last executing test programs: 1m20.117059865s ago: executing program 3 (id=9700): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt(r1, 0x1, 0x8, &(0x7f0000000000)=""/206, &(0x7f00000001c0)=0xce) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_GET(r2, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0xa8, r3, 0x400, 0x70bd26, 0x25dfdbfb, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}, {{@pci={{0x8}, {0x11}}, {0x8}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}}]}, 0xa8}, 0x1, 0x0, 0x0, 0x80}, 0x20000001) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x4004850) sendmsg$NFT_BATCH(r0, &(0x7f0000000d80)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d00)=ANY=[@ANYBLOB="140000001000010000000000000000020220000a3c000000120a09080000000000000000020000000900020073797a310000000008000440000000000900010073797a30000000000800034000000009"], 0x64}, 0x1, 0x0, 0x0, 0x5}, 0x0) 1m19.805193449s ago: executing program 3 (id=9702): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc0000001900010000000000fcdbdf2500000000000000000000000000003c00fe8000000002000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000400000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000100000000000000440005"], 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) 1m19.533314464s ago: executing program 3 (id=9705): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c00000012000301000000000000000000009db7000000000000010004000000000600000000000000000000000000000000000000000000691d0f76e77044d1eb94e56239e4"], 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) 1m18.438469228s ago: executing program 3 (id=9707): r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)={0x20, 0x3, 0x3, 0x101, 0x0, 0x0, {}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0x3, 0xff}}]}, 0x20}, 0x1, 0x0, 0x0, 0x20004000}, 0x4) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000000), 0xffffff6a) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffff000) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1e, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r2}, 0xc) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000057c0)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, 0x5}, 0x1c, &(0x7f00000004c0)}}, {{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000006c0)="8c125bf8679f1392eca2d94c0604f5e7f324c7d075396b709298e827f4ac084286b647107ee08888fb01d3eb4fe0209f49b2b13f81f03549938c61ec1c6f88c7a1148482d6e112cf1b18512d7cd8ac05ba209e24", 0x54}, {&(0x7f0000000740)}], 0x2, &(0x7f0000000540)=[@tclass={{0x14, 0x29, 0x43, 0xb36a}}], 0x18}}, {{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000880)="5c18742bb7665c80fb7e695f314528cc09d4417b8759452f35da4871ff3265a0349505f36a22c74fa1c43a9c555a8a05e00036927fa2d1c6304c20d7a7ca66afbe4de894d85ad7d00d3d02f6f49e7f9f523b9e03f8302f9bc6d712f76ed287b86bee2df2dae0890e6643e4e5ec96f8c4b1ad5650d4332ed90b9c2257a1dd300dd3a620b62f83bca5ed3596f9d66d02dee02f991782977e0879bfdf81c2b15b095718f29595702ca31acc4f", 0xab}], 0x1, 0x0, 0x1d0}}, {{&(0x7f0000000b80)={0xa, 0x4e22, 0xf, @private2, 0x10000}, 0x1c, &(0x7f0000003080)=[{0x0}, {&(0x7f0000001e00)="4e05c3cf0241fd517f93fe40f3677d9aba1630321abee0bc7c973fe380e3bd679a1c44f4e34ec652d9695a77a920a6e9a67e91d2b23a7dca44918f1ddd97f2c5b7a7f41590fa7fd7b00fd62186a5181428285a484313e40923601cda834471849e66f6146c8c0b00cb1bbbc3e7215624617140b45865f2269ff3503b4a0a28546791bb8339000000000000", 0x8b}, {&(0x7f0000001ec0)="174a44d2033902859c2427443e32fff7b2b0167971219466ec5eb8c3b01c9d7991080b5c89bb08eb2b658195ab27e93c176ad2cb96140686231a", 0x3a}, {&(0x7f0000001f00)="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", 0xfe0}, {&(0x7f0000002f00)="4f987c23b6abd74b5ed8bf537808c5edff425cc3f9bd5ee1ca0d0f2f73c957df60b0b9044692e6e4d75e781769d46d5ef5032ad11785b822b8fc052e4e0414da6d9fd4e7b3cdc8b5ae5c119a0a055c12294c329a74b1dfd49cc4f0feb106d50d6309ebb16dc1c05676d2b0d06ac3552df4989c7e61f31ec6fe2c98ddfdbd9963cc0ea52d5a30fda9aa73031b08117fd7bdf46f6609cd9d3331bfdae96972f2637952994c0da59eaea12ff315bf0e3072a5", 0xb1}, {&(0x7f0000002fc0)="1e", 0x1}, {&(0x7f0000003000)="e4fc74adb9c654242c8beeb4bf1fdc66ea83c0ba055f1ed6cb40c2c748e658c3271d143842b4bf64e9a00739447dd75435001ff53d7c3e2deec8138423cbfcf7b85acb9391fd8e98ed588cc68150456de1af8f2c4373919bf108", 0x5a}], 0x7}}, {{&(0x7f0000003140)={0xa, 0x4e22, 0x10000, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000005700)=[@rthdrdstopts={{0x48, 0x29, 0x37, {0x3a, 0x5, '\x00', [@jumbo={0xc2, 0x4, 0x8}, @hao={0xc9, 0x10, @private2={0xfc, 0x2, '\x00', 0x1}}, @pad1, @calipso={0x7, 0x8, {0x2, 0x0, 0xbe, 0x101}}, @ra]}}}], 0x48}}], 0x5, 0x20008050) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, &(0x7f0000000080)=[@in={0x2, 0x4e21, @private=0xa010102}], 0x10) recvmsg(r3, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfecc}, 0x40000002) setsockopt(r3, 0x84, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x4, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x8}, [@call={0x85, 0x0, 0x0, 0x22}, @call={0x85, 0x0, 0x0, 0x50}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x0, 0xe, 0x0, &(0x7f0000000340)="e02753e868a10000000000000000", 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r5, &(0x7f0000000180)="c5", 0x1, 0x40080, &(0x7f00000000c0)={0xa, 0x4e24, 0x40, @local, 0x13}, 0x1c) socket$tipc(0x1e, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x6, 0xc, &(0x7f0000000bc0)=ANY=[@ANYBLOB="180200000400000000000000000000008500000041000000180100002020732500000000002020207b1af8ff00"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) unshare(0x22020400) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x843, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) pselect6(0x40, &(0x7f0000000000)={0x7f, 0x8, 0x3, 0x7, 0x7, 0x3, 0x800, 0x6}, 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'bridge0\x00'}) 1m18.147721601s ago: executing program 3 (id=9712): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=ANY=[@ANYBLOB="18000000240001"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) recvmmsg(r0, &(0x7f0000004ec0)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/4077, 0xfed}], 0x1}, 0x9}], 0x1, 0x2000, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r1) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000800)=ANY=[@ANYBLOB="84010000", @ANYRES16=r2, @ANYBLOB="0100d8000000000000000100000004000480080002000100000008000a00000000000400088058010c8054000b8008000900"], 0x184}, 0x1, 0x0, 0x0, 0x4}, 0x0) 1m17.906957654s ago: executing program 3 (id=9714): syz_emit_ethernet(0x4e, &(0x7f00000000c0)={@local, @remote, @void, {@ipv4={0x800, @tipc={{0x6, 0x4, 0x1, 0x18, 0x40, 0x66, 0x0, 0x2, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, {[@end, @noop]}}, @payload_named={{{{{0x28, 0x0, 0x0, 0x0, 0x1, 0xa, 0x1, 0x2, 0x5, 0x0, 0x2, 0x6, 0x2, 0x2, 0xf, 0x1, 0x4, 0x4e23, 0x4e24}, 0x4, 0x4}, 0x3, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x3b6, &(0x7f0000000940)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x380, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x19, 0x0, 0x0, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af0302"}, {0x0, 0x1, "000000050000000026000400"}, {0x0, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c41bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee96f24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x0, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f003"}, {0x21, 0x0, "b8a3e100908f61640000000200000000000000000002000000008879e66485201a0015ca83747357a02745000400"/55}, {0x0, 0x14, "5e14f0e74d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fb632dbf04542188b196e213408c"}, {0x0, 0x5, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02a326a6bce65f81ed"}]}}}}}}, 0x0) 1m9.965835611s ago: executing program 1 (id=9765): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003d00000095"], &(0x7f00000000c0)='GPL\x00', 0x1}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000140)={r0, 0xffffffffffffffff, 0x1a, 0x0, @val=@netfilter={0x2, 0x1, 0x81}}, 0x20) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) listen(r1, 0x0) setsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket$kcm(0x11, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x100, 0xe}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=@newtfilter={0x44, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r8, {0xb, 0x8}, {}, {0x8, 0xc}}, [@filter_kind_options=@f_u32={{0x8}, {0x18, 0x2, [@TCA_U32_SEL={0x14, 0x5, {0xd, 0x6, 0x0, 0xfffd, 0x7, 0x9, 0x4, 0x8}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r3, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r9, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000440)="27030200590214000600002fb96dbcf706e1050344ee21144add66a44a6b1324890200a012eb", 0x26}], 0x1}, 0x20000000) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newtaction={0x88, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x74, 0x1, [@m_mirred={0x70, 0x1, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x4, {{0xfffff7e8}}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x0, 0xe4}, 0x4}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x88}}, 0x4000000) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0xffffffffffffff20}, 0x48) 1m8.789212938s ago: executing program 1 (id=9771): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0xa, 0x0, &(0x7f0000000340)={&(0x7f0000000200)=ANY=[@ANYBLOB="020300020c0000000000100000000000030006000000000002000000000000000000f7000000000002000100000000002000050301000000030005000000000002000000ac1414aa00000000000000000200080008"], 0x60}, 0x1, 0x7}, 0x0) 1m8.543622848s ago: executing program 1 (id=9773): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27}, 0x94) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'wlan1\x00', &(0x7f00000004c0)=@ethtool_dump={0x40, 0xed, 0x2}}) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'dummy0\x00', 0x4000}) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)=ANY=[@ANYBLOB="140000002000010000000000fcdbdf250400f2809641bd8cab6ac765eff893c64c88cd240f83f69bd86b7425f99ab9bb397e4bed7e6a84b407fcfc3787f0f95e37e45bf9f400e06a53a53c23ce09e55ae36b698b10534dbcd5c744d2aca6d7fa4338c5c09ee3bd22d4e239c7ef5da1851497910000000000000000000000b49d6ca51e5e6a89c3e7a3987fb148b0cc4346ccc9917074672cc2abc130f6f10f77cac7b32ec03671f616ce6cb8e0c149c7"], 0x14}], 0x1, 0x0, 0x0, 0x20008001}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) sendfile(r2, r2, &(0x7f0000000040)=0x8000000000000000, 0x9) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) ioctl(r0, 0x8b1b, &(0x7f0000000040)) bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes-ce)\x00'}, 0x58) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$bt_hci(r3, &(0x7f0000000000)={0x27}, 0x62) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000200)=ANY=[@ANYRES32, @ANYRES32=r4, @ANYRESHEX=r3], 0x10) ioctl$int_in(r3, 0x5421, &(0x7f0000000140)=0x6) listen(r3, 0x0) accept4(r3, 0x0, 0x0, 0x80800) mmap(&(0x7f0000196000/0x1000)=nil, 0x1000, 0x0, 0x840000000000a132, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000cab000)) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000), 0x4) mmap(&(0x7f0000196000/0x4000)=nil, 0x4000, 0xffffffffefffffff, 0x8032, r2, 0x0) r5 = socket(0x1e, 0x802, 0x0) r6 = epoll_create1(0x80000) close(r5) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="180000003c00010325bd7000f4ffffff0d00fd0004000300"], 0x18}, 0x1, 0x0, 0x0, 0x200448d3}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000500)={0x60002005}) epoll_ctl$EPOLL_CTL_MOD(r6, 0x3, r5, &(0x7f0000000000)={0x1c0002009}) accept4$x25(r5, &(0x7f0000000100), &(0x7f0000000180)=0x12, 0x0) 1m8.414037494s ago: executing program 0 (id=9774): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r5}, &(0x7f0000000280), &(0x7f0000000240)=r2}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f00000000c0)=r6, 0x4) sendmsg$inet(r4, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r7 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r7, &(0x7f00000000c0), 0x10) sendmmsg$inet(r7, &(0x7f00000012c0)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="050000007402b8f419", 0x9}, {&(0x7f0000000440)="9f336d70bf41f19e47e98b4015e3b0384d86a1ceb4e530554ebc8154bf392bcf9ce0b09f879bd7aaf9d086e3", 0x2c}, {&(0x7f0000000200)="587211", 0x3}], 0x3}}, {{0x0, 0x0, &(0x7f0000001040)=[{&(0x7f0000000500)="06f388c7bf51bf8b36d074bad213c76a570af8a4959ca25c3e17b0f0e595f23e3b6facf735ec9c5ae82d83f27217ca7f2647462cf35d961cbbae0f", 0x3b}, {0x0}], 0x2}}], 0x2, 0x240400c4) r8 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) r9 = socket$inet6_udp(0xa, 0x2, 0x0) close(r9) r10 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r10, 0x1, 0x41, &(0x7f0000000200)=0x6b2b, 0x4) sendmmsg$inet6(r10, &(0x7f0000000e00)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c, 0x0}}], 0x1, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x300000a, 0x12, r9, 0x852ac000) setsockopt$SO_TIMESTAMPING(r9, 0x1, 0x41, &(0x7f0000000200)=0x439a, 0x4) recvmmsg(r9, &(0x7f0000000140)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002040)=""/4110, 0x100e}, 0x7ffffffe}], 0x1, 0x40002000, 0x0) write$cgroup_subtree(r8, &(0x7f0000000080)={[{0x2d, 'perf_event'}, {0x2d, 'cpuset'}, {0x2b, 'blkio'}, {0x2b, 'net_cls'}, {0x2b, 'rdma'}, {0x2b, 'blkio'}]}, 0x31) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x24, 0x42, 0x107, 0x0, 0x0, {0x4, 0x7c}, [@nested={0x4, 0xfc}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}]}, 0x24}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000010c0)=[@in6={0xa, 0x4e21, 0x5, @private1={0xfc, 0x1, '\x00', 0x1}}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r10, 0x84, 0x17, &(0x7f0000003080)={0x0, 0x1, 0x1000, "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"}, 0x1008) r12 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ac0), r11) ioctl$F2FS_IOC_COMPRESS_FILE(r3, 0xf518, 0x0) sendmsg$IEEE802154_ADD_IFACE(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x34, r12, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy2\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_TYPE={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0xc000000}, 0x40044) 1m7.861007505s ago: executing program 1 (id=9775): getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@dev, 0x0, 0x1, 0x0, 0xa}, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$FS_IOC_GETFSLABEL(r0, 0x400452c8, &(0x7f0000000100)) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB], 0x14}, 0x1, 0x0, 0x0, 0x68840}, 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000004c00)=@newchain={0x1bdc, 0x64, 0x300, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x1, 0xfff3}, {0xfff1, 0xffff}, {0x1, 0x8}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_FROM={0x8, 0x3, 0x1}]}}, @TCA_CHAIN={0x8, 0xb, 0x8}, @TCA_CHAIN={0x8, 0xb, 0x5}, @TCA_RATE={0x6, 0x5, {0x5, 0x4}}, @filter_kind_options=@f_cgroup={{0xb}, {0x1b64, 0x2, [@TCA_CGROUP_POLICE={0x43c, 0x2, [@TCA_POLICE_RATE64={0xc, 0x8, 0x5}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0xd, 0x1, 0x2, 0x6, 0x8, 0x6, 0xf9, 0xfff, 0xf6b, 0xb0b9, 0x3, 0x7, 0x3ff, 0xffffffff, 0x6, 0x6, 0x1000, 0x10002, 0x7, 0x200, 0x7, 0xce47, 0x9, 0x6, 0x7, 0x81, 0x1, 0x2f0056fa, 0x1297f5fb, 0x2, 0x8a1, 0x8, 0x8, 0x3, 0x1, 0x1000, 0x3, 0x57, 0x8001, 0xf00, 0x140, 0x1000, 0x0, 0x7fff, 0x39d, 0xfffffff9, 0x551c, 0x2, 0xfbdb, 0x40, 0x22e14, 0x0, 0x7, 0x8, 0x800, 0x7f, 0x8, 0x0, 0xf6, 0xbd6f, 0x39, 0x8, 0x55, 0x8, 0x2, 0x400, 0x5, 0x5, 0x101, 0xfffffeff, 0x6, 0x5, 0x2, 0x9, 0x3, 0xf5, 0x9, 0x1b078be6, 0x9, 0x4, 0x0, 0xd4, 0x2, 0x3ff, 0xe8d, 0x2, 0xc, 0x8, 0x8001, 0x200018, 0x0, 0xe, 0x1, 0xc, 0x3, 0x0, 0x8000, 0x10, 0x32a, 0x4acc, 0x9, 0x2, 0x7fff, 0xa, 0x2, 0x9, 0x0, 0x6, 0x80, 0x8, 0x7, 0x9, 0x1, 0x4, 0x9, 0x0, 0x7, 0x1, 0x6, 0x7f, 0x7f0bd8df, 0x21ed, 0x0, 0xff, 0x8, 0x3, 0xf, 0x2, 0x800, 0x8, 0x1, 0x401, 0xfffffffe, 0x8, 0x0, 0xdfd, 0x3, 0x0, 0x9, 0x7f, 0x1, 0x1, 0x200, 0x1e8, 0x80000000, 0x4, 0x400000, 0x3, 0x8, 0x5, 0x7, 0x401, 0x479e421b, 0xfffffffd, 0x8, 0x800, 0x1e, 0x1ff, 0x9, 0x2d8, 0x3, 0x6ce, 0x3, 0x6d6d, 0x101, 0x3, 0x9, 0x2, 0x9, 0x2, 0xfffffff8, 0x0, 0x3ff, 0x4, 0xffffffc0, 0xf, 0x3ff, 0xb94, 0xfffffe00, 0x5, 0xb9, 0x2, 0xfffffff9, 0x9, 0x4, 0x2, 0x1, 0x5, 0x6, 0x9, 0x1000, 0x0, 0x10, 0x1, 0x14b, 0x2, 0xffffff37, 0x7, 0x8, 0x9, 0x80000001, 0x101, 0x7, 0x9, 0x3, 0x0, 0x80, 0x0, 0x57, 0x4, 0x7, 0x4000003, 0xcc4, 0x1000, 0x7, 0xd, 0xfffff3c2, 0xa, 0x2, 0x4, 0x7ff, 0x401, 0x6, 0x1, 0x80000000, 0x2, 0x7fff, 0x7fffffff, 0xff, 0x80000000, 0x3c903644, 0xffff, 0x8, 0x6, 0x4, 0x7f, 0x0, 0x7, 0xe994, 0x3000, 0x401, 0x80000000, 0xcf4f, 0x23e, 0x6, 0xdc, 0x4, 0x6, 0x7, 0x8, 0x3, 0x1, 0x5, 0x80000001, 0x7]}, @TCA_POLICE_RESULT={0x8}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x4}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x9}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x5}, @TCA_POLICE_RESULT={0x8}]}, @TCA_CGROUP_POLICE={0x88c, 0x2, [@TCA_POLICE_AVRATE={0x8, 0x4, 0x5}, @TCA_POLICE_RATE64={0xc, 0x8, 0xffffffff}, @TCA_POLICE_RATE={0x404, 0x2, [0xe67, 0x80000001, 0xd05, 0x5, 0x1, 0x5, 0x7, 0x9, 0x9, 0x9, 0x3, 0x8, 0x6, 0x1, 0x9, 0x9, 0xfffffff8, 0x153, 0xffffffff, 0x3, 0x7fff, 0x1, 0x7, 0x3, 0x0, 0x40, 0xff, 0x800, 0x5c54, 0x7fffffff, 0x2, 0x400, 0x8, 0xfffffff8, 0x6, 0xf2c, 0x4, 0x2, 0x7fffffff, 0x2, 0x5, 0x400, 0x0, 0x4, 0x8, 0xd3, 0x0, 0x4, 0x3, 0x0, 0x7, 0x8, 0x8, 0x8, 0x99, 0x200, 0xb92, 0x8, 0xffff, 0x8001, 0x80, 0x6, 0x20b0, 0x81, 0x3, 0x5933, 0x0, 0xfffffffe, 0x9, 0x2, 0x5, 0x2ea5, 0x800, 0x7ff, 0x0, 0x7, 0x7, 0x210a, 0x9, 0x8000, 0x0, 0x5, 0x9, 0x9, 0xfffffff9, 0x9, 0xc, 0x7c7e, 0x1, 0x53cf, 0x8, 0x9c48, 0x101, 0xe, 0x7a27, 0x8, 0x0, 0x7, 0x6, 0xe, 0x9, 0x7, 0x6, 0xd, 0xc, 0x26, 0x8, 0x7be80000, 0x3, 0xfffffffc, 0xf0, 0x1, 0x3, 0xfffffff9, 0x6, 0x8f, 0x1, 0xc, 0x2, 0x0, 0x81, 0xe, 0x0, 0xff, 0x7ff, 0x5, 0x1, 0xffff07f8, 0x6, 0xfffffff8, 0xfff, 0x455d, 0xa11, 0x2, 0xb, 0x6, 0x7fffffff, 0x1, 0xfffffeff, 0x4, 0x0, 0x10001, 0x0, 0x0, 0x1000, 0x400, 0x2, 0x2, 0x7, 0x5, 0x0, 0x9, 0xfffff420, 0x0, 0x4, 0x400, 0x101, 0x4, 0x7fffffff, 0x8, 0x100, 0x10, 0x1, 0x6, 0x6, 0x1, 0x3, 0x3ebd2dd, 0xe9, 0x10000, 0x8, 0x10001, 0x3, 0x6, 0x9, 0x2, 0x12a, 0x6, 0x2, 0x8, 0x5, 0x5, 0x9, 0x460, 0x4, 0x80000001, 0xc, 0x8, 0x7fffffff, 0x6, 0x8, 0x1f55, 0xa27f, 0xfd, 0x4, 0x10000, 0x2, 0x4, 0x5, 0x81, 0x10, 0x7, 0x1, 0x4, 0x11f5, 0xc59, 0x3315, 0x0, 0x200, 0x860b, 0x2, 0xff, 0xfe40, 0x4, 0x5, 0x1, 0x8, 0x1, 0x9, 0x8001, 0x1, 0x9, 0x7f, 0x10, 0x7ff, 0x4, 0x85, 0x5, 0x3, 0x887f, 0x9, 0x62, 0x7ff, 0xff, 0x7fffffff, 0x9, 0xfff, 0x9, 0x1a, 0x9, 0x86, 0x905, 0x3, 0xe, 0x4, 0x8000, 0x1, 0x0, 0xce, 0x2, 0x88, 0x2, 0x6, 0x9, 0xd132, 0x9]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x8, 0x4, 0x9, 0x7f, 0x10001, 0x0, 0x3, 0x255e49bd, 0x7b5, 0xffffffff, 0xda8, 0x3, 0x2, 0xfffffff9, 0x1, 0x2, 0x6, 0x2, 0x1, 0x1, 0x1b15, 0x9, 0xd, 0x5, 0x9, 0x1, 0xf50, 0x8, 0x9, 0x5, 0x1ff, 0x5, 0x7, 0x1, 0x9, 0x10000, 0x7f, 0xc, 0x7, 0x0, 0x1, 0x8, 0x2, 0x0, 0x0, 0x34a, 0x8, 0x5, 0xff, 0x6, 0xc60, 0x3, 0xffff, 0x1ff, 0xffff8bb8, 0x6, 0x0, 0x7ff, 0x0, 0x1, 0x5, 0x6, 0x21c, 0x4, 0x4, 0xb, 0x1, 0x3ad7, 0xffffff01, 0x921, 0x800, 0x9c9, 0x4, 0x3, 0x8, 0xfff, 0x6, 0xb8, 0x6, 0x2, 0x23127473, 0x38, 0xe, 0x6, 0x2, 0x7ca, 0x1, 0x8, 0x0, 0x8000, 0x6, 0xd9, 0x6, 0x1ff, 0x7f, 0x0, 0xffffffff, 0x81, 0xfffff170, 0x42a3, 0xff, 0x9d5, 0x5, 0x200, 0xe078, 0x8, 0x1000, 0xffffffff, 0x1, 0x4, 0x7, 0x100, 0x4, 0x9, 0x7602, 0x9, 0xe, 0x4, 0x4a, 0x2, 0x7, 0x401, 0x4470, 0x3, 0x3, 0x0, 0x33, 0x4, 0x80000001, 0xe, 0x1, 0x8, 0xe6a, 0xe000000, 0x8, 0x4, 0xffffff81, 0xfffff877, 0x3, 0x8, 0x1ff, 0x7, 0x1000, 0x8, 0x2d, 0x2, 0x4, 0x81, 0x800, 0xfff, 0x5, 0x3, 0x284, 0x4, 0x9, 0x2, 0x51, 0x5, 0x4, 0x5, 0x6, 0x3, 0x59, 0xb237, 0x8, 0x6, 0x4, 0x1, 0x10000, 0x3ff, 0x9, 0x10001, 0x4, 0x3bec, 0x7, 0xfffffff9, 0x131c8ede, 0x9, 0x2dbd, 0x0, 0x216c, 0x7, 0x4, 0x2000, 0x7ff, 0x1000, 0x5, 0xfffffff8, 0x0, 0x1b, 0x8001, 0x9, 0x7fffffff, 0x3, 0x0, 0x7, 0xe, 0x1, 0x7, 0x80000000, 0x8, 0x3, 0x4, 0x6, 0x8001, 0xfffffff5, 0xffffffff, 0x4, 0x4e7, 0x0, 0x7f, 0xff, 0x1, 0x0, 0x3, 0x80000001, 0x8000, 0x1ff, 0x4, 0x8, 0x0, 0x6, 0x5, 0x5f, 0x6, 0x4, 0x0, 0x7ff, 0x0, 0xfffffffc, 0x73, 0x2, 0x6, 0x1, 0xbae2, 0x10000, 0x5, 0x4, 0x7, 0x200, 0x4, 0x0, 0x5, 0xffff, 0xfff, 0xffffff8a, 0x8000, 0x6, 0xd, 0x6de, 0x9, 0x1, 0x9, 0x7, 0x80000000, 0x200]}, @TCA_POLICE_RATE64={0xc, 0x8, 0xffffffffffffffff}, @TCA_POLICE_TBF={0x3c, 0x1, {0xe, 0x0, 0x84f, 0x8001, 0x6, {0x5, 0x1, 0xff, 0x6, 0x8001, 0x7}, {0x0, 0x0, 0xed, 0xe, 0x6, 0x3}, 0x5, 0x4, 0x7}}, @TCA_POLICE_RESULT={0x8}, @TCA_POLICE_RESULT={0x8, 0x5, 0x7}, @TCA_POLICE_AVRATE={0x8}, @TCA_POLICE_RATE64={0xc, 0x8, 0x6}]}, @TCA_CGROUP_POLICE={0x420, 0x2, [@TCA_POLICE_PEAKRATE64={0xc}, @TCA_POLICE_RATE64={0xc, 0x8, 0x3}, @TCA_POLICE_RATE={0x404, 0x2, [0x2eb, 0x3, 0x7ff, 0x80000001, 0xf, 0xcfc, 0xb27, 0x3f, 0x5, 0x9, 0x1, 0xe77f, 0x2b19c5c0, 0x1, 0x80000000, 0x75d, 0x9, 0x8, 0x4, 0x3, 0x3, 0x6, 0x9, 0xfffffff9, 0x6, 0x2, 0x3, 0xfffffff7, 0x0, 0x7, 0x7fffffff, 0x6, 0x9, 0x8001, 0x5, 0x1, 0x809900c5, 0x0, 0x8, 0x81, 0xffff068c, 0x10001, 0xe1, 0x3, 0x3, 0xfffff122, 0x3d, 0x4, 0x5, 0x5, 0x2, 0x3, 0x1, 0x5, 0x6, 0x5, 0x0, 0x20, 0xfffff800, 0x3, 0x9, 0x6, 0x7fff, 0x6, 0x81, 0x2, 0x5, 0x9, 0x8, 0x166d, 0xffffc00e, 0x7f, 0x0, 0x0, 0x2, 0x7, 0x4, 0x10, 0xfe, 0x4, 0x5, 0x0, 0x3, 0x7ff, 0x2, 0x2, 0x3, 0xfffffff2, 0x2, 0xef49, 0x21, 0xffffff00, 0x400, 0x2000000, 0x9, 0x80000002, 0x0, 0x0, 0x0, 0x10, 0x6f1, 0x3, 0x2, 0x155, 0x8, 0x1ff, 0x5, 0x1, 0x5, 0xfffffc00, 0xfffffeff, 0x10000, 0x5, 0x8, 0x6, 0x5, 0x9072, 0x5, 0x1, 0x3, 0x7, 0x0, 0x5, 0x7fffffff, 0x3ff, 0x9, 0x1, 0x161, 0x4d8, 0x3, 0x8, 0x5, 0x6, 0xffffffff, 0x4, 0x3, 0x74a55e0c, 0x400, 0x9, 0x0, 0x7fffffff, 0x6, 0x87, 0x9, 0x2a20, 0xc88, 0x8, 0x5, 0x7, 0x8, 0x7, 0x676c, 0x1ff, 0x6cd, 0x6, 0x6, 0x3, 0x8ef, 0x36e000, 0x7f, 0x4, 0xfff, 0xfffffff7, 0x10001, 0x7f, 0xd, 0xc, 0x28000000, 0x5, 0x1, 0x1000, 0xcce, 0x400, 0x8, 0x9, 0x7, 0xb, 0x4, 0xec1, 0x8, 0x3c82, 0x6, 0xa, 0x3, 0x9, 0x5, 0xd, 0xcc5, 0x1, 0x4, 0x2, 0x8000, 0x4, 0x7f, 0x0, 0x5, 0x4, 0x7, 0x14a0, 0x9, 0x5604, 0xffff, 0x8, 0x7, 0x0, 0x2658b90d, 0x3, 0x7, 0x3, 0x4ffb84fe, 0x8, 0x5, 0x200, 0x0, 0x525a, 0x61c7a5d1, 0x5, 0x19, 0x6668, 0x9, 0xff, 0x3, 0x9, 0x2, 0x8, 0x3, 0x0, 0x101, 0x4, 0xdd, 0x9, 0x10000, 0x6, 0x7fffffff, 0x9, 0x7, 0x2, 0x0, 0x31a, 0x9, 0x6, 0x7, 0x0, 0x9, 0xcf92, 0xfff, 0x6, 0x8, 0x7, 0x2, 0x7, 0xfffffe00, 0x4, 0x6, 0x3]}]}, @TCA_CGROUP_EMATCHES={0xc, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x4}}]}, @TCA_CGROUP_POLICE={0x854, 0x2, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x4, 0x2, 0xe, 0x9, 0xac1, 0x1, 0x7fff, 0xa, 0x3, 0x3, 0x8, 0x20, 0x1ff, 0x9, 0x3, 0x3, 0xd4c0, 0x4, 0xffffffff, 0x1, 0x0, 0x5, 0x1, 0x1160, 0x5, 0xb, 0x9, 0x9, 0x8f24, 0x4, 0x0, 0x7f, 0xf9, 0x7ff, 0x2, 0x8, 0x8, 0x7, 0xc708, 0x3, 0x7, 0x6, 0x5, 0x0, 0x8, 0x2, 0x2, 0x3, 0x9, 0x8, 0x2, 0x7, 0xa000, 0x0, 0x2, 0x967f87f, 0xfffffffb, 0x7, 0x101, 0x81, 0xdef2, 0x3, 0xfffffff7, 0xb5, 0x6, 0x8, 0x9, 0x1, 0x6, 0x5, 0xf, 0xb, 0x7ff, 0x6, 0x9, 0x7, 0x9, 0x1000, 0x1, 0x1, 0x2, 0x2, 0x10001, 0x1, 0x7fff, 0x7fffffff, 0x3, 0x378f, 0xa, 0x0, 0x8, 0x6, 0x81, 0x0, 0x4, 0x2, 0xf, 0x2, 0x8, 0x4, 0x1, 0x7fff, 0x1000, 0x0, 0x4, 0x9, 0x7fffffff, 0x1, 0x7, 0x77bc, 0x67, 0x101, 0x401, 0x5, 0x4, 0x5, 0xba, 0xe0, 0xbd, 0x3, 0x3a7, 0x7, 0x401, 0xfffff001, 0x4, 0x10, 0x2, 0xa8f4, 0x8, 0xfff, 0x7ff, 0x8, 0x5, 0x2, 0x800, 0x0, 0x4, 0x0, 0x6, 0xffff8000, 0x6, 0x7, 0x4, 0x38000000, 0x1, 0x401, 0x8, 0x8, 0x3, 0x0, 0x1, 0x1fd, 0x3, 0x81, 0x1e074d04, 0x7, 0x80000001, 0x0, 0x8, 0xf57, 0x7, 0x80, 0x4, 0x10001, 0x5a, 0x7ff, 0x2, 0xff, 0x1, 0x8, 0xffff7fff, 0x7, 0x3, 0x9, 0x3, 0x1, 0xa8c, 0xb8, 0x9, 0x10000, 0xb8, 0x3e4, 0xd, 0x9, 0x2, 0x548, 0x9, 0x7bf4, 0x9, 0x0, 0xfa0, 0x1, 0x3ff, 0x7ff, 0x8, 0xffffffff, 0x7fff, 0xe, 0x53a, 0x6, 0x7b5, 0x6, 0x95, 0x80000000, 0x8000, 0x40, 0x1, 0x100, 0x7fffffff, 0x8, 0x7, 0xf61, 0x80000000, 0x4, 0x3f8, 0x7, 0x1, 0x3, 0x0, 0x5, 0x7fff, 0x81fd, 0x6e, 0x40000000, 0x9, 0x4, 0x8, 0x7fffffff, 0x7f, 0x800, 0x9, 0xffffffff, 0x6, 0x2, 0xfffffd55, 0xb9d, 0x7, 0x3, 0x81, 0x6, 0x2, 0x1, 0x2f, 0xe5, 0x10000, 0x1, 0x0, 0x2, 0x2, 0x5, 0xf, 0xcd24, 0x40, 0x7, 0x5, 0xfff]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0x6, 0x9, 0xfff, 0xb8b, {0x9, 0x0, 0x72d, 0x9, 0x4}, {0x7, 0x1, 0xfff7, 0x8, 0x1, 0x6}, 0x3a0, 0x8, 0x6}}, @TCA_POLICE_RATE64={0xc, 0x8, 0x8}, @TCA_POLICE_RATE={0x404, 0x2, [0x5, 0x397, 0xb7ad, 0x8, 0x7f, 0x9, 0x4afb, 0xfffff001, 0x2, 0x7, 0x3, 0x9, 0x10001, 0x0, 0x4ba5, 0xff, 0xb96, 0xc5, 0x2, 0x1, 0x3ff, 0x50000, 0x5, 0x3, 0x0, 0x7ff, 0xe6, 0x7, 0x1, 0x101, 0x8, 0x4, 0x8001, 0x4, 0x4, 0x0, 0x39f, 0xce2, 0x80000, 0x6, 0xc0, 0x7, 0x9, 0xe, 0x9, 0x5, 0x0, 0x8, 0x8, 0x1386, 0x2, 0x64fb, 0x7fff, 0xfffffffb, 0x5, 0x8, 0x0, 0x1ff, 0xc, 0xd1d, 0x5, 0x6, 0x0, 0xe438, 0x4, 0xf6, 0x9, 0x2, 0x10000, 0x9, 0x6, 0xccd, 0x5, 0x146, 0xd, 0x80000001, 0x1, 0x8, 0xef, 0x80000000, 0x0, 0x0, 0xfffffff8, 0x9, 0x6, 0x80000000, 0x0, 0x8, 0xe, 0x4, 0xd, 0x4, 0x7, 0x0, 0x7, 0x8, 0xc8df, 0x7, 0x4, 0x400, 0x8, 0x5, 0xe1, 0x10001, 0x2, 0x1, 0x80000000, 0x7, 0x0, 0x0, 0x4, 0x8bda, 0x9c, 0xa30d, 0x12, 0x800000, 0x7fffffff, 0x584, 0x8, 0x3, 0x10, 0x5, 0x5, 0xf7, 0xfffff32a, 0x7a5, 0xfffffff9, 0x8, 0x45b9, 0x2fc3, 0x7, 0x4, 0xffff9849, 0x4, 0x8, 0x100, 0x2, 0x9, 0x41, 0x4, 0x5, 0x2, 0x4, 0x7fff, 0x8, 0x40, 0x9, 0x3, 0x5, 0x7, 0x6, 0x2, 0x5, 0x101, 0x951d, 0x1, 0x401, 0xffffffff, 0x6, 0x6, 0x9, 0x0, 0x0, 0x100, 0x400, 0xfffffff2, 0xffff, 0x800, 0x6, 0x1, 0x7, 0x1, 0x80000001, 0x67, 0x0, 0x6, 0x2, 0x4, 0x5, 0x1, 0x31, 0x2, 0x7, 0x837, 0x9, 0x0, 0x5, 0x4, 0x8, 0x20f5, 0x823b, 0x5, 0x4, 0x6, 0x1, 0x40000, 0xb, 0x4aa4, 0x7, 0xb70e, 0x4a5, 0x6, 0xe, 0x2, 0x3f0, 0x10000, 0x8, 0x3ff, 0x2, 0x6, 0x80000000, 0x91, 0x7, 0x4, 0x6, 0x1, 0x7fffffff, 0x1ff, 0xc, 0x7, 0x100000, 0x7, 0x4, 0x4, 0x8, 0x4, 0x3, 0xbc, 0x1, 0x9, 0x5, 0xb3, 0x7, 0x101, 0x5, 0x0, 0x4, 0x0, 0x10001, 0x80000001, 0xd, 0xfffff2f8, 0x5, 0x9, 0x465, 0x9, 0x4, 0x3, 0x5d, 0x5d, 0x6, 0x258f176e, 0x6, 0x7fff, 0x7]}]}, @TCA_CGROUP_EMATCHES={0x218, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x40, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x401, 0x7, 0x696}, {{0x2, 0x0, 0x0, 0x1}, {0x2, 0x1, 0x1}}}}, @TCF_EM_IPT={0x14, 0x1, 0x0, 0x0, {{0x9793, 0x9, 0x1}, [@TCA_EM_IPT_NFPROTO={0x5}]}}, @TCF_EM_NBYTE={0x14, 0x5, 0x0, 0x0, {{0xff, 0x2, 0x4}, {0x3, 0x2, 0x1, "441c"}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}, @TCA_EMATCH_TREE_LIST={0xd4, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0x65c0, 0x3, 0x4}, {0x80000001, 0x8, 0xf35, 0x1}}}, @TCF_EM_META={0x2c, 0x2, 0x0, 0x0, {{0x1ff, 0x4, 0x1}, [@TCA_EM_META_LVALUE={0x8, 0x2, [@TCF_META_TYPE_INT=0x1]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x8001}, {0x5, 0x7}}}, @TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0xa, 0x1}, {0xf178, 0x9}}}]}}, @TCF_EM_CONTAINER={0x30, 0x3, 0x0, 0x0, {{0x9, 0x0, 0x7}, "439a35bd7921d7b7b12771984114e86b9ae253c7525f5c331dea2e9f464d42fe77"}}, @TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0x7, 0x8, 0x9e3}, {0x3, 0x4, 0x2}}}, @TCF_EM_IPT={0xc, 0x1, 0x0, 0x0, {{0xb, 0x9, 0x7ff}}}, @TCF_EM_META={0x3c, 0x1, 0x0, 0x0, {{0x6, 0x4, 0x1ff}, [@TCA_EM_META_LVALUE={0x14, 0x2, [@TCF_META_TYPE_VAR, @TCF_META_TYPE_INT=0x6, @TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_INT=0x6]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x3, 0x3, 0x1}, {0x5, 0x8, 0x1}}}, @TCA_EM_META_RVALUE={0x8, 0x3, [@TCF_META_TYPE_INT=0x4]}, @TCA_EM_META_RVALUE={0x4, 0x3, [@TCF_META_TYPE_VAR]}, @TCA_EM_META_LVALUE={0x4}]}}]}, @TCA_EMATCH_TREE_LIST={0x38, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{0xb, 0x2, 0x40}, {0xe, 0x0, 0x1}}}, @TCF_EM_NBYTE={0x10, 0x3, 0x0, 0x0, {{0x401, 0x2, 0x40}, {0x8}}}, @TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0xc6, 0x7, 0x5}, {{0x2, 0x1, 0x1}, {0x1, 0x0, 0x1}}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xd}}, @TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x14, 0x3, 0x0, 0x0, {{0x1, 0x2, 0x9}, {0x6, 0x3, 0x1, "ce5ab8"}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x40}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x90, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x1, 0x3, 0x9}, {0x5, 0x9, 0x0, 0x40}}}, @TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x1, 0x7, 0x5}, {{0x2, 0x1}, {0x1, 0x1, 0x0, 0x1}}}}, @TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{0x2, 0x2, 0x8000}, {0x5}}}, @TCF_EM_IPT={0x30, 0x2, 0x0, 0x0, {{0x5, 0x9, 0x100}, [@TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x30}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x3}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_NFPROTO={0x5}]}}, @TCF_EM_IPT={0x1c, 0x1, 0x0, 0x0, {{0x1000, 0x9, 0xfe00}, [@TCA_EM_IPT_HOOK={0x8, 0x1, 0x1}, @TCA_EM_IPT_HOOK={0x8}]}}]}]}]}}, @TCA_CHAIN={0x8, 0xb, 0xff}, @filter_kind_options=@f_bpf={{0x8}, {0x8, 0x2, [@TCA_BPF_ACT={0x4}]}}]}, 0x1bdc}}, 0x10) r2 = socket$inet_sctp(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x1c, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x52) sendmsg$NL802154_CMD_GET_SEC_DEV(0xffffffffffffffff, &(0x7f0000001500)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000014c0)={&(0x7f0000001680)=ANY=[@ANYBLOB="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", @ANYRES16=0x0, @ANYBLOB="02002cbd7000fddbdf25190000000c00060002000000000000000c000600010000000100000008000300", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=0x0, @ANYBLOB="0c000600030000000300000008000300", @ANYRES32=0x0, @ANYBLOB], 0x50}}, 0x10044094) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00'}, 0x94) socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet(0xffffffffffffffff, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000500)=ANY=[@ANYBLOB="a0000000", @ANYRES16, @ANYBLOB="050424bd7000fedbdf250100000008000100", @ANYRES32=r3, @ANYBLOB="84000280"], 0xa0}, 0x1, 0x0, 0x0, 0xaddf11c998560ddf}, 0x24000084) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="180100002f00010000000000fc"], 0x118}], 0x1, 0x0, 0x0, 0x4000}, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private1, 0x9}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r5, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000004c0)=0x8) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f0000000240)={r6, 0x4ab}, 0x8) r7 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) recvmmsg(r1, &(0x7f0000000000)=[{{0x0, 0xfffffffffffffd18, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4091, 0xe5c}, {&(0x7f0000001580)=""/226, 0xf0}], 0x4, 0x0, 0x353}}], 0x40000000000002e, 0x2, 0x0) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r9 = accept4(r8, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) recvmmsg(r9, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000500)=""/217, 0xd9}], 0x1}, 0x4}], 0x2, 0x60, 0x0) 1m7.721392765s ago: executing program 2 (id=9776): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYBLOB="02030003100000002cbd7000fbdbdf250200090040000000ff8000000000000005000600000000000a000000000000ffffff800000000000000000313e87218d64fdb700000000000200010000000000000007020000000005000500000000000a"], 0x80}, 0x1, 0x7}, 0x4008000) 1m7.485079696s ago: executing program 2 (id=9777): r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)={0x20, 0x3, 0x3, 0x101, 0x0, 0x0, {}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0x3, 0xff}}]}, 0x20}, 0x1, 0x0, 0x0, 0x20004000}, 0x4) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000000), 0xffffff6a) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffff000) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1e, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r2}, 0xc) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000057c0)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, 0x5}, 0x1c, &(0x7f00000004c0)}}, {{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000006c0)="8c125bf8679f1392eca2d94c0604f5e7f324c7d075396b709298e827f4ac084286b647107ee08888fb01d3eb4fe0209f49b2b13f81f03549938c61ec1c6f88c7a1148482d6e112cf1b18512d7cd8ac05ba209e24", 0x54}, {&(0x7f0000000740)}], 0x2, &(0x7f0000000540)=[@tclass={{0x14, 0x29, 0x43, 0xb36a}}], 0x18}}, {{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000880)="5c18742bb7665c80fb7e695f314528cc09d4417b8759452f35da4871ff3265a0349505f36a22c74fa1c43a9c555a8a05e00036927fa2d1c6304c20d7a7ca66afbe4de894d85ad7d00d3d02f6f49e7f9f523b9e03f8302f9bc6d712f76ed287b86bee2df2dae0890e6643e4e5ec96f8c4b1ad5650d4332ed90b9c2257a1dd300dd3a620b62f83bca5ed3596f9d66d02dee02f991782977e0879bfdf81c2b15b095718f29595702ca31acc4f", 0xab}], 0x1, 0x0, 0x1d0}}, {{&(0x7f0000000b80)={0xa, 0x4e22, 0xf, @private2, 0x10000}, 0x1c, &(0x7f0000003080)=[{0x0}, {&(0x7f0000001e00)="4e05c3cf0241fd517f93fe40f3677d9aba1630321abee0bc7c973fe380e3bd679a1c44f4e34ec652d9695a77a920a6e9a67e91d2b23a7dca44918f1ddd97f2c5b7a7f41590fa7fd7b00fd62186a5181428285a484313e40923601cda834471849e66f6146c8c0b00cb1bbbc3e7215624617140b45865f2269ff3503b4a0a28546791bb8339000000000000", 0x8b}, {&(0x7f0000001ec0)="174a44d2033902859c2427443e32fff7b2b0167971219466ec5eb8c3b01c9d7991080b5c89bb08eb2b658195ab27e93c176ad2cb96140686231a", 0x3a}, {&(0x7f0000001f00)="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", 0xfe0}, {&(0x7f0000002f00)="4f987c23b6abd74b5ed8bf537808c5edff425cc3f9bd5ee1ca0d0f2f73c957df60b0b9044692e6e4d75e781769d46d5ef5032ad11785b822b8fc052e4e0414da6d9fd4e7b3cdc8b5ae5c119a0a055c12294c329a74b1dfd49cc4f0feb106d50d6309ebb16dc1c05676d2b0d06ac3552df4989c7e61f31ec6fe2c98ddfdbd9963cc0ea52d5a30fda9aa73031b08117fd7bdf46f6609cd9d3331bfdae96972f2637952994c0da59eaea12ff315bf0e3072a5", 0xb1}, {&(0x7f0000002fc0)="1e", 0x1}, {&(0x7f0000003000)="e4fc74adb9c654242c8beeb4bf1fdc66ea83c0ba055f1ed6cb40c2c748e658c3271d143842b4bf64e9a00739447dd75435001ff53d7c3e2deec8138423cbfcf7b85acb9391fd8e98ed588cc68150456de1af8f2c4373919bf108", 0x5a}], 0x7}}, {{&(0x7f0000003140)={0xa, 0x4e22, 0x10000, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000005700)=[@rthdrdstopts={{0x48, 0x29, 0x37, {0x3a, 0x5, '\x00', [@jumbo={0xc2, 0x4, 0x8}, @hao={0xc9, 0x10, @private2={0xfc, 0x2, '\x00', 0x1}}, @pad1, @calipso={0x7, 0x8, {0x2, 0x0, 0xbe, 0x101}}, @ra]}}}], 0x48}}], 0x5, 0x20008050) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, &(0x7f0000000080)=[@in={0x2, 0x4e21, @private=0xa010102}], 0x10) recvmsg(r3, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfecc}, 0x40000002) setsockopt(r3, 0x84, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x4, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x8}, [@call={0x85, 0x0, 0x0, 0x22}, @call={0x85, 0x0, 0x0, 0x50}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x0, 0xe, 0x0, &(0x7f0000000340)="e02753e868a10000000000000000", 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r5, &(0x7f0000000180)="c5", 0x1, 0x40080, &(0x7f00000000c0)={0xa, 0x4e24, 0x40, @local, 0x13}, 0x1c) socket$tipc(0x1e, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x6, 0xc, &(0x7f0000000bc0)=ANY=[@ANYBLOB="180200000400000000000000000000008500000041000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) unshare(0x22020400) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x843, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) pselect6(0x40, &(0x7f0000000000)={0x7f, 0x8, 0x3, 0x7, 0x7, 0x3, 0x800, 0x6}, 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'bridge0\x00'}) 1m7.338890159s ago: executing program 0 (id=9778): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) socket$netlink(0x10, 0x3, 0x13) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) bind$inet6(r1, &(0x7f0000000200)={0xa, 0x4e20, 0x440007, @empty, 0xffff8000}, 0x1c) r2 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) bind$inet6(r2, &(0x7f0000000200)={0xa, 0x4e20, 0x1, @ipv4={'\x00', '\xff\xff', @empty}, 0x8}, 0x1c) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r3) sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="50020000", @ANYRES16=r4, @ANYBLOB="0100000000000000000001000000a00001000000000004000480080002000100000010000c7d0c000b8008000a00b4ed000004000880c8000c8024000900f36aad4208000a156878badf10076800d5441e0f080009002bd49f3b0c00008008000a00697100002c000b8008000a"], 0x250}}, 0x2000c000) 1m6.88649296s ago: executing program 4 (id=9780): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x13, 0x6, &(0x7f0000001840)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket(0xa, 0x3, 0xff) setsockopt$inet6_int(r1, 0x29, 0x12, 0x0, 0x0) (async) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)=ANY=[@ANYRESOCT=r1, @ANYRES64, @ANYRESOCT=r1, @ANYRES16, @ANYRES64=r0, @ANYBLOB="73e043e1897480c1f4c6845b4130c8fb6f85bbbd805625832e4ca7ce1e51ccb98feb26bdd910a78f76e3eac76da01d19fe", @ANYRESHEX=r1, @ANYRES16, @ANYRES32], 0xac}, 0x1, 0x0, 0x0, 0x84}, 0x20000000) (async) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) (async) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r2, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000800)=@newqdisc={0x140, 0x10, 0x1, 0x70bd25, 0x25dfdbfc, {0x6, 0x0, 0x8100, 0x0, {0x1, 0x10}, {0xfff1}, {0xe, 0x10}}, [@TCA_STAB={0x11c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x1, 0xfc, 0x1, 0x7, 0x0, 0x5, 0x80000000, 0x6}}, {0x10, 0x2, [0x9, 0x1, 0x5, 0x1, 0x3ff, 0x200]}}, {{0x1c, 0x1, {0x9, 0x40, 0x400, 0x8, 0x1, 0x5, 0x77b, 0x4}}, {0xc, 0x2, [0xb3d4, 0x8001, 0x28, 0x0]}}, {{0x1c, 0x1, {0x4a, 0x0, 0x9, 0x6, 0x0, 0x9, 0x7, 0x2}}, {0x8, 0x2, [0x3, 0x800]}}, {{0x1c, 0x1, {0x5, 0x4, 0x75bc, 0x0, 0x1, 0x6, 0xff, 0x8}}, {0x14, 0x2, [0xfff, 0x3, 0x3, 0xb580, 0x3, 0x4, 0x38f, 0x1]}}, {{0x1c, 0x1, {0x9, 0x1, 0x0, 0xb, 0x0, 0xfffff000, 0x6, 0x3}}, {0xa, 0x2, [0x4, 0x3, 0xff]}}, {{0x1c, 0x1, {0x7, 0x0, 0x8001, 0x2e, 0x1, 0x7ff, 0x9, 0x1}}, {0x6, 0x2, [0x9]}}, {{0x1c, 0x1, {0x9, 0x8, 0x6, 0x4, 0x2, 0x2, 0x0, 0x2}}, {0x8, 0x2, [0x3, 0x7]}}]}]}, 0x140}, 0x1, 0x0, 0x0, 0x400c800}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x100, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0xd, 0xfff1}, {0xfff5, 0xffff}, {0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0x40800}, 0x0) (async) close(0xffffffffffffffff) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=0x0, @ANYBLOB="070017"], 0x20}}, 0x20000001) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000004000ffff0900010073797a30000000000900020073797a310000000014000380080001"], 0x138}, 0x1, 0x0, 0x0, 0x20040855}, 0x0) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd0002800800"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) (async) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) (async) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f00000000c0), 0x492492492492627, 0x0) (async) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000500)={0x0, @in={{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0xb}}}, 0x10, 0x6, 0x0, 0x34e, 0x0, 0x6, 0x81}, &(0x7f0000000600)=0x9c) (async) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, 0x0, &(0x7f0000000700)) r5 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r5, 0x400448c8, &(0x7f0000000740)={r2, r2, 0x6, 0x0, 0x0, 0x9, 0x5f, 0xc08, 0x3ff, 0xc3, 0x1, 0x62, 'syz1\x00'}) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r7 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r7, &(0x7f00000003c0)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) recvmsg(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000800)=""/4136, 0x1028}], 0x1}, 0x10100) (async) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 1m6.751620501s ago: executing program 0 (id=9781): r0 = socket$inet6(0xa, 0x2, 0x0) syz_emit_ethernet(0x86, &(0x7f0000000900)=ANY=[@ANYBLOB="aaaaaaaaaa23aaaaaaaaaabb0800450000780000000000349078000000000000000000004e200064907802000000030000000100000056805c734ee222c27e5a12df81f6e030a5441a99f362cd24e0a1ac22915007334cbf1331ffc21d2e9bfb1eb3c03976ed837b6f876605ac29dcb96a8901e0711afb35b3b38712576a200922b05be22ad4a1c5ca87150196862b81a0dad9ed115a765f2fe38165d7391b7fba85e2ace793c1c071d9654be9f0ce8cb47bf8bd0c6f1ff1df3af182eeed71feffffffffffffff0bb816e797db52f74c49f766c42dfee244a89f5de4c582e15bed3d344f04e084929d6c4349b31a77f1494a29299f0bd68f6a102ad30847145eaae84bc406d9820ba9dff5d3cf57c9c322e8aee6a2adf20fd92344de801a5a1613babae48ffba6cd5904f4a86b3f471699af50ec16b88169023630e6b99cfa83b4f2964db6eabfcdacd323345e741d58f91071ef597efb747f7c3c57559944a9ae3f7118b0506c45b815b2d71333147a3f44749f3ebddb5e3e589b4c8d21a3ecfd0e962823a775442b62f3e8d347c9745dfc5c68b8fd88e5"], 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000300)={0x0, r0}, 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070}, 0x94) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000007300)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000006200)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) sendmsg$ETHTOOL_MSG_DEBUG_GET(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000e00)=ANY=[@ANYBLOB="7c0100", @ANYRES16, @ANYBLOB="01002bbd7000fbdbdf25070000000c000180080003000100000074000180140002007767320000000000000000000000000008000300020000001400020070696d367265673000000000000000001400", @ANYRES32, @ANYRES32, @ANYBLOB="400001801400020070696d3672656730"], 0x17c}, 0x1, 0x0, 0x0, 0x4008004}, 0x20000080) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="2c385a7af3be", 0x6) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b000000080003", @ANYRES32=r6, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 1m6.72253547s ago: executing program 1 (id=9782): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x5b) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f00000007c0)=[{0x0, 0x0, 0x0}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002000f0000001f000000060001000000000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) bind$vsock_stream(r3, &(0x7f0000000000)={0x28, 0x0, 0x2711, @local}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) unshare(0x6020400) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014"], 0x7c}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="340000002e0003050000100000000000200000f8ffffffffffffff0008000000", @ANYRES32, @ANYBLOB="0c000f"], 0x34}], 0x1}, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r6, 0x107, 0x13, 0x0, 0x0) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1400000026000100000000000000000006"], 0x14}], 0x1}, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r8, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r9, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) 1m6.55088407s ago: executing program 4 (id=9783): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) (async, rerun: 64) r2 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="3800fe0031d4460a25e47f19bf42cfdeb59b83f7cb2d9ea3522330b09da7a0c1b110ef353919b78b46c3e9d66c0092de6c87cf0eed0044a36026299c635b761709e857c7a4a96e40157b082583b1145bddcab4979ff62cfef31e2f35b10ce78741df466196f842f9a4567c618691c328bf8f6761363884824b43bb6a0361682a8ed46b0afb7879d0b69b5dddc840e5ca92beda8c27c3a59e0000004934b05351a19c8af1e24679cd02870df04f55274348358eb804064bb8eccb2dda56640f2681bbf5182ca3512d10db10085f68f91029dcc559be5c436a49a38f283a6842d88778e4ee041c0599f8056a63dafb3b138167cd13063c5e09c7992b34ca1f8344e3980773bb9b604f3b777f43367fbd3383ec10f221ca04edceec171dd58f4fa239880c1c07d4db10539c5845b14f62afeef83438f2286ebaa30b319c61232f76847e34eba3e1728d0cd26f9f7649e982ad1f4071443ed17e0b88f61a5f5385d25edc9fe637cf9615b8e16d3c6bc0b3d6c1208f16c428a0ed78af", @ANYRES16=r3, @ANYBLOB="010000000d000000010001040000f5d895bc85d40000000001410000001c001700000000000000006574ab263f967a6b616c6c657230"], 0x38}}, 0x0) (async) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000001700)={0x6, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000fcffffff850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x8, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r5}, &(0x7f0000000080), &(0x7f00000000c0)=r4}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000200)={r5, &(0x7f0000000080), &(0x7f0000000000)=""/10, 0x2}, 0x20) (async, rerun: 32) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) (rerun: 32) close(r6) socket$unix(0x1, 0x1, 0x0) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x3, 0x6361, 0x5, 0xfffffffd, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0xc04c001}, 0x20000804) (async, rerun: 32) r8 = socket$inet_tcp(0x2, 0x1, 0x0) (rerun: 32) setsockopt$sock_int(r8, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) (async) setsockopt$inet_tcp_TCP_REPAIR(r8, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) (async) connect$inet(r8, &(0x7f00000006c0)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x2}}, 0x10) (async, rerun: 64) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r8, 0x6, 0x14, &(0x7f0000000140)=0x1, 0x4) (rerun: 64) sendmmsg$inet(r8, &(0x7f00000058c0)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f00000008c0)="ff4d293d1a4b4da02e8686301abb5d5b70e962696a643fed4781cc4d9d56f01754f6ab3c31c1b574d21894e0bc6f878ffb07c844ba5f207fe4c8fe75a29d64e804eb84451c344e99e3627f6a6a248269362cf13e821b56a248d2704540b5ff8fe6bcaa9df5a8f2df6d7002a734a443fe3d6805a645771bc1e7d3fe3d45e32ed5f9e2", 0x82}], 0x1, &(0x7f0000000940)=ANY=[], 0x120}}], 0x1, 0x4008c51) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x80000, {0x0, 0x0, 0x0, 0x0, {}, {0x4, 0xb}, {0x9, 0xd}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0x657, 0xf8a0, 0x1e, 0x401, 0x4, 0x0, 0x0, 0x22ee64ea}}}}]}, 0x58}}, 0x4010804) ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 1m6.064853935s ago: executing program 2 (id=9784): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000040)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x74, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x48, 0x4, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_MATCH_NAME={0x9, 0x1, 'time\x00'}, @NFTA_MATCH_INFO={0x1c, 0x3, "07682c020b7b37f27f51010054d4077549f4e34e86f469eb"}, @NFTA_MATCH_REV={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x9c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r2 = socket$key(0xf, 0x3, 0x2) (async) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) getsockopt(0xffffffffffffffff, 0x200000000114, 0x2710, &(0x7f0000019380)=""/102399, &(0x7f0000000000)=0xc80) (async) sendmsg$nl_xfrm(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=@allocspi={0xf8, 0x16, 0x1, 0x70bd2b, 0x25dfdbfe, {{{@in=@private=0xa010101, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4e23, 0x0, 0x4e24, 0x0, 0xa, 0x80, 0x20, 0x1d}, {@in6=@local, 0x4d5, 0x33}, @in=@dev={0xac, 0x14, 0x14, 0x10}, {0x8, 0x7b5, 0x0, 0x6, 0x9, 0xfffffffffffffffa, 0xffffffff, 0x3}, {0x2, 0x2, 0x1, 0xfffffffffffffffa}, {0x0, 0x10001, 0xfffffff9}, 0x70bd2a, 0x0, 0x2, 0x2, 0x6, 0x1}, 0x8, 0x74f}}, 0xf8}, 0x1, 0x0, 0x0, 0x10}, 0x400c8c0) sendmsg$key(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x2, 0xa, 0x0, 0x0, 0x2}, 0x10}}, 0x0) (async) sendmmsg$inet(r0, &(0x7f00000039c0)=[{{&(0x7f0000000080)={0x2, 0x4e1e, @remote}, 0x10, 0x0}}], 0x1, 0x2000c044) (async) close(0x3) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r4, &(0x7f0000000380)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x4, @private1, 0xffffffff}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000040)="18", 0x1}], 0x1}}], 0x1, 0x0) (async) shutdown(r4, 0x1) (async) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r4, 0x84, 0x77, &(0x7f0000000140)=ANY=[], 0xa) 1m5.794233737s ago: executing program 2 (id=9785): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000d00)=@mangle={'mangle\x00', 0x44, 0x6, 0xc80, 0x138, 0x138, 0x9b0, 0x9b0, 0xb48, 0xbe8, 0xbe8, 0xbe8, 0xbe8, 0xbe8, 0x6, 0x0, {[{{@ip={@broadcast, @multicast1=0xe0007600, 0x11000000, 0x0, 'geneve1\x00', 'ip6gre0\x00'}, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'batadv_slave_1\x00', 'veth1_virt_wifi\x00', {0xff}, {}, 0x11}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@uncond, 0x0, 0x850, 0x878, 0x0, {}, [@common=@unspec=@u32={{0x7e0}, {[{[{0x10, 0x3}, {0xffffffff, 0x1}, {0x1, 0x3}, {0x7, 0x2}, {0x6, 0x2}, {0x6, 0x2}, {0x1, 0x3}, {0x7, 0x2}, {0x6, 0x2}, {0x9, 0x3}, {0x9, 0x1}], [{0x6, 0x80000001}, {0xffffffc7, 0x4}, {0x7, 0x2}, {0x8, 0xffff}, {0x7, 0x81}, {0x3, 0x3}, {0x5}, {0x7, 0x3}, {0x7, 0x2}, {0x5, 0xfff}, {0x800, 0x1}], 0x9, 0x3}, {[{0x19008000}, {0x26bb, 0x2}, {0x7b3, 0x3}, {0x1}, {0xe, 0x2}, {}, {0x9, 0x2}, {0x10000, 0x1}, {0x0, 0x2}, {0x2fab, 0x1}, {0x597, 0x1}], [{0x7, 0x1}, {0x1, 0x5}, {0x7, 0x401}, {0x8, 0x9}, {0x8, 0x8}, {0x3f, 0x4}, {0xfff, 0x4}, {0xd, 0x7ff}, {0x4, 0x6}, {0x3d, 0x5}, {0x942f}], 0x8, 0xa}, {[{0x5}, {0x4, 0x3}, {0x6, 0x2}, {0x0, 0x3}, {0x4, 0x3}, {0x7}, {0x4, 0x2}, {0x7, 0x2}, {0xffff, 0x1}, {0x4, 0x1}, {0xfffffff7, 0x2}], [{0xe547, 0x10000}, {0x4, 0xf78}, {0x81, 0x1c10}, {0x3}, {0x8000200, 0x5}, {0x4, 0x9}, {0x80000001, 0xffff}, {0xaf3d, 0x2}, {0x3c, 0xc}, {0x3e, 0x9}, {0x3, 0x4}], 0x0, 0x3}, {[{0x6, 0x2}, {0x5, 0x1}, {0x5}, {0x1, 0x1}, {0xdeca, 0x1}, {0xfd}, {0x401, 0x3}, {0x1, 0x2}, {0x0, 0x2}, {0x8, 0x2}, {0x81}], [{0x1, 0xfd0d}, {0x9, 0x4}, {0x80000001}, {0x4, 0x400}, {0x9, 0x3}, {0xa, 0xfffffff0}, {0x9, 0x4}, {0x4, 0x2}, {0x10, 0x59d}, {0x7, 0x1ff}, {0x4}], 0x8, 0xb}, {[{0xffffff11, 0x2}, {0x6, 0x2}, {0x902, 0x1}, {0xffffff00}, {0x9}, {0x1, 0x2}, {0xffff, 0x1}, {0x9, 0x3}, {0x4, 0x2}, {0x70c8}, {0x7, 0x3}], [{0x3b8a6dc3, 0x7}, {0x9, 0x2}, {0x8, 0x2}, {0xf, 0x3}, {0x5, 0xffffffff}, {0x1ff, 0xff}, {0x3, 0x96e}, {0xffffffff, 0x400}, {}, {0x3, 0x934}, {0x5, 0x7}], 0xb, 0x9}, {[{0x20c, 0x2}, {0x72, 0x1}, {0x2, 0x2}, {0x7, 0x1}, {0x7, 0x3}, {0x8, 0x1}, {0x5}, {0xffffbc3b, 0x1}, {0x7fffffff, 0x3}, {0x42, 0x2}, {0x8, 0x1}], [{0xe43}, {0xb, 0x8000}, {0x2, 0x5}, {0x3, 0xe9c0}, {0x5, 0x7f}, {0x9, 0x3}, {0x6, 0x40}, {0x11f, 0xffffffe9}, {0xc35a, 0xd16}, {0x6, 0x4}, {0x9, 0x18a}], 0x8, 0x3}, {[{0x7, 0x3}, {}, {0x9}, {0x0, 0x3}, {0x6, 0x2}, {0x6, 0x2}, {0x401, 0x2}, {0x6}, {0x9, 0x2}, {0x7c42, 0x3}, {0x40000000, 0x2}], [{0xdff, 0x4e}, {0x3, 0x7}, {0x1000, 0x1}, {0xfffffff8, 0x8001}, {0x9, 0xb34}, {0xfffffffa, 0xa}, {0xae9c, 0x7}, {0xe, 0x8}, {0x8, 0x7}, {0x6, 0x3}, {0x9, 0x92b}], 0xc, 0x7}, {[{0xfff}, {0x1, 0x2}, {0x2, 0x2}, {0xa640}, {0x0, 0x2}, {0x9}, {0x4, 0x1}, {0x0, 0x3}, {0x80000001, 0x3}, {0x0, 0x1}, {0x8}], [{0x1, 0x73}, {0x10000, 0x9}, {0xc, 0x3}, {0x8, 0xffffffff}, {0x7, 0x5}, {0x86, 0xf}, {0x3, 0x2fc3}, {0xf65, 0xa2f}, {0x15064f6, 0xede}, {0x8a2}, {0x2, 0x6}], 0x7}, {[{0x80000001}, {0x5, 0x2}, {0x687, 0x2}, {0x20000, 0x1}, {0xab50, 0x2}, {0x0, 0x3}, {0x7}, {}, {0x5, 0x1}, {0x5}, {0x7}], [{0x64d, 0x3}, {0x7, 0x7}, {0x10001, 0x2}, {0x1, 0x6}, {0x5, 0x9}, {0x0, 0xcba}, {0x40, 0x4}, {0x2, 0x4}, {0x2ca6, 0x9}, {0x80000000, 0xc9}, {0x6, 0x7}], 0x9, 0x3}, {[{0x9, 0x1}, {0xe35, 0x1}, {0xffffffab, 0x1}, {0x401, 0x3}, {0x4, 0x2}, {0xa}, {0xfffffeff, 0x1}, {0xc9, 0x2}, {0x6, 0x1}, {0x8, 0x1}, {0x3, 0x1}], [{0xb6f2, 0x80000000}, {0x0, 0x9}, {0x65, 0x4}, {0x3, 0x982}, {0x5, 0x7f}, {0x7, 0x9}, {0x6, 0x4}, {0x3ff, 0x4}, {0x1, 0x7ff}, {0x7, 0xffff}, {0x3, 0x1}], 0x6, 0x1}, {[{0x6cd8867f, 0x1}, {0xb42}, {0x7fff}, {0x4, 0x2}, {0x65b, 0x1}, {0x61, 0x3}, {0x78a8}, {0x4, 0x3}, {0x8001, 0x2}, {0x3, 0x2}, {0x5, 0x3}], [{0x4, 0xff6}, {0x0, 0x3}, {0x4, 0xe8aa}, {0x7, 0x4}, {0x0, 0x2}, {0x5, 0x3}, {0xfffffffc, 0x3}, {0x15c, 0x80000000}, {0x9, 0x3}, {0x91, 0x80000001}, {0xfffffff6, 0xbd}], 0x0, 0x5}], 0x9, 0x1}}]}, @unspec=@CHECKSUM={0x28}}, {{@ip={@loopback, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth1_to_team\x00'}, 0x0, 0x70, 0x198}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x0, 'system_u:object_r:dbusd_etc_t:s0\x00'}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00', {}, {}, 0x0, 0x3}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0xce0) 1m5.677234843s ago: executing program 4 (id=9786): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb01e3"], &(0x7f0000001f80)=""/212, 0x32, 0xd4, 0xa, 0x2}, 0x28) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000080)={'vxcan1\x00'}) sendmsg$nl_route(r1, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0xf) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$nl_xfrm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060", @ANYRESOCT], 0xb8}}, 0x20040014) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0x100, 0x0, 0x25dfdbfb, {{@in6=@private0={0xfc, 0x0, '\x00', 0x5}, @in6=@private2, 0x0, 0x4, 0x0, 0x0, 0xa, 0x60, 0x80, 0x3b, 0x0, 0xee01}, {0x0, 0x4, 0x0, 0x2000000000000, 0x3, 0xfffffffffffffffd, 0x544}, {0x8}, 0x6, 0x40000000, 0x0, 0x1, 0x2}}, 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e0001"], 0xb8}}, 0x20004000) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000020000000000fc0000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80c0}, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="b80000001300e9990500000000000000fc000000000000000000000000000000fc00000000000000000000000000030000000000000000000a0030"], 0xb8}}, 0x4000) syz_genetlink_get_family_id$ieee802154(0x0, r0) 1m5.659901076s ago: executing program 0 (id=9787): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth1_to_batadv\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000010400000000000000588035045a", @ANYRES32=0x0, @ANYBLOB="51420000000000002800128008000100687372001c00028008000200", @ANYRES32=r1, @ANYBLOB="050007000100000008000100", @ANYRES32=r2], 0x48}, 0x1, 0x40000000, 0x0, 0x20040000}, 0x0) 1m5.588553293s ago: executing program 1 (id=9788): r0 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000000)={0xa0000001}) r4 = socket$netlink(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x28}, 0x1, 0x0, 0x0, 0x4004011}, 0x800) ppoll(&(0x7f0000000180)=[{r3}, {r0, 0x4}, {r2, 0x1c}], 0x3, 0x0, 0x0, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) r6 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r6, &(0x7f0000000540)=[{{&(0x7f0000000000)={0x2, 0x0, @rand_addr=0x64010100}, 0x10, &(0x7f0000000300)=[{&(0x7f0000000140)="01", 0x1}], 0x1}}, {{&(0x7f0000000080)={0x2, 0x4e23, @loopback}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000480)='Or', 0x2}], 0x1}}], 0x2, 0xc000) r7 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r6, 0x84, 0x72, &(0x7f00000003c0)={r8, 0x0, 0x20}, 0xc) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r5, &(0x7f0000000140)={0x4}) 1m5.453163442s ago: executing program 2 (id=9789): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x40040, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$kcm(0x11, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd0a, 0x25dfdbff, {0x0, 0x0, 0x0, r8, {0x0, 0x4}, {0xffff, 0xffff}, {0xfff2, 0xfff1}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newtfilter={0x8c, 0x2c, 0xd27, 0x70bd26, 0x259fdc02, {0x0, 0x0, 0x0, r5, {0xb, 0xfff3}, {}, {0x7}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x54, 0x2, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x1}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x3, 0x1ff, 0xffffffffffffffff, 0x4, 0x77}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x810}, 0x0) ioctl$BTRFS_IOC_DEFRAG_RANGE(r1, 0x40309410, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r9) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r10, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000002300)="81", 0x1}], 0x1}, 0x4) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newlink={0x44, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x1840}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x3}, @IFLA_BR_AGEING_TIME={0x8}]}}}]}, 0x44}}, 0x0) ioctl$OCFS2_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x1, 0x0, 0x6, 0x4, 0x2, 0x4}) 1m5.370182434s ago: executing program 4 (id=9790): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="0001000016000100000000000000000000000000000000000000000000000000ffffffff0000000000000000000000004e200000000000000000a00000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="ac1414aa0000000000000000000000000000000033000000ac1414bb000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000330000000000000000000000000000000000000000000000000100000000000000020000000000000000000000000000000010000000000000000000000000000000000000010000", @ANYRESHEX=r0], 0x100}}, 0x0) 1m5.155005308s ago: executing program 0 (id=9791): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$IPCTNL_MSG_CT_GET_DYING(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)={0x14, 0x6, 0x1, 0x201, 0x0, 0x0, {0x3, 0x0, 0x1}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20040040}, 0x40) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)={0x18, 0x2c, 0x107, 0x70bd2b, 0x25dfdbff, {0x20, 0x7c}}, 0x5f}, 0x1, 0x0, 0x0, 0xc006}, 0xc010) sendmsg$IPSET_CMD_SAVE(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x2c, 0x8, 0x6, 0x401, 0x0, 0x0, {0x3, 0x0, 0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40090}, 0x40090) r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r2, 0xffffffff) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000001840)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)="c7", 0x1}], 0x1, 0x0, 0x0, 0x8054}}], 0x1, 0x4000045) sendmsg$netlink(r3, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000ac0)={0x10, 0x2a, 0x800, 0x70bd27, 0x25dfdbfc}, 0x10}], 0x1, 0x0, 0x0, 0x2000c040}, 0x20000000) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) close(0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) socket$xdp(0x2c, 0x3, 0x0) socket$rxrpc(0x21, 0x2, 0xa) socket$kcm(0x21, 0x2, 0xa) openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c00000000010104000000000000000002001000240002801400018008000100e000000108000200e00000010c00028005000100000000001c0010800800014000000000d97405010000000008000240000000000800", @ANYRES64=r4], 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) sendto$inet(r3, &(0x7f0000000300)="b3", 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f00000003c0)={0x0, 0x1}, 0x8) 1m5.06482941s ago: executing program 4 (id=9792): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001480)=@newtfilter={0x884, 0x2c, 0x42f, 0x870bd28, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0x8, 0xffff}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_route={{0xa}, {0x854, 0x2, [@TCA_ROUTE4_POLICE={0x848, 0x5, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x7, 0x235a, 0xd, 0x3, 0xc0, 0x0, 0x5, 0x2, 0x2, 0x2400, 0xcf8, 0x4, 0x7, 0x16, 0x2, 0x7fff, 0x36f8, 0x7, 0x6, 0x6, 0x9f, 0x5, 0xfffffffa, 0xca, 0x6, 0x6, 0x1, 0x8, 0x9, 0x0, 0x1, 0x8, 0x61e, 0x3, 0xe000000, 0x1, 0xf70e, 0x1, 0xffff, 0x7e, 0x553a, 0x4, 0x6, 0x3, 0x2, 0xe, 0x80000001, 0x9c0, 0x3, 0x2d9, 0x0, 0x0, 0x5, 0x4000000, 0xa, 0x4, 0xfffffaea, 0xd7630ba3, 0xe6, 0x6, 0xfffffffc, 0x19187d35, 0x9, 0x9, 0x8, 0x8, 0x81, 0x6, 0xffffff79, 0x6, 0x6b06, 0x1, 0x71, 0x80000001, 0x4, 0x2, 0x3, 0x7, 0x10001, 0xcd34, 0x40, 0x0, 0xc, 0x7f, 0x6, 0x7fffffff, 0x3, 0x8000, 0xfffffffc, 0x1, 0xffff, 0x87, 0x4, 0xb, 0x7, 0x800, 0x1000, 0x6, 0x5, 0xf1, 0xd8f, 0x5, 0x7a6, 0xe, 0x8001, 0x6, 0xf5, 0xe, 0x10, 0x7fff, 0x3, 0x5, 0x7, 0xb16, 0x60, 0x1d, 0x800, 0x3, 0x7, 0x91, 0x10, 0x1, 0x10, 0x3, 0x5, 0xffffffff, 0xe38, 0x10001, 0xfffffffd, 0x3, 0xffffff67, 0x559, 0x9b8, 0x4, 0x23a3, 0x62, 0x6, 0x401, 0xdb0, 0x7d4, 0x0, 0x8, 0x8, 0xfffffff5, 0x6, 0x2, 0x5, 0x4, 0x7, 0x8, 0x0, 0x5, 0x3, 0x401, 0x5, 0x6, 0x4d4, 0x3, 0xb3, 0xa3, 0x8, 0x8457, 0xd2, 0x7c69f040, 0xb, 0x5, 0x7, 0x8, 0xa3bd, 0x6, 0x8, 0x2, 0x81, 0x6, 0x21, 0xbd, 0x80, 0x4ac, 0xf9a4, 0x6, 0x9, 0x8, 0xb, 0xd5, 0x6, 0x0, 0xcf89, 0x22, 0x1000, 0x7, 0x6a98, 0x4, 0x8, 0x2, 0x3, 0x7, 0x6733, 0x23, 0xa, 0x1, 0x0, 0x2, 0x7, 0x7fffffff, 0x3, 0x57273aa2, 0x2eee, 0x7, 0x1, 0x9, 0x8000, 0x1e, 0x9, 0x1, 0xf4e, 0x7, 0x8000, 0x2, 0x6, 0x0, 0xc, 0x0, 0x6, 0x100, 0x2, 0x1, 0x8, 0x2, 0x44f76d80, 0x8, 0x8001, 0x1, 0x5, 0x66, 0xd, 0x8001, 0x4, 0x3, 0x9, 0x2, 0x7, 0xfffffffc, 0x0, 0xf, 0x6, 0x0, 0x14f5b913, 0x10000, 0x0, 0x6, 0x7, 0x80000000, 0x80, 0x3, 0x1, 0x810]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x3, 0x7, 0x8, 0x1000, 0xffffffff, {0x5, 0x1, 0x7, 0x8, 0x7f, 0x1}, {0x2, 0x1, 0xf44, 0x8, 0x9, 0x1e0}, 0x7, 0x2638bb53, 0x4}}, @TCA_POLICE_RATE={0x404, 0x2, [0x6, 0x200, 0x2, 0x81, 0xd, 0x9, 0x5dc, 0x1, 0x6, 0x9, 0xf, 0x6, 0x4, 0x2, 0x4, 0x1, 0x10, 0xc63, 0xe295, 0x3, 0x4, 0x3, 0x7, 0x9f, 0x0, 0x3, 0x7, 0x80000000, 0x8000, 0x6, 0x4, 0xc15, 0x6, 0x5, 0x2, 0xfffffffe, 0x7, 0xffff, 0x85, 0x8, 0x468, 0x4, 0x1ff, 0x0, 0x3adf1e71, 0xfff, 0x6, 0x1c9b8f8c, 0x1, 0x2, 0xb3af, 0x6, 0x2d0d, 0x9, 0x7f, 0xffffffff, 0x7, 0x2990, 0x0, 0x5, 0x57, 0xc6, 0xe47e, 0x9, 0x77b0, 0x4, 0x2, 0x0, 0x101, 0x4, 0x0, 0x4, 0x5, 0x1, 0x3, 0xffe3, 0x800, 0x4, 0xdf, 0xfffffe00, 0x0, 0x200, 0x1ff, 0xfffffffa, 0x2, 0x3, 0x9, 0x8, 0x6, 0x7, 0xfffffffd, 0xeee, 0x8, 0x2645, 0x7fffffff, 0x7fffffff, 0x9, 0x3, 0xfffffff7, 0xffffffff, 0x7f, 0xeab, 0x75d9, 0x80000001, 0x9, 0xfffffffb, 0x8, 0x0, 0x7, 0x9, 0xbdb, 0x4, 0x4, 0x3ff, 0x18000000, 0x8, 0x2, 0xfff, 0xfff, 0x8, 0x78, 0xae6, 0x6, 0x8, 0xca7, 0xb2b, 0x5, 0x1, 0x10000, 0x3, 0x1ff, 0x6c, 0x2, 0x6, 0x8, 0x3, 0xfff, 0x8001, 0xf, 0x9, 0x5, 0x976, 0x3, 0xbe66, 0x0, 0x5, 0x4, 0x6, 0x8, 0x2, 0x6, 0x3ff, 0x8, 0x1, 0x4fdf0317, 0xfffffffa, 0xa, 0x6, 0x40, 0x9, 0x7, 0x7, 0x9, 0x2, 0x8, 0x4, 0xd60c, 0x3, 0x10, 0x1, 0x3, 0x8, 0x4, 0x401, 0x4, 0x9, 0x9, 0x8, 0x0, 0x1000, 0x0, 0x5, 0x9, 0x4, 0x13, 0x200, 0x8, 0xfffffff9, 0x8, 0x4, 0xa9, 0x6, 0xc, 0x8, 0xafa, 0x7, 0x6d, 0xffff0001, 0xb98, 0x0, 0x2, 0x9089, 0x9dd, 0x0, 0xffff2d5b, 0x8, 0xbb1, 0x5, 0x6, 0xff, 0x3, 0x0, 0x3, 0x941, 0x1, 0x20, 0x2, 0x0, 0xfffffff2, 0x9, 0x7, 0xf, 0xf, 0x80, 0x7f, 0x7ff, 0x200, 0x1, 0xffffff80, 0x7fffffff, 0x3, 0xfffffffe, 0x4000, 0x6, 0x9, 0x99d7, 0x0, 0xffff, 0x3, 0x9, 0x7ff, 0x5, 0x10001, 0x4, 0x6, 0x7fff, 0x5, 0x4, 0x6d261679, 0x0, 0x9, 0x9, 0x9, 0x6, 0x641, 0x10000]}]}, @TCA_ROUTE4_TO={0x8, 0x2, 0x1d}]}}]}, 0x884}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) 1m4.000713995s ago: executing program 4 (id=9793): r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)={0x20, 0x3, 0x3, 0x101, 0x0, 0x0, {}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0x3, 0xff}}]}, 0x20}, 0x1, 0x0, 0x0, 0x20004000}, 0x4) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000000), 0xffffff6a) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffff000) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1e, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r2}, 0xc) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000057c0)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, 0x5}, 0x1c, &(0x7f00000004c0)}}, {{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000006c0)="8c125bf8679f1392eca2d94c0604f5e7f324c7d075396b709298e827f4ac084286b647107ee08888fb01d3eb4fe0209f49b2b13f81f03549938c61ec1c6f88c7a1148482d6e112cf1b18512d7cd8ac05ba209e24", 0x54}, {&(0x7f0000000740)}], 0x2, &(0x7f0000000540)=[@tclass={{0x14, 0x29, 0x43, 0xb36a}}], 0x18}}, {{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000880)="5c18742bb7665c80fb7e695f314528cc09d4417b8759452f35da4871ff3265a0349505f36a22c74fa1c43a9c555a8a05e00036927fa2d1c6304c20d7a7ca66afbe4de894d85ad7d00d3d02f6f49e7f9f523b9e03f8302f9bc6d712f76ed287b86bee2df2dae0890e6643e4e5ec96f8c4b1ad5650d4332ed90b9c2257a1dd300dd3a620b62f83bca5ed3596f9d66d02dee02f991782977e0879bfdf81c2b15b095718f29595702ca31acc4f", 0xab}], 0x1, 0x0, 0x1d0}}, {{&(0x7f0000000b80)={0xa, 0x4e22, 0xf, @private2, 0x10000}, 0x1c, &(0x7f0000003080)=[{0x0}, {&(0x7f0000001e00)="4e05c3cf0241fd517f93fe40f3677d9aba1630321abee0bc7c973fe380e3bd679a1c44f4e34ec652d9695a77a920a6e9a67e91d2b23a7dca44918f1ddd97f2c5b7a7f41590fa7fd7b00fd62186a5181428285a484313e40923601cda834471849e66f6146c8c0b00cb1bbbc3e7215624617140b45865f2269ff3503b4a0a28546791bb8339000000000000", 0x8b}, {&(0x7f0000001ec0)="174a44d2033902859c2427443e32fff7b2b0167971219466ec5eb8c3b01c9d7991080b5c89bb08eb2b658195ab27e93c176ad2cb96140686231a", 0x3a}, {&(0x7f0000001f00)="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", 0xfe0}, {&(0x7f0000002f00)="4f987c23b6abd74b5ed8bf537808c5edff425cc3f9bd5ee1ca0d0f2f73c957df60b0b9044692e6e4d75e781769d46d5ef5032ad11785b822b8fc052e4e0414da6d9fd4e7b3cdc8b5ae5c119a0a055c12294c329a74b1dfd49cc4f0feb106d50d6309ebb16dc1c05676d2b0d06ac3552df4989c7e61f31ec6fe2c98ddfdbd9963cc0ea52d5a30fda9aa73031b08117fd7bdf46f6609cd9d3331bfdae96972f2637952994c0da59eaea12ff315bf0e3072a5", 0xb1}, {&(0x7f0000002fc0)="1e", 0x1}, {&(0x7f0000003000)="e4fc74adb9c654242c8beeb4bf1fdc66ea83c0ba055f1ed6cb40c2c748e658c3271d143842b4bf64e9a00739447dd75435001ff53d7c3e2deec8138423cbfcf7b85acb9391fd8e98ed588cc68150456de1af8f2c4373919bf108", 0x5a}], 0x7}}, {{&(0x7f0000003140)={0xa, 0x4e22, 0x10000, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000005700)=[@rthdrdstopts={{0x48, 0x29, 0x37, {0x3a, 0x5, '\x00', [@jumbo={0xc2, 0x4, 0x8}, @hao={0xc9, 0x10, @private2={0xfc, 0x2, '\x00', 0x1}}, @pad1, @calipso={0x7, 0x8, {0x2, 0x0, 0xbe, 0x101}}, @ra]}}}], 0x48}}], 0x5, 0x20008050) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, &(0x7f0000000080)=[@in={0x2, 0x4e21, @private=0xa010102}], 0x10) recvmsg(r3, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfecc}, 0x40000002) setsockopt(r3, 0x84, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x4, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x8}, [@call={0x85, 0x0, 0x0, 0x22}, @call={0x85, 0x0, 0x0, 0x50}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x0, 0xe, 0x0, &(0x7f0000000340)="e02753e868a10000000000000000", 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r5, &(0x7f0000000180)="c5", 0x1, 0x40080, &(0x7f00000000c0)={0xa, 0x4e24, 0x40, @local, 0x13}, 0x1c) socket$tipc(0x1e, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x6, 0xc, &(0x7f0000000bc0)=ANY=[@ANYBLOB="180200000400000000000000000000008500000041000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) unshare(0x22020400) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x843, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) pselect6(0x40, &(0x7f0000000000)={0x7f, 0x8, 0x3, 0x7, 0x7, 0x3, 0x800, 0x6}, 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'bridge0\x00'}) 1m3.98889818s ago: executing program 2 (id=9794): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) socket$netlink(0x10, 0x3, 0x13) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) bind$inet6(r1, &(0x7f0000000200)={0xa, 0x4e20, 0x440007, @empty, 0xffff8000}, 0x1c) r2 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) bind$inet6(r2, &(0x7f0000000200)={0xa, 0x4e20, 0x1, @ipv4={'\x00', '\xff\xff', @empty}, 0x8}, 0x1c) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r3) sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="50020000", @ANYRES16=r4, @ANYBLOB="0100000000000000000001002000080001000000000004000480080002000100000010000c7d0c000b8008000a00b4ed000004000880c8000c8024000900f36aad4208000a156878badf10076800d5441e0f080009002bd49f3b0c00008008000a00697100002c000b8008000a"], 0x250}}, 0x2000c000) 1m3.972736051s ago: executing program 0 (id=9795): sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="88000000", @ANYRES16=0x0, @ANYBLOB="00002abd7000ffdbdf251c0000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000b0008000000082f5f39a263690011000200303030303a30303a31302e300000000008000b00e60200000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000b00f8090000"], 0x88}, 0x1, 0x0, 0x0, 0x4c000}, 0x4080) (async) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmmsg(r1, &(0x7f0000000180), 0x229ffa1c4ce5369, 0x0) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0x3c1, 0x3, 0x450, 0x150, 0x168, 0x9, 0x0, 0xb, 0x380, 0x250, 0x250, 0x380, 0x250, 0x3, 0x0, {[{{@ipv6={@remote, @rand_addr=' \x01\x00', [], [], 'veth0_to_bridge\x00', 'sit0\x00', {}, {}, 0x6c}, 0x6000000, 0x108, 0x150, 0x0, {0x0, 0x28e}, [@common=@inet=@ipcomp={{0x30}}, @common=@inet=@ipcomp={{0x30}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'dvmrp0\x00'}}}, {{@uncond, 0x0, 0x200, 0x230, 0x0, {}, [@common=@inet=@policy={{0x158}, {[{@ipv4=@local, [0x0, 0xff000000, 0xffffffff, 0xff000000], @ipv6=@private1, [0x0, 0x1fffffeff, 0xff000000, 0xffffff00], 0x4d6, 0x0, 0x0, 0x0, 0x10, 0x2}, {@ipv4=@remote, [0xff000000, 0xffffff00, 0xffffff00, 0xff], @ipv6=@local, [0x7f, 0xff000000, 0xffffff00, 0xff], 0x4d4, 0x34ff, 0x6c, 0x0, 0x12, 0x4}, {@ipv6=@mcast1, [0xffffffff, 0xffffffff, 0xffffffff, 0xff], @ipv6=@mcast2, [0xffffff00, 0x0, 0xffff00, 0xff000000], 0x4d2, 0x0, 0x0, 0x1, 0x0, 0xd}, {@ipv6=@ipv4={'\x00', '\xff\xff', @multicast2}, [0xffffffff, 0xffffff00], @ipv4=@rand_addr=0x64010100, [0xffffffff, 0xffffff00, 0xffffffff], 0x4d4, 0x3502, 0x32, 0x0, 0x0, 0x6}], 0xa, 0x4}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{}, {0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b0) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r2, 0x29, 0x37, &(0x7f0000000300)={0x32, 0x3, '\x00', [@jumbo={0xc2, 0x4, 0x7}, @hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x20) (async) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x22, &(0x7f0000001680)=0x1, 0x4) (async) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000380)={@in6={{0xa, 0x4e24, 0x1, @loopback, 0x9}}, 0x0, 0x0, 0x32, 0x0, "aae37be4753f0a28060a80cdd60fe31d6ba25cec257a3a485a338d600a8402d23df4854ed4cf29109f0e30e8d115e434392db157494620680fffb8cb989ab0cfc17eb88225e0fb0a062dd7a81eb098d3"}, 0xd8) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_GET(r4, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="000327bd7000fedbdf251200000024000980080002000000000008000100020000000800010016f8000008000200810000002400098008000200040000080002008000000008000200400000000800010001000000"], 0x5c}, 0x1, 0x0, 0x0, 0x2000c050}, 0x8010) sendmmsg$inet6(r3, &(0x7f0000000140)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x2, @empty, 0xfe5}, 0x1c, &(0x7f0000000680)=[{&(0x7f0000000000)="fbcb37d4b602407e380d05c2cfab553433380ae1ea5fe76b88f56925b0500c144f7ec56a5ca5c409c384299080b09076f9d21d0ac4d37d30f03626ae1a93d3ddaa87df04b3866f3101af348f1fd2afb29e52910a48ccb191e145621cbdd3ec9376a10097b652266b16bf359cac92d29d99091df7d403fa664191c43e723976fb09907728328da39a2a55c6724c26bb285eb50de1fefe3826b67d5d5cb5ae73232f8ffdfd8750b3c729734deea37286518c4229ac181e61642848e74c7afbe48cbb48ad0f2ac790e8d2e6d89e9ac35b5ef3b84b240204fc753d43e99561adc369ee13b0dec9f0a7c61a9bbbec80", 0xed}, {&(0x7f0000000540)="922c61816e8c5c3c9eac46f8fbc68746146264df7ff761a1b86a214c63dca9c315cef0a0d950a20712b2980de54c5926be2db6ec5691f62c03394193e6e31c9c40ea2590", 0x44}], 0x2}}], 0x1, 0x200880d8) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454ca, &(0x7f0000000100)=ANY=[@ANYBLOB='..']) (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r6, &(0x7f0000000100)=ANY=[], 0x32600) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0) (async) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x200000c, 0x3032, 0xffffffffffffffff, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000100)=ANY=[@ANYBLOB="180500000000000000000000000000001800000020696c2500000000002020207b0af8ff00000000bd510000000000000701000000feffffb702000008000000b703000000000000850000001900000095"], &(0x7f00000005c0)='GPL\x00', 0x4, 0xde, &(0x7f0000003e40)=""/222}, 0x94) (async) close(0x4) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/uts\x00') (async) openat$cgroup_ro(r7, &(0x7f0000000000)='blkio.throttle.io_service_bytes_recursive\x00', 0x0, 0x0) socket$nl_crypto(0x10, 0x3, 0x15) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000880)=@gettfilter={0x4c, 0x2e, 0x975f2c715d55fb71, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x10, 0x9}, {0x9, 0xd}, {0xb, 0xb}}, [{0x8, 0xb, 0x9}, {0x8, 0xb, 0x5}, {0x8, 0xb, 0x2}, {0x8, 0xb, 0x2f86}, {0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x400c012}, 0x4001) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="580000001000010400004000fedbdf2501f80000", @ANYRES32=0x0, @ANYRES32=r1], 0x58}}, 0x0) (async) r8 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r8, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 0s ago: executing program 32 (id=9795): sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="88000000", @ANYRES16=0x0, @ANYBLOB="00002abd7000ffdbdf251c0000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000b0008000000082f5f39a263690011000200303030303a30303a31302e300000000008000b00e60200000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000b00f8090000"], 0x88}, 0x1, 0x0, 0x0, 0x4c000}, 0x4080) (async) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmmsg(r1, &(0x7f0000000180), 0x229ffa1c4ce5369, 0x0) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0x3c1, 0x3, 0x450, 0x150, 0x168, 0x9, 0x0, 0xb, 0x380, 0x250, 0x250, 0x380, 0x250, 0x3, 0x0, {[{{@ipv6={@remote, @rand_addr=' \x01\x00', [], [], 'veth0_to_bridge\x00', 'sit0\x00', {}, {}, 0x6c}, 0x6000000, 0x108, 0x150, 0x0, {0x0, 0x28e}, [@common=@inet=@ipcomp={{0x30}}, @common=@inet=@ipcomp={{0x30}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'dvmrp0\x00'}}}, {{@uncond, 0x0, 0x200, 0x230, 0x0, {}, [@common=@inet=@policy={{0x158}, {[{@ipv4=@local, [0x0, 0xff000000, 0xffffffff, 0xff000000], @ipv6=@private1, [0x0, 0x1fffffeff, 0xff000000, 0xffffff00], 0x4d6, 0x0, 0x0, 0x0, 0x10, 0x2}, {@ipv4=@remote, [0xff000000, 0xffffff00, 0xffffff00, 0xff], @ipv6=@local, [0x7f, 0xff000000, 0xffffff00, 0xff], 0x4d4, 0x34ff, 0x6c, 0x0, 0x12, 0x4}, {@ipv6=@mcast1, [0xffffffff, 0xffffffff, 0xffffffff, 0xff], @ipv6=@mcast2, [0xffffff00, 0x0, 0xffff00, 0xff000000], 0x4d2, 0x0, 0x0, 0x1, 0x0, 0xd}, {@ipv6=@ipv4={'\x00', '\xff\xff', @multicast2}, [0xffffffff, 0xffffff00], @ipv4=@rand_addr=0x64010100, [0xffffffff, 0xffffff00, 0xffffffff], 0x4d4, 0x3502, 0x32, 0x0, 0x0, 0x6}], 0xa, 0x4}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{}, {0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b0) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r2, 0x29, 0x37, &(0x7f0000000300)={0x32, 0x3, '\x00', [@jumbo={0xc2, 0x4, 0x7}, @hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x20) (async) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x22, &(0x7f0000001680)=0x1, 0x4) (async) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000380)={@in6={{0xa, 0x4e24, 0x1, @loopback, 0x9}}, 0x0, 0x0, 0x32, 0x0, "aae37be4753f0a28060a80cdd60fe31d6ba25cec257a3a485a338d600a8402d23df4854ed4cf29109f0e30e8d115e434392db157494620680fffb8cb989ab0cfc17eb88225e0fb0a062dd7a81eb098d3"}, 0xd8) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_GET(r4, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="000327bd7000fedbdf251200000024000980080002000000000008000100020000000800010016f8000008000200810000002400098008000200040000080002008000000008000200400000000800010001000000"], 0x5c}, 0x1, 0x0, 0x0, 0x2000c050}, 0x8010) sendmmsg$inet6(r3, &(0x7f0000000140)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x2, @empty, 0xfe5}, 0x1c, &(0x7f0000000680)=[{&(0x7f0000000000)="fbcb37d4b602407e380d05c2cfab553433380ae1ea5fe76b88f56925b0500c144f7ec56a5ca5c409c384299080b09076f9d21d0ac4d37d30f03626ae1a93d3ddaa87df04b3866f3101af348f1fd2afb29e52910a48ccb191e145621cbdd3ec9376a10097b652266b16bf359cac92d29d99091df7d403fa664191c43e723976fb09907728328da39a2a55c6724c26bb285eb50de1fefe3826b67d5d5cb5ae73232f8ffdfd8750b3c729734deea37286518c4229ac181e61642848e74c7afbe48cbb48ad0f2ac790e8d2e6d89e9ac35b5ef3b84b240204fc753d43e99561adc369ee13b0dec9f0a7c61a9bbbec80", 0xed}, {&(0x7f0000000540)="922c61816e8c5c3c9eac46f8fbc68746146264df7ff761a1b86a214c63dca9c315cef0a0d950a20712b2980de54c5926be2db6ec5691f62c03394193e6e31c9c40ea2590", 0x44}], 0x2}}], 0x1, 0x200880d8) ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454ca, &(0x7f0000000100)=ANY=[@ANYBLOB='..']) (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r6, &(0x7f0000000100)=ANY=[], 0x32600) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0) (async) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x200000c, 0x3032, 0xffffffffffffffff, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000100)=ANY=[@ANYBLOB="180500000000000000000000000000001800000020696c2500000000002020207b0af8ff00000000bd510000000000000701000000feffffb702000008000000b703000000000000850000001900000095"], &(0x7f00000005c0)='GPL\x00', 0x4, 0xde, &(0x7f0000003e40)=""/222}, 0x94) (async) close(0x4) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/uts\x00') (async) openat$cgroup_ro(r7, &(0x7f0000000000)='blkio.throttle.io_service_bytes_recursive\x00', 0x0, 0x0) socket$nl_crypto(0x10, 0x3, 0x15) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000880)=@gettfilter={0x4c, 0x2e, 0x975f2c715d55fb71, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x10, 0x9}, {0x9, 0xd}, {0xb, 0xb}}, [{0x8, 0xb, 0x9}, {0x8, 0xb, 0x5}, {0x8, 0xb, 0x2}, {0x8, 0xb, 0x2f86}, {0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x400c012}, 0x4001) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="580000001000010400004000fedbdf2501f80000", @ANYRES32=0x0, @ANYRES32=r1], 0x58}}, 0x0) (async) r8 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r8, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) kernel console output (not intermixed with test programs): tributes in process `syz.1.8788'. [ 1146.543812][ T947] netlink: 'syz.4.8787': attribute type 1 has an invalid length. [ 1146.674291][ T947] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1146.704337][ T947] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8787'. [ 1146.716109][ T965] netlink: 14 bytes leftover after parsing attributes in process `syz.3.8793'. [ 1146.729971][T12751] bond0: (slave bridge2): failed to get link speed/duplex [ 1146.753661][ T947] bond6 (unregistering): Released all slaves [ 1146.878339][T18224] bond0: (slave bridge2): failed to get link speed/duplex [ 1146.987287][T18224] bond0: (slave bridge2): failed to get link speed/duplex [ 1147.457241][T18076] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 1147.457392][T27239] Bluetooth: hci2: command 0x0406 tx timeout [ 1149.342022][ T932] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1150.003309][T27239] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1150.024285][T27239] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1150.038938][T27239] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1150.056704][T27239] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1150.065335][T27239] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1150.298578][T18230] net_ratelimit: 29 callbacks suppressed [ 1150.298602][T18230] bond0: (slave bridge2): failed to get link speed/duplex [ 1151.586632][T18250] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1151.717227][T12751] bond0: (slave bridge2): failed to get link speed/duplex [ 1151.792301][ T1105] x_tables: duplicate underflow at hook 1 [ 1151.867662][ T149] bond0: (slave bridge2): failed to get link speed/duplex [ 1152.001435][T18250] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1152.014950][ T1116] __nla_validate_parse: 4 callbacks suppressed [ 1152.014977][ T1116] netlink: 96 bytes leftover after parsing attributes in process `syz.3.8833'. [ 1152.190498][ T1124] netlink: 224 bytes leftover after parsing attributes in process `syz.3.8837'. [ 1152.191775][T27239] Bluetooth: hci1: command tx timeout [ 1152.210248][ T1124] netlink: 2 bytes leftover after parsing attributes in process `syz.3.8837'. [ 1152.284513][ T1128] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8838'. [ 1152.466406][T18250] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1152.709750][T18250] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1152.754354][ T1150] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8844'. [ 1152.778285][ T1139] syzkaller0: entered promiscuous mode [ 1152.784234][ T1139] syzkaller0: entered allmulticast mode [ 1152.811718][ T1133] tipc: Enabled bearer , priority 10 [ 1152.870638][ T1132] tipc: Resetting bearer [ 1152.959413][ T1132] tipc: Disabling bearer [ 1153.160500][ T1160] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8848'. [ 1153.535899][ T1176] FAULT_INJECTION: forcing a failure. [ 1153.535899][ T1176] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1153.570357][ T1176] CPU: 0 UID: 0 PID: 1176 Comm: syz.0.8853 Not tainted syzkaller #0 PREEMPT(full) [ 1153.570386][ T1176] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1153.570397][ T1176] Call Trace: [ 1153.570405][ T1176] [ 1153.570413][ T1176] dump_stack_lvl+0xe8/0x150 [ 1153.570441][ T1176] should_fail_ex+0x412/0x560 [ 1153.570469][ T1176] _copy_from_user+0x2d/0xb0 [ 1153.570494][ T1176] ___sys_sendmsg+0x1c6/0x360 [ 1153.570513][ T1176] ? __lock_acquire+0x6b5/0x2cf0 [ 1153.570535][ T1176] ? __pfx____sys_sendmsg+0x10/0x10 [ 1153.570549][ T1176] ? __lock_acquire+0x6b5/0x2cf0 [ 1153.570571][ T1176] ? kstrtouint+0x6e/0xe0 [ 1153.570627][ T1176] __sys_sendmmsg+0x27c/0x4e0 [ 1153.570650][ T1176] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1153.570664][ T1176] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 1153.570729][ T1176] ? ksys_write+0x242/0x270 [ 1153.570755][ T1176] ? __pfx_ksys_write+0x10/0x10 [ 1153.570790][ T1176] __x64_sys_sendmmsg+0xa0/0xc0 [ 1153.570807][ T1176] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1153.570824][ T1176] do_syscall_64+0x15f/0xf80 [ 1153.570848][ T1176] ? clear_bhb_loop+0x40/0x90 [ 1153.570868][ T1176] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1153.570884][ T1176] RIP: 0033:0x7f961539ce59 [ 1153.570902][ T1176] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1153.570916][ T1176] RSP: 002b:00007f96162dc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1153.570935][ T1176] RAX: ffffffffffffffda RBX: 00007f9615615fa0 RCX: 00007f961539ce59 [ 1153.570946][ T1176] RDX: 0000000004000190 RSI: 0000200000000180 RDI: 0000000000000003 [ 1153.570957][ T1176] RBP: 00007f96162dc090 R08: 0000000000000000 R09: 0000000000000000 [ 1153.570967][ T1176] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1153.570977][ T1176] R13: 00007f9615616038 R14: 00007f9615615fa0 R15: 00007ffeb1e3efb8 [ 1153.571004][ T1176] [ 1153.815898][T18224] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1153.825225][T18224] bond0: (slave bridge2): failed to get link speed/duplex [ 1153.958815][T18230] bond0: (slave bridge2): failed to get link speed/duplex [ 1153.967352][T18251] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1153.984958][T18251] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1154.067051][T18251] netdevsim netdevsim1 eth4: set [0, 0] type 1 family 0 port 8472 - 0 [ 1154.268088][T27239] Bluetooth: hci1: command tx timeout [ 1154.834460][T18250] bond10 (unregistering): (slave ipip0): Releasing backup interface [ 1154.849771][T18250] ipip0 (unregistering): left promiscuous mode [ 1154.865511][T18250] bond11 (unregistering): (slave geneve2): Releasing active interface [ 1155.045988][T18250] bond0 (unregistering): Released all slaves [ 1155.065592][T18250] bond1 (unregistering): Released all slaves [ 1155.084291][T18250] bond2 (unregistering): Released all slaves [ 1155.105493][T18250] bond3 (unregistering): Released all slaves [ 1155.123311][T18250] bond4 (unregistering): Released all slaves [ 1155.145591][T18250] bond5 (unregistering): Released all slaves [ 1155.160677][T18250] bond6 (unregistering): Released all slaves [ 1155.175594][T18250] bond7 (unregistering): Released all slaves [ 1155.191739][T18250] bond8 (unregistering): Released all slaves [ 1155.213503][T18250] bond9 (unregistering): Released all slaves [ 1155.230090][T18250] bond10 (unregistering): Released all slaves [ 1155.248235][T18250] bond11 (unregistering): Released all slaves [ 1155.279630][T18251] bond0: (slave bridge2): failed to get link speed/duplex [ 1155.336438][ T1204] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1155.417410][T18256] bond0: (slave bridge2): failed to get link speed/duplex [ 1155.941258][T18250] tipc: Left network mode [ 1156.302033][ T1262] netlink: 'syz.0.8870': attribute type 1 has an invalid length. [ 1156.343577][T18076] Bluetooth: hci1: command tx timeout [ 1156.386356][ T1262] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1156.395959][ T1021] bridge0: port 1(bridge_slave_0) entered blocking state [ 1156.404004][ T1021] bridge0: port 1(bridge_slave_0) entered disabled state [ 1156.447461][ T1021] bridge_slave_0: entered allmulticast mode [ 1156.462938][ T1021] bridge_slave_0: entered promiscuous mode [ 1156.491083][ T1021] bridge0: port 2(bridge_slave_1) entered blocking state [ 1156.517410][ T1021] bridge0: port 2(bridge_slave_1) entered disabled state [ 1156.535884][ T1021] bridge_slave_1: entered allmulticast mode [ 1156.550766][ T1021] bridge_slave_1: entered promiscuous mode [ 1156.591287][ T1262] bond5: (slave syz_tun): Enslaving as a backup interface with an up link [ 1156.833365][ T1021] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1156.873827][ T1021] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1157.053393][ T1021] team0: Port device team_slave_0 added [ 1157.072475][ T1288] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8877'. [ 1157.091622][ T1021] team0: Port device team_slave_1 added [ 1157.106829][ T1288] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8877'. [ 1157.139179][ T1290] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8878'. [ 1157.228657][ T1292] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8879'. [ 1157.246020][ T1292] netlink: 40 bytes leftover after parsing attributes in process `syz.3.8879'. [ 1157.278847][ T5290] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1157.344074][ T1021] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1157.377907][ T1021] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1157.437115][ T1021] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1157.475254][ T1021] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1157.492842][ T1021] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1157.554854][ T1308] netlink: 332 bytes leftover after parsing attributes in process `syz.4.8882'. [ 1157.585592][ T1021] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1157.597910][ T1308] netlink: 'syz.4.8882': attribute type 9 has an invalid length. [ 1157.608954][ T1308] netlink: 108 bytes leftover after parsing attributes in process `syz.4.8882'. [ 1157.634682][ T1308] netlink: 32 bytes leftover after parsing attributes in process `syz.4.8882'. [ 1157.924650][ T1325] FAULT_INJECTION: forcing a failure. [ 1157.924650][ T1325] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1157.955793][ T1330] x_tables: ip6_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 1157.961788][ T1325] CPU: 1 UID: 0 PID: 1325 Comm: syz.0.8888 Not tainted syzkaller #0 PREEMPT(full) [ 1157.961815][ T1325] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1157.961826][ T1325] Call Trace: [ 1157.961834][ T1325] [ 1157.961841][ T1325] dump_stack_lvl+0xe8/0x150 [ 1157.961869][ T1325] should_fail_ex+0x412/0x560 [ 1157.961896][ T1325] _copy_from_user+0x2d/0xb0 [ 1157.961921][ T1325] ___sys_sendmsg+0x1c6/0x360 [ 1157.961939][ T1325] ? __lock_acquire+0x6b5/0x2cf0 [ 1157.961961][ T1325] ? __pfx____sys_sendmsg+0x10/0x10 [ 1157.961975][ T1325] ? __lock_acquire+0x6b5/0x2cf0 [ 1157.961996][ T1325] ? kstrtouint+0x6e/0xe0 [ 1157.962053][ T1325] __sys_sendmmsg+0x27c/0x4e0 [ 1157.962074][ T1325] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1157.962088][ T1325] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 1157.962134][ T1325] ? ksys_write+0x242/0x270 [ 1157.962158][ T1325] ? __pfx_ksys_write+0x10/0x10 [ 1157.962186][ T1325] __x64_sys_sendmmsg+0xa0/0xc0 [ 1157.962201][ T1325] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1157.962218][ T1325] do_syscall_64+0x15f/0xf80 [ 1157.962239][ T1325] ? trace_irq_disable+0x3b/0x140 [ 1157.962261][ T1325] ? clear_bhb_loop+0x40/0x90 [ 1157.962280][ T1325] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1157.962296][ T1325] RIP: 0033:0x7f961539ce59 [ 1157.962312][ T1325] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1157.962325][ T1325] RSP: 002b:00007f96162dc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1157.962344][ T1325] RAX: ffffffffffffffda RBX: 00007f9615615fa0 RCX: 00007f961539ce59 [ 1157.962355][ T1325] RDX: 0000000004000190 RSI: 0000200000000180 RDI: 0000000000000003 [ 1157.962366][ T1325] RBP: 00007f96162dc090 R08: 0000000000000000 R09: 0000000000000000 [ 1157.962376][ T1325] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1157.962385][ T1325] R13: 00007f9615616038 R14: 00007f9615615fa0 R15: 00007ffeb1e3efb8 [ 1157.962411][ T1325] [ 1158.122336][ T1316] syzkaller0: entered promiscuous mode [ 1158.197281][ T1316] syzkaller0: entered allmulticast mode [ 1158.404932][ T1348] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8890'. [ 1158.405151][ T1021] hsr_slave_0: entered promiscuous mode [ 1158.426423][T18076] Bluetooth: hci1: command 0x0419 tx timeout [ 1158.443049][ T1021] hsr_slave_1: entered promiscuous mode [ 1158.470729][ T1338] netlink: 5000 bytes leftover after parsing attributes in process `syz.0.8890'. [ 1158.480440][ T1338] openvswitch: netlink: Flow key attr not present in new flow. [ 1158.719199][T18224] bond0: (slave bridge2): failed to get link speed/duplex [ 1158.901234][T18250] veth1_macvtap: left promiscuous mode [ 1158.942907][T18250] veth0_macvtap: left promiscuous mode [ 1159.032711][T18250] veth1_vlan: left promiscuous mode [ 1159.039334][T18250] veth0_vlan: left promiscuous mode [ 1159.902147][ T5290] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1160.105180][ T1396] netlink: 'syz.2.8902': attribute type 3 has an invalid length. [ 1160.282184][ T1405] set match dimension is over the limit! [ 1160.418297][T18257] bond0: (slave bridge2): failed to get link speed/duplex [ 1160.479525][ T1415] netlink: 'syz.4.8907': attribute type 9 has an invalid length. [ 1160.505685][T27239] Bluetooth: hci1: command 0x0419 tx timeout [ 1160.588348][T18250] IPVS: stop unused estimator thread 0... [ 1160.588966][T18251] bond0: (slave bridge2): failed to get link speed/duplex [ 1160.830815][ T1021] netdevsim netdevsim1 eth4 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1160.978275][T18256] bond0: (slave bridge2): failed to get link speed/duplex [ 1161.010120][ T5290] 8021q: adding VLAN 0 to HW filter on device eth3 [ 1161.297590][T18224] bond0: (slave bridge2): failed to get link speed/duplex [ 1161.444543][ T1021] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1161.701040][ T1021] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1162.082756][ T1021] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1162.177367][T18257] bond0: (slave bridge2): failed to get link speed/duplex [ 1162.307365][T18250] bond0: (slave bridge2): failed to get link speed/duplex [ 1162.325138][ T1483] __nla_validate_parse: 8 callbacks suppressed [ 1162.325158][ T1483] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8922'. [ 1162.411928][ T1483] netlink: 52 bytes leftover after parsing attributes in process `syz.2.8922'. [ 1162.439931][ T1483] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8922'. [ 1162.508087][T18256] bond0: (slave bridge2): failed to get link speed/duplex [ 1162.607948][ T1492] set match dimension is over the limit! [ 1162.742236][ T1498] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8926'. [ 1162.858605][T18256] bond0: (slave bridge2): failed to get link speed/duplex [ 1163.145513][ T1512] netlink: 120 bytes leftover after parsing attributes in process `syz.2.8928'. [ 1163.205413][ T1021] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1163.219922][ T1511] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8927'. [ 1163.246413][ T1511] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8927'. [ 1163.256548][ T1021] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1163.257386][T18250] bond0: (slave bridge2): failed to get link speed/duplex [ 1163.285806][ T1021] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1163.312977][ T1021] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1163.471973][ T1021] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1163.530428][ T1021] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1163.578176][ T1021] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1163.634410][ T1021] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1163.844555][ T1543] netlink: 292 bytes leftover after parsing attributes in process `syz.4.8933'. [ 1164.033860][ T1550] netlink: 40 bytes leftover after parsing attributes in process `syz.0.8934'. [ 1164.376634][ T1563] bridge_slave_0: left allmulticast mode [ 1164.387381][ T1563] bridge_slave_0: left promiscuous mode [ 1164.393677][ T1563] bridge0: port 1(bridge_slave_0) entered disabled state [ 1164.407302][ T1563] bridge_slave_1: left allmulticast mode [ 1164.414123][ T1563] bridge_slave_1: left promiscuous mode [ 1164.442868][ T1563] bridge0: port 2(bridge_slave_1) entered disabled state [ 1164.490876][ T1563] team0: Port device team_slave_0 removed [ 1164.501184][ T1563] team0: Port device team_slave_1 removed [ 1164.509977][ T1563] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1164.795529][ T1021] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1165.085221][ T1021] 8021q: adding VLAN 0 to HW filter on device team0 [ 1165.102604][T12751] bridge0: port 1(bridge_slave_0) entered blocking state [ 1165.110292][T12751] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1165.220356][T18250] bridge0: port 2(bridge_slave_1) entered blocking state [ 1165.227821][T18250] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1165.358329][ T1599] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8943'. [ 1165.727225][T18224] net_ratelimit: 3 callbacks suppressed [ 1165.727248][T18224] bond0: (slave bridge2): failed to get link speed/duplex [ 1165.887955][T12751] bond0: (slave bridge2): failed to get link speed/duplex [ 1165.951813][ T1629] netlink: 'syz.3.8950': attribute type 39 has an invalid length. [ 1166.059198][T12751] bond0: (slave bridge2): failed to get link speed/duplex [ 1166.073225][ T1639] netlink: 'syz.4.8953': attribute type 1 has an invalid length. [ 1166.122601][ T1643] set match dimension is over the limit! [ 1166.190720][T12751] bond0: (slave bridge2): failed to get link speed/duplex [ 1166.208921][ T1640] macvlan0: entered promiscuous mode [ 1166.214882][ T1640] macvlan0: entered allmulticast mode [ 1166.222815][ T1640] bond6: entered promiscuous mode [ 1166.229933][ T1640] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 1166.259543][ T1640] bond6: left promiscuous mode [ 1166.335865][ T149] bond0: (slave bridge2): failed to get link speed/duplex [ 1166.375011][ T1655] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1166.457388][T12751] bond0: (slave bridge2): failed to get link speed/duplex [ 1166.580511][T18224] bond0: (slave bridge2): failed to get link speed/duplex [ 1166.718577][ T149] bond0: (slave bridge2): failed to get link speed/duplex [ 1166.827059][T18257] bond0: (slave bridge2): failed to get link speed/duplex [ 1166.899325][ T1021] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1167.004491][ T1021] veth0_vlan: entered promiscuous mode [ 1167.055056][ T1021] veth1_vlan: entered promiscuous mode [ 1167.184612][ T1021] veth0_macvtap: entered promiscuous mode [ 1167.216262][ T1021] veth1_macvtap: entered promiscuous mode [ 1167.284082][ T1021] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1167.329359][ T1698] __nla_validate_parse: 8 callbacks suppressed [ 1167.329385][ T1698] netlink: 14 bytes leftover after parsing attributes in process `syz.4.8972'. [ 1167.353568][ T1021] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1167.381068][ T1701] netlink: 'syz.2.8973': attribute type 3 has an invalid length. [ 1167.540339][ T1704] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8974'. [ 1167.668330][ T1706] netlink: 5000 bytes leftover after parsing attributes in process `syz.2.8974'. [ 1167.795392][ T1709] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8975'. [ 1167.971359][ T1709] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 1167.984793][ T149] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1168.027333][ T149] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1168.045591][ T149] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1168.081658][ T1717] set match dimension is over the limit! [ 1168.083611][ T149] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1168.213341][ T1721] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8979'. [ 1168.306768][ T1721] netlink: 'syz.3.8979': attribute type 3 has an invalid length. [ 1168.349512][ T1721] netlink: 224 bytes leftover after parsing attributes in process `syz.3.8979'. [ 1168.351373][T12751] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1168.392522][ T1721] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8979'. [ 1168.408173][T12751] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1168.450210][ T1721] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8979'. [ 1168.462716][T18250] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1168.488010][T18250] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1168.539014][ T1732] netlink: 'syz.4.8982': attribute type 10 has an invalid length. [ 1168.593194][ T1733] netlink: 'syz.4.8982': attribute type 10 has an invalid length. [ 1168.654463][ T1732] team0: Port device dummy0 added [ 1168.680330][ T1732] dummy0: entered promiscuous mode [ 1168.718581][ T1733] team0: Port device dummy0 removed [ 1168.798663][ T1743] syzkaller1: entered promiscuous mode [ 1168.816307][ T1743] syzkaller1: entered allmulticast mode [ 1168.884630][ T1747] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8989'. [ 1168.886538][ T1745] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8988'. [ 1169.108477][ T1761] x_tables: ip6_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 1169.540949][ T1778] bond7: entered promiscuous mode [ 1169.546837][ T1778] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1169.603986][ T1780] bridge3: entered promiscuous mode [ 1169.653016][ T1780] bond7: (slave bridge3): Enslaving as an active interface with an up link [ 1169.678819][ T1782] veth1_to_batadv: entered promiscuous mode [ 1169.694255][ T1782] veth1_to_batadv: left promiscuous mode [ 1169.762739][ T1794] set match dimension is over the limit! [ 1170.516521][ T1837] tipc: Enabled bearer , priority 0 [ 1170.811390][ T149] net_ratelimit: 15 callbacks suppressed [ 1170.811415][ T149] bond0: (slave bridge2): failed to get link speed/duplex [ 1170.938687][ T149] bond0: (slave bridge2): failed to get link speed/duplex [ 1170.975047][ T1870] FAULT_INJECTION: forcing a failure. [ 1170.975047][ T1870] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1170.997201][ T1870] CPU: 0 UID: 0 PID: 1870 Comm: syz.3.9034 Not tainted syzkaller #0 PREEMPT(full) [ 1170.997228][ T1870] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1170.997238][ T1870] Call Trace: [ 1170.997246][ T1870] [ 1170.997254][ T1870] dump_stack_lvl+0xe8/0x150 [ 1170.997283][ T1870] should_fail_ex+0x412/0x560 [ 1170.997315][ T1870] _copy_from_user+0x2d/0xb0 [ 1170.997338][ T1870] ___sys_sendmsg+0x1c6/0x360 [ 1170.997357][ T1870] ? __lock_acquire+0x6b5/0x2cf0 [ 1170.997380][ T1870] ? __pfx____sys_sendmsg+0x10/0x10 [ 1170.997394][ T1870] ? __lock_acquire+0x6b5/0x2cf0 [ 1170.997413][ T1870] ? kstrtouint+0x6e/0xe0 [ 1170.997467][ T1870] __sys_sendmmsg+0x27c/0x4e0 [ 1170.997488][ T1870] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1170.997500][ T1870] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 1170.997540][ T1870] ? ksys_write+0x242/0x270 [ 1170.997563][ T1870] ? __pfx_ksys_write+0x10/0x10 [ 1170.997585][ T1870] __x64_sys_sendmmsg+0xa0/0xc0 [ 1170.997599][ T1870] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1170.997614][ T1870] do_syscall_64+0x15f/0xf80 [ 1170.997635][ T1870] ? clear_bhb_loop+0x40/0x90 [ 1170.997652][ T1870] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1170.997665][ T1870] RIP: 0033:0x7f522419ce59 [ 1170.997680][ T1870] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1170.997693][ T1870] RSP: 002b:00007f522510a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1170.997710][ T1870] RAX: ffffffffffffffda RBX: 00007f5224415fa0 RCX: 00007f522419ce59 [ 1170.997720][ T1870] RDX: 0000000004000190 RSI: 0000200000000180 RDI: 0000000000000003 [ 1170.997729][ T1870] RBP: 00007f522510a090 R08: 0000000000000000 R09: 0000000000000000 [ 1170.997738][ T1870] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1170.997745][ T1870] R13: 00007f5224416038 R14: 00007f5224415fa0 R15: 00007ffcc04f43b8 [ 1170.997770][ T1870] [ 1171.231015][T18257] bond0: (slave bridge2): failed to get link speed/duplex [ 1171.358498][T18250] bond0: (slave bridge2): failed to get link speed/duplex [ 1171.547432][T18250] bond0: (slave bridge2): failed to get link speed/duplex [ 1171.627041][T15742] tipc: Node number set to 4162607794 [ 1171.857617][ T149] bond0: (slave bridge2): failed to get link speed/duplex [ 1171.977072][ T149] bond0: (slave bridge2): failed to get link speed/duplex [ 1172.099606][ T149] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1172.114091][ T1922] netlink: 'syz.0.9056': attribute type 9 has an invalid length. [ 1172.132338][ T149] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1172.166534][ T1923] netlink: 'syz.0.9056': attribute type 9 has an invalid length. [ 1172.179903][ T149] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1172.209027][ T149] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1172.220674][ T1922] netlink: 'syz.0.9056': attribute type 9 has an invalid length. [ 1172.245568][ T149] bond0: (slave bridge2): failed to get link speed/duplex [ 1172.262541][T18076] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1172.284880][T18076] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1172.307548][T18076] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1172.319546][ T1931] x_tables: ip6_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 1172.332689][T18076] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1172.348928][T18076] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1172.370000][T18248] bond0: (slave bridge2): failed to get link speed/duplex [ 1172.472825][ T1935] __nla_validate_parse: 26 callbacks suppressed [ 1172.472847][ T1935] netlink: 20 bytes leftover after parsing attributes in process `syz.4.9061'. [ 1172.498682][T18257] bond0: (slave bridge2): failed to get link speed/duplex [ 1172.532180][ T1938] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9063'. [ 1172.931959][ T1953] netlink: 'syz.3.9065': attribute type 1 has an invalid length. [ 1172.990310][ T1953] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1173.028514][ T1955] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9066'. [ 1173.043239][ T1953] vlan3: entered allmulticast mode [ 1173.076796][ T1953] veth0_to_bond: entered allmulticast mode [ 1173.103067][ T1953] bond5: (slave vlan3): Opening slave failed [ 1173.302607][ T1972] netlink: 14 bytes leftover after parsing attributes in process `syz.3.9071'. [ 1173.815591][ T1926] bridge0: port 1(bridge_slave_0) entered blocking state [ 1173.823223][ T1926] bridge0: port 1(bridge_slave_0) entered disabled state [ 1173.831741][ T1926] bridge_slave_0: entered allmulticast mode [ 1173.839723][ T1926] bridge_slave_0: entered promiscuous mode [ 1173.848597][ T1926] bridge0: port 2(bridge_slave_1) entered blocking state [ 1173.856221][ T1926] bridge0: port 2(bridge_slave_1) entered disabled state [ 1173.864783][ T1926] bridge_slave_1: entered allmulticast mode [ 1173.872885][ T1926] bridge_slave_1: entered promiscuous mode [ 1173.904167][ T1926] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1173.916024][ T1926] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1173.951640][ T1926] team0: Port device team_slave_0 added [ 1173.959856][ T1926] team0: Port device team_slave_1 added [ 1173.986720][ T1926] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1173.994066][ T1926] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1174.021615][ T1926] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1174.034423][ T1926] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1174.042035][ T1926] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1174.069668][ T1926] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1174.115722][ T1926] hsr_slave_0: entered promiscuous mode [ 1174.122638][ T1926] hsr_slave_1: entered promiscuous mode [ 1174.129518][ T1926] debugfs: 'hsr0' already exists in 'hsr' [ 1174.135768][ T1926] Cannot create hsr debugfs directory [ 1174.270343][ T1978] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1174.434117][T27239] Bluetooth: hci0: command tx timeout [ 1174.514033][ T2010] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9082'. [ 1174.642199][ T2018] x_tables: ip6_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 1174.896782][ T2028] netlink: 14 bytes leftover after parsing attributes in process `syz.1.9089'. [ 1174.920474][ T2032] netlink: 'syz.4.9088': attribute type 1 has an invalid length. [ 1174.998829][ T2024] dummy0: left promiscuous mode [ 1175.051334][ T2035] netlink: 332 bytes leftover after parsing attributes in process `syz.3.9091'. [ 1175.062463][ T2035] netlink: 'syz.3.9091': attribute type 9 has an invalid length. [ 1175.071535][ T2035] netlink: 108 bytes leftover after parsing attributes in process `syz.3.9091'. [ 1175.081983][ T2035] netlink: 32 bytes leftover after parsing attributes in process `syz.3.9091'. [ 1175.139247][ T2024] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 1175.147272][ T2024] netdevsim netdevsim0 netdevsim0: left allmulticast mode [ 1175.191875][ T2024] bond1: left promiscuous mode [ 1175.203748][ T2024] bridge1: left promiscuous mode [ 1175.210346][ T2024] bond1: left allmulticast mode [ 1175.215879][ T2024] bridge1: left allmulticast mode [ 1175.225136][ T2024] ip6gre1: left promiscuous mode [ 1175.234330][ T2024] ip6gre1: left allmulticast mode [ 1175.253428][ T2024] vlan3: left allmulticast mode [ 1175.259303][ T2024] bond0: left allmulticast mode [ 1175.265192][ T2041] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9092'. [ 1175.277799][T15747] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1175.288048][ T2024] ip6gre2: left promiscuous mode [ 1175.293922][ T2024] ip6gre2: left allmulticast mode [ 1175.304173][ T2024] ip6gre3: left promiscuous mode [ 1175.309975][ T2024] ip6gre3: left allmulticast mode [ 1175.327451][T15747] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1175.336556][ T2024] batadv0: entered promiscuous mode [ 1175.346217][T15747] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 1175.360625][ T2024] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 1175.369167][ T2024] geneve3: left promiscuous mode [ 1175.374320][ T2024] geneve3: left allmulticast mode [ 1175.383741][ T2024] ip6gre4: left promiscuous mode [ 1175.390167][ T2024] ip6gre4: left allmulticast mode [ 1175.398851][ T2024] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1175.417386][ T46] ip6_tunnel: ip6gre4 xmit: Local address not yet configured! [ 1175.488944][ T46] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1175.837363][T18248] net_ratelimit: 7 callbacks suppressed [ 1175.837385][T18248] bond0: (slave bridge2): failed to get link speed/duplex [ 1176.058256][T18224] bond0: (slave bridge2): failed to get link speed/duplex [ 1176.091865][ T149] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 1176.111023][ T5786] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1176.131016][ T10] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 1176.140990][ T149] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 1176.250173][T12751] ip6_tunnel: syztnl0 xmit: Local address not yet configured! [ 1176.377240][T18248] bond0: (slave bridge2): failed to get link speed/duplex [ 1176.499000][T27239] Bluetooth: hci0: command tx timeout [ 1176.599399][T18250] bond0: (slave bridge2): failed to get link speed/duplex [ 1176.703120][T18248] nci: nci_extract_activation_params_nfc_dep: unsupported activation_rf_tech_and_mode 0x6 [ 1176.744334][ T149] bond0: (slave bridge2): failed to get link speed/duplex [ 1176.840433][ T1926] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1176.875380][ T1926] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1176.887315][ T2096] RDS: rds_bind could not find a transport for 2001::, load rds_tcp or rds_rdma? [ 1176.938674][ T1926] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1176.965990][ T1926] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1177.015555][ T1926] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1177.031345][ T1926] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1177.062729][ T1926] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1177.080336][ T1926] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1177.166389][ T2106] syzkaller0: entered promiscuous mode [ 1177.174024][ T2106] syzkaller0: entered allmulticast mode [ 1177.303794][ T2124] bond0: entered allmulticast mode [ 1177.309814][ T2124] bond_slave_0: entered allmulticast mode [ 1177.316566][ T2124] bond_slave_1: entered allmulticast mode [ 1177.593180][ T2135] __nla_validate_parse: 5 callbacks suppressed [ 1177.593204][ T2135] netlink: 14 bytes leftover after parsing attributes in process `syz.3.9118'. [ 1177.645923][ T1926] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1177.669977][ T2131] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9116'. [ 1177.702861][ T2131] netlink: 20 bytes leftover after parsing attributes in process `syz.1.9116'. [ 1177.710164][ T1926] 8021q: adding VLAN 0 to HW filter on device team0 [ 1177.788492][T18224] bridge0: port 1(bridge_slave_0) entered blocking state [ 1177.796417][T18224] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1177.875219][ T2139] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9119'. [ 1177.876113][T18224] bridge0: port 2(bridge_slave_1) entered blocking state [ 1177.892158][T18224] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1177.917322][ T149] bond0: (slave bridge2): failed to get link speed/duplex [ 1178.048110][ T149] bond0: (slave bridge2): failed to get link speed/duplex [ 1178.170219][T18224] bond0: (slave bridge2): failed to get link speed/duplex [ 1178.307284][T18248] bond0: (slave bridge2): failed to get link speed/duplex [ 1178.345012][ T2154] netlink: 'syz.1.9125': attribute type 3 has an invalid length. [ 1178.439088][T18248] bond0: (slave bridge2): failed to get link speed/duplex [ 1178.492325][ T2161] Cannot find add_set index 1 as target [ 1178.504651][ T2160] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9124'. [ 1178.577620][T27239] Bluetooth: hci0: command tx timeout [ 1178.778209][ T2180] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9131'. [ 1178.790406][ T2180] netlink: 20 bytes leftover after parsing attributes in process `syz.3.9131'. [ 1179.114518][ T1926] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1179.292324][ T1926] veth0_vlan: entered promiscuous mode [ 1179.335067][ T1926] veth1_vlan: entered promiscuous mode [ 1179.440724][ T1926] veth0_macvtap: entered promiscuous mode [ 1179.473503][ T1926] veth1_macvtap: entered promiscuous mode [ 1179.532800][ T1926] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1179.551984][ T1926] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1179.594944][T18256] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1179.627898][T18256] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1179.651144][T18256] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1179.694356][T18256] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1179.938911][ T2217] netlink: 'syz.3.9139': attribute type 1 has an invalid length. [ 1179.945316][ T2215] ip6tnl1: entered allmulticast mode [ 1179.977311][ T2221] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9140'. [ 1180.032551][ T2215] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 1180.066773][ T2215] gretap1: entered allmulticast mode [ 1180.079448][ T2223] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9142'. [ 1180.116048][ T2223] netlink: 'syz.0.9142': attribute type 1 has an invalid length. [ 1180.127400][ T2223] netlink: 'syz.0.9142': attribute type 2 has an invalid length. [ 1180.147782][T18224] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1180.168076][T18224] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1180.259821][ T2226] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9143'. [ 1180.289873][T18230] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1180.305005][T18230] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1180.337169][ C0] ip6_tnl_xmit_ctl: 11 callbacks suppressed [ 1180.337189][ C0] ip6_tunnel: syztnl0 xmit: Local address not yet configured! [ 1180.652186][ T2257] Bluetooth: MGMT ver 1.23 [ 1180.674452][T27239] Bluetooth: hci0: command tx timeout [ 1180.949546][T18256] net_ratelimit: 16 callbacks suppressed [ 1180.949570][T18256] bond0: (slave bridge2): failed to get link speed/duplex [ 1181.108124][T18256] bond0: (slave bridge2): failed to get link speed/duplex [ 1181.352129][T18224] bond0: (slave bridge2): failed to get link speed/duplex [ 1181.498358][T18248] bond0: (slave bridge2): failed to get link speed/duplex [ 1181.618973][T18256] bond0: (slave bridge2): failed to get link speed/duplex [ 1181.713113][ T2281] Cannot find set identified by id 0 to match [ 1181.759789][T18256] bond0: (slave bridge2): failed to get link speed/duplex [ 1181.929000][ T2311] syzkaller1: entered promiscuous mode [ 1181.953140][ T2311] syzkaller1: entered allmulticast mode [ 1181.987235][T18230] bond0: (slave bridge2): failed to get link speed/duplex [ 1182.157189][T18257] bond0: (slave bridge2): failed to get link speed/duplex [ 1182.632520][ T2358] __nla_validate_parse: 12 callbacks suppressed [ 1182.632542][ T2358] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9177'. [ 1182.705782][ T2358] netlink: 20 bytes leftover after parsing attributes in process `syz.1.9177'. [ 1182.739368][T18224] bond0: (slave bridge2): failed to get link speed/duplex [ 1182.892224][ T2371] netlink: 14 bytes leftover after parsing attributes in process `syz.2.9180'. [ 1183.117116][T18256] bond0: (slave bridge2): failed to get link speed/duplex [ 1183.324289][ T2390] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9183'. [ 1183.404758][ T2396] netlink: 5000 bytes leftover after parsing attributes in process `syz.2.9183'. [ 1183.919800][ T2426] netlink: 120 bytes leftover after parsing attributes in process `syz.1.9194'. [ 1183.980014][ T2433] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9196'. [ 1183.999355][ T2433] netlink: 20 bytes leftover after parsing attributes in process `syz.0.9196'. [ 1184.257705][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1184.510652][ T2455] bond1: option all_slaves_active: invalid value (127) [ 1184.539315][ T2455] bond1 (unregistering): Released all slaves [ 1184.898739][ T2481] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9212'. [ 1185.042888][ T2486] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9209'. [ 1185.584865][ T2522] x_tables: ip6_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 1185.856470][ T2540] sctp: [Deprecated]: syz.1.9228 (pid 2540) Use of int in max_burst socket option. [ 1185.856470][ T2540] Use struct sctp_assoc_value instead [ 1185.977064][T18230] net_ratelimit: 235 callbacks suppressed [ 1185.977098][T18230] bond0: (slave bridge2): failed to get link speed/duplex [ 1186.197446][T18256] bond0: (slave bridge2): failed to get link speed/duplex [ 1186.357206][T18257] bond0: (slave bridge2): failed to get link speed/duplex [ 1186.467783][T18224] bond0: (slave bridge2): failed to get link speed/duplex [ 1186.516776][ T2531] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1186.526054][ T2567] geneve0: entered promiscuous mode [ 1186.654711][T18256] bond0: (slave bridge2): failed to get link speed/duplex [ 1186.779650][T18256] bond0: (slave bridge2): failed to get link speed/duplex [ 1186.917235][T18250] bond0: (slave bridge2): failed to get link speed/duplex [ 1186.989634][ T2595] syzkaller0: entered promiscuous mode [ 1187.015798][ T2595] syzkaller0: entered allmulticast mode [ 1187.060000][T18248] bond0: (slave bridge2): failed to get link speed/duplex [ 1187.140269][T15739] IPVS: starting estimator thread 0... [ 1187.280947][ T2609] IPVS: using max 39 ests per chain, 93600 per kthread [ 1187.697143][ C0] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 1187.788179][ T2616] bridge_slave_1: left allmulticast mode [ 1187.789558][ T2635] __nla_validate_parse: 7 callbacks suppressed [ 1187.789579][ T2635] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9246'. [ 1187.794805][ T2616] bridge_slave_1: left promiscuous mode [ 1187.824747][ T2616] bridge0: port 2(bridge_slave_1) entered disabled state [ 1188.045044][ T2620] syzkaller0: entered promiscuous mode [ 1188.052114][ T2620] syzkaller0: entered allmulticast mode [ 1188.059897][ T2632] tipc: Started in network mode [ 1188.064846][ T2632] tipc: Node identity ca3d41a8c65a, cluster identity 4711 [ 1188.072606][ T2632] tipc: Enabled bearer , priority 0 [ 1188.088384][ T2637] netlink: 1752 bytes leftover after parsing attributes in process `syz.4.9247'. [ 1188.127986][ T2635] veth1_to_batadv: entered promiscuous mode [ 1188.142880][ T2635] veth1_to_batadv: left promiscuous mode [ 1188.156130][ T2642] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9248'. [ 1188.181767][ T2614] tipc: Resetting bearer [ 1188.223720][ T2614] tipc: Disabling bearer [ 1188.261741][ T2642] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1188.338525][ C0] ip6_tunnel: syztnl0 xmit: Local address not yet configured! [ 1188.471389][ T2659] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9251'. [ 1188.503221][ T2659] netlink: 5000 bytes leftover after parsing attributes in process `syz.4.9251'. [ 1188.523931][T18256] bond0: (slave bridge2): failed to get link speed/duplex [ 1188.567397][ T2659] openvswitch: netlink: Flow key attr not present in new flow. [ 1188.602882][ T2676] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9252'. [ 1188.767705][ T2679] netlink: 120 bytes leftover after parsing attributes in process `syz.3.9257'. [ 1188.832790][T18076] Bluetooth: hci3: command 0x0405 tx timeout [ 1188.976056][ T2691] ÿ: renamed from bond_slave_0 (while UP) [ 1189.244789][ T2717] netlink: 1752 bytes leftover after parsing attributes in process `syz.0.9261'. [ 1189.655001][ T2738] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 1189.699267][ T2738] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 1189.715159][ T2740] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9266'. [ 1189.772372][ T2738] netdevsim netdevsim1 netdevsim0: refused to change device tx_queue_len [ 1189.793264][ T2740] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9266'. [ 1190.155821][ T2770] netlink: 'syz.1.9276': attribute type 1 has an invalid length. [ 1190.223691][ T2777] netlink: 'syz.0.9279': attribute type 1 has an invalid length. [ 1190.246240][ T2781] netlink: 'syz.3.9275': attribute type 2 has an invalid length. [ 1190.261146][ T2781] netlink: 'syz.3.9275': attribute type 2 has an invalid length. [ 1190.313946][ T2776] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1190.330132][ T2786] netlink: 'syz.4.9281': attribute type 9 has an invalid length. [ 1190.361966][ T2776] bond1: (slave bond2): making interface the new active one [ 1190.399849][ T2776] bond1: (slave bond2): Enslaving as an active interface with an up link [ 1190.487381][ T2770] bond1: (slave gretap1): Enslaving as a backup interface with an up link [ 1190.498526][ T2788] bond7: entered promiscuous mode [ 1190.505859][ T2788] bond7: entered allmulticast mode [ 1190.512881][ T2788] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1190.635157][ T2801] syzkaller0: entered promiscuous mode [ 1190.658560][ T2801] syzkaller0: entered allmulticast mode [ 1190.835348][ T2799] tipc: Enabled bearer , priority 0 [ 1190.882395][ T2792] tipc: Resetting bearer [ 1190.968630][ T2792] tipc: Disabling bearer [ 1191.047754][T12751] net_ratelimit: 9 callbacks suppressed [ 1191.047779][T12751] bond0: (slave bridge2): failed to get link speed/duplex [ 1191.139173][T27239] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1191.156461][T27239] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1191.170383][T27239] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1191.185844][T27239] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1191.201099][T27239] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1191.226234][T18230] bond0: (slave bridge2): failed to get link speed/duplex [ 1191.397856][T18224] bond0: (slave bridge2): failed to get link speed/duplex [ 1191.516139][ T2869] netdevsim netdevsim4 netdevsim0: refused to change device tx_queue_len [ 1191.591476][T18224] bond0: (slave bridge2): failed to get link speed/duplex [ 1191.756672][T25116] bond5: (slave syz_tun): Removing an active aggregator [ 1191.779484][T25116] bond5: (slave syz_tun): Releasing backup interface [ 1191.809610][T18248] bond0: (slave bridge2): failed to get link speed/duplex [ 1191.846818][ T2885] openvswitch: netlink: VXLAN extension message has 12 unknown bytes. [ 1192.004863][T18224] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1192.018674][T18224] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1192.030306][T18224] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1192.041756][T18224] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 2] type 2 family 0 port 256 - 0 [ 1192.047701][ T2892] netlink: 'syz.2.9295': attribute type 3 has an invalid length. [ 1192.098270][ T2841] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1192.293166][ T2896] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1192.377256][ T2902] netlink: 'syz.1.9300': attribute type 9 has an invalid length. [ 1192.388074][T18224] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1192.400966][T18224] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1192.455343][T18224] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1192.467246][T18224] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 2] type 2 family 0 port 256 - 0 [ 1192.831836][T18224] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1192.846797][T18224] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1192.864244][T18224] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1192.880776][T18224] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 2] type 2 family 0 port 256 - 0 [ 1192.917219][T18250] bond0: (slave bridge2): failed to get link speed/duplex [ 1193.032814][ T2933] __nla_validate_parse: 15 callbacks suppressed [ 1193.032838][ T2933] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9311'. [ 1193.116315][ T2930] netlink: 5000 bytes leftover after parsing attributes in process `syz.1.9311'. [ 1193.124547][T18224] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1193.126503][ T2930] openvswitch: netlink: Flow key attr not present in new flow. [ 1193.148458][T18224] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1193.161327][T18224] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 1193.173595][T18224] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 2] type 2 family 0 port 256 - 0 [ 1193.301344][T27239] Bluetooth: hci5: command tx timeout [ 1193.379554][ T2822] bridge0: port 1(bridge_slave_0) entered blocking state [ 1193.389533][ T2822] bridge0: port 1(bridge_slave_0) entered disabled state [ 1193.398273][ T2822] bridge_slave_0: entered allmulticast mode [ 1193.414929][ T2822] bridge_slave_0: entered promiscuous mode [ 1193.435061][ T2822] bridge0: port 2(bridge_slave_1) entered blocking state [ 1193.452672][ T2822] bridge0: port 2(bridge_slave_1) entered disabled state [ 1193.464325][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1193.481421][ T2822] bridge_slave_1: entered allmulticast mode [ 1193.490268][ T2822] bridge_slave_1: entered promiscuous mode [ 1193.633605][ T2948] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9315'. [ 1193.691135][ T2948] vlan2: entered promiscuous mode [ 1193.696615][ T2948] gretap0: entered promiscuous mode [ 1193.739484][T18250] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1193.752138][T18250] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1194.023726][ T2822] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1194.048602][ T2957] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9319'. [ 1194.069429][ T2822] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1194.081902][ T2957] netlink: 'syz.2.9319': attribute type 1 has an invalid length. [ 1194.101979][ T2960] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9318'. [ 1194.114550][T18250] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1194.117518][ T2957] netlink: 'syz.2.9319': attribute type 2 has an invalid length. [ 1194.136803][T18250] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1194.142779][ T2960] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9318'. [ 1194.156207][ T2957] netlink: 'syz.2.9319': attribute type 1 has an invalid length. [ 1194.166785][ T2957] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9319'. [ 1194.303659][T18230] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1194.332337][T18230] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1194.340138][ T2967] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9321'. [ 1194.370761][ T2966] netlink: 120 bytes leftover after parsing attributes in process `syz.4.9322'. [ 1194.383571][ T2822] team0: Port device team_slave_0 added [ 1194.418877][ T2957] bond1: option lacp_active: invalid value (8) [ 1194.429467][ T2957] bond1 (unregistering): Released all slaves [ 1194.460113][ T2971] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9323'. [ 1194.542642][ T2964] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1194.620661][ T2968] bond3: (slave syz_tun): Enslaving as a backup interface with an up link [ 1194.655681][ T2822] team0: Port device team_slave_1 added [ 1194.672712][ T2971] bond0: option all_slaves_active: invalid value (22) [ 1194.685836][T18230] netdevsim netdevsim0 eth4: set [0, 0] type 1 family 0 port 8472 - 0 [ 1194.700160][T18230] netdevsim netdevsim0 eth4: set [1, 0] type 2 family 0 port 6081 - 0 [ 1194.831498][T18224] dvmrp0: left allmulticast mode [ 1194.839441][T18224] tipc: Resetting bearer [ 1195.380335][T27239] Bluetooth: hci5: command tx timeout [ 1195.445361][ T3013] validate_nla: 2 callbacks suppressed [ 1195.445387][ T3013] netlink: 'syz.1.9332': attribute type 9 has an invalid length. [ 1195.623645][T18224] tipc: Disabling bearer [ 1195.771946][T18224] bond3 (unregistering): (slave geneve2): Releasing active interface [ 1195.846540][T18224] bond1 (unregistering): (slave bridge1): Releasing active interface [ 1195.932553][T18224] bond4 (unregistering): (slave bridge3): Releasing active interface [ 1196.219981][T18224] bond0 (unregistering): Released all slaves [ 1196.236040][T18224] bond1 (unregistering): Released all slaves [ 1196.256831][T18224] bond2 (unregistering): Released all slaves [ 1196.282520][T18224] bond3 (unregistering): Released all slaves [ 1196.298613][T18224] bond4 (unregistering): Released all slaves [ 1196.315052][T18224] bond5 (unregistering): Released all slaves [ 1196.338100][T18224] bond6 (unregistering): Released all slaves [ 1196.354121][T18224] bond7 (unregistering): Released all slaves [ 1196.369847][ T2822] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1196.378880][ T2822] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1196.410083][ T2822] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1196.434475][ T5290] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1196.516007][ T2822] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1196.565696][ T2822] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1196.639874][ T2822] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1196.769736][ T3041] openvswitch: netlink: Flow key attr not present in new flow. [ 1196.846433][T18224] tipc: Disabling bearer [ 1196.885833][T18224] tipc: Left network mode [ 1197.081871][ T2822] hsr_slave_0: entered promiscuous mode [ 1197.118345][ T2822] hsr_slave_1: entered promiscuous mode [ 1197.168199][ T2822] debugfs: 'hsr0' already exists in 'hsr' [ 1197.210723][ T2822] Cannot create hsr debugfs directory [ 1197.307238][T18257] bond0: (slave bridge2): failed to get link speed/duplex [ 1197.459591][T27239] Bluetooth: hci5: command tx timeout [ 1197.800137][T18257] bond0: (slave bridge2): failed to get link speed/duplex [ 1197.902860][ T3070] tap0: tun_chr_ioctl cmd 1074025676 [ 1197.920701][ T3070] tap0: owner set to 0 [ 1198.095104][ T3075] bond8: entered promiscuous mode [ 1198.113126][ T3075] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1198.377735][T12751] bond0: (slave bridge2): failed to get link speed/duplex [ 1198.540866][T18257] bond0: (slave bridge2): failed to get link speed/duplex [ 1198.593373][ T3110] __nla_validate_parse: 15 callbacks suppressed [ 1198.593394][ T3110] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9356'. [ 1198.699845][ T3114] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9357'. [ 1198.743206][ T3114] netlink: 40 bytes leftover after parsing attributes in process `syz.1.9357'. [ 1198.852969][ T3119] xt_CONNSECMARK: invalid mode: 0 [ 1198.908502][T12751] bond0: (slave bridge2): failed to get link speed/duplex [ 1199.041977][ T5290] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1199.081769][ T3126] netlink: 684 bytes leftover after parsing attributes in process `syz.1.9360'. [ 1199.109003][ T149] bond0: (slave bridge2): failed to get link speed/duplex [ 1199.359106][ T2822] netdevsim netdevsim0 eth4 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1199.383439][ T3141] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9362'. [ 1199.407597][ T2822] netdevsim netdevsim0 eth4 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1199.559465][T27239] Bluetooth: hci5: command tx timeout [ 1199.566193][ T149] bond0: (slave bridge2): failed to get link speed/duplex [ 1199.807894][ T2822] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1199.834005][ T2822] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1199.945595][ T3156] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 1200.013500][ T3163] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.9367'. [ 1200.098714][T12751] bond0: (slave bridge2): failed to get link speed/duplex [ 1200.252632][ T2822] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1200.263908][ T2822] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1200.274988][ C0] vcan0: j1939_tp_rxtimer: 0xffff888079810800: rx timeout, send abort [ 1200.289174][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888079810800: 0x20000: (3) A timeout occurred and this is the connection abort to close the session. [ 1200.342405][ T3168] netdevsim netdevsim4 netdevsim0: refused to change device tx_queue_len [ 1200.579039][ T3180] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9373'. [ 1200.721935][ T2822] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1200.757167][ T2822] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1200.938293][ T3206] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9375'. [ 1201.223828][T18224] hsr_slave_0: left promiscuous mode [ 1201.240092][T18224] hsr_slave_1: left promiscuous mode [ 1201.253954][T18224] batman_adv: batadv0: Interface deactivated: ipvlan2 [ 1201.262707][T18224] batman_adv: batadv0: Removing interface: ipvlan2 [ 1201.283930][T18224] batadv0: left promiscuous mode [ 1201.309490][T18224] veth1_macvtap: left promiscuous mode [ 1201.325186][T18224] veth0_macvtap: left promiscuous mode [ 1201.341741][ T3227] netlink: 68 bytes leftover after parsing attributes in process `syz.3.9382'. [ 1201.341918][T18224] veth1_vlan: left promiscuous mode [ 1201.360732][T18224] veth0_vlan: left promiscuous mode [ 1202.551728][T18251] net_ratelimit: 1 callbacks suppressed [ 1202.551748][T18251] bond0: (slave bridge2): failed to get link speed/duplex [ 1202.689465][T18256] bond0: (slave bridge2): failed to get link speed/duplex [ 1202.747519][ T3264] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9391'. [ 1202.877975][T12751] bond0: (slave bridge2): failed to get link speed/duplex [ 1203.055412][ T3267] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1203.278365][T12751] bond0: (slave bridge2): failed to get link speed/duplex [ 1203.336320][T18224] IPVS: stop unused estimator thread 0... [ 1203.493424][ T3267] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1203.940621][ T3267] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1203.955576][ T3317] __nla_validate_parse: 1 callbacks suppressed [ 1203.955595][ T3317] netlink: 80 bytes leftover after parsing attributes in process `syz.1.9401'. [ 1204.136140][ T2822] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1204.244142][ T2822] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1204.315459][ T2822] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1204.359890][ T2822] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1204.385415][ T3333] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9403'. [ 1204.389419][ T2822] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1204.420153][ T3333] netlink: 40 bytes leftover after parsing attributes in process `syz.2.9403'. [ 1204.444697][ T2822] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1204.576122][ T3267] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1204.699826][ T2822] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1204.738985][ T2822] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1204.756694][ T3345] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9406'. [ 1204.927310][T18256] bond0: (slave bridge2): failed to get link speed/duplex [ 1205.160146][T18256] bond0: (slave bridge2): failed to get link speed/duplex [ 1205.232540][ T3363] tipc: Enabled bearer , priority 0 [ 1205.258727][ T3363] syzkaller0: entered promiscuous mode [ 1205.274394][ T3363] syzkaller0: entered allmulticast mode [ 1205.310929][T18256] bond0: (slave bridge2): failed to get link speed/duplex [ 1205.325134][ T3363] sch_tbf: burst 8 is lower than device syzkaller0 mtu (1514) ! [ 1205.351181][ T3363] tipc: Resetting bearer [ 1205.513086][ T3360] tipc: Resetting bearer [ 1205.599840][ T3360] tipc: Disabling bearer [ 1205.662036][T18248] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1205.739256][T18230] bond0: (slave bridge2): failed to get link speed/duplex [ 1205.863001][T18257] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1205.981813][T18257] bond0: (slave bridge2): failed to get link speed/duplex [ 1206.004720][ T2822] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1206.049983][T18230] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1206.126522][T18230] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1206.177773][T18256] bond0: (slave bridge2): failed to get link speed/duplex [ 1206.255780][ T2822] 8021q: adding VLAN 0 to HW filter on device team0 [ 1206.305013][T18256] bridge0: port 1(bridge_slave_0) entered blocking state [ 1206.313150][T18256] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1206.388493][T18256] bridge0: port 2(bridge_slave_1) entered blocking state [ 1206.396615][T18256] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1206.525982][ T3416] FAULT_INJECTION: forcing a failure. [ 1206.525982][ T3416] name failslab, interval 1, probability 0, space 0, times 0 [ 1206.550296][ T3416] CPU: 1 UID: 0 PID: 3416 Comm: syz.1.9421 Not tainted syzkaller #0 PREEMPT(full) [ 1206.550323][ T3416] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1206.550333][ T3416] Call Trace: [ 1206.550340][ T3416] [ 1206.550347][ T3416] dump_stack_lvl+0xe8/0x150 [ 1206.550375][ T3416] should_fail_ex+0x412/0x560 [ 1206.550398][ T3416] should_failslab+0xa8/0x100 [ 1206.550423][ T3416] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 1206.550445][ T3416] ? __alloc_skb+0x186/0x7d0 [ 1206.550466][ T3416] ? __alloc_skb+0x1d0/0x7d0 [ 1206.550485][ T3416] ? __local_bh_enable_ip+0xd0/0x130 [ 1206.550508][ T3416] __alloc_skb+0x1d0/0x7d0 [ 1206.550533][ T3416] alloc_skb_with_frags+0xc8/0x760 [ 1206.550570][ T3416] sock_alloc_send_pskb+0x878/0x990 [ 1206.550599][ T3416] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 1206.550615][ T3416] ? kasan_quarantine_put+0xbb/0x1f0 [ 1206.550634][ T3416] ? lockdep_hardirqs_on+0x7a/0x110 [ 1206.550659][ T3416] ? unix_dgram_sendmsg+0x57c/0x18d0 [ 1206.550676][ T3416] ? kmem_cache_free+0x182/0x650 [ 1206.550698][ T3416] ? bpf_lsm_socket_getpeersec_dgram+0x9/0x20 [ 1206.550723][ T3416] unix_dgram_sendmsg+0x460/0x18d0 [ 1206.550757][ T3416] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 1206.550782][ T3416] ? aa_sock_msg_perm+0xda/0x1b0 [ 1206.550805][ T3416] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1206.550827][ T3416] ____sys_sendmsg+0x972/0x9f0 [ 1206.550842][ T3416] ? __might_fault+0xaf/0x130 [ 1206.550865][ T3416] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1206.550889][ T3416] ? import_iovec+0x73/0xa0 [ 1206.550912][ T3416] ___sys_sendmsg+0x2a5/0x360 [ 1206.550927][ T3416] ? __lock_acquire+0x6b5/0x2cf0 [ 1206.550947][ T3416] ? __pfx____sys_sendmsg+0x10/0x10 [ 1206.550961][ T3416] ? __lock_acquire+0x6b5/0x2cf0 [ 1206.550982][ T3416] ? kstrtouint+0x6e/0xe0 [ 1206.551036][ T3416] __sys_sendmmsg+0x27c/0x4e0 [ 1206.551057][ T3416] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1206.551070][ T3416] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 1206.551116][ T3416] ? ksys_write+0x242/0x270 [ 1206.551140][ T3416] ? __pfx_ksys_write+0x10/0x10 [ 1206.551168][ T3416] __x64_sys_sendmmsg+0xa0/0xc0 [ 1206.551185][ T3416] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1206.551202][ T3416] do_syscall_64+0x15f/0xf80 [ 1206.551223][ T3416] ? trace_irq_disable+0x3b/0x140 [ 1206.551246][ T3416] ? clear_bhb_loop+0x40/0x90 [ 1206.551265][ T3416] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1206.551280][ T3416] RIP: 0033:0x7f9982d9ce59 [ 1206.551298][ T3416] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1206.551311][ T3416] RSP: 002b:00007f9980ff6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1206.551330][ T3416] RAX: ffffffffffffffda RBX: 00007f9983015fa0 RCX: 00007f9982d9ce59 [ 1206.551340][ T3416] RDX: 0000000004000190 RSI: 0000200000000180 RDI: 0000000000000003 [ 1206.551350][ T3416] RBP: 00007f9980ff6090 R08: 0000000000000000 R09: 0000000000000000 [ 1206.551360][ T3416] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1206.551369][ T3416] R13: 00007f9983016038 R14: 00007f9983015fa0 R15: 00007ffc47a7d568 [ 1206.551397][ T3416] [ 1206.984110][ T3414] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9422'. [ 1207.171328][ T3433] netlink: 'syz.4.9425': attribute type 1 has an invalid length. [ 1207.236354][ T3433] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1207.319598][ T3433] bond4: (slave syz_tun): Removing an active aggregator [ 1207.371134][ T3433] bond4: (slave syz_tun): Releasing backup interface [ 1207.425691][ T3433] bond9: (slave syz_tun): Enslaving as a backup interface with an up link [ 1207.608675][ T3459] netlink: 'syz.3.9430': attribute type 3 has an invalid length. [ 1207.654020][ T3449] net_ratelimit: 7 callbacks suppressed [ 1207.654040][ T3449] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 1207.775811][ T3452] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 1207.783473][ T3449] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9428'. [ 1207.870738][T18257] bond0: (slave bridge2): failed to get link speed/duplex [ 1208.015082][ T3475] syzkaller0: entered promiscuous mode [ 1208.036722][ T3475] syzkaller0: entered allmulticast mode [ 1208.194417][ T3475] tipc: Enabled bearer , priority 0 [ 1208.253922][ T3473] tipc: Resetting bearer [ 1208.278713][ T3487] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9437'. [ 1208.295560][ T3490] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9438'. [ 1208.373020][ T3473] tipc: Disabling bearer [ 1208.419674][T18251] bond0: (slave bridge2): failed to get link speed/duplex [ 1208.445077][ T3490] vlan2: entered promiscuous mode [ 1208.452687][ T3490] gretap0: entered promiscuous mode [ 1208.534804][ T3499] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 1208.591576][T18251] bond0: (slave bridge2): failed to get link speed/duplex [ 1208.703099][ T3507] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9441'. [ 1208.738497][ T149] bond0: (slave bridge2): failed to get link speed/duplex [ 1208.899674][ T3520] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9445'. [ 1208.960981][ T3507] veth3: entered allmulticast mode [ 1209.084891][ T3507] bond4: (slave veth3): Enslaving as an active interface with an up link [ 1209.128554][ T3535] netlink: 312 bytes leftover after parsing attributes in process `syz.2.9447'. [ 1209.156027][ T3536] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9448'. [ 1209.168741][ T3526] bond4 (unregistering): (slave veth3): Releasing backup interface [ 1209.193051][ T3526] bond4 (unregistering): Released all slaves [ 1209.265625][ T2822] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1209.280908][ T3536] netlink: 20 bytes leftover after parsing attributes in process `syz.3.9448'. [ 1209.357356][T18248] bond0: (slave bridge2): failed to get link speed/duplex [ 1209.440141][ T2822] veth0_vlan: entered promiscuous mode [ 1209.517051][ T2822] veth1_vlan: entered promiscuous mode [ 1209.567143][T18251] bond0: (slave bridge2): failed to get link speed/duplex [ 1209.594312][ T3549] netlink: 1624 bytes leftover after parsing attributes in process `syz.1.9451'. [ 1209.595452][ T3551] netlink: 24 bytes leftover after parsing attributes in process `syz.4.9452'. [ 1209.680970][ T3551] ip6gre1: entered promiscuous mode [ 1209.702296][ T3551] ip6gre1: entered allmulticast mode [ 1209.725195][ T2822] veth0_macvtap: entered promiscuous mode [ 1209.762213][ T2822] veth1_macvtap: entered promiscuous mode [ 1209.781766][ T3556] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9454'. [ 1209.820100][ T2822] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1209.842295][T18251] bond0: (slave bridge2): failed to get link speed/duplex [ 1209.858794][ T3561] netlink: 56 bytes leftover after parsing attributes in process `syz.1.9457'. [ 1209.901846][ T2822] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1209.914558][ T3563] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9456'. [ 1209.942952][ T3565] netlink: 312 bytes leftover after parsing attributes in process `syz.1.9458'. [ 1209.990434][T18257] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1210.026622][T18257] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1210.052756][T18257] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1210.115772][T18257] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1210.220335][ T149] bond0: (slave bridge2): failed to get link speed/duplex [ 1210.353130][ T3585] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9463'. [ 1210.504491][T18230] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1210.535445][ T5786] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1210.546007][T18230] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1210.628628][T15747] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1210.711082][ T3600] vlan3: entered promiscuous mode [ 1210.719860][ T3600] gretap0: entered promiscuous mode [ 1210.843629][T18230] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1210.859748][T18230] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1210.961569][T18224] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1210.971132][T18224] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1211.273420][ T3631] vlan2: entered allmulticast mode [ 1211.283711][ T3631] bond0: entered allmulticast mode [ 1211.300338][ T3631] bond_slave_0: entered allmulticast mode [ 1211.314679][ T3631] bond_slave_1: entered allmulticast mode [ 1211.387349][ T24] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1211.746576][T18076] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1211.763272][T18076] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1211.773444][T18076] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1211.795754][T18076] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1211.811002][T18076] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1212.017633][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1212.420647][T25730] bond9: (slave syz_tun): Removing an active aggregator [ 1212.435796][T25730] bond9: (slave syz_tun): Releasing backup interface [ 1212.585039][ T3684] batadv0: entered promiscuous mode [ 1212.594822][ T3684] veth1_to_batadv: entered promiscuous mode [ 1212.605744][ T3684] debugfs: 'hsr1' already exists in 'hsr' [ 1212.616364][ T3684] Cannot create hsr debugfs directory [ 1212.623311][ T3684] hsr1: entered allmulticast mode [ 1212.630156][ T3684] batadv0: entered allmulticast mode [ 1212.636604][ T3684] veth1_to_batadv: entered allmulticast mode [ 1212.662456][T18256] net_ratelimit: 15 callbacks suppressed [ 1212.662480][T18256] bond0: (slave bridge2): failed to get link speed/duplex [ 1212.907881][T18256] bond0: (slave bridge2): failed to get link speed/duplex [ 1213.072645][ T149] bond0: (slave bridge2): failed to get link speed/duplex [ 1213.176846][ T3710] ip6gre1: entered promiscuous mode [ 1213.207078][ T3710] ip6gre1: entered allmulticast mode [ 1213.259357][T18256] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1213.277295][T15737] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1213.288633][T18256] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1213.345213][ T3714] bond3: (slave syz_tun): Removing an active aggregator [ 1213.372800][T15737] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1213.382864][T18256] bond3: Warning: Found an uninitialized port [ 1213.394515][ T3714] bond3: (slave syz_tun): Releasing backup interface [ 1213.437896][ T3714] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 1213.595160][ T3730] netlink: 'syz.3.9511': attribute type 1 has an invalid length. [ 1213.660375][ T3730] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1213.751463][ T3734] bond6: (slave syz_tun): Enslaving as a backup interface with an up link [ 1213.862704][T27239] Bluetooth: hci4: command tx timeout [ 1214.029506][ T3722] bridge0: port 2(bridge_slave_1) entered disabled state [ 1214.037589][ T3722] bridge0: port 1(bridge_slave_0) entered disabled state [ 1214.183955][ T3722] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1214.210594][ T3760] __nla_validate_parse: 12 callbacks suppressed [ 1214.210620][ T3760] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9514'. [ 1214.218494][ T3722] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1214.478067][ T3731] bridge_slave_0 (unregistering): left allmulticast mode [ 1214.486166][ T3731] bridge_slave_0 (unregistering): left promiscuous mode [ 1214.494921][ T3731] bridge0: port 1(bridge_slave_0) entered disabled state [ 1214.521850][T18251] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1214.532846][T18251] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1214.571781][T18251] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1214.583012][T18251] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1214.593898][ T3649] bridge0: port 1(bridge_slave_0) entered blocking state [ 1214.601928][ T3649] bridge0: port 1(bridge_slave_0) entered disabled state [ 1214.612600][ T3649] bridge_slave_0: entered allmulticast mode [ 1214.625024][ T3649] bridge_slave_0: entered promiscuous mode [ 1214.644482][ T3649] bridge0: port 2(bridge_slave_1) entered blocking state [ 1214.651995][ T3649] bridge0: port 2(bridge_slave_1) entered disabled state [ 1214.662474][ T3649] bridge_slave_1: entered allmulticast mode [ 1214.671141][ T3649] bridge_slave_1: entered promiscuous mode [ 1214.779021][ T3649] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1214.834228][ T3649] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1214.871626][ T3774] netlink: 'syz.0.9520': attribute type 18 has an invalid length. [ 1214.881614][ T3774] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9520'. [ 1214.984456][ T3779] syzkaller0: entered promiscuous mode [ 1214.994795][ T3779] syzkaller0: entered allmulticast mode [ 1215.035380][ T3649] team0: Port device team_slave_0 added [ 1215.054450][ T3649] team0: Port device team_slave_1 added [ 1215.063588][ T3779] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9521'. [ 1215.118254][ T3779] netlink: 'syz.3.9521': attribute type 13 has an invalid length. [ 1215.232421][ T3649] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1215.241517][ T3649] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1215.285268][ T3649] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1215.303503][ T3649] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1215.310925][ T3649] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1215.343092][ T3649] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1215.411335][ T3795] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9526'. [ 1215.470305][ T3795] vlan3: entered promiscuous mode [ 1215.478375][ T3795] gretap0: entered promiscuous mode [ 1215.522626][ T3799] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9527'. [ 1215.530830][ T3649] hsr_slave_0: entered promiscuous mode [ 1215.546349][ T3649] hsr_slave_1: entered promiscuous mode [ 1215.559176][ T3649] debugfs: 'hsr0' already exists in 'hsr' [ 1215.567770][ T3649] Cannot create hsr debugfs directory [ 1215.616601][ T3802] netlink: 1624 bytes leftover after parsing attributes in process `syz.1.9528'. [ 1215.661816][ T3804] netlink: 5000 bytes leftover after parsing attributes in process `syz.3.9527'. [ 1215.676404][ T3804] openvswitch: netlink: Flow key attr not present in new flow. [ 1215.851552][ T3811] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9531'. [ 1215.895597][ T3811] netlink: 40 bytes leftover after parsing attributes in process `syz.0.9531'. [ 1215.914812][ T3808] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9530'. [ 1215.937514][T27239] Bluetooth: hci4: command tx timeout [ 1216.119520][T18230] bond0: (slave bridge2): failed to get link speed/duplex [ 1216.220864][ T3649] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1216.324150][T18230] bond0: (slave bridge2): failed to get link speed/duplex [ 1216.396465][ T3649] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1216.537019][T18256] bond0: (slave bridge2): failed to get link speed/duplex [ 1216.677904][T18257] bond0: (slave bridge2): failed to get link speed/duplex [ 1216.720487][ T3649] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1216.934279][ T3649] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1216.996235][ T3854] netlink: 'syz.0.9545': attribute type 8 has an invalid length. [ 1217.511094][ T3874] vlan2: entered promiscuous mode [ 1217.562290][ T3876] bridge2: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 1217.753252][ T3885] net_ratelimit: 5 callbacks suppressed [ 1217.753274][ T3885] openvswitch: netlink: Flow key attr not present in new flow. [ 1217.919690][T18230] bond0: (slave bridge2): failed to get link speed/duplex [ 1217.988294][ T3649] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1218.017471][T27239] Bluetooth: hci4: command tx timeout [ 1218.043552][ T3649] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1218.060207][ T3898] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 1218.123460][ T3649] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1218.142152][ T3649] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1218.158065][ T3649] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1218.181224][ T3649] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1218.209444][ T3649] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1218.226690][ T3649] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1218.277137][T18257] bond0: (slave bridge2): failed to get link speed/duplex [ 1218.499152][T18248] bond0: (slave bridge2): failed to get link speed/duplex [ 1218.548213][ T3649] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1218.620292][ T3649] 8021q: adding VLAN 0 to HW filter on device team0 [ 1218.670956][T18248] bridge0: port 1(bridge_slave_0) entered blocking state [ 1218.678710][T18248] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1218.755772][T18230] bridge0: port 2(bridge_slave_1) entered blocking state [ 1218.764061][T18230] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1218.805586][ T3930] FAULT_INJECTION: forcing a failure. [ 1218.805586][ T3930] name failslab, interval 1, probability 0, space 0, times 0 [ 1218.822802][ T3930] CPU: 1 UID: 0 PID: 3930 Comm: syz.2.9566 Not tainted syzkaller #0 PREEMPT(full) [ 1218.822828][ T3930] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1218.822839][ T3930] Call Trace: [ 1218.822846][ T3930] [ 1218.822855][ T3930] dump_stack_lvl+0xe8/0x150 [ 1218.822883][ T3930] should_fail_ex+0x412/0x560 [ 1218.822909][ T3930] should_failslab+0xa8/0x100 [ 1218.822936][ T3930] __kmalloc_noprof+0xe8/0x760 [ 1218.822958][ T3930] ? nft_obj_init+0x1e0/0x360 [ 1218.822980][ T3930] nft_obj_init+0x1e0/0x360 [ 1218.822999][ T3930] nf_tables_newobj+0xb28/0x1c70 [ 1218.823035][ T3930] ? __pfx_nf_tables_newobj+0x10/0x10 [ 1218.823060][ T3930] ? __nla_parse+0x40/0x60 [ 1218.823085][ T3930] nfnetlink_rcv+0x123e/0x27b0 [ 1218.823138][ T3930] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 1218.823201][ T3930] ? netlink_deliver_tap+0x2e/0x1b0 [ 1218.823230][ T3930] ? netlink_deliver_tap+0x2e/0x1b0 [ 1218.823246][ T3930] ? netlink_deliver_tap+0x2e/0x1b0 [ 1218.823268][ T3930] netlink_unicast+0x75c/0x8e0 [ 1218.823303][ T3930] netlink_sendmsg+0x813/0xb40 [ 1218.823329][ T3930] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1218.823357][ T3930] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1218.823381][ T3930] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1218.823407][ T3930] ____sys_sendmsg+0x972/0x9f0 [ 1218.823425][ T3930] ? __might_fault+0xaf/0x130 [ 1218.823452][ T3930] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1218.823479][ T3930] ? import_iovec+0x73/0xa0 [ 1218.823506][ T3930] ___sys_sendmsg+0x2a5/0x360 [ 1218.823522][ T3930] ? __lock_acquire+0x6b5/0x2cf0 [ 1218.823545][ T3930] ? __pfx____sys_sendmsg+0x10/0x10 [ 1218.823597][ T3930] ? __fget_files+0x2a/0x420 [ 1218.823614][ T3930] ? __fget_files+0x3a0/0x420 [ 1218.823643][ T3930] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1218.823662][ T3930] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1218.823689][ T3930] ? __pfx_ksys_write+0x10/0x10 [ 1218.823721][ T3930] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1218.823739][ T3930] do_syscall_64+0x15f/0xf80 [ 1218.823763][ T3930] ? trace_irq_disable+0x3b/0x140 [ 1218.823786][ T3930] ? clear_bhb_loop+0x40/0x90 [ 1218.823803][ T3930] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1218.823817][ T3930] RIP: 0033:0x7f9add99ce59 [ 1218.823833][ T3930] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1218.823847][ T3930] RSP: 002b:00007f9ade814028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1218.823864][ T3930] RAX: ffffffffffffffda RBX: 00007f9addc15fa0 RCX: 00007f9add99ce59 [ 1218.823875][ T3930] RDX: 0000000000000000 RSI: 0000200000000d80 RDI: 0000000000000003 [ 1218.823886][ T3930] RBP: 00007f9ade814090 R08: 0000000000000000 R09: 0000000000000000 [ 1218.823896][ T3930] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1218.823906][ T3930] R13: 00007f9addc16038 R14: 00007f9addc15fa0 R15: 00007ffe1f149468 [ 1218.823936][ T3930] [ 1219.248548][T18248] bond0: (slave bridge2): failed to get link speed/duplex [ 1219.375075][ T3939] mac80211_hwsim hwsim179 wlan0: entered promiscuous mode [ 1219.384416][ T3939] mac80211_hwsim hwsim179 wlan0: entered allmulticast mode [ 1219.401079][ T3939] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 1219.456289][ T3942] __nla_validate_parse: 9 callbacks suppressed [ 1219.456310][ T3942] netlink: 1688 bytes leftover after parsing attributes in process `syz.1.9571'. [ 1219.499433][T18251] bond0: (slave bridge2): failed to get link speed/duplex [ 1219.563454][ T3945] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9572'. [ 1219.713329][T18248] bond0: (slave bridge2): failed to get link speed/duplex [ 1219.856224][ T29] audit: type=1804 audit(1779201921.385:5): pid=3961 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.9578" name="/newroot/569/cgroup.controllers" dev="tmpfs" ino=2893 res=1 errno=0 [ 1219.897323][T18251] bond0: (slave bridge2): failed to get link speed/duplex [ 1219.921180][ T29] audit: type=1800 audit(1779201921.415:6): pid=3961 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.9578" name="cgroup.controllers" dev="tmpfs" ino=2893 res=0 errno=0 [ 1219.959964][ T29] audit: type=1804 audit(1779201921.425:7): pid=3961 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.9578" name="/newroot/569/cgroup.controllers" dev="tmpfs" ino=2893 res=1 errno=0 [ 1219.960213][ T3964] netlink: 36 bytes leftover after parsing attributes in process `syz.3.9578'. [ 1220.022800][T18257] bond0: (slave bridge2): failed to get link speed/duplex [ 1220.036297][ T3967] netlink: 732 bytes leftover after parsing attributes in process `syz.0.9579'. [ 1220.054470][ T3967] netlink: 732 bytes leftover after parsing attributes in process `syz.0.9579'. [ 1220.075034][ T3967] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9579'. [ 1220.097539][T27239] Bluetooth: hci4: command tx timeout [ 1220.100499][ T3967] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9579'. [ 1220.236717][ T3649] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1220.354746][ T3982] netlink: 1688 bytes leftover after parsing attributes in process `syz.2.9583'. [ 1220.556276][ T3992] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9584'. [ 1220.967608][ T4003] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9587'. [ 1221.087402][ T3649] veth0_vlan: entered promiscuous mode [ 1221.160539][ T3649] veth1_vlan: entered promiscuous mode [ 1221.235335][ T3649] veth0_macvtap: entered promiscuous mode [ 1221.265443][ T3649] veth1_macvtap: entered promiscuous mode [ 1221.315787][ T3649] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1221.351165][ T3649] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1221.385840][T18230] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1221.405113][T18230] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1221.426387][T18230] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1221.463245][T18230] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1221.627245][ C1] ip6_tnl_xmit_ctl: 2 callbacks suppressed [ 1221.627274][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1221.736630][T18251] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1221.761583][T18251] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1221.898631][ C1] vcan0: j1939_tp_rxtimer: 0xffff888045270800: rx timeout, send abort [ 1221.910781][ C1] vcan0: j1939_tp_rxtimer: 0xffff888045270400: rx timeout, send abort [ 1221.919985][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888045270800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 1221.934899][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888045270400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 1221.980161][T18248] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1222.011725][T18248] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1222.243644][ T4044] netlink: 'syz.4.9481': attribute type 3 has an invalid length. [ 1222.433518][ T4058] FAULT_INJECTION: forcing a failure. [ 1222.433518][ T4058] name failslab, interval 1, probability 0, space 0, times 0 [ 1222.473553][ T4061] vlan2: entered allmulticast mode [ 1222.476203][ T4058] CPU: 0 UID: 0 PID: 4058 Comm: syz.3.9607 Not tainted syzkaller #0 PREEMPT(full) [ 1222.476231][ T4058] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1222.476241][ T4058] Call Trace: [ 1222.476250][ T4058] [ 1222.476257][ T4058] dump_stack_lvl+0xe8/0x150 [ 1222.476286][ T4058] should_fail_ex+0x412/0x560 [ 1222.476322][ T4058] should_failslab+0xa8/0x100 [ 1222.476348][ T4058] __kmalloc_cache_noprof+0x88/0x660 [ 1222.476373][ T4058] ? nfnetlink_rcv+0xfdf/0x27b0 [ 1222.476394][ T4058] nfnetlink_rcv+0xfdf/0x27b0 [ 1222.476442][ T4058] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 1222.476501][ T4058] ? netlink_deliver_tap+0x2e/0x1b0 [ 1222.476528][ T4058] ? netlink_deliver_tap+0x2e/0x1b0 [ 1222.476544][ T4058] ? netlink_deliver_tap+0x2e/0x1b0 [ 1222.476565][ T4058] netlink_unicast+0x75c/0x8e0 [ 1222.476599][ T4058] netlink_sendmsg+0x813/0xb40 [ 1222.476625][ T4058] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1222.476645][ T4058] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1222.476666][ T4058] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1222.476691][ T4058] ____sys_sendmsg+0x972/0x9f0 [ 1222.476709][ T4058] ? __might_fault+0xaf/0x130 [ 1222.476734][ T4058] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1222.476760][ T4058] ? import_iovec+0x73/0xa0 [ 1222.476785][ T4058] ___sys_sendmsg+0x2a5/0x360 [ 1222.476800][ T4058] ? __lock_acquire+0x6b5/0x2cf0 [ 1222.476822][ T4058] ? __pfx____sys_sendmsg+0x10/0x10 [ 1222.476875][ T4058] ? __fget_files+0x2a/0x420 [ 1222.476893][ T4058] ? __fget_files+0x3a0/0x420 [ 1222.476921][ T4058] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1222.476939][ T4058] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1222.476965][ T4058] ? __pfx_ksys_write+0x10/0x10 [ 1222.476995][ T4058] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1222.477011][ T4058] do_syscall_64+0x15f/0xf80 [ 1222.477034][ T4058] ? trace_irq_disable+0x3b/0x140 [ 1222.477055][ T4058] ? clear_bhb_loop+0x40/0x90 [ 1222.477076][ T4058] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1222.477090][ T4058] RIP: 0033:0x7f522419ce59 [ 1222.477108][ T4058] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1222.477121][ T4058] RSP: 002b:00007f522510a028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1222.477139][ T4058] RAX: ffffffffffffffda RBX: 00007f5224415fa0 RCX: 00007f522419ce59 [ 1222.477151][ T4058] RDX: 0000000000000000 RSI: 0000200000000d80 RDI: 0000000000000003 [ 1222.477160][ T4058] RBP: 00007f522510a090 R08: 0000000000000000 R09: 0000000000000000 [ 1222.477170][ T4058] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1222.477179][ T4058] R13: 00007f5224416038 R14: 00007f5224415fa0 R15: 00007ffcc04f43b8 [ 1222.477206][ T4058] [ 1222.772648][ T4061] bond0: entered allmulticast mode [ 1222.779195][ T4061] bond_slave_0: entered allmulticast mode [ 1222.787178][ T4061] bond_slave_1: entered allmulticast mode [ 1222.798095][ T149] net_ratelimit: 17 callbacks suppressed [ 1222.798121][ T149] bond0: (slave bridge2): failed to get link speed/duplex [ 1222.938934][ T149] bond0: (slave bridge2): failed to get link speed/duplex [ 1223.020990][ T4079] vlan2: entered promiscuous mode [ 1223.110797][T18248] bond0: (slave bridge2): failed to get link speed/duplex [ 1223.331342][ T4101] openvswitch: netlink: Flow key attr not present in new flow. [ 1223.687432][T18230] bond0: (slave bridge2): failed to get link speed/duplex [ 1223.705545][ T4110] syzkaller0: entered promiscuous mode [ 1223.736545][ T4110] syzkaller0: entered allmulticast mode [ 1223.817411][T18251] bond0: (slave bridge2): failed to get link speed/duplex [ 1224.308436][ T4142] FAULT_INJECTION: forcing a failure. [ 1224.308436][ T4142] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1224.407090][ T4142] CPU: 0 UID: 0 PID: 4142 Comm: syz.2.9635 Not tainted syzkaller #0 PREEMPT(full) [ 1224.407117][ T4142] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1224.407127][ T4142] Call Trace: [ 1224.407135][ T4142] [ 1224.407143][ T4142] dump_stack_lvl+0xe8/0x150 [ 1224.407173][ T4142] should_fail_ex+0x412/0x560 [ 1224.407200][ T4142] _copy_from_iter+0x1d3/0x1670 [ 1224.407225][ T4142] ? rcu_is_watching+0x15/0xb0 [ 1224.407252][ T4142] ? __pfx__copy_from_iter+0x10/0x10 [ 1224.407279][ T4142] ? netlink_sendmsg+0x650/0xb40 [ 1224.407297][ T4142] ? skb_put+0x11b/0x210 [ 1224.407323][ T4142] netlink_sendmsg+0x6c0/0xb40 [ 1224.407348][ T4142] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1224.407368][ T4142] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1224.407391][ T4142] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1224.407417][ T4142] ____sys_sendmsg+0x972/0x9f0 [ 1224.407434][ T4142] ? __might_fault+0xaf/0x130 [ 1224.407459][ T4142] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1224.407484][ T4142] ? import_iovec+0x73/0xa0 [ 1224.407510][ T4142] ___sys_sendmsg+0x2a5/0x360 [ 1224.407524][ T4142] ? __lock_acquire+0x6b5/0x2cf0 [ 1224.407546][ T4142] ? __pfx____sys_sendmsg+0x10/0x10 [ 1224.407595][ T4142] ? __fget_files+0x2a/0x420 [ 1224.407613][ T4142] ? __fget_files+0x3a0/0x420 [ 1224.407641][ T4142] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1224.407660][ T4142] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1224.407685][ T4142] ? __pfx_ksys_write+0x10/0x10 [ 1224.407717][ T4142] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1224.407735][ T4142] do_syscall_64+0x15f/0xf80 [ 1224.407758][ T4142] ? trace_irq_disable+0x3b/0x140 [ 1224.407781][ T4142] ? clear_bhb_loop+0x40/0x90 [ 1224.407801][ T4142] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1224.407817][ T4142] RIP: 0033:0x7f9add99ce59 [ 1224.407834][ T4142] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1224.407847][ T4142] RSP: 002b:00007f9ade814028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1224.407867][ T4142] RAX: ffffffffffffffda RBX: 00007f9addc15fa0 RCX: 00007f9add99ce59 [ 1224.407879][ T4142] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003 [ 1224.407889][ T4142] RBP: 00007f9ade814090 R08: 0000000000000000 R09: 0000000000000000 [ 1224.407899][ T4142] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1224.407908][ T4142] R13: 00007f9addc16038 R14: 00007f9addc15fa0 R15: 00007ffe1f149468 [ 1224.407936][ T4142] [ 1224.547990][ T4135] vlan2: entered promiscuous mode [ 1224.727704][ T4135] gretap0: entered promiscuous mode [ 1224.886986][ T149] bond0: (slave bridge2): failed to get link speed/duplex [ 1225.166070][ T4159] __nla_validate_parse: 14 callbacks suppressed [ 1225.166095][ T4159] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9640'. [ 1225.191530][ T4161] FAULT_INJECTION: forcing a failure. [ 1225.191530][ T4161] name failslab, interval 1, probability 0, space 0, times 0 [ 1225.199595][ T4159] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9640'. [ 1225.217750][ T4161] CPU: 1 UID: 0 PID: 4161 Comm: syz.1.9641 Not tainted syzkaller #0 PREEMPT(full) [ 1225.217773][ T4161] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1225.217781][ T4161] Call Trace: [ 1225.217787][ T4161] [ 1225.217794][ T4161] dump_stack_lvl+0xe8/0x150 [ 1225.217825][ T4161] should_fail_ex+0x412/0x560 [ 1225.217846][ T4161] should_failslab+0xa8/0x100 [ 1225.217867][ T4161] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 1225.217885][ T4161] ? __alloc_skb+0x186/0x7d0 [ 1225.217903][ T4161] ? __alloc_skb+0x1d0/0x7d0 [ 1225.217917][ T4161] ? __local_bh_enable_ip+0xd0/0x130 [ 1225.217935][ T4161] __alloc_skb+0x1d0/0x7d0 [ 1225.217954][ T4161] netlink_sendmsg+0x5d4/0xb40 [ 1225.217976][ T4161] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1225.217991][ T4161] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1225.218009][ T4161] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1225.218029][ T4161] ____sys_sendmsg+0x972/0x9f0 [ 1225.218042][ T4161] ? __might_fault+0xaf/0x130 [ 1225.218063][ T4161] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1225.218082][ T4161] ? import_iovec+0x73/0xa0 [ 1225.218102][ T4161] ___sys_sendmsg+0x2a5/0x360 [ 1225.218113][ T4161] ? __lock_acquire+0x6b5/0x2cf0 [ 1225.218131][ T4161] ? __pfx____sys_sendmsg+0x10/0x10 [ 1225.218168][ T4161] ? __fget_files+0x2a/0x420 [ 1225.218183][ T4161] ? __fget_files+0x3a0/0x420 [ 1225.218204][ T4161] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1225.218219][ T4161] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1225.218237][ T4161] ? __pfx_ksys_write+0x10/0x10 [ 1225.218262][ T4161] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1225.218275][ T4161] do_syscall_64+0x15f/0xf80 [ 1225.218294][ T4161] ? trace_irq_disable+0x3b/0x140 [ 1225.218312][ T4161] ? clear_bhb_loop+0x40/0x90 [ 1225.218328][ T4161] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1225.218340][ T4161] RIP: 0033:0x7f9982d9ce59 [ 1225.218353][ T4161] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1225.218364][ T4161] RSP: 002b:00007f9980ff6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1225.218380][ T4161] RAX: ffffffffffffffda RBX: 00007f9983015fa0 RCX: 00007f9982d9ce59 [ 1225.218389][ T4161] RDX: 0000000020004018 RSI: 00002000000005c0 RDI: 0000000000000003 [ 1225.218397][ T4161] RBP: 00007f9980ff6090 R08: 0000000000000000 R09: 0000000000000000 [ 1225.218405][ T4161] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1225.218413][ T4161] R13: 00007f9983016038 R14: 00007f9983015fa0 R15: 00007ffc47a7d568 [ 1225.218433][ T4161] [ 1225.717200][T18257] bond0: (slave bridge2): failed to get link speed/duplex [ 1226.066637][T18257] bond0: (slave bridge2): failed to get link speed/duplex [ 1226.187130][T18230] bond0: (slave bridge2): failed to get link speed/duplex [ 1226.332663][ T4173] batadv0: entered promiscuous mode [ 1226.343268][ T4173] veth1_to_batadv: entered promiscuous mode [ 1226.352841][ T4173] debugfs: 'hsr1' already exists in 'hsr' [ 1226.363509][ T4173] Cannot create hsr debugfs directory [ 1226.370257][ T4173] hsr1: entered allmulticast mode [ 1226.376040][ T4173] batadv0: entered allmulticast mode [ 1226.385569][ T4173] veth1_to_batadv: entered allmulticast mode [ 1226.594749][ T4183] syzkaller0: entered promiscuous mode [ 1226.600737][ T4183] syzkaller0: entered allmulticast mode [ 1226.693474][ T4186] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9651'. [ 1226.716233][ T4186] vlan2: entered promiscuous mode [ 1226.875128][ T4125] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1227.208292][ T4205] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9656'. [ 1227.218773][ T4205] netlink: 40 bytes leftover after parsing attributes in process `syz.0.9656'. [ 1227.308046][ T4208] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9658'. [ 1227.330107][ T4208] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9658'. [ 1227.523481][ T4223] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9662'. [ 1227.639094][ T4223] netlink: 5000 bytes leftover after parsing attributes in process `syz.4.9662'. [ 1227.827772][T18257] net_ratelimit: 12 callbacks suppressed [ 1227.827794][T18257] bond0: (slave bridge2): failed to get link speed/duplex [ 1227.897412][ T4236] netlink: 332 bytes leftover after parsing attributes in process `syz.0.9668'. [ 1227.909158][ T4236] netlink: 'syz.0.9668': attribute type 9 has an invalid length. [ 1227.957225][T18224] bond0: (slave bridge2): failed to get link speed/duplex [ 1227.972237][ T4243] netlink: 'syz.0.9671': attribute type 18 has an invalid length. [ 1228.067296][T18257] bond0: (slave bridge2): failed to get link speed/duplex [ 1228.187277][ T149] bond0: (slave bridge2): failed to get link speed/duplex [ 1228.310493][ T149] bond0: (slave bridge2): failed to get link speed/duplex [ 1228.376046][ T4256] IPVS: Unknown mcast interface: bridge_slave_0 [ 1228.437512][T18257] bond0: (slave bridge2): failed to get link speed/duplex [ 1228.557116][ T149] bond0: (slave bridge2): failed to get link speed/duplex [ 1228.592493][ T4266] FAULT_INJECTION: forcing a failure. [ 1228.592493][ T4266] name failslab, interval 1, probability 0, space 0, times 0 [ 1228.617205][ T4266] CPU: 1 UID: 0 PID: 4266 Comm: syz.2.9681 Not tainted syzkaller #0 PREEMPT(full) [ 1228.617232][ T4266] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1228.617243][ T4266] Call Trace: [ 1228.617249][ T4266] [ 1228.617257][ T4266] dump_stack_lvl+0xe8/0x150 [ 1228.617282][ T4266] should_fail_ex+0x412/0x560 [ 1228.617307][ T4266] should_failslab+0xa8/0x100 [ 1228.617331][ T4266] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 1228.617350][ T4266] ? __alloc_skb+0x186/0x7d0 [ 1228.617372][ T4266] ? __alloc_skb+0x1d0/0x7d0 [ 1228.617391][ T4266] ? __local_bh_enable_ip+0xd0/0x130 [ 1228.617410][ T4266] __alloc_skb+0x1d0/0x7d0 [ 1228.617428][ T4266] ? bpf_lsm_socket_getpeersec_dgram+0x9/0x20 [ 1228.617458][ T4266] netlink_sendmsg+0x5d4/0xb40 [ 1228.617481][ T4266] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1228.617499][ T4266] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1228.617520][ T4266] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1228.617540][ T4266] ____sys_sendmsg+0x972/0x9f0 [ 1228.617555][ T4266] ? __might_fault+0xaf/0x130 [ 1228.617579][ T4266] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1228.617600][ T4266] ? import_iovec+0x73/0xa0 [ 1228.617625][ T4266] ___sys_sendmsg+0x2a5/0x360 [ 1228.617640][ T4266] ? __lock_acquire+0x6b5/0x2cf0 [ 1228.617660][ T4266] ? __pfx____sys_sendmsg+0x10/0x10 [ 1228.617703][ T4266] ? __fget_files+0x2a/0x420 [ 1228.617721][ T4266] ? __fget_files+0x3a0/0x420 [ 1228.617744][ T4266] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1228.617772][ T4266] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1228.617796][ T4266] ? __pfx_ksys_write+0x10/0x10 [ 1228.617828][ T4266] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1228.617846][ T4266] do_syscall_64+0x15f/0xf80 [ 1228.617869][ T4266] ? trace_irq_disable+0x3b/0x140 [ 1228.617892][ T4266] ? clear_bhb_loop+0x40/0x90 [ 1228.617912][ T4266] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1228.617929][ T4266] RIP: 0033:0x7f9add99ce59 [ 1228.617946][ T4266] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1228.617961][ T4266] RSP: 002b:00007f9ade814028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1228.617980][ T4266] RAX: ffffffffffffffda RBX: 00007f9addc15fa0 RCX: 00007f9add99ce59 [ 1228.617991][ T4266] RDX: 0000000000040044 RSI: 00002000000001c0 RDI: 0000000000000004 [ 1228.618002][ T4266] RBP: 00007f9ade814090 R08: 0000000000000000 R09: 0000000000000000 [ 1228.618010][ T4266] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1228.618019][ T4266] R13: 00007f9addc16038 R14: 00007f9addc15fa0 R15: 00007ffe1f149468 [ 1228.618046][ T4266] [ 1229.047628][ T4282] netlink: 'syz.2.9686': attribute type 15 has an invalid length. [ 1229.264148][ T4289] openvswitch: netlink: Flow key attr not present in new flow. [ 1229.457732][ T4282] IPVS: Error connecting to the multicast addr [ 1229.530238][T18230] bond0: (slave bridge2): failed to get link speed/duplex [ 1229.667045][T18248] bond0: (slave bridge2): failed to get link speed/duplex [ 1229.993998][ T4310] geneve1: entered promiscuous mode [ 1230.452799][ T4319] bridge1: entered promiscuous mode [ 1230.474455][ T4326] __nla_validate_parse: 11 callbacks suppressed [ 1230.474483][ T4326] netlink: 332 bytes leftover after parsing attributes in process `syz.3.9697'. [ 1230.532166][ T4319] bridge1: entered allmulticast mode [ 1230.609995][ T4319] team0: Port device bridge1 added [ 1230.633014][ T4326] netlink: 'syz.3.9697': attribute type 9 has an invalid length. [ 1230.699147][ T4326] netlink: 108 bytes leftover after parsing attributes in process `syz.3.9697'. [ 1230.713731][ T4326] netlink: 32 bytes leftover after parsing attributes in process `syz.3.9697'. [ 1230.951194][ T4325] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1231.073569][ T4325] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1231.116014][ T4336] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9700'. [ 1231.405167][ T4325] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1231.477579][ T4325] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1231.538429][ T4325] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 1231.631224][T18224] bridge0: port 2(bridge_slave_1) entered blocking state [ 1231.638749][T18224] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1231.738210][ T4348] netlink: 'syz.0.9704': attribute type 3 has an invalid length. [ 1232.210686][ T4364] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9709'. [ 1232.328997][ T4367] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9710'. [ 1232.504143][ T4364] macsec1: entered promiscuous mode [ 1232.528910][ T4364] macsec1: entered allmulticast mode [ 1232.955854][ T4350] netlink: 'syz.0.9704': attribute type 3 has an invalid length. [ 1233.215350][ T4367] vlan3: entered promiscuous mode [ 1233.293845][ T4367] gretap0: entered promiscuous mode [ 1233.413145][ T4383] FAULT_INJECTION: forcing a failure. [ 1233.413145][ T4383] name failslab, interval 1, probability 0, space 0, times 0 [ 1233.492626][ T4383] CPU: 0 UID: 0 PID: 4383 Comm: syz.2.9715 Not tainted syzkaller #0 PREEMPT(full) [ 1233.492653][ T4383] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1233.492663][ T4383] Call Trace: [ 1233.492671][ T4383] [ 1233.492680][ T4383] dump_stack_lvl+0xe8/0x150 [ 1233.492708][ T4383] should_fail_ex+0x412/0x560 [ 1233.492736][ T4383] should_failslab+0xa8/0x100 [ 1233.492763][ T4383] __kmalloc_cache_noprof+0x88/0x660 [ 1233.492787][ T4383] ? nldev_frmr_pools_set_doit+0xff/0x860 [ 1233.492818][ T4383] nldev_frmr_pools_set_doit+0xff/0x860 [ 1233.492842][ T4383] ? is_bpf_text_address+0x26/0x2b0 [ 1233.492863][ T4383] ? __pfx_nldev_frmr_pools_set_doit+0x10/0x10 [ 1233.492890][ T4383] ? __lock_acquire+0x6b5/0x2cf0 [ 1233.492915][ T4383] ? __lock_acquire+0x6b5/0x2cf0 [ 1233.492934][ T4383] ? __lock_acquire+0x6b5/0x2cf0 [ 1233.492957][ T4383] ? unwind_next_frame+0xa6/0x2550 [ 1233.492984][ T4383] ? unwind_next_frame+0xa6/0x2550 [ 1233.493005][ T4383] ? is_bpf_text_address+0x26/0x2b0 [ 1233.493033][ T4383] ? is_bpf_text_address+0x26/0x2b0 [ 1233.493054][ T4383] ? is_bpf_text_address+0x292/0x2b0 [ 1233.493069][ T4383] ? is_bpf_text_address+0x26/0x2b0 [ 1233.493090][ T4383] ? __lock_acquire+0x6b5/0x2cf0 [ 1233.493110][ T4383] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1233.493135][ T4383] ? arch_stack_walk+0xfb/0x150 [ 1233.493183][ T4383] ? apparmor_capable+0x126/0x170 [ 1233.493203][ T4383] ? bpf_lsm_capable+0x9/0x20 [ 1233.493219][ T4383] ? security_capable+0x7e/0x2c0 [ 1233.493241][ T4383] ? __pfx_nldev_frmr_pools_set_doit+0x10/0x10 [ 1233.493266][ T4383] rdma_nl_rcv+0x6d1/0xa10 [ 1233.493307][ T4383] ? __pfx_rdma_nl_rcv+0x10/0x10 [ 1233.493350][ T4383] ? netlink_deliver_tap+0x2e/0x1b0 [ 1233.493368][ T4383] ? netlink_deliver_tap+0x2e/0x1b0 [ 1233.493390][ T4383] netlink_unicast+0x75c/0x8e0 [ 1233.493425][ T4383] netlink_sendmsg+0x813/0xb40 [ 1233.493452][ T4383] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1233.493473][ T4383] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1233.493496][ T4383] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1233.493519][ T4383] ____sys_sendmsg+0x972/0x9f0 [ 1233.493537][ T4383] ? __might_fault+0xaf/0x130 [ 1233.493562][ T4383] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1233.493589][ T4383] ? import_iovec+0x73/0xa0 [ 1233.493616][ T4383] ___sys_sendmsg+0x2a5/0x360 [ 1233.493632][ T4383] ? __lock_acquire+0x6b5/0x2cf0 [ 1233.493657][ T4383] ? __pfx____sys_sendmsg+0x10/0x10 [ 1233.493705][ T4383] ? __fget_files+0x2a/0x420 [ 1233.493724][ T4383] ? __fget_files+0x3a0/0x420 [ 1233.493752][ T4383] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1233.493772][ T4383] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1233.493799][ T4383] ? __pfx_ksys_write+0x10/0x10 [ 1233.493831][ T4383] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1233.493849][ T4383] do_syscall_64+0x15f/0xf80 [ 1233.493873][ T4383] ? trace_irq_disable+0x3b/0x140 [ 1233.493897][ T4383] ? clear_bhb_loop+0x40/0x90 [ 1233.493918][ T4383] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1233.493935][ T4383] RIP: 0033:0x7f9add99ce59 [ 1233.493953][ T4383] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1233.493967][ T4383] RSP: 002b:00007f9ade814028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1233.493986][ T4383] RAX: ffffffffffffffda RBX: 00007f9addc15fa0 RCX: 00007f9add99ce59 [ 1233.493997][ T4383] RDX: 0000000020004018 RSI: 00002000000005c0 RDI: 0000000000000003 [ 1233.494008][ T4383] RBP: 00007f9ade814090 R08: 0000000000000000 R09: 0000000000000000 [ 1233.494018][ T4383] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1233.494027][ T4383] R13: 00007f9addc16038 R14: 00007f9addc15fa0 R15: 00007ffe1f149468 [ 1233.494057][ T4383] [ 1233.887814][T18250] net_ratelimit: 3 callbacks suppressed [ 1233.887839][T18250] bond0: (slave bridge2): failed to get link speed/duplex [ 1234.674722][ T149] bond0: (slave bridge2): failed to get link speed/duplex [ 1234.794885][ T4395] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9719'. [ 1234.838041][ T149] bond0: (slave bridge2): failed to get link speed/duplex [ 1234.963369][ T2837] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1234.978829][T18256] bond0: (slave bridge2): failed to get link speed/duplex [ 1235.021484][ T2837] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1235.055934][ T2837] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1235.096518][ T4399] x_tables: duplicate underflow at hook 1 [ 1235.134624][ T2837] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1235.150574][T18248] bond0: (slave bridge2): failed to get link speed/duplex [ 1235.229272][ T2837] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1235.462434][T18256] bond0: (slave bridge2): failed to get link speed/duplex [ 1235.593698][T18256] bond0: (slave bridge2): failed to get link speed/duplex [ 1235.731925][ T4416] syzkaller1: entered promiscuous mode [ 1235.759316][ T4416] syzkaller1: entered allmulticast mode [ 1235.797767][T18250] bond0: (slave bridge2): failed to get link speed/duplex [ 1235.884461][ T4422] netlink: 'syz.0.9727': attribute type 3 has an invalid length. [ 1236.141047][ T149] bond0: (slave bridge2): failed to get link speed/duplex [ 1236.185927][ T4428] netlink: 84 bytes leftover after parsing attributes in process `syz.2.9730'. [ 1236.231789][ T4428] netlink: 84 bytes leftover after parsing attributes in process `syz.2.9730'. [ 1236.309003][T18224] bond0: (slave bridge2): failed to get link speed/duplex [ 1236.337312][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1236.423308][ T4435] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9732'. [ 1236.461537][ T4434] netlink: 52 bytes leftover after parsing attributes in process `syz.1.9733'. [ 1236.502403][ T2837] Bluetooth: hci3: command 0x0405 tx timeout [ 1237.250098][ T4453] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9739'. [ 1237.346346][T26472] bond6: (slave syz_tun): Removing an active aggregator [ 1237.378254][T27239] Bluetooth: hci2: command tx timeout [ 1237.463036][ T4455] FAULT_INJECTION: forcing a failure. [ 1237.463036][ T4455] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1237.488717][ T4455] CPU: 1 UID: 0 PID: 4455 Comm: syz.1.9741 Not tainted syzkaller #0 PREEMPT(full) [ 1237.488745][ T4455] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1237.488756][ T4455] Call Trace: [ 1237.488764][ T4455] [ 1237.488771][ T4455] dump_stack_lvl+0xe8/0x150 [ 1237.488800][ T4455] should_fail_ex+0x412/0x560 [ 1237.488837][ T4455] _copy_from_user+0x2d/0xb0 [ 1237.488863][ T4455] ___sys_sendmsg+0x1c6/0x360 [ 1237.488881][ T4455] ? __lock_acquire+0x6b5/0x2cf0 [ 1237.488905][ T4455] ? __pfx____sys_sendmsg+0x10/0x10 [ 1237.488919][ T4455] ? __lock_acquire+0x6b5/0x2cf0 [ 1237.488945][ T4455] ? kstrtouint+0x6e/0xe0 [ 1237.489011][ T4455] __sys_sendmmsg+0x27c/0x4e0 [ 1237.489033][ T4455] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1237.489048][ T4455] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 1237.489102][ T4455] ? ksys_write+0x242/0x270 [ 1237.489128][ T4455] ? __pfx_ksys_write+0x10/0x10 [ 1237.489156][ T4455] __x64_sys_sendmmsg+0xa0/0xc0 [ 1237.489173][ T4455] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1237.489191][ T4455] do_syscall_64+0x15f/0xf80 [ 1237.489215][ T4455] ? clear_bhb_loop+0x40/0x90 [ 1237.489236][ T4455] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1237.489253][ T4455] RIP: 0033:0x7f9982d9ce59 [ 1237.489271][ T4455] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1237.489285][ T4455] RSP: 002b:00007f9980ff6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1237.489304][ T4455] RAX: ffffffffffffffda RBX: 00007f9983015fa0 RCX: 00007f9982d9ce59 [ 1237.489315][ T4455] RDX: 0000000004000190 RSI: 0000200000000180 RDI: 0000000000000003 [ 1237.489334][ T4455] RBP: 00007f9980ff6090 R08: 0000000000000000 R09: 0000000000000000 [ 1237.489344][ T4455] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1237.489358][ T4455] R13: 00007f9983016038 R14: 00007f9983015fa0 R15: 00007ffc47a7d568 [ 1237.489387][ T4455] [ 1237.582859][T26472] bond6: (slave syz_tun): Releasing backup interface [ 1238.142532][ T4469] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9744'. [ 1238.527263][ T4477] netlink: 'syz.0.9748': attribute type 32 has an invalid length. [ 1238.543045][ T4476] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9747'. [ 1238.578276][ T4477] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9748'. [ 1238.963879][ T4477] bond1: Setting coupled_control to off (0) [ 1239.038510][T18250] net_ratelimit: 11 callbacks suppressed [ 1239.038530][T18250] bond0: (slave bridge2): failed to get link speed/duplex [ 1239.145758][ T4497] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9753'. [ 1239.242937][ T4497] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1239.428540][ T149] bond0: (slave bridge2): failed to get link speed/duplex [ 1239.460377][T27239] Bluetooth: hci2: command tx timeout [ 1239.911220][ T4507] bond1: (slave wireguard0): refused to change device type [ 1240.047597][T18248] bond0: (slave bridge2): failed to get link speed/duplex [ 1240.153612][ T4514] netlink: 'syz.0.9758': attribute type 1 has an invalid length. [ 1240.417056][ T4514] bond2: entered promiscuous mode [ 1240.441398][ T4524] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9760'. [ 1240.454073][ T4514] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1240.660322][ T4519] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1240.680405][ T4519] bond2: (slave vti0): The slave device specified does not support setting the MAC address [ 1240.697934][ T4531] FAULT_INJECTION: forcing a failure. [ 1240.697934][ T4531] name failslab, interval 1, probability 0, space 0, times 0 [ 1240.732738][ T4519] bond2: (slave vti0): Setting fail_over_mac to active for active-backup mode [ 1240.746038][ T4531] CPU: 1 UID: 0 PID: 4531 Comm: syz.2.9762 Not tainted syzkaller #0 PREEMPT(full) [ 1240.746066][ T4531] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1240.746077][ T4531] Call Trace: [ 1240.746085][ T4531] [ 1240.746093][ T4531] dump_stack_lvl+0xe8/0x150 [ 1240.746122][ T4531] should_fail_ex+0x412/0x560 [ 1240.746150][ T4531] should_failslab+0xa8/0x100 [ 1240.746179][ T4531] __kmalloc_node_track_caller_noprof+0xeb/0x7b0 [ 1240.746206][ T4531] ? llcp_sock_bind+0x392/0x780 [ 1240.746236][ T4531] kmemdup_noprof+0x2b/0x70 [ 1240.746256][ T4531] llcp_sock_bind+0x392/0x780 [ 1240.746288][ T4531] ? __pfx_llcp_sock_bind+0x10/0x10 [ 1240.746319][ T4531] ? apparmor_socket_bind+0xff/0x1d0 [ 1240.746342][ T4531] ? bpf_lsm_socket_bind+0x9/0x20 [ 1240.746367][ T4531] __sys_bind+0x2e3/0x410 [ 1240.746393][ T4531] ? __pfx___sys_bind+0x10/0x10 [ 1240.746426][ T4531] ? __pfx_ksys_write+0x10/0x10 [ 1240.746453][ T4531] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1240.746472][ T4531] __x64_sys_bind+0x7a/0x90 [ 1240.746503][ T4531] do_syscall_64+0x15f/0xf80 [ 1240.746526][ T4531] ? trace_irq_disable+0x3b/0x140 [ 1240.746549][ T4531] ? clear_bhb_loop+0x40/0x90 [ 1240.746570][ T4531] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1240.746586][ T4531] RIP: 0033:0x7f9add99ce59 [ 1240.746604][ T4531] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1240.746618][ T4531] RSP: 002b:00007f9ade814028 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 1240.746637][ T4531] RAX: ffffffffffffffda RBX: 00007f9addc15fa0 RCX: 00007f9add99ce59 [ 1240.746648][ T4531] RDX: 0000000000000060 RSI: 0000200000001040 RDI: 0000000000000006 [ 1240.746659][ T4531] RBP: 00007f9ade814090 R08: 0000000000000000 R09: 0000000000000000 [ 1240.746669][ T4531] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1240.746678][ T4531] R13: 00007f9addc16038 R14: 00007f9addc15fa0 R15: 00007ffe1f149468 [ 1240.746707][ T4531] [ 1240.982271][ T4533] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1241.032701][ T4519] bond2: (slave vti0): making interface the new active one [ 1241.040665][ T4519] vti0: entered promiscuous mode [ 1241.050622][ T4519] bond2: (slave vti0): Enslaving as an active interface with an up link [ 1241.107226][T18250] bond0: (slave bridge2): failed to get link speed/duplex [ 1241.162773][ T4538] syzkaller0: entered promiscuous mode [ 1241.168594][ T4538] syzkaller0: entered allmulticast mode [ 1241.179011][ T4538] netlink: 'syz.1.9765': attribute type 4 has an invalid length. [ 1241.229849][T18250] bond0: (slave bridge2): failed to get link speed/duplex [ 1241.268130][ T4541] netlink: 'syz.0.9764': attribute type 3 has an invalid length. [ 1241.540001][T27239] Bluetooth: hci2: command tx timeout [ 1241.607292][T18230] bond0: (slave bridge2): failed to get link speed/duplex [ 1241.811542][ T4550] netlink: 84 bytes leftover after parsing attributes in process `syz.2.9768'. [ 1241.824775][ T4550] netlink: 84 bytes leftover after parsing attributes in process `syz.2.9768'. [ 1241.858016][ T149] bond0: (slave bridge2): failed to get link speed/duplex [ 1242.415720][ T4560] netlink: 'syz.2.9770': attribute type 13 has an invalid length. [ 1242.450763][ T4560] netlink: 'syz.2.9770': attribute type 17 has an invalid length. [ 1242.517505][ T149] bond0: (slave bridge2): failed to get link speed/duplex [ 1242.582026][ T4560] gretap0: refused to change device tx_queue_len [ 1242.687401][ T4560] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 1242.729146][ T4391] bridge0: port 1(bridge_slave_0) entered blocking state [ 1242.781218][ T4391] bridge0: port 1(bridge_slave_0) entered disabled state [ 1242.843135][ T4391] bridge_slave_0: entered allmulticast mode [ 1242.883244][ T4391] bridge_slave_0: entered promiscuous mode [ 1242.975607][ T4573] netlink: 'syz.0.9774': attribute type 1 has an invalid length. [ 1242.993524][ T4562] netlink: 'syz.2.9770': attribute type 1 has an invalid length. [ 1243.020570][ T4562] netlink: 'syz.2.9770': attribute type 2 has an invalid length. [ 1243.081986][ T4391] bridge0: port 2(bridge_slave_1) entered blocking state [ 1243.135268][ T4391] bridge0: port 2(bridge_slave_1) entered disabled state [ 1243.170048][ T4391] bridge_slave_1: entered allmulticast mode [ 1243.213067][ T4391] bridge_slave_1: entered promiscuous mode [ 1243.272115][ T4562] netlink: 'syz.2.9770': attribute type 1 has an invalid length. [ 1243.590774][ T4583] netlink: 120 bytes leftover after parsing attributes in process `syz.1.9775'. [ 1243.628514][T27239] Bluetooth: hci2: command tx timeout [ 1243.790480][ T4391] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1243.865564][ T4391] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1244.036129][ T4391] team0: Port device team_slave_0 added [ 1244.099002][T18230] net_ratelimit: 1 callbacks suppressed [ 1244.099026][T18230] bond0: (slave bridge2): failed to get link speed/duplex [ 1244.122538][ T4599] validate_nla: 1 callbacks suppressed [ 1244.122561][ T4599] netlink: 'syz.0.9778': attribute type 1 has an invalid length. [ 1244.176010][ T4391] team0: Port device team_slave_1 added [ 1244.192503][ T4599] netlink: 412 bytes leftover after parsing attributes in process `syz.0.9778'. [ 1244.310936][ T4604] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.9780'. [ 1244.354762][ T4391] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1244.395914][ T4391] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1244.502776][ T4391] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1244.539660][ T4391] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1244.563769][ T4391] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1244.621899][ T4613] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9782'. [ 1244.633573][ T4391] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1244.785258][ T4616] netlink: 1752 bytes leftover after parsing attributes in process `syz.0.9781'. [ 1244.809428][ T4613] vlan2: entered promiscuous mode [ 1245.165774][ T4621] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 1245.624780][ T4391] hsr_slave_0: entered promiscuous mode [ 1245.673063][ T4391] hsr_slave_1: entered promiscuous mode [ 1245.694415][ T4391] debugfs: 'hsr0' already exists in 'hsr' [ 1245.725031][ T4391] Cannot create hsr debugfs directory [ 1245.851284][ T4635] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9790'. [ 1245.899658][ T4633] syzkaller0: entered promiscuous mode [ 1245.924757][ T4633] syzkaller0: entered allmulticast mode [ 1246.239143][ T4646] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9791'. [ 1246.343052][T18251] bond0: (slave bridge2): failed to get link speed/duplex [ 1247.027682][ T149] bond0: (slave bridge2): failed to get link speed/duplex [ 1247.220701][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1247.370345][ T4661] xt_policy: output policy not valid in PREROUTING and INPUT [ 1247.399628][ T4664] netlink: 332 bytes leftover after parsing attributes in process `syz.2.9794'. [ 1247.466085][ T4664] netlink: 'syz.2.9794': attribute type 9 has an invalid length. [ 1247.490429][T18248] bond0: (slave bridge2): failed to get link speed/duplex [ 1247.530332][ T4664] netlink: 108 bytes leftover after parsing attributes in process `syz.2.9794'. [ 1247.674020][ T4664] netlink: 32 bytes leftover after parsing attributes in process `syz.2.9794'. [ 1251.496893][ C0] sched: DL replenish lagged too much [ 1260.017588][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1266.423001][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1273.991487][T27239] Bluetooth: hci1: command 0x0419 tx timeout [ 1284.892916][ T7981] bond0: (slave bridge2): failed to get link speed/duplex [ 1285.543860][ T7981] bond0: (slave bridge2): failed to get link speed/duplex [ 1285.698305][ T7981] bond0: (slave bridge2): failed to get link speed/duplex [ 1285.909581][ T7981] bond0: (slave bridge2): failed to get link speed/duplex [ 1286.130392][ T7981] bond0: (slave bridge2): failed to get link speed/duplex [ 1286.444611][ T7981] bond0: (slave bridge2): failed to get link speed/duplex [ 1286.868349][ T7981] bond0: (slave bridge2): failed to get link speed/duplex [ 1287.160250][ T7981] bond0: (slave bridge2): failed to get link speed/duplex [ 1287.527359][ T7981] bond0: (slave bridge2): failed to get link speed/duplex [ 1287.779763][ T7981] bond0: (slave bridge2): failed to get link speed/duplex [ 1289.962501][ T7981] net_ratelimit: 4 callbacks suppressed [ 1289.962528][ T7981] bond0: (slave bridge2): failed to get link speed/duplex [ 1290.460172][ T7981] bond0: (slave bridge2): failed to get link speed/duplex [ 1291.062043][ T7981] bond0: (slave bridge2): failed to get link speed/duplex [ 1293.330861][ T7981] bond0: (slave bridge2): failed to get link speed/duplex [ 1293.478721][ T7981] bond0: (slave bridge2): failed to get link speed/duplex [ 1293.697086][ T7981] bond0: (slave bridge2): failed to get link speed/duplex [ 1294.131584][ T7981] bond0: (slave bridge2): failed to get link speed/duplex [ 1306.098522][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1309.529440][T27239] Bluetooth: hci0: command 0x0406 tx timeout [ 1316.339106][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1326.580246][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1408.246794][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 1408.254067][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P4661 [ 1408.262961][ C1] rcu: (detected by 1, t=10503 jiffies, g=210789, q=2517 ncpus=2) [ 1408.271160][ C1] task:syz.0.9795 state:R running task stack:25920 pid:4661 tgid:4659 ppid:2822 task_flags:0x400140 flags:0x00080002 [ 1408.287547][ C1] Call Trace: [ 1408.291040][ C1] [ 1408.294019][ C1] sched_show_task+0x4aa/0x5f0 [ 1408.298988][ C1] ? __pfx_sched_show_task+0x10/0x10 [ 1408.304307][ C1] ? rcu_dump_cpu_stacks+0x79/0x4e0 [ 1408.309897][ C1] ? wq_watchdog_touch+0xf9/0x160 [ 1408.315059][ C1] print_other_cpu_stall+0xfcc/0x1380 [ 1408.320737][ C1] ? __pfx_print_other_cpu_stall+0x10/0x10 [ 1408.326844][ C1] ? __pfx_css_rstat_updated+0x10/0x10 [ 1408.332356][ C1] rcu_sched_clock_irq+0x939/0x1050 [ 1408.337885][ C1] update_process_times+0x23b/0x2f0 [ 1408.343381][ C1] tick_nohz_handler+0x42b/0x770 [ 1408.348363][ C1] ? __pfx_tick_nohz_handler+0x10/0x10 [ 1408.354288][ C1] ? __pfx_tick_nohz_handler+0x10/0x10 [ 1408.359778][ C1] ? do_raw_spin_unlock+0xf5/0x210 [ 1408.365118][ C1] ? __pfx_tick_nohz_handler+0x10/0x10 [ 1408.370859][ C1] __hrtimer_run_queues+0x375/0xa20 [ 1408.376386][ C1] hrtimer_interrupt+0x44b/0x950 [ 1408.381654][ C1] __sysvec_apic_timer_interrupt+0x102/0x430 [ 1408.388241][ C1] sysvec_apic_timer_interrupt+0x52/0xc0 [ 1408.394356][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1408.400807][ C1] RIP: 0010:lock_acquire+0x221/0x350 [ 1408.406822][ C1] Code: ff ff ff e8 f1 ad 08 0a f7 44 24 08 00 02 00 00 0f 84 3a ff ff ff 65 48 8b 05 db a8 98 11 48 3b 44 24 58 75 33 fb 48 83 c4 60 <5b> 41 5c 41 5d 41 5e 41 5f 5d e9 40 a1 0b 0a cc 48 8d 3d c8 c4 92 [ 1408.427715][ C1] RSP: 0018:ffffc90000a07e18 EFLAGS: 00000286 [ 1408.434073][ C1] RAX: 92c0e1219d231800 RBX: 0000000000000000 RCX: 0000000080000101 [ 1408.442681][ C1] RDX: 000000007f45ee1d RSI: ffffffff8e2250b9 RDI: ffffffff8c28afe0 [ 1408.451375][ C1] RBP: ffffffff8176f256 R08: ffffffff8176f256 R09: ffffffff8e95cda0 [ 1408.459981][ C1] R10: ffffc90000a07fd8 R11: fffff52000140ffd R12: 0000000000000002 [ 1408.468187][ C1] R13: ffffffff8e95cda0 R14: 0000000000000000 R15: 0000000000000246 [ 1408.476988][ C1] ? unwind_next_frame+0xa6/0x2550 [ 1408.483023][ C1] ? unwind_next_frame+0xa6/0x2550 [ 1408.488761][ C1] ? arch_stack_walk+0xe3/0x150 [ 1408.494190][ C1] ? unwind_next_frame+0xa6/0x2550 [ 1408.499950][ C1] unwind_next_frame+0xc3/0x2550 [ 1408.505021][ C1] ? unwind_next_frame+0xa6/0x2550 [ 1408.510386][ C1] ? unwind_next_frame+0xa6/0x2550 [ 1408.515898][ C1] ? __unwind_start+0xf7/0x760 [ 1408.521155][ C1] __unwind_start+0x5b8/0x760 [ 1408.526144][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1408.532637][ C1] arch_stack_walk+0xe3/0x150 [ 1408.537630][ C1] ? arch_stack_walk+0xe3/0x150 [ 1408.542611][ C1] stack_trace_save+0xa9/0x100 [ 1408.547423][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 1408.552831][ C1] ? kfree+0x1c5/0x640 [ 1408.557028][ C1] ? nft_synproxy_do_eval+0x3ce/0x580 [ 1408.562520][ C1] ? nft_do_chain+0x48d/0x1ae0 [ 1408.567412][ C1] ? nft_do_chain_inet+0x360/0x4b0 [ 1408.572828][ C1] ? nf_hook_slow+0xc5/0x220 [ 1408.578155][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 1408.583304][ C1] kasan_save_track+0x3e/0x80 [ 1408.588338][ C1] ? nft_synproxy_eval_v6+0x352/0x4e0 [ 1408.594030][ C1] kasan_save_free_info+0x46/0x50 [ 1408.599360][ C1] __kasan_slab_free+0x5c/0x80 [ 1408.604159][ C1] kmem_cache_free+0x182/0x650 [ 1408.609397][ C1] nft_synproxy_eval_v6+0x352/0x4e0 [ 1408.615067][ C1] ? __pfx_nft_synproxy_eval_v6+0x10/0x10 [ 1408.622083][ C1] ? nf_ip_checksum+0x13c/0x510 [ 1408.627260][ C1] nft_synproxy_do_eval+0x3ce/0x580 [ 1408.632696][ C1] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 1408.638664][ C1] ? perf_event_task_tick+0x12a/0x390 [ 1408.644100][ C1] nft_do_chain+0x48d/0x1ae0 [ 1408.649084][ C1] ? __local_bh_enable_ip+0xd0/0x130 [ 1408.654622][ C1] ? __pfx_nft_do_chain+0x10/0x10 [ 1408.660210][ C1] nft_do_chain_inet+0x360/0x4b0 [ 1408.665239][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 1408.670951][ C1] ? nf_nat_ipv6_local_in+0x157/0x660 [ 1408.676577][ C1] ? __pfx_nf_nat_ipv6_local_in+0x10/0x10 [ 1408.682340][ C1] ? lock_acquire+0x106/0x350 [ 1408.687260][ C1] ? NF_HOOK+0x9e/0x3c0 [ 1408.691592][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 1408.697206][ C1] nf_hook_slow+0xc5/0x220 [ 1408.701722][ C1] NF_HOOK+0x21f/0x3c0 [ 1408.705861][ C1] ? __pfx_ip6_input_finish+0x10/0x10 [ 1408.711447][ C1] ? NF_HOOK+0x9e/0x3c0 [ 1408.715801][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 1408.720569][ C1] ? __pfx_ip6_input_finish+0x10/0x10 [ 1408.726234][ C1] ip6_input+0x16a/0x270 [ 1408.731335][ C1] ? ip6_input+0x23/0x270 [ 1408.735774][ C1] NF_HOOK+0x336/0x3c0 [ 1408.739859][ C1] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 1408.745126][ C1] ? NF_HOOK+0x9e/0x3c0 [ 1408.749686][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 1408.754478][ C1] ? __pfx_ip6_rcv_finish+0x10/0x10 [ 1408.760648][ C1] ? process_backlog+0x3eb/0x1950 [ 1408.766069][ C1] process_backlog+0x7dd/0x1950 [ 1408.771614][ C1] __napi_poll+0xae/0x340 [ 1408.776654][ C1] ? skb_defer_free_flush+0x233/0x260 [ 1408.782054][ C1] net_rx_action+0x627/0xf70 [ 1408.786933][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 1408.792158][ C1] ? try_to_wake_up+0x7f2/0x1380 [ 1408.797303][ C1] handle_softirqs+0x22a/0x840 [ 1408.802386][ C1] ? do_softirq+0x76/0xd0 [ 1408.806883][ C1] ? cfg80211_mlme_unregister_socket+0x2ce/0x690 [ 1408.813417][ C1] do_softirq+0x76/0xd0 [ 1408.817740][ C1] [ 1408.820851][ C1] [ 1408.823799][ C1] __local_bh_enable_ip+0xf8/0x130 [ 1408.829080][ C1] cfg80211_mlme_unregister_socket+0x2ce/0x690 [ 1408.835763][ C1] ? __local_bh_enable_ip+0xd0/0x130 [ 1408.841556][ C1] nl80211_netlink_notify+0x356/0x840 [ 1408.847296][ C1] ? nl80211_netlink_notify+0x74/0x840 [ 1408.853220][ C1] notifier_call_chain+0x1ad/0x3d0 [ 1408.858371][ C1] blocking_notifier_call_chain+0x6a/0x90 [ 1408.864654][ C1] netlink_release+0x123b/0x1ad0 [ 1408.870053][ C1] ? netlink_release+0x101/0x1ad0 [ 1408.875687][ C1] ? __pfx_netlink_release+0x10/0x10 [ 1408.881095][ C1] ? down_write+0x16d/0x200 [ 1408.885640][ C1] ? __pfx_down_write+0x10/0x10 [ 1408.890582][ C1] ? locks_remove_posix+0x14f/0x6a0 [ 1408.895971][ C1] sock_close+0xc3/0x240 [ 1408.900663][ C1] ? __pfx_sock_close+0x10/0x10 [ 1408.905671][ C1] __fput+0x44f/0xa60 [ 1408.909648][ C1] fput_close_sync+0x11f/0x240 [ 1408.914398][ C1] ? __pfx_fput_close_sync+0x10/0x10 [ 1408.919973][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1408.926382][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1408.932551][ C1] __x64_sys_close+0x7e/0x110 [ 1408.937242][ C1] do_syscall_64+0x15f/0xf80 [ 1408.941943][ C1] ? trace_irq_disable+0x3b/0x140 [ 1408.947140][ C1] ? clear_bhb_loop+0x40/0x90 [ 1408.951894][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1408.958035][ C1] RIP: 0033:0x7f657ed5d68e [ 1408.962635][ C1] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1408.982889][ C1] RSP: 002b:00007f657cff4f38 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 1408.991840][ C1] RAX: ffffffffffffffda RBX: 00007f657cff66c0 RCX: 00007f657ed5d68e [ 1408.999970][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000008 [ 1409.008013][ C1] RBP: 0000000000000008 R08: 0000000000000000 R09: 0000000000000000 [ 1409.016060][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1409.024406][ C1] R13: 00007f657f016038 R14: 00007f657f015fa0 R15: 00007ffd19aad088 [ 1409.032484][ C1] [ 1409.035707][ C1] rcu: rcu_preempt kthread starved for 1064 jiffies! g210789 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 1409.047358][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 1409.057973][ C1] rcu: RCU grace-period kthread stack dump: [ 1409.064326][ C1] task:rcu_preempt state:R running task stack:27328 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 1409.078656][ C1] Call Trace: [ 1409.082343][ C1] [ 1409.085316][ C1] __schedule+0x1821/0x5740 [ 1409.090202][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 1409.095293][ C1] ? __pfx___schedule+0x10/0x10 [ 1409.100185][ C1] ? schedule+0x90/0x360 [ 1409.104459][ C1] schedule+0x164/0x360 [ 1409.108733][ C1] schedule_timeout+0x158/0x2c0 [ 1409.113712][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 1409.119291][ C1] ? __pfx_process_timeout+0x10/0x10 [ 1409.124793][ C1] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1409.131196][ C1] ? prepare_to_swait_event+0x340/0x370 [ 1409.137245][ C1] rcu_gp_fqs_loop+0x312/0x11d0 [ 1409.142141][ C1] ? lockdep_hardirqs_on+0x7a/0x110 [ 1409.147472][ C1] ? rcu_gp_init+0x1315/0x15b0 [ 1409.152554][ C1] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 1409.158921][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 1409.164521][ C1] ? _raw_spin_unlock_irq+0x2e/0x50 [ 1409.169770][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1409.175789][ C1] rcu_gp_kthread+0x9e/0x2b0 [ 1409.180496][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1409.185723][ C1] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1409.191566][ C1] ? __kthread_parkme+0x7a/0x1f0 [ 1409.196975][ C1] ? __kthread_parkme+0x19c/0x1f0 [ 1409.202308][ C1] kthread+0x389/0x470 [ 1409.206609][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1409.212157][ C1] ? __pfx_kthread+0x10/0x10 [ 1409.217136][ C1] ret_from_fork+0x514/0xb70 [ 1409.221949][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 1409.227569][ C1] ? __switch_to+0xc79/0x1410 [ 1409.232556][ C1] ? __pfx_kthread+0x10/0x10 [ 1409.237274][ C1] ret_from_fork_asm+0x1a/0x30 [ 1409.242185][ C1] [ 1409.245569][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 1409.252643][ C1] Sending NMI from CPU 1 to CPUs 0: [ 1409.258549][ C0] NMI backtrace for cpu 0 [ 1409.258574][ C0] CPU: 0 UID: 0 PID: 18248 Comm: kworker/u8:37 Not tainted syzkaller #0 PREEMPT(full) [ 1409.258594][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 1409.258606][ C0] Workqueue: events_unbound cfg80211_wiphy_work [ 1409.258640][ C0] RIP: 0010:__sanitizer_cov_trace_cmp4+0x8/0x90 [ 1409.258666][ C0] Code: 89 44 11 20 e9 99 92 e7 09 cc 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 8b 04 24 <65> 48 8b 15 d8 99 74 11 65 8b 0d f9 99 74 11 81 e1 00 01 ff 00 74 [ 1409.258681][ C0] RSP: 0018:ffffc90000006eb8 EFLAGS: 00000246 [ 1409.258694][ C0] RAX: ffffffff8a3a8383 RBX: ffff88807af5a970 RCX: 0000000000000100 [ 1409.258706][ C0] RDX: ffff888025a0bd80 RSI: 0000000000000000 RDI: 0000000000000000 [ 1409.258717][ C0] RBP: ffffc900000070a0 R08: ffff88807af5a800 R09: 0000000000000000 [ 1409.258728][ C0] R10: ffffc90000007000 R11: fffff52000000e04 R12: 0000000000000000 [ 1409.258739][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: dffffc0000000000 [ 1409.258750][ C0] FS: 0000000000000000(0000) GS:ffff88812527a000(0000) knlGS:0000000000000000 [ 1409.258763][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1409.258774][ C0] CR2: 000056479fcb76d8 CR3: 0000000034972000 CR4: 00000000003526f0 [ 1409.258789][ C0] Call Trace: [ 1409.258796][ C0] [ 1409.258802][ C0] ipt_do_table+0x593/0x1630 [ 1409.258833][ C0] ? ipt_do_table+0x2b2/0x1630 [ 1409.258848][ C0] ? __pfx_ipt_do_table+0x10/0x10 [ 1409.258866][ C0] ? nf_nat_ipv4_local_fn+0x3f1/0x540 [ 1409.258883][ C0] ? __pfx_ipt_do_table+0x10/0x10 [ 1409.258897][ C0] nf_hook_slow+0xc5/0x220 [ 1409.258917][ C0] ? __pfx_dst_output+0x10/0x10 [ 1409.258938][ C0] nf_hook+0x22a/0x3a0 [ 1409.258959][ C0] ? nf_hook+0xa1/0x3a0 [ 1409.258977][ C0] ? __pfx_nf_hook+0x10/0x10 [ 1409.258995][ C0] ? __ip_local_out+0x152/0x6a0 [ 1409.259015][ C0] ? __pfx_dst_output+0x10/0x10 [ 1409.259037][ C0] ? __ip_local_out+0x152/0x6a0 [ 1409.259057][ C0] __ip_local_out+0x558/0x6a0 [ 1409.259076][ C0] ? __pfx_dst_output+0x10/0x10 [ 1409.259097][ C0] ip_local_out+0x2a/0x190 [ 1409.259118][ C0] synproxy_send_client_synack+0x8c1/0xe30 [ 1409.259145][ C0] ? __pfx_synproxy_send_client_synack+0x10/0x10 [ 1409.259164][ C0] ? nft_xfrm_state_get_key+0x348/0x570 [ 1409.259185][ C0] ? synproxy_pernet+0x45/0x270 [ 1409.259208][ C0] nft_synproxy_eval_v4+0x34a/0x4e0 [ 1409.259232][ C0] ? __pfx_nft_synproxy_eval_v4+0x10/0x10 [ 1409.259253][ C0] ? nf_ip_checksum+0x13c/0x510 [ 1409.259277][ C0] nft_synproxy_do_eval+0x305/0x580 [ 1409.259310][ C0] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 1409.259333][ C0] ? perf_event_task_tick+0x12a/0x390 [ 1409.259363][ C0] nft_do_chain+0x48d/0x1ae0 [ 1409.259391][ C0] ? __pfx_nft_do_chain+0x10/0x10 [ 1409.259415][ C0] ? ipt_do_table+0x2b2/0x1630 [ 1409.259435][ C0] ? nf_nat_inet_fn+0x95b/0xbf0 [ 1409.259465][ C0] nft_do_chain_inet+0x360/0x4b0 [ 1409.259488][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 1409.259508][ C0] ? ipt_do_table+0x2b2/0x1630 [ 1409.259524][ C0] ? nf_nat_ipv4_local_in+0x223/0x720 [ 1409.259542][ C0] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 1409.259563][ C0] nf_hook_slow+0xc5/0x220 [ 1409.259583][ C0] NF_HOOK+0x21f/0x3c0 [ 1409.259599][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 1409.259616][ C0] ? NF_HOOK+0x9e/0x3c0 [ 1409.259631][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 1409.259645][ C0] ? ip_rcv_finish_core+0xda3/0x1c00 [ 1409.259662][ C0] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 1409.259682][ C0] ? ip_local_deliver+0x12a/0x1b0 [ 1409.259700][ C0] NF_HOOK+0x336/0x3c0 [ 1409.259716][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 1409.259732][ C0] ? NF_HOOK+0x9e/0x3c0 [ 1409.259747][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 1409.259763][ C0] ? __pfx_ip_rcv_finish+0x10/0x10 [ 1409.259782][ C0] ? __pfx_ip_rcv+0x10/0x10 [ 1409.259797][ C0] ? __pfx_ip_rcv+0x10/0x10 [ 1409.259812][ C0] ? process_backlog+0x3eb/0x1950 [ 1409.259833][ C0] process_backlog+0xaa3/0x1950 [ 1409.259864][ C0] __napi_poll+0xae/0x340 [ 1409.259882][ C0] ? skb_defer_free_flush+0x233/0x260 [ 1409.259903][ C0] net_rx_action+0x627/0xf70 [ 1409.259923][ C0] ? _raw_spin_unlock_irq+0x2e/0x50 [ 1409.259950][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 1409.259980][ C0] ? try_to_wake_up+0x7f2/0x1380 [ 1409.260008][ C0] handle_softirqs+0x22a/0x840 [ 1409.260027][ C0] ? do_softirq+0x76/0xd0 [ 1409.260044][ C0] ? ieee80211_ibss_rx_queued_mgmt+0x1ac7/0x2cb0 [ 1409.260071][ C0] do_softirq+0x76/0xd0 [ 1409.260085][ C0] [ 1409.260091][ C0] [ 1409.260097][ C0] __local_bh_enable_ip+0xf8/0x130 [ 1409.260112][ C0] ieee80211_ibss_rx_queued_mgmt+0x1ac7/0x2cb0 [ 1409.260142][ C0] ? kthread+0x389/0x470 [ 1409.260164][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 1409.260181][ C0] ? ieee80211_ibss_rx_queued_mgmt+0xf0f/0x2cb0 [ 1409.260205][ C0] ? __pfx_ieee80211_ibss_rx_queued_mgmt+0x10/0x10 [ 1409.260241][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 1409.260269][ C0] ? kcov_remote_start+0x17f/0x7a0 [ 1409.260304][ C0] ieee80211_iface_work+0x78b/0x1020 [ 1409.260326][ C0] cfg80211_wiphy_work+0x2cf/0x460 [ 1409.260347][ C0] ? process_scheduled_works+0xa70/0x1860 [ 1409.260365][ C0] process_scheduled_works+0xb5d/0x1860 [ 1409.260395][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 1409.260415][ C0] ? assign_work+0x3d5/0x5e0 [ 1409.260438][ C0] worker_thread+0xa53/0xfc0 [ 1409.260468][ C0] kthread+0x389/0x470 [ 1409.260487][ C0] ? __pfx_worker_thread+0x10/0x10 [ 1409.260503][ C0] ? __pfx_kthread+0x10/0x10 [ 1409.260521][ C0] ret_from_fork+0x514/0xb70 [ 1409.260540][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1409.260556][ C0] ? __switch_to+0xc79/0x1410 [ 1409.260581][ C0] ? __pfx_kthread+0x10/0x10 [ 1409.260601][ C0] ret_from_fork_asm+0x1a/0x30 [ 1409.260629][ C0]