last executing test programs: 21m46.718209154s ago: executing program 2 (id=877): bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa10000000000000701000008000000b702000008000000b703000000000000850000001100000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000840)={r1}, 0xc) 21m45.81480158s ago: executing program 2 (id=879): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008}, 0x40000) 21m44.807304641s ago: executing program 2 (id=883): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a44000000120a09000000000000000000021000000900010073797a30000000000900020073992cecd200000008000340000000010800084000000000080004"], 0x6c}}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r2, &(0x7f0000000080), 0x12) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x2c, &(0x7f0000000000)=0x80000001, 0x4) getsockopt$ARPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x63, 0x0, &(0x7f00000001c0)) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = syz_init_net_socket$x25(0x9, 0x5, 0x0) setsockopt$inet_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000340), 0x3) bind$x25(r6, &(0x7f00000001c0), 0x12) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000000c0)=ANY=[], 0xf0}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000040)={'bond0\x00', 0x2000}) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000002000000000000000000000085000000bc00000095"], &(0x7f0000000300)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={0xffffffffffffffff, r9, 0x25, 0x11, @void}, 0x10) r10 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r10, &(0x7f0000000000)={0xa, 0x4001, 0x1, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3e}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r10, 0x6, 0xd, &(0x7f0000000040)='highspeed', 0x6) ioctl$sock_inet6_tcp_SIOCOUTQ(r10, 0x5411, 0x0) sendmmsg(r10, &(0x7f0000006840)=[{{&(0x7f0000000740)=@ll={0x11, 0x10, 0x0, 0x1, 0x4}, 0x80, &(0x7f0000004f80)=[{&(0x7f0000003f80)="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", 0x1af}], 0x1, &(0x7f0000004fc0)=ANY=[], 0x12d0}}], 0x1, 0x40) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r7, r9, 0x25, 0x0, @val=@iter={0x0}}, 0x20) syz_emit_ethernet(0x42, &(0x7f00000013c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaa04000000dd641575cf000c11fffc010000000000000000f5ff00000001fe8000000000000000000000000000bb4e224e24000c9078e1060000"], 0x0) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="12000000060000000400000004"], 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000002c0)={r11, 0x0, &(0x7f00000001c0)=""/213}, 0x20) 21m40.646487347s ago: executing program 2 (id=893): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e22, 0x10000009, @loopback, 0x7}, 0x1c) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x56202329, @empty, 0x4000005}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000a00)=[{{0x0, 0x0, &(0x7f00000031c0)}}], 0x1, 0x4040881) write(r0, &(0x7f00000002c0)="93fa7d7ea8159a78aa53acb3d7d28b62c2a5baded7cf81db148924a2f5bd838ef3bf94fdce3199b491a13ef9925dac930d49a39a47be68e3f5e72677e65f6ae5213c4d5529199a5dd3c195b0b71b994d34faf852ddce8a48bb72f48920aaf443813a0ff2732847c3736e547cae7c17d695696d5a5124d821f09f45789e7a0186b4459ac0e73a8f17ab89e469c2cd0948dd32713dc56e", 0x96) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000020c0)={&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000e40)=""/4096, 0x1000, 0x0, 0x0}, &(0x7f0000002100)=0x40) 21m39.234479719s ago: executing program 2 (id=896): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x24, 0x14, 0x1, 0x0, 0x0, {0x2c}, [@INET_DIAG_REQ_BYTECODE={0xd, 0x1, "ad2d1ed3e814f3d0f6"}]}, 0x24}, 0x1, 0x0, 0x0, 0xc004}, 0x0) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x34, 0x4, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x24000880}, 0x40) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000300)={@local, 0x8000000, 0x0, 0xff, 0x3, 0x0, 0x2}, 0x20) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), r4) sendmsg$IPVS_CMD_NEW_DEST(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB="8c000000", @ANYRES16=r5, @ANYBLOB="010000000000000000001000000030000180060001000a00000006000200110000001400030000000000000000000000000000000001060004001f90"], 0x8c}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$gtp(&(0x7f0000000940), r7) sendmsg$GTP_CMD_NEWPDP(r7, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000980)={0x1c, r8, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24000004}, 0x24040810) bind$inet6(r2, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x9a, &(0x7f0000000040)={@link_local, @random="ece65fbcee55", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x64, 0x11, 0x0, @remote, @local, {[], {0x3, 0xe22, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "0f38658c432ae1d6778795efa7a386131cdfd6db9d693b149573b69e324dd518", "80f20b589ea815d390be3440806a3dfd", {"68e77bdc832e437bb8b8deadbfca96d4", "8ce907f941ed51d4a10806ad01d87602"}}}}}}}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2}, 0x48) close(r11) ioctl$TUNSETFILTEREBPF(r10, 0x800454e1, &(0x7f0000000000)=r11) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYRESOCT=r10], 0x1c}}, 0x4800) r12 = socket$nl_generic(0x10, 0x3, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r13 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r14 = openat$cgroup_devices(r13, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r14, &(0x7f00000003c0)=ANY=[@ANYRESDEC=r6, @ANYRESOCT], 0xa) syz_genetlink_get_family_id$batadv(&(0x7f0000000dc0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r12, 0x8933, &(0x7f0000000080)) 21m36.719971283s ago: executing program 2 (id=903): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) recvmmsg(r0, &(0x7f0000004040)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x7}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000c80)=""/119, 0x77}, 0xff}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000e00)=""/255, 0xff}, 0x80}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001640)=""/201, 0xc9}, 0x2}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001c40)=""/32, 0xffffffd7}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003f80)=""/144, 0x90}, 0x8000}], 0x4000000000002ba, 0x40000002, 0x0) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$inet6(0xa, 0x805, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet6_sctp(0xa, 0x5, 0x84) syz_open_procfs$namespace(0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6(0xa, 0x80002, 0x0) socket(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="06000000040000000800000000f4c90000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) bpf$ENABLE_STATS(0x20, 0x0, 0x0) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c0000000000008001"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x16, 0xc, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000000000000000000007a0af0ff0000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000bfa200000000000007020000f8ffffffbfa300000000000007030000f0ffffffb7040000ff070000850000000200000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0xe, 0x0, &(0x7f0000000340)='\x00'/14, 0x0, 0x3b66, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x83, &(0x7f0000001000)={r5}, 0x8) setsockopt$inet_sctp_SCTP_AUTH_KEY(r4, 0x84, 0x17, &(0x7f0000000380)=ANY=[@ANYRES32=r5, @ANYBLOB="05002000"], 0x8) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="180600000000000000000000000000001801000020207025000000000020203c7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x94) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(0xffffffffffffffff, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 21m21.275554167s ago: executing program 32 (id=903): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) recvmmsg(r0, &(0x7f0000004040)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x7}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000c80)=""/119, 0x77}, 0xff}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000e00)=""/255, 0xff}, 0x80}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001640)=""/201, 0xc9}, 0x2}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001c40)=""/32, 0xffffffd7}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003f80)=""/144, 0x90}, 0x8000}], 0x4000000000002ba, 0x40000002, 0x0) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$inet6(0xa, 0x805, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet6_sctp(0xa, 0x5, 0x84) syz_open_procfs$namespace(0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6(0xa, 0x80002, 0x0) socket(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="06000000040000000800000000f4c90000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) bpf$ENABLE_STATS(0x20, 0x0, 0x0) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c0000000000008001"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x16, 0xc, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000000000000000000007a0af0ff0000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000bfa200000000000007020000f8ffffffbfa300000000000007030000f0ffffffb7040000ff070000850000000200000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0xe, 0x0, &(0x7f0000000340)='\x00'/14, 0x0, 0x3b66, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x83, &(0x7f0000001000)={r5}, 0x8) setsockopt$inet_sctp_SCTP_AUTH_KEY(r4, 0x84, 0x17, &(0x7f0000000380)=ANY=[@ANYRES32=r5, @ANYBLOB="05002000"], 0x8) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0xb, &(0x7f0000000500)=ANY=[@ANYBLOB="180600000000000000000000000000001801000020207025000000000020203c7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x94) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(0xffffffffffffffff, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 19m43.306075082s ago: executing program 5 (id=929): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="58000000020601080000000000000000000000400500010006000000050005000200000005000400000000000900020073797a31000000000c000780080006400000c3b611000300686173683a69702c6d61726b00"], 0x58}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001b40)=ANY=[@ANYBLOB="480000000906010200000000000000000500ffff200007800c00018008000140e000000208000a400000000205000300020000000900020073797a3100000000050001000700"], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000003f000500010000000000000001010000000000000f0001006f76732d7302080000000000080002"], 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x11) sendmsg$nl_generic(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[], 0x58}}, 0x45) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r4, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r4, 0x84, 0x17, &(0x7f0000000940)=ANY=[@ANYRES32=0x0, @ANYBLOB="00000000025022e22e2bf96dd8fe6b5cd564228ac9e3d56053f1e444897ee2ed16997c5e90ed5e8855d2126d60c571d7681a4966836d000000000000020026a6808b868845037348d1a1d420e6f0d7762ee8ece1c842bb836973c8c800c31a64f23066678ab01c2b4caac9d13bd9cd7477929b23c1a00a61dfd590a58565a2353a40f655b14789f71ce4792ae800e0051f910af210726aaba6fc8948f4ea9f386c173956eb1a4460a03d4621a7615b09c7e1665f117162b012683e5250fa336b0bbc36f150d91c0f1b5a289b7335495823f0ee43ca2e01e0f17992e6e4490b14"], 0x9) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x1, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff37}, 0x48) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r6, 0x1, 0x1000000000000f, &(0x7f0000000080)=0x7fffffff, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x1, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000000000000940001"], &(0x7f00000002c0)='GPL\x00', 0xf}, 0x94) setsockopt$sock_attach_bpf(r6, 0x1, 0x34, &(0x7f0000000040)=r5, 0x4) setsockopt$sock_attach_bpf(r6, 0x1, 0x34, &(0x7f0000000100)=r5, 0x4) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000840)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="c40000001900674c2cbd70000000000000000000000000000000000000000000ac1eff0100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0100000000000000000000000000000000000020000000000000000000000000000000000000000000008000000000000000000000000000fcffffffffffffff0000000000000000b0ac00000000000000000000000000000000000000000000000400000000000000000002000000000a00100001"], 0xc4}}, 0x4c050) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="7c01000013000101000000000000000064010102000000000000000000000000640101020000000000000000000000000100000d040000090a00000000000000", @ANYRES32=r7, @ANYRES32, @ANYBLOB="020000000000000000000000000000000000000000000000ffffffffffffffff06000000000000000300000000000000000000000000000008000000000000000000000000000000010000000000000000000000000000000001000000000000feffffff000000000000000000000000c4000500ffdea92196c4010000000000000000000000000001000004d5320000000a00000064010101000000000000000000000000000000000002480004000000ffff000005000000ac141418000000000000000000000000000004d42b0000000a000000fe80000000000000000000000000001e00000000040103000000367a00000200000006000000e0000002000000000000000000000000000004d42b0000000a000000ac1e01010000000000000000000000000000000000000300f9ffffffff030100d900"], 0x17c}, 0x1, 0x0, 0x0, 0x20048000}, 0x20) r10 = socket(0xa, 0x3, 0x87) sendmsg(r10, &(0x7f0000000700)={&(0x7f0000000080)=@l2tp6={0xa, 0x0, 0x9, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, 0x40, 0x1}, 0x80, &(0x7f0000000680)=[{0x0}, {&(0x7f00000005c0)='r', 0x1}], 0x2}, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r11 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) write$tun(r8, &(0x7f0000000080)=ANY=[@ANYBLOB="034886dd010000000000140000006000000003082f00fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef) 19m28.088404216s ago: executing program 33 (id=929): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="58000000020601080000000000000000000000400500010006000000050005000200000005000400000000000900020073797a31000000000c000780080006400000c3b611000300686173683a69702c6d61726b00"], 0x58}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001b40)=ANY=[@ANYBLOB="480000000906010200000000000000000500ffff200007800c00018008000140e000000208000a400000000205000300020000000900020073797a3100000000050001000700"], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000003f000500010000000000000001010000000000000f0001006f76732d7302080000000000080002"], 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x11) sendmsg$nl_generic(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[], 0x58}}, 0x45) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r4, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r4, 0x84, 0x17, &(0x7f0000000940)=ANY=[@ANYRES32=0x0, @ANYBLOB="00000000025022e22e2bf96dd8fe6b5cd564228ac9e3d56053f1e444897ee2ed16997c5e90ed5e8855d2126d60c571d7681a4966836d000000000000020026a6808b868845037348d1a1d420e6f0d7762ee8ece1c842bb836973c8c800c31a64f23066678ab01c2b4caac9d13bd9cd7477929b23c1a00a61dfd590a58565a2353a40f655b14789f71ce4792ae800e0051f910af210726aaba6fc8948f4ea9f386c173956eb1a4460a03d4621a7615b09c7e1665f117162b012683e5250fa336b0bbc36f150d91c0f1b5a289b7335495823f0ee43ca2e01e0f17992e6e4490b14"], 0x9) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x1, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff37}, 0x48) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r6, 0x1, 0x1000000000000f, &(0x7f0000000080)=0x7fffffff, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x1, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000000000000940001"], &(0x7f00000002c0)='GPL\x00', 0xf}, 0x94) setsockopt$sock_attach_bpf(r6, 0x1, 0x34, &(0x7f0000000040)=r5, 0x4) setsockopt$sock_attach_bpf(r6, 0x1, 0x34, &(0x7f0000000100)=r5, 0x4) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000840)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="c40000001900674c2cbd70000000000000000000000000000000000000000000ac1eff0100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0100000000000000000000000000000000000020000000000000000000000000000000000000000000008000000000000000000000000000fcffffffffffffff0000000000000000b0ac00000000000000000000000000000000000000000000000400000000000000000002000000000a00100001"], 0xc4}}, 0x4c050) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="7c01000013000101000000000000000064010102000000000000000000000000640101020000000000000000000000000100000d040000090a00000000000000", @ANYRES32=r7, @ANYRES32, @ANYBLOB="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"], 0x17c}, 0x1, 0x0, 0x0, 0x20048000}, 0x20) r10 = socket(0xa, 0x3, 0x87) sendmsg(r10, &(0x7f0000000700)={&(0x7f0000000080)=@l2tp6={0xa, 0x0, 0x9, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, 0x40, 0x1}, 0x80, &(0x7f0000000680)=[{0x0}, {&(0x7f00000005c0)='r', 0x1}], 0x2}, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r11 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) write$tun(r8, &(0x7f0000000080)=ANY=[@ANYBLOB="034886dd010000000000140000006000000003082f00fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef) 3.58873915s ago: executing program 4 (id=7121): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x854}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x3, 0xc, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x87}, @printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x90000001}, {0x85, 0x0, 0x0, 0x73}}]}, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r1, &(0x7f0000003700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000008100000008000300", @ANYRES32, @ANYBLOB="0100060008021106000000001c003300915d0000ffffffffffff0800000108021100000000000c3558d500fd94b0f3c32d81e353f6b3b35c40f0c6fe72c85c19ff6352fb148fd8b88f94a1dbd97b0387ed350b5d3f8dfe96003b92aef775323895dd2f4f5d1803572677b332f04a2c644b286776501475c66bb409c3a3ad78279faf4a49e4929e3adf60f43daa847e553c18e8bb5e385824541a781dd33b63788a82885eae2b"], 0x44}, 0x1, 0x0, 0x0, 0x20008000}, 0x800) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write(r6, &(0x7f0000000200)="4a00000011007f0314066f9a70932d490675bc59083301", 0x17) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) splice(r8, &(0x7f0000000040)=0xffffffffffffffff, r7, 0x0, 0x800000000ff, 0x0) sendmsg$NL80211_CMD_AUTHENTICATE(r8, &(0x7f0000000580)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000440)=ANY=[@ANYBLOB='lD\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00012abd7000fbdbdf252500000008003500030000000800a0000300000008002201e2020000050018010200000008009f00000000000800270003000000"], 0x44}, 0x1, 0x0, 0x0, 0x4008000}, 0x2810) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="fc000000", @ANYRES16=r5, @ANYBLOB="010000000000000000003900000008000300", @ANYRES32=r9, @ANYBLOB="e0005a80dc0000801400030020380000080003000600000003000800040002004a0002"], 0xfc}, 0x1, 0x0, 0x0, 0x4008821}, 0x8840) sendmsg$NL80211_CMD_DEL_TX_TS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x7c, r3, 0x821, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x7, 0x70}}}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0x8}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xc}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40010) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000300)=ANY=[@ANYBLOB="2400000047000701feffffffffffffff017c0000080001"], 0x24}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) socket$nl_xfrm(0x10, 0x3, 0x6) r10 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000100)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010000000000000000002301000008000300", @ANYRES32=r11, @ANYBLOB="05001f0003"], 0x24}}, 0x0) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r12, &(0x7f0000000200)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r12, 0x0) socket$inet_udp(0x2, 0x2, 0x0) connect$bt_rfcomm(r12, &(0x7f0000000000)={0x1f, @none, 0xff}, 0xa) 3.353699163s ago: executing program 1 (id=7124): r0 = socket$netlink(0x10, 0x3, 0x0) socket$nl_crypto(0x10, 0x3, 0x15) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8983, &(0x7f0000000000)={0x6, 'wg1\x00', {}, 0x108}) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000000180)={0x0, 'bridge_slave_0\x00', {0x4}, 0xf1ee}) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x1c, &(0x7f00000002c0)=[@in6={0xa, 0x4e24, 0x78, @dev={0xfe, 0x80, '\x00', 0x22}, 0x2}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r6 = socket$pppl2tp(0x18, 0x1, 0x1) r7 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(r6, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r7, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) r8 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r8, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @multicast2}, 0x2}}, 0x2e) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x17, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x107a655, 0x0, 0x0, 0x0, 0x10}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r5}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r9, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x6d, &(0x7f0000000140)={r4}, &(0x7f00000001c0)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000040)={r4, @in={{0x2, 0x4e24, @remote}}, 0x9, 0xe1, 0x6970, 0x0, 0x10, 0x6, 0x9}, 0x9c) ioctl$sock_SIOCGPGRP(r7, 0x8904, &(0x7f0000000400)=0x0) syz_open_procfs$namespace(r10, &(0x7f0000000440)='ns/mnt\x00') 3.198821857s ago: executing program 0 (id=7125): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000140)={'erspan0\x00', &(0x7f0000000040)={'erspan0\x00', 0x0, 0x7, 0x8000, 0x3, 0x8, {{0xc, 0x4, 0x1, 0x3a, 0x30, 0x66, 0x0, 0xf, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x37}, {[@cipso={0x86, 0x19, 0x4, [{0x6, 0x9, "76294bfb4f71f2"}, {0x5, 0x6, "91b8d0d3"}, {0x5, 0x2}, {0x6, 0x2}]}]}}}}}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x80, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xb, 0xfff7}, {0xfff1, 0xffff}, {0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4c, 0x2, [@TCA_MATCHALL_ACT={0x48, 0x2, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x0, 0x3}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x80}}, 0x0) write$tun(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="034886dd0100000000001400"], 0xfdef) 3.022072629s ago: executing program 4 (id=7127): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWRULE={0x98, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x405}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x6c, 0x4, 0x0, 0x1, [{0x68, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x58, 0x2, 0x0, 0x1, [@NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0x12}, @NFTA_INNER_EXPR={0x34, 0x5, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x90}, @NFTA_PAYLOAD_BASE={0x8}, @NFTA_PAYLOAD_LEN={0x8}, @NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0x8}]}}}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_NUM={0x8}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xc0}, 0x1, 0x0, 0x0, 0x8890}, 0x24008000) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000600)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2a, 0x0, {{@in=@empty, @in6=@private2={0xfc, 0x2, '\x00', 0x4}, 0x4e24, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x0, 0x6, 0xffffffffffffffff, 0x200000000200}, {0x0, 0x2f, 0x407ffffffffffe, 0x800000000000002}, 0x3, 0x0, 0x1, 0x0, 0x6}, [@tmpl={0x44, 0x5, [{{@in=@multicast1, 0x0, 0x3c}, 0x2, @in=@multicast2, 0x6, 0x4, 0x1, 0x0, 0x0, 0x80000001}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x20048010}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "268435", 0x14, 0x6, 0x0, @empty, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0xf3d8}}}}}}}, 0x0) 2.883603462s ago: executing program 0 (id=7128): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f00000001c0)) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0xd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, 0xe, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) shutdown(r2, 0x0) recvmmsg(r2, &(0x7f0000000080), 0x72a, 0x0, 0x0) sendmsg$inet(r2, &(0x7f0000000680)={0x0, 0x0, 0x0}, 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, 0x0, 0x0) 2.827433174s ago: executing program 4 (id=7130): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@mpls_delroute={0x1c, 0x18, 0x9, 0x70bd2d, 0xfffffffe, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1, 0x2000}}, 0x1c}}, 0x4800) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.freeze\x00', 0x275a, 0x0) ioctl$FICLONERANGE(r1, 0x4020940d, &(0x7f00000000c0)={{r1}, 0x1, 0x9, 0x3}) openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = socket(0x2d, 0x2, 0x0) setsockopt(r2, 0x11d, 0x1, &(0x7f0000000500)="01000000", 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r6, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22052, r7, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r6, 0x0) r8 = socket$rds(0x15, 0x5, 0x0) bind$rds(r8, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r8, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1, 0x1000000000000}}], 0x48}, 0x0) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000480), r5) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r11 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r11, 0x10e, 0xc, &(0x7f0000000200)=0x5, 0x4) sendmsg$nl_generic(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x1a, 0x229, 0x80, 0x25dfdbfc, {0xa}}, 0x14}}, 0x8000) sendmsg$BATADV_CMD_GET_NEIGHBORS(r11, &(0x7f0000004340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYRES64=0x0, @ANYRES16=r9, @ANYRES8=0x0, @ANYRES32=r10, @ANYBLOB="389b2c8cb5"], 0x24}, 0x1, 0x0, 0x0, 0x400400c}, 0x0) sendmsg$FOU_CMD_ADD(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)={0x40, r4, 0x209, 0x70bd28, 0x25dfdbfe, {}, [@FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @loopback={0xff00000000000000}}, @FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_IFINDEX={0x8, 0xb, r10}]}, 0x40}, 0x1, 0x0, 0x0, 0x40010}, 0x200000000000000) 2.704191354s ago: executing program 0 (id=7131): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$kcm(0xa, 0x3, 0x87) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40241, 0x0) close(0x3) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @random="2b0436d23321"}) write$tun(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="034886dd120005000000140000006000000008008700fe88a43de1a400000000000000007d01ff020000000000000000", @ANYRES16=r0, @ANYRES64=r2], 0xfdef) 2.451045317s ago: executing program 4 (id=7133): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x854}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x3, 0xc, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x87}, @printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x90000001}, {0x85, 0x0, 0x0, 0x73}}]}, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000400)={'wlan1\x00'}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write(r6, &(0x7f0000000200)="4a00000011007f0314066f9a70932d490675bc59083301", 0x17) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) splice(r8, &(0x7f0000000040)=0xffffffffffffffff, r7, 0x0, 0x800000000ff, 0x0) sendmsg$NL80211_CMD_AUTHENTICATE(r8, &(0x7f0000000580)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000440)=ANY=[@ANYBLOB='lD\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00012abd7000fbdbdf252500000008003500030000000800a0000300000008002201e2020000050018010200000008009f00000000000800270003000000"], 0x44}, 0x1, 0x0, 0x0, 0x4008000}, 0x2810) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="fc000000", @ANYRES16=r5, @ANYBLOB="010000000000000000003900000008000300", @ANYRES32=r9, @ANYBLOB="e0005a80dc0000801400030020380000080003000600000003000800040002004a0002"], 0xfc}, 0x1, 0x0, 0x0, 0x4008821}, 0x8840) sendmsg$NL80211_CMD_DEL_TX_TS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x7c, r3, 0x821, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x7, 0x70}}}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0x8}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xc}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40010) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000300)=ANY=[@ANYBLOB="2400000047000701feffffffffffffff017c0000080001"], 0x24}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) socket$nl_xfrm(0x10, 0x3, 0x6) r10 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000100)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010000000000000000002301000008000300", @ANYRES32=r11, @ANYBLOB="05001f0003"], 0x24}}, 0x0) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r12, &(0x7f0000000200)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r12, 0x0) socket$inet_udp(0x2, 0x2, 0x0) connect$bt_rfcomm(r12, &(0x7f0000000000)={0x1f, @none, 0xff}, 0xa) 2.355369901s ago: executing program 1 (id=7134): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x24, 0x14, 0x1, 0x0, 0x0, {0x2c}, [@INET_DIAG_REQ_BYTECODE={0xd, 0x1, "ad2d1ed3e814f3d0f6"}]}, 0x24}, 0x1, 0x0, 0x0, 0xc004}, 0x0) clock_gettime(0x6, &(0x7f0000000340)) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x34, 0x4, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x24000880}, 0x40) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000300)={@local, 0x8000000, 0x0, 0xff, 0x3, 0x0, 0x2}, 0x20) r3 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_sctp_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f0000000540), &(0x7f0000000580)=0x8) sendmsg$IPVS_CMD_NEW_DEST(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB="8c000000", @ANYRES16, @ANYBLOB="010000000000000000001000000030000180060001000a00000006000200110000001400030000000000000000000000000000000001060004001f90"], 0x8c}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$gtp(&(0x7f0000000940), r4) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000980)={0x1c, r5, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24000004}, 0x24040810) bind$inet6(r2, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x2df, &(0x7f0000000f40)={@link_local, @random="ece65fbcee55", @void, {@ipv6={0x86dd, @tipc_packet={0x8, 0x6, "0c1923", 0x2a9, 0x6, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @empty, {[@fragment={0x8, 0x0, 0x2, 0x0, 0x0, 0x2, 0x65}, @routing={0x29, 0x2, 0x2, 0x9, 0x0, [@private2]}, @srh={0x5e, 0x2, 0x4, 0x1, 0xfc, 0x19a6ae41b5bfa1f7, 0xf, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}]}, @hopopts={0x4, 0x3, '\x00', [@pad1, @pad1, @pad1, @enc_lim={0x4, 0x1, 0x5}, @pad1, @enc_lim={0x4, 0x1, 0x5d}, @jumbo={0xc2, 0x4, 0xba}]}, @hopopts={0x0, 0x8, '\x00', [@ra={0x5, 0x2, 0x7}, @calipso={0x7, 0x28, {0x2, 0x8, 0x4, 0x9, [0xffffffff, 0x1, 0x9, 0x8]}}, @hao={0xc9, 0x10, @mcast1}]}, @dstopts={0x62, 0x27, '\x00', [@pad1, @calipso={0x7, 0x10, {0x1, 0x2, 0x1, 0x0, [0xd90]}}, @jumbo={0xc2, 0x4, 0x8}, @generic={0xb, 0x84, "04c7985865bc730aa40815aa832d09143d1d71743be212817666575d81f53d1b1b3af930cedfca263cdeb2fe9885b3c23fa0c44aba350275821cffecf4aa7d2c88e2942ebdb397edaa694702dee0773ab704374b2c63dd9314c533e055367ef79bfda064ddd6e0bfea62cfb29282aba1b05eeaa275e00d92eff253e00bdd3fd116617686"}, @hao={0xc9, 0x10, @empty}, @pad1, @enc_lim={0x4, 0x1, 0x8}, @pad1, @generic={0x2, 0x80, "d35f000c7d3e08ba8199bda7de1d7c2d6e2c79adeb4b7f488fdce4f18df08a9fe179eca5d06c8ca8936424423a7182b205d7d419cccb208b99e6999e6b72e70eb201121810913ebf2642ee020d5084bce231f66a436676d836dfd6885db67b457e8cf1febc47f2288a2e9acc8512d5c83c6b3674cc828febe9fd86089640b60b"}]}, @hopopts={0x3a, 0x8, '\x00', [@padn={0x1, 0x2, [0x0, 0x0]}, @calipso={0x7, 0x40, {0x3, 0xe, 0x6, 0x7, [0x2, 0x1, 0x1, 0x5, 0x4, 0x2, 0x8]}}]}, @hopopts={0x21, 0x3, '\x00', [@jumbo={0xc2, 0x4, 0x6}, @ra={0x5, 0x2, 0x1}, @pad1, @padn={0x1, 0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}, @hopopts={0x32, 0x5, '\x00', [@calipso={0x7, 0x10, {0x2, 0x2, 0x8, 0x2, [0x0]}}, @padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @pad1, @padn={0x1, 0x1, [0x0]}, @padn={0x1, 0x1, [0x0]}, @enc_lim={0x4, 0x1, 0xd2}, @pad1]}], @payload_conn={{{0x19, 0x0, 0x1, 0x1, 0x1, 0x6, 0x0, 0x2, 0xc0bd, 0x0, 0x0, 0x9, 0x2, 0x0, 0x6, 0x2, 0x1, 0x4e24, 0x4e23}}, [0x0]}}}}}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2}, 0x48) close(r7) ioctl$TUNSETFILTEREBPF(r6, 0x800454e1, &(0x7f0000000000)=r7) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r9 = openat$cgroup_devices(r8, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r9, &(0x7f00000000c0)=ANY=[], 0xa) 2.254472036s ago: executing program 0 (id=7136): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x3}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r5, {0x0, 0x7}, {0x1, 0xb}, {0xffff, 0x4}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x240448a0}, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r6, &(0x7f00000002c0)="05031c00d3fc140000004788031c09102c", 0x11, 0x4, &(0x7f0000000140)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @multicast}, 0x14) 2.129500235s ago: executing program 4 (id=7137): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x854}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x3, 0xc, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x87}, @printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x90000001}, {0x85, 0x0, 0x0, 0x73}}]}, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r1, &(0x7f0000003700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000008100000008000300", @ANYRES32, @ANYBLOB="0100060008021106000000001c003300915d0000ffffffffffff0800000108021100000000000c3558d500fd94b0f3c32d81e353f6b3b35c40f0c6fe72c85c19ff6352fb148fd8b88f94a1dbd97b0387ed350b5d3f8dfe96003b92aef775323895dd2f4f5d1803572677b332f04a2c644b286776501475c66bb409c3a3ad78279faf4a49e4929e3adf60f43daa847e553c18e8bb5e385824541a781dd33b63788a82885eae2b"], 0x44}, 0x1, 0x0, 0x0, 0x20008000}, 0x800) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write(r6, &(0x7f0000000200)="4a00000011007f0314066f9a70932d490675bc59083301", 0x17) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) splice(r8, &(0x7f0000000040)=0xffffffffffffffff, r7, 0x0, 0x800000000ff, 0x0) sendmsg$NL80211_CMD_AUTHENTICATE(r8, &(0x7f0000000580)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000440)=ANY=[@ANYBLOB='lD\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00012abd7000fbdbdf252500000008003500030000000800a0000300000008002201e2020000050018010200000008009f00000000000800270003000000"], 0x44}, 0x1, 0x0, 0x0, 0x4008000}, 0x2810) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="fc000000", @ANYRES16=r5, @ANYBLOB="010000000000000000003900000008000300", @ANYRES32=r9, @ANYBLOB="e0005a80dc0000801400030020380000080003000600000003000800040002004a0002"], 0xfc}, 0x1, 0x0, 0x0, 0x4008821}, 0x8840) sendmsg$NL80211_CMD_DEL_TX_TS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x7c, r3, 0x821, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x7, 0x70}}}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0x8}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xc}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40010) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000300)=ANY=[@ANYBLOB="2400000047000701feffffffffffffff017c0000080001"], 0x24}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) socket$nl_xfrm(0x10, 0x3, 0x6) r10 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000100)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010000000000000000002301000008000300", @ANYRES32=r11, @ANYBLOB="05001f0003"], 0x24}}, 0x0) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r12, &(0x7f0000000200)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r12, 0x0) socket$inet_udp(0x2, 0x2, 0x0) connect$bt_rfcomm(r12, &(0x7f0000000000)={0x1f, @none, 0xff}, 0xa) 1.810688649s ago: executing program 0 (id=7138): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000140)={'erspan0\x00', &(0x7f0000000040)={'erspan0\x00', 0x0, 0x7, 0x8000, 0x3, 0x8, {{0xd, 0x4, 0x1, 0x3a, 0x34, 0x66, 0x0, 0xf, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x37}, {[@cipso={0x86, 0x1e, 0x4, [{0x6, 0x9, "76294bfb4f71f2"}, {0x5, 0x6, "91b8d0d3"}, {0x5, 0x7, "e14ddf5bda"}, {0x6, 0x2}]}]}}}}}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x80, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xb, 0xfff7}, {0xfff1, 0xffff}, {0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4c, 0x2, [@TCA_MATCHALL_ACT={0x48, 0x2, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x0, 0x3}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x80}}, 0x0) write$tun(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="034886dd0100000000001400"], 0xfdef) 1.748928398s ago: executing program 1 (id=7140): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="c4000000190001000030000000004000e00000020000000000000000000000000000000000000000000000000000000000000000000000000a00000087000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000053260e130000000000000000000000fbfffffffff5ffff00000000001b00000000000000000000000000000000000200000000000000b9120000000000000000000000000000000c001500283a6b304c"], 0xc4}, 0x1, 0x0, 0x0, 0x40100}, 0x2c000010) socket$nl_xfrm(0x10, 0x3, 0x6) 1.493361585s ago: executing program 6 (id=7142): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="18000000030000000000000026d0000095002b000000000093adff012255f674412d02000000880b5f04596a5e99fce658be2f200c699223886d8be4b50000005ab527ee3697f98125f30e6326996a3cfee33025a30b45bdcf2c69d105e5e55a1d273683623f1a5dc6e3c7e20eb7a98ecf3bd2cf898e924abe26ac296f660e69ba982fd76e00dcff7f0000ca6b78ad833488cfe4109eaf009eddcf21f5c63cde2f00150200000001000000520a0000151d010000000100bf00000000cc587424363da52001a3cdf2000000db74596fd72c002a60c1bc7dc8c38b7d2e13c50424b9dd1145d03ff45f70685c6bd9ff41c69b7de406e89dcbb7677e65a88a8407a9e7f9c0e91028b0856eb1ed9474480737a55ebb0bd701f7fb21135c6172eba7eb8a341f07e5a2d1e88b3cfc22df01e4bac9d97328fa2a82b5e8741e02056d93a433f50479387467824262852c7939db5672d07cdbe8e14abf56497e5d56dbe37551b870b2851c3f0a1a9ebfcba105a6ccdd01b0f04edb256c0200000073f6db43661bd7f0e2536ffbfe5ca31b4083145531458b7d1e341c6b351ebc5223f54d6bec93f4ef088e5d1be2515226988d664709ff03f1aa3dc7f1580ace9bf2afd28d0700000000000000d6eb372713255012e028cb2654d493a0b43bf21375709f348f5eda2967199cc936859a538100070000000000dc10e13ef227f627a40000ad1fa253d33fa74f172d3407ae4e1e347c0c6ef9dd2b6bb700000000000000000c586272c3f4d79bc36315745cb149f3cb385e6add14652003c7cdd3324f07d134d3a6c718bbd1aafe1140cff0be4c6f8df084c5e9734ae30aa9af030025f01ab03a9b1074407136bc506031f0916a39d3057d55183612b39e73ae8e6dc30356886a831836469e2051d937eb85f3f2d5ae2c1dca476b97419a3b76ed62409d004d7fbe362145d19605d760df4c5124ca325d374b371867a79b35c6617fc3327191fbf514573f0e30d1d60be2168fffc2f3dccd599a2cb77f124e22f87673675805494db821f39b50d938d5fd8c6b2a3a324c257bc9110971b749ccd74089ed6b86f81ca3ba47d8f71d290ed1b1a11f7a67125170c88c3b6a50692cc0064fc6bbd312536ac15016c85c6332226401b110da9c786eeca22debc99335587b54c13c3107008fa069af8223b38ced735c2d906551004d8dc10d88738488da01ffa4add56474573c964a270000f2f16625c0c10200000000c7a5ca60fdad159f2e44171f39638410020000004825d081f2d987f05c534187738655d7dc958f2046fa0c1619a6554b82d9c162eb61ca74f1ffdaccf0ea5f06e0fca8b27ff3983ab74fd3d560700a1fab44e77e312b3b129e000302d613916c9bcf9f0000fac73a5b6bfb27f88dba816020be760f7b45e001efada8000000000000fdaf4660402f7b3b79a433e08074ea2462974a00040000eb01352638f56dae0249d15ba8767259658878b7492cfbacde9b57cf4de00788adce638190f3570e0b4c80ef682df22201270955afb6008846557ee3bc09fda6dbb6550d597300eb82a184c96ffde5a30e5433e866665b98ca2002c804c22ff2634b7bfbf5c0d586cda5b45fd00dede1e88a4d41dee7cc76d7a23d06acb1d2d4c58faea84158bb440df2a694f4cdcaa4f65c22efffffffffffdd00000000d503d79986958115ae07b70f991430b7fb475d77b869ee02000000000000000000001ffff0ef89b2a68d2b05c995445d8a7700bcdfbec74fb2dd163e863315e84498dfb52bb93f6c9084659ce777ddac563c8596c2b1d8180289a61faa95a82bf1cfb7f2fd7252e9322abe282c33445d443a67467893b9bf0d1c8130ae6b226900000635376413c29f7c6f7b7e29b9a0c64e68328661f0c06e21f7d7dc22174ea4447a6f60edef3a4168d40200fbc71104512efe8e5d7d934aa289b4bd2b870000000000000000000007000000002000000000009b777883a02f0593dfc4cb4114b9f9cf4ad155110cc6ace2b322ac31bfa27847c799c8009a1ea5b98e525e6383ad7fd9795170e7b11e247603c2ff49a11459c7f606d729d3979676bffb3049166bb84a0f061991bd57c2566c10c282352aba05b6164ef876915a3f2491e4793e590dcc71de10da96366c1e992c0068c940dd4422c9882d3aa0f8a797b8fea6efcfb5276b7679f15559edaa977504cc0b2f777acb907ebf5fc14add71d0bca37405ded69b77ab4a3d7487fd04000000de17e1e13b93669b79556abb722d9c085b189b5fd1f30e8dc813f608830b110001732135e8e7262f290000923bfb6b41ff3792cee2fc37eee739c3e36a4bc80112968ec0d8902eced1fe552018014a463abbbf7ccd6a92a5734e3ebfca9b6e88e031f31de2183652e77c164c646a1cfd3710aa4205d8d4d4f974133ccb1e49feb42664eccd809c0ba8917eda87489e8946d5c8156197bcb66fd5606c63e3389ee9e8552381646365066ef9a36a449c96485c22ad1aa423b7b89efbc6cd54000bb0ea5f4f1e8773144fb6ac9a44d43593d77e66aa7ed7f3d4e7b211590c738888d02b2dbb0b2ba73ec72e1d8d7360a128499dd19e1e7b9b0671f4f58515b45ecb9964f3c4ddb8234391d514f8d996d8d6dd7f8fadfee2d7a0035638ce27c2936cb04b30a0eb0cde0000000000000040000000ec3c12ecee8fc3a40000000000000000e215b00ce2570b930723cbadb4033d1b8aaa2cfb3fb89e4a6e89737fd6232218a9e0c099d1eb59d60b3cca089785642f327139bc4394fb6d547a9b3c22599e780c1da7433fb47615d372e3fffe9703e37d5c87d513165278650738efcc04d27b766cf7f60066edd292f6c8a2174f391ed164bb1816819ceb3e378e776d422bc946cd9501accebeac3a5b31d8abc68ae537cd44a04e6bc21c35a7beab2610c51e593676bf635a20f597f4631b91454d182f826071f5210bd6d93173589929b23801e63c2266fde13b5a04b8d48be057c752bc415a756ea9b4d34156c4f73dd5e5924ef101a5fcdaf37c7ba2c4a9de9b000000000000000000000000000000a73b862e4b63c245616b522345587d0ee65a6902bdd0abd941e8aba37510b222ae544f395edd1b92ad53fc68f08ea00edc5e10d768836169dd296d56b306e8b75778c37571792a6c3d8b02ef378ebd59422cdd008bef6f80a80a68641ea5ed4f1126bb676098c10bf663eb3fb8c839364d28fd046dc64b35f9c3397ce6f4ad357b0000000000090000000088c7a8e2638f650a6f04a6f33a090f59414d6ebcbc687e66d600000000bd0a58ea6d36fc2cf9b9a71c137a2a22adb1006f371d4faf47285fd66fe0389afb96854bb360edcdf11b4ff6dd578bba93e949d240cde9b5836cb46032484dc19c93db7b6e5afa10547c78e76a3111557346e52566df196fd630561bb908fff4d2e19562aabd43742a26a43799f8636fa04ceb40c9e4ca1cfbbc7b949cd245a3ee118fd0d4f639444539af8766028d4ac4d4c548e290199e0dacbb4f6796b39bf32934d941ba2f88e3ebd0cf8e24f99eca86e4ca9b2cd2b54044a7fc4631572a6378a32df288785f146275c1f548e2a0c1016744e05f9de5044373d7650125027547eefe7b2d8c8871bb65395fae99d8456883705bfdfb00001854b2e5efa8aaf25827d659f592b1575281ec125de7fb91cd81d91dcb19f5cdf1e1e2b4a8a1389753a09110538689e38e07fb2dc72bd4fd11d7bc16aac5d85c6101bb722895248e463a5fb45ce0e564e90cb19d5993b471687ae4165e29cf2f58082115f5f8569896eedfd798733223e6d6584997510c374912ab798bd4af4654c01bb2c411bc36468ddd62b4eba5cfc8953526e0e5b1359797956152d0098ce47c62c3fe5a23219389622b7f65bf03527d25c3941b9cf1ffeedf6d99082bb57ea871c12213cc40900f83033bc18c529171fae324c315bc6ce358831d0230412212acfd5fc8d5cb0d028cf568e8bb40e27befe2ff01f7c6674a4d86d900633ea36641e0a781ea0ea7f2d928b8b22e2f97dd13348927375baea6863bef4acf4299096ada5cdd2a0eaafaa760a79d102d1e0c0000000000000000007926653b8d79ce16a432f124786a0bc3c5b7d196822492ae1ccf91aeac16406ad6f9cd3d96d57fceba8360ae49f73351814c9c2972f11064aaf3739d9100f9c0e4d0cb17d50c82e305ba7d62cf1cc6da26e34982a8c74dd8122cf5b5e7c34fd2712a0cef05e4d8ec7dd363219676bd9b19943185b132eb35a695e208dfa5cecdb1d6425c8879063c0f11bd64291a4209ee6dc1d9e9010013f6148c603e6a335e298efd6ab5cccc47a2c568c6afec54f8251bd840752addf200371361c9eedf05ed98585cf6d99e9e56055064bda2d373369761238c278147cd0eb7799f6b9c9fcaa3fd282154994f5b25420c86db9b6401e885de1c615a719a1c83e8fbbb181282dbaf3313a4e4a4877e9f37607e2cd6da0cf6371ec06a75f5a4206b2418ad8897ae149085d63f01f22eca44033234b3930b4d5da756669a1d59d69e7de54abf439988ed7ec33c2d0a901bb0985a24878984d8a4340fa9a356d100926fb5f2ef9976366a61b8cc2bcb1c072b0e9c564852388e1edff10d75b3832792e471cc15b40380f94d834243080158603fbc9134d6983c540525447478984611c0d9666941bfc0a30db47a8828b6e5c51aee2094599b4ce52795750e1764f1657ca8c5633c71287239dddf5c651496f7bbd148c937f083d2e4e0197dbc6ff0649c749707b17399b1d7efad23abb8b40b38704737e15662ae4913a4a001cd3b71c7af75b5ffad9780650c800a40ca80ddc41987919142fd28dbf22db5f4c435415a03455e1d55d1783ccef97d7e4655cf839d06f06e137bbe462a03b3100231914b19739dd57b4f12d026ad"], &(0x7f00002bf000)='GPL\x00', 0x4, 0xb7, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) r2 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000180)={r0, r1}) sendmmsg$inet(r2, &(0x7f00000028c0)=[{{0x0, 0x0, &(0x7f0000001300)=[{0x0}, {&(0x7f0000000400)="03362a247861461b950daf81800a038f1ee4d89769187dcd3a5f3b23aaab61614df7ed7e9300c2cbd640ee12e7d98ef42c23e9f77543d8561a06ae5dca898dbcf6c4696e3a49a32599699c258a5766784886810a9a80505a31031800d541c3057f00f988f68cac40b9ff64906e2a4d611b85625dcc2e6ea9891e12", 0x7b}], 0x2}}], 0x1, 0x0) close(r2) 1.492970608s ago: executing program 3 (id=7143): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x1c, r1, 0x400, 0x70bd26, 0x25dfdbfd, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000080}, 0x14) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000400)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f0000000140)=0x1832, 0x4) sendto$inet(r2, &(0x7f0000000540)='v', 0x1, 0x4040, 0x0, 0x0) recvmsg(r2, &(0x7f0000002780)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=""/37, 0x25}, 0x40002041) 1.357191982s ago: executing program 4 (id=7144): r0 = socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$pppl2tp_PPPOL2TP_SO_SENDSEQ(r0, 0x111, 0x3, 0x0, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2}, 0x94) unshare(0x24020400) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000480), r5) (async) r6 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000480), r5) sendmsg$NLBL_CIPSOV4_C_REMOVE(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000340)={0x1c, r6, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_DOI={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x90) (async) sendmsg$NLBL_CIPSOV4_C_REMOVE(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000340)={0x1c, r6, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_DOI={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x90) socket$netlink(0x10, 0x3, 0xc) (async) r7 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r7, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x34, 0x10, 0x801, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1001}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r3}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0) (async) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x34, 0x10, 0x801, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1001}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r3}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000001c0)=0x0) r11 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r12) ioctl$IOCTL_GET_NCIDEV_IDX(r11, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r12, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r13, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r14], 0x1c}}, 0x4008054) sendmsg$NFC_CMD_DISABLE_SE(r5, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x2c, 0x0, 0x300, 0x70bd26, 0x25dfdbff, {}, [@NFC_ATTR_SE_INDEX={0x8, 0x15, 0x2}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r10}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r14}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040004}, 0x20008000) 1.255989065s ago: executing program 3 (id=7145): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000100)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000023010000", @ANYRES32=r2, @ANYBLOB="05001f0003"], 0x24}}, 0x0) 1.255721141s ago: executing program 1 (id=7146): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x6, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="180200000400000000000000fcffff0185000000bc0000001801000020646c2400000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000f000000850000000600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xe, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x11, 0x6000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 1.155625078s ago: executing program 0 (id=7147): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x854}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x3, 0xc, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x87}, @printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x90000001}, {0x85, 0x0, 0x0, 0x73}}]}, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r1, &(0x7f0000003700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000008100000008000300", @ANYRES32=r3, @ANYBLOB="0100060008021106000000001c003300915d0000ffffffffffff0800000108021100000000000c3558d500fd94b0f3c32d81e353f6b3b35c40f0c6fe72c85c19ff6352fb148fd8b88f94a1dbd97b0387ed350b5d3f8dfe96003b92aef775323895dd2f4f5d1803572677b332f04a2c644b286776501475c66bb409c3a3ad78279faf4a49e4929e3adf60f43daa847e553c18e8bb5e385824541a781dd33b63788a82885eae2b"], 0x44}, 0x1, 0x0, 0x0, 0x20008000}, 0x800) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write(r6, &(0x7f0000000200)="4a00000011007f0314066f9a70932d490675bc59083301", 0x17) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) splice(r8, &(0x7f0000000040)=0xffffffffffffffff, r7, 0x0, 0x800000000ff, 0x0) sendmsg$NL80211_CMD_AUTHENTICATE(r8, &(0x7f0000000580)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000440)=ANY=[@ANYBLOB='lD\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00012abd7000fbdbdf252500000008003500030000000800a0000300000008002201e2020000050018010200000008009f00000000000800270003000000"], 0x44}, 0x1, 0x0, 0x0, 0x4008000}, 0x2810) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="fc000000", @ANYRES16=r5, @ANYBLOB="010000000000000000003900000008000300", @ANYRES32=r9, @ANYBLOB="e0005a80dc0000801400030020380000080003000600000003000800040002004a0002"], 0xfc}, 0x1, 0x0, 0x0, 0x4008821}, 0x8840) sendmsg$NL80211_CMD_DEL_TX_TS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x7c, 0x0, 0x821, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x7, 0x70}}}}, [@NL80211_ATTR_TSID={0x5, 0xd2, 0x8}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xc}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40010) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000300)=ANY=[@ANYBLOB="2400000047000701feffffffffffffff017c0000080001"], 0x24}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) socket$nl_xfrm(0x10, 0x3, 0x6) r10 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000100)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010000000000000000002301000008000300", @ANYRES32=r11, @ANYBLOB="05001f0003"], 0x24}}, 0x0) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r12, &(0x7f0000000200)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r12, 0x0) socket$inet_udp(0x2, 0x2, 0x0) connect$bt_rfcomm(r12, &(0x7f0000000000)={0x1f, @none, 0xff}, 0xa) 910.632172ms ago: executing program 3 (id=7148): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}}, 0x0) recvmmsg(r0, &(0x7f0000008d80)=[{{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, 0x0}, 0xfffffffd}], 0x3, 0x0, 0x0) 864.270852ms ago: executing program 1 (id=7149): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000300)="060000000300ff9700", 0x9) 762.387875ms ago: executing program 1 (id=7150): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x24, 0x14, 0x1, 0x0, 0x0, {0x2c}, [@INET_DIAG_REQ_BYTECODE={0xd, 0x1, "ad2d1ed3e814f3d0f6"}]}, 0x24}, 0x1, 0x0, 0x0, 0xc004}, 0x0) clock_gettime(0x6, &(0x7f0000000340)) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x34, 0x4, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x24000880}, 0x40) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000300)={@local, 0x8000000, 0x0, 0xff, 0x3, 0x0, 0x2}, 0x20) r3 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_sctp_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f0000000540), &(0x7f0000000580)=0x8) sendmsg$IPVS_CMD_NEW_DEST(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB="8c000000", @ANYRES16, @ANYBLOB="010000000000000000001000000030000180060001000a00000006000200110000001400030000000000000000000000000000000001060004001f90"], 0x8c}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$gtp(&(0x7f0000000940), r4) sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000980)={0x1c, r5, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24000004}, 0x24040810) bind$inet6(r2, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x2df, &(0x7f0000000f40)={@link_local, @random="ece65fbcee55", @void, {@ipv6={0x86dd, @tipc_packet={0x8, 0x6, "0c1923", 0x2a9, 0x6, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @empty, {[@fragment={0x8, 0x0, 0x2, 0x0, 0x0, 0x2, 0x65}, @routing={0x29, 0x2, 0x2, 0x9, 0x0, [@private2]}, @srh={0x5e, 0x2, 0x4, 0x1, 0xfc, 0x19a6ae41b5bfa1f7, 0xf, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}]}, @hopopts={0x4, 0x3, '\x00', [@pad1, @pad1, @pad1, @enc_lim={0x4, 0x1, 0x5}, @pad1, @enc_lim={0x4, 0x1, 0x5d}, @jumbo={0xc2, 0x4, 0xba}]}, @hopopts={0x0, 0x8, '\x00', [@ra={0x5, 0x2, 0x7}, @calipso={0x7, 0x28, {0x2, 0x8, 0x4, 0x9, [0xffffffff, 0x1, 0x9, 0x8]}}, @hao={0xc9, 0x10, @mcast1}]}, @dstopts={0x62, 0x27, '\x00', [@pad1, @calipso={0x7, 0x10, {0x1, 0x2, 0x1, 0x0, [0xd90]}}, @jumbo={0xc2, 0x4, 0x8}, @generic={0xb, 0x84, "04c7985865bc730aa40815aa832d09143d1d71743be212817666575d81f53d1b1b3af930cedfca263cdeb2fe9885b3c23fa0c44aba350275821cffecf4aa7d2c88e2942ebdb397edaa694702dee0773ab704374b2c63dd9314c533e055367ef79bfda064ddd6e0bfea62cfb29282aba1b05eeaa275e00d92eff253e00bdd3fd116617686"}, @hao={0xc9, 0x10, @empty}, @pad1, @enc_lim={0x4, 0x1, 0x8}, @pad1, @generic={0x2, 0x80, "d35f000c7d3e08ba8199bda7de1d7c2d6e2c79adeb4b7f488fdce4f18df08a9fe179eca5d06c8ca8936424423a7182b205d7d419cccb208b99e6999e6b72e70eb201121810913ebf2642ee020d5084bce231f66a436676d836dfd6885db67b457e8cf1febc47f2288a2e9acc8512d5c83c6b3674cc828febe9fd86089640b60b"}]}, @hopopts={0x3a, 0x8, '\x00', [@padn={0x1, 0x2, [0x0, 0x0]}, @calipso={0x7, 0x40, {0x3, 0xe, 0x6, 0x7, [0x2, 0x1, 0x1, 0x5, 0x4, 0x2, 0x8]}}]}, @hopopts={0x21, 0x3, '\x00', [@jumbo={0xc2, 0x4, 0x6}, @ra={0x5, 0x2, 0x1}, @pad1, @padn={0x1, 0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}, @hopopts={0x32, 0x5, '\x00', [@calipso={0x7, 0x10, {0x2, 0x2, 0x8, 0x2, [0x0]}}, @padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @pad1, @padn={0x1, 0x1, [0x0]}, @padn={0x1, 0x1, [0x0]}, @enc_lim={0x4, 0x1, 0xd2}, @pad1]}], @payload_conn={{{0x19, 0x0, 0x1, 0x1, 0x1, 0x6, 0x0, 0x2, 0xc0bd, 0x0, 0x0, 0x9, 0x2, 0x0, 0x6, 0x2, 0x1, 0x4e24, 0x4e23}}, [0x0]}}}}}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x2}, 0x48) close(r7) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r9 = openat$cgroup_devices(r8, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r9, &(0x7f00000000c0)=ANY=[], 0xa) 662.447929ms ago: executing program 3 (id=7151): r0 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e1f, 0x2, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x5}, 0x1c) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000200)=@nat={'nat\x00', 0x19, 0x0, 0x90, [0x200000000100, 0x0, 0x100000000000000, 0x200000000130, 0x200000000160], 0x0, 0x0, &(0x7f0000000100)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}]}, 0x108) 560.000624ms ago: executing program 6 (id=7152): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1f, 0x5, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000007d00000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="640000001000ffff25bd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="7b8a050000000000440012800b000100697036746e6c000034000280", @ANYRES32=r1, @ANYBLOB="142003000000020000000000000000000000003414000200fe88"], 0x64}, 0x1, 0x0, 0x0, 0x20008000}, 0x24008010) 395.550985ms ago: executing program 3 (id=7153): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x5, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000fd3f00000000000009000000850000002e000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0xfe79, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x4c) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000080)=ANY=[@ANYRES32=r1, @ANYRESOCT=r1], 0xfe50) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x88, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x5c, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x4f}, @NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0x37}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x2}]}}}, {0x24, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TPROXY_REG_ADDR={0x8, 0x2, 0x1, 0x0, 0xf}, @NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0xa}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELFLOWTABLE={0x14, 0x18, 0xa, 0x301, 0x0, 0x0, {0x5, 0x0, 0xa}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xc4}, 0x1, 0x0, 0x0, 0x40}, 0x24000840) r3 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r3, 0x28, 0x8, &(0x7f0000000040)=0xffffffffffffffff, 0x57) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000fd3f000000000000090000008500000075000000850000001100000095"], &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) 395.259919ms ago: executing program 6 (id=7154): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf2501"], 0x18}}, 0x0) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}, 0x7}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x1100}, 0x8}, {{0x0, 0x0, 0x0}, 0x1}], 0x4, 0x0, 0x0) 340.580741ms ago: executing program 6 (id=7155): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="44000000100001060000000000000000000000000000000001000000010000000e00030076736f636b6d6f6e30000000140012800d00010076736f636b6d6f6e"], 0x44}}, 0x0) 288.899698ms ago: executing program 6 (id=7156): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) ioctl$int_in(r0, 0x5421, &(0x7f0000000100)=0x9) connect$inet(r0, &(0x7f0000000e80)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1}}, 0x10) close(r0) 206.263515ms ago: executing program 6 (id=7157): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000140)={'erspan0\x00', &(0x7f0000000040)={'erspan0\x00', 0x0, 0x7, 0x8000, 0x3, 0x8, {{0xd, 0x4, 0x1, 0x3a, 0x34, 0x66, 0x0, 0xf, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x37}, {[@cipso={0x86, 0x1e, 0x4, [{0x6, 0x9, "76294bfb4f71f2"}, {0x5, 0x6, "91b8d0d3"}, {0x5, 0x7, "e14ddf5bda"}, {0x6, 0x2}]}]}}}}}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x80, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xb, 0xfff7}, {0xfff1, 0xffff}, {0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4c, 0x2, [@TCA_MATCHALL_ACT={0x48, 0x2, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x0, 0x3}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x80}}, 0x0) write$tun(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="034886dd0100000000001400"], 0xfdef) 0s ago: executing program 3 (id=7158): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) ioctl$int_in(r0, 0x5421, &(0x7f0000000100)=0x9) connect$inet(r0, &(0x7f0000000e80)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1}}, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x1c, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000218110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4c000000000105000d0000000000000002000102240002801400018008000100e000000108000200e00000010c00028005000100000000000c000f800800014000000200080008"], 0x4c}}, 0x0) r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0xb0, r3, 0x10, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_MLSCATLST={0x38, 0xc, 0x0, 0x1, [{0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x90f3}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3694}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x32052908}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1b3746f6}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x497d4380}]}]}, @NLBL_CIPSOV4_A_TAGLST={0x44, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x3}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0xe}, {0x5, 0x3, 0x2}, {0x5}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x2}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xffffffffffffffff}, @NLBL_CIPSOV4_A_MLSCATLST={0x10, 0xc, 0x0, 0x1, [{0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x248ae54e}]}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x800}, 0x40) close(r0) kernel console output (not intermixed with test programs): ): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1391.524378][T24135] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 1391.769849][T28879] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1391.769871][T28879] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1391.801750][T15221] tipc: Node number set to 8432298 [ 1391.807716][T24138] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 1391.844734][ T38] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1391.893253][T17162] block nbd65: Receive control failed (result -32) [ 1391.901124][ T53] block nbd65: Receive control failed (result -32) [ 1391.921050][T24152] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 1392.024629][ T38] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 1392.304483][T29092] netlink: 20 bytes leftover after parsing attributes in process `syz.6.6281'. [ 1392.369445][T28879] bond0: (slave netdevsim1): Releasing backup interface [ 1392.490580][T28879] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1392.490616][T28879] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1392.605358][T24135] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 1392.781452][T29122] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6282'. [ 1392.969873][T28879] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1392.969907][T28879] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1393.606803][T24137] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 1393.607731][T29133] netlink: NAT attribute type 5 has unexpected length (0 != 2) [ 1393.607769][T29133] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1393.756591][ T38] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 1393.857773][T29138] netlink: 'syz.1.6288': attribute type 1 has an invalid length. [ 1393.991418][T29142] netlink: 72 bytes leftover after parsing attributes in process `syz.0.6287'. [ 1394.019445][T29138] bond3: entered promiscuous mode [ 1394.019994][T29138] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1394.131584][T29140] ipvlan2: entered allmulticast mode [ 1394.131606][T29140] bond3: entered allmulticast mode [ 1394.131860][T29140] bond3: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1394.131924][T29140] bond3: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 1394.131940][T29140] bond3: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 1394.133611][T29140] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 1394.364189][ T38] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 1394.465516][T28879] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1394.485546][T28879] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1394.488300][T28879] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1394.493328][T28879] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1394.525044][T28879] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1394.579963][T28879] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1394.582517][T28879] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1394.627260][T28879] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1394.635161][T24152] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 1394.934338][T24138] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 1395.043871][T24138] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 1395.317238][T24135] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 1395.426035][T24138] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 1395.540256][T28879] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1395.638619][T28879] 8021q: adding VLAN 0 to HW filter on device team0 [ 1395.713369][ T38] bridge0: port 1(bridge_slave_0) entered blocking state [ 1395.713481][ T38] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1395.775921][ T38] bridge0: port 2(bridge_slave_1) entered blocking state [ 1395.776051][ T38] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1395.981558][T29188] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6299'. [ 1396.632329][T29198] syzkaller0: entered promiscuous mode [ 1396.632515][T29198] syzkaller0: entered allmulticast mode [ 1397.019353][T29205] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6303'. [ 1397.292310][ T53] block nbd66: Receive control failed (result -32) [ 1397.314725][T17162] block nbd66: Receive control failed (result -32) [ 1397.888132][T29220] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6307'. [ 1398.243171][T29226] netlink: 988 bytes leftover after parsing attributes in process `syz.1.6308'. [ 1398.291871][T28879] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1398.657891][T29233] xt_TCPMSS: Only works on TCP SYN packets [ 1398.744549][T24152] net_ratelimit: 18 callbacks suppressed [ 1398.744570][T24152] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 1398.875257][T24135] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 1399.066020][T24147] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 1399.176658][T24135] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 1399.304571][T24152] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 1399.339143][T29244] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6314'. [ 1399.343254][T29246] netlink: 36 bytes leftover after parsing attributes in process `syz.6.6315'. [ 1399.407716][T29246] syzkaller1: entered promiscuous mode [ 1399.407739][T29246] syzkaller1: entered allmulticast mode [ 1399.422460][T24135] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 1399.557932][ T38] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 1399.562230][T29244] syzkaller0: entered promiscuous mode [ 1399.562251][T29244] syzkaller0: entered allmulticast mode [ 1403.159851][T29277] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1403.180884][ T38] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 1403.265115][T28879] veth0_vlan: entered promiscuous mode [ 1403.285394][T24152] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 1403.332185][T29288] netlink: 32 bytes leftover after parsing attributes in process `syz.1.6324'. [ 1403.332847][T28879] veth1_vlan: entered promiscuous mode [ 1403.357862][T29287] netlink: 'syz.3.6325': attribute type 3 has an invalid length. [ 1403.357881][T29287] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6325'. [ 1403.456344][T29288] netlink: 72 bytes leftover after parsing attributes in process `syz.1.6324'. [ 1403.456368][T29288] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6324'. [ 1403.456381][T29288] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6324'. [ 1403.648241][T29287] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6325'. [ 1403.648299][T29287] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6325'. [ 1403.680793][T29287] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6325'. [ 1403.681107][T29287] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6325'. [ 1404.026641][T28879] veth0_macvtap: entered promiscuous mode [ 1404.047936][T29287] syzkaller1: entered promiscuous mode [ 1404.047960][T29287] syzkaller1: entered allmulticast mode [ 1404.243624][T28879] veth1_macvtap: entered promiscuous mode [ 1404.337019][ T38] net_ratelimit: 1 callbacks suppressed [ 1404.337041][ T38] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 1404.534544][T24143] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 1404.624966][T28879] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1404.645724][T24135] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 1404.670329][T28879] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1404.725045][T29306] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6329'. [ 1404.755798][T24143] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1404.756365][ T38] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 1404.865924][T24143] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 1404.865993][T24143] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1404.954301][T29311] openvswitch: netlink: IPv4 frag type 228 is out of range max 2 [ 1404.955788][T29319] openvswitch: netlink: IPv4 frag type 228 is out of range max 2 [ 1405.405554][T24138] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1405.405612][T24138] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 1405.645880][T24137] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1405.645946][T24137] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 1406.224162][T24143] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1406.224183][T24143] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1406.363431][T29342] syzkaller0: entered promiscuous mode [ 1406.363466][T29342] syzkaller0: entered allmulticast mode [ 1406.427288][T24147] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1406.427309][T24147] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1407.714148][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1412.102631][T24147] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 1412.129334][T29365] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 1412.223973][T24147] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 1412.334497][T24147] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 1412.428917][T29378] __nla_validate_parse: 1 callbacks suppressed [ 1412.428936][T29378] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6346'. [ 1412.429223][T29378] FAULT_INJECTION: forcing a failure. [ 1412.429223][T29378] name failslab, interval 1, probability 0, space 0, times 0 [ 1412.429249][T29378] CPU: 0 UID: 0 PID: 29378 Comm: syz.1.6346 Not tainted syzkaller #0 PREEMPT(full) [ 1412.429271][T29378] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1412.429283][T29378] Call Trace: [ 1412.429291][T29378] [ 1412.429300][T29378] dump_stack_lvl+0xe8/0x150 [ 1412.429331][T29378] should_fail_ex+0x410/0x560 [ 1412.429358][T29378] should_failslab+0xa8/0x100 [ 1412.429384][T29378] __kmalloc_cache_node_noprof+0xaa/0x620 [ 1412.429407][T29378] ? sbitmap_queue_init_node+0x1dc/0x4d0 [ 1412.429433][T29378] ? sbitmap_queue_init_node+0x1dc/0x4d0 [ 1412.429467][T29378] sbitmap_queue_init_node+0x1dc/0x4d0 [ 1412.429497][T29378] blk_mq_init_tags+0x15c/0x2d0 [ 1412.429531][T29378] blk_mq_alloc_map_and_rqs+0xbc/0x980 [ 1412.429555][T29378] ? kfree+0x1c5/0x650 [ 1412.429579][T29378] ? blk_mq_map_queues+0x3ea/0x490 [ 1412.429606][T29378] ? blk_mq_map_queues+0x3ea/0x490 [ 1412.429633][T29378] blk_mq_alloc_set_map_and_rqs+0x1a0/0x810 [ 1412.429674][T29378] blk_mq_alloc_tag_set+0x8e5/0x1000 [ 1412.429713][T29378] nbd_dev_add+0x30e/0xb60 [ 1412.429738][T29378] ? __pfx_nbd_dev_add+0x10/0x10 [ 1412.429778][T29378] ? __pfx_nbd_genl_foreach_sock+0x10/0x10 [ 1412.429799][T29378] ? security_capable+0x7e/0x2c0 [ 1412.429829][T29378] nbd_genl_connect+0x96c/0x1cd0 [ 1412.429864][T29378] ? __pfx_nbd_genl_connect+0x10/0x10 [ 1412.429888][T29378] ? rcu_is_watching+0x16/0xb0 [ 1412.429910][T29378] ? trace_kmalloc+0x2a/0xf0 [ 1412.429941][T29378] ? __kmalloc_noprof+0x38c/0x720 [ 1412.429972][T29378] ? __nla_parse+0x40/0x60 [ 1412.430001][T29378] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 1412.430035][T29378] genl_family_rcv_msg_doit+0x233/0x340 [ 1412.430066][T29378] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1412.430102][T29378] ? __lock_acquire+0x747/0x2de0 [ 1412.430132][T29378] genl_rcv_msg+0x614/0x7a0 [ 1412.430162][T29378] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1412.430185][T29378] ? __pfx_nbd_genl_connect+0x10/0x10 [ 1412.430219][T29378] netlink_rcv_skb+0x226/0x4a0 [ 1412.430250][T29378] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1412.430275][T29378] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1412.430320][T29378] ? down_read+0x2be/0x330 [ 1412.430352][T29378] genl_rcv+0x28/0x40 [ 1412.430373][T29378] netlink_unicast+0x7bd/0x940 [ 1412.430411][T29378] netlink_sendmsg+0x813/0xb40 [ 1412.430441][T29378] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1412.430469][T29378] ? apparmor_socket_sendmsg+0x98/0x360 [ 1412.430494][T29378] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1412.430512][T29378] sock_sendmsg_nosec+0x14e/0x190 [ 1412.430544][T29378] ____sys_sendmsg+0x54e/0x850 [ 1412.430574][T29378] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1412.430609][T29378] ? import_iovec+0x73/0xa0 [ 1412.430637][T29378] ___sys_sendmsg+0x2a5/0x360 [ 1412.430660][T29378] ? __lock_acquire+0x747/0x2de0 [ 1412.430684][T29378] ? __pfx____sys_sendmsg+0x10/0x10 [ 1412.430746][T29378] ? __fget_files+0x2a/0x420 [ 1412.430770][T29378] ? __fget_files+0x3a2/0x420 [ 1412.430806][T29378] __x64_sys_sendmsg+0x1b1/0x290 [ 1412.430834][T29378] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1412.430887][T29378] do_syscall_64+0x166/0x520 [ 1412.430912][T29378] ? trace_irq_disable+0x3b/0x140 [ 1412.430930][T29378] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1412.430950][T29378] ? clear_bhb_loop+0x70/0xc0 [ 1412.430974][T29378] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1412.430993][T29378] RIP: 0033:0x7f4b6239e159 [ 1412.431011][T29378] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1412.431026][T29378] RSP: 002b:00007f4b63207028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1412.431047][T29378] RAX: ffffffffffffffda RBX: 00007f4b62625fa0 RCX: 00007f4b6239e159 [ 1412.431061][T29378] RDX: 0000000000004000 RSI: 00002000000027c0 RDI: 0000000000000006 [ 1412.431074][T29378] RBP: 00007f4b63207090 R08: 0000000000000000 R09: 0000000000000000 [ 1412.431087][T29378] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1412.431099][T29378] R13: 00007f4b62626038 R14: 00007f4b62625fa0 R15: 00007ffd1ec486a8 [ 1412.431132][T29378] [ 1412.445092][T29378] blk-mq: reduced tag depth (128 -> 64) [ 1412.455080][T24147] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 1412.522564][T29384] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6347'. [ 1412.555089][T24152] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 1412.600618][T29378] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6346'. [ 1412.674448][T24152] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 1412.787692][T24137] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 1412.891450][T24152] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 1413.015990][T24152] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 1413.175521][T24152] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 1413.443559][T29406] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6351'. [ 1413.562031][T29405] netlink: 'syz.1.6352': attribute type 1 has an invalid length. [ 1413.562055][T29405] netlink: 244 bytes leftover after parsing attributes in process `syz.1.6352'. [ 1414.210420][T29418] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6356'. [ 1414.558162][T29423] syzkaller0: entered promiscuous mode [ 1414.558188][T29423] syzkaller0: entered allmulticast mode [ 1420.371565][T29447] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6366'. [ 1420.371684][T29447] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6366'. [ 1420.484516][ T38] net_ratelimit: 10 callbacks suppressed [ 1420.484538][ T38] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 1420.597076][T24152] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 1420.704867][T24152] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 1420.869451][T24137] IPVS: starting estimator thread 0... [ 1420.883811][T24137] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 1420.964735][T29485] IPVS: using max 31 ests per chain, 74400 per kthread [ 1421.000690][ T38] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 1421.112402][T24152] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 1421.208877][T29480] RDS: rds_bind could not find a transport for fe80::aa, load rds_tcp or rds_rdma? [ 1421.408058][T24152] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 1421.508358][T29495] netlink: 64 bytes leftover after parsing attributes in process `syz.6.6378'. [ 1421.517449][T24152] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 1421.521360][T29493] bridge0: port 2(bridge_slave_1) entered disabled state [ 1421.521952][T29493] bridge0: port 1(bridge_slave_0) entered disabled state [ 1421.641557][T29493] bridge0: port 2(bridge_slave_1) entered blocking state [ 1421.641683][T29493] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1421.642004][T29493] bridge0: port 1(bridge_slave_0) entered blocking state [ 1421.642110][T29493] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1421.715995][T29493] team0: Port device bridge0 added [ 1421.735795][T24153] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 1421.855595][T24135] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 1421.890198][T29497] xt_bpf: check failed: parse error [ 1422.900183][T29521] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6386'. [ 1422.979091][T29521] netlink: 116 bytes leftover after parsing attributes in process `syz.3.6386'. [ 1423.080424][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 1423.482349][T29528] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6389'. [ 1423.508253][T29528] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6389'. [ 1423.867176][T29548] xt_bpf: check failed: parse error [ 1423.932968][T29552] Bluetooth: MGMT ver 1.23 [ 1423.957522][T29551] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6395'. [ 1424.125022][T29557] x_tables: duplicate underflow at hook 1 [ 1424.328048][T29560] syzkaller0: entered promiscuous mode [ 1424.328069][T29560] syzkaller0: entered allmulticast mode [ 1424.522840][T29561] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1424.708482][T29567] xt_hashlimit: size too large, truncated to 1048576 [ 1425.082063][T29571] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6401'. [ 1425.230891][T29573] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6400'. [ 1425.348519][T29571] veth5: entered promiscuous mode [ 1425.395637][T29571] bond2: (slave veth5): Enslaving as an active interface with an up link [ 1425.408821][T29575] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1425.504028][T24153] net_ratelimit: 26 callbacks suppressed [ 1425.504052][T24153] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 1425.555189][T29583] FAULT_INJECTION: forcing a failure. [ 1425.555189][T29583] name failslab, interval 1, probability 0, space 0, times 0 [ 1425.555224][T29583] CPU: 0 UID: 0 PID: 29583 Comm: syz.6.6404 Not tainted syzkaller #0 PREEMPT(full) [ 1425.555245][T29583] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1425.555256][T29583] Call Trace: [ 1425.555264][T29583] [ 1425.555271][T29583] dump_stack_lvl+0xe8/0x150 [ 1425.555301][T29583] should_fail_ex+0x410/0x560 [ 1425.555325][T29583] should_failslab+0xa8/0x100 [ 1425.555350][T29583] __kmalloc_node_track_caller_noprof+0xfb/0x720 [ 1425.555371][T29583] ? bpf_push_jmp_history+0x26c/0x6d0 [ 1425.555390][T29583] ? bpf_push_jmp_history+0x26c/0x6d0 [ 1425.555410][T29583] ? bpf_push_jmp_history+0x26c/0x6d0 [ 1425.555429][T29583] krealloc_node_align_noprof+0x19a/0x390 [ 1425.555453][T29583] bpf_push_jmp_history+0x26c/0x6d0 [ 1425.555481][T29583] check_mem_access+0xf82/0x2700 [ 1425.555524][T29583] ? __pfx_check_mem_access+0x10/0x10 [ 1425.555547][T29583] ? __kernel_text_address+0xd/0x30 [ 1425.555567][T29583] ? unwind_get_return_address+0x4d/0x90 [ 1425.555588][T29583] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1425.555617][T29583] ? arch_stack_walk+0xfb/0x150 [ 1425.555649][T29583] do_check_insn+0x1d3f/0x17d00 [ 1425.555680][T29583] ? stack_depot_save_flags+0x33/0x7f0 [ 1425.555702][T29583] ? __kernel_text_address+0xd/0x30 [ 1425.555724][T29583] ? kasan_save_track+0x4f/0x80 [ 1425.555742][T29583] ? kasan_save_track+0x3e/0x80 [ 1425.555759][T29583] ? __kasan_kmalloc+0x93/0xb0 [ 1425.555778][T29583] ? __kmalloc_cache_noprof+0x321/0x600 [ 1425.555795][T29583] ? do_check_common+0x348/0x55c0 [ 1425.555816][T29583] ? do_check_main+0xa2/0x1f0 [ 1425.555833][T29583] ? bpf_check+0x2777/0x2ef0 [ 1425.555850][T29583] ? bpf_prog_load+0x14d6/0x1c20 [ 1425.555867][T29583] ? __sys_bpf+0xd0d/0xd90 [ 1425.555883][T29583] ? __x64_sys_bpf+0xba/0xd0 [ 1425.555897][T29583] ? do_syscall_64+0x166/0x520 [ 1425.555917][T29583] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1425.555940][T29583] ? __pfx_do_check_insn+0x10/0x10 [ 1425.555989][T29583] ? rcu_is_watching+0x16/0xb0 [ 1425.556015][T29583] ? __asan_memset+0x22/0x50 [ 1425.556039][T29583] ? cnum32_from_urange+0xf/0x30 [ 1425.556065][T29583] ? cnum32_from_urange+0xf/0x30 [ 1425.556088][T29583] ? __mark_reg_known+0x125/0x1a0 [ 1425.556113][T29583] do_check_common+0x35fa/0x55c0 [ 1425.556171][T29583] ? __pfx_do_check_common+0x10/0x10 [ 1425.556209][T29583] do_check_main+0xa2/0x1f0 [ 1425.556233][T29583] bpf_check+0x2777/0x2ef0 [ 1425.556266][T29583] ? __pfx_bpf_check+0x10/0x10 [ 1425.556288][T29583] ? bpf_obj_name_cpy+0x194/0x1e0 [ 1425.556316][T29583] bpf_prog_load+0x14d6/0x1c20 [ 1425.556349][T29583] ? __pfx_bpf_prog_load+0x10/0x10 [ 1425.556394][T29583] __sys_bpf+0xd0d/0xd90 [ 1425.556423][T29583] ? __pfx___sys_bpf+0x10/0x10 [ 1425.556455][T29583] ? __fget_files+0x2a/0x420 [ 1425.556504][T29583] ? ksys_write+0x242/0x270 [ 1425.556534][T29583] ? __pfx_ksys_write+0x10/0x10 [ 1425.556566][T29583] __x64_sys_bpf+0xba/0xd0 [ 1425.556588][T29583] do_syscall_64+0x166/0x520 [ 1425.556612][T29583] ? trace_irq_disable+0x3b/0x140 [ 1425.556630][T29583] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1425.556650][T29583] ? clear_bhb_loop+0x70/0xc0 [ 1425.556674][T29583] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1425.556693][T29583] RIP: 0033:0x7f1231f9e159 [ 1425.556712][T29583] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1425.556727][T29583] RSP: 002b:00007f1232f26028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1425.556748][T29583] RAX: ffffffffffffffda RBX: 00007f1232225fa0 RCX: 00007f1231f9e159 [ 1425.556762][T29583] RDX: 0000000000000094 RSI: 0000200000000200 RDI: 0000000000000005 [ 1425.556775][T29583] RBP: 00007f1232f26090 R08: 0000000000000000 R09: 0000000000000000 [ 1425.556787][T29583] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1425.556799][T29583] R13: 00007f1232226038 R14: 00007f1232225fa0 R15: 00007ffe0bec7048 [ 1425.556830][T29583] [ 1425.622133][T24135] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 1426.054932][T24153] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 1426.098500][T17162] block nbd67: Receive control failed (result -32) [ 1426.101226][T17162] block nbd67: Receive control failed (result -32) [ 1426.202270][T24137] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 1426.310592][T24152] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 1426.364965][T29587] xt_bpf: check failed: parse error [ 1426.419633][T24135] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 1426.538728][T24153] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 1426.569649][T29594] __nla_validate_parse: 1 callbacks suppressed [ 1426.569670][T29594] netlink: 3736 bytes leftover after parsing attributes in process `syz.6.6408'. [ 1426.600293][T29596] ip_vti0: entered promiscuous mode [ 1426.613476][T29596] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6409'. [ 1426.645048][T24153] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 1426.721068][T29604] netlink: 76 bytes leftover after parsing attributes in process `syz.0.6412'. [ 1426.721099][T29604] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6412'. [ 1426.721112][T29604] netlink: 20 bytes leftover after parsing attributes in process `syz.0.6412'. [ 1426.791997][T24147] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 1426.896341][T24147] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 1427.186239][T29617] --map-set only usable from mangle table [ 1427.216743][T29614] tipc: Started in network mode [ 1427.216761][T29614] tipc: Node identity , cluster identity 4711 [ 1427.216775][T29614] tipc: Failed to set node id, please configure manually [ 1427.216819][T29614] tipc: Enabling of bearer rejected, failed to enable media [ 1427.700258][T29622] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6422'. [ 1427.737114][T29626] FAULT_INJECTION: forcing a failure. [ 1427.737114][T29626] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1427.737150][T29626] CPU: 0 UID: 0 PID: 29626 Comm: syz.0.6423 Not tainted syzkaller #0 PREEMPT(full) [ 1427.737172][T29626] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1427.737183][T29626] Call Trace: [ 1427.737191][T29626] [ 1427.737201][T29626] dump_stack_lvl+0xe8/0x150 [ 1427.737232][T29626] should_fail_ex+0x410/0x560 [ 1427.737260][T29626] _copy_from_user+0x2d/0xb0 [ 1427.737286][T29626] ___sys_recvmsg+0x173/0x5a0 [ 1427.737321][T29626] ? __pfx____sys_recvmsg+0x10/0x10 [ 1427.737352][T29626] ? lock_acquire+0x115/0x350 [ 1427.737401][T29626] do_recvmmsg+0x31a/0x7f0 [ 1427.737435][T29626] ? __pfx_do_recvmmsg+0x10/0x10 [ 1427.737472][T29626] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1427.737500][T29626] ? __fget_files+0x3a2/0x420 [ 1427.737536][T29626] __x64_sys_recvmmsg+0x198/0x250 [ 1427.737565][T29626] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1427.737603][T29626] do_syscall_64+0x166/0x520 [ 1427.737628][T29626] ? trace_irq_disable+0x3b/0x140 [ 1427.737647][T29626] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1427.737667][T29626] ? clear_bhb_loop+0x70/0xc0 [ 1427.737690][T29626] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1427.737710][T29626] RIP: 0033:0x7f529d59e159 [ 1427.737729][T29626] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1427.737744][T29626] RSP: 002b:00007f529e441028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1427.737765][T29626] RAX: ffffffffffffffda RBX: 00007f529d825fa0 RCX: 00007f529d59e159 [ 1427.737779][T29626] RDX: 03fffffffffffe83 RSI: 00002000000018c0 RDI: 0000000000000003 [ 1427.737792][T29626] RBP: 00007f529e441090 R08: 0000000000000000 R09: 0000000000000000 [ 1427.737805][T29626] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000002 [ 1427.737816][T29626] R13: 00007f529d826038 R14: 00007f529d825fa0 R15: 00007ffc7a452c08 [ 1427.737848][T29626] [ 1428.087369][ T53] block nbd68: Receive control failed (result -32) [ 1428.089976][T17162] block nbd68: Receive control failed (result -32) [ 1428.679156][T29649] sit0: left promiscuous mode [ 1429.042367][T29670] netlink: 'syz.0.6434': attribute type 1 has an invalid length. [ 1429.506584][T29680] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6438'. [ 1429.653034][ T53] block nbd69: Receive control failed (result -32) [ 1429.658889][T17162] block nbd69: Receive control failed (result -32) [ 1429.907409][T29688] tipc: Started in network mode [ 1429.907431][T29688] tipc: Node identity 1, cluster identity 4711 [ 1429.907443][T29688] tipc: Node number set to 1 [ 1430.343358][T29704] FAULT_INJECTION: forcing a failure. [ 1430.343358][T29704] name failslab, interval 1, probability 0, space 0, times 0 [ 1430.343391][T29704] CPU: 0 UID: 0 PID: 29704 Comm: syz.4.6444 Not tainted syzkaller #0 PREEMPT(full) [ 1430.343413][T29704] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1430.343425][T29704] Call Trace: [ 1430.343435][T29704] [ 1430.343444][T29704] dump_stack_lvl+0xe8/0x150 [ 1430.343475][T29704] should_fail_ex+0x410/0x560 [ 1430.343503][T29704] should_failslab+0xa8/0x100 [ 1430.343528][T29704] __kvmalloc_node_noprof+0x176/0x820 [ 1430.343552][T29704] ? bpf_test_run_xdp_live+0x1ef/0x1c20 [ 1430.343580][T29704] ? bpf_test_run_xdp_live+0x1ef/0x1c20 [ 1430.343605][T29704] bpf_test_run_xdp_live+0x1ef/0x1c20 [ 1430.343629][T29704] ? bpf_dispatcher_change_prog+0xc4c/0xf20 [ 1430.343652][T29704] ? __mutex_unlock_slowpath+0x731/0x900 [ 1430.343681][T29704] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1430.343709][T29704] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 1430.343727][T29704] ? 0xffffffffa0404540 [ 1430.343785][T29704] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 1430.343811][T29704] ? _copy_from_user+0x94/0xb0 [ 1430.343832][T29704] ? bpf_test_init+0x113/0x150 [ 1430.343857][T29704] ? xdp_convert_md_to_buff+0x5b/0x330 [ 1430.343878][T29704] bpf_prog_test_run_xdp+0x7d8/0x11d0 [ 1430.343912][T29704] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 1430.343936][T29704] ? __fget_files+0x2a/0x420 [ 1430.343965][T29704] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 1430.343985][T29704] bpf_prog_test_run+0x2c5/0x340 [ 1430.344010][T29704] __sys_bpf+0xa22/0xd90 [ 1430.344038][T29704] ? __pfx___sys_bpf+0x10/0x10 [ 1430.344068][T29704] ? __fget_files+0x2a/0x420 [ 1430.344109][T29704] ? ksys_write+0x242/0x270 [ 1430.344138][T29704] ? __pfx_ksys_write+0x10/0x10 [ 1430.344170][T29704] __x64_sys_bpf+0xba/0xd0 [ 1430.344192][T29704] do_syscall_64+0x166/0x520 [ 1430.344217][T29704] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1430.344237][T29704] ? clear_bhb_loop+0x70/0xc0 [ 1430.344260][T29704] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1430.344278][T29704] RIP: 0033:0x7f6b4699e159 [ 1430.344296][T29704] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1430.344312][T29704] RSP: 002b:00007f6b44bf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1430.344332][T29704] RAX: ffffffffffffffda RBX: 00007f6b46c25fa0 RCX: 00007f6b4699e159 [ 1430.344346][T29704] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a [ 1430.344357][T29704] RBP: 00007f6b44bf6090 R08: 0000000000000000 R09: 0000000000000000 [ 1430.344369][T29704] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1430.344381][T29704] R13: 00007f6b46c26038 R14: 00007f6b46c25fa0 R15: 00007fffaaa03808 [ 1430.344409][T29704] [ 1430.570201][T24152] net_ratelimit: 23 callbacks suppressed [ 1430.570221][T24152] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 1430.681397][T24137] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 1430.814932][T24153] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 1430.925059][T24138] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 1430.928579][T29709] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6449'. [ 1431.035227][T24138] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 1431.060264][T29716] FAULT_INJECTION: forcing a failure. [ 1431.060264][T29716] name failslab, interval 1, probability 0, space 0, times 0 [ 1431.060295][T29716] CPU: 0 UID: 0 PID: 29716 Comm: syz.6.6447 Not tainted syzkaller #0 PREEMPT(full) [ 1431.060316][T29716] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1431.060328][T29716] Call Trace: [ 1431.060336][T29716] [ 1431.060344][T29716] dump_stack_lvl+0xe8/0x150 [ 1431.060375][T29716] should_fail_ex+0x410/0x560 [ 1431.060403][T29716] should_failslab+0xa8/0x100 [ 1431.060428][T29716] __kmalloc_node_track_caller_noprof+0xfb/0x720 [ 1431.060450][T29716] ? copy_array+0x71/0x100 [ 1431.060474][T29716] ? copy_array+0x71/0x100 [ 1431.060503][T29716] ? copy_array+0x71/0x100 [ 1431.060529][T29716] krealloc_node_align_noprof+0x19a/0x390 [ 1431.060563][T29716] copy_array+0x71/0x100 [ 1431.060592][T29716] bpf_copy_verifier_state+0xad/0x1170 [ 1431.060620][T29716] ? push_stack+0x7e/0x380 [ 1431.060646][T29716] ? push_stack+0x7e/0x380 [ 1431.060677][T29716] push_stack+0x1b9/0x380 [ 1431.060706][T29716] do_check_insn+0x8194/0x17d00 [ 1431.060748][T29716] ? vsnprintf+0x3a0/0xef0 [ 1431.060775][T29716] ? __pfx_do_check_insn+0x10/0x10 [ 1431.060809][T29716] ? vscnprintf+0x5c/0x90 [ 1431.060837][T29716] ? bpf_verifier_vlog+0x3d1/0x900 [ 1431.060876][T29716] ? verbose+0x11d/0x1a0 [ 1431.060908][T29716] ? __pfx_verbose+0x10/0x10 [ 1431.060943][T29716] ? print_insn_state+0x106/0x170 [ 1431.060965][T29716] do_check_common+0x35fa/0x55c0 [ 1431.061024][T29716] ? __pfx_do_check_common+0x10/0x10 [ 1431.061046][T29716] ? __pfx_verbose+0x10/0x10 [ 1431.061070][T29716] ? __pfx_bpf_disasm_kfunc_name+0x10/0x10 [ 1431.061110][T29716] do_check_main+0xa2/0x1f0 [ 1431.061132][T29716] bpf_check+0x2777/0x2ef0 [ 1431.061168][T29716] ? __pfx_bpf_check+0x10/0x10 [ 1431.061191][T29716] ? bpf_obj_name_cpy+0x194/0x1e0 [ 1431.061221][T29716] bpf_prog_load+0x14d6/0x1c20 [ 1431.061254][T29716] ? __pfx_bpf_prog_load+0x10/0x10 [ 1431.061299][T29716] __sys_bpf+0xd0d/0xd90 [ 1431.061328][T29716] ? __pfx___sys_bpf+0x10/0x10 [ 1431.061360][T29716] ? __fget_files+0x2a/0x420 [ 1431.061401][T29716] ? ksys_write+0x242/0x270 [ 1431.061430][T29716] ? __pfx_ksys_write+0x10/0x10 [ 1431.061463][T29716] __x64_sys_bpf+0xba/0xd0 [ 1431.061484][T29716] do_syscall_64+0x166/0x520 [ 1431.061507][T29716] ? trace_irq_disable+0x3b/0x140 [ 1431.061523][T29716] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1431.061541][T29716] ? clear_bhb_loop+0x70/0xc0 [ 1431.061568][T29716] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1431.061584][T29716] RIP: 0033:0x7f1231f9e159 [ 1431.061601][T29716] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1431.061614][T29716] RSP: 002b:00007f1232f26028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1431.061633][T29716] RAX: ffffffffffffffda RBX: 00007f1232225fa0 RCX: 00007f1231f9e159 [ 1431.061645][T29716] RDX: 0000000000000048 RSI: 00002000000017c0 RDI: 0000000000000005 [ 1431.061655][T29716] RBP: 00007f1232f26090 R08: 0000000000000000 R09: 0000000000000000 [ 1431.061668][T29716] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1431.061679][T29716] R13: 00007f1232226038 R14: 00007f1232225fa0 R15: 00007ffe0bec7048 [ 1431.061710][T29716] [ 1431.174161][T24147] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 1431.284580][T24138] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 1431.399222][T24137] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 1431.504572][T24138] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 1431.614743][T24135] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 1431.701430][T29731] xt_bpf: check failed: parse error [ 1432.111265][T29741] netlink: 5 bytes leftover after parsing attributes in process `syz.4.6460'. [ 1432.113358][T29742] netlink: 5 bytes leftover after parsing attributes in process `syz.4.6460'. [ 1432.505760][T29756] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6464'. [ 1433.200212][T29778] tipc: Started in network mode [ 1433.200233][T29778] tipc: Node identity 1000001, cluster identity 4369 [ 1433.200246][T29778] tipc: Node number set to 16777217 [ 1433.249978][T29778] tipc: New replicast peer: 127.0.0.1 [ 1433.252069][T29778] tipc: Enabled bearer , priority 10 [ 1433.791366][T29791] netlink: 'syz.0.6475': attribute type 30 has an invalid length. [ 1433.995808][T29802] sctp: [Deprecated]: syz.3.6478 (pid 29802) Use of int in max_burst socket option. [ 1433.995808][T29802] Use struct sctp_assoc_value instead [ 1434.539464][T29819] tipc: Enabled bearer , priority 10 [ 1434.688972][T29824] x_tables: ip_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 1434.700822][T29823] xt_bpf: check failed: parse error [ 1435.026928][T29837] netlink: 'syz.6.6487': attribute type 1 has an invalid length. [ 1435.032635][T29837] netlink: 'syz.6.6487': attribute type 1 has an invalid length. [ 1435.115281][T17162] block nbd70: Receive control failed (result -32) [ 1435.353334][T29845] netlink: 'syz.3.6491': attribute type 1 has an invalid length. [ 1435.420559][T29845] bond1: entered promiscuous mode [ 1435.421523][T29845] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1435.457154][T29849] netlink: 68 bytes leftover after parsing attributes in process `syz.6.6490'. [ 1435.577545][T29853] xt_policy: output policy not valid in PREROUTING and INPUT [ 1435.622215][T29845] bond1: (slave bridge1): making interface the new active one [ 1435.622241][T29845] bridge1: entered promiscuous mode [ 1435.650638][T29845] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 1435.674875][T24137] net_ratelimit: 29 callbacks suppressed [ 1435.674897][T24137] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 1435.814465][T24135] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 1435.890974][T29865] xt_bpf: check failed: parse error [ 1436.031148][T29862] netlink: 'syz.3.6495': attribute type 83 has an invalid length. [ 1436.050020][T29862] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6495'. [ 1436.135080][T24147] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 1436.158363][T29870] ip6tnl1: entered promiscuous mode [ 1436.686932][T24137] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 1436.823405][T24138] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 1436.889912][T29880] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6502'. [ 1436.925744][T24137] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 1436.958960][T29880] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6502'. [ 1437.136775][T24135] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 1437.247022][T24138] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 1437.287831][T29894] xt_bpf: check failed: parse error [ 1437.356298][T24153] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 1437.469091][T24143] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 1437.756671][T29899] netlink: 16 bytes leftover after parsing attributes in process `syz.6.6509'. [ 1438.712500][T29922] FAULT_INJECTION: forcing a failure. [ 1438.712500][T29922] name failslab, interval 1, probability 0, space 0, times 0 [ 1438.712534][T29922] CPU: 1 UID: 0 PID: 29922 Comm: syz.4.6514 Not tainted syzkaller #0 PREEMPT(full) [ 1438.712555][T29922] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1438.712567][T29922] Call Trace: [ 1438.712575][T29922] [ 1438.712584][T29922] dump_stack_lvl+0xe8/0x150 [ 1438.712616][T29922] should_fail_ex+0x410/0x560 [ 1438.712642][T29922] ? __alloc_skb+0x1db/0x7a0 [ 1438.712663][T29922] should_failslab+0xa8/0x100 [ 1438.712688][T29922] ? __alloc_skb+0x1db/0x7a0 [ 1438.712706][T29922] kmem_cache_alloc_node_noprof+0xa1/0x610 [ 1438.712739][T29922] ? __alloc_skb+0x18d/0x7a0 [ 1438.712760][T29922] ? preempt_schedule_thunk+0x16/0x40 [ 1438.712780][T29922] ? __alloc_skb+0x1db/0x7a0 [ 1438.712808][T29922] __alloc_skb+0x1db/0x7a0 [ 1438.712833][T29922] netlink_sendmsg+0x5d4/0xb40 [ 1438.712864][T29922] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1438.712891][T29922] ? apparmor_socket_sendmsg+0x18b/0x360 [ 1438.712915][T29922] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1438.712932][T29922] sock_sendmsg_nosec+0x14e/0x190 [ 1438.712963][T29922] ____sys_sendmsg+0x54e/0x850 [ 1438.712993][T29922] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1438.713027][T29922] ? import_iovec+0x73/0xa0 [ 1438.713054][T29922] ___sys_sendmsg+0x2a5/0x360 [ 1438.713078][T29922] ? __lock_acquire+0x747/0x2de0 [ 1438.713102][T29922] ? __pfx____sys_sendmsg+0x10/0x10 [ 1438.713159][T29922] ? __fget_files+0x2a/0x420 [ 1438.713181][T29922] ? __fget_files+0x3a2/0x420 [ 1438.713219][T29922] __x64_sys_sendmsg+0x1b1/0x290 [ 1438.713244][T29922] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1438.713283][T29922] do_syscall_64+0x166/0x520 [ 1438.713306][T29922] ? trace_irq_disable+0x3b/0x140 [ 1438.713322][T29922] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1438.713340][T29922] ? clear_bhb_loop+0x70/0xc0 [ 1438.713363][T29922] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1438.713381][T29922] RIP: 0033:0x7f6b4699e159 [ 1438.713398][T29922] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1438.713414][T29922] RSP: 002b:00007f6b44bb4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1438.713433][T29922] RAX: ffffffffffffffda RBX: 00007f6b46c26180 RCX: 00007f6b4699e159 [ 1438.713446][T29922] RDX: 0000000020040054 RSI: 0000200000006040 RDI: 0000000000000004 [ 1438.713458][T29922] RBP: 00007f6b44bb4090 R08: 0000000000000000 R09: 0000000000000000 [ 1438.713470][T29922] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1438.713482][T29922] R13: 00007f6b46c26218 R14: 00007f6b46c26180 R15: 00007fffaaa03808 [ 1438.713511][T29922] [ 1439.563543][T29940] FAULT_INJECTION: forcing a failure. [ 1439.563543][T29940] name failslab, interval 1, probability 0, space 0, times 0 [ 1439.563572][T29940] CPU: 1 UID: 0 PID: 29940 Comm: syz.1.6523 Not tainted syzkaller #0 PREEMPT(full) [ 1439.563592][T29940] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1439.563603][T29940] Call Trace: [ 1439.563610][T29940] [ 1439.563617][T29940] dump_stack_lvl+0xe8/0x150 [ 1439.563649][T29940] should_fail_ex+0x410/0x560 [ 1439.563675][T29940] should_failslab+0xa8/0x100 [ 1439.563699][T29940] __kmalloc_cache_noprof+0xa3/0x600 [ 1439.563717][T29940] ? __kmalloc_cache_noprof+0x14d/0x600 [ 1439.563732][T29940] ? sctp_add_bind_addr+0x8c/0x370 [ 1439.563757][T29940] ? sctp_add_bind_addr+0x8c/0x370 [ 1439.563790][T29940] sctp_add_bind_addr+0x8c/0x370 [ 1439.563823][T29940] sctp_copy_local_addr_list+0x31a/0x4e0 [ 1439.563871][T29940] ? sctp_copy_local_addr_list+0xa3/0x4e0 [ 1439.563902][T29940] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 1439.563933][T29940] ? sctp_v6_is_any+0x64/0x80 [ 1439.563957][T29940] ? sctp_copy_one_addr+0x93/0x360 [ 1439.563988][T29940] sctp_bind_addr_copy+0xb3/0x3c0 [ 1439.564018][T29940] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 1439.564049][T29940] sctp_connect_new_asoc+0x2ff/0x6b0 [ 1439.564076][T29940] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 1439.564106][T29940] ? __local_bh_enable_ip+0xd6/0x140 [ 1439.564129][T29940] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 1439.564159][T29940] ? security_sctp_bind_connect+0x7e/0x2c0 [ 1439.564183][T29940] sctp_sendmsg+0x159b/0x2d00 [ 1439.564221][T29940] ? __pfx_sctp_sendmsg+0x10/0x10 [ 1439.564249][T29940] ? __lock_acquire+0x747/0x2de0 [ 1439.564284][T29940] ? aa_sock_msg_perm+0xf5/0x210 [ 1439.564307][T29940] ? sock_rps_record_flow+0x19/0x350 [ 1439.564331][T29940] ? inet_sendmsg+0x298/0x320 [ 1439.564354][T29940] ? __pfx_inet_sendmsg+0x10/0x10 [ 1439.564373][T29940] sock_sendmsg_nosec+0x10f/0x190 [ 1439.564406][T29940] ____sys_sendmsg+0x54e/0x850 [ 1439.564437][T29940] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1439.564471][T29940] ? import_iovec+0x73/0xa0 [ 1439.564499][T29940] ___sys_sendmsg+0x2a5/0x360 [ 1439.564521][T29940] ? __lock_acquire+0x747/0x2de0 [ 1439.564544][T29940] ? __pfx____sys_sendmsg+0x10/0x10 [ 1439.564608][T29940] ? __fget_files+0x2a/0x420 [ 1439.564632][T29940] ? __fget_files+0x3a2/0x420 [ 1439.564666][T29940] __x64_sys_sendmsg+0x1b1/0x290 [ 1439.564692][T29940] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1439.564738][T29940] do_syscall_64+0x166/0x520 [ 1439.564761][T29940] ? trace_irq_disable+0x3b/0x140 [ 1439.564779][T29940] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1439.564799][T29940] ? clear_bhb_loop+0x70/0xc0 [ 1439.564821][T29940] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1439.564840][T29940] RIP: 0033:0x7f4b6239e159 [ 1439.564857][T29940] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1439.564874][T29940] RSP: 002b:00007f4b63207028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1439.564895][T29940] RAX: ffffffffffffffda RBX: 00007f4b62625fa0 RCX: 00007f4b6239e159 [ 1439.564910][T29940] RDX: 00000000240280d1 RSI: 0000200000002dc0 RDI: 0000000000000004 [ 1439.564923][T29940] RBP: 00007f4b63207090 R08: 0000000000000000 R09: 0000000000000000 [ 1439.564936][T29940] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1439.564948][T29940] R13: 00007f4b62626038 R14: 00007f4b62625fa0 R15: 00007ffd1ec486a8 [ 1439.564981][T29940] [ 1441.142714][T29967] netlink: 48 bytes leftover after parsing attributes in process `syz.6.6530'. [ 1441.211222][T29969] FAULT_INJECTION: forcing a failure. [ 1441.211222][T29969] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1441.211254][T29969] CPU: 1 UID: 0 PID: 29969 Comm: syz.1.6531 Not tainted syzkaller #0 PREEMPT(full) [ 1441.211275][T29969] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1441.211287][T29969] Call Trace: [ 1441.211295][T29969] [ 1441.211304][T29969] dump_stack_lvl+0xe8/0x150 [ 1441.211335][T29969] should_fail_ex+0x410/0x560 [ 1441.211362][T29969] _copy_from_user+0x2d/0xb0 [ 1441.211387][T29969] generic_map_update_batch+0x6b1/0xae0 [ 1441.211427][T29969] ? __pfx_generic_map_update_batch+0x10/0x10 [ 1441.211454][T29969] ? __fget_files+0x2a/0x420 [ 1441.211485][T29969] ? __pfx_generic_map_update_batch+0x10/0x10 [ 1441.211510][T29969] bpf_map_do_batch+0x391/0x630 [ 1441.211539][T29969] __sys_bpf+0xbe5/0xd90 [ 1441.211568][T29969] ? __pfx___sys_bpf+0x10/0x10 [ 1441.211600][T29969] ? __fget_files+0x2a/0x420 [ 1441.211641][T29969] ? ksys_write+0x242/0x270 [ 1441.211670][T29969] ? __pfx_ksys_write+0x10/0x10 [ 1441.211703][T29969] __x64_sys_bpf+0xba/0xd0 [ 1441.211725][T29969] do_syscall_64+0x166/0x520 [ 1441.211750][T29969] ? trace_irq_disable+0x3b/0x140 [ 1441.211768][T29969] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1441.211787][T29969] ? clear_bhb_loop+0x70/0xc0 [ 1441.211811][T29969] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1441.211830][T29969] RIP: 0033:0x7f4b6239e159 [ 1441.211849][T29969] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1441.211865][T29969] RSP: 002b:00007f4b63207028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1441.211886][T29969] RAX: ffffffffffffffda RBX: 00007f4b62625fa0 RCX: 00007f4b6239e159 [ 1441.211900][T29969] RDX: 0000000000000038 RSI: 0000200000000200 RDI: 000000000000001a [ 1441.211912][T29969] RBP: 00007f4b63207090 R08: 0000000000000000 R09: 0000000000000000 [ 1441.211924][T29969] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1441.211935][T29969] R13: 00007f4b62626038 R14: 00007f4b62625fa0 R15: 00007ffd1ec486a8 [ 1441.211975][T29969] [ 1441.665539][T24137] net_ratelimit: 16 callbacks suppressed [ 1441.665561][T24137] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 1441.776993][ T38] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 1441.885434][T24138] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 1441.908362][T29978] vlan0: entered promiscuous mode [ 1441.994515][T29983] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1442.001724][T24143] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 1442.027249][T29985] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6537'. [ 1442.031522][T29985] netlink: 116 bytes leftover after parsing attributes in process `syz.4.6537'. [ 1442.104694][T24152] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 1442.168889][T29990] FAULT_INJECTION: forcing a failure. [ 1442.168889][T29990] name failslab, interval 1, probability 0, space 0, times 0 [ 1442.168922][T29990] CPU: 0 UID: 0 PID: 29990 Comm: syz.1.6539 Not tainted syzkaller #0 PREEMPT(full) [ 1442.168945][T29990] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1442.168956][T29990] Call Trace: [ 1442.168964][T29990] [ 1442.168972][T29990] dump_stack_lvl+0xe8/0x150 [ 1442.169000][T29990] should_fail_ex+0x410/0x560 [ 1442.169024][T29990] should_failslab+0xa8/0x100 [ 1442.169047][T29990] __kvmalloc_node_noprof+0x176/0x820 [ 1442.169068][T29990] ? __kvmalloc_node_noprof+0x345/0x820 [ 1442.169087][T29990] ? bpf_compute_scc+0xec/0xb10 [ 1442.169114][T29990] ? bpf_compute_scc+0xec/0xb10 [ 1442.169148][T29990] bpf_compute_scc+0xec/0xb10 [ 1442.169195][T29990] bpf_check+0x2720/0x2ef0 [ 1442.169233][T29990] ? __pfx_bpf_check+0x10/0x10 [ 1442.169256][T29990] ? bpf_obj_name_cpy+0x194/0x1e0 [ 1442.169285][T29990] bpf_prog_load+0x14d6/0x1c20 [ 1442.169318][T29990] ? __pfx_bpf_prog_load+0x10/0x10 [ 1442.169372][T29990] __sys_bpf+0xd0d/0xd90 [ 1442.169401][T29990] ? __pfx___sys_bpf+0x10/0x10 [ 1442.169432][T29990] ? __fget_files+0x2a/0x420 [ 1442.169474][T29990] ? ksys_write+0x242/0x270 [ 1442.169505][T29990] ? __pfx_ksys_write+0x10/0x10 [ 1442.169537][T29990] __x64_sys_bpf+0xba/0xd0 [ 1442.169559][T29990] do_syscall_64+0x166/0x520 [ 1442.169584][T29990] ? trace_irq_disable+0x3b/0x140 [ 1442.169601][T29990] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1442.169621][T29990] ? clear_bhb_loop+0x70/0xc0 [ 1442.169647][T29990] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1442.169666][T29990] RIP: 0033:0x7f4b6239e159 [ 1442.169685][T29990] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1442.169701][T29990] RSP: 002b:00007f4b63207028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1442.169723][T29990] RAX: ffffffffffffffda RBX: 00007f4b62625fa0 RCX: 00007f4b6239e159 [ 1442.169737][T29990] RDX: 0000000000000094 RSI: 0000200000000440 RDI: 0000000000000005 [ 1442.169750][T29990] RBP: 00007f4b63207090 R08: 0000000000000000 R09: 0000000000000000 [ 1442.169763][T29990] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1442.169774][T29990] R13: 00007f4b62626038 R14: 00007f4b62625fa0 R15: 00007ffd1ec486a8 [ 1442.169804][T29990] [ 1442.178906][T29983] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6532'. [ 1442.215343][ T38] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 1442.429503][ T38] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 1442.517713][T29983] x_tables: duplicate underflow at hook 1 [ 1442.518843][T29983] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1442.665665][T29997] netlink: 20 bytes leftover after parsing attributes in process `syz.6.6540'. [ 1442.713419][T30000] netlink: zone id is out of range [ 1443.456521][T30021] netlink: 56 bytes leftover after parsing attributes in process `syz.4.6550'. [ 1443.511880][T30018] netlink: 48 bytes leftover after parsing attributes in process `syz.3.6552'. [ 1444.381153][T30054] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6567'. [ 1445.787936][T30102] netlink: 'syz.4.6590': attribute type 3 has an invalid length. [ 1445.815811][T30101] netlink: 196 bytes leftover after parsing attributes in process `syz.6.6588'. [ 1446.112909][T30108] gtp1: entered promiscuous mode [ 1446.128296][T30108] team0: Device gtp1 is of different type [ 1446.302691][T30098] wlan1 speed is unknown, defaulting to 1000 [ 1446.347304][T30098] virt_wifi0 speed is unknown, defaulting to 1000 [ 1446.651679][T30114] syzkaller1: entered promiscuous mode [ 1446.651703][T30114] syzkaller1: entered allmulticast mode [ 1446.759559][T24137] net_ratelimit: 27 callbacks suppressed [ 1446.759581][T24137] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 1447.337128][ T38] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 1447.342944][T30138] bridge0: port 1(bridge_slave_0) entered disabled state [ 1447.680093][T30152] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6608'. [ 1447.794606][T24137] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 1447.812826][T30149] syzkaller0: entered promiscuous mode [ 1447.812850][T30149] syzkaller0: entered allmulticast mode [ 1448.005375][T30158] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input39 [ 1448.097045][T24152] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 1448.207233][ T38] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 1448.314355][T24143] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 1448.426666][T24143] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 1448.453172][T30170] ip_tables: iptables: counters copy to user failed while replacing table [ 1448.540309][T30172] syzkaller1: entered promiscuous mode [ 1448.540334][T30172] syzkaller1: entered allmulticast mode [ 1448.574442][ T38] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 1448.663756][T30172] batman_adv: batadv0: Adding interface: virt_wifi0 [ 1448.663775][T30172] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1448.663803][T30172] batman_adv: batadv0: Interface activated: virt_wifi0 [ 1449.195245][T24153] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 1449.370980][T30180] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 1449.637177][T30185] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6619'. [ 1449.772661][T30189] hsr0: entered allmulticast mode [ 1449.772685][T30189] hsr_slave_0: entered allmulticast mode [ 1449.773017][T30189] hsr_slave_1: entered allmulticast mode [ 1449.863056][T30189] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6621'. [ 1449.879604][T30189] hsr_slave_0: left promiscuous mode [ 1449.880912][T30189] hsr_slave_1: left promiscuous mode [ 1449.908805][T30189] hsr0 (unregistering): left allmulticast mode [ 1450.281184][T30203] tipc: Started in network mode [ 1450.281216][T30203] tipc: Node identity 9ef09b89f62a, cluster identity 4711 [ 1450.281372][T30203] tipc: Enabled bearer , priority 0 [ 1450.318942][T30203] syzkaller0: entered promiscuous mode [ 1450.318964][T30203] syzkaller0: entered allmulticast mode [ 1450.400838][T30206] IPv6: NLM_F_CREATE should be specified when creating new route [ 1450.438442][T30203] tipc: Resetting bearer [ 1450.979081][T30197] tipc: Resetting bearer [ 1451.030322][T30197] tipc: Disabling bearer [ 1451.169845][T30200] ip6t_ah: unknown flags 4 [ 1451.561763][T30233] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6641'. [ 1451.834964][T24147] net_ratelimit: 21 callbacks suppressed [ 1451.834985][T24147] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 1451.867237][T30248] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input40 [ 1451.947810][T24153] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 1452.054429][ T38] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 1452.166456][T24137] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 1452.191580][T30259] netlink: 'syz.6.6651': attribute type 1 has an invalid length. [ 1452.274972][T24152] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 1452.388837][T24153] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 1452.495366][T24153] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 1452.604555][T24137] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 1452.715114][T24138] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 1452.825415][T24152] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 1453.811526][T30299] ip6tnl1: entered promiscuous mode [ 1453.925005][T30302] vlan2: entered promiscuous mode [ 1454.575538][T30317] FAULT_INJECTION: forcing a failure. [ 1454.575538][T30317] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1454.575571][T30317] CPU: 1 UID: 0 PID: 30317 Comm: syz.4.6676 Not tainted syzkaller #0 PREEMPT(full) [ 1454.575592][T30317] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1454.575612][T30317] Call Trace: [ 1454.575620][T30317] [ 1454.575628][T30317] dump_stack_lvl+0xe8/0x150 [ 1454.575660][T30317] should_fail_ex+0x410/0x560 [ 1454.575688][T30317] _copy_from_user+0x2d/0xb0 [ 1454.575713][T30317] bpf_test_init+0xd8/0x150 [ 1454.575745][T30317] bpf_prog_test_run_xdp+0x4cc/0x11d0 [ 1454.575780][T30317] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 1454.575803][T30317] ? __fget_files+0x2a/0x420 [ 1454.575833][T30317] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 1454.575853][T30317] bpf_prog_test_run+0x2c5/0x340 [ 1454.575877][T30317] __sys_bpf+0xa22/0xd90 [ 1454.575903][T30317] ? __pfx___sys_bpf+0x10/0x10 [ 1454.575933][T30317] ? __fget_files+0x2a/0x420 [ 1454.575975][T30317] ? ksys_write+0x242/0x270 [ 1454.576003][T30317] ? __pfx_ksys_write+0x10/0x10 [ 1454.576034][T30317] __x64_sys_bpf+0xba/0xd0 [ 1454.576055][T30317] do_syscall_64+0x166/0x520 [ 1454.576078][T30317] ? trace_irq_disable+0x3b/0x140 [ 1454.576095][T30317] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1454.576114][T30317] ? clear_bhb_loop+0x70/0xc0 [ 1454.576137][T30317] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1454.576154][T30317] RIP: 0033:0x7f6b4699e159 [ 1454.576171][T30317] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1454.576186][T30317] RSP: 002b:00007f6b44bf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1454.576207][T30317] RAX: ffffffffffffffda RBX: 00007f6b46c25fa0 RCX: 00007f6b4699e159 [ 1454.576221][T30317] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a [ 1454.576233][T30317] RBP: 00007f6b44bf6090 R08: 0000000000000000 R09: 0000000000000000 [ 1454.576245][T30317] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1454.576256][T30317] R13: 00007f6b46c26038 R14: 00007f6b46c25fa0 R15: 00007fffaaa03808 [ 1454.576286][T30317] [ 1455.123598][T30321] FAULT_INJECTION: forcing a failure. [ 1455.123598][T30321] name failslab, interval 1, probability 0, space 0, times 0 [ 1455.123632][T30321] CPU: 0 UID: 0 PID: 30321 Comm: syz.0.6678 Not tainted syzkaller #0 PREEMPT(full) [ 1455.123651][T30321] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1455.123661][T30321] Call Trace: [ 1455.123669][T30321] [ 1455.123677][T30321] dump_stack_lvl+0xe8/0x150 [ 1455.123705][T30321] should_fail_ex+0x410/0x560 [ 1455.123730][T30321] should_failslab+0xa8/0x100 [ 1455.123753][T30321] __kmalloc_noprof+0xfe/0x720 [ 1455.123780][T30321] ? kmem_cache_alloc_node_noprof+0x3be/0x610 [ 1455.123805][T30321] ? ovs_nla_copy_actions+0x68/0x3d0 [ 1455.123830][T30321] ? ovs_nla_copy_actions+0x68/0x3d0 [ 1455.123865][T30321] ovs_nla_copy_actions+0x68/0x3d0 [ 1455.123899][T30321] ovs_packet_cmd_execute+0x66e/0xf10 [ 1455.123930][T30321] ? __pfx_ovs_packet_cmd_execute+0x10/0x10 [ 1455.123956][T30321] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 1455.123981][T30321] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 1455.124013][T30321] genl_family_rcv_msg_doit+0x233/0x340 [ 1455.124052][T30321] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1455.124090][T30321] ? bpf_lsm_capable+0x9/0x20 [ 1455.124117][T30321] ? security_capable+0x7e/0x2c0 [ 1455.124146][T30321] genl_rcv_msg+0x614/0x7a0 [ 1455.124175][T30321] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1455.124197][T30321] ? __pfx_ovs_packet_cmd_execute+0x10/0x10 [ 1455.124234][T30321] netlink_rcv_skb+0x226/0x4a0 [ 1455.124265][T30321] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1455.124289][T30321] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1455.124334][T30321] ? down_read+0x2be/0x330 [ 1455.124366][T30321] genl_rcv+0x28/0x40 [ 1455.124387][T30321] netlink_unicast+0x7bd/0x940 [ 1455.124424][T30321] netlink_sendmsg+0x813/0xb40 [ 1455.124454][T30321] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1455.124481][T30321] ? apparmor_socket_sendmsg+0x98/0x360 [ 1455.124505][T30321] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1455.124523][T30321] sock_sendmsg_nosec+0x14e/0x190 [ 1455.124554][T30321] ____sys_sendmsg+0x54e/0x850 [ 1455.124584][T30321] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1455.124619][T30321] ? import_iovec+0x73/0xa0 [ 1455.124647][T30321] ___sys_sendmsg+0x2a5/0x360 [ 1455.124670][T30321] ? __lock_acquire+0x747/0x2de0 [ 1455.124693][T30321] ? __pfx____sys_sendmsg+0x10/0x10 [ 1455.124755][T30321] ? __fget_files+0x2a/0x420 [ 1455.124779][T30321] ? __fget_files+0x3a2/0x420 [ 1455.124814][T30321] __x64_sys_sendmsg+0x1b1/0x290 [ 1455.124842][T30321] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1455.124889][T30321] do_syscall_64+0x166/0x520 [ 1455.124914][T30321] ? trace_irq_disable+0x3b/0x140 [ 1455.124932][T30321] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1455.124952][T30321] ? clear_bhb_loop+0x70/0xc0 [ 1455.124977][T30321] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1455.124996][T30321] RIP: 0033:0x7f529d59e159 [ 1455.125015][T30321] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1455.125031][T30321] RSP: 002b:00007f529e441028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1455.125057][T30321] RAX: ffffffffffffffda RBX: 00007f529d825fa0 RCX: 00007f529d59e159 [ 1455.125072][T30321] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000000003 [ 1455.125084][T30321] RBP: 00007f529e441090 R08: 0000000000000000 R09: 0000000000000000 [ 1455.125097][T30321] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1455.125108][T30321] R13: 00007f529d826038 R14: 00007f529d825fa0 R15: 00007ffc7a452c08 [ 1455.125141][T30321] [ 1455.778041][T30333] xt_bpf: check failed: parse error [ 1456.669811][T30355] syzkaller0: entered promiscuous mode [ 1456.669835][T30355] syzkaller0: entered allmulticast mode [ 1457.160691][T30355] tipc: Enabled bearer , priority 0 [ 1457.175349][T24153] net_ratelimit: 18 callbacks suppressed [ 1457.175368][T24153] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 1457.275943][T30370] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6694'. [ 1457.280755][T30366] tipc: Resetting bearer [ 1457.309901][T30354] tipc: Resetting bearer [ 1457.511390][T30354] tipc: Disabling bearer [ 1457.555136][T24135] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 1457.580867][T30377] xt_bpf: check failed: parse error [ 1457.664434][T17162] block nbd71: Receive control failed (result -32) [ 1457.665083][ T38] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 1457.665372][ T53] block nbd71: Receive control failed (result -32) [ 1457.775015][T24135] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 1457.889677][T24147] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 1457.996108][ T38] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 1458.110923][T24135] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 1458.227520][T24135] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 1458.335086][T24135] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 1458.446692][T24135] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 1458.495438][T30402] netlink: 'syz.3.6707': attribute type 1 has an invalid length. [ 1458.583228][T30405] netlink: 108 bytes leftover after parsing attributes in process `syz.3.6707'. [ 1458.807419][T30411] xt_bpf: check failed: parse error [ 1458.857212][T30414] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6708'. [ 1459.132979][T30422] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6711'. [ 1459.271724][T30402] bond3: entered promiscuous mode [ 1459.286506][T30402] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1459.334626][ T53] block nbd72: Receive control failed (result -32) [ 1459.336531][T12269] block nbd72: Receive control failed (result -32) [ 1459.568951][ T53] block nbd73: Receive control failed (result -32) [ 1459.584455][T12269] block nbd73: Receive control failed (result -32) [ 1460.175353][T30447] xt_bpf: check failed: parse error [ 1460.647007][T30464] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6729'. [ 1460.931538][ T53] block nbd74: Receive control failed (result -32) [ 1460.938279][T12269] block nbd74: Receive control failed (result -32) [ 1460.996562][T12269] Bluetooth: hci5: command 0x0406 tx timeout [ 1461.405395][T30485] ovs-s!: entered promiscuous mode [ 1461.412225][T30484] xt_bpf: check failed: parse error [ 1461.590274][T30488] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input41 [ 1462.215108][T24137] net_ratelimit: 25 callbacks suppressed [ 1462.215132][T24137] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 1462.331483][T24138] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 1462.469995][T24138] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 1462.588291][T24138] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 1462.700080][T24137] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 1462.807970][T24138] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 1462.917541][T24138] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 1463.030897][T24135] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 1463.136165][T24138] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 1463.245946][T24138] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 1467.327781][ T38] net_ratelimit: 36 callbacks suppressed [ 1467.327805][ T38] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 1467.437165][T24147] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 1467.547997][T24147] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 1467.655014][T24147] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 1467.766129][T24147] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 1467.877741][T24147] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 1467.986114][T24135] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 1468.094918][T24138] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 1468.206710][T24137] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 1468.315652][T24138] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 1471.238682][T17162] Bluetooth: hci4: command 0x0406 tx timeout [ 1472.385040][ T38] net_ratelimit: 36 callbacks suppressed [ 1472.385063][ T38] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 1472.496082][ T38] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 1472.605603][T24138] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 1472.716131][T24135] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 1472.825723][T24147] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 1472.935783][T24138] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 1473.054982][T24135] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 1473.166115][T24135] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 1473.275605][T24135] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 1473.386204][T24135] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 1477.455515][T24138] net_ratelimit: 36 callbacks suppressed [ 1477.455539][T24138] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 1477.566093][T24153] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 1477.675146][ T38] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 1477.786726][ T38] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 1477.894965][T24147] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 1478.006078][T24153] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 1478.117101][T24153] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 1478.225536][ T38] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 1478.335064][T24153] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 1478.446882][T24137] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 1482.521694][T24135] net_ratelimit: 36 callbacks suppressed [ 1482.521719][T24135] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 1482.624418][T24153] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 1482.735719][T24137] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 1482.845145][T24137] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 1482.956337][T24138] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 1483.064990][T24137] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 1483.176931][T24137] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 1483.284973][T24135] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 1483.395650][T24153] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 1483.506713][T24138] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 1484.520348][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 1487.585160][T24153] net_ratelimit: 36 callbacks suppressed [ 1487.585183][T24153] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 1487.696736][T24138] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 1487.805076][T24138] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 1487.915863][T24135] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 1488.025732][T24147] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 1488.136169][T24135] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 1488.245097][T24147] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 1488.360001][T24138] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 1488.466177][T24137] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 1488.574989][T24147] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 1492.646022][ T38] net_ratelimit: 36 callbacks suppressed [ 1492.646045][ T38] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 1492.759361][T24135] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 1492.866652][T24135] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 1492.974954][T24135] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 1493.086233][ T38] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 1493.195703][T24147] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 1493.306300][ T38] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 1493.415064][T24147] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 1493.526740][T24137] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 1493.635402][ T38] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 1496.838442][T17162] Bluetooth: hci1: command 0x0406 tx timeout [ 1497.706049][ T38] net_ratelimit: 36 callbacks suppressed [ 1497.706072][ T38] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 1497.814974][ T38] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 1497.926733][ T38] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 1498.035496][T24147] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 1498.146129][T24147] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 1498.255927][T24135] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 1498.366187][T24137] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 1498.474403][T24137] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 1498.586708][T24135] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 1498.694860][T24147] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 1500.555043][T30504] wlan1 speed is unknown, defaulting to 1000 [ 1500.558998][T30504] virt_wifi0 speed is unknown, defaulting to 1000 [ 1500.876389][T30506] wlan1 speed is unknown, defaulting to 1000 [ 1500.912364][T30505] wlan1 speed is unknown, defaulting to 1000 [ 1500.993681][T30506] virt_wifi0 speed is unknown, defaulting to 1000 [ 1501.122068][T30505] virt_wifi0 speed is unknown, defaulting to 1000 [ 1503.030559][T30529] syzkaller0: entered promiscuous mode [ 1503.030581][T30529] syzkaller0: entered allmulticast mode [ 1503.052096][T30518] wlan1 speed is unknown, defaulting to 1000 [ 1503.055333][T30523] wlan1 speed is unknown, defaulting to 1000 [ 1503.069892][T24137] net_ratelimit: 18 callbacks suppressed [ 1503.069911][T24137] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 1503.072020][T30523] virt_wifi0 speed is unknown, defaulting to 1000 [ 1503.258061][T30518] virt_wifi0 speed is unknown, defaulting to 1000 [ 1503.305455][T24137] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 1503.369241][T30537] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input42 [ 1503.727234][T24153] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 1504.200143][T24138] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 1504.313209][T24152] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 1504.535319][T24147] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 1504.543042][T30544] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6752'. [ 1504.619532][T30547] xt_bpf: check failed: parse error [ 1504.654399][T24153] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 1504.764987][ T38] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 1504.874202][T24147] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 1504.989106][T24153] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 1505.409798][T30551] wlan1 speed is unknown, defaulting to 1000 [ 1505.443139][T30551] virt_wifi0 speed is unknown, defaulting to 1000 [ 1505.910901][T30558] netlink: 40 bytes leftover after parsing attributes in process `syz.6.6758'. [ 1506.261398][T30573] syzkaller0: entered promiscuous mode [ 1506.261422][T30573] syzkaller0: entered allmulticast mode [ 1506.537567][T30572] wlan1 speed is unknown, defaulting to 1000 [ 1506.550264][T30572] virt_wifi0 speed is unknown, defaulting to 1000 [ 1506.836085][T30590] netlink: 'syz.3.6766': attribute type 21 has an invalid length. [ 1506.836108][T30590] netlink: 128 bytes leftover after parsing attributes in process `syz.3.6766'. [ 1506.837942][T30579] netlink: 27 bytes leftover after parsing attributes in process `syz.6.6764'. [ 1506.918309][T30591] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6766'. [ 1506.947817][T30595] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6765'. [ 1507.256805][T30600] xt_bpf: check failed: parse error [ 1507.291134][T30590] netlink: 'syz.3.6766': attribute type 5 has an invalid length. [ 1507.291157][T30590] netlink: 3 bytes leftover after parsing attributes in process `syz.3.6766'. [ 1507.323291][T12269] block nbd75: Receive control failed (result -32) [ 1507.332899][T17162] block nbd75: Receive control failed (result -32) [ 1507.632489][T30602] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6768'. [ 1507.958275][T30607] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input43 [ 1508.155973][T24152] net_ratelimit: 16 callbacks suppressed [ 1508.155994][T24152] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 1508.265418][T24153] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 1508.340573][T30620] xt_policy: output policy not valid in PREROUTING and INPUT [ 1508.376082][T24152] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 1508.499784][T24147] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 1508.604194][T24153] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 1508.716171][T24152] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 1508.827251][T24153] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 1508.892129][T30625] netlink: 52 bytes leftover after parsing attributes in process `syz.1.6776'. [ 1508.954464][T24152] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 1509.207257][T30627] netlink: 40 bytes leftover after parsing attributes in process `syz.6.6777'. [ 1509.326473][T30629] xt_bpf: check failed: parse error [ 1509.386428][T24147] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 1509.508199][ T38] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 1509.823041][T17162] block nbd76: Receive control failed (result -32) [ 1509.832319][T12269] block nbd76: Receive control failed (result -32) [ 1509.905201][T30648] __nla_validate_parse: 2 callbacks suppressed [ 1509.905222][T30648] netlink: 48 bytes leftover after parsing attributes in process `syz.6.6781'. [ 1510.056774][T30651] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6782'. [ 1510.056882][T30651] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6782'. [ 1510.647851][T12269] block nbd77: Receive control failed (result -32) [ 1510.982803][T30672] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6791'. [ 1511.041981][T30672] netlink: 116 bytes leftover after parsing attributes in process `syz.3.6791'. [ 1511.372153][T30663] ip6t_ah: unknown flags 4 [ 1511.612828][T30681] tipc: Enabled bearer , priority 0 [ 1511.641324][T30686] FAULT_INJECTION: forcing a failure. [ 1511.641324][T30686] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1511.641358][T30686] CPU: 0 UID: 0 PID: 30686 Comm: syz.0.6797 Not tainted syzkaller #0 PREEMPT(full) [ 1511.641379][T30686] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1511.641391][T30686] Call Trace: [ 1511.641399][T30686] [ 1511.641408][T30686] dump_stack_lvl+0xe8/0x150 [ 1511.641438][T30686] should_fail_ex+0x410/0x560 [ 1511.641466][T30686] _copy_from_iter+0x1d3/0x1660 [ 1511.641496][T30686] ? __lock_acquire+0x747/0x2de0 [ 1511.641516][T30686] ? __pfx__copy_from_iter+0x10/0x10 [ 1511.641553][T30686] tun_get_user+0x26b/0x44d0 [ 1511.641589][T30686] ? aa_file_perm+0x18b/0x15f0 [ 1511.641622][T30686] ? aa_file_perm+0x4ed/0x15f0 [ 1511.641645][T30686] ? __pfx_tun_get_user+0x10/0x10 [ 1511.641668][T30686] ? __lock_acquire+0x747/0x2de0 [ 1511.641689][T30686] ? kstrtoull+0x137/0x1d0 [ 1511.641726][T30686] ? ref_tracker_alloc+0x341/0x4b0 [ 1511.641748][T30686] ? lock_acquire+0x115/0x350 [ 1511.641767][T30686] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 1511.641793][T30686] ? lock_acquire+0x115/0x350 [ 1511.641811][T30686] ? tun_get+0x1c/0x2f0 [ 1511.641836][T30686] ? tun_get+0x1c/0x2f0 [ 1511.641854][T30686] ? tun_get+0x1c/0x2f0 [ 1511.641878][T30686] tun_chr_write_iter+0x113/0x200 [ 1511.641901][T30686] vfs_write+0x612/0xba0 [ 1511.641937][T30686] ? __pfx_vfs_write+0x10/0x10 [ 1511.641974][T30686] ? __fget_files+0x2a/0x420 [ 1511.642015][T30686] ksys_write+0x150/0x270 [ 1511.642044][T30686] ? __pfx_ksys_write+0x10/0x10 [ 1511.642082][T30686] do_syscall_64+0x166/0x520 [ 1511.642107][T30686] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1511.642127][T30686] ? clear_bhb_loop+0x70/0xc0 [ 1511.642150][T30686] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1511.642169][T30686] RIP: 0033:0x7f529d59e159 [ 1511.642187][T30686] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1511.642203][T30686] RSP: 002b:00007f529e441028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1511.642223][T30686] RAX: ffffffffffffffda RBX: 00007f529d825fa0 RCX: 00007f529d59e159 [ 1511.642238][T30686] RDX: 000000000000004a RSI: 0000200000000140 RDI: 0000000000000006 [ 1511.642250][T30686] RBP: 00007f529e441090 R08: 0000000000000000 R09: 0000000000000000 [ 1511.642262][T30686] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1511.642273][T30686] R13: 00007f529d826038 R14: 00007f529d825fa0 R15: 00007ffc7a452c08 [ 1511.642304][T30686] [ 1512.221529][T30697] netlink: 52 bytes leftover after parsing attributes in process `syz.0.6801'. [ 1512.269345][T30697] bridge0: port 2(bridge_slave_1) entered disabled state [ 1512.269664][T30697] bridge0: port 1(bridge_slave_0) entered disabled state [ 1512.418848][T30704] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6804'. [ 1512.478518][T30704] netlink: 116 bytes leftover after parsing attributes in process `syz.4.6804'. [ 1512.676198][T30713] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6807'. [ 1512.690775][T30706] wlan1 speed is unknown, defaulting to 1000 [ 1512.720673][T30706] virt_wifi0 speed is unknown, defaulting to 1000 [ 1512.735862][T24137] IPVS: starting estimator thread 0... [ 1512.845148][T30717] IPVS: using max 26 ests per chain, 62400 per kthread [ 1513.154934][T30728] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input44 [ 1513.196267][T24137] net_ratelimit: 20 callbacks suppressed [ 1513.196287][T24137] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 1513.391241][T30731] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6811'. [ 1513.424370][T24152] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 1513.534514][T24137] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 1513.610303][T12269] block nbd78: Receive control failed (result -32) [ 1513.613587][T17162] block nbd78: Receive control failed (result -32) [ 1513.655849][ T38] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 1513.776502][T24137] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 1513.884436][ T38] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 1514.004483][T24137] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 1514.116371][T24153] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 1514.245038][T24137] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 1514.303290][T30746] syzkaller0: entered promiscuous mode [ 1514.303475][T30746] syzkaller0: entered allmulticast mode [ 1514.716146][T24152] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 1515.116906][T30767] FAULT_INJECTION: forcing a failure. [ 1515.116906][T30767] name failslab, interval 1, probability 0, space 0, times 0 [ 1515.116938][T30767] CPU: 1 UID: 0 PID: 30767 Comm: syz.0.6824 Not tainted syzkaller #0 PREEMPT(full) [ 1515.116960][T30767] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1515.116971][T30767] Call Trace: [ 1515.116979][T30767] [ 1515.116987][T30767] dump_stack_lvl+0xe8/0x150 [ 1515.117016][T30767] should_fail_ex+0x410/0x560 [ 1515.117042][T30767] should_failslab+0xa8/0x100 [ 1515.117067][T30767] __kmalloc_cache_noprof+0xa3/0x600 [ 1515.117094][T30767] ? rtnl_newlink+0x147/0x1c30 [ 1515.117115][T30767] ? rtnl_newlink+0x147/0x1c30 [ 1515.117137][T30767] ? stack_trace_save+0xa9/0x100 [ 1515.117168][T30767] rtnl_newlink+0x147/0x1c30 [ 1515.117189][T30767] ? stack_depot_save_flags+0x33/0x7f0 [ 1515.117209][T30767] ? __lock_acquire+0x670/0x2de0 [ 1515.117232][T30767] ? kasan_save_track+0x4f/0x80 [ 1515.117249][T30767] ? kasan_save_track+0x3e/0x80 [ 1515.117266][T30767] ? kasan_save_free_info+0x40/0x50 [ 1515.117290][T30767] ? __kasan_slab_free+0x5c/0x80 [ 1515.117310][T30767] ? __pfx_rtnl_newlink+0x10/0x10 [ 1515.117331][T30767] ? __netlink_deliver_tap+0x4f1/0x6e0 [ 1515.117357][T30767] ? netlink_deliver_tap+0x19c/0x1b0 [ 1515.117383][T30767] ? netlink_unicast+0x781/0x940 [ 1515.117406][T30767] ? netlink_sendmsg+0x813/0xb40 [ 1515.117422][T30767] ? sock_sendmsg_nosec+0x14e/0x190 [ 1515.117448][T30767] ? ____sys_sendmsg+0x54e/0x850 [ 1515.117470][T30767] ? ___sys_sendmsg+0x2a5/0x360 [ 1515.117491][T30767] ? __x64_sys_sendmsg+0x1b1/0x290 [ 1515.117513][T30767] ? do_syscall_64+0x166/0x520 [ 1515.117536][T30767] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1515.117589][T30767] ? kasan_quarantine_put+0xbb/0x1f0 [ 1515.117607][T30767] ? lockdep_hardirqs_on+0x7b/0x110 [ 1515.117635][T30767] ? nlmon_xmit+0xb0/0x100 [ 1515.117653][T30767] ? kmem_cache_free+0x182/0x650 [ 1515.117681][T30767] ? __lock_acquire+0x747/0x2de0 [ 1515.117706][T30767] ? __dev_queue_xmit+0x29b/0x3820 [ 1515.117736][T30767] ? __local_bh_enable_ip+0xd6/0x140 [ 1515.117760][T30767] ? lockdep_hardirqs_on+0x7b/0x110 [ 1515.117791][T30767] ? lock_acquire+0x115/0x350 [ 1515.117809][T30767] ? __pfx_rtnl_newlink+0x10/0x10 [ 1515.117843][T30767] ? __pfx_rtnl_newlink+0x10/0x10 [ 1515.117869][T30767] rtnetlink_rcv_msg+0x802/0xc00 [ 1515.117896][T30767] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 1515.117918][T30767] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1515.117943][T30767] ? __copy_skb_header+0xa3/0x4a0 [ 1515.117978][T30767] netlink_rcv_skb+0x226/0x4a0 [ 1515.118008][T30767] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1515.118032][T30767] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1515.118078][T30767] ? netlink_deliver_tap+0x2e/0x1b0 [ 1515.118106][T30767] ? netlink_deliver_tap+0x2e/0x1b0 [ 1515.118139][T30767] netlink_unicast+0x7bd/0x940 [ 1515.118176][T30767] netlink_sendmsg+0x813/0xb40 [ 1515.118204][T30767] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1515.118230][T30767] ? apparmor_socket_sendmsg+0x98/0x360 [ 1515.118254][T30767] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1515.118271][T30767] sock_sendmsg_nosec+0x14e/0x190 [ 1515.118300][T30767] ____sys_sendmsg+0x54e/0x850 [ 1515.118330][T30767] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1515.118360][T30767] ? import_iovec+0x73/0xa0 [ 1515.118386][T30767] ___sys_sendmsg+0x2a5/0x360 [ 1515.118408][T30767] ? __lock_acquire+0x747/0x2de0 [ 1515.118428][T30767] ? __pfx____sys_sendmsg+0x10/0x10 [ 1515.118483][T30767] ? __fget_files+0x2a/0x420 [ 1515.118507][T30767] ? __fget_files+0x3a2/0x420 [ 1515.118541][T30767] __x64_sys_sendmsg+0x1b1/0x290 [ 1515.118568][T30767] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1515.118613][T30767] do_syscall_64+0x166/0x520 [ 1515.118637][T30767] ? trace_irq_disable+0x3b/0x140 [ 1515.118654][T30767] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1515.118674][T30767] ? clear_bhb_loop+0x70/0xc0 [ 1515.118697][T30767] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1515.118716][T30767] RIP: 0033:0x7f529d59e159 [ 1515.118734][T30767] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1515.118750][T30767] RSP: 002b:00007f529e441028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1515.118771][T30767] RAX: ffffffffffffffda RBX: 00007f529d825fa0 RCX: 00007f529d59e159 [ 1515.118785][T30767] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 1515.118797][T30767] RBP: 00007f529e441090 R08: 0000000000000000 R09: 0000000000000000 [ 1515.118809][T30767] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1515.118820][T30767] R13: 00007f529d826038 R14: 00007f529d825fa0 R15: 00007ffc7a452c08 [ 1515.118851][T30767] [ 1515.310229][T30765] wlan1 speed is unknown, defaulting to 1000 [ 1515.332133][T30765] virt_wifi0 speed is unknown, defaulting to 1000 [ 1518.227434][T30817] wlan1 speed is unknown, defaulting to 1000 [ 1518.229455][T30817] virt_wifi0 speed is unknown, defaulting to 1000 [ 1518.395458][T24137] net_ratelimit: 28 callbacks suppressed [ 1518.395482][T24137] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 1518.517246][T24137] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 1518.609277][T30776] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1518.616192][T30777] debugfs: '1łą^!' already exists in 'ieee80211' [ 1518.854320][T24138] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 1518.967134][T24153] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 1519.428970][ T38] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 1519.636081][T24135] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 1519.679426][T30840] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input45 [ 1519.744448][T24152] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 1519.996336][T24147] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 1520.107261][T24147] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 1520.213505][T30856] netlink: 100 bytes leftover after parsing attributes in process `syz.4.6852'. [ 1520.215278][T24138] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 1520.255844][T30856] netlink: 'syz.4.6852': attribute type 6 has an invalid length. [ 1521.335328][T30883] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6863'. [ 1521.423581][T12269] block nbd79: Receive control failed (result -32) [ 1521.433329][T17162] block nbd79: Receive control failed (result -32) [ 1521.782420][T30890] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1521.941411][T30902] xt_bpf: check failed: parse error [ 1522.429129][T30910] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6870'. [ 1522.429167][T30910] netlink: 'syz.1.6870': attribute type 7 has an invalid length. [ 1522.429181][T30910] netlink: 'syz.1.6870': attribute type 8 has an invalid length. [ 1522.429193][T30910] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6870'. [ 1522.512641][T30911] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6870'. [ 1522.802263][T30910] dummy0: entered promiscuous mode [ 1522.817638][T30910] erspan0: entered promiscuous mode [ 1522.822351][T30910] debugfs: 'hsr0' already exists in 'hsr' [ 1522.822375][T30910] Cannot create hsr debugfs directory [ 1523.301475][T30925] bond0: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 1523.312042][T30925] bond0: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 1523.421576][T30918] wlan1 speed is unknown, defaulting to 1000 [ 1523.425666][T24137] net_ratelimit: 18 callbacks suppressed [ 1523.425683][T24137] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 1523.435794][T30918] virt_wifi0 speed is unknown, defaulting to 1000 [ 1523.450405][T30928] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6877'. [ 1523.574621][T30931] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6877'. [ 1523.668429][T30934] vcan0: tx drop: invalid da for name 0x0000000000000001 [ 1523.776324][T30938] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6878'. [ 1523.776355][T30938] nbd: nbd64 already in use [ 1523.800194][T30929] veth5: entered promiscuous mode [ 1523.828637][T30929] bond4: (slave veth5): Enslaving as an active interface with an up link [ 1523.835083][T24152] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 1523.970911][T30931] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1523.987385][T24138] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 1524.203204][T30941] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6881'. [ 1524.641521][T30956] xt_bpf: check failed: parse error [ 1524.871580][T30963] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input46 [ 1527.988250][T30949] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 1528.180241][T24137] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 1528.504647][T24152] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 1528.617942][T24152] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 1528.797127][ T38] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 1528.832169][T30987] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6893'. [ 1528.907058][T24153] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 1529.195281][T24137] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 1529.305674][ T38] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 1529.422719][T24153] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 1529.541209][ T38] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 1529.562214][T31001] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6899'. [ 1529.624912][T31003] xt_bpf: check failed: parse error [ 1529.648633][T24137] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 1529.755065][T24153] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 1530.310887][T31019] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6906'. [ 1530.539399][T12269] block nbd80: Receive control failed (result -32) [ 1530.548090][T17162] block nbd80: Receive control failed (result -32) [ 1530.807331][T31029] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6910'. [ 1531.062354][T31037] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6913'. [ 1531.406403][T31051] xt_SECMARK: mode already set to 1 cannot mix with rules for mode 9 [ 1531.442819][T31054] FAULT_INJECTION: forcing a failure. [ 1531.442819][T31054] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1531.442856][T31054] CPU: 0 UID: 0 PID: 31054 Comm: syz.6.6919 Not tainted syzkaller #0 PREEMPT(full) [ 1531.442878][T31054] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1531.442890][T31054] Call Trace: [ 1531.442898][T31054] [ 1531.442907][T31054] dump_stack_lvl+0xe8/0x150 [ 1531.442938][T31054] should_fail_ex+0x410/0x560 [ 1531.442965][T31054] _copy_from_user+0x2d/0xb0 [ 1531.442992][T31054] ___sys_sendmsg+0x1c6/0x360 [ 1531.443017][T31054] ? __lock_acquire+0x747/0x2de0 [ 1531.443041][T31054] ? __pfx____sys_sendmsg+0x10/0x10 [ 1531.443064][T31054] ? __lock_acquire+0x747/0x2de0 [ 1531.443088][T31054] ? kstrtouint+0x6e/0xe0 [ 1531.443156][T31054] __sys_sendmmsg+0x273/0x4d0 [ 1531.443187][T31054] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1531.443222][T31054] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1531.443263][T31054] ? ksys_write+0x242/0x270 [ 1531.443293][T31054] ? __pfx_ksys_write+0x10/0x10 [ 1531.443327][T31054] __x64_sys_sendmmsg+0xa0/0xc0 [ 1531.443354][T31054] do_syscall_64+0x166/0x520 [ 1531.443378][T31054] ? trace_irq_disable+0x3b/0x140 [ 1531.443396][T31054] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1531.443416][T31054] ? clear_bhb_loop+0x70/0xc0 [ 1531.443447][T31054] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1531.443466][T31054] RIP: 0033:0x7f1231f9e159 [ 1531.443485][T31054] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1531.443501][T31054] RSP: 002b:00007f1232f26028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1531.443522][T31054] RAX: ffffffffffffffda RBX: 00007f1232225fa0 RCX: 00007f1231f9e159 [ 1531.443536][T31054] RDX: 0400000000000292 RSI: 0000200000002c40 RDI: 0000000000000003 [ 1531.443550][T31054] RBP: 00007f1232f26090 R08: 0000000000000000 R09: 0000000000000000 [ 1531.443562][T31054] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1531.443574][T31054] R13: 00007f1232226038 R14: 00007f1232225fa0 R15: 00007ffe0bec7048 [ 1531.443606][T31054] [ 1531.625984][T31059] Cannot find set identified by id 65535 to match [ 1531.821556][T31063] tipc: Enabling of bearer rejected, failed to enable media [ 1532.215711][T31074] FAULT_INJECTION: forcing a failure. [ 1532.215711][T31074] name failslab, interval 1, probability 0, space 0, times 0 [ 1532.215742][T31074] CPU: 0 UID: 0 PID: 31074 Comm: syz.0.6928 Not tainted syzkaller #0 PREEMPT(full) [ 1532.215764][T31074] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1532.215776][T31074] Call Trace: [ 1532.215784][T31074] [ 1532.215793][T31074] dump_stack_lvl+0xe8/0x150 [ 1532.215824][T31074] should_fail_ex+0x410/0x560 [ 1532.215851][T31074] should_failslab+0xa8/0x100 [ 1532.215875][T31074] ? __inet_hash_connect+0xef0/0x2630 [ 1532.215902][T31074] kmem_cache_alloc_noprof+0xa1/0x600 [ 1532.215928][T31074] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1532.215956][T31074] ? __inet_hash_connect+0xef0/0x2630 [ 1532.215989][T31074] __inet_hash_connect+0xef0/0x2630 [ 1532.216019][T31074] ? __pfx___inet_check_established+0x10/0x10 [ 1532.216057][T31074] ? __inet_hash_connect+0x62e/0x2630 [ 1532.216090][T31074] ? __pfx___inet_hash_connect+0x10/0x10 [ 1532.216123][T31074] ? inet_hash_connect+0xf1/0x380 [ 1532.216154][T31074] tcp_v4_connect+0xcee/0x1950 [ 1532.216195][T31074] ? __pfx_tcp_v4_connect+0x10/0x10 [ 1532.216229][T31074] __inet_stream_connect+0x258/0xe00 [ 1532.216256][T31074] ? do_raw_spin_lock+0x12b/0x2f0 [ 1532.216285][T31074] ? __pfx___inet_stream_connect+0x10/0x10 [ 1532.216309][T31074] ? inet_stream_connect+0x51/0xa0 [ 1532.216333][T31074] ? __local_bh_enable_ip+0xd6/0x140 [ 1532.216361][T31074] inet_stream_connect+0x66/0xa0 [ 1532.216385][T31074] __sys_connect+0x316/0x450 [ 1532.216411][T31074] ? __pfx___sys_connect+0x10/0x10 [ 1532.216446][T31074] ? __pfx_ksys_write+0x10/0x10 [ 1532.216485][T31074] __x64_sys_connect+0x7a/0x90 [ 1532.216508][T31074] do_syscall_64+0x166/0x520 [ 1532.216532][T31074] ? trace_irq_disable+0x3b/0x140 [ 1532.216559][T31074] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1532.216579][T31074] ? clear_bhb_loop+0x70/0xc0 [ 1532.216604][T31074] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1532.216623][T31074] RIP: 0033:0x7f529d59e159 [ 1532.216641][T31074] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1532.216657][T31074] RSP: 002b:00007f529e441028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 1532.216678][T31074] RAX: ffffffffffffffda RBX: 00007f529d825fa0 RCX: 00007f529d59e159 [ 1532.216692][T31074] RDX: 0000000000000010 RSI: 0000200000000300 RDI: 0000000000000004 [ 1532.216705][T31074] RBP: 00007f529e441090 R08: 0000000000000000 R09: 0000000000000000 [ 1532.216717][T31074] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1532.216728][T31074] R13: 00007f529d826038 R14: 00007f529d825fa0 R15: 00007ffc7a452c08 [ 1532.216759][T31074] [ 1532.288121][T31072] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6927'. [ 1532.401592][T31077] FAULT_INJECTION: forcing a failure. [ 1532.401592][T31077] name failslab, interval 1, probability 0, space 0, times 0 [ 1532.401646][T31077] CPU: 0 UID: 0 PID: 31077 Comm: syz.3.6931 Not tainted syzkaller #0 PREEMPT(full) [ 1532.401666][T31077] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1532.401678][T31077] Call Trace: [ 1532.401686][T31077] [ 1532.401693][T31077] dump_stack_lvl+0xe8/0x150 [ 1532.401723][T31077] should_fail_ex+0x410/0x560 [ 1532.401749][T31077] should_failslab+0xa8/0x100 [ 1532.401773][T31077] __kmalloc_cache_noprof+0xa3/0x600 [ 1532.401792][T31077] ? __kmalloc_cache_noprof+0x14d/0x600 [ 1532.401808][T31077] ? sctp_add_bind_addr+0x8c/0x370 [ 1532.401834][T31077] ? sctp_add_bind_addr+0x8c/0x370 [ 1532.401868][T31077] sctp_add_bind_addr+0x8c/0x370 [ 1532.401898][T31077] sctp_copy_local_addr_list+0x31a/0x4e0 [ 1532.401929][T31077] ? sctp_copy_local_addr_list+0xa3/0x4e0 [ 1532.401958][T31077] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 1532.401991][T31077] ? sctp_v4_is_any+0x35/0x60 [ 1532.402008][T31077] ? sctp_copy_one_addr+0x93/0x360 [ 1532.402039][T31077] sctp_bind_addr_copy+0xb3/0x3c0 [ 1532.402067][T31077] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 1532.402096][T31077] sctp_connect_new_asoc+0x2ff/0x6b0 [ 1532.402121][T31077] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 1532.402145][T31077] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 1532.402168][T31077] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 1532.402188][T31077] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 1532.402210][T31077] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 1532.402233][T31077] ? security_sctp_bind_connect+0x7e/0x2c0 [ 1532.402254][T31077] sctp_sendmsg+0x159b/0x2d00 [ 1532.402288][T31077] ? __pfx_sctp_sendmsg+0x10/0x10 [ 1532.402314][T31077] ? __lock_acquire+0x747/0x2de0 [ 1532.402345][T31077] ? aa_sock_msg_perm+0xfc/0x210 [ 1532.402366][T31077] ? sock_rps_record_flow+0x19/0x350 [ 1532.402388][T31077] ? inet_sendmsg+0x298/0x320 [ 1532.402405][T31077] ? apparmor_socket_sendmsg+0x98/0x360 [ 1532.402427][T31077] ? __pfx_inet_sendmsg+0x10/0x10 [ 1532.402444][T31077] sock_sendmsg_nosec+0x10f/0x190 [ 1532.402475][T31077] ____sys_sendmsg+0x54e/0x850 [ 1532.402503][T31077] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1532.402542][T31077] ? import_iovec+0x73/0xa0 [ 1532.402568][T31077] ___sys_sendmsg+0x2a5/0x360 [ 1532.402593][T31077] ? __lock_acquire+0x747/0x2de0 [ 1532.402615][T31077] ? __pfx____sys_sendmsg+0x10/0x10 [ 1532.402674][T31077] ? __fget_files+0x2a/0x420 [ 1532.402697][T31077] ? __fget_files+0x3a2/0x420 [ 1532.402731][T31077] __x64_sys_sendmsg+0x1b1/0x290 [ 1532.402757][T31077] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1532.402802][T31077] do_syscall_64+0x166/0x520 [ 1532.402826][T31077] ? trace_irq_disable+0x3b/0x140 [ 1532.402843][T31077] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1532.402862][T31077] ? clear_bhb_loop+0x70/0xc0 [ 1532.402884][T31077] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1532.402903][T31077] RIP: 0033:0x7f1585f9e159 [ 1532.402921][T31077] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1532.402935][T31077] RSP: 002b:00007f1586f21028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1532.402954][T31077] RAX: ffffffffffffffda RBX: 00007f1586225fa0 RCX: 00007f1585f9e159 [ 1532.402967][T31077] RDX: 0000000004008010 RSI: 0000200000000ac0 RDI: 0000000000000003 [ 1532.402979][T31077] RBP: 00007f1586f21090 R08: 0000000000000000 R09: 0000000000000000 [ 1532.402991][T31077] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1532.403002][T31077] R13: 00007f1586226038 R14: 00007f1586225fa0 R15: 00007fff1b64f9f8 [ 1532.403033][T31077] [ 1533.003530][T31079] syzkaller0: entered promiscuous mode [ 1533.003556][T31079] syzkaller0: entered allmulticast mode [ 1533.019041][T31083] hsr0: entered allmulticast mode [ 1533.019066][T31083] hsr_slave_0: entered allmulticast mode [ 1533.019087][T31083] hsr_slave_1: entered allmulticast mode [ 1533.033661][T31083] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6933'. [ 1533.052462][T31083] hsr_slave_0: left promiscuous mode [ 1533.085946][T31083] hsr_slave_1: left promiscuous mode [ 1533.132293][T31087] netlink: 'syz.1.6935': attribute type 1 has an invalid length. [ 1533.160434][T31083] hsr0 (unregistering): left allmulticast mode [ 1538.898352][T31087] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 1539.006550][T24152] net_ratelimit: 24 callbacks suppressed [ 1539.006574][T24152] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 1539.134687][T24152] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 1539.244326][T24152] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 1539.245175][T31122] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6948'. [ 1539.368098][T24143] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 1539.419847][T17162] block nbd81: Receive control failed (result -32) [ 1539.432423][T12269] block nbd81: Receive control failed (result -32) [ 1539.477862][T24143] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 1539.584837][T24152] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 1539.795094][ T38] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 1540.022249][T31144] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1540.046180][T31144] 8021q: adding VLAN 0 to HW filter on device team0 [ 1540.348617][T31144] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1540.348645][T31144] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1540.481418][T31144] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1540.482660][T31144] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1540.501574][T31144] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1540.503054][T31144] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1540.525493][T31144] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1540.526325][T31144] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1540.559293][T31144] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1540.562224][T31144] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1540.621228][T31144] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1540.649048][T24138] bridge0: port 1(bridge_slave_0) entered blocking state [ 1540.649158][T24138] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1540.651561][T24138] bridge0: port 2(bridge_slave_1) entered blocking state [ 1540.651683][T24138] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1540.812717][T24135] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1540.812753][T24135] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1540.822591][T24135] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 1540.822639][T24135] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1540.822664][T24135] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1540.822711][T24135] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1540.822925][T24135] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1540.822959][T24135] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1540.822981][T24135] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1540.836219][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 1540.940765][T24152] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 1541.044468][T24153] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 1541.364316][T31163] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input47 [ 1542.073124][T31181] xt_bpf: check failed: parse error [ 1542.319542][T31187] IPVS: sync thread started: state = MASTER, mcast_ifn = lo, syncid = 0, id = 0 [ 1542.370949][T31183] wlan1 speed is unknown, defaulting to 1000 [ 1542.380191][T31180] IPVS: stopping master sync thread 31187 ... [ 1542.453047][T31183] virt_wifi0 speed is unknown, defaulting to 1000 [ 1543.396258][T31206] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6973'. [ 1543.731580][T31210] netlink: 'syz.0.6975': attribute type 4 has an invalid length. [ 1543.731606][T31210] netlink: 152 bytes leftover after parsing attributes in process `syz.0.6975'. [ 1544.243560][T31220] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input48 [ 1544.414471][T24147] net_ratelimit: 22 callbacks suppressed [ 1544.414505][T24147] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 1544.524107][T26977] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 1544.728216][T26977] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 1544.835931][T24153] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 1544.870986][T31237] FAULT_INJECTION: forcing a failure. [ 1544.870986][T31237] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1544.871019][T31237] CPU: 0 UID: 0 PID: 31237 Comm: syz.3.6983 Not tainted syzkaller #0 PREEMPT(full) [ 1544.871042][T31237] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1544.871054][T31237] Call Trace: [ 1544.871062][T31237] [ 1544.871070][T31237] dump_stack_lvl+0xe8/0x150 [ 1544.871101][T31237] should_fail_ex+0x410/0x560 [ 1544.871128][T31237] _copy_from_user+0x2d/0xb0 [ 1544.871155][T31237] ___sys_recvmsg+0x173/0x5a0 [ 1544.871186][T31237] ? __pfx____sys_recvmsg+0x10/0x10 [ 1544.871217][T31237] ? lock_acquire+0x115/0x350 [ 1544.871268][T31237] do_recvmmsg+0x31a/0x7f0 [ 1544.871302][T31237] ? __pfx_do_recvmmsg+0x10/0x10 [ 1544.871339][T31237] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1544.871367][T31237] ? __fget_files+0x3a2/0x420 [ 1544.871403][T31237] __x64_sys_recvmmsg+0x198/0x250 [ 1544.871432][T31237] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1544.871469][T31237] do_syscall_64+0x166/0x520 [ 1544.871495][T31237] ? trace_irq_disable+0x3b/0x140 [ 1544.871515][T31237] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1544.871535][T31237] ? clear_bhb_loop+0x70/0xc0 [ 1544.871560][T31237] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1544.871580][T31237] RIP: 0033:0x7f1585f9e159 [ 1544.871606][T31237] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1544.871622][T31237] RSP: 002b:00007f1586f21028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1544.871643][T31237] RAX: ffffffffffffffda RBX: 00007f1586225fa0 RCX: 00007f1585f9e159 [ 1544.871659][T31237] RDX: 0000000000000700 RSI: 0000200000001140 RDI: 0000000000000004 [ 1544.871673][T31237] RBP: 00007f1586f21090 R08: 0000000000000000 R09: 0000000000000000 [ 1544.871686][T31237] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000002 [ 1544.871699][T31237] R13: 00007f1586226038 R14: 00007f1586225fa0 R15: 00007fff1b64f9f8 [ 1544.871731][T31237] [ 1544.965619][T31238] vlan3: entered promiscuous mode [ 1544.965639][T31238] bridge0: entered promiscuous mode [ 1545.215341][T24153] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 1545.224649][T31239] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.6982'. [ 1545.334490][T24147] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 1545.367009][T31248] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6984'. [ 1545.444470][T24138] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 1545.555194][T24135] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 1545.664499][T24138] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 1545.777929][T24147] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 1545.932697][T31256] wlan1 speed is unknown, defaulting to 1000 [ 1545.950669][T31256] virt_wifi0 speed is unknown, defaulting to 1000 [ 1545.966746][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 1546.451216][T31269] netlink: 27 bytes leftover after parsing attributes in process `syz.3.6992'. [ 1546.713305][T31266] wlan1 speed is unknown, defaulting to 1000 [ 1546.723843][T31266] virt_wifi0 speed is unknown, defaulting to 1000 [ 1547.737725][T31289] netlink: 40 bytes leftover after parsing attributes in process `syz.6.6995'. [ 1549.648542][T31322] FAULT_INJECTION: forcing a failure. [ 1549.648542][T31322] name failslab, interval 1, probability 0, space 0, times 0 [ 1549.648573][T31322] CPU: 1 UID: 0 PID: 31322 Comm: syz.1.7008 Not tainted syzkaller #0 PREEMPT(full) [ 1549.648600][T31322] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1549.648611][T31322] Call Trace: [ 1549.648619][T31322] [ 1549.648627][T31322] dump_stack_lvl+0xe8/0x150 [ 1549.648657][T31322] should_fail_ex+0x410/0x560 [ 1549.648680][T31322] ? __alloc_skb+0x1db/0x7a0 [ 1549.648700][T31322] should_failslab+0xa8/0x100 [ 1549.648722][T31322] ? __alloc_skb+0x1db/0x7a0 [ 1549.648741][T31322] kmem_cache_alloc_node_noprof+0xa1/0x610 [ 1549.648769][T31322] ? __alloc_skb+0x18d/0x7a0 [ 1549.648790][T31322] ? __alloc_skb+0x1db/0x7a0 [ 1549.648816][T31322] __alloc_skb+0x1db/0x7a0 [ 1549.648838][T31322] netlink_sendmsg+0x5d4/0xb40 [ 1549.648865][T31322] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1549.648891][T31322] ? apparmor_socket_sendmsg+0x98/0x360 [ 1549.648913][T31322] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1549.648930][T31322] sock_sendmsg_nosec+0x14e/0x190 [ 1549.648958][T31322] ____sys_sendmsg+0x54e/0x850 [ 1549.648988][T31322] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1549.649020][T31322] ? import_iovec+0x73/0xa0 [ 1549.649044][T31322] ___sys_sendmsg+0x2a5/0x360 [ 1549.649066][T31322] ? __lock_acquire+0x747/0x2de0 [ 1549.649090][T31322] ? __pfx____sys_sendmsg+0x10/0x10 [ 1549.649148][T31322] ? __fget_files+0x2a/0x420 [ 1549.649171][T31322] ? __fget_files+0x3a2/0x420 [ 1549.649206][T31322] __x64_sys_sendmsg+0x1b1/0x290 [ 1549.649232][T31322] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1549.649278][T31322] do_syscall_64+0x166/0x520 [ 1549.649303][T31322] ? trace_irq_disable+0x3b/0x140 [ 1549.649321][T31322] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1549.649341][T31322] ? clear_bhb_loop+0x70/0xc0 [ 1549.649368][T31322] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1549.649386][T31322] RIP: 0033:0x7f4b6239e159 [ 1549.649403][T31322] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1549.649418][T31322] RSP: 002b:00007f4b63207028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1549.649438][T31322] RAX: ffffffffffffffda RBX: 00007f4b62625fa0 RCX: 00007f4b6239e159 [ 1549.649452][T31322] RDX: 0000000000004004 RSI: 0000200000000680 RDI: 0000000000000004 [ 1549.649464][T31322] RBP: 00007f4b63207090 R08: 0000000000000000 R09: 0000000000000000 [ 1549.649474][T31322] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1549.649485][T31322] R13: 00007f4b62626038 R14: 00007f4b62625fa0 R15: 00007ffd1ec486a8 [ 1549.649514][T31322] [ 1549.727880][T31318] FAULT_INJECTION: forcing a failure. [ 1549.727880][T31318] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1549.727909][T31318] CPU: 0 UID: 0 PID: 31318 Comm: syz.0.7007 Not tainted syzkaller #0 PREEMPT(full) [ 1549.727930][T31318] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1549.727940][T31318] Call Trace: [ 1549.727948][T31318] [ 1549.727956][T31318] dump_stack_lvl+0xe8/0x150 [ 1549.727986][T31318] should_fail_ex+0x410/0x560 [ 1549.728012][T31318] _copy_from_user+0x2d/0xb0 [ 1549.728037][T31318] ___sys_recvmsg+0x173/0x5a0 [ 1549.728069][T31318] ? __pfx____sys_recvmsg+0x10/0x10 [ 1549.728105][T31318] ? lock_acquire+0x115/0x350 [ 1549.728151][T31318] do_recvmmsg+0x31a/0x7f0 [ 1549.728182][T31318] ? __pfx_do_recvmmsg+0x10/0x10 [ 1549.728217][T31318] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1549.728244][T31318] ? __fget_files+0x3a2/0x420 [ 1549.728279][T31318] __x64_sys_recvmmsg+0x198/0x250 [ 1549.728306][T31318] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1549.728342][T31318] do_syscall_64+0x166/0x520 [ 1549.728366][T31318] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1549.728385][T31318] ? clear_bhb_loop+0x70/0xc0 [ 1549.728407][T31318] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1549.728426][T31318] RIP: 0033:0x7f529d59e159 [ 1549.728446][T31318] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1549.728462][T31318] RSP: 002b:00007f529e441028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1549.728481][T31318] RAX: ffffffffffffffda RBX: 00007f529d825fa0 RCX: 00007f529d59e159 [ 1549.728495][T31318] RDX: 03fffffffffffe83 RSI: 00002000000018c0 RDI: 0000000000000003 [ 1549.728507][T31318] RBP: 00007f529e441090 R08: 0000000000000000 R09: 0000000000000000 [ 1549.728520][T31318] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000002 [ 1549.728531][T31318] R13: 00007f529d826038 R14: 00007f529d825fa0 R15: 00007ffc7a452c08 [ 1549.728561][T31318] [ 1550.312654][T31320] netlink: 116 bytes leftover after parsing attributes in process `syz.6.7009'. [ 1550.325494][ T2998] net_ratelimit: 19 callbacks suppressed [ 1550.325517][ T2998] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 1550.438517][T24120] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 1550.774764][T24120] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 1550.986247][T31343] IPVS: Scheduler module ip_vs_sip not found [ 1551.222908][T31349] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7018'. [ 1551.286559][ T8672] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 1551.407725][T24140] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 1551.826487][T31370] netlink: 976 bytes leftover after parsing attributes in process `syz.0.7021'. [ 1551.845504][T24140] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 1551.940873][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1551.941517][T31379] netlink: 116 bytes leftover after parsing attributes in process `syz.3.7024'. [ 1551.958502][T24131] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 1552.064529][T24147] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 1552.161559][T31383] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7026'. [ 1552.199960][ T8672] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 1552.321574][T31386] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7029'. [ 1552.321665][T31386] netlink: 44 bytes leftover after parsing attributes in process `syz.1.7029'. [ 1552.321679][T31386] tipc: Invalid UDP bearer configuration [ 1552.321718][T31386] tipc: Enabling of bearer rejected, failed to enable media [ 1552.376248][T31386] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7029'. [ 1552.379638][T31390] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7031'. [ 1552.428801][T31386] bond4: option lacp_active: invalid value (5) [ 1552.468106][T31386] bond4 (unregistering): Released all slaves [ 1552.586281][T31391] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7028'. [ 1552.733196][T24147] IPVS: starting estimator thread 0... [ 1552.878427][T31399] IPVS: using max 26 ests per chain, 62400 per kthread [ 1554.102388][T31428] netlink: 'syz.0.7042': attribute type 4 has an invalid length. [ 1554.145923][T31432] netlink: 'syz.1.7044': attribute type 30 has an invalid length. [ 1554.166481][T31428] netlink: 'syz.0.7042': attribute type 4 has an invalid length. [ 1554.189212][T31432] vxlan0: entered promiscuous mode [ 1554.189234][T31432] vxlan0: entered allmulticast mode [ 1554.229976][T31435] xt_bpf: check failed: parse error [ 1554.270765][T31439] netlink: 'syz.4.7043': attribute type 16 has an invalid length. [ 1555.068788][T31468] netlink: 'syz.3.7053': attribute type 10 has an invalid length. [ 1555.404447][T24131] net_ratelimit: 22 callbacks suppressed [ 1555.404471][T24131] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 1555.496787][T31480] __nla_validate_parse: 5 callbacks suppressed [ 1555.496805][T31480] netlink: 208 bytes leftover after parsing attributes in process `syz.3.7058'. [ 1555.501469][T31481] xt_bpf: check failed: parse error [ 1556.198544][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1556.459418][T24131] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 1556.611512][T31498] netlink: 'syz.1.7060': attribute type 39 has an invalid length. [ 1556.662492][T31497] bridge0: port 1(bridge_slave_0) entered blocking state [ 1556.662663][T31497] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1556.722135][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1556.752201][T31497] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1556.768206][T31497] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1556.786312][T31497] A link change request failed with some changes committed already. Interface syzkaller0 may have been left with an inconsistent configuration, please check. [ 1556.948835][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1556.972198][T31503] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7062'. [ 1557.097661][ T8697] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 1557.235973][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 1557.349900][T31517] netlink: 'syz.0.7068': attribute type 4 has an invalid length. [ 1557.349924][T31517] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7068'. [ 1557.350313][T31518] xt_hashlimit: size too large, truncated to 1048576 [ 1557.389424][T31517] netlink: 'syz.0.7068': attribute type 4 has an invalid length. [ 1557.389444][T31517] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7068'. [ 1557.455433][T31517] netlink: 'syz.0.7068': attribute type 4 has an invalid length. [ 1557.455455][T31517] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7068'. [ 1557.455991][T31517] netlink: 'syz.0.7068': attribute type 4 has an invalid length. [ 1557.456007][T31517] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7068'. [ 1557.456452][T31517] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7068'. [ 1557.662341][T31518] xt_hashlimit: size too large, truncated to 1048576 [ 1557.759962][T24131] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 1557.865271][T24131] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 1557.946196][T31518] xt_hashlimit: size too large, truncated to 1048576 [ 1558.181051][T31529] wlan1 speed is unknown, defaulting to 1000 [ 1558.196245][T31529] virt_wifi0 speed is unknown, defaulting to 1000 [ 1558.304087][T31532] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7070'. [ 1558.839609][T31543] xt_bpf: check failed: parse error [ 1558.949621][T31552] netlink: 40 bytes leftover after parsing attributes in process `syz.3.7077'. [ 1559.875165][T31571] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7085'. [ 1560.195345][T12269] block nbd82: Receive control failed (result -32) [ 1560.196495][T17162] block nbd82: Receive control failed (result -32) [ 1560.510799][ T8697] net_ratelimit: 19 callbacks suppressed [ 1560.510821][ T8697] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 1560.654321][ T8697] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 1560.786135][T24129] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 1560.894433][T24129] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 1560.899032][T31601] block nbd0: reconnected socket [ 1560.995143][T17162] block nbd0: Receive control failed (result -32) [ 1561.015275][T24129] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 1561.657307][T31625] ip_tables: iptables: counters copy to user failed while replacing table [ 1561.784338][T31629] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7100'. [ 1562.278084][T24147] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 1562.466297][T24131] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 1562.489339][T31641] syzkaller0: entered promiscuous mode [ 1562.489364][T31641] syzkaller0: entered allmulticast mode [ 1562.540406][T31644] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1562.574988][T24141] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 1562.800676][T31649] netlink: 40 bytes leftover after parsing attributes in process `syz.3.7107'. [ 1562.853795][T24147] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 1562.863017][T31649] netlink: 116 bytes leftover after parsing attributes in process `syz.3.7107'. [ 1563.721047][T31679] tipc: Enabled bearer , priority 10 [ 1563.890374][T31681] batman_adv: batadv0: Adding interface: virt_wifi0 [ 1563.890393][T31681] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1563.890428][T31681] batman_adv: batadv0: Interface activated: virt_wifi0 [ 1564.160075][T31694] netlink: 116 bytes leftover after parsing attributes in process `syz.4.7121'. [ 1564.323517][T31701] xt_TCPMSS: Only works on TCP SYN packets [ 1564.845307][T15219] tipc: Node number set to 973078528 [ 1565.204552][T31720] netlink: 116 bytes leftover after parsing attributes in process `syz.4.7133'. [ 1565.342272][T31727] syzkaller0: entered promiscuous mode [ 1565.342296][T31727] syzkaller0: entered allmulticast mode [ 1565.449676][T31729] netlink: 40 bytes leftover after parsing attributes in process `syz.4.7137'. [ 1565.545319][ T2998] net_ratelimit: 14 callbacks suppressed [ 1565.545341][ T2998] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 1565.613204][T31730] netlink: 116 bytes leftover after parsing attributes in process `syz.4.7137'. [ 1565.654282][T24147] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 1565.896888][T31737] xt_bpf: check failed: parse error [ 1566.104519][T24147] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 1566.222296][ T2998] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 1566.329464][T24141] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 1566.369269][T31749] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7145'. [ 1566.438829][T24140] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 1566.455171][T31748] netlink: 32 bytes leftover after parsing attributes in process `syz.4.7144'. [ 1566.493255][T31751] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1566.576369][ T8672] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 1566.699109][T26973] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 1566.807594][T24141] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 1566.959062][T31775] netlink: 48 bytes leftover after parsing attributes in process `syz.6.7152'. [ 1567.053550][T31777] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7154'. [ 1567.915243][T12269] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1567.920156][T12269] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1567.922760][T12269] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1567.950867][T12269] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1567.952513][T12269] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1567.986370][T17162] [ 1567.988749][T17162] ====================================================== [ 1567.995778][T17162] WARNING: possible circular locking dependency detected [ 1568.002819][T17162] syzkaller #0 Not tainted [ 1568.007242][T17162] ------------------------------------------------------ [ 1568.014267][T17162] kworker/u9:2/17162 is trying to acquire lock: [ 1568.020517][T17162] ffff88801c2d4a10 (&root->kernfs_iattr_rwsem){++++}-{4:4}, at: kernfs_link_sibling+0x4c7/0x5a0 [ 1568.030998][T17162] [ 1568.030998][T17162] but task is already holding lock: [ 1568.038371][T17162] ffff88801c2d4980 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_add_one+0x41/0x6f0 [ 1568.047786][T17162] [ 1568.047786][T17162] which lock already depends on the new lock. [ 1568.047786][T17162] [ 1568.058202][T17162] [ 1568.058202][T17162] the existing dependency chain (in reverse order) is: [ 1568.067226][T17162] [ 1568.067226][T17162] -> #9 (&root->kernfs_rwsem){++++}-{4:4}: [ 1568.075260][T17162] down_write+0x96/0x200 [ 1568.080051][T17162] kernfs_add_one+0x41/0x6f0 [ 1568.085174][T17162] kernfs_create_dir_ns+0x1a1/0x230 [ 1568.090908][T17162] internal_create_group+0x440/0x1180 [ 1568.096834][T17162] cpuhp_invoke_callback+0x434/0x810 [ 1568.102643][T17162] cpuhp_issue_call+0x3f0/0x750 [ 1568.108011][T17162] __cpuhp_setup_state_cpuslocked+0x3f4/0x6f0 [ 1568.114600][T17162] __cpuhp_setup_state+0x3f/0x60 [ 1568.120050][T17162] do_one_initcall+0x250/0x870 [ 1568.125325][T17162] do_initcall_level+0x10a/0x1a0 [ 1568.130889][T17162] do_initcalls+0x59/0xa0 [ 1568.135737][T17162] kernel_init_freeable+0x29d/0x3e0 [ 1568.141444][T17162] kernel_init+0x22/0x1d0 [ 1568.146279][T17162] ret_from_fork+0x514/0xb70 [ 1568.151381][T17162] ret_from_fork_asm+0x1a/0x30 [ 1568.156671][T17162] [ 1568.156671][T17162] -> #8 (cpuhp_state_mutex){+.+.}-{4:4}: [ 1568.164479][T17162] [ 1568.164479][T17162] -> #7 (cpu_hotplug_lock){++++}-{0:0}: [ 1568.172194][T17162] cpus_read_lock+0x42/0x160 [ 1568.177295][T17162] static_key_slow_inc+0x12/0x30 [ 1568.182739][T17162] nbd_genl_reconnect_sock_cb+0x69a/0xbb0 [ 1568.188964][T17162] nbd_genl_foreach_sock+0x265/0x450 [ 1568.194755][T17162] nbd_genl_reconfigure+0xbbb/0x1040 [ 1568.200544][T17162] genl_family_rcv_msg_doit+0x233/0x340 [ 1568.206602][T17162] genl_rcv_msg+0x614/0x7a0 [ 1568.211618][T17162] netlink_rcv_skb+0x226/0x4a0 [ 1568.216894][T17162] genl_rcv+0x28/0x40 [ 1568.221387][T17162] netlink_unicast+0x7bd/0x940 [ 1568.226661][T17162] netlink_sendmsg+0x813/0xb40 [ 1568.231929][T17162] sock_sendmsg_nosec+0x14e/0x190 [ 1568.237464][T17162] ____sys_sendmsg+0x54e/0x850 [ 1568.242738][T17162] ___sys_sendmsg+0x2a5/0x360 [ 1568.247924][T17162] __x64_sys_sendmsg+0x1b1/0x290 [ 1568.253369][T17162] do_syscall_64+0x166/0x520 [ 1568.258469][T17162] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1568.264867][T17162] [ 1568.264867][T17162] -> #6 (&nsock->tx_lock){+.+.}-{4:4}: [ 1568.272494][T17162] __mutex_lock+0x19d/0x1550 [ 1568.277596][T17162] nbd_queue_rq+0x373/0xff0 [ 1568.282603][T17162] blk_mq_dispatch_rq_list+0x499/0x1990 [ 1568.288655][T17162] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 1568.295490][T17162] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 1568.301978][T17162] blk_mq_run_work_fn+0x16c/0x300 [ 1568.307510][T17162] process_scheduled_works+0xc3d/0x1630 [ 1568.313567][T17162] worker_thread+0xa47/0xfb0 [ 1568.318677][T17162] kthread+0x38b/0x480 [ 1568.323256][T17162] ret_from_fork+0x514/0xb70 [ 1568.328361][T17162] ret_from_fork_asm+0x1a/0x30 [ 1568.333636][T17162] [ 1568.333636][T17162] -> #5 (&cmd->lock){+.+.}-{4:4}: [ 1568.340838][T17162] __mutex_lock+0x19d/0x1550 [ 1568.345944][T17162] nbd_queue_rq+0xc1/0xff0 [ 1568.350863][T17162] blk_mq_dispatch_rq_list+0x499/0x1990 [ 1568.356914][T17162] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 1568.363753][T17162] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 1568.370245][T17162] blk_mq_run_work_fn+0x16c/0x300 [ 1568.375783][T17162] process_scheduled_works+0xc3d/0x1630 [ 1568.381837][T17162] worker_thread+0xa47/0xfb0 [ 1568.386934][T17162] kthread+0x38b/0x480 [ 1568.391505][T17162] ret_from_fork+0x514/0xb70 [ 1568.396604][T17162] ret_from_fork_asm+0x1a/0x30 [ 1568.401879][T17162] [ 1568.401879][T17162] -> #4 (set->srcu){.+.+}-{0:0}: [ 1568.408990][T17162] __synchronize_srcu+0xc9/0x2f0 [ 1568.414436][T17162] elevator_switch+0x1e8/0x7b0 [ 1568.419713][T17162] elevator_change+0x2fa/0x480 [ 1568.424982][T17162] elevator_set_default+0x375/0x440 [ 1568.430687][T17162] blk_register_queue+0x3f3/0x4e0 [ 1568.436226][T17162] __add_disk+0x6b8/0xdb0 [ 1568.441065][T17162] add_disk_fwnode+0x100/0x3a0 [ 1568.446340][T17162] nbd_dev_add+0x733/0xb60 [ 1568.451264][T17162] nbd_init+0x168/0x1f0 [ 1568.456011][T17162] do_one_initcall+0x250/0x870 [ 1568.461285][T17162] do_initcall_level+0x10a/0x1a0 [ 1568.466730][T17162] do_initcalls+0x59/0xa0 [ 1568.471567][T17162] kernel_init_freeable+0x29d/0x3e0 [ 1568.477274][T17162] kernel_init+0x22/0x1d0 [ 1568.482108][T17162] ret_from_fork+0x514/0xb70 [ 1568.487208][T17162] ret_from_fork_asm+0x1a/0x30 [ 1568.492482][T17162] [ 1568.492482][T17162] -> #3 (&q->elevator_lock){+.+.}-{4:4}: [ 1568.500290][T17162] __mutex_lock+0x19d/0x1550 [ 1568.505401][T17162] elevator_change+0x1af/0x480 [ 1568.510678][T17162] elevator_set_none+0xb5/0x140 [ 1568.516040][T17162] blk_mq_update_nr_hw_queues+0x5ef/0x19f0 [ 1568.522365][T17162] nbd_start_device+0x189/0xb30 [ 1568.527728][T17162] nbd_genl_connect+0x167d/0x1cd0 [ 1568.533268][T17162] genl_family_rcv_msg_doit+0x233/0x340 [ 1568.539328][T17162] genl_rcv_msg+0x614/0x7a0 [ 1568.544343][T17162] netlink_rcv_skb+0x226/0x4a0 [ 1568.549621][T17162] genl_rcv+0x28/0x40 [ 1568.554112][T17162] netlink_unicast+0x7bd/0x940 [ 1568.559386][T17162] netlink_sendmsg+0x813/0xb40 [ 1568.564652][T17162] sock_sendmsg_nosec+0x14e/0x190 [ 1568.570229][T17162] ____sys_sendmsg+0x54e/0x850 [ 1568.575505][T17162] ___sys_sendmsg+0x2a5/0x360 [ 1568.580690][T17162] __x64_sys_sendmsg+0x1b1/0x290 [ 1568.586133][T17162] do_syscall_64+0x166/0x520 [ 1568.591239][T17162] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1568.597644][T17162] [ 1568.597644][T17162] -> #2 (&q->q_usage_counter(io)#49){++++}-{0:0}: [ 1568.606234][T17162] blk_alloc_queue+0x544/0x690 [ 1568.611515][T17162] __blk_mq_alloc_disk+0x194/0x390 [ 1568.617137][T17162] nbd_dev_add+0x494/0xb60 [ 1568.622063][T17162] nbd_init+0x168/0x1f0 [ 1568.626722][T17162] do_one_initcall+0x250/0x870 [ 1568.631999][T17162] do_initcall_level+0x10a/0x1a0 [ 1568.637481][T17162] do_initcalls+0x59/0xa0 [ 1568.642326][T17162] kernel_init_freeable+0x29d/0x3e0 [ 1568.648029][T17162] kernel_init+0x22/0x1d0 [ 1568.652861][T17162] ret_from_fork+0x514/0xb70 [ 1568.657965][T17162] ret_from_fork_asm+0x1a/0x30 [ 1568.663246][T17162] [ 1568.663246][T17162] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 1568.670436][T17162] fs_reclaim_acquire+0x71/0x100 [ 1568.675884][T17162] kmem_cache_alloc_noprof+0x5f/0x600 [ 1568.681775][T17162] __kernfs_iattrs+0xdd/0x380 [ 1568.686962][T17162] kernfs_iop_setattr+0xe6/0x3f0 [ 1568.692410][T17162] notify_change+0xbba/0xea0 [ 1568.697506][T17162] do_truncate+0x1c2/0x250 [ 1568.702436][T17162] path_openat+0x15b5/0x1d60 [ 1568.707532][T17162] do_file_open+0x23e/0x4a0 [ 1568.712537][T17162] do_sys_openat2+0x115/0x200 [ 1568.717722][T17162] __x64_sys_openat+0x138/0x170 [ 1568.723083][T17162] do_syscall_64+0x166/0x520 [ 1568.728184][T17162] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1568.734591][T17162] [ 1568.734591][T17162] -> #0 (&root->kernfs_iattr_rwsem){++++}-{4:4}: [ 1568.743091][T17162] __lock_acquire+0x164c/0x2de0 [ 1568.748446][T17162] lock_acquire+0x115/0x350 [ 1568.753454][T17162] down_write+0x96/0x200 [ 1568.758207][T17162] kernfs_link_sibling+0x4c7/0x5a0 [ 1568.763829][T17162] kernfs_add_one+0x2db/0x6f0 [ 1568.769012][T17162] kernfs_create_dir_ns+0x1a1/0x230 [ 1568.774713][T17162] sysfs_create_dir_ns+0x12f/0x2a0 [ 1568.780335][T17162] kobject_add_internal+0x622/0xcd0 [ 1568.786037][T17162] kobject_add+0x163/0x240 [ 1568.790964][T17162] device_add+0x3fa/0xb80 [ 1568.795795][T17162] hci_conn_add_sysfs+0xd5/0x210 [ 1568.801238][T17162] hci_conn_complete_evt+0x8a8/0x1350 [ 1568.807116][T17162] hci_event_packet+0x6cd/0xf10 [ 1568.812472][T17162] hci_rx_work+0x3ee/0x1020 [ 1568.817478][T17162] process_scheduled_works+0xc3d/0x1630 [ 1568.823534][T17162] worker_thread+0xa47/0xfb0 [ 1568.828636][T17162] kthread+0x38b/0x480 [ 1568.833207][T17162] ret_from_fork+0x514/0xb70 [ 1568.838318][T17162] ret_from_fork_asm+0x1a/0x30 [ 1568.843596][T17162] [ 1568.843596][T17162] other info that might help us debug this: [ 1568.843596][T17162] [ 1568.853818][T17162] Chain exists of: [ 1568.853818][T17162] &root->kernfs_iattr_rwsem --> cpuhp_state_mutex --> &root->kernfs_rwsem [ 1568.853818][T17162] [ 1568.868233][T17162] Possible unsafe locking scenario: [ 1568.868233][T17162] [ 1568.875663][T17162] CPU0 CPU1 [ 1568.881009][T17162] ---- ---- [ 1568.886356][T17162] lock(&root->kernfs_rwsem); [ 1568.891107][T17162] lock(cpuhp_state_mutex); [ 1568.898199][T17162] lock(&root->kernfs_rwsem); [ 1568.905473][T17162] lock(&root->kernfs_iattr_rwsem); [ 1568.910741][T17162] [ 1568.910741][T17162] *** DEADLOCK *** [ 1568.910741][T17162] [ 1568.918862][T17162] locks held by kworker/u9:2/17162: 4, last CPU#0: [ 1568.925345][T17162] #0: ffff88805b4c0140 ((wq_completion)hci0#2){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1568.936305][T17162] #1: ffffc9000585fc40 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1568.948299][T17162] #2: ffff88803be400b8 (&hdev->lock){+.+.}-{4:4}, at: hci_conn_complete_evt+0xba/0x1350 [ 1568.958117][T17162] #3: ffff88801c2d4980 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_add_one+0x41/0x6f0 [ 1568.967933][T17162] [ 1568.967933][T17162] stack backtrace: [ 1568.973807][T17162] CPU: 0 UID: 0 PID: 17162 Comm: kworker/u9:2 Not tainted syzkaller #0 PREEMPT(full) [ 1568.983332][T17162] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1568.993372][T17162] Workqueue: hci0 hci_rx_work [ 1568.998042][T17162] Call Trace: [ 1569.001310][T17162] [ 1569.004239][T17162] dump_stack_lvl+0xe8/0x150 [ 1569.008841][T17162] print_circular_bug+0x2e2/0x300 [ 1569.013870][T17162] check_noncircular+0x12f/0x150 [ 1569.018805][T17162] __lock_acquire+0x164c/0x2de0 [ 1569.023647][T17162] ? __lock_acquire+0x747/0x2de0 [ 1569.028585][T17162] lock_acquire+0x115/0x350 [ 1569.033089][T17162] ? kernfs_link_sibling+0x4c7/0x5a0 [ 1569.038364][T17162] down_write+0x96/0x200 [ 1569.042603][T17162] ? kernfs_link_sibling+0x4c7/0x5a0 [ 1569.047874][T17162] ? __pfx_down_write+0x10/0x10 [ 1569.052715][T17162] ? kernfs_root+0x1c/0x230 [ 1569.057212][T17162] ? kernfs_root+0x1c/0x230 [ 1569.061706][T17162] ? kernfs_root+0x1c/0x230 [ 1569.066199][T17162] ? kernfs_root+0x1ea/0x230 [ 1569.070781][T17162] kernfs_link_sibling+0x4c7/0x5a0 [ 1569.075879][T17162] kernfs_add_one+0x2db/0x6f0 [ 1569.080540][T17162] kernfs_create_dir_ns+0x1a1/0x230 [ 1569.085726][T17162] sysfs_create_dir_ns+0x12f/0x2a0 [ 1569.090831][T17162] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 1569.096467][T17162] ? do_raw_spin_unlock+0xf5/0x200 [ 1569.101576][T17162] kobject_add_internal+0x622/0xcd0 [ 1569.106763][T17162] kobject_add+0x163/0x240 [ 1569.111178][T17162] ? __pfx_kobject_add+0x10/0x10 [ 1569.116108][T17162] ? get_device_parent+0x366/0x3a0 [ 1569.121214][T17162] device_add+0x3fa/0xb80 [ 1569.125527][T17162] hci_conn_add_sysfs+0xd5/0x210 [ 1569.130453][T17162] hci_conn_complete_evt+0x8a8/0x1350 [ 1569.135812][T17162] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1569.141786][T17162] ? __pfx_hci_conn_complete_evt+0x10/0x10 [ 1569.147579][T17162] ? skb_pull_data+0xf0/0x200 [ 1569.152251][T17162] hci_event_packet+0x6cd/0xf10 [ 1569.157180][T17162] ? __pfx_hci_conn_complete_evt+0x10/0x10 [ 1569.162975][T17162] ? __pfx_hci_event_packet+0x10/0x10 [ 1569.168333][T17162] ? audit_filter_rules+0x45f0/0x5d10 [ 1569.173694][T17162] ? hci_send_to_monitor+0xe2/0x590 [ 1569.178885][T17162] hci_rx_work+0x3ee/0x1020 [ 1569.183377][T17162] ? process_scheduled_works+0x97a/0x1630 [ 1569.189086][T17162] process_scheduled_works+0xc3d/0x1630 [ 1569.194638][T17162] ? __pfx_process_scheduled_works+0x10/0x10 [ 1569.200608][T17162] ? assign_work+0x3cf/0x5d0 [ 1569.205185][T17162] worker_thread+0xa47/0xfb0 [ 1569.209768][T17162] ? __kthread_parkme+0x71/0x1f0 [ 1569.214696][T17162] kthread+0x38b/0x480 [ 1569.218749][T17162] ? __pfx_worker_thread+0x10/0x10 [ 1569.223851][T17162] ? __pfx_kthread+0x10/0x10 [ 1569.228441][T17162] ret_from_fork+0x514/0xb70 [ 1569.233030][T17162] ? __pfx_ret_from_fork+0x10/0x10 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1569.238134][T17162] ? __switch_to+0xc89/0x1420 [ 1569.242805][T17162] ? __pfx_kthread+0x10/0x10 [ 1569.247380][T17162] ret_from_fork_asm+0x1a/0x30 [ 1569.252143][T17162] [ 1569.474010][T31751] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1570.574298][T24140] net_ratelimit: 19 callbacks suppressed [ 1570.574321][T24140] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 1570.684294][T24141] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 1570.795064][T24141] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 1570.903931][T24140] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 1571.014272][ T8697] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 1571.124906][ T8697] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 1571.234490][T24147] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 1571.344425][T24140] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 1571.454900][T24140] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 1571.564277][ T8697] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 1575.634541][T24140] net_ratelimit: 36 callbacks suppressed [ 1575.634565][T24140] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 1575.744915][T24140] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 1575.853665][ T8672] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 1575.964312][T24129] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 1576.075091][T24140] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 1576.184292][ T8697] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 1576.294286][ T8697] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 1576.404981][ T8697] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 1576.518976][T24140] bond7: (slave ip6gretap2): failed to get link speed/duplex [ 1576.624281][T24140] bond7: (slave ip6gretap2): failed to get link speed/duplex