 0x9, 0xe, 0xe}, {0x65d, 0x8000, 0x6, 0xfffffffe, 0x400, 0x1}, {0xfffffff8, 0x7, 0x6, 0xd4, 0x1000, 0x4}, {0x0, 0xc, 0x5, 0x3, 0xb9, 0x3}, {0x205, 0xfffffffd, 0x9, 0x4, 0x4, 0x6}, {0x1, 0x0, 0x4, 0x100, 0x9, 0xa}, {0x3, 0x2, 0x10, 0x2, 0x5, 0x3}, {0xfffffff8, 0xe, 0xfd0, 0x9, 0x0, 0x7fff}, {0xb, 0x7ff, 0x7, 0xffffff81, 0x9, 0x3}, {0x4, 0xff, 0x10001, 0x0, 0x3, 0x4}, {0x8, 0x8, 0x3ff, 0xbf, 0x7, 0x10}, {0x2f, 0xfffffe00, 0xc6000000, 0x81, 0x6, 0xffffff01}, {0x5, 0x44bd, 0x3, 0x8, 0x0, 0xffffffff}, {0x800000, 0xd, 0x4737, 0xf0000, 0x8405, 0x3}, {0xa4, 0x7, 0x7, 0x7, 0x6, 0xda73}, {0x9, 0x1, 0x7, 0x8971, 0x8, 0x8}, {0x8, 0x1, 0x6, 0x68, 0x7fff, 0x4}, {0x201, 0xf9c3, 0x5, 0x9, 0x0, 0x6c}, {0x5, 0x6, 0x6, 0x1, 0xf, 0x9}, {0x1, 0xf580, 0x3ff, 0x6, 0x6e, 0x6}, {0xad, 0x9, 0x7fff, 0x8, 0x8}, {0x862, 0x0, 0x2800000, 0x2, 0x8, 0x8}, {0x4, 0x90000, 0x2, 0x8d1, 0x1, 0x4}, {0x200, 0xb, 0x40, 0x9, 0xfffffff9, 0x2}, {0x8, 0xdbb, 0x4, 0x3, 0x7, 0xfff}, {0x7, 0x4, 0xce, 0x9, 0x6, 0x4}, {0x5ae2, 0x8, 0x8, 0x8, 0xfffffff0, 0x3ff}, {0x1, 0x5, 0x8, 0x7ff, 0x101, 0xffffffff}, {0x12, 0xa7, 0x6, 0x0, 0xc6, 0x4}, {0x4, 0x9, 0x9, 0xa, 0x9}, {0x84d5, 0xfffffffe, 0x7fffffff, 0x5, 0xf}, {0x5, 0x40, 0x8, 0xa, 0x6, 0x2}, {0x4, 0x100, 0x4d90, 0xf, 0xffffffd7, 0xffffffff}, {0x3, 0x10001, 0x2, 0x8, 0x82dc, 0xffff}, {0x6, 0x1, 0x2, 0xfffff402, 0x2}, {0x4, 0x6, 0xca6, 0x6, 0xb, 0xa}, {0xa, 0x4, 0x9, 0x8ec1, 0x1, 0x10000}, {0x2, 0x2, 0x1ff, 0x171a9022, 0xf4, 0x9000000}, {0x313, 0xfffffff8, 0x1, 0x0, 0x2, 0x1}, {0x5841, 0xfffffffb, 0x3, 0x40004, 0x3ff, 0x9f}, {0x10f, 0xca1c, 0x5, 0x8001, 0xa, 0x4}, {0x766, 0x7, 0x7, 0x7, 0x1, 0x5}, {0x7, 0xba, 0xfffffffd, 0x8001, 0x7ffd}, {0x1, 0x23, 0x3, 0x335, 0x4, 0x5}, {0x2, 0xc, 0x9, 0x0, 0x4, 0x8000}, {0x1, 0x8, 0xb7, 0x3, 0x9, 0x4}, {0x3c, 0x4, 0x1000, 0x2, 0xfff, 0x80000001}, {0x24, 0xffff, 0xd513, 0x748, 0x6eea, 0x4}, {0x57, 0x3, 0x40, 0xb, 0x3080d7c0}, {0x5, 0x7, 0x7, 0x48, 0x9}, {0x5, 0xf01, 0x2, 0x80001d, 0x2, 0x7}, {0x7fff, 0x66019165, 0x88, 0x6, 0x4}, {0x22, 0x0, 0x0, 0x168b, 0x9, 0x5}, {0x4, 0x9, 0x3, 0x3, 0x7fffffff, 0x3}, {0x6, 0x7, 0xfffffff5, 0x4, 0x9, 0x9}, {0x4, 0x8, 0x4, 0x8000, 0x8, 0x4}, {0x16, 0x6, 0x7, 0x5, 0xede, 0x5}, {0x9, 0x4, 0x7fffffff, 0x5, 0x7, 0x6125d06a}, {0xfff, 0x9, 0xda1, 0x521, 0x101, 0xd}, {0xdb2b, 0x1, 0x1, 0x9, 0x5, 0x800}, {0x3, 0x200, 0xfffffffe, 0xff, 0xff, 0x2}, {0x2, 0x5, 0x7, 0x62d, 0x5, 0x3ff}, {0x600, 0x4, 0x3, 0xb42f, 0x5, 0x3}, {0x401, 0x9, 0xc44, 0x3, 0x2, 0x6ea9894}, {0x624, 0xecdb, 0x8000, 0x6, 0x1b, 0x7}, {0x9, 0x2, 0x8, 0xf71, 0xfb0, 0x5}, {0x3, 0x4, 0x5908c254, 0x45c8, 0x2, 0x4}, {0x6, 0xff, 0x20000, 0x2, 0x221, 0x30000}, {0x8, 0x59bc, 0x7, 0x4, 0x0, 0x6}, {0xfffff001, 0x80000000, 0x8, 0x4, 0x644, 0x2}, {0x7, 0x2, 0x6, 0x9, 0xe, 0x3}, {0x2, 0x5, 0x101, 0x9199, 0x694, 0x66c}, {0x4, 0x2, 0x7, 0xc2, 0x69, 0xe5}, {0x8, 0x205a52ca, 0xdc, 0x3, 0x5, 0x4}, {0x2, 0x7, 0x7, 0xf47e, 0x8, 0x8}, {0x787, 0x2, 0x9, 0x3fe, 0x7, 0x5}, {0x0, 0x80000000, 0x5, 0x100, 0x6, 0x400}, {0x7, 0x3f8, 0x4, 0x0, 0x7, 0xfffffff9}, {0x7bce, 0xfffffffc, 0xfffffff8, 0x8001, 0x5, 0xf16}, {0xe, 0x3, 0x34b1, 0xb9a, 0x81, 0x800}, {0x101, 0x7, 0x4, 0x10000, 0x68063168, 0x81}], [{0x4, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x4}, {0x86f1faf2efed1208}, {0x4}, {0x2}, {0x5, 0x1}, {0x3, 0x1}, {}, {0x5, 0x1}, {0x4}, {0x4}, {0x1, 0x1}, {0x3}, {0x5, 0x1}, {0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x2}, {0x2, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x2}, {}, {0x4}, {0x2}, {0x4}, {0x4}, {0x2}, {0x4, 0x1}, {0x4}, {0x1, 0x1}, {0x1}, {0x3}, {0x3, 0x1}, {0x4}, {0x5, 0x1}, {0x3}, {0x2, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x1}, {0x1, 0x1}, {}, {0x2}, {0x5}, {}, {0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x2}, {0x3}, {0x4, 0x1}, {}, {0x1}, {}, {0x2, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x4, 0x1}, {0x1, 0x1}, {0x2}, {0x2}, {0x4, 0x1}, {0x0, 0xa22732b51f90c34a}, {0x1, 0x1}, {0x3, 0x1}, {0x2}, {0x6, 0x1}, {0x1, 0xa77fa159ed31b0c3}, {0x2}, {0x4, 0x1}, {0x3, 0x1}, {0x4}, {0x3, 0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {}, {0x4}, {0x2}, {0x1}, {0x5}, {0x4}, {0x0, 0x1}, {0x7}, {0x1, 0x1}, {0x2}, {0x4, 0x1}, {0x4}, {0x4}, {0x4, 0x1}, {0x3}, {0x1, 0x1}, {0x4, 0x1}, {0x2}, {0x5, 0x1}, {0x3}, {0x0, 0x1}, {0x3, 0x1}, {0x4}, {0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x3}, {0x5}, {0x2}, {0x0, 0x1}, {0x4, 0xa845cf6605cfc9f5}, {0x1, 0x222ada2ec63376b7}, {0x1, 0x1}, {0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x3}, {0x3, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {}, {0x1}, {0x0, 0x1}], 0x41}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0xe8c}, 0x1, 0x0, 0x0, 0x10}, 0x0) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r4, &(0x7f0000000000)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r11, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="27030200084014000e00002fb96dffff1144ee163cddcb000000800000827600000000000000", 0x26}, {&(0x7f0000000780)="f058050000007f8f", 0x4012}], 0x2}, 0x5) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r10, 0x660c) r15 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r15, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x213) 4m1.440157862s ago: executing program 4 (id=20623): r0 = socket(0x5, 0xa, 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="9f5f00"/20, @ANYRES32=r1, @ANYBLOB="00000000000000001c002b8008000800", @ANYRES32, @ANYRES16=r2, @ANYRES32=r1], 0x44}}, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f0000000040)=0x8, 0x4) sendmsg$inet_sctp(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in6={0xa, 0x4e26, 0x200000ff, @loopback, 0x5}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000100)="a6", 0x1}], 0x1, &(0x7f0000000180)=ANY=[@ANYBLOB="20000000000000008400000008000000000000000000087b87579d59b02fd8640e374129b4251dfc"], 0x20, 0x4855}, 0x24000052) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000ffd000/0x2000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000e40)=""/4073, 0xff0, 0x1, 0x0}, &(0x7f0000000140)=0x53) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000001500)=@raw={'raw\x00', 0x8, 0x3, 0xb20, 0x0, 0x43, 0xa0, 0x0, 0x98, 0xa88, 0x178, 0x178, 0xa88, 0x178, 0x49, 0x0, {[{{@ip={@loopback, @local, 0x0, 0x0, 'veth0_to_bond\x00', 'ip6erspan0\x00'}, 0x12a, 0x1a0, 0x1c0, 0x0, {0x0, 0x7a010000}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x8, 0x0, 'syz0\x00'}}, @common=@unspec=@owner={{0x38}, {0xee01, 0x0, 0x0, 0x0, 0x1}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x888, 0x8c8, 0x0, {}, [@common=@unspec=@connbytes={{0x38}, {[{0xb}]}}, @common=@unspec=@u32={{0x7e0}, {[{[{0x9}, {0x3}, {0x1, 0x1}, {0x0, 0x3}, {0x4, 0x2}, {0xb1d}, {0x3}, {0x8}, {0x2, 0x3}, {0x3}, {0x103}], [{0xe8f3, 0x5}, {0x1d, 0x6}, {0x4, 0x8}, {0x0, 0x4}, {0x4, 0xc3e}, {0x1, 0x100}, {0x6, 0x7}, {0x3, 0x3}, {0xf2, 0x3}, {0x3ff, 0x8}, {0x10, 0x3}], 0x6, 0x6}, {[{0x80, 0x3}, {0x2}, {0x6, 0x1}, {0x355cbac3, 0x2}, {0x0, 0x2}, {0x0, 0x2}, {0x7}, {0xe7, 0x2}, {0x3, 0x3}, {0x5598e8fe, 0x2}, {0x6, 0x1}], [{0x9, 0x9097}, {0x7, 0x9}, {0x7, 0xa}, {0x6, 0x8}, {0x20080, 0x5}, {0x13, 0xc0000000}, {0x40, 0xb}, {0x9, 0x6}, {0x4, 0x2}, {0x6, 0x7fffffff}, {0x7fffffff, 0x400}], 0x7}, {[{0x84, 0x2}, {}, {0x0, 0x2}, {0xffffffff, 0x1}, {}, {0x5, 0x1}, {0x5, 0x2}, {0x8, 0x3}, {0x2, 0x3}, {0x8, 0x1}, {0x7}], [{0x9, 0x5}, {0x80, 0x32}, {0x0, 0xfffffff7}, {0xff, 0x1}, {0x7, 0x6}, {0xdb9, 0xff4}, {0x6, 0x3ff}, {0x3, 0x6}, {0x5, 0x10}, {0x9, 0x6}, {0x10000, 0x2}], 0x4, 0x2a}, {[{0x3, 0x2}, {0xa, 0x1}, {0x6, 0x1}, {0x10, 0x3}, {0x2, 0x2}, {0x2, 0x2}, {0x3, 0x1}, {0x2, 0x3}, {0x3, 0x1}, {0x2, 0x2}, {0x477d, 0x1}], [{0x4, 0xffffffff}, {0x200, 0x6}, {0x4be1, 0x4044}, {0x1}, {0x5, 0xc}, {0x3, 0x4}, {0x2, 0x4}, {0x800, 0x8000}, {0x8, 0x800}, {0x3, 0x2}, {0xe, 0x8000}], 0x4, 0xb}, {[{0x7, 0x1}, {0xd, 0x3}, {0x5}, {0x61}, {0x9}, {}, {0x2}, {0x1}, {0x0, 0x2}, {0x9, 0x3}, {0x5, 0x3}], [{0x58d, 0x3ff}, {0x0, 0x7f}, {0x6}, {0xfc9b, 0x80000001}, {0x101, 0x7}, {0x7, 0x1}, {0x7, 0x8001}, {0x2, 0x1}, {0x2, 0x2}, {0x9, 0x4cf}, {0x7, 0x10000}], 0x1}, {[{0x2}, {0x9}, {0x8, 0x1}, {0x2, 0x3}, {0x71, 0x3}, {0x0, 0x2}, {0xe, 0x2}, {0x6, 0x2}, {0x5}, {0x3000000, 0x3}, {0x6, 0x1}], [{0x9, 0x3}, {0x5, 0x7fffffff}, {0xffff, 0x4}, {0x0, 0x7}, {0x8, 0xb502}, {0x1ff, 0x86}, {0x6, 0xffffffff}, {0x3, 0x4}, {0x5, 0x6}, {0xf, 0xf93}, {0x5, 0x4}], 0x3, 0x3}, {[{0x7, 0x1}, {0x3, 0x1}, {0x45d7}, {0xfff, 0x3}, {0xc4f, 0x3}, {0x0, 0x2}, {0x400, 0x1}, {0x2, 0x1}, {0x4, 0x2}, {0xfffffffd}, {0x2}], [{0x3, 0x6}, {0xed, 0xd}, {0x80, 0xb81d}, {0x2ca, 0x80000000}, {0x8, 0xff}, {0x7, 0x45a8}, {0x8, 0x6}, {0x4, 0x1}, {0x2, 0x6}, {0xfc, 0x6}, {0xd, 0x138c}], 0x6}, {[{0x4, 0x1}, {0x800}, {0x9, 0x2}, {0xf0000000, 0x2}, {0x6, 0x3}, {0x3, 0x2}, {0x8, 0x2}, {}, {0x9}, {0x400, 0x2}, {0x8, 0x3}], [{0x7, 0xfffffffd}, {0x2}, {0x2, 0x2}, {0x8f, 0x6}, {0x7, 0x5}, {0x8, 0x7}, {0xb, 0x82c6}, {0xb1b}, {0xbd5c, 0xffff}, {0x1, 0x9b8d}, {0xec, 0x5}], 0x2, 0x6}, {[{0x8}, {0x0, 0x1}, {0xac000000}, {0x6, 0x2}, {0x2d8, 0x3}, {0x7e3ea4bc}, {0x8, 0x1}, {0x4f, 0x3}, {0x4, 0x2}, {0xfffffff7}, {0x3, 0x2}], [{0x5, 0x42}, {0x76a74689, 0x4}, {0x1}, {0x8000, 0x7}, {0x400, 0xdd}, {0xfff, 0x8}, {0x76b, 0xfffffffe}, {0xa6d00, 0xfffffff7}, {0x10001, 0xfc8d}, {0x0, 0x10001}, {0x4, 0x3}], 0x1, 0x9}, {[{0x8, 0x1}, {0x3, 0x3}, {0x18, 0x3}, {0x3ff, 0x3}, {0x7fffffff}, {0x8}, {0x1, 0x3}, {0x8, 0x3}, {0xf1b6}, {0x80, 0x3}, {0x4, 0x2}], [{0x2, 0x4}, {0x3, 0xf}, {0x9, 0x6}, {0x7f, 0x8}, {0x7, 0x273e1899}, {0x4, 0x1}, {0x6, 0x3}, {0x1, 0xb7}, {0x8, 0x3}, {0x3, 0x1}, {0x7ff, 0x63}], 0xb, 0x3}, {[{0x1, 0x2}, {0x6, 0x3}, {0xffff, 0x1}, {0x1}, {0x4, 0x3}, {0x4, 0x3}, {0xaa7}, {0x100, 0x3}, {0x2}, {0xfffffff7, 0xb90af65875a5dc08}, {0x4, 0x3}], [{0x3}, {0x8001, 0x7}, {0x10000, 0x7524}, {0x73d, 0x4}, {0x0, 0x280000}, {0x3, 0x3af}, {0x5, 0x2}, {0x101, 0xbf}, {0x10000, 0x6}, {0x3, 0x800}], 0x8, 0x5}], 0x3}}]}, @common=@unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "f1c098b60204ed02d82cf440fef5497b80c29d381d41116000"}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0xb80) 4m1.075300385s ago: executing program 4 (id=20630): r0 = socket(0x15, 0xa, 0x0) getsockopt(r0, 0x200000000114, 0x2720, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r1, 0x84, 0x82, &(0x7f00000002c0)="1a00000002000000", 0x8) (async) setsockopt(r1, 0x84, 0x82, &(0x7f00000002c0)="1a00000002000000", 0x8) r2 = socket$nl_rdma(0x10, 0x3, 0x14) getsockopt(r2, 0x20, 0x200, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x28, 0x1411, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_RES_MRN={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000400)={0x0, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2e}}, {0x2, 0x4e21, @multicast2}, {0x2, 0x4e20, @empty}, 0x248, 0x0, 0x0, 0x0, 0x40, &(0x7f0000000200)='sit0\x00', 0x6, 0x8, 0x5}) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000480)={'ip6erspan0\x00', {0x2, 0x4e22, @local}}) (async) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000480)={'ip6erspan0\x00', {0x2, 0x4e22, @local}}) syz_genetlink_get_family_id$tipc(&(0x7f0000000280), r0) (async) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000280), r0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000040)={0x0, 0x0, 0x10}, &(0x7f00000001c0)=0x8) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nfc(&(0x7f0000000580), r7) sendmsg$NFC_CMD_START_POLL(r7, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000680)={0x14, r8, 0x1, 0x70bd2c, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x4000000) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r9, 0x6, 0xd, &(0x7f0000000000)='cubic', 0x4f) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000300)={r6, 0xb, 0xc5, "932d0ee69593540cc1175296fc935273318527b42d78d35a1d41d9b4602d97231c922b69d56e1c04067c626716f8ca80e6565080ba4b8fa04caf866338444afc3d77b33b13b0a76250b96640c0e2517e26be3e1da2765006e25c94bf0109d1b234d12e921bc011110d30d811410555def6ca59bb5af588a38213b42cc8a84422607c6df9379d722a2377cba31c32514645684a453eb031e886e5e1de5ac9eee62f956cd436e33ac55cbdb6c193af7605fd6783e642231f0562ec61b2bb8a52132987557281"}, 0xcd) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) r10 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1400000026000100000000000000000006"], 0x14}], 0x1}, 0x0) socket(0x10, 0x3, 0x0) (async) r11 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000006800010000000000000000000a00000000000000080006000100000004000b"], 0x24}}, 0x0) (async) sendmsg$nl_route(r11, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000006800010000000000000000000a00000000000000080006000100000004000b"], 0x24}}, 0x0) sendmsg$TIPC_CMD_SET_LINK_PRI(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100fb19ffff0000000001000000000000000c410000004c0014fffffff062726f6164636173742d6c696e6b"], 0x68}, 0x1, 0x0, 0x0, 0x8000}, 0x0) (async) sendmsg$TIPC_CMD_SET_LINK_PRI(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100fb19ffff0000000001000000000000000c410000004c0014fffffff062726f6164636173742d6c696e6b"], 0x68}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x4, 0x80000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x4}, {0x13, 0x2}, {0x0, 0x1}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_DQ_RATE_ESTIMATOR={0x8}, @TCA_FQ_PIE_DQ_RATE_ESTIMATOR={0x8, 0xc, 0x80000000}]}}]}, 0x44}}, 0x0) socket$netlink(0x10, 0x3, 0x14) socket$nl_generic(0x10, 0x3, 0x10) (async) r13 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r13, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="bc00000042000701fefffffffcdbdf25047c000004004580a10001"], 0xbc}, 0x1, 0x0, 0x0, 0xc004}, 0xc000) sendmsg$nl_route(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}}, 0x4008840) 3m46.077458333s ago: executing program 32 (id=20630): r0 = socket(0x15, 0xa, 0x0) getsockopt(r0, 0x200000000114, 0x2720, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r1, 0x84, 0x82, &(0x7f00000002c0)="1a00000002000000", 0x8) (async) setsockopt(r1, 0x84, 0x82, &(0x7f00000002c0)="1a00000002000000", 0x8) r2 = socket$nl_rdma(0x10, 0x3, 0x14) getsockopt(r2, 0x20, 0x200, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x28, 0x1411, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_RES_MRN={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000400)={0x0, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2e}}, {0x2, 0x4e21, @multicast2}, {0x2, 0x4e20, @empty}, 0x248, 0x0, 0x0, 0x0, 0x40, &(0x7f0000000200)='sit0\x00', 0x6, 0x8, 0x5}) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000480)={'ip6erspan0\x00', {0x2, 0x4e22, @local}}) (async) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000480)={'ip6erspan0\x00', {0x2, 0x4e22, @local}}) syz_genetlink_get_family_id$tipc(&(0x7f0000000280), r0) (async) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000280), r0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000040)={0x0, 0x0, 0x10}, &(0x7f00000001c0)=0x8) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nfc(&(0x7f0000000580), r7) sendmsg$NFC_CMD_START_POLL(r7, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000680)={0x14, r8, 0x1, 0x70bd2c, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x4000000) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r9, 0x6, 0xd, &(0x7f0000000000)='cubic', 0x4f) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000300)={r6, 0xb, 0xc5, "932d0ee69593540cc1175296fc935273318527b42d78d35a1d41d9b4602d97231c922b69d56e1c04067c626716f8ca80e6565080ba4b8fa04caf866338444afc3d77b33b13b0a76250b96640c0e2517e26be3e1da2765006e25c94bf0109d1b234d12e921bc011110d30d811410555def6ca59bb5af588a38213b42cc8a84422607c6df9379d722a2377cba31c32514645684a453eb031e886e5e1de5ac9eee62f956cd436e33ac55cbdb6c193af7605fd6783e642231f0562ec61b2bb8a52132987557281"}, 0xcd) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) r10 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1400000026000100000000000000000006"], 0x14}], 0x1}, 0x0) socket(0x10, 0x3, 0x0) (async) r11 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000006800010000000000000000000a00000000000000080006000100000004000b"], 0x24}}, 0x0) (async) sendmsg$nl_route(r11, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000006800010000000000000000000a00000000000000080006000100000004000b"], 0x24}}, 0x0) sendmsg$TIPC_CMD_SET_LINK_PRI(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100fb19ffff0000000001000000000000000c410000004c0014fffffff062726f6164636173742d6c696e6b"], 0x68}, 0x1, 0x0, 0x0, 0x8000}, 0x0) (async) sendmsg$TIPC_CMD_SET_LINK_PRI(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100fb19ffff0000000001000000000000000c410000004c0014fffffff062726f6164636173742d6c696e6b"], 0x68}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x4, 0x80000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x4}, {0x13, 0x2}, {0x0, 0x1}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_DQ_RATE_ESTIMATOR={0x8}, @TCA_FQ_PIE_DQ_RATE_ESTIMATOR={0x8, 0xc, 0x80000000}]}}]}, 0x44}}, 0x0) socket$netlink(0x10, 0x3, 0x14) socket$nl_generic(0x10, 0x3, 0x10) (async) r13 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r13, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="bc00000042000701fefffffffcdbdf25047c000004004580a10001"], 0xbc}, 0x1, 0x0, 0x0, 0xc004}, 0xc000) sendmsg$nl_route(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}}, 0x4008840) 2m50.96787595s ago: executing program 0 (id=21300): r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newlink={0x44, 0x10, 0x1, 0x470bd27, 0x25dfd402, {0x0, 0x0, 0x0, r3, 0x64e98, 0x16ac1}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_GROUP_FWD_MASK={0x6, 0x1f, 0x62}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x400c080}, 0x200088c2) r4 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_linger(r4, 0x1, 0xd, 0x0, &(0x7f0000000240)) r5 = socket$netlink(0x10, 0x3, 0x400000000000004) mmap$xdp(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x200000a, 0x80010, r0, 0x80000000) writev(r5, &(0x7f0000019440)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c076f2c6014f5d219221d80481aed108a2cb749a807133ed7a80ffe0090f000060000000a2bcb503ca00000f7f8900000020000000", 0x48}], 0x1) r6 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16, @ANYBLOB="0100000000000000000001"], 0x6c}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$XFS_IOC_FSBULKSTAT(r4, 0xc0205865, &(0x7f0000000bc0)={&(0x7f0000000080)=0x1, 0x2, &(0x7f0000000400)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], &(0x7f0000000b80)}) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="0000000000000000400012800c0001"], 0x68}}, 0x0) r9 = socket$igmp6(0xa, 0x3, 0x2) r10 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000380)={'syzkaller1\x00', @link_local}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r9, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}}) write$tun(r8, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0x72) readv(r10, &(0x7f0000000040)=[{&(0x7f0000000180)=""/163, 0xa3}, {&(0x7f0000002580)=""/4106, 0x100a}], 0x2) syz_genetlink_get_family_id$batadv(&(0x7f00000002c0), r7) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1400000015000103"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) r11 = socket$inet6(0xa, 0x3, 0x2f) connect$inet6(r11, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) bind$inet6(r11, &(0x7f0000000040)={0xa, 0x4e21, 0x7dd5, @loopback, 0xc}, 0x1c) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'lo\x00'}) bind$inet6(r6, &(0x7f0000000000)={0xa, 0x4e23, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4}, 0x1c) 2m46.114929536s ago: executing program 0 (id=21313): r0 = socket$kcm(0x29, 0x2, 0x0) sendmsg(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001140)=[{&(0x7f0000000000)="ff45679b012420893ba2a1fd1ee01ebc00000000a1a037b8f6bf96abd096b48908b61cb527072453f698f34d", 0xfffffc63}], 0x1}, 0x4000000) sendmmsg$inet(r0, &(0x7f0000000540)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r2, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pipe(&(0x7f0000000200)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r3, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) 2m45.077312953s ago: executing program 0 (id=21319): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c00000040000701feffffff00000000017c0000040042800c0001"], 0x2c}}, 0xc000) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000100)=@qipcrtr={0x2a, 0x4}, 0x80, &(0x7f0000000500)=[{&(0x7f00000006c0)="27031c00160014000000002f1eafacf706e10540000086dd00050004ee0b80558ddbba9b37242d37a518fc9c5b000eaf07c3650596", 0x35}], 0x1}, 0x4) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000002a00), r1) sendmsg$NLBL_MGMT_C_REMOVE(r1, &(0x7f0000002b00)={0x0, 0x0, &(0x7f0000002ac0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002bbd7000ffdbdf2502"], 0x24}, 0x1, 0x0, 0x0, 0x60000000}, 0x4042080) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000008c0)=ANY=[], 0x7c}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000810}, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000004c0)="d8000000190081154e81f782db4cb904021d0800fd02fe02e8fe50a10a000548258848000c600e41b0000900ac00080325000000040015000a00ff150048035c3b61c1d67f6f94007134cf6efb8000a007a290457f01a7cee4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e00360db79826835d3a71d95667daffffffffff1f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5b7276505de6ccd40dd6e4edef3d93452a92954b43370e9703920723f9000001", 0xcb}], 0x1}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x12, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x70, 0x30, 0x10, 0x0, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x0, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x80000}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x59368f8353c3b040}}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4008085}, 0x20040000) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500060008000000050003000500000005000300fd00000008000200", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r5], 0x90}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xc, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8001}, [@generic={0x91, 0x1, 0x1, 0x49}]}, &(0x7f0000000c40)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000040)={'veth0_to_bond\x00', @random="0200ac7f7f00"}) syz_emit_ethernet(0x66, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa88a800008100000086dd6076cd8a0028000020010000000000000000000000000000ff0200000000000000000000000000010004000000000000071800000000040000d704"], 0x0) sendmsg$NFT_BATCH(r0, 0x0, 0x0) 2m44.796496983s ago: executing program 0 (id=21324): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) (async) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0x6bf1c2d5adba9432}) readv(r0, &(0x7f0000000040)=[{&(0x7f00000001c0)=""/227, 0xe3}], 0x1) r1 = socket$kcm(0x2, 0xa, 0x2) r2 = socket$igmp6(0xa, 0x3, 0x2) socket$unix(0x1, 0x2, 0x0) (async) socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000001300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000001300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) 2m44.342045911s ago: executing program 0 (id=21330): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x80000) setsockopt(r2, 0x84, 0x7d, &(0x7f0000000040)="0200000bcdb7f681", 0x8) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a09040000000000000000020000022c000480280001800e000100696d6d6564696174650014000280080001400000001608000140000000000900010073797a30000000000900020073797a3222a32b92a015b194000000000014000000110001000000000000"], 0x80}}, 0x0) 2m43.732875679s ago: executing program 0 (id=21334): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r2, &(0x7f0000000080)={0x1f, 0x0, @any, 0x4, 0x2}, 0xe) setsockopt$bt_l2cap_L2CAP_OPTIONS(r2, 0x6, 0x1, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010000030900010073797a30000000002c000000030a01010000000000000000010000090900010073797a30000000000900030073797a320000000098000000060a010400000000000000000100000008000b400000000070000480340001800b000100657874686472000024000280080001400000000c080003400000000008000440000000220500020007000000380001800c000100626974776973650028000280080003400000000208000140000000140800024000000012080006400000000c040004800900010073797a30"], 0x10c}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)={0x14, 0x26, 0x1, 0xf0bd26, 0x25dfdbfd, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) getsockopt$IP_SET_OP_GET_FNAME(r1, 0x1, 0x53, &(0x7f0000000700)={0x8, 0x7, 0x0, 'syz2\x00'}, &(0x7f0000000280)=0xffffffffffffff18) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000000000, 0x40, &(0x7f0000000240)=@raw={'raw\x00', 0x4001, 0x3, 0x210, 0xe0, 0x700001b, 0x148, 0xe0, 0x148, 0x178, 0x206, 0x240, 0x178, 0x240, 0x7fffffe, 0x0, {[{{@uncond, 0x1ea, 0xb8, 0xe0, 0x0, {0x390, 0x8f00}, [@inet=@rpfilter={{0x28}, {0x3}}, @common=@socket0={{0x20}}]}, @common=@unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x2}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xe0}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x270) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'macsec0\x00', 0x300}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000040)={'veth0_to_bond\x00', 0x2}) 2m28.652349207s ago: executing program 33 (id=21334): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r2, &(0x7f0000000080)={0x1f, 0x0, @any, 0x4, 0x2}, 0xe) setsockopt$bt_l2cap_L2CAP_OPTIONS(r2, 0x6, 0x1, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010000030900010073797a30000000002c000000030a01010000000000000000010000090900010073797a30000000000900030073797a320000000098000000060a010400000000000000000100000008000b400000000070000480340001800b000100657874686472000024000280080001400000000c080003400000000008000440000000220500020007000000380001800c000100626974776973650028000280080003400000000208000140000000140800024000000012080006400000000c040004800900010073797a30"], 0x10c}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)={0x14, 0x26, 0x1, 0xf0bd26, 0x25dfdbfd, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) getsockopt$IP_SET_OP_GET_FNAME(r1, 0x1, 0x53, &(0x7f0000000700)={0x8, 0x7, 0x0, 'syz2\x00'}, &(0x7f0000000280)=0xffffffffffffff18) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000000000, 0x40, &(0x7f0000000240)=@raw={'raw\x00', 0x4001, 0x3, 0x210, 0xe0, 0x700001b, 0x148, 0xe0, 0x148, 0x178, 0x206, 0x240, 0x178, 0x240, 0x7fffffe, 0x0, {[{{@uncond, 0x1ea, 0xb8, 0xe0, 0x0, {0x390, 0x8f00}, [@inet=@rpfilter={{0x28}, {0x3}}, @common=@socket0={{0x20}}]}, @common=@unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x2}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xe0}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x270) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'macsec0\x00', 0x300}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000040)={'veth0_to_bond\x00', 0x2}) 21.055974528s ago: executing program 1 (id=22556): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x2, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085100000fdffffffe2c56e5e92cbc5de9500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0x4, &(0x7f0000000100)=""/147, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x61e5cc96}, 0x22) 20.895715125s ago: executing program 1 (id=22559): openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.idle_time\x00', 0x275a, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x2a, &(0x7f0000000100)=r2, 0x4) sendmsg$unix(r1, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) sendmsg$inet(r1, &(0x7f0000000940)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r0, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x12162) 20.755689422s ago: executing program 1 (id=22561): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1e, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0xffffffffffffffe7}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) 20.717252462s ago: executing program 1 (id=22562): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r1, &(0x7f0000000500)=ANY=[@ANYBLOB='b *:* r'], 0x8) write$cgroup_devices(r1, &(0x7f0000000140)=ANY=[@ANYBLOB='b *:4\tw'], 0xa) r2 = openat$cgroup_devices(r0, &(0x7f0000000240)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r2, &(0x7f0000000280)=ANY=[@ANYBLOB='a '], 0x9) 20.633937974s ago: executing program 1 (id=22563): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b70300000100000085000000c0000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="180000000000000000000000000000001802"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000940)="00000010000097a1c4bbe89086dd", 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 20.520566227s ago: executing program 1 (id=22564): bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) socketpair$unix(0x1, 0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], 0x0}, 0x94) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.stat\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)) ioctl$SIOCSIFHWADDR(r0, 0x8b32, &(0x7f0000001700)={'wlan1\x00', @remote}) 7.899921545s ago: executing program 2 (id=22662): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x33}}}, 0x0, 0x0, 0x4, 0x0, "e83ae75240c2d658ec87bb53679fd0450078548ceb6c4414fab0919616e19aecedec1b76aea5922406b64cddaeb9d339ba3c01c2c7d0df8e61740b9af2d4e499d58654a4cf0fa0ce1f830c3279cffcfd"}, 0xd8) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0xce, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xa2732}], 0x1}, 0x0) ioctl$sock_SIOCINQ(r0, 0x541b, 0x0) 6.865932524s ago: executing program 2 (id=22673): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x7, [@fwd={0x5}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x2b}, 0x28) 6.724149707s ago: executing program 2 (id=22674): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) ioctl$SIOCSIFHWADDR(r2, 0x8943, &(0x7f0000002280)={'syzkaller0\x00', @random="110000000002"}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r3, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'}) 5.121648594s ago: executing program 5 (id=22689): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r4}, &(0x7f0000000280), &(0x7f0000000240)=r1}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r5, 0x4) sendmsg$inet(r3, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 4.899042473s ago: executing program 5 (id=22690): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000980)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) 4.858516771s ago: executing program 5 (id=22691): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x1}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x5f, 0x0, &(0x7f0000000100)="b9ff03316844268cb89e14f0080047e0ffff00124000631177fbac14fe16e000030a07070403fe80a0014d9c0000845013f2325f1a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa007", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8923, &(0x7f0000000140)={'pim6reg1\x00', @link_local={0x1, 0x80, 0xc2, 0x25, 0x64, 0x2}}) 1.121952217s ago: executing program 3 (id=22692): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000003e40)=ANY=[@ANYBLOB="15000000080000003c"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000c80)={0x3, 0xc, &(0x7f0000000bc0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x98}}]}, &(0x7f0000000580)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.02371094s ago: executing program 6 (id=22693): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'veth0_macvtap\x00', 0x2}) 1.002515503s ago: executing program 2 (id=22694): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x7}, 0x48) close(0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0xfffffffc}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000680)={r1, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000b98cad95850000000100000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f00000000c0)=r5, 0x4) sendmsg$unix(r4, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) 991.712849ms ago: executing program 3 (id=22695): r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r0, 0x0, 0x0, 0x4040090) 855.953211ms ago: executing program 5 (id=22696): r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$unix(r0, &(0x7f00000029c0)=[{{&(0x7f0000000600)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x24000010}}], 0x1, 0x0) 855.760052ms ago: executing program 6 (id=22697): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) readv(r0, &(0x7f0000001300)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1) close(0x3) write$cgroup_int(r1, &(0x7f0000000140), 0xfffffdef) 754.052057ms ago: executing program 3 (id=22698): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0xa43, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x0, 0x2}, 0x63) 736.350043ms ago: executing program 2 (id=22699): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x24008015, 0x0, 0x0) 688.402597ms ago: executing program 5 (id=22700): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-256\x00'}, 0x58) setsockopt$ALG_SET_AEAD_AUTHSIZE(r0, 0x117, 0x5, 0x0, 0x81) 664.224171ms ago: executing program 3 (id=22701): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37, 0x0, 0x1}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0xa, 0x3, &(0x7f0000008000)=ANY=[@ANYBLOB="850000001400000007000000000000009500000000000000"], &(0x7f0000014ff5)='GPL\x00', 0x2, 0x1000, &(0x7f0000014000)=""/4096, 0x0, 0x0, '\x00', 0x0, @fallback, r0, 0x14, &(0x7f0000000000), 0x1, 0x10, &(0x7f0000000000)={0x0, 0x3}, 0xffffffffffffff1c}, 0x70) 628.703371ms ago: executing program 6 (id=22702): bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0xc618, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 451.704758ms ago: executing program 2 (id=22703): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000002440)={0x0, 0x0, &(0x7f0000002400)={&(0x7f0000000400)={0x1c, r2, 0x1, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x4040004) 451.543917ms ago: executing program 3 (id=22704): r0 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_opts(r0, 0x0, 0x4, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='xfrm0\x00', 0x10) sendmmsg$inet(r0, &(0x7f00000031c0)=[{{&(0x7f0000000040)={0x2, 0x0, @local}, 0x10, 0x0}}, {{&(0x7f0000000140)={0x2, 0x4e20, @broadcast}, 0x10, 0x0}}], 0x2, 0x0) 437.44434ms ago: executing program 5 (id=22705): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)={0x44, r1, 0x1, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY={0xc, 0x50, 0x0, 0x1, [@NL80211_KEY_TYPE={0x8, 0x7, 0x1}]}, @NL80211_ATTR_KEY={0x1c, 0x50, 0x0, 0x1, [@NL80211_KEY_TYPE={0x8}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "6c1ae03f6c"}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000084}, 0x20000080) 319.444425ms ago: executing program 6 (id=22706): pipe(&(0x7f0000019480)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000001c0)=[{&(0x7f00000000c0)="dc52b390", 0xfffffede}, {&(0x7f0000000000)="7681", 0x2}, {&(0x7f0000000480)="eb", 0x1}, {&(0x7f0000000a80)='`', 0xfffffe3a}, {&(0x7f0000000080)="cb25", 0x2}, {&(0x7f00000011c0)="b488c5", 0x3}, {&(0x7f0000000340)="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", 0x109}], 0x7, 0x3) close(r1) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000300)=0x1, 0x4) connect$inet(r2, &(0x7f00000006c0)={0x2, 0x0, @empty}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000900)=0xffffffffffffffff, 0x4) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r1) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000580)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x8004}, 0x4011) splice(r0, 0x0, r1, 0x0, 0x10500, 0x0) 239.76876ms ago: executing program 3 (id=22707): mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x3, 0xfffffffc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000029000)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x80) bind$packet(r1, &(0x7f0000000180)={0x11, 0x2, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) getsockname$packet(r1, &(0x7f00000015c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000001c0)={'veth0_virt_wifi\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3800000054000147880000000000000007008209", @ANYRES32=r4, @ANYBLOB="20000100", @ANYRES32=r6, @ANYBLOB="00001000e000030000010001000000000000000008"], 0x38}}, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, 0x0, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 118.701277ms ago: executing program 6 (id=22708): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x44, 0x0, 0x9, 0x301, 0x0, 0x0, {0xa}, [@NFCTH_TUPLE={0x24, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010101}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x42}}}}]}, @NFCTH_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x8014}, 0x8840) 0s ago: executing program 6 (id=22709): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETOFFLOAD(r1, 0x400454ce, 0xc) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) kernel console output (not intermixed with test programs): d46: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5) [ 1460.282241][T32643] bond46 (unregistering): Released all slaves [ 1460.323214][T32659] netlink: 'syz.3.21315': attribute type 1 has an invalid length. [ 1460.331966][T32657] netlink: 'syz.1.21317': attribute type 4 has an invalid length. [ 1460.367228][T32639] wireguard0: entered promiscuous mode [ 1460.387296][T32639] wireguard0: entered allmulticast mode [ 1460.492765][ T5129] bond16: (slave bridge19): failed to get link speed/duplex [ 1460.619066][ T1796] bond16: (slave bridge19): failed to get link speed/duplex [ 1460.780339][ T133] bond16: (slave bridge19): failed to get link speed/duplex [ 1460.893953][T32677] netlink: 28 bytes leftover after parsing attributes in process `syz.0.21319'. [ 1460.908144][T32677] netlink: 'syz.0.21319': attribute type 7 has an invalid length. [ 1460.922324][T32677] netlink: 'syz.0.21319': attribute type 8 has an invalid length. [ 1460.931938][T32677] netlink: 4 bytes leftover after parsing attributes in process `syz.0.21319'. [ 1460.960419][ T5129] bond16: (slave bridge19): failed to get link speed/duplex [ 1461.084074][ T5129] bond16: (slave bridge19): failed to get link speed/duplex [ 1461.117287][T32687] ip6_tunnel: non-ECT from 0000:0000:0000:0000:0000:ffff:7f00:0001 with DS=0xb [ 1461.238532][T32687] syzkaller0: entered promiscuous mode [ 1461.245488][T32687] syzkaller0: entered allmulticast mode [ 1461.469799][ T5130] bond16: (slave bridge19): failed to get link speed/duplex [ 1461.589873][ T5129] bond16: (slave bridge19): failed to get link speed/duplex [ 1461.641849][T32715] netlink: 20 bytes leftover after parsing attributes in process `syz.3.21331'. [ 1461.754238][T32735] netlink: 20 bytes leftover after parsing attributes in process `syz.0.21330'. [ 1461.877729][T32735] netlink: 24 bytes leftover after parsing attributes in process `syz.0.21330'. [ 1462.611134][ T301] netlink: 76 bytes leftover after parsing attributes in process `syz.1.21338'. [ 1462.632038][ T302] netlink: 12 bytes leftover after parsing attributes in process `syz.5.21339'. [ 1462.645066][ T302] netlink: 4 bytes leftover after parsing attributes in process `syz.5.21339'. [ 1462.657733][ T302] netlink: 8 bytes leftover after parsing attributes in process `syz.5.21339'. [ 1462.994638][ T315] bond36: option resend_igmp: invalid value (32767) [ 1463.010797][ T315] bond36: option resend_igmp: allowed values 0 - 255 [ 1463.032210][ T315] bond36 (unregistering): Released all slaves [ 1463.246911][ T332] netlink: 'syz.3.21349': attribute type 15 has an invalid length. [ 1463.287450][ T332] netlink: 'syz.3.21349': attribute type 15 has an invalid length. [ 1463.341231][ T337] netlink: 'syz.5.21351': attribute type 1 has an invalid length. [ 1463.375492][ T337] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1464.725090][ T379] bond36: entered promiscuous mode [ 1464.760695][ T379] bond36: entered allmulticast mode [ 1464.784582][ T379] 8021q: adding VLAN 0 to HW filter on device bond36 [ 1464.830596][ T5129] net_ratelimit: 23 callbacks suppressed [ 1464.830618][ T5129] bond16: (slave bridge19): failed to get link speed/duplex [ 1464.970664][ T390] __nla_validate_parse: 10 callbacks suppressed [ 1464.970684][ T390] netlink: 4 bytes leftover after parsing attributes in process `syz.3.21366'. [ 1464.994651][ T5129] bond16: (slave bridge19): failed to get link speed/duplex [ 1465.179523][ T399] netlink: 4 bytes leftover after parsing attributes in process `syz.1.21369'. [ 1465.180077][ T5130] bond16: (slave bridge19): failed to get link speed/duplex [ 1465.217004][ T399] netlink: 12 bytes leftover after parsing attributes in process `syz.1.21369'. [ 1465.309067][ T399] bridge38: port 1(vlan6) entered blocking state [ 1465.316754][ T399] bridge38: port 1(vlan6) entered disabled state [ 1465.327746][ T399] vlan6: entered allmulticast mode [ 1465.334510][ T399] bridge38: entered allmulticast mode [ 1465.352235][ T399] vlan6: left allmulticast mode [ 1465.357711][ T399] bridge38: left allmulticast mode [ 1465.375462][ T406] netlink: 8 bytes leftover after parsing attributes in process `syz.2.21372'. [ 1465.395590][ T407] netlink: 60 bytes leftover after parsing attributes in process `syz.2.21372'. [ 1465.418618][ T407] netlink: 16 bytes leftover after parsing attributes in process `syz.2.21372'. [ 1465.449482][ T5129] bond16: (slave bridge19): failed to get link speed/duplex [ 1465.561270][T21172] bond16: (slave bridge19): failed to get link speed/duplex [ 1465.594983][ T415] netlink: 44 bytes leftover after parsing attributes in process `syz.2.21373'. [ 1465.692190][ T5127] bond16: (slave bridge19): failed to get link speed/duplex [ 1465.820123][T21179] bond16: (slave bridge19): failed to get link speed/duplex [ 1465.927367][ T426] netlink: 28 bytes leftover after parsing attributes in process `syz.1.21375'. [ 1465.950621][T21172] bond16: (slave bridge19): failed to get link speed/duplex [ 1466.060157][ T5129] bond16: (slave bridge19): failed to get link speed/duplex [ 1466.126573][ T430] netlink: 1 bytes leftover after parsing attributes in process `syz.2.21376'. [ 1466.169976][ T5130] bond16: (slave bridge19): failed to get link speed/duplex [ 1466.342640][ T446] netlink: 'syz.1.21381': attribute type 1 has an invalid length. [ 1466.412701][ T451] netlink: 'syz.2.21383': attribute type 21 has an invalid length. [ 1466.437490][ T448] bond40: (slave vxcan1): The slave device specified does not support setting the MAC address [ 1466.448782][ T448] bond40: (slave vxcan1): Setting fail_over_mac to active for active-backup mode [ 1466.463272][ T454] netlink: 12 bytes leftover after parsing attributes in process `syz.3.21380'. [ 1466.498350][ T448] bond40: (slave vxcan1): making interface the new active one [ 1466.508170][ T448] bond40: (slave vxcan1): Enslaving as an active interface with an up link [ 1466.521637][ T446] netlink: 'syz.1.21381': attribute type 4 has an invalid length. [ 1466.582839][ T456] bond4: entered allmulticast mode [ 1466.627682][ T459] veth5: entered allmulticast mode [ 1466.637296][ T459] bond4: (slave veth5): Enslaving as an active interface with an up link [ 1466.784763][ T464] syzkaller0: entered promiscuous mode [ 1466.806401][ T464] syzkaller0: entered allmulticast mode [ 1467.957557][ T538] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_rx_wq": -EINTR [ 1467.959168][ T529] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1468.166886][ T551] bridge0: Device is already in use. [ 1468.255209][ T555] netlink: 'syz.1.21410': attribute type 1 has an invalid length. [ 1468.321406][ T558] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1468.353279][ T563] sctp: [Deprecated]: syz.5.21411 (pid 563) Use of int in max_burst socket option deprecated. [ 1468.353279][ T563] Use struct sctp_assoc_value instead [ 1468.394305][ T555] 8021q: adding VLAN 0 to HW filter on device bond41 [ 1468.443725][ T564] netlink: 'syz.2.21412': attribute type 32 has an invalid length. [ 1469.860448][T21179] net_ratelimit: 29 callbacks suppressed [ 1469.860468][T21179] bond16: (slave bridge19): failed to get link speed/duplex [ 1469.979647][ T5128] bond16: (slave bridge19): failed to get link speed/duplex [ 1470.102329][T10068] bond16: (slave bridge19): failed to get link speed/duplex [ 1470.124660][ T609] bond5: entered allmulticast mode [ 1470.158182][ T609] veth7: entered allmulticast mode [ 1470.166621][ T609] bond5: (slave veth7): Enslaving as an active interface with an up link [ 1470.221184][ T5127] bond16: (slave bridge19): failed to get link speed/duplex [ 1470.330266][ T5127] bond16: (slave bridge19): failed to get link speed/duplex [ 1470.439523][T21179] bond16: (slave bridge19): failed to get link speed/duplex [ 1470.549521][T10068] bond16: (slave bridge19): failed to get link speed/duplex [ 1470.670204][T10068] bond16: (slave bridge19): failed to get link speed/duplex [ 1470.780068][ T5127] bond16: (slave bridge19): failed to get link speed/duplex [ 1470.890052][ T5128] bond16: (slave bridge19): failed to get link speed/duplex [ 1471.509234][ T573] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1471.519249][ T596] netlink: 'syz.3.21416': attribute type 1 has an invalid length. [ 1471.942665][ T635] __nla_validate_parse: 10 callbacks suppressed [ 1471.942684][ T635] netlink: 12 bytes leftover after parsing attributes in process `syz.2.21428'. [ 1471.961547][ T633] "syz.1.21430" (633) uses obsolete ecb(arc4) skcipher [ 1471.986996][ T639] netlink: 4 bytes leftover after parsing attributes in process `syz.3.21431'. [ 1472.003503][ T636] vlan4: entered allmulticast mode [ 1472.008968][ T636] bond0: entered allmulticast mode [ 1472.017847][ T636] bond_slave_0: entered allmulticast mode [ 1472.024600][ T636] bond_slave_1: entered allmulticast mode [ 1472.076579][ T639] macsec3: entered promiscuous mode [ 1472.089824][ T639] macsec3: entered allmulticast mode [ 1472.100682][ T639] bridge0: entered allmulticast mode [ 1472.113738][ T639] bridge0: port 2(macsec3) entered blocking state [ 1472.122291][ T639] bridge0: port 2(macsec3) entered disabled state [ 1472.168124][ T639] bridge0: left allmulticast mode [ 1472.900696][ T662] x_tables: duplicate underflow at hook 3 [ 1474.890689][ T5130] net_ratelimit: 34 callbacks suppressed [ 1474.890711][ T5130] bond16: (slave bridge19): failed to get link speed/duplex [ 1475.010907][ T5130] bond16: (slave bridge19): failed to get link speed/duplex [ 1475.080924][ T646] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1475.121298][ T5130] bond16: (slave bridge19): failed to get link speed/duplex [ 1475.253701][ T5128] bond16: (slave bridge19): failed to get link speed/duplex [ 1475.311036][ T688] SET target dimension over the limit! [ 1475.373276][ T5128] bond16: (slave bridge19): failed to get link speed/duplex [ 1475.473416][ T700] gretap0: left promiscuous mode [ 1475.490709][ T700] bridge0: port 3(gretap0) entered disabled state [ 1475.535603][ T700] ¾x9ÿ: left allmulticast mode [ 1475.548779][ T700] ¾x9ÿ: left promiscuous mode [ 1475.556383][ T700] bridge0: port 1(1¾x9ÿ) entered disabled state [ 1475.587106][ T710] netlink: 28 bytes leftover after parsing attributes in process `syz.2.21449'. [ 1475.591460][ T700] bridge_slave_1: left allmulticast mode [ 1475.633756][ T700] bridge_slave_1: left promiscuous mode [ 1475.676225][ T700] bridge0: port 2(bridge_slave_1) entered disabled state [ 1475.709014][ T700] bond32: (slave veth0_to_bond): Releasing active interface [ 1475.759168][ T717] netlink: 52 bytes leftover after parsing attributes in process `syz.3.21451'. [ 1475.865551][ T700] team0: Port device team_slave_1 removed [ 1475.926817][ T700] bond2: (slave gretap2): Releasing active interface [ 1475.978415][ T700] bond3: (slave geneve2): Releasing active interface [ 1476.032838][ T700] bond6: (slave geneve3): Releasing active interface [ 1476.070900][ T700] bond8: (slave bridge9): Releasing backup interface [ 1476.078197][ T700] bridge9: left promiscuous mode [ 1476.084809][ T700] bridge9: left allmulticast mode [ 1476.112884][ T700] bond9: (slave bridge12): Releasing active interface [ 1476.134829][ T700] bond10: (slave geneve4): Releasing active interface [ 1476.163036][ T700] bond11: (slave veth11): Releasing active interface [ 1476.187976][ T700] bond12: (slave bridge14): Releasing backup interface [ 1476.197770][ T700] bridge14: left promiscuous mode [ 1476.235405][ T700] bond17: (slave veth17): Releasing backup interface [ 1476.255386][ T700] bond18: (slave veth19): Releasing backup interface [ 1476.272293][ T700] bond19: (slave ip6gretap0): Releasing active interface [ 1476.293245][ T700] bond20: (slave veth21): Releasing backup interface [ 1476.335871][ T700] bond24: (slave ip6gretap1): Releasing active interface [ 1476.353930][ T700] bond25: (slave gretap4): Releasing active interface [ 1476.370088][ T700] bond27: (slave veth23): Releasing backup interface [ 1476.386975][ T700] bond28: (slave veth25): Releasing backup interface [ 1476.399063][ T700] bond29: (slave veth27): Releasing backup interface [ 1476.425442][ T700] bond30: (slave veth29): Releasing backup interface [ 1476.442185][ T700] bond33: (slave veth35): Releasing backup interface [ 1476.463013][ T700] bond34: (slave veth37): Releasing backup interface [ 1476.475593][ T700] bond35: (slave veth39): Releasing backup interface [ 1476.494671][ T700] bond40: (slave vxcan1): Releasing backup interface [ 1476.519493][T10068] bond16: (slave bridge19): failed to get link speed/duplex [ 1476.603951][ T5128] netdevsim netdevsim1 eth0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 1476.631103][ T5128] netdevsim netdevsim1 eth0: unset [1, 2] type 2 family 0 port 20004 - 0 [ 1476.647572][ T5128] netdevsim netdevsim1 eth1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 1476.670952][ T5128] netdevsim netdevsim1 eth1: unset [1, 2] type 2 family 0 port 20004 - 0 [ 1476.683662][ T5128] netdevsim netdevsim1 eth2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 1476.723563][ T5128] netdevsim netdevsim1 eth2: unset [1, 2] type 2 family 0 port 20004 - 0 [ 1476.732425][ T5128] netdevsim netdevsim1 eth3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 1476.741269][ T5128] netdevsim netdevsim1 eth3: unset [1, 2] type 2 family 0 port 20004 - 0 [ 1476.762916][ T5128] bond16: (slave bridge19): failed to get link speed/duplex [ 1476.852007][ T733] batadv0: entered promiscuous mode [ 1476.982968][ T742] netlink: 64 bytes leftover after parsing attributes in process `syz.1.21455'. [ 1476.996414][ T733] batadv0: left promiscuous mode [ 1477.065659][ T738] bridge39: entered promiscuous mode [ 1477.081434][ T738] bridge39: entered allmulticast mode [ 1477.113050][T21179] bond16: (slave bridge19): failed to get link speed/duplex [ 1477.241238][T21172] bond16: (slave bridge19): failed to get link speed/duplex [ 1477.370452][T10068] bond16: (slave bridge19): failed to get link speed/duplex [ 1477.519312][T30832] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1477.535941][T30832] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1477.552897][T30832] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1477.562213][T30832] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1477.573705][T30832] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1477.888145][ T753] C speed is unknown, defaulting to 1000 [ 1477.896255][ T753] wg1 speed is unknown, defaulting to 1000 [ 1477.903747][ T753] xfrm0 speed is unknown, defaulting to 1000 [ 1478.253424][ T753] bridge0: port 1(bridge_slave_0) entered blocking state [ 1478.262411][ T753] bridge0: port 1(bridge_slave_0) entered disabled state [ 1478.270476][ T753] bridge_slave_0: entered allmulticast mode [ 1478.277649][ T753] bridge_slave_0: entered promiscuous mode [ 1478.286392][ T753] bridge0: port 2(bridge_slave_1) entered blocking state [ 1478.294281][ T753] bridge0: port 2(bridge_slave_1) entered disabled state [ 1478.302166][ T753] bridge_slave_1: entered allmulticast mode [ 1478.309254][ T753] bridge_slave_1: entered promiscuous mode [ 1478.338106][ T753] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1478.351520][ T753] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1478.387557][ T753] team0: Port device team_slave_0 added [ 1478.395681][ T753] team0: Port device team_slave_1 added [ 1478.420205][ T753] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1478.427166][ T753] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1478.455648][ T753] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1478.468312][ T753] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1478.475710][ T753] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1478.502753][ T753] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1478.547042][ T753] hsr_slave_0: entered promiscuous mode [ 1478.553832][ T753] hsr_slave_1: entered promiscuous mode [ 1478.560492][ T753] debugfs: 'hsr0' already exists in 'hsr' [ 1478.566255][ T753] Cannot create hsr debugfs directory [ 1479.615954][ T727] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1479.664445][ T5631] Bluetooth: hci6: command tx timeout [ 1479.693474][ T753] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1479.787466][ T753] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1479.826582][ T753] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1479.877082][ T753] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1479.911657][ T753] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1479.952545][ T753] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1479.965450][ T753] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1480.008335][ T793] netlink: 12 bytes leftover after parsing attributes in process `syz.2.21465'. [ 1480.038595][ T753] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1480.162626][T10068] net_ratelimit: 17 callbacks suppressed [ 1480.162646][T10068] bond16: (slave bridge19): failed to get link speed/duplex [ 1480.219843][ T805] syzkaller1: entered promiscuous mode [ 1480.230967][ T805] syzkaller1: entered allmulticast mode [ 1480.342772][T21179] bond16: (slave bridge19): failed to get link speed/duplex [ 1480.475222][ T753] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1480.492429][ T5128] bond16: (slave bridge19): failed to get link speed/duplex [ 1480.565585][ T753] 8021q: adding VLAN 0 to HW filter on device team0 [ 1480.580014][T18836] bridge0: port 1(bridge_slave_0) entered blocking state [ 1480.587273][T18836] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1480.621293][ T5128] bridge0: port 2(bridge_slave_1) entered blocking state [ 1480.628485][ T5128] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1480.800705][ T5130] bond16: (slave bridge19): failed to get link speed/duplex [ 1480.940535][T21172] bond16: (slave bridge19): failed to get link speed/duplex [ 1481.061333][T10068] bond16: (slave bridge19): failed to get link speed/duplex [ 1481.111165][ T753] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1481.191587][T10068] bond16: (slave bridge19): failed to get link speed/duplex [ 1481.310187][T18836] bond16: (slave bridge19): failed to get link speed/duplex [ 1481.351628][ T753] veth0_vlan: entered promiscuous mode [ 1481.363560][ T753] veth1_vlan: entered promiscuous mode [ 1481.394031][ T753] veth0_macvtap: entered promiscuous mode [ 1481.406768][ T753] veth1_macvtap: entered promiscuous mode [ 1481.424635][T10068] bond16: (slave bridge19): failed to get link speed/duplex [ 1481.434632][ T753] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1481.451712][ T753] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1481.465481][T10068] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1481.475406][T10068] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1481.489245][T10068] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1481.501750][T10068] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1481.600063][T10068] bond16: (slave bridge19): failed to get link speed/duplex [ 1481.729609][ T5631] Bluetooth: hci6: command tx timeout [ 1483.421275][ T818] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1483.668259][T10068] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1483.688877][T10068] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1483.755501][T21172] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1483.778648][T21172] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1483.820727][ T5631] Bluetooth: hci6: command tx timeout [ 1484.474847][ T897] netlink: 40 bytes leftover after parsing attributes in process `syz.1.21487'. [ 1484.639259][ T905] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1484.683762][ T907] netlink: 16 bytes leftover after parsing attributes in process `syz.5.21491'. [ 1484.713670][ T907] netlink: 16 bytes leftover after parsing attributes in process `syz.5.21491'. [ 1484.720968][ T913] netlink: 20 bytes leftover after parsing attributes in process `syz.2.21489'. [ 1484.736526][ T907] netlink: 16 bytes leftover after parsing attributes in process `syz.5.21491'. [ 1484.787517][ T915] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.21494'. [ 1484.931248][ T925] netlink: 12 bytes leftover after parsing attributes in process `syz.1.21496'. [ 1485.037777][ T936] netlink: 'syz.5.21499': attribute type 1 has an invalid length. [ 1485.076742][ T941] netlink: 12 bytes leftover after parsing attributes in process `syz.2.21497'. [ 1485.145286][ T947] netlink: 104 bytes leftover after parsing attributes in process `syz.1.21500'. [ 1485.240234][T10068] net_ratelimit: 31 callbacks suppressed [ 1485.240255][T10068] bond16: (slave bridge19): failed to get link speed/duplex [ 1485.390700][T21179] bond16: (slave bridge19): failed to get link speed/duplex [ 1485.456624][ T966] mac80211_hwsim hwsim58 syzkaller0: entered promiscuous mode [ 1485.484635][ T966] mac80211_hwsim hwsim58 syzkaller0: entered allmulticast mode [ 1485.520907][ T5127] bond16: (slave bridge19): failed to get link speed/duplex [ 1485.653913][ T5127] bond16: (slave bridge19): failed to get link speed/duplex [ 1485.765981][ T984] netlink: 44 bytes leftover after parsing attributes in process `syz.5.21509'. [ 1485.829216][ T984] bridge2: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 1485.891127][ T5631] Bluetooth: hci6: command tx timeout [ 1485.910548][ T985] C speed is unknown, defaulting to 1000 [ 1485.927699][T18836] bond16: (slave bridge19): failed to get link speed/duplex [ 1485.969023][ T985] wg1 speed is unknown, defaulting to 1000 [ 1485.999164][ T985] xfrm0 speed is unknown, defaulting to 1000 [ 1486.071383][ T5130] bond16: (slave bridge19): failed to get link speed/duplex [ 1486.190653][ T5128] bond16: (slave bridge19): failed to get link speed/duplex [ 1486.322328][ T3290] bond16: (slave bridge19): failed to get link speed/duplex [ 1486.377275][ T1021] netlink: 'syz.3.21519': attribute type 10 has an invalid length. [ 1486.424902][ T1024] netlink: 'syz.3.21519': attribute type 10 has an invalid length. [ 1486.470523][ T5128] bond16: (slave bridge19): failed to get link speed/duplex [ 1486.612980][T21172] bond16: (slave bridge19): failed to get link speed/duplex [ 1487.176882][ T1053] netlink: 'syz.5.21527': attribute type 10 has an invalid length. [ 1487.229835][ T1053] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1487.247625][ T1053] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1487.304145][ T1053] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1487.312617][ T1053] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1487.826204][ T1071] bond42: entered allmulticast mode [ 1487.966014][ T1081] veth43: entered allmulticast mode [ 1488.000560][ T1081] bond42: (slave veth43): Enslaving as an active interface with an up link [ 1488.410709][ T1116] FAULT_INJECTION: forcing a failure. [ 1488.410709][ T1116] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1488.438986][ T1116] CPU: 1 UID: 0 PID: 1116 Comm: syz.6.21539 Not tainted syzkaller #0 PREEMPT(full) [ 1488.439014][ T1116] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1488.439025][ T1116] Call Trace: [ 1488.439033][ T1116] [ 1488.439041][ T1116] dump_stack_lvl+0xe8/0x150 [ 1488.439069][ T1116] should_fail_ex+0x412/0x560 [ 1488.439097][ T1116] _copy_from_user+0x2d/0xb0 [ 1488.439123][ T1116] ___sys_sendmsg+0x1c6/0x360 [ 1488.439147][ T1116] ? __lock_acquire+0x6b5/0x2cf0 [ 1488.439171][ T1116] ? __pfx____sys_sendmsg+0x10/0x10 [ 1488.439232][ T1116] ? __fget_files+0x2a/0x420 [ 1488.439252][ T1116] ? __fget_files+0x3a0/0x420 [ 1488.439285][ T1116] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1488.439314][ T1116] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1488.439343][ T1116] ? __pfx_ksys_write+0x10/0x10 [ 1488.439390][ T1116] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1488.439410][ T1116] do_syscall_64+0x15f/0xf80 [ 1488.439433][ T1116] ? trace_irq_disable+0x3b/0x140 [ 1488.439459][ T1116] ? clear_bhb_loop+0x40/0x90 [ 1488.439483][ T1116] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1488.439501][ T1116] RIP: 0033:0x7f180079cdd9 [ 1488.439520][ T1116] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1488.439535][ T1116] RSP: 002b:00007f18015b6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1488.439556][ T1116] RAX: ffffffffffffffda RBX: 00007f1800a15fa0 RCX: 00007f180079cdd9 [ 1488.439570][ T1116] RDX: 0000000000000040 RSI: 0000200000009b40 RDI: 0000000000000003 [ 1488.439582][ T1116] RBP: 00007f18015b6090 R08: 0000000000000000 R09: 0000000000000000 [ 1488.439594][ T1116] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1488.439605][ T1116] R13: 00007f1800a16038 R14: 00007f1800a15fa0 R15: 00007fffe55e09f8 [ 1488.439637][ T1116] [ 1488.691129][ T29] audit: type=1107 audit(1778095794.421:129): pid=1117 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='R|zÚ8=Nof}—„+FÓqÉÊ\eFd¼ [ 1488.691129][ T29] ;ÎŒºèéyýGþh†»ºTW=Ë‚°_èA‚ß?µÍ+B!M)èGd2]óŸgYQó?è÷(tî¿ÜòÅÁJôþl…kQKµØKtô°' [ 1490.311470][T18836] net_ratelimit: 24 callbacks suppressed [ 1490.311491][T18836] bond16: (slave bridge19): failed to get link speed/duplex [ 1490.430405][ T5127] bond16: (slave bridge19): failed to get link speed/duplex [ 1490.539919][T18836] bond16: (slave bridge19): failed to get link speed/duplex [ 1490.649751][T18836] bond16: (slave bridge19): failed to get link speed/duplex [ 1490.760371][T18836] bond16: (slave bridge19): failed to get link speed/duplex [ 1490.870142][ T5127] bond16: (slave bridge19): failed to get link speed/duplex [ 1490.980639][T21172] bond16: (slave bridge19): failed to get link speed/duplex [ 1491.090240][ T5127] bond16: (slave bridge19): failed to get link speed/duplex [ 1491.200861][ T5128] bond16: (slave bridge19): failed to get link speed/duplex [ 1491.309964][ T5128] bond16: (slave bridge19): failed to get link speed/duplex [ 1491.332226][ T1111] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1491.376215][ T1173] debugfs: 'KŠŸu ™crµ±K:‘£ÿˆÌ¥ÝBßÝ£| “¼ÚÞlS·œ-!' already exists in 'ieee80211' [ 1491.796985][ T1196] x_tables: duplicate underflow at hook 1 [ 1491.966579][ T1205] __nla_validate_parse: 9 callbacks suppressed [ 1491.966598][ T1205] netlink: 180 bytes leftover after parsing attributes in process `syz.6.21559'. [ 1492.127589][ T29] audit: type=1804 audit(1778095797.851:130): pid=1210 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.21560" name="/newroot/4273/cgroup.controllers" dev="tmpfs" ino=21607 res=1 errno=0 [ 1492.191388][ T29] audit: type=1800 audit(1778095797.851:131): pid=1210 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.21560" name="cgroup.controllers" dev="tmpfs" ino=21607 res=0 errno=0 [ 1492.707863][ T1239] bond0: entered promiscuous mode [ 1492.715032][ T1239] bond_slave_0: entered promiscuous mode [ 1492.730840][ T1239] bond_slave_1: entered promiscuous mode [ 1492.738960][ T1239] batadv0: entered promiscuous mode [ 1492.748042][ T1239] bond0: left promiscuous mode [ 1492.763598][ T1239] bond_slave_0: left promiscuous mode [ 1492.775760][ T1239] bond_slave_1: left promiscuous mode [ 1492.813458][ T1239] batadv0: left promiscuous mode [ 1492.845568][ T1243] ipt_rpfilter: unknown options [ 1494.045098][ T1297] netlink: 16 bytes leftover after parsing attributes in process `syz.2.21588'. [ 1494.240872][ T1306] netlink: 12 bytes leftover after parsing attributes in process `syz.5.21591'. [ 1494.250958][ T1306] netlink: 4 bytes leftover after parsing attributes in process `syz.5.21591'. [ 1494.345229][ T1310] netlink: 8 bytes leftover after parsing attributes in process `syz.5.21593'. [ 1495.252774][ T1218] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1495.262254][ T1241] netlink: 4 bytes leftover after parsing attributes in process `syz.3.21568'. [ 1495.359746][ T5130] net_ratelimit: 32 callbacks suppressed [ 1495.359768][ T5130] bond16: (slave bridge19): failed to get link speed/duplex [ 1495.527350][ T5130] bond16: (slave bridge19): failed to get link speed/duplex [ 1495.585289][ T1329] netlink: 8 bytes leftover after parsing attributes in process `syz.5.21597'. [ 1495.605540][ T1335] syzkaller0: entered promiscuous mode [ 1495.647695][ T1335] syzkaller0: entered allmulticast mode [ 1495.699832][ T5127] bond16: (slave bridge19): failed to get link speed/duplex [ 1495.775205][ T1346] netlink: 12 bytes leftover after parsing attributes in process `syz.5.21603'. [ 1495.786921][ T1346] netlink: 4 bytes leftover after parsing attributes in process `syz.5.21603'. [ 1495.827416][ T1349] IPv6: Can't replace route, no match found [ 1495.844456][ T1349] IPv6: Can't replace route, no match found [ 1495.851501][ T5129] bond16: (slave bridge19): failed to get link speed/duplex [ 1495.980558][T21179] bond16: (slave bridge19): failed to get link speed/duplex [ 1496.110703][ T5130] bond16: (slave bridge19): failed to get link speed/duplex [ 1496.227235][ T1373] syzkaller1: left promiscuous mode [ 1496.236180][ T1373] syzkaller1: left allmulticast mode [ 1496.260785][ T5127] bond16: (slave bridge19): failed to get link speed/duplex [ 1496.380251][ T5127] bond16: (slave bridge19): failed to get link speed/duplex [ 1496.483175][ T1388] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1496.509511][ T5127] bond16: (slave bridge19): failed to get link speed/duplex [ 1496.650172][ T5130] bond16: (slave bridge19): failed to get link speed/duplex [ 1497.195943][ T1402] netlink: 28 bytes leftover after parsing attributes in process `syz.5.21618'. [ 1497.205760][ T1402] netlink: 28 bytes leftover after parsing attributes in process `syz.5.21618'. [ 1497.225200][ T1402] gretap0: entered promiscuous mode [ 1497.232600][ T1402] gretap0: left promiscuous mode [ 1499.080456][ T1363] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1499.395164][ T1411] veth3: entered allmulticast mode [ 1499.454201][ T1420] Cannot find del_set index 49151 as target [ 1499.745202][ T1437] netlink: 8 bytes leftover after parsing attributes in process `syz.6.21631'. [ 1499.792287][ T1437] netlink: 16 bytes leftover after parsing attributes in process `syz.6.21631'. [ 1499.800512][ T1440] netlink: 'syz.2.21632': attribute type 1 has an invalid length. [ 1500.096283][ T1440] 8021q: adding VLAN 0 to HW filter on device bond37 [ 1500.389605][ T3290] net_ratelimit: 29 callbacks suppressed [ 1500.389626][ T3290] bond16: (slave bridge19): failed to get link speed/duplex [ 1500.528144][ T1466] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1500.691368][T21179] bond16: (slave bridge19): failed to get link speed/duplex [ 1500.768262][ T29] audit: type=1804 audit(1778095806.491:132): pid=1472 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.21639" name="/newroot/156/cgroup.controllers" dev="tmpfs" ino=803 res=1 errno=0 [ 1500.821062][ T29] audit: type=1800 audit(1778095806.521:133): pid=1472 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.21639" name="cgroup.controllers" dev="tmpfs" ino=803 res=0 errno=0 [ 1500.873121][ T1475] bond43: entered allmulticast mode [ 1500.943020][ T1478] veth45: entered allmulticast mode [ 1500.964099][ T1478] bond43: (slave veth45): Enslaving as an active interface with an up link [ 1500.983176][T18836] bond16: (slave bridge19): failed to get link speed/duplex [ 1501.099530][ T5127] bond16: (slave bridge19): failed to get link speed/duplex [ 1501.117386][ T1491] netem: change failed [ 1501.136787][ T1491] netlink: 104 bytes leftover after parsing attributes in process `syz.5.21642'. [ 1501.210461][ T5127] bond16: (slave bridge19): failed to get link speed/duplex [ 1501.320052][ T5129] bond16: (slave bridge19): failed to get link speed/duplex [ 1501.430023][ T5127] bond16: (slave bridge19): failed to get link speed/duplex [ 1501.508040][ T1502] netlink: 32 bytes leftover after parsing attributes in process `syz.2.21647'. [ 1501.540092][T18836] bond16: (slave bridge19): failed to get link speed/duplex [ 1501.564022][ T1504] netlink: 168 bytes leftover after parsing attributes in process `syz.2.21648'. [ 1501.660101][ T5129] bond16: (slave bridge19): failed to get link speed/duplex [ 1501.781576][T18836] bond16: (slave bridge19): failed to get link speed/duplex [ 1502.790853][ T1441] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1502.800553][ T1483] netlink: 'syz.5.21642': attribute type 1 has an invalid length. [ 1503.236377][ T1532] netlink: 32 bytes leftover after parsing attributes in process `syz.1.21658'. [ 1503.263895][ T1529] xt_ecn: cannot match TCP bits for non-tcp packets [ 1503.296694][ T1529] netlink: 8 bytes leftover after parsing attributes in process `syz.6.21657'. [ 1503.353152][ T1529] macvlan3: entered allmulticast mode [ 1503.371506][ T1529] hsr0: entered allmulticast mode [ 1503.389117][ T1529] hsr_slave_0: entered allmulticast mode [ 1503.405994][ T1529] hsr_slave_1: entered allmulticast mode [ 1503.448754][ T1529] hsr0: entered promiscuous mode [ 1503.467918][ T1536] tipc: Enabling of bearer rejected, media not registered [ 1503.908994][ T1568] netlink: 'syz.2.21668': attribute type 3 has an invalid length. [ 1503.917667][ T1565] batadv0: entered promiscuous mode [ 1503.953516][ T1565] batadv0: left promiscuous mode [ 1504.197673][ T1575] netlink: 8 bytes leftover after parsing attributes in process `syz.6.21670'. [ 1504.574788][ T1588] netlink: 32 bytes leftover after parsing attributes in process `syz.5.21675'. [ 1505.062799][ T1605] netlink: 4 bytes leftover after parsing attributes in process `syz.3.21680'. [ 1505.145324][ T1604] bridge1: entered promiscuous mode [ 1505.152797][ T1604] bridge1: entered allmulticast mode [ 1505.167431][ T1603] bridge2: entered promiscuous mode [ 1505.173167][ T1603] bridge2: entered allmulticast mode [ 1505.471318][T21179] net_ratelimit: 25 callbacks suppressed [ 1505.471340][T21179] bond16: (slave bridge19): failed to get link speed/duplex [ 1505.590595][T21179] bond16: (slave bridge19): failed to get link speed/duplex [ 1505.700249][T21179] bond16: (slave bridge19): failed to get link speed/duplex [ 1505.764855][ T1624] netlink: 12 bytes leftover after parsing attributes in process `syz.5.21687'. [ 1505.859630][T21179] bond16: (slave bridge19): failed to get link speed/duplex [ 1505.918460][ T1628] netlink: 8 bytes leftover after parsing attributes in process `syz.5.21689'. [ 1505.929019][ T1628] netlink: 24 bytes leftover after parsing attributes in process `syz.5.21689'. [ 1505.938876][ T1628] netlink: 8 bytes leftover after parsing attributes in process `syz.5.21689'. [ 1505.948737][ T1628] netlink: 24 bytes leftover after parsing attributes in process `syz.5.21689'. [ 1505.969833][T21179] bond16: (slave bridge19): failed to get link speed/duplex [ 1506.080140][ T3290] bond16: (slave bridge19): failed to get link speed/duplex [ 1506.106057][ T1636] vlan5: entered promiscuous mode [ 1506.113303][ T1636] bridge0: entered promiscuous mode [ 1506.200305][ T5129] bond16: (slave bridge19): failed to get link speed/duplex [ 1506.330057][ T5129] bond16: (slave bridge19): failed to get link speed/duplex [ 1506.440344][T21179] bond16: (slave bridge19): failed to get link speed/duplex [ 1506.549942][T21172] bond16: (slave bridge19): failed to get link speed/duplex [ 1506.820382][ T1560] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1507.108503][ T1657] IPv6: NLM_F_CREATE should be specified when creating new route [ 1507.130953][ T1648] bond46: entered allmulticast mode [ 1507.171696][ T1653] veth47: entered allmulticast mode [ 1507.220212][ T1653] bond46: (slave veth47): Enslaving as an active interface with an up link [ 1507.902222][ T1700] bond47: entered allmulticast mode [ 1508.007028][ T1700] veth49: entered allmulticast mode [ 1508.024155][ T1700] bond47: (slave veth49): Enslaving as an active interface with an up link [ 1508.267628][ T1720] __nla_validate_parse: 9 callbacks suppressed [ 1508.267647][ T1720] netlink: 4 bytes leftover after parsing attributes in process `syz.1.21717'. [ 1508.324747][ T1720] netlink: 24 bytes leftover after parsing attributes in process `syz.1.21717'. [ 1508.454953][ T1728] netlink: 277 bytes leftover after parsing attributes in process `syz.1.21722'. [ 1508.545768][ T1729] netlink: 24 bytes leftover after parsing attributes in process `syz.3.21721'. [ 1508.774376][ T1744] netlink: 12 bytes leftover after parsing attributes in process `syz.6.21726'. [ 1509.233911][ T1764] netlink: 24 bytes leftover after parsing attributes in process `syz.6.21730'. [ 1509.278714][ T1765] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not security [ 1509.296324][ T1771] netlink: 4 bytes leftover after parsing attributes in process `syz.6.21730'. [ 1509.315288][ T1770] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1509.337665][ T1765] ip6tnl7: entered promiscuous mode [ 1509.648017][ T1792] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap4 [ 1510.055023][ T1817] xt_ecn: cannot match TCP bits for non-tcp packets [ 1510.106123][ T1818] netlink: 'syz.3.21747': attribute type 11 has an invalid length. [ 1510.115002][ T1818] netlink: 'syz.3.21747': attribute type 11 has an invalid length. [ 1510.127154][ T1821] bond0: option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 1510.142259][ T1818] netlink: 204 bytes leftover after parsing attributes in process `syz.3.21747'. [ 1510.340589][ T1833] netlink: 12 bytes leftover after parsing attributes in process `syz.3.21755'. [ 1510.555695][ T1833] 8021q: adding VLAN 0 to HW filter on device bond49 [ 1510.646991][ T1833] bond49 (unregistering): Released all slaves [ 1510.689907][T21179] net_ratelimit: 28 callbacks suppressed [ 1510.689926][T21179] bond16: (slave bridge19): failed to get link speed/duplex [ 1510.727352][ T1858] netlink: 4 bytes leftover after parsing attributes in process `syz.1.21761'. [ 1510.876422][ T1861] bridge41: port 1(vlan6) entered blocking state [ 1510.901789][ T1861] bridge41: port 1(vlan6) entered disabled state [ 1510.911686][ T1861] vlan6: entered allmulticast mode [ 1510.918580][ T1865] netlink: 'syz.3.21763': attribute type 3 has an invalid length. [ 1510.927636][ T1869] netlink: 'syz.3.21763': attribute type 23 has an invalid length. [ 1510.937333][ T1861] bridge41: entered allmulticast mode [ 1510.959103][ T1861] vlan6: left allmulticast mode [ 1510.975112][ T1861] bridge41: left allmulticast mode [ 1511.065177][ T1876] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1511.117651][ T1835] bridge3: entered promiscuous mode [ 1511.151297][ T1835] bridge3: entered allmulticast mode [ 1511.175558][T18836] bond16: (slave bridge19): failed to get link speed/duplex [ 1511.187552][ T1880] sctp: [Deprecated]: syz.1.21768 (pid 1880) Use of int in maxseg socket option. [ 1511.187552][ T1880] Use struct sctp_assoc_value instead [ 1511.306851][ T5130] bond16: (slave bridge19): failed to get link speed/duplex [ 1511.441401][ T5130] bond16: (slave bridge19): failed to get link speed/duplex [ 1511.650400][ T5129] bond16: (slave bridge19): failed to get link speed/duplex [ 1511.688874][ T1902] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1511.770233][ T5130] bond16: (slave bridge19): failed to get link speed/duplex [ 1511.914871][ T1915] netlink: 'syz.1.21781': attribute type 49 has an invalid length. [ 1512.019834][ T5130] bond16: (slave bridge19): failed to get link speed/duplex [ 1512.160166][T21172] bond16: (slave bridge19): failed to get link speed/duplex [ 1512.299575][T21179] bond16: (slave bridge19): failed to get link speed/duplex [ 1512.426505][T21179] bond16: (slave bridge19): failed to get link speed/duplex [ 1512.547317][ T1940] bridge0: port 2(bridge_slave_1) entered disabled state [ 1513.072109][ T29] audit: type=1804 audit(1778095818.801:134): pid=1976 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.6.21800" name="/newroot/47/cgroup.controllers" dev="tmpfs" ino=258 res=1 errno=0 [ 1513.106659][ T29] audit: type=1800 audit(1778095818.801:135): pid=1976 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.21800" name="cgroup.controllers" dev="tmpfs" ino=258 res=0 errno=0 [ 1513.154762][ T1980] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 1513.196129][ T1980] netlink: 'syz.3.21801': attribute type 1 has an invalid length. [ 1513.350438][ T1988] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1513.393821][ T1991] __nla_validate_parse: 9 callbacks suppressed [ 1513.393848][ T1991] netlink: 24 bytes leftover after parsing attributes in process `syz.3.21806'. [ 1513.876048][ T2007] bond49: option miimon: invalid value (18446744071563116549) [ 1513.905418][ T2007] bond49: option miimon: allowed values 0 - 2147483647 [ 1513.948790][ T2007] bond49 (unregistering): Released all slaves [ 1514.839267][ T2069] netlink: 'syz.6.21821': attribute type 1 has an invalid length. [ 1514.910577][ T2069] netlink: 24 bytes leftover after parsing attributes in process `syz.6.21821'. [ 1515.435002][ T2094] netlink: 12 bytes leftover after parsing attributes in process `syz.2.21827'. [ 1515.459159][ T2095] netlink: 12 bytes leftover after parsing attributes in process `syz.2.21827'. [ 1515.483379][ T2100] netlink: 32 bytes leftover after parsing attributes in process `syz.3.21829'. [ 1515.516503][ T2103] xt_hashlimit: size too large, truncated to 1048576 [ 1515.601001][ T2104] bridge0: port 1(bridge_slave_0) entered disabled state [ 1515.673534][ T2104] bridge_slave_0 (unregistering): left allmulticast mode [ 1515.687993][ T2111] netlink: 4 bytes leftover after parsing attributes in process `syz.2.21833'. [ 1515.713127][ T2111] netlink: 'syz.2.21833': attribute type 3 has an invalid length. [ 1515.721592][ T2104] bridge_slave_0 (unregistering): left promiscuous mode [ 1515.756548][ T2104] bridge0: port 1(bridge_slave_0) entered disabled state [ 1515.803384][ T2110] netlink: 44 bytes leftover after parsing attributes in process `syz.5.21830'. [ 1515.820060][ T1797] net_ratelimit: 21 callbacks suppressed [ 1515.820078][ T1797] bond16: (slave bridge19): failed to get link speed/duplex [ 1515.987503][T32741] bond16: (slave bridge19): failed to get link speed/duplex [ 1516.058896][ T2126] netlink: 24 bytes leftover after parsing attributes in process `syz.3.21837'. [ 1516.161514][ T1797] bond16: (slave bridge19): failed to get link speed/duplex [ 1516.302321][ T43] bond16: (slave bridge19): failed to get link speed/duplex [ 1516.363893][ T2142] netlink: 'syz.6.21843': attribute type 2 has an invalid length. [ 1516.411770][ T2145] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 1516.429941][ T2145] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1516.473529][ T5127] bond16: (slave bridge19): failed to get link speed/duplex [ 1516.516656][ T2160] netlink: 4 bytes leftover after parsing attributes in process `syz.3.21844'. [ 1516.565054][ T2153] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 1516.684486][ T2153] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 1516.901902][ T2165] bond6: entered allmulticast mode [ 1517.018405][ T2173] veth9: entered allmulticast mode [ 1517.039721][ T2190] netlink: 152 bytes leftover after parsing attributes in process `syz.2.21852'. [ 1517.101974][ T2193] netlink: 'syz.1.21853': attribute type 10 has an invalid length. [ 1517.113327][ T2173] bond6: (slave veth9): Enslaving as an active interface with an up link [ 1517.143988][ T2193] veth1_macvtap: left promiscuous mode [ 1517.219547][T32741] bond16: (slave bridge19): failed to get link speed/duplex [ 1517.865903][ T2225] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 1517.897192][ T2223] netem: change failed [ 1518.739518][ T2269] __nla_validate_parse: 7 callbacks suppressed [ 1518.739537][ T2269] netlink: 24 bytes leftover after parsing attributes in process `syz.5.21876'. [ 1518.941312][ T2275] sctp: [Deprecated]: syz.2.21877 (pid 2275) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1518.941312][ T2275] Use struct sctp_sack_info instead [ 1519.058811][ T2279] netlink: 8 bytes leftover after parsing attributes in process `syz.6.21878'. [ 1519.185324][ T2273] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 1520.830540][ T1797] net_ratelimit: 31 callbacks suppressed [ 1520.830562][ T1797] bond16: (slave bridge19): failed to get link speed/duplex [ 1520.950202][ T1797] bond16: (slave bridge19): failed to get link speed/duplex [ 1521.060652][ T43] bond16: (slave bridge19): failed to get link speed/duplex [ 1521.171459][ T1797] bond16: (slave bridge19): failed to get link speed/duplex [ 1521.200208][ T2246] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1521.280011][ T1797] bond16: (slave bridge19): failed to get link speed/duplex [ 1521.401892][ T2297] netlink: 'syz.3.21885': attribute type 3 has an invalid length. [ 1521.450527][ T5131] bond16: (slave bridge19): failed to get link speed/duplex [ 1521.572174][ T43] bond16: (slave bridge19): failed to get link speed/duplex [ 1521.639053][ T2312] x_tables: unsorted underflow at hook 4 [ 1521.711420][ T43] bond16: (slave bridge19): failed to get link speed/duplex [ 1521.778876][ T2318] netlink: 20 bytes leftover after parsing attributes in process `syz.5.21890'. [ 1521.876080][ T2330] netlink: 32 bytes leftover after parsing attributes in process `syz.1.21894'. [ 1521.899173][ T2334] netlink: 12 bytes leftover after parsing attributes in process `syz.2.21891'. [ 1521.968739][ T2327] bond1: entered allmulticast mode [ 1522.044049][ T2335] veth7: entered allmulticast mode [ 1522.066162][ T2346] netlink: 32 bytes leftover after parsing attributes in process `syz.1.21894'. [ 1522.073283][ T2335] bond1: (slave veth7): Enslaving as an active interface with an up link [ 1522.091437][ T2330] macvlan0: entered promiscuous mode [ 1522.113935][ T2330] team0: entered promiscuous mode [ 1522.144234][ T2330] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 1522.197016][ T43] bond16: (slave bridge19): failed to get link speed/duplex [ 1522.283387][ T2354] netlink: 36 bytes leftover after parsing attributes in process `syz.2.21897'. [ 1522.384017][T21179] bond16: (slave bridge19): failed to get link speed/duplex [ 1522.428218][ T2364] netlink: 8 bytes leftover after parsing attributes in process `syz.1.21899'. [ 1522.468554][ T2365] netlink: 20 bytes leftover after parsing attributes in process `syz.5.21900'. [ 1522.607444][ T2381] netlink: 24 bytes leftover after parsing attributes in process `syz.2.21902'. [ 1522.940839][ T2391] bond8: entered allmulticast mode [ 1523.073760][ T2395] veth11: entered allmulticast mode [ 1523.103836][ T2406] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 1523.111426][ T2395] bond8: (slave veth11): Enslaving as an active interface with an up link [ 1523.338923][ T2417] 8021q: adding VLAN 0 to HW filter on device bond49 [ 1523.388277][ T2417] ipvlan1: entered allmulticast mode [ 1523.402002][ T2417] bond49: entered allmulticast mode [ 1523.429789][ T2417] bond49: (slave ipip1): refused to change device type [ 1523.471291][ T2434] FAULT_INJECTION: forcing a failure. [ 1523.471291][ T2434] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1523.487375][ T2434] CPU: 1 UID: 0 PID: 2434 Comm: syz.1.21915 Not tainted syzkaller #0 PREEMPT(full) [ 1523.487400][ T2434] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1523.487411][ T2434] Call Trace: [ 1523.487419][ T2434] [ 1523.487427][ T2434] dump_stack_lvl+0xe8/0x150 [ 1523.487456][ T2434] should_fail_ex+0x412/0x560 [ 1523.487484][ T2434] _copy_from_user+0x2d/0xb0 [ 1523.487510][ T2434] ___sys_sendmsg+0x1c6/0x360 [ 1523.487533][ T2434] ? __lock_acquire+0x6b5/0x2cf0 [ 1523.487556][ T2434] ? __pfx____sys_sendmsg+0x10/0x10 [ 1523.487611][ T2434] ? __fget_files+0x2a/0x420 [ 1523.487632][ T2434] ? __fget_files+0x3a0/0x420 [ 1523.487663][ T2434] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1523.487688][ T2434] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1523.487721][ T2434] ? __pfx_ksys_write+0x10/0x10 [ 1523.487760][ T2434] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1523.487780][ T2434] do_syscall_64+0x15f/0xf80 [ 1523.487803][ T2434] ? clear_bhb_loop+0x40/0x90 [ 1523.487825][ T2434] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1523.487843][ T2434] RIP: 0033:0x7f41e859cdd9 [ 1523.487861][ T2434] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1523.487876][ T2434] RSP: 002b:00007f41e93d8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1523.487895][ T2434] RAX: ffffffffffffffda RBX: 00007f41e8815fa0 RCX: 00007f41e859cdd9 [ 1523.487908][ T2434] RDX: 0000000000028000 RSI: 0000200000000080 RDI: 0000000000000004 [ 1523.487919][ T2434] RBP: 00007f41e93d8090 R08: 0000000000000000 R09: 0000000000000000 [ 1523.487929][ T2434] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1523.487940][ T2434] R13: 00007f41e8816038 R14: 00007f41e8815fa0 R15: 00007ffc49e3d8f8 [ 1523.487970][ T2434] [ 1523.488114][ T2436] netlink: 'syz.5.21916': attribute type 3 has an invalid length. [ 1523.773638][ T2441] syzkaller0: entered promiscuous mode [ 1523.781049][ T2441] syzkaller0: entered allmulticast mode [ 1524.061273][ T2458] __nla_validate_parse: 3 callbacks suppressed [ 1524.061290][ T2458] netlink: 12 bytes leftover after parsing attributes in process `syz.3.21922'. [ 1524.118638][ T2466] netlink: 'syz.2.21924': attribute type 3 has an invalid length. [ 1524.288126][ T2472] netlink: 92 bytes leftover after parsing attributes in process `syz.1.21926'. [ 1524.312955][ T2472] team0: Caught tx_queue_len zero misconfig [ 1524.323072][ T2473] netlink: 24 bytes leftover after parsing attributes in process `syz.3.21928'. [ 1524.428261][ T2482] netlink: 24 bytes leftover after parsing attributes in process `syz.2.21930'. [ 1524.754876][ T2512] netlink: 808 bytes leftover after parsing attributes in process `syz.5.21935'. [ 1524.792948][ T2500] bond50: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5) [ 1524.846006][ T2500] bond50 (unregistering): Released all slaves [ 1524.884076][ T2519] netlink: 'syz.5.21938': attribute type 16 has an invalid length. [ 1524.893012][ T2519] netlink: 8 bytes leftover after parsing attributes in process `syz.5.21938'. [ 1524.907967][ T2519] netlink: 'syz.5.21938': attribute type 16 has an invalid length. [ 1524.941798][ T2519] netlink: 8 bytes leftover after parsing attributes in process `syz.5.21938'. [ 1524.999079][ T2519] netlink: 'syz.5.21938': attribute type 16 has an invalid length. [ 1525.040680][ T2519] netlink: 8 bytes leftover after parsing attributes in process `syz.5.21938'. [ 1525.097316][ T2519] netlink: 'syz.5.21938': attribute type 16 has an invalid length. [ 1525.138530][ T2519] netlink: 8 bytes leftover after parsing attributes in process `syz.5.21938'. [ 1525.163907][ T2519] netlink: 'syz.5.21938': attribute type 16 has an invalid length. [ 1525.180862][ T2530] netlink: 20 bytes leftover after parsing attributes in process `syz.1.21943'. [ 1525.200001][ T2519] netlink: 'syz.5.21938': attribute type 16 has an invalid length. [ 1525.222185][ T2529] netlink: 'syz.3.21940': attribute type 3 has an invalid length. [ 1525.921546][ T5129] net_ratelimit: 26 callbacks suppressed [ 1525.921567][ T5129] bond16: (slave bridge19): failed to get link speed/duplex [ 1526.072258][ T2585] bond39: (slave bond_slave_1): Device is not bonding slave [ 1526.109118][ T2585] bond39: option active_slave: invalid value (bond_slave_1) [ 1526.159609][ T2585] bond39 (unregistering): Released all slaves [ 1526.250842][T32741] bond16: (slave bridge19): failed to get link speed/duplex [ 1526.381607][ T43] bond16: (slave bridge19): failed to get link speed/duplex [ 1526.520590][T32741] bond16: (slave bridge19): failed to get link speed/duplex [ 1526.640122][ T5130] bond16: (slave bridge19): failed to get link speed/duplex [ 1526.771904][ T43] bond16: (slave bridge19): failed to get link speed/duplex [ 1526.903725][T32741] bond16: (slave bridge19): failed to get link speed/duplex [ 1526.946413][ T2627] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1527.029748][ T5130] bond16: (slave bridge19): failed to get link speed/duplex [ 1527.163813][ T2649] validate_nla: 28 callbacks suppressed [ 1527.163835][ T2649] netlink: 'syz.2.21967': attribute type 4 has an invalid length. [ 1527.192097][ T5129] bond16: (slave bridge19): failed to get link speed/duplex [ 1527.242225][ T2649] netlink: 'syz.2.21967': attribute type 1 has an invalid length. [ 1527.342242][ T5131] bond16: (slave bridge19): failed to get link speed/duplex [ 1527.590931][ T2672] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1514) ! [ 1527.692462][ T2673] syzkaller1: entered promiscuous mode [ 1527.712713][ T2673] syzkaller1: entered allmulticast mode [ 1528.547952][ T2722] netlink: 'syz.2.21985': attribute type 8 has an invalid length. [ 1529.079204][ T2754] macsec0: entered promiscuous mode [ 1529.106303][ T2754] macsec0: entered allmulticast mode [ 1529.139283][ T2757] macsec0: left promiscuous mode [ 1529.167392][ T2757] macsec0: left allmulticast mode [ 1529.328624][ T2759] __nla_validate_parse: 34 callbacks suppressed [ 1529.328645][ T2759] netlink: 348 bytes leftover after parsing attributes in process `syz.1.21992'. [ 1529.396460][ T2768] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 1529.776978][ T2784] netlink: 28 bytes leftover after parsing attributes in process `syz.5.22000'. [ 1529.787055][ T2784] netlink: 44 bytes leftover after parsing attributes in process `syz.5.22000'. [ 1529.801766][ T2774] bond50: entered allmulticast mode [ 1529.880787][ T2794] netlink: 16215 bytes leftover after parsing attributes in process `syz.2.22002'. [ 1529.895102][ T2787] veth53: entered allmulticast mode [ 1529.907894][ T2787] bond50: (slave veth53): Enslaving as an active interface with an up link [ 1530.047945][ T2794] C speed is unknown, defaulting to 1000 [ 1530.087061][ T2794] wg1 speed is unknown, defaulting to 1000 [ 1530.103553][ T2798] netlink: 'syz.1.21998': attribute type 2 has an invalid length. [ 1530.113685][ T2794] xfrm0 speed is unknown, defaulting to 1000 [ 1530.886235][ T2839] bond9: entered allmulticast mode [ 1530.961481][ T2846] veth13: entered allmulticast mode [ 1530.984112][ T2846] bond9: (slave veth13): Enslaving as an active interface with an up link [ 1531.007470][ T2853] sctp: [Deprecated]: syz.3.22015 (pid 2853) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1531.007470][ T2853] Use struct sctp_sack_info instead [ 1531.026883][ T2852] netlink: 'syz.1.22016': attribute type 20 has an invalid length. [ 1531.027416][ T43] net_ratelimit: 26 callbacks suppressed [ 1531.027430][ T43] bond16: (slave bridge19): failed to get link speed/duplex [ 1531.057025][ T2852] netlink: 4 bytes leftover after parsing attributes in process `syz.1.22016'. [ 1531.093577][ T2852] netlink: 'syz.1.22016': attribute type 20 has an invalid length. [ 1531.149765][ T2852] netlink: 4 bytes leftover after parsing attributes in process `syz.1.22016'. [ 1531.239898][ T5127] bond16: (slave bridge19): failed to get link speed/duplex [ 1531.442869][T18836] bond16: (slave bridge19): failed to get link speed/duplex [ 1531.526129][ T2891] netlink: 'syz.5.22025': attribute type 12 has an invalid length. [ 1531.536742][ T2891] netlink: 256 bytes leftover after parsing attributes in process `syz.5.22025'. [ 1531.581447][ T5131] bond16: (slave bridge19): failed to get link speed/duplex [ 1531.597084][ T2891] netlink: 20 bytes leftover after parsing attributes in process `syz.5.22025'. [ 1531.748787][ T2896] vcan0: entered promiscuous mode [ 1531.763170][ T2896] vcan0: entered allmulticast mode [ 1531.818575][ T2904] netlink: 8 bytes leftover after parsing attributes in process `syz.5.22029'. [ 1531.841146][T18836] bond16: (slave bridge19): failed to get link speed/duplex [ 1531.957788][ T2905] openvswitch: netlink: VXLAN extension message has 1 unknown bytes. [ 1532.019897][ T5131] bond16: (slave bridge19): failed to get link speed/duplex [ 1532.106143][ T2910] C speed is unknown, defaulting to 1000 [ 1532.175833][ T2913] batadv0: entered promiscuous mode [ 1532.202732][ T2913] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 1532.227730][ T2913] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 1532.278155][ T2913] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 1532.341251][ T2920] sock: sock_timestamping_bind_phc: sock not bind to device [ 1532.352625][ T2913] batadv0: left promiscuous mode [ 1532.364823][ T2919] netlink: 12 bytes leftover after parsing attributes in process `syz.2.22034'. [ 1532.418454][ T2910] wg1 speed is unknown, defaulting to 1000 [ 1532.489127][ T2919] 8021q: adding VLAN 0 to HW filter on device bond39 [ 1532.502289][ T2910] xfrm0 speed is unknown, defaulting to 1000 [ 1532.536398][T21179] bond16: (slave bridge19): failed to get link speed/duplex [ 1532.660736][T32741] bond16: (slave bridge19): failed to get link speed/duplex [ 1532.839490][ T5131] bond16: (slave bridge19): failed to get link speed/duplex [ 1533.465905][ T2954] netlink: 'syz.2.22044': attribute type 3 has an invalid length. [ 1533.681994][ T2958] syzkaller1: entered promiscuous mode [ 1533.698771][ T2958] syzkaller1: entered allmulticast mode [ 1534.417410][ T2989] netlink: 'syz.2.22056': attribute type 5 has an invalid length. [ 1534.884358][ T3003] __nla_validate_parse: 5 callbacks suppressed [ 1534.884376][ T3003] netlink: 96 bytes leftover after parsing attributes in process `syz.3.22059'. [ 1534.904248][ T3003] 8021q: VLANs not supported on gre0 [ 1535.680786][ T3021] netlink: 8 bytes leftover after parsing attributes in process `syz.6.22065'. [ 1535.730738][ C1] ip6_tunnel: ip6gre4 xmit: Local address not yet configured! [ 1536.049111][ T3042] netlink: 16 bytes leftover after parsing attributes in process `syz.6.22071'. [ 1536.062220][ T5631] block nbd1: Receive control failed (result -32) [ 1536.073358][T21179] net_ratelimit: 17 callbacks suppressed [ 1536.073378][T21179] bond16: (slave bridge19): failed to get link speed/duplex [ 1536.092286][ T3043] netlink: 'syz.1.22073': attribute type 1 has an invalid length. [ 1536.164230][ T3043] bond44: (slave bridge42): making interface the new active one [ 1536.173506][ T3043] bond44: (slave bridge42): Enslaving as an active interface with an up link [ 1536.214444][T18836] bond16: (slave bridge19): failed to get link speed/duplex [ 1536.376355][ T3057] bond2: entered allmulticast mode [ 1536.495800][ T3062] veth9: entered allmulticast mode [ 1536.506031][ T3062] bond2: (slave veth9): Enslaving as an active interface with an up link [ 1536.520916][ T1796] bond16: (slave bridge19): failed to get link speed/duplex [ 1536.639540][T18836] bond16: (slave bridge19): failed to get link speed/duplex [ 1536.786436][T21179] bond16: (slave bridge19): failed to get link speed/duplex [ 1536.937023][ T5130] bond16: (slave bridge19): failed to get link speed/duplex [ 1537.050524][ T5130] bond16: (slave bridge19): failed to get link speed/duplex [ 1537.171968][T21179] bond16: (slave bridge19): failed to get link speed/duplex [ 1537.190702][ T3090] netlink: 28 bytes leftover after parsing attributes in process `syz.3.22086'. [ 1537.214754][ T3089] netlink: 28 bytes leftover after parsing attributes in process `syz.3.22086'. [ 1537.300141][T21179] bond16: (slave bridge19): failed to get link speed/duplex [ 1537.349124][ T3094] netlink: 20 bytes leftover after parsing attributes in process `syz.3.22087'. [ 1537.440767][T21179] bond16: (slave bridge19): failed to get link speed/duplex [ 1537.733986][ T3101] bond51: entered allmulticast mode [ 1537.764073][ T3103] veth55: entered allmulticast mode [ 1537.783839][ T3103] bond51: (slave veth55): Enslaving as an active interface with an up link [ 1537.952534][ T3110] netlink: 4 bytes leftover after parsing attributes in process `syz.5.22093'. [ 1538.010539][ T3113] x_tables: unsorted underflow at hook 3 [ 1539.118006][ T3046] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1539.134811][ T3111] netlink: 788 bytes leftover after parsing attributes in process `syz.3.22092'. [ 1539.170148][ T3115] netlink: 'syz.5.22095': attribute type 23 has an invalid length. [ 1539.456735][ T3128] netlink: 12 bytes leftover after parsing attributes in process `syz.2.22097'. [ 1539.688707][ T3137] netlink: 'syz.5.22101': attribute type 4 has an invalid length. [ 1539.725017][ T3136] netlink: 8 bytes leftover after parsing attributes in process `syz.1.22102'. [ 1539.761642][ T3136] 8021q: VLANs not supported on wlan0 [ 1539.824748][ T3144] bond0: Caught tx_queue_len zero misconfig [ 1540.125293][ T3163] netlink: 'syz.2.22112': attribute type 3 has an invalid length. [ 1540.140874][ T3159] bridge0: entered promiscuous mode [ 1540.148081][ T3166] netlink: 'syz.5.22111': attribute type 1 has an invalid length. [ 1540.157366][ T3159] bridge0: entered allmulticast mode [ 1540.323010][ T3166] 8021q: adding VLAN 0 to HW filter on device bond10 [ 1540.331251][ T3159] __nla_validate_parse: 2 callbacks suppressed [ 1540.331304][ T3159] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.22112'. [ 1540.374394][ T3162] bond10: (slave veth15): Enslaving as an active interface with a down link [ 1540.424932][ T3172] bond10: (slave veth0_to_bond): making interface the new active one [ 1540.435667][ T3172] veth0_to_bond: entered promiscuous mode [ 1540.443596][ T3172] bond10: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 1540.695563][ T3185] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 1541.094441][ T3196] FAULT_INJECTION: forcing a failure. [ 1541.094441][ T3196] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1541.107975][ T3196] CPU: 0 UID: 0 PID: 3196 Comm: syz.5.22121 Not tainted syzkaller #0 PREEMPT(full) [ 1541.107991][ T3196] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1541.107998][ T3196] Call Trace: [ 1541.108003][ T3196] [ 1541.108008][ T3196] dump_stack_lvl+0xe8/0x150 [ 1541.108026][ T3196] should_fail_ex+0x412/0x560 [ 1541.108043][ T3196] _copy_to_user+0x31/0xb0 [ 1541.108059][ T3196] copy_siginfo_to_user+0x22/0xc0 [ 1541.108071][ T3196] x64_setup_rt_frame+0x77b/0xcb0 [ 1541.108098][ T3196] ? __pfx_x64_setup_rt_frame+0x10/0x10 [ 1541.108118][ T3196] arch_do_signal_or_restart+0x424/0x830 [ 1541.108139][ T3196] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1541.108171][ T3196] ? ksys_write+0x242/0x270 [ 1541.108202][ T3196] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1541.108219][ T3196] exit_to_user_mode_loop+0x86/0x480 [ 1541.108229][ T3196] ? rcu_is_watching+0x15/0xb0 [ 1541.108242][ T3196] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1541.108261][ T3196] do_syscall_64+0x33e/0xf80 [ 1541.108275][ T3196] ? trace_irq_disable+0x3b/0x140 [ 1541.108290][ T3196] ? clear_bhb_loop+0x40/0x90 [ 1541.108303][ T3196] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1541.108313][ T3196] RIP: 0033:0x7fe25579cdd7 [ 1541.108324][ T3196] Code: 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 <0f> 05 48 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 [ 1541.108333][ T3196] RSP: 002b:00007fe2565f4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1541.108345][ T3196] RAX: 0000000000000133 RBX: 00007fe255a16090 RCX: 00007fe25579cdd9 [ 1541.108352][ T3196] RDX: 0000000000000001 RSI: 0000200000000540 RDI: 0000000000000003 [ 1541.108359][ T3196] RBP: 00007fe2565f4090 R08: 0000000000000000 R09: 0000000000000000 [ 1541.108365][ T3196] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1541.108371][ T3196] R13: 00007fe255a16128 R14: 00007fe255a16090 R15: 00007ffdc3e91c88 [ 1541.108387][ T3196] [ 1541.301195][ T5130] net_ratelimit: 29 callbacks suppressed [ 1541.301216][ T5130] bond16: (slave bridge19): failed to get link speed/duplex [ 1541.365258][ T3198] netlink: 'syz.5.22122': attribute type 1 has an invalid length. [ 1541.432207][T21179] bond16: (slave bridge19): failed to get link speed/duplex [ 1541.550217][ T43] bond16: (slave bridge19): failed to get link speed/duplex [ 1541.670003][ T43] bond16: (slave bridge19): failed to get link speed/duplex [ 1541.779525][ T43] bond16: (slave bridge19): failed to get link speed/duplex [ 1541.889856][ T43] bond16: (slave bridge19): failed to get link speed/duplex [ 1541.999774][ T1796] bond16: (slave bridge19): failed to get link speed/duplex [ 1542.110009][ T5129] bond16: (slave bridge19): failed to get link speed/duplex [ 1542.220077][ T5131] bond16: (slave bridge19): failed to get link speed/duplex [ 1542.329552][ T5129] bond16: (slave bridge19): failed to get link speed/duplex [ 1542.960447][ T3152] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1544.573680][ T3262] netlink: 8 bytes leftover after parsing attributes in process `syz.3.22136'. [ 1546.325723][ T3231] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1546.381849][ T5129] net_ratelimit: 34 callbacks suppressed [ 1546.381867][ T5129] bond16: (slave bridge19): failed to get link speed/duplex [ 1546.566732][ T43] bond16: (slave bridge19): failed to get link speed/duplex [ 1546.643125][ T3281] netlink: 'syz.3.22140': attribute type 1 has an invalid length. [ 1546.714784][ T3281] 8021q: adding VLAN 0 to HW filter on device bond52 [ 1546.865388][ T3291] sctp: [Deprecated]: syz.5.22142 (pid 3291) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1546.865388][ T3291] Use struct sctp_sack_info instead [ 1547.044934][ T3284] vlan6: entered promiscuous mode [ 1547.057183][ T3284] bond52: entered promiscuous mode [ 1547.068945][ T3284] vlan6: entered allmulticast mode [ 1547.078478][ T3267] netlink: 8 bytes leftover after parsing attributes in process `syz.2.22137'. [ 1547.089067][ T3296] netlink: 12 bytes leftover after parsing attributes in process `syz.1.22143'. [ 1547.098452][ T3284] bond52: entered allmulticast mode [ 1547.105227][ T3267] netlink: 4 bytes leftover after parsing attributes in process `syz.2.22137'. [ 1547.123549][ T3286] bond52: (slave bridge34): making interface the new active one [ 1547.131676][ T3286] bridge34: entered promiscuous mode [ 1547.137502][ T3286] bridge34: entered allmulticast mode [ 1547.144884][ T3286] bond52: (slave bridge34): Enslaving as an active interface with an up link [ 1547.531202][ T3310] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1547.639116][ T3299] netdevsim netdevsim5 netdevsim0: left promiscuous mode [ 1547.658601][ T3299] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1547.708482][ T3299] mac80211_hwsim hwsim58 syzkaller0: left promiscuous mode [ 1547.737230][ T3299] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1547.759110][ T3299] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1547.783639][ T3299] vlan5: left promiscuous mode [ 1547.788754][ T3299] bridge0: left promiscuous mode [ 1547.802721][ T3299] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1547.816948][ T3299] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1547.833255][ T3299] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1547.851751][ T3299] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1547.874519][ T3299] 8021q: adding VLAN 0 to HW filter on device bond11 [ 1547.885912][ T3299] 8021q: adding VLAN 0 to HW filter on device bond12 [ 1547.906480][ T43] netdevsim netdevsim5 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 1547.921753][ T43] netdevsim netdevsim5 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 1547.949150][ T43] netdevsim netdevsim5 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 1547.976698][ T43] netdevsim netdevsim5 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 1548.011005][T18836] bond16: (slave bridge19): failed to get link speed/duplex [ 1548.032853][ T5129] bond10: (slave veth15): link status definitely up, 10000 Mbps full duplex [ 1548.127871][ T3319] netlink: 212368 bytes leftover after parsing attributes in process `syz.5.22150'. [ 1548.143755][ T43] bond16: (slave bridge19): failed to get link speed/duplex [ 1548.261883][ T43] bond16: (slave bridge19): failed to get link speed/duplex [ 1548.381433][ T43] bond16: (slave bridge19): failed to get link speed/duplex [ 1548.501064][ T5129] bond16: (slave bridge19): failed to get link speed/duplex [ 1548.610046][T18836] bond16: (slave bridge19): failed to get link speed/duplex [ 1548.730030][T18836] bond16: (slave bridge19): failed to get link speed/duplex [ 1548.840560][T21179] bond16: (slave bridge19): failed to get link speed/duplex [ 1549.594409][ T3275] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1549.605680][ T3312] netlink: 'syz.2.22148': attribute type 1 has an invalid length. [ 1549.623127][ T3312] netlink: 96 bytes leftover after parsing attributes in process `syz.2.22148'. [ 1549.645331][ T3312] netlink: 1 bytes leftover after parsing attributes in process `syz.2.22148'. [ 1549.685722][ T3312] netlink: 'syz.2.22148': attribute type 1 has an invalid length. [ 1549.713502][ T3312] netlink: 634 bytes leftover after parsing attributes in process `syz.2.22148'. [ 1549.823109][ T3335] netlink: 16 bytes leftover after parsing attributes in process `syz.3.22154'. [ 1549.986958][ T3347] netlink: 4 bytes leftover after parsing attributes in process `syz.5.22157'. [ 1550.014110][ T3347] netlink: 12 bytes leftover after parsing attributes in process `syz.5.22157'. [ 1550.174122][ T3353] netlink: 'syz.3.22158': attribute type 3 has an invalid length. [ 1550.426546][ T3357] bond45: Removing last ns target with arp_interval on [ 1551.075499][ T3407] bond46: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 1551.093812][ T3407] bond46 (unregistering): Released all slaves [ 1551.479620][ T5131] net_ratelimit: 18 callbacks suppressed [ 1551.479641][ T5131] bond16: (slave bridge19): failed to get link speed/duplex [ 1551.609768][ T1796] bond16: (slave bridge19): failed to get link speed/duplex [ 1551.689811][T18836] veth0_to_bond: left promiscuous mode [ 1551.719791][ T5131] bond16: (slave bridge19): failed to get link speed/duplex [ 1551.830466][ T5131] bond16: (slave bridge19): failed to get link speed/duplex [ 1551.950579][ T5131] bond16: (slave bridge19): failed to get link speed/duplex [ 1552.059980][T18836] bond16: (slave bridge19): failed to get link speed/duplex [ 1552.180075][ T5131] bond16: (slave bridge19): failed to get link speed/duplex [ 1552.295153][ T1796] bond16: (slave bridge19): failed to get link speed/duplex [ 1552.410275][ T43] bond16: (slave bridge19): failed to get link speed/duplex [ 1552.529612][ T5129] bond16: (slave bridge19): failed to get link speed/duplex [ 1553.297854][ T3363] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1553.802935][ T3444] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 1553.881038][ T3449] __nla_validate_parse: 1 callbacks suppressed [ 1553.881059][ T3449] netlink: 20 bytes leftover after parsing attributes in process `syz.1.22183'. [ 1554.173644][ T3465] syzkaller0: entered promiscuous mode [ 1554.181791][ T3471] netlink: 24 bytes leftover after parsing attributes in process `syz.1.22189'. [ 1554.200282][ T3465] syzkaller0: entered allmulticast mode [ 1554.465803][ T3483] netlink: 8 bytes leftover after parsing attributes in process `syz.5.22190'. [ 1554.865506][ T3506] netlink: 8 bytes leftover after parsing attributes in process `syz.1.22197'. [ 1555.515542][ T3512] mac80211_hwsim hwsim42 wlan1: Caught tx_queue_len zero misconfig [ 1555.528972][T27215] wg1 speed is unknown, defaulting to 1000 [ 1555.535617][T27215] syz2: Port: 1 Link DOWN [ 1556.530522][ T5130] net_ratelimit: 29 callbacks suppressed [ 1556.530544][ T5130] bond16: (slave bridge19): failed to get link speed/duplex [ 1556.649848][ T1796] bond16: (slave bridge19): failed to get link speed/duplex [ 1556.760231][ T5130] bond16: (slave bridge19): failed to get link speed/duplex [ 1556.871594][ T5130] bond16: (slave bridge19): failed to get link speed/duplex [ 1556.899722][ T3453] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1556.980058][T21179] bond16: (slave bridge19): failed to get link speed/duplex [ 1557.109569][ T1796] bond16: (slave bridge19): failed to get link speed/duplex [ 1557.184110][ T3534] netlink: 16 bytes leftover after parsing attributes in process `syz.6.22202'. [ 1557.259778][ T1796] bond16: (slave bridge19): failed to get link speed/duplex [ 1557.381132][ T43] bond16: (slave bridge19): failed to get link speed/duplex [ 1557.401405][ T3550] netlink: 16 bytes leftover after parsing attributes in process `syz.6.22208'. [ 1557.520837][ T5130] bond16: (slave bridge19): failed to get link speed/duplex [ 1557.639058][ T3570] netlink: 24 bytes leftover after parsing attributes in process `syz.1.22214'. [ 1557.653787][ T3573] netlink: 24 bytes leftover after parsing attributes in process `syz.1.22214'. [ 1557.671841][ T43] bond16: (slave bridge19): failed to get link speed/duplex [ 1557.834883][ T3579] netlink: 'syz.1.22216': attribute type 4 has an invalid length. [ 1560.464442][ T3556] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1560.475413][ T3564] netlink: 'syz.6.22212': attribute type 1 has an invalid length. [ 1560.492010][ T3564] netlink: 96 bytes leftover after parsing attributes in process `syz.6.22212'. [ 1560.501660][ T3564] netlink: 1 bytes leftover after parsing attributes in process `syz.6.22212'. [ 1560.511909][ T3564] netlink: 'syz.6.22212': attribute type 1 has an invalid length. [ 1560.521488][ T3564] netlink: 'syz.6.22212': attribute type 8 has an invalid length. [ 1560.549076][ T3564] netlink: 606 bytes leftover after parsing attributes in process `syz.6.22212'. [ 1560.711887][ T3588] netlink: 8 bytes leftover after parsing attributes in process `syz.1.22220'. [ 1560.757281][ T3590] FAULT_INJECTION: forcing a failure. [ 1560.757281][ T3590] name failslab, interval 1, probability 0, space 0, times 0 [ 1560.772709][ T3588] team0: left promiscuous mode [ 1560.794264][ T3590] CPU: 1 UID: 0 PID: 3590 Comm: syz.3.22219 Not tainted syzkaller #0 PREEMPT(full) [ 1560.794288][ T3590] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1560.794299][ T3590] Call Trace: [ 1560.794306][ T3590] [ 1560.794314][ T3590] dump_stack_lvl+0xe8/0x150 [ 1560.794340][ T3590] should_fail_ex+0x412/0x560 [ 1560.794367][ T3590] should_failslab+0xa8/0x100 [ 1560.794395][ T3590] __kmalloc_noprof+0xe8/0x760 [ 1560.794420][ T3590] ? tomoyo_realpath_from_path+0xe3/0x5d0 [ 1560.794450][ T3590] tomoyo_realpath_from_path+0xe3/0x5d0 [ 1560.794475][ T3590] ? tomoyo_domain+0xd7/0x130 [ 1560.794502][ T3590] ? tomoyo_path_number_perm+0x219/0x630 [ 1560.794522][ T3590] tomoyo_path_number_perm+0x246/0x630 [ 1560.794546][ T3590] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1560.794564][ T3590] ? __lock_acquire+0x6b5/0x2cf0 [ 1560.794599][ T3590] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 1560.794655][ T3590] ? __fget_files+0x2a/0x420 [ 1560.794679][ T3590] ? __fget_files+0x2a/0x420 [ 1560.794695][ T3590] ? __fget_files+0x3a0/0x420 [ 1560.794713][ T3590] ? __fget_files+0x2a/0x420 [ 1560.794737][ T3590] security_file_ioctl+0xc3/0x2a0 [ 1560.794758][ T3590] __se_sys_ioctl+0x47/0x170 [ 1560.794782][ T3590] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1560.794802][ T3590] do_syscall_64+0x15f/0xf80 [ 1560.794823][ T3590] ? trace_irq_disable+0x3b/0x140 [ 1560.794848][ T3590] ? clear_bhb_loop+0x40/0x90 [ 1560.794870][ T3590] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1560.794888][ T3590] RIP: 0033:0x7f104359cdd9 [ 1560.794907][ T3590] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1560.794924][ T3590] RSP: 002b:00007f10443a3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1560.794944][ T3590] RAX: ffffffffffffffda RBX: 00007f1043815fa0 RCX: 00007f104359cdd9 [ 1560.794957][ T3590] RDX: 0000200000000740 RSI: 0000000000008914 RDI: 0000000000000007 [ 1560.794970][ T3590] RBP: 00007f10443a3090 R08: 0000000000000000 R09: 0000000000000000 [ 1560.794980][ T3590] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1560.794990][ T3590] R13: 00007f1043816038 R14: 00007f1043815fa0 R15: 00007ffe6c353ee8 [ 1560.795021][ T3590] [ 1560.795506][ T3590] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1560.931803][ T3601] netlink: 'syz.2.22222': attribute type 1 has an invalid length. [ 1560.946318][ T3588] macvlan0: left promiscuous mode [ 1561.063044][ T3588] netlink: 'syz.1.22220': attribute type 1 has an invalid length. [ 1561.073900][ T3588] netlink: 'syz.1.22220': attribute type 2 has an invalid length. [ 1561.247611][ T3614] netlink: 'syz.5.22227': attribute type 1 has an invalid length. [ 1561.257742][ T3601] 8021q: adding VLAN 0 to HW filter on device bond40 [ 1561.387782][ T3614] 8021q: adding VLAN 0 to HW filter on device bond13 [ 1561.477738][ T3617] bond13: (slave gretap1): making interface the new active one [ 1561.493974][ T3617] bond13: (slave gretap1): Enslaving as an active interface with an up link [ 1561.550542][T18836] net_ratelimit: 29 callbacks suppressed [ 1561.550561][T18836] bond16: (slave bridge19): failed to get link speed/duplex [ 1562.102261][ T3640] FAULT_INJECTION: forcing a failure. [ 1562.102261][ T3640] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1562.115734][ T5129] bond16: (slave bridge19): failed to get link speed/duplex [ 1562.121365][ T3640] CPU: 1 UID: 0 PID: 3640 Comm: syz.3.22232 Not tainted syzkaller #0 PREEMPT(full) [ 1562.121392][ T3640] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1562.121403][ T3640] Call Trace: [ 1562.121411][ T3640] [ 1562.121419][ T3640] dump_stack_lvl+0xe8/0x150 [ 1562.121448][ T3640] should_fail_ex+0x412/0x560 [ 1562.121481][ T3640] _copy_to_user+0x31/0xb0 [ 1562.121510][ T3640] simple_read_from_buffer+0xe1/0x170 [ 1562.121537][ T3640] proc_fail_nth_read+0x1bb/0x230 [ 1562.121563][ T3640] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1562.121589][ T3640] ? rw_verify_area+0x2a6/0x4d0 [ 1562.121612][ T3640] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1562.121636][ T3640] vfs_read+0x20c/0xa70 [ 1562.121665][ T3640] ? __pfx___mutex_lock+0x10/0x10 [ 1562.121688][ T3640] ? __pfx_vfs_read+0x10/0x10 [ 1562.121714][ T3640] ? __fget_files+0x2a/0x420 [ 1562.121739][ T3640] ? __fget_files+0x3a0/0x420 [ 1562.121759][ T3640] ? __fget_files+0x2a/0x420 [ 1562.121788][ T3640] ksys_read+0x150/0x270 [ 1562.121815][ T3640] ? __pfx_ksys_read+0x10/0x10 [ 1562.121847][ T3640] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1562.121867][ T3640] do_syscall_64+0x15f/0xf80 [ 1562.121887][ T3640] ? trace_irq_disable+0x3b/0x140 [ 1562.121912][ T3640] ? clear_bhb_loop+0x40/0x90 [ 1562.121934][ T3640] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1562.121952][ T3640] RIP: 0033:0x7f104355d60e [ 1562.121968][ T3640] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1562.121983][ T3640] RSP: 002b:00007f1044381fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1562.122002][ T3640] RAX: ffffffffffffffda RBX: 00007f10443826c0 RCX: 00007f104355d60e [ 1562.122015][ T3640] RDX: 000000000000000f RSI: 00007f10443820a0 RDI: 0000000000000011 [ 1562.122027][ T3640] RBP: 00007f1044382090 R08: 0000000000000000 R09: 0000000000000000 [ 1562.122038][ T3640] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1562.122049][ T3640] R13: 00007f1043816128 R14: 00007f1043816090 R15: 00007ffe6c353ee8 [ 1562.122081][ T3640] [ 1562.474316][ T5130] bond16: (slave bridge19): failed to get link speed/duplex [ 1562.630303][ T5129] bond16: (slave bridge19): failed to get link speed/duplex [ 1562.750747][ T5130] bond16: (slave bridge19): failed to get link speed/duplex [ 1562.769247][ T3660] netlink: 28 bytes leftover after parsing attributes in process `syz.6.22237'. [ 1562.860263][ T1796] bond16: (slave bridge19): failed to get link speed/duplex [ 1562.970255][ T5131] bond16: (slave bridge19): failed to get link speed/duplex [ 1562.991947][ T3682] veth0: entered promiscuous mode [ 1562.998307][ T3682] netlink: 4 bytes leftover after parsing attributes in process `syz.6.22243'. [ 1563.080268][ T5131] bond16: (slave bridge19): failed to get link speed/duplex [ 1563.189911][ T5131] bond16: (slave bridge19): failed to get link speed/duplex [ 1563.310245][ T1796] bond16: (slave bridge19): failed to get link speed/duplex [ 1563.416475][ T5631] Bluetooth: hci5: command 0x0406 tx timeout [ 1564.444138][ T3624] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1564.720010][ T3686] syzkaller1: entered promiscuous mode [ 1564.738014][ T3686] syzkaller1: entered allmulticast mode [ 1564.766822][ T3692] netlink: 'syz.5.22247': attribute type 2 has an invalid length. [ 1565.274084][ T3728] netlink: 'syz.2.22257': attribute type 1 has an invalid length. [ 1565.298941][ T3728] netlink: 280 bytes leftover after parsing attributes in process `syz.2.22257'. [ 1565.435727][ T3739] netlink: 8 bytes leftover after parsing attributes in process `syz.6.22261'. [ 1565.446839][ T3739] netlink: 12 bytes leftover after parsing attributes in process `syz.6.22261'. [ 1565.456769][ T3739] netlink: 4 bytes leftover after parsing attributes in process `syz.6.22261'. [ 1565.497372][ T5129] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1565.507172][ T3739] netlink: 8 bytes leftover after parsing attributes in process `syz.6.22261'. [ 1565.536766][ T5129] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1565.548227][ T3739] netlink: 12 bytes leftover after parsing attributes in process `syz.6.22261'. [ 1565.561552][ T3739] netlink: 4 bytes leftover after parsing attributes in process `syz.6.22261'. [ 1565.571204][ T5129] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1565.580840][ T5129] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1565.580945][ T3744] netlink: 'syz.5.22259': attribute type 1 has an invalid length. [ 1565.669198][ T3744] 8021q: adding VLAN 0 to HW filter on device bond14 [ 1565.865314][ T3748] bond14: (slave veth17): Enslaving as an active interface with a down link [ 1565.886770][ T3744] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1565.917224][ T3744] bond14: (slave batadv0): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open [ 1566.137907][ T3768] netlink: 40 bytes leftover after parsing attributes in process `syz.3.22268'. [ 1566.283581][ T3775] netlink: 8 bytes leftover after parsing attributes in process `syz.3.22271'. [ 1566.610775][ T5130] net_ratelimit: 23 callbacks suppressed [ 1566.610793][ T5130] bond16: (slave bridge19): failed to get link speed/duplex [ 1566.730329][ T5129] bond16: (slave bridge19): failed to get link speed/duplex [ 1566.840163][T21179] bond16: (slave bridge19): failed to get link speed/duplex [ 1566.949872][ T5131] bond16: (slave bridge19): failed to get link speed/duplex [ 1567.060222][ T5131] bond16: (slave bridge19): failed to get link speed/duplex [ 1567.171195][T32741] bond16: (slave bridge19): failed to get link speed/duplex [ 1567.279662][ T5130] bond16: (slave bridge19): failed to get link speed/duplex [ 1567.390550][T32741] bond16: (slave bridge19): failed to get link speed/duplex [ 1567.499536][ T5129] bond16: (slave bridge19): failed to get link speed/duplex [ 1567.610218][T32741] bond16: (slave bridge19): failed to get link speed/duplex [ 1568.304272][ T3730] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1568.595620][ T3804] netlink: 12 bytes leftover after parsing attributes in process `syz.6.22278'. [ 1568.775879][ T3812] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 1569.617752][ T3839] netlink: 4 bytes leftover after parsing attributes in process `syz.6.22287'. [ 1569.747263][ T3858] netlink: 8 bytes leftover after parsing attributes in process `syz.6.22291'. [ 1569.783931][ T3858] bond3: Unable to set up delay as MII monitoring is disabled [ 1569.793697][ T3858] bond3 (unregistering): Released all slaves [ 1571.640341][T32741] net_ratelimit: 30 callbacks suppressed [ 1571.640361][T32741] bond16: (slave bridge19): failed to get link speed/duplex [ 1571.760464][T21179] bond16: (slave bridge19): failed to get link speed/duplex [ 1571.869868][ T1796] bond16: (slave bridge19): failed to get link speed/duplex [ 1571.979477][T32741] bond16: (slave bridge19): failed to get link speed/duplex [ 1572.091547][ T3830] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1572.100325][ T5130] bond16: (slave bridge19): failed to get link speed/duplex [ 1572.252388][ T1796] bond16: (slave bridge19): failed to get link speed/duplex [ 1572.333818][ T3870] netlink: 8 bytes leftover after parsing attributes in process `syz.1.22293'. [ 1572.430638][ T3870] 8021q: adding VLAN 0 to HW filter on device bond46 [ 1572.440054][ T43] bond16: (slave bridge19): failed to get link speed/duplex [ 1572.593162][T32741] bond16: (slave bridge19): failed to get link speed/duplex [ 1572.821885][ T5127] bond16: (slave bridge19): failed to get link speed/duplex [ 1572.951748][ T1796] bond16: (slave bridge19): failed to get link speed/duplex [ 1573.205960][ T3921] xt_hashlimit: size too large, truncated to 1048576 [ 1573.537960][ T3927] netlink: 8 bytes leftover after parsing attributes in process `syz.2.22305'. [ 1574.003615][ T3957] bond53: entered allmulticast mode [ 1574.035222][ T3957] veth57: entered allmulticast mode [ 1574.054679][ T3957] bond53: (slave veth57): Enslaving as an active interface with an up link [ 1574.207079][ T3970] netlink: 8 bytes leftover after parsing attributes in process `syz.3.22318'. [ 1574.217541][ T3970] netlink: 'syz.3.22318': attribute type 1 has an invalid length. [ 1574.225687][ T3970] netlink: 'syz.3.22318': attribute type 2 has an invalid length. [ 1576.087194][ T3916] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1576.317911][ T3977] netlink: 12 bytes leftover after parsing attributes in process `syz.6.22320'. [ 1576.556963][ T3993] sctp: [Deprecated]: syz.6.22327 (pid 3993) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1576.556963][ T3993] Use struct sctp_sack_info instead [ 1576.665685][ T3993] netlink: 8 bytes leftover after parsing attributes in process `syz.6.22327'. [ 1576.685216][ T3996] netlink: 8 bytes leftover after parsing attributes in process `syz.3.22329'. [ 1576.696644][ T1796] net_ratelimit: 29 callbacks suppressed [ 1576.696662][ T1796] bond16: (slave bridge19): failed to get link speed/duplex [ 1576.782045][ T3993] bridge4: entered promiscuous mode [ 1576.793537][ T3993] bridge4: entered allmulticast mode [ 1576.808284][ T3996] netlink: 'syz.3.22329': attribute type 1 has an invalid length. [ 1576.827021][ T3996] netlink: 'syz.3.22329': attribute type 2 has an invalid length. [ 1576.936507][ T4006] Cannot find del_set index 4 as target [ 1576.944785][T18836] bond16: (slave bridge19): failed to get link speed/duplex [ 1577.060083][T18836] bond16: (slave bridge19): failed to get link speed/duplex [ 1577.154620][ T4018] tc_dump_action: action bad kind [ 1577.261279][ T1796] bond16: (slave bridge19): failed to get link speed/duplex [ 1577.410562][T21179] bond16: (slave bridge19): failed to get link speed/duplex [ 1577.540008][ T5127] bond16: (slave bridge19): failed to get link speed/duplex [ 1577.669996][ T5130] bond16: (slave bridge19): failed to get link speed/duplex [ 1577.775796][ T4037] netlink: 8 bytes leftover after parsing attributes in process `syz.6.22344'. [ 1577.785673][ T5129] bond16: (slave bridge19): failed to get link speed/duplex [ 1577.828985][ T4037] netlink: 'syz.6.22344': attribute type 1 has an invalid length. [ 1577.861248][ T4037] netlink: 'syz.6.22344': attribute type 2 has an invalid length. [ 1577.900321][ T5127] bond16: (slave bridge19): failed to get link speed/duplex [ 1578.089952][ T5130] bond16: (slave bridge19): failed to get link speed/duplex [ 1578.157035][ T4048] netlink: 8 bytes leftover after parsing attributes in process `syz.5.22347'. [ 1579.981414][ T4008] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1580.243491][ T4069] syzkaller0: entered promiscuous mode [ 1580.249185][ T4069] syzkaller0: entered allmulticast mode [ 1580.337638][ T4069] netlink: 'syz.6.22354': attribute type 4 has an invalid length. [ 1580.857919][ T4097] netlink: 'syz.3.22361': attribute type 1 has an invalid length. [ 1580.866851][ T4102] lo: entered promiscuous mode [ 1580.902321][ T4102] netlink: 'syz.1.22362': attribute type 2 has an invalid length. [ 1580.915398][ T4097] netlink: 24 bytes leftover after parsing attributes in process `syz.3.22361'. [ 1581.274796][ T4124] ipvlan0: entered promiscuous mode [ 1581.311321][ T4128] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1581.823514][ T4147] net_ratelimit: 31 callbacks suppressed [ 1581.823537][ T4147] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 1581.900202][ T5127] bond16: (slave bridge19): failed to get link speed/duplex [ 1582.039781][T32741] bond16: (slave bridge19): failed to get link speed/duplex [ 1582.068795][T32741] bond14: (slave veth17): link status definitely up, 10000 Mbps full duplex [ 1582.088786][T32741] bond14: (slave veth17): making interface the new active one [ 1582.116472][T32741] bond14: active interface up! [ 1582.145209][ T4156] netlink: 80 bytes leftover after parsing attributes in process `syz.2.22375'. [ 1582.163733][ T4156] netlink: 12 bytes leftover after parsing attributes in process `syz.2.22375'. [ 1582.173216][T32741] bond16: (slave bridge19): failed to get link speed/duplex [ 1582.253302][ T4159] Cannot find set identified by id 3 to match [ 1582.301469][ T5130] bond16: (slave bridge19): failed to get link speed/duplex [ 1582.410883][ T5130] bond16: (slave bridge19): failed to get link speed/duplex [ 1582.519799][ T5130] bond16: (slave bridge19): failed to get link speed/duplex [ 1582.630126][T32741] bond16: (slave bridge19): failed to get link speed/duplex [ 1582.740062][T18836] bond16: (slave bridge19): failed to get link speed/duplex [ 1582.853556][T32741] bond16: (slave bridge19): failed to get link speed/duplex [ 1584.227902][ T4120] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1584.297624][ T4158] netlink: 'syz.6.22376': attribute type 1 has an invalid length. [ 1584.350036][ T4158] netlink: 96 bytes leftover after parsing attributes in process `syz.6.22376'. [ 1584.390572][ T4158] netlink: 1 bytes leftover after parsing attributes in process `syz.6.22376'. [ 1584.412224][ T4159] netlink: 'syz.6.22376': attribute type 11 has an invalid length. [ 1584.428551][ T4159] netlink: 224 bytes leftover after parsing attributes in process `syz.6.22376'. [ 1584.428827][ T4161] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1584.560796][ T4166] netlink: 'syz.1.22380': attribute type 4 has an invalid length. [ 1584.684996][ T4168] netlink: 'syz.6.22381': attribute type 10 has an invalid length. [ 1584.788612][ T4174] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 1584.843570][ T4168] team0 (unregistering): Port device team_slave_0 removed [ 1584.914201][ T4168] team0 (unregistering): Port device team_slave_1 removed [ 1584.973472][ T5631] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1584.997306][ T5631] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1585.013593][ T5631] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1585.014636][ T4179] netlink: 28 bytes leftover after parsing attributes in process `syz.3.22384'. [ 1585.050048][ T5631] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1585.052725][ T4179] netlink: 4 bytes leftover after parsing attributes in process `syz.3.22384'. [ 1585.073035][ T5631] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1585.147840][ T4179] netlink: 8 bytes leftover after parsing attributes in process `syz.3.22384'. [ 1585.499114][ T4195] netlink: 'syz.1.22388': attribute type 21 has an invalid length. [ 1585.565492][ T4200] netlink: 252 bytes leftover after parsing attributes in process `syz.6.22389'. [ 1585.905260][ T4177] C speed is unknown, defaulting to 1000 [ 1585.912782][ T4177] wg1 speed is unknown, defaulting to 1000 [ 1585.920200][ T4177] xfrm0 speed is unknown, defaulting to 1000 [ 1586.182319][ T4219] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1586.284193][ T4222] netlink: 'syz.1.22396': attribute type 1 has an invalid length. [ 1586.302230][ T4222] netlink: 96 bytes leftover after parsing attributes in process `syz.1.22396'. [ 1586.345562][ T4227] netlink: 12 bytes leftover after parsing attributes in process `syz.3.22395'. [ 1586.366713][ T4222] netlink: 658 bytes leftover after parsing attributes in process `syz.1.22396'. [ 1586.886226][ T4245] net_ratelimit: 26 callbacks suppressed [ 1586.886244][ T4245] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1586.941308][T18836] bond16: (slave bridge19): failed to get link speed/duplex [ 1587.155453][ T4177] bridge0: port 1(bridge_slave_0) entered blocking state [ 1587.180545][T30832] Bluetooth: hci7: command tx timeout [ 1587.197159][ T4177] bridge0: port 1(bridge_slave_0) entered disabled state [ 1587.221471][ T4177] bridge_slave_0: entered allmulticast mode [ 1587.233640][ T4177] bridge_slave_0: entered promiscuous mode [ 1587.264708][ T4177] bridge0: port 2(bridge_slave_1) entered blocking state [ 1587.272701][ T4177] bridge0: port 2(bridge_slave_1) entered disabled state [ 1587.307652][ T4177] bridge_slave_1: entered allmulticast mode [ 1587.331771][ T4177] bridge_slave_1: entered promiscuous mode [ 1587.488461][ T4177] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1587.518232][ T4177] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1587.711900][ T4292] mac80211_hwsim hwsim58 syzkaller0: entered promiscuous mode [ 1587.804274][ T4177] team0: Port device team_slave_0 added [ 1587.831168][ T4177] team0: Port device team_slave_1 added [ 1587.931676][ T1796] bond16: (slave bridge19): failed to get link speed/duplex [ 1587.980399][ T4177] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1588.009454][ T4177] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1588.041387][ T4177] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1588.083000][ T4177] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1588.092682][ T4177] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1588.121271][ T4177] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1588.237206][ T4306] bond15: (slave bond_slave_1): Device is not our slave [ 1588.246928][ T4315] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1588.256517][ T4306] bond15: option active_slave: invalid value (bond_slave_1) [ 1588.267209][ T4306] bond15 (unregistering): Released all slaves [ 1588.585969][ T4177] hsr_slave_0: entered promiscuous mode [ 1588.595277][ T4177] hsr_slave_1: entered promiscuous mode [ 1588.602316][ T4177] debugfs: 'hsr0' already exists in 'hsr' [ 1588.608091][ T4177] Cannot create hsr debugfs directory [ 1588.682782][T32741] bond16: (slave bridge19): failed to get link speed/duplex [ 1589.020318][T32741] bond16: (slave bridge19): failed to get link speed/duplex [ 1589.067663][ T4347] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1589.200795][T32741] bond16: (slave bridge19): failed to get link speed/duplex [ 1589.261093][T30832] Bluetooth: hci7: command tx timeout [ 1589.361052][ T4363] __nla_validate_parse: 2 callbacks suppressed [ 1589.361071][ T4363] netlink: 40 bytes leftover after parsing attributes in process `syz.3.22439'. [ 1589.384100][T32741] bond16: (slave bridge19): failed to get link speed/duplex [ 1589.578846][ T4372] netlink: 8 bytes leftover after parsing attributes in process `syz.5.22442'. [ 1589.610632][T32741] bond16: (slave bridge19): failed to get link speed/duplex [ 1589.632941][ T4372] SET target dimension over the limit! [ 1589.640562][ T4375] netlink: 'syz.1.22443': attribute type 1 has an invalid length. [ 1589.661341][ T4375] netlink: 'syz.1.22443': attribute type 2 has an invalid length. [ 1589.772282][ T4372] netlink: 1044 bytes leftover after parsing attributes in process `syz.5.22442'. [ 1589.850120][ T1796] bond16: (slave bridge19): failed to get link speed/duplex [ 1589.860624][ T4383] netlink: 24 bytes leftover after parsing attributes in process `syz.1.22445'. [ 1590.067877][ T4395] netlink: 'syz.5.22447': attribute type 61 has an invalid length. [ 1590.117986][ T4401] veth0: entered promiscuous mode [ 1590.166893][ T4398] veth0: left promiscuous mode [ 1591.340433][T30832] Bluetooth: hci7: command tx timeout [ 1591.989848][ T5127] net_ratelimit: 18 callbacks suppressed [ 1591.989870][ T5127] bond16: (slave bridge19): failed to get link speed/duplex [ 1592.109586][ T5127] bond16: (slave bridge19): failed to get link speed/duplex [ 1592.220005][T18836] bond16: (slave bridge19): failed to get link speed/duplex [ 1592.330075][ T5127] bond16: (slave bridge19): failed to get link speed/duplex [ 1592.439744][ T1796] bond16: (slave bridge19): failed to get link speed/duplex [ 1592.498009][ T4365] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1592.511699][ T4404] netlink: 4 bytes leftover after parsing attributes in process `syz.1.22451'. [ 1592.549926][ T5127] bond16: (slave bridge19): failed to get link speed/duplex [ 1592.588135][ T4177] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1592.724860][ T4177] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1592.735453][ T4177] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1592.756189][ T4177] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1592.759600][ T4414] netlink: 'syz.5.22453': attribute type 1 has an invalid length. [ 1592.765442][ T4177] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1592.784808][ T4177] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1592.793917][ T4177] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1592.811100][ T4177] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1592.872036][ T4414] bond15: entered promiscuous mode [ 1592.878312][ T4414] 8021q: adding VLAN 0 to HW filter on device bond15 [ 1592.923434][ T4424] IPv6: NLM_F_CREATE should be specified when creating new route [ 1592.974298][ T4424] netlink: 16 bytes leftover after parsing attributes in process `syz.1.22456'. [ 1593.109870][T32741] bond16: (slave bridge19): failed to get link speed/duplex [ 1593.274563][ T4177] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1593.310215][ T1796] bond16: (slave bridge19): failed to get link speed/duplex [ 1593.313090][ T4441] FAULT_INJECTION: forcing a failure. [ 1593.313090][ T4441] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1593.336391][ T4441] CPU: 1 UID: 0 PID: 4441 Comm: syz.3.22460 Not tainted syzkaller #0 PREEMPT(full) [ 1593.336416][ T4441] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1593.336428][ T4441] Call Trace: [ 1593.336436][ T4441] [ 1593.336444][ T4441] dump_stack_lvl+0xe8/0x150 [ 1593.336472][ T4441] should_fail_ex+0x412/0x560 [ 1593.336510][ T4441] _copy_from_user+0x2d/0xb0 [ 1593.336538][ T4441] ___sys_sendmsg+0x1c6/0x360 [ 1593.336562][ T4441] ? __lock_acquire+0x6b5/0x2cf0 [ 1593.336590][ T4441] ? __pfx____sys_sendmsg+0x10/0x10 [ 1593.336648][ T4441] ? __fget_files+0x2a/0x420 [ 1593.336668][ T4441] ? __fget_files+0x3a0/0x420 [ 1593.336701][ T4441] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1593.336728][ T4441] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1593.336762][ T4441] ? __pfx_ksys_write+0x10/0x10 [ 1593.336797][ T4441] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1593.336817][ T4441] do_syscall_64+0x15f/0xf80 [ 1593.336840][ T4441] ? trace_irq_disable+0x3b/0x140 [ 1593.336866][ T4441] ? clear_bhb_loop+0x40/0x90 [ 1593.336888][ T4441] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1593.336905][ T4441] RIP: 0033:0x7f104359cdd9 [ 1593.336923][ T4441] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1593.336938][ T4441] RSP: 002b:00007f10443a3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1593.336956][ T4441] RAX: ffffffffffffffda RBX: 00007f1043815fa0 RCX: 00007f104359cdd9 [ 1593.336969][ T4441] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 1593.336981][ T4441] RBP: 00007f10443a3090 R08: 0000000000000000 R09: 0000000000000000 [ 1593.336992][ T4441] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1593.337004][ T4441] R13: 00007f1043816038 R14: 00007f1043815fa0 R15: 00007ffe6c353ee8 [ 1593.337036][ T4441] [ 1593.526454][ T4177] 8021q: adding VLAN 0 to HW filter on device team0 [ 1593.554766][ T4409] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1593.567092][T30832] Bluetooth: hci7: command tx timeout [ 1593.569057][ T4177] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1593.584825][ T4177] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1593.606873][T21179] bridge0: port 1(bridge_slave_0) entered blocking state [ 1593.614095][T21179] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1593.623996][T21179] bridge0: port 2(bridge_slave_1) entered blocking state [ 1593.631240][T21179] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1593.658091][T21179] bond16: (slave bridge19): failed to get link speed/duplex [ 1593.831168][ T4450] netlink: 'syz.3.22462': attribute type 1 has an invalid length. [ 1593.840925][ T4450] netlink: 224 bytes leftover after parsing attributes in process `syz.3.22462'. [ 1593.851526][T32741] bond16: (slave bridge19): failed to get link speed/duplex [ 1594.403994][ T4471] netlink: 28 bytes leftover after parsing attributes in process `syz.6.22465'. [ 1594.418449][ T4467] bond3: entered allmulticast mode [ 1595.128735][ T4177] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1595.358251][ T4177] veth0_vlan: entered promiscuous mode [ 1595.405892][ T4177] veth1_vlan: entered promiscuous mode [ 1595.575572][ T4177] veth0_macvtap: entered promiscuous mode [ 1595.602029][ T4177] veth1_macvtap: entered promiscuous mode [ 1595.637479][ T4517] netlink: 8 bytes leftover after parsing attributes in process `syz.5.22478'. [ 1595.696117][ T4177] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1595.735548][ T4522] netlink: 12 bytes leftover after parsing attributes in process `syz.6.22479'. [ 1595.741008][ T4177] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1595.812673][ T4524] netlink: 8 bytes leftover after parsing attributes in process `syz.6.22479'. [ 1595.819199][T18836] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1595.850166][ T4526] xt_cluster: node mask cannot exceed total number of nodes [ 1595.855812][ T4524] netlink: 24 bytes leftover after parsing attributes in process `syz.6.22479'. [ 1595.858561][T18836] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1595.880492][ T4526] netlink: 28 bytes leftover after parsing attributes in process `syz.5.22480'. [ 1595.987957][T18836] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1596.047235][ T4532] netlink: 8 bytes leftover after parsing attributes in process `syz.3.22481'. [ 1596.114960][T18836] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1596.392607][ T5127] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1596.424898][ T5127] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1596.578207][ T1796] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1596.593218][ T1796] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1597.050439][ T43] net_ratelimit: 20 callbacks suppressed [ 1597.050460][ T43] bond16: (slave bridge19): failed to get link speed/duplex [ 1597.200944][T21179] bond16: (slave bridge19): failed to get link speed/duplex [ 1597.204687][ T4562] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1597.265177][ T4566] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1597.310668][ T5127] bond16: (slave bridge19): failed to get link speed/duplex [ 1597.342889][ T4569] netlink: 8 bytes leftover after parsing attributes in process `syz.2.22492'. [ 1597.363638][ T4569] netlink: 20 bytes leftover after parsing attributes in process `syz.2.22492'. [ 1597.431270][ T5631] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1597.448912][ T5631] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1597.466027][ T4569] netlink: 8 bytes leftover after parsing attributes in process `syz.2.22492'. [ 1597.469479][ T5631] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1597.475978][ T43] bond16: (slave bridge19): failed to get link speed/duplex [ 1597.504373][ T5631] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1597.514363][ T5631] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1597.553371][ T5127] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1597.566999][ T5127] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1597.577745][ T5127] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1597.587072][ T5127] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1597.670749][ T5130] bond16: (slave bridge19): failed to get link speed/duplex [ 1597.800044][ T5130] bond16: (slave bridge19): failed to get link speed/duplex [ 1597.920256][ T43] bond16: (slave bridge19): failed to get link speed/duplex [ 1598.041472][ T5129] bond16: (slave bridge19): failed to get link speed/duplex [ 1598.057249][ T4596] netlink: 'syz.2.22495': attribute type 8 has an invalid length. [ 1598.181246][ T43] bond16: (slave bridge19): failed to get link speed/duplex [ 1598.222232][ T4570] C speed is unknown, defaulting to 1000 [ 1598.231395][ T4570] wg1 speed is unknown, defaulting to 1000 [ 1598.239084][ T4570] xfrm0 speed is unknown, defaulting to 1000 [ 1598.309410][ T43] bond16: (slave bridge19): failed to get link speed/duplex [ 1598.751605][ T4570] bridge0: port 1(bridge_slave_0) entered blocking state [ 1598.759037][ T4570] bridge0: port 1(bridge_slave_0) entered disabled state [ 1598.766922][ T4570] bridge_slave_0: entered allmulticast mode [ 1598.775067][ T4570] bridge_slave_0: entered promiscuous mode [ 1598.785361][ T4570] bridge0: port 2(bridge_slave_1) entered blocking state [ 1598.793607][ T4570] bridge0: port 2(bridge_slave_1) entered disabled state [ 1598.801995][ T4570] bridge_slave_1: entered allmulticast mode [ 1598.810873][ T4570] bridge_slave_1: entered promiscuous mode [ 1598.842103][ T4570] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1598.854918][ T4570] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1598.890486][ T4570] team0: Port device team_slave_0 added [ 1598.898502][ T4570] team0: Port device team_slave_1 added [ 1598.926532][ T4570] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1598.936840][ T4570] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1598.963676][ T4570] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1598.977202][ T4570] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1598.984756][ T4570] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1599.011742][ T4570] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1599.066299][ T4570] hsr_slave_0: entered promiscuous mode [ 1599.074363][ T4570] hsr_slave_1: entered promiscuous mode [ 1599.081021][ T4570] debugfs: 'hsr0' already exists in 'hsr' [ 1599.086872][ T4570] Cannot create hsr debugfs directory [ 1599.245025][ T4570] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1599.258944][ T4570] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 1599.272985][ T4570] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1599.377140][ T4570] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1599.387958][ T4570] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 1599.398887][ T4570] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1599.507462][ T4570] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1599.518178][ T4570] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 1599.530365][ T4570] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1599.570409][ T5631] Bluetooth: hci4: command tx timeout [ 1599.614245][ T4570] netdevsim netdevsim3  (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1599.624586][ T4570] netdevsim netdevsim3  (unregistering): unset [0, 1] type 1 family 0 port 2816 - 0 [ 1599.634747][ T4570] netdevsim netdevsim3  (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1600.547882][ T4576] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1600.599894][ T4570] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1600.654385][ T4570] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1600.684304][ T4570] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1600.740712][ T4570] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1600.761051][ T4570] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1600.864385][ T4570] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1600.895260][ T4570] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1600.967022][ T4570] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1601.314301][ T4570] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1601.385531][ T4570] 8021q: adding VLAN 0 to HW filter on device team0 [ 1601.444016][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 1601.451276][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1601.506664][ T5127] bridge0: port 2(bridge_slave_1) entered blocking state [ 1601.513901][ T5127] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1601.542378][ T4658] xt_hashlimit: size too large, truncated to 1048576 [ 1601.546432][ T4656] __nla_validate_parse: 3 callbacks suppressed [ 1601.546453][ T4656] netlink: 4 bytes leftover after parsing attributes in process `syz.6.22516'. [ 1601.663803][ T5631] Bluetooth: hci4: command tx timeout [ 1602.062782][T21179] net_ratelimit: 22 callbacks suppressed [ 1602.062803][T21179] bond16: (slave bridge19): failed to get link speed/duplex [ 1602.216192][ T5129] bond16: (slave bridge19): failed to get link speed/duplex [ 1602.400067][T18836] bond16: (slave bridge19): failed to get link speed/duplex [ 1602.540073][T18836] bond16: (slave bridge19): failed to get link speed/duplex [ 1602.636751][ T4691] netlink: 'syz.5.22529': attribute type 41 has an invalid length. [ 1602.660133][ T4691] netlink: 'syz.5.22529': attribute type 4 has an invalid length. [ 1602.670894][ T1796] bond16: (slave bridge19): failed to get link speed/duplex [ 1602.682946][ T4691] netlink: 152 bytes leftover after parsing attributes in process `syz.5.22529'. [ 1602.813324][T18836] bond16: (slave bridge19): failed to get link speed/duplex [ 1602.910329][ T4705] netlink: 60 bytes leftover after parsing attributes in process `syz.1.22534'. [ 1602.921389][ T4705] netlink: 60 bytes leftover after parsing attributes in process `syz.1.22534'. [ 1602.945928][ T4705] netlink: 60 bytes leftover after parsing attributes in process `syz.1.22534'. [ 1602.980101][T18836] bond16: (slave bridge19): failed to get link speed/duplex [ 1603.136276][ T43] bond16: (slave bridge19): failed to get link speed/duplex [ 1603.212274][ T4570] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1603.320368][T32741] bond16: (slave bridge19): failed to get link speed/duplex [ 1603.460005][ T4570] veth0_vlan: entered promiscuous mode [ 1603.510443][T32741] bond16: (slave bridge19): failed to get link speed/duplex [ 1603.557044][ T4570] veth1_vlan: entered promiscuous mode [ 1603.682496][ T4570] veth0_macvtap: entered promiscuous mode [ 1603.727480][ T4570] veth1_macvtap: entered promiscuous mode [ 1603.733424][T30832] Bluetooth: hci4: command tx timeout [ 1603.818883][ T4570] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1603.897719][ T4570] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1603.948148][ T4731] netlink: 'syz.1.22547': attribute type 29 has an invalid length. [ 1603.972409][ T4731] netlink: 'syz.1.22547': attribute type 29 has an invalid length. [ 1604.024509][ T1797] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1604.051661][T32741] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1604.093902][T32741] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1604.128344][T32741] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1604.141166][ T4740] netlink: 'syz.1.22549': attribute type 2 has an invalid length. [ 1604.153748][ T4740] netlink: 'syz.1.22549': attribute type 8 has an invalid length. [ 1604.166179][ T4740] netlink: 132 bytes leftover after parsing attributes in process `syz.1.22549'. [ 1604.370389][T30832] Bluetooth: hci6: command 0x0406 tx timeout [ 1604.408089][ T1796] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1604.454480][ T1796] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1604.583999][T32741] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1604.601645][T32741] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1604.763768][ T4755] netlink: 'syz.2.22555': attribute type 29 has an invalid length. [ 1604.787033][ T4755] netlink: 'syz.2.22555': attribute type 29 has an invalid length. [ 1604.813453][ T4755] netlink: 'syz.2.22555': attribute type 29 has an invalid length. [ 1605.810580][ T5631] Bluetooth: hci4: command tx timeout [ 1606.190195][T30832] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1606.208446][T30832] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1606.226805][T30832] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1606.261963][T30832] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1606.277254][T30832] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1607.014040][T32741] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1607.050452][T32741] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 1607.083352][T32741] netdevsim netdevsim1 eth3 (unregistering): unset [1, 3] type 2 family 0 port 6081 - 0 [ 1607.161088][T21179] net_ratelimit: 18 callbacks suppressed [ 1607.161108][T21179] bond16: (slave bridge19): failed to get link speed/duplex [ 1607.262646][ T4834] netlink: 4 bytes leftover after parsing attributes in process `syz.3.22587'. [ 1607.310590][ T5129] bond16: (slave bridge19): failed to get link speed/duplex [ 1607.372541][T32741] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1607.408022][T32741] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 1607.462245][T32741] netdevsim netdevsim1 eth2 (unregistering): unset [1, 3] type 2 family 0 port 6081 - 0 [ 1607.523475][ T5130] bond16: (slave bridge19): failed to get link speed/duplex [ 1607.608918][T32741] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1607.642137][T32741] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 1607.662060][T32741] netdevsim netdevsim1 eth1 (unregistering): unset [1, 3] type 2 family 0 port 6081 - 0 [ 1607.691526][T21179] bond16: (slave bridge19): failed to get link speed/duplex [ 1607.833410][T32741] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1607.851738][T32741] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 19999 - 0 [ 1607.863711][T32741] netdevsim netdevsim1 eth0 (unregistering): unset [1, 3] type 2 family 0 port 6081 - 0 [ 1607.904127][ T5130] bond16: (slave bridge19): failed to get link speed/duplex [ 1607.962681][ T4791] C speed is unknown, defaulting to 1000 [ 1607.985965][ T4791] wg1 speed is unknown, defaulting to 1000 [ 1608.059202][T18836] bond16: (slave bridge19): failed to get link speed/duplex [ 1608.068016][ T4791] xfrm0 speed is unknown, defaulting to 1000 [ 1608.179514][ T43] bond16: (slave bridge19): failed to get link speed/duplex [ 1608.371336][T30832] Bluetooth: hci3: command tx timeout [ 1608.462099][ T43] netdevsim netdevsim1 eth5: set [1, 0] type 2 family 0 port 20004 - 0 [ 1608.504444][ T43] netdevsim netdevsim1 eth5: set [1, 1] type 2 family 0 port 49037 - 0 [ 1608.625881][ T1796] netdevsim netdevsim1 eth6: set [1, 0] type 2 family 0 port 20004 - 0 [ 1608.655146][ T1796] netdevsim netdevsim1 eth6: set [1, 1] type 2 family 0 port 49037 - 0 [ 1608.865359][ T1796] netdevsim netdevsim1 eth7: set [1, 0] type 2 family 0 port 20004 - 0 [ 1608.883878][ T1796] netdevsim netdevsim1 eth7: set [1, 1] type 2 family 0 port 49037 - 0 [ 1609.004254][ T1796] netdevsim netdevsim1 eth8: set [1, 0] type 2 family 0 port 20004 - 0 [ 1609.037990][ T1796] netdevsim netdevsim1 eth8: set [1, 1] type 2 family 0 port 49037 - 0 [ 1610.331004][ T4918] netlink: 12 bytes leftover after parsing attributes in process `syz.6.22623'. [ 1610.354697][ T4918] netlink: 40 bytes leftover after parsing attributes in process `syz.6.22623'. [ 1610.449948][T30832] Bluetooth: hci3: command tx timeout [ 1610.457815][T18836] smc: removing ib device syz1 [ 1610.574682][T18836] smbdirect: ib_dev[syz1] removed [ 1611.477757][T32741] bridge0 (unregistering): left allmulticast mode [ 1612.532147][T30832] Bluetooth: hci3: command tx timeout [ 1613.743833][T32741] bond44 (unregistering): (slave bridge42): Releasing active interface [ 1613.913465][T32741] bond1 (unregistering): Released all slaves [ 1613.938500][T32741] bond0 (unregistering): Released all slaves [ 1613.957436][T32741] bond2 (unregistering): Released all slaves [ 1613.982883][T32741] bond3 (unregistering): Released all slaves [ 1614.011931][T32741] bond4 (unregistering): Released all slaves [ 1614.032704][T32741] bond5 (unregistering): Released all slaves [ 1614.053200][T32741] bond6 (unregistering): Released all slaves [ 1614.075275][T32741] bond7 (unregistering): Released all slaves [ 1614.092414][T32741] bond8 (unregistering): Released all slaves [ 1614.106376][T32741] bond9 (unregistering): Released all slaves [ 1614.124703][T32741] bond10 (unregistering): Released all slaves [ 1614.147007][T32741] bond11 (unregistering): Released all slaves [ 1614.163734][T32741] bond12 (unregistering): Released all slaves [ 1614.178033][T32741] bond13 (unregistering): Released all slaves [ 1614.193617][T32741] bond14 (unregistering): Released all slaves [ 1614.208081][T32741] bond15 (unregistering): Released all slaves [ 1614.231216][T32741] bond16 (unregistering): Released all slaves [ 1614.251830][T32741] bond17 (unregistering): Released all slaves [ 1614.266822][T32741] bond18 (unregistering): Released all slaves [ 1614.280798][T32741] bond19 (unregistering): Released all slaves [ 1614.295879][T32741] bond20 (unregistering): Released all slaves [ 1614.310893][T32741] bond21 (unregistering): Released all slaves [ 1614.331966][T32741] bond22 (unregistering): Released all slaves [ 1614.349523][T32741] bond23 (unregistering): Released all slaves [ 1614.366078][T32741] bond24 (unregistering): Released all slaves [ 1614.380803][T32741] bond25 (unregistering): Released all slaves [ 1614.395322][T32741] bond26 (unregistering): Released all slaves [ 1614.409107][T32741] bond27 (unregistering): Released all slaves [ 1614.426511][T32741] bond28 (unregistering): Released all slaves [ 1614.451537][T32741] bond29 (unregistering): Released all slaves [ 1614.469783][T32741] bond30 (unregistering): Released all slaves [ 1614.483704][T32741] bond31 (unregistering): Released all slaves [ 1614.503161][T32741] bond32 (unregistering): Released all slaves [ 1614.522062][T32741] bond33 (unregistering): Released all slaves [ 1614.538405][T32741] bond34 (unregistering): Released all slaves [ 1614.557181][T32741] bond35 (unregistering): Released all slaves [ 1614.585728][T32741] bond36 (unregistering): Released all slaves [ 1614.604881][T32741] bond37 (unregistering): Released all slaves [ 1614.612556][T30832] Bluetooth: hci3: command tx timeout [ 1614.627373][T32741] bond38 (unregistering): Released all slaves [ 1614.646695][T32741] bond39 (unregistering): Released all slaves [ 1614.666522][T32741] bond40 (unregistering): Released all slaves [ 1614.682361][T32741] bond41 (unregistering): Released all slaves [ 1614.701270][T32741] bond42 (unregistering): (slave veth43): Releasing backup interface [ 1614.714630][T32741] bond42 (unregistering): Released all slaves [ 1614.733324][T32741] bond43 (unregistering): (slave veth45): Releasing backup interface [ 1614.743957][T32741] bond43 (unregistering): Released all slaves [ 1614.763909][T32741] bond44 (unregistering): Released all slaves [ 1614.778096][T32741] bond45 (unregistering): Released all slaves [ 1614.794269][T32741] bond46 (unregistering): Released all slaves [ 1614.846994][T30400] xfrm0 speed is unknown, defaulting to 1000 [ 1614.863344][T30400] syz1: Port: 1 Link DOWN [ 1614.960570][ T1797] bond16: (slave bridge19): failed to get link speed/duplex [ 1615.607441][ T5127] bond16: (slave bridge19): failed to get link speed/duplex [ 1615.714833][ T4960] netlink: 12 bytes leftover after parsing attributes in process `syz.2.22636'. [ 1615.761229][ T5127] bond16: (slave bridge19): failed to get link speed/duplex [ 1615.862136][ T4964] netlink: 40 bytes leftover after parsing attributes in process `syz.3.22638'. [ 1615.916023][ T4966] netlink: 28 bytes leftover after parsing attributes in process `syz.6.22637'. [ 1615.926823][T32741] tipc: Disabling bearer [ 1615.948697][T32741] tipc: Left network mode [ 1615.955484][ T43] bond16: (slave bridge19): failed to get link speed/duplex [ 1616.133284][T21179] bond16: (slave bridge19): failed to get link speed/duplex [ 1616.218053][ T4983] netlink: 64 bytes leftover after parsing attributes in process `syz.6.22642'. [ 1616.683258][ T4985] 8021q: adding VLAN 0 to HW filter on device bond16 [ 1616.707521][ T4985] A link change request failed with some changes committed already. Interface t may have been left with an inconsistent configuration, please check. [ 1616.993994][ T5130] bond16: (slave bridge19): failed to get link speed/duplex [ 1617.168528][ T1797] bond16: (slave bridge19): failed to get link speed/duplex [ 1617.363645][ T5127] bond16: (slave bridge19): failed to get link speed/duplex [ 1617.371987][ T4791] bridge0: port 1(bridge_slave_0) entered blocking state [ 1617.385226][ T4791] bridge0: port 1(bridge_slave_0) entered disabled state [ 1617.394956][ T4791] bridge_slave_0: entered allmulticast mode [ 1617.405188][ T4791] bridge_slave_0: entered promiscuous mode [ 1617.468430][ T5286] 8021q: adding VLAN 0 to HW filter on device eth5 [ 1617.502894][ T4791] bridge0: port 2(bridge_slave_1) entered blocking state [ 1617.532966][ T4791] bridge0: port 2(bridge_slave_1) entered disabled state [ 1617.548136][ T4791] bridge_slave_1: entered allmulticast mode [ 1617.560043][ T4791] bridge_slave_1: entered promiscuous mode [ 1617.673690][ T4791] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1617.743422][ T4791] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1618.222976][ T4791] team0: Port device team_slave_0 added [ 1618.283823][ T4791] team0: Port device team_slave_1 added [ 1618.498430][ T5052] netlink: 8 bytes leftover after parsing attributes in process `syz.5.22667'. [ 1618.707207][ T4791] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1618.740532][ T4791] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1618.862669][ T4791] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1618.993245][ T4791] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1619.001533][ T4791] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1619.037708][ T4791] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1619.121943][ T5065] mac80211_hwsim hwsim58 syzkaller0: left promiscuous mode [ 1619.137407][ T5065] mac80211_hwsim hwsim58 syzkaller0: left allmulticast mode [ 1619.480488][ T5129] bond16: (slave bridge19): failed to get link speed/duplex [ 1619.537537][ T4791] hsr_slave_0: entered promiscuous mode [ 1619.562246][ T4791] hsr_slave_1: entered promiscuous mode [ 1619.592104][ T4791] debugfs: 'hsr0' already exists in 'hsr' [ 1619.627767][ T4791] Cannot create hsr debugfs directory [ 1624.685482][ T5286] 8021q: adding VLAN 0 to HW filter on device eth6 [ 1624.771308][ T5131] bond16: (slave bridge19): failed to get link speed/duplex [ 1624.932834][ T5130] bond16: (slave bridge19): failed to get link speed/duplex [ 1625.110554][ T5127] bond16: (slave bridge19): failed to get link speed/duplex [ 1625.310247][ T5131] bond16: (slave bridge19): failed to get link speed/duplex [ 1625.543332][T32741] veth0_macvtap: left promiscuous mode [ 1625.811340][ T5179] netlink: 'syz.6.22708': attribute type 2 has an invalid length. [ 1625.821563][ T5179] netlink: 'syz.6.22708': attribute type 1 has an invalid length. [ 1625.979174][ T30] INFO: task syz.0.21334:32753 blocked for more than 143 seconds. [ 1625.988930][ T30] Not tainted syzkaller #0 [ 1626.002375][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1626.015981][ T30] task:syz.0.21334 state:D stack:26712 pid:32753 tgid:32752 ppid:5621 task_flags:0x400140 flags:0x00080002 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1626.028658][ T30] Call Trace: [ 1626.042224][ T30] [ 1626.052300][ T30] __schedule+0x17b4/0x5680 [ 1626.067600][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 1626.084156][ T30] ? __pfx___schedule+0x10/0x10 [ 1626.099253][ T30] ? schedule+0x90/0x360 [ 1626.114191][ T30] schedule+0x164/0x360 [ 1626.143559][ T30] schedule_preempt_disabled+0x13/0x30 [ 1626.177215][ T30] __mutex_lock+0x7f7/0x1550 [ 1626.208516][ T30] ? __mutex_lock+0x608/0x1550 [ 1626.240137][ T30] ? nfsd_nl_version_get_doit+0x17c/0xc40 [ 1626.257111][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 1626.277081][ T30] ? __nlmsg_put+0xef/0x1b0 [ 1626.305450][ T30] ? genlmsg_put+0x137/0x2e0 [ 1626.319657][ T30] nfsd_nl_version_get_doit+0x17c/0xc40 [ 1626.330297][ T30] ? __nla_parse+0x40/0x60 [ 1626.339929][ T30] ? __pfx_nfsd_nl_version_get_doit+0x10/0x10 [ 1626.355029][ T30] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 1626.361828][ T30] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 1626.368256][ T30] genl_family_rcv_msg_doit+0x22a/0x330 [ 1626.377507][ T30] ? __asan_memcpy+0x40/0x70 [ 1626.382761][ T30] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1626.388960][ T30] genl_rcv_msg+0x61c/0x7a0 [ 1626.394875][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1626.401527][ T30] ? __pfx_nfsd_nl_version_get_doit+0x10/0x10 [ 1626.407673][ T30] ? __pfx_ref_tracker_free+0x10/0x10 [ 1626.414018][ T30] netlink_rcv_skb+0x232/0x4b0 [ 1626.416270][T32741] pim6reg527 (unregistering): left allmulticast mode [ 1626.418841][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1626.458164][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1626.466903][ T30] ? down_read+0x270/0x2e0 [ 1626.473179][ T30] ? genl_rcv+0xd/0x40 [ 1626.478861][ T30] genl_rcv+0x28/0x40 [ 1626.484786][ T30] netlink_unicast+0x75c/0x8e0 [ 1626.491378][ T30] netlink_sendmsg+0x813/0xb40 [ 1626.496539][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1626.502852][ T30] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1626.507905][ T30] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1626.513806][ T30] ____sys_sendmsg+0x972/0x9f0 [ 1626.518661][ T30] ? __might_fault+0xaf/0x130 [ 1626.523878][ T30] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1626.530525][ T30] ? import_iovec+0x73/0xa0 [ 1626.535177][ T30] ___sys_sendmsg+0x2a5/0x360 [ 1626.546720][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 1626.552287][ T30] ? __pfx____sys_sendmsg+0x10/0x10 [ 1626.557633][ T30] ? futex_wake+0x4ac/0x580 [ 1626.563814][ T30] ? __fget_files+0x2a/0x420 [ 1626.568470][ T30] ? __fget_files+0x3a0/0x420 [ 1626.574470][ T30] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1626.580857][ T30] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1626.586378][ T30] ? rcu_is_watching+0x15/0xb0 [ 1626.591396][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1626.597502][ T30] do_syscall_64+0x15f/0xf80 [ 1626.602611][ T30] ? trace_irq_disable+0x3b/0x140 [ 1626.607748][ T30] ? clear_bhb_loop+0x40/0x90 [ 1626.613310][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1626.619333][ T30] RIP: 0033:0x7f8430b9cdd9 [ 1626.623850][ T30] RSP: 002b:00007f8431aa1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1626.632887][ T30] RAX: ffffffffffffffda RBX: 00007f8430e15fa0 RCX: 00007f8430b9cdd9 [ 1626.640962][ T30] RDX: 0000000020000000 RSI: 0000200000000140 RDI: 0000000000000007 [ 1626.648938][ T30] RBP: 00007f8430c32d69 R08: 0000000000000000 R09: 0000000000000000 [ 1626.656983][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1626.665771][ T30] R13: 00007f8430e16038 R14: 00007f8430e15fa0 R15: 00007ffefd736608 [ 1626.674093][ T30] [ 1626.677313][ T30] [ 1626.677313][ T30] Showing all locks held in the system: [ 1626.693543][ T30] 1 lock held by khungtaskd/30: [ 1626.698712][ T30] #0: ffffffff8e95cd60 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1626.727142][ T30] 1 lock held by dhcpcd/5286: [ 1626.739412][ T30] #0: ffffffff8fdcf000 (rtnl_mutex){+.+.}-{4:4}, at: devinet_ioctl+0x32b/0x1b30 [ 1626.751511][ T30] 2 locks held by getty/5378: [ 1626.756216][ T30] #0: ffff888036ebc0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1626.766492][ T30] #1: ffffc9000322b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13a0 [ 1626.780989][ T30] 3 locks held by kworker/0:3/5733: [ 1626.786977][ T30] #0: ffff88813fe43140 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 1626.803901][ T30] #1: ffffc90004a87c40 (rx_mode_work){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 1626.815123][ T30] #2: ffffffff8fdcf000 (rtnl_mutex){+.+.}-{4:4}, at: netdev_rx_mode_work+0x19/0x3c0 [ 1626.825167][ T30] 3 locks held by kworker/u8:16/1797: [ 1626.831214][ T30] #0: ffff88801ae84140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 1626.843923][ T30] #1: ffffc900068a7c40 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 1626.856806][ T30] #2: ffffffff8fdcf000 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 1626.866480][ T30] 2 locks held by syz.4.20630/30228: [ 1626.871900][ T30] #0: ffffffff8fe3e7e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1626.880192][ T30] #1: ffffffff8ec8aba0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x141/0x1670 [ 1626.891741][ T30] 5 locks held by kworker/u8:6/32741: [ 1626.897180][ T30] #0: ffff88801be8e140 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 1626.908364][ T30] #1: ffffc9001cc77c40 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 1626.921232][ T30] #2: ffffffff8fdc0328 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf4/0x800 [ 1626.931027][ T30] #3: ffffffff8fdcf000 (rtnl_mutex){+.+.}-{4:4}, at: default_device_exit_batch+0xe5/0x9e0 [ 1626.941452][ T30] #4: ffffffff8e963068 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2d0/0x770 [ 1626.952612][ T30] 2 locks held by syz.0.21334/32753: [ 1626.957926][ T30] #0: ffffffff8fe3e7e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1626.966721][ T30] #1: ffffffff8ec8aba0 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_version_get_doit+0x17c/0xc40 [ 1626.977170][ T30] 7 locks held by syz-executor/4791: [ 1626.982855][ T30] #0: ffff88803607a410 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x227/0xb90 [ 1626.992581][ T30] #1: ffff8880b3069080 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1de/0x540 [ 1627.002560][ T30] #2: ffff88802a0353c8 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x231/0x540 [ 1627.013364][ T30] #3: ffffffff8f64ea20 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd7/0x370 [ 1627.023762][ T30] #4: ffff888069c3d128 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb6/0x870 [ 1627.034474][ T30] #5: ffff888069c3c258 (&devlink->lock_key#3){+.+.}-{4:4}, at: nsim_drv_remove+0x50/0x170 [ 1627.044850][ T30] #6: ffffffff8fdcf000 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_net_dev_lock+0x257/0x2f0 [ 1627.054421][ T30] 2 locks held by syz.2.22703/5163: [ 1627.059752][ T30] #0: ffffffff8fe3e7e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1627.067972][ T30] #1: ffffffff8fdcf000 (rtnl_mutex){+.+.}-{4:4}, at: nl80211_pre_doit+0x5e/0x8a0 [ 1627.077519][ T30] 2 locks held by syz.5.22705/5167: [ 1627.082883][ T30] #0: ffffffff8fe3e7e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1627.092056][ T30] #1: ffffffff8fdcf000 (rtnl_mutex){+.+.}-{4:4}, at: nl80211_pre_doit+0x5e/0x8a0 [ 1627.101727][ T30] 1 lock held by syz.3.22707/5173: [ 1627.106847][ T30] #0: ffffffff8fdcf000 (rtnl_mutex){+.+.}-{4:4}, at: rtnetlink_rcv_msg+0x722/0xbe0 [ 1627.116471][ T30] 1 lock held by syz.6.22709/5182: [ 1627.121766][ T30] #0: ffffffff8fdcf000 (rtnl_mutex){+.+.}-{4:4}, at: __tun_chr_ioctl+0x3bc/0x1e10 [ 1627.131409][ T30] 1 lock held by syz.6.22709/5183: [ 1627.136526][ T30] #0: ffffffff8fdcf000 (rtnl_mutex){+.+.}-{4:4}, at: __tun_chr_ioctl+0x3bc/0x1e10 [ 1627.145967][ T30] 1 lock held by syz.6.22709/5186: [ 1627.151114][ T30] #0: ffffffff8fdcf000 (rtnl_mutex){+.+.}-{4:4}, at: __tun_chr_ioctl+0x3bc/0x1e10 [ 1627.160794][ T30] [ 1627.163141][ T30] ============================================= [ 1627.163141][ T30] [ 1627.171644][ T30] NMI backtrace for cpu 0 [ 1627.171664][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1627.171682][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1627.171692][ T30] Call Trace: [ 1627.171701][ T30] [ 1627.171712][ T30] dump_stack_lvl+0xe8/0x150 [ 1627.171737][ T30] nmi_cpu_backtrace+0x274/0x2d0 [ 1627.171761][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1627.171781][ T30] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 1627.171807][ T30] sys_info+0x135/0x170 [ 1627.171827][ T30] watchdog+0xfd3/0x1030 [ 1627.171855][ T30] ? watchdog+0x1c9/0x1030 [ 1627.171882][ T30] kthread+0x388/0x470 [ 1627.171903][ T30] ? __pfx_watchdog+0x10/0x10 [ 1627.171922][ T30] ? __pfx_kthread+0x10/0x10 [ 1627.171942][ T30] ret_from_fork+0x514/0xb70 [ 1627.171963][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 1627.171979][ T30] ? __switch_to+0xc79/0x1410 [ 1627.172004][ T30] ? __pfx_kthread+0x10/0x10 [ 1627.172024][ T30] ret_from_fork_asm+0x1a/0x30 [ 1627.172066][ T30] [ 1627.172072][ T30] Sending NMI from CPU 0 to CPUs 1: [ 1627.284783][ C1] NMI backtrace for cpu 1 [ 1627.284801][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) [ 1627.284826][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1627.284836][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 1627.284860][ C1] Code: 3b 7e 02 e9 93 f6 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 13 21 21 00 fb f4 cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 1627.284875][ C1] RSP: 0018:ffffc90000197e20 EFLAGS: 00000246 [ 1627.284890][ C1] RAX: 000000000035432b RBX: ffffffff819a815a RCX: 0000000080000001 [ 1627.284902][ C1] RDX: 0000000000000001 RSI: ffffffff8dfa86e9 RDI: ffffffff8c28abe0 [ 1627.284913][ C1] RBP: ffffc90000197f10 R08: ffff8880b87339db R09: 1ffff110170e673b [ 1627.284924][ C1] R10: dffffc0000000000 R11: ffffed10170e673c R12: 0000000000000001 [ 1627.284935][ C1] R13: 1ffff11003b5b000 R14: 0000000000000001 R15: 1ffff11003b5b000 [ 1627.284946][ C1] FS: 0000000000000000(0000) GS:ffff888125390000(0000) knlGS:0000000000000000 [ 1627.284959][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1627.284970][ C1] CR2: 000055851ec11138 CR3: 0000000020b74000 CR4: 00000000003526f0 [ 1627.284984][ C1] Call Trace: [ 1627.284992][ C1] [ 1627.284998][ C1] default_idle+0x9/0x20 [ 1627.285019][ C1] default_idle_call+0x72/0xb0 [ 1627.285041][ C1] do_idle+0x36a/0x5f0 [ 1627.285061][ C1] ? __pfx_do_idle+0x10/0x10 [ 1627.285084][ C1] cpu_startup_entry+0x43/0x60 [ 1627.285102][ C1] start_secondary+0x101/0x110 [ 1627.285117][ C1] common_startup_64+0x13e/0x147 [ 1627.285147][ C1] [ 1627.453011][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 1627.459912][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1627.469027][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1627.479075][ T30] Call Trace: [ 1627.482347][ T30] [ 1627.485267][ T30] vpanic+0x56c/0xa60 [ 1627.489246][ T30] ? __pfx___schedule+0x10/0x10 [ 1627.494104][ T30] ? __pfx_vpanic+0x10/0x10 [ 1627.498596][ T30] ? nmi_trigger_cpumask_backtrace+0x1f4/0x300 [ 1627.504767][ T30] panic+0xc5/0xd0 [ 1627.508490][ T30] ? __pfx_panic+0x10/0x10 [ 1627.512903][ T30] ? preempt_schedule_thunk+0x16/0x30 [ 1627.518264][ T30] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 1627.524421][ T30] watchdog+0x102c/0x1030 [ 1627.528751][ T30] ? watchdog+0x1c9/0x1030 [ 1627.533189][ T30] kthread+0x388/0x470 [ 1627.537266][ T30] ? __pfx_watchdog+0x10/0x10 [ 1627.541960][ T30] ? __pfx_kthread+0x10/0x10 [ 1627.546543][ T30] ret_from_fork+0x514/0xb70 [ 1627.551123][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 1627.556221][ T30] ? __switch_to+0xc79/0x1410 [ 1627.560890][ T30] ? __pfx_kthread+0x10/0x10 [ 1627.565472][ T30] ret_from_fork_asm+0x1a/0x30 [ 1627.570246][ T30] [ 1627.573893][ T30] Kernel Offset: disabled [ 1627.578223][ T30] Rebooting in 86400 seconds..