last executing test programs: 9m32.47341164s ago: executing program 1 (id=6156): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x20, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3e}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x2004c8d8) (async) r0 = socket(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000001c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x4c) (async) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d05c164a534308", 0x10) r3 = accept4(r2, 0x0, 0x0, 0x0) ioctl$int_in(r3, 0x5452, &(0x7f00000013c0)=0xc7f) (async) recvmsg$can_raw(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000340)=""/197, 0xc5}], 0x1}, 0x1) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r3) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'gretap0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r4, {0x0, 0x5}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x10, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x3b9aca00f}]}}]}, 0x40}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x20040000) (async) r5 = epoll_create1(0x0) poll(&(0x7f0000000040)=[{r5, 0x100}], 0x1, 0xdb3) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=@newtaction={0x6c, 0x30, 0x1af, 0x1000, 0x0, {}, [{0x58, 0x1, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x48, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x9, 0xfc000000, 0x7, 0x4, 0xfffffffd}, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xffffffff}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x48885}, 0x0) (async) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r8, 0x604ab000) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, &(0x7f0000000100)) (async) shutdown(r6, 0x0) (async) epoll_wait(r5, &(0x7f0000000000)=[{}], 0x1, 0x101) (async) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0500000005000000020000000700000000000000", @ANYRES32=0x1, @ANYBLOB="00000000000000001e0001000000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) (async) close(0x3) (async) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c000000ffbfffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r10}, 0x38) (async) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000009c0)=ANY=[@ANYBLOB="1800000003000000000000000040000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000700000095000000"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r11, r9}, 0xc) (async) epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r6, &(0x7f0000000140)={0x2000200b}) 9m32.108615167s ago: executing program 1 (id=6158): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000040)={0x2000003c, &(0x7f0000000280)}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000180)={'ip_vti0\x00', &(0x7f00000002c0)={'tunl0\x00', 0x0, 0x8000, 0x10, 0x4, 0x1ac8, {{0x15, 0x4, 0x3, 0x6, 0x54, 0x68, 0x0, 0x8, 0x4, 0x0, @remote, @private=0xa010101, {[@lsrr={0x83, 0x13, 0xd4, [@remote, @empty, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @end, @rr={0x7, 0xf, 0xcb, [@dev={0xac, 0x14, 0x14, 0x26}, @empty, @private=0xa010102]}, @ssrr={0x89, 0x7, 0xf3, [@empty]}, @rr={0x7, 0xf, 0x5a, [@multicast2, @empty, @rand_addr=0x64010100]}, @ssrr={0x89, 0x7, 0xf9, [@private=0xa010102]}]}}}}}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) getsockopt$sock_buf(r1, 0x1, 0x1f, &(0x7f0000000780)=""/127, &(0x7f0000000800)=0x7f) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000540)={0xffffffffffffffff, 0x20, &(0x7f0000000500)={&(0x7f00000003c0)=""/252, 0xfc, 0x0, &(0x7f00000004c0)=""/54, 0x36}}, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000600)={{0x1, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)='%-5lx \x00'}, 0x20) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r7, 0x401c5820, &(0x7f0000000000)={0x18}) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x13, 0x1f, &(0x7f0000000040)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7f}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffffff81}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @alu={0x0, 0x0, 0x1, 0x9, 0x4, 0xfffffffffffffffe, 0xfffffffffffffffa}, @map_val={0x18, 0x4, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, @map_fd={0x18, 0x8, 0x1, 0x0, r2}, @cb_func={0x18, 0x0, 0x4, 0x0, 0x3}, @cb_func={0x18, 0xb, 0x4, 0x0, 0xfffffffffffffff9}], &(0x7f0000000140)='GPL\x00', 0x9, 0xa1, &(0x7f0000000200)=""/161, 0x41100, 0x24, '\x00', r3, @fallback=0xa, r4, 0x8, &(0x7f0000000340)={0x3, 0x1}, 0x8, 0x10, &(0x7f0000000380)={0x2, 0x0, 0x5, 0x20}, 0x10, r5, r0, 0x2, &(0x7f0000000640)=[r6, r7], &(0x7f0000000680)=[{0x2, 0x2, 0x7, 0xc}, {0x5, 0x1, 0xd, 0x6}], 0x10, 0x101}, 0x94) 9m31.939826664s ago: executing program 1 (id=6159): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1000004, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x49, &(0x7f00000000c0)}) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r1, &(0x7f0000000040)=ANY=[], 0x6) connect$netlink(0xffffffffffffffff, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = socket(0x40000000015, 0x5, 0x0) r4 = socket$netlink(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r5, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) sendmsg$DEVLINK_CMD_TRAP_SET(r3, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x400a0}, 0x20048840) setsockopt$SO_RDS_TRANSPORT(r3, 0x114, 0x8, &(0x7f00000008c0), 0x4) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) sendmsg$NFULNL_MSG_CONFIG(r6, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40080}, 0x0) close(r3) recvmmsg(r6, 0x0, 0x0, 0x10021, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) accept$packet(r3, 0x0, 0x0) socketpair(0x25, 0x1, 0x0, 0x0) sendmsg$xdp(r3, 0x0, 0x8000) sendmmsg$sock(r2, 0x0, 0x0, 0x80) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) listen(r0, 0x0) 9m31.619403522s ago: executing program 1 (id=6162): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0x37f}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f00000000c0)=@gcm_256={{0x303}, '\x00', "5193bb672965593497c186a80e00", '\x00\x00=*', "1202000000040030"}, 0x38) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) recvmmsg(r1, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x0, 0x0) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f0000002780)=ANY=[@ANYBLOB="1c0008200203000014"], 0xfb5) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e21, 0x58d24276, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) 9m30.473187122s ago: executing program 1 (id=6171): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000380)={0x200000000000000, {0x2, 0x4e23, @empty}, {0x2, 0x0, @remote}, {0x2, 0x4e21, @private=0xa010101}, 0x107, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000, 0x101}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f00000001c0)={'wpan0\x00'}) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x1c, r3, 0x701, 0x0, 0x0, {0x16}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x1c}}, 0x0) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000000)={0x20, 0x2, 0x6, 0x3, 0x0, 0x0, {0x5, 0x0, 0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x20}}, 0x24040054) 9m29.992281311s ago: executing program 1 (id=6177): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) unshare(0x22020400) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000180), 0x2ae, 0x0) r2 = openat$cgroup_freezer_state(r0, &(0x7f00000000c0), 0x2, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_freezer_state(r3, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r4, &(0x7f0000000040)='FROZEN\x00', 0x7) r5 = openat$cgroup_procs(r0, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f0000000180), 0x12) socket$inet6_mptcp(0xa, 0x1, 0x106) write$cgroup_freezer_state(r2, &(0x7f0000000200)='THAWED\x00', 0x7) 9m14.863413442s ago: executing program 32 (id=6177): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) unshare(0x22020400) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000180), 0x2ae, 0x0) r2 = openat$cgroup_freezer_state(r0, &(0x7f00000000c0), 0x2, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_freezer_state(r3, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r4, &(0x7f0000000040)='FROZEN\x00', 0x7) r5 = openat$cgroup_procs(r0, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f0000000180), 0x12) socket$inet6_mptcp(0xa, 0x1, 0x106) write$cgroup_freezer_state(r2, &(0x7f0000000200)='THAWED\x00', 0x7) 6.68677047s ago: executing program 5 (id=11316): r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0x3, &(0x7f0000000380)=0xfffffffe, 0x4) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f00000001c0)={'filter\x00', 0x5, 0x4, 0x3f0, 0x1f8, 0x0, 0x110, 0x2e0, 0x2e0, 0x2e0, 0x4, 0x0, {[{{@uncond, 0x9f, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @mac=@random="7af7f2182e96", @private, @empty}}}, {{@arp={@multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xffffff00, 0xffffff00, 0xd, 0x7, {@empty, {[0x0, 0x0, 0xff]}}, {@mac=@remote, {[0x0, 0xff, 0xff, 0x0, 0xff]}}, 0x3ff, 0x6, 0x40, 0x6, 0x0, 0x5, 'team_slave_1\x00', 'gre0\x00', {}, {0xff}, 0x0, 0x6}, 0xc0, 0x110}, @unspec=@CONNSECMARK={0x0, 'CONNSECMARK\x00', 0x0, {0x1}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x464) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0x28, r3, 0x2, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x2f, 0x3, r4}, @val={0xc, 0x99, {0x9, 0x1d}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0xc008) syz_genetlink_get_family_id$l2tp(&(0x7f0000000640), r0) 6.473320526s ago: executing program 5 (id=11317): socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000740), r0) sendmsg$DEVLINK_CMD_SB_GET(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000800)=ANY=[@ANYBLOB="0000084993d1d34c75a724dae426", @ANYRES16=r1, @ANYBLOB="810f26bd7000fcdbdf250b000000"], 0x14}, 0x1, 0x0, 0x0, 0x81}, 0x4000010) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x4, &(0x7f0000000340)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x7fff}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x2}]}, &(0x7f0000000400)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x25, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/uts\x00') ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000140)={'erspan0\x00', &(0x7f00000000c0)={'erspan0\x00', 0x0, 0x10, 0x7, 0x4, 0x3, {{0xc, 0x4, 0x1, 0x20, 0x30, 0x67, 0x0, 0xfd, 0x4, 0x0, @multicast1, @local, {[@timestamp_addr={0x44, 0x1c, 0x60, 0x1, 0x4, [{@rand_addr=0x64010102, 0xb4a}, {@broadcast, 0x4}, {@empty, 0x6}]}]}}}}}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={0x1, 0x58, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=@bridge_getlink={0x50, 0x12, 0x4, 0x70bd26, 0x25dfdbfb, {0x7, 0x0, 0x0, r4, 0x2200, 0x4000}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, r5, 0x40001, 0xa100}}}}}}, @IFLA_NET_NS_FD={0x8, 0x1c, r3}]}, 0x50}}, 0x8800) unshare(0x6a040000) r6 = socket(0x8, 0x3, 0x0) setsockopt$bt_hci_HCI_DATA_DIR(r2, 0x0, 0x1, 0x0, 0x0) unshare(0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1a, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000300000000000000fe02001085000000b700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x37, '\x00', 0x0, @tracing=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) ioctl$sock_netrom_SIOCADDRT(r6, 0x61f0, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, 0x0, 0x0) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000500), r0) sendmsg$TIPC_NL_LINK_RESET_STATS(r0, &(0x7f00000007c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000700)={&(0x7f0000000540)={0x184, r8, 0x4, 0x70bd28, 0x25dfdbfb, {}, [@TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x6}]}, @TIPC_NLA_LINK={0xa8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000001}]}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x400}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3ff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xc75}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x88}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_LINK={0xbc, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x400}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}]}, 0x184}}, 0x4000010) connect$inet6(r6, &(0x7f0000000040)={0xa, 0x4e22, 0xb4, @private1, 0x5}, 0x1c) socketpair$nbd(0x1, 0x1, 0x0, 0x0) socket$kcm(0x10, 0x400000002, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={@cgroup, 0xffffffffffffffff, 0x12}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x3, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) close(0x4) 4.919441948s ago: executing program 0 (id=11328): socket$kcm(0x10, 0x0, 0x0) (async) r0 = socket$kcm(0x10, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r2, 0x10f, 0x80, &(0x7f00000000c0)=0x9, 0x4) (async) setsockopt$TIPC_SRC_DROPPABLE(r2, 0x10f, 0x80, &(0x7f00000000c0)=0x9, 0x4) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x0, @rand_addr=0xfffffffd}, {0x2, 0x2, @dev={0xac, 0x14, 0x14, 0x11}}, {0x2, 0x4e22, @empty}, 0x2a0, 0x0, 0x0, 0x0, 0x4}) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xfd, &(0x7f00000004c0)=[{&(0x7f0000000380)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x40) 4.459321258s ago: executing program 0 (id=11329): ioctl$XFS_IOC_FD_TO_HANDLE(0xffffffffffffffff, 0xc038586a, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000000)='*\'.\x00', 0x111080, &(0x7f0000000040)={@_ha_fsid={[0x4, 0x5]}, {0x7, 0xb, 0x4, 0x5}}, 0x0, &(0x7f0000000080)={@_ha_fsid}, &(0x7f00000000c0)=0x6}) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000140)={0x100, 0x202, 0x7fffffff, 0x8, 0x0}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, &(0x7f00000001c0)={r1, @in={{0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x2c}}}}, 0x84) connect$bt_sco(r0, &(0x7f0000000280)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x8) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f00000002c0), 0x4) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000400)={@fallback=r0, 0x0, 0x0, 0x2479, &(0x7f0000000300)=[0x0], 0x1, 0x0, &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) r3 = socket(0x8, 0x5, 0x2417) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000440)={0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000480)=0x1c) getsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f00000004c0), &(0x7f0000000500)=0xc) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000540)={0x0, @in={{0x2, 0x4e20, @local}}}, 0x84) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp_SCTP_STATUS(r3, 0x84, 0xe, &(0x7f0000000600)={r5, 0x6, 0xfa, 0x226, 0x200, 0x2, 0x8001, 0x4, {r4, @in={{0x2, 0x4e20, @multicast1}}, 0x0, 0x1000, 0x8, 0x1}}, &(0x7f00000006c0)=0xb0) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r6, 0x84, 0x18, &(0x7f0000000700)={r7, 0x4}, &(0x7f0000000740)=0x8) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f0000000780)={0x0, 0x0, {0x0, @struct}, {0x0, @struct, 0x0}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r2, 0xc400941d, &(0x7f0000000b80)={r9, 0x4, 0x8, 0x1}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000001580)={'batadv0\x00', 0x0}) sendmmsg$inet6(r2, &(0x7f0000001840)=[{{&(0x7f0000000f80)={0xa, 0x4e22, 0x7, @private1, 0x10001}, 0x1c, &(0x7f0000001140)=[{&(0x7f0000000fc0)="c1b7d7b3197d16b957a721f60cec678a130163cb9ebbc2977dab9232992b9c47a0c22976a61266e09bd1f47f479625b61b693869ee148de5581a2529445ec1bbff6d2d6b5bc70bfe5f243397bdb4aeadb876a1fee2722b1d7cf11f72c2f63dd196297eeea6c8bbf459dd2d72d68db75b47313148212fd3b02093922ff2a920c9dc121b85d5ebfd3f04412cb0969758600c72c43cde8c1da255be933b1f9d61dc0b", 0xa1}, {&(0x7f0000001080)="00384abd7454cb72ddc6f29797bebda26ebfb3606a40a744f4034f24b48350d3192a5f53dcc79c2121ec3add04941452757b5fb69a0bc03f488e09604ef5602b7c6730a0d3adb0de0d9b9eb68277fae968c7140ace6b0f5d9fdd7759387366f3905260be229dd4e480f1fe7bb6ecf11656bf35b9e5016fcc31edba7d3c88ac56d7fbc27a1d93", 0x86}], 0x2, &(0x7f0000001180)=[@rthdrdstopts={{0x30, 0x29, 0x37, {0x33, 0x2, '\x00', [@hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0x44}}]}}}, @tclass={{0x14, 0x29, 0x43, 0x2}}, @rthdr={{0x48, 0x29, 0x39, {0xc, 0x6, 0x1, 0x7, 0x0, [@private1, @local, @private0]}}}], 0x90}}, {{&(0x7f0000001240)={0xa, 0x4e20, 0x5, @rand_addr=' \x01\x00', 0x7}, 0x1c, &(0x7f0000001540)=[{&(0x7f0000001280)="586a2fa826ef62c3473dd6481502bfbce571853317b5ed41a4964fd1a1ed870dfafcea04afa98d131d6d5eb1e4b9c3896f9bf232ebca935ecd2002808c326538711c0a24faf412d4a0b7b1b125183312510cdd3deee366fe72478da0f697dcf5e6f472fde11d9252dee201c97bbc97073e559df1c3368b5a947ecd948770864d19d95e53ee5af7848ceb64ffde03689c86e148d59044fc281e1c97406994a077711994416ed950e146887ace11ee8d7dcba0754c4f1b2dfd725f0370a85ab79f0d028acd4aee3fbfd80b9cf8505614048f6e54dc80ff2934c6c291482d6fb2b88b816e38d76593a77e9bafdf88877759", 0xf0}, {&(0x7f0000001380)}, {&(0x7f00000013c0)="1d19f66334f9a80922940ac532c6f8a47f341e5aa9d98beef941a773d467121403efa9a058fc725a618078e4dfb39e737cf83f03bb82695ea235bbb2738b02911cb9319a5f7e24a6b0005b05c4702091924f5227fe2ff263c01d94b94d3c6d1b23e685c14a44", 0x66}, {&(0x7f0000001440)="54db2d1ef9c2c3cf643e7789ba508d2f3555f267373ac0aab0f434a194059a59f9e349a96478c36fd51808d29907653679e5b1971bf55d19aae4f62c0b44d206b8c13b6498a9aa6f5b7bfbe434628b81da5475aea993e454af97e1943b0d5a7c96dd1a96d578cb835d9e450cb34fb5f65656907a84b7b2b653c9a776ab56f0348b5ec8e1bad011528af2e960652cad60b034426e5f4e2e24c861639c1eacb97531d6bf83ac880062df9314f60194e70c541eac9014c9863566b8439e6b105bed41de", 0xc2}], 0x4, &(0x7f00000015c0)=[@tclass={{0x14, 0x29, 0x43, 0x8}}, @rthdrdstopts={{0x68, 0x29, 0x37, {0x4, 0x9, '\x00', [@generic={0xc, 0x1, "fe"}, @calipso={0x7, 0x10, {0x3, 0x2, 0x7, 0x101, [0x2]}}, @generic={0xcd, 0x32, "a5920e541887c362742bcfde6b235b0a6047a0d4a7c6616036aeaf0573fb8d482aa7d89a293240f616e1c7d3c71e53e6854e"}]}}}, @dstopts={{0x158, 0x29, 0x37, {0x2e, 0x27, '\x00', [@hao={0xc9, 0x10, @private0={0xfc, 0x0, '\x00', 0x1}}, @calipso={0x7, 0x30, {0x3, 0xa, 0x7, 0x2, [0x6, 0x6, 0x10000, 0x101, 0x0]}}, @generic={0xec, 0xf7, "a561baec7b0c5a0c032618db6bd99423d603102fb4e368deae37433f2da655afbe8dbb6ca69e72ffcc3970a68a29caf9cc24d1cac883dc399f0f6b51dc31ae0d393641d24b0bd3c8b6fed43e97849e5c4b861957a979db0308450d71553cefc2245f7daf3224ab2b2f923a49ecf824a48536cfa3a713df915bd7b65bb0de1dbe83b4d98434bc38a10a72e7657692b8d999b0739aa2bf7f685e23eeaad110be938c50fb8b5c2a74892fbf870b7c587cbaa8204d8ca514ffa92ba84477b610b288490d55dca5ccf8a7fd8005617dd10b2cfec97fce59479b27c05c7464f34b7bc28b8a3161e32c43ae33eeb67baddb896ae6ccc185e3973b"}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x5}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x9}}, @pktinfo={{0x24, 0x29, 0x32, {@loopback, r10}}}, @flowinfo={{0x14, 0x29, 0xb, 0xfffffffc}}], 0x248}}], 0x2, 0x4044844) r11 = socket$can_bcm(0x1d, 0x2, 0x2) getpeername$packet(r2, &(0x7f00000018c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000001900)=0x14) connect$can_bcm(r11, &(0x7f0000001940)={0x1d, r12}, 0x10) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r3, 0x8982, &(0x7f0000001980)={0x1, 'veth0_to_batadv\x00'}) ioctl$XFS_IOC_FSGEOMETRY_V4(r11, 0x8070587c, &(0x7f00000019c0)) getsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000001a40), 0x10) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000001a80)) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000001ac0)={r8, 0xed, "cf202bb688059dc4db32493d211981cd2f43b68830d2fdb61b3802b02cf9fec9582894d1dd2fe1eca9430ced1d0ddfd342e0ece0b95198ffc29d714d472796d33978551c258af81084ab9798dd8a16a312f4c35757138d9e1112850d22293f8d9323e61946ea1abf6f75a2566bc40225a717504cdf752438f47e4db97b79cf19341c7f2c0d913eb9cd5aa90dd04e9603e4d9985ae0e1f8b3bcb3e2be5d620d0e3bed6f23bb58c550cbbe08668acbd6e2763fbb0a383cf7c2e13ff9f50fe56a45bc9067c32e86c564ef08f3e06eaa5863d1928d3a0cdfc5fd9c3d5a3db0506db11d63e303ecc0f6ee600f4d734b"}, &(0x7f0000001bc0)=0xf5) ioctl$sock_SIOCOUTQNSD(r13, 0x894b, &(0x7f0000001c00)) r14 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) sendmsg$nfc_llcp(r14, &(0x7f0000001dc0)={&(0x7f0000001c40)={0x27, 0x0, 0xffffffffffffffff, 0x5, 0x1, 0xa0, "6339079847592129aca1c1b958769d2582c3c47f6439302927e1d80a6edb37d48484ade6bb55bc552c6adb122f6e1f38e187d215aa8d6b01c8cb4a8d1a3837", 0x7}, 0x60, &(0x7f0000001cc0), 0x0, &(0x7f0000001d00)={0xb0, 0x117, 0xfff, "725058e67a424ee78d641b53ceeeb31ec1a525cf5cd8c865c705dc0814cfae2e698e6b28432fcf941e85aa3907ccacaaf781f4ce8640ad3cad3e685aa9122229156daaa06084af495370ede0aa5f04869d0dd4d9c9fa4125996367000439e1370876456567c7bba7eea22b205ae9ab5aebced9c8c697701e7ba4abaecf50c36f5b2c8cae669422d0f0f8287af60fd3f174e8554f271403aa15a5"}, 0xb0, 0x800}, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000001e00)={0x2, 0x2, 0x19df, 0x4, r5}, &(0x7f0000001e40)=0x10) 4.233482844s ago: executing program 0 (id=11332): syz_emit_ethernet(0xee, &(0x7f0000000280)={@random="3d202c0f904a", @multicast, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "ee527a", 0xb8, 0x3c, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, {[@routing={0x33, 0x2, 0x1, 0x39, 0x0, [@rand_addr=' \x01\x00']}], {{}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, [], "006d75c1b1e549f9340d29e523f437c8a48d0e25e097c07c29f4f83d36560f8deb8b2b4d946b54e5c4f4d0868260eff59ba05164ceed35cd2680f4"}, {0x8, 0x88be, 0x1}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x2, {0xfffffffd}}}, {0x8, 0x6558, 0x0, "00000000000000710a54974634074a4603ead6001b728e6dbefe9c2451f2223910"}}}}}}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@ipv4_deladdr={0x18, 0x15, 0x1, 0xfffffffd, 0x0, {0x2, 0x20, 0x0, 0xff}}, 0x18}}, 0x0) 4.110100872s ago: executing program 0 (id=11334): socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/uts\x00') unshare(0x6a040000) socket(0x8, 0x3, 0x3) r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000140)={0x18, 0x2, {0xffff, @loopback}}, 0x1e) unshare(0x22020400) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x1f, 0x0, 0x0) connect$pptp(r0, &(0x7f0000000080)={0x18, 0x2, {0x0, @rand_addr=0x64010102}}, 0x1e) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x4000) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000015c0), 0x2300, 0x0) ioctl$PPPIOCATTCHAN(r2, 0x40047438, &(0x7f0000000040)=0x1) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, 0x0, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000000)=0x3) socket$inet6(0xa, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd, 0x400000, 0x0, 0xffffffffffffff1b, 0x7b}, 0x0, &(0x7f0000000280)={0x3fc, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 2.233065603s ago: executing program 4 (id=11352): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@newqdisc={0x50, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x1, 0x8}}, [@TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x3, 0x9, 0x0, 0x1400000, 0x1, 0x5, 0x515}}, {0x4}}]}, @qdisc_kind_options=@q_drr={0x8}]}, 0x50}}, 0x0) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="20000000130a01020000000000000000000000000000000573797a3100000000"], 0x20}, 0x1, 0x0, 0x0, 0x93956e647eec7d97}, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001", @ANYBLOB, @ANYRES16=r1, @ANYRESHEX=r2], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="144000001000010000000000000000000000000a3c000000120a01010000000000000000020000000900020073797a320000000008000440000000000900010073797a30000000000800034000000008140000000e0a0559f190720000000000000000000700000914000000110001000000000000000000"], 0x78}}, 0x0) r3 = socket$kcm(0x29, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), r5) sendmsg$NL80211_CMD_SET_REG(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000004001b0000000c00228059fe00800400008006002100", @ANYRESHEX], 0x28}, 0x1, 0x0, 0x0, 0x20000004}, 0x24040800) syz_genetlink_get_family_id$tipc2(&(0x7f0000000300), 0xffffffffffffffff) r7 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r7, 0x1, 0x8, &(0x7f0000000200), 0x4) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) pselect6(0x0, 0x0, &(0x7f0000000a00)={0x8, 0x80000001, 0x4, 0x9, 0x8, 0x3, 0x4, 0x3}, 0x0, &(0x7f0000000a80), &(0x7f0000000b00)={&(0x7f0000000ac0), 0x8}) sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)={0x58, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2}, [@CTA_TUPLE_ORIG={0x18, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0xffff639c}]}, 0x58}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="3800000002011d04000000000000000002000000240001801400018008000100e000000108000200e00000010c000280050001"], 0x38}}, 0x0) r9 = socket(0x2, 0x80805, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r10, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="200000000002010400000000001500000a000002040001800400028024000380d95e48203ec0eb4df1dc0452111ee25f8d18b6191cd62b4089a3c297b6abc0414a70549630623ada1605ce6c576940b5bb1fa692a28dd7a38d5bd146edddd35d1439b960343ebb6c777284bf4c65cf2dcbb72193f68a42e09293a2093f8e2bc2e7c15b875980c709e10c381273fcf9a7462c3a8b6a852c71dd92704355f41013d213c95e15ca67fcb302f0e2f49f674ef2c5aa"], 0x20}, 0x1, 0x0, 0x0, 0x24000801}, 0x4) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r9, 0x84, 0x10, &(0x7f0000000040)=@assoc_value={0x0, 0x2}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r4, 0x84, 0x70, &(0x7f0000000800)={0x0, @in6={{0xa, 0x4e21, 0xd, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7}}, [0x10000, 0x3, 0xad0e, 0x6, 0x81, 0x4a1, 0x6, 0x3, 0x8, 0x2, 0x9, 0x3, 0x7, 0x4, 0xf]}, &(0x7f00000003c0)=0x100) ioctl$sock_inet_SIOCSIFBRDADDR(r3, 0x891a, &(0x7f0000000100)={'netpci0\x00', {0x2, 0x4e22, @private=0xa010100}}) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) 1.671197503s ago: executing program 4 (id=11355): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2c, r3, 0x1, 0x4, 0x2, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_TX_RATES={0x10, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xc, 0x4, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x5, 0x1, [0x9]}]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2000c891}, 0x14) sendmsg$NL80211_CMD_DEL_PMK(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20100000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x80, r3, 0x400, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x0, 0x13}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x80}, 0x1, 0x0, 0x0, 0xc000}, 0x44) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r5, 0x84, 0xc, &(0x7f0000000000), 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r5, 0x84, 0x6b, &(0x7f0000001180)=[@in6={0xa, 0x4e23, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xa19}], 0x1c) getsockopt$sock_buf(r5, 0x1, 0x1c, 0x0, &(0x7f00000000c0)=0x1c) unshare(0xc000280) 1.528708367s ago: executing program 3 (id=11356): r0 = socket(0x10, 0x803, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) socket$netlink(0x10, 0x3, 0xc) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x7fffe, {0x0, 0x0, 0x0, r5, {0x0, 0xffe0}, {0xb, 0xb}, {0x2, 0xb}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x6, 0x808, 0x9, 0x1, 0xc}, 0xb, 0x40000000, 0x32, 0x5, 0x9, 0x7, 0x9, 0x1d, 0x8, 0xffffff5c, {0xffff1c72, 0x23, 0x3, 0x8, 0xfffffffe, 0x7583}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x44040}, 0x8000) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r1, &(0x7f00000002c0)="0503d6fcd3fc140000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @multicast}, 0x14) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x38, 0x10, 0x439, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, r8, 0x9801, 0x802}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x29}}]}}}]}, 0x38}}, 0x0) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newlink={0x54, 0x10, 0x439, 0x2, 0x0, {0x0, 0x0, 0x0, r8, 0x1040, 0x44100}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @gre={{0x8}, {0x28, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @private=0xa010100}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0x17}, @IFLA_GRE_OFLAGS={0x6}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e20}]}}}]}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x4004000) 1.18633069s ago: executing program 2 (id=11357): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) unshare(0x6020400) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x2c, r2, 0x1, 0x400000, 0x25dfdbfc, {}, [@ETHTOOL_A_STRSET_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}]}, 0x2c}}, 0x2000c050) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0xdc, 0x6, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x9}, [@NFTA_RULE_EXPRESSIONS={0xc0, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0xaf}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0x15}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0x8}]}}}, {0xc, 0x1, 0x0, 0x1, @log={{0x8}, @void}}, {0x14, 0x1, 0x0, 0x1, @synproxy={{0xd}, @void}}, {0x14, 0x1, 0x0, 0x1, @connlimit={{0xe}, @void}}, {0x5c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x4c, 0x2, 0x0, 0x1, [@NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0xb}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x5}, @NFTA_XFRM_SPNUM={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_XFRM_SPNUM={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x6}, @NFTA_XFRM_SPNUM={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0xd}]}}}]}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x124}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 1.085100088s ago: executing program 2 (id=11358): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_GET(0xffffffffffffffff, 0x0, 0x20040000) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x10, 0x1418, 0x1, 0x70bd2a, 0x3}, 0x10}, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b30, &(0x7f0000000040)={'wlan0\x00'}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b30, &(0x7f00000000c0)={'wlan0\x00'}) 941.288279ms ago: executing program 2 (id=11359): bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000380)={0xffffffffffffffff, 0x0, &(0x7f0000000680)=""/246}, 0x20) (async) r0 = socket$netlink(0x10, 0x3, 0x15) (async) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'adiantum(xts-twofish-avx,camellia-asm,cbcmac(aes))\x00'}, 0x58) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="04010000100053"], 0x104}, 0x1, 0xf0ffffff, 0x0, 0x20040890}, 0x200080c0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x2, &(0x7f0000001c40)=ANY=[@ANYBLOB="85000000a800000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13}, 0x90) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r3) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000280)={'wpan4\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r3, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="800000006f10f2fa01272da34d301fe9e6ecd18b9b85f582f52ffc3e7a1dec869d4e641008d2f9e83476666bbf1d456fbada4b373d372db1832ce89519aababd5cde650e706339c91ec7ad80387234f9be1a725f8c8f9dd2d99122d92d9e9c59a418701c2a79e822762a420e18f4a58c07d796b760c75758fb165ca9509600f17edd74436b053484b25c2df630cfee2c0318b83099259a065d9b", @ANYRES16=r4, @ANYBLOB="010129bd7000fddbdf253100000008000200", @ANYRES32=r5, @ANYBLOB="0a0001007770616e30000000"], 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x84) (async) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000300)=@raw={'raw\x00', 0x8, 0x3, 0x2b0, 0x0, 0xffffffff, 0xffffffff, 0x148, 0xffffffff, 0x218, 0xffffffff, 0xffffffff, 0x218, 0xffffffff, 0x7fffffe, 0x0, {[{{@uncond, 0x6, 0xe8, 0x148, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x8}}, @common=@inet=@multiport={{0x50}, {0x2, 0x6, [0x4e22, 0x4e21, 0x4e24, 0x4e23, 0x4e22, 0x4e23, 0x4e22, 0x4e24, 0x4e20, 0x4e23, 0x4e22, 0x4e23, 0x4e21, 0x4e20, 0x4e22], [0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1], 0x1}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x43}, 0x3, 0x8, [0x2e, 0xf, 0x30, 0x30, 0xc, 0x29, 0x21, 0x29, 0x25, 0x3c, 0x34, 0x2b, 0xb, 0x39, 0x23, 0x27], 0x0, 0xffffffff, 0x5}}}, {{@ip={@local, @dev={0xac, 0x14, 0x14, 0x3e}, 0xffffffff, 0x0, 'veth0_to_team\x00', 'team_slave_0\x00', {}, {0xff}, 0x6c, 0x3, 0x8}, 0x0, 0x70, 0xd0}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@local, [0xff, 0xffffffff, 0xff000000, 0xff], 0x4e23, 0x4e23, 0x4e22, 0x4e23, 0x8128, 0x8, 0xfffffffd, 0x1a67, 0x3}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x310) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) (async) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000540), r7) r10 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) (async) r11 = getpid() (async) r12 = getpid() sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f0000000ac0)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000940)={0x120, 0x0, 0x200, 0x70bd2d, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r11}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r10}}, {@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r12}}]}, 0x120}, 0x1, 0x0, 0x0, 0x20000010}, 0x4) (async) r13 = getpid() r14 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) (async) r15 = socket(0xa, 0x3, 0x3a) sendmsg$DEVLINK_CMD_RELOAD(r15, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000b00)=ANY=[@ANYBLOB='Y\x00\x00\x00', @ANYRES16=r14, @ANYBLOB="040027bd7000fbdbdf25250000000e0001006e657464657673696d0000000f0002006e657464657673696d30000000008a00", @ANYRES32=r10, @ANYBLOB="349a2ed908196c8802f79f0d65b85b7a97224c7ea6a01ed10bf016c2d75ff4cb5ae662f090ad13d042960065e2fb8cf3ca9621d2e32d2c88033da8b29ced7eba7db36511b3ca77b2b5071e5d5252a1133b1fe38aae1b5f474655762092163ffd98118accff0b935dd3ca678eebb67e1273407583cdae792d32ff9fee6f8cdb5e212f3b799d3e2f9ddbd31cc55e5a0da7da4ea064022507878fcc730be48ea68fd445a04a9d4c0192595fac"], 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r8, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)=ANY=[@ANYBLOB='N\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010026bd7000fbdbdf2514000000080001000200000008001c00", @ANYRES32=r13, @ANYBLOB="08001d00", @ANYRES32=r10, @ANYBLOB="0c0006000100000001000000"], 0x38}, 0x1, 0x0, 0x0, 0x20040000}, 0x10) (async) getsockopt$sock_cred(r15, 0x1, 0x11, &(0x7f0000000200), &(0x7f0000000240)=0xc) syz_open_procfs$namespace(r13, &(0x7f0000000180)='ns/uts\x00') (async) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xa, 0x16, &(0x7f0000000f40)=ANY=[@ANYBLOB="611289000000000061134c0000000000bf2000000000000007000000080000002d0301"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x12}, 0x94) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020023000b02d25a806f8c6394f90724fc60040f03", 0x17}], 0x1}, 0x0) (async) socket$kcm(0x10, 0x400000002, 0x0) 940.893871ms ago: executing program 3 (id=11360): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect(r1, &(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e21, @private=0xa010102}, 0x2, 0x1, 0x2, 0x1}}, 0x80) bind$packet(r0, &(0x7f0000000080)={0x11, 0x1c, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x9) r2 = socket(0x10, 0x803, 0x0) r3 = socket$can_j1939(0x1d, 0x2, 0x7) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x2}}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x8}, @union]}}, 0x0, 0x4e}, 0x20) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r3, 0x6b, 0x78, 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYRES64=r3, @ANYRES32=0x0, @ANYBLOB="00000000000000002400128009000100626f6e64000000001400028005000100040000000800090000000000"], 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x400c89c) socket$packet(0x11, 0x3, 0x300) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) connect(r1, &(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e21, @private=0xa010102}, 0x2, 0x1, 0x2, 0x1}}, 0x80) (async) bind$packet(r0, &(0x7f0000000080)={0x11, 0x1c, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x9) (async) socket(0x10, 0x803, 0x0) (async) socket$can_j1939(0x1d, 0x2, 0x7) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x2}}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x8}, @union]}}, 0x0, 0x4e}, 0x20) (async) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r3, 0x6b, 0x78, 0x0, 0x0) (async) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYRES64=r3, @ANYRES32=0x0, @ANYBLOB="00000000000000002400128009000100626f6e64000000001400028005000100040000000800090000000000"], 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x400c89c) (async) 891.65452ms ago: executing program 5 (id=11361): r0 = socket(0x10, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)=@newlink={0x34, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x4, 0x5}}}]}, 0x34}}, 0x0) 792.550748ms ago: executing program 3 (id=11362): unshare(0x22020600) r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind(r0, &(0x7f0000000580)=@hci={0x1f, 0xffffffffffffffff, 0x2}, 0x80) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newlink={0x44, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x1840}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x3}, @IFLA_BR_AGEING_TIME={0x8}]}}}]}, 0x44}}, 0x0) 739.698736ms ago: executing program 5 (id=11363): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a54000000030a0fdb00000000000000000a0060050900030073797a30000000000900010073797a310000000014000480080002403cb140bb08000140000000030a000700726f7574650000000800054000"], 0x7c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=@newtaction={0x74, 0x30, 0x1, 0x0, 0x0, {}, [{0x60, 0x1, [@m_vlan={0x5c, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x9a8}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x806}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0xf, 0x2, 0xf, 0x7, 0x739c}, 0x2}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x74}}, 0x4800) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r0) sendmsg$NL80211_CMD_SET_BSS(r0, &(0x7f0000000780)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x54, r2, 0x300, 0x70bd26, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_BSS_SHORT_PREAMBLE={0x5, 0x1d, 0x7f}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x5}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0xfb}, @NL80211_ATTR_AP_ISOLATE={0x5}, @NL80211_ATTR_P2P_OPPPS={0x5}, @NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0x6}, @NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0x7}, @NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0x2}]}, 0x54}}, 0x0) r3 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x200880c0, &(0x7f0000000280)={0xa, 0x4e22, 0x8021, @mcast2}, 0x1c) sendto$inet6(r3, &(0x7f00000009c0)="c7cfcaaa22e10542fca5c0195350f15147657e0bfc59d383a47190db88690e6fedc3040ab5809ae02a54cd429cc3338c5afa0c9dce3f91950d1f567f358ac21154159130e88cbb6c43197813b2f23f3e442f80877490b393408142ebcfea6821f543e5ee9e27032e2b75d78f1b79f5a6bb6f0645e267770ef7e8f3a92148091217450ce8581e54223eeb6486205a209bf1fe854d211c03f8c3140fc3979d824082990d119473d20e94f253c9621fac339560ae46cb24b88bf2d01559bb658e343257b90f233b81bc5c398be3bbddb23a1e", 0xffd6, 0xc001, 0x0, 0xffffffffffffff0c) setsockopt$inet6_mtu(r3, 0x29, 0x17, &(0x7f0000000000)=0x2, 0xfe9d) setsockopt$inet6_udp_int(r3, 0x88, 0x1, &(0x7f0000000080), 0x4) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYRES16=r3], 0x24}, 0x1, 0x0, 0x0, 0xc000}, 0x20004010) getuid() r4 = openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000300)='io.pressure\x00', 0x2, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) r5 = gettid() getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000340)={0x0, 0x0}, &(0x7f0000000400)=0xc) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000440)={0x0, 0x0, 0x0}, &(0x7f0000000480)=0xc) r8 = socket$kcm(0x29, 0x7, 0x0) r9 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r9, 0x10e, 0xc, &(0x7f0000000140)={0x6}, 0x10) write(r9, &(0x7f0000000000)="1c0000001a005f0214f9f407000904001f000000ff02000200000000", 0x1c) recvmsg$can_j1939(r9, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) r10 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) write$6lowpan_control(r10, &(0x7f0000000980)='connect aa:aa:aa:aa:aa:10 2', 0x1b) r11 = openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f00000004c0), 0x2, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000500)=0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000540)={0x0, 0x0, 0x0}, &(0x7f0000000580)=0xc) sendmsg$netlink(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000ac0)={0x22c, 0x29, 0x1, 0x70bd27, 0x25dfdbfc, "", [@typed={0x8, 0xc, 0x0, 0x0, @fd=r0}, @typed={0xa1, 0x11c, 0x0, 0x0, @binary="f9bc2d8c86c1677db106aa997a68970cebfe318005f253dd564f1edb25740e9d43ff72101a130ec402be5b6ca1ab25af3ce2e97347f7cef99d9d16ef618cd8be43e7f53bc8ccfdd83b3712cc6eb4aa8e3ce29b57596c566c97345cb4de5c1dd719ed5c9842607b26ff9ca052080b58e165d8bf84f90660bd24b1c75a61197163e956b48bea8a542c109be60aa071b1acc3f47cad926d417a71c2a70d99"}, @typed={0x14, 0x135, 0x0, 0x0, @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}}, @nested={0x155, 0x97, 0x0, 0x1, [@nested={0x4, 0x134}, @generic="6ca6b0c4d5405f09fa34b621946331402d39c1544ed3d2566e654b146776be8728ceffc22cba8679a10363afaf510ed183ac149a5effd3f3bcb0e0a74c08491a17501641a7c905f48b98392d72dac60060e7c76d9e5f091fbc2f352b5cd2284aebd8c7d6a9cc94ad692510b778e54cdd2e0576eb1d6523802b564bd77aa8acadbeefcff150d8535f7cf7", @nested={0x4, 0x50}, @typed={0x8, 0x12e, 0x0, 0x0, @u32=0x7}, @generic="0c9de92c5286c6be481c2ae5400bd35e0b0b096ed01286e026322bfe55b6482b3bc897297e559c0a93e70d920587a70aebb03e8af357b0ba226b17853b4b7d9003cce765ebc3e3aabab05926825d2510c31c18ff6d3ff6fb7cc280441f3fd1cce26dd053ea924c02dce3dca4f477d0e80ae99e3db1221efad25ae5c74d8ecc3c1dcd202b67f24ee57991dd7f4830ea230043a70d56b848b4c7638ae657a1be4b97cd9ca08ab3eec3868ff0fc8312b239adfe39f3284e70"]}, @typed={0x4, 0x79}]}, 0x22c}], 0x1, &(0x7f0000000d00)=ANY=[@ANYBLOB="28000000000000000100000001000000", @ANYRES32=r3, @ANYRES32=r4, @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r3, @ANYRES32, @ANYBLOB="1c000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r3, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r5, @ANYRES32=r6, @ANYRES32=r7, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r8, @ANYBLOB="1c000000000000000100000001000000f34ac457a6ca0cfd47a0d58639bb2fb7d093e22531c1a9c006449cd412d8a2ca3277bbdc25b6b074037e225a15851ef77c5607d21e346d49220860411f06fffce10b40c39b8b8dc5e462c365f02800fd33c2d21780d8ce0a8c93b7096a86e85710378d933ac80de8a0f2553b89a1dbbb09c52d23479ce13b377dc139eff718901158264a5f78bb3f12b61ffa1d845409b01b3eea8f50bf0322366f5954ebc28387af89ff9b33625cfae6b353be92c68292ce85f6c9c4adf9072a4ae04b1b12a918e709000000", @ANYRES32=r0, @ANYRES32, @ANYRES32=r0, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32=r3, @ANYRES32=r0, @ANYRES32=r10, @ANYRES32=r11, @ANYRES32=r0, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=r12, @ANYRES32=r13, @ANYBLOB='\x00\x00\x00\x00'], 0xe8, 0x811}, 0x4000) 737.094236ms ago: executing program 2 (id=11364): r0 = socket$packet(0x11, 0x3, 0x300) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x7c, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x30, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0xa, 0x2, 0x1, 0x0, @loopback}}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x1c02}}, @IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x7c}}, 0x0) (async) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000000)=@req={0x6, 0x0, 0x4, 0x10000}, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$gtp(&(0x7f00000006c0), r2) sendmsg$GTP_CMD_ECHOREQ(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000700)={0x1c, r3, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@GTPA_VERSION={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4800}, 0x8010) (async) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000140)=ANY=[@ANYRESOCT=r0], &(0x7f0000000100)='GPL\x00'}, 0x94) (async) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f00000004c0)=0x80, 0x4) 653.277017ms ago: executing program 4 (id=11365): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@newqdisc={0x50, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x1, 0x8}}, [@TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x3, 0x9, 0x0, 0x1400000, 0x1, 0x5, 0x515}}, {0x4}}]}, @qdisc_kind_options=@q_drr={0x8}]}, 0x50}}, 0x0) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="20000000130a01020000000000000000000000000000000573797a3100000000"], 0x20}, 0x1, 0x0, 0x0, 0x93956e647eec7d97}, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000900)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001", @ANYBLOB, @ANYRES16=r1, @ANYRESHEX=r2], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="144000001000010000000000000000000000000a3c000000120a01010000000000000000020000000900020073797a320000000008000440000000000900010073797a30000000000800034000000008140000000e0a0559f190720000000000000000000700000914000000110001000000000000000000"], 0x78}}, 0x0) r3 = socket$kcm(0x29, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), r5) sendmsg$NL80211_CMD_SET_REG(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000004001b0000000c00228059fe00800400008006002100", @ANYRESHEX], 0x28}, 0x1, 0x0, 0x0, 0x20000004}, 0x24040800) syz_genetlink_get_family_id$tipc2(&(0x7f0000000300), 0xffffffffffffffff) r7 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r7, 0x1, 0x8, &(0x7f0000000200), 0x4) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) pselect6(0x0, 0x0, &(0x7f0000000a00)={0x8, 0x80000001, 0x4, 0x9, 0x8, 0x3, 0x4, 0x3}, 0x0, &(0x7f0000000a80), &(0x7f0000000b00)={&(0x7f0000000ac0), 0x8}) sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)={0x58, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2}, [@CTA_TUPLE_ORIG={0x18, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0xffff639c}]}, 0x58}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="3800000002011d04000000000000000002000000240001801400018008000100e000000108000200e00000010c000280050001"], 0x38}}, 0x0) r9 = socket(0x2, 0x80805, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r10, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="200000000002010400000000001500000a000002040001800400028024000380d95e48203ec0eb4df1dc0452111ee25f8d18b6191cd62b4089a3c297b6abc0414a70549630623ada1605ce6c576940b5bb1fa692a28dd7a38d5bd146edddd35d1439b960343ebb6c777284bf4c65cf2dcbb72193f68a42e09293a2093f8e2bc2e7c15b875980c709e10c381273fcf9a7462c3a8b6a852c71dd92704355f41013d213c95e15ca67fcb302f0e2f49f674ef2c5aa"], 0x20}, 0x1, 0x0, 0x0, 0x24000801}, 0x4) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r9, 0x84, 0x10, &(0x7f0000000040)=@assoc_value={0x0, 0x2}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r4, 0x84, 0x70, &(0x7f0000000800)={0x0, @in6={{0xa, 0x4e21, 0xd, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7}}, [0x10000, 0x3, 0xad0e, 0x6, 0x81, 0x4a1, 0x6, 0x3, 0x8, 0x2, 0x9, 0x3, 0x7, 0x4, 0xf]}, &(0x7f00000003c0)=0x100) ioctl$sock_inet_SIOCSIFBRDADDR(r3, 0x891a, &(0x7f0000000100)={'netpci0\x00', {0x2, 0x4e22, @private=0xa010100}}) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) 627.69707ms ago: executing program 2 (id=11366): socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="01072bbd700000000000e000000046d7e6f22d9edfacde14a82d9d68a1a75db4a86b4728763a904cb136b1d74aec973b63bf4bd9c7a0f07698ec9956fdeedf6afeab5311d47e9d3610a8abff50a260d1798f662d8cbeb9e5e8893e5cd1b02093dceb1aaf749a58382b786d5bca597da6c69cb8bab734766bc03059c5ee5640420fe4cff96b868d2d0c3b071c06e4076af882dd965aabd09f8cdb81592df83e2176119484964e056677c01c07037612fd5a38411af71e9bd7ec6b072efff814d8346611a32f"], 0x14}, 0x1, 0x0, 0x0, 0x20004074}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_WPAN_PHY(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, r1, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}]}, 0x24}}, 0x805) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x7101}) r4 = socket$unix(0x1, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'bridge0\x00'}) socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000003c0)={'syzkaller0\x00', 0x0}) r7 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000600)=@getchain={0x24, 0x66, 0x903, 0x70bd2e, 0x25dfdc03, {0x0, 0x0, 0x0, r6, {0xffe0, 0xb}, {0x8, 0xfff1}, {0x6, 0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x8848}, 0x8000) 616.507405ms ago: executing program 3 (id=11367): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="6800000010000100"/20, @ANYRES32=0xffffffffffffffff, @ANYBLOB="0000000000000000480012800e0001006970366772657461700000003400028008000100", @ANYRES32, @ANYBLOB="14000600fe800000000000000000000000000015140007"], 0x68}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r2, 0x10e, 0xc, &(0x7f0000000040)=0xe00000, 0x4) (async) setsockopt$netlink_NETLINK_NO_ENOBUFS(r2, 0x10e, 0xc, &(0x7f0000000040)=0xe00000, 0x4) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYRESDEC=r1, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\b\x00', @ANYRES32=r2], 0x24}, 0x1, 0x0, 0x0, 0x8800}, 0x4008000) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) 562.31365ms ago: executing program 5 (id=11368): sendmsg$NL80211_CMD_SET_CQM(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000200)={0xd8, 0x0, 0x4, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x200, 0x2}}}}, [@NL80211_ATTR_CQM={0x50, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x20, 0x1, [0x3, 0x4, 0x6, 0x3, 0x7, 0xffffffff, 0x7f]}, @NL80211_ATTR_CQM_RSSI_THOLD={0x14, 0x1, [0x7732, 0x2000000, 0x5, 0x0]}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x399}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0xffffffff}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8}]}, @NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x2ae}]}, @NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x18, 0x1, [0x6, 0x10000, 0x4, 0xdc, 0x7]}]}, @NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x5d}]}, @NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x1}]}, @NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x3}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8, 0x9, 0x10}]}, @NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x9}]}]}, 0xd8}, 0x1, 0x0, 0x0, 0x20000084}, 0x40080) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001500)=@newqdisc={0x70, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x40, 0x2, {{0x1ff, 0x4, 0x0, 0x0, 0xfffffffd, 0x8}, [@TCA_NETEM_ECN={0x8, 0x7, 0x1}, @TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x80000001, 0x6, 0x8, 0xfffffffe, 0xd99d}}]}]}}}]}, 0x70}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f00000001c0)={'wg1\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000200)=@newlink={0x34, 0x10, 0x1, 0x4, 0x10, {0x0, 0x0, 0x0, r6, 0x10}, [@IFLA_AF_SPEC={0xc, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x2, 0x0, 0x1, {0x4}}]}, @IFLA_MTU={0x8}]}, 0x34}}, 0x0) sendto$packet(r0, &(0x7f00000002c0)="44c33b69ebc9e05e9bdec0c288a8", 0x12, 0x830, &(0x7f0000000440)={0x11, 0x0, r3, 0x1, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}}, 0x14) 452.134605ms ago: executing program 2 (id=11369): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="20000000140001000000000000000000020000ff", @ANYRES32=r3, @ANYBLOB="08000200ac1414aa398475ecec00bb578154d19d17"], 0x20}}, 0x0) r4 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r4, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local}, 0xc) r5 = socket(0x10, 0x803, 0x4) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x20088814}, 0x0) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r7 = socket$inet_udp(0x2, 0x2, 0x0) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r8, 0x8983, &(0x7f0000000180)={0x0, 'lo\x00', {}, 0x2}) bind$inet(r7, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r7, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) sendmmsg(r7, &(0x7f0000007fc0), 0x800001d, 0x1c) setsockopt$inet_mreq(r6, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@delchain={0x24, 0x11, 0x1, 0x13, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xb}}}, 0x24}}, 0x0) 451.464176ms ago: executing program 3 (id=11370): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000300)={0x0, 0x4}, 0x8) r1 = socket$vsock_stream(0x28, 0x1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x19, 0x4, 0x4, 0x3, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000003c0)={r2, &(0x7f0000000240), &(0x7f0000000280)=@tcp, 0x3}, 0x20) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r1, 0x28, 0x0, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000001300)="92", 0x1, 0x10, &(0x7f0000000240)={0xa, 0x4e1c, 0xfffffffc, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) sendto$inet6(r0, &(0x7f0000000040)="de", 0x1, 0x80, &(0x7f0000000140)={0xa, 0x4e21, 0x2400, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x5}, 0x1c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f00000002c0), 0x8) 318.829164ms ago: executing program 5 (id=11371): r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000003740), &(0x7f0000003780)=0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@enum={0x1}]}, {0x0, [0x5f, 0x2e]}}, 0x0, 0x28, 0x0, 0x1, 0x4}, 0x28) connect$pptp(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0x2, {0x3, @loopback}}, 0x1e) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c00000036000701fcffffff00008100037c0000080004"], 0x1c}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) ppoll(&(0x7f0000000100)=[{r2, 0x420}, {r1, 0xc8}], 0x2, &(0x7f00000001c0)={r4, r5+60000000}, &(0x7f0000000200)={[0x6b]}, 0x8) 317.950593ms ago: executing program 4 (id=11372): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x28, 0x39, 0x1, 0x70bd29, 0x25dfdbfe, {0x1}, [@typed={0x14, 0xec, 0x0, 0x0, @ipv6=@local}]}, 0x28}, 0x1, 0x0, 0x0, 0x400c801}, 0x8150) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612) 176.767081ms ago: executing program 3 (id=11373): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r1, &(0x7f0000000180)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000100)=[{0x80000006, 0x0, 0xfe}]}, 0x10) sendmsg$nl_route_sched(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000740)=@getqdisc={0x24, 0x26, 0x1, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xffff, 0xfff3}, {0xffe0, 0xc}, {0xfff2, 0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x48040}, 0x20000000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a98000000060a0b040000000000000000020000006c000480680001800a000100696e6e65720000005800028008000240000000840800034000000007080004400003000f0800014000000000340005800c0001007061796c6f61640024000280080004400000001c08000340000000b9080001400000000a08000240200000020900010073797a30000000000900020073797a32"], 0xc0}}, 0x0) syz_emit_ethernet(0x52, &(0x7f0000000800)=ANY=[@ANYRESDEC=r0, @ANYRESHEX=r0, @ANYRES32=0x41424344, @ANYRES8=r2, @ANYBLOB="c04050e76d8e6afb6be83aa3f2429fd478a6a92df3b408825eb11c06b6ce44d97e37f6132b7d08c6725623076bedceb57462f7ad142b9f8415566498d1a422fdaf541cf763a7c1c249933665306fcbb0511eca17ba87119dcfef3d433d773017b4d45187473be3c4e5b5aae7fb44bb89932fb85b7cc2be0ceb884302177f4ce0837bd8f2ff8cb206022a447467bbee33b63615ef4dc725c3abd46e977766e09d5897bdd6de490a9073e98e3e03b60e3b66be7357f79b377e0ff98a61953c", @ANYRESDEC=0x0, @ANYRESDEC=r0, @ANYRESOCT=r1, @ANYRESHEX, @ANYRES16=r1, @ANYBLOB="695d5f4ac995e86dc36e5a8d49d2ac7610be8d9137a9f4339696a7cb9f158dcac9dddfe92e2934502de27d46a4bd51a2834f9d2edee3fcf06bf29c1ec3bc54b23a4cd9"], 0x0) socket$inet6(0xa, 0x80000, 0x120000) ioctl$XFS_IOC_FD_TO_HANDLE(0xffffffffffffffff, 0xc038586a, &(0x7f0000000180)={r0, &(0x7f0000000040)='%\'/<\x00', 0x204000, &(0x7f0000000080)={@align=0xfffffffffffffff1, {0x5, 0xb, 0x10001, 0x3}}, 0xfffffe58, &(0x7f0000000100), &(0x7f0000000140)=0x74000000}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x1, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000f000000850000002e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$kcm(0x11, 0x20000000000000a, 0x300) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_buf(r7, 0x29, 0x39, &(0x7f0000000040)="ff0204a4ffb5ffffffffffffffff2e2be82db1af00000000", 0x18) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x45, 0x6, 0xac, 0x6}]}, 0x10) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000000040)=r4, 0x4) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3}, 0x94) syz_emit_ethernet(0x2a, &(0x7f0000000100)={@link_local={0x3}, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}}}}}, 0x0) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r9, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8922, &(0x7f0000000000)={'batadv0\x00', 0x5828}) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_GET(r3, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000280)={&(0x7f00000006c0)=ANY=[@ANYBLOB="fc010000", @ANYRES16=r10, @ANYRES8=r8], 0x1fc}, 0x1, 0x0, 0x0, 0x846}, 0x3010) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f00000001c0)=ANY=[@ANYBLOB="000001000180c25325df"]) 145.025069ms ago: executing program 4 (id=11374): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000008c0)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c0000001d00015e0ebd7000fedbdf2507000000", @ANYRES32=r1, @ANYBLOB="80007e"], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4040000) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x26e1, 0x0) close(r2) sendmmsg$inet6(r2, &(0x7f0000004f00)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000001c00)={0xa, 0x4e23, 0x664, @private1, 0x6}, 0x1c, &(0x7f0000002c40)}}, {{0x0, 0x0, &(0x7f00000041c0)}}, {{&(0x7f0000004240)={0xa, 0x4e21, 0x6f, @loopback, 0x7f}, 0x1c, &(0x7f0000004700)}}, {{&(0x7f0000004780)={0xa, 0x4e22, 0x6ad, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffb}, 0x1c, 0x0}}], 0x5, 0x24000000) write$nci(r2, &(0x7f0000000040)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x80, @v={0x7, 0x4, 0x6, 0x3, {0xf9, 0x7, "853c16732aa5d1ff"}, 0x2}}, 0x12) 112.51732ms ago: executing program 0 (id=11375): r0 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0x4}, 0x1c) listen(r0, 0x50) (async) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, 0x0, &(0x7f0000000040)) r2 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4f60, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xfffffffd}, 0x1c) (async) listen(r2, 0x50) r3 = socket$netlink(0x10, 0x3, 0x4) writev(r3, &(0x7f0000000080)=[{&(0x7f0000000e40)="480000001400190d09004beafd0d36020a8447000b4e230f00004e20a2bc560119d7004f19dfb7f393d7359031033f817f00000000000000000101ff05c00e030002000000ffff01", 0x48}], 0x1) 1.168135ms ago: executing program 4 (id=11376): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) (async) r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r0, 0xffffffffffffffff, 0x1d, 0x0, @val=@perf_event={0x7}}, 0x18) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x0) (async) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c00000010001f"], 0x4c}}, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r3, 0x5452, &(0x7f00000000c0)=0x704) (async) ioctl$int_in(r3, 0x5452, &(0x7f00000000c0)=0x704) splice(r2, 0x0, r4, 0x0, 0x1100000000f336, 0x8) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xffff}]}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x58}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000040)=@dellink={0x34, 0x11, 0x1, 0x70bd26, 0x5dfdbff, {0x0, 0x0, 0x0, 0x0, 0x42008, 0x40000}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'veth1_vlan\x00'}]}, 0x34}, 0x1, 0x200000000000000, 0x0, 0x240040c4}, 0x0) 0s ago: executing program 0 (id=11377): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000100)) ioctl$PPPIOCSACTIVE(r0, 0x40107446, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x1, 0x8eb4}]}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$PPPIOCGL2TPSTATS(r1, 0xc0189436, &(0x7f0000000080)) r2 = socket(0x15, 0x5, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) r4 = socket$inet(0x2, 0x1, 0x100) setsockopt$sock_int(r4, 0x1, 0x48, &(0x7f0000000040)=0x3, 0x4) connect$inet(r4, &(0x7f0000002040)={0x2, 0x4e24, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000080)={0x3, [0x0, 0x0, 0x0]}, &(0x7f00000000c0)=0x10) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f0000000140), 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(r3, 0x8917, &(0x7f0000000200)={'pimreg1\x00', {0x2, 0x0, @multicast1}}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000004c0), r5) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)={0x1c, r6, 0x1, 0x78bd2a, 0x25dfdbfd}, 0x1c}, 0x1, 0x0, 0x0, 0x84}, 0x400c004) connect$netrom(r2, &(0x7f00000000c0)={{0xa, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null]}, 0x48) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000840)=@raw={'raw\x00', 0x3c1, 0x3, 0x2b0, 0x1b8, 0x111, 0x4b4, 0x0, 0xd4feffff, 0x310, 0x20a, 0x278, 0x310, 0x278, 0x3, 0x0, {[{{@ipv6={@empty, @empty, [0x0, 0xff, 0x0, 0xffffff00], [0x0, 0xffffffff, 0xff000000], 'ipvlan0\x00', 'team_slave_0\x00', {}, {}, 0x6}, 0x7a, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x310) r7 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r7, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x40000000000012d, 0x2, 0x0) setsockopt$inet_int(r7, 0x0, 0x7, &(0x7f0000000140)=0x6, 0x4) bind$inet(r7, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x32, &(0x7f0000000240)=ANY=[@ANYBLOB="f8ffffffffff0180c200000308004600002400d8240000119078000000000000000044045e0000014eb87d1254a29520000c907801000000df4602d49a10160984b11789069c85a9fc92fa07be0ef0a8c3f77edbe272547d6ac2fa390489ed88ab39f05157ee5da8824aac2ac2357e47c5e9631dafd488fe69037aa58e10079bdb1ca09595d1fecf09a71f41bd18167a65f8f448ab0f1a16e0ee5ed3c95bd054b1fe54d1dcb4f96e4bb5f0ca229d1a1a7a82a4860c97583daf6283d605"], 0x0) syz_genetlink_get_family_id$smc(&(0x7f0000000180), r5) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000040010000851000000600000018020000", @ANYRES32, @ANYBLOB="00000000000010006600020000000000180000000000000000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb702000008000000b50af8ffffff000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222}, 0x78) getsockname$tipc(r2, 0x0, &(0x7f0000001800)) accept$alg(r2, 0x0, 0x0) close(0x3) kernel console output (not intermixed with test programs): fffffffda RBX: 00007f5bfde15fa0 RCX: 00007f5bfdb9c799 [ 1266.213101][T10694] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a [ 1266.213115][T10694] RBP: 00007f5bfeaeb090 R08: 0000000000000000 R09: 0000000000000000 [ 1266.213127][T10694] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1266.213141][T10694] R13: 00007f5bfde16038 R14: 00007f5bfde15fa0 R15: 00007ffebd9b2e28 [ 1266.213177][T10694] [ 1266.390193][ T5976] bond1: (slave macvlan3): failed to get link speed/duplex [ 1266.551875][T10658] delete_channel: no stack [ 1266.747265][T10705] syzkaller1: entered promiscuous mode [ 1266.753834][T10704] sctp: [Deprecated]: syz.4.9968 (pid 10704) Use of int in max_burst socket option. [ 1266.753834][T10704] Use struct sctp_assoc_value instead [ 1266.753836][T10705] syzkaller1: entered allmulticast mode [ 1266.860182][T10705] netlink: 12 bytes leftover after parsing attributes in process `syz.5.9967'. [ 1266.945581][T10705] bond2 (unregistering): Released all slaves [ 1266.978167][T10715] netlink: 'syz.3.9972': attribute type 1 has an invalid length. [ 1267.018230][T10718] netlink: 'syz.0.9971': attribute type 1 has an invalid length. [ 1267.029599][T10715] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR [ 1267.095787][T10718] bond3: entered promiscuous mode [ 1267.118887][T10718] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1267.143881][T10716] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9971'. [ 1267.154991][T10716] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9971'. [ 1267.167302][T10726] netlink: 72 bytes leftover after parsing attributes in process `syz.3.9974'. [ 1267.370716][T10736] FAULT_INJECTION: forcing a failure. [ 1267.370716][T10736] name failslab, interval 1, probability 0, space 0, times 0 [ 1267.416882][T10736] CPU: 0 UID: 0 PID: 10736 Comm: syz.4.9975 Not tainted syzkaller #0 PREEMPT(full) [ 1267.416915][T10736] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1267.416930][T10736] Call Trace: [ 1267.416940][T10736] [ 1267.416950][T10736] dump_stack_lvl+0xe8/0x150 [ 1267.416998][T10736] should_fail_ex+0x412/0x560 [ 1267.417030][T10736] should_failslab+0xa8/0x100 [ 1267.417061][T10736] __kmalloc_noprof+0xe8/0x760 [ 1267.417085][T10736] ? bpf_test_init+0x9f/0x150 [ 1267.417121][T10736] bpf_test_init+0x9f/0x150 [ 1267.417152][T10736] bpf_prog_test_run_skb+0x36f/0x1c90 [ 1267.417193][T10736] ? __fget_files+0x2a/0x420 [ 1267.417223][T10736] ? __fget_files+0x3a0/0x420 [ 1267.417252][T10736] ? __fget_files+0x2a/0x420 [ 1267.417287][T10736] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 1267.417315][T10736] bpf_prog_test_run+0x2c7/0x340 [ 1267.417342][T10736] __sys_bpf+0x643/0x950 [ 1267.417377][T10736] ? __pfx___sys_bpf+0x10/0x10 [ 1267.417427][T10736] ? ksys_write+0x242/0x270 [ 1267.417453][T10736] ? __pfx_ksys_write+0x10/0x10 [ 1267.417481][T10736] __x64_sys_bpf+0x7c/0x90 [ 1267.417512][T10736] do_syscall_64+0x14d/0xf80 [ 1267.417543][T10736] ? trace_irq_disable+0x3b/0x150 [ 1267.417574][T10736] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1267.417597][T10736] ? clear_bhb_loop+0x40/0x90 [ 1267.417624][T10736] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1267.417646][T10736] RIP: 0033:0x7ff078f9c799 [ 1267.417667][T10736] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1267.417687][T10736] RSP: 002b:00007ff079df5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1267.417710][T10736] RAX: ffffffffffffffda RBX: 00007ff079215fa0 RCX: 00007ff078f9c799 [ 1267.417727][T10736] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a [ 1267.417741][T10736] RBP: 00007ff079df5090 R08: 0000000000000000 R09: 0000000000000000 [ 1267.417755][T10736] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1267.417768][T10736] R13: 00007ff079216038 R14: 00007ff079215fa0 R15: 00007ffd6b0124e8 [ 1267.417803][T10736] [ 1267.739992][T10738] erspan1: entered promiscuous mode [ 1267.984446][T10741] netlink: 32 bytes leftover after parsing attributes in process `syz.3.9976'. [ 1268.112664][T10750] netlink: 'syz.5.9980': attribute type 6 has an invalid length. [ 1268.141888][T10750] IPv6: NLM_F_CREATE should be specified when creating new route [ 1268.609087][T10760] __nla_validate_parse: 1 callbacks suppressed [ 1268.609107][T10760] netlink: 32 bytes leftover after parsing attributes in process `syz.5.9983'. [ 1268.625087][T10760] netlink: 32 bytes leftover after parsing attributes in process `syz.5.9983'. [ 1268.846144][T10773] netlink: 'syz.2.9985': attribute type 1 has an invalid length. [ 1269.103032][T10782] FAULT_INJECTION: forcing a failure. [ 1269.103032][T10782] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1269.117260][T10782] CPU: 1 UID: 0 PID: 10782 Comm: syz.4.9987 Not tainted syzkaller #0 PREEMPT(full) [ 1269.117289][T10782] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1269.117304][T10782] Call Trace: [ 1269.117313][T10782] [ 1269.117321][T10782] dump_stack_lvl+0xe8/0x150 [ 1269.117359][T10782] should_fail_ex+0x412/0x560 [ 1269.117390][T10782] _copy_from_user+0x2d/0xb0 [ 1269.117423][T10782] bpf_test_init+0xd8/0x150 [ 1269.117455][T10782] bpf_prog_test_run_skb+0x36f/0x1c90 [ 1269.117494][T10782] ? __fget_files+0x2a/0x420 [ 1269.117525][T10782] ? __fget_files+0x3a0/0x420 [ 1269.117554][T10782] ? __fget_files+0x2a/0x420 [ 1269.117590][T10782] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 1269.117617][T10782] bpf_prog_test_run+0x2c7/0x340 [ 1269.117643][T10782] __sys_bpf+0x643/0x950 [ 1269.117678][T10782] ? __pfx___sys_bpf+0x10/0x10 [ 1269.117727][T10782] ? ksys_write+0x242/0x270 [ 1269.117752][T10782] ? __pfx_ksys_write+0x10/0x10 [ 1269.117782][T10782] __x64_sys_bpf+0x7c/0x90 [ 1269.117821][T10782] do_syscall_64+0x14d/0xf80 [ 1269.117853][T10782] ? trace_irq_disable+0x3b/0x150 [ 1269.117883][T10782] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1269.117906][T10782] ? clear_bhb_loop+0x40/0x90 [ 1269.117933][T10782] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1269.117955][T10782] RIP: 0033:0x7ff078f9c799 [ 1269.117977][T10782] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1269.117997][T10782] RSP: 002b:00007ff079df5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1269.118020][T10782] RAX: ffffffffffffffda RBX: 00007ff079215fa0 RCX: 00007ff078f9c799 [ 1269.118037][T10782] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a [ 1269.118052][T10782] RBP: 00007ff079df5090 R08: 0000000000000000 R09: 0000000000000000 [ 1269.118066][T10782] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1269.118079][T10782] R13: 00007ff079216038 R14: 00007ff079215fa0 R15: 00007ffd6b0124e8 [ 1269.118114][T10782] [ 1269.326287][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5090 ms [ 1269.334367][ C1] lec:lec_tx_timeout: lec0 [ 1269.340219][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 1269.349502][T10781] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9989'. [ 1269.383731][T10781] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9989'. [ 1269.445641][T10789] sctp: [Deprecated]: syz.4.9991 (pid 10789) Use of int in max_burst socket option deprecated. [ 1269.445641][T10789] Use struct sctp_assoc_value instead [ 1269.462045][T10789] netlink: 'syz.4.9991': attribute type 8 has an invalid length. [ 1269.530537][T10781] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9989'. [ 1269.540559][T10781] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9989'. [ 1269.746265][T10807] netlink: 'syz.3.9995': attribute type 12 has an invalid length. [ 1269.779801][T10809] netlink: 12 bytes leftover after parsing attributes in process `syz.5.9996'. [ 1269.801394][T10807] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9995'. [ 1270.100803][T10832] netlink: 'syz.3.10003': attribute type 4 has an invalid length. [ 1270.188704][T10842] netlink: 'syz.4.10005': attribute type 61 has an invalid length. [ 1270.203779][T10834] ip6t_srh: unknown srh invflags 4000 [ 1270.285148][T10845] erspan1: entered promiscuous mode [ 1270.290628][T10845] erspan1: entered allmulticast mode [ 1270.434421][ T6494] net_ratelimit: 42 callbacks suppressed [ 1270.434444][ T6494] bond1: (slave macvlan3): failed to get link speed/duplex [ 1270.512456][T10858] geneve2: entered promiscuous mode [ 1270.585118][T10858] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1270.701434][ T6494] bond1: (slave macvlan3): failed to get link speed/duplex [ 1270.886942][T10858] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1270.954823][ T6494] bond1: (slave macvlan3): failed to get link speed/duplex [ 1271.134648][T10858] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1271.213599][ T5979] bond1: (slave macvlan3): failed to get link speed/duplex [ 1271.408375][T10858] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1271.453851][T32199] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1271.462245][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1271.495814][T10888] netlink: 24 bytes leftover after parsing attributes in process `syz.3.10017'. [ 1271.520143][T11701] bond1: (slave macvlan3): failed to get link speed/duplex [ 1271.538337][T10888] netlink: 24 bytes leftover after parsing attributes in process `syz.3.10017'. [ 1271.634013][ T5976] bond1: (slave macvlan3): failed to get link speed/duplex [ 1271.793821][ T5979] bond1: (slave macvlan3): failed to get link speed/duplex [ 1271.851848][T10913] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1271.859194][T10913] IPv6: NLM_F_CREATE should be set when creating new route [ 1271.906275][ T5979] bond1: (slave macvlan3): failed to get link speed/duplex [ 1272.397570][T10945] validate_nla: 1 callbacks suppressed [ 1272.397591][T10945] netlink: 'syz.5.10030': attribute type 10 has an invalid length. [ 1272.587611][T10952] netlink: 'syz.5.10032': attribute type 1 has an invalid length. [ 1272.842658][T10957] tipc: Enabling of bearer rejected, failed to enable media [ 1273.198902][T10977] syzkaller1: entered promiscuous mode [ 1273.210539][T10977] syzkaller1: entered allmulticast mode [ 1273.346613][T10979] macvlan4: entered promiscuous mode [ 1273.352347][T10979] macvlan4: entered allmulticast mode [ 1273.361682][T10979] bond2: entered promiscuous mode [ 1273.368371][T10979] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 1273.382577][T10979] bond2: left promiscuous mode [ 1273.476895][T10992] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1273.484229][T10992] IPv6: NLM_F_CREATE should be set when creating new route [ 1273.708739][T10999] __nla_validate_parse: 16 callbacks suppressed [ 1273.708760][T10999] netlink: 14 bytes leftover after parsing attributes in process `syz.4.10046'. [ 1273.729488][T11001] netlink: 16 bytes leftover after parsing attributes in process `syz.2.10048'. [ 1273.746159][T11001] netlink: 'syz.2.10048': attribute type 1 has an invalid length. [ 1273.761753][T11002] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1273.862326][T11001] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1273.970356][T11010] macvlan4: entered promiscuous mode [ 1274.006731][T11010] macvlan4: entered allmulticast mode [ 1274.019102][T11010] bond3: entered allmulticast mode [ 1274.039403][T11010] bond3: entered promiscuous mode [ 1274.054511][T11010] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 1274.077215][T11010] team0: Port device macvlan4 added [ 1274.100079][T11001] bond3: (slave ip6gretap1): making interface the new active one [ 1274.108779][T11001] ip6gretap1: entered promiscuous mode [ 1274.115158][T11001] ip6gretap1: entered allmulticast mode [ 1274.123301][T11001] bond3: (slave ip6gretap1): Enslaving as an active interface with an up link [ 1274.353412][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 1274.361533][ C1] lec:lec_tx_timeout: lec0 [ 1274.366239][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 1274.706092][T11041] netlink: 24 bytes leftover after parsing attributes in process `syz.2.10055'. [ 1274.985217][T11045] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10055'. [ 1275.068040][T11041] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10055'. [ 1275.327566][T11056] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10059'. [ 1275.613844][T32199] net_ratelimit: 26 callbacks suppressed [ 1275.613869][T32199] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1275.628028][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1276.254623][T32174] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1276.655629][ T8005] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1276.664424][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1276.733986][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1276.814186][T32174] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1277.373898][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1277.454009][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1277.693959][ T8005] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1277.943973][T11698] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1278.042517][ T5982] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1278.145154][T11698] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1278.154227][T11698] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1278.259611][T11073] bridge_slave_1: left allmulticast mode [ 1278.266298][T11073] bridge_slave_1: left promiscuous mode [ 1278.290240][T11073] bridge0: port 2(bridge_slave_1) entered disabled state [ 1278.314519][T11073] bridge_slave_0: left allmulticast mode [ 1278.321072][T11073] bridge_slave_0: left promiscuous mode [ 1278.357588][T11073] bridge0: port 1(bridge_slave_0) entered disabled state [ 1279.045863][T11107] netlink: 'syz.2.10072': attribute type 3 has an invalid length. [ 1279.584084][T11130] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10079'. [ 1279.691331][T11142] netlink: 24 bytes leftover after parsing attributes in process `syz.5.10081'. [ 1279.810181][T11142] netlink: 28 bytes leftover after parsing attributes in process `syz.5.10081'. [ 1279.915769][T11151] netlink: 20 bytes leftover after parsing attributes in process `syz.2.10084'. [ 1280.331634][T11174] netlink: 76 bytes leftover after parsing attributes in process `syz.3.10091'. [ 1280.653485][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 6290 ms [ 1280.661677][ C1] lec:lec_tx_timeout: lec0 [ 1280.669324][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 1280.721354][T11187] netlink: 36 bytes leftover after parsing attributes in process `syz.0.10094'. [ 1280.725993][ T5982] net_ratelimit: 24 callbacks suppressed [ 1280.726057][ T5982] bond1: (slave macvlan3): failed to get link speed/duplex [ 1280.823647][ T7990] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1280.832108][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1281.072910][T11205] netlink: 212368 bytes leftover after parsing attributes in process `syz.5.10098'. [ 1281.310609][T11209] netlink: 'syz.5.10100': attribute type 21 has an invalid length. [ 1281.856355][ T7990] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1281.864814][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1282.898945][ T8005] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1282.907659][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1282.928017][T32174] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1283.328135][T11209] netlink: 132 bytes leftover after parsing attributes in process `syz.5.10100'. [ 1283.337746][T11209] netlink: 'syz.5.10100': attribute type 1 has an invalid length. [ 1283.441372][T11212] netlink: 24 bytes leftover after parsing attributes in process `syz.3.10101'. [ 1283.483744][T20619] bond1: (slave macvlan3): failed to get link speed/duplex [ 1283.595790][T11218] geneve2: entered promiscuous mode [ 1283.604372][ T5982] bond1: (slave macvlan3): failed to get link speed/duplex [ 1283.630169][ T6494] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1283.660627][ T6494] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1283.686023][ T6494] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1283.881692][T32174] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1283.902533][ T6494] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1284.194382][T32174] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1284.252152][T11243] netlink: 'syz.4.10110': attribute type 2 has an invalid length. [ 1284.265999][T11243] netlink: 'syz.4.10110': attribute type 1 has an invalid length. [ 1284.304607][T11243] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1284.340735][T11243] netlink: 28 bytes leftover after parsing attributes in process `syz.4.10110'. [ 1284.595122][T11260] FAULT_INJECTION: forcing a failure. [ 1284.595122][T11260] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1284.611403][T11260] CPU: 0 UID: 0 PID: 11260 Comm: syz.5.10117 Not tainted syzkaller #0 PREEMPT(full) [ 1284.611435][T11260] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1284.611449][T11260] Call Trace: [ 1284.611459][T11260] [ 1284.611468][T11260] dump_stack_lvl+0xe8/0x150 [ 1284.611507][T11260] should_fail_ex+0x412/0x560 [ 1284.611539][T11260] _copy_from_user+0x2d/0xb0 [ 1284.611573][T11260] l2cap_sock_setsockopt+0xf13/0x20d0 [ 1284.611708][T11260] ? aa_sk_perm+0x6d5/0x900 [ 1284.611737][T11260] ? __pfx_l2cap_sock_setsockopt+0x10/0x10 [ 1284.611770][T11260] ? aa_umount+0x9f1/0xba0 [ 1284.611795][T11260] ? bad_inode_fiemap+0x10/0x20 [ 1284.611821][T11260] ? aa_sock_opt_perm+0xff/0x1a0 [ 1284.611851][T11260] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 1284.611876][T11260] ? __pfx_l2cap_sock_setsockopt+0x10/0x10 [ 1284.611906][T11260] do_sock_setsockopt+0x17c/0x1b0 [ 1284.611954][T11260] __x64_sys_setsockopt+0x13d/0x1b0 [ 1284.611992][T11260] do_syscall_64+0x14d/0xf80 [ 1284.612022][T11260] ? trace_irq_disable+0x3b/0x150 [ 1284.612053][T11260] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1284.612077][T11260] ? clear_bhb_loop+0x40/0x90 [ 1284.612105][T11260] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1284.612127][T11260] RIP: 0033:0x7fe555d9c799 [ 1284.612149][T11260] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1284.612168][T11260] RSP: 002b:00007fe556bf3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1284.612192][T11260] RAX: ffffffffffffffda RBX: 00007fe556015fa0 RCX: 00007fe555d9c799 [ 1284.612208][T11260] RDX: 0000000000000004 RSI: 0000000000000112 RDI: 0000000000000004 [ 1284.612222][T11260] RBP: 00007fe556bf3090 R08: 0000000000000002 R09: 0000000000000000 [ 1284.612236][T11260] R10: 0000200000000180 R11: 0000000000000246 R12: 0000000000000001 [ 1284.612250][T11260] R13: 00007fe556016038 R14: 00007fe556015fa0 R15: 00007ffd84e37e18 [ 1284.612286][T11260] [ 1284.941502][T11265] netlink: 'syz.5.10118': attribute type 1 has an invalid length. [ 1284.951169][T11265] __nla_validate_parse: 1 callbacks suppressed [ 1284.951192][T11265] netlink: 224 bytes leftover after parsing attributes in process `syz.5.10118'. [ 1285.095948][T11272] netlink: 96 bytes leftover after parsing attributes in process `syz.0.10121'. [ 1285.450910][T11297] FAULT_INJECTION: forcing a failure. [ 1285.450910][T11297] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1285.470379][T11297] CPU: 1 UID: 0 PID: 11297 Comm: syz.4.10128 Not tainted syzkaller #0 PREEMPT(full) [ 1285.470412][T11297] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1285.470428][T11297] Call Trace: [ 1285.470437][T11297] [ 1285.470448][T11297] dump_stack_lvl+0xe8/0x150 [ 1285.470487][T11297] should_fail_ex+0x412/0x560 [ 1285.470518][T11297] _copy_to_user+0x31/0xb0 [ 1285.470553][T11297] simple_read_from_buffer+0xe1/0x170 [ 1285.470588][T11297] proc_fail_nth_read+0x1bb/0x230 [ 1285.470623][T11297] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1285.470655][T11297] ? rw_verify_area+0x2a6/0x4d0 [ 1285.470676][T11297] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1285.470706][T11297] vfs_read+0x20c/0xa70 [ 1285.470725][T11297] ? __local_bh_enable_ip+0xd0/0x130 [ 1285.470753][T11297] ? fdget_pos+0x246/0x320 [ 1285.470789][T11297] ? __pfx___mutex_lock+0x10/0x10 [ 1285.470823][T11297] ? __pfx_vfs_read+0x10/0x10 [ 1285.470861][T11297] ? __fget_files+0x2a/0x420 [ 1285.470897][T11297] ? __fget_files+0x3a0/0x420 [ 1285.470928][T11297] ? __fget_files+0x2a/0x420 [ 1285.470966][T11297] ksys_read+0x150/0x270 [ 1285.470991][T11297] ? __pfx_ksys_read+0x10/0x10 [ 1285.471025][T11297] do_syscall_64+0x14d/0xf80 [ 1285.471055][T11297] ? trace_irq_disable+0x3b/0x150 [ 1285.471085][T11297] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1285.471107][T11297] ? clear_bhb_loop+0x40/0x90 [ 1285.471135][T11297] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1285.471157][T11297] RIP: 0033:0x7ff078f5cfce [ 1285.471177][T11297] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1285.471195][T11297] RSP: 002b:00007ff079df4fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1285.471218][T11297] RAX: ffffffffffffffda RBX: 00007ff079df56c0 RCX: 00007ff078f5cfce [ 1285.471235][T11297] RDX: 000000000000000f RSI: 00007ff079df50a0 RDI: 0000000000000003 [ 1285.471249][T11297] RBP: 00007ff079df5090 R08: 0000000000000000 R09: 0000000000000000 [ 1285.471263][T11297] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1285.471275][T11297] R13: 00007ff079216038 R14: 00007ff079215fa0 R15: 00007ffd6b0124e8 [ 1285.471310][T11297] [ 1285.756262][T11304] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1285.769105][T11304] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1285.798409][T11304] net_ratelimit: 19 callbacks suppressed [ 1285.798434][T11304] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1285.857104][ T5982] bond1: (slave macvlan3): failed to get link speed/duplex [ 1285.935344][ T8015] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1285.983697][T20619] bond1: (slave macvlan3): failed to get link speed/duplex [ 1286.014254][ T8005] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1286.023071][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1286.094448][ T6494] bond1: (slave macvlan3): failed to get link speed/duplex [ 1286.156839][T11325] bond0: option ad_actor_sys_prio: mode dependency failed, not supported in mode broadcast(3) [ 1286.170500][T11325] bond0 (unregistering): Released all slaves [ 1286.233694][ T6494] bond1: (slave macvlan3): failed to get link speed/duplex [ 1286.303667][T11324] netlink: 148 bytes leftover after parsing attributes in process `syz.0.10136'. [ 1286.344060][T20619] bond1: (slave macvlan3): failed to get link speed/duplex [ 1286.413378][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5740 ms [ 1286.421520][ C1] lec:lec_tx_timeout: lec0 [ 1286.427188][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 1286.595723][ T6494] bond1: (slave macvlan3): failed to get link speed/duplex [ 1286.864876][T11355] netlink: 732 bytes leftover after parsing attributes in process `syz.5.10146'. [ 1286.893798][T11355] netlink: 732 bytes leftover after parsing attributes in process `syz.5.10146'. [ 1287.204868][T11369] SET target dimension over the limit! [ 1287.491638][T11374] bond0: (slave rose0): Enslaving as an active interface with an up link [ 1287.948954][T11390] netlink: 'syz.2.10157': attribute type 1 has an invalid length. [ 1287.968905][T11390] netlink: 'syz.2.10157': attribute type 7 has an invalid length. [ 1287.992482][T11390] netlink: 'syz.2.10157': attribute type 8 has an invalid length. [ 1288.019009][T11390] netlink: 208 bytes leftover after parsing attributes in process `syz.2.10157'. [ 1288.073893][T11393] netlink: 'syz.5.10158': attribute type 1 has an invalid length. [ 1288.082529][T11393] netlink: 192 bytes leftover after parsing attributes in process `syz.5.10158'. [ 1288.711401][T11423] netlink: 12 bytes leftover after parsing attributes in process `syz.5.10167'. [ 1288.776056][T11425] IPVS: set_ctl: invalid protocol: 51 224.0.0.1:18977 [ 1289.105444][T11429] netlink: 14 bytes leftover after parsing attributes in process `syz.5.10169'. [ 1289.316636][T11440] geneve2: entered promiscuous mode [ 1289.407345][T11440] netlink: 212340 bytes leftover after parsing attributes in process `syz.4.10172'. [ 1289.557644][T11438] syzkaller0: entered promiscuous mode [ 1289.563484][T11438] syzkaller0: entered allmulticast mode [ 1289.724202][T11457] FAULT_INJECTION: forcing a failure. [ 1289.724202][T11457] name failslab, interval 1, probability 0, space 0, times 0 [ 1289.795026][T11457] CPU: 1 UID: 0 PID: 11457 Comm: syz.3.10177 Not tainted syzkaller #0 PREEMPT(full) [ 1289.795058][T11457] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1289.795073][T11457] Call Trace: [ 1289.795082][T11457] [ 1289.795092][T11457] dump_stack_lvl+0xe8/0x150 [ 1289.795129][T11457] should_fail_ex+0x412/0x560 [ 1289.795161][T11457] should_failslab+0xa8/0x100 [ 1289.795190][T11457] __kmalloc_noprof+0xe8/0x760 [ 1289.795213][T11457] ? security_sk_alloc+0x52/0x360 [ 1289.795323][T11457] security_sk_alloc+0x52/0x360 [ 1289.795358][T11457] sk_prot_alloc+0x101/0x210 [ 1289.795387][T11457] ? sk_alloc+0x27/0x390 [ 1289.795419][T11457] sk_alloc+0x3a/0x390 [ 1289.795453][T11457] bpf_prog_test_run_skb+0x3ed/0x1c90 [ 1289.795495][T11457] ? __fget_files+0x2a/0x420 [ 1289.795524][T11457] ? __fget_files+0x3a0/0x420 [ 1289.795553][T11457] ? __fget_files+0x2a/0x420 [ 1289.795588][T11457] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 1289.795616][T11457] bpf_prog_test_run+0x2c7/0x340 [ 1289.795642][T11457] __sys_bpf+0x643/0x950 [ 1289.795677][T11457] ? __pfx___sys_bpf+0x10/0x10 [ 1289.795727][T11457] ? ksys_write+0x242/0x270 [ 1289.795752][T11457] ? __pfx_ksys_write+0x10/0x10 [ 1289.795783][T11457] __x64_sys_bpf+0x7c/0x90 [ 1289.795813][T11457] do_syscall_64+0x14d/0xf80 [ 1289.795843][T11457] ? trace_irq_disable+0x3b/0x150 [ 1289.795874][T11457] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1289.795896][T11457] ? clear_bhb_loop+0x40/0x90 [ 1289.795924][T11457] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1289.795946][T11457] RIP: 0033:0x7faec159c799 [ 1289.795976][T11457] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1289.795996][T11457] RSP: 002b:00007faec24ca028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1289.796020][T11457] RAX: ffffffffffffffda RBX: 00007faec1815fa0 RCX: 00007faec159c799 [ 1289.796036][T11457] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a [ 1289.796051][T11457] RBP: 00007faec24ca090 R08: 0000000000000000 R09: 0000000000000000 [ 1289.796064][T11457] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1289.796077][T11457] R13: 00007faec1816038 R14: 00007faec1815fa0 R15: 00007fff287fce48 [ 1289.796112][T11457] [ 1289.986054][T11460] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10179'. [ 1290.053193][T11463] netlink: 'syz.2.10179': attribute type 3 has an invalid length. [ 1290.062448][T11463] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10179'. [ 1290.507585][T11484] netlink: 44 bytes leftover after parsing attributes in process `syz.4.10185'. [ 1290.536752][T11486] netlink: 14 bytes leftover after parsing attributes in process `syz.5.10184'. [ 1290.606679][T11489] netlink: 72 bytes leftover after parsing attributes in process `syz.4.10185'. [ 1290.894394][ T5979] net_ratelimit: 28 callbacks suppressed [ 1290.894417][ T5979] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1290.914910][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1291.213791][T32199] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1291.222434][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1292.177786][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5750 ms [ 1292.185889][ C1] lec:lec_tx_timeout: lec0 [ 1292.190928][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 1292.257973][T32199] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1292.266775][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1292.333585][ T5840] Bluetooth: hci4: command 0x0406 tx timeout [ 1292.476331][ T6494] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1292.524057][ T6494] bond1: (slave macvlan3): failed to get link speed/duplex [ 1292.672308][ T6515] bond1: (slave macvlan3): failed to get link speed/duplex [ 1292.694756][T11497] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1292.736849][T11501] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10189'. [ 1292.765175][T11501] netlink: 20 bytes leftover after parsing attributes in process `syz.4.10189'. [ 1292.945788][T11510] pimreg: entered allmulticast mode [ 1292.968343][T11510] pimreg: left allmulticast mode [ 1292.992216][T11517] netlink: 'syz.0.10196': attribute type 9 has an invalid length. [ 1293.042370][T11512] netlink: 24 bytes leftover after parsing attributes in process `syz.3.10194'. [ 1293.152601][T11521] bond4: option fail_over_mac: invalid value (127) [ 1293.163983][T11521] bond4 (unregistering): Released all slaves [ 1293.227495][T11528] netlink: 14 bytes leftover after parsing attributes in process `syz.4.10197'. [ 1293.315676][T11522] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10194'. [ 1294.025105][T11550] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1294.092400][T11559] bond1: (slave batadv1): Opening slave failed [ 1294.988908][T11578] __nla_validate_parse: 24 callbacks suppressed [ 1294.988932][T11578] netlink: 36 bytes leftover after parsing attributes in process `syz.4.10213'. [ 1295.023453][T11578] netlink: 36 bytes leftover after parsing attributes in process `syz.4.10213'. [ 1295.054339][T11578] netlink: 36 bytes leftover after parsing attributes in process `syz.4.10213'. [ 1295.073462][T11578] netlink: 36 bytes leftover after parsing attributes in process `syz.4.10213'. [ 1295.113987][T11578] netlink: 36 bytes leftover after parsing attributes in process `syz.4.10213'. [ 1295.132012][T11578] netlink: 36 bytes leftover after parsing attributes in process `syz.4.10213'. [ 1295.152834][T11578] netlink: 36 bytes leftover after parsing attributes in process `syz.4.10213'. [ 1295.162230][T11578] netlink: 36 bytes leftover after parsing attributes in process `syz.4.10213'. [ 1295.190904][T11578] netlink: 36 bytes leftover after parsing attributes in process `syz.4.10213'. [ 1295.200241][T11578] netlink: 36 bytes leftover after parsing attributes in process `syz.4.10213'. [ 1295.580902][T11596] tipc: Enabled bearer , priority 10 [ 1295.903519][ T5979] net_ratelimit: 22 callbacks suppressed [ 1295.903543][ T5979] bond1: (slave macvlan3): failed to get link speed/duplex [ 1296.022642][T11610] bond3: left allmulticast mode [ 1296.028091][T11610] ip6gretap1: left allmulticast mode [ 1296.038860][T11610] bond3: left promiscuous mode [ 1296.045373][T11610] ip6gretap1: left promiscuous mode [ 1296.074351][T11610] team0 (unregistering): Failed to send port change of device macvlan4 via netlink (err -105) [ 1296.098048][T11610] team0 (unregistering): Port device macvlan4 removed [ 1296.121391][T11615] tipc: Enabled bearer , priority 0 [ 1296.179187][T11607] tipc: Disabling bearer [ 1296.234975][T20619] bond1: (slave macvlan3): failed to get link speed/duplex [ 1296.471079][T11631] netlink: 'syz.3.10227': attribute type 8 has an invalid length. [ 1296.471113][T11635] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_team, syncid = 0, id = 0 [ 1296.489516][T11631] sch_fq: defrate 0 ignored. [ 1296.553517][ T5979] bond1: (slave macvlan3): failed to get link speed/duplex [ 1296.670133][T11490] udevd[11490]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1296.681851][T11640] netlink: 'syz.4.10230': attribute type 1 has an invalid length. [ 1296.704619][ T6494] bond1: (slave macvlan3): failed to get link speed/duplex [ 1296.915572][T11640] bond2: entered promiscuous mode [ 1296.921166][T11640] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1296.978833][ T6494] bond1: (slave macvlan3): failed to get link speed/duplex [ 1297.103516][ T6494] bond1: (slave macvlan3): failed to get link speed/duplex [ 1297.203455][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 1297.211750][ C1] lec:lec_tx_timeout: lec0 [ 1297.217309][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 1297.223940][T20619] bond1: (slave macvlan3): failed to get link speed/duplex [ 1297.233872][T11660] netlink: 'syz.5.10236': attribute type 4 has an invalid length. [ 1297.353500][T20619] bond1: (slave macvlan3): failed to get link speed/duplex [ 1297.390206][T11665] syzkaller0: left promiscuous mode [ 1297.402429][T11665] syzkaller0: left allmulticast mode [ 1297.464548][T20619] bond1: (slave macvlan3): failed to get link speed/duplex [ 1297.504432][T11670] netlink: 'syz.4.10241': attribute type 1 has an invalid length. [ 1297.681220][T11678] bond2 (unregistering): Released all slaves [ 1297.764132][T11679] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1297.776220][T11679] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 1297.825018][ T6515] bond1: (slave macvlan3): failed to get link speed/duplex [ 1297.869997][T11670] bond3: (slave bridge0): Enslaving as an active interface with a down link [ 1297.932812][T11683] bond3: (slave bridge4): Enslaving as an active interface with a down link [ 1298.009588][T11688] macvlan3: entered promiscuous mode [ 1298.018869][T11688] macvlan3: entered allmulticast mode [ 1298.026771][T11688] bond3: entered promiscuous mode [ 1298.032792][T11688] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 1298.042987][T11688] bond3: left promiscuous mode [ 1298.791253][T11732] x_tables: unsorted underflow at hook 3 [ 1298.957559][T11729] syzkaller1: entered promiscuous mode [ 1298.966917][T11729] syzkaller1: entered allmulticast mode [ 1299.311120][T11743] veth1_macvtap: left promiscuous mode [ 1299.777667][T11753] can: request_module (can-proto-0) failed. [ 1300.164102][T11772] __nla_validate_parse: 30 callbacks suppressed [ 1300.164125][T11772] netlink: 71 bytes leftover after parsing attributes in process `syz.0.10266'. [ 1300.346395][T11777] tipc: Enabling of bearer rejected, failed to enable media [ 1300.379058][T11772] netlink: 'syz.0.10266': attribute type 1 has an invalid length. [ 1300.396365][T11772] netlink: 224 bytes leftover after parsing attributes in process `syz.0.10266'. [ 1300.499884][ C1] ip6_tunnel: ip6gretap3 xmit: Local address not yet configured! [ 1300.625546][T11790] netlink: 'syz.5.10268': attribute type 1 has an invalid length. [ 1300.740010][T11790] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1300.789010][T11796] netlink: 12 bytes leftover after parsing attributes in process `syz.5.10268'. [ 1300.978962][T11793] bond2: (slave veth5): Enslaving as an active interface with a down link [ 1301.031672][T11796] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1301.042556][T11796] bond2: (slave batadv0): making interface the new active one [ 1301.060303][T11796] batadv0: entered promiscuous mode [ 1301.069799][T11796] bond2: (slave batadv0): Enslaving as an active interface with an up link [ 1301.126859][T11799] team0: Device veth3 is up. Set it down before adding it as a team port [ 1301.201543][ T5488] veth1_macvtap: entered promiscuous mode [ 1301.294448][ T6494] net_ratelimit: 17 callbacks suppressed [ 1301.294473][ T6494] bond1: (slave macvlan3): failed to get link speed/duplex [ 1301.445189][ T6494] bond1: (slave macvlan3): failed to get link speed/duplex [ 1301.553856][ T5982] bond1: (slave macvlan3): failed to get link speed/duplex [ 1301.694716][T11820] netlink: 16 bytes leftover after parsing attributes in process `syz.3.10276'. [ 1301.813881][T11820] batadv0: entered promiscuous mode [ 1301.843535][ T6515] bond1: (slave macvlan3): failed to get link speed/duplex [ 1301.955759][T11834] netlink: 24 bytes leftover after parsing attributes in process `syz.5.10279'. [ 1301.959927][T20619] bond1: (slave macvlan3): failed to get link speed/duplex [ 1302.165069][ T5982] bond1: (slave macvlan3): failed to get link speed/duplex [ 1302.207383][T11844] netlink: 6040 bytes leftover after parsing attributes in process `syz.4.10281'. [ 1302.233397][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 1302.241784][ C1] lec:lec_tx_timeout: lec0 [ 1302.246707][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 1302.334090][ T5982] bond1: (slave macvlan3): failed to get link speed/duplex [ 1302.484393][T11853] netlink: 'syz.5.10283': attribute type 1 has an invalid length. [ 1302.715602][ T6494] bond1: (slave macvlan3): failed to get link speed/duplex [ 1303.116276][ T5982] bond1: (slave macvlan3): failed to get link speed/duplex [ 1303.245579][T11881] netlink: 52 bytes leftover after parsing attributes in process `syz.4.10290'. [ 1303.276150][T20619] bond1: (slave macvlan3): failed to get link speed/duplex [ 1303.313125][T11884] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10290'. [ 1303.371279][T11881] netlink: 'syz.4.10290': attribute type 4 has an invalid length. [ 1304.467700][T11912] netlink: 'syz.3.10296': attribute type 4 has an invalid length. [ 1304.487206][T11912] syzkaller0: entered promiscuous mode [ 1304.505766][T11912] syzkaller0: entered allmulticast mode [ 1304.600094][T11918] syzkaller0: entered promiscuous mode [ 1304.608271][T11918] syzkaller0: entered allmulticast mode [ 1304.876041][T11930] bridge_slave_0: left allmulticast mode [ 1304.889849][T11930] bridge_slave_0: left promiscuous mode [ 1304.898748][T11930] bridge0: port 1(bridge_slave_0) entered disabled state [ 1304.942635][T11930] bond0: (slave bridge_slave_1): Releasing backup interface [ 1304.975287][T11930] bond0: (slave bond_slave_0): Releasing backup interface [ 1305.012436][T11930] bond0: (slave bond_slave_1): Releasing backup interface [ 1305.063234][T11930] team0: Port device team_slave_0 removed [ 1305.088735][T11930] team0: Port device team_slave_1 removed [ 1305.101966][T11930] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1305.110727][T11930] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1305.120225][T11930] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1305.136092][T11930] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1305.256704][T11945] syzkaller1: entered promiscuous mode [ 1305.262250][T11945] syzkaller1: entered allmulticast mode [ 1305.955690][T11973] netlink: 'syz.0.10313': attribute type 1 has an invalid length. [ 1306.040900][T11970] IPVS: Scheduler module ip_vs_ not found [ 1306.091838][T11976] RDS: rds_bind could not find a transport for ::ffff:172.30.1.1, load rds_tcp or rds_rdma? [ 1306.313531][ T5982] net_ratelimit: 19 callbacks suppressed [ 1306.313553][ T5982] bond1: (slave macvlan3): failed to get link speed/duplex [ 1306.371665][T11983] xt_hashlimit: max too large, truncated to 1048576 [ 1306.643748][ T5982] bond1: (slave macvlan3): failed to get link speed/duplex [ 1306.737117][ T5706] block nbd2: Receive control failed (result -32) [ 1306.770645][T11995] bridge_slave_0: left allmulticast mode [ 1306.776735][T11995] bridge_slave_0: left promiscuous mode [ 1306.782741][T11995] bridge0: port 1(bridge_slave_0) entered disabled state [ 1306.838451][T11995] bridge_slave_1: left allmulticast mode [ 1306.848576][T11995] bridge_slave_1: left promiscuous mode [ 1306.854959][T11995] bridge0: port 2(bridge_slave_1) entered disabled state [ 1306.950215][T11995] team0: Port device team_slave_0 removed [ 1307.018677][T11995] team0: Port device team_slave_1 removed [ 1307.046334][T11995] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1307.149449][T11998] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10320'. [ 1307.253462][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 1307.261606][ C1] lec:lec_tx_timeout: lec0 [ 1307.266875][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 1307.301779][ T5982] bond1: (slave macvlan3): failed to get link speed/duplex [ 1307.313853][T12004] netlink: 11 bytes leftover after parsing attributes in process `syz.0.10322'. [ 1307.434935][T12008] netlink: 'syz.0.10323': attribute type 10 has an invalid length. [ 1307.497931][T12010] xt_bpf: check failed: parse error [ 1307.565489][T12008] syz_tun: entered promiscuous mode [ 1307.571149][T12011] siw: device registration error -23 [ 1307.599241][T12008] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 1307.641309][T12013] lo speed is unknown, defaulting to 1000 [ 1307.653758][ T5982] bond1: (slave macvlan3): failed to get link speed/duplex [ 1307.798017][T12013] lo speed is unknown, defaulting to 1000 [ 1307.806960][T12017] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1307.832216][T12013] lo speed is unknown, defaulting to 1000 [ 1307.838310][ T5982] bond1: (slave macvlan3): failed to get link speed/duplex [ 1307.879445][T12013] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 1307.953777][ T5982] bond1: (slave macvlan3): failed to get link speed/duplex [ 1308.027026][T12013] lo speed is unknown, defaulting to 1000 [ 1308.052222][T12013] lo speed is unknown, defaulting to 1000 [ 1308.079960][T12013] lo speed is unknown, defaulting to 1000 [ 1308.088250][ T5982] bond1: (slave macvlan3): failed to get link speed/duplex [ 1308.103615][T12013] lo speed is unknown, defaulting to 1000 [ 1308.117140][T12013] lo speed is unknown, defaulting to 1000 [ 1308.146072][T12013] lo speed is unknown, defaulting to 1000 [ 1308.186321][T12013] lo speed is unknown, defaulting to 1000 [ 1308.207959][T12013] lo speed is unknown, defaulting to 1000 [ 1308.214210][ T5982] bond1: (slave macvlan3): failed to get link speed/duplex [ 1308.250131][T12013] lo speed is unknown, defaulting to 1000 [ 1308.347349][T11698] bond1: (slave macvlan3): failed to get link speed/duplex [ 1308.393625][ T8005] lo speed is unknown, defaulting to 1000 [ 1308.600169][T12038] netlink: 204 bytes leftover after parsing attributes in process `syz.2.10332'. [ 1308.633569][T12038] netlink: 16 bytes leftover after parsing attributes in process `syz.2.10332'. [ 1309.723807][T12058] lo speed is unknown, defaulting to 1000 [ 1310.351005][T12104] netlink: 12 bytes leftover after parsing attributes in process `syz.5.10351'. [ 1310.501940][T12117] netlink: 'syz.5.10354': attribute type 1 has an invalid length. [ 1310.732838][T12127] netlink: 16138 bytes leftover after parsing attributes in process `syz.5.10355'. [ 1310.763564][T12127] netlink: 'syz.5.10355': attribute type 10 has an invalid length. [ 1310.781483][T12127] netlink: 228 bytes leftover after parsing attributes in process `syz.5.10355'. [ 1310.816118][T12127] sch_tbf: burst 8 is lower than device syzkaller0 mtu (1500) ! [ 1310.901662][T12093] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1310.915727][T12093] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 1310.954394][T12093] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1310.968782][T12093] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 1311.216383][T12154] netlink: 14 bytes leftover after parsing attributes in process `syz.3.10361'. [ 1311.306163][T12159] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10362'. [ 1311.355330][T12161] netlink: 'syz.0.10364': attribute type 21 has an invalid length. [ 1311.368178][T12161] netlink: 128 bytes leftover after parsing attributes in process `syz.0.10364'. [ 1311.383833][ T5982] net_ratelimit: 25 callbacks suppressed [ 1311.383856][ T5982] bond1: (slave macvlan3): failed to get link speed/duplex [ 1311.413486][T12161] netlink: 'syz.0.10364': attribute type 5 has an invalid length. [ 1311.535573][ T5982] bond1: (slave macvlan3): failed to get link speed/duplex [ 1311.665916][ T5978] bond1: (slave macvlan3): failed to get link speed/duplex [ 1311.835428][T12183] bond0: (slave syz_tun): Releasing backup interface [ 1311.885931][T12183] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1311.917405][ T6494] bond1: (slave macvlan3): failed to get link speed/duplex [ 1312.054211][ T5978] bond1: (slave macvlan3): failed to get link speed/duplex [ 1312.183695][ T6515] bond1: (slave macvlan3): failed to get link speed/duplex [ 1312.268401][T12216] __nla_validate_parse: 7 callbacks suppressed [ 1312.268424][T12216] netlink: 96 bytes leftover after parsing attributes in process `syz.0.10380'. [ 1312.273716][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 1312.292476][ C1] lec:lec_tx_timeout: lec0 [ 1312.323517][ T5982] bond1: (slave macvlan3): failed to get link speed/duplex [ 1312.410247][T12223] netlink: 64 bytes leftover after parsing attributes in process `syz.5.10381'. [ 1312.435291][ T6515] batadv0: left promiscuous mode [ 1312.444365][ T5982] bond1: (slave macvlan3): failed to get link speed/duplex [ 1312.557724][ T6515] bond1: (slave macvlan3): failed to get link speed/duplex [ 1312.588644][T12218] lo speed is unknown, defaulting to 1000 [ 1312.815501][ T5840] Bluetooth: hci5: command 0x0406 tx timeout [ 1312.836708][T12093] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1312.851840][T12093] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 1312.910499][T12093] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1312.933646][T12093] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 1312.949622][T12244] netlink: 32 bytes leftover after parsing attributes in process `syz.5.10388'. [ 1313.077836][T12093] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1313.095680][T12093] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 1313.108904][T12253] netlink: 16 bytes leftover after parsing attributes in process `syz.2.10389'. [ 1313.181300][T12256] netlink: 12 bytes leftover after parsing attributes in process `syz.5.10391'. [ 1313.240765][T12256] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10391'. [ 1313.251569][T12256] sctp: [Deprecated]: syz.5.10391 (pid 12256) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1313.251569][T12256] Use struct sctp_sack_info instead [ 1313.513578][T12266] netlink: 'syz.4.10394': attribute type 1 has an invalid length. [ 1313.578816][T12266] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10394'. [ 1313.824301][T12287] IPv6: NLM_F_REPLACE set, but no existing node found! [ 1313.961050][T12293] syzkaller0: entered promiscuous mode [ 1313.969825][T12293] syzkaller0: entered allmulticast mode [ 1314.089155][T12252] lo speed is unknown, defaulting to 1000 [ 1314.104862][T12240] lo speed is unknown, defaulting to 1000 [ 1314.248911][T12296] netlink: 328 bytes leftover after parsing attributes in process `syz.5.10402'. [ 1314.801405][T12308] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10405'. [ 1314.833231][T12308] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10405'. [ 1314.842757][T12308] sctp: [Deprecated]: syz.4.10405 (pid 12308) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1314.842757][T12308] Use struct sctp_sack_info instead [ 1314.925224][T12277] lo speed is unknown, defaulting to 1000 [ 1315.175689][ T5918] lo speed is unknown, defaulting to 1000 [ 1315.181870][ T5918] syz2: Port: 1 Link DOWN [ 1315.601581][T12319] mac80211_hwsim hwsim159 syzkaller0: entered promiscuous mode [ 1315.614479][T12319] mac80211_hwsim hwsim159 syzkaller0: entered allmulticast mode [ 1316.403682][ T6515] net_ratelimit: 22 callbacks suppressed [ 1316.403704][ T6515] bond1: (slave macvlan3): failed to get link speed/duplex [ 1316.553830][ T6515] bond1: (slave macvlan3): failed to get link speed/duplex [ 1316.784272][T12370] veth0_macvtap: left promiscuous mode [ 1316.831797][T12377] sctp: [Deprecated]: syz.2.10417 (pid 12377) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1316.831797][T12377] Use struct sctp_sack_info instead [ 1316.963575][ T6494] bond1: (slave macvlan3): failed to get link speed/duplex [ 1317.073480][T20619] bond1: (slave macvlan3): failed to get link speed/duplex [ 1317.194019][ T6515] bond1: (slave macvlan3): failed to get link speed/duplex [ 1317.250873][T12390] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1317.289645][T12402] __nla_validate_parse: 6 callbacks suppressed [ 1317.289668][T12402] netlink: 48 bytes leftover after parsing attributes in process `syz.2.10423'. [ 1317.313488][ T6494] bond1: (slave macvlan3): failed to get link speed/duplex [ 1317.341623][T12390] IPVS: sh: SCTP 172.20.20.187:0 - no destination available [ 1317.431510][ T6515] bond1: (slave macvlan3): failed to get link speed/duplex [ 1317.577882][T12417] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10423'. [ 1317.700382][T20619] bond1: (slave macvlan3): failed to get link speed/duplex [ 1317.844706][ T5978] bond1: (slave macvlan3): failed to get link speed/duplex [ 1318.108101][T12442] netlink: 'syz.4.10432': attribute type 1 has an invalid length. [ 1318.125903][T12443] netlink: 12 bytes leftover after parsing attributes in process `syz.5.10433'. [ 1318.171264][T12443] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10433'. [ 1318.218922][T12443] sctp: [Deprecated]: syz.5.10433 (pid 12443) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1318.218922][T12443] Use struct sctp_sack_info instead [ 1318.608354][T12483] netlink: 12 bytes leftover after parsing attributes in process `syz.5.10442'. [ 1318.739162][T12489] netlink: 84 bytes leftover after parsing attributes in process `syz.3.10446'. [ 1319.114976][T12507] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10450'. [ 1319.126339][T12509] FAULT_INJECTION: forcing a failure. [ 1319.126339][T12509] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1319.157077][T12509] CPU: 0 UID: 0 PID: 12509 Comm: syz.0.10451 Not tainted syzkaller #0 PREEMPT(full) [ 1319.157109][T12509] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1319.157124][T12509] Call Trace: [ 1319.157137][T12509] [ 1319.157148][T12509] dump_stack_lvl+0xe8/0x150 [ 1319.157196][T12509] should_fail_ex+0x412/0x560 [ 1319.157228][T12509] _copy_from_user+0x2d/0xb0 [ 1319.157267][T12509] ___sys_recvmsg+0x175/0x590 [ 1319.157313][T12509] ? __pfx____sys_recvmsg+0x10/0x10 [ 1319.157373][T12509] ? __fget_files+0x3a0/0x420 [ 1319.157416][T12509] do_recvmmsg+0x334/0x800 [ 1319.157459][T12509] ? __pfx_do_recvmmsg+0x10/0x10 [ 1319.157505][T12509] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1319.157557][T12509] __x64_sys_recvmmsg+0x198/0x250 [ 1319.157594][T12509] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1319.157640][T12509] do_syscall_64+0x14d/0xf80 [ 1319.157671][T12509] ? trace_irq_disable+0x3b/0x150 [ 1319.157700][T12509] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1319.157720][T12509] ? clear_bhb_loop+0x40/0x90 [ 1319.157743][T12509] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1319.157766][T12509] RIP: 0033:0x7f5bfdb9c799 [ 1319.157789][T12509] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1319.157809][T12509] RSP: 002b:00007f5bfeaeb028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1319.157834][T12509] RAX: ffffffffffffffda RBX: 00007f5bfde15fa0 RCX: 00007f5bfdb9c799 [ 1319.157851][T12509] RDX: 0000000000000001 RSI: 0000200000000040 RDI: 0000000000000003 [ 1319.157865][T12509] RBP: 00007f5bfeaeb090 R08: 0000000000000000 R09: 0000000000000000 [ 1319.157879][T12509] R10: 0000000040000020 R11: 0000000000000246 R12: 0000000000000001 [ 1319.157893][T12509] R13: 00007f5bfde16038 R14: 00007f5bfde15fa0 R15: 00007ffebd9b2e28 [ 1319.157927][T12509] [ 1319.287543][T12507] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10450'. [ 1319.390981][T12510] sctp: [Deprecated]: syz.3.10450 (pid 12510) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1319.390981][T12510] Use struct sctp_sack_info instead [ 1319.616249][T12518] netlink: 48 bytes leftover after parsing attributes in process `syz.5.10454'. [ 1319.635536][T12518] syzkaller0: entered promiscuous mode [ 1319.644069][T12518] syzkaller0: entered allmulticast mode [ 1319.754991][T12504] lo speed is unknown, defaulting to 1000 [ 1320.000670][T12529] netlink: 'syz.2.10459': attribute type 1 has an invalid length. [ 1320.070255][T12529] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1320.143144][T12529] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10459'. [ 1320.369302][T12529] bond4 (unregistering): Released all slaves [ 1320.965458][T12552] sctp: [Deprecated]: syz.4.10466 (pid 12552) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1320.965458][T12552] Use struct sctp_sack_info instead [ 1320.985086][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1321.314544][T12560] bridge5: entered promiscuous mode [ 1321.329953][T12560] bridge5: entered allmulticast mode [ 1321.474251][ T5982] net_ratelimit: 23 callbacks suppressed [ 1321.474275][ T5982] bond1: (slave macvlan3): failed to get link speed/duplex [ 1321.604075][ T6515] bond1: (slave macvlan3): failed to get link speed/duplex [ 1321.776271][ T6515] bond1: (slave macvlan3): failed to get link speed/duplex [ 1322.043473][ T5983] bond1: (slave macvlan3): failed to get link speed/duplex [ 1322.153485][ T5983] bond1: (slave macvlan3): failed to get link speed/duplex [ 1322.176474][T12592] sctp: [Deprecated]: syz.0.10479 (pid 12592) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1322.176474][T12592] Use struct sctp_sack_info instead [ 1322.307558][ T5978] bond1: (slave macvlan3): failed to get link speed/duplex [ 1322.424942][ T5978] bond1: (slave macvlan3): failed to get link speed/duplex [ 1322.543716][ T5983] bond1: (slave macvlan3): failed to get link speed/duplex [ 1322.664447][ T5978] bond1: (slave macvlan3): failed to get link speed/duplex [ 1322.803844][ T5983] bond1: (slave macvlan3): failed to get link speed/duplex [ 1322.834307][T12614] vlan0: entered promiscuous mode [ 1323.022226][T12584] lo speed is unknown, defaulting to 1000 [ 1323.304119][T12635] __nla_validate_parse: 5 callbacks suppressed [ 1323.304142][T12635] netlink: 52 bytes leftover after parsing attributes in process `syz.4.10489'. [ 1323.339465][T12635] netlink: 52 bytes leftover after parsing attributes in process `syz.4.10489'. [ 1323.371584][T12635] netlink: 52 bytes leftover after parsing attributes in process `syz.4.10489'. [ 1323.398307][T12638] bond0: entered promiscuous mode [ 1323.406643][T12638] batadv0: entered promiscuous mode [ 1323.413039][T12633] netlink: 'syz.3.10490': attribute type 1 has an invalid length. [ 1323.421352][T12633] netlink: 36 bytes leftover after parsing attributes in process `syz.3.10490'. [ 1323.434168][T12638] batadv0: left promiscuous mode [ 1323.465294][T12638] bond0: left promiscuous mode [ 1323.479690][T12639] syzkaller0: entered promiscuous mode [ 1323.486074][T12639] syzkaller0: entered allmulticast mode [ 1323.647849][T12642] netlink: 12 bytes leftover after parsing attributes in process `syz.5.10492'. [ 1323.686075][T12642] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10492'. [ 1323.711162][T12642] sctp: [Deprecated]: syz.5.10492 (pid 12642) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1323.711162][T12642] Use struct sctp_sack_info instead [ 1324.234062][T12666] netlink: 'syz.0.10501': attribute type 4 has an invalid length. [ 1324.323741][T12669] netlink: 'syz.5.10500': attribute type 3 has an invalid length. [ 1324.331644][T12669] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10500'. [ 1324.496652][T12687] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10506'. [ 1324.512465][T12688] xt_nat: multiple ranges no longer supported [ 1324.628373][T12690] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10506'. [ 1324.658380][T12690] sctp: [Deprecated]: syz.3.10506 (pid 12690) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1324.658380][T12690] Use struct sctp_sack_info instead [ 1325.961115][T12663] lo speed is unknown, defaulting to 1000 [ 1325.961857][ T6494] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1326.026429][ T6494] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1326.078101][ T6494] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1326.100805][ T6494] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1326.294079][T12736] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10513'. [ 1326.358255][T12726] syzkaller1: entered promiscuous mode [ 1326.380486][T12726] syzkaller1: entered allmulticast mode [ 1326.406320][T12736] netlink: 'syz.2.10513': attribute type 11 has an invalid length. [ 1326.503926][ T6494] net_ratelimit: 13 callbacks suppressed [ 1326.503952][ T6494] bond1: (slave macvlan3): failed to get link speed/duplex [ 1326.654345][ T6515] bond1: (slave macvlan3): failed to get link speed/duplex [ 1326.671381][T12749] sctp: [Deprecated]: syz.4.10519 (pid 12749) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1326.671381][T12749] Use struct sctp_sack_info instead [ 1326.797219][ T5978] bond1: (slave macvlan3): failed to get link speed/duplex [ 1326.973713][ T6515] bond1: (slave macvlan3): failed to get link speed/duplex [ 1327.083551][ T6515] bond1: (slave macvlan3): failed to get link speed/duplex [ 1327.200043][T12771] ip6tnl2: entered allmulticast mode [ 1327.244276][ T6494] bond1: (slave macvlan3): failed to get link speed/duplex [ 1327.385538][ T6494] bond1: (slave macvlan3): failed to get link speed/duplex [ 1327.497972][T12777] syzkaller1: entered promiscuous mode [ 1327.508790][T12777] syzkaller1: entered allmulticast mode [ 1327.531854][T12754] lo speed is unknown, defaulting to 1000 [ 1328.096999][T12792] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1328.145268][ T6515] bond1: (slave macvlan3): failed to get link speed/duplex [ 1328.394773][ T5978] bond1: (slave macvlan3): failed to get link speed/duplex [ 1328.494224][T12795] lo speed is unknown, defaulting to 1000 [ 1328.663807][ T797] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 1328.687150][T12818] __nla_validate_parse: 6 callbacks suppressed [ 1328.687171][T12818] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10541'. [ 1328.853637][ T5978] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 1328.863391][T12821] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.10542'. [ 1329.178391][T12828] syzkaller0: entered promiscuous mode [ 1329.194792][ T7990] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 1329.228461][T12828] syzkaller0: entered allmulticast mode [ 1329.681770][T12845] batman_adv: batadv0: Adding interface: wlan1 [ 1329.693591][T12845] batman_adv: batadv0: The MTU of interface wlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1329.723059][T12861] netlink: 'syz.2.10550': attribute type 1 has an invalid length. [ 1329.900405][T12845] batman_adv: batadv0: Not using interface wlan1 (retrying later): interface not active [ 1330.176542][ T6515] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 1330.196363][T12870] netlink: 'syz.5.10551': attribute type 10 has an invalid length. [ 1330.223098][ T6515] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 1330.251952][T12871] netlink: 'syz.5.10551': attribute type 10 has an invalid length. [ 1330.282821][T12870] team0: Port device dummy0 added [ 1330.344712][T12871] team0: Port device dummy0 removed [ 1330.853809][T12895] netlink: 228 bytes leftover after parsing attributes in process `syz.2.10558'. [ 1330.885040][T12896] xt_HMARK: proto mask must be zero with L3 mode [ 1330.967907][T12901] netlink: 'syz.5.10559': attribute type 1 has an invalid length. [ 1331.014103][T12901] netlink: 'syz.5.10559': attribute type 1 has an invalid length. [ 1331.155104][T12843] lo speed is unknown, defaulting to 1000 [ 1331.215127][ T5918] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 1331.271876][T12915] netlink: 60 bytes leftover after parsing attributes in process `syz.3.10562'. [ 1331.493465][T12929] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 1331.543966][ T6494] net_ratelimit: 2064 callbacks suppressed [ 1331.543992][ T6494] bond1: (slave macvlan3): failed to get link speed/duplex [ 1331.676686][T12944] netlink: 'syz.3.10571': attribute type 2 has an invalid length. [ 1331.690543][T12940] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10567'. [ 1331.714274][T12944] netlink: 'syz.3.10571': attribute type 1 has an invalid length. [ 1331.736141][T12944] netlink: 'syz.3.10571': attribute type 1 has an invalid length. [ 1331.796709][ T5983] bond1: (slave macvlan3): failed to get link speed/duplex [ 1331.939581][T12955] netlink: 64138 bytes leftover after parsing attributes in process `syz.2.10573'. [ 1332.005632][T12955] netlink: 16 bytes leftover after parsing attributes in process `syz.2.10573'. [ 1332.026546][T12955] netlink: 24 bytes leftover after parsing attributes in process `syz.2.10573'. [ 1332.037578][T12955] netlink: 'syz.2.10573': attribute type 3 has an invalid length. [ 1332.157061][T12939] lo speed is unknown, defaulting to 1000 [ 1332.163444][ T6494] bond1: (slave macvlan3): failed to get link speed/duplex [ 1332.344322][ T6515] bond1: (slave macvlan3): failed to get link speed/duplex [ 1332.495607][ T5982] bond1: (slave macvlan3): failed to get link speed/duplex [ 1332.504063][ T6494] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1332.512531][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1332.754206][ T6494] bond1: (slave macvlan3): failed to get link speed/duplex [ 1332.817532][T12988] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10584'. [ 1332.875611][ T6494] bond1: (slave macvlan3): failed to get link speed/duplex [ 1333.003510][ T5982] bond1: (slave macvlan3): failed to get link speed/duplex [ 1333.092903][T12997] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10585'. [ 1333.144314][T12964] lo speed is unknown, defaulting to 1000 [ 1333.398879][T13009] syzkaller0: entered promiscuous mode [ 1333.409489][T13009] syzkaller0: entered allmulticast mode [ 1333.829024][T13026] __nla_validate_parse: 1 callbacks suppressed [ 1333.829047][T13026] netlink: 24 bytes leftover after parsing attributes in process `syz.5.10592'. [ 1333.864740][T13026] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10592'. [ 1334.016130][ C0] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 1334.042822][T13035] veth0_to_batadv: entered promiscuous mode [ 1334.053619][T13035] veth0_to_batadv: entered allmulticast mode [ 1334.161445][T13041] netlink: 'syz.3.10597': attribute type 1 has an invalid length. [ 1334.197795][T13041] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1334.261739][T13041] bond0: (slave gretap3): making interface the new active one [ 1334.284866][T13041] bond0: (slave gretap3): Enslaving as an active interface with an up link [ 1334.296510][T13047] netlink: 28 bytes leftover after parsing attributes in process `syz.5.10599'. [ 1334.317741][T13047] netlink: 28 bytes leftover after parsing attributes in process `syz.5.10599'. [ 1334.336549][T13007] lo speed is unknown, defaulting to 1000 [ 1334.344843][T13049] netlink: 28 bytes leftover after parsing attributes in process `syz.5.10599'. [ 1334.373519][T13049] netlink: 28 bytes leftover after parsing attributes in process `syz.5.10599'. [ 1334.437036][T13049] netlink: 28 bytes leftover after parsing attributes in process `syz.5.10599'. [ 1334.483491][T13049] netlink: 28 bytes leftover after parsing attributes in process `syz.5.10599'. [ 1334.535871][T13010] lo speed is unknown, defaulting to 1000 [ 1334.990611][ T4307] lec:lec_start_xmit: lec0:No lecd attached [ 1335.027809][T13069] netlink: 3 bytes leftover after parsing attributes in process `syz.2.10604'. [ 1335.066289][T13069] 0X: renamed from caif0 [ 1335.147127][T13069] 0X: entered allmulticast mode [ 1335.261607][T13078] netlink: 48 bytes leftover after parsing attributes in process `syz.4.10606'. [ 1335.360220][T13057] lo speed is unknown, defaulting to 1000 [ 1335.414964][T13078] x_tables: duplicate underflow at hook 1 [ 1336.233519][T13106] netlink: 'syz.5.10617': attribute type 1 has an invalid length. [ 1336.242128][T13106] nbd: error processing sock list [ 1336.350700][T13096] bond5: option coupled_control: mode dependency failed, not supported in mode balance-rr(0) [ 1336.455597][T13096] bond5 (unregistering): Released all slaves [ 1336.660391][ T5982] net_ratelimit: 19 callbacks suppressed [ 1336.660414][ T5982] bond1: (slave macvlan3): failed to get link speed/duplex [ 1336.804229][T11698] bond1: (slave macvlan3): failed to get link speed/duplex [ 1336.914090][T11698] bond1: (slave macvlan3): failed to get link speed/duplex [ 1336.965340][T13130] xt_l2tp: invalid flags combination: 0 [ 1337.023627][ T5983] bond1: (slave macvlan3): failed to get link speed/duplex [ 1337.058682][T13099] lo speed is unknown, defaulting to 1000 [ 1337.193506][ T5983] bond1: (slave macvlan3): failed to get link speed/duplex [ 1337.370976][T13124] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 1337.431760][T13144] IPVS: set_ctl: invalid protocol: 29 224.0.0.1:8188 [ 1337.447536][T13144] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1337.456589][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1337.467475][T13144] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1337.497311][T11698] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1337.504433][ T6494] bond1: (slave macvlan3): failed to get link speed/duplex [ 1337.904112][T13156] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1338.364916][T13174] netlink: 'syz.4.10636': attribute type 1 has an invalid length. [ 1338.419947][T13174] bond4: entered promiscuous mode [ 1338.425714][T13174] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1338.616217][T13165] lo speed is unknown, defaulting to 1000 [ 1338.650514][T13174] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1338.674915][T13174] bond4: (slave wireguard0): The slave device specified does not support setting the MAC address [ 1338.688406][T13174] bond4: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 1338.711631][T13174] bond4: (slave wireguard0): making interface the new active one [ 1338.742367][T13174] wireguard0: entered promiscuous mode [ 1338.750858][T13174] bond4: (slave wireguard0): Enslaving as an active interface with an up link [ 1339.146030][T13209] mac80211_hwsim hwsim159 syzkaller0: left promiscuous mode [ 1339.178187][T13209] mac80211_hwsim hwsim159 syzkaller0: left allmulticast mode [ 1339.610165][T13226] __nla_validate_parse: 5 callbacks suppressed [ 1339.610182][T13226] netlink: 12 bytes leftover after parsing attributes in process `syz.5.10649'. [ 1339.797082][T13239] dummy0: entered promiscuous mode [ 1339.802458][T13239] dummy0: entered allmulticast mode [ 1340.173652][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5180 ms [ 1340.181862][ C1] lec:lec_tx_timeout: lec0 [ 1340.230184][T13271] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10663'. [ 1340.481544][T13279] gretap2: entered promiscuous mode [ 1340.541898][T13279] batman_adv: batadv0: Adding interface: gretap2 [ 1340.580751][T13279] batman_adv: batadv0: The MTU of interface gretap2 is too small (1462) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1532. [ 1340.677729][T13279] batman_adv: batadv0: Not using interface gretap2 (retrying later): interface not active [ 1340.908272][T13275] lo speed is unknown, defaulting to 1000 [ 1341.436191][T13302] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10670'. [ 1341.454808][ C0] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 1341.780001][ T6494] net_ratelimit: 33 callbacks suppressed [ 1341.780024][ T6494] bond1: (slave macvlan3): failed to get link speed/duplex [ 1341.933882][ T5978] bond1: (slave macvlan3): failed to get link speed/duplex [ 1342.053881][ T6494] bond1: (slave macvlan3): failed to get link speed/duplex [ 1342.173934][ T5983] bond1: (slave macvlan3): failed to get link speed/duplex [ 1342.247163][T13308] lo speed is unknown, defaulting to 1000 [ 1342.522273][T13333] IPVS: set_ctl: invalid protocol: 94 10.1.1.2:3 [ 1342.563618][ T5979] bond1: (slave macvlan3): failed to get link speed/duplex [ 1342.846750][ T5979] bond1: (slave macvlan3): failed to get link speed/duplex [ 1342.907788][T13346] netlink: 14 bytes leftover after parsing attributes in process `syz.0.10686'. [ 1342.940775][T13346] bond0 (unregistering): Released all slaves [ 1343.063649][ T5979] bond1: (slave macvlan3): failed to get link speed/duplex [ 1343.173442][ T5982] bond1: (slave macvlan3): failed to get link speed/duplex [ 1343.283531][ T6494] bond1: (slave macvlan3): failed to get link speed/duplex [ 1343.379087][ T6515] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1343.601290][T13348] lo speed is unknown, defaulting to 1000 [ 1343.729944][T13359] netlink: 32 bytes leftover after parsing attributes in process `syz.4.10689'. [ 1343.841116][T13359] ip6t_rpfilter: unknown options [ 1344.080541][T13373] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10692'. [ 1344.089900][T13373] netlink: 24 bytes leftover after parsing attributes in process `syz.3.10692'. [ 1344.565707][T13387] netlink: 14 bytes leftover after parsing attributes in process `syz.3.10697'. [ 1344.731742][T13394] netlink: 'syz.2.10700': attribute type 1 has an invalid length. [ 1344.940444][T13400] bond6: (slave bridge8): making interface the new active one [ 1344.979223][T13400] bond6: (slave bridge8): Enslaving as an active interface with an up link [ 1344.995778][T13382] IPVS: length: 132 != 8 [ 1345.099864][T13376] lo speed is unknown, defaulting to 1000 [ 1345.240135][T13413] netlink: 180 bytes leftover after parsing attributes in process `syz.3.10705'. [ 1345.256409][T13415] netlink: 104 bytes leftover after parsing attributes in process `syz.2.10706'. [ 1345.381863][T13425] netlink: 20 bytes leftover after parsing attributes in process `syz.5.10709'. [ 1345.673961][T13435] block nbd3: server does not support multiple connections per device. [ 1345.698988][T13435] block nbd3: shutting down sockets [ 1345.839038][T13445] netlink: 12 bytes leftover after parsing attributes in process `syz.5.10713'. [ 1345.940980][T13448] nbd: couldn't find a device at index 0 [ 1346.188447][T13459] netlink: 'syz.2.10717': attribute type 2 has an invalid length. [ 1346.606786][T13434] lo speed is unknown, defaulting to 1000 [ 1346.853490][ T5983] net_ratelimit: 23 callbacks suppressed [ 1346.853511][ T5983] bond1: (slave macvlan3): failed to get link speed/duplex [ 1346.984138][ T5983] bond1: (slave macvlan3): failed to get link speed/duplex [ 1347.087428][T13494] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1347.096156][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1347.134423][T11698] bond1: (slave macvlan3): failed to get link speed/duplex [ 1347.224177][ T5983] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1347.233405][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1347.253958][ T5978] bond1: (slave macvlan3): failed to get link speed/duplex [ 1347.640001][T13492] dvmrp0: entered allmulticast mode [ 1347.735513][T13504] 8021q: VLANs not supported on ip6gre0 [ 1347.753945][ T6494] bond1: (slave macvlan3): failed to get link speed/duplex [ 1347.761306][T13481] lo speed is unknown, defaulting to 1000 [ 1348.003572][ T5978] bond1: (slave macvlan3): failed to get link speed/duplex [ 1348.226811][T13523] netlink: 12 bytes leftover after parsing attributes in process `syz.3.10731'. [ 1348.265366][T13523] bond1: entered promiscuous mode [ 1348.271105][T13523] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1348.375668][T13525] bridge5: entered promiscuous mode [ 1348.406807][T13525] bond1: (slave bridge5): Enslaving as an active interface with an up link [ 1348.544799][T13527] netlink: 14 bytes leftover after parsing attributes in process `syz.0.10732'. [ 1348.732307][T13520] lo speed is unknown, defaulting to 1000 [ 1348.767416][T13544] netlink: 24 bytes leftover after parsing attributes in process `syz.0.10736'. [ 1348.864801][T13547] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10738'. [ 1348.865075][T13550] tipc: Enabled bearer , priority 0 [ 1348.919169][T13553] syzkaller0: entered promiscuous mode [ 1348.927606][T13553] syzkaller0: entered allmulticast mode [ 1349.015275][T13550] tipc: Resetting bearer [ 1349.110122][T13548] tipc: Resetting bearer [ 1349.146869][T13548] tipc: Disabling bearer [ 1349.305052][T13560] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 1349.347155][T13560] bond0 (unregistering): Released all slaves [ 1349.389425][T13568] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10743'. [ 1349.577442][T13577] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10745'. [ 1349.652622][T13570] bond7: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 1349.689404][T13581] netlink: 'syz.5.10748': attribute type 1 has an invalid length. [ 1349.716099][T13570] bond7 (unregistering): Released all slaves [ 1350.044254][T13589] atomic_op ffff888052a52198 conn xmit_atomic 0000000000000000 [ 1350.071066][T13557] lo speed is unknown, defaulting to 1000 [ 1350.332229][T13607] __nla_validate_parse: 2 callbacks suppressed [ 1350.332251][T13607] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10756'. [ 1350.349351][T13608] netlink: 12 bytes leftover after parsing attributes in process `syz.5.10754'. [ 1350.454357][T13617] netlink: 'syz.5.10759': attribute type 3 has an invalid length. [ 1350.460299][T13610] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10757'. [ 1350.462579][T13617] netlink: 224 bytes leftover after parsing attributes in process `syz.5.10759'. [ 1350.569056][T13618] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10756'. [ 1350.609506][T13621] netlink: 56 bytes leftover after parsing attributes in process `syz.4.10761'. [ 1350.924255][T13632] netlink: 4732 bytes leftover after parsing attributes in process `syz.5.10765'. [ 1350.980530][T13633] netlink: 40 bytes leftover after parsing attributes in process `syz.4.10764'. [ 1351.014269][T13634] netlink: 'syz.4.10764': attribute type 7 has an invalid length. [ 1351.678138][T13687] netlink: 212320 bytes leftover after parsing attributes in process `syz.3.10783'. [ 1351.905954][ T5978] net_ratelimit: 139 callbacks suppressed [ 1351.905978][ T5978] bond1: (slave macvlan3): failed to get link speed/duplex [ 1352.024511][T13702] FAULT_INJECTION: forcing a failure. [ 1352.024511][T13702] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1352.038516][ T5978] bond1: (slave macvlan3): failed to get link speed/duplex [ 1352.046367][T13702] CPU: 0 UID: 0 PID: 13702 Comm: syz.4.10787 Not tainted syzkaller #0 PREEMPT(full) [ 1352.046397][T13702] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1352.046411][T13702] Call Trace: [ 1352.046420][T13702] [ 1352.046431][T13702] dump_stack_lvl+0xe8/0x150 [ 1352.046469][T13702] should_fail_ex+0x412/0x560 [ 1352.046502][T13702] _copy_to_user+0x31/0xb0 [ 1352.046537][T13702] simple_read_from_buffer+0xe1/0x170 [ 1352.046574][T13702] proc_fail_nth_read+0x1bb/0x230 [ 1352.046608][T13702] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1352.046643][T13702] ? rw_verify_area+0x2a6/0x4d0 [ 1352.046664][T13702] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1352.046696][T13702] vfs_read+0x20c/0xa70 [ 1352.046716][T13702] ? fdget_pos+0x246/0x320 [ 1352.046753][T13702] ? __pfx___mutex_lock+0x10/0x10 [ 1352.046787][T13702] ? __pfx_vfs_read+0x10/0x10 [ 1352.046812][T13702] ? __fget_files+0x2a/0x420 [ 1352.046847][T13702] ? __fget_files+0x3a0/0x420 [ 1352.046885][T13702] ? __fget_files+0x2a/0x420 [ 1352.046926][T13702] ksys_read+0x150/0x270 [ 1352.046952][T13702] ? __pfx_ksys_read+0x10/0x10 [ 1352.046987][T13702] do_syscall_64+0x14d/0xf80 [ 1352.047017][T13702] ? trace_irq_disable+0x3b/0x150 [ 1352.047049][T13702] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1352.047072][T13702] ? clear_bhb_loop+0x40/0x90 [ 1352.047100][T13702] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1352.047123][T13702] RIP: 0033:0x7ff078f5cfce [ 1352.047147][T13702] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1352.047167][T13702] RSP: 002b:00007ff079df4fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1352.047191][T13702] RAX: ffffffffffffffda RBX: 00007ff079df56c0 RCX: 00007ff078f5cfce [ 1352.047208][T13702] RDX: 000000000000000f RSI: 00007ff079df50a0 RDI: 0000000000000005 [ 1352.047222][T13702] RBP: 00007ff079df5090 R08: 0000000000000000 R09: 0000000000000000 [ 1352.047236][T13702] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1352.047249][T13702] R13: 00007ff079216038 R14: 00007ff079215fa0 R15: 00007ffd6b0124e8 [ 1352.047286][T13702] [ 1352.066721][T13680] lo speed is unknown, defaulting to 1000 [ 1352.163884][ T5978] bond1: (slave macvlan3): failed to get link speed/duplex [ 1352.766938][T13722] netlink: 488 bytes leftover after parsing attributes in process `syz.4.10792'. [ 1352.793970][ T5983] bond1: (slave macvlan3): failed to get link speed/duplex [ 1352.848558][T13682] lo speed is unknown, defaulting to 1000 [ 1352.974498][ T6515] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1352.983465][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1353.043476][ T5978] bond1: (slave macvlan3): failed to get link speed/duplex [ 1353.153535][ T5983] bond1: (slave macvlan3): failed to get link speed/duplex [ 1353.386617][ T5978] bond1: (slave macvlan3): failed to get link speed/duplex [ 1353.594071][ T5978] bond1: (slave macvlan3): failed to get link speed/duplex [ 1354.315397][T13753] bond0: option all_slaves_active: invalid value (8) [ 1355.139292][T13794] SET target dimension over the limit! [ 1355.307762][T13797] netlink: 'syz.4.10816': attribute type 16 has an invalid length. [ 1355.335500][T13797] netlink: 'syz.4.10816': attribute type 17 has an invalid length. [ 1355.468256][T13809] netlink: 'syz.5.10818': attribute type 10 has an invalid length. [ 1355.517650][T13809] dummy0: left promiscuous mode [ 1355.533553][ C0] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 1355.542302][T13807] netlink: 'syz.5.10818': attribute type 10 has an invalid length. [ 1355.543532][T13809] dummy0: left allmulticast mode [ 1355.617523][T13809] dummy0: entered promiscuous mode [ 1355.667380][T13809] team0: Port device dummy0 added [ 1355.724691][T13807] team0: Port device dummy0 removed [ 1355.738571][T13813] __nla_validate_parse: 8 callbacks suppressed [ 1355.738591][T13813] netlink: 14 bytes leftover after parsing attributes in process `syz.2.10820'. [ 1355.940957][T13825] x_tables: duplicate underflow at hook 1 [ 1355.968937][T13825] netlink: 116 bytes leftover after parsing attributes in process `syz.2.10824'. [ 1356.042747][T13833] macsec1: entered allmulticast mode [ 1356.275542][T13838] delete_channel: no stack [ 1356.305166][T13844] mac80211_hwsim hwsim159 syzkaller0: entered promiscuous mode [ 1356.313081][T13844] mac80211_hwsim hwsim159 syzkaller0: entered allmulticast mode [ 1356.386465][T13846] netlink: 5 bytes leftover after parsing attributes in process `syz.2.10832'. [ 1356.493810][T13853] netlink: 14 bytes leftover after parsing attributes in process `syz.5.10835'. [ 1356.727219][T13869] netlink: 'syz.5.10839': attribute type 4 has an invalid length. [ 1356.822622][T13869] netlink: 'syz.5.10839': attribute type 4 has an invalid length. [ 1356.888630][ T797] lo speed is unknown, defaulting to 1000 [ 1356.898368][ T797] syz2: Port: 1 Link ACTIVE [ 1356.933444][ T6494] net_ratelimit: 36 callbacks suppressed [ 1356.933467][ T6494] bond1: (slave macvlan3): failed to get link speed/duplex [ 1357.068461][T13883] xt_ecn: cannot match TCP bits for non-tcp packets [ 1357.095054][ T6515] bond1: (slave macvlan3): failed to get link speed/duplex [ 1357.256368][ T6494] bond1: (slave macvlan3): failed to get link speed/duplex [ 1357.345233][T13889] bond3: option tlb_dynamic_lb: invalid value (5) [ 1357.354942][T13889] bond3 (unregistering): Released all slaves [ 1357.386566][ T5978] bond1: (slave macvlan3): failed to get link speed/duplex [ 1357.535545][ T6515] bond1: (slave macvlan3): failed to get link speed/duplex [ 1357.704121][T13898] netlink: 14 bytes leftover after parsing attributes in process `syz.5.10849'. [ 1357.723918][ T6515] bond1: (slave macvlan3): failed to get link speed/duplex [ 1357.783385][T13903] netlink: 28 bytes leftover after parsing attributes in process `syz.4.10848'. [ 1357.863735][ T6494] bond1: (slave macvlan3): failed to get link speed/duplex [ 1357.977363][T13911] netlink: 55631 bytes leftover after parsing attributes in process `syz.0.10853'. [ 1357.994815][T13912] netlink: 12 bytes leftover after parsing attributes in process `syz.5.10852'. [ 1358.002995][T13911] netlink: 6324 bytes leftover after parsing attributes in process `syz.0.10853'. [ 1358.027228][T13911] netlink: 2 bytes leftover after parsing attributes in process `syz.0.10853'. [ 1358.049820][T13911] tc_dump_action: action bad kind [ 1358.073960][ T6494] bond1: (slave macvlan3): failed to get link speed/duplex [ 1358.183841][ T6494] bond1: (slave macvlan3): failed to get link speed/duplex [ 1358.229099][ T5983] netdevsim netdevsim5 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1358.283728][ T5983] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1358.303070][T13919] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1358.346506][T13921] FAULT_INJECTION: forcing a failure. [ 1358.346506][T13921] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1358.473906][T13921] CPU: 0 UID: 0 PID: 13921 Comm: syz.3.10836 Not tainted syzkaller #0 PREEMPT(full) [ 1358.473937][T13921] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1358.473950][T13921] Call Trace: [ 1358.473959][T13921] [ 1358.473968][T13921] dump_stack_lvl+0xe8/0x150 [ 1358.474004][T13921] should_fail_ex+0x412/0x560 [ 1358.474032][T13921] _copy_from_user+0x2d/0xb0 [ 1358.474063][T13921] generic_map_update_batch+0x648/0x990 [ 1358.474098][T13921] ? __pfx_generic_map_update_batch+0x10/0x10 [ 1358.474124][T13921] ? __fget_files+0x2a/0x420 [ 1358.474158][T13921] ? __pfx_generic_map_update_batch+0x10/0x10 [ 1358.474184][T13921] bpf_map_do_batch+0x39b/0x630 [ 1358.474212][T13921] __sys_bpf+0x7c1/0x950 [ 1358.474247][T13921] ? __pfx___sys_bpf+0x10/0x10 [ 1358.474303][T13921] ? ksys_write+0x242/0x270 [ 1358.474326][T13921] ? __pfx_ksys_write+0x10/0x10 [ 1358.474354][T13921] __x64_sys_bpf+0x7c/0x90 [ 1358.474382][T13921] do_syscall_64+0x14d/0xf80 [ 1358.474412][T13921] ? trace_irq_disable+0x3b/0x150 [ 1358.474443][T13921] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1358.474466][T13921] ? clear_bhb_loop+0x40/0x90 [ 1358.474493][T13921] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1358.474515][T13921] RIP: 0033:0x7faec159c799 [ 1358.474537][T13921] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1358.474557][T13921] RSP: 002b:00007faec24a9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1358.474580][T13921] RAX: ffffffffffffffda RBX: 00007faec1816090 RCX: 00007faec159c799 [ 1358.474597][T13921] RDX: 0000000000000038 RSI: 0000200000000140 RDI: 000000000000001a [ 1358.474611][T13921] RBP: 00007faec24a9090 R08: 0000000000000000 R09: 0000000000000000 [ 1358.474624][T13921] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1358.474638][T13921] R13: 00007faec1816128 R14: 00007faec1816090 R15: 00007fff287fce48 [ 1358.474672][T13921] [ 1358.961688][T13932] syzkaller0: entered promiscuous mode [ 1358.967750][T13932] syzkaller0: entered allmulticast mode [ 1359.142519][T13942] netlink: 'syz.4.10860': attribute type 11 has an invalid length. [ 1359.150664][T13942] netlink: 'syz.4.10860': attribute type 23 has an invalid length. [ 1359.470138][T13943] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1361.941208][ T1301] lec:lec_start_xmit: lec0:No lecd attached [ 1362.630342][T13970] net_ratelimit: 10 callbacks suppressed [ 1362.630363][T13970] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1362.643126][T13943] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1362.645798][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1362.695956][ T5982] bond1: (slave macvlan3): failed to get link speed/duplex [ 1362.722471][T13970] macvlan0: entered promiscuous mode [ 1362.737178][T13970] netlink: 'syz.4.10867': attribute type 2 has an invalid length. [ 1362.838789][T13943] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1362.860275][T13977] __nla_validate_parse: 2 callbacks suppressed [ 1362.860298][T13977] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10871'. [ 1362.956594][T13977] bond0: peer notification delay (9) is not a multiple of miimon (100), value rounded to 0 ms [ 1363.053890][T13943] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1363.094222][ T5982] bond1: (slave macvlan3): failed to get link speed/duplex [ 1363.204103][T11698] bond1: (slave macvlan3): failed to get link speed/duplex [ 1363.304182][ T5982] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1363.314637][ T5982] bond1: (slave macvlan3): failed to get link speed/duplex [ 1363.333556][ T6494] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1363.374364][T14011] netlink: 209852 bytes leftover after parsing attributes in process `syz.5.10879'. [ 1363.384915][ T6494] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1363.407293][T14014] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1363.457499][ T5982] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1363.493490][ T5982] bond1: (slave macvlan3): failed to get link speed/duplex [ 1363.665417][T11698] bond1: (slave macvlan3): failed to get link speed/duplex [ 1363.740001][T14025] netlink: 'syz.3.10882': attribute type 142 has an invalid length. [ 1363.773848][ T6494] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1363.894400][T14017] lo speed is unknown, defaulting to 1000 [ 1364.634994][T14024] lo speed is unknown, defaulting to 1000 [ 1364.764201][T14072] netlink: 'syz.5.10896': attribute type 10 has an invalid length. [ 1364.897504][T14029] netlink: 20 bytes leftover after parsing attributes in process `syz.2.10884'. [ 1365.111073][T14082] netlink: 'syz.3.10898': attribute type 10 has an invalid length. [ 1365.164546][T14072] tipc: Disabling bearer [ 1365.426787][T14087] tun0: tun_chr_ioctl cmd 1074025677 [ 1365.454913][T14087] tun0: linktype set to 804 [ 1365.674252][T14101] netlink: 20 bytes leftover after parsing attributes in process `syz.5.10904'. [ 1365.689872][T14101] netlink: 12 bytes leftover after parsing attributes in process `syz.5.10904'. [ 1365.733684][T14101] netlink: 31 bytes leftover after parsing attributes in process `syz.5.10904'. [ 1365.758175][T14101] netlink: 'syz.5.10904': attribute type 3 has an invalid length. [ 1365.772091][T14101] netlink: 'syz.5.10904': attribute type 2 has an invalid length. [ 1365.794347][T14109] netlink: 4 bytes leftover after parsing attributes in process `syz.0.10906'. [ 1365.812890][T14101] netlink: 31 bytes leftover after parsing attributes in process `syz.5.10904'. [ 1365.822847][T14101] netlink: 'syz.5.10904': attribute type 2 has an invalid length. [ 1365.911180][T14109] macvtap1: entered promiscuous mode [ 1365.947659][T14109] bridge0: entered promiscuous mode [ 1365.978381][T14109] macvtap1: entered allmulticast mode [ 1365.993704][T14109] bridge0: entered allmulticast mode [ 1366.007222][T14108] netlink: 14 bytes leftover after parsing attributes in process `syz.4.10907'. [ 1366.033819][T14120] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 1366.302793][T14128] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10913'. [ 1366.367200][T14097] lo speed is unknown, defaulting to 1000 [ 1367.143356][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5200 ms [ 1367.151521][ C1] lec:lec_tx_timeout: lec0 [ 1367.271211][T12701] IPVS: starting estimator thread 0... [ 1367.297507][T14180] netlink: 'syz.5.10930': attribute type 1 has an invalid length. [ 1367.383612][T14183] IPVS: using max 25 ests per chain, 60000 per kthread [ 1367.489817][T14186] bond3: (slave gretap3): making interface the new active one [ 1367.502311][T14194] netlink: 'syz.3.10933': attribute type 1 has an invalid length. [ 1367.518058][T14186] bond3: (slave gretap3): Enslaving as an active interface with an up link [ 1367.736135][T14202] netlink: 'syz.4.10935': attribute type 2 has an invalid length. [ 1367.787552][T14202] !9: entered promiscuous mode [ 1367.797840][T14207] netlink: 'syz.4.10935': attribute type 2 has an invalid length. [ 1367.831172][T14206] net_ratelimit: 23 callbacks suppressed [ 1367.831198][T14206] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1367.933821][T14207] !9: left promiscuous mode [ 1367.973962][ T6494] bond1: (slave macvlan3): failed to get link speed/duplex [ 1368.083518][ T5988] bond1: (slave macvlan3): failed to get link speed/duplex [ 1368.198302][ T5979] bond1: (slave macvlan3): failed to get link speed/duplex [ 1368.284381][T14228] syzkaller1: entered promiscuous mode [ 1368.289938][T14228] syzkaller1: entered allmulticast mode [ 1368.353641][ T5988] bond1: (slave macvlan3): failed to get link speed/duplex [ 1368.504233][T14236] netlink: 'syz.4.10947': attribute type 1 has an invalid length. [ 1368.514904][T14236] __nla_validate_parse: 4 callbacks suppressed [ 1368.514923][T14236] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10947'. [ 1368.530449][ T5982] bond1: (slave macvlan3): failed to get link speed/duplex [ 1368.608562][T14246] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10949'. [ 1368.634201][ T5988] bond1: (slave macvlan3): failed to get link speed/duplex [ 1368.731783][T14250] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1368.743668][ T6494] bond1: (slave macvlan3): failed to get link speed/duplex [ 1368.754355][T14250] mac80211_hwsim hwsim159 syzkaller0: left promiscuous mode [ 1368.762163][T14250] mac80211_hwsim hwsim159 syzkaller0: left allmulticast mode [ 1368.853983][ T5988] bond1: (slave macvlan3): failed to get link speed/duplex [ 1369.045300][T14220] lo speed is unknown, defaulting to 1000 [ 1369.492244][T14234] lo speed is unknown, defaulting to 1000 [ 1370.057257][T14264] lo speed is unknown, defaulting to 1000 [ 1370.205383][T14288] netlink: 'syz.5.10960': attribute type 1 has an invalid length. [ 1370.319200][T14292] x_tables: duplicate underflow at hook 2 [ 1370.348772][T14289] bond4: entered promiscuous mode [ 1370.354554][T14289] bond4: entered allmulticast mode [ 1370.360346][T14289] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1370.415652][T14287] bridge4: entered promiscuous mode [ 1370.443096][T14287] bridge4: entered allmulticast mode [ 1370.464105][T14287] bond4: (slave bridge4): Enslaving as an active interface with an up link [ 1370.730829][T14288] bridge5: entered promiscuous mode [ 1370.738355][T14288] bridge5: entered allmulticast mode [ 1370.744695][T14288] bond4: (slave bridge5): Enslaving as a backup interface with a down link [ 1371.175433][T14311] netlink: 24 bytes leftover after parsing attributes in process `syz.4.10965'. [ 1371.301915][T14305] netlink: 'syz.4.10965': attribute type 11 has an invalid length. [ 1371.331297][T14309] syzkaller0: entered promiscuous mode [ 1371.351503][T14320] netlink: 20 bytes leftover after parsing attributes in process `syz.0.10970'. [ 1371.363884][T14309] syzkaller0: entered allmulticast mode [ 1371.606766][T14332] netlink: 20 bytes leftover after parsing attributes in process `syz.2.10974'. [ 1373.745454][T14349] syzkaller0: left promiscuous mode [ 1373.750741][T14349] syzkaller0: left allmulticast mode [ 1373.803660][ T5979] net_ratelimit: 28 callbacks suppressed [ 1373.803684][ T5979] bond1: (slave macvlan3): failed to get link speed/duplex [ 1373.922430][T14356] netlink: 44 bytes leftover after parsing attributes in process `syz.4.10979'. [ 1373.949287][T14358] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1373.967952][T14361] netlink: 20 bytes leftover after parsing attributes in process `syz.0.10981'. [ 1374.079316][T14364] tipc: Enabled bearer , priority 0 [ 1374.113551][T14364] syzkaller0: entered promiscuous mode [ 1374.124244][T14364] syzkaller0: entered allmulticast mode [ 1374.184683][T14364] tipc: Resetting bearer [ 1374.193689][ T5979] bond1: (slave macvlan3): failed to get link speed/duplex [ 1374.313586][ T5982] bond1: (slave macvlan3): failed to get link speed/duplex [ 1374.325965][T14372] netlink: 28 bytes leftover after parsing attributes in process `syz.2.10985'. [ 1374.360253][T14374] netlink: 44 bytes leftover after parsing attributes in process `syz.4.10984'. [ 1374.433473][ T5979] bond1: (slave macvlan3): failed to get link speed/duplex [ 1374.443043][T14376] netlink: 16 bytes leftover after parsing attributes in process `syz.2.10985'. [ 1374.462763][T14376] netlink: 132 bytes leftover after parsing attributes in process `syz.2.10985'. [ 1374.493063][T14376] netlink: 36 bytes leftover after parsing attributes in process `syz.2.10985'. [ 1374.563653][ T5982] bond1: (slave macvlan3): failed to get link speed/duplex [ 1374.673782][ T5978] bond1: (slave macvlan3): failed to get link speed/duplex [ 1374.780032][T14354] lo speed is unknown, defaulting to 1000 [ 1374.940946][ T5979] bond1: (slave macvlan3): failed to get link speed/duplex [ 1374.998902][T14401] netlink: 8 bytes leftover after parsing attributes in process `syz.2.10991'. [ 1375.018581][T14401] netlink: 24 bytes leftover after parsing attributes in process `syz.2.10991'. [ 1375.108368][T14387] lo speed is unknown, defaulting to 1000 [ 1375.200043][T14408] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1375.253881][ T5978] bond1: (slave macvlan3): failed to get link speed/duplex [ 1375.801985][T14432] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 1376.051600][T14436] netlink: 260 bytes leftover after parsing attributes in process `syz.2.11001'. [ 1377.282039][T14492] IPVS: set_ctl: invalid protocol: 58 224.0.0.1:20002 [ 1377.294359][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1377.415895][T14498] netlink: 'syz.3.11017': attribute type 30 has an invalid length. [ 1377.619461][T14486] lo speed is unknown, defaulting to 1000 [ 1379.015376][T14533] veth1_macvtap: left allmulticast mode [ 1379.121136][T12711] lo speed is unknown, defaulting to 1000 [ 1379.133529][T12711] syz2: Port: 1 Link DOWN [ 1379.158861][T14507] lo speed is unknown, defaulting to 1000 [ 1379.159082][ T5982] netdevsim netdevsim5 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1379.204627][ T5982] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1379.276799][ T5982] netdevsim netdevsim5 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1379.286261][ T5982] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1379.298292][ T5982] netdevsim netdevsim5 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1379.309601][ T5982] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1379.363641][ T6515] net_ratelimit: 101 callbacks suppressed [ 1379.363663][ T6515] bond1: (slave macvlan3): failed to get link speed/duplex [ 1379.448117][T14546] __nla_validate_parse: 5 callbacks suppressed [ 1379.448138][T14546] netlink: 7 bytes leftover after parsing attributes in process `syz.0.11031'. [ 1379.493454][ T5988] bond1: (slave macvlan3): failed to get link speed/duplex [ 1379.623599][ T5979] bond1: (slave macvlan3): failed to get link speed/duplex [ 1379.763937][T11698] bond1: (slave macvlan3): failed to get link speed/duplex [ 1379.913139][T14558] 8021q: adding VLAN 0 to HW filter on device team0 [ 1379.946110][T14558] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1379.966689][T14556] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11034'. [ 1380.024216][ T5978] bond1: (slave macvlan3): failed to get link speed/duplex [ 1380.074621][T14538] infiniband !yz!: set down [ 1380.079761][T14538] infiniband !yz!: added team_slave_0 [ 1380.090927][T14538] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 1380.095662][T14538] infiniband !yz!: Couldn't open port 1 [ 1380.149449][T14538] RDS/IB: !yz!: added [ 1380.154279][T14538] smc: adding ib device !yz! with port count 1 [ 1380.160689][T14538] smc: ib device !yz! port 1 has no pnetid [ 1380.167378][ T6515] bond1: (slave macvlan3): failed to get link speed/duplex [ 1380.207883][T14564] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11035'. [ 1380.225888][T14566] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11035'. [ 1380.274071][T11698] bond1: (slave macvlan3): failed to get link speed/duplex [ 1380.383495][ T5988] bond1: (slave macvlan3): failed to get link speed/duplex [ 1380.427057][ T5988] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1380.495768][T14572] syzkaller0: left promiscuous mode [ 1380.501056][T14572] syzkaller0: left allmulticast mode [ 1380.569094][T14578] netlink: 260 bytes leftover after parsing attributes in process `syz.5.11038'. [ 1380.751355][T14585] bond2: entered allmulticast mode [ 1380.758533][T14585] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1381.064875][T14594] xt_recent: Unsupported userspace flags (000000b1) [ 1381.077906][T14594] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11045'. [ 1381.536996][T14606] tap0: tun_chr_ioctl cmd 1074025676 [ 1381.550237][T14606] tap0: owner set to 0 [ 1381.640433][T14608] netlink: 'syz.2.11050': attribute type 39 has an invalid length. [ 1382.107831][T14617] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11054'. [ 1382.459677][T14631] netlink: 260 bytes leftover after parsing attributes in process `syz.3.11057'. [ 1382.980397][T14640] netlink: 104 bytes leftover after parsing attributes in process `syz.2.11062'. [ 1383.173503][T14642] xt_hashlimit: size too large, truncated to 1048576 [ 1383.375659][T14649] netlink: 'syz.3.11065': attribute type 1 has an invalid length. [ 1383.464207][T14649] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1383.474823][T14653] syzkaller0: entered promiscuous mode [ 1383.480546][T14653] syzkaller0: entered allmulticast mode [ 1383.521589][T14652] macvlan0: entered promiscuous mode [ 1383.573539][T14652] macvlan0: entered allmulticast mode [ 1383.579347][T14652] bond3: entered allmulticast mode [ 1383.603431][T14652] bond3: entered promiscuous mode [ 1383.610007][T14652] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 1383.622991][T14652] team0: Port device macvlan0 added [ 1383.641868][T14645] tipc: Enabled bearer , priority 0 [ 1383.683674][T14644] tipc: Resetting bearer [ 1383.776944][T14644] tipc: Disabling bearer [ 1384.424540][ T5982] net_ratelimit: 34 callbacks suppressed [ 1384.424562][ T5982] bond1: (slave macvlan3): failed to get link speed/duplex [ 1384.461434][T14691] netlink: 260 bytes leftover after parsing attributes in process `syz.2.11075'. [ 1384.561918][T14697] netlink: 68 bytes leftover after parsing attributes in process `syz.0.11077'. [ 1384.573489][T11698] bond1: (slave macvlan3): failed to get link speed/duplex [ 1384.683482][ T5978] bond1: (slave macvlan3): failed to get link speed/duplex [ 1384.793648][ T5978] bond1: (slave macvlan3): failed to get link speed/duplex [ 1384.830105][T14713] netlink: 24 bytes leftover after parsing attributes in process `syz.0.11083'. [ 1384.913532][ T5978] bond1: (slave macvlan3): failed to get link speed/duplex [ 1384.973529][ C0] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 1385.023543][ T5982] bond1: (slave macvlan3): failed to get link speed/duplex [ 1385.138177][T11698] bond1: (slave macvlan3): failed to get link speed/duplex [ 1385.256454][ T5982] bond1: (slave macvlan3): failed to get link speed/duplex [ 1385.295394][T14709] lo speed is unknown, defaulting to 1000 [ 1385.377542][T11698] bond1: (slave macvlan3): failed to get link speed/duplex [ 1385.523981][ T6515] bond1: (slave macvlan3): failed to get link speed/duplex [ 1385.980235][ T6515] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1386.000504][ T6515] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1386.021152][ T6515] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1386.034962][ T6515] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1386.230891][T14762] netlink: 8 bytes leftover after parsing attributes in process `syz.5.11101'. [ 1386.240205][T14762] netlink: 4 bytes leftover after parsing attributes in process `syz.5.11101'. [ 1386.250326][T14762] netlink: 'syz.5.11101': attribute type 18 has an invalid length. [ 1386.801561][T14781] netlink: 4 bytes leftover after parsing attributes in process `syz.5.11108'. [ 1387.209823][T14810] netdevsim netdevsim2: Direct firmware load for ./file0 failed with error -2 [ 1387.260011][T14810] netdevsim netdevsim2: Falling back to sysfs fallback for: ./file0 [ 1387.360085][T14817] netlink: 28 bytes leftover after parsing attributes in process `syz.0.11118'. [ 1387.394507][T14821] netlink: 8 bytes leftover after parsing attributes in process `syz.5.11120'. [ 1388.040274][T14854] netlink: 260 bytes leftover after parsing attributes in process `syz.5.11128'. [ 1388.274995][T14865] netlink: 'syz.4.11134': attribute type 10 has an invalid length. [ 1388.570268][T14886] IPv6: NLM_F_CREATE should be specified when creating new route [ 1388.606664][T14886] netlink: 'syz.0.11138': attribute type 1 has an invalid length. [ 1388.680263][T14891] netlink: 32 bytes leftover after parsing attributes in process `syz.3.11142'. [ 1388.820872][T14893] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1388.929431][T14893] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1389.039897][T14893] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1389.108164][T14907] syzkaller0: entered promiscuous mode [ 1389.123553][T14907] syzkaller0: entered allmulticast mode [ 1389.142835][T14893] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1389.309465][T14929] IPVS: ip_vs_edit_dest(): server weight less than zero [ 1389.331779][T14921] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1389.360550][T14929] nbd: must specify at least one socket [ 1389.413666][T14922] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1389.423696][ T6515] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1389.439121][T14934] x_tables: duplicate underflow at hook 3 [ 1389.460819][ T6515] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1389.526831][ T5981] net_ratelimit: 37 callbacks suppressed [ 1389.526854][ T5981] bond1: (slave macvlan3): failed to get link speed/duplex [ 1389.575472][T14941] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1389.604623][T14941] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1389.633825][T14941] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1389.674239][T14947] __nla_validate_parse: 2 callbacks suppressed [ 1389.674263][T14947] netlink: 16 bytes leftover after parsing attributes in process `syz.5.11158'. [ 1389.694181][ T5981] bond1: (slave macvlan3): failed to get link speed/duplex [ 1389.708757][T14941] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1389.728300][T14941] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1389.767334][T14948] netlink: 260 bytes leftover after parsing attributes in process `syz.4.11157'. [ 1389.780938][T14941] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1389.813448][ T6515] bond1: (slave macvlan3): failed to get link speed/duplex [ 1389.844307][T14941] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1390.030274][T14961] netlink: 'syz.4.11165': attribute type 39 has an invalid length. [ 1390.053543][T14962] netlink: 'syz.4.11165': attribute type 39 has an invalid length. [ 1390.770188][T15006] nbd: must specify a size in bytes for the device [ 1391.775319][T15039] netlink: 'syz.0.11188': attribute type 1 has an invalid length. [ 1391.792048][T15033] netlink: 144 bytes leftover after parsing attributes in process `syz.2.11186'. [ 1391.820979][T15033] macsec0: entered promiscuous mode [ 1391.828260][T15041] netlink: 16 bytes leftover after parsing attributes in process `syz.4.11189'. [ 1391.837714][T15033] macsec0: left promiscuous mode [ 1392.354490][T15059] netlink: 'syz.0.11193': attribute type 1 has an invalid length. [ 1392.373921][T15059] netlink: 'syz.0.11193': attribute type 2 has an invalid length. [ 1392.599607][T15063] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11195'. [ 1392.609104][T15063] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0 [ 1392.849877][T15070] netlink: 28 bytes leftover after parsing attributes in process `syz.3.11198'. [ 1392.873241][T15070] bridge6: entered promiscuous mode [ 1392.878890][T15070] bridge6: entered allmulticast mode [ 1392.897507][T15070] team0: Port device bridge6 added [ 1392.906244][T15070] bridge0: port 1(team0) entered blocking state [ 1392.913001][T15070] bridge0: port 1(team0) entered disabled state [ 1392.920048][T15070] team0: entered allmulticast mode [ 1392.934660][T15070] team0: entered promiscuous mode [ 1392.943570][T15053] lo speed is unknown, defaulting to 1000 [ 1393.056740][T15072] netlink: 34 bytes leftover after parsing attributes in process `syz.4.11199'. [ 1393.129357][T15074] netlink: 'syz.3.11200': attribute type 12 has an invalid length. [ 1393.152560][T15074] netlink: 132 bytes leftover after parsing attributes in process `syz.3.11200'. [ 1393.407597][T15082] netlink: 'syz.3.11203': attribute type 1 has an invalid length. [ 1393.468187][T15082] bond4: entered promiscuous mode [ 1393.474423][T15082] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1393.583806][T15082] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1393.591257][T15082] bond4: (slave vti1): The slave device specified does not support setting the MAC address [ 1393.602622][T15082] bond4: (slave vti1): Setting fail_over_mac to active for active-backup mode [ 1393.631558][T15082] bond4: (slave vti1): making interface the new active one [ 1393.640752][T15082] vti1: entered promiscuous mode [ 1393.648345][T15082] bond4: (slave vti1): Enslaving as an active interface with an up link [ 1394.751876][T15088] lo speed is unknown, defaulting to 1000 [ 1394.755290][T14922] net_ratelimit: 45 callbacks suppressed [ 1394.755345][T14922] bond1: (slave macvlan3): failed to get link speed/duplex [ 1394.873990][T14921] bond1: (slave macvlan3): failed to get link speed/duplex [ 1394.984075][T14921] bond1: (slave macvlan3): failed to get link speed/duplex [ 1395.094415][T14922] bond1: (slave macvlan3): failed to get link speed/duplex [ 1395.203884][T14921] bond1: (slave macvlan3): failed to get link speed/duplex [ 1395.221063][T15109] netlink: 76 bytes leftover after parsing attributes in process `syz.2.11211'. [ 1395.301358][T15109] netlink: 76 bytes leftover after parsing attributes in process `syz.2.11211'. [ 1395.314110][T14921] bond1: (slave macvlan3): failed to get link speed/duplex [ 1395.573683][ T5977] bond1: (slave macvlan3): failed to get link speed/duplex [ 1395.719988][ T5981] bond1: (slave macvlan3): failed to get link speed/duplex [ 1395.775029][T15114] lo speed is unknown, defaulting to 1000 [ 1395.833449][ T5981] bond1: (slave macvlan3): failed to get link speed/duplex [ 1395.943773][ T5981] bond1: (slave macvlan3): failed to get link speed/duplex [ 1396.509257][T15134] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11217'. [ 1396.673836][T15148] IPv6: NLM_F_REPLACE set, but no existing node found! [ 1397.240998][T15143] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11221'. [ 1397.636084][T15161] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11225'. [ 1397.961986][T15180] netlink: 212368 bytes leftover after parsing attributes in process `syz.5.11233'. [ 1398.012366][T15185] netlink: 260 bytes leftover after parsing attributes in process `syz.0.11231'. [ 1398.036615][T15187] netlink: 'syz.3.11230': attribute type 1 has an invalid length. [ 1398.054354][T15187] netlink: 'syz.3.11230': attribute type 2 has an invalid length. [ 1398.421873][T15210] xt_CONNSECMARK: invalid mode: 0 [ 1398.489785][T15212] netlink: 108 bytes leftover after parsing attributes in process `syz.2.11240'. [ 1398.542808][T15212] netlink: 'syz.2.11240': attribute type 62 has an invalid length. [ 1398.557415][ T5981] bridge_slave_1: left allmulticast mode [ 1398.579243][ T5981] bridge_slave_1: left promiscuous mode [ 1398.592772][ T5981] bridge0: port 2(bridge_slave_1) entered disabled state [ 1398.601638][T15221] netlink: 28 bytes leftover after parsing attributes in process `syz.0.11243'. [ 1398.613654][ T5981] bridge_slave_0: left allmulticast mode [ 1398.619394][ T5981] bridge_slave_0: left promiscuous mode [ 1398.625567][ T5981] bridge0: port 1(bridge_slave_0) entered disabled state [ 1398.641222][ T5981] veth5: left allmulticast mode [ 1398.646323][ T5981] veth5: left promiscuous mode [ 1398.652400][ T5981] bridge3: port 1(veth5) entered disabled state [ 1398.666352][T15225] netlink: 36 bytes leftover after parsing attributes in process `syz.0.11243'. [ 1398.680944][ T5981] veth7: left allmulticast mode [ 1398.688804][ T5981] veth7: left promiscuous mode [ 1398.694089][ T5981] bridge4: port 1(veth7) entered disabled state [ 1398.759535][T15230] netlink: 'syz.3.11244': attribute type 30 has an invalid length. [ 1398.804360][T15231] netlink: 'syz.3.11244': attribute type 30 has an invalid length. [ 1399.260742][ T5981] tipc: Disabling bearer [ 1399.709003][ T5981] bond1 (unregistering): Released all slaves [ 1399.729873][ T5981] bond0 (unregistering): Released all slaves [ 1399.746895][ T5981] bond2 (unregistering): Released all slaves [ 1399.762599][ T5981] bond3 (unregistering): Released all slaves [ 1399.873908][ T4307] lec:lec_start_xmit: lec0:No lecd attached [ 1399.928295][T15230] bond5: option arp_missed_max: mode dependency failed, not supported in mode 802.3ad(4) [ 1399.971609][T15230] bond5 (unregistering): Released all slaves [ 1400.170676][T15231] bond5: option arp_missed_max: mode dependency failed, not supported in mode 802.3ad(4) [ 1400.182628][T15231] bond5 (unregistering): Released all slaves [ 1400.203690][ T5981] tipc: Disabling bearer [ 1400.215360][ T5981] tipc: Left network mode [ 1400.215686][T15250] bridge_slave_1: entered promiscuous mode [ 1400.319129][ T5983] net_ratelimit: 2069 callbacks suppressed [ 1400.319151][ T5983] bond1: (slave macvlan3): failed to get link speed/duplex [ 1400.506034][T15260] __nla_validate_parse: 4 callbacks suppressed [ 1400.506058][T15260] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11251'. [ 1400.523626][ T5983] bond1: (slave macvlan3): failed to get link speed/duplex [ 1400.553446][T15260] netlink: 'syz.2.11251': attribute type 30 has an invalid length. [ 1400.599279][ T5977] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1400.599689][T15260] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11251'. [ 1400.619026][ T5977] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1400.646086][ T5977] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1400.663378][T15260] netlink: 'syz.2.11251': attribute type 30 has an invalid length. [ 1400.747897][ T5977] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1400.802916][ T5977] bond1: (slave macvlan3): failed to get link speed/duplex [ 1400.823009][T15274] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11255'. [ 1400.874497][T15278] netlink: 68 bytes leftover after parsing attributes in process `syz.0.11255'. [ 1400.917634][ T5977] bond1: (slave macvlan3): failed to get link speed/duplex [ 1400.939466][T15216] lo speed is unknown, defaulting to 1000 [ 1401.123432][ T5977] bond1: (slave macvlan3): failed to get link speed/duplex [ 1401.233607][ T5983] bond1: (slave macvlan3): failed to get link speed/duplex [ 1401.353474][ T5983] bond1: (slave macvlan3): failed to get link speed/duplex [ 1401.473607][ T5983] bond1: (slave macvlan3): failed to get link speed/duplex [ 1401.583596][T14921] bond1: (slave macvlan3): failed to get link speed/duplex [ 1401.934020][ T5977] bond1: (slave macvlan3): failed to get link speed/duplex [ 1402.492437][T15320] batman_adv: batadv0: Adding interface: vlan0 [ 1402.499249][T15320] batman_adv: batadv0: The MTU of interface vlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1402.545860][T15320] batman_adv: The newly added mac address (08:02:11:00:00:01) already exists on: wlan1 [ 1402.567019][T15320] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1402.589382][T15320] batman_adv: batadv0: Not using interface vlan0 (retrying later): interface not active [ 1402.691658][ T5981] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1402.720887][ T5981] pim6reg (unregistering): left allmulticast mode [ 1403.212269][ T5981] team0 (unregistering): Port device 76 removed [ 1403.228925][ T5981] team0 (unregistering): Port device team_slave_0 removed [ 1403.264209][T15343] netlink: 'syz.3.11270': attribute type 1 has an invalid length. [ 1403.286501][T15343] netlink: 'syz.3.11270': attribute type 1 has an invalid length. [ 1403.414188][ T5981] team0 (unregistering): Port device dummy0 removed [ 1403.870024][ T5981] IPVS: stop unused estimator thread 0... [ 1403.944033][T15359] netlink: 56 bytes leftover after parsing attributes in process `syz.0.11275'. [ 1404.026337][T15359] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11275'. [ 1404.165720][T15371] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1404.218340][T15371] netlink: 24 bytes leftover after parsing attributes in process `syz.3.11278'. [ 1404.369972][T15377] netlink: 16 bytes leftover after parsing attributes in process `syz.5.11279'. [ 1404.390207][T15381] netlink: 24 bytes leftover after parsing attributes in process `syz.0.11280'. [ 1404.408378][T15384] sctp: [Deprecated]: syz.3.11281 (pid 15384) Use of int in maxseg socket option. [ 1404.408378][T15384] Use struct sctp_assoc_value instead [ 1404.639020][T15361] lo speed is unknown, defaulting to 1000 [ 1404.870434][T15401] veth0: entered promiscuous mode [ 1404.901085][T15401] macsec1: entered allmulticast mode [ 1404.909030][T15401] veth0: entered allmulticast mode [ 1405.030284][T15381] lo speed is unknown, defaulting to 1000 [ 1405.133351][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5260 ms [ 1405.141480][ C1] lec:lec_tx_timeout: lec0 [ 1405.323605][ T5983] net_ratelimit: 21 callbacks suppressed [ 1405.323630][ T5983] bond1: (slave macvlan3): failed to get link speed/duplex [ 1405.522475][T15405] lo speed is unknown, defaulting to 1000 [ 1405.528858][ T5983] bond1: (slave macvlan3): failed to get link speed/duplex [ 1405.608082][T15417] geneve4: entered promiscuous mode [ 1405.644416][T15417] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1405.694603][T14922] bond1: (slave macvlan3): failed to get link speed/duplex [ 1405.754238][T15417] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1405.859494][T15417] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1405.913587][ T5977] bond1: (slave macvlan3): failed to get link speed/duplex [ 1405.955925][T15417] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1406.033497][ T5983] bond1: (slave macvlan3): failed to get link speed/duplex [ 1406.396738][T15423] tipc: Bearer : already 2 bearers with priority 10 [ 1406.420959][T15423] tipc: Bearer : trying with adjusted priority [ 1406.443099][T15423] tipc: Enabling of bearer rejected, max 3 bearers permitted [ 1406.515521][T14922] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1406.697218][T14922] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1406.730205][T15426] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11294'. [ 1406.736328][T14922] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1406.803549][ T5983] bond1: (slave macvlan3): failed to get link speed/duplex [ 1406.951000][T14922] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1406.966653][ T5983] bond1: (slave macvlan3): failed to get link speed/duplex [ 1407.103489][ T5977] bond1: (slave macvlan3): failed to get link speed/duplex [ 1407.294015][ T5983] bond1: (slave macvlan3): failed to get link speed/duplex [ 1407.414234][ T5977] bond1: (slave macvlan3): failed to get link speed/duplex [ 1407.435158][T15444] tipc: Enabled bearer , priority 0 [ 1407.501539][T15452] netlink: 76 bytes leftover after parsing attributes in process `syz.4.11299'. [ 1407.515072][T15453] netlink: 28 bytes leftover after parsing attributes in process `syz.0.11298'. [ 1407.526037][T15452] netlink: 76 bytes leftover after parsing attributes in process `syz.4.11299'. [ 1407.538512][T15453] netlink: 'syz.0.11298': attribute type 7 has an invalid length. [ 1407.562408][T15453] netlink: 'syz.0.11298': attribute type 8 has an invalid length. [ 1407.573093][T15454] netlink: 12 bytes leftover after parsing attributes in process `syz.3.11301'. [ 1407.596037][T15453] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11298'. [ 1407.608711][T15444] syzkaller0: entered promiscuous mode [ 1407.616272][T15444] syzkaller0: entered allmulticast mode [ 1407.622899][T15444] tipc: Resetting bearer [ 1407.642586][T15451] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11301'. [ 1407.652209][T15451] sctp: [Deprecated]: syz.3.11301 (pid 15451) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1407.652209][T15451] Use struct sctp_sack_info instead [ 1407.777647][T15441] tipc: Resetting bearer [ 1409.789292][T15441] tipc: Disabling bearer [ 1409.809097][T15462] netlink: 'syz.2.11303': attribute type 6 has an invalid length. [ 1409.817561][ T797] tipc: Node number set to 457120599 [ 1410.155979][T15480] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11308'. [ 1410.170640][T15447] lo speed is unknown, defaulting to 1000 [ 1410.403538][ T6494] net_ratelimit: 9 callbacks suppressed [ 1410.403561][ T6494] bond1: (slave macvlan3): failed to get link speed/duplex [ 1410.554512][ T6494] bond1: (slave macvlan3): failed to get link speed/duplex [ 1410.598169][T15464] lo speed is unknown, defaulting to 1000 [ 1410.673455][T14922] bond1: (slave macvlan3): failed to get link speed/duplex [ 1410.883480][T14922] bond1: (slave macvlan3): failed to get link speed/duplex [ 1411.057131][ T5983] bond1: (slave macvlan3): failed to get link speed/duplex [ 1411.080613][T15480] lo speed is unknown, defaulting to 1000 [ 1411.223491][T14922] bond1: (slave macvlan3): failed to get link speed/duplex [ 1411.463570][T14922] bond1: (slave macvlan3): failed to get link speed/duplex [ 1411.720997][T14922] bond1: (slave macvlan3): failed to get link speed/duplex [ 1411.844279][T15501] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11312'. [ 1411.903871][T15501] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11312'. [ 1411.923718][T15501] sctp: [Deprecated]: syz.2.11312 (pid 15501) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1411.923718][T15501] Use struct sctp_sack_info instead [ 1412.048922][ T5983] bond1: (slave macvlan3): failed to get link speed/duplex [ 1412.190714][T14921] bond1: (slave macvlan3): failed to get link speed/duplex [ 1412.279965][T15508] netlink: 132 bytes leftover after parsing attributes in process `syz.0.11314'. [ 1412.334610][T15510] netlink: 'syz.2.11315': attribute type 13 has an invalid length. [ 1413.228934][T15510] netlink: 'syz.2.11315': attribute type 13 has an invalid length. [ 1413.708104][T15531] tipc: Enabling of bearer rejected, already enabled [ 1413.731550][T15536] netlink: 40 bytes leftover after parsing attributes in process `syz.2.11319'. [ 1414.005098][T15552] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11325'. [ 1414.028555][T15519] lo speed is unknown, defaulting to 1000 [ 1414.062428][T15552] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11325'. [ 1414.082172][T15552] sctp: [Deprecated]: syz.2.11325 (pid 15552) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1414.082172][T15552] Use struct sctp_sack_info instead [ 1414.143862][T15556] netlink: 'syz.3.11327': attribute type 1 has an invalid length. [ 1414.152031][T15556] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11327'. [ 1414.258169][T15556] netlink: 4 bytes leftover after parsing attributes in process `syz.3.11327'. [ 1414.334193][T15556] netlink: 'syz.3.11327': attribute type 2 has an invalid length. [ 1414.398434][T15556] netlink: 'syz.3.11327': attribute type 2 has an invalid length. [ 1414.439447][T15556] netlink: 'syz.3.11327': attribute type 2 has an invalid length. [ 1414.797143][T15571] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11330'. [ 1415.186709][T15586] netlink: 104 bytes leftover after parsing attributes in process `syz.2.11336'. [ 1415.443535][T20619] net_ratelimit: 2073 callbacks suppressed [ 1415.443558][T20619] bond1: (slave macvlan3): failed to get link speed/duplex [ 1415.470368][T15545] lo speed is unknown, defaulting to 1000 [ 1415.564944][T20619] bond1: (slave macvlan3): failed to get link speed/duplex [ 1415.683457][ T5977] bond1: (slave macvlan3): failed to get link speed/duplex [ 1415.803626][T20619] bond1: (slave macvlan3): failed to get link speed/duplex [ 1415.895003][T15587] lo speed is unknown, defaulting to 1000 [ 1415.914612][T14922] bond1: (slave macvlan3): failed to get link speed/duplex [ 1415.927283][T15609] sctp: [Deprecated]: syz.3.11341 (pid 15609) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1415.927283][T15609] Use struct sctp_sack_info instead [ 1416.044651][ T5977] bond1: (slave macvlan3): failed to get link speed/duplex [ 1416.163603][ T5977] bond1: (slave macvlan3): failed to get link speed/duplex [ 1416.283100][ T5977] bond1: (slave macvlan3): failed to get link speed/duplex [ 1416.317846][T15621] netlink: 'syz.3.11344': attribute type 1 has an invalid length. [ 1416.405546][ T5977] bond1: (slave macvlan3): failed to get link speed/duplex [ 1416.543571][ T5977] bond1: (slave macvlan3): failed to get link speed/duplex [ 1416.562250][T15629] netlink: 'syz.2.11347': attribute type 2 has an invalid length. [ 1417.081379][T15655] __nla_validate_parse: 8 callbacks suppressed [ 1417.081401][T15655] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11352'. [ 1417.198889][T15653] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11352'. [ 1417.210755][T15653] sctp: [Deprecated]: syz.4.11352 (pid 15653) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1417.210755][T15653] Use struct sctp_sack_info instead [ 1417.906280][T15675] syzkaller0: entered promiscuous mode [ 1417.912227][T15675] syzkaller0: entered allmulticast mode [ 1418.272940][T15688] netlink: 36 bytes leftover after parsing attributes in process `syz.2.11359'. [ 1418.548467][T15706] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11365'. [ 1418.617799][T15706] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11365'. [ 1418.630381][T15706] sctp: [Deprecated]: syz.4.11365 (pid 15706) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1418.630381][T15706] Use struct sctp_sack_info instead [ 1418.735945][T15716] netlink: 28 bytes leftover after parsing attributes in process `syz.5.11368'. [ 1418.828690][T15720] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11369'. [ 1418.935228][T15720] 8021q: VLANs not supported on lo [ 1418.952958][T15720] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11369'. [ 1419.162573][T15735] netlink: 44 bytes leftover after parsing attributes in process `syz.4.11376'. [ 1419.381752][T20619] smc: removing ib device syz1 [ 1419.447290][T12712] ================================================================== [ 1419.455486][T12712] BUG: KASAN: slab-use-after-free in __ethtool_get_link_ksettings+0x5e/0x170 [ 1419.464377][T12712] Read of size 8 at addr ffff888051ab02f0 by task kworker/0:9/12712 [ 1419.472519][T12712] [ 1419.474962][T12712] CPU: 0 UID: 0 PID: 12712 Comm: kworker/0:9 Not tainted syzkaller #0 PREEMPT(full) [ 1419.475031][T12712] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1419.475044][T12712] Workqueue: events smc_ib_port_event_work [ 1419.475129][T12712] Call Trace: [ 1419.475139][T12712] [ 1419.475150][T12712] dump_stack_lvl+0xe8/0x150 [ 1419.475187][T12712] print_report+0xba/0x230 [ 1419.475220][T12712] ? __ethtool_get_link_ksettings+0x5e/0x170 [ 1419.475245][T12712] kasan_report+0x117/0x150 [ 1419.475267][T12712] ? __ethtool_get_link_ksettings+0x5e/0x170 [ 1419.475295][T12712] __ethtool_get_link_ksettings+0x5e/0x170 [ 1419.475320][T12712] ib_get_eth_speed+0x180/0x7f0 [ 1419.475386][T12712] ? rxe_query_port+0x7e/0x3d0 [ 1419.475426][T12712] ? __pfx_ib_get_eth_speed+0x10/0x10 [ 1419.475447][T12712] ? do_raw_spin_unlock+0xf5/0x210 [ 1419.475468][T12712] rxe_query_port+0x93/0x3d0 [ 1419.475485][T12712] ib_query_port+0x170/0x830 [ 1419.475524][T12712] smc_ib_port_event_work+0x15a/0x940 [ 1419.475549][T12712] ? process_scheduled_works+0xa25/0x1830 [ 1419.475570][T12712] ? process_scheduled_works+0xa25/0x1830 [ 1419.475594][T12712] process_scheduled_works+0xb02/0x1830 [ 1419.475625][T12712] ? __pfx_process_scheduled_works+0x10/0x10 [ 1419.475648][T12712] ? assign_work+0x3d5/0x5e0 [ 1419.475669][T12712] worker_thread+0xa50/0xfc0 [ 1419.475700][T12712] kthread+0x388/0x470 [ 1419.475715][T12712] ? __pfx_worker_thread+0x10/0x10 [ 1419.475735][T12712] ? __pfx_kthread+0x10/0x10 [ 1419.475749][T12712] ret_from_fork+0x51e/0xb90 [ 1419.475771][T12712] ? __pfx_ret_from_fork+0x10/0x10 [ 1419.475795][T12712] ? __switch_to+0xc7d/0x1450 [ 1419.475826][T12712] ? __pfx_kthread+0x10/0x10 [ 1419.475841][T12712] ret_from_fork_asm+0x1a/0x30 [ 1419.475870][T12712] [ 1419.475876][T12712] [ 1419.651160][T12712] Allocated by task 8511: [ 1419.655578][T12712] kasan_save_track+0x3e/0x80 [ 1419.660299][T12712] __kasan_kmalloc+0x93/0xb0 [ 1419.664927][T12712] __kvmalloc_node_noprof+0x528/0x8a0 [ 1419.670408][T12712] alloc_netdev_mqs+0xa6/0x11b0 [ 1419.675307][T12712] rtnl_create_link+0x31f/0xd70 [ 1419.680235][T12712] rtnl_newlink_create+0x277/0xb70 [ 1419.685395][T12712] rtnl_newlink+0x1666/0x1be0 [ 1419.690150][T12712] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 1419.695135][T12712] netlink_rcv_skb+0x232/0x4b0 [ 1419.699942][T12712] netlink_unicast+0x80f/0x9b0 [ 1419.704746][T12712] netlink_sendmsg+0x813/0xb40 [ 1419.709599][T12712] __sys_sendto+0x709/0x7a0 [ 1419.714250][T12712] __x64_sys_sendto+0xde/0x100 [ 1419.719071][T12712] do_syscall_64+0x14d/0xf80 [ 1419.723722][T12712] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1419.729666][T12712] [ 1419.732022][T12712] Freed by task 15735: [ 1419.736147][T12712] kasan_save_track+0x3e/0x80 [ 1419.740862][T12712] kasan_save_free_info+0x46/0x50 [ 1419.745945][T12712] __kasan_slab_free+0x5c/0x80 [ 1419.750794][T12712] kfree+0x1c1/0x630 [ 1419.754739][T12712] device_release+0x9e/0x1d0 [ 1419.759448][T12712] kobject_put+0x228/0x560 [ 1419.764004][T12712] netdev_run_todo+0xc75/0xde0 [ 1419.768813][T12712] rtnl_dellink+0x6a7/0x820 [ 1419.773360][T12712] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 1419.778352][T12712] netlink_rcv_skb+0x232/0x4b0 [ 1419.783163][T12712] netlink_unicast+0x80f/0x9b0 [ 1419.788016][T12712] netlink_sendmsg+0x813/0xb40 [ 1419.792846][T12712] ____sys_sendmsg+0xa68/0xad0 [ 1419.797690][T12712] ___sys_sendmsg+0x2a5/0x360 [ 1419.802431][T12712] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1419.807427][T12712] do_syscall_64+0x14d/0xf80 [ 1419.812070][T12712] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1419.818006][T12712] [ 1419.820365][T12712] The buggy address belongs to the object at ffff888051ab0000 [ 1419.820365][T12712] which belongs to the cache kmalloc-cg-4k of size 4096 [ 1419.834716][T12712] The buggy address is located 752 bytes inside of [ 1419.834716][T12712] freed 4096-byte region [ffff888051ab0000, ffff888051ab1000) [ 1419.848650][T12712] [ 1419.851022][T12712] The buggy address belongs to the physical page: [ 1419.857585][T12712] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x51ab0 [ 1419.866401][T12712] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 1419.875206][T12712] memcg:ffff888051ab1011 [ 1419.879490][T12712] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 1419.887176][T12712] page_type: f5(slab) [ 1419.891462][T12712] raw: 00fff00000000040 ffff88813fe00500 dead000000000100 dead000000000122 [ 1419.900093][T12712] raw: 0000000000000000 0000200000040004 00000000f5000000 ffff888051ab1011 [ 1419.909244][T12712] head: 00fff00000000040 ffff88813fe00500 dead000000000100 dead000000000122 [ 1419.918082][T12712] head: 0000000000000000 0000200000040004 00000000f5000000 ffff888051ab1011 [ 1419.926977][T12712] head: 00fff00000000003 ffffea000146ac01 00000000ffffffff 00000000ffffffff [ 1419.935698][T12712] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 1419.944461][T12712] page dumped because: kasan: bad access detected [ 1419.951101][T12712] page_owner tracks the page as allocated [ 1419.956938][T12712] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 6494, tgid 6494 (kworker/u8:11), ts 877708495413, free_ts 849034685959 [ 1419.978865][T12712] post_alloc_hook+0x231/0x280 [ 1419.983677][T12712] get_page_from_freelist+0x24dc/0x2580 [ 1419.989278][T12712] __alloc_frozen_pages_noprof+0x18d/0x380 [ 1419.995138][T12712] allocate_slab+0x77/0x660 [ 1419.999711][T12712] refill_objects+0x331/0x3c0 [ 1420.004432][T12712] __pcs_replace_empty_main+0x2b9/0x620 [ 1420.010109][T12712] __kmalloc_noprof+0x474/0x760 [ 1420.015300][T12712] __register_sysctl_table+0x72/0x1340 [ 1420.020808][T12712] __addrconf_sysctl_register+0x331/0x4d0 [ 1420.026702][T12712] addrconf_sysctl_register+0x168/0x1c0 [ 1420.032320][T12712] ipv6_add_dev+0xd26/0x13a0 [ 1420.037076][T12712] addrconf_notify+0x771/0x1050 [ 1420.042417][T12712] notifier_call_chain+0x1be/0x400 [ 1420.047660][T12712] register_netdevice+0x173a/0x1cf0 [ 1420.052909][T12712] nsim_create+0xb92/0x1100 [ 1420.057542][T12712] __nsim_dev_port_add+0x72a/0xb50 [ 1420.062713][T12712] page last free pid 29473 tgid 29471 stack trace: [ 1420.069429][T12712] __free_frozen_pages+0xc2b/0xdb0 [ 1420.074596][T12712] __slab_free+0x263/0x2b0 [ 1420.079139][T12712] qlist_free_all+0x97/0x100 [ 1420.083769][T12712] kasan_quarantine_reduce+0x148/0x160 [ 1420.089435][T12712] __kasan_slab_alloc+0x22/0x80 [ 1420.094371][T12712] kmem_cache_alloc_noprof+0x2bc/0x650 [ 1420.099885][T12712] do_getname+0x2e/0x250 [ 1420.104169][T12712] do_sys_openat2+0xca/0x200 [ 1420.108821][T12712] __x64_sys_openat+0x138/0x170 [ 1420.113741][T12712] do_syscall_64+0x14d/0xf80 [ 1420.118616][T12712] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1420.124698][T12712] [ 1420.127065][T12712] Memory state around the buggy address: [ 1420.132821][T12712] ffff888051ab0180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1420.141084][T12712] ffff888051ab0200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1420.149205][T12712] >ffff888051ab0280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1420.157416][T12712] ^ [ 1420.165182][T12712] ffff888051ab0300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1420.173462][T12712] ffff888051ab0380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1420.181555][T12712] ================================================================== [ 1420.203500][T12712] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1420.210769][T12712] CPU: 0 UID: 0 PID: 12712 Comm: kworker/0:9 Not tainted syzkaller #0 PREEMPT(full) [ 1420.220273][T12712] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1420.231332][T12712] Workqueue: events smc_ib_port_event_work [ 1420.237274][T12712] Call Trace: [ 1420.241237][T12712] [ 1420.244292][T12712] vpanic+0x56c/0xa60 [ 1420.248355][T12712] ? __pfx_vpanic+0x10/0x10 [ 1420.252888][T12712] ? __pfx___schedule+0x10/0x10 [ 1420.257770][T12712] panic+0xc5/0xd0 [ 1420.261537][T12712] ? __pfx_panic+0x10/0x10 [ 1420.266068][T12712] ? preempt_schedule_common+0x82/0xd0 [ 1420.271569][T12712] ? __ethtool_get_link_ksettings+0x5e/0x170 [ 1420.277747][T12712] check_panic_on_warn+0x89/0xb0 [ 1420.282815][T12712] ? __ethtool_get_link_ksettings+0x5e/0x170 [ 1420.288927][T12712] end_report+0x73/0x180 [ 1420.293206][T12712] ? __ethtool_get_link_ksettings+0x5e/0x170 [ 1420.299228][T12712] kasan_report+0x128/0x150 [ 1420.303768][T12712] ? __ethtool_get_link_ksettings+0x5e/0x170 [ 1420.309805][T12712] __ethtool_get_link_ksettings+0x5e/0x170 [ 1420.315789][T12712] ib_get_eth_speed+0x180/0x7f0 [ 1420.320682][T12712] ? rxe_query_port+0x7e/0x3d0 [ 1420.325613][T12712] ? __pfx_ib_get_eth_speed+0x10/0x10 [ 1420.331116][T12712] ? do_raw_spin_unlock+0xf5/0x210 [ 1420.336264][T12712] rxe_query_port+0x93/0x3d0 [ 1420.340886][T12712] ib_query_port+0x170/0x830 [ 1420.345635][T12712] smc_ib_port_event_work+0x15a/0x940 [ 1420.351041][T12712] ? process_scheduled_works+0xa25/0x1830 [ 1420.356795][T12712] ? process_scheduled_works+0xa25/0x1830 [ 1420.362539][T12712] process_scheduled_works+0xb02/0x1830 [ 1420.368153][T12712] ? __pfx_process_scheduled_works+0x10/0x10 [ 1420.374419][T12712] ? assign_work+0x3d5/0x5e0 [ 1420.379058][T12712] worker_thread+0xa50/0xfc0 [ 1420.383720][T12712] kthread+0x388/0x470 [ 1420.387818][T12712] ? __pfx_worker_thread+0x10/0x10 [ 1420.392977][T12712] ? __pfx_kthread+0x10/0x10 [ 1420.397613][T12712] ret_from_fork+0x51e/0xb90 [ 1420.402278][T12712] ? __pfx_ret_from_fork+0x10/0x10 [ 1420.407426][T12712] ? __switch_to+0xc7d/0x1450 [ 1420.412137][T12712] ? __pfx_kthread+0x10/0x10 [ 1420.416753][T12712] ret_from_fork_asm+0x1a/0x30 [ 1420.421563][T12712] [ 1420.425212][T12712] Kernel Offset: disabled [ 1420.429724][T12712] Rebooting in 86400 seconds..