last executing test programs: 2m35.568343831s ago: executing program 1 (id=12394): r0 = socket(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f00000007c0)="7800000018002507b9199b02ffff48000203be04020406050a02040c5c000900580006080a0000000d0085a168d0bf46d32345653600648d2700150010d9000849935ade4a460c89b6ec0cff3959547f509058ba86c902007a00004a32000407160016000a0000000000e000e218d1dd3a6ed538f2523250", 0x78, 0x0, 0x0, 0x0) 2m35.544730397s ago: executing program 1 (id=12395): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x2, &(0x7f0000000200)=@raw=[@ldst={0x0, 0x0, 0x2}, @exit={0x95, 0x0, 0x0, 0x40000000}], &(0x7f0000000280)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0xc}, 0x94) 2m35.39352089s ago: executing program 1 (id=12396): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_POWER_SAVE(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0x28, r1, 0x0, 0x70bd29, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x6, 0x39}}}}, [@NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000041}, 0x20000800) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000800) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000700)={0x1c, r1, 0x5, 0x4, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x0) 2m32.980766624s ago: executing program 1 (id=12398): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000240)={'wpan0\x00', 0x0}) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r4, &(0x7f0000002200)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)={0x40, 0x0, 0x637, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_SEC_LEVEL={0x24, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x3}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0x2}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4008041}, 0x4000000) sendmsg$NL802154_CMD_DEL_SEC_DEV(0xffffffffffffffff, 0x0, 0x20000000) close(r0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_pressure(r6, &(0x7f0000000040)='io.pressure\x00', 0x2, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=@newtaction={0x48, 0x32, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x34, 0x1, [@m_mirred={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x20008880}, 0x0) accept4$inet(r5, &(0x7f00000002c0)={0x2, 0x0, @private}, &(0x7f00000000c0)=0x10, 0x800) socket$l2tp(0x2, 0x2, 0x73) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@bridge_newvlan={0x24, 0x70, 0x1, 0x70bd2a, 0x25dfdbfb, {0x7, 0x0, 0x0, r10}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x62, 0x3}}}]}, 0x24}, 0x1, 0x0, 0x0, 0x8c4}, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000140), r11) getpeername$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000240)=0x14) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x5e22, 0x0, @empty}, 0x1c) bind$unix(0xffffffffffffffff, &(0x7f0000000000)=@abs={0x1, 0x0, 0x4e24}, 0x52) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r7, 0xc0385868, &(0x7f0000000400)={r1, &(0x7f00000001c0)='bridge0\x00', 0x6224c1, &(0x7f0000000340)={@align=0x7, {0x5, 0xb3a7, 0x200, 0x6}}, 0x101, &(0x7f0000000380)={@_ha_fsid}, &(0x7f00000003c0)=0x9}) ioctl$XFS_IOC_GET_RESBLKS(r12, 0x80105873, &(0x7f0000000100)) sendmsg$nl_xfrm(r1, &(0x7f0000000500)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)=@getspdinfo={0x14, 0x25, 0x100, 0x70bd29, 0x25dfdbfd, 0xfff, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x40c4) recvmmsg(r0, &(0x7f00000055c0), 0x400023c, 0x300, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000009, 0x200000006c832, 0xffffffffffffffff, 0x0) 2m32.357546788s ago: executing program 1 (id=12402): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x1}}, 0x40) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000010c0)=ANY=[@ANYBLOB="3c00000010000304fcffffff0000000000000400", @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000626f6e64000000000c00028008"], 0x3c}, 0x1, 0x0, 0x0, 0x20040011}, 0x40050) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000100)={r2, 0x83, &(0x7f00000010c0)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/194, 0xc2}}, 0x10) setsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000340)=0x34, 0x4) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x21, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)) 2m31.272853472s ago: executing program 1 (id=12404): r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0xfffffeffffff7ffe, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="f001000000010104200000000000000002"], 0x1f0}}, 0x2000c000) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0xcdb281c69b69ad50}, 0x4000) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={0x14, 0x3d, 0x300, 0x70bd21, 0xfffffffe, {0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x8}, 0x0) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073717a30000000000800410072786500140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) sendmmsg$inet6(r0, &(0x7f0000000b80)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000840)='\x00', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000300)="99ee", 0x2}], 0x1}}], 0x2, 0x4000800) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) socket$kcm(0x29, 0x5, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000380)=[{&(0x7f0000013580)='\r', 0x1}], 0x1, 0x1) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x41071, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0xa56, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) writev(r5, &(0x7f00000001c0)=[{&(0x7f0000000040)="2e9b3d0007e03dd65193dfb6c579963f886411", 0x13}, {&(0x7f0000000340)="80000000289cb066d1389999822fb51c851d3626ebd23dc86a139638440c62f8af949f1f33689e46a27c0ae2ee0f678e9a7dc4083e122957765f1b0954e42a981d67198396beac352f455519e63cdfbed9faa6ad92a639ff93de934ff25efbd2a0b79d2a18aab8a4d5e29dbc7693ecb0872bdc92250a22ae1f35ed9213657f36adcfc59ff1cb1511883e1608fe5510bd329ee0277b01acf62a889867dcd2e7ad39afbee4ef922d21fe8a1528f34e1d529102c4b9c4d23a178121c7e1a8a5da5eefbfee961b66b3a44542f5e358", 0xcd}], 0x2) sendmsg$nl_xfrm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="3c020000190001000000000000000000fc0200000000000000000000000000000000000000000000000000000000000000000003000000000a0000005e000000", @ANYRES32=r4, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000100000000000000000000000000900000000000000000000000000000001000000000000000c000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000084010500ac141414000000000000000000000000000000003200000000000000fe8000000000000000000000000000bb013500000000ff00000000000400000001000000fe800000000000000000000000000025000000003200000000000000ffffffff0000000000000000000000000000000000000000000000000200000000000000ac1e0101000000000000000000000000000000003c00000002000000fe8800000000000000000000000001010000000001030000000000000000000000000000fe8000000000000000000000800000bb000000003c00000002000000fe8000000000000000000000000000100000000000"], 0x23c}, 0x1, 0x0, 0x0, 0x54}, 0x4000004) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000001c0)={&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x1, 0x0}, &(0x7f0000000240)=0x40) 2m16.081177655s ago: executing program 32 (id=12404): r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0xfffffeffffff7ffe, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="f001000000010104200000000000000002"], 0x1f0}}, 0x2000c000) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0xcdb281c69b69ad50}, 0x4000) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={0x14, 0x3d, 0x300, 0x70bd21, 0xfffffffe, {0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x8}, 0x0) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073717a30000000000800410072786500140033006c6f"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) sendmmsg$inet6(r0, &(0x7f0000000b80)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000840)='\x00', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000300)="99ee", 0x2}], 0x1}}], 0x2, 0x4000800) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) socket$kcm(0x29, 0x5, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f0000000380)=[{&(0x7f0000013580)='\r', 0x1}], 0x1, 0x1) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x41071, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0xa56, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) writev(r5, &(0x7f00000001c0)=[{&(0x7f0000000040)="2e9b3d0007e03dd65193dfb6c579963f886411", 0x13}, {&(0x7f0000000340)="80000000289cb066d1389999822fb51c851d3626ebd23dc86a139638440c62f8af949f1f33689e46a27c0ae2ee0f678e9a7dc4083e122957765f1b0954e42a981d67198396beac352f455519e63cdfbed9faa6ad92a639ff93de934ff25efbd2a0b79d2a18aab8a4d5e29dbc7693ecb0872bdc92250a22ae1f35ed9213657f36adcfc59ff1cb1511883e1608fe5510bd329ee0277b01acf62a889867dcd2e7ad39afbee4ef922d21fe8a1528f34e1d529102c4b9c4d23a178121c7e1a8a5da5eefbfee961b66b3a44542f5e358", 0xcd}], 0x2) sendmsg$nl_xfrm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="3c020000190001000000000000000000fc0200000000000000000000000000000000000000000000000000000000000000000003000000000a0000005e000000", @ANYRES32=r4, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000100000000000000000000000000900000000000000000000000000000001000000000000000c000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000084010500ac141414000000000000000000000000000000003200000000000000fe8000000000000000000000000000bb013500000000ff00000000000400000001000000fe800000000000000000000000000025000000003200000000000000ffffffff0000000000000000000000000000000000000000000000000200000000000000ac1e0101000000000000000000000000000000003c00000002000000fe8800000000000000000000000001010000000001030000000000000000000000000000fe8000000000000000000000800000bb000000003c00000002000000fe8000000000000000000000000000100000000000"], 0x23c}, 0x1, 0x0, 0x0, 0x54}, 0x4000004) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000001c0)={&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x1, 0x0}, &(0x7f0000000240)=0x40) 6.007950977s ago: executing program 0 (id=13195): connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) socket$kcm(0xa, 0x3, 0x87) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) pselect6(0x40, &(0x7f0000000040)={0x2, 0xb, 0x11, 0x7fc0000000000003, 0x1, 0x1007, 0x2000000000000007, 0x1004}, 0x0, 0x0, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(0xffffffffffffffff, &(0x7f0000000640)=ANY=[@ANYBLOB="5f9ef7d1898e58f83ded973a640612ef88d57529eecd11fcbaace751e98725b2f4803f57c85f5beb02a6f480347f00fa4d5f0ea9798a2dbc1abe9079bd26f46a3f364bfecd2834cf12df634007f8dad916b6600eb8bf465cd2026082ea10b567742634d86b233cd64053748e023c94f2bce2c5a17a23a49d1ba06e8d77481c42dab91cca96332963666d86906a2fbdc74be6b687a33cd940fd527ff87809f15547ad5cc4", @ANYRES16=r3, @ANYRESHEX=r0], 0xfdef) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000500)=ANY=[@ANYBLOB="a0000000", @ANYRES16, @ANYBLOB="050424bd7000fedbdf250100000008000100", @ANYRES32=0x0, @ANYBLOB="84000280400001"], 0xa0}, 0x1, 0x0, 0x0, 0xaddf11c998560ddf}, 0x24040084) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a05000000000000000000050000000900010073797a30000000002c000000030a01010000000000000000050000000900010073797a30000000000900030073797a300000000054000000060a010400000000000000000500000008000b40000000002c0004802800018007000100637400001c0002800800014000000015050003000000000008000241000000000900010073797a3000000000140000001100010000000000000000000000000a"], 0xc8}}, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="180100002f0001"], 0x118}], 0x34, 0x0, 0x0, 0x4000}, 0xc1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000f40)) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000c60600005fffffff850000000500a400bf09000000000000260901000000000095000000000000009c68000080000000bf9800000000000056080000050000008500000007000000b7000000000021009500000000000000ee1a"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r6, &(0x7f0000000540)="9a65f120612f8fec9207b47c8e95344060bed52ab6279d188f26f57894b236808831335f07a99cc2ed70d532c58fd807b7f22dd92e7f9055cc0728b6e3d7f1566a02d684a8ad5bf85c21363739207e7dea653edb52a8b09a38a127eb0482041c20b8acba8cd202afe4a12784d94678d0f4d21a638320dcd6c8b68ed7cd29bd70a086698cb39a5f87467ecca3084e28079df39895bbf3fc9a8ad26676e8a42073db242541f74cba5f80996d879249c6033f705c345e69224c3a91cb4cbf859d57daf050f0b9b23f2c", 0x1, 0x4008010, &(0x7f0000000280)={0xa, 0x3, 0x0, @rand_addr=' \x01\x00', 0x9}, 0x3) listen(r6, 0x1) r7 = accept4(r6, 0x0, 0x0, 0x80800) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r8, &(0x7f0000000000), 0xffffff6a) sendfile(r7, r8, 0x0, 0xffffffff000) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x16, 0x10, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000003c0)={'bond0\x00'}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r9, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000009c0)=ANY=[@ANYBLOB="480000001000010400000000000000000000000036d2a58a407f8b03d2e818618928834c894b5ddc191eb97659e666c327dabb174977a9d4ffa39979682682ca5c0b83243d3e8cdef2e3df65bdab716364abdaa0be30c5c07e207b727f2b74467ecb173dbcf8b8e51e488040228c68a7bc54e8d145a589683d22917fdda17d51a5b1e8ee1117e9286e2fd20decdd608dff98", @ANYRES32=0x0, @ANYBLOB='!\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r10, @ANYBLOB="2000128008000100687372001400028008000100", @ANYBLOB="e997204852effb5ede552d6f4868c3a39474795f859840de4986b498121a644ecd5611dba8b9", @ANYBLOB="08000200", @ANYRES32=r10, @ANYBLOB], 0x48}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) 4.728259954s ago: executing program 0 (id=13205): sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000002c0)="f973085a6ea39ea1b25a1c6b351e11245900557d1c8e9f86bae5e5c64e50ef25afb0295d0c303850b4bff4d088bf9df67e013836e2882dad3f7698b52997f7efa9eb96f09be1c3019445927c6b2fe32d38ae2bcad2ac0d85ebd42914fb18b7d0670f8b3be16755ead6a6fb713fa618ce2cf424ea7cc84b04016b9a2afbfa", 0x7e}, {0x0}, {&(0x7f0000000780)}, {&(0x7f00000000c0)}], 0x4}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, 0x0, 0x0, &(0x7f0000000cc0)=[@mark={{0x14, 0x1, 0x24, 0x9a9}}, @mark={{0x14, 0x1, 0x24, 0x4}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0x9d}}], 0x78}}, {{&(0x7f0000000d80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e23, @local}, 0x2, 0x3, 0x1, 0x3}}, 0x80, 0x0}}], 0x3, 0x20000044) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) r1 = socket$nl_crypto(0x10, 0x3, 0x15) getsockopt$netlink(r1, 0x10e, 0x3, &(0x7f0000000680)=""/209, &(0x7f0000000780)=0xd1) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r2 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) ioctl$EXT4_IOC_GET_ES_CACHE(r1, 0xc020662a, &(0x7f00000007c0)={0x0, 0xfffffffffffffff7, 0x5, 0xbc7, 0x3, 0x0, [{0x3, 0x8, 0x1}, {0x3, 0x3, 0xcd, '\x00', 0x602}, {0xfffffffffffffffe, 0xbda, 0x7f, '\x00', 0x80}]}) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 4.480460543s ago: executing program 4 (id=13207): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x6c, 0x10, 0x401, 0x70bd29, 0x0, {0x0, 0x0, 0x0, 0x0, 0x585d}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @private2}]}]}, @IFLA_IFNAME={0x14, 0x3, 'ipvlan0\x00'}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_MODE={0x6}]}}}]}, 0x6c}}, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000180)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f00000000c0), 0x12) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000c40), 0x12) readv(r2, &(0x7f00000005c0)=[{&(0x7f0000000680)=""/42, 0x2a}, {&(0x7f0000000900)=""/120, 0x78}], 0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000009006000000000000000300000a38000000020a01020000000000000000010000020c00044000000000000000010900010073797a31000000000c0004400000000000000001140000001100010000000000000000000084000af97146b3f6ae34c6b5fc1ed7fb682d00ac31c0b3b456bf8a18eb24da7f9e16da9cfcab68030595401df9aa56ee9417ec5d7f"], 0x60}, 0x1, 0x0, 0x0, 0x8805}, 0x810) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000006c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha384\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5", 0x4) r6 = accept4(r5, 0x0, 0x0, 0x0) sendmmsg$alg(r6, &(0x7f0000000280)=[{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000080)="f703010010fff3be522ba800000000", 0xf}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba1282", 0x12}], 0x2, 0x0, 0x0, 0x2000847}], 0x1, 0x40800) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SIOCGSTAMP(r7, 0x8906, &(0x7f0000000100)) r8 = socket$netlink(0x10, 0x3, 0xf) syz_genetlink_get_family_id$team(&(0x7f0000000300), r8) close(0x3) r9 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) setsockopt$bt_rfcomm_RFCOMM_LM(r9, 0x12, 0x3, &(0x7f0000004ac0)=0x2c, 0x4) recvmmsg$unix(r6, &(0x7f0000000d40)=[{{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000580)=""/21, 0x15}, {&(0x7f0000000640)=""/11, 0x50}, {&(0x7f0000000500)=""/87}, {&(0x7f0000000740)=""/195}, {&(0x7f0000000240)=""/3}], 0x2}}, {{0x0, 0x0, &(0x7f0000000240)}}], 0x2, 0x40000000, 0x0) r10 = socket$rds(0x15, 0x5, 0x0) bind$rds(r10, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r6, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000180)=[@fadd={0x58, 0x114, 0x6, {{0x8, 0xfb4}, &(0x7f00000003c0)=0xef, &(0x7f0000000400)=0x4ac, 0x7f, 0xc8, 0x1, 0x6, 0x45, 0x3000000000000000}}, @cswp={0x58, 0x114, 0x7, {{0x8ac5, 0x7}, &(0x7f0000000340)=0x9, &(0x7f0000000380)=0x2, 0x2, 0x4, 0x8000000000000000, 0x80, 0x40, 0x9}}], 0xb0, 0x40801}, 0x0) setsockopt$IP_VS_SO_SET_STOPDAEMON(r6, 0x0, 0x48c, &(0x7f0000000200)={0x0, 'pimreg0\x00', 0x2}, 0x18) socket$nl_netfilter(0x10, 0x3, 0xc) 4.040553139s ago: executing program 0 (id=13212): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x3c1, 0x3, 0x3d8, 0x0, 0xc8, 0x8, 0x0, 0x5803, 0x308, 0x2e8, 0x2e8, 0x308, 0x2e8, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast1}, @mcast1, [], [0xff, 0x0, 0x0, 0xff000000], 'erspan0\x00', 'geneve1\x00'}, 0x0, 0x190, 0x1f8, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "cfcfcf0c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f34a214e67262c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0x1a, 0x0, {0x80000}}}, @inet=@rpfilter={{0x28}, {0x6}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x17, 0x3, 0x6, 0x80000000, 'snmp\x00', 'syz0\x00', {0xe6}}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @broadcast}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [0xff, 0xff000000, 0xff000000, 0xff], [0xffffff00, 0x0, 0xffffff00], 'wg0\x00', 'nicvf0\x00', {0xff}, {0xff}, 0x0, 0xc0, 0x0, 0x14}, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x4, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x438) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1}}, 0x80001}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000002c0), 0x3) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000b00)=@ccm_128={{0x303, 0x38}, "0000090800000003", "73b59657269ef929ee540a8a0a86c5d0", "6362dfd5", "21be0dd9f7f3c312"}, 0x28) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) getsockopt$IP_VS_SO_GET_VERSION(r0, 0x0, 0x480, &(0x7f0000000040), &(0x7f00000000c0)=0x40) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xc, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000ff0300000000000000000000850000001100000085000000a000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x3c, r5, 0x1, 0x72bd29, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_TX_RATES={0x20, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x1c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0x0, 0x1, 0xf27, 0x101, 0x6, 0x2e1, 0x80]}}, @NL80211_TXRATE_HT={0x4}]}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB="84000000", @ANYRES16=r3, @ANYBLOB="01002cbd7000fddbdf252100000008000300", @ANYRES32=r7, @ANYBLOB="06009800060000000a000600080211000001000040002d800a000000020202f7e24a7a650353380002020202020200000a"], 0x84}}, 0x400c000) 3.967656912s ago: executing program 4 (id=13213): r0 = socket$packet(0x11, 0x3, 0x300) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000580)={&(0x7f0000000340)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10c, 0x10c, 0x7, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x2, 0xfffffff6}}, @var={0x8, 0x0, 0x0, 0xe, 0x3, 0x1}, @ptr={0x6, 0x0, 0x0, 0x2, 0x1}, @enum={0xd, 0x3, 0x0, 0x6, 0x4, [{0x6, 0x837}, {0x8, 0x73b8}, {0xa, 0xe}]}, @enum64={0xe, 0x5, 0x0, 0x13, 0x0, 0x2, [{0x10, 0x3, 0x7}, {0x8}, {0x7, 0x5, 0x4}, {0x5, 0x101, 0x7}, {0xb, 0x68, 0x19}]}, @enum64={0xf, 0x5, 0x0, 0x13, 0x1, 0x9, [{0x4, 0x0, 0x2}, {0x6, 0x6, 0x9}, {0xd, 0x6, 0x5}, {0x7, 0x6, 0xffff}, {0x3, 0xfff, 0x6}]}, @restrict={0x6, 0x0, 0x0, 0xb, 0x2}, @ptr={0x3, 0x0, 0x0, 0x2, 0x2}, @ptr={0x10, 0x0, 0x0, 0x2, 0x2}]}, {0x0, [0x5f, 0x30, 0x61, 0x0, 0x30]}}, &(0x7f0000000480)=""/245, 0x12b, 0xf5, 0x1, 0x3}, 0x28) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x2, 0x5, &(0x7f0000003280)=ANY=[@ANYRESHEX=r0], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r1, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000000)=r2, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'syz_tun\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000300)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000240)={'syz_tun\x00', 0x0}) bind$packet(r4, &(0x7f0000000300)={0x11, 0x0, r5, 0x1, 0x8, 0x6, @remote}, 0x14) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r6) sendmsg$NLBL_CIPSOV4_C_ADD(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010027bd7000fbdbdf25010000000800010003000000240004800500030005ffffff0400030002040000000000000000000005000300060000000800020002"], 0x48}}, 0x40080) syz_emit_ethernet(0x3a, &(0x7f0000000700)=ANY=[], 0x0) 3.685390641s ago: executing program 4 (id=13217): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet_tcp(0x2, 0x1, 0x0) shutdown(r0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x1, @local}, 0x10) connect$inet(r2, &(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x30, 0x10, 0x1, 0x70bd25, 0x25dfdbf9, {0x0, 0x0, 0x600, 0x0, 0x48815, 0x40103}, [@IFLA_GROUP={0x8}, @IFLA_TXQLEN={0x8, 0xd, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="14000020000000e3000000000000000000000000ba4bac8328990c6fad760ee9c86282e6536446a435244f5431d9f2db9508b3f12c5c35bf8ce7698542539c4c81832a590e850d7d6a54dcce40f93440748f660fa48361ee313a4b62301a4e32ff6608007bdb79651a7f4225b1468397f65e62e695659893564db06f1733a371009a3c3c66d2c977ca5811279c2f0776bfa778fc432a16be043f9d6ea20e22579f00"], 0x14}}, 0x40880) r4 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_MCAST_MSFILTER(r4, 0x29, 0x30, &(0x7f0000000080)={0x2, {{0xa, 0x4e21, 0xffffffda, @mcast1, 0x72}}, 0x1}, 0x20000) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x16, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8ab8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000000850000006900000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r7, 0x1, 0xf, &(0x7f0000000000)=0x2, 0x4) bind$inet6(r7, &(0x7f0000000240)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) setsockopt$sock_int(r7, 0x1, 0x2, &(0x7f00000000c0)=0xc, 0x4) listen(r7, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r6, 0x0, 0xe, 0x0, &(0x7f0000000000)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r9 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r10 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r10, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}}) socket$inet6_tcp(0xa, 0x1, 0x0) 3.519644482s ago: executing program 0 (id=13218): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="d800", 0x2}], 0x1, 0x0, 0x0, 0x7400}, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2}, 0x50) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0xc, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="180000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x3e8, 0xe80, 0x0, &(0x7f0000000000)="c1df07000000d30a298ee68886dd87", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {0x7, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x0}]}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CIDR={0x5, 0x3, 0x7f}]}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x4090}, 0x20000000) r4 = socket$inet(0xa, 0x801, 0x84) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000540)={'vxcan0\x00', 0x0}) sendto(r3, &(0x7f0000000480)="9ac14ef45e1f18a129807ee109f1db960589ca50c82a7c1718914f8236667da0fdd6b59d48f0c6f7b86d02b6f7b6ac44b7d18eafe055cbac8d196ae7449656e5e254692a4a2d0d90d7f59db61e61f916b15bc3d57989615ba4f93a83502b9d32fafadaca2a27309d433214b11fc9b48a015b0ee3bbcb3f4e7456bd361445e1d932f8fd9265370f9f003be4ca251eb2823211dfa143fe23b5323b0d78c7efb81d5ed173429cb0a97c4a68f2f423a7b811db933e8315232c7b29d29c1667", 0xbd, 0x4000, &(0x7f0000000580)=@can={0x1d, r5}, 0x80) connect$inet(r4, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r4, 0xfffffffd) r6 = socket$inet6(0xa, 0x3, 0x2) setsockopt$inet6_int(r6, 0x29, 0x2, 0x0, 0x0) r7 = accept4(r4, 0x0, 0x0, 0x0) recvmmsg(r7, &(0x7f0000001000), 0x581, 0x40000000, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r7, 0x84, 0xb, &(0x7f00000002c0)={0x1, 0x1, 0x2, 0xff, 0xa4, 0x0, 0x1, 0x0, 0x5, 0x28, 0x0, 0x0, 0x2, 0x20}, 0xe) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r7, 0x84, 0x6, &(0x7f0000000380)={0x0, @in={{0x2, 0x4e22, @multicast1}}}, &(0x7f0000000180)=0x84) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f00000000c0)) r8 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r8, &(0x7f00000001c0)={0xa, 0x0, 0x0, @empty}, 0x20) syz_emit_ethernet(0x46, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60f91e2e00107300fc040000000000000000000000000000ff02000000000000000000000000000100000000ff"], 0x0) recvfrom$inet6(r8, 0x0, 0x0, 0x60, 0x0, 0x0) ioctl$PPPIOCSMRRU(r2, 0x4010744d, &(0x7f0000000080)=0xc) 2.255308335s ago: executing program 2 (id=13223): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket(0x10, 0x3, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000003280)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) sendmsg$NFT_BATCH(r1, &(0x7f0000009f00)={0x0, 0x0, &(0x7f0000009ec0)={&(0x7f0000004340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_DELSETELEM={0xf0, 0xe, 0xa, 0x101, 0x0, 0x0, {0x6, 0x0, 0x4}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0xdc, 0x3, 0x0, 0x1, [{0xd8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_EXPIRATION={0xc}, @NFTA_SET_ELEM_KEY={0xc0, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x48, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VALUE={0x71, 0x1, "4408f68929288a702e0d1e114b27da16f370d1a42a8da44e69a708ee6b22e232133067ecf78199c904c0b6cef741cfc867f1c061e3002a13d8420da3a53e8a882c89cb7832ade488b834ca1eb9e34a04b727da9a8cc4b28a5de8aececcfecf4f36b201c58b35aecbe86a4e8e18"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x9e02f13dd87731e4}}}, 0x118}, 0x1, 0x0, 0x0, 0x4008000}, 0xc000) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000380)={0x1, [0x0]}, &(0x7f0000000400)=0x6) r3 = socket$inet6(0xa, 0x5, 0x0) recvfrom$inet6(r3, &(0x7f0000000440)=""/29, 0x1d, 0x2, &(0x7f0000000480)={0xa, 0x4e24, 0x6, @local, 0x6}, 0x1c) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540), 0x10000, 0x0) ioctl$SIOCGIFHWADDR(r4, 0x8927, &(0x7f0000000580)={'syz_tun\x00'}) bind$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x11) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x0, 0x0, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) unshare(0x24020400) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x26e1, 0x0) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x42000, 0x0) r7 = openat$cgroup_ro(r5, &(0x7f00000003c0)='memory.swap.events\x00', 0x275a, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff1}, 0x94) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="70000000100001002cbd70002000000000000000", @ANYRES32=0x0, @ANYBLOB="0800975780200000140003006e657464657673696d30000000000000050011000400000034001680300001802c000c80"], 0x70}, 0x1, 0x0, 0x0, 0x200080c5}, 0x20044080) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r7, 0x0) ioctl$PPPIOCNEWUNIT(r7, 0xc004743e, &(0x7f0000000200)=0x800007) connect$llc(r7, &(0x7f00000004c0)={0x1a, 0x305, 0x5, 0x9, 0x10, 0x2, @multicast}, 0x10) ioctl$PPPIOCSMAXCID(r6, 0x40047451, &(0x7f0000000500)=0xffff0080) getsockopt$IP_SET_OP_GET_BYNAME(r3, 0x1, 0x53, &(0x7f0000000240)={0x6, 0x7, 'syz1\x00'}, &(0x7f0000000280)=0x28) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r10, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000140)=[{0x20, 0x81, 0x0, 0xfffff024}, {0x20, 0x0, 0x1, 0xfffff038}, {0x6, 0x0, 0x0, 0x2000000}]}, 0x10) sendmmsg(r9, &(0x7f0000001c00), 0x400000000000159, 0x40840) ioctl$PPPIOCSMAXCID(r6, 0x40047451, &(0x7f0000000000)=0x8) 2.183111436s ago: executing program 4 (id=13225): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000280)={@dev={0xfe, 0x80, '\x00', 0x14}, 0x800, 0x0, 0x103, 0x1}, 0x20) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000004c0)={0xffffffffffffffff}) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000280)="390000001300090468fe0700000000001000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007208", 0x39}], 0x1) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f00000005c0)}, 0x20) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0xa, &(0x7f0000000200)=@raw=[@call={0x85, 0x0, 0x0, 0x5e}, @map_fd={0x18, 0x4, 0x1, 0x0, r4}, @tail_call={{0x18, 0x2, 0x1, 0x0, r5}}, @map_idx={0x18, 0x7, 0x5, 0x0, 0x8}], &(0x7f00000002c0)='GPL\x00', 0x31, 0x6d, &(0x7f0000000300)=""/109, 0x41100, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000003c0)={0x2, 0x3}, 0x8, 0x10, &(0x7f0000000400)={0x1, 0x1, 0x7, 0xfffffffc}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000440)=[0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff], &(0x7f0000000480)=[{0x2, 0x4, 0x3, 0x2}, {0x3, 0x1, 0x2, 0xc}, {0x5, 0x1, 0x6, 0xa}, {0x5, 0x5, 0x10, 0xb}], 0x10, 0x5}, 0x94) ioctl$FS_IOC_GETFSLABEL(r6, 0x800452d3, &(0x7f0000000100)) sendmsg$nl_generic(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="340000001400010004000000fedbdf250a00000004000000080008800402478014000280bf"], 0x34}, 0x1, 0x0, 0x0, 0x20000804}, 0x4800) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000001500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x4c, 0x4c, 0x5, [@datasec={0x2, 0x0, 0x0, 0xf, 0x3, [], "44942d"}, @datasec={0x5, 0x4, 0x0, 0xf, 0x1, [{0x5, 0x9}, {0x4, 0x4, 0x4}, {0x1, 0x4, 0xc}, {0x2, 0x83, 0x1}], "84"}]}, {0x0, [0x2e, 0x61, 0x61]}}, &(0x7f00000014c0)=""/2, 0x69, 0x2, 0x1}, 0x28) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000380)="3900000013000318680907070000000f0000ff3f04000000170a001700000000040037000f00030001332564aaee7b1d58b9a64411f6bbf44d", 0x39}], 0x1) ioctl$int_in(r1, 0x5452, &(0x7f00000000c0)=0x400) r7 = getpid() ioctl$sock_SIOCSPGRP(r1, 0x8902, &(0x7f0000000140)=r7) syz_open_procfs$namespace(r7, &(0x7f0000000000)='ns/pid_for_children\x00') setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) 2.178124807s ago: executing program 0 (id=13226): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x100, 0x50, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r0, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x20e6}}, 0x40) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r2, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r3, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"/1664], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffffe}, 0x48) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r4], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x6, 0xc, &(0x7f00000008c0)=ANY=[@ANYBLOB="1802000003ffffeb00000000000000008500000041000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x0, 0xfd6d, 0xfffffffffffffe5d, &(0x7f00000000c0)="5fd63edbfd8a4a6077fd87686f9a", 0x0, 0x700, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r6 = socket$alg(0x26, 0x5, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x16, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000ffffffff0000000000000000180300002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000070000000850000001100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000740)={r7, 0x0, 0xe, 0x0, &(0x7f0000000640)="0cffffdf71c8afefeba000dee560", 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r8, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB="340000000a06010300000000000000000300000a0900090073797a300000000005000100070000000c000780080009400000b1fd"], 0x34}}, 0x40014) bind$alg(r6, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) accept4(r6, 0x0, 0x0, 0x800) r9 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r9, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r11, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r11, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r11, 0x10e, 0x4, &(0x7f0000000140)=0x7, 0x4) sendmsg$nl_route_sched(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0xcc, 0x30, 0xffff, 0x70bd27, 0x0, {}, [{0xb8, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x10000, 0x0, 0x0, 0x3, 0x0, {0x0, 0x2, 0x0, 0x0, 0xfffe}, {0x0, 0x0, 0x0, 0x0, 0xfffd}}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_gact={0x48, 0x2, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x1}}]}, {0x4}, {0xc, 0x3}, {0xc}}}]}]}, 0xcc}}, 0x0) sendmsg$NFT_MSG_GETOBJ_RESET(r11, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYBLOB="14000000150a03"], 0x14}, 0x1, 0x0, 0x0, 0x44000}, 0x24000040) 2.007844359s ago: executing program 2 (id=13228): socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_TYPE={0x5}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB="240000000104010200000180000000000000000008000540000000000500010001"], 0x24}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000280)={0x24, 0x1, 0x4, 0x5, 0x0, 0x0, {}, [@NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x3}, @NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x24}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendto(r3, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400}) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r3, 0x0, 0x61, &(0x7f0000000100)={'filter\x00', 0x4}, 0x68) r4 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r4, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r5, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) r6 = socket(0x10, 0x803, 0x0) r7 = socket(0x10, 0x803, 0x2) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000002c0), r8) sendmsg$NLBL_UNLABEL_C_STATICADD(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x28, r9, 0x201, 0x70bd26, 0xfffffffe, {0x3, 0x0, 0x26}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @loopback}}]}, 0x28}, 0x8, 0x3000000000002}, 0x844) r10 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r7) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r11, @ANYRES16=r10], 0x3c}, 0x1, 0x0, 0x0, 0x40020c1}, 0x0) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r12, 0x8916, &(0x7f0000000100)={@ipv4={'\x00', '\xff\xff', @multicast2}, 0x56, r5}) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c00000010000305000000000007000000000000", @ANYRES32=0x0, @ANYBLOB="0000000006100000140012800b00010062726964676500000400028008000a00", @ANYRES32=r5], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x440b0) 2.006273844s ago: executing program 3 (id=13229): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000001100000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) pwritev(r0, &(0x7f0000000a00)=[{&(0x7f0000000500)="c6055624b15e9079de350fef5a2fa77675a745ffa74b1af50a9d546625cbaa7de580a6787cdae5852be88f5ecaf14e83d40bb0f51a3c9674576e832b38ed5bc6ddc1416b49df248996e1df4e330655ec738e9bfe0dbf666633f7c3439bd07ef2d77d9e2e22ebbfcaade97eb13588668c3933cefb539f466513121bba88c52f9baa5a0fea8793c7c07286765c3e49116e577c02c9a2dc4a3146aada2255d7085bddb6882eef7a9a6201476cc1ac3ae952d7f7a2eeb4d2e94108fa674ed1a6720ace90806e072a1fefdca073f4a714e740888bc0fe56e519c55c79f28f72f9e8b7060617b6edf777566f7dcc63ee99ca1dc7ab", 0xf2}, {&(0x7f0000000600)="f63e3857b3a7b8afd3411475ed00566d3f106f8cbe354cb8005c83fe88c6db94a7c7e9d1c0f8ad0e9cf54741ee370e03fadb566510fbd5e4a13f8d9ca47697d822109ba80a09402b3ccaac2f62451aef2268c881e3c748283ecab4b2a1d0253568d5097d1945e063c4d35f6a1f8c0d4f30c06317f0bceb8e3f65c27d345b2bd0f5d9e48cfa8bc9f74ac5192cf663becc14562149aeea6d66bc17d600a515b45c12365c25dce68db5ba0e5dcad1dc73492885381397", 0xb5}, {&(0x7f00000006c0)="98b3f7066944ebb75b4adf39154bd149489aba10c37a26951e21c63abd84d4cde2ad2ca1c51ba7cbcab6cf6631d89960006ba0ff015e4d50926b3a51dfb7a6a9354b1793bbe58515507c7346bfac6bb5124af1ac5f18a48f311910d083fcce76bce481b0d4c2668aa6480a9e11206b8d760860faaa36aa1c9d5fa6dc28465e1b726c9a64e8fe4225e7135b722ff81031ba90bf162c9a7a2793780f0701b56c527caac07b561f3e6d26c84a86b78704d1ea3190b909c68183c6e2b43e8d099f0f0a3a4906af1f34596a26ca006c56e2b739bc4b4223add806b67b05cd1c58", 0xde}, {&(0x7f0000000800)="ce9a25dcec7efb6288ad8fcdda225bc283f49842105e93819bcd3d042b19930ba681ec66d0e933af8eb92fd7db04aa5d8b8a74a49866d77625f7c8b8c7815ab0d5d4eddebecd", 0xfffffffffffffed0}, {&(0x7f0000000880)="34d855780d99fc7d5787b1b0a33a938b2956dd8d17e3716ec21d01ca01299bc3b1e42b020d7db19128cd1bead4ffb0b27dbab38158a59f6421e94e4ecd767872210b37d1cd75e9c6b3113042ca91a99525ab1206c77f75b690ecbba98c903662bc1fcfb8b957032973a17c9feb399d3e83d83e93e6a9fcd8576b710f507165cccfc2aeba", 0x84}, {&(0x7f0000000940)="9020ae7bac8c7d7e965509bc0340042e6d301880e45b284bafb374363a183c05527b373dbd222e34c18bdafb423b84f6c759f0b8ba85fa16512310d65c849285f2fefc6af7dba0632b0a905616026125763595686846c6698a19e683e48ede676a11a17974201af312a6a9ebc36a430f1f09bed0d0695cb05bb2f15481bfcb1fc901cb519d8ae11bfdcde3c2c2dfcab0d37efd9c", 0x94}], 0x6, 0x7, 0xfffffff9) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x3a) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0xe22, 0x4, @mcast1, 0x22}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r3, &(0x7f0000000640), 0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="1809000000ffffff00000000000000008510000002000000850000000f0000009500000000000000"], 0x0, 0xfffffdff, 0x0, 0x0, 0x727c45cd4283345, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = socket$netlink(0x10, 0x3, 0x2) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1b, 0x3, 0xa, 0x9, 0x51840, 0xffffffffffffffff, 0xfe, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2, 0x2}, 0x50) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r2, r5}, 0xc) bpf$PROG_BIND_MAP(0xa, &(0x7f00000007c0)={r0}, 0x11) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r4) sendmsg$TIPC_NL_NODE_GET(r6, &(0x7f0000000e40)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000d40)={&(0x7f0000000c00)={0x12c, r7, 0x4, 0x70bd2c, 0x25dfdbfb, {}, [@TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x400}]}, @TIPC_NLA_BEARER={0x68, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1cd}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x0, @private2, 0x6}}, {0x14, 0x2, @in={0x2, 0x4e24, @rand_addr=0x64010100}}}}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9f1e}]}]}, @TIPC_NLA_NET={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x6}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x6}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xed}]}, @TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_BEARER={0x64, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_NAME={0x15, 0x1, @l2={'eth', 0x3a, 'team_slave_1\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x800}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @local}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x37}}, 0x1}}}}]}]}, 0x12c}, 0x1, 0x0, 0x0, 0x48080}, 0x0) 1.839483819s ago: executing program 3 (id=13230): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x8}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @tunnel={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0xc}, @NFTA_TUNNEL_KEY={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_TUNNEL_MODE={0x8, 0x3, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0xcc}}, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r1, 0x0, 0x200, 0x0) vmsplice(r3, &(0x7f0000000100)=[{&(0x7f00000003c0)="89a25031b0f94f0cd90348a0d21ee413fa36ee8608f0844238e86d19f73752712e44cf133f8e6f0d32d614bbc3926a2e37f261021dd991c941e3e6f1f3856cc68dfe41ae7eaf23ba91d8cbfbb99cae9c90c9dcac5cf843794592a5d408bd312d70e145a62181e3aaa9c243d775a318fc99b7", 0x72}, {&(0x7f0000002c40)="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", 0x18f}], 0x2, 0xa) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/user\x00') ioctl$NS_GET_OWNER_UID(r5, 0xb704, &(0x7f0000000040)) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x30, r6, 0x10, 0x70bd2b, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0xc, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x3}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x4008000}, 0x20000000) sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f0000000fc0)={0x0, 0x0, &(0x7f0000000f80)={&(0x7f0000000f00)={0x38, 0x2, 0x3, 0x301, 0x0, 0x0, {0x0, 0x0, 0xa}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x3}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x2, 0x2}}, @NFQA_CFG_MASK={0x8}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x4044090}, 0x200000d4) 1.710851774s ago: executing program 4 (id=13232): syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) socket$nl_generic(0x10, 0x3, 0x10) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x1304000, 0x1000}, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket(0x40000000015, 0x5, 0x0) connect$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r3, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) recvmmsg(r3, &(0x7f0000001740)=[{{0x0, 0xfd67, &(0x7f0000001400), 0x1}}], 0x4000210, 0x10002, 0x0) read$alg(r3, &(0x7f0000000000)=""/13, 0xd) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r4, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r5, {0x2, 0x3, @dev}, 0x2}}, 0x2e) close(r4) socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r4, &(0x7f0000000040)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x2, 0x1, 0x2, 0x4, {0xa, 0x4e20, 0x4, @loopback, 0x7}}}, 0x32) ioctl$PPPIOCGMRU(r4, 0x80047453, &(0x7f0000000080)) sendmsg$NFT_BATCH(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001400010000000000000000000010000a80000000060a09048000000000000000f4ffffff530004802c0001800e000100696d6d656469617465000000180002800c00028005000100c4000000080001400000000924000180090001006d65746100000000140002800800024000000008080001400000001009000100730900020073797a320000000020000000080a05000000000000000000020000000900010073797a30"], 0xc8}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)=ANY=[@ANYRES16=r3, @ANYBLOB="b535032e368adbb94555e744857328b82b5b51eefe4816224a13c3ae9c00a2710ae0792d1013e6d8d45326ff2f0b87b0a5ab2b71d9ea65b142b6a05d8718be37c670e5dd5d419339fe21f4bff91da33b9c6ae2648cf8deac3d07b9c95b875728444ff26ad5b1dd4b309dd2963f105b40fc80586eddd25398e80a89ff3e725ba0a169e97e93a5d78721d060cf2f487ad0b960cb9156c955fc62d90cf7e9cb5de53b6d7be6decc7801f7c36c2f34f0f4ebf7caf5eb1483bff60e8db911c7bafe023bbbc1ba6a9e0379068a14e01f0392b0c25f568ad30b36013e8718feebfc8e1699c24c00f99d8be322352af5b595", @ANYBLOB="5f6d6f795bc3a698a7bc25c8924c473a4c4a48bff97b78be41acbbf8fefa168b22732e72ee38220fddfe43c5f48f123e52f9be4fae9d221943c88cad845df8b99e036c748e467bbd97c7572194de795b5539077bca609a60d59f5e21200bad8050edfbb6670519e501728551219469e200f4c3123e7e1cdb05c8b66e79626a4845a29cccd0ff8e01d80790e089b932bb15c94e9f02bea865fb54dad786125792ec201235bc2c7738d5ffedff7ebd5e77167f8d6415a9106be9e7408ca05d58fca3e463e3f9cc071f1b7f"], 0x8c}, 0x1, 0x0, 0x0, 0x20000084}, 0x14) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r6, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600, 0x1}}, 0x20) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, 0x0}, 0x8) r8 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000240)=r7, 0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000001c0)={r8, 0x0, 0x0}, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'sit0\x00'}) 1.700911391s ago: executing program 3 (id=13233): r0 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r0, &(0x7f0000000180)={0x2, 0xce20, @empty}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0xe, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000f0cd00000000000004000000850000000500000095"], &(0x7f0000000000)='GPL\x00'}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000001780)=ANY=[@ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r3}, &(0x7f00000006c0), &(0x7f0000000700)=r2}, 0x20) sendmsg$unix(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000080)='\t', 0x1}], 0x1, &(0x7f0000001240)=[@rights={{0x14, 0x1, 0x1, [r4]}}], 0x18, 0x20008000}, 0x4000080) listen(r0, 0x3) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r5, &(0x7f0000000240)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x20}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x1, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x4e21, 0xce20, 0x41424344, 0x41424344, 0x0, 0x5, 0x5, 0x0, 0x5, 0x0, 0x18}}}}}, 0x36) 1.504215014s ago: executing program 2 (id=13235): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000006c0)={0x2, 0x4, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) setsockopt$inet_udp_int(r0, 0x11, 0x67, &(0x7f0000000440)=0x200, 0x5f) sendmmsg$inet(r0, &(0x7f0000000600)=[{{&(0x7f0000000680)={0x2, 0x4e20, @multicast2}, 0x10, 0x0}}], 0x1, 0x2000c044) sendmmsg$inet(r0, &(0x7f00000051c0)=[{{0x0, 0x0, &(0x7f00000050c0)=[{&(0x7f0000000340)="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", 0xfc}, {&(0x7f00000004c0)="f2805ad7923bbe6645a4aa1078f27b3d9fc87faff2fb93a3ad4ee59b02676d23d93ad430470fd609b8f54ad2487821ffffff7f970000006113cf0a90c44a7012f2695ffeccd736153ae5bf95dfc06da9855c88a12bdcca41409daae23f97a8b67f0350d5be23b01e7500106dec28d934bb4250e903f7e4bd9f60ae7f8094db8c0a915df44488a45412754ffc31eee521ca8675b878cbb1d51173995d2e7a99db1d892da856ebc15f70d6ec34b21bc00fbe7cc86a8bf0be3c91647a9c764425ada52a2b13ccffe8ec0bdd8e752660b1f14a2b4ff26d91fb0b686b465d55c69b49d08a8b43122205ea848f53f4b7cd1054", 0xf0}, {&(0x7f00000040c0)="a0b35589fecbe9b6e9c849727ddd4fe9f0eebb8267", 0x15}], 0x3}}], 0x1, 0x4000004) 1.388038731s ago: executing program 2 (id=13236): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r0, 0x50009417, &(0x7f0000000740)={{r0}, 0x0, 0x10, @unused=[0xfffffffffffffffb, 0x1000, 0x4, 0x5], @name="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"}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f00000004c0), r1) sendmsg$NFC_CMD_ENABLE_SE(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010028bd7000ffdbdf2511000000080015000200000008000100c4a8"], 0x24}, 0x1, 0x0, 0x0, 0x71eff8d2059dfe60}, 0xc004) r3 = socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(r3, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r6 = socket(0x11, 0x800000003, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000580)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x9, [@enum64={0x4, 0x2, 0x0, 0x13, 0x1, 0x1, [{0x7, 0x1, 0x7fffffff}, {0x1, 0xf4af, 0x8}]}]}, {0x0, [0x61, 0x5f, 0x5f, 0x2e, 0x5f, 0x5f, 0x5f]}}, 0x0, 0x45, 0x0, 0x9, 0xfffffffe}, 0x28) r9 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd8073a46b08b94214d816f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb4147000001000000008f2b9000f22425e4097ed62cbc891061017cfa6f6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe68db8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3542646bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0xf}, 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000380)=ANY=[@ANYRES32=r10, @ANYRES32=r9, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r10}, &(0x7f0000000000), &(0x7f0000000080)=r7}, 0x20) close(r8) bind$packet(r6, &(0x7f0000000d00)={0x11, 0x0, r5, 0x1, 0x7f, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xb5}}, 0x14) r11 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_PORTS(r6, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r11, 0x20, 0x70bd2a, 0x25dfdbfd, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20044004) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a0103000000000000e700010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a320000000028000480080002400000000008000140000000051400030076657468315f6d6163767461700000000900010073797a31000000002c0000000020000c00024000000000000000010900010073000000140000001100010000000000000000000000000a00000000"], 0xc8}}, 0x200420c1) 1.387651923s ago: executing program 5 (id=13237): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x170, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) (fail_nth: 22) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4b0, 0x158, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3e0, 0xffffffff, 0xffffffff, 0x3e0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [0x0, 0x0, 0x0, 0xff], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x138, 0x158, 0x0, {}, [@common=@unspec=@connbytes={{0x38}, {[{0x2}, {0x7f}], 0x2, 0x2}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @unspec=@NOTRACK={0x20}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [0x0, 0xffffffff], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x5, 0x41, 0x0, 0x2, 0x1800, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x510) 1.247168048s ago: executing program 3 (id=13238): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) recvmmsg(r0, &(0x7f00000031c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x42, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) ioctl$TUNSETOFFLOAD(r1, 0x5421, 0x110e22fff7) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000300)={r1, 0x2000000, 0x4, 0x0, &(0x7f00000000c0)="0010d1", 0x0, 0xa, 0x0, 0x2b, 0x0, 0x0, 0x0}, 0x50) 898.399887ms ago: executing program 5 (id=13239): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f00000002c0)=ANY=[], 0x8) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000001440)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0)=""/19, 0x13}, 0xc}], 0x1, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000040)=0x7, 0x4) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x44884) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000010c30000000003000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000116608000000000000180000000000000000000000000010009500000000000000360a020000000001180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50af8ff00000000850000000600000095000000"], &(0x7f0000000000)='GPL\x00', 0xa, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x94) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r1, &(0x7f0000000140)={&(0x7f0000000000)={0xa, 0x4e22, 0xfffffffb, @mcast2, 0x9}, 0x1c, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="280000000000000029000000040000002b0110000000000004"], 0x28}, 0x4004004) setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000000)=0x1, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) r2 = socket$alg(0x26, 0x5, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f00000003c0)={{0x2, 0x4e22, @empty}, {0x20000010304, @local}, 0x2, {0x2, 0x4e20, @multicast2}}) bind$alg(r2, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(des3_ede-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, 0x0, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r4, 0x84, 0x7, &(0x7f0000000000), &(0x7f0000000040)=0x4) 839.669926ms ago: executing program 2 (id=13240): socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000002340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000012c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) pipe(&(0x7f00000001c0)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000), 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000005c0)={r1}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x11, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x36}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}]}, &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) socket$phonet_pipe(0x23, 0x5, 0x2) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$kcm(0x10, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r0, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r3}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) 753.869049ms ago: executing program 3 (id=13241): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000600)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(camellia-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292", 0xc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0xffff}, 0x1c) r3 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read(r3, &(0x7f0000000080)=""/4, 0x4) listen(r2, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendto$inet(r4, &(0x7f0000000040)="a6", 0xffffff4c, 0x0, 0x0, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000000c0), r6) sendmsg$NLBL_CALIPSO_C_LISTALL(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x14, r7, 0x3d810686a7d95765, 0x70bd2a, 0x25dfdb75}, 0x14}, 0x1, 0x0, 0x0, 0x4481}, 0x24004052) setsockopt$inet_tcp_TLS_TX(r5, 0x6, 0x1, &(0x7f0000000140)=@ccm_128={{}, "3f968a231afa0e18", "4a952e4ea416ad75f769d6386c3c044b", '\by\x00', "e4eb37b07ad86ed7"}, 0x28) sendmsg$AUDIT_USER_AVC(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x24000080) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)=ANY=[@ANYRES64=r8], 0x50) socket$unix(0x1, 0x2, 0x0) epoll_create1(0x0) epoll_create(0x78) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f00008e8000/0x2000)=nil, 0x2000, 0x0, 0x12, 0xffffffffffffffff, 0x552c7000) socket(0x14, 0x2, 0x4) vmsplice(0xffffffffffffffff, &(0x7f00000012c0), 0x0, 0xa) 689.236666ms ago: executing program 5 (id=13242): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r0) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYRES8=r1], 0x44}}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000b40)=@mangle={'mangle\x00', 0x2, 0x6, 0x8d8, 0x550, 0x550, 0x250, 0x250, 0x0, 0x808, 0x808, 0x808, 0x808, 0x808, 0x6, 0x0, {[{{@ipv6={@empty, @private1, [], [0x0, 0x0, 0x0, 0xff], 'pimreg0\x00', 'macvtap0\x00', {}, {}, 0x21, 0x0, 0x5}, 0x0, 0x228, 0x250, 0x0, {0x7a00000010000000}, [@common=@hl={{0x28}, {0x3, 0x4}}, @common=@inet=@policy={{0x158}, {[{@ipv4=@rand_addr=0x64010101, [0xff000000, 0x1fe000000, 0xff000000, 0xffffffff], @ipv4=@broadcast, [0xffffffff, 0xff, 0xffffffff], 0x4d5, 0x0, 0x1, 0x1, 0x0, 0x16}, {@ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, [0xff, 0x0, 0xff], @ipv4=@broadcast, [0xff000000, 0xffffffff, 0xffffffff, 0xffffff00], 0x4d4, 0x3507, 0x89, 0x1, 0x16, 0x4}, {@ipv4=@remote, [0xffffff00], @ipv6=@mcast1, [0xff, 0xff000000, 0xffffff, 0xff000000], 0x4d2, 0x3505, 0x19, 0x0, 0x10, 0x9}, {@ipv4=@dev={0xac, 0x14, 0x14, 0x32}, [0x0, 0x0, 0x0, 0xff], @ipv4=@rand_addr=0x64010100, [0xff, 0xffffff00, 0xffffff00, 0xffffffff], 0x4d5, 0x3502, 0x16, 0x0, 0x10, 0xc}], 0x4, 0x1}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x1e0, 0x218, 0x0, {}, [@common=@rt={{0x138}, {0x3, [0x8, 0x2400], 0x80000000, 0x8, 0x94b06560c6564e1f, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast1, @mcast1, @loopback, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @remote, @local, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x2c}, @dev={0xfe, 0x80, '\x00', 0x22}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @remote, @local, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}], 0xf}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff}, {0x0, 0x20}, {0x0, 0x0, 0x4}}}}, {{@ipv6={@ipv4, @initdev={0xfe, 0x88, '\x00', 0x4, 0x0}, [0x0, 0x0, 0x0, 0xff], [0x0, 0x0, 0xff000000], '\x00', 'bond_slave_0\x00', {}, {}, 0x0, 0x0, 0x2}, 0x0, 0xa8, 0xe8, 0x48000000}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x0, 0xffffffff, 0x3, 0x5, 0x2, 0x8000, 0xc, 0xffffffff]}}}, {{@uncond, 0x0, 0xa8, 0x1d0}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0xcb, 'system_u:object_r:kmsg_device_t:s0\x00'}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x1, 0x8, @ipv6=@remote, 0x4e22}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x938) (async, rerun: 32) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 32) sendmmsg$unix(r4, &(0x7f00000000c0), 0x3f, 0x0) (async) ioctl$sock_TIOCINQ(r5, 0x541b, &(0x7f0000000100)) sendmsg$kcm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d083910000000000000a1180015000600142603600e120900210000000401a80016000400144006000300036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$can_j1939(r6, &(0x7f0000000340)={0x1d, r7, 0x0, {0x1, 0x0, 0x6}, 0xfe}, 0x18) (async, rerun: 32) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) (rerun: 32) setsockopt(r8, 0x84, 0x81, &(0x7f00000002c0)="020000000980ffff", 0x8) (async, rerun: 64) r9 = socket(0x10, 0x3, 0x0) (rerun: 64) setsockopt$netlink_NETLINK_TX_RING(r9, 0x10e, 0xc, &(0x7f0000000240)={0x4001, 0x7ff, 0x1000, 0x5}, 0x10) (async) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="200000001600156f27bd7000fddfdf270a000000", @ANYRES32=0x0, @ANYBLOB="08006391d095860a"], 0x20}, 0x1, 0x0, 0x0, 0x620080d4}, 0x24080) (async) ioctl$XFS_IOC_PATH_TO_HANDLE(r4, 0xc0385869, &(0x7f0000000440)={r6, &(0x7f0000000300)='system_u:object_r:kmsg_device_t:s0\x00', 0x2000, &(0x7f0000000380)={@align=0x9, {0x1, 0x1, 0x1000, 0xfffffffffffffffa}}, 0x9, &(0x7f00000003c0), &(0x7f0000000400)=0x80000000}) (async) sendmsg$NFT_BATCH(r9, &(0x7f0000000e80)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000e40)={&(0x7f00000022c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x9c, 0x0, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_USERDATA={0x7f, 0x6, "93955293b9d6c1e4bec293cceed43614bb8efcb5260e02963e20e4f0071dc7d4d2a7ff69bb2a15730814f6e8410cb7cf502d2b434fe9dcbf3778649c4cc0323e0ca74b72142829cffc7c46880abdb2bc6c3bca612c9cee360237cc454a08f83e3e8271265837b44720f5440507cba34726e5c90a7e401fc174d520"}]}, @NFT_MSG_NEWTABLE={0x78, 0x0, 0xa, 0x201, 0x0, 0x0, {0xd, 0x0, 0x8}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_USERDATA={0x43, 0x6, "949d9036397cbda7253727ced092a67c5c86a4be304b96b8905786c265172446fa35128f38190f56ad9f8180513e6a8ec9eae8642b02dc230ba2ee63d0367c"}]}, @NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x5, 0x0, 0x0, {0x3, 0x0, 0x2}}, @NFT_MSG_NEWTABLE={0x214, 0x0, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_USERDATA={0x9e, 0x6, "3a24bf239aa359e4f117860c2ea1545f3696ad8252a4da95ef3386706a5464e6df39e58ae8c31bacd75ccfdd104590b8cd51502bb66291db4ebcf873a2f4e924677ae368ac484f60432cac8ab238ebb8f48527db3ff0c7c88e41fa6b6a377c4dd1888b850b7eb384c62cfd92c738e8ae4982b9cc0e1974898976bbfd24c752c1c309d0f3d8d891e2f7891d6a16ae954337ad871a28278f99fb57"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_USERDATA={0xc1, 0x6, "f31827c076c05beb9abdcdb26ba5662d3561ea10aca2f237cda8d5742fbd8f0b2e2ec6155d300c8e08862167a307b06e1f0fa113d413c8bd243d002a7154a6d5d11c023c03a010e6fa4a56e31ac053ee57b3e119fced5288c8207449a9a5ef2211fb76134b692832de95163d7db94e9d032a6fb1770c33360c6428d9d29fdbe44fc06b29d078cec4749cc33fde8c61d7cb02807d5fa7a691a3444494483785627af9f2d4ba3129f776f74e3477a40ee98385ff7235dbc374b75195034b"}, @NFTA_TABLE_USERDATA={0x75, 0x6, "a99646065a5c892332627487078c0cdb3ccf1752f311c541beef172c5c70c13af4be209bce570a83fb5c4d6ba5c18cd5bf5bf22a117fdfeef030776cdd57873ce83499d3a96c26c92d968b789d535fa16cda3decf7a83f4765e4277da39c0fc5b180dc6b221e22b7af47aea6722a76101b"}]}, @NFT_MSG_DELCHAIN={0x14c, 0x5, 0xa, 0x801, 0x0, 0x0, {0x0, 0x0, 0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x5}, @NFTA_CHAIN_TYPE={0xa, 0x7, 'route\x00'}, @NFTA_CHAIN_COUNTERS={0x40, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xc}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x3}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x7fffffffffffffff}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x1ff}]}, @NFTA_CHAIN_USERDATA={0xc7, 0xc, "2927b29a4b59f61793f11839541731f7eaf29d1f4360005224bf9c94f231e787463b5724fe67fe52fb3f5ce53e186021ac1111bd7ed366ede75ba12744355b564502ad4ea91a5e31ee5e9999cd525e8d7dad08530b30bde397a734259481a18953d07724495304d48038a923dcc7879de0c1af0e2181edf62a37bc2ce1cb50c6dfe7ed2d299de9862794291a68c0a4f94af20e0c94426ff3f053d71cbafc594139591ff875d0c8795d2fe1f99eea6e941c66f4466b7c3a08b2de679a44435dcd96d405"}]}, @NFT_MSG_NEWSET={0xfc, 0x9, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x8fc2}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x8}, @NFTA_SET_EXPR={0x10, 0x11, 0x0, 0x1, @exthdr={{0xb}, @void}}, @NFTA_SET_USERDATA={0xba, 0xd, 0x1, 0x0, "27f17650b64b95a39e54dc8eb653e85e8edb11013be2df9adaf93378aeec5a88df46d45d4e2f99f27f25137100b8d1d8d52ed317b777ebb43450fe93fd945e11de31ca75c03d5ad74824474b8ea528d5d880f421b5b9c12b3f5ef66bbbfce3b8bea2b4c4251ef91a70071084d9b909d712dd81fb8103fd7835cf0f26250eb4aaebc510888ddc503b98609a73fd524c4655bb37c7ab5da9976cdfa5675f0b53c761821b0bf9fadcc49134a32ea8b0be138731d4fbf356"}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x5}]}, @NFT_MSG_DELCHAIN={0x148, 0x5, 0xa, 0xf01, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_USERDATA={0xec, 0xc, "972c98c757b2108fd8d2696abb3d828c2c9189446157475c77b41bdd63938a567d1f7e79a414f856629ca7a3d94efc2572284ff634356008587c0f0c9650eedc155f85e2bd59cdc3729241f819c27d641e9300ad2eca4004dd0ce92485f86d6b466d6917d169f8beef92b800d763651c2ab14d6944100031c7bdd636f7ae6d87be330ccaa4abd3d3693f1bb78d667a0386da8cf38cf551b4539330424ee199126d4c51847745b167f2830a14d70b2ca8f2433e67d97cae67894f0c3528d95a4b22488110b5c8c494a10efb2920f619f4921ebeb77e6cd5247e720192f6074406f122eb599f98589b"}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_POLICY={0x8}, @NFTA_CHAIN_COUNTERS={0x1c, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x9}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x5}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x6f4}, 0x1, 0x0, 0x0, 0x40004}, 0x8053) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f00000001c0)=[@ip_retopts={{0x20, 0x0, 0x7, {[@end, @ra={0x94, 0x4}, @lsrr={0x83, 0xb, 0x79, [@loopback, @private=0xa010100]}]}}}], 0x20}, 0x4c000) setsockopt$sock_int(r6, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) 572.668785ms ago: executing program 2 (id=13243): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="1802000000000000000000000f000000850000002800000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300007f000000850000007b00000095"], &(0x7f0000000000)='syzkaller\x00', 0x3, 0x0, 0x0, 0x41100, 0x60, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffff7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000500)="000000002f000000000051229dc9", 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 388.311433ms ago: executing program 5 (id=13244): r0 = socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f000000d379)={&(0x7f00000002c0)=ANY=[@ANYBLOB="180000001400010300000000000000001e"], 0x18}}, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x31, &(0x7f0000000440)=0x8, 0x4) getsockopt$inet6_buf(r1, 0x29, 0x6, &(0x7f0000001500)=""/3, &(0x7f00000000c0)=0xfec2) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r0) 387.616841ms ago: executing program 3 (id=13245): bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000e00)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000080)=0x4000, 0x4) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="28000000100001082cbd7000ffffffff00000000", @ANYRES32=0x0, @ANYBLOB="fffe010001000000080002006a000000"], 0x28}}, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r2, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000002000000851000000600000018020000", @ANYRES32, @ANYBLOB="00000000000000006600020000000000180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222}, 0x78) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x0) readv(r4, &(0x7f0000000040), 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x400c000) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000540), &(0x7f0000000080), 0x619}, 0x38) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'seqiv(rfc4106(gcm(aes)))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f00000009c0)="ad56b6c5820fae9d6dcd3292ea54c7be8bbdadbb1632ea5704cae881ef915d374c90c200", 0x24) r6 = accept4(r5, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000c00), 0x0, 0x8040) sendmsg$NL80211_CMD_REQ_SET_REG(r6, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000700)=ANY=[], 0x1c}}, 0x0) recvmsg(r6, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000680)=""/23, 0x17}], 0x1}, 0x142) bind$xdp(r0, 0x0, 0x0) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) r7 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_tcp_TCP_REPAIR(r7, 0x6, 0x13, 0x0, 0x0) 245.29257ms ago: executing program 5 (id=13246): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYRES64=r0, @ANYRES8=r0, @ANYRES16=r0, @ANYRESOCT=r0], 0x5c}, 0x1, 0x0, 0x0, 0x20002801}, 0x6871b30d8f58f2d9) 181.655161ms ago: executing program 5 (id=13247): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x11, &(0x7f00000008c0)=ANY=[@ANYBLOB="180000008000000000000000fdffffff850000007b000000b7080000000000007b8af8ff00000000b7080000161300007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018030000", @ANYRES32=0x0, @ANYBLOB="0000000000000100b705000008000000850000006900000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000003f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x15) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff}) read$alg(r2, &(0x7f0000000500)=""/4096, 0x1000) splice(r2, 0x0, r1, 0x0, 0x114, 0xe) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) sendmsg$nl_route_sched(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000940)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r6, {0xf000, 0xffff}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r9 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r9, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e20, @remote}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) sendmsg$kcm(r9, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0xffff, 0x2, 0x10, {0x2, 0x4e21, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x20000000) sendmsg$kcm(r9, &(0x7f0000000100)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x23}}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="1800000000000000100100000100000051d833483cc75d51900000000000000004000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319e2e66d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r8, {0xf000, 0xffff}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_IIF={0x8, 0x4, r6}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x6, 0xc, &(0x7f00000008c0)=ANY=[@ANYBLOB="180200000400000000000000000000008500000041000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ffffff85850000007100000095"], &(0x7f0000000140)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x0, 0x23, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000240)=r10}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000640)={0xffffffffffffffff, 0x20, &(0x7f0000000600)={&(0x7f0000000440)=""/238, 0xee, 0x0, &(0x7f0000000540)=""/133, 0x85}}, 0x10) r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x4, 0x21, &(0x7f0000001100)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x4}, {}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0x8}, @alu={0x7, 0x1, 0x1, 0x4, 0x8, 0xfffffffffffffffc, 0x4}, @exit, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @call={0x85, 0x0, 0x0, 0x2}, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000007c0)='GPL\x00', 0x7ff, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000840)={0x1, 0xc, 0x1, 0xfffffff5}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x2, &(0x7f0000000880)=[0xffffffffffffffff, 0x1], &(0x7f00000008c0)=[{0x1, 0x4, 0x0, 0xb}, {0x0, 0x2, 0xe, 0xa62296b9d1e0688e}], 0x10, 0x10001}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x80000, 0x0, 0x0, 0x100, 0x74, '\x00', 0x0, @fallback=0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r12, r13, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x5, 0x14, &(0x7f0000000300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x7fffffff}, [@initr0={0x18, 0x0, 0x0, 0x0, 0xfffffff7, 0x0, 0x0, 0x0, 0x87}, @alu={0x4, 0x1, 0xc, 0xa, 0x5}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0xb, 0x0, 0x0, 0x0, 0x8}, @exit, @tail_call, @alu={0x4, 0x0, 0x2, 0x2, 0x5, 0x1}, @tail_call={{0x18, 0x2, 0x1, 0x0, r11}}]}, &(0x7f00000003c0)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000440)={0x4, 0x7, 0x8, 0xf}, 0x10, r12, 0xffffffffffffffff, 0x8, 0x0, &(0x7f0000000480)=[{0x4, 0x5, 0x2, 0x4}, {0x2, 0x2, 0x3, 0xb}, {0x5, 0x2, 0xb, 0xb}, {0x0, 0x2, 0xc, 0x6}, {0x3, 0x4, 0xd, 0x3}, {0x1, 0x4, 0xc, 0x7}, {0x3, 0x1, 0x1, 0x7}, {0x4, 0x3, 0xb, 0x1}], 0x10, 0x80000000}, 0x94) r14 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="01000000010000000500080001"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r14, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018110000", @ANYRES32=r15, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{}, &(0x7f0000000200), &(0x7f0000000240)='%+9llu \x00'}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x5, 0x40, 0x6, 0x8}, 0x48) 47.591133ms ago: executing program 4 (id=13248): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb0100180000000000000024000000240000000a0000000800000000000006040000000300000001000084008000000400000001000000000000810030615f61612e305f"], 0x0, 0x46, 0x0, 0x1}, 0x28) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r0, &(0x7f00000000c0)=[{&(0x7f0000000240)="66ecc5", 0x3}], 0x1, 0xa) write$tun(r0, 0x0, 0x4a) write$tun(r0, &(0x7f0000000080)={@void, @void, @x25={0x0, 0x2, 0xf1}}, 0x3) socket$nl_route(0x10, 0x3, 0x0) socket$key(0xf, 0x3, 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000019080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) 0s ago: executing program 0 (id=13249): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x11, 0x10, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@alu={0x7, 0x0, 0x7, 0x9, 0x0, 0x0, 0xfffffffffffffffc}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0xc6}}}, &(0x7f0000000080)='GPL\x00', 0x8, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/uts\x00') unshare(0x6a040000) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1f, 0x11, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000040000008500000050000000b7080000000000007baaf8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0c9d4ffb70200000800000018230000187a01fc4b428a65f90460f1193c430bc0fd74715ed00ce4aa5436df89c5b4fcfeaf3e4a9d2ec54fc83d93", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500f8080000365a6a344100000000000000001e"], &(0x7f0000000240)='syzkaller\x00', 0x8, 0x0, 0x0, 0x40f00, 0x73, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r3}, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r7 = socket$kcm(0x2, 0xf, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) sendmsg$NFT_BATCH(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) write$tun(r6, &(0x7f00000004c0)=ANY=[@ANYBLOB="00000000bbbbbbbbbbbbbbbbbbbbbbbb88a84d008100661c00e4000008119078ac1414297f0000013eda35701bfb0bc2"], 0x36) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r10 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r9, r10, 0x5}, 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r9}, &(0x7f00000006c0), &(0x7f0000000700)=r5}, 0x20) sendmsg$inet(r4, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) r11 = socket(0x8, 0x4, 0x3) bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0) r12 = socket$netlink(0x10, 0x3, 0x4) bind$netlink(r12, &(0x7f0000000340)={0x10, 0x0, 0x0, 0x22ffffffff}, 0xc) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r11, 0x40106183, &(0x7f0000001940)={{r1, 0x0, 0x101040, 0x0, 0x4, 0x0, 0x0}, 0x0, 0x0}) kernel console output (not intermixed with test programs): 4][T12159] nbd4: detected capacity change from 0 to 63 [ 1500.693308][T12070] block nbd4: Dead connection, failed to find a fallback [ 1500.712976][T12070] block nbd4: shutting down sockets [ 1500.742042][T12070] blk_print_req_error: 138 callbacks suppressed [ 1500.742062][T12070] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1500.761882][ T135] veth1_macvtap: left promiscuous mode [ 1500.774337][ T135] veth0_macvtap: left promiscuous mode [ 1500.794470][T12070] buffer_io_error: 138 callbacks suppressed [ 1500.794489][T12070] Buffer I/O error on dev nbd4, logical block 0, async page read [ 1500.866144][T12070] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1500.896533][T12070] Buffer I/O error on dev nbd4, logical block 1, async page read [ 1500.914523][T12070] I/O error, dev nbd4, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1500.944196][T12070] Buffer I/O error on dev nbd4, logical block 2, async page read [ 1500.971214][T12070] I/O error, dev nbd4, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1501.002386][T12070] Buffer I/O error on dev nbd4, logical block 3, async page read [ 1501.023030][T12070] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1501.065513][T12070] Buffer I/O error on dev nbd4, logical block 0, async page read [ 1501.077079][T12070] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1501.096629][T12070] Buffer I/O error on dev nbd4, logical block 1, async page read [ 1501.113184][T12070] I/O error, dev nbd4, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1501.136959][T12070] Buffer I/O error on dev nbd4, logical block 2, async page read [ 1501.159670][T12070] I/O error, dev nbd4, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1501.179594][T12070] Buffer I/O error on dev nbd4, logical block 3, async page read [ 1501.194604][T12070] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1501.219972][T12070] Buffer I/O error on dev nbd4, logical block 0, async page read [ 1501.236859][T12070] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1501.260163][T12070] Buffer I/O error on dev nbd4, logical block 1, async page read [ 1501.283341][T12070] ldm_validate_partition_table(): Disk read failed. [ 1501.310907][T12070] Dev nbd4: unable to read RDB block 0 [ 1501.323684][T12070] nbd4: unable to read partition table [ 1501.393588][T12070] ldm_validate_partition_table(): Disk read failed. [ 1501.423334][T12070] Dev nbd4: unable to read RDB block 0 [ 1501.453314][T12070] nbd4: unable to read partition table [ 1501.753490][T12173] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12477'. [ 1502.078938][ T301] Bluetooth: hci0: command 0x0406 tx timeout [ 1502.272138][T11841] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1502.350746][T12218] netlink: 12 bytes leftover after parsing attributes in process `syz.3.12481'. [ 1502.560938][ T135] IPVS: stop unused estimator thread 0... [ 1502.669312][T12228] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.12484'. [ 1502.844685][T12228] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input16 [ 1503.194693][T12251] netlink: 16 bytes leftover after parsing attributes in process `syz.4.12487'. [ 1503.233761][T12247] netlink: 40 bytes leftover after parsing attributes in process `syz.4.12487'. [ 1503.263546][T12247] netlink: 40 bytes leftover after parsing attributes in process `syz.4.12487'. [ 1503.294116][T12247] netlink: 40 bytes leftover after parsing attributes in process `syz.4.12487'. [ 1503.334120][T12247] netlink: 40 bytes leftover after parsing attributes in process `syz.4.12487'. [ 1503.353204][T12247] netlink: 40 bytes leftover after parsing attributes in process `syz.4.12487'. [ 1503.501351][T12263] netlink: 'syz.0.12490': attribute type 1 has an invalid length. [ 1503.532032][T12247] bridge0: port 2(bridge_slave_1) entered disabled state [ 1503.539996][T12247] bridge0: port 1(bridge_slave_0) entered disabled state [ 1503.747021][T12247] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1503.780604][T12247] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1504.102817][T12251] net_ratelimit: 12 callbacks suppressed [ 1504.102840][T12251] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1504.215749][T12263] bond2: entered promiscuous mode [ 1504.221695][T12263] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1504.247979][ T43] bond8: (slave bridge8): failed to get link speed/duplex [ 1504.311333][T12276] bond2: (slave bridge2): making interface the new active one [ 1504.323518][T12276] bridge2: entered promiscuous mode [ 1504.334990][T12276] bond2: (slave bridge2): Enslaving as an active interface with an up link [ 1504.386050][ T9400] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1504.402574][ T9400] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1504.416160][ T9400] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1504.434809][ T9400] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1504.523721][ T9400] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1504.550099][ T9400] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1504.881277][T12314] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 1504.890163][T24959] IPVS: starting estimator thread 0... [ 1504.909213][ T135] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1504.920854][T12314] IPVS: fo: FWM 3 0x00000003 - no destination available [ 1504.953949][ T30] audit: type=1800 audit(1778445966.360:45): pid=12314 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.12498" name="memory.events" dev="tmpfs" ino=874 res=0 errno=0 [ 1505.010581][T12315] IPVS: using max 30 ests per chain, 72000 per kthread [ 1505.022331][ T30] audit: type=1804 audit(1778445966.400:46): pid=12314 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.12498" name="/newroot/168/memory.events" dev="tmpfs" ino=874 res=1 errno=0 [ 1505.047293][T12318] netlink: 'syz.3.12499': attribute type 1 has an invalid length. [ 1505.143585][ T9400] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1505.164449][ T9400] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1505.399423][ T135] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1505.507448][T12331] sctp: [Deprecated]: syz.3.12504 (pid 12331) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1505.507448][T12331] Use struct sctp_sack_info instead [ 1505.576261][T12333] FAULT_INJECTION: forcing a failure. [ 1505.576261][T12333] name failslab, interval 1, probability 0, space 0, times 0 [ 1505.621806][T12333] CPU: 0 UID: 0 PID: 12333 Comm: syz.4.12505 Not tainted syzkaller #0 PREEMPT(full) [ 1505.621837][T12333] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1505.621850][T12333] Call Trace: [ 1505.621858][T12333] [ 1505.621867][T12333] dump_stack_lvl+0xe8/0x150 [ 1505.621896][T12333] should_fail_ex+0x412/0x560 [ 1505.621929][T12333] should_failslab+0xa8/0x100 [ 1505.621962][T12333] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 1505.621989][T12333] ? __alloc_skb+0x186/0x7d0 [ 1505.622014][T12333] ? __alloc_skb+0x1d0/0x7d0 [ 1505.622034][T12333] ? __local_bh_enable_ip+0xd0/0x130 [ 1505.622059][T12333] __alloc_skb+0x1d0/0x7d0 [ 1505.622088][T12333] netlink_sendmsg+0x5d4/0xb40 [ 1505.622124][T12333] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1505.622154][T12333] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1505.622180][T12333] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1505.622209][T12333] ____sys_sendmsg+0x972/0x9f0 [ 1505.622236][T12333] ? __might_fault+0xaf/0x130 [ 1505.622268][T12333] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1505.622307][T12333] ? import_iovec+0x73/0xa0 [ 1505.622339][T12333] ___sys_sendmsg+0x2a5/0x360 [ 1505.622368][T12333] ? __lock_acquire+0x6b5/0x2cf0 [ 1505.622396][T12333] ? __pfx____sys_sendmsg+0x10/0x10 [ 1505.622474][T12333] ? __fget_files+0x2a/0x420 [ 1505.622498][T12333] ? __fget_files+0x3a0/0x420 [ 1505.622534][T12333] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1505.622568][T12333] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1505.622607][T12333] ? __pfx_ksys_write+0x10/0x10 [ 1505.622651][T12333] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1505.622674][T12333] do_syscall_64+0x15f/0xf80 [ 1505.622693][T12333] ? trace_irq_disable+0x3b/0x140 [ 1505.622724][T12333] ? clear_bhb_loop+0x40/0x90 [ 1505.622749][T12333] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1505.622770][T12333] RIP: 0033:0x7f790699cdd9 [ 1505.622791][T12333] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1505.622810][T12333] RSP: 002b:00007f79078c8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1505.622834][T12333] RAX: ffffffffffffffda RBX: 00007f7906c15fa0 RCX: 00007f790699cdd9 [ 1505.622850][T12333] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003 [ 1505.622864][T12333] RBP: 00007f79078c8090 R08: 0000000000000000 R09: 0000000000000000 [ 1505.622877][T12333] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1505.622891][T12333] R13: 00007f7906c16038 R14: 00007f7906c15fa0 R15: 00007fff26277b38 [ 1505.622924][T12333] [ 1505.637223][ T135] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1505.910622][ T43] bond8: (slave bridge8): failed to get link speed/duplex [ 1505.950415][T12347] __nla_validate_parse: 152 callbacks suppressed [ 1505.950446][T12347] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12508'. [ 1505.995737][T12343] bond3: entered allmulticast mode [ 1506.005264][T11841] veth0_vlan: entered promiscuous mode [ 1506.036623][T12331] tipc: Started in network mode [ 1506.044594][T12331] tipc: Node identity ac14140f, cluster identity 4711 [ 1506.064120][T12331] tipc: Enabling of bearer rejected, failed to enable media [ 1506.123934][T12353] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12511'. [ 1506.135782][ T135] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1506.213829][T12353] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12511'. [ 1506.230774][T11841] veth1_vlan: entered promiscuous mode [ 1506.369416][ T8958] bond8: (slave bridge8): failed to get link speed/duplex [ 1506.446794][T12362] FAULT_INJECTION: forcing a failure. [ 1506.446794][T12362] name failslab, interval 1, probability 0, space 0, times 0 [ 1506.474247][T12362] CPU: 1 UID: 0 PID: 12362 Comm: syz.3.12514 Not tainted syzkaller #0 PREEMPT(full) [ 1506.474276][T12362] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1506.474289][T12362] Call Trace: [ 1506.474298][T12362] [ 1506.474307][T12362] dump_stack_lvl+0xe8/0x150 [ 1506.474339][T12362] should_fail_ex+0x412/0x560 [ 1506.474373][T12362] should_failslab+0xa8/0x100 [ 1506.474416][T12362] __kmalloc_cache_noprof+0x88/0x660 [ 1506.474444][T12362] ? nft_pernet+0x23/0x240 [ 1506.474469][T12362] ? nf_tables_newtable+0x435/0x1910 [ 1506.474498][T12362] nf_tables_newtable+0x435/0x1910 [ 1506.474519][T12362] ? nfnetlink_subsys_unregister+0x182/0x1b0 [ 1506.474570][T12362] nfnetlink_rcv+0x123e/0x27b0 [ 1506.474635][T12362] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 1506.474676][T12362] ? ref_tracker_free+0x693/0x840 [ 1506.474734][T12362] ? __netlink_deliver_tap+0x807/0x850 [ 1506.474774][T12362] ? netlink_deliver_tap+0x2e/0x1b0 [ 1506.474801][T12362] ? netlink_deliver_tap+0x2e/0x1b0 [ 1506.474834][T12362] netlink_unicast+0x75c/0x8e0 [ 1506.474874][T12362] netlink_sendmsg+0x813/0xb40 [ 1506.474914][T12362] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1506.474947][T12362] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1506.474977][T12362] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1506.475009][T12362] ____sys_sendmsg+0x972/0x9f0 [ 1506.475039][T12362] ? __might_fault+0xaf/0x130 [ 1506.475071][T12362] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1506.475111][T12362] ? import_iovec+0x73/0xa0 [ 1506.475145][T12362] ___sys_sendmsg+0x2a5/0x360 [ 1506.475173][T12362] ? __lock_acquire+0x6b5/0x2cf0 [ 1506.475202][T12362] ? __pfx____sys_sendmsg+0x10/0x10 [ 1506.475273][T12362] ? __fget_files+0x2a/0x420 [ 1506.475298][T12362] ? __fget_files+0x3a0/0x420 [ 1506.475335][T12362] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1506.475370][T12362] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1506.475493][T12362] ? __pfx_ksys_write+0x10/0x10 [ 1506.475534][T12362] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1506.475557][T12362] do_syscall_64+0x15f/0xf80 [ 1506.475576][T12362] ? trace_irq_disable+0x3b/0x140 [ 1506.475605][T12362] ? clear_bhb_loop+0x40/0x90 [ 1506.475629][T12362] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1506.475650][T12362] RIP: 0033:0x7f37cc59cdd9 [ 1506.475671][T12362] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1506.475688][T12362] RSP: 002b:00007f37cd4f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1506.475712][T12362] RAX: ffffffffffffffda RBX: 00007f37cc815fa0 RCX: 00007f37cc59cdd9 [ 1506.475727][T12362] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 1506.475746][T12362] RBP: 00007f37cd4f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1506.475759][T12362] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1506.475771][T12362] R13: 00007f37cc816038 R14: 00007f37cc815fa0 R15: 00007fff25ad4d68 [ 1506.475805][T12362] [ 1506.490395][T12364] netlink: 'syz.2.12515': attribute type 1 has an invalid length. [ 1506.655265][T12366] netlink: 28 bytes leftover after parsing attributes in process `syz.2.12515'. [ 1506.692868][T12370] netlink: 76 bytes leftover after parsing attributes in process `syz.0.12516'. [ 1506.828825][T11841] veth0_macvtap: entered promiscuous mode [ 1506.986324][T12364] bond2: entered promiscuous mode [ 1506.999856][T12364] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1507.069599][T12380] bond2: (slave bridge4): making interface the new active one [ 1507.077427][T12380] bridge4: entered promiscuous mode [ 1507.086838][T12380] bond2: (slave bridge4): Enslaving as an active interface with an up link [ 1507.099721][T11841] veth1_macvtap: entered promiscuous mode [ 1507.179226][ T43] bond8: (slave bridge8): failed to get link speed/duplex [ 1507.224378][ T135] bridge_slave_1: left allmulticast mode [ 1507.230675][ T135] bridge_slave_1: left promiscuous mode [ 1507.236662][ T135] bridge0: port 2(bridge_slave_1) entered disabled state [ 1507.259934][ T135] bridge_slave_0: left allmulticast mode [ 1507.265805][ T135] bridge_slave_0: left promiscuous mode [ 1507.272404][ T135] bridge0: port 1(bridge_slave_0) entered disabled state [ 1507.346186][ T135] pimreg: left allmulticast mode [ 1507.844844][ T135] bond0 (unregistering): left promiscuous mode [ 1507.855875][ T135] bond0 (unregistering): Released all slaves [ 1508.273174][ T135] bond2 (unregistering): (slave bridge2): Releasing backup interface [ 1508.328248][ T135] bond3 (unregistering): (slave bridge3): Releasing backup interface [ 1508.383058][ T135] bond4 (unregistering): (slave bridge4): Releasing backup interface [ 1508.442175][ T135] bond5 (unregistering): (slave bridge5): Releasing backup interface [ 1508.524771][ T135] bond8 (unregistering): (slave bridge7): Releasing backup interface [ 1508.582186][ T135] bond9 (unregistering): (slave bridge8): Releasing backup interface [ 1508.703048][ T135] bond12 (unregistering): (slave bridge10): Releasing backup interface [ 1508.826574][ T135] bond14 (unregistering): (slave bridge12): Releasing backup interface [ 1508.834967][ T135] bridge12 (unregistering): left promiscuous mode [ 1508.841642][ T135] bridge12 (unregistering): left allmulticast mode [ 1508.936419][ T135] bond15 (unregistering): (slave bridge14): Releasing backup interface [ 1508.944858][ T135] bridge14 (unregistering): left promiscuous mode [ 1508.992275][ T135] bond16 (unregistering): (slave bridge15): Releasing backup interface [ 1509.001344][ T135] bridge15 (unregistering): left promiscuous mode [ 1509.007908][ T135] bridge15 (unregistering): left allmulticast mode [ 1509.056306][ T135] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1509.067469][ T135] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1509.079752][ T135] bond0 (unregistering): (slave team0): Releasing backup interface [ 1509.090304][ T135] bond0 (unregistering): Released all slaves [ 1509.101155][ T135] bond1 (unregistering): Released all slaves [ 1509.115938][ T135] bond2 (unregistering): Released all slaves [ 1509.139900][ T135] bond3 (unregistering): Released all slaves [ 1509.157206][ T135] bond4 (unregistering): Released all slaves [ 1509.172332][ T135] bond5 (unregistering): Released all slaves [ 1509.190047][ T135] bond6 (unregistering): Released all slaves [ 1509.213062][ T135] bond7 (unregistering): Released all slaves [ 1509.233622][ T135] bond8 (unregistering): Released all slaves [ 1509.251100][ T135] bond9 (unregistering): Released all slaves [ 1509.267959][ T135] bond10 (unregistering): Released all slaves [ 1509.290060][ T135] bond11 (unregistering): Released all slaves [ 1509.304875][ T135] bond12 (unregistering): Released all slaves [ 1509.323405][ T135] bond13 (unregistering): Released all slaves [ 1509.341337][ T135] bond14 (unregistering): Released all slaves [ 1509.364687][ T135] bond15 (unregistering): Released all slaves [ 1509.383544][ T135] bond16 (unregistering): Released all slaves [ 1509.401252][ T135] bond17 (unregistering): Released all slaves [ 1509.428400][ T8958] bond8: (slave bridge8): failed to get link speed/duplex [ 1509.578762][T31064] bond8: (slave bridge8): failed to get link speed/duplex [ 1509.676021][T12405] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 1509.716053][T12392] lo speed is unknown, defaulting to 1000 [ 1509.718524][T12407] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12524'. [ 1509.735131][T11841] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1509.751283][ T8956] bond8: (slave bridge8): failed to get link speed/duplex [ 1509.817128][T11841] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1509.942610][ T8958] bond8: (slave bridge8): failed to get link speed/duplex [ 1509.975189][ T43] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1510.013206][ T43] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1510.123113][T12417] netlink: 28 bytes leftover after parsing attributes in process `syz.0.12527'. [ 1510.133377][ T43] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1510.162763][ T43] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1510.284952][ T135] tipc: Disabling bearer [ 1510.297915][ T135] tipc: Disabling bearer [ 1510.327465][ T135] tipc: Left network mode [ 1510.411337][ T8960] bond8: (slave bridge8): failed to get link speed/duplex [ 1510.566588][ T8958] bond8: (slave bridge8): failed to get link speed/duplex [ 1510.675875][T12425] netlink: 36 bytes leftover after parsing attributes in process `syz.0.12529'. [ 1510.743938][T12425] netlink: 36 bytes leftover after parsing attributes in process `syz.0.12529'. [ 1510.743996][ T8958] bond8: (slave bridge8): failed to get link speed/duplex [ 1510.832386][T12429] netlink: 12 bytes leftover after parsing attributes in process `syz.3.12528'. [ 1511.136155][ T8958] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1511.164030][ T8958] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1511.547909][T27086] bond8: (slave bridge8): failed to get link speed/duplex [ 1511.579327][T11839] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1511.600692][T11839] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1511.944691][ T5287] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1511.971871][ T43] bond8: (slave bridge8): failed to get link speed/duplex [ 1512.198566][ T43] bond8: (slave bridge8): failed to get link speed/duplex [ 1512.217254][T12470] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 1512.232280][T12470] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 1512.256792][T12470] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 1512.368175][T12470] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 1512.894383][T12482] netlink: 36 bytes leftover after parsing attributes in process `syz.4.12541'. [ 1512.907781][T12482] netlink: 36 bytes leftover after parsing attributes in process `syz.4.12541'. [ 1512.964777][T12484] netlink: 'syz.2.12542': attribute type 1 has an invalid length. [ 1513.002867][T12484] bond3: entered promiscuous mode [ 1513.010867][T12484] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1513.053766][T12484] netlink: 28 bytes leftover after parsing attributes in process `syz.2.12542'. [ 1513.188657][T12484] bond3: (slave bridge5): making interface the new active one [ 1513.196655][T12484] bridge5: entered promiscuous mode [ 1513.218663][T12484] bond3: (slave bridge5): Enslaving as an active interface with an up link [ 1513.390166][T12491] geneve3: entered allmulticast mode [ 1513.511913][ T135] batadv0: left promiscuous mode [ 1513.534205][ T135] hsr_slave_0: left promiscuous mode [ 1513.540249][ T135] hsr_slave_1: left promiscuous mode [ 1513.550255][ T135] hsr_slave_0: left promiscuous mode [ 1513.556109][ T135] hsr_slave_1: left promiscuous mode [ 1513.562394][ T135] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1513.571589][ T135] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1513.586422][ T135] veth1_macvtap: left promiscuous mode [ 1513.592293][ T135] veth0_macvtap: left promiscuous mode [ 1513.597850][ T135] veth1_vlan: left promiscuous mode [ 1513.604752][ T135] veth1_macvtap: left promiscuous mode [ 1513.610667][ T135] veth0_macvtap: left promiscuous mode [ 1513.616269][ T135] veth1_vlan: left promiscuous mode [ 1513.621711][ T135] veth0_vlan: left promiscuous mode [ 1514.104037][T27086] smc: removing ib device sqz0 [ 1514.184803][T27086] smbdirect: ib_dev[sqz0] removed [ 1514.404549][T12451] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1514.743990][T12498] netlink: 'syz.5.12547': attribute type 83 has an invalid length. [ 1515.134590][ T135] team0 (unregistering): Port device team_slave_1 removed [ 1515.210053][ T135] team0 (unregistering): Port device team_slave_0 removed [ 1515.457557][T12524] netlink: 36 bytes leftover after parsing attributes in process `syz.3.12553'. [ 1515.715212][T24959] lo speed is unknown, defaulting to 1000 [ 1515.734173][T24959] sqz0: Port: 1 Link DOWN [ 1515.802343][T12524] netlink: 36 bytes leftover after parsing attributes in process `syz.3.12553'. [ 1515.808420][ T8960] net_ratelimit: 9 callbacks suppressed [ 1515.808442][ T8960] bond8: (slave bridge8): failed to get link speed/duplex [ 1515.867711][T12526] netlink: 'syz.4.12554': attribute type 1 has an invalid length. [ 1515.940024][T12529] netlink: 28 bytes leftover after parsing attributes in process `syz.4.12554'. [ 1516.209929][T12539] netlink: 'syz.3.12556': attribute type 32 has an invalid length. [ 1516.249134][T12539] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12556'. [ 1516.294074][T12526] bond4: entered promiscuous mode [ 1516.326410][T12526] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1516.455145][T12542] bond4: (slave bridge3): making interface the new active one [ 1516.490002][T12542] bridge3: entered promiscuous mode [ 1516.517775][T12542] bond4: (slave bridge3): Enslaving as an active interface with an up link [ 1516.532015][T11966] bond8: (slave bridge8): failed to get link speed/duplex [ 1516.541959][T12552] netlink: 'syz.0.12555': attribute type 4 has an invalid length. [ 1516.578831][T12552] netlink: 240 bytes leftover after parsing attributes in process `syz.0.12555'. [ 1516.913342][T12558] netlink: 200 bytes leftover after parsing attributes in process `syz.5.12561'. [ 1516.946855][T12558] netlink: 4 bytes leftover after parsing attributes in process `syz.5.12561'. [ 1517.816654][ T9400] tipc: Subscription rejected, illegal request [ 1518.206627][T12541] ipvlan2: entered promiscuous mode [ 1518.216943][T12539] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 1518.243504][T11839] bond8: (slave bridge8): failed to get link speed/duplex [ 1518.365993][ T5287] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1518.423139][T12584] netlink: 68 bytes leftover after parsing attributes in process `syz.2.12565'. [ 1518.538403][ T8960] bond8: (slave bridge8): failed to get link speed/duplex [ 1518.773189][T12591] geneve2: entered allmulticast mode [ 1518.826204][T12601] netlink: 'syz.2.12571': attribute type 1 has an invalid length. [ 1519.143519][T12601] bond4: entered promiscuous mode [ 1519.149703][T12601] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1519.362460][T12616] bond4: (slave bridge7): making interface the new active one [ 1519.393901][T12616] bridge7: entered promiscuous mode [ 1519.433004][T12616] bond4: (slave bridge7): Enslaving as an active interface with an up link [ 1519.468374][T11966] bond8: (slave bridge8): failed to get link speed/duplex [ 1519.700364][T11839] bond8: (slave bridge8): failed to get link speed/duplex [ 1519.832624][T12635] netlink: 60 bytes leftover after parsing attributes in process `syz.3.12577'. [ 1519.903592][T12624] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1519.913818][T12640] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12578'. [ 1519.914222][T12624] 8021q: adding VLAN 0 to HW filter on device team0 [ 1519.969777][T12647] netlink: 120 bytes leftover after parsing attributes in process `syz.2.12578'. [ 1519.993167][T12624] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1520.016604][T12647] netlink: 'syz.2.12578': attribute type 1 has an invalid length. [ 1520.038502][T12647] netlink: 64 bytes leftover after parsing attributes in process `syz.2.12578'. [ 1520.182326][T12624] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1520.215382][T12624] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1520.233644][T12624] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1520.246968][T12624] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1520.266565][T12624] veth1_vlan: left promiscuous mode [ 1520.273557][T12624] veth0_vlan: left promiscuous mode [ 1520.282264][T12624] veth0_vlan: entered promiscuous mode [ 1520.292988][T12624] veth1_vlan: entered promiscuous mode [ 1520.303126][T12624] veth1_macvtap: left promiscuous mode [ 1520.310041][T12624] veth0_macvtap: left promiscuous mode [ 1520.327430][T12624] veth0_macvtap: entered promiscuous mode [ 1520.361548][T12624] veth1_macvtap: entered promiscuous mode [ 1520.390265][T12624] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1520.403340][T12624] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1520.412230][T12624] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1520.421693][T12624] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1520.436489][T12624] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1520.445627][T12624] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1520.454140][T12624] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1520.530854][T27086] bridge0: port 1(bridge_slave_0) entered blocking state [ 1520.537989][T27086] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1520.566384][T27086] bridge0: port 2(bridge_slave_1) entered blocking state [ 1520.573725][T27086] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1520.677907][ T5287] 8021q: adding VLAN 0 to HW filter on device eth3 [ 1520.698075][ T43] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1520.732851][ T43] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1520.915016][ T43] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1520.941963][ T43] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1520.972739][ T43] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1520.975789][T12673] sctp: [Deprecated]: syz.3.12585 (pid 12673) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1520.975789][T12673] Use struct sctp_sack_info instead [ 1521.015280][ T43] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1521.085876][T12681] ipip0: entered promiscuous mode [ 1521.101992][ T135] IPVS: stop unused estimator thread 0... [ 1521.145469][ T43] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1521.164034][ T43] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1521.260971][T11966] bond8: (slave bridge8): failed to get link speed/duplex [ 1521.399114][T11839] bond8: (slave bridge8): failed to get link speed/duplex [ 1521.573710][T12694] netlink: 'syz.5.12588': attribute type 24 has an invalid length. [ 1521.639511][ T43] bond8: (slave bridge8): failed to get link speed/duplex [ 1521.731876][T12698] netlink: 'syz.2.12589': attribute type 322 has an invalid length. [ 1521.773255][T11966] bond8: (slave bridge8): failed to get link speed/duplex [ 1521.857465][T12700] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12590'. [ 1521.888018][T12703] netlink: 200 bytes leftover after parsing attributes in process `syz.3.12592'. [ 1521.908332][T27086] bond8: (slave bridge8): failed to get link speed/duplex [ 1521.921254][T12703] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12592'. [ 1522.048762][ T43] bond8: (slave bridge8): failed to get link speed/duplex [ 1522.142798][T12713] netlink: 20 bytes leftover after parsing attributes in process `syz.0.12594'. [ 1522.182519][T27086] bond8: (slave bridge8): failed to get link speed/duplex [ 1522.192851][T12713] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1522.288569][T12719] netlink: 16 bytes leftover after parsing attributes in process `syz.0.12594'. [ 1522.342171][ T9400] bond8: (slave bridge8): failed to get link speed/duplex [ 1522.482416][T12725] bond5: entered promiscuous mode [ 1522.488644][T12725] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1522.496300][T12725] bridge0: port 3(bond5) entered blocking state [ 1522.503852][T12725] bridge0: port 3(bond5) entered disabled state [ 1522.511851][T12725] bond5: entered allmulticast mode [ 1522.561415][T12725] bridge0: port 3(bond5) entered blocking state [ 1522.567847][T12725] bridge0: port 3(bond5) entered forwarding state [ 1522.684191][T12735] vxcan2: entered allmulticast mode [ 1522.812149][T12744] IPVS: set_ctl: invalid protocol: 3 172.20.20.45:20000 [ 1522.822493][T11839] bridge0: port 3(bond5) entered disabled state [ 1522.841314][ T5287] 8021q: adding VLAN 0 to HW filter on device eth4 [ 1522.909295][ T135] bond8: (slave bridge8): failed to get link speed/duplex [ 1523.089187][ T135] bond8: (slave bridge8): failed to get link speed/duplex [ 1523.111372][T12747] syzkaller0: entered promiscuous mode [ 1523.117016][T12747] syzkaller0: entered allmulticast mode [ 1523.325600][T12761] netlink: 'syz.5.12607': attribute type 3 has an invalid length. [ 1523.450521][T12761] __nla_validate_parse: 4 callbacks suppressed [ 1523.450546][T12761] netlink: 8 bytes leftover after parsing attributes in process `syz.5.12607'. [ 1523.561465][T12761] nbd: must specify an index to disconnect [ 1523.574169][T12772] FAULT_INJECTION: forcing a failure. [ 1523.574169][T12772] name failslab, interval 1, probability 0, space 0, times 0 [ 1523.586941][T12772] CPU: 1 UID: 0 PID: 12772 Comm: syz.0.12611 Not tainted syzkaller #0 PREEMPT(full) [ 1523.586970][T12772] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1523.586984][T12772] Call Trace: [ 1523.586993][T12772] [ 1523.587002][T12772] dump_stack_lvl+0xe8/0x150 [ 1523.587033][T12772] should_fail_ex+0x412/0x560 [ 1523.587085][T12772] should_failslab+0xa8/0x100 [ 1523.587116][T12772] ? skb_clone+0x212/0x3a0 [ 1523.587137][T12772] kmem_cache_alloc_noprof+0x87/0x650 [ 1523.587163][T12772] ? dev_queue_xmit_nit+0x2d/0xad0 [ 1523.587200][T12772] skb_clone+0x212/0x3a0 [ 1523.587219][T12772] ? dev_queue_xmit_nit+0x268/0xad0 [ 1523.587249][T12772] dev_queue_xmit_nit+0x29a/0xad0 [ 1523.587278][T12772] ? dev_queue_xmit_nit+0x2d/0xad0 [ 1523.587317][T12772] dev_hard_start_xmit+0x1c1/0x830 [ 1523.587355][T12772] __dev_queue_xmit+0x14d9/0x3950 [ 1523.587376][T12772] ? bpf_test_run+0x354/0x830 [ 1523.587406][T12772] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1523.587427][T12772] ? __dev_queue_xmit+0x2b6/0x3950 [ 1523.587463][T12772] ? __pfx___dev_queue_xmit+0x10/0x10 [ 1523.587532][T12772] __bpf_redirect+0x9a6/0x12a0 [ 1523.587574][T12772] bpf_clone_redirect+0x313/0x4b0 [ 1523.587613][T12772] ? bpf_test_run+0x1d1/0x830 [ 1523.587642][T12772] bpf_prog_85e106f90f6bc4e0+0x62/0x6b [ 1523.587781][T12772] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1523.587815][T12772] ? arch_stack_walk+0xfb/0x150 [ 1523.587853][T12772] ? ktime_get+0x45/0x220 [ 1523.587893][T12772] ? ktime_get+0x45/0x220 [ 1523.587926][T12772] ? seqcount_lockdep_reader_access+0xa9/0x100 [ 1523.587958][T12772] ? lockdep_hardirqs_on+0x7a/0x110 [ 1523.587989][T12772] ? ktime_get+0x45/0x220 [ 1523.588016][T12772] ? seqcount_lockdep_reader_access+0xea/0x100 [ 1523.588047][T12772] ? bpf_test_run+0x1d1/0x830 [ 1523.588082][T12772] ? bpf_test_timer_continue+0x10c/0x320 [ 1523.588117][T12772] bpf_test_run+0x354/0x830 [ 1523.588175][T12772] ? __pfx_bpf_test_run+0x10/0x10 [ 1523.588227][T12772] ? eth_type_trans+0x348/0x7e0 [ 1523.588254][T12772] ? skb_dst_set+0x72/0x140 [ 1523.588284][T12772] bpf_prog_test_run_skb+0xe2c/0x2260 [ 1523.588336][T12772] ? __fget_files+0x3a0/0x420 [ 1523.588362][T12772] ? __fget_files+0x2a/0x420 [ 1523.588392][T12772] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 1523.588422][T12772] bpf_prog_test_run+0x2c7/0x340 [ 1523.588447][T12772] __sys_bpf+0x643/0x950 [ 1523.588479][T12772] ? __pfx___sys_bpf+0x10/0x10 [ 1523.588530][T12772] ? ksys_write+0x242/0x270 [ 1523.588560][T12772] ? __pfx_ksys_write+0x10/0x10 [ 1523.588595][T12772] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1523.588618][T12772] __x64_sys_bpf+0x7c/0x90 [ 1523.588647][T12772] do_syscall_64+0x15f/0xf80 [ 1523.588666][T12772] ? trace_irq_disable+0x3b/0x140 [ 1523.588710][T12772] ? clear_bhb_loop+0x40/0x90 [ 1523.588734][T12772] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1523.588752][T12772] RIP: 0033:0x7f019d59cdd9 [ 1523.588772][T12772] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1523.588788][T12772] RSP: 002b:00007f019e49f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1523.588808][T12772] RAX: ffffffffffffffda RBX: 00007f019d815fa0 RCX: 00007f019d59cdd9 [ 1523.588822][T12772] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a [ 1523.588835][T12772] RBP: 00007f019e49f090 R08: 0000000000000000 R09: 0000000000000000 [ 1523.588847][T12772] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1523.588858][T12772] R13: 00007f019d816038 R14: 00007f019d815fa0 R15: 00007ffeaae30d08 [ 1523.588902][T12772] [ 1524.201976][T12785] tipc: Started in network mode [ 1524.223236][T12785] tipc: Node identity ae63516befbe, cluster identity 4711 [ 1524.296626][T12785] tipc: Enabled bearer , priority 0 [ 1524.476460][T12798] netlink: 24 bytes leftover after parsing attributes in process `syz.0.12614'. [ 1524.505737][T12780] tipc: Disabling bearer [ 1524.571668][T12802] netlink: 'syz.4.12615': attribute type 1 has an invalid length. [ 1524.705745][T12802] bond6: entered promiscuous mode [ 1524.726584][T12802] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1524.924691][T12802] bond6: (slave bridge4): making interface the new active one [ 1524.955313][T12802] bridge4: entered promiscuous mode [ 1524.991508][T12802] bond6: (slave bridge4): Enslaving as an active interface with an up link [ 1525.200093][T12828] vlan1: entered allmulticast mode [ 1525.225147][T12828] veth0_vlan: entered allmulticast mode [ 1525.411523][T12838] netlink: 'syz.2.12625': attribute type 24 has an invalid length. [ 1525.579082][T11839] nci: nci_rx_work: unknown MT 0x1 [ 1525.875875][T12861] mac80211_hwsim hwsim113 ªªªªª;: renamed from wlan0 (while UP) [ 1525.952174][T12866] netlink: 'syz.2.12632': attribute type 3 has an invalid length. [ 1526.137756][T12869] netlink: 'syz.2.12633': attribute type 1 has an invalid length. [ 1526.152520][T12873] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12634'. [ 1526.608353][T11966] net_ratelimit: 14 callbacks suppressed [ 1526.608376][T11966] bond8: (slave bridge8): failed to get link speed/duplex [ 1526.728652][T27086] bond8: (slave bridge8): failed to get link speed/duplex [ 1526.850327][T11966] bond8: (slave bridge8): failed to get link speed/duplex [ 1526.877651][T12895] netlink: 24 bytes leftover after parsing attributes in process `syz.2.12637'. [ 1526.895606][T12895] netlink: 24 bytes leftover after parsing attributes in process `syz.2.12637'. [ 1526.968321][T27086] bond8: (slave bridge8): failed to get link speed/duplex [ 1527.063465][T12905] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 1527.077164][T12905] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 1527.079807][ T9400] bond8: (slave bridge8): failed to get link speed/duplex [ 1527.084115][T12905] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 1527.097981][T12905] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 1527.104906][T12905] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 1527.682775][ T301] Bluetooth: hci4: command 0x0406 tx timeout [ 1528.213569][T12938] netlink: 40 bytes leftover after parsing attributes in process `syz.2.12643'. [ 1528.223708][T12938] netlink: 40 bytes leftover after parsing attributes in process `syz.2.12643'. [ 1528.392218][T12840] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1528.434224][T12948] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12645'. [ 1528.456349][T12948] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12645'. [ 1528.691397][T12954] netlink: 24 bytes leftover after parsing attributes in process `syz.4.12647'. [ 1528.746188][T12954] netlink: 'syz.4.12647': attribute type 30 has an invalid length. [ 1528.766649][T12960] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12649'. [ 1529.010025][T12971] FAULT_INJECTION: forcing a failure. [ 1529.010025][T12971] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1529.057740][T12971] CPU: 1 UID: 0 PID: 12971 Comm: syz.2.12651 Not tainted syzkaller #0 PREEMPT(full) [ 1529.057773][T12971] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1529.057786][T12971] Call Trace: [ 1529.057795][T12971] [ 1529.057805][T12971] dump_stack_lvl+0xe8/0x150 [ 1529.057836][T12971] should_fail_ex+0x412/0x560 [ 1529.057869][T12971] _copy_from_iter+0x1d3/0x1670 [ 1529.057902][T12971] ? rcu_is_watching+0x15/0xb0 [ 1529.057934][T12971] ? __pfx__copy_from_iter+0x10/0x10 [ 1529.057969][T12971] ? netlink_sendmsg+0x650/0xb40 [ 1529.057998][T12971] ? skb_put+0x11b/0x210 [ 1529.058028][T12971] netlink_sendmsg+0x6c0/0xb40 [ 1529.058067][T12971] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1529.058101][T12971] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1529.058129][T12971] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1529.058160][T12971] ____sys_sendmsg+0x972/0x9f0 [ 1529.058195][T12971] ? __might_fault+0xaf/0x130 [ 1529.058228][T12971] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1529.058267][T12971] ? import_iovec+0x73/0xa0 [ 1529.058301][T12971] ___sys_sendmsg+0x2a5/0x360 [ 1529.058331][T12971] ? __lock_acquire+0x6b5/0x2cf0 [ 1529.058358][T12971] ? __pfx____sys_sendmsg+0x10/0x10 [ 1529.058395][T12971] ? kstrtouint+0x6e/0xe0 [ 1529.058487][T12971] ? __fget_files+0x2a/0x420 [ 1529.058512][T12971] ? __fget_files+0x3a0/0x420 [ 1529.058548][T12971] __sys_sendmmsg+0x27c/0x4e0 [ 1529.058584][T12971] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1529.058612][T12971] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 1529.058659][T12971] ? ksys_write+0x242/0x270 [ 1529.058762][T12971] ? __pfx_ksys_write+0x10/0x10 [ 1529.058801][T12971] __x64_sys_sendmmsg+0xa0/0xc0 [ 1529.058833][T12971] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1529.058855][T12971] do_syscall_64+0x15f/0xf80 [ 1529.058877][T12971] ? clear_bhb_loop+0x40/0x90 [ 1529.058903][T12971] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1529.058924][T12971] RIP: 0033:0x7fb6bc99cdd9 [ 1529.058945][T12971] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1529.058971][T12971] RSP: 002b:00007fb6bd812028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1529.059000][T12971] RAX: ffffffffffffffda RBX: 00007fb6bcc15fa0 RCX: 00007fb6bc99cdd9 [ 1529.059016][T12971] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000003 [ 1529.059031][T12971] RBP: 00007fb6bd812090 R08: 0000000000000000 R09: 0000000000000000 [ 1529.059043][T12971] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1529.059055][T12971] R13: 00007fb6bcc16038 R14: 00007fb6bcc15fa0 R15: 00007ffd2cfbe018 [ 1529.059089][T12971] [ 1529.694700][T12993] netlink: 'syz.5.12655': attribute type 1 has an invalid length. [ 1529.756299][T12996] netlink: 28 bytes leftover after parsing attributes in process `syz.5.12655'. [ 1529.955858][T12993] bond1: entered promiscuous mode [ 1529.987557][T12993] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1530.192380][T12993] bond1: (slave bridge1): making interface the new active one [ 1530.217807][T12993] bridge1: entered promiscuous mode [ 1530.228646][T12993] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 1530.681851][T13037] netlink: 24 bytes leftover after parsing attributes in process `syz.3.12667'. [ 1530.736748][T13040] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 1530.970370][T13046] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12668'. [ 1531.021915][T13046] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12668'. [ 1531.068104][T13046] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12668'. [ 1531.382762][T13064] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12673'. [ 1531.385444][T13063] netlink: 32 bytes leftover after parsing attributes in process `syz.5.12672'. [ 1532.347341][T13081] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12676'. [ 1537.451489][T13063] netlink: 16 bytes leftover after parsing attributes in process `syz.5.12672'. [ 1537.460624][T13064] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12673'. [ 1537.638320][ T135] net_ratelimit: 2584 callbacks suppressed [ 1537.638344][ T135] bond8: (slave bridge8): failed to get link speed/duplex [ 1537.785572][T11839] bond8: (slave bridge8): failed to get link speed/duplex [ 1537.949865][T11839] bond8: (slave bridge8): failed to get link speed/duplex [ 1538.024470][ T9400] nci: nci_rsp_packet: unknown rsp opcode 0x26 [ 1538.109521][T11966] bond8: (slave bridge8): failed to get link speed/duplex [ 1538.180019][T13137] netlink: 'syz.2.12681': attribute type 1 has an invalid length. [ 1538.231645][ T9400] bond8: (slave bridge8): failed to get link speed/duplex [ 1538.313159][T13143] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12683'. [ 1538.358965][ T135] bond8: (slave bridge8): failed to get link speed/duplex [ 1538.558376][ T135] bond8: (slave bridge8): failed to get link speed/duplex [ 1538.729293][ T8958] bond8: (slave bridge8): failed to get link speed/duplex [ 1538.863659][T11966] bond8: (slave bridge8): failed to get link speed/duplex [ 1539.020615][T11966] bond8: (slave bridge8): failed to get link speed/duplex [ 1539.512574][T13195] netlink: 20 bytes leftover after parsing attributes in process `syz.3.12689'. [ 1540.794391][T13115] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1541.046339][T13213] netlink: 200 bytes leftover after parsing attributes in process `syz.4.12691'. [ 1541.053448][T13217] netlink: 48 bytes leftover after parsing attributes in process `syz.0.12690'. [ 1541.081233][T13213] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12691'. [ 1541.099015][T13217] netlink: 48 bytes leftover after parsing attributes in process `syz.0.12690'. [ 1541.353075][T13230] netlink: 'syz.4.12697': attribute type 1 has an invalid length. [ 1541.502878][T13238] bond8: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1541.514943][T13238] bond8: (slave vxcan3): Error -95 calling set_mac_address [ 1542.321436][T13263] netlink: 200 bytes leftover after parsing attributes in process `syz.5.12707'. [ 1542.347775][T13263] netlink: 4 bytes leftover after parsing attributes in process `syz.5.12707'. [ 1542.649310][ T43] net_ratelimit: 24 callbacks suppressed [ 1542.649333][ T43] bond8: (slave bridge8): failed to get link speed/duplex [ 1542.809056][ T8958] bond8: (slave bridge8): failed to get link speed/duplex [ 1542.950081][T11966] bond8: (slave bridge8): failed to get link speed/duplex [ 1543.318313][ T43] bond8: (slave bridge8): failed to get link speed/duplex [ 1543.482220][ T43] bond8: (slave bridge8): failed to get link speed/duplex [ 1543.649553][T13313] __nla_validate_parse: 2 callbacks suppressed [ 1543.649576][T13313] netlink: 48 bytes leftover after parsing attributes in process `syz.4.12720'. [ 1544.003670][T13314] syzkaller0: entered promiscuous mode [ 1544.028381][T13314] syzkaller0: entered allmulticast mode [ 1544.049045][T13313] netlink: 48 bytes leftover after parsing attributes in process `syz.4.12720'. [ 1544.058938][T27086] bond8: (slave bridge8): failed to get link speed/duplex [ 1544.676046][T13346] netlink: 16 bytes leftover after parsing attributes in process `syz.5.12724'. [ 1544.705324][T13346] netlink: 16 bytes leftover after parsing attributes in process `syz.5.12724'. [ 1549.046403][ T135] bond8: (slave bridge8): failed to get link speed/duplex [ 1549.085934][T13363] netlink: 72 bytes leftover after parsing attributes in process `syz.4.12726'. [ 1549.409431][ T135] bond8: (slave bridge8): failed to get link speed/duplex [ 1549.538376][ T135] bond8: (slave bridge8): failed to get link speed/duplex [ 1549.683953][ T8958] bond8: (slave bridge8): failed to get link speed/duplex [ 1549.776561][T13392] bridge_slave_0: left allmulticast mode [ 1549.783924][T13392] bridge_slave_0: left promiscuous mode [ 1549.793458][T13392] bridge0: port 1(bridge_slave_0) entered disabled state [ 1549.833204][T13392] bridge_slave_1: left allmulticast mode [ 1549.844070][T13392] bridge_slave_1: left promiscuous mode [ 1549.852251][T13392] bridge0: port 2(bridge_slave_1) entered disabled state [ 1549.895646][T13392] bond0: (slave bond_slave_0): Releasing backup interface [ 1549.911678][T13398] netlink: 200 bytes leftover after parsing attributes in process `syz.5.12739'. [ 1549.925104][T13398] netlink: 4 bytes leftover after parsing attributes in process `syz.5.12739'. [ 1549.953039][T13392] bond0: (slave bond_slave_1): Releasing backup interface [ 1549.994619][T13392] team0: Port device team_slave_0 removed [ 1550.031601][T13392] team0: Port device team_slave_1 removed [ 1550.049506][T13392] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1550.064153][T13392] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1550.079987][T13392] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1550.098417][T13392] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1550.120712][T13392] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1550.217371][T13390] netdevsim netdevsim0: Direct firmware load for  failed with error -2 [ 1550.227186][T13390] netdevsim netdevsim0: Falling back to sysfs fallback for:  [ 1550.248486][T13396] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1550.278841][T13396] 8021q: adding VLAN 0 to HW filter on device eth0 [ 1550.287150][T13396] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1550.296671][T13396] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1550.308367][T13396] 8021q: adding VLAN 0 to HW filter on device eth3 [ 1550.378018][T13407] tipc: Started in network mode [ 1550.396006][T13407] tipc: Node identity d6413c7970ee, cluster identity 4711 [ 1550.416334][T13407] tipc: Enabled bearer , priority 0 [ 1550.453890][T13408] syzkaller0: entered promiscuous mode [ 1550.473029][T13408] syzkaller0: entered allmulticast mode [ 1550.638555][T13405] tipc: Resetting bearer [ 1550.695380][T13406] tipc: Resetting bearer [ 1550.864276][T13406] tipc: Disabling bearer [ 1550.967588][ T135] nci: nci_rsp_packet: unknown rsp opcode 0x26 [ 1551.033053][T13421] bond3: option updelay: invalid value (18446744073709518847) [ 1551.093395][T13421] bond3: option updelay: allowed values 0 - 2147483647 [ 1551.130946][T13421] bond3 (unregistering): Released all slaves [ 1551.234289][T13445] netlink: 68 bytes leftover after parsing attributes in process `syz.2.12746'. [ 1551.318323][T27086] bond8: (slave bridge8): failed to get link speed/duplex [ 1551.441792][T27086] bond8: (slave bridge8): failed to get link speed/duplex [ 1551.589269][ T9400] bond8: (slave bridge8): failed to get link speed/duplex [ 1551.708571][T27086] bond8: (slave bridge8): failed to get link speed/duplex [ 1551.829551][ T135] bond8: (slave bridge8): failed to get link speed/duplex [ 1551.883280][T13472] netlink: 12 bytes leftover after parsing attributes in process `syz.5.12753'. [ 1551.911614][T13472] netlink: 12 bytes leftover after parsing attributes in process `syz.5.12753'. [ 1552.714304][T13506] netlink: 20 bytes leftover after parsing attributes in process `syz.4.12757'. [ 1552.771970][T13509] netlink: 28 bytes leftover after parsing attributes in process `syz.4.12757'. [ 1552.908797][T13513] netlink: 'syz.4.12758': attribute type 1 has an invalid length. [ 1552.931822][T13513] bond9: entered promiscuous mode [ 1552.937325][T13513] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1552.960599][T13513] netlink: 28 bytes leftover after parsing attributes in process `syz.4.12758'. [ 1552.987027][T13513] bond9: (slave bridge5): making interface the new active one [ 1552.994712][T13513] bridge5: entered promiscuous mode [ 1553.003048][T13513] bond9: (slave bridge5): Enslaving as an active interface with an up link [ 1553.082228][T13516] geneve2: entered allmulticast mode [ 1553.673993][T13415] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1554.158734][ T135] net_ratelimit: 19 callbacks suppressed [ 1554.158757][ T135] bond8: (slave bridge8): failed to get link speed/duplex [ 1554.264784][T13536] FAULT_INJECTION: forcing a failure. [ 1554.264784][T13536] name failslab, interval 1, probability 0, space 0, times 0 [ 1554.292864][T13536] CPU: 0 UID: 0 PID: 13536 Comm: syz.2.12767 Not tainted syzkaller #0 PREEMPT(full) [ 1554.292895][T13536] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1554.292907][T13536] Call Trace: [ 1554.292917][T13536] [ 1554.292926][T13536] dump_stack_lvl+0xe8/0x150 [ 1554.292963][T13536] should_fail_ex+0x412/0x560 [ 1554.292998][T13536] should_failslab+0xa8/0x100 [ 1554.293032][T13536] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 1554.293061][T13536] ? __alloc_skb+0x186/0x7d0 [ 1554.293088][T13536] ? __alloc_skb+0x1d0/0x7d0 [ 1554.293113][T13536] ? __local_bh_enable_ip+0xd0/0x130 [ 1554.293141][T13536] __alloc_skb+0x1d0/0x7d0 [ 1554.293174][T13536] netlink_sendmsg+0x5d4/0xb40 [ 1554.293216][T13536] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1554.293249][T13536] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1554.293279][T13536] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1554.293312][T13536] ____sys_sendmsg+0x972/0x9f0 [ 1554.293343][T13536] ? __might_fault+0xaf/0x130 [ 1554.293378][T13536] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1554.293419][T13536] ? import_iovec+0x73/0xa0 [ 1554.293453][T13536] ___sys_sendmsg+0x2a5/0x360 [ 1554.293482][T13536] ? __lock_acquire+0x6b5/0x2cf0 [ 1554.293511][T13536] ? __pfx____sys_sendmsg+0x10/0x10 [ 1554.293581][T13536] ? __fget_files+0x2a/0x420 [ 1554.293605][T13536] ? __fget_files+0x3a0/0x420 [ 1554.293643][T13536] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1554.293685][T13536] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1554.293727][T13536] ? __pfx_ksys_write+0x10/0x10 [ 1554.293766][T13536] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1554.293790][T13536] do_syscall_64+0x15f/0xf80 [ 1554.293809][T13536] ? trace_irq_disable+0x3b/0x140 [ 1554.293840][T13536] ? clear_bhb_loop+0x40/0x90 [ 1554.293866][T13536] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1554.293887][T13536] RIP: 0033:0x7fb6bc99cdd9 [ 1554.293908][T13536] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1554.293927][T13536] RSP: 002b:00007fb6bd812028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1554.293950][T13536] RAX: ffffffffffffffda RBX: 00007fb6bcc15fa0 RCX: 00007fb6bc99cdd9 [ 1554.293966][T13536] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000004 [ 1554.293980][T13536] RBP: 00007fb6bd812090 R08: 0000000000000000 R09: 0000000000000000 [ 1554.293993][T13536] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1554.294006][T13536] R13: 00007fb6bcc16038 R14: 00007fb6bcc15fa0 R15: 00007ffd2cfbe018 [ 1554.294041][T13536] [ 1554.300551][ T9400] bond8: (slave bridge8): failed to get link speed/duplex [ 1554.656310][T13549] netlink: 16 bytes leftover after parsing attributes in process `syz.2.12772'. [ 1554.729764][ T9400] bond8: (slave bridge8): failed to get link speed/duplex [ 1554.848394][T27086] bond8: (slave bridge8): failed to get link speed/duplex [ 1554.960087][ T9400] bond8: (slave bridge8): failed to get link speed/duplex [ 1555.088401][ T9400] bond8: (slave bridge8): failed to get link speed/duplex [ 1555.195521][T28208] Bluetooth: hci3: link tx timeout [ 1555.209494][T28208] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 1555.218301][ T135] bond8: (slave bridge8): failed to get link speed/duplex [ 1555.328388][T27086] bond8: (slave bridge8): failed to get link speed/duplex [ 1555.459359][ T135] bond8: (slave bridge8): failed to get link speed/duplex [ 1555.485321][T13568] netlink: 8 bytes leftover after parsing attributes in process `syz.5.12781'. [ 1555.536014][ T2621] IPVS: starting estimator thread 0... [ 1555.580096][ T135] bond8: (slave bridge8): failed to get link speed/duplex [ 1555.638322][T13591] netlink: 12 bytes leftover after parsing attributes in process `syz.4.12788'. [ 1555.708431][T13587] IPVS: using max 22 ests per chain, 52800 per kthread [ 1556.090574][T13603] lo: entered allmulticast mode [ 1556.185096][T13605] dvmrp1: entered allmulticast mode [ 1556.347609][T13602] lo: left allmulticast mode [ 1556.621247][T13612] bond10: entered promiscuous mode [ 1556.627117][T13612] 8021q: adding VLAN 0 to HW filter on device bond10 [ 1556.930130][T13623] netlink: 'syz.5.12797': attribute type 1 has an invalid length. [ 1556.985489][T13623] bond2: entered promiscuous mode [ 1556.991943][T13623] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1557.044193][T13623] netlink: 28 bytes leftover after parsing attributes in process `syz.5.12797'. [ 1557.090250][T13623] bond2: entered allmulticast mode [ 1557.187422][T13623] bond2: (slave bridge2): making interface the new active one [ 1557.216489][T13623] bridge2: entered promiscuous mode [ 1557.222263][T13623] bridge2: entered allmulticast mode [ 1557.245919][T13623] bond2: (slave bridge2): Enslaving as an active interface with an up link [ 1557.288911][T28208] Bluetooth: hci3: command 0x0406 tx timeout [ 1557.344735][T13636] netlink: 16 bytes leftover after parsing attributes in process `syz.4.12801'. [ 1557.414597][T13636] netlink: 24 bytes leftover after parsing attributes in process `syz.4.12801'. [ 1558.439823][T13660] nbd5: detected capacity change from 0 to 127 [ 1558.601768][T13660] syzkaller0: entered promiscuous mode [ 1558.622650][T13660] syzkaller0: entered allmulticast mode [ 1558.870196][ T301] block nbd5: Receive control failed (result -104) [ 1559.168985][T11966] net_ratelimit: 27 callbacks suppressed [ 1559.169010][T11966] bond8: (slave bridge8): failed to get link speed/duplex [ 1559.299166][T11966] bond8: (slave bridge8): failed to get link speed/duplex [ 1559.418953][T11966] bond8: (slave bridge8): failed to get link speed/duplex [ 1559.558735][ T135] bond8: (slave bridge8): failed to get link speed/duplex [ 1559.669774][T11966] bond8: (slave bridge8): failed to get link speed/duplex [ 1559.792836][T11966] bond8: (slave bridge8): failed to get link speed/duplex [ 1559.915762][ T135] bond8: (slave bridge8): failed to get link speed/duplex [ 1560.048451][T11839] bond8: (slave bridge8): failed to get link speed/duplex [ 1560.168372][ T43] bond8: (slave bridge8): failed to get link speed/duplex [ 1560.280352][ T8958] bond8: (slave bridge8): failed to get link speed/duplex [ 1560.391288][T13715] netlink: 200 bytes leftover after parsing attributes in process `syz.3.12824'. [ 1560.489034][T13720] netlink: 64 bytes leftover after parsing attributes in process `syz.4.12825'. [ 1560.490334][T13715] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12824'. [ 1560.952620][T13732] netlink: 'syz.4.12829': attribute type 8 has an invalid length. [ 1561.209958][T13740] bridge1: entered promiscuous mode [ 1561.215265][T13740] bridge1: entered allmulticast mode [ 1561.392456][T13744] netlink: 'syz.4.12834': attribute type 1 has an invalid length. [ 1561.501798][T13749] netlink: 28 bytes leftover after parsing attributes in process `syz.4.12834'. [ 1561.706274][T13744] bond11: entered promiscuous mode [ 1561.749907][T13744] 8021q: adding VLAN 0 to HW filter on device bond11 [ 1561.759351][T24184] block nbd5: Connection timed out, retrying (0/1 alive) [ 1561.759780][T24184] block nbd5: Connection timed out, retrying (0/1 alive) [ 1561.759924][T24184] block nbd5: Connection timed out, retrying (0/1 alive) [ 1561.759977][T24184] block nbd5: Connection timed out, retrying (0/1 alive) [ 1561.760065][T24184] block nbd5: Dead connection, failed to find a fallback [ 1561.760226][T24184] block nbd5: shutting down sockets [ 1561.760436][T24184] blk_print_req_error: 138 callbacks suppressed [ 1561.760453][T24184] I/O error, dev nbd5, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1561.760558][T24184] buffer_io_error: 138 callbacks suppressed [ 1561.763675][T24184] Buffer I/O error on dev nbd5, logical block 3, async page read [ 1561.833211][T24184] I/O error, dev nbd5, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1561.845374][T24184] Buffer I/O error on dev nbd5, logical block 2, async page read [ 1561.853407][T24184] I/O error, dev nbd5, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1561.863550][T24184] Buffer I/O error on dev nbd5, logical block 1, async page read [ 1561.874218][T24184] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1561.884573][T24184] Buffer I/O error on dev nbd5, logical block 0, async page read [ 1561.894465][T13361] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1561.906711][T13361] Buffer I/O error on dev nbd5, logical block 0, async page read [ 1561.914831][T13361] I/O error, dev nbd5, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1561.924369][T13361] Buffer I/O error on dev nbd5, logical block 1, async page read [ 1561.932469][T13361] I/O error, dev nbd5, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1561.941909][T13361] Buffer I/O error on dev nbd5, logical block 2, async page read [ 1561.949966][T13361] I/O error, dev nbd5, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1561.959197][T13361] Buffer I/O error on dev nbd5, logical block 3, async page read [ 1561.968043][T13361] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1561.977194][T13361] Buffer I/O error on dev nbd5, logical block 0, async page read [ 1561.985287][T13361] I/O error, dev nbd5, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1561.994874][T13361] Buffer I/O error on dev nbd5, logical block 1, async page read [ 1562.008841][T13361] ldm_validate_partition_table(): Disk read failed. [ 1562.009318][T13749] bond11: entered allmulticast mode [ 1562.017408][T13361] Dev nbd5: unable to read RDB block 0 [ 1562.037659][T13361] nbd5: unable to read partition table [ 1562.046648][T13761] netlink: 200 bytes leftover after parsing attributes in process `syz.2.12837'. [ 1562.084572][T13361] ldm_validate_partition_table(): Disk read failed. [ 1562.092956][T13761] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12837'. [ 1562.106988][T13361] Dev nbd5: unable to read RDB block 0 [ 1562.124912][T13361] nbd5: unable to read partition table [ 1562.231962][T13758] bond11: (slave bridge8): making interface the new active one [ 1562.243972][T13758] bridge8: entered promiscuous mode [ 1562.255352][T13758] bridge8: entered allmulticast mode [ 1562.265518][T13758] bond11: (slave bridge8): Enslaving as an active interface with an up link [ 1562.495832][T13771] netlink: 4 bytes leftover after parsing attributes in process `syz.5.12841'. [ 1562.531908][T13771] netlink: 4 bytes leftover after parsing attributes in process `syz.5.12841'. [ 1562.556458][T11839] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1562.571383][T13774] FAULT_INJECTION: forcing a failure. [ 1562.571383][T13774] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1562.574029][T11839] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1562.609848][T13772] netlink: 13 bytes leftover after parsing attributes in process `syz.5.12841'. [ 1562.623211][T13774] CPU: 1 UID: 0 PID: 13774 Comm: syz.3.12843 Not tainted syzkaller #0 PREEMPT(full) [ 1562.623242][T13774] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1562.623255][T13774] Call Trace: [ 1562.623263][T13774] [ 1562.623273][T13774] dump_stack_lvl+0xe8/0x150 [ 1562.623304][T13774] should_fail_ex+0x412/0x560 [ 1562.623343][T13774] _copy_from_user+0x2d/0xb0 [ 1562.623374][T13774] ___sys_recvmsg+0x175/0x590 [ 1562.623398][T13774] ? trace_irq_disable+0x3b/0x140 [ 1562.623428][T13774] ? __pfx____sys_recvmsg+0x10/0x10 [ 1562.623486][T13774] do_recvmmsg+0x334/0x800 [ 1562.623512][T13774] ? __pfx_do_recvmmsg+0x10/0x10 [ 1562.623532][T13774] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1562.623555][T13774] __x64_sys_recvmmsg+0x198/0x250 [ 1562.623569][T13774] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1562.623586][T13774] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1562.623599][T13774] do_syscall_64+0x15f/0xf80 [ 1562.623610][T13774] ? trace_irq_disable+0x3b/0x140 [ 1562.623628][T13774] ? clear_bhb_loop+0x40/0x90 [ 1562.623650][T13774] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1562.623663][T13774] RIP: 0033:0x7f37cc59cdd9 [ 1562.623676][T13774] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1562.623687][T13774] RSP: 002b:00007f37cd4f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1562.623702][T13774] RAX: ffffffffffffffda RBX: 00007f37cc815fa0 RCX: 00007f37cc59cdd9 [ 1562.623711][T13774] RDX: 000000000400023c RSI: 00002000000055c0 RDI: 0000000000000004 [ 1562.623720][T13774] RBP: 00007f37cd4f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1562.623728][T13774] R10: 0000000000000300 R11: 0000000000000246 R12: 0000000000000002 [ 1562.623736][T13774] R13: 00007f37cc816038 R14: 00007f37cc815fa0 R15: 00007fff25ad4d68 [ 1562.623755][T13774] [ 1562.683034][T11839] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1562.849048][T13778] netlink: 72 bytes leftover after parsing attributes in process `syz.0.12842'. [ 1562.920996][T11839] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1563.239226][T13798] netlink: 'syz.0.12850': attribute type 1 has an invalid length. [ 1563.459820][T13798] bond3: entered promiscuous mode [ 1563.465531][T13798] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1563.493849][T13799] bond3: entered allmulticast mode [ 1563.676203][T13805] bond3: (slave bridge4): making interface the new active one [ 1563.703993][T13805] bridge4: entered promiscuous mode [ 1563.741157][T13805] bridge4: entered allmulticast mode [ 1563.751860][T13805] bond3: (slave bridge4): Enslaving as an active interface with an up link [ 1564.094315][T13831] netlink: 'syz.0.12860': attribute type 1 has an invalid length. [ 1564.223057][ T43] net_ratelimit: 18 callbacks suppressed [ 1564.223080][ T43] bond8: (slave bridge8): failed to get link speed/duplex [ 1564.368370][ T43] bond8: (slave bridge8): failed to get link speed/duplex [ 1564.478503][ T135] bond8: (slave bridge8): failed to get link speed/duplex [ 1564.674993][T27086] bond8: (slave bridge8): failed to get link speed/duplex [ 1564.776145][T13861] FAULT_INJECTION: forcing a failure. [ 1564.776145][T13861] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1564.801676][ T8956] bond8: (slave bridge8): failed to get link speed/duplex [ 1564.816896][T13861] CPU: 1 UID: 0 PID: 13861 Comm: syz.4.12869 Not tainted syzkaller #0 PREEMPT(full) [ 1564.816927][T13861] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1564.816940][T13861] Call Trace: [ 1564.816948][T13861] [ 1564.816958][T13861] dump_stack_lvl+0xe8/0x150 [ 1564.816989][T13861] should_fail_ex+0x412/0x560 [ 1564.817023][T13861] _copy_from_iter+0x1d3/0x1670 [ 1564.817055][T13861] ? rcu_is_watching+0x15/0xb0 [ 1564.817087][T13861] ? __pfx__copy_from_iter+0x10/0x10 [ 1564.817124][T13861] ? netlink_sendmsg+0x650/0xb40 [ 1564.817154][T13861] ? skb_put+0x11b/0x210 [ 1564.817187][T13861] netlink_sendmsg+0x6c0/0xb40 [ 1564.817227][T13861] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1564.817261][T13861] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1564.817292][T13861] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1564.817324][T13861] ____sys_sendmsg+0x972/0x9f0 [ 1564.817357][T13861] ? __might_fault+0xaf/0x130 [ 1564.817389][T13861] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1564.817430][T13861] ? import_iovec+0x73/0xa0 [ 1564.817461][T13861] ___sys_sendmsg+0x2a5/0x360 [ 1564.817488][T13861] ? __lock_acquire+0x6b5/0x2cf0 [ 1564.817516][T13861] ? __pfx____sys_sendmsg+0x10/0x10 [ 1564.817584][T13861] ? __fget_files+0x2a/0x420 [ 1564.817609][T13861] ? __fget_files+0x3a0/0x420 [ 1564.817645][T13861] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1564.817679][T13861] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1564.817727][T13861] ? __pfx_ksys_write+0x10/0x10 [ 1564.817765][T13861] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1564.817788][T13861] do_syscall_64+0x15f/0xf80 [ 1564.817809][T13861] ? trace_irq_disable+0x3b/0x140 [ 1564.817839][T13861] ? clear_bhb_loop+0x40/0x90 [ 1564.817866][T13861] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1564.817886][T13861] RIP: 0033:0x7f790699cdd9 [ 1564.817907][T13861] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1564.817925][T13861] RSP: 002b:00007f79078c8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1564.817946][T13861] RAX: ffffffffffffffda RBX: 00007f7906c15fa0 RCX: 00007f790699cdd9 [ 1564.817963][T13861] RDX: 0000000000000000 RSI: 0000200000000440 RDI: 0000000000000003 [ 1564.817976][T13861] RBP: 00007f79078c8090 R08: 0000000000000000 R09: 0000000000000000 [ 1564.817990][T13861] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1564.818002][T13861] R13: 00007f7906c16038 R14: 00007f7906c15fa0 R15: 00007fff26277b38 [ 1564.818036][T13861] [ 1565.086464][ T8956] bond8: (slave bridge8): failed to get link speed/duplex [ 1565.147410][T13868] netlink: 'syz.4.12872': attribute type 1 has an invalid length. [ 1565.195397][T13869] netlink: 'syz.5.12868': attribute type 1 has an invalid length. [ 1565.198504][T11839] bond8: (slave bridge8): failed to get link speed/duplex [ 1565.335304][T13869] bond3: entered promiscuous mode [ 1565.343228][T13869] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1565.352195][T13871] bond3: entered allmulticast mode [ 1565.399439][ T135] bond8: (slave bridge8): failed to get link speed/duplex [ 1565.551055][T13869] bond3: (slave bridge3): making interface the new active one [ 1565.569989][T13869] bridge3: entered promiscuous mode [ 1565.604058][T13869] bridge3: entered allmulticast mode [ 1565.633769][T13869] bond3: (slave bridge3): Enslaving as an active interface with an up link [ 1565.665193][T13892] __nla_validate_parse: 14 callbacks suppressed [ 1565.665215][T13892] netlink: 200 bytes leftover after parsing attributes in process `syz.3.12880'. [ 1565.681310][T11839] bond8: (slave bridge8): failed to get link speed/duplex [ 1565.743253][T13892] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12880'. [ 1565.788380][T11839] bond8: (slave bridge8): failed to get link speed/duplex [ 1565.873747][T13901] netlink: 72 bytes leftover after parsing attributes in process `syz.0.12884'. [ 1566.421074][T13921] netlink: 'syz.4.12891': attribute type 3 has an invalid length. [ 1566.581524][T13927] netlink: 'syz.5.12893': attribute type 1 has an invalid length. [ 1566.670197][T13935] netlink: 28 bytes leftover after parsing attributes in process `syz.5.12893'. [ 1566.711313][T13927] bond4: entered promiscuous mode [ 1566.719252][T13927] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1566.727605][T13935] bond4: entered allmulticast mode [ 1566.866667][T13927] bond4: (slave bridge4): making interface the new active one [ 1566.888784][T13927] bridge4: entered promiscuous mode [ 1566.896246][T13927] bridge4: entered allmulticast mode [ 1566.924198][T13927] bond4: (slave bridge4): Enslaving as an active interface with an up link [ 1566.970626][T13943] netlink: 72 bytes leftover after parsing attributes in process `syz.2.12897'. [ 1567.143924][T13924] netlink: 80 bytes leftover after parsing attributes in process `syz.0.12892'. [ 1567.162943][T13952] netlink: 'syz.2.12901': attribute type 58 has an invalid length. [ 1567.195718][T13952] netlink: 20 bytes leftover after parsing attributes in process `syz.2.12901'. [ 1567.223610][T13956] netlink: 'syz.5.12900': attribute type 10 has an invalid length. [ 1567.323796][T13964] netlink: 'syz.5.12900': attribute type 10 has an invalid length. [ 1567.520480][T13956] team0: Port device dummy0 added [ 1567.573452][T13964] team0: Port device dummy0 removed [ 1567.654863][T13964] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 1567.977220][T13982] netlink: 'syz.2.12910': attribute type 1 has an invalid length. [ 1567.981606][T13980] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 1568.001359][T13982] nbd: error processing sock list [ 1568.265144][T13993] netlink: 260 bytes leftover after parsing attributes in process `syz.0.12911'. [ 1568.672158][T14006] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1568.813574][T14020] IPVS: sync thread started: state = BACKUP, mcast_ifn = bridge0, syncid = 1, id = 0 [ 1571.619439][T11966] net_ratelimit: 18 callbacks suppressed [ 1571.619464][T11966] bond8: (slave bridge8): failed to get link speed/duplex [ 1571.797968][T27086] bond8: (slave bridge8): failed to get link speed/duplex [ 1571.940957][T14030] netlink: 'syz.4.12927': attribute type 1 has an invalid length. [ 1571.983876][T14030] bond12: entered promiscuous mode [ 1571.990391][T14030] 8021q: adding VLAN 0 to HW filter on device bond12 [ 1572.005699][T14030] netlink: 28 bytes leftover after parsing attributes in process `syz.4.12927'. [ 1572.020164][T14027] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1572.027372][T14033] netlink: 260 bytes leftover after parsing attributes in process `syz.3.12928'. [ 1572.047543][T14030] bond12: entered allmulticast mode [ 1572.088689][ T135] bond8: (slave bridge8): failed to get link speed/duplex [ 1572.119058][T14037] netlink: 4 bytes leftover after parsing attributes in process `syz.5.12926'. [ 1572.214204][T14044] netlink: 24 bytes leftover after parsing attributes in process `syz.0.12929'. [ 1572.240455][ T135] bond8: (slave bridge8): failed to get link speed/duplex [ 1572.378628][ T135] bond8: (slave bridge8): failed to get link speed/duplex [ 1572.534640][T14062] netlink: 'syz.5.12937': attribute type 5 has an invalid length. [ 1572.549473][T11966] bond8: (slave bridge8): failed to get link speed/duplex [ 1572.688617][ T135] bond8: (slave bridge8): failed to get link speed/duplex [ 1572.830973][ T135] bond8: (slave bridge8): failed to get link speed/duplex [ 1572.949200][ T135] bond8: (slave bridge8): failed to get link speed/duplex [ 1573.357304][T14090] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1573.410234][T14090] netlink: 72 bytes leftover after parsing attributes in process `syz.5.12947'. [ 1573.745802][T14108] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12953'. [ 1573.955237][T14116] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1573.964582][T14116] FAULT_INJECTION: forcing a failure. [ 1573.964582][T14116] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1573.980469][T14116] CPU: 0 UID: 0 PID: 14116 Comm: syz.5.12956 Not tainted syzkaller #0 PREEMPT(full) [ 1573.980498][T14116] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1573.980510][T14116] Call Trace: [ 1573.980520][T14116] [ 1573.980529][T14116] dump_stack_lvl+0xe8/0x150 [ 1573.980560][T14116] should_fail_ex+0x412/0x560 [ 1573.980595][T14116] _copy_from_user+0x2d/0xb0 [ 1573.980626][T14116] kstrtouint_from_user+0xd6/0x180 [ 1573.980655][T14116] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 1573.980701][T14116] proc_fail_nth_write+0x8e/0x210 [ 1573.980730][T14116] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1573.980762][T14116] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1573.980791][T14116] vfs_write+0x29a/0xb90 [ 1573.980830][T14116] ? __pfx_vfs_write+0x10/0x10 [ 1573.980862][T14116] ? __fget_files+0x2a/0x420 [ 1573.980892][T14116] ? __fget_files+0x3a0/0x420 [ 1573.980916][T14116] ? __fget_files+0x2a/0x420 [ 1573.980951][T14116] ksys_write+0x150/0x270 [ 1573.980983][T14116] ? __pfx_ksys_write+0x10/0x10 [ 1573.981022][T14116] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1573.981050][T14116] do_syscall_64+0x15f/0xf80 [ 1573.981071][T14116] ? trace_irq_disable+0x3b/0x140 [ 1573.981102][T14116] ? clear_bhb_loop+0x40/0x90 [ 1573.981127][T14116] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1573.981148][T14116] RIP: 0033:0x7f873a95d60e [ 1573.981168][T14116] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1573.981186][T14116] RSP: 002b:00007f873b847fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1573.981209][T14116] RAX: ffffffffffffffda RBX: 00007f873b8486c0 RCX: 00007f873a95d60e [ 1573.981225][T14116] RDX: 0000000000000001 RSI: 00007f873b8480a0 RDI: 0000000000000004 [ 1573.981238][T14116] RBP: 00007f873b848090 R08: 0000000000000000 R09: 0000000000000000 [ 1573.981251][T14116] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1573.981264][T14116] R13: 00007f873ac16038 R14: 00007f873ac15fa0 R15: 00007ffcfb74f8c8 [ 1573.981300][T14116] [ 1574.429616][T14130] netlink: 'syz.3.12961': attribute type 11 has an invalid length. [ 1574.769012][T14152] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.12966'. [ 1575.847125][T14196] FAULT_INJECTION: forcing a failure. [ 1575.847125][T14196] name failslab, interval 1, probability 0, space 0, times 0 [ 1575.904002][T14196] CPU: 1 UID: 0 PID: 14196 Comm: syz.4.12983 Not tainted syzkaller #0 PREEMPT(full) [ 1575.904034][T14196] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1575.904047][T14196] Call Trace: [ 1575.904055][T14196] [ 1575.904066][T14196] dump_stack_lvl+0xe8/0x150 [ 1575.904097][T14196] should_fail_ex+0x412/0x560 [ 1575.904131][T14196] should_failslab+0xa8/0x100 [ 1575.904165][T14196] __kmalloc_cache_noprof+0x88/0x660 [ 1575.904196][T14196] ? nft_match_select_ops+0x1ea/0x530 [ 1575.904231][T14196] nft_match_select_ops+0x1ea/0x530 [ 1575.904262][T14196] ? __nla_parse+0x40/0x60 [ 1575.904296][T14196] nf_tables_expr_parse+0x72c/0xa80 [ 1575.904318][T14196] ? rcu_is_watching+0x15/0xb0 [ 1575.904344][T14196] ? nf_tables_expr_parse+0x168/0xa80 [ 1575.904369][T14196] ? __pfx_nf_tables_expr_parse+0x10/0x10 [ 1575.904393][T14196] ? nft_pernet+0x23/0x240 [ 1575.904415][T14196] ? nf_tables_newrule+0x11bd/0x28b0 [ 1575.904454][T14196] ? nla_strcmp+0x106/0x140 [ 1575.904487][T14196] nf_tables_newrule+0x1315/0x28b0 [ 1575.904528][T14196] ? __pfx_nf_tables_newrule+0x10/0x10 [ 1575.904549][T14196] ? nfnl_pernet+0x23/0x240 [ 1575.904577][T14196] ? nfnl_pernet+0x23/0x240 [ 1575.904615][T14196] ? __nla_parse+0x40/0x60 [ 1575.904648][T14196] nfnetlink_rcv+0x123e/0x27b0 [ 1575.904715][T14196] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 1575.904761][T14196] ? ref_tracker_free+0x693/0x840 [ 1575.904823][T14196] ? __netlink_deliver_tap+0x807/0x850 [ 1575.904863][T14196] ? netlink_deliver_tap+0x2e/0x1b0 [ 1575.904891][T14196] ? netlink_deliver_tap+0x2e/0x1b0 [ 1575.904932][T14196] netlink_unicast+0x75c/0x8e0 [ 1575.904973][T14196] netlink_sendmsg+0x813/0xb40 [ 1575.905015][T14196] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1575.905048][T14196] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1575.905078][T14196] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1575.905111][T14196] ____sys_sendmsg+0x972/0x9f0 [ 1575.905142][T14196] ? __might_fault+0xaf/0x130 [ 1575.905176][T14196] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1575.905218][T14196] ? import_iovec+0x73/0xa0 [ 1575.905252][T14196] ___sys_sendmsg+0x2a5/0x360 [ 1575.905282][T14196] ? __lock_acquire+0x6b5/0x2cf0 [ 1575.905310][T14196] ? __pfx____sys_sendmsg+0x10/0x10 [ 1575.905381][T14196] ? __fget_files+0x2a/0x420 [ 1575.905405][T14196] ? __fget_files+0x3a0/0x420 [ 1575.905451][T14196] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1575.905485][T14196] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1575.905528][T14196] ? __pfx_ksys_write+0x10/0x10 [ 1575.905569][T14196] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1575.905592][T14196] do_syscall_64+0x15f/0xf80 [ 1575.905612][T14196] ? trace_irq_disable+0x3b/0x140 [ 1575.905643][T14196] ? clear_bhb_loop+0x40/0x90 [ 1575.905670][T14196] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1575.905691][T14196] RIP: 0033:0x7f790699cdd9 [ 1575.905711][T14196] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1575.905730][T14196] RSP: 002b:00007f79078c8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1575.905754][T14196] RAX: ffffffffffffffda RBX: 00007f7906c15fa0 RCX: 00007f790699cdd9 [ 1575.905770][T14196] RDX: 0000000024044010 RSI: 0000200000000100 RDI: 0000000000000003 [ 1575.905784][T14196] RBP: 00007f79078c8090 R08: 0000000000000000 R09: 0000000000000000 [ 1575.905798][T14196] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1575.905811][T14196] R13: 00007f7906c16038 R14: 00007f7906c15fa0 R15: 00007fff26277b38 [ 1575.905848][T14196] [ 1575.927726][T14201] netlink: 'syz.5.12984': attribute type 1 has an invalid length. [ 1576.266878][T14200] mac80211_hwsim hwsim120 syzkaller0: entered promiscuous mode [ 1576.274988][T14200] mac80211_hwsim hwsim120 syzkaller0: entered allmulticast mode [ 1576.475868][T14221] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12987'. [ 1576.491883][T14222] sctp: [Deprecated]: syz.4.12989 (pid 14222) Use of int in max_burst socket option deprecated. [ 1576.491883][T14222] Use struct sctp_assoc_value instead [ 1576.628362][ T135] net_ratelimit: 27 callbacks suppressed [ 1576.628386][ T135] bond8: (slave bridge8): failed to get link speed/duplex [ 1576.671074][T14214] macvlan0: entered promiscuous mode [ 1576.676444][T14214] macvlan0: entered allmulticast mode [ 1576.683532][T14214] bond5: entered promiscuous mode [ 1576.689888][T14214] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 1576.704866][T14229] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12991'. [ 1576.714968][T14214] bond5: left promiscuous mode [ 1576.720358][T14229] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12991'. [ 1576.780958][ T135] bond8: (slave bridge8): failed to get link speed/duplex [ 1577.043022][ T43] bond8: (slave bridge8): failed to get link speed/duplex [ 1577.171814][T14244] FAULT_INJECTION: forcing a failure. [ 1577.171814][T14244] name failslab, interval 1, probability 0, space 0, times 0 [ 1577.178384][ T8958] bond8: (slave bridge8): failed to get link speed/duplex [ 1577.213883][T14246] batadv_slave_0: entered promiscuous mode [ 1577.255284][T14244] CPU: 1 UID: 0 PID: 14244 Comm: syz.2.12996 Not tainted syzkaller #0 PREEMPT(full) [ 1577.255314][T14244] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1577.255328][T14244] Call Trace: [ 1577.255336][T14244] [ 1577.255346][T14244] dump_stack_lvl+0xe8/0x150 [ 1577.255375][T14244] should_fail_ex+0x412/0x560 [ 1577.255408][T14244] should_failslab+0xa8/0x100 [ 1577.255439][T14244] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 1577.255467][T14244] ? __alloc_skb+0x186/0x7d0 [ 1577.255503][T14244] ? __alloc_skb+0x1d0/0x7d0 [ 1577.255527][T14244] ? __local_bh_enable_ip+0xd0/0x130 [ 1577.255554][T14244] __alloc_skb+0x1d0/0x7d0 [ 1577.255588][T14244] netlink_sendmsg+0x5d4/0xb40 [ 1577.255628][T14244] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1577.255661][T14244] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1577.255696][T14244] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1577.255727][T14244] ____sys_sendmsg+0x972/0x9f0 [ 1577.255757][T14244] ? __might_fault+0xaf/0x130 [ 1577.255789][T14244] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1577.255829][T14244] ? import_iovec+0x73/0xa0 [ 1577.255862][T14244] ___sys_sendmsg+0x2a5/0x360 [ 1577.255890][T14244] ? __lock_acquire+0x6b5/0x2cf0 [ 1577.255918][T14244] ? __pfx____sys_sendmsg+0x10/0x10 [ 1577.255984][T14244] ? __fget_files+0x2a/0x420 [ 1577.256009][T14244] ? __fget_files+0x3a0/0x420 [ 1577.256040][T14244] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1577.256074][T14244] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1577.256114][T14244] ? __pfx_ksys_write+0x10/0x10 [ 1577.256149][T14244] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1577.256171][T14244] do_syscall_64+0x15f/0xf80 [ 1577.256190][T14244] ? trace_irq_disable+0x3b/0x140 [ 1577.256219][T14244] ? clear_bhb_loop+0x40/0x90 [ 1577.256245][T14244] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1577.256266][T14244] RIP: 0033:0x7fb6bc99cdd9 [ 1577.256286][T14244] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1577.256304][T14244] RSP: 002b:00007fb6bd812028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1577.256328][T14244] RAX: ffffffffffffffda RBX: 00007fb6bcc15fa0 RCX: 00007fb6bc99cdd9 [ 1577.256343][T14244] RDX: 0000000000000000 RSI: 0000200000000380 RDI: 0000000000000003 [ 1577.256357][T14244] RBP: 00007fb6bd812090 R08: 0000000000000000 R09: 0000000000000000 [ 1577.256370][T14244] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1577.256383][T14244] R13: 00007fb6bcc16038 R14: 00007fb6bcc15fa0 R15: 00007ffd2cfbe018 [ 1577.256415][T14244] [ 1577.505075][ T135] bond8: (slave bridge8): failed to get link speed/duplex [ 1577.713663][ T8958] bond8: (slave bridge8): failed to get link speed/duplex [ 1577.896293][ T8958] bond8: (slave bridge8): failed to get link speed/duplex [ 1578.029042][ T8958] bond8: (slave bridge8): failed to get link speed/duplex [ 1578.039884][T14245] batadv_slave_0: left promiscuous mode [ 1578.107675][T14277] __nla_validate_parse: 1 callbacks suppressed [ 1578.107700][T14277] netlink: 32 bytes leftover after parsing attributes in process `syz.2.13008'. [ 1578.148370][ T8958] bond8: (slave bridge8): failed to get link speed/duplex [ 1578.518573][T11966] bond8: (slave bridge8): failed to get link speed/duplex [ 1578.617490][T14305] FAULT_INJECTION: forcing a failure. [ 1578.617490][T14305] name failslab, interval 1, probability 0, space 0, times 0 [ 1578.635859][T14305] CPU: 1 UID: 0 PID: 14305 Comm: syz.3.13013 Not tainted syzkaller #0 PREEMPT(full) [ 1578.635890][T14305] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1578.635903][T14305] Call Trace: [ 1578.635912][T14305] [ 1578.635921][T14305] dump_stack_lvl+0xe8/0x150 [ 1578.635953][T14305] should_fail_ex+0x412/0x560 [ 1578.635987][T14305] should_failslab+0xa8/0x100 [ 1578.636021][T14305] __kmalloc_cache_noprof+0x88/0x660 [ 1578.636051][T14305] ? nfnetlink_rcv+0xfdf/0x27b0 [ 1578.636087][T14305] nfnetlink_rcv+0xfdf/0x27b0 [ 1578.636153][T14305] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 1578.636200][T14305] ? ref_tracker_free+0x693/0x840 [ 1578.636263][T14305] ? __netlink_deliver_tap+0x807/0x850 [ 1578.636303][T14305] ? netlink_deliver_tap+0x2e/0x1b0 [ 1578.636333][T14305] ? netlink_deliver_tap+0x2e/0x1b0 [ 1578.636368][T14305] netlink_unicast+0x75c/0x8e0 [ 1578.636419][T14305] netlink_sendmsg+0x813/0xb40 [ 1578.636459][T14305] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1578.636493][T14305] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1578.636524][T14305] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1578.636555][T14305] ____sys_sendmsg+0x972/0x9f0 [ 1578.636587][T14305] ? __might_fault+0xaf/0x130 [ 1578.636619][T14305] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1578.636658][T14305] ? import_iovec+0x73/0xa0 [ 1578.636692][T14305] ___sys_sendmsg+0x2a5/0x360 [ 1578.636721][T14305] ? __lock_acquire+0x6b5/0x2cf0 [ 1578.636750][T14305] ? __pfx____sys_sendmsg+0x10/0x10 [ 1578.636820][T14305] ? __fget_files+0x2a/0x420 [ 1578.636842][T14305] ? __fget_files+0x3a0/0x420 [ 1578.636877][T14305] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1578.636912][T14305] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1578.636954][T14305] ? __pfx_ksys_write+0x10/0x10 [ 1578.637000][T14305] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1578.637023][T14305] do_syscall_64+0x15f/0xf80 [ 1578.637042][T14305] ? trace_irq_disable+0x3b/0x140 [ 1578.637072][T14305] ? clear_bhb_loop+0x40/0x90 [ 1578.637098][T14305] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1578.637119][T14305] RIP: 0033:0x7f37cc59cdd9 [ 1578.637139][T14305] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1578.637157][T14305] RSP: 002b:00007f37cd4f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1578.637181][T14305] RAX: ffffffffffffffda RBX: 00007f37cc815fa0 RCX: 00007f37cc59cdd9 [ 1578.637196][T14305] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 1578.637210][T14305] RBP: 00007f37cd4f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1578.637222][T14305] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1578.637234][T14305] R13: 00007f37cc816038 R14: 00007f37cc815fa0 R15: 00007fff25ad4d68 [ 1578.637269][T14305] [ 1579.596922][T14340] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20003 [ 1579.705172][T14345] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13023'. [ 1580.139364][T14356] FAULT_INJECTION: forcing a failure. [ 1580.139364][T14356] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1580.184577][T14356] CPU: 0 UID: 0 PID: 14356 Comm: syz.4.13027 Not tainted syzkaller #0 PREEMPT(full) [ 1580.184613][T14356] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1580.184627][T14356] Call Trace: [ 1580.184636][T14356] [ 1580.184646][T14356] dump_stack_lvl+0xe8/0x150 [ 1580.184678][T14356] should_fail_ex+0x412/0x560 [ 1580.184712][T14356] _copy_to_user+0x31/0xb0 [ 1580.184747][T14356] simple_read_from_buffer+0xe1/0x170 [ 1580.184779][T14356] proc_fail_nth_read+0x1bb/0x230 [ 1580.184810][T14356] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1580.184841][T14356] ? rw_verify_area+0x2a6/0x4d0 [ 1580.184870][T14356] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1580.184900][T14356] vfs_read+0x20c/0xa70 [ 1580.184936][T14356] ? __pfx___mutex_lock+0x10/0x10 [ 1580.184958][T14356] ? __pfx_vfs_read+0x10/0x10 [ 1580.184988][T14356] ? __fget_files+0x2a/0x420 [ 1580.185019][T14356] ? __fget_files+0x3a0/0x420 [ 1580.185042][T14356] ? __fget_files+0x2a/0x420 [ 1580.185079][T14356] ksys_read+0x150/0x270 [ 1580.185111][T14356] ? __pfx_ksys_read+0x10/0x10 [ 1580.185150][T14356] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1580.185173][T14356] do_syscall_64+0x15f/0xf80 [ 1580.185193][T14356] ? trace_irq_disable+0x3b/0x140 [ 1580.185224][T14356] ? clear_bhb_loop+0x40/0x90 [ 1580.185251][T14356] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1580.185273][T14356] RIP: 0033:0x7f790695d60e [ 1580.185295][T14356] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1580.185314][T14356] RSP: 002b:00007f79078c7fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1580.185338][T14356] RAX: ffffffffffffffda RBX: 00007f79078c86c0 RCX: 00007f790695d60e [ 1580.185353][T14356] RDX: 000000000000000f RSI: 00007f79078c80a0 RDI: 0000000000000008 [ 1580.185367][T14356] RBP: 00007f79078c8090 R08: 0000000000000000 R09: 0000000000000000 [ 1580.185380][T14356] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1580.185393][T14356] R13: 00007f7906c16038 R14: 00007f7906c15fa0 R15: 00007fff26277b38 [ 1580.185430][T14356] [ 1580.713044][T14370] syzkaller0: entered promiscuous mode [ 1580.731815][T14370] syzkaller0: entered allmulticast mode [ 1580.790751][T14374] pimreg: entered allmulticast mode [ 1580.830110][T14372] ipip1: entered promiscuous mode [ 1580.841511][T14377] netlink: 200 bytes leftover after parsing attributes in process `syz.2.13034'. [ 1580.857195][T14373] pimreg: left allmulticast mode [ 1580.865625][T14377] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13034'. [ 1580.896296][T14380] netlink: 4 bytes leftover after parsing attributes in process `syz.5.13035'. [ 1581.003480][T14380] hsr_slave_1 (unregistering): left promiscuous mode [ 1581.324335][T14395] netlink: 72 bytes leftover after parsing attributes in process `syz.4.13039'. [ 1581.503335][T14409] netlink: 'syz.5.13045': attribute type 1 has an invalid length. [ 1581.583437][T14415] netlink: 28 bytes leftover after parsing attributes in process `syz.5.13045'. [ 1581.717046][T14409] bond7: entered promiscuous mode [ 1581.722786][T14409] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1581.763703][T14415] bond7: entered allmulticast mode [ 1581.829240][ T8956] net_ratelimit: 16 callbacks suppressed [ 1581.829263][ T8956] bond8: (slave bridge8): failed to get link speed/duplex [ 1581.862346][T14428] netlink: 6032 bytes leftover after parsing attributes in process `syz.0.13047'. [ 1581.874180][T14430] netlink: 59 bytes leftover after parsing attributes in process `syz.2.13048'. [ 1581.887674][T14430] netlink: 59 bytes leftover after parsing attributes in process `syz.2.13048'. [ 1581.979250][T11966] bond8: (slave bridge8): failed to get link speed/duplex [ 1582.093137][ T43] bond8: (slave bridge8): failed to get link speed/duplex [ 1582.350665][T31064] bond8: (slave bridge8): failed to get link speed/duplex [ 1582.478558][ T36] bond8: (slave bridge8): failed to get link speed/duplex [ 1582.599092][ T36] bond8: (slave bridge8): failed to get link speed/duplex [ 1582.695041][T14462] FAULT_INJECTION: forcing a failure. [ 1582.695041][T14462] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1582.717182][T14462] CPU: 0 UID: 0 PID: 14462 Comm: syz.2.13057 Not tainted syzkaller #0 PREEMPT(full) [ 1582.717214][T14462] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1582.717227][T14462] Call Trace: [ 1582.717236][T14462] [ 1582.717246][T14462] dump_stack_lvl+0xe8/0x150 [ 1582.717277][T14462] should_fail_ex+0x412/0x560 [ 1582.717312][T14462] _copy_to_user+0x31/0xb0 [ 1582.717345][T14462] simple_read_from_buffer+0xe1/0x170 [ 1582.717377][T14462] proc_fail_nth_read+0x1bb/0x230 [ 1582.717407][T14462] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1582.717437][T14462] ? rw_verify_area+0x2a6/0x4d0 [ 1582.717466][T14462] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1582.717495][T14462] vfs_read+0x20c/0xa70 [ 1582.717533][T14462] ? __pfx_vfs_read+0x10/0x10 [ 1582.717562][T14462] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 1582.717593][T14462] ? do_sys_openat2+0x14c/0x200 [ 1582.717616][T14462] ? kmem_cache_free+0x182/0x650 [ 1582.717644][T14462] ? fd_install+0x94/0x3d0 [ 1582.717693][T14462] ksys_read+0x150/0x270 [ 1582.717726][T14462] ? __pfx_ksys_read+0x10/0x10 [ 1582.717755][T14462] ? __x64_sys_getsockopt+0x1a4/0x240 [ 1582.717791][T14462] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1582.717815][T14462] do_syscall_64+0x15f/0xf80 [ 1582.717835][T14462] ? trace_irq_disable+0x3b/0x140 [ 1582.717866][T14462] ? clear_bhb_loop+0x40/0x90 [ 1582.717893][T14462] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1582.717914][T14462] RIP: 0033:0x7fb6bc95d60e [ 1582.717936][T14462] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1582.717955][T14462] RSP: 002b:00007fb6bd811fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1582.717978][T14462] RAX: ffffffffffffffda RBX: 00007fb6bd8126c0 RCX: 00007fb6bc95d60e [ 1582.717994][T14462] RDX: 000000000000000f RSI: 00007fb6bd8120a0 RDI: 0000000000000004 [ 1582.718008][T14462] RBP: 00007fb6bd812090 R08: 0000000000000000 R09: 0000000000000000 [ 1582.718022][T14462] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1582.718035][T14462] R13: 00007fb6bcc16038 R14: 00007fb6bcc15fa0 R15: 00007ffd2cfbe018 [ 1582.718069][T14462] [ 1582.945008][T31064] bond8: (slave bridge8): failed to get link speed/duplex [ 1583.058390][T31064] bond8: (slave bridge8): failed to get link speed/duplex [ 1583.189309][T11966] bond8: (slave bridge8): failed to get link speed/duplex [ 1583.205430][T14466] syzkaller0: entered promiscuous mode [ 1583.217341][T14466] syzkaller0: entered allmulticast mode [ 1583.236989][T14470] netlink: 'syz.2.13060': attribute type 1 has an invalid length. [ 1583.306166][T14474] __nla_validate_parse: 1 callbacks suppressed [ 1583.306189][T14474] netlink: 28 bytes leftover after parsing attributes in process `syz.2.13060'. [ 1583.423738][T14470] bond6: entered promiscuous mode [ 1583.440566][T14470] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1583.467207][T14474] bond6: entered allmulticast mode [ 1583.508275][ T8956] bond8: (slave bridge8): failed to get link speed/duplex [ 1583.846151][T14502] netlink: 'syz.2.13067': attribute type 3 has an invalid length. [ 1583.914466][T14498] netlink: 'syz.4.13066': attribute type 9 has an invalid length. [ 1583.969812][T14498] netlink: 'syz.4.13066': attribute type 3 has an invalid length. [ 1583.990479][T14498] netlink: 'syz.4.13066': attribute type 3 has an invalid length. [ 1584.002334][ T301] Bluetooth: hci5: command 0x0405 tx timeout [ 1584.562979][T14526] syzkaller0: entered promiscuous mode [ 1584.579038][T14526] syzkaller0: entered allmulticast mode [ 1584.767633][T14541] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 1585.135654][T14546] netlink: 'syz.5.13077': attribute type 1 has an invalid length. [ 1585.140677][T14548] netlink: 'syz.0.13078': attribute type 1 has an invalid length. [ 1585.161443][T14548] netlink: 248 bytes leftover after parsing attributes in process `syz.0.13078'. [ 1585.195916][T14554] netlink: 28 bytes leftover after parsing attributes in process `syz.5.13077'. [ 1585.215915][T14546] bond8: entered promiscuous mode [ 1585.223413][T14546] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1585.231387][T14554] bond8: entered allmulticast mode [ 1585.244562][T14553] FAULT_INJECTION: forcing a failure. [ 1585.244562][T14553] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1585.297882][T14553] CPU: 1 UID: 0 PID: 14553 Comm: syz.2.13080 Not tainted syzkaller #0 PREEMPT(full) [ 1585.297913][T14553] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1585.297927][T14553] Call Trace: [ 1585.297935][T14553] [ 1585.297945][T14553] dump_stack_lvl+0xe8/0x150 [ 1585.297976][T14553] should_fail_ex+0x412/0x560 [ 1585.298011][T14553] prepare_alloc_pages+0x22a/0x650 [ 1585.298052][T14553] __alloc_frozen_pages_noprof+0x12f/0x380 [ 1585.298089][T14553] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1585.298126][T14553] ? __pfx_policy_nodemask+0x10/0x10 [ 1585.298166][T14553] ? __lock_acquire+0x6b5/0x2cf0 [ 1585.298194][T14553] alloc_pages_mpol+0x235/0x490 [ 1585.298230][T14553] folio_alloc_mpol_noprof+0x39/0x160 [ 1585.298265][T14553] vma_alloc_folio_noprof+0xe1/0x1e0 [ 1585.298290][T14553] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 1585.298312][T14553] ? __pte_offset_map+0x29/0x240 [ 1585.298339][T14553] ? __pte_offset_map+0x29/0x240 [ 1585.298367][T14553] do_pte_missing+0x159d/0x33f0 [ 1585.298413][T14553] ? handle_mm_fault+0xee/0x3170 [ 1585.298443][T14553] handle_mm_fault+0x1bd7/0x3170 [ 1585.298493][T14553] ? handle_mm_fault+0xee/0x3170 [ 1585.298527][T14553] ? __pfx_handle_mm_fault+0x10/0x10 [ 1585.298567][T14553] ? __pfx___up_read+0x10/0x10 [ 1585.298600][T14553] ? lock_mm_and_find_vma+0xa7/0x340 [ 1585.298633][T14553] do_user_addr_fault+0x75b/0x1340 [ 1585.298674][T14553] exc_page_fault+0x6a/0xc0 [ 1585.298708][T14553] asm_exc_page_fault+0x26/0x30 [ 1585.298728][T14553] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 1585.298755][T14553] Code: cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 c3 cc cc cc cc 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 1585.298773][T14553] RSP: 0018:ffffc90005e5f638 EFLAGS: 00050202 [ 1585.298794][T14553] RAX: ffffffff84af9701 RBX: ffff888058a86000 RCX: 000000000000064c [ 1585.298810][T14553] RDX: 0000000000000000 RSI: ffff888058a86840 RDI: 0000200000002000 [ 1585.298825][T14553] RBP: ffffc90005e5f7b0 R08: ffff888058a86e8b R09: 1ffff1100b150dd1 [ 1585.298840][T14553] R10: dffffc0000000000 R11: ffffed100b150dd2 R12: dffffc0000000000 [ 1585.298855][T14553] R13: 0000000000000000 R14: 00007ffffffff000 R15: 0000000000000e8c [ 1585.298876][T14553] ? _copy_to_iter+0x3a1/0x17d0 [ 1585.298910][T14553] _copy_to_iter+0x493/0x17d0 [ 1585.298955][T14553] ? __pfx__copy_to_iter+0x10/0x10 [ 1585.298981][T14553] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1585.299012][T14553] ? lockdep_hardirqs_on+0x7a/0x110 [ 1585.299043][T14553] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1585.299072][T14553] ? __skb_try_recv_datagram+0x3d4/0x4d0 [ 1585.299102][T14553] __skb_datagram_iter+0xf8/0x980 [ 1585.299127][T14553] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 1585.299159][T14553] skb_copy_datagram_iter+0xb5/0x240 [ 1585.299186][T14553] netlink_recvmsg+0x2c3/0xa50 [ 1585.299228][T14553] ? __pfx_netlink_recvmsg+0x10/0x10 [ 1585.299264][T14553] ? __lock_acquire+0x6b5/0x2cf0 [ 1585.299285][T14553] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1585.299315][T14553] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 1585.299341][T14553] ? security_socket_recvmsg+0x7e/0x2c0 [ 1585.299373][T14553] ? __pfx_netlink_recvmsg+0x10/0x10 [ 1585.299404][T14553] sock_recvmsg+0x172/0x1b0 [ 1585.299433][T14553] ____sys_recvmsg+0x1e6/0x4a0 [ 1585.299484][T14553] ? __pfx_____sys_recvmsg+0x10/0x10 [ 1585.299534][T14553] ? import_iovec+0x73/0xa0 [ 1585.299569][T14553] ___sys_recvmsg+0x215/0x590 [ 1585.299587][T14553] ? get_pid_task+0x20/0x1f0 [ 1585.299620][T14553] ? __pfx____sys_recvmsg+0x10/0x10 [ 1585.299647][T14553] ? __fget_files+0x2a/0x420 [ 1585.299693][T14553] ? __fget_files+0x3a0/0x420 [ 1585.299730][T14553] __x64_sys_recvmsg+0x1ba/0x2a0 [ 1585.299755][T14553] ? __pfx___x64_sys_recvmsg+0x10/0x10 [ 1585.299788][T14553] ? __pfx_ksys_write+0x10/0x10 [ 1585.299827][T14553] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1585.299850][T14553] do_syscall_64+0x15f/0xf80 [ 1585.299869][T14553] ? trace_irq_disable+0x3b/0x140 [ 1585.299900][T14553] ? clear_bhb_loop+0x40/0x90 [ 1585.299927][T14553] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1585.299947][T14553] RIP: 0033:0x7fb6bc99cdd9 [ 1585.299967][T14553] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1585.299984][T14553] RSP: 002b:00007fb6bd812028 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 1585.300005][T14553] RAX: ffffffffffffffda RBX: 00007fb6bcc15fa0 RCX: 00007fb6bc99cdd9 [ 1585.300021][T14553] RDX: 0000000000000000 RSI: 00002000000006c0 RDI: 0000000000000003 [ 1585.300035][T14553] RBP: 00007fb6bd812090 R08: 0000000000000000 R09: 0000000000000000 [ 1585.300048][T14553] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1585.300060][T14553] R13: 00007fb6bcc16038 R14: 00007fb6bcc15fa0 R15: 00007ffd2cfbe018 [ 1585.300094][T14553] [ 1585.948636][T14561] netlink: 'syz.0.13081': attribute type 3 has an invalid length. [ 1586.254689][T14583] FAULT_INJECTION: forcing a failure. [ 1586.254689][T14583] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1586.271679][T14583] CPU: 1 UID: 0 PID: 14583 Comm: syz.0.13089 Not tainted syzkaller #0 PREEMPT(full) [ 1586.271708][T14583] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1586.271720][T14583] Call Trace: [ 1586.271729][T14583] [ 1586.271738][T14583] dump_stack_lvl+0xe8/0x150 [ 1586.271769][T14583] should_fail_ex+0x412/0x560 [ 1586.271802][T14583] _copy_from_iter+0x1d3/0x1670 [ 1586.271834][T14583] ? rcu_is_watching+0x15/0xb0 [ 1586.271865][T14583] ? __pfx__copy_from_iter+0x10/0x10 [ 1586.271900][T14583] ? netlink_sendmsg+0x650/0xb40 [ 1586.271929][T14583] ? skb_put+0x11b/0x210 [ 1586.271960][T14583] netlink_sendmsg+0x6c0/0xb40 [ 1586.271999][T14583] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1586.272032][T14583] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1586.272062][T14583] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1586.272093][T14583] ____sys_sendmsg+0x972/0x9f0 [ 1586.272124][T14583] ? __might_fault+0xaf/0x130 [ 1586.272157][T14583] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1586.272196][T14583] ? import_iovec+0x73/0xa0 [ 1586.272228][T14583] ___sys_sendmsg+0x2a5/0x360 [ 1586.272256][T14583] ? __lock_acquire+0x6b5/0x2cf0 [ 1586.272283][T14583] ? __pfx____sys_sendmsg+0x10/0x10 [ 1586.272350][T14583] ? __fget_files+0x2a/0x420 [ 1586.272375][T14583] ? __fget_files+0x3a0/0x420 [ 1586.272409][T14583] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1586.272443][T14583] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1586.272482][T14583] ? __pfx_ksys_write+0x10/0x10 [ 1586.272520][T14583] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1586.272543][T14583] do_syscall_64+0x15f/0xf80 [ 1586.272562][T14583] ? trace_irq_disable+0x3b/0x140 [ 1586.272593][T14583] ? clear_bhb_loop+0x40/0x90 [ 1586.272619][T14583] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1586.272647][T14583] RIP: 0033:0x7f019d59cdd9 [ 1586.272668][T14583] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1586.272686][T14583] RSP: 002b:00007f019e49f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1586.272709][T14583] RAX: ffffffffffffffda RBX: 00007f019d815fa0 RCX: 00007f019d59cdd9 [ 1586.272725][T14583] RDX: 0000000000004800 RSI: 0000200000000300 RDI: 0000000000000003 [ 1586.272739][T14583] RBP: 00007f019e49f090 R08: 0000000000000000 R09: 0000000000000000 [ 1586.272751][T14583] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1586.272763][T14583] R13: 00007f019d816038 R14: 00007f019d815fa0 R15: 00007ffeaae30d08 [ 1586.272796][T14583] [ 1586.947440][T14585] syzkaller0: entered promiscuous mode [ 1586.964006][T14585] syzkaller0: entered allmulticast mode [ 1587.058293][ T43] net_ratelimit: 14 callbacks suppressed [ 1587.058315][ T43] bond8: (slave bridge8): failed to get link speed/duplex [ 1587.153340][T14604] netlink: 'syz.0.13092': attribute type 1 has an invalid length. [ 1587.210902][T14605] netlink: 28 bytes leftover after parsing attributes in process `syz.0.13092'. [ 1587.393662][T14613] vxcan1: tx drop: invalid sa for name 0x0000000000000001 [ 1587.842414][T14617] netlink: 'syz.3.13095': attribute type 3 has an invalid length. [ 1591.604606][T14604] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 1591.634987][ T8958] bond8: (slave bridge8): failed to get link speed/duplex [ 1591.808372][T31064] bond8: (slave bridge8): failed to get link speed/duplex [ 1591.865835][T14636] syzkaller0: entered promiscuous mode [ 1591.872491][T14636] syzkaller0: entered allmulticast mode [ 1592.151412][T31064] bond8: (slave bridge8): failed to get link speed/duplex [ 1592.208037][T14650] netlink: 312 bytes leftover after parsing attributes in process `syz.5.13104'. [ 1592.226676][T14650] netlink: 'syz.5.13104': attribute type 1 has an invalid length. [ 1592.279469][ T8958] bond8: (slave bridge8): failed to get link speed/duplex [ 1592.360401][T14660] netlink: 'syz.0.13106': attribute type 3 has an invalid length. [ 1592.464517][T11839] bond8: (slave bridge8): failed to get link speed/duplex [ 1592.618646][T11966] bond8: (slave bridge8): failed to get link speed/duplex [ 1592.869756][ T36] bond8: (slave bridge8): failed to get link speed/duplex [ 1592.888582][T14676] netlink: 'syz.0.13111': attribute type 1 has an invalid length. [ 1592.965543][T14680] netlink: 28 bytes leftover after parsing attributes in process `syz.0.13111'. [ 1593.032466][T14676] bond4: entered promiscuous mode [ 1593.038671][T14676] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1593.072318][T14680] bond4: entered allmulticast mode [ 1593.097426][T14682] syzkaller0: entered promiscuous mode [ 1593.124005][T14682] syzkaller0: entered allmulticast mode [ 1593.467482][T14693] syzkaller0: entered promiscuous mode [ 1593.486390][T14693] syzkaller0: entered allmulticast mode [ 1593.513913][ T36] bond8: (slave bridge8): failed to get link speed/duplex [ 1593.621955][T14664] tipc: Started in network mode [ 1593.634157][T14664] tipc: Node identity 060679dfa8fb, cluster identity 4711 [ 1593.651042][T14664] tipc: Enabled bearer , priority 0 [ 1593.667742][T14664] syzkaller0: entered promiscuous mode [ 1593.686694][T14664] syzkaller0: entered allmulticast mode [ 1593.724854][T14663] tipc: Resetting bearer [ 1593.780531][T14663] tipc: Disabling bearer [ 1593.830281][ T36] bond8: (slave bridge8): failed to get link speed/duplex [ 1593.968422][T11966] bond8: (slave bridge8): failed to get link speed/duplex [ 1594.133385][T14711] netlink: 'syz.0.13120': attribute type 3 has an invalid length. [ 1598.938776][T31064] bond8: (slave bridge8): failed to get link speed/duplex [ 1599.159037][T14734] netlink: 'syz.4.13125': attribute type 1 has an invalid length. [ 1599.206910][T14737] netlink: 16 bytes leftover after parsing attributes in process `syz.2.13127'. [ 1599.275739][T14742] netlink: 28 bytes leftover after parsing attributes in process `syz.4.13125'. [ 1599.448628][T14734] bond13: entered promiscuous mode [ 1599.481345][T14734] 8021q: adding VLAN 0 to HW filter on device bond13 [ 1599.551459][T11839] tipc: Left network mode [ 1599.568522][ T36] bond8: (slave bridge8): failed to get link speed/duplex [ 1599.600990][T14742] bond13: entered allmulticast mode [ 1599.678427][ T36] bond8: (slave bridge8): failed to get link speed/duplex [ 1599.802219][T14760] netlink: 'syz.2.13130': attribute type 1 has an invalid length. [ 1599.810344][ T36] bond8: (slave bridge8): failed to get link speed/duplex [ 1599.864664][T14765] netlink: 12 bytes leftover after parsing attributes in process `syz.2.13130'. [ 1599.884883][T14768] netlink: 252 bytes leftover after parsing attributes in process `syz.5.13133'. [ 1599.905668][T14765] netlink: 12 bytes leftover after parsing attributes in process `syz.2.13130'. [ 1599.915639][T14769] netlink: 'syz.4.13132': attribute type 3 has an invalid length. [ 1599.933489][T14762] netlink: 12 bytes leftover after parsing attributes in process `syz.3.13131'. [ 1599.977536][T14760] bond8: entered promiscuous mode [ 1599.994860][T14762] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13131'. [ 1600.014955][T14760] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1600.015902][T14762] netlink: 4 bytes leftover after parsing attributes in process `syz.3.13131'. [ 1600.040266][ T8956] bond8: (slave bridge8): failed to get link speed/duplex [ 1600.078630][T14773] openvswitch: netlink: IP tunnel dst address not specified [ 1600.170553][T14770] bond8: (slave bridge9): making interface the new active one [ 1600.180564][T14770] bridge9: entered promiscuous mode [ 1600.189015][T14770] bond8: (slave bridge9): Enslaving as an active interface with an up link [ 1600.262740][ T36] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1600.312923][ T36] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1600.347662][ T36] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1600.404163][ T36] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1600.469685][ T36] bond8: (slave bridge8): failed to get link speed/duplex [ 1600.618532][ T36] bond8: (slave bridge8): failed to get link speed/duplex [ 1600.620553][T14796] netlink: 16 bytes leftover after parsing attributes in process `syz.3.13140'. [ 1600.693717][T14798] syzkaller0: entered promiscuous mode [ 1600.724025][T14798] syzkaller0: entered allmulticast mode [ 1600.737092][T14800] netlink: 'syz.5.13142': attribute type 1 has an invalid length. [ 1600.746161][T11839] bond8: (slave bridge8): failed to get link speed/duplex [ 1600.785277][T14800] bond9: entered promiscuous mode [ 1600.793478][T14800] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1600.836801][T14800] netlink: 28 bytes leftover after parsing attributes in process `syz.5.13142'. [ 1600.861922][T14800] bond9: entered allmulticast mode [ 1600.899560][T11839] bond8: (slave bridge8): failed to get link speed/duplex [ 1601.113420][T14813] syzkaller0: entered promiscuous mode [ 1601.125883][T14813] syzkaller0: entered allmulticast mode [ 1604.484678][T28208] Bluetooth: hci2: command 0x0406 tx timeout [ 1606.640939][T11966] net_ratelimit: 2 callbacks suppressed [ 1606.640962][T11966] bond8: (slave bridge8): failed to get link speed/duplex [ 1606.778337][ T36] bond8: (slave bridge8): failed to get link speed/duplex [ 1606.835534][T14847] __nla_validate_parse: 3 callbacks suppressed [ 1606.835555][T14847] netlink: 16 bytes leftover after parsing attributes in process `syz.2.13154'. [ 1606.909552][ T135] bond8: (slave bridge8): failed to get link speed/duplex [ 1606.995411][T14856] netlink: 24 bytes leftover after parsing attributes in process `syz.3.13155'. [ 1607.038451][T11839] bond8: (slave bridge8): failed to get link speed/duplex [ 1607.179499][ T36] bond8: (slave bridge8): failed to get link speed/duplex [ 1607.212230][T14860] netlink: 120 bytes leftover after parsing attributes in process `syz.0.13157'. [ 1607.235989][T14860] netlink: 128 bytes leftover after parsing attributes in process `syz.0.13157'. [ 1607.300547][ T36] bond8: (slave bridge8): failed to get link speed/duplex [ 1607.428536][T11839] bond8: (slave bridge8): failed to get link speed/duplex [ 1607.507626][T14865] netlink: 4 bytes leftover after parsing attributes in process `syz.5.13159'. [ 1607.525868][ T301] Bluetooth: hci3: link tx timeout [ 1607.531414][ T301] Bluetooth: hci3: killing stalled connection 10:aa:aa:aa:aa:aa [ 1607.542015][ T301] Bluetooth: hci3: link tx timeout [ 1607.553619][ T301] Bluetooth: hci3: killing stalled connection 10:aa:aa:aa:aa:aa [ 1607.558261][T14865] openvswitch: netlink: Invalid VLAN frame [ 1607.572242][ T301] Bluetooth: hci3: link tx timeout [ 1607.577489][ T301] Bluetooth: hci3: killing stalled connection 10:aa:aa:aa:aa:aa [ 1607.579530][ T135] bond8: (slave bridge8): failed to get link speed/duplex [ 1607.594192][ T301] Bluetooth: hci3: link tx timeout [ 1607.599571][ T301] Bluetooth: hci3: killing stalled connection 10:aa:aa:aa:aa:aa [ 1607.607431][ T301] Bluetooth: hci3: link tx timeout [ 1607.612770][ T301] Bluetooth: hci3: killing stalled connection 10:aa:aa:aa:aa:aa [ 1607.620732][ T301] Bluetooth: hci3: link tx timeout [ 1607.627580][ T301] Bluetooth: hci3: killing stalled connection 10:aa:aa:aa:aa:aa [ 1607.635461][ T301] Bluetooth: hci3: link tx timeout [ 1607.641289][ T301] Bluetooth: hci3: killing stalled connection 10:aa:aa:aa:aa:aa [ 1607.652877][ T301] Bluetooth: hci3: link tx timeout [ 1607.658076][ T301] Bluetooth: hci3: killing stalled connection 10:aa:aa:aa:aa:aa [ 1607.666996][ T301] Bluetooth: hci3: link tx timeout [ 1607.672401][ T301] Bluetooth: hci3: killing stalled connection 10:aa:aa:aa:aa:aa [ 1607.683226][ T301] Bluetooth: hci3: link tx timeout [ 1607.690017][ T301] Bluetooth: hci3: killing stalled connection 10:aa:aa:aa:aa:aa [ 1607.697892][ T301] Bluetooth: hci3: link tx timeout [ 1607.703156][ T301] Bluetooth: hci3: killing stalled connection 10:aa:aa:aa:aa:aa [ 1607.721325][T14869] netlink: 108 bytes leftover after parsing attributes in process `syz.3.13160'. [ 1607.754697][ T301] Bluetooth: hci3: link tx timeout [ 1607.761663][ T301] Bluetooth: hci3: killing stalled connection 10:aa:aa:aa:aa:aa [ 1607.770268][ T301] Bluetooth: hci3: link tx timeout [ 1607.775463][ T301] Bluetooth: hci3: killing stalled connection 10:aa:aa:aa:aa:aa [ 1607.791602][T14869] netlink: 108 bytes leftover after parsing attributes in process `syz.3.13160'. [ 1607.801346][ T301] Bluetooth: hci3: link tx timeout [ 1607.806539][ T301] Bluetooth: hci3: killing stalled connection 10:aa:aa:aa:aa:aa [ 1607.814316][ T301] Bluetooth: hci3: link tx timeout [ 1607.819603][ T301] Bluetooth: hci3: killing stalled connection 10:aa:aa:aa:aa:aa [ 1607.827781][ T301] Bluetooth: hci3: link tx timeout [ 1607.833815][ T301] Bluetooth: hci3: killing stalled connection 10:aa:aa:aa:aa:aa [ 1607.851007][ T43] bond8: (slave bridge8): failed to get link speed/duplex [ 1608.096109][T14882] syzkaller0: entered promiscuous mode [ 1608.118410][T14882] syzkaller0: entered allmulticast mode [ 1608.167504][T14884] batadv0: entered promiscuous mode [ 1608.179433][T14884] macsec1: entered promiscuous mode [ 1608.194055][T14884] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 1608.206352][T14884] batadv0: left promiscuous mode [ 1608.533230][T14890] syzkaller1: entered promiscuous mode [ 1608.538946][T14890] syzkaller1: entered allmulticast mode [ 1608.562504][T14900] netlink: 364 bytes leftover after parsing attributes in process `syz.0.13168'. [ 1609.063719][T14909] netlink: 'syz.5.13170': attribute type 9 has an invalid length. [ 1609.598414][ T301] Bluetooth: hci3: command 0x0406 tx timeout [ 1609.966215][T14917] netlink: 'syz.0.13173': attribute type 1 has an invalid length. [ 1610.075323][T14918] netlink: 28 bytes leftover after parsing attributes in process `syz.0.13173'. [ 1611.026746][T14923] netlink: 'syz.4.13174': attribute type 1 has an invalid length. [ 1611.108376][T14924] netlink: 28 bytes leftover after parsing attributes in process `syz.4.13174'. [ 1613.786293][T14909] netlink: 'syz.5.13170': attribute type 3 has an invalid length. [ 1613.794504][T14909] netlink: 'syz.5.13170': attribute type 3 has an invalid length. [ 1613.806959][T14917] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 1613.839210][T14923] workqueue: Failed to create a rescuer kthread for wq "bond14": -EINTR [ 1613.883312][T14931] FAULT_INJECTION: forcing a failure. [ 1613.883312][T14931] name failslab, interval 1, probability 0, space 0, times 0 [ 1613.908584][T14931] CPU: 0 UID: 0 PID: 14931 Comm: syz.2.13175 Not tainted syzkaller #0 PREEMPT(full) [ 1613.908614][T14931] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1613.908627][T14931] Call Trace: [ 1613.908636][T14931] [ 1613.908646][T14931] dump_stack_lvl+0xe8/0x150 [ 1613.908677][T14931] should_fail_ex+0x412/0x560 [ 1613.908710][T14931] should_failslab+0xa8/0x100 [ 1613.908741][T14931] ? skb_clone+0x212/0x3a0 [ 1613.908762][T14931] kmem_cache_alloc_noprof+0x87/0x650 [ 1613.908790][T14931] ? __netlink_lookup+0xc6/0x8b0 [ 1613.908828][T14931] skb_clone+0x212/0x3a0 [ 1613.908855][T14931] __netlink_deliver_tap+0x404/0x850 [ 1613.908898][T14931] ? netlink_deliver_tap+0x2e/0x1b0 [ 1613.908929][T14931] netlink_deliver_tap+0x19c/0x1b0 [ 1613.908961][T14931] netlink_unicast+0x730/0x8e0 [ 1613.909000][T14931] netlink_sendmsg+0x813/0xb40 [ 1613.909042][T14931] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1613.909076][T14931] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1613.909107][T14931] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1613.909139][T14931] ____sys_sendmsg+0x972/0x9f0 [ 1613.909171][T14931] ? __might_fault+0xaf/0x130 [ 1613.909205][T14931] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1613.909246][T14931] ? import_iovec+0x73/0xa0 [ 1613.909281][T14931] ___sys_sendmsg+0x2a5/0x360 [ 1613.909310][T14931] ? __lock_acquire+0x6b5/0x2cf0 [ 1613.909340][T14931] ? __pfx____sys_sendmsg+0x10/0x10 [ 1613.909420][T14931] ? __fget_files+0x2a/0x420 [ 1613.909444][T14931] ? __fget_files+0x3a0/0x420 [ 1613.909480][T14931] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1613.909514][T14931] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1613.909556][T14931] ? __pfx_ksys_write+0x10/0x10 [ 1613.909596][T14931] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1613.909619][T14931] do_syscall_64+0x15f/0xf80 [ 1613.909640][T14931] ? trace_irq_disable+0x3b/0x140 [ 1613.909671][T14931] ? clear_bhb_loop+0x40/0x90 [ 1613.909696][T14931] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1613.909716][T14931] RIP: 0033:0x7fb6bc99cdd9 [ 1613.909743][T14931] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1613.909760][T14931] RSP: 002b:00007fb6bd812028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1613.909783][T14931] RAX: ffffffffffffffda RBX: 00007fb6bcc15fa0 RCX: 00007fb6bc99cdd9 [ 1613.909799][T14931] RDX: 0000000020000084 RSI: 00002000000000c0 RDI: 0000000000000003 [ 1613.909813][T14931] RBP: 00007fb6bd812090 R08: 0000000000000000 R09: 0000000000000000 [ 1613.909827][T14931] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1613.909839][T14931] R13: 00007fb6bcc16038 R14: 00007fb6bcc15fa0 R15: 00007ffd2cfbe018 [ 1613.909875][T14931] [ 1614.179165][ T43] net_ratelimit: 4 callbacks suppressed [ 1614.179186][ T43] bond8: (slave bridge8): failed to get link speed/duplex [ 1614.303381][T31064] bond8: (slave bridge8): failed to get link speed/duplex [ 1614.419333][ T43] bond8: (slave bridge8): failed to get link speed/duplex [ 1614.481204][T14948] netlink: 'syz.0.13181': attribute type 1 has an invalid length. [ 1614.489389][T14948] netlink: 'syz.0.13181': attribute type 2 has an invalid length. [ 1614.514923][T14948] netlink: 'syz.0.13181': attribute type 1 has an invalid length. [ 1614.525339][T14948] netlink: 'syz.0.13181': attribute type 3 has an invalid length. [ 1614.534059][ T43] bond8: (slave bridge8): failed to get link speed/duplex [ 1614.651297][ T43] bond8: (slave bridge8): failed to get link speed/duplex [ 1614.768443][ T135] bond8: (slave bridge8): failed to get link speed/duplex [ 1615.199996][ T8958] bond8: (slave bridge8): failed to get link speed/duplex [ 1615.338269][ T8958] bond8: (slave bridge8): failed to get link speed/duplex [ 1615.458562][ T135] bond8: (slave bridge8): failed to get link speed/duplex [ 1615.558563][T14979] netlink: 'syz.5.13190': attribute type 9 has an invalid length. [ 1615.616886][T14982] netlink: 'syz.2.13191': attribute type 9 has an invalid length. [ 1615.646407][T14979] netlink: 'syz.5.13190': attribute type 3 has an invalid length. [ 1615.656874][T14979] netlink: 'syz.5.13190': attribute type 3 has an invalid length. [ 1615.666316][T14982] netlink: 'syz.2.13191': attribute type 3 has an invalid length. [ 1615.676464][T14982] netlink: 'syz.2.13191': attribute type 3 has an invalid length. [ 1615.770981][ T135] bond8: (slave bridge8): failed to get link speed/duplex [ 1617.078806][T15004] netlink: 40 bytes leftover after parsing attributes in process `syz.0.13195'. [ 1617.624013][T15007] netlink: 200 bytes leftover after parsing attributes in process `syz.3.13198'. [ 1617.672923][T15007] netlink: 4 bytes leftover after parsing attributes in process `syz.3.13198'. [ 1618.788423][T15049] netlink: 20 bytes leftover after parsing attributes in process `syz.0.13212'. [ 1618.891837][T15056] netlink: 200 bytes leftover after parsing attributes in process `syz.2.13214'. [ 1618.920418][T15056] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13214'. [ 1619.164223][T15067] erspan0: left promiscuous mode [ 1620.081675][T15067] bond1: left promiscuous mode [ 1620.092019][T15067] bridge2: left promiscuous mode [ 1620.107078][T15067] bond2: left promiscuous mode [ 1620.130148][T15088] netlink: 36 bytes leftover after parsing attributes in process `syz.2.13222'. [ 1620.202653][T15067] bond4: left promiscuous mode [ 1620.207460][T15067] bridge3: left promiscuous mode [ 1620.213883][T15067] ipip0: left promiscuous mode [ 1620.222327][T15067] bond6: left promiscuous mode [ 1620.227349][T15067] bridge4: left promiscuous mode [ 1620.235564][T15067] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1620.245456][T15067] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1620.253349][T15067] bond9: left promiscuous mode [ 1620.258783][T15067] bridge5: left promiscuous mode [ 1620.266281][T15067] bond10: left promiscuous mode [ 1620.275197][T15067] bond11: left promiscuous mode [ 1620.280405][T15067] bridge8: left promiscuous mode [ 1620.286534][T15067] bond12: left promiscuous mode [ 1620.293406][T15067] bond13: left promiscuous mode [ 1620.408699][T11839] net_ratelimit: 17 callbacks suppressed [ 1620.408723][T11839] bond8: (slave bridge8): failed to get link speed/duplex [ 1620.539236][ T43] bond8: (slave bridge8): failed to get link speed/duplex [ 1620.601773][T15101] netlink: 9 bytes leftover after parsing attributes in process `syz.4.13225'. [ 1620.625867][T15103] syzkaller0: entered promiscuous mode [ 1620.647429][T15103] syzkaller0: entered allmulticast mode [ 1620.671964][T15101] gretap0: entered promiscuous mode [ 1620.695219][T15101] netlink: 5 bytes leftover after parsing attributes in process `syz.4.13225'. [ 1620.715667][T15109] Unsupported ieee802154 address type: 0 [ 1620.770491][T15110] validate_nla: 1 callbacks suppressed [ 1620.770511][T15110] netlink: 'syz.2.13228': attribute type 1 has an invalid length. [ 1620.786600][T15106] netlink: 'syz.0.13226': attribute type 9 has an invalid length. [ 1620.795847][T15101] 0ªî{X¹¦: renamed from gretap0 [ 1620.808667][T15101] 0ªî{X¹¦: left promiscuous mode [ 1620.823957][T15101] 0ªî{X¹¦: entered allmulticast mode [ 1620.842226][T15101] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 1620.860676][T15106] netlink: 'syz.0.13226': attribute type 3 has an invalid length. [ 1620.870456][T15106] netlink: 'syz.0.13226': attribute type 3 has an invalid length. [ 1620.891369][T11839] bond8: (slave bridge8): failed to get link speed/duplex [ 1620.912046][T15107] netlink: 28 bytes leftover after parsing attributes in process `syz.2.13228'. [ 1621.058794][ T135] bond8: (slave bridge8): failed to get link speed/duplex [ 1621.308323][ T8958] bond8: (slave bridge8): failed to get link speed/duplex [ 1621.427536][T15130] FAULT_INJECTION: forcing a failure. [ 1621.427536][T15130] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1621.449979][T11839] bond8: (slave bridge8): failed to get link speed/duplex [ 1621.493693][T15130] CPU: 1 UID: 0 PID: 15130 Comm: syz.5.13237 Not tainted syzkaller #0 PREEMPT(full) [ 1621.493724][T15130] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1621.493737][T15130] Call Trace: [ 1621.493746][T15130] [ 1621.493756][T15130] dump_stack_lvl+0xe8/0x150 [ 1621.493788][T15130] should_fail_ex+0x412/0x560 [ 1621.493823][T15130] _copy_to_user+0x31/0xb0 [ 1621.493858][T15130] simple_read_from_buffer+0xe1/0x170 [ 1621.493890][T15130] proc_fail_nth_read+0x1bb/0x230 [ 1621.493922][T15130] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1621.493954][T15130] ? rw_verify_area+0x2a6/0x4d0 [ 1621.493983][T15130] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1621.494012][T15130] vfs_read+0x20c/0xa70 [ 1621.494047][T15130] ? __pfx___mutex_lock+0x10/0x10 [ 1621.494071][T15130] ? __pfx_vfs_read+0x10/0x10 [ 1621.494102][T15130] ? __fget_files+0x2a/0x420 [ 1621.494134][T15130] ? __fget_files+0x3a0/0x420 [ 1621.494157][T15130] ? __fget_files+0x2a/0x420 [ 1621.494193][T15130] ksys_read+0x150/0x270 [ 1621.494226][T15130] ? __pfx_ksys_read+0x10/0x10 [ 1621.494266][T15130] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1621.494290][T15130] do_syscall_64+0x15f/0xf80 [ 1621.494310][T15130] ? trace_irq_disable+0x3b/0x140 [ 1621.494342][T15130] ? clear_bhb_loop+0x40/0x90 [ 1621.494377][T15130] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1621.494399][T15130] RIP: 0033:0x7f873a95d60e [ 1621.494421][T15130] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1621.494440][T15130] RSP: 002b:00007f873b847fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1621.494465][T15130] RAX: ffffffffffffffda RBX: 00007f873b8486c0 RCX: 00007f873a95d60e [ 1621.494481][T15130] RDX: 000000000000000f RSI: 00007f873b8480a0 RDI: 0000000000000004 [ 1621.494494][T15130] RBP: 00007f873b848090 R08: 0000000000000000 R09: 0000000000000000 [ 1621.494508][T15130] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1621.494521][T15130] R13: 00007f873ac16038 R14: 00007f873ac15fa0 R15: 00007ffcfb74f8c8 [ 1621.494562][T15130] [ 1621.732995][ T43] bond8: (slave bridge8): failed to get link speed/duplex [ 1621.853813][T11839] bond8: (slave bridge8): failed to get link speed/duplex [ 1622.002027][T31064] bond8: (slave bridge8): failed to get link speed/duplex [ 1622.090439][T15146] xt_policy: neither incoming nor outgoing policy selected [ 1622.109619][T15146] xt_policy: neither incoming nor outgoing policy selected [ 1622.209412][T15120] __nla_validate_parse: 2 callbacks suppressed [ 1622.209465][T15120] netlink: 12 bytes leftover after parsing attributes in process `syz.4.13232'. [ 1622.689242][ T135] ------------[ cut here ]------------ [ 1622.697186][ T135] wlan0: Dropped data frame as no usable bitrate found while scanning and associated. Target station: 08:02:11:00:00:01 on 5 GHz band [ 1622.711163][ T135] WARNING: net/mac80211/tx.c:757 at ieee80211_tx_h_rate_ctrl+0xd82/0x1760, CPU#0: kworker/u8:6/135 [ 1622.721962][ T135] Modules linked in: [ 1622.726624][ T135] CPU: 0 UID: 0 PID: 135 Comm: kworker/u8:6 Not tainted syzkaller #0 PREEMPT(full) [ 1622.736333][ T135] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1622.746507][ T135] Workqueue: events_unbound cfg80211_wiphy_work [ 1622.752852][ T135] RIP: 0010:ieee80211_tx_h_rate_ctrl+0xded/0x1760 [ 1622.759532][ T135] Code: 1c 08 00 00 48 8b 44 24 38 8b 30 45 31 ed 83 e6 07 41 0f 95 c5 31 ff e8 e1 11 a1 f6 43 8d 4c 6d 02 48 89 df 4c 89 f6 4c 89 fa <67> 48 0f b9 3a 41 bd 01 00 00 00 e9 73 01 00 00 e8 7e 0d a1 f6 e9 [ 1622.779223][ T135] RSP: 0018:ffffc90002537420 EFLAGS: 00010293 [ 1622.785332][ T135] RAX: ffffffff8b24b1cf RBX: ffffffff90427940 RCX: 0000000000000005 [ 1622.793481][ T135] RDX: ffff88807327fac4 RSI: ffff888065ba9918 RDI: ffffffff90427940 [ 1622.801549][ T135] RBP: ffffc90002537588 R08: ffff88804e5e2abf R09: 1ffff11009cbc557 [ 1622.809671][ T135] R10: dffffc0000000000 R11: ffffed1009cbc558 R12: dffffc0000000000 [ 1622.817975][ T135] R13: 0000000000000001 R14: ffff888065ba9918 R15: ffff88807327fac4 [ 1622.826030][ T135] FS: 0000000000000000(0000) GS:ffff888125287000(0000) knlGS:0000000000000000 [ 1622.835140][ T135] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1622.841821][ T135] CR2: 00007f919302e000 CR3: 0000000032076000 CR4: 00000000003526f0 [ 1622.849887][ T135] Call Trace: [ 1622.853218][ T135] [ 1622.856204][ T135] ? __pfx_ieee80211_tx_h_rate_ctrl+0x10/0x10 [ 1622.862379][ T135] ? ieee80211_is_bufferable_mmpdu+0x103/0x200 [ 1622.868631][ T135] invoke_tx_handlers_late+0xba/0x18a0 [ 1622.874244][ T135] ? invoke_tx_handlers_early+0xa0c/0x1d50 [ 1622.880422][ T135] ieee80211_tx+0x2d7/0x4b0 [ 1622.884989][ T135] ? __pfx_ieee80211_tx+0x10/0x10 [ 1622.890145][ T135] ? __ieee80211_tx_skb_tid_band+0x4cb/0x680 [ 1622.896203][ T135] __ieee80211_tx_skb_tid_band+0x50f/0x680 [ 1622.902114][ T135] ? ieee80211_scan_state_send_probe+0x4e8/0xa00 [ 1622.908543][ T135] ieee80211_scan_state_send_probe+0x594/0xa00 [ 1622.914948][ T135] ? try_to_wake_up+0x7f2/0x1380 [ 1622.920091][ T135] ieee80211_scan_work+0x64d/0x1c60 [ 1622.925384][ T135] cfg80211_wiphy_work+0x2cf/0x460 [ 1622.930581][ T135] ? process_scheduled_works+0xa70/0x1860 [ 1622.936338][ T135] process_scheduled_works+0xb5d/0x1860 [ 1622.941978][ T135] ? __pfx_process_scheduled_works+0x10/0x10 [ 1622.948007][ T135] ? assign_work+0x3d5/0x5e0 [ 1622.952683][ T135] worker_thread+0xa53/0xfc0 [ 1622.957567][ T135] kthread+0x388/0x470 [ 1622.961726][ T135] ? __pfx_worker_thread+0x10/0x10 [ 1622.966871][ T135] ? __pfx_kthread+0x10/0x10 [ 1622.971530][ T135] ret_from_fork+0x514/0xb70 [ 1622.976255][ T135] ? __pfx_ret_from_fork+0x10/0x10 [ 1622.981506][ T135] ? __switch_to+0xc79/0x1410 [ 1622.986389][ T135] ? __pfx_kthread+0x10/0x10 [ 1622.991062][ T135] ret_from_fork_asm+0x1a/0x30 [ 1622.995888][ T135] [ 1622.998989][ T135] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1623.006318][ T135] CPU: 0 UID: 0 PID: 135 Comm: kworker/u8:6 Not tainted syzkaller #0 PREEMPT(full) [ 1623.015736][ T135] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1623.025917][ T135] Workqueue: events_unbound cfg80211_wiphy_work [ 1623.032224][ T135] Call Trace: [ 1623.035537][ T135] [ 1623.038497][ T135] vpanic+0x56c/0xa60 [ 1623.042528][ T135] ? __pfx__printk+0x10/0x10 [ 1623.047168][ T135] ? __pfx_vpanic+0x10/0x10 [ 1623.051709][ T135] ? is_bpf_text_address+0x292/0x2b0 [ 1623.057122][ T135] ? is_bpf_text_address+0x26/0x2b0 [ 1623.062374][ T135] panic+0xc5/0xd0 [ 1623.066146][ T135] ? __pfx_panic+0x10/0x10 [ 1623.070613][ T135] ? ret_from_fork_asm+0x1a/0x30 [ 1623.075595][ T135] __warn+0x315/0x4c0 [ 1623.079697][ T135] ? ieee80211_tx_h_rate_ctrl+0xd82/0x1760 [ 1623.085556][ T135] ? ieee80211_tx_h_rate_ctrl+0xd82/0x1760 [ 1623.091383][ T135] __report_bug+0x29a/0x540 [ 1623.095921][ T135] ? ieee80211_tx_h_rate_ctrl+0xd82/0x1760 [ 1623.101745][ T135] ? __pfx___report_bug+0x10/0x10 [ 1623.106788][ T135] ? stack_trace_save+0xa9/0x100 [ 1623.111751][ T135] ? kasan_save_track+0x4f/0x80 [ 1623.116619][ T135] ? kasan_save_track+0x3e/0x80 [ 1623.121480][ T135] ? __kasan_slab_alloc+0x6c/0x80 [ 1623.126541][ T135] report_bug_entry+0x19a/0x290 [ 1623.131414][ T135] ? ieee80211_tx_h_rate_ctrl+0xded/0x1760 [ 1623.137238][ T135] ? ieee80211_tx_h_rate_ctrl+0xdf2/0x1760 [ 1623.143060][ T135] handle_bug+0xce/0x200 [ 1623.147313][ T135] exc_invalid_op+0x1a/0x50 [ 1623.151826][ T135] asm_exc_invalid_op+0x1a/0x20 [ 1623.156682][ T135] RIP: 0010:ieee80211_tx_h_rate_ctrl+0xded/0x1760 [ 1623.163110][ T135] Code: 1c 08 00 00 48 8b 44 24 38 8b 30 45 31 ed 83 e6 07 41 0f 95 c5 31 ff e8 e1 11 a1 f6 43 8d 4c 6d 02 48 89 df 4c 89 f6 4c 89 fa <67> 48 0f b9 3a 41 bd 01 00 00 00 e9 73 01 00 00 e8 7e 0d a1 f6 e9 [ 1623.182727][ T135] RSP: 0018:ffffc90002537420 EFLAGS: 00010293 [ 1623.188811][ T135] RAX: ffffffff8b24b1cf RBX: ffffffff90427940 RCX: 0000000000000005 [ 1623.196793][ T135] RDX: ffff88807327fac4 RSI: ffff888065ba9918 RDI: ffffffff90427940 [ 1623.204771][ T135] RBP: ffffc90002537588 R08: ffff88804e5e2abf R09: 1ffff11009cbc557 [ 1623.212754][ T135] R10: dffffc0000000000 R11: ffffed1009cbc558 R12: dffffc0000000000 [ 1623.220731][ T135] R13: 0000000000000001 R14: ffff888065ba9918 R15: ffff88807327fac4 [ 1623.228721][ T135] ? ieee80211_tx_h_rate_ctrl+0xddf/0x1760 [ 1623.234567][ T135] ? __pfx_ieee80211_tx_h_rate_ctrl+0x10/0x10 [ 1623.241185][ T135] ? ieee80211_is_bufferable_mmpdu+0x103/0x200 [ 1623.247355][ T135] invoke_tx_handlers_late+0xba/0x18a0 [ 1623.252854][ T135] ? invoke_tx_handlers_early+0xa0c/0x1d50 [ 1623.258764][ T135] ieee80211_tx+0x2d7/0x4b0 [ 1623.263289][ T135] ? __pfx_ieee80211_tx+0x10/0x10 [ 1623.268352][ T135] ? __ieee80211_tx_skb_tid_band+0x4cb/0x680 [ 1623.274348][ T135] __ieee80211_tx_skb_tid_band+0x50f/0x680 [ 1623.280169][ T135] ? ieee80211_scan_state_send_probe+0x4e8/0xa00 [ 1623.286520][ T135] ieee80211_scan_state_send_probe+0x594/0xa00 [ 1623.292731][ T135] ? try_to_wake_up+0x7f2/0x1380 [ 1623.297715][ T135] ieee80211_scan_work+0x64d/0x1c60 [ 1623.302956][ T135] cfg80211_wiphy_work+0x2cf/0x460 [ 1623.308094][ T135] ? process_scheduled_works+0xa70/0x1860 [ 1623.313833][ T135] process_scheduled_works+0xb5d/0x1860 [ 1623.319460][ T135] ? __pfx_process_scheduled_works+0x10/0x10 [ 1623.325541][ T135] ? assign_work+0x3d5/0x5e0 [ 1623.330331][ T135] worker_thread+0xa53/0xfc0 [ 1623.334961][ T135] kthread+0x388/0x470 [ 1623.339168][ T135] ? __pfx_worker_thread+0x10/0x10 [ 1623.344299][ T135] ? __pfx_kthread+0x10/0x10 [ 1623.348934][ T135] ret_from_fork+0x514/0xb70 [ 1623.353900][ T135] ? __pfx_ret_from_fork+0x10/0x10 [ 1623.359030][ T135] ? __switch_to+0xc79/0x1410 [ 1623.363740][ T135] ? __pfx_kthread+0x10/0x10 [ 1623.368437][ T135] ret_from_fork_asm+0x1a/0x30 [ 1623.373233][ T135] [ 1623.377112][ T135] Kernel Offset: disabled [ 1623.381439][ T135] Rebooting in 86400 seconds..