last executing test programs: 5m24.751321884s ago: executing program 0 (id=16721): bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB, @ANYRES32], 0x48) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(0x0, r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r1, 0xfffffffc) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r3, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) 5m24.547188675s ago: executing program 0 (id=16724): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000000206010800000000000000000000000005000400000000000900020073797a31000000001400078008001240000000000500140008000000050005000a000000050001000600000011000300686173683a69702c706f7274"], 0x60}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c000000090601080000000000000000070000000900020073797a31000000000500010007000000340007801800018014000240fe8000000000000000000000000000bb060004400e1f00cd050007008800000006000540823e00b95ad2790ee276d14e"], 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r3, 0x0, 0x240000d2) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94) socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x1, 0x20}, 0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x0, @private2}]}, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$NL802154_CMD_SET_SEC_PARAMS(0xffffffffffffffff, 0x0, 0x4000000) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, 0x0, 0x0) 5m24.379396743s ago: executing program 0 (id=16725): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x80a40, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000016c0)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0x3, 0x4}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x8, 0x6, 0x5, 0x101}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) 5m24.011261897s ago: executing program 0 (id=16730): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[], 0x0, 0x46, 0x0, 0x6}, 0x28) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x24040800) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[], 0x0) r0 = socket$inet(0xa, 0x801, 0x0) accept4(r0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=@newtaction={0x7c, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x68, 0x1, [@m_tunnel_key={0x64, 0x1, 0x0, 0x0, {{0xf}, {0x34, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x3, 0x5, 0x0, 0x5cc7, 0x8}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0xb, @loopback={0x400000004000300}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd00028008"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) 5m23.842075286s ago: executing program 0 (id=16733): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x34, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2}]}]}, 0x34}}, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x14, r4, 0x1, 0x70bd2c, 0x25dfdbff, {0x4, 0x0, 0x234e}}, 0x14}}, 0x800) 5m22.921439537s ago: executing program 0 (id=16747): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1400000026000100000000000000000006"], 0x14}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r2, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r3, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) 5m7.737190776s ago: executing program 32 (id=16747): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1400000026000100000000000000000006"], 0x14}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r2, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r3, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) 2m39.343646076s ago: executing program 5 (id=18395): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) (async) close(r0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x28, 0x13, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x5}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x8000) (async) sendmsg$NFT_MSG_GETOBJ(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x28, 0x13, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x5}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x8000) close(r1) r3 = socket(0x10, 0x803, 0x0) r4 = socket(0x2a, 0x2, 0x0) getsockname$packet(r4, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@getchain={0x24, 0x66, 0x109, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xffff}, {}, {0xd, 0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x8880}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x4e, &(0x7f0000000880)={@multicast, @multicast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "010448", 0x7, 0x3a, 0xff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local, {[], @ndisc_na={0x88, 0x0, 0x0, 0x8, '\x00', @empty}}}}}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4090}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x130}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x4c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x20, 0x3, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x7}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x74}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) 2m39.178911667s ago: executing program 5 (id=18399): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) socket(0x200000000000011, 0x2, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xf, 0xf}}}, 0x24}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r5, {0xffff}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r8, {0x4}, {0xffff}, {0x2, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x810}, 0x0) 2m38.880277618s ago: executing program 5 (id=18404): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={{0x14, 0x10, 0x1, 0x100000}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xb}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) 2m38.706829447s ago: executing program 5 (id=18408): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x50, 0x10, 0x401, 0x800000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b, 0x14218}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'bond0\x00'}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_PRIMARY_RESELECT={0x5}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x34, r1, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008000}, 0x30) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r5, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000180)=[{0x6c}, {0x6}]}, 0x10) r6 = getpid() sendmsg$nl_generic(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c00000046000701fcffffff02000000017c000008000100", @ANYRES32=r6], 0x1c}, 0x1, 0x0, 0x0, 0x488c4}, 0xc000) sendmsg$nl_generic(r2, &(0x7f0000000800)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000480)={0x324, 0x1c, 0x8, 0x70bd2b, 0x25dfdbff, {0x1}, [@generic="2c8d07ca15891a26bc494f6ce434dd28211c0807eb10674020d369b47cb6007c7e41ea73adf2f5ff10006d22ee002bad98a58e97b5f611f1", @typed={0x8f, 0x11, 0x0, 0x0, @binary="43eefe817828c217ea0128104fc1aa9830d8a8c4c115d875d70b6207aaed86eb64a9571e2d46dee93fd42c9f0b745774f3332973f8556543e1e982004742a202139ac26085b93d0407006c7e9d163d334212ed063e7fcb18aeb755ee398f5576eb694a774a4a8bc17bbd0b91ee667ae59037b6a0121bd7ba2cce5ec7bca347bbb8cdfb49f458d554302c31"}, @nested={0x113, 0x11c, 0x0, 0x1, [@nested={0x4, 0x113}, @generic="17ffa4a17ad5c0ace91fc8442f3d8732cadde0e4552f19218270aaa848ff0eadd0a9cb0f33effdec59cd5d12e47a1f0641fba7d6c686ac8ab40d0cf946480c17c5c0ca", @nested={0x4, 0x156}, @nested={0x4, 0xc0}, @nested={0x4, 0xc1}, @generic="5d0e690fc8f76f25291d1634e7d93de8b038e9951abf2507af2d66f8f8d1375198dbbe151ea087c0b507df0374361b1b077b1b74d576656e2b6743fa7f09f77e676867446d1fcd7f2c6e1f23de86bb8e1fdaaa9ddc6de9d6b55e308e6dfa8f9eccd2dd98860a0c1f6bc3bda90ddbdcf1fb37006f6dc90c580345935e47f30c19e5ac65ae63b8385f20f9587fe3dc945b72e818dd7c80cd04ef34dc5a32673bc8e5e35a50ef3e70497de680ab21999b25d788db8a1c94b22e", @nested={0x4, 0x15c}]}, @typed={0x8, 0x39, 0x0, 0x0, @pid=r6}, @generic="29dbf12743b8c96aa0214f869f25ed03af948b045846b306363c9348f4", @generic="16ea6cc2ca00"/18, @generic="015d64055cc129645e473e51ac9694a40559ccc2c3c247a204a59e5a7b49c3dcc7ffbc9ed6ab665a2ec3c59029d64c1da2dfb13eccbfe5f143322e6120bcae600f1f2616d68d730b9375ace1915cd3490ae3292f16466a9552f5cdc3aea72e01b435f889afe3436d78c32aa23e70a940e59a3e5859404a5b7905ab61ba5d538b5b610b70fc9c32ec20f2fd6f90e9d5569c2991ba9c091724b5c90c39494ab7b014607f69fe89fa0742db475134b1b8f595c4c5147f9d883f02b7a2a2e0258b4da6f62951255d0215d5130458237b8f29e238192bac4a6bfe19cbe9e3c85408fadaceb3cbc067743d5b621e26", @typed={0x5, 0xbe, 0x0, 0x0, @binary='K'}, @typed={0x8, 0x12c, 0x0, 0x0, @u32=0x4}]}, 0x324}, 0x1, 0x0, 0x0, 0x20000001}, 0x4000) r7 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000002c0)={'erspan0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0xc3b, 0x0, 0x0, {0x0, 0x0, 0x0, r9}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ENCAP_DPORT={0x6}]}}}]}, 0x40}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x40, 0x10, 0x49920d862a921d1b, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x4}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x0) 2m38.402883673s ago: executing program 5 (id=18414): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000000)=0x2, 0x4) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket(0xa, 0x5, 0x0) getsockopt$inet6_int(r2, 0x29, 0x1a, 0x0, &(0x7f0000000040)) getsockopt$packet_int(r1, 0x107, 0xb, &(0x7f0000000000), &(0x7f0000000040)=0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xff}, 0x48) r4 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) mmap(&(0x7f00008b8000/0x3000)=nil, 0x3000, 0x0, 0x13, r4, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000001e0000000000f0ffffff18110000", @ANYRES32=r3, @ANYBLOB="000000000000000087080000010100007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000820000009500000000000000"], &(0x7f0000000200)='syzkaller\x00', 0x8}, 0x90) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000480)=@filter={'filter\x00', 0x42, 0x4, 0x448, 0xffffffff, 0x2e0, 0x0, 0x2e0, 0xffffffff, 0xffffffff, 0x3b0, 0x3b0, 0x3b0, 0xffffffff, 0x4, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0x0, 0x0, 'veth0_to_batadv\x00', 'vlan0\x00', {0xff}, {0xff}, 0x84, 0x0, 0x2}, 0x0, 0x1e8, 0x210, 0x0, {0x100000000000000}, [@common=@inet=@sctp={{0x148}, {[0x4e21, 0x4e23], [0x4e21, 0x4e24], [0x7f, 0x8e, 0x7, 0x0, 0x8, 0x2d, 0x9, 0x7, 0x60e91136, 0x9, 0x1ff, 0xfffffffe, 0x9, 0x4, 0xa, 0x95, 0x20000, 0x2f3c0e1c, 0x3, 0x7, 0x4, 0x5, 0x200, 0xffffffff, 0xe, 0x7f, 0x2, 0x0, 0x1, 0x0, 0x2, 0x7, 0x6, 0x7, 0x3, 0x40, 0x9, 0x9, 0x7, 0x9, 0x9, 0x730, 0x5, 0x3, 0x10, 0x101, 0x1, 0x800, 0x80, 0x9, 0x7fffffff, 0x0, 0x3, 0x6, 0x1, 0x4, 0xffff, 0x6, 0x5, 0x3, 0xffffffb0, 0x9, 0x1, 0x3], 0x4, [{0x1, 0x4}, {0x1, 0x6, 0x9}, {0x4, 0x4, 0x1}, {0x40, 0xf9, 0x8}], 0x2, 0x3, 0x7fffffe}}, @common=@unspec=@connmark={{0x30}}]}, @REJECT={0x28}}, {{@ip={@loopback, @rand_addr=0x64010101, 0xffffff00, 0xff000000, 'geneve0\x00', 'macvlan0\x00', {0xff}, {}, 0x2, 0x0, 0x4}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x3, 0x3, [0x2, 0x2c, 0x4, 0x2, 0x12, 0x22, 0x16, 0x10, 0x35, 0x1a, 0x0, 0x3e, 0x9, 0x0, 0x24, 0x39], 0x1, 0x6, 0x6}}}, {{@ip={@private=0xa010101, @loopback, 0xff, 0xffffff00, 'bond0\x00', 'dvmrp0\x00', {}, {}, 0x2f, 0x2, 0x21}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, 0xd, 0x8, [0xa, 0x26, 0x2a, 0xa, 0x13, 0xe, 0x2d, 0x21, 0x2d, 0x32, 0x40, 0x20, 0x28, 0x18, 0x22, 0x1e], 0x1, 0x0, 0x6}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4a8) 2m38.300130413s ago: executing program 5 (id=18418): syz_extract_tcp_res(&(0x7f0000000000)={0x41424344, 0x41424344}, 0x9, 0x5) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005c40)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0xa0, 0x30, 0x9, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_bpf={0x88, 0x1, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{}, {0x35, 0x0, 0x5}, {}, {}, {}, {}, {}]}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa0}}, 0x0) syz_emit_ethernet(0x6e, &(0x7f00000000c0)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0xc, 0x4, 0x0, 0x0, 0x60, 0x3, 0x0, 0x0, 0x5, 0x0, @dev, @private=0xa010108, {[@timestamp_addr={0x44, 0x14, 0x5, 0x3, 0x0, [{@empty, 0x80000}, {@multicast1}]}, @ssrr={0x89, 0x3, 0x8a}, @generic={0x82, 0x2}, @noop]}}, {{0x1, 0x0, r0, 0x41424344, 0x0, 0x6, 0xc, 0x0, 0x0, 0x0, 0x0, {[@md5sig={0x13, 0x12, "6e4689376074919eaf67fc5e70ba08ad"}, @window={0x3, 0x3, 0xb}, @sack_perm={0x4, 0x2}, @nop, @generic={0x3, 0x3, '0'}]}}}}}}}, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)={0x14, 0x26, 0x1, 0xf0bd23, 0x25dfdbfd, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x204c84c}, 0x20040000) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000280)={{{@in=@initdev, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in=@private}}, &(0x7f0000000380)=0xe8) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001900)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r5, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) openat$cgroup_devices(r5, &(0x7f0000000140)='devices.deny\x00', 0x2, 0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f00000003c0)={{{@in6=@private2, @in=@remote, 0x4e21, 0xf, 0x4e20, 0x1, 0x8, 0xe0, 0x40, 0x2b, 0x0, r4}, {0x8, 0x401, 0x2, 0x3, 0xfff, 0x800, 0x4, 0x4}, {0x2, 0x1, 0x5, 0xb}, 0x0, 0x6e6bb5, 0x1, 0x0, 0x2, 0x2}, {{@in6=@remote, 0x4d4, 0x3c}, 0x2, @in6=@dev={0xfe, 0x80, '\x00', 0x14}, 0x3504, 0x1, 0x0, 0x4, 0x6, 0x1, 0x7}}, 0xe8) r6 = socket(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000a80)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYBLOB="953a04"], 0x24}}, 0x0) recvmmsg$unix(r6, &(0x7f0000002a40)=[{{0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000640)=""/249, 0xf9}, {&(0x7f0000004480)=""/4098, 0x1002}, {&(0x7f0000000740)=""/13, 0xd}, {&(0x7f00000007c0)=""/97, 0x61}, {&(0x7f00000001c0)=""/104, 0x68}, {&(0x7f0000000300)=""/25, 0x19}, {&(0x7f0000000540)=""/130, 0x82}, {&(0x7f00000009c0)=""/133, 0x85}], 0x8}}], 0x1, 0x2080, 0x0) write(r6, &(0x7f0000000100)="1400000052004f7fb3e4bf80a000080000000000", 0x14) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x76, &(0x7f00000010c0)={@local, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0x5, 0x0, 0x0, @multicast2, {0x13, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @dev, @local, {[@timestamp_addr={0x44, 0xc, 0x0, 0x1, 0x0, [{@rand_addr, 0x4e210000}]}, @timestamp_addr={0x44, 0x2c, 0x0, 0x1, 0x0, [{@multicast1}, {}, {@dev}, {@private}, {@broadcast}]}]}}}}}}}, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff000000a1000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$SO_TIMESTAMPING(r10, 0x1, 0x25, &(0x7f00000000c0)=0x49c2, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r10, 0x8933, &(0x7f0000000280)={'vxcan1\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1e0000000400000007000000ff0f000000000100", @ANYRES32, @ANYBLOB="5a11000000000000e60000000000000080000000", @ANYRES32=r11, @ANYRES32, @ANYBLOB="0300000000000000040000000c00"/24, @ANYRES32, @ANYBLOB], 0x50) sendmsg$can_raw(r10, &(0x7f00000001c0)={&(0x7f0000000780)={0x1d, r11}, 0x10, &(0x7f0000000200)={&(0x7f0000000180)=@can={{}, 0x8, 0x2, 0x0, 0x0, "cf7175876853d309"}, 0x10}, 0x1, 0x0, 0x0, 0x20008814}, 0x4805) sendmsg$nl_route(r9, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@ipv6_newrule={0x2c, 0x20, 0x2d2c6d60ea1da725, 0x70bd26, 0x25dfdbfd, {0xa, 0x0, 0x0, 0xcd, 0xff, 0x0, 0x0, 0x1, 0x10002}, [@FIB_RULE_POLICY=@FRA_PRIORITY={0x8}, @FIB_RULE_POLICY=@FRA_SUPPRESS_PREFIXLEN={0x8, 0xe, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008081}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x4, &(0x7f00000003c0)={{r8}, 0x0, 0x0}, 0x20) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000000206010800000000000000000000000005000400000000000900020073797a31000000001400078008001240000000000500140008000000050005000a000000050001000600000011000300686173683a69702c706f7274"], 0x60}}, 0x0) 2m25.734246781s ago: executing program 1 (id=18552): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x80086301, 0x0) 2m25.503990385s ago: executing program 1 (id=18555): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x130}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c0001800600010058c6000014000000110001"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x4000, 0x0, {0x5}}, [@NFT_MSG_DELSETELEM={0x2c, 0xe, 0xa, 0x23f, 0x0, 0x0, {0xa}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x54}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 2m25.499534003s ago: executing program 1 (id=18559): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000000)="2d9e57f07b68d1054c36c03d8c98c36a3603b5864ee1f6237957fbe7d0a5cd1f30a81ab7929991a448ae9addd145c8b4c2ef07650c96f75d9bd46d7690277c14171fdfc1a219894e5fe8de7138fab8e83d277fbdb3963f0f11b361dc3d8a8dda284f51b1b1aad306a9f9435e1dfb190e25a04f3b17d555f3192a92cbb2b38e5e409de3d909d8301141"}, 0x20) r1 = socket(0x40000000015, 0x5, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$sock_int(r1, 0x1, 0x23, &(0x7f00000000c0)=0x3, 0x4) bind$inet(r1, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x40, &(0x7f0000000000)=0xfffffffa, 0x4) recvmmsg(r1, &(0x7f0000003ec0)=[{{0x0, 0x0, 0x0}, 0x8000}], 0x1, 0x100, 0x0) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000003000180000001800000004000000020000000000000c0200008935b904070493700d0000000000005f"], 0x0, 0x34}, 0x20) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000000080)={0x0, 0x1}, 0x8}, 0x90) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000180)={'veth0_to_team\x00', {0x2, 0x4e24, @broadcast}}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="1000000004000000080000000200000000000000", @ANYRESDEC=r0, @ANYBLOB="000000000000000003001000000000000000c09b", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r4, &(0x7f0000000300), &(0x7f0000000000)=""/10, 0x2}, 0x20) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x8, 0x4, 0x20ff, 0x0, r4}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000600), &(0x7f0000000640)}, 0x20) r7 = getpid() syz_open_procfs$namespace(r7, &(0x7f0000000840)='ns/cgroup\x00') r8 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000006c0)={0x0, 0xc02, 0x8}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x9, 0xe, &(0x7f0000000900)=ANY=[@ANYBLOB="18000000000000000000000000000080850000001c00000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7f0ffffff00000018600000060000000000000000800000850000004b000000186000000c0000000000000006000000950000000000000092bb253d93c2709b3bd5204200a57c5a1d2acb1f61c0fd27c9ebdb8dc0dafc659a80b98680b7988a9fa3f9525edf164714ca"], &(0x7f0000000500)='GPL\x00', 0x1, 0x66, &(0x7f0000000540)=""/102, 0x41000, 0x6a, '\x00', 0x0, @cgroup_sock=0xd, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f00000005c0)={0x4, 0x3, 0xd8, 0x8}, 0x10, 0xffffffffffffffff, r3, 0x1, &(0x7f0000000700)=[r5, r6, r8], &(0x7f0000000740)=[{0x4, 0x5, 0x9, 0x1}], 0x10, 0x7}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@cgroup, 0x5, 0x0, 0x1, &(0x7f00000000c0), 0x31, 0x0, 0x0, 0x0, 0x0}, 0x40) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c00000044000900000092000000000305000000080002"], 0x1c}, 0x1, 0x0, 0x0, 0xc1}, 0x4000040) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000), 0x4) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, r10, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000340)={'syztnl0\x00', &(0x7f00000002c0)={'ip6_vti0\x00', 0x0, 0x4, 0x9, 0x2, 0xfffffffb, 0x2, @dev={0xfe, 0x80, '\x00', 0x16}, @private0, 0x1, 0x8, 0x7, 0x7}}) sendmsg$nl_route(r10, &(0x7f0000000440)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)=@ipv6_getaddr={0x7c, 0x16, 0x1, 0x70bd28, 0x25dfdbfe, {0xa, 0x80, 0x84, 0xfd, r11}, [@IFA_LOCAL={0x14, 0x2, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}, @IFA_FLAGS={0x8, 0x8, 0x18}, @IFA_RT_PRIORITY={0x8, 0x9, 0xfbe}, @IFA_TARGET_NETNSID={0x8, 0xa, 0x2}, @IFA_TARGET_NETNSID={0x8, 0xa, 0x1}, @IFA_RT_PRIORITY={0x8, 0x9, 0x6}, @IFA_CACHEINFO={0x14, 0x6, {0x5, 0x5, 0x7, 0x80}}, @IFA_ADDRESS={0x14, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}}]}, 0x7c}, 0x1, 0x0, 0x0, 0x40}, 0x10) 2m25.14831401s ago: executing program 1 (id=18564): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000180)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x54}, {0x6}]}, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f00000000c0)=@updsa={0x138, 0x1a, 0x1, 0x0, 0x0, {{@in6=@private1, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x2b}, @in6=@private2, {}, {0x0, 0x0, 0x0, 0x400}, {0x0, 0x31638d34}, 0x0, 0x4, 0x2}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x0) syz_emit_ethernet(0x4e, &(0x7f00000000c0)={@local, @local, @val={@void}, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0004ba", 0x14, 0x6, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) syz_emit_ethernet(0x3b6, &(0x7f0000000440)={@random="61fe71b72b5f", @link_local={0x17, 0x80, 0xc2, 0x2, 0x9}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "d23396", 0x380, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x2, 0x11, 0x0, [{0x3, 0xa, "a78ce5400659808000000003004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42c60a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, "ffffffffffffff8026000400"}, {0x3, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d036397a0acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x18, 0x1d, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5c6186c0d3baa75af390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a000023f5acaa556b9f30dcab2b90aa235a670670ffc5dc49dfb58d89310000000000"}, {0x5, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c764c2d227a83b89483b1084743474677e45e65eb27a5c8d989417019f619f91394c02bcfbbb7d71138537d68f2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x21, 0x40, "fcc1876d4ec1876d4e6fa3ce2dfdb43a6f022059fe5c2d6b3d9363ed09bd9281c9fe68a3000000006f0000044e43e740e077e1d16212fb"}, {0x5, 0x14, "5e14f0e74d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1eb91a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d96967052cc7786d779b8353aac33a57d79b05613a12328f61129017fb632dbf04542188b196e213408c000000000000000000"}, {0x0, 0x5, "090000000900000036da018dff16e70b8b1400000000e18e88605aa6be1a02a326a6bce65f81ed"}]}}}}}}, 0x0) 2m24.99280669s ago: executing program 1 (id=18566): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000004f80), r1) sendmsg$NL802154_CMD_SET_CHANNEL(r1, &(0x7f0000005100)={0x0, 0x0, &(0x7f00000050c0)={&(0x7f0000000000)={0x2c, r2, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@NL802154_ATTR_PAGE={0x5}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0x2}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x48010) sendmsg$nl_xfrm(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=ANY=[@ANYBLOB="28010000160001000000000000000000ff020000000000000000000000000001ff020000000000000000000000000001000000004e2000"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac141421000000000000000000000000000000006c000000ac1414aa000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000066ff0f00000000000000000000000000000000000000000000000000000000000000000000000000002200000000000000000000003210"], 0x128}}, 0x70080) 2m22.97891785s ago: executing program 33 (id=18418): syz_extract_tcp_res(&(0x7f0000000000)={0x41424344, 0x41424344}, 0x9, 0x5) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005c40)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0xa0, 0x30, 0x9, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_bpf={0x88, 0x1, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{}, {0x35, 0x0, 0x5}, {}, {}, {}, {}, {}]}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa0}}, 0x0) syz_emit_ethernet(0x6e, &(0x7f00000000c0)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0xc, 0x4, 0x0, 0x0, 0x60, 0x3, 0x0, 0x0, 0x5, 0x0, @dev, @private=0xa010108, {[@timestamp_addr={0x44, 0x14, 0x5, 0x3, 0x0, [{@empty, 0x80000}, {@multicast1}]}, @ssrr={0x89, 0x3, 0x8a}, @generic={0x82, 0x2}, @noop]}}, {{0x1, 0x0, r0, 0x41424344, 0x0, 0x6, 0xc, 0x0, 0x0, 0x0, 0x0, {[@md5sig={0x13, 0x12, "6e4689376074919eaf67fc5e70ba08ad"}, @window={0x3, 0x3, 0xb}, @sack_perm={0x4, 0x2}, @nop, @generic={0x3, 0x3, '0'}]}}}}}}}, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)={0x14, 0x26, 0x1, 0xf0bd23, 0x25dfdbfd, {0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x204c84c}, 0x20040000) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000280)={{{@in=@initdev, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in=@private}}, &(0x7f0000000380)=0xe8) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001900)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r5, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) openat$cgroup_devices(r5, &(0x7f0000000140)='devices.deny\x00', 0x2, 0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f00000003c0)={{{@in6=@private2, @in=@remote, 0x4e21, 0xf, 0x4e20, 0x1, 0x8, 0xe0, 0x40, 0x2b, 0x0, r4}, {0x8, 0x401, 0x2, 0x3, 0xfff, 0x800, 0x4, 0x4}, {0x2, 0x1, 0x5, 0xb}, 0x0, 0x6e6bb5, 0x1, 0x0, 0x2, 0x2}, {{@in6=@remote, 0x4d4, 0x3c}, 0x2, @in6=@dev={0xfe, 0x80, '\x00', 0x14}, 0x3504, 0x1, 0x0, 0x4, 0x6, 0x1, 0x7}}, 0xe8) r6 = socket(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000a80)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYBLOB="953a04"], 0x24}}, 0x0) recvmmsg$unix(r6, &(0x7f0000002a40)=[{{0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000640)=""/249, 0xf9}, {&(0x7f0000004480)=""/4098, 0x1002}, {&(0x7f0000000740)=""/13, 0xd}, {&(0x7f00000007c0)=""/97, 0x61}, {&(0x7f00000001c0)=""/104, 0x68}, {&(0x7f0000000300)=""/25, 0x19}, {&(0x7f0000000540)=""/130, 0x82}, {&(0x7f00000009c0)=""/133, 0x85}], 0x8}}], 0x1, 0x2080, 0x0) write(r6, &(0x7f0000000100)="1400000052004f7fb3e4bf80a000080000000000", 0x14) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x76, &(0x7f00000010c0)={@local, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @redirect={0x5, 0x0, 0x0, @multicast2, {0x13, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @dev, @local, {[@timestamp_addr={0x44, 0xc, 0x0, 0x1, 0x0, [{@rand_addr, 0x4e210000}]}, @timestamp_addr={0x44, 0x2c, 0x0, 0x1, 0x0, [{@multicast1}, {}, {@dev}, {@private}, {@broadcast}]}]}}}}}}}, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff000000a1000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$SO_TIMESTAMPING(r10, 0x1, 0x25, &(0x7f00000000c0)=0x49c2, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r10, 0x8933, &(0x7f0000000280)={'vxcan1\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1e0000000400000007000000ff0f000000000100", @ANYRES32, @ANYBLOB="5a11000000000000e60000000000000080000000", @ANYRES32=r11, @ANYRES32, @ANYBLOB="0300000000000000040000000c00"/24, @ANYRES32, @ANYBLOB], 0x50) sendmsg$can_raw(r10, &(0x7f00000001c0)={&(0x7f0000000780)={0x1d, r11}, 0x10, &(0x7f0000000200)={&(0x7f0000000180)=@can={{}, 0x8, 0x2, 0x0, 0x0, "cf7175876853d309"}, 0x10}, 0x1, 0x0, 0x0, 0x20008814}, 0x4805) sendmsg$nl_route(r9, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@ipv6_newrule={0x2c, 0x20, 0x2d2c6d60ea1da725, 0x70bd26, 0x25dfdbfd, {0xa, 0x0, 0x0, 0xcd, 0xff, 0x0, 0x0, 0x1, 0x10002}, [@FIB_RULE_POLICY=@FRA_PRIORITY={0x8}, @FIB_RULE_POLICY=@FRA_SUPPRESS_PREFIXLEN={0x8, 0xe, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008081}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x4, &(0x7f00000003c0)={{r8}, 0x0, 0x0}, 0x20) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000000206010800000000000000000000000005000400000000000900020073797a31000000001400078008001240000000000500140008000000050005000a000000050001000600000011000300686173683a69702c706f7274"], 0x60}}, 0x0) 2m22.549131746s ago: executing program 1 (id=18570): r0 = epoll_create(0x3) r1 = socket$nl_rdma(0x10, 0x3, 0x14) r2 = socket$unix(0x1, 0x1, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) sendmsg(r1, &(0x7f0000001d40)={&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x3, 0x0, 0x3, 0x1, {0xa, 0x4e20, 0x4, @dev={0xfe, 0x80, '\x00', 0x30}, 0x774a}}}, 0x80, &(0x7f0000001a00)=[{&(0x7f0000000700)="3391b666ac005c63628c6fa81abede915cb0b4d1b190276a4eb2ac3601d12859d0f09e7ba20707add65d66a4cf935b4397889030d7c31174b751775c1ca3e43f40514b75f20e4239f0f23825fc5edfb565d36f9149c4807c4ff59851b4600845984120ed394a3561a82840a1f499d6fa9e8aaef1deb04a3ea5ab4e71dde58b053596bbd364e4d6aa19b77c13e1f9a43b8270a9141c9a4e90c6b42e54b650ffa1e12b65332a115f4f022ec32fde8f224def27915f41a95c2213545ff9816efc72748ba98f7906e853f1320f5ba384a3e56dfed9da2a7b5d1f4fc4f5252c5c98a9f4b81d73", 0xe4}, {&(0x7f0000000800)="4b4d114d08fe0c0ef81e8cf26f260333735a0d1dbdaa61fad9dafeed187230b07b3d70613a1e9eae1f008b96a465588a7726db62b9cac2e95d88a2376826fa83fbf8480c8a0368f3e780f3917b91953fd52f8fd55aa42139facd9ab301c74025205e99fd5bfce898e3b8349bd9a9293e8c8f619b3f7d2e830e3a2671e1bdcacf0e49c9e57747a9ec52fd5cabe73916bd837456fe277461f2730c4d046e6245aad375ccdd6078ab4a7ca0e0f514e079e50c8a653993c8e7bb3af2cf8f1d4192fc53ad7d6415dc017096ede60dadd71d7a26f454ea1f8564ac8f", 0xd9}, {&(0x7f0000000900)="2a0b5b195a10a5b58c2ba7c8e5e25644484502424e27dd98f7a15f0f199405f79fbb4da487ebbd4fe5e5340d", 0x2c}, {&(0x7f0000000940)="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", 0x1000}, {&(0x7f0000001940)="94ec13d206a5deb9971d4f5c5d2da06522232a6492970f7b0d5c818b204f402d26917f453219890164ad73d581a8d78b82d0892d96d7c6445ed07065044438f5426ddd92b4b1d00b176237e2add435f984a37e4a41aa52aa622348ac43937dfa77ba7cf71f60fa85a2477afd32dbe40a7fc26cf008b106eb0e2835767b23e2106e275624b7cd8632", 0x88}], 0x5, &(0x7f0000001a80)=[{0xa8, 0x102, 0x2, "7150fb762a6e0285d84b70f40f7250d2caf9e33b5e88f4af5cfddc91be64247023569a025bea82d462f361b9d729db048fe6187145df5ec98e8a00e750e778fd2bb987ab511fd6f849a443dbcb96b926f66925e923672842e8b21853a2916e42c73b4254eee541e2a7d173fb7c8bdbcdf4385c32acb14d0ce1833c367a0fbae49fd5f67aed71a27a6b713098a81fc3d28ef8"}, {0x68, 0x10f, 0x0, "b8302861c06bf26762c915759780b26cfbbd8c7295e34c2cfe03f338f0fb88ea014af5dc5360599a0fd2ef3b38d24d7bbaf21f09c0b7880ee03ac521a1a64a6ad1fabaaf3dde9732a5c788b971c4795284b639ec2b7ba1d0"}, {0x70, 0x116, 0xcf, "43fd7099ec6d6254bf29fb7c0a623d7027274cd18e93a43cf997bf81f14e839ab656ea34b242dea0687fcd097aa368a5b3bec8a8e3363c87e28b70fa0bc977b45081a1f786239f688c21da12099e9c08c1252a757b7b4b36c28e"}, {0x90, 0x116, 0x1, "c78def6415f12b6a97801071c26af26b47776cdf3422b97d9da8b1d655e307b3cc96dcfb61bd8aee7bc29db5a43a889f74b745dd81d8dc3d17e6b3041938d2b62ce7fa92700c545c1109b16f67c58845ffe1ca91195394ea3fd5609c593e5283d6b69dc3b9788f74fdd3519bbb0df877ea6c301cdb9df571a6"}, {0x78, 0x101, 0x100, "cecddce9162cd4383f4344a57b483091fc464adbb14c10b26fda7141a41540754169782d374e4a2b4f15d2d0ce1a378ab9ae9ffb54a3e8c3d189701a3ad737baf40f79fde96de3953cf832afb075b98572ff90756aac1aab9fcdf1de5ab25f69f3f9"}], 0x288}, 0x8041) close(r5) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_BALANCE_CTL(r6, 0x40049421, 0x2) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdc01, {0x0, 0x0, 0x0, r7, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0xfffdfff9}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r4, &(0x7f0000000140)={&(0x7f00000001c0)=@xdp={0x2c, 0xa888, r8, 0xb}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000340)='f', 0x1}], 0x1}, 0x857) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000280)={0x70000000}) r9 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1400000026000100000000000000000006"], 0x14}], 0x1}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@ipv6_getaddr={0x2c, 0x16, 0x1, 0x70bd2d, 0x25dfdbfb, {0xa, 0x10, 0xe, 0xc8}, [@IFA_ADDRESS={0x14, 0x1, @mcast1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x41) 2m7.343957131s ago: executing program 34 (id=18570): r0 = epoll_create(0x3) r1 = socket$nl_rdma(0x10, 0x3, 0x14) r2 = socket$unix(0x1, 0x1, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) sendmsg(r1, &(0x7f0000001d40)={&(0x7f0000000480)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x3, 0x0, 0x3, 0x1, {0xa, 0x4e20, 0x4, @dev={0xfe, 0x80, '\x00', 0x30}, 0x774a}}}, 0x80, &(0x7f0000001a00)=[{&(0x7f0000000700)="3391b666ac005c63628c6fa81abede915cb0b4d1b190276a4eb2ac3601d12859d0f09e7ba20707add65d66a4cf935b4397889030d7c31174b751775c1ca3e43f40514b75f20e4239f0f23825fc5edfb565d36f9149c4807c4ff59851b4600845984120ed394a3561a82840a1f499d6fa9e8aaef1deb04a3ea5ab4e71dde58b053596bbd364e4d6aa19b77c13e1f9a43b8270a9141c9a4e90c6b42e54b650ffa1e12b65332a115f4f022ec32fde8f224def27915f41a95c2213545ff9816efc72748ba98f7906e853f1320f5ba384a3e56dfed9da2a7b5d1f4fc4f5252c5c98a9f4b81d73", 0xe4}, {&(0x7f0000000800)="4b4d114d08fe0c0ef81e8cf26f260333735a0d1dbdaa61fad9dafeed187230b07b3d70613a1e9eae1f008b96a465588a7726db62b9cac2e95d88a2376826fa83fbf8480c8a0368f3e780f3917b91953fd52f8fd55aa42139facd9ab301c74025205e99fd5bfce898e3b8349bd9a9293e8c8f619b3f7d2e830e3a2671e1bdcacf0e49c9e57747a9ec52fd5cabe73916bd837456fe277461f2730c4d046e6245aad375ccdd6078ab4a7ca0e0f514e079e50c8a653993c8e7bb3af2cf8f1d4192fc53ad7d6415dc017096ede60dadd71d7a26f454ea1f8564ac8f", 0xd9}, {&(0x7f0000000900)="2a0b5b195a10a5b58c2ba7c8e5e25644484502424e27dd98f7a15f0f199405f79fbb4da487ebbd4fe5e5340d", 0x2c}, {&(0x7f0000000940)="7bf30b0c5446f0119c105985f15adcf36efde65ae5b32ac403ea24a3fd09d0f9fb5fdaabd3dcbeb2df68d77f7e209e035ea2386c6fdb465ea9a575cf461f5812dfce98c6593beae4215448ed1b9c40d8c6c466a49b12ab8da9badfe18cccb2716c632598f771d98afe112b22cdcb756e9b47d9068ca018ff09b6fd5cbfe0beeff72372e5351ec0f500e7487002bc429cd84def41c493e1dafacdbbd0a48afb9d7ddb3174b96125ed29f9035dea8bcdeb55e72223b2d5ffc38a36f2a79c210d6161d9e1c10f4b4845cf1876e54608d80ed447f80c7e234f35f5dfb95c5e4b1a57a90bdb5699be065e169271b7adfd7c9d2aa92c1cad5b05a4f07af0459b918a3e19133a0add6a3c19110636e4d6efe3238ca5046a5b5675b4417a9f7bd3e0826e53b0a7427cf9078abe84592015729479887565c3ffc50ece0e83ed7a65ec1e78dd891d958cbfa03b83d6010e793ad87585018a7212a64d38ed1f6057e63a293347ecc89a17f620c84b531bdabb67cb9f89de93d61334e23bc51dafda42cd570c1301a0647eb27c7bb8d478e7b94882f6571e1df5e02d66cc7f034f3c5783b0d3186ae22e16f323b7359eeef4ca7125af9e441c569518fb234925e29c40a3c068c5ff1061af42369b03086576b6d7477f431ea4b1cf58152ebd17c16237436583f50d5db590f2794d5c6a40accf6b981fc50c50852a0f8ae3bf8f3ebc334ddd71b20a22122838c03f37b862ac7f8d60195b5ba6365d8be8a12fee07a67bc3d5f0d163c27f9150ab5fd4c7df4c0b7c97af985f0bc09d8d9ebd16ea2c2106f7c9d9c2cd77a81126a2a7c5afe3fd93faf2151799d6c21d777cef21680b0fc637945369910edeb803b8ea4847a551b1c22e98312e47ad4d42bb23b26ff619e38c60c6ff638a67b3d2e7c2a39c9d2efae1d0b6ae4b6d0f40c51026212ea4bf06125a62c4efe57631cb128720c8f16bd8985b76987e0e7d41c181cc7115807bc17de29112c4dc14c86ea3fa347448af68b5125bb09f059d02c84140510164255674c63ea2b503d9cf904d15150687c41f79e03ed1e44f224971cd731a183be437cb0815faf78009e74ffcb3ddc3ec294801393359d52dd5e727fb4b762960fecd8deec2f23d1db581a6d0b7baa5d44eaf54d1a937c96f41a2e085a13e8e243e9726d341ba73b5a57fa3ebb55088a1d91e8295f482efea250317ca9321b6f57e8e1e380c2951a4b42d5a918ef5574de1fea95a21f96efb69342eb7f964e8c2793233308148d870c3a755cc79a80c900c8c7805e93b6426892cc1a0f5469116021b1859ae3fcbe1facfe00194fd223c1dfadf88df634e61f71c7e04ffa7811fd7a501cca36360192673618acc208def3be28c1d6c70a69bef48aaa96818e44f8a7cc0c1265c5103844f7e43fa15cae81e6dd96a1d5dc0abe306365ccd196542df47cf4df8a8b31365166c280312090d05565c7aa759174d1521e37346d9c05f2dcd0869fe336a37dd181ec2fe53db9f16d6150c31e096efed0d97d58ece7c070b9114d8c7b7957e00341c2de10b7e3af3a92f45994e0af9e0b40987ab458f45d427fcf448fea501125ec457024b8363740bef379467cf88023f15fbc07cfdfec9a5d39a2b84bcee8db9df8d8bc14434cef5cae3c9e053980d504613e363d42d96045551c8b7b30c38b0cf6866a4298eaafd0d2e7048158efe714cd022fc083202558e33f171712c1afad5684c464dd3d19ad399fdd1aa0e67682f853d3c17a7d2c743521ccffb0d4ec1306d4d05b513496c4d767071ca61444960a56528b989ef30c73b2f0d4237dcaf18be7d950bd01a78a245e577b631552797389a189285ce8239ee8d6b362b1684c4dea8bb226fc8e3df631a9d380739a5595e1300b800f68b9d53afe7e46fbf7d5aacea94564026857252a9ac06b8c771029048f9466371bfb2454090ce13e130b1bd656e32b88dd560304d1e2c7be93a5a10ce2cac823102f9b129d284840aa810cdb566504bad1d777cd1f5f4fe916d3f80cc19e583cbf4c90b9d3d96f817b13cfb636c04ad4c199a49d4b7a1d910507b628a1d99a71dc8361957c2ecc9bb5803dac67a4ae930acafaf2c606ddb6148b1cecd3509c60504cb54e2d5416db5bc34a82d49cc23334acd2c8e81f6853a106225b3de1cb82e62c5fbb53c52c430244af4a28765d783ceb9a79f7e6f3a545ab31766ffb4e3751c4546a84690dca5b7b164582807ce675aa0a55e34072674c02d2df68c0aadec89a505c06ca1bd57b8e85474dde8d66ed0f5bbb17092c875f5da27c54fd63687f5d26afb5dc06cce349a05a251064cbace3a599f57dee435c4a3f79725ce5f86963f5f63b755099307fc5963a9ccc359460f2b92c0c17191a17d9e9c316e5cddc2f53e346773f433ad9a208c4b54d82dfb3a6359a73677ad2139e740f2b1d9d4480de2487ab9b337d5a77dae0e800eb20c00ca80264aee09d153c456c378138f0447db34e94efa9540d63d8f1269d8bccfe79535356e4fbefbd0170b02766327899c95e3418e2e350979c9cadc6dc7b53b903643cbca51367cf56cf1aaba682c1101ab1811aa893429c3005eb4d2857d48b642175255f745d43deea06fcfd995abadbc755a4155e7a42e7a32aba0531939ff15778bcde506b75d4e7d2d67d707350b25c8f3a76e778eb457bdd11ff1af2a3bb8e1b18e1594656c351d35d6d5cff3bcc8c5d582f469f9a24bb3b995964365fa5afd9cbf8eaeed6610591caac24ef69abe13763080efec4d6832f27295e14f159fea3a1f3b66353ee21ad3afc598df407af328bb17a75edf9e5573ab3faf35795a0074f5a2ed91e575aa5a91b111acbe2a9d05ab5497199f092aa70f2531068119d029e8df67d4c1a357749535cd85db85d2cc2e8601fbf7338410afc27cc1d2714d841a9e7fb16b04e663848a8feb55e7f8309586a93957bbe63b94ea14dcc12e0b85ec0cd2e6f89035687ad88a499d981859c00ab4797d6b386c93032463d73c3d6cdf7c664ac9e1594e63ceb6de35b551ca4ffe0a51abffd5e205eaa5c1dcaba3372efbc92aa61b5771b4950ef470e4ff728e34cd46cac55d25033e306f991bfcccfbf7b5962798d8bd668220e86bbac69e5916469741dbee41f2189244b14b2ea53ea676c91413b80929f98bb4b910fcaaa6ee6f013be034211f6994d239dfd1d20df0dc4a5676c323d331d5ef94dc12567e88aaeaea491f761deaf820d850ea5e773df514b73b3b9803ece82644b580441d1b8d02f54eefab4dc23107e9352c0943dca83be2382635e9840b89a41beb07385274272f1a12677237978fb6d50e421e9e58fdfeae7f5f4f24ef5cb7f5185a7f824da92487a29f4036a872ded3ce87a97e068491886daed0ba8cc1f9bb7ecb9b1485df1393bec715190a461479801c1b867affbd9daa904a32fca66cf5bc4ec162248c2a04cf29f732dec43687365469d3090a356a352dfe99eadd2b0e753e22e39be311594478117fbc1ffee245948460cda4e5be095518fa4e9e697a3fd614b5342b21d1e4d7fbd823c66d9bc28ac03b54dc3658160bf6ef5d509afeb554c776ea7e96092f59ba1697d04a9178d1e42d7511fb4365ca386be192dfebc71adf6629427de92ead2ee53cfdc52ff0a0808451cbe50f219e71e6a17281dd5de721eb3a87d938abd27598b984e4a590e0aa26e35a9dd974a31984e356b953dbb997b5b7f70728558e84802a7075881e0039e7570e4c7bfc38d40ebc83f7b19ffd0dab79fdb816981d714c7c5e32463f986a1ac6f1e4faf74352a5045f2e0da915a3c4c0d2bba4d83f7b5f0ebdd5777aa95a93491c1d606d4902817b7b5d4fe1f75f1e4d86766dd7c83023fdc11a697b54ba882d65c56ba8a847c75ef1d450ac95928fb179a4bba10e40bebb2b490cb26dd1dde0da467843986d09cc93aa6c0d50bf8d811ea1947e1a4a265ef66c97cab04b7d0d11176ec695dbdafe028a1030d2e72bc4b6ecea8458e3cbaf93dd0d9005c056303e5635f357a7b999f60ec1da968ef0858cac1a31410705b8da5253af6bd8fd3591fd9d5c7e044b874e61f6fb0e695410cea3bd4f928e11a4bba7a4b252f68cca6e3242c1597b6da76f25f5cd3c1cc6e94c5c3b274afa0615a5b824bae3d9b6e65c35df4b82a17dd621791d4d78ebde41f50bf6616a7aea35ba353c50c7b4fbc2be803a0428636abbc6b2edd1f92ba73c6da4c0ffae80aaf45a4e2bd68a7665a3df0ee31ba783bce4f67d98341669406841f98432bec1510d726a546cc81c0d8f6f164e4beb403c652720055a73d0f6690bdf16a23aca4bce031be1c17724c898b688d7c17cb434048a05e1d5ec93e7611f6b5be6d81597fafde4d0a5b432b4cfaa75f53f9d533169190d1de4a4baf581510f3a0dee2fca7f0791d04c9ad2e2ccbce5c2252730645653d807a877e1c27bcb9a2df617949b1bd1dfdac8e03bde660c11098788fe6fa383a76ebf92b920cf475860f0ef3eb76a6c9e15964dc06d91ce5c7eda98309b789682160cdbce143dbf95e1b1c11a5b01bac60afef89ece39dece809a7bee5d40ef0e11f6e77d6bf2c9e7d5c988a88dda304fd1ee0be182b689e8a1f8d4bc3d2eec0bee28e435ef635cf5a7008df4001b163dbc319e302f324c3cf0c78464c5b13c80136a0f8cdcdf4a14ef8dc74a4ff93a9f9aafb5061913876b4d60a4bc46c62b52fcd82095724e0e235f9ff1a0b1f61ef380369074c14c268a13032d9f7388ce4d91663744e32e736616047f5b0e5cb325bf8ab5829bcfc8ca53d37af8fb5e2a739f210c2853006e5063dd704e8f5bc2eba3b7f4f4efd3933961c3d2f1939da6e20facaf0b009553f696616b54ae028191387380e8e95e267c4cb897a8d8ad782e78ac243d46fa3de98dbfe19ee976caea3281e4d904a53b5df15fb50ca2aa63b1c218674cae9ddd9b1e13288c9319e794c064ed7448da250ba82f44f64ffd00261c0d0ad2cacf13c410ebf2dad1e3e710c6d1029a1b4c983b4129a20aca2195348b341c7d71253e439d5b416e9980e779d0db1f0b4e9a5f851817f1310515ac287194db5d4386b8476afbe04fb0a0155629864e8638525cf23f0722ae84a873b62796a0d1dd0345abbdd2c57fade6f323ba598245d35244c2b20245bcc1367db980325baceca6afde6c8d9ec5c6ff7a0b351645d4c109894511e091a4521a60a4c18f4bdb550e3eee2039d869ec90827788c4df64dbab0b493533b59cbdc7109f76dd2e75693b6e60893ae76228df3f497b137f070a02e0000eb5f046f43d4fd192a963a655cf3f685308f4512874893d7aa25446b3bbaee623a711983017c15653521d0e448f3385fc986dfc60bc9b16bc69ce7863992b919ea81c8e526865fd1ca2a016d8dbe179ed0344fe0c85e89f3283d2ebb650f4bfdd184a9faf898ef86fb8588afd1881354ea0bf7e0c36647d167d755d13cd6f593f3eb71e7d9cac037f0dbc3ee9944704f3ccfb23c99be530e8c6c6d003293f367242368b30e966068ec9e65f241e663350794c94b5fbd61768363974bf7311fc3e114ae48cf15176e455acb822d02de9e50381439b710de0db52040d287c9952f24dd94bf2bade14ddbf09c2924f11224db58fc4f971edcf2a2b5fca453105c2340433e3c15253de6a883cd208785244de7e0380a2b728f289879e527ae809a12b25fa88efce5799ea2aae55dc07b144488efbc09bb2a9f9cad33a076d6a0c7f3e934146a9d9eb14c3e1a71573a182b851804605041c53987f007ba4bb1338d2d9a30fe7a96f37aab89a", 0x1000}, {&(0x7f0000001940)="94ec13d206a5deb9971d4f5c5d2da06522232a6492970f7b0d5c818b204f402d26917f453219890164ad73d581a8d78b82d0892d96d7c6445ed07065044438f5426ddd92b4b1d00b176237e2add435f984a37e4a41aa52aa622348ac43937dfa77ba7cf71f60fa85a2477afd32dbe40a7fc26cf008b106eb0e2835767b23e2106e275624b7cd8632", 0x88}], 0x5, &(0x7f0000001a80)=[{0xa8, 0x102, 0x2, "7150fb762a6e0285d84b70f40f7250d2caf9e33b5e88f4af5cfddc91be64247023569a025bea82d462f361b9d729db048fe6187145df5ec98e8a00e750e778fd2bb987ab511fd6f849a443dbcb96b926f66925e923672842e8b21853a2916e42c73b4254eee541e2a7d173fb7c8bdbcdf4385c32acb14d0ce1833c367a0fbae49fd5f67aed71a27a6b713098a81fc3d28ef8"}, {0x68, 0x10f, 0x0, "b8302861c06bf26762c915759780b26cfbbd8c7295e34c2cfe03f338f0fb88ea014af5dc5360599a0fd2ef3b38d24d7bbaf21f09c0b7880ee03ac521a1a64a6ad1fabaaf3dde9732a5c788b971c4795284b639ec2b7ba1d0"}, {0x70, 0x116, 0xcf, "43fd7099ec6d6254bf29fb7c0a623d7027274cd18e93a43cf997bf81f14e839ab656ea34b242dea0687fcd097aa368a5b3bec8a8e3363c87e28b70fa0bc977b45081a1f786239f688c21da12099e9c08c1252a757b7b4b36c28e"}, {0x90, 0x116, 0x1, "c78def6415f12b6a97801071c26af26b47776cdf3422b97d9da8b1d655e307b3cc96dcfb61bd8aee7bc29db5a43a889f74b745dd81d8dc3d17e6b3041938d2b62ce7fa92700c545c1109b16f67c58845ffe1ca91195394ea3fd5609c593e5283d6b69dc3b9788f74fdd3519bbb0df877ea6c301cdb9df571a6"}, {0x78, 0x101, 0x100, "cecddce9162cd4383f4344a57b483091fc464adbb14c10b26fda7141a41540754169782d374e4a2b4f15d2d0ce1a378ab9ae9ffb54a3e8c3d189701a3ad737baf40f79fde96de3953cf832afb075b98572ff90756aac1aab9fcdf1de5ab25f69f3f9"}], 0x288}, 0x8041) close(r5) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_BALANCE_CTL(r6, 0x40049421, 0x2) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdc01, {0x0, 0x0, 0x0, r7, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0xfffdfff9}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r4, &(0x7f0000000140)={&(0x7f00000001c0)=@xdp={0x2c, 0xa888, r8, 0xb}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000340)='f', 0x1}], 0x1}, 0x857) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000280)={0x70000000}) r9 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1400000026000100000000000000000006"], 0x14}], 0x1}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@ipv6_getaddr={0x2c, 0x16, 0x1, 0x70bd2d, 0x25dfdbfb, {0xa, 0x10, 0xe, 0xc8}, [@IFA_ADDRESS={0x14, 0x1, @mcast1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x41) 2.938336087s ago: executing program 6 (id=19944): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x5c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x7, 0x1}, {0x4}, {0xe, 0xd}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x401}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}, @TCA_INGRESS_BLOCK={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x90}, 0x4000c00) socket$unix(0x1, 0x1, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x40, 0x0) close(r4) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r4, 0x8914, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x5, 0x7, 0xb3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x58, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r7, {0x10}, {}, {0xe, 0x1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x200000, 0xe, 0x7, 0x7, 0x9, 0x40, 0xffffffff, 0x2}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4040098}, 0x4000) r8 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r8, &(0x7f0000000380)="bad330fbbcb554491f88612250e1d006c0cabddc896a", 0x16, 0x40, &(0x7f00000001c0)={0x11, 0x1a, r3, 0x1, 0xd8, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14) 2.502056972s ago: executing program 7 (id=19952): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=ANY=[@ANYBLOB="f800001016000100000000000000000000000000000000000000000000000000ff0100000000000000000000000000010000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fe8800000000000000000000000000010000000033000000ff"], 0xf8}}, 0x810) r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000001a0001ffffffffffffa888000a80"], 0x1c}}, 0x0) 2.297400872s ago: executing program 7 (id=19955): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r1) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="34010000", @ANYRES16=r2, @ANYBLOB="01000000000000000000010000000400048008000200010000000800010000000000080108805400078008000500000000000800050000000000080005009d2c690d0800050000000000080005000000000008000500000000000800050000ebffff070005"], 0x134}}, 0x4048014) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'macsec0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000010010000000ffdbdf2530000000", @ANYRES32=r4, @ANYBLOB="20000000000000001c0012800b0001006d616373656300000c00028005000f"], 0x3c}}, 0x0) 2.101400025s ago: executing program 2 (id=19958): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f0000001940)=ANY=[@ANYBLOB="b4000000000b00007910000000000000c310000401000000950074000000000031fb0d3a42319fa204399d17d34e075fdcda533ab1aa71ab1d764152e6cb25dadc7ded5dbe11b62ac5ea9fca11027d29066927603deb92de3141e8ed7ac5b8902070213cdfdc5d6c4890cdeb50347c32060581172b94c6ba22a2b58eb6cbad46ed6e7965a2ba103b0b36f790bb41931f9a3d4dd127c1b4e49f7468f5e623950c4f67581c92ef9e7e8ece17d566c93a114d68c577d694b9844e0d9e306404cfc3bfbead9e1b96c6a6cb639bca6d"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r1, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, &(0x7f0000002800)=[{&(0x7f0000000080)="b107c09a5026de51ce3e8640af1a8b2d1e67f16405c3458fe41dc04ef234718d683aa3a998fa99431a9c7c6d7505b0cec633f763303666604cbb6aa4c0f995a9454dc81b179dc93b0162ac3d1a8a1b72ce18d493594b3b24bad58801007a7b1d8ab9b50c5dbef8311b2502a124913259abadf354fea31d1ce0fed5c7ac577690164d1a72748723d3eb92e3e73e3a2b7cdfaa442f9e9f8e1a711d5b988215f0f80a2eeade5a078256a41973b0b029278c20a2818628dc256a0742896c3def6e825fdf64fd33d5f584ca908c272dc04d0693decdad028feec7f76221378c185027e8695c9b07506ed46d4f8bb90883c08e85e058ece62cd797d2c01e6285c77430eec435ac9df6256e121859d8aea52da84820e16210d107ff8a9dd0694681649d44fbb937398edecbe06096df2e443af0c3f0950301e1128727ba88a063e88f90206dd5f099a1c333114b97e0e1b55106a9755e208651a8f281173d1ed31e62433a766a28c8496f00ad108672a1f6079c10588a7ffb658dd61a6efa4bfa379945659c0ebbeca3f56215413802975d89f0c0131c71160300851cddd8b367738f069955b2d3fcdeba878b6bec8240227ddb9fac4706eb62bc6540a91014cce6987ee604c5f398ae4fef3f501ebad02ba122d7769b603eaddb5f9b101f1b42a931ac50c27feb4b0c703d1b3f9e88eb569db5082957fe", 0x1f4}, {&(0x7f0000000740)="fae0835ee82c20abb86f7c287ffb04a52a0b2339a4efc8216bada6fb7f4385ead471969bdf9b82994c10898db8b0fd9a6068b87f4547eff53d6cb7b37534e44d27c79042f58263d71ee0e5b2cb31215ded6df9c76d150aa52a4eecb94fe48e79205c96a0aab13eaa4681860576d2e32f686f8f4ae905e573b200d669e65d56bd8a4703cbea6b8c610ec158fe5f8683f737eea59d4fa640cf2b684c00"/169, 0xa9}, {&(0x7f00000015c0)="6b75b597d05d969a191023", 0xb}, {&(0x7f0000000e00)="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", 0x2ef}], 0x4, &(0x7f0000000600)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x10}, @local}}}, @ip_retopts={{0x1c, 0x0, 0x7, {[@noop, @ra={0x94, 0x4}, @timestamp_addr={0x44, 0x4, 0xf7, 0x1, 0x4}]}}}], 0x40}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) writev(r0, &(0x7f0000000300), 0x0) 1.968370622s ago: executing program 2 (id=19960): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000580), r0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$sock_buf(r2, 0x1, 0x13, 0x0, &(0x7f0000000100)) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_x25_SIOCADDRT(r3, 0x890b, &(0x7f0000008e80)={@remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x3}, 0xb, 'sit0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@deltaction={0x14, 0x31, 0x200, 0x70bd2d, 0x25dfdbfd}, 0x14}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x4}}}, @IFLA_IFNAME={0x14, 0x3, 'bridge0\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0xc845}, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) syz_emit_ethernet(0x100e, &(0x7f00000006c0)={@random="8dd9e0495d49", @broadcast, @void, {@generic={0x8884, "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"}}}, &(0x7f0000001700)={0x1, 0x1, [0x548, 0x390, 0xa48, 0x727]}) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000000)={{0x84, @broadcast, 0x4e24, 0x3, 'fo\x00', 0x15, 0x3240, 0x3a}, {@empty, 0x4e23, 0x4, 0xc3, 0x12d5c, 0x12d5c}}, 0x44) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto]}}, 0x0, 0x26}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xf, &(0x7f00000002c0)=@ringbuf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x3}, 0x90) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000600)={0x20, r1, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x20}}, 0x4040084) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="2c0000002100010000000000fcdbdf2502000000000000000000000006001d"], 0x2c}}, 0x0) 1.93367327s ago: executing program 3 (id=19961): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000150001032dbd7000000402000c1600000800040001"], 0x1c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) 1.881786982s ago: executing program 7 (id=19962): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002900)={0x1c, 0x2a, 0x1, 0x0, 0x25dfdbfc, {0x2, 0x0, 0x2c00}, [@typed={0x8, 0x1, 0x0, 0x0, @str=')$-\x00'}]}, 0x1c}, 0x1, 0x3000000, 0x2100, 0x800}, 0x8080) 1.794098039s ago: executing program 7 (id=19964): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$kcm(0x11, 0x3, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6364, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xffe0}, {0xfff2, 0xb}, {0xe, 0x1}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x4, 0x10, 0x6, 0x8, 0xfbee}, 0x1, 0x1, 0x3, 0x3, 0xe, 0x1, 0xd, 0x5, 0x8, 0x6, {0xfffff800, 0x8, 0xfffffffc, 0x0, 0xffffffff, 0x5}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x400c8a4}, 0x4890) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r3, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r8, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000200)="27030200000214000e00002f74214b34586d47423cddcb0000008000008276000000000000006e81a3", 0x29}], 0x1}, 0x5) 1.793729098s ago: executing program 6 (id=19965): r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000080)="1400000052004f030e789e7ee2ce2fa4ff612d27", 0x14) recvmmsg(r0, &(0x7f0000005c80)=[{{0x0, 0x41, 0x0, 0x0, 0x0, 0x4000}}], 0x344, 0x10122, 0x0) (fail_nth: 8) 1.749439148s ago: executing program 2 (id=19966): r0 = socket$kcm(0x11, 0x2, 0x300) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x0, 0x8000000}, {0x10000002, 0xfffffffc, 0x5, 0xb}]}, 0x94) (async) r1 = socket$kcm(0x11, 0x200000000000002, 0x300) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000c40)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) (async) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0x12, &(0x7f0000000340)=r4, 0x4) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r6) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r8 = socket(0x400000000010, 0x3, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x8c, 0x2c, 0xd27, 0x70bd28, 0x25dfdc00, {0x0, 0x0, 0x0, r10, {0x0, 0x4}, {}, {0xfff2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x2, 0x2, 0xffffffffffffffff, 0x100000a, 0x8}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x2}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) recvmsg$unix(r5, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0x12, &(0x7f00000008c0)=r11, 0x4) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0xfffffd83) (async) r12 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r12, 0x5, 0xd50, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x700}, 0x48) (async) socket$kcm(0x29, 0x0, 0x0) 1.74865168s ago: executing program 3 (id=19967): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x8e40, 0x0) close(r1) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r7, {0x4}, {0xffff}, {0x2, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x9, 0x0, 0xf, 0x10, 0x2, 0x6, 0x2, 0x8, 0x2, 0x0, 0x1, 0x8, 0x1, 0x10, 0x4], 0x3, [0xc, 0x101, 0x7fff, 0x2002, 0x1, 0x4, 0x6, 0xd03, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x7, 0x2a, 0x401, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x4]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x810}, 0x0) r8 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r8, 0x0, 0x0, 0x48040, &(0x7f00000001c0)={0x11, 0x7, r7, 0x1, 0x6, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r9) sendmsg$TIPC_CMD_ENABLE_BEARER(r9, &(0x7f00000002c0)={0x0, 0xeaff, &(0x7f0000000340)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x40000) 1.152049274s ago: executing program 2 (id=19968): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$can_raw(0x1d, 0x3, 0x1) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'bond_slave_1\x00', 0x0}) setsockopt$CAN_RAW_ERR_FILTER(r1, 0x65, 0x2, &(0x7f0000000040)=0x8, 0x4) bind$can_raw(r1, &(0x7f0000000000)={0x1d, r3}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a300000000040000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a300000dac5080005400000000204001280140000001000010000000000000000000084000a"], 0x88}}, 0x28010804) (async) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r4, &(0x7f0000000040)={0x1f, 0x0, @any, 0x4}, 0xe) (async, rerun: 32) connect$bt_l2cap(r4, &(0x7f0000001280)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7f7}, 0xe) (async, rerun: 32) setsockopt$bt_BT_SECURITY(r4, 0x112, 0x4, &(0x7f0000000100)={0x2, 0x2}, 0x2) (async) socket$pppl2tp(0x18, 0x1, 0x1) 1.149802996s ago: executing program 3 (id=19969): r0 = socket$pppl2tp(0x18, 0x1, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x25dddbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}, {0xffff, 0xffff}, {0x1, 0xd}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=@newtfilter={0x24, 0x2c, 0x10, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {}, {0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x220008e8}, 0x804) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x3, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x7fff}}]}, 0x38}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x1, 0x3}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000440)={'vxcan0\x00', 0x0}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xffffffff, "2e86c197b6a2338a08f0cfb45f454b17"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x50}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000480)=@newqdisc={0x88, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x0, 0xe}, {0x0, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x58, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}, [@TCA_NETEM_CORR={0x10, 0x1, {0x18312785, 0x3, 0x7fffffff}}, @TCA_NETEM_SLOT={0x2c, 0xc, {0x6, 0xb2, 0x6, 0xe83, 0xfffffffffffffffe, 0xa}}]}}}]}, 0x88}, 0x1, 0x0, 0x0, 0x40088c1}, 0x20004080) r11 = socket(0x400000000010, 0x3, 0x0) r12 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r13, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@TCA_EGRESS_BLOCK={0x0, 0xe, 0x7fff}]}, 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=@newtfilter={0x290, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r13, {0x3, 0xfff1}, {}, {0x8, 0xf}}, [@filter_kind_options=@f_route={{0xa}, {0x260, 0x2, [@TCA_ROUTE4_FROM={0x8, 0x3, 0xb4}, @TCA_ROUTE4_TO={0x8, 0x2, 0x42}, @TCA_ROUTE4_ACT={0x234, 0x6, [@m_gact={0x88, 0x6, 0x0, 0x0, {{0x9}, {0x40, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x5, 0x5, 0x6, 0x800}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0xa7e}}, @TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x7, 0x3000000d, 0x7f, 0x2c37}}]}, {0x20, 0x6, "9b734f643920c5de7c907d77e5ee4f92824526884f22b1a2e97792c5"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1}}}}, @m_simple={0x124, 0x1b, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x5, 0x3, '\x00'}, @TCA_DEF_DATA={0xa, 0x3, 'vcan0\x00'}, @TCA_DEF_DATA={0xc, 0x3, 'skbprio\x00'}]}, {0xd7, 0x6, "e9105e3a830b1354ad2ba51e3963e5650faf2b47696a800bebd9a55e11f42b8f005d9380a9ad6ac14bcb8bd5de1b5f25fbe54f7ac834862e4f159c95de963c5acb6d2035c08834e24d4467106dcb1ae1be35c461f89122a43010e59cd475cb227e425646ddfa0cd9ebc6b9034620b51ed760b1ea95363a9028467fe8bedc0ac55277ffb0fd6ab6c732ec2527c9a2e31ecbb96e24f52ea6a6f2f2cd7a550d88e1c740231119859495b00711dfbeea32443c2be3f17f154f53d22a2fbc6c9aac3812a142d8632416d9b29d0caac8be66d0f32736"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_ctinfo={0x84, 0x1f, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0xfff}]}, {0x4d, 0x6, "c2fbd7518b6942e3ba74f2f42bb5433863ac0cc7e2338c31656a27dcb07a859d992567e774e5eada3530d939a06453da80b7f8c99dceb85b0f8c9b2a4344f534fc48b0bbd6ece8d365"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}, @TCA_ROUTE4_TO={0x8, 0x2, 0xaf}, @TCA_ROUTE4_CLASSID={0x8, 0x1, {0xffe0}}, @TCA_ROUTE4_IIF={0x8, 0x4, r3}]}}]}, 0x290}, 0x1, 0x0, 0x0, 0x20000010}, 0x804) r14 = socket$nl_route(0x10, 0x3, 0x0) r15 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r15, 0x8933, &(0x7f0000000180)={'vxcan1\x00', 0x0}) sendmsg$nl_route_sched(r14, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x74, r16, {0xb, 0xfff2}, {0xfff1, 0x9}, {0x2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x2004012}, 0x20000050) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000000b80)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000b40)={&(0x7f0000001700)=ANY=[@ANYBLOB="ac060000", @ANYRES16=0x0, @ANYBLOB="080028bd7000fedbdf250300000008000100", @ANYRES32=0x0, @ANYBLOB="7400028038000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000500030003000000080004003108000038000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000500030003000000080004000a00000008000100", @ANYRES32=0x0, @ANYBLOB="a401028038000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004000700000038000100240001006c625f73746174735f726566726573685f696e74657276616c00000000000000050003000300000008000400d390000040000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b0000000800040003000000080007000000000038000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000500030003000000080004000101000040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000300000008000600", @ANYRES32=0x0, @ANYBLOB="3c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="3c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="7c00028040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000200000008000600", @ANYRES32=0x0, @ANYBLOB="3800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="44000280400001002c0001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000400000008000600", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="bc00028038000100240001006e6f746966795f70656572735f636f756e740000000000000000000000000000050003000300000008000400d5d7000040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="080007000000000040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b00000008000400ff01000008000600", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="68010280400001002400010071756575655f6964000000000000000000000000000000000000000000000000050003000300000008000400c509000008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006e6f746966795f70656572735f636f756e740000000000000000000000000000050003000300000008000400370000003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="3800010024000100616374697665706f7274000000000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="3c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r3, @ANYBLOB="3c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r5, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="6401028040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRESHEX=r3, @ANYBLOB="08000700000000003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r10, @ANYBLOB="3800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=r13, @ANYBLOB="38000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000500030003000000080004000800000038000100240001006d636173745f72656a6f696e5f696e74657276616c0000000000000000000000050003000300000008000400050000003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r16, @ANYBLOB], 0x6ac}, 0x1, 0x0, 0x0, 0x400c080}, 0x30004010) r17 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r17, {0x2, 0x0, @dev}, 0x2}}, 0x2e) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond_slave_1\x00'}) 1.085229643s ago: executing program 7 (id=19970): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPSET_CMD_PROTOCOL(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000000406010100000000000000000a000009"], 0x14}, 0x1, 0x0, 0x0, 0x810}, 0x80) socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x6}, 0x4) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xb007}, 0x4) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000001cc0)={'team0\x00', 0x0}) sendmmsg$inet(r1, &(0x7f0000001ec0)=[{{&(0x7f0000000040)={0x2, 0x4e22, @multicast2}, 0x10, &(0x7f00000005c0)=[{&(0x7f00000002c0)="9e8987a9f8dffa3f006181756988a2287fa565041f63f723e04a66976aa45d8df53080a60272a7b6e95a3252e8b3b7e9b122a327aec77fb72f869bd9e44c9f58763129b72999a4db02750b38f7e3b3dad571a83983de0c85d8117f5277e971ecc9a866bce0b1d0ee06c0bdcf6969798475bd5b405fb3d2ef5f88d7b012c617bf29178e016793a423a1a514f48bbf5979cadaedbe4e63203765a3e531673de753beef131bc9b6ac044b2766a99b1c69e3c5fef7c1929579227d4d9887f289b5ec34bb2bf66b93af8d0c", 0xc9}, {&(0x7f00000003c0)="c4b27d9ab255148219d9802983748c5738f26644ef6d4538f8ca03ac11fe294ab4267aad6ea129794f318fcdc210f3bdc0500ac9ddd77a4b1b0691f5d17b2538eb9a46d81778e3ac6c35ed60b64218f0892da2150ca32479", 0x58}, {&(0x7f0000000440)="fbb6d9700a29faecdeaa78cfe72c2bbae30a260003cefb1ab5d773e91c68ea117292068b84e06c30d86b049dd6a7709148982ad66ed146c5ab730aeb3b133bee30765fb56ee926f52adc1f405cd94e3903db82c210f4cabd2a6faf5ebc310c0eb8e7370545a46f364000162cf77408031cf682930f472177460c3d54834b12978e94776813dfd24caca17649d056a4f6b64f540b72332139b0a058e4fd65876c07ad7b", 0xa3}, {&(0x7f0000000500)="05aefe177b85111b8d1b88d4d7002c630147801883d5245ef43ec25bafad9c07d31fa461ddc4788da15cbf17115334ec7b6a2ff5d2656d9b5ed60a538ca3f67d17aee0bec7aaa6f0cca9aeb564606fe267bc7652ab860b2b33791b42771cfe77bf202acd3812061496b9850c454ad5c412787ec8dee5421d14917f29914bff0303418e0694da868e9b1c2cdffe3922d87b36cf61f3ad95b6a1b092aa", 0x9c}], 0x4}}, {{&(0x7f0000000600)={0x2, 0x4e21, @multicast2}, 0x10, &(0x7f0000001c00)=[{&(0x7f0000000640)="f71f1346b4eb5a5dc542cf8104225d0ed4abc3abb46f4c12d70d84b0c33d3e8311ea9143c7ac7229ce559019e4059101bb8bf2fafc4cb7b577d8615797709f13cae0fd50be165507332a822792fd760c2474dbada5af6efc9843b03776cc8f842c3e2cb3c5d715a57deda5bfb0bd2de9cb8bebbc7b115b054123887f2ca46541e115d9ef26de9375f88d2e39a6a7e77dbbee51555e2f2ded93f80214815357ec1495803203e29beabe153a9f5ab6fce7bc252260016fcc662e9fe4ac5cfc90cfcf54f0dd03109813700bd01842ca833590fefb3fbfe61ff1583473ace2", 0xdd}, {&(0x7f0000000740)="4f0b500ecc1e6580e0f58c1f90eea8043625bc1f534d47459f1acaa301", 0x1d}, {&(0x7f0000000780)="0a296d9a897be87552b259420715a9ebe7211aff255e632944f26e89640f495e11a2a7de618ce3362e40f795225644ca08f257c21c32b00f0075c622617c2f67708cd1b8a67056a2f18b1350880ed05481b306f37a9b3595640d78bc2a6e7f381d183e99d7145fccb9c94fbeef5e0395c9d0ae63f4c5ed429df2f5a8dba73fc1f812ac6202874faf888d36200dc01bcd55c0e7269bc855dd464f3125f0f5fcf2f0ee0f8b06ff8711eaf87f6f1c2ecf8452b09b2e311b5d21fcd9a355282e8dfc131f", 0xc2}, {&(0x7f0000000880)="1af2a18b8d94236eb8ac3d6bd727108265ee5c8bfdac2dd759dcd66a7d79656eb4b9855ef39349b735e03314cc23feee8be61027d0c235ce46530974198c7996a5f9cd50ca4e44be43def1c181e88ec457b3fa7b674912c7135bf3c0ac33927ded3c486b6106ff098ea0945d15a5e86d6820bdbcbcdb14c202547dede16e8d917d265ea4b61676b50c96cfa8680140fdf74865ae9096721f02ebc77494fabaded4f8fbd8348e7ddf877c54e4e0c4f308242737da3d7a12fc2ee115805b13760f66efbc972d0bd9ad6da8fb4deb0da9afba3cc687eae5ce90acd3e5ae5310a53cf0", 0xe1}, {&(0x7f0000000980)="c876c422660221", 0x7}, {&(0x7f00000009c0)="b43b74fb20559a30f63cacb2fcc27f64600646c1da0ea199541356185988fedca17b3c2034c5130cc0c7d4f98e5245c64eef15dbe7eaba3753d5bfd797c5bbd2d7949ca14c7d6107149d0f22f4c994ff26e08a75a42561701ceccb2d0f2e96798ee9620c286c3576aa404e13ad45b15fec9e5d6a23054c7f8cdd4b49ecf2bbebf2799dde947ddf0ee95399abefa0ad237207d2e900b348dc6c036b", 0x9b}, {&(0x7f0000000a80)="a901c1dbd8c2c5786f5918dc8acea1f815028abbe56d9b1807d29d88c9edd2e98f941f1842fe3ced46bdf38c28e58df78bbf257fec5a5577d2d39d6941f9ea07d71d2fa9c075ef315d506c56ddd519881fa4b319055d2d529b3a6ddc61015498b4478b40718634958085a032a29f1f39a56473c99a41b4eaa45920543f417ccc71e35825f4895ecc044975fb5218116b3561df29cbeba8c1fb341980e2a24f4f396b", 0xa2}, {&(0x7f0000000b40)="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", 0x1000}, {&(0x7f0000001b40)="34ff5ab22e03aad0af959daf6315f1061534c78260ff276b4c1039efca16499bf5d62148084956fa8dfffbe359589a759b20af20955e9df840f1d86d708db95505fd4f64d6a5b5566de45910cf52ebc23a74180936d72a1c7414c53da48f44645efe50082851bf14a960dd59b3817041ae602b056c0864fb41b05d73c6ce761817e8", 0x82}], 0x9, &(0x7f0000001d00)=[@ip_retopts={{0x2c, 0x0, 0x7, {[@noop, @rr={0x7, 0xf, 0x6b, [@private=0xa010101, @loopback, @rand_addr=0x64010102]}, @timestamp={0x44, 0xc, 0xa2, 0x0, 0xe, [0x56e3, 0x364000]}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @rand_addr=0x64010101, @local}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xd}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x800}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x9a}}, @ip_retopts={{0x38, 0x0, 0x7, {[@ssrr={0x89, 0x17, 0xa4, [@broadcast, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, @rand_addr=0x64010100]}, @rr={0x7, 0xf, 0xbe, [@empty, @multicast1, @broadcast]}]}}}], 0xd0}}, {{&(0x7f0000001e00)={0x2, 0x4e22, @rand_addr=0x64010102}, 0x10, &(0x7f0000001e80)=[{&(0x7f0000001e40)}], 0x1}}], 0x3, 0x4014) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100626f6e640000000018000280140008800800030001"], 0x48}}, 0x0) pipe(&(0x7f0000000140)) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x7fff}, &(0x7f0000000140)=0x8) sendmmsg$inet(r5, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x9, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0xb0260000) mmap(&(0x7f0000867000/0x2000)=nil, 0x2000, 0x0, 0x11, r1, 0xffffe000) listen(r1, 0x80) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x7000000, 0x6e073, 0xffffffffffffffff, 0x2000) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r6, 0x6, 0x1d, 0x0, &(0x7f00000001c0)) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c00000010000304000000000400000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100626f6e640000028008001e000100000000000000"], 0x3c}, 0x1, 0x2000000000000000}, 0x0) 1.084742114s ago: executing program 6 (id=19971): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000000), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000003c0)={'vxcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x1d, r1}, 0x10, &(0x7f0000000180)={&(0x7f0000000100)={0x1, 0x222, 0x6, {0x0, 0x2710}, {}, {0x3, 0x1, 0x1}, 0x1, @can={{0x3}, 0x3, 0x1, 0x0, 0x0, "4a655d1c1800"}}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) sendmsg$can_bcm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000400)={0x2, 0x204, 0x8, {}, {}, {0x3, 0x1, 0x1}, 0x1, @can={{0x3, 0x0, 0x0, 0x1}, 0x8, 0x7, 0x0, 0x0, "a9c4eaa89d9376ed"}}, 0x48}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x2, &(0x7f0000000140)=ANY=[@ANYBLOB="61106c000000000095"], &(0x7f0000000200)='GPL\x00'}, 0x90) 1.048636666s ago: executing program 4 (id=19972): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xaa800, 0x0) splice(r1, 0x0, r1, 0x0, 0xd, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000200)={0x0, 0x4, 0x0, 0x9, 0x0, 0x0, 0x0, 0x5, 0x0, 0xfd}, 0xe) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_RENAME(r2, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c00000005060102000000000000000000000000050001000500000054a052a0722f72fade8a016d30e5fd3500824fd5ecc9331b802cb64205e849f39788a0f96f7c7d66c6cf6f924a3b9757c049da682fe888c660419146de938e437da6a1fb0d1272ca8b111cfab7dbc7e7f348aa94d49c4adfbd4578e56750587dbe5f6a0a7c91b0ce11b83073a24ba445317275b3073479fedd73acfb88d9bdd2825a2648e29c0a3338c9e1f5edb162b7670270067f7a00e770923debb736a2777b542371847fd5699f5823838677f1a679f6faddfc9f082b82bc0bb80e935f310ded"], 0x1c}}, 0x0) shutdown(r0, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$int_in(r3, 0x5452, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r5, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x4c, 0x4, 0x8, 0x3, 0x0, 0x0, {0x3, 0x0, 0x5}, [@CTA_TIMEOUT_DATA={0x2c, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_SYN_SENT2={0x8}, @CTA_TIMEOUT_TCP_UNACK={0x8, 0xb, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_TCP_LAST_ACK={0x8, 0x6, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_TCP_RETRANS={0x8, 0xa, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_TCP_RETRANS={0x8, 0xa, 0x1, 0x0, 0x7}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x4c}}, 0x81) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000080)={r4, 0x6, 0x401}, &(0x7f00000000c0)=0x8) 948.592749ms ago: executing program 4 (id=19973): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', '#\x00'}, 0x28) writev(r0, &(0x7f0000000740)=[{&(0x7f00000002c0)="589224d2c334c1f63d8a621843f389412830dbab71374ae05f97e6e70c4963661dfdab277efd0f190d8751d9d425965e353e53940b202700ca7397ce47d12c2f1442b0af79f7afbc60261390920f78d8f8798aa12e3305b6400000020000000077148704b6cbfbb42d3228e32f061093a3e22906aed35e4407f6f2384f03957aa93423e7c21735d372423f3f1cc868b904373f127f13c5d68b907c74fdcc8d105e2e2538000000", 0xfeb7}], 0x1) 858.067634ms ago: executing program 6 (id=19974): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000006d0001000000000000000007003c0000", @ANYRES32=r0, @ANYBLOB="000000000000000018003480140035"], 0x38}}, 0x0) 778.359842ms ago: executing program 2 (id=19975): bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x1f, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="18020000ea020000000000000000000085000000c500000095"], &(0x7f00000000c0)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x32, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 716.93684ms ago: executing program 6 (id=19976): r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000540)=@newqdisc={0x78, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x2}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x6, 0x80000001, 0x0, 0x0, 0xffffffff}, 0x0, 0x0, 0x4, 0x9, 0x80000001, 0x8, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x5, 0x6739, 0x3}}}}]}, 0x78}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=@framed={{0x3d, 0xa, 0xa, 0x0, 0x0, 0x71, 0x10, 0x11}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r3, 0x8983, &(0x7f0000000000)={0x6, 'bridge0\x00', {0x9}, 0x6}) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f000000f480), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_ADDR(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f000000f740)={&(0x7f0000000100)={0x14, r4, 0x400, 0x70bd25, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x8084010}, 0x40040) 710.897515ms ago: executing program 4 (id=19977): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) write$tun(r0, &(0x7f0000001240)={@val={0x0, 0x86dd}, @val={0x0, 0x0, 0x1}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, '\x00', 0xf98, 0x2c, 0x0, @local, @mcast2, {[@hopopts={0x2b, 0x0, '\x00', [@ra={0x5, 0x2, 0xc}]}], @dest_unreach={0x1, 0x0, 0x0, 0x9, '\x00', {0x9, 0x6, "9951a5", 0x3ff, 0x3c, 0x0, @remote, @remote, [], "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"}}}}}}, 0xfce) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_KEY(r2, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x68, r3, 0x5, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x3, 0x46}}}}, [@NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "7ba317959a"}, @NL80211_ATTR_KEY_DEFAULT_TYPES={0x28, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x1}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}]}, 0x68}, 0x1, 0x0, 0x0, 0x2000c814}, 0x814) 659.083138ms ago: executing program 7 (id=19978): r0 = socket$can_bcm(0x1d, 0x2, 0x2) recvmsg$can_bcm(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000002c0)=""/160, 0xa0}], 0x1, &(0x7f0000000440)=""/88, 0x58}, 0x2020) r1 = socket$rxrpc(0x21, 0x2, 0xa) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)={0x24, r3, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_TOKEN={0x8}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4}]}, 0x24}}, 0x0) bind$rxrpc(r1, &(0x7f00000001c0)=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x4e24, 0xb, @ipv4={'\x00', '\xff\xff', @local}, 0x9}}, 0x24) socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x27) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) close(r4) socket$netlink(0x10, 0x3, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r5) r6 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000500)=ANY=[@ANYBLOB="2000000005142106fdffffff00000000080001"], 0x20}}, 0x0) setsockopt$llc_int(r6, 0x10c, 0x2, &(0x7f0000000000)=0xffffffe1, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0xe, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x41, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0xfffffffe, 0x0, 0x400005}, 0x10}, 0x94) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000000000fcf4eaee45ac4fc5042b8cafc36b006a442f49e927d50561f550ad9479", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000004832c6d0f4486f8ebe80000000410100"/40], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r9}, &(0x7f0000000000), &(0x7f0000000080)=r5}, 0x20) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000002e80), r11) sendmsg$NLBL_CIPSOV4_C_REMOVE(r11, &(0x7f0000003080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002ec0)={0x14, r12, 0x1, 0x70bd25, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4012}, 0x20000840) sendmsg$NLBL_CIPSOV4_C_LIST(r10, &(0x7f0000000a00)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="84000000", @ANYRES16=r12, @ANYBLOB="000126bd7000fc0003000000080002000100000024000480050003000600000005000300c1000000050003000600000005000300010000003c0008800c00078008000500d7e682482c00078008000600e6000000080006006600000008000500068596600800060021004b8aec9f050077343f5800"/126], 0x84}, 0x1, 0x0, 0x0, 0xc898}, 0x8020) sendmsg$inet(r8, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x20000281}], 0x1}, 0x0) recvmmsg(r4, &(0x7f00000055c0), 0x400023c, 0x300, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff) 649.53163ms ago: executing program 3 (id=19979): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x8e40, 0x0) close(r1) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r7, {0x4}, {0xffff}, {0x2, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x9, 0x0, 0xf, 0x10, 0x2, 0x6, 0x2, 0x8, 0x2, 0x0, 0x1, 0x8, 0x1, 0x10, 0x4], 0x3, [0xc, 0x101, 0x7fff, 0x2002, 0x1, 0x4, 0x6, 0xd03, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x7, 0x2a, 0x401, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x4]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x810}, 0x0) r8 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r8, 0x0, 0x0, 0x48040, &(0x7f00000001c0)={0x11, 0x7, r7, 0x1, 0x6, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r9) sendmsg$TIPC_CMD_ENABLE_BEARER(r9, &(0x7f00000002c0)={0x0, 0xeaff, &(0x7f0000000340)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x40000) 561.157923ms ago: executing program 2 (id=19980): r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="14000000100001000000e7472cbcbbb7b541000a70000000060a010400000000000000000200000344000480400001800e000100627974656f726465720000002c000280080001400000000908000240000000000800044000000000080003400000008108000540000000040900010073797a30000000000900020073797a32"], 0x98}}, 0x0) bind$alg(r0, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'essiv(cbc(aes),sha256)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="71e67a15cd7db542377c512979d86bd1", 0x1e) syz_emit_ethernet(0x5a, &(0x7f0000000240)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x44}, @val={@void, {0x8100, 0x0, 0x0, 0x2}}, {@canfd={0xd, {{0x2, 0x1, 0x1, 0x1}, 0x36, 0x2, 0x0, 0x0, "52fa3f42b9a91e6c0f65238171d2b724bfe3eb45d034ea24937bfb65167a9ef5ebc2cd5d98502dd31bce888821ac6bd6ca101a9f5d0868434d073163a6c6bb62"}}}}, 0x0) getsockopt$sock_buf(r0, 0x1, 0x1f, &(0x7f0000000080)=""/177, &(0x7f0000000140)=0xb1) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="0000000000004a641c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}, 0x1, 0x0, 0x0, 0x8d0}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x4c}}, 0x884) r8 = socket$tipc(0x1e, 0x2, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_int(r3, 0x0, 0x7, &(0x7f0000000300), &(0x7f0000000440)=0x4) r12 = syz_genetlink_get_family_id$nfc(&(0x7f00000003c0), r10) sendmsg$NFC_CMD_DEV_DOWN(r11, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r12, @ANYBLOB="010027bd7000ffd9df250300080008000100b7"], 0x1c}, 0x1, 0x0, 0x0, 0x48810}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r9) ioctl$SIOCGETLINKNAME(r8, 0x89e0, &(0x7f0000000180)={0x4}) 363.039296ms ago: executing program 6 (id=19981): openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts-twofish-3way\x00'}, 0x58) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) syz_emit_ethernet(0x46, &(0x7f0000000000)={@multicast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x1, 0x6, '\x00', 0x10, 0x3a, 0xfe, @local, @loopback, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x2d, 0x6, 0x999, 0x5932}}}}}}, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000400)='syzkaller\x00', 0x5, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000240), 0x80040, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r2, 0x5218) socket$netlink(0x10, 0x3, 0x14) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0x50, 0x0, &(0x7f0000000000)="ff", 0x0, 0x36, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x50) 305.047611ms ago: executing program 4 (id=19982): r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$inet(r0, &(0x7f00000052c0)={&(0x7f0000003fc0)={0x2, 0x4e31, @local}, 0x10, 0x0, 0x0, &(0x7f00000050c0)=ANY=[@ANYBLOB="2c000000006400000000000007000000861b"], 0x30}, 0x40) 254.586128ms ago: executing program 3 (id=19983): r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_SET_FEATURES(r0, 0x40309439, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)={0x34, 0x40, 0x1, 0x7fffc, 0x4, {0x1}, [@nested={0x4, 0x48}, @nested={0x10, 0x1, 0x0, 0x1, [@nested={0xc, 0x10, 0x0, 0x1, [@nested={0x4, 0x8}, @nested={0x4, 0xf}]}]}, @typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x34}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) 61.503508ms ago: executing program 4 (id=19984): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x34, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @range={{0xa}, @val={0x20, 0x2, 0x0, 0x1, [@NFTA_RANGE_SREG={0x8, 0x1, 0x1, 0x0, 0x12}, @NFTA_RANGE_OP={0x8}, @NFTA_RANGE_TO_DATA={0x4}, @NFTA_RANGE_FROM_DATA={0x8, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}]}], {0x14}}, 0x88}}, 0x20000080) 59.826962ms ago: executing program 3 (id=19985): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vxcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000340)={0x1d, r2, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) close(0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r3, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) 0s ago: executing program 4 (id=19986): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000980)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x28, r1, 0x1, 0x70bf2a, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_SEC_LEVEL={0xc, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x5}]}]}, 0x28}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000040)={'wpan4\x00', 0x0}) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001800), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r4, &(0x7f0000001900)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f0000001880)={0x24, r5, 0x989, 0x70bd25, 0x25dfdbfb, {}, [@NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40080}, 0x4840) kernel console output (not intermixed with test programs): .747425][T18058] net_ratelimit: 29 callbacks suppressed [ 960.747447][T18058] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 960.795185][ T35] bond17: (slave ip6gretap1): failed to get link speed/duplex [ 960.831595][T17650] veth1_macvtap: entered promiscuous mode [ 960.997442][T11042] bond17: (slave ip6gretap1): failed to get link speed/duplex [ 961.235975][T18086] nbd: couldn't find device at index 1613571113 [ 961.337114][ T29] audit: type=1804 audit(1780404822.037:59): pid=18090 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.6.18886" name="/newroot/63/cgroup.controllers" dev="tmpfs" ino=337 res=1 errno=0 [ 961.383585][ T29] audit: type=1800 audit(1780404822.077:60): pid=18090 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.18886" name="cgroup.controllers" dev="tmpfs" ino=337 res=0 errno=0 [ 963.994256][T17650] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 964.052479][T17650] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 964.088991][ T12] bond17: (slave ip6gretap1): failed to get link speed/duplex [ 964.142333][ T12] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 964.158873][ T12] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 964.189967][ T12] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 964.217911][ T12] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 964.414121][ C0] vxcan0: j1939_tp_rxtimer: 0xffff888054f28000: rx timeout, send abort [ 964.431335][ T35] bond13: (slave dummy0): failed to get link speed/duplex [ 964.447075][ T35] bond14: (slave syz_tun): failed to get link speed/duplex [ 964.463543][T18131] netlink: 8 bytes leftover after parsing attributes in process `syz.2.18896'. [ 964.482921][ T35] bond17: (slave ip6gretap1): failed to get link speed/duplex [ 964.583551][T18135] xt_hashlimit: size too large, truncated to 1048576 [ 964.630023][T11042] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 964.636887][ T12] bond17: (slave ip6gretap1): failed to get link speed/duplex [ 964.644072][T11042] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 964.685634][T18140] netlink: 76 bytes leftover after parsing attributes in process `syz.3.18900'. [ 964.759133][T17895] bond14: (slave syz_tun): failed to get link speed/duplex [ 964.831290][T17895] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 964.847184][T17895] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 964.869525][ T57] bond13: (slave dummy0): failed to get link speed/duplex [ 964.891118][ C0] vxcan0: j1939_tp_rxtimer: 0xffff888054f2b000: rx timeout, send abort [ 964.922418][ C0] vxcan0: j1939_tp_rxtimer: 0xffff888054f28000: abort rx timeout. Force session deactivation [ 965.323628][T18168] netlink: 72 bytes leftover after parsing attributes in process `syz.6.18908'. [ 965.399429][ C0] vxcan0: j1939_tp_rxtimer: 0xffff888054f2b000: abort rx timeout. Force session deactivation [ 965.714576][T18187] netlink: 8 bytes leftover after parsing attributes in process `syz.6.18910'. [ 967.955607][T18193] netlink: 'syz.3.18911': attribute type 4 has an invalid length. [ 968.027695][T11042] net_ratelimit: 4 callbacks suppressed [ 968.027712][T11042] bond14: (slave syz_tun): failed to get link speed/duplex [ 968.097712][T11042] bond17: (slave ip6gretap1): failed to get link speed/duplex [ 968.127317][ T12] bond13: (slave dummy0): failed to get link speed/duplex [ 968.186783][ T1029] bond14: (slave syz_tun): failed to get link speed/duplex [ 968.223011][T18204] netlink: 'syz.7.18915': attribute type 12 has an invalid length. [ 968.267396][T11042] bond13: (slave dummy0): failed to get link speed/duplex [ 968.287019][ T57] bond17: (slave ip6gretap1): failed to get link speed/duplex [ 968.464857][T18209] mac80211_hwsim hwsim8 syzkaller0: entered promiscuous mode [ 968.489233][T18209] mac80211_hwsim hwsim8 syzkaller0: entered allmulticast mode [ 968.574550][T18223] netlink: 'syz.6.18921': attribute type 1 has an invalid length. [ 968.587598][T18223] netlink: 11 bytes leftover after parsing attributes in process `syz.6.18921'. [ 968.614481][T18216] bond21: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5) [ 968.674178][T18216] bond21 (unregistering): Released all slaves [ 968.772427][T18209] netlink: 28 bytes leftover after parsing attributes in process `syz.2.18917'. [ 968.789489][T18209] netlink: 28 bytes leftover after parsing attributes in process `syz.2.18917'. [ 968.814331][T18229] tipc: Resetting bearer [ 968.873118][T11042] bond14: (slave syz_tun): failed to get link speed/duplex [ 968.917087][ T57] bond17: (slave ip6gretap1): failed to get link speed/duplex [ 968.956875][T11050] bond13: (slave dummy0): failed to get link speed/duplex [ 969.010734][T11042] bond14: (slave syz_tun): failed to get link speed/duplex [ 969.050359][T18242] mac80211_hwsim hwsim8 syzkaller0: left promiscuous mode [ 969.061074][T18242] mac80211_hwsim hwsim8 syzkaller0: left allmulticast mode [ 969.671307][T18276] syzkaller0: entered promiscuous mode [ 969.680105][T18276] syzkaller0: entered allmulticast mode [ 969.694650][T18276] netlink: 28 bytes leftover after parsing attributes in process `syz.7.18938'. [ 969.714418][T18276] netlink: 28 bytes leftover after parsing attributes in process `syz.7.18938'. [ 969.913749][T18287] netlink: 'syz.6.18941': attribute type 7 has an invalid length. [ 969.950938][T18295] netlink: 'syz.2.18940': attribute type 21 has an invalid length. [ 969.990543][T18295] netlink: 128 bytes leftover after parsing attributes in process `syz.2.18940'. [ 969.993262][T18294] syzkaller0: entered promiscuous mode [ 970.015320][T18294] syzkaller0: entered allmulticast mode [ 970.040144][T18300] netlink: 44 bytes leftover after parsing attributes in process `syz.2.18940'. [ 970.091381][T18284] netlink: 12 bytes leftover after parsing attributes in process `syz.2.18940'. [ 970.113859][T18295] netlink: 'syz.2.18940': attribute type 5 has an invalid length. [ 970.128435][T18295] netlink: 3 bytes leftover after parsing attributes in process `syz.2.18940'. [ 970.278983][T18305] syzkaller0: entered promiscuous mode [ 970.308791][T18305] syzkaller0: entered allmulticast mode [ 970.486395][T18313] netlink: 8 bytes leftover after parsing attributes in process `syz.7.18948'. [ 970.797951][T18330] netlink: 8 bytes leftover after parsing attributes in process `syz.6.18951'. [ 970.846030][T18330] tipc: Resetting bearer [ 970.991894][T18333] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode [ 971.005150][T18333] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode [ 971.132039][T18333] netlink: 28 bytes leftover after parsing attributes in process `syz.3.18953'. [ 971.160983][T18333] netlink: 28 bytes leftover after parsing attributes in process `syz.3.18953'. [ 971.370183][ T29] audit: type=1804 audit(1780404832.077:61): pid=18350 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.18960" name="/newroot/3823/cgroup.controllers" dev="tmpfs" ino=19294 res=1 errno=0 [ 971.395194][T18348] netdevsim netdevsim7 netdevsim0: entered promiscuous mode [ 971.412725][T18351] netlink: 'syz.7.18959': attribute type 11 has an invalid length. [ 971.433412][ T29] audit: type=1800 audit(1780404832.107:62): pid=18350 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.18960" name="cgroup.controllers" dev="tmpfs" ino=19294 res=0 errno=0 [ 971.713377][T18357] tipc: Enabling of bearer rejected, already enabled [ 971.873159][T18365] nbd: couldn't find device at index 2958377 [ 972.172730][T18379] netlink: 'syz.6.18970': attribute type 1 has an invalid length. [ 972.281809][T18379] 8021q: adding VLAN 0 to HW filter on device bond1 [ 972.373138][T18388] team0: Port device team_slave_0 removed [ 972.403140][T18388] bond1: (slave team_slave_0): Enslaving as a backup interface with an up link [ 973.002739][T18404] bond1: (slave gretap0): Device is not bonding slave [ 973.010438][T18404] bond1: option active_slave: invalid value (gretap0) [ 973.043971][T18404] bond1 (unregistering): Released all slaves [ 973.091756][T18407] mac80211_hwsim hwsim8 syzkaller0: entered promiscuous mode [ 973.148072][T18407] mac80211_hwsim hwsim8 syzkaller0: entered allmulticast mode [ 973.157644][T11050] net_ratelimit: 75 callbacks suppressed [ 973.157660][T11050] bond13: (slave dummy0): failed to get link speed/duplex [ 973.187755][T11050] bond17: (slave ip6gretap1): failed to get link speed/duplex [ 973.217190][T11042] bond14: (slave syz_tun): failed to get link speed/duplex [ 973.308947][ T1175] bond13: (slave dummy0): failed to get link speed/duplex [ 973.327428][T18423] openvswitch: netlink: VLAN attribute unexpected. [ 973.348007][ T12] bond17: (slave ip6gretap1): failed to get link speed/duplex [ 973.368988][T18423] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 973.399813][T18423] openvswitch: netlink: IP tunnel dst address not specified [ 973.419111][T18423] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 973.445887][T18427] mac80211_hwsim hwsim8 syzkaller0: left promiscuous mode [ 973.467619][T18427] mac80211_hwsim hwsim8 syzkaller0: left allmulticast mode [ 973.497348][T11042] bond17: (slave ip6gretap1): failed to get link speed/duplex [ 973.527518][ T57] bond13: (slave dummy0): failed to get link speed/duplex [ 975.054539][T18477] __nla_validate_parse: 6 callbacks suppressed [ 975.054557][T18477] netlink: 20 bytes leftover after parsing attributes in process `syz.7.19000'. [ 975.102928][T18477] netlink: 4 bytes leftover after parsing attributes in process `syz.7.19000'. [ 975.222440][T18481] mac80211_hwsim hwsim3 syzkaller0: left promiscuous mode [ 975.233531][T18485] netlink: 'syz.2.19003': attribute type 1 has an invalid length. [ 975.268505][T18481] mac80211_hwsim hwsim3 syzkaller0: left allmulticast mode [ 975.457812][T18485] 8021q: adding VLAN 0 to HW filter on device bond21 [ 975.735910][T18501] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode [ 975.753297][T18501] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode [ 975.787650][T18507] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 975.814574][T18507] netlink: 20 bytes leftover after parsing attributes in process `syz.6.19012'. [ 976.083945][T18521] netlink: 8 bytes leftover after parsing attributes in process `syz.3.19015'. [ 976.351630][T18536] netlink: 8 bytes leftover after parsing attributes in process `syz.4.19020'. [ 976.465741][T18541] netlink: 8 bytes leftover after parsing attributes in process `syz.2.19021'. [ 976.510345][T18541] netlink: 'syz.2.19021': attribute type 18 has an invalid length. [ 976.537693][T18541] netlink: 4 bytes leftover after parsing attributes in process `syz.2.19021'. [ 976.580463][T18541] netlink: 8 bytes leftover after parsing attributes in process `syz.2.19021'. [ 976.610311][T18541] netlink: 'syz.2.19021': attribute type 18 has an invalid length. [ 976.644723][T18541] netlink: 4 bytes leftover after parsing attributes in process `syz.2.19021'. [ 976.746313][T18549] syzkaller0: entered promiscuous mode [ 976.767778][T18549] syzkaller0: entered allmulticast mode [ 976.776083][T18553] netlink: 8 bytes leftover after parsing attributes in process `syz.3.19027'. [ 976.787381][T18553] ip6tnl0: Caught tx_queue_len zero misconfig [ 976.851674][T18556] netlink: 'syz.2.19029': attribute type 3 has an invalid length. [ 976.980262][T18559] 8021q: VLANs not supported on ip_vti0 [ 977.282240][T18573] syzkaller0: entered promiscuous mode [ 977.305425][T18573] syzkaller0: entered allmulticast mode [ 977.531806][T18585] mac80211_hwsim hwsim8 syzkaller0: entered promiscuous mode [ 977.578786][T18585] mac80211_hwsim hwsim8 syzkaller0: entered allmulticast mode [ 978.187685][ T59] net_ratelimit: 90 callbacks suppressed [ 978.187704][ T59] bond14: (slave syz_tun): failed to get link speed/duplex [ 978.226438][T18623] mac80211_hwsim hwsim8 syzkaller0: left promiscuous mode [ 978.238262][T18623] mac80211_hwsim hwsim8 syzkaller0: left allmulticast mode [ 978.246153][ T1029] nci: nci_rsp_packet: unknown rsp opcode 0x3f [ 978.261244][ T59] bond17: (slave ip6gretap1): failed to get link speed/duplex [ 978.320801][ T1175] bond13: (slave dummy0): failed to get link speed/duplex [ 978.370230][ T1029] bond14: (slave syz_tun): failed to get link speed/duplex [ 978.418113][T17895] bond17: (slave ip6gretap1): failed to get link speed/duplex [ 978.467190][ T59] bond13: (slave dummy0): failed to get link speed/duplex [ 978.510599][ T1029] bond14: (slave syz_tun): failed to get link speed/duplex [ 978.537118][ T1029] bond17: (slave ip6gretap1): failed to get link speed/duplex [ 978.589689][ T1175] bond13: (slave dummy0): failed to get link speed/duplex [ 978.625226][ T29] audit: type=1804 audit(1780404839.327:63): pid=18635 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.19049" name="/newroot/3841/cgroup.controllers" dev="tmpfs" ino=19387 res=1 errno=0 [ 978.665315][T18634] mac80211_hwsim hwsim8 syzkaller0: entered promiscuous mode [ 978.678226][ T29] audit: type=1800 audit(1780404839.327:64): pid=18635 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.19049" name="cgroup.controllers" dev="tmpfs" ino=19387 res=0 errno=0 [ 978.687843][T18634] mac80211_hwsim hwsim8 syzkaller0: entered allmulticast mode [ 978.718784][ T1175] bond17: (slave ip6gretap1): failed to get link speed/duplex [ 981.040875][T18604] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 981.067259][T18625] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 981.326357][T18654] __nla_validate_parse: 6 callbacks suppressed [ 981.326375][T18654] netlink: 8 bytes leftover after parsing attributes in process `syz.4.19053'. [ 981.939247][T18679] netlink: 8 bytes leftover after parsing attributes in process `syz.3.19063'. [ 983.326485][ T29] audit: type=1804 audit(1780404844.027:65): pid=18690 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.7.19065" name="/newroot/30/cgroup.controllers" dev="tmpfs" ino=169 res=1 errno=0 [ 983.397254][ T29] audit: type=1800 audit(1780404844.027:66): pid=18690 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.19065" name="cgroup.controllers" dev="tmpfs" ino=169 res=0 errno=0 [ 983.838801][T18698] netlink: 12 bytes leftover after parsing attributes in process `syz.7.19066'. [ 985.134654][T18673] syzkaller0: entered promiscuous mode [ 985.141115][T18673] syzkaller0: entered allmulticast mode [ 985.152098][T18681] tipc: Enabling of bearer rejected, already enabled [ 985.208170][ T59] net_ratelimit: 75 callbacks suppressed [ 985.208187][ T59] bond13: (slave dummy0): failed to get link speed/duplex [ 985.290583][T17895] bond14: (slave syz_tun): failed to get link speed/duplex [ 985.338001][ T35] bond17: (slave ip6gretap1): failed to get link speed/duplex [ 985.377216][T11042] bond13: (slave dummy0): failed to get link speed/duplex [ 985.430284][T11042] bond14: (slave syz_tun): failed to get link speed/duplex [ 985.480596][T11042] bond17: (slave ip6gretap1): failed to get link speed/duplex [ 985.538252][T17895] bond13: (slave dummy0): failed to get link speed/duplex [ 985.579899][T11042] bond14: (slave syz_tun): failed to get link speed/duplex [ 985.583154][T18709] IPVS: length: 71 != 8 [ 985.613117][T18709] x_tables: duplicate underflow at hook 1 [ 985.627102][ T35] bond17: (slave ip6gretap1): failed to get link speed/duplex [ 985.668613][ T1175] bond13: (slave dummy0): failed to get link speed/duplex [ 985.870802][ T29] audit: type=1804 audit(1780404846.567:67): pid=18724 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.7.19076" name="/newroot/33/cgroup.controllers" dev="tmpfs" ino=187 res=1 errno=0 [ 985.932730][ T29] audit: type=1800 audit(1780404846.607:68): pid=18724 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.19076" name="cgroup.controllers" dev="tmpfs" ino=187 res=0 errno=0 [ 989.379072][T18747] netlink: 32 bytes leftover after parsing attributes in process `syz.2.19084'. [ 989.399709][T18759] tipc: Enabling of bearer rejected, already enabled [ 989.558263][T18769] syzkaller0: entered promiscuous mode [ 989.563823][T18769] syzkaller0: entered allmulticast mode [ 989.579971][T18773] netlink: 'syz.6.19093': attribute type 1 has an invalid length. [ 989.779346][T18787] netlink: 8 bytes leftover after parsing attributes in process `syz.2.19098'. [ 989.796009][T18778] ip6gretap1: entered promiscuous mode [ 989.802442][T18778] ip6gretap1: entered allmulticast mode [ 990.178897][T18806] mac80211_hwsim hwsim3 syzkaller0: left promiscuous mode [ 990.225015][T18806] mac80211_hwsim hwsim3 syzkaller0: left allmulticast mode [ 990.242647][T18806] tipc: Resetting bearer [ 990.369579][T18808] 8021q: adding VLAN 0 to HW filter on device bond1 [ 990.387426][T11050] net_ratelimit: 15 callbacks suppressed [ 990.387443][T11050] bond17: (slave ip6gretap1): failed to get link speed/duplex [ 990.474949][T18814] tunl0: Caught tx_queue_len zero misconfig [ 990.606079][T18812] netlink: 32 bytes leftover after parsing attributes in process `syz.2.19105'. [ 990.638779][ T57] bond17: (slave ip6gretap1): failed to get link speed/duplex [ 990.669265][T11050] bond14: (slave syz_tun): failed to get link speed/duplex [ 990.706386][T18833] syzkaller1: entered promiscuous mode [ 990.720588][T18833] syzkaller1: entered allmulticast mode [ 990.893483][T18843] netlink: 4 bytes leftover after parsing attributes in process `syz.3.19114'. [ 990.943271][T18836] syzkaller0: entered promiscuous mode [ 990.962873][T18836] syzkaller0: entered allmulticast mode [ 990.998468][T11042] bond14: (slave syz_tun): failed to get link speed/duplex [ 993.641311][T18858] tipc: Enabled bearer , priority 0 [ 993.648651][T18856] netlink: 12 bytes leftover after parsing attributes in process `syz.6.19117'. [ 993.692289][T18859] tipc: Resetting bearer [ 993.731364][ T1029] bond13: (slave dummy0): link status up again after 0 ms [ 993.753638][ T1029] bond13: (slave dummy0): failed to get link speed/duplex [ 993.782814][T18862] netlink: 12 bytes leftover after parsing attributes in process `syz.3.19118'. [ 993.798293][ T59] bond14: (slave syz_tun): failed to get link speed/duplex [ 993.899185][ T1029] bond13: (slave dummy0): failed to get link speed/duplex [ 993.926638][ T59] bond14: (slave syz_tun): failed to get link speed/duplex [ 993.956014][T18875] netlink: 'syz.4.19122': attribute type 10 has an invalid length. [ 993.977140][ T59] bond17: (slave ip6gretap1): failed to get link speed/duplex [ 993.980054][ T29] audit: type=1804 audit(1780404854.667:69): pid=18877 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.6.19123" name="/newroot/121/cgroup.controllers" dev="tmpfs" ino=633 res=1 errno=0 [ 994.032537][T18879] x_tables: duplicate underflow at hook 2 [ 994.050264][T18875] veth0_to_team: Caught tx_queue_len zero misconfig [ 994.082214][ T29] audit: type=1800 audit(1780404854.667:70): pid=18877 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.19123" name="cgroup.controllers" dev="tmpfs" ino=633 res=0 errno=0 [ 994.134339][T18883] netlink: 32 bytes leftover after parsing attributes in process `syz.3.19125'. [ 994.255886][T18888] netlink: 'syz.4.19128': attribute type 1 has an invalid length. [ 994.343102][T18891] netlink: 'syz.6.19127': attribute type 2 has an invalid length. [ 994.360550][T18891] netlink: 'syz.6.19127': attribute type 1 has an invalid length. [ 994.420209][T18888] 8021q: adding VLAN 0 to HW filter on device bond25 [ 994.689513][T18897] syzkaller0: entered promiscuous mode [ 994.695932][T18897] syzkaller0: entered allmulticast mode [ 994.789740][T18917] netlink: 12 bytes leftover after parsing attributes in process `syz.3.19133'. [ 997.450116][ T59] net_ratelimit: 8 callbacks suppressed [ 997.450135][ T59] bond13: (slave dummy0): link status up again after 0 ms [ 997.458498][T18946] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 997.502680][ T59] bond13: (slave dummy0): failed to get link speed/duplex [ 997.547164][T11042] bond17: (slave ip6gretap1): failed to get link speed/duplex [ 997.600195][ T1175] bond14: (slave syz_tun): failed to get link speed/duplex [ 997.667322][ T1175] bond13: (slave dummy0): failed to get link speed/duplex [ 997.682987][ T59] bond17: (slave ip6gretap1): failed to get link speed/duplex [ 997.707533][T18958] netlink: 32 bytes leftover after parsing attributes in process `syz.7.19142'. [ 997.715465][T18964] netlink: 'syz.3.19146': attribute type 1 has an invalid length. [ 997.729288][ T29] audit: type=1804 audit(1780404858.437:71): pid=18962 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.19143" name="/newroot/3845/cgroup.controllers" dev="tmpfs" ino=19398 res=1 errno=0 [ 997.797135][ T29] audit: type=1800 audit(1780404858.437:72): pid=18962 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.19143" name="cgroup.controllers" dev="tmpfs" ino=19398 res=0 errno=0 [ 997.851859][T18968] x_tables: duplicate underflow at hook 1 [ 997.887140][T18964] 8021q: adding VLAN 0 to HW filter on device bond21 [ 997.951918][ T1175] bond17: (slave ip6gretap1): failed to get link speed/duplex [ 998.027148][ T59] bond14: (slave syz_tun): failed to get link speed/duplex [ 998.069412][ T59] bond13: (slave dummy0): failed to get link speed/duplex [ 998.089445][T18981] netlink: 128 bytes leftover after parsing attributes in process `syz.6.19151'. [ 998.114164][T18981] netlink: 128 bytes leftover after parsing attributes in process `syz.6.19151'. [ 998.174497][ T29] audit: type=1804 audit(1780404858.877:73): pid=18986 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.19154" name="/newroot/3847/cgroup.controllers" dev="tmpfs" ino=19411 res=1 errno=0 [ 998.299764][ T29] audit: type=1800 audit(1780404858.877:74): pid=18986 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.19154" name="cgroup.controllers" dev="tmpfs" ino=19411 res=0 errno=0 [ 998.360954][T18992] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode [ 998.394572][T18992] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode [ 998.497304][T19005] netlink: 192 bytes leftover after parsing attributes in process `syz.6.19161'. [ 998.630135][T19010] netlink: 'syz.3.19163': attribute type 1 has an invalid length. [ 998.652925][T19014] netlink: 32 bytes leftover after parsing attributes in process `syz.2.19166'. [ 998.743670][T19020] netlink: 12 bytes leftover after parsing attributes in process `syz.7.19165'. [ 998.758851][T19010] 8021q: adding VLAN 0 to HW filter on device bond22 [ 998.952513][T19021] syzkaller0: entered promiscuous mode [ 998.960431][T19021] syzkaller0: entered allmulticast mode [ 999.869730][T19079] netlink: 'syz.2.19177': attribute type 1 has an invalid length. [ 1001.874531][T19034] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1001.929431][T19049] mac80211_hwsim hwsim3 syzkaller0: left promiscuous mode [ 1001.937846][T19049] mac80211_hwsim hwsim3 syzkaller0: left allmulticast mode [ 1002.085821][T19079] 8021q: adding VLAN 0 to HW filter on device bond22 [ 1002.193944][T19093] netlink: 'syz.3.19180': attribute type 1 has an invalid length. [ 1002.308828][T19102] netlink: 'syz.2.19185': attribute type 10 has an invalid length. [ 1002.336964][T19093] 8021q: adding VLAN 0 to HW filter on device bond23 [ 1002.344919][T19099] netlink: 4768 bytes leftover after parsing attributes in process `syz.7.19183'. [ 1002.357513][T19099] netlink: 4768 bytes leftover after parsing attributes in process `syz.7.19183'. [ 1002.469458][T11050] net_ratelimit: 21 callbacks suppressed [ 1002.469475][T11050] bond14: (slave syz_tun): failed to get link speed/duplex [ 1002.516854][ T1175] bond17: (slave ip6gretap1): failed to get link speed/duplex [ 1002.530610][T19110] tipc: Enabling of bearer rejected, failed to enable media [ 1002.563333][T17895] bond13: (slave dummy0): failed to get link speed/duplex [ 1002.616663][T17895] bond14: (slave syz_tun): failed to get link speed/duplex [ 1002.670310][T19118] syzkaller0: entered promiscuous mode [ 1002.677385][T19118] syzkaller0: entered allmulticast mode [ 1002.688183][ T1175] bond17: (slave ip6gretap1): failed to get link speed/duplex [ 1002.817748][T11050] bond13: (slave dummy0): failed to get link speed/duplex [ 1002.839283][T11050] bond14: (slave syz_tun): failed to get link speed/duplex [ 1002.870127][ T1175] bond17: (slave ip6gretap1): failed to get link speed/duplex [ 1003.373650][T19140] netlink: 4 bytes leftover after parsing attributes in process `syz.3.19196'. [ 1003.408903][T19140] netlink: 54 bytes leftover after parsing attributes in process `syz.3.19196'. [ 1003.432212][T19140] netlink: 8 bytes leftover after parsing attributes in process `syz.3.19196'. [ 1003.481598][T19142] netlink: 12 bytes leftover after parsing attributes in process `syz.3.19196'. [ 1003.528645][T19146] netlink: 'syz.2.19197': attribute type 1 has an invalid length. [ 1005.965566][T19146] workqueue: Failed to create a rescuer kthread for wq "bond23": -EINTR [ 1005.986773][ T1175] bond14: (slave syz_tun): failed to get link speed/duplex [ 1006.024663][ T1175] bond17: (slave ip6gretap1): failed to get link speed/duplex [ 1006.211377][T19165] netlink: 4 bytes leftover after parsing attributes in process `syz.3.19201'. [ 1006.479473][T19182] netlink: 1024 bytes leftover after parsing attributes in process `syz.6.19208'. [ 1006.512938][T19182] netlink: 'syz.6.19208': attribute type 5 has an invalid length. [ 1006.664960][T19193] syzkaller0: entered promiscuous mode [ 1006.676174][T19193] syzkaller0: entered allmulticast mode [ 1006.692896][T19191] nbd: couldn't find device at index 2958377 [ 1007.482223][T19232] syzkaller0: entered promiscuous mode [ 1007.496488][T19232] syzkaller0: entered allmulticast mode [ 1007.526993][T11050] net_ratelimit: 33 callbacks suppressed [ 1007.527010][T11050] bond14: (slave syz_tun): failed to get link speed/duplex [ 1007.600600][T19246] netlink: 28 bytes leftover after parsing attributes in process `syz.6.19227'. [ 1007.624270][T19247] netlink: 28 bytes leftover after parsing attributes in process `syz.6.19227'. [ 1008.003194][T19275] netlink: 192 bytes leftover after parsing attributes in process `syz.7.19235'. [ 1008.036163][T19275] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 1008.133462][T19281] openvswitch: netlink: IP tunnel dst address not specified [ 1010.309574][ T1029] bond13: (slave dummy0): failed to get link speed/duplex [ 1010.350045][ T1029] bond17: (slave ip6gretap1): failed to get link speed/duplex [ 1010.408578][T11050] bond14: (slave syz_tun): failed to get link speed/duplex [ 1010.554393][T19292] netlink: 830 bytes leftover after parsing attributes in process `syz.3.19240'. [ 1010.596664][T17895] bond13: (slave dummy0): failed to get link speed/duplex [ 1010.618865][T17895] bond14: (slave syz_tun): failed to get link speed/duplex [ 1010.647965][T19301] syzkaller0: entered promiscuous mode [ 1010.673815][T19311] netlink: 12 bytes leftover after parsing attributes in process `syz.3.19244'. [ 1010.675379][T19301] syzkaller0: entered allmulticast mode [ 1010.752786][ T1029] bond13: (slave dummy0): failed to get link speed/duplex [ 1010.770798][ T1029] bond14: (slave syz_tun): failed to get link speed/duplex [ 1010.806150][T19301] tipc: Enabled bearer , priority 0 [ 1010.871672][T19300] tipc: Resetting bearer [ 1011.000456][T19300] tipc: Disabling bearer [ 1011.218470][T19335] netlink: 4 bytes leftover after parsing attributes in process `syz.7.19253'. [ 1011.282692][T19337] netlink: 8 bytes leftover after parsing attributes in process `syz.7.19253'. [ 1011.292393][T19337] netlink: 16 bytes leftover after parsing attributes in process `syz.7.19253'. [ 1011.294082][T19335] netlink: 4 bytes leftover after parsing attributes in process `syz.7.19253'. [ 1011.349382][T19335] netlink: 4 bytes leftover after parsing attributes in process `syz.7.19253'. [ 1011.418049][T19344] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 1011.610631][T19349] netlink: 'syz.6.19259': attribute type 2 has an invalid length. [ 1012.024945][T19377] netlink: 'syz.4.19269': attribute type 1 has an invalid length. [ 1012.192141][T19391] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1012.216367][T19377] bond26: entered promiscuous mode [ 1012.231508][T19377] 8021q: adding VLAN 0 to HW filter on device bond26 [ 1012.280477][T19377] netlink: 'syz.4.19269': attribute type 1 has an invalid length. [ 1012.318058][T19377] netlink: 'syz.4.19269': attribute type 1 has an invalid length. [ 1012.340631][T19377] netlink: 'syz.4.19269': attribute type 1 has an invalid length. [ 1012.364327][T19377] netlink: 'syz.4.19269': attribute type 1 has an invalid length. [ 1012.403374][T19377] netlink: 'syz.4.19269': attribute type 1 has an invalid length. [ 1012.452883][T19401] tipc: Resetting bearer [ 1012.548545][T19377] netlink: 'syz.4.19269': attribute type 1 has an invalid length. [ 1012.585169][T19410] Cannot find set identified by id 65534 to match [ 1012.611564][T19401] tipc: Resetting bearer [ 1012.683335][T19377] netlink: 'syz.4.19269': attribute type 1 has an invalid length. [ 1012.698362][T19377] netlink: 'syz.4.19269': attribute type 1 has an invalid length. [ 1012.706455][ T57] net_ratelimit: 28 callbacks suppressed [ 1012.706479][ T57] bond13: (slave dummy0): failed to get link speed/duplex [ 1012.788592][ T35] bond17: (slave ip6gretap1): failed to get link speed/duplex [ 1012.837677][ T35] bond14: (slave syz_tun): failed to get link speed/duplex [ 1012.916726][ T35] bond13: (slave dummy0): failed to get link speed/duplex [ 1012.997067][ T59] bond17: (slave ip6gretap1): failed to get link speed/duplex [ 1013.020115][ T57] bond14: (slave syz_tun): failed to get link speed/duplex [ 1013.089221][ T59] bond13: (slave dummy0): failed to get link speed/duplex [ 1013.180367][ T1029] bond17: (slave ip6gretap1): failed to get link speed/duplex [ 1013.200483][ T1029] bond14: (slave syz_tun): failed to get link speed/duplex [ 1013.270508][ T29] audit: type=1804 audit(1780404873.977:75): pid=19438 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.19283" name="/newroot/3991/cgroup.controllers" dev="tmpfs" ino=20129 res=1 errno=0 [ 1013.315010][ T29] audit: type=1800 audit(1780404873.977:76): pid=19438 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.19283" name="cgroup.controllers" dev="tmpfs" ino=20129 res=0 errno=0 [ 1013.388716][ T57] bond17: (slave ip6gretap1): failed to get link speed/duplex [ 1013.832806][T19443] veth3: entered allmulticast mode [ 1013.885913][T19457] __nla_validate_parse: 6 callbacks suppressed [ 1013.885929][T19457] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.19289'. [ 1013.955187][T19464] FAULT_INJECTION: forcing a failure. [ 1013.955187][T19464] name failslab, interval 1, probability 0, space 0, times 0 [ 1013.959058][T19463] netlink: 4 bytes leftover after parsing attributes in process `syz.3.19289'. [ 1014.007315][T19464] CPU: 1 UID: 0 PID: 19464 Comm: syz.7.19291 Not tainted syzkaller #0 PREEMPT(full) [ 1014.007338][T19464] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1014.007349][T19464] Call Trace: [ 1014.007356][T19464] [ 1014.007365][T19464] dump_stack_lvl+0xe8/0x150 [ 1014.007391][T19464] should_fail_ex+0x412/0x560 [ 1014.007417][T19464] should_failslab+0xa8/0x100 [ 1014.007438][T19464] __kmalloc_noprof+0xe8/0x760 [ 1014.007460][T19464] ? ip_options_get+0x51/0x4c0 [ 1014.007565][T19464] ? look_up_lock_class+0x57/0x110 [ 1014.007589][T19464] ip_options_get+0x51/0x4c0 [ 1014.007606][T19464] ? __lock_acquire+0x6b5/0x2cf0 [ 1014.007629][T19464] ip_cmsg_send+0x591/0xa70 [ 1014.007661][T19464] udp_sendmsg+0xbf2/0x21a0 [ 1014.007740][T19464] ? __pfx_udp_sendmsg+0x10/0x10 [ 1014.007766][T19464] ? ip4_datagram_release_cb+0x978/0xbe0 [ 1014.007788][T19464] ? reacquire_held_locks+0x104/0x190 [ 1014.007807][T19464] ? release_sock+0x2f/0x260 [ 1014.007843][T19464] ? inet_sendmsg+0x14f/0x370 [ 1014.007888][T19464] ? inet_sendmsg+0x14f/0x370 [ 1014.007905][T19464] ? __local_bh_enable_ip+0xd0/0x130 [ 1014.007923][T19464] ? lockdep_hardirqs_on+0x7a/0x110 [ 1014.007939][T19464] ? inet_sendmsg+0x14f/0x370 [ 1014.007953][T19464] ? __local_bh_enable_ip+0xd0/0x130 [ 1014.007969][T19464] ? inet_sendmsg+0x29c/0x370 [ 1014.007989][T19464] ____sys_sendmsg+0x80a/0x9f0 [ 1014.008014][T19464] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1014.008040][T19464] ? import_iovec+0x73/0xa0 [ 1014.008064][T19464] ___sys_sendmsg+0x2a5/0x360 [ 1014.008079][T19464] ? __lock_acquire+0x6b5/0x2cf0 [ 1014.008100][T19464] ? __pfx____sys_sendmsg+0x10/0x10 [ 1014.008148][T19464] ? __fget_files+0x2a/0x420 [ 1014.008167][T19464] ? __fget_files+0x3a0/0x420 [ 1014.008195][T19464] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1014.008214][T19464] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1014.008240][T19464] ? __pfx_ksys_write+0x10/0x10 [ 1014.008272][T19464] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1014.008290][T19464] do_syscall_64+0x174/0x580 [ 1014.008306][T19464] ? trace_irq_disable+0x3b/0x140 [ 1014.008328][T19464] ? clear_bhb_loop+0x40/0x90 [ 1014.008348][T19464] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1014.008365][T19464] RIP: 0033:0x7fa0d279ce59 [ 1014.008382][T19464] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1014.008397][T19464] RSP: 002b:00007fa0d35b2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1014.008415][T19464] RAX: ffffffffffffffda RBX: 00007fa0d2a15fa0 RCX: 00007fa0d279ce59 [ 1014.008427][T19464] RDX: 0000000000000040 RSI: 00002000000052c0 RDI: 0000000000000003 [ 1014.008437][T19464] RBP: 00007fa0d35b2090 R08: 0000000000000000 R09: 0000000000000000 [ 1014.008447][T19464] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1014.008456][T19464] R13: 00007fa0d2a16038 R14: 00007fa0d2a15fa0 R15: 00007ffc382c7a98 [ 1014.008484][T19464] [ 1014.039096][T19457] netlink: 12 bytes leftover after parsing attributes in process `syz.3.19289'. [ 1014.107953][T19461] netlink: 24 bytes leftover after parsing attributes in process `syz.4.19290'. [ 1014.624328][ T29] audit: type=1804 audit(1780404875.327:77): pid=19482 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.7.19296" name="/newroot/70/cgroup.controllers" dev="tmpfs" ino=376 res=1 errno=0 [ 1014.717994][ T29] audit: type=1800 audit(1780404875.327:78): pid=19482 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.19296" name="cgroup.controllers" dev="tmpfs" ino=376 res=0 errno=0 [ 1015.306041][T19510] netlink: 4 bytes leftover after parsing attributes in process `syz.6.19305'. [ 1015.322090][T19508] FAULT_INJECTION: forcing a failure. [ 1015.322090][T19508] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1015.345479][T19509] netlink: 4 bytes leftover after parsing attributes in process `syz.6.19305'. [ 1015.384048][T19508] CPU: 0 UID: 0 PID: 19508 Comm: syz.7.19303 Not tainted syzkaller #0 PREEMPT(full) [ 1015.384071][T19508] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1015.384081][T19508] Call Trace: [ 1015.384088][T19508] [ 1015.384095][T19508] dump_stack_lvl+0xe8/0x150 [ 1015.384121][T19508] should_fail_ex+0x412/0x560 [ 1015.384145][T19508] _copy_to_user+0x31/0xb0 [ 1015.384168][T19508] simple_read_from_buffer+0xe1/0x170 [ 1015.384194][T19508] proc_fail_nth_read+0x1bb/0x230 [ 1015.384220][T19508] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1015.384243][T19508] ? rw_verify_area+0x2a6/0x4d0 [ 1015.384264][T19508] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1015.384286][T19508] vfs_read+0x20c/0xa70 [ 1015.384316][T19508] ? __pfx___mutex_lock+0x10/0x10 [ 1015.384336][T19508] ? __pfx_vfs_read+0x10/0x10 [ 1015.384359][T19508] ? __fget_files+0x2a/0x420 [ 1015.384382][T19508] ? __fget_files+0x3a0/0x420 [ 1015.384400][T19508] ? __fget_files+0x2a/0x420 [ 1015.384428][T19508] ksys_read+0x150/0x270 [ 1015.384452][T19508] ? __pfx_ksys_read+0x10/0x10 [ 1015.384482][T19508] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1015.384500][T19508] do_syscall_64+0x174/0x580 [ 1015.384516][T19508] ? trace_irq_disable+0x3b/0x140 [ 1015.384538][T19508] ? clear_bhb_loop+0x40/0x90 [ 1015.384559][T19508] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1015.384575][T19508] RIP: 0033:0x7fa0d275d68e [ 1015.384591][T19508] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1015.384605][T19508] RSP: 002b:00007fa0d35b1fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1015.384622][T19508] RAX: ffffffffffffffda RBX: 00007fa0d35b26c0 RCX: 00007fa0d275d68e [ 1015.384634][T19508] RDX: 000000000000000f RSI: 00007fa0d35b20a0 RDI: 0000000000000004 [ 1015.384645][T19508] RBP: 00007fa0d35b2090 R08: 0000000000000000 R09: 0000000000000000 [ 1015.384655][T19508] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1015.384664][T19508] R13: 00007fa0d2a16038 R14: 00007fa0d2a15fa0 R15: 00007ffc382c7a98 [ 1015.384692][T19508] [ 1016.117850][T19547] netlink: 20 bytes leftover after parsing attributes in process `syz.2.19317'. [ 1016.156236][T19547] netlink: 156 bytes leftover after parsing attributes in process `syz.2.19317'. [ 1016.202181][T19547] netlink: 12 bytes leftover after parsing attributes in process `syz.2.19317'. [ 1016.304786][T19551] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1016.550009][T19570] netlink: 244 bytes leftover after parsing attributes in process `syz.2.19326'. [ 1016.712301][T19582] nbd: couldn't find device at index 2958377 [ 1016.795579][T19588] FAULT_INJECTION: forcing a failure. [ 1016.795579][T19588] name failslab, interval 1, probability 0, space 0, times 0 [ 1016.836000][T19588] CPU: 1 UID: 0 PID: 19588 Comm: syz.3.19334 Not tainted syzkaller #0 PREEMPT(full) [ 1016.836023][T19588] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1016.836033][T19588] Call Trace: [ 1016.836041][T19588] [ 1016.836048][T19588] dump_stack_lvl+0xe8/0x150 [ 1016.836077][T19588] should_fail_ex+0x412/0x560 [ 1016.836101][T19588] should_failslab+0xa8/0x100 [ 1016.836120][T19588] __kmalloc_noprof+0xe8/0x760 [ 1016.836142][T19588] ? netlbl_mgmt_add_common+0x156/0x13b0 [ 1016.836254][T19588] ? __kmalloc_cache_noprof+0x15b/0x660 [ 1016.836280][T19588] netlbl_mgmt_add_common+0x156/0x13b0 [ 1016.836307][T19588] ? apparmor_current_getlsmprop_subj+0xce/0x150 [ 1016.836334][T19588] netlbl_mgmt_add+0x2bf/0x360 [ 1016.836356][T19588] ? __pfx_netlbl_mgmt_add+0x10/0x10 [ 1016.836378][T19588] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 1016.836398][T19588] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 1016.836425][T19588] genl_family_rcv_msg_doit+0x22a/0x330 [ 1016.836452][T19588] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1016.836485][T19588] ? bpf_lsm_capable+0x9/0x20 [ 1016.836502][T19588] ? security_capable+0x7e/0x2c0 [ 1016.836531][T19588] genl_rcv_msg+0x61c/0x7a0 [ 1016.836556][T19588] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1016.836574][T19588] ? __pfx_netlbl_mgmt_add+0x10/0x10 [ 1016.836607][T19588] netlink_rcv_skb+0x232/0x4b0 [ 1016.836630][T19588] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1016.836651][T19588] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1016.836689][T19588] ? down_read+0x270/0x2e0 [ 1016.836707][T19588] ? genl_rcv+0xd/0x40 [ 1016.836726][T19588] genl_rcv+0x28/0x40 [ 1016.836743][T19588] netlink_unicast+0x75c/0x8e0 [ 1016.836775][T19588] netlink_sendmsg+0x813/0xb40 [ 1016.836808][T19588] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1016.836834][T19588] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1016.836857][T19588] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1016.836881][T19588] ____sys_sendmsg+0x972/0x9f0 [ 1016.836897][T19588] ? __might_fault+0xaf/0x130 [ 1016.836924][T19588] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1016.836951][T19588] ? import_iovec+0x73/0xa0 [ 1016.836975][T19588] ___sys_sendmsg+0x2a5/0x360 [ 1016.836990][T19588] ? __lock_acquire+0x6b5/0x2cf0 [ 1016.837013][T19588] ? __pfx____sys_sendmsg+0x10/0x10 [ 1016.837067][T19588] ? __fget_files+0x2a/0x420 [ 1016.837086][T19588] ? __fget_files+0x3a0/0x420 [ 1016.837116][T19588] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1016.837136][T19588] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1016.837163][T19588] ? __pfx_ksys_write+0x10/0x10 [ 1016.837201][T19588] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1016.837220][T19588] do_syscall_64+0x174/0x580 [ 1016.837236][T19588] ? trace_irq_disable+0x3b/0x140 [ 1016.837258][T19588] ? clear_bhb_loop+0x40/0x90 [ 1016.837278][T19588] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1016.837295][T19588] RIP: 0033:0x7f605b79ce59 [ 1016.837312][T19588] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1016.837325][T19588] RSP: 002b:00007f605c6c7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1016.837343][T19588] RAX: ffffffffffffffda RBX: 00007f605ba15fa0 RCX: 00007f605b79ce59 [ 1016.837355][T19588] RDX: 0000000000000000 RSI: 0000200000000d80 RDI: 0000000000000006 [ 1016.837365][T19588] RBP: 00007f605c6c7090 R08: 0000000000000000 R09: 0000000000000000 [ 1016.837375][T19588] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1016.837384][T19588] R13: 00007f605ba16038 R14: 00007f605ba15fa0 R15: 00007ffd2f86c998 [ 1016.837415][T19588] [ 1017.184887][T19593] validate_nla: 60 callbacks suppressed [ 1017.184903][T19593] netlink: 'syz.2.19336': attribute type 19 has an invalid length. [ 1017.564389][T19599] tipc: Enabling of bearer rejected, failed to enable media [ 1017.725456][T19631] nbd: couldn't find device at index 2958377 [ 1017.809601][ T29] audit: type=1804 audit(1780404878.517:79): pid=19629 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.19345" name="/newroot/4000/cgroup.controllers" dev="tmpfs" ino=20177 res=1 errno=0 [ 1017.829854][T17895] net_ratelimit: 94 callbacks suppressed [ 1017.829872][T17895] bond14: (slave syz_tun): failed to get link speed/duplex [ 1017.907362][ T29] audit: type=1800 audit(1780404878.537:80): pid=19629 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.19345" name="cgroup.controllers" dev="tmpfs" ino=20177 res=0 errno=0 [ 1017.930942][T17895] bond13: (slave dummy0): failed to get link speed/duplex [ 1018.088852][T17895] bond13: (slave dummy0): failed to get link speed/duplex [ 1018.118592][T17895] bond14: (slave syz_tun): failed to get link speed/duplex [ 1018.160267][T17895] bond17: (slave ip6gretap1): failed to get link speed/duplex [ 1018.218790][ T59] bond13: (slave dummy0): failed to get link speed/duplex [ 1018.251298][ T48] bond14: (slave syz_tun): failed to get link speed/duplex [ 1018.407090][ T12] bond13: (slave dummy0): failed to get link speed/duplex [ 1018.459371][T19667] FAULT_INJECTION: forcing a failure. [ 1018.459371][T19667] name failslab, interval 1, probability 0, space 0, times 0 [ 1018.472586][T19667] CPU: 1 UID: 0 PID: 19667 Comm: syz.6.19358 Not tainted syzkaller #0 PREEMPT(full) [ 1018.472607][T19667] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1018.472617][T19667] Call Trace: [ 1018.472624][T19667] [ 1018.472632][T19667] dump_stack_lvl+0xe8/0x150 [ 1018.472656][T19667] should_fail_ex+0x412/0x560 [ 1018.472689][T19667] should_failslab+0xa8/0x100 [ 1018.472708][T19667] __kmalloc_noprof+0xe8/0x760 [ 1018.472727][T19667] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 1018.472750][T19667] genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 1018.472775][T19667] genl_family_rcv_msg_doit+0xd9/0x330 [ 1018.472797][T19667] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1018.472821][T19667] ? apparmor_capable+0x126/0x170 [ 1018.472839][T19667] ? bpf_lsm_capable+0x9/0x20 [ 1018.472854][T19667] ? security_capable+0x7e/0x2c0 [ 1018.472882][T19667] genl_rcv_msg+0x61c/0x7a0 [ 1018.472907][T19667] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1018.472925][T19667] ? __pfx_netlbl_calipso_remove+0x10/0x10 [ 1018.473032][T19667] netlink_rcv_skb+0x232/0x4b0 [ 1018.473054][T19667] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1018.473075][T19667] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1018.473113][T19667] ? down_read+0x270/0x2e0 [ 1018.473129][T19667] ? genl_rcv+0xd/0x40 [ 1018.473148][T19667] genl_rcv+0x28/0x40 [ 1018.473163][T19667] netlink_unicast+0x75c/0x8e0 [ 1018.473196][T19667] netlink_sendmsg+0x813/0xb40 [ 1018.473226][T19667] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1018.473252][T19667] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1018.473276][T19667] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1018.473300][T19667] ____sys_sendmsg+0x972/0x9f0 [ 1018.473317][T19667] ? __might_fault+0xaf/0x130 [ 1018.473343][T19667] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1018.473369][T19667] ? import_iovec+0x73/0xa0 [ 1018.473393][T19667] ___sys_sendmsg+0x2a5/0x360 [ 1018.473408][T19667] ? __lock_acquire+0x6b5/0x2cf0 [ 1018.473428][T19667] ? __pfx____sys_sendmsg+0x10/0x10 [ 1018.473467][T19667] ? __fget_files+0x2a/0x420 [ 1018.473481][T19667] ? __fget_files+0x3a0/0x420 [ 1018.473502][T19667] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1018.473516][T19667] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1018.473542][T19667] ? __pfx_ksys_write+0x10/0x10 [ 1018.473577][T19667] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1018.473595][T19667] do_syscall_64+0x174/0x580 [ 1018.473611][T19667] ? trace_irq_disable+0x3b/0x140 [ 1018.473633][T19667] ? clear_bhb_loop+0x40/0x90 [ 1018.473652][T19667] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1018.473675][T19667] RIP: 0033:0x7f40ca79ce59 [ 1018.473691][T19667] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1018.473703][T19667] RSP: 002b:00007f40cb622028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1018.473720][T19667] RAX: ffffffffffffffda RBX: 00007f40caa15fa0 RCX: 00007f40ca79ce59 [ 1018.473731][T19667] RDX: 0000000000000000 RSI: 0000200000000600 RDI: 0000000000000004 [ 1018.473740][T19667] RBP: 00007f40cb622090 R08: 0000000000000000 R09: 0000000000000000 [ 1018.473748][T19667] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1018.473757][T19667] R13: 00007f40caa16038 R14: 00007f40caa15fa0 R15: 00007ffdc006eb98 [ 1018.473778][T19667] [ 1018.857109][T11050] bond17: (slave ip6gretap1): failed to get link speed/duplex [ 1018.875182][T19671] netlink: 'syz.6.19360': attribute type 1 has an invalid length. [ 1018.948468][T19671] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1018.995078][T11050] bond17: (slave ip6gretap1): failed to get link speed/duplex [ 1019.025285][T19681] FAULT_INJECTION: forcing a failure. [ 1019.025285][T19681] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1019.041903][T19681] CPU: 1 UID: 0 PID: 19681 Comm: syz.6.19364 Not tainted syzkaller #0 PREEMPT(full) [ 1019.041925][T19681] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1019.041935][T19681] Call Trace: [ 1019.041943][T19681] [ 1019.041956][T19681] dump_stack_lvl+0xe8/0x150 [ 1019.041981][T19681] should_fail_ex+0x412/0x560 [ 1019.042006][T19681] _copy_from_user+0x2d/0xb0 [ 1019.042026][T19681] ___sys_recvmsg+0x175/0x590 [ 1019.042050][T19681] ? __pfx____sys_recvmsg+0x10/0x10 [ 1019.042072][T19681] ? __fget_files+0x2a/0x420 [ 1019.042121][T19681] do_recvmmsg+0x334/0x800 [ 1019.042147][T19681] ? __pfx_do_recvmmsg+0x10/0x10 [ 1019.042176][T19681] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1019.042211][T19681] __x64_sys_recvmmsg+0x198/0x250 [ 1019.042231][T19681] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1019.042257][T19681] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1019.042275][T19681] do_syscall_64+0x174/0x580 [ 1019.042291][T19681] ? trace_irq_disable+0x3b/0x140 [ 1019.042313][T19681] ? clear_bhb_loop+0x40/0x90 [ 1019.042332][T19681] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1019.042348][T19681] RIP: 0033:0x7f40ca79ce59 [ 1019.042364][T19681] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1019.042376][T19681] RSP: 002b:00007f40cb622028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1019.042393][T19681] RAX: ffffffffffffffda RBX: 00007f40caa15fa0 RCX: 00007f40ca79ce59 [ 1019.042404][T19681] RDX: 000000000000005b RSI: 00002000000021c0 RDI: 0000000000000003 [ 1019.042414][T19681] RBP: 00007f40cb622090 R08: 0000000000000000 R09: 0000000000000000 [ 1019.042423][T19681] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 1019.042432][T19681] R13: 00007f40caa16038 R14: 00007f40caa15fa0 R15: 00007ffdc006eb98 [ 1019.042460][T19681] [ 1019.450276][T19697] tipc: Enabling of bearer rejected, already enabled [ 1019.462240][T19697] __nla_validate_parse: 2 callbacks suppressed [ 1019.462255][T19697] netlink: 12 bytes leftover after parsing attributes in process `syz.6.19368'. [ 1019.479736][T19700] netlink: 'syz.2.19369': attribute type 13 has an invalid length. [ 1019.507129][T19700] erspan0: refused to change device tx_queue_len [ 1019.607969][T19702] netlink: 52 bytes leftover after parsing attributes in process `syz.6.19370'. [ 1019.712640][T19708] netlink: 212344 bytes leftover after parsing attributes in process `syz.3.19372'. [ 1019.870524][T19717] nbd: couldn't find device at index -13818839 [ 1019.929762][T19724] netlink: 24 bytes leftover after parsing attributes in process `syz.7.19375'. [ 1019.942536][T19723] IPVS: set_ctl: invalid protocol: 29 224.0.0.1:20002 [ 1022.858049][ T48] net_ratelimit: 96 callbacks suppressed [ 1022.858069][ T48] bond13: (slave dummy0): failed to get link speed/duplex [ 1022.878024][ T48] bond17: (slave ip6gretap1): failed to get link speed/duplex [ 1022.896952][ T48] bond14: (slave syz_tun): failed to get link speed/duplex [ 1022.975200][T19727] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1022.984223][ T59] bond13: (slave dummy0): failed to get link speed/duplex [ 1022.991485][ T59] bond17: (slave ip6gretap1): failed to get link speed/duplex [ 1023.051227][T17895] bond14: (slave syz_tun): failed to get link speed/duplex [ 1023.089397][T17895] bond13: (slave dummy0): failed to get link speed/duplex [ 1023.128118][T17895] bond17: (slave ip6gretap1): failed to get link speed/duplex [ 1023.175768][T19769] FAULT_INJECTION: forcing a failure. [ 1023.175768][T19769] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1023.199586][T19771] sock: sock_set_timeout: `syz.3.19392' (pid 19771) tries to set negative timeout [ 1023.206319][ T48] bond14: (slave syz_tun): failed to get link speed/duplex [ 1023.248517][T19769] CPU: 1 UID: 0 PID: 19769 Comm: syz.2.19389 Not tainted syzkaller #0 PREEMPT(full) [ 1023.248539][T19769] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1023.248550][T19769] Call Trace: [ 1023.248557][T19769] [ 1023.248565][T19769] dump_stack_lvl+0xe8/0x150 [ 1023.248590][T19769] should_fail_ex+0x412/0x560 [ 1023.248615][T19769] _copy_from_user+0x2d/0xb0 [ 1023.248636][T19769] kstrtouint_from_user+0xd6/0x180 [ 1023.248657][T19769] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 1023.248691][T19769] proc_fail_nth_write+0x8e/0x210 [ 1023.248713][T19769] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1023.248739][T19769] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1023.248761][T19769] vfs_write+0x29a/0xb90 [ 1023.248792][T19769] ? __pfx_vfs_write+0x10/0x10 [ 1023.248815][T19769] ? __fget_files+0x2a/0x420 [ 1023.248839][T19769] ? __fget_files+0x3a0/0x420 [ 1023.248856][T19769] ? __fget_files+0x2a/0x420 [ 1023.248884][T19769] ksys_write+0x150/0x270 [ 1023.248908][T19769] ? __pfx_ksys_write+0x10/0x10 [ 1023.248939][T19769] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1023.248958][T19769] do_syscall_64+0x174/0x580 [ 1023.248974][T19769] ? trace_irq_disable+0x3b/0x140 [ 1023.248995][T19769] ? clear_bhb_loop+0x40/0x90 [ 1023.249017][T19769] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1023.249033][T19769] RIP: 0033:0x7f1586f5d68e [ 1023.249049][T19769] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1023.249064][T19769] RSP: 002b:00007f1587ea5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1023.249082][T19769] RAX: ffffffffffffffda RBX: 00007f1587ea66c0 RCX: 00007f1586f5d68e [ 1023.249094][T19769] RDX: 0000000000000001 RSI: 00007f1587ea60a0 RDI: 0000000000000003 [ 1023.249104][T19769] RBP: 00007f1587ea6090 R08: 0000000000000000 R09: 0000000000000000 [ 1023.249115][T19769] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1023.249125][T19769] R13: 00007f1587216038 R14: 00007f1587215fa0 R15: 00007fff612d05b8 [ 1023.249155][T19769] [ 1023.637548][T19784] netlink: 192 bytes leftover after parsing attributes in process `syz.7.19393'. [ 1023.721941][T19786] netlink: 8 bytes leftover after parsing attributes in process `syz.7.19398'. [ 1023.731492][T19786] netlink: 8 bytes leftover after parsing attributes in process `syz.7.19398'. [ 1023.764252][T19789] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode [ 1023.777704][T19789] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode [ 1023.798308][T19789] netlink: 'syz.3.19396': attribute type 1 has an invalid length. [ 1023.820550][T19789] tipc: Enabling of bearer rejected, already enabled [ 1024.354523][T19773] netlink: 4 bytes leftover after parsing attributes in process `syz.6.19391'. [ 1024.773085][T19839] syzkaller0: entered promiscuous mode [ 1024.780119][T19839] syzkaller0: entered allmulticast mode [ 1024.906179][ C1] vxcan0: j1939_tp_rxtimer: 0xffff8880588ad000: rx timeout, send abort [ 1025.399482][ C1] vxcan0: j1939_tp_rxtimer: 0xffff888094aa6800: rx timeout, send abort [ 1025.414517][ C1] vxcan0: j1939_tp_rxtimer: 0xffff8880588ad000: abort rx timeout. Force session deactivation [ 1025.648973][T19856] tc action pedit offset must be on 32 bit boundaries [ 1025.839467][T19871] netlink: 212368 bytes leftover after parsing attributes in process `syz.6.19427'. [ 1025.907824][ C1] vxcan0: j1939_tp_rxtimer: 0xffff888094aa6800: abort rx timeout. Force session deactivation [ 1026.055538][ T5648] Bluetooth: hci7: link tx timeout [ 1026.065781][ T5648] Bluetooth: hci7: killing stalled connection 11:aa:aa:aa:aa:aa [ 1026.096208][ T5648] Bluetooth: hci7: link tx timeout [ 1026.102177][ T5648] Bluetooth: hci7: killing stalled connection 11:aa:aa:aa:aa:aa [ 1026.185325][T19888] netlink: 284 bytes leftover after parsing attributes in process `syz.3.19433'. [ 1026.230215][T19890] ipt_ECN: cannot use operation on non-tcp rule [ 1026.480328][T19902] netlink: 8 bytes leftover after parsing attributes in process `syz.3.19436'. [ 1026.757380][T19909] nbd3: detected capacity change from 0 to 63 [ 1027.005117][T19925] ipt_ECN: cannot use operation on non-tcp rule [ 1027.017696][T19907] nbd4: detected capacity change from 0 to 63 [ 1027.054852][T19916] block nbd4: Receive control failed (result -104) [ 1027.055547][ T5648] block nbd3: Receive control failed (result -32) [ 1027.062264][T19926] block nbd4: Receive control failed (result -32) [ 1027.069468][T15189] block nbd3: Receive control failed (result -32) [ 1027.179281][T19929] netlink: 12 bytes leftover after parsing attributes in process `syz.2.19442'. [ 1027.221992][T19933] netlink: 192 bytes leftover after parsing attributes in process `syz.4.19445'. [ 1027.304698][T19929] 8021q: adding VLAN 0 to HW filter on device bond23 [ 1027.329204][T19945] netlink: 28 bytes leftover after parsing attributes in process `syz.3.19447'. [ 1027.344314][T19934] netlink: 'syz.6.19444': attribute type 1 has an invalid length. [ 1027.362298][T19934] netlink: 224 bytes leftover after parsing attributes in process `syz.6.19444'. [ 1027.391434][T19950] netlink: 16 bytes leftover after parsing attributes in process `syz.3.19447'. [ 1027.927277][ T59] net_ratelimit: 113 callbacks suppressed [ 1027.927296][ T59] bond14: (slave syz_tun): failed to get link speed/duplex [ 1027.960569][T19977] netlink: 8 bytes leftover after parsing attributes in process `syz.7.19454'. [ 1027.979114][ T57] bond17: (slave ip6gretap1): failed to get link speed/duplex [ 1028.017282][ T57] bond13: (slave dummy0): failed to get link speed/duplex [ 1028.038423][T19984] netlink: 16215 bytes leftover after parsing attributes in process `syz.2.19456'. [ 1028.068563][ T59] bond14: (slave syz_tun): failed to get link speed/duplex [ 1028.117989][T11050] bond17: (slave ip6gretap1): failed to get link speed/duplex [ 1028.168606][T15189] Bluetooth: hci7: command 0x0406 tx timeout [ 1028.174825][ T57] bond13: (slave dummy0): failed to get link speed/duplex [ 1028.198634][T19991] netlink: 'syz.4.19458': attribute type 4 has an invalid length. [ 1028.327939][ T57] bond17: (slave ip6gretap1): failed to get link speed/duplex [ 1028.355019][T19998] netlink: 'syz.2.19460': attribute type 58 has an invalid length. [ 1028.379060][ T57] bond14: (slave syz_tun): failed to get link speed/duplex [ 1028.411021][T20002] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 1028.567608][T11042] bond13: (slave dummy0): failed to get link speed/duplex [ 1029.063211][T20025] bond13: (slave dummy0): Removing an active aggregator [ 1029.113949][T20025] bond13: (slave dummy0): Releasing backup interface [ 1029.772422][T20066] ip6t_srh: unknown srh match flags 5F28 [ 1029.979967][T20074] bridge_slave_1: left allmulticast mode [ 1029.985826][T20074] bridge_slave_1: left promiscuous mode [ 1030.010690][T20074] bridge0: port 2(bridge_slave_1) entered disabled state [ 1030.021541][ T29] audit: type=1804 audit(1780404890.737:81): pid=20072 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.19483" name="/newroot/4030/cgroup.controllers" dev="tmpfs" ino=20331 res=1 errno=0 [ 1030.074081][T20074] bridge_slave_0: left allmulticast mode [ 1030.095158][ T29] audit: type=1800 audit(1780404890.737:82): pid=20072 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.19483" name="cgroup.controllers" dev="tmpfs" ino=20331 res=0 errno=0 [ 1030.123396][T20074] bridge_slave_0: left promiscuous mode [ 1030.139860][T20074] bridge0: port 1(bridge_slave_0) entered disabled state [ 1030.700639][T20093] FAULT_INJECTION: forcing a failure. [ 1030.700639][T20093] name failslab, interval 1, probability 0, space 0, times 0 [ 1030.733537][T20093] CPU: 1 UID: 0 PID: 20093 Comm: syz.7.19489 Not tainted syzkaller #0 PREEMPT(full) [ 1030.733583][T20093] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1030.733607][T20093] Call Trace: [ 1030.733623][T20093] [ 1030.733633][T20093] dump_stack_lvl+0xe8/0x150 [ 1030.733674][T20093] should_fail_ex+0x412/0x560 [ 1030.733699][T20093] should_failslab+0xa8/0x100 [ 1030.733718][T20093] __kmalloc_noprof+0xe8/0x760 [ 1030.733740][T20093] ? tomoyo_encode+0x28b/0x550 [ 1030.733763][T20093] tomoyo_encode+0x28b/0x550 [ 1030.733789][T20093] tomoyo_realpath_from_path+0x58d/0x5d0 [ 1030.733807][T20093] ? tomoyo_domain+0xd7/0x130 [ 1030.733828][T20093] ? tomoyo_path_number_perm+0x219/0x630 [ 1030.733849][T20093] tomoyo_path_number_perm+0x246/0x630 [ 1030.733872][T20093] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1030.733891][T20093] ? __lock_acquire+0x6b5/0x2cf0 [ 1030.733927][T20093] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 1030.733966][T20093] ? __fget_files+0x2a/0x420 [ 1030.733987][T20093] ? __fget_files+0x2a/0x420 [ 1030.734002][T20093] ? __fget_files+0x3a0/0x420 [ 1030.734019][T20093] ? __fget_files+0x2a/0x420 [ 1030.734041][T20093] security_file_ioctl+0xc3/0x2a0 [ 1030.734064][T20093] __se_sys_ioctl+0x47/0x170 [ 1030.734085][T20093] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1030.734103][T20093] do_syscall_64+0x174/0x580 [ 1030.734119][T20093] ? trace_irq_disable+0x3b/0x140 [ 1030.734140][T20093] ? clear_bhb_loop+0x40/0x90 [ 1030.734161][T20093] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1030.734175][T20093] RIP: 0033:0x7fa0d279ce59 [ 1030.734191][T20093] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1030.734203][T20093] RSP: 002b:00007fa0d35b2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1030.734220][T20093] RAX: ffffffffffffffda RBX: 00007fa0d2a15fa0 RCX: 00007fa0d279ce59 [ 1030.734231][T20093] RDX: 0000200000000880 RSI: 0000000000008b05 RDI: 0000000000000004 [ 1030.734242][T20093] RBP: 00007fa0d35b2090 R08: 0000000000000000 R09: 0000000000000000 [ 1030.734251][T20093] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1030.734260][T20093] R13: 00007fa0d2a16038 R14: 00007fa0d2a15fa0 R15: 00007ffc382c7a98 [ 1030.734288][T20093] [ 1030.734317][T20093] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1030.812205][T20099] FAULT_INJECTION: forcing a failure. [ 1030.812205][T20099] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1031.066823][T20099] CPU: 0 UID: 0 PID: 20099 Comm: syz.2.19492 Not tainted syzkaller #0 PREEMPT(full) [ 1031.066847][T20099] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1031.066856][T20099] Call Trace: [ 1031.066863][T20099] [ 1031.066871][T20099] dump_stack_lvl+0xe8/0x150 [ 1031.066896][T20099] should_fail_ex+0x412/0x560 [ 1031.066920][T20099] _copy_from_user+0x2d/0xb0 [ 1031.066941][T20099] ___sys_recvmsg+0x175/0x590 [ 1031.066964][T20099] ? __pfx____sys_recvmsg+0x10/0x10 [ 1031.066986][T20099] ? __fget_files+0x2a/0x420 [ 1031.067033][T20099] do_recvmmsg+0x334/0x800 [ 1031.067059][T20099] ? __pfx_do_recvmmsg+0x10/0x10 [ 1031.067087][T20099] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1031.067120][T20099] __x64_sys_recvmmsg+0x198/0x250 [ 1031.067140][T20099] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1031.067164][T20099] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1031.067181][T20099] do_syscall_64+0x174/0x580 [ 1031.067196][T20099] ? trace_irq_disable+0x3b/0x140 [ 1031.067217][T20099] ? clear_bhb_loop+0x40/0x90 [ 1031.067237][T20099] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1031.067252][T20099] RIP: 0033:0x7f1586f9ce59 [ 1031.067276][T20099] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1031.067290][T20099] RSP: 002b:00007f1587ea6028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1031.067308][T20099] RAX: ffffffffffffffda RBX: 00007f1587215fa0 RCX: 00007f1586f9ce59 [ 1031.067320][T20099] RDX: 000000000000005b RSI: 00002000000021c0 RDI: 0000000000000003 [ 1031.067329][T20099] RBP: 00007f1587ea6090 R08: 0000000000000000 R09: 0000000000000000 [ 1031.067339][T20099] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000002 [ 1031.067348][T20099] R13: 00007f1587216038 R14: 00007f1587215fa0 R15: 00007fff612d05b8 [ 1031.067376][T20099] [ 1031.080209][T20104] __nla_validate_parse: 10 callbacks suppressed [ 1031.080225][T20104] netlink: 8 bytes leftover after parsing attributes in process `syz.6.19491'. [ 1031.315301][T20109] netlink: 192 bytes leftover after parsing attributes in process `syz.7.19493'. [ 1031.328518][T20115] netlink: 232 bytes leftover after parsing attributes in process `syz.4.19496'. [ 1031.378976][T20112] netlink: 4 bytes leftover after parsing attributes in process `syz.2.19495'. [ 1031.548523][T20121] netlink: 8 bytes leftover after parsing attributes in process `syz.4.19498'. [ 1031.561480][T20123] netlink: 4 bytes leftover after parsing attributes in process `syz.7.19499'. [ 1031.701285][T20127] netlink: 4 bytes leftover after parsing attributes in process `syz.3.19501'. [ 1031.750653][T20127] netlink: 4 bytes leftover after parsing attributes in process `syz.3.19501'. [ 1031.768044][T20132] netlink: 12 bytes leftover after parsing attributes in process `syz.3.19501'. [ 1031.777329][T20135] netlink: 8 bytes leftover after parsing attributes in process `syz.2.19503'. [ 1032.461713][T20172] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 1032.471473][T20163] syzkaller0: entered promiscuous mode [ 1032.488613][T20163] syzkaller0: entered allmulticast mode [ 1032.813535][T20187] tipc: Enabling of bearer rejected, already enabled [ 1032.936972][ T48] net_ratelimit: 66 callbacks suppressed [ 1032.936989][ T48] bond14: (slave syz_tun): failed to get link speed/duplex [ 1032.987108][ T48] bond17: (slave ip6gretap1): failed to get link speed/duplex [ 1033.080671][T20201] xt_hashlimit: size too large, truncated to 1048576 [ 1033.087641][ T48] bond14: (slave syz_tun): failed to get link speed/duplex [ 1033.125418][T20205] nbd: couldn't find device at index 2958377 [ 1033.138708][ T57] bond17: (slave ip6gretap1): failed to get link speed/duplex [ 1033.276764][ T48] bond14: (slave syz_tun): failed to get link speed/duplex [ 1033.306879][ T57] bond17: (slave ip6gretap1): failed to get link speed/duplex [ 1033.432343][T11042] bond14: (slave syz_tun): failed to get link speed/duplex [ 1033.476987][T11042] bond17: (slave ip6gretap1): failed to get link speed/duplex [ 1033.549249][T20228] tipc: Enabling of bearer rejected, already enabled [ 1033.587387][ T12] bond14: (slave syz_tun): failed to get link speed/duplex [ 1033.622351][ T12] bond17: (slave ip6gretap1): failed to get link speed/duplex [ 1033.691563][T20233] bond0: Caught tx_queue_len zero misconfig [ 1033.871151][T20234] bond24: option packets_per_slave: invalid value (18446744073709551615) [ 1033.931661][T20234] bond24: option packets_per_slave: allowed values 0 - 65535 [ 1033.953178][T20234] bond24 (unregistering): Released all slaves [ 1034.227888][T20252] syzkaller1: entered promiscuous mode [ 1034.267357][T20252] syzkaller1: entered allmulticast mode [ 1034.439876][T20262] sch_tbf: peakrate 11 is lower than or equals to rate 996173156578218475 ! [ 1034.592933][T20262] syzkaller0: entered promiscuous mode [ 1034.600118][T20262] syzkaller0: entered allmulticast mode [ 1034.971178][ T29] audit: type=1804 audit(1780404895.677:83): pid=20289 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.7.19551" name="/newroot/124/cgroup.controllers" dev="tmpfs" ino=652 res=1 errno=0 [ 1035.046240][ T29] audit: type=1800 audit(1780404895.677:84): pid=20289 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.19551" name="cgroup.controllers" dev="tmpfs" ino=652 res=0 errno=0 [ 1037.362164][T20282] tipc: Enabling of bearer rejected, already enabled [ 1037.370532][T20286] __nla_validate_parse: 14 callbacks suppressed [ 1037.370544][T20286] netlink: 12 bytes leftover after parsing attributes in process `syz.3.19549'. [ 1037.405699][T20297] ip_vti0: entered promiscuous mode [ 1037.573229][T20306] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.19555'. [ 1037.590575][T20308] netlink: 8 bytes leftover after parsing attributes in process `syz.6.19557'. [ 1037.617323][T20304] 8021q: adding VLAN 0 to HW filter on device bond24 [ 1037.625535][T20304] bridge0: port 1(bond24) entered blocking state [ 1037.632912][T20304] bridge0: port 1(bond24) entered disabled state [ 1037.639874][T20304] bond24: entered allmulticast mode [ 1037.650430][T20304] bond24: entered promiscuous mode [ 1037.665831][T20308] tipc: Resetting bearer [ 1037.779140][T20305] bond27: Removing last arp target with arp_interval on [ 1037.803453][T20308] tipc: Resetting bearer [ 1037.949978][ T59] net_ratelimit: 10 callbacks suppressed [ 1037.949995][ T59] bond17: (slave ip6gretap1): failed to get link speed/duplex [ 1038.037876][ T57] bond14: (slave syz_tun): failed to get link speed/duplex [ 1038.133892][ T29] audit: type=1804 audit(1780404898.837:85): pid=20335 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.19563" name="/newroot/3924/cgroup.controllers" dev="tmpfs" ino=19803 res=1 errno=0 [ 1038.173037][T17895] bond17: (slave ip6gretap1): failed to get link speed/duplex [ 1038.235621][ T12] bond14: (slave syz_tun): failed to get link speed/duplex [ 1038.264114][ T29] audit: type=1800 audit(1780404898.837:86): pid=20335 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.19563" name="cgroup.controllers" dev="tmpfs" ino=19803 res=0 errno=0 [ 1038.364595][ T29] audit: type=1804 audit(1780404898.897:87): pid=20337 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.19564" name="/newroot/3959/cgroup.controllers" dev="tmpfs" ino=19988 res=1 errno=0 [ 1038.467659][ T29] audit: type=1800 audit(1780404898.897:88): pid=20337 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.19564" name="cgroup.controllers" dev="tmpfs" ino=19988 res=0 errno=0 [ 1038.496369][T20339] syzkaller0: entered promiscuous mode [ 1038.514139][T20339] syzkaller0: entered allmulticast mode [ 1038.998538][T20373] FAULT_INJECTION: forcing a failure. [ 1038.998538][T20373] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1039.012748][T20373] CPU: 1 UID: 0 PID: 20373 Comm: syz.2.19572 Not tainted syzkaller #0 PREEMPT(full) [ 1039.012769][T20373] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1039.012777][T20373] Call Trace: [ 1039.012784][T20373] [ 1039.012792][T20373] dump_stack_lvl+0xe8/0x150 [ 1039.012816][T20373] should_fail_ex+0x412/0x560 [ 1039.012840][T20373] _copy_to_user+0x31/0xb0 [ 1039.012861][T20373] simple_read_from_buffer+0xe1/0x170 [ 1039.012886][T20373] proc_fail_nth_read+0x1bb/0x230 [ 1039.012909][T20373] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1039.012930][T20373] ? rw_verify_area+0x2a6/0x4d0 [ 1039.012948][T20373] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1039.012969][T20373] vfs_read+0x20c/0xa70 [ 1039.012995][T20373] ? __pfx___mutex_lock+0x10/0x10 [ 1039.013013][T20373] ? __pfx_vfs_read+0x10/0x10 [ 1039.013034][T20373] ? __fget_files+0x2a/0x420 [ 1039.013058][T20373] ? __fget_files+0x3a0/0x420 [ 1039.013094][T20373] ? __fget_files+0x2a/0x420 [ 1039.013119][T20373] ksys_read+0x150/0x270 [ 1039.013142][T20373] ? __pfx_ksys_read+0x10/0x10 [ 1039.013170][T20373] ? __pfx_sock_ioctl+0x10/0x10 [ 1039.013195][T20373] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1039.013213][T20373] do_syscall_64+0x174/0x580 [ 1039.013229][T20373] ? trace_irq_disable+0x3b/0x140 [ 1039.013251][T20373] ? clear_bhb_loop+0x40/0x90 [ 1039.013269][T20373] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1039.013283][T20373] RIP: 0033:0x7f1586f5d68e [ 1039.013298][T20373] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1039.013311][T20373] RSP: 002b:00007f1587ea5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1039.013328][T20373] RAX: ffffffffffffffda RBX: 00007f1587ea66c0 RCX: 00007f1586f5d68e [ 1039.013338][T20373] RDX: 000000000000000f RSI: 00007f1587ea60a0 RDI: 0000000000000003 [ 1039.013347][T20373] RBP: 00007f1587ea6090 R08: 0000000000000000 R09: 0000000000000000 [ 1039.013356][T20373] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1039.013364][T20373] R13: 00007f1587216038 R14: 00007f1587215fa0 R15: 00007fff612d05b8 [ 1039.013392][T20373] [ 1039.607695][T20380] netlink: 12 bytes leftover after parsing attributes in process `syz.2.19574'. [ 1041.697125][ T57] bond14: (slave syz_tun): failed to get link speed/duplex [ 1041.740930][ T35] bond17: (slave ip6gretap1): failed to get link speed/duplex [ 1041.788872][ T29] audit: type=1804 audit(1780404902.487:89): pid=20388 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.19576" name="/newroot/3963/cgroup.controllers" dev="tmpfs" ino=20013 res=1 errno=0 [ 1041.830842][ T12] bond14: (slave syz_tun): failed to get link speed/duplex [ 1041.878110][ T12] bond17: (slave ip6gretap1): failed to get link speed/duplex [ 1041.882719][ T29] audit: type=1800 audit(1780404902.487:90): pid=20388 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.19576" name="cgroup.controllers" dev="tmpfs" ino=20013 res=0 errno=0 [ 1041.910566][T20400] netlink: 8 bytes leftover after parsing attributes in process `syz.2.19577'. [ 1041.947862][ T57] bond14: (slave syz_tun): failed to get link speed/duplex [ 1042.037450][ T1175] bond17: (slave ip6gretap1): failed to get link speed/duplex [ 1042.153018][T20412] netlink: 4 bytes leftover after parsing attributes in process `syz.6.19582'. [ 1042.762876][T20438] netlink: 'syz.6.19589': attribute type 1 has an invalid length. [ 1042.771523][T20438] netlink: 228 bytes leftover after parsing attributes in process `syz.6.19589'. [ 1042.863364][T20432] 8021q: adding VLAN 0 to HW filter on device bond24 [ 1042.908548][T20432] bridge0: port 1(bond24) entered blocking state [ 1042.923778][ T29] audit: type=1804 audit(1780404903.627:91): pid=20443 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.6.19592" name="/newroot/212/cgroup.controllers" dev="tmpfs" ino=1096 res=1 errno=0 [ 1042.951531][ T29] audit: type=1800 audit(1780404903.627:92): pid=20443 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.19592" name="cgroup.controllers" dev="tmpfs" ino=1096 res=0 errno=0 [ 1042.951901][T20432] bridge0: port 1(bond24) entered disabled state [ 1042.986257][T20449] netlink: 'syz.7.19590': attribute type 7 has an invalid length. [ 1043.011412][T20449] netlink: 140 bytes leftover after parsing attributes in process `syz.7.19590'. [ 1043.019763][T20432] bond24: entered allmulticast mode [ 1043.061382][T20432] bond24: entered promiscuous mode [ 1043.089764][T20432] bridge0: port 1(bond24) entered blocking state [ 1043.096262][T20432] bridge0: port 1(bond24) entered listening state [ 1043.181814][T20452] net_ratelimit: 9 callbacks suppressed [ 1043.181831][T20452] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 1043.287059][T11042] bond17: (slave ip6gretap1): failed to get link speed/duplex [ 1043.340391][T11050] bond14: (slave syz_tun): failed to get link speed/duplex [ 1043.418666][ T57] bond17: (slave ip6gretap1): failed to get link speed/duplex [ 1043.457777][T11042] bond14: (slave syz_tun): failed to get link speed/duplex [ 1043.547113][T11050] bond17: (slave ip6gretap1): failed to get link speed/duplex [ 1043.571718][T20470] netlink: 8 bytes leftover after parsing attributes in process `syz.6.19597'. [ 1043.603819][ T12] bond14: (slave syz_tun): failed to get link speed/duplex [ 1043.681589][T20476] syzkaller0: entered promiscuous mode [ 1043.709366][T20476] syzkaller0: entered allmulticast mode [ 1043.728822][ T1175] bond17: (slave ip6gretap1): failed to get link speed/duplex [ 1043.776354][T17895] bridge0: port 1(bond24) entered disabled state [ 1043.812090][T20476] tipc: Enabled bearer , priority 0 [ 1043.855183][T11042] bond14: (slave syz_tun): failed to get link speed/duplex [ 1043.890341][T20475] tipc: Resetting bearer [ 1043.994860][T20494] netlink: 'syz.2.19602': attribute type 9 has an invalid length. [ 1044.009150][T20475] tipc: Disabling bearer [ 1044.047638][ T1175] bond14: (slave syz_tun): failed to get link speed/duplex [ 1044.501230][T20505] netlink: 4 bytes leftover after parsing attributes in process `syz.3.19605'. [ 1044.522764][T20515] netlink: 128 bytes leftover after parsing attributes in process `syz.7.19606'. [ 1044.546151][T20515] netlink: 20 bytes leftover after parsing attributes in process `syz.7.19606'. [ 1044.610209][T20510] netlink: 68 bytes leftover after parsing attributes in process `syz.7.19606'. [ 1044.663211][T20510] netlink: 12 bytes leftover after parsing attributes in process `syz.7.19606'. [ 1044.685001][T20517] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1044.722725][ T1175] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0x17 [ 1044.753958][T20515] netlink: 20 bytes leftover after parsing attributes in process `syz.7.19606'. [ 1045.164067][T20544] netlink: 16 bytes leftover after parsing attributes in process `syz.6.19614'. [ 1047.755570][T20554] syzkaller0: entered promiscuous mode [ 1047.763610][T20554] syzkaller0: entered allmulticast mode [ 1047.778211][T20572] tipc: Enabled bearer , priority 0 [ 1047.802704][T20553] tipc: Resetting bearer [ 1047.870766][T20553] tipc: Disabling bearer [ 1047.933173][T20581] netlink: 'syz.6.19623': attribute type 1 has an invalid length. [ 1047.967603][T20581] __nla_validate_parse: 4 callbacks suppressed [ 1047.967617][T20581] netlink: 2108 bytes leftover after parsing attributes in process `syz.6.19623'. [ 1048.059043][T20583] netlink: 'syz.6.19623': attribute type 1 has an invalid length. [ 1048.101936][T20583] netlink: 2108 bytes leftover after parsing attributes in process `syz.6.19623'. [ 1048.117651][T20585] netlink: 156 bytes leftover after parsing attributes in process `syz.2.19624'. [ 1048.148728][ T29] audit: type=1804 audit(1780404908.857:93): pid=20587 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.19625" name="/newroot/3934/cgroup.controllers" dev="tmpfs" ino=19856 res=1 errno=0 [ 1048.207520][T20504] net_ratelimit: 22 callbacks suppressed [ 1048.207537][T20504] bond14: (slave syz_tun): failed to get link speed/duplex [ 1048.222327][ T29] audit: type=1800 audit(1780404908.887:94): pid=20587 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.19625" name="cgroup.controllers" dev="tmpfs" ino=19856 res=0 errno=0 [ 1048.287668][T20504] bond17: (slave ip6gretap1): failed to get link speed/duplex [ 1048.376644][T20504] bond14: (slave syz_tun): failed to get link speed/duplex [ 1048.436739][ T59] bond17: (slave ip6gretap1): failed to get link speed/duplex [ 1048.497656][ T59] bond14: (slave syz_tun): failed to get link speed/duplex [ 1048.596930][ T59] bond17: (slave ip6gretap1): failed to get link speed/duplex [ 1048.773370][T20615] syzkaller0: entered promiscuous mode [ 1048.792340][T20615] syzkaller0: entered allmulticast mode [ 1048.820552][T20613] tipc: Started in network mode [ 1048.832072][T20613] tipc: Node identity b2706462828f, cluster identity 4711 [ 1048.858633][T20613] tipc: Enabled bearer , priority 0 [ 1048.912656][T20609] tipc: Resetting bearer [ 1048.978071][T20609] tipc: Disabling bearer [ 1049.007504][T20503] bond14: (slave syz_tun): failed to get link speed/duplex [ 1049.029412][T20503] bond17: (slave ip6gretap1): failed to get link speed/duplex [ 1049.127905][T20504] bond14: (slave syz_tun): failed to get link speed/duplex [ 1049.167447][ T59] bond17: (slave ip6gretap1): failed to get link speed/duplex [ 1049.244837][T20599] netlink: 4 bytes leftover after parsing attributes in process `syz.3.19630'. [ 1049.515702][T20644] netlink: 207952 bytes leftover after parsing attributes in process `syz.6.19645'. [ 1049.698620][T20652] netlink: 40 bytes leftover after parsing attributes in process `syz.3.19648'. [ 1049.955712][T20667] netlink: 300 bytes leftover after parsing attributes in process `syz.7.19656'. [ 1050.008855][T20667] netlink: 300 bytes leftover after parsing attributes in process `syz.7.19656'. [ 1050.064748][T20678] netlink: 'syz.6.19654': attribute type 1 has an invalid length. [ 1050.330229][T20693] FAULT_INJECTION: forcing a failure. [ 1050.330229][T20693] name failslab, interval 1, probability 0, space 0, times 0 [ 1050.359072][T20686] netlink: 4 bytes leftover after parsing attributes in process `syz.3.19658'. [ 1050.387442][T20693] CPU: 1 UID: 0 PID: 20693 Comm: syz.7.19662 Not tainted syzkaller #0 PREEMPT(full) [ 1050.387465][T20693] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1050.387474][T20693] Call Trace: [ 1050.387481][T20693] [ 1050.387489][T20693] dump_stack_lvl+0xe8/0x150 [ 1050.387515][T20693] should_fail_ex+0x412/0x560 [ 1050.387538][T20693] should_failslab+0xa8/0x100 [ 1050.387555][T20693] ? skb_clone+0x212/0x3a0 [ 1050.387573][T20693] kmem_cache_alloc_noprof+0x87/0x650 [ 1050.387594][T20693] ? sk_filter_trim_cap+0x19e/0xce0 [ 1050.387694][T20693] skb_clone+0x212/0x3a0 [ 1050.387714][T20693] __netlink_deliver_tap+0x404/0x850 [ 1050.387748][T20693] ? netlink_deliver_tap+0x2e/0x1b0 [ 1050.387771][T20693] netlink_deliver_tap+0x19c/0x1b0 [ 1050.387802][T20693] netlink_dump+0x8ed/0xe10 [ 1050.387835][T20693] ? __pfx_netlink_dump+0x10/0x10 [ 1050.387879][T20693] netlink_recvmsg+0x690/0xa50 [ 1050.387913][T20693] ? __pfx_netlink_recvmsg+0x10/0x10 [ 1050.387939][T20693] ? __lock_acquire+0x6b5/0x2cf0 [ 1050.387964][T20693] ? __pfx_netlink_recvmsg+0x10/0x10 [ 1050.387987][T20693] sock_recvmsg_nosec+0x10c/0x140 [ 1050.388010][T20693] ____sys_recvmsg+0x3e3/0x4a0 [ 1050.388037][T20693] ? __pfx_____sys_recvmsg+0x10/0x10 [ 1050.388069][T20693] ? import_iovec+0x73/0xa0 [ 1050.388093][T20693] ___sys_recvmsg+0x215/0x590 [ 1050.388116][T20693] ? __pfx____sys_recvmsg+0x10/0x10 [ 1050.388136][T20693] ? __fget_files+0x2a/0x420 [ 1050.388188][T20693] do_recvmmsg+0x334/0x800 [ 1050.388214][T20693] ? __pfx_do_recvmmsg+0x10/0x10 [ 1050.388243][T20693] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1050.388281][T20693] __x64_sys_recvmmsg+0x198/0x250 [ 1050.388300][T20693] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1050.388326][T20693] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1050.388345][T20693] do_syscall_64+0x174/0x580 [ 1050.388360][T20693] ? trace_irq_disable+0x3b/0x140 [ 1050.388383][T20693] ? clear_bhb_loop+0x40/0x90 [ 1050.388403][T20693] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1050.388418][T20693] RIP: 0033:0x7fa0d279ce59 [ 1050.388434][T20693] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1050.388447][T20693] RSP: 002b:00007fa0d35b2028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1050.388463][T20693] RAX: ffffffffffffffda RBX: 00007fa0d2a15fa0 RCX: 00007fa0d279ce59 [ 1050.388474][T20693] RDX: 000000000000005b RSI: 00002000000021c0 RDI: 0000000000000003 [ 1050.388484][T20693] RBP: 00007fa0d35b2090 R08: 0000000000000000 R09: 0000000000000000 [ 1050.388494][T20693] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000002 [ 1050.388503][T20693] R13: 00007fa0d2a16038 R14: 00007fa0d2a15fa0 R15: 00007ffc382c7a98 [ 1050.388532][T20693] [ 1050.738975][T20701] netlink: 'syz.4.19665': attribute type 9 has an invalid length. [ 1050.784512][T20699] netlink: 216 bytes leftover after parsing attributes in process `syz.7.19667'. [ 1051.134500][T20717] syzkaller0: entered promiscuous mode [ 1051.160161][T20717] syzkaller0: entered allmulticast mode [ 1051.276710][T20717] tipc: Enabled bearer , priority 0 [ 1051.308838][T20714] tipc: Resetting bearer [ 1051.395764][T20714] tipc: Disabling bearer [ 1051.471753][T20732] tipc: Invalid UDP bearer configuration [ 1051.471802][T20732] tipc: Enabling of bearer rejected, failed to enable media [ 1051.996307][T20764] xt_policy: output policy not valid in PREROUTING and INPUT [ 1052.221321][T20773] tipc: New replicast peer: 255.255.255.255 [ 1052.240780][T20773] tipc: Enabled bearer , priority 10 [ 1052.449626][T20786] FAULT_INJECTION: forcing a failure. [ 1052.449626][T20786] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1052.511672][T20786] CPU: 0 UID: 0 PID: 20786 Comm: syz.3.19696 Not tainted syzkaller #0 PREEMPT(full) [ 1052.511697][T20786] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1052.511707][T20786] Call Trace: [ 1052.511714][T20786] [ 1052.511722][T20786] dump_stack_lvl+0xe8/0x150 [ 1052.511748][T20786] should_fail_ex+0x412/0x560 [ 1052.511772][T20786] _copy_to_user+0x31/0xb0 [ 1052.511794][T20786] simple_read_from_buffer+0xe1/0x170 [ 1052.511819][T20786] proc_fail_nth_read+0x1bb/0x230 [ 1052.511843][T20786] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1052.511867][T20786] ? rw_verify_area+0x2a6/0x4d0 [ 1052.511888][T20786] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1052.511910][T20786] vfs_read+0x20c/0xa70 [ 1052.511938][T20786] ? __pfx___mutex_lock+0x10/0x10 [ 1052.511957][T20786] ? __pfx_vfs_read+0x10/0x10 [ 1052.511980][T20786] ? __fget_files+0x2a/0x420 [ 1052.512003][T20786] ? __fget_files+0x3a0/0x420 [ 1052.512021][T20786] ? __fget_files+0x2a/0x420 [ 1052.512049][T20786] ksys_read+0x150/0x270 [ 1052.512068][T20786] ? __pfx_ksys_read+0x10/0x10 [ 1052.512094][T20786] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1052.512108][T20786] do_syscall_64+0x174/0x580 [ 1052.512120][T20786] ? trace_irq_disable+0x3b/0x140 [ 1052.512153][T20786] ? clear_bhb_loop+0x40/0x90 [ 1052.512172][T20786] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1052.512185][T20786] RIP: 0033:0x7f605b75d68e [ 1052.512198][T20786] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1052.512209][T20786] RSP: 002b:00007f605c6c6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1052.512223][T20786] RAX: ffffffffffffffda RBX: 00007f605c6c76c0 RCX: 00007f605b75d68e [ 1052.512232][T20786] RDX: 000000000000000f RSI: 00007f605c6c70a0 RDI: 0000000000000003 [ 1052.512240][T20786] RBP: 00007f605c6c7090 R08: 0000000000000000 R09: 0000000000000000 [ 1052.512247][T20786] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1052.512255][T20786] R13: 00007f605ba16038 R14: 00007f605ba15fa0 R15: 00007ffd2f86c998 [ 1052.512276][T20786] [ 1053.206277][T20800] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1053.217931][ T48] net_ratelimit: 58 callbacks suppressed [ 1053.217948][ T48] bond14: (slave syz_tun): failed to get link speed/duplex [ 1053.310558][ T48] bond17: (slave ip6gretap1): failed to get link speed/duplex [ 1053.357664][ T3101] tipc: Node number set to 822043746 [ 1053.380109][T20821] netlink: 'syz.2.19705': attribute type 3 has an invalid length. [ 1053.410594][ T1029] bond14: (slave syz_tun): failed to get link speed/duplex [ 1053.435750][T20821] __nla_validate_parse: 6 callbacks suppressed [ 1053.435768][T20821] netlink: 224 bytes leftover after parsing attributes in process `syz.2.19705'. [ 1053.458231][T20504] bond17: (slave ip6gretap1): failed to get link speed/duplex [ 1053.552501][T20828] tipc: Enabling of bearer rejected, already enabled [ 1053.627489][ T48] bond14: (slave syz_tun): failed to get link speed/duplex [ 1053.638554][T20832] netlink: 8 bytes leftover after parsing attributes in process `syz.4.19707'. [ 1053.667053][T20504] bond17: (slave ip6gretap1): failed to get link speed/duplex [ 1053.746393][T20838] netlink: 8 bytes leftover after parsing attributes in process `syz.6.19710'. [ 1053.778430][T20503] bond14: (slave syz_tun): failed to get link speed/duplex [ 1053.828239][T20503] bond17: (slave ip6gretap1): failed to get link speed/duplex [ 1053.920679][T20503] bond14: (slave syz_tun): failed to get link speed/duplex [ 1053.947102][T20503] bond17: (slave ip6gretap1): failed to get link speed/duplex [ 1053.979931][T20850] netlink: 76 bytes leftover after parsing attributes in process `syz.6.19714'. [ 1054.310348][T20867] FAULT_INJECTION: forcing a failure. [ 1054.310348][T20867] name failslab, interval 1, probability 0, space 0, times 0 [ 1054.324924][T20867] CPU: 0 UID: 0 PID: 20867 Comm: syz.3.19724 Not tainted syzkaller #0 PREEMPT(full) [ 1054.324946][T20867] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1054.324956][T20867] Call Trace: [ 1054.324963][T20867] [ 1054.324970][T20867] dump_stack_lvl+0xe8/0x150 [ 1054.324993][T20867] should_fail_ex+0x412/0x560 [ 1054.325024][T20867] should_failslab+0xa8/0x100 [ 1054.325040][T20867] ? skb_clone+0x212/0x3a0 [ 1054.325057][T20867] kmem_cache_alloc_noprof+0x87/0x650 [ 1054.325076][T20867] ? apparmor_capable+0x126/0x170 [ 1054.325102][T20867] skb_clone+0x212/0x3a0 [ 1054.325116][T20867] ? nfnetlink_rcv+0x4b0/0x27b0 [ 1054.325140][T20867] nfnetlink_rcv+0x4de/0x27b0 [ 1054.325163][T20867] ? kernel_text_address+0xa5/0xe0 [ 1054.325185][T20867] ? __kernel_text_address+0xd/0x30 [ 1054.325207][T20867] ? arch_stack_walk+0xfb/0x150 [ 1054.325271][T20867] ? stack_trace_save+0xa9/0x100 [ 1054.325301][T20867] ? __lock_acquire+0x6b5/0x2cf0 [ 1054.325318][T20867] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 1054.325356][T20867] ? __lock_acquire+0x6b5/0x2cf0 [ 1054.325385][T20867] ? __netlink_lookup+0xc6/0x8b0 [ 1054.325411][T20867] ? netlink_deliver_tap+0x2e/0x1b0 [ 1054.325434][T20867] ? netlink_deliver_tap+0x2e/0x1b0 [ 1054.325461][T20867] ? netlink_deliver_tap+0x2e/0x1b0 [ 1054.325482][T20867] ? netlink_deliver_tap+0x2e/0x1b0 [ 1054.325508][T20867] netlink_unicast+0x75c/0x8e0 [ 1054.325538][T20867] netlink_sendmsg+0x813/0xb40 [ 1054.325569][T20867] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1054.325594][T20867] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1054.325617][T20867] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1054.325642][T20867] ____sys_sendmsg+0x972/0x9f0 [ 1054.325657][T20867] ? __might_fault+0xaf/0x130 [ 1054.325683][T20867] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1054.325708][T20867] ? import_iovec+0x73/0xa0 [ 1054.325731][T20867] ___sys_sendmsg+0x2a5/0x360 [ 1054.325746][T20867] ? __lock_acquire+0x6b5/0x2cf0 [ 1054.325766][T20867] ? __pfx____sys_sendmsg+0x10/0x10 [ 1054.325818][T20867] ? __fget_files+0x2a/0x420 [ 1054.325836][T20867] ? __fget_files+0x3a0/0x420 [ 1054.325865][T20867] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1054.325884][T20867] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1054.325909][T20867] ? __pfx_ksys_write+0x10/0x10 [ 1054.325940][T20867] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1054.325958][T20867] do_syscall_64+0x174/0x580 [ 1054.325975][T20867] ? trace_irq_disable+0x3b/0x140 [ 1054.325996][T20867] ? clear_bhb_loop+0x40/0x90 [ 1054.326023][T20867] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1054.326039][T20867] RIP: 0033:0x7f605b79ce59 [ 1054.326056][T20867] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1054.326072][T20867] RSP: 002b:00007f605c6c7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1054.326089][T20867] RAX: ffffffffffffffda RBX: 00007f605ba15fa0 RCX: 00007f605b79ce59 [ 1054.326101][T20867] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 1054.326111][T20867] RBP: 00007f605c6c7090 R08: 0000000000000000 R09: 0000000000000000 [ 1054.326121][T20867] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1054.326131][T20867] R13: 00007f605ba16038 R14: 00007f605ba15fa0 R15: 00007ffd2f86c998 [ 1054.326160][T20867] [ 1054.692216][T20869] tipc: Enabled bearer , priority 0 [ 1054.727466][T20872] netlink: 4 bytes leftover after parsing attributes in process `syz.3.19725'. [ 1054.741189][T20874] netlink: 'syz.2.19722': attribute type 10 has an invalid length. [ 1054.750805][T20864] tipc: Disabling bearer [ 1054.759393][T20872] netlink: 4 bytes leftover after parsing attributes in process `syz.3.19725'. [ 1054.912393][T20883] tipc: Enabling of bearer rejected, already enabled [ 1054.970563][T20883] netlink: 12 bytes leftover after parsing attributes in process `syz.7.19727'. [ 1055.088669][T20891] tipc: Enabling of bearer rejected, already enabled [ 1055.149979][T20899] netlink: 'syz.7.19732': attribute type 10 has an invalid length. [ 1055.183097][T20899] 8021q: adding VLAN 0 to HW filter on device team0 [ 1055.243158][T20899] bond0: (slave team0): Enslaving as an active interface with an up link [ 1055.699598][T20927] netlink: 11 bytes leftover after parsing attributes in process `syz.6.19740'. [ 1055.788257][T20931] nbd: couldn't find device at index 2958377 [ 1056.268681][T20961] FAULT_INJECTION: forcing a failure. [ 1056.268681][T20961] name failslab, interval 1, probability 0, space 0, times 0 [ 1056.298535][T20961] CPU: 0 UID: 0 PID: 20961 Comm: syz.2.19751 Not tainted syzkaller #0 PREEMPT(full) [ 1056.298558][T20961] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1056.298568][T20961] Call Trace: [ 1056.298576][T20961] [ 1056.298584][T20961] dump_stack_lvl+0xe8/0x150 [ 1056.298609][T20961] should_fail_ex+0x412/0x560 [ 1056.298634][T20961] should_failslab+0xa8/0x100 [ 1056.298653][T20961] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 1056.298677][T20961] ? __alloc_skb+0x1d0/0x7d0 [ 1056.298697][T20961] ? __local_bh_enable_ip+0xd0/0x130 [ 1056.298720][T20961] __alloc_skb+0x1d0/0x7d0 [ 1056.298745][T20961] netlink_dump+0x1d8/0xe10 [ 1056.298770][T20961] ? lockdep_hardirqs_on+0x7a/0x110 [ 1056.298789][T20961] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1056.298811][T20961] ? __skb_try_recv_datagram+0x3d4/0x4d0 [ 1056.298905][T20961] ? __pfx_netlink_dump+0x10/0x10 [ 1056.298951][T20961] netlink_recvmsg+0x690/0xa50 [ 1056.298983][T20961] ? __pfx_netlink_recvmsg+0x10/0x10 [ 1056.299009][T20961] ? __lock_acquire+0x6b5/0x2cf0 [ 1056.299034][T20961] ? __pfx_netlink_recvmsg+0x10/0x10 [ 1056.299057][T20961] sock_recvmsg_nosec+0x10c/0x140 [ 1056.299081][T20961] ____sys_recvmsg+0x3e3/0x4a0 [ 1056.299108][T20961] ? __pfx_____sys_recvmsg+0x10/0x10 [ 1056.299141][T20961] ? import_iovec+0x73/0xa0 [ 1056.299165][T20961] ___sys_recvmsg+0x215/0x590 [ 1056.299189][T20961] ? __pfx____sys_recvmsg+0x10/0x10 [ 1056.299210][T20961] ? __fget_files+0x2a/0x420 [ 1056.299267][T20961] do_recvmmsg+0x334/0x800 [ 1056.299294][T20961] ? __pfx_do_recvmmsg+0x10/0x10 [ 1056.299323][T20961] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1056.299357][T20961] __x64_sys_recvmmsg+0x198/0x250 [ 1056.299384][T20961] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1056.299410][T20961] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1056.299428][T20961] do_syscall_64+0x174/0x580 [ 1056.299443][T20961] ? trace_irq_disable+0x3b/0x140 [ 1056.299465][T20961] ? clear_bhb_loop+0x40/0x90 [ 1056.299484][T20961] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1056.299500][T20961] RIP: 0033:0x7f1586f9ce59 [ 1056.299516][T20961] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1056.299530][T20961] RSP: 002b:00007f1587ea6028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1056.299548][T20961] RAX: ffffffffffffffda RBX: 00007f1587215fa0 RCX: 00007f1586f9ce59 [ 1056.299559][T20961] RDX: 000000000000005b RSI: 00002000000021c0 RDI: 0000000000000003 [ 1056.299569][T20961] RBP: 00007f1587ea6090 R08: 0000000000000000 R09: 0000000000000000 [ 1056.299578][T20961] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000002 [ 1056.299588][T20961] R13: 00007f1587216038 R14: 00007f1587215fa0 R15: 00007fff612d05b8 [ 1056.299616][T20961] [ 1056.673621][T15189] Bluetooth: hci6: command 0x0405 tx timeout [ 1056.928373][T20974] netlink: 4 bytes leftover after parsing attributes in process `syz.4.19754'. [ 1056.950421][ T29] audit: type=1804 audit(1780404917.637:95): pid=20976 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.19757" name="/newroot/3991/cgroup.controllers" dev="tmpfs" ino=20160 res=1 errno=0 [ 1056.994168][ T29] audit: type=1800 audit(1780404917.637:96): pid=20976 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.19757" name="cgroup.controllers" dev="tmpfs" ino=20160 res=0 errno=0 [ 1057.351264][T20997] FAULT_INJECTION: forcing a failure. [ 1057.351264][T20997] name failslab, interval 1, probability 0, space 0, times 0 [ 1057.368546][T21000] netlink: 4 bytes leftover after parsing attributes in process `syz.3.19761'. [ 1057.442794][ T4999] block nbd4: Connection timed out, retrying (0/2 alive) [ 1057.455764][ T4999] block nbd4: Connection timed out, retrying (0/2 alive) [ 1057.464868][ T4999] block nbd4: Connection timed out, retrying (0/2 alive) [ 1057.472619][ T4999] block nbd4: Connection timed out, retrying (0/2 alive) [ 1057.479966][ T4999] block nbd4: Dead connection, failed to find a fallback [ 1057.487901][ T4999] block nbd4: shutting down sockets [ 1057.494711][ T4999] blk_print_req_error: 138 callbacks suppressed [ 1057.494726][ T4999] I/O error, dev nbd4, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1057.510593][ T4999] buffer_io_error: 138 callbacks suppressed [ 1057.510607][ T4999] Buffer I/O error on dev nbd4, logical block 3, async page read [ 1057.523693][T20997] CPU: 1 UID: 0 PID: 20997 Comm: syz.4.19763 Not tainted syzkaller #0 PREEMPT(full) [ 1057.523714][T20997] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1057.523724][T20997] Call Trace: [ 1057.523731][T20997] [ 1057.523739][T20997] dump_stack_lvl+0xe8/0x150 [ 1057.523764][T20997] should_fail_ex+0x412/0x560 [ 1057.523788][T20997] should_failslab+0xa8/0x100 [ 1057.523807][T20997] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 1057.523831][T20997] ? __alloc_skb+0x1d0/0x7d0 [ 1057.523858][T20997] ? __local_bh_enable_ip+0xd0/0x130 [ 1057.523879][T20997] __alloc_skb+0x1d0/0x7d0 [ 1057.523904][T20997] netlink_dump+0x1d8/0xe10 [ 1057.523929][T20997] ? lockdep_hardirqs_on+0x7a/0x110 [ 1057.523947][T20997] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1057.523969][T20997] ? __skb_try_recv_datagram+0x3d4/0x4d0 [ 1057.523989][T20997] ? __pfx_netlink_dump+0x10/0x10 [ 1057.524032][T20997] netlink_recvmsg+0x690/0xa50 [ 1057.524066][T20997] ? __pfx_netlink_recvmsg+0x10/0x10 [ 1057.524091][T20997] ? __lock_acquire+0x6b5/0x2cf0 [ 1057.524115][T20997] ? __pfx_netlink_recvmsg+0x10/0x10 [ 1057.524138][T20997] sock_recvmsg_nosec+0x10c/0x140 [ 1057.524161][T20997] ____sys_recvmsg+0x3e3/0x4a0 [ 1057.524186][T20997] ? __pfx_____sys_recvmsg+0x10/0x10 [ 1057.524217][T20997] ? import_iovec+0x73/0xa0 [ 1057.524240][T20997] ___sys_recvmsg+0x215/0x590 [ 1057.524263][T20997] ? __pfx____sys_recvmsg+0x10/0x10 [ 1057.524284][T20997] ? __fget_files+0x2a/0x420 [ 1057.524331][T20997] do_recvmmsg+0x334/0x800 [ 1057.524356][T20997] ? __pfx_do_recvmmsg+0x10/0x10 [ 1057.524380][T20997] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1057.524409][T20997] __x64_sys_recvmmsg+0x198/0x250 [ 1057.524425][T20997] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1057.524446][T20997] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1057.524461][T20997] do_syscall_64+0x174/0x580 [ 1057.524474][T20997] ? trace_irq_disable+0x3b/0x140 [ 1057.524493][T20997] ? clear_bhb_loop+0x40/0x90 [ 1057.524511][T20997] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1057.524524][T20997] RIP: 0033:0x7fa1d539ce59 [ 1057.524539][T20997] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1057.524549][T20997] RSP: 002b:00007fa1d62a8028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1057.524562][T20997] RAX: ffffffffffffffda RBX: 00007fa1d5615fa0 RCX: 00007fa1d539ce59 [ 1057.524571][T20997] RDX: 000000000000005b RSI: 00002000000021c0 RDI: 0000000000000003 [ 1057.524579][T20997] RBP: 00007fa1d62a8090 R08: 0000000000000000 R09: 0000000000000000 [ 1057.524588][T20997] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000002 [ 1057.524595][T20997] R13: 00007fa1d5616038 R14: 00007fa1d5615fa0 R15: 00007ffc8e308818 [ 1057.524617][T20997] [ 1057.804263][ T4999] I/O error, dev nbd4, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1057.814742][ T4999] Buffer I/O error on dev nbd4, logical block 2, async page read [ 1057.822679][ T4999] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1057.831890][ T4999] Buffer I/O error on dev nbd4, logical block 1, async page read [ 1057.840079][ T4999] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1057.849156][ T4999] Buffer I/O error on dev nbd4, logical block 0, async page read [ 1057.859710][T17017] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1057.870527][T17017] Buffer I/O error on dev nbd4, logical block 0, async page read [ 1057.878558][T17017] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1057.887644][T17017] Buffer I/O error on dev nbd4, logical block 1, async page read [ 1057.895518][T17017] I/O error, dev nbd4, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1057.904940][T17017] Buffer I/O error on dev nbd4, logical block 2, async page read [ 1057.912971][T17017] I/O error, dev nbd4, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1057.922410][T17017] Buffer I/O error on dev nbd4, logical block 3, async page read [ 1057.930492][T17017] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1057.939908][T17017] Buffer I/O error on dev nbd4, logical block 0, async page read [ 1057.947833][T17017] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1057.957228][T17017] Buffer I/O error on dev nbd4, logical block 1, async page read [ 1057.967679][T17017] ldm_validate_partition_table(): Disk read failed. [ 1057.976090][T17017] Dev nbd4: unable to read RDB block 0 [ 1057.983698][T17017] nbd4: unable to read partition table [ 1058.018328][T17017] ldm_validate_partition_table(): Disk read failed. [ 1058.037217][T17017] Dev nbd4: unable to read RDB block 0 [ 1058.047706][T17017] nbd4: unable to read partition table [ 1058.517533][ T12] net_ratelimit: 47 callbacks suppressed [ 1058.517552][ T12] bond14: (slave syz_tun): failed to get link speed/duplex [ 1058.578100][ T1029] bond17: (slave ip6gretap1): failed to get link speed/duplex [ 1058.667192][ T59] bond14: (slave syz_tun): failed to get link speed/duplex [ 1058.719246][ T29] audit: type=1804 audit(1780404919.407:97): pid=21039 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.19772" name="/newroot/3996/cgroup.controllers" dev="tmpfs" ino=20189 res=1 errno=0 [ 1058.798899][ T29] audit: type=1800 audit(1780404919.427:98): pid=21039 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.19772" name="cgroup.controllers" dev="tmpfs" ino=20189 res=0 errno=0 [ 1058.873022][ T1029] bond14: (slave syz_tun): failed to get link speed/duplex [ 1058.890294][ T1029] bond17: (slave ip6gretap1): failed to get link speed/duplex [ 1058.920670][T21043] tipc: Enabled bearer , priority 0 [ 1058.992298][T21051] netlink: 4 bytes leftover after parsing attributes in process `syz.6.19776'. [ 1059.001686][ T59] bond14: (slave syz_tun): failed to get link speed/duplex [ 1059.018008][ T59] bond17: (slave ip6gretap1): failed to get link speed/duplex [ 1059.064830][T21051] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 1059.070692][T21060] nbd: couldn't find device at index 2958377 [ 1059.108352][T20503] bond14: (slave syz_tun): failed to get link speed/duplex [ 1059.150620][T21045] syzkaller0: entered promiscuous mode [ 1059.185114][T21045] syzkaller0: entered allmulticast mode [ 1059.248408][ T1175] bond17: (slave ip6gretap1): failed to get link speed/duplex [ 1059.323761][T21038] tipc: Resetting bearer [ 1059.612403][T21038] tipc: Disabling bearer [ 1059.642350][T21084] vet: renamed from veth0_vlan (while UP) [ 1059.647736][T21077] netlink: 8 bytes leftover after parsing attributes in process `syz.7.19784'. [ 1059.895980][T21093] netlink: 'syz.6.19787': attribute type 39 has an invalid length. [ 1059.901548][T21094] netlink: 12 bytes leftover after parsing attributes in process `syz.4.19790'. [ 1059.913796][T21096] netlink: 'syz.2.19789': attribute type 3 has an invalid length. [ 1059.925404][T21096] netlink: 224 bytes leftover after parsing attributes in process `syz.2.19789'. [ 1059.954206][T21099] netlink: 4 bytes leftover after parsing attributes in process `syz.4.19790'. [ 1060.022836][T21094] netlink: 12 bytes leftover after parsing attributes in process `syz.4.19790'. [ 1060.174183][T21105] netlink: 4 bytes leftover after parsing attributes in process `syz.2.19792'. [ 1060.329104][T21115] nbd: couldn't find device at index 2958377 [ 1060.421964][T21112] netlink: 12 bytes leftover after parsing attributes in process `syz.3.19795'. [ 1060.541796][T21127] netlink: 8 bytes leftover after parsing attributes in process `syz.2.19798'. [ 1060.716461][T21140] netlink: 'syz.7.19802': attribute type 3 has an invalid length. [ 1060.736983][T21140] netlink: 224 bytes leftover after parsing attributes in process `syz.7.19802'. [ 1061.309768][T21173] IPVS: set_ctl: invalid protocol: 46 224.0.0.2:0 [ 1061.348547][T21173] sctp: [Deprecated]: syz.4.19812 (pid 21173) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1061.348547][T21173] Use struct sctp_sack_info instead [ 1061.355254][T21175] netlink: 'syz.7.19816': attribute type 3 has an invalid length. [ 1061.415090][T21172] 8021q: adding VLAN 0 to HW filter on device bond26 [ 1061.436362][T21172] bridge0: port 2(bond26) entered blocking state [ 1061.504858][T21172] bridge0: port 2(bond26) entered disabled state [ 1061.516276][T21172] bond26: entered allmulticast mode [ 1061.525738][T21172] bond26: entered promiscuous mode [ 1061.720393][T21197] netlink: 'syz.3.19822': attribute type 1 has an invalid length. [ 1061.812188][T21197] 8021q: adding VLAN 0 to HW filter on device bond27 [ 1061.895261][T21198] bond27: (slave geneve6): making interface the new active one [ 1061.953557][T21198] bond27: (slave geneve6): Enslaving as an active interface with an up link [ 1061.975787][ T1029] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 20004 - 0 [ 1062.004756][ T1029] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 20004 - 0 [ 1062.036414][ T1029] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 20004 - 0 [ 1062.074488][ T1029] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 20004 - 0 [ 1062.115339][T21215] nbd: couldn't find device at index 2958377 [ 1062.192083][T21218] netlink: 'syz.3.19829': attribute type 3 has an invalid length. [ 1062.204866][T21219] syz_tun: entered allmulticast mode [ 1062.250925][T21213] pimreg: entered allmulticast mode [ 1062.277825][T21213] netlink: 'syz.6.19827': attribute type 58 has an invalid length. [ 1062.298147][T21213] pimreg: left allmulticast mode [ 1062.537852][T21212] syz_tun: left allmulticast mode [ 1062.607103][T21240] netlink: 'syz.7.19837': attribute type 1 has an invalid length. [ 1062.815774][T21250] sch_tbf: burst 12 is lower than device bridge2 mtu (1514) ! [ 1062.848243][T21253] nbd: couldn't find device at index 2958377 [ 1063.204562][T21276] FAULT_INJECTION: forcing a failure. [ 1063.204562][T21276] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1063.254408][T21276] CPU: 0 UID: 0 PID: 21276 Comm: syz.7.19852 Not tainted syzkaller #0 PREEMPT(full) [ 1063.254441][T21276] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1063.254451][T21276] Call Trace: [ 1063.254458][T21276] [ 1063.254467][T21276] dump_stack_lvl+0xe8/0x150 [ 1063.254490][T21276] should_fail_ex+0x412/0x560 [ 1063.254514][T21276] _copy_from_user+0x2d/0xb0 [ 1063.254534][T21276] ___sys_recvmsg+0x175/0x590 [ 1063.254557][T21276] ? __pfx____sys_recvmsg+0x10/0x10 [ 1063.254578][T21276] ? __fget_files+0x2a/0x420 [ 1063.254626][T21276] do_recvmmsg+0x334/0x800 [ 1063.254652][T21276] ? __pfx_do_recvmmsg+0x10/0x10 [ 1063.254679][T21276] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1063.254713][T21276] __x64_sys_recvmmsg+0x198/0x250 [ 1063.254733][T21276] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1063.254759][T21276] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1063.254776][T21276] do_syscall_64+0x174/0x580 [ 1063.254792][T21276] ? trace_irq_disable+0x3b/0x140 [ 1063.254814][T21276] ? clear_bhb_loop+0x40/0x90 [ 1063.254833][T21276] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1063.254847][T21276] RIP: 0033:0x7fa0d279ce59 [ 1063.254862][T21276] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1063.254875][T21276] RSP: 002b:00007fa0d35b2028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1063.254892][T21276] RAX: ffffffffffffffda RBX: 00007fa0d2a15fa0 RCX: 00007fa0d279ce59 [ 1063.254903][T21276] RDX: 000000000000005b RSI: 00002000000021c0 RDI: 0000000000000003 [ 1063.254914][T21276] RBP: 00007fa0d35b2090 R08: 0000000000000000 R09: 0000000000000000 [ 1063.254923][T21276] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000002 [ 1063.254932][T21276] R13: 00007fa0d2a16038 R14: 00007fa0d2a15fa0 R15: 00007ffc382c7a98 [ 1063.254960][T21276] [ 1063.442127][ C0] vxcan0: j1939_tp_rxtimer: 0xffff88807b2cb800: rx timeout, send abort [ 1063.597274][ T59] net_ratelimit: 55 callbacks suppressed [ 1063.597292][ T59] bond17: (slave ip6gretap1): failed to get link speed/duplex [ 1063.687294][ T48] bond14: (slave syz_tun): failed to get link speed/duplex [ 1063.777620][ T48] bond17: (slave ip6gretap1): failed to get link speed/duplex [ 1063.798686][T20504] bond14: (slave syz_tun): failed to get link speed/duplex [ 1063.886640][ T57] bond17: (slave ip6gretap1): failed to get link speed/duplex [ 1063.931780][ C0] vxcan0: j1939_tp_rxtimer: 0xffff88807b927c00: rx timeout, send abort [ 1063.937173][T20503] bond14: (slave syz_tun): failed to get link speed/duplex [ 1063.950466][ C0] vxcan0: j1939_tp_rxtimer: 0xffff88807b2cb800: abort rx timeout. Force session deactivation [ 1064.018728][T20504] bond17: (slave ip6gretap1): failed to get link speed/duplex [ 1064.070408][T11045] bond14: (slave syz_tun): failed to get link speed/duplex [ 1064.144251][T21306] __nla_validate_parse: 10 callbacks suppressed [ 1064.144270][T21306] netlink: 12 bytes leftover after parsing attributes in process `syz.3.19861'. [ 1064.160876][T20504] bond17: (slave ip6gretap1): failed to get link speed/duplex [ 1064.174270][T21309] team0: Caught tx_queue_len zero misconfig [ 1064.228215][T20504] bond14: (slave syz_tun): failed to get link speed/duplex [ 1064.267688][T21306] netlink: 8 bytes leftover after parsing attributes in process `syz.3.19861'. [ 1064.440119][ C0] vxcan0: j1939_tp_rxtimer: 0xffff88807b927c00: abort rx timeout. Force session deactivation [ 1064.442207][T21324] netlink: 'syz.3.19867': attribute type 1 has an invalid length. [ 1064.539223][T21325] bond14: (slave veth0_to_bond): Releasing active interface [ 1064.564372][T21314] netlink: 12 bytes leftover after parsing attributes in process `syz.6.19866'. [ 1064.607985][T21324] workqueue: Failed to create a rescuer kthread for wq "bond28": -EINTR [ 1064.611515][T21297] netlink: 8 bytes leftover after parsing attributes in process `syz.7.19855'. [ 1065.195190][T21341] veth1: entered promiscuous mode [ 1065.300447][T21353] netlink: 'syz.4.19877': attribute type 83 has an invalid length. [ 1065.382315][ T29] audit: type=1804 audit(1780404926.087:99): pid=21357 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.19879" name="/newroot/4122/cgroup.controllers" dev="tmpfs" ino=20800 res=1 errno=0 [ 1065.382922][T21356] netlink: 248 bytes leftover after parsing attributes in process `syz.7.19878'. [ 1065.450781][ T29] audit: type=1800 audit(1780404926.087:100): pid=21357 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.19879" name="cgroup.controllers" dev="tmpfs" ino=20800 res=0 errno=0 [ 1065.602886][T21366] netlink: 83 bytes leftover after parsing attributes in process `syz.6.19883'. [ 1066.046414][ C1] vxcan0: j1939_tp_rxtimer: 0xffff88809e4c3400: rx timeout, send abort [ 1066.339741][T21406] tipc: Enabling of bearer rejected, already enabled [ 1066.556157][ C1] vxcan0: j1939_tp_rxtimer: 0xffff888048726c00: rx timeout, send abort [ 1066.564497][ C1] vxcan0: j1939_tp_rxtimer: 0xffff88809e4c3400: abort rx timeout. Force session deactivation [ 1066.824899][T21426] FAULT_INJECTION: forcing a failure. [ 1066.824899][T21426] name failslab, interval 1, probability 0, space 0, times 0 [ 1066.839183][T21426] CPU: 1 UID: 0 PID: 21426 Comm: syz.4.19901 Not tainted syzkaller #0 PREEMPT(full) [ 1066.839204][T21426] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1066.839214][T21426] Call Trace: [ 1066.839221][T21426] [ 1066.839228][T21426] dump_stack_lvl+0xe8/0x150 [ 1066.839254][T21426] should_fail_ex+0x412/0x560 [ 1066.839277][T21426] should_failslab+0xa8/0x100 [ 1066.839294][T21426] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 1066.839315][T21426] ? __alloc_skb+0x1d0/0x7d0 [ 1066.839337][T21426] ? __local_bh_enable_ip+0xd8/0x130 [ 1066.839358][T21426] __alloc_skb+0x1d0/0x7d0 [ 1066.839384][T21426] netlink_dump+0x1d8/0xe10 [ 1066.839408][T21426] ? lockdep_hardirqs_on+0x7a/0x110 [ 1066.839425][T21426] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1066.839447][T21426] ? __skb_try_recv_datagram+0x3d4/0x4d0 [ 1066.839467][T21426] ? __pfx_netlink_dump+0x10/0x10 [ 1066.839510][T21426] netlink_recvmsg+0x690/0xa50 [ 1066.839544][T21426] ? __pfx_netlink_recvmsg+0x10/0x10 [ 1066.839570][T21426] ? __lock_acquire+0x6b5/0x2cf0 [ 1066.839590][T21426] ? lapic_next_event+0x11/0x20 [ 1066.839646][T21426] ? clockevents_program_event+0x491/0x630 [ 1066.839664][T21426] ? __hrtimer_rearm_deferred+0x99/0x450 [ 1066.839685][T21426] ? __pfx_netlink_recvmsg+0x10/0x10 [ 1066.839708][T21426] sock_recvmsg_nosec+0x10c/0x140 [ 1066.839732][T21426] ____sys_recvmsg+0x3e3/0x4a0 [ 1066.839758][T21426] ? __pfx_____sys_recvmsg+0x10/0x10 [ 1066.839791][T21426] ? import_iovec+0x73/0xa0 [ 1066.839814][T21426] ___sys_recvmsg+0x215/0x590 [ 1066.839837][T21426] ? __pfx____sys_recvmsg+0x10/0x10 [ 1066.839858][T21426] ? __fget_files+0x2a/0x420 [ 1066.839908][T21426] do_recvmmsg+0x334/0x800 [ 1066.839933][T21426] ? __pfx_do_recvmmsg+0x10/0x10 [ 1066.839962][T21426] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1066.839997][T21426] __x64_sys_recvmmsg+0x198/0x250 [ 1066.840018][T21426] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1066.840045][T21426] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1066.840063][T21426] do_syscall_64+0x174/0x580 [ 1066.840079][T21426] ? trace_irq_disable+0x3b/0x140 [ 1066.840100][T21426] ? clear_bhb_loop+0x40/0x90 [ 1066.840122][T21426] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1066.840138][T21426] RIP: 0033:0x7fa1d539ce59 [ 1066.840154][T21426] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1066.840167][T21426] RSP: 002b:00007fa1d62a8028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1066.840184][T21426] RAX: ffffffffffffffda RBX: 00007fa1d5615fa0 RCX: 00007fa1d539ce59 [ 1066.840196][T21426] RDX: 000000000000005b RSI: 00002000000021c0 RDI: 0000000000000003 [ 1066.840206][T21426] RBP: 00007fa1d62a8090 R08: 0000000000000000 R09: 0000000000000000 [ 1066.840215][T21426] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000002 [ 1066.840223][T21426] R13: 00007fa1d5616038 R14: 00007fa1d5615fa0 R15: 00007ffc8e308818 [ 1066.840253][T21426] [ 1067.138100][ C1] vxcan0: j1939_tp_rxtimer: 0xffff888048726c00: abort rx timeout. Force session deactivation [ 1069.506175][T21431] lo: entered promiscuous mode [ 1069.516855][T21431] netlink: 'syz.4.19904': attribute type 2 has an invalid length. [ 1069.528570][T21431] net_ratelimit: 27 callbacks suppressed [ 1069.528584][T21431] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1069.567667][T21446] netlink: 'syz.2.19908': attribute type 3 has an invalid length. [ 1069.587275][T21446] netlink: 224 bytes leftover after parsing attributes in process `syz.2.19908'. [ 1069.629659][T21442] tipc: Enabling of bearer rejected, already enabled [ 1069.655082][T21443] netlink: 12 bytes leftover after parsing attributes in process `syz.6.19907'. [ 1069.672892][ T1029] bond17: (slave ip6gretap1): failed to get link speed/duplex [ 1069.738878][T20504] bond14: (slave syz_tun): failed to get link speed/duplex [ 1069.804678][T21455] netlink: 8 bytes leftover after parsing attributes in process `syz.2.19911'. [ 1069.879938][T21454] netlink: 8 bytes leftover after parsing attributes in process `syz.4.19909'. [ 1069.887337][ T59] bond17: (slave ip6gretap1): failed to get link speed/duplex [ 1069.899715][T21462] netlink: 24 bytes leftover after parsing attributes in process `syz.2.19911'. [ 1069.927388][T21464] netlink: 16 bytes leftover after parsing attributes in process `syz.3.19913'. [ 1069.939386][T21465] netlink: 'syz.6.19912': attribute type 58 has an invalid length. [ 1069.947971][ T1029] bond14: (slave syz_tun): failed to get link speed/duplex [ 1069.955357][T21465] netlink: 20 bytes leftover after parsing attributes in process `syz.6.19912'. [ 1069.978201][T21466] bond0: (slave team0): Releasing backup interface [ 1069.992982][T21466] bridge_slave_0: left allmulticast mode [ 1069.998975][T21466] bridge_slave_0: left promiscuous mode [ 1070.004998][T21466] bridge0: port 1(bridge_slave_0) entered disabled state [ 1070.023858][T21466] bridge_slave_1: left allmulticast mode [ 1070.030706][T21466] bridge_slave_1: left promiscuous mode [ 1070.038961][T21466] bridge0: port 2(bridge_slave_1) entered disabled state [ 1070.052874][T21466] bond0: (slave bond_slave_0): Releasing backup interface [ 1070.064288][T21466] bond0: (slave bond_slave_1): Releasing backup interface [ 1070.085503][T21466] team0: Port device team_slave_0 removed [ 1070.100530][T21466] team0: Port device team_slave_1 removed [ 1070.108161][T21466] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1070.115787][T21466] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1070.125735][T21466] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1070.135312][T21466] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1070.144611][T21466] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1070.170445][T21455] sit4: entered promiscuous mode [ 1070.175415][T21455] sit4: entered allmulticast mode [ 1070.318684][ T57] bond17: (slave ip6gretap1): failed to get link speed/duplex [ 1070.368010][ T57] bond14: (slave syz_tun): failed to get link speed/duplex [ 1070.432535][T21482] netlink: 4 bytes leftover after parsing attributes in process `syz.2.19915'. [ 1070.445853][T21483] netlink: 192 bytes leftover after parsing attributes in process `syz.6.19917'. [ 1070.467296][ T1029] bond17: (slave ip6gretap1): failed to get link speed/duplex [ 1070.490295][T21483] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 1070.665149][T21492] netlink: 'syz.6.19921': attribute type 3 has an invalid length. [ 1070.704134][T21492] netlink: 224 bytes leftover after parsing attributes in process `syz.6.19921'. [ 1070.773773][T21500] netlink: 'syz.3.19923': attribute type 13 has an invalid length. [ 1071.015714][T21509] mac80211_hwsim hwsim3 syzkaller0: Caught tx_queue_len zero misconfig [ 1071.431928][T21542] tipc: Enabling of bearer rejected, already enabled [ 1071.745353][T21564] FAULT_INJECTION: forcing a failure. [ 1071.745353][T21564] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1071.781794][T21564] CPU: 0 UID: 0 PID: 21564 Comm: syz.2.19945 Not tainted syzkaller #0 PREEMPT(full) [ 1071.781816][T21564] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1071.781826][T21564] Call Trace: [ 1071.781833][T21564] [ 1071.781841][T21564] dump_stack_lvl+0xe8/0x150 [ 1071.781866][T21564] should_fail_ex+0x412/0x560 [ 1071.781890][T21564] _copy_to_user+0x31/0xb0 [ 1071.781912][T21564] simple_read_from_buffer+0xe1/0x170 [ 1071.781936][T21564] proc_fail_nth_read+0x1bb/0x230 [ 1071.781960][T21564] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1071.781982][T21564] ? rw_verify_area+0x2a6/0x4d0 [ 1071.782002][T21564] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1071.782023][T21564] vfs_read+0x20c/0xa70 [ 1071.782049][T21564] ? __pfx___mutex_lock+0x10/0x10 [ 1071.782068][T21564] ? __pfx_vfs_read+0x10/0x10 [ 1071.782090][T21564] ? __fget_files+0x2a/0x420 [ 1071.782114][T21564] ? __fget_files+0x3a0/0x420 [ 1071.782131][T21564] ? __fget_files+0x2a/0x420 [ 1071.782158][T21564] ksys_read+0x150/0x270 [ 1071.782181][T21564] ? __pfx_ksys_read+0x10/0x10 [ 1071.782202][T21564] ? __pfx_sock_ioctl+0x10/0x10 [ 1071.782226][T21564] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1071.782244][T21564] do_syscall_64+0x174/0x580 [ 1071.782259][T21564] ? trace_irq_disable+0x3b/0x140 [ 1071.782280][T21564] ? clear_bhb_loop+0x40/0x90 [ 1071.782301][T21564] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1071.782317][T21564] RIP: 0033:0x7f1586f5d68e [ 1071.782333][T21564] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1071.782348][T21564] RSP: 002b:00007f1587ea5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1071.782365][T21564] RAX: ffffffffffffffda RBX: 00007f1587ea66c0 RCX: 00007f1586f5d68e [ 1071.782377][T21564] RDX: 000000000000000f RSI: 00007f1587ea60a0 RDI: 0000000000000003 [ 1071.782387][T21564] RBP: 00007f1587ea6090 R08: 0000000000000000 R09: 0000000000000000 [ 1071.782397][T21564] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1071.782407][T21564] R13: 00007f1587216038 R14: 00007f1587215fa0 R15: 00007fff612d05b8 [ 1071.782436][T21564] [ 1071.783732][T21561] netlink: 'syz.6.19944': attribute type 13 has an invalid length. [ 1072.037205][ T29] audit: type=1804 audit(1780404932.617:101): pid=21569 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.7.19948" name="/newroot/204/cgroup.controllers" dev="tmpfs" ino=1059 res=1 errno=0 [ 1072.122894][ T29] audit: type=1800 audit(1780404932.617:102): pid=21569 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.19948" name="cgroup.controllers" dev="tmpfs" ino=1059 res=0 errno=0 [ 1072.404949][T21590] netlink: 'syz.7.19955': attribute type 5 has an invalid length. [ 1072.546910][T21590] veth1_macvtap: left promiscuous mode [ 1072.949763][T21623] FAULT_INJECTION: forcing a failure. [ 1072.949763][T21623] name failslab, interval 1, probability 0, space 0, times 0 [ 1072.968622][T21620] tipc: Enabling of bearer rejected, already enabled [ 1072.980172][T21623] CPU: 1 UID: 0 PID: 21623 Comm: syz.6.19965 Not tainted syzkaller #0 PREEMPT(full) [ 1072.980194][T21623] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1072.980204][T21623] Call Trace: [ 1072.980211][T21623] [ 1072.980218][T21623] dump_stack_lvl+0xe8/0x150 [ 1072.980243][T21623] should_fail_ex+0x412/0x560 [ 1072.980268][T21623] should_failslab+0xa8/0x100 [ 1072.980285][T21623] ? skb_clone+0x212/0x3a0 [ 1072.980302][T21623] kmem_cache_alloc_noprof+0x87/0x650 [ 1072.980323][T21623] ? sk_filter_trim_cap+0x19e/0xce0 [ 1072.980349][T21623] skb_clone+0x212/0x3a0 [ 1072.980373][T21623] __netlink_deliver_tap+0x404/0x850 [ 1072.980409][T21623] ? netlink_deliver_tap+0x2e/0x1b0 [ 1072.980432][T21623] netlink_deliver_tap+0x19c/0x1b0 [ 1072.980455][T21623] netlink_dump+0x8ed/0xe10 [ 1072.980488][T21623] ? __pfx_netlink_dump+0x10/0x10 [ 1072.980533][T21623] netlink_recvmsg+0x690/0xa50 [ 1072.980564][T21623] ? __pfx_netlink_recvmsg+0x10/0x10 [ 1072.980591][T21623] ? __lock_acquire+0x6b5/0x2cf0 [ 1072.980612][T21623] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 1072.980632][T21623] ? security_socket_recvmsg+0x7e/0x2c0 [ 1072.980651][T21623] ? __pfx_netlink_recvmsg+0x10/0x10 [ 1072.980674][T21623] sock_recvmsg_nosec+0x10c/0x140 [ 1072.980697][T21623] ____sys_recvmsg+0x3e3/0x4a0 [ 1072.980732][T21623] ? __pfx_____sys_recvmsg+0x10/0x10 [ 1072.980764][T21623] ? import_iovec+0x73/0xa0 [ 1072.980788][T21623] ___sys_recvmsg+0x215/0x590 [ 1072.980811][T21623] ? __pfx____sys_recvmsg+0x10/0x10 [ 1072.980832][T21623] ? __fget_files+0x2a/0x420 [ 1072.980883][T21623] do_recvmmsg+0x334/0x800 [ 1072.980909][T21623] ? __pfx_do_recvmmsg+0x10/0x10 [ 1072.980939][T21623] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1072.980975][T21623] __x64_sys_recvmmsg+0x198/0x250 [ 1072.980996][T21623] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1072.981022][T21623] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1072.981041][T21623] do_syscall_64+0x174/0x580 [ 1072.981057][T21623] ? trace_irq_disable+0x3b/0x140 [ 1072.981078][T21623] ? clear_bhb_loop+0x40/0x90 [ 1072.981099][T21623] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1072.981115][T21623] RIP: 0033:0x7f40ca79ce59 [ 1072.981131][T21623] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1072.981145][T21623] RSP: 002b:00007f40cb622028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1072.981163][T21623] RAX: ffffffffffffffda RBX: 00007f40caa15fa0 RCX: 00007f40ca79ce59 [ 1072.981175][T21623] RDX: 0000000000000344 RSI: 0000200000005c80 RDI: 0000000000000003 [ 1072.981185][T21623] RBP: 00007f40cb622090 R08: 0000000000000000 R09: 0000000000000000 [ 1072.981195][T21623] R10: 0000000000010122 R11: 0000000000000246 R12: 0000000000000001 [ 1072.981205][T21623] R13: 00007f40caa16038 R14: 00007f40caa15fa0 R15: 00007ffdc006eb98 [ 1072.981235][T21623] [ 1073.117851][T21613] 8021q: adding VLAN 0 to HW filter on device bond29 [ 1073.317802][T21613] bridge0: port 1(bond29) entered blocking state [ 1073.334692][T21613] bridge0: port 1(bond29) entered disabled state [ 1073.343877][T21613] bond29: entered allmulticast mode [ 1073.355444][T21613] bond29: entered promiscuous mode [ 1073.366371][T21613] bond0: entered promiscuous mode [ 1074.050369][T21670] ip6tnl0: Caught tx_queue_len zero misconfig [ 1074.097929][T21682] netlink: 'syz.2.19980': attribute type 1 has an invalid length. [ 1074.110205][T21679] tipc: Enabling of bearer rejected, already enabled [ 1074.310792][T21682] macvlan0: entered promiscuous mode [ 1074.359187][T21682] macvlan0: entered allmulticast mode [ 1074.398286][T21682] bond26: entered promiscuous mode [ 1074.415151][T21682] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 1074.504896][T21682] bond26: left promiscuous mode [ 1074.631096][ T1175] net_ratelimit: 47 callbacks suppressed [ 1074.631113][ T1175] bond17: (slave ip6gretap1): failed to get link speed/duplex [ 1074.678758][T11045] bond14: (slave syz_tun): failed to get link speed/duplex [ 1074.719187][ T30] INFO: task syz.5.18418:16578 blocked for more than 143 seconds. [ 1074.734044][ T30] Not tainted syzkaller #0 [ 1074.760517][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1074.798376][ T1029] bond17: (slave ip6gretap1): failed to get link speed/duplex [ 1074.809579][ T30] task:syz.5.18418 state:D stack:23384 pid:16578 tgid:16574 ppid:11473 task_flags:0x400140 flags:0x00080002 [ 1074.844180][ T30] Call Trace: [ 1074.857078][ T1175] bond14: (slave syz_tun): failed to get link speed/duplex [ 1074.864595][ T30] [ 1074.890426][ T30] __schedule+0x1821/0x5740 [ 1074.900730][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 1074.916288][ T30] ? __pfx_clockevents_program_event+0x10/0x10 [ 1074.931324][ T30] ? preempt_schedule_notrace+0x57/0x90 [ 1074.937326][ T1029] bond17: (slave ip6gretap1): failed to get link speed/duplex [ 1074.944063][ T30] ? __pfx___schedule+0x10/0x10 [ 1074.956305][ T30] ? schedule+0x90/0x360 [ 1074.969209][ T30] schedule+0x164/0x360 [ 1074.980090][ T30] schedule_preempt_disabled+0x13/0x30 [ 1074.992864][ T30] __mutex_lock+0x7f7/0x1550 [ 1074.998221][ T1029] bond14: (slave syz_tun): failed to get link speed/duplex [ 1075.003874][ T30] ? __mutex_lock+0x608/0x1550 [ 1075.017676][ T30] ? nfsd_nl_listener_get_doit+0x10a/0x5e0 [ 1075.024581][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 1075.039330][ T30] ? __nlmsg_put+0xef/0x1b0 [ 1075.049500][ T30] ? genlmsg_put+0x137/0x2e0 [ 1075.058657][ T48] bond17: (slave ip6gretap1): failed to get link speed/duplex [ 1075.068074][ T30] nfsd_nl_listener_get_doit+0x10a/0x5e0 [ 1075.079803][ T30] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 1075.094633][ T30] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 1075.110427][ T30] genl_family_rcv_msg_doit+0x22a/0x330 [ 1075.126352][ T48] bond14: (slave syz_tun): failed to get link speed/duplex [ 1075.136367][ T30] ? __asan_memcpy+0x40/0x70 [ 1075.150674][ T30] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1075.164689][ T30] genl_rcv_msg+0x61c/0x7a0 [ 1075.175176][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1075.185854][ T30] ? __pfx_nfsd_nl_listener_get_doit+0x10/0x10 [ 1075.198338][ T48] bond17: (slave ip6gretap1): failed to get link speed/duplex [ 1075.210919][ T30] ? __pfx_ref_tracker_free+0x10/0x10 [ 1075.228324][ T30] netlink_rcv_skb+0x232/0x4b0 [ 1075.239860][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1075.247113][ T48] bond14: (slave syz_tun): failed to get link speed/duplex [ 1075.250585][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1075.269919][ T30] ? down_read+0x270/0x2e0 [ 1075.284504][ T30] ? genl_rcv+0xd/0x40 [ 1075.296918][ T30] genl_rcv+0x28/0x40 [ 1075.301010][ T30] netlink_unicast+0x75c/0x8e0 [ 1075.310670][ T30] netlink_sendmsg+0x813/0xb40 [ 1075.333783][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1075.346257][ T30] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1075.356151][ T30] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1075.362939][ T30] ____sys_sendmsg+0x972/0x9f0 [ 1075.369830][ T30] ? __might_fault+0xaf/0x130 [ 1075.374616][ T30] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1075.380268][ T30] ? import_iovec+0x73/0xa0 [ 1075.384865][ T30] ___sys_sendmsg+0x2a5/0x360 [ 1075.390265][ T30] ? __lock_acquire+0x6b5/0x2cf0 [ 1075.395291][ T30] ? __pfx____sys_sendmsg+0x10/0x10 [ 1075.400866][ T30] ? futex_wake+0x4ac/0x580 [ 1075.405486][ T30] ? __fget_files+0x2a/0x420 [ 1075.410831][ T30] ? __fget_files+0x3a0/0x420 [ 1075.415611][ T30] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1075.421184][ T30] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1075.429710][ T30] ? rcu_is_watching+0x15/0xb0 [ 1075.434527][ T30] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1075.442655][ T30] do_syscall_64+0x174/0x580 [ 1075.447915][ T30] ? trace_irq_disable+0x3b/0x140 [ 1075.453054][ T30] ? clear_bhb_loop+0x40/0x90 [ 1075.458163][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1075.464155][ T30] RIP: 0033:0x7f86d7b9ce59 [ 1075.469030][ T30] RSP: 002b:00007f86d8abf028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1075.478348][ T30] RAX: ffffffffffffffda RBX: 00007f86d7e15fa0 RCX: 00007f86d7b9ce59 [ 1075.486353][ T30] RDX: 0000000020040000 RSI: 0000200000000140 RDI: 0000000000000005 [ 1075.494778][ T30] RBP: 00007f86d7c32d6f R08: 0000000000000000 R09: 0000000000000000 [ 1075.504172][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1075.512606][ T30] R13: 00007f86d7e16038 R14: 00007f86d7e15fa0 R15: 00007ffd911f51b8 [ 1075.520989][ T30] [ 1075.550393][ T30] [ 1075.550393][ T30] Showing all locks held in the system: [ 1075.576700][ T30] 1 lock held by khungtaskd/30: [ 1075.591910][ T30] #0: ffffffff8e95cca0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1075.625020][ T30] 3 locks held by kworker/u8:3/48: [ 1075.643403][ T30] 1 lock held by udevd/5000: [ 1075.666470][ T30] #0: ffff8880b863aee0 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x31/0x150 [ 1075.683763][ T30] 2 locks held by getty/5384: [ 1075.689161][ T30] #0: ffff88803645f0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1075.699271][ T30] #1: ffffc9000322b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13a0 [ 1075.709553][ T30] 2 locks held by syz.0.16747/11214: [ 1075.714922][ T30] #0: ffffffff8fe377c8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1075.726034][ T30] #1: ffffffff8ec8b180 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x141/0x1670 [ 1075.736272][ T30] 2 locks held by syz.5.18418/16578: [ 1075.741694][ T30] #0: ffffffff8fe377c8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1075.750124][ T30] #1: ffffffff8ec8b180 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_get_doit+0x10a/0x5e0 [ 1075.763685][ T30] 1 lock held by udevd/17011: [ 1075.770108][ T30] #0: ffff8880278a4350 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30 [ 1075.794011][ T30] 2 locks held by syz.1.18570/17047: [ 1075.799408][ T30] #0: ffffffff8fe377c8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 1075.807788][ T30] #1: ffffffff8ec8b180 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x141/0x1670 [ 1075.818313][ T30] [ 1075.820648][ T30] ============================================= [ 1075.820648][ T30] [ 1075.829341][ T30] NMI backtrace for cpu 0 [ 1075.829356][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1075.829372][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1075.829381][ T30] Call Trace: [ 1075.829388][ T30] [ 1075.829395][ T30] dump_stack_lvl+0xe8/0x150 [ 1075.829416][ T30] nmi_cpu_backtrace+0x274/0x2d0 [ 1075.829526][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1075.829547][ T30] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 1075.829569][ T30] sys_info+0x135/0x170 [ 1075.829611][ T30] watchdog+0xfd3/0x1030 [ 1075.829646][ T30] ? watchdog+0x1c9/0x1030 [ 1075.829674][ T30] kthread+0x389/0x470 [ 1075.829695][ T30] ? __pfx_watchdog+0x10/0x10 [ 1075.829714][ T30] ? __pfx_kthread+0x10/0x10 [ 1075.829735][ T30] ret_from_fork+0x514/0xb70 [ 1075.829756][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 1075.829773][ T30] ? __switch_to+0xc79/0x1410 [ 1075.829797][ T30] ? __pfx_kthread+0x10/0x10 [ 1075.829817][ T30] ret_from_fork_asm+0x1a/0x30 [ 1075.829852][ T30] [ 1075.829859][ T30] Sending NMI from CPU 0 to CPUs 1: [ 1075.943699][ C1] NMI backtrace for cpu 1 [ 1075.943717][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) [ 1075.943735][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1075.943745][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 1075.943767][ C1] Code: db 7e 02 e9 d3 f8 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d f3 21 22 00 fb f4 cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 1075.943787][ C1] RSP: 0018:ffffc90000197e20 EFLAGS: 00000242 [ 1075.943802][ C1] RAX: 0000000000235067 RBX: ffffffff819a845a RCX: 0000000080000001 [ 1075.943814][ C1] RDX: 0000000000000001 RSI: ffffffff8dfa36a7 RDI: ffffffff8c28b6e0 [ 1075.943825][ C1] RBP: ffffc90000197f10 R08: ffff8880b87339db R09: 1ffff110170e673b [ 1075.943837][ C1] R10: dffffc0000000000 R11: ffffed10170e673c R12: 0000000000000001 [ 1075.943848][ C1] R13: 1ffff11003b5b000 R14: 0000000000000001 R15: 1ffff11003b5b000 [ 1075.943860][ C1] FS: 0000000000000000(0000) GS:ffff88812539e000(0000) knlGS:0000000000000000 [ 1075.943872][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1075.943884][ C1] CR2: 000055bc24f1f078 CR3: 0000000012340000 CR4: 00000000003526f0 [ 1075.943898][ C1] Call Trace: [ 1075.943904][ C1] [ 1075.943911][ C1] default_idle+0x9/0x20 [ 1075.943929][ C1] default_idle_call+0x72/0xb0 [ 1075.943948][ C1] do_idle+0x36a/0x5f0 [ 1075.943970][ C1] ? __pfx_do_idle+0x10/0x10 [ 1075.943993][ C1] cpu_startup_entry+0x43/0x60 [ 1075.944010][ C1] start_secondary+0x101/0x110 [ 1075.944025][ C1] common_startup_64+0x13e/0x147 [ 1075.944056][ C1] [ 1076.109028][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 1076.115873][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 1076.124960][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1076.135002][ T30] Call Trace: [ 1076.138277][ T30] [ 1076.141212][ T30] vpanic+0x56c/0xa60 [ 1076.145197][ T30] ? __pfx___schedule+0x10/0x10 [ 1076.150057][ T30] ? __pfx_vpanic+0x10/0x10 [ 1076.154549][ T30] ? nmi_trigger_cpumask_backtrace+0x1f4/0x300 [ 1076.160694][ T30] panic+0xc5/0xd0 [ 1076.164399][ T30] ? __pfx_panic+0x10/0x10 [ 1076.168797][ T30] ? preempt_schedule_thunk+0x16/0x30 [ 1076.174156][ T30] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 1076.180322][ T30] watchdog+0x102c/0x1030 [ 1076.184639][ T30] ? watchdog+0x1c9/0x1030 [ 1076.189041][ T30] kthread+0x389/0x470 [ 1076.193094][ T30] ? __pfx_watchdog+0x10/0x10 [ 1076.197757][ T30] ? __pfx_kthread+0x10/0x10 [ 1076.202354][ T30] ret_from_fork+0x514/0xb70 [ 1076.206939][ T30] ? __pfx_ret_from_fork+0x10/0x10 [ 1076.212046][ T30] ? __switch_to+0xc79/0x1410 [ 1076.216725][ T30] ? __pfx_kthread+0x10/0x10 [ 1076.221305][ T30] ret_from_fork_asm+0x1a/0x30 [ 1076.226064][ T30] [ 1076.229331][ T30] Kernel Offset: disabled [ 1076.233644][ T30] Rebooting in 86400 seconds..