last executing test programs: 1.440118721s ago: executing program 3 (id=9522): pipe(&(0x7f0000000180)={0xffffffffffffffff}) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) recvmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000005580)=""/4084, 0xff4}, {&(0x7f00000016c0)=""/4089, 0xff9}, {&(0x7f0000000140)=""/159, 0x9f}, {&(0x7f0000000200)=""/157, 0x9d}], 0x4}, 0x133) socket(0x2, 0x3, 0xff) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'bond0\x00', 0x0}) sendmsg$nl_xfrm(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000580)=@updpolicy={0xc4, 0x19, 0x501, 0x0, 0x0, {{@in6=@private0, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@offload={0xc, 0x1c, {r4, 0x4}}]}, 0xc4}}, 0x0) syz_emit_ethernet(0x112, &(0x7f0000000000)={@multicast, @empty, @val={@void, {0x8100, 0x7, 0x0, 0x1}}, {@ipv4={0x800, @generic={{0x5, 0x4, 0x3, 0xc, 0x100, 0x64, 0x0, 0x3, 0xff, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0xe}}, "fe7c48e9eabe8ce42a73761188d0cd30a00e34b1a7110e9103b7257689ae9363e103a5a7c7adf30b6b249bf3d117f79d34aea36aab6ea7d279d49e4e9fecca498cca488cfbac004152948cf15f982c48017136508f98167f81a4730e1676159894ac4cb2589d3fd50d72f65f51cea1f9af2b5b180dda1a321a7a7f8aa86c99ac81b91867a7e65989656521ea84ffb4f09468f1685b58155062fe772b2ef4ebbbe3e289043bfb5e5e3d94183a3451db5da714806b6cd109e8958cc482793d8ce750c1b25897e7d76b3292c5f2082974f37129a9fd6b2c6d5588ec3cf69ced7adb5f18519ab4871525e3c5723c"}}}}, 0x0) pipe(&(0x7f0000000180)) (async) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) socket$kcm(0x10, 0x400000002, 0x0) (async) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) (async) recvmsg(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000005580)=""/4084, 0xff4}, {&(0x7f00000016c0)=""/4089, 0xff9}, {&(0x7f0000000140)=""/159, 0x9f}, {&(0x7f0000000200)=""/157, 0x9d}], 0x4}, 0x133) (async) socket(0x2, 0x3, 0xff) (async) socket$nl_xfrm(0x10, 0x3, 0x6) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'bond0\x00'}) (async) sendmsg$nl_xfrm(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000580)=@updpolicy={0xc4, 0x19, 0x501, 0x0, 0x0, {{@in6=@private0, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@offload={0xc, 0x1c, {r4, 0x4}}]}, 0xc4}}, 0x0) (async) syz_emit_ethernet(0x112, &(0x7f0000000000)={@multicast, @empty, @val={@void, {0x8100, 0x7, 0x0, 0x1}}, {@ipv4={0x800, @generic={{0x5, 0x4, 0x3, 0xc, 0x100, 0x64, 0x0, 0x3, 0xff, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0xe}}, "fe7c48e9eabe8ce42a73761188d0cd30a00e34b1a7110e9103b7257689ae9363e103a5a7c7adf30b6b249bf3d117f79d34aea36aab6ea7d279d49e4e9fecca498cca488cfbac004152948cf15f982c48017136508f98167f81a4730e1676159894ac4cb2589d3fd50d72f65f51cea1f9af2b5b180dda1a321a7a7f8aa86c99ac81b91867a7e65989656521ea84ffb4f09468f1685b58155062fe772b2ef4ebbbe3e289043bfb5e5e3d94183a3451db5da714806b6cd109e8958cc482793d8ce750c1b25897e7d76b3292c5f2082974f37129a9fd6b2c6d5588ec3cf69ced7adb5f18519ab4871525e3c5723c"}}}}, 0x0) (async) 1.354269593s ago: executing program 0 (id=9525): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@setneightbl={0x24, 0x43, 0x1, 0x0, 0x0, {}, [@NDTA_NAME={0xf, 0x1, '\xaa\xaa\xaa\xaa\xaa\xc47\xa5m\"0'}]}, 0x24}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000f80)=ANY=[@ANYBLOB="2c0000002c00070100fa000000dbdf25037c0000080001800d000000100002800c0001"], 0x2c}, 0x1, 0x0, 0x0, 0x2400c800}, 0xc010) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000b40)=@delchain={0x118, 0x65, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x1}, {0x0, 0x8}}, [@TCA_CHAIN={0x8, 0xb, 0x6}, @TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_bpf={{0x8}, {0xcc, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_ACT={0x98, 0x1, [@m_simple={0x38, 0x1e, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x8, 0x3, 'bpf\x00'}]}, {0x4}, {0xc, 0x7, {0x0, 0x79d0f023c2b305dd}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_connmark={0x5c, 0x15, 0x0, 0x0, {{0xd}, {0x4}, {0x29, 0x6, "726786f34dc39a3b098ea66afe225634df06865f963558e69516e656d1b4d3ec4c23aaeded"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x3}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_FLAGS={0x8, 0x8, 0x1}]}}, @filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x118}, 0x1, 0x0, 0x0, 0x81}, 0x20000080) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803002e000b12d25a80648c2594f90324fc60180c02400a000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c000000100001040300"/20, @ANYRES32=0x0, @ANYBLOB="00010000000000001c0012804f7cc25c626f6e64000000000c00028005001d008a"], 0x3c}}, 0x54) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f00000000c0)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x5, 0x0, 0x0, 0xd, 0x9, 0x4}, 0x20) 1.353750773s ago: executing program 3 (id=9526): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=@newqdisc={0x70, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x44, 0x2, [@TCA_TBF_PRATE64={0xc, 0x5, 0x1ff01018ce30c2a5}, @TCA_TBF_RATE64={0xc, 0x4, 0xdcd9be68b5bd509}, @TCA_TBF_PARMS={0x28, 0x1, {{0x81, 0x0, 0xee8, 0x1c, 0x800, 0x8}, {0x7, 0x2, 0x7, 0x3, 0x5, 0x7}, 0x6db63122, 0x7, 0x1257}}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) (async) close(r1) (async, rerun: 32) r4 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r4) socketpair(0x29, 0x2, 0x7ff, &(0x7f0000000240)) (async) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) (async, rerun: 32) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) (async, rerun: 32) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) setsockopt$inet6_IPV6_DSTOPTS(r8, 0x29, 0x3b, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], 0x18) (async, rerun: 64) r9 = socket$unix(0x1, 0x2, 0x0) (rerun: 64) r10 = socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r12 = socket(0x10, 0x803, 0x0) getsockname$packet(r12, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) (async) r14 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r14, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030400000006000000005dcc0300", @ANYRES32=r13, @ANYBLOB="71e79fd811000000140012800c0001006d6163767461700014000380080001"], 0x3c}}, 0x0) (async) r15 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r15, &(0x7f0000000440)=[{{&(0x7f0000000280)={0x2, 0x4e22, @private=0xa010101}, 0x10, &(0x7f0000000980)=[{&(0x7f0000000200)="9c", 0x1}], 0x1}}, {{&(0x7f0000000080)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10, &(0x7f0000000180)=[{&(0x7f00000000c0)="99", 0x1}], 0x1}}], 0x2, 0x48000) getsockopt$inet_sctp_SCTP_MAX_BURST(r15, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r15, 0x84, 0x76, &(0x7f0000000100)={r16, 0x1}, 0x8) (async) sendmsg$nl_route_sched(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56441, 0x70b925, 0x80004, {0x0, 0x0, 0x0, r11, {}, {0x2, 0xb}, {0x4, 0xb}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2000c061}, 0x200c000) (async, rerun: 32) ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) (rerun: 32) 1.268070682s ago: executing program 2 (id=9527): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in=@rand_addr=0x64010100, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0xa0}, {@in6=@dev={0xfe, 0x80, '\x00', 0x21}, 0x0, 0x33}, @in6=@dev={0xfe, 0x80, '\x00', 0xe}, {0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffed, 0x3}, {0x0, 0x0, 0x2, 0xfffbfffffffffffe}, {0x0, 0x0, 0x796}, 0x0, 0x0, 0x0, 0x0, 0x2, 0xe55286f1921f74be}, 0x0, 0x1a0b1}}, 0xf8}, 0x1, 0x0, 0x0, 0x40040}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x11}, 0x94) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="20010000120013070000000000000000e0000001000000000000000000000000fc00"/64, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fc020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000072c42572f64a264410b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbc18c8582fc7800000000000000000000000050019000000000028001a"], 0x120}}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000000c0)={'macsec0\x00', 0x400}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000006c0)={'bridge_slave_0\x00', 0x600}) 1.209677394s ago: executing program 0 (id=9529): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ADD(r2, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f00000005c0)={0x28, r3, 0x1, 0x70bd27, 0x25dfdbff, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x40) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=@newtfilter={0x90, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r4, {0x0, 0x2}, {}, {0x8, 0x6}}, [@filter_kind_options=@f_flow={{0x9}, {0x58, 0x2, [@TCA_FLOW_ACT={0x54, 0x9, 0x0, 0x1, [@m_mirred={0x50, 0x19, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x4000000, 0x20000001, 0x4, 0x2}, 0x4, r4}}]}, {0x4}, {0x20, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}, @m_simple={0x0, 0x15, 0x0, 0x0, {{}, {0x0, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x0, 0x3, '#+*(\'{(@-.*[\x00'}, @TCA_DEF_DATA={0x0, 0x3, 'flow\x00'}, @TCA_DEF_PARMS={0x0, 0x2, {0x3, 0xfffffffd, 0x6, 0xf, 0xfff}}]}, {0x0, 0x6, "81232db821ef4e45cdede0174b85df4be0dda61c7eec9e4fd8906021146d3931a3ba4646e3b2f0822cf7d0d37e5e4e4609928aec6368c83c8519db19e3aada06474c9dbc5bf12c33b7f450"}, {0x0, 0x7, {0x0, 0x1}}, {0x0, 0x8, {0x2}}}}]}]}}, @TCA_RATE={0x4, 0x5, {0xff, 0xf8}}]}, 0x90}, 0x1, 0x4000000}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x84}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x48}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) 1.191866052s ago: executing program 3 (id=9530): r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), 0xffffffffffffffff) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r2, 0x800442d2, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x0, 0x0, 0x0, @dev}]}) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000001c0)=ANY=[@ANYRES32=r1, @ANYRES16=r1, @ANYBLOB="010326bd6000000000002d"], 0x20}, 0x1, 0x0, 0x0, 0x40904}, 0x20040814) 1.065254099s ago: executing program 2 (id=9531): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x3a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1500000000"], 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0e00000004000000080000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@setneightbl={0x24, 0x43, 0x1, 0x70bd27, 0x25dfdbfb, {0xa}, [@NDTA_NAME={0xf, 0x1, 'ansi_cprng\x00'}]}, 0x24}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010400000000fddbdf2500000000", @ANYRES32=r4, @ANYBLOB="fab0817dbcb5f31a2400128011000100620926d6fe026d3db3617665000000000c000580080022"], 0x44}, 0x1, 0x0, 0x0, 0x20044010}, 0x4040) sendmsg$nl_route(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@bridge_newneigh={0x2c, 0x1c, 0x400, 0x70bd26, 0x25dfdbfd, {0x2, 0x0, 0x0, r4, 0x20, 0x40}, [@NDA_DST_IPV4={0x8, 0x1, @loopback}, @NDA_PROTOCOL={0x5, 0xc, 0xf3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24044041}, 0x8080) 1.063717276s ago: executing program 1 (id=9532): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000006000000040000000000000e0400000000000000000000000000000d030000000000000000000002000000000000000000000009030000000000000063"], 0x0, 0x52}, 0x28) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x3, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x5, 0x8}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x0, 0x3, {0x5, 0x2, 0x6}}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000880) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=@newtfilter={0x70, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x4, 0xf}, {}, {0xffe0, 0xd}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x5}}]}, 0x70}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=@newqdisc={0x48, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r3, {0xffff}, {}, {0x9, 0xc}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x9, 0x8}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4009c}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) 1.052051582s ago: executing program 3 (id=9533): socket$netlink(0x10, 0x3, 0x0) r0 = socket$netlink(0x10, 0x3, 0x4) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha224\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x800) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbee1, 0x8031, 0xffffffffffffffff, 0x5e25c000) close(0x4) sendto$inet(r2, &(0x7f0000000000)='\x00', 0x1, 0x24008800, 0x0, 0x0) accept4$tipc(r2, 0x0, 0x0, 0x80800) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000000c0)=@newlink={0x38, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @vti={{0x10}, {0xc, 0x2, 0x0, 0x1, [@vti_common_policy=[@IFLA_VTI_IKEY={0x8}]]}}}]}, 0x38}, 0x1, 0x7500}, 0x0) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) getsockopt$CAN_RAW_FD_FRAMES(r4, 0x65, 0x5, &(0x7f0000000040), &(0x7f0000000080)=0x4) 951.008939ms ago: executing program 0 (id=9534): r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000040)={'filter\x00', 0x7, 0x4, 0x3f0, 0x0, 0x110, 0x1f8, 0x308, 0x308, 0x308, 0x4, &(0x7f0000000000), {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @rand_addr=0x64010100, @local, 0x2, 0xffffffff}}}, {{@arp={@multicast1, @local, 0x0, 0x0, 0x10, 0x10, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x3b}, {[0x0, 0x0, 0x0, 0xff, 0xff]}}, {@empty, {[0x0, 0x0, 0x0, 0xff, 0x80, 0xff]}}, 0x6, 0x8, 0xa, 0x4, 0x7, 0xc927, 'gre0\x00', 'veth1_virt_wifi\x00', {0xff}, {}, 0x0, 0x80}, 0xc0, 0xe8}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x401, 0xff}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@multicast, @empty, @private=0xa010101, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xf}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x82307201, &(0x7f0000000480)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f00000006c0)=""/81, &(0x7f0000000740)=0x51) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000007c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x2c, r2, 0x2, 0x70bd26, 0x25dfdbff, {}, [@ETHTOOL_A_COALESCE_USE_CQE_MODE_RX={0x5}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES_IRQ={0x8, 0x9, 0xb}, @ETHTOOL_A_COALESCE_RX_USECS_LOW={0x8, 0xe, 0xa7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0xc0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f00000008c0)=0x2, 0x4) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_SYS_GET(r3, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000940)={0x50, 0x1406, 0x400, 0x70bd2b, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x84}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000a80)={'vxcan0\x00', 0x0}) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000000bc0)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000ac0)=@newqdisc={0xb0, 0x24, 0x200, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x10, 0xfff1}, {0xd, 0xfff1}, {0xffff, 0xe}}, [@q_dsmark={{0xb}, {0x1c, 0x2, [@TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x6}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x1}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}]}}, @q_dsmark={{0xb}, {0x20, 0x2, [@TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0xe3d2}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x10}]}}, @q_dsmark={{0xb}, {0x10, 0x2, [@TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x3}, @TCA_DSMARK_SET_TC_INDEX={0x4}]}}, @q_dsmark={{0xb}, {0x10, 0x2, [@TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x5}]}}]}, 0xb0}, 0x1, 0x0, 0x0, 0x40000}, 0x4) r5 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000c00), 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000000c40)={[{0x2d, 'net_prio'}, {0x2d, 'net'}, {0x2d, 'memory'}, {0x2b, 'cpuset'}, {0x2d, 'net_prio'}, {0x6, 'freezer'}, {0x2b, 'rdma'}, {0x2b, 'blkio'}, {0x2d, 'rdma'}]}, 0x45) sendmsg$L2TP_CMD_TUNNEL_GET(r1, &(0x7f0000000d80)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000d00)={0x30, 0x0, 0x4, 0x70bd2a, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'team0\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x41}, 0x20040044) r6 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) ioctl$NILFS_IOCTL_GET_SUSTAT(r6, 0x80306e85, &(0x7f0000000dc0)) sendmsg$rds(r3, &(0x7f0000001680)={&(0x7f0000000e00)={0x2, 0x4e23, @multicast1}, 0x10, &(0x7f0000001180)=[{&(0x7f0000000e40)=""/241, 0xf1}, {&(0x7f0000000f40)=""/254, 0xfe}, {&(0x7f0000001040)=""/95, 0x5f}, {&(0x7f00000010c0)=""/44, 0x2c}, {&(0x7f0000001100)=""/21, 0x15}, {&(0x7f0000001140)=""/44, 0x2c}], 0x6, &(0x7f0000001600)=[@rdma_dest={0x18, 0x114, 0x2, {0xe80, 0x3}}, @zcopy_cookie={0x18, 0x114, 0xc, 0x8}, @rdma_args={0x48, 0x114, 0x1, {{0xe, 0x9}, {&(0x7f0000001200)}, &(0x7f0000001580)=[{&(0x7f0000001240)=""/224, 0xe0}, {&(0x7f0000001340)=""/119, 0x77}, {&(0x7f00000013c0)=""/235, 0xeb}, {&(0x7f00000014c0)}, {&(0x7f0000001500)=""/73, 0x49}], 0x5, 0x3, 0x80}}], 0x78, 0x10}, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001700), r1) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000001740)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001840)={&(0x7f00000016c0)={0x10, 0x0, 0x0, 0x883ea6d81848472a}, 0xc, &(0x7f0000001800)={&(0x7f0000001780)={0x44, r7, 0x10, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x8, 0x56}}}}, [@NL80211_ATTR_CSA_C_OFFSETS_TX={0xe, 0xcd, [0x4, 0x0, 0x7, 0xff66, 0x0]}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x6c1}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x44}}, 0x20000000) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000001880)={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x27}}, 0xc) bind$netlink(r3, &(0x7f00000018c0)={0x10, 0x0, 0x25dfdbfd, 0x80000000}, 0xc) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000001940), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_LIST(r9, &(0x7f0000001a00)={&(0x7f0000001900)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000019c0)={&(0x7f0000001980)={0x1c, r10, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40040}, 0x4000004) r11 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r11, 0x65, 0x1, &(0x7f0000001a40)=[{{0x0, 0x0, 0x0, 0x1}, {0x2, 0x1, 0x1, 0x1}}, {{0x2, 0x1, 0x0, 0x1}, {0x2, 0x1, 0x1, 0x1}}, {{0x3, 0x1, 0x1, 0x1}, {0x3, 0x1, 0x1}}, {{0x4, 0x1, 0x1}, {0x3, 0x1}}, {{0x1, 0x1}, {0x3, 0x1, 0x1, 0x1}}, {{0x1}, {0x3, 0x1, 0x1}}, {{}, {0x3, 0x0, 0x1}}], 0x38) ioctl$sock_SIOCGIFINDEX_802154(r9, 0x8933, &(0x7f0000001ac0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_PAN_ID(r9, &(0x7f0000001c40)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001c00)={&(0x7f0000001b80)={0x68, 0x0, 0x200, 0x70bd29, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r12}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_PAN_ID={0x6, 0x9, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_PAN_ID={0x6, 0x9, 0x3}, @NL802154_ATTR_PAN_ID={0x6, 0x9, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x68}, 0x1, 0x0, 0x0, 0x51}, 0x10) 888.991879ms ago: executing program 2 (id=9535): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r1 = syz_init_net_socket$ax25(0x3, 0x3, 0xc3) r2 = socket$rds(0x15, 0x5, 0x0) r3 = socket$phonet(0x23, 0x2, 0x1) ppoll(&(0x7f0000000000)=[{r0, 0x4000}, {r1, 0x8}, {0xffffffffffffffff, 0x1000}, {r2, 0x403}, {r3, 0xa719}, {0xffffffffffffffff, 0x8500}], 0x6, &(0x7f0000000040), &(0x7f0000000080)={[0x10]}, 0x8) r4 = socket(0x8000000010, 0x2, 0x0) write(r4, &(0x7f00000002c0)="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", 0xfc) 888.507174ms ago: executing program 4 (id=9536): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_OCB(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010028bd7000ffdbdf255f"], 0x24}, 0x1, 0x0, 0x0, 0x24004015}, 0x448d0) socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'bond0\x00', &(0x7f00000000c0)=@ethtool_channels={0x2b}}) epoll_pwait(0xffffffffffffffff, &(0x7f0000000380)=[{}, {}, {}, {}, {}], 0x5, 0x40, &(0x7f0000000780), 0x8) r2 = socket$inet_udp(0x2, 0x2, 0x0) socket$inet(0x2, 0x1, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$key(0xf, 0x3, 0x2) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$key(r4, 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f00000003c0), r3) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000700)={&(0x7f0000000340), 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x34, r5, 0x800, 0x70bd28, 0x25dfdbfc, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e23}, @L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x2}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x7f}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x4) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000740), r6) r8 = socket(0x2a, 0x2, 0x0) getsockname$packet(r8, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x300, 0x70b52a, 0x2001, {0x0, 0x0, 0x0, r9, {0x7}, {0xffff, 0xffff}, {0x5, 0xffe0}}}, 0x24}}, 0x41) r10 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r10, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$NL802154_CMD_NEW_SEC_KEY(r6, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000440)={0x230, r7, 0x1, 0x70bd29, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_SEC_KEY={0xcc, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "99fd621cb5480ae15c99ae04478d043c3f46772d23df24b3b55d038d9d7a2f77"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "f7b229a3fba59d089addfdfbf376ffcc7823a470da8e72041d4672ea7906d42d"}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "587ef24139c824129fbf5c1bbb8ca843"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "f7af4d31e055ed0c24b997732f119c4241e0b91407468bc29070083e7084deb6"}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "a7da69f953cd4ac8d8d19543fd8f9d85"}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "aceeb2a8e21a89cf78f2f7daa4d64854"}, @NL802154_KEY_ATTR_ID={0x20, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0xade1}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}]}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_SEC_KEY={0x120, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "8520e16b5803e2490e80a060280f0c4e4d518807076e4979859aa50bce5b1266"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x8}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "c649ed3d4b3b34a6d6d8dfaae0929ef4"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "89c964b3905b21ad1fde4fda8521ddbe87c2993483ccb0a82f196276fb9da9ea"}, @NL802154_KEY_ATTR_ID={0x30, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x14, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6}]}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}]}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "17e8eecc999f6c3461bdddb0aa6aedcfaa909c2375dca16ea36bd63bb4470ff7"}, @NL802154_KEY_ATTR_ID={0x64, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x4e2290f7}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x20, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xfffe}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa3}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x1c75}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x3}, @NL802154_KEY_ID_ATTR_MODE={0x8}]}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x230}, 0x1, 0x0, 0x0, 0x40004800}, 0x800) r11 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000800)=@broute={'broute\x00', 0x20, 0x4, 0x25e, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000c0], 0x0, 0x0, &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{0x5, 0x21, 0x8, 'netdevsim0\x00', 'veth0_to_bond\x00', 'vlan0\x00', 'ip6_vti0\x00', @random="df0befd05447", [0xff, 0xff, 0x0, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, [0x0, 0xff, 0x0, 0xff, 0x0, 0xff], 0x9e, 0x9e, 0x1ce, [@cpu={{'cpu\x00', 0x0, 0x8}, {{0x7, 0x1}}}], [], @common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x3, 'system_u:object_r:udev_var_run_t:s0\x00'}}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe}, {0x0, '\x00', 0x2, 0x8000000000000003}]}, 0x2d6) r12 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r12, 0x10e, 0xc, &(0x7f0000000040)={0x4001}, 0xfea3) sendmsg$nl_route(r12, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000005e000102"], 0x1c}}, 0x0) sendto$inet(r11, 0x0, 0x0, 0x20040000, 0x0, 0x0) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000980)=ANY=[@ANYBLOB="58010000100013070000000000000000fc020000000000000000000000000001fe8000000000000000000000000000aa00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac141417000000000000000000000000000004d533000000e000000100000000000000000000000003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000220000000000000000000000000000000200000000000000000000005c001400636d616328616573290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080", @ANYRES32=r2], 0x158}}, 0x2000c000) 792.17313ms ago: executing program 1 (id=9537): r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a0b04000000000000000002000000400004803c0001800b00010065787468647200002c0002800800034000000000080001400000000d080006400000008c080004400000001705000200940000000900010073797a30000000000900020073797a32"], 0x94}}, 0x0) ioctl$sock_inet_SIOCGARP(r0, 0x8954, &(0x7f0000000080)={{0x2, 0x4e23, @multicast1}, {0x1, @broadcast}, 0x8, {0x2, 0x4e20, @rand_addr=0x64010102}, 'pim6reg\x00'}) 718.284489ms ago: executing program 2 (id=9538): r0 = socket$packet(0x11, 0x3, 0x300) (async) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x4c, &(0x7f0000000000), 0x4) (async) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) (async) recvmsg$unix(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x2000) (async) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0xc040ff0b, 0x110c2300fe) (async) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x2, &(0x7f0000001c40)=ANY=[@ANYBLOB="85000000a8"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13}, 0x94) (async) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) (async) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0xf000000) (async) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000000)={0x100000011, @multicast2, 0x0, 0x0, 'dh\x00', 0x0, 0x5, 0x3a}, 0x2c) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1701, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000580)="d76e", 0x1}, 0x50) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000000080)=0x0) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000002e00090025bd7000fddbdf250600000008000a"], 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x20040800) (async) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) (async) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x42073, 0xffffffffffffffff, 0x0) (async) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0xfe5, 0x3a, 0x1000, 0x3a, 0x9d, 0x80, 0x2}, 0x1c) (async) r5 = gettid() sendmsg$nl_generic(r3, &(0x7f00000002c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000280)={&(0x7f0000000840)=ANY=[@ANYRES8=r4, @ANYRES32=r5, @ANYRES8, @ANYRES32=r4, @ANYBLOB='\x00\x00\x00'], 0x1218}}, 0x4000810) (async) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) (async) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = openat$cgroup_procs(r8, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r9, &(0x7f0000000c40), 0x12) (async) setsockopt$sock_int(r7, 0x1, 0xf, 0x0, 0x5e) (async) bind$netlink(r6, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc) (async) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r6, 0x10e, 0x1, &(0x7f0000000000)=0x2005, 0x4) (async) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) 653.164644ms ago: executing program 4 (id=9539): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="f0010000160001000000000000000000ff010000000000000000000000000001ac1414bb00000000000000000000000000000000000000000000802000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000bb0000000033000000e000000200000000000000000000000000000000000000000000000000ffffc9000000000000000000000000000000000000000000000000efffffffffffffff03000000000000000000000000000000000000000000000000000000000000000000000000000000feffffffffffffff040000000000000000000000040000001000000000000000000000000000000002000000b1a0010008000c00c40000000c001c00", @ANYRES32=0x0, @ANYBLOB="00000000e4000683"], 0x1f0}}, 0x0) 652.037266ms ago: executing program 0 (id=9540): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003840), 0xffffffffffffffff) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_BEACONS(r2, &(0x7f0000003900)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)={0x24, r0, 0x1, 0x0, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x51}, @val={0x8, 0x3, r3}, @void}}}, 0x24}}, 0x240040c0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003840), 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(r1, &(0x7f0000003900)={0x0, 0x0, &(0x7f00000038c0)={&(0x7f0000003880)={0x1c, r4, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) (async) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{0x0, 0x114}], 0x1}, 0x80) (async) r5 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000900)={0x41, 0x4}, 0x10) r6 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000100)={0x41, 0x0, 0x2}, 0x1be) (async) sendmsg$tipc(r6, &(0x7f0000000000)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x1, {{0x40, 0x4}, 0x1}}, 0x10, 0x0}, 0xf5) (async) r7 = socket(0x28, 0x5, 0x0) r8 = socket(0x1f, 0x4, 0x200) bind$vsock_stream(r8, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) (async) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_BT_POWER(r9, 0x112, 0x9, 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r8, 0xc020662a, &(0x7f0000000240)={0x6, 0x3, 0x1, 0xb, 0x4, 0x0, [{0x8, 0xff, 0x8000000000000000, '\x00', 0x1}, {0x3, 0x5, 0x7, '\x00', 0xa}, {0xfffffffffffffffc, 0x100, 0x7, '\x00', 0x2280}, {0x7e2, 0x6, 0xdae6, '\x00', 0x200}]}) (async) listen(r8, 0x4) (async) connect$vsock_stream(r7, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) (async) r10 = accept4$unix(r8, 0x0, 0x0, 0x800) recvfrom$unix(r10, &(0x7f0000000140)=""/248, 0xf8, 0x40, 0x0, 0x0) (async) r11 = socket$inet6(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r12, &(0x7f0000000340)=@file={0x0, './cgroup.cpu/cgroup.procs/file0\x00'}, 0x2) (async) connect$inet6(r11, &(0x7f00000001c0)={0xa, 0x4e21, 0x0, @loopback, 0x20000023}, 0x1c) 577.772733ms ago: executing program 0 (id=9541): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x2, 0x4, 0x8, 0x201}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000001940)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000, r0}, 0x38) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x2, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$tipc(r5, &(0x7f0000000380)=@nameseq={0x1e, 0x1, 0x3, {0x40, 0x3}}, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@deltfilter={0x2c, 0x2d, 0x8, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0xfff1, 0x5}, {0xc, 0xa}, {0xffff, 0x3}}, [@TCA_CHAIN={0x8, 0xb, 0x4}]}, 0x2c}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x1, 0x3}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) r8 = socket$unix(0x1, 0x1, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$sock_void(r1, 0x1, 0x24, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x300, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0xb}, {0xffff, 0xb}, {0x4, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x7}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), r7) r11 = socket(0x10, 0x803, 0x0) r12 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r12, 0x8946, &(0x7f0000000040)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x24, 0x8, 0x4, 0x1ff, 0x0, 0x1, 0x0, 0x6, 0x7, 0x0, 0xa, 0x0, 0x0, 0x8, 0x0, 0x0, [0x0, 0x2]}}) ioctl$XFS_IOC_START_COMMIT(r12, 0x80585882, &(0x7f00000002c0)) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r11, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r11, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r13, @ANYRESDEC=r1], 0x3c}}, 0x40000) sendmsg$nl_route(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=@newlink={0x50, 0x10, 0x503, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, 0x0, 0x11508, 0x1021}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @private1={0xfc, 0x1, '\x00', 0x1}}]}}}, @IFLA_MASTER={0x8, 0xa, r13}]}, 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x4000) 550.026906ms ago: executing program 1 (id=9542): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_mreqsrc(r2, 0x0, 0x21, 0x0, &(0x7f0000000080)) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@ipv6_newroute={0x3c, 0x18, 0x1, 0x70bd2c, 0x0, {0xa, 0x80, 0x10, 0x0, 0xfc, 0x2, 0xff}, [@RTA_OIF={0x8, 0x4, r1}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x3}, @RTA_ENCAP={0x10, 0x16, 0x0, 0x1, @LWTUNNEL_IP6_ID={0xc, 0x1, 0x40}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4800}, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000003140)=ANY=[@ANYBLOB="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", @ANYRES32=r4, @ANYBLOB="08001a00", @ANYRES32=0x0, @ANYBLOB="08001b", @ANYRES32=0x0, @ANYBLOB='\f\x00'], 0x18c0}, 0x1, 0x0, 0x0, 0x880}, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r4, 0x29, 0x41, &(0x7f0000000100)={'nat\x00', 0x5, [{}, {}, {}, {}, {}]}, 0x78) 472.651647ms ago: executing program 4 (id=9543): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x87}]}, &(0x7f0000000080)='GPL\x00'}, 0x94) r2 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) (async) syz_emit_ethernet(0x56, &(0x7f0000000000)={@local, @local, @val, {@ipv6={0x86dd, @generic={0x0, 0x6, "76cd8a", 0x18, 0x0, 0x0, @rand_addr=' \x01\x00', @dev, {[@hopopts={0x0, 0x2, '\x00', [@calipso={0x7, 0x8, {0x0, 0x0, 0x0, 0xd600}}, @pad1, @padn={0x1, 0x1, [0x0]}]}]}}}}}, 0x0) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) (async) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_int(r3, &(0x7f0000000640)='cgroup.max.descendants\x00', 0x2, 0x0) r5 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000000c0)={0xffffffffffffffff, 0x9, 0x38}, 0xc) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000100)={r5, &(0x7f00000002c0)="fb5dae833ea277cd8d16e75ab6b43105be252a33829348539bb51b2d8409e4617b2b278371defb6bbd3c0b781fc0d67ca302e64b523f26fcd9526edb7f4d5c453067eb97b997427a53486e09ce52540ce301dc7ba5d41735aac9b31fffa5390d854974dc43c34ebb26345a323f4cf4b0ed7831b01edfd29ff6fe2fbb3811c2ed0447d35f6d4072c645e38017fcc7ae88f3187e29053228710c2eed14b4c07d11dd52133818e62bb88eee8348c0510aa5f824b3557001cef90b792ff66007d16c20ee586a3a894e5202785d114a21990e562f5fba568b685d8efa7c0353d55dc4ff3a94924f1801c5a7d597", &(0x7f0000000180)=""/114}, 0x20) (async) write$cgroup_int(r4, 0x0, 0x0) (async) sendfile(r1, r4, 0x0, 0xc1) (async) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@getnexthop={0x18, 0x6a, 0x4, 0x70bd25, 0x25dfdbdd}, 0x18}, 0x1, 0x2000000000000000, 0x0, 0x4040051}, 0x0) 443.983999ms ago: executing program 2 (id=9544): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="b700000081000000bfa30000000000000703000003feffff720af0fff8ffffff71a4f0ff0000000071100000000000001d400500000000004704000001ed00000f030000000000001d44000000000000620a00fe040026ca7203000000000000b5000000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fe51bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51bf900000000000000d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba3a9508f9d6aba582a896a9f1e096df6ecea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350844ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00e10000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d490cba8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e1461173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b583cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f006694d461b76a58d88cf0f520310a1e80dc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6032399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c00000000000000f59dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ed1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef67cf0216e2d81e6127bd9d7fab28800eaab2355992f8ce4cd38add4b272c0bee4076ca4847ffa691cf78fb7ec212bad3bef29f577ea7159b7f3025b3d977ff7c91024cf71126233cb8791c3c"], &(0x7f00000001c0)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x44) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x99}]}, &(0x7f00000000c0)='GPL\x00'}, 0x90) r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) connect$can_j1939(r0, &(0x7f0000000080)={0x1d, r1, 0x1, {0x2, 0xff, 0x3}, 0xfd}, 0x18) 392.773911ms ago: executing program 1 (id=9545): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000faffffff0000000000000000850000006300000085000000760000009500000000000000"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) getsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000000), &(0x7f0000000040)=0x8) listen(r0, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) sendto$packet(0xffffffffffffffff, &(0x7f0000000600)="5f0efc", 0x3, 0x40000c4, 0x0, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000140)={@private2, 0x0}, &(0x7f0000000180)=0x14) setsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000001c0)={r1, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0xc) 309.014158ms ago: executing program 2 (id=9546): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xf, 0x4, 0x8, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$inet_mptcp(0x2, 0x1, 0x106) socket$phonet_pipe(0x23, 0x5, 0x2) r1 = socket(0x80000000000000a, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f00000001c0)) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0f0000000400000004000000a2"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r4}, &(0x7f0000000180), &(0x7f00000001c0)=r2}, 0x20) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000140), 0x4) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r4, &(0x7f00000047c0), &(0x7f0000000100)=@udp=r1}, 0x20) pselect6(0x40, &(0x7f00000001c0)={0x4, 0x40000000000, 0x3, 0x4, 0x0, 0x77f, 0x3}, 0x0, &(0x7f00000002c0)={0x3ff, 0x4, 0x0, 0x9, 0x0, 0x0, 0x80000003}, 0x0, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r5, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x38, &(0x7f00000001c0)=[@in6={0xa, 0x4e21, 0x7ff, @private2, 0xeb2}, @in6={0xa, 0x4e21, 0x7, @local, 0x9}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r5, 0x84, 0x1, &(0x7f0000000500)={r6, 0xb, 0xfab6, 0x2, 0x6, 0x80}, 0x14) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r7, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) setsockopt$sock_timeval(r7, 0x1, 0x15, &(0x7f0000000040)={0x77359400}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r7, 0x6, 0x13, &(0x7f00000001c0), 0x4) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_TYPE={0x5, 0x2, 0x112}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x1}]}}}]}]}], {0x14}}, 0x7c}}, 0x0) sendto$inet(r7, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) 308.64674ms ago: executing program 4 (id=9547): r0 = socket$vsock_stream(0x28, 0x1, 0x0) r1 = socket(0x1, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r2, &(0x7f0000000180), &(0x7f00000000c0)=@tcp6=r1}, 0x20) close(r1) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) listen(r0, 0x5) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) r4 = socket(0x2d, 0x2, 0x0) ioctl$SIOCNRDECOBS(r4, 0x89e2) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="140040003a00010025bd7000f8dbdf25da000000"], 0x14}}, 0x4000000) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000300)={'vxcan1\x00'}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r7, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0x3, 0x2, 0x301, 0x0, 0x0, {0xa}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x14}, 0x10) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route_sched(r6, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newtaction={0x68, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x2}, 0x2, r9}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) sendto$packet(r4, &(0x7f0000000000)="5f0efc3e1792a50972d2eb21bdff9ca4ac804c2847fe7bf05ddc63ff512d4074687760a5fbd1fc97772c6f5027dcea15b6658de3b024a6ea22baafb445bf8427c8055d00", 0x44, 0x24040890, 0x0, 0x0) close(0x3) 303.021684ms ago: executing program 1 (id=9548): openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x80000, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x121001, 0x0) syz_emit_ethernet(0xaa, &(0x7f00000003c0)=ANY=[@ANYBLOB="bbbbbbbbbbbb00000000000008004500009c0002000000019078ac1e0001ac1414aa05009078e00000e040000000000000000011000000000000ac1414aa070300892bae7f0001ffffffffac1e0101ac14141e7f000001e00000027f000001ffffffff443c00030a01012f00000000e000000100000000ac1e000100000000ac1414aa000000000000000000000000ac1414000000000000000004000000000000"], 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110e22fff6) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1980, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110c230007) close(0x3) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfe33) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r2, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="bc04000000050104000000000000000000000000540201000000000000000000000000000000000073797a31000000000000000000000000000000000000000000000000000000003405be39dc2a3ba9f2d90eca67823d459716e3f50fc1e8682163f65134d25ad2"], 0x4bc}, 0x1, 0x0, 0x0, 0x4004811}, 0x0) r3 = socket(0xa, 0x3, 0x3a) openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x10000, 0x0) setsockopt$MRT6_ADD_MFC(r3, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x809}, {0xa, 0x8, 0x10000, @empty}, 0x2, {[0x34c, 0x1, 0xfffffffe, 0x0, 0xffffffff, 0x8, 0x0, 0xca]}}, 0x5c) setsockopt$MRT6_ADD_MFC(r3, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}}, {0xa, 0x0, 0x10000000, @mcast2}, 0x0, {[0x1, 0x0, 0x0, 0x0, 0x9]}}, 0x5c) setsockopt$MRT6_FLUSH(r3, 0x29, 0xd4, &(0x7f0000000340)=0x6, 0x4) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r3) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x38, r7, 0x1, 0x70bd2d, 0x0, {{0x2}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x41, 0x60}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}]]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$NL80211_CMD_AUTHENTICATE(r3, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x3000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x80, r4, 0x100, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r6}, @void}}, [@chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x6}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x254}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x37}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x999}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x13}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x15b8}], @NL80211_ATTR_MAC={0xa, 0x6, @random="a06396f78b50"}]}, 0x80}, 0x1, 0x0, 0x0, 0x14004044}, 0x0) 286.66408ms ago: executing program 3 (id=9549): bpf$MAP_CREATE(0x0, &(0x7f00000017c0)=@base={0x1a, 0x63098bae, 0xa, 0xf41b, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x5, 0x4}, 0x50) bpf$TOKEN_CREATE(0x24, &(0x7f0000000240), 0x8) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x9, 0x7, 0x7fe2, 0x1, 0x1}, 0x50) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000680)=@delchain={0xf4, 0x2d, 0x1, 0x0, 0x0, {}, [@TCA_RATE={0x6}, @filter_kind_options=@f_flow={{0x9}, {0x3c, 0x2, [@TCA_FLOW_ACT={0x78, 0x9, 0x0, 0x1, [@m_tunnel_key={0x74, 0x0, 0x0, 0x0, {{0xf}, {0x2c, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @mcast2}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, {0x1c, 0x6, "eb25946ddf95959b7f8d829c69274ff122e320ac9e1cd272"}, {0xc}, {0xc, 0x8, {0x3}}}}]}, @TCA_FLOW_XOR={0x8}, @TCA_FLOW_RSHIFT={0x8}]}}, @filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_FROM={0x8}]}}, @filter_kind_options=@f_route={{0xa}, {0x4}}, @TCA_RATE={0x6}]}, 0xf4}}, 0x0) getsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x7, 0x0, &(0x7f00000000c0)) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0xa, 0x17, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf090000000000009709010000000281650000000000000018010000646c6c2500000000002020207b9af8ff000000002e9100000000000037010000f8ffffffb702000008000000b70300000000000014000000060000805f93000000000000b5030000000000008500000076000000b70000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r4, 0x0, 0x60, &(0x7f0000002e00)={'filter\x00', 0x7, 0x4, 0x3f0, 0x1f8, 0x110, 0x0, 0x308, 0x308, 0x308, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@random="d1f5c2b93bc3", @empty, @empty, @loopback, 0x2, 0xffffffff}}}, {{@arp={@loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xffffff00, 0xff000000, 0x6, 0xc, {@empty, {[0xff, 0x0, 0xff, 0x0, 0xff, 0xff]}}, {@mac=@multicast, {[0xb4e44995cf4cc780, 0x5400faa9f5c6f977, 0x0, 0x0, 0xff, 0xff]}}, 0x5, 0x8, 0xf, 0x6, 0x8, 0x100, 'dummy0\x00', 'macvtap0\x00', {0xeddc69e01a7ac061}, {}, 0x0, 0x4}, 0xc0, 0xe8}, @unspec=@STANDARD={0x28}}, {{@arp={@remote, @multicast2, 0xffffff00, 0x0, 0x4, 0xb, {@empty, {[0xff, 0x0, 0x0, 0xff, 0x0, 0xff]}}, {@mac=@multicast, {[0x0, 0xff, 0x0, 0xff, 0xff]}}, 0x1ff, 0x1, 0xc, 0x68d9, 0xfff, 0x5, 'nicvf0\x00', 'batadv0\x00', {0xff}, {}, 0x0, 0x220}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}, @empty, @rand_addr=0x64010102, @private, 0x1, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000000)={'syztnl2\x00', &(0x7f0000000080)={'ip_vti0\x00', 0x0, 0x8, 0x80, 0x9f3, 0xed69, {{0x15, 0x4, 0x3, 0xd, 0x54, 0x65, 0x0, 0x8, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x1a}, @remote, {[@timestamp={0x44, 0x8, 0x6, 0x0, 0x3, [0x10000]}, @timestamp_prespec={0x44, 0x24, 0x26, 0x3, 0x7, [{@empty, 0x4}, {@empty, 0x4}, {@private=0xa010102, 0x3}, {@private=0xa010100, 0x819}]}, @end, @timestamp={0x44, 0x10, 0x4c, 0x0, 0x8, [0x7ff, 0xc, 0x0]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000200)={'ip6gre0\x00', &(0x7f0000000180)={'ip6tnl0\x00', r5, 0x4, 0x0, 0x9, 0xfffffff8, 0x13, @mcast2, @empty, 0x80, 0x18e35af9edbcd5a3, 0x7fffffff, 0xfffffffb}}) 201.249131ms ago: executing program 0 (id=9550): socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) r0 = socket$netlink(0x10, 0x3, 0x12) write(r0, &(0x7f00000000c0)="29000000110005b7ff000000040860eb0101b6ff02159f02c26ed638eeb738256e06a40e07fff0797e", 0x140) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000100)={0x1d, 0x0, 0x0, {0x1, 0xf0, 0x3}, 0x1}, 0x18) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$igmp6(0xa, 0x3, 0x2) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="580000001000010400000000030000000000000050f55631fc7169c6dc58760fc3b238572ccf6ba769d1f0cc217b9b5c8f64afc2044620a359db507db165af71bf8c364f11e2710b993b725d9d04139a7a9dae47465ab4ce7be9f44bacb8ee52b33731a17a8fe0486514860a348fb63dcf5d9cb38e62bd946f18a53a83b6baddde9c061d9c37733003eada0a1ac09208e72e26", @ANYRES32=0x0, @ANYBLOB="fab0817dbcb5f31a24001280110001006272696467655f736c617665000000000c00058006001f0033640000140003006272696467655f736c6176655f300000"], 0x58}, 0x1, 0x0, 0x0, 0x20044010}, 0x4040) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'}) write$tun(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0x72) 182.087003ms ago: executing program 3 (id=9551): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r0) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x40000) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x1c, r1, 0x800, 0x70bd2b, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4) r2 = socket$vsock_stream(0x28, 0x1, 0x0) r3 = socket$inet(0xa, 0x801, 0x84) connect$inet(r3, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r3, 0x8) r4 = accept4(r3, 0x0, 0x0, 0x0) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r4, 0x84, 0x19, &(0x7f0000000100)={0x0, 0x3}, 0x8) bind$vsock_stream(r2, &(0x7f0000000440), 0x10) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r4, 0x40089413, &(0x7f0000000300)=0x480000000000) r5 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r5, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) writev(r2, &(0x7f0000001a80)=[{&(0x7f0000000700)="208fb04b03b9e169de9e85d491c5a333cc8f15d205b9273e7b5f39eecc2484f4d7bf80af87879f9dbaec9cc78c2aa51e4a4149ea9e93540fe1eac73302982bf8a7e29f48fd363bfa41ad2d92b01dc26d185ea9c0d63973851f6b3725a1ef42a3c1a9ef8a23f135598a5a8878261b7bb8fb00ef4a4a627377560a9594107e660d365eb55e2477da1eb7b3cb10e0cb3ec95b77bd86ab36bd9b7b8119052f04278dc6d8127d687cbd40267918b843e774f289eb33c64746e4f6650079d55b76af2c5c3971ec891eac9480bfbec5c9231f3a1384bc0522f6feb3087e2852047941c85141c641e86637c2a855529598"}, {&(0x7f0000000800)="11b0a4ab36fcc4e2974c98228868f18abcf988b0d6095b925b941968a9c5010af5c5072336b32d9c557e44eefd512a8ae38f00ee227af6e8ed56833b40b88d7f3f54d372db6e28b45ee6a5d895cbc83ac68c2f10d75f73646a626a52403f99a3f91e2a5caed50116935049279cf4791f0179c0a6aa98c7bd6b2b7137354500b28b6eba69459f52a20cdc733ceec876e60ad71fdc9602490c867c5c80cc23cb"}, {&(0x7f00000008c0)="67a1633f92a2372c495ce92ea60b8394feb4c970fe2ccb98821cc406c7156a242a7ae92eab05d0fc62230cfe8605a419d43b73c0261ac225662a08d2486187012f95b48d943daff633f9b2c9cd31fbc7a310bd87e6b8fa67740fd696d14d33249a1ea3a47da5687ef0223cbeaa4e32bfa4f9064ed80c15e0904763a380c9bedcaaf63c28479ba70865adad5bbd6a6052f9439026329eb4201b76cc32b430f4ebf775938ccf4ab01d9897727c547ea4e78d73"}, {&(0x7f0000000980)="1a02eb3c3a2acaf5c447ca9287f840a83c90e4506a5ed42db933aa692d168f3ee0b41925daec402846ae164bc660d1d6421da4193d5cb939d8720c1d41f0e43d0d8ea9a4006693e6c02854c1be6feb122bf74eaf5e19f81b73b002fa64d79f3ad35064befa79ab9bbf6a2d55d4ed3cf61e9802bd230c06a989bf5aae4d6b1e8735605875893f88b7810694631f9de6387c2558b976a86ee07fc03d5f540d8eab4bf17a0714c4f19328a8b84e4f467b23613a14"}, {&(0x7f0000000080)="aa3c2d7c46a1039b60e5a31f8037340ab1b034", 0x34}, {&(0x7f0000000a40)="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"}, {&(0x7f0000001b00)="3eeea0740ba6be46f1ddac2da7ec34fcb3"}, {&(0x7f0000001a40)="05265b39d893b42bfb15193bd33134d892bcc47fcf962b2cfa"}], 0x1) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x40, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r4, 0xf503, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000480), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f00000004c0)={'batadv_slave_1\x00', 0x0}) getsockopt$inet6_mreq(r4, 0x29, 0x1c, &(0x7f0000000500)={@private1, 0x0}, &(0x7f0000000540)=0x14) r12 = syz_genetlink_get_family_id$mptcp(&(0x7f0000001b40), r4) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r4, &(0x7f0000001c00)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001bc0)={&(0x7f0000001b80)={0x1c, r12, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r8, &(0x7f0000000600)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x3c, r9, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r10}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r11}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40080) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r13, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xffffffed, 0x6}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000006c0)=@gettclass={0x24, 0x2a, 0x1, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r13, {0x9}, {0xffff}, {0x7, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x2001c061}, 0x8000) 158.364041ms ago: executing program 4 (id=9552): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(r1, 0x0, 0x61, 0x0, &(0x7f0000000040)=0x28) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x18, 0x10, 0x3}, @TCA_FQ_FLOW_MAX_RATE={0x2, 0x2}, @TCA_FQ_QUANTUM={0x2, 0x2}]}}]}, 0x48}}, 0x0) 881.227µs ago: executing program 4 (id=9553): r0 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000600)={0x0, 0x8001, 0x10}, &(0x7f0000000640)=0xc) setsockopt$sock_attach_bpf(r0, 0x1, 0xd, &(0x7f0000000080), 0x24) close(r0) socket$kcm(0x2b, 0x1, 0x0) (async) sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc) (async) socket$inet_sctp(0x2, 0x5, 0x84) (async) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000600)={0x0, 0x8001, 0x10}, &(0x7f0000000640)=0xc) (async) setsockopt$sock_attach_bpf(r0, 0x1, 0xd, &(0x7f0000000080), 0x24) (async) close(r0) (async) 0s ago: executing program 1 (id=9554): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x1, 0x4, 0x8, 0x201}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000001940)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1000, r1}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000200)={r1, &(0x7f0000000880)="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", &(0x7f0000000300)=""/247}, 0x20) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000019800)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r9, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r8, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000500)={r0, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x4, 0x600, 0x1}}, 0x20) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) r11 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGPGRP(r10, 0x8904, &(0x7f0000000140)=0x0) sendmsg$nl_generic(r11, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b40300001e0000022cbd7000fddbdf251f00000008003c00", @ANYRES32=r12, @ANYBLOB="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"], 0x3b4}}, 0x2000408c) sendmsg$IPSET_CMD_SWAP(r10, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="340000000606010100000000001000000000000805000100070000000900020073797a30000000000900030073797a300000000050a75db38d8e9ddc08768d6259fdfc7f176f773732e580945b09ea02f9ba0d29106afdfbf33c192b46c1392f0a5e7a9f1b226bfc6f3d8d8491ee991bdea88e62cd673eea838d5528bb9bd021ba29495d2d3ed51eab607aabfe3deef26d205820912419b59f72bbba9b491be6f973d6542dd26b45b2a1c4c70edb26fa4c8c95bf3dc3db06cc6a991f9c2cd1d37666da8cf2ed23502e9fd193d27003a001194a05df13ec3f7c2f7d31b2c356b655acd104c27fc85fb3e37ae1b6c390c99460c1fd0647c670"], 0x34}, 0x1, 0x0, 0x0, 0x40c0}, 0x4040000) kernel console output (not intermixed with test programs): dge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:1) [ 954.819717][ T2936] vxcan1 speed is unknown, defaulting to 1000 [ 954.842806][ T3141] sctp: [Deprecated]: syz.0.8325 (pid 3141) Use of int in maxseg socket option. [ 954.842806][ T3141] Use struct sctp_assoc_value instead [ 954.857507][ T3140] sctp: [Deprecated]: syz.0.8325 (pid 3140) Use of int in maxseg socket option. [ 954.857507][ T3140] Use struct sctp_assoc_value instead [ 954.924991][ T3143] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8326'. [ 955.201876][ T3116] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 955.230022][ T3161] x_tables: duplicate underflow at hook 2 [ 955.239169][ T2936] vxcan1 speed is unknown, defaulting to 1000 [ 955.345221][ T3163] netlink: 40 bytes leftover after parsing attributes in process `syz.0.8333'. [ 955.571065][ T3180] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8338'. [ 955.735227][ T3193] syzkaller0: left promiscuous mode [ 955.754065][ T3193] syzkaller0: left allmulticast mode [ 955.840159][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 955.880663][ T3200] netlink: 60 bytes leftover after parsing attributes in process `syz.0.8344'. [ 955.899847][ T2936] vxcan1 speed is unknown, defaulting to 1000 [ 955.906262][ T3200] netlink: 60 bytes leftover after parsing attributes in process `syz.0.8344'. [ 956.018023][ T3211] tipc: Enabled bearer , priority 0 [ 956.025083][ T3210] sctp: [Deprecated]: syz.4.8346 (pid 3210) Use of struct sctp_assoc_value in delayed_ack socket option. [ 956.025083][ T3210] Use struct sctp_sack_info instead [ 956.133192][ T3217] syzkaller0: entered promiscuous mode [ 956.138817][ T3217] syzkaller0: entered allmulticast mode [ 956.296607][ T3227] netlink: 'syz.0.8353': attribute type 1 has an invalid length. [ 956.336498][ T3227] netlink: 'syz.0.8353': attribute type 1 has an invalid length. [ 956.520936][ T3240] netlink: 'syz.0.8357': attribute type 1 has an invalid length. [ 956.540757][ T3241] netlink: 'syz.2.8358': attribute type 3 has an invalid length. [ 956.687746][ T3240] bond6: entered promiscuous mode [ 956.720620][ T3240] 8021q: adding VLAN 0 to HW filter on device bond6 [ 956.868584][ T3247] bond6: (slave bridge5): making interface the new active one [ 956.883876][ T3247] bridge5: entered promiscuous mode [ 956.897527][ T3247] bond6: (slave bridge5): Enslaving as an active interface with an up link [ 957.154417][ T3273] bond7: option xmit_hash_policy: invalid value (64) [ 957.283555][ T3285] sctp: [Deprecated]: syz.0.8370 (pid 3285) Use of int in maxseg socket option. [ 957.283555][ T3285] Use struct sctp_assoc_value instead [ 957.358381][ T3288] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 957.390077][ T3273] bond7 (unregistering): Released all slaves [ 957.520196][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 957.567568][ T3297] netlink: 'syz.4.8374': attribute type 11 has an invalid length. [ 957.612833][ T3295] A link change request failed with some changes committed already. Interface .` may have been left with an inconsistent configuration, please check. [ 957.637343][ T3300] veth0: entered promiscuous mode [ 957.673813][ T3303] netlink: 'syz.0.8372': attribute type 16 has an invalid length. [ 957.697365][ T3303] netlink: 'syz.0.8372': attribute type 17 has an invalid length. [ 957.714244][ T3302] A link change request failed with some changes committed already. Interface .` may have been left with an inconsistent configuration, please check. [ 957.716824][ T3306] netlink: 'syz.4.8378': attribute type 1 has an invalid length. [ 957.749734][ T3300] veth0: left promiscuous mode [ 957.754986][ T3303] C: left promiscuous mode [ 957.818697][ T3303] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 957.856871][ T3314] netlink: 'syz.1.8380': attribute type 1 has an invalid length. [ 957.886821][ T3314] 8021q: adding VLAN 0 to HW filter on device bond9 [ 957.900360][ T3314] tipc: New replicast peer: 255.255.255.255 [ 957.906962][ T3314] tipc: Enabled bearer , priority 10 [ 958.041333][ T3323] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 958.520486][ T3357] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 958.923221][ T3374] FAULT_INJECTION: forcing a failure. [ 958.923221][ T3374] name failslab, interval 1, probability 0, space 0, times 0 [ 958.969796][ T3374] CPU: 0 UID: 0 PID: 3374 Comm: syz.0.8400 Not tainted syzkaller #0 PREEMPT(full) [ 958.969817][ T3374] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 958.969827][ T3374] Call Trace: [ 958.969834][ T3374] [ 958.969840][ T3374] dump_stack_lvl+0xe8/0x150 [ 958.969869][ T3374] should_fail_ex+0x412/0x560 [ 958.969894][ T3374] should_failslab+0xa8/0x100 [ 958.969913][ T3374] ? inet_twsk_alloc+0xe3/0x8e0 [ 958.969936][ T3374] kmem_cache_alloc_noprof+0x87/0x650 [ 958.969958][ T3374] inet_twsk_alloc+0xe3/0x8e0 [ 958.969984][ T3374] tcp_time_wait+0x5d/0xde0 [ 958.970000][ T3374] ? __tcp_send_ack+0x21a/0x4f0 [ 958.970019][ T3374] tcp_fin+0x147/0x4e0 [ 958.970039][ T3374] tcp_data_queue+0xd69/0x5e50 [ 958.970073][ T3374] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 958.970090][ T3374] ? tcp_urg+0x106/0x410 [ 958.970105][ T3374] ? __pfx_tcp_data_queue+0x10/0x10 [ 958.970123][ T3374] ? __pfx_tcp_urg+0x10/0x10 [ 958.970147][ T3374] tcp_rcv_state_process+0x24a0/0x4810 [ 958.970175][ T3374] ? __pfx_tcp_rcv_state_process+0x10/0x10 [ 958.970205][ T3374] tcp_v6_do_rcv+0xbef/0x1ba0 [ 958.970227][ T3374] ? __local_bh_enable_ip+0xd0/0x130 [ 958.970249][ T3374] ? __pfx_tcp_v6_do_rcv+0x10/0x10 [ 958.970265][ T3374] __release_sock+0x1b8/0x3a0 [ 958.970289][ T3374] ? __tcp_close+0x80e/0xfe0 [ 958.970307][ T3374] __tcp_close+0x832/0xfe0 [ 958.970329][ T3374] ? __local_bh_enable_ip+0xd0/0x130 [ 958.970350][ T3374] __mptcp_close_ssk+0x52d/0x1180 [ 958.970417][ T3374] mptcp_destroy_common+0x15c/0x330 [ 958.970440][ T3374] ? timer_delete+0x245/0x340 [ 958.970468][ T3374] mptcp_destroy+0x82/0x120 [ 958.970491][ T3374] __mptcp_destroy_sock+0x156/0x370 [ 958.970515][ T3374] __mptcp_close+0x86f/0xc90 [ 958.970537][ T3374] ? mptcp_close+0x28/0x1a0 [ 958.970557][ T3374] mptcp_close+0x28/0x1a0 [ 958.970572][ T3374] inet_release+0x143/0x190 [ 958.970591][ T3374] sock_close+0xc3/0x240 [ 958.970611][ T3374] ? __pfx_sock_close+0x10/0x10 [ 958.970630][ T3374] __fput+0x44f/0xa70 [ 958.970659][ T3374] fput_close_sync+0x11f/0x240 [ 958.970680][ T3374] ? __pfx_fput_close_sync+0x10/0x10 [ 958.970710][ T3374] __x64_sys_close+0x7e/0x110 [ 958.970733][ T3374] do_syscall_64+0x14d/0xf80 [ 958.970749][ T3374] ? trace_irq_disable+0x3b/0x150 [ 958.970770][ T3374] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 958.970785][ T3374] ? clear_bhb_loop+0x40/0x90 [ 958.970803][ T3374] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 958.970819][ T3374] RIP: 0033:0x7fcab8d9c799 [ 958.970833][ T3374] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 958.970846][ T3374] RSP: 002b:00007fcab9cfa028 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 958.970862][ T3374] RAX: ffffffffffffffda RBX: 00007fcab9015fa0 RCX: 00007fcab8d9c799 [ 958.970872][ T3374] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 958.970880][ T3374] RBP: 00007fcab9cfa090 R08: 0000000000000000 R09: 0000000000000000 [ 958.970889][ T3374] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 958.970898][ T3374] R13: 00007fcab9016038 R14: 00007fcab9015fa0 R15: 00007fff28ae6ae8 [ 958.970921][ T3374] [ 959.437788][ T3378] xt_l2tp: v2 sid > 0xffff: 1114112 [ 959.736491][ T3389] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 959.743798][ T3389] IPv6: NLM_F_CREATE should be set when creating new route [ 959.751096][ T3389] IPv6: NLM_F_CREATE should be set when creating new route [ 959.802365][ T3392] C: entered allmulticast mode [ 959.820651][ T3392] tunl0: entered allmulticast mode [ 959.847283][ T3392] gre0: entered allmulticast mode [ 959.854371][ T3402] __nla_validate_parse: 108 callbacks suppressed [ 959.854392][ T3402] netlink: 192 bytes leftover after parsing attributes in process `syz.1.8406'. [ 959.909795][ T3392] gretap0: entered allmulticast mode [ 959.933170][ T3392] erspan0: entered allmulticast mode [ 959.970409][ T3392] ip_vti0: entered allmulticast mode [ 960.011343][ T3392] ip6_vti0: entered allmulticast mode [ 960.019257][ T3392] sit0: entered allmulticast mode [ 960.101579][ T3392] ip6tnl0: entered allmulticast mode [ 960.122416][ T3392] ip6gre0: entered allmulticast mode [ 960.134486][ T3392] syz_tun: entered allmulticast mode [ 960.155554][ T3392] bridge0: entered allmulticast mode [ 960.166070][ T3392] vcan0: entered allmulticast mode [ 960.182233][ T3392] bond0: entered allmulticast mode [ 960.187488][ T3392] bond_slave_0: entered allmulticast mode [ 960.193556][ T3392] bond_slave_1: entered allmulticast mode [ 960.249938][ T3392] nlmon0: entered allmulticast mode [ 960.256698][ T3392] caif0: entered allmulticast mode [ 960.282413][ T3392] batadv0: entered allmulticast mode [ 960.310292][ T3392] vxcan0: entered allmulticast mode [ 960.316774][ T3392] vxcan1: entered allmulticast mode [ 960.374015][ T3392] veth0: entered allmulticast mode [ 960.404360][ T3392] veth1: entered allmulticast mode [ 960.423220][ T3392] wg2: entered allmulticast mode [ 960.441563][ T3392] veth0_to_bridge: entered allmulticast mode [ 960.463404][ T3392] veth1_to_bridge: entered allmulticast mode [ 960.490749][ T3392] veth0_to_bond: entered allmulticast mode [ 960.506717][ T3392] veth1_to_bond: entered allmulticast mode [ 960.516451][ T3392] veth0_to_team: entered allmulticast mode [ 960.534038][ T3392] team_slave_0: entered allmulticast mode [ 960.540638][ T3392] veth1_to_team: entered allmulticast mode [ 960.568962][ T3392] team_slave_1: entered allmulticast mode [ 960.576418][ T3392] veth0_to_batadv: entered allmulticast mode [ 960.587647][ T3392] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 960.595677][ T3392] batadv_slave_0: entered allmulticast mode [ 960.606173][ T3392] veth1_to_batadv: entered allmulticast mode [ 960.615171][ T3392] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 960.625754][ T3392] batadv_slave_1: entered allmulticast mode [ 960.634859][ T3392] xfrm0: entered allmulticast mode [ 960.641616][ T3392] veth1_to_hsr: entered allmulticast mode [ 960.650024][ T3392] hsr_slave_1: entered allmulticast mode [ 960.657723][ T3392] hsr0: entered allmulticast mode [ 960.671737][ T3392] veth1_virt_wifi: entered allmulticast mode [ 960.682722][ T3392] veth0_virt_wifi: entered allmulticast mode [ 960.702190][ T3392] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 960.726199][ T3392] veth0_vlan: entered allmulticast mode [ 960.764665][ T3392] vlan0: entered allmulticast mode [ 960.773255][ T3392] s5: entered allmulticast mode [ 960.789152][ T3392] macvlan0: entered allmulticast mode [ 960.800865][ T3392] macvlan1: entered allmulticast mode [ 960.829162][ T3392] ipvlan0: entered allmulticast mode [ 960.834988][ T3392] ipvlan1: entered allmulticast mode [ 960.841167][ T3392] veth1_macvtap: entered allmulticast mode [ 960.851504][ T3392] veth0_macvtap: entered allmulticast mode [ 960.861319][ T3392] macvtap0: entered allmulticast mode [ 960.890114][ T3392] geneve0: entered allmulticast mode [ 960.916043][ T3392] geneve1: entered allmulticast mode [ 960.942356][ T3392] mac80211_hwsim hwsim62 wlan1: entered allmulticast mode [ 960.951174][ T3392] bridge1: entered allmulticast mode [ 960.956694][ T3392] mac80211_hwsim hwsim63 wlan2: entered allmulticast mode [ 960.966052][ T3392] mac80211_hwsim hwsim66 wlan3: entered allmulticast mode [ 960.981833][ T3392] ip6gretap1: entered allmulticast mode [ 960.999087][ T3392] mac80211_hwsim hwsim61 pimreg: entered allmulticast mode [ 961.030168][ T3392] mac80211_hwsim hwsim62 syzkaller0: left promiscuous mode [ 961.037546][ T3392] mac80211_hwsim hwsim70 wlan4: entered allmulticast mode [ 961.054889][ T3392] syztnl2: entered allmulticast mode [ 961.062100][ T3392] sit1: entered allmulticast mode [ 961.132836][ T3392] bond1: entered allmulticast mode [ 961.165422][ T3392] bond2: entered allmulticast mode [ 961.173689][ T3392] erspan1: entered allmulticast mode [ 961.179194][ T3392] xfrm1: entered allmulticast mode [ 961.186179][ T3392] bridge2: entered allmulticast mode [ 961.196617][ T3392] bond3: entered allmulticast mode [ 961.215389][ T3392] gtp0: entered allmulticast mode [ 961.228985][ T3392] sit2: entered allmulticast mode [ 961.282150][ T3392] bond4: left promiscuous mode [ 961.289797][ T3392] bond4: entered allmulticast mode [ 961.297552][ T3392] bridge3: entered allmulticast mode [ 961.314513][ T3392] bridge4: entered allmulticast mode [ 961.339866][ T3392] geneve2: entered allmulticast mode [ 961.349504][ T3392] bond5: entered allmulticast mode [ 961.365438][ T3392] ip6gretap0: entered allmulticast mode [ 961.373439][ T3392] macvtap1: left promiscuous mode [ 961.381610][ T3392] macvlan2: entered allmulticast mode [ 961.387164][ T3392] rose0: entered allmulticast mode [ 961.403343][ T3392] netdevsim netdevsim0 eth0: entered allmulticast mode [ 961.420345][ T3392] netdevsim netdevsim0 eth1: entered allmulticast mode [ 961.434410][ T3392] netdevsim netdevsim0 eth2: entered allmulticast mode [ 961.451445][ T3392] netdevsim netdevsim0 eth3: entered allmulticast mode [ 961.469251][ T3392] bond6: left promiscuous mode [ 961.478870][ T3392] bridge5: left promiscuous mode [ 961.485214][ T3392] bond6: entered allmulticast mode [ 961.490739][ T3392] bridge5: entered allmulticast mode [ 961.629981][ T3444] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8413'. [ 961.675028][ T3430] 8021q: adding VLAN 0 to HW filter on device ipvlan3 [ 961.696484][ T3430] bond0: (slave ipvlan3): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 961.716327][ T3446] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8413'. [ 961.753768][ T3431] 8021q: adding VLAN 0 to HW filter on device ipvlan3 [ 961.763967][ T3431] bond0: (slave ipvlan3): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 961.797025][ T2820] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 20002 - 0 [ 961.807224][ T2820] netdevsim netdevsim0 eth0: unset [1, 1] type 2 family 0 port 6081 - 0 [ 961.815728][ T2820] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 20002 - 0 [ 961.824509][ T2820] netdevsim netdevsim0 eth1: unset [1, 1] type 2 family 0 port 6081 - 0 [ 961.847030][ T3444] netlink: 232 bytes leftover after parsing attributes in process `syz.4.8413'. [ 961.894548][ T2820] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 20002 - 0 [ 961.931443][ T2820] netdevsim netdevsim0 eth2: unset [1, 1] type 2 family 0 port 6081 - 0 [ 961.945077][ T2820] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 20002 - 0 [ 961.963323][ T2820] netdevsim netdevsim0 eth3: unset [1, 1] type 2 family 0 port 6081 - 0 [ 962.047862][ T3462] tipc: Enabling of bearer rejected, already enabled [ 962.287011][ T3481] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8423'. [ 962.305695][ T2811] nci: nci_rsp_packet: unsupported rsp opcode 0xf00 [ 962.318139][ T3481] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8423'. [ 962.328645][ T3481] netlink: 'syz.0.8423': attribute type 4 has an invalid length. [ 962.359678][ T3481] netlink: 'syz.0.8423': attribute type 10 has an invalid length. [ 962.367714][ T3481] macvtap0: left allmulticast mode [ 962.659488][ T3503] netlink: 20 bytes leftover after parsing attributes in process `syz.4.8429'. [ 962.988981][ T3472] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 963.150482][ T3510] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8432'. [ 963.543580][ T3540] openvswitch: netlink: Key 2 has unexpected len 0 expected 4 [ 963.702162][ T3548] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8444'. [ 963.753376][ T3553] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8444'. [ 963.961664][ T3570] RDS: rds_bind could not find a transport for 6861:7368:3a69:7000:1030:0:ffff:ffff, load rds_tcp or rds_rdma? [ 964.112664][ T3569] lo speed is unknown, defaulting to 1000 [ 964.864010][ T3627] __nla_validate_parse: 6 callbacks suppressed [ 964.864033][ T3627] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8465'. [ 964.882160][ T3627] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8465'. [ 964.898148][ T3627] netlink: 'syz.3.8465': attribute type 3 has an invalid length. [ 964.931950][ T3569] wlan0 speed is unknown, defaulting to 1000 [ 964.931964][ T3574] lo speed is unknown, defaulting to 1000 [ 964.964840][ T3625] netlink: 244 bytes leftover after parsing attributes in process `syz.1.8464'. [ 964.993688][ T3569] vxcan1 speed is unknown, defaulting to 1000 [ 965.194400][ T3640] netlink: 60 bytes leftover after parsing attributes in process `syz.2.8468'. [ 965.232740][ T3640] netlink: 60 bytes leftover after parsing attributes in process `syz.2.8468'. [ 965.379294][ T3649] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8471'. [ 965.501066][ T3653] netlink: 32 bytes leftover after parsing attributes in process `syz.2.8472'. [ 965.542632][ T3657] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8474'. [ 965.558081][ T3657] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8474'. [ 965.583473][ T3657] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8474'. [ 965.846122][ T3574] wlan0 speed is unknown, defaulting to 1000 [ 965.925010][ T3667] FAULT_INJECTION: forcing a failure. [ 965.925010][ T3667] name failslab, interval 1, probability 0, space 0, times 0 [ 965.945697][ T3667] CPU: 1 UID: 0 PID: 3667 Comm: syz.1.8477 Not tainted syzkaller #0 PREEMPT(full) [ 965.945731][ T3667] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 965.945746][ T3667] Call Trace: [ 965.945755][ T3667] [ 965.945764][ T3667] dump_stack_lvl+0xe8/0x150 [ 965.945819][ T3667] should_fail_ex+0x412/0x560 [ 965.945858][ T3667] should_failslab+0xa8/0x100 [ 965.945890][ T3667] __kmalloc_cache_noprof+0x88/0x660 [ 965.945913][ T3667] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 965.945937][ T3667] ? nft_trans_table_add+0x56/0x430 [ 965.945970][ T3667] nft_trans_table_add+0x56/0x430 [ 965.946005][ T3667] nf_tables_newtable+0xce3/0x1910 [ 965.946052][ T3667] nfnetlink_rcv+0x1240/0x27b0 [ 965.946120][ T3667] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 965.946167][ T3667] ? ref_tracker_free+0x693/0x840 [ 965.946231][ T3667] ? __netlink_deliver_tap+0x807/0x850 [ 965.946264][ T3667] ? netlink_deliver_tap+0x2e/0x1b0 [ 965.946316][ T3667] netlink_unicast+0x80f/0x9b0 [ 965.946355][ T3667] ? __pfx_netlink_unicast+0x10/0x10 [ 965.946388][ T3667] ? netlink_sendmsg+0x650/0xb40 [ 965.946417][ T3667] ? skb_put+0x11b/0x210 [ 965.946453][ T3667] netlink_sendmsg+0x813/0xb40 [ 965.946496][ T3667] ? __pfx_netlink_sendmsg+0x10/0x10 [ 965.946533][ T3667] ? aa_sock_msg_perm+0xf1/0x1b0 [ 965.946567][ T3667] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 965.946595][ T3667] ____sys_sendmsg+0x972/0x9f0 [ 965.946631][ T3667] ? __pfx_____sys_sendmsg+0x10/0x10 [ 965.946666][ T3667] ? import_iovec+0x73/0xa0 [ 965.946698][ T3667] ___sys_sendmsg+0x2a5/0x360 [ 965.946729][ T3667] ? __pfx____sys_sendmsg+0x10/0x10 [ 965.946794][ T3667] ? __fget_files+0x2a/0x420 [ 965.946825][ T3667] ? __fget_files+0x3a0/0x420 [ 965.946869][ T3667] __x64_sys_sendmsg+0x1bd/0x2a0 [ 965.946897][ T3667] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 965.946934][ T3667] ? __pfx_ksys_write+0x10/0x10 [ 965.946971][ T3667] do_syscall_64+0x14d/0xf80 [ 965.947007][ T3667] ? trace_irq_disable+0x3b/0x150 [ 965.947036][ T3667] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 965.947058][ T3667] ? clear_bhb_loop+0x40/0x90 [ 965.947084][ T3667] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 965.947105][ T3667] RIP: 0033:0x7fa16439c799 [ 965.947124][ T3667] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 965.947154][ T3667] RSP: 002b:00007fa1625ee028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 965.947175][ T3667] RAX: ffffffffffffffda RBX: 00007fa164615fa0 RCX: 00007fa16439c799 [ 965.947208][ T3667] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 965.947221][ T3667] RBP: 00007fa1625ee090 R08: 0000000000000000 R09: 0000000000000000 [ 965.947234][ T3667] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 965.947247][ T3667] R13: 00007fa164616038 R14: 00007fa164615fa0 R15: 00007ffc08d83d38 [ 965.947282][ T3667] [ 966.248351][ T3574] vxcan1 speed is unknown, defaulting to 1000 [ 966.854383][ T3688] bond7: option all_slaves_active: invalid value (222) [ 966.872810][ T3688] bond7 (unregistering): Released all slaves [ 967.130572][ T3700] FAULT_INJECTION: forcing a failure. [ 967.130572][ T3700] name failslab, interval 1, probability 0, space 0, times 0 [ 967.157213][ T3700] CPU: 1 UID: 0 PID: 3700 Comm: syz.1.8488 Not tainted syzkaller #0 PREEMPT(full) [ 967.157244][ T3700] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 967.157258][ T3700] Call Trace: [ 967.157266][ T3700] [ 967.157276][ T3700] dump_stack_lvl+0xe8/0x150 [ 967.157309][ T3700] should_fail_ex+0x412/0x560 [ 967.157343][ T3700] should_failslab+0xa8/0x100 [ 967.157370][ T3700] __kmalloc_noprof+0xe8/0x760 [ 967.157392][ T3700] ? __kvmalloc_node_noprof+0x545/0x8a0 [ 967.157414][ T3700] ? nla_strdup+0x9d/0x140 [ 967.157433][ T3700] ? nf_tables_newset+0x1354/0x2580 [ 967.157460][ T3700] nla_strdup+0x9d/0x140 [ 967.157479][ T3700] ? nft_rhash_init+0x1f/0x3b0 [ 967.157509][ T3700] nf_tables_newset+0x1393/0x2580 [ 967.157545][ T3700] ? __pfx_nf_tables_newset+0x10/0x10 [ 967.157590][ T3700] ? __nla_parse+0x40/0x60 [ 967.157614][ T3700] nfnetlink_rcv+0x1240/0x27b0 [ 967.157674][ T3700] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 967.157717][ T3700] ? ref_tracker_free+0x693/0x840 [ 967.157774][ T3700] ? __netlink_deliver_tap+0x807/0x850 [ 967.157803][ T3700] ? netlink_deliver_tap+0x2e/0x1b0 [ 967.157850][ T3700] netlink_unicast+0x80f/0x9b0 [ 967.157885][ T3700] ? __pfx_netlink_unicast+0x10/0x10 [ 967.157914][ T3700] ? netlink_sendmsg+0x650/0xb40 [ 967.157941][ T3700] ? skb_put+0x11b/0x210 [ 967.157966][ T3700] netlink_sendmsg+0x813/0xb40 [ 967.158004][ T3700] ? __pfx_netlink_sendmsg+0x10/0x10 [ 967.158044][ T3700] ? aa_sock_msg_perm+0xf1/0x1b0 [ 967.158076][ T3700] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 967.158101][ T3700] ____sys_sendmsg+0x972/0x9f0 [ 967.158134][ T3700] ? __pfx_____sys_sendmsg+0x10/0x10 [ 967.158167][ T3700] ? import_iovec+0x73/0xa0 [ 967.158192][ T3700] ___sys_sendmsg+0x2a5/0x360 [ 967.158221][ T3700] ? __pfx____sys_sendmsg+0x10/0x10 [ 967.158280][ T3700] ? __fget_files+0x2a/0x420 [ 967.158308][ T3700] ? __fget_files+0x3a0/0x420 [ 967.158347][ T3700] __x64_sys_sendmsg+0x1bd/0x2a0 [ 967.158373][ T3700] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 967.158405][ T3700] ? __pfx_ksys_write+0x10/0x10 [ 967.158440][ T3700] do_syscall_64+0x14d/0xf80 [ 967.158461][ T3700] ? trace_irq_disable+0x3b/0x150 [ 967.158489][ T3700] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 967.158510][ T3700] ? clear_bhb_loop+0x40/0x90 [ 967.158534][ T3700] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 967.158554][ T3700] RIP: 0033:0x7fa16439c799 [ 967.158572][ T3700] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 967.158589][ T3700] RSP: 002b:00007fa1625ee028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 967.158611][ T3700] RAX: ffffffffffffffda RBX: 00007fa164615fa0 RCX: 00007fa16439c799 [ 967.158626][ T3700] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 967.158639][ T3700] RBP: 00007fa1625ee090 R08: 0000000000000000 R09: 0000000000000000 [ 967.158651][ T3700] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 967.158662][ T3700] R13: 00007fa164616038 R14: 00007fa164615fa0 R15: 00007ffc08d83d38 [ 967.158704][ T3700] [ 968.877605][ T3757] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 969.306135][ T3775] tipc: Started in network mode [ 969.313325][ T3775] tipc: Node identity ac14140f, cluster identity 4711 [ 969.321028][ T3775] tipc: New replicast peer: 255.255.255.255 [ 969.334106][ T3775] tipc: Enabled bearer , priority 10 [ 969.466971][ T3785] FAULT_INJECTION: forcing a failure. [ 969.466971][ T3785] name failslab, interval 1, probability 0, space 0, times 0 [ 969.498327][ T3785] CPU: 1 UID: 0 PID: 3785 Comm: syz.0.8516 Not tainted syzkaller #0 PREEMPT(full) [ 969.498353][ T3785] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 969.498365][ T3785] Call Trace: [ 969.498373][ T3785] [ 969.498382][ T3785] dump_stack_lvl+0xe8/0x150 [ 969.498413][ T3785] should_fail_ex+0x412/0x560 [ 969.498445][ T3785] should_failslab+0xa8/0x100 [ 969.498471][ T3785] __kmalloc_noprof+0xe8/0x760 [ 969.498492][ T3785] ? nft_set_elem_init+0xa8/0x7e0 [ 969.498523][ T3785] nft_set_elem_init+0xa8/0x7e0 [ 969.498556][ T3785] nf_tables_newsetelem+0x22f3/0x4340 [ 969.498619][ T3785] ? __pfx_nf_tables_newsetelem+0x10/0x10 [ 969.498654][ T3785] ? nla_validate_array+0xfc/0x260 [ 969.498703][ T3785] ? __pfx___nla_validate_parse+0x10/0x10 [ 969.498728][ T3785] ? __pfx_nf_tables_newset+0x10/0x10 [ 969.498758][ T3785] ? nfnl_pernet+0x23/0x240 [ 969.498791][ T3785] ? __nla_parse+0x40/0x60 [ 969.498815][ T3785] nfnetlink_rcv+0x1240/0x27b0 [ 969.498838][ T3785] ? is_bpf_text_address+0x26/0x2b0 [ 969.498889][ T3785] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 969.498923][ T3785] ? __lock_acquire+0x6b5/0x2cf0 [ 969.498981][ T3785] ? netlink_deliver_tap+0x2e/0x1b0 [ 969.499025][ T3785] netlink_unicast+0x80f/0x9b0 [ 969.499063][ T3785] ? __pfx_netlink_unicast+0x10/0x10 [ 969.499090][ T3785] ? netlink_sendmsg+0x650/0xb40 [ 969.499116][ T3785] ? skb_put+0x11b/0x210 [ 969.499139][ T3785] netlink_sendmsg+0x813/0xb40 [ 969.499175][ T3785] ? __pfx_netlink_sendmsg+0x10/0x10 [ 969.499206][ T3785] ? aa_sock_msg_perm+0xf1/0x1b0 [ 969.499234][ T3785] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 969.499259][ T3785] ____sys_sendmsg+0x972/0x9f0 [ 969.499288][ T3785] ? __pfx_____sys_sendmsg+0x10/0x10 [ 969.499319][ T3785] ? import_iovec+0x73/0xa0 [ 969.499342][ T3785] ___sys_sendmsg+0x2a5/0x360 [ 969.499369][ T3785] ? __pfx____sys_sendmsg+0x10/0x10 [ 969.499424][ T3785] ? __fget_files+0x2a/0x420 [ 969.499450][ T3785] ? __fget_files+0x3a0/0x420 [ 969.499487][ T3785] __x64_sys_sendmsg+0x1bd/0x2a0 [ 969.499512][ T3785] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 969.499543][ T3785] ? __pfx_ksys_write+0x10/0x10 [ 969.499574][ T3785] do_syscall_64+0x14d/0xf80 [ 969.499600][ T3785] ? trace_irq_disable+0x3b/0x150 [ 969.499625][ T3785] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 969.499645][ T3785] ? clear_bhb_loop+0x40/0x90 [ 969.499667][ T3785] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 969.499685][ T3785] RIP: 0033:0x7fcab8d9c799 [ 969.499702][ T3785] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 969.499718][ T3785] RSP: 002b:00007fcab9cfa028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 969.499738][ T3785] RAX: ffffffffffffffda RBX: 00007fcab9015fa0 RCX: 00007fcab8d9c799 [ 969.499751][ T3785] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 969.499764][ T3785] RBP: 00007fcab9cfa090 R08: 0000000000000000 R09: 0000000000000000 [ 969.499776][ T3785] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 969.499787][ T3785] R13: 00007fcab9016038 R14: 00007fcab9015fa0 R15: 00007fff28ae6ae8 [ 969.499817][ T3785] [ 969.816189][T22090] Bluetooth: hci4: command 0x0405 tx timeout [ 969.972154][ T3799] bridge_slave_0: left promiscuous mode [ 969.978115][ T3799] bridge0: port 1(bridge_slave_0) entered disabled state [ 970.009413][ T3799] bridge_slave_1: left promiscuous mode [ 970.025760][ T3799] bridge0: port 2(bridge_slave_1) entered disabled state [ 970.175639][ T3799] bond1: (slave veth0_to_bond): Releasing active interface [ 970.229868][ T3824] __nla_validate_parse: 9 callbacks suppressed [ 970.229890][ T3824] netlink: 212348 bytes leftover after parsing attributes in process `syz.1.8524'. [ 970.255058][ T3799] bond0: (slave bond_slave_0): Releasing backup interface [ 970.270539][ T3799] bond0: (slave bond_slave_1): Releasing backup interface [ 970.292781][ T3799] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 970.303031][ T3799] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 970.326856][ T3799] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 970.365782][ T3812] syzkaller0: entered promiscuous mode [ 970.371737][ T3812] syzkaller0: entered allmulticast mode [ 970.486520][ T3836] IPVS: set_ctl: invalid protocol: 43 10.1.1.2:20003 [ 970.507970][ T3836] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 970.572496][T26597] tipc: Node number set to 2886997007 [ 970.740994][ T3845] netlink: 'syz.4.8528': attribute type 33 has an invalid length. [ 970.772827][ T3845] bond7: option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0) [ 970.794054][ T3849] FAULT_INJECTION: forcing a failure. [ 970.794054][ T3849] name failslab, interval 1, probability 0, space 0, times 0 [ 970.832198][ T3845] bond7 (unregistering): Released all slaves [ 970.859943][ T3849] CPU: 1 UID: 0 PID: 3849 Comm: syz.0.8530 Not tainted syzkaller #0 PREEMPT(full) [ 970.859972][ T3849] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 970.859987][ T3849] Call Trace: [ 970.859996][ T3849] [ 970.860006][ T3849] dump_stack_lvl+0xe8/0x150 [ 970.860041][ T3849] should_fail_ex+0x412/0x560 [ 970.860078][ T3849] should_failslab+0xa8/0x100 [ 970.860107][ T3849] __kmalloc_noprof+0xe8/0x760 [ 970.860132][ T3849] ? nft_trans_alloc+0x22/0x2a0 [ 970.860165][ T3849] nft_trans_alloc+0x22/0x2a0 [ 970.860194][ T3849] nf_tables_newsetelem+0x2864/0x4340 [ 970.860263][ T3849] ? __pfx_nf_tables_newsetelem+0x10/0x10 [ 970.860304][ T3849] ? nla_validate_array+0xfc/0x260 [ 970.860357][ T3849] ? __pfx___nla_validate_parse+0x10/0x10 [ 970.860387][ T3849] ? __pfx_nf_tables_newset+0x10/0x10 [ 970.860420][ T3849] ? nfnl_pernet+0x23/0x240 [ 970.860456][ T3849] ? __nla_parse+0x40/0x60 [ 970.860482][ T3849] nfnetlink_rcv+0x1240/0x27b0 [ 970.860509][ T3849] ? is_bpf_text_address+0x26/0x2b0 [ 970.860568][ T3849] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 970.860609][ T3849] ? __lock_acquire+0x6b5/0x2cf0 [ 970.860672][ T3849] ? netlink_deliver_tap+0x2e/0x1b0 [ 970.860724][ T3849] netlink_unicast+0x80f/0x9b0 [ 970.860763][ T3849] ? __pfx_netlink_unicast+0x10/0x10 [ 970.860795][ T3849] ? netlink_sendmsg+0x650/0xb40 [ 970.860824][ T3849] ? skb_put+0x11b/0x210 [ 970.860851][ T3849] netlink_sendmsg+0x813/0xb40 [ 970.860892][ T3849] ? __pfx_netlink_sendmsg+0x10/0x10 [ 970.860935][ T3849] ? aa_sock_msg_perm+0xf1/0x1b0 [ 970.860974][ T3849] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 970.861002][ T3849] ____sys_sendmsg+0x972/0x9f0 [ 970.861037][ T3849] ? __pfx_____sys_sendmsg+0x10/0x10 [ 970.861072][ T3849] ? import_iovec+0x73/0xa0 [ 970.861101][ T3849] ___sys_sendmsg+0x2a5/0x360 [ 970.861133][ T3849] ? __pfx____sys_sendmsg+0x10/0x10 [ 970.861195][ T3849] ? __fget_files+0x2a/0x420 [ 970.861227][ T3849] ? __fget_files+0x3a0/0x420 [ 970.861270][ T3849] __x64_sys_sendmsg+0x1bd/0x2a0 [ 970.861299][ T3849] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 970.861334][ T3849] ? __pfx_ksys_write+0x10/0x10 [ 970.861370][ T3849] do_syscall_64+0x14d/0xf80 [ 970.861393][ T3849] ? trace_irq_disable+0x3b/0x150 [ 970.861424][ T3849] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 970.861445][ T3849] ? clear_bhb_loop+0x40/0x90 [ 970.861472][ T3849] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 970.861493][ T3849] RIP: 0033:0x7fcab8d9c799 [ 970.861513][ T3849] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 970.861532][ T3849] RSP: 002b:00007fcab9cfa028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 970.861555][ T3849] RAX: ffffffffffffffda RBX: 00007fcab9015fa0 RCX: 00007fcab8d9c799 [ 970.861571][ T3849] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 970.861584][ T3849] RBP: 00007fcab9cfa090 R08: 0000000000000000 R09: 0000000000000000 [ 970.861597][ T3849] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 970.861609][ T3849] R13: 00007fcab9016038 R14: 00007fcab9015fa0 R15: 00007fff28ae6ae8 [ 970.861644][ T3849] [ 971.083597][ T3858] xt_socket: unknown flags 0x50 [ 971.210514][ T3864] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8528'. [ 971.257367][ T3850] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8528'. [ 971.284966][ T3852] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8533'. [ 971.417133][ T3874] tunl0: Caught tx_queue_len zero misconfig [ 971.436702][ T3874] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8537'. [ 971.456123][ T3874] veth1: Caught tx_queue_len zero misconfig [ 971.469991][ T3874] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8537'. [ 971.700052][ T3891] netlink: 32 bytes leftover after parsing attributes in process `syz.0.8541'. [ 971.752311][ T3897] FAULT_INJECTION: forcing a failure. [ 971.752311][ T3897] name failslab, interval 1, probability 0, space 0, times 0 [ 971.785910][ T3897] CPU: 0 UID: 0 PID: 3897 Comm: syz.4.8544 Not tainted syzkaller #0 PREEMPT(full) [ 971.785940][ T3897] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 971.785954][ T3897] Call Trace: [ 971.785964][ T3897] [ 971.785974][ T3897] dump_stack_lvl+0xe8/0x150 [ 971.786010][ T3897] should_fail_ex+0x412/0x560 [ 971.786048][ T3897] should_failslab+0xa8/0x100 [ 971.786078][ T3897] __kmalloc_cache_noprof+0x88/0x660 [ 971.786103][ T3897] ? kasan_quarantine_put+0xbb/0x1f0 [ 971.786126][ T3897] ? __nft_trans_set_add+0x5e/0x710 [ 971.786154][ T3897] ? __pfx_nft_rhash_obj+0x10/0x10 [ 971.786175][ T3897] ? __pfx_nft_rhash_cmp+0x10/0x10 [ 971.786201][ T3897] __nft_trans_set_add+0x5e/0x710 [ 971.786229][ T3897] ? nf_tables_newset+0x13bf/0x2580 [ 971.786261][ T3897] nf_tables_newset+0x1d92/0x2580 [ 971.786300][ T3897] ? __pfx_nf_tables_newset+0x10/0x10 [ 971.786349][ T3897] ? __nla_parse+0x40/0x60 [ 971.786377][ T3897] nfnetlink_rcv+0x1240/0x27b0 [ 971.786455][ T3897] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 971.786500][ T3897] ? ref_tracker_free+0x693/0x840 [ 971.786561][ T3897] ? __netlink_deliver_tap+0x82a/0x850 [ 971.786593][ T3897] ? netlink_deliver_tap+0x2e/0x1b0 [ 971.786642][ T3897] netlink_unicast+0x80f/0x9b0 [ 971.786680][ T3897] ? __pfx_netlink_unicast+0x10/0x10 [ 971.786711][ T3897] ? netlink_sendmsg+0x650/0xb40 [ 971.786741][ T3897] ? skb_put+0x11b/0x210 [ 971.786766][ T3897] netlink_sendmsg+0x813/0xb40 [ 971.786806][ T3897] ? __pfx_netlink_sendmsg+0x10/0x10 [ 971.786842][ T3897] ? aa_sock_msg_perm+0xf1/0x1b0 [ 971.786882][ T3897] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 971.786920][ T3897] ____sys_sendmsg+0x972/0x9f0 [ 971.786952][ T3897] ? __pfx_____sys_sendmsg+0x10/0x10 [ 971.786984][ T3897] ? import_iovec+0x73/0xa0 [ 971.787009][ T3897] ___sys_sendmsg+0x2a5/0x360 [ 971.787037][ T3897] ? __pfx____sys_sendmsg+0x10/0x10 [ 971.787114][ T3897] ? __fget_files+0x2a/0x420 [ 971.787144][ T3897] ? __fget_files+0x3a0/0x420 [ 971.787187][ T3897] __x64_sys_sendmsg+0x1bd/0x2a0 [ 971.787215][ T3897] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 971.787251][ T3897] ? __pfx_ksys_write+0x10/0x10 [ 971.787287][ T3897] do_syscall_64+0x14d/0xf80 [ 971.787311][ T3897] ? trace_irq_disable+0x3b/0x150 [ 971.787341][ T3897] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 971.787374][ T3897] ? clear_bhb_loop+0x40/0x90 [ 971.787398][ T3897] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 971.787418][ T3897] RIP: 0033:0x7ff59459c799 [ 971.787436][ T3897] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 971.787453][ T3897] RSP: 002b:00007ff595387028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 971.787475][ T3897] RAX: ffffffffffffffda RBX: 00007ff594815fa0 RCX: 00007ff59459c799 [ 971.787490][ T3897] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 971.787502][ T3897] RBP: 00007ff595387090 R08: 0000000000000000 R09: 0000000000000000 [ 971.787514][ T3897] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 971.787526][ T3897] R13: 00007ff594816038 R14: 00007ff594815fa0 R15: 00007fff357fed88 [ 971.787557][ T3897] [ 972.140434][ T3900] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8545'. [ 972.288642][ T3894] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8542'. [ 972.375122][ T3919] IPVS: set_ctl: invalid protocol: 108 172.30.1.4:20000 [ 972.518535][ T3932] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 972.570721][ T3932] tun0: tun_chr_ioctl cmd 1074025675 [ 972.576153][ T3932] tun0: persist disabled [ 972.615876][ T3935] netlink: 32 bytes leftover after parsing attributes in process `syz.0.8557'. [ 973.083659][ T3964] bond10: Removing last arp target with arp_interval on [ 973.215280][ T3971] netlink: 'syz.0.8572': attribute type 12 has an invalid length. [ 973.348985][ T3971] bond8: option primary_reselect: invalid value (255) [ 973.364649][ T3971] bond8 (unregistering): Released all slaves [ 973.856639][ T4009] tunl0: entered promiscuous mode [ 973.883097][ T4009] netlink: 'syz.1.8582': attribute type 3 has an invalid length. [ 973.980971][ T4014] FAULT_INJECTION: forcing a failure. [ 973.980971][ T4014] name failslab, interval 1, probability 0, space 0, times 0 [ 973.993902][ T4014] CPU: 0 UID: 0 PID: 4014 Comm: syz.4.8586 Not tainted syzkaller #0 PREEMPT(full) [ 973.993930][ T4014] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 973.993943][ T4014] Call Trace: [ 973.993953][ T4014] [ 973.993962][ T4014] dump_stack_lvl+0xe8/0x150 [ 973.993998][ T4014] should_fail_ex+0x412/0x560 [ 973.994035][ T4014] should_failslab+0xa8/0x100 [ 973.994065][ T4014] __kmalloc_cache_noprof+0x88/0x660 [ 973.994091][ T4014] ? nft_limit_init+0x53b/0x750 [ 973.994123][ T4014] nft_limit_init+0x53b/0x750 [ 973.994167][ T4014] ? __pfx_nft_limit_init+0x10/0x10 [ 973.994192][ T4014] ? rcu_is_watching+0x15/0xb0 [ 973.994221][ T4014] ? trace_kmalloc+0x2a/0x110 [ 973.994247][ T4014] ? __kmalloc_noprof+0x37d/0x760 [ 973.994274][ T4014] nft_limit_pkts_init+0x28/0xe0 [ 973.994301][ T4014] nft_set_elem_expr_alloc+0x213/0x5f0 [ 973.994335][ T4014] ? __pfx_nft_set_elem_expr_alloc+0x10/0x10 [ 973.994380][ T4014] ? nla_strcmp+0x106/0x140 [ 973.994400][ T4014] ? nla_strcmp+0x106/0x140 [ 973.994432][ T4014] nf_tables_newsetelem+0x173b/0x4340 [ 973.994517][ T4014] ? __pfx_nf_tables_newsetelem+0x10/0x10 [ 973.994558][ T4014] ? nla_validate_array+0xfc/0x260 [ 973.994611][ T4014] ? __pfx___nla_validate_parse+0x10/0x10 [ 973.994641][ T4014] ? __pfx_nf_tables_newset+0x10/0x10 [ 973.994675][ T4014] ? nfnl_pernet+0x23/0x240 [ 973.994713][ T4014] ? __nla_parse+0x40/0x60 [ 973.994739][ T4014] nfnetlink_rcv+0x1240/0x27b0 [ 973.994803][ T4014] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 973.994850][ T4014] ? ref_tracker_free+0x693/0x840 [ 973.994911][ T4014] ? __netlink_deliver_tap+0x82a/0x850 [ 973.994944][ T4014] ? netlink_deliver_tap+0x2e/0x1b0 [ 973.995003][ T4014] netlink_unicast+0x80f/0x9b0 [ 973.995038][ T4014] ? __pfx_netlink_unicast+0x10/0x10 [ 973.995066][ T4014] ? netlink_sendmsg+0x650/0xb40 [ 973.995094][ T4014] ? skb_put+0x11b/0x210 [ 973.995117][ T4014] netlink_sendmsg+0x813/0xb40 [ 973.995154][ T4014] ? __pfx_netlink_sendmsg+0x10/0x10 [ 973.995186][ T4014] ? aa_sock_msg_perm+0xf1/0x1b0 [ 973.995217][ T4014] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 973.995242][ T4014] ____sys_sendmsg+0x972/0x9f0 [ 973.995274][ T4014] ? __pfx_____sys_sendmsg+0x10/0x10 [ 973.995306][ T4014] ? import_iovec+0x73/0xa0 [ 973.995331][ T4014] ___sys_sendmsg+0x2a5/0x360 [ 973.995359][ T4014] ? __pfx____sys_sendmsg+0x10/0x10 [ 973.995416][ T4014] ? __fget_files+0x2a/0x420 [ 973.995444][ T4014] ? __fget_files+0x3a0/0x420 [ 973.995483][ T4014] __x64_sys_sendmsg+0x1bd/0x2a0 [ 973.995534][ T4014] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 973.995570][ T4014] ? __pfx_ksys_write+0x10/0x10 [ 973.995606][ T4014] do_syscall_64+0x14d/0xf80 [ 973.995629][ T4014] ? trace_irq_disable+0x3b/0x150 [ 973.995659][ T4014] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 973.995693][ T4014] ? clear_bhb_loop+0x40/0x90 [ 973.995717][ T4014] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 973.995737][ T4014] RIP: 0033:0x7ff59459c799 [ 973.995757][ T4014] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 973.995774][ T4014] RSP: 002b:00007ff595387028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 973.995812][ T4014] RAX: ffffffffffffffda RBX: 00007ff594815fa0 RCX: 00007ff59459c799 [ 973.995828][ T4014] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 973.995841][ T4014] RBP: 00007ff595387090 R08: 0000000000000000 R09: 0000000000000000 [ 973.995854][ T4014] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 973.995866][ T4014] R13: 00007ff594816038 R14: 00007ff594815fa0 R15: 00007fff357fed88 [ 973.995901][ T4014] [ 974.474696][ T4022] nftables ruleset with unbound set [ 974.896987][ T4045] netlink: 'syz.4.8595': attribute type 3 has an invalid length. [ 975.286546][ T4079] netlink: 'syz.4.8603': attribute type 64 has an invalid length. [ 975.295466][ T4079] __nla_validate_parse: 10 callbacks suppressed [ 975.295485][ T4079] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8603'. [ 975.461954][ T4088] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8610'. [ 976.010945][ T4126] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8622'. [ 976.071366][ T4130] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8623'. [ 976.590378][ T4176] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8633'. [ 976.604437][ T4176] vxcan0: entered allmulticast mode [ 977.013409][ T4179] xt_TCPMSS: Only works on TCP SYN packets [ 977.204153][ T4158] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 977.503544][ T4201] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8643'. [ 977.549860][ T4201] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8643'. [ 977.571747][ T4204] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8645'. [ 978.161357][ T4239] mac80211_hwsim hwsim62 syzkaller0: entered promiscuous mode [ 978.354314][ T4249] 8021q: adding VLAN 0 to HW filter on device bond4 [ 978.511674][ T4245] nbd: couldn't find a device at index 0 [ 978.519024][ T4259] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 978.549880][ T4259] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 978.567761][ T4259] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 978.645175][ T4259] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 978.667749][ T4265] netlink: 32 bytes leftover after parsing attributes in process `syz.2.8665'. [ 978.679934][ T4259] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 978.702531][ T4259] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 978.719098][ T4259] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 978.735017][ T4259] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 978.749195][ T4259] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 978.763031][ T4259] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 978.820280][ T4270] FAULT_INJECTION: forcing a failure. [ 978.820280][ T4270] name failslab, interval 1, probability 0, space 0, times 0 [ 978.897633][ T4270] CPU: 0 UID: 0 PID: 4270 Comm: syz.1.8667 Not tainted syzkaller #0 PREEMPT(full) [ 978.897660][ T4270] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 978.897673][ T4270] Call Trace: [ 978.897681][ T4270] [ 978.897689][ T4270] dump_stack_lvl+0xe8/0x150 [ 978.897724][ T4270] should_fail_ex+0x412/0x560 [ 978.897757][ T4270] should_failslab+0xa8/0x100 [ 978.897785][ T4270] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 978.897807][ T4270] ? __alloc_skb+0x186/0x7d0 [ 978.897825][ T4270] ? __alloc_skb+0x1d0/0x7d0 [ 978.897842][ T4270] ? __local_bh_enable_ip+0xd0/0x130 [ 978.897873][ T4270] __alloc_skb+0x1d0/0x7d0 [ 978.897891][ T4270] ? netlink_ack_tlv_len+0x6c/0x210 [ 978.897923][ T4270] netlink_ack+0x146/0xa50 [ 978.897949][ T4270] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 978.897978][ T4270] ? ref_tracker_free+0x693/0x840 [ 978.898005][ T4270] ? __copy_skb_header+0xa3/0x4a0 [ 978.898031][ T4270] ? __pfx_ref_tracker_free+0x10/0x10 [ 978.898070][ T4270] netlink_rcv_skb+0x2b6/0x4b0 [ 978.898100][ T4270] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 978.898132][ T4270] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 978.898181][ T4270] ? netlink_deliver_tap+0x2e/0x1b0 [ 978.898215][ T4270] netlink_unicast+0x80f/0x9b0 [ 978.898256][ T4270] ? __pfx_netlink_unicast+0x10/0x10 [ 978.898283][ T4270] ? netlink_sendmsg+0x650/0xb40 [ 978.898309][ T4270] ? skb_put+0x11b/0x210 [ 978.898330][ T4270] netlink_sendmsg+0x813/0xb40 [ 978.898366][ T4270] ? __pfx_netlink_sendmsg+0x10/0x10 [ 978.898396][ T4270] ? aa_sock_msg_perm+0xf1/0x1b0 [ 978.898423][ T4270] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 978.898445][ T4270] ____sys_sendmsg+0x972/0x9f0 [ 978.898473][ T4270] ? __pfx_____sys_sendmsg+0x10/0x10 [ 978.898500][ T4270] ? import_iovec+0x73/0xa0 [ 978.898522][ T4270] ___sys_sendmsg+0x2a5/0x360 [ 978.898549][ T4270] ? __pfx____sys_sendmsg+0x10/0x10 [ 978.898600][ T4270] ? __fget_files+0x2a/0x420 [ 978.898628][ T4270] ? __fget_files+0x3a0/0x420 [ 978.898668][ T4270] __x64_sys_sendmsg+0x1bd/0x2a0 [ 978.898693][ T4270] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 978.898724][ T4270] ? __pfx_ksys_write+0x10/0x10 [ 978.898754][ T4270] do_syscall_64+0x14d/0xf80 [ 978.898775][ T4270] ? trace_irq_disable+0x3b/0x150 [ 978.898801][ T4270] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 978.898820][ T4270] ? clear_bhb_loop+0x40/0x90 [ 978.898843][ T4270] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 978.898861][ T4270] RIP: 0033:0x7fa16439c799 [ 978.898878][ T4270] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 978.898895][ T4270] RSP: 002b:00007fa1625ee028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 978.898916][ T4270] RAX: ffffffffffffffda RBX: 00007fa164615fa0 RCX: 00007fa16439c799 [ 978.898930][ T4270] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 978.898942][ T4270] RBP: 00007fa1625ee090 R08: 0000000000000000 R09: 0000000000000000 [ 978.898954][ T4270] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 978.898965][ T4270] R13: 00007fa164616038 R14: 00007fa164615fa0 R15: 00007ffc08d83d38 [ 978.898994][ T4270] [ 979.360614][ T4281] Cannot find add_set index 46338 as target [ 979.523319][T16984] lec:lec_start_xmit: lec0:No lecd attached [ 979.554167][ T4290] pimreg: entered allmulticast mode [ 979.629369][ T4295] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 979.636679][ T4295] IPv6: NLM_F_CREATE should be set when creating new route [ 979.667419][ T4302] netlink: 32 bytes leftover after parsing attributes in process `syz.0.8679'. [ 979.820137][ T4312] netlink: 'syz.0.8683': attribute type 1 has an invalid length. [ 979.988735][ T4318] bond8: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 980.001970][ T4318] bond8: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 980.014396][ T4318] bond8: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 980.137496][ T4326] pimreg: left allmulticast mode [ 980.286227][ T4338] geneve2: entered promiscuous mode [ 980.316402][ T4338] geneve2: entered allmulticast mode [ 980.464838][ T4350] __nla_validate_parse: 3 callbacks suppressed [ 980.464859][ T4350] netlink: 32 bytes leftover after parsing attributes in process `syz.3.8693'. [ 980.540111][ T4358] FAULT_INJECTION: forcing a failure. [ 980.540111][ T4358] name failslab, interval 1, probability 0, space 0, times 0 [ 980.589684][ T4358] CPU: 0 UID: 0 PID: 4358 Comm: syz.2.8697 Not tainted syzkaller #0 PREEMPT(full) [ 980.589714][ T4358] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 980.589727][ T4358] Call Trace: [ 980.589737][ T4358] [ 980.589747][ T4358] dump_stack_lvl+0xe8/0x150 [ 980.589783][ T4358] should_fail_ex+0x412/0x560 [ 980.589820][ T4358] should_failslab+0xa8/0x100 [ 980.589847][ T4358] ? skb_clone+0x212/0x3a0 [ 980.589873][ T4358] kmem_cache_alloc_noprof+0x87/0x650 [ 980.589905][ T4358] skb_clone+0x212/0x3a0 [ 980.589934][ T4358] __netlink_deliver_tap+0x404/0x850 [ 980.589979][ T4358] ? netlink_deliver_tap+0x2e/0x1b0 [ 980.590013][ T4358] netlink_deliver_tap+0x19c/0x1b0 [ 980.590047][ T4358] netlink_sendskb+0x68/0x140 [ 980.590085][ T4358] netlink_unicast+0x3a3/0x9b0 [ 980.590122][ T4358] ? __pfx_netlink_unicast+0x10/0x10 [ 980.590162][ T4358] netlink_rcv_skb+0x2b6/0x4b0 [ 980.590194][ T4358] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 980.590230][ T4358] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 980.590273][ T4358] ? netlink_deliver_tap+0x2e/0x1b0 [ 980.590313][ T4358] netlink_unicast+0x80f/0x9b0 [ 980.590351][ T4358] ? __pfx_netlink_unicast+0x10/0x10 [ 980.590383][ T4358] ? netlink_sendmsg+0x650/0xb40 [ 980.590413][ T4358] ? skb_put+0x11b/0x210 [ 980.590438][ T4358] netlink_sendmsg+0x813/0xb40 [ 980.590480][ T4358] ? __pfx_netlink_sendmsg+0x10/0x10 [ 980.590516][ T4358] ? aa_sock_msg_perm+0xf1/0x1b0 [ 980.590548][ T4358] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 980.590578][ T4358] ____sys_sendmsg+0x972/0x9f0 [ 980.590613][ T4358] ? __pfx_____sys_sendmsg+0x10/0x10 [ 980.590647][ T4358] ? import_iovec+0x73/0xa0 [ 980.590674][ T4358] ___sys_sendmsg+0x2a5/0x360 [ 980.590704][ T4358] ? __pfx____sys_sendmsg+0x10/0x10 [ 980.590768][ T4358] ? __fget_files+0x2a/0x420 [ 980.590798][ T4358] ? __fget_files+0x3a0/0x420 [ 980.590841][ T4358] __x64_sys_sendmsg+0x1bd/0x2a0 [ 980.590869][ T4358] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 980.590905][ T4358] ? __pfx_ksys_write+0x10/0x10 [ 980.590940][ T4358] do_syscall_64+0x14d/0xf80 [ 980.590965][ T4358] ? trace_irq_disable+0x3b/0x150 [ 980.590995][ T4358] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 980.591017][ T4358] ? clear_bhb_loop+0x40/0x90 [ 980.591044][ T4358] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 980.591072][ T4358] RIP: 0033:0x7f26e799c799 [ 980.591092][ T4358] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 980.591110][ T4358] RSP: 002b:00007f26e8920028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 980.591133][ T4358] RAX: ffffffffffffffda RBX: 00007f26e7c15fa0 RCX: 00007f26e799c799 [ 980.591148][ T4358] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 980.591162][ T4358] RBP: 00007f26e8920090 R08: 0000000000000000 R09: 0000000000000000 [ 980.591175][ T4358] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 980.591187][ T4358] R13: 00007f26e7c16038 R14: 00007f26e7c15fa0 R15: 00007ffe2db06bd8 [ 980.591222][ T4358] [ 981.134710][ T4376] can: request_module (can-proto-0) failed. [ 981.206800][ T4388] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8703'. [ 981.216050][ T4387] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8703'. [ 981.558831][ T4416] FAULT_INJECTION: forcing a failure. [ 981.558831][ T4416] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 981.595540][ T4416] CPU: 0 UID: 0 PID: 4416 Comm: syz.4.8709 Not tainted syzkaller #0 PREEMPT(full) [ 981.595571][ T4416] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 981.595585][ T4416] Call Trace: [ 981.595594][ T4416] [ 981.595603][ T4416] dump_stack_lvl+0xe8/0x150 [ 981.595639][ T4416] should_fail_ex+0x412/0x560 [ 981.595674][ T4416] _copy_to_user+0x31/0xb0 [ 981.595701][ T4416] simple_read_from_buffer+0xe1/0x170 [ 981.595753][ T4416] proc_fail_nth_read+0x1bb/0x230 [ 981.595788][ T4416] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 981.595821][ T4416] ? rw_verify_area+0x2a6/0x4d0 [ 981.595844][ T4416] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 981.595875][ T4416] vfs_read+0x20c/0xa70 [ 981.595897][ T4416] ? fdget_pos+0x246/0x320 [ 981.595932][ T4416] ? __pfx___mutex_lock+0x10/0x10 [ 981.595959][ T4416] ? __pfx_vfs_read+0x10/0x10 [ 981.595983][ T4416] ? __fget_files+0x2a/0x420 [ 981.596019][ T4416] ? __fget_files+0x3a0/0x420 [ 981.596048][ T4416] ? __fget_files+0x2a/0x420 [ 981.596089][ T4416] ksys_read+0x150/0x270 [ 981.596114][ T4416] ? __pfx_ksys_read+0x10/0x10 [ 981.596149][ T4416] do_syscall_64+0x14d/0xf80 [ 981.596173][ T4416] ? trace_irq_disable+0x3b/0x150 [ 981.596203][ T4416] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 981.596238][ T4416] ? clear_bhb_loop+0x40/0x90 [ 981.596263][ T4416] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 981.596284][ T4416] RIP: 0033:0x7ff59455cfce [ 981.596302][ T4416] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 981.596319][ T4416] RSP: 002b:00007ff595386fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 981.596340][ T4416] RAX: ffffffffffffffda RBX: 00007ff5953876c0 RCX: 00007ff59455cfce [ 981.596355][ T4416] RDX: 000000000000000f RSI: 00007ff5953870a0 RDI: 0000000000000004 [ 981.596368][ T4416] RBP: 00007ff595387090 R08: 0000000000000000 R09: 0000000000000000 [ 981.596397][ T4416] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 981.596409][ T4416] R13: 00007ff594816038 R14: 00007ff594815fa0 R15: 00007fff357fed88 [ 981.596444][ T4416] [ 981.978467][ T4430] netlink: 'syz.2.8713': attribute type 2 has an invalid length. [ 982.060317][ T4430] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8713'. [ 982.106668][ T4433] IPv6: NLM_F_CREATE should be specified when creating new route [ 982.140580][ T4433] netlink: 'syz.4.8715': attribute type 1 has an invalid length. [ 982.151526][ T4430] netlink: 'syz.2.8713': attribute type 2 has an invalid length. [ 982.159314][ T4430] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8713'. [ 982.393078][ T4458] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8721'. [ 982.394122][ T4456] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8719'. [ 982.473499][ T2829] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 982.495101][ T2829] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 982.503011][T26597] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 982.556904][ T4466] tipc: New replicast peer: 255.255.255.255 [ 982.580065][ T9] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 982.606965][ T4466] tipc: Enabled bearer , priority 10 [ 982.633500][ T4472] netlink: 168 bytes leftover after parsing attributes in process `syz.1.8723'. [ 983.110605][ T9] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 983.720123][ T9] tipc: Node number set to 3758096385 [ 983.763595][ T4514] SET target dimension over the limit! [ 983.905113][ T4524] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8739'. [ 983.948317][ T4520] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8738'. [ 983.968995][ T4525] nbd: illegal input index -8454144 [ 984.799753][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5280 ms [ 984.807903][ C0] lec:lec_tx_timeout: lec0 [ 986.018502][ T4594] __nla_validate_parse: 2 callbacks suppressed [ 986.018520][ T4594] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8755'. [ 986.052629][ T4586] bond11: entered promiscuous mode [ 986.058083][ T4586] bond11: entered allmulticast mode [ 986.084678][ T4586] 8021q: adding VLAN 0 to HW filter on device bond11 [ 986.160914][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 988.940971][ T4583] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 989.150499][ T4635] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8768'. [ 989.353922][ T4642] netlink: 288 bytes leftover after parsing attributes in process `syz.0.8769'. [ 989.415004][ T4650] mac80211_hwsim hwsim64 wlan0: entered promiscuous mode [ 989.429970][ T4651] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 989.473563][ T4660] batadv_slave_0: Caught tx_queue_len zero misconfig [ 989.523923][ T4662] netlink: 196 bytes leftover after parsing attributes in process `syz.0.8774'. [ 989.593440][ T4660] team0: Device batadv1 failed to change mtu [ 989.769390][ T4681] netlink: 'syz.0.8781': attribute type 25 has an invalid length. [ 989.830623][ T4685] netlink: 32 bytes leftover after parsing attributes in process `syz.3.8779'. [ 990.137137][ T4704] blkio.reset_stats is deprecated [ 990.501018][ T4729] netlink: 108 bytes leftover after parsing attributes in process `syz.0.8793'. [ 990.849223][ T4750] netlink: 32 bytes leftover after parsing attributes in process `syz.3.8797'. [ 991.305557][ T4769] netlink: 'syz.0.8801': attribute type 25 has an invalid length. [ 991.824214][ T4797] syzkaller0: entered promiscuous mode [ 991.830123][ T4797] syzkaller0: entered allmulticast mode [ 991.875916][ T4802] netlink: 32 bytes leftover after parsing attributes in process `syz.0.8810'. [ 992.114142][ T4812] syzkaller0: entered promiscuous mode [ 992.137303][ T4812] syzkaller0: entered allmulticast mode [ 992.147900][ T4815] syzkaller0: entered promiscuous mode [ 992.162433][ T4815] syzkaller0: entered allmulticast mode [ 992.222212][ T4827] netlink: 'syz.0.8819': attribute type 1 has an invalid length. [ 992.235176][ T4827] netlink: 'syz.0.8819': attribute type 3 has an invalid length. [ 992.260172][ T4827] netlink: 224 bytes leftover after parsing attributes in process `syz.0.8819'. [ 992.294404][ T4835] netlink: 'syz.4.8821': attribute type 2 has an invalid length. [ 992.365194][ T4815] team_slave_1: Caught tx_queue_len zero misconfig [ 992.397897][ T4840] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8822'. [ 992.481338][ T4842] netlink: 'syz.3.8824': attribute type 1 has an invalid length. [ 992.489291][ T4842] netlink: 96 bytes leftover after parsing attributes in process `syz.3.8824'. [ 992.499112][ T4842] netlink: 1 bytes leftover after parsing attributes in process `syz.3.8824'. [ 992.510855][ T4842] netlink: 658 bytes leftover after parsing attributes in process `syz.3.8824'. [ 992.629475][ T4849] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 992.647690][ T4849] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 992.659922][ T4849] gretap1: entered promiscuous mode [ 992.665188][ T4849] gretap1: entered allmulticast mode [ 992.861459][ T4865] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8833'. [ 992.888401][ T1300] lec:lec_start_xmit: lec0:No lecd attached [ 992.921747][ T4873] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8836'. [ 992.974858][ T4865] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8833'. [ 993.421953][ T4907] netlink: 248 bytes leftover after parsing attributes in process `syz.3.8847'. [ 993.465830][ T4907] veth0: Caught tx_queue_len zero misconfig [ 993.519850][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 993.638443][ T4921] net_ratelimit: 56 callbacks suppressed [ 993.638463][ T4921] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 993.979538][ T4933] syzkaller1: entered promiscuous mode [ 993.986994][ T4933] syzkaller1: entered allmulticast mode [ 994.309762][ T4958] netlink: 'syz.1.8864': attribute type 10 has an invalid length. [ 994.418199][ T4959] bond9: option resend_igmp: invalid value (32767) [ 994.425297][ T4959] bond9: option resend_igmp: allowed values 0 - 255 [ 994.435671][ T4959] bond9 (unregistering): Released all slaves [ 994.956269][ T5003] xt_hashlimit: size too large, truncated to 1048576 [ 994.958589][ T5002] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 995.075083][ T5005] syzkaller1: entered promiscuous mode [ 995.083663][ T5005] syzkaller1: entered allmulticast mode [ 995.256493][ T5015] 8021q: VLANs not supported on ip_vti0 [ 995.320766][ T5005] lo speed is unknown, defaulting to 1000 [ 995.628050][ T5005] wlan0 speed is unknown, defaulting to 1000 [ 995.703527][ T5005] vxcan1 speed is unknown, defaulting to 1000 [ 995.865701][ T29] audit: type=1107 audit(1774318431.628:13): pid=5048 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 996.010976][ T5059] syzkaller1: entered promiscuous mode [ 996.109916][ T5059] syzkaller1: entered allmulticast mode [ 996.171319][ T5062] netlink: 'syz.3.8894': attribute type 3 has an invalid length. [ 996.415999][ T5072] 8021q: adding VLAN 0 to HW filter on device bond8 [ 996.679903][ T29] audit: type=1804 audit(1774318432.438:14): pid=5091 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.8901" name="/newroot/505/cgroup.controllers" dev="tmpfs" ino=2593 res=1 errno=0 [ 996.787433][ T29] audit: type=1800 audit(1774318432.438:15): pid=5091 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.8901" name="cgroup.controllers" dev="tmpfs" ino=2593 res=0 errno=0 [ 996.895886][ T5097] __nla_validate_parse: 12 callbacks suppressed [ 996.895908][ T5097] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8903'. [ 997.068954][ T5109] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8905'. [ 997.711126][ T5146] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8909'. [ 997.734014][ T5941] wlan0 speed is unknown, defaulting to 1000 [ 997.899651][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 997.907791][ C0] lec:lec_tx_timeout: lec0 [ 998.014720][ T5158] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8911'. [ 998.192843][ T5165] x_tables: unsorted underflow at hook 1 [ 998.286138][ T5176] netlink: 'syz.1.8914': attribute type 4 has an invalid length. [ 998.296670][ T5176] netlink: 17 bytes leftover after parsing attributes in process `syz.1.8914'. [ 998.311893][ T5176] netlink: 14601 bytes leftover after parsing attributes in process `syz.1.8914'. [ 998.408825][ T5188] netlink: 24 bytes leftover after parsing attributes in process `syz.2.8916'. [ 998.484204][ T5192] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8918'. [ 998.530987][ T5188] syzkaller0: entered promiscuous mode [ 998.572158][ T5188] syzkaller0: entered allmulticast mode [ 998.795090][ T5211] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8923'. [ 998.867796][ T5215] netlink: 40 bytes leftover after parsing attributes in process `syz.0.8925'. [ 999.589351][ T5261] netlink: 'syz.1.8939': attribute type 1 has an invalid length. [ 999.657814][ T5261] bond12: entered promiscuous mode [ 999.706486][ T5261] 8021q: adding VLAN 0 to HW filter on device bond12 [ 999.745068][ T5274] tipc: Enabling of bearer rejected, failed to enable media [ 999.872515][ T5261] 8021q: adding VLAN 0 to HW filter on device bond12 [ 999.879918][ T5261] bond12: (slave vcan1): The slave device specified does not support setting the MAC address [ 999.907604][ T5261] bond12: (slave vcan1): Setting fail_over_mac to active for active-backup mode [ 999.953401][ T5261] bond12: (slave vcan1): making interface the new active one [ 1000.006849][ T5261] vcan1: entered promiscuous mode [ 1000.033032][ T5261] bond12: (slave vcan1): Enslaving as an active interface with an up link [ 1000.750714][ T5315] netlink: 'syz.4.8949': attribute type 1 has an invalid length. [ 1001.221354][ T5341] FAULT_INJECTION: forcing a failure. [ 1001.221354][ T5341] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1001.252284][ T5341] CPU: 1 UID: 0 PID: 5341 Comm: syz.4.8956 Not tainted syzkaller #0 PREEMPT(full) [ 1001.252313][ T5341] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1001.252327][ T5341] Call Trace: [ 1001.252337][ T5341] [ 1001.252346][ T5341] dump_stack_lvl+0xe8/0x150 [ 1001.252399][ T5341] should_fail_ex+0x412/0x560 [ 1001.252437][ T5341] _copy_to_user+0x31/0xb0 [ 1001.252464][ T5341] simple_read_from_buffer+0xe1/0x170 [ 1001.252502][ T5341] proc_fail_nth_read+0x1bb/0x230 [ 1001.252536][ T5341] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1001.252571][ T5341] ? rw_verify_area+0x2a6/0x4d0 [ 1001.252594][ T5341] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1001.252627][ T5341] vfs_read+0x20c/0xa70 [ 1001.252648][ T5341] ? fdget_pos+0x246/0x320 [ 1001.252684][ T5341] ? __pfx___mutex_lock+0x10/0x10 [ 1001.252709][ T5341] ? __pfx_vfs_read+0x10/0x10 [ 1001.252733][ T5341] ? __fget_files+0x2a/0x420 [ 1001.252768][ T5341] ? __fget_files+0x3a0/0x420 [ 1001.252798][ T5341] ? __fget_files+0x2a/0x420 [ 1001.252837][ T5341] ksys_read+0x150/0x270 [ 1001.252861][ T5341] ? __pfx_ksys_read+0x10/0x10 [ 1001.252883][ T5341] ? __pfx_sock_ioctl+0x10/0x10 [ 1001.252920][ T5341] do_syscall_64+0x14d/0xf80 [ 1001.252943][ T5341] ? trace_irq_disable+0x3b/0x150 [ 1001.252972][ T5341] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1001.252994][ T5341] ? clear_bhb_loop+0x40/0x90 [ 1001.253021][ T5341] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1001.253041][ T5341] RIP: 0033:0x7ff59455cfce [ 1001.253061][ T5341] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1001.253079][ T5341] RSP: 002b:00007ff595386fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1001.253102][ T5341] RAX: ffffffffffffffda RBX: 00007ff5953876c0 RCX: 00007ff59455cfce [ 1001.253119][ T5341] RDX: 000000000000000f RSI: 00007ff5953870a0 RDI: 0000000000000004 [ 1001.253132][ T5341] RBP: 00007ff595387090 R08: 0000000000000000 R09: 0000000000000000 [ 1001.253145][ T5341] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1001.253158][ T5341] R13: 00007ff594816038 R14: 00007ff594815fa0 R15: 00007fff357fed88 [ 1001.253191][ T5341] [ 1001.949831][ T5374] pim6reg: entered allmulticast mode [ 1001.970307][ T5384] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1002.197835][ T5388] __nla_validate_parse: 9 callbacks suppressed [ 1002.197855][ T5388] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.8967'. [ 1002.471323][ T5412] IPVS: set_ctl: invalid protocol: 50 255.255.255.255:20000 [ 1002.537841][ T5417] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8975'. [ 1002.565912][ T5417] tipc: Invalid UDP bearer configuration [ 1002.565970][ T5417] tipc: Enabling of bearer rejected, failed to enable media [ 1002.695525][ T5427] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1002.703647][ T5427] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1002.924208][ T5433] lo speed is unknown, defaulting to 1000 [ 1003.140505][ T5433] wlan0 speed is unknown, defaulting to 1000 [ 1003.148441][ T5433] vxcan1 speed is unknown, defaulting to 1000 [ 1003.166181][ T5450] netlink: 36 bytes leftover after parsing attributes in process `syz.3.8986'. [ 1003.181054][ T5449] netlink: 'syz.2.8985': attribute type 1 has an invalid length. [ 1003.195669][ T5452] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8987'. [ 1003.208182][ T5450] netlink: 40 bytes leftover after parsing attributes in process `syz.3.8986'. [ 1003.222983][ T5452] netlink: 'syz.4.8987': attribute type 30 has an invalid length. [ 1003.535474][ T5475] netlink: 20 bytes leftover after parsing attributes in process `syz.3.8991'. [ 1003.806244][ T5494] veth0: entered promiscuous mode [ 1003.815450][ T5493] veth0: left promiscuous mode [ 1003.935329][ T5505] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8997'. [ 1003.963497][ T5508] ip6tnl3: entered promiscuous mode [ 1004.179669][ T5524] netlink: 20 bytes leftover after parsing attributes in process `syz.2.9002'. [ 1004.497584][ T5537] netlink: 13 bytes leftover after parsing attributes in process `syz.4.9006'. [ 1004.584145][ T5542] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9008'. [ 1005.073952][ T5569] netlink: 'syz.0.9015': attribute type 1 has an invalid length. [ 1005.144550][ T5580] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 1005.210559][ T5590] x_tables: ip_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 1005.429182][ T5599] tipc: Trying to set illegal importance in message [ 1005.526086][ T5601] delete_channel: no stack [ 1005.616832][ T5609] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1005.677060][ T5607] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1005.972190][T30292] block nbd5: Receive control failed (result -32) [ 1006.584571][T22090] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1006.595014][T22090] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1006.613695][T22090] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1006.623364][T22090] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1006.640181][T22090] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1006.791593][ T5661] lo speed is unknown, defaulting to 1000 [ 1007.452037][ T5698] __nla_validate_parse: 14 callbacks suppressed [ 1007.452059][ T5698] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9047'. [ 1007.537877][ T5661] wlan0 speed is unknown, defaulting to 1000 [ 1007.590757][ T5661] vxcan1 speed is unknown, defaulting to 1000 [ 1007.599978][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 1007.762238][ T5722] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9055'. [ 1008.651264][ T5768] netlink: 'syz.1.9068': attribute type 11 has an invalid length. [ 1008.659142][ T5768] netlink: 132 bytes leftover after parsing attributes in process `syz.1.9068'. [ 1008.721722][T22090] Bluetooth: hci1: command tx timeout [ 1008.767493][ T5661] chnl_net:caif_netlink_parms(): no params data found [ 1009.182015][ T5792] only policy match revision 0 supported [ 1009.182037][ T5792] unable to load match [ 1009.195799][ T5661] bridge0: port 1(bridge_slave_0) entered blocking state [ 1009.241617][ T5661] bridge0: port 1(bridge_slave_0) entered disabled state [ 1009.248932][ T5661] bridge_slave_0: entered allmulticast mode [ 1009.291846][ T5661] bridge_slave_0: entered promiscuous mode [ 1009.345752][ T5804] bridge0: port 2(bridge_slave_1) entered disabled state [ 1009.370494][ T5661] bridge0: port 2(bridge_slave_1) entered blocking state [ 1009.397688][ T5661] bridge0: port 2(bridge_slave_1) entered disabled state [ 1009.413364][ T5661] bridge_slave_1: entered allmulticast mode [ 1009.434347][ T5661] bridge_slave_1: entered promiscuous mode [ 1009.506033][ T5814] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9077'. [ 1009.555608][ T5661] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1009.576258][ T5814] IPVS: Error connecting to the multicast addr [ 1009.596658][ T5820] mac80211_hwsim hwsim68 wlan1: Caught tx_queue_len zero misconfig [ 1009.612166][ T5661] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1009.684046][ T5825] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9079'. [ 1009.722413][ T5825] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9079'. [ 1009.745353][ T5825] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9079'. [ 1009.780498][ T5661] team0: Port device team_slave_0 added [ 1009.807280][ T5661] team0: Port device team_slave_1 added [ 1009.901190][ T5661] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1009.916082][ T5661] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1009.971866][ T5661] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1010.049139][ T5661] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1010.077235][ T5661] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1010.142861][ T5661] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1010.154845][ T5849] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9083'. [ 1010.380072][ T5860] IPVS: length: 8 != 1152 [ 1010.416888][ T5661] hsr_slave_0: entered promiscuous mode [ 1010.434425][ T5661] hsr_slave_1: entered promiscuous mode [ 1010.504500][ T5860] syzkaller0: entered allmulticast mode [ 1010.801183][T22090] Bluetooth: hci1: command tx timeout [ 1010.907000][ T5913] smc: net device team0 applied user defined pnetid SYZ2 [ 1010.936754][ T5915] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 1011.037381][ T5923] veth0_to_bond: entered allmulticast mode [ 1011.063891][ T5915] syzkaller0: entered promiscuous mode [ 1011.070012][ T5915] syzkaller0: entered allmulticast mode [ 1011.083491][ T5915] tipc: Enabled bearer , priority 0 [ 1011.179942][ T5914] tipc: Resetting bearer [ 1011.224036][ T5914] tipc: Disabling bearer [ 1011.330084][ T5936] netlink: 20 bytes leftover after parsing attributes in process `syz.4.9098'. [ 1011.579415][ T5940] syzkaller0: entered promiscuous mode [ 1011.597084][ T5940] syzkaller0: entered allmulticast mode [ 1011.794229][ T5968] netlink: 20 bytes leftover after parsing attributes in process `syz.1.9105'. [ 1012.890208][T22090] Bluetooth: hci1: command tx timeout [ 1013.603408][ T5991] netlink: 16 bytes leftover after parsing attributes in process `syz.3.9109'. [ 1013.614890][ T5990] netlink: 16 bytes leftover after parsing attributes in process `syz.3.9109'. [ 1013.626672][ T5990] netlink: 'syz.3.9109': attribute type 1 has an invalid length. [ 1013.675098][ T5661] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1013.755644][ T5661] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1013.791361][ T5661] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1013.827641][ T5661] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1014.158993][ T5661] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1014.214326][ T5661] 8021q: adding VLAN 0 to HW filter on device team0 [ 1014.272627][ T2828] bridge0: port 1(bridge_slave_0) entered blocking state [ 1014.279946][ T2828] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1014.346496][ T2811] bridge0: port 2(bridge_slave_1) entered blocking state [ 1014.353716][ T2811] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1014.729024][ T6052] netlink: 16 bytes leftover after parsing attributes in process `syz.2.9120'. [ 1014.952971][ T6062] netlink: 20 bytes leftover after parsing attributes in process `syz.3.9121'. [ 1014.972100][T22090] Bluetooth: hci1: command tx timeout [ 1014.994032][ T6064] netlink: 12 bytes leftover after parsing attributes in process `syz.2.9122'. [ 1015.018126][ T5661] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1015.071524][ T6027] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9116'. [ 1015.141987][ T6071] netlink: 256 bytes leftover after parsing attributes in process `syz.3.9121'. [ 1015.227335][ T5661] veth0_vlan: entered promiscuous mode [ 1015.260539][ T6076] netlink: 'syz.2.9124': attribute type 1 has an invalid length. [ 1015.290510][ T5661] veth1_vlan: entered promiscuous mode [ 1015.296424][ T6076] netlink: 96 bytes leftover after parsing attributes in process `syz.2.9124'. [ 1015.326088][ T6076] netlink: 'syz.2.9124': attribute type 1 has an invalid length. [ 1015.355512][ T6076] netlink: 'syz.2.9124': attribute type 8 has an invalid length. [ 1015.394254][ T5661] veth0_macvtap: entered promiscuous mode [ 1015.402691][ T6076] netlink: 606 bytes leftover after parsing attributes in process `syz.2.9124'. [ 1015.427141][ T6083] netlink: 'syz.1.9125': attribute type 29 has an invalid length. [ 1015.436690][ T6083] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9125'. [ 1015.448901][ T5661] veth1_macvtap: entered promiscuous mode [ 1015.556729][ T5661] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1015.613531][ T5661] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1015.655469][ T2831] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1015.685014][ T6086] netlink: 'syz.1.9126': attribute type 9 has an invalid length. [ 1015.697009][ T6086] netlink: 'syz.1.9126': attribute type 11 has an invalid length. [ 1015.720011][ T6086] netlink: 'syz.1.9126': attribute type 12 has an invalid length. [ 1015.736741][ T2831] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1015.785123][ T2831] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1015.802574][ T2831] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1016.056609][ T2811] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1016.072853][ T2811] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1016.187272][ T2808] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1016.204484][ T2808] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1016.264713][ T6112] Cannot find del_set index 49151 as target [ 1016.425215][ T6121] netlink: 'syz.1.9136': attribute type 11 has an invalid length. [ 1016.460228][ T6123] A link change request failed with some changes committed already. Interface .` may have been left with an inconsistent configuration, please check. [ 1016.902301][ T6133] smc: net device team0 applied user defined pnetid SYZ2 [ 1017.045914][T22090] Bluetooth: hci1: command tx timeout [ 1017.088842][ T6150] openvswitch: netlink: EtherType 50a is less than min 600 [ 1017.140922][T30292] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1017.165635][T30292] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1017.182323][T30292] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1017.198172][T30292] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1017.212286][T30292] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1017.275696][T27496] bridge0: port 1(syz_tun) entered disabled state [ 1017.387485][T27496] syz_tun (unregistering): left allmulticast mode [ 1017.408376][T27496] syz_tun (unregistering): left promiscuous mode [ 1017.433465][T27496] bridge0: port 1(syz_tun) entered disabled state [ 1017.469135][T27496] team0: left promiscuous mode [ 1017.676991][ T2808] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1017.731335][ T2808] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1017.844168][ T6189] ip6t_srh: unknown srh invflags 4000 [ 1017.960871][ T2808] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1018.018733][ T2808] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1018.055104][ T6152] lo speed is unknown, defaulting to 1000 [ 1018.254952][ T2808] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1018.272886][ T2808] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1018.452008][ T2808] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1018.489307][ T2808] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1018.658416][ T6233] __nla_validate_parse: 8 callbacks suppressed [ 1018.658436][ T6233] netlink: 20 bytes leftover after parsing attributes in process `syz.4.9164'. [ 1018.684623][ T6235] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9163'. [ 1018.693788][ T6235] netlink: 16 bytes leftover after parsing attributes in process `syz.0.9163'. [ 1018.793620][ T6152] wlan0 speed is unknown, defaulting to 1000 [ 1018.852904][ T6152] vxcan1 speed is unknown, defaulting to 1000 [ 1018.983012][ T2808] team0: left allmulticast mode [ 1018.990051][ T6215] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 1019.005283][ T2808] team_slave_0: left allmulticast mode [ 1019.025785][ T2808] team_slave_1: left allmulticast mode [ 1019.049751][ T2808] batadv1: left allmulticast mode [ 1019.065264][ T2808] team_slave_0: left promiscuous mode [ 1019.071531][ T2808] team_slave_1: left promiscuous mode [ 1019.076981][ T2808] batadv1: left promiscuous mode [ 1019.084667][ T2808] bridge0: port 2(team0) entered disabled state [ 1019.279779][T22090] Bluetooth: hci5: command tx timeout [ 1019.734597][ T2808] gretap0 (unregistering): left promiscuous mode [ 1019.824788][ T2808] bond2 (unregistering): (slave geneve2): Releasing active interface [ 1020.104938][ T2808] team0: Port device bridge5 removed [ 1020.144657][ T2808] bond1 (unregistering): Released all slaves [ 1020.159229][ T2808] bond2 (unregistering): Released all slaves [ 1020.174485][ T2808] bond3 (unregistering): Released all slaves [ 1020.190492][ T2808] bond0 (unregistering): Released all slaves [ 1020.204968][ T2808] bond4 (unregistering): Released all slaves [ 1020.230996][ T2808] bond5 (unregistering): Released all slaves [ 1020.246168][ T2808] bond6 (unregistering): Released all slaves [ 1020.260620][ T2808] bond7 (unregistering): Released all slaves [ 1020.274803][ T2808] bond8 (unregistering): Released all slaves [ 1020.436535][ T2808] tipc: Disabling bearer [ 1020.442673][ T2808] tipc: Disabling bearer [ 1020.477060][ T2808] tipc: Left network mode [ 1020.727299][ T6285] netlink: 'syz.0.9173': attribute type 29 has an invalid length. [ 1020.780247][ T6285] netlink: 'syz.0.9173': attribute type 4 has an invalid length. [ 1020.819024][ T6285] netlink: 'syz.0.9173': attribute type 4 has an invalid length. [ 1020.828402][ T6297] netlink: 20 bytes leftover after parsing attributes in process `syz.3.9176'. [ 1021.039549][ T6152] chnl_net:caif_netlink_parms(): no params data found [ 1021.069303][ T6306] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9178'. [ 1021.111195][ T6294] syzkaller0: left promiscuous mode [ 1021.116461][ T6294] syzkaller0: left allmulticast mode [ 1021.126573][ T6306] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 1021.153669][ T6306] bridge0: port 2(bridge_slave_1) entered disabled state [ 1021.161398][ T6306] bridge0: port 1(bridge_slave_0) entered disabled state [ 1021.245881][ T6314] netlink: 4 bytes leftover after parsing attributes in process `syz.3.9179'. [ 1021.276520][ T6310] veth0: entered promiscuous mode [ 1021.359800][T22090] Bluetooth: hci5: command tx timeout [ 1021.434539][ T6314] veth0 (unregistering): left promiscuous mode [ 1021.832212][ T6152] bridge0: port 1(bridge_slave_0) entered blocking state [ 1021.839413][ T6152] bridge0: port 1(bridge_slave_0) entered disabled state [ 1021.883756][ T6152] bridge_slave_0: entered allmulticast mode [ 1021.902408][ T6152] bridge_slave_0: entered promiscuous mode [ 1021.923595][ T6152] bridge0: port 2(bridge_slave_1) entered blocking state [ 1021.940084][ T6152] bridge0: port 2(bridge_slave_1) entered disabled state [ 1021.957445][ T6152] bridge_slave_1: entered allmulticast mode [ 1022.000629][ T6152] bridge_slave_1: entered promiscuous mode [ 1022.077639][ T6346] netlink: 20 bytes leftover after parsing attributes in process `syz.0.9188'. [ 1022.233121][ T6352] x_tables: duplicate underflow at hook 2 [ 1022.247011][ T6352] netlink: 16 bytes leftover after parsing attributes in process `syz.1.9190'. [ 1022.325661][ T6152] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1022.403216][ T6152] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1022.724060][ T6152] team0: Port device team_slave_0 added [ 1022.755858][ T6152] team0: Port device team_slave_1 added [ 1023.139500][ T2808] hsr_slave_0: left promiscuous mode [ 1023.150857][ T6398] netlink: 36 bytes leftover after parsing attributes in process `syz.0.9201'. [ 1023.161624][ T2808] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1023.181170][ T2808] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1023.197114][ T6401] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.9203'. [ 1023.197157][ T2808] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1023.270037][ T2808] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1023.298710][ T2808] batman_adv: batadv0: Interface deactivated: ipvlan2 [ 1023.317691][ T2808] batman_adv: batadv0: Removing interface: ipvlan2 [ 1023.356148][ T2808] veth1_vlan: left allmulticast mode [ 1023.372769][ T2808] veth1_macvtap: left promiscuous mode [ 1023.385104][ T2808] veth1_vlan: left promiscuous mode [ 1023.397254][ T2808] veth0_vlan: left promiscuous mode [ 1023.441329][T22090] Bluetooth: hci5: command tx timeout [ 1023.674759][ T2808] team0 (unregistering): Port device batadv1 removed [ 1023.952090][ T2808] team0 (unregistering): Port device team_slave_1 removed [ 1023.971700][ T2808] team0 (unregistering): Port device team_slave_0 removed [ 1024.112338][ T6152] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1024.119849][ T6152] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1024.155514][ T6152] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1024.167763][ T6423] netlink: 16 bytes leftover after parsing attributes in process `syz.4.9207'. [ 1024.290795][ T6152] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1024.297804][ T6152] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1024.360010][ T6152] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1024.417436][ T6430] netlink: 'syz.4.9210': attribute type 24 has an invalid length. [ 1024.538817][ T6152] hsr_slave_0: entered promiscuous mode [ 1024.556330][ T6435] netlink: 64138 bytes leftover after parsing attributes in process `syz.0.9211'. [ 1024.573364][ T6152] hsr_slave_1: entered promiscuous mode [ 1024.588632][ T6152] debugfs: 'hsr0' already exists in 'hsr' [ 1024.597291][ T6152] Cannot create hsr debugfs directory [ 1024.679266][ T6442] tipc: Enabling of bearer rejected, failed to enable media [ 1024.777921][ T2808] IPVS: stop unused estimator thread 0... [ 1025.168178][ T6464] netlink: 20 bytes leftover after parsing attributes in process `syz.1.9218'. [ 1025.211727][ T6460] syzkaller0: entered allmulticast mode [ 1025.241377][ T6460] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9217'. [ 1025.316922][ T6460] bridge_slave_1: left allmulticast mode [ 1025.345265][ T6460] bridge_slave_1: left promiscuous mode [ 1025.352901][ T6460] bridge0: port 2(bridge_slave_1) entered disabled state [ 1025.393208][ T6460] bridge_slave_0: left allmulticast mode [ 1025.404068][ T6460] bridge_slave_0: left promiscuous mode [ 1025.425080][ T6477] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 1025.429081][ T6460] bridge0: port 1(bridge_slave_0) entered disabled state [ 1025.522211][T22090] Bluetooth: hci5: command tx timeout [ 1025.706291][ T6493] netlink: 'syz.3.9225': attribute type 3 has an invalid length. [ 1025.855888][ T6500] netlink: 27 bytes leftover after parsing attributes in process `syz.1.9227'. [ 1025.977717][ T6508] netlink: 20 bytes leftover after parsing attributes in process `syz.3.9230'. [ 1026.113851][ T6515] netlink: 'syz.3.9232': attribute type 1 has an invalid length. [ 1026.162109][ T6515] netlink: 224 bytes leftover after parsing attributes in process `syz.3.9232'. [ 1026.381846][ T6523] syzkaller0: entered promiscuous mode [ 1026.394439][ T6523] syzkaller0: entered allmulticast mode [ 1026.409981][ T6526] openvswitch: netlink: Missing valid actions attribute. [ 1026.432728][ T6526] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1026.484076][ T6152] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1026.513462][ T6152] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1026.560351][ T6152] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1026.586352][ T6152] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1026.840256][ T6152] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1026.866092][ T6554] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1026.870719][ T6555] netlink: 'syz.0.9240': attribute type 21 has an invalid length. [ 1026.896072][ T6558] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9241'. [ 1026.932034][ T6152] 8021q: adding VLAN 0 to HW filter on device team0 [ 1026.940678][ T6555] IPv6: NLM_F_CREATE should be specified when creating new route [ 1026.956337][ T2811] bridge0: port 1(bridge_slave_0) entered blocking state [ 1026.963572][ T2811] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1026.984198][ T6555] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1026.991509][ T6555] IPv6: NLM_F_CREATE should be set when creating new route [ 1026.998795][ T6555] IPv6: NLM_F_CREATE should be set when creating new route [ 1027.006086][ T6555] IPv6: NLM_F_CREATE should be set when creating new route [ 1027.015804][ T2811] bridge0: port 2(bridge_slave_1) entered blocking state [ 1027.023119][ T2811] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1027.037916][T26585] IPVS: starting estimator thread 0... [ 1027.139933][ T6562] IPVS: using max 28 ests per chain, 67200 per kthread [ 1027.302920][ T6573] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9244'. [ 1027.619388][ T6152] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1027.691253][ T6152] veth0_vlan: entered promiscuous mode [ 1027.705316][ T6152] veth1_vlan: entered promiscuous mode [ 1027.753161][ T6152] veth0_macvtap: entered promiscuous mode [ 1027.863101][ T6152] veth1_macvtap: entered promiscuous mode [ 1027.911352][ T6152] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1027.944080][ T6152] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1027.979295][ T2826] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1027.989389][ T2826] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1028.018688][ T2826] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1028.092154][ T2826] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1028.260729][ T6588] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1028.451863][ T6623] netlink: 'syz.0.9254': attribute type 3 has an invalid length. [ 1028.494810][ T6625] bond1: Removing last ns target with arp_interval on [ 1028.529175][ T2808] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1028.570615][ T2808] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1028.674079][ T6636] H: renamed from dummy0 (while UP) [ 1028.718667][ T2808] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1028.749124][ T2808] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1029.584182][ T6685] netlink: 20 bytes leftover after parsing attributes in process `syz.0.9267'. [ 1029.593979][T22090] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1029.615270][T22090] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1029.623317][T22090] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1029.632451][T22090] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1029.641691][T22090] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1029.748120][ T6688] netlink: 'syz.4.9266': attribute type 1 has an invalid length. [ 1029.811898][ T6688] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1029.822875][ T6688] netlink: 40 bytes leftover after parsing attributes in process `syz.4.9266'. [ 1029.832747][ T6688] netlink: 'syz.4.9266': attribute type 12 has an invalid length. [ 1029.873591][ T6681] lo speed is unknown, defaulting to 1000 [ 1029.903007][ T6694] IPv6: addrconf: prefix option has invalid lifetime [ 1029.960621][ T6694] xt_NFQUEUE: number of queues (62232) out of range (got 67565) [ 1030.046849][T27972] bond0: (slave syz_tun): Releasing backup interface [ 1030.088894][T27972] syz_tun (unregistering): left allmulticast mode [ 1030.260309][ T6701] netlink: 28 bytes leftover after parsing attributes in process `syz.2.9271'. [ 1030.547075][ T6681] wlan0 speed is unknown, defaulting to 1000 [ 1030.693553][ T2811] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1030.726097][ T2811] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1030.755061][ T6681] vxcan1 speed is unknown, defaulting to 1000 [ 1030.765886][ T6727] netlink: 76 bytes leftover after parsing attributes in process `syz.4.9275'. [ 1030.776460][ T6736] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9277'. [ 1030.796797][ T6736] netlink: 'syz.2.9277': attribute type 30 has an invalid length. [ 1030.819710][ T6733] tipc: Started in network mode [ 1030.835001][ T6733] tipc: Node identity aaaaaaaaaa3a, cluster identity 4711 [ 1030.850366][ T6733] tipc: Enabled bearer , priority 5 [ 1030.896419][ T2811] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1030.912907][ T2811] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1031.109941][ T2824] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1031.288932][ T2811] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1031.344940][ T2811] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1031.476869][ T2824] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1031.491613][ T6755] netlink: 256 bytes leftover after parsing attributes in process `syz.2.9281'. [ 1031.548622][ T2824] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1031.611912][ T2824] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1031.686026][T22090] Bluetooth: hci3: command tx timeout [ 1031.727569][ T2811] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1031.771126][ T2811] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1031.911084][ T6784] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9285'. [ 1031.924095][ T3419] tipc: Node number set to 9480874 [ 1032.582715][ T2811] veth0_to_bond: left allmulticast mode [ 1032.588344][ T2811] veth0_to_bond: left promiscuous mode [ 1032.594177][ T2811] bridge4: port 2(veth0_to_bond) entered disabled state [ 1032.605562][ T2811] veth3: left allmulticast mode [ 1032.611431][ T2811] veth3: left promiscuous mode [ 1032.616460][ T2811] bridge4: port 1(veth3) entered disabled state [ 1032.637740][ T2811] tipc: Resetting bearer [ 1032.806983][ T2811] bond4 (unregistering): (slave ip6gre1): Releasing backup interface [ 1033.137597][ T2811] bond5 (unregistering): (slave bridge3): Releasing active interface [ 1033.146824][ T2811] bridge3 (unregistering): left promiscuous mode [ 1033.153312][ T2811] bridge3 (unregistering): left allmulticast mode [ 1033.211010][ T2811] tipc: Disabling bearer [ 1033.464720][ T2811] bond0 (unregistering): Released all slaves [ 1033.475708][ T2811] bond1 (unregistering): Released all slaves [ 1033.489517][ T2811] bond2 (unregistering): Released all slaves [ 1033.505891][ T2811] bond3 (unregistering): Released all slaves [ 1033.522286][ T2811] bond4 (unregistering): Released all slaves [ 1033.540323][ T2811] bond5 (unregistering): Released all slaves [ 1033.556174][ T2811] bond6 (unregistering): (slave bond7): Releasing active interface [ 1033.565367][ T2811] bond6 (unregistering): Released all slaves [ 1033.583966][ T2811] bond7 (unregistering): Released all slaves [ 1033.597713][ T2811] bond8 (unregistering): Released all slaves [ 1033.612793][ T2811] bond9 (unregistering): Released all slaves [ 1033.636379][ T2811] bond10 (unregistering): Released all slaves [ 1033.650764][ T2811] bond11 (unregistering): Released all slaves [ 1033.671065][ T2811] bond12 (unregistering): (slave vcan1): Releasing backup interface [ 1033.679102][ T2811] vcan1: left promiscuous mode [ 1033.686373][ T2811] bond12 (unregistering): Released all slaves [ 1033.763480][T22090] Bluetooth: hci3: command tx timeout [ 1033.775869][ T6681] chnl_net:caif_netlink_parms(): no params data found [ 1033.885709][ T2811] : left promiscuous mode [ 1033.973365][ T2811] 9: left promiscuous mode [ 1034.014703][ T6681] bridge0: port 1(bridge_slave_0) entered blocking state [ 1034.022015][ T6681] bridge0: port 1(bridge_slave_0) entered disabled state [ 1034.029229][ T6681] bridge_slave_0: entered allmulticast mode [ 1034.037058][ T6681] bridge_slave_0: entered promiscuous mode [ 1034.060736][ T2811] tipc: Disabling bearer [ 1034.066233][ T2811] tipc: Left network mode [ 1034.071493][ T6681] bridge0: port 2(bridge_slave_1) entered blocking state [ 1034.081430][ T6681] bridge0: port 2(bridge_slave_1) entered disabled state [ 1034.089948][ T6681] bridge_slave_1: entered allmulticast mode [ 1034.097818][ T6681] bridge_slave_1: entered promiscuous mode [ 1034.120776][ T2811] IPVS: stopping backup sync thread 28422 ... [ 1034.152276][ T6681] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1034.165229][ T6681] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1034.216390][ T6681] team0: Port device team_slave_0 added [ 1034.225068][ T6681] team0: Port device team_slave_1 added [ 1034.258388][ T6681] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1034.268480][ T6681] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1034.298010][ T6681] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1034.316232][ T6681] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1034.337391][ T6681] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1034.366656][ T6681] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1034.439531][ T6681] hsr_slave_0: entered promiscuous mode [ 1034.450254][ T6681] hsr_slave_1: entered promiscuous mode [ 1034.456674][ T6681] debugfs: 'hsr0' already exists in 'hsr' [ 1034.463799][ T6681] Cannot create hsr debugfs directory [ 1035.182032][ T6681] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1035.217188][ T6681] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1035.238089][ T6681] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1035.279472][ T6681] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1035.465613][ T6681] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1035.486133][ T6681] 8021q: adding VLAN 0 to HW filter on device team0 [ 1035.508290][ T2823] bridge0: port 1(bridge_slave_0) entered blocking state [ 1035.515509][ T2823] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1035.540928][ T2823] bridge0: port 2(bridge_slave_1) entered blocking state [ 1035.548085][ T2823] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1035.745224][ T2811] veth1_macvtap: left promiscuous mode [ 1035.840414][T22090] Bluetooth: hci3: command tx timeout [ 1036.112034][ T2811] smc: removing net device team0 with user defined pnetid SYZ2 [ 1036.143649][ T2823] smc: removing ib device syz0 [ 1036.400824][ T6681] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1036.537201][ T6681] veth0_vlan: entered promiscuous mode [ 1036.553436][ T6681] veth1_vlan: entered promiscuous mode [ 1036.617554][ T6681] veth0_macvtap: entered promiscuous mode [ 1036.647552][ T6681] veth1_macvtap: entered promiscuous mode [ 1036.687684][ T6681] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1036.700263][ T6681] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1036.727673][ T2824] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1036.739217][ T2824] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1036.756166][ T2824] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1036.767618][ T2824] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1036.922560][ T2829] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1036.935384][ T2829] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1037.038807][ T2826] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1037.056078][ T2826] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1037.920267][T22090] Bluetooth: hci3: command tx timeout [ 1039.088397][ T2811] IPVS: stop unused estimator thread 0... [ 1043.017129][T16984] lec:lec_start_xmit: lec0:No lecd attached [ 1048.799729][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5780 ms [ 1048.807814][ C0] lec:lec_tx_timeout: lec0 [ 1051.173887][ T5193] udevd[5193]: worker [32183] /devices/virtual/block/nbd2 timeout; kill it [ 1051.182796][ T5193] udevd[5193]: seq 36484 '/devices/virtual/block/nbd2' killed [ 1054.326371][ T1300] lec:lec_start_xmit: lec0:No lecd attached [ 1054.547246][ T6992] netlink: 32 bytes leftover after parsing attributes in process `syz.2.9294'. [ 1054.822422][T30292] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1054.850150][T30292] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1054.865539][T30292] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1054.910009][T30292] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1054.925293][T30292] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1055.139844][ T7009] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9300'. [ 1055.164115][ T7002] vxcan1 speed is unknown, defaulting to 1000 [ 1055.273150][T28741] bridge0: port 3(syz_tun) entered disabled state [ 1055.364401][T28741] syz_tun (unregistering): left allmulticast mode [ 1055.383539][T28741] syz_tun (unregistering): left promiscuous mode [ 1055.394718][T28741] bridge0: port 3(syz_tun) entered disabled state [ 1055.826896][ T7030] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9306'. [ 1055.835900][ T7031] syzkaller1: entered promiscuous mode [ 1055.841702][ T7031] syzkaller1: entered allmulticast mode [ 1055.875050][ T7030] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 1055.892570][ T7030] netlink: 164 bytes leftover after parsing attributes in process `syz.2.9306'. [ 1055.972259][ T7040] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 1056.142910][ T7044] netlink: 'syz.2.9310': attribute type 1 has an invalid length. [ 1056.191742][ T7052] netlink: zone id is out of range [ 1056.196930][ T7052] netlink: zone id is out of range [ 1056.279222][ T7052] netlink: zone id is out of range [ 1056.292048][ T7002] chnl_net:caif_netlink_parms(): no params data found [ 1056.302165][ T7052] netlink: zone id is out of range [ 1056.307345][ T7052] netlink: zone id is out of range [ 1056.332272][ T7052] netlink: zone id is out of range [ 1056.337442][ T7052] netlink: zone id is out of range [ 1056.362642][ T7052] netlink: zone id is out of range [ 1056.378048][ T7052] netlink: zone id is out of range [ 1056.386676][ T7052] netlink: zone id is out of range [ 1056.409821][ T7062] netlink: 32 bytes leftover after parsing attributes in process `syz.1.9316'. [ 1056.526443][ T7002] bridge0: port 1(bridge_slave_0) entered blocking state [ 1056.533790][ T7002] bridge0: port 1(bridge_slave_0) entered disabled state [ 1056.542929][ T7002] bridge_slave_0: entered allmulticast mode [ 1056.550722][ T7002] bridge_slave_0: entered promiscuous mode [ 1056.559205][ T7002] bridge0: port 2(bridge_slave_1) entered blocking state [ 1056.567304][ T7002] bridge0: port 2(bridge_slave_1) entered disabled state [ 1056.574803][ T7002] bridge_slave_1: entered allmulticast mode [ 1056.582613][ T7002] bridge_slave_1: entered promiscuous mode [ 1056.736016][ T7002] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1056.790878][ T7002] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1056.925305][ T7002] team0: Port device team_slave_0 added [ 1056.940793][ T7002] team0: Port device team_slave_1 added [ 1057.027731][ T7002] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1057.035052][ T7002] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1057.061093][T30292] Bluetooth: hci2: command tx timeout [ 1057.126262][ T7002] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1057.173396][ T7002] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1057.200126][ T7002] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1057.283519][ T7076] infiniband syz1: set down [ 1057.288261][ T7076] infiniband syz1: added bond_slave_0 [ 1057.299655][ T7002] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1057.357763][ T7076] RDS/IB: syz1: added [ 1057.364350][ T7076] smc: adding ib device syz1 with port count 1 [ 1057.371457][ T7104] netlink: 'syz.0.9329': attribute type 29 has an invalid length. [ 1057.374157][ T7076] smc: ib device syz1 port 1 has no pnetid [ 1057.387085][ T7104] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9329'. [ 1057.520545][ T7002] hsr_slave_0: entered promiscuous mode [ 1057.540826][ T7002] hsr_slave_1: entered promiscuous mode [ 1057.554855][ T7002] debugfs: 'hsr0' already exists in 'hsr' [ 1057.568042][ T7002] Cannot create hsr debugfs directory [ 1057.816506][ T7115] FAULT_INJECTION: forcing a failure. [ 1057.816506][ T7115] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1057.833040][ T7118] xt_hashlimit: size too large, truncated to 1048576 [ 1057.871330][ T7115] CPU: 1 UID: 0 PID: 7115 Comm: syz.1.9332 Not tainted syzkaller #0 PREEMPT(full) [ 1057.871355][ T7115] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1057.871367][ T7115] Call Trace: [ 1057.871375][ T7115] [ 1057.871383][ T7115] dump_stack_lvl+0xe8/0x150 [ 1057.871415][ T7115] should_fail_ex+0x412/0x560 [ 1057.871448][ T7115] _copy_from_user+0x2d/0xb0 [ 1057.871470][ T7115] kstrtouint_from_user+0xd6/0x180 [ 1057.871501][ T7115] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 1057.871540][ T7115] proc_fail_nth_write+0x8e/0x210 [ 1057.871587][ T7115] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1057.871623][ T7115] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1057.871653][ T7115] vfs_write+0x29a/0xb90 [ 1057.871685][ T7115] ? __pfx_vfs_write+0x10/0x10 [ 1057.871708][ T7115] ? __fget_files+0x2a/0x420 [ 1057.871743][ T7115] ? __fget_files+0x3a0/0x420 [ 1057.871770][ T7115] ? __fget_files+0x2a/0x420 [ 1057.871808][ T7115] ksys_write+0x150/0x270 [ 1057.871833][ T7115] ? __pfx_ksys_write+0x10/0x10 [ 1057.871867][ T7115] do_syscall_64+0x14d/0xf80 [ 1057.871889][ T7115] ? trace_irq_disable+0x3b/0x150 [ 1057.871917][ T7115] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1057.871939][ T7115] ? clear_bhb_loop+0x40/0x90 [ 1057.871963][ T7115] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1057.871984][ T7115] RIP: 0033:0x7f487735cfce [ 1057.872003][ T7115] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1057.872021][ T7115] RSP: 002b:00007f48755f5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1057.872042][ T7115] RAX: ffffffffffffffda RBX: 00007f48755f66c0 RCX: 00007f487735cfce [ 1057.872057][ T7115] RDX: 0000000000000001 RSI: 00007f48755f60a0 RDI: 0000000000000006 [ 1057.872069][ T7115] RBP: 00007f48755f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1057.872082][ T7115] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1057.872094][ T7115] R13: 00007f4877616038 R14: 00007f4877615fa0 R15: 00007ffff7104b98 [ 1057.872127][ T7115] [ 1058.224442][ T7002] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1058.236595][ T7002] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1058.264224][ T7127] netlink: 'syz.1.9337': attribute type 1 has an invalid length. [ 1058.475108][ T7131] netlink: 20 bytes leftover after parsing attributes in process `syz.2.9338'. [ 1058.488755][ T7002] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1058.501021][ T7002] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1058.632336][ T7002] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1058.643533][ T7002] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1058.665022][ T7138] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9340'. [ 1058.785670][ T7002] .`: (slave netdevsim0): Releasing backup interface [ 1058.805820][ T7002] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1058.827208][ T7002] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1058.922024][ T7148] team0 (unregistering): Port device team_slave_0 removed [ 1058.961372][ T7148] team0 (unregistering): Port device team_slave_1 removed [ 1059.029742][ T7156] tipc: Started in network mode [ 1059.035719][ T7156] tipc: Node identity 82a7425961cb, cluster identity 4711 [ 1059.070238][ T7156] tipc: Enabled bearer , priority 0 [ 1059.121352][T30292] Bluetooth: hci2: command tx timeout [ 1059.143323][ T7159] bridge0: port 2(bridge_slave_1) entered disabled state [ 1059.150955][ T7159] bridge0: port 1(bridge_slave_0) entered disabled state [ 1059.235296][ T7159] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1059.247709][ T7159] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1059.428736][ T7157] syzkaller0: entered promiscuous mode [ 1059.438472][ T7157] syzkaller0: entered allmulticast mode [ 1059.446986][ T7157] tipc: Resetting bearer [ 1059.509709][ T2811] tipc: Resetting bearer [ 1059.545029][ T7165] bond1: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5) [ 1059.557228][ T7165] bond1 (unregistering): Released all slaves [ 1059.585206][ T2826] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1059.602501][ T2826] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1059.632256][ T7146] tipc: Resetting bearer [ 1059.759595][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5430 ms [ 1059.767678][ C0] lec:lec_tx_timeout: lec0 [ 1059.982219][ T7181] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9350'. [ 1061.051299][ T7146] tipc: Disabling bearer [ 1061.060281][ T2826] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1061.069374][ T2826] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1061.097928][T26597] tipc: Node number set to 3815522905 [ 1061.203357][T30292] Bluetooth: hci2: command tx timeout [ 1061.218220][ T7002] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1061.262959][ T7186] netlink: 20 bytes leftover after parsing attributes in process `syz.1.9351'. [ 1061.273585][ T7187] netlink: 12 bytes leftover after parsing attributes in process `syz.0.9352'. [ 1061.288305][ T7002] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1061.308443][ T7184] syz_tun: entered allmulticast mode [ 1061.350576][ T7002] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1061.386182][ T2824] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 20002 - 0 [ 1061.407955][ T2824] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 20002 - 0 [ 1061.422121][ T7002] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1061.459507][ T2824] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 20002 - 0 [ 1061.490643][ T2824] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 20002 - 0 [ 1061.509762][ T7189] vxcan1 speed is unknown, defaulting to 1000 [ 1061.722828][ T7002] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1061.785898][ T7002] 8021q: adding VLAN 0 to HW filter on device team0 [ 1061.820648][ T2824] bridge0: port 1(bridge_slave_0) entered blocking state [ 1061.827927][ T2824] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1061.871676][ T2824] bridge0: port 2(bridge_slave_1) entered blocking state [ 1061.878871][ T2824] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1062.452769][ T7229] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9362'. [ 1062.466166][ T7002] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1062.480190][ T7229] netlink: 48 bytes leftover after parsing attributes in process `syz.1.9362'. [ 1062.494218][ T7229] netlink: 4 bytes leftover after parsing attributes in process `syz.1.9362'. [ 1062.676291][ T7240] netlink: 20 bytes leftover after parsing attributes in process `syz.1.9364'. [ 1062.722537][ T7242] netlink: 'syz.0.9365': attribute type 1 has an invalid length. [ 1062.828712][ T7246] netlink: 'syz.0.9365': attribute type 10 has an invalid length. [ 1062.840946][ T7242] bond2: entered promiscuous mode [ 1062.846027][ T7242] bond2: entered allmulticast mode [ 1062.860836][ T7242] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1063.024464][ T7251] netlink: 88 bytes leftover after parsing attributes in process `syz.1.9367'. [ 1063.074077][ T7002] veth0_vlan: entered promiscuous mode [ 1063.097175][ T7002] veth1_vlan: entered promiscuous mode [ 1063.113556][ T7253] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9368'. [ 1063.172454][ T7002] veth0_macvtap: entered promiscuous mode [ 1063.220126][ T7002] veth1_macvtap: entered promiscuous mode [ 1063.242728][ T7002] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1063.266127][ T7002] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1063.280179][T30292] Bluetooth: hci2: command tx timeout [ 1063.295831][ T2811] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1063.329499][ T2811] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1063.348681][ T2811] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1063.370665][ T2811] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1063.875301][ T7272] --map-set only usable from mangle table [ 1063.901971][ T7273] --map-set only usable from mangle table [ 1066.083745][ T7257] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1066.200169][ T2811] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1066.231565][ T2811] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1066.303180][ T2811] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1066.318879][ T2811] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1066.371350][ T7291] netlink: 'syz.2.9378': attribute type 1 has an invalid length. [ 1066.536915][ T7308] netlink: 'syz.1.9381': attribute type 1 has an invalid length. [ 1066.919933][ T7311] veth0_vlan: left promiscuous mode [ 1067.180576][ T7331] geneve3: entered promiscuous mode [ 1067.208113][ T7331] geneve3: entered allmulticast mode [ 1067.217358][ T2811] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0 [ 1067.230465][ T2811] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 1067.241199][ T2811] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 1067.254273][ T2811] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0 [ 1067.722936][ T7366] netlink: 20 bytes leftover after parsing attributes in process `syz.2.9397'. [ 1067.735281][ T7357] tipc: Enabling of bearer rejected, failed to enable media [ 1067.743941][ T7359] netlink: 'syz.1.9395': attribute type 3 has an invalid length. [ 1067.781453][ T7363] net_ratelimit: 186 callbacks suppressed [ 1067.781474][ T7363] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 1067.916680][ T7370] sctp: [Deprecated]: syz.0.9399 (pid 7370) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1067.916680][ T7370] Use struct sctp_sack_info instead [ 1067.977716][ T7375] xt_hashlimit: size too large, truncated to 1048576 [ 1068.178542][ T7370] vxcan1 speed is unknown, defaulting to 1000 [ 1068.743893][ T7400] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9407'. [ 1068.783088][ T7400] netlink: 12 bytes leftover after parsing attributes in process `syz.1.9407'. [ 1068.786558][ T2829] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1068.821972][ T2829] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1068.850271][ T2829] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1068.891112][ T2829] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1069.009139][ T7408] ip6t_srh: unknown srh invflags 4000 [ 1069.086806][ T7411] IPVS: Error connecting to the multicast addr [ 1069.436770][ T7424] syzkaller1: entered promiscuous mode [ 1069.449667][ T7424] syzkaller1: entered allmulticast mode [ 1069.460899][ T7424] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9414'. [ 1069.536146][ T7427] netlink: 56 bytes leftover after parsing attributes in process `syz.4.9414'. [ 1069.559727][ T7427] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9414'. [ 1069.568736][ T7427] netlink: 31 bytes leftover after parsing attributes in process `syz.4.9414'. [ 1069.578005][ T7427] netlink: 'syz.4.9414': attribute type 2 has an invalid length. [ 1069.588035][ T7427] netlink: 31 bytes leftover after parsing attributes in process `syz.4.9414'. [ 1069.868493][ T7430] netlink: 12 bytes leftover after parsing attributes in process `syz.4.9415'. [ 1070.511837][ T7453] netlink: 20 bytes leftover after parsing attributes in process `syz.4.9420'. [ 1070.559320][ T7453] netlink: 'syz.4.9420': attribute type 83 has an invalid length. [ 1070.651082][ T7458] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 1070.723210][ T7420] mpoa:mpoad_close: () going down [ 1071.738801][ T7530] tc_dump_action: action bad kind [ 1071.801856][ T7535] netlink: 'syz.3.9439': attribute type 1 has an invalid length. [ 1071.815632][ T7537] netlink: 'syz.1.9440': attribute type 11 has an invalid length. [ 1071.852596][ T7538] netlink: 'syz.1.9440': attribute type 11 has an invalid length. [ 1071.884942][ T7542] netlink: 'syz.4.9441': attribute type 8 has an invalid length. [ 1071.922903][ T7532] netlink: 'syz.0.9437': attribute type 13 has an invalid length. [ 1071.934678][ T7532] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1071.943429][ T7532] eql: remember to turn off Van-Jacobson compression on your slave devices [ 1072.040873][ T7549] netlink: 'syz.1.9443': attribute type 11 has an invalid length. [ 1072.084751][ T7532] A link change request failed with some changes committed already. Interface teql0 may have been left with an inconsistent configuration, please check. [ 1072.207667][ T7562] netlink: 'syz.1.9447': attribute type 4 has an invalid length. [ 1072.221394][ T7561] netlink: 'syz.1.9447': attribute type 4 has an invalid length. [ 1072.496829][ T7582] syzkaller0: entered promiscuous mode [ 1072.506265][ T7582] syzkaller0: entered allmulticast mode [ 1072.562826][T30292] block nbd1: Receive control failed (result -107) [ 1072.771593][ T7584] openvswitch: netlink: Invalid VLAN frame [ 1072.882886][ T7604] __nla_validate_parse: 10 callbacks suppressed [ 1072.882903][ T7604] netlink: 40 bytes leftover after parsing attributes in process `syz.1.9459'. [ 1073.125857][ T7621] netlink: 7064 bytes leftover after parsing attributes in process `syz.4.9462'. [ 1073.149418][ T7620] netlink: 7064 bytes leftover after parsing attributes in process `syz.4.9462'. [ 1073.168930][ T7621] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 1073.177857][ T7620] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 1073.204478][ T7627] netlink: 24 bytes leftover after parsing attributes in process `syz.1.9463'. [ 1073.226733][ T7626] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9465'. [ 1073.394372][ T7633] netlink: 'syz.0.9466': attribute type 10 has an invalid length. [ 1073.608712][ T7633] syz_tun: entered promiscuous mode [ 1073.620994][ T7633] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 1073.744870][ T7642] netlink: 36 bytes leftover after parsing attributes in process `syz.0.9469'. [ 1074.021050][ T7659] netlink: 'syz.0.9475': attribute type 13 has an invalid length. [ 1074.338638][ T7674] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9481'. [ 1074.705969][ T7694] netlink: 'syz.0.9490': attribute type 7 has an invalid length. [ 1074.725429][ T7694] netlink: 'syz.0.9490': attribute type 8 has an invalid length. [ 1074.754702][ T7699] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9492'. [ 1074.894631][ T7707] IPv6: NLM_F_CREATE should be specified when creating new route [ 1074.909805][ T7707] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1074.917063][ T7707] IPv6: NLM_F_CREATE should be set when creating new route [ 1075.297651][ T7733] netlink: 'syz.1.9504': attribute type 11 has an invalid length. [ 1075.321741][ T7733] netlink: 'syz.1.9504': attribute type 11 has an invalid length. [ 1075.348289][ T7733] netlink: 'syz.1.9504': attribute type 1 has an invalid length. [ 1075.358287][ T7733] netlink: 16110 bytes leftover after parsing attributes in process `syz.1.9504'. [ 1075.589428][ T7743] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9509'. [ 1076.296499][ T7798] netlink: 'syz.0.9525': attribute type 11 has an invalid length. [ 1076.316705][ T7798] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 1076.681983][ T7820] x_tables: duplicate underflow at hook 1 [ 1076.700155][ T7820] IPVS: length: 81 != 24 [ 1076.763186][ T7824] netlink: 'syz.2.9535': attribute type 12 has an invalid length. [ 1076.948895][ T7831] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1076.951090][T26585] IPVS: starting estimator thread 0... [ 1077.085037][ T7839] IPVS: using max 34 ests per chain, 81600 per kthread [ 1077.131883][ T7849] IPv6: NLM_F_CREATE should be specified when creating new route [ 1077.477276][ T7871] tipc: Enabling of bearer rejected, failed to enable media [ 1077.575700][ T7877] [ 1077.578099][ T7877] ====================================================== [ 1077.585132][ T7877] WARNING: possible circular locking dependency detected [ 1077.592182][ T7877] syzkaller #0 Not tainted [ 1077.596618][ T7877] ------------------------------------------------------ [ 1077.603652][ T7877] syz.4.9553/7877 is trying to acquire lock: [ 1077.609655][ T7877] ffffffff8e883040 (fs_reclaim){+.+.}-{0:0}, at: kmem_cache_alloc_node_noprof+0x4a/0x690 [ 1077.619533][ T7877] [ 1077.619533][ T7877] but task is already holding lock: [ 1077.626923][ T7877] ffff888065254220 (k-sk_lock-AF_INET){+.+.}-{0:0}, at: tcp_close+0x1d/0x110 [ 1077.635752][ T7877] [ 1077.635752][ T7877] which lock already depends on the new lock. [ 1077.635752][ T7877] [ 1077.646173][ T7877] [ 1077.646173][ T7877] the existing dependency chain (in reverse order) is: [ 1077.655258][ T7877] [ 1077.655258][ T7877] -> #7 (k-sk_lock-AF_INET){+.+.}-{0:0}: [ 1077.663114][ T7877] mptcp_sol_socket_sync_intval+0x203/0x920 [ 1077.669612][ T7877] mptcp_setsockopt+0x2383/0x36a0 [ 1077.675189][ T7877] do_sock_setsockopt+0x17c/0x1b0 [ 1077.680752][ T7877] __x64_sys_setsockopt+0x13d/0x1b0 [ 1077.686495][ T7877] do_syscall_64+0x14d/0xf80 [ 1077.691639][ T7877] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1077.698088][ T7877] [ 1077.698088][ T7877] -> #6 (sk_lock-AF_INET){+.+.}-{0:0}: [ 1077.705771][ T7877] lock_sock_nested+0x48/0x100 [ 1077.711105][ T7877] inet_shutdown+0x6a/0x390 [ 1077.716164][ T7877] nbd_mark_nsock_dead+0x2e9/0x560 [ 1077.721844][ T7877] recv_work+0x1c7f/0x1d90 [ 1077.726825][ T7877] process_scheduled_works+0xb6e/0x18c0 [ 1077.732938][ T7877] worker_thread+0xa53/0xfc0 [ 1077.738105][ T7877] kthread+0x388/0x470 [ 1077.742724][ T7877] ret_from_fork+0x51e/0xb90 [ 1077.747867][ T7877] ret_from_fork_asm+0x1a/0x30 [ 1077.753195][ T7877] [ 1077.753195][ T7877] -> #5 (&nsock->tx_lock){+.+.}-{4:4}: [ 1077.760882][ T7877] __mutex_lock+0x19f/0x1300 [ 1077.766019][ T7877] nbd_queue_rq+0x37b/0x1100 [ 1077.771162][ T7877] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 1077.777256][ T7877] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 1077.784163][ T7877] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 1077.790726][ T7877] blk_mq_run_hw_queue+0x348/0x4f0 [ 1077.796397][ T7877] blk_mq_dispatch_list+0xd16/0xe10 [ 1077.802141][ T7877] blk_mq_flush_plug_list+0x48d/0x570 [ 1077.808070][ T7877] __blk_flush_plug+0x3ed/0x4d0 [ 1077.813471][ T7877] __submit_bio+0x28d/0x580 [ 1077.818545][ T7877] submit_bio_noacct_nocheck+0x2f4/0xa70 [ 1077.824732][ T7877] block_read_full_folio+0x599/0x830 [ 1077.830616][ T7877] filemap_read_folio+0x137/0x3b0 [ 1077.836201][ T7877] do_read_cache_folio+0x358/0x590 [ 1077.841870][ T7877] read_part_sector+0xb6/0x2b0 [ 1077.847190][ T7877] adfspart_check_ICS+0xa5/0xa40 [ 1077.852688][ T7877] bdev_disk_changed+0x7ba/0x1550 [ 1077.858267][ T7877] blkdev_get_whole+0x380/0x510 [ 1077.863677][ T7877] bdev_open+0x31e/0xd30 [ 1077.868475][ T7877] blkdev_open+0x470/0x610 [ 1077.873453][ T7877] do_dentry_open+0x785/0x14e0 [ 1077.878775][ T7877] vfs_open+0x3b/0x340 [ 1077.883394][ T7877] path_openat+0x2e08/0x3860 [ 1077.888559][ T7877] do_file_open+0x23e/0x4a0 [ 1077.893614][ T7877] do_sys_openat2+0x113/0x200 [ 1077.898861][ T7877] __x64_sys_openat+0x138/0x170 [ 1077.904278][ T7877] do_syscall_64+0x14d/0xf80 [ 1077.909419][ T7877] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1077.914437][ T7867] __nla_validate_parse: 14 callbacks suppressed [ 1077.914482][ T7867] netlink: 56 bytes leftover after parsing attributes in process `syz.0.9550'. [ 1077.915859][ T7877] [ 1077.915859][ T7877] -> #4 (&cmd->lock){+.+.}-{4:4}: [ 1077.938387][ T7877] __mutex_lock+0x19f/0x1300 [ 1077.943539][ T7877] nbd_queue_rq+0xc6/0x1100 [ 1077.948600][ T7877] blk_mq_dispatch_rq_list+0xa70/0x1910 [ 1077.954699][ T7877] __blk_mq_sched_dispatch_requests+0xdcc/0x1600 [ 1077.961574][ T7877] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 1077.968102][ T7877] blk_mq_run_hw_queue+0x348/0x4f0 [ 1077.973768][ T7877] blk_mq_dispatch_list+0xd16/0xe10 [ 1077.979531][ T7877] blk_mq_flush_plug_list+0x48d/0x570 [ 1077.985468][ T7877] __blk_flush_plug+0x3ed/0x4d0 [ 1077.990868][ T7877] __submit_bio+0x28d/0x580 [ 1077.995916][ T7877] submit_bio_noacct_nocheck+0x2f4/0xa70 [ 1078.002266][ T7877] block_read_full_folio+0x599/0x830 [ 1078.008105][ T7877] filemap_read_folio+0x137/0x3b0 [ 1078.013689][ T7877] do_read_cache_folio+0x358/0x590 [ 1078.019364][ T7877] read_part_sector+0xb6/0x2b0 [ 1078.024698][ T7877] adfspart_check_ICS+0xa5/0xa40 [ 1078.030198][ T7877] bdev_disk_changed+0x7ba/0x1550 [ 1078.035787][ T7877] blkdev_get_whole+0x380/0x510 [ 1078.041195][ T7877] bdev_open+0x31e/0xd30 [ 1078.045988][ T7877] blkdev_open+0x470/0x610 [ 1078.051025][ T7877] do_dentry_open+0x785/0x14e0 [ 1078.056338][ T7877] vfs_open+0x3b/0x340 [ 1078.060965][ T7877] path_openat+0x2e08/0x3860 [ 1078.066113][ T7877] do_file_open+0x23e/0x4a0 [ 1078.067388][ T7884] netlink: 20 bytes leftover after parsing attributes in process `syz.1.9555'. [ 1078.071165][ T7877] do_sys_openat2+0x113/0x200 [ 1078.071194][ T7877] __x64_sys_openat+0x138/0x170 [ 1078.071220][ T7877] do_syscall_64+0x14d/0xf80 [ 1078.071240][ T7877] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1078.071258][ T7877] [ 1078.071258][ T7877] -> #3 (set->srcu){.+.+}-{0:0}: [ 1078.071290][ T7877] __synchronize_srcu+0xca/0x3e0 [ 1078.071312][ T7877] elevator_switch+0x1e8/0x7a0 [ 1078.071332][ T7877] elevator_change+0x2cc/0x450 [ 1078.071353][ T7877] elevator_set_default+0x36c/0x430 [ 1078.131842][ T7877] blk_register_queue+0x366/0x430 [ 1078.137436][ T7877] __add_disk+0x677/0xd50 [ 1078.142337][ T7877] add_disk_fwnode+0xfb/0x480 [ 1078.147594][ T7877] nbd_dev_add+0x72c/0xb50 [ 1078.152567][ T7877] nbd_init+0x168/0x1f0 [ 1078.157283][ T7877] do_one_initcall+0x250/0x8d0 [ 1078.162620][ T7877] do_initcall_level+0x104/0x190 [ 1078.168125][ T7877] do_initcalls+0x59/0xa0 [ 1078.173010][ T7877] kernel_init_freeable+0x2a6/0x3e0 [ 1078.178764][ T7877] kernel_init+0x1d/0x1d0 [ 1078.183652][ T7877] ret_from_fork+0x51e/0xb90 [ 1078.188801][ T7877] ret_from_fork_asm+0x1a/0x30 [ 1078.194136][ T7877] [ 1078.194136][ T7877] -> #2 (&q->elevator_lock){+.+.}-{4:4}: [ 1078.202010][ T7877] __mutex_lock+0x19f/0x1300 [ 1078.207137][ T7877] elevator_change+0x1b3/0x450 [ 1078.212451][ T7877] elevator_set_none+0xb5/0x140 [ 1078.217827][ T7877] blk_mq_update_nr_hw_queues+0x5e7/0x1a60 [ 1078.224691][ T7877] nbd_start_device+0x17f/0xb10 [ 1078.230091][ T7877] nbd_genl_connect+0x165b/0x1cf0 [ 1078.235685][ T7877] genl_family_rcv_msg_doit+0x22a/0x330 [ 1078.241789][ T7877] genl_rcv_msg+0x61c/0x7a0 [ 1078.246862][ T7877] netlink_rcv_skb+0x232/0x4b0 [ 1078.252193][ T7877] genl_rcv+0x28/0x40 [ 1078.256739][ T7877] netlink_unicast+0x80f/0x9b0 [ 1078.262070][ T7877] netlink_sendmsg+0x813/0xb40 [ 1078.267410][ T7877] ____sys_sendmsg+0x972/0x9f0 [ 1078.272746][ T7877] ___sys_sendmsg+0x2a5/0x360 [ 1078.277975][ T7877] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1078.283468][ T7877] do_syscall_64+0x14d/0xf80 [ 1078.288617][ T7877] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1078.295066][ T7877] [ 1078.295066][ T7877] -> #1 (&q->q_usage_counter(io)#70){++++}-{0:0}: [ 1078.303720][ T7877] blk_alloc_queue+0x546/0x680 [ 1078.309045][ T7877] __blk_mq_alloc_disk+0x197/0x390 [ 1078.314725][ T7877] nbd_dev_add+0x499/0xb50 [ 1078.319962][ T7877] nbd_genl_connect+0x962/0x1cf0 [ 1078.325472][ T7877] genl_family_rcv_msg_doit+0x22a/0x330 [ 1078.331583][ T7877] genl_rcv_msg+0x61c/0x7a0 [ 1078.336647][ T7877] netlink_rcv_skb+0x232/0x4b0 [ 1078.341971][ T7877] genl_rcv+0x28/0x40 [ 1078.346506][ T7877] netlink_unicast+0x80f/0x9b0 [ 1078.351839][ T7877] netlink_sendmsg+0x813/0xb40 [ 1078.357180][ T7877] ____sys_sendmsg+0x972/0x9f0 [ 1078.362519][ T7877] ___sys_sendmsg+0x2a5/0x360 [ 1078.367748][ T7877] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1078.373241][ T7877] do_syscall_64+0x14d/0xf80 [ 1078.378417][ T7877] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1078.384873][ T7877] [ 1078.384873][ T7877] -> #0 (fs_reclaim){+.+.}-{0:0}: [ 1078.392130][ T7877] __lock_acquire+0x15a5/0x2cf0 [ 1078.397512][ T7877] lock_acquire+0xf0/0x2e0 [ 1078.402454][ T7877] fs_reclaim_acquire+0x71/0x100 [ 1078.407918][ T7877] kmem_cache_alloc_node_noprof+0x4a/0x690 [ 1078.414249][ T7877] __alloc_skb+0x27d/0x7d0 [ 1078.419274][ T7877] tcp_send_active_reset+0x8a/0x5d0 [ 1078.425105][ T7877] tcp_disconnect+0x171/0x1fa0 [ 1078.430428][ T7877] __tcp_close+0x679/0xfe0 [ 1078.435393][ T7877] tcp_close+0x28/0x110 [ 1078.440093][ T7877] inet_release+0x143/0x190 [ 1078.445149][ T7877] sock_release+0x85/0x150 [ 1078.450099][ T7877] smc_clcsock_release+0xc9/0xf0 [ 1078.455579][ T7877] __smc_release+0x66b/0x7e0 [ 1078.460710][ T7877] smc_release+0x2ce/0x560 [ 1078.465668][ T7877] sock_close+0xc3/0x240 [ 1078.470453][ T7877] __fput+0x44f/0xa70 [ 1078.474962][ T7877] fput_close_sync+0x11f/0x240 [ 1078.480259][ T7877] __x64_sys_close+0x7e/0x110 [ 1078.485486][ T7877] do_syscall_64+0x14d/0xf80 [ 1078.490604][ T7877] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1078.497016][ T7877] [ 1078.497016][ T7877] other info that might help us debug this: [ 1078.497016][ T7877] [ 1078.507240][ T7877] Chain exists of: [ 1078.507240][ T7877] fs_reclaim --> sk_lock-AF_INET --> k-sk_lock-AF_INET [ 1078.507240][ T7877] [ 1078.520140][ T7877] Possible unsafe locking scenario: [ 1078.520140][ T7877] [ 1078.527611][ T7877] CPU0 CPU1 [ 1078.532984][ T7877] ---- ---- [ 1078.538367][ T7877] lock(k-sk_lock-AF_INET); [ 1078.542977][ T7877] lock(sk_lock-AF_INET); [ 1078.549976][ T7877] lock(k-sk_lock-AF_INET); [ 1078.557108][ T7877] lock(fs_reclaim); [ 1078.561093][ T7877] [ 1078.561093][ T7877] *** DEADLOCK *** [ 1078.561093][ T7877] [ 1078.569235][ T7877] 3 locks held by syz.4.9553/7877: [ 1078.574364][ T7877] #0: ffff8880a0154148 (&sb->s_type->i_mutex_key#14){+.+.}-{4:4}, at: sock_close+0x9b/0x240 [ 1078.584564][ T7877] #1: ffff888033437c38 (&smc->clcsock_release_lock){+.+.}-{4:4}, at: smc_clcsock_release+0x7f/0xf0 [ 1078.595365][ T7877] #2: ffff888065254220 (k-sk_lock-AF_INET){+.+.}-{0:0}, at: tcp_close+0x1d/0x110 [ 1078.604596][ T7877] [ 1078.604596][ T7877] stack backtrace: [ 1078.610500][ T7877] CPU: 1 UID: 0 PID: 7877 Comm: syz.4.9553 Not tainted syzkaller #0 PREEMPT(full) [ 1078.610524][ T7877] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1078.610537][ T7877] Call Trace: [ 1078.610544][ T7877] [ 1078.610553][ T7877] dump_stack_lvl+0xe8/0x150 [ 1078.610584][ T7877] print_circular_bug+0x2e1/0x300 [ 1078.610618][ T7877] check_noncircular+0x12e/0x150 [ 1078.610651][ T7877] __lock_acquire+0x15a5/0x2cf0 [ 1078.610679][ T7877] ? do_syscall_64+0x14d/0xf80 [ 1078.610701][ T7877] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1078.610732][ T7877] lock_acquire+0xf0/0x2e0 [ 1078.610757][ T7877] ? kmem_cache_alloc_node_noprof+0x4a/0x690 [ 1078.610783][ T7877] fs_reclaim_acquire+0x71/0x100 [ 1078.610801][ T7877] ? kmem_cache_alloc_node_noprof+0x4a/0x690 [ 1078.610816][ T7877] kmem_cache_alloc_node_noprof+0x4a/0x690 [ 1078.610832][ T7877] ? __alloc_skb+0x27d/0x7d0 [ 1078.610846][ T7877] ? __alloc_skb+0x186/0x7d0 [ 1078.610860][ T7877] __alloc_skb+0x27d/0x7d0 [ 1078.610874][ T7877] ? skb_attempt_defer_free+0x508/0x760 [ 1078.610891][ T7877] tcp_send_active_reset+0x8a/0x5d0 [ 1078.610910][ T7877] tcp_disconnect+0x171/0x1fa0 [ 1078.610929][ T7877] ? __sk_mem_reduce_allocated+0x270/0x3f0 [ 1078.610950][ T7877] __tcp_close+0x679/0xfe0 [ 1078.610973][ T7877] tcp_close+0x28/0x110 [ 1078.610992][ T7877] inet_release+0x143/0x190 [ 1078.611009][ T7877] sock_release+0x85/0x150 [ 1078.611029][ T7877] smc_clcsock_release+0xc9/0xf0 [ 1078.611048][ T7877] __smc_release+0x66b/0x7e0 [ 1078.611077][ T7877] smc_release+0x2ce/0x560 [ 1078.611101][ T7877] sock_close+0xc3/0x240 [ 1078.611120][ T7877] ? __pfx_sock_close+0x10/0x10 [ 1078.611139][ T7877] __fput+0x44f/0xa70 [ 1078.611164][ T7877] fput_close_sync+0x11f/0x240 [ 1078.611206][ T7877] ? __pfx_fput_close_sync+0x10/0x10 [ 1078.611233][ T7877] __x64_sys_close+0x7e/0x110 [ 1078.611256][ T7877] do_syscall_64+0x14d/0xf80 [ 1078.611273][ T7877] ? trace_irq_disable+0x3b/0x150 [ 1078.611296][ T7877] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1078.611312][ T7877] ? clear_bhb_loop+0x40/0x90 [ 1078.611329][ T7877] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1078.611345][ T7877] RIP: 0033:0x7f13b2d9c799 [ 1078.611360][ T7877] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1078.611375][ T7877] RSP: 002b:00007f13b3cde028 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 1078.611391][ T7877] RAX: ffffffffffffffda RBX: 00007f13b3015fa0 RCX: 00007f13b2d9c799 [ 1078.611403][ T7877] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 1078.611412][ T7877] RBP: 00007f13b2e32c99 R08: 0000000000000000 R09: 0000000000000000 [ 1078.611422][ T7877] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1078.611444][ T7877] R13: 00007f13b3016038 R14: 00007f13b3015fa0 R15: 00007ffff84c6f88 [ 1078.611462][ T7877]