last executing test programs: 5.556119752s ago: executing program 3 (id=4175): r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, 0x0, 0x20000004) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[], 0x48) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x18, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_80211_join_ibss(0x0, &(0x7f0000000340)=@default_ap_ssid, 0x6, 0x2) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_80211_join_ibss(&(0x7f0000000240)='wlan1\x00', 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r4, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="01002bbd7000fbdbdf252100000008000300", @ANYRES32=r5, @ANYBLOB="a29e73ad41643e104c916fc966749fbe53227e574a2747cd768dd00ea0f4bf493714345f419df629886bf0a13a97f5e34c109ae7c649a050ea4d3ea43961a6007c1674e79a267d"], 0x1c}, 0x1, 0x0, 0x0, 0x24004084}, 0x40000) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20\x00'}, 0x58) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="3000000040000701feffffff00000000017c0000040042801400018006001700800a0000080018", @ANYRES32=0x0, @ANYBLOB="040002"], 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000780)=@bpf_lsm={0x18, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x5, 0xb9, &(0x7f00000002c0)=""/185, 0x0, 0x1, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xa1}, 0x94) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="b7f2288d3aaea2bc0000def1260a00000000", 0x12) r9 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$IP_VS_SO_GET_VERSION(r9, 0x0, 0xd, 0x0, &(0x7f0000001bc0)) r10 = accept(r0, 0x0, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f00000013c0), r10) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r10, 0x89fb, &(0x7f0000000040)={'sit0\x00', &(0x7f0000000000)={@mcast1, @local, 0x1a, 0x5}}) 5.209998363s ago: executing program 3 (id=4179): r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x18, &(0x7f00000003c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x88f, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffc}, {0x85, 0x0, 0x0, 0x86}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x80000000}}, [@printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}}, @jmp={0x5, 0x0, 0x1, 0x0, 0x0, 0xfffffffffffffff4, 0xfffffffffffffff0}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0xa, 0xffe, &(0x7f0000000cc0)=""/4094, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffb}, 0x94) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000007500)=ANY=[@ANYBLOB="300000003e0007012bbd700000000000017c00000400fc800d0001806d14ff350800028004003a000000000000000000"], 0x30}, 0x1, 0x0, 0x0, 0xc000}, 0xc040) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 4.065482989s ago: executing program 3 (id=4183): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x10, 0x2, &(0x7f0000000140)=ANY=[@ANYBLOB="91104f000000000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000}, 0x94) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}}, 0x0, 0x0, 0x34, 0x0, "f1f7882eade7f9ed59dd754ed3fa9513bc8d9662eaae6a87ea17d19cced73fca9d00b370eaefb2ecab4c20fb0d62c726cc3cb83d211da63fb4007c81ad7a2edac7859b8988028702e2027b84c554f86f"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x4c, 0x0, "01deaba05ccc4fa00711be66bd584ecd190428efc9e569f4b222158b227692cebc00924f2deea371bafa061b8f2959b4b696b22e4881f40a0d8f4c2fdea78893bc2c160df3e41db4153cfd9221d01c79"}, 0xd8) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000000000000000000000611220000000000095"], &(0x7f0000000040)='syzkaller\x00', 0xb, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x8, 0x4, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xffffffff}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x16, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000711294000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2a, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3.885181682s ago: executing program 3 (id=4184): socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) setsockopt$inet_int(r0, 0x0, 0x17, &(0x7f00000001c0)=0x5, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x300) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[], 0x50) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000140)=r1, 0x4) setsockopt$inet_int(r0, 0x0, 0x12, &(0x7f0000000000)=0x1f5, 0x4) recvmmsg(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x45833af92e4b39ff, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'veth1_to_team\x00', 0x2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000200)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0xfffffffe, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x0, 0xe9f, 0x1, 0x1d, 0x3, 0x9, 0x800, 0x4, 0x854}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c1}, 0x4000) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000140)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdc01, {0x0, 0x0, 0x0, r5, {0x0, 0x9}, {0xffe0, 0xb}, {0xffff, 0xffe0}}, [@TCA_RATE={0x6, 0x5, {0x9, 0x2}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4044060}, 0x4890) r6 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r6, &(0x7f00000005c0)="bad330fbc9b55400040000ea0756", 0xe, 0x40, &(0x7f00000001c0)={0x11, 0x88a8, r5, 0x1, 0xd8, 0x6, @multicast}, 0x14) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) socket$packet(0x11, 0x2, 0x300) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8000}, [@call={0x85, 0x0, 0x0, 0x75}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3.360500942s ago: executing program 3 (id=4187): r0 = socket$kcm(0x10, 0x400000002, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xf}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x6, 0x3, 0xc06a2f6, 0x1, 0x7}, 0x6, 0x0, 0xa, 0x4, 0x6, 0x8, 0x18, 0x9, 0x3, 0x4, {0x0, 0x2, 0x9, 0x800, 0x8704, 0x27000000}}}}]}, 0x78}}, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newtfilter={0x74, 0x2c, 0xd2b, 0x800, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x9}, {}, {0x7, 0xb}}, [@filter_kind_options=@f_u32={{0x8}, {0x48, 0x2, [@TCA_U32_SEL={0x44, 0x5, {0xf, 0x1, 0x3, 0x1, 0x4, 0x401, 0xe, 0xfffffffa, [{0x200, 0x500, 0x3, 0xe}, {0x6783, 0x2, 0x8001, 0x10}, {0x40000, 0x53, 0xa9, 0x80000001}]}}]}}]}, 0x74}}, 0x20000000) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newtfilter={0x24, 0x2c, 0xd27, 0x30bd29, 0x21dfdbfc, {0x0, 0x0, 0x0, r6, {0x0, 0xf}, {}, {0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x24000014}, 0x200c4004) (async) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000480)="b19ccccf84f531d9ec214627c11430c1", 0x20) r8 = accept$alg(r7, 0x0, 0x0) sendmmsg$alg(r8, &(0x7f00000009c0)=[{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000240)="3f5e978e345482212cf7cd37be", 0xd}, {&(0x7f0000000000)="ece600", 0xfffffe5a}], 0x2, &(0x7f0000000640)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x20000000}], 0x1, 0x24000040) (async) recvmmsg(r8, &(0x7f0000001b00)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000001480)=""/194, 0x34000}], 0x1}, 0x4}], 0x1, 0x2120, 0x0) sendmsg$inet(r0, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000080)=[{&(0x7f0000000140)="600000002e000d190a762d7f089e", 0xfca2}, {&(0x7f0000000280)="68cabf2dfb58fc0a1d6b689866f05d490d010088a8ffff0200258f2e4409b8f9e6aaeb88bea123dc2c6726e89b1ae2f6e8bcb5ee52dcd7298d39093c510293bca0b646a3ce904f6e6b788b3204c233e60ddc", 0x52}], 0x2}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_tcp_buf(r2, 0x6, 0x21, &(0x7f0000000340)=""/60, &(0x7f0000000380)=0x3c) (async) sendmsg$nl_generic(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) (async) r10 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r10, &(0x7f0000000080)={0x2, 0x4e24, @local}, 0x10) (async, rerun: 32) r11 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) (rerun: 32) ioctl$sock_netrom_SIOCADDRT(r11, 0x890b, &(0x7f0000000280)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bpq0, 0xfffd, 'syz1\x00', @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0xfffffdb6, 0x3, [@default, @bcast, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r12, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001b40)=@newtaction={0x1554, 0x30, 0x871a15abc695fb3d, 0x70bd26, 0xfffffffd, {}, [{0x1540, 0x1, [@m_mirred={0x138, 0x15, 0x0, 0x0, {{0xb}, {0x64, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0xb, 0x2000, 0xffffffffdffffff2, 0xa49, 0x7f}, 0x4, r6}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0xd, 0xffffffffffffffff, 0x6}, 0x4, r4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x4, 0x1, 0x1, 0x7, 0x585}, 0x3, r4}}]}, {0xac, 0x6, "e88e4dd1090e62f30fea8c4d64e0170fa564afee67a8cad77ae20f87e8fbb458078c33257d6b452537d8532e93d3791f450c420c38e41d221232ee14de59c7528fadcaf34f40cf7883d23e478d87d93217ac6f2de2fd5307ab3aea2254354c1dd4d1181c429eef67ac445c16c6e38e2574d3e564d9cf2746f81e274bb0b501f36186353dda834ddd6f1980da8e59901cd9ab83d8e3fe762e570813db0e80a53ece46ab654f897fce"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_vlan={0x14c, 0x14, 0x0, 0x0, {{0x9}, {0x2c, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x7}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x1aa}]}, {0xf5, 0x6, "c313b19ba3b8af01ed135203be0dbf7c25f4c8cb5aa30f95ab8552f0f786c36caf454b2a04f3625a7f5121a9ad47e56e1fdea2a75c634aea52ae0da248163610487a5884ffca074cfb8fe6cbba11f44b933cb1dbd81e12c0532b9a3d9fed74b4abdbe43285dbc0de80d4b6887f355c4d521735cbcfc83b06ad6f79db2a861f3ebb70638b2e73989c91a84b89ab3e7f68edff5bdc53b119fdc61700c880a9a75e62c40a636c36339fe38339140f1f15f7e99d727f5b1f2fc0e58afa9dcc9c2cb8d51bf66ff7979c304c9dcd259dfc23c70720528b3c8415923756f830de4859b7974b92c36523599e5dabf59d50bf099c5d"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0xd3cedb6b467ca2cd, 0x1}}}}, @m_csum={0x184, 0x8, 0x0, 0x0, {{0x9}, {0xe4, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x1, 0xffffffff, 0x6, 0xdca, 0x3}, 0x3f}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x2, 0x80000001, 0x2, 0x131, 0x38}, 0x12}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x8000, 0xffff, 0x1, 0x3ff, 0x4}, 0x67}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x5, 0x4, 0x0, 0x3, 0x3}, 0x5e}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0xffffffff, 0x0, 0x8, 0x5, 0x770}, 0xb}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0xfffffe00, 0x1, 0x0, 0x9, 0x80000001}, 0x59}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0xd121, 0x2, 0x0, 0x8, 0x3}, 0x1d}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x5, 0x6, 0x7, 0x4, 0x8}, 0x65}}]}, {0x75, 0x6, "928cdb6bfb11ad8bbb21d4ca9f753e4069b2ec9af0e62cec60b91d8f05eba80cb1e79a21c335793fae648fd278867aecedf97ceead41e9d0942f9c6c8e367d95c723a5c7a86883cdedb85ac65df74d34d5b1246dbeae759938812228381cd29d32d401c91003a750b1ab06bf73727a010a"}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}, @m_vlan={0xd8, 0x1e, 0x0, 0x0, {{0x9}, {0x74, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x9, 0x3, 0x2, 0x2, 0x7}, 0x1}}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x3, 0xfffffff8, 0xffffffffffffffff, 0xc, 0x96d}, 0x3}}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x0, 0x8, 0x6, 0x4, 0x2}, 0x1}}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x2, 0x5, 0x20000000, 0x7, 0x1}, 0x1}}]}, {0x3b, 0x6, "ec246b0733c3bc02acd0e7dbe00e4498c202e8d93de126c7899fa5cea1d8b36d23eba184944016beecf56e0088fe37cd7edef7e80f6c76"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_vlan={0xe8, 0x1e, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x5}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x7f, 0x6, 0x4f9ec0040344b270, 0x0, 0x6}, 0x3}}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x7}]}, {0x8f, 0x6, "53b823de1263427f964c63cc22d34336136fc4c95c571b57395c53dec238a1bab2ec8d7b98a1f17f464f8b842557b0bc3a958a827cd9e092e3fd75b2769114ce0816a8c4c57d0b920135b61408938175e875054be2083aaf59ea478c86f75ba0ee1286d9398237923746295334a38eb869edb388e107c1885c3d0990ed82cb15cc126a3f488fe6b23220fc"}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}, @m_pedit={0xf74, 0x1a, 0x0, 0x0, {{0xa}, {0xecc, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xec8, 0x2, {{{0x1, 0x5, 0x2, 0x7, 0x66}, 0x7f, 0x9, [{0x2, 0x7, 0x400, 0x1d, 0x5991, 0xd}, {0x8, 0x8, 0xffffff6a, 0x3, 0x81, 0x694}, {0x6, 0x3, 0x1000, 0xfffffffa, 0x1, 0x7f}, {0x6, 0x0, 0x5, 0x3, 0x6}, {0x7, 0x0, 0x10001, 0x5, 0x5, 0xf1ec}, {0x4, 0xf, 0x6, 0x41, 0x6, 0x9}, {0x5f1, 0x6, 0x8, 0x5, 0xfffffffd, 0x80}]}, [{0x4, 0x1, 0xff, 0x10001, 0x7, 0xfff}, {0x29, 0x21, 0x6, 0x3ff, 0xf2, 0x7fffffff}, {0x4, 0xb8, 0xc9b7, 0x3, 0x400}, {0x8, 0xb8, 0x8, 0x7, 0x7, 0xcc}, {0x5, 0xffffffff, 0x0, 0x0, 0x7, 0xffffffff}, {0x8, 0xffff, 0x100, 0x6, 0x6, 0x4}, {0x2, 0x6, 0x7fff, 0x1, 0x7, 0x8}, {0x81, 0x8686827c, 0x7, 0x9, 0xc, 0x9717}, {0xfffffffe, 0x10, 0x2, 0x9, 0x401, 0x80000000}, {0x8, 0x1, 0x200, 0x0, 0x1000, 0x4}, {0x6, 0x8, 0x3, 0x0, 0x8, 0xffff2c18}, {0x8000, 0x6, 0x200, 0x10, 0xbce5, 0x9f}, {0x1, 0xb, 0x0, 0x2e6, 0x10, 0x9f}, {0x9, 0x34, 0x7, 0x7fffffff, 0x6, 0x3c0}, {0x7, 0x8, 0xffffff81, 0x0, 0x6c34, 0x2}, {0x40, 0xbd, 0x2, 0xfff, 0x1, 0x7fff}, {0x0, 0x6, 0x3, 0x0, 0x8001, 0x81}, {0x7, 0x7, 0xf4, 0x0, 0x6, 0xfff}, {0xa236, 0x4e, 0x9, 0x6, 0x6, 0x5}, {0x7, 0xe, 0x3, 0x5, 0x8, 0x8}, {0x29a9, 0x8001, 0xa, 0xc98, 0x200, 0x32c33b52}, {0x5, 0x8, 0xf124, 0xda8, 0x10001, 0x9}, {0xe, 0x7, 0x8, 0x7, 0x80, 0x2}, {0x9cb, 0x2, 0x1, 0x3}, {0x7, 0x3c6, 0xa13, 0x1, 0xfffffffc, 0x7fffffff}, {0x9, 0x9563, 0x9, 0x6, 0x8, 0x5}, {0x0, 0x5, 0x40, 0x3, 0x3, 0x1000}, {0x80000001, 0x8, 0x4, 0x8, 0xeb, 0x7}, {0x7ff, 0x3, 0x2, 0xa, 0x1, 0x3ff}, {0x6, 0x5, 0x8, 0x1, 0x18e7, 0x7}, {0x0, 0x1f, 0x0, 0x4, 0xffffffff, 0x1}, {0xb, 0x9, 0x6dfdb60c, 0x0, 0x2, 0x5}, {0x7, 0x9, 0xf38, 0x0, 0x1000, 0x3}, {0x0, 0x1, 0x0, 0x4, 0xa, 0xb}, {0x81, 0x2630d12a, 0x8, 0xd, 0x7ff, 0x1000000}, {0x80000000, 0x1, 0x7, 0x8, 0xffff8001, 0x8}, {0x9, 0x0, 0xd, 0x7, 0xa, 0x64}, {0x0, 0x800, 0x83, 0x80, 0x84, 0x4e1e}, {0x1, 0x4, 0x240, 0x1, 0xffffffff, 0xd07}, {0x3, 0xe, 0x1, 0x5, 0x0, 0x4c4d}, {0x7800, 0x1, 0x8, 0x48, 0x9, 0x9}, {0x7, 0x80000000, 0x10001, 0x16, 0x6, 0x6}, {0x80000001, 0x5, 0x835d, 0x6f, 0x30, 0x10001}, {0x4, 0x2, 0x20557185, 0x8, 0x10001, 0xad}, {0xf, 0x7, 0x10, 0x1, 0x4, 0x7fffffff}, {0xffffffff, 0x6, 0x0, 0x1, 0x7f, 0x400}, {0x7, 0x2, 0xf, 0x4, 0x4, 0x80000000}, {0x4, 0xfff, 0x0, 0x6, 0x6, 0xa}, {0x4, 0x8, 0x1, 0x9, 0x8, 0x8000}, {0x7, 0xf, 0xfffffffa, 0xcde, 0x80, 0x80000000}, {0x6, 0x7fff, 0x7, 0x80000000, 0x9, 0x81f}, {0x4be, 0x3, 0x0, 0x2, 0x8, 0x3}, {0xd58f, 0xc, 0x2, 0x5, 0x1, 0x2}, {0x3, 0xb, 0xa9a, 0x7, 0x4, 0x79}, {0x6, 0x30, 0xd9b8, 0x54ab4bbf, 0x9, 0x9}, {0x0, 0x60, 0x4, 0x2, 0xfffff001, 0x5}, {0x9, 0x7, 0xc, 0x3, 0x80, 0x8}, {0x2, 0xfffffff9, 0x8, 0x6, 0x9, 0x9}, {0x3, 0x8, 0x0, 0x4, 0x8, 0xca6b}, {0xe0c, 0x8, 0x6, 0xffffffff, 0xffffff35, 0x9}, {0x4, 0x1e0a, 0x7fff, 0xdb7, 0x5, 0xc}, {0x40, 0x1, 0x2, 0xfff, 0x7fff, 0x8}, {0x9, 0x9, 0x2, 0xfffffffe, 0x9, 0x1}, {0x3, 0x43d4, 0x0, 0x6, 0xd, 0x7}, {0x7, 0x2606, 0x1cb0, 0x40000000, 0x4, 0x1}, {0x8, 0x5f6cb74a, 0x9, 0x2, 0x1, 0x1}, {0x28, 0x1, 0x0, 0x4, 0x0, 0x2}, {0xb, 0x41, 0xe7d, 0xfffffffa, 0x3, 0x4}, {0xfffff001, 0x2400000, 0xff, 0x996, 0x3800, 0x400}, {0x7fff, 0x2, 0x1, 0x8001, 0x3, 0x3}, {0x4f09a4ab, 0x5, 0x3ff, 0x9b3, 0x6, 0x4}, {0x92c, 0xb, 0x10001, 0x7, 0x3, 0x4}, {0x5, 0x3, 0x80000, 0x101, 0x9, 0x4}, {0x6, 0x8, 0x4, 0x8, 0x89120688, 0x3}, {0x1, 0x7, 0xd4, 0x2, 0x6, 0xfffffe01}, {0x2, 0x9, 0xd, 0x2, 0xd94, 0x7}, {0x80, 0x2, 0xffffff81, 0x1, 0x8, 0x800}, {0x6, 0x9b, 0xe, 0x81, 0xa1, 0x4}, {0x3, 0x7, 0x81, 0x2, 0xb, 0x3}, {0x42, 0x7f3, 0x0, 0x5, 0xf, 0x7}, {0x8, 0x7, 0x5, 0x8, 0x1}, {0xbb, 0x1c0, 0x4, 0x81, 0x5, 0x3}, {0x3, 0x7f, 0x6, 0x2, 0x7, 0xffff}, {0x1cf, 0x4, 0x8, 0x6, 0x692, 0xd}, {0x8, 0x3, 0x8c6, 0x3ff, 0xa, 0x6}, {0x8, 0xfffff000, 0x100, 0x2, 0x3, 0xff}, {0x7, 0x0, 0xffff, 0x4, 0xe, 0x4}, {0x4, 0xe2f4, 0x3, 0x2, 0x8, 0x6}, {0x0, 0x81, 0xffff7544, 0xffffffff, 0x6, 0x40}, {0x3, 0x1, 0x9, 0xf, 0xfffffff8, 0x4}, {0xd1, 0x9, 0x2, 0x101, 0x1, 0x2}, {0x4, 0x7, 0x9, 0x0, 0x5, 0x5}, {0x686, 0x5, 0x5, 0x2, 0xe103, 0xb}, {0x4, 0xb, 0x4, 0x79, 0x1, 0xb0}, {0x6, 0x101, 0xb, 0x0, 0x1, 0x4}, {0x6, 0x354, 0x5, 0x0, 0x1, 0x1ff}, {0x5, 0x3, 0xfff, 0xfff, 0x7, 0x2}, {0x5, 0x1, 0x8, 0x800, 0x7, 0x7fffffff}, {0x0, 0x4, 0xd03, 0xe5, 0x1, 0x6aa}, {0x400, 0x4, 0x2f, 0x28f1, 0x6, 0x8}, {0xff, 0xc, 0x3, 0x6, 0x7, 0x2}, {0x4, 0xb2, 0xf31e, 0x1, 0xd6, 0x9}, {0x0, 0xfffffffb, 0x1, 0x5, 0x8, 0x5}, {0x7ff, 0x1435, 0x3d, 0x7, 0xff, 0xd}, {0x0, 0x9, 0x6, 0x8, 0x51, 0x6}, {0x7, 0x4, 0x2, 0x2, 0xffffa90c, 0x5}, {0x7, 0x6, 0xfff, 0x8, 0x8, 0x200}, {0x7f, 0x1, 0x2, 0xff, 0x7, 0xc2}, {0x791, 0x7f, 0x7, 0xfffffff3, 0x74, 0x2}, {0x6, 0x9, 0x7, 0x4, 0x6c, 0xff}, {0x101, 0xa24c, 0x9, 0x2, 0x10001, 0xb}, {0xe, 0x8, 0x0, 0x9, 0x1, 0xfff}, {0x400, 0x3, 0x0, 0x39, 0x1, 0x6}, {0x8000, 0x7, 0xc3bf, 0x24, 0xa, 0x80000000}, {0x0, 0x8, 0x5, 0x81, 0x2, 0xffffffff}, {0x8, 0x9, 0x6, 0x6, 0x400, 0x3}, {0x1, 0x8000, 0xfffffffa, 0xe6, 0x2, 0x38}, {0x0, 0x9, 0x1, 0x8, 0x5, 0xf}, {0xf6, 0x4, 0x0, 0xffffffff, 0xf8a6, 0x7}, {0xb9d, 0xf7b, 0x3, 0x2, 0x6a, 0x6}, {0xffff, 0x7, 0xfffffffc, 0x6, 0x101, 0xfffffffc}, {0x0, 0x2, 0xfffff7f7, 0x1, 0x401, 0x6}, {0x6, 0x6, 0xc0, 0x710000, 0xf, 0x8000}, {0xa, 0xfffff63c, 0x1000, 0x8, 0x2, 0x4f}, {0xcdb2, 0x1, 0x101, 0x400, 0x1, 0xffffffff}, {0x7, 0xfffffb41, 0xffff0000, 0x3, 0x0, 0x7}, {0x7ff, 0xfff, 0x7, 0x2, 0xc, 0x3}, {0x9, 0x1, 0x3, 0x2, 0x8, 0x7ff}], [{0x0, 0x1}, {0x4}, {0x0, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {}, {}, {0x0, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {}, {0x3, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x5}, {0x0, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x2}, {0x3, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x4}, {0x3}, {0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x3}, {0x0, 0x1}, {0x4}, {0x0, 0x1}, {0x9b63edd676ca4526}, {0x4, 0x1}, {0x1}, {0x4}, {0x2}, {0x1, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {}, {0x2}, {0x5, 0x1}, {0x1}, {0x0, 0x1}, {0x3}, {0x5}, {0x0, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {}, {0x0, 0x1}, {}, {}, {}, {0x2, 0x1}, {0x3, 0x1}, {0x2}, {0x2}, {0x7, 0x1}, {0x1}, {0x1}, {0x3}, {}, {0x3, 0x1}, {}, {0x1}, {0x3}, {0x5, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x5}, {0x4}, {0x5, 0x1}, {}, {0x1}, {0x4}, {0x4}, {0x4, 0x1}, {0x5}, {0x2, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x6}, {0x1, 0x1}, {0x2, 0x1}, {}, {0x5, 0x1}, {0x2, 0x1}, {0x2}, {0x4, 0x1}, {0x3, 0x1}, {}, {0x2}, {0x5}, {0x4, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x4}, {}, {0x2}, {0x0, 0x1}, {0x0, 0x1}, {0x2}, {0x2}, {0x5}, {0x2}, {0x3, 0x1}, {0x3}, {0x1, 0x1}, {0x2}, {0x2}, {0x4}, {0x0, 0x1}, {0x4}, {0x2}, {0x1, 0x1}, {0x1, 0x1}, {}, {0x1, 0x1}, {0x5, 0x1}, {0x4}], 0x1}}]}, {0x7e, 0x6, "bdf44d48b34e8c59c75bc907eaa2ccc4ee260745046728218239f41b375ff9a5e94f4292e18b71e490c6336faee17aba5782d5e709a0bd3c68f344112113983fa2184b5b30db70bba4a97d84c905a08e8432ee632a83fc7c11d0a3c73a4174e802b1bc16d4acc64d7dd6083f00e0141854b1c62408731ce2e3c3"}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}]}]}, 0x1554}}, 0x240400c0) (async) ioctl$sock_netrom_SIOCADDRT(r11, 0x890b, &(0x7f00000000c0)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x0, 'syz1\x00', @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x101, 0x7, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}]}) connect$inet(r10, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) (async, rerun: 64) sendmmsg$inet(r10, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) (rerun: 64) 2.945023834s ago: executing program 1 (id=4191): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000001400010000000000fbdbdf250a00a100", @ANYRES32, @ANYBLOB="140001"], 0x34}}, 0x0) r0 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r0, 0xf507, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3400000015"], 0x34}, 0x1, 0x0, 0x0, 0x41c1}, 0x4040800) 2.906437964s ago: executing program 3 (id=4192): r0 = socket(0x25, 0x6, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001300)=@ipv6_newrule={0x40, 0x20, 0x1, 0x0, 0x0, {0xa, 0x14, 0x20, 0x0, 0x0, 0x0, 0x0, 0x7}, [@FRA_SRC={0x14, 0x2, @remote}, @FIB_RULE_POLICY=@FRA_SUPPRESS_PREFIXLEN={0x8, 0xe, 0x7f}, @FIB_RULE_POLICY=@FRA_SUPPRESS_IFGROUP={0x8, 0xd, 0x7}]}, 0x40}, 0x1, 0x0, 0x0, 0xc011}, 0x40000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(0xffffffffffffffff, 0x0, 0x40084) listen(0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, 0x0) accept4$alg(r3, 0x0, 0x0, 0x800) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000003740)=@newtaction={0x14, 0x30, 0xb}, 0x14}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newqdisc={0x170, 0x24, 0xd0f, 0x200000, 0x0, {0x60, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x100, 0x5, 0x400, 0x9, 0x81, 0x101, 0xe, 0xc40, 0x7fffffff, 0xfffffffc, 0x20, 0xb, 0xff, 0x6, 0x7, 0xffff}}, @TCA_GRED_STAB={0x104, 0x2, "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"}]}}]}, 0x170}, 0x1, 0x0, 0x0, 0x240400d0}, 0x24008004) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="1400000010000100000000000000ffffff39000a20000000000a05000000000000000000010000000900010073797a300000000048000000030a05020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a3000000000080007006e6174003c"], 0xcc}, 0x1, 0x0, 0x0, 0x880}, 0x0) 2.823600086s ago: executing program 1 (id=4193): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x5, 0x8, 0x40, 0x42, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000680), &(0x7f0000000580), 0x1000, r0}, 0x38) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r1}, 0x4) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x11, &(0x7f0000000580)=@framed={{0x18, 0x2, 0x0, 0x0, 0x41}, [@call={0x85, 0x0, 0x0, 0x87}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f00000003c0)="c274386d178550cb864bd57221bc", 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) syz_genetlink_get_family_id$nfc(&(0x7f0000000000), 0xffffffffffffffff) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000007c0)=ANY=[@ANYBLOB="300000001300010027bd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000080013"], 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 2.498423737s ago: executing program 1 (id=4197): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x550, 0x348, 0x18c, 0x203, 0x0, 0x19030000, 0x480, 0x2e0, 0x2e0, 0x480, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x300, 0x348, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x5}, {0x3d}, {}, {}, {0x60}, {}, {}, {}, {}, {0x0, 0x0, 0x6}, {0x2}, {0x0, 0x7}, {0x0, 0x80}, {}, {0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {0x16}, {}, {}, {}, {}, {}, {0x0, 0x4}, {}, {}, {}, {}, {}, {}, {0x0, 0x80, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {0x0, 0x10}, {0x0, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {0x0, 0x3}, {}, {}, {0x0, 0x0, 0x0, 0xf00}, {}, {0x4000, 0x0, 0x80}, {}, {}, {}, {0x0, 0x0, 0x7, 0x10000}, {0x0, 0x0, 0x0, 0x200000}, {}, {}, {0x0, 0x0, 0x0, 0xffff8acc}, {}, {}, {0x2000}]}}, @common=@hl={{0x28}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@private, 'veth1_macvtap\x00', {0xffff}}}}, {{@uncond, 0x0, 0xd0, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x10, 0x1a, 0xfffffff6, 0x81, 'syz1\x00', 'syz1\x00', {0xfffffffffffffffc}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5b0) 2.341571745s ago: executing program 1 (id=4200): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f000000b500), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f000000d040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000740)={0x34, r0, 0x8de13c6b70ae92c3, 0x41003, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc0}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x0) 2.121899802s ago: executing program 4 (id=4202): r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r2, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0x14, &(0x7f0000000180)=0x19ca, 0x4) connect$can_bcm(r1, &(0x7f00000005c0), 0x10) recvmmsg(r1, &(0x7f00000099c0)=[{{0x0, 0x0, 0x0}, 0x4251}], 0x1, 0x10002, 0x0) sendmsg$can_bcm(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) recvfrom$packet(r4, 0x0, 0x0, 0x2, 0x0, 0x0) ioctl$SIOCGSTAMP(r1, 0x8906, &(0x7f0000000040)) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) r5 = accept4(r0, 0x0, 0x0, 0x800) setsockopt$inet_sctp6_SCTP_EVENTS(r5, 0x84, 0xb, &(0x7f0000000080)={0x5, 0xf8, 0x0, 0x0, 0x8, 0x60, 0x2, 0x23, 0x2, 0x7f, 0x9, 0x5, 0x4e, 0x81}, 0xe) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r3, 0x84, 0x71, &(0x7f00000000c0)={0x0, 0x7}, 0x8) accept4$llc(r5, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), r5) 2.089841733s ago: executing program 1 (id=4203): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x606161, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = epoll_create1(0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1f00000000000000000000000010"], 0x48) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000480)={0x68000005}) r3 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(r3, 0x894b, &(0x7f0000000040)) socket(0xa, 0x800, 0x0) r4 = socket$kcm(0x10, 0x3, 0x10) recvmsg(r4, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x40010103) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x17, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[], 0x120}, 0x1, 0x0, 0x0, 0x4000801}, 0x0) r6 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="e0c7a7b4139a41fdfdfcdb64e220735fb632f8e18fdb645e4aecc7e80da752a098a34badafa693bdd003e15d080cb59f6ed6f6eb330800000000000000679a8494e45792d81af8a6bdf64fbe3b42dd15adf0b17983df0000"], 0x1c}, 0x1, 0x0, 0x0, 0x48050}, 0x4004800) bpf$MAP_CREATE(0x0, 0x0, 0x48) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="200000006800e97800000000000000000a00000000000000080005006c7558c7cd0b7713bcbf70a099c712c5180a6a66a4a842e0d3a44c7a55d8517a45a467b6eb51daddd721a9b7c9b00be35e1d3ba837523e3871fdd4cf7914ce656955f743802330b7b861310817a0", @ANYRES8=r2, @ANYRESOCT=r4], 0x20}}, 0x8c4) sendmsg$nl_route(r8, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001800090400000000000000000a000000000000030000000008001e0001"], 0x24}}, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB="6400000010dae3a7f9d91b46ed7fa0d62186cdc3", @ANYRES16=r4, @ANYBLOB="0000000000000000440012800e00010069703665727370616e00000030000280140006002001000000000000000000000000001214000700fc020000002b0000000000000000000004001200"], 0x64}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="28000000100001000100"/20, @ANYRES32=0x0, @ANYBLOB="200400000000000008001b0000000000c336cce5bfdb3dc6edc375566e812e3bd8dce238e3fd812d0824350ba3744643455a418fa69ce88fb1758b6ddcd1a7fa86c88b05c578781cf1bf947fcccbe7edf535eceee588baeca5c7fe43048fb4bc7b3e931d9658d740db2be57bf64c1e42114b8372ecf12a2583a2a6ae8fd205c6dad00f365f1aa4cd6558a974899913671652d9cef3a6f0bde6a12ded171845471ea71ff535ccfe78b321b5bb21bb8ec70787d72822200dbf5aaf58e707243b8d1f01956a40fd82f1a63c04dad332e85ab9bc29e756a8f2091c755acf28898efb522f59206dfd6a8ff2df5b054796101fbd70a5"], 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x94) recvmmsg$unix(r6, &(0x7f0000002380)=[{{0x0, 0x0, 0x0}}], 0x1, 0x26022, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xb, 0xc3072, 0xffffffffffffffff, 0x3fb87000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x100009, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$OBJ_GET_PROG(0x7, &(0x7f0000001300)=@o_path={&(0x7f00000012c0)='./file0\x00', 0x0, 0x0, r4}, 0x18) socket$nl_route(0x10, 0x3, 0x0) 1.848566004s ago: executing program 0 (id=4205): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="4c00000010003b15000800"/20, @ANYRES32=0x0, @ANYBLOB="0000000000b401002400128009000100626f6e640000000014000280050001000100000005000d000200000008000a00", @ANYRES32=r2], 0x4c}, 0x1, 0x0, 0x3f00000000000000}, 0x0) 1.690954935s ago: executing program 0 (id=4206): r0 = socket$rds(0x15, 0x5, 0x0) r1 = socket(0x1, 0x803, 0x0) getpeername$ax25(r1, 0x0, 0x0) bind$rds(r0, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=@newlink={0x20, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x2813, 0x2d00}}, 0x20}, 0x1, 0x0, 0x0, 0x48840}, 0x8040816) sendmsg$rds(r0, &(0x7f0000000000)={&(0x7f00000002c0)={0x2, 0x0, @private=0xa010100}, 0x10, 0x0, 0x0, &(0x7f0000000540)=[@mask_fadd={0x58, 0x114, 0x8, {{}, &(0x7f0000000480), 0x0}}, @mask_cswp={0x58, 0x114, 0x9, {{}, 0x0, 0x0}}], 0xb0}, 0x0) 1.505420086s ago: executing program 0 (id=4208): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1}, 0x48) close(r1) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001700)=ANY=[@ANYBLOB="160000000000000061b1000002"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r2, 0xffffffffffffffff}, 0x0, &(0x7f0000000040)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x15, &(0x7f0000000200)={r3, 0x0, 0x0}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r1, 0x0, &(0x7f0000001540)=""/155}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="1a00000003000000090000000100000068000000", @ANYRES32=0x1, @ANYBLOB="0500"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000500000003"], 0x50) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000000140)={r1, 0x0, &(0x7f00000002c0)=""/4095}, 0x20) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000700)=@updpolicy={0x17c, 0x19, 0x1, 0x70bd25, 0x1, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x1000, 0x0, 0x9, 0x0, 0x5, 0x200000000000000}, {0x0, 0x0, 0x800}, 0x200, 0x0, 0x1, 0x0, 0x1}, [@tmpl={0xc4, 0x5, [{{@in=@local, 0x0, 0x33}, 0x0, @in=@rand_addr=0x64010100, 0x34ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2040}, {{@in=@loopback, 0x2000, 0x3c}, 0x2, @in6=@dev}, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4d2, 0x6c}, 0xa, @in=@multicast2, 0x0, 0x4, 0x0, 0x1}]}]}, 0x17c}, 0x1, 0x0, 0x0, 0x1}, 0x4000) 1.475370308s ago: executing program 0 (id=4209): r0 = socket$packet(0x11, 0x3, 0x300) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0xd68210}], 0x1, 0x0, 0x1f00000000000000, 0x200000}, 0x1f00) sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000003c0)) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r4, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x800) sendmsg$nl_route_sched(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newqdisc={0x3c, 0x24, 0xe0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0xfff3, 0xd064db0e491fa98f}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_MEMORY={0x8, 0xa, 0x20842}]}}]}, 0x3c}}, 0x4044080) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @remote}, 0x14) sendto$inet6(r0, &(0x7f0000000800)="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", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0) 1.412819261s ago: executing program 2 (id=4210): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x550, 0x348, 0x18c, 0x203, 0x0, 0x19030000, 0x480, 0x2e0, 0x2e0, 0x480, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x300, 0x348, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x5}, {0x3d}, {}, {}, {0x60}, {}, {}, {}, {}, {0x0, 0x0, 0x6}, {0x2}, {0x0, 0x7}, {0x0, 0x80}, {}, {0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {0x16}, {}, {}, {}, {}, {}, {0x0, 0x4}, {}, {}, {}, {}, {}, {}, {0x0, 0x80, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {0x0, 0x10}, {0x0, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {0x0, 0x3}, {}, {}, {0x0, 0x0, 0x0, 0x1100}, {}, {0x4000, 0x0, 0x80}, {}, {}, {}, {0x0, 0x0, 0x7, 0x10000}, {0x0, 0x0, 0x0, 0x200000}, {}, {}, {0x0, 0x0, 0x0, 0xffff8acc}, {}, {}, {0x2000}]}}, @common=@hl={{0x28}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@private, 'veth1_macvtap\x00', {0xffff}}}}, {{@uncond, 0x0, 0xd0, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x10, 0x1a, 0xfffffff6, 0x81, 'syz1\x00', 'syz1\x00', {0xfffffffffffffffc}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5b0) 1.265406294s ago: executing program 2 (id=4211): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) socket$kcm(0x2, 0xa, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200000800"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$tun(r0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="00000000bbbbbbbbbbbbaaaaaaaaaa3088a84d008100660086dd6eb3d5f001952f"], 0x1d7) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_GET(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000001f0000540000000e0001"], 0x34}}, 0x0) 1.109352927s ago: executing program 1 (id=4212): bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9}, [@call={0x85, 0x0, 0x0, 0x2a}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040), 0x10) listen(r0, 0x0) r1 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r1, &(0x7f0000000080), 0x10) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=@gettaction={0x6c, 0x32, 0x100, 0x70bd29, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x10}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x1, 0x4, 0x99}, @action_gd=@TCA_ACT_TAB={0x40, 0x1, [{0x14, 0x0, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x80}}, {0x10, 0x2, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0xc, 0x93, 0x0, 0x0, @TCA_ACT_INDEX={0x0, 0x3, 0x1}}]}]}, 0x6c}}, 0x40c4) close(r1) r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c000000020603000000000000000000000000001400078008001240000000000500150002000000050001000600000005000500020000000500040000000000090002"], 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a03000000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140004"], 0xa4}}, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00'}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r6, 0x8982, &(0x7f0000000540)={0x7, 'pim6reg1\x00', {0x80000000}, 0x6}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x8800) unshare(0x6a040000) preadv(r5, &(0x7f0000000240)=[{&(0x7f0000000100)=""/16, 0x10}, {&(0x7f0000000180)=""/124, 0x7c}], 0x2, 0xf, 0x7dc) getsockopt$bt_sco_SCO_OPTIONS(0xffffffffffffffff, 0x11, 0x1, &(0x7f0000000440)=""/214, &(0x7f0000000280)=0xd6) r7 = socket$inet6(0xa, 0x3, 0x26) sendmmsg(r7, &(0x7f0000000480), 0x2e9, 0x0) 1.076120445s ago: executing program 4 (id=4213): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f000000b500), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f000000d040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000740)={0x34, r0, 0x8de13c6b70ae92c3, 0x41003, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xe}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xc0}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x0) 889.426679ms ago: executing program 2 (id=4214): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) getsockopt$sock_buf(r0, 0x1, 0x47, 0x0, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f0000000180), &(0x7f00000001c0)=0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a01000000000000000000010000000900010073797a30000000000900020073797a3000000000400003800800014000000000080002400000fbff2b0003801400010067656e6576653000000000000000000014000100776732000000000000000000c6e49c0f5c000000180a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c0003801400010067656e657665300000000000000000001400010076657468315f746f5f7465616d"], 0x110}}, 0x0) 744.321017ms ago: executing program 2 (id=4215): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000500)=@delqdisc={0x2c, 0x25, 0x8, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0xb}, {0xfff1, 0x10}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0xc}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000050}, 0x20008041) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0x0, 0xffffffffffffffff, 0x4}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x10, &(0x7f0000000500)=ANY=[@ANYBLOB="18020000ff070000000000000300000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000000}, 0x94) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r2, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) socket$packet(0x11, 0x2, 0x300) r3 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r3, &(0x7f0000000000), 0xc) writev(r3, &(0x7f0000000440)=[{&(0x7f00000004c0)="2e94", 0x2}], 0x1) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000100)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r4, &(0x7f0000000000), 0xffffffffffffffaf, 0x4000280, 0x0, 0xffffffffffffffe1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$ARPT_SO_GET_ENTRIES(r4, 0x0, 0x61, &(0x7f0000000280)=ANY=[@ANYBLOB="66696c746572000000000000000000000000000000000000000000000000000061000000c37b00f873da631578dcb94de8bacd0aba710f2b11fe901713e3d6a8f9c1e62e1396ef4d447de7291d46524dc5dcd17c2c1d00000000000046ab0097f51cfdbf91777fbe56a25224e592522817a7e880612561d18092b9c3419ab98c02aaac602ed94ccfc9ca72f9c1334ef802e3ce0c"], &(0x7f0000000140)=0x85) splice(r4, 0x0, r5, 0x0, 0x39000, 0x3) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x2, 0x6, 0x5, 0x0, 0x0, {0x3, 0x0, 0x7}}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x40015) socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x2, 0x300) close(0x3) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000001440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) sendmsg$NL80211_CMD_SET_BSS(r2, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x30, 0x0, 0x300, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x6, 0x74}}}}, [@NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0x9}, @NL80211_ATTR_P2P_CTWINDOW={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000010}, 0x1) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xf0}, [@printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xd}, {0x85, 0x0, 0x0, 0x2d}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000007c0)={r8}, 0xc) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@gettfilter={0x24, 0x2e, 0x301, 0x70bd28, 0x80000, {0x0, 0x0, 0x0, r6, {}, {0x0, 0xffff}, {0x10}}}, 0x24}}, 0x80) 642.988945ms ago: executing program 4 (id=4216): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x746f2f51, &(0x7f0000000080)=[{&(0x7f0000000040)="3f0400001c00810ce00f80ecdb4cb9f207c804a01f000000030006fb0a0002000a0ada1b40d80300000000000000", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newlink={0x6c, 0x10, 0x437, 0xfffffffe, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x44481}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x40, 0x2, 0x0, 0x1, [@IFLA_GTP_CREATE_SOCKETS={0x5, 0x5, 0x1}, @IFLA_GTP_LOCAL={0x8, 0x7, @broadcast}, @IFLA_GTP_CREATE_SOCKETS={0x5, 0x5, 0x1}, @IFLA_GTP_LOCAL={0x8, 0x7, @private=0xa010102}, @IFLA_GTP_LOCAL6={0x14, 0x8, @remote}, @IFLA_GTP_LOCAL={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x12}}]}}}]}, 0x6c}}, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188040f46ecdb4cb9cca7480ef431000000e3bd6efb010509000b000a000d000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0xc9e}, 0x8000) 488.899708ms ago: executing program 2 (id=4217): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, 0x0, 0x4000800) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write(r1, &(0x7f0000000100)="520003000100b8", 0x7) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x20, 0x0, 0x0, 0xfffff00c}, {0x6}]}, 0x10) sendmsg$nl_route_sched_retired(r3, 0x0, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0xe, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48) socketpair$unix(0x1, 0x2, 0x0, 0x0) ioctl$FS_IOC_GETVERSION(0xffffffffffffffff, 0x80087601, &(0x7f00000001c0)) socket$nl_route(0x10, 0x3, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@rights={{0x10}}, @rights={{0x10}}], 0x20, 0x40}, 0x44814) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r6, 0x1, 0x12, 0x0, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(r5, 0x0, 0x61, &(0x7f0000000100)=ANY=[@ANYBLOB="66696c7465720000000000000000000000000000000000000000000000000000490000005d8f851536a1aa22f734155835df26fc6c2e07000000e10e7b40d78f2364dfd79785eed721ddd1b12873bc77dc8e39e0f1cdaee3303257f30000396e062954f9e5321039260c531e55"], &(0x7f0000000080)=0x6d) r7 = socket$kcm(0x2, 0x9, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000180)={@val, @void, @eth={@broadcast, @dev, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x2f, 0x0, @private=0x1fe1, @multicast1}, {0xa000, 0x86dd, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}}, 0x32) 278.659199ms ago: executing program 4 (id=4218): r0 = socket$inet_udp(0x2, 0x2, 0x0) close(0x3) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x6, 0x5, &(0x7f00000001c0)=ANY=[@ANYBLOB="180200000080000000000000000000008500000036000000850000002a00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000100)={r3, r2}, 0x40) syz_emit_ethernet(0xd81, &(0x7f00000020c0)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}, @void, {@mpls_uc={0x8847, {[], @ipv6=@icmpv6={0x7, 0x6, "ba0e4a", 0xd4b, 0x3a, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @remote, @private0, [{0x1f, 0x17, "526f4b402374731a2f6b8f22a0e449591805917268a2bb6f8d3b3e84cf8f1604296db14f1649303c9d3ce7bab68fa29ad60c62e1c7276e185cb81c11847a0c62fad5f3ada0a7edd79acfcc00eb8fb4006f6c78691f164c8b002f5d0c92397892c7d66f645dc6192e911d88e05533ecadd277250b76e63ce2fbf3592a07ef539c32034284bf3034cedd135b52feef670c7726de762d929405012f78069182610ffc7cc81e7d2c39911f14c2e9d2f3b92a85d6990e1cbe5202a27d"}, {0xe, 0x13, "28795b508cc8018d324ac435e61b1aa89c033f8f9061e9e7e9f73b768c92f6df36ad04173d519c7e643aa40e889af6419e844aebbfbc426cfbe80e7234c22e6f149cec78cd38da1e08c01b31b501149919f8c8065b5b7d8431c87ffa97d851c034f646fe12a71455cbdb876c3bb7e7c062c3f13b89327668199166f6af38367dca1c27c931b589358d04d1bd113350620ba1abd5fb90a1"}, {0x5, 0x179, "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"}]}}}}}}}, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'vlan0\x00', 0x0}) sendmmsg$inet(r0, &(0x7f0000000000)=[{{&(0x7f0000000040)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=r4, @ANYBLOB="0000000000000000000000000700000089070400"/36], 0x38}}], 0x1, 0x0) 262.09316ms ago: executing program 0 (id=4219): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xb, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffd}, [@printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffffffc}, {0x85, 0x0, 0x0, 0x73}}]}, &(0x7f0000000080)='GPL\x00', 0xbb, 0x0, 0x0, 0x41100, 0x14, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) 113.235458ms ago: executing program 0 (id=4220): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0) r4 = socket$nl_rdma(0x10, 0x3, 0x14) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) (async, rerun: 32) sendmsg$nl_generic(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001b00)=ANY=[@ANYBLOB="1c0000002e00010026bd4e00fbdbdf250400000008000c00"], 0x1c}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) (async, rerun: 32) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r6, &(0x7f0000000200), 0x806000) (async, rerun: 64) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x100000c, 0x11, r5, 0x0) (rerun: 64) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="000225bd7000fcdbdf252500000008000300", @ANYRES32=r2, @ANYBLOB="080035000500000008003500030000000a00340008000000000000000800080001ac0202020202000000"], 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x20001004) (async) syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x1) (async) syz_80211_inject_frame(&(0x7f00000000c0), &(0x7f0000000100)=@mgmt_frame=@beacon={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) (async) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) (async) r8 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x8b0b, &(0x7f0000000200)={'wlan1\x00', @random="9ffff7070600"}) (async) r9 = socket$netlink(0x10, 0x3, 0x4) write(r9, 0x0, 0x0) (async) r10 = syz_genetlink_get_family_id$gtp(&(0x7f00000000c0), 0xffffffffffffffff) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000200)={'batadv_slave_1\x00', 0x0}) sendmsg$GTP_CMD_DELPDP(r9, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x60, r10, 0x101, 0x70bd25, 0x25dfdbfc, {}, [@GTPA_FLOW={0x6}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_MS_ADDR6={0x14, 0xc, @rand_addr=' \x01\x00'}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_LINK={0x8, 0x1, r11}, @GTPA_I_TEI={0x8, 0x8, 0x3}]}, 0x60}, 0x1, 0x0, 0x0, 0x4048880}, 0x10000) (async) sendmsg$GTP_CMD_GETPDP(r0, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x48, r10, 0x4, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @private=0xa010100}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_NET_NS_FD={0x8, 0x7, r5}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}, @GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}]}, 0x48}, 0x1, 0x0, 0x0, 0x20040015}, 0xd1) 112.427901ms ago: executing program 4 (id=4221): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000002880)={0x0, 0x0, &(0x7f0000002840)={&(0x7f00000027c0)={0x14, r1, 0x301, 0x70bd25, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x24008040) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="b400000000000000791028000000000069002a00000000009500740000000000", @ANYRESDEC], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/164, 0x0, 0x25, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffff8f}, 0x48) ioctl$XFS_IOC_FSCOUNTS(r0, 0x80205871, &(0x7f0000000040)) 10.5768ms ago: executing program 4 (id=4222): socket(0x5, 0x5, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) recvmmsg(r0, &(0x7f0000001200), 0x0, 0x20, 0x0) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x50, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x50}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0xdb, &(0x7f0000000100)=[{&(0x7f0000000400)=""/247, 0x200105d0}], 0xc}, 0x1f00) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, 0x0, 0x0) close(0x4) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x14, 0x7, 0x6, 0x801}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x0) recvmmsg(r5, 0x0, 0x0, 0x20, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1f, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000fcffffff0000000001000000850000008a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x34, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000540)=ANY=[@ANYRESDEC=r2, @ANYRESDEC=r0, @ANYRES8=r6, @ANYRES64], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40000000}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001a40)={&(0x7f0000001900)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0xa, [@struct={0x8, 0x1, 0x0, 0x4, 0x1, 0x7, [{0x1, 0x1, 0x7}]}]}, {0x0, [0x5f, 0x2e, 0x5f, 0x30, 0x30, 0x30, 0x5f, 0x5f]}}, &(0x7f0000001a00)=""/16, 0x3a, 0x10, 0x1, 0x8}, 0x28) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@newlink={0xb8, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x65205, 0xc900}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x2020d}}}}}}, @IFLA_MTU={0x8, 0x4, 0x7ff}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x2c707}, @IFLA_AF_SPEC={0x60, 0x1a, 0x0, 0x1, [@AF_MPLS={0xffffffffffffff96}, @AF_INET={0x28, 0x2, 0x0, 0x1, {0x24, 0x1, 0x0, 0x1, [{0x8, 0x20, 0x0, 0x0, 0xb7}, {0x8, 0x14}, {0x8, 0xb, 0x0, 0x0, 0x10000}, {0x8, 0x15, 0x0, 0x0, 0x1}]}}, @AF_INET={0x28, 0x2, 0x0, 0x1, {0x24}}, @AF_MPLS={0x4}, @AF_MPLS={0x4}]}]}, 0xb8}, 0x1, 0x0, 0x0, 0x84}, 0x0) write(r2, &(0x7f0000000340)="3f000000010003", 0x7) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000005c0)={r1}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x11, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0x7aa}, [@call={0x85, 0x0, 0x0, 0x41}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) sendmsg$IPSET_CMD_GET_BYINDEX(r4, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x2c, 0xf, 0x6, 0x101, 0x0, 0x0, {0x2, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x1}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4c001}, 0x4004) 0s ago: executing program 2 (id=4223): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket(0x10, 0x803, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000080)=0x6bda, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f0000000140)=[@in6={0xa, 0x4e23, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8}], 0x1c) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000040)=0xc) ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f0000000100)=r2) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001cc0)=ANY=[@ANYBLOB="6c0100001700010000000000000000007f0000010000000000000000000000000000000000000000fe8000000000000000000000000000bbac1414bb000000000000000000000000fc00000000000000000000000000000000000000000000000000006400000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc020000000000000000000000000000ffffffff00000000000000000000be004e2300004e2300000a00800000000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000200030000000000f9ffffff0000400000000000000000004400050020010000000000000000000000000001000004d432"], 0x16c}}, 0x0) kernel console output (not intermixed with test programs): 8201] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3102'. [ 462.293967][T14223] bond10: (slave bridge6): failed to get link speed/duplex [ 462.318798][T18201] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 462.447303][T18215] netlink: 'syz.4.3105': attribute type 1 has an invalid length. [ 462.600697][T18218] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3105'. [ 462.673555][T18201] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 462.887680][T18215] bridge2: entered allmulticast mode [ 462.951187][T14227] bond10: (slave bridge6): failed to get link speed/duplex [ 462.977613][T18221] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3106'. [ 463.060948][T14227] bond10: (slave bridge6): failed to get link speed/duplex [ 463.211214][ T3542] bond10: (slave bridge6): failed to get link speed/duplex [ 463.333583][T14225] bond10: (slave bridge6): failed to get link speed/duplex [ 463.483415][ T3542] bond10: (slave bridge6): failed to get link speed/duplex [ 463.746343][T18245] tipc: Started in network mode [ 463.756079][T18245] tipc: Node identity 320b6ede08fe, cluster identity 4711 [ 463.785286][T18245] tipc: Enabled bearer , priority 0 [ 463.862369][T18248] syzkaller0: entered promiscuous mode [ 463.867917][T18248] syzkaller0: entered allmulticast mode [ 464.067446][T18256] netlink: 'syz.1.3115': attribute type 29 has an invalid length. [ 464.308657][T18243] tipc: Resetting bearer [ 464.364317][T18243] tipc: Disabling bearer [ 464.442377][T18265] Bluetooth: MGMT ver 1.23 [ 464.479278][T18265] RDS: rds_bind could not find a transport for fc02::, load rds_tcp or rds_rdma? [ 464.544127][T18269] __nla_validate_parse: 2 callbacks suppressed [ 464.544148][T18269] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3119'. [ 464.937206][T18283] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3121'. [ 464.982179][T18283] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3121'. [ 465.006893][T18286] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3124'. [ 465.108209][T18291] netlink: 84 bytes leftover after parsing attributes in process `syz.3.3125'. [ 465.285654][T18286] syzkaller0: entered promiscuous mode [ 465.300424][T18286] syzkaller0: entered allmulticast mode [ 465.609461][T18315] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3127'. [ 465.732786][T18324] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 465.779586][T18323] netlink: 'syz.2.3128': attribute type 1 has an invalid length. [ 465.788962][T18323] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3128'. [ 467.136603][T10680] lec:lec_start_xmit: lec0:No lecd attached [ 467.275553][T18308] syzkaller0: entered promiscuous mode [ 467.281558][T18308] syzkaller0: entered allmulticast mode [ 467.310084][T18322] netlink: 'syz.2.3128': attribute type 6 has an invalid length. [ 467.321935][T18322] netlink: 'syz.2.3128': attribute type 7 has an invalid length. [ 467.329722][T18322] netlink: 'syz.2.3128': attribute type 8 has an invalid length. [ 467.362080][T18322] netlink: 'syz.2.3128': attribute type 13 has an invalid length. [ 467.385262][T18307] netlink: 'syz.2.3128': attribute type 6 has an invalid length. [ 467.402733][T18307] netlink: 'syz.2.3128': attribute type 7 has an invalid length. [ 467.420729][T18307] netlink: 'syz.2.3128': attribute type 8 has an invalid length. [ 467.428980][T18307] netlink: 'syz.2.3128': attribute type 13 has an invalid length. [ 467.470944][ T7298] net_ratelimit: 11 callbacks suppressed [ 467.470967][ T7298] bond10: (slave bridge6): failed to get link speed/duplex [ 467.697995][T18340] lo speed is unknown, defaulting to 1000 [ 467.704139][ T13] bond10: (slave bridge6): failed to get link speed/duplex [ 467.713475][T18347] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3139'. [ 467.810999][ T3542] bond10: (slave bridge6): failed to get link speed/duplex [ 467.886227][T18344] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3139'. [ 467.967205][T18344] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3139'. [ 468.008562][T18344] netlink: 'syz.4.3139': attribute type 6 has an invalid length. [ 468.080317][T14223] bond10: (slave bridge6): failed to get link speed/duplex [ 468.216931][T18359] lo speed is unknown, defaulting to 1000 [ 468.222953][T14227] bond10: (slave bridge6): failed to get link speed/duplex [ 468.275539][T18374] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 468.611040][T14227] bond10: (slave bridge6): failed to get link speed/duplex [ 468.740934][ T13] bond10: (slave bridge6): failed to get link speed/duplex [ 468.850909][ T13] bond10: (slave bridge6): failed to get link speed/duplex [ 469.012954][ T13] bond10: (slave bridge6): failed to get link speed/duplex [ 469.102738][T18390] bond2: (slave bridge1): making interface the new active one [ 469.152594][T18390] bond2: (slave bridge1): Enslaving as an active interface with an up link [ 469.993210][T18408] lo speed is unknown, defaulting to 1000 [ 470.227532][ T5836] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 470.240327][ T5836] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 470.268348][ T5836] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 470.277654][ T5836] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 470.288516][ T5836] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 470.402321][T18418] lo speed is unknown, defaulting to 1000 [ 470.449854][T18429] __nla_validate_parse: 5 callbacks suppressed [ 470.449878][T18429] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3161'. [ 470.467966][T18429] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3161'. [ 470.493761][T18429] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3161'. [ 470.552568][T18429] : entered promiscuous mode [ 470.645225][T18436] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3163'. [ 470.668905][T18436] vlan2: entered allmulticast mode [ 470.674442][T18436] veth0_to_bond: entered allmulticast mode [ 470.688864][T18436] team0: Port device vlan2 added [ 470.940099][T18454] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3162'. [ 471.096403][T18458] pim6reg1: entered allmulticast mode [ 471.212065][T18465] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3168'. [ 471.234050][T18461] IPVS: set_ctl: invalid protocol: 255 172.20.20.187:20004 [ 471.488423][T18474] validate_nla: 2 callbacks suppressed [ 471.488444][T18474] netlink: 'syz.0.3171': attribute type 2 has an invalid length. [ 471.522016][T18474] netlink: 'syz.0.3171': attribute type 2 has an invalid length. [ 471.530312][T18474] netlink: 'syz.0.3171': attribute type 2 has an invalid length. [ 471.548695][T18474] netlink: 'syz.0.3171': attribute type 2 has an invalid length. [ 471.832924][T18480] netlink: 'syz.0.3173': attribute type 21 has an invalid length. [ 471.858997][T18480] netlink: 128 bytes leftover after parsing attributes in process `syz.0.3173'. [ 471.910168][T18482] lo speed is unknown, defaulting to 1000 [ 471.937151][T18480] netlink: 'syz.0.3173': attribute type 5 has an invalid length. [ 471.949139][T18480] netlink: 'syz.0.3173': attribute type 6 has an invalid length. [ 471.974235][T18480] netlink: 3 bytes leftover after parsing attributes in process `syz.0.3173'. [ 472.099419][T18418] chnl_net:caif_netlink_parms(): no params data found [ 472.318574][T18508] netlink: 'syz.2.3177': attribute type 16 has an invalid length. [ 472.328715][T18502] bridge0: port 1(bridge_slave_0) entered disabled state [ 472.337926][T18508] netlink: 'syz.2.3177': attribute type 17 has an invalid length. [ 472.379126][T18502] bridge0: port 2(bridge_slave_1) entered disabled state [ 472.390720][ T5836] Bluetooth: hci1: command tx timeout [ 472.399358][T18511] IPv6: NLM_F_CREATE should be specified when creating new route [ 472.487064][T18516] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3177'. [ 472.608240][T18418] bridge0: port 1(bridge_slave_0) entered blocking state [ 472.616200][T18418] bridge0: port 1(bridge_slave_0) entered disabled state [ 472.625080][T18418] bridge_slave_0: entered allmulticast mode [ 472.636370][T18418] bridge_slave_0: entered promiscuous mode [ 472.645849][T18418] bridge0: port 2(bridge_slave_1) entered blocking state [ 472.661192][T18418] bridge0: port 2(bridge_slave_1) entered disabled state [ 472.687490][T18418] bridge_slave_1: entered allmulticast mode [ 472.814110][T18418] bridge_slave_1: entered promiscuous mode [ 472.861006][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5720 ms [ 472.869118][ C0] lec:lec_tx_timeout: lec0 [ 472.913113][T18508] net_ratelimit: 18 callbacks suppressed [ 472.913126][T18508] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 472.991185][ T13] bond10: (slave bridge6): failed to get link speed/duplex [ 473.116038][T18418] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 473.133223][ T13] bond10: (slave bridge6): failed to get link speed/duplex [ 473.187450][T18418] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 473.290243][T18418] team0: Port device team_slave_0 added [ 473.300242][T18418] team0: Port device team_slave_1 added [ 473.464528][ T13] bond10: (slave bridge6): failed to get link speed/duplex [ 473.494171][T18418] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 473.511068][T18418] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 473.587895][T18418] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 473.645351][T18533] mac80211_hwsim hwsim32 wlan0: default FDB implementation only supports local addresses [ 473.670133][T18418] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 473.695432][T18418] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 473.760986][T18418] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 473.925023][T18418] hsr_slave_0: entered promiscuous mode [ 473.942820][T18418] hsr_slave_1: entered promiscuous mode [ 473.954692][T18418] debugfs: 'hsr0' already exists in 'hsr' [ 473.961177][T18418] Cannot create hsr debugfs directory [ 473.975503][T14227] bond10: (slave bridge6): failed to get link speed/duplex [ 474.096671][T18543] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3186'. [ 474.443463][T18418] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 474.464353][ T5836] Bluetooth: hci1: command tx timeout [ 474.480976][T14227] bond10: (slave bridge6): failed to get link speed/duplex [ 474.528900][T18418] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 474.602587][T14227] bond10: (slave bridge6): failed to get link speed/duplex [ 474.614123][T18418] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 474.688628][T18418] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 474.711359][ T7298] bond10: (slave bridge6): failed to get link speed/duplex [ 474.736403][T18566] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 474.756744][T18566] macsec1: entered promiscuous mode [ 474.846080][T18541] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 474.853955][T18541] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 474.870453][T18418] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 474.882990][T18418] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 474.898305][T18418] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 474.910640][T18418] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 474.928356][T18541] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 474.937916][T18541] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 474.958983][T18541] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 474.965480][T14225] bond10: (slave bridge6): failed to get link speed/duplex [ 474.974332][T18541] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 474.993329][T18541] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 475.004577][T18541] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 475.086841][T18541] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 475.094769][T18541] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 475.120982][ T7298] bond10: (slave bridge6): failed to get link speed/duplex [ 475.230479][T18418] 8021q: adding VLAN 0 to HW filter on device bond0 [ 475.296419][T18418] 8021q: adding VLAN 0 to HW filter on device team0 [ 475.320198][T14225] bridge0: port 1(bridge_slave_0) entered blocking state [ 475.327468][T14225] bridge0: port 1(bridge_slave_0) entered forwarding state [ 475.348118][ T7298] bridge0: port 2(bridge_slave_1) entered blocking state [ 475.355420][ T7298] bridge0: port 2(bridge_slave_1) entered forwarding state [ 475.476469][T18587] tipc: Enabled bearer , priority 0 [ 475.487099][T18587] syzkaller0: entered promiscuous mode [ 475.493080][T18587] syzkaller0: entered allmulticast mode [ 475.577131][T18587] tipc: Resetting bearer [ 475.611640][T18585] tipc: Resetting bearer [ 475.655743][T18585] tipc: Disabling bearer [ 475.730556][T18418] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 475.854078][T18418] veth0_vlan: entered promiscuous mode [ 475.873875][T18418] veth1_vlan: entered promiscuous mode [ 475.921575][T18418] veth0_macvtap: entered promiscuous mode [ 475.936469][T18418] veth1_macvtap: entered promiscuous mode [ 475.975012][T18418] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 476.004740][T18418] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 476.024687][T14225] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 476.046939][T14225] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 476.078994][T14225] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 476.114883][T14225] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 476.357880][T14225] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 476.383236][T14225] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 476.396633][T18609] Cannot find del_set index 1 as target [ 476.462476][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 476.481752][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 476.515780][ T5944] IPVS: starting estimator thread 0... [ 476.620076][T18619] IPVS: using max 27 ests per chain, 64800 per kthread [ 476.651429][T18626] __nla_validate_parse: 1 callbacks suppressed [ 476.651449][T18626] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3201'. [ 477.716341][ T7936] IPVS: starting estimator thread 0... [ 477.764446][T18652] tipc: Started in network mode [ 477.769474][T18652] tipc: Node identity 4e8b62913674, cluster identity 4711 [ 477.810287][T18652] tipc: Enabled bearer , priority 0 [ 477.821869][T18658] IPVS: using max 29 ests per chain, 69600 per kthread [ 477.847655][T18657] syzkaller0: entered promiscuous mode [ 477.853958][T18657] syzkaller0: entered allmulticast mode [ 477.897024][T18652] IPv6: sit1: Disabled Multicast RS [ 477.991323][T18651] tipc: Resetting bearer [ 478.040473][T18651] tipc: Disabling bearer [ 478.091074][T14222] net_ratelimit: 20 callbacks suppressed [ 478.091097][T14222] bond10: (slave bridge6): failed to get link speed/duplex [ 478.223058][T14225] bond10: (slave bridge6): failed to get link speed/duplex [ 478.260967][T18672] @0Ù: renamed from dummy0 (while UP) [ 478.313690][T18675] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3213'. [ 478.374182][T18675] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3213'. [ 478.374271][T14222] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 478.414491][T14222] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 478.453491][T14222] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 478.499954][T14222] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 478.526256][T18680] netlink: 'syz.4.3214': attribute type 5 has an invalid length. [ 478.569988][T18682] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3215'. [ 478.579987][T18683] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3215'. [ 478.589698][T14222] bond10: (slave bridge6): failed to get link speed/duplex [ 478.623440][T18684] netlink: 'syz.4.3214': attribute type 9 has an invalid length. [ 478.711057][ T13] bond10: (slave bridge6): failed to get link speed/duplex [ 478.815413][T18682] netlink: 176 bytes leftover after parsing attributes in process `syz.2.3215'. [ 478.825323][ T13] bond10: (slave bridge6): failed to get link speed/duplex [ 478.988842][T18696] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 479.074525][T14225] bond10: (slave bridge6): failed to get link speed/duplex [ 479.191280][T14223] bond10: (slave bridge6): failed to get link speed/duplex [ 479.711332][ T13] bond10: (slave bridge6): failed to get link speed/duplex [ 479.821130][T14225] bond10: (slave bridge6): failed to get link speed/duplex [ 479.951879][T14223] bond10: (slave bridge6): failed to get link speed/duplex [ 480.010550][T18708] netlink: 47 bytes leftover after parsing attributes in process `syz.4.3224'. [ 480.069935][T18706] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3223'. [ 480.509419][T18725] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3226'. [ 481.076519][T18734] sctp: [Deprecated]: syz.1.3231 (pid 18734) Use of int in maxseg socket option. [ 481.076519][T18734] Use struct sctp_assoc_value instead [ 481.186606][T18735] syzkaller0: entered promiscuous mode [ 481.210924][T18735] syzkaller0: entered allmulticast mode [ 481.244494][T18737] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3231'. [ 481.585191][T18753] netlink: 'syz.1.3233': attribute type 3 has an invalid length. [ 482.419143][T18777] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3237'. [ 482.444280][T18777] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3237'. [ 482.470971][T18777] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3237'. [ 482.480067][T18777] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3237'. [ 482.566759][T18783] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3239'. [ 483.894146][T18745] netlink: 'syz.0.3232': attribute type 2 has an invalid length. [ 483.902514][T18745] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3232'. [ 483.942349][T14227] net_ratelimit: 10 callbacks suppressed [ 483.942374][T14227] bond10: (slave bridge6): failed to get link speed/duplex [ 483.992715][T18777] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3237'. [ 484.080931][ T13] bond10: (slave bridge6): failed to get link speed/duplex [ 484.090105][T18785] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.3240'. [ 484.147530][T18789] netlink: 'syz.3.3242': attribute type 1 has an invalid length. [ 484.246633][T18799] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3243'. [ 484.256199][T18799] nbd: must specify at least one socket [ 484.301961][T18797] bond1: (slave gretap1): making interface the new active one [ 484.350704][T18797] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 484.373353][ T13] bond10: (slave bridge6): failed to get link speed/duplex [ 484.419683][T18802] syzkaller0: entered promiscuous mode [ 484.432487][T18802] syzkaller0: entered allmulticast mode [ 484.450650][T18810] ip6gretap0: entered promiscuous mode [ 484.457143][T18810] macsec1: entered promiscuous mode [ 484.472176][T18810] macsec1: entered allmulticast mode [ 484.477708][T18810] ip6gretap0: entered allmulticast mode [ 484.489086][T18810] ip6gretap0: left allmulticast mode [ 484.501328][T18810] ip6gretap0: left promiscuous mode [ 484.556362][T18814] netlink: 'syz.3.3250': attribute type 12 has an invalid length. [ 484.570888][ T13] bond10: (slave bridge6): failed to get link speed/duplex [ 484.593824][T18814] netlink: 292 bytes leftover after parsing attributes in process `syz.3.3250'. [ 484.681163][ T13] bond10: (slave bridge6): failed to get link speed/duplex [ 484.850537][T18824] netlink: 'syz.0.3253': attribute type 13 has an invalid length. [ 484.859261][T18825] netlink: 'syz.0.3253': attribute type 13 has an invalid length. [ 485.203513][T18825] bridge0: port 2(bridge_slave_1) entered disabled state [ 485.212819][T18825] bridge0: port 1(bridge_slave_0) entered disabled state [ 485.408372][T18825] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 485.673394][T18830] netlink: 'syz.3.3255': attribute type 6 has an invalid length. [ 485.683151][T18830] netlink: 'syz.3.3255': attribute type 7 has an invalid length. [ 485.691884][T18830] netlink: 'syz.3.3255': attribute type 8 has an invalid length. [ 485.702177][T18830] netlink: 'syz.3.3255': attribute type 13 has an invalid length. [ 485.717395][ T3542] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 485.732726][ T3542] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 485.742450][ T3542] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 485.758502][ T3542] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 485.779005][ T3542] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 485.799959][ T3542] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 485.816914][ T3542] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 485.827818][ T3542] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 485.860861][ T3542] bond10: (slave bridge6): failed to get link speed/duplex [ 485.925048][T18854] ip6erspan0: entered promiscuous mode [ 485.970906][ T3542] bond10: (slave bridge6): failed to get link speed/duplex [ 486.081704][ T3542] bond10: (slave bridge6): failed to get link speed/duplex [ 486.201371][ T3542] bond10: (slave bridge6): failed to get link speed/duplex [ 486.308652][T18877] bond1: option ad_user_port_key: invalid value (65535) [ 486.353221][T18877] bond1: option ad_user_port_key: allowed values 0 - 1023 [ 486.394763][T18887] netlink: 'syz.3.3269': attribute type 4 has an invalid length. [ 486.590369][T18877] bond1 (unregistering): Released all slaves [ 486.656176][T18894] syzkaller0: entered promiscuous mode [ 486.665541][T18894] syzkaller0: entered allmulticast mode [ 486.821119][ T3542] bond10: (slave bridge6): failed to get link speed/duplex [ 487.131657][T18911] bridge0: port 2(bridge_slave_1) entered disabled state [ 487.760446][T18950] tipc: Started in network mode [ 487.784621][T18950] tipc: Node identity e6a6be7bf0ad, cluster identity 4711 [ 487.828269][T18950] tipc: Enabled bearer , priority 0 [ 487.956321][T18951] syzkaller0: entered promiscuous mode [ 487.970485][T18951] syzkaller0: entered allmulticast mode [ 488.015096][T18946] tipc: Resetting bearer [ 488.075591][T18946] tipc: Disabling bearer [ 488.206330][T18966] mac80211_hwsim hwsim36 syzkaller0: entered promiscuous mode [ 488.236770][T18966] mac80211_hwsim hwsim36 syzkaller0: entered allmulticast mode [ 488.257688][T18963] xt_CT: No such helper "snmp_trap" [ 488.294804][T18971] __nla_validate_parse: 6 callbacks suppressed [ 488.294823][T18971] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3293'. [ 488.339569][T18966] team_slave_0: entered promiscuous mode [ 488.345888][T18966] veth0_to_bond: entered promiscuous mode [ 488.355847][T18966] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 488.372664][T18971] vlan2: entered promiscuous mode [ 488.378477][T18971] bridge0: entered promiscuous mode [ 488.417828][T18966] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 488.565457][T18987] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3296'. [ 488.617977][T18992] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3296'. [ 489.001564][ T3542] net_ratelimit: 6 callbacks suppressed [ 489.001588][ T3542] bond10: (slave bridge6): failed to get link speed/duplex [ 489.043886][T18987] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3296'. [ 489.056380][T14225] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 489.080351][T14225] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 489.122502][T14227] bond10: (slave bridge6): failed to get link speed/duplex [ 489.133965][T18992] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3296'. [ 489.166304][T14225] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 489.186818][T14225] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 489.232452][ T13] bond10: (slave bridge6): failed to get link speed/duplex [ 489.265940][T19001] openvswitch: netlink: Message has 592 unknown bytes. [ 489.316672][T19005] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3301'. [ 489.331066][T19001] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 489.341375][ T13] bond10: (slave bridge6): failed to get link speed/duplex [ 489.432706][T19011] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3301'. [ 489.509791][T19005] team1: entered promiscuous mode [ 489.551160][T19005] team1: entered allmulticast mode [ 489.556931][T19005] 8021q: adding VLAN 0 to HW filter on device team1 [ 489.612021][T19011] team2: entered promiscuous mode [ 489.624159][T19011] team2: entered allmulticast mode [ 489.639963][T19011] 8021q: adding VLAN 0 to HW filter on device team2 [ 489.821936][T19025] bridge0: port 2(bridge_slave_1) entered disabled state [ 489.829686][T19025] bridge0: port 1(bridge_slave_0) entered disabled state [ 489.980491][T19025] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 489.998087][T19025] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 490.258143][T19056] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.3312'. [ 490.290917][T14225] bond10: (slave bridge6): failed to get link speed/duplex [ 490.366144][T14227] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 490.383643][T14227] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 490.393834][T19053] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3312'. [ 490.415199][T19045] syzkaller0: entered promiscuous mode [ 490.420725][T19045] syzkaller0: entered allmulticast mode [ 490.548454][T19064] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3314'. [ 490.569180][T14227] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 490.637822][T14227] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 490.736190][T19067] syzkaller0: entered promiscuous mode [ 490.742024][T19067] syzkaller0: entered allmulticast mode [ 490.753269][T14222] bond10: (slave bridge6): failed to get link speed/duplex [ 490.851826][T19078] validate_nla: 6 callbacks suppressed [ 490.851846][T19078] netlink: 'syz.0.3319': attribute type 12 has an invalid length. [ 490.873508][T14227] bond10: (slave bridge6): failed to get link speed/duplex [ 491.006130][ T7298] bond10: (slave bridge6): failed to get link speed/duplex [ 491.064331][T19089] tipc: Started in network mode [ 491.069265][T19089] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 491.100680][T19089] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 491.123412][T19089] tipc: Enabled bearer , priority 10 [ 491.281729][T19102] lo speed is unknown, defaulting to 1000 [ 491.392806][T19105] nbd: nbd64 already in use [ 491.519365][T19110] udevd[19110]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 491.611756][T19118] xt_bpf: check failed: parse error [ 491.868522][T19129] lo speed is unknown, defaulting to 1000 [ 491.944566][T19125] geneve0: entered promiscuous mode [ 492.188289][T19133] syzkaller0: entered promiscuous mode [ 492.209024][T19133] syzkaller0: entered allmulticast mode [ 492.278918][ T5962] tipc: Node number set to 1 [ 492.464637][T19119] lec:lec_atm_close: lec0: Shut down! [ 492.585182][T19145] netlink: 'syz.2.3337': attribute type 1 has an invalid length. [ 492.764204][T19145] 8021q: adding VLAN 0 to HW filter on device bond3 [ 492.833497][T19148] bridge1: port 1(veth3) entered blocking state [ 492.839893][T19148] bridge1: port 1(veth3) entered disabled state [ 492.878872][T19148] veth3: entered allmulticast mode [ 492.888824][T19148] veth3: entered promiscuous mode [ 492.964917][T19156] bond3 (unregistering): Released all slaves [ 493.101802][ T5962] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 493.159014][T19174] xt_bpf: check failed: parse error [ 493.170996][ T5962] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 493.415160][T19180] __nla_validate_parse: 79 callbacks suppressed [ 493.415183][T19180] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3346'. [ 493.514059][T19190] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 493.570304][T19187] lo speed is unknown, defaulting to 1000 [ 493.991467][T14227] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 494.024604][T19196] tipc: Enabling of bearer rejected, failed to enable media [ 494.114282][T14227] net_ratelimit: 16 callbacks suppressed [ 494.114317][T14227] bond10: (slave bridge6): failed to get link speed/duplex [ 494.376971][ T3542] bond10: (slave bridge6): failed to get link speed/duplex [ 494.632911][ T7298] bond10: (slave bridge6): failed to get link speed/duplex [ 494.722191][T19230] lo speed is unknown, defaulting to 1000 [ 494.781170][T14227] bond10: (slave bridge6): failed to get link speed/duplex [ 494.854640][T19245] sctp: [Deprecated]: syz.1.3356 (pid 19245) Use of struct sctp_assoc_value in delayed_ack socket option. [ 494.854640][T19245] Use struct sctp_sack_info instead [ 494.880013][T19248] rdma_op ffff888031ce69f0 conn xmit_rdma 0000000000000000 [ 494.891176][T14227] bond10: (slave bridge6): failed to get link speed/duplex [ 494.907233][T19248] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3357'. [ 495.024028][T19250] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3357'. [ 495.072040][ T7298] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 495.085320][ T7298] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 495.101034][T14222] bond10: (slave bridge6): failed to get link speed/duplex [ 495.144128][T19258] netlink: 'syz.1.3359': attribute type 10 has an invalid length. [ 495.185896][T19258] team0: Port device netdevsim0 added [ 495.211014][T14223] bond10: (slave bridge6): failed to get link speed/duplex [ 495.216516][T19258] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3359'. [ 495.341122][T14227] bond10: (slave bridge6): failed to get link speed/duplex [ 495.451189][T14222] bond10: (slave bridge6): failed to get link speed/duplex [ 495.533007][ T7936] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 495.700876][T14222] bond10: (slave bridge6): failed to get link speed/duplex [ 496.093312][T19284] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3363'. [ 496.402637][T19295] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.3367'. [ 496.528188][T19298] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3368'. [ 496.635033][T19298] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3368'. [ 496.780014][T19308] dvmrp6: entered allmulticast mode [ 496.797150][T19308] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3369'. [ 497.234892][T19319] lo speed is unknown, defaulting to 1000 [ 497.699636][T19298] infiniband syz1: set down [ 497.709758][T19298] infiniband syz1: added ipvlan0 [ 497.779823][T19298] RDS/IB: syz1: added [ 497.786411][T19298] smc: adding ib device syz1 with port count 1 [ 497.799750][T19298] smc: ib device syz1 port 1 has no pnetid [ 497.820853][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5360 ms [ 497.829099][ C0] lec:lec_tx_timeout: lec0 [ 498.311912][T19352] raw_sendmsg: syz.1.3381 forgot to set AF_INET. Fix it! [ 498.593701][T19363] 8021q: adding VLAN 0 to HW filter on device bond1 [ 498.624915][T19363] bond0: (slave bond1): Enslaving as an active interface with an up link [ 498.752676][T19369] FAULT_INJECTION: forcing a failure. [ 498.752676][T19369] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 498.791239][T19369] CPU: 1 UID: 0 PID: 19369 Comm: syz.3.3385 Not tainted syzkaller #0 PREEMPT(full) [ 498.791269][T19369] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 498.791284][T19369] Call Trace: [ 498.791292][T19369] [ 498.791302][T19369] dump_stack_lvl+0xe8/0x150 [ 498.791335][T19369] should_fail_ex+0x412/0x560 [ 498.791367][T19369] _copy_from_user+0x2d/0xb0 [ 498.791401][T19369] kstrtouint_from_user+0xd6/0x180 [ 498.791431][T19369] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 498.791489][T19369] proc_fail_nth_write+0x8e/0x210 [ 498.791523][T19369] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 498.791561][T19369] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 498.791593][T19369] vfs_write+0x29a/0xb90 [ 498.791634][T19369] ? __pfx_vfs_write+0x10/0x10 [ 498.791667][T19369] ? __fget_files+0x2a/0x420 [ 498.791696][T19369] ? __fget_files+0x3a0/0x420 [ 498.791717][T19369] ? __fget_files+0x2a/0x420 [ 498.791757][T19369] ksys_write+0x150/0x270 [ 498.791798][T19369] ? __pfx_ksys_write+0x10/0x10 [ 498.791841][T19369] do_syscall_64+0xe2/0xf80 [ 498.791870][T19369] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 498.791890][T19369] ? trace_irq_disable+0x37/0x100 [ 498.791909][T19369] ? clear_bhb_loop+0x60/0xb0 [ 498.791935][T19369] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 498.791955][T19369] RIP: 0033:0x7fdfb1b5c84e [ 498.791975][T19369] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 498.791992][T19369] RSP: 002b:00007fdfb299efe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 498.792014][T19369] RAX: ffffffffffffffda RBX: 00007fdfb299f6c0 RCX: 00007fdfb1b5c84e [ 498.792030][T19369] RDX: 0000000000000001 RSI: 00007fdfb299f0a0 RDI: 0000000000000007 [ 498.792043][T19369] RBP: 00007fdfb299f090 R08: 0000000000000000 R09: 0000000000000000 [ 498.792056][T19369] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 498.792068][T19369] R13: 00007fdfb1e16038 R14: 00007fdfb1e15fa0 R15: 00007fffb394f6c8 [ 498.792104][T19369] [ 499.241662][ T13] net_ratelimit: 19 callbacks suppressed [ 499.241685][ T13] bond10: (slave bridge6): failed to get link speed/duplex [ 499.381415][T14223] bond10: (slave bridge6): failed to get link speed/duplex [ 499.421034][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 499.427361][T19371] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3386'. [ 499.443527][T19371] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3386'. [ 499.474100][T19391] vlan3: entered allmulticast mode [ 499.482681][T19391] team0: entered allmulticast mode [ 499.487860][T19391] team_slave_0: entered allmulticast mode [ 499.530842][T19391] team_slave_1: entered allmulticast mode [ 499.640909][ T7298] bond10: (slave bridge6): failed to get link speed/duplex [ 499.776947][T19406] netlink: 'syz.1.3394': attribute type 4 has an invalid length. [ 499.801538][ T7298] bond10: (slave bridge6): failed to get link speed/duplex [ 499.910915][ T7298] bond10: (slave bridge6): failed to get link speed/duplex [ 500.021881][ T7298] bond10: (slave bridge6): failed to get link speed/duplex [ 500.151740][T14222] bond10: (slave bridge6): failed to get link speed/duplex [ 500.260918][ T7298] bond10: (slave bridge6): failed to get link speed/duplex [ 500.370549][T19438] syzkaller0: entered promiscuous mode [ 500.382682][T19438] syzkaller0: entered allmulticast mode [ 500.463531][ T7298] bond10: (slave bridge6): failed to get link speed/duplex [ 500.615856][T19447] netlink: 112 bytes leftover after parsing attributes in process `syz.3.3404'. [ 500.638571][T19443] 8021q: adding VLAN 0 to HW filter on device bond2 [ 500.649201][T19443] bond0: (slave bond2): Enslaving as an active interface with an up link [ 500.661329][T14225] bond10: (slave bridge6): failed to get link speed/duplex [ 500.852108][T19450] bond2: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 500.873517][T19450] bond2 (unregistering): Released all slaves [ 501.406332][T19469] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3411'. [ 502.307831][T19483] 8021q: adding VLAN 0 to HW filter on device bond3 [ 502.325156][T19483] bond0: (slave bond3): Enslaving as an active interface with an up link [ 502.398300][T19486] netlink: 112 bytes leftover after parsing attributes in process `syz.2.3416'. [ 502.453020][T19488] netlink: 'syz.2.3417': attribute type 5 has an invalid length. [ 502.461243][T19488] netlink: 'syz.2.3417': attribute type 5 has an invalid length. [ 503.078414][T19420] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 503.346058][T19508] lo speed is unknown, defaulting to 1000 [ 503.628286][T19519] 8021q: adding VLAN 0 to HW filter on device bond1 [ 503.664038][T19519] bond0: (slave bond1): Enslaving as an active interface with an up link [ 503.747522][T19523] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3429'. [ 504.394152][ T13] net_ratelimit: 28 callbacks suppressed [ 504.394173][ T13] bond10: (slave bridge6): failed to get link speed/duplex [ 504.611132][ T7298] bond10: (slave bridge6): failed to get link speed/duplex [ 504.666609][T19565] xt_CT: You must specify a L4 protocol and not use inversions on it [ 504.721150][T19565] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3440'. [ 504.787034][T19567] 8021q: adding VLAN 0 to HW filter on device bond3 [ 504.820613][T19567] bond0: (slave bond3): Enslaving as an active interface with an up link [ 504.862437][T14225] bond10: (slave bridge6): failed to get link speed/duplex [ 504.989741][T19569] syzkaller0: entered promiscuous mode [ 505.023780][T19577] netlink: 'syz.1.3443': attribute type 1 has an invalid length. [ 505.051329][T19569] syzkaller0: entered allmulticast mode [ 505.065089][T19577] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3443'. [ 505.329510][T19585] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3445'. [ 505.391330][T19587] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3445'. [ 505.444771][T19588] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3445'. [ 506.547423][ T1302] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 506.557056][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 506.564341][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 506.573420][ T1302] lec:lec_start_xmit: lec0:No lecd attached [ 507.051785][T14222] bond10: (slave bridge6): failed to get link speed/duplex [ 507.167213][T14227] bond10: (slave bridge6): failed to get link speed/duplex [ 507.231838][T19599] lo speed is unknown, defaulting to 1000 [ 507.300980][T14225] bond10: (slave bridge6): failed to get link speed/duplex [ 507.441212][ T7298] bond10: (slave bridge6): failed to get link speed/duplex [ 507.572373][ T7298] bond10: (slave bridge6): failed to get link speed/duplex [ 507.758702][T19629] 8021q: adding VLAN 0 to HW filter on device bond2 [ 507.768256][T19629] bond0: (slave bond2): Enslaving as an active interface with an up link [ 507.781008][ T7298] bond10: (slave bridge6): failed to get link speed/duplex [ 507.974758][T19643] netdevsim netdevsim2 ÿÿÿÿÿÿ: renamed from netdevsim0 (while UP) [ 508.460973][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 508.814046][T19668] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3457'. [ 509.008540][T19692] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3461'. [ 509.124553][T19695] 8021q: VLANs not supported on wg0 [ 509.130970][T19694] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3462'. [ 509.194645][T19701] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3462'. [ 509.209870][T19699] syzkaller1: entered promiscuous mode [ 509.218091][T19699] syzkaller1: entered allmulticast mode [ 509.279798][T19703] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3465'. [ 510.166027][T19718] lo: Caught tx_queue_len zero misconfig [ 510.251284][T14222] net_ratelimit: 7 callbacks suppressed [ 510.251306][T14222] bond10: (slave bridge6): failed to get link speed/duplex [ 510.362420][T19730] __nla_validate_parse: 1 callbacks suppressed [ 510.362441][T19730] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3474'. [ 510.378087][ T7298] bond10: (slave bridge6): failed to get link speed/duplex [ 510.378488][T19729] netlink: 'syz.3.3473': attribute type 29 has an invalid length. [ 510.519754][ T7298] bond10: (slave bridge6): failed to get link speed/duplex [ 510.651223][T14222] bond10: (slave bridge6): failed to get link speed/duplex [ 511.010428][T19745] lo speed is unknown, defaulting to 1000 [ 511.022015][T14222] bond10: (slave bridge6): failed to get link speed/duplex [ 511.150924][ T7298] bond10: (slave bridge6): failed to get link speed/duplex [ 511.280407][T14225] bond10: (slave bridge6): failed to get link speed/duplex [ 511.394542][T14222] bond10: (slave bridge6): failed to get link speed/duplex [ 511.531150][ T7298] bond10: (slave bridge6): failed to get link speed/duplex [ 511.668182][ T13] bond10: (slave bridge6): failed to get link speed/duplex [ 511.679147][T19781] lo speed is unknown, defaulting to 1000 [ 511.820807][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5250 ms [ 511.828915][ C0] lec:lec_tx_timeout: lec0 [ 512.103550][T19803] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3490'. [ 512.112679][T19803] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3490'. [ 512.236646][T19803] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3490'. [ 512.285852][T19803] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3490'. [ 512.288079][ T13] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 512.295347][T19803] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3490'. [ 512.322273][T19803] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3490'. [ 512.350914][ T13] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 512.367910][ T13] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 512.403333][ T13] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 512.679470][T19816] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3493'. [ 512.942959][T19833] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3496'. [ 513.331816][T19849] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3501'. [ 514.066251][T19867] tc_dump_action: action bad kind [ 514.729631][T19892] syzkaller1: entered promiscuous mode [ 514.750915][T19892] syzkaller1: entered allmulticast mode [ 515.261290][T14227] net_ratelimit: 20 callbacks suppressed [ 515.261314][T14227] bond10: (slave bridge6): failed to get link speed/duplex [ 515.391991][T14227] bond10: (slave bridge6): failed to get link speed/duplex [ 515.511198][ T13] bond10: (slave bridge6): failed to get link speed/duplex [ 515.640976][T14227] bond10: (slave bridge6): failed to get link speed/duplex [ 515.715137][T19929] __nla_validate_parse: 3 callbacks suppressed [ 515.715156][T19929] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3528'. [ 515.760648][T19930] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3528'. [ 515.795277][T14225] bond10: (slave bridge6): failed to get link speed/duplex [ 515.934129][ T13] bond10: (slave bridge6): failed to get link speed/duplex [ 515.998755][T19945] lo speed is unknown, defaulting to 1000 [ 516.098318][T19948] lo speed is unknown, defaulting to 1000 [ 516.105387][T14225] bond10: (slave bridge6): failed to get link speed/duplex [ 516.240982][T14225] bond10: (slave bridge6): failed to get link speed/duplex [ 516.351372][ T13] bond10: (slave bridge6): failed to get link speed/duplex [ 516.472288][T14222] bond10: (slave bridge6): failed to get link speed/duplex [ 517.466380][T20005] xt_hashlimit: size too large, truncated to 1048576 [ 517.545656][T20008] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3547'. [ 517.571549][T20008] nbd: socks must be embedded in a SOCK_ITEM attr [ 517.805979][T20019] lo speed is unknown, defaulting to 1000 [ 518.237922][T20028] xt_CT: You must specify a L4 protocol and not use inversions on it [ 518.328907][T20029] xt_hashlimit: size too large, truncated to 1048576 [ 518.435790][T20033] netlink: 'syz.1.3554': attribute type 22 has an invalid length. [ 518.660036][T20038] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.3555'. [ 518.848249][T20044] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3557'. [ 518.911215][T20044] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3557'. [ 518.939353][T20047] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3558'. [ 519.106314][T20051] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3557'. [ 519.140993][T20043] lo speed is unknown, defaulting to 1000 [ 519.775247][T20067] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3563'. [ 519.790898][T20067] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3563'. [ 520.139250][T20076] lo speed is unknown, defaulting to 1000 [ 520.431534][T14227] net_ratelimit: 23 callbacks suppressed [ 520.431557][T14227] bond10: (slave bridge6): failed to get link speed/duplex [ 520.571033][T14227] bond10: (slave bridge6): failed to get link speed/duplex [ 520.711701][T14225] bond10: (slave bridge6): failed to get link speed/duplex [ 520.841022][T14225] bond10: (slave bridge6): failed to get link speed/duplex [ 520.951675][T14225] bond10: (slave bridge6): failed to get link speed/duplex [ 521.055922][T20107] xt_bpf: check failed: parse error [ 521.071554][ T13] bond10: (slave bridge6): failed to get link speed/duplex [ 521.181272][T14225] bond10: (slave bridge6): failed to get link speed/duplex [ 521.221377][T20111] netlink: 'syz.0.3577': attribute type 1 has an invalid length. [ 521.254781][T20111] bond3: entered promiscuous mode [ 521.260381][T20111] 8021q: adding VLAN 0 to HW filter on device bond3 [ 521.299635][T20111] bond3: (slave bridge2): making interface the new active one [ 521.307434][T20111] bridge2: entered promiscuous mode [ 521.314572][T20111] bond3: (slave bridge2): Enslaving as an active interface with an up link [ 521.331553][ T13] bond10: (slave bridge6): failed to get link speed/duplex [ 521.446000][T20117] 8021q: adding VLAN 0 to HW filter on device bond2 [ 521.455938][T20117] bond0: (slave bond2): Enslaving as an active interface with an up link [ 521.731210][ T13] bond10: (slave bridge6): failed to get link speed/duplex [ 521.798374][T20131] lo speed is unknown, defaulting to 1000 [ 521.840863][T14225] bond10: (slave bridge6): failed to get link speed/duplex [ 522.698486][T20158] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3591'. [ 522.810277][T20162] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3591'. [ 522.844236][T20162] vlan3: entered promiscuous mode [ 522.866232][T20162] bond0: entered promiscuous mode [ 522.885826][T20162] bond_slave_0: entered promiscuous mode [ 522.908579][T20162] bond_slave_1: entered promiscuous mode [ 522.923733][T20162] bond1: entered promiscuous mode [ 523.380287][T20187] netlink: 'syz.0.3600': attribute type 1 has an invalid length. [ 523.431109][T20187] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3600'. [ 523.629986][T20197] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3602'. [ 523.687823][T20202] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3602'. [ 523.781239][T20202] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3602'. [ 523.824144][T20205] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3605'. [ 524.012278][T20213] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3607'. [ 524.120896][T20218] sctp: [Deprecated]: syz.1.3609 (pid 20218) Use of struct sctp_assoc_value in delayed_ack socket option. [ 524.120896][T20218] Use struct sctp_sack_info instead [ 524.502249][T20242] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3618'. [ 524.619540][T20248] netlink: 'syz.2.3618': attribute type 5 has an invalid length. [ 524.683558][T20242] lo speed is unknown, defaulting to 1000 [ 524.986440][T20257] netlink: 'syz.0.3621': attribute type 64 has an invalid length. [ 525.047517][T20257] netlink: 'syz.0.3621': attribute type 64 has an invalid length. [ 525.203149][T20264] tipc: Enabled bearer , priority 0 [ 525.235002][T20264] syzkaller0: entered promiscuous mode [ 525.263269][T20264] syzkaller0: entered allmulticast mode [ 525.385044][T20264] tipc: Resetting bearer [ 525.468621][T20263] tipc: Resetting bearer [ 525.485103][T20274] netlink: 'syz.4.3627': attribute type 1 has an invalid length. [ 525.503253][T20275] netlink: 80 bytes leftover after parsing attributes in process `syz.0.3628'. [ 525.529975][T20263] tipc: Disabling bearer [ 525.581627][T14223] net_ratelimit: 21 callbacks suppressed [ 525.581648][T14223] bond10: (slave bridge6): failed to get link speed/duplex [ 525.726281][T20283] nbd: must specify a device to reconfigure [ 525.731287][ T7305] bond10: (slave bridge6): failed to get link speed/duplex [ 525.841248][ T7305] bond10: (slave bridge6): failed to get link speed/duplex [ 525.902157][T20285] bridge0: entered promiscuous mode [ 525.908984][T20285] gretap0: entered promiscuous mode [ 525.932160][T20285] debugfs: 'hsr1' already exists in 'hsr' [ 525.938047][T20285] Cannot create hsr debugfs directory [ 525.967948][T20285] hsr1: Slave A (bridge0) is not up; please bring it up to get a fully working HSR network [ 525.997525][T20285] hsr1: Slave B (gretap0) is not up; please bring it up to get a fully working HSR network [ 526.010951][ T7305] bond10: (slave bridge6): failed to get link speed/duplex [ 526.121110][T14227] bond10: (slave bridge6): failed to get link speed/duplex [ 526.351290][T14227] bond10: (slave bridge6): failed to get link speed/duplex [ 526.525813][ T7305] bond10: (slave bridge6): failed to get link speed/duplex [ 526.607939][T20307] netlink: 'syz.2.3636': attribute type 29 has an invalid length. [ 526.622808][T20310] netlink: 'syz.2.3636': attribute type 29 has an invalid length. [ 526.651188][ T7305] bond10: (slave bridge6): failed to get link speed/duplex [ 526.761154][ T7305] bond10: (slave bridge6): failed to get link speed/duplex [ 526.880905][T14227] bond10: (slave bridge6): failed to get link speed/duplex [ 527.472838][T20326] ip6tnl2: entered promiscuous mode [ 527.498731][T20326] ip6tnl2: entered allmulticast mode [ 527.598297][T20335] tipc: Enabled bearer , priority 0 [ 527.654370][T20333] bridge0: entered promiscuous mode [ 527.661093][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 527.665123][T20333] gretap0: entered promiscuous mode [ 527.676258][T20333] debugfs: 'hsr1' already exists in 'hsr' [ 527.682278][T20333] Cannot create hsr debugfs directory [ 527.745636][T20335] tipc: Disabling bearer [ 527.965325][T20347] lo speed is unknown, defaulting to 1000 [ 528.687661][T20374] bond4: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 528.752034][T20374] bond4 (unregistering): Released all slaves [ 528.759941][T20380] netlink: 'syz.1.3658': attribute type 1 has an invalid length. [ 528.811385][T20383] __nla_validate_parse: 13 callbacks suppressed [ 528.811408][T20383] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3659'. [ 528.829197][T20384] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3658'. [ 528.890866][T20383] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3659'. [ 529.072642][T20384] bond2: (slave bridge3): making interface the new active one [ 529.102118][T20384] bond2: (slave bridge3): Enslaving as an active interface with an up link [ 529.168695][T20389] macvlan2: entered promiscuous mode [ 529.174463][T20389] macvlan2: entered allmulticast mode [ 529.192080][T20389] bond2: entered promiscuous mode [ 529.198146][T20389] bridge3: entered promiscuous mode [ 529.204897][T20389] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 529.215176][T20389] bond2: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 529.234101][T20389] bond2: left promiscuous mode [ 529.239123][T20389] bridge3: left promiscuous mode [ 529.274851][T20392] FAULT_INJECTION: forcing a failure. [ 529.274851][T20392] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 529.301499][T20392] CPU: 1 UID: 0 PID: 20392 Comm: syz.3.3660 Not tainted syzkaller #0 PREEMPT(full) [ 529.301534][T20392] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 529.301550][T20392] Call Trace: [ 529.301560][T20392] [ 529.301571][T20392] dump_stack_lvl+0xe8/0x150 [ 529.301609][T20392] should_fail_ex+0x412/0x560 [ 529.301646][T20392] _copy_from_user+0x2d/0xb0 [ 529.301685][T20392] ___sys_sendmsg+0x1c6/0x360 [ 529.301717][T20392] ? __lock_acquire+0x6b5/0x2cf0 [ 529.301756][T20392] ? __pfx____sys_sendmsg+0x10/0x10 [ 529.301831][T20392] ? __fget_files+0x2a/0x420 [ 529.301857][T20392] ? __fget_files+0x3a0/0x420 [ 529.301893][T20392] __x64_sys_sendmsg+0x1bd/0x2a0 [ 529.301932][T20392] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 529.301976][T20392] ? __pfx_ksys_write+0x10/0x10 [ 529.302030][T20392] do_syscall_64+0xe2/0xf80 [ 529.302054][T20392] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 529.302071][T20392] ? trace_irq_disable+0x37/0x100 [ 529.302087][T20392] ? clear_bhb_loop+0x60/0xb0 [ 529.302108][T20392] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 529.302124][T20392] RIP: 0033:0x7fdfb1b9bf79 [ 529.302140][T20392] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 529.302154][T20392] RSP: 002b:00007fdfb299f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 529.302172][T20392] RAX: ffffffffffffffda RBX: 00007fdfb1e15fa0 RCX: 00007fdfb1b9bf79 [ 529.302184][T20392] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000004 [ 529.302195][T20392] RBP: 00007fdfb299f090 R08: 0000000000000000 R09: 0000000000000000 [ 529.302205][T20392] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 529.302250][T20392] R13: 00007fdfb1e16038 R14: 00007fdfb1e15fa0 R15: 00007fffb394f6c8 [ 529.302277][T20392] [ 529.610194][T20398] netlink: 88 bytes leftover after parsing attributes in process `syz.0.3661'. [ 529.792013][T20405] tun0: tun_chr_ioctl cmd 1074025675 [ 529.813264][T20405] tun0: persist enabled [ 529.995718][T20418] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3667'. [ 530.027041][T20418] mac80211_hwsim hwsim36 syzkaller0: Caught tx_queue_len zero misconfig [ 530.099278][T20421] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3667'. [ 530.333721][T20428] FAULT_INJECTION: forcing a failure. [ 530.333721][T20428] name failslab, interval 1, probability 0, space 0, times 0 [ 530.360041][T20428] CPU: 1 UID: 0 PID: 20428 Comm: syz.4.3672 Not tainted syzkaller #0 PREEMPT(full) [ 530.360072][T20428] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 530.360085][T20428] Call Trace: [ 530.360094][T20428] [ 530.360103][T20428] dump_stack_lvl+0xe8/0x150 [ 530.360137][T20428] should_fail_ex+0x412/0x560 [ 530.360169][T20428] should_failslab+0xa8/0x100 [ 530.360196][T20428] kmem_cache_alloc_node_noprof+0x8b/0x6f0 [ 530.360229][T20428] ? __alloc_skb+0x186/0x7d0 [ 530.360255][T20428] ? __alloc_skb+0x1d0/0x7d0 [ 530.360278][T20428] ? __local_bh_enable_ip+0xd0/0x130 [ 530.360303][T20428] __alloc_skb+0x1d0/0x7d0 [ 530.360335][T20428] netlink_sendmsg+0x5d4/0xb40 [ 530.360371][T20428] ? __pfx_netlink_sendmsg+0x10/0x10 [ 530.360400][T20428] ? aa_sock_msg_perm+0xf1/0x1b0 [ 530.360428][T20428] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 530.360453][T20428] ? __pfx_netlink_sendmsg+0x10/0x10 [ 530.360476][T20428] ____sys_sendmsg+0xa68/0xad0 [ 530.360506][T20428] ? __might_fault+0xaf/0x130 [ 530.360543][T20428] ? __pfx_____sys_sendmsg+0x10/0x10 [ 530.360583][T20428] ? import_iovec+0x73/0xa0 [ 530.360619][T20428] ___sys_sendmsg+0x2a5/0x360 [ 530.360656][T20428] ? __lock_acquire+0x6b5/0x2cf0 [ 530.360690][T20428] ? __pfx____sys_sendmsg+0x10/0x10 [ 530.360763][T20428] ? __fget_files+0x2a/0x420 [ 530.360786][T20428] ? __fget_files+0x3a0/0x420 [ 530.360818][T20428] __x64_sys_sendmsg+0x1bd/0x2a0 [ 530.360860][T20428] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 530.360899][T20428] ? __pfx_ksys_write+0x10/0x10 [ 530.360943][T20428] do_syscall_64+0xe2/0xf80 [ 530.360973][T20428] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 530.360993][T20428] ? trace_irq_disable+0x37/0x100 [ 530.361012][T20428] ? clear_bhb_loop+0x60/0xb0 [ 530.361037][T20428] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 530.361058][T20428] RIP: 0033:0x7f27e6d9bf79 [ 530.361077][T20428] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 530.361094][T20428] RSP: 002b:00007f27e7d0e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 530.361117][T20428] RAX: ffffffffffffffda RBX: 00007f27e7015fa0 RCX: 00007f27e6d9bf79 [ 530.361132][T20428] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000004 [ 530.361145][T20428] RBP: 00007f27e7d0e090 R08: 0000000000000000 R09: 0000000000000000 [ 530.361158][T20428] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 530.361169][T20428] R13: 00007f27e7016038 R14: 00007f27e7015fa0 R15: 00007ffd6ab833a8 [ 530.361203][T20428] [ 530.614283][T14223] net_ratelimit: 19 callbacks suppressed [ 530.614306][T14223] bond10: (slave bridge6): failed to get link speed/duplex [ 530.656635][T20432] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3673'. [ 530.676127][T20432] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3673'. [ 530.779609][T20432] bridge0: entered promiscuous mode [ 530.795546][T20432] gretap0: entered promiscuous mode [ 530.812524][T20432] debugfs: 'hsr1' already exists in 'hsr' [ 530.828605][T20432] Cannot create hsr debugfs directory [ 530.851698][T20432] hsr1: Slave A (bridge0) is not up; please bring it up to get a fully working HSR network [ 530.862604][T20432] hsr1: Slave B (gretap0) is not up; please bring it up to get a fully working HSR network [ 530.891319][ T7305] bond10: (slave bridge6): failed to get link speed/duplex [ 530.924663][T20444] netlink: 'syz.0.3676': attribute type 1 has an invalid length. [ 530.933302][T20444] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3676'. [ 531.035899][T14223] bond10: (slave bridge6): failed to get link speed/duplex [ 531.082331][T20441] delete_channel: no stack [ 531.171011][ T7305] bond10: (slave bridge6): failed to get link speed/duplex [ 531.301273][ T7298] bond10: (slave bridge6): failed to get link speed/duplex [ 531.329572][T10680] lec:lec_start_xmit: lec0:No lecd attached [ 531.406644][T20471] FAULT_INJECTION: forcing a failure. [ 531.406644][T20471] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 531.420225][T20471] CPU: 0 UID: 0 PID: 20471 Comm: syz.2.3685 Not tainted syzkaller #0 PREEMPT(full) [ 531.420253][T20471] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 531.420267][T20471] Call Trace: [ 531.420275][T20471] [ 531.420284][T20471] dump_stack_lvl+0xe8/0x150 [ 531.420318][T20471] should_fail_ex+0x412/0x560 [ 531.420349][T20471] _copy_from_iter+0x1d3/0x1670 [ 531.420389][T20471] ? rcu_is_watching+0x15/0xb0 [ 531.420411][T20471] ? __pfx__copy_from_iter+0x10/0x10 [ 531.420436][T20471] ? kmem_cache_alloc_node_noprof+0x473/0x6f0 [ 531.420486][T20471] ? netlink_sendmsg+0x650/0xb40 [ 531.420509][T20471] ? skb_put+0x11b/0x210 [ 531.420540][T20471] netlink_sendmsg+0x6c0/0xb40 [ 531.420575][T20471] ? __pfx_netlink_sendmsg+0x10/0x10 [ 531.420604][T20471] ? aa_sock_msg_perm+0xf1/0x1b0 [ 531.420631][T20471] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 531.420656][T20471] ? __pfx_netlink_sendmsg+0x10/0x10 [ 531.420680][T20471] ____sys_sendmsg+0xa68/0xad0 [ 531.420710][T20471] ? __might_fault+0xaf/0x130 [ 531.420750][T20471] ? __pfx_____sys_sendmsg+0x10/0x10 [ 531.420789][T20471] ? import_iovec+0x73/0xa0 [ 531.420823][T20471] ___sys_sendmsg+0x2a5/0x360 [ 531.420859][T20471] ? __lock_acquire+0x6b5/0x2cf0 [ 531.420893][T20471] ? __pfx____sys_sendmsg+0x10/0x10 [ 531.420962][T20471] ? __fget_files+0x2a/0x420 [ 531.420984][T20471] ? __fget_files+0x3a0/0x420 [ 531.421018][T20471] __x64_sys_sendmsg+0x1bd/0x2a0 [ 531.421052][T20471] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 531.421092][T20471] ? __pfx_ksys_write+0x10/0x10 [ 531.421134][T20471] do_syscall_64+0xe2/0xf80 [ 531.421161][T20471] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 531.421181][T20471] ? trace_irq_disable+0x37/0x100 [ 531.421201][T20471] ? clear_bhb_loop+0x60/0xb0 [ 531.421224][T20471] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 531.421243][T20471] RIP: 0033:0x7f0dda39bf79 [ 531.421263][T20471] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 531.421280][T20471] RSP: 002b:00007f0ddb1ef028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 531.421302][T20471] RAX: ffffffffffffffda RBX: 00007f0dda615fa0 RCX: 00007f0dda39bf79 [ 531.421316][T20471] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000004 [ 531.421329][T20471] RBP: 00007f0ddb1ef090 R08: 0000000000000000 R09: 0000000000000000 [ 531.421342][T20471] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 531.421354][T20471] R13: 00007f0dda616038 R14: 00007f0dda615fa0 R15: 00007ffc8be448f8 [ 531.421388][T20471] [ 531.770918][T14225] bond10: (slave bridge6): failed to get link speed/duplex [ 531.911670][T20485] Cannot find add_set index 2 as target [ 531.935659][ T7305] bond10: (slave bridge6): failed to get link speed/duplex [ 532.029171][T20479] lo speed is unknown, defaulting to 1000 [ 532.051786][ T7305] bond10: (slave bridge6): failed to get link speed/duplex [ 532.161530][ T7298] bond10: (slave bridge6): failed to get link speed/duplex [ 532.271867][ T7298] bond10: (slave bridge6): failed to get link speed/duplex [ 532.443334][T20512] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 532.535663][T20514] xt_bpf: check failed: parse error [ 532.706016][T20517] netlink: 'syz.4.3695': attribute type 13 has an invalid length. [ 532.728168][T20519] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3696'. [ 532.765027][T20520] IPVS: set_ctl: invalid protocol: 0 172.20.20.68:20003 [ 532.823893][T20517] gretap0: refused to change device tx_queue_len [ 532.936808][T20524] lo speed is unknown, defaulting to 1000 [ 533.059612][T20526] FAULT_INJECTION: forcing a failure. [ 533.059612][T20526] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 533.073644][T20526] CPU: 1 UID: 0 PID: 20526 Comm: syz.1.3698 Not tainted syzkaller #0 PREEMPT(full) [ 533.073673][T20526] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 533.073694][T20526] Call Trace: [ 533.073702][T20526] [ 533.073711][T20526] dump_stack_lvl+0xe8/0x150 [ 533.073743][T20526] should_fail_ex+0x412/0x560 [ 533.073775][T20526] _copy_from_iter+0x1d3/0x1670 [ 533.073814][T20526] ? rcu_is_watching+0x15/0xb0 [ 533.073837][T20526] ? __pfx__copy_from_iter+0x10/0x10 [ 533.073862][T20526] ? kmem_cache_alloc_node_noprof+0x473/0x6f0 [ 533.073904][T20526] ? netlink_sendmsg+0x650/0xb40 [ 533.073927][T20526] ? skb_put+0x11b/0x210 [ 533.073959][T20526] netlink_sendmsg+0x6c0/0xb40 [ 533.073993][T20526] ? __pfx_netlink_sendmsg+0x10/0x10 [ 533.074022][T20526] ? aa_sock_msg_perm+0xf1/0x1b0 [ 533.074050][T20526] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 533.074075][T20526] ? __pfx_netlink_sendmsg+0x10/0x10 [ 533.074098][T20526] ____sys_sendmsg+0xa68/0xad0 [ 533.074127][T20526] ? __might_fault+0xaf/0x130 [ 533.074165][T20526] ? __pfx_____sys_sendmsg+0x10/0x10 [ 533.074205][T20526] ? import_iovec+0x73/0xa0 [ 533.074239][T20526] ___sys_sendmsg+0x2a5/0x360 [ 533.074267][T20526] ? __lock_acquire+0x6b5/0x2cf0 [ 533.074301][T20526] ? __pfx____sys_sendmsg+0x10/0x10 [ 533.074369][T20526] ? __fget_files+0x2a/0x420 [ 533.074392][T20526] ? __fget_files+0x3a0/0x420 [ 533.074427][T20526] __x64_sys_sendmsg+0x1bd/0x2a0 [ 533.074459][T20526] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 533.074500][T20526] ? __pfx_ksys_write+0x10/0x10 [ 533.074543][T20526] do_syscall_64+0xe2/0xf80 [ 533.074573][T20526] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 533.074597][T20526] ? trace_irq_disable+0x37/0x100 [ 533.074617][T20526] ? clear_bhb_loop+0x60/0xb0 [ 533.074643][T20526] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 533.074663][T20526] RIP: 0033:0x7fc49219bf79 [ 533.074689][T20526] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 533.074707][T20526] RSP: 002b:00007fc4930c1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 533.074728][T20526] RAX: ffffffffffffffda RBX: 00007fc492415fa0 RCX: 00007fc49219bf79 [ 533.074743][T20526] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000004 [ 533.074756][T20526] RBP: 00007fc4930c1090 R08: 0000000000000000 R09: 0000000000000000 [ 533.074769][T20526] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 533.074781][T20526] R13: 00007fc492416038 R14: 00007fc492415fa0 R15: 00007fff11d0fd48 [ 533.074815][T20526] [ 533.895383][T20537] __nla_validate_parse: 2 callbacks suppressed [ 533.895406][T20537] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3701'. [ 534.137220][T20540] lo speed is unknown, defaulting to 1000 [ 534.533285][T20538] lo speed is unknown, defaulting to 1000 [ 534.907095][T20501] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 535.171385][T20547] netlink: 'syz.1.3703': attribute type 11 has an invalid length. [ 535.350018][T20559] xt_bpf: check failed: parse error [ 535.449325][T20551] netlink: 640 bytes leftover after parsing attributes in process `syz.4.3704'. [ 535.485267][T20551] netlink: 640 bytes leftover after parsing attributes in process `syz.4.3704'. [ 535.672814][ T7305] net_ratelimit: 24 callbacks suppressed [ 535.672839][ T7305] bond10: (slave bridge6): failed to get link speed/duplex [ 535.801764][T14225] bond10: (slave bridge6): failed to get link speed/duplex [ 535.918900][T20580] netlink: 'syz.0.3714': attribute type 1 has an invalid length. [ 535.921128][T14225] bond10: (slave bridge6): failed to get link speed/duplex [ 535.941254][T20580] netlink: 96 bytes leftover after parsing attributes in process `syz.0.3714'. [ 535.968305][T20580] netlink: 1 bytes leftover after parsing attributes in process `syz.0.3714'. [ 535.991264][T20580] netlink: 658 bytes leftover after parsing attributes in process `syz.0.3714'. [ 536.191427][T14225] bond10: (slave bridge6): failed to get link speed/duplex [ 536.311755][T14223] bond10: (slave bridge6): failed to get link speed/duplex [ 536.462720][T14225] bond10: (slave bridge6): failed to get link speed/duplex [ 536.594412][T14225] bond10: (slave bridge6): failed to get link speed/duplex [ 536.721293][ T7305] bond10: (slave bridge6): failed to get link speed/duplex [ 536.861447][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5530 ms [ 536.869508][ C0] lec:lec_tx_timeout: lec0 [ 536.874915][ T7305] bond10: (slave bridge6): failed to get link speed/duplex [ 537.071375][ T7298] bond10: (slave bridge6): failed to get link speed/duplex [ 537.269018][T20626] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3727'. [ 537.999869][T20661] syzkaller1: entered promiscuous mode [ 538.007917][T20661] syzkaller1: entered allmulticast mode [ 539.559791][T20600] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 539.714146][ T7920] IPVS: starting estimator thread 0... [ 539.822120][T20670] IPVS: using max 34 ests per chain, 81600 per kthread [ 539.934271][T20682] syz_tun: entered allmulticast mode [ 539.983278][T20682] syz_tun: left allmulticast mode [ 540.077724][T20690] 8021q: adding VLAN 0 to HW filter on device bond4 [ 540.087511][T20690] bond0: (slave bond4): Enslaving as an active interface with an up link [ 540.094808][T20694] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3751'. [ 540.130668][T20694] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3751'. [ 540.345342][T20712] netlink: 'syz.3.3750': attribute type 1 has an invalid length. [ 540.667593][T20727] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3761'. [ 540.678794][T20728] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3760'. [ 540.731193][ T7305] net_ratelimit: 31 callbacks suppressed [ 540.731222][ T7305] bond10: (slave bridge6): failed to get link speed/duplex [ 540.745831][T20731] xt_hashlimit: max too large, truncated to 1048576 [ 540.862848][T14225] bond10: (slave bridge6): failed to get link speed/duplex [ 540.972908][ T7305] bond10: (slave bridge6): failed to get link speed/duplex [ 541.102730][ T7305] bond10: (slave bridge6): failed to get link speed/duplex [ 541.221909][T14225] bond10: (slave bridge6): failed to get link speed/duplex [ 541.342967][T14227] bond10: (slave bridge6): failed to get link speed/duplex [ 541.430101][T20756] lo speed is unknown, defaulting to 1000 [ 541.471543][ T7305] bond10: (slave bridge6): failed to get link speed/duplex [ 541.587444][T20765] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3769'. [ 541.594984][T14222] bond10: (slave bridge6): failed to get link speed/duplex [ 541.623472][T20765] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3769'. [ 541.714580][T20770] FAULT_INJECTION: forcing a failure. [ 541.714580][T20770] name failslab, interval 1, probability 0, space 0, times 0 [ 541.724203][T14223] bond10: (slave bridge6): failed to get link speed/duplex [ 541.779753][T20770] CPU: 0 UID: 0 PID: 20770 Comm: syz.2.3770 Not tainted syzkaller #0 PREEMPT(full) [ 541.779783][T20770] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 541.779796][T20770] Call Trace: [ 541.779804][T20770] [ 541.779814][T20770] dump_stack_lvl+0xe8/0x150 [ 541.779847][T20770] should_fail_ex+0x412/0x560 [ 541.779885][T20770] should_failslab+0xa8/0x100 [ 541.779912][T20770] kmem_cache_alloc_node_noprof+0x8b/0x6f0 [ 541.779945][T20770] ? __alloc_skb+0x186/0x7d0 [ 541.779969][T20770] ? __alloc_skb+0x1d0/0x7d0 [ 541.779992][T20770] ? __local_bh_enable_ip+0xd0/0x130 [ 541.780017][T20770] __alloc_skb+0x1d0/0x7d0 [ 541.780042][T20770] ? netlink_ack_tlv_len+0x6c/0x210 [ 541.780068][T20770] netlink_ack+0x146/0xa50 [ 541.780088][T20770] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 541.780111][T20770] ? ref_tracker_free+0x693/0x840 [ 541.780137][T20770] ? __copy_skb_header+0xa3/0x4a0 [ 541.780168][T20770] ? __pfx_ref_tracker_free+0x10/0x10 [ 541.780206][T20770] netlink_rcv_skb+0x2b6/0x4b0 [ 541.780231][T20770] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 541.780259][T20770] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 541.780295][T20770] ? netlink_deliver_tap+0x2e/0x1b0 [ 541.780327][T20770] netlink_unicast+0x80f/0x9b0 [ 541.780358][T20770] ? __pfx_netlink_unicast+0x10/0x10 [ 541.780381][T20770] ? netlink_sendmsg+0x650/0xb40 [ 541.780403][T20770] ? skb_put+0x11b/0x210 [ 541.780432][T20770] netlink_sendmsg+0x813/0xb40 [ 541.780467][T20770] ? __pfx_netlink_sendmsg+0x10/0x10 [ 541.780496][T20770] ? aa_sock_msg_perm+0xf1/0x1b0 [ 541.780524][T20770] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 541.780549][T20770] ? __pfx_netlink_sendmsg+0x10/0x10 [ 541.780573][T20770] ____sys_sendmsg+0xa68/0xad0 [ 541.780603][T20770] ? __might_fault+0xaf/0x130 [ 541.780642][T20770] ? __pfx_____sys_sendmsg+0x10/0x10 [ 541.780682][T20770] ? import_iovec+0x73/0xa0 [ 541.780721][T20770] ___sys_sendmsg+0x2a5/0x360 [ 541.780747][T20770] ? __lock_acquire+0x6b5/0x2cf0 [ 541.780780][T20770] ? __pfx____sys_sendmsg+0x10/0x10 [ 541.780813][T20770] ? kstrtouint+0x6e/0xe0 [ 541.780863][T20770] ? __fget_files+0x2a/0x420 [ 541.780892][T20770] ? __fget_files+0x3a0/0x420 [ 541.780924][T20770] __sys_sendmmsg+0x27c/0x4e0 [ 541.780959][T20770] ? __pfx___sys_sendmmsg+0x10/0x10 [ 541.780984][T20770] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 541.781041][T20770] ? ksys_write+0x242/0x270 [ 541.781074][T20770] ? __pfx_ksys_write+0x10/0x10 [ 541.781113][T20770] __x64_sys_sendmmsg+0xa0/0xc0 [ 541.781145][T20770] do_syscall_64+0xe2/0xf80 [ 541.781175][T20770] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 541.781195][T20770] ? trace_irq_disable+0x37/0x100 [ 541.781215][T20770] ? clear_bhb_loop+0x60/0xb0 [ 541.781240][T20770] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 541.781261][T20770] RIP: 0033:0x7f0dda39bf79 [ 541.781280][T20770] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 541.781298][T20770] RSP: 002b:00007f0ddb1ce028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 541.781321][T20770] RAX: ffffffffffffffda RBX: 00007f0dda616090 RCX: 00007f0dda39bf79 [ 541.781336][T20770] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000007 [ 541.781351][T20770] RBP: 00007f0ddb1ce090 R08: 0000000000000000 R09: 0000000000000000 [ 541.781363][T20770] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 541.781376][T20770] R13: 00007f0dda616128 R14: 00007f0dda616090 R15: 00007ffc8be448f8 [ 541.781408][T20770] [ 542.128734][ T7305] bond10: (slave bridge6): failed to get link speed/duplex [ 542.153688][T20776] netlink: 'syz.4.3772': attribute type 3 has an invalid length. [ 542.877569][T20797] lo speed is unknown, defaulting to 1000 [ 543.220924][T20814] netlink: 284 bytes leftover after parsing attributes in process `syz.3.3783'. [ 543.272746][T20814] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3783'. [ 543.284153][T20814] x_tables: duplicate underflow at hook 1 [ 543.432303][T20820] FAULT_INJECTION: forcing a failure. [ 543.432303][T20820] name failslab, interval 1, probability 0, space 0, times 0 [ 543.459520][T20820] CPU: 1 UID: 0 PID: 20820 Comm: syz.4.3784 Not tainted syzkaller #0 PREEMPT(full) [ 543.459550][T20820] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 543.459563][T20820] Call Trace: [ 543.459572][T20820] [ 543.459582][T20820] dump_stack_lvl+0xe8/0x150 [ 543.459616][T20820] should_fail_ex+0x412/0x560 [ 543.459647][T20820] should_failslab+0xa8/0x100 [ 543.459680][T20820] __kvmalloc_node_noprof+0x166/0x8d0 [ 543.459705][T20820] ? qdisc_class_hash_init+0x37/0x130 [ 543.459745][T20820] qdisc_class_hash_init+0x37/0x130 [ 543.459779][T20820] hfsc_init_qdisc+0xd2/0x3a0 [ 543.459810][T20820] ? __pfx_hfsc_init_qdisc+0x10/0x10 [ 543.459840][T20820] qdisc_create+0x7c4/0xf20 [ 543.459870][T20820] tc_modify_qdisc+0x16f0/0x2290 [ 543.459895][T20820] ? trace_contention_end+0x39/0x100 [ 543.459928][T20820] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 543.459959][T20820] ? __dev_queue_xmit+0x274/0x3850 [ 543.460021][T20820] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 543.460051][T20820] rtnetlink_rcv_msg+0x77e/0xbe0 [ 543.460082][T20820] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 543.460106][T20820] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 543.460129][T20820] ? ref_tracker_free+0x693/0x840 [ 543.460154][T20820] ? __copy_skb_header+0xa3/0x4a0 [ 543.460185][T20820] ? __pfx_ref_tracker_free+0x10/0x10 [ 543.460224][T20820] netlink_rcv_skb+0x232/0x4b0 [ 543.460250][T20820] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 543.460277][T20820] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 543.460313][T20820] ? netlink_deliver_tap+0x2e/0x1b0 [ 543.460345][T20820] netlink_unicast+0x80f/0x9b0 [ 543.460376][T20820] ? __pfx_netlink_unicast+0x10/0x10 [ 543.460399][T20820] ? netlink_sendmsg+0x650/0xb40 [ 543.460421][T20820] ? skb_put+0x11b/0x210 [ 543.460452][T20820] netlink_sendmsg+0x813/0xb40 [ 543.460487][T20820] ? __pfx_netlink_sendmsg+0x10/0x10 [ 543.460515][T20820] ? aa_sock_msg_perm+0xf1/0x1b0 [ 543.460548][T20820] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 543.460572][T20820] ? __pfx_netlink_sendmsg+0x10/0x10 [ 543.460595][T20820] ____sys_sendmsg+0xa68/0xad0 [ 543.460625][T20820] ? __might_fault+0xaf/0x130 [ 543.460663][T20820] ? __pfx_____sys_sendmsg+0x10/0x10 [ 543.460708][T20820] ? import_iovec+0x73/0xa0 [ 543.460741][T20820] ___sys_sendmsg+0x2a5/0x360 [ 543.460768][T20820] ? __lock_acquire+0x6b5/0x2cf0 [ 543.460801][T20820] ? __pfx____sys_sendmsg+0x10/0x10 [ 543.460836][T20820] ? kstrtouint+0x6e/0xe0 [ 543.460887][T20820] ? __fget_files+0x2a/0x420 [ 543.460910][T20820] ? __fget_files+0x3a0/0x420 [ 543.460943][T20820] __sys_sendmmsg+0x27c/0x4e0 [ 543.460980][T20820] ? __pfx___sys_sendmmsg+0x10/0x10 [ 543.461008][T20820] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 543.461069][T20820] ? ksys_write+0x242/0x270 [ 543.461101][T20820] ? __pfx_ksys_write+0x10/0x10 [ 543.461140][T20820] __x64_sys_sendmmsg+0xa0/0xc0 [ 543.461173][T20820] do_syscall_64+0xe2/0xf80 [ 543.461202][T20820] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 543.461222][T20820] ? trace_irq_disable+0x37/0x100 [ 543.461242][T20820] ? clear_bhb_loop+0x60/0xb0 [ 543.461268][T20820] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 543.461288][T20820] RIP: 0033:0x7f27e6d9bf79 [ 543.461307][T20820] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 543.461325][T20820] RSP: 002b:00007f27e7ced028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 543.461348][T20820] RAX: ffffffffffffffda RBX: 00007f27e7016090 RCX: 00007f27e6d9bf79 [ 543.461363][T20820] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000007 [ 543.461377][T20820] RBP: 00007f27e7ced090 R08: 0000000000000000 R09: 0000000000000000 [ 543.461389][T20820] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 543.461401][T20820] R13: 00007f27e7016128 R14: 00007f27e7016090 R15: 00007ffd6ab833a8 [ 543.461436][T20820] [ 544.402703][T20842] netlink: 1047 bytes leftover after parsing attributes in process `syz.4.3790'. [ 544.420396][T20842] bridge_slave_1: default FDB implementation only supports local addresses [ 544.471158][T20846] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3792'. [ 544.893602][T20861] bridge_slave_0: left allmulticast mode [ 544.906401][T20861] bridge0: port 1(bridge_slave_0) entered disabled state [ 545.038192][T20868] FAULT_INJECTION: forcing a failure. [ 545.038192][T20868] name failslab, interval 1, probability 0, space 0, times 0 [ 545.095721][T20868] CPU: 1 UID: 0 PID: 20868 Comm: syz.0.3797 Not tainted syzkaller #0 PREEMPT(full) [ 545.095750][T20868] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 545.095763][T20868] Call Trace: [ 545.095772][T20868] [ 545.095780][T20868] dump_stack_lvl+0xe8/0x150 [ 545.095820][T20868] should_fail_ex+0x412/0x560 [ 545.095852][T20868] should_failslab+0xa8/0x100 [ 545.095878][T20868] kmem_cache_alloc_node_noprof+0x8b/0x6f0 [ 545.095912][T20868] ? __alloc_skb+0x186/0x7d0 [ 545.095937][T20868] ? __alloc_skb+0x1d0/0x7d0 [ 545.095960][T20868] ? __local_bh_enable_ip+0xd0/0x130 [ 545.095986][T20868] __alloc_skb+0x1d0/0x7d0 [ 545.096011][T20868] ? bpf_lsm_socket_getpeersec_dgram+0x9/0x20 [ 545.096040][T20868] netlink_sendmsg+0x5d4/0xb40 [ 545.096075][T20868] ? __pfx_netlink_sendmsg+0x10/0x10 [ 545.096103][T20868] ? aa_sock_msg_perm+0xf1/0x1b0 [ 545.096131][T20868] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 545.096155][T20868] ? __pfx_netlink_sendmsg+0x10/0x10 [ 545.096179][T20868] ____sys_sendmsg+0xa68/0xad0 [ 545.096208][T20868] ? __might_fault+0xaf/0x130 [ 545.096246][T20868] ? __pfx_____sys_sendmsg+0x10/0x10 [ 545.096286][T20868] ? import_iovec+0x73/0xa0 [ 545.096322][T20868] ___sys_sendmsg+0x2a5/0x360 [ 545.096367][T20868] ? __lock_acquire+0x6b5/0x2cf0 [ 545.096402][T20868] ? __pfx____sys_sendmsg+0x10/0x10 [ 545.096429][T20868] ? __lock_acquire+0x6b5/0x2cf0 [ 545.096463][T20868] ? kstrtouint+0x6e/0xe0 [ 545.096531][T20868] __sys_sendmmsg+0x27c/0x4e0 [ 545.096567][T20868] ? __pfx___sys_sendmmsg+0x10/0x10 [ 545.096594][T20868] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 545.096656][T20868] ? ksys_write+0x242/0x270 [ 545.096689][T20868] ? __pfx_ksys_write+0x10/0x10 [ 545.096725][T20868] __x64_sys_sendmmsg+0xa0/0xc0 [ 545.096759][T20868] do_syscall_64+0xe2/0xf80 [ 545.096788][T20868] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 545.096808][T20868] ? trace_irq_disable+0x37/0x100 [ 545.096835][T20868] ? clear_bhb_loop+0x60/0xb0 [ 545.096861][T20868] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 545.096881][T20868] RIP: 0033:0x7f030799bf79 [ 545.096900][T20868] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 545.096918][T20868] RSP: 002b:00007f03088a7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 545.096941][T20868] RAX: ffffffffffffffda RBX: 00007f0307c16090 RCX: 00007f030799bf79 [ 545.096956][T20868] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000007 [ 545.096970][T20868] RBP: 00007f03088a7090 R08: 0000000000000000 R09: 0000000000000000 [ 545.096983][T20868] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 545.096996][T20868] R13: 00007f0307c16128 R14: 00007f0307c16090 R15: 00007fffad2a8e28 [ 545.097031][T20868] [ 545.416350][T20873] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3801'. [ 545.428580][T20873] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3801'. [ 545.596951][T20874] netlink: 88 bytes leftover after parsing attributes in process `syz.4.3800'. [ 545.632511][T20880] veth0_virt_wifi: entered promiscuous mode [ 545.641811][T20880] veth0_virt_wifi: left promiscuous mode [ 545.706578][T20877] tipc: Enabled bearer , priority 0 [ 545.750489][T20883] syzkaller0: entered promiscuous mode [ 545.757054][T20883] syzkaller0: entered allmulticast mode [ 545.790412][T20877] tipc: Resetting bearer [ 545.801312][T14223] net_ratelimit: 22 callbacks suppressed [ 545.801332][T14223] bond10: (slave bridge6): failed to get link speed/duplex [ 545.824352][T20876] tipc: Resetting bearer [ 545.843457][T20876] tipc: Disabling bearer [ 545.931301][T14222] bond10: (slave bridge6): failed to get link speed/duplex [ 546.040977][T14225] bond10: (slave bridge6): failed to get link speed/duplex [ 546.085959][T20899] lo speed is unknown, defaulting to 1000 [ 546.098925][T20898] lo speed is unknown, defaulting to 1000 [ 546.163401][T14223] bond10: (slave bridge6): failed to get link speed/duplex [ 546.263286][T20901] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3808'. [ 546.273001][T14222] bond10: (slave bridge6): failed to get link speed/duplex [ 546.277637][T20901] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3808'. [ 546.294421][T20901] netlink: 128 bytes leftover after parsing attributes in process `syz.3.3808'. [ 546.386810][T20903] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3809'. [ 546.401822][T14223] bond10: (slave bridge6): failed to get link speed/duplex [ 546.410418][T20903] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3809'. [ 546.521009][ T7305] bond10: (slave bridge6): failed to get link speed/duplex [ 546.608005][T20914] FAULT_INJECTION: forcing a failure. [ 546.608005][T20914] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 546.622896][T20914] CPU: 0 UID: 0 PID: 20914 Comm: syz.2.3812 Not tainted syzkaller #0 PREEMPT(full) [ 546.622927][T20914] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 546.622941][T20914] Call Trace: [ 546.622950][T20914] [ 546.622959][T20914] dump_stack_lvl+0xe8/0x150 [ 546.622992][T20914] should_fail_ex+0x412/0x560 [ 546.623023][T20914] _copy_from_iter+0x1d3/0x1670 [ 546.623064][T20914] ? rcu_is_watching+0x15/0xb0 [ 546.623084][T20914] ? __pfx__copy_from_iter+0x10/0x10 [ 546.623109][T20914] ? kmem_cache_alloc_node_noprof+0x473/0x6f0 [ 546.623152][T20914] ? netlink_sendmsg+0x650/0xb40 [ 546.623176][T20914] ? skb_put+0x11b/0x210 [ 546.623208][T20914] netlink_sendmsg+0x6c0/0xb40 [ 546.623243][T20914] ? __pfx_netlink_sendmsg+0x10/0x10 [ 546.623271][T20914] ? aa_sock_msg_perm+0xf1/0x1b0 [ 546.623300][T20914] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 546.623325][T20914] ? __pfx_netlink_sendmsg+0x10/0x10 [ 546.623348][T20914] ____sys_sendmsg+0xa68/0xad0 [ 546.623378][T20914] ? __might_fault+0xaf/0x130 [ 546.623417][T20914] ? __pfx_____sys_sendmsg+0x10/0x10 [ 546.623466][T20914] ? import_iovec+0x73/0xa0 [ 546.623502][T20914] ___sys_sendmsg+0x2a5/0x360 [ 546.623531][T20914] ? __lock_acquire+0x6b5/0x2cf0 [ 546.623564][T20914] ? __pfx____sys_sendmsg+0x10/0x10 [ 546.623591][T20914] ? __lock_acquire+0x6b5/0x2cf0 [ 546.623625][T20914] ? kstrtouint+0x6e/0xe0 [ 546.623693][T20914] __sys_sendmmsg+0x27c/0x4e0 [ 546.623731][T20914] ? __pfx___sys_sendmmsg+0x10/0x10 [ 546.623759][T20914] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 546.623818][T20914] ? ksys_write+0x242/0x270 [ 546.623852][T20914] ? __pfx_ksys_write+0x10/0x10 [ 546.623891][T20914] __x64_sys_sendmmsg+0xa0/0xc0 [ 546.623924][T20914] do_syscall_64+0xe2/0xf80 [ 546.623952][T20914] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 546.623971][T20914] ? trace_irq_disable+0x37/0x100 [ 546.623990][T20914] ? clear_bhb_loop+0x60/0xb0 [ 546.624014][T20914] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 546.624033][T20914] RIP: 0033:0x7f0dda39bf79 [ 546.624052][T20914] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 546.624069][T20914] RSP: 002b:00007f0ddb1ce028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 546.624090][T20914] RAX: ffffffffffffffda RBX: 00007f0dda616090 RCX: 00007f0dda39bf79 [ 546.624104][T20914] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000007 [ 546.624118][T20914] RBP: 00007f0ddb1ce090 R08: 0000000000000000 R09: 0000000000000000 [ 546.624130][T20914] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 546.624142][T20914] R13: 00007f0dda616128 R14: 00007f0dda616090 R15: 00007ffc8be448f8 [ 546.624175][T20914] [ 546.900536][T14225] bond10: (slave bridge6): failed to get link speed/duplex [ 546.949132][T20920] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3813'. [ 547.003881][T20916] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3813'. [ 547.024912][T14222] bond10: (slave bridge6): failed to get link speed/duplex [ 547.184612][T20922] netlink: 'syz.2.3815': attribute type 1 has an invalid length. [ 547.271057][T14223] bond10: (slave bridge6): failed to get link speed/duplex [ 547.421528][ T5962] page_pool_release_retry() stalled pool shutdown: id 167, 1 inflight 60 sec [ 547.469218][T20932] xt_bpf: check failed: parse error [ 547.655335][T20936] lo speed is unknown, defaulting to 1000 [ 548.017881][T20945] netlink: 'syz.3.3821': attribute type 10 has an invalid length. [ 548.123858][T20949] netlink: 'syz.3.3823': attribute type 1 has an invalid length. [ 548.188476][T20949] 8021q: adding VLAN 0 to HW filter on device bond4 [ 548.433334][T20962] FAULT_INJECTION: forcing a failure. [ 548.433334][T20962] name failslab, interval 1, probability 0, space 0, times 0 [ 548.446650][T20962] CPU: 0 UID: 0 PID: 20962 Comm: syz.4.3825 Not tainted syzkaller #0 PREEMPT(full) [ 548.446679][T20962] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 548.446693][T20962] Call Trace: [ 548.446702][T20962] [ 548.446711][T20962] dump_stack_lvl+0xe8/0x150 [ 548.446744][T20962] should_fail_ex+0x412/0x560 [ 548.446776][T20962] should_failslab+0xa8/0x100 [ 548.446803][T20962] __kmalloc_cache_noprof+0x83/0x6e0 [ 548.446824][T20962] ? rcu_is_watching+0x15/0xb0 [ 548.446843][T20962] ? flow_indr_dev_setup_offload+0x255/0x670 [ 548.446875][T20962] flow_indr_dev_setup_offload+0x255/0x670 [ 548.446903][T20962] ? __pfx_tc_block_indr_cleanup+0x10/0x10 [ 548.446937][T20962] tcf_block_offload_cmd+0x287/0x3b0 [ 548.446973][T20962] ? __pfx_tcf_block_offload_cmd+0x10/0x10 [ 548.447005][T20962] ? __pfx_down_write+0x10/0x10 [ 548.447023][T20962] ? __kmalloc_cache_noprof+0x3d1/0x6e0 [ 548.447051][T20962] tcf_block_get_ext+0xfcd/0x17d0 [ 548.447089][T20962] tcf_block_get+0x67/0xa0 [ 548.447110][T20962] ? __pfx_tcf_chain_head_change_dflt+0x10/0x10 [ 548.447139][T20962] hfsc_init_qdisc+0x11f/0x3a0 [ 548.447170][T20962] ? __pfx_hfsc_init_qdisc+0x10/0x10 [ 548.447209][T20962] qdisc_create+0x7c4/0xf20 [ 548.447241][T20962] tc_modify_qdisc+0x16f0/0x2290 [ 548.447266][T20962] ? trace_contention_end+0x39/0x100 [ 548.447298][T20962] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 548.447331][T20962] ? __dev_queue_xmit+0x274/0x3850 [ 548.447392][T20962] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 548.447424][T20962] rtnetlink_rcv_msg+0x77e/0xbe0 [ 548.447455][T20962] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 548.447479][T20962] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 548.447502][T20962] ? ref_tracker_free+0x693/0x840 [ 548.447526][T20962] ? __copy_skb_header+0xa3/0x4a0 [ 548.447558][T20962] ? __pfx_ref_tracker_free+0x10/0x10 [ 548.447597][T20962] netlink_rcv_skb+0x232/0x4b0 [ 548.447623][T20962] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 548.447650][T20962] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 548.447687][T20962] ? netlink_deliver_tap+0x2e/0x1b0 [ 548.447720][T20962] netlink_unicast+0x80f/0x9b0 [ 548.447751][T20962] ? __pfx_netlink_unicast+0x10/0x10 [ 548.447775][T20962] ? netlink_sendmsg+0x650/0xb40 [ 548.447797][T20962] ? skb_put+0x11b/0x210 [ 548.447828][T20962] netlink_sendmsg+0x813/0xb40 [ 548.447863][T20962] ? __pfx_netlink_sendmsg+0x10/0x10 [ 548.447892][T20962] ? aa_sock_msg_perm+0xf1/0x1b0 [ 548.447919][T20962] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 548.447943][T20962] ? __pfx_netlink_sendmsg+0x10/0x10 [ 548.447964][T20962] ____sys_sendmsg+0xa68/0xad0 [ 548.447995][T20962] ? __might_fault+0xaf/0x130 [ 548.448033][T20962] ? __pfx_____sys_sendmsg+0x10/0x10 [ 548.448074][T20962] ? import_iovec+0x73/0xa0 [ 548.448109][T20962] ___sys_sendmsg+0x2a5/0x360 [ 548.448136][T20962] ? __lock_acquire+0x6b5/0x2cf0 [ 548.448171][T20962] ? __pfx____sys_sendmsg+0x10/0x10 [ 548.448217][T20962] ? kstrtouint+0x6e/0xe0 [ 548.448275][T20962] ? __fget_files+0x2a/0x420 [ 548.448298][T20962] ? __fget_files+0x3a0/0x420 [ 548.448331][T20962] __sys_sendmmsg+0x27c/0x4e0 [ 548.448367][T20962] ? __pfx___sys_sendmmsg+0x10/0x10 [ 548.448394][T20962] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 548.448456][T20962] ? ksys_write+0x242/0x270 [ 548.448489][T20962] ? __pfx_ksys_write+0x10/0x10 [ 548.448528][T20962] __x64_sys_sendmmsg+0xa0/0xc0 [ 548.448562][T20962] do_syscall_64+0xe2/0xf80 [ 548.448591][T20962] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 548.448611][T20962] ? trace_irq_disable+0x37/0x100 [ 548.448630][T20962] ? clear_bhb_loop+0x60/0xb0 [ 548.448655][T20962] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 548.448675][T20962] RIP: 0033:0x7f27e6d9bf79 [ 548.448694][T20962] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 548.448711][T20962] RSP: 002b:00007f27e7ced028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 548.448733][T20962] RAX: ffffffffffffffda RBX: 00007f27e7016090 RCX: 00007f27e6d9bf79 [ 548.448748][T20962] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000007 [ 548.448763][T20962] RBP: 00007f27e7ced090 R08: 0000000000000000 R09: 0000000000000000 [ 548.448776][T20962] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 548.448788][T20962] R13: 00007f27e7016128 R14: 00007f27e7016090 R15: 00007ffd6ab833a8 [ 548.448825][T20962] [ 549.368536][T20969] Cannot find del_set index 2 as target [ 549.849504][T20975] bond6: option lacp_active: invalid value (8) [ 549.866346][T20975] bond6 (unregistering): Released all slaves [ 549.907441][ T7920] page_pool_release_retry() stalled pool shutdown: id 170, 1 inflight 60 sec [ 550.539119][T20996] __nla_validate_parse: 5 callbacks suppressed [ 550.539140][T20996] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3835'. [ 550.562175][T20999] sctp: [Deprecated]: syz.1.3837 (pid 20999) Use of struct sctp_assoc_value in delayed_ack socket option. [ 550.562175][T20999] Use struct sctp_sack_info instead [ 550.891143][T14225] net_ratelimit: 16 callbacks suppressed [ 550.891167][T14225] bond10: (slave bridge6): failed to get link speed/duplex [ 550.980689][T21015] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 551.036738][T21015] 8021q: adding VLAN 0 to HW filter on device ipvlan3 [ 551.114938][T21015] 8021q: adding VLAN 0 to HW filter on device ipvlan4 [ 551.166733][T21015] 8021q: adding VLAN 0 to HW filter on device ipvlan5 [ 551.221606][T21024] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3844'. [ 551.244681][T21015] 8021q: adding VLAN 0 to HW filter on device ipvlan6 [ 551.286359][T21015] 8021q: adding VLAN 0 to HW filter on device ipvlan7 [ 551.341425][T14225] bond10: (slave bridge6): failed to get link speed/duplex [ 551.381200][T21015] 8021q: adding VLAN 0 to HW filter on device ipvlan8 [ 551.398096][T21015] 8021q: adding VLAN 0 to HW filter on device ipvlan9 [ 551.416403][T21015] 8021q: adding VLAN 0 to HW filter on device ipvlan10 [ 551.451333][T21029] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3845'. [ 551.479408][T21015] 8021q: adding VLAN 0 to HW filter on device ipvlan11 [ 551.518550][T21015] 8021q: adding VLAN 0 to HW filter on device ipvlan12 [ 551.541287][T14225] bond10: (slave bridge6): failed to get link speed/duplex [ 551.567834][T21015] 8021q: adding VLAN 0 to HW filter on device ipvlan13 [ 551.585584][T21015] 8021q: adding VLAN 0 to HW filter on device ipvlan14 [ 551.616763][T21015] 8021q: adding VLAN 0 to HW filter on device ipvlan15 [ 551.658920][T21015] 8021q: adding VLAN 0 to HW filter on device ipvlan16 [ 551.707813][T21015] 8021q: adding VLAN 0 to HW filter on device ipvlan17 [ 551.749552][T21015] 8021q: adding VLAN 0 to HW filter on device ipvlan18 [ 551.770637][T21015] 8021q: adding VLAN 0 to HW filter on device ipvlan19 [ 551.783460][ T7298] bond10: (slave bridge6): failed to get link speed/duplex [ 551.909306][T14227] bond10: (slave bridge6): failed to get link speed/duplex [ 551.965861][T21037] lo speed is unknown, defaulting to 1000 [ 552.023379][T14223] bond10: (slave bridge6): failed to get link speed/duplex [ 552.161849][T14227] bond10: (slave bridge6): failed to get link speed/duplex [ 552.234097][T21041] netlink: 'syz.2.3849': attribute type 25 has an invalid length. [ 552.253815][T21043] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3850'. [ 552.280948][T14227] bond10: (slave bridge6): failed to get link speed/duplex [ 552.290627][T21043] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3850'. [ 552.478900][T21054] tipc: Enabled bearer , priority 0 [ 552.487625][T21047] syzkaller0: entered promiscuous mode [ 552.496044][T21047] syzkaller0: entered allmulticast mode [ 552.505040][T21049] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 552.600170][T21045] lo speed is unknown, defaulting to 1000 [ 552.601927][T14227] bond10: (slave bridge6): failed to get link speed/duplex [ 552.661753][T21049] tipc: Resetting bearer [ 552.903265][T14225] bond10: (slave bridge6): failed to get link speed/duplex [ 553.336525][T21085] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3857'. [ 554.833425][T21046] tipc: Resetting bearer [ 554.852729][T21046] tipc: Disabling bearer [ 554.897257][ T914] tipc: Node number set to 2030002833 [ 555.135378][T21103] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3861'. [ 555.323650][T21103] vlan2: entered promiscuous mode [ 555.339240][T21103] bond0: entered promiscuous mode [ 555.344902][T21108] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3862'. [ 555.363436][T21103] bond_slave_0: entered promiscuous mode [ 555.369371][T21103] bond_slave_1: entered promiscuous mode [ 555.407389][T21103] bond1: entered promiscuous mode [ 555.422634][T21103] bond2: entered promiscuous mode [ 555.477058][T21118] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3864'. [ 555.487587][T21118] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3864'. [ 555.659171][T21118] bridge0: entered promiscuous mode [ 555.673645][T21118] gretap0: entered promiscuous mode [ 555.685388][T21118] debugfs: 'hsr1' already exists in 'hsr' [ 555.691732][T21118] Cannot create hsr debugfs directory [ 555.704863][T21118] hsr1: Slave A (bridge0) is not up; please bring it up to get a fully working HSR network [ 555.765670][T21123] xt_bpf: check failed: parse error [ 555.911237][ T7298] net_ratelimit: 2 callbacks suppressed [ 555.911261][ T7298] bond10: (slave bridge6): failed to get link speed/duplex [ 555.967540][T21127] netlink: 708 bytes leftover after parsing attributes in process `syz.2.3867'. [ 555.977318][T21127] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 556.141496][ T7298] bond10: (slave bridge6): failed to get link speed/duplex [ 556.195612][T21133] lo speed is unknown, defaulting to 1000 [ 556.258864][ T7298] bond10: (slave bridge6): failed to get link speed/duplex [ 556.420936][T14223] bond10: (slave bridge6): failed to get link speed/duplex [ 556.533819][T14223] bond10: (slave bridge6): failed to get link speed/duplex [ 556.661359][T14222] bond10: (slave bridge6): failed to get link speed/duplex [ 556.781824][T14222] bond10: (slave bridge6): failed to get link speed/duplex [ 556.808931][T21160] xt_bpf: check failed: parse error [ 556.900947][ T7298] bond10: (slave bridge6): failed to get link speed/duplex [ 556.928233][T21162] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3878'. [ 556.951197][T21162] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3878'. [ 556.976512][T21162] gretap0: entered promiscuous mode [ 556.995755][T21162] debugfs: 'hsr1' already exists in 'hsr' [ 557.010890][T21162] Cannot create hsr debugfs directory [ 557.223306][ T7298] bond10: (slave bridge6): failed to get link speed/duplex [ 557.319811][T21171] netlink: 'syz.4.3881': attribute type 10 has an invalid length. [ 557.361109][T21172] netlink: 'syz.4.3881': attribute type 10 has an invalid length. [ 557.379907][T21173] netlink: 'syz.4.3881': attribute type 10 has an invalid length. [ 557.428607][T21171] @0Ù: entered allmulticast mode [ 557.455386][T21171] @0Ù: entered promiscuous mode [ 557.466144][T21171] team0: Port device 4@0Ù added [ 557.493950][T21172] @0Ù: left allmulticast mode [ 557.528795][T21172] team0: Port device 4@0Ù removed [ 557.543824][T21172] @0Ù: left promiscuous mode [ 557.585393][T21172] bond0: (slave 4@0Ù): Enslaving as an active interface with an up link [ 557.766992][T21178] lo speed is unknown, defaulting to 1000 [ 558.178797][T21194] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 558.195490][T21195] xt_bpf: check failed: parse error [ 558.230022][T21190] lo speed is unknown, defaulting to 1000 [ 558.601750][T21207] netlink: 'syz.3.3893': attribute type 3 has an invalid length. [ 558.632357][T21207] netlink: 76 bytes leftover after parsing attributes in process `syz.3.3893'. [ 558.641854][T21207] netlink: 76 bytes leftover after parsing attributes in process `syz.3.3893'. [ 558.706046][T14222] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 558.716449][T14222] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 558.768934][T14222] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 558.790885][T14222] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 558.846949][T21213] bridge0: entered allmulticast mode [ 559.127681][T21220] lo speed is unknown, defaulting to 1000 [ 559.972356][T21234] xt_bpf: check failed: parse error [ 561.601800][T14223] net_ratelimit: 19 callbacks suppressed [ 561.601821][T14223] bond10: (slave bridge6): failed to get link speed/duplex [ 561.618579][T21260] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3907'. [ 561.637122][T21262] lo speed is unknown, defaulting to 1000 [ 561.642792][T21260] openvswitch: netlink: Flow actions attr not present in new flow. [ 561.741660][ T7305] bond10: (slave bridge6): failed to get link speed/duplex [ 561.860856][ T7305] bond10: (slave bridge6): failed to get link speed/duplex [ 561.956995][T21271] netlink: 364 bytes leftover after parsing attributes in process `syz.2.3911'. [ 561.984026][ T7298] bond10: (slave bridge6): failed to get link speed/duplex [ 562.034069][T21274] xt_bpf: check failed: parse error [ 562.066648][T21276] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3913'. [ 562.111234][T14223] bond10: (slave bridge6): failed to get link speed/duplex [ 562.231376][T14223] bond10: (slave bridge6): failed to get link speed/duplex [ 562.361134][T14223] bond10: (slave bridge6): failed to get link speed/duplex [ 562.591654][T21287] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3917'. [ 562.682199][ T7305] bond10: (slave bridge6): failed to get link speed/duplex [ 562.864462][ T7298] bond10: (slave bridge6): failed to get link speed/duplex [ 562.877126][T21293] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3919'. [ 563.085091][T21299] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3922'. [ 563.268728][T21312] netlink: 'syz.0.3926': attribute type 46 has an invalid length. [ 563.765916][T21329] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3931'. [ 563.976621][T21338] netlink: 240 bytes leftover after parsing attributes in process `syz.0.3934'. [ 564.173030][T21350] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3937'. [ 564.236381][T21350] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3937'. [ 564.708501][T21367] lo speed is unknown, defaulting to 1000 [ 564.766308][T21374] netlink: 'syz.3.3944': attribute type 1 has an invalid length. [ 564.785511][T21374] bond0: option mode: unable to set because the bond device has slaves [ 564.940526][T21376] netlink: 'syz.0.3945': attribute type 16 has an invalid length. [ 564.991215][T21376] netlink: 'syz.0.3945': attribute type 17 has an invalid length. [ 565.021256][T21376] 8021q: adding VLAN 0 to HW filter on device bond0 [ 565.030154][T21376] 8021q: adding VLAN 0 to HW filter on device team0 [ 565.306351][T21401] xt_bpf: check failed: parse error [ 565.414907][T21405] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 565.422700][ C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 565.857497][T21416] netlink: 'syz.3.3959': attribute type 1 has an invalid length. [ 565.953183][T21421] xfrm1: entered allmulticast mode [ 566.426187][T21437] lo speed is unknown, defaulting to 1000 [ 566.579126][T21444] netlink: 'syz.0.3968': attribute type 1 has an invalid length. [ 566.686981][T14222] net_ratelimit: 27 callbacks suppressed [ 566.687004][T14222] bond10: (slave bridge6): failed to get link speed/duplex [ 566.745307][T21444] af_packet: tpacket_rcv: packet too big, clamped from 46 to 4294967272. macoff=96 [ 566.756207][T21444] netlink: 'syz.0.3968': attribute type 10 has an invalid length. [ 566.792500][T21444] team0: Device ipvlan1 failed to register rx_handler [ 566.881326][ T7305] bond10: (slave bridge6): failed to get link speed/duplex [ 566.939049][T21431] netlink: 'syz.3.3964': attribute type 7 has an invalid length. [ 566.968801][T21431] netlink: 'syz.3.3964': attribute type 8 has an invalid length. [ 567.020273][T21451] lo speed is unknown, defaulting to 1000 [ 567.033558][ T7305] bond10: (slave bridge6): failed to get link speed/duplex [ 567.151777][ T7305] bond10: (slave bridge6): failed to get link speed/duplex [ 567.262030][ T7305] bond10: (slave bridge6): failed to get link speed/duplex [ 567.381147][T14225] bond10: (slave bridge6): failed to get link speed/duplex [ 567.511124][T14225] bond10: (slave bridge6): failed to get link speed/duplex [ 567.972091][T14225] bond10: (slave bridge6): failed to get link speed/duplex [ 567.986404][ T1302] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 568.001480][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 568.008091][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 568.017653][ T1302] lec:lec_start_xmit: lec0:No lecd attached [ 568.184010][T14225] bond10: (slave bridge6): failed to get link speed/duplex [ 568.385066][T21505] x_tables: duplicate underflow at hook 1 [ 568.571552][T21507] bond5: option active_slave: mode dependency failed, not supported in mode balance-xor(2) [ 568.597962][T21507] bond5 (unregistering): Released all slaves [ 568.849847][T21524] __nla_validate_parse: 7 callbacks suppressed [ 568.849870][T21524] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3988'. [ 568.878778][ T30] audit: type=1800 audit(1770733876.953:7): pid=21524 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.3988" name="blkio.bfq.time_recursive" dev="tmpfs" ino=1118 res=0 errno=0 [ 569.331760][T21539] lo speed is unknown, defaulting to 1000 [ 569.391911][T21541] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 569.527752][T21548] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3994'. [ 569.709887][T21553] geneve3: entered promiscuous mode [ 569.748557][T21550] ip6gre1: entered promiscuous mode [ 569.760776][T21550] ip6gre1: entered allmulticast mode [ 570.075097][T21558] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 570.185448][T21565] xt_hashlimit: size too large, truncated to 1048576 [ 570.214168][T21558] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 570.343802][T21558] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 570.437616][T21571] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4001'. [ 570.574801][T21558] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 570.867107][T21585] xt_bpf: check failed: parse error [ 570.878591][T21586] netlink: 168 bytes leftover after parsing attributes in process `syz.3.4008'. [ 570.890197][T21586] netlink: 'syz.3.4008': attribute type 1 has an invalid length. [ 570.907700][T21586] netlink: 'syz.3.4008': attribute type 1 has an invalid length. [ 570.920412][T21586] netlink: 9172 bytes leftover after parsing attributes in process `syz.3.4008'. [ 570.932615][T14225] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 570.959974][T14225] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 570.972390][T21587] syzkaller0: entered promiscuous mode [ 570.981093][T21587] syzkaller0: entered allmulticast mode [ 571.026410][T21590] RDS: rds_bind could not find a transport for 800:0:200:0:400:0:ffff:ffff, load rds_tcp or rds_rdma? [ 571.043183][T21591] sctp: [Deprecated]: syz.2.4009 (pid 21591) Use of struct sctp_assoc_value in delayed_ack socket option. [ 571.043183][T21591] Use struct sctp_sack_info instead [ 571.141888][T14225] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 571.188510][ T7298] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 571.257371][T21602] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 571.287501][T21602] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 571.656540][T21617] netlink: 'syz.2.4016': attribute type 4 has an invalid length. [ 571.921273][T21616] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4017'. [ 572.034280][T14227] net_ratelimit: 17 callbacks suppressed [ 572.034302][T14227] bond10: (slave bridge6): failed to get link speed/duplex [ 572.037618][T21631] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4020'. [ 572.075311][T21631] netlink: 560 bytes leftover after parsing attributes in process `syz.2.4020'. [ 572.086217][T21633] netlink: 'syz.3.4019': attribute type 1 has an invalid length. [ 572.108367][T21633] netlink: 'syz.3.4019': attribute type 6 has an invalid length. [ 572.121286][T21633] netlink: 'syz.3.4019': attribute type 3 has an invalid length. [ 572.132617][T21630] lo speed is unknown, defaulting to 1000 [ 572.190945][T14225] bond10: (slave bridge6): failed to get link speed/duplex [ 572.208761][T21626] lo speed is unknown, defaulting to 1000 [ 572.262827][T21633] syzkaller1: entered promiscuous mode [ 572.276215][T21633] syzkaller1: entered allmulticast mode [ 572.319987][T21639] netlink: 68 bytes leftover after parsing attributes in process `syz.4.4023'. [ 572.342406][T14225] bond10: (slave bridge6): failed to get link speed/duplex [ 572.359076][T21639] netlink: 'syz.4.4023': attribute type 1 has an invalid length. [ 572.453542][T21639] 8021q: adding VLAN 0 to HW filter on device bond6 [ 572.471732][ T13] bond10: (slave bridge6): failed to get link speed/duplex [ 572.590895][T14225] bond10: (slave bridge6): failed to get link speed/duplex [ 572.710959][ T13] bond10: (slave bridge6): failed to get link speed/duplex [ 572.911123][T14225] bond10: (slave bridge6): failed to get link speed/duplex [ 573.026204][T14225] bond10: (slave bridge6): failed to get link speed/duplex [ 573.041051][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5020 ms [ 573.049172][ C0] lec:lec_tx_timeout: lec0 [ 573.076959][T21660] lo speed is unknown, defaulting to 1000 [ 573.150935][ T13] bond10: (slave bridge6): failed to get link speed/duplex [ 573.261832][ T13] bond10: (slave bridge6): failed to get link speed/duplex [ 573.456941][T21665] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4028'. [ 574.139995][T21678] netlink: 'syz.4.4033': attribute type 1 has an invalid length. [ 574.148656][T21678] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4033'. [ 574.173230][T21678] netlink: 364 bytes leftover after parsing attributes in process `syz.4.4033'. [ 574.187642][T21678] netlink: 88 bytes leftover after parsing attributes in process `syz.4.4033'. [ 574.229475][T21678] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4033'. [ 575.240127][T21691] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4037'. [ 575.382281][T21693] netlink: 1 bytes leftover after parsing attributes in process `syz.4.4039'. [ 575.583896][T21697] lo speed is unknown, defaulting to 1000 [ 575.757453][T21709] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4042'. [ 575.766617][T21709] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4042'. [ 576.415506][T21734] tipc: Enabled bearer , priority 0 [ 576.443467][T21735] lo speed is unknown, defaulting to 1000 [ 576.455104][T21734] syzkaller0: entered promiscuous mode [ 576.471312][T21734] syzkaller0: entered allmulticast mode [ 576.672219][T21734] tipc: Resetting bearer [ 576.726170][T21727] tipc: Resetting bearer [ 576.756773][T21727] tipc: Disabling bearer [ 577.049319][T21757] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4060'. [ 577.060247][T21758] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4060'. [ 577.121151][T14223] net_ratelimit: 22 callbacks suppressed [ 577.121172][T14223] bond10: (slave bridge6): failed to get link speed/duplex [ 577.348487][ T13] bond10: (slave bridge6): failed to get link speed/duplex [ 577.410839][T21776] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 577.435255][T21776] openvswitch: netlink: Flow actions attr not present in new flow. [ 577.471754][T21776] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 577.811027][ T7298] bond10: (slave bridge6): failed to get link speed/duplex [ 577.851168][T21782] vlan3: entered promiscuous mode [ 577.868134][T21783] netlink: 'syz.1.4066': attribute type 1 has an invalid length. [ 577.891948][T21783] netlink: 'syz.1.4066': attribute type 2 has an invalid length. [ 578.132235][ T7298] bond10: (slave bridge6): failed to get link speed/duplex [ 578.161092][T21797] lo speed is unknown, defaulting to 1000 [ 578.283705][T21802] geneve2: entered promiscuous mode [ 578.332342][T21802] geneve2: entered allmulticast mode [ 578.350842][ T7298] bond10: (slave bridge6): failed to get link speed/duplex [ 578.492058][ T7298] bond10: (slave bridge6): failed to get link speed/duplex [ 578.621381][ T7298] bond10: (slave bridge6): failed to get link speed/duplex [ 578.741293][ T7298] bond10: (slave bridge6): failed to get link speed/duplex [ 578.851536][T14225] bond10: (slave bridge6): failed to get link speed/duplex [ 579.208220][T21830] syzkaller0: entered promiscuous mode [ 579.215488][T21830] syzkaller0: entered allmulticast mode [ 579.311286][T21834] __nla_validate_parse: 54 callbacks suppressed [ 579.311308][T21834] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4080'. [ 579.393947][T21837] netlink: 'syz.3.4081': attribute type 30 has an invalid length. [ 579.424192][T21837] bond5: option arp_missed_max: invalid value (0) [ 579.430653][T21837] bond5: option arp_missed_max: allowed values 1 - 255 [ 579.439973][T21837] bond5 (unregistering): Released all slaves [ 580.037103][T21851] lo speed is unknown, defaulting to 1000 [ 580.427655][T21866] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4087'. [ 580.590839][T21870] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4092'. [ 580.710931][T21872] bond5: option fail_over_mac: invalid value (127) [ 580.719694][T21872] bond5 (unregistering): Released all slaves [ 580.744834][T21875] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4094'. [ 580.786107][T21877] syzkaller0: entered allmulticast mode [ 580.813421][T21877] syzkaller0: entered promiscuous mode [ 581.317533][T21877] syzkaller0 (unregistering): left allmulticast mode [ 581.335623][T21877] syzkaller0 (unregistering): left promiscuous mode [ 582.131066][ T7298] net_ratelimit: 18 callbacks suppressed [ 582.131101][ T7298] bond10: (slave bridge6): failed to get link speed/duplex [ 582.161218][T21906] lo speed is unknown, defaulting to 1000 [ 582.271148][ T13] bond10: (slave bridge6): failed to get link speed/duplex [ 582.380867][ T13] bond10: (slave bridge6): failed to get link speed/duplex [ 583.026927][ T13] bond10: (slave bridge6): failed to get link speed/duplex [ 583.163053][ T7298] bond10: (slave bridge6): failed to get link speed/duplex [ 583.273782][T14223] bond10: (slave bridge6): failed to get link speed/duplex [ 583.401452][T14227] bond10: (slave bridge6): failed to get link speed/duplex [ 583.504440][T21940] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4112'. [ 583.529381][T21927] delete_channel: no stack [ 583.595356][T14223] bond10: (slave bridge6): failed to get link speed/duplex [ 583.621431][T21944] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4114'. [ 583.662397][T21947] xt_bpf: check failed: parse error [ 583.720921][T14227] bond10: (slave bridge6): failed to get link speed/duplex [ 583.772486][T21954] 8021q: VLANs not supported on ip6tnl0 [ 584.400873][ T7298] bond10: (slave bridge6): failed to get link speed/duplex [ 584.758306][T21969] lo speed is unknown, defaulting to 1000 [ 585.361993][T21996] xt_bpf: check failed: parse error [ 585.984569][T22010] netlink: 'syz.4.4130': attribute type 11 has an invalid length. [ 586.110388][T22013] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4131'. [ 586.157757][T22016] netlink: 'syz.4.4132': attribute type 1 has an invalid length. [ 586.176328][T22013] bridge_slave_1: left allmulticast mode [ 586.182273][T22013] bridge_slave_1: left promiscuous mode [ 586.188641][T22013] bridge0: port 2(bridge_slave_1) entered disabled state [ 586.216879][T22016] netlink: 16150 bytes leftover after parsing attributes in process `syz.4.4132'. [ 586.262014][T22013] bridge_slave_0: left allmulticast mode [ 586.267828][T22013] bridge_slave_0: left promiscuous mode [ 586.296318][T22013] bridge0: port 1(bridge_slave_0) entered disabled state [ 586.365791][T21986] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 586.396884][T22013] bridge0 (unregistering): left promiscuous mode [ 586.520404][T22027] syzkaller0: refused to change device tx_queue_len [ 586.768055][T22037] lo speed is unknown, defaulting to 1000 [ 586.778711][T22038] lo speed is unknown, defaulting to 1000 [ 586.835303][T22047] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4141'. [ 586.898192][T22044] lo speed is unknown, defaulting to 1000 [ 586.919945][T22039] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4139'. [ 587.027914][T22055] netlink: 252 bytes leftover after parsing attributes in process `syz.0.4142'. [ 587.141245][ T13] net_ratelimit: 19 callbacks suppressed [ 587.141269][ T13] bond10: (slave bridge6): failed to get link speed/duplex [ 587.291744][ T13] bond10: (slave bridge6): failed to get link speed/duplex [ 587.421263][ T13] bond10: (slave bridge6): failed to get link speed/duplex [ 587.541182][ T13] bond10: (slave bridge6): failed to get link speed/duplex [ 587.659109][T22076] netlink: 'syz.2.4149': attribute type 9 has an invalid length. [ 587.667494][ T13] bond10: (slave bridge6): failed to get link speed/duplex [ 587.781219][ T7298] bond10: (slave bridge6): failed to get link speed/duplex [ 587.890927][ T7298] bond10: (slave bridge6): failed to get link speed/duplex [ 588.001688][T14227] bond10: (slave bridge6): failed to get link speed/duplex [ 588.083672][T22085] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4153'. [ 588.092901][T22085] openvswitch: netlink: Flow actions attr not present in new flow. [ 588.107385][T22086] lo speed is unknown, defaulting to 1000 [ 588.114620][ T7298] bond10: (slave bridge6): failed to get link speed/duplex [ 588.302768][T22088] syzkaller1: entered promiscuous mode [ 588.311340][T22088] syzkaller1: entered allmulticast mode [ 589.315364][T22118] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4164'. [ 589.490238][T22111] lo speed is unknown, defaulting to 1000 [ 589.917661][T22126] netlink: 72 bytes leftover after parsing attributes in process `syz.3.4167'. [ 589.956198][T22126] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 589.986434][T22126] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 590.054668][T22126] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 590.066503][T22126] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 590.139882][T22126] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 590.151550][T22126] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 590.223129][T22126] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 590.246308][T22126] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 590.397848][T22134] sctp: [Deprecated]: syz.4.4170 (pid 22134) Use of int in maxseg socket option. [ 590.397848][T22134] Use struct sctp_assoc_value instead [ 590.509643][T22133] lo speed is unknown, defaulting to 1000 [ 590.574683][T22136] netlink: 'syz.4.4171': attribute type 10 has an invalid length. [ 590.629581][T22136] team0: Device ipvlan1 is VLAN challenged and team device has VLAN set up [ 590.793339][T14225] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 590.808638][T14225] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 590.841042][T14225] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 590.849295][T14225] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 590.899527][T22140] ªªªªª»: renamed from lo (while UP) [ 590.914020][T14223] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 590.940808][T14223] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 590.996132][ T7305] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 591.022510][ T7305] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 591.148827][T22144] lo speed is unknown, defaulting to 1000 [ 591.333958][T22154] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4175'. [ 591.561463][T22161] netlink: 148 bytes leftover after parsing attributes in process `syz.4.4180'. [ 592.272902][T14223] net_ratelimit: 26 callbacks suppressed [ 592.272935][T14223] bond10: (slave bridge6): failed to get link speed/duplex [ 592.461743][ T7298] bond10: (slave bridge6): failed to get link speed/duplex [ 592.591070][T14225] bond10: (slave bridge6): failed to get link speed/duplex [ 592.701572][T14223] bond10: (slave bridge6): failed to get link speed/duplex [ 592.831127][T14225] bond10: (slave bridge6): failed to get link speed/duplex [ 592.962945][T14223] bond10: (slave bridge6): failed to get link speed/duplex [ 593.074007][T14225] bond10: (slave bridge6): failed to get link speed/duplex [ 593.105144][T22188] netlink: 'syz.4.4185': attribute type 83 has an invalid length. [ 593.205319][T22188] ip6gretap2: entered promiscuous mode [ 593.214976][T22188] ip6gretap2: entered allmulticast mode [ 593.242066][ T7305] bond10: (slave bridge6): failed to get link speed/duplex [ 593.351810][T14225] bond10: (slave bridge6): failed to get link speed/duplex [ 593.529160][T14223] bond10: (slave bridge6): failed to get link speed/duplex [ 593.669546][T22206] netlink: 'syz.4.4189': attribute type 1 has an invalid length. [ 593.678095][T22206] netlink: 96 bytes leftover after parsing attributes in process `syz.4.4189'. [ 593.688329][T22206] netlink: 658 bytes leftover after parsing attributes in process `syz.4.4189'. [ 593.731366][T22206] netlink: 1 bytes leftover after parsing attributes in process `syz.4.4189'. [ 593.793408][T22210] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4191'. [ 594.055211][T22220] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4193'. [ 594.213957][T22216] lo speed is unknown, defaulting to 1000 [ 594.276367][T22226] xt_bpf: check failed: parse error [ 594.429315][T22232] netlink: 'syz.4.4199': attribute type 3 has an invalid length. [ 594.447332][T22232] netlink: 'syz.4.4199': attribute type 1 has an invalid length. [ 594.488477][T22232] netlink: 224 bytes leftover after parsing attributes in process `syz.4.4199'. [ 594.516688][T22236] netlink: 76 bytes leftover after parsing attributes in process `syz.0.4201'. [ 594.555131][T22236] Unknown metaid 0 dlen 28 [ 594.725647][T22241] x_tables: duplicate underflow at hook 1 [ 594.833424][T22249] bridge0: left allmulticast mode [ 594.867965][T22249] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 594.898427][T22249] ip6tnl2: left promiscuous mode [ 594.918290][T22249] ip6tnl2: left allmulticast mode [ 594.936529][T22249] ip6gre1: left promiscuous mode [ 594.954186][T22249] ip6gre1: left allmulticast mode [ 594.992058][T22249] geneve2: left promiscuous mode [ 595.007061][T22249] geneve2: left allmulticast mode [ 595.335370][T22268] xt_bpf: check failed: parse error [ 595.442958][T22270] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4209'. [ 596.114365][T22286] bridge_slave_1: default FDB implementation only supports local addresses [ 596.114377][T10680] lec:lec_start_xmit: lec0:No lecd attached [ 596.135349][T22280] lo speed is unknown, defaulting to 1000 [ 596.144511][T22286] netlink: 'syz.4.4216': attribute type 10 has an invalid length. [ 596.177403][T22286] hsr0: entered promiscuous mode [ 596.203347][T22286] bridge0: port 1(hsr0) entered blocking state [ 596.234016][T22286] bridge0: port 1(hsr0) entered disabled state [ 596.251297][T22286] hsr0: entered allmulticast mode [ 596.258220][T22286] hsr_slave_0: entered allmulticast mode [ 596.264539][T22286] hsr_slave_1: entered allmulticast mode [ 596.281651][T22286] bridge0: port 1(hsr0) entered blocking state [ 596.288133][T22286] bridge0: port 1(hsr0) entered forwarding state [ 596.781018][ C0] [ 596.783415][ C0] ============================================ [ 596.789600][ C0] WARNING: possible recursive locking detected [ 596.795795][ C0] syzkaller #0 Not tainted [ 596.800239][ C0] -------------------------------------------- [ 596.806464][ C0] swapper/0/0 is trying to acquire lock: [ 596.812211][ C0] ffff88803df64f70 (&hsr->seqnr_lock){+.-.}-{3:3}, at: hsr_dev_xmit+0x237/0x360 [ 596.821405][ C0] [ 596.821405][ C0] but task is already holding lock: [ 596.829478][ C0] ffff888098404f70 (&hsr->seqnr_lock){+.-.}-{3:3}, at: send_hsr_supervision_frame+0x380/0xcb0 [ 596.841053][ C0] [ 596.841053][ C0] other info that might help us debug this: [ 596.852576][ C0] Possible unsafe locking scenario: [ 596.852576][ C0] [ 596.860174][ C0] CPU0 [ 596.863519][ C0] ---- [ 596.866835][ C0] lock(&hsr->seqnr_lock); [ 596.871856][ C0] lock(&hsr->seqnr_lock); [ 596.876677][ C0] [ 596.876677][ C0] *** DEADLOCK *** [ 596.876677][ C0] [ 596.885080][ C0] May be due to missing lock nesting notation [ 596.885080][ C0] [ 596.893473][ C0] 8 locks held by swapper/0/0: [ 596.898361][ C0] #0: ffffc90000007ce0 ((&hsr->announce_timer)){+.-.}-{0:0}, at: call_timer_fn+0xd4/0x5a0 [ 596.908551][ C0] #1: ffffffff8e55a360 (rcu_read_lock){....}-{1:3}, at: hsr_announce+0x89/0x370 [ 596.917854][ C0] #2: ffff888098404f70 (&hsr->seqnr_lock){+.-.}-{3:3}, at: send_hsr_supervision_frame+0x380/0xcb0 [ 596.928742][ C0] #3: ffffffff8e55a360 (rcu_read_lock){....}-{1:3}, at: hsr_forward_skb+0xb3/0x2860 [ 596.938609][ C0] #4: ffffffff8e55a3c0 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x274/0x3850 [ 596.948636][ C0] #5: ffffffff8e55a360 (rcu_read_lock){....}-{1:3}, at: br_dev_xmit+0x193/0x1920 [ 596.957899][ C0] #6: ffffffff8e55a3c0 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x274/0x3850 [ 596.967874][ C0] #7: ffffffff8e55a360 (rcu_read_lock){....}-{1:3}, at: hsr_dev_xmit+0x2d/0x360 [ 596.977039][ C0] [ 596.977039][ C0] stack backtrace: [ 596.982949][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) [ 596.982969][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 596.982981][ C0] Call Trace: [ 596.982990][ C0] [ 596.982998][ C0] dump_stack_lvl+0xe8/0x150 [ 596.983028][ C0] print_deadlock_bug+0x279/0x290 [ 596.983046][ C0] __lock_acquire+0x253f/0x2cf0 [ 596.983072][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 596.983096][ C0] ? __lock_acquire+0x6b5/0x2cf0 [ 596.983119][ C0] ? hsr_dev_xmit+0x237/0x360 [ 596.983134][ C0] lock_acquire+0x106/0x330 [ 596.983155][ C0] ? hsr_dev_xmit+0x237/0x360 [ 596.983176][ C0] ? hsr_dev_xmit+0x237/0x360 [ 596.983191][ C0] _raw_spin_lock_bh+0x36/0x50 [ 596.983215][ C0] ? hsr_dev_xmit+0x237/0x360 [ 596.983230][ C0] hsr_dev_xmit+0x237/0x360 [ 596.983245][ C0] ? hsr_dev_xmit+0x2d/0x360 [ 596.983261][ C0] dev_hard_start_xmit+0x2cd/0x7f0 [ 596.983293][ C0] __dev_queue_xmit+0x168f/0x3850 [ 596.983320][ C0] ? __local_bh_enable_ip+0xd0/0x130 [ 596.983336][ C0] ? __dev_queue_xmit+0x274/0x3850 [ 596.983359][ C0] ? ebt_do_table+0x2665/0x2830 [ 596.983379][ C0] ? ebt_do_table+0x2665/0x2830 [ 596.983400][ C0] ? __pfx___dev_queue_xmit+0x10/0x10 [ 596.983434][ C0] ? br_nf_post_routing+0x219/0xfe0 [ 596.983450][ C0] ? lock_acquire+0x106/0x330 [ 596.983475][ C0] br_dev_queue_push_xmit+0x370/0x4a0 [ 596.983493][ C0] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 596.983509][ C0] NF_HOOK+0x360/0x3f0 [ 596.983525][ C0] ? NF_HOOK+0xa2/0x3f0 [ 596.983538][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 596.983553][ C0] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 596.983568][ C0] ? lock_acquire+0x106/0x330 [ 596.983594][ C0] br_forward_finish+0xd3/0x130 [ 596.983608][ C0] ? __pfx_br_dev_queue_push_xmit+0x10/0x10 [ 596.983624][ C0] ? __pfx_br_forward_finish+0x10/0x10 [ 596.983639][ C0] NF_HOOK+0x360/0x3f0 [ 596.983655][ C0] ? NF_HOOK+0xa2/0x3f0 [ 596.983668][ C0] ? __pfx_NF_HOOK+0x10/0x10 [ 596.983684][ C0] ? __pfx_br_forward_finish+0x10/0x10 [ 596.983700][ C0] ? __skb_clone+0x483/0x7a0 [ 596.983722][ C0] ? br_handle_vlan+0x61/0x530 [ 596.983745][ C0] __br_forward+0x397/0x540 [ 596.983760][ C0] ? __pfx_br_forward_finish+0x10/0x10 [ 596.983777][ C0] br_flood+0x6ee/0xb80 [ 596.983797][ C0] ? br_dev_xmit+0x193/0x1920 [ 596.983817][ C0] br_dev_xmit+0x127a/0x1920 [ 596.983837][ C0] ? br_dev_xmit+0x193/0x1920 [ 596.983858][ C0] ? __pfx_br_dev_xmit+0x10/0x10 [ 596.983876][ C0] ? __skb_get_hash_net+0x13f/0x2e0 [ 596.983901][ C0] ? __pfx___skb_get_hash_net+0x10/0x10 [ 596.983925][ C0] ? skb_network_protocol+0x234/0x3f0 [ 596.983949][ C0] ? __pfx_passthru_features_check+0x10/0x10 [ 596.983975][ C0] dev_hard_start_xmit+0x2cd/0x7f0 [ 596.984004][ C0] __dev_queue_xmit+0x168f/0x3850 [ 596.984034][ C0] ? handle_softirqs+0x22a/0x7c0 [ 596.984050][ C0] ? default_idle+0x9/0x20 [ 596.984066][ C0] ? common_startup_64+0x13e/0x147 [ 596.984086][ C0] ? __dev_queue_xmit+0x274/0x3850 [ 596.984113][ C0] ? __pfx___dev_queue_xmit+0x10/0x10 [ 596.984141][ C0] ? __copy_skb_header+0xa3/0x4a0 [ 596.984168][ C0] ? hsr_addr_subst_dest+0x30d/0xa90 [ 596.984186][ C0] ? skb_clone+0x246/0x3a0 [ 596.984209][ C0] hsr_forward_skb+0x157b/0x2860 [ 596.984234][ C0] ? hsr_forward_skb+0xb3/0x2860 [ 596.984254][ C0] ? __pfx_hsr_forward_skb+0x10/0x10 [ 596.984272][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 596.984292][ C0] ? __asan_memset+0x22/0x50 [ 596.984316][ C0] ? __skb_pad+0x405/0x610 [ 596.984341][ C0] send_hsr_supervision_frame+0x731/0xcb0 [ 596.984364][ C0] ? __pfx_send_hsr_supervision_frame+0x10/0x10 [ 596.984383][ C0] hsr_announce+0x1db/0x370 [ 596.984400][ C0] ? hsr_announce+0x89/0x370 [ 596.984415][ C0] ? __pfx_hsr_announce+0x10/0x10 [ 596.984431][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 596.984452][ C0] call_timer_fn+0x192/0x5a0 [ 596.984477][ C0] ? __pfx_hsr_announce+0x10/0x10 [ 596.984492][ C0] ? call_timer_fn+0xd4/0x5a0 [ 596.984515][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 596.984543][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 596.984562][ C0] ? __pfx_hsr_announce+0x10/0x10 [ 596.984578][ C0] __run_timer_base+0x652/0x8b0 [ 596.984600][ C0] ? ktime_get+0x45/0x200 [ 596.984623][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 596.984648][ C0] ? sched_clock_cpu+0x74/0x440 [ 596.984674][ C0] run_timer_softirq+0xb7/0x170 [ 596.984697][ C0] handle_softirqs+0x22a/0x7c0 [ 596.984713][ C0] ? __irq_exit_rcu+0x5f/0x150 [ 596.984731][ C0] __irq_exit_rcu+0x5f/0x150 [ 596.984745][ C0] irq_exit_rcu+0x9/0x30 [ 596.984759][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 596.984781][ C0] [ 596.984787][ C0] [ 596.984794][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 596.984813][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 596.984835][ C0] Code: 28 60 02 e9 53 e8 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 53 59 11 00 fb f4 cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 596.984850][ C0] RSP: 0018:ffffffff8e207dc0 EFLAGS: 00000246 [ 596.984865][ C0] RAX: 00000000001a4a4b RBX: ffffffff8199370d RCX: 0000000080000001 [ 596.984877][ C0] RDX: 0000000000000001 RSI: ffffffff8dcd0c10 RDI: ffffffff8c073a00 [ 596.984889][ C0] RBP: ffffffff8e207eb0 R08: ffff8880b86336db R09: 1ffff110170c66db [ 596.984902][ C0] R10: dffffc0000000000 R11: ffffed10170c66dc R12: ffffffff8fef4970 [ 596.984914][ C0] R13: 1ffffffff1c52a78 R14: 0000000000000000 R15: 0000000000000000 [ 596.984927][ C0] ? do_idle+0x1bd/0x500 [ 596.984946][ C0] default_idle+0x9/0x20 [ 596.984959][ C0] default_idle_call+0x72/0xb0 [ 596.984974][ C0] do_idle+0x1bd/0x500 [ 596.984987][ C0] ? lockdep_hardirqs_on+0x7a/0x110 [ 596.985018][ C0] ? __pfx_do_idle+0x10/0x10 [ 596.985036][ C0] cpu_startup_entry+0x43/0x60 [ 596.985050][ C0] rest_init+0x2de/0x300 [ 596.985067][ C0] start_kernel+0x380/0x3d0 [ 596.985091][ C0] x86_64_start_reservations+0x24/0x30 [ 596.985109][ C0] x86_64_start_kernel+0x143/0x1c0 [ 596.985127][ C0] common_startup_64+0x13e/0x147 [ 596.985153][ C0] [ 597.622363][T14227] net_ratelimit: 18 callbacks suppressed [ 597.622384][T14227] bond10: (slave bridge6): failed to get link speed/duplex [ 597.741819][T14223] bond10: (slave bridge6): failed to get link speed/duplex [ 597.819732][T22312] veth4: entered allmulticast mode [ 597.890844][T14223] bond10: (slave bridge6): failed to get link speed/duplex [ 598.030877][T14223] bond10: (slave bridge6): failed to get link speed/duplex [ 598.141198][ T13] bond10: (slave bridge6): failed to get link speed/duplex [ 598.263410][T14222] bond10: (slave bridge6): failed to get link speed/duplex [ 598.394584][ T13] bond10: (slave bridge6): failed to get link speed/duplex [ 598.510893][ T13] bond10: (slave bridge6): failed to get link speed/duplex [ 598.621304][ T13] bond10: (slave bridge6): failed to get link speed/duplex [ 598.730885][T14225] bond10: (slave bridge6): failed to get link speed/duplex [ 601.830773][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5710 ms [ 601.839275][ C0] lec:lec_tx_timeout: lec0 [ 602.720874][ T13] net_ratelimit: 35 callbacks suppressed [ 602.720904][ T13] bond10: (slave bridge6): failed to get link speed/duplex [ 602.840868][T14223] bond10: (slave bridge6): failed to get link speed/duplex [ 602.951158][T14225] bond10: (slave bridge6): failed to get link speed/duplex [ 603.061089][T14225] bond10: (slave bridge6): failed to get link speed/duplex [ 603.170848][T14227] bond10: (slave bridge6): failed to get link speed/duplex [ 603.281186][ T13] bond10: (slave bridge6): failed to get link speed/duplex [ 603.391166][ T13] bond10: (slave bridge6): failed to get link speed/duplex [ 603.500989][ T13] bond10: (slave bridge6): failed to get link speed/duplex [ 603.611105][T14227] bond10: (slave bridge6): failed to get link speed/duplex [ 603.721115][T14227] bond10: (slave bridge6): failed to get link speed/duplex