last executing test programs: 6.102530407s ago: executing program 1 (id=6053): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={0x0}, 0x1, 0x0, 0x0, 0x40088c1}, 0x4) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="1e000000", @ANYRES16=0x0, @ANYBLOB="010001020000000000000900000028000380140002006c6f000000000000000000000000000008000300010000000800010000000000"], 0x3c}}, 0x0) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'lo\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001400b595000000000000f2000a000000", @ANYRES32=r2, @ANYBLOB="14000200fe8000000000000000000000000000aa080009003f0c000014"], 0x48}, 0x1, 0x0, 0x0, 0x84}, 0x0) socket$nl_audit(0x10, 0x3, 0x9) sendmmsg(0xffffffffffffffff, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) r3 = socket(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f0000000000), 0x4000000000001f2, 0xfc) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="440000002000010000000000000000000a040000000000080000000014000200fe8000000000000000000000000000bb140001"], 0x44}, 0x1, 0x0, 0x0, 0x24040804}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)={0x60, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x11, 0x1, 0x0, 0xc}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x60}, 0x1, 0x0, 0x0, 0x40010}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="020000"], 0x48) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) 5.936644961s ago: executing program 1 (id=6057): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x50400, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x4, 0x7fffffffffffffff, 0x0, 0x1000, 0xc, 0x215}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r4, 0x0, 0x48b, 0x0, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(r4, 0x0, 0x487, &(0x7f0000000040), &(0x7f0000000080)=0x30) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r5) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r7) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r9, {0x0, 0xd}, {0xffff, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x4890) ioctl$SIOCSIFHWADDR(r7, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 5.64171203s ago: executing program 1 (id=6061): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8000}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000140)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) r3 = openat$cgroup_procs(r1, &(0x7f00000002c0)='tasks\x00', 0x2, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000b80)=ANY=[@ANYBLOB="3800000018000100000000000000000002"], 0x38}}, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f0000000000)=0x3) ioctl$PPPIOCGFLAGS1(r4, 0x8004745a, &(0x7f0000000180)) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) write$cgroup_pid(r2, &(0x7f00000000c0), 0x12) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x10}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x9}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x78}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) sendmsg$nl_route(r6, &(0x7f0000002dc0)={0x0, 0x0, &(0x7f0000002d80)={&(0x7f0000002d40)=ANY=[@ANYBLOB="18000000"], 0x18}, 0x1, 0x0, 0x0, 0x20004000}, 0x4000010) pread64(r3, &(0x7f0000002840)=""/4096, 0x1000, 0x4) 3.728814985s ago: executing program 1 (id=6069): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x40100d0) 3.487417749s ago: executing program 1 (id=6070): socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000002b40), r0) (async) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000002b40), r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000006c0)=ANY=[@ANYBLOB="1400000003010103000100000000000001000009eb5be0b736aac6a90aa7c03b2798cc900754af0cc6045730454192b2956fb778361e5d7820cecc9556fe75706ee3a6166c80a5b54bc3dca2bf452472e105b018f3be17312c26d0c9e53d96807ad12d965e48ecf590aa48677d4874dca236297cfe5e1f41fac7824ac62145dd60fe72916a6f2d49fee47750f8a84f8c2b0562ba90f026406d6c7a1f110ea4eee8ad78a57d9f6885740bc245658924c1c4e7538e7a21640000"], 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x4000) syz_genetlink_get_family_id$tipc2(&(0x7f0000001300), r1) (async) syz_genetlink_get_family_id$tipc2(&(0x7f0000001300), r1) r2 = socket$l2tp(0x2, 0x2, 0x73) socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000300), 0xffffffffffffffff) (async) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\b\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002cbd7000ffdbdf2506000000"], 0x14}, 0x1, 0x0, 0x0, 0x44}, 0x8050) bind$inet(r2, &(0x7f00000002c0)={0x2, 0x4e20, @empty}, 0x10) (async) bind$inet(r2, &(0x7f00000002c0)={0x2, 0x4e20, @empty}, 0x10) connect$inet(r2, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) (async) connect$inet(r2, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x2d, 0x0, 0x1, 0xfffff038}, {0x28, 0x0, 0xfd, 0x1}, {0x6}]}, 0x10) sendmmsg$inet(r2, &(0x7f00000004c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) (async) sendmmsg$inet(r2, &(0x7f00000004c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) bind$inet(r2, &(0x7f0000000140)={0x2, 0x4e21, @multicast2}, 0x10) r6 = syz_init_net_socket$x25(0x9, 0x5, 0x0) socket(0x2b, 0x80801, 0x1) (async) r7 = socket(0x2b, 0x80801, 0x1) r8 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@newlink={0x58, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2021}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x20, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_MODE={0x8}, @IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR={0xa, 0x4, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}]}}}, @IFLA_LINK={0x8, 0x5, r10}]}, 0x58}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) setsockopt$inet6_tcp_int(r7, 0x11e, 0x1, &(0x7f0000000280)=0x400, 0x4) recvmsg$can_j1939(r7, &(0x7f0000000680)={&(0x7f0000000500)=@l2, 0x80, &(0x7f0000000600)=[{&(0x7f00000003c0)=""/188, 0xbc}, {&(0x7f0000000480)=""/1, 0x1}, {&(0x7f0000000780)=""/182, 0xb6}], 0x3, &(0x7f0000000640)=""/9, 0x9}, 0x0) ioctl(r6, 0x8914, &(0x7f0000000080)="64756d6d7930000000000000000000000100"/40) ioctl(r6, 0x8914, &(0x7f0000000000)='lapb0\x00'/40) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) socket$kcm(0x1e, 0x1, 0x0) socket$l2tp6(0xa, 0x2, 0x73) 3.477207761s ago: executing program 3 (id=6071): r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f00000002c0)="2000000012005f0214f9f4070000fbe60a0000000000c5c61f33ad512e9cfc31", 0x20) recvmmsg(r0, &(0x7f00000021c0), 0x5b, 0x40, 0x0) setsockopt$RXRPC_SECURITY_KEY(r0, 0x110, 0x1, &(0x7f0000000040)='-]-N\x13\xbas\x17\xf9\x1a#E\xb1\xc70x0}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, &(0x7f0000000080)={r5, 0x7fff, 0x30, 0x1, 0x5}, &(0x7f00000000c0)=0x18) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f0000000080)={r5, 0x1, 0x7, 0x800, 0x7, 0x80000001}, &(0x7f0000000100)=0x14) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000240)='syzkaller\x00'}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="440000001000090400000000fdffffff00000000", @ANYRES32=0x0, @ANYBLOB="00000000000400002400128009000100626f6e64000000001400028004001f0004000000080007"], 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x4004090) sendmmsg$alg(r2, &(0x7f0000000140), 0x4924b68, 0x0) 3.345028402s ago: executing program 0 (id=6074): r0 = socket$can_raw(0x1d, 0x3, 0x1) socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000000240)=0x80000000) close(0x4) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x2, &(0x7f0000000040)=0xfff, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vxcan1\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x6, &(0x7f0000000080)=ANY=[@ANYBLOB="18020000b3b2000000000000180004008510000001000000950000000000000085000000b00000009500007f00000000"], &(0x7f0000000000)='GPL\x00', 0x8, 0x9c, &(0x7f0000001300)=""/156, 0x41000, 0x40}, 0x94) bind$can_raw(r0, &(0x7f00000001c0)={0x1d, r2}, 0x10) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000), r4) sendmsg$IPVS_CMD_NEW_SERVICE(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000700)={0x70, r5, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x5c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x11}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@loopback}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x13c4}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x1, 0x1}}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x64}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x20}]}]}, 0x70}}, 0x0) sendmsg$IPVS_CMD_NEW_DEST(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000280)=ANY=[@ANYBLOB="01000000420a331f2256479c92b2a94b171df940be5777e6690426076008fd53023741e732263df73211fd507cc954ba6c12e642e09d776c4703f01e187f253e4d130070c7509949012339231c449e10a50cad9a6a677ca59efa47fa4ec9875fdfcff2b45cbcd983fb50fa20a7e208ca8b6f6c4b94cbeffca1f28db44466ae01000000799107523526b43480dadf2d2da1a67bb8da2ebd23", @ANYRES16=r5, @ANYBLOB="01000000000000000000050000003000018006000100020000000600020011000000140003007f0000010000000000000000000000000600040013c4000040000280140001007f00000100000000000000000000000006000200500000000800030000000000080004000100000008000500000000000800060000000000"], 0x80}}, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r6, &(0x7f0000000b00)={0x2, 0x5000, @loopback}, 0x10) connect$inet(r6, &(0x7f0000000c00)={0x2, 0x13c4, @loopback}, 0x10) sendto$inet(r6, &(0x7f0000000d00)='sip_packet\x00', 0xb, 0x20008000, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e24, @private=0xa010101}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r3, 0x84, 0xc, &(0x7f00000000c0), 0x4) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000200)={0x1, [0x0]}, &(0x7f0000000080)=0x8) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x3, 0x5, &(0x7f00000006c0)=ANY=[@ANYBLOB="1802000080f4ff0000000000000000008500000027000000850000000700000095"], &(0x7f0000000680)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000540)={r8, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000240)="9b0cb39bf267ce9b5ddf3432ca97", 0x0, 0x14, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r3, 0x84, 0x6d, &(0x7f0000000240)={r7, 0x12, "1fe473a8cb3169d4d5b7259627b5cf5b8a50"}, &(0x7f0000000700)=0x1a) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x3, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000008000000000000000000910095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r10 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={r9, r9, 0x2f, 0x0, @void}, 0x10) unshare(0x20400) bpf$OBJ_PIN_PROG(0x6, &(0x7f00000001c0)=@generic={0x0, r10}, 0x18) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, 0x0, 0x0) socket(0x0, 0x5, 0x0) 2.820186372s ago: executing program 1 (id=6077): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x4, &(0x7f00000002c0)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x3}]}, &(0x7f0000000000)='GPL\x00', 0x4}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002580)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0xfffe}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x50, 0x4, 0x0, 0x1, [{0x4c, 0x1, 0x0, 0x1, @range={{0xa}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_RANGE_OP={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_RANGE_TO_DATA={0x1c, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0x15, 0x1, "e4b17375f9c538c301a39adf6101291a8a"}]}, @NFTA_RANGE_SREG={0x8, 0x1, 0x1, 0x0, 0x17}, @NFTA_RANGE_FROM_DATA={0xc, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, "f9"}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0xec}}, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) 2.678734313s ago: executing program 4 (id=6079): r0 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) (rerun: 64) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000180)={@in6={{0xa, 0x4e23, 0x4, @mcast2, 0x8000}}, 0x0, 0x0, 0x3f, 0x0, "76af1cd4290064f321374953f4f246cd27d10e02dff78d0430a8e7ee1b4eaa6296f44b90b9804212dd02e825cd4b047240984eb018709c99077724bb236793abbdf73a21a213032b15035e9bf76ad0c7"}, 0xd8) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000000c0)) (async) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x20, 0x10, 0x401, 0x70bd22, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x1703, 0x1483b}}, 0x20}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) 2.518017063s ago: executing program 4 (id=6081): syz_emit_ethernet(0x3e, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6a001004fa072b0120010000000000000000000000000001ff0200000000000000000000000000012f000100000000001c4d801e3a47b21d5ea1912fab273ea37ecaab7e6ac736d6"], 0x0) (async) syz_emit_ethernet(0x3e, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6a001004fa072b0120010000000000000000000000000001ff0200000000000000000000000000012f000100000000001c4d801e3a47b21d5ea1912fab273ea37ecaab7e6ac736d6"], 0x0) socket(0x40000000015, 0x5, 0x0) (async) r0 = socket(0x40000000015, 0x5, 0x0) bind$inet(r0, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e24, 0x400, @dev={0xfe, 0x80, '\x00', 0x26}, 0xca}, 0x1c) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) (async) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000000)=[@in={0x2, 0x4e23, @rand_addr=0x64010102}, @in6={0xa, 0x4e23, 0x4, @mcast2, 0x6}, @in={0x2, 0x4e22, @rand_addr=0x64010100}, @in={0x2, 0x4e23, @rand_addr=0x64010101}], 0x4c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000080)={0x2, [0x0, 0x0]}, &(0x7f0000000140)=0xc) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000180)={r2, 0x7fffffff}, &(0x7f00000001c0)=0x8) 2.466988573s ago: executing program 3 (id=6082): r0 = socket$inet6(0xa, 0x1, 0x0) (async) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000000780)={0xfffeffff, {{0xa, 0x4e21, 0x6b, @private2, 0x7a}}, 0x1, 0x9, [{{0xa, 0x4e20, 0x9, @empty, 0x8}}, {{0xa, 0x4e22, 0xe2, @loopback, 0x9}}, {{0xa, 0x4e23, 0x9, @mcast1, 0x7}}, {{0xa, 0x4e24, 0x341, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xf4}}, {{0xa, 0x4e20, 0x80000001, @private1={0xfc, 0x1, '\x00', 0x1}, 0x5}}, {{0xa, 0x4e20, 0x80000001, @loopback, 0x9}}, {{0xa, 0x4e22, 0x9, @empty, 0x40}}, {{0xa, 0x4e22, 0xe, @private1, 0x2}}, {{0xa, 0x4e21, 0xfffe, @remote, 0x7f}}]}, 0x510) (async) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x18, &(0x7f0000000100)=0xfefffff9, 0x4) (async) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f00000002c0)=[@timestamp, @sack_perm, @window={0x3, 0x9, 0x5}, @window={0x3, 0x1000, 0x8001}, @timestamp, @sack_perm, @sack_perm, @sack_perm], 0x8) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000240)={'geneve0\x00', &(0x7f0000000000)=@ethtool_perm_addr={0x4b, 0x41, "4372dcc479e73bdc0b280000feff00007e8ed4920af8785f0900000000000000cf967a12a94e316bccb28ca8d5ce78fd1a6c259248492f9d4564588dccdfff2619"}}) (async) socket$rxrpc(0x21, 0x2, 0xa) (async) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f00000001c0), 0x4) (async) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000200)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x800, 0x0, 0x1, 0x1}, 0x20) (async) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0x1, 0x23) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x380000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) (async) r4 = socket$l2tp6(0xa, 0x2, 0x73) connect$l2tp6(r4, &(0x7f0000000200)={0xa, 0x0, 0x7fe7, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x9, 0xffffffff}, 0x20) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000300)={@dev={0xfe, 0x80, '\x00', 0x2d}, 0x0, 0x0, 0x0, 0x0, 0xfffd, 0xfffe}, &(0x7f0000000040)=0x20) (async) r5 = socket$inet6_udp(0xa, 0x2, 0x0) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r6, 0x0, 0xe, 0x0, &(0x7f0000000180)="5fb90c5c4426cc8fa8574be842c1", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f00000002c0)={'ip6_vti0\x00', &(0x7f00000000c0)={'syztnl0\x00', 0x0, 0x579b0cf1930a90d0, 0x3, 0xc, 0x7, 0x68, @private2={0xfc, 0x2, '\x00', 0x1}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7, 0x80, 0x7}}) socket$packet(0x11, 0x3, 0x300) (async) write(r1, &(0x7f00000003c0)="085fd9f80d226206c864f9a78530b69afce7adc6f4ff41a079069f836e63ba83c97ab4d69c7d965bfc3f0bbac7df943acb70d5f2b512e4a17a9b1f94e98f26d80ff4a5ee364ce99a0091c0ba5415e0f868e73406bd62f47ca97779a7b3a813d7e86a06c38e27e02d72ab4ef2bcb51255cbde185286c97e29ba88cffd1ab7fea98bef519c7f29fcb3ed94f4935f4149f419f0bc908b1eb8fe72e5d6eb9370d97d7388b079775876d3c8b450aa14d4bc796bf5fe14efadeacf9ba2703d6e", 0xbd) (async) r7 = socket$kcm(0x10, 0x2, 0x4) (async) ioctl$F2FS_IOC_PRECACHE_EXTENTS(r0, 0xf50f, 0x0) r8 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$PPPIOCSFLAGS(r8, 0x40047459, 0x0) (async) sendmsg$kcm(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00014002080c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x4040) 2.168379567s ago: executing program 4 (id=6083): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{}, 0x0, 0x0}, 0x20) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="0c04000010000104000000000000000000480000", @ANYRES32=r0, @ANYBLOB="101000000000000008000d0005000000e4031680a40001800c00070000000000adffffff0c00", @ANYRES16=r0], 0x40c}}, 0x0) 2.168005974s ago: executing program 0 (id=6084): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) ioctl$BTRFS_IOC_QGROUP_LIMIT(r0, 0x8030942b, &(0x7f0000000100)={0x7, {0x1, 0xfff, 0xa556, 0x9, 0xfffffffffffff800}}) connect$inet(r0, &(0x7f0000000080)={0x2, 0x3, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r0, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000001500)='\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x9}, {&(0x7f0000002800)="cf", 0x1}, {&(0x7f0000000380)="08e0ac8fb1d99df61d7b518d0a62", 0xe}, {&(0x7f0000000180)="8a", 0x1}, {&(0x7f00000005c0)="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", 0xfe}], 0x5}}, {{0x0, 0x0, &(0x7f0000002f00)=[{&(0x7f0000001580)="ce90bfdb", 0x68}, {&(0x7f00000007c0)="f2e659", 0x3}, {&(0x7f0000002e40)="d4", 0x1}], 0x3}}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000003000)="e1", 0x1}, {&(0x7f00000010c0)="fa", 0x1}, {&(0x7f0000001680)="d8", 0x1}, {&(0x7f0000001600)="f2964dd1", 0x4}, {&(0x7f0000000580)="b8a2f6", 0x3}, {&(0x7f00000002c0)="7940e900e0377757a9edc0d9376c21328ad2f7584fe4c8b712b3e5e08ecff5258151bd9eea7b4ce21f67ab51922ce035987127fda5812df903188e321419610f4beb6cdf6fa073876157c4f1d2054439d8db3f4d937872de928b62741fd60e6b56979ad883f89a02e24a577275bfb498b7a127abd0eb099e704d18d63dad611b45acfc3b8dc5457c8383d7d8621942e8e2ce6e4017dd6e5ed9732e739be6593c3b033524669ce17c3b822a6953eb11a20921220000000000000000", 0xbb}, {&(0x7f0000000280)="87", 0x1}], 0x7}}, {{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000880)="87", 0x1}, {&(0x7f0000000900)="11e09017", 0xfffffec4}], 0x2}}], 0x4, 0x4000000) setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000000000)=0x7fffffff, 0x4) 2.139874673s ago: executing program 2 (id=6085): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x800) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080), 0x4) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000380)={'vxcan1\x00', 0x0}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@bloom_filter={0x1e, 0x6, 0x5, 0x360, 0x40002, r3, 0xff, '\x00', r4, r2, 0x0, 0x4, 0x2, 0x8}, 0x50) sendmsg$NFT_MSG_GETOBJ_RESET(r1, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0xe8, 0x15, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0x5}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x1}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0xd}, @NFTA_OBJ_USERDATA={0x9c, 0x8, "cf44f0a2dac935cfe3eb80d52d7374ccda626e8c15cd5da0b573a07d3b905d4cec0ca7d65f1fc7d025544b75d091a5c36324b9635b56024e8c130024060d9aa73faff22c35474f880852388f1e42efb6988f1d168b84bcc762e0b96404c9215f81f987e9728878d71bacf97734b6729dfe2ac2727f12e688cd639e43a2193bba4c729797dbdae338a742fde721585159533a1c975fbf5686"}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x5}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x7}]}, 0xe8}, 0x1, 0x0, 0x0, 0x840}, 0x48808) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000400)={r5, 0xfffffffffffffdea, &(0x7f0000000480)}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x7, [@ptr={0x10, 0x0, 0x0, 0x2, 0x1}, @var={0x5, 0x0, 0x0, 0xe, 0x1}]}, {0x0, [0x0, 0x61, 0x2e, 0x61, 0x2e]}}, 0x0, 0x3b, 0x0, 0x1, 0x1}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x6f}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc00082c00db5b6861589bcfe8875a060300000023000000000000000000000000ac1414aa33"], 0xfdef) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000001440)='GPL\x00'}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce220000000000"], 0xfdef) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) sendmmsg$alg(r1, &(0x7f0000000cc0)=[{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000040)="128b3b8a2c5102e4013618666fa3bb497d", 0x11}], 0x1}], 0x1, 0x600008d0) recvmmsg(r1, &(0x7f0000002b80)=[{{}, 0x11}], 0x1, 0x40000140, 0x0) 2.021440937s ago: executing program 4 (id=6086): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='cdg', 0x3) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)=ANY=[@ANYBLOB=' \x00\x00\x00_\x00]'], 0x20}], 0x1, 0x0, 0x0, 0x20040001}, 0x40040) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) connect(r0, &(0x7f0000000340)=@l2tp={0x2, 0x0, @private=0xa010102, 0x2}, 0x80) getsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000000), &(0x7f0000000040)=0x8) 1.827630937s ago: executing program 3 (id=6087): r0 = socket$netlink(0x10, 0x3, 0x8) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), r1) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b40)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0xffffffffffffff48}, 0x48) sendmsg$kcm(r2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="100000000700000004"], 0x10}, 0x331e5c6805043cda) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r2, 0x20e, 0xe40, 0xfd000004, &(0x7f00000004c0)="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", 0x0, 0x31, 0x6000000000000000, 0xfffffffffffffe7e, 0x1d4}, 0x28) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000004c0)={'ip6tnl0\x00', &(0x7f0000000440)={'syztnl1\x00', r3, 0x4, 0x0, 0x0, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x1a}, @dev={0xfe, 0x80, '\x00', 0x30}, 0x80, 0x0, 0x1, 0x1}}) ioctl(0xffffffffffffffff, 0x8921, &(0x7f0000000040)) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000180)={'ip6tnl0\x00', r4, 0x0, 0x0, 0xff, 0x4, 0x8, @empty, @empty, 0x0, 0x1, 0xfffffffe, 0x1}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f00000002c0)={'syztnl1\x00', &(0x7f0000000280)={'syztnl0\x00', r5, 0x40, 0x1, 0xd9, 0x8, {{0x5, 0x4, 0x3, 0x7, 0x14, 0x6e, 0x0, 0x7, 0x2f, 0x0, @private=0xa010102, @broadcast}}}}) r6 = bpf$ITER_CREATE(0x21, &(0x7f0000000300), 0x8) setsockopt$RDS_CONG_MONITOR(r6, 0x114, 0x6, &(0x7f0000000340), 0x4) r7 = syz_genetlink_get_family_id$smc(&(0x7f0000000040), 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x3, &(0x7f0000000000)=@raw=[@map_val={0x18, 0x3, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x9}, @ldst={0x3, 0x5, 0x6, 0x5, 0x6, 0xfffffffffffffff8}], 0x0, 0x4, 0x0, 0x0, 0x0, 0x2b}, 0x94) r8 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r9) ioctl$IOCTL_GET_NCIDEV_IDX(r8, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r10, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r11], 0x1c}}, 0x4008054) write$nci(r8, &(0x7f00000004c0)=ANY=[@ANYBLOB="7103b3"], 0xb6) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r13 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r12], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r13, 0x0, 0x0, 0x0, 0x0}, 0x94) r14 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r14, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYRES16, @ANYRES16=r7, @ANYBLOB="00042bbd7000fbdbdf25020000001400020070696d367265673100000000004000b3f54eee440867a969f14046000400020000000900030073797a300000"], 0x44}, 0x1, 0x0, 0x0, 0x20000004}, 0x4000000) socket$netlink(0x10, 0x3, 0x0) 1.710111368s ago: executing program 4 (id=6088): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async, rerun: 64) r0 = socket$nl_audit(0x10, 0x3, 0x9) (rerun: 64) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000000)="9537e720f73e66c2a6003c061246647f95", 0x11}], 0x1) (async, rerun: 64) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) (rerun: 64) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000300)=[0xffffffffffffffff], 0x0, 0x0, 0x1}}, 0x40) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_buf(r2, 0x6, 0x1f, &(0x7f0000000280)='\x00', 0x1) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r3 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r3, 0x65, 0x7, &(0x7f0000000200)=0xd, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000280)={'vcan0\x00', 0x0}) sendmsg$can_raw(r3, &(0x7f0000000040)={&(0x7f0000000140)={0x1d, r4}, 0x10, &(0x7f0000000080)={&(0x7f0000000000)=@can={{0x0, 0x0, 0x0, 0x1}, 0xfe, 0x1, 0x4, 0x0, "36e932c486d275cc"}, 0x10}, 0x1, 0x0, 0x0, 0x84844}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000c40)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a050000000000000000000100fffc0900010073797a300000bb0034000000030a01010000000000000000010000000900030073797a310000000008000a40000000050900010073797a300000000038000000060a0104000000000000000007000003100004800c000180080001006475700008000b40000000000900010073797a3000000000140000001100010000000000000000000000000a"], 0xb4}, 0x1, 0x0, 0x0, 0x24000890}, 0x0) (async, rerun: 64) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 64) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0xfffffffffffffeb9, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001612e7ed307c5f0b3725fcef7de4c216c668b76f5c077155df98455a1b73232cde3133af9b488f7f26ffb1f5401b81e4e47304b616b98e8873853621ac5b82853e8128d2ca5710626a8cd30968ab3f3fc0114c8483e094f241dacdb31c6ee53043d"], 0x7c}, 0x1, 0x0, 0x0, 0x400cc92}, 0x20004450) (async) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x74}, 0x1, 0x0, 0x0, 0x40}, 0x24000840) (async) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r7, 0x0, 0x484, &(0x7f00000000c0)=""/24, &(0x7f0000000340)=0x18) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x3, 0xd, &(0x7f0000000180)=ANY=[@ANYRESDEC], 0x0, 0xfffffffd, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20004}, 0x94) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="3400000010000d042abd70000000000000000000", @ANYRES32=r8, @ANYBLOB="01000000010500001400128009000100626f6e64"], 0x34}}, 0x0) (async) connect$netlink(r9, &(0x7f0000000040)=@proc={0x10, 0x0, 0x25dfdbfa, 0x20000000}, 0xc) (async) r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r11 = openat$cgroup_devices(r10, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r11, 0x0, 0xa) socket$nl_route(0x10, 0x3, 0x0) 1.614062152s ago: executing program 0 (id=6089): mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x8, 0x32, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x20, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000008d000000000000000300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000fffe00008500000086000000bf0900000000000055090100ffffffff9500000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000082000000850000000600000045000600040000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000080000008500000006000000bf91000000000000b702000003000000850000002a000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x3, 0x1001, &(0x7f0000000780)=""/4097, 0x41100, 0x4b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc, @void, @value=0x6bca1}, 0x94) 1.119659072s ago: executing program 2 (id=6090): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000014800)={0x0, 0x0, &(0x7f00000147c0)={&(0x7f0000000880)=ANY=[@ANYBLOB="e40100001600010025bd7000ffdbdf2500000000000000000000000000000000fe8000000000000000000000000000214e23fffe4e20ffff0200201029000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="7f000001000000000000000000000000000004d533000000ac1414aa00000000000000000000000001000000000000001000800000000000000800000000000000f7070000000000000a030000000000000200000000000000010050000000000004000000000000000400000000000000020000000000000008c90000822627a10000000025bd7000073500000a0000001000000000000000ff0bb2d680d722e33f2b9eba198f3a0000000600008008"], 0x1e4}, 0x1, 0x0, 0x0, 0x8c0}, 0x48000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) unshare(0x22020400) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r4, 0x1f, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000140)='GPL\x00'}, 0x94) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000440), r5) sendmsg$IPVS_CMD_NEW_DAEMON(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={0x50, r6, 0x1, 0x70bd2c, 0x1, {}, [@IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x48c1}, 0x0) sendmsg$IPVS_CMD_GET_DEST(r3, &(0x7f00000006c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000810}, 0xc, &(0x7f0000000600)={&(0x7f0000000500)={0xd8, r6, 0x400, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x40}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x9}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x8}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x10000}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xefe}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}, @IPVS_CMD_ATTR_DAEMON={0x54, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_vlan\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0xd}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x4}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private1}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x2}]}]}, 0xd8}, 0x1, 0x0, 0x0, 0x4}, 0x20004804) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) r9 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="7fff0000000000002800128009000100766c616e000000001800028006000100340200000c0002001f0000001e00000008000500", @ANYRES32=r8], 0x50}}, 0x0) r10 = socket$phonet(0x23, 0x2, 0x1) getsockopt$sock_buf(r10, 0x1, 0x4a, 0x0, &(0x7f0000000000)) socket$nl_route(0x10, 0x3, 0x0) r11 = socket(0x1, 0x803, 0x0) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) 1.119073731s ago: executing program 3 (id=6091): bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000005000000020000000400000005"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="05000000070000000800000005"], 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x15, &(0x7f0000000200)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000300)={r0}, 0xc) 1.103294599s ago: executing program 0 (id=6092): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x44, 0x0, 0x7, 0x101, 0x0, 0x0, {0x3, 0x0, 0x9}, [@NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x7}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x2}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x3}]}, 0x44}, 0x1, 0x0, 0x0, 0x880}, 0x4004800) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x80, 0x6, 0xa, 0x41f, 0x0, 0x0, {0xa, 0x0, 0x44}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x54, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x42}, @NFTA_PAYLOAD_LEN={0x8, 0x4, 0x1, 0x0, 0xc3}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x2}]}}}, {0x1c, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_REDIR_REG_PROTO_MIN={0x8, 0x1, 0x1, 0x0, 0xa}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0xa8}, 0x1, 0x0, 0x0, 0x200000c4}, 0x24000840) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)=@newtfilter={0x54, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0xfff2, 0xfff3}, {0x0, 0xfff3}, {0xffff, 0x10}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_IPV6_DST={0x14, 0x10, @remote}, @TCA_FLOWER_ACT={0x4}, @TCA_FLOWER_KEY_FLAGS={0x8}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) 897.778325ms ago: executing program 3 (id=6093): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000300), 0xffffffffffffffff) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=ANY=[@ANYBLOB="9000000010000d042abd70000000000000000000b24cabded4abc67e033bfe31d4449b6b927846faf8abaf034f44a69c126cb991300b4489decc7ec0fb769b7cf7daec37cf2bb0723d2478f7583a90b13f1f9bbd5e2b9b280e", @ANYRES32=r3, @ANYBLOB="0000000010000000240012800c0001006d6163766c616e001400028008000900df00000000000300020000004c001280110001006272696467655f736c617665000000003400058005000500000000000500040001000000050009000100000005001b000300000005000a00000000000600020000040000000018000000050001000000"], 0x90}, 0x1, 0x0, 0x0, 0x40040c0}, 0x8000) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000200)=ANY=[@ANYBLOB="3c00000052000100"/21, @ANYRES32=r3, @ANYBLOB="080003000200000008000600000200000800020083930000080005006f000000000000"], 0x3c}}, 0x0) (async, rerun: 32) r4 = socket(0x10, 0x803, 0x0) (rerun: 32) syz_genetlink_get_family_id$ipvs(&(0x7f0000000000), r4) (async, rerun: 64) getsockname$packet(r4, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x49) (rerun: 64) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x0, 0x20040}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x18, 0x2, 0x0, 0x1, @val={0x14, 0x1, {{0x0, 0x0, 0x0, r5, 0x201, 0x68320}}}}}}]}, 0x48}, 0x1, 0x2000, 0x0, 0x40}, 0x4048800) (async, rerun: 32) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0x58, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) (rerun: 32) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000001c0)={'hsr0\x00', 0x0}) setsockopt$packet_add_memb(r7, 0x107, 0x1, &(0x7f0000000000)={r8, 0x1, 0x6, @local}, 0x10) (async) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@getchain={0x24, 0x11, 0x1, 0xfffffffe, 0x2000001, {0x0, 0x0, 0x0, r8, {0x5, 0xa}, {0xd, 0x9}, {0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040054) (async) r10 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r10, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r10, &(0x7f00000000c0)={0x1d, r11}, 0x18) (async) connect$can_j1939(r10, &(0x7f0000000140)={0x1d, r11}, 0x18) (async, rerun: 64) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000004c0)={'syztnl0\x00', &(0x7f0000000440)={'syztnl0\x00', 0x0, 0x29, 0xb3, 0xa8, 0x1, 0x8, @dev={0xfe, 0x80, '\x00', 0x2a}, @mcast2, 0x80, 0x1e7a81b7ef959f6f, 0x1, 0xd}}) (async, rerun: 64) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000005c0)={'erspan0\x00', &(0x7f0000000500)={'sit0\x00', 0x0, 0x20, 0x7, 0x5, 0x6, {{0x1f, 0x4, 0x0, 0x7, 0x7c, 0x66, 0x0, 0x4, 0x2f, 0x0, @private=0xa010101, @remote, {[@ssrr={0x89, 0x1f, 0xa1, [@initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010102, @multicast2, @rand_addr=0x64010101, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback]}, @ssrr={0x89, 0x23, 0x50, [@local, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010101, @remote, @rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0x1e}, @local, @empty]}, @end, @ssrr={0x89, 0x23, 0xc6, [@empty, @broadcast, @dev={0xac, 0x14, 0x14, 0x38}, @loopback, @loopback, @rand_addr=0x64010102, @broadcast, @empty]}]}}}}}) (async) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000600)={0x0, @empty, @empty}, &(0x7f0000000640)=0xc) (async) r14 = socket$nl_route(0x10, 0x3, 0x0) r15 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r15, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r14, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r16, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x24004085) sendmsg$nl_route_sched(r14, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000840)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r16, {0x0, 0x4}, {}, {0x8, 0x1}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x5, 0x9}}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x8080}, 0x20000000) (async, rerun: 64) sendmsg$ETHTOOL_MSG_FEATURES_GET(r0, &(0x7f0000000880)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000840)={&(0x7f00000008c0)=ANY=[@ANYBLOB="5c010000", @ANYRES16=0x0, @ANYBLOB="00032bbd7000ffdbdf250b0000000c0001800800030001000000400001801400020076657468305f766c616e00000000000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r5, @ANYBLOB="080003000200000008000100", @ANYRES32=r3, @ANYBLOB="08000300010000005000018008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="0880edff", @ANYRES32=0x0, @ANYBLOB="080003000200000014000200766c616e30000000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r6, @ANYBLOB="0800030001000000040001803400018008000100", @ANYRES32=r6, @ANYBLOB="08000100", @ANYRES32=r8, @ANYBLOB="08000100", @ANYRES32=r11, @ANYBLOB="08000100", @ANYRES32=r12, @ANYBLOB="08000100", @ANYRES32=r11, @ANYBLOB="08000300000000004c00018008000100", @ANYRES32=r13, @ANYBLOB="0800030006000000140002006261746164765f736c6176655f3100000800030000000000140002006d6163766c616e31000000000000000008000100", @ANYRES32=r16, @ANYBLOB="280001801400020070696d3672656730000000000000000008000300030000000800030002000000"], 0x15c}, 0x1, 0x0, 0x0, 0x8000}, 0x10) (async, rerun: 64) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000002780)={0x0, 0x0, &(0x7f0000002740)={&(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="010325bd5000040000004e0000000f00a9007365636f6e646e616d650000"], 0x24}}, 0x0) 818.705658ms ago: executing program 0 (id=6094): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@newlink={0x60, 0x10, 0x401, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0xe59bca127d81b0fa, 0xc574450d1af3b5bc}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0x14, 0x5, 0x0, 0x1, [@IFLA_BRPORT_COST={0x8, 0x3, 0xccd6}, @IFLA_BRPORT_PRIORITY={0x6, 0x2, 0xfffe}]}}}, @IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x24044800}, 0x4040) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000000040), 0x4) setsockopt$MRT_FLUSH(r1, 0x0, 0xd1, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r5) getsockname$packet(r5, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xfff1, 0xffff}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x2}]}, 0x2c}}, 0x4000800) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=@delchain={0x48, 0x64, 0xf31, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xfff3}, {0xfff3, 0xffff}, {0xb, 0xfff2}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x14, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc}, @TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x4}]}]}}]}, 0x93}, 0x1, 0x0, 0x0, 0x40054}, 0x4804) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r0, 0x4058587a, &(0x7f00000008c0)={{r8, &(0x7f0000000740)=',:\x9c}\x00', 0x2e8880, &(0x7f0000000780)={@align=0x3, {0x4404, 0xff, 0xdb3, 0x8}}, 0x7fff, &(0x7f00000007c0), &(0x7f0000000800)=0x8}, {[0x6, 0x0, 0x10001, 0x3ff]}, 0x0, 0x73, &(0x7f0000000840)=""/115}) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r7) sendmsg$NL80211_CMD_DEL_PMKSA(r7, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES16=r9, @ANYBLOB="000325bd7000fddbdf25350000000c0099000300000014000000050020011e0000000a00060008021100000100000a003400010101010101000008001f01010000000a0006007ea273e14374000008001f01ff7f0000"], 0x5c}, 0x1, 0x0, 0x0, 0x4008091}, 0x81) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="0700000000000000000005000000180003800800040000000000080002000900000004000300180001801400020073797a5f74756e000000200000000000080005"], 0x4c}, 0x1, 0x0, 0x0, 0x41}, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r11) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_NAN(r2, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x50, r9, 0x200, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r13}, @val={0xc, 0x99, {0x7, 0x11}}}}, [@NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0xfb}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x4}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x9}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x5}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x5}]}, 0x50}, 0x1, 0x0, 0x0, 0x4040800}, 0x4150) r14 = socket$nl_generic(0x10, 0x3, 0x10) r15 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r14) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r14, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r15, @ANYBLOB="010028bd7000fddbdf2521000000180001801400020064756d6d7930"], 0x2c}}, 0x4800) sendmsg$TIPC_CMD_ENABLE_BEARER(r11, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="010000000d0000000000010000000000000001"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x4004) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001200)=ANY=[@ANYBLOB="b70200001a000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b70600007fffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5ae46d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946e0ebc622003b538dfc8e012e79578e51bc5f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b803000000661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7b148ba532e6ea09c346dfebd38608b32a0080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e14861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aee20182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a81505000000000000003591a15c0a9be6eb18208404c1b30c3a6a71bc85018e5ff2c91018afc9ffc2cc788bee1b47683db01a469398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b74cd36e7487afa447e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9857399537f5dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f50714600fb6241c6e955031795b2c2f56411e48455b5a8b90dfae158b94f0800000000000000af5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeedd005b3d96c7aabf4df5db927d12aba9113c1cec6817d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe00000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273fd905deb28c13c1ed210d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d488afdc0e170000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e909938a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e80339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd52364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000a5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b6122f207dd59c9f2500579aca11033ec14bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f3390343c12aa51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0d5ea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccdac114482b619fca4d97affe65ccf11e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35e9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137ff17320adda5867947257f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d88d024bdc6bb74b5589829b6b0679b5d65a927de6f4c09f4b742e037381c85d2ec7bb2a8152f0d6a99a0370e0cbd65744eb2efd7beeaf9afce09594b09a709a940965f04aa7e72588757b9612bb4253a63bb303c0c68a07f115d104f2007237a4f771416741bfd63fdfe3ae6f8bea755d8b7202c2bbae137dc1c3cf40db74a4c1c219d8ddec8f91dae2cdea1353fe062830fa1d233296ec9d8317872257e154665485e7f31cdbfbf435517faf93015b57417d84b8bc8662e097d5ba55d02d48e150695ffae3a676555b10da11751865126d19336116a1e58ab727dda6b343cc97f9479136a66f552abf8fe3d134f6d69df1cffe6740f90735f66ca54fd87800b4bda4db5e68aaccf44d24e09f8a769e3ae7bf246673f15e3d1adae4384bdb7cd30a33e30466b421feb96006c810fd3830a1c75af2580727ffc604d2b04f476acc21419fad9b1baec88974da2db29b80859bde08b8f7ff86e4b7f1fd568042ad5396d3179c71b1dc43291e450ce9b8d7d80fcb44966d7ad4691a37870000000000000000000000000000000000000000b0558e580000000000000000000083a5765d06da91165d24bc316607e2d69344aa1c07ff7cd7bc3d17f122478b6e81077782b9c298edc2546045feff90e7aa7da88d2489fb000a4aa838f911c1a869fa55e979e033b7707df75b93cf5b8d25242741a88f2d54a7107375b25911aa11efa3a4f87fc14f180e353615b3cb9a5cf5ea843014a277c3694a5a83266f73ef039dd739187923715548d58ff43be997e357e0cbed29faef19c0082e26fb867be0ef0099d71bb0d2f443e77a44e8c4b0455d95b19c73ef4c98f775aad9e1b317b3cc48f7ad1d82ea6ad6c3c7d943fb0157c250e2ba56301e25c19a7e37ce880bed8a8e1538560f2be7d4cca6539257505826bd61bad2bcd4914344d4a27b29d2eb89bdc7a702e485d68c04e8f6b05336bf8d8e116605eaf375a592fe2382763c3cba76a0e4029dad5d37dd77abb1b7d2e2de23a4131e45ed81123ad6fa4f8b92c47eb03ec5a01466baad5a8ef329d831e3373f7f82b82a27b3d25682d9e63920658e5460c789633c5cf79e4e77cd7bd34c864c08d57fe32728d24f881fb8b1e1974ca17883835c5c60a9776f2df14227789f4da2296fecb3c44b783ea2e6f448eddc7f25648a5f27b8eda95b960efd3af193c4eb6f4e04f7bb89cb944fb7abea0b90da3c9bf41776604b5fa3423ca680029ae6ef5aaa4d72b8efba9abd3451e5d2b81a6022d4c1a78767058f84b56b8d062df5b5344c89add73f2b889cdb35c30ee2425621f1d966d56e8d315f8fe347464464ee0721f4253f500689c0f3efcb845254dab76f06c0d76b30c42aa9f55923c71350c2436eef1cab2d900442dd89f1051d32a12b576c9cbf5f5b32153e06eaeba938548bf5a3b4b5f5822790e0d8fd77b92ad9736af615b77e7597da8f0ab04a62"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) 660.102886ms ago: executing program 2 (id=6095): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = socket$kcm(0x2d, 0x2, 0x0) sendmsg$IPSET_CMD_LIST(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x2d, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x40041) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x7, 0x17, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bc0900000000000066090100000003e71600000006000000180100002020702500000000002020207b9af8ff000000006e0002000000000037010000f8ffffffb702000008000000b70300000000000056000000060000002c93000000000000b5030000000000008500000076000000b70000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) (async) socket$kcm(0x2d, 0x2, 0x0) (async) sendmsg$IPSET_CMD_LIST(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x2d, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x40041) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x7, 0x17, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bc0900000000000066090100000003e71600000006000000180100002020702500000000002020207b9af8ff000000006e0002000000000037010000f8ffffffb702000008000000b70300000000000056000000060000002c93000000000000b5030000000000008500000076000000b70000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) 608.161756ms ago: executing program 4 (id=6096): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="10000000040000000400000003"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0xd, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb}, [@call={0x85, 0x0, 0x0, 0x5}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x46, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x94) socket$xdp(0x2c, 0x3, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000080)=0x1000000, 0x4) r3 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r3, &(0x7f0000000140)=[{&(0x7f0000000240)="480000001400190d09004beafd0d8c562c84ed7a80ffe05e959126dda8900db462060f000000000000a2bc5603ca00000f7f8900000ec00000000101ff0000000309ff5bffff00c7", 0x48}], 0x1) getsockopt$XDP_STATISTICS(r2, 0x11b, 0x7, &(0x7f00000003c0), &(0x7f0000000440)=0x30) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r1, 0x2000012, 0xe, 0x0, &(0x7f0000000280)="63ec33c9e9b98600000000000000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) 481.238039ms ago: executing program 2 (id=6097): r0 = socket$tipc(0x1e, 0x2, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x1}}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000300)={0x22000042, 0x1, 0x2}, 0x10) sendmsg$tipc(r0, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) 275.716065ms ago: executing program 2 (id=6098): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x2, 0x4) mmap$xdp(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x99af8e632afb3921, 0x11, r0, 0x100000000) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000380)=[{&(0x7f0000002040)="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", 0xfc1}], 0x1, 0x6) sendto$x25(r1, &(0x7f00000008c0)="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", 0x1000, 0x2000c850, &(0x7f00000018c0), 0x12) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0xc, &(0x7f0000000280)=@assoc_value={0x0}, &(0x7f0000000880)=0x8) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r3, 0x84, 0x71, &(0x7f0000000040)={r5, 0xfffffff9}, 0x8) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r2, 0x84, 0x78, &(0x7f0000000040)=r5, 0x4) 230.167095ms ago: executing program 3 (id=6099): r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c0000005e00679a3601ffc4910710007e570966f4366ec9d4"], 0x1c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) (async, rerun: 32) r1 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100626f6e64"], 0x48}}, 0x0) (async, rerun: 64) sendmmsg$inet(r1, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0) (async, rerun: 64) recvmmsg$unix(r0, &(0x7f0000002380)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000680)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) (async, rerun: 32) socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 32) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/62, 0x328000, 0x800, 0x9, 0x3}, 0x20) (async) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) (async) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r3, 0xfffffffc) (async, rerun: 32) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) bpf$MAP_CREATE(0x0, 0x0, 0x0) (async) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) (async) sendto$inet(r6, &(0x7f00000000c0)="1c", 0xfffffffffffffd2c, 0xc0000, 0x0, 0x0) (async, rerun: 64) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r5, 0x7, 0x0, 0xff1f0000, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) (async, rerun: 64) sendmmsg$inet_sctp(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00'}) (async) shutdown(0xffffffffffffffff, 0x1) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, 0x0, 0x0) (async) r7 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, 0x0, 0x0) (async) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r7, 0x84, 0x66, 0x0, &(0x7f00000002c0)) (async, rerun: 64) unshare(0x60600) (rerun: 64) 108.769684ms ago: executing program 0 (id=6100): r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x20, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@ipv6_newrule={0x1c, 0x20, 0x2d2c6d60ea1da725, 0x70bd29, 0x25dfdbfd, {0xa, 0x0, 0x0, 0xcd, 0xff, 0x0, 0x0, 0x1, 0x10002}}, 0x1c}, 0x1, 0x0, 0x0, 0x4040090}, 0x40000) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8b24, &(0x7f0000000000)={'wlan0\x00'}) r2 = socket$inet6_sctp(0xa, 0x0, 0x84) r3 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r3, &(0x7f0000000480)=[{{&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000200)="b1", 0x1}], 0x1}}, {{&(0x7f0000000080)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000100)="ba8745", 0x3}], 0x1}}], 0x2, 0x24040800) r4 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r4, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @local}, {0xa, 0x0, 0x0, @empty}}, 0x5c) setsockopt$MRT6_FLUSH(r4, 0x29, 0xd4, &(0x7f0000000100)=0x2, 0x4) r5 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000000580)={0x2, 0x201, 0xca25, 0x5, r6}, 0x10) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f0000000140)={r6, 0x0, 0x2eb6, 0xffffe29b, 0xd, 0x2}, 0x14) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40482, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="14000000100001000000000000000000"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={0x0}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000001700010026bd7000ffdbdf250b000000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x48c1}, 0x40010) socket$nl_generic(0x10, 0x3, 0x10) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x20, 0x0) (async) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) socket(0x10, 0x80002, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@ipv6_newrule={0x1c, 0x20, 0x2d2c6d60ea1da725, 0x70bd29, 0x25dfdbfd, {0xa, 0x0, 0x0, 0xcd, 0xff, 0x0, 0x0, 0x1, 0x10002}}, 0x1c}, 0x1, 0x0, 0x0, 0x4040090}, 0x40000) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8b24, &(0x7f0000000000)={'wlan0\x00'}) (async) socket$inet6_sctp(0xa, 0x0, 0x84) (async) socket(0x2, 0x80805, 0x0) (async) sendmmsg$inet(r3, &(0x7f0000000480)=[{{&(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000200)="b1", 0x1}], 0x1}}, {{&(0x7f0000000080)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000100)="ba8745", 0x3}], 0x1}}], 0x2, 0x24040800) (async) socket(0xa, 0x3, 0x3a) (async) setsockopt$MRT6_ADD_MFC(r4, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @local}, {0xa, 0x0, 0x0, @empty}}, 0x5c) (async) setsockopt$MRT6_FLUSH(r4, 0x29, 0xd4, &(0x7f0000000100)=0x2, 0x4) (async) socket$inet_sctp(0x2, 0x1, 0x84) (async) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) (async) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000000580)={0x2, 0x201, 0xca25, 0x5, r6}, 0x10) (async) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f0000000140)={r6, 0x0, 0x2eb6, 0xffffe29b, 0xd, 0x2}, 0x14) (async) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40482, 0x0) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="14000000100001000000000000000000"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={0x0}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) (async) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000001700010026bd7000ffdbdf250b000000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x48c1}, 0x40010) (async) 0s ago: executing program 2 (id=6101): ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vcan0\x00'}) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x10) r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r0, 0x29, 0x38, &(0x7f00000000c0), &(0x7f0000000140)=0x4) r1 = socket(0x1, 0x1, 0x1) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000ffffffff0000000000008000d71a0000400002009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x7}, 0x94) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f0000000500)={0x3c, r3, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x40d5}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r1}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r1}}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000) syz_genetlink_get_family_id$netlbl_unlabel(0x0, 0xffffffffffffffff) r4 = socket(0x11, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000680)={'syztnl0\x00', &(0x7f0000000600)={'syztnl2\x00', 0x0, 0x29, 0x1, 0x0, 0x4e6a, 0x50, @private0={0xfc, 0x0, '\x00', 0x1}, @loopback, 0x7, 0x7, 0xbd22, 0x5}}) connect$can_bcm(r4, &(0x7f00000006c0)={0x1d, r5}, 0x10) socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x13, &(0x7f0000000040)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207baaf8ff00000000bda106000000000047010000f8ffffffb702000008000000b70300000040000085000000050000001801000020696c2500000000002020"], &(0x7f0000000100)='syzkaller\x00', 0xa, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_HEADER(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000580)=ANY=[@ANYBLOB="400000000c060103000000000000000001000004050001"], 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x0) r7 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) syz_emit_ethernet(0xd4, &(0x7f0000000340)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaa008100000086dd64ec2a25009a2900ff010000000000000000000000000001bf9e6d4334de8d27a4ab6a41a6b7c1f93b382c581e8432255362b3fdca226a31a9d23c070bbc65de68e16486cf29397810ba064a49c2d7093cd9b1fe0dc0899290b13a96f1bdd67de0acbfe988186f9a9f734fc22d90c16e4a723c4c03f9a84c59d29e981a0a1575f5ddd12e1d6b67e0dc5eb7d3fa2885909cdb77c8e0c08ed4f3c7b9ef10f7ae0869816d7781ef0beaf7"], 0x0) write$rfkill(r7, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r8, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r8, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r8, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000300)=[{0x0}, {&(0x7f0000000240)="a85751ad519b201965da2ebcc4898c7f46cb0819b38bbf504fd2617bf9689f2cdbe63959901f5afb841befbb8787b77bc6855e836e2c277f600c31ff7ea5acf0a9525fa1c161d06b23b802aaf4716846d96af1654995ec32db50c7e056aa45212cd6", 0x62}], 0x2}}], 0x1, 0x20008000) socket$inet(0x2, 0xa, 0x8) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0x3, 0x2) kernel console output (not intermixed with test programs): er parsing attributes in process `syz.1.4992'. [ 825.913756][T24784] x_tables: duplicate underflow at hook 4 [ 825.940534][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 826.325190][T24799] FAULT_INJECTION: forcing a failure. [ 826.325190][T24799] name failslab, interval 1, probability 0, space 0, times 0 [ 826.325227][T24799] CPU: 1 UID: 0 PID: 24799 Comm: syz.3.4997 Not tainted syzkaller #0 PREEMPT(full) [ 826.325254][T24799] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 826.325269][T24799] Call Trace: [ 826.325278][T24799] [ 826.325289][T24799] dump_stack_lvl+0xe8/0x150 [ 826.325328][T24799] should_fail_ex+0x410/0x560 [ 826.325360][T24799] should_failslab+0xa8/0x100 [ 826.325392][T24799] __kmalloc_node_noprof+0x100/0x720 [ 826.325417][T24799] ? __pfx___up_read+0x10/0x10 [ 826.325445][T24799] ? crypto_create_tfm_node+0x81/0x3c0 [ 826.325550][T24799] ? crypto_create_tfm_node+0x81/0x3c0 [ 826.325583][T24799] crypto_create_tfm_node+0x81/0x3c0 [ 826.325622][T24799] crypto_spawn_tfm2+0x5c/0x90 [ 826.325681][T24799] crypto_authenc_init_tfm+0x47/0x1c0 [ 826.325757][T24799] crypto_create_tfm_node+0x143/0x3c0 [ 826.325786][T24799] crypto_spawn_tfm2+0x5c/0x90 [ 826.325818][T24799] aead_init_geniv+0xa6/0x170 [ 826.325844][T24799] crypto_create_tfm_node+0x143/0x3c0 [ 826.325874][T24799] crypto_alloc_tfm_node+0x169/0x3e0 [ 826.325909][T24799] esp6_init_state+0x615/0x1220 [ 826.325973][T24799] ? ____sys_sendmsg+0x54e/0x850 [ 826.326002][T24799] ? ___sys_sendmsg+0x2a5/0x360 [ 826.326029][T24799] ? __x64_sys_sendmsg+0x1b1/0x290 [ 826.326070][T24799] ? __pfx_esp6_init_state+0x10/0x10 [ 826.326118][T24799] ? lock_acquire+0x115/0x350 [ 826.326156][T24799] ? __xfrm_init_state+0x745/0x1320 [ 826.326187][T24799] __xfrm_init_state+0x9dd/0x1320 [ 826.326212][T24799] ? __xfrm_init_state+0x745/0x1320 [ 826.326239][T24799] xfrm_init_state+0x1e/0xa0 [ 826.326274][T24799] pfkey_add+0x1d71/0x2e50 [ 826.326327][T24799] ? __pfx_pfkey_add+0x10/0x10 [ 826.326374][T24799] pfkey_sendmsg+0xceb/0x11d0 [ 826.326419][T24799] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 826.326476][T24799] ? aa_sock_msg_perm+0x144/0x210 [ 826.326512][T24799] ? apparmor_socket_sendmsg+0x98/0x360 [ 826.326540][T24799] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 826.326571][T24799] sock_sendmsg_nosec+0x13a/0x180 [ 826.326611][T24799] ____sys_sendmsg+0x54e/0x850 [ 826.326654][T24799] ? __pfx_____sys_sendmsg+0x10/0x10 [ 826.326714][T24799] ? import_iovec+0x73/0xa0 [ 826.326749][T24799] ___sys_sendmsg+0x2a5/0x360 [ 826.326791][T24799] ? __lock_acquire+0x747/0x2de0 [ 826.326819][T24799] ? __pfx____sys_sendmsg+0x10/0x10 [ 826.326890][T24799] ? __fget_files+0x2a/0x420 [ 826.326922][T24799] ? __fget_files+0x3a2/0x420 [ 826.326966][T24799] __x64_sys_sendmsg+0x1b1/0x290 [ 826.327001][T24799] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 826.327056][T24799] do_syscall_64+0x166/0x520 [ 826.327081][T24799] ? trace_irq_disable+0x3b/0x140 [ 826.327105][T24799] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 826.327142][T24799] ? clear_bhb_loop+0x70/0xc0 [ 826.327172][T24799] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 826.327195][T24799] RIP: 0033:0x7fd2b519e159 [ 826.327217][T24799] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 826.327239][T24799] RSP: 002b:00007fd2b6049028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 826.327264][T24799] RAX: ffffffffffffffda RBX: 00007fd2b5425fa0 RCX: 00007fd2b519e159 [ 826.327282][T24799] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 826.327298][T24799] RBP: 00007fd2b6049090 R08: 0000000000000000 R09: 0000000000000000 [ 826.327313][T24799] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 826.327327][T24799] R13: 00007fd2b5426038 R14: 00007fd2b5425fa0 R15: 00007fffc35be688 [ 826.327362][T24799] [ 827.124347][T24812] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 827.210191][T24818] netlink: 7 bytes leftover after parsing attributes in process `syz.3.5003'. [ 827.651710][T24830] netlink: 68 bytes leftover after parsing attributes in process `syz.4.5008'. [ 827.658497][T24830] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5008'. [ 827.848594][T24833] veth0_virt_wifi: entered promiscuous mode [ 827.905567][T24837] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5009'. [ 827.966037][T24833] veth0_virt_wifi: left promiscuous mode [ 828.026720][T24846] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5012'. [ 828.373201][T24861] FAULT_INJECTION: forcing a failure. [ 828.373201][T24861] name failslab, interval 1, probability 0, space 0, times 0 [ 828.373237][T24861] CPU: 1 UID: 0 PID: 24861 Comm: syz.2.5014 Not tainted syzkaller #0 PREEMPT(full) [ 828.373263][T24861] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 828.373277][T24861] Call Trace: [ 828.373286][T24861] [ 828.373297][T24861] dump_stack_lvl+0xe8/0x150 [ 828.373336][T24861] should_fail_ex+0x410/0x560 [ 828.373368][T24861] should_failslab+0xa8/0x100 [ 828.373399][T24861] __kmalloc_node_noprof+0x100/0x720 [ 828.373424][T24861] ? crypto_create_tfm_node+0x81/0x3c0 [ 828.373448][T24861] ? crypto_create_tfm_node+0x81/0x3c0 [ 828.373479][T24861] crypto_create_tfm_node+0x81/0x3c0 [ 828.373508][T24861] crypto_ahash_init_tfm+0x153/0x6c0 [ 828.373636][T24861] crypto_create_tfm_node+0x143/0x3c0 [ 828.373665][T24861] crypto_spawn_tfm2+0x5c/0x90 [ 828.373697][T24861] crypto_authenc_init_tfm+0x47/0x1c0 [ 828.373727][T24861] crypto_create_tfm_node+0x143/0x3c0 [ 828.373755][T24861] crypto_spawn_tfm2+0x5c/0x90 [ 828.373787][T24861] aead_init_geniv+0xa6/0x170 [ 828.373813][T24861] crypto_create_tfm_node+0x143/0x3c0 [ 828.373842][T24861] crypto_alloc_tfm_node+0x169/0x3e0 [ 828.373879][T24861] esp6_init_state+0x615/0x1220 [ 828.373917][T24861] ? ____sys_sendmsg+0x54e/0x850 [ 828.373946][T24861] ? ___sys_sendmsg+0x2a5/0x360 [ 828.373980][T24861] ? __x64_sys_sendmsg+0x1b1/0x290 [ 828.374022][T24861] ? __pfx_esp6_init_state+0x10/0x10 [ 828.374071][T24861] ? lock_acquire+0x115/0x350 [ 828.374109][T24861] ? __xfrm_init_state+0x745/0x1320 [ 828.374159][T24861] __xfrm_init_state+0x9dd/0x1320 [ 828.374185][T24861] ? __xfrm_init_state+0x745/0x1320 [ 828.374214][T24861] xfrm_init_state+0x1e/0xa0 [ 828.374250][T24861] pfkey_add+0x1d71/0x2e50 [ 828.374306][T24861] ? __pfx_pfkey_add+0x10/0x10 [ 828.374366][T24861] pfkey_sendmsg+0xceb/0x11d0 [ 828.374412][T24861] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 828.374468][T24861] ? aa_sock_msg_perm+0x144/0x210 [ 828.374504][T24861] ? apparmor_socket_sendmsg+0x98/0x360 [ 828.374533][T24861] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 828.374563][T24861] sock_sendmsg_nosec+0x13a/0x180 [ 828.374603][T24861] ____sys_sendmsg+0x54e/0x850 [ 828.374640][T24861] ? __pfx_____sys_sendmsg+0x10/0x10 [ 828.374681][T24861] ? import_iovec+0x73/0xa0 [ 828.374715][T24861] ___sys_sendmsg+0x2a5/0x360 [ 828.374744][T24861] ? __lock_acquire+0x747/0x2de0 [ 828.374773][T24861] ? __pfx____sys_sendmsg+0x10/0x10 [ 828.374843][T24861] ? __fget_files+0x2a/0x420 [ 828.374874][T24861] ? __fget_files+0x3a2/0x420 [ 828.374916][T24861] __x64_sys_sendmsg+0x1b1/0x290 [ 828.374968][T24861] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 828.375018][T24861] do_syscall_64+0x166/0x520 [ 828.375060][T24861] ? trace_irq_disable+0x3b/0x140 [ 828.375083][T24861] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 828.375108][T24861] ? clear_bhb_loop+0x70/0xc0 [ 828.375136][T24861] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 828.375160][T24861] RIP: 0033:0x7f747ab9e159 [ 828.375181][T24861] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 828.375201][T24861] RSP: 002b:00007f747baaf028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 828.375225][T24861] RAX: ffffffffffffffda RBX: 00007f747ae25fa0 RCX: 00007f747ab9e159 [ 828.375242][T24861] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 828.375257][T24861] RBP: 00007f747baaf090 R08: 0000000000000000 R09: 0000000000000000 [ 828.375272][T24861] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 828.375286][T24861] R13: 00007f747ae26038 R14: 00007f747ae25fa0 R15: 00007ffd81e737b8 [ 828.375323][T24861] [ 828.402120][T24859] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 828.448253][T24862] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5016'. [ 828.454162][T24862] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5016'. [ 828.462863][T24862] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5016'. [ 828.748679][T24864] trusted_key: syz.3.5016 sent an empty control message without MSG_MORE. [ 829.084397][T24879] openvswitch: netlink: Missing key (keys=c0, expected=500) [ 830.965722][T24842] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 831.266716][T24913] FAULT_INJECTION: forcing a failure. [ 831.266716][T24913] name failslab, interval 1, probability 0, space 0, times 0 [ 831.266753][T24913] CPU: 0 UID: 0 PID: 24913 Comm: syz.4.5028 Not tainted syzkaller #0 PREEMPT(full) [ 831.266780][T24913] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 831.266794][T24913] Call Trace: [ 831.266803][T24913] [ 831.266814][T24913] dump_stack_lvl+0xe8/0x150 [ 831.266854][T24913] should_fail_ex+0x410/0x560 [ 831.266888][T24913] should_failslab+0xa8/0x100 [ 831.266920][T24913] __kmalloc_noprof+0xfe/0x720 [ 831.266943][T24913] ? crypto_alloc_tfm_node+0x3b5/0x3e0 [ 831.266968][T24913] ? esp6_init_state+0x740/0x1220 [ 831.266995][T24913] ? esp6_init_state+0x740/0x1220 [ 831.267030][T24913] esp6_init_state+0x740/0x1220 [ 831.267057][T24913] ? ____sys_sendmsg+0x54e/0x850 [ 831.267086][T24913] ? ___sys_sendmsg+0x2a5/0x360 [ 831.267114][T24913] ? __x64_sys_sendmsg+0x1b1/0x290 [ 831.267156][T24913] ? __pfx_esp6_init_state+0x10/0x10 [ 831.267210][T24913] ? lock_acquire+0x115/0x350 [ 831.267251][T24913] ? __xfrm_init_state+0x745/0x1320 [ 831.267281][T24913] __xfrm_init_state+0x9dd/0x1320 [ 831.267305][T24913] ? __xfrm_init_state+0x745/0x1320 [ 831.267333][T24913] xfrm_init_state+0x1e/0xa0 [ 831.267367][T24913] pfkey_add+0x1d71/0x2e50 [ 831.267422][T24913] ? __pfx_pfkey_add+0x10/0x10 [ 831.267469][T24913] pfkey_sendmsg+0xceb/0x11d0 [ 831.267515][T24913] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 831.267574][T24913] ? aa_sock_msg_perm+0x144/0x210 [ 831.267609][T24913] ? apparmor_socket_sendmsg+0x98/0x360 [ 831.267637][T24913] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 831.267667][T24913] sock_sendmsg_nosec+0x13a/0x180 [ 831.267707][T24913] ____sys_sendmsg+0x54e/0x850 [ 831.267753][T24913] ? __pfx_____sys_sendmsg+0x10/0x10 [ 831.267794][T24913] ? import_iovec+0x73/0xa0 [ 831.267829][T24913] ___sys_sendmsg+0x2a5/0x360 [ 831.267857][T24913] ? __lock_acquire+0x747/0x2de0 [ 831.267892][T24913] ? __pfx____sys_sendmsg+0x10/0x10 [ 831.267965][T24913] ? __fget_files+0x2a/0x420 [ 831.267997][T24913] ? __fget_files+0x3a2/0x420 [ 831.268042][T24913] __x64_sys_sendmsg+0x1b1/0x290 [ 831.268077][T24913] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 831.268134][T24913] do_syscall_64+0x166/0x520 [ 831.268160][T24913] ? trace_irq_disable+0x3b/0x140 [ 831.268182][T24913] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 831.268207][T24913] ? clear_bhb_loop+0x70/0xc0 [ 831.268236][T24913] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 831.268261][T24913] RIP: 0033:0x7fa8d279e159 [ 831.268289][T24913] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 831.268310][T24913] RSP: 002b:00007fa8d3616028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 831.268336][T24913] RAX: ffffffffffffffda RBX: 00007fa8d2a25fa0 RCX: 00007fa8d279e159 [ 831.268354][T24913] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 831.268370][T24913] RBP: 00007fa8d3616090 R08: 0000000000000000 R09: 0000000000000000 [ 831.268386][T24913] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 831.268401][T24913] R13: 00007fa8d2a26038 R14: 00007fa8d2a25fa0 R15: 00007fff7d7acd68 [ 831.268440][T24913] [ 831.615910][T24919] netlink: 'syz.0.5030': attribute type 11 has an invalid length. [ 832.229419][ T30] audit: type=1804 audit(1789142871.436:17): pid=24939 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.5035" name="/newroot/423/cgroup.controllers" dev="tmpfs" ino=2198 res=1 errno=0 [ 832.231662][ T30] audit: type=1800 audit(1789142871.446:18): pid=24939 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.5035" name="cgroup.controllers" dev="tmpfs" ino=2198 res=0 errno=0 [ 832.236895][ T30] audit: type=1804 audit(1789142871.446:19): pid=24939 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.5035" name="/newroot/423/cgroup.controllers" dev="tmpfs" ino=2198 res=1 errno=0 [ 832.724847][T24952] syzkaller0: entered promiscuous mode [ 832.724874][T24952] syzkaller0: entered allmulticast mode [ 832.816195][T24958] FAULT_INJECTION: forcing a failure. [ 832.816195][T24958] name failslab, interval 1, probability 0, space 0, times 0 [ 832.816230][T24958] CPU: 0 UID: 0 PID: 24958 Comm: syz.3.5042 Not tainted syzkaller #0 PREEMPT(full) [ 832.816255][T24958] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 832.816268][T24958] Call Trace: [ 832.816277][T24958] [ 832.816287][T24958] dump_stack_lvl+0xe8/0x150 [ 832.816322][T24958] should_fail_ex+0x410/0x560 [ 832.816352][T24958] should_failslab+0xa8/0x100 [ 832.816382][T24958] __kmalloc_noprof+0xfe/0x720 [ 832.816402][T24958] ? crypto_alloc_tfm_node+0x3b5/0x3e0 [ 832.816424][T24958] ? esp6_init_state+0x740/0x1220 [ 832.816449][T24958] ? esp6_init_state+0x740/0x1220 [ 832.816481][T24958] esp6_init_state+0x740/0x1220 [ 832.816505][T24958] ? ____sys_sendmsg+0x54e/0x850 [ 832.816530][T24958] ? ___sys_sendmsg+0x2a5/0x360 [ 832.816554][T24958] ? __x64_sys_sendmsg+0x1b1/0x290 [ 832.816598][T24958] ? __pfx_esp6_init_state+0x10/0x10 [ 832.816662][T24958] ? lock_acquire+0x115/0x350 [ 832.816699][T24958] ? __xfrm_init_state+0x745/0x1320 [ 832.816729][T24958] __xfrm_init_state+0x9dd/0x1320 [ 832.816753][T24958] ? __xfrm_init_state+0x745/0x1320 [ 832.816790][T24958] xfrm_init_state+0x1e/0xa0 [ 832.816822][T24958] pfkey_add+0x1d71/0x2e50 [ 832.816870][T24958] ? __pfx_pfkey_add+0x10/0x10 [ 832.816913][T24958] pfkey_sendmsg+0xceb/0x11d0 [ 832.816954][T24958] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 832.817006][T24958] ? aa_sock_msg_perm+0x144/0x210 [ 832.817037][T24958] ? apparmor_socket_sendmsg+0x98/0x360 [ 832.817063][T24958] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 832.817098][T24958] sock_sendmsg_nosec+0x13a/0x180 [ 832.817153][T24958] ____sys_sendmsg+0x54e/0x850 [ 832.817188][T24958] ? __pfx_____sys_sendmsg+0x10/0x10 [ 832.817228][T24958] ? import_iovec+0x73/0xa0 [ 832.817260][T24958] ___sys_sendmsg+0x2a5/0x360 [ 832.817288][T24958] ? __lock_acquire+0x747/0x2de0 [ 832.817316][T24958] ? __pfx____sys_sendmsg+0x10/0x10 [ 832.817385][T24958] ? __fget_files+0x2a/0x420 [ 832.817416][T24958] ? __fget_files+0x3a2/0x420 [ 832.817458][T24958] __x64_sys_sendmsg+0x1b1/0x290 [ 832.817491][T24958] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 832.817544][T24958] do_syscall_64+0x166/0x520 [ 832.817569][T24958] ? trace_irq_disable+0x3b/0x140 [ 832.817592][T24958] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 832.817616][T24958] ? clear_bhb_loop+0x70/0xc0 [ 832.817645][T24958] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 832.817669][T24958] RIP: 0033:0x7fd2b519e159 [ 832.817690][T24958] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 832.817711][T24958] RSP: 002b:00007fd2b6049028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 832.817735][T24958] RAX: ffffffffffffffda RBX: 00007fd2b5425fa0 RCX: 00007fd2b519e159 [ 832.817752][T24958] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 832.817767][T24958] RBP: 00007fd2b6049090 R08: 0000000000000000 R09: 0000000000000000 [ 832.817782][T24958] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 832.817795][T24958] R13: 00007fd2b5426038 R14: 00007fd2b5425fa0 R15: 00007fffc35be688 [ 832.817832][T24958] [ 833.284034][T24967] IPVS: sed: TCP 127.0.0.1:21 - no destination available [ 833.863058][T24991] __nla_validate_parse: 35 callbacks suppressed [ 833.863082][T24991] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5048'. [ 833.863101][T24991] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5048'. [ 833.969873][T24991] tipc: New replicast peer: 255.255.255.255 [ 833.981928][T24991] tipc: Enabled bearer , priority 26 [ 834.633722][T25019] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5056'. [ 834.663514][T25019] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5056'. [ 835.399413][T25040] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5064'. [ 835.805068][T25060] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 835.935833][T25065] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5070'. [ 836.017682][T25067] netlink: 76 bytes leftover after parsing attributes in process `syz.2.5071'. [ 836.511581][T25081] netlink: 'syz.0.5075': attribute type 2 has an invalid length. [ 836.710224][T25088] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5078'. [ 836.744309][T25086] atomic_op ffff88802d09d1e0 conn xmit_atomic 0000000000000000 [ 836.888554][T25094] netlink: 'syz.0.5083': attribute type 10 has an invalid length. [ 836.892083][T25086] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5077'. [ 837.091158][T25106] netlink: 'syz.3.5081': attribute type 55 has an invalid length. [ 837.092977][T25094] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 837.106649][T25094] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 837.131694][T25094] bond0 (unregistering): Released all slaves [ 837.306330][T25112] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5085'. [ 837.682036][T25122] netlink: 'syz.2.5087': attribute type 1 has an invalid length. [ 838.276353][T25133] syzkaller1: entered promiscuous mode [ 838.276380][T25133] syzkaller1: entered allmulticast mode [ 838.468510][T25142] syzkaller0: entered promiscuous mode [ 838.468538][T25142] syzkaller0: entered allmulticast mode [ 838.613421][T25145] IPVS: Error connecting to the multicast addr [ 838.778393][T25161] IPVS: sync thread started: state = MASTER, mcast_ifn = bond_slave_0, syncid = 3, id = 0 [ 838.997558][T23299] udevd[23299]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 839.033944][T23143] udevd[23143]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 839.964771][T25191] netlink: 'syz.4.5102': attribute type 1 has an invalid length. [ 840.147450][T25191] 8021q: adding VLAN 0 to HW filter on device bond6 [ 840.158170][T25196] tipc: Enabling of bearer rejected, already enabled [ 841.264736][T25230] xt_TPROXY: Can be used only with -p tcp or -p udp [ 841.316605][T25230] ip_tables: iptables: counters copy to user failed while replacing table [ 841.504408][T25237] ip_tables: iptables: counters copy to user failed while replacing table [ 841.751324][T25249] tipc: Enabling of bearer rejected, already enabled [ 842.401052][T25264] IPVS: Unknown mcast interface: vcan0 [ 842.853142][T25283] netlink: 'syz.2.5125': attribute type 10 has an invalid length. [ 843.445792][T25305] __nla_validate_parse: 4 callbacks suppressed [ 843.445819][T25305] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5129'. [ 843.511323][T25285] syzkaller0: entered promiscuous mode [ 843.511351][T25285] syzkaller0: entered allmulticast mode [ 844.505879][ T26] block nbd6: Possible stuck request ffff888026c75080: control (read@0,1024B). Runtime 120 seconds [ 844.505929][ T26] block nbd6: Possible stuck request ffff888026c75240: control (read@1024,1024B). Runtime 120 seconds [ 844.505963][ T26] block nbd6: Possible stuck request ffff888026c75400: control (read@2048,1024B). Runtime 120 seconds [ 844.505995][ T26] block nbd6: Possible stuck request ffff888026c755c0: control (read@3072,1024B). Runtime 120 seconds [ 845.153904][ T26] block nbd7: Possible stuck request ffff888026d25080: control (read@0,1024B). Runtime 120 seconds [ 845.153956][ T26] block nbd7: Possible stuck request ffff888026d25240: control (read@1024,1024B). Runtime 120 seconds [ 845.153988][ T26] block nbd7: Possible stuck request ffff888026d25400: control (read@2048,1024B). Runtime 120 seconds [ 845.154020][ T26] block nbd7: Possible stuck request ffff888026d255c0: control (read@3072,1024B). Runtime 120 seconds [ 845.602771][T25336] No such timeout policy "s" [ 845.602790][T25336] netlink: Failed to associated timeout policy 's' [ 848.351008][T25348] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5140'. [ 848.391233][T25348] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5140'. [ 848.391265][T25348] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5140'. [ 848.391283][T25348] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5140'. [ 848.596144][T25354] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5144'. [ 848.681568][T25354] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5144'. [ 849.676276][T25394] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5157'. [ 849.676801][T25395] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5157'. [ 849.834161][T25394] 8021q: adding VLAN 0 to HW filter on device bond8 [ 849.989299][T25397] bond9 (unregistering): Released all slaves [ 850.659486][T25423] netlink: 104 bytes leftover after parsing attributes in process `syz.2.5164'. [ 851.144515][T25448] netlink: 'syz.4.5170': attribute type 22 has an invalid length. [ 851.144540][T25448] netlink: 'syz.4.5170': attribute type 9 has an invalid length. [ 851.479593][T25458] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5171'. [ 851.565649][T25462] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5173'. [ 851.846608][T25473] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5178'. [ 851.851600][T25473] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5178'. [ 851.851633][T25473] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5178'. [ 852.542654][T25504] bond0: option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 852.547449][T25504] bridge_slave_0: left allmulticast mode [ 852.547505][T25504] bridge_slave_0: left promiscuous mode [ 852.547795][T25504] bridge0: port 1(bridge_slave_0) entered disabled state [ 852.595480][T25504] bridge_slave_1: left allmulticast mode [ 852.595509][T25504] bridge_slave_1: left promiscuous mode [ 852.597113][T25504] bridge0: port 2(bridge_slave_1) entered disabled state [ 852.635833][T25504] bond0: (slave bond_slave_0): Releasing backup interface [ 852.651574][T25504] bond0: (slave bond_slave_1): Releasing backup interface [ 852.699067][T25504] team0: Port device team_slave_0 removed [ 852.734354][T25504] team0: Port device team_slave_1 removed [ 852.756457][T25504] vlan2: left allmulticast mode [ 852.756481][T25504] geneve0: left allmulticast mode [ 852.757329][T25504] vlan2: left promiscuous mode [ 852.757349][T25504] geneve0: left promiscuous mode [ 852.759064][T25504] bridge0: port 3(vlan2) entered disabled state [ 854.094357][T25539] __nla_validate_parse: 4 callbacks suppressed [ 854.094381][T25539] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5197'. [ 854.917677][T25557] smbdirect: ib_dev[syz0] renamed to [sys] [ 855.533437][T25584] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5211'. [ 855.727358][T25596] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5211'. [ 855.843985][T25605] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5211'. [ 855.844027][T25605] netlink: 'syz.4.5211': attribute type 5 has an invalid length. [ 856.020930][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 856.215741][T25615] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5218'. [ 856.332487][T25615] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5218'. [ 856.495343][T25628] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5220'. [ 856.585708][T25628] ip_tables: iptables: counters copy to user failed while replacing table [ 856.694607][T25643] ip_tables: iptables: counters copy to user failed while replacing table [ 856.797825][T25651] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5222'. [ 857.194946][T25663] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5227'. [ 857.435808][T25671] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5229'. [ 857.722711][T25675] openvswitch: netlink: IPv4 frag type 228 is out of range max 2 [ 858.336555][T25694] syzkaller0: entered promiscuous mode [ 858.336584][T25694] syzkaller0: entered allmulticast mode [ 859.267280][T25729] __nla_validate_parse: 3 callbacks suppressed [ 859.267304][T25729] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5243'. [ 859.866244][T25750] macsec0: entered promiscuous mode [ 859.879791][T25750] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5247'. [ 859.957092][T25750] veth1_macvtap: left promiscuous mode [ 860.136314][T25750] macsec0 (unregistering): left promiscuous mode [ 860.237451][T25745] workqueue: name exceeds WQ_NAME_LEN. Truncating to: ç–½mÔ%A¯úÆÿAZøZ´”àIƺ¥þ àø§% [ 860.569074][T25766] netlink: 'syz.4.5249': attribute type 2 has an invalid length. [ 860.631802][T25766] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5249'. [ 860.970299][T25783] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5255'. [ 861.102873][T25790] netlink: 'syz.4.5256': attribute type 1 has an invalid length. [ 861.103721][T25790] netlink: 'syz.4.5256': attribute type 10 has an invalid length. [ 861.103741][T25790] netlink: 55 bytes leftover after parsing attributes in process `syz.4.5256'. [ 861.644723][T25810] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5258'. [ 861.646364][T25811] netlink: 'syz.1.5258': attribute type 16 has an invalid length. [ 861.646386][T25811] netlink: 'syz.1.5258': attribute type 17 has an invalid length. [ 861.711851][T25807] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5259'. [ 862.256397][T25826] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5262'. [ 862.287240][T25811] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 862.517827][T25829] pimreg: entered allmulticast mode [ 862.863723][T25841] gtp1: entered promiscuous mode [ 862.863751][T25841] gtp1: entered allmulticast mode [ 863.308752][T25856] openvswitch: netlink: IPv4 tunnel dst address is zero [ 863.391418][T25859] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5270'. [ 863.613646][T25859] netlink: 48 bytes leftover after parsing attributes in process `syz.4.5270'. [ 863.813066][T25877] batadv0: renamed from batadv_slave_0 [ 863.877922][T25877] batadv0: entered allmulticast mode [ 864.075201][T25879] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 864.075629][T25879] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 864.075891][T25879] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 864.076136][T25879] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 864.076382][T25879] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 864.077337][T25879] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 864.077592][T25879] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 864.078876][T25879] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 864.079125][T25879] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 864.079365][T25879] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 864.453073][T25889] mac80211_hwsim hwsim45 syzkaller0: left promiscuous mode [ 864.453103][T25889] mac80211_hwsim hwsim45 syzkaller0: left allmulticast mode [ 864.913029][T25906] netlink: 'syz.4.5285': attribute type 1 has an invalid length. [ 864.939911][T25905] tipc: Resetting bearer [ 866.054872][T25945] netlink: 'syz.1.5296': attribute type 10 has an invalid length. [ 866.054897][T25945] __nla_validate_parse: 2 callbacks suppressed [ 866.054910][T25945] netlink: 55 bytes leftover after parsing attributes in process `syz.1.5296'. [ 866.204958][T25955] netlink: 244 bytes leftover after parsing attributes in process `syz.3.5299'. [ 866.208148][T25947] netlink: 76 bytes leftover after parsing attributes in process `syz.2.5298'. [ 866.269346][T25958] netlink: 'syz.0.5301': attribute type 1 has an invalid length. [ 866.283806][T25957] netlink: 'syz.3.5299': attribute type 1 has an invalid length. [ 866.722785][T25958] bond0: entered promiscuous mode [ 866.724792][T25958] 8021q: adding VLAN 0 to HW filter on device bond0 [ 866.861227][T25957] 8021q: adding VLAN 0 to HW filter on device bond9 [ 866.984832][T25963] bond9: (slave ip6gretap0): making interface the new active one [ 867.012792][T25963] bond9: (slave ip6gretap0): Enslaving as an active interface with an up link [ 867.618132][T25993] netlink: 'syz.3.5307': attribute type 1 has an invalid length. [ 867.749742][T25994] gretap0: entered allmulticast mode [ 868.090118][T26013] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.5316'. [ 868.317171][T26020] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5317'. [ 869.076661][T26059] 0: reclassify loop, rule prio 0, protocol 03 [ 869.159954][T26065] x_tables: duplicate underflow at hook 1 [ 869.169341][T26065] netlink: 'syz.4.5330': attribute type 26 has an invalid length. [ 869.300037][T26067] netlink: 44 bytes leftover after parsing attributes in process `syz.3.5328'. [ 869.300066][T26067] netlink: 35 bytes leftover after parsing attributes in process `syz.3.5328'. [ 869.300085][T26067] netlink: 'syz.3.5328': attribute type 5 has an invalid length. [ 869.300098][T26067] netlink: 'syz.3.5328': attribute type 6 has an invalid length. [ 869.300113][T26067] netlink: 35 bytes leftover after parsing attributes in process `syz.3.5328'. [ 870.245101][T26104] netlink: 'syz.3.5341': attribute type 2 has an invalid length. [ 870.245775][T26105] netlink: 'syz.3.5341': attribute type 2 has an invalid length. [ 870.808794][T26123] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5350'. [ 870.839324][T26123] vlan0: entered promiscuous mode [ 870.856228][T26124] netlink: 48 bytes leftover after parsing attributes in process `syz.0.5348'. [ 871.363679][T26134] __nla_validate_parse: 1 callbacks suppressed [ 871.363702][T26134] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5353'. [ 871.734109][T26146] xt_CT: No such helper "snmp_trap" [ 871.808897][T26159] gtp0: entered promiscuous mode [ 871.808920][T26159] gtp0: entered allmulticast mode [ 871.822783][T26159] team0: Device gtp0 is of different type [ 872.052821][T26166] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5364'. [ 872.058812][T26162] vlan0: entered promiscuous mode [ 872.058837][T26162] hsr0: entered promiscuous mode [ 872.059099][T26162] vlan0: entered allmulticast mode [ 872.059116][T26162] hsr0: entered allmulticast mode [ 872.059131][T26162] hsr_slave_0: entered allmulticast mode [ 872.059149][T26162] hsr_slave_1: entered allmulticast mode [ 872.138528][T26166] vlan0: entered promiscuous mode [ 872.261281][T26162] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5362'. [ 872.262371][T26162] hsr_slave_0: left promiscuous mode [ 872.284810][T26162] hsr_slave_1: left promiscuous mode [ 872.563042][T26175] netlink: 48 bytes leftover after parsing attributes in process `syz.1.5367'. [ 872.718434][T26178] bridge0: port 1(bond0) entered blocking state [ 872.719472][T26178] bridge0: port 1(bond0) entered disabled state [ 872.719829][T26178] bond0: entered allmulticast mode [ 872.744539][T26178] bond0: entered promiscuous mode [ 872.784479][T26180] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5369'. [ 872.855870][T26178] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5368'. [ 872.857114][T26178] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5368'. [ 872.889053][T26178] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5368'. [ 872.904757][T26178] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5368'. [ 872.953066][T26185] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5371'. [ 872.953110][T26185] openvswitch: netlink: Flow key attr not present in new flow. [ 873.558374][ T30] audit: type=1800 audit(1789142912.766:20): pid=26198 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.5375" name="memory.events" dev="tmpfs" ino=2354 res=0 errno=0 [ 873.558430][ T30] audit: type=1804 audit(1789142912.766:21): pid=26199 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.5375" name="/newroot/455/memory.events" dev="tmpfs" ino=2354 res=1 errno=0 [ 873.611791][ T30] audit: type=1804 audit(1789142912.826:22): pid=26198 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.5375" name="/newroot/455/memory.events" dev="tmpfs" ino=2354 res=1 errno=0 [ 873.614041][ T30] audit: type=1800 audit(1789142912.826:23): pid=26198 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.5375" name="memory.events" dev="tmpfs" ino=2354 res=0 errno=0 [ 873.641728][ T30] audit: type=1800 audit(1789142912.846:24): pid=26198 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.5375" name="memory.events" dev="tmpfs" ino=2354 res=0 errno=0 [ 873.666271][ T30] audit: type=1800 audit(1789142912.876:25): pid=26198 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.5375" name="memory.events" dev="tmpfs" ino=2354 res=0 errno=0 [ 873.685506][ T30] audit: type=1800 audit(1789142912.896:26): pid=26198 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.5375" name="memory.events" dev="tmpfs" ino=2354 res=0 errno=0 [ 873.726152][ T30] audit: type=1804 audit(1789142912.936:27): pid=26199 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.5375" name="/newroot/455/memory.events" dev="tmpfs" ino=2354 res=1 errno=0 [ 873.841329][ T30] audit: type=1800 audit(1789142913.056:28): pid=26198 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.5375" name="memory.events" dev="tmpfs" ino=2354 res=0 errno=0 [ 873.841385][ T30] audit: type=1800 audit(1789142913.056:29): pid=26198 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.5375" name="memory.events" dev="tmpfs" ino=2354 res=0 errno=0 [ 874.582070][ T26] block nbd6: Possible stuck request ffff888026c75080: control (read@0,1024B). Runtime 150 seconds [ 874.582115][ T26] block nbd6: Possible stuck request ffff888026c75240: control (read@1024,1024B). Runtime 150 seconds [ 874.582145][ T26] block nbd6: Possible stuck request ffff888026c75400: control (read@2048,1024B). Runtime 150 seconds [ 874.582174][ T26] block nbd6: Possible stuck request ffff888026c755c0: control (read@3072,1024B). Runtime 150 seconds [ 874.778822][T26219] syzkaller0: entered promiscuous mode [ 874.779033][T26219] syzkaller0: entered allmulticast mode [ 874.989062][T26230] netlink: 'syz.2.5384': attribute type 1 has an invalid length. [ 874.989088][T26230] netlink: 'syz.2.5384': attribute type 2 has an invalid length. [ 875.518342][ T26] block nbd7: Possible stuck request ffff888026d25080: control (read@0,1024B). Runtime 150 seconds [ 875.518390][ T26] block nbd7: Possible stuck request ffff888026d25240: control (read@1024,1024B). Runtime 150 seconds [ 875.518421][ T26] block nbd7: Possible stuck request ffff888026d25400: control (read@2048,1024B). Runtime 150 seconds [ 875.518451][ T26] block nbd7: Possible stuck request ffff888026d255c0: control (read@3072,1024B). Runtime 150 seconds [ 877.332992][T26209] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 877.834156][T26252] __nla_validate_parse: 33 callbacks suppressed [ 877.834178][T26252] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5388'. [ 877.864445][T26252] vlan0: entered promiscuous mode [ 878.085971][T26264] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5391'. [ 878.140102][T26264] netlink: NAT attribute has 4 unknown bytes [ 878.140141][T26264] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 879.713595][T26306] lo speed is unknown, defaulting to 1000 [ 879.751759][T26309] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5404'. [ 879.751796][T26309] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5404'. [ 881.107264][T26338] netlink: 'syz.3.5412': attribute type 1 has an invalid length. [ 881.392101][T26343] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5413'. [ 881.954265][T26369] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5420'. [ 882.097167][T26369] 8021q: adding VLAN 0 to HW filter on device bond6 [ 882.648938][T26395] gretap2: entered promiscuous mode [ 883.730913][T26436] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5440'. [ 884.197701][T26452] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5444'. [ 885.351245][T26482] netlink: 'syz.0.5449': attribute type 2 has an invalid length. [ 885.351271][T26482] netlink: 'syz.0.5449': attribute type 8 has an invalid length. [ 885.351288][T26482] netlink: 120 bytes leftover after parsing attributes in process `syz.0.5449'. [ 885.694142][T26489] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 887.166389][T26539] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5465'. [ 887.268994][T26539] bond13: Invalid ad_actor_system MAC address. [ 887.269019][T26539] bond13: option ad_actor_system: invalid value (7) [ 887.345306][T26539] bond13 (unregistering): Released all slaves [ 888.928337][T26603] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 889.485369][T26617] lo speed is unknown, defaulting to 1000 [ 889.853959][T26618] lo speed is unknown, defaulting to 1000 [ 890.715188][T26656] netlink: 'syz.3.5489': attribute type 1 has an invalid length. [ 891.217208][T26664] bridge4: entered promiscuous mode [ 891.217424][T26664] bridge4: entered allmulticast mode [ 891.262467][T26664] bond11: (slave bridge4): making interface the new active one [ 891.265094][T26664] bond11: (slave bridge4): Enslaving as an active interface with an up link [ 891.343574][T26674] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5493'. [ 891.942100][T26646] bond0 (unregistering): Released all slaves [ 895.815174][ T4985] udevd[4985]: worker [21969] /devices/virtual/block/nbd6 is taking a long time [ 895.815234][ T4985] udevd[4985]: worker [22103] /devices/virtual/block/nbd7 is taking a long time [ 904.671490][ T26] block nbd6: Possible stuck request ffff888026c75080: control (read@0,1024B). Runtime 180 seconds [ 904.671540][ T26] block nbd6: Possible stuck request ffff888026c75240: control (read@1024,1024B). Runtime 180 seconds [ 904.671572][ T26] block nbd6: Possible stuck request ffff888026c75400: control (read@2048,1024B). Runtime 180 seconds [ 904.671636][ T26] block nbd6: Possible stuck request ffff888026c755c0: control (read@3072,1024B). Runtime 180 seconds [ 904.822716][ T4985] udevd[4985]: worker [21969] /devices/virtual/block/nbd6 timeout; kill it [ 904.825816][ T4985] udevd[4985]: seq 26846 '/devices/virtual/block/nbd6' killed [ 904.825872][ T4985] udevd[4985]: worker [22103] /devices/virtual/block/nbd7 timeout; kill it [ 904.825994][ T4985] udevd[4985]: seq 26886 '/devices/virtual/block/nbd7' killed [ 905.941344][ C1] ip6_tnl_xmit_ctl: 40 callbacks suppressed [ 905.941371][ C1] ip6_tunnel: L xmit: Local address not yet configured! [ 905.963983][ T26] block nbd7: Possible stuck request ffff888026d25080: control (read@0,1024B). Runtime 180 seconds [ 905.964036][ T26] block nbd7: Possible stuck request ffff888026d25240: control (read@1024,1024B). Runtime 180 seconds [ 905.964077][ T26] block nbd7: Possible stuck request ffff888026d25400: control (read@2048,1024B). Runtime 180 seconds [ 905.964109][ T26] block nbd7: Possible stuck request ffff888026d255c0: control (read@3072,1024B). Runtime 180 seconds [ 916.180512][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 929.692411][T26734] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5507'. [ 929.771234][ T1382] bond9: (slave ip6gretap0): link status definitely down, disabling slave [ 929.775240][ T1382] bond9: now running without any active interface! [ 929.831361][ T30] kauditd_printk_skb: 60 callbacks suppressed [ 929.831384][ T30] audit: type=1804 audit(1789142969.046:90): pid=26733 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.5506" name="/newroot/540/cgroup.controllers" dev="tmpfs" ino=2794 res=1 errno=0 [ 929.831714][ T30] audit: type=1800 audit(1789142969.046:91): pid=26733 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.5506" name="cgroup.controllers" dev="tmpfs" ino=2794 res=0 errno=0 [ 930.535219][T26760] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5516'. [ 930.578710][T26760] vlan0: entered promiscuous mode [ 931.119968][T26780] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5523'. [ 931.245765][ T30] audit: type=1804 audit(1789142970.456:92): pid=26781 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.5524" name="/newroot/486/cgroup.controllers" dev="tmpfs" ino=2513 res=1 errno=0 [ 931.247283][ T30] audit: type=1800 audit(1789142970.456:93): pid=26781 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.5524" name="cgroup.controllers" dev="tmpfs" ino=2513 res=0 errno=0 [ 931.309632][T26781] netlink: 'syz.1.5524': attribute type 3 has an invalid length. [ 931.309664][T26781] netlink: 'syz.1.5524': attribute type 3 has an invalid length. [ 931.401551][ T30] audit: type=1804 audit(1789142970.616:94): pid=26783 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.5524" name="/newroot/486/cgroup.controllers" dev="tmpfs" ino=2513 res=1 errno=0 [ 931.948140][T26792] syzkaller1: entered promiscuous mode [ 931.948169][T26792] syzkaller1: entered allmulticast mode [ 933.035615][T26822] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5535'. [ 933.277310][T26828] openvswitch: netlink: VXLAN extension 12 out of range max 1 [ 933.611540][T26841] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5540'. [ 934.596164][T26867] bond0: option min_links: invalid value (18446744073709551612) [ 934.596190][T26867] bond0: option min_links: allowed values 0 - 2147483647 [ 934.654701][T26880] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5547'. [ 934.693671][T26867] bond0 (unregistering): Released all slaves [ 934.746099][ T26] block nbd6: Possible stuck request ffff888026c75080: control (read@0,1024B). Runtime 210 seconds [ 934.746145][ T26] block nbd6: Possible stuck request ffff888026c75240: control (read@1024,1024B). Runtime 210 seconds [ 934.746176][ T26] block nbd6: Possible stuck request ffff888026c75400: control (read@2048,1024B). Runtime 210 seconds [ 934.746204][ T26] block nbd6: Possible stuck request ffff888026c755c0: control (read@3072,1024B). Runtime 210 seconds [ 934.828323][T26866] bond0: option min_links: invalid value (18446744073709551612) [ 934.828352][T26866] bond0: option min_links: allowed values 0 - 2147483647 [ 934.847348][T26866] bond0 (unregistering): Released all slaves [ 934.878147][T26880] 8021q: VLANs not supported on sit0 [ 935.121561][T26891] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5550'. [ 935.379137][T26894] syzkaller0: entered promiscuous mode [ 935.379166][T26894] syzkaller0: entered allmulticast mode [ 935.986022][T26909] sock: sock_timestamping_bind_phc: sock not bind to device [ 936.031066][ T26] block nbd7: Possible stuck request ffff888026d25080: control (read@0,1024B). Runtime 210 seconds [ 936.031113][ T26] block nbd7: Possible stuck request ffff888026d25240: control (read@1024,1024B). Runtime 210 seconds [ 936.031144][ T26] block nbd7: Possible stuck request ffff888026d25400: control (read@2048,1024B). Runtime 210 seconds [ 936.031175][ T26] block nbd7: Possible stuck request ffff888026d255c0: control (read@3072,1024B). Runtime 210 seconds [ 936.632342][T26932] netlink: 'syz.3.5557': attribute type 104 has an invalid length. [ 936.739945][T26937] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5557'. [ 936.739987][T26937] netlink: 'syz.3.5557': attribute type 30 has an invalid length. [ 936.934860][T26939] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5562'. [ 937.001526][T26940] netlink: Unknown NAT attribute (type=1137, max=9) [ 937.001566][T26940] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 940.206015][T26937] vxlan0: entered promiscuous mode [ 940.206050][T26937] vxlan0: entered allmulticast mode [ 940.240735][ T1382] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 940.240784][ T1382] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 940.240821][ T1382] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 940.240858][ T1382] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 940.379238][T26943] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5563'. [ 940.521855][T26943] IPv6: NLM_F_CREATE should be specified when creating new route [ 940.688415][T26953] FAULT_INJECTION: forcing a failure. [ 940.688415][T26953] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 940.688457][T26953] CPU: 1 UID: 0 PID: 26953 Comm: syz.4.5567 Not tainted syzkaller #0 PREEMPT(full) [ 940.688484][T26953] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 940.688500][T26953] Call Trace: [ 940.688510][T26953] [ 940.688521][T26953] dump_stack_lvl+0xe8/0x150 [ 940.688564][T26953] should_fail_ex+0x410/0x560 [ 940.688600][T26953] _copy_from_user+0x2d/0xb0 [ 940.688632][T26953] __sys_bpf+0x2e7/0xd90 [ 940.688670][T26953] ? __pfx___sys_bpf+0x10/0x10 [ 940.688710][T26953] ? __fget_files+0x2a/0x420 [ 940.688775][T26953] ? ksys_write+0x242/0x270 [ 940.688814][T26953] ? __pfx_ksys_write+0x10/0x10 [ 940.688854][T26953] __x64_sys_bpf+0xba/0xd0 [ 940.688898][T26953] do_syscall_64+0x166/0x520 [ 940.688925][T26953] ? trace_irq_disable+0x3b/0x140 [ 940.688948][T26953] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 940.688975][T26953] ? clear_bhb_loop+0x70/0xc0 [ 940.689005][T26953] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 940.689030][T26953] RIP: 0033:0x7fa8d279e159 [ 940.689053][T26953] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 940.689082][T26953] RSP: 002b:00007fa8d3616028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 940.689118][T26953] RAX: ffffffffffffffda RBX: 00007fa8d2a25fa0 RCX: 00007fa8d279e159 [ 940.689137][T26953] RDX: 000000000000000c RSI: 0000200000000340 RDI: 000000000000000a [ 940.689153][T26953] RBP: 00007fa8d3616090 R08: 0000000000000000 R09: 0000000000000000 [ 940.689170][T26953] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 940.689185][T26953] R13: 00007fa8d2a26038 R14: 00007fa8d2a25fa0 R15: 00007fff7d7acd68 [ 940.689223][T26953] [ 941.586502][T26976] netlink: 'syz.2.5576': attribute type 4 has an invalid length. [ 941.612730][T26976] netlink: 'syz.2.5576': attribute type 4 has an invalid length. [ 941.709477][T26977] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5575'. [ 941.719995][T26979] netlink: 'syz.1.5577': attribute type 23 has an invalid length. [ 941.720017][T26979] netlink: 'syz.1.5577': attribute type 21 has an invalid length. [ 941.720037][T26979] IPv6: NLM_F_CREATE should be specified when creating new route [ 941.897332][T26979] syzkaller0: entered promiscuous mode [ 941.897358][T26979] syzkaller0: entered allmulticast mode [ 942.032025][T26970] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5573'. [ 942.954882][T27012] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5583'. [ 943.104455][T27011] scsi_nl_rcv_msg: discarding partial skb [ 943.331363][T27025] veth1_to_bond: entered allmulticast mode [ 943.469549][T27025] veth1_to_bond: left allmulticast mode [ 943.732933][T27034] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5591'. [ 944.013108][T27051] netlink: 'syz.3.5593': attribute type 3 has an invalid length. [ 944.189440][T27058] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5596'. [ 944.416941][T27063] netlink: 56 bytes leftover after parsing attributes in process `syz.1.5600'. [ 944.475644][T27063] netlink: 288 bytes leftover after parsing attributes in process `syz.1.5600'. [ 944.557887][T27073] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5599'. [ 944.636178][T27070] veth1_to_bond: entered allmulticast mode [ 944.668334][T27077] netlink: 'syz.0.5599': attribute type 4 has an invalid length. [ 945.330424][T27086] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5604'. [ 945.383053][T27089] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5605'. [ 945.383643][T27062] veth1_to_bond: left allmulticast mode [ 945.693668][T27090] xt_CT: No such helper "snmp_trap" [ 946.091293][T27108] netlink: 'syz.2.5610': attribute type 21 has an invalid length. [ 946.091320][T27108] netlink: 128 bytes leftover after parsing attributes in process `syz.2.5610'. [ 946.091397][T27108] netlink: 'syz.2.5610': attribute type 5 has an invalid length. [ 946.091414][T27108] netlink: 3 bytes leftover after parsing attributes in process `syz.2.5610'. [ 946.489118][T27117] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5613'. [ 946.557255][T27117] vlan3: entered promiscuous mode [ 947.071158][T27129] xt_hashlimit: size too large, truncated to 1048576 [ 947.597172][T27147] FAULT_INJECTION: forcing a failure. [ 947.597172][T27147] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 947.597211][T27147] CPU: 1 UID: 0 PID: 27147 Comm: syz.2.5621 Not tainted syzkaller #0 PREEMPT(full) [ 947.597239][T27147] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 947.597254][T27147] Call Trace: [ 947.597263][T27147] [ 947.597274][T27147] dump_stack_lvl+0xe8/0x150 [ 947.597313][T27147] should_fail_ex+0x410/0x560 [ 947.597346][T27147] _copy_from_iter+0x1d3/0x1660 [ 947.597382][T27147] ? __alloc_skb+0x27a/0x7a0 [ 947.597413][T27147] ? __alloc_skb+0x27a/0x7a0 [ 947.597441][T27147] ? __alloc_skb+0x27a/0x7a0 [ 947.597467][T27147] ? __pfx__copy_from_iter+0x10/0x10 [ 947.597491][T27147] ? kmem_cache_alloc_node_noprof+0x1f9/0x610 [ 947.597532][T27147] ? __alloc_skb+0x27a/0x7a0 [ 947.597555][T27147] ? __alloc_skb+0x27a/0x7a0 [ 947.597587][T27147] ? netlink_sendmsg+0x650/0xb40 [ 947.597623][T27147] ? skb_put+0x112/0x210 [ 947.597654][T27147] netlink_sendmsg+0x6c0/0xb40 [ 947.597698][T27147] ? __pfx_netlink_sendmsg+0x10/0x10 [ 947.597741][T27147] ? apparmor_socket_sendmsg+0x98/0x360 [ 947.597772][T27147] ? __pfx_netlink_sendmsg+0x10/0x10 [ 947.597806][T27147] sock_sendmsg_nosec+0x13a/0x180 [ 947.597847][T27147] ____sys_sendmsg+0x54e/0x850 [ 947.597883][T27147] ? __pfx_____sys_sendmsg+0x10/0x10 [ 947.597923][T27147] ? import_iovec+0x73/0xa0 [ 947.597956][T27147] ___sys_sendmsg+0x2a5/0x360 [ 947.597985][T27147] ? __lock_acquire+0x747/0x2de0 [ 947.598015][T27147] ? __pfx____sys_sendmsg+0x10/0x10 [ 947.598083][T27147] ? __fget_files+0x2a/0x420 [ 947.598115][T27147] ? __fget_files+0x3a2/0x420 [ 947.598158][T27147] __x64_sys_sendmsg+0x1b1/0x290 [ 947.598191][T27147] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 947.598245][T27147] do_syscall_64+0x166/0x520 [ 947.598271][T27147] ? trace_irq_disable+0x3b/0x140 [ 947.598295][T27147] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 947.598319][T27147] ? clear_bhb_loop+0x70/0xc0 [ 947.598348][T27147] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 947.598379][T27147] RIP: 0033:0x7f747ab9e159 [ 947.598400][T27147] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 947.598421][T27147] RSP: 002b:00007f747baaf028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 947.598446][T27147] RAX: ffffffffffffffda RBX: 00007f747ae25fa0 RCX: 00007f747ab9e159 [ 947.598476][T27147] RDX: 0000000000000000 RSI: 0000200000000840 RDI: 0000000000000004 [ 947.598490][T27147] RBP: 00007f747baaf090 R08: 0000000000000000 R09: 0000000000000000 [ 947.598504][T27147] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 947.598518][T27147] R13: 00007f747ae26038 R14: 00007f747ae25fa0 R15: 00007ffd81e737b8 [ 947.598552][T27147] [ 947.668370][T27148] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5622'. [ 947.675012][T27148] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5622'. [ 947.944637][T27167] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5607'. [ 947.944665][T27167] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5607'. [ 948.583524][T27170] bond14: entered allmulticast mode [ 948.589258][T27173] netlink: 'syz.4.5624': attribute type 13 has an invalid length. [ 948.698218][T27171] macvlan3: entered promiscuous mode [ 948.698246][T27171] macvlan3: entered allmulticast mode [ 948.724241][T27171] bond14: entered promiscuous mode [ 948.735107][T27171] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 948.776545][T27171] bond14: left promiscuous mode [ 949.081929][T27196] IPv6: sit2: Disabled Multicast RS [ 949.413494][T27208] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5631'. [ 949.600292][T27212] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5631'. [ 949.722194][T27218] netlink: 'syz.0.5634': attribute type 1 has an invalid length. [ 949.952152][T27218] 8021q: adding VLAN 0 to HW filter on device bond0 [ 950.018731][T27227] bond0: (slave geneve2): making interface the new active one [ 950.041852][T27227] bond0: (slave geneve2): Enslaving as an active interface with an up link [ 950.063090][ T9385] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 950.202237][T27182] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 950.202291][T27182] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 950.202331][T27182] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 950.424927][T27238] bond13: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 950.448880][T27238] bond13 (unregistering): Released all slaves [ 951.437135][T27263] FAULT_INJECTION: forcing a failure. [ 951.437135][T27263] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 951.437171][T27263] CPU: 0 UID: 0 PID: 27263 Comm: syz.4.5643 Not tainted syzkaller #0 PREEMPT(full) [ 951.437196][T27263] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 951.437211][T27263] Call Trace: [ 951.437220][T27263] [ 951.437231][T27263] dump_stack_lvl+0xe8/0x150 [ 951.437269][T27263] should_fail_ex+0x410/0x560 [ 951.437300][T27263] _copy_to_user+0x31/0xb0 [ 951.437331][T27263] simple_read_from_buffer+0xe1/0x170 [ 951.437369][T27263] proc_fail_nth_read+0x1bb/0x230 [ 951.437404][T27263] ? common_file_perm+0x20e/0x2b0 [ 951.437434][T27263] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 951.437473][T27263] ? rw_verify_area+0x24a/0x4c0 [ 951.437516][T27263] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 951.437550][T27263] vfs_read+0x213/0xa80 [ 951.437590][T27263] ? __pfx___mutex_lock+0x10/0x10 [ 951.437618][T27263] ? __pfx_vfs_read+0x10/0x10 [ 951.437653][T27263] ? __fget_files+0x2a/0x420 [ 951.437689][T27263] ? __fget_files+0x3a2/0x420 [ 951.437719][T27263] ? __fget_files+0x2a/0x420 [ 951.437760][T27263] ksys_read+0x150/0x270 [ 951.437798][T27263] ? __pfx_ksys_read+0x10/0x10 [ 951.437843][T27263] do_syscall_64+0x166/0x520 [ 951.437867][T27263] ? trace_irq_disable+0x3b/0x140 [ 951.437890][T27263] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 951.437914][T27263] ? clear_bhb_loop+0x70/0xc0 [ 951.437942][T27263] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 951.437965][T27263] RIP: 0033:0x7fa8d275e98e [ 951.437986][T27263] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 951.438004][T27263] RSP: 002b:00007fa8d3615fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 951.438025][T27263] RAX: ffffffffffffffda RBX: 00007fa8d36166c0 RCX: 00007fa8d275e98e [ 951.438043][T27263] RDX: 000000000000000f RSI: 00007fa8d36160a0 RDI: 0000000000000003 [ 951.438058][T27263] RBP: 00007fa8d3616090 R08: 0000000000000000 R09: 0000000000000000 [ 951.438073][T27263] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 951.438093][T27263] R13: 00007fa8d2a26038 R14: 00007fa8d2a25fa0 R15: 00007fff7d7acd68 [ 951.438129][T27263] [ 952.269600][T27280] lo speed is unknown, defaulting to 1000 [ 952.269668][T27280] lo speed is unknown, defaulting to 1000 [ 952.305803][T27280] lo speed is unknown, defaulting to 1000 [ 952.333645][T27280] smbdirect: ib_dev[syz_device_name_32_chars_1234567]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 952.333690][T27280] smbdirect: ib_dev[syz_device_name_32_chars_1234567]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 952.333734][T27280] smbdirect: ib_dev[syz_device_name_32_chars_1234567]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 952.440005][T27280] infiniband syz_device_name_32_chars_1234567: RDMA CMA: cma_listen_on_dev, error -22 [ 952.461104][T27291] __nla_validate_parse: 1 callbacks suppressed [ 952.461126][T27291] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5651'. [ 952.498301][T27287] xt_TCPMSS: Only works on TCP SYN packets [ 952.631712][T27280] lo speed is unknown, defaulting to 1000 [ 952.657739][T27280] lo speed is unknown, defaulting to 1000 [ 952.745342][T27300] Set syz0 is full, maxelem 0 reached [ 952.756884][T27280] lo speed is unknown, defaulting to 1000 [ 952.800114][T27280] lo speed is unknown, defaulting to 1000 [ 952.828915][T27280] lo speed is unknown, defaulting to 1000 [ 952.857440][T27280] lo speed is unknown, defaulting to 1000 [ 952.976003][T27280] lo speed is unknown, defaulting to 1000 [ 953.007243][T27280] lo speed is unknown, defaulting to 1000 [ 953.021042][T27308] netlink: 'syz.0.5654': attribute type 23 has an invalid length. [ 953.021069][T27308] netlink: 'syz.0.5654': attribute type 11 has an invalid length. [ 953.079067][T27311] netlink: 'syz.0.5654': attribute type 1 has an invalid length. [ 953.126067][T27280] lo speed is unknown, defaulting to 1000 [ 953.258310][T27311] bond8: entered promiscuous mode [ 953.258365][T27311] bond8: entered allmulticast mode [ 953.272714][T27311] 8021q: adding VLAN 0 to HW filter on device bond8 [ 953.553204][T27312] erspan2: entered allmulticast mode [ 953.605177][T27312] bond8: (slave erspan2): making interface the new active one [ 953.605206][T27312] erspan2: entered promiscuous mode [ 953.645205][T27312] bond8: (slave erspan2): Enslaving as an active interface with an up link [ 954.129562][T27341] netlink: 188 bytes leftover after parsing attributes in process `syz.0.5662'. [ 954.235297][T27335] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 954.339790][T27335] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 954.451856][T27335] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 954.515993][T27335] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 954.750662][T27160] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 954.842592][T27160] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 954.925061][T27182] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 954.925149][T27182] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 955.895030][T27383] netlink: 112 bytes leftover after parsing attributes in process `syz.3.5674'. [ 955.919490][T27387] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5676'. [ 956.175926][T27397] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 956.771524][T27412] tipc: Enabled bearer , priority 0 [ 957.006073][T27430] Bluetooth: hci0: unsupported parameter 5161 [ 957.006095][T27430] Bluetooth: hci0: unsupported parameter 8192 [ 957.006109][T27430] Bluetooth: hci0: unsupported parameter 5161 [ 957.006122][T27430] Bluetooth: hci0: unsupported parameter 8192 [ 957.058731][T27430] netlink: 'syz.3.5689': attribute type 9 has an invalid length. [ 957.086644][T27432] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5689'. [ 957.222584][T27411] tipc: Disabling bearer [ 958.126778][T27458] netlink: 'syz.0.5697': attribute type 1 has an invalid length. [ 958.506031][T27479] syzkaller0: entered promiscuous mode [ 958.506057][T27479] syzkaller0: entered allmulticast mode [ 958.759912][T27491] x_tables: duplicate entry at hook 4 [ 958.809711][T27490] syzkaller0: entered promiscuous mode [ 958.809737][T27490] syzkaller0: entered allmulticast mode [ 959.114031][T27498] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5711'. [ 959.418819][T27507] netlink: 'syz.3.5713': attribute type 1 has an invalid length. [ 959.691082][T27507] 8021q: adding VLAN 0 to HW filter on device bond13 [ 959.722772][T27510] bond13: entered allmulticast mode [ 959.740657][T27510] netlink: 56 bytes leftover after parsing attributes in process `syz.3.5713'. [ 959.775501][T27518] netlink: zone id is out of range [ 959.775550][T27518] netlink: zone id is out of range [ 959.775712][T27518] netlink: zone id is out of range [ 959.775779][T27518] netlink: zone id is out of range [ 959.775790][T27518] netlink: zone id is out of range [ 959.775800][T27518] netlink: zone id is out of range [ 959.775810][T27518] netlink: zone id is out of range [ 959.775820][T27518] netlink: zone id is out of range [ 959.775829][T27518] netlink: zone id is out of range [ 959.775839][T27518] netlink: zone id is out of range [ 960.312714][T27537] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5720'. [ 960.315246][T27535] netlink: 32 bytes leftover after parsing attributes in process `syz.1.5721'. [ 960.315295][T27535] netlink: 'syz.1.5721': attribute type 5 has an invalid length. [ 961.271639][T27563] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5724'. [ 961.721978][ T1382] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 962.093183][T27594] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5738'. [ 962.098458][T27594] netlink: 'syz.1.5738': attribute type 21 has an invalid length. [ 962.098482][T27594] netlink: 128 bytes leftover after parsing attributes in process `syz.1.5738'. [ 962.098565][T27594] netlink: 'syz.1.5738': attribute type 5 has an invalid length. [ 962.098600][T27594] netlink: 3 bytes leftover after parsing attributes in process `syz.1.5738'. [ 962.240041][T27594] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5738'. [ 962.672023][T27607] netlink: 9 bytes leftover after parsing attributes in process `syz.1.5741'. [ 963.014515][T27629] veth1_to_bond: entered allmulticast mode [ 963.017331][T27629] veth1_to_bond: entered promiscuous mode [ 963.240431][T27636] netlink: 'syz.0.5751': attribute type 1 has an invalid length. [ 963.246947][T27633] veth1_to_bond (unregistering): left allmulticast mode [ 963.246991][T27633] veth1_to_bond (unregistering): left promiscuous mode [ 963.301762][T27636] geneve3: entered promiscuous mode [ 964.422481][T27571] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 964.821859][ T26] block nbd6: Possible stuck request ffff888026c75080: control (read@0,1024B). Runtime 240 seconds [ 964.821910][ T26] block nbd6: Possible stuck request ffff888026c75240: control (read@1024,1024B). Runtime 240 seconds [ 964.821943][ T26] block nbd6: Possible stuck request ffff888026c75400: control (read@2048,1024B). Runtime 240 seconds [ 964.821974][ T26] block nbd6: Possible stuck request ffff888026c755c0: control (read@3072,1024B). Runtime 240 seconds [ 965.143492][T27670] __nla_validate_parse: 6 callbacks suppressed [ 965.143514][T27670] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5762'. [ 965.143605][T27670] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5762'. [ 965.343746][T27680] netlink: 'syz.0.5766': attribute type 1 has an invalid length. [ 965.529072][T27694] netlink: 72 bytes leftover after parsing attributes in process `syz.4.5765'. [ 965.591874][T27680] 8021q: adding VLAN 0 to HW filter on device bond10 [ 965.635174][T27688] bond10: entered allmulticast mode [ 965.691451][T27688] netlink: 56 bytes leftover after parsing attributes in process `syz.0.5766'. [ 965.833895][T27692] bond10: (slave ip6gretap1): making interface the new active one [ 965.833924][T27692] ip6gretap1: entered allmulticast mode [ 965.838878][T27692] bond10: (slave ip6gretap1): Enslaving as an active interface with an up link [ 966.102991][ T26] block nbd7: Possible stuck request ffff888026d25080: control (read@0,1024B). Runtime 240 seconds [ 966.103039][ T26] block nbd7: Possible stuck request ffff888026d25240: control (read@1024,1024B). Runtime 240 seconds [ 966.103071][ T26] block nbd7: Possible stuck request ffff888026d25400: control (read@2048,1024B). Runtime 240 seconds [ 966.103101][ T26] block nbd7: Possible stuck request ffff888026d255c0: control (read@3072,1024B). Runtime 240 seconds [ 966.272454][T27703] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5772'. [ 966.762672][T27708] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5774'. [ 966.772397][T27708] netlink: 256 bytes leftover after parsing attributes in process `syz.4.5774'. [ 966.814029][T27715] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5774'. [ 966.887328][T27715] netlink: 256 bytes leftover after parsing attributes in process `syz.4.5774'. [ 967.068726][T13042] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 967.869404][T27757] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5788'. [ 967.940598][T13042] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 968.327439][T27767] tunl0: entered promiscuous mode [ 968.344263][T27767] netlink: 'syz.4.5792': attribute type 4 has an invalid length. [ 969.000363][ T52] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 969.004347][ T52] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 969.008009][ T52] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 969.010006][ T52] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 969.012146][ T52] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 969.658521][T27797] ip6gretap0: left promiscuous mode [ 969.716265][T27797] tipc: Resetting bearer [ 969.736305][T27797] 8021q: adding VLAN 0 to HW filter on device team0 [ 969.737563][T27797] tipc: Resetting bearer [ 970.436369][ T1382] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 970.436413][ T1382] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 970.436445][ T1382] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 42179 - 0 [ 970.436476][ T1382] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 2] type 2 family 0 port 20000 - 0 [ 970.978263][ T1382] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 970.978306][ T1382] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 970.978472][ T1382] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 42179 - 0 [ 970.978507][ T1382] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 2] type 2 family 0 port 20000 - 0 [ 971.063508][ T5620] Bluetooth: hci4: command tx timeout [ 971.141174][T27842] __nla_validate_parse: 3 callbacks suppressed [ 971.141194][T27842] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5813'. [ 971.223188][ T1382] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 971.223240][ T1382] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 971.223271][ T1382] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 42179 - 0 [ 971.223303][ T1382] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 2] type 2 family 0 port 20000 - 0 [ 971.287261][T27843] netlink: 'syz.1.5812': attribute type 1 has an invalid length. [ 971.287647][T27841] netlink: 'syz.1.5812': attribute type 1 has an invalid length. [ 971.386158][T27843] 8021q: adding VLAN 0 to HW filter on device bond7 [ 971.521827][T27845] bond7: (slave veth9): Enslaving as an active interface with a down link [ 971.565210][T27841] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 971.588599][T27841] bond7: (slave batadv1): making interface the new active one [ 971.603111][T27841] batadv1: entered promiscuous mode [ 971.603587][T27841] bond7: (slave batadv1): Enslaving as an active interface with an up link [ 971.610831][T27786] lo speed is unknown, defaulting to 1000 [ 971.824129][T27859] netlink: 'syz.3.5816': attribute type 1 has an invalid length. [ 971.954298][T27862] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5819'. [ 971.954325][T27862] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5819'. [ 971.954355][T27862] netlink: 'syz.1.5819': attribute type 11 has an invalid length. [ 971.995008][ T1382] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 971.995036][ T1382] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 971.995056][ T1382] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 42179 - 0 [ 971.995077][ T1382] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 2] type 2 family 0 port 20000 - 0 [ 972.053559][T27786] lo speed is unknown, defaulting to 1000 [ 972.942823][ T1382] pimreg: left allmulticast mode [ 973.043132][T27890] netlink: 'syz.3.5829': attribute type 16 has an invalid length. [ 973.043158][T27890] netlink: 'syz.3.5829': attribute type 17 has an invalid length. [ 973.141468][ T5620] Bluetooth: hci4: command tx timeout [ 973.611696][T27916] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5832'. [ 973.611727][T27916] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5832'. [ 974.265501][ T1382] bond3 (unregistering): (slave geneve3): Releasing active interface [ 974.366651][ T1382] team0: Port device bridge2 removed [ 974.382598][ T1382] bond2 (unregistering): (slave bridge3): Releasing backup interface [ 974.525841][ T1382] bond0 (unregistering): (slave 17ÿÿÿ): Releasing backup interface [ 974.526226][ T1382] ÿÿÿ: left promiscuous mode [ 974.529904][ T1382] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 974.553724][ T1382] bond_slave_1: left promiscuous mode [ 974.556164][ T1382] bond0 (unregistering): Released all slaves [ 974.584706][ T1382] bond1 (unregistering): (slave 52): Releasing active interface [ 974.587471][ T1382] bond1 (unregistering): Released all slaves [ 974.641386][ T1382] bond2 (unregistering): Released all slaves [ 974.664278][ T1382] bond3 (unregistering): Released all slaves [ 974.691317][ T1382] bond4 (unregistering): Released all slaves [ 974.731970][ T1382] bond5 (unregistering): (slave veth5): Releasing backup interface [ 974.734662][ T1382] bond5 (unregistering): Released all slaves [ 974.769723][ T1382] bond6 (unregistering): Released all slaves [ 974.792381][ T1382] bond7 (unregistering): Released all slaves [ 974.847486][T27890] 0ªî{X¹¦: left allmulticast mode [ 974.902459][T27890] 8021q: adding VLAN 0 to HW filter on device bond0 [ 974.904597][T27890] 8021q: adding VLAN 0 to HW filter on device team0 [ 974.905699][T27890] dummy0: left promiscuous mode [ 974.976033][T27890] bond_slave_0: entered promiscuous mode [ 975.010316][T27890] veth1_macvtap: left promiscuous mode [ 975.011685][T27890] veth0_macvtap: left promiscuous mode [ 975.012952][T27890] veth0_macvtap: entered promiscuous mode [ 975.014317][T27890] veth1_macvtap: entered promiscuous mode [ 975.048212][T27890] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 975.049356][T27890] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 975.067765][T27890] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 975.069647][T27890] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 975.092914][T27890] vti0: left promiscuous mode [ 975.107813][T27890] mac80211_hwsim hwsim50 wlan1: left promiscuous mode [ 975.122969][T27890] tipc: Resetting bearer [ 975.128775][T27890] 8021q: adding VLAN 0 to HW filter on device bond1 [ 975.147821][T27890] geneve2: left promiscuous mode [ 975.167144][T27890] 8021q: adding VLAN 0 to HW filter on device bond2 [ 975.169426][T27890] 8021q: adding VLAN 0 to HW filter on device bond3 [ 975.208405][T27890] 8021q: adding VLAN 0 to HW filter on device bond4 [ 975.233011][ T5620] Bluetooth: hci4: command tx timeout [ 975.234839][T27890] geneve0: entered promiscuous mode [ 975.281518][T27890] bond5: left allmulticast mode [ 975.281969][T27890] 8021q: adding VLAN 0 to HW filter on device bond5 [ 975.344145][T27890] 8021q: adding VLAN 0 to HW filter on device bond6 [ 975.346475][T27890] 8021q: adding VLAN 0 to HW filter on device bond7 [ 975.370125][T27890] 8021q: adding VLAN 0 to HW filter on device bond10 [ 975.381502][T27890] 8021q: adding VLAN 0 to HW filter on device bond11 [ 975.383908][T27890] 8021q: adding VLAN 0 to HW filter on device bond12 [ 975.384880][T27890] bridge4: left promiscuous mode [ 975.384901][T27890] bridge4: left allmulticast mode [ 975.388083][T27890] vxlan0: left promiscuous mode [ 975.388105][T27890] vxlan0: left allmulticast mode [ 975.389267][T27890] bond13: left allmulticast mode [ 975.389674][T27890] 8021q: adding VLAN 0 to HW filter on device bond13 [ 975.444766][T27892] netlink: 56 bytes leftover after parsing attributes in process `syz.3.5829'. [ 975.445294][T27185] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 975.445343][T27185] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 975.445385][T27185] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 975.520741][T27185] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 975.521001][T27185] net_ratelimit: 59 callbacks suppressed [ 975.521017][T27185] bond9: (slave ip6gretap0): failed to get link speed/duplex [ 975.680609][T27185] bond9: (slave ip6gretap0): failed to get link speed/duplex [ 975.703153][T27908] syzkaller0: entered promiscuous mode [ 975.703357][T27908] syzkaller0: entered allmulticast mode [ 975.753156][ T1382] tipc: Disabling bearer [ 975.753316][ T1382] tipc: Left network mode [ 975.754366][T13042] lo speed is unknown, defaulting to 1000 [ 975.754414][T13042] syz_device_name_32_chars_1234567: Port: 1 Link ACTIVE [ 975.831627][T27184] bond9: (slave ip6gretap0): failed to get link speed/duplex [ 976.266051][T27940] netlink: 224 bytes leftover after parsing attributes in process `syz.3.5837'. [ 976.544030][T27940] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5837'. [ 976.629816][T27943] batadv0: entered promiscuous mode [ 976.629850][T27943] batadv0: entered allmulticast mode [ 976.731502][T27182] bond9: (slave ip6gretap0): failed to get link speed/duplex [ 976.752531][T27190] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 976.752815][T27190] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 976.753435][T27190] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 976.753690][T27190] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 976.792473][ T44] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 976.795012][ T44] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 976.795550][ T44] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 976.955149][T27182] bond9: (slave ip6gretap0): failed to get link speed/duplex [ 977.084854][T27190] bond9: (slave ip6gretap0): failed to get link speed/duplex [ 977.143667][ T44] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 977.240579][T27160] bond9: (slave ip6gretap0): failed to get link speed/duplex [ 977.303515][ T5620] Bluetooth: hci4: command tx timeout [ 977.366925][T27183] bond9: (slave ip6gretap0): failed to get link speed/duplex [ 977.461123][ T44] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 977.549484][ T44] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 977.670824][T27160] bond9: (slave ip6gretap0): failed to get link speed/duplex [ 977.674197][ T5280] 8021q: adding VLAN 0 to HW filter on device eth1 [ 977.809860][T27786] bridge0: port 1(bridge_slave_0) entered blocking state [ 977.809981][T27786] bridge0: port 1(bridge_slave_0) entered disabled state [ 977.810176][T27786] bridge_slave_0: entered allmulticast mode [ 977.849745][T27786] bridge_slave_0: entered promiscuous mode [ 977.865409][T27786] bridge0: port 2(bridge_slave_1) entered blocking state [ 977.865904][T27786] bridge0: port 2(bridge_slave_1) entered disabled state [ 977.866239][T27786] bridge_slave_1: entered allmulticast mode [ 977.868525][T27786] bridge_slave_1: entered promiscuous mode [ 978.051046][ T1382] veth0_macvtap: left promiscuous mode [ 978.579228][ T1382] team0 (unregistering): Port device team_slave_1 removed [ 978.603227][ T1382] team0 (unregistering): Port device team_slave_0 removed [ 979.166256][T27786] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 979.184736][ T5280] 8021q: adding VLAN 0 to HW filter on device eth2 [ 979.203034][T27786] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 979.291859][T27786] team0: Port device team_slave_0 added [ 979.312335][T27786] team0: Port device team_slave_1 added [ 979.340840][T27182] bond9: (slave ip6gretap0): failed to get link speed/duplex [ 979.401793][T27786] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 979.401812][T27786] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 979.401839][T27786] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 979.455690][T27786] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 979.455710][T27786] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 979.455738][T27786] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 979.825741][T27786] hsr_slave_0: entered promiscuous mode [ 979.828739][T27786] hsr_slave_1: entered promiscuous mode [ 979.897806][ T1382] IPVS: stop unused estimator thread 0... [ 980.316004][ T5280] 8021q: adding VLAN 0 to HW filter on device eth3 [ 980.607272][T27183] net_ratelimit: 6 callbacks suppressed [ 980.607298][T27183] bond9: (slave ip6gretap0): failed to get link speed/duplex [ 980.711826][ T9385] bond9: (slave ip6gretap0): failed to get link speed/duplex [ 980.790159][T27786] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 980.805448][T27786] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 980.806823][T27786] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 980.834373][T27786] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 980.835705][T27786] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 980.840115][T27786] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 980.844388][T27786] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 980.873778][T27786] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 980.903603][T27183] bond9: (slave ip6gretap0): failed to get link speed/duplex [ 980.981650][T27786] 8021q: adding VLAN 0 to HW filter on device bond0 [ 981.005304][T27786] 8021q: adding VLAN 0 to HW filter on device team0 [ 981.019223][ T9385] bridge0: port 1(bridge_slave_0) entered blocking state [ 981.019317][ T9385] bridge0: port 1(bridge_slave_0) entered forwarding state [ 981.045133][T27190] bridge0: port 2(bridge_slave_1) entered blocking state [ 981.045241][T27190] bridge0: port 2(bridge_slave_1) entered forwarding state [ 981.101299][T27182] bond9: (slave ip6gretap0): failed to get link speed/duplex [ 981.126607][T27786] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 981.212886][ T9385] bond9: (slave ip6gretap0): failed to get link speed/duplex [ 981.320468][T27182] bond9: (slave ip6gretap0): failed to get link speed/duplex [ 981.433457][ T9385] bond9: (slave ip6gretap0): failed to get link speed/duplex [ 981.545089][ T9385] bond9: (slave ip6gretap0): failed to get link speed/duplex [ 981.652377][T27183] bond9: (slave ip6gretap0): failed to get link speed/duplex [ 981.692229][T27786] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 981.763254][T27182] bond9: (slave ip6gretap0): failed to get link speed/duplex [ 982.059783][T27786] veth0_vlan: entered promiscuous mode [ 982.076805][T27786] veth1_vlan: entered promiscuous mode [ 982.137918][T27786] veth0_macvtap: entered promiscuous mode [ 982.148984][T27786] veth1_macvtap: entered promiscuous mode [ 982.177588][T27786] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 982.197165][T27786] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 982.295224][ T9385] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 982.296888][T27184] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 982.297327][T27184] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 982.297369][T27184] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 982.384688][ T9385] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 982.384712][ T9385] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 982.455024][T27190] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 982.455049][T27190] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 982.740401][ C1] ip6_tnl_xmit_ctl: 2 callbacks suppressed [ 982.740423][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 982.882325][T27184] batadv1: left promiscuous mode [ 985.650805][T27184] net_ratelimit: 33 callbacks suppressed [ 985.650830][T27184] bond9: (slave ip6gretap0): failed to get link speed/duplex [ 985.760674][ T9385] bond9: (slave ip6gretap0): failed to get link speed/duplex [ 985.870701][T27184] bond9: (slave ip6gretap0): failed to get link speed/duplex [ 985.980443][ T9385] bond9: (slave ip6gretap0): failed to get link speed/duplex [ 986.090915][T27183] bond9: (slave ip6gretap0): failed to get link speed/duplex [ 986.200512][ T9385] bond9: (slave ip6gretap0): failed to get link speed/duplex [ 986.310917][T27183] bond9: (slave ip6gretap0): failed to get link speed/duplex [ 986.421012][T27184] bond9: (slave ip6gretap0): failed to get link speed/duplex [ 986.530704][T27183] bond9: (slave ip6gretap0): failed to get link speed/duplex [ 986.640442][T27184] bond9: (slave ip6gretap0): failed to get link speed/duplex [ 989.780440][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 989.780882][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 990.750913][ T9385] net_ratelimit: 36 callbacks suppressed [ 990.750938][ T9385] bond9: (slave ip6gretap0): failed to get link speed/duplex [ 990.861187][ T9385] bond9: (slave ip6gretap0): failed to get link speed/duplex [ 990.970844][T27190] bond9: (slave ip6gretap0): failed to get link speed/duplex [ 991.081161][T27184] bond9: (slave ip6gretap0): failed to get link speed/duplex [ 991.190798][T27190] bond9: (slave ip6gretap0): failed to get link speed/duplex [ 991.301158][T27190] bond9: (slave ip6gretap0): failed to get link speed/duplex [ 991.410914][T27190] bond9: (slave ip6gretap0): failed to get link speed/duplex [ 991.521285][ T9385] bond9: (slave ip6gretap0): failed to get link speed/duplex [ 991.630921][T27190] bond9: (slave ip6gretap0): failed to get link speed/duplex [ 991.741110][T27184] bond9: (slave ip6gretap0): failed to get link speed/duplex [ 994.914194][ T26] block nbd6: Possible stuck request ffff888026c75080: control (read@0,1024B). Runtime 270 seconds [ 994.914236][ T26] block nbd6: Possible stuck request ffff888026c75240: control (read@1024,1024B). Runtime 270 seconds [ 994.914260][ T26] block nbd6: Possible stuck request ffff888026c75400: control (read@2048,1024B). Runtime 270 seconds [ 994.914284][ T26] block nbd6: Possible stuck request ffff888026c755c0: control (read@3072,1024B). Runtime 270 seconds [ 995.820665][T27182] net_ratelimit: 36 callbacks suppressed [ 995.820690][T27182] bond9: (slave ip6gretap0): failed to get link speed/duplex [ 995.930875][T27182] bond9: (slave ip6gretap0): failed to get link speed/duplex [ 996.040508][T27184] bond9: (slave ip6gretap0): failed to get link speed/duplex [ 996.150479][T27182] bond9: (slave ip6gretap0): failed to get link speed/duplex [ 996.185269][ T26] block nbd7: Possible stuck request ffff888026d25080: control (read@0,1024B). Runtime 270 seconds [ 996.185305][ T26] block nbd7: Possible stuck request ffff888026d25240: control (read@1024,1024B). Runtime 270 seconds [ 996.185326][ T26] block nbd7: Possible stuck request ffff888026d25400: control (read@2048,1024B). Runtime 270 seconds [ 996.185346][ T26] block nbd7: Possible stuck request ffff888026d255c0: control (read@3072,1024B). Runtime 270 seconds [ 996.261272][T27182] bond9: (slave ip6gretap0): failed to get link speed/duplex [ 996.370408][T27160] bond9: (slave ip6gretap0): failed to get link speed/duplex [ 996.480468][ T9385] bond9: (slave ip6gretap0): failed to get link speed/duplex [ 996.590456][T27184] bond9: (slave ip6gretap0): failed to get link speed/duplex [ 996.700414][T27182] bond9: (slave ip6gretap0): failed to get link speed/duplex [ 996.810675][T27184] bond9: (slave ip6gretap0): failed to get link speed/duplex [ 1000.880531][ T9385] net_ratelimit: 36 callbacks suppressed [ 1000.880555][ T9385] bond9: (slave ip6gretap0): failed to get link speed/duplex [ 1000.991312][T27160] bond9: (slave ip6gretap0): failed to get link speed/duplex [ 1001.100812][ T9385] bond9: (slave ip6gretap0): failed to get link speed/duplex [ 1001.210961][T27160] bond9: (slave ip6gretap0): failed to get link speed/duplex [ 1001.320920][T27182] bond9: (slave ip6gretap0): failed to get link speed/duplex [ 1001.430967][ T9385] bond9: (slave ip6gretap0): failed to get link speed/duplex [ 1001.541128][T27160] bond9: (slave ip6gretap0): failed to get link speed/duplex [ 1001.651383][T27184] bond9: (slave ip6gretap0): failed to get link speed/duplex [ 1001.760862][T27184] bond9: (slave ip6gretap0): failed to get link speed/duplex [ 1001.870874][T27160] bond9: (slave ip6gretap0): failed to get link speed/duplex [ 1005.780679][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1005.941429][T27190] net_ratelimit: 36 callbacks suppressed [ 1005.941455][T27190] bond9: (slave ip6gretap0): failed to get link speed/duplex [ 1006.051224][T27190] bond9: (slave ip6gretap0): failed to get link speed/duplex [ 1006.161166][ T9385] bond9: (slave ip6gretap0): failed to get link speed/duplex [ 1006.271918][T27182] bond9: (slave ip6gretap0): failed to get link speed/duplex [ 1006.381361][T27182] bond9: (slave ip6gretap0): failed to get link speed/duplex [ 1006.430931][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1006.491314][ T9385] bond9: (slave ip6gretap0): failed to get link speed/duplex [ 1006.601439][T27182] bond9: (slave ip6gretap0): failed to get link speed/duplex [ 1006.711301][ T9385] bond9: (slave ip6gretap0): failed to get link speed/duplex [ 1006.822298][ T9385] bond9: (slave ip6gretap0): failed to get link speed/duplex [ 1006.930424][ T9385] bond9: (slave ip6gretap0): failed to get link speed/duplex [ 1009.146013][T28146] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5839'. [ 1009.324894][ T52] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1009.333618][ T52] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1009.347689][ T52] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1009.364594][ T52] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1009.365459][ T52] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1009.442278][T28152] ip6gre3: entered allmulticast mode [ 1009.449289][T27184] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 1009.675706][T28155] netlink: 4912 bytes leftover after parsing attributes in process `syz.0.5843'. [ 1009.833644][T28138] virtio_blk virtio4: 1/0/0 default/read/poll queues [ 1009.874038][T28138] virtio_blk virtio4: [vda] 262144 512-byte logical blocks (134 MB/128 MiB) [ 1009.944141][T28138] Dev vda: unable to read RDB block 8 [ 1009.944429][T28138] vda: unable to read partition table [ 1010.276690][T28172] netlink: 'syz.3.5846': attribute type 2 has an invalid length. [ 1010.342374][T28174] block nbd9: server does not support multiple connections per device. [ 1010.347033][T28174] block nbd9: shutting down sockets [ 1010.371369][T28172] : entered promiscuous mode [ 1010.416827][T28176] bridge5: entered promiscuous mode [ 1010.464294][T28153] lo speed is unknown, defaulting to 1000 [ 1010.466119][T28153] lo speed is unknown, defaulting to 1000 [ 1010.906161][T28185] netlink: 14 bytes leftover after parsing attributes in process `syz.3.5848'. [ 1010.963914][T28182] bond1: Removing last ns target with arp_interval on [ 1011.011724][ T1382] net_ratelimit: 32 callbacks suppressed [ 1011.011748][ T1382] bond9: (slave ip6gretap0): failed to get link speed/duplex [ 1011.253744][T27190] bond9: (slave ip6gretap0): failed to get link speed/duplex [ 1011.258914][T28153] bridge0: port 1(bridge_slave_0) entered blocking state [ 1011.259125][T28153] bridge0: port 1(bridge_slave_0) entered disabled state [ 1011.260701][T28153] bridge_slave_0: entered allmulticast mode [ 1011.275547][T28153] bridge_slave_0: entered promiscuous mode [ 1011.294455][T28153] bridge0: port 2(bridge_slave_1) entered blocking state [ 1011.296191][T28153] bridge0: port 2(bridge_slave_1) entered disabled state [ 1011.296520][T28153] bridge_slave_1: entered allmulticast mode [ 1011.311224][T28153] bridge_slave_1: entered promiscuous mode [ 1011.381081][T27160] bond9: (slave ip6gretap0): failed to get link speed/duplex [ 1011.386121][T28153] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1011.389188][T28153] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1011.422909][T28194] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5849'. [ 1011.463155][ T52] Bluetooth: hci5: command tx timeout [ 1011.493669][T28153] team0: Port device team_slave_0 added [ 1011.496717][T28153] team0: Port device team_slave_1 added [ 1011.539653][T28153] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1011.539672][T28153] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1011.539701][T28153] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1011.622120][T28153] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1011.622220][T28153] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1011.622250][T28153] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1011.672366][T27190] bond9: (slave ip6gretap0): failed to get link speed/duplex [ 1011.724461][T28153] hsr_slave_0: entered promiscuous mode [ 1011.725510][T28153] hsr_slave_1: entered promiscuous mode [ 1011.726220][T28153] debugfs: 'hsr0' already exists in 'hsr' [ 1011.726241][T28153] Cannot create hsr debugfs directory [ 1011.842950][ T9385] bond9: (slave ip6gretap0): failed to get link speed/duplex [ 1011.907349][ T9385] IPVS: starting estimator thread 0... [ 1011.990546][T28204] IPVS: using max 27 ests per chain, 64800 per kthread [ 1012.012815][T27160] bond9: (slave ip6gretap0): failed to get link speed/duplex [ 1012.141124][T27184] bond9: (slave ip6gretap0): failed to get link speed/duplex [ 1012.252725][T27160] bond9: (slave ip6gretap0): failed to get link speed/duplex [ 1012.420966][T27184] bond9: (slave ip6gretap0): failed to get link speed/duplex [ 1012.535696][T28220] FAULT_INJECTION: forcing a failure. [ 1012.535696][T28220] name failslab, interval 1, probability 0, space 0, times 0 [ 1012.535735][T28220] CPU: 0 UID: 0 PID: 28220 Comm: syz.1.5859 Not tainted syzkaller #0 PREEMPT(full) [ 1012.535760][T28220] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1012.535763][T28218] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5858'. [ 1012.535776][T28220] Call Trace: [ 1012.535786][T28220] [ 1012.535796][T28220] dump_stack_lvl+0xe8/0x150 [ 1012.535834][T28220] should_fail_ex+0x410/0x560 [ 1012.535864][T28220] should_failslab+0xa8/0x100 [ 1012.535892][T28220] __kmalloc_cache_noprof+0xa3/0x600 [ 1012.535914][T28220] ? fl_init+0x53/0x1d0 [ 1012.535933][T28220] ? fl_init+0x53/0x1d0 [ 1012.535958][T28220] fl_init+0x53/0x1d0 [ 1012.535978][T28220] tcf_proto_create+0x248/0x330 [ 1012.536127][T28220] tc_new_tfilter+0x13a6/0x1810 [ 1012.536182][T28220] ? __pfx_tc_new_tfilter+0x10/0x10 [ 1012.536227][T28220] ? lock_acquire+0x115/0x350 [ 1012.536263][T28220] ? __pfx_tc_new_tfilter+0x10/0x10 [ 1012.536292][T28220] rtnetlink_rcv_msg+0x802/0xc00 [ 1012.536320][T28220] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 1012.536342][T28220] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1012.536364][T28220] ? ref_tracker_free+0x689/0x830 [ 1012.536391][T28220] ? __pfx_ref_tracker_free+0x10/0x10 [ 1012.536427][T28220] netlink_rcv_skb+0x226/0x4a0 [ 1012.536457][T28220] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1012.536483][T28220] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1012.536524][T28220] ? netlink_deliver_tap+0x2e/0x1b0 [ 1012.536556][T28220] ? netlink_deliver_tap+0x2e/0x1b0 [ 1012.536591][T28220] netlink_unicast+0x7bd/0x940 [ 1012.536628][T28220] netlink_sendmsg+0x813/0xb40 [ 1012.536674][T28220] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1012.536712][T28220] ? apparmor_socket_sendmsg+0x98/0x360 [ 1012.536738][T28220] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1012.536766][T28220] sock_sendmsg_nosec+0x13a/0x180 [ 1012.536802][T28220] ____sys_sendmsg+0x54e/0x850 [ 1012.536845][T28220] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1012.536879][T28220] ? import_iovec+0x73/0xa0 [ 1012.536909][T28220] ___sys_sendmsg+0x2a5/0x360 [ 1012.536945][T28220] ? __lock_acquire+0x747/0x2de0 [ 1012.536968][T28220] ? __pfx____sys_sendmsg+0x10/0x10 [ 1012.537025][T28220] ? __fget_files+0x2a/0x420 [ 1012.537051][T28220] ? __fget_files+0x3a2/0x420 [ 1012.537086][T28220] __x64_sys_sendmsg+0x1b1/0x290 [ 1012.537114][T28220] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1012.537160][T28220] do_syscall_64+0x166/0x520 [ 1012.537182][T28220] ? trace_irq_disable+0x3b/0x140 [ 1012.537202][T28220] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1012.537223][T28220] ? clear_bhb_loop+0x70/0xc0 [ 1012.537246][T28220] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1012.537266][T28220] RIP: 0033:0x7fa8c4b9e159 [ 1012.537284][T28220] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1012.537301][T28220] RSP: 002b:00007fa8c59c5028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1012.537323][T28220] RAX: ffffffffffffffda RBX: 00007fa8c4e25fa0 RCX: 00007fa8c4b9e159 [ 1012.537337][T28220] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000003 [ 1012.537349][T28220] RBP: 00007fa8c59c5090 R08: 0000000000000000 R09: 0000000000000000 [ 1012.537362][T28220] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1012.537374][T28220] R13: 00007fa8c4e26038 R14: 00007fa8c4e25fa0 R15: 00007fff542bce78 [ 1012.537404][T28220] [ 1013.000810][ T1382] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 1013.000883][ T1382] bond9: (slave ip6gretap0): failed to get link speed/duplex [ 1013.000925][ T1382] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 1013.000972][ T1382] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 1013.001009][ T1382] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 1013.310923][T28241] team0: Device xfrm0 is of different type [ 1013.540574][ T52] Bluetooth: hci5: command tx timeout [ 1013.630497][ C1] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 1013.859678][T28254] netlink: 132 bytes leftover after parsing attributes in process `syz.4.5868'. [ 1013.884892][T28153] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1013.924288][T28153] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1013.947630][T28153] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1013.994732][T28153] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1013.999669][T28153] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1014.026401][T28153] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1014.029463][T28153] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1014.056937][T28153] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1014.386852][T28153] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1014.539894][T28153] 8021q: adding VLAN 0 to HW filter on device team0 [ 1014.574020][T27190] bridge0: port 1(bridge_slave_0) entered blocking state [ 1014.574131][T27190] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1014.606369][T27184] bridge0: port 2(bridge_slave_1) entered blocking state [ 1014.606492][T27184] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1014.823778][T28300] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5872'. [ 1015.283145][T28316] Bluetooth: hci0: Opcode 0x0c1a failed: -22 [ 1015.621846][ T52] Bluetooth: hci5: command tx timeout [ 1016.037168][T28335] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5886'. [ 1016.039671][T28336] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5886'. [ 1016.146688][T28339] netlink: 'syz.1.5887': attribute type 21 has an invalid length. [ 1016.185324][T28339] netlink: 132 bytes leftover after parsing attributes in process `syz.1.5887'. [ 1016.193721][T27182] net_ratelimit: 9 callbacks suppressed [ 1016.193765][T27182] bond9: (slave ip6gretap0): failed to get link speed/duplex [ 1016.214943][T28339] No such timeout policy "syz0" [ 1016.271694][T28345] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5888'. [ 1016.271725][T28345] netlink: 'syz.3.5888': attribute type 1 has an invalid length. [ 1016.302283][T27190] bond9: (slave ip6gretap0): failed to get link speed/duplex [ 1016.389355][T28341] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5889'. [ 1016.389384][T28341] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5889'. [ 1016.389403][T28341] netlink: 1 bytes leftover after parsing attributes in process `syz.0.5889'. [ 1016.410459][T27183] bond9: (slave ip6gretap0): failed to get link speed/duplex [ 1016.431259][ T988] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 1016.447896][T28341] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5889'. [ 1016.460577][T28341] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1016.521553][T27190] bond9: (slave ip6gretap0): failed to get link speed/duplex [ 1016.590658][T27190] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 1016.594491][ T30] audit: type=1804 audit(1789143055.806:95): pid=28352 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.5890" name="/newroot/555/cgroup.controllers" dev="tmpfs" ino=2870 res=1 errno=0 [ 1016.594601][ T30] audit: type=1800 audit(1789143055.806:96): pid=28352 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.5890" name="cgroup.controllers" dev="tmpfs" ino=2870 res=0 errno=0 [ 1016.655917][T28358] netlink: 'syz.4.5891': attribute type 1 has an invalid length. [ 1016.787585][T28363] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5893'. [ 1016.815120][T28358] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1016.850550][T27184] bond9: (slave ip6gretap0): failed to get link speed/duplex [ 1016.855918][T28153] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1016.954372][T28369] xt_hl: Unknown TTL match mode: 237 [ 1017.012988][T28153] veth0_vlan: entered promiscuous mode [ 1017.088119][T28369] syz_tun: entered promiscuous mode [ 1017.088251][T28369] macsec0: entered promiscuous mode [ 1017.114024][T28369] syz_tun: left promiscuous mode [ 1017.201622][T27184] bond9: (slave ip6gretap0): failed to get link speed/duplex [ 1017.202519][T28153] veth1_vlan: entered promiscuous mode [ 1017.252395][T28382] netlink: 'syz.3.5899': attribute type 10 has an invalid length. [ 1017.274290][T28153] veth0_macvtap: entered promiscuous mode [ 1017.299756][T28153] veth1_macvtap: entered promiscuous mode [ 1017.310898][T27182] bond9: (slave ip6gretap0): failed to get link speed/duplex [ 1017.339422][T28153] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1017.412627][T28153] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1017.462544][ T988] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 1017.483928][T27160] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1017.484127][T27190] bond9: (slave ip6gretap0): failed to get link speed/duplex [ 1017.484250][T27190] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1017.484425][T27190] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1017.484565][T27190] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1017.613543][T27160] bond9: (slave ip6gretap0): failed to get link speed/duplex [ 1017.645430][T27190] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 1017.645652][T27190] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 1017.702409][ T52] Bluetooth: hci5: command tx timeout [ 1017.758001][T27160] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1017.758022][T27160] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1017.762963][T27190] bond9: (slave ip6gretap0): failed to get link speed/duplex [ 1017.801016][ T5718] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 1017.889393][T27184] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1017.889419][T27184] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1018.075349][T28400] ovs-system: entered promiscuous mode [ 1018.610582][T28411] syzkaller1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 1018.936503][T28431] bond0: left promiscuous mode [ 1019.193972][ T30] audit: type=1804 audit(1789143058.406:97): pid=28443 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.5913" name="/newroot/520/cgroup.controllers" dev="tmpfs" ino=2698 res=1 errno=0 [ 1019.194114][ T30] audit: type=1800 audit(1789143058.406:98): pid=28443 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.5913" name="cgroup.controllers" dev="tmpfs" ino=2698 res=0 errno=0 [ 1019.493158][T28446] bond8: option miimon: invalid value (18446744073357230079) [ 1019.493186][T28446] bond8: option miimon: allowed values 0 - 2147483647 [ 1019.496294][T28446] bond8 (unregistering): Released all slaves [ 1019.919914][T28469] Bluetooth: hci0: invalid length 0, exp 2 for type 9 [ 1019.963228][T28468] ovs-s!: entered promiscuous mode [ 1020.642968][T28493] __nla_validate_parse: 4 callbacks suppressed [ 1020.642991][T28493] netlink: 112 bytes leftover after parsing attributes in process `syz.1.5924'. [ 1020.749164][T28497] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5926'. [ 1020.769906][T28497] xt_cgroup: path and classid specified [ 1020.884586][T28507] pimreg: entered allmulticast mode [ 1021.241371][T28518] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5931'. [ 1021.281422][T27184] net_ratelimit: 25 callbacks suppressed [ 1021.281446][T27184] bond9: (slave ip6gretap0): failed to get link speed/duplex [ 1021.394013][T27190] bond9: (slave ip6gretap0): failed to get link speed/duplex [ 1021.503102][ T1382] bond9: (slave ip6gretap0): failed to get link speed/duplex [ 1021.612605][ T1382] bond9: (slave ip6gretap0): failed to get link speed/duplex [ 1021.720933][ T1382] bond9: (slave ip6gretap0): failed to get link speed/duplex [ 1021.790425][ C1] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 1021.831338][T27184] bond9: (slave ip6gretap0): failed to get link speed/duplex [ 1021.942201][ C0] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 1021.944120][T27184] bond9: (slave ip6gretap0): failed to get link speed/duplex [ 1022.052295][T27184] bond9: (slave ip6gretap0): failed to get link speed/duplex [ 1022.160821][T27190] bond9: (slave ip6gretap0): failed to get link speed/duplex [ 1022.269673][T28554] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5938'. [ 1022.270777][ T9385] bond9: (slave ip6gretap0): failed to get link speed/duplex [ 1022.548330][T28572] syzkaller0: entered promiscuous mode [ 1022.548355][T28572] syzkaller0: entered allmulticast mode [ 1023.978472][T28624] netlink: 'syz.3.5957': attribute type 17 has an invalid length. [ 1023.978493][T28624] netlink: 'syz.3.5957': attribute type 27 has an invalid length. [ 1024.098754][T28634] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5959'. [ 1024.373416][T28644] netlink: 'syz.1.5963': attribute type 39 has an invalid length. [ 1024.427551][T28648] netlink: 36 bytes leftover after parsing attributes in process `syz.1.5963'. [ 1024.549826][T28644] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5963'. [ 1024.755417][T28651] mac80211_hwsim hwsim42 wlan1: Caught tx_queue_len zero misconfig [ 1024.993800][ T26] block nbd6: Possible stuck request ffff888026c75080: control (read@0,1024B). Runtime 300 seconds [ 1024.993848][ T26] block nbd6: Possible stuck request ffff888026c75240: control (read@1024,1024B). Runtime 300 seconds [ 1024.993881][ T26] block nbd6: Possible stuck request ffff888026c75400: control (read@2048,1024B). Runtime 300 seconds [ 1024.993912][ T26] block nbd6: Possible stuck request ffff888026c755c0: control (read@3072,1024B). Runtime 300 seconds [ 1026.124118][T28675] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 1026.124225][T28675] syzkaller0: linktype set to 8 [ 1026.126137][T28681] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 1026.126215][T28681] syzkaller0: linktype set to 8 [ 1026.267196][ T26] block nbd7: Possible stuck request ffff888026d25080: control (read@0,1024B). Runtime 300 seconds [ 1026.267242][ T26] block nbd7: Possible stuck request ffff888026d25240: control (read@1024,1024B). Runtime 300 seconds [ 1026.267270][ T26] block nbd7: Possible stuck request ffff888026d25400: control (read@2048,1024B). Runtime 300 seconds [ 1026.267299][ T26] block nbd7: Possible stuck request ffff888026d255c0: control (read@3072,1024B). Runtime 300 seconds [ 1026.395314][T28677] tipc: Enabled bearer , priority 0 [ 1026.469276][T28677] syzkaller0: entered promiscuous mode [ 1026.469305][T28677] syzkaller0: entered allmulticast mode [ 1026.469921][T28677] tipc: Resetting bearer [ 1026.602465][ T1382] net_ratelimit: 36 callbacks suppressed [ 1026.602488][ T1382] bond9: (slave ip6gretap0): failed to get link speed/duplex [ 1026.674848][T28693] netlink: 'syz.1.5976': attribute type 3 has an invalid length. [ 1026.876503][T28709] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 1027.639816][T28707] Bluetooth: hci4: Opcode 0x0401 failed: -4 [ 1027.786641][T28715] ip6t_rt: too many addresses specified [ 1027.788874][T28717] ip6t_rt: too many addresses specified [ 1028.841506][ T52] Bluetooth: hci4: command 0x0401 tx timeout [ 1029.266408][T28676] tipc: Resetting bearer [ 1030.741657][ C0] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 1031.674066][T28676] tipc: Disabling bearer [ 1031.710377][ T12] bond9: (slave ip6gretap0): failed to get link speed/duplex [ 1031.824056][ T12] bond9: (slave ip6gretap0): failed to get link speed/duplex [ 1031.932632][T27183] bond9: (slave ip6gretap0): failed to get link speed/duplex [ 1032.200509][ T12] bond9: (slave ip6gretap0): failed to get link speed/duplex [ 1032.268026][T28750] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5989'. [ 1032.268590][T28750] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5989'. [ 1032.294704][T28750] tipc: Enabling of bearer rejected, already enabled [ 1032.310677][T27183] bond9: (slave ip6gretap0): failed to get link speed/duplex [ 1032.522181][ T12] bond9: (slave ip6gretap0): failed to get link speed/duplex [ 1032.630435][ T12] bond9: (slave ip6gretap0): failed to get link speed/duplex [ 1032.693869][T28767] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5992'. [ 1032.761652][ T1382] bond9: (slave ip6gretap0): failed to get link speed/duplex [ 1032.766960][T28773] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1032.891952][T27185] bond9: (slave ip6gretap0): failed to get link speed/duplex [ 1033.438085][T28784] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5997'. [ 1033.559075][T28788] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5997'. [ 1034.124549][T28803] can: request_module (can-proto-3) failed. [ 1034.142382][T28805] can: request_module (can-proto-3) failed. [ 1034.307374][T28778] bond1: Removing last ns target with arp_interval on [ 1034.374484][T28820] bond8: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 1034.376300][T28820] bond8 (unregistering): Released all slaves [ 1034.682615][T28835] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6007'. [ 1034.689780][T28834] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6007'. [ 1034.712822][T28834] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6007'. [ 1034.713119][T28834] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6007'. [ 1034.713392][T28834] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6007'. [ 1035.374514][T28857] FAULT_INJECTION: forcing a failure. [ 1035.374514][T28857] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1035.374551][T28857] CPU: 1 UID: 0 PID: 28857 Comm: syz.3.6014 Not tainted syzkaller #0 PREEMPT(full) [ 1035.374579][T28857] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1035.374592][T28857] Call Trace: [ 1035.374600][T28857] [ 1035.374609][T28857] dump_stack_lvl+0xe8/0x150 [ 1035.374645][T28857] should_fail_ex+0x410/0x560 [ 1035.374674][T28857] _copy_from_user+0x2d/0xb0 [ 1035.374702][T28857] __sys_connect+0x155/0x450 [ 1035.374729][T28857] ? __pfx___sys_connect+0x10/0x10 [ 1035.374766][T28857] ? __pfx_ksys_write+0x10/0x10 [ 1035.374806][T28857] __x64_sys_connect+0x7a/0x90 [ 1035.374832][T28857] do_syscall_64+0x166/0x520 [ 1035.374855][T28857] ? trace_irq_disable+0x3b/0x140 [ 1035.374876][T28857] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1035.374898][T28857] ? clear_bhb_loop+0x70/0xc0 [ 1035.374924][T28857] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1035.374945][T28857] RIP: 0033:0x7fd2b519e159 [ 1035.374964][T28857] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1035.374982][T28857] RSP: 002b:00007fd2b6049028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 1035.375005][T28857] RAX: ffffffffffffffda RBX: 00007fd2b5425fa0 RCX: 00007fd2b519e159 [ 1035.375021][T28857] RDX: 0000000000000080 RSI: 0000200000000340 RDI: 0000000000000003 [ 1035.375035][T28857] RBP: 00007fd2b6049090 R08: 0000000000000000 R09: 0000000000000000 [ 1035.375049][T28857] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1035.375062][T28857] R13: 00007fd2b5426038 R14: 00007fd2b5425fa0 R15: 00007fffc35be688 [ 1035.375103][T28857] [ 1035.940904][ T52] Bluetooth: hci5: command tx timeout [ 1036.159632][T28888] FAULT_INJECTION: forcing a failure. [ 1036.159632][T28888] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1036.159670][T28888] CPU: 1 UID: 0 PID: 28888 Comm: syz.3.6023 Not tainted syzkaller #0 PREEMPT(full) [ 1036.159697][T28888] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1036.159712][T28888] Call Trace: [ 1036.159722][T28888] [ 1036.159733][T28888] dump_stack_lvl+0xe8/0x150 [ 1036.159773][T28888] should_fail_ex+0x410/0x560 [ 1036.159806][T28888] _copy_to_user+0x31/0xb0 [ 1036.159839][T28888] simple_read_from_buffer+0xe1/0x170 [ 1036.159879][T28888] proc_fail_nth_read+0x1bb/0x230 [ 1036.159916][T28888] ? common_file_perm+0x20e/0x2b0 [ 1036.159947][T28888] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1036.159991][T28888] ? rw_verify_area+0x24a/0x4c0 [ 1036.160029][T28888] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1036.160066][T28888] vfs_read+0x213/0xa80 [ 1036.160107][T28888] ? __pfx___mutex_lock+0x10/0x10 [ 1036.160136][T28888] ? __pfx_vfs_read+0x10/0x10 [ 1036.160172][T28888] ? __fget_files+0x2a/0x420 [ 1036.160209][T28888] ? __fget_files+0x3a2/0x420 [ 1036.160240][T28888] ? __fget_files+0x2a/0x420 [ 1036.160283][T28888] ksys_read+0x150/0x270 [ 1036.160319][T28888] ? __pfx_ksys_read+0x10/0x10 [ 1036.160367][T28888] do_syscall_64+0x166/0x520 [ 1036.160391][T28888] ? trace_irq_disable+0x3b/0x140 [ 1036.160414][T28888] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1036.160438][T28888] ? clear_bhb_loop+0x70/0xc0 [ 1036.160467][T28888] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1036.160490][T28888] RIP: 0033:0x7fd2b515e98e [ 1036.160519][T28888] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1036.160540][T28888] RSP: 002b:00007fd2b6048fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1036.160565][T28888] RAX: ffffffffffffffda RBX: 00007fd2b60496c0 RCX: 00007fd2b515e98e [ 1036.160583][T28888] RDX: 000000000000000f RSI: 00007fd2b60490a0 RDI: 0000000000000005 [ 1036.160598][T28888] RBP: 00007fd2b6049090 R08: 0000000000000000 R09: 0000000000000000 [ 1036.160613][T28888] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1036.160627][T28888] R13: 00007fd2b5426038 R14: 00007fd2b5425fa0 R15: 00007fffc35be688 [ 1036.160665][T28888] [ 1036.861224][ T1382] net_ratelimit: 35 callbacks suppressed [ 1036.861266][ T1382] bond9: (slave ip6gretap0): failed to get link speed/duplex [ 1037.042144][T28904] lo speed is unknown, defaulting to 1000 [ 1037.105150][T28880] bond2: Removing last ns target with arp_interval on [ 1037.105428][T28900] lo speed is unknown, defaulting to 1000 [ 1037.107939][T28904] lo speed is unknown, defaulting to 1000 [ 1037.130741][T27190] bond9: (slave ip6gretap0): failed to get link speed/duplex [ 1037.140492][ C1] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 1037.197190][T28900] lo speed is unknown, defaulting to 1000 [ 1037.401917][T28920] netlink: 'syz.1.6033': attribute type 2 has an invalid length. [ 1037.401940][T28920] __nla_validate_parse: 131 callbacks suppressed [ 1037.401954][T28920] netlink: 224 bytes leftover after parsing attributes in process `syz.1.6033'. [ 1037.533970][T28920] netlink: 'syz.1.6033': attribute type 10 has an invalid length. [ 1037.604315][T28919] lo: Caught tx_queue_len zero misconfig [ 1037.658920][T28920] team0: Port device dummy0 added [ 1037.780423][ C1] ip6_tunnel: ip6gre3 xmit: Local address not yet configured! [ 1038.032481][T27185] bond9: (slave ip6gretap0): failed to get link speed/duplex [ 1038.143856][ T1382] bond9: (slave ip6gretap0): failed to get link speed/duplex [ 1038.240370][T28941] netlink: 'syz.0.6038': attribute type 7 has an invalid length. [ 1038.240396][T28941] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6038'. [ 1038.243884][T28941] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6038'. [ 1038.262682][ T1382] bond9: (slave ip6gretap0): failed to get link speed/duplex [ 1038.371130][ T12] bond9: (slave ip6gretap0): failed to get link speed/duplex [ 1038.481141][T27182] bond9: (slave ip6gretap0): failed to get link speed/duplex [ 1038.595525][T27190] bond9: (slave ip6gretap0): failed to get link speed/duplex [ 1038.720686][T27185] bond9: (slave ip6gretap0): failed to get link speed/duplex [ 1038.744456][T28960] syzkaller0: entered promiscuous mode [ 1038.744480][T28960] syzkaller0: entered allmulticast mode [ 1038.891588][T27190] bond9: (slave ip6gretap0): failed to get link speed/duplex [ 1039.064044][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 1039.118585][T28974] netlink: 96 bytes leftover after parsing attributes in process `syz.3.6047'. [ 1039.135057][T28974] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6047'. [ 1039.212129][T28978] netlink: 'syz.1.6050': attribute type 1 has an invalid length. [ 1039.283009][T28978] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1039.379125][T28979] bond11: Removing last ns target with arp_interval on [ 1039.542475][T28992] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6053'. [ 1039.660059][T28995] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6056'. [ 1039.691557][T28995] vlan0: entered promiscuous mode [ 1039.691583][T28995] syz_tun: entered promiscuous mode [ 1039.744910][T28999] tipc: Enabled bearer , priority 0 [ 1039.768383][T28999] tipc: Resetting bearer [ 1039.816020][T28996] tipc: Disabling bearer [ 1039.849820][T29002] bond3: option packets_per_slave: mode dependency failed, not supported in mode balance-tlb(5) [ 1039.874511][T29002] bond3 (unregistering): Released all slaves [ 1039.977874][T29009] netlink: 'syz.0.6060': attribute type 30 has an invalid length. [ 1040.152834][T29013] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6061'. [ 1040.247810][T29018] netlink: 80 bytes leftover after parsing attributes in process `syz.4.6062'. [ 1040.266338][T29018] netlink: 244 bytes leftover after parsing attributes in process `syz.4.6062'. [ 1040.514883][T29036] netlink: 'syz.4.6062': attribute type 1 has an invalid length. [ 1041.363041][T29011] ip6gre2: left promiscuous mode [ 1041.363059][T29011] ip6gre2: left allmulticast mode [ 1041.483107][T29011] gretap2: left promiscuous mode [ 1041.522016][T29009] workqueue: Failed to create a rescuer kthread for wq "bond12": -EINTR [ 1041.603492][T29036] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 1041.670910][ T12] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1041.670981][ T12] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1041.671021][ T12] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1041.671059][ T12] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1041.849433][T29059] netlink: 'syz.4.6068': attribute type 10 has an invalid length. [ 1041.849761][T29059] bridge0: port 2(bridge_slave_1) entered disabled state [ 1041.850503][T29059] bridge0: port 1(bridge_slave_0) entered disabled state [ 1041.897968][T29059] bridge0: port 2(bridge_slave_1) entered blocking state [ 1041.898126][T29059] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1041.898427][T29059] bridge0: port 1(bridge_slave_0) entered blocking state [ 1041.898545][T29059] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1041.945977][T29059] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 1041.961141][T27184] net_ratelimit: 9 callbacks suppressed [ 1041.961160][T27184] bond9: (slave ip6gretap0): failed to get link speed/duplex [ 1041.963611][T29059] netlink: 'syz.4.6068': attribute type 10 has an invalid length. [ 1041.963837][T29059] bridge0: port 2(bridge_slave_1) entered disabled state [ 1041.964009][T29059] bridge0: port 1(bridge_slave_0) entered disabled state [ 1042.073491][T27184] bond9: (slave ip6gretap0): failed to get link speed/duplex [ 1042.185433][T27184] bond9: (slave ip6gretap0): failed to get link speed/duplex [ 1042.383046][T29085] netlink: 'syz.4.6075': attribute type 2 has an invalid length. [ 1042.426278][T27184] bond9: (slave ip6gretap0): failed to get link speed/duplex [ 1042.548206][T29081] netlink: 'syz.2.6073': attribute type 2 has an invalid length. [ 1042.548230][T29081] __nla_validate_parse: 2 callbacks suppressed [ 1042.548244][T29081] netlink: 164 bytes leftover after parsing attributes in process `syz.2.6073'. [ 1042.628029][T29073] bond14: Removing last ns target with arp_interval on [ 1042.633670][ T12] bond9: (slave ip6gretap0): failed to get link speed/duplex [ 1042.743421][T27184] bond9: (slave ip6gretap0): failed to get link speed/duplex [ 1042.850989][T27190] bond9: (slave ip6gretap0): failed to get link speed/duplex [ 1042.961466][T27182] bond9: (slave ip6gretap0): failed to get link speed/duplex [ 1043.071328][T27160] bond9: (slave ip6gretap0): failed to get link speed/duplex [ 1043.200928][T27185] bond9: (slave ip6gretap0): failed to get link speed/duplex [ 1043.241227][ T5620] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1043.265087][ T5620] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1043.273648][ T5620] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1043.282409][ T5620] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1043.283039][ T5620] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1043.415762][T29123] netlink: 136 bytes leftover after parsing attributes in process `syz.4.6083'. [ 1044.024163][T27184] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 1044.111069][T13339] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 1044.217723][T29152] IPVS: length: 24 != 43032 [ 1044.218654][T29152] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6088'. [ 1044.242092][T29044] ip6_tunnel: syztnl1 xmit: Local address not yet configured! [ 1044.258303][T29137] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1044.295553][T29144] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6088'. [ 1044.295576][T29144] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6088'. [ 1044.533094][T29160] netlink: 236 bytes leftover after parsing attributes in process `syz.2.6090'. [ 1044.553367][T29152] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1044.631558][T29160] vlan2: entered promiscuous mode [ 1044.631584][T29160] hsr0: entered promiscuous mode [ 1044.631855][T29160] vlan2: entered allmulticast mode [ 1044.631874][T29160] hsr0: entered allmulticast mode [ 1044.631888][T29160] hsr_slave_0: entered allmulticast mode [ 1044.631905][T29160] hsr_slave_1: entered allmulticast mode [ 1044.844726][T29114] lo speed is unknown, defaulting to 1000 [ 1044.848790][T29114] lo speed is unknown, defaulting to 1000 [ 1045.029422][T29171] vxcan2: entered allmulticast mode [ 1045.091123][T29187] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6094'. [ 1045.381176][ T52] Bluetooth: hci1: command tx timeout [ 1045.415173][T29197] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6099'. [ 1045.474489][T29197] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6099'. [ 1045.639888][T29211] block nbd9: server does not support multiple connections per device. [ 1045.658890][T29211] block nbd9: shutting down sockets [ 1045.774871][T29217] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6101'. [ 1046.221898][T29217] tipc: Resetting bearer [ 1046.243093][T29217] ------------[ cut here ]------------ [ 1046.243110][T29217] sdata->crypto_tx_tailroom_needed_cnt != master->crypto_tx_tailroom_needed_cnt [ 1046.243129][T29217] WARNING: net/mac80211/key.c:1172 at ieee80211_free_keys+0x56e/0x680, CPU#0: syz.2.6101/29217 [ 1046.273887][T29217] Modules linked in: SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1046.277847][T29217] CPU: 0 UID: 0 PID: 29217 Comm: syz.2.6101 Not tainted syzkaller #0 PREEMPT(full) [ 1046.288269][T29217] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1046.299629][T29217] RIP: 0010:ieee80211_free_keys+0x56e/0x680 [ 1046.306460][T29217] Code: 00 00 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 b1 23 66 f6 90 0f 0b 90 e9 22 fc ff ff e8 a3 23 66 f6 90 <0f> 0b 90 e9 30 fe ff ff e8 95 23 66 f6 e9 1b fe ff ff 48 c7 c1 80 [ 1046.326940][T29217] RSP: 0018:ffffc90003847560 EFLAGS: 00010283 [ 1046.333795][T29217] RAX: ffffffff8b61a70d RBX: ffff888045500ec0 RCX: 0000000000080000 [ 1046.343149][T29217] RDX: ffffc9001f203000 RSI: 0000000000013397 RDI: 0000000000013398 [ 1046.351871][T29217] RBP: ffffc90003847630 R08: ffffc90003847347 R09: 1ffff92000708e68 [ 1046.362016][T29217] R10: dffffc0000000000 R11: fffff52000708e69 R12: dffffc0000000000 [ 1046.370041][T29217] R13: 1ffff92000708eb4 R14: 0000000000000002 R15: 0000000000000001 [ 1046.379183][T29217] FS: 00007f0aa407f6c0(0000) GS:ffff888124cd1000(0000) knlGS:0000000000000000 [ 1046.389079][T29217] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1046.396528][T29217] CR2: 00007f53acf02e9c CR3: 000000002acbe000 CR4: 00000000003526f0 [ 1046.405233][T29217] Call Trace: [ 1046.408547][T29217] [ 1046.412235][T29217] ? __pfx_ieee80211_free_keys+0x10/0x10 [ 1046.417931][T29217] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1046.424642][T29217] ieee80211_do_stop+0x11fd/0x2410 [ 1046.429969][T29217] ? __pfx_ieee80211_do_stop+0x10/0x10 [ 1046.436241][T29217] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1046.442430][T29217] ieee80211_stop+0x1ab/0x200 [ 1046.447156][T29217] ? __pfx_ieee80211_stop+0x10/0x10 [ 1046.452562][T29217] __dev_close_many+0x366/0x6e0 [ 1046.457486][T29217] ? __pfx___dev_close_many+0x10/0x10 [ 1046.463609][T29217] netif_close_many+0x249/0x660 [ 1046.468506][T29217] ? rcu_is_watching+0x16/0xb0 [ 1046.474564][T29217] ? __pfx_netif_close_many+0x10/0x10 [ 1046.480951][T29217] ? __mutex_lock+0x30b/0x1550 [ 1046.485773][T29217] ? rfkill_fill_event+0x29c/0x3f0 [ 1046.492358][T29217] netif_close+0x160/0x220 [ 1046.496828][T29217] ? __pfx_netif_close+0x10/0x10 [ 1046.502524][T29217] ? __pfx___mutex_lock+0x10/0x10 [ 1046.507629][T29217] ? do_raw_spin_lock+0x12b/0x2f0 [ 1046.513261][T29217] dev_close+0xf7/0x210 [ 1046.517464][T29217] cfg80211_shutdown_all_interfaces+0xb0/0x220 [ 1046.524467][T29217] ? __pfx_cfg80211_rfkill_set_block+0x10/0x10 [ 1046.531423][T29217] cfg80211_rfkill_set_block+0x2d/0x50 [ 1046.536939][T29217] rfkill_set_block+0x19f/0x4d0 [ 1046.542662][T29217] rfkill_fop_write+0x43b/0x560 [ 1046.547612][T29217] ? common_file_perm+0x20e/0x2b0 [ 1046.553379][T29217] ? __pfx_rfkill_fop_write+0x10/0x10 [ 1046.559671][T29217] ? security_file_permission+0x10/0x260 [ 1046.566629][T29217] ? rw_verify_area+0x203/0x4c0 [ 1046.572230][T29217] ? tun_chr_write_iter+0x18a/0x200 [ 1046.577882][T29217] ? __pfx_rfkill_fop_write+0x10/0x10 [ 1046.584736][T29217] vfs_write+0x296/0xba0 [ 1046.589049][T29217] ? __pfx_vfs_write+0x10/0x10 [ 1046.594708][T29217] ? __fget_files+0x2a/0x420 [ 1046.599373][T29217] ? __fget_files+0x2a/0x420 [ 1046.604804][T29217] ? __fget_files+0x3a2/0x420 [ 1046.609572][T29217] ? __fget_files+0x2a/0x420 [ 1046.615008][T29217] ksys_write+0x150/0x270 [ 1046.619400][T29217] ? __pfx_ksys_write+0x10/0x10 [ 1046.625166][T29217] do_syscall_64+0x166/0x520 [ 1046.629808][T29217] ? trace_irq_disable+0x3b/0x140 [ 1046.635611][T29217] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1046.642397][T29217] ? clear_bhb_loop+0x70/0xc0 [ 1046.647131][T29217] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1046.653810][T29217] RIP: 0033:0x7f0aa319e159 [ 1046.658280][T29217] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1046.679448][T29217] RSP: 002b:00007f0aa407f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1046.689078][T29217] RAX: ffffffffffffffda RBX: 00007f0aa3426090 RCX: 00007f0aa319e159 [ 1046.697969][T29217] RDX: 0000000000000008 RSI: 0000200000000080 RDI: 000000000000000b [ 1046.706750][T29217] RBP: 00007f0aa323503b R08: 0000000000000000 R09: 0000000000000000 [ 1046.715507][T29217] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1046.724255][T29217] R13: 00007f0aa3426128 R14: 00007f0aa3426090 R15: 00007ffd8d61eab8 [ 1046.732990][T29217] [ 1046.736066][T29217] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1046.743371][T29217] CPU: 0 UID: 0 PID: 29217 Comm: syz.2.6101 Not tainted syzkaller #0 PREEMPT(full) [ 1046.752777][T29217] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1046.762894][T29217] Call Trace: [ 1046.766213][T29217] [ 1046.769171][T29217] vpanic+0x56d/0xa60 [ 1046.773240][T29217] ? __pfx__printk+0x10/0x10 [ 1046.777871][T29217] ? __pfx_vpanic+0x10/0x10 [ 1046.782419][T29217] ? is_bpf_text_address+0x292/0x2b0 [ 1046.787755][T29217] ? is_bpf_text_address+0x26/0x2b0 [ 1046.793015][T29217] panic+0xc5/0xd0 [ 1046.796785][T29217] ? __pfx_panic+0x10/0x10 [ 1046.801258][T29217] __warn+0x315/0x4c0 [ 1046.805279][T29217] ? ieee80211_free_keys+0x56e/0x680 [ 1046.810614][T29217] ? ieee80211_free_keys+0x56e/0x680 [ 1046.815963][T29217] __report_bug+0x276/0x570 [ 1046.820602][T29217] ? ieee80211_free_keys+0x56e/0x680 [ 1046.825936][T29217] ? __pfx___report_bug+0x10/0x10 [ 1046.830996][T29217] ? schedule+0x16e/0x2b0 [ 1046.835370][T29217] ? synchronize_rcu_expedited+0x663/0x770 [ 1046.841225][T29217] ? __pfx_synchronize_rcu_expedited+0x10/0x10 [ 1046.847425][T29217] ? ieee80211_free_keys+0x56e/0x680 [ 1046.852763][T29217] report_bug+0x16b/0x220 [ 1046.857150][T29217] ? ieee80211_free_keys+0x56e/0x680 [ 1046.862468][T29217] ? ieee80211_free_keys+0x570/0x680 [ 1046.867802][T29217] handle_bug+0x9c/0x200 [ 1046.872094][T29217] exc_invalid_op+0x1a/0x50 [ 1046.876645][T29217] asm_exc_invalid_op+0x1a/0x20 [ 1046.881540][T29217] RIP: 0010:ieee80211_free_keys+0x56e/0x680 [ 1046.887480][T29217] Code: 00 00 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 b1 23 66 f6 90 0f 0b 90 e9 22 fc ff ff e8 a3 23 66 f6 90 <0f> 0b 90 e9 30 fe ff ff e8 95 23 66 f6 e9 1b fe ff ff 48 c7 c1 80 [ 1046.907141][T29217] RSP: 0018:ffffc90003847560 EFLAGS: 00010283 [ 1046.913259][T29217] RAX: ffffffff8b61a70d RBX: ffff888045500ec0 RCX: 0000000000080000 [ 1046.921280][T29217] RDX: ffffc9001f203000 RSI: 0000000000013397 RDI: 0000000000013398 [ 1046.929286][T29217] RBP: ffffc90003847630 R08: ffffc90003847347 R09: 1ffff92000708e68 [ 1046.937300][T29217] R10: dffffc0000000000 R11: fffff52000708e69 R12: dffffc0000000000 [ 1046.945308][T29217] R13: 1ffff92000708eb4 R14: 0000000000000002 R15: 0000000000000001 [ 1046.953321][T29217] ? ieee80211_free_keys+0x56d/0x680 [ 1046.958689][T29217] ? __pfx_ieee80211_free_keys+0x10/0x10 [ 1046.964379][T29217] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1046.970240][T29217] ieee80211_do_stop+0x11fd/0x2410 [ 1046.975405][T29217] ? __pfx_ieee80211_do_stop+0x10/0x10 [ 1046.980935][T29217] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1046.986795][T29217] ieee80211_stop+0x1ab/0x200 [ 1046.991510][T29217] ? __pfx_ieee80211_stop+0x10/0x10 [ 1046.996751][T29217] __dev_close_many+0x366/0x6e0 [ 1047.001684][T29217] ? __pfx___dev_close_many+0x10/0x10 [ 1047.007091][T29217] netif_close_many+0x249/0x660 [ 1047.011964][T29217] ? rcu_is_watching+0x16/0xb0 [ 1047.016861][T29217] ? __pfx_netif_close_many+0x10/0x10 [ 1047.022263][T29217] ? __mutex_lock+0x30b/0x1550 [ 1047.027058][T29217] ? rfkill_fill_event+0x29c/0x3f0 [ 1047.032219][T29217] netif_close+0x160/0x220 [ 1047.036673][T29217] ? __pfx_netif_close+0x10/0x10 [ 1047.041659][T29217] ? __pfx___mutex_lock+0x10/0x10 [ 1047.046728][T29217] ? do_raw_spin_lock+0x12b/0x2f0 [ 1047.051813][T29217] dev_close+0xf7/0x210 [ 1047.055994][T29217] cfg80211_shutdown_all_interfaces+0xb0/0x220 [ 1047.062181][T29217] ? __pfx_cfg80211_rfkill_set_block+0x10/0x10 [ 1047.068368][T29217] cfg80211_rfkill_set_block+0x2d/0x50 [ 1047.073867][T29217] rfkill_set_block+0x19f/0x4d0 [ 1047.078754][T29217] rfkill_fop_write+0x43b/0x560 [ 1047.083626][T29217] ? common_file_perm+0x20e/0x2b0 [ 1047.088686][T29217] ? __pfx_rfkill_fop_write+0x10/0x10 [ 1047.094089][T29217] ? security_file_permission+0x10/0x260 [ 1047.099765][T29217] ? rw_verify_area+0x203/0x4c0 [ 1047.104661][T29217] ? tun_chr_write_iter+0x18a/0x200 [ 1047.109892][T29217] ? __pfx_rfkill_fop_write+0x10/0x10 [ 1047.115320][T29217] vfs_write+0x296/0xba0 [ 1047.119635][T29217] ? __pfx_vfs_write+0x10/0x10 [ 1047.124440][T29217] ? __fget_files+0x2a/0x420 [ 1047.129077][T29217] ? __fget_files+0x2a/0x420 [ 1047.133701][T29217] ? __fget_files+0x3a2/0x420 [ 1047.138424][T29217] ? __fget_files+0x2a/0x420 [ 1047.143068][T29217] ksys_write+0x150/0x270 [ 1047.147441][T29217] ? __pfx_ksys_write+0x10/0x10 [ 1047.152371][T29217] do_syscall_64+0x166/0x520 [ 1047.156986][T29217] ? trace_irq_disable+0x3b/0x140 [ 1047.162036][T29217] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1047.168138][T29217] ? clear_bhb_loop+0x70/0xc0 [ 1047.172852][T29217] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1047.178773][T29217] RIP: 0033:0x7f0aa319e159 [ 1047.183243][T29217] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1047.202888][T29217] RSP: 002b:00007f0aa407f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1047.211328][T29217] RAX: ffffffffffffffda RBX: 00007f0aa3426090 RCX: 00007f0aa319e159 [ 1047.219317][T29217] RDX: 0000000000000008 RSI: 0000200000000080 RDI: 000000000000000b [ 1047.227329][T29217] RBP: 00007f0aa323503b R08: 0000000000000000 R09: 0000000000000000 [ 1047.235346][T29217] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1047.243359][T29217] R13: 00007f0aa3426128 R14: 00007f0aa3426090 R15: 00007ffd8d61eab8 [ 1047.251374][T29217] [ 1047.255018][T29217] Kernel Offset: disabled [ 1047.259351][T29217] Rebooting in 86400 seconds..