last executing test programs: 2.569378438s ago: executing program 1 (id=4721): syz_emit_ethernet(0x5e, &(0x7f0000000440)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "12318c", 0x28, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @mcast2, @empty}}}}}}, 0x0) (async) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) (async) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000e500000001"], 0x48) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x6, &(0x7f0000000040)=@framed={{}, [@map_val={0x18, 0x0, 0x2, 0x0, r1}, @ldst={0x3, 0x0, 0x3, 0x0, 0x0, 0xa0}]}, &(0x7f0000000180)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) (async) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000002c0)=0x2, 0xffffffffffffffc5) (async) getsockopt$inet6_tcp_int(r0, 0x6, 0x24, &(0x7f00000003c0), &(0x7f0000000400)=0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) (async) sendto$inet6(r0, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56) (async) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000001, 0x12, r0, 0x604ae000) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000001380)=""/4080, 0xfffffffffffffdcc, 0x0, 0x0, 0xffffffffffffff87}, &(0x7f0000000000)=0x40) (async) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000340)={&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0}, &(0x7f0000000380)=0x40) (async) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f00000000c0)={0x1ff, 0x3, 0x7, 0x4, 0xf}, 0x14) (async) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x20000000ec071, 0xffffffffffffffff, 0x4000) (async) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r2, 0x89fa, &(0x7f0000000300)={'sit0\x00', &(0x7f0000000280)={@rand_addr=' \x01\x00', @rand_addr=0x64010102, 0x16, 0x1d}}) r3 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$int_in(r3, 0x5452, &(0x7f0000000140)=0x1) (async) ppoll(&(0x7f0000000400)=[{r3}], 0x1, &(0x7f00000006c0), 0x0, 0x0) (async) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000000100)=""/13, &(0x7f0000000180)=0xd) 2.403738955s ago: executing program 1 (id=4723): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000003c0)={0x38, r1, 0x218, 0xfffffffe, 0x0, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x4f4}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0xfb2e77a8993c191b}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8}]}, 0x38}}, 0x20000040) (async) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000ff0700000000000000000000850000002a00000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r2}, 0xc) (async) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$sock(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000008980)=[{&(0x7f00000088c0)="d99c89760bf083ebb5aac9b4b977", 0xe}, {&(0x7f0000000040)="3fab87327f6a2847", 0x8}], 0x2}, 0x24000040) (async) bpf$MAP_CREATE(0x600000000000000, &(0x7f00000004c0)=@base={0xf, 0x4, 0x4, 0x20002, 0x0, 0x1, 0xfffffff9, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x204}, 0x50) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_CMP_DATA={0xc, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, "ac"}]}, @NFTA_CMP_SREG={0x8}, @NFTA_CMP_OP={0x8, 0x2, 0x1, 0x0, 0x5}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xcc}, 0x1, 0x0, 0x0, 0x4}, 0x40050) (async) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) (async) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) mmap(&(0x7f0000007000/0x3000)=nil, 0x3000, 0x1000001, 0x11, r6, 0xffffffffffffc000) r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={0x10, 0x1418, 0x1, 0x2, 0x3}, 0x10}, 0x1, 0x0, 0x0, 0x8}, 0x0) (async) recvfrom(r5, &(0x7f0000000540)=""/246, 0xf6, 0x10040, &(0x7f0000000840)=@l2tp6={0xa, 0x0, 0x4, @mcast2, 0x4, 0x3}, 0x80) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x48, 0x10, 0x439, 0x70bd40, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x9801}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x71516}, @IFLA_GROUP={0x8, 0x1b, 0x1c69154a}]}, 0x48}, 0x1, 0x0, 0x0, 0x24000007}, 0x0) sendmsg$inet(r7, &(0x7f0000000e40)={&(0x7f0000000380)={0x2, 0x4e24, @broadcast}, 0x10, &(0x7f0000000cc0)=[{&(0x7f00000008c0)="c496e919f3fb31529a415724c747e9c4e54b0d4ad5b890ae2daad3e382cab0fbb8053a02a78efbdfd94fa38ac5ea6cce224c77d0941c86c5285e3002e04264a9a08c31897fec09fc3a0ee97117eec6b9c90652c732d64fe53339ef3c092752be95be6bf4b6fdf2bc27dc55a85245b1ef79c5fee97537f235d18b0a7e366d03519d609082d775f21c0c70fcc2adde6800fee9e8cd619501d11cf5ea56ff65642cd92890df6dfec7153f2d68fbd042224a937436aba4395bb83390", 0xba}, {&(0x7f0000000980)="a6aef4fceda49fd34145449091e97917b121e4d1903b3ff73c996b6191fe152f20a839a21ac807", 0x27}, {&(0x7f00000009c0)="4ac951b1320ed37304add73bfa6781ae9dc98a987c78c817974bae3158017785bd8a14ba25849b526051181befa1b10420f7f500ec2961a526876113b3f43d78e7ac40a1d6180ece31b8745469e4acfe57b1e7f8405a843cc82836078a23f2b863a0b449441be7b550f41cfe81211f251de091ab13d3ea8b060452", 0x7b}, {&(0x7f0000000a40)="8c9e4a8ef6f5120dfe241fe6a76d5ba0cddc84217c68bf7c307a74cbacae38603b3602ce5d6321ab020061f0153f4c929f30696b8fc50f96558abd3ab08fd38a468b4e95628df6f1dc6d3996c80f4139116fee785d61e2e259c3dabc79f2b6d95835eb9c55b1b62bba", 0x69}, {&(0x7f0000000ac0)="8c7772d012efae37b4fdaaa94219e7aab0acac8c7e0ba85d3e3cf38934721713a7ab6bd32c4826476533951ae0ec8e3806e8071f77e3a9ecdd7a8760dd087604766df567a060e1311ac1a0cad3d56357ab42e8ab83cddbd64b3c8268705d69016ac368ccdaa97fb71588a49c8b3e2c00e8a23e1fb6ea747be2e5f764a625bf25577806022bf6b96e91a1077170a17ae7dd35f17d5371c05e38b5735abdae7151129d57a6f93accf561da78dcbdfadd2420", 0xb1}, {&(0x7f0000000b80)="9cacb6d3c4062daae9fe9dc1427c4354e7005e60fe5f43630faca1ed219fbe399b9c6b775500dcfe5c0f53c38d78c1aad92bbf88849f961e449b02f702bdc63f2bcd96cacd06b32793493da0bb6268eecc8d0676a7d3e7242f0b2770420e4fe7c22ffc1e3377aa89114318d0937d0e418e4f289e48953c59ed614b40a38619699b418854b06104d83d2b80036fb18c417a30173a4668a12d0fd20463a8154037ace4f0721b93d851ebb7a7f492eb3a2544ee2f6dd4606ba210aa0084c9725bb0482572d1694896770f8feb043ce209bfce53b3fe145f5dbf7b3e716e57af797d87e981ce28b625a3c4d1", 0xea}, {&(0x7f0000000c80)="ccd7", 0x2}], 0x7, &(0x7f0000000d40)=[@ip_retopts={{0x98, 0x0, 0x7, {[@ra={0x94, 0x4, 0x1}, @cipso={0x86, 0x12, 0xffffffffffffffff, [{0x0, 0xc, "b351788a8ec1e9f45e9d"}]}, @rr={0x7, 0xf, 0xd1, [@local, @multicast1, @loopback]}, @rr={0x7, 0x13, 0xb6, [@multicast1, @local, @dev={0xac, 0x14, 0x14, 0x3e}, @broadcast]}, @ssrr={0x89, 0x1b, 0x4c, [@initdev={0xac, 0x1e, 0x0, 0x0}, @local, @empty, @dev={0xac, 0x14, 0x14, 0x13}, @loopback, @multicast1]}, @lsrr={0x83, 0x7, 0x3b, [@empty]}, @rr={0x7, 0x27, 0x96, [@local, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @remote, @multicast2, @private=0xa010101, @rand_addr=0x64010102, @broadcast]}, @timestamp_prespec={0x44, 0x4, 0xcd, 0x3, 0x6}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x7}}, @ip_ttl={{0x14, 0x0, 0x2, 0x80000000}}], 0xc8}, 0x40000) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x15, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020692500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000650000000600000085100000010000009500000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0xe}, 0x94) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)={0x2, 0x4, 0x8, 0x1, 0x80, r6, 0x2, '\x00', r10, 0xffffffffffffffff, 0x2, 0x4, 0x3}, 0x50) 2.335399249s ago: executing program 0 (id=4725): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x57) 2.290820908s ago: executing program 1 (id=4727): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$inet_smc(0x2b, 0x1, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a050000000000000000000100fffe0900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000b00070066696c74657200002c000000060a010400000000000000000100000008000b4000007a3000000000140000001100010000000000000000000000000a00"/160], 0xa0}, 0x1, 0x0, 0x0, 0x4}, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000440)={'filter\x00', 0xb001, 0xff03, 0x3f0, 0x0, 0xe8, 0x0, 0x308, 0x308, 0x308, 0x7fffffe, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0x1f8}}, {{@uncond, 0xc0, 0x110, 0x0, {0x0, 0x1e03}}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @remote, @loopback, 0x2}}}, {{@arp={@private=0xa010101, @loopback, 0xffffffff, 0xffffffff, 0x6, 0x2, {@empty, {[0xff, 0x0, 0x0, 0xff, 0xff]}}, {@mac=@local, {[0x0, 0x0, 0xff, 0xff, 0xff, 0xff]}}, 0x5, 0x58, 0x3, 0x3, 0x5b, 0x8, 'xfrm0\x00', 'erspan0\x00', {0x101}, {0xff}, 0x0, 0x56cdc66a52ca9006}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@random="6a75dec8fcaf", @mac=@local, @loopback, @multicast1, 0x4, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) shutdown(r3, 0x0) listen(r3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1200000004000000040000001200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="3aac00000000000000000e62d0e28c5fa66ba31738ab3c616fd63f742524cdebab3a42e928645bd74a1ef7a96facbbc8dcdaa46c73d0d8c8edd2f5bb3583f1e252e29193debebb7da08596ab013a3f404d21a19dd4d20a"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000a80)={r4, &(0x7f0000000940), &(0x7f0000000a40)=@tcp6=r3}, 0x20) recvmmsg(r3, &(0x7f0000001b00)=[{{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000000680)=""/236, 0xf1}], 0x1, 0x0, 0xffffffffffffffea}, 0xc743}], 0x2, 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) getsockname$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="44000000100037040900"/20, @ANYRES32=r5, @ANYBLOB="83000500012c0000240012800b00010067726574617000001400028008000700ac1414aa08000100", @ANYRES32=r5, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x40850) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000018c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000080)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @empty, @multicast1}}}], 0x20}}, {{&(0x7f0000000000)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000700)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @local, @local}}}], 0x20}}], 0x5e, 0x4880) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000a00)={'gretap0\x00', &(0x7f0000000880)={'gre0\x00', 0x0, 0x40, 0x20, 0xfffffff9, 0xf7, {{0x4c, 0x4, 0x3, 0x5, 0x130, 0x65, 0x0, 0x2, 0x4, 0x0, @rand_addr=0x64010101, @private=0xa010101, {[@generic={0x83, 0x2}, @ssrr={0x89, 0xf, 0x66, [@local, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @timestamp_addr={0x44, 0x44, 0x9d, 0x1, 0x3, [{@remote, 0xc9}, {@loopback, 0x3}, {@empty, 0x4}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1}, {@local, 0xffc}, {@remote, 0x8}, {@remote, 0x1}, {@dev={0xac, 0x14, 0x14, 0x2e}, 0x7f}]}, @timestamp_prespec={0x44, 0x54, 0xa1, 0x3, 0x6, [{@private=0xa010102, 0x6}, {@multicast1, 0x7}, {@empty, 0xd}, {@multicast1, 0x8}, {@dev={0xac, 0x14, 0x14, 0x41}, 0xffffffe3}, {@rand_addr=0x9, 0xf}, {@broadcast, 0xc20}, {@private=0xa010101, 0x6}, {@multicast1, 0x5}, {@empty, 0x5}]}, @generic={0x94, 0x2}, @rr={0x7, 0x13, 0xa1, [@private=0xa010101, @private=0xa010102, @loopback, @multicast2]}, @ssrr={0x89, 0xb, 0xcc, [@broadcast, @local]}, @timestamp_addr={0x44, 0x2c, 0x53, 0x1, 0xb, [{@private=0xa010101, 0x9}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x5}, {@dev={0xac, 0x14, 0x14, 0x14}, 0x3}, {@private=0xa010101, 0x6}, {@local}]}, @lsrr={0x83, 0x27, 0xd5, [@dev={0xac, 0x14, 0x14, 0x2b}, @empty, @multicast2, @empty, @multicast1, @remote, @multicast2, @rand_addr=0x64010101, @loopback]}]}}}}}) r7 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r7) getsockname$packet(r7, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r8, 0x504c3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x8, 0x2, 0x0, 0x1, [@IFLA_IPTUN_COLLECT_METADATA={0x4}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000c010}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d80)={0xffffffffffffffff, 0xe0, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000ac0)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000b00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000b40), 0x0, 0x43, &(0x7f0000000380)=[{}, {}, {}, {}], 0x8, 0x10, &(0x7f0000000bc0), &(0x7f0000000c00), 0x61, 0xe2, 0x8, 0x8, &(0x7f0000000340)}}, 0x10) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000dc0)={'wg2\x00', 0x0}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000e80)={r4, 0x58, &(0x7f0000000e00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r12 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r14 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r14, &(0x7f0000000140)="bad330fbc9b5544972e7a5ea0756", 0x36, 0x40, &(0x7f00000001c0)={0x11, 0x1a, r13, 0x1, 0xd8, 0x6, @random="98c8ca7122df"}, 0x14) sendto$packet(r14, &(0x7f0000000480)="c1858aec1d0a21756f66b4805f3a", 0xe, 0x40000, &(0x7f0000000240)={0x11, 0xf8, r13, 0x1, 0x5, 0x6, @random="24f51e8e0a5a"}, 0x14) sendmsg$ETHTOOL_MSG_LINKMODES_GET(0xffffffffffffffff, &(0x7f00000010c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001080)={&(0x7f0000001100)=ANY=[@ANYBLOB="88010000", @ANYRES16=0x0, @ANYBLOB="020027bd7000fcdbdf25040000009000018014000200697036746e6c300000000000000000001400020069703667726530000000000000000000080003000200000014000200697036746e6c30000000000000000000080003000000000008000100", @ANYRES32=r5, @ANYBLOB="08000100", @ANYRES32=r6, @ANYBLOB="08000300020000001400020076657468315f746f5f687372000000001400020076657468315f746f5f7465616d0000002000018008000300712855b81400020076657468305f766972745f7769666900440001801400020073797a6b616c6c65723100000000000008000300010000000800030003000000140002006772657461703000000000000000000008000100", @ANYRES32=r8, @ANYBLOB="5c00018008000100", @ANYRES32=r9, @ANYBLOB="0800030001000000140002006970365f7674693000000000000000001400020070696d3672656731000000000000000008000100", @ANYRES32=r10, @ANYBLOB="08000100", @ANYRES32=r11, @ANYBLOB="08000100", @ANYRES32=r13, @ANYBLOB="08000300000000002000018014000200f3697430000000000000000000000000080027c2af1c88da03000300000004000180"], 0x188}, 0x1, 0x0, 0x0, 0x4000}, 0x80) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000280)={0x0, @in={{0x2, 0x4e23, @multicast1}}, 0x3, 0xeffc}, &(0x7f0000000080)=0x90) 2.221408234s ago: executing program 0 (id=4729): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x131080, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x4}}}, {0x14, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0x4}}}]}]}], {0x14}}, 0xc8}}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000580)="d8000000140081044e81f782db44b9040a1d08020a000000040000a118000200ff11000000000e1208000f0100810401a80016ea1f0008400304000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000080)=0x30) r3 = socket$netlink(0x10, 0x3, 0xa) sendmsg$DEVLINK_CMD_RATE_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0xffffffffffffff60, 0x0, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@DEVLINK_ATTR_RATE_NODE_NAME]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) r4 = socket(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r4, 0x89f8, &(0x7f0000000180)={'ip_vti0\x00', &(0x7f0000000100)={'gre0\x00', 0x0, 0x7800, 0x7800, 0x9, 0x585e, {{0x5, 0x4, 0x3, 0x0, 0x14, 0x67, 0x0, 0x4, 0x17, 0x0, @rand_addr=0x64010101, @private=0xa010101}}}}) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r0}, 0x8) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1, 0x4, 0x404, 0x1}, 0x50) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x3, 0x4, 0x801, 0x1, r5, 0x15b4}, 0x50) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, r6, 0x40, '\x00', 0x0, 0x0, 0x0, 0x0, 0x10}, 0x50) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000200)={0x2, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xa, 0xf, &(0x7f0000000140)=ANY=[@ANYRES64=r0, @ANYRES32=r0], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) 2.071468893s ago: executing program 0 (id=4731): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x100, 0xe}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0) socket$unix(0x1, 0x1, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, 0x0, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000440)=@newtfilter={0x90, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r8, {0xffff, 0x5}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x5c, 0x2, [@TCA_MATCHALL_ACT={0x58, 0x2, [@m_ife={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x4, 0xa5bf4861, 0x6, 0x3ff, 0x10001}, 0x1}}, @TCA_IFE_METALST={0xc, 0x6, [@IFE_META_PRIO={0x8, 0x3, @val=0x2}]}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x90}}, 0x800) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r11 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r13 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r13, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0x300, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r12, {0x0, 0xffff}, {0xffff, 0xfff1}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x49, 0x2, {{0x1, [0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc], 0x0, [0x1, 0x2, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000080) r14 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r16 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r16, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r15, {0x3, 0xd}, {}, {0x3, 0xfff1}}}, 0x24}}, 0x40004) recvmmsg(r16, &(0x7f0000001480)=[{{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000540)=""/189, 0xbd}, {&(0x7f0000001ac0)=""/4079, 0xfef}], 0x2}, 0x5d}], 0x1, 0x10022, 0x0) close(r9) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) 1.936477621s ago: executing program 3 (id=4732): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x38, 0x10, 0xc362e63b3f31ba5f, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20080, 0x80e1}, [@IFLA_GROUP={0x8}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0xdb5b}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x28da}]}, 0x38}}, 0x800) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x20002, 0x0) 1.90887204s ago: executing program 1 (id=4735): ioctl$BTRFS_IOC_DEFRAG_RANGE(0xffffffffffffffff, 0x40309410, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000340)={'wlan0\x00', &(0x7f0000000700)=@ethtool_sset_info={0x37, 0xfc, 0xfffffffffffffffa}}) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="34010000170001000000000000000000640101020000000000000000000000000000000097581e58e0000002002000000000000000000000fc020000000000000000000000000000fe8000000000000000000000000000aa0000004000"/104, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="e00000020000000000000000000000000a010100000000000000000000000000000000000201000302"], 0x134}}, 0x4000) 1.807869642s ago: executing program 2 (id=4737): ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000040)={'syztnl2\x00', &(0x7f0000000140)={'syztnl0\x00', 0x0, 0x0, 0x0, 0xf9, 0x1, 0x50, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @loopback={0x0, 0xffff888101827518}, 0x80f, 0x20, 0x1}}) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000640)=ANY=[@ANYBLOB="180000000000000000000000000a000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000280)={r0, 0x124, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x8, &(0x7f0000001e40)}}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000400)={@cgroup, 0x32, 0x0, 0x5, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f0000000340)=[0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0], 0x0}, 0x40) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000020000000000000002000084ffffffff000000000300000000000000000000000200000000000000000000000000000a03000000000000000000001302"], 0x0, 0x56}, 0x20) ioctl$XFS_IOC_PATH_TO_HANDLE(0xffffffffffffffff, 0xc0385869, &(0x7f0000000580)={0xffffffffffffffff, &(0x7f0000000480)='!$\x00', 0x180000, &(0x7f00000004c0)={@align=0x9, {0x4, 0x3, 0x7, 0x6}}, 0x0, &(0x7f0000000500), &(0x7f0000000540)=0x9}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r3, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000440)={@cgroup=r2, r0, 0xd, 0x8, 0x0, @void, @value=r3, @void, @void, r1}, 0x20) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) r5 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r5, &(0x7f0000002680)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000040)="18", 0x1}], 0x1}}], 0x1, 0x0) shutdown(r5, 0x1) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r5, 0x84, 0x72, &(0x7f0000000240)={0x0, 0xffffffff, 0x20}, 0xc) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000700)={{}, &(0x7f0000000680), &(0x7f00000006c0)=r3}, 0x20) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c0000001d00070f00000000000000000700", @ANYRES32, @ANYBLOB="00005200060005000000000008"], 0x2c}}, 0x0) r7 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r7, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) r8 = socket$inet_sctp(0x2, 0x5, 0x84) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r9, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) r11 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newae={0x48, 0x1e, 0x1, 0x70bd2b, 0x25dfdbfe, {{@in=@broadcast, 0x4d3, 0x2, 0xff}, @in6=@mcast1, 0x200, 0x3500}, [@etimer_thresh={0x8, 0xc, 0x3}]}, 0x48}}, 0x4050) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r8, 0x84, 0x73, &(0x7f00000000c0)={r10, 0x7, 0x10, 0x0, 0x8}, &(0x7f0000000100)=0x18) setsockopt$inet_sctp6_SCTP_NODELAY(r2, 0x84, 0x3, &(0x7f00000005c0)=0x1, 0x4) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r7, 0x84, 0x75, &(0x7f0000000100)={r10, 0x100}, 0x8) ioctl$sock_SIOCETHTOOL(r4, 0x89f1, &(0x7f00000002c0)={'ip6_vti0\x00', &(0x7f0000000140)=@ethtool_sset_info={0x37, 0x9, 0x10000}}) 1.779961767s ago: executing program 0 (id=4738): writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}, {0x0}, {&(0x7f0000001480)}], 0x3) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0x40305839, &(0x7f0000000000)=ANY=[@ANYBLOB="00000000000800000000000000000000000000000002"]) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e21, @local}}}, &(0x7f0000000040)=0x84) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x9}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r2, &(0x7f0000000480)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x80020}, 0x1c, &(0x7f0000000300)=[{&(0x7f00000034c0)='\x00', 0x1}], 0x1}}], 0x1, 0x34000811) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f00000009c0)=ANY=[@ANYBLOB="12e01b3989dd", @ANYRES32=r1], 0x1000f) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000080000000000000064ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={r3, 0xe0, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000001440)=[0x0], 0x0, 0x0, 0x99, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4f, 0x8, 0x0, 0xfffffffffffffffd}}, 0x10) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = socket$tipc(0x1e, 0x5, 0x0) ioctl$EXT4_IOC_GETFSUUID(r5, 0x8008662c, &(0x7f0000000180)) getsockopt$TIPC_DEST_DROPPABLE(r5, 0x10f, 0x81, 0xffffffffffffffff, &(0x7f0000000700)=0x12) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r4, 0x6, 0x23, &(0x7f0000000040), &(0x7f00000001c0)=0x18) r6 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r6, &(0x7f0000001640)={&(0x7f00000013c0)={0xa, 0x4e22, 0x6, @loopback, 0x802}, 0x1c, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="14000000000000002900000034000000010001000000000020"], 0x38}, 0x24000898) setsockopt$sock_timeval(r0, 0x1, 0x2, 0x0, 0x48) getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x4, &(0x7f0000000000)=""/152, &(0x7f00000005c0)=0x98) 1.728854651s ago: executing program 1 (id=4739): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0xe26, @dev={0xac, 0x14, 0x14, 0x36}}, 0x10) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4620, @empty}, 0x10) setsockopt$IP_VS_SO_SET_TIMEOUT(r0, 0x0, 0x1f, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="a40000002000010027bd7000fbdbdf250a"], 0xa4}, 0x1, 0x0, 0x0, 0x4040860}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000007e80)={0x64, 0x19, 0x1, 0x70bd28, 0x25dfdbfc, {0x1d, 0xd601, 0x9}, [@nested={0x50, 0x12, 0x0, 0x1, [@nested={0x49, 0xd5, 0x0, 0x1, [@generic="33ac20d9db2597515873def3351bf11d66e8632c47544ac4a8a74aec90d7faba3dc1cdbd588d2dccd5f20dc35eb9a20452580c01ca5021c7bf57b3cb640000000000000000"]}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x5}, 0x0) sendmsg$key(r1, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)={0x2, 0x5, 0x3, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x20, 0x0, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x3}}}, @sadb_sa={0x2, 0x1, 0x0, 0x1, 0x0, 0x4, 0x0, 0x20000000}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @empty}}]}, 0x50}, 0x1, 0x7}, 0x0) accept$inet(r0, &(0x7f0000000340)={0x2, 0x0, @multicast1}, &(0x7f0000000380)=0x10) sendmsg$NFNL_MSG_ACCT_GET(r2, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x20, 0x1, 0x7, 0x300, 0x0, 0x0, {0x0, 0x0, 0x9}, [@NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x9}]}, 0x20}, 0x1, 0x0, 0x0, 0x80004}, 0x8004) r3 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r3, &(0x7f00000002c0)={&(0x7f0000000480)={0x8, 0x4e22, @remote}, 0x5, &(0x7f00000001c0)=[{0x0}, {&(0x7f0000000800)="08003b117c003a3d", 0x8}], 0x2}, 0x2000c044) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000850000002a000000180100002025642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000089cdc832850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r4, 0x18000000000002a0, 0x22, 0x0, &(0x7f0000000400)="b9ffe4306844268cb89914f00800e2c65db7b2e96a07df741f051a1d4ab600df7dfa", 0x0, 0x80000000, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000280)={0xffffffff}, 0x10) setsockopt$WPAN_SECURITY_LEVEL(r2, 0x0, 0x2, &(0x7f00000003c0)=0x3, 0x4) sendmsg$nl_generic(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="e0000000120001ff"], 0xe0}, 0x1, 0x0, 0x0, 0x200000c1}, 0x0) 1.655823849s ago: executing program 3 (id=4740): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB='X'], 0x6) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x58}}]}, &(0x7f0000000240)='syzkaller\x00', 0xc, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.555291734s ago: executing program 3 (id=4742): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r2) getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="58000000100037040400"/20, @ANYRES32=r3, @ANYBLOB="8304050000000000380012800b000100697036746e6c000028000280080008001300000014000300fe"], 0x58}, 0x1, 0x0, 0x0, 0x9005}, 0x4000000) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0xfe33) syz_80211_inject_frame(&(0x7f0000000200), &(0x7f0000000300)=@mgmt_frame=@probe_response={{{0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1}, {0x4}, @device_b, @device_b, @from_mac, {0xe, 0xfea}, @value=@ver_80211n={0x0, 0x10ca, 0x2, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1}}, 0xc4, @default, 0x2000, @void, @val={0x1, 0x5, [{0x5, 0x1}, {0x6}, {0x3}, {0x22}, {0xa}]}, @val={0x3, 0x1, 0x68}, @void, @void, @val={0x2d, 0x1a, {0x800, 0x0, 0x1, 0x0, {0xfffffffffffffffa, 0x40, 0x0, 0x37, 0x0, 0x0, 0x1, 0x3}, 0x8, 0x8, 0x3}}, @void, @val={0x71, 0x7, {0x1, 0x1, 0x0, 0x1, 0x1, 0x3, 0x40}}, [{0xdd, 0x69, "79088635822b9422a8a8d80ddbe87ed2ff590eda8302c6533201828adcbb0337f26581d5c6a74c67424280f3595d9aaa9c8b3a44b15819f60f0cf2936f5b60c54e7c0c4ae5a08d5c07346572ebdc733a30c0af8e19de204886793a0cbf3fe2a6d183a496a29a620f89"}, {0xdd, 0x50, "32b63c0a5dd39015537afcd1d5fffa516dd8a1c3b14b2afda84a5dfbaad1cd6a0e7e3041e03202abcdffb2f3476f31be6e8c2935dbaa506a28c4f95022c81e65de976886f73abd22f2ccd67b9cb6abfc"}]}, 0x114) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x38, 0x301, 0x70bd2d, 0xfffffffc, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x448d3}, 0x0) close(0x3) ioctl$NILFS_IOCTL_SET_SUINFO(r0, 0x40186e8d, &(0x7f00000001c0)={&(0x7f0000000100)=[{0x1, 0x0, 0x0, {0x4, 0xff, 0x2}}], 0x1, 0x20, 0x0, 0x3}) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000000)={r0, 0x401, 0x2, 0x4}) 1.427789766s ago: executing program 2 (id=4743): unshare(0x2040400) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$phonet(0x23, 0x2, 0x1) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000010c0)=ANY=[@ANYBLOB="3401000010000100"/20, @ANYRES32=r1], 0x134}}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xa, 0x4, 0x4, 0xf, 0x0, 0x1}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r3}, 0xc) syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmmsg$inet(r4, &(0x7f0000000c40)=[{{&(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x11}}], 0x1, 0x8014) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f00000071c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000007180)={0x0}, 0x1, 0x0, 0x0, 0x4000004}, 0x20000000) r5 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r5, &(0x7f0000000600)={0x2, 0x4e23, 0x0, @private0, 0x4}, 0x1c) (async) connect$inet6(r5, &(0x7f0000000600)={0x2, 0x4e23, 0x0, @private0, 0x4}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) connect$inet6(r5, &(0x7f0000000100)={0xa, 0x4e24, 0x8d3, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x7da6}, 0x1c) (async) connect$inet6(r5, &(0x7f0000000100)={0xa, 0x4e24, 0x8d3, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x7da6}, 0x1c) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, 0x0, 0x0) (async) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, 0x0, 0x0) r6 = socket(0x1, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) (async) r7 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)=ANY=[@ANYRES32=r8, @ANYRES32=r7, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r8, &(0x7f0000000180), &(0x7f00000000c0)=@tcp6=r6}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="12000000150000000800000002"], 0x50) (async) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="12000000150000000800000002"], 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r9, &(0x7f0000000300), 0x0}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0x7, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000e50003000000000085100000fcffffff250000001000000007000000faffffff95"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4c}, 0x94) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0x7, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000e50003000000000085100000fcffffff250000001000000007000000faffffff95"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4c}, 0x94) 1.331722384s ago: executing program 4 (id=4744): unshare(0x20000400) connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) 1.272181239s ago: executing program 2 (id=4745): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="02000000040000000400000008"], 0x50) unshare(0x8040480) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0c00000004000000040000000700000000000000", @ANYRES32=r0], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_PROMISC(r4, 0x6b, 0x2, &(0x7f0000000300), &(0x7f0000000340)=0x4) syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r2) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) socket$inet(0x2, 0x2, 0x1) write$cgroup_subtree(r3, &(0x7f0000000140)=ANY=[], 0x48) splice(r2, 0x0, r5, 0x0, 0x3000, 0x100000000000000d) r6 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000780)=@base={0xa, 0x16, 0x800, 0x7f}, 0x50) recvfrom(r3, &(0x7f0000000040)=""/134, 0x86, 0x41, &(0x7f0000000280)=@in={0x2, 0x4e24, @empty}, 0x80) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000013c0)={r6, 0x0, 0xfffffffffffffffc}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x1e, 0x32, &(0x7f0000000140)=@raw=[@map_fd={0x18, 0x3, 0x1, 0x0, r6}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}, @alu={0x7, 0x1, 0x7, 0x9, 0x3, 0x18, 0x4}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}, @alu={0x3, 0x0, 0x4, 0xb, 0x2, 0x0, 0xfffffffffffffffc}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}, @call={0x85, 0x0, 0x0, 0x26}], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffff}, 0x94) 1.19200415s ago: executing program 4 (id=4746): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r0, 0x0, 0x40480d4) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46", 0xb5}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x21, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) sendmmsg(r1, &(0x7f0000002800)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[], 0x10}}], 0x1, 0x4040) 1.168593347s ago: executing program 4 (id=4747): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000200)={'sit0\x00', &(0x7f0000000000)={'syztnl0\x00', 0x0, 0x20, 0x700, 0x80000000, 0x3, {{0x24, 0x4, 0x0, 0x1, 0x90, 0x67, 0x0, 0x8, 0x4, 0x0, @multicast1, @empty, {[@end, @lsrr={0x83, 0xf, 0xed, [@multicast2, @loopback, @empty]}, @end, @generic={0x86, 0xf, "a9f7158afe1c894d0c486dde8a"}, @timestamp={0x44, 0x10, 0xa1, 0x0, 0xe, [0x3, 0x3, 0x2]}, @cipso={0x86, 0x4b, 0x1, [{0x5, 0xa, "fd2db56e84cc1b2e"}, {0x0, 0x7, "1bdbd13a9f"}, {0x6, 0x8, "3c22bd10ce21"}, {0x0, 0x5, "ccbfb8"}, {0x7, 0xc, "db50336e211c1465f75e"}, {0x7, 0x8, "5e2fe5ea5a00"}, {0x0, 0x9, "80e86cf6eee617"}, {0x2, 0x2}, {0x1, 0x8, "45cde4a4028a"}]}]}}}}}) 1.143871526s ago: executing program 2 (id=4748): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={0x0, 0x6d207ee5}, 0x8) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback, 0x2}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000200)=[{{&(0x7f0000000580)={0xa, 0x4e23, 0x1, @loopback}, 0x1c, &(0x7f00000006c0)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x8020) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xc2dc}, 0x94) r3 = socket$packet(0x11, 0x2, 0x300) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000180)=r4, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a80)={{r2}, &(0x7f0000000a00), &(0x7f00000003c0)}, 0x20) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r5, &(0x7f0000000400)="2ae0e710", 0x4, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1c) setsockopt$inet6_int(r5, 0x29, 0x31, &(0x7f00000000c0)=0x6, 0x4) recvmmsg(r5, &(0x7f0000000780)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)=""/134, 0x86}, 0x1}], 0x1, 0x10142, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000000)={0x0, 0x3}, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x3, 0x2d6e, &(0x7f0000000000)=ANY=[@ANYRES16=r0], &(0x7f0000000680)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffff8}, 0x94) 1.070743739s ago: executing program 4 (id=4749): bpf$PROG_LOAD(0x5, &(0x7f0000000e40)={0x1, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000041ffffff00000000080000009111a3000000000095"], &(0x7f0000000c40)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{r1, 0xffffffffffffffff}, &(0x7f0000000740), &(0x7f0000000040)='%-5lx \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r2}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0feffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000801000085000000a500000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r3, 0x2f08, 0xe, 0x0, &(0x7f0000000380)="a162cef0563a20f5177241ee8f52", 0x0, 0x0, 0x6000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7}, 0x50) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) socket$unix(0x1, 0x1, 0x0) socket$kcm(0x11, 0x3, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r7) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newtfilter={0x40, 0x2c, 0xd3f, 0x30bd2d, 0x25dfdc00, {0x0, 0x0, 0x0, r10, {0xb, 0xfff3}, {}, {0x8, 0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0x8, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x2, 0x4}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) epoll_create1(0x0) socket$unix(0x1, 0x1, 0x0) 827.942706ms ago: executing program 0 (id=4750): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$netlink(0x10, 0x3, 0xa) r2 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/17, @ANYRES32=0x0, @ANYRES32], 0x50) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r3, &(0x7f0000001d00)={&(0x7f00000017c0)={0x2, 0x0, @private=0xa010101}, 0x10, 0x0, 0x0, &(0x7f0000000240)=[@rdma_args={0x48, 0x114, 0x1, {{0x0, 0x3}, {&(0x7f00000001c0)=""/117, 0x75}, &(0x7f0000001b40)=[{&(0x7f0000000140)=""/86, 0x56}], 0x1}}, @cswp={0x58, 0x114, 0x7, {{0x7, 0x1}, 0x0, 0x0, 0xa, 0x9, 0x80, 0x9, 0x4, 0x41}}], 0xa0}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r4, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000000000000000000210d0000aaa8fa017242ba9380d424000000000000002900000002000000", 0xfe60) r5 = socket$unix(0x1, 0x1, 0x0) sendmsg$AUDIT_GET_FEATURE(r1, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x3fb, 0x2, 0x70bd2b, 0x25dfdbfd, "", ["", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x8044}, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x68, 0x10, 0x401, 0x0, 0x3, {0x0, 0x0, 0x0, 0x0, 0xe59bca127d81b0fa, 0xc574450d1af3b5bc}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0x1c, 0x5, 0x0, 0x1, [@IFLA_BRPORT_MULTICAST_ROUTER={0x5, 0x19, 0x3}, @IFLA_BRPORT_GROUP_FWD_MASK={0x6, 0x1f, 0xd5}, @IFLA_BRPORT_LEARNING={0x5}]}}}, @IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}]}, 0x68}, 0x1, 0x0, 0x0, 0x20044010}, 0x4040) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000800)=@newqdisc={0x94, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {0xffff}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x5, 0xd, 0x8b, 0xd, 0x2, 0x4, 0x2, 0xf, 0x6, 0x3, 0x7, 0x8, 0x4, 0x10, 0x4], 0x3, [0xb, 0x3, 0x1, 0x2002, 0x1, 0x4, 0x7fff, 0xd06, 0xff05, 0xc, 0xd, 0x3, 0x5, 0x6, 0xe, 0x100], [0xfff1, 0x5, 0x1, 0xfff5, 0x4, 0x8, 0x1, 0x9, 0x5, 0x2, 0xc, 0x4, 0x2, 0x3, 0x1]}}]}}, @TCA_RATE={0x6, 0x5, {0x6, 0x3}}]}, 0x94}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) 778.025683ms ago: executing program 3 (id=4751): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000058000000030a0102000000000000000001000000090003803d2175fbe782c2002c00048008000240172af2e40800014000000003080002401c791e7108000240423930ce08000140000000030900010073797a300000000088000000060a010400000000000000000100000008000b"], 0x122}}, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r0, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) readv(r0, &(0x7f00000005c0)=[{&(0x7f0000000340)=""/147, 0x93}, {&(0x7f0000000400)=""/197, 0xc5}, {&(0x7f0000000500)=""/63, 0x3f}, {&(0x7f0000000540)=""/90, 0x5a}], 0x4) r1 = socket(0x10, 0x3, 0x0) r2 = socket(0x200000000000011, 0x2, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r2) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x28, 0x3, 0x8, 0x201, 0x0, 0x0, {0x0, 0x0, 0x1}, [@CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @icmpv6=[@CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x800}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2f}]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x10) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000000)={0xfffffce3, 0x7, 0x2, 0x5}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="280000001200015e36bfa1000000000007000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00'], 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FLUSH_PMKSA(r1, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x1c, r3, 0x100, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0xc810) 676.208436ms ago: executing program 1 (id=4752): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x1340, 0x1130, 0x178, 0xc, 0x1130, 0x178, 0x1270, 0x258, 0x258, 0x1270, 0x258, 0x3, 0x0, {[{{@uncond, 0x0, 0x1100, 0x1130, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x1, 0x0, 0x0, './cgroup.cpu/syz0\x00', 0x0, {0xffffffff}}}, @common=@unspec=@addrtype1={{0x28}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x2, 0x3, 0x9}, {0x1, 0x2, 0x2}, 0x2, 0x2}}}, {{@ipv6={@private2, @private0={0xfc, 0x0, '\x00', 0x1}, [], [0x0, 0x0, 0x0, 0xffffff00], '\x00', 'hsr0\x00', {0xff}}, 0x0, 0xd0, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0xffff, 0x0, 0x59, 0x1, 0x0, "5b5e4637e2c868d14d9be48a2a79837d5499f42d086321ddfda71d6d982957c9efbee097d2c1e45c21510a84843e700c6ab764b15794236650ed3db73c2d916d"}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x13a0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_udp_int(r2, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) setsockopt$inet6_udp_encap(r2, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) write$tun(r0, &(0x7f0000000240)={@val={0xa}, @void, @eth={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x29}, @void, {@ipv6={0x86dd, @udp={0xd, 0x6, '\x00 \b', 0x10, 0x11, 0xff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, {[], {0x4f19, 0x4e20, 0x10, 0x0, @gue={{0x2, 0x0, 0x2, 0x8, 0x100}}}}}}}}}, 0x4a) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB='H\x00'], 0x48}}, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x1c, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00', 0xfffffffe}]}, &(0x7f0000000180)=0x10) r7 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000200)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x84, &(0x7f00000000c0)={r8, @in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, &(0x7f00000001c0)=0x9c) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f0000004480)=[{{0x0, 0x0, &(0x7f00000043c0)=[{&(0x7f00000032c0)=""/4096, 0x1000}], 0x1}, 0x7}], 0x1, 0x2, 0x0) r9 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r9, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) connect$inet6(r9, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xff00000000000000}, 0x2000400}, 0x1c) sendmmsg$inet6(r9, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x176}}], 0x400000000000172, 0x4000000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000600)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x6c, 0x6c, 0x2, [@enum64={0xc, 0x4, 0x0, 0x13, 0x0, 0x4, [{0x1, 0x2, 0x2}, {0x3, 0x105, 0x6}, {0xf, 0x5, 0x34563982}, {0x8, 0xdd}]}, @volatile={0x100, 0x0, 0x0, 0xa, 0x5}, @volatile={0x3, 0x0, 0x0, 0x9, 0x4}, @restrict={0x0, 0x0, 0x0, 0xb, 0x5}, @union]}}, 0x0, 0x86}, 0x28) 570.10667ms ago: executing program 3 (id=4753): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x4, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r0 = socket(0x28, 0x5, 0x0) (async) r1 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r1, &(0x7f0000000040), 0x10) listen(r1, 0x4) (async) connect$vsock_stream(r0, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) (async) sendmmsg(r0, &(0x7f0000000100)=[{{0x0, 0xffffffc2, &(0x7f00000000c0)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x51, 0x0) (async) r2 = accept4$unix(r1, 0x0, 0x0, 0x800) recvfrom$unix(r2, &(0x7f0000000140)=""/248, 0x1ffd4, 0x12, 0x0, 0x0) (async) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r3) (async) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') (async) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r4, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) (async) r5 = socket$netlink(0x10, 0x3, 0x8000000004) bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async) writev(r5, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001400add427323b472545b45602117fffffff81004e230e227f000001925aa80020007b00090080007f000006e809000000ff0000f03ac71002000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) (async) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f0000000080)={0x2, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="020a000002"], 0x10}}, 0x0) (async) recvmmsg(r6, &(0x7f0000000740)=[{{&(0x7f00000000c0)=@tipc, 0x80, &(0x7f0000000800)=[{&(0x7f0000001740)=""/4081, 0xff1}, {&(0x7f0000000640)=""/251, 0xfb}, {&(0x7f0000000300)=""/52, 0x34}, {&(0x7f0000000180)=""/51, 0x33}, {&(0x7f0000000240)=""/140, 0x8c}], 0x5, 0x0, 0x7}}], 0x4000000000000b7, 0x2, 0x0) 530.99481ms ago: executing program 4 (id=4754): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'ip6_vti0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000240)=@newqdisc={0x5c, 0x24, 0x4ee4e6a52ff56541, 0x2000008, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xfff1, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x6, 0x7, 0x0, 0x8, 0x0, 0x8, 0xff}}, {0x4}}]}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x8}]}, 0x5c}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x5, &(0x7f00000007c0)=@framed={{0x18, 0x2}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xa}]}, &(0x7f00000005c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r5, @ANYRES32=r6, @ANYBLOB="05"], 0x10) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r5, &(0x7f0000000440), &(0x7f0000000040)=@udp=r4}, 0x20) socket$nl_sock_diag(0x10, 0x3, 0x4) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x21) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b142b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c04594282423424d00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2003}, 0x94) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r4, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000800)=""/4096, 0x1000}], 0x1}, 0xb}], 0x12, 0x40000021, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28012, r3, 0x0) mmap(&(0x7f0000492000/0xf000)=nil, 0xf000, 0x1000002, 0x12, r2, 0x0) accept$alg(r2, 0x0, 0x0) mmap(&(0x7f0000ae0000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) 446.149796ms ago: executing program 0 (id=4755): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000001100)=@migrate={0xec, 0x21, 0x1, 0x0, 0x0, {{@in6=@private2={0xfc, 0x2, '\x00', 0x5}, @in=@dev={0xac, 0x14, 0x14, 0x2e}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x2e}}, [@migrate={0x9c, 0x11, [{@in=@loopback=0xa010101, @in=@rand_addr=0x64010100, @in6=@rand_addr=' \x01\x00', @in=@loopback, 0x3c, 0x4, 0x0, 0x0, 0xa, 0x2}, {@in=@private=0xa010101, @in6=@empty, @in=@remote, @in=@dev={0xac, 0x14, 0x14, 0x2c}, 0x3c, 0x4, 0x0, 0x0, 0xa, 0x2}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x6a8dd86ef567f079}, 0x4020800) r2 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$PPPIOCSFLAGS(r2, 0x40047459, &(0x7f0000000000)=0x204264) bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e23, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}}, 0x1c) r3 = socket$can_raw(0x1d, 0x3, 0x1) r4 = socket(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000006c0)=@newqdisc={0x58, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x28, 0x2, [@TCA_CHOKE_MAX_P={0x8, 0x3, 0x1}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x9, 0x4, 0x4, 0x14, 0x12, 0x4, 0x6}}, @TCA_CHOKE_MAX_P={0x8, 0x3, 0x9}]}}]}, 0x58}}, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000280)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@getnexthop={0x40, 0x6a, 0x200, 0x70bd2d, 0x25dfdbfc, {}, [@NHA_FDB={0x4}, @NHA_MASTER={0x8, 0xa, 0x1}, @NHA_FDB={0x4}, @NHA_MASTER={0x8, 0xa, 0x1}, @NHA_OIF={0x8, 0x5, r6}, @NHA_OIF={0x8, 0x5, r7}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000}, 0x20040094) r8 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r8, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r8, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@loopback, @in=@broadcast, 0x4e22, 0xfffc, 0x4e23, 0x3, 0xa, 0x0, 0x10}, {0x100000000, 0x2, 0x1, 0x0, 0xffffffffffffffff, 0x6, 0x8, 0x4}, {0x9, 0xfffffffffffffffe, 0x3, 0xd}, 0xd6, 0x0, 0x1, 0x0, 0x0, 0x1}, {{@in=@multicast1, 0x4d3, 0xff}, 0x0, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0xfffffffb}}, 0xe8) sendmmsg(r8, &(0x7f0000000480), 0x2e9, 0xffe0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) bind$can_raw(r3, &(0x7f0000000000)={0x1d, r9}, 0x10) readv(r3, &(0x7f0000000180)=[{&(0x7f0000003880)=""/4102, 0x1006}], 0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r11 = openat$cgroup_int(r10, &(0x7f0000000300)='cgroup.clone_children\x00', 0x2, 0x0) r12 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r12, 0x1, r11, &(0x7f00000000c0)={0x1a0000010}) setsockopt$CAN_RAW_RECV_OWN_MSGS(r3, 0x65, 0x4, &(0x7f00000003c0)=0x1, 0x4) r13 = socket$can_raw(0x1d, 0x3, 0x1) sendmsg$can_raw(r13, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=@can={{}, 0x3, 0x3, 0x0, 0x0, "0000000000000003"}, 0x10}, 0x1, 0x0, 0x0, 0x24042850}, 0x4) socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x50, 0x2, 0x2, 0x401, 0x0, 0x0, {0xa}, [@CTA_EXPECT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev}, {0x14, 0x4, @loopback}}}]}]}, 0x50}}, 0x0) 445.649981ms ago: executing program 3 (id=4756): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0xd6, 0x0, 0x0, 0x0, 0xd8}, [@call={0x85, 0x0, 0x0, 0x41}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000140)={r1, 0xffffffffffffffff, 0x1e, 0x0, @val=@tcx={@void, @value=r1}}, 0x1c) r2 = socket$inet6(0xa, 0x2, 0x3a) setsockopt$inet6_buf(r2, 0x29, 0x32, &(0x7f0000000180)="9ea2a0b1a39471c2e58c96cae6850478554b8bab", 0x14) sendmmsg$inet6(r2, &(0x7f0000000340)=[{{&(0x7f0000000380)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, 0x1c, &(0x7f0000001740)=[{&(0x7f0000000100)="a0002883781ecc0e", 0x8}], 0x1}}], 0x1, 0x0) r3 = socket$netlink(0x10, 0x3, 0x10) r4 = socket$netlink(0x10, 0x3, 0x10) openat$nci(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) writev(r4, &(0x7f0000000680)=[{&(0x7f0000000440)="77cf8f7b806e20484eef094a5b98c1aa1636f35157f0e07c737ba0cc5965851519", 0x21}, {&(0x7f0000001780)="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", 0x1000}, {&(0x7f0000002780)="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", 0x1000}, {&(0x7f0000000480)="85346766377cfa16f82139e50ca33efd1553b53d97a147da3c7b47708084e608e7e812eaea677daa0115ed88fe6da8c251ea513ba0b3c9c0db4a550b5d62c320d09dfbf595a04f0da0ce823259f2417f937b319f2ce01bb8d5ac979bd996744a1d6ad9767613dab90e177a7b6b35c565c9b08a5eee7f4cdf145ddd713b676d3c3e5a0848fbabab13823d69ed07b39702bf", 0x91}, {&(0x7f0000000540)="f87ea2e60359ed0126c42379d86d2a1c8f7cdd5290a6c6d0a06754810038d61158f76b3327ebe36581e7e28f1d9e76d93b1dd59bf73417b09756def9745587e14269df849ddd463bbfcf99a0f38efc9c572e49edc9688653f8861a296859f324ecd6d1f913dd1d21dcd239f434251bbc1aabd61ba543182c0f2da8aaf9484e4b3aeddb2d4d2f5f1ae737e5b61c9cd087b8b8fec3f8ac4d71612e93d9be26bf5476fbb20ad10089354845f5068fa767f9bf6aa4b730647a13dbf83b71f5b9f1dd4c91b72920cc8233cf225df67000efd8", 0xd0}, {&(0x7f0000000640)}], 0x6) unshare(0x8040480) r5 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) connect$unix(r5, 0x0, 0x0) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4) r6 = getpid() r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r3, 0x8983, &(0x7f0000000340)={0x2, 'gretap0\x00', {0x6}, 0x80}) sendmsg$nl_route(r7, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="2c000000190001000000000000000000802000000011000500000000080001007f00000108000400", @ANYRES32=0x0, @ANYBLOB="c094e09b54ff3881d4fbf7f4cb1c5ae2c3ea83050202693a750b31e54724d4a803926b9f084aa5a8126685ca629828ba6ecbec722c900fb4f6a8536ce48eaf6febd0559bc353eabbb85e914575ccf97e783132e79f94aa9afc6601b0997fe8a87d52728c2adf3b42a828f110b38b9735da9ff40b036c0d8dd40ead2a6fd4c599da48c172f42b5c1fa76e6760a09c43e4adfd081d75c055a3"], 0x2c}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r9, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000001340)="94da5eccb51e", 0x6}], 0x1}, 0x20000001) recvmsg$unix(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000005c0)=""/151, 0x97}], 0x1}, 0x2001) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r11, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r6}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x200440c0}, 0x30) sendmsg$NL80211_CMD_ADD_TX_TS(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r0, @ANYBLOB="000829bd7000080000006900000008000300", @ANYRES32=0x0, @ANYBLOB="a30bb279d9eb5507c10a4494ae158d8eeb79837c04af450058a6b3839be723e2d695e18a008e122871d648c5ccfaa90f9763d94d0112"], 0x1c}, 0x1, 0x0, 0x0, 0x20000044}, 0x4) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_ULP(r12, 0x6, 0x1f, &(0x7f0000000700), 0x3) 147.721551ms ago: executing program 2 (id=4757): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_ADD(r0, 0x0, 0x40480d4) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46", 0xb5}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x21, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) sendmmsg(r1, &(0x7f0000002800)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=ANY=[], 0x10}}], 0x1, 0x4040) 80.611505ms ago: executing program 2 (id=4758): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000480), 0xffffffffffffffff) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000000980)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000940)={&(0x7f0000000840)={0xf8, r2, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x78, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}]}]}, 0xf8}, 0x1, 0x0, 0x0, 0x4}, 0x8084) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r4, &(0x7f0000000440)={0x0, 0x4a, &(0x7f0000000a00)={&(0x7f0000000740)={0x1c, r5, 0xf03, 0x0, 0x0, {0x34}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x8}, @DEVLINK_ATTR_RATE_NODE_NAME, @DEVLINK_ATTR_RATE_NODE_NAME={0x0, 0xa8, @random="85df6bfb421e885a372b23d060c392210aca0f792186831a8ece9269752e1bfd754d84d55eabe4d695887891699a1cf87438a073d316923b60ad2df1982548a513db2f39716557c9eafc721d205a020d795fc8ff8532b7f058949fece63899fb755eb3ede70cea082a5cd0371fe57990659f2abcf59be8065932145ae30f0dcd551016e17a292b6cea5303ed7e46f684a193e79ec2680d"}]}, 0x1c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x20, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x68}}, 0x20050800) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000000900010073797a3100000000ac000000030a010300000000000000000100000014000480080002400000000008000140000000050900030073797a30000000000900010073797a310000000008000b4000000003640008800c00014000000000800000000c00014000000000000000010c00014000000000000000050c000140000000000000a0a20c000140000010000000c6930c"], 0x92fc}}, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000140)=0x14) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000200)={'syztnl0\x00', &(0x7f0000000180)={'ip6gre0\x00', 0x0, 0x4, 0x5, 0xe, 0x5, 0x72, @ipv4={'\x00', '\xff\xff', @remote}, @mcast1, 0xb0, 0x700, 0x0, 0xe}}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000240)={'batadv0\x00', 0x0}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000002c0)=0x14) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000003c0)={'erspan0\x00', &(0x7f0000000340)={'syztnl0\x00', 0x0, 0x7, 0x7800, 0x72f7bcf7, 0xfffffff7, {{0xc, 0x4, 0x1, 0x1d, 0x30, 0x64, 0x0, 0x7f, 0x4, 0x0, @rand_addr=0x64010100, @rand_addr=0x64010100, {[@end, @ssrr={0x89, 0xf, 0xc3, [@empty, @multicast2, @local]}, @ssrr={0x89, 0x7, 0x60, [@multicast2]}, @ra={0x94, 0x4, 0x1}]}}}}}) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000700)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000006c0)={&(0x7f00000005c0)={0xf0, r2, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x7c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0xf0}, 0x1, 0x0, 0x0, 0x51}, 0x4048040) r12 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_POWER(r12, 0x112, 0x9, &(0x7f0000000400)=0x9, 0x1) sendmsg$DEVLINK_CMD_SB_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)={0x3c, r1, 0x1, 0x70bd2a, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x90) 0s ago: executing program 4 (id=4759): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8) getsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f00000001c0), &(0x7f0000000200)=0x4) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000001440)=[@in6={0xa, 0x4e29, 0x3ff, @private1={0xfc, 0x1, '\x00', 0x1}, 0xffffffff}]}, &(0x7f0000000180)=0x10) close(0x3) r3 = socket$nl_route(0x10, 0x3, 0x0) socket(0x5, 0x803, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000006c0)=ANY=[@ANYRES64=r3, @ANYRES32=0x0, @ANYRESDEC=r2, @ANYRESHEX=r3], 0x28}}, 0x2004040) r5 = socket$inet6(0xa, 0x808, 0x0) bind$inet6(r5, 0x0, 0x0) r6 = socket$l2tp(0x2, 0x2, 0x73) syz_genetlink_get_family_id$wireguard(&(0x7f00000005c0), 0xffffffffffffffff) setsockopt$ARPT_SO_SET_REPLACE(r6, 0xa02000000000000, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3e8, 0x110, 0x0, 0x110, 0x300, 0x300, 0x300, 0x7fffffe, 0x0, {[{{@arp={@local, @empty, 0x0, 0x0, 0x8, 0x0, {@empty, {[0xff, 0xff]}}, {@mac=@local, {[0x0, 0x0, 0x0, 0x0, 0xff]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pimreg\x00', 'netdevsim0\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x3f}, @multicast2, @multicast2, 0x2, 0x1}}}, {{@arp={@rand_addr=0x64010102, @empty, 0x0, 0x0, 0x0, 0x0, {@empty, {[0x0, 0x0, 0x0, 0x0, 0x0, 0xff]}}, {}, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 'veth0_to_team\x00', 'ip6tnl0\x00'}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28}}, {{@uncond, 0xc0, 0x11d}, @unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6572211f, 'syz0\x00', {0x6}}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) setsockopt$inet6_udp_int(r5, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r7 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r7, &(0x7f0000000040), 0x10) listen(r7, 0x0) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000480), r7) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r7, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x1c, r8, 0x4, 0x70bd26, 0x25dfdbfb, {}, [@ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x44000) r9 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r9, &(0x7f0000000080), 0x10) sendmsg$nl_route_sched(r9, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@gettaction={0x14, 0x32, 0x100, 0x70bd29, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x40c4) setsockopt$sock_linger(r9, 0x1, 0xd, &(0x7f0000000140)={0x1, 0xffffffff}, 0x8) close(r9) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0xc, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0xc, &(0x7f00000000c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r10}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) kernel console output (not intermixed with test programs): 69.082402][T17891] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 369.082417][T17891] R13: 00007f01a4616038 R14: 00007f01a4615fa0 R15: 00007ffe972b7478 [ 369.082446][T17891] [ 369.376813][ T5823] Bluetooth: hci0: command 0x0c20 tx timeout [ 369.521627][T17893] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 369.575335][ T7935] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 369.597196][ T7935] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 369.664543][T17893] netlink: 'syz.3.3390': attribute type 4 has an invalid length. [ 369.694865][ T36] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 369.739772][T17899] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3392'. [ 369.754377][T17899] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3392'. [ 369.822072][T17870] lo speed is unknown, defaulting to 1000 [ 369.870718][T17911] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3395'. [ 370.511816][T17946] FAULT_INJECTION: forcing a failure. [ 370.511816][T17946] name failslab, interval 1, probability 0, space 0, times 0 [ 370.556697][T17946] CPU: 0 UID: 0 PID: 17946 Comm: syz.3.3402 Not tainted syzkaller #0 PREEMPT(full) [ 370.556724][T17946] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 370.556736][T17946] Call Trace: [ 370.556743][T17946] [ 370.556751][T17946] dump_stack_lvl+0xe8/0x150 [ 370.556780][T17946] should_fail_ex+0x412/0x560 [ 370.556810][T17946] should_failslab+0xa8/0x100 [ 370.556848][T17946] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 370.556870][T17946] ? __alloc_skb+0x186/0x7d0 [ 370.556890][T17946] ? __alloc_skb+0x1d0/0x7d0 [ 370.556907][T17946] ? __local_bh_enable_ip+0xd0/0x130 [ 370.556934][T17946] __alloc_skb+0x1d0/0x7d0 [ 370.556959][T17946] netlink_sendmsg+0x5d4/0xb40 [ 370.556995][T17946] ? __pfx_netlink_sendmsg+0x10/0x10 [ 370.557019][T17946] ? aa_sock_msg_perm+0xf1/0x1b0 [ 370.557046][T17946] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 370.557069][T17946] ____sys_sendmsg+0x972/0x9f0 [ 370.557106][T17946] ? __pfx_____sys_sendmsg+0x10/0x10 [ 370.557134][T17946] ? import_iovec+0x73/0xa0 [ 370.557156][T17946] ___sys_sendmsg+0x2a5/0x360 [ 370.557183][T17946] ? __pfx____sys_sendmsg+0x10/0x10 [ 370.557232][T17946] ? __fget_files+0x2a/0x420 [ 370.557257][T17946] ? __fget_files+0x3a0/0x420 [ 370.557287][T17946] __x64_sys_sendmsg+0x1bd/0x2a0 [ 370.557312][T17946] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 370.557342][T17946] ? __pfx_ksys_write+0x10/0x10 [ 370.557372][T17946] do_syscall_64+0x14d/0xf80 [ 370.557396][T17946] ? trace_irq_disable+0x3b/0x150 [ 370.557412][T17946] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 370.557430][T17946] ? clear_bhb_loop+0x40/0x90 [ 370.557451][T17946] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 370.557469][T17946] RIP: 0033:0x7f4356b9c819 [ 370.557487][T17946] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 370.557502][T17946] RSP: 002b:00007f4357a7a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 370.557522][T17946] RAX: ffffffffffffffda RBX: 00007f4356e15fa0 RCX: 00007f4356b9c819 [ 370.557535][T17946] RDX: 00000000040c0080 RSI: 00002000000002c0 RDI: 0000000000000004 [ 370.557547][T17946] RBP: 00007f4357a7a090 R08: 0000000000000000 R09: 0000000000000000 [ 370.557558][T17946] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 370.557568][T17946] R13: 00007f4356e16038 R14: 00007f4356e15fa0 R15: 00007ffdcb8d2248 [ 370.557596][T17946] [ 370.997834][T17949] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3405'. [ 371.055373][T17952] netlink: 'syz.4.3406': attribute type 1 has an invalid length. [ 371.063529][T17952] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3406'. [ 371.427222][T17962] netlink: 4356 bytes leftover after parsing attributes in process `syz.3.3410'. [ 371.451330][T17962] netlink: 4356 bytes leftover after parsing attributes in process `syz.3.3410'. [ 371.474476][T17962] netlink: 4356 bytes leftover after parsing attributes in process `syz.3.3410'. [ 371.506964][T17970] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3412'. [ 371.514791][T17962] netlink: 4356 bytes leftover after parsing attributes in process `syz.3.3410'. [ 371.562989][T17979] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3416'. [ 371.576982][T17962] netlink: 4356 bytes leftover after parsing attributes in process `syz.3.3410'. [ 371.608104][T17981] tipc: Started in network mode [ 371.613071][T17981] tipc: Node identity 8665821af79c, cluster identity 4711 [ 371.622007][T17981] tipc: Enabled bearer , priority 0 [ 371.637639][T17962] netlink: 4356 bytes leftover after parsing attributes in process `syz.3.3410'. [ 371.699181][T17981] syzkaller0: entered promiscuous mode [ 371.716955][T17981] syzkaller0: entered allmulticast mode [ 371.734390][T17981] tipc: Resetting bearer [ 371.762223][T17980] tipc: Resetting bearer [ 373.585668][T17980] tipc: Disabling bearer [ 373.606857][T18017] xfrm0: entered promiscuous mode [ 373.611944][T18017] xfrm0: entered allmulticast mode [ 373.730094][T18026] FAULT_INJECTION: forcing a failure. [ 373.730094][T18026] name failslab, interval 1, probability 0, space 0, times 0 [ 373.747831][T18026] CPU: 1 UID: 0 PID: 18026 Comm: syz.2.3430 Not tainted syzkaller #0 PREEMPT(full) [ 373.747857][T18026] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 373.747868][T18026] Call Trace: [ 373.747876][T18026] [ 373.747883][T18026] dump_stack_lvl+0xe8/0x150 [ 373.747914][T18026] should_fail_ex+0x412/0x560 [ 373.747946][T18026] should_failslab+0xa8/0x100 [ 373.747970][T18026] ? skb_clone+0x212/0x3a0 [ 373.747993][T18026] kmem_cache_alloc_noprof+0x87/0x650 [ 373.748012][T18026] ? __netlink_lookup+0xc6/0x8b0 [ 373.748040][T18026] skb_clone+0x212/0x3a0 [ 373.748067][T18026] __netlink_deliver_tap+0x404/0x850 [ 373.748098][T18026] ? netlink_deliver_tap+0x2e/0x1b0 [ 373.748120][T18026] netlink_deliver_tap+0x19c/0x1b0 [ 373.748140][T18026] netlink_unicast+0x7e3/0x9b0 [ 373.748176][T18026] ? __pfx_netlink_unicast+0x10/0x10 [ 373.748205][T18026] ? netlink_sendmsg+0x650/0xb40 [ 373.748223][T18026] ? skb_put+0x11b/0x210 [ 373.748248][T18026] netlink_sendmsg+0x813/0xb40 [ 373.748277][T18026] ? __pfx_netlink_sendmsg+0x10/0x10 [ 373.748300][T18026] ? aa_sock_msg_perm+0xf1/0x1b0 [ 373.748327][T18026] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 373.748352][T18026] ____sys_sendmsg+0x972/0x9f0 [ 373.748384][T18026] ? __pfx_____sys_sendmsg+0x10/0x10 [ 373.748416][T18026] ? import_iovec+0x73/0xa0 [ 373.748439][T18026] ___sys_sendmsg+0x2a5/0x360 [ 373.748468][T18026] ? __pfx____sys_sendmsg+0x10/0x10 [ 373.748526][T18026] ? __fget_files+0x2a/0x420 [ 373.748551][T18026] ? __fget_files+0x3a0/0x420 [ 373.748585][T18026] __x64_sys_sendmsg+0x1bd/0x2a0 [ 373.748611][T18026] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 373.748644][T18026] ? __pfx_ksys_write+0x10/0x10 [ 373.748675][T18026] do_syscall_64+0x14d/0xf80 [ 373.748700][T18026] ? trace_irq_disable+0x3b/0x150 [ 373.748715][T18026] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 373.748733][T18026] ? clear_bhb_loop+0x40/0x90 [ 373.748761][T18026] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 373.748779][T18026] RIP: 0033:0x7f3225d9c819 [ 373.748796][T18026] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 373.748811][T18026] RSP: 002b:00007f3226d1a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 373.748831][T18026] RAX: ffffffffffffffda RBX: 00007f3226015fa0 RCX: 00007f3225d9c819 [ 373.748844][T18026] RDX: 00000000040c0080 RSI: 00002000000002c0 RDI: 0000000000000004 [ 373.748855][T18026] RBP: 00007f3226d1a090 R08: 0000000000000000 R09: 0000000000000000 [ 373.748867][T18026] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 373.748878][T18026] R13: 00007f3226016038 R14: 00007f3226015fa0 R15: 00007ffeb0d5d8f8 [ 373.748907][T18026] [ 373.755030][T18018] bridge0: port 2(bridge_slave_1) entered disabled state [ 373.891372][T18038] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 373.894453][T18018] bridge0: port 1(bridge_slave_0) entered disabled state [ 374.046007][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5060 ms [ 374.054102][ C0] lec:lec_tx_timeout: lec0 [ 374.309918][T18057] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 374.312353][T18018] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 374.336056][T18018] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 374.475944][ T1210] tipc: Node number set to 1912177178 [ 374.533267][ T1103] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.542563][ T1103] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.553536][ T1103] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.593710][ T1103] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.796829][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 375.006963][T18081] block nbd0: server does not support multiple connections per device. [ 375.020386][T18081] block nbd0: shutting down sockets [ 375.172148][T18096] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 375.392180][T18105] bond3: left promiscuous mode [ 375.397551][T18105] wireguard0: left promiscuous mode [ 375.419251][T18105] geneve2: left promiscuous mode [ 375.424609][T18105] geneve2: left allmulticast mode [ 375.430979][T18105] macsec1: left promiscuous mode [ 375.469011][T18105] bridge1: left allmulticast mode [ 375.482869][T18111] bridge_slave_1: left allmulticast mode [ 375.488774][T18111] bridge_slave_1: left promiscuous mode [ 375.494665][T18111] bridge0: port 2(bridge_slave_1) entered disabled state [ 375.522459][T18111] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 375.539483][ T7921] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.557960][ T7921] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.583808][T18116] ip6gretap1: entered allmulticast mode [ 375.593748][ T7921] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.607022][ T7921] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.776272][T18127] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 376.013842][T18141] IPVS: set_ctl: invalid protocol: 46 224.0.0.1:20003 [ 376.408999][T18167] dvmrp1: tun_chr_ioctl cmd 2147767507 [ 377.011764][T18178] syzkaller0: entered promiscuous mode [ 377.020491][T18188] __nla_validate_parse: 68 callbacks suppressed [ 377.020508][T18188] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3477'. [ 377.037144][T18178] syzkaller0: entered allmulticast mode [ 377.114069][T18197] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3478'. [ 377.282798][T18204] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3482'. [ 378.646127][ T1296] lec:lec_start_xmit: lec0:No lecd attached [ 378.717933][T18193] bridge0: port 2(bridge_slave_1) entered disabled state [ 378.725400][T18193] bridge0: port 1(bridge_slave_0) entered disabled state [ 378.808911][T18193] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 378.822632][T18193] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 378.900867][T18193] veth1_vlan: left allmulticast mode [ 378.910207][T18193] macvtap1: left promiscuous mode [ 378.915281][T18193] macvtap1: left allmulticast mode [ 378.922200][T18193] ip6gretap1: left allmulticast mode [ 378.927689][T18197] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3478'. [ 378.937403][T18197] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 379.029845][ T7921] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.049597][ T7921] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.062975][ T7921] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.120100][ T7921] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.283022][T18222] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3488'. [ 379.323380][T18222] : entered promiscuous mode [ 379.480010][T18234] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3492'. [ 379.648342][T18237] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3491'. [ 379.691047][T18239] veth3: entered promiscuous mode [ 379.776465][T18248] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3494'. [ 379.799042][T18243] lo speed is unknown, defaulting to 1000 [ 379.805842][T18247] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3495'. [ 379.860149][T18248] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3494'. [ 380.160625][T18252] syzkaller0: entered promiscuous mode [ 380.166444][T18252] syzkaller0: entered allmulticast mode [ 380.289099][T18267] lo speed is unknown, defaulting to 1000 [ 380.305982][T18243] lo speed is unknown, defaulting to 1000 [ 380.790186][T18267] lo speed is unknown, defaulting to 1000 [ 381.138590][T18298] veth3: entered promiscuous mode [ 381.298797][T18307] lo speed is unknown, defaulting to 1000 [ 381.858557][T18307] lo speed is unknown, defaulting to 1000 [ 382.158555][T18335] netlink: 'syz.3.3521': attribute type 2 has an invalid length. [ 382.436759][T18339] netlink: 'syz.3.3522': attribute type 3 has an invalid length. [ 382.461664][T18339] __nla_validate_parse: 4 callbacks suppressed [ 382.461680][T18339] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3522'. [ 382.835625][T18353] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3524'. [ 382.893365][T18350] veth3: entered promiscuous mode [ 382.920484][T18352] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3526'. [ 383.010762][T18354] bond1: up delay (2) is not a multiple of miimon (80), value rounded to 0 ms [ 383.060429][T18357] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3527'. [ 383.062336][T18354] bond1: entered promiscuous mode [ 383.091128][T18354] 8021q: adding VLAN 0 to HW filter on device bond1 [ 383.278155][T18366] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3531'. [ 383.319179][T18367] netlink: 14 bytes leftover after parsing attributes in process `syz.0.3530'. [ 383.386063][T18366] veth3: entered promiscuous mode [ 383.594743][T18375] syzkaller0: entered promiscuous mode [ 383.612355][T18375] syzkaller0: entered allmulticast mode [ 383.689415][T18375] tipc: Started in network mode [ 383.694339][T18375] tipc: Node identity 322112b0d425, cluster identity 4711 [ 383.708565][T18375] tipc: Enabled bearer , priority 0 [ 383.759595][T18374] tipc: Resetting bearer [ 383.818080][T18374] tipc: Disabling bearer [ 383.917536][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5260 ms [ 383.925615][ C0] lec:lec_tx_timeout: lec0 [ 383.930989][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 384.009772][T18400] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3541'. [ 384.062360][T18408] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3544'. [ 384.327920][T18422] netlink: 72 bytes leftover after parsing attributes in process `syz.3.3549'. [ 384.389228][T18416] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3547'. [ 384.445485][T18435] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 384.458096][T18434] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 384.693045][T18443] veth3: left promiscuous mode [ 385.138169][T18467] veth3: entered promiscuous mode [ 385.343246][T18477] lo speed is unknown, defaulting to 1000 [ 385.535888][T18489] team_slave_1: entered promiscuous mode [ 385.554307][T18489] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 385.643261][T18477] lo speed is unknown, defaulting to 1000 [ 385.773899][T18486] team_slave_1: left promiscuous mode [ 386.009749][T18515] netlink: 'syz.4.3577': attribute type 7 has an invalid length. [ 386.017614][T18515] netlink: 'syz.4.3577': attribute type 8 has an invalid length. [ 386.443104][ T7935] nci: nci_rx_work: unknown MT 0x6 [ 386.590619][T18554] netlink: 'syz.1.3580': attribute type 10 has an invalid length. [ 386.599203][T18554] dummy0: entered promiscuous mode [ 386.608289][T18554] bridge0: port 3(dummy0) entered blocking state [ 386.627052][T18554] bridge0: port 3(dummy0) entered disabled state [ 386.644631][T18554] dummy0: entered allmulticast mode [ 386.699445][T18566] netem: incorrect ge model size [ 386.723736][T18566] netem: change failed [ 386.799424][T18573] syzkaller0: entered promiscuous mode [ 386.805051][T18573] syzkaller0: entered allmulticast mode [ 387.048485][T18583] net veth1_virt_wifi : renamed from virt_wifi0 [ 388.956555][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5020 ms [ 388.964646][ C0] lec:lec_tx_timeout: lec0 [ 389.296573][T18529] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 389.494175][T18616] netlink: 'syz.1.3601': attribute type 1 has an invalid length. [ 389.549770][T18616] 8021q: adding VLAN 0 to HW filter on device bond1 [ 389.829757][T18630] bond1: (slave gretap1): making interface the new active one [ 389.865888][T18630] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 389.937098][T18637] __nla_validate_parse: 13 callbacks suppressed [ 389.937118][T18637] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3601'. [ 390.129092][T18636] delete_channel: no stack [ 390.302334][T18637] bond1 (unregistering): (slave gretap1): Releasing active interface [ 390.447560][T18637] bond1 (unregistering): Released all slaves [ 390.895558][T18671] xt_bpf: check failed: parse error [ 391.206960][T18694] x_tables: duplicate underflow at hook 2 [ 391.356105][T18699] syz_tun: entered allmulticast mode [ 391.386847][T18699] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3621'. [ 391.411251][T18699] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3621'. [ 391.484246][T18699] netlink: 68 bytes leftover after parsing attributes in process `syz.3.3621'. [ 391.639308][T18710] netlink: 136 bytes leftover after parsing attributes in process `syz.0.3624'. [ 391.683536][T18714] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3625'. [ 391.942674][T18729] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3629'. [ 393.041548][T18791] xt_bpf: check failed: parse error [ 393.149257][T18797] netlink: 76 bytes leftover after parsing attributes in process `syz.0.3648'. [ 393.160318][T18795] xt_CT: You must specify a L4 protocol and not use inversions on it [ 393.170554][T18795] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.3647'. [ 393.291011][T18808] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3652'. [ 393.503755][T18820] lo speed is unknown, defaulting to 1000 [ 393.515594][T18826] netlink: 'syz.3.3656': attribute type 12 has an invalid length. [ 393.624124][T18833] FAULT_INJECTION: forcing a failure. [ 393.624124][T18833] name failslab, interval 1, probability 0, space 0, times 0 [ 393.639781][T18819] syzkaller0: entered promiscuous mode [ 393.645455][T18833] CPU: 1 UID: 0 PID: 18833 Comm: syz.3.3658 Not tainted syzkaller #0 PREEMPT(full) [ 393.645479][T18833] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 393.645490][T18833] Call Trace: [ 393.645498][T18833] [ 393.645505][T18833] dump_stack_lvl+0xe8/0x150 [ 393.645536][T18833] should_fail_ex+0x412/0x560 [ 393.645568][T18833] should_failslab+0xa8/0x100 [ 393.645594][T18833] __kmalloc_cache_noprof+0x88/0x660 [ 393.645613][T18833] ? take_dentry_name_snapshot+0x4eb/0x500 [ 393.645641][T18833] ? wakeup_source_register+0x5b/0x380 [ 393.645668][T18833] wakeup_source_register+0x5b/0x380 [ 393.645694][T18833] ep_insert+0x1022/0x1a40 [ 393.645726][T18833] ? __pfx_ep_insert+0x10/0x10 [ 393.645756][T18833] ? bpf_lsm_capable+0x9/0x20 [ 393.645789][T18833] do_epoll_ctl+0x7f4/0xe80 [ 393.645824][T18833] __x64_sys_epoll_ctl+0x165/0x1b0 [ 393.645845][T18833] ? __pfx___x64_sys_epoll_ctl+0x10/0x10 [ 393.645884][T18833] do_syscall_64+0x14d/0xf80 [ 393.645909][T18833] ? trace_irq_disable+0x3b/0x150 [ 393.645924][T18833] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 393.645942][T18833] ? clear_bhb_loop+0x40/0x90 [ 393.645964][T18833] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 393.645982][T18833] RIP: 0033:0x7f4356b9c819 [ 393.645999][T18833] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 393.646015][T18833] RSP: 002b:00007f4357a7a028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 393.646034][T18833] RAX: ffffffffffffffda RBX: 00007f4356e15fa0 RCX: 00007f4356b9c819 [ 393.646047][T18833] RDX: 0000000000000004 RSI: 0000000000000001 RDI: 0000000000000003 [ 393.646057][T18833] RBP: 00007f4357a7a090 R08: 0000000000000000 R09: 0000000000000000 [ 393.646068][T18833] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000002 [ 393.646080][T18833] R13: 00007f4356e16038 R14: 00007f4356e15fa0 R15: 00007ffdcb8d2248 [ 393.646109][T18833] [ 393.646471][T18819] syzkaller0: entered allmulticast mode [ 394.155700][T18820] lo speed is unknown, defaulting to 1000 [ 394.380418][T18852] Bluetooth: MGMT ver 1.23 [ 395.071608][T18881] syzkaller1: entered promiscuous mode [ 395.077415][T18881] syzkaller1: entered allmulticast mode [ 395.244894][T18888] __nla_validate_parse: 5 callbacks suppressed [ 395.244915][T18888] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3677'. [ 395.442575][T18896] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3680'. [ 395.642364][T18909] FAULT_INJECTION: forcing a failure. [ 395.642364][T18909] name failslab, interval 1, probability 0, space 0, times 0 [ 395.667881][T18910] netlink: 'syz.1.3686': attribute type 4 has an invalid length. [ 395.718521][T18909] CPU: 0 UID: 0 PID: 18909 Comm: syz.4.3683 Not tainted syzkaller #0 PREEMPT(full) [ 395.718544][T18909] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 395.718554][T18909] Call Trace: [ 395.718560][T18909] [ 395.718568][T18909] dump_stack_lvl+0xe8/0x150 [ 395.718595][T18909] should_fail_ex+0x412/0x560 [ 395.718623][T18909] should_failslab+0xa8/0x100 [ 395.718648][T18909] __kmalloc_node_track_caller_noprof+0xeb/0x7b0 [ 395.718677][T18909] ? __lock_acquire+0x6b5/0x2cf0 [ 395.718701][T18909] ? __kernfs_new_node+0xa9/0x8e0 [ 395.718731][T18909] kstrdup+0x42/0x100 [ 395.718755][T18909] __kernfs_new_node+0xa9/0x8e0 [ 395.718778][T18909] ? arch_stack_walk+0xfb/0x150 [ 395.718807][T18909] ? __lock_acquire+0x6b5/0x2cf0 [ 395.718829][T18909] ? __pfx___kernfs_new_node+0x10/0x10 [ 395.718855][T18909] ? kernfs_root+0x1c/0x230 [ 395.718884][T18909] ? kernfs_root+0x1c/0x230 [ 395.718908][T18909] ? kernfs_root+0x1c/0x230 [ 395.718931][T18909] ? kernfs_root+0x1c/0x230 [ 395.718960][T18909] kernfs_new_node+0x102/0x210 [ 395.718992][T18909] kernfs_create_dir_ns+0x44/0x130 [ 395.719014][T18909] sysfs_create_dir_ns+0x12f/0x2a0 [ 395.719041][T18909] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 395.719066][T18909] ? do_raw_spin_unlock+0xf5/0x210 [ 395.719089][T18909] kobject_add_internal+0x62b/0xd00 [ 395.719116][T18909] kobject_add+0x163/0x240 [ 395.719138][T18909] ? __pfx_kobject_add+0x10/0x10 [ 395.719156][T18909] ? do_raw_spin_unlock+0xf5/0x210 [ 395.719179][T18909] ? get_device_parent+0x366/0x3a0 [ 395.719205][T18909] device_add+0x408/0xb70 [ 395.719226][T18909] ? device_initialize+0x26a/0x460 [ 395.719249][T18909] wakeup_source_sysfs_add+0x1d3/0x2c0 [ 395.719277][T18909] wakeup_source_register+0x18a/0x380 [ 395.719304][T18909] ep_insert+0x1022/0x1a40 [ 395.719335][T18909] ? __pfx_ep_insert+0x10/0x10 [ 395.719364][T18909] ? bpf_lsm_capable+0x9/0x20 [ 395.719397][T18909] do_epoll_ctl+0x7f4/0xe80 [ 395.719431][T18909] __x64_sys_epoll_ctl+0x165/0x1b0 [ 395.719452][T18909] ? __pfx___x64_sys_epoll_ctl+0x10/0x10 [ 395.719481][T18909] do_syscall_64+0x14d/0xf80 [ 395.719504][T18909] ? trace_irq_disable+0x3b/0x150 [ 395.719520][T18909] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 395.719538][T18909] ? clear_bhb_loop+0x40/0x90 [ 395.719564][T18909] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 395.719581][T18909] RIP: 0033:0x7f01f099c819 [ 395.719598][T18909] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 395.719612][T18909] RSP: 002b:00007f01f187d028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 395.719632][T18909] RAX: ffffffffffffffda RBX: 00007f01f0c15fa0 RCX: 00007f01f099c819 [ 395.719644][T18909] RDX: 0000000000000004 RSI: 0000000000000001 RDI: 0000000000000003 [ 395.719654][T18909] RBP: 00007f01f187d090 R08: 0000000000000000 R09: 0000000000000000 [ 395.719665][T18909] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000002 [ 395.719682][T18909] R13: 00007f01f0c16038 R14: 00007f01f0c15fa0 R15: 00007ffe0684aef8 [ 395.719711][T18909] [ 395.719910][T18909] kobject: kobject_add_internal failed for wakeup13 (error: -12 parent: wakeup) [ 395.735574][T18914] lo speed is unknown, defaulting to 1000 [ 395.884005][T18922] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3686'. [ 396.372086][T18933] lec:lec_vcc_attach: copy from user failed for 28 bytes [ 396.413348][T18938] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3688'. [ 396.435008][T18930] veth3: entered promiscuous mode [ 396.477736][T18914] lo speed is unknown, defaulting to 1000 [ 396.485711][T18939] lo speed is unknown, defaulting to 1000 [ 396.630820][T18945] netlink: 'syz.3.3691': attribute type 1 has an invalid length. [ 396.649108][T18954] openvswitch: netlink: IP tunnel dst address not specified [ 396.659711][T18955] openvswitch: netlink: IP tunnel dst address not specified [ 396.749456][T18945] 8021q: adding VLAN 0 to HW filter on device bond1 [ 396.854520][T18950] bond1: (slave veth5): Enslaving as an active interface with a down link [ 396.864682][ T5487] veth1_macvtap: left promiscuous mode [ 397.263088][T18939] lo speed is unknown, defaulting to 1000 [ 397.501160][T18974] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3699'. [ 397.573681][T18980] netlink: 80 bytes leftover after parsing attributes in process `syz.3.3700'. [ 397.971404][T18992] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3701'. [ 398.032300][T18995] netlink: 'syz.4.3702': attribute type 22 has an invalid length. [ 398.059229][T18995] netlink: 'syz.4.3702': attribute type 1 has an invalid length. [ 398.069990][T18995] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3702'. [ 398.158562][T18997] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3703'. [ 398.267558][T19000] veth7: entered promiscuous mode [ 398.611543][T19033] vlan2: entered promiscuous mode [ 398.624754][T19033] dummy0: entered promiscuous mode [ 398.791387][T19043] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 398.956457][T19056] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3712'. [ 399.212350][T19060] veth3: entered promiscuous mode [ 399.291365][T19070] veth3: entered promiscuous mode [ 399.388858][T19080] netlink: 'syz.0.3721': attribute type 1 has an invalid length. [ 399.425194][T19082] netlink: 'syz.1.3722': attribute type 4 has an invalid length. [ 399.439627][T19082] netlink: 'syz.1.3722': attribute type 4 has an invalid length. [ 399.820202][T19095] netlink: 'syz.3.3725': attribute type 1 has an invalid length. [ 399.849687][ T5897] IPVS: starting estimator thread 0... [ 399.941377][T19086] sock: sock_timestamping_bind_phc: sock not bind to device [ 399.956917][T19096] IPVS: using max 38 ests per chain, 91200 per kthread [ 400.025976][T19106] Cannot find set identified by id 0 to match [ 400.172558][T19115] syzkaller0: entered promiscuous mode [ 400.189164][T19115] syzkaller0: entered allmulticast mode [ 400.253307][T19117] wg1: entered allmulticast mode [ 400.254342][ T1103] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 400.266916][ T1103] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 400.275589][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 400.283047][T19117] netlink: 'syz.2.3732': attribute type 1 has an invalid length. [ 400.284569][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 400.394439][T19128] syzkaller0: entered promiscuous mode [ 400.408161][T19128] syzkaller0: entered allmulticast mode [ 400.459023][T19117] bond1: (slave bridge2): making interface the new active one [ 400.469427][T19117] bond1: (slave bridge2): Enslaving as an active interface with an up link [ 401.001300][T19145] __nla_validate_parse: 3 callbacks suppressed [ 401.001320][T19145] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3739'. [ 401.038634][T19147] lo speed is unknown, defaulting to 1000 [ 401.175723][T19152] netlink: 'syz.1.3742': attribute type 1 has an invalid length. [ 401.192368][T19154] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3740'. [ 401.370809][T19152] 8021q: adding VLAN 0 to HW filter on device bond1 [ 401.750260][T19158] bond1: (slave bridge1): making interface the new active one [ 401.759599][T19158] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 401.818986][T19147] lo speed is unknown, defaulting to 1000 [ 402.007404][T19175] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3746'. [ 402.014437][T19178] netlink: 88 bytes leftover after parsing attributes in process `syz.0.3748'. [ 402.036923][T19179] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3745'. [ 402.058947][T19180] netlink: 'syz.4.3746': attribute type 1 has an invalid length. [ 402.067335][T19180] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3746'. [ 402.165968][T19166] veth7: entered promiscuous mode [ 402.405624][T19189] netlink: 'syz.1.3750': attribute type 4 has an invalid length. [ 402.422879][T19176] lo speed is unknown, defaulting to 1000 [ 402.660699][T19195] pim6reg1: entered promiscuous mode [ 402.677822][T19195] pim6reg1: entered allmulticast mode [ 402.726965][T19195] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3753'. [ 402.810233][T19176] lo speed is unknown, defaulting to 1000 [ 403.431659][ T5939] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 403.507092][ T5939] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 403.605827][T19217] FAULT_INJECTION: forcing a failure. [ 403.605827][T19217] name failslab, interval 1, probability 0, space 0, times 0 [ 403.625989][T19217] CPU: 0 UID: 0 PID: 19217 Comm: syz.0.3758 Not tainted syzkaller #0 PREEMPT(full) [ 403.626015][T19217] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 403.626027][T19217] Call Trace: [ 403.626034][T19217] [ 403.626042][T19217] dump_stack_lvl+0xe8/0x150 [ 403.626080][T19217] should_fail_ex+0x412/0x560 [ 403.626111][T19217] should_failslab+0xa8/0x100 [ 403.626134][T19217] ? __kernfs_new_node+0xe9/0x8e0 [ 403.626161][T19217] kmem_cache_alloc_noprof+0x87/0x650 [ 403.626179][T19217] ? kasan_save_track+0x3e/0x80 [ 403.626197][T19217] ? __kasan_slab_alloc+0x6c/0x80 [ 403.626215][T19217] ? __kernfs_new_node+0xe9/0x8e0 [ 403.626241][T19217] ? kernfs_create_link+0xa7/0x200 [ 403.626266][T19217] __kernfs_new_node+0xe9/0x8e0 [ 403.626299][T19217] ? __pfx___kernfs_new_node+0x10/0x10 [ 403.626326][T19217] ? kernfs_root+0x1c/0x230 [ 403.626357][T19217] ? kernfs_root+0x1c/0x230 [ 403.626381][T19217] ? kernfs_root+0x1c/0x230 [ 403.626403][T19217] ? kernfs_root+0x1c/0x230 [ 403.626433][T19217] kernfs_new_node+0x102/0x210 [ 403.626464][T19217] __kernfs_create_file+0x4b/0x2e0 [ 403.626492][T19217] sysfs_add_file_mode_ns+0x238/0x300 [ 403.626519][T19217] internal_create_group+0x673/0x1180 [ 403.626556][T19217] ? __pfx_internal_create_group+0x10/0x10 [ 403.626577][T19217] ? kernfs_add_one+0x477/0x5c0 [ 403.626606][T19217] ? up_write+0x1ab/0x410 [ 403.626627][T19217] sysfs_create_groups+0x59/0x120 [ 403.626654][T19217] device_add_attrs+0x1bf/0x5b0 [ 403.626675][T19217] ? kernfs_put+0x40e/0x470 [ 403.626701][T19217] ? __pfx_device_add_attrs+0x10/0x10 [ 403.626720][T19217] ? kobject_put+0x516/0x560 [ 403.626744][T19217] ? device_add_class_symlinks+0x21f/0x240 [ 403.626769][T19217] device_add+0x496/0xb70 [ 403.626790][T19217] ? device_initialize+0x26a/0x460 [ 403.626814][T19217] wakeup_source_sysfs_add+0x1d3/0x2c0 [ 403.626841][T19217] wakeup_source_register+0x18a/0x380 [ 403.626867][T19217] ep_insert+0x1022/0x1a40 [ 403.626899][T19217] ? __pfx_ep_insert+0x10/0x10 [ 403.626927][T19217] ? bpf_lsm_capable+0x9/0x20 [ 403.626959][T19217] do_epoll_ctl+0x7f4/0xe80 [ 403.626993][T19217] __x64_sys_epoll_ctl+0x165/0x1b0 [ 403.627012][T19217] ? __pfx___x64_sys_epoll_ctl+0x10/0x10 [ 403.627039][T19217] do_syscall_64+0x14d/0xf80 [ 403.627062][T19217] ? trace_irq_disable+0x3b/0x150 [ 403.627084][T19217] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 403.627102][T19217] ? clear_bhb_loop+0x40/0x90 [ 403.627124][T19217] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 403.627141][T19217] RIP: 0033:0x7f50a579c819 [ 403.627158][T19217] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 403.627173][T19217] RSP: 002b:00007f50a663b028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 403.627192][T19217] RAX: ffffffffffffffda RBX: 00007f50a5a15fa0 RCX: 00007f50a579c819 [ 403.627204][T19217] RDX: 0000000000000004 RSI: 0000000000000001 RDI: 0000000000000003 [ 403.627214][T19217] RBP: 00007f50a663b090 R08: 0000000000000000 R09: 0000000000000000 [ 403.627224][T19217] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000002 [ 403.627235][T19217] R13: 00007f50a5a16038 R14: 00007f50a5a15fa0 R15: 00007ffe15850f88 [ 403.627267][T19217] [ 404.001555][T19225] netlink: 'syz.2.3762': attribute type 58 has an invalid length. [ 404.009589][T19225] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3762'. [ 404.084526][T19222] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3759'. [ 404.388173][T19240] netlink: zone id is out of range [ 404.420679][T19240] netlink: zone id is out of range [ 404.445047][T19240] netlink: zone id is out of range [ 404.455089][T19240] netlink: zone id is out of range [ 404.475342][T19240] netlink: zone id is out of range [ 404.511917][T19240] netlink: zone id is out of range [ 404.548754][T19240] netlink: zone id is out of range [ 404.569193][T19240] netlink: zone id is out of range [ 404.628078][T19259] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3767'. [ 405.064842][T19273] macsec1: entered promiscuous mode [ 405.096137][T19273] erspan0: entered promiscuous mode [ 405.120547][T19273] erspan0: left promiscuous mode [ 406.145926][T19335] __nla_validate_parse: 3 callbacks suppressed [ 406.145945][T19335] netlink: 16146 bytes leftover after parsing attributes in process `syz.4.3783'. [ 406.513540][T19361] vlan2: entered promiscuous mode [ 406.518902][T19361] geneve1: entered promiscuous mode [ 406.524311][T19361] vlan2: entered allmulticast mode [ 406.543104][T19361] geneve1: entered allmulticast mode [ 407.400970][T19390] netlink: 'syz.1.3796': attribute type 64 has an invalid length. [ 407.841614][T19384] bond2: entered promiscuous mode [ 407.847413][T19384] bond2: entered allmulticast mode [ 407.854184][T19384] 8021q: adding VLAN 0 to HW filter on device bond2 [ 407.947783][T19394] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3797'. [ 408.011546][T19401] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3800'. [ 408.135635][T19403] lo speed is unknown, defaulting to 1000 [ 408.497600][T19430] netlink: 48 bytes leftover after parsing attributes in process `syz.1.3811'. [ 408.764032][T19435] vlan2: left promiscuous mode [ 408.769407][T19435] geneve1: left promiscuous mode [ 408.800575][T19435] vlan2: left allmulticast mode [ 408.808448][T19435] geneve1: left allmulticast mode [ 408.816029][T19450] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3817'. [ 409.125923][T19403] lo speed is unknown, defaulting to 1000 [ 409.378648][T19473] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3825'. [ 410.020956][T19507] netlink: 'syz.2.3835': attribute type 21 has an invalid length. [ 410.029155][T19507] netlink: 128 bytes leftover after parsing attributes in process `syz.2.3835'. [ 410.038502][T19507] netlink: 'syz.2.3835': attribute type 5 has an invalid length. [ 410.046425][T19507] netlink: 'syz.2.3835': attribute type 6 has an invalid length. [ 410.054397][T19507] netlink: 3 bytes leftover after parsing attributes in process `syz.2.3835'. [ 410.070256][T19507] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3835'. [ 410.143208][T19514] netlink: 'syz.1.3838': attribute type 1 has an invalid length. [ 410.183948][T19516] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3836'. [ 410.253775][T19514] 8021q: adding VLAN 0 to HW filter on device bond3 [ 410.343076][T19519] bond0: (slave wlan1): Releasing backup interface [ 410.399298][T19521] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 410.408925][T19521] bond3: (slave batadv1): making interface the new active one [ 410.417918][T19521] bond3: (slave batadv1): Enslaving as an active interface with an up link [ 410.589567][T19535] netlink: 'syz.0.3842': attribute type 142 has an invalid length. [ 410.788119][T19539] net_ratelimit: 382 callbacks suppressed [ 410.788163][T19539] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 410.803186][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 411.011691][ T30] audit: type=1800 audit(1775157569.358:6): pid=19545 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.3845" name="e" dev="tmpfs" ino=556 res=0 errno=0 [ 411.024963][T19552] netlink: 'syz.2.3847': attribute type 30 has an invalid length. [ 411.280710][ T1103] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 411.289154][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 411.299444][ T65] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 411.308318][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 411.319114][T19565] ip6_vti0: entered promiscuous mode [ 411.339301][T19565] ip6_vti0: entered allmulticast mode [ 411.778669][T19585] __nla_validate_parse: 9 callbacks suppressed [ 411.778689][T19585] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3854'. [ 411.927757][T19591] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3856'. [ 411.948500][T19591] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3856'. [ 412.460555][T19620] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 412.476639][T19620] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3865'. [ 413.064203][T19653] lo speed is unknown, defaulting to 1000 [ 413.081087][T19667] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3882'. [ 413.090648][T19667] openvswitch: netlink: Invalid VLAN frame [ 413.101220][T19667] netlink: 'syz.2.3882': attribute type 1 has an invalid length. [ 413.264257][T19675] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3884'. [ 413.278711][T19677] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3882'. [ 413.299275][T19670] 8021q: adding VLAN 0 to HW filter on device bond3 [ 413.317657][T19670] bond2: (slave bond3): making interface the new active one [ 413.327763][T19670] bond2: (slave bond3): Enslaving as an active interface with an up link [ 413.361645][T19667] bond2: (slave gretap2): Enslaving as a backup interface with an up link [ 413.391535][T19677] 8021q: adding VLAN 0 to HW filter on device bond2 [ 413.416903][T19653] lo speed is unknown, defaulting to 1000 [ 413.475428][T19684] bridge2: entered promiscuous mode [ 413.630647][T19696] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3888'. [ 413.867431][T19709] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3887'. [ 413.884658][T19708] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3891'. [ 413.960580][T19711] tipc: Started in network mode [ 413.967773][T19711] tipc: Node identity 6e5f73ed313a, cluster identity 4711 [ 413.975194][T19711] tipc: Enabled bearer , priority 0 [ 414.202870][T19711] tipc: Disabling bearer [ 414.293987][T19721] veth1_macvtap: left promiscuous mode [ 414.416084][T19688] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 414.421694][T19727] dummy0: left allmulticast mode [ 414.447169][T19727] dummy0: left promiscuous mode [ 414.452315][T19727] bridge0: port 3(dummy0) entered disabled state [ 414.489531][T19729] xt_l2tp: wrong L2TP version: 0 [ 414.525278][T19727] bridge_slave_0: left allmulticast mode [ 414.532876][T19727] bridge_slave_0: left promiscuous mode [ 414.547820][T19734] openvswitch: netlink: Key 0 has unexpected len 4 expected 0 [ 414.560804][T19727] bridge0: port 1(bridge_slave_0) entered disabled state [ 414.572433][T19727] bridge_slave_1: left allmulticast mode [ 414.579212][T19727] bridge_slave_1: left promiscuous mode [ 414.585142][T19727] bridge0: port 2(bridge_slave_1) entered disabled state [ 414.597941][T19727] bond0: (slave bond_slave_0): Releasing backup interface [ 414.610470][T19727] bond0: (slave bond_slave_1): Releasing backup interface [ 414.629389][T19727] team0: Port device team_slave_0 removed [ 414.648580][T19727] team0: Port device team_slave_1 removed [ 414.657924][T19727] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 414.687857][T19727] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 414.705871][T19727] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 414.724822][T19728] netlink: 'syz.3.3897': attribute type 6 has an invalid length. [ 414.842530][ T7921] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 414.865668][ T7921] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 414.897652][T19752] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 414.898638][T19751] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 415.078053][T19761] netlink: 'syz.0.3906': attribute type 8 has an invalid length. [ 415.360713][T19779] netlink: 'syz.1.3912': attribute type 10 has an invalid length. [ 415.383954][T19779] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 415.596736][ T5823] Bluetooth: hci0: command 0x0c20 tx timeout [ 415.617714][T19795] FAULT_INJECTION: forcing a failure. [ 415.617714][T19795] name failslab, interval 1, probability 0, space 0, times 0 [ 415.634997][T19795] CPU: 0 UID: 0 PID: 19795 Comm: syz.3.3917 Not tainted syzkaller #0 PREEMPT(full) [ 415.635021][T19795] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 415.635032][T19795] Call Trace: [ 415.635039][T19795] [ 415.635046][T19795] dump_stack_lvl+0xe8/0x150 [ 415.635076][T19795] should_fail_ex+0x412/0x560 [ 415.635107][T19795] should_failslab+0xa8/0x100 [ 415.635132][T19795] __kmalloc_cache_noprof+0x88/0x660 [ 415.635154][T19795] ? kobject_uevent_env+0x28c/0x9e0 [ 415.635173][T19795] ? __pfx_bus_add_device+0x10/0x10 [ 415.635195][T19795] ? __pfx_dev_uevent_name+0x10/0x10 [ 415.635211][T19795] kobject_uevent_env+0x28c/0x9e0 [ 415.635240][T19795] device_add+0x557/0xb70 [ 415.635267][T19795] wakeup_source_sysfs_add+0x1d3/0x2c0 [ 415.635295][T19795] wakeup_source_register+0x18a/0x380 [ 415.635321][T19795] ep_insert+0x1022/0x1a40 [ 415.635353][T19795] ? __pfx_ep_insert+0x10/0x10 [ 415.635382][T19795] ? bpf_lsm_capable+0x9/0x20 [ 415.635415][T19795] do_epoll_ctl+0x7f4/0xe80 [ 415.635447][T19795] __x64_sys_epoll_ctl+0x165/0x1b0 [ 415.635468][T19795] ? __pfx___x64_sys_epoll_ctl+0x10/0x10 [ 415.635494][T19795] do_syscall_64+0x14d/0xf80 [ 415.635518][T19795] ? trace_irq_disable+0x3b/0x150 [ 415.635534][T19795] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 415.635553][T19795] ? clear_bhb_loop+0x40/0x90 [ 415.635576][T19795] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 415.635594][T19795] RIP: 0033:0x7f4356b9c819 [ 415.635612][T19795] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 415.635626][T19795] RSP: 002b:00007f4357a7a028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 415.635645][T19795] RAX: ffffffffffffffda RBX: 00007f4356e15fa0 RCX: 00007f4356b9c819 [ 415.635658][T19795] RDX: 0000000000000004 RSI: 0000000000000001 RDI: 0000000000000003 [ 415.635677][T19795] RBP: 00007f4357a7a090 R08: 0000000000000000 R09: 0000000000000000 [ 415.635688][T19795] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000002 [ 415.635699][T19795] R13: 00007f4356e16038 R14: 00007f4356e15fa0 R15: 00007ffdcb8d2248 [ 415.635729][T19795] [ 416.212782][T19816] IPVS: set_ctl: invalid protocol: 255 172.20.20.187:20004 [ 416.319182][T19822] netlink: 'syz.3.3926': attribute type 1 has an invalid length. [ 416.395003][T19827] sctp: [Deprecated]: syz.4.3929 (pid 19827) Use of int in maxseg socket option. [ 416.395003][T19827] Use struct sctp_assoc_value instead [ 416.397494][ T7924] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 416.418711][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 416.446226][T19822] 8021q: adding VLAN 0 to HW filter on device bond2 [ 416.792411][T19855] FAULT_INJECTION: forcing a failure. [ 416.792411][T19855] name failslab, interval 1, probability 0, space 0, times 0 [ 416.815894][T19858] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 416.816790][T19855] CPU: 1 UID: 0 PID: 19855 Comm: syz.2.3935 Not tainted syzkaller #0 PREEMPT(full) [ 416.816813][T19855] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 416.816824][T19855] Call Trace: [ 416.816831][T19855] [ 416.816838][T19855] dump_stack_lvl+0xe8/0x150 [ 416.816867][T19855] should_fail_ex+0x412/0x560 [ 416.816896][T19855] should_failslab+0xa8/0x100 [ 416.816919][T19855] ? skb_clone+0x212/0x3a0 [ 416.816941][T19855] kmem_cache_alloc_noprof+0x87/0x650 [ 416.816960][T19855] ? __netlink_lookup+0xc6/0x8b0 [ 416.816986][T19855] skb_clone+0x212/0x3a0 [ 416.817011][T19855] __netlink_deliver_tap+0x404/0x850 [ 416.817041][T19855] ? netlink_deliver_tap+0x2e/0x1b0 [ 416.817066][T19855] netlink_deliver_tap+0x19c/0x1b0 [ 416.817085][T19855] netlink_unicast+0x7e3/0x9b0 [ 416.817118][T19855] ? __pfx_netlink_unicast+0x10/0x10 [ 416.817146][T19855] ? netlink_sendmsg+0x650/0xb40 [ 416.817163][T19855] ? skb_put+0x11b/0x210 [ 416.817185][T19855] netlink_sendmsg+0x813/0xb40 [ 416.817213][T19855] ? __pfx_netlink_sendmsg+0x10/0x10 [ 416.817234][T19855] ? aa_sock_msg_perm+0xf1/0x1b0 [ 416.817261][T19855] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 416.817283][T19855] ____sys_sendmsg+0x972/0x9f0 [ 416.817314][T19855] ? __pfx_____sys_sendmsg+0x10/0x10 [ 416.817344][T19855] ? import_iovec+0x73/0xa0 [ 416.817366][T19855] ___sys_sendmsg+0x2a5/0x360 [ 416.817387][T19855] ? get_pid_task+0x20/0x1f0 [ 416.817407][T19855] ? __pfx____sys_sendmsg+0x10/0x10 [ 416.817449][T19855] ? sb_end_write+0xe9/0x1c0 [ 416.817483][T19855] ? __pfx_vfs_write+0x10/0x10 [ 416.817510][T19855] __x64_sys_sendmsg+0x1bd/0x2a0 [ 416.817535][T19855] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 416.817566][T19855] ? __pfx_ksys_write+0x10/0x10 [ 416.817600][T19855] do_syscall_64+0x14d/0xf80 [ 416.817624][T19855] ? trace_irq_disable+0x3b/0x150 [ 416.817638][T19855] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 416.817655][T19855] ? clear_bhb_loop+0x40/0x90 [ 416.817677][T19855] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 416.817693][T19855] RIP: 0033:0x7f3225d9c819 [ 416.817710][T19855] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 416.817724][T19855] RSP: 002b:00007f3226d1a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 416.817743][T19855] RAX: ffffffffffffffda RBX: 00007f3226015fa0 RCX: 00007f3225d9c819 [ 416.817755][T19855] RDX: 0000000000000030 RSI: 0000200000000100 RDI: 0000000000000003 [ 416.817766][T19855] RBP: 00007f3226d1a090 R08: 0000000000000000 R09: 0000000000000000 [ 416.817777][T19855] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 416.817786][T19855] R13: 00007f3226016038 R14: 00007f3226015fa0 R15: 00007ffeb0d5d8f8 [ 416.817814][T19855] [ 417.014620][T19862] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 417.053791][ T7924] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 417.121813][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 417.446947][T19896] __nla_validate_parse: 9 callbacks suppressed [ 417.446966][T19896] netlink: 108 bytes leftover after parsing attributes in process `syz.0.3945'. [ 417.585537][T19901] FAULT_INJECTION: forcing a failure. [ 417.585537][T19901] name failslab, interval 1, probability 0, space 0, times 0 [ 417.606199][T19901] CPU: 0 UID: 0 PID: 19901 Comm: syz.3.3948 Not tainted syzkaller #0 PREEMPT(full) [ 417.606224][T19901] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 417.606234][T19901] Call Trace: [ 417.606242][T19901] [ 417.606250][T19901] dump_stack_lvl+0xe8/0x150 [ 417.606280][T19901] should_fail_ex+0x412/0x560 [ 417.606311][T19901] should_failslab+0xa8/0x100 [ 417.606336][T19901] __kmalloc_noprof+0xe8/0x760 [ 417.606358][T19901] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 417.606390][T19901] genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 417.606415][T19901] ? is_bpf_text_address+0x26/0x2b0 [ 417.606441][T19901] genl_family_rcv_msg_doit+0xd9/0x330 [ 417.606466][T19901] ? __asan_memcpy+0x40/0x70 [ 417.606490][T19901] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 417.606517][T19901] ? apparmor_capable+0x126/0x170 [ 417.606537][T19901] ? bpf_lsm_capable+0x9/0x20 [ 417.606560][T19901] ? security_capable+0x7e/0x2c0 [ 417.606592][T19901] genl_rcv_msg+0x61c/0x7a0 [ 417.606622][T19901] ? __pfx_genl_rcv_msg+0x10/0x10 [ 417.606644][T19901] ? __pfx_devlink_nl_pre_doit_dev_lock+0x10/0x10 [ 417.606662][T19901] ? __pfx_devlink_nl_reload_doit+0x10/0x10 [ 417.606680][T19901] ? __pfx_devlink_nl_post_doit_dev_lock+0x10/0x10 [ 417.606699][T19901] ? __lock_acquire+0x6b5/0x2cf0 [ 417.606734][T19901] netlink_rcv_skb+0x232/0x4b0 [ 417.606754][T19901] ? __pfx_genl_rcv_msg+0x10/0x10 [ 417.606787][T19901] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 417.606824][T19901] ? down_read+0x272/0x2e0 [ 417.606839][T19901] ? genl_rcv+0xd/0x40 [ 417.606864][T19901] genl_rcv+0x28/0x40 [ 417.606885][T19901] netlink_unicast+0x80f/0x9b0 [ 417.606920][T19901] ? __pfx_netlink_unicast+0x10/0x10 [ 417.606949][T19901] ? netlink_sendmsg+0x650/0xb40 [ 417.606966][T19901] ? skb_put+0x11b/0x210 [ 417.606991][T19901] netlink_sendmsg+0x813/0xb40 [ 417.607020][T19901] ? __pfx_netlink_sendmsg+0x10/0x10 [ 417.607043][T19901] ? aa_sock_msg_perm+0xf1/0x1b0 [ 417.607071][T19901] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 417.607094][T19901] ____sys_sendmsg+0x972/0x9f0 [ 417.607126][T19901] ? __pfx_____sys_sendmsg+0x10/0x10 [ 417.607158][T19901] ? import_iovec+0x73/0xa0 [ 417.607181][T19901] ___sys_sendmsg+0x2a5/0x360 [ 417.607202][T19901] ? get_pid_task+0x20/0x1f0 [ 417.607224][T19901] ? __pfx____sys_sendmsg+0x10/0x10 [ 417.607267][T19901] ? sb_end_write+0xe9/0x1c0 [ 417.607304][T19901] ? __pfx_vfs_write+0x10/0x10 [ 417.607333][T19901] __x64_sys_sendmsg+0x1bd/0x2a0 [ 417.607359][T19901] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 417.607392][T19901] ? __pfx_ksys_write+0x10/0x10 [ 417.607423][T19901] do_syscall_64+0x14d/0xf80 [ 417.607447][T19901] ? trace_irq_disable+0x3b/0x150 [ 417.607462][T19901] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 417.607481][T19901] ? clear_bhb_loop+0x40/0x90 [ 417.607503][T19901] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 417.607521][T19901] RIP: 0033:0x7f4356b9c819 [ 417.607538][T19901] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 417.607553][T19901] RSP: 002b:00007f4357a7a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 417.607573][T19901] RAX: ffffffffffffffda RBX: 00007f4356e15fa0 RCX: 00007f4356b9c819 [ 417.607586][T19901] RDX: 0000000000000030 RSI: 0000200000000100 RDI: 0000000000000003 [ 417.607597][T19901] RBP: 00007f4357a7a090 R08: 0000000000000000 R09: 0000000000000000 [ 417.607608][T19901] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 417.607618][T19901] R13: 00007f4356e16038 R14: 00007f4356e15fa0 R15: 00007ffdcb8d2248 [ 417.607648][T19901] [ 417.957002][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 418.236885][T19912] netlink: 'syz.0.3947': attribute type 1 has an invalid length. [ 418.545131][T19915] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3951'. [ 418.617633][T19916] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3951'. [ 418.846271][T19930] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3958'. [ 418.894416][T19935] FAULT_INJECTION: forcing a failure. [ 418.894416][T19935] name failslab, interval 1, probability 0, space 0, times 0 [ 418.930932][T19935] CPU: 1 UID: 0 PID: 19935 Comm: syz.3.3959 Not tainted syzkaller #0 PREEMPT(full) [ 418.930959][T19935] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 418.930971][T19935] Call Trace: [ 418.930978][T19935] [ 418.930986][T19935] dump_stack_lvl+0xe8/0x150 [ 418.931016][T19935] should_fail_ex+0x412/0x560 [ 418.931048][T19935] should_failslab+0xa8/0x100 [ 418.931074][T19935] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 418.931096][T19935] ? __alloc_skb+0x1d0/0x7d0 [ 418.931115][T19935] ? __local_bh_enable_ip+0xd0/0x130 [ 418.931143][T19935] __alloc_skb+0x1d0/0x7d0 [ 418.931163][T19935] ? netlink_ack_tlv_len+0x6c/0x210 [ 418.931185][T19935] netlink_ack+0x146/0xa50 [ 418.931203][T19935] ? __pfx_genl_rcv_msg+0x10/0x10 [ 418.931225][T19935] ? __pfx_devlink_nl_pre_doit_dev_lock+0x10/0x10 [ 418.931244][T19935] ? __pfx_devlink_nl_post_doit_dev_lock+0x10/0x10 [ 418.931263][T19935] ? __lock_acquire+0x6b5/0x2cf0 [ 418.931297][T19935] netlink_rcv_skb+0x2b6/0x4b0 [ 418.931318][T19935] ? __pfx_genl_rcv_msg+0x10/0x10 [ 418.931351][T19935] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 418.931387][T19935] ? down_read+0x272/0x2e0 [ 418.931403][T19935] ? genl_rcv+0xd/0x40 [ 418.931428][T19935] genl_rcv+0x28/0x40 [ 418.931449][T19935] netlink_unicast+0x80f/0x9b0 [ 418.931485][T19935] ? __pfx_netlink_unicast+0x10/0x10 [ 418.931514][T19935] ? netlink_sendmsg+0x650/0xb40 [ 418.931532][T19935] ? skb_put+0x11b/0x210 [ 418.931557][T19935] netlink_sendmsg+0x813/0xb40 [ 418.931586][T19935] ? __pfx_netlink_sendmsg+0x10/0x10 [ 418.931609][T19935] ? aa_sock_msg_perm+0xf1/0x1b0 [ 418.931636][T19935] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 418.931660][T19935] ____sys_sendmsg+0x972/0x9f0 [ 418.931693][T19935] ? __pfx_____sys_sendmsg+0x10/0x10 [ 418.931725][T19935] ? import_iovec+0x73/0xa0 [ 418.931749][T19935] ___sys_sendmsg+0x2a5/0x360 [ 418.931770][T19935] ? get_pid_task+0x20/0x1f0 [ 418.931792][T19935] ? __pfx____sys_sendmsg+0x10/0x10 [ 418.931836][T19935] ? sb_end_write+0xe9/0x1c0 [ 418.931873][T19935] ? __pfx_vfs_write+0x10/0x10 [ 418.931902][T19935] __x64_sys_sendmsg+0x1bd/0x2a0 [ 418.931928][T19935] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 418.931961][T19935] ? __pfx_ksys_write+0x10/0x10 [ 418.931992][T19935] do_syscall_64+0x14d/0xf80 [ 418.932016][T19935] ? trace_irq_disable+0x3b/0x150 [ 418.932031][T19935] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 418.932050][T19935] ? clear_bhb_loop+0x40/0x90 [ 418.932071][T19935] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 418.932089][T19935] RIP: 0033:0x7f4356b9c819 [ 418.932107][T19935] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 418.932123][T19935] RSP: 002b:00007f4357a7a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 418.932143][T19935] RAX: ffffffffffffffda RBX: 00007f4356e15fa0 RCX: 00007f4356b9c819 [ 418.932156][T19935] RDX: 0000000000000030 RSI: 0000200000000100 RDI: 0000000000000003 [ 418.932168][T19935] RBP: 00007f4357a7a090 R08: 0000000000000000 R09: 0000000000000000 [ 418.932179][T19935] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 418.932190][T19935] R13: 00007f4356e16038 R14: 00007f4356e15fa0 R15: 00007ffdcb8d2248 [ 418.932220][T19935] [ 419.370894][T19944] netlink: 'syz.2.3960': attribute type 4 has an invalid length. [ 419.414882][T19944] netlink: 'syz.2.3960': attribute type 4 has an invalid length. [ 419.619562][T19955] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3965'. [ 419.640467][T19962] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3967'. [ 419.774658][T19969] netlink: 312 bytes leftover after parsing attributes in process `syz.3.3969'. [ 419.877236][T19975] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3971'. [ 420.022121][T19982] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3973'. [ 420.287988][T19978] mac80211_hwsim hwsim41 syzkaller0: entered promiscuous mode [ 420.296409][T19978] mac80211_hwsim hwsim41 syzkaller0: entered allmulticast mode [ 420.789180][T20008] IPVS: set_ctl: invalid protocol: 29 224.0.0.1:20001 [ 420.821071][T20008] Bluetooth: MGMT ver 1.23 [ 421.008719][T20014] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3983'. [ 421.090972][T20020] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 421.132443][T20021] veth5: entered allmulticast mode [ 421.159312][T20021] bond4: (slave veth5): Enslaving as an active interface with an up link [ 421.181521][T20014] syzkaller0: entered promiscuous mode [ 421.191199][T20014] syzkaller0: entered allmulticast mode [ 421.929554][T20038] syzkaller0: entered promiscuous mode [ 421.935071][T20038] syzkaller0: entered allmulticast mode [ 422.150136][T20062] nbd: device at index 64 is going down [ 422.159907][ T7921] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 422.168305][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 422.381059][T11334] udevd[11334]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 422.436679][T11334] udevd[11334]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 422.800142][ T7921] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 422.808513][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 424.036459][T20062] syzkaller1: entered promiscuous mode [ 424.042391][T20062] syzkaller1: entered allmulticast mode [ 424.109737][T20086] lo speed is unknown, defaulting to 1000 [ 424.274570][T20095] 8021q: VLANs not supported on ip_vti0 [ 424.458467][T20105] __nla_validate_parse: 4 callbacks suppressed [ 424.458489][T20105] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4009'. [ 424.511982][T20086] lo speed is unknown, defaulting to 1000 [ 424.679579][T20114] netdevsim netdevsim1: Direct firmware load for . failed with error -2 [ 424.690018][T20114] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 425.169158][T20123] netlink: 'syz.4.4012': attribute type 39 has an invalid length. [ 425.550545][T20135] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4018'. [ 425.579182][T20135] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4018'. [ 425.668743][T20135] gretap0: entered promiscuous mode [ 425.706989][T20135] gretap0: left promiscuous mode [ 425.900886][T20142] netlink: 64 bytes leftover after parsing attributes in process `syz.1.4020'. [ 426.020367][T20144] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4021'. [ 426.217339][T20151] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4023'. [ 426.395347][T20152] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4022'. [ 426.838261][T20148] veth3: entered promiscuous mode [ 426.895818][T20169] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4029'. [ 427.088948][T20176] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4033'. [ 427.104908][T20179] syzkaller0: entered promiscuous mode [ 427.110693][T20179] syzkaller0: entered allmulticast mode [ 427.200773][T20186] Unsupported ieee802154 address type: 0 [ 427.344479][T20193] netlink: 'syz.2.4039': attribute type 1 has an invalid length. [ 427.359194][T20194] bond0: (slave bridge0): Releasing backup interface [ 427.389726][T20194] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 427.435728][T20197] erspan1: entered allmulticast mode [ 427.451453][T20193] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4039'. [ 427.506019][T20193] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 427.515062][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 427.927820][ T7921] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 427.936211][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 427.952940][T20196] bridge0: port 1(bridge_slave_0) entered disabled state [ 428.386240][T20196] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 428.421641][T20196] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 428.557927][ T7921] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 428.566422][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 428.682296][T20196] bond1: left promiscuous mode [ 428.692190][T20196] bond2: left promiscuous mode [ 428.697113][T20196] bond2: left allmulticast mode [ 428.750774][ T7929] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 428.777119][ T7929] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 428.786052][ T7929] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 428.851776][ T7929] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 429.084693][T20246] 8021q: adding VLAN 0 to HW filter on device bond6 [ 429.450663][T20266] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 429.640001][T20278] lo speed is unknown, defaulting to 1000 [ 429.756321][T20288] bridge_slave_0: left allmulticast mode [ 429.762980][T20288] bridge_slave_0: left promiscuous mode [ 429.769215][T20288] bridge0: port 1(bridge_slave_0) entered disabled state [ 429.794157][T20275] ipt_ECN: cannot use operation on non-tcp rule [ 429.877014][T20288] bond0: (slave bond_slave_0): Releasing backup interface [ 429.890365][T20288] bond0: (slave bond_slave_1): Releasing backup interface [ 429.900878][T20288] team0: Port device team_slave_0 removed [ 429.910260][T20288] team0: Port device team_slave_1 removed [ 429.917507][T20288] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 429.936140][T20288] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 430.048175][T20288] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 430.082392][T20278] lo speed is unknown, defaulting to 1000 [ 430.173685][T20275] lo speed is unknown, defaulting to 1000 [ 430.319693][T20310] __nla_validate_parse: 4 callbacks suppressed [ 430.319713][T20310] netlink: 207952 bytes leftover after parsing attributes in process `syz.1.4067'. [ 430.425492][T20317] netlink: 'syz.2.4068': attribute type 1 has an invalid length. [ 430.466776][T20317] netlink: 256 bytes leftover after parsing attributes in process `syz.2.4068'. [ 430.631208][T20275] lo speed is unknown, defaulting to 1000 [ 430.646899][T20320] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 431.173804][T20345] bridge_slave_0: left allmulticast mode [ 431.182013][T20345] bridge_slave_0: left promiscuous mode [ 431.192381][T20345] bridge0: port 1(bridge_slave_0) entered disabled state [ 431.345364][T20359] netlink: 'syz.4.4079': attribute type 5 has an invalid length. [ 431.452323][T20363] netlink: 'syz.4.4083': attribute type 1 has an invalid length. [ 431.595241][T20373] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4085'. [ 431.632969][T20373] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4085'. [ 431.928385][T20345] bridge_slave_1: left allmulticast mode [ 431.934087][T20345] bridge_slave_1: left promiscuous mode [ 431.940828][T20345] bridge0: port 2(bridge_slave_1) entered disabled state [ 431.962347][T20345] bond0: (slave bond_slave_0): Releasing backup interface [ 431.983716][T20345] bond0: (slave bond_slave_1): Releasing backup interface [ 432.009272][T20345] team0: Port device team_slave_0 removed [ 432.025509][T20345] team0: Port device team_slave_1 removed [ 432.039129][T20345] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 432.337227][T20396] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4089'. [ 432.519759][T20405] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4089'. [ 432.628945][T20395] bond4: entered promiscuous mode [ 432.675423][T20395] 8021q: adding VLAN 0 to HW filter on device bond4 [ 432.734987][T20404] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4089'. [ 432.747515][T20414] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4093'. [ 432.821039][T20413] dvmrp12: entered allmulticast mode [ 432.832515][T20412] dvmrp12: left allmulticast mode [ 432.949794][T20425] bridge_slave_0: left allmulticast mode [ 432.961240][T20425] bridge_slave_0: left promiscuous mode [ 432.977215][T20425] bridge0: port 1(bridge_slave_0) entered disabled state [ 433.018573][T20425] bridge_slave_1: left allmulticast mode [ 433.031242][T20425] bridge_slave_1: left promiscuous mode [ 433.040949][T20425] bridge0: port 2(bridge_slave_1) entered disabled state [ 433.050224][T20258] net_ratelimit: 1 callbacks suppressed [ 433.050240][T20258] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 433.064322][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 433.085983][T20425] bond0: (slave bond_slave_0): Releasing backup interface [ 433.098134][T20425] bond0: (slave bond_slave_1): Releasing backup interface [ 433.121620][T20425] team0: Port device team_slave_0 removed [ 433.135907][T20425] team0: Port device team_slave_1 removed [ 433.143397][T20425] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 433.152156][T20425] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 433.160617][T20425] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 433.161701][T20420] netlink: 'syz.1.4096': attribute type 16 has an invalid length. [ 433.198642][T20430] mac80211_hwsim hwsim48 ;: renamed from wlan0 [ 433.311965][T20443] netlink: 'syz.0.4102': attribute type 1 has an invalid length. [ 433.561619][T20455] tipc: Failed to remove unknown binding: 66,1,1/0:3736090435/3736090437 [ 433.677055][T20464] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 433.677329][T20254] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 433.701409][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 433.856043][T20474] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4114'. [ 433.892187][T20476] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4113'. [ 433.949427][T20478] lo speed is unknown, defaulting to 1000 [ 433.999799][T20487] netlink: 'syz.2.4118': attribute type 1 has an invalid length. [ 434.194652][T20490] bond5: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 434.249808][T20487] veth5: entered promiscuous mode [ 434.265758][T20487] bond5: (slave veth5): Enslaving as a backup interface with a down link [ 434.281282][T20258] bond5: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 434.297344][T20490] 8021q: adding VLAN 0 to HW filter on device bond5 [ 434.397350][T20258] bond5: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 434.436169][T20478] lo speed is unknown, defaulting to 1000 [ 434.578041][T20496] netlink: 'syz.1.4119': attribute type 10 has an invalid length. [ 434.601516][T20496] team0: Port device geneve0 added [ 434.617693][T20254] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 434.631643][T20254] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 434.642003][T20254] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 434.655162][T20254] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 434.785841][T20515] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 435.092936][T20521] netlink: 'syz.0.4129': attribute type 1 has an invalid length. [ 435.428562][T20541] __nla_validate_parse: 8 callbacks suppressed [ 435.428584][T20541] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4134'. [ 435.622253][T20551] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 435.623925][T20552] netlink: 'syz.2.4139': attribute type 1 has an invalid length. [ 435.813008][T20552] 8021q: adding VLAN 0 to HW filter on device bond6 [ 435.817412][T20554] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4142'. [ 435.830774][T20559] bond6: (slave dummy0): making interface the new active one [ 435.841143][T20559] bond6: (slave dummy0): Enslaving as an active interface with an up link [ 435.873164][T20561] bond6 (unregistering): (slave dummy0): Releasing active interface [ 435.883657][T20561] bond6 (unregistering): Released all slaves [ 436.068358][T20589] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4148'. [ 436.168232][T20575] bond5: Unable to set down delay as MII monitoring is disabled [ 436.179627][T20575] bond5 (unregistering): Released all slaves [ 436.331141][T20600] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4150'. [ 436.340358][T20600] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4150'. [ 436.351253][T20600] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4150'. [ 436.362922][T20600] netlink: 'syz.2.4150': attribute type 2 has an invalid length. [ 436.415673][T20607] netlink: 'syz.2.4150': attribute type 2 has an invalid length. [ 436.522286][T20600] : entered promiscuous mode [ 436.537134][T20607] : left promiscuous mode [ 436.614179][T20600] netlink: 'syz.2.4150': attribute type 1 has an invalid length. [ 436.653425][T20600] netlink: 224 bytes leftover after parsing attributes in process `syz.2.4150'. [ 436.793783][T20632] vti0: entered promiscuous mode [ 436.836231][T20632] vti0: entered allmulticast mode [ 436.853452][T20636] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4162'. [ 436.870185][T20638] IPVS: set_ctl: invalid protocol: 103 10.1.1.2:20003 [ 436.999426][T20641] ip6_vti0: left promiscuous mode [ 437.004536][T20641] ip6_vti0: left allmulticast mode [ 437.131704][T20641] bridge2: left promiscuous mode [ 437.142525][T20641] veth5: left allmulticast mode [ 437.150977][T20260] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 437.161104][T20260] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 437.173953][T20260] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 437.252827][T20260] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 437.417073][T20679] netlink: 88 bytes leftover after parsing attributes in process `syz.2.4170'. [ 437.428161][T20679] netlink: 'syz.2.4170': attribute type 6 has an invalid length. [ 437.435906][T20679] netlink: 'syz.2.4170': attribute type 7 has an invalid length. [ 437.445437][T20679] netlink: 'syz.2.4170': attribute type 8 has an invalid length. [ 437.453359][T20679] netlink: 'syz.2.4170': attribute type 15 has an invalid length. [ 437.515372][T20683] "syz.0.4171" (20683) uses obsolete ecb(arc4) skcipher [ 437.515408][T20684] netlink: 68 bytes leftover after parsing attributes in process `syz.2.4170'. [ 437.625379][T20685] lo speed is unknown, defaulting to 1000 [ 437.743159][T20685] lo speed is unknown, defaulting to 1000 [ 437.899253][T20653] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 438.183387][T20702] tipc: Enabling of bearer rejected, failed to enable media [ 438.355369][T20717] net_ratelimit: 2 callbacks suppressed [ 438.355390][T20717] openvswitch: netlink: Unexpected mask (mask=840, allowed=10048) [ 438.557435][T20728] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 438.728993][T20743] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 438.807828][T20260] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 438.816221][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 438.905244][T11140] IPVS: starting estimator thread 0... [ 439.007144][T20754] IPVS: using max 29 ests per chain, 69600 per kthread [ 439.088486][T20765] lo speed is unknown, defaulting to 1000 [ 439.309025][T20765] lo speed is unknown, defaulting to 1000 [ 439.447605][T20260] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 439.456016][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 439.619953][T20779] xt_CT: You must specify a L4 protocol and not use inversions on it [ 439.663224][T20780] bridge_slave_0: left allmulticast mode [ 439.670009][T20780] bridge_slave_0: left promiscuous mode [ 439.675775][T20780] bridge0: port 1(bridge_slave_0) entered disabled state [ 439.685812][T20780] bridge_slave_1: left allmulticast mode [ 439.692444][T20780] bridge_slave_1: left promiscuous mode [ 439.698665][T20780] bridge0: port 2(bridge_slave_1) entered disabled state [ 439.708894][T20780] bond0: (slave bond_slave_0): Releasing backup interface [ 439.723442][T20780] bond0: (slave bond_slave_1): Releasing backup interface [ 439.735418][T20780] team0: Port device team_slave_0 removed [ 439.744312][T20780] team0: Port device team_slave_1 removed [ 439.750921][T20780] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 439.758864][T20780] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 439.767046][T20780] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 440.091199][ T1296] lec:lec_start_xmit: lec0:No lecd attached [ 441.899475][T20764] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 442.108298][T20787] __nla_validate_parse: 6 callbacks suppressed [ 442.108320][T20787] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4200'. [ 442.322254][T20795] lo speed is unknown, defaulting to 1000 [ 442.375272][T20793] netlink: 'syz.1.4202': attribute type 13 has an invalid length. [ 442.463159][T20793] netlink: 'syz.1.4202': attribute type 17 has an invalid length. [ 442.641422][T20793] 8021q: adding VLAN 0 to HW filter on device bond0 [ 442.659918][T20793] 8021q: adding VLAN 0 to HW filter on device team0 [ 442.674470][T20793] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 442.691415][T20795] lo speed is unknown, defaulting to 1000 [ 442.704401][T20815] netlink: 32 bytes leftover after parsing attributes in process `syz.4.4207'. [ 442.723888][T20815] netlink: 7 bytes leftover after parsing attributes in process `syz.4.4207'. [ 442.752780][T20814] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 443.104077][T20838] mac80211_hwsim hwsim40 wlan1: entered allmulticast mode [ 443.368587][T20848] netlink: 11 bytes leftover after parsing attributes in process `syz.1.4220'. [ 443.406374][T20857] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 443.442980][T20859] netlink: 'syz.3.4223': attribute type 11 has an invalid length. [ 443.555021][T20863] netlink: 'syz.0.4221': attribute type 1 has an invalid length. [ 443.559429][T20860] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 443.579258][T20863] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4221'. [ 443.633215][T20848] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4220'. [ 443.813647][T20877] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4225'. [ 443.831417][T20877] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4225'. [ 444.560088][T20259] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 444.568646][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 445.110536][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 445.118577][ C0] lec:lec_tx_timeout: lec0 [ 445.123520][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 445.200849][T20256] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 445.209307][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 445.523529][T20884] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4228'. [ 445.704793][T20894] : renamed from bond_slave_0 [ 445.828474][T20905] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 445.905196][T20908] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4237'. [ 445.927028][T20908] netlink: 'syz.1.4237': attribute type 5 has an invalid length. [ 445.969032][T20908] geneve2: entered promiscuous mode [ 445.974280][T20908] geneve2: entered allmulticast mode [ 445.996094][ T1103] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 256 - 0 [ 446.007291][ T1103] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 256 - 0 [ 446.017473][ T1103] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 256 - 0 [ 446.022097][T20911] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 446.026678][ T1103] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 256 - 0 [ 446.086617][T20918] netlink: 'syz.1.4239': attribute type 3 has an invalid length. [ 446.246195][T20927] bond_slave_0: mtu less than device minimum [ 446.808160][T20256] bond5: (slave ip6gretap1): link status up again after 0 ms [ 446.817079][T20256] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 447.279436][ T51] Bluetooth: hci5: command 0x0406 tx timeout [ 447.456332][T20993] __nla_validate_parse: 6 callbacks suppressed [ 447.456353][T20993] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4266'. [ 447.702056][T21007] syzkaller1: entered promiscuous mode [ 447.716726][T21007] syzkaller1: entered allmulticast mode [ 447.753582][T21012] netlink: 'syz.2.4273': attribute type 33 has an invalid length. [ 447.765162][T21012] netlink: 152 bytes leftover after parsing attributes in process `syz.2.4273'. [ 448.553202][T21037] netlink: 'syz.1.4283': attribute type 10 has an invalid length. [ 448.579087][T21037] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 448.601201][T21037] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 448.612114][T20256] net_ratelimit: 15 callbacks suppressed [ 448.612133][T20256] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 448.739504][T20257] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 448.860494][T21053] ipvlan0: entered promiscuous mode [ 448.868452][T21057] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4288'. [ 448.935631][T21061] 8021q: adding VLAN 0 to HW filter on device ipvlan0 [ 448.953017][T21061] bond0: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 448.989299][T20257] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 449.004753][T21068] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4295'. [ 449.117296][T20257] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 449.150756][T21079] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4294'. [ 449.226867][ T1103] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 449.305395][T21091] lo speed is unknown, defaulting to 1000 [ 449.366642][T20259] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 449.476743][T20256] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 449.595730][T20257] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 449.690934][T21091] lo speed is unknown, defaulting to 1000 [ 449.717087][T21107] netlink: 'syz.0.4307': attribute type 1 has an invalid length. [ 449.880005][T21110] bond4: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 449.927413][T20259] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 449.938430][T21124] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4307'. [ 450.010546][T21107] veth3: entered promiscuous mode [ 450.018729][T21107] bond4: (slave veth3): Enslaving as a backup interface with a down link [ 450.068220][T21124] 8021q: adding VLAN 0 to HW filter on device bond4 [ 450.076279][T20257] bond4: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 450.166403][T21134] netlink: 'syz.4.4314': attribute type 5 has an invalid length. [ 450.316735][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 450.363984][T21151] netlink: 220 bytes leftover after parsing attributes in process `syz.0.4315'. [ 450.505208][T21162] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4322'. [ 450.693128][T21169] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4324'. [ 450.956969][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5830 ms [ 450.965069][ C0] lec:lec_tx_timeout: lec0 [ 450.992982][T21175] netlink: 'syz.3.4325': attribute type 1 has an invalid length. [ 451.153686][T21176] bond3: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 451.216680][T21175] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4325'. [ 451.269207][T21178] veth7: entered promiscuous mode [ 451.280023][T21178] bond3: (slave veth7): Enslaving as a backup interface with a down link [ 451.371217][T21175] 8021q: adding VLAN 0 to HW filter on device bond3 [ 451.637129][T21208] netlink: 'syz.3.4333': attribute type 2 has an invalid length. [ 451.699918][T21208] : entered promiscuous mode [ 451.776055][T21216] lo speed is unknown, defaulting to 1000 [ 451.797504][T21211] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 451.949292][T21227] dummy0: entered promiscuous mode [ 451.977430][T21227] vlan3: entered promiscuous mode [ 452.282376][T21216] lo speed is unknown, defaulting to 1000 [ 452.704061][T21255] __nla_validate_parse: 2 callbacks suppressed [ 452.704081][T21255] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4343'. [ 452.801195][T21255] bond5: entered promiscuous mode [ 452.837898][T21255] 8021q: adding VLAN 0 to HW filter on device bond5 [ 452.869915][T21254] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4345'. [ 453.447070][T21275] syzkaller0: entered promiscuous mode [ 453.469489][T21275] syzkaller0: entered allmulticast mode [ 453.772338][T21287] Can't find ip_set type bitmap:ip,mac [ 455.861726][T21302] pimreg: entered allmulticast mode [ 455.867380][T21302] pimreg: left allmulticast mode [ 455.907019][T20261] net_ratelimit: 27 callbacks suppressed [ 455.907039][T20261] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 456.057992][T20257] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 456.077734][ T1103] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 456.086238][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 456.095365][T20259] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 456.104074][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 456.177542][T21319] netlink: 'syz.0.4357': attribute type 11 has an invalid length. [ 456.185404][T21319] netlink: 'syz.0.4357': attribute type 23 has an invalid length. [ 456.204947][T21319] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4357'. [ 456.226887][T20261] bond5: (slave ip6gretap1): failed to get link speed/duplex [ 456.265015][T21322] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4361'. [ 456.592284][T21339] netlink: 64 bytes leftover after parsing attributes in process `syz.4.4363'. [ 456.736237][T20261] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 456.752135][T21344] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4364'. [ 456.773233][T20261] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 456.786931][T20261] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 456.804695][T20261] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 457.025256][T21355] netlink: 84 bytes leftover after parsing attributes in process `syz.1.4369'. [ 457.105629][T21357] syzkaller1: entered promiscuous mode [ 457.117708][T21357] syzkaller1: entered allmulticast mode [ 457.198738][T21362] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4372'. [ 457.241932][T21362] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4372'. [ 457.249201][T21369] xt_TPROXY: Can be used only with -p tcp or -p udp [ 457.471434][T21383] bond4: entered promiscuous mode [ 457.540541][T21387] vcan1: entered promiscuous mode [ 457.551648][T21387] vcan1: entered allmulticast mode [ 457.565511][T21387] bond4: (slave vcan1): The slave device specified does not support setting the MAC address [ 457.592698][T21387] bond4: (slave vcan1): Error -95 calling set_mac_address [ 457.990754][T21400] lo: entered allmulticast mode [ 458.002812][T21400] tunl0: entered allmulticast mode [ 458.014655][T21400] gre0: entered allmulticast mode [ 458.020979][T21401] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4379'. [ 458.026783][T21400] gretap0: entered allmulticast mode [ 458.054490][T21400] erspan0: entered allmulticast mode [ 458.061564][T21402] netlink: 'syz.4.4381': attribute type 11 has an invalid length. [ 458.073052][T21406] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4382'. [ 458.082974][T21406] netlink: 43 bytes leftover after parsing attributes in process `syz.2.4382'. [ 458.100342][T21406] netlink: 'syz.2.4382': attribute type 5 has an invalid length. [ 458.118262][T21400] ip_vti0: entered allmulticast mode [ 458.128009][T21402] netlink: 'syz.4.4381': attribute type 1 has an invalid length. [ 458.143456][T21406] netlink: 43 bytes leftover after parsing attributes in process `syz.2.4382'. [ 458.147104][T21400] ip6_vti0: entered allmulticast mode [ 458.186778][T21402] netlink: 96 bytes leftover after parsing attributes in process `syz.4.4381'. [ 458.195769][T21402] netlink: 658 bytes leftover after parsing attributes in process `syz.4.4381'. [ 458.217342][T21400] sit0: entered allmulticast mode [ 458.253140][T21400] ip6tnl0: entered allmulticast mode [ 458.267408][T21400] ip6gre0: entered allmulticast mode [ 458.272916][T21400] syz_tun: entered allmulticast mode [ 458.278769][T21400] ip6gretap0: entered allmulticast mode [ 458.286375][T21400] bridge0: entered allmulticast mode [ 458.293247][T21400] vcan0: entered allmulticast mode [ 458.298711][T21400] bond0: entered allmulticast mode [ 458.304172][T21400] dummy0: entered allmulticast mode [ 458.312592][T21400] nlmon0: entered allmulticast mode [ 458.323050][T21400] caif0: entered allmulticast mode [ 458.328549][T21400] batadv0: entered allmulticast mode [ 458.334104][T21400] vxcan0: entered allmulticast mode [ 458.350604][T21400] vxcan1: entered allmulticast mode [ 458.355946][T21400] veth0: entered allmulticast mode [ 458.361695][T21400] veth1: entered allmulticast mode [ 458.367974][T21400] wg1: entered allmulticast mode [ 458.373034][T21400] wg2: entered allmulticast mode [ 458.378289][T21400] veth0_to_bridge: entered allmulticast mode [ 458.384412][T21400] bridge_slave_0: entered allmulticast mode [ 458.392186][T21400] veth1_to_bridge: entered allmulticast mode [ 458.398644][T21400] bridge_slave_1: entered allmulticast mode [ 458.404853][T21400] veth0_to_bond: entered allmulticast mode [ 458.414122][T21400] bond_slave_0: entered allmulticast mode [ 458.420210][T21400] veth1_to_bond: entered allmulticast mode [ 458.426216][T21400] bond_slave_1: entered allmulticast mode [ 458.432379][T21400] veth0_to_team: entered allmulticast mode [ 458.438494][T21400] team_slave_0: entered allmulticast mode [ 458.444367][T21400] veth1_to_team: entered allmulticast mode [ 458.450478][T21400] team_slave_1: entered allmulticast mode [ 458.456356][T21400] veth0_to_batadv: entered allmulticast mode [ 458.462561][T21400] batadv_slave_0: entered allmulticast mode [ 458.468650][T21400] veth1_to_batadv: entered allmulticast mode [ 458.474757][T21400] batadv_slave_1: entered allmulticast mode [ 458.481143][T21400] xfrm0: entered allmulticast mode [ 458.486358][T21400] veth0_to_hsr: entered allmulticast mode [ 458.492383][T21400] hsr_slave_0: entered allmulticast mode [ 458.498195][T21400] veth1_to_hsr: entered allmulticast mode [ 458.504045][T21400] hsr_slave_1: entered allmulticast mode [ 458.509886][T21400] hsr0: entered allmulticast mode [ 458.515054][T21400] veth1_virt_wifi: entered allmulticast mode [ 458.521404][T21400] veth0_virt_wifi: entered allmulticast mode [ 458.527646][T21400] net veth1_virt_wifi : entered allmulticast mode [ 458.534690][T21400] veth0_macvtap: entered allmulticast mode [ 458.540927][T21400] macvtap0: entered allmulticast mode [ 458.546458][T21400] geneve0: entered allmulticast mode [ 458.551995][T21400] geneve1: entered allmulticast mode [ 458.557660][T21400] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 458.565191][T21400] netdevsim netdevsim4 netdevsim1: entered allmulticast mode [ 458.572800][T21400] netdevsim netdevsim4 netdevsim2: entered allmulticast mode [ 458.580373][T21400] netdevsim netdevsim4 netdevsim3: entered allmulticast mode [ 458.588070][T21400] bond1: entered allmulticast mode [ 458.593201][T21400] gretap1: entered allmulticast mode [ 458.598807][T21400] bridge_slave_0.: entered allmulticast mode [ 458.604925][T21400] bond2: entered allmulticast mode [ 458.610285][T21400] bond3: entered allmulticast mode [ 458.615415][T21400] wireguard0: entered allmulticast mode [ 458.621246][T21400] geneve2: entered allmulticast mode [ 458.626771][T21400] macsec1: entered allmulticast mode [ 458.632270][T21400] bond4: entered allmulticast mode [ 458.637860][T21400] geneve3: entered allmulticast mode [ 458.643355][T21400] vxcan2: entered allmulticast mode [ 458.648986][T21400] vxcan3: entered allmulticast mode [ 458.654318][T21400] bridge1: entered allmulticast mode [ 458.659905][T21400] mac80211_hwsim hwsim50 wlan0: entered allmulticast mode [ 458.667173][T21400] ipip0: entered allmulticast mode [ 458.672391][T21400] ip6gretap1: entered allmulticast mode [ 458.678344][T21400] team_slave_0.0: entered allmulticast mode [ 458.684372][T21400] bond5: entered allmulticast mode [ 458.690168][T21400] gre1: entered allmulticast mode [ 458.695341][T21400] gre2: entered allmulticast mode [ 458.700700][T21400] gretap2: entered allmulticast mode [ 458.706084][T21400] wireguard1: entered allmulticast mode [ 458.712349][T21400] bond6: entered allmulticast mode [ 458.718556][T21400] bridge2: entered allmulticast mode [ 458.725430][T21400] vti0: left promiscuous mode [ 458.730723][T21400] ip6tnl1: entered allmulticast mode [ 458.737784][T21400] syztnl1: entered allmulticast mode [ 458.743409][T21400] vti60: entered allmulticast mode [ 458.901084][T21427] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4387'. [ 459.033817][T21439] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4392'. [ 459.047715][T21445] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 459.055668][T21445] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 459.094665][T21447] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4391'. [ 459.107850][T21439] 8021q: adding VLAN 0 to HW filter on device bond0 [ 459.183498][T21455] batman_adv: batadv0: Adding interface: dummy0 [ 459.184922][T21453] netlink: 'syz.3.4395': attribute type 1 has an invalid length. [ 459.190588][T21455] batman_adv: batadv0: The MTU of interface dummy0 is too small (1280) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 459.223932][T21455] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 459.353609][T21453] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4395'. [ 459.731726][T21459] veth9: entered promiscuous mode [ 459.742292][T21459] bond5: (slave veth9): Enslaving as a backup interface with a down link [ 459.755853][T21453] 8021q: adding VLAN 0 to HW filter on device bond5 [ 459.794612][T21464] netlink: 'syz.0.4397': attribute type 39 has an invalid length. [ 460.109438][T21478] lo speed is unknown, defaulting to 1000 [ 460.504624][T21502] Cannot find add_set index 3 as target [ 460.512422][T21478] lo speed is unknown, defaulting to 1000 [ 460.567279][T21494] lo speed is unknown, defaulting to 1000 [ 460.686440][T21509] x_tables: duplicate underflow at hook 3 [ 460.739868][T21505] netlink: 'syz.0.4411': attribute type 1 has an invalid length. [ 461.009876][T21520] netlink: 'syz.3.4416': attribute type 1 has an invalid length. [ 461.076723][T21517] FAULT_INJECTION: forcing a failure. [ 461.076723][T21517] name failslab, interval 1, probability 0, space 0, times 0 [ 461.089463][T21517] CPU: 1 UID: 0 PID: 21517 Comm: syz.1.4414 Not tainted syzkaller #0 PREEMPT(full) [ 461.089486][T21517] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 461.089497][T21517] Call Trace: [ 461.089504][T21517] [ 461.089511][T21517] dump_stack_lvl+0xe8/0x150 [ 461.089540][T21517] should_fail_ex+0x412/0x560 [ 461.089569][T21517] should_failslab+0xa8/0x100 [ 461.089593][T21517] kmem_cache_alloc_bulk_noprof+0x8d/0x7e0 [ 461.089614][T21517] ? pfn_valid+0x125/0x4c0 [ 461.089641][T21517] bpf_test_run_xdp_live+0x179c/0x1cf0 [ 461.089677][T21517] ? bpf_test_run_xdp_live+0x438/0x1cf0 [ 461.089705][T21517] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 461.089742][T21517] ? 0xffffffffa02019d0 [ 461.089756][T21517] ? 0xffffffffa0201a14 [ 461.089769][T21517] ? 0xffffffffa0201a54 [ 461.089783][T21517] ? 0xffffffffa0206ed8 [ 461.089796][T21517] ? 0xffffffffa0206f54 [ 461.089831][T21517] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 461.089860][T21517] ? _copy_from_user+0x94/0xb0 [ 461.089878][T21517] ? bpf_test_init+0x113/0x150 [ 461.089893][T21517] ? xdp_convert_md_to_buff+0x5b/0x330 [ 461.089914][T21517] bpf_prog_test_run_xdp+0x81c/0x1160 [ 461.089947][T21517] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 461.089970][T21517] ? __fget_files+0x2a/0x420 [ 461.089999][T21517] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 461.090018][T21517] bpf_prog_test_run+0x2c7/0x340 [ 461.090040][T21517] __sys_bpf+0x643/0x950 [ 461.090058][T21517] ? __pfx___sys_bpf+0x10/0x10 [ 461.090088][T21517] ? ksys_write+0x242/0x270 [ 461.090109][T21517] ? __pfx_ksys_write+0x10/0x10 [ 461.090134][T21517] __x64_sys_bpf+0x7c/0x90 [ 461.090159][T21517] do_syscall_64+0x14d/0xf80 [ 461.090181][T21517] ? trace_irq_disable+0x3b/0x150 [ 461.090197][T21517] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 461.090214][T21517] ? clear_bhb_loop+0x40/0x90 [ 461.090234][T21517] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 461.090251][T21517] RIP: 0033:0x7f01a439c819 [ 461.090266][T21517] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 461.090281][T21517] RSP: 002b:00007f01a51d9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 461.090299][T21517] RAX: ffffffffffffffda RBX: 00007f01a4615fa0 RCX: 00007f01a439c819 [ 461.090311][T21517] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 461.090322][T21517] RBP: 00007f01a51d9090 R08: 0000000000000000 R09: 0000000000000000 [ 461.090332][T21517] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 461.090342][T21517] R13: 00007f01a4616038 R14: 00007f01a4615fa0 R15: 00007ffe972b7478 [ 461.090369][T21517] [ 461.410151][T21520] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 461.590981][T21537] netlink: 'syz.3.4419': attribute type 1 has an invalid length. [ 461.801925][T21494] lo speed is unknown, defaulting to 1000 [ 462.269537][T21535] bond0 (unregistering): Released all slaves [ 463.226073][T21585] __nla_validate_parse: 8 callbacks suppressed [ 463.226093][T21585] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4434'. [ 463.273948][T21588] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4435'. [ 463.415507][T21593] bridge_slave_1: vlans aren't supported yet for dev_uc|mc_add() [ 463.441801][T21591] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4437'. [ 463.469914][T21599] netlink: 'syz.4.4440': attribute type 1 has an invalid length. [ 463.543095][T21603] bond7: entered promiscuous mode [ 463.603879][T21603] bond7: entered allmulticast mode [ 463.623063][T21603] 8021q: adding VLAN 0 to HW filter on device bond7 [ 463.674732][T21599] bridge4: entered promiscuous mode [ 463.682601][T21599] bridge4: entered allmulticast mode [ 463.689223][T21599] bond7: (slave bridge4): Enslaving as a backup interface with an up link [ 463.743973][T21612] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4444'. [ 463.752851][T21603] bridge5: entered promiscuous mode [ 463.752993][T21603] bridge5: entered allmulticast mode [ 463.753669][T21603] bond7: (slave bridge5): Enslaving as a backup interface with a down link [ 463.773462][T20261] bond7: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 463.908864][T21620] FAULT_INJECTION: forcing a failure. [ 463.908864][T21620] name failslab, interval 1, probability 0, space 0, times 0 [ 463.921602][T21620] CPU: 0 UID: 0 PID: 21620 Comm: syz.4.4446 Not tainted syzkaller #0 PREEMPT(full) [ 463.921627][T21620] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 463.921638][T21620] Call Trace: [ 463.921645][T21620] [ 463.921652][T21620] dump_stack_lvl+0xe8/0x150 [ 463.921681][T21620] should_fail_ex+0x412/0x560 [ 463.921712][T21620] should_failslab+0xa8/0x100 [ 463.921737][T21620] kmem_cache_alloc_bulk_noprof+0x8d/0x7e0 [ 463.921759][T21620] ? pfn_valid+0x125/0x4c0 [ 463.921787][T21620] bpf_test_run_xdp_live+0x179c/0x1cf0 [ 463.921822][T21620] ? bpf_test_run_xdp_live+0x438/0x1cf0 [ 463.921849][T21620] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 463.921889][T21620] ? 0xffffffffa02019d0 [ 463.921902][T21620] ? 0xffffffffa0201a14 [ 463.921916][T21620] ? 0xffffffffa0201a54 [ 463.921929][T21620] ? 0xffffffffa0206e54 [ 463.921963][T21620] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 463.921994][T21620] ? _copy_from_user+0x94/0xb0 [ 463.922013][T21620] ? bpf_test_init+0x113/0x150 [ 463.922029][T21620] ? xdp_convert_md_to_buff+0x5b/0x330 [ 463.922051][T21620] bpf_prog_test_run_xdp+0x81c/0x1160 [ 463.922085][T21620] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 463.922110][T21620] ? __fget_files+0x2a/0x420 [ 463.922142][T21620] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 463.922173][T21620] bpf_prog_test_run+0x2c7/0x340 [ 463.922196][T21620] __sys_bpf+0x643/0x950 [ 463.922216][T21620] ? __pfx___sys_bpf+0x10/0x10 [ 463.922248][T21620] ? ksys_write+0x242/0x270 [ 463.922270][T21620] ? __pfx_ksys_write+0x10/0x10 [ 463.922297][T21620] __x64_sys_bpf+0x7c/0x90 [ 463.922324][T21620] do_syscall_64+0x14d/0xf80 [ 463.922349][T21620] ? trace_irq_disable+0x3b/0x150 [ 463.922364][T21620] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 463.922382][T21620] ? clear_bhb_loop+0x40/0x90 [ 463.922405][T21620] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 463.922422][T21620] RIP: 0033:0x7f01f099c819 [ 463.922439][T21620] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 463.922454][T21620] RSP: 002b:00007f01f187d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 463.922474][T21620] RAX: ffffffffffffffda RBX: 00007f01f0c15fa0 RCX: 00007f01f099c819 [ 463.922487][T21620] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 463.922499][T21620] RBP: 00007f01f187d090 R08: 0000000000000000 R09: 0000000000000000 [ 463.922511][T21620] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 463.922522][T21620] R13: 00007f01f0c16038 R14: 00007f01f0c15fa0 R15: 00007ffe0684aef8 [ 463.922552][T21620] [ 463.941661][T20259] bond7: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 463.953851][T21617] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4445'. [ 464.046728][T21607] syzkaller0: entered promiscuous mode [ 464.137248][T21624] netlink: 148 bytes leftover after parsing attributes in process `syz.1.4445'. [ 464.146050][T21607] syzkaller0: entered allmulticast mode [ 464.314788][T21627] netlink: 'syz.4.4447': attribute type 2 has an invalid length. [ 464.330337][T21627] netlink: 'syz.4.4447': attribute type 11 has an invalid length. [ 464.338547][T21627] netlink: 132 bytes leftover after parsing attributes in process `syz.4.4447'. [ 464.350481][T21624] netlink: 7064 bytes leftover after parsing attributes in process `syz.1.4445'. [ 464.426198][T21624] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 466.119295][T21617] sch_fq: defrate 53322 ignored. [ 466.155903][T21653] sit0: entered promiscuous mode [ 466.163613][T21653] netlink: 21 bytes leftover after parsing attributes in process `syz.2.4455'. [ 466.331816][T21658] FAULT_INJECTION: forcing a failure. [ 466.331816][T21658] name failslab, interval 1, probability 0, space 0, times 0 [ 466.344531][T21658] CPU: 1 UID: 0 PID: 21658 Comm: syz.2.4458 Not tainted syzkaller #0 PREEMPT(full) [ 466.344555][T21658] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 466.344565][T21658] Call Trace: [ 466.344573][T21658] [ 466.344580][T21658] dump_stack_lvl+0xe8/0x150 [ 466.344604][T21658] should_fail_ex+0x412/0x560 [ 466.344629][T21658] should_failslab+0xa8/0x100 [ 466.344650][T21658] kmem_cache_alloc_bulk_noprof+0x8d/0x7e0 [ 466.344668][T21658] ? pfn_valid+0x125/0x4c0 [ 466.344691][T21658] bpf_test_run_xdp_live+0x179c/0x1cf0 [ 466.344721][T21658] ? bpf_test_run_xdp_live+0x438/0x1cf0 [ 466.344743][T21658] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 466.344773][T21658] ? 0xffffffffa02019d0 [ 466.344785][T21658] ? 0xffffffffa0201a14 [ 466.344796][T21658] ? 0xffffffffa0201a54 [ 466.344807][T21658] ? 0xffffffffa0206e54 [ 466.344835][T21658] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 466.344858][T21658] ? _copy_from_user+0x94/0xb0 [ 466.344874][T21658] ? bpf_test_init+0x113/0x150 [ 466.344887][T21658] ? xdp_convert_md_to_buff+0x5b/0x330 [ 466.344904][T21658] bpf_prog_test_run_xdp+0x81c/0x1160 [ 466.344930][T21658] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 466.344954][T21658] ? __fget_files+0x2a/0x420 [ 466.344978][T21658] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 466.344994][T21658] bpf_prog_test_run+0x2c7/0x340 [ 466.345012][T21658] __sys_bpf+0x643/0x950 [ 466.345026][T21658] ? __pfx___sys_bpf+0x10/0x10 [ 466.345050][T21658] ? ksys_write+0x242/0x270 [ 466.345066][T21658] ? __pfx_ksys_write+0x10/0x10 [ 466.345087][T21658] __x64_sys_bpf+0x7c/0x90 [ 466.345107][T21658] do_syscall_64+0x14d/0xf80 [ 466.345127][T21658] ? trace_irq_disable+0x3b/0x150 [ 466.345139][T21658] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 466.345153][T21658] ? clear_bhb_loop+0x40/0x90 [ 466.345170][T21658] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 466.345184][T21658] RIP: 0033:0x7f3225d9c819 [ 466.345197][T21658] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 466.345209][T21658] RSP: 002b:00007f3226d1a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 466.345225][T21658] RAX: ffffffffffffffda RBX: 00007f3226015fa0 RCX: 00007f3225d9c819 [ 466.345236][T21658] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 466.345245][T21658] RBP: 00007f3226d1a090 R08: 0000000000000000 R09: 0000000000000000 [ 466.345253][T21658] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 466.345262][T21658] R13: 00007f3226016038 R14: 00007f3226015fa0 R15: 00007ffeb0d5d8f8 [ 466.345284][T21658] [ 466.736201][T21669] netlink: 'syz.3.4459': attribute type 8 has an invalid length. [ 467.153682][T21692] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4469'. [ 467.611929][T21686] : entered promiscuous mode [ 467.613870][T20257] bond7: (slave bridge4): link status up again after 0 ms [ 467.647257][T20257] bond7: (slave bridge4): link status up again after 0 ms [ 467.677036][T20257] bond7: (slave bridge4): failed to get link speed/duplex [ 467.759569][ T5828] Bluetooth: hci1: command 0x0406 tx timeout [ 467.765740][ T5826] Bluetooth: hci3: command 0x0406 tx timeout [ 467.866335][T21706] syzkaller0: entered promiscuous mode [ 467.917130][T21706] syzkaller0: entered allmulticast mode [ 468.370871][T21728] sctp: [Deprecated]: syz.3.4479 (pid 21728) Use of struct sctp_assoc_value in delayed_ack socket option. [ 468.370871][T21728] Use struct sctp_sack_info instead [ 469.879167][T21736] __nla_validate_parse: 1 callbacks suppressed [ 469.879187][T21736] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4480'. [ 469.880052][T20259] bond7: (slave bridge4): failed to get link speed/duplex [ 470.056857][T20257] bond7: (slave bridge4): failed to get link speed/duplex [ 470.108519][T21745] netlink: 'syz.3.4483': attribute type 10 has an invalid length. [ 470.118554][T21745] netlink: 228 bytes leftover after parsing attributes in process `syz.3.4483'. [ 470.134710][T21747] netlink: 'syz.1.4485': attribute type 21 has an invalid length. [ 470.214943][T21753] netlink: 'syz.1.4485': attribute type 1 has an invalid length. [ 470.222842][T20259] bond7: (slave bridge4): failed to get link speed/duplex [ 470.246943][T21753] netlink: 124 bytes leftover after parsing attributes in process `syz.1.4485'. [ 470.326662][T20257] bond7: (slave bridge4): failed to get link speed/duplex [ 470.436703][T20257] bond7: (slave bridge4): failed to get link speed/duplex [ 470.551640][ T1103] bond7: (slave bridge4): failed to get link speed/duplex [ 470.676902][T20257] bond7: (slave bridge4): failed to get link speed/duplex [ 470.710928][T21776] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4492'. [ 470.748766][T21781] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4494'. [ 470.797243][ T1103] bond7: (slave bridge4): failed to get link speed/duplex [ 470.824036][T21786] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4496'. [ 470.858001][T21786] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4496'. [ 470.879315][T21786] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4496'. [ 470.967670][T20260] bond7: (slave bridge4): failed to get link speed/duplex [ 471.009010][T21798] netlink: 156 bytes leftover after parsing attributes in process `syz.4.4497'. [ 471.050382][T21796] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4498'. [ 471.081175][T20257] bond7: (slave bridge4): failed to get link speed/duplex [ 471.400569][T21773] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 471.412304][T21773] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 471.455569][T21773] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 471.461721][T21773] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 471.505092][T21773] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 471.526733][T21773] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 471.541709][T21773] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 471.572563][T21773] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 471.608944][T21773] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 471.614890][T21773] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 473.185701][T21879] lo speed is unknown, defaulting to 1000 [ 473.526357][T21881] lo speed is unknown, defaulting to 1000 [ 473.532486][T21879] lo speed is unknown, defaulting to 1000 [ 473.643701][T21899] netlink: 'syz.2.4527': attribute type 6 has an invalid length. [ 474.074091][T21881] lo speed is unknown, defaulting to 1000 [ 474.080994][T21912] lo speed is unknown, defaulting to 1000 [ 474.271665][T21919] netlink: 'syz.4.4530': attribute type 13 has an invalid length. [ 474.534760][T21912] lo speed is unknown, defaulting to 1000 [ 474.816199][T21925] syzkaller1: entered promiscuous mode [ 474.821997][T21925] syzkaller1: entered allmulticast mode [ 475.017026][T20257] net_ratelimit: 25 callbacks suppressed [ 475.017047][T20257] bond7: (slave bridge4): failed to get link speed/duplex [ 475.151813][ T1103] bond7: (slave bridge4): failed to get link speed/duplex [ 475.287138][T20257] bond7: (slave bridge4): failed to get link speed/duplex [ 475.402106][T20260] bond7: (slave bridge4): failed to get link speed/duplex [ 475.537384][T20257] bond7: (slave bridge4): failed to get link speed/duplex [ 475.647031][T20260] bond7: (slave bridge4): failed to get link speed/duplex [ 475.757154][ T1103] bond7: (slave bridge4): failed to get link speed/duplex [ 475.867372][ T1103] bond7: (slave bridge4): failed to get link speed/duplex [ 475.977215][T20260] bond7: (slave bridge4): failed to get link speed/duplex [ 476.086966][ T1103] bond7: (slave bridge4): failed to get link speed/duplex [ 476.159490][T21957] __nla_validate_parse: 8 callbacks suppressed [ 476.159511][T21957] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4536'. [ 476.565269][T21963] netlink: 56 bytes leftover after parsing attributes in process `syz.3.4538'. [ 476.740101][T21908] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 477.259045][T21998] netlink: 'syz.3.4549': attribute type 3 has an invalid length. [ 477.266961][T21998] netlink: 666 bytes leftover after parsing attributes in process `syz.3.4549'. [ 477.587187][T22016] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4557'. [ 477.596180][T22016] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4557'. [ 477.625639][T22016] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4557'. [ 477.639511][T22022] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4559'. [ 477.667155][T22022] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4559'. [ 477.763147][T22029] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4560'. [ 477.807549][T22034] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4560'. [ 478.066197][T22047] tipc: MTU too low for tipc bearer [ 478.144064][T22048] dvmrp1: tun_chr_ioctl cmd 2147767507 [ 478.177638][T20261] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 478.218361][T20261] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 478.278285][T20261] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 478.297055][T20261] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 478.931922][T22096] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 479.205779][T22120] ip6t_srh: unknown srh match flags 4000 [ 479.923566][T22174] netlink: 'syz.4.4596': attribute type 1 has an invalid length. [ 480.047461][ T1103] net_ratelimit: 31 callbacks suppressed [ 480.047480][ T1103] bond7: (slave bridge4): failed to get link speed/duplex [ 480.220265][T22174] 8021q: adding VLAN 0 to HW filter on device bond9 [ 480.229834][T22174] bond8: (slave bond9): making interface the new active one [ 480.239218][T22174] bond8: (slave bond9): Enslaving as an active interface with an up link [ 480.256891][T20261] bond7: (slave bridge4): failed to get link speed/duplex [ 480.317823][T22183] bond8: (slave gretap3): Enslaving as a backup interface with an up link [ 480.358005][T22195] 8021q: adding VLAN 0 to HW filter on device bond8 [ 480.373686][T22201] syzkaller1: entered promiscuous mode [ 480.423763][T22201] syzkaller1: entered allmulticast mode [ 480.469346][T20257] bond7: (slave bridge4): failed to get link speed/duplex [ 480.481604][T22208] xt_CT: No such helper "netbios-ns" [ 480.542019][T22218] xt_TPROXY: Can be used only with -p tcp or -p udp [ 480.563872][T22220] netlink: 'syz.1.4608': attribute type 31 has an invalid length. [ 480.632228][T20260] bond7: (slave bridge4): failed to get link speed/duplex [ 480.660871][T22215] nbd4: detected capacity change from 0 to 63 [ 480.672897][T22225] nbd: couldn't find device at index 0 [ 480.694874][ T5823] block nbd4: Receive control failed (result -104) [ 480.918203][T20256] bond7: (slave bridge4): failed to get link speed/duplex [ 480.978190][T22241] netlink: 'syz.2.4616': attribute type 1 has an invalid length. [ 481.038307][T20256] bond7: (slave bridge4): failed to get link speed/duplex [ 481.146927][T20260] bond7: (slave bridge4): failed to get link speed/duplex [ 481.256129][T22255] __nla_validate_parse: 13 callbacks suppressed [ 481.256150][T22255] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4622'. [ 481.279616][T20261] bond7: (slave bridge4): failed to get link speed/duplex [ 481.461977][T22255] 8021q: adding VLAN 0 to HW filter on device bond6 [ 481.502541][T22266] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4623'. [ 481.587472][T22262] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 481.646710][T20260] bond7: (slave bridge4): failed to get link speed/duplex [ 481.754620][T22255] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4622'. [ 481.778050][T22262] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 481.837327][T20260] bond7: (slave bridge4): failed to get link speed/duplex [ 482.074397][T22262] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 482.261081][T22262] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 482.523303][T22296] gretap4: entered promiscuous mode [ 482.529726][T22296] batman_adv: batadv0: Adding interface: gretap4 [ 482.536083][T22296] batman_adv: batadv0: The MTU of interface gretap4 is too small (1462) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1532. [ 482.590521][T22296] batman_adv: batadv0: Not using interface gretap4 (retrying later): interface not active [ 482.624579][ T1103] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 256 - 0 [ 482.686442][T22293] syzkaller0: entered promiscuous mode [ 482.692618][T22293] syzkaller0: entered allmulticast mode [ 485.077405][T20261] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 256 - 0 [ 485.096625][T20260] net_ratelimit: 2 callbacks suppressed [ 485.096645][T20260] bond7: (slave bridge4): failed to get link speed/duplex [ 485.127725][T20261] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 256 - 0 [ 485.136352][T20261] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 256 - 0 [ 485.236776][T20260] bond7: (slave bridge4): failed to get link speed/duplex [ 485.353136][T22329] geneve2: entered allmulticast mode [ 485.357669][T22335] netlink: 'syz.2.4640': attribute type 1 has an invalid length. [ 485.367876][T20261] bond7: (slave bridge4): failed to get link speed/duplex [ 485.398933][T22329] netlink: 'syz.0.4639': attribute type 1 has an invalid length. [ 485.407282][T22329] netlink: 244 bytes leftover after parsing attributes in process `syz.0.4639'. [ 485.486876][ T1103] bond7: (slave bridge4): failed to get link speed/duplex [ 485.636980][ T1103] bond7: (slave bridge4): failed to get link speed/duplex [ 485.749623][ T1103] bond7: (slave bridge4): failed to get link speed/duplex [ 485.869976][T22357] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4649'. [ 485.879046][ T1103] bond7: (slave bridge4): failed to get link speed/duplex [ 485.897101][T22354] lo speed is unknown, defaulting to 1000 [ 485.904329][T22357] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4649'. [ 485.951365][T22357] openvswitch: netlink: Flow key attr not present in new flow. [ 485.998617][T20260] bond7: (slave bridge4): failed to get link speed/duplex [ 486.137587][T20260] bond7: (slave bridge4): failed to get link speed/duplex [ 486.412555][T22371] syzkaller0: entered promiscuous mode [ 486.445467][T22371] syzkaller0: entered allmulticast mode [ 487.122486][T22406] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4660'. [ 487.133804][T22403] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4660'. [ 488.635915][T22354] lo speed is unknown, defaulting to 1000 [ 488.636351][T22395] tipc: Enabling of bearer rejected, failed to enable media [ 488.658939][T22403] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 488.659948][T22406] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 489.082781][T22414] lo speed is unknown, defaulting to 1000 [ 489.332714][T22441] veth1: entered allmulticast mode [ 489.400840][T22445] batadv0: entered promiscuous mode [ 489.406104][T22445] batadv0: entered allmulticast mode [ 489.414013][T22445] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 489.471507][T22449] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4671'. [ 489.549770][T22452] ip6gre0: entered promiscuous mode [ 489.557185][T22452] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4671'. [ 489.670999][T22414] lo speed is unknown, defaulting to 1000 [ 489.864272][T22466] tipc: Started in network mode [ 489.869278][T22466] tipc: Node identity ac14140f, cluster identity 4711 [ 489.886967][T22466] tipc: New replicast peer: 255.255.255.255 [ 489.899990][T22466] tipc: Enabled bearer , priority 15 [ 490.077612][T22480] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4677'. [ 490.109140][T22480] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4677'. [ 490.140266][ T1103] net_ratelimit: 10 callbacks suppressed [ 490.140285][ T1103] bond7: (slave bridge4): failed to get link speed/duplex [ 490.275947][T22486] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4680'. [ 490.329542][T22486] geneve3: entered promiscuous mode [ 490.339565][T22482] netlink: 207952 bytes leftover after parsing attributes in process `syz.0.4678'. [ 490.346965][T20256] bond7: (slave bridge4): failed to get link speed/duplex [ 490.396026][T22472] syzkaller0: entered promiscuous mode [ 490.402529][T22472] syzkaller0: entered allmulticast mode [ 490.412428][T20259] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 490.423986][T20259] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 490.600265][T22501] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4683'. [ 492.165301][T20259] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 492.174583][T20259] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 492.197054][ T1210] tipc: Node number set to 2886997007 [ 492.206702][ T7929] bond7: (slave bridge4): failed to get link speed/duplex [ 492.300728][T22516] netlink: 'syz.2.4685': attribute type 3 has an invalid length. [ 492.337211][T20259] bond7: (slave bridge4): failed to get link speed/duplex [ 492.363687][T22516] block nbd2: NBD_DISCONNECT [ 492.448243][ T7929] bond7: (slave bridge4): failed to get link speed/duplex [ 492.567668][T20261] bond7: (slave bridge4): failed to get link speed/duplex [ 492.581833][T22525] syzkaller0: entered promiscuous mode [ 492.601281][T22525] syzkaller0: entered allmulticast mode [ 492.734662][T22540] syzkaller1: entered promiscuous mode [ 492.740671][T22540] syzkaller1: entered allmulticast mode [ 492.826998][T20261] bond7: (slave bridge4): failed to get link speed/duplex [ 492.877656][T22551] syzkaller1: entered promiscuous mode [ 492.883183][T22551] syzkaller1: entered allmulticast mode [ 492.936858][T20257] bond7: (slave bridge4): failed to get link speed/duplex [ 493.067297][T20261] bond7: (slave bridge4): failed to get link speed/duplex [ 493.177380][T20261] bond7: (slave bridge4): failed to get link speed/duplex [ 493.559340][T22591] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4709'. [ 493.657134][T22593] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4704'. [ 493.981108][T22613] netlink: 'syz.4.4714': attribute type 1 has an invalid length. [ 494.021751][T22613] bond10: entered promiscuous mode [ 494.048456][T22613] 8021q: adding VLAN 0 to HW filter on device bond10 [ 494.091042][T22613] 8021q: adding VLAN 0 to HW filter on device bond10 [ 494.108319][T22613] bond10: (slave ipip1): The slave device specified does not support setting the MAC address [ 494.138015][T22613] bond10: (slave ipip1): Setting fail_over_mac to active for active-backup mode [ 494.164672][T22613] bond10: (slave ipip1): making interface the new active one [ 494.184414][T22613] ipip1: entered promiscuous mode [ 494.215415][T22613] bond10: (slave ipip1): Enslaving as an active interface with an up link [ 494.300863][T22613] syzkaller0: entered promiscuous mode [ 494.307039][T22613] syzkaller0: entered allmulticast mode [ 494.576647][T22658] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4726'. [ 494.623985][T22661] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4727'. [ 494.680809][T22664] netlink: 132 bytes leftover after parsing attributes in process `syz.0.4729'. [ 495.066614][T22686] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4735'. [ 495.187440][ T1103] net_ratelimit: 12 callbacks suppressed [ 495.187459][ T1103] bond7: (slave bridge4): failed to get link speed/duplex [ 495.326977][T20257] bond7: (slave bridge4): failed to get link speed/duplex [ 495.411958][T22707] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4742'. [ 495.441934][T22713] netlink: 276 bytes leftover after parsing attributes in process `syz.2.4743'. [ 495.452410][T20257] bond7: (slave bridge4): failed to get link speed/duplex [ 495.462750][T22707] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4742'. [ 495.485712][T22707] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 495.567109][T20257] bond7: (slave bridge4): failed to get link speed/duplex [ 495.687027][T20259] bond7: (slave bridge4): failed to get link speed/duplex [ 495.799169][T22727] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4749'. [ 495.808615][T20259] bond7: (slave bridge4): failed to get link speed/duplex [ 495.818993][T22727] syzkaller0: entered promiscuous mode [ 495.826017][T22727] syzkaller0: entered allmulticast mode [ 495.916825][ T1103] bond7: (slave bridge4): failed to get link speed/duplex [ 496.027248][ T1103] bond7: (slave bridge4): failed to get link speed/duplex [ 496.198152][T22739] Cannot find add_set index 2 as target [ 496.256712][ T1103] bond7: (slave bridge4): failed to get link speed/duplex [ 496.339917][T22746] ip6_vti0: Caught tx_queue_len zero misconfig [ 496.377072][ T7929] bond7: (slave bridge4): failed to get link speed/duplex [ 496.801750][ C0] ------------[ cut here ]------------ [ 496.807645][ C0] sk->sk_forward_alloc [ 496.807672][ C0] WARNING: net/ipv4/af_inet.c:162 at inet_sock_destruct+0x62d/0x740, CPU#0: kworker/u8:8/1103 [ 496.822065][ C0] Modules linked in: [ 496.826275][ C0] CPU: 0 UID: 0 PID: 1103 Comm: kworker/u8:8 Not tainted syzkaller #0 PREEMPT(full) [ 496.835798][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 496.845924][ C0] Workqueue: krds_cp_wq#18/0 rds_connect_worker [ 496.852269][ C0] RIP: 0010:inet_sock_destruct+0x62d/0x740 [ 496.858138][ C0] Code: 0f 0b 90 e9 58 fe ff ff e8 50 dd 9e f7 90 0f 0b 90 e9 8b fe ff ff e8 42 dd 9e f7 90 0f 0b 90 e9 b1 fe ff ff e8 34 dd 9e f7 90 <0f> 0b 90 e9 d7 fe ff ff 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 95 fc [ 496.877815][ C0] RSP: 0018:ffffc90000007d48 EFLAGS: 00010246 [ 496.883906][ C0] RAX: ffffffff8a26d13c RBX: dffffc0000000000 RCX: ffff88802886bd00 [ 496.891974][ C0] RDX: 0000000000000100 RSI: 0000000000000f70 RDI: 0000000000000000 [ 496.900008][ C0] RBP: 0000000000000f70 R08: ffff88807a298b27 R09: 1ffff1100f453164 [ 496.908057][ C0] R10: dffffc0000000000 R11: ffffed100f453165 R12: ffff88807a298880 [ 496.909593][T22766] netlink: 'syz.2.4758': attribute type 2 has an invalid length. [ 496.916040][ C0] R13: dffffc0000000000 R14: ffff88807a298b0c R15: ffffffff8fca6c00 [ 496.916069][ C0] FS: 0000000000000000(0000) GS:ffff888125457000(0000) knlGS:0000000000000000 [ 496.916087][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 496.916102][ C0] CR2: 00007ffe06849ff0 CR3: 000000000e54c000 CR4: 00000000003526f0 [ 496.916123][ C0] Call Trace: [ 496.958614][ C0] [ 496.961465][ C0] ? __pfx_udp_destruct_sock+0x10/0x10 [ 496.966992][ C0] __sk_destruct+0x85/0x880 [ 496.971518][ C0] ? rcu_core+0x751/0x1070 [ 496.975960][ C0] ? __pfx___sk_destruct+0x10/0x10 [ 496.981126][ C0] rcu_core+0x7cd/0x1070 [ 496.985413][ C0] ? __pfx_rcu_core+0x10/0x10 [ 496.990174][ C0] ? try_to_wake_up+0x7fc/0x1390 [ 496.995139][ C0] handle_softirqs+0x22a/0x870 [ 496.999985][ C0] ? do_softirq+0x76/0xd0 [ 497.004355][ C0] ? rds_tcp_tune+0xc7/0x930 [ 497.009030][ C0] do_softirq+0x76/0xd0 [ 497.013214][ C0] [ 497.016158][ C0] [ 497.019165][ C0] __local_bh_enable_ip+0xf8/0x130 [ 497.024304][ C0] rds_tcp_tune+0xc7/0x930 [ 497.028827][ C0] ? __pfx_rds_tcp_tune+0x10/0x10 [ 497.033876][ C0] ? __sock_create+0x86d/0x9d0 [ 497.038755][ C0] rds_tcp_conn_path_connect+0x2f9/0x930 [ 497.044438][ C0] ? __pfx_rds_tcp_conn_path_connect+0x10/0x10 [ 497.050768][ C0] ? do_raw_spin_unlock+0xf5/0x210 [ 497.055924][ C0] rds_connect_worker+0x1d8/0x290 [ 497.061018][ C0] ? process_scheduled_works+0xa8d/0x18c0 [ 497.066796][ C0] process_scheduled_works+0xb6e/0x18c0 [ 497.072379][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 497.078427][ C0] ? assign_work+0x3d5/0x5e0 [ 497.083048][ C0] worker_thread+0xa53/0xfc0 [ 497.087734][ C0] kthread+0x388/0x470 [ 497.091823][ C0] ? __pfx_worker_thread+0x10/0x10 [ 497.096968][ C0] ? __pfx_kthread+0x10/0x10 [ 497.101561][ C0] ret_from_fork+0x51e/0xb90 [ 497.106182][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 497.111387][ C0] ? __switch_to+0xc7d/0x1450 [ 497.116093][ C0] ? __pfx_kthread+0x10/0x10 [ 497.120776][ C0] ret_from_fork_asm+0x1a/0x30 [ 497.125580][ C0] [ 497.128669][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 497.135958][ C0] CPU: 0 UID: 0 PID: 1103 Comm: kworker/u8:8 Not tainted syzkaller #0 PREEMPT(full) [ 497.145421][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 497.155475][ C0] Workqueue: krds_cp_wq#18/0 rds_connect_worker [ 497.161722][ C0] Call Trace: [ 497.164997][ C0] [ 497.167844][ C0] vpanic+0x56c/0xa60 [ 497.171824][ C0] ? __pfx__printk+0x10/0x10 [ 497.176401][ C0] ? __pfx_vpanic+0x10/0x10 [ 497.180896][ C0] ? is_bpf_text_address+0x292/0x2b0 [ 497.186175][ C0] ? is_bpf_text_address+0x26/0x2b0 [ 497.191373][ C0] panic+0xc5/0xd0 [ 497.195091][ C0] ? __pfx_panic+0x10/0x10 [ 497.199507][ C0] ? ret_from_fork_asm+0x1a/0x30 [ 497.204444][ C0] __warn+0x315/0x4f0 [ 497.208422][ C0] ? inet_sock_destruct+0x62d/0x740 [ 497.213611][ C0] ? inet_sock_destruct+0x62d/0x740 [ 497.218819][ C0] __report_bug+0x29a/0x540 [ 497.223318][ C0] ? kasan_save_track+0x3e/0x80 [ 497.228157][ C0] ? kasan_save_free_info+0x46/0x50 [ 497.233360][ C0] ? __kasan_slab_free+0x5c/0x80 [ 497.238310][ C0] ? inet_sock_destruct+0x62d/0x740 [ 497.243514][ C0] ? __pfx___report_bug+0x10/0x10 [ 497.248542][ C0] ? kthread+0x388/0x470 [ 497.252791][ C0] ? ret_from_fork+0x51e/0xb90 [ 497.257576][ C0] ? ret_from_fork_asm+0x1a/0x30 [ 497.262543][ C0] ? inet_sock_destruct+0x62d/0x740 [ 497.267738][ C0] report_bug+0x16a/0x220 [ 497.272067][ C0] ? inet_sock_destruct+0x62d/0x740 [ 497.277260][ C0] ? inet_sock_destruct+0x62f/0x740 [ 497.282449][ C0] handle_bug+0x9c/0x200 [ 497.286685][ C0] exc_invalid_op+0x1a/0x50 [ 497.291196][ C0] asm_exc_invalid_op+0x1a/0x20 [ 497.296045][ C0] RIP: 0010:inet_sock_destruct+0x62d/0x740 [ 497.301845][ C0] Code: 0f 0b 90 e9 58 fe ff ff e8 50 dd 9e f7 90 0f 0b 90 e9 8b fe ff ff e8 42 dd 9e f7 90 0f 0b 90 e9 b1 fe ff ff e8 34 dd 9e f7 90 <0f> 0b 90 e9 d7 fe ff ff 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 95 fc [ 497.321443][ C0] RSP: 0018:ffffc90000007d48 EFLAGS: 00010246 [ 497.327503][ C0] RAX: ffffffff8a26d13c RBX: dffffc0000000000 RCX: ffff88802886bd00 [ 497.335468][ C0] RDX: 0000000000000100 RSI: 0000000000000f70 RDI: 0000000000000000 [ 497.343427][ C0] RBP: 0000000000000f70 R08: ffff88807a298b27 R09: 1ffff1100f453164 [ 497.351388][ C0] R10: dffffc0000000000 R11: ffffed100f453165 R12: ffff88807a298880 [ 497.359346][ C0] R13: dffffc0000000000 R14: ffff88807a298b0c R15: ffffffff8fca6c00 [ 497.367317][ C0] ? inet_sock_destruct+0x62c/0x740 [ 497.372517][ C0] ? inet_sock_destruct+0x62c/0x740 [ 497.377709][ C0] ? __pfx_udp_destruct_sock+0x10/0x10 [ 497.383157][ C0] __sk_destruct+0x85/0x880 [ 497.387662][ C0] ? rcu_core+0x751/0x1070 [ 497.392072][ C0] ? __pfx___sk_destruct+0x10/0x10 [ 497.397176][ C0] rcu_core+0x7cd/0x1070 [ 497.401422][ C0] ? __pfx_rcu_core+0x10/0x10 [ 497.406195][ C0] ? try_to_wake_up+0x7fc/0x1390 [ 497.411143][ C0] handle_softirqs+0x22a/0x870 [ 497.415909][ C0] ? do_softirq+0x76/0xd0 [ 497.420239][ C0] ? rds_tcp_tune+0xc7/0x930 [ 497.424820][ C0] do_softirq+0x76/0xd0 [ 497.428968][ C0] [ 497.431887][ C0] [ 497.434806][ C0] __local_bh_enable_ip+0xf8/0x130 [ 497.439913][ C0] rds_tcp_tune+0xc7/0x930 [ 497.444329][ C0] ? __pfx_rds_tcp_tune+0x10/0x10 [ 497.449342][ C0] ? __sock_create+0x86d/0x9d0 [ 497.454104][ C0] rds_tcp_conn_path_connect+0x2f9/0x930 [ 497.459751][ C0] ? __pfx_rds_tcp_conn_path_connect+0x10/0x10 [ 497.465906][ C0] ? do_raw_spin_unlock+0xf5/0x210 [ 497.471023][ C0] rds_connect_worker+0x1d8/0x290 [ 497.476038][ C0] ? process_scheduled_works+0xa8d/0x18c0 [ 497.481754][ C0] process_scheduled_works+0xb6e/0x18c0 [ 497.487325][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 497.493307][ C0] ? assign_work+0x3d5/0x5e0 [ 497.497897][ C0] worker_thread+0xa53/0xfc0 [ 497.502504][ C0] kthread+0x388/0x470 [ 497.506561][ C0] ? __pfx_worker_thread+0x10/0x10 [ 497.511666][ C0] ? __pfx_kthread+0x10/0x10 [ 497.516260][ C0] ret_from_fork+0x51e/0xb90 [ 497.520870][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 497.525994][ C0] ? __switch_to+0xc7d/0x1450 [ 497.530675][ C0] ? __pfx_kthread+0x10/0x10 [ 497.535262][ C0] ret_from_fork_asm+0x1a/0x30 [ 497.540040][ C0] [ 497.543219][ C0] Kernel Offset: disabled [ 497.547544][ C0] Rebooting in 86400 seconds..