last executing test programs: 11m47.782326093s ago: executing program 3 (id=5219): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000000)=@ipv4_newaddr={0x18, 0x14, 0x509, 0x70bd27, 0x25dfdbfc, {0x2, 0x38, 0x0, 0xff}}, 0x18}, 0x1, 0x0, 0x0, 0x4040014}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xe, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a4000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b400000095"], &(0x7f0000000880)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sk_skb=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) 11m47.689421796s ago: executing program 3 (id=5221): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)=ANY=[@ANYBLOB="0213f803030000002cbd7000fddbdf250100", @ANYRES64=r0], 0x18}}, 0x2080) (fail_nth: 8) 11m47.062365878s ago: executing program 3 (id=5226): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="200000001000ffff25bd7000fbdb00", @ANYRES32=0x0, @ANYBLOB="1720000021200000"], 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x8000082) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) (async) r2 = socket$inet_udp(0x2, 0x2, 0x0) (async) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) bind$alg(r3, 0x0, 0x0) (async) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x1b}, @in=@multicast1, 0x0, 0x0, 0xffff, 0x0, 0x2}, {0x10000, 0x3, 0x1, 0x0, 0x6, 0x19b, 0x0, 0xfffffffffffffff7}, {0x0, 0x8, 0xdffffffffffffffc, 0x8}, 0x0, 0x0, 0x1, 0x0, 0x2, 0x2}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x2, 0x6c}, 0x2, @in=@empty, 0x0, 0x5, 0x0, 0xb7}}, 0xe8) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_RATE_ENABLE={0x8, 0x5, 0x1}, @TCA_FQ_LOW_RATE_THRESHOLD={0x8, 0xb, 0x3}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x48040}, 0x0) (async) sendto$inet(r2, 0x0, 0x0, 0x400c810, &(0x7f0000000000)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10) (async) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000008000000000018000380140003801000018004000300080001"], 0x44}}, 0x0) (async) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="070000000b0e5a164949a57f0000180001801400020073797a5f74756e0000000000000000bbcf000c000380040003800400010053110fbe21ac45d00f144d76ff4c1976257b87c447838bd5cbda14fb8331ddfdee3a58ffeb698e188e3ed4ab4a419c9a69d22f1f521c0246d272"], 0x38}}, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000062010c000000800095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) 11m46.949470218s ago: executing program 3 (id=5227): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = epoll_create1(0x80000) ioctl$EXT4_IOC_GROUP_EXTEND(r1, 0x40086607, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x8) r2 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) socket$xdp(0x2c, 0x3, 0x0) writev(r2, &(0x7f00000019c0)=[{&(0x7f00000002c0)="f40311f7e3e0217f1bb9dddd0e26556f8bfb6f9ad331000c2f4c6ed35a33ee41cb92082e09ed5f5c78a9d9c7d8b9948128828adeff221f86bfd2c7f53b6e7a1c6168216e2939e601a11ef0abeae4192c4cb34a66181f823126a2a8815909791eec38164c07aa4640c2fbf3bfc8894981092ec28e", 0x74}, {&(0x7f0000000340)="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", 0x1000}, {&(0x7f0000001340)="b6035621eef3d5596c9c3075e086f7b88d85428d4a9538ab87cc1ebce5cdb6c86a86633d2d8643ea3db3902765a3fed99c2d356ad29ce475f81bdabafb2e6ea782f535c04600f28c6fecf2f16ba7cae1b46fc252be537012bdb5ce8db2f8e510f2f83573ce8982b405bfe5a5674ab12a6455bd5f30f25242fe360135dd707ba53bc0a40a7f0a79988053019015cc8c0d9ed1c52a965d5c90d48e3024aca92f27e83f1832aa03dfc670ec46bb1b35f602e05e9016eac05d5f7960dfb20ce12b347301335bf6f82960ce4add16df29e87e9f48f4472bcc38027321274a02c6532ba9c3f5d4", 0xe4}, {&(0x7f0000001500)="5d601cb386719392f6f941389d1a5fc0abbb87d735278abc399299afadabd58ce1be377e4977a2a26451bece715f9305723ea3064fffff6a4dc645c6896f93ec8a5a845cf66fe1ce67d703b24a9f60f38a133991d7582914c1bb2748862e9f6cbc534d86a0ca444871f409f1d95729bed33bc760eba178db34483c5e0618eb71a02d22a37587e8c5ea71a763868bf9ac67d84a8509d5190b57a08096026657f67528c8186b357db48a23090a1f588d69351014c72c3ada1159c7fe54b3ecba652e74647273ff663ed673bd2c9fc83eee0bdd92627de7ce22195d502f9b94058215", 0xe1}, {&(0x7f0000001600)="a1a6f96cf6618c62345acdf5f199adefc745be76a9fff0b63b632799faa415cc26fd9dd9816023407116e637015e40458ea124ad2a38ed76b19a6b6112b53ade80cbb8e4371fcc71b74f10202cecee682748500f9edc", 0x56}, {&(0x7f0000001680)="da9f27bd37f60c637717747dd0c58c9374146d699ca0181e1307044477c7bad0f79cedcda74f5ab5c7a839f0b15edc29db73e7e1f16db92f67e529fe744a2bdfcc2c822b6f6b3d4071983068ba8ac9a89c5197f86d4bde88433eb13070d4e5", 0x5f}, {&(0x7f0000001700)="e3e91a6871eaacd4f2a785d6ea699f4bcdee9002821499a425368058c951204b19d822030633d405bcc6c88a5112065dcc23e442f2256be47631cea930fb294af2f3cac238cac799f8866e1bb0608ee747814b121b3312219ea7b60596e13fd36575459b3d0493d2cc147ac51a4d99bfb76e89d43978d02dc4c1c07955eb74f5ada8eea4fb61c497278d89c8046172f8cadb7294edea61f6ed5838532767b07971ee77ca04485130ceaee6d1fea12c12a29bdf5e400e2aca431e40c69997b55571ce8650278ab1a5fdfe85b064d4", 0xce}, {&(0x7f0000001800)="a9547e85824083e2cb8a600c87fe6755a61870b731d1094a7abd43bb8b73d19ec0ce76bb3c40dbe6f6ae8014393c88dcf17dc9424e6a11a58833231f84f10059f723ac3fc914c0", 0x47}, {&(0x7f0000001880)="cd5c19080c07213c16a34c59e2151a407131217adf1e55a082eea7abaf3a0403279069fe78fdfa4587b8790e31cee7d83230bcf4d5b1cb3e50cc0ee3d2f19906051d16b8845c7049637d51b1c7acc2b1c025ef6fa80976890cc778dea52b9413cf780607feee2cd3fc4839df0e03387fed181e2962018a3a5022e330e6b084ddb8649866f50ddbc2c83693e3cdec4ee59a888234a56a0a9b66914a07c7dace9e9d0c61c8c50d46b0ab853eac034ca4418137af7ded57cf0ecbdfc8ae5ecf36ebfc62ff3f92cafde333fe503a25bb02", 0xcf}, {&(0x7f0000001980)="5b981f9441958198ff81e0a8273233a2962b9a8fd6b7dbd9", 0x18}], 0xa) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x18000000}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendmmsg$inet6(r0, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000001c0)="82", 0x1}, {&(0x7f0000000140)="11", 0x1}], 0x2}}, {{0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000280)="690c359316fbdb6432bcf10243", 0xd}], 0x1}}], 0x2, 0x4404c880) sendto$inet6(r0, &(0x7f0000000300), 0x16, 0x3b00, 0x0, 0xfffffffffffffdfd) 11m46.809197703s ago: executing program 3 (id=5230): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYRESDEC=r0, @ANYRES32=r0, @ANYBLOB="01980000000000001c0012800b00010067656e65766500000c00028005000300010000", @ANYRES16=r0], 0x3c}, 0x1, 0x0, 0x0, 0x24000016}, 0x4000082) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$netlink(0x10, 0x3, 0xf) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0xb, &(0x7f0000000000)=0x2, 0x4) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=@gettaction={0x7c, 0x32, 0x600, 0x70bd25, 0x25dfdbfd, {}, [@action_gd=@TCA_ACT_TAB={0x68, 0x1, [{0x10, 0x4, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0xc, 0x14, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfff}}, {0x14, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0x14, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0x14, 0x11, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}]}]}, 0x7c}}, 0x4044085) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYRES16=r2], 0x90}, 0x1, 0x0, 0x0, 0x24004944}, 0x2800) close(r4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x1, &(0x7f0000000540)=@gcm_128={{0x303}, "ffffffffffffffe2", "ce083700daf38a6d69e9b5e9c2f133d7", "6a3a05b9", "0523000180990002"}, 0x28) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000380)={'wpan1\x00'}) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) write$cgroup_int(r7, &(0x7f0000000000), 0xffffff6a) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) sendfile(r5, r7, 0x0, 0xffffffff004) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r8 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) close(r1) unshare(0x20000400) r9 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r9, 0x11b, 0x4, &(0x7f0000000100)={0x0, 0x0, 0x800}, 0x20) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x6, 0xf, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000018110000", @ANYRES32=r3, @ANYRESHEX=r8], &(0x7f0000000200)='GPL\x00', 0x20, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r10, 0x0, 0x1b, 0x0, &(0x7f0000000000)="b905000000d5712c045ca325475c691460b800000000f30981fd1a", 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x88d}, 0x50) setsockopt$IP6T_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x29, 0x41, &(0x7f0000000740)=ANY=[@ANYRES8=r1], 0x78) 11m46.384352509s ago: executing program 3 (id=5234): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="b702000004000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff1d6405000000000065040400210000000404000001e37c60b7040000000000006a0a00fe000000008500000032000000b70000000000000095000000000000000ce0de7621e5e832249c04112cf7af2b75d0d1f034b1b3fb6bd3ce8fa62c7941272ff49142d860010ab162aa2264ab67e55a00000000000000edfe0969a9ddc125b686a1e83c8790c893d713b3295dad0ea697181d1e85b64126b5d72f204754d1d4a93f24215dee354e93cfc3f50ff23f8432c72012f021c84c59a9d4c142f439d3040cfee621589fb3a2f1407c7cbed48e7026f8d52d4bca2608c79aa4a73732028f88ce07ed1075da4a2ef44e3d8b88873f0b1de87dfb6d15936ec0a27cb554def9e27396df6b7851ffa26237ea6730880f06371beb3b290b7d8629a6f0373fefa0acb60888fc14ad2b83ca03ac2aee792482ced58af4140cc4ce3efef26e00c5b2200a91cb80c6065a697d6fc8aa8b65aee0783b04cff0218ce82c9687b4474da89c474c23727555fc5e5f8ad0f2f7a261140440fce1f12cc6df312accd011d888384283092d987c40bbb46f68c2431b97906f00000000349834fa147bd5923bbd4e606708034931a8f1a89bdf77093a0000427aab8e21e1a33d3fe093547532fce6549dd648ad233e05a7b3ea178007c1c32e871ac81f287c4aabbd153390b16d1d41ee433e3aee000000000009e106d6b5289f0000000000000000000000f7bc9f46cb71f6b889d37807865e3b4e9916dd0f72c9d58ea333b90f8886dcbf5ddda0e42ca08e3303632401f2f5212b40c0e88c957fd767dbfc80b07ad668b4f6f92fb209d7c2dbac597843c8eb7bf92fe6d0bb0b72549795c2ed19e441eb69869844152ba9da0588e42cdbc5fcd245ce5e3ef0dca64931276702a312db7956f0a75eb9caa17d47a6331c7c963cbf86a845ce27c26b7136d3e7207318b1df7a6320c64f18ccd926eaeddcde8d5006d6c38db117fb1115221a66169172720ccca770bff37e59511b2606138377eda44b2f288b491ab8aae0e11a98303b0e407e0f9d21f4a3ebbd3fabf6da9a1a1f869a339fab465d8322b7280b0734fd115a19b33c8644fff71b3c62f2e1b827e2663e06a751182e968c8ab05fb1d0115d4b11d944f2c06acc023a02b7416a9a10218d21503cda13bb5df6c992e52e1c01793b728eac000058ab3b3900d279297dadc127e2f38fc60c23af2e1fefa5a83456647191ba1953d320f59aa261fe79613df6bf43884e9649691e32680d75a541c27ffe74f9d13340f2cf1c7dc2b7db01213216cd4ecfd30efe137641471987289b7e23482e026b26eacd1b97443e2ea2d1d6e31a01ee0ae7fa195a2152b2338b086423a3883f2ce3e2f84e04f4d52c985eac4b46336908599564b47db0e6aa97ee51a360f4382fd99745725d44c77d097f69d19fe86f71c38a0226d44ebe0ecbd959f14b540745cd03b8c9f02b825ba45ca85706c73115f70871db9d2a1bc2a517b39f9648123917a5db07ba4e27f961373767e1ea8f7cc558e483abef1a9923c5cfa2081e430680950b7d7c377726b557ad31fdee17ba7057741f39d29d8ab295222f96297a777bb235416e72c84afef2bdb08fb375147b028b89f15af45bc8976b91158c13c9876daa71e7db0f5a17376be39ea79ce1246c547c740e31c64e5d293e0e5a544dd166010061d6ccae46c173b8e11721e4bce22c16af00000021f80ac6c3971006db853e3c40a5417d6eac09eb0e01ac6bd4c6dacdcb1d6d2ef9c8bdea91c984022821e961236d08f8b9072ec6cb5d5a68833fd5b4e80a5ac2bc6ff323f5ce612b59ce8177956c1affcc8baf4c8b59ab959aff9a7bd81f7c7c1f1bb92ddbeed6bce8041c7f0c1c584e6ae027678ce3cfbfea938aecc3c5119c5875b7fb35dc20f5c7aaae1e276104f607a73fe501c1045873a2b1eb80e95c87f099d98028dc82bdc7ef08c871fb3061c3c5ebd613e6e5e8cf099bb6e8c0441a133c85138b36a02c47fbedf7ed1d3ce74c9ec2c676c0b2d4b5eca61dbf5769b483c2a9f6bec666dae4e81960e9bad7f17cfc3d5bcc7b7f437110ca8ffa908c12086b2227eb202a8d56e0925ba994b05c98c39de44d25932449ddf08e5377814a40877eab4440ca01b3f50d2014a61a7d32105254b424238122386424efa3a7041254f686a5faac120942287f75e8e3db569ce47b120059d774a37e11d013be50cd2cbb00f6d2a23af61ec7d30bb7dc33a92f900b6ff1d29dc61cc40b846040dbafd00c6bcfbcf700"/1664], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x702, 0xe, 0x0, &(0x7f0000000380)="e460334470b8d480eb00c1520800", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_freezer_state(r2, &(0x7f00000000c0), 0x2, 0x0) r4 = openat$cgroup_procs(r2, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000180), 0x12) write$cgroup_freezer_state(r3, &(0x7f00000001c0)='FROZEN\x00', 0x7) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x14, 0x84}, [@ldst={0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000000700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000680)={'syztnl0\x00', &(0x7f0000000600)={'syztnl0\x00', 0x0, 0x2f, 0x4, 0xf8, 0x9, 0x41, @mcast2, @dev={0xfe, 0x80, '\x00', 0xb}, 0x57b9452cba45d52f, 0x7, 0x9, 0x7fffffff}}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xc, 0x20000000000000b8, &(0x7f0000000100)=ANY=[@ANYBLOB="b400000000000000791090000000000007000000002000209500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000015c0)=ANY=[@ANYRES32=r6, @ANYRES32=r7, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r6}, &(0x7f00000006c0), &(0x7f0000000700)=r5}, 0x20) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000000e00)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0}) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000500)=ANY=[@ANYBLOB="340000001100010026bd7000ffdbdf0500000000", @ANYRES32=0x0, @ANYBLOB="082004000000040014003d"], 0x34}, 0x1, 0x200000000000000, 0x0, 0x240040c4}, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r3, 0x50009418, &(0x7f0000001000)={{r6}, r8, 0x0, @unused=[0xc8, 0xe, 0x8, 0x7], @name="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"}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004"], 0x48) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000500)={'wg1\x00', 0x4000}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000002c0)={0x1b, 0x0, 0x0, 0x1, 0x0, r1, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x6}, 0x50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r11, 0x0, r13, 0x0, 0xf3a, 0x0) close(r12) write(r10, 0x0, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x100000d, 0x6031, 0xffffffffffffffff, 0x0) 11m31.268287943s ago: executing program 32 (id=5234): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="b702000004000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff1d6405000000000065040400210000000404000001e37c60b7040000000000006a0a00fe000000008500000032000000b70000000000000095000000000000000ce0de7621e5e832249c04112cf7af2b75d0d1f034b1b3fb6bd3ce8fa62c7941272ff49142d860010ab162aa2264ab67e55a00000000000000edfe0969a9ddc125b686a1e83c8790c893d713b3295dad0ea697181d1e85b64126b5d72f204754d1d4a93f24215dee354e93cfc3f50ff23f8432c72012f021c84c59a9d4c142f439d3040cfee621589fb3a2f1407c7cbed48e7026f8d52d4bca2608c79aa4a73732028f88ce07ed1075da4a2ef44e3d8b88873f0b1de87dfb6d15936ec0a27cb554def9e27396df6b7851ffa26237ea6730880f06371beb3b290b7d8629a6f0373fefa0acb60888fc14ad2b83ca03ac2aee792482ced58af4140cc4ce3efef26e00c5b2200a91cb80c6065a697d6fc8aa8b65aee0783b04cff0218ce82c9687b4474da89c474c23727555fc5e5f8ad0f2f7a261140440fce1f12cc6df312accd011d888384283092d987c40bbb46f68c2431b97906f00000000349834fa147bd5923bbd4e606708034931a8f1a89bdf77093a0000427aab8e21e1a33d3fe093547532fce6549dd648ad233e05a7b3ea178007c1c32e871ac81f287c4aabbd153390b16d1d41ee433e3aee000000000009e106d6b5289f0000000000000000000000f7bc9f46cb71f6b889d37807865e3b4e9916dd0f72c9d58ea333b90f8886dcbf5ddda0e42ca08e3303632401f2f5212b40c0e88c957fd767dbfc80b07ad668b4f6f92fb209d7c2dbac597843c8eb7bf92fe6d0bb0b72549795c2ed19e441eb69869844152ba9da0588e42cdbc5fcd245ce5e3ef0dca64931276702a312db7956f0a75eb9caa17d47a6331c7c963cbf86a845ce27c26b7136d3e7207318b1df7a6320c64f18ccd926eaeddcde8d5006d6c38db117fb1115221a66169172720ccca770bff37e59511b2606138377eda44b2f288b491ab8aae0e11a98303b0e407e0f9d21f4a3ebbd3fabf6da9a1a1f869a339fab465d8322b7280b0734fd115a19b33c8644fff71b3c62f2e1b827e2663e06a751182e968c8ab05fb1d0115d4b11d944f2c06acc023a02b7416a9a10218d21503cda13bb5df6c992e52e1c01793b728eac000058ab3b3900d279297dadc127e2f38fc60c23af2e1fefa5a83456647191ba1953d320f59aa261fe79613df6bf43884e9649691e32680d75a541c27ffe74f9d13340f2cf1c7dc2b7db01213216cd4ecfd30efe137641471987289b7e23482e026b26eacd1b97443e2ea2d1d6e31a01ee0ae7fa195a2152b2338b086423a3883f2ce3e2f84e04f4d52c985eac4b46336908599564b47db0e6aa97ee51a360f4382fd99745725d44c77d097f69d19fe86f71c38a0226d44ebe0ecbd959f14b540745cd03b8c9f02b825ba45ca85706c73115f70871db9d2a1bc2a517b39f9648123917a5db07ba4e27f961373767e1ea8f7cc558e483abef1a9923c5cfa2081e430680950b7d7c377726b557ad31fdee17ba7057741f39d29d8ab295222f96297a777bb235416e72c84afef2bdb08fb375147b028b89f15af45bc8976b91158c13c9876daa71e7db0f5a17376be39ea79ce1246c547c740e31c64e5d293e0e5a544dd166010061d6ccae46c173b8e11721e4bce22c16af00000021f80ac6c3971006db853e3c40a5417d6eac09eb0e01ac6bd4c6dacdcb1d6d2ef9c8bdea91c984022821e961236d08f8b9072ec6cb5d5a68833fd5b4e80a5ac2bc6ff323f5ce612b59ce8177956c1affcc8baf4c8b59ab959aff9a7bd81f7c7c1f1bb92ddbeed6bce8041c7f0c1c584e6ae027678ce3cfbfea938aecc3c5119c5875b7fb35dc20f5c7aaae1e276104f607a73fe501c1045873a2b1eb80e95c87f099d98028dc82bdc7ef08c871fb3061c3c5ebd613e6e5e8cf099bb6e8c0441a133c85138b36a02c47fbedf7ed1d3ce74c9ec2c676c0b2d4b5eca61dbf5769b483c2a9f6bec666dae4e81960e9bad7f17cfc3d5bcc7b7f437110ca8ffa908c12086b2227eb202a8d56e0925ba994b05c98c39de44d25932449ddf08e5377814a40877eab4440ca01b3f50d2014a61a7d32105254b424238122386424efa3a7041254f686a5faac120942287f75e8e3db569ce47b120059d774a37e11d013be50cd2cbb00f6d2a23af61ec7d30bb7dc33a92f900b6ff1d29dc61cc40b846040dbafd00c6bcfbcf700"/1664], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x702, 0xe, 0x0, &(0x7f0000000380)="e460334470b8d480eb00c1520800", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_freezer_state(r2, &(0x7f00000000c0), 0x2, 0x0) r4 = openat$cgroup_procs(r2, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000180), 0x12) write$cgroup_freezer_state(r3, &(0x7f00000001c0)='FROZEN\x00', 0x7) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x14, 0x84}, [@ldst={0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000000700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000680)={'syztnl0\x00', &(0x7f0000000600)={'syztnl0\x00', 0x0, 0x2f, 0x4, 0xf8, 0x9, 0x41, @mcast2, @dev={0xfe, 0x80, '\x00', 0xb}, 0x57b9452cba45d52f, 0x7, 0x9, 0x7fffffff}}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xc, 0x20000000000000b8, &(0x7f0000000100)=ANY=[@ANYBLOB="b400000000000000791090000000000007000000002000209500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000015c0)=ANY=[@ANYRES32=r6, @ANYRES32=r7, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r6}, &(0x7f00000006c0), &(0x7f0000000700)=r5}, 0x20) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000000e00)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0}) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000500)=ANY=[@ANYBLOB="340000001100010026bd7000ffdbdf0500000000", @ANYRES32=0x0, @ANYBLOB="082004000000040014003d"], 0x34}, 0x1, 0x200000000000000, 0x0, 0x240040c4}, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r3, 0x50009418, &(0x7f0000001000)={{r6}, r8, 0x0, @unused=[0xc8, 0xe, 0x8, 0x7], @name="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"}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004"], 0x48) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000500)={'wg1\x00', 0x4000}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000002c0)={0x1b, 0x0, 0x0, 0x1, 0x0, r1, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x6}, 0x50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r11, 0x0, r13, 0x0, 0xf3a, 0x0) close(r12) write(r10, 0x0, 0x0) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x100000d, 0x6031, 0xffffffffffffffff, 0x0) 3.860909375s ago: executing program 2 (id=12626): sendto(0xffffffffffffffff, &(0x7f0000000300)="a20a0552e2cc5676feedf3ee8470fdef7c7ccba6603f370eed2b56393b74abefaada5820d4587d7e547abe99f552e6bcef98d134f93dddafffb05bfcfd144753e418b4fe38c9be58a7e73774895d0d90435cec727a8d762f975fe7d14bbd812a8c683f14e244398fc5ac6194394b28b62b1f10f861c77ff1fe4361af2bb9b91dd265681020cb256de5528879407f774c09cab9df12954e66a5bb116c9129535febe090964fe072c0d50c7136a2383992937917ffe43285410b712746bf75354bab435fab564ebff6a4fb480ef5904e52b21e544a1bb94adba5d0775ca87bb043d807296cd9eac2b59cda353ee43efe5d", 0xf0, 0x8000, &(0x7f0000000440)=@caif=@dbg={0x25, 0x30, 0xa}, 0x80) unshare(0x26020480) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x10, 0x3, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x4c, 0x0, 0x800, 0x70bd28, 0x25dfdbff, {}, [@ETHTOOL_A_COALESCE_RX_MAX_FRAMES_LOW={0x8}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_RX={0x5}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES={0x8, 0x3, 0x614d}, @ETHTOOL_A_COALESCE_USE_ADAPTIVE_TX={0x5}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_RX={0x5}, @ETHTOOL_A_COALESCE_RATE_SAMPLE_INTERVAL={0x8, 0x17, 0x9}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES_LOW={0x8, 0x11, 0x3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000000}, 0x1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000008c0)={0x50, 0x1, 0x2, 0x5, 0x0, 0x0, {0xa, 0x0, 0x5}, [@CTA_EXPECT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00'}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x22}}]}]}, 0x50}}, 0x4000) writev(r1, &(0x7f0000019880)=[{&(0x7f0000000400)="fb", 0xffffff5c}, {&(0x7f00000197c0)="1902eb02d5e5f29e59e1a7caec33eb76d2430da474d87e367f6598d026438b65eda8341073b6752abdcee080c8e1e876b25227c37d7dd79886ce33f13e857c8eda1cecf6ac36c03dbf54e3cb5136da5a33fee76fb3113f8b6700e9e5fc006b8eed665fed48738d59395ad07438c3610ae3976aac75caf2facafa21c25be3c2", 0x7f}], 0x2) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername$packet(r3, 0x0, 0x0) 3.775477315s ago: executing program 5 (id=12628): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000040)=0x1c65a, 0x4) readv(r0, &(0x7f0000000400)=[{&(0x7f0000000480)=""/73, 0x49}], 0x1) 3.426806115s ago: executing program 1 (id=12634): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x24}}, 0x0) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000100)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x4}, 0x1}, 0x18) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="0000000000000000400012800c0001"], 0x68}}, 0x82) r1 = socket$igmp6(0xa, 0x3, 0x2) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e21, @rand_addr=0x64010102}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r3, 0x84, 0x71, &(0x7f0000000000)={r5, 0x3ff}, &(0x7f00000000c0)=0x8) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'}) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f0000000340)=@framed={{}, [@printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}}, @snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r6}, {}, {0x85, 0x0, 0x0, 0xb3}}]}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r7}, 0xc) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0xfdef) 2.979881331s ago: executing program 2 (id=12644): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r3, &(0x7f0000002680)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000040)="18", 0x1}], 0x1}}], 0x1, 0x11) shutdown(r3, 0x1) getsockopt$inet_sctp6_SCTP_RTOINFO(r3, 0x84, 0x82, &(0x7f0000000340), &(0x7f0000000480)=0x10) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000003140)=ANY=[@ANYBLOB="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", @ANYRES32=r4, @ANYBLOB="08001a"], 0x18c0}, 0x1, 0x0, 0x0, 0x880}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000002c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="04002cbd7000ffdbdf257600000008000300", @ANYRES32=r5, @ANYBLOB="0c0058001600000000000000faff570000000000000c0058007200"/36], 0x40}, 0x1, 0x0, 0x0, 0x20000044}, 0x20008005) sendmsg$NL80211_CMD_TDLS_MGMT(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="01002cbc0900fedbdf035200000008000300", @ANYRES32=r5, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x806) 2.856535344s ago: executing program 5 (id=12647): setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000140)=0x3dbc, 0x4) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_LBT_MODE(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000740)={0x14, 0x0, 0x4}, 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000cc0), r0) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000012c0), r0) sendmsg$NLBL_MGMT_C_VERSION(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0xcc, r1, 0xf03, 0x0, 0x200, {}, [@NLBL_MGMT_A_DOMAIN={0xb8, 0x1, '\x00\x00\x00\x81jq\x00\xa6M\xe6\xa19\x8f\xa5f\xbfr\xe0\xaf\f4\x8d0r\xaf\x03\xe8u\x1f(\x99.\x97J\xfa\xd8\xa8`\x05c\xd8\a\xda=\xb7\x8d\xcf\xaf\x8b?8\x16\x89\xda\x9f\x1dzS\x8f\xbc\xf3\x9a\xd0\x02\":\x03\xc2\x88bS6h0\xe9oZ3\x8d\x16U\xbea\xa2\x9d\x16YV\xfcU\x9c\xa2\xd5\x13\x0f\x88\a\x02\xc4\xc3\xca\x05U\xfaM\tG\xc4T\x19!\xc4\x9f\x80U^\x8a,\x18\x86~3\xad\xbf\xc5\n\xa1\"\xcaHI\x1c\t\x1f\xc9\xf6\xfb\xd2a\x8caq\x86\x91\x92\x14\"3;\xad\xc3\xa0\xf3\xc2\xd8n\xd3\xdb\xcc\nv\xbdM[\x18.\x8ch4\r\x83\x9d\xd1}q\xcb\xc6\x05\xe2>'}]}, 0xcc}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f00004b8fe4)={0xa, 0x4e23, 0xfffffffd, @loopback, 0x3}, 0x1c) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) sendmmsg$inet(r2, &(0x7f0000001f00)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000240)="a1bb036d6753aa32d58fc8443aeef5ec478a1ab44b508b1f23d81c95369fdf2da8b5da85604516e1848194a5eca5dce17c8ac0cb57472c7b91bd618f16ad", 0x3e}, {&(0x7f0000000340)="e919a6cc1f3824abcfa7bc88ed23362261539b6e241a54b16d63ab76ee0023e532d5f6c79a9bbe9df89f303c02f04bccb054fc2ae2355817b23ee90b3b9555cc78ff", 0x42}], 0x2}}], 0x1, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r3, 0x6, 0x1, &(0x7f0000000900)={0x6, 0x0, 0x6, 0x4, 0xe0, 0x8, 0x1}, 0xc) getsockopt$bt_BT_RCVMTU(r3, 0x112, 0xf, &(0x7f0000000000)=0x2, &(0x7f0000000180)=0x2) sendto$inet6(0xffffffffffffffff, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @local}, 0x3}, 0x1c) 2.758371234s ago: executing program 4 (id=12649): getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000300)={r0, @in6={{0xa, 0x4e22, 0x8, @dev={0xfe, 0x80, '\x00', 0x1e}}}}, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292", 0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[], 0x5c}}, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x1c, 0x2e, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0x4, 0x18, 0x0, 0x0, @binary}, @typed={0x4, 0x1e}]}, 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x0) syz_genetlink_get_family_id$SEG6(&(0x7f0000000100), r2) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) sendmsg$tipc(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000480)="c3e972bd85a6d84136d6dd55048d3593a74f338ce6772ab9a6f64041c2f6fbbecdc08ebcd3192b6a53662dae7c8e9c665e80a5d0925f728dcac30c29793992e588952653d414cb8ccdabc38767fee819ec5af0c5ee936880fe8549b4ed347779cab4ffd4e0b62c53a1c01db28f2b3f91c34211c9353bc1dece61511917c2245fd66cb8dffeacb4d46d627c97b498bf1ff6b313bfbc9765457c831771d5eec7997ec242e4505f01c1bb3e069b2e630f42a2be86598a61", 0xb6}, {&(0x7f0000000300)='V', 0x1}, {&(0x7f0000001600)="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", 0x1000}, {&(0x7f0000000340)="b768eb20304f2fdc5a9694a4", 0xc}], 0x4, 0x0, 0x0, 0x8018}, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r4 = accept4(r1, 0x0, 0x0, 0x800) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000540)={'ip_vti0\x00', 0x0}) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$nl_generic(r4, &(0x7f0000000780)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000740)={&(0x7f0000000e00)=ANY=[@ANYBLOB="8c0200003600000428bd7000ffdbdf250700000061d9e689dce6900d04007d808e001c0054f764a1b87f3e51c5dbe1b5f87dae279a96f019c2319f377886b94e11ee76cfbccca60ce47ec3e05d1f45b1a2156451a8834a683a2409cb961eb2c3b9106b78bee1f000b60fd161911c15a406fd8c8a629ab105f0be56e2b8eaf3de6464c232245907c84ba0eb31950799d536741a9d634b8f280cc4bf280a8e648c63fa1eb01a90869cbba334e34fdb0000543c84dcc4de0fb44b9c608fe08b3d8d1eb747900470a3d025463cfcb07eef71dd3240c6d8d1642e0941cee52fea6d9b15ce31c0aa93e93c84cf7d33e991891c908361754a6e094a22907663cd12bf0bf12221491b34361dad35198dd79737c297455341e1c13c2c8ab73a52ccf13a4a52835981ccca384338982b34465a9d9033cf3939c7c366a68d1a477af916fb58b4c132d5433be1b0cf14468bd0cb4036a87aa0498c6db766a78a9faf136a164f00ae769624cd5187fcb1683f5ef69c04bf747e2bc3e80e40ed2f5e1063d162207214004300fe8000000000000000000000000000bb000000d9fe18df884e4243af8d74878ce074adb06e946398f9ab4a6ad66fb77b36b43fd25cf137ee629506c65705cf1e7a162d4f2d8aea3d206eb0035dbe387fae2a7559410a0f0a069859ae95fe242f078ea183b2086dfb86a5c739256b58759329fe997afa1367c7cb5263b94a7bcb13723d55dfcc00815afe3d9920fa11f984ad9848815c967330eb29734b4514ff583b00ebf61676d7ca659ef8b0373795e2c2c58956decbb9e5573e69433d212bf298825b88148ddd58366c588732493bcb7bc4080710baf56123f38df6c414d8e5c17721002900776c616e31000087ac69ab86fec3249a4f8f8111ee994f948341225197000000"], 0x28c}, 0x1, 0x0, 0x0, 0x10}, 0x40e0) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES8=r5, @ANYRES8=r7, @ANYRES32=r7, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 2.677603011s ago: executing program 5 (id=12650): unshare(0x20000400) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000500)="7c5331fc9356b5b1000600008100", 0x0, 0xd5a2, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_RECV_OWN_MSGS(r1, 0x65, 0x4, &(0x7f0000000100), 0x4) r2 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r2, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000100)='a', 0x1}], 0x1, 0x0, 0x0, 0x44}], 0x1, 0x0) setsockopt$inet_sctp_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000180)={0x0, 0x20, 0x8f, 0x2, 0x0, 0x0, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x4}, 0xe) sendmmsg$inet_sctp(r2, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="300000000000000084000000010000000000000004"], 0x30}], 0x1, 0x0) recvfrom$packet(r2, &(0x7f0000000200)=""/162, 0xa2, 0x2, 0x0, 0x0) ioctl$PPPIOCGL2TPSTATS(r2, 0x80487436, &(0x7f0000000000)="38ce261676978a04ef067cc9c9a50c67270de3f291812ba24883ddea6cd21772c010979a5f3f34675ef3b85a0da9509e07ecd049ccd4eaf186373c9672feabce50a18ed07b7bd5aaa1afb4e7e7b6108336a290e515692f") 2.490910166s ago: executing program 0 (id=12653): socket$key(0xf, 0x3, 0x2) r0 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x4000000) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000054c0)=ANY=[@ANYBLOB="b800000019000100060000000000000000000000000000000020000000000000fe8000000010000000000000000000bb000000000000000002"], 0xb8}}, 0x0) 2.361560094s ago: executing program 0 (id=12654): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @loopback}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000380)='htcp', 0x4) ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r0, 0x80089419, &(0x7f0000000140)) r1 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x0, @none}, &(0x7f0000000040)=0xe, 0x40000) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r1, 0x40047211, &(0x7f0000000100)=0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuset.effective_cpus\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xffffffff}) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, 0x0, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r4, 0x11c, 0x4, &(0x7f0000000000)=""/152, &(0x7f00000000c0)=0x98) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 1.5477911s ago: executing program 2 (id=12655): ioctl$NILFS_IOCTL_GET_SUSTAT(0xffffffffffffffff, 0x80306e85, &(0x7f0000000080)) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) (async) r2 = socket$pppl2tp(0x18, 0x1, 0x1) (async, rerun: 32) r3 = socket$inet_udp(0x2, 0x2, 0x0) (rerun: 32) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000080)={{{@in6=@mcast1, @in6=@ipv4={'\x00', '\xff\xff', @multicast2}, 0x0, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@dev, 0x0, 0x32}, 0x0, @in6=@dev={0xfe, 0x80, '\x00', 0x29}, 0x1, 0x4}}, 0xe8) (async) connect$pppl2tp(r2, &(0x7f00000002c0)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x4, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x32) (async, rerun: 64) r4 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000300)={0x28, r5, 0x1, 0x0, 0x0, {0x7}, [@L2TP_ATTR_IFNAME={0x14}]}, 0x28}}, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_BT_FLUSHABLE(r8, 0x112, 0x8, &(0x7f0000000040)=0x3, &(0x7f0000000080)=0x4) (async, rerun: 64) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="1400000010000100000004c2b89100000000000a20000000000a03000000000000000000070000000900010073797a300000000064000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000002f200012801c000180090001006c617374000000000c00028008000140000000090800034000000106140000001000010000000000000000000084000a"], 0xac}}, 0x20050800) (async, rerun: 64) r9 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x1}, 0x50) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000200)={0xffffffffffffffff, r9}, 0xc) (async) setsockopt$inet6_buf(r6, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000000000000000000210d0000aaa8fa017242ba9380d440fe0000000000000100000002000000", 0xfe60) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0xc, 0x8}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x80000000}]}, 0x2c}}, 0x4000010) 1.468744493s ago: executing program 5 (id=12656): r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x12, 0x2, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x6}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x15, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='syzkaller\x00', 0x5, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) connect$pppoe(r0, &(0x7f0000000040)={0x18, 0x0, {0x4001, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x18}, 'ip6gre0\x00'}}, 0x1e) sendmmsg(r0, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000080)) 1.375023703s ago: executing program 1 (id=12657): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000040)=0x1c65a, 0x4) readv(r0, &(0x7f0000000400)=[{&(0x7f0000000480)=""/73, 0x49}], 0x1) 1.372900641s ago: executing program 0 (id=12658): socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={0x0}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001400b59500000000000000000a000000", @ANYRES32=r1, @ANYBLOB="140001000040000000000000000000000000000014000200fe8000000000000000000000000000aa140006"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80) sendmmsg(r0, &(0x7f0000000000), 0x4000000000001f2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'tunl0\x00', 0x0}) r4 = socket$rds(0x15, 0x5, 0x0) bind$rds(r4, &(0x7f00000000c0)={0x2, 0x4e23, @rand_addr=0x64010102}, 0x10) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_BUCKETS_LOG={0x8, 0x8, 0x10}]}}, @TCA_RATE={0x6, 0x5, {0x5, 0x9}}]}, 0x40}}, 0x4800) 1.300729733s ago: executing program 4 (id=12659): r0 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r0, @ANYRES16=r1], 0x68}, 0x1, 0x0, 0x0, 0x48985}, 0x80c1) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$bt_BT_POWER(r2, 0x112, 0x9, 0x0, &(0x7f0000000380)) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$netlink(r4, 0x10e, 0x5, &(0x7f0000000300)=""/147, &(0x7f00000001c0)=0x93) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r4, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x54, r5, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r6}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xffff}]}, 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x4885) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000710422000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', r3, @fallback=0x1f}, 0x94) 1.299681316s ago: executing program 2 (id=12660): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000140)=0x3dbc, 0x4) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ac0), r3) sendmsg$IEEE802154_LLSEC_SETPARAMS(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f00000003c0)={0x20, r4, 0x5, 0x0, 0x0, {0x22}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x20}}, 0x4000000) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0xfffffffd, @loopback, 0x3}, 0x1c) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), r1) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0xc0, r5, 0x4, 0x70bd29, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DEST={0x30, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x7}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0xc}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@broadcast}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x2}]}, @IPVS_CMD_ATTR_DEST={0x58, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xe}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xc7}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x4}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e22}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x8}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@loopback}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x7}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x75}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}]}, 0xc0}, 0x1, 0x0, 0x0, 0x5054}, 0x4010) socket$inet(0x2, 0x80000, 0x3) r6 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r6, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) recvmmsg$unix(r6, &(0x7f0000004080)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000001bc0)=""/207, 0xcf}, {&(0x7f0000000440)=""/90, 0x5a}, {&(0x7f0000001cc0)=""/197, 0xd3}], 0x3}}, {{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000001dc0)=""/194, 0xc2}], 0x1, 0x0, 0xfffffffffffffca7}}, {{0x0, 0x0, &(0x7f0000003140)=[{&(0x7f0000000b40)=""/57, 0x39}, {&(0x7f0000002000)=""/164, 0xa8}, {&(0x7f0000001f40)=""/133, 0x85}, {&(0x7f0000005940)=""/4083, 0xff3}], 0x4}}, {{0x0, 0x0, &(0x7f0000003540)=[{&(0x7f0000000040)=""/36, 0x24}, {&(0x7f0000003300)=""/12, 0xc}, {&(0x7f00000001c0)=""/221, 0xdd}, {&(0x7f00000034c0)=""/110, 0x6e}], 0x4}}, {{0x0, 0x0, &(0x7f0000003bc0)=[{&(0x7f0000003a80)=""/234, 0xea}, {0x0}], 0x57}}, {{0x0, 0x0, &(0x7f0000003f80)=[{&(0x7f00000020c0)=""/4096, 0x1000}], 0x1}}], 0x6, 0x400123a0, 0x0) sendmmsg(r6, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) sendto$inet6(r0, &(0x7f0000000300)="0c22c37d5cf70360564e4234d43135daf26aee377f4a3e9f4a1017e2ad43c61c0ac41a202dbdb88381a968c2f088ba532893ebbfe2c0c91cc4569c4411300704a83d6eebb9f376e5f8e957dd08539f4c6d7709e430f74b0408edcea9fa1984abd8e19f2fb49f228ae3531eb935ed138598ef3ba8cec15649cfb4a5d2a32a0c815df22a3f67682075a801ac80a22b4021f1313f33e28e03d607e32b5956483f76c5754d", 0xa3, 0x4, &(0x7f00000002c0)={0xa, 0x4e27, 0x1, @loopback}, 0x1c) 1.284950516s ago: executing program 5 (id=12661): unshare(0x28000600) r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r1, {0x900}, {0x6, 0xffff}, {0x10, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) r3 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_int(r3, 0x29, 0x12, &(0x7f0000000000)=0x1, 0x4) write(0xffffffffffffffff, &(0x7f0000000580)="240000001e005f031400ff01000000f80700b3586ff606c2e553797c080008e467dc0000", 0x24) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000d40)=ANY=[@ANYBLOB="6000000010000104a0518fd50000000000000000", @ANYRES32=0x0, @ANYBLOB="096b0200000000002c00128009000100626f6e64000000001c00028006001900ff0300000800090001000000080007000000000014003500626f6e6430"], 0x60}, 0x1, 0x0, 0x0, 0x20044054}, 0x4054) r4 = socket(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f0000000000), 0x4000000000001f2, 0xfff0) recvmmsg(r0, &(0x7f0000005180), 0x0, 0x1a000, 0x0) 1.093186597s ago: executing program 1 (id=12662): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000002c80)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x10, 0x1c, &(0x7f0000000040)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca900000000000035090100013800002c09000000000000b7020000000000007b2af8ff00000000b509000000000000dbaaf8fff1000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffc70200000800000018220000", @ANYRES32=r0, @ANYBLOB="0000000019000000b7050000080000004608f0ff76000000bf9800000000000056080000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 980.927565ms ago: executing program 0 (id=12663): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendto$inet6(r0, &(0x7f0000000040)='l', 0x1, 0x0, 0x0, 0x0) 979.502492ms ago: executing program 5 (id=12664): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x5, 0x4, 0x8, 0xc}, 0x50) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_udp_int(r2, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) recvfrom$inet6(r2, 0x0, 0x0, 0x40010000, &(0x7f0000000280)={0xa, 0x4e23, 0xfffffe01, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xe0f9}, 0x1c) write$tun(r1, &(0x7f0000000440)={@val={0xa}, @void, @eth={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x29}, @void, {@ipv6={0x86dd, @udp={0xd, 0x6, '\x00 \b', 0xc, 0x11, 0xff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast2, {[], {0x4f19, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x2, 0x8, 0x100, @void}}}}}}}}}, 0x46) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r5, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="6400000010003904fdffffff0000000000000000", @ANYRES32=r6, @ANYBLOB="0198050043130500440012800b000100677265746170000034000280080004000600000006000e00020000000500160002000000060010004e230000060018000200000006000f"], 0x64}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9}, 0x0) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x109942, 0x0) ioctl$PPPIOCNEWUNIT(r8, 0xc004743e, &(0x7f0000000580)) ioctl$PPPIOCSPASS(r8, 0x40107447, &(0x7f00000001c0)={0x1, &(0x7f0000000100)=[{0x6, 0x4, 0xe, 0x7}]}) ioctl$PPPIOCSACTIVE(r8, 0x40107446, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6}]}) close(0x3) readv(r0, &(0x7f0000001840)=[{&(0x7f0000000200)=""/140, 0x8c}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000000)={@dev, 0x0}, &(0x7f0000000080)=0x14) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(0xffffffffffffffff, 0x0, r10, 0x0, 0x80, 0x8) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0x5, &(0x7f0000000240)=@framed={{0x18, 0x2, 0x0, 0x0, 0x7}, [@call={0x85, 0x0, 0x0, 0x87}, @call={0x85, 0x0, 0x0, 0x5}]}, &(0x7f0000000040)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', r9, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r11, 0x0, 0xe, 0x0, &(0x7f0000000280)="5767c331e895cd135c5b7feeffd9", 0x0, 0xba, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) sendmsg$kcm(r5, &(0x7f0000002c00)={&(0x7f00000002c0)=@alg={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha12-simd\x00'}, 0x80, &(0x7f0000002b00)=[{&(0x7f00000003c0)="a767b8088c536bc14f403ada01767785092116574f7a1149851f479679a1f3bea5465720bdda5189c89700961fd217e53e150da46efd5827d5d7d3d40282b6b47ab07a30c9a07e3fddf6ef52416bce4ed038241020c065fdb9d2425b7764e2e852113ba680c1346a32831edfe2f10ecc904bdd149e377369290f01c89cbe398067d87afca504596ecfc60da0933e970355532c1a7aa413f3fffc307a10b8da48c2242bda9fae448da4061b833d639fd0897eb347cb392c0a7020fd28bd558a8d85a5809e9626bc2d460da83270c3d98479bcbd1ee6f7e222ff649cd389715108901322495dc5e41948f4ded42131674145", 0xf1}, {&(0x7f00000004c0)="a4bc0bedbee7c56a1248666e9959737271ce8d0811d5e19f169e4b7e5c3dbc991f02f636cb549646b14d26ab415430680b8506277156cb809ea41f3cfd31abe60cd3be8d59b283c7f11d9feb7c156c3834", 0x51}, {&(0x7f0000000680)="f22a9bfb090682f44d9b6cd155a4eb2958c3f85bc541a553359f56200e6090037136ee66d0f9b8604d2a077cea2b7bbeb1d57151b61e7f2ed59c99f88653abc6531b081af3748a398f9d0de576e99a9c74ac5133a01c4eb5b32eb25fc382f9b84976e1285aa81b9f478c2503f127d4969b37efaa0cf473972523ac325d3884ff90c42e038eaa01e3692e15adc0f4747a292009bf2e6fe4426d7e8cac3fbeb12e8a32336446fbfbb2fcfd43925091dbc7a853b6b14203e000cae4cfab6f59ed52772f2604", 0xc4}, {&(0x7f0000000780)="53c1e62a955a8fb8cacf3c9d7ded993e07fdca1495c0492b525da6b07632e02caaa19405603c443fda7580780bde6b8fd2ddec56125f370f417ea1b58e6eb494849b42092eddbc89a7ca87ac314670f72a5c06a3f924c0663a6a939efad13cc7ae754bf7a69b1fa91523b8cd6808c4b85da7a44bc4573cb44356b16b9023cd04bd43e34108f5de7b809e26f00a9ca92904ea09ced785f428779364fe939e6f6b1feed83ed2202880b28a8cd1598d3d916eb08333a5c42591071ab917d19b1bc0", 0xc0}, {&(0x7f0000001900)="384b69d0a1ae0e918dcbc2c82a68bbe32bbbb21a63444137c09dfdc5733a959999075153b2b12abbad431d2143bed628d7e240951f7fcec4d6f415e2d3697e7e2b9be59c645d727457e35ad08a46f84285c0bb17bcffd7776e0d41c71db8c3bae8fb8da36c2ab7f97a39e784e9bdbec3de6226205d88ce54559a3d45acd5d0413dfbcf6b24cd28430cc8d7d5232ddd0fb47afd6ac59b7cab27c2d091ee5367189fc3fb1bf7328f00da5047f8e70803a5b4022ba2471a6cef386b0c2800b68e538b579815ca0df6d9795cadc2b980d3b01b7584a2a36dab3a22f9101e9e779f56db237b701e813b8bbfc3d444c2a0bf44f94d33b02cf1e979f3a253459dde99b7ff1dd13fe443dc8b0acdf01b49969f7cfbbf9e1597f4ca16ab81404c01ba06c8c9a1a44cb7d8f0926a60ba4c7a276847f95c894a0bfb270ce407ec38c08b4bfc2bc809152bbab7bd6ee3e88879f98d2bb089d36a9bf422a178e68e5bb3f3750ef046b53091e61fe1379d7d26098b374f6727b93fd1f75dea5dc034e336e5ba01552ef401e706db8505979d1d4677ba9fecad54bcbe9cfd4e4852c59829e51407a40f09b53595d71a28145c0f98eb1e7bae600d266d54d93f760c3074a3889d0806f0466b7cbd9be5fa16d79cfadea2e565eb8fa75649afab68e811424655c2dcdff9310e496df4576c68690848fb7d425000e4e1ab8814da8691009bf338ecb6ea956dddc64fa9b6e1fb660ba34583e47c575a86833af5471c2d9bf4d98d7ae085f19d1996361bba21472a6950ecc3d49f4e95cdc44a3cef2609d0266b68ffa719198509fd9688f96571447da7710e7ea1f0ee9b1c4674ce8e0afea98b5cfcc6761a597518aa85af6d3aaeb8c46ed7a0caa2611975d21ddf7f3462f1609f24d156b87b6bf0fcb20a2d7ae178a20d0e92e396c31381b5cab2791b797087c5f6e53ad24ab81930115432a3224fde21279ac86026c6b40d0d46286adc79c75ca606763c037951244d53795e901932624c7b6b2c10a4f34b11f17f375c8472ca1fe0e03557b4757f8dbb743fbd357024647757dd64f7a9c6181b1a3cf9575caf131d064b1bdb143b88ee2ace89e7a4f6dda0b81637b4f7323fe222ee2367c232980e3c156c249379146ea4caf05475ac3d95560994418641703eb33266c9e1f0439ff81bbfb44e00d6fcb3fb4d93c62aadf9f44cc9b1fae60f7b9cb8b7e25c40290d9c722fd3dff8d27e9c7e2648402bd8f785142ff16ae2c13130ad87b072ca37a0416eef18f1666588403a81dd18c9e61d2de0038767170896111ab3a203ed093a5aedabefce3873399562a3f26a15f0a76f0e3ce5ac3bd2893ac0fed543533018e17e91b8acd3ef44e3a690e604ffac0d2e307bd470ae0fab13ae41c7ffed64a2aa602ef8aacfd017881c55a3fb2c6a0c8e34f2155072cdd50e39d7e61a852b09866092998c80e14130764b92437a2bc27d1372892fed7bfffa5b432d7041ffe390fe82b472931839f8f98b1e456517fefaccbdc36d43257c56b50c37a938891d8f8818ddae7b98dda61d3aafc45e33939fdcfd6b3c63da5c8db39640cbb3e0978e612a9001a49df17602c45a27df25a664f6f9b30dd440eeac3873ffd5ba0c5ee9232dc527859de2785b17d89c369ed7efd73bb4632d558b911060ec4617700036b2ea001def106d0856985a13116cab2a4989c73542070143940b2f4e66db66c1c883558f32eb3fc4e879c2441af3fabb4397068bcab36e784697f18529d003c5a99c6bd123b93c26f526e3d50d7f47386e74afad74814a32028ddd68f212a4ded8ed0c4661c700783089b608421ff469ad2747a699c70aab0cf013efe981a2ff808dc4ae7d40f45d8b74758fbcbd6b10a1a376ff84849771557dfde96445f73351803242fafe99bb13ea7d5b0eafe0faf37fc1a4c796b319a075965fd87c39debab711a6c551052a169b3b37a85399aec61622c34086bfdf9a6a868cbfee62bbd11a8c2d2243e4b89c8ce8ab135063687d64b40697c35014df25f8c8dfd596f3ae8b8ab439290987dfa32617f311644d0064e5e72d6bac26bf38f49b3d1f081e5a1c68c007c1a3806add4b5b275e617bf0b9ed3850631bec4b98ec8d7cba3569aa5c886cf052f3a8f923afba6b47fde3c8300482d9b9ca57da972ad1df47da35e45e42e821ad17acd6f4f7f3599981b21bbe994718eb02c17706cd09395a0172fb66d31b96ddaab03cf3f5129bf6afd27a55fe73bd2953a39f527463f35e68cb3e994d45cf9b0db3c7f879295370d42c2667d1a510d00dd393fa0502871736418d8d0c428608c7296533b8118a9bf94d5144e6fe21c54c606d440b7c378ce498307a88b5db7a7fb96ab8b0eba4bee82e789488cf529e999ac5d436213431dfeb805b132f9f746a6e4e8fe957fc727573f01ac8ed8f96b6bc1e206ed9f88b9fc677916589841ee1afea1960d4c1e384fe170d2a3d00f66edbf469b30568854784a9b6e073d533dc77042334232b54aa0ca55fbfb6c27ce40309e66ac72b6b7eb0cec94ef49347c120ef34ab3b3d8a7223bfac9485ef22f1acb805435dcfbf5a4a35714ecb3358afea3a3a4be7fd3315440901f19ece0456f0482d781ee29ebc596fe526212cfa4f49c9822782e23b96d63fee47c2c619ce0f41a4616c3cf74fad1932ad326c10493d5d490347227b81e468d434a60990b4d41a7922a1922d9a7ada15f3643e1622d7d5e3d3c73aa29c853ba6790c3a72ebd43768a215319bf13aafabd782ceec5aad84422f44d0142bd36b41ffdac6528e0be3e5eec2d335512f2a01c18d3f94c0cd585957162d923965dc9954a50f44fe7b1a70a620c2249e5619a43a4c80e4ae0a68dd15c655cbedc4e95dbd78372647bb9cfcec14f9c24758982f13f9dfcb03c3a630fe5ed990b87e14b3b07b5f406d8059e4d0e95b45a9cc3f286c9c4793a35b8903616bbc303b4b0323a99f2f4f45fb8326c7c7a2329dc0a0926de2f1c1ad5014f8e8e465e082858a736800dbf65129e1f35306cabd717b3582d76870dec6a5043897ba05bdaa6b6bb379c61e6ed1c0442a533ca123ee7c4a3befca83b341f0c70f8bbd9842ff15cfd888b08d92b9c12a4946c725a26ddb1e89eb49a84726b2cdb092f58605c817a18050e753dbc0eea88945b65c0755b861778486e28e7cf33e9bf7795ecd83a2741100e3528bf52e1263d68ea3112a69e0644f2f1f8efd6934ca5c4bdeab5217eaa1748deb197f74df9ffe4af835b66e1ffc8d5ceda294964a8653e8866e353873601da38f968821e3150af7e978563010793c359a40f0589ab9b891ccdf43c0da6a656d92b56f97c53c09c9f104b5e401e4977ed20bc6491eb84af21c4c3f421f5f482f5fd5c5b7377fbf144fe491504ed867fb479c17415e8d2f90913ce13027c908c68b628a7eab4896667a6007e0dcb97fad1ece590cfa8f125070b768f87d3bdabecfdaa4891d3f2e6e5c549b6ffaf6fab4abdddb834452cc2902bc79adca654bb263775768572e1cceedd5b2e1494fb3bdf89d191d37abd16832ddebbe8d951d8d169762966c603d89a6f8475db767753ef97563cb12e52b1031409766105a7089a20b6334d1d6df8de6d0e502c2c224427a45c703b70ee4cf5e230921b01fd754af7bad777c3948271ed79e603934ee5c385064e07b3b2c378923de32c9641f4b7998bc0ac941d97ab66b355d6515b6e65141c0d775da035f94dfc99f42be5dcfa41ac662450acc43b563a5d872335928fa62986ce735dd98a40863a504fe54c63cb51d70252f768ad63a09205893664f5a2ebd13820cb35297b5ac0b048558aefc64c9dd33c257b5830d78088aeb1ecb807d2ab9810623944edfd925e262f6d5abfd07bd77985896e67338ae30a2cebb902a1c5ca0efe9228c98401e95c315d12cc95e5d488ae7728c205936f97d60a14157872aa6f81ed6cba60d1636401803d1b3378e1558ad51b29f1cb5effca319d1c9be31e564cc6593afe8868212a9771e3a336f8dfdc540d6b4dc6a9834a6bae32c6feb1373b2a6f4a1791271391741e82d7f764451c9cf49b48cbe9718943fda7602f1d5258cb725088220fed9a2a100d0b59f777324fb954a4de99ccf1b4a7139b111e899f253b1eb9b19388fd7e8bf83847c81f12cc611fa39731f4034ef072c0eb829dec1436a1afbe38bbe00f805c9c683508cd5a4564c99aef09b042bb9c2ade7957db57302c34f9768d21a7da045346138411a7378df3027fe4a5e3e72c23e664aa629ead2c8a45f783869591d1aa8c7a43656638394781dd71470349f86d659ec5bdb572af419d772d43b307ce6e1a569d5667b2a6715080d30f4c3e1ad367ce0e182af0e2c4ce71b3bae0790293116600233ba3b469031d535d0a11437586b1a5f65f71ec27269ffb6c2bd5145c3dc4c50fd589f3bfe317ae77811b74cf9915c6f61fb10e01a9d1808a2364b3eabd4c8b5b373870b0a44e2221c1de7c7d46dae5c42831f9e6cfd097324cbc51eb02d4a31c1112a4f4cd54d27ec0f392363ffb7ad29b6e9f02d02d73f8cad88c437d7fa035877aea07760f941a4523ac5a13b5d53ec69831fecdb6d4d6aa9458024f3f262c06ad7a89bc1cbc1fb15df39b11b9716dabe7cdb85342653119bf490336495c031ff25dce8fcf3de88c388db2e2ad35889ed182f9f7ca230c36c986963091b43115f65a2fda3c2909fbbada6a063ab8d6ab55b048df86b03059fc1e86aad143977692346db7c89e9f63f31ac85d1054924bf527c6426f5eb07fc6b7295a1f502d1f11877f96ce760570315d86f69d46a26c9fead52347192ea4ac4eeda0eea09c0149a2c950999bc217300096f9038951a47226f918d578c9a3a571a36626a739c1938fb080531af2e07f7340ac3a1fdd7b6b2a461bd0f6568d53db89aa750817d726a76afc41a6b7e66248ab50dfd86bb7e8030c0753a9ce3a423f06518af814f81b4d10988ab8897dbe2f6910d8ce5b5715673c1d451a2aaba9964b5320dc3dcecb9b54ea5755a4218c802485d4256039c1920c073bbf4d78d8c4e5e7eb7a9fddf3ab2dd8f17a75b7c2f4551f986d0b71322b53a6676dc0d3f01e208d9a4c601e3958b2c8b43ca427862004fb4543d234a31c8a553b5f242145ada732a085bada753cb993c3a6620a78341cb81fcd15afce6314f6b412390d4eaf67dd93f3be6513014b55f656656cbf7fa6bbaef6cb9ce40e713b14447c4b19c321fcf926b4f568db3a167c3282eae72b08651c2cf6abbdcab6508bbf36c7f4dba1156149f5677f1b0d5dba488761f213649f617b27c8d528414c8ccbca2c9a4cf5e7ec2b0fa428a8b75a39856b9ca6bf85d1374f2056e2021ce12fbcf535cfa9224dc3e4ef6dfc1a2480ffb3eb2e4ddfc646de0367ac6dce6b826e40108cbdcffd942609bceb13c9181b9b55f4711532d8abcd2a31381ff268d4adc8250a1fd5439435b473a8ebcbe76062871f2ed78b2fea0ef7e847ebe1bc053de546536089564e574853d48271ac599323eb5caf0880547829149c5d7f3473c6cfed3b811e64be6c50d30bf9ee3d411fce0de3e7a8a592967a9f14156bd0c21636b0517b461a87ff367d6dd141b649d9a3b87f65e22042519b72ba2d2f2d99753cb24992108517c5393c18333d5184c6913f78158bd24e6c13b68542444e5466e8fd23b0efb453400d7c617b9e88ead85ed30a3d3145f9713ddf81cb21b18cc30329110e5a25bc786110b3d69282600c12ad74a910456c5d91604a883226058756313ef9c78a4b5ee5da9e43d8baa", 0x1000}, {&(0x7f0000002900)="682c55920dd6c91b1a4ee2fc07bb5598046b01b8463a3e2125c75208af39d3735e32978f61c52910b891017e92c8a8d22b8b522ee50b64cc6a3e330dc035ae216d2d3950f2a73c78215769e78e808e0acc42194e07bcf07f718378b4825fe3c87b02fe", 0x63}, {&(0x7f0000002980)="b77c215374d8494bee091fe0208363fdef698c87cd82494feba6e368170415fcbd17b207a5ba6f198fdd50e1d0d24c0c81c65f7f6e6c2e14fe7372a7dbed894e4dae90a7b482415970f9e7e177d5976321a78c9969d9a44aacc55aca3579b634a0baa507fecd9ad3f5499fcdd5f3e4f203633386cf5483dbf45ee004c16bf41d96f1cce7e8cf31e2f42da92405a25b6b642f8df65959fe04e1ec833426e66ebb676beafc685153768f342c0dfcb410cf87c35ea4d957a09f120e636f645eccba2c439045e8211aab0826d058c5bb6ba014", 0xd1}, {&(0x7f0000002a80)="344a8d8d065bb70888b69bc541de924724eb34a537b6ed4a2d139352430a2a5de8eaa043e0d51b1f70a40ada5f030171aa06ff5fe13469785737a63a18f20bdd11ebde72bce0f798921e23527c74e74ba38ed528a451ddebfd7ce98a82fb60d9216b54a15845a74069d519cf9dca8c3672b5a89b12d12b838e26", 0x7a}], 0x8, &(0x7f0000002b80)=[{0x48, 0x116, 0x0, "626cd1fffe0d13e9e25776fb08b5b2dc0f2bdef9a99c7697ba22626a340f7c3ffdf0d919fda92f060678a9ebd6a619f8020c12e747b158"}], 0x48}, 0x48044) 899.030327ms ago: executing program 1 (id=12665): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000180)={0x7a2a, 0x9, 0x5a}, 0x8) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000640)="0c4a522d12", 0x5}], 0x1, 0x0, 0x0, 0x2804c044}, 0x0) shutdown(r0, 0x1) getpeername(r0, 0x0, &(0x7f00000002c0)) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x5, &(0x7f0000000240)=@framed={{0x18, 0x2, 0x0, 0x0, 0x7}, [@call={0x85, 0x0, 0x0, 0x87}, @call={0x85, 0x0, 0x0, 0x5}]}, &(0x7f0000000040)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xe, 0x0, &(0x7f0000000280)="5767c331e895cd135c5b7feeffd9", 0x0, 0xba, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 876.988061ms ago: executing program 0 (id=12666): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x10, 0xa, &(0x7f00000009c0)=@framed={{0x18, 0x2}, [@tail_call={{0x18, 0x2, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x20}}, @call={0x85, 0x0, 0x0, 0x8}, @exit]}, &(0x7f0000000040)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0xa}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000380)={'pimreg\x00', 0x5005}) r3 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000200), 0x4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0x9c, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x44, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @local}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @CTA_TIMEOUT={0x8}]}, 0x9c}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="14000000020105"], 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) sendmsg$IPCTNL_MSG_CT_GET_DYING(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)={0x14, 0x6, 0x1, 0x301, 0x0, 0x0, {0xa, 0x0, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x2404c031}, 0x20000000) write$tun(r2, &(0x7f0000000140)={@val={0x0, 0xf7}, @val={0x0, 0x83, 0x8, 0xe057, 0x15, 0xd}, @ipv6=@icmpv6={0x6, 0x6, '\x00', 0x1ac, 0x3a, 0xff, @dev={0xfe, 0x80, '\x00', 0x12}, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x2, {0x5, 0x6, "5d35ee", 0x8, 0x3c, 0x1, @local, @private0, [@routing={0x29, 0xe, 0x1, 0x3, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private2, @remote, @ipv4={'\x00', '\xff\xff', @local}, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3e}}]}, @fragment={0x2c, 0x0, 0xfa, 0x1, 0x0, 0x9, 0x64}, @srh={0x88, 0xe, 0x4, 0x7, 0x3, 0x70, 0xf, [@dev={0xfe, 0x80, '\x00', 0x3f}, @loopback, @dev={0xfe, 0x80, '\x00', 0xe}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @remote, @private1={0xfc, 0x1, '\x00', 0x1}, @local]}], "9c205529d5520363bfc64f70e8582b23f30efe430e8ecbf5550c4bd7dd26a5c378ccba1cd579583487ce35f25dbccfb5e6789c0cc3cc6331054ddea92a4a391bb7080fcaa724aa167933633d1f47eda81fcef8bcc41b46336132e6608bc60473f5f97a7ee57baffb75f2205814a3c6f6bed36bb40fbeb7587b29cb9fc879b3e301da6126"}}}}}, 0x1e2) openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000001080)='devices.allow\x00', 0x2, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$AUTOFS_IOC_EXPIRE_MULTI(r6, 0x40049366, &(0x7f0000000340)=0x2) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002600)={{0x14}, [@NFT_MSG_DELOBJ={0x54, 0x14, 0xa, 0x3, 0x0, 0x0, {0x5, 0x0, 0x3}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x3}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0xa}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x2c}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}]}, @NFT_MSG_NEWSETELEM={0x2c, 0xc, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14, 0x10}}, 0xe4}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002ac0)={0xf, 0x8, &(0x7f00000027c0)=ANY=[@ANYBLOB="1800000094af0000000000000100000018120000", @ANYRES32, @ANYBLOB="000000000000000000000000000096408f4ec0295ea3de2a109e9500"/42], &(0x7f0000001100)='syzkaller\x00', 0x8000, 0x1000, &(0x7f00000015c0)=""/4096, 0x40f00, 0x3d, '\x00', 0x0, @cgroup_device=0x6, 0xffffffffffffffff, 0x8, &(0x7f0000002740)={0x7, 0x1}, 0x8, 0x10, &(0x7f0000002780)={0x0, 0x7, 0x1, 0x4d}, 0x10, 0x0, r0, 0x0, &(0x7f0000002a80)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0xe0000000}, 0x94) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000001140)=@assoc_value, &(0x7f00000025c0)=0x8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="6800000010000100"/20, @ANYRES32, @ANYBLOB="0000000000000000480012800e0001006970366772657461700000003400028008000100", @ANYRES32, @ANYBLOB="14000600fe800000000000000000000000000015140007"], 0x68}}, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), 0xffffffffffffffff) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$bt_hci(r8, 0x84, 0x1f, &(0x7f0000000080)=""/4057, &(0x7f0000001180)=0xfd9) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, &(0x7f0000000100)={0x4, 0xd7, ',u.', 0x9e, 0x6}) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r9, &(0x7f0000000800)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000007c0)={&(0x7f00000011c0)={0x3dc, r10, 0x300, 0x70bd2d, 0x25dfdbfd, {}, [@TIPC_NLA_MEDIA={0x7c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x90}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_NODE={0x1ac, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x41, 0x4, {'gcm(aes)\x00', 0x19, "998d7a55873aec8320f988006f0b2f000013acf54b4dd5ee00"}}, @TIPC_NLA_NODE_KEY={0x4a, 0x4, {'gcm(aes)\x00', 0x22, "71b1e20802059beb538ba1a2835dbb49531b25acbf41b6496f897db435df1a015178"}}, @TIPC_NLA_NODE_ID={0x100, 0x3, "4a52469f1ffb189e66bc98170b792e6bafb707f1bd9815a355a4a58862da7d09cad6ac0fffbf7508541db7323babcc310bddd941d083dbc8663621ed8aa21c6cff4aea9946268c7091d924594bf4e5392e70b69b13e3b7ec8007fd4d23d488f260b7f3ce82c5d0bbdd44f59d17d5f916936ac000c361b7c23dce954a780940bd9898de2be32a5552f4d28a387d1339debbbe01cdaa94aa3916f632fe4341bcc8e245cd56bfe0ffa2356823cf0fe75109d474a7ae4bdcfc9a9c91c6b8e27ffc700d4110c46e02588e94969f33b0f99f3fea3ed1573fafa57234e4a529cc4d1b4dde7b7211fd05726b9ebabe7b7aeac6d90e20fd225c3fed599e638a04"}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xfa0}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_SOCK={0x10, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x11}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8}]}, @TIPC_NLA_LINK={0x110, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3a3}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff8000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x12}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}]}, @TIPC_NLA_NET={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x1}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xd}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1000}]}, @TIPC_NLA_NET={0x28, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0xfffffffffffffff7}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x80000000}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}]}]}, 0x3dc}, 0x1, 0x0, 0x0, 0x20000000}, 0x4009000) 805.941327ms ago: executing program 4 (id=12667): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv4_newrule={0x1c, 0x20, 0x301, 0x0, 0x0, {0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x9}}, 0x1c}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000021000100"], 0x28}}, 0x0) (fail_nth: 5) 405.689576ms ago: executing program 4 (id=12668): openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r0 = socket(0xa, 0x3, 0xff) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='devices.list\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000500)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000001900)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYBLOB="010028"], 0x44}}, 0x30004004) sendmsg$key(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=ANY=[@ANYBLOB="02"], 0x70}, 0x19}, 0x20040814) r3 = socket$kcm(0x11, 0x2, 0x300) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) recvmsg$unix(r4, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r3, 0x107, 0x12, &(0x7f00000008c0)=r5, 0x4) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x20, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) r7 = socket(0x22, 0x800, 0x6) openat$cgroup(0xffffffffffffffff, &(0x7f0000000280)='syz1\x00', 0x200002, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r7, 0x89f2, &(0x7f0000000380)={'ip6_vti0\x00', &(0x7f0000000300)={'ip6tnl0\x00', 0x0, 0x0, 0xc, 0x7a, 0x7a4e2747, 0x41, @mcast1, @empty, 0x700, 0x7, 0xbc, 0x1}}) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@map=r1, 0x3a, 0x0, 0x2, &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f0000000140)=[0x0, 0x0], &(0x7f0000000480), &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000500)={r6, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x4, 0x600}}, 0x20) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0x2, @loopback, 0x6}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000040)="5e546507da932c3e8c628a600b17cbe584d2f93ce23f60e91af3fbcf0e16db6e759d420151c6c575", 0x77}], 0x1}}], 0x1, 0x4046040) 352.146907ms ago: executing program 2 (id=12669): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x50) mmap(&(0x7f0000004000/0x3000)=nil, 0x3000, 0x300000b, 0x11, r0, 0x0) mmap(&(0x7f00008b3000/0x1000)=nil, 0x1000, 0x0, 0x3032, r0, 0x0) (async) mmap(&(0x7f0000196000/0x1000)=nil, 0x1000, 0x0, 0x840000000000a132, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.empty_time\x00', 0x275a, 0x0) (async, rerun: 64) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) (rerun: 64) mmap(&(0x7f0000215000/0x1000)=nil, 0x1000, 0x0, 0x6011, r2, 0x0) (async, rerun: 64) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0xd1383000) (rerun: 64) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x3, 0x28011, r3, 0x0) (async) mmap(&(0x7f0000867000/0x2000)=nil, 0x2000, 0x0, 0x11, r3, 0x1000) (async) mmap(&(0x7f00005d3000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0xfffff000) mmap(&(0x7f00004a3000/0x1000)=nil, 0x1000, 0x0, 0x13, r1, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0x6, 0x4, 0x8, 0xb}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000002e00)={0x0, 0xfffffffffffffffd, &(0x7f0000002c40), &(0x7f0000002d40), 0x5, r4}, 0x38) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) r5 = socket$netlink(0x10, 0x3, 0x15) writev(r5, &(0x7f0000000100)=[{&(0x7f0000000000)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) (async) close(0x4) 197.01604ms ago: executing program 4 (id=12670): socket$key(0xf, 0x3, 0x2) r0 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x4000000) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000054c0)=ANY=[@ANYBLOB="b800000019000100060000000000000000000000000000000020000000000000fe8000000000000000020000000000bb000000000000000002"], 0xb8}}, 0x0) 186.730957ms ago: executing program 1 (id=12671): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c000000f702010100000000000000000500ab930800044000005932280002800600034000010000060003400005000004000180080001000a010100080002"], 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x4040000) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="a013000040000701fcffffff00000100017c0000040042800c00018006000600801c00007c13028078131480731306800c00"], 0x13a0}, 0x1, 0x0, 0x0, 0x20000044}, 0xc000) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) ioctl$FICLONERANGE(r3, 0x4020940d, &(0x7f0000000000)={{r1}, 0x2a, 0x80000007ff, 0x2}) r4 = accept$inet6(r1, &(0x7f0000000400)={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @dev}}, &(0x7f0000000080)=0xfffffffffffffea7) sendmsg(r4, &(0x7f0000000380)={&(0x7f0000000200)=@alg={0x26, 'aead\x00', 0x0, 0x0, 'essiv(aegis256-aesni,sha384-generic)\x00'}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000280)="ba1ccf614a10bea901a12b5e0d84dcb26fab0a3681514291e53c198b4a8965fa2525ee7a5d9f", 0x26}, {&(0x7f00000002c0)="9b2f03333477", 0x6}], 0x2}, 0x4004894) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}, 0x1, 0x0, 0x0, 0x4}, 0x200400c5) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="b800000000010104000000000000000002000000240001801400018008000100e000000108000200e00000010c0002800500010000000000080008400000ff1608001540000000000800048004000280140005800f0001006e6574"], 0xb8}, 0x1, 0x0, 0x0, 0x8014}, 0x40c0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000180)) 89.692977ms ago: executing program 1 (id=12672): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000040)=0x1c65a, 0x4) readv(r0, &(0x7f0000000400)=[{&(0x7f0000000480)=""/73, 0x49}], 0x1) 9.142671ms ago: executing program 4 (id=12673): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f00000001c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x56) listen(r0, 0x0) connect$unix(r0, &(0x7f0000000140)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r1 = socket$pppoe(0x18, 0x1, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000000140)={{r1}, 0x0, 0x2, @unused=[0x6, 0x9, 0x7], @name="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"}) connect$pppoe(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0x0, {0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 'ip6gre0\x00'}}, 0x1e) r2 = socket$pppoe(0x18, 0x1, 0x0) r3 = socket(0x2b, 0x1, 0x1) setsockopt$inet_opts(r3, 0x0, 0x480, 0x0, 0x0) sendmsg$IPSET_CMD_DESTROY(r3, &(0x7f0000001180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001140)={&(0x7f00000000c0)={0x30, 0x3, 0x6, 0x801, 0x0, 0x0, {0xa, 0x0, 0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x400a001) connect$pppoe(r2, &(0x7f0000000080)={0x18, 0x0, {0x4, @empty, 'ip6_vti0\x00'}}, 0x1e) connect$pppoe(r1, &(0x7f0000000100)={0x18, 0x0, {0x4, @multicast, 'lo\x00'}}, 0x1e) r4 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) r5 = socket(0x1d, 0x2, 0x6) setsockopt$ALG_SET_AEAD_AUTHSIZE(r5, 0x6a, 0x2, 0x20000002, 0x100000002) writev(r4, &(0x7f0000001580)=[{&(0x7f0000000340)='0_', 0x2}], 0x1) close(0xffffffffffffffff) 216.558ТЕs ago: executing program 0 (id=12674): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0b00000007000000010001004900000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000003b80)={0x10000001}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x33, &(0x7f000002eff0)={0x85c, &(0x7f0000000000)=[{}]}, 0x10) ioctl$OCFS2_IOC_GROUP_ADD(r2, 0x40186f02, &(0x7f0000000200)={0x8001, 0x9, 0x7ff, 0x3ff}) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r5}, 0x4) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x16, 0x18, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000100000000000000010000180100002020702500000000002020207b1af8ff00000000bfa10000000000000701000078ffffffb702000008000000b7030000000800008500000050000000b7080000000000007b8af8ff00000000b7080000001000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r6, 0x0, 0x10, 0x70, &(0x7f00000006c0)="0000000005000000", &(0x7f0000000700)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x10, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x2}, 0x8, 0x10, &(0x7f00000000c0)={0x0, 0x5, 0xfffffffd}, 0x10, 0x0, r1}, 0x94) 0s ago: executing program 2 (id=12675): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003b000000", @ANYRES32=r3, @ANYBLOB="1f003300d000000008021100000108021100000050505050505000"], 0x3c}}, 0x10) kernel console output (not intermixed with test programs): isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 1221.984391][T16572] netlink: 'syz.2.11319': attribute type 13 has an invalid length. [ 1222.011760][T16572] netlink: 'syz.2.11319': attribute type 17 has an invalid length. [ 1222.108388][T16571] bridge0: port 2(bridge_slave_1) entered disabled state [ 1222.346924][T16571] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1222.379721][T16571] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1222.745362][T16988] net_ratelimit: 16 callbacks suppressed [ 1222.745384][T16988] bond2: (slave bridge1): failed to get link speed/duplex [ 1222.871534][T16572] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1222.882031][T16572] 8021q: adding VLAN 0 to HW filter on device team0 [ 1222.890768][T16572] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1222.909718][T16595] netlink: 'syz.0.11323': attribute type 9 has an invalid length. [ 1222.932099][ T5942] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1222.958170][ T5942] netdevsim netdevsim2 netdevsim0: unset [1, 1] type 2 family 0 port 256 - 0 [ 1222.972618][ T5942] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1222.983789][ T5942] netdevsim netdevsim2 netdevsim1: unset [1, 1] type 2 family 0 port 256 - 0 [ 1222.999653][T16988] bond2: (slave bridge1): failed to get link speed/duplex [ 1223.073215][ T5942] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1223.095415][ T5942] netdevsim netdevsim2 netdevsim2: unset [1, 1] type 2 family 0 port 256 - 0 [ 1223.110963][ T5942] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1223.121223][ T5942] netdevsim netdevsim2 netdevsim3: unset [1, 1] type 2 family 0 port 256 - 0 [ 1223.155362][ T5942] bond2: (slave bridge1): failed to get link speed/duplex [ 1223.213661][T16611] syzkaller0: entered promiscuous mode [ 1223.220005][T16611] syzkaller0: entered allmulticast mode [ 1223.292279][T16616] gre0 speed is unknown, defaulting to 1000 [ 1223.295984][ T35] bond2: (slave bridge1): failed to get link speed/duplex [ 1223.387902][T16621] __nla_validate_parse: 21 callbacks suppressed [ 1223.387919][T16621] netlink: 12 bytes leftover after parsing attributes in process `syz.5.11332'. [ 1223.415511][T16988] bond2: (slave bridge1): failed to get link speed/duplex [ 1223.435666][T16620] netlink: 12 bytes leftover after parsing attributes in process `syz.5.11332'. [ 1223.508252][T16623] netlink: 16 bytes leftover after parsing attributes in process `syz.5.11333'. [ 1223.518392][T16623] netlink: 16 bytes leftover after parsing attributes in process `syz.5.11333'. [ 1223.615746][T16628] netlink: 'syz.2.11334': attribute type 22 has an invalid length. [ 1223.624643][T16628] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11334'. [ 1223.647303][ T5942] bond2: (slave bridge1): failed to get link speed/duplex [ 1223.694275][T16631] netlink: 16 bytes leftover after parsing attributes in process `syz.2.11335'. [ 1223.775343][T10990] bond2: (slave bridge1): failed to get link speed/duplex [ 1223.897506][ T5942] bond2: (slave bridge1): failed to get link speed/duplex [ 1223.997424][T16988] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1224.015858][T16988] bond2: (slave bridge1): failed to get link speed/duplex [ 1224.636469][T16988] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1225.796440][T16588] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1226.032343][T16651] netlink: 20 bytes leftover after parsing attributes in process `syz.0.11340'. [ 1226.227094][T16661] netlink: 112 bytes leftover after parsing attributes in process `syz.4.11344'. [ 1226.414133][T16657] syzkaller0: entered promiscuous mode [ 1226.420171][T16657] syzkaller0: entered allmulticast mode [ 1226.457235][T16655] gre0 speed is unknown, defaulting to 1000 [ 1226.669356][T16673] netlink: 'syz.5.11349': attribute type 3 has an invalid length. [ 1226.683070][T16673] sctp: [Deprecated]: syz.5.11349 (pid 16673) Use of int in max_burst socket option deprecated. [ 1226.683070][T16673] Use struct sctp_assoc_value instead [ 1226.714832][T16673] dvmrp1: entered allmulticast mode [ 1226.724079][T16673] dvmrp1: left allmulticast mode [ 1226.769422][T16675] netlink: 48 bytes leftover after parsing attributes in process `syz.0.11350'. [ 1226.806543][T16677] netlink: 8 bytes leftover after parsing attributes in process `syz.2.11351'. [ 1226.830702][T16678] x_tables: duplicate underflow at hook 2 [ 1226.940980][T16680] tipc: Started in network mode [ 1226.949553][T16680] tipc: Node identity ca33f989b58e, cluster identity 4711 [ 1226.964623][T16680] tipc: Enabled bearer , priority 0 [ 1226.986731][T16685] netlink: 'syz.2.11354': attribute type 83 has an invalid length. [ 1227.007703][T16690] syzkaller0: entered promiscuous mode [ 1227.013341][T16690] syzkaller0: entered allmulticast mode [ 1227.019828][T16692] Cannot find add_set index 2 as target [ 1227.054779][T16692] netlink: 'syz.0.11356': attribute type 1 has an invalid length. [ 1227.063374][T16680] tipc: Resetting bearer [ 1227.074108][T16679] tipc: Resetting bearer [ 1227.099306][T16679] tipc: Disabling bearer [ 1227.166334][T16695] bridge0: port 2(bridge_slave_1) entered disabled state [ 1227.174032][T16695] bridge0: port 1(bridge_slave_0) entered disabled state [ 1227.268399][T16695] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1227.280244][T16695] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1227.384652][ T5942] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1227.407995][ T5942] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1227.430449][ T5942] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1227.474989][ T5942] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1227.523955][T16702] gre0 speed is unknown, defaulting to 1000 [ 1227.714712][T16716] syzkaller0: entered promiscuous mode [ 1227.721757][T16716] syzkaller0: entered allmulticast mode [ 1227.795312][ T5942] net_ratelimit: 25 callbacks suppressed [ 1227.795335][ T5942] bond2: (slave bridge1): failed to get link speed/duplex [ 1227.916460][ T35] bond2: (slave bridge1): failed to get link speed/duplex [ 1228.035853][ T5942] bond2: (slave bridge1): failed to get link speed/duplex [ 1228.196039][T16988] bond2: (slave bridge1): failed to get link speed/duplex [ 1228.345568][ T12] bond2: (slave bridge1): failed to get link speed/duplex [ 1228.465565][ T12] bond2: (slave bridge1): failed to get link speed/duplex [ 1228.490094][T16751] gre0 speed is unknown, defaulting to 1000 [ 1228.586383][ T35] bond2: (slave bridge1): failed to get link speed/duplex [ 1228.750487][T16764] syzkaller0: entered promiscuous mode [ 1228.771217][T16764] syzkaller0: entered allmulticast mode [ 1228.874944][T16771] __nla_validate_parse: 9 callbacks suppressed [ 1228.874965][T16771] netlink: 20 bytes leftover after parsing attributes in process `syz.5.11375'. [ 1228.905451][ T35] bond2: (slave bridge1): failed to get link speed/duplex [ 1228.922956][T16769] netlink: 112 bytes leftover after parsing attributes in process `syz.0.11374'. [ 1228.939840][T16771] netlink: 148 bytes leftover after parsing attributes in process `syz.5.11375'. [ 1228.955413][T16771] netlink: 116 bytes leftover after parsing attributes in process `syz.5.11375'. [ 1228.970169][T16771] netlink: 24 bytes leftover after parsing attributes in process `syz.5.11375'. [ 1229.031771][T16786] netlink: 156 bytes leftover after parsing attributes in process `syz.1.11377'. [ 1229.049372][T16780] bond1: entered promiscuous mode [ 1229.074886][T16780] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1229.126348][T16988] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1229.146256][T10994] bond2: (slave bridge1): failed to get link speed/duplex [ 1229.180242][T16773] gre0 speed is unknown, defaulting to 1000 [ 1229.292560][T16793] netlink: 12 bytes leftover after parsing attributes in process `syz.5.11379'. [ 1229.365399][ T5942] bond2: (slave bridge1): failed to get link speed/duplex [ 1229.644595][T16811] netlink: 8 bytes leftover after parsing attributes in process `syz.5.11384'. [ 1229.657584][T16790] gre0 speed is unknown, defaulting to 1000 [ 1229.727782][T16814] netdevsim netdevsim5 netdevsim0: IPsec offload requires 128 bit authentication [ 1230.395416][T16988] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1230.598866][T16830] gre0 speed is unknown, defaulting to 1000 [ 1230.648881][T16833] syzkaller0: entered promiscuous mode [ 1230.658389][T16833] syzkaller0: entered allmulticast mode [ 1231.117213][T16839] syzkaller1: entered promiscuous mode [ 1231.157529][T16839] syzkaller1: entered allmulticast mode [ 1231.306192][T16839] bridge_slave_1: Caught tx_queue_len zero misconfig [ 1231.373150][T16861] netlink: 36 bytes leftover after parsing attributes in process `syz.2.11397'. [ 1231.486036][T16863] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11397'. [ 1231.536900][T16870] gre0 speed is unknown, defaulting to 1000 [ 1231.814638][T16875] syzkaller0: entered promiscuous mode [ 1231.820402][T16875] syzkaller0: entered allmulticast mode [ 1232.135829][T16894] netlink: 'syz.0.11406': attribute type 12 has an invalid length. [ 1232.154079][T16863] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1232.173841][T16894] netlink: 'syz.0.11406': attribute type 29 has an invalid length. [ 1232.285564][T16897] virt_wifi0: left promiscuous mode [ 1232.439560][ T9218] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1232.470728][ T9218] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1232.495925][ T9218] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1232.519841][ T9218] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1232.846681][T10990] net_ratelimit: 14 callbacks suppressed [ 1232.846702][T10990] bond2: (slave bridge1): failed to get link speed/duplex [ 1233.232087][T16938] syzkaller0: entered promiscuous mode [ 1233.238818][T16938] syzkaller0: entered allmulticast mode [ 1234.885977][ T35] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1235.155572][ T35] bond2: (slave bridge1): failed to get link speed/duplex [ 1235.201087][T16946] gre0 speed is unknown, defaulting to 1000 [ 1235.265471][T10990] bond2: (slave bridge1): failed to get link speed/duplex [ 1235.437971][T16963] __nla_validate_parse: 9 callbacks suppressed [ 1235.437993][T16963] netlink: 16 bytes leftover after parsing attributes in process `syz.4.11423'. [ 1235.459851][T16970] netlink: 28 bytes leftover after parsing attributes in process `syz.2.11424'. [ 1235.494745][ T5942] bond2: (slave bridge1): failed to get link speed/duplex [ 1235.605761][ T5942] bond2: (slave bridge1): failed to get link speed/duplex [ 1235.721088][T16983] ip6tnl0: Caught tx_queue_len zero misconfig [ 1235.733994][T16983] netlink: 280 bytes leftover after parsing attributes in process `syz.1.11428'. [ 1235.750296][T16983] netlink: 4 bytes leftover after parsing attributes in process `syz.1.11428'. [ 1235.781555][T16984] wg1: entered promiscuous mode [ 1235.787107][T16984] wg1: entered allmulticast mode [ 1235.835870][ T35] bond2: (slave bridge1): failed to get link speed/duplex [ 1235.946075][ T5942] bond2: (slave bridge1): failed to get link speed/duplex [ 1236.048426][T16999] syzkaller0: entered promiscuous mode [ 1236.054147][T16999] syzkaller0: entered allmulticast mode [ 1236.095305][T16988] bond2: (slave bridge1): failed to get link speed/duplex [ 1236.165401][T16988] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1236.319628][ T12] bond2: (slave bridge1): failed to get link speed/duplex [ 1236.445265][ T12] bond2: (slave bridge1): failed to get link speed/duplex [ 1236.628653][T17014] syzkaller0: entered promiscuous mode [ 1236.634221][T17014] syzkaller0: entered allmulticast mode [ 1236.756818][T17025] FAULT_INJECTION: forcing a failure. [ 1236.756818][T17025] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1236.776432][T17025] CPU: 1 UID: 0 PID: 17025 Comm: syz.4.11439 Not tainted syzkaller #0 PREEMPT(full) [ 1236.776461][T17025] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1236.776474][T17025] Call Trace: [ 1236.776482][T17025] [ 1236.776490][T17025] dump_stack_lvl+0xe8/0x150 [ 1236.776522][T17025] should_fail_ex+0x412/0x560 [ 1236.776554][T17025] _copy_from_user+0x2d/0xb0 [ 1236.776576][T17025] do_sock_getsockopt+0x200/0x7e0 [ 1236.776604][T17025] ? __pfx_vfs_write+0x10/0x10 [ 1236.776626][T17025] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 1236.776653][T17025] ? kmem_cache_free+0x187/0x630 [ 1236.776673][T17025] ? fd_install+0x94/0x3d0 [ 1236.776696][T17025] ? do_sys_openat2+0x14c/0x200 [ 1236.776736][T17025] ? ksys_write+0x1fc/0x270 [ 1236.776763][T17025] __x64_sys_getsockopt+0x1a4/0x240 [ 1236.776797][T17025] do_syscall_64+0x14d/0xf80 [ 1236.776817][T17025] ? trace_irq_disable+0x3b/0x150 [ 1236.776835][T17025] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1236.776862][T17025] ? clear_bhb_loop+0x40/0x90 [ 1236.776885][T17025] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1236.776904][T17025] RIP: 0033:0x7fb26979c819 [ 1236.776922][T17025] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1236.776938][T17025] RSP: 002b:00007fb26a68e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 1236.776959][T17025] RAX: ffffffffffffffda RBX: 00007fb269a15fa0 RCX: 00007fb26979c819 [ 1236.776973][T17025] RDX: 000000000000004a RSI: 0000000000000001 RDI: 0000000000000003 [ 1236.776985][T17025] RBP: 00007fb26a68e090 R08: 0000200000000000 R09: 0000000000000000 [ 1236.776998][T17025] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1236.777010][T17025] R13: 00007fb269a16038 R14: 00007fb269a15fa0 R15: 00007ffe99b54cd8 [ 1236.777041][T17025] [ 1237.227526][T17047] netlink: 28 bytes leftover after parsing attributes in process `syz.2.11444'. [ 1237.237031][T17047] netlink: 'syz.2.11444': attribute type 5 has an invalid length. [ 1237.251308][T17053] gre0 speed is unknown, defaulting to 1000 [ 1237.708200][T17078] syzkaller0: entered promiscuous mode [ 1237.713760][T17078] syzkaller0: entered allmulticast mode [ 1237.803471][T17088] FAULT_INJECTION: forcing a failure. [ 1237.803471][T17088] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1237.848756][T17085] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11454'. [ 1237.862040][ T9218] net_ratelimit: 6 callbacks suppressed [ 1237.862061][ T9218] bond2: (slave bridge1): failed to get link speed/duplex [ 1237.896342][T17088] CPU: 0 UID: 0 PID: 17088 Comm: syz.2.11455 Not tainted syzkaller #0 PREEMPT(full) [ 1237.896371][T17088] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1237.896382][T17088] Call Trace: [ 1237.896389][T17088] [ 1237.896398][T17088] dump_stack_lvl+0xe8/0x150 [ 1237.896429][T17088] should_fail_ex+0x412/0x560 [ 1237.896461][T17088] _copy_from_user+0x2d/0xb0 [ 1237.896484][T17088] sk_getsockopt+0x1d4/0x2840 [ 1237.896518][T17088] ? __pfx_sk_getsockopt+0x10/0x10 [ 1237.896558][T17088] ? aa_sk_perm+0x6d5/0x900 [ 1237.896582][T17088] ? get_pid_task+0x20/0x1f0 [ 1237.896622][T17088] do_sock_getsockopt+0x2bd/0x7e0 [ 1237.896650][T17088] ? __pfx_vfs_write+0x10/0x10 [ 1237.896671][T17088] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 1237.896697][T17088] ? kmem_cache_free+0x187/0x630 [ 1237.896716][T17088] ? fd_install+0x94/0x3d0 [ 1237.896739][T17088] ? do_sys_openat2+0x14c/0x200 [ 1237.896776][T17088] ? ksys_write+0x1fc/0x270 [ 1237.896800][T17088] __x64_sys_getsockopt+0x1a4/0x240 [ 1237.896830][T17088] do_syscall_64+0x14d/0xf80 [ 1237.896849][T17088] ? trace_irq_disable+0x3b/0x150 [ 1237.896865][T17088] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1237.896883][T17088] ? clear_bhb_loop+0x40/0x90 [ 1237.896905][T17088] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1237.896924][T17088] RIP: 0033:0x7fe38699c819 [ 1237.896943][T17088] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1237.896958][T17088] RSP: 002b:00007fe384bf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 1237.896978][T17088] RAX: ffffffffffffffda RBX: 00007fe386c15fa0 RCX: 00007fe38699c819 [ 1237.896992][T17088] RDX: 000000000000004a RSI: 0000000000000001 RDI: 0000000000000003 [ 1237.897004][T17088] RBP: 00007fe384bf6090 R08: 0000200000000000 R09: 0000000000000000 [ 1237.897017][T17088] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1237.897037][T17088] R13: 00007fe386c16038 R14: 00007fe386c15fa0 R15: 00007ffef50a9988 [ 1237.897068][T17088] [ 1238.137194][T17096] netlink: 68 bytes leftover after parsing attributes in process `syz.1.11457'. [ 1238.194362][T17099] netlink: 28 bytes leftover after parsing attributes in process `syz.5.11456'. [ 1238.221060][T17099] netlink: 36 bytes leftover after parsing attributes in process `syz.5.11456'. [ 1238.237047][T10994] bond2: (slave bridge1): failed to get link speed/duplex [ 1238.260067][T17102] netlink: 'syz.4.11459': attribute type 21 has an invalid length. [ 1238.272940][T17094] gre0 speed is unknown, defaulting to 1000 [ 1238.313614][T17102] netlink: 128 bytes leftover after parsing attributes in process `syz.4.11459'. [ 1238.322783][T17101] lo: entered allmulticast mode [ 1238.333219][T17106] lo: left allmulticast mode [ 1238.376411][T17102] netlink: 'syz.4.11459': attribute type 5 has an invalid length. [ 1238.395399][ T9218] bond2: (slave bridge1): failed to get link speed/duplex [ 1238.506297][T10990] bond2: (slave bridge1): failed to get link speed/duplex [ 1238.618377][T10994] bond2: (slave bridge1): failed to get link speed/duplex [ 1238.758326][ T1298] lec:lec_start_xmit: lec0:No lecd attached [ 1238.764457][ T1298] clip:clip_start_xmit: skb_dst(skb) == NULL [ 1238.793346][T17124] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0 [ 1238.845199][ T9218] bond2: (slave bridge1): failed to get link speed/duplex [ 1238.889886][T17130] netlink: 'syz.0.11462': attribute type 21 has an invalid length. [ 1238.957479][T17130] netlink: 'syz.0.11462': attribute type 1 has an invalid length. [ 1238.983261][T17109] gre0 speed is unknown, defaulting to 1000 [ 1239.605131][ T9218] bond2: (slave bridge1): failed to get link speed/duplex [ 1239.775607][ T9218] bond2: (slave bridge1): failed to get link speed/duplex [ 1239.893597][T17150] FAULT_INJECTION: forcing a failure. [ 1239.893597][T17150] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1239.907113][T16988] bond2: (slave bridge1): failed to get link speed/duplex [ 1239.933235][T17150] CPU: 0 UID: 0 PID: 17150 Comm: syz.4.11469 Not tainted syzkaller #0 PREEMPT(full) [ 1239.933264][T17150] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1239.933276][T17150] Call Trace: [ 1239.933283][T17150] [ 1239.933292][T17150] dump_stack_lvl+0xe8/0x150 [ 1239.933322][T17150] should_fail_ex+0x412/0x560 [ 1239.933354][T17150] _copy_to_user+0x31/0xb0 [ 1239.933377][T17150] simple_read_from_buffer+0xe1/0x170 [ 1239.933405][T17150] proc_fail_nth_read+0x1bb/0x230 [ 1239.933433][T17150] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1239.933461][T17150] ? rw_verify_area+0x2a6/0x4d0 [ 1239.933481][T17150] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1239.933508][T17150] vfs_read+0x20c/0xa70 [ 1239.933544][T17150] ? __pfx_vfs_read+0x10/0x10 [ 1239.933564][T17150] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 1239.933593][T17150] ? kmem_cache_free+0x187/0x630 [ 1239.933613][T17150] ? fd_install+0x94/0x3d0 [ 1239.933637][T17150] ? do_sys_openat2+0x14c/0x200 [ 1239.933677][T17150] ksys_read+0x150/0x270 [ 1239.933700][T17150] ? __pfx_ksys_read+0x10/0x10 [ 1239.933721][T17150] ? __x64_sys_getsockopt+0x1a4/0x240 [ 1239.933755][T17150] do_syscall_64+0x14d/0xf80 [ 1239.933776][T17150] ? trace_irq_disable+0x3b/0x150 [ 1239.933793][T17150] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1239.933814][T17150] ? clear_bhb_loop+0x40/0x90 [ 1239.933836][T17150] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1239.933856][T17150] RIP: 0033:0x7fb26975d04e [ 1239.933875][T17150] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1239.933890][T17150] RSP: 002b:00007fb26a68dfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1239.933912][T17150] RAX: ffffffffffffffda RBX: 00007fb26a68e6c0 RCX: 00007fb26975d04e [ 1239.933925][T17150] RDX: 000000000000000f RSI: 00007fb26a68e0a0 RDI: 0000000000000004 [ 1239.933937][T17150] RBP: 00007fb26a68e090 R08: 0000000000000000 R09: 0000000000000000 [ 1239.933950][T17150] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1239.933962][T17150] R13: 00007fb269a16038 R14: 00007fb269a15fa0 R15: 00007ffe99b54cd8 [ 1239.933993][T17150] [ 1240.305276][T16988] bond2: (slave bridge1): failed to get link speed/duplex [ 1240.313914][T17152] clip:clip_setentry: non-CLIP VCC [ 1240.419681][T17154] gre0 speed is unknown, defaulting to 1000 [ 1240.637659][T16988] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1240.704009][T17167] netlink: 'syz.2.11474': attribute type 1 has an invalid length. [ 1241.199787][T17201] __nla_validate_parse: 2 callbacks suppressed [ 1241.199809][T17201] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11481'. [ 1241.274622][T17201] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11481'. [ 1241.561473][T17201] netlink: 72 bytes leftover after parsing attributes in process `syz.4.11481'. [ 1241.918051][T16988] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1242.122869][T17255] netlink: 7064 bytes leftover after parsing attributes in process `syz.0.11491'. [ 1242.260093][T17265] netlink: 24 bytes leftover after parsing attributes in process `syz.1.11495'. [ 1242.279719][T17255] netlink: 'syz.0.11491': attribute type 1 has an invalid length. [ 1242.288216][T17255] netlink: 224 bytes leftover after parsing attributes in process `syz.0.11491'. [ 1242.304942][T17255] netlink: 4 bytes leftover after parsing attributes in process `syz.0.11491'. [ 1242.476749][T17276] netlink: 44 bytes leftover after parsing attributes in process `syz.1.11500'. [ 1242.545836][T17275] delete_channel: no stack [ 1242.689721][T17288] syzkaller0: entered promiscuous mode [ 1242.695677][T17288] syzkaller0: entered allmulticast mode [ 1242.940005][T17313] netlink: 84 bytes leftover after parsing attributes in process `syz.0.11510'. [ 1242.957221][ T5942] net_ratelimit: 19 callbacks suppressed [ 1242.957239][ T5942] bond2: (slave bridge1): failed to get link speed/duplex [ 1243.027380][T17318] netlink: 28 bytes leftover after parsing attributes in process `syz.1.11512'. [ 1243.111081][T17325] gre0 speed is unknown, defaulting to 1000 [ 1243.188356][ T5942] bond2: (slave bridge1): failed to get link speed/duplex [ 1243.325167][T16987] bond2: (slave bridge1): failed to get link speed/duplex [ 1243.436371][ T5942] bond2: (slave bridge1): failed to get link speed/duplex [ 1243.560918][ T5942] bond2: (slave bridge1): failed to get link speed/duplex [ 1243.706268][T16988] bond2: (slave bridge1): failed to get link speed/duplex [ 1243.815159][T17185] bond2: (slave bridge1): failed to get link speed/duplex [ 1243.838050][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5080 ms [ 1243.846180][ C1] lec:lec_tx_timeout: lec0 [ 1243.851379][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 1244.435606][T17358] bond8: entered promiscuous mode [ 1244.441091][T17358] bond8: entered allmulticast mode [ 1244.451916][T17361] netlink: 'syz.1.11524': attribute type 1 has an invalid length. [ 1244.684187][T17367] syzkaller0: entered promiscuous mode [ 1244.691022][T17367] syzkaller0: entered allmulticast mode [ 1244.802152][T10992] bond2: (slave bridge1): failed to get link speed/duplex [ 1244.814500][T17372] ip6t_rpfilter: unknown options [ 1244.915293][T10992] bond2: (slave bridge1): failed to get link speed/duplex [ 1244.976891][T17379] A link change request failed with some changes committed already. Interface sit3 may have been left with an inconsistent configuration, please check. [ 1245.073076][T17383] netlink: 'syz.1.11534': attribute type 11 has an invalid length. [ 1245.142813][T17384] netlink: 'syz.0.11533': attribute type 16 has an invalid length. [ 1245.175265][T17384] netlink: 'syz.0.11533': attribute type 17 has an invalid length. [ 1246.151550][T17390] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1246.344335][ T5828] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1246.361205][ T5828] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1246.371765][ T5828] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1246.380670][ T5828] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1246.393939][ T5828] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1246.402006][T10992] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1246.560682][T17423] gre0 speed is unknown, defaulting to 1000 [ 1246.620490][T17433] syzkaller0: entered promiscuous mode [ 1246.629675][T17433] syzkaller0: entered allmulticast mode [ 1246.685824][T17440] __nla_validate_parse: 4 callbacks suppressed [ 1246.685845][T17440] netlink: 16 bytes leftover after parsing attributes in process `syz.5.11552'. [ 1246.866109][T17449] netlink: 'syz.5.11556': attribute type 1 has an invalid length. [ 1246.885277][T17449] netlink: 4 bytes leftover after parsing attributes in process `syz.5.11556'. [ 1246.894286][T17449] netlink: 'syz.5.11556': attribute type 1 has an invalid length. [ 1246.933127][T17449] syzkaller1: entered promiscuous mode [ 1246.945577][T17449] syzkaller1: entered allmulticast mode [ 1247.037535][T10992] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1247.184744][T17423] chnl_net:caif_netlink_parms(): no params data found [ 1247.289955][T17423] bridge0: port 1(bridge_slave_0) entered blocking state [ 1247.297769][T17423] bridge0: port 1(bridge_slave_0) entered disabled state [ 1247.305432][T17423] bridge_slave_0: entered allmulticast mode [ 1247.313208][T17423] bridge_slave_0: entered promiscuous mode [ 1247.322202][T17423] bridge0: port 2(bridge_slave_1) entered blocking state [ 1247.330030][T17423] bridge0: port 2(bridge_slave_1) entered disabled state [ 1247.337491][T17423] bridge_slave_1: entered allmulticast mode [ 1247.345661][T17423] bridge_slave_1: entered promiscuous mode [ 1247.386350][T17423] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1247.399231][T17423] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1247.417378][T17433] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1247.479544][T17423] team0: Port device team_slave_0 added [ 1247.489883][T17423] team0: Port device team_slave_1 added [ 1247.602415][T17423] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1247.626551][T17423] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1247.654322][T17423] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1247.680652][T17423] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1247.688003][T17423] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1247.710417][T17474] netlink: 36 bytes leftover after parsing attributes in process `syz.5.11563'. [ 1247.719591][T17423] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1247.855539][T17423] hsr_slave_0: entered promiscuous mode [ 1247.877847][T17423] hsr_slave_1: entered promiscuous mode [ 1247.884765][T17480] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11566'. [ 1247.894240][T17480] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11566'. [ 1247.904325][T17423] debugfs: 'hsr0' already exists in 'hsr' [ 1247.910446][T17423] Cannot create hsr debugfs directory [ 1247.951047][T17480] geneve3: entered allmulticast mode [ 1247.968868][T10992] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1247.985387][T10992] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1248.151280][T17487] netlink: 192 bytes leftover after parsing attributes in process `syz.0.11568'. [ 1248.213399][T17497] netlink: 12 bytes leftover after parsing attributes in process `syz.5.11572'. [ 1248.225275][T17492] gre0 speed is unknown, defaulting to 1000 [ 1248.245334][ T12] net_ratelimit: 19 callbacks suppressed [ 1248.245354][ T12] bond2: (slave bridge1): failed to get link speed/duplex [ 1248.435280][ T12] bond2: (slave bridge1): failed to get link speed/duplex [ 1248.480313][ T5828] Bluetooth: hci4: command tx timeout [ 1248.577045][T17517] netlink: 36 bytes leftover after parsing attributes in process `syz.4.11578'. [ 1248.640908][T17515] openvswitch: netlink: Actions may not be safe on all matching packets [ 1248.865056][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 1248.873168][ C1] lec:lec_tx_timeout: lec0 [ 1248.880327][T17522] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1248.892708][T17522] 8021q: adding VLAN 0 to HW filter on device team0 [ 1248.914930][T17522] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1248.943295][T17513] xt_connbytes: Forcing CT accounting to be enabled [ 1249.116299][T17185] bond2: (slave bridge1): failed to get link speed/duplex [ 1249.209071][T17536] nbd: must specify a device to reconfigure [ 1249.241581][T10992] bond2: (slave bridge1): failed to get link speed/duplex [ 1249.337039][T17538] netlink: 4 bytes leftover after parsing attributes in process `syz.5.11584'. [ 1249.508025][ T12] bond2: (slave bridge1): failed to get link speed/duplex [ 1249.713576][T17423] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1249.754980][T17423] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1249.794273][T17423] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1249.828561][T17423] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1249.947129][ T12] bond2: (slave bridge1): failed to get link speed/duplex [ 1249.973184][T17574] netlink: 'syz.1.11592': attribute type 21 has an invalid length. [ 1249.991063][T17575] netlink: ct family unspecified [ 1250.005482][T17574] netlink: 156 bytes leftover after parsing attributes in process `syz.1.11592'. [ 1250.019644][T17575] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1250.169958][T17423] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1250.237519][T17423] 8021q: adding VLAN 0 to HW filter on device team0 [ 1250.262201][T17185] bridge0: port 1(bridge_slave_0) entered blocking state [ 1250.269380][T17185] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1250.323691][T17185] bridge0: port 2(bridge_slave_1) entered blocking state [ 1250.330871][T17185] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1250.534631][T17601] bond0: entered promiscuous mode [ 1250.539827][T17601] bond_slave_0: entered promiscuous mode [ 1250.545989][T17601] bond_slave_1: entered promiscuous mode [ 1250.557299][ T5828] Bluetooth: hci4: command tx timeout [ 1250.578072][T17606] netlink: 'syz.4.11604': attribute type 5 has an invalid length. [ 1250.588010][T17601] bond0: left promiscuous mode [ 1250.593894][T17601] bond_slave_0: left promiscuous mode [ 1250.607089][T17601] bond_slave_1: left promiscuous mode [ 1250.828308][T17423] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1250.937077][T17423] veth0_vlan: entered promiscuous mode [ 1250.964529][T17423] veth1_vlan: entered promiscuous mode [ 1251.017102][T17423] veth0_macvtap: entered promiscuous mode [ 1251.030747][T17423] veth1_macvtap: entered promiscuous mode [ 1251.079273][T17423] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1251.098332][T17423] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1251.123024][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1251.141979][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1251.173762][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1251.209174][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1251.230951][T17639] netlink: 'syz.0.11613': attribute type 2 has an invalid length. [ 1251.261314][T17639] !Мо: entered promiscuous mode [ 1251.503761][T16981] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1251.511029][T17652] syzkaller0: entered promiscuous mode [ 1251.519561][T17652] syzkaller0: entered allmulticast mode [ 1251.526575][T16981] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1251.532961][T17652] FAULT_INJECTION: forcing a failure. [ 1251.532961][T17652] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1251.582686][T17652] CPU: 0 UID: 0 PID: 17652 Comm: syz.1.11614 Not tainted syzkaller #0 PREEMPT(full) [ 1251.582720][T17652] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1251.582732][T17652] Call Trace: [ 1251.582740][T17652] [ 1251.582749][T17652] dump_stack_lvl+0xe8/0x150 [ 1251.582779][T17652] should_fail_ex+0x412/0x560 [ 1251.582812][T17652] _copy_from_user+0x2d/0xb0 [ 1251.582835][T17652] ___sys_sendmsg+0x1c6/0x360 [ 1251.582868][T17652] ? __pfx____sys_sendmsg+0x10/0x10 [ 1251.582926][T17652] ? __fget_files+0x2a/0x420 [ 1251.582943][T17652] ? __fget_files+0x3a0/0x420 [ 1251.582970][T17652] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1251.582998][T17652] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1251.583032][T17652] ? __pfx_ksys_write+0x10/0x10 [ 1251.583065][T17652] do_syscall_64+0x14d/0xf80 [ 1251.583085][T17652] ? trace_irq_disable+0x3b/0x150 [ 1251.583102][T17652] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1251.583121][T17652] ? clear_bhb_loop+0x40/0x90 [ 1251.583143][T17652] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1251.583162][T17652] RIP: 0033:0x7f18d699c819 [ 1251.583181][T17652] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1251.583197][T17652] RSP: 002b:00007f18d77f0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1251.583218][T17652] RAX: ffffffffffffffda RBX: 00007f18d6c15fa0 RCX: 00007f18d699c819 [ 1251.583232][T17652] RDX: 0000000000000004 RSI: 00002000000000c0 RDI: 0000000000000008 [ 1251.583245][T17652] RBP: 00007f18d77f0090 R08: 0000000000000000 R09: 0000000000000000 [ 1251.583257][T17652] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1251.583269][T17652] R13: 00007f18d6c16038 R14: 00007f18d6c15fa0 R15: 00007ffc36fb90f8 [ 1251.583299][T17652] [ 1251.633377][T17185] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1251.777159][T17185] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1252.038551][T17669] gre0 speed is unknown, defaulting to 1000 [ 1252.145528][T17682] __nla_validate_parse: 6 callbacks suppressed [ 1252.145550][T17682] netlink: 22 bytes leftover after parsing attributes in process `syz.2.11623'. [ 1252.196120][T17182] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1252.220446][T17682] netlink: 'syz.2.11623': attribute type 10 has an invalid length. [ 1252.274027][T17682] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 1252.514447][T17704] netlink: 48 bytes leftover after parsing attributes in process `syz.0.11631'. [ 1252.550561][T17706] netlink: 'syz.5.11632': attribute type 7 has an invalid length. [ 1252.603582][T17709] sock: sock_timestamping_bind_phc: sock not bind to device [ 1252.641517][ T5828] Bluetooth: hci4: command tx timeout [ 1252.727072][T17717] nbd: must specify at least one socket [ 1252.763840][T17714] netlink: 'syz.0.11635': attribute type 181 has an invalid length. [ 1252.796748][T16981] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1252.987249][T17730] netlink: 8 bytes leftover after parsing attributes in process `syz.1.11641'. [ 1253.150656][T17736] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11645'. [ 1253.251897][T17743] bridge11: port 1(erspan0) entered blocking state [ 1253.284506][T17743] bridge11: port 1(erspan0) entered disabled state [ 1253.299042][T17743] erspan0: entered allmulticast mode [ 1253.318180][T17743] erspan0: entered promiscuous mode [ 1253.366823][T16981] net_ratelimit: 21 callbacks suppressed [ 1253.366845][T16981] bond2: (slave bridge1): failed to get link speed/duplex [ 1253.505821][ T5942] bond2: (slave bridge1): failed to get link speed/duplex [ 1253.615429][T17182] bond2: (slave bridge1): failed to get link speed/duplex [ 1253.746509][T17182] bond2: (slave bridge1): failed to get link speed/duplex [ 1253.814441][T17778] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1253.865560][T17182] bond2: (slave bridge1): failed to get link speed/duplex [ 1253.975185][T16981] bond2: (slave bridge1): failed to get link speed/duplex [ 1254.085292][T17754] lec:lec_atm_close: lec0: Shut down! [ 1254.093878][T17182] bond2: (slave bridge1): failed to get link speed/duplex [ 1254.205429][T17794] netlink: 20 bytes leftover after parsing attributes in process `syz.2.11670'. [ 1254.275468][ T5942] bond2: (slave bridge1): failed to get link speed/duplex [ 1254.398701][ T5942] bond2: (slave bridge1): failed to get link speed/duplex [ 1254.715885][ T5828] Bluetooth: hci4: command tx timeout [ 1254.777069][T17820] netlink: 12 bytes leftover after parsing attributes in process `syz.1.11681'. [ 1255.139633][T17845] netlink: 'syz.5.11691': attribute type 5 has an invalid length. [ 1255.480548][T17869] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11704'. [ 1256.212697][T17918] syzkaller0: entered promiscuous mode [ 1256.224331][T17918] syzkaller0: entered allmulticast mode [ 1256.553984][T17942] netlink: 280 bytes leftover after parsing attributes in process `syz.2.11740'. [ 1256.933937][T17961] netlink: 260 bytes leftover after parsing attributes in process `syz.1.11750'. [ 1256.956945][ T5824] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1256.968703][ T5824] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1256.977291][ T5824] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1256.988399][ T5824] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1256.996419][ T5824] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1257.124499][T17962] gre0 speed is unknown, defaulting to 1000 [ 1257.143147][T17967] netlink: 20 bytes leftover after parsing attributes in process `syz.2.11752'. [ 1257.495585][T17982] netlink: 'syz.0.11760': attribute type 4 has an invalid length. [ 1257.899095][T17962] chnl_net:caif_netlink_parms(): no params data found [ 1257.920868][T16981] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1258.114117][T17962] bridge0: port 1(bridge_slave_0) entered blocking state [ 1258.130841][T17962] bridge0: port 1(bridge_slave_0) entered disabled state [ 1258.138544][T17962] bridge_slave_0: entered allmulticast mode [ 1258.149848][T17962] bridge_slave_0: entered promiscuous mode [ 1258.159690][T17962] bridge0: port 2(bridge_slave_1) entered blocking state [ 1258.167306][T17962] bridge0: port 2(bridge_slave_1) entered disabled state [ 1258.174683][T17962] bridge_slave_1: entered allmulticast mode [ 1258.182961][T17962] bridge_slave_1: entered promiscuous mode [ 1258.250069][T17962] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1258.267814][T17962] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1258.351226][T18033] netlink: 56 bytes leftover after parsing attributes in process `syz.2.11781'. [ 1258.359318][T17962] team0: Port device team_slave_0 added [ 1258.380626][T17962] team0: Port device team_slave_1 added [ 1258.442546][T17962] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1258.450531][T17962] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1258.478888][T17962] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1258.491787][T17962] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1258.499174][T17962] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1258.530438][T17962] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1258.556193][ T5942] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1258.587751][T18041] net_ratelimit: 29 callbacks suppressed [ 1258.587774][T18041] netlink: get zone limit has 4 unknown bytes [ 1258.602145][T17962] hsr_slave_0: entered promiscuous mode [ 1258.609406][T17962] hsr_slave_1: entered promiscuous mode [ 1258.616750][T17962] debugfs: 'hsr0' already exists in 'hsr' [ 1258.625112][T17962] Cannot create hsr debugfs directory [ 1258.626081][T18043] netlink: 4 bytes leftover after parsing attributes in process `syz.2.11786'. [ 1258.745786][T16981] bond2: (slave bridge1): failed to get link speed/duplex [ 1258.946042][ T5942] bond2: (slave bridge1): failed to get link speed/duplex [ 1259.035711][ T5824] Bluetooth: hci3: command tx timeout [ 1259.077962][T16981] bond2: (slave bridge1): failed to get link speed/duplex [ 1259.109895][T18069] netlink: 12 bytes leftover after parsing attributes in process `syz.2.11799'. [ 1259.205636][ T5942] bond2: (slave bridge1): failed to get link speed/duplex [ 1259.316316][T16981] bond2: (slave bridge1): failed to get link speed/duplex [ 1259.454951][T17962] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1259.504812][T17962] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1259.552349][T16988] bond2: (slave bridge1): failed to get link speed/duplex [ 1259.587957][T17962] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1259.750512][T17962] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1259.835598][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5750 ms [ 1259.843637][ C1] lec:lec_tx_timeout: lec0 [ 1259.856120][ T5942] bond2: (slave bridge1): failed to get link speed/duplex [ 1260.115284][T17182] bond2: (slave bridge1): failed to get link speed/duplex [ 1260.285299][ T5942] bond2: (slave bridge1): failed to get link speed/duplex [ 1260.364070][T17962] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1260.458971][T17962] 8021q: adding VLAN 0 to HW filter on device team0 [ 1260.493872][ T5942] bridge0: port 1(bridge_slave_0) entered blocking state [ 1260.501109][ T5942] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1260.570923][T17182] bridge0: port 2(bridge_slave_1) entered blocking state [ 1260.578108][T17182] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1260.705344][T18145] netlink: 32 bytes leftover after parsing attributes in process `syz.2.11826'. [ 1261.116922][ T5824] Bluetooth: hci3: command tx timeout [ 1261.291569][T18125] lec:lec_atm_close: lec0: Shut down! [ 1261.380059][T17962] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1261.961168][T17962] veth0_vlan: entered promiscuous mode [ 1262.010604][T17962] veth1_vlan: entered promiscuous mode [ 1262.084427][T18219] netlink: 32 bytes leftover after parsing attributes in process `syz.2.11849'. [ 1262.132996][T17962] veth0_macvtap: entered promiscuous mode [ 1262.167592][T17962] veth1_macvtap: entered promiscuous mode [ 1262.237787][T17962] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1262.284692][T17962] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1262.347695][ T5942] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1262.430839][ T5942] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1262.446290][ T5942] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1262.529321][ T5942] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1262.778237][T16981] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1262.826400][T16981] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1262.903291][ T5942] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1262.921831][ T5942] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1263.200063][ T5824] Bluetooth: hci3: command tx timeout [ 1263.566028][T18306] netlink: 64 bytes leftover after parsing attributes in process `syz.1.11879'. [ 1263.680044][T16981] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1263.795411][T16988] net_ratelimit: 20 callbacks suppressed [ 1263.795443][T16988] bond2: (slave bridge1): failed to get link speed/duplex [ 1263.935195][T16981] bond2: (slave bridge1): failed to get link speed/duplex [ 1264.055282][T16988] bond2: (slave bridge1): failed to get link speed/duplex [ 1264.322262][T16988] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1264.636015][T16981] bond2: (slave bridge1): failed to get link speed/duplex [ 1264.745203][T16981] bond2: (slave bridge1): failed to get link speed/duplex [ 1264.855368][T16988] bond2: (slave bridge1): failed to get link speed/duplex [ 1264.975556][T16988] bond2: (slave bridge1): failed to get link speed/duplex [ 1265.096191][T16988] bond2: (slave bridge1): failed to get link speed/duplex [ 1265.205700][T17181] bond2: (slave bridge1): failed to get link speed/duplex [ 1265.280274][ T5824] Bluetooth: hci3: command tx timeout [ 1265.320096][T16981] bond2: (slave bridge1): failed to get link speed/duplex [ 1265.359757][T18400] netlink: 108 bytes leftover after parsing attributes in process `syz.5.11907'. [ 1265.748177][T18419] netlink: 20 bytes leftover after parsing attributes in process `syz.2.11917'. [ 1265.862940][T18424] lec:lec_atm_send: lec0: change_mtu to 0 failed [ 1265.899462][T18390] lec:lec_atm_close: lec0: Shut down! [ 1266.433086][T18455] netlink: 'syz.4.11924': attribute type 29 has an invalid length. [ 1266.469465][T18449] netlink: 'syz.5.11925': attribute type 7 has an invalid length. [ 1266.488249][T18449] netlink: 32 bytes leftover after parsing attributes in process `syz.5.11925'. [ 1266.508058][T18455] netlink: 'syz.4.11924': attribute type 29 has an invalid length. [ 1266.542065][T18461] netlink: 'syz.4.11924': attribute type 32 has an invalid length. [ 1266.562264][T18461] netlink: 500 bytes leftover after parsing attributes in process `syz.4.11924'. [ 1266.764368][T18476] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11933'. [ 1266.774862][T18476] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11933'. [ 1266.828683][T17182] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1266.840153][T18476] netlink: 8 bytes leftover after parsing attributes in process `syz.4.11933'. [ 1266.851441][T17182] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1266.868064][T18476] netlink: 12 bytes leftover after parsing attributes in process `syz.4.11933'. [ 1266.880220][T17182] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1266.912476][T17182] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1267.060022][T18496] netlink: 8 bytes leftover after parsing attributes in process `syz.0.11941'. [ 1267.722036][T18544] netlink: 'syz.4.11966': attribute type 2 has an invalid length. [ 1267.726424][T18543] smc: net device bridge0 applied user defined pnetid SYZ1 [ 1267.836049][ T5824] Bluetooth: hci3: command tx timeout [ 1267.994375][T18555] syzkaller0: entered promiscuous mode [ 1268.007560][T18555] syzkaller0: entered allmulticast mode [ 1268.578666][T18602] __nla_validate_parse: 6 callbacks suppressed [ 1268.578687][T18602] netlink: 40 bytes leftover after parsing attributes in process `syz.4.11994'. [ 1268.629333][T18605] netlink: 12 bytes leftover after parsing attributes in process `syz.5.11996'. [ 1268.799787][T18616] lo: entered allmulticast mode [ 1268.806924][T18616] net_ratelimit: 30 callbacks suppressed [ 1268.806944][T18616] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1268.882921][T17182] bond2: (slave bridge1): failed to get link speed/duplex [ 1269.005732][T17182] bond2: (slave bridge1): failed to get link speed/duplex [ 1269.156446][T17185] bond2: (slave bridge1): failed to get link speed/duplex [ 1269.276336][ T5942] bond2: (slave bridge1): failed to get link speed/duplex [ 1269.395418][T16981] bond2: (slave bridge1): failed to get link speed/duplex [ 1269.438361][T17182] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1269.506182][T17181] bond2: (slave bridge1): failed to get link speed/duplex [ 1269.564582][T18655] batadv_slave_0: entered promiscuous mode [ 1269.578777][T18654] batadv_slave_0: left promiscuous mode [ 1269.615720][T17182] bond2: (slave bridge1): failed to get link speed/duplex [ 1269.726170][T17185] bond2: (slave bridge1): failed to get link speed/duplex [ 1269.850592][T17185] bond2: (slave bridge1): failed to get link speed/duplex [ 1270.075772][T17182] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1270.325783][T18686] gre0 speed is unknown, defaulting to 1000 [ 1270.344109][T18692] netlink: 112 bytes leftover after parsing attributes in process `syz.0.12035'. [ 1270.587149][T18696] netlink: 24 bytes leftover after parsing attributes in process `syz.5.12038'. [ 1270.675325][T18696] bridge_slave_0: left allmulticast mode [ 1270.682136][T18696] bridge_slave_0: left promiscuous mode [ 1270.689206][T18696] bridge0: port 1(bridge_slave_0) entered disabled state [ 1270.702217][T18696] bridge_slave_1: left allmulticast mode [ 1270.708160][T18696] bridge_slave_1: left promiscuous mode [ 1270.714018][T18696] bridge0: port 2(bridge_slave_1) entered disabled state [ 1270.730957][T18696] bond0: (slave bond_slave_0): Releasing backup interface [ 1270.741444][T18696] bond0: (slave bond_slave_1): Releasing backup interface [ 1270.752997][T18696] team0: Port device team_slave_0 removed [ 1270.776338][T18696] team0: Port device team_slave_1 removed [ 1270.826034][T18696] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1270.847069][T18696] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1270.905133][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 1270.913203][ C1] lec:lec_tx_timeout: lec0 [ 1271.079123][T18715] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12045'. [ 1271.172609][T18715] netlink: 'syz.0.12045': attribute type 1 has an invalid length. [ 1271.187745][T18715] netlink: 'syz.0.12045': attribute type 2 has an invalid length. [ 1271.557230][T18734] netlink: 12 bytes leftover after parsing attributes in process `syz.4.12051'. [ 1271.894129][T18749] gre0 speed is unknown, defaulting to 1000 [ 1271.899758][T18755] syzkaller0: entered promiscuous mode [ 1271.906486][T18755] syzkaller0: entered allmulticast mode [ 1271.914783][T18753] netlink: 112 bytes leftover after parsing attributes in process `syz.0.12056'. [ 1272.830277][T18799] FAULT_INJECTION: forcing a failure. [ 1272.830277][T18799] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1272.843856][T18799] CPU: 0 UID: 0 PID: 18799 Comm: syz.0.12079 Not tainted syzkaller #0 PREEMPT(full) [ 1272.843883][T18799] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1272.843895][T18799] Call Trace: [ 1272.843903][T18799] [ 1272.843912][T18799] dump_stack_lvl+0xe8/0x150 [ 1272.843942][T18799] should_fail_ex+0x412/0x560 [ 1272.843975][T18799] _copy_from_user+0x2d/0xb0 [ 1272.843998][T18799] do_tcp_getsockopt+0x227/0x2940 [ 1272.844031][T18799] ? __pfx_do_tcp_getsockopt+0x10/0x10 [ 1272.844054][T18799] ? sock_recv_errqueue+0x4e0/0x590 [ 1272.844075][T18799] ? is_bpf_text_address+0x26/0x2b0 [ 1272.844103][T18799] ? aa_label_sk_perm+0x532/0x6e0 [ 1272.844137][T18799] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 1272.844163][T18799] ? __lock_acquire+0x6b5/0x2cf0 [ 1272.844194][T18799] ? kstrtoull+0x12f/0x1d0 [ 1272.844223][T18799] ? __lock_acquire+0x6b5/0x2cf0 [ 1272.844262][T18799] ? aa_sk_perm+0x6d5/0x900 [ 1272.844285][T18799] ? get_pid_task+0x20/0x1f0 [ 1272.844326][T18799] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 1272.844350][T18799] tcp_getsockopt+0x83/0x130 [ 1272.844372][T18799] ? sock_recv_errqueue+0x4e0/0x590 [ 1272.844393][T18799] ? sock_recv_errqueue+0x4e0/0x590 [ 1272.844415][T18799] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 1272.844438][T18799] do_sock_getsockopt+0x51d/0x7e0 [ 1272.844467][T18799] ? __pfx_vfs_write+0x10/0x10 [ 1272.844489][T18799] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 1272.844515][T18799] ? kmem_cache_free+0x187/0x630 [ 1272.844536][T18799] ? fd_install+0x94/0x3d0 [ 1272.844560][T18799] ? do_sys_openat2+0x14c/0x200 [ 1272.844599][T18799] ? ksys_write+0x1fc/0x270 [ 1272.844625][T18799] __x64_sys_getsockopt+0x1a4/0x240 [ 1272.844659][T18799] do_syscall_64+0x14d/0xf80 [ 1272.844680][T18799] ? trace_irq_disable+0x3b/0x150 [ 1272.844701][T18799] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1272.844721][T18799] ? clear_bhb_loop+0x40/0x90 [ 1272.844743][T18799] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1272.844763][T18799] RIP: 0033:0x7f2d08f9c819 [ 1272.844782][T18799] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1272.844798][T18799] RSP: 002b:00007f2d09e47028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 1272.844819][T18799] RAX: ffffffffffffffda RBX: 00007f2d09215fa0 RCX: 00007f2d08f9c819 [ 1272.844834][T18799] RDX: 0000000000000007 RSI: 0000000000000006 RDI: 0000000000000003 [ 1272.844845][T18799] RBP: 00007f2d09e47090 R08: 0000200000000040 R09: 0000000000000000 [ 1272.844858][T18799] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1272.844871][T18799] R13: 00007f2d09216038 R14: 00007f2d09215fa0 R15: 00007fffb7b27f58 [ 1272.844901][T18799] [ 1273.310463][T18797] syzkaller0: entered promiscuous mode [ 1273.316054][T18797] syzkaller0: entered allmulticast mode [ 1273.672506][T18835] netlink: 4 bytes leftover after parsing attributes in process `syz.5.12087'. [ 1273.692833][T18834] FAULT_INJECTION: forcing a failure. [ 1273.692833][T18834] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1273.707030][T18834] CPU: 1 UID: 0 PID: 18834 Comm: syz.1.12091 Not tainted syzkaller #0 PREEMPT(full) [ 1273.707058][T18834] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1273.707069][T18834] Call Trace: [ 1273.707077][T18834] [ 1273.707085][T18834] dump_stack_lvl+0xe8/0x150 [ 1273.707116][T18834] should_fail_ex+0x412/0x560 [ 1273.707147][T18834] _copy_to_user+0x31/0xb0 [ 1273.707170][T18834] do_tcp_getsockopt+0x19c5/0x2940 [ 1273.707201][T18834] ? __pfx_do_tcp_getsockopt+0x10/0x10 [ 1273.707241][T18834] ? sock_recv_errqueue+0x4e0/0x590 [ 1273.707261][T18834] ? is_bpf_text_address+0x26/0x2b0 [ 1273.707292][T18834] ? aa_label_sk_perm+0x532/0x6e0 [ 1273.707322][T18834] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 1273.707344][T18834] ? __lock_acquire+0x6b5/0x2cf0 [ 1273.707372][T18834] ? kstrtoull+0x12f/0x1d0 [ 1273.707397][T18834] ? __lock_acquire+0x6b5/0x2cf0 [ 1273.707431][T18834] ? aa_sk_perm+0x6d5/0x900 [ 1273.707451][T18834] ? get_pid_task+0x20/0x1f0 [ 1273.707478][T18834] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 1273.707498][T18834] tcp_getsockopt+0x83/0x130 [ 1273.707517][T18834] ? sock_recv_errqueue+0x4e0/0x590 [ 1273.707537][T18834] ? sock_recv_errqueue+0x4e0/0x590 [ 1273.707555][T18834] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 1273.707574][T18834] do_sock_getsockopt+0x51d/0x7e0 [ 1273.707599][T18834] ? __pfx_vfs_write+0x10/0x10 [ 1273.707618][T18834] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 1273.707641][T18834] ? kmem_cache_free+0x187/0x630 [ 1273.707658][T18834] ? fd_install+0x94/0x3d0 [ 1273.707679][T18834] ? do_sys_openat2+0x14c/0x200 [ 1273.707713][T18834] ? ksys_write+0x1fc/0x270 [ 1273.707735][T18834] __x64_sys_getsockopt+0x1a4/0x240 [ 1273.707764][T18834] do_syscall_64+0x14d/0xf80 [ 1273.707782][T18834] ? trace_irq_disable+0x3b/0x150 [ 1273.707796][T18834] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1273.707813][T18834] ? clear_bhb_loop+0x40/0x90 [ 1273.707833][T18834] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1273.707849][T18834] RIP: 0033:0x7f18d699c819 [ 1273.707866][T18834] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1273.707880][T18834] RSP: 002b:00007f18d77f0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 1273.707899][T18834] RAX: ffffffffffffffda RBX: 00007f18d6c15fa0 RCX: 00007f18d699c819 [ 1273.707912][T18834] RDX: 0000000000000007 RSI: 0000000000000006 RDI: 0000000000000003 [ 1273.707921][T18834] RBP: 00007f18d77f0090 R08: 0000200000000040 R09: 0000000000000000 [ 1273.707932][T18834] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1273.707942][T18834] R13: 00007f18d6c16038 R14: 00007f18d6c15fa0 R15: 00007ffc36fb90f8 [ 1273.707968][T18834] [ 1275.221515][ T12] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1275.232510][T17185] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1275.640699][T18835] lo: left allmulticast mode [ 1275.698049][T16988] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1275.730900][T16988] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1275.755763][T16988] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1275.763997][T16988] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1275.785611][T16988] net_ratelimit: 23 callbacks suppressed [ 1275.785632][T16988] bond2: (slave bridge1): failed to get link speed/duplex [ 1275.905321][ T12] bond2: (slave bridge1): failed to get link speed/duplex [ 1275.922582][T18856] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12098'. [ 1276.017559][T18860] gre0 speed is unknown, defaulting to 1000 [ 1276.056954][T16988] bond2: (slave bridge1): failed to get link speed/duplex [ 1276.165799][T17182] bond2: (slave bridge1): failed to get link speed/duplex [ 1276.296606][ T12] bond2: (slave bridge1): failed to get link speed/duplex [ 1276.421878][T18881] bond1: Removing last arp target with arp_interval on [ 1276.495440][T17182] bond2: (slave bridge1): failed to get link speed/duplex [ 1276.582667][T18895] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12112'. [ 1276.609129][ T12] bond2: (slave bridge1): failed to get link speed/duplex [ 1276.835244][T16988] bond2: (slave bridge1): failed to get link speed/duplex [ 1276.985184][T18898] syzkaller0: entered promiscuous mode [ 1276.991371][T18898] syzkaller0: entered allmulticast mode [ 1277.025128][T16981] bond2: (slave bridge1): failed to get link speed/duplex [ 1279.305474][ T12] bond2: (slave bridge1): failed to get link speed/duplex [ 1279.428677][T18949] gre0 speed is unknown, defaulting to 1000 [ 1279.438966][T18958] syzkaller0: entered promiscuous mode [ 1279.444462][T18958] syzkaller0: entered allmulticast mode [ 1279.607709][T18974] netlink: 'syz.0.12142': attribute type 11 has an invalid length. [ 1279.820528][T18947] gre0 speed is unknown, defaulting to 1000 [ 1280.267727][T18997] tipc: Started in network mode [ 1280.286846][ T5828] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1280.299245][ T5828] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1280.355233][T18997] tipc: Node identity aaaaaaaaaa31, cluster identity 4711 [ 1280.362679][ T5828] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1280.376461][T18997] tipc: Enabled bearer , priority 10 [ 1280.383347][ T5828] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1280.397513][ T5828] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1280.824414][T17181] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1280.914810][T18999] gre0 speed is unknown, defaulting to 1000 [ 1280.952220][T17181] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1280.965650][ T12] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1281.347451][T17181] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1281.368557][T19026] sctp: [Deprecated]: syz.4.12160 (pid 19026) Use of int in max_burst socket option. [ 1281.368557][T19026] Use struct sctp_assoc_value instead [ 1281.396694][T31532] tipc: Node number set to 10201770 [ 1281.425265][ T5942] net_ratelimit: 6 callbacks suppressed [ 1281.425288][ T5942] bond2: (slave bridge1): failed to get link speed/duplex [ 1281.492955][T17181] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1281.912488][T17181] bridge0: port 3(batadv0) entered disabled state [ 1281.926624][T17181] bridge_slave_1: left allmulticast mode [ 1281.932494][T17181] bridge_slave_1: left promiscuous mode [ 1281.939491][T17181] bridge0: port 2(bridge_slave_1) entered disabled state [ 1281.950030][T17181] bridge_slave_0: left allmulticast mode [ 1281.958612][T17181] bridge_slave_0: left promiscuous mode [ 1281.964438][T17181] bridge0: port 1(bridge_slave_0) entered disabled state [ 1281.983340][T17181] pimreg: left allmulticast mode [ 1282.091974][T19047] netlink: 20 bytes leftover after parsing attributes in process `syz.2.12168'. [ 1282.157888][T17181] bond2 (unregistering): (slave geneve2): Releasing backup interface [ 1282.332480][T17181] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1282.347830][T17181] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1282.359293][T17181] bond0 (unregistering): Released all slaves [ 1282.375531][T17181] bond1 (unregistering): Released all slaves [ 1282.391958][T17181] bond2 (unregistering): Released all slaves [ 1282.409736][T17181] bond3 (unregistering): Released all slaves [ 1282.422194][T17181] bond4 (unregistering): Released all slaves [ 1282.475544][ T5824] Bluetooth: hci2: command tx timeout [ 1282.577463][ T12] bond2: (slave bridge1): failed to get link speed/duplex [ 1282.636943][T17181] tipc: Left network mode [ 1282.699124][T17185] bond2: (slave bridge1): failed to get link speed/duplex [ 1282.812563][T18999] chnl_net:caif_netlink_parms(): no params data found [ 1283.093172][ T12] bond2: (slave bridge1): failed to get link speed/duplex [ 1283.381102][T18999] bridge0: port 1(bridge_slave_0) entered blocking state [ 1283.394087][T18999] bridge0: port 1(bridge_slave_0) entered disabled state [ 1283.416959][T18999] bridge_slave_0: entered allmulticast mode [ 1283.432256][T18999] bridge_slave_0: entered promiscuous mode [ 1283.460839][T18999] bridge0: port 2(bridge_slave_1) entered blocking state [ 1283.479932][T18999] bridge0: port 2(bridge_slave_1) entered disabled state [ 1283.490364][T18999] bridge_slave_1: entered allmulticast mode [ 1283.499568][T18999] bridge_slave_1: entered promiscuous mode [ 1283.566171][T17182] bond2: (slave bridge1): failed to get link speed/duplex [ 1283.600525][T18999] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1283.648891][T18999] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1283.711870][T18999] team0: Port device team_slave_0 added [ 1283.718724][ T5942] bond2: (slave bridge1): failed to get link speed/duplex [ 1283.743241][T18999] team0: Port device team_slave_1 added [ 1283.835547][T16988] bond2: (slave bridge1): failed to get link speed/duplex [ 1283.853385][T18999] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1283.874096][T18999] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1283.932725][T18999] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1283.960258][T19120] netlink: 'syz.0.12186': attribute type 11 has an invalid length. [ 1283.968512][T19120] netlink: 199788 bytes leftover after parsing attributes in process `syz.0.12186'. [ 1283.978950][T18999] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1284.006397][T18999] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1284.108452][T18999] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1284.165608][ T5942] bond2: (slave bridge1): failed to get link speed/duplex [ 1284.281717][T16988] bond2: (slave bridge1): failed to get link speed/duplex [ 1284.459840][T18999] hsr_slave_0: entered promiscuous mode [ 1284.518151][T19152] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12195'. [ 1284.533001][T18999] hsr_slave_1: entered promiscuous mode [ 1284.555759][ T5824] Bluetooth: hci2: command tx timeout [ 1284.626820][T18999] debugfs: 'hsr0' already exists in 'hsr' [ 1284.632604][T18999] Cannot create hsr debugfs directory [ 1284.681827][T19162] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12197'. [ 1284.952092][T17181] hsr_slave_0: left promiscuous mode [ 1284.981047][T17181] hsr_slave_1: left promiscuous mode [ 1285.001159][T17181] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1285.020582][T17181] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1285.284409][T19173] netlink: 9 bytes leftover after parsing attributes in process `syz.0.12200'. [ 1285.329691][T17181] team0 (unregistering): Port device team_slave_1 removed [ 1285.368180][T17181] team0 (unregistering): Port device team_slave_0 removed [ 1285.562798][T17181] dummy0 (unregistering): left allmulticast mode [ 1285.609358][T19173] .70З: renamed from nr26 [ 1285.628753][T19199] netlink: 28 bytes leftover after parsing attributes in process `syz.5.12209'. [ 1285.646517][T19173] .70З: entered allmulticast mode [ 1285.656370][T19199] netlink: 28 bytes leftover after parsing attributes in process `syz.5.12209'. [ 1285.668972][T19173] A link change request failed with some changes committed already. Interface .70З may have been left with an inconsistent configuration, please check. [ 1285.735927][T19172] lec:lec_atm_close: lec0: Shut down! [ 1285.824026][T19203] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12212'. [ 1285.898598][T19197] gre0 speed is unknown, defaulting to 1000 [ 1285.980568][T19208] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1285.995582][T19208] batadv_slave_1: entered allmulticast mode [ 1286.363806][T19226] netlink: 4768 bytes leftover after parsing attributes in process `syz.4.12217'. [ 1286.446972][ T5942] net_ratelimit: 3 callbacks suppressed [ 1286.446996][ T5942] bond2: (slave bridge1): failed to get link speed/duplex [ 1286.554090][T17181] IPVS: stop unused estimator thread 0... [ 1286.596804][ T12] bond2: (slave bridge1): failed to get link speed/duplex [ 1286.640956][ T5824] Bluetooth: hci2: command tx timeout [ 1286.716587][T17182] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1286.766873][ T5942] bond2: (slave bridge1): failed to get link speed/duplex [ 1286.809839][T19240] gre0 speed is unknown, defaulting to 1000 [ 1286.935226][T17181] bond2: (slave bridge1): failed to get link speed/duplex [ 1287.016792][T18999] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1287.028570][T18999] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1287.053105][T18999] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1287.078960][T18999] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1287.096192][T17182] bond2: (slave bridge1): failed to get link speed/duplex [ 1287.505372][ T12] bond2: (slave bridge1): failed to get link speed/duplex [ 1287.624838][T17182] bond2: (slave bridge1): failed to get link speed/duplex [ 1287.762337][T19276] RDS: rds_bind could not find a transport for ::20:0, load rds_tcp or rds_rdma? [ 1287.878614][T19273] netlink: 28 bytes leftover after parsing attributes in process `syz.4.12230'. [ 1287.914913][T19283] gre0 speed is unknown, defaulting to 1000 [ 1287.935253][T19273] netlink: 28 bytes leftover after parsing attributes in process `syz.4.12230'. [ 1287.959930][T18999] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1288.055560][T19292] netlink: 16 bytes leftover after parsing attributes in process `syz.2.12232'. [ 1288.114854][T19288] netlink: 24 bytes leftover after parsing attributes in process `syz.2.12232'. [ 1288.134029][T18999] 8021q: adding VLAN 0 to HW filter on device team0 [ 1288.155992][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 1288.163170][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1288.165979][T19288] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12232'. [ 1288.274906][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 1288.282113][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1288.315579][T16988] bond2: (slave bridge1): failed to get link speed/duplex [ 1288.446216][T16988] bond2: (slave bridge1): failed to get link speed/duplex [ 1288.476161][T19285] gre0 speed is unknown, defaulting to 1000 [ 1288.715453][ T5824] Bluetooth: hci2: command tx timeout [ 1288.715914][ T12] bond2: (slave bridge1): failed to get link speed/duplex [ 1288.933177][T18999] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1289.029164][T18999] veth0_vlan: entered promiscuous mode [ 1289.061099][T18999] veth1_vlan: entered promiscuous mode [ 1289.121788][T19321] gre0 speed is unknown, defaulting to 1000 [ 1289.432518][T18999] veth0_macvtap: entered promiscuous mode [ 1289.484404][T18999] veth1_macvtap: entered promiscuous mode [ 1289.524511][T18999] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1289.554320][T18999] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1289.748462][T17185] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1289.772953][T17185] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1289.824873][T17185] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1289.843441][T17185] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1290.126274][T19352] netlink: 16 bytes leftover after parsing attributes in process `syz.2.12246'. [ 1290.314597][T17185] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1290.328502][T17185] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1290.467027][T17182] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1290.502712][T17182] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1290.775630][T19374] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12149'. [ 1290.793223][T19374] netlink: 'syz.1.12149': attribute type 5 has an invalid length. [ 1290.801286][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5060 ms [ 1290.801315][ C1] lec:lec_tx_timeout: lec0 [ 1291.049204][T19385] netlink: 'syz.1.12254': attribute type 4 has an invalid length. [ 1291.465221][T17181] net_ratelimit: 13 callbacks suppressed [ 1291.465245][T17181] bond2: (slave bridge1): failed to get link speed/duplex [ 1291.595262][T10992] bond2: (slave bridge1): failed to get link speed/duplex [ 1291.715429][T17182] bond2: (slave bridge1): failed to get link speed/duplex [ 1291.740601][T19424] netlink: 32 bytes leftover after parsing attributes in process `syz.0.12262'. [ 1291.828216][T17181] bond2: (slave bridge1): failed to get link speed/duplex [ 1291.937972][T19433] netlink: 68 bytes leftover after parsing attributes in process `syz.4.12264'. [ 1291.965481][T16988] bond2: (slave bridge1): failed to get link speed/duplex [ 1291.966159][T19433] netlink: 64 bytes leftover after parsing attributes in process `syz.4.12264'. [ 1292.111355][T19435] gre0 speed is unknown, defaulting to 1000 [ 1292.117877][T17181] bond2: (slave bridge1): failed to get link speed/duplex [ 1292.236655][T17181] bond2: (slave bridge1): failed to get link speed/duplex [ 1292.365177][T17181] bond2: (slave bridge1): failed to get link speed/duplex [ 1292.626271][T17182] bond2: (slave bridge1): failed to get link speed/duplex [ 1292.749360][T19451] gre0 speed is unknown, defaulting to 1000 [ 1292.816000][T17182] bond2: (slave bridge1): failed to get link speed/duplex [ 1293.076393][T19468] __nla_validate_parse: 4 callbacks suppressed [ 1293.076414][T19468] netlink: 28 bytes leftover after parsing attributes in process `syz.0.12275'. [ 1293.105189][T19468] netlink: 28 bytes leftover after parsing attributes in process `syz.0.12275'. [ 1293.349522][T19471] gre0 speed is unknown, defaulting to 1000 [ 1293.945177][T19479] netlink: 28 bytes leftover after parsing attributes in process `syz.4.12277'. [ 1293.954284][T19479] netlink: 28 bytes leftover after parsing attributes in process `syz.4.12277'. [ 1294.400808][ T5942] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1294.449899][T19483] gre0 speed is unknown, defaulting to 1000 [ 1294.928016][T19499] FAULT_INJECTION: forcing a failure. [ 1294.928016][T19499] name failslab, interval 1, probability 0, space 0, times 0 [ 1294.959122][T19501] netlink: 32 bytes leftover after parsing attributes in process `syz.1.12284'. [ 1294.980743][T19499] CPU: 0 UID: 0 PID: 19499 Comm: syz.2.12283 Not tainted syzkaller #0 PREEMPT(full) [ 1294.980771][T19499] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1294.980784][T19499] Call Trace: [ 1294.980793][T19499] [ 1294.980801][T19499] dump_stack_lvl+0xe8/0x150 [ 1294.980832][T19499] should_fail_ex+0x412/0x560 [ 1294.980866][T19499] should_failslab+0xa8/0x100 [ 1294.980892][T19499] __kmalloc_cache_noprof+0x88/0x660 [ 1294.980916][T19499] ? sctp_auth_asoc_copy_shkeys+0x14e/0x5a0 [ 1294.980936][T19499] ? __genradix_ptr+0x1e1/0x220 [ 1294.980963][T19499] sctp_auth_asoc_copy_shkeys+0x14e/0x5a0 [ 1294.980994][T19499] sctp_association_new+0x15d3/0x25e0 [ 1294.981033][T19499] sctp_connect_new_asoc+0x2e4/0x6b0 [ 1294.981061][T19499] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 1294.981086][T19499] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 1294.981110][T19499] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 1294.981132][T19499] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 1294.981157][T19499] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 1294.981181][T19499] ? security_sctp_bind_connect+0x7e/0x2c0 [ 1294.981208][T19499] sctp_sendmsg+0x1528/0x2c10 [ 1294.981246][T19499] ? __pfx_sctp_sendmsg+0x10/0x10 [ 1294.981273][T19499] ? aa_sk_perm+0x6d5/0x900 [ 1294.981307][T19499] ? __pfx_aa_sk_perm+0x10/0x10 [ 1294.981336][T19499] ? sock_rps_record_flow+0x19/0x350 [ 1294.981362][T19499] ? __pfx_inet_sendmsg+0x10/0x10 [ 1294.981389][T19499] ? inet_sendmsg+0x2f4/0x370 [ 1294.981414][T19499] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1294.981436][T19499] ? __pfx_inet_sendmsg+0x10/0x10 [ 1294.981469][T19499] __sys_sendto+0x5de/0x710 [ 1294.981497][T19499] ? __pfx___sys_sendto+0x10/0x10 [ 1294.981519][T19499] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 1294.981555][T19499] ? __fget_files+0x3a0/0x420 [ 1294.981584][T19499] ? ksys_write+0x242/0x270 [ 1294.981607][T19499] ? __pfx_ksys_write+0x10/0x10 [ 1294.981634][T19499] __x64_sys_sendto+0xde/0x100 [ 1294.981662][T19499] do_syscall_64+0x14d/0xf80 [ 1294.981683][T19499] ? trace_irq_disable+0x3b/0x150 [ 1294.981701][T19499] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1294.981720][T19499] ? clear_bhb_loop+0x40/0x90 [ 1294.981743][T19499] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1294.981762][T19499] RIP: 0033:0x7f1c5cf9c819 [ 1294.981781][T19499] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1294.981797][T19499] RSP: 002b:00007f1c5decd028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1294.981818][T19499] RAX: ffffffffffffffda RBX: 00007f1c5d215fa0 RCX: 00007f1c5cf9c819 [ 1294.981832][T19499] RDX: 0000000000034000 RSI: 0000200000847fff RDI: 0000000000000003 [ 1294.981845][T19499] RBP: 00007f1c5decd090 R08: 000020000005ffe4 R09: 000000000000001c [ 1294.981857][T19499] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1294.981870][T19499] R13: 00007f1c5d216038 R14: 00007f1c5d215fa0 R15: 00007ffe85385a68 [ 1294.981901][T19499] [ 1295.526448][T19509] FAULT_INJECTION: forcing a failure. [ 1295.526448][T19509] name failslab, interval 1, probability 0, space 0, times 0 [ 1295.562876][T19507] gre0 speed is unknown, defaulting to 1000 [ 1295.593983][T19509] CPU: 1 UID: 0 PID: 19509 Comm: syz.2.12286 Not tainted syzkaller #0 PREEMPT(full) [ 1295.594010][T19509] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1295.594020][T19509] Call Trace: [ 1295.594028][T19509] [ 1295.594036][T19509] dump_stack_lvl+0xe8/0x150 [ 1295.594072][T19509] should_fail_ex+0x412/0x560 [ 1295.594103][T19509] should_failslab+0xa8/0x100 [ 1295.594128][T19509] __kmalloc_noprof+0xe8/0x760 [ 1295.594148][T19509] ? tomoyo_encode+0x28b/0x550 [ 1295.594171][T19509] tomoyo_encode+0x28b/0x550 [ 1295.594201][T19509] tomoyo_realpath_from_path+0x58d/0x5d0 [ 1295.594228][T19509] ? tomoyo_path_number_perm+0x219/0x630 [ 1295.594252][T19509] tomoyo_path_number_perm+0x246/0x630 [ 1295.594277][T19509] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1295.594303][T19509] ? __lock_acquire+0x6b5/0x2cf0 [ 1295.594335][T19509] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 1295.594374][T19509] ? __fget_files+0x2a/0x420 [ 1295.594393][T19509] ? __fget_files+0x2a/0x420 [ 1295.594408][T19509] ? __fget_files+0x3a0/0x420 [ 1295.594423][T19509] ? __fget_files+0x2a/0x420 [ 1295.594441][T19509] security_file_ioctl+0xc3/0x2a0 [ 1295.594466][T19509] __se_sys_ioctl+0x47/0x170 [ 1295.594490][T19509] do_syscall_64+0x14d/0xf80 [ 1295.594508][T19509] ? trace_irq_disable+0x3b/0x150 [ 1295.594524][T19509] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1295.594542][T19509] ? clear_bhb_loop+0x40/0x90 [ 1295.594563][T19509] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1295.594580][T19509] RIP: 0033:0x7f1c5cf9c819 [ 1295.594598][T19509] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1295.594612][T19509] RSP: 002b:00007f1c5deac028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1295.594631][T19509] RAX: ffffffffffffffda RBX: 00007f1c5d216090 RCX: 00007f1c5cf9c819 [ 1295.594644][T19509] RDX: 0000200000000000 RSI: 0000000080047437 RDI: 0000000000000003 [ 1295.594656][T19509] RBP: 00007f1c5deac090 R08: 0000000000000000 R09: 0000000000000000 [ 1295.594667][T19509] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1295.594677][T19509] R13: 00007f1c5d216128 R14: 00007f1c5d216090 R15: 00007ffe85385a68 [ 1295.594705][T19509] [ 1295.594737][T19509] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1296.345955][ T5942] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1296.503970][T17185] net_ratelimit: 15 callbacks suppressed [ 1296.503992][T17185] bond2: (slave bridge1): failed to get link speed/duplex [ 1296.670215][ T5942] bond2: (slave bridge1): failed to get link speed/duplex [ 1296.795663][T16988] bond2: (slave bridge1): failed to get link speed/duplex [ 1296.915586][T16988] bond2: (slave bridge1): failed to get link speed/duplex [ 1297.010564][T19534] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12292'. [ 1297.027534][T19533] gre0 speed is unknown, defaulting to 1000 [ 1297.033413][T19534] netlink: 96 bytes leftover after parsing attributes in process `syz.2.12292'. [ 1297.045628][T16988] bond2: (slave bridge1): failed to get link speed/duplex [ 1297.165218][ T5942] bond2: (slave bridge1): failed to get link speed/duplex [ 1297.275486][T17185] bond2: (slave bridge1): failed to get link speed/duplex [ 1297.297899][T19546] netlink: 17 bytes leftover after parsing attributes in process `syz.1.12298'. [ 1297.385414][T17185] bond2: (slave bridge1): failed to get link speed/duplex [ 1297.404148][T19551] FAULT_INJECTION: forcing a failure. [ 1297.404148][T19551] name failslab, interval 1, probability 0, space 0, times 0 [ 1297.465328][T19551] CPU: 0 UID: 0 PID: 19551 Comm: syz.4.12300 Not tainted syzkaller #0 PREEMPT(full) [ 1297.465358][T19551] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1297.465370][T19551] Call Trace: [ 1297.465378][T19551] [ 1297.465387][T19551] dump_stack_lvl+0xe8/0x150 [ 1297.465419][T19551] should_fail_ex+0x412/0x560 [ 1297.465452][T19551] should_failslab+0xa8/0x100 [ 1297.465479][T19551] __kmalloc_cache_noprof+0x88/0x660 [ 1297.465502][T19551] ? sctp_transport_new+0x7e/0x620 [ 1297.465534][T19551] sctp_transport_new+0x7e/0x620 [ 1297.465563][T19551] sctp_assoc_add_peer+0x259/0x13b0 [ 1297.465589][T19551] ? sctp_bind_addr_copy+0x380/0x3c0 [ 1297.465617][T19551] sctp_connect_new_asoc+0x329/0x6b0 [ 1297.465644][T19551] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 1297.465669][T19551] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 1297.465693][T19551] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 1297.465715][T19551] ? sctp_endpoint_lookup_assoc+0x7b/0x260 [ 1297.465739][T19551] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 1297.465761][T19551] ? security_sctp_bind_connect+0x7e/0x2c0 [ 1297.465789][T19551] sctp_sendmsg+0x1528/0x2c10 [ 1297.465824][T19551] ? __pfx_sctp_sendmsg+0x10/0x10 [ 1297.465850][T19551] ? aa_sk_perm+0x6d5/0x900 [ 1297.465886][T19551] ? __pfx_aa_sk_perm+0x10/0x10 [ 1297.465915][T19551] ? sock_rps_record_flow+0x19/0x350 [ 1297.465940][T19551] ? __pfx_inet_sendmsg+0x10/0x10 [ 1297.465965][T19551] ? inet_sendmsg+0x2f4/0x370 [ 1297.465988][T19551] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1297.466016][T19551] ? __pfx_inet_sendmsg+0x10/0x10 [ 1297.466042][T19551] __sys_sendto+0x5de/0x710 [ 1297.466071][T19551] ? __pfx___sys_sendto+0x10/0x10 [ 1297.466093][T19551] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 1297.466128][T19551] ? __fget_files+0x3a0/0x420 [ 1297.466158][T19551] ? ksys_write+0x242/0x270 [ 1297.466182][T19551] ? __pfx_ksys_write+0x10/0x10 [ 1297.466209][T19551] __x64_sys_sendto+0xde/0x100 [ 1297.466237][T19551] do_syscall_64+0x14d/0xf80 [ 1297.466257][T19551] ? trace_irq_disable+0x3b/0x150 [ 1297.466275][T19551] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1297.466295][T19551] ? clear_bhb_loop+0x40/0x90 [ 1297.466319][T19551] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1297.466338][T19551] RIP: 0033:0x7f69a6f9c819 [ 1297.466357][T19551] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1297.466374][T19551] RSP: 002b:00007f69a7e99028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1297.466396][T19551] RAX: ffffffffffffffda RBX: 00007f69a7215fa0 RCX: 00007f69a6f9c819 [ 1297.466410][T19551] RDX: 0000000000034000 RSI: 0000200000847fff RDI: 0000000000000003 [ 1297.466423][T19551] RBP: 00007f69a7e99090 R08: 000020000005ffe4 R09: 000000000000001c [ 1297.466436][T19551] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1297.466448][T19551] R13: 00007f69a7216038 R14: 00007f69a7215fa0 R15: 00007ffeb4877828 [ 1297.466480][T19551] [ 1297.812302][T19538] netlink: 28 bytes leftover after parsing attributes in process `syz.5.12293'. [ 1297.825420][T19538] netlink: 28 bytes leftover after parsing attributes in process `syz.5.12293'. [ 1297.895110][T17182] bond2: (slave bridge1): failed to get link speed/duplex [ 1297.971216][T19538] syz_tun: entered promiscuous mode [ 1297.980750][T19538] syz_tun: left promiscuous mode [ 1298.065390][ T5942] bond2: (slave bridge1): failed to get link speed/duplex [ 1298.248956][T19582] netlink: 'syz.1.12307': attribute type 7 has an invalid length. [ 1298.259131][T19582] netlink: 'syz.1.12307': attribute type 7 has an invalid length. [ 1298.317870][T19581] gre0 speed is unknown, defaulting to 1000 [ 1298.985994][T19591] netlink: 28 bytes leftover after parsing attributes in process `syz.1.12311'. [ 1298.996024][T19591] netlink: 32 bytes leftover after parsing attributes in process `syz.1.12311'. [ 1299.007868][T19591] netlink: 28 bytes leftover after parsing attributes in process `syz.1.12311'. [ 1299.026612][T19591] netlink: 32 bytes leftover after parsing attributes in process `syz.1.12311'. [ 1299.508677][T19621] netlink: 32 bytes leftover after parsing attributes in process `syz.0.12320'. [ 1299.599114][T19624] netlink: 20 bytes leftover after parsing attributes in process `syz.1.12321'. [ 1300.165732][ T1298] lec:lec_start_xmit: lec0:No lecd attached [ 1300.172380][ T1298] clip:clip_start_xmit: skb_dst(skb) == NULL [ 1300.177098][T19645] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12330'. [ 1300.179489][T17182] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1300.272600][T19648] syzkaller0: entered promiscuous mode [ 1300.278409][T19648] syzkaller0: entered allmulticast mode [ 1300.411200][T19652] netlink: 'syz.0.12333': attribute type 1 has an invalid length. [ 1300.538523][T19660] netlink: 36 bytes leftover after parsing attributes in process `syz.0.12335'. [ 1300.557566][T19660] netlink: 56 bytes leftover after parsing attributes in process `syz.0.12335'. [ 1300.779794][T19680] x_tables: duplicate underflow at hook 1 [ 1300.893350][T19691] gre0 speed is unknown, defaulting to 1000 [ 1301.121714][T19701] syzkaller0: entered promiscuous mode [ 1301.127591][T19701] syzkaller0: entered allmulticast mode [ 1301.184882][T19704] netlink: 48 bytes leftover after parsing attributes in process `syz.5.12349'. [ 1301.221628][T19704] netlink: 'syz.5.12349': attribute type 1 has an invalid length. [ 1301.279422][T19704] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1301.391855][T19708] bond2: (slave veth5): Enslaving as an active interface with a down link [ 1301.437575][ T5942] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1301.610683][T19704] wg1: left promiscuous mode [ 1301.619531][T19704] wg1: left allmulticast mode [ 1301.633193][T19704] bond1: left promiscuous mode [ 1301.655559][T19695] gre0 speed is unknown, defaulting to 1000 [ 1301.681565][T19708] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1301.691280][T19708] bond2: (slave batadv1): making interface the new active one [ 1301.701146][T19708] batadv1: entered promiscuous mode [ 1301.707031][T19708] bond2: (slave batadv1): Enslaving as an active interface with an up link [ 1301.815666][ T5942] net_ratelimit: 18 callbacks suppressed [ 1301.815688][ T5942] bond2: (slave bridge1): failed to get link speed/duplex [ 1301.923007][T19722] bond0: entered promiscuous mode [ 1301.929958][T19722] bond0: left promiscuous mode [ 1301.957735][T19723] bond0: entered promiscuous mode [ 1301.975903][T19723] bond0: left promiscuous mode [ 1302.011688][ T12] bond2: (slave bridge1): failed to get link speed/duplex [ 1302.181891][T19733] netlink: 'syz.1.12356': attribute type 1 has an invalid length. [ 1302.327942][ T5942] bond2: (slave bridge1): failed to get link speed/duplex [ 1302.458095][ T5942] bond2: (slave bridge1): failed to get link speed/duplex [ 1302.536927][T19744] FAULT_INJECTION: forcing a failure. [ 1302.536927][T19744] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1302.550555][T19744] CPU: 0 UID: 0 PID: 19744 Comm: syz.0.12361 Not tainted syzkaller #0 PREEMPT(full) [ 1302.550581][T19744] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1302.550593][T19744] Call Trace: [ 1302.550601][T19744] [ 1302.550609][T19744] dump_stack_lvl+0xe8/0x150 [ 1302.550638][T19744] should_fail_ex+0x412/0x560 [ 1302.550667][T19744] _copy_from_user+0x2d/0xb0 [ 1302.550689][T19744] __sys_bpf+0x229/0x950 [ 1302.550717][T19744] ? __pfx___sys_bpf+0x10/0x10 [ 1302.550747][T19744] ? ksys_write+0x242/0x270 [ 1302.550769][T19744] ? __pfx_ksys_write+0x10/0x10 [ 1302.550798][T19744] __x64_sys_bpf+0x7c/0x90 [ 1302.550824][T19744] do_syscall_64+0x14d/0xf80 [ 1302.550844][T19744] ? trace_irq_disable+0x3b/0x150 [ 1302.550859][T19744] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1302.550877][T19744] ? clear_bhb_loop+0x40/0x90 [ 1302.550898][T19744] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1302.550914][T19744] RIP: 0033:0x7f2d08f9c819 [ 1302.550928][T19744] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1302.550942][T19744] RSP: 002b:00007f2d09e47028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1302.550959][T19744] RAX: ffffffffffffffda RBX: 00007f2d09215fa0 RCX: 00007f2d08f9c819 [ 1302.550970][T19744] RDX: 0000000000000050 RSI: 0000200000000600 RDI: 000000000000000a [ 1302.550980][T19744] RBP: 00007f2d09e47090 R08: 0000000000000000 R09: 0000000000000000 [ 1302.550989][T19744] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1302.550998][T19744] R13: 00007f2d09216038 R14: 00007f2d09215fa0 R15: 00007fffb7b27f58 [ 1302.551021][T19744] [ 1302.726603][ T5942] bond2: (slave bridge1): failed to get link speed/duplex [ 1302.804079][T19746] netlink: 'syz.2.12362': attribute type 21 has an invalid length. [ 1302.835608][ T12] bond2: (slave bridge1): failed to get link speed/duplex [ 1302.947862][T17182] bond2: (slave bridge1): failed to get link speed/duplex [ 1303.065922][T17182] bond2: (slave bridge1): failed to get link speed/duplex [ 1303.188642][T10992] bond2: (slave bridge1): failed to get link speed/duplex [ 1303.201976][T19768] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1303.430112][T19783] netlink: 'syz.2.12379': attribute type 3 has an invalid length. [ 1303.904596][ T5828] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1303.919942][ T5828] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1303.930021][ T5828] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1303.938161][ T5828] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1303.947290][ T5828] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1304.006811][T19815] gre0 speed is unknown, defaulting to 1000 [ 1304.127691][T19820] lo: entered promiscuous mode [ 1304.133349][T19819] lo: left promiscuous mode [ 1304.246099][T19824] __nla_validate_parse: 6 callbacks suppressed [ 1304.246121][T19824] netlink: 64 bytes leftover after parsing attributes in process `syz.1.12395'. [ 1304.447672][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1304.469505][T19815] chnl_net:caif_netlink_parms(): no params data found [ 1304.527376][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1304.583372][T19815] bridge0: port 1(bridge_slave_0) entered blocking state [ 1304.591239][T19815] bridge0: port 1(bridge_slave_0) entered disabled state [ 1304.598945][T19815] bridge_slave_0: entered allmulticast mode [ 1304.607132][T19815] bridge_slave_0: entered promiscuous mode [ 1304.629426][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1304.652120][T19815] bridge0: port 2(bridge_slave_1) entered blocking state [ 1304.659527][T19815] bridge0: port 2(bridge_slave_1) entered disabled state [ 1304.667335][T19815] bridge_slave_1: entered allmulticast mode [ 1304.674764][T19815] bridge_slave_1: entered promiscuous mode [ 1304.721722][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1304.742740][T19815] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1304.756043][T19815] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1304.788793][T19815] team0: Port device team_slave_0 added [ 1304.798186][T19815] team0: Port device team_slave_1 added [ 1304.829502][T19815] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1304.837106][T19815] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1304.863622][T19815] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1304.896724][T19815] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1304.903698][T19815] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1304.930939][T19815] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1305.014797][T19815] hsr_slave_0: entered promiscuous mode [ 1305.021778][T19815] hsr_slave_1: entered promiscuous mode [ 1305.029032][T19815] debugfs: 'hsr0' already exists in 'hsr' [ 1305.034797][T19815] Cannot create hsr debugfs directory [ 1305.059775][ T12] bridge_slave_1: left allmulticast mode [ 1305.065666][ T12] bridge_slave_1: left promiscuous mode [ 1305.071441][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 1305.087674][ T12] bridge_slave_0: left allmulticast mode [ 1305.093475][ T12] bridge_slave_0: left promiscuous mode [ 1305.100895][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 1305.432155][ T12] bond2 (unregistering): (slave bridge1): Removing an active aggregator [ 1305.448919][ T12] bond2 (unregistering): (slave bridge1): Releasing backup interface [ 1305.457289][ T12] bond2 (unregistering): (slave bridge1): the permanent HWaddr of slave - 06:5a:d9:29:67:b6 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 1305.478091][ T12] bridge1 (unregistering): left promiscuous mode [ 1305.484529][ T12] bridge1 (unregistering): left allmulticast mode [ 1305.528079][ T12] bond2 (unregistering): (slave bridge2): Releasing backup interface [ 1305.537131][ T12] bridge2 (unregistering): left promiscuous mode [ 1305.543992][ T12] bridge2 (unregistering): left allmulticast mode [ 1305.750333][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1305.762159][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1305.773799][ T12] bond0 (unregistering): Released all slaves [ 1305.788114][ T12] bond1 (unregistering): Released all slaves [ 1305.801220][ T12] bond2 (unregistering): Released all slaves [ 1305.814049][ T12] bond3 (unregistering): Released all slaves [ 1305.835079][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5670 ms [ 1305.843165][ C1] lec:lec_tx_timeout: lec0 [ 1305.916141][T17185] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1305.965818][ T12] : left promiscuous mode [ 1305.995567][ T5824] Bluetooth: hci6: command tx timeout [ 1306.021355][ T12] !Мо: left promiscuous mode [ 1306.109692][ T12] tipc: Disabling bearer [ 1306.127089][ T12] tipc: Left network mode [ 1306.703783][T19801] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1306.751208][T19815] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1306.831129][T19815] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1306.869301][T19815] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1306.933740][T19815] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1306.949135][T19851] netlink: 32 bytes leftover after parsing attributes in process `syz.5.12401'. [ 1307.196485][T17181] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1307.297266][T19815] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1307.372421][T19815] 8021q: adding VLAN 0 to HW filter on device team0 [ 1307.462567][ T12] hsr_slave_0: left promiscuous mode [ 1307.480557][ T12] hsr_slave_1: left promiscuous mode [ 1307.498639][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1307.507381][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1307.519681][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1307.530475][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1307.573343][ T12] virt_wifi0: left promiscuous mode [ 1307.587780][ T12] veth1_macvtap: left promiscuous mode [ 1307.604960][ T12] veth0_macvtap: left promiscuous mode [ 1307.614173][ T12] veth1_vlan: left promiscuous mode [ 1307.914538][ T12] pim6reg (unregistering): left allmulticast mode [ 1308.075205][ T5824] Bluetooth: hci6: command tx timeout [ 1308.148300][T13143] lec:lec_start_xmit: lec0:No lecd attached [ 1308.185471][T19908] netlink: 112 bytes leftover after parsing attributes in process `syz.2.12413'. [ 1308.236821][ T12] team0 (unregistering): Port device team_slave_1 removed [ 1308.250923][ T12] team0 (unregistering): Port device team_slave_0 removed [ 1308.366556][T17181] bridge0: port 1(bridge_slave_0) entered blocking state [ 1308.373787][T17181] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1308.383310][T17181] bridge0: port 2(bridge_slave_1) entered blocking state [ 1308.390418][T17181] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1308.483209][T19910] gre0 speed is unknown, defaulting to 1000 [ 1309.010991][ T12] IPVS: stop unused estimator thread 0... [ 1309.223561][T19815] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1309.464400][T19815] veth0_vlan: entered promiscuous mode [ 1309.567924][T19815] veth1_vlan: entered promiscuous mode [ 1309.692101][T19815] veth0_macvtap: entered promiscuous mode [ 1309.739856][T19815] veth1_macvtap: entered promiscuous mode [ 1309.804257][T19815] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1309.866683][T19815] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1309.915823][ T5942] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1309.934821][ T5942] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1309.981021][ T5942] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1309.992519][ T5942] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1310.009505][T19969] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12430'. [ 1310.130277][T16987] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1310.150939][T16987] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1310.159526][ T5824] Bluetooth: hci6: command tx timeout [ 1310.294961][ T5942] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1310.307603][ T5942] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1310.633703][T20000] netlink: 24 bytes leftover after parsing attributes in process `syz.0.12440'. [ 1310.726913][T20002] gre0 speed is unknown, defaulting to 1000 [ 1310.756675][T20006] netlink: 112 bytes leftover after parsing attributes in process `syz.1.12441'. [ 1310.835919][T20008] netlink: 16 bytes leftover after parsing attributes in process `syz.0.12444'. [ 1310.856305][T20008] bond0: entered promiscuous mode [ 1310.861374][T20008] bond_slave_0: entered promiscuous mode [ 1310.871152][T20008] bond_slave_1: entered promiscuous mode [ 1310.885519][T20008] bond0: left promiscuous mode [ 1310.891116][T20008] bond_slave_0: left promiscuous mode [ 1310.899213][T20008] bond_slave_1: left promiscuous mode [ 1311.076561][T20017] FAULT_INJECTION: forcing a failure. [ 1311.076561][T20017] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1311.095471][T20017] CPU: 0 UID: 0 PID: 20017 Comm: syz.0.12446 Not tainted syzkaller #0 PREEMPT(full) [ 1311.095498][T20017] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1311.095509][T20017] Call Trace: [ 1311.095516][T20017] [ 1311.095524][T20017] dump_stack_lvl+0xe8/0x150 [ 1311.095553][T20017] should_fail_ex+0x412/0x560 [ 1311.095585][T20017] _copy_from_user+0x2d/0xb0 [ 1311.095608][T20017] do_sock_getsockopt+0x200/0x7e0 [ 1311.095638][T20017] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 1311.095677][T20017] ? __fget_files+0x3a0/0x420 [ 1311.095703][T20017] ? __fget_files+0x2a/0x420 [ 1311.095727][T20017] __x64_sys_getsockopt+0x1a4/0x240 [ 1311.095759][T20017] do_syscall_64+0x14d/0xf80 [ 1311.095779][T20017] ? trace_irq_disable+0x3b/0x150 [ 1311.095796][T20017] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1311.095815][T20017] ? clear_bhb_loop+0x40/0x90 [ 1311.095837][T20017] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1311.095853][T20017] RIP: 0033:0x7f0d2359c819 [ 1311.095871][T20017] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1311.095886][T20017] RSP: 002b:00007f0d2448d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 1311.095906][T20017] RAX: ffffffffffffffda RBX: 00007f0d23815fa0 RCX: 00007f0d2359c819 [ 1311.095919][T20017] RDX: 0000000000000011 RSI: 0000000000000084 RDI: 0000000000000003 [ 1311.095930][T20017] RBP: 00007f0d2448d090 R08: 0000200000000240 R09: 0000000000000000 [ 1311.095942][T20017] R10: 0000200000000200 R11: 0000000000000246 R12: 0000000000000001 [ 1311.095953][T20017] R13: 00007f0d23816038 R14: 00007f0d23815fa0 R15: 00007ffc09508b18 [ 1311.095979][T20017] [ 1311.326113][T20019] netlink: 24 bytes leftover after parsing attributes in process `syz.2.12448'. [ 1311.424249][T20029] netlink: 24 bytes leftover after parsing attributes in process `syz.5.12452'. [ 1311.467577][T20027] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12448'. [ 1311.477310][T20027] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12448'. [ 1311.676626][T17185] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1311.866577][T20059] netlink: 24 bytes leftover after parsing attributes in process `syz.2.12463'. [ 1312.027475][T20067] netlink: 112 bytes leftover after parsing attributes in process `syz.0.12464'. [ 1312.236174][ T5824] Bluetooth: hci6: command tx timeout [ 1312.255837][T20065] gre0 speed is unknown, defaulting to 1000 [ 1312.327242][T20084] netlink: 'syz.4.12473': attribute type 14 has an invalid length. [ 1312.738941][T20098] x_tables: duplicate underflow at hook 3 [ 1312.788117][T20098] team0 (unregistering): Failed to send port change of device team_slave_0 via netlink (err -105) [ 1312.825758][T20098] team0 (unregistering): Port device team_slave_0 removed [ 1312.877299][T20098] team0 (unregistering): Failed to send options change via netlink (err -105) [ 1312.927366][T20098] team0 (unregistering): Failed to send port change of device team_slave_1 via netlink (err -105) [ 1312.951427][T20098] team0 (unregistering): Port device team_slave_1 removed [ 1312.977135][T17185] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1312.991689][T20103] FAULT_INJECTION: forcing a failure. [ 1312.991689][T20103] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1313.014970][T20103] CPU: 1 UID: 0 PID: 20103 Comm: syz.0.12480 Not tainted syzkaller #0 PREEMPT(full) [ 1313.015003][T20103] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1313.015014][T20103] Call Trace: [ 1313.015022][T20103] [ 1313.015031][T20103] dump_stack_lvl+0xe8/0x150 [ 1313.015064][T20103] should_fail_ex+0x412/0x560 [ 1313.015097][T20103] _copy_from_user+0x2d/0xb0 [ 1313.015121][T20103] dev_ethtool+0x249/0x1ae0 [ 1313.015148][T20103] ? kasan_quarantine_put+0xbb/0x1f0 [ 1313.015173][T20103] ? __pfx_dev_ethtool+0x10/0x10 [ 1313.015208][T20103] ? dev_load+0x21/0x1f0 [ 1313.015232][T20103] dev_ioctl+0x392/0x1150 [ 1313.015259][T20103] sock_do_ioctl+0x23e/0x320 [ 1313.015284][T20103] ? __pfx_sock_do_ioctl+0x10/0x10 [ 1313.015302][T20103] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 1313.015339][T20103] sock_ioctl+0x5c6/0x7f0 [ 1313.015361][T20103] ? __pfx_sock_ioctl+0x10/0x10 [ 1313.015380][T20103] ? __fget_files+0x2a/0x420 [ 1313.015397][T20103] ? __fget_files+0x3a0/0x420 [ 1313.015410][T20103] ? __fget_files+0x2a/0x420 [ 1313.015431][T20103] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1313.015454][T20103] ? __pfx_sock_ioctl+0x10/0x10 [ 1313.015474][T20103] __se_sys_ioctl+0xfc/0x170 [ 1313.015499][T20103] do_syscall_64+0x14d/0xf80 [ 1313.015520][T20103] ? trace_irq_disable+0x3b/0x150 [ 1313.015538][T20103] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1313.015557][T20103] ? clear_bhb_loop+0x40/0x90 [ 1313.015581][T20103] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1313.015600][T20103] RIP: 0033:0x7f0d2359c819 [ 1313.015618][T20103] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1313.015634][T20103] RSP: 002b:00007f0d2448d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1313.015656][T20103] RAX: ffffffffffffffda RBX: 00007f0d23815fa0 RCX: 00007f0d2359c819 [ 1313.015669][T20103] RDX: 0000200000000040 RSI: 0000000000008946 RDI: 0000000000000004 [ 1313.015682][T20103] RBP: 00007f0d2448d090 R08: 0000000000000000 R09: 0000000000000000 [ 1313.015695][T20103] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1313.015713][T20103] R13: 00007f0d23816038 R14: 00007f0d23815fa0 R15: 00007ffc09508b18 [ 1313.015744][T20103] [ 1313.500763][T20115] ip6gre1: entered promiscuous mode [ 1313.508071][T20115] ip6gre1: entered allmulticast mode [ 1313.573928][T20120] gre0 speed is unknown, defaulting to 1000 [ 1313.699092][T20138] FAULT_INJECTION: forcing a failure. [ 1313.699092][T20138] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1313.775148][T20138] CPU: 1 UID: 0 PID: 20138 Comm: syz.4.12490 Not tainted syzkaller #0 PREEMPT(full) [ 1313.775176][T20138] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1313.775188][T20138] Call Trace: [ 1313.775196][T20138] [ 1313.775204][T20138] dump_stack_lvl+0xe8/0x150 [ 1313.775235][T20138] should_fail_ex+0x412/0x560 [ 1313.775268][T20138] _copy_to_user+0x31/0xb0 [ 1313.775292][T20138] simple_read_from_buffer+0xe1/0x170 [ 1313.775324][T20138] proc_fail_nth_read+0x1bb/0x230 [ 1313.775352][T20138] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1313.775378][T20138] ? rw_verify_area+0x2a6/0x4d0 [ 1313.775396][T20138] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1313.775424][T20138] vfs_read+0x20c/0xa70 [ 1313.775442][T20138] ? fdget_pos+0x246/0x320 [ 1313.775463][T20138] ? __pfx___mutex_lock+0x10/0x10 [ 1313.775486][T20138] ? __pfx_vfs_read+0x10/0x10 [ 1313.775509][T20138] ? __fget_files+0x2a/0x420 [ 1313.775530][T20138] ? __fget_files+0x3a0/0x420 [ 1313.775546][T20138] ? __fget_files+0x2a/0x420 [ 1313.775570][T20138] ksys_read+0x150/0x270 [ 1313.775593][T20138] ? __pfx_ksys_read+0x10/0x10 [ 1313.775612][T20138] ? fput+0xa0/0xd0 [ 1313.775648][T20138] do_syscall_64+0x14d/0xf80 [ 1313.775669][T20138] ? trace_irq_disable+0x3b/0x150 [ 1313.775695][T20138] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1313.775715][T20138] ? clear_bhb_loop+0x40/0x90 [ 1313.775737][T20138] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1313.775756][T20138] RIP: 0033:0x7f69a6f5d04e [ 1313.775774][T20138] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1313.775791][T20138] RSP: 002b:00007f69a7e98fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1313.775811][T20138] RAX: ffffffffffffffda RBX: 00007f69a7e996c0 RCX: 00007f69a6f5d04e [ 1313.775825][T20138] RDX: 000000000000000f RSI: 00007f69a7e990a0 RDI: 0000000000000005 [ 1313.775837][T20138] RBP: 00007f69a7e99090 R08: 0000000000000000 R09: 0000000000000000 [ 1313.775849][T20138] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1313.775861][T20138] R13: 00007f69a7216038 R14: 00007f69a7215fa0 R15: 00007ffeb4877828 [ 1313.775890][T20138] [ 1313.779500][T20140] FAULT_INJECTION: forcing a failure. [ 1313.779500][T20140] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1313.835271][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5690 ms [ 1313.903596][T20140] CPU: 0 UID: 0 PID: 20140 Comm: syz.1.12491 Not tainted syzkaller #0 PREEMPT(full) [ 1313.903623][T20140] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1313.903635][T20140] Call Trace: [ 1313.903642][T20140] [ 1313.903651][T20140] dump_stack_lvl+0xe8/0x150 [ 1313.903682][T20140] should_fail_ex+0x412/0x560 [ 1313.903715][T20140] _copy_to_user+0x31/0xb0 [ 1313.903739][T20140] simple_read_from_buffer+0xe1/0x170 [ 1313.903770][T20140] proc_fail_nth_read+0x1bb/0x230 [ 1313.903798][T20140] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1313.903826][T20140] ? rw_verify_area+0x2a6/0x4d0 [ 1313.903847][T20140] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1313.903874][T20140] vfs_read+0x20c/0xa70 [ 1313.903893][T20140] ? fdget_pos+0x246/0x320 [ 1313.903916][T20140] ? __pfx___mutex_lock+0x10/0x10 [ 1313.903937][T20140] ? __pfx_vfs_read+0x10/0x10 [ 1313.903960][T20140] ? __fget_files+0x2a/0x420 [ 1313.903981][T20140] ? __fget_files+0x3a0/0x420 [ 1313.903997][T20140] ? __fget_files+0x2a/0x420 [ 1313.904023][T20140] ksys_read+0x150/0x270 [ 1313.904050][T20140] ? __pfx_ksys_read+0x10/0x10 [ 1313.904081][T20140] do_syscall_64+0x14d/0xf80 [ 1313.904102][T20140] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1313.904120][T20140] ? clear_bhb_loop+0x40/0x90 [ 1313.904142][T20140] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1313.904160][T20140] RIP: 0033:0x7f9a2155d04e [ 1313.904179][T20140] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1313.904194][T20140] RSP: 002b:00007f9a1f7edfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1313.904215][T20140] RAX: ffffffffffffffda RBX: 00007f9a1f7ee6c0 RCX: 00007f9a2155d04e [ 1313.904228][T20140] RDX: 000000000000000f RSI: 00007f9a1f7ee0a0 RDI: 0000000000000005 [ 1313.904240][T20140] RBP: 00007f9a1f7ee090 R08: 0000000000000000 R09: 0000000000000000 [ 1313.904252][T20140] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1313.904264][T20140] R13: 00007f9a21816038 R14: 00007f9a21815fa0 R15: 00007ffe7693dcf8 [ 1313.904293][T20140] [ 1313.916819][T20131] gre0 speed is unknown, defaulting to 1000 [ 1313.917511][ C1] lec:lec_tx_timeout: lec0 [ 1314.939893][T20177] netlink: 'syz.2.12504': attribute type 10 has an invalid length. [ 1314.976227][T20177] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 1315.358683][T20188] __nla_validate_parse: 8 callbacks suppressed [ 1315.358705][T20188] netlink: 112 bytes leftover after parsing attributes in process `syz.2.12506'. [ 1315.462448][T20181] gre0 speed is unknown, defaulting to 1000 [ 1315.555479][T20196] netlink: 244 bytes leftover after parsing attributes in process `syz.4.12510'. [ 1315.739174][T20204] netlink: 28 bytes leftover after parsing attributes in process `syz.1.12512'. [ 1315.777772][T20206] netlink: 4 bytes leftover after parsing attributes in process `syz.5.12513'. [ 1315.984189][T20215] Cannot find set identified by id 0 to match [ 1316.031347][T20217] netlink: 24 bytes leftover after parsing attributes in process `syz.5.12517'. [ 1316.061724][T20218] netlink: 'syz.2.12515': attribute type 21 has an invalid length. [ 1316.273157][T20220] netlink: 12 bytes leftover after parsing attributes in process `syz.5.12518'. [ 1316.797527][T16987] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1316.991197][T20240] netlink: 28 bytes leftover after parsing attributes in process `syz.2.12526'. [ 1317.047460][T20241] netlink: 112 bytes leftover after parsing attributes in process `syz.0.12525'. [ 1317.134063][T20235] gre0 speed is unknown, defaulting to 1000 [ 1317.406612][T20246] netlink: 24 bytes leftover after parsing attributes in process `syz.5.12528'. [ 1317.620491][T20258] netlink: 20 bytes leftover after parsing attributes in process `syz.2.12533'. [ 1317.742330][T20237] gre0 speed is unknown, defaulting to 1000 [ 1318.105406][T20269] net_ratelimit: 10 callbacks suppressed [ 1318.105428][T20269] openvswitch: netlink: Flow actions attr not present in new flow. [ 1318.251304][T20251] gre0 speed is unknown, defaulting to 1000 [ 1318.717662][ T12] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1319.428686][T20308] FAULT_INJECTION: forcing a failure. [ 1319.428686][T20308] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1319.451455][T20308] CPU: 0 UID: 0 PID: 20308 Comm: syz.2.12551 Not tainted syzkaller #0 PREEMPT(full) [ 1319.451483][T20308] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1319.451496][T20308] Call Trace: [ 1319.451504][T20308] [ 1319.451513][T20308] dump_stack_lvl+0xe8/0x150 [ 1319.451544][T20308] should_fail_ex+0x412/0x560 [ 1319.451577][T20308] _copy_to_user+0x31/0xb0 [ 1319.451602][T20308] simple_read_from_buffer+0xe1/0x170 [ 1319.451634][T20308] proc_fail_nth_read+0x1bb/0x230 [ 1319.451664][T20308] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1319.451693][T20308] ? rw_verify_area+0x2a6/0x4d0 [ 1319.451714][T20308] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1319.451742][T20308] vfs_read+0x20c/0xa70 [ 1319.451771][T20308] ? __pfx_vfs_read+0x10/0x10 [ 1319.451792][T20308] ? _copy_from_user+0x94/0xb0 [ 1319.451814][T20308] ? raw_setsockopt+0x996/0x12f0 [ 1319.451834][T20308] ? fd_install+0x94/0x3d0 [ 1319.451861][T20308] ? __pfx_aa_sk_perm+0x10/0x10 [ 1319.451892][T20308] ksys_read+0x150/0x270 [ 1319.451913][T20308] ? __pfx_ksys_read+0x10/0x10 [ 1319.451944][T20308] do_syscall_64+0x14d/0xf80 [ 1319.451966][T20308] ? trace_irq_disable+0x3b/0x150 [ 1319.451983][T20308] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1319.452003][T20308] ? clear_bhb_loop+0x40/0x90 [ 1319.452027][T20308] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1319.452046][T20308] RIP: 0033:0x7f1c5cf5d04e [ 1319.452064][T20308] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1319.452081][T20308] RSP: 002b:00007f1c5deccfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1319.452102][T20308] RAX: ffffffffffffffda RBX: 00007f1c5decd6c0 RCX: 00007f1c5cf5d04e [ 1319.452116][T20308] RDX: 000000000000000f RSI: 00007f1c5decd0a0 RDI: 0000000000000004 [ 1319.452135][T20308] RBP: 00007f1c5decd090 R08: 0000000000000000 R09: 0000000000000000 [ 1319.452148][T20308] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1319.452160][T20308] R13: 00007f1c5d216038 R14: 00007f1c5d215fa0 R15: 00007ffe85385a68 [ 1319.452190][T20308] [ 1319.924944][T20321] tipc: Started in network mode [ 1319.931563][T20321] tipc: Node identity 4246, cluster identity 4711 [ 1319.949530][T20321] tipc: Node number set to 16966 [ 1319.976760][T20321] gre0 speed is unknown, defaulting to 1000 [ 1320.363795][T20333] openvswitch: netlink: IPv4 tun info is not correct [ 1320.552989][T20347] __nla_validate_parse: 9 callbacks suppressed [ 1320.553018][T20347] netlink: 112 bytes leftover after parsing attributes in process `syz.4.12566'. [ 1320.553187][T20343] gre0 speed is unknown, defaulting to 1000 [ 1321.361399][T20391] netlink: 8 bytes leftover after parsing attributes in process `syz.5.12583'. [ 1321.420614][T20394] netlink: 'syz.2.12585': attribute type 39 has an invalid length. [ 1321.463170][T20395] tipc: Started in network mode [ 1321.468490][T20395] tipc: Node identity c231faceaf1b, cluster identity 4711 [ 1321.476581][T20395] tipc: Enabled bearer , priority 0 [ 1321.487620][T20395] syzkaller0: entered promiscuous mode [ 1321.493229][T20395] syzkaller0: entered allmulticast mode [ 1321.521270][T20395] tipc: Resetting bearer [ 1321.540762][T20393] tipc: Resetting bearer [ 1321.569135][T20393] tipc: Disabling bearer [ 1322.065899][T20403] bond1: option active_slave: mode dependency failed, not supported in mode balance-xor(2) [ 1322.090505][T20403] bond1 (unregistering): Released all slaves [ 1322.114618][T20413] netlink: 'syz.1.12591': attribute type 3 has an invalid length. [ 1322.153627][T20417] dummy0: mtu less than device minimum [ 1322.191468][T20421] netlink: 644 bytes leftover after parsing attributes in process `syz.4.12592'. [ 1322.252997][T20427] netlink: 24 bytes leftover after parsing attributes in process `syz.1.12595'. [ 1322.461519][T20435] gre0 speed is unknown, defaulting to 1000 [ 1322.499265][T20442] "syz.0.12600" (20442) uses obsolete ecb(arc4) skcipher [ 1322.559160][ T5942] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1322.980999][T20462] netlink: 'syz.4.12606': attribute type 2 has an invalid length. [ 1322.996036][T20462] hmac(sha224: entered promiscuous mode [ 1323.561438][T20497] netlink: 12 bytes leftover after parsing attributes in process `syz.4.12617'. [ 1323.641207][T20497] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1323.668361][T20501] netlink: 12 bytes leftover after parsing attributes in process `syz.4.12617'. [ 1323.700393][T20500] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12618'. [ 1323.715446][T20509] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12621'. [ 1323.803930][T20507] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12619'. [ 1323.820028][T20507] netlink: 144 bytes leftover after parsing attributes in process `syz.0.12619'. [ 1323.830834][T20507] netlink: 'syz.0.12619': attribute type 14 has an invalid length. [ 1323.849101][ T12] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1323.982381][T20518] netlink: 'syz.1.12622': attribute type 7 has an invalid length. [ 1324.855733][T20569] nbd1: detected capacity change from 0 to 63 [ 1324.870112][T20569] block nbd0: NBD_DISCONNECT [ 1324.885162][T20569] block nbd0: Send disconnect failed -32 [ 1324.890956][T20569] block nbd0: shutting down sockets [ 1324.913074][ T5824] block nbd1: Receive control failed (result -104) [ 1324.964094][T16987] bridge_slave_1: left allmulticast mode [ 1324.977769][T16987] bridge_slave_1: left promiscuous mode [ 1324.996899][T16987] bridge0: port 2(bridge_slave_1) entered disabled state [ 1325.020671][T16987] bridge_slave_0: left allmulticast mode [ 1325.031886][T16987] bridge_slave_0: left promiscuous mode [ 1325.045372][T16987] bridge0: port 1(bridge_slave_0) entered disabled state [ 1325.135378][T20578] netlink: 'syz.5.12647': attribute type 1 has an invalid length. [ 1325.394616][T16987] bond8 (unregistering): (slave gretap1): Releasing active interface [ 1325.496339][T16987] bond10 (unregistering): (slave gretap2): Releasing active interface [ 1325.523948][T16987] bond12 (unregistering): (slave gretap3): Releasing active interface [ 1325.563509][T16987] bond11 (unregistering): (slave geneve3): Releasing active interface [ 1325.597563][T16987] bridge0 (unregistering): left promiscuous mode [ 1325.699221][T16987] bond2 (unregistering): (slave bridge3): Releasing backup interface [ 1325.707572][T16987] bridge3 (unregistering): left promiscuous mode [ 1325.764326][T16987] bond3 (unregistering): (slave bridge4): Releasing active interface [ 1325.809851][T16987] bond4 (unregistering): (slave bridge5): Releasing active interface [ 1325.929359][T16987] bond14 (unregistering): (slave bridge8): Releasing backup interface [ 1325.938312][T16987] bridge8 (unregistering): left promiscuous mode [ 1325.944661][T16987] bridge8 (unregistering): left allmulticast mode [ 1325.994662][T16987] bond0 (unregistering): left promiscuous mode [ 1326.001535][T16987] bond_slave_0: left promiscuous mode [ 1326.008271][T16987] bond_slave_1: left promiscuous mode [ 1326.018875][T16987] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1326.032117][T16987] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1326.041752][T16987] bond0 (unregistering): Released all slaves [ 1326.051504][T16987] bond1 (unregistering): Released all slaves [ 1326.066295][T16987] bond2 (unregistering): Released all slaves [ 1326.082736][T16987] bond3 (unregistering): (slave veth3): Releasing active interface [ 1326.092331][T16987] bond3 (unregistering): (slave veth5): Releasing active interface [ 1326.104724][T16987] bond3 (unregistering): Released all slaves [ 1326.121695][T16987] bond4 (unregistering): Released all slaves [ 1326.134970][T16987] bond5 (unregistering): Released all slaves [ 1326.147876][T16987] bond6 (unregistering): Released all slaves [ 1326.161560][T16987] bond7 (unregistering): Released all slaves [ 1326.186693][T16987] bond8 (unregistering): Released all slaves [ 1326.199300][T16987] bond9 (unregistering): Released all slaves [ 1326.212161][T16987] bond10 (unregistering): Released all slaves [ 1326.225845][T16987] bond11 (unregistering): Released all slaves [ 1326.241069][T16987] bond12 (unregistering): Released all slaves [ 1326.254762][T16987] bond13 (unregistering): Released all slaves [ 1326.284775][T16987] bond14 (unregistering): Released all slaves [ 1326.299624][T16987] bond15 (unregistering): Released all slaves [ 1326.589201][T16987] tipc: Disabling bearer [ 1326.627341][T16987] tipc: Disabling bearer [ 1326.633940][T16987] tipc: Left network mode [ 1326.642686][T20609] RDS: rds_bind could not find a transport for ::ffff:100.1.1.2, load rds_tcp or rds_rdma? [ 1326.762811][T20621] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 1327.061354][T20635] __nla_validate_parse: 2 callbacks suppressed [ 1327.061375][T20635] netlink: 12 bytes leftover after parsing attributes in process `syz.4.12667'. [ 1327.099665][T20635] FAULT_INJECTION: forcing a failure. [ 1327.099665][T20635] name failslab, interval 1, probability 0, space 0, times 0 [ 1327.116445][T20635] CPU: 0 UID: 0 PID: 20635 Comm: syz.4.12667 Not tainted syzkaller #0 PREEMPT(full) [ 1327.116471][T20635] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1327.116482][T20635] Call Trace: [ 1327.116489][T20635] [ 1327.116497][T20635] dump_stack_lvl+0xe8/0x150 [ 1327.116525][T20635] should_fail_ex+0x412/0x560 [ 1327.116555][T20635] should_failslab+0xa8/0x100 [ 1327.116578][T20635] __kmalloc_noprof+0xe8/0x760 [ 1327.116598][T20635] ? fib_nl2rule+0x2e9/0x1a00 [ 1327.116626][T20635] fib_nl2rule+0x2e9/0x1a00 [ 1327.116653][T20635] ? __pfx_fib_nl2rule+0x10/0x10 [ 1327.116678][T20635] ? __nla_parse+0x40/0x60 [ 1327.116699][T20635] fib_delrule+0x328/0x1d70 [ 1327.116721][T20635] ? kasan_quarantine_put+0xbb/0x1f0 [ 1327.116739][T20635] ? lockdep_hardirqs_on+0x7a/0x110 [ 1327.116761][T20635] ? kmem_cache_free+0x187/0x630 [ 1327.116779][T20635] ? nlmon_xmit+0xb0/0x100 [ 1327.116814][T20635] ? __pfx_fib_delrule+0x10/0x10 [ 1327.116866][T20635] ? __pfx_fib_nl_delrule+0x10/0x10 [ 1327.116889][T20635] rtnetlink_rcv_msg+0x7d5/0xbe0 [ 1327.116913][T20635] ? rtnetlink_rcv_msg+0x1b9/0xbe0 [ 1327.116932][T20635] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1327.116955][T20635] ? ref_tracker_free+0x693/0x840 [ 1327.116975][T20635] ? __pfx_ref_tracker_free+0x10/0x10 [ 1327.117000][T20635] netlink_rcv_skb+0x232/0x4b0 [ 1327.117023][T20635] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1327.117045][T20635] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1327.117077][T20635] ? netlink_deliver_tap+0x2e/0x1b0 [ 1327.117099][T20635] ? netlink_deliver_tap+0x2e/0x1b0 [ 1327.117124][T20635] netlink_unicast+0x75c/0x8e0 [ 1327.117154][T20635] netlink_sendmsg+0x813/0xb40 [ 1327.117183][T20635] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1327.117207][T20635] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1327.117225][T20635] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1327.117248][T20635] ____sys_sendmsg+0x972/0x9f0 [ 1327.117279][T20635] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1327.117310][T20635] ? import_iovec+0x73/0xa0 [ 1327.117332][T20635] ___sys_sendmsg+0x2a5/0x360 [ 1327.117367][T20635] ? __pfx____sys_sendmsg+0x10/0x10 [ 1327.117421][T20635] ? __fget_files+0x2a/0x420 [ 1327.117436][T20635] ? __fget_files+0x3a0/0x420 [ 1327.117460][T20635] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1327.117485][T20635] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1327.117517][T20635] ? __pfx_ksys_write+0x10/0x10 [ 1327.117545][T20635] do_syscall_64+0x14d/0xf80 [ 1327.117564][T20635] ? trace_irq_disable+0x3b/0x150 [ 1327.117579][T20635] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1327.117595][T20635] ? clear_bhb_loop+0x40/0x90 [ 1327.117616][T20635] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1327.117632][T20635] RIP: 0033:0x7f69a6f9c819 [ 1327.117650][T20635] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1327.117665][T20635] RSP: 002b:00007f69a7e99028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1327.117683][T20635] RAX: ffffffffffffffda RBX: 00007f69a7215fa0 RCX: 00007f69a6f9c819 [ 1327.117696][T20635] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000003 [ 1327.117707][T20635] RBP: 00007f69a7e99090 R08: 0000000000000000 R09: 0000000000000000 [ 1327.117717][T20635] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1327.117727][T20635] R13: 00007f69a7216038 R14: 00007f69a7215fa0 R15: 00007ffeb4877828 [ 1327.117755][T20635] [ 1327.606696][T17185] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1327.746037][T20657] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1327.757137][T20657] netlink: 84 bytes leftover after parsing attributes in process `syz.1.12671'. [ 1327.835640][ T5824] Bluetooth: hci1: command 0x0406 tx timeout [ 1327.926384][T20662] netlink: 40 bytes leftover after parsing attributes in process `syz.2.12675'. [ 1327.956692][ T5828] [ 1327.959063][ T5828] ====================================================== [ 1327.966078][ T5828] WARNING: possible circular locking dependency detected [ 1327.973108][ T5828] syzkaller #0 Not tainted [ 1327.977516][ T5828] ------------------------------------------------------ [ 1327.984611][ T5828] kworker/u9:4/5828 is trying to acquire lock: [ 1327.990757][ T5828] ffff88801bae5a20 (&root->kernfs_iattr_rwsem){++++}-{4:4}, at: kernfs_unlink_sibling+0x71/0x180 [ 1328.001280][ T5828] [ 1328.001280][ T5828] but task is already holding lock: [ 1328.008637][ T5828] ffff88801bae5988 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_remove_by_name_ns+0x3d/0x130 [ 1328.018897][ T5828] [ 1328.018897][ T5828] which lock already depends on the new lock. [ 1328.018897][ T5828] [ 1328.029651][ T5828] [ 1328.029651][ T5828] the existing dependency chain (in reverse order) is: [ 1328.038665][ T5828] [ 1328.038665][ T5828] -> #10 (&root->kernfs_rwsem){++++}-{4:4}: [ 1328.046737][ T5828] down_write+0x96/0x200 [ 1328.051501][ T5828] kernfs_add_one+0x41/0x5c0 [ 1328.056601][ T5828] kernfs_create_dir_ns+0xde/0x130 [ 1328.062228][ T5828] internal_create_group+0x425/0x1180 [ 1328.068158][ T5828] cpuhp_invoke_callback+0x445/0x860 [ 1328.073977][ T5828] cpuhp_issue_call+0x430/0x7a0 [ 1328.079346][ T5828] __cpuhp_setup_state_cpuslocked+0x3d9/0x6b0 [ 1328.085932][ T5828] __cpuhp_setup_state+0x3f/0x60 [ 1328.091391][ T5828] do_one_initcall+0x250/0x8d0 [ 1328.096669][ T5828] do_initcall_level+0x104/0x190 [ 1328.102126][ T5828] do_initcalls+0x59/0xa0 [ 1328.106976][ T5828] kernel_init_freeable+0x2a6/0x3e0 [ 1328.112691][ T5828] kernel_init+0x1d/0x1d0 [ 1328.117538][ T5828] ret_from_fork+0x51e/0xb90 [ 1328.122641][ T5828] ret_from_fork_asm+0x1a/0x30 [ 1328.127934][ T5828] [ 1328.127934][ T5828] -> #9 (cpuhp_state_mutex){+.+.}-{4:4}: [ 1328.135757][ T5828] [ 1328.135757][ T5828] -> #8 (cpu_hotplug_lock){++++}-{0:0}: [ 1328.143569][ T5828] cpus_read_lock+0x42/0x160 [ 1328.148677][ T5828] static_key_slow_inc+0x12/0x30 [ 1328.154150][ T5828] tcp_md5_do_add+0x1d4/0x390 [ 1328.159343][ T5828] tcp_v6_parse_md5_keys+0x562/0x680 [ 1328.165230][ T5828] do_tcp_setsockopt+0x12ec/0x2060 [ 1328.170859][ T5828] do_sock_setsockopt+0x17c/0x1b0 [ 1328.176419][ T5828] __x64_sys_setsockopt+0x13d/0x1b0 [ 1328.182149][ T5828] do_syscall_64+0x14d/0xf80 [ 1328.187425][ T5828] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1328.193844][ T5828] [ 1328.193844][ T5828] -> #7 (sk_lock-AF_INET6){+.+.}-{0:0}: [ 1328.201569][ T5828] lock_sock_nested+0x41/0x100 [ 1328.206859][ T5828] inet_shutdown+0x6a/0x390 [ 1328.211882][ T5828] nbd_mark_nsock_dead+0x2e9/0x560 [ 1328.217511][ T5828] recv_work+0x1c7f/0x1d90 [ 1328.222444][ T5828] process_scheduled_works+0xb6e/0x18c0 [ 1328.228504][ T5828] worker_thread+0xa53/0xfc0 [ 1328.233610][ T5828] kthread+0x388/0x470 [ 1328.238188][ T5828] ret_from_fork+0x51e/0xb90 [ 1328.243295][ T5828] ret_from_fork_asm+0x1a/0x30 [ 1328.248579][ T5828] [ 1328.248579][ T5828] -> #6 (&nsock->tx_lock){+.+.}-{4:4}: [ 1328.256223][ T5828] __mutex_lock+0x19f/0x1300 [ 1328.261414][ T5828] nbd_queue_rq+0x37b/0x1100 [ 1328.266519][ T5828] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 1328.272629][ T5828] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 1328.279481][ T5828] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 1328.285983][ T5828] blk_mq_run_hw_queue+0x348/0x4f0 [ 1328.291608][ T5828] blk_mq_dispatch_list+0xd16/0xe10 [ 1328.297406][ T5828] blk_mq_flush_plug_list+0x48d/0x570 [ 1328.303296][ T5828] __blk_flush_plug+0x3ed/0x4d0 [ 1328.308660][ T5828] __submit_bio+0x28d/0x580 [ 1328.313723][ T5828] submit_bio_noacct_nocheck+0x2f4/0xa70 [ 1328.319869][ T5828] block_read_full_folio+0x599/0x830 [ 1328.325764][ T5828] filemap_read_folio+0x137/0x3b0 [ 1328.331303][ T5828] do_read_cache_folio+0x358/0x590 [ 1328.336927][ T5828] read_part_sector+0xb6/0x2b0 [ 1328.342217][ T5828] adfspart_check_ICS+0xa5/0xa40 [ 1328.347667][ T5828] bdev_disk_changed+0x7ba/0x1550 [ 1328.353208][ T5828] blkdev_get_whole+0x380/0x510 [ 1328.358573][ T5828] bdev_open+0x31e/0xd30 [ 1328.363329][ T5828] blkdev_open+0x470/0x610 [ 1328.368259][ T5828] do_dentry_open+0x785/0x14e0 [ 1328.373551][ T5828] vfs_open+0x3b/0x340 [ 1328.378151][ T5828] path_openat+0x2e08/0x3860 [ 1328.383252][ T5828] do_file_open+0x23e/0x4a0 [ 1328.388278][ T5828] do_sys_openat2+0x113/0x200 [ 1328.393488][ T5828] __x64_sys_openat+0x138/0x170 [ 1328.398957][ T5828] do_syscall_64+0x14d/0xf80 [ 1328.404071][ T5828] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1328.410477][ T5828] [ 1328.410477][ T5828] -> #5 (&cmd->lock){+.+.}-{4:4}: [ 1328.417679][ T5828] __mutex_lock+0x19f/0x1300 [ 1328.422820][ T5828] nbd_queue_rq+0xc6/0x1100 [ 1328.427836][ T5828] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 1328.433906][ T5828] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 1328.440745][ T5828] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 1328.447246][ T5828] blk_mq_run_hw_queue+0x348/0x4f0 [ 1328.452879][ T5828] blk_mq_dispatch_list+0xd16/0xe10 [ 1328.458592][ T5828] blk_mq_flush_plug_list+0x48d/0x570 [ 1328.464496][ T5828] __blk_flush_plug+0x3ed/0x4d0 [ 1328.469857][ T5828] __submit_bio+0x28d/0x580 [ 1328.474874][ T5828] submit_bio_noacct_nocheck+0x2f4/0xa70 [ 1328.481022][ T5828] block_read_full_folio+0x599/0x830 [ 1328.486828][ T5828] filemap_read_folio+0x137/0x3b0 [ 1328.492391][ T5828] do_read_cache_folio+0x358/0x590 [ 1328.498054][ T5828] read_part_sector+0xb6/0x2b0 [ 1328.503334][ T5828] adfspart_check_ICS+0xa5/0xa40 [ 1328.508786][ T5828] bdev_disk_changed+0x7ba/0x1550 [ 1328.514329][ T5828] blkdev_get_whole+0x380/0x510 [ 1328.519692][ T5828] bdev_open+0x31e/0xd30 [ 1328.524470][ T5828] blkdev_open+0x470/0x610 [ 1328.529400][ T5828] do_dentry_open+0x785/0x14e0 [ 1328.534680][ T5828] vfs_open+0x3b/0x340 [ 1328.539261][ T5828] path_openat+0x2e08/0x3860 [ 1328.544376][ T5828] do_file_open+0x23e/0x4a0 [ 1328.549391][ T5828] do_sys_openat2+0x113/0x200 [ 1328.554583][ T5828] __x64_sys_openat+0x138/0x170 [ 1328.559951][ T5828] do_syscall_64+0x14d/0xf80 [ 1328.565055][ T5828] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1328.571457][ T5828] [ 1328.571457][ T5828] -> #4 (set->srcu){.+.+}-{0:0}: [ 1328.578572][ T5828] __synchronize_srcu+0xca/0x300 [ 1328.584033][ T5828] elevator_switch+0x1e8/0x7a0 [ 1328.589332][ T5828] elevator_change+0x2cc/0x450 [ 1328.594616][ T5828] elevator_set_default+0x36c/0x430 [ 1328.600329][ T5828] blk_register_queue+0x366/0x430 [ 1328.605873][ T5828] __add_disk+0x677/0xd50 [ 1328.610722][ T5828] add_disk_fwnode+0xfb/0x480 [ 1328.615913][ T5828] nbd_dev_add+0x72c/0xb50 [ 1328.620840][ T5828] nbd_init+0x168/0x1f0 [ 1328.625552][ T5828] do_one_initcall+0x250/0x8d0 [ 1328.630834][ T5828] do_initcall_level+0x104/0x190 [ 1328.636285][ T5828] do_initcalls+0x59/0xa0 [ 1328.641124][ T5828] kernel_init_freeable+0x2a6/0x3e0 [ 1328.646833][ T5828] kernel_init+0x1d/0x1d0 [ 1328.651723][ T5828] ret_from_fork+0x51e/0xb90 [ 1328.656834][ T5828] ret_from_fork_asm+0x1a/0x30 [ 1328.662111][ T5828] [ 1328.662111][ T5828] -> #3 (&q->elevator_lock){+.+.}-{4:4}: [ 1328.670006][ T5828] __mutex_lock+0x19f/0x1300 [ 1328.675198][ T5828] elevator_change+0x1b3/0x450 [ 1328.680488][ T5828] elevator_set_none+0xb5/0x140 [ 1328.685849][ T5828] blk_mq_update_nr_hw_queues+0x5e7/0x1a60 [ 1328.692176][ T5828] nbd_start_device+0x17f/0xb10 [ 1328.697536][ T5828] nbd_genl_connect+0x165b/0x1cf0 [ 1328.703071][ T5828] genl_family_rcv_msg_doit+0x22a/0x330 [ 1328.709126][ T5828] genl_rcv_msg+0x61c/0x7a0 [ 1328.714140][ T5828] netlink_rcv_skb+0x232/0x4b0 [ 1328.719416][ T5828] genl_rcv+0x28/0x40 [ 1328.723907][ T5828] netlink_unicast+0x75c/0x8e0 [ 1328.729183][ T5828] netlink_sendmsg+0x813/0xb40 [ 1328.734461][ T5828] ____sys_sendmsg+0x972/0x9f0 [ 1328.739737][ T5828] ___sys_sendmsg+0x2a5/0x360 [ 1328.744928][ T5828] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1328.750383][ T5828] do_syscall_64+0x14d/0xf80 [ 1328.755483][ T5828] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1328.761909][ T5828] [ 1328.761909][ T5828] -> #2 (&q->q_usage_counter(io)#51){++++}-{0:0}: [ 1328.770508][ T5828] blk_alloc_queue+0x546/0x680 [ 1328.775785][ T5828] __blk_mq_alloc_disk+0x197/0x390 [ 1328.781414][ T5828] nbd_dev_add+0x499/0xb50 [ 1328.786343][ T5828] nbd_init+0x168/0x1f0 [ 1328.791019][ T5828] do_one_initcall+0x250/0x8d0 [ 1328.796299][ T5828] do_initcall_level+0x104/0x190 [ 1328.801760][ T5828] do_initcalls+0x59/0xa0 [ 1328.806686][ T5828] kernel_init_freeable+0x2a6/0x3e0 [ 1328.812422][ T5828] kernel_init+0x1d/0x1d0 [ 1328.817266][ T5828] ret_from_fork+0x51e/0xb90 [ 1328.822375][ T5828] ret_from_fork_asm+0x1a/0x30 [ 1328.827655][ T5828] [ 1328.827655][ T5828] -> #1 (fs_reclaim){+.+.}-{0:0}: [ 1328.834855][ T5828] fs_reclaim_acquire+0x71/0x100 [ 1328.840312][ T5828] kmem_cache_alloc_noprof+0x40/0x650 [ 1328.846195][ T5828] __kernfs_iattrs+0xdf/0x340 [ 1328.851428][ T5828] kernfs_iop_setattr+0xea/0x3f0 [ 1328.856918][ T5828] notify_change+0xc1a/0xf40 [ 1328.862026][ T5828] do_truncate+0x1c2/0x250 [ 1328.866961][ T5828] path_openat+0x2f89/0x3860 [ 1328.872063][ T5828] do_file_open+0x23e/0x4a0 [ 1328.877076][ T5828] do_sys_openat2+0x113/0x200 [ 1328.882270][ T5828] __x64_sys_openat+0x138/0x170 [ 1328.887638][ T5828] do_syscall_64+0x14d/0xf80 [ 1328.892743][ T5828] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1328.899149][ T5828] [ 1328.899149][ T5828] -> #0 (&root->kernfs_iattr_rwsem){++++}-{4:4}: [ 1328.907653][ T5828] __lock_acquire+0x15a5/0x2cf0 [ 1328.913021][ T5828] lock_acquire+0xf0/0x2e0 [ 1328.917949][ T5828] down_write+0x96/0x200 [ 1328.922711][ T5828] kernfs_unlink_sibling+0x71/0x180 [ 1328.928418][ T5828] __kernfs_remove+0x3e7/0x660 [ 1328.933696][ T5828] kernfs_remove_by_name_ns+0xaf/0x130 [ 1328.939665][ T5828] sysfs_unmerge_group+0xd4/0x140 [ 1328.945209][ T5828] dpm_sysfs_remove+0x76/0xd0 [ 1328.950412][ T5828] device_del+0x250/0x8f0 [ 1328.955254][ T5828] device_unregister+0x21/0xf0 [ 1328.960528][ T5828] hci_conn_del+0xc36/0x1230 [ 1328.965627][ T5828] hci_abort_conn_sync+0xdd0/0x1190 [ 1328.971332][ T5828] hci_cmd_sync_work+0x213/0x400 [ 1328.976779][ T5828] process_scheduled_works+0xb6e/0x18c0 [ 1328.982840][ T5828] worker_thread+0xa53/0xfc0 [ 1328.987949][ T5828] kthread+0x388/0x470 [ 1328.992527][ T5828] ret_from_fork+0x51e/0xb90 [ 1328.997629][ T5828] ret_from_fork_asm+0x1a/0x30 [ 1329.002909][ T5828] [ 1329.002909][ T5828] other info that might help us debug this: [ 1329.002909][ T5828] [ 1329.013128][ T5828] Chain exists of: [ 1329.013128][ T5828] &root->kernfs_iattr_rwsem --> cpuhp_state_mutex --> &root->kernfs_rwsem [ 1329.013128][ T5828] [ 1329.027542][ T5828] Possible unsafe locking scenario: [ 1329.027542][ T5828] [ 1329.034978][ T5828] CPU0 CPU1 [ 1329.040344][ T5828] ---- ---- [ 1329.045694][ T5828] lock(&root->kernfs_rwsem); [ 1329.050454][ T5828] lock(cpuhp_state_mutex); [ 1329.057553][ T5828] lock(&root->kernfs_rwsem); [ 1329.064826][ T5828] lock(&root->kernfs_iattr_rwsem); [ 1329.070101][ T5828] [ 1329.070101][ T5828] *** DEADLOCK *** [ 1329.070101][ T5828] [ 1329.078229][ T5828] 5 locks held by kworker/u9:4/5828: [ 1329.083502][ T5828] #0: ffff888031180948 ((wq_completion)hci1){+.+.}-{0:0}, at: process_scheduled_works+0xa52/0x18c0 [ 1329.094291][ T5828] #1: ffffc90003e7fc40 ((work_completion)(&hdev->cmd_sync_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa8d/0x18c0 [ 1329.106814][ T5828] #2: ffff888078e74ec0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_cmd_sync_work+0x1d3/0x400 [ 1329.116646][ T5828] #3: ffff888078e740c0 (&hdev->lock){+.+.}-{4:4}, at: hci_abort_conn_sync+0xa6f/0x1190 [ 1329.126377][ T5828] #4: ffff88801bae5988 (&root->kernfs_rwsem){++++}-{4:4}, at: kernfs_remove_by_name_ns+0x3d/0x130 [ 1329.137070][ T5828] [ 1329.137070][ T5828] stack backtrace: [ 1329.142955][ T5828] CPU: 0 UID: 0 PID: 5828 Comm: kworker/u9:4 Not tainted syzkaller #0 PREEMPT(full) [ 1329.142973][ T5828] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1329.142984][ T5828] Workqueue: hci1 hci_cmd_sync_work [ 1329.143004][ T5828] Call Trace: [ 1329.143012][ T5828] [ 1329.143020][ T5828] dump_stack_lvl+0xe8/0x150 [ 1329.143041][ T5828] print_circular_bug+0x2e1/0x300 [ 1329.143065][ T5828] check_noncircular+0x12e/0x150 [ 1329.143087][ T5828] __lock_acquire+0x15a5/0x2cf0 [ 1329.143108][ T5828] ? __lock_acquire+0x6b5/0x2cf0 [ 1329.143129][ T5828] lock_acquire+0xf0/0x2e0 [ 1329.143146][ T5828] ? kernfs_unlink_sibling+0x71/0x180 [ 1329.143165][ T5828] down_write+0x96/0x200 [ 1329.143184][ T5828] ? kernfs_unlink_sibling+0x71/0x180 [ 1329.143199][ T5828] ? __pfx_down_write+0x10/0x10 [ 1329.143216][ T5828] ? kernfs_root+0x1c/0x230 [ 1329.143236][ T5828] ? kernfs_root+0x1c/0x230 [ 1329.143254][ T5828] ? kernfs_root+0x1c/0x230 [ 1329.143273][ T5828] ? kernfs_root+0x1ea/0x230 [ 1329.143293][ T5828] kernfs_unlink_sibling+0x71/0x180 [ 1329.143309][ T5828] __kernfs_remove+0x3e7/0x660 [ 1329.143325][ T5828] kernfs_remove_by_name_ns+0xaf/0x130 [ 1329.143341][ T5828] sysfs_unmerge_group+0xd4/0x140 [ 1329.143363][ T5828] dpm_sysfs_remove+0x76/0xd0 [ 1329.143384][ T5828] device_del+0x250/0x8f0 [ 1329.143402][ T5828] ? klist_iter_exit+0xc1/0x100 [ 1329.143420][ T5828] ? __pfx_skb_queue_purge_reason+0x10/0x10 [ 1329.143438][ T5828] ? __pfx_device_del+0x10/0x10 [ 1329.143455][ T5828] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1329.143474][ T5828] device_unregister+0x21/0xf0 [ 1329.143493][ T5828] hci_conn_del+0xc36/0x1230 [ 1329.143508][ T5828] ? hci_abort_conn_sync+0xa7b/0x1190 [ 1329.143523][ T5828] hci_abort_conn_sync+0xdd0/0x1190 [ 1329.143539][ T5828] ? __pfx_hci_abort_conn_sync+0x10/0x10 [ 1329.143554][ T5828] ? abort_conn_sync+0x26/0x210 [ 1329.143572][ T5828] ? abort_conn_sync+0x26/0x210 [ 1329.143587][ T5828] ? abort_conn_sync+0x19c/0x210 [ 1329.143602][ T5828] ? __pfx_abort_conn_sync+0x10/0x10 [ 1329.143619][ T5828] hci_cmd_sync_work+0x213/0x400 [ 1329.143638][ T5828] ? process_scheduled_works+0xa8d/0x18c0 [ 1329.143657][ T5828] process_scheduled_works+0xb6e/0x18c0 [ 1329.143684][ T5828] ? __pfx_process_scheduled_works+0x10/0x10 [ 1329.143704][ T5828] ? assign_work+0x3d5/0x5e0 [ 1329.143723][ T5828] worker_thread+0xa53/0xfc0 [ 1329.143749][ T5828] kthread+0x388/0x470 [ 1329.143763][ T5828] ? __pfx_worker_thread+0x10/0x10 [ 1329.143780][ T5828] ? __pfx_kthread+0x10/0x10 [ 1329.143794][ T5828] ret_from_fork+0x51e/0xb90 [ 1329.143814][ T5828] ? __pfx_ret_from_fork+0x10/0x10 [ 1329.143831][ T5828] ? __switch_to+0xc7d/0x1450 [ 1329.143848][ T5828] ? __pfx_kthread+0x10/0x10 [ 1329.143861][ T5828] ret_from_fork_asm+0x1a/0x30 [ 1329.143886][ T5828] [ 1329.423510][ T12] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1329.557478][T16987] hsr_slave_0: left promiscuous mode [ 1329.563380][T16987] hsr_slave_1: left promiscuous mode [ 1329.570166][T16987] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1329.597249][T16987] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1329.735756][T16987] team0 (unregistering): Port device team_slave_1 removed [ 1329.768362][T16987] team0 (unregistering): Port device dummy0 removed [ 1330.070421][T16987] IPVS: stop unused estimator thread 0... [ 1332.795492][ T12] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1333.915289][ T1704] block nbd1: Connection timed out, retrying (0/1 alive) [ 1333.922399][ T1704] block nbd1: Connection timed out, retrying (0/1 alive) [ 1333.929874][ T1704] block nbd1: Connection timed out, retrying (0/1 alive) [ 1333.937063][ T1704] block nbd1: Connection timed out, retrying (0/1 alive) [ 1333.944142][ T25] block nbd1: Dead connection, failed to find a fallback [ 1333.951298][ T25] block nbd1: shutting down sockets [ 1333.956770][ T25] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1333.966391][ T25] Buffer I/O error on dev nbd1, logical block 2, async page read [ 1333.974151][ T25] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1333.983738][ T25] Buffer I/O error on dev nbd1, logical block 1, async page read [ 1333.991773][ T25] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1334.001925][ T25] Buffer I/O error on dev nbd1, logical block 0, async page read [ 1334.010343][ T25] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1334.020123][ T25] Buffer I/O error on dev nbd1, logical block 3, async page read [ 1334.028100][T18482] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1334.037653][T18482] Buffer I/O error on dev nbd1, logical block 0, async page read [ 1334.045744][T18482] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1334.055268][T18482] Buffer I/O error on dev nbd1, logical block 1, async page read [ 1334.063040][T18482] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1334.072579][T18482] Buffer I/O error on dev nbd1, logical block 2, async page read [ 1334.080589][T18482] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1334.090187][T18482] Buffer I/O error on dev nbd1, logical block 3, async page read [ 1334.098027][T18482] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1334.107803][T18482] Buffer I/O error on dev nbd1, logical block 0, async page read [ 1334.116361][T18482] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 1334.125908][T18482] Buffer I/O error on dev nbd1, logical block 1, async page read [ 1334.134004][T18482] ldm_validate_partition_table(): Disk read failed. [ 1334.141294][T18482] Dev nbd1: unable to read RDB block 0 [ 1334.147335][T18482] nbd1: unable to read partition table [ 1334.155503][T18482] ldm_validate_partition_table(): Disk read failed. [ 1334.162406][T18482] Dev nbd1: unable to read RDB block 0 [ 1334.168346][T18482] nbd1: unable to read partition table [ 1334.715428][ T12] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration