last executing test programs: 7m42.747728682s ago: executing program 1 (id=3970): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x2000a804) 7m42.407020544s ago: executing program 1 (id=3973): r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f00000000c0)="1c0000001ea65f0214fffffffffffff8073f00001d00000000000000", 0x1c) 7m42.077130789s ago: executing program 1 (id=3976): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x121800, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) (async) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6364, 0x200005, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6364, 0x200005, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0x10}, {0x1, 0xb}, {0xffff, 0x8}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x4, 0x10, 0x6, 0x8, 0x4fbee}, 0x13, 0x1, 0x3, 0x7, 0x10, 0x4, 0x1b, 0x18, 0x5, 0x402, {0x6, 0x8001, 0xfffffffc, 0x0, 0xffffffff, 0x5}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x240048e4}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x10, 0x4, &(0x7f0000000300)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x49}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x94) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x10, 0x4, &(0x7f0000000300)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x49}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x94) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r4, &(0x7f0000000280)="05", 0x5dc, 0x4009, &(0x7f0000000140)={0x11, 0x86dd, r5, 0x1, 0x3, 0x6, @remote}, 0x14) 7m40.972844092s ago: executing program 1 (id=3984): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1a, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xeb, '\x00', 0x0, @tracing=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r1, 0x0, 0x0}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) (async) setsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f0000000b80)=0x7, 0x4) r2 = socket$packet(0x11, 0x2, 0x300) getsockopt(r2, 0x1, 0x2, &(0x7f00000003c0)=""/165, &(0x7f0000000480)=0xa5) 7m40.441604527s ago: executing program 1 (id=3986): socket$inet(0x2, 0x2, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0xd) close(r0) sendmsg$NL802154_CMD_NEW_SEC_DEV(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) writev(0xffffffffffffffff, &(0x7f0000001700)=[{0x0}, {&(0x7f00000003c0)}, {&(0x7f0000000580)="fd3e12c99c67812594d91428f6fe19bbfd881437141ff8f57f80e9550dbd979ad75d4156922b082c71329297bcd8c1e79f47e8c21699541f8d3f53c2bad938b7e13d1f51fc6984966c62ab02ca3b1d37944c38b8d5fd8b0c2a72c1032a325e7d503009181812a1fa81a865fa76c4f3d6753870419b248caa043f68233935e22a77ac6f3846da64f394e6fbc5d22bdc92ce35592c50af377a8e0e0fd1e3cda09fe388c5c382f51d8a2c7466b2b30bbf71899b77290553f7ee55f9d443f0fa29b5428ddfaef36bd0d020f89bb9c5541595130a384987ddc6fd8b2304b87c08f73b69", 0xe1}, {&(0x7f0000000700)="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", 0x8e8}], 0x4) r1 = socket(0x10, 0x80002, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wpan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wpan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(r2, &(0x7f0000000440)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x48010000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x6c, r3, 0x100, 0x70bd26, 0x25dfdbfd, {}, [@NL802154_ATTR_MIN_BE={0x5, 0x11, 0x7}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_MAX_BE={0x5, 0x10, 0xf7}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_MAX_BE={0x5, 0x10, 0xf8}, @NL802154_ATTR_MIN_BE={0x5, 0x11, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_MAX_BE={0x5, 0x10, 0x1}]}, 0x6c}, 0x1, 0x0, 0x0, 0x10091}, 0x80) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="380000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000000000420040008002900787d040008001b00"], 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x884) sendmmsg$alg(r1, &(0x7f00000000c0), 0x492492492492627, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0003000000000000140012800c0001006d6163766c616e000400028008002500", @ANYBLOB], 0x3c}}, 0x884) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000fcffffff00000000000000008500000036000000180100006420002500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000001800000850000000600000095"], &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r8, 0x5, 0xb90, 0x0, &(0x7f0000000140)="259a00f271a76d1708fff74588a8", 0x0, 0xd11, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r9 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x14, r9, 0x1}, 0x14}}, 0x0) sendmsg$NLBL_MGMT_C_REMOVE(r2, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x24, r9, 0x400, 0x70bd25, 0x25dfdbff, {}, [@NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010101}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @remote}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, 0x0, 0x1c) 7m39.181098723s ago: executing program 1 (id=3992): unshare(0x64000600) sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)={0xdc, 0x0, 0xe8e0cd814822780d, 0x70bd2d, 0x25dfdbfc, {}, [@TIPC_NLA_SOCK={0x68, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x54, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x10000}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x20000000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x10}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfffffffa}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xffffffff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x80}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7ff}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_NODE={0x54, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x3}, @TIPC_NLA_NODE_KEY={0x47, 0x4, {'gcm(aes)\x00', 0x1f, "3792ad238cb4c9821c0ca1f39d801c0772f34511daf8e4fb7b14a0a2d6fcfa"}}]}, @TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8}]}]}, 0xdc}, 0x1, 0x0, 0x0, 0x40}, 0x8840) r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000240)="aefc00001a0025f01d85bc04fef7681d020b49ff708800008003280008021000ac0a1410bc71176a36ede498534108e58342fa94a235a2a441f9", 0xfcae) 7m23.81930278s ago: executing program 32 (id=3992): unshare(0x64000600) sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)={0xdc, 0x0, 0xe8e0cd814822780d, 0x70bd2d, 0x25dfdbfc, {}, [@TIPC_NLA_SOCK={0x68, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x54, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x10000}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x20000000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8000}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x10}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xfffffffa}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xffffffff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x80}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7ff}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_NODE={0x54, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x3}, @TIPC_NLA_NODE_KEY={0x47, 0x4, {'gcm(aes)\x00', 0x1f, "3792ad238cb4c9821c0ca1f39d801c0772f34511daf8e4fb7b14a0a2d6fcfa"}}]}, @TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8}]}]}, 0xdc}, 0x1, 0x0, 0x0, 0x40}, 0x8840) r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000240)="aefc00001a0025f01d85bc04fef7681d020b49ff708800008003280008021000ac0a1410bc71176a36ede498534108e58342fa94a235a2a441f9", 0xfcae) 2m25.665266329s ago: executing program 4 (id=5736): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000000)={0x0, 0x1000, 0x6, 0x18}, &(0x7f0000000040)=0x10) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000080)={r1, 0x3}, &(0x7f00000000c0)=0x8) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_REMOVE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x3c, r3, 0x300, 0x70bd2c, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xf}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000040}, 0x20040000) r4 = socket$inet6_sctp(0xa, 0x0, 0x84) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000240)="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") r5 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r5, 0x84, 0x4, &(0x7f0000000340), &(0x7f0000000380)=0x4) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r5, 0x84, 0x72, &(0x7f00000003c0)={r2, 0x3f, 0x10}, 0xc) r6 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000400), 0x2, 0x0) write$cgroup_netprio_ifpriomap(r6, &(0x7f0000000440)={'veth1_to_team', 0x32, 0x36}, 0x10) ioctl$XFS_IOC_GETBMAPX(r6, 0xc0205838, &(0x7f0000000480)={0x1e1, 0x100, 0x1, 0xfff, 0x9, 0x4, 0x4}) r7 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r7, 0x89e0, &(0x7f00000004c0)={r0, r5}) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r5, 0x84, 0x19, &(0x7f0000000500)={r2, 0x5}, 0x8) write$cgroup_netprio_ifpriomap(r6, &(0x7f0000000540)={'vcan0', 0x32, 0x35}, 0x8) getsockopt$XDP_STATISTICS(0xffffffffffffffff, 0x11b, 0x7, &(0x7f0000000580), &(0x7f00000005c0)=0x30) ioctl$F2FS_IOC_MOVE_RANGE(r4, 0xc020f509, &(0x7f0000000600)={r0, 0x87, 0x0, 0x7f}) r9 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$SEG6_CMD_DUMPHMAC(r8, &(0x7f00000007c0)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000780)={&(0x7f00000006c0)={0x84, r9, 0x200, 0x70bd29, 0x25dfdbfe, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x2}, @SEG6_ATTR_SECRETLEN={0x5}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x4}, @SEG6_ATTR_DST={0x14, 0x1, @mcast1}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x6}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, '\x00', 0x1f}}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x76}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0xff}, @SEG6_ATTR_SECRET={0x10, 0x4, [0x6bb0018e, 0x80000000, 0xfffffffb]}, @SEG6_ATTR_ALGID={0x5, 0x6, 0xfe}]}, 0x84}, 0x1, 0x0, 0x0, 0x40801}, 0x842) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r5, 0x84, 0x75, &(0x7f0000000800)={r2}, 0x8) write$cgroup_netprio_ifpriomap(r6, &(0x7f0000000840)={'veth1_to_hsr', 0x32, 0x33}, 0xf) ioctl$sock_SIOCGPGRP(r4, 0x8904, &(0x7f0000000880)) ioctl$XFS_IOC_FSGETXATTRA(r4, 0x801c582d, &(0x7f00000008c0)) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000940), r8) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r8, &(0x7f0000000a40)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x5c, r10, 0x800, 0x70bd2c, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x8, 0x34}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40040}, 0x8000040) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r8, 0x89f0, &(0x7f0000000c00)={'gre0\x00', &(0x7f0000000ac0)={'gretap0\x00', 0x0, 0x7, 0x10, 0x90, 0x97a5, {{0x3b, 0x4, 0x2, 0x3d, 0xec, 0x67, 0x0, 0x5, 0x4, 0x0, @broadcast, @rand_addr=0x64010101, {[@generic={0x44, 0x9, "12e4f5b3f3f531"}, @timestamp={0x44, 0x18, 0x54, 0x0, 0x0, [0x0, 0x7, 0x80000000, 0xc, 0x10001]}, @cipso={0x86, 0x17, 0x2, [{0x6, 0xf, "b0888b071442b47be2f3a084ab"}, {0x0, 0x2}]}, @timestamp_addr={0x44, 0x34, 0x44, 0x1, 0x2, [{@dev={0xac, 0x14, 0x14, 0x3f}, 0x2}, {@empty, 0x6}, {@local, 0xf435}, {@dev={0xac, 0x14, 0x14, 0x29}}, {@broadcast, 0x7fffffff}, {@loopback, 0xf}]}, @generic={0x7, 0xf, "a395743e45a1fd5e63dad8f889"}, @generic={0x89, 0xa, "7324a677e44d74fd"}, @lsrr={0x83, 0xb, 0xff, [@private=0xa010101, @private=0xa010100]}, @timestamp_addr={0x44, 0x44, 0xb9, 0x1, 0x9, [{@rand_addr=0x64010100, 0x1000}, {@local, 0x10001}, {@rand_addr=0x64010100, 0x8}, {@dev={0xac, 0x14, 0x14, 0x36}, 0xffffff3f}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x5}, {@loopback, 0x9}, {@initdev={0xac, 0x1e, 0x1, 0x0}}, {@dev={0xac, 0x14, 0x14, 0xc}, 0xfff}]}, @end]}}}}}) sendmsg$nl_route(r8, &(0x7f0000000cc0)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c40)=@setlink={0x30, 0x13, 0x8, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, r11, 0x80, 0x4}, [@IFLA_NET_NS_FD={0x8, 0x1c, r8}, @IFLA_TARGET_NETNSID={0x8, 0x2e, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0x44}, 0x400c0) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r8, 0x8008f513, &(0x7f0000000d00)) 2m25.037898398s ago: executing program 4 (id=5739): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @multicast1}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f4, &(0x7f00000001c0)={'syztnl0\x00', 0x0}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'nicvf0\x00', 0x100}) (async) sendmsg$nl_xfrm(r0, &(0x7f0000000740)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000700)={&(0x7f0000000480)=@getsa={0x25c, 0x12, 0x8, 0x70bd2a, 0x25dfdbfc, {@in6=@loopback, 0x4d6, 0xa, 0xff}, [@XFRMA_IF_ID={0x8, 0x1f, 0x3}, @algo_aead={0xc6, 0x12, {{'seqiv(ccm_base(ctr(des3_ede),sha256-ssse3))\x00'}, 0x3d0, 0x200, "efa8ecd410a50434bbec1c6f1d78ccc793b06e0cdf2b1588db07799ac41bde2407f5e09082f078715dd4f70a739ee32b44707ee2a0d160c4232c39f4b21b4d5b50700d5af2c5d71271808404400778d8e534c30692496902eee60da792f0c8c5d4fe27a344eee2bd8329d1e07eee4eaed6e178f84412c65dc544"}}, @algo_crypt={0x113, 0x2, {{'pcbc(fcrypt-generic)\x00'}, 0x658, "67890b89ceef9223fc2337232bb2de84af10bd0c4ed55d7c6d58dcf80d419fee65ca68b078eacb2a7cbace44e6a3135aa4654ff8416da0e90d0b23650431f42505c289f2fa75a851c8d4f3fb07a6a1c5f5c69c313df67e9928354d1a978158d7d5441cb556c4f96051902f88f12d0dc66d6ebc5f64eaa3db020f6528e612322341ffd899ce1899fc5b5b2b5308876c1e3b29c780fd9434238d7aa7229f7648e8201a593fe296f4c435b9de0e582cfc27e0707721214cf4318a11aefcc5f232b63bd3bece0694d0a8efe7df"}}, @algo_comp={0x4e, 0x3, {{'deflate\x00'}, 0x30, "044a3cb91898"}}]}, 0x25c}, 0x1, 0x0, 0x0, 0x34008040}, 0x20000040) 2m24.463736641s ago: executing program 4 (id=5742): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r1, 0x0) connect$unix(r0, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = socket$unix(0x1, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x13}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) connect$unix(r2, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r1, 0x802) r3 = socket$netlink(0x10, 0x3, 0x4) write(r3, &(0x7f00000002c0)="29000000140005b7ff00000004eabdeb0101b6ff02159f7e5520756b1933b49db96ad24d12595fbea5", 0x29) socket(0x14, 0xa, 0x3ff) 2m24.029031807s ago: executing program 4 (id=5747): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x4100, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x401, 0x800000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_PRIMARY={0x8}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 2m23.027903481s ago: executing program 4 (id=5756): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="580100001000130426bd700040000000ac1414bb000000000000000000000000ac1e01010000000000000000000000004e2000074e1f00000a00202067000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac141422000000000000000000000000000004d43200000000000000000000000000ffffe000000100080000000000007d0100000000000000000000000000000400000000004000ffffffffffffffff06000000000000007f0000000000000002000000000000000000000000000000fd2100000000000004000000000000000400000000000000f6004000040000000800000000000000ff340000020001be330000000000000067001200726663343330392863636d2861657329290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d800000040"], 0x158}, 0x1, 0x0, 0x0, 0x4000}, 0x4000804) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x84, r2, 0x1, 0x0, 0xffffffff, {{}, {@void, @void}}, [@NL80211_ATTR_TX_RATES={0x70, 0x10d, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x6c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x884, 0xe, 0xfffd, 0x0, 0x4, 0x9, 0xcd, 0x8000]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x5, 0x4, 0x0, 0x2, 0x80, 0x80, 0x7]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x1, 0xf8d, 0xf, 0x8, 0xe21, 0x0, 0x1, 0x1d72]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x91, 0x9, 0xe95b, 0x0, 0xe6a, 0x1ff, 0x800, 0x101]}}, @NL80211_TXRATE_LEGACY={0x18, 0x1, [0x36, 0x1b, 0x6, 0x6c, 0x18, 0x36, 0xc, 0x1b, 0x24, 0x5, 0x24, 0x18, 0x30, 0x1b, 0x18, 0x6c, 0x6c, 0xc, 0x31, 0x60]}]}]}]}, 0x84}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[], 0x18}}, 0x20004000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r5, 0x114, 0xa, 0x0, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) recvmmsg(r0, &(0x7f0000000b00)=[{{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0x9}], 0x2, 0x20, 0x0) 2m21.909725568s ago: executing program 4 (id=5763): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@dellink={0x20, 0x11, 0x101, 0x0, 0x4000000, {0x0, 0x0, 0x406, r2, 0x42013, 0x2020e}}, 0x20}, 0x1, 0x0, 0x0, 0x20000886}, 0x0) 2m6.754854377s ago: executing program 33 (id=5763): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@dellink={0x20, 0x11, 0x101, 0x0, 0x4000000, {0x0, 0x0, 0x406, r2, 0x42013, 0x2020e}}, 0x20}, 0x1, 0x0, 0x0, 0x20000886}, 0x0) 48.028587075s ago: executing program 3 (id=6197): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, r0, 0x215eb000) setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0x20, 0x0, 0x0) r1 = socket(0x2a, 0x2, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x6f, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e22, @local}}}, &(0x7f0000000180)=0x9c) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f00000002c0), r3) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000440)={'xfrm0\x00', 0x0}) r7 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r7, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r7, &(0x7f00000000c0)={&(0x7f00000004c0)=@xdp={0x2c, 0x0, r6, 0x18}, 0x80, &(0x7f00000003c0)=[{&(0x7f00000001c0)="27030200dc0f14000e0005000014c10200000001125ce882cbf400930bf4533f00429c65112a093bbf60b85bcb06", 0x2e}], 0x1}, 0x4005) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="c8010000", @ANYRES16=r4, @ANYBLOB="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"], 0x1c8}}, 0x0) bind$packet(r1, &(0x7f0000000100)={0x2a, 0x7, 0x0, 0x1, 0x17, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3d}}, 0x14) r8 = socket(0x1, 0x1, 0x0) r9 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) connect$bt_sco(r8, &(0x7f0000000080)={0x1f, @none}, 0x8) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010026bd7000fbdbdf2503000000100007800c00018008000100", @ANYRES32=r8, @ANYBLOB="080001"], 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x20000844) r11 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x2711, @host}, 0x10) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r10) sendmsg$NBD_CMD_CONNECT(r12, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x20, r13, 0x10, 0x70bd27, 0x25dfdbff, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xff}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x20000001) ioctl$sock_bt_hci(r11, 0x800448d4, &(0x7f0000000000)) 44.225756683s ago: executing program 3 (id=6211): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="4c00000010001fff0d0000000041000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100697036746e6c000014000280050009002900000008000100", @ANYRES32, @ANYBLOB="080004"], 0x4c}}, 0x0) 43.58681345s ago: executing program 3 (id=6214): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000ec0)=[@in6={0xa, 0x4e24, 0xffffffff, @dev={0xfe, 0x80, '\x00', 0x21}, 0x7f}, @in={0x2, 0x4e22, @empty}], 0x2c) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r2) sendmsg$ETHTOOL_MSG_STRSET_GET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000023c0)={0x18, r3, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x2001}, 0x4010000) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$key(0xf, 0x3, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x12, 0x4, 0x4, 0xa4}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r6, &(0x7f0000000080), &(0x7f00000002c0)=@tcp}, 0x20) sendmsg$key(r5, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB="020300030f000000000700000000000005000900e000000001d78771b90bd8a3b4914783c58777003d5b9538a9d03e6e9bfdac5500000000030006000000000002008e34000000000000000000000000020001000000000000000a1600000000030005000000000002"], 0x78}, 0x1, 0x7}, 0x0) ioctl$BTRFS_IOC_SCRUB_CANCEL(r2, 0x941c, 0x0) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_GET(r4, &(0x7f0000000880)={0x0, 0x45, &(0x7f0000000840)={&(0x7f0000000200)=ANY=[@ANYRESOCT=0x0, @ANYRES16=r7, @ANYRES64=r5], 0x20}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYRES16=r1], 0x20}, 0x1, 0x0, 0x0, 0x4048090}, 0xc000) 41.911855906s ago: executing program 3 (id=6221): writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000340)="8a226ff432407a7f5fd09590d734f795e12e57ce9fed3f0300eb63", 0x1b}], 0x2) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x2000a0c0}, 0x6584f2c77c24db5) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0b0000001f00000002040000ff03000001"], 0x48) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b36, &(0x7f0000000000)={'wlan1\x00'}) 41.460302679s ago: executing program 3 (id=6224): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r1 = socket$can_raw(0x1d, 0x3, 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000005480)={'wlan0\x00', 0x0}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r4, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x44, 0x1, 0x2, 0x3, 0x0, 0x0, {0x3, 0x0, 0x5}, [@CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0xf}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x2}, @CTA_EXPECT_MASTER={0x18, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @CTA_EXPECT_FLAGS={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x40081}, 0x20048801) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r2, &(0x7f0000005540)={0x0, 0x0, &(0x7f0000005500)={&(0x7f00000054c0)={0x1c, r0, 0x1, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x84) 41.053359428s ago: executing program 3 (id=6227): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xe, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x8c}, {0x7, 0x0, 0xb, 0x0, 0x0, 0x301}}]}, &(0x7f0000001840)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 29.666958849s ago: executing program 0 (id=6306): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="4c00000010001fff0d0000000065000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100697036746e6c000014000280050009002900000008000100", @ANYRES32, @ANYBLOB="080004"], 0x4c}}, 0x0) 28.900333635s ago: executing program 0 (id=6308): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xe, 0x3, &(0x7f0000000000)=@framed={{0x72, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0x9a}}, &(0x7f0000000040)='syzkaller\x00'}, 0x90) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) (async) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x5}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r3, {0xa, 0x9}, {}, {0xc, 0x8}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_CLASSID={0x8, 0x1, {0x1, 0xd}}, @TCA_FLOWER_KEY_CT_STATE={0x6, 0x5b, 0x4}]}}, @TCA_RATE={0x6, 0x5, {0x4, 0xf}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x60000080}, 0x20000000) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0xac, 0x10, 0x403, 0xfffffffc, 0x3f, {0x0, 0x0, 0x0, 0x0, 0x88adfda5}, [@IFLA_LINKINFO={0x7c, 0x12, 0x0, 0x1, @ip6vti={{0xb}, {0x6c, 0x2, 0x0, 0x1, [@IFLA_VTI_LOCAL={0x14, 0x4, @empty}, @IFLA_VTI_LOCAL={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}, @IFLA_VTI_REMOTE={0x14, 0x5, @private1}, @vti_common_policy=[@IFLA_VTI_OKEY={0x8, 0x3, 0x5}, @IFLA_VTI_FWMARK={0x8, 0x6, 0x8}, @IFLA_VTI_LINK={0x8, 0x1, r3}], @IFLA_VTI_LOCAL={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xc}}]}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8}]}, 0xac}, 0x1, 0x300000000000000, 0x0, 0x4004}, 0x0) 18.376044983s ago: executing program 0 (id=6314): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x4c, &(0x7f0000000000)={0x0, 0x0}, 0x10) (async) unshare(0x2020000) (async) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x22d00, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/cgroup\x00') setsockopt$inet_int(r0, 0x0, 0x7, &(0x7f0000000000)=0x714, 0x4) (async) r2 = socket(0x10, 0x3, 0x2) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts-aes-aesni\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) (async) r5 = accept4$alg(r4, 0x0, 0x0, 0x0) sendmmsg$alg(r5, &(0x7f00000021c0)=[{0x0, 0x0, &(0x7f0000005440)=[{&(0x7f0000000100)="a9", 0x1}, {&(0x7f00000005c0)="55657ce3e8a34ccb7984beafe9f3ad456f68b1dff512d2796c39a377c3ed93f7e372bd7208cd36711f237b907857ae68f3b8868fc956a3e7e318e027fce1f76e082ffdd6c55c0bdd1a7f0e7ccdf667e8be5f4004f4ddc99f3cbf41b268df3e8a54f8135a34b698e12a3403c256adadafe833b7eb76282dba34823f6709540ea891f46613a8c5d04142081c76ddbbf19105eaf2c84e17263f6d86e9bd80b61b2091e2a7d2657db4342d2191d0da0c528859f292fe83b03a0fedb747ec506475ed12b16ec0642ea070aeebc00c551f0367eb7dd87abb4bd1a36e41c02455f845ff", 0xe0}, {&(0x7f0000000740)="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", 0x71f}], 0x3, 0x0, 0x0, 0x880}], 0x1, 0x80001) (async) splice(r5, 0x0, r3, 0x0, 0x800, 0x0) (async) bind$netlink(r2, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) r6 = socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$NFNL_MSG_COMPAT_GET(r2, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x68, 0x0, 0xb, 0x801, 0x0, 0x0, {0xa, 0x0, 0x2}, [@NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x5}, @NFTA_COMPAT_NAME={0xb, 0x1, 'ip6gre\x00'}, @NFTA_COMPAT_NAME={0xc, 0x1, 'macsec0\x00'}, @NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x7}, @NFTA_COMPAT_NAME={0x5, 0x1, '\x00'}, @NFTA_COMPAT_NAME={0x1b, 0x1, ']-!\'\\*!*%[*-}]%:[#\n-{$\x00'}]}, 0x68}, 0x1, 0x0, 0x0, 0x1}, 0x2010) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=@ipv6_newroute={0x1c, 0x18, 0xffffffffffffffff, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0xff, 0x1, 0xfd, 0x9}}, 0x1c}}, 0x0) getsockopt$XDP_MMAP_OFFSETS(r2, 0x11b, 0x1, &(0x7f0000000340), &(0x7f00000003c0)=0x80) (async) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="5c0000001000ffff28bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="69fb0100671205003c0012800b00010069703667726500002c00028014000600fc02000000000000000000000000000114000700000000000000ffac09e2c825298c440d"], 0x5c}, 0x1, 0x0, 0x0, 0x20008801}, 0x20040040) (async) syz_emit_ethernet(0x73, &(0x7f0000000400)={@broadcast, @remote, @val={@val={0x88a8, 0x3, 0x0, 0x3}, {0x8100, 0x7, 0x0, 0x3}}, {@ipv4={0x800, @igmp={{0x6, 0x4, 0x2, 0x32, 0x5d, 0x66, 0x0, 0x6, 0x2, 0x0, @private=0xa010100, @private=0xa010100, {[@noop]}}, {0x16, 0x0, 0x0, @dev={0xac, 0x14, 0x14, 0x42}, "417822a9f241645c7e0bf15c9ce210e1e88f854aa44e5046ee01435f03b5a4b51e77f67c3c69e41f3b296cf18b438ab37d7627589c32db2c86a5252354"}}}}}, 0x0) (async, rerun: 64) r8 = socket(0x1d, 0x2, 0x6) (rerun: 64) bind$unix(r8, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e20}, 0x6e) (async, rerun: 64) r9 = socket$tipc(0x1e, 0x2, 0x0) (rerun: 64) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r9, 0x8983, &(0x7f0000000040)={0x7, 'macsec0\x00', {}, 0xcf}) (async, rerun: 64) readv(r0, &(0x7f00000007c0)=[{&(0x7f0000000080)=""/92, 0x5c}], 0x1) (rerun: 64) 17.763922184s ago: executing program 0 (id=6318): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) recvmmsg(r0, &(0x7f0000001740)=[{{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000400)=""/4096, 0x10c4}], 0x1}}], 0x4000210, 0x2, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[], 0xc4}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 14.20084207s ago: executing program 6 (id=6332): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001f"], 0x3}}, 0x0) r1 = epoll_create1(0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40088a01, &(0x7f0000000000)) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r0, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x4}) ioctl$sock_netdev_private(r0, 0x89f1, &(0x7f0000000000)) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r3, 0x84, 0x80, &(0x7f0000000000)='\x00\x00\x00\x00\t\x00\x00\x00', 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[], 0x0, 0x52}, 0x28) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r3, 0x84, 0x5, &(0x7f00000001c0)={r5, @in6={{0xa, 0x4e24, 0x5, @rand_addr=' \x01\x00', 0x82e}}}, 0x84) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="ec0100002d0020002cbd70000000000008000000", @ANYRES32=r2, @ANYBLOB="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", @ANYRES32=0xee00, @ANYBLOB='\x00'], 0x1ec}], 0x1}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000680)=@delchain={0xf4, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0xa}}, [@TCA_RATE={0x6}, @filter_kind_options=@f_flow={{0x9}, {0x8c, 0x2, [@TCA_FLOW_ACT={0x78, 0x9, 0x0, 0x1, [@m_tunnel_key={0x74, 0x0, 0x0, 0x0, {{0xf}, {0x2c, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @mcast2}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, {0x1c, 0x6, "eb25946ddf95959b7f8d829c69274ff122e320ac9e1cd272"}, {0xc}, {0xc, 0x8, {0x3}}}}]}, @TCA_FLOW_XOR={0x8}, @TCA_FLOW_RSHIFT={0x8}]}}, @filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_FROM={0x8}]}}, @filter_kind_options=@f_route={{0xa}, {0x4}}, @TCA_RATE={0x6}]}, 0xf4}}, 0x0) setsockopt$netlink_NETLINK_CAP_ACK(r2, 0x10e, 0xa, &(0x7f0000000040)=0x3, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x10, 0x4, &(0x7f0000001300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, [@call={0x85, 0x0, 0x0, 0x9e}]}, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x13, '\x00', 0x0, 0xe}, 0x94) 13.636219216s ago: executing program 6 (id=6334): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) setsockopt$bt_rfcomm_RFCOMM_LM(r1, 0x12, 0x3, &(0x7f0000004ac0)=0x2c, 0x4) getsockopt$bt_rfcomm_RFCOMM_LM(r1, 0x12, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a5800000006b00104000000005400010073797a31000000002c000480280001801c0002800500030001000b000800024000000009080001750d0d2540000000090900020073797a32000000001400000011000100"/136], 0x80}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) syz_emit_ethernet(0x7e, &(0x7f00000002c0)=ANY=[@ANYBLOB="e33110495bfd00000000000086dd60cb653e00483afffe800000000000000000000000000040ff020000000000000000000000000001"], 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000000)=[@window={0x3, 0x1, 0xbe3d}, @window={0x3, 0xff, 0x1000}, @timestamp, @window={0x3, 0x4000, 0x8}, @timestamp, @sack_perm, @timestamp, @window={0x3, 0x8, 0x4}, @mss={0x2, 0x100}, @window={0x3, 0x4, 0x4}], 0xa) socket$l2tp(0x2, 0x2, 0x73) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0xe, 0x4, &(0x7f00000000c0)=@framed={{0x18, 0x2}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x61}]}, &(0x7f0000000400)='syzkaller\x00'}, 0x80) 13.286065083s ago: executing program 6 (id=6337): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0xff05, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x4a00}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_TTL={0x5, 0x8, 0x8}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x44}}, 0x0) (async) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000680)={{{@in6=@private2, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in=@broadcast}}, &(0x7f0000000240)=0xe8) (async) r2 = gettid() (async) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000001c40)={{{@in6=@private2, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={""/10, ""/2, @private}}}}, &(0x7f0000001d40)=0xe8) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r5 = getpid() bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r4, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x1, 0x0, r5}}, 0x40) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0xc) sendmsg$netlink(r6, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000000c0)={0x24, 0x2c, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid=r8}, @nested={0xb, 0x0, 0x0, 0x1, [@generic="976b64087c6030"]}]}, 0x24}], 0x1}, 0x84) (async) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001d80)={0x0, 0x0, 0x0}, &(0x7f0000001dc0)=0xc) (async) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r11 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r11, 0x107, 0x12, &(0x7f00000000c0)={0x3, 0x1000}, 0x4) (async) setsockopt$packet_rx_ring(r11, 0x107, 0x5, &(0x7f0000003180)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf84, 0x3}, 0x1c) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000001e00)=0x0) (async) r13 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_cred(r13, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) sendmsg$nl_route(r13, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=@can_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@CGW_DST_IF={0x8}, @CGW_SRC_IF={0x8}, @CGW_MOD_UID={0x8, 0xe, r14}, @CGW_MOD_SET={0x15, 0x4, {{{0x3, 0x1, 0x1, 0x1}, 0xa, 0x1, 0x0, 0x0, "0325175362eb4cf2"}, 0x4}}]}, 0x44}}, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r15, 0x1, 0x11, &(0x7f0000000380)={0x0, 0x0, 0x0}, &(0x7f00000003c0)=0xc) r19 = syz_open_procfs$namespace(r16, &(0x7f0000001780)='ns/ipc\x00') (async) r20 = getpid() sendmmsg$unix(r15, &(0x7f0000001b00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@cred={{0x1c, 0x1, 0x2, {r16, 0x0, 0xee00}}}], 0x20, 0x4044014}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001bc0)=[@cred={{0x1c, 0x1, 0x2, {r16, 0x0, r18}}}, @cred={{0x1c, 0x1, 0x2, {r20, r17}}}, @rights={{0x18, 0x1, 0x1, [r19, 0xffffffffffffffff]}}], 0x58, 0x800}}], 0x2, 0x0) (async) r21 = getpid() getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001e40)={0x0, 0x0, 0x0}, &(0x7f0000001e80)=0xc) sendmsg$netlink(r0, &(0x7f0000001fc0)={&(0x7f0000000000)=@kern={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001c00)=[{&(0x7f0000000040)={0x11c, 0x3c, 0x4, 0x70bd2a, 0x25dfdbfc, "", [@generic="6cc946d5c681057c342cc3d82edb61946c55a48d04c97c09276fc46e86cecc942fa4929b563173c30570f5ebda033c5c4337ac047c318cb33499b2a54bc3af284b8da0fff74bc84a0fd069e6845e2361a463463903a0d78451e31dcb5933fe48019b735d47214834c05d2080d4", @typed={0x8, 0x13a, 0x0, 0x0, @pid}, @generic="1d55e67853619fea1326f5ed894a673521efd07c2389e40cb43c5010d778ac11cbaf920866803a4979864248b34ea4982664daca3bf81b81e95e0dad7c51b7414f45cd035642e1fc29b005665817945c5523f95ea8029124e778001b72727ddeaa6b57db8ab21f21f4e52df9676df979693acf3349bbb2527ad0ce35489a9317cb27ba5a6f83095f7ea85b8f2988", @typed={0x8, 0xc9, 0x0, 0x0, @pid}]}, 0x11c}, {&(0x7f0000000180)={0x10, 0x38, 0x300, 0x70bd2c, 0x25dfdbfe}, 0x10}, {&(0x7f00000031c0)=ANY=[@ANYBLOB="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"], 0x1324}, {&(0x7f0000001a00)={0x1f0, 0x17, 0x200, 0x70bd25, 0x25dfdbff, "", [@typed={0x8, 0x8a, 0x0, 0x0, @ipv4=@multicast2}, @nested={0x8, 0x168, 0x0, 0x1, [@typed={0x4, 0x12b}]}, @nested={0x14d, 0xa4, 0x0, 0x1, [@generic="43323c6d895356efe4e879563480adb7ec9f663cfba811c497a57b7268fcbe003805ca2505af9479e997e67c8af259d139bf5e460bd6a5fe0e1c", @generic="c66a2192859f5a19db01922021994d27092df0", @nested={0x4, 0x11f}, @typed={0x8, 0x101, 0x0, 0x0, @ipv4=@private=0xa010101}, @nested={0x4, 0x115}, @generic="11439515619b03226f33572a23c5b53805991b9508b36a29c6b8e2e9028955326db707612616f82381d110d7abfa69f70da09c487c8ab753e50583054a0ebaa3d6a8a8e51fd60e9ec1ca37af6baf120613561af45de3908c7e255fe9a35c68784e4c0df99ba9837f0129fee8366a156739b2a17a6ae30d3eefc44df5dc0f3c54d18cba5aa8d549e99a9dd0a22cf3610f83e8b754b3d65cbb145100d7f7f7f5dbf1ff00b387672a09b9abb4594cd54becb6980df39d278c3e73f6ff206f9b1b6d92949aa738d60d32d32c45954a44a1a574f7828b2c76f22e21ebfa1af869be56514be1f57b1e5129", @nested={0x4, 0xc5}]}, @typed={0x4, 0x68}, @typed={0x8, 0x123, 0x0, 0x0, @uid=r1}, @generic="b73bfb374266eaa93d86698e1a7e137113f46e50f35cd06330f90d39abe2b698d19e1c38595e1c", @generic="917a137725baf236bd6ecaf5ff72372d1ac9aa1c368e8e7a88e0eb71fde394161e6011251c841be28855f857035b0a5f4fa6bbcb68ad508d57c072f4b8b3e6a7a5180e4927588d816a4cf2"]}, 0x1f0}], 0x4, &(0x7f0000001ec0)=[@rights={{0x1c, 0x1, 0x1, [r0, r0, r0]}}, @rights={{0x18, 0x1, 0x1, [r0, r0]}}, @cred={{0x1c, 0x1, 0x2, {r2, r3, 0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {r5, r8, r9}}}, @rights={{0x10}}, @rights={{0x28, 0x1, 0x1, [r10, r0, r0, r0, r0, r11]}}, @cred={{0x1c, 0x1, 0x2, {r12, r14, r18}}}, @cred={{0x1c, 0x1, 0x2, {r21, 0xee00, r22}}}], 0xf0, 0x4000040}, 0x10) 12.822783349s ago: executing program 6 (id=6339): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x6) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4001, 0xfffffffe, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3d}, 0x1c) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r2, 0x0, 0x0) sendmsg$inet(r2, 0x0, 0x2000c810) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000003580)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x8502}}, 0x20}}, 0x8000084) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f00000000c0)={'syztnl2\x00', &(0x7f0000000040)={'ip6gre0\x00', r4, 0x4, 0x1, 0x6, 0x9, 0x21, @mcast2, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x700, 0x20, 0x3, 0x3}}) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) unshare(0x22020600) writev(r1, &(0x7f0000001540)=[{&(0x7f0000000340)="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", 0x3a4}], 0x1) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r6, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r6, 0x6, 0x15, 0x0, &(0x7f0000000180)) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r7) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000280)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER_CANCEL(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x24, r8, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x24}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r9}]}, 0x24}, 0x1, 0x0, 0x0, 0x45}, 0x20000084) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) 10.520060924s ago: executing program 2 (id=6346): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000080)=@ipv4_newroute={0x2c, 0x1a, 0x1, 0x70bd2e, 0x25dfdbfb, {0xa, 0x80, 0x80}, [@RTA_SPORT={0x6, 0x1c, 0x4e21}, @RTA_IP_PROTO={0x5, 0x1b, 0x11}]}, 0x2c}}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000000980)={r2, 0x9}, &(0x7f00000009c0)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000000c0)={r2, @in={{0x2, 0x4e23, @empty}}, 0x0, 0x2, 0x40000002, 0x0, 0xa17433da3c5d69a5, 0x2, 0x81}, 0x9c) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=ANY=[@ANYBLOB="0801000016000100000000000000000064010100000000000000000000000000000000000000000000000000000000010000000000030000000080a000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe80000000000000000000000000002c000004d633000000fc0200000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000ffffffffffffffffedffffffffffffff03000000000000000000000000000000000000000000000000000000000000000200000000000000fefffffffffffbff0000000000000000960700002dbd70000000000000000002be0000000000000000000000b1a001000800d8"], 0x108}, 0x1, 0x0, 0x0, 0x40000}, 0x10) 10.195734164s ago: executing program 5 (id=6348): r0 = socket$inet6(0xa, 0x1, 0x0) sendmsg$DEVLINK_CMD_SB_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x8000) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000002300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="5800000002060102000000000000000000000000090002"], 0x58}, 0x1, 0x0, 0x0, 0x20044000}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000200)=ANY=[@ANYBLOB="2400000047000701feffffffffffffff01"], 0x24}, 0x1, 0x0, 0x0, 0x4048011}, 0x8080) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@multicast1, @in=@empty, 0x1, 0x0, 0x0, 0x0, 0x2, 0x20, 0x20}, {0x0, 0x0, 0x0, 0x0, 0x6}}, {{@in6=@loopback, 0x0, 0x6c}, 0x0, @in=@multicast1}}, 0xe8) 10.032806943s ago: executing program 2 (id=6349): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x48005) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x2c, r2, 0x10, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x4, 0x5f}}}}, [@NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000c0}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'bridge0\x00'}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'veth0\x00', 0x0}) r5 = socket$alg(0x26, 0x5, 0x0) accept$alg(r5, 0x0, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=ANY=[@ANYBLOB="2c00000070000504010000000000000007000000", @ANYRES32=r4, @ANYBLOB="140001800800010000000100050003"], 0x2c}}, 0x0) 9.634274918s ago: executing program 0 (id=6350): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x4, 0xfffffffd, {0x0, 0x0, 0x0, r4, {0x4, 0xd}, {0xe}, {0x3, 0xfff1}}}, 0x24}}, 0x40004) 9.620287219s ago: executing program 5 (id=6351): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet6(0xa, 0x2, 0x3a) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWSET={0x78, 0x9, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x3c, 0x9, 0x0, 0x1, @tproxy={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_TPROXY_REG_PORT={0x8, 0x3, 0x1, 0x0, 0xc}, @NFTA_TPROXY_REG_PORT={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_TPROXY_FAMILY={0x5, 0x1, 0x1, 0x0, 0x2}, @NFTA_TPROXY_FAMILY={0x8}, @NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0x1}]}}}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xa0}}, 0x0) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast1={0xff, 0x3}}, 0x1c) write(r1, &(0x7f00000000c0)="cee697c43c118a688f0ca6616334eafb983cf25a0515c2465108d9d7fd2ced8bba12950fe11b2032adf7b39060ed8b21188c69", 0x33) getsockopt$TIPC_IMPORTANCE(r0, 0x10f, 0x7f, &(0x7f0000000040), &(0x7f0000000080)=0x4) close(r0) 9.28024483s ago: executing program 5 (id=6352): r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$IPT_SO_GET_REVISION_MATCH(r0, 0x0, 0x42, &(0x7f00000003c0)={'ah\x00'}, &(0x7f0000000400)=0x1e) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000200)=0x1, 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000001580)=@raw={'raw\x00', 0x9, 0x3, 0x308, 0x0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x238, 0xffffffff, 0xffffffff, 0x238, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@local, @mcast2, [0xff], [0xffffff00, 0x0, 0x0, 0xff], 'veth1_to_batadv\x00', 'tunl0\x00', {0xff}, {0xff}, 0x8, 0xa, 0x0, 0x8}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0xfe1, 0x80, 0xfffffffe, 'snmp_trap\x00', {0x80}}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast2, [0x0, 0x0, 0xffffff00, 0xff], [0xffffffff, 0xffffffff, 0xffffff00], '\x00', 'rose0\x00', {0xff}, {0xff}, 0x6, 0x40, 0x5, 0x47}, 0x0, 0x120, 0x148, 0x0, {}, [@common=@inet=@set3={{0x50}, {{0x0, 0x4}, {0x9, 0x7}, {0x8, 0x5000000000000}, 0x800}}, @inet=@rpfilter={{0x28}, {0x4}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x368) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_GSO_MAX_SIZE={0x8}, @IFLA_GROUP={0x8}]}, 0x44}}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000240)=ANY=[@ANYBLOB="180200000200ffff00000000000000008500000041000000850000000e00000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) getsockopt$EBT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x81, &(0x7f0000000280)={'filter\x00', 0x0, 0x4, 0x59, [0x7, 0x8000, 0xac, 0x8000000000000001, 0x800], 0x1, &(0x7f0000000100)=[{}], &(0x7f0000000140)=""/89}, &(0x7f0000000300)=0x78) 9.126043505s ago: executing program 5 (id=6353): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, 0x0, &(0x7f00002bf000)='GPL\x00', 0x4, 0xb7, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) r2 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000180)={r0, r1}) sendmmsg$inet(r2, &(0x7f00000028c0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000400)="03362a247861461b950daf81800a038f1ee4d89769187dcd3a5f3b23aaab61614df7ed7e9300c2cbd640ee12e7d98ef42c23e9f77543d8561a06ae5dca898dbcf6c4696e3a49a32599699c258a576678488681", 0x53}], 0x1}}], 0x1, 0x40) close(r2) 8.93781246s ago: executing program 5 (id=6354): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket$kcm(0x2, 0xa, 0x2) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0xa, 0x922000000003, 0x11) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd, 0x100000000000000, 0x0, 0x0, 0x98ce}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0xffffbffffffffffe, 0x9, 0x0, 0x0, 0x100000007fffffff}, 0x0, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r4, 0x1000) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000240), r1) 1.100146351s ago: executing program 6 (id=6355): sendmmsg$inet(0xffffffffffffffff, &(0x7f00000017c0), 0x0, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket(0x848000000015, 0x805, 0x0) socket$inet6(0xa, 0x802, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000007540), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f0000007640)={0x0, 0x0, &(0x7f0000007600)={&(0x7f0000007580)={0x14, r2, 0x1, 0x70bd27, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x8080}, 0x40080) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001500)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x100}, 0x0) write(r0, &(0x7f0000000040)="3a03000018002551075c0165ff0ffc02802000030004000500e1000c0400070080000900", 0x33a) r5 = socket$inet(0x2, 0xa, 0x0) setsockopt$inet_mreqn(r5, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r6 = socket$netlink(0x10, 0x3, 0x0) writev(r6, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007ff17e5ffff0800040000000001000000", 0x39}], 0x1) setsockopt$inet_mreqsrc(r5, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000001cc0)="68000000000905040000000000000000020000000900010073797a3000000000140002800600010000020000050002000600000008000500000000002c0004800800010000000001200002800c000100706f6c69637930000800020000000043950003000000001e2a", 0x69}], 0x1}, 0x0) 1.058205543s ago: executing program 2 (id=6356): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="107f959f80f1ea0600"/28], 0x50) socket$nl_xfrm(0x10, 0x3, 0x6) (async) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x40c8884, &(0x7f00000000c0)={0xa, 0x4e23, 0x4, @local}, 0x1c) sendto$inet6(r2, &(0x7f0000001cc0)="2501d77b330b7e73d6b1d1b8a473ff7420b4b43ce0861f000000714fa228ee1f5b48", 0xfffffffffffffe57, 0x8000, 0x0, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)=@newae={0x40, 0x1e, 0x468bbc8229e18b43, 0x0, 0x0, {{}, @in6=@empty}}, 0x40}}, 0x0) socket$packet(0x11, 0x3, 0x300) (async) socket$packet(0x11, 0x3, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca900000000000035090100013800002c00000000000000b7020000000000007b9af8ff00000000b5090000c0ff0000dbaaf8fff1000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffc70200000800000018220000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf0000000000000056080000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x94) 737.855903ms ago: executing program 2 (id=6357): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket(0x2d, 0x2, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0xc0}, 0x0) setsockopt$inet6_mtu(r1, 0x6, 0x11, 0x0, 0x0) r3 = accept4$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000000c0)=0x14, 0x80000) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000100)=@req={0xd2, 0x3, 0xb2f, 0xfffffe00}, 0x10) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYRESDEC=r4], 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 336.770584ms ago: executing program 2 (id=6358): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async) close(0x4) unshare(0xc040480) (async) bpf$LINK_DETACH(0x22, 0x0, 0x0) (async) r2 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)=@generic={&(0x7f0000000000)='./file0\x00', 0x0, 0x8}, 0x18) socket$kcm(0x10, 0x2, 0x0) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000001c0)={@fallback=r0, 0x32, 0x1, 0xdf3, &(0x7f00000000c0)=[0x0], 0x1, 0x0, &(0x7f0000000100)=[0x0], &(0x7f0000000140)=[0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0], 0x0}, 0x40) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x16, 0xd, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x3}, [@map_val={0x18, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x9}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x3}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x5}, @call={0x85, 0x0, 0x0, 0x94}, @initr0={0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4}, @ldst={0x2, 0x3, 0x1, 0x1, 0x0, 0xfffffffffffffff7, 0x4}]}, &(0x7f00000002c0)='GPL\x00', 0xfff, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000000340)={0x4, 0x8, 0x9, 0x2}, 0x10, 0x0, r1, 0x1, 0x0, &(0x7f0000000380)=[{0x3, 0x1, 0x1, 0x3}], 0x10, 0x1}, 0x94) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000200)={@fallback=r0, r2, 0x25, 0x0, 0x0, @void, @value=r4, @void, @void, r3}, 0x20) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x215eb000) accept4$llc(0xffffffffffffffff, 0x0, 0x0, 0x800) (async) r5 = socket$netlink(0x10, 0x3, 0x12) sendmsg$NL80211_CMD_TRIGGER_SCAN(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=ANY=[@ANYBLOB="0001"], 0x1f8}, 0x1, 0x0, 0x0, 0x8040}, 0x40000) 210.634303ms ago: executing program 0 (id=6359): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) recvmmsg(r0, &(0x7f0000001740)=[{{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000400)=""/4096, 0x10c4}], 0x1}}], 0x4000210, 0x2, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[], 0xc4}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 168.900345ms ago: executing program 5 (id=6360): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0x17, 0x0, 0x9, 0x3, 0x0, 0x1}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0xf, &(0x7f00000001c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0, 0x0, 0x0, 0x2500}}}, &(0x7f00000000c0)='GPL\x00', 0x2, 0x8b, &(0x7f0000000100)=""/139}, 0x90) 719.881µs ago: executing program 6 (id=6361): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) (async) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000500)='./cgroup/syz1\x00', 0x200002, 0x0) (async) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000500)='./cgroup/syz1\x00', 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000040)='cgroup.kill\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000200)=0x1, 0x12) (async) write$cgroup_int(r4, &(0x7f0000000200)=0x1, 0x12) setsockopt$MRT_DEL_MFC_PROXY(r4, 0x0, 0xd3, 0x0, 0x0) ioctl$NILFS_IOCTL_GET_VINFO(r3, 0xc0186e86, &(0x7f0000001c40)={0x0, 0x0, 0x20, 0x41bc, 0x4}) (async) ioctl$NILFS_IOCTL_GET_VINFO(r3, 0xc0186e86, &(0x7f0000001c40)={0x0, 0x0, 0x20, 0x41bc, 0x4}) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="4800000010000507001c0086d7c0d6c878f064eb1ef62bc64a27aa6666403165fe7838c65d296350666d294d80feb295aa7a1069eaf7a2cabd8b03887dff30ac4200a2084b05", @ANYRES32=r5, @ANYRESOCT=r0], 0x48}, 0x1, 0x0, 0x0, 0x40400c0}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000940)=@delchain={0x34, 0x64, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0xffe0, 0xfff3}, {0x10, 0xffff}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x4040004) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000940)=@delchain={0x34, 0x64, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0xffe0, 0xfff3}, {0x10, 0xffff}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x4040004) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10) r8 = accept$alg(r7, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r8) socket$alg(0x26, 0x5, 0x0) (async) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000600)={0x26, 'hash\x00', 0x0, 0x0, 'xcbc(aes)\x00'}, 0x58) (async) bind$alg(r9, &(0x7f0000000600)={0x26, 'hash\x00', 0x0, 0x0, 'xcbc(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'wlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'wlan0\x00'}) r10 = accept4(r9, 0x0, 0x0, 0x80000) sendmmsg$alg(r10, &(0x7f0000000680)=[{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000100)="7bb4d5eeb23ad3e978f65c1071d4f0af9f0967caedcc2a1f1fdecab4edc8f187463e541a0ee8ed5b2b8cc96daea1646266b928d0e20597", 0x37}, {&(0x7f0000000300)="783ba07e415c1edc57264a00104ca31e78306465ff1ffb865e20", 0x1a}], 0x2, 0x0, 0x0, 0x8001}], 0x1, 0x20048000) r11 = socket(0x10, 0x803, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r11) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r11) getsockname$packet(r11, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001640)=@delchain={0x38, 0x2c, 0xf31, 0x70bd28, 0x4001ffe, {0x0, 0x0, 0x0, r12, {0xb}, {0xfff2, 0xffff}, {0xffff, 0xffe0}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008854}, 0x4010) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x100021}, 0x8) 0s ago: executing program 2 (id=6362): r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000001c40)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) write$cgroup_pid(r2, &(0x7f0000002380), 0x12) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001480)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$tun(r3, &(0x7f0000000340)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r3, 0x0) r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r4) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r5, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r6 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={@cgroup=r6, 0x24, 0x0, 0xffff, &(0x7f0000000080)=[0x0, 0x0], 0x40000176, 0x0, 0x0, 0x0, 0x0}, 0x40) openat$cgroup_devices(r3, &(0x7f0000000500)='devices.allow\x00', 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, &(0x7f0000004ac0)={'ip_vti0\x00', &(0x7f0000004a40)={'tunl0\x00', 0x0, 0x80, 0xf680, 0x6, 0x2, {{0xe, 0x4, 0x2, 0x1a, 0x38, 0x67, 0x0, 0x3, 0x29, 0x0, @rand_addr=0x64010102, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp_addr={0x44, 0xc, 0x7f, 0x1, 0xd, [{@broadcast, 0x7ff}]}, @end, @timestamp_prespec={0x44, 0x14, 0x85, 0x3, 0xf, [{@multicast2, 0x7}, {@empty, 0x769e}]}]}}}}}) socket$nl_route(0x10, 0x3, 0x0) socket$inet(0x2, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c00000000010104000000000000000002001000240002801400018008000100e000000108000200e00000010c00028005000100000000001c0010800800014000000000d97405010000000008000240000000000800", @ANYRES64=r8], 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) sendmmsg$inet(r1, &(0x7f0000004b80)=[{{&(0x7f0000000540)={0x2, 0x4e21, @private=0xa010100}, 0x10, &(0x7f0000000880)=[{&(0x7f0000000580)="78adc015734b50ce256e83ddd4c674d3e07cf641298440a2a695ba3898d0a055ab838e62bb258e167943597d40756899b7fb2af32e72c5431454a02f7d2754afb3871aeb9829e84898ea7c8100ce1ec75f385158fa0e7a7470b76729904753f3beee4adb4525f45aa0e07c859fabdd8131006217bbb6e5f056c809895d69a451630754feb3ba7e621d4742ce5c07dc55547983f492635c4f5e856cc8a1be12e34de66594d3079b416ebc0e2e52f6309ce411ba246417512e4ce7b213439e87f7bf8c2b4551e65162481bbf9ffa62d99292315b44263eb92666cb72ed9da8733eef62b7caa8641e32361a1a6fb09b93affc2857676bf2", 0xf6}, {&(0x7f0000000700)="f0604df520fabefbcbb8d76eecf2c80d2abdb1c29b8d8d8d1911d4fff5f8a5ddc9402b4bf5a53043a0bad5f1f0a0ef19b003f23fd29e02978431beda892dc57d10bce55fa16feda52058e0e18eb566e2f9568654f6774de9d7099b357e69cc7a898d611d77ab6b336e9b5b0b74eb2ef7afbea47751120eb010f80790531152f4ed0a8cba15a8e3c78de0a573b4970995f4fa4d3503e1a55bb7a8fefcddd24eb1a4d7d87da7d6cce949e9b8c50de1a12d97b9071d3256275e7997e462207967d87f8a50e8d8e08886df78fb7401f4487392ab84de7cdc0cf4ef87faff8b869b7257aa0953d792ebcebf177c5e6fce95bb34336386f12a", 0xf6}, {&(0x7f0000000800)="47727b94f66fe3cf28991b908d45d40f9f00c504af1aa9e43d439826329c8b8c9e7685a6d6e5ecd506c40b237a1973e5a25c4323683d4770b83ed94fce037596c0909d50f577", 0x46}], 0x3, &(0x7f00000008c0)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x8}}, @ip_ttl={{0x14, 0x0, 0x2, 0x1}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x4}}], 0x48}}, {{&(0x7f0000000940)={0x2, 0x4e23, @multicast1}, 0x10, &(0x7f0000000b80)=[{&(0x7f0000000980)="e2e0b065edf0faaaec7ce7854c8e3afe676227924b8ce82ab0c5df4c1692c4b2e7567517a6bd923e72b42c1f698b954d6b4b0123af60def2800e1739f7ac5d352378758ab3952d75a24028e5266b392e25d8a69c6f36043ba1e3c64082515995c14a4f71261415a955dd09567b1a47540429fcc55a1289e9f634b159f14a107c1b08ee82cd3f1448ed3ab47eeea3e2b52506102f2de76551b4a9dfbabf2d1a28fdd52299d47855f1db1a7917d5652bf2fd7b8f4b2c72568e3303171632fb015bf880e1201df228b7d1ef5dd6091f00ac740126e5b60d4ace29c99afc49cf09ba5e55e64d8ebe662c6169f4bb822c92ce17d001c80a136d", 0xf7}, {&(0x7f0000000a80)="1989b6ceeecb005d76d3fe50a34399d1da5100692e4ba9a47b3ef37a090c7eec71e02a2a587a29b257ccc28e2d", 0x2d}, {&(0x7f0000000ac0)="b6803b3042c7a4272813193d42c3fd4d3d5ae5e69b5233caec7111548136d2619dcd9fd9a6b4bc786eedd79d6c3611d7bf91b1a1f5c78f43505208a2a4a096ad57b26f79001839389c6180d6240db0e6301ba86f0752e1be3fa5a8219f6a8f6ae84863873f0bca510cd02828f6bc46ea1787cda048ba8da2aee7fb16304f097ab6c05cecc5d4301a0878c032f2edd63d3bf37eade4b543e65370d4b351cf89a805", 0xa1}], 0x3, &(0x7f0000000bc0)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x7}}, @ip_retopts={{0x60, 0x0, 0x7, {[@noop, @cipso={0x86, 0x1b, 0xffffffffffffffff, [{0x2, 0x3, "b8"}, {0x1, 0xc, "699205033d1ee44611bc"}, {0x0, 0x3, '*'}, {0x5, 0x3, "94"}]}, @generic={0x83, 0xe, "83a96f89dd42b91f77b137ed"}, @rr={0x7, 0x17, 0x34, [@private=0xa010101, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @empty, @broadcast]}, @ssrr={0x89, 0xf, 0xe4, [@multicast2, @multicast1, @remote]}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x7}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x1}}], 0xa8}}, {{&(0x7f0000000c80)={0x2, 0x4e21, @loopback}, 0x10, &(0x7f00000033c0)=[{&(0x7f0000000cc0)="d24759b3f85d0c20ec9f5c29b7d59bdef0cc546576f96e45332ce86eaf50421f121597c1dd059aa73ebd729de2e2ee0687131f79a6a3dff5c1bc63833fdbbf65559e99fd6fcf3ef206ce6e93343f1d1d0052d232d0bb3812b682861e7f8b2e8cd5dc47cae093b60ec602e8df40acad825d9d48033a02f6576f22a9b5ce58cbfd405aceea664f698755319bb1c6f705a036d6810b2a42f896ac2e0012407d1a89110ce0c818f4d3505558f936f77d8e01646d5710b9aa64c4a4bbabacf0b8a09b9740ae3117f580d0379ab336369a7e03a2358a7603be59a9272cf8669f", 0xdd}, {&(0x7f0000000dc0)="35648756285874d78abff0332ea28d53c5057430047f1ce4451b9a601fde0892eedfb0b4ff839b62ff787a2c0facd1d7e7dec64525d888367967c80f8083982a0b93ccf61bf6359f87fad10f97c3698061d512e4ff37ea814391f03c8a54f44287bee681167443b99b7579dcf22cb25dd18bb071bc0081dfe7ce5eb1e38748c0c2a0e87f8a832ab213cebbbfbbe10b04b1e38d2efbfb3c261519e3a71ee655cf21c82cb2eb83657d967aecfac19f80f3f4fda1b802ed1d09d010bf3e5faef31cd086e0fbc2eb9fe55c805e1b1ab83d4d7cfee31d030c7381340b9be08a6852425333f7ff", 0xe4}, {&(0x7f0000000ec0)="0952519b81aaaee5b2", 0x9}, {&(0x7f00000023c0)="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", 0x1000}], 0x4}}, {{&(0x7f0000003400)={0x2, 0x4e24, @empty}, 0x10, &(0x7f0000004480)=[{&(0x7f0000003440)="53de739891c148e4e03337cfb23d314742c0a14b1dd50fb88864b92a441c6cd19f418bf63eccc61061e05108ea186fb135f171d4b645a4bfd3fb066e91b73874", 0x40}, {&(0x7f0000003480)="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", 0x1000}], 0x2}}, {{0x0, 0x0, &(0x7f00000049c0)=[{&(0x7f00000044c0)="48e5e1771554b9927e702f229ab890b8807492fd85560a55589a933d3877444d525ea7ca04588eb3fa9c2efd2bd3b7b4fff993077c45de4d19f0782fe7cf41f6271cc7528fec6c9786e7369bc3f9bfe705c962cb7edd97e555576c788b73a2140a360718836eeeb437b9fff8e457a9525005b04daa4bc31202dc9dfd09115d38cb453ec6161affb3a0f5e1adc56e1255e0a6b187ca59d209f86678c6187b8a19c47a9d4653fd6af716facee5c858ab3279d32a134eba70d988b5a0ae219d443f5b75c924506f6adc8fac9eea1a6bea959a8ff84effca29f0", 0xd8}, {&(0x7f00000045c0)="4249eb65bd32a11cd4a268b486a427661e019d27554883d1b7e11a178d7fd3697bbf33747ae6a08803be3983a569f951d037f8299a02837a92236343361fcd03c48d337161537ccf9080e9cc0dce2d00d42c23aa99ed649734ee", 0x5a}, {&(0x7f0000004640)="d97da922fb5036a0bdfed3859701998cb5fe4b62a3866392fc6e2fc5e79e4f2cc46dac2261e4169cfb9778725b08ebad628dcfe5a16cf9d591014ef6c37bbbd9828952d0162e53379d115e203ad8373b7e9f11052e22da197e339a290c18f1fdc437c2fae12f8e6321dd90", 0x6b}, {&(0x7f00000046c0)="cbff8ce753f6f602b3a2129cdc942dbeb59766762d753209568ea645ec45693ea7260475a638bc7a639c4be810bca518e6d2affb6d65a4b8708bdda8da90c257094f1e7ea133e045bf9918f90973f04b000c8eaf8496d5f2e938fe299cf019a16e604684c593c2f3bc1acbc575", 0x6d}, {&(0x7f0000004740)="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", 0xfa}, {&(0x7f0000004840)="eaab897af716e633e7300733179095e9c65fbad769b748a2f32b70de2bc8b438ecacd13884c5ef30cc434948d390e80e5a06ce10b8a45f1083fe2d75", 0x3c}, {&(0x7f0000004880)="b1eba93929a5f425e75fe06fa213f5ff5b07ca9fa484fdbfffd25f61686130f27009", 0x22}, {&(0x7f00000048c0)="509ba0b81d794c53f013e11d15e795732c7147caf82b087fa6b0ca6dbacdaabd08321ed383ceda6ea15103b5b0dcffa5db4f7759727f38011570660c6dc865a474e5911d346a093d122ba5f6051732e3b6ae26df024a636ea7bf271178dbbef5f576a43785402013f9b8f177cc6fc868ce4a13a7a0d2233331627cb4bb3fc8a28fbe8a8a8a63621a2f2ec3f8ce12b493ede9098c3cbc620d7220ef496d1b26f2a98e34d2c756450fcca8f86fa62853af7f6cbc1eef6193a47effa0518ede468d866425ad47ac9bfcbbd4a344fa43b52157036623101203", 0xd7}], 0x8, &(0x7f0000004b00)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x6}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x1}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r7, @rand_addr=0x64010101, @rand_addr=0x64010101}}}], 0x50}}], 0x5, 0x40000) setsockopt$ARPT_SO_SET_REPLACE(r1, 0xa02000000000000, 0x60, &(0x7f0000000000)={'filter\x00', 0xb001, 0x4, 0x3f0, 0xe8, 0xe8, 0x0, 0x308, 0x308, 0x308, 0x7fffffe, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x3ff, 0x800}}}, {{@arp={@local, @empty, 0x0, 0x0, 0x0, 0xfd, {@mac=@local, {[0xff, 0x0, 0x0, 0xff]}}, {@empty, {[0x0, 0x0, 0x0, 0x0, 0xff, 0xff]}}, 0xc, 0x0, 0x0, 0x0, 0x8, 0x0, 'veth0_to_team\x00', 'ip6tnl0\x00', {}, {}, 0x0, 0xc}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @multicast1, @multicast2, 0x1, 0xffffffff}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0xf, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) r9 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$SO_TIMESTAMP(r9, 0x1, 0x1d, 0x0, &(0x7f0000000040)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000680)=ANY=[@ANYBLOB="1808000000000000000000000000001f851000000600000018100000", @ANYRES32=r0, @ANYBLOB="00000000000000000f8000000000000018000000000000000000000000000000950000000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x94) kernel console output (not intermixed with test programs): 77][T23035] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5344'. [ 885.927673][T23027] ipvlan0: entered allmulticast mode [ 886.059193][T23027] macsec0: left promiscuous mode [ 886.117271][T23027] mac80211_hwsim hwsim24 wlan0: left promiscuous mode [ 886.137971][T23027] mac80211_hwsim hwsim24 wlan0: entered allmulticast mode [ 886.162055][T23027] vxlan0: entered allmulticast mode [ 886.399205][T23027] bond0: entered allmulticast mode [ 886.417466][T23027] gretap1: entered allmulticast mode [ 886.496713][ C0] Dropped outbound packet type=88ca [ 886.544580][T23027] vlan2: entered allmulticast mode [ 886.710412][T23027] ip6tnl1: entered allmulticast mode [ 886.730788][T23027] bond1: entered allmulticast mode [ 886.740689][T23027] veth2: entered allmulticast mode [ 886.754522][T23027] veth3: entered allmulticast mode [ 886.771846][T23027] bridge1: entered allmulticast mode [ 886.859511][T23027] bridge2: entered allmulticast mode [ 886.998766][T23027] ip6tnl2: entered allmulticast mode [ 887.010380][T23027] geneve2: left promiscuous mode [ 887.167509][T15371] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 19999 - 0 [ 887.219402][ T975] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 19999 - 0 [ 887.251679][ T975] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 19999 - 0 [ 887.286844][ T975] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 19999 - 0 [ 887.303288][T23044] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5348'. [ 887.536716][ C0] Dropped outbound packet type=88ca [ 887.667277][T23058] syzkaller0: entered promiscuous mode [ 887.673230][T23058] syzkaller0: entered allmulticast mode [ 888.058005][T23069] netlink: 52 bytes leftover after parsing attributes in process `syz.2.5355'. [ 888.063764][T23071] syz.3.5356: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 888.106021][T23071] CPU: 1 UID: 0 PID: 23071 Comm: syz.3.5356 Not tainted syzkaller #0 PREEMPT(full) [ 888.106075][T23071] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 888.106091][T23071] Call Trace: [ 888.106100][T23071] [ 888.106109][T23071] dump_stack_lvl+0xe8/0x150 [ 888.106145][T23071] warn_alloc+0x24c/0x270 [ 888.106177][T23071] ? stack_depot_save_flags+0x33/0x800 [ 888.106203][T23071] ? __pfx_warn_alloc+0x10/0x10 [ 888.106229][T23071] ? kasan_save_track+0x3e/0x80 [ 888.106253][T23071] ? __kasan_kmalloc+0x93/0xb0 [ 888.106280][T23071] ? xsk_setsockopt+0x52a/0x960 [ 888.106392][T23071] ? do_sock_setsockopt+0x17c/0x1b0 [ 888.106422][T23071] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 888.106450][T23071] ? do_syscall_64+0x174/0x580 [ 888.106473][T23071] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 888.106503][T23071] __vmalloc_node_range_noprof+0x12c/0x1730 [ 888.106556][T23071] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 888.106582][T23071] ? __kasan_kmalloc+0x93/0xb0 [ 888.106608][T23071] ? __kmalloc_cache_noprof+0x32d/0x660 [ 888.106632][T23071] ? __kmalloc_cache_noprof+0x150/0x660 [ 888.106654][T23071] vmalloc_user_noprof+0xad/0xe0 [ 888.106675][T23071] ? xskq_create+0xbf/0x170 [ 888.106695][T23071] xskq_create+0xbf/0x170 [ 888.106717][T23071] xsk_init_queue+0x8a/0xe0 [ 888.106739][T23071] xsk_setsockopt+0x52a/0x960 [ 888.106756][T23071] ? __fget_files+0x2a/0x420 [ 888.106782][T23071] ? __pfx_xsk_setsockopt+0x10/0x10 [ 888.106802][T23071] ? __pfx_aa_sk_perm+0x10/0x10 [ 888.106833][T23071] ? aa_sock_opt_perm+0xff/0x1a0 [ 888.106862][T23071] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 888.106880][T23071] ? __pfx_xsk_setsockopt+0x10/0x10 [ 888.106901][T23071] do_sock_setsockopt+0x17c/0x1b0 [ 888.106933][T23071] __x64_sys_setsockopt+0x13d/0x1b0 [ 888.106963][T23071] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 888.106985][T23071] do_syscall_64+0x174/0x580 [ 888.107007][T23071] ? trace_irq_disable+0x3b/0x140 [ 888.107030][T23071] ? clear_bhb_loop+0x70/0xc0 [ 888.107054][T23071] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 888.107074][T23071] RIP: 0033:0x7ff8e3d9e0d9 [ 888.107093][T23071] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 888.107109][T23071] RSP: 002b:00007ff8e4c4d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 888.107130][T23071] RAX: ffffffffffffffda RBX: 00007ff8e4025fa0 RCX: 00007ff8e3d9e0d9 [ 888.107145][T23071] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 888.107156][T23071] RBP: 00007ff8e3e35024 R08: 0000000000000004 R09: 0000000000000000 [ 888.107167][T23071] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 888.107179][T23071] R13: 00007ff8e4026038 R14: 00007ff8e4025fa0 R15: 00007ffdf2d4b368 [ 888.107209][T23071] [ 888.576699][ C0] Dropped outbound packet type=88ca [ 888.759785][T23071] Mem-Info: [ 888.766593][T23071] active_anon:5778 inactive_anon:0 isolated_anon:0 [ 888.766593][T23071] active_file:0 inactive_file:43693 isolated_file:0 [ 888.766593][T23071] unevictable:0 dirty:122 writeback:0 [ 888.766593][T23071] slab_reclaimable:11858 slab_unreclaimable:111350 [ 888.766593][T23071] mapped:30815 shmem:528 pagetables:1306 [ 888.766593][T23071] sec_pagetables:0 bounce:0 [ 888.766593][T23071] kernel_misc_reclaimable:0 [ 888.766593][T23071] free:1314070 free_pcp:5785 free_cma:0 [ 888.857238][T23071] Node 0 active_anon:23112kB inactive_anon:0kB active_file:0kB inactive_file:174568kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:123260kB dirty:488kB writeback:0kB shmem:2112kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:15076kB pagetables:5064kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 888.892632][T23052] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 888.986366][T23071] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:160kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 889.043385][T23078] openvswitch: netlink: IP tunnel attribute has 5393 unknown bytes. [ 889.048030][T23071] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 889.146430][T23071] lowmem_reserve[]: 0 2488 2489 2489 2489 [ 889.198892][T23071] Node 0 DMA32 free:1303428kB boost:0kB min:34160kB low:42700kB high:51240kB reserved_highatomic:0KB free_highatomic:0KB active_anon:23116kB inactive_anon:0kB active_file:0kB inactive_file:174568kB unevictable:0kB writepending:488kB zspages:0kB present:3129332kB managed:2548696kB mlocked:0kB bounce:0kB free_pcp:24300kB local_pcp:9576kB free_cma:0kB [ 889.304282][T23071] lowmem_reserve[]: 0 0 0 0 0 [ 889.324944][T23071] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:264kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 889.336219][T23086] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5362'. [ 889.447001][T23088] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5363'. [ 889.476144][T23071] lowmem_reserve[]: 0 0 0 0 0 [ 889.507467][T23071] Node 1 Normal free:3937556kB boost:0kB min:55736kB low:69668kB high:83600kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:0kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 889.554786][T23071] lowmem_reserve[]: 0 0 0 0 0 [ 889.576987][T23071] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 889.616712][ C0] Dropped outbound packet type=88ca [ 889.666067][T23071] Node 0 DMA32: 1219*4kB (ME) 865*8kB (UM) 377*16kB (UM) 251*32kB (UME) 36*64kB (UM) 25*128kB (UM) 17*256kB (UME) 12*512kB (UME) 2*1024kB (UM) 3*2048kB (UM) 306*4096kB (UM) = 1303428kB [ 889.752438][T23071] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 889.802084][T23071] Node 1 Normal: 1*4kB (U) 2*8kB (UM) 4*16kB (UM) 2*32kB (UM) 6*64kB (UM) 4*128kB (UM) 3*256kB (UM) 3*512kB (UM) 2*1024kB (UM) 2*2048kB (U) 959*4096kB (M) = 3937556kB [ 889.866526][T23071] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 889.904441][T23071] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 889.929596][T23071] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 889.960905][T23071] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 889.983565][T23071] 44219 total pagecache pages [ 889.994934][T23071] 0 pages in swap cache [ 890.049592][T23071] Free swap = 124996kB [ 890.064724][T23071] Total swap = 124996kB [ 890.077689][T23071] 2097051 pages RAM [ 890.081746][T23071] 0 pages HighMem/MovableOnly [ 890.095201][T23071] 428196 pages reserved [ 890.176916][T23071] 0 pages cma reserved [ 890.567169][T23117] block nbd3: NBD_DISCONNECT [ 890.636779][T23117] block nbd3: Send disconnect failed -32 [ 890.656782][ C0] Dropped outbound packet type=88ca [ 890.747283][T23117] block nbd3: shutting down sockets [ 890.856952][ C1] blk_print_req_error: 60 callbacks suppressed [ 890.856974][ C1] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 890.872842][ C1] buffer_io_error: 138 callbacks suppressed [ 890.872859][ C1] Buffer I/O error on dev nbd3, logical block 0, async page read [ 890.886491][ C1] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 890.896083][ C1] Buffer I/O error on dev nbd3, logical block 1, async page read [ 890.903845][ C1] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 890.913413][ C1] Buffer I/O error on dev nbd3, logical block 2, async page read [ 890.921214][ C1] I/O error, dev nbd3, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 890.930797][ C1] Buffer I/O error on dev nbd3, logical block 3, async page read [ 890.939008][ T1634] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 890.949466][ T1634] Buffer I/O error on dev nbd3, logical block 0, async page read [ 890.957291][ T1634] Buffer I/O error on dev nbd3, logical block 1, async page read [ 890.965118][ T1634] Buffer I/O error on dev nbd3, logical block 2, async page read [ 890.973004][ T1634] Buffer I/O error on dev nbd3, logical block 3, async page read [ 890.982112][ T1634] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 890.994721][ T1634] Buffer I/O error on dev nbd3, logical block 0, async page read [ 891.002620][ T1634] Buffer I/O error on dev nbd3, logical block 1, async page read [ 891.010958][ T1634] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 891.020764][ T1634] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 891.030696][ T1634] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 891.126043][ T1634] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2 [ 891.135962][T17496] ldm_validate_partition_table(): Disk read failed. [ 891.168052][T17496] Dev nbd3: unable to read RDB block 0 [ 891.178382][T17496] nbd3: unable to read partition table [ 891.222078][ T4979] udevd[4979]: worker [17496] terminated by signal 9 (Killed) [ 891.264607][T23134] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5375'. [ 891.438825][ T4979] udevd[4979]: worker [17496] failed while handling '/devices/virtual/block/nbd3' [ 891.696907][ C0] Dropped outbound packet type=88ca [ 892.740092][ C0] Dropped outbound packet type=88ca [ 893.776726][ C0] Dropped outbound packet type=88ca [ 894.816719][ C0] Dropped outbound packet type=88ca [ 895.856791][ C0] Dropped outbound packet type=88ca [ 896.896727][ C0] Dropped outbound packet type=88ca [ 897.936768][ C0] Dropped outbound packet type=88ca [ 898.317075][T23144] ÿÿÿÿÿÿ: renamed from vlan1 [ 898.459460][T23146] vlan0: left promiscuous mode [ 898.484354][T23146] vlan0: entered allmulticast mode [ 898.573483][T23146] macvlan0: left promiscuous mode [ 898.593988][T23146] macvlan0: entered allmulticast mode [ 898.619528][T23156] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5384'. [ 898.675194][T23161] netlink: 'syz.4.5381': attribute type 10 has an invalid length. [ 898.683793][T23146] macsec0: left promiscuous mode [ 898.772028][T23146] vxlan2: entered allmulticast mode [ 898.803021][T23164] x_tables: duplicate underflow at hook 1 [ 898.855914][T23146] erspan1: entered allmulticast mode [ 898.879132][T23146] geneve3: left promiscuous mode [ 898.887001][T23146] geneve3: entered allmulticast mode [ 898.952754][T23146] mac80211_hwsim hwsim27 wlan3: entered allmulticast mode [ 898.976738][ C0] Dropped outbound packet type=88ca [ 898.977692][T23146] bond15: entered allmulticast mode [ 898.998977][T23146] bond16: entered allmulticast mode [ 899.012129][T23146] macsec1: entered allmulticast mode [ 899.070217][T23146] gre2: entered allmulticast mode [ 899.082417][T23146] dvmrp0: entered allmulticast mode [ 899.163116][T23161] macsec0: left allmulticast mode [ 899.223827][T23161] macsec0: entered allmulticast mode [ 899.240491][T23161] .`: (slave macsec0): Enslaving as an active interface with an up link [ 899.333912][ T975] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 899.421437][T23171] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5386'. [ 899.580835][ T975] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 41675 - 0 [ 899.683673][ T975] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 899.714930][ T975] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 41675 - 0 [ 899.750118][T23182] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 899.780916][T15385] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 899.828570][T15385] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 41675 - 0 [ 899.900727][T15385] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 899.959326][T15385] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 41675 - 0 [ 899.995419][T23189] xt_TCPMSS: Only works on TCP SYN packets [ 899.997918][T23193] bond0: entered promiscuous mode [ 900.016729][ C0] Dropped outbound packet type=88ca [ 900.059210][T23193] gretap1: entered promiscuous mode [ 900.094018][T23193] 8021q: adding VLAN 0 to HW filter on device bond0 [ 900.163061][T15385] bond0: (slave gretap1): link status definitely down, disabling slave [ 900.215641][T15385] gretap1: left promiscuous mode [ 900.269804][T15385] bond0: now running without any active interface! [ 900.421286][T23204] netlink: 'syz.0.5396': attribute type 23 has an invalid length. [ 900.458894][T23205] sch_tbf: peakrate 8 is lower than or equals to rate 7508080445633888606 ! [ 900.656406][T23213] netlink: 'syz.2.5400': attribute type 1 has an invalid length. [ 900.761004][T23222] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5400'. [ 900.868578][T23213] bond6: option mode: invalid value (8) [ 901.002692][T23213] bond6 (unregistering): Released all slaves [ 901.056922][ C0] Dropped outbound packet type=88ca [ 901.107703][T23228] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5402'. [ 901.430702][T23231] can: request_module (can-proto-0) failed. [ 902.096708][ C0] Dropped outbound packet type=88ca [ 902.105537][T23247] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5406'. [ 902.157176][T23247] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5406'. [ 902.297423][T23247] netlink: 'syz.3.5406': attribute type 12 has an invalid length. [ 902.357580][T23247] netlink: 'syz.3.5406': attribute type 11 has an invalid length. [ 903.045356][T23267] pim6reg: entered allmulticast mode [ 903.085325][T23267] xt_hashlimit: size too large, truncated to 1048576 [ 903.136930][ C0] Dropped outbound packet type=88ca [ 903.156283][T23272] xt_hashlimit: size too large, truncated to 1048576 [ 903.205398][T23270] netlink: 'syz.3.5415': attribute type 21 has an invalid length. [ 903.283011][T23270] IPv6: NLM_F_CREATE should be specified when creating new route [ 903.692976][T23289] 8021q: adding VLAN 0 to HW filter on device ipvlan0 [ 903.730812][T23289] bond0: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 904.176764][ C0] Dropped outbound packet type=88ca [ 904.837369][T23312] sock: sock_set_timeout: `syz.2.5429' (pid 23312) tries to set negative timeout [ 904.939112][T23317] openvswitch: netlink: IPv6 tunnel dst address is zero [ 905.044603][T23319] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5431'. [ 905.216714][ C0] Dropped outbound packet type=88ca [ 905.225808][T23322] ÿÿÿÿÿÿ: renamed from vlan1 [ 905.486394][T23334] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5437'. [ 905.699898][T23344] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5439'. [ 905.739456][T23344] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5439'. [ 905.825325][T23336] syzkaller0: entered promiscuous mode [ 905.871779][T23336] syzkaller0: entered allmulticast mode [ 906.017794][T23352] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5443'. [ 906.070065][T23355] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5443'. [ 906.215434][T23363] netlink: 'syz.4.5445': attribute type 9 has an invalid length. [ 906.256713][ C0] Dropped outbound packet type=88ca [ 907.296922][ C0] Dropped outbound packet type=88ca [ 907.456895][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 908.336738][ C0] Dropped outbound packet type=88ca [ 909.376712][ C0] Dropped outbound packet type=88ca [ 910.416735][ C0] Dropped outbound packet type=88ca [ 911.456725][ C0] Dropped outbound packet type=88ca [ 912.496708][ C0] Dropped outbound packet type=88ca [ 913.536776][ C0] Dropped outbound packet type=88ca [ 914.013386][T23384] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5452'. [ 914.582522][ C0] Dropped outbound packet type=88ca [ 914.595419][T23395] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 914.603860][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 914.639089][T23395] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 914.772502][T23402] tipc: Can't bind to reserved service type 0 [ 915.616739][ C0] Dropped outbound packet type=88ca [ 916.656724][ C0] Dropped outbound packet type=88ca [ 916.828915][T23461] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5472'. [ 916.943826][T23461] ieee802154 phy0 wpan0: encryption failed: -22 [ 917.573964][T23472] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5477'. [ 917.631044][T23472] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5477'. [ 917.688611][T23472] netlink: 31 bytes leftover after parsing attributes in process `syz.2.5477'. [ 917.697716][ C0] Dropped outbound packet type=88ca [ 917.994433][T23485] ip6tnl2: entered allmulticast mode [ 918.144522][T23496] netlink: 44 bytes leftover after parsing attributes in process `syz.4.5483'. [ 918.242181][T23496] netlink: 21 bytes leftover after parsing attributes in process `syz.4.5483'. [ 918.327904][T23496] netlink: 21 bytes leftover after parsing attributes in process `syz.4.5483'. [ 918.659139][T23509] 8021q: adding VLAN 0 to HW filter on device bond0 [ 918.736721][ C0] Dropped outbound packet type=88ca [ 918.940362][T23514] netlink: 'syz.3.5490': attribute type 10 has an invalid length. [ 918.964084][T23509] xt_ecn: cannot match TCP bits for non-tcp packets [ 918.975438][T23514] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5490'. [ 919.035014][T23514] geneve1: left allmulticast mode [ 919.090381][T23514] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 919.602535][T23525] netlink: 108 bytes leftover after parsing attributes in process `syz.4.5491'. [ 919.776781][ C0] Dropped outbound packet type=88ca [ 920.480310][T23526] netlink: 'syz.0.5494': attribute type 29 has an invalid length. [ 920.494606][T23526] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5494'. [ 920.816704][ C0] Dropped outbound packet type=88ca [ 921.038621][T23546] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5499'. [ 921.075192][T23550] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5499'. [ 921.856708][ C0] Dropped outbound packet type=88ca [ 922.905487][ C0] Dropped outbound packet type=88ca [ 923.936872][ C0] Dropped outbound packet type=88ca [ 924.976707][ C0] Dropped outbound packet type=88ca [ 926.016718][ C0] Dropped outbound packet type=88ca [ 927.056704][ C0] Dropped outbound packet type=88ca [ 928.096980][ C0] Dropped outbound packet type=88ca [ 928.323333][T23568] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5503'. [ 929.136739][ C0] Dropped outbound packet type=88ca [ 929.205868][T23586] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5509'. [ 929.209632][T23587] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5509'. [ 929.346742][T23591] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5507'. [ 929.408799][T23590] macvlan0: left promiscuous mode [ 929.420636][T23590] macvlan0: entered allmulticast mode [ 929.576800][T23590] gtp1: entered allmulticast mode [ 929.666683][T23595] FAULT_INJECTION: forcing a failure. [ 929.666683][T23595] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 929.682816][T23590] bond8: entered allmulticast mode [ 929.691763][T23590] gretap2: entered allmulticast mode [ 929.706728][T23595] CPU: 0 UID: 0 PID: 23595 Comm: syz.0.5512 Not tainted syzkaller #0 PREEMPT(full) [ 929.706751][T23595] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 929.706762][T23595] Call Trace: [ 929.706770][T23595] [ 929.706777][T23595] dump_stack_lvl+0xe8/0x150 [ 929.706811][T23595] should_fail_ex+0x40c/0x560 [ 929.706838][T23595] _copy_from_user+0x2d/0xb0 [ 929.706864][T23595] ___sys_recvmsg+0x173/0x5a0 [ 929.706892][T23595] ? __pfx____sys_recvmsg+0x10/0x10 [ 929.706916][T23595] ? __fget_files+0x2a/0x420 [ 929.706963][T23595] do_recvmmsg+0x31a/0x7f0 [ 929.706987][T23595] ? __pfx_do_recvmmsg+0x10/0x10 [ 929.707017][T23595] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 929.707041][T23595] ? __fget_files+0x3a2/0x420 [ 929.707069][T23595] __x64_sys_recvmmsg+0x198/0x250 [ 929.707089][T23595] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 929.707115][T23595] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 929.707134][T23595] do_syscall_64+0x174/0x580 [ 929.707156][T23595] ? clear_bhb_loop+0x70/0xc0 [ 929.707177][T23595] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 929.707194][T23595] RIP: 0033:0x7f6f9bd9e0d9 [ 929.707212][T23595] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 929.707226][T23595] RSP: 002b:00007f6f9cba2028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 929.707244][T23595] RAX: ffffffffffffffda RBX: 00007f6f9c025fa0 RCX: 00007f6f9bd9e0d9 [ 929.707257][T23595] RDX: 000000000000005b RSI: 00002000000021c0 RDI: 0000000000000003 [ 929.707269][T23595] RBP: 00007f6f9cba2090 R08: 0000000000000000 R09: 0000000000000000 [ 929.707281][T23595] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000002 [ 929.707292][T23595] R13: 00007f6f9c026038 R14: 00007f6f9c025fa0 R15: 00007fffaff649f8 [ 929.707331][T23595] [ 929.759726][T23590] vlan4: entered allmulticast mode [ 929.998853][T23591] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5507'. [ 930.176724][ C0] Dropped outbound packet type=88ca [ 930.434405][T23597] syzkaller0: entered promiscuous mode [ 930.448614][T23597] syzkaller0: entered allmulticast mode [ 930.690213][T23616] bond6 (unregistering): Released all slaves [ 930.764182][T23609] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5513'. [ 931.216856][ C0] Dropped outbound packet type=88ca [ 931.615864][T23640] netlink: 'syz.2.5520': attribute type 2 has an invalid length. [ 931.638945][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.740696][T23640] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5520'. [ 931.792019][T23640] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5520'. [ 931.861769][T23640] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5520'. [ 931.903318][T23640] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5520'. [ 932.256713][ C0] Dropped outbound packet type=88ca [ 933.296782][ C0] Dropped outbound packet type=88ca [ 934.338703][ C0] Dropped outbound packet type=88ca [ 935.376751][ C0] Dropped outbound packet type=88ca [ 936.416760][ C0] Dropped outbound packet type=88ca [ 937.456736][ C0] Dropped outbound packet type=88ca [ 938.496726][ C0] Dropped outbound packet type=88ca [ 939.536708][ C0] Dropped outbound packet type=88ca [ 940.183514][T23684] netlink: 'syz.3.5535': attribute type 1 has an invalid length. [ 940.420757][T23695] __nla_validate_parse: 1 callbacks suppressed [ 940.420778][T23695] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5538'. [ 940.576708][ C0] Dropped outbound packet type=88ca [ 940.645580][T23705] geneve1: entered allmulticast mode [ 940.861570][T23705] syzkaller0: left promiscuous mode [ 940.965068][T23705] bond10: entered allmulticast mode [ 941.031435][T23705] bond11: entered allmulticast mode [ 941.058953][T23705] bond12: entered allmulticast mode [ 941.141402][T23705] gretap3: entered allmulticast mode [ 941.181750][T23720] netlink: 'syz.0.5545': attribute type 11 has an invalid length. [ 941.212480][T23705] gtp0: entered allmulticast mode [ 941.235997][T23705] bridge4: left promiscuous mode [ 941.308989][T23705] bridge5: entered allmulticast mode [ 941.329471][T23705] gretap4: left promiscuous mode [ 941.393747][T23705] ip6gretap1: entered allmulticast mode [ 941.420821][T23705] nicvf0: entered allmulticast mode [ 941.446037][T23705] veth4: entered allmulticast mode [ 941.474419][T23705] veth5: entered allmulticast mode [ 941.549461][T23705] ip6tnl3: entered allmulticast mode [ 941.569923][T23705] bridge6: entered allmulticast mode [ 941.616712][ C0] Dropped outbound packet type=88ca [ 941.633621][T23705] ip6_vti1: entered allmulticast mode [ 941.644709][T23705] mac80211_hwsim hwsim29 wlan4: entered allmulticast mode [ 941.667137][T23705] veth6: entered allmulticast mode [ 941.675546][T23705] veth7: entered allmulticast mode [ 941.811503][T23730] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5548'. [ 942.150413][T23736] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5551'. [ 942.447494][T23742] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5553'. [ 942.656708][ C0] Dropped outbound packet type=88ca [ 942.815193][T23759] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5558'. [ 942.869738][T23759] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5558'. [ 942.876323][T23761] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5560'. [ 942.923312][T23759] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5558'. [ 943.415183][T23769] sctp: [Deprecated]: syz.2.5564 (pid 23769) Use of int in maxseg socket option. [ 943.415183][T23769] Use struct sctp_assoc_value instead [ 943.585317][T23781] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5568'. [ 943.659697][T23783] veth0: left promiscuous mode [ 943.679358][T23783] bridge0: port 3(veth0) entered disabled state [ 943.696712][ C0] Dropped outbound packet type=88ca [ 943.745786][T23783] bridge_slave_1: left promiscuous mode [ 943.797596][T23783] bridge0: port 2(bridge_slave_1) entered disabled state [ 944.016781][T23783] bridge_slave_0: left promiscuous mode [ 944.060130][T23783] bridge0: port 1(bridge_slave_0) entered disabled state [ 944.736814][ C0] Dropped outbound packet type=88ca [ 944.977452][T23784] bond0: left allmulticast mode [ 945.776711][ C0] Dropped outbound packet type=88ca [ 945.919562][T23825] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5579'. [ 946.161155][T23836] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5584'. [ 946.534076][T23843] netlink: 'syz.4.5588': attribute type 1 has an invalid length. [ 946.792374][T23844] workqueue: Failed to create a rescuer kthread for wq "bond10": -EINTR [ 946.816724][ C0] Dropped outbound packet type=88ca [ 947.183687][T23869] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5592'. [ 947.217315][T23869] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5592'. [ 947.856747][ C0] Dropped outbound packet type=88ca [ 948.865591][T23827] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 948.896736][ C0] Dropped outbound packet type=88ca [ 949.211384][T23882] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5598'. [ 949.553915][T23893] FAULT_INJECTION: forcing a failure. [ 949.553915][T23893] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 949.657095][T23893] CPU: 1 UID: 0 PID: 23893 Comm: syz.4.5602 Not tainted syzkaller #0 PREEMPT(full) [ 949.657121][T23893] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 949.657131][T23893] Call Trace: [ 949.657139][T23893] [ 949.657147][T23893] dump_stack_lvl+0xe8/0x150 [ 949.657176][T23893] should_fail_ex+0x40c/0x560 [ 949.657201][T23893] _copy_from_user+0x2d/0xb0 [ 949.657225][T23893] ___sys_sendmsg+0x1c6/0x360 [ 949.657243][T23893] ? __lock_acquire+0x683/0x2cf0 [ 949.657271][T23893] ? __pfx____sys_sendmsg+0x10/0x10 [ 949.657329][T23893] ? __fget_files+0x2a/0x420 [ 949.657351][T23893] ? __fget_files+0x3a2/0x420 [ 949.657382][T23893] __x64_sys_sendmsg+0x1b1/0x290 [ 949.657402][T23893] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 949.657437][T23893] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 949.657457][T23893] do_syscall_64+0x174/0x580 [ 949.657478][T23893] ? trace_irq_disable+0x3b/0x140 [ 949.657499][T23893] ? clear_bhb_loop+0x70/0xc0 [ 949.657521][T23893] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 949.657538][T23893] RIP: 0033:0x7f2eba39e0d9 [ 949.657554][T23893] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 949.657569][T23893] RSP: 002b:00007f2ebb281028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 949.657589][T23893] RAX: ffffffffffffffda RBX: 00007f2eba625fa0 RCX: 00007f2eba39e0d9 [ 949.657602][T23893] RDX: 0000000004004000 RSI: 0000200000000000 RDI: 0000000000000004 [ 949.657614][T23893] RBP: 00007f2ebb281090 R08: 0000000000000000 R09: 0000000000000000 [ 949.657624][T23893] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 949.657640][T23893] R13: 00007f2eba626038 R14: 00007f2eba625fa0 R15: 00007ffe29bb6888 [ 949.657670][T23893] [ 949.669540][T23897] FAULT_INJECTION: forcing a failure. [ 949.669540][T23897] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 949.741332][T23898] macvlan0: entered promiscuous mode [ 949.827529][T23903] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 949.857540][T23900] netlink: 32 bytes leftover after parsing attributes in process `syz.5.5601'. [ 949.935146][T23898] macvlan0: left allmulticast mode [ 949.940483][ C0] Dropped outbound packet type=88ca [ 949.993669][T23906] netlink: Unknown conntrack attr (type=32, max=9) [ 950.018736][T23897] CPU: 0 UID: 0 PID: 23897 Comm: syz.3.5603 Not tainted syzkaller #0 PREEMPT(full) [ 950.018762][T23897] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 950.018773][T23897] Call Trace: [ 950.018781][T23897] [ 950.018790][T23897] dump_stack_lvl+0xe8/0x150 [ 950.018820][T23897] should_fail_ex+0x40c/0x560 [ 950.018847][T23897] _copy_from_user+0x2d/0xb0 [ 950.018871][T23897] kstrtouint_from_user+0xd6/0x180 [ 950.018894][T23897] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 950.018931][T23897] proc_fail_nth_write+0x8e/0x210 [ 950.018958][T23897] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 950.018990][T23897] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 950.019013][T23897] vfs_write+0x296/0xba0 [ 950.019048][T23897] ? __pfx_vfs_write+0x10/0x10 [ 950.019073][T23897] ? __fget_files+0x2a/0x420 [ 950.019097][T23897] ? __fget_files+0x3a2/0x420 [ 950.019117][T23897] ? __fget_files+0x2a/0x420 [ 950.019146][T23897] ksys_write+0x150/0x270 [ 950.019182][T23897] ? __pfx_ksys_write+0x10/0x10 [ 950.019216][T23897] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 950.019238][T23897] do_syscall_64+0x174/0x580 [ 950.019259][T23897] ? trace_irq_disable+0x3b/0x140 [ 950.019281][T23897] ? clear_bhb_loop+0x70/0xc0 [ 950.019304][T23897] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 950.019321][T23897] RIP: 0033:0x7ff8e3d5e90e [ 950.019338][T23897] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 950.019353][T23897] RSP: 002b:00007ff8e4c4cfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 950.019372][T23897] RAX: ffffffffffffffda RBX: 00007ff8e4c4d6c0 RCX: 00007ff8e3d5e90e [ 950.019385][T23897] RDX: 0000000000000001 RSI: 00007ff8e4c4d0a0 RDI: 0000000000000005 [ 950.019396][T23897] RBP: 00007ff8e4c4d090 R08: 0000000000000000 R09: 0000000000000000 [ 950.019408][T23897] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 950.019418][T23897] R13: 00007ff8e4026038 R14: 00007ff8e4025fa0 R15: 00007ffdf2d4b368 [ 950.019450][T23897] [ 950.806458][T23910] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5608'. [ 950.976772][ C0] Dropped outbound packet type=88ca [ 951.015575][T23919] FAULT_INJECTION: forcing a failure. [ 951.015575][T23919] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 951.109590][T23919] CPU: 1 UID: 0 PID: 23919 Comm: syz.0.5610 Not tainted syzkaller #0 PREEMPT(full) [ 951.109625][T23919] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 951.109637][T23919] Call Trace: [ 951.109645][T23919] [ 951.109654][T23919] dump_stack_lvl+0xe8/0x150 [ 951.109687][T23919] should_fail_ex+0x40c/0x560 [ 951.109711][T23919] _copy_from_user+0x2d/0xb0 [ 951.109737][T23919] ___sys_recvmsg+0x173/0x5a0 [ 951.109762][T23919] ? __pfx____sys_recvmsg+0x10/0x10 [ 951.109786][T23919] ? __fget_files+0x2a/0x420 [ 951.109839][T23919] do_recvmmsg+0x31a/0x7f0 [ 951.109866][T23919] ? __pfx_do_recvmmsg+0x10/0x10 [ 951.109897][T23919] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 951.109921][T23919] ? __fget_files+0x3a2/0x420 [ 951.109953][T23919] __x64_sys_recvmmsg+0x198/0x250 [ 951.109975][T23919] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 951.110003][T23919] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 951.110023][T23919] do_syscall_64+0x174/0x580 [ 951.110043][T23919] ? trace_irq_disable+0x3b/0x140 [ 951.110065][T23919] ? clear_bhb_loop+0x70/0xc0 [ 951.110088][T23919] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 951.110106][T23919] RIP: 0033:0x7f6f9bd9e0d9 [ 951.110122][T23919] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 951.110137][T23919] RSP: 002b:00007f6f9cba2028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 951.110158][T23919] RAX: ffffffffffffffda RBX: 00007f6f9c025fa0 RCX: 00007f6f9bd9e0d9 [ 951.110171][T23919] RDX: 000000000000005b RSI: 00002000000021c0 RDI: 0000000000000003 [ 951.110184][T23919] RBP: 00007f6f9cba2090 R08: 0000000000000000 R09: 0000000000000000 [ 951.110195][T23919] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000002 [ 951.110205][T23919] R13: 00007f6f9c026038 R14: 00007f6f9c025fa0 R15: 00007fffaff649f8 [ 951.110236][T23919] [ 951.488494][T23923] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5613'. [ 952.016712][ C0] Dropped outbound packet type=88ca [ 952.208009][T23961] syzkaller1: entered promiscuous mode [ 952.242956][T23961] syzkaller1: entered allmulticast mode [ 952.420649][T23970] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5620'. [ 952.496181][T23974] syzkaller0: entered promiscuous mode [ 952.537157][T23974] syzkaller0: entered allmulticast mode [ 952.831592][T23974] netlink: 'syz.4.5623': attribute type 2 has an invalid length. [ 952.883206][T23978] ip6erspan0: entered allmulticast mode [ 953.056711][ C0] Dropped outbound packet type=88ca [ 953.438130][T23995] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5628'. [ 953.782317][T24004] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5633'. [ 954.096714][ C0] Dropped outbound packet type=88ca [ 954.403499][T24022] FAULT_INJECTION: forcing a failure. [ 954.403499][T24022] name failslab, interval 1, probability 0, space 0, times 0 [ 954.455133][T24022] CPU: 0 UID: 0 PID: 24022 Comm: syz.2.5639 Not tainted syzkaller #0 PREEMPT(full) [ 954.455159][T24022] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 954.455170][T24022] Call Trace: [ 954.455178][T24022] [ 954.455187][T24022] dump_stack_lvl+0xe8/0x150 [ 954.455216][T24022] should_fail_ex+0x40c/0x560 [ 954.455241][T24022] should_failslab+0xa8/0x100 [ 954.455269][T24022] kmem_cache_alloc_node_noprof+0xb3/0x610 [ 954.455298][T24022] ? local_lock_release+0x9c/0x160 [ 954.455324][T24022] ? __alloc_skb+0x1d7/0x7a0 [ 954.455346][T24022] ? __alloc_skb+0x1d7/0x7a0 [ 954.455376][T24022] __alloc_skb+0x1d7/0x7a0 [ 954.455404][T24022] netlink_dump+0x1e7/0xee0 [ 954.455428][T24022] ? lockdep_hardirqs_on+0x7a/0x110 [ 954.455449][T24022] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 954.455470][T24022] ? __skb_try_recv_datagram+0x3de/0x4e0 [ 954.455491][T24022] ? __pfx_netlink_dump+0x10/0x10 [ 954.455529][T24022] netlink_recvmsg+0x683/0xa50 [ 954.455558][T24022] ? __pfx_netlink_recvmsg+0x10/0x10 [ 954.455581][T24022] ? __lock_acquire+0x683/0x2cf0 [ 954.455610][T24022] ? __pfx_netlink_recvmsg+0x10/0x10 [ 954.455630][T24022] sock_recvmsg_nosec+0x130/0x170 [ 954.455656][T24022] ____sys_recvmsg+0x3e3/0x4a0 [ 954.455684][T24022] ? __pfx_____sys_recvmsg+0x10/0x10 [ 954.455718][T24022] ? import_iovec+0x73/0xa0 [ 954.455746][T24022] ___sys_recvmsg+0x213/0x5a0 [ 954.455771][T24022] ? __pfx____sys_recvmsg+0x10/0x10 [ 954.455793][T24022] ? __fget_files+0x2a/0x420 [ 954.455843][T24022] do_recvmmsg+0x31a/0x7f0 [ 954.455869][T24022] ? __pfx_do_recvmmsg+0x10/0x10 [ 954.455897][T24022] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 954.455917][T24022] ? __fget_files+0x3a2/0x420 [ 954.455947][T24022] __x64_sys_recvmmsg+0x198/0x250 [ 954.455979][T24022] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 954.456004][T24022] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 954.456021][T24022] do_syscall_64+0x174/0x580 [ 954.456037][T24022] ? trace_irq_disable+0x3b/0x140 [ 954.456056][T24022] ? clear_bhb_loop+0x70/0xc0 [ 954.456091][T24022] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 954.456107][T24022] RIP: 0033:0x7fee87f9e0d9 [ 954.456124][T24022] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 954.456136][T24022] RSP: 002b:00007fee88e39028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 954.456154][T24022] RAX: ffffffffffffffda RBX: 00007fee88225fa0 RCX: 00007fee87f9e0d9 [ 954.456166][T24022] RDX: 000000000000005b RSI: 00002000000021c0 RDI: 0000000000000003 [ 954.456177][T24022] RBP: 00007fee88e39090 R08: 0000000000000000 R09: 0000000000000000 [ 954.456188][T24022] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000002 [ 954.456198][T24022] R13: 00007fee88226038 R14: 00007fee88225fa0 R15: 00007ffe90bbd388 [ 954.456228][T24022] [ 955.071437][T24027] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5641'. [ 955.136714][ C0] Dropped outbound packet type=88ca [ 955.150208][T24037] netlink: 808 bytes leftover after parsing attributes in process `syz.2.5642'. [ 955.430552][T24040] netlink: 148 bytes leftover after parsing attributes in process `syz.0.5643'. [ 955.458844][T24042] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5645'. [ 955.509334][T24044] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5644'. [ 955.586161][T24044] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5644'. [ 956.176731][ C0] Dropped outbound packet type=88ca [ 956.592345][T24068] FAULT_INJECTION: forcing a failure. [ 956.592345][T24068] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 956.626534][T24069] netlink: 'syz.4.5652': attribute type 1 has an invalid length. [ 956.653328][T24068] CPU: 1 UID: 0 PID: 24068 Comm: syz.0.5651 Not tainted syzkaller #0 PREEMPT(full) [ 956.653354][T24068] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 956.653365][T24068] Call Trace: [ 956.653374][T24068] [ 956.653382][T24068] dump_stack_lvl+0xe8/0x150 [ 956.653412][T24068] should_fail_ex+0x40c/0x560 [ 956.653438][T24068] _copy_from_user+0x2d/0xb0 [ 956.653463][T24068] ___sys_recvmsg+0x173/0x5a0 [ 956.653489][T24068] ? __pfx____sys_recvmsg+0x10/0x10 [ 956.653512][T24068] ? __fget_files+0x2a/0x420 [ 956.653551][T24068] ? __fget_files+0x3a2/0x420 [ 956.653583][T24068] do_recvmmsg+0x31a/0x7f0 [ 956.653610][T24068] ? __pfx_do_recvmmsg+0x10/0x10 [ 956.653640][T24068] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 956.653662][T24068] ? __fget_files+0x3a2/0x420 [ 956.653692][T24068] __x64_sys_recvmmsg+0x198/0x250 [ 956.653714][T24068] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 956.653741][T24068] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 956.653760][T24068] do_syscall_64+0x174/0x580 [ 956.653781][T24068] ? trace_irq_disable+0x3b/0x140 [ 956.653802][T24068] ? clear_bhb_loop+0x70/0xc0 [ 956.653824][T24068] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 956.653842][T24068] RIP: 0033:0x7f6f9bd9e0d9 [ 956.653859][T24068] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 956.653874][T24068] RSP: 002b:00007f6f9cba2028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 956.653893][T24068] RAX: ffffffffffffffda RBX: 00007f6f9c025fa0 RCX: 00007f6f9bd9e0d9 [ 956.653907][T24068] RDX: 0000000000000002 RSI: 0000200000000b00 RDI: 0000000000000003 [ 956.653923][T24068] RBP: 00007f6f9cba2090 R08: 0000000000000000 R09: 0000000000000000 [ 956.653934][T24068] R10: 0000000000000020 R11: 0000000000000246 R12: 0000000000000001 [ 956.653944][T24068] R13: 00007f6f9c026038 R14: 00007f6f9c025fa0 R15: 00007fffaff649f8 [ 956.653974][T24068] [ 957.047855][T24079] netlink: 'syz.3.5653': attribute type 21 has an invalid length. [ 957.088336][T24069] bond10: entered promiscuous mode [ 957.106292][T24069] 8021q: adding VLAN 0 to HW filter on device bond10 [ 957.163380][T24074] bond10: (slave bridge0): making interface the new active one [ 957.207808][T24074] bridge0: entered promiscuous mode [ 957.217039][ C0] Dropped outbound packet type=88ca [ 957.278024][T24074] bond10: (slave bridge0): Enslaving as an active interface with an up link [ 957.346413][T24079] __nla_validate_parse: 3 callbacks suppressed [ 957.346433][T24079] netlink: 156 bytes leftover after parsing attributes in process `syz.3.5653'. [ 957.347527][T24086] netlink: 124 bytes leftover after parsing attributes in process `syz.0.5655'. [ 957.546985][T24088] tipc: Started in network mode [ 957.583270][T24088] tipc: Node identity 00002d003a2d003a0040ffffe0000001, cluster identity 4711 [ 957.626964][T24088] tipc: Enabling of bearer rejected, failed to enable media [ 957.657635][T24093] netlink: 576 bytes leftover after parsing attributes in process `syz.4.5657'. [ 958.256869][ C0] Dropped outbound packet type=88ca [ 958.709409][T24123] netlink: 236 bytes leftover after parsing attributes in process `syz.4.5668'. [ 958.729033][T24122] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5667'. [ 958.764753][T24123] netlink: 236 bytes leftover after parsing attributes in process `syz.4.5668'. [ 959.296889][ C0] Dropped outbound packet type=88ca [ 959.575028][T24139] FAULT_INJECTION: forcing a failure. [ 959.575028][T24139] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 959.624694][T24139] CPU: 0 UID: 0 PID: 24139 Comm: syz.4.5673 Not tainted syzkaller #0 PREEMPT(full) [ 959.624722][T24139] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 959.624733][T24139] Call Trace: [ 959.624741][T24139] [ 959.624750][T24139] dump_stack_lvl+0xe8/0x150 [ 959.624780][T24139] should_fail_ex+0x40c/0x560 [ 959.624804][T24139] _copy_from_user+0x2d/0xb0 [ 959.624829][T24139] ___sys_recvmsg+0x173/0x5a0 [ 959.624855][T24139] ? __pfx____sys_recvmsg+0x10/0x10 [ 959.624879][T24139] ? __fget_files+0x2a/0x420 [ 959.624930][T24139] do_recvmmsg+0x31a/0x7f0 [ 959.624958][T24139] ? __pfx_do_recvmmsg+0x10/0x10 [ 959.624988][T24139] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 959.625013][T24139] ? __fget_files+0x3a2/0x420 [ 959.625043][T24139] __x64_sys_recvmmsg+0x198/0x250 [ 959.625064][T24139] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 959.625089][T24139] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 959.625107][T24139] do_syscall_64+0x174/0x580 [ 959.625127][T24139] ? trace_irq_disable+0x3b/0x140 [ 959.625148][T24139] ? clear_bhb_loop+0x70/0xc0 [ 959.625170][T24139] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 959.625186][T24139] RIP: 0033:0x7f2eba39e0d9 [ 959.625203][T24139] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 959.625217][T24139] RSP: 002b:00007f2ebb281028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 959.625238][T24139] RAX: ffffffffffffffda RBX: 00007f2eba625fa0 RCX: 00007f2eba39e0d9 [ 959.625251][T24139] RDX: 000000000000005b RSI: 00002000000021c0 RDI: 0000000000000003 [ 959.625263][T24139] RBP: 00007f2ebb281090 R08: 0000000000000000 R09: 0000000000000000 [ 959.625275][T24139] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000002 [ 959.625293][T24139] R13: 00007f2eba626038 R14: 00007f2eba625fa0 R15: 00007ffe29bb6888 [ 959.625323][T24139] [ 960.110083][T24148] netlink: 104 bytes leftover after parsing attributes in process `syz.5.5677'. [ 960.147537][T24150] netlink: 248 bytes leftover after parsing attributes in process `syz.4.5676'. [ 960.336942][ C0] Dropped outbound packet type=88ca [ 960.870734][T24173] tipc: Enabling of bearer rejected, failed to enable media [ 961.159337][T24182] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5686'. [ 961.356201][T24171] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5682'. [ 961.376704][ C0] Dropped outbound packet type=88ca [ 962.258237][T24208] netlink: 'syz.0.5693': attribute type 5 has an invalid length. [ 962.325581][T24211] netlink: 'syz.2.5696': attribute type 1 has an invalid length. [ 962.416709][ C0] Dropped outbound packet type=88ca [ 962.567523][T24211] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 962.819154][T24229] netlink: 'syz.3.5701': attribute type 9 has an invalid length. [ 963.224797][T24241] x_tables: duplicate underflow at hook 3 [ 963.456712][ C0] Dropped outbound packet type=88ca [ 963.597855][T24255] netlink: 'syz.4.5709': attribute type 1 has an invalid length. [ 964.288483][T24242] __nla_validate_parse: 5 callbacks suppressed [ 964.288504][T24242] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5705'. [ 964.496709][ C0] Dropped outbound packet type=88ca [ 965.536753][ C0] Dropped outbound packet type=88ca [ 966.195375][T24244] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 966.551832][T24273] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5714'. [ 966.576709][ C0] Dropped outbound packet type=88ca [ 966.612013][T24275] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5715'. [ 967.369381][T24286] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5720'. [ 967.616708][ C0] Dropped outbound packet type=88ca [ 967.760194][T24297] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5724'. [ 967.836031][T24302] netlink: 256 bytes leftover after parsing attributes in process `syz.4.5726'. [ 968.075610][T24313] xt_TCPMSS: Only works on TCP SYN packets [ 968.111552][T24313] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5728'. [ 968.145256][T24312] netlink: 'syz.3.5729': attribute type 1 has an invalid length. [ 968.157326][T24313] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5728'. [ 968.216219][T24312] netlink: 224 bytes leftover after parsing attributes in process `syz.3.5729'. [ 968.656793][ C0] Dropped outbound packet type=88ca [ 969.156206][T24335] bond0 (unregistering): Released all slaves [ 969.696719][ C0] Dropped outbound packet type=88ca [ 970.166343][T24373] gtp1: entered promiscuous mode [ 970.191327][T24373] gtp1: entered allmulticast mode [ 970.697487][T24386] bond11: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 970.736708][ C0] Dropped outbound packet type=88ca [ 970.831957][T24386] bond11 (unregistering): Released all slaves [ 970.903898][T24394] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5749'. [ 970.941512][T24398] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5751'. [ 971.257217][T24407] netlink: 'syz.3.5754': attribute type 10 has an invalid length. [ 971.654415][T24411] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5756'. [ 971.697267][T24411] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5756'. [ 971.730659][T24411] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5756'. [ 971.764646][T24418] netlink: 220 bytes leftover after parsing attributes in process `syz.2.5758'. [ 971.777379][ C0] Dropped outbound packet type=88ca [ 971.796856][T24411] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5756'. [ 971.856132][T24420] openvswitch: netlink: Tunnel attr 4 has unexpected len 0 expected 1 [ 972.051087][T24427] netlink: 'syz.3.5760': attribute type 1 has an invalid length. [ 972.324284][T24427] bond13: entered promiscuous mode [ 972.350837][T24427] bond13: entered allmulticast mode [ 972.376025][T24427] 8021q: adding VLAN 0 to HW filter on device bond13 [ 972.465189][T24428] erspan2: entered allmulticast mode [ 972.532136][T24428] bond13: (slave erspan2): making interface the new active one [ 972.591040][T24428] erspan2: entered promiscuous mode [ 972.640582][T24428] bond13: (slave erspan2): Enslaving as an active interface with an up link [ 972.816729][ C0] Dropped outbound packet type=88ca [ 972.954796][T24438] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5764'. [ 973.031108][T24441] netlink: 'syz.3.5765': attribute type 9 has an invalid length. [ 973.397809][T24436] bond0 (unregistering): (slave lo): Releasing backup interface [ 973.478897][T24436] bond0 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 973.558039][T24436] bond0 (unregistering): Released all slaves [ 973.856707][ C0] Dropped outbound packet type=88ca [ 974.633454][T24464] openvswitch: netlink: Key type 2054 is out of range max 32 [ 974.680950][T24461] netlink: 'syz.3.5773': attribute type 12 has an invalid length. [ 974.808368][T24461] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5773'. [ 974.896706][ C0] Dropped outbound packet type=88ca [ 975.387898][T24476] netlink: 14 bytes leftover after parsing attributes in process `syz.0.5778'. [ 975.440091][T24479] team0: No ports can be present during mode change [ 975.936736][ C0] Dropped outbound packet type=88ca [ 976.089014][T24494] syzkaller0: entered promiscuous mode [ 976.102412][T24494] syzkaller0: entered allmulticast mode [ 976.132317][T24494] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5783'. [ 976.976715][ C0] Dropped outbound packet type=88ca [ 976.997160][T24500] Cannot find set identified by id 14337 to match [ 977.203586][T24507] netlink: 44 bytes leftover after parsing attributes in process `syz.3.5788'. [ 977.843750][T24515] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5790'. [ 978.016711][ C0] Dropped outbound packet type=88ca [ 978.630616][T24531] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode [ 978.707441][T24531] mac80211_hwsim hwsim8 wlan0: left allmulticast mode [ 978.729752][T24534] nft_compat: unsupported protocol 0 [ 978.780713][T24531] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5797'. [ 978.897799][T24538] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5799'. [ 978.952848][T24534] gretap5: entered promiscuous mode [ 979.011190][T24534] batman_adv: batadv0: Adding interface: gretap5 [ 979.056789][T24534] batman_adv: batadv0: The MTU of interface gretap5 is too small (1462) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1532. [ 979.056832][ C0] Dropped outbound packet type=88ca [ 979.168301][T24534] batman_adv: batadv0: Not using interface gretap5 (retrying later): interface not active [ 980.096707][ C0] Dropped outbound packet type=88ca [ 980.740119][T24558] veth5: entered allmulticast mode [ 981.134471][T24572] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 981.136726][ C0] Dropped outbound packet type=88ca [ 981.416466][T24583] netlink: 32 bytes leftover after parsing attributes in process `syz.5.5816'. [ 982.176788][ C0] Dropped outbound packet type=88ca [ 982.636937][T24591] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5814'. [ 982.761158][T24595] netlink: 'syz.0.5817': attribute type 5 has an invalid length. [ 983.111806][T24603] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5820'. [ 983.123996][T24600] netlink: 'syz.2.5819': attribute type 2 has an invalid length. [ 983.153556][T24600] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5819'. [ 983.167188][T24603] macvlan0: left allmulticast mode [ 983.198274][T24603] netlink: 'syz.5.5820': attribute type 1 has an invalid length. [ 983.216724][ C0] Dropped outbound packet type=88ca [ 983.224470][T24603] netlink: 'syz.5.5820': attribute type 2 has an invalid length. [ 983.256578][T24600] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5819'. [ 984.256707][ C0] Dropped outbound packet type=88ca [ 984.271711][T24621] ip6gre0 speed is unknown, defaulting to 1000 [ 984.285256][T24626] netlink: ct family unspecified [ 984.354877][T24627] syzkaller0: entered promiscuous mode [ 984.370785][T24627] syzkaller0: entered allmulticast mode [ 984.440672][T24633] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5830'. [ 985.296726][ C0] Dropped outbound packet type=88ca [ 985.411891][T24621] lo speed is unknown, defaulting to 1000 [ 985.809425][T24654] netlink: 'syz.0.5837': attribute type 64 has an invalid length. [ 986.326380][T24663] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5840'. [ 986.336702][ C0] Dropped outbound packet type=88ca [ 986.643960][T24669] netlink: 2 bytes leftover after parsing attributes in process `syz.0.5842'. [ 987.029883][T24679] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5845'. [ 987.376712][ C0] Dropped outbound packet type=88ca [ 987.755480][T24690] netlink: 'syz.2.5847': attribute type 3 has an invalid length. [ 988.133122][T24696] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 988.144934][T24696] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 988.159645][T24696] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 988.170669][T24696] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 988.416731][ C0] Dropped outbound packet type=88ca [ 988.494522][T24696] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 989.061106][T24707] netlink: 'syz.2.5853': attribute type 1 has an invalid length. [ 989.456709][ C0] Dropped outbound packet type=88ca [ 989.476106][T24718] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5855'. [ 989.489369][T24719] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5854'. [ 989.632280][T24695] ip6gre0 speed is unknown, defaulting to 1000 [ 989.704906][T24722] sctp: [Deprecated]: syz.2.5856 (pid 24722) Use of int in maxseg socket option. [ 989.704906][T24722] Use struct sctp_assoc_value instead [ 989.943789][T24680] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 990.427033][T24735] netlink: 27 bytes leftover after parsing attributes in process `syz.3.5859'. [ 990.496713][ C0] Dropped outbound packet type=88ca [ 990.558183][T24740] netlink: 'syz.5.5863': attribute type 4 has an invalid length. [ 990.577867][ T50] Bluetooth: hci2: command tx timeout [ 990.610663][T24743] netlink: 'syz.5.5863': attribute type 4 has an invalid length. [ 990.885164][T24747] netlink: 'syz.0.5865': attribute type 4 has an invalid length. [ 991.013521][T24695] lo speed is unknown, defaulting to 1000 [ 991.536816][ C0] Dropped outbound packet type=88ca [ 992.374069][T24780] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5877'. [ 992.492757][T24786] tipc: Enabling of bearer rejected, failed to enable media [ 992.576707][ C0] Dropped outbound packet type=88ca [ 992.656889][ T50] Bluetooth: hci2: command tx timeout [ 992.799540][T24793] netlink: 64 bytes leftover after parsing attributes in process `syz.3.5881'. [ 993.060431][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.616707][ C0] Dropped outbound packet type=88ca [ 993.639006][T24812] x_tables: duplicate underflow at hook 2 [ 994.025196][T24821] ÿÿÿÿÿÿ: renamed from vlan1 [ 994.656714][ C0] Dropped outbound packet type=88ca [ 994.738974][ T50] Bluetooth: hci2: command tx timeout [ 994.864425][T24695] bridge0: port 1(bridge_slave_0) entered blocking state [ 994.887462][T24695] bridge0: port 1(bridge_slave_0) entered disabled state [ 994.907040][T24695] bridge_slave_0: entered allmulticast mode [ 994.915619][T24695] bridge_slave_0: entered promiscuous mode [ 994.948429][T24695] bridge0: port 2(bridge_slave_1) entered blocking state [ 994.972080][T24695] bridge0: port 2(bridge_slave_1) entered disabled state [ 994.998450][T24695] bridge_slave_1: entered allmulticast mode [ 995.025383][T24695] bridge_slave_1: entered promiscuous mode [ 995.338776][T24695] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 995.393399][T24695] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 995.678465][T24695] team0: Port device team_slave_0 added [ 995.696778][ C0] Dropped outbound packet type=88ca [ 995.744205][T24695] team0: Port device team_slave_1 added [ 996.065226][T24695] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 996.108839][T24695] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 996.250614][T24695] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 996.314473][T24695] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 996.419538][T24695] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 996.688071][T24881] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 996.711651][T24695] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 996.736712][ C0] Dropped outbound packet type=88ca [ 996.817055][ T50] Bluetooth: hci2: command tx timeout [ 997.127878][T24695] hsr_slave_0: entered promiscuous mode [ 997.154304][T24695] hsr_slave_1: entered promiscuous mode [ 997.182895][T24695] debugfs: 'hsr0' already exists in 'hsr' [ 997.216693][T24695] Cannot create hsr debugfs directory [ 997.776717][ C0] Dropped outbound packet type=88ca [ 998.466265][T24937] bond14: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 998.603482][T24937] bond14 (unregistering): Released all slaves [ 998.816720][ C0] Dropped outbound packet type=88ca [ 999.030604][T24961] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5935'. [ 999.856706][ C0] Dropped outbound packet type=88ca [ 1000.010567][T24979] FAULT_INJECTION: forcing a failure. [ 1000.010567][T24979] name failslab, interval 1, probability 0, space 0, times 0 [ 1000.069220][T24979] CPU: 0 UID: 0 PID: 24979 Comm: syz.5.5942 Not tainted syzkaller #0 PREEMPT(full) [ 1000.069248][T24979] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1000.069260][T24979] Call Trace: [ 1000.069267][T24979] [ 1000.069276][T24979] dump_stack_lvl+0xe8/0x150 [ 1000.069307][T24979] should_fail_ex+0x40c/0x560 [ 1000.069333][T24979] should_failslab+0xa8/0x100 [ 1000.069360][T24979] kmem_cache_alloc_node_noprof+0xb3/0x610 [ 1000.069380][T24979] ? local_lock_release+0x9c/0x160 [ 1000.069407][T24979] ? __alloc_skb+0x1d7/0x7a0 [ 1000.069429][T24979] ? __alloc_skb+0x1d7/0x7a0 [ 1000.069459][T24979] __alloc_skb+0x1d7/0x7a0 [ 1000.069488][T24979] ovs_ct_limit_cmd_del+0x100/0x760 [ 1000.069516][T24979] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 1000.069542][T24979] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 1000.069575][T24979] genl_family_rcv_msg_doit+0x233/0x340 [ 1000.069606][T24979] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1000.069643][T24979] ? bpf_lsm_capable+0x9/0x20 [ 1000.069665][T24979] ? security_capable+0x7e/0x2c0 [ 1000.069699][T24979] genl_rcv_msg+0x614/0x7a0 [ 1000.069728][T24979] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1000.069750][T24979] ? __pfx_ovs_ct_limit_cmd_del+0x10/0x10 [ 1000.069788][T24979] netlink_rcv_skb+0x226/0x4a0 [ 1000.069809][T24979] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1000.069833][T24979] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1000.069866][T24979] ? down_read+0x2be/0x330 [ 1000.069895][T24979] genl_rcv+0x28/0x40 [ 1000.069922][T24979] netlink_unicast+0x7bb/0x940 [ 1000.069960][T24979] netlink_sendmsg+0x813/0xb40 [ 1000.069988][T24979] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1000.070012][T24979] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1000.070043][T24979] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1000.070061][T24979] sock_sendmsg_nosec+0x13a/0x180 [ 1000.070086][T24979] ____sys_sendmsg+0x54e/0x850 [ 1000.070113][T24979] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1000.070141][T24979] ? import_iovec+0x73/0xa0 [ 1000.070168][T24979] ___sys_sendmsg+0x2a5/0x360 [ 1000.070185][T24979] ? __lock_acquire+0x683/0x2cf0 [ 1000.070212][T24979] ? __pfx____sys_sendmsg+0x10/0x10 [ 1000.070267][T24979] ? __fget_files+0x2a/0x420 [ 1000.070288][T24979] ? __fget_files+0x3a2/0x420 [ 1000.070320][T24979] __x64_sys_sendmsg+0x1b1/0x290 [ 1000.070342][T24979] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1000.070379][T24979] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1000.070399][T24979] do_syscall_64+0x174/0x580 [ 1000.070419][T24979] ? trace_irq_disable+0x3b/0x140 [ 1000.070440][T24979] ? clear_bhb_loop+0x70/0xc0 [ 1000.070462][T24979] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1000.070481][T24979] RIP: 0033:0x7fad33b9e0d9 [ 1000.070498][T24979] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1000.070514][T24979] RSP: 002b:00007fad31df6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1000.070534][T24979] RAX: ffffffffffffffda RBX: 00007fad33e25fa0 RCX: 00007fad33b9e0d9 [ 1000.070548][T24979] RDX: 0000000004008094 RSI: 00002000000002c0 RDI: 0000000000000003 [ 1000.070559][T24979] RBP: 00007fad31df6090 R08: 0000000000000000 R09: 0000000000000000 [ 1000.070571][T24979] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1000.070582][T24979] R13: 00007fad33e26038 R14: 00007fad33e25fa0 R15: 00007fff0d396ec8 [ 1000.070614][T24979] [ 1000.536222][T24984] netlink: 'syz.0.5940': attribute type 3 has an invalid length. [ 1000.635591][T24985] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5943'. [ 1000.761967][T24985] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5943'. [ 1000.820638][T24695] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1000.896706][ C0] Dropped outbound packet type=88ca [ 1000.915027][T24695] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1000.967207][T24989] xt_hashlimit: size too large, truncated to 1048576 [ 1000.990844][T24695] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1001.001684][T24991] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5945'. [ 1001.030616][T24993] xt_hashlimit: size too large, truncated to 1048576 [ 1001.067806][T24695] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1001.105545][T24695] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1001.187477][T24695] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1001.297266][T24695] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1001.363938][T24695] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1001.808858][T25015] syzkaller1: entered promiscuous mode [ 1001.816167][T25015] syzkaller1: entered allmulticast mode [ 1001.848046][T25015] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1001.936750][ C0] Dropped outbound packet type=88ca [ 1001.967761][T24695] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1002.456053][T24695] 8021q: adding VLAN 0 to HW filter on device team0 [ 1002.522236][T15360] bridge0: port 1(bridge_slave_0) entered blocking state [ 1002.529464][T15360] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1002.642300][T25031] pimreg3: entered allmulticast mode [ 1002.691636][T15360] bridge0: port 2(bridge_slave_1) entered blocking state [ 1002.698858][T15360] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1002.787995][T25038] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5960'. [ 1002.819744][T25038] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5960'. [ 1002.870054][T18689] IPVS: starting estimator thread 0... [ 1002.917114][T25042] FAULT_INJECTION: forcing a failure. [ 1002.917114][T25042] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1002.976956][ C0] Dropped outbound packet type=88ca [ 1002.978898][T25041] IPVS: using max 37 ests per chain, 88800 per kthread [ 1002.996827][T25042] CPU: 0 UID: 0 PID: 25042 Comm: syz.0.5961 Not tainted syzkaller #0 PREEMPT(full) [ 1002.996854][T25042] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1002.996865][T25042] Call Trace: [ 1002.996873][T25042] [ 1002.996881][T25042] dump_stack_lvl+0xe8/0x150 [ 1002.996913][T25042] should_fail_ex+0x40c/0x560 [ 1002.996938][T25042] _copy_from_user+0x2d/0xb0 [ 1002.996959][T25042] ___sys_recvmsg+0x173/0x5a0 [ 1002.996981][T25042] ? __pfx____sys_recvmsg+0x10/0x10 [ 1002.997000][T25042] ? __fget_files+0x2a/0x420 [ 1002.997047][T25042] do_recvmmsg+0x31a/0x7f0 [ 1002.997072][T25042] ? __pfx_do_recvmmsg+0x10/0x10 [ 1002.997099][T25042] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1002.997120][T25042] ? __fget_files+0x3a2/0x420 [ 1002.997147][T25042] __x64_sys_recvmmsg+0x198/0x250 [ 1002.997167][T25042] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1002.997193][T25042] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1002.997210][T25042] do_syscall_64+0x174/0x580 [ 1002.997228][T25042] ? trace_irq_disable+0x3b/0x140 [ 1002.997249][T25042] ? clear_bhb_loop+0x70/0xc0 [ 1002.997270][T25042] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1002.997288][T25042] RIP: 0033:0x7f6f9bd9e0d9 [ 1002.997305][T25042] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1002.997319][T25042] RSP: 002b:00007f6f9cba2028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1002.997338][T25042] RAX: ffffffffffffffda RBX: 00007f6f9c025fa0 RCX: 00007f6f9bd9e0d9 [ 1002.997349][T25042] RDX: 000000000000005b RSI: 00002000000021c0 RDI: 0000000000000003 [ 1002.997360][T25042] RBP: 00007f6f9cba2090 R08: 0000000000000000 R09: 0000000000000000 [ 1002.997369][T25042] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000002 [ 1002.997379][T25042] R13: 00007f6f9c026038 R14: 00007f6f9c025fa0 R15: 00007fffaff649f8 [ 1002.997409][T25042] [ 1003.088880][T25047] netlink: 'syz.2.5963': attribute type 2 has an invalid length. [ 1003.241932][T25047] netlink: 'syz.2.5963': attribute type 2 has an invalid length. [ 1003.301983][ T975] tipc: Subscription rejected, illegal request [ 1003.560195][T25050] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1004.016748][ C0] Dropped outbound packet type=88ca [ 1004.235239][T25071] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5970'. [ 1005.056773][ C0] Dropped outbound packet type=88ca [ 1005.134272][T25078] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1005.294204][T25084] netlink: 'syz.2.5972': attribute type 12 has an invalid length. [ 1005.415952][T25078] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1005.894084][T25103] FAULT_INJECTION: forcing a failure. [ 1005.894084][T25103] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1005.945885][T25103] CPU: 0 UID: 0 PID: 25103 Comm: syz.0.5977 Not tainted syzkaller #0 PREEMPT(full) [ 1005.945909][T25103] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1005.945920][T25103] Call Trace: [ 1005.945927][T25103] [ 1005.945936][T25103] dump_stack_lvl+0xe8/0x150 [ 1005.945964][T25103] should_fail_ex+0x40c/0x560 [ 1005.945986][T25103] _copy_to_user+0x31/0xb0 [ 1005.946009][T25103] simple_read_from_buffer+0xe1/0x170 [ 1005.946034][T25103] proc_fail_nth_read+0x1bb/0x230 [ 1005.946060][T25103] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1005.946083][T25103] ? rw_verify_area+0x24a/0x4c0 [ 1005.946109][T25103] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1005.946129][T25103] vfs_read+0x213/0xa80 [ 1005.946156][T25103] ? __pfx___mutex_lock+0x10/0x10 [ 1005.946178][T25103] ? __pfx_vfs_read+0x10/0x10 [ 1005.946203][T25103] ? __fget_files+0x2a/0x420 [ 1005.946238][T25103] ? __fget_files+0x3a2/0x420 [ 1005.946258][T25103] ? __fget_files+0x2a/0x420 [ 1005.946285][T25103] ksys_read+0x150/0x270 [ 1005.946310][T25103] ? __pfx_ksys_read+0x10/0x10 [ 1005.946341][T25103] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1005.946360][T25103] do_syscall_64+0x174/0x580 [ 1005.946379][T25103] ? trace_irq_disable+0x3b/0x140 [ 1005.946400][T25103] ? clear_bhb_loop+0x70/0xc0 [ 1005.946421][T25103] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1005.946438][T25103] RIP: 0033:0x7f6f9bd5e90e [ 1005.946455][T25103] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1005.946469][T25103] RSP: 002b:00007f6f9cba1fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1005.946488][T25103] RAX: ffffffffffffffda RBX: 00007f6f9cba26c0 RCX: 00007f6f9bd5e90e [ 1005.946501][T25103] RDX: 000000000000000f RSI: 00007f6f9cba20a0 RDI: 0000000000000004 [ 1005.946511][T25103] RBP: 00007f6f9cba2090 R08: 0000000000000000 R09: 0000000000000000 [ 1005.946521][T25103] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1005.946531][T25103] R13: 00007f6f9c026038 R14: 00007f6f9c025fa0 R15: 00007fffaff649f8 [ 1005.946561][T25103] [ 1006.151279][ C0] Dropped outbound packet type=88ca [ 1006.279310][T25110] FAULT_INJECTION: forcing a failure. [ 1006.279310][T25110] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1006.352694][T25110] CPU: 1 UID: 0 PID: 25110 Comm: syz.3.5980 Not tainted syzkaller #0 PREEMPT(full) [ 1006.352731][T25110] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1006.352743][T25110] Call Trace: [ 1006.352751][T25110] [ 1006.352760][T25110] dump_stack_lvl+0xe8/0x150 [ 1006.352792][T25110] should_fail_ex+0x40c/0x560 [ 1006.352816][T25110] _copy_from_user+0x2d/0xb0 [ 1006.352842][T25110] ___sys_recvmsg+0x173/0x5a0 [ 1006.352868][T25110] ? __pfx____sys_recvmsg+0x10/0x10 [ 1006.352891][T25110] ? __fget_files+0x2a/0x420 [ 1006.352944][T25110] do_recvmmsg+0x31a/0x7f0 [ 1006.352970][T25110] ? __pfx_do_recvmmsg+0x10/0x10 [ 1006.353001][T25110] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1006.353025][T25110] ? __fget_files+0x3a2/0x420 [ 1006.353057][T25110] __x64_sys_recvmmsg+0x198/0x250 [ 1006.353079][T25110] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1006.353106][T25110] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1006.353126][T25110] do_syscall_64+0x174/0x580 [ 1006.353147][T25110] ? trace_irq_disable+0x3b/0x140 [ 1006.353168][T25110] ? clear_bhb_loop+0x70/0xc0 [ 1006.353190][T25110] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1006.353208][T25110] RIP: 0033:0x7ff8e3d9e0d9 [ 1006.353225][T25110] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1006.353239][T25110] RSP: 002b:00007ff8e4c4d028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1006.353259][T25110] RAX: ffffffffffffffda RBX: 00007ff8e4025fa0 RCX: 00007ff8e3d9e0d9 [ 1006.353271][T25110] RDX: 000000000000005b RSI: 00002000000021c0 RDI: 0000000000000003 [ 1006.353283][T25110] RBP: 00007ff8e4c4d090 R08: 0000000000000000 R09: 0000000000000000 [ 1006.353295][T25110] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000002 [ 1006.353305][T25110] R13: 00007ff8e4026038 R14: 00007ff8e4025fa0 R15: 00007ffdf2d4b368 [ 1006.353335][T25110] [ 1007.145634][T25118] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5983'. [ 1007.216721][ C0] Dropped outbound packet type=88ca [ 1007.352032][T24695] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1007.961340][T25141] netlink: 'syz.0.5989': attribute type 1 has an invalid length. [ 1008.013658][T25141] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5989'. [ 1008.256712][ C0] Dropped outbound packet type=88ca [ 1008.342415][T25151] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5991'. [ 1008.391887][T25153] FAULT_INJECTION: forcing a failure. [ 1008.391887][T25153] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1008.459440][T25153] CPU: 0 UID: 0 PID: 25153 Comm: syz.5.5992 Not tainted syzkaller #0 PREEMPT(full) [ 1008.459488][T25153] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1008.459512][T25153] Call Trace: [ 1008.459520][T25153] [ 1008.459528][T25153] dump_stack_lvl+0xe8/0x150 [ 1008.459565][T25153] should_fail_ex+0x40c/0x560 [ 1008.459592][T25153] _copy_from_user+0x2d/0xb0 [ 1008.459616][T25153] ___sys_recvmsg+0x173/0x5a0 [ 1008.459643][T25153] ? __pfx____sys_recvmsg+0x10/0x10 [ 1008.459666][T25153] ? __fget_files+0x2a/0x420 [ 1008.459716][T25153] do_recvmmsg+0x31a/0x7f0 [ 1008.459742][T25153] ? __pfx_do_recvmmsg+0x10/0x10 [ 1008.459772][T25153] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1008.459798][T25153] ? __fget_files+0x3a2/0x420 [ 1008.459829][T25153] __x64_sys_recvmmsg+0x198/0x250 [ 1008.459850][T25153] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1008.459877][T25153] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1008.459897][T25153] do_syscall_64+0x174/0x580 [ 1008.459916][T25153] ? trace_irq_disable+0x3b/0x140 [ 1008.459940][T25153] ? clear_bhb_loop+0x70/0xc0 [ 1008.459961][T25153] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1008.459978][T25153] RIP: 0033:0x7fad33b9e0d9 [ 1008.459995][T25153] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1008.460009][T25153] RSP: 002b:00007fad31df6028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1008.460028][T25153] RAX: ffffffffffffffda RBX: 00007fad33e25fa0 RCX: 00007fad33b9e0d9 [ 1008.460042][T25153] RDX: 000000000000005b RSI: 00002000000021c0 RDI: 0000000000000003 [ 1008.460054][T25153] RBP: 00007fad31df6090 R08: 0000000000000000 R09: 0000000000000000 [ 1008.460065][T25153] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000002 [ 1008.460075][T25153] R13: 00007fad33e26038 R14: 00007fad33e25fa0 R15: 00007fff0d396ec8 [ 1008.460105][T25153] [ 1009.296805][ C0] Dropped outbound packet type=88ca [ 1009.609430][T24695] veth0_vlan: entered promiscuous mode [ 1009.693314][T24695] veth1_vlan: entered promiscuous mode [ 1009.748816][T25165] netlink: 36 bytes leftover after parsing attributes in process `syz.5.5996'. [ 1010.117697][T24695] veth0_macvtap: entered promiscuous mode [ 1010.201740][T24695] veth1_macvtap: entered promiscuous mode [ 1010.240232][T25174] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6000'. [ 1010.336580][T24695] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1010.344380][ C0] Dropped outbound packet type=88ca [ 1010.409206][T24695] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1010.828068][T15360] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1010.915868][T15360] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1011.048912][T15360] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1011.179056][T25185] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6002'. [ 1011.376826][ C0] Dropped outbound packet type=88ca [ 1011.428377][T23406] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1011.788011][T23406] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1011.871309][T23406] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1012.090149][T20123] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1012.136793][T20123] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1012.417059][ C0] Dropped outbound packet type=88ca [ 1013.076517][T25223] block nbd2: NBD_DISCONNECT [ 1013.456707][ C0] Dropped outbound packet type=88ca [ 1014.496780][ C0] Dropped outbound packet type=88ca [ 1015.536713][ C0] Dropped outbound packet type=88ca [ 1016.576708][ C0] Dropped outbound packet type=88ca [ 1017.616825][ C0] Dropped outbound packet type=88ca [ 1018.664651][ C0] Dropped outbound packet type=88ca [ 1019.696787][ C0] Dropped outbound packet type=88ca [ 1020.736732][ C0] Dropped outbound packet type=88ca [ 1021.776787][ C0] Dropped outbound packet type=88ca [ 1022.816823][ C0] Dropped outbound packet type=88ca [ 1023.434044][T25244] netlink: 'syz.6.5849': attribute type 12 has an invalid length. [ 1023.856776][ C0] Dropped outbound packet type=88ca [ 1023.977183][T25255] syzkaller0: entered promiscuous mode [ 1024.015395][T25255] syzkaller0: entered allmulticast mode [ 1024.167493][T25261] netlink: 'syz.2.6029': attribute type 2 has an invalid length. [ 1024.240387][T24696] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1024.252710][T24696] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1024.277693][T24696] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1024.293770][T25261] netlink: 'syz.2.6029': attribute type 2 has an invalid length. [ 1024.307426][T24696] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1024.324844][T24696] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1024.896815][ C0] Dropped outbound packet type=88ca [ 1025.936816][ C0] Dropped outbound packet type=88ca [ 1026.417106][ T50] Bluetooth: hci6: command tx timeout [ 1026.551455][T25259] ip6gre0 speed is unknown, defaulting to 1000 [ 1026.977118][ C0] Dropped outbound packet type=88ca [ 1027.968409][ T975] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1028.017828][ C0] Dropped outbound packet type=88ca [ 1028.144591][T25259] lo speed is unknown, defaulting to 1000 [ 1028.157047][T15371] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1028.282072][T15371] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1028.428954][T15371] netdevsim netdevsim0 eth4: set [1, 0] type 2 family 0 port 6081 - 0 [ 1028.496962][ T50] Bluetooth: hci6: command tx timeout [ 1028.570519][ T134] veth0: left promiscuous mode [ 1028.596284][ T134] bridge0: port 4(veth0) entered disabled state [ 1028.719967][ T134] team0: left promiscuous mode [ 1028.755691][ T134] team_slave_0: left promiscuous mode [ 1028.786558][ T134] team_slave_1: left promiscuous mode [ 1028.819281][ T134] bridge2: left promiscuous mode [ 1028.876076][ T134] bridge0: port 3(team0) entered disabled state [ 1029.056720][ C0] Dropped outbound packet type=88ca [ 1029.108974][ T134] bridge_slave_1: left promiscuous mode [ 1029.166506][ T134] bridge0: port 2(bridge_slave_1) entered disabled state [ 1029.330819][ T134] bridge_slave_0: left promiscuous mode [ 1029.376391][ T134] bridge0: port 1(bridge_slave_0) entered disabled state [ 1030.096773][ C0] Dropped outbound packet type=88ca [ 1030.374449][ T134] pimreg3: left allmulticast mode [ 1030.576861][ T50] Bluetooth: hci6: command tx timeout [ 1031.136707][ C0] Dropped outbound packet type=88ca [ 1032.176717][ C0] Dropped outbound packet type=88ca [ 1032.657513][ T50] Bluetooth: hci6: command tx timeout [ 1033.216710][ C0] Dropped outbound packet type=88ca [ 1034.256723][ C0] Dropped outbound packet type=88ca [ 1034.284175][ T134] team0: Port device bridge2 removed [ 1034.638844][ T134] bond13 (unregistering): (slave bridge6): Releasing active interface [ 1034.854968][ T134] bond1 (unregistering): Released all slaves [ 1034.967925][ T134] bond2 (unregistering): Released all slaves [ 1035.069163][ T134] bond3 (unregistering): Released all slaves [ 1035.158496][ T134] bond4 (unregistering): Released all slaves [ 1035.254085][ T134] bond5 (unregistering): Released all slaves [ 1035.299993][ C0] Dropped outbound packet type=88ca [ 1035.357930][ T134] bond6 (unregistering): Released all slaves [ 1035.447781][ T134] bond7 (unregistering): Released all slaves [ 1035.557064][ T134] bond8 (unregistering): (slave veth0_to_bond): Releasing backup interface [ 1035.572946][ T134] bond8 (unregistering): Released all slaves [ 1035.668774][ T134] bond9 (unregistering): Released all slaves [ 1035.770989][ T134] bond10 (unregistering): Released all slaves [ 1035.860051][ T134] bond11 (unregistering): Released all slaves [ 1035.954691][ T134] bond12 (unregistering): Released all slaves [ 1036.047735][ T134] bond13 (unregistering): Released all slaves [ 1036.156956][ T134] bond14 (unregistering): Released all slaves [ 1036.265440][ T134] bond15 (unregistering): Released all slaves [ 1036.336713][ C0] Dropped outbound packet type=88ca [ 1036.450892][ T134] bond16 (unregistering): Released all slaves [ 1036.671684][ T5274] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1037.177014][ T134] ovs-system: left promiscuous mode [ 1037.376703][ C0] Dropped outbound packet type=88ca [ 1037.774553][T25410] syzkaller0: left allmulticast mode [ 1037.793422][T25417] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1037.803971][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1037.817595][ T134] tipc: Left network mode [ 1037.836672][T25417] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1037.981119][T25416] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1038.416715][ C0] Dropped outbound packet type=88ca [ 1038.469730][T25425] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6083'. [ 1038.618151][T25431] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6082'. [ 1038.757366][T25431] netlink: 60 bytes leftover after parsing attributes in process `syz.5.6082'. [ 1038.799157][T25431] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6082'. [ 1039.243600][T25426] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1039.457622][ C0] Dropped outbound packet type=88ca [ 1039.741248][T25451] lo: left allmulticast mode [ 1039.764891][T25451] tunl0: left allmulticast mode [ 1039.847805][T25451] gre0: left allmulticast mode [ 1039.907645][T25451] gretap0: left allmulticast mode [ 1039.939588][T25451] erspan0: left allmulticast mode [ 1039.954205][T25451] ip_vti0: left allmulticast mode [ 1039.964780][T25451] ip6_vti0: left allmulticast mode [ 1039.985804][T25451] sit0: left allmulticast mode [ 1040.008280][T25451] ip6tnl0: left allmulticast mode [ 1040.033089][T25451] ip6gre0: left allmulticast mode [ 1040.034393][T25464] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6090'. [ 1040.047600][T25451] ip6gretap0: left allmulticast mode [ 1040.049878][T25451] vcan0: left allmulticast mode [ 1040.081810][T25451] bond0: left allmulticast mode [ 1040.097563][T25464] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6090'. [ 1040.108528][T25451] dummy0: left allmulticast mode [ 1040.118628][T25464] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6090'. [ 1040.126371][T25451] nlmon0: left allmulticast mode [ 1040.139921][T25451] batadv0: left allmulticast mode [ 1040.145932][T25451] veth0: left allmulticast mode [ 1040.176565][T25451] veth1: left allmulticast mode [ 1040.202705][T25451] wg0: left allmulticast mode [ 1040.222874][T25451] wg1: left allmulticast mode [ 1040.241518][T25451] wg2: left allmulticast mode [ 1040.262714][T25451] veth0_to_bridge: left allmulticast mode [ 1040.283500][T25451] bridge_slave_0: left allmulticast mode [ 1040.293455][T25451] veth1_to_bridge: left allmulticast mode [ 1040.309509][T25451] bridge_slave_1: left allmulticast mode [ 1040.326365][T25451] veth0_to_bond: left allmulticast mode [ 1040.339355][T25451] bond_slave_0: left allmulticast mode [ 1040.357715][T25451] veth1_to_bond: left allmulticast mode [ 1040.370238][T25451] bond_slave_1: left allmulticast mode [ 1040.386953][T25451] veth0_to_team: left allmulticast mode [ 1040.404108][T25451] team_slave_0: left allmulticast mode [ 1040.427830][T25451] veth1_to_team: left allmulticast mode [ 1040.443358][T25451] team_slave_1: left allmulticast mode [ 1040.457712][T25451] veth0_to_batadv: left allmulticast mode [ 1040.477646][T25451] batadv_slave_0: left allmulticast mode [ 1040.491024][T25451] veth1_to_batadv: left allmulticast mode [ 1040.496888][ C0] Dropped outbound packet type=88ca [ 1040.527806][T25451] batadv_slave_1: left allmulticast mode [ 1040.535184][T25451] veth0_to_hsr: left allmulticast mode [ 1040.553504][T25451] veth1_to_hsr: left allmulticast mode [ 1040.568475][T25451] hsr0: left allmulticast mode [ 1040.573391][T25451] hsr_slave_0: left allmulticast mode [ 1040.597004][T25451] hsr_slave_1: left allmulticast mode [ 1040.605373][T25451] veth1_virt_wifi: left allmulticast mode [ 1040.619514][T25451] veth0_virt_wifi: left allmulticast mode [ 1040.633218][T25451] virt_wifi0: left allmulticast mode [ 1040.647770][T25451] geneve0: left allmulticast mode [ 1040.660103][T25451] geneve1: left allmulticast mode [ 1040.673504][T25451] netdevsim netdevsim3 : left allmulticast mode [ 1040.705226][T25451] netdevsim netdevsim3 netdevsim1: left allmulticast mode [ 1040.718053][T25451] netdevsim netdevsim3 netdevsim2: left allmulticast mode [ 1040.736520][T25451] netdevsim netdevsim3 netdevsim3: left allmulticast mode [ 1040.755068][T25451] mac80211_hwsim hwsim2 wlan0: left allmulticast mode [ 1040.777896][T25451] mac80211_hwsim hwsim3 wlan1: left allmulticast mode [ 1040.795857][T25451] erspan1: left allmulticast mode [ 1040.807749][T25451] ip6tnl1: left allmulticast mode [ 1040.813839][T25451] bond1: left allmulticast mode [ 1040.822250][T25451] @: left allmulticast mode [ 1040.837823][T25451] geneve2: left allmulticast mode [ 1040.857838][T25451] mac80211_hwsim hwsim12 wlan2: left allmulticast mode [ 1040.867663][T25451] vxlan0: left allmulticast mode [ 1040.880543][T25451] vlan2: left allmulticast mode [ 1040.885525][T25451] bond2: left allmulticast mode [ 1040.903722][T25451] geneve3: left allmulticast mode [ 1040.915932][T25451] mac80211_hwsim hwsim14 wlan3: left allmulticast mode [ 1040.936284][T25451] ipip0: left allmulticast mode [ 1040.955395][T25451] bond3: left allmulticast mode [ 1040.972588][T25451] : left allmulticast mode [ 1040.988049][T25451] bond4: left allmulticast mode [ 1041.001441][T25451] bridge1: left allmulticast mode [ 1041.018000][T25451] bond5: left allmulticast mode [ 1041.030320][T25451] ip6erspan0: left allmulticast mode [ 1041.046829][T25451] bridge2: left allmulticast mode [ 1041.057685][T25451] bond6: left allmulticast mode [ 1041.077671][T25451] gretap1: left allmulticast mode [ 1041.083746][T25451] vxlan1: left allmulticast mode [ 1041.097564][T25451] syztnl2: left allmulticast mode [ 1041.110492][T25451] bridge3: left allmulticast mode [ 1041.127409][T25451] gretap2: left allmulticast mode [ 1041.135643][T25451] : left allmulticast mode [ 1041.197766][T25451] ip6tnl2: left allmulticast mode [ 1041.206844][T25451] sit1: left allmulticast mode [ 1041.217731][T25451] macsec1: left allmulticast mode [ 1041.236033][T25451] sit2: left allmulticast mode [ 1041.264515][T25451] bond7: left allmulticast mode [ 1041.285562][T25451] bond8: left allmulticast mode [ 1041.304257][T25451] veth2: left allmulticast mode [ 1041.312654][T25451] veth3: left allmulticast mode [ 1041.327721][T25451] bond9: left allmulticast mode [ 1041.343949][T25451] geneve4: left allmulticast mode [ 1041.365200][T25451] bond10: left allmulticast mode [ 1041.386579][T25451] bond11: left allmulticast mode [ 1041.399360][T25451] bond12: left allmulticast mode [ 1041.416917][T25451] gretap3: left allmulticast mode [ 1041.424806][T25451] gtp0: left allmulticast mode [ 1041.437691][T25451] bridge4: left allmulticast mode [ 1041.454083][T25451] bridge5: left allmulticast mode [ 1041.474373][T25451] gretap4: left allmulticast mode [ 1041.505100][T25451] ip6gretap1: left allmulticast mode [ 1041.517636][T25451] nicvf0: left allmulticast mode [ 1041.530646][T25451] veth4: left allmulticast mode [ 1041.536710][ C0] Dropped outbound packet type=88ca [ 1041.543743][T25451] veth5: left allmulticast mode [ 1041.555551][T25451] ip6tnl3: left allmulticast mode [ 1041.572535][T25451] bridge6: left allmulticast mode [ 1041.587673][T25451] ip6_vti1: left allmulticast mode [ 1041.607655][T25451] mac80211_hwsim hwsim29 wlan4: left allmulticast mode [ 1041.625915][T25451] veth6: left allmulticast mode [ 1041.639088][T25451] veth7: left allmulticast mode [ 1041.660224][T25451] gtp1: left allmulticast mode [ 1041.677326][T25451] bond13: left allmulticast mode [ 1041.696843][T25451] erspan2: left allmulticast mode [ 1041.952292][ T5274] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1042.076894][T20124] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1042.385885][T20123] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1042.458969][T20123] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1042.576710][ C0] Dropped outbound packet type=88ca [ 1042.679851][T15371] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1042.700654][T25493] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6095'. [ 1042.795998][T25499] netlink: 'syz.3.6095': attribute type 2 has an invalid length. [ 1042.858056][T25499] netlink: 'syz.3.6095': attribute type 11 has an invalid length. [ 1042.979738][T25493] can: request_module (can-proto-0) failed. [ 1043.035373][T25499] netlink: 132 bytes leftover after parsing attributes in process `syz.3.6095'. [ 1043.161106][T25486] bond14: Unable to set down delay as MII monitoring is disabled [ 1043.250102][T25486] bond14 (unregistering): Released all slaves [ 1043.616743][ C0] Dropped outbound packet type=88ca [ 1043.976063][T25516] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6101'. [ 1044.078123][T25519] IPv6: NLM_F_CREATE should be specified when creating new route [ 1044.646607][T25259] bridge0: port 1(bridge_slave_0) entered blocking state [ 1044.656710][ C0] Dropped outbound packet type=88ca [ 1044.688591][T25259] bridge0: port 1(bridge_slave_0) entered disabled state [ 1044.743774][T25259] bridge_slave_0: entered allmulticast mode [ 1044.771683][T25259] bridge_slave_0: entered promiscuous mode [ 1044.796268][T25259] bridge0: port 2(bridge_slave_1) entered blocking state [ 1044.819660][T25259] bridge0: port 2(bridge_slave_1) entered disabled state [ 1044.850932][T25259] bridge_slave_1: entered allmulticast mode [ 1044.880528][T25259] bridge_slave_1: entered promiscuous mode [ 1045.696699][ C0] Dropped outbound packet type=88ca [ 1045.771153][T25259] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1045.960064][T25259] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1046.175890][T25578] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6112'. [ 1046.413684][T25568] ÿÿÿÿÿÿ: renamed from vlan1 (while UP) [ 1046.500500][T25259] team0: Port device team_slave_0 added [ 1046.563394][T25259] team0: Port device team_slave_1 added [ 1046.736704][ C0] Dropped outbound packet type=88ca [ 1047.163631][T25597] netlink: 'syz.3.6117': attribute type 1 has an invalid length. [ 1047.324538][T25259] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1047.354217][T25598] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6117'. [ 1047.363793][T25259] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1047.466773][T25598] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6117'. [ 1047.579171][T25259] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1047.763017][T25259] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1047.776758][ C0] Dropped outbound packet type=88ca [ 1047.846184][T25259] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1048.091661][T25259] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1048.318049][T25597] workqueue: Failed to create a rescuer kthread for wq "bond14": -EINTR [ 1048.483144][T25601] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1048.550188][ T5274] 8021q: adding VLAN 0 to HW filter on device eth3 [ 1048.810981][ T134] hsr_slave_0: left promiscuous mode [ 1048.816722][ C0] Dropped outbound packet type=88ca [ 1049.177429][ T134] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1049.226205][ T134] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1049.860263][ C0] Dropped outbound packet type=88ca [ 1050.896707][ C0] Dropped outbound packet type=88ca [ 1051.370388][ T134] team0 (unregistering): Port device team_slave_1 removed [ 1051.513961][ T134] team0 (unregistering): Port device team_slave_0 removed [ 1051.936814][ C0] Dropped outbound packet type=88ca [ 1052.976720][ C0] Dropped outbound packet type=88ca [ 1053.450945][T25628] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 1054.016709][ C0] Dropped outbound packet type=88ca [ 1054.074072][T25259] hsr_slave_0: entered promiscuous mode [ 1054.089579][T25259] hsr_slave_1: entered promiscuous mode [ 1054.144912][T25259] debugfs: 'hsr0' already exists in 'hsr' [ 1054.216692][T25259] Cannot create hsr debugfs directory [ 1054.508612][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.558646][T25653] netlink: 'syz.6.6130': attribute type 15 has an invalid length. [ 1055.056709][ C0] Dropped outbound packet type=88ca [ 1055.064593][T25661] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1055.073204][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1055.479068][T25665] vlan0: entered allmulticast mode [ 1055.527377][T25665] bond0: entered allmulticast mode [ 1055.549254][T25665] bond1: entered allmulticast mode [ 1055.693212][ T134] IPVS: stop unused estimator thread 0... [ 1056.096751][ C0] Dropped outbound packet type=88ca [ 1056.180817][T25684] netlink: 'syz.3.6139': attribute type 1 has an invalid length. [ 1056.223889][T25677] bond2: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 1056.379589][T25677] bond2 (unregistering): Released all slaves [ 1057.136703][ C0] Dropped outbound packet type=88ca [ 1057.255597][T25704] bridge8: entered promiscuous mode [ 1058.063537][ T5274] 8021q: adding VLAN 0 to HW filter on device eth4 [ 1058.176705][ C0] Dropped outbound packet type=88ca [ 1058.731865][T25259] netdevsim netdevsim0 eth4 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1059.217031][ C0] Dropped outbound packet type=88ca [ 1059.479433][T25259] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1060.020915][T25259] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1060.037381][T25769] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1060.257038][ C0] Dropped outbound packet type=88ca [ 1060.598672][T25259] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1061.031055][T25795] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6166'. [ 1061.069244][T25795] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6166'. [ 1061.296909][ C0] Dropped outbound packet type=88ca [ 1061.809477][T25812] netlink: 100 bytes leftover after parsing attributes in process `syz.2.6171'. [ 1061.871954][T25259] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1061.955733][T25259] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1061.993577][T25259] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1062.090402][T25259] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1062.153756][T25259] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1062.289882][T25259] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1062.333566][T25259] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1062.340421][ C0] Dropped outbound packet type=88ca [ 1062.458737][T25259] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1062.714672][T25843] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6177'. [ 1062.877946][T25846] netlink: 44 bytes leftover after parsing attributes in process `syz.3.6178'. [ 1063.376739][ C0] Dropped outbound packet type=88ca [ 1063.439442][T25259] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1063.703401][T25259] 8021q: adding VLAN 0 to HW filter on device team0 [ 1063.964374][T25870] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1063.972955][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1064.067908][T25870] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1064.081102][ T975] bridge0: port 1(bridge_slave_0) entered blocking state [ 1064.088311][ T975] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1064.111349][T15386] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1064.229496][T25875] FAULT_INJECTION: forcing a failure. [ 1064.229496][T25875] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1064.286771][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1064.347071][T25862] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1064.355603][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1064.401384][T15371] bridge0: port 2(bridge_slave_1) entered blocking state [ 1064.408616][T15371] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1064.416745][ C0] Dropped outbound packet type=88ca [ 1064.456067][T25875] CPU: 0 UID: 0 PID: 25875 Comm: syz.6.6187 Not tainted syzkaller #0 PREEMPT(full) [ 1064.456094][T25875] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1064.456105][T25875] Call Trace: [ 1064.456113][T25875] [ 1064.456122][T25875] dump_stack_lvl+0xe8/0x150 [ 1064.456154][T25875] should_fail_ex+0x40c/0x560 [ 1064.456180][T25875] _copy_from_iter+0x1d3/0x1660 [ 1064.456200][T25875] ? kmem_cache_alloc_node_noprof+0x1c1/0x610 [ 1064.456223][T25875] ? rcu_is_watching+0x15/0xb0 [ 1064.456249][T25875] ? trace_kmem_cache_alloc+0x29/0xe0 [ 1064.456272][T25875] ? kmem_cache_alloc_node_noprof+0x3b8/0x610 [ 1064.456292][T25875] ? __pfx__copy_from_iter+0x10/0x10 [ 1064.456312][T25875] ? __alloc_skb+0x276/0x7a0 [ 1064.456336][T25875] ? __alloc_skb+0x276/0x7a0 [ 1064.456371][T25875] ? netlink_sendmsg+0x650/0xb40 [ 1064.456391][T25875] ? skb_put+0x112/0x210 [ 1064.456418][T25875] netlink_sendmsg+0x6c0/0xb40 [ 1064.456446][T25875] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1064.456469][T25875] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1064.456501][T25875] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1064.456519][T25875] sock_sendmsg_nosec+0x13a/0x180 [ 1064.456544][T25875] ____sys_sendmsg+0x54e/0x850 [ 1064.456568][T25875] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1064.456595][T25875] ? import_iovec+0x73/0xa0 [ 1064.456620][T25875] ___sys_sendmsg+0x2a5/0x360 [ 1064.456637][T25875] ? __lock_acquire+0x683/0x2cf0 [ 1064.456661][T25875] ? __pfx____sys_sendmsg+0x10/0x10 [ 1064.456712][T25875] ? __fget_files+0x2a/0x420 [ 1064.456733][T25875] ? __fget_files+0x3a2/0x420 [ 1064.456765][T25875] __x64_sys_sendmsg+0x1b1/0x290 [ 1064.456785][T25875] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1064.456820][T25875] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1064.456839][T25875] do_syscall_64+0x174/0x580 [ 1064.456861][T25875] ? trace_irq_disable+0x3b/0x140 [ 1064.456882][T25875] ? clear_bhb_loop+0x70/0xc0 [ 1064.456904][T25875] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1064.456922][T25875] RIP: 0033:0x7fb3a659e0d9 [ 1064.456940][T25875] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1064.456955][T25875] RSP: 002b:00007fb3a742f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1064.456975][T25875] RAX: ffffffffffffffda RBX: 00007fb3a6825fa0 RCX: 00007fb3a659e0d9 [ 1064.456989][T25875] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003 [ 1064.457000][T25875] RBP: 00007fb3a742f090 R08: 0000000000000000 R09: 0000000000000000 [ 1064.457011][T25875] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1064.457022][T25875] R13: 00007fb3a6826038 R14: 00007fb3a6825fa0 R15: 00007ffe1cd10178 [ 1064.457051][T25875] [ 1065.456760][ C0] Dropped outbound packet type=88ca [ 1065.708081][T25896] IPv6: NLM_F_CREATE should be specified when creating new route [ 1065.743193][T25896] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6190'. [ 1066.115372][T25906] netlink: 44 bytes leftover after parsing attributes in process `syz.6.6193'. [ 1066.496818][ C0] Dropped outbound packet type=88ca [ 1067.536732][ C0] Dropped outbound packet type=88ca [ 1068.147144][T25962] netlink: 14544 bytes leftover after parsing attributes in process `syz.2.6204'. [ 1068.546714][T25259] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1068.579822][ C0] Dropped outbound packet type=88ca [ 1068.911934][ T50] block nbd0: Receive control failed (result -22) [ 1068.911936][T25921] block nbd0: reconnected socket [ 1069.616708][ C0] Dropped outbound packet type=88ca [ 1069.641132][T25975] netlink: 44 bytes leftover after parsing attributes in process `syz.2.6207'. [ 1069.705908][T25259] veth0_vlan: entered promiscuous mode [ 1069.713082][T25978] netlink: Conntrack attr type has unexpected length (type=9, length=0, expected=32) [ 1069.952605][T25259] veth1_vlan: entered promiscuous mode [ 1070.284568][T25259] veth0_macvtap: entered promiscuous mode [ 1070.392072][T25259] veth1_macvtap: entered promiscuous mode [ 1070.656712][ C0] Dropped outbound packet type=88ca [ 1070.776798][T25259] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1070.952893][T25259] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1071.066897][T15360] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1071.169123][T15360] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1071.324270][T26011] IPVS: set_ctl: invalid protocol: 44 172.20.20.170:20000 [ 1071.445821][T26011] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1071.454623][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1071.479292][ T975] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1071.590254][T26011] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6215'. [ 1071.688272][T15386] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1071.697185][ C0] Dropped outbound packet type=88ca [ 1072.242791][T26023] xt_limit: Overflow, try lower: 536871034/127 [ 1072.385595][T26025] netlink: 44 bytes leftover after parsing attributes in process `syz.2.6219'. [ 1072.736737][ C0] Dropped outbound packet type=88ca [ 1072.857508][T20123] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1072.911942][T20123] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1073.065855][T26043] netlink: Conntrack attr has 4 unknown bytes [ 1073.091282][T20124] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1073.134514][T20124] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1073.776750][ C0] Dropped outbound packet type=88ca [ 1074.316504][T26067] netlink: 44 bytes leftover after parsing attributes in process `syz.2.6232'. [ 1074.816761][ C0] Dropped outbound packet type=88ca [ 1074.900337][T26081] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1074.908930][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1074.950574][T26081] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1074.965428][T15360] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1075.036770][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1075.047390][T24696] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1075.060893][T24696] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1075.078208][T24696] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1075.089194][T24696] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1075.102954][T24696] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1075.199663][T26079] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6235'. [ 1075.266035][T26077] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1075.274790][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1075.343189][T26079] netlink: 'syz.0.6235': attribute type 8 has an invalid length. [ 1075.705942][T26097] macvlan0: entered promiscuous mode [ 1075.812296][T26097] netlink: Unknown conntrack attr (type=5152, max=9) [ 1075.856748][ C0] Dropped outbound packet type=88ca [ 1076.604285][T26121] netlink: 44 bytes leftover after parsing attributes in process `syz.5.6246'. [ 1076.839074][T26130] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6248'. [ 1076.897857][ C0] Dropped outbound packet type=88ca [ 1077.217147][ T50] Bluetooth: hci0: command tx timeout [ 1077.690147][T26155] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6254'. [ 1077.750338][T26157] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6254'. [ 1077.758536][T26084] ip6gre0 speed is unknown, defaulting to 1000 [ 1077.799018][T26160] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6256'. [ 1077.936881][ C0] Dropped outbound packet type=88ca [ 1078.665307][T26187] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6265'. [ 1078.741029][T26190] netlink: 'syz.2.6265': attribute type 4 has an invalid length. [ 1078.791044][T26187] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6265'. [ 1078.976725][ C0] Dropped outbound packet type=88ca [ 1079.296920][ T50] Bluetooth: hci0: command tx timeout [ 1079.419045][T26204] netlink: 44 bytes leftover after parsing attributes in process `syz.2.6268'. [ 1079.432150][T26084] lo speed is unknown, defaulting to 1000 [ 1079.847558][T26217] sch_tbf: peakrate 4 is lower than or equals to rate 24576 ! [ 1080.016718][ C0] Dropped outbound packet type=88ca [ 1080.187096][T26223] netlink: 'syz.5.6274': attribute type 7 has an invalid length. [ 1080.322223][T26223] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6274'. [ 1081.056710][ C0] Dropped outbound packet type=88ca [ 1081.376950][ T50] Bluetooth: hci0: command tx timeout [ 1081.399882][T26245] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6281'. [ 1081.535774][T26247] IPv6: NLM_F_CREATE should be specified when creating new route [ 1082.096722][ C0] Dropped outbound packet type=88ca [ 1082.271993][T26266] __nla_validate_parse: 2 callbacks suppressed [ 1082.272011][T26266] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6287'. [ 1082.372299][T26266] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6287'. [ 1083.136708][ C0] Dropped outbound packet type=88ca [ 1083.221162][T26284] netlink: 'syz.5.6292': attribute type 2 has an invalid length. [ 1083.293145][T26290] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6295'. [ 1083.455571][T26084] bridge0: port 1(bridge_slave_0) entered blocking state [ 1083.456786][ T50] Bluetooth: hci0: command tx timeout [ 1083.480048][T26084] bridge0: port 1(bridge_slave_0) entered disabled state [ 1083.563619][T26084] bridge_slave_0: entered allmulticast mode [ 1083.625728][T26084] bridge_slave_0: entered promiscuous mode [ 1083.670066][T26084] bridge0: port 2(bridge_slave_1) entered blocking state [ 1083.702386][T26084] bridge0: port 2(bridge_slave_1) entered disabled state [ 1083.727928][T26084] bridge_slave_1: entered allmulticast mode [ 1083.755355][T26298] netdevsim netdevsim0: Direct firmware load for .. failed with error -2 [ 1083.778882][T26084] bridge_slave_1: entered promiscuous mode [ 1083.848032][T26298] netdevsim netdevsim0: Falling back to sysfs fallback for: .. [ 1084.133924][T26084] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1084.176702][ C0] Dropped outbound packet type=88ca [ 1084.195465][T26084] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1084.225169][T26315] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6304'. [ 1084.261409][T26315] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6304'. [ 1084.532623][T26084] team0: Port device team_slave_0 added [ 1084.768524][T26084] team0: Port device team_slave_1 added [ 1084.825079][T26317] can: request_module (can-proto-0) failed. [ 1085.155171][T26331] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6307'. [ 1085.181525][T26332] netlink: 'syz.6.6307': attribute type 4 has an invalid length. [ 1085.212890][T26332] netlink: 152 bytes leftover after parsing attributes in process `syz.6.6307'. [ 1085.217210][ C0] Dropped outbound packet type=88ca [ 1086.257157][ C0] Dropped outbound packet type=88ca [ 1087.296706][ C0] Dropped outbound packet type=88ca [ 1088.336732][ C0] Dropped outbound packet type=88ca [ 1089.379045][ C0] Dropped outbound packet type=88ca [ 1089.759360][T26344] FAULT_INJECTION: forcing a failure. [ 1089.759360][T26344] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1089.826845][T26344] CPU: 0 UID: 0 PID: 26344 Comm: syz.2.6309 Not tainted syzkaller #0 PREEMPT(full) [ 1089.826872][T26344] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1089.826883][T26344] Call Trace: [ 1089.826891][T26344] [ 1089.826900][T26344] dump_stack_lvl+0xe8/0x150 [ 1089.826932][T26344] should_fail_ex+0x40c/0x560 [ 1089.826955][T26344] _copy_from_iter+0x1d3/0x1660 [ 1089.826976][T26344] ? kmem_cache_alloc_node_noprof+0x1c1/0x610 [ 1089.826999][T26344] ? rcu_is_watching+0x15/0xb0 [ 1089.827025][T26344] ? trace_kmem_cache_alloc+0x29/0xe0 [ 1089.827047][T26344] ? kmem_cache_alloc_node_noprof+0x3b8/0x610 [ 1089.827067][T26344] ? __pfx__copy_from_iter+0x10/0x10 [ 1089.827087][T26344] ? __alloc_skb+0x276/0x7a0 [ 1089.827110][T26344] ? __alloc_skb+0x276/0x7a0 [ 1089.827138][T26344] ? netlink_sendmsg+0x650/0xb40 [ 1089.827157][T26344] ? skb_put+0x112/0x210 [ 1089.827184][T26344] netlink_sendmsg+0x6c0/0xb40 [ 1089.827212][T26344] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1089.827234][T26344] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1089.827265][T26344] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1089.827282][T26344] sock_sendmsg_nosec+0x13a/0x180 [ 1089.827308][T26344] ____sys_sendmsg+0x54e/0x850 [ 1089.827331][T26344] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1089.827358][T26344] ? import_iovec+0x73/0xa0 [ 1089.827384][T26344] ___sys_sendmsg+0x2a5/0x360 [ 1089.827401][T26344] ? __lock_acquire+0x683/0x2cf0 [ 1089.827428][T26344] ? __pfx____sys_sendmsg+0x10/0x10 [ 1089.827485][T26344] ? __fget_files+0x2a/0x420 [ 1089.827506][T26344] ? __fget_files+0x3a2/0x420 [ 1089.827537][T26344] __x64_sys_sendmsg+0x1b1/0x290 [ 1089.827558][T26344] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1089.827593][T26344] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1089.827613][T26344] do_syscall_64+0x174/0x580 [ 1089.827634][T26344] ? trace_irq_disable+0x3b/0x140 [ 1089.827655][T26344] ? clear_bhb_loop+0x70/0xc0 [ 1089.827677][T26344] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1089.827696][T26344] RIP: 0033:0x7fee87f9e0d9 [ 1089.827713][T26344] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1089.827729][T26344] RSP: 002b:00007fee88e18028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1089.827749][T26344] RAX: ffffffffffffffda RBX: 00007fee88226090 RCX: 00007fee87f9e0d9 [ 1089.827763][T26344] RDX: 0000000000000000 RSI: 0000200000000500 RDI: 0000000000000003 [ 1089.827774][T26344] RBP: 00007fee88e18090 R08: 0000000000000000 R09: 0000000000000000 [ 1089.827785][T26344] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1089.827796][T26344] R13: 00007fee88226128 R14: 00007fee88226090 R15: 00007ffe90bbd388 [ 1089.827824][T26344] [ 1090.416707][ C0] Dropped outbound packet type=88ca [ 1090.829787][T26354] Bluetooth: MGMT ver 1.23 [ 1091.456730][ C0] Dropped outbound packet type=88ca [ 1092.496778][ C0] Dropped outbound packet type=88ca [ 1093.537102][ C0] Dropped outbound packet type=88ca [ 1094.578421][ C0] Dropped outbound packet type=88ca [ 1095.555259][T26332] .`: renamed from bond0 (while UP) [ 1095.616697][ C0] Dropped outbound packet type=88ca [ 1095.678204][T26084] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1095.706675][T26084] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1095.819046][T26084] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1095.855930][T26084] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1095.889124][T26084] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1095.953710][T26084] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1096.277589][T26360] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.6315'. [ 1096.656707][ C0] Dropped outbound packet type=88ca [ 1096.819355][T26084] hsr_slave_0: entered promiscuous mode [ 1096.869819][T26084] hsr_slave_1: entered promiscuous mode [ 1096.916057][T26084] debugfs: 'hsr0' already exists in 'hsr' [ 1096.945593][T26084] Cannot create hsr debugfs directory [ 1096.988724][T26376] FAULT_INJECTION: forcing a failure. [ 1096.988724][T26376] name failslab, interval 1, probability 0, space 0, times 0 [ 1097.020024][T26376] CPU: 0 UID: 0 PID: 26376 Comm: syz.5.6319 Not tainted syzkaller #0 PREEMPT(full) [ 1097.020052][T26376] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1097.020064][T26376] Call Trace: [ 1097.020071][T26376] [ 1097.020081][T26376] dump_stack_lvl+0xe8/0x150 [ 1097.020111][T26376] should_fail_ex+0x40c/0x560 [ 1097.020135][T26376] should_failslab+0xa8/0x100 [ 1097.020170][T26376] kmem_cache_alloc_node_noprof+0xb3/0x610 [ 1097.020191][T26376] ? local_lock_release+0x9c/0x160 [ 1097.020218][T26376] ? __alloc_skb+0x1d7/0x7a0 [ 1097.020239][T26376] ? __alloc_skb+0x1d7/0x7a0 [ 1097.020268][T26376] __alloc_skb+0x1d7/0x7a0 [ 1097.020296][T26376] netlink_ack+0x136/0xb30 [ 1097.020313][T26376] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1097.020340][T26376] ? __lock_acquire+0x683/0x2cf0 [ 1097.020375][T26376] netlink_rcv_skb+0x2a4/0x4a0 [ 1097.020394][T26376] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 1097.020420][T26376] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1097.020451][T26376] ? netlink_deliver_tap+0x2e/0x1b0 [ 1097.020469][T26376] ? netlink_deliver_tap+0x2e/0x1b0 [ 1097.020491][T26376] netlink_unicast+0x7bb/0x940 [ 1097.020527][T26376] netlink_sendmsg+0x813/0xb40 [ 1097.020555][T26376] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1097.020578][T26376] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1097.020608][T26376] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1097.020625][T26376] sock_sendmsg_nosec+0x13a/0x180 [ 1097.020648][T26376] ____sys_sendmsg+0x54e/0x850 [ 1097.020671][T26376] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1097.020698][T26376] ? import_iovec+0x73/0xa0 [ 1097.020724][T26376] ___sys_sendmsg+0x2a5/0x360 [ 1097.020740][T26376] ? __lock_acquire+0x683/0x2cf0 [ 1097.020764][T26376] ? __pfx____sys_sendmsg+0x10/0x10 [ 1097.020807][T26376] ? __fget_files+0x2a/0x420 [ 1097.020825][T26376] ? __fget_files+0x3a2/0x420 [ 1097.020852][T26376] __x64_sys_sendmsg+0x1b1/0x290 [ 1097.020869][T26376] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1097.020897][T26376] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1097.020916][T26376] do_syscall_64+0x174/0x580 [ 1097.020936][T26376] ? trace_irq_disable+0x3b/0x140 [ 1097.020956][T26376] ? clear_bhb_loop+0x70/0xc0 [ 1097.020978][T26376] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1097.020996][T26376] RIP: 0033:0x7fad33b9e0d9 [ 1097.021017][T26376] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1097.021032][T26376] RSP: 002b:00007fad31df6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1097.021052][T26376] RAX: ffffffffffffffda RBX: 00007fad33e25fa0 RCX: 00007fad33b9e0d9 [ 1097.021065][T26376] RDX: 0000000000000000 RSI: 0000200000000500 RDI: 0000000000000003 [ 1097.021076][T26376] RBP: 00007fad31df6090 R08: 0000000000000000 R09: 0000000000000000 [ 1097.021088][T26376] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1097.021098][T26376] R13: 00007fad33e26038 R14: 00007fad33e25fa0 R15: 00007fff0d396ec8 [ 1097.021127][T26376] [ 1097.696696][ C0] Dropped outbound packet type=88ca [ 1097.867782][T26385] FAULT_INJECTION: forcing a failure. [ 1097.867782][T26385] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1097.897269][T26385] CPU: 1 UID: 0 PID: 26385 Comm: syz.5.6323 Not tainted syzkaller #0 PREEMPT(full) [ 1097.897296][T26385] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1097.897307][T26385] Call Trace: [ 1097.897315][T26385] [ 1097.897323][T26385] dump_stack_lvl+0xe8/0x150 [ 1097.897353][T26385] should_fail_ex+0x40c/0x560 [ 1097.897378][T26385] _copy_from_user+0x2d/0xb0 [ 1097.897402][T26385] ___sys_recvmsg+0x173/0x5a0 [ 1097.897427][T26385] ? __pfx____sys_recvmsg+0x10/0x10 [ 1097.897450][T26385] ? __fget_files+0x2a/0x420 [ 1097.897518][T26385] do_recvmmsg+0x31a/0x7f0 [ 1097.897545][T26385] ? __pfx_do_recvmmsg+0x10/0x10 [ 1097.897574][T26385] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1097.897597][T26385] ? __fget_files+0x3a2/0x420 [ 1097.897628][T26385] __x64_sys_recvmmsg+0x198/0x250 [ 1097.897650][T26385] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1097.897676][T26385] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1097.897695][T26385] do_syscall_64+0x174/0x580 [ 1097.897715][T26385] ? trace_irq_disable+0x3b/0x140 [ 1097.897736][T26385] ? clear_bhb_loop+0x70/0xc0 [ 1097.897757][T26385] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1097.897774][T26385] RIP: 0033:0x7fad33b9e0d9 [ 1097.897792][T26385] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1097.897806][T26385] RSP: 002b:00007fad31df6028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1097.897826][T26385] RAX: ffffffffffffffda RBX: 00007fad33e25fa0 RCX: 00007fad33b9e0d9 [ 1097.897839][T26385] RDX: 000000000000005b RSI: 00002000000021c0 RDI: 0000000000000003 [ 1097.897851][T26385] RBP: 00007fad31df6090 R08: 0000000000000000 R09: 0000000000000000 [ 1097.897862][T26385] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000002 [ 1097.897873][T26385] R13: 00007fad33e26038 R14: 00007fad33e25fa0 R15: 00007fff0d396ec8 [ 1097.897902][T26385] [ 1098.736707][ C0] Dropped outbound packet type=88ca [ 1099.329718][T26398] netlink: 'syz.5.6327': attribute type 3 has an invalid length. [ 1099.403686][T26398] netlink: 666 bytes leftover after parsing attributes in process `syz.5.6327'. [ 1099.774684][T26402] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6328'. [ 1099.783731][ C0] Dropped outbound packet type=88ca [ 1100.103547][T26406] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1100.145844][T26406] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1100.207123][T26406] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1100.268789][T26405] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1100.369722][T26405] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1100.816753][ C0] Dropped outbound packet type=88ca [ 1101.857198][ C0] Dropped outbound packet type=88ca [ 1102.896698][ C0] Dropped outbound packet type=88ca [ 1103.005554][T26448] syzkaller0: entered promiscuous mode [ 1103.067077][T26448] syzkaller0: entered allmulticast mode [ 1103.936807][ C0] Dropped outbound packet type=88ca [ 1104.162959][T26470] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6346'. [ 1104.500047][T26475] netlink: 'syz.5.6348': attribute type 2 has an invalid length. [ 1104.555906][T26475] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6348'. [ 1104.947360][T26484] netlink: 'syz.5.6351': attribute type 1 has an invalid length. [ 1104.967192][T26484] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6351'. [ 1104.976813][ C0] Dropped outbound packet type=88ca [ 1105.009198][T26484] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6351'. [ 1105.198419][T26493] x_tables: duplicate underflow at hook 3 [ 1106.016766][ C0] Dropped outbound packet type=88ca [ 1107.056710][ C0] Dropped outbound packet type=88ca [ 1108.099583][ C0] Dropped outbound packet type=88ca [ 1109.136794][ C0] Dropped outbound packet type=88ca [ 1110.176722][ C0] Dropped outbound packet type=88ca [ 1111.216736][ C0] Dropped outbound packet type=88ca [ 1112.256905][ C0] Dropped outbound packet type=88ca [ 1112.981258][ T50] Bluetooth: hci5: command 0x0406 tx timeout [ 1113.223522][T26084] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1113.254908][T26084] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1113.291823][T26084] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1113.298660][ C0] Dropped outbound packet type=88ca [ 1113.478790][T26505] netlink: 546 bytes leftover after parsing attributes in process `syz.6.6355'. [ 1113.516706][T26084] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1113.607741][T26505] netlink: 'syz.6.6355': attribute type 4 has an invalid length. [ 1113.662235][T26510] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6355'. [ 1114.171976][T26084] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1114.221179][T26084] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1114.283119][T26084] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1114.336716][ C0] Dropped outbound packet type=88ca [ 1114.374846][T26084] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1114.476718][T24436] unregister_netdevice: waiting for bond0 to become free. Usage count = 2 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1114.813006][T26533] netlink: 40 bytes leftover after parsing attributes in process `syz.6.6361'. [ 1115.376746][ C0] Dropped outbound packet type=88ca [ 1115.945256][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 1116.416715][ C0] Dropped outbound packet type=88ca [ 1117.456720][ C0] Dropped outbound packet type=88ca [ 1117.497225][T15362] netdevsim netdevsim6 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1117.529544][T15362] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1117.946064][T15362] netdevsim netdevsim6 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1117.976684][T15362] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1118.204187][T15362] netdevsim netdevsim6 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1118.226704][T15362] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1118.496702][ C0] Dropped outbound packet type=88ca [ 1118.542993][T15362] netdevsim netdevsim6 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1118.639409][T15362] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1118.819572][T15386] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1118.887017][T23406] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1118.983448][T23406] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1119.289598][T15386] netdevsim netdevsim6 eth4: set [1, 0] type 2 family 0 port 6081 - 0 [ 1119.360356][T15362] bridge_slave_1: left allmulticast mode [ 1119.377917][T15362] bridge_slave_1: left promiscuous mode [ 1119.400094][T15362] bridge0: port 2(bridge_slave_1) entered disabled state [ 1119.435786][T15362] bridge_slave_0: left allmulticast mode [ 1119.450872][T15362] bridge_slave_0: left promiscuous mode [ 1119.469947][T15362] bridge0: port 1(bridge_slave_0) entered disabled state [ 1119.536703][ C0] Dropped outbound packet type=88ca [ 1120.576719][ C0] Dropped outbound packet type=88ca [ 1121.616697][ C0] Dropped outbound packet type=88ca [ 1122.139068][T15362] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 1122.187936][T15362] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 1122.234094][T15362] .` (unregistering): Released all slaves [ 1122.308548][ T5274] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1122.656701][ C0] Dropped outbound packet type=88ca [ 1123.696715][ C0] Dropped outbound packet type=88ca