last executing test programs: 14.948769955s ago: executing program 0 (id=2948): r0 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r0, 0x6628) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000040000000160a01000900000000000000010000000900010073797a30000000000900020073797a3000000000140003800800014000000000080002400000000048000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000001c00038018000380140002"], 0xd0}, 0x1, 0x0, 0x0, 0x24040841}, 0x0) sendmsg$NFT_MSG_GETTABLE(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="20000000010a03000000000000000000010000010900010073797a30"], 0x20}, 0x1, 0x0, 0x0, 0x4000485}, 0x4000000) ioctl$BTRFS_IOC_ENCODED_READ(r0, 0x80809440, &(0x7f0000000480)={&(0x7f0000000440)=[{&(0x7f00000000c0)="5d77fbadf09f6f6914bd3d768a63c7c97edb65d55f9cbc4deb02db0d56149dfcf5469852390054d6e27e7a07f4503b81e2d2f17a140b02e3dfd80c132e1febe2b1a0015b89a072ee2223f7d9af98a65db14ca574323fd37c836591fb152b1d8cfed151340b1c5c552c41f01c7f5753dde41737ca454d0e1da16f2fa1036e6ddc53a862285703f033e6b85ea4db585c3e33ea2e547a8cdbced22d57", 0x9b}, {&(0x7f00000002c0)="f4c303397d413012cee04f1349d01251a0fcc9b0a533e9547b73ad9b2bc746a4ebcaf266d0454ae35cea499d813ead0032e02ba347835e0634e175616962dfac88d45734bae68135bd2a110feaefa67bfbae8f882043a4d04e5176a70456dd48c0f9e416f14a732a7c7cd62935545504e1a590599648639004e598301a19cb9378ae67a53514275c32c74bb941b315d67956baa7626959ae95f766f4ccd9d56e3f96fc7fdc175e4ec5150bf1e81ec4fc02d55d18bd0e3f6f3c10aaa9f4dd9ec53fb42b0babb903c7c8c8b90b10f4d25902cf9addc39602fe503254136bce9da0ece1559c9a00f791f1eca659c9171c93", 0xf0}, {&(0x7f00000003c0)="24a61b739cd13d8e859ad064708db440ff03f5fa10772c4cfc2e5bb9518d64bfcd26e6218070df696fc60c9343b70aac95a584b74139d7bb96db881ea6958469152902756dfe1c5ac01fcc16626c", 0x4e}], 0x3, 0x4, 0x0, 0x3, 0x8c17, 0x0, 0x8, 0x80}) r2 = socket(0x10, 0x3, 0x0) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r3, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10) sendmmsg(r3, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) connect$llc(r3, &(0x7f0000000040)={0x1a, 0x300, 0x6, 0x2, 0x9, 0xd5, @random="0d0728c880c3"}, 0x10) syz_emit_ethernet(0x2a, &(0x7f00000001c0)={@random="47f4fd025768", @remote, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @empty, @local, @empty, @multicast1}}}}, 0x0) r4 = socket(0xa, 0x3, 0x3a) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$fou(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)={0x24, r6, 0x209, 0x0, 0x0, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e20}]}, 0x24}}, 0x0) setsockopt$MRT6_DEL_MIF(r4, 0x29, 0xc8, 0x0, 0xc000000) setsockopt$MRT6_FLUSH(r4, 0x29, 0xd1, &(0x7f0000000340), 0x4) r7 = syz_genetlink_get_family_id$ethtool(0x0, r5) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f0000000800)={'gre0\x00', &(0x7f0000000780)={'gre0\x00', 0x0, 0x8, 0x20, 0x7fff, 0xa, {{0x15, 0x4, 0x0, 0x2b, 0x54, 0x65, 0x0, 0x5, 0x29, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, {[@noop, @timestamp={0x44, 0xc, 0xa9, 0x0, 0x9, [0x100, 0x4]}, @lsrr={0x83, 0x1b, 0x93, [@local, @loopback, @dev={0xac, 0x14, 0x14, 0x37}, @rand_addr=0x64010101, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @noop, @ssrr={0x89, 0x17, 0x67, [@initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010100]}]}}}}}) sendmsg$ETHTOOL_MSG_EEE_SET(r5, &(0x7f0000002540)={&(0x7f0000000700), 0xc, &(0x7f0000002500)={&(0x7f0000001040)={0x1414, r7, 0x200, 0x70bd2b, 0x25dfdbff, {}, [@ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5}, @ETHTOOL_A_EEE_MODES_OURS={0x1364, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0xcd, 0x5, "a0223d258af9f9a54faf3d99c3803c12bb242038ab59ee31416e536f3f077f55ea034c7c25aa3e9f84d89c00d8cf67c6e80e2d1ea76b4d7dcb8697128c5351a90eaac15571f5b8e1243a9b2520ce4871ea52cfee357363ab8f7ade01bb6d731a9102ce3b59cb07686ca8733f7d94be790ff16c7d402c3e102eebc40da1313e0efcaef77ff4b836c18f7f5a4b52eb18663ccdf1de9801f56834a3d622ef331bee755904b54d7f566c338605ccde2c11cb8b2b55731978ee99dc81afadfa0fa5117b76a8de2ddf125b24"}, @ETHTOOL_A_BITSET_BITS={0xb0, 0x3, 0x0, 0x1, [{0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, ':],\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '%/\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x80000001}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '-\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '\x8d\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xe457}, @ETHTOOL_A_BITSET_BIT_NAME={0x1b, 0x2, 'cgroup.subtree_control\x00'}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, ':+-#[\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7ec3}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7ff}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, ')-+,^#:\x00'}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0x1004, 0x4, "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"}, @ETHTOOL_A_BITSET_VALUE={0x66, 0x4, "f68689c17c9239385e749e63af688ec0a655539243469f13dd0e83be0cf47e35e7ce6dd0ed40d82640a3759dd8ce5fa4fbe0874ea3088c827837ef59ffb43cc28b3d558191369f0e9800003f141a22c5906af1a36645dd800e4d5cae7abca4c7b228"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0xf2, 0x5, "9a4332741471887ab3d4601653f2bad6740d11429e51db98509ef2c3a76cd8d056ab00ded0c0b76f9cc00613c13976fc037e69a405ae66dd654c305243e8d53de1d78ebd4b9cac77e3a69bb80f2a9539baad963722bf1450f43c7d2b0d109fc70f8e5764b2f37cce70d69bfb28db9fa0528e34c8ebdfdcaa56e1e3cf83597874c46112af785ae64bc866b5a67949cdbefe6d46628d3cece5e6e9662e12d84766787e78f128a4969b57660cda76a696ed8e7b9f779a80599e46444e4df24d4f4ea8edf03bf95f297ff07c8c5e6d9a0b2341689916135f90e131943eebc944180e6ad6f2aed45609ccc9708bb2ebac"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x70, 0x3, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xec7f}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'fou\x00'}]}, {0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'GPL\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_EEE_TX_LPI_TIMER={0x8, 0x7, 0x9}, @ETHTOOL_A_EEE_MODES_OURS={0x70, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x5c, 0x3, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, '{&^\\:&\xf6\'\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, ')\\\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '%\x00'}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'fou\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '\\\x00'}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x3}, @ETHTOOL_A_BITSET_SIZE={0x8}]}, @ETHTOOL_A_EEE_TX_LPI_TIMER={0x8, 0x7, 0x3}, @ETHTOOL_A_EEE_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}]}, 0x1414}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="280000001e00010a030000000000009b2d"], 0x28}}, 0x4040) accept$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x0, 0x0, @remote}, &(0x7f00000001c0)=0x1c) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb010018000000000000007c0000007c00000002000000000000000000000e0000000000000000000000000600000d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e80c20000000000000000000000900000000000000000000000900000200000000000000000902"], 0x0, 0x96}, 0x28) r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000013000000000c0000000c000000020000000000000000000004000000000000"], 0x0, 0x26}, 0x20) r10 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000280)='GPL\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, r9, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x2}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a00)={r10, 0xe0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd8, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001000), 0x8, 0x1000, 0x8, 0x0, 0x0}}, 0x10) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000500)={0xb2, 0x3, 0x6, 0x0, 0x0, [{{r1}, 0x1}, {{r1}}, {{r0}, 0x2}, {{r2}, 0x5}, {{r1}, 0x3}, {{r1}, 0x1d31}]}) 14.61309643s ago: executing program 0 (id=2955): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r0, 0x8001) (async) setsockopt$inet6_tcp_int(r0, 0x6, 0x6, &(0x7f0000000080)=0xe, 0x4) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000000), r1) sendmsg$NLBL_MGMT_C_ADDDEF(r1, &(0x7f0000002a40)={0x0, 0x0, &(0x7f0000002a00)={&(0x7f0000002980)={0x4c, r2, 0x1, 0x70bd2c, 0x25dfdc03, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @empty}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async) r3 = syz_genetlink_get_family_id$nfc(&(0x7f00000000c0), 0xffffffffffffffff) (async) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000100)=0x0) (async) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000140)=0x0) (async) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000001c0)=0x0) (async) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000200)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000240)=0x0) (async) r9 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r10) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r9, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r11, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r12], 0x1c}}, 0x4008054) (async) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000280)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x5c, r3, 0x430, 0x70bd26, 0x25dfdbff, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r4}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r6}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r7}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r8}, @NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r12}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r13}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x10) (async) r14 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r14, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="a013000040000701fcffffff00000100017c0000040042800c00018006000600801c00007c13028078131480731319806f1301"], 0x13a0}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) 8.49917227s ago: executing program 2 (id=3033): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000200)={0x14, 0x0, 0x2, 0x401, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) (fail_nth: 1) 8.183401885s ago: executing program 2 (id=3035): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xe, 0x4, 0x4, 0x2}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x6, 0xd, &(0x7f0000000200)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xe}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r1, 0x2000012, 0xe, 0x0, &(0x7f0000000280)="63ec33c9e9b98600000000000000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) r3 = accept$packet(0xffffffffffffffff, 0x0, &(0x7f0000000500)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000580)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0}) ioctl$BTRFS_IOC_RM_DEV_V2(r2, 0x5000943a, &(0x7f0000000c00)={{r3}, r4, 0x4, @unused=[0x3, 0xbf6000000000000, 0x9, 0x5a57], @subvolid=0x80000000}) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e24, 0x2, @empty, 0xcac2d78a}}, 0x0, 0x0, 0x43, 0x0, "ee8b0e650926a96ecc136e7fb980e989db9e8bf9b93129488f651a8de213eb94cd46e19d9c65a018444a131f4da55a02ddbe2665dca1029607462029add09240005c6776267517308a3d40aa1c788df6"}, 0xd8) connect$inet6(r2, &(0x7f0000000540)={0xa, 0x0, 0x0, @loopback}, 0x1c) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0xc, 0x3032, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000240), 0x3) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x304}, "6ae04425ace3f60c", "acba84f0a6731f234db1cc7f3f382ad796bd667cb12ea99509873931d2873103", '\x00', "ec3fff9afd96e6c0"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) ioctl$int_in(r2, 0x5421, &(0x7f0000000140)=0x1) writev(r2, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) r5 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_group_source_req(r5, 0x29, 0x2b, &(0x7f0000000000)={0x9, {{0xa, 0x4e22, 0xfffffff7, @mcast1, 0x1ff}}, {{0xa, 0x4e20, 0x7, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xd}}}, 0x108) 7.822657564s ago: executing program 2 (id=3037): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) openat$cgroup_devices(r0, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) r2 = socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=@newlink={0x48, 0x10, 0x503, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21111, 0x8831}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_MACSEC_CIPHER_SUITE={0xc, 0x4, 0x80c20001000004}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x48}, 0x1, 0x0, 0x0, 0x48890}, 0x4000) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000500)={r1, r4, 0x2d, 0x0, @val=@netfilter={0xa, 0x4, 0x600, 0x1}}, 0x20) r5 = socket$nl_sock_diag(0x10, 0x3, 0x4) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r6, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2, 0x12, r6, 0x0) sendmsg$TCPDIAG_GETSOCK(r5, &(0x7f00000042c0)={0x0, 0x0, &(0x7f0000004280)={&(0x7f0000000380)=ANY=[@ANYBLOB="84000000120035062dbd7000fedbdf25090504494e204e2004000000ab0d0000060000000e0000005f000000070000000100000010000000", @ANYRES32=0x0, @ANYBLOB="034000007689c0240800000009000000380001000030"], 0x84}, 0x1, 0x0, 0x0, 0x40040}, 0x20000014) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), r6) 7.60702233s ago: executing program 2 (id=3040): r0 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000080)={0x11, 0x800, r1, 0x1, 0x0, 0x6, @random="518440db9de1"}, 0x14) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$unix(r3, &(0x7f0000003f40)={0x0, 0x0, 0x0}, 0x0) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) r4 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000000)={0x2000200a}) connect$unix(r2, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e20}, 0x6e) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[], 0x74}, 0x1, 0x0, 0x0, 0x10ef2b3307796d82}, 0x4004) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="580000000206030000000000000000000300000705000100070000000900020073797a31000000000c000780080012400000000505000500020000000500040001000000110003"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) r6 = socket$kcm(0x2, 0x200000000000001, 0x106) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106(gcm(aes))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f00000009c0)="ad56b6c5820fae9d6dcd3292ea54c7be8bbdadbb1632ea5704cae881ef915d374c90c200", 0x24) r8 = accept4(r7, 0x0, 0x0, 0x800) sendmmsg$alg(r8, &(0x7f0000000c00)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x40040}], 0x1, 0x8040) syz_genetlink_get_family_id$l2tp(&(0x7f00000003c0), r8) ioctl$int_in(r6, 0x5452, &(0x7f0000000040)=0xffffffffffffffff) sendmsg$kcm(r6, &(0x7f0000001900)={0x0, 0x0, 0x0}, 0x20040000) socket$tipc(0x1e, 0x5, 0x0) sendmsg$inet(r6, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @loopback}, 0x10, 0x0}, 0x30004001) readv(r6, &(0x7f0000000540)=[{&(0x7f0000000180)=""/234, 0xea}, {0x0}], 0x2) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000c40)={0x14, 0x24, 0x1, 0x70bd26, 0x25dfdbfc, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) r10 = socket$netlink(0x10, 0x3, 0xc) sendmmsg(r10, &(0x7f00000002c0), 0x40000000000009f, 0x0) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r11, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) 6.376063754s ago: executing program 2 (id=3050): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000300000085005b2186f722a8b74415ea60ce1e0f2900001300000085"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb790700117df37538e486dd6317ce22000000000000000000000000000000007fc5f603ff"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x10, 0x1}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb88, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) (fail_nth: 52) 6.251678271s ago: executing program 2 (id=3053): socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000500)=@gettclass={0x24, 0x2a, 0x1, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x7, 0xfff1}, {0x9, 0x5}, {0xa, 0x6}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000050}, 0x2000c8d1) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0500000003f01f00660000007f80010001"], 0x48) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1200000004000000080000000800000000000000", @ANYRES32, @ANYBLOB="0200"/17, @ANYRES32], 0x50) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) sendmsg$nl_generic(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xd61f5c59020168e9}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, 0x20, 0x300, 0x70bd28, 0x25dfdbfb, {0xe}, [@typed={0xc, 0x93, 0x0, 0x0, @u64=0xfffffffffffffff7}, @typed={0x8, 0xcc, 0x0, 0x0, @u32=0xf}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x8011) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x1, @ANYBLOB="0400"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="030000000200000001000000004f3fded5f8ffffff00000000000000"], 0x50) 5.844473402s ago: executing program 4 (id=3058): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x18}}, 0x0) getsockname$packet(r0, 0x0, &(0x7f0000000200)) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x4, 0xfe, 0x100, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @remote, 0x8000, 0x700, 0x6, 0x3aa1f153}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000100)={'ip6tnl0\x00', r2, 0x0, 0x40, 0x64, 0x1ac9ee85, 0x0, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0x1, 0xd, 0xa174}}) 5.770328466s ago: executing program 0 (id=2959): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f00000000c0)=[{0x20, 0x0, 0x2, 0xfffff010}, {0x20, 0x0, 0x0, 0xfffff038}, {0x6}]}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="120000000d000000"], 0x50) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[], 0x58}}, 0x20008000) sendmmsg(r0, &(0x7f0000000180), 0x4000190, 0x0) r2 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x63, 0x11, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x1a}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bind$packet(r2, &(0x7f0000000080)={0x11, 0x800, r3, 0x1, 0x0, 0x6, @random="518440db9de1"}, 0x14) r4 = socket(0x200000000000011, 0x2, 0xd) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) bind$packet(r4, &(0x7f0000000080)={0x11, 0x800, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) syz_emit_ethernet(0x22, &(0x7f0000000380)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @multicast, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x3, 0x0, 0x14, 0x47, 0x0, 0x7, 0x6c, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}}, 0x0) 5.268253336s ago: executing program 0 (id=3062): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}}, &(0x7f00000001c0)='syzkaller\x00'}, 0x80) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000100)={r0, r2, 0x25, 0x4, @val=@netfilter={0x7, 0x0, 0x9}}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000003880)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000400)={@fallback=r3, r3, 0x2f}, 0x20) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000180)={0x0, 0x0}, 0x0) r6 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000002c0)=r5, 0x4) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000240)={@fallback=r3, r4, 0x2f, 0x2000, 0x4, @value=r6}, 0x20) 5.258854983s ago: executing program 4 (id=3063): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x7fffffff}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=@newqdisc={0x434, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r6, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0xc7, 0x1, 0x9, 0x8000, 0x3, 0x5, 0x5, 0xb762, 0x4, 0x40007, 0x8, 0xf, 0x2, 0x80000001, 0x400, 0x1007fc, 0xffff8000, 0x6, 0x403, 0x9, 0x8, 0xffffe4f5, 0xd6, 0x4, 0xfffb, 0x7, 0x0, 0xfffff4f0, 0x9, 0x1, 0xfffffffc, 0x4, 0x1, 0x6f2151b1, 0x9, 0xc, 0x20001000, 0x4, 0x2, 0x7, 0x4, 0x99, 0x9, 0x5, 0x6, 0x7, 0xfffffff7, 0x6d, 0x2, 0x9, 0xd05, 0x1000044, 0x8, 0x8, 0x81, 0x4, 0x7ff, 0x8, 0x7, 0x7fbffffe, 0x400, 0x8, 0xfffffa72, 0xcd, 0x4, 0x80000000, 0xc, 0x4, 0x65, 0x91, 0x659, 0x9, 0xf, 0x9, 0xc28, 0x9, 0x7, 0x3, 0x401, 0x3, 0x2, 0xfffffffa, 0x1, 0x10001, 0x3, 0x1, 0x4, 0x8, 0x8, 0x7, 0x1, 0x1, 0x1, 0x7, 0x40, 0x7, 0x12, 0x8000, 0x1, 0x4dc, 0x80, 0x3, 0x7fffffff, 0xff, 0x9, 0xa7, 0xf, 0x1, 0xffffffff, 0x3, 0x1001, 0x4, 0x401, 0x27, 0x80000000, 0xffff, 0x6, 0x5, 0x4f, 0xffffffff, 0x80000000, 0x1966f9ad, 0x200, 0x20200, 0xed5, 0xfffffc00, 0x6, 0x4, 0x8, 0x485e, 0xa85, 0x80000040, 0x2, 0x7, 0x7, 0x102, 0x2d5421e8, 0x7, 0x10000, 0x2, 0x6, 0x3ff, 0xf04, 0x0, 0x2, 0x5, 0xfffffc00, 0x5, 0x8d, 0x4, 0x401, 0x6, 0x9, 0x3, 0xfffffffb, 0x1, 0x0, 0x3, 0x2, 0x5, 0x8, 0x3, 0x0, 0x800, 0xf06, 0x8, 0x7ff, 0x0, 0x9, 0x6, 0x5, 0x400001, 0x4d15, 0x1ff, 0x7, 0x3, 0x469, 0x3, 0x0, 0x200, 0x10000005, 0x7, 0x2, 0x8, 0x42ba, 0x4, 0x9, 0x3, 0x8, 0x8, 0x53, 0x6, 0x4, 0x400, 0x8000, 0x0, 0x2c310b18, 0xfff, 0x0, 0x3, 0xcd34, 0x9, 0x81, 0xdf3, 0x2, 0x7, 0xb, 0x40fff, 0x1ff, 0xa7, 0x3, 0x200, 0x80, 0x6, 0x9a6, 0xe4cb, 0x402, 0x1, 0x1ff, 0x5, 0x9b4, 0x1, 0x8, 0x0, 0x8, 0x0, 0x9, 0x0, 0x4, 0x10, 0x901, 0x5, 0x2, 0x7b, 0xfffffeff, 0x6, 0x6, 0xc, 0x1000, 0x9, 0x9, 0xe6, 0xab, 0x400, 0x7fffffff, 0xed, 0x7ff, 0xd83, 0x68, 0x80000001, 0x6, 0x9fd, 0x10000006, 0x200, 0x2]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x40098}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0xdd86, r7, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="80", 0x1}], 0x1}, 0x4) 4.742373924s ago: executing program 4 (id=3065): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket(0x1, 0x2, 0x0) sendmmsg$unix(r2, &(0x7f0000001680)=[{{&(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}], 0x1, 0x8050) setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f0000000080)=ANY=[@ANYRESDEC=r1], 0x90) shutdown(r0, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="b0000000031400022cbd7000ffdbdf250900020073797a30000000000800410073697700140033006d6163736563300000f9ffffffffffffff00020073797a3000000000080041007278650014003300697036746e6c300000000000000000000900020073797a32000000000800410072786500140033006970766c616e300000000000000000000900020073797a30000000000800410072"], 0xb0}, 0x1, 0x0, 0x0, 0x45}, 0x950) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000002400010025bd70e9ffff070000000000060004"], 0x1c}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="b8000000190001000000000000000000e0000001000000000000000000000000fc01000000000000000000000000000000000000000000000a00808000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000016000000000000000000000000000000000000000000000000000000000010000000000000000000fe0000000073d40000000000000000000086c54bd782650000000000000000000000000000000000d25e4e15ad322b03a0e71fbc12807b6647dcaf460f8558c55494ec9ad38711a1330ed7f30b55455b0759fb31b46f59a9d202995590fc62407c6e35d43a67cfd603465c19cb47ec0b28191cad057765ab29935f0000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x37a5fce0bcf595dd}, 0x20040004) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f0000000440)=[@in={0x2, 0x0, @loopback}]}, &(0x7f0000000040)=0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r5, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) r6 = socket$l2tp6(0xa, 0x2, 0x73) getsockopt$sock_timeval(r6, 0x1, 0x48, 0x0, &(0x7f0000000040)) r7 = openat$ppp(0xffffffffffffff9c, 0x0, 0x40082, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000091}, 0xc880) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x140, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba9432}) socket$alg(0x26, 0x5, 0x0) readv(r8, &(0x7f00000001c0)=[{&(0x7f0000001400)=""/227, 0x10}], 0x4) r9 = socket$kcm(0x2, 0xa, 0x2) r10 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r10, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'}) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$PPPIOCNEWUNIT(r7, 0xc004743e, 0x0) pwritev(r7, 0x0, 0x0, 0x0, 0x6) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={r4, 0x48, 0x30}, 0xc) 4.523178438s ago: executing program 0 (id=3066): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a88000000090a010400000000000000000a000004099a2e682b797a310000000008000a40fffffffc0900010073797a3100000000080005400000000b4400128014000180090001006c61737400000000040002802c0001800a00010071756f74610000001c0002800c00014000000000000000800c0004400000000000000007080003400000013014000000050a0102000000000000000001000007140000001100010000000000000000000100000aa64f1431362eee9f"], 0xc4}, 0x1, 0x0, 0x0, 0x4044050}, 0x40) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) socket$kcm(0xa, 0x5, 0x0) r6 = socket$kcm(0x2, 0x3, 0x2) close(0x3) r7 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(r7, &(0x7f0000002dc0)={&(0x7f0000001640)=@l2tp6={0xa, 0x0, 0x7fff, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8}, 0x80, &(0x7f0000000340)=[{&(0x7f00000003c0)='`', 0x1}], 0x1}, 0x41) setsockopt$sock_attach_bpf(r7, 0x84, 0x1e, &(0x7f0000000000), 0x4) r8 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x8916, &(0x7f0000000040)={'wlan1\x00', @random="0200ac7f7f00"}) close(0x3) ioctl$SIOCSIFHWADDR(r6, 0x8916, &(0x7f0000000040)={'veth0_to_bond\x00', @random="0200ac7f7f00"}) r9 = socket$netlink(0x10, 0x3, 0x10) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) bind$netlink(r9, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000340)=@newtaction={0x898, 0x30, 0x13f, 0x0, 0x0, {}, [{0x884, 0x1, [@m_police={0x880, 0x1, 0x0, 0x0, {{0xb}, {0x854, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe]}], [@TCA_POLICE_RATE={0x404, 0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdccd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb957]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}}}], [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x2}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x898}}, 0x0) setsockopt$sock_int(r9, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r9, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)={0x64, r4, 0x405, 0x70bd27, 0x25dfdbfe, {}, [{{0x8, 0x1, r5}, {0x48, 0x2, 0x0, 0x1, [{0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) 3.670206455s ago: executing program 4 (id=3070): syz_emit_ethernet(0x2e4, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x2ae, 0x3a, 0xff, @local, @mcast2, {[], @dest_unreach={0x1, 0x5, 0x0, 0x4, '\x00', {0x0, 0x6, "c87726", 0x5, 0x2c, 0x1, @dev={0xfe, 0x80, '\x00', 0xb}, @empty, [@dstopts={0x67, 0x12, '\x00', [@calipso={0x7, 0x38, {0x3, 0xc, 0x8, 0x8, [0x1, 0x81f, 0x8, 0xffffffff, 0x5, 0x10]}}, @calipso={0x7, 0x58, {0x2, 0x14, 0x99, 0x3, [0xfffffffffffff000, 0x4, 0x100, 0x9, 0x0, 0x2, 0x0, 0x8000, 0x4, 0x5]}}]}, @fragment={0x0, 0x0, 0xd4, 0x1, 0x0, 0x1f, 0x67}, @dstopts={0x5e, 0x10, '\x00', [@jumbo={0xc2, 0x4, 0x2}, @generic={0xf8, 0x74, "ff6cdfa32748531d6b15a90ad5107fab58dc013140030c353c4b68c12205d5ec7769122993ed53560b0493e3788bb94498f07e7e447e4ed590a2a4e71387867aed4b7f34e496d33b160c5aa4f4d7c412bce5fa386858e08257ed2f7ce95e2e77ee947f1a9f1cc6e6f7961f16897dd7c928cde660"}, @ra={0x5, 0x2, 0x5}]}, @fragment={0x3a, 0x0, 0xc5, 0x0, 0x0, 0x1, 0x64}, @hopopts={0x8, 0x2, '\x00', [@padn={0x1, 0x2, [0x0, 0x0]}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0xfffffffd}, @pad1, @enc_lim={0x4, 0x1, 0x6}]}, @routing={0xff, 0x4, 0x0, 0x5, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @ipv4={'\x00', '\xff\xff', @multicast2}]}], "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"}}}}}}}, 0x0) 3.551981993s ago: executing program 4 (id=3071): socket$inet_sctp(0x2, 0x1, 0x84) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0xfc}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_int(r0, 0x1, 0x10, &(0x7f0000000100), &(0x7f0000000140)=0x4) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f00000005c0)=0x59, 0x4) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r4, &(0x7f0000000bc0)=[{{&(0x7f0000000400)={0x2, 0x4e24, @broadcast}, 0x10, &(0x7f0000000940)=[{&(0x7f0000000740)="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", 0xfd}, {&(0x7f0000000840)="f713374e8b4b042e27", 0x9}, {&(0x7f0000000880)="04a46c71", 0x4}, {&(0x7f00000008c0)='Y', 0x1}, {&(0x7f0000000900)}], 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="14000000000000000000000002000000400000000000000060000000000000000000000007000000441cf811e000000200000003e0000002000000020000000000000002891fdb000000000a0101007f000001e0000001e0000001e0000001e00000020713d6ac1e0001ac14140e000000000a01010200011400000000000000000000000100000000000000000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="00000000ffffffff00008b0c9ebff9494261645dd319f0d0c5e80000"], 0xb0}}], 0x1, 0x404a8d4) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f00000000c0)='cdg', 0x3) writev(r4, &(0x7f0000000500)=[{&(0x7f0000000100)="60d274560bd696081546c236cac4fad0f9e20279d6a3efcf461753dc3ef629acf0a6219f4a55dacaf58a2ba578f2f3521f45d938b99ebfe4134b0aaceafb655a02e28ee985bf6155005d75d9f5423cd88a5554d4eda452bc9ae58635418b596da50d9d6f6b09858cae53cd6c6fa4e68a2d57b8e7164b68922f2a9caea5d08302301494bc82f00343b38848711f2dd965af47f8c2c9306cd17425ea5f92d7b6c3c1679980dd80328a400ec4aad062f875b4e77c5c974b0ef482d83bd7ded1ebae74790177aeb87fb18a39b210ae56973b3f8c85b6fdcc36c58f730f", 0xdb}, {&(0x7f00000002c0)="d9ebb7e88a6069ff59146f8b82b60bc3a4d5b456bc03f5dec89411e15ad2129364fece10ebd695b8f33a353605321c523e3d477a2e54af05d8ed4c83e302d210b9e935242c42dab37e2fe4f1c39f4b31b07757978bcd3214552f9318163be8fac3aa483b171fd87f98f0bc3442afbee61b17c2b96462bc79d220741f07511435793d4b21e4bdf2bfd62f7cc946f2badaf96975e0259da3130d37696fc43384f1ab3302b97a06e6", 0xa7}], 0x2) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000640)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010026bd7000fddbdf2567000000080001004800000008000300", @ANYRES32=r5, @ANYBLOB="2b580e0dae2f901fa84f66580d27a449946d7f24d2a0e1df3a6cb7b48bb356dab0d3e8229d10bb73105d5387ec2646e9bc026bf7f3a9147cac8b754f2458ce949fece89653ab3a0847a375b80fd39fc7fa4be469ac4d413a0ce4e9539ee49fd03c0d9dc09cf6a24733c1973cdc19b8199484685314b500d48f25c80ea8ff2bddd38b67eba20448ecd6bc3eaaae20231cbb3fc59656b8957dc482876e56aed059"], 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000240)={'wg0\x00'}) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0xffffffffffffff8e, &(0x7f0000000600)={&(0x7f0000000440)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x20000005}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[], 0x24}}, 0x4008800) r7 = socket$l2tp6(0xa, 0x2, 0x73) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) ioctl$FS_IOC_FSGETXATTR(r2, 0x801c581f, &(0x7f00000001c0)={0xffffff7f, 0x200000, 0x1b, 0x1, 0x9}) sendmmsg$inet6(r7, &(0x7f0000002d80)=[{{&(0x7f0000000180)={0xa, 0x4e23, 0x2, @mcast1, 0xc}, 0x1c, 0x0}}], 0x1, 0x24000840) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x70, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x34, 0x11, 0x0, 0x1, @limit={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x101}, @NFTA_LIMIT_BURST={0x8, 0x3, 0x1, 0x0, 0x1000000}]}}}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xb8}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="b4050000200080006110600000000000c60000000000000095000000000000009f33ef60916e6e893f1eeb0be2566cd0723043c47c896ce0bce66a245ad98a6f77ef26dcca5582054d54d53cd2b6db714e4b94bdae214fa68a0557343c5ca683a4b6fc89398f2b0000f224ab1bf906536e11d3f38e5c27891060017cfa6fa26fa7a34700de60beac671e8e8fdecb03588aa623fa71f871ab5c2ff88afc715f9fa75b52710aeee835cf0d78e45f70983826fb8579c1fb47d2c5553d2ccb5fc5b51fe6b174ebd9907dcff414ed55b0d18a93ee"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 3.512332233s ago: executing program 0 (id=3073): unshare(0x66000080) r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f00000000c0), &(0x7f0000000040)=0x8) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x5, [@struct={0x1, 0x1, 0x0, 0x4, 0x1, 0x4, [{0x0, 0x4, 0x1}]}]}, {0x0, [0x61, 0x2e, 0x5f]}}, &(0x7f0000000f40)=""/4089, 0x35, 0xff9, 0x1}, 0x28) socket$nl_xfrm(0x10, 0x3, 0x6) 3.027376452s ago: executing program 1 (id=3077): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x60}, 0x94) r0 = socket$kcm(0x11, 0x2, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000440)=r1, 0x4) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x700, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 2.964738364s ago: executing program 3 (id=3078): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000fdffffde18000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="1809000000ffffff00000000000000008510000002000000850000000f0000009500000000000000"], 0x0, 0xfffffdfe, 0x0, 0x0, 0x727c45cd4283345, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffe55, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r1, 0x0, 0x0}, 0x10) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f0000000140)=0x40, 0x4) r3 = socket$xdp(0x2c, 0x3, 0x0) syz_emit_ethernet(0x56, &(0x7f0000000040)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}, @void, {@canfd={0xd, {{0x2, 0x0, 0x1}, 0x4, 0x3, 0x0, 0x0, "ab648442b3e3c4ceb9a3b4dfab1344e0935d67b0d5b57a324e2660b4fad528e6396ba02f23af3f079d68f8a0889b86798f4c3301b6caa8c65af2cf0661b1107f"}}}}, &(0x7f00000000c0)={0x1, 0x2, [0x9e9, 0x727, 0xb2a, 0xfb6]}) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000004c0)={&(0x7f0000000440)=""/64, 0x328000, 0x1000, 0x9, 0x3}, 0x20) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000f40)=ANY=[@ANYBLOB="3c020000190001000000000000000000fc0200000000000000000000000000000000000000000000000000000000000000000003000000000a00002008000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001d00000000000000000000000000000000000000000000000000000000000000dd020000000000000000000000000000000000020000000084010500ac14143b000000000000000000000000000000002b00000000000000ac14140c000000000000000000000000000000000000ff00000000000000000000000000ffffffff000000000000000000000000100000003200000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff020000000000000000000000000001000000003c00000002000000ac1e01010000000000000000000000000000000001030000000000000000000000000000ff020000000000000000000000000001000000003c00000002000000ac1414aa00000000000000000000000000000000000004000000000003000000000000007f000001000000000000000000000000000000003c0000000200000000000000000000000000000000000000ffffffff0000000000000000000000000000000020010000000000000000000000000001000000003200000002000000ffffffff0000000000000000000000000000009e10"], 0x23c}}, 0x0) setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000300)=0x2, 0x4) r6 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$xdp(r3, &(0x7f0000000100)={0x2c, 0x0, r5}, 0x10) r7 = accept$inet(0xffffffffffffffff, &(0x7f0000000200)={0x2, 0x0, @dev}, &(0x7f0000000480)=0x10) getsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000500), 0x10) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f00000005c0)={0x0, 0xcc, "5c4393293b45e97187adb13f7521644b7ee69a76fb471e3b332049a578575e2c134498296a3b7aa84006b292e911f952d5bc02de9cd8902d9269272657e1e6eb2acbd6be364edacc51b3a505951f9cb6b174a1619ff67bdc6d66b88aa80f6e0d11992586e1305c4c138f6ff9b6b6b059bc5f6284fce7742b0890a9c78d4339be210f18309dffe3cedc10e4fda67962d0506f91a04995ac0e53f7caefcc37c9ddb668909744c77656d1092c77858a7736de72bd0a80c53ab6d1e7b7ab8bbd297959d8a9bc26e064120ac39ce8"}, &(0x7f00000006c0)=0xd4) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r7, 0x84, 0x79, &(0x7f0000000700)={r8, 0x1ff, 0x7}, 0x8) bind$xdp(r2, &(0x7f0000000240)={0x2c, 0x1, r5, 0x0, r3}, 0x10) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r10, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r11, {0xfff3, 0xfff1}, {0x4, 0xa}, {0x0, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x4048080}, 0x0) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0x48) r13 = bpf$ITER_CREATE(0x21, &(0x7f0000000180), 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="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", @ANYRES32=r12, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000580000009500000000000000"], &(0x7f0000000240)='syzkaller\x00', 0xc, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff3d, 0x0, r13, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.688819057s ago: executing program 1 (id=3079): r0 = socket(0x10, 0x803, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x4, 0xc}, 0x50) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000300)={0xa, 0x4e24, 0x6bb, @ipv4={'\x00', '\xff\xff', @local}, 0x5}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000540), 0x3) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f00000004c0)=@gcm_256={{0x303, 0x3a}, "56db7a2700f81000", "a8ef1a3a33071799b7bbebfa6dc371290d0e3808802000", "336819df", "4008000000008700"}, 0x38) setsockopt$inet6_IPV6_ADDRFORM(r3, 0x29, 0x1, &(0x7f0000000000), 0x4) ioctl$sock_inet_SIOCSARP(r2, 0x8955, &(0x7f00000003c0)={{0x2, 0x4e26, @multicast2}, {0x20000010304, @local}, 0x12, {0x2, 0x4e24, @multicast1}, 'lo\x00'}) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={r1, &(0x7f0000000180)}, 0x20) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r5 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000080)={0x20000001}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=@newlink={0x4c, 0x10, 0x437, 0x800000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x504c3}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_MLD_VERSION={0x5, 0x2c, 0x1}, @IFLA_BR_AGEING_TIME={0x8, 0x4, 0x9}, @IFLA_BR_VLAN_STATS_PER_PORT={0x5}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2000c014}, 0x0) 2.426624744s ago: executing program 4 (id=3080): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={0x0, 0x0, 0x44}, 0x28) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x8000f28, 0x5) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x880}, 0x2014) sendmmsg$inet(r1, &(0x7f0000003240)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000e80)="2389", 0x2}], 0x1}}], 0x1, 0x4040040) socket$pppl2tp(0x18, 0x1, 0x1) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_KEY(r3, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0x28, 0x0, 0x4, 0x70bd2d, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000800}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_GET(r4, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r5, 0x29, 0x48, &(0x7f0000001fc0)=0x57f4, 0x4) socket$inet(0x2, 0x4, 0xbc) 2.275321644s ago: executing program 3 (id=3081): socket(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r0) getsockname$packet(r0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_add_memb(r1, 0x107, 0x18, 0x0, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x50) ioctl$PPPOEIOCDFWD(r0, 0xb101, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r2 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000500)="5c00000013006bcc9e3be35c6e17aa31076b876c1c0000007ea60864160af36514001ac0080002008100020006a101c00364683b9dad7aa21240d69a6a818cf6c551ae60fc91b169edb1b175732b9f597fe3b6c5a3d77cc766307de2", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4044) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r4, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x64, r5, 0x1, 0x70bd2b, 0x1000, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x9}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r3}}, {0xc, 0x300, 0x0, 0x1, {0x8, 0x1, r3}}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x122}, @NBD_ATTR_BACKEND_IDENTIFIER={0xd, 0xa, 'list:set\x00'}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x64}}, 0x400400c) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000300), 0x0, 0xc000, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x66) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)={0x60, 0x2, 0x6, 0x101, 0x0, 0x0, {0xa, 0x0, 0xa}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0xd8}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0x4}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}]}, 0x60}, 0x1, 0x0, 0x0, 0x20044040}, 0x40800) socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a300000000064000000060a010400000000000000000100000008000b40000000003c00048038000180080001006e6174002c00028008000540000000000800014000000000080006400000000d08000240ffff000a08000640000000250900010073797a30"], 0xd8}, 0x1, 0x0, 0x0, 0x80}, 0x0) syz_emit_ethernet(0x25c, &(0x7f0000000440)={@local, @multicast, @void, {@ipv4={0x800, @gre={{0x24, 0x4, 0x1, 0x3d, 0x24e, 0x67, 0x0, 0x6, 0x2f, 0x0, @empty, @local, {[@lsrr={0x83, 0x1b, 0xdb, [@rand_addr=0x64010102, @remote, @loopback, @loopback, @dev={0xac, 0x14, 0x14, 0x30}, @private=0xa010101]}, @end, @generic={0x83, 0xb, "1e3ca8a4995b594cdf"}, @timestamp_addr={0x44, 0x54, 0xd0, 0x1, 0x3, [{@private=0xa010100}, {@broadcast, 0x227b}, {@broadcast, 0x6}, {@empty, 0x83}, {@broadcast, 0x1000}, {@remote, 0x2}, {@empty, 0x3}, {@dev={0xac, 0x14, 0x14, 0x15}}, {@multicast1, 0x4}, {@broadcast, 0x6}]}, @noop]}}, {{0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x880b, 0xf, 0x0, [0x5], "e7a44483df056ac08a8706e840c5d9"}, {0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800, [0x8, 0x0], "c8e7eaf7b9a5943373e2732493247790fb10c3823bbd42d8ec5f566454f653901fec40b330038c784783d430fb3ade97261e40283a9a828094fb0143a6b73b69a7"}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, [], "444508cd8458502c6ad1d84224a8ebee11b0ae838678dcbc10a83187c0fbcc0b4f295c6393b3aa00b5575e4e996c9e273d251b82249102dfd4b45928386e0c355d7914ee1cdead9546f7b6f5324b7ce9f4fed8cd82c040b620833e1e4350d08f42cfc7fa106b7007b9bee75aae58d2ff92432345a162a90ff3502ee563375378e97f55962b1d9df9340a2127cfe43616aaad858eac7da8bd58bf71f63bd2ecd0743650d34b04a771dd1c36669cbceced323240082092fc330b"}, {0x8, 0x88be, 0x3, {{0xd, 0x1, 0x1, 0x0, 0x1, 0x3, 0x4, 0x36}}}, {0x8, 0x22eb, 0x2, {{0xb, 0x2, 0x7, 0x0, 0x1, 0x1, 0x5, 0xca}, 0x2, {0x400, 0x0, 0x1, 0x1e, 0x0, 0x1, 0x0, 0x0, 0x1}}}, {0x8, 0x6558, 0x0, "9134b9261548e95e753b5eb96c1084292bea5ff3c828d77a9d9db0e7878dd7dcca4bac3d37c5fca08ca00e84132b7cdd1f3cfcd3888bf259ade3aa09407737b5c1cd4a1c1fa285c8cd9804d49e25a7ba48cabe6e060bcecd6e0f9fb80f6fe2335afa7222568583d6ffc092"}}}}}}, 0x0) 1.978045973s ago: executing program 1 (id=3082): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000580), 0x62a01, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r3, &(0x7f0000001840)={@val={0x8, 0x800}, @val={0x6, 0x0, 0x5, 0x0, 0x14}, @ipv4=@generic={{0x5, 0x4, 0x2, 0xc, 0x14, 0x65, 0x0, 0xd, 0x6c, 0x0, @rand_addr=0x64010102, @broadcast}}}, 0x22) writev(r0, &(0x7f00000004c0)=[{&(0x7f0000000440)="2e9b3d0007e03dd65193dfb6c575963f8864", 0x12}, {&(0x7f00000001c0)="31020702", 0x4}, {&(0x7f0000000140)="683f0057954e8374745111caea99bc671e3d", 0x12}], 0x3) 1.66371259s ago: executing program 3 (id=3083): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1005, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) syz_init_net_socket$x25(0x9, 0x5, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) bind$netlink(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003200)=ANY=[@ANYBLOB="5c01000010000100feffffff00010000fe880000000000000000000000000001fc010000000000000000000000000001000107144e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x15c}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000500)="d8000000180081064e81f782db4cb904021e0800fd007c05e8fe55a10a000b000140020203600e41b0000900ac0006031100000004001500090002000000035c3b61c1d67f6f94007134cf6efbca4158858e796834b25ae5a3048000a007a290457f01a7cee4090000001fb7913fd25a21ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5ae24e25ccca9e", 0x8e}, {&(0x7f0000000280)="c6e92830568379be24e7d2cfa14e3179fea6a9af4f780998ebb65a384d5eea865c38871cc1350c7e42fcf530054c203e2273e02faf8c", 0x36}], 0x2}, 0x22040000) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000740)=@newsa={0x138, 0x1a, 0x1, 0x70bd2b, 0x100, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x717, 0x4e23, 0x5, 0xa, 0x0, 0x20, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, {0xfe, 0x1000000000000192, 0x9ba3, 0x8, 0x8251c, 0x5, 0xfffffffffffffffc, 0x4}, {0xad25, 0x200000000000000, 0x1f, 0xfffffffffffffffe}, {0xfffffffe, 0x3fc}, 0x7e, 0x3505, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8024}, 0x844) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084) 1.430333859s ago: executing program 3 (id=3084): socket$nl_xfrm(0x10, 0x3, 0x6) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x2000c800) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, 0x0, 0x0, 0x0) r2 = openat$cgroup_procs(r0, &(0x7f0000000400)='cgroup.procs\x00', 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000500)=@newtfilter={0x43c, 0x2c, 0xd27, 0x70bd25, 0x25dfdffd, {0x0, 0x0, 0x0, 0x0, {0x6}, {}, {0x8, 0x6}}, [@filter_kind_options=@f_route={{0xa}, {0x40c, 0x2, [@TCA_ROUTE4_POLICE={0x408, 0x5, [@TCA_POLICE_RATE={0x404, 0x2, [0xffff, 0x80, 0x800, 0x5, 0xf8a, 0x75, 0x7fffffff, 0x4, 0x7fffffff, 0x1, 0xfffffffb, 0x4, 0x6, 0x4, 0x8, 0x2, 0x0, 0x1, 0x8, 0x7ff, 0xdb, 0x72f4, 0x6, 0x7, 0xd6, 0x0, 0x7, 0x3, 0x2, 0x5a18, 0x2a, 0x5, 0xa, 0x5, 0x6, 0x6, 0x1, 0x0, 0x5, 0xd, 0x6, 0xe60, 0x3a, 0x14, 0x31, 0xc4e2, 0xbf3, 0xfffffff7, 0x2, 0x8, 0x50, 0xfffffff2, 0x8, 0x8, 0x80000001, 0xfffffff7, 0x671b, 0x0, 0x1, 0x9, 0x36, 0xd, 0x79, 0x0, 0x9, 0x8, 0x8, 0x4, 0x10, 0x722b, 0x3f38b6fd, 0x7, 0x4, 0xcb8, 0x713e, 0x8, 0x9, 0x5, 0x33b1026, 0xe9de, 0xf6, 0xd, 0xc, 0x7800000, 0xc1, 0x6f, 0x5, 0x8, 0x2, 0x4, 0xace1, 0x4, 0x6, 0x2, 0x4, 0xff, 0x87, 0x99cf, 0xf, 0x306, 0x6505, 0x4, 0x98, 0x3, 0x6, 0x1, 0x5ba, 0x8, 0x0, 0x7ff, 0x7ff, 0x6, 0x7fffffff, 0x8, 0x3c00000, 0x101, 0xf98, 0x5, 0xc46c, 0x8, 0x7, 0x3b, 0x9, 0xffffffff, 0x81, 0x2, 0x5, 0x1, 0x1000, 0x200, 0xc51, 0x6ee2, 0xe81, 0x8901, 0x2, 0x4, 0x3, 0x7, 0x7b9, 0xfa, 0x40, 0xe, 0x6, 0xd8, 0x7fffffff, 0x7fffffff, 0x4ff5a575, 0xc6b7, 0x1, 0xffff8001, 0x40, 0xff, 0x7, 0x5, 0x6e7, 0x3, 0x1, 0xa434, 0xffff, 0x6, 0x6, 0x6, 0x9, 0x4, 0xfffffff7, 0x10001, 0xfffffffa, 0x0, 0x3, 0x3, 0xffffffff, 0x5, 0x357a, 0x1, 0x1, 0x4, 0x4, 0x6, 0x7f, 0x7, 0x8, 0x3, 0x10001, 0xcbf, 0x7, 0x5, 0xf6, 0x8, 0x4, 0x9f8, 0x9, 0x6, 0x1, 0x9, 0x8, 0xff, 0x1ff, 0x2b, 0x5, 0x8, 0x9, 0xff, 0x2, 0x2, 0xfffffff8, 0x5, 0xc3, 0x40, 0x7, 0x80000001, 0x4000000, 0x3, 0xffffffff, 0x800, 0x8, 0x4, 0xb, 0x4, 0x8, 0x1, 0x7f, 0x6, 0x1, 0x10000, 0xacd6, 0xfffffff7, 0x200, 0x10001, 0x8, 0xfffffffa, 0x2, 0x2, 0x4, 0x9, 0x6, 0xffff108b, 0xfffffead, 0x0, 0x0, 0x1ff, 0x4, 0x3, 0x8, 0x0, 0xa6d, 0x5c5, 0x2, 0x6, 0x82, 0x3, 0xffffff7d, 0x8001, 0xffffff2d, 0x2, 0x1000, 0x80000000]}]}]}}]}, 0x43c}}, 0x20004811) sendmsg$DEVLINK_CMD_TRAP_GET(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000540)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000fbfbdf25270000000e0001006e655f64657673696d0000000f0002006e657464657673696d3000001c0053"], 0x50}, 0x1, 0x0, 0x0, 0x24040011}, 0x0) write$cgroup_pid(r2, &(0x7f0000000c40), 0x12) pread64(0xffffffffffffffff, &(0x7f0000001840)=""/4096, 0x1000, 0x80000002) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz0\x00', 0x200002, 0x0) r6 = openat$cgroup_procs(r5, &(0x7f00000000c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f0000000240), 0x12) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000140)={'team0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) socket$nl_xfrm(0x10, 0x3, 0x6) 1.230624864s ago: executing program 3 (id=3085): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x18}}, 0x0) getsockname$packet(r0, 0x0, &(0x7f0000000200)) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x4, 0xfe, 0x100, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @remote, 0x8000, 0x700, 0x6, 0x3aa1f153}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000100)={'ip6tnl0\x00', r2, 0x0, 0x40, 0x64, 0x1ac9ee85, 0x0, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0x1, 0xd, 0xa174}}) 400.75061ms ago: executing program 3 (id=3086): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a0b160000000000000000020000084c00048018000180080001006f7366000c000280080001400000000430000180080001006e617400240002800800014000000000080005400000001708000640000000000800024000ddff010900010073797a30000000000900020073797a3200"], 0xa0}, 0x1, 0x0, 0x0, 0x850}, 0x4040080) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r2, @ANYBLOB="06001500070000000c00168008000100", @ANYRES64=r1], 0x38}}, 0x10) r3 = socket$netlink(0x10, 0x3, 0x9) bind$netlink(r3, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbfb}, 0xc) sendmsg$TIPC_CMD_SET_LINK_TOL(r3, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x68, 0x0, 0x1, 0x70bd2b, 0x25dfdbfd, {{}, {}, {0x4c, 0x18, {0x2, @media='ib\x00'}}}, [""]}, 0x68}, 0x1, 0x0, 0x0, 0x20000000}, 0x110) bind$netlink(r3, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbfb, 0x1}, 0xc) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000000)={{0x2, @empty, 0x4e24, 0x0, 'none\x00', 0x14, 0x3, 0x33}, {@local, 0x4e23, 0x1, 0xe5, 0x400, 0x40}}, 0x44) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x40d, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_PACKETS_PER_SLAVE={0x8, 0x14, 0x52}, @IFLA_BOND_MODE={0x5, 0x1, 0x5}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40040}, 0x0) 237.629442ms ago: executing program 1 (id=3087): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x11, 0x3, 0x0) setsockopt(r1, 0x107, 0xf, &(0x7f0000000100)="00008634", 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'vlan0\x00', 0x0}) sendmsg(r1, &(0x7f0000000100)={&(0x7f0000000040)=@ll={0x11, 0x3, r2, 0x1, 0xe5, 0x6, @broadcast}, 0x80, &(0x7f0000000240)=[{&(0x7f00000003c0)="02013600002d3922ff65b4355e953d23d254f000ffffffff", 0x18}, {&(0x7f00000001c0)="2cf2565b0e508224b706a643e98dc932f5fc6d8e51626cdbf9ff02dbb8b2d2ca2be0dfa8f2a777f680c590257a0641579678f72a6ff270a8989633cbe781bf372d4a0e61", 0xff87}], 0x2}, 0x44000) 121.597028ms ago: executing program 1 (id=3088): socket$packet(0x11, 0x2, 0x300) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000140)={0xa, 0xe22, 0x0, @loopback={0xff00000000000000}}, 0x1c) bind$inet6(r0, 0x0, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x144, 0x10, 0x1, 0xbffffffe, 0x25dfdbfe, {{@in=@empty, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1, 0x394, 0x4e23, 0x5, 0x0, 0x80, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@remote, {0x0, 0x9, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0x6, 0x0, 0x1f, 0x1ff}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0xa, 0x1, 0xfd, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @mark={0xc, 0x15, {0x35075a, 0x3}}]}, 0x144}, 0x1, 0x0, 0x0, 0x8801}, 0x10) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@local, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x1a, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@remote, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x9, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0xa, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) 0s ago: executing program 1 (id=3089): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}}, &(0x7f00000001c0)='syzkaller\x00'}, 0x80) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000100)={r0, r2, 0x25, 0x4, @val=@netfilter={0x7, 0x0, 0x9}}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000003880)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000400)={@fallback=r3, r3, 0x2f}, 0x20) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000180)={0x0, 0x0}, 0x0) r6 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000002c0)=r5, 0x4) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000240)={@fallback=r3, r4, 0x2f, 0x2000, 0x4, @value=r6}, 0x20) kernel console output (not intermixed with test programs): 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 299.239772][T13124] RSP: 002b:00007f73237f3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 299.239792][T13124] RAX: ffffffffffffffda RBX: 00007f7322c15fa0 RCX: 00007f732299ce59 [ 299.239805][T13124] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000006 [ 299.239817][T13124] RBP: 00007f73237f3090 R08: 0000000000000000 R09: 0000000000000000 [ 299.239828][T13124] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 299.239839][T13124] R13: 00007f7322c16038 R14: 00007f7322c15fa0 R15: 00007ffc5c8448a8 [ 299.239870][T13124] [ 299.679185][T13128] veth5: entered allmulticast mode [ 299.937533][T13149] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2343'. [ 300.221360][T13163] FAULT_INJECTION: forcing a failure. [ 300.221360][T13163] name failslab, interval 1, probability 0, space 0, times 0 [ 300.238719][T13163] CPU: 0 UID: 0 PID: 13163 Comm: syz.4.2351 Not tainted syzkaller #0 PREEMPT(full) [ 300.238744][T13163] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 300.238755][T13163] Call Trace: [ 300.238763][T13163] [ 300.238771][T13163] dump_stack_lvl+0xe8/0x150 [ 300.238798][T13163] should_fail_ex+0x40c/0x560 [ 300.238831][T13163] should_failslab+0xa8/0x100 [ 300.238851][T13163] __kmalloc_noprof+0xe8/0x750 [ 300.238874][T13163] ? is_bpf_text_address+0x26/0x2b0 [ 300.238891][T13163] ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 300.238919][T13163] genl_family_rcv_msg_attrs_parse+0xd0/0x2f0 [ 300.238949][T13163] genl_family_rcv_msg_doit+0xda/0x340 [ 300.238977][T13163] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 300.239006][T13163] ? apparmor_capable+0x126/0x170 [ 300.239025][T13163] ? bpf_lsm_capable+0x9/0x20 [ 300.239041][T13163] ? security_capable+0x7e/0x2c0 [ 300.239069][T13163] genl_rcv_msg+0x614/0x7a0 [ 300.239095][T13163] ? __pfx_genl_rcv_msg+0x10/0x10 [ 300.239115][T13163] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 300.239134][T13163] ? __pfx_nl80211_tx_control_port+0x10/0x10 [ 300.239154][T13163] ? __pfx_nl80211_post_doit+0x10/0x10 [ 300.239187][T13163] netlink_rcv_skb+0x226/0x4a0 [ 300.239207][T13163] ? __pfx_genl_rcv_msg+0x10/0x10 [ 300.239231][T13163] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 300.239265][T13163] ? down_read+0x270/0x2e0 [ 300.239285][T13163] ? genl_rcv+0xd/0x40 [ 300.239309][T13163] genl_rcv+0x28/0x40 [ 300.239329][T13163] netlink_unicast+0x7bb/0x940 [ 300.239363][T13163] netlink_sendmsg+0x813/0xb40 [ 300.239391][T13163] ? __pfx_netlink_sendmsg+0x10/0x10 [ 300.239413][T13163] ? aa_sock_msg_perm+0xf1/0x1b0 [ 300.239439][T13163] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 300.239459][T13163] ? __pfx_netlink_sendmsg+0x10/0x10 [ 300.239479][T13163] ____sys_sendmsg+0x9b9/0xa20 [ 300.239498][T13163] ? __might_fault+0xaf/0x130 [ 300.239536][T13163] ? __pfx_____sys_sendmsg+0x10/0x10 [ 300.239563][T13163] ? import_iovec+0x73/0xa0 [ 300.239587][T13163] ___sys_sendmsg+0x2a5/0x360 [ 300.239605][T13163] ? __lock_acquire+0x683/0x2cd0 [ 300.239628][T13163] ? __pfx____sys_sendmsg+0x10/0x10 [ 300.239681][T13163] ? __fget_files+0x2a/0x420 [ 300.239702][T13163] ? __fget_files+0x3a2/0x420 [ 300.239737][T13163] __x64_sys_sendmsg+0x1bd/0x2a0 [ 300.239760][T13163] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 300.239790][T13163] ? __pfx_ksys_write+0x10/0x10 [ 300.239823][T13163] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 300.239844][T13163] do_syscall_64+0x174/0x580 [ 300.239864][T13163] ? trace_irq_disable+0x3b/0x140 [ 300.239889][T13163] ? clear_bhb_loop+0x40/0x90 [ 300.239912][T13163] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 300.239930][T13163] RIP: 0033:0x7f732299ce59 [ 300.239948][T13163] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 300.239964][T13163] RSP: 002b:00007f73237f3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 300.239984][T13163] RAX: ffffffffffffffda RBX: 00007f7322c15fa0 RCX: 00007f732299ce59 [ 300.239998][T13163] RDX: 0000000000000000 RSI: 0000200000003700 RDI: 0000000000000003 [ 300.240010][T13163] RBP: 00007f73237f3090 R08: 0000000000000000 R09: 0000000000000000 [ 300.240021][T13163] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 300.240032][T13163] R13: 00007f7322c16038 R14: 00007f7322c15fa0 R15: 00007ffc5c8448a8 [ 300.240064][T13163] [ 300.753244][T13168] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2352'. [ 300.976759][T13174] netlink: 'syz.4.2354': attribute type 12 has an invalid length. [ 301.942590][T13225] syzkaller0: entered promiscuous mode [ 301.967481][T13225] syzkaller0: entered allmulticast mode [ 301.991303][T13225] FAULT_INJECTION: forcing a failure. [ 301.991303][T13225] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 302.032908][T13225] CPU: 1 UID: 0 PID: 13225 Comm: syz.1.2375 Not tainted syzkaller #0 PREEMPT(full) [ 302.032933][T13225] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 302.032945][T13225] Call Trace: [ 302.032952][T13225] [ 302.032960][T13225] dump_stack_lvl+0xe8/0x150 [ 302.032986][T13225] should_fail_ex+0x40c/0x560 [ 302.033019][T13225] _copy_from_iter+0x1d3/0x1660 [ 302.033037][T13225] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 302.033061][T13225] ? dev_get_by_index+0x22/0x2d0 [ 302.033085][T13225] ? __pfx__copy_from_iter+0x10/0x10 [ 302.033106][T13225] ? dev_get_by_index+0x22/0x2d0 [ 302.033126][T13225] ? dev_get_by_index+0x22/0x2d0 [ 302.033153][T13225] packet_sendmsg+0x2f1d/0x5040 [ 302.033183][T13225] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 302.033207][T13225] ? __lock_acquire+0x683/0x2cd0 [ 302.033237][T13225] ? rwsem_del_wake_waiter+0x250/0x2d0 [ 302.033291][T13225] ? __pfx_packet_sendmsg+0x10/0x10 [ 302.033310][T13225] ? aa_sk_perm+0x6d5/0x900 [ 302.033349][T13225] ? __pfx_aa_sk_perm+0x10/0x10 [ 302.033371][T13225] ? tomoyo_socket_sendmsg_permission+0x1e0/0x300 [ 302.033403][T13225] ? aa_sock_msg_perm+0xf1/0x1b0 [ 302.033428][T13225] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 302.033449][T13225] ? __pfx_packet_sendmsg+0x10/0x10 [ 302.033470][T13225] __sys_sendto+0x672/0x710 [ 302.033499][T13225] ? __pfx___sys_sendto+0x10/0x10 [ 302.033523][T13225] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 302.033567][T13225] ? __pfx_sched_clock_cpu+0x10/0x10 [ 302.033587][T13225] ? rcu_is_watching+0x15/0xb0 [ 302.033609][T13225] ? trace_csd_function_exit+0x81/0x1e0 [ 302.033625][T13225] ? __pfx_flush_tlb_func+0x10/0x10 [ 302.033652][T13225] __x64_sys_sendto+0xde/0x100 [ 302.033677][T13225] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 302.033696][T13225] do_syscall_64+0x174/0x580 [ 302.033719][T13225] ? clear_bhb_loop+0x40/0x90 [ 302.033740][T13225] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 302.033758][T13225] RIP: 0033:0x7f77cbb9ce59 [ 302.033776][T13225] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 302.033789][T13225] RSP: 002b:00007f77cca0d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 302.033809][T13225] RAX: ffffffffffffffda RBX: 00007f77cbe15fa0 RCX: 00007f77cbb9ce59 [ 302.033822][T13225] RDX: 000000000000fce0 RSI: 00002000000002c0 RDI: 0000000000000003 [ 302.033834][T13225] RBP: 00007f77cca0d090 R08: 0000200000000140 R09: 0000000000000014 [ 302.033845][T13225] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000001 [ 302.033856][T13225] R13: 00007f77cbe16038 R14: 00007f77cbe15fa0 R15: 00007ffd092dcfa8 [ 302.033886][T13225] [ 302.444973][T13251] FAULT_INJECTION: forcing a failure. [ 302.444973][T13251] name failslab, interval 1, probability 0, space 0, times 0 [ 302.487437][T13251] CPU: 1 UID: 0 PID: 13251 Comm: syz.3.2378 Not tainted syzkaller #0 PREEMPT(full) [ 302.487463][T13251] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 302.487474][T13251] Call Trace: [ 302.487489][T13251] [ 302.487497][T13251] dump_stack_lvl+0xe8/0x150 [ 302.487523][T13251] should_fail_ex+0x40c/0x560 [ 302.487556][T13251] should_failslab+0xa8/0x100 [ 302.487574][T13251] ? skb_clone+0x212/0x3a0 [ 302.487594][T13251] kmem_cache_alloc_noprof+0x87/0x650 [ 302.487628][T13251] skb_clone+0x212/0x3a0 [ 302.487651][T13251] __netlink_deliver_tap+0x413/0x860 [ 302.487683][T13251] ? netlink_deliver_tap+0x2e/0x1b0 [ 302.487705][T13251] netlink_deliver_tap+0x19c/0x1b0 [ 302.487725][T13251] netlink_unicast+0x77f/0x940 [ 302.487762][T13251] netlink_sendmsg+0x813/0xb40 [ 302.487792][T13251] ? __pfx_netlink_sendmsg+0x10/0x10 [ 302.487815][T13251] ? aa_sock_msg_perm+0xf1/0x1b0 [ 302.487842][T13251] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 302.487864][T13251] ? __pfx_netlink_sendmsg+0x10/0x10 [ 302.487886][T13251] ____sys_sendmsg+0x9b9/0xa20 [ 302.487906][T13251] ? __might_fault+0xaf/0x130 [ 302.487934][T13251] ? __pfx_____sys_sendmsg+0x10/0x10 [ 302.487963][T13251] ? import_iovec+0x73/0xa0 [ 302.487986][T13251] ___sys_sendmsg+0x2a5/0x360 [ 302.488006][T13251] ? __lock_acquire+0x683/0x2cd0 [ 302.488028][T13251] ? __pfx____sys_sendmsg+0x10/0x10 [ 302.488076][T13251] ? __fget_files+0x2a/0x420 [ 302.488096][T13251] ? __fget_files+0x3a2/0x420 [ 302.488123][T13251] __x64_sys_sendmsg+0x1bd/0x2a0 [ 302.488145][T13251] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 302.488171][T13251] ? __pfx_ksys_write+0x10/0x10 [ 302.488199][T13251] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 302.488217][T13251] do_syscall_64+0x174/0x580 [ 302.488235][T13251] ? trace_irq_disable+0x3b/0x140 [ 302.488259][T13251] ? clear_bhb_loop+0x40/0x90 [ 302.488280][T13251] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 302.488297][T13251] RIP: 0033:0x7fe6e639ce59 [ 302.488314][T13251] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 302.488328][T13251] RSP: 002b:00007fe6e725e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 302.488347][T13251] RAX: ffffffffffffffda RBX: 00007fe6e6616180 RCX: 00007fe6e639ce59 [ 302.488359][T13251] RDX: 0000000000004890 RSI: 00002000000003c0 RDI: 0000000000000004 [ 302.488370][T13251] RBP: 00007fe6e725e090 R08: 0000000000000000 R09: 0000000000000000 [ 302.488381][T13251] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 302.488391][T13251] R13: 00007fe6e6616218 R14: 00007fe6e6616180 R15: 00007ffd27e60fd8 [ 302.488421][T13251] [ 302.761063][T13254] netlink: 'syz.2.2384': attribute type 12 has an invalid length. [ 302.863758][T13260] FAULT_INJECTION: forcing a failure. [ 302.863758][T13260] name failslab, interval 1, probability 0, space 0, times 0 [ 302.879415][T13260] CPU: 1 UID: 0 PID: 13260 Comm: syz.4.2385 Not tainted syzkaller #0 PREEMPT(full) [ 302.879438][T13260] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 302.879449][T13260] Call Trace: [ 302.879456][T13260] [ 302.879465][T13260] dump_stack_lvl+0xe8/0x150 [ 302.879491][T13260] should_fail_ex+0x40c/0x560 [ 302.879524][T13260] should_failslab+0xa8/0x100 [ 302.879544][T13260] __kmalloc_cache_noprof+0x88/0x660 [ 302.879569][T13260] ? sctp_copy_local_addr_list+0xa3/0x4e0 [ 302.879596][T13260] ? sctp_add_bind_addr+0x8c/0x370 [ 302.879627][T13260] sctp_add_bind_addr+0x8c/0x370 [ 302.879657][T13260] sctp_copy_local_addr_list+0x31a/0x4e0 [ 302.879685][T13260] ? sctp_copy_local_addr_list+0xa3/0x4e0 [ 302.879712][T13260] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 302.879739][T13260] ? sctp_v6_is_any+0x64/0x80 [ 302.879759][T13260] ? sctp_copy_one_addr+0x93/0x360 [ 302.879786][T13260] sctp_bind_addr_copy+0xb3/0x3c0 [ 302.879821][T13260] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 302.879848][T13260] sctp_connect_new_asoc+0x2ff/0x6b0 [ 302.879870][T13260] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 302.879896][T13260] ? __local_bh_enable_ip+0xd0/0x130 [ 302.879914][T13260] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 302.879937][T13260] ? security_sctp_bind_connect+0x7e/0x2c0 [ 302.879961][T13260] sctp_sendmsg+0x159b/0x2d00 [ 302.879994][T13260] ? __pfx_sctp_sendmsg+0x10/0x10 [ 302.880016][T13260] ? aa_sk_perm+0x6d5/0x900 [ 302.880047][T13260] ? __pfx_aa_sk_perm+0x10/0x10 [ 302.880073][T13260] ? sock_rps_record_flow+0x19/0x350 [ 302.880100][T13260] ? inet_sendmsg+0x298/0x320 [ 302.880122][T13260] ? __pfx_inet_sendmsg+0x10/0x10 [ 302.880147][T13260] ____sys_sendmsg+0x853/0xa20 [ 302.880175][T13260] ? __pfx_____sys_sendmsg+0x10/0x10 [ 302.880204][T13260] ? import_iovec+0x73/0xa0 [ 302.880226][T13260] ___sys_sendmsg+0x2a5/0x360 [ 302.880243][T13260] ? __lock_acquire+0x683/0x2cd0 [ 302.880267][T13260] ? __pfx____sys_sendmsg+0x10/0x10 [ 302.880289][T13260] ? kstrtouint+0x6e/0xe0 [ 302.880338][T13260] ? __fget_files+0x2a/0x420 [ 302.880358][T13260] ? __fget_files+0x3a2/0x420 [ 302.880390][T13260] __sys_sendmmsg+0x27c/0x4e0 [ 302.880415][T13260] ? __pfx___sys_sendmmsg+0x10/0x10 [ 302.880432][T13260] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 302.880477][T13260] ? ksys_write+0x242/0x270 [ 302.880503][T13260] ? __pfx_ksys_write+0x10/0x10 [ 302.880535][T13260] __x64_sys_sendmmsg+0xa0/0xc0 [ 302.880554][T13260] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 302.880574][T13260] do_syscall_64+0x174/0x580 [ 302.880593][T13260] ? trace_irq_disable+0x3b/0x140 [ 302.880619][T13260] ? clear_bhb_loop+0x40/0x90 [ 302.880642][T13260] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 302.880660][T13260] RIP: 0033:0x7f732299ce59 [ 302.880678][T13260] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 302.880693][T13260] RSP: 002b:00007f73237f3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 302.880712][T13260] RAX: ffffffffffffffda RBX: 00007f7322c15fa0 RCX: 00007f732299ce59 [ 302.880725][T13260] RDX: 0000000000000001 RSI: 0000200000000140 RDI: 0000000000000003 [ 302.880737][T13260] RBP: 00007f73237f3090 R08: 0000000000000000 R09: 0000000000000000 [ 302.880748][T13260] R10: 000000000004c040 R11: 0000000000000246 R12: 0000000000000002 [ 302.880759][T13260] R13: 00007f7322c16038 R14: 00007f7322c15fa0 R15: 00007ffc5c8448a8 [ 302.880798][T13260] [ 303.331452][T13266] netlink: 'syz.4.2388': attribute type 1 has an invalid length. [ 303.378826][T13269] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2391'. [ 303.389078][T13270] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2388'. [ 303.398263][T13270] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2388'. [ 303.497219][T13266] 8021q: adding VLAN 0 to HW filter on device bond10 [ 303.817808][T13291] xt_hashlimit: size too large, truncated to 1048576 [ 303.846551][T13289] syzkaller0: entered promiscuous mode [ 303.871181][T13289] syzkaller0: entered allmulticast mode [ 303.944224][T13300] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.2401'. [ 303.974720][T13300] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2401'. [ 304.386996][T13321] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2407'. [ 304.500184][T13328] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2411'. [ 305.276217][T13371] FAULT_INJECTION: forcing a failure. [ 305.276217][T13371] name failslab, interval 1, probability 0, space 0, times 0 [ 305.296243][T13371] CPU: 0 UID: 0 PID: 13371 Comm: syz.0.2423 Not tainted syzkaller #0 PREEMPT(full) [ 305.296270][T13371] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 305.296281][T13371] Call Trace: [ 305.296289][T13371] [ 305.296297][T13371] dump_stack_lvl+0xe8/0x150 [ 305.296323][T13371] should_fail_ex+0x40c/0x560 [ 305.296359][T13371] should_failslab+0xa8/0x100 [ 305.296379][T13371] kmem_cache_alloc_node_noprof+0x8f/0x680 [ 305.296404][T13371] ? __alloc_skb+0x189/0x7a0 [ 305.296429][T13371] ? __alloc_skb+0x1d7/0x7a0 [ 305.296452][T13371] ? __local_bh_enable_ip+0xd0/0x130 [ 305.296475][T13371] __alloc_skb+0x1d7/0x7a0 [ 305.296505][T13371] netlink_ack+0x136/0xb30 [ 305.296522][T13371] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 305.296549][T13371] ? __lock_acquire+0x683/0x2cd0 [ 305.296577][T13371] netlink_rcv_skb+0x2a4/0x4a0 [ 305.296597][T13371] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 305.296623][T13371] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 305.296654][T13371] ? netlink_deliver_tap+0x2e/0x1b0 [ 305.296672][T13371] ? netlink_deliver_tap+0x2e/0x1b0 [ 305.296697][T13371] netlink_unicast+0x7bb/0x940 [ 305.296740][T13371] netlink_sendmsg+0x813/0xb40 [ 305.296769][T13371] ? __pfx_netlink_sendmsg+0x10/0x10 [ 305.296792][T13371] ? aa_sock_msg_perm+0xf1/0x1b0 [ 305.296819][T13371] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 305.296840][T13371] ? __pfx_netlink_sendmsg+0x10/0x10 [ 305.296862][T13371] ____sys_sendmsg+0x9b9/0xa20 [ 305.296881][T13371] ? __might_fault+0xaf/0x130 [ 305.296909][T13371] ? __pfx_____sys_sendmsg+0x10/0x10 [ 305.296937][T13371] ? import_iovec+0x73/0xa0 [ 305.296961][T13371] ___sys_sendmsg+0x2a5/0x360 [ 305.296979][T13371] ? __lock_acquire+0x683/0x2cd0 [ 305.297001][T13371] ? __pfx____sys_sendmsg+0x10/0x10 [ 305.297054][T13371] ? __fget_files+0x2a/0x420 [ 305.297074][T13371] ? __fget_files+0x3a2/0x420 [ 305.297105][T13371] __x64_sys_sendmsg+0x1bd/0x2a0 [ 305.297127][T13371] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 305.297153][T13371] ? __pfx_ksys_write+0x10/0x10 [ 305.297184][T13371] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 305.297204][T13371] do_syscall_64+0x174/0x580 [ 305.297223][T13371] ? trace_irq_disable+0x3b/0x140 [ 305.297247][T13371] ? clear_bhb_loop+0x40/0x90 [ 305.297267][T13371] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 305.297284][T13371] RIP: 0033:0x7fba07d9ce59 [ 305.297300][T13371] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 305.297313][T13371] RSP: 002b:00007fba08ba4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 305.297330][T13371] RAX: ffffffffffffffda RBX: 00007fba08015fa0 RCX: 00007fba07d9ce59 [ 305.297344][T13371] RDX: 0000000000004010 RSI: 0000200000000180 RDI: 0000000000000003 [ 305.297355][T13371] RBP: 00007fba08ba4090 R08: 0000000000000000 R09: 0000000000000000 [ 305.297367][T13371] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 305.297377][T13371] R13: 00007fba08016038 R14: 00007fba08015fa0 R15: 00007ffdd2e7c838 [ 305.297408][T13371] [ 305.831670][T13380] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2426'. [ 305.936156][T13382] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2427'. [ 306.046865][T13388] netlink: 88 bytes leftover after parsing attributes in process `syz.3.2429'. [ 306.078325][T13388] nbd: must specify a size in bytes for the device [ 306.600875][T13424] ip6gretap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 307.531959][T13458] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 307.686085][T13467] FAULT_INJECTION: forcing a failure. [ 307.686085][T13467] name failslab, interval 1, probability 0, space 0, times 0 [ 307.726827][T13467] CPU: 0 UID: 0 PID: 13467 Comm: syz.0.2457 Not tainted syzkaller #0 PREEMPT(full) [ 307.726853][T13467] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 307.726864][T13467] Call Trace: [ 307.726872][T13467] [ 307.726881][T13467] dump_stack_lvl+0xe8/0x150 [ 307.726907][T13467] should_fail_ex+0x40c/0x560 [ 307.726940][T13467] should_failslab+0xa8/0x100 [ 307.726966][T13467] __kmalloc_cache_noprof+0x88/0x660 [ 307.726990][T13467] ? sctp_copy_local_addr_list+0xa3/0x4e0 [ 307.727016][T13467] ? sctp_add_bind_addr+0x8c/0x370 [ 307.727048][T13467] sctp_add_bind_addr+0x8c/0x370 [ 307.727078][T13467] sctp_copy_local_addr_list+0x31a/0x4e0 [ 307.727107][T13467] ? sctp_copy_local_addr_list+0xa3/0x4e0 [ 307.727134][T13467] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 307.727163][T13467] ? sctp_v6_is_any+0x64/0x80 [ 307.727184][T13467] ? sctp_copy_one_addr+0x93/0x360 [ 307.727214][T13467] sctp_bind_addr_copy+0xb3/0x3c0 [ 307.727242][T13467] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 307.727270][T13467] sctp_connect_new_asoc+0x2ff/0x6b0 [ 307.727296][T13467] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 307.727325][T13467] ? __local_bh_enable_ip+0xd0/0x130 [ 307.727342][T13467] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 307.727368][T13467] ? security_sctp_bind_connect+0x7e/0x2c0 [ 307.727394][T13467] sctp_sendmsg+0x159b/0x2d00 [ 307.727431][T13467] ? __pfx_sctp_sendmsg+0x10/0x10 [ 307.727456][T13467] ? aa_sk_perm+0x6d5/0x900 [ 307.727489][T13467] ? __pfx_aa_sk_perm+0x10/0x10 [ 307.727516][T13467] ? sock_rps_record_flow+0x19/0x350 [ 307.727544][T13467] ? inet_sendmsg+0x298/0x320 [ 307.727568][T13467] ? __pfx_inet_sendmsg+0x10/0x10 [ 307.727594][T13467] ____sys_sendmsg+0x853/0xa20 [ 307.727624][T13467] ? __pfx_____sys_sendmsg+0x10/0x10 [ 307.727653][T13467] ? import_iovec+0x73/0xa0 [ 307.727677][T13467] ___sys_sendmsg+0x2a5/0x360 [ 307.727696][T13467] ? __lock_acquire+0x683/0x2cd0 [ 307.727720][T13467] ? __pfx____sys_sendmsg+0x10/0x10 [ 307.727745][T13467] ? kstrtouint+0x6e/0xe0 [ 307.727797][T13467] ? __fget_files+0x2a/0x420 [ 307.727819][T13467] ? __fget_files+0x3a2/0x420 [ 307.727851][T13467] __sys_sendmmsg+0x27c/0x4e0 [ 307.727877][T13467] ? __pfx___sys_sendmmsg+0x10/0x10 [ 307.727894][T13467] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 307.727944][T13467] ? ksys_write+0x242/0x270 [ 307.727978][T13467] ? __pfx_ksys_write+0x10/0x10 [ 307.728009][T13467] __x64_sys_sendmmsg+0xa0/0xc0 [ 307.728028][T13467] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 307.728047][T13467] do_syscall_64+0x174/0x580 [ 307.728066][T13467] ? trace_irq_disable+0x3b/0x140 [ 307.728091][T13467] ? clear_bhb_loop+0x40/0x90 [ 307.728113][T13467] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 307.728131][T13467] RIP: 0033:0x7fba07d9ce59 [ 307.728148][T13467] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 307.728163][T13467] RSP: 002b:00007fba08ba4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 307.728182][T13467] RAX: ffffffffffffffda RBX: 00007fba08015fa0 RCX: 00007fba07d9ce59 [ 307.728196][T13467] RDX: 0000000000000001 RSI: 0000200000000140 RDI: 0000000000000003 [ 307.728207][T13467] RBP: 00007fba08ba4090 R08: 0000000000000000 R09: 0000000000000000 [ 307.728221][T13467] R10: 000000000004c040 R11: 0000000000000246 R12: 0000000000000002 [ 307.728232][T13467] R13: 00007fba08016038 R14: 00007fba08015fa0 R15: 00007ffdd2e7c838 [ 307.728264][T13467] [ 308.166769][T13475] veth1_to_hsr: entered allmulticast mode [ 308.176495][ T5646] Bluetooth: hci3: link tx timeout [ 308.181660][ T5646] Bluetooth: hci3: killing stalled connection 10:aa:aa:aa:aa:aa [ 308.467146][T13500] FAULT_INJECTION: forcing a failure. [ 308.467146][T13500] name failslab, interval 1, probability 0, space 0, times 0 [ 308.508482][T13500] CPU: 1 UID: 0 PID: 13500 Comm: syz.0.2469 Not tainted syzkaller #0 PREEMPT(full) [ 308.508520][T13500] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 308.508531][T13500] Call Trace: [ 308.508539][T13500] [ 308.508548][T13500] dump_stack_lvl+0xe8/0x150 [ 308.508586][T13500] should_fail_ex+0x40c/0x560 [ 308.508619][T13500] should_failslab+0xa8/0x100 [ 308.508660][T13500] kmem_cache_alloc_node_noprof+0x8f/0x680 [ 308.508685][T13500] ? __alloc_skb+0x189/0x7a0 [ 308.508711][T13500] ? __alloc_skb+0x1d7/0x7a0 [ 308.508745][T13500] ? __local_bh_enable_ip+0xd0/0x130 [ 308.508769][T13500] __alloc_skb+0x1d7/0x7a0 [ 308.508806][T13500] netlink_ack+0x136/0xb30 [ 308.508824][T13500] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 308.508852][T13500] ? __lock_acquire+0x683/0x2cd0 [ 308.508884][T13500] netlink_rcv_skb+0x2a4/0x4a0 [ 308.508904][T13500] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 308.508932][T13500] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 308.508964][T13500] ? netlink_deliver_tap+0x2e/0x1b0 [ 308.508983][T13500] ? netlink_deliver_tap+0x2e/0x1b0 [ 308.509008][T13500] netlink_unicast+0x7bb/0x940 [ 308.509045][T13500] netlink_sendmsg+0x813/0xb40 [ 308.509072][T13500] ? __pfx_netlink_sendmsg+0x10/0x10 [ 308.509096][T13500] ? aa_sock_msg_perm+0xf1/0x1b0 [ 308.509123][T13500] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 308.509145][T13500] ? __pfx_netlink_sendmsg+0x10/0x10 [ 308.509168][T13500] ____sys_sendmsg+0x9b9/0xa20 [ 308.509187][T13500] ? __might_fault+0xaf/0x130 [ 308.509216][T13500] ? __pfx_____sys_sendmsg+0x10/0x10 [ 308.509244][T13500] ? import_iovec+0x73/0xa0 [ 308.509269][T13500] ___sys_sendmsg+0x2a5/0x360 [ 308.509286][T13500] ? __lock_acquire+0x683/0x2cd0 [ 308.509311][T13500] ? __pfx____sys_sendmsg+0x10/0x10 [ 308.509365][T13500] ? __fget_files+0x2a/0x420 [ 308.509386][T13500] ? __fget_files+0x3a2/0x420 [ 308.509418][T13500] __x64_sys_sendmsg+0x1bd/0x2a0 [ 308.509440][T13500] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 308.509469][T13500] ? __pfx_ksys_write+0x10/0x10 [ 308.509503][T13500] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 308.509524][T13500] do_syscall_64+0x174/0x580 [ 308.509544][T13500] ? trace_irq_disable+0x3b/0x140 [ 308.509570][T13500] ? clear_bhb_loop+0x40/0x90 [ 308.509593][T13500] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 308.509611][T13500] RIP: 0033:0x7fba07d9ce59 [ 308.509629][T13500] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 308.509645][T13500] RSP: 002b:00007fba08b83028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 308.509665][T13500] RAX: ffffffffffffffda RBX: 00007fba08016090 RCX: 00007fba07d9ce59 [ 308.509678][T13500] RDX: 0000000000000840 RSI: 00002000000000c0 RDI: 0000000000000003 [ 308.509689][T13500] RBP: 00007fba08b83090 R08: 0000000000000000 R09: 0000000000000000 [ 308.509701][T13500] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 308.509712][T13500] R13: 00007fba08016128 R14: 00007fba08016090 R15: 00007ffdd2e7c838 [ 308.509742][T13500] [ 308.845653][T13504] __nla_validate_parse: 6 callbacks suppressed [ 308.845671][T13504] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2470'. [ 308.870170][T13504] vlan3: entered promiscuous mode [ 308.875393][T13504] veth0: entered promiscuous mode [ 309.303604][T13527] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2477'. [ 309.641786][T13549] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2484'. [ 309.677888][T13549] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2484'. [ 309.694661][T13549] netlink: 'syz.1.2484': attribute type 12 has an invalid length. [ 309.702999][T13549] netlink: 'syz.1.2484': attribute type 13 has an invalid length. [ 310.245264][T13583] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2490'. [ 310.296243][ T5631] Bluetooth: hci3: command 0x0405 tx timeout [ 310.522250][T13601] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2494'. [ 310.553744][T13596] bridge0: entered allmulticast mode [ 311.077378][T13630] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2502'. [ 311.225398][T13637] netlink: 'syz.1.2504': attribute type 1 has an invalid length. [ 311.279055][T13644] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2504'. [ 311.407848][T13637] 8021q: adding VLAN 0 to HW filter on device bond4 [ 311.512337][T13652] netlink: 'syz.3.2509': attribute type 1 has an invalid length. [ 311.535823][T13652] netlink: 'syz.3.2509': attribute type 2 has an invalid length. [ 311.977883][T13684] FAULT_INJECTION: forcing a failure. [ 311.977883][T13684] name failslab, interval 1, probability 0, space 0, times 0 [ 312.038647][T13684] CPU: 0 UID: 0 PID: 13684 Comm: syz.2.2518 Not tainted syzkaller #0 PREEMPT(full) [ 312.038673][T13684] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 312.038684][T13684] Call Trace: [ 312.038692][T13684] [ 312.038700][T13684] dump_stack_lvl+0xe8/0x150 [ 312.038727][T13684] should_fail_ex+0x40c/0x560 [ 312.038761][T13684] should_failslab+0xa8/0x100 [ 312.038782][T13684] __kmalloc_noprof+0xe8/0x750 [ 312.038807][T13684] ? nft_set_elem_expr_alloc+0x1a5/0x5f0 [ 312.038834][T13684] nft_set_elem_expr_alloc+0x1a5/0x5f0 [ 312.038858][T13684] ? __pfx_nft_set_elem_expr_alloc+0x10/0x10 [ 312.038892][T13684] ? nft_rhash_init+0x2de/0x3b0 [ 312.038915][T13684] ? __pfx_nft_rhash_init+0x10/0x10 [ 312.038934][T13684] ? kasan_quarantine_put+0xbb/0x1f0 [ 312.038957][T13684] ? __pfx_nft_rhash_key+0x10/0x10 [ 312.038976][T13684] ? __pfx_nft_rhash_obj+0x10/0x10 [ 312.038995][T13684] ? __pfx_nft_rhash_cmp+0x10/0x10 [ 312.039019][T13684] nft_set_expr_alloc+0x397/0x760 [ 312.039045][T13684] nf_tables_newset+0x1c5f/0x2570 [ 312.039082][T13684] ? __pfx_nf_tables_newset+0x10/0x10 [ 312.039128][T13684] ? __nla_parse+0x40/0x60 [ 312.039156][T13684] nfnetlink_rcv+0x1288/0x28c0 [ 312.039182][T13684] ? is_bpf_text_address+0x292/0x2b0 [ 312.039235][T13684] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 312.039308][T13684] ? netlink_deliver_tap+0x2e/0x1b0 [ 312.039338][T13684] ? netlink_deliver_tap+0x2e/0x1b0 [ 312.039357][T13684] ? netlink_deliver_tap+0x2e/0x1b0 [ 312.039383][T13684] netlink_unicast+0x7bb/0x940 [ 312.039419][T13684] netlink_sendmsg+0x813/0xb40 [ 312.039445][T13684] ? __pfx_netlink_sendmsg+0x10/0x10 [ 312.039473][T13684] ? aa_sock_msg_perm+0xf1/0x1b0 [ 312.039499][T13684] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 312.039521][T13684] ? __pfx_netlink_sendmsg+0x10/0x10 [ 312.039542][T13684] ____sys_sendmsg+0x9b9/0xa20 [ 312.039562][T13684] ? __might_fault+0xaf/0x130 [ 312.039590][T13684] ? __pfx_____sys_sendmsg+0x10/0x10 [ 312.039619][T13684] ? import_iovec+0x73/0xa0 [ 312.039642][T13684] ___sys_sendmsg+0x2a5/0x360 [ 312.039660][T13684] ? __lock_acquire+0x683/0x2cd0 [ 312.039684][T13684] ? __pfx____sys_sendmsg+0x10/0x10 [ 312.039740][T13684] ? __fget_files+0x2a/0x420 [ 312.039759][T13684] ? __fget_files+0x3a2/0x420 [ 312.039789][T13684] __x64_sys_sendmsg+0x1bd/0x2a0 [ 312.039812][T13684] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 312.039841][T13684] ? __pfx_ksys_write+0x10/0x10 [ 312.039875][T13684] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 312.039895][T13684] do_syscall_64+0x174/0x580 [ 312.039916][T13684] ? trace_irq_disable+0x3b/0x140 [ 312.039941][T13684] ? clear_bhb_loop+0x40/0x90 [ 312.039962][T13684] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 312.039979][T13684] RIP: 0033:0x7fb6bf79ce59 [ 312.039998][T13684] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 312.040013][T13684] RSP: 002b:00007fb6c0613028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 312.040032][T13684] RAX: ffffffffffffffda RBX: 00007fb6bfa15fa0 RCX: 00007fb6bf79ce59 [ 312.040045][T13684] RDX: 0000000000000040 RSI: 0000200000009b40 RDI: 0000000000000003 [ 312.040056][T13684] RBP: 00007fb6c0613090 R08: 0000000000000000 R09: 0000000000000000 [ 312.040067][T13684] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 312.040077][T13684] R13: 00007fb6bfa16038 R14: 00007fb6bfa15fa0 R15: 00007fffa4d15bd8 [ 312.040109][T13684] [ 312.439508][T13695] netlink: 'syz.0.2523': attribute type 1 has an invalid length. [ 312.475815][T13698] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2524'. [ 312.490579][T13695] 8021q: adding VLAN 0 to HW filter on device bond7 [ 312.498613][T13694] netlink: 'syz.2.2522': attribute type 12 has an invalid length. [ 312.566848][T13699] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2523'. [ 313.190635][T13741] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 313.547401][T13762] netlink: 'syz.2.2540': attribute type 11 has an invalid length. [ 313.566612][T13764] tipc: Enabling of bearer rejected, already enabled [ 313.783208][T13765] 8021q: adding VLAN 0 to HW filter on device bond0 [ 313.804574][T13765] 8021q: adding VLAN 0 to HW filter on device team0 [ 313.840144][T13765] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 313.914668][T13765] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 313.929581][T13765] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 313.948524][T13765] veth1_vlan: left promiscuous mode [ 313.955173][T13765] veth0_vlan: left promiscuous mode [ 313.963141][T13765] veth0_vlan: entered promiscuous mode [ 313.972420][T13765] veth1_vlan: entered promiscuous mode [ 313.985466][T13765] veth0_macvtap: left promiscuous mode [ 313.992808][T13765] veth0_macvtap: entered promiscuous mode [ 314.007325][T13765] bridge0: port 3(vlan2) entered blocking state [ 314.013831][T13765] bridge0: port 3(vlan2) entered listening state [ 314.025386][T13765] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 314.035124][T13765] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 314.046349][T13765] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 314.055377][T13765] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 314.067449][T13765] 8021q: adding VLAN 0 to HW filter on device bond1 [ 314.077985][T13765] 8021q: adding VLAN 0 to HW filter on device bond2 [ 314.151441][T13765] ip6gretap0: entered promiscuous mode [ 314.198837][ T7164] bridge0: port 1(bridge_slave_0) entered blocking state [ 314.206197][ T7164] bridge0: port 1(bridge_slave_0) entered listening state [ 314.244041][ T7164] bridge0: port 2(bridge_slave_1) entered blocking state [ 314.251293][ T7164] bridge0: port 2(bridge_slave_1) entered listening state [ 314.357106][T13762] mac80211_hwsim hwsim5 wlan0: entered promiscuous mode [ 314.380106][T13762] mac80211_hwsim hwsim5 wlan0: entered allmulticast mode [ 314.416016][T13786] tipc: Enabled bearer , priority 0 [ 314.424066][ T1169] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.457144][ T1169] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.487733][T13789] syzkaller0: entered promiscuous mode [ 314.515678][T13789] syzkaller0: entered allmulticast mode [ 314.635092][T13814] FAULT_INJECTION: forcing a failure. [ 314.635092][T13814] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 314.669120][T13814] CPU: 1 UID: 0 PID: 13814 Comm: syz.4.2550 Not tainted syzkaller #0 PREEMPT(full) [ 314.669146][T13814] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 314.669156][T13814] Call Trace: [ 314.669164][T13814] [ 314.669173][T13814] dump_stack_lvl+0xe8/0x150 [ 314.669198][T13814] should_fail_ex+0x40c/0x560 [ 314.669230][T13814] _copy_from_user+0x2d/0xb0 [ 314.669251][T13814] ___sys_sendmsg+0x1c6/0x360 [ 314.669272][T13814] ? __lock_acquire+0x683/0x2cd0 [ 314.669298][T13814] ? __pfx____sys_sendmsg+0x10/0x10 [ 314.669351][T13814] ? __fget_files+0x2a/0x420 [ 314.669373][T13814] ? __fget_files+0x3a2/0x420 [ 314.669403][T13814] __x64_sys_sendmsg+0x1bd/0x2a0 [ 314.669425][T13814] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 314.669454][T13814] ? __pfx_ksys_write+0x10/0x10 [ 314.669487][T13814] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 314.669508][T13814] do_syscall_64+0x174/0x580 [ 314.669529][T13814] ? trace_irq_disable+0x3b/0x140 [ 314.669554][T13814] ? clear_bhb_loop+0x40/0x90 [ 314.669575][T13814] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 314.669593][T13814] RIP: 0033:0x7f732299ce59 [ 314.669610][T13814] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 314.669622][T13814] RSP: 002b:00007f73237f3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 314.669637][T13814] RAX: ffffffffffffffda RBX: 00007f7322c15fa0 RCX: 00007f732299ce59 [ 314.669647][T13814] RDX: 0000000000040014 RSI: 0000200000000580 RDI: 0000000000000004 [ 314.669656][T13814] RBP: 00007f73237f3090 R08: 0000000000000000 R09: 0000000000000000 [ 314.669664][T13814] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 314.669672][T13814] R13: 00007f7322c16038 R14: 00007f7322c15fa0 R15: 00007ffc5c8448a8 [ 314.669694][T13814] [ 315.012188][ T1169] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.038576][T13792] tipc: Resetting bearer [ 315.045000][ T1169] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.088181][T13779] tipc: Resetting bearer [ 315.144424][T13779] tipc: Disabling bearer [ 315.359656][T13843] netlink: 'syz.4.2556': attribute type 1 has an invalid length. [ 315.419011][T13843] bond11: entered promiscuous mode [ 315.424395][T13843] bond11: entered allmulticast mode [ 315.431373][T13843] 8021q: adding VLAN 0 to HW filter on device bond11 [ 315.671029][T13861] __nla_validate_parse: 3 callbacks suppressed [ 315.671049][T13861] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2560'. [ 315.731546][T13863] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2561'. [ 315.964903][T13877] netlink: 'syz.1.2562': attribute type 5 has an invalid length. [ 316.074778][T13877] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2562'. [ 316.845907][T13911] netlink: 'syz.0.2574': attribute type 1 has an invalid length. [ 317.023359][T13922] netlink: 'syz.3.2578': attribute type 11 has an invalid length. [ 317.060865][T13926] FAULT_INJECTION: forcing a failure. [ 317.060865][T13926] name failslab, interval 1, probability 0, space 0, times 0 [ 317.091893][T13911] 8021q: adding VLAN 0 to HW filter on device bond8 [ 317.092037][T13927] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2574'. [ 317.126580][T13929] netlink: 'syz.3.2578': attribute type 11 has an invalid length. [ 317.135812][T13926] CPU: 1 UID: 0 PID: 13926 Comm: syz.4.2576 Not tainted syzkaller #0 PREEMPT(full) [ 317.135838][T13926] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 317.135848][T13926] Call Trace: [ 317.135854][T13926] [ 317.135862][T13926] dump_stack_lvl+0xe8/0x150 [ 317.135888][T13926] should_fail_ex+0x40c/0x560 [ 317.135919][T13926] should_failslab+0xa8/0x100 [ 317.135939][T13926] kmem_cache_alloc_node_noprof+0x8f/0x680 [ 317.135964][T13926] ? __alloc_skb+0x189/0x7a0 [ 317.135989][T13926] ? __alloc_skb+0x1d7/0x7a0 [ 317.136011][T13926] ? __local_bh_enable_ip+0xd0/0x130 [ 317.136035][T13926] __alloc_skb+0x1d7/0x7a0 [ 317.136063][T13926] netlink_ack+0x136/0xb30 [ 317.136088][T13926] ? __lock_acquire+0x683/0x2cd0 [ 317.136116][T13926] netlink_rcv_skb+0x2a4/0x4a0 [ 317.136139][T13926] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 317.136159][T13926] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 317.136188][T13926] ? bpf_lsm_capable+0x9/0x20 [ 317.136205][T13926] ? security_capable+0x7e/0x2c0 [ 317.136241][T13926] nfnetlink_rcv+0x2b9/0x28c0 [ 317.136265][T13926] ? is_bpf_text_address+0x292/0x2b0 [ 317.136287][T13926] ? kernel_text_address+0xa5/0xe0 [ 317.136308][T13926] ? __kernel_text_address+0xd/0x30 [ 317.136329][T13926] ? unwind_get_return_address+0x4d/0x90 [ 317.136348][T13926] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 317.136370][T13926] ? arch_stack_walk+0xfb/0x150 [ 317.136405][T13926] ? __lock_acquire+0x683/0x2cd0 [ 317.136423][T13926] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 317.136456][T13926] ? kasan_save_track+0x4f/0x80 [ 317.136477][T13926] ? kasan_save_track+0x3e/0x80 [ 317.136498][T13926] ? __kasan_slab_alloc+0x6c/0x80 [ 317.136521][T13926] ? kmem_cache_alloc_node_noprof+0x380/0x680 [ 317.136552][T13926] ? __lock_acquire+0x683/0x2cd0 [ 317.136581][T13926] ? __netlink_lookup+0xc6/0x8b0 [ 317.136612][T13926] ? netlink_deliver_tap+0x2e/0x1b0 [ 317.136633][T13926] ? netlink_deliver_tap+0x2e/0x1b0 [ 317.136667][T13926] ? netlink_deliver_tap+0x2e/0x1b0 [ 317.136685][T13926] ? netlink_deliver_tap+0x2e/0x1b0 [ 317.136710][T13926] netlink_unicast+0x7bb/0x940 [ 317.136746][T13926] netlink_sendmsg+0x813/0xb40 [ 317.136775][T13926] ? __pfx_netlink_sendmsg+0x10/0x10 [ 317.136798][T13926] ? aa_sock_msg_perm+0xf1/0x1b0 [ 317.136825][T13926] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 317.136847][T13926] ? __pfx_netlink_sendmsg+0x10/0x10 [ 317.136869][T13926] ____sys_sendmsg+0x9b9/0xa20 [ 317.136888][T13926] ? __might_fault+0xaf/0x130 [ 317.136916][T13926] ? __pfx_____sys_sendmsg+0x10/0x10 [ 317.136944][T13926] ? import_iovec+0x73/0xa0 [ 317.136968][T13926] ___sys_sendmsg+0x2a5/0x360 [ 317.136986][T13926] ? __lock_acquire+0x683/0x2cd0 [ 317.137009][T13926] ? __pfx____sys_sendmsg+0x10/0x10 [ 317.137061][T13926] ? __fget_files+0x2a/0x420 [ 317.137082][T13926] ? __fget_files+0x3a2/0x420 [ 317.137113][T13926] __x64_sys_sendmsg+0x1bd/0x2a0 [ 317.137134][T13926] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 317.137163][T13926] ? __pfx_ksys_write+0x10/0x10 [ 317.137196][T13926] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 317.137216][T13926] do_syscall_64+0x174/0x580 [ 317.137236][T13926] ? trace_irq_disable+0x3b/0x140 [ 317.137261][T13926] ? clear_bhb_loop+0x40/0x90 [ 317.137283][T13926] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 317.137301][T13926] RIP: 0033:0x7f732299ce59 [ 317.137319][T13926] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 317.137334][T13926] RSP: 002b:00007f73237f3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 317.137354][T13926] RAX: ffffffffffffffda RBX: 00007f7322c15fa0 RCX: 00007f732299ce59 [ 317.137367][T13926] RDX: 0000000000000000 RSI: 0000200000000340 RDI: 0000000000000003 [ 317.137379][T13926] RBP: 00007f73237f3090 R08: 0000000000000000 R09: 0000000000000000 [ 317.137391][T13926] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 317.137401][T13926] R13: 00007f7322c16038 R14: 00007f7322c15fa0 R15: 00007ffc5c8448a8 [ 317.137431][T13926] [ 317.602285][T13917] bond8: (slave veth11): Enslaving as an active interface with a down link [ 317.683028][T13919] bond0: (slave dummy0): Releasing backup interface [ 317.779436][T13941] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2583'. [ 317.963766][T13919] dummy0: left promiscuous mode [ 317.971100][T13919] dummy0: left allmulticast mode [ 318.002579][T13919] bond8: (slave dummy0): making interface the new active one [ 318.022532][T13919] dummy0: entered promiscuous mode [ 318.033658][T13919] bond8: (slave dummy0): Enslaving as an active interface with an up link [ 318.169684][T13931] ip6gretap0: entered promiscuous mode [ 318.190227][T13927] bond8: (slave dummy0): Releasing active interface [ 318.202355][T13927] dummy0 (unregistering): left promiscuous mode [ 318.342360][T13959] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2587'. [ 318.485493][T13963] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2588'. [ 318.593549][T13959] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2587'. [ 318.735572][T13971] af_packet: tpacket_rcv: packet too big, clamped from 32 to 4294967272. macoff=96 [ 318.807777][T13975] tipc: Disabling bearer [ 318.850041][T13975] team0 (unregistering): Port device team_slave_0 removed [ 318.873279][T13975] team0 (unregistering): Port device team_slave_1 removed [ 318.917478][T13975] team0 (unregistering): Port device macvlan2 removed [ 319.494230][T14016] FAULT_INJECTION: forcing a failure. [ 319.494230][T14016] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 319.559588][T14016] CPU: 1 UID: 0 PID: 14016 Comm: syz.1.2605 Not tainted syzkaller #0 PREEMPT(full) [ 319.559612][T14016] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 319.559622][T14016] Call Trace: [ 319.559628][T14016] [ 319.559635][T14016] dump_stack_lvl+0xe8/0x150 [ 319.559660][T14016] should_fail_ex+0x40c/0x560 [ 319.559697][T14016] _copy_from_user+0x2d/0xb0 [ 319.559719][T14016] ___sys_sendmsg+0x1c6/0x360 [ 319.559738][T14016] ? __lock_acquire+0x683/0x2cd0 [ 319.559761][T14016] ? __pfx____sys_sendmsg+0x10/0x10 [ 319.559811][T14016] ? __fget_files+0x2a/0x420 [ 319.559841][T14016] ? __fget_files+0x3a2/0x420 [ 319.559872][T14016] __x64_sys_sendmsg+0x1bd/0x2a0 [ 319.559894][T14016] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 319.559922][T14016] ? __pfx_ksys_write+0x10/0x10 [ 319.559953][T14016] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 319.559977][T14016] do_syscall_64+0x174/0x580 [ 319.559997][T14016] ? trace_irq_disable+0x3b/0x140 [ 319.560022][T14016] ? clear_bhb_loop+0x40/0x90 [ 319.560043][T14016] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 319.560062][T14016] RIP: 0033:0x7f77cbb9ce59 [ 319.560079][T14016] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 319.560115][T14016] RSP: 002b:00007f77cca0d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 319.560136][T14016] RAX: ffffffffffffffda RBX: 00007f77cbe15fa0 RCX: 00007f77cbb9ce59 [ 319.560149][T14016] RDX: 0000000000000000 RSI: 0000200000000380 RDI: 0000000000000004 [ 319.560161][T14016] RBP: 00007f77cca0d090 R08: 0000000000000000 R09: 0000000000000000 [ 319.560173][T14016] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 319.560184][T14016] R13: 00007f77cbe16038 R14: 00007f77cbe15fa0 R15: 00007ffd092dcfa8 [ 319.560216][T14016] [ 319.833317][T14023] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2607'. [ 319.939911][T14038] netlink: 6024 bytes leftover after parsing attributes in process `syz.1.2609'. [ 320.190533][T14052] netlink: 'syz.1.2611': attribute type 1 has an invalid length. [ 320.234537][T14052] 8021q: adding VLAN 0 to HW filter on device bond5 [ 320.487089][T14075] FAULT_INJECTION: forcing a failure. [ 320.487089][T14075] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 320.501512][T14075] CPU: 1 UID: 0 PID: 14075 Comm: syz.4.2616 Not tainted syzkaller #0 PREEMPT(full) [ 320.501537][T14075] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 320.501548][T14075] Call Trace: [ 320.501556][T14075] [ 320.501564][T14075] dump_stack_lvl+0xe8/0x150 [ 320.501590][T14075] should_fail_ex+0x40c/0x560 [ 320.501624][T14075] _copy_to_user+0x31/0xb0 [ 320.501646][T14075] simple_read_from_buffer+0xe1/0x170 [ 320.501674][T14075] proc_fail_nth_read+0x1bb/0x230 [ 320.501704][T14075] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 320.501729][T14075] ? rw_verify_area+0x24a/0x4c0 [ 320.501754][T14075] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 320.501774][T14075] vfs_read+0x213/0xa80 [ 320.501803][T14075] ? __pfx___mutex_lock+0x10/0x10 [ 320.501826][T14075] ? __pfx_vfs_read+0x10/0x10 [ 320.501852][T14075] ? __fget_files+0x2a/0x420 [ 320.501885][T14075] ? __fget_files+0x3a2/0x420 [ 320.501906][T14075] ? __fget_files+0x2a/0x420 [ 320.501936][T14075] ksys_read+0x150/0x270 [ 320.501963][T14075] ? __pfx_ksys_read+0x10/0x10 [ 320.501994][T14075] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 320.502013][T14075] do_syscall_64+0x174/0x580 [ 320.502032][T14075] ? trace_irq_disable+0x3b/0x140 [ 320.502058][T14075] ? clear_bhb_loop+0x40/0x90 [ 320.502081][T14075] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 320.502096][T14075] RIP: 0033:0x7f732295d68e [ 320.502113][T14075] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 320.502128][T14075] RSP: 002b:00007f73237f2fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 320.502146][T14075] RAX: ffffffffffffffda RBX: 00007f73237f36c0 RCX: 00007f732295d68e [ 320.502159][T14075] RDX: 000000000000000f RSI: 00007f73237f30a0 RDI: 0000000000000004 [ 320.502169][T14075] RBP: 00007f73237f3090 R08: 0000000000000000 R09: 0000000000000000 [ 320.502179][T14075] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 320.502189][T14075] R13: 00007f7322c16038 R14: 00007f7322c15fa0 R15: 00007ffc5c8448a8 [ 320.502217][T14075] [ 320.963952][T14085] FAULT_INJECTION: forcing a failure. [ 320.963952][T14085] name failslab, interval 1, probability 0, space 0, times 0 [ 320.976935][T14085] CPU: 1 UID: 0 PID: 14085 Comm: syz.0.2618 Not tainted syzkaller #0 PREEMPT(full) [ 320.976952][T14085] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 320.976959][T14085] Call Trace: [ 320.976964][T14085] [ 320.976969][T14085] dump_stack_lvl+0xe8/0x150 [ 320.976985][T14085] should_fail_ex+0x40c/0x560 [ 320.977004][T14085] should_failslab+0xa8/0x100 [ 320.977016][T14085] __kmalloc_noprof+0xe8/0x750 [ 320.977029][T14085] ? __kasan_kmalloc+0x93/0xb0 [ 320.977043][T14085] ? nla_strdup+0x9d/0x140 [ 320.977054][T14085] ? __kmalloc_cache_noprof+0x318/0x660 [ 320.977069][T14085] nla_strdup+0x9d/0x140 [ 320.977081][T14085] nf_tables_newflowtable+0xa48/0x25b0 [ 320.977106][T14085] ? __pfx_nf_tables_newflowtable+0x10/0x10 [ 320.977123][T14085] ? nfnl_pernet+0x23/0x240 [ 320.977145][T14085] ? __nla_parse+0x40/0x60 [ 320.977158][T14085] nfnetlink_rcv+0x1288/0x28c0 [ 320.977173][T14085] ? is_bpf_text_address+0x292/0x2b0 [ 320.977200][T14085] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 320.977239][T14085] ? netlink_deliver_tap+0x2e/0x1b0 [ 320.977255][T14085] ? netlink_deliver_tap+0x2e/0x1b0 [ 320.977265][T14085] ? netlink_deliver_tap+0x2e/0x1b0 [ 320.977278][T14085] netlink_unicast+0x7bb/0x940 [ 320.977298][T14085] netlink_sendmsg+0x813/0xb40 [ 320.977313][T14085] ? __pfx_netlink_sendmsg+0x10/0x10 [ 320.977326][T14085] ? aa_sock_msg_perm+0xf1/0x1b0 [ 320.977341][T14085] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 320.977354][T14085] ? __pfx_netlink_sendmsg+0x10/0x10 [ 320.977365][T14085] ____sys_sendmsg+0x9b9/0xa20 [ 320.977376][T14085] ? __might_fault+0xaf/0x130 [ 320.977392][T14085] ? __pfx_____sys_sendmsg+0x10/0x10 [ 320.977407][T14085] ? import_iovec+0x73/0xa0 [ 320.977420][T14085] ___sys_sendmsg+0x2a5/0x360 [ 320.977430][T14085] ? __lock_acquire+0x683/0x2cd0 [ 320.977443][T14085] ? __pfx____sys_sendmsg+0x10/0x10 [ 320.977471][T14085] ? __fget_files+0x2a/0x420 [ 320.977483][T14085] ? __fget_files+0x3a2/0x420 [ 320.977500][T14085] __x64_sys_sendmsg+0x1bd/0x2a0 [ 320.977511][T14085] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 320.977527][T14085] ? __pfx_ksys_write+0x10/0x10 [ 320.977545][T14085] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 320.977556][T14085] do_syscall_64+0x174/0x580 [ 320.977568][T14085] ? trace_irq_disable+0x3b/0x140 [ 320.977582][T14085] ? clear_bhb_loop+0x40/0x90 [ 320.977594][T14085] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 320.977604][T14085] RIP: 0033:0x7fba07d9ce59 [ 320.977615][T14085] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 320.977630][T14085] RSP: 002b:00007fba08b83028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 320.977642][T14085] RAX: ffffffffffffffda RBX: 00007fba08016090 RCX: 00007fba07d9ce59 [ 320.977649][T14085] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000004 [ 320.977656][T14085] RBP: 00007fba08b83090 R08: 0000000000000000 R09: 0000000000000000 [ 320.977662][T14085] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 320.977668][T14085] R13: 00007fba08016128 R14: 00007fba08016090 R15: 00007ffdd2e7c838 [ 320.977684][T14085] [ 322.541626][T14024] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 322.738700][T14096] pimreg: entered allmulticast mode [ 322.991314][T14112] netlink: 'syz.3.2629': attribute type 1 has an invalid length. [ 323.044119][T14112] gretap2: entered allmulticast mode [ 323.054928][T14112] bond3: (slave gretap2): making interface the new active one [ 323.064961][T14112] bond3: (slave gretap2): Enslaving as an active interface with an up link [ 323.148189][T14119] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 323.159083][T14119] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1514) ! [ 323.325911][T14121] netlink: 'syz.3.2631': attribute type 1 has an invalid length. [ 323.377896][T14125] __nla_validate_parse: 3 callbacks suppressed [ 323.377915][T14125] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2631'. [ 323.384645][T14121] 8021q: adding VLAN 0 to HW filter on device bond4 [ 323.531930][T14127] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 323.538308][T14127] syzkaller1: Refused to change device type [ 323.579228][T14131] FAULT_INJECTION: forcing a failure. [ 323.579228][T14131] name failslab, interval 1, probability 0, space 0, times 0 [ 323.592971][T14131] CPU: 1 UID: 0 PID: 14131 Comm: syz.2.2635 Not tainted syzkaller #0 PREEMPT(full) [ 323.592988][T14131] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 323.592994][T14131] Call Trace: [ 323.592999][T14131] [ 323.593004][T14131] dump_stack_lvl+0xe8/0x150 [ 323.593021][T14131] should_fail_ex+0x40c/0x560 [ 323.593040][T14131] should_failslab+0xa8/0x100 [ 323.593052][T14131] __kmalloc_noprof+0xe8/0x750 [ 323.593066][T14131] ? sk_prot_alloc+0xe7/0x210 [ 323.593079][T14131] sk_prot_alloc+0xe7/0x210 [ 323.593088][T14131] ? sk_alloc+0x27/0x390 [ 323.593098][T14131] sk_alloc+0x3a/0x390 [ 323.593109][T14131] bpf_prog_test_run_skb+0x3a6/0x2230 [ 323.593131][T14131] ? __fget_files+0x3a2/0x420 [ 323.593143][T14131] ? __fget_files+0x2a/0x420 [ 323.593156][T14131] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 323.593167][T14131] bpf_prog_test_run+0x2c5/0x340 [ 323.593179][T14131] __sys_bpf+0x643/0x950 [ 323.593194][T14131] ? __pfx___sys_bpf+0x10/0x10 [ 323.593215][T14131] ? ksys_write+0x242/0x270 [ 323.593230][T14131] ? __pfx_ksys_write+0x10/0x10 [ 323.593246][T14131] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 323.593257][T14131] __x64_sys_bpf+0x7c/0x90 [ 323.593273][T14131] do_syscall_64+0x174/0x580 [ 323.593285][T14131] ? trace_irq_disable+0x3b/0x140 [ 323.593299][T14131] ? clear_bhb_loop+0x40/0x90 [ 323.593311][T14131] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 323.593322][T14131] RIP: 0033:0x7fb6bf79ce59 [ 323.593335][T14131] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 323.593354][T14131] RSP: 002b:00007fb6c0613028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 323.593373][T14131] RAX: ffffffffffffffda RBX: 00007fb6bfa15fa0 RCX: 00007fb6bf79ce59 [ 323.593386][T14131] RDX: 000000000000003d RSI: 0000200000000080 RDI: 000000000000000a [ 323.593397][T14131] RBP: 00007fb6c0613090 R08: 0000000000000000 R09: 0000000000000000 [ 323.593408][T14131] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 323.593418][T14131] R13: 00007fb6bfa16038 R14: 00007fb6bfa15fa0 R15: 00007fffa4d15bd8 [ 323.593447][T14131] [ 323.962082][T14136] netlink: 3296 bytes leftover after parsing attributes in process `syz.3.2637'. [ 324.011099][T14136] openvswitch: netlink: Flow key attr not present in new flow. [ 324.163980][T14141] IPVS: set_ctl: invalid protocol: 43 224.0.0.1:20000 [ 324.195306][T14146] macsec1: entered promiscuous mode [ 324.263644][T14154] netlink: 'syz.0.2643': attribute type 1 has an invalid length. [ 324.327798][T14157] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2643'. [ 324.344652][T14154] 8021q: adding VLAN 0 to HW filter on device bond9 [ 324.718117][T14185] FAULT_INJECTION: forcing a failure. [ 324.718117][T14185] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 324.723973][T14175] openvswitch: netlink: Invalid VLAN frame [ 324.733574][T14165] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2647'. [ 324.737865][T14174] openvswitch: netlink: Invalid VLAN frame [ 324.753288][T14185] CPU: 1 UID: 0 PID: 14185 Comm: syz.1.2650 Not tainted syzkaller #0 PREEMPT(full) [ 324.753310][T14185] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 324.753320][T14185] Call Trace: [ 324.753328][T14185] [ 324.753336][T14185] dump_stack_lvl+0xe8/0x150 [ 324.753362][T14185] should_fail_ex+0x40c/0x560 [ 324.753396][T14185] _copy_to_user+0x31/0xb0 [ 324.753419][T14185] simple_read_from_buffer+0xe1/0x170 [ 324.753446][T14185] proc_fail_nth_read+0x1bb/0x230 [ 324.753469][T14185] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 324.753493][T14185] ? rw_verify_area+0x24a/0x4c0 [ 324.753519][T14185] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 324.753540][T14185] vfs_read+0x213/0xa80 [ 324.753567][T14185] ? __pfx___mutex_lock+0x10/0x10 [ 324.753589][T14185] ? __pfx_vfs_read+0x10/0x10 [ 324.753614][T14185] ? __fget_files+0x2a/0x420 [ 324.753639][T14185] ? __fget_files+0x3a2/0x420 [ 324.753659][T14185] ? __fget_files+0x2a/0x420 [ 324.753688][T14185] ksys_read+0x150/0x270 [ 324.753713][T14185] ? __pfx_ksys_read+0x10/0x10 [ 324.753744][T14185] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 324.753764][T14185] do_syscall_64+0x174/0x580 [ 324.753798][T14185] ? trace_irq_disable+0x3b/0x140 [ 324.753828][T14185] ? clear_bhb_loop+0x40/0x90 [ 324.753849][T14185] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 324.753866][T14185] RIP: 0033:0x7f77cbb5d68e [ 324.753883][T14185] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 324.753898][T14185] RSP: 002b:00007f77cca0cfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 324.753918][T14185] RAX: ffffffffffffffda RBX: 00007f77cca0d6c0 RCX: 00007f77cbb5d68e [ 324.753930][T14185] RDX: 000000000000000f RSI: 00007f77cca0d0a0 RDI: 0000000000000004 [ 324.753941][T14185] RBP: 00007f77cca0d090 R08: 0000000000000000 R09: 0000000000000000 [ 324.753953][T14185] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 324.753963][T14185] R13: 00007f77cbe16038 R14: 00007f77cbe15fa0 R15: 00007ffd092dcfa8 [ 324.753991][T14185] [ 325.359865][T14180] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 325.465378][T14209] netlink: 'syz.4.2658': attribute type 1 has an invalid length. [ 325.634905][T14209] 8021q: adding VLAN 0 to HW filter on device bond12 [ 325.661417][T14212] x_tables: duplicate underflow at hook 1 [ 325.823542][T14225] sctp: [Deprecated]: syz.3.2663 (pid 14225) Use of int in max_burst socket option deprecated. [ 325.823542][T14225] Use struct sctp_assoc_value instead [ 326.137160][T14237] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2667'. [ 326.148945][T14238] netlink: 'syz.4.2668': attribute type 62 has an invalid length. [ 326.232435][T14242] netlink: 212348 bytes leftover after parsing attributes in process `syz.4.2668'. [ 326.614199][T14257] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2673'. [ 326.717130][T14261] netlink: 'syz.0.2674': attribute type 1 has an invalid length. [ 326.778984][T14261] 8021q: adding VLAN 0 to HW filter on device bond10 [ 327.012533][T14283] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2681'. [ 327.083164][T14285] netlink: 108 bytes leftover after parsing attributes in process `syz.2.2682'. [ 327.101178][T14288] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2683'. [ 327.393101][T14300] netlink: 'syz.2.2689': attribute type 1 has an invalid length. [ 327.472726][T14300] 8021q: adding VLAN 0 to HW filter on device bond9 [ 327.668453][T14322] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 327.953614][T14334] syzkaller0: entered promiscuous mode [ 327.971233][T14334] syzkaller0: entered allmulticast mode [ 328.231228][T14353] netlink: 'syz.1.2706': attribute type 1 has an invalid length. [ 328.346612][T14353] 8021q: adding VLAN 0 to HW filter on device bond6 [ 328.559313][T14370] IPVS: set_ctl: invalid protocol: 43 172.30.1.5:20004 [ 328.589683][T14370] IPVS: Error connecting to the multicast addr [ 328.645165][T14376] __nla_validate_parse: 2 callbacks suppressed [ 328.645193][T14376] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2713'. [ 328.702113][T14373] tipc: Enabled bearer , priority 16 [ 329.111344][T14398] FAULT_INJECTION: forcing a failure. [ 329.111344][T14398] name failslab, interval 1, probability 0, space 0, times 0 [ 329.128537][T14397] FAULT_INJECTION: forcing a failure. [ 329.128537][T14397] name failslab, interval 1, probability 0, space 0, times 0 [ 329.155045][T14398] CPU: 0 UID: 0 PID: 14398 Comm: syz.4.2719 Not tainted syzkaller #0 PREEMPT(full) [ 329.155068][T14398] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 329.155078][T14398] Call Trace: [ 329.155085][T14398] [ 329.155093][T14398] dump_stack_lvl+0xe8/0x150 [ 329.155120][T14398] should_fail_ex+0x40c/0x560 [ 329.155151][T14398] should_failslab+0xa8/0x100 [ 329.155170][T14398] __kmalloc_cache_noprof+0x88/0x660 [ 329.155194][T14398] ? sctp_copy_local_addr_list+0xa3/0x4e0 [ 329.155220][T14398] ? sctp_add_bind_addr+0x8c/0x370 [ 329.155249][T14398] sctp_add_bind_addr+0x8c/0x370 [ 329.155278][T14398] sctp_copy_local_addr_list+0x31a/0x4e0 [ 329.155304][T14398] ? sctp_copy_local_addr_list+0xa3/0x4e0 [ 329.155330][T14398] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 329.155360][T14398] ? sctp_v4_is_any+0x35/0x60 [ 329.155377][T14398] ? sctp_copy_one_addr+0x93/0x360 [ 329.155405][T14398] sctp_bind_addr_copy+0xb3/0x3c0 [ 329.155433][T14398] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 329.155460][T14398] sctp_connect_new_asoc+0x2ff/0x6b0 [ 329.155485][T14398] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 329.155523][T14398] ? __local_bh_enable_ip+0xd0/0x130 [ 329.155540][T14398] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 329.155566][T14398] ? security_sctp_bind_connect+0x7e/0x2c0 [ 329.155593][T14398] sctp_sendmsg+0x159b/0x2d00 [ 329.155627][T14398] ? __pfx_sctp_sendmsg+0x10/0x10 [ 329.155652][T14398] ? aa_sk_perm+0x6d5/0x900 [ 329.155684][T14398] ? __pfx_aa_sk_perm+0x10/0x10 [ 329.155711][T14398] ? __pfx_clockevents_program_event+0x10/0x10 [ 329.155731][T14398] ? sock_rps_record_flow+0x19/0x350 [ 329.155760][T14398] ? inet_sendmsg+0x298/0x320 [ 329.155783][T14398] ? __pfx_inet_sendmsg+0x10/0x10 [ 329.155809][T14398] ____sys_sendmsg+0x853/0xa20 [ 329.155838][T14398] ? __pfx_____sys_sendmsg+0x10/0x10 [ 329.155867][T14398] ? import_iovec+0x73/0xa0 [ 329.155893][T14398] ___sys_sendmsg+0x2a5/0x360 [ 329.155911][T14398] ? __lock_acquire+0x683/0x2cd0 [ 329.155934][T14398] ? __pfx____sys_sendmsg+0x10/0x10 [ 329.155960][T14398] ? kstrtouint+0x6e/0xe0 [ 329.156012][T14398] ? __fget_files+0x2a/0x420 [ 329.156032][T14398] ? __fget_files+0x3a2/0x420 [ 329.156065][T14398] __sys_sendmmsg+0x27c/0x4e0 [ 329.156091][T14398] ? __pfx___sys_sendmmsg+0x10/0x10 [ 329.156108][T14398] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 329.156157][T14398] ? ksys_write+0x242/0x270 [ 329.156184][T14398] ? __pfx_ksys_write+0x10/0x10 [ 329.156215][T14398] __x64_sys_sendmmsg+0xa0/0xc0 [ 329.156235][T14398] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 329.156254][T14398] do_syscall_64+0x174/0x580 [ 329.156274][T14398] ? trace_irq_disable+0x3b/0x140 [ 329.156298][T14398] ? clear_bhb_loop+0x40/0x90 [ 329.156321][T14398] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 329.156339][T14398] RIP: 0033:0x7f732299ce59 [ 329.156357][T14398] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 329.156372][T14398] RSP: 002b:00007f73237f3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 329.156391][T14398] RAX: ffffffffffffffda RBX: 00007f7322c15fa0 RCX: 00007f732299ce59 [ 329.156405][T14398] RDX: 0000000000000002 RSI: 0000200000000880 RDI: 0000000000000003 [ 329.156416][T14398] RBP: 00007f73237f3090 R08: 0000000000000000 R09: 0000000000000000 [ 329.156428][T14398] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 329.156439][T14398] R13: 00007f7322c16038 R14: 00007f7322c15fa0 R15: 00007ffc5c8448a8 [ 329.156471][T14398] [ 329.297465][T14404] netlink: 'syz.3.2722': attribute type 1 has an invalid length. [ 329.315857][T14397] CPU: 1 UID: 0 PID: 14397 Comm: syz.2.2720 Not tainted syzkaller #0 PREEMPT(full) [ 329.315884][T14397] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 329.315895][T14397] Call Trace: [ 329.315903][T14397] [ 329.315912][T14397] dump_stack_lvl+0xe8/0x150 [ 329.315938][T14397] should_fail_ex+0x40c/0x560 [ 329.315971][T14397] should_failslab+0xa8/0x100 [ 329.315999][T14397] __kmalloc_cache_noprof+0x88/0x660 [ 329.316022][T14397] ? sctp_copy_local_addr_list+0xa3/0x4e0 [ 329.316049][T14397] ? sctp_add_bind_addr+0x8c/0x370 [ 329.316081][T14397] sctp_add_bind_addr+0x8c/0x370 [ 329.316113][T14397] sctp_copy_local_addr_list+0x31a/0x4e0 [ 329.316141][T14397] ? sctp_copy_local_addr_list+0xa3/0x4e0 [ 329.316169][T14397] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 329.316197][T14397] ? sctp_v6_is_any+0x64/0x80 [ 329.316218][T14397] ? sctp_copy_one_addr+0x93/0x360 [ 329.316247][T14397] sctp_bind_addr_copy+0xb3/0x3c0 [ 329.316275][T14397] ? sctp_assoc_set_bind_addr_from_ep+0xa5/0x1a0 [ 329.316303][T14397] sctp_connect_new_asoc+0x2ff/0x6b0 [ 329.316327][T14397] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 329.316355][T14397] ? __local_bh_enable_ip+0xd0/0x130 [ 329.316373][T14397] ? bpf_lsm_sctp_bind_connect+0x9/0x20 [ 329.316397][T14397] ? security_sctp_bind_connect+0x7e/0x2c0 [ 329.316422][T14397] sctp_sendmsg+0x159b/0x2d00 [ 329.316458][T14397] ? __pfx_sctp_sendmsg+0x10/0x10 [ 329.316483][T14397] ? aa_sk_perm+0x6d5/0x900 [ 329.316515][T14397] ? __pfx_aa_sk_perm+0x10/0x10 [ 329.316542][T14397] ? sock_rps_record_flow+0x19/0x350 [ 329.316570][T14397] ? inet_sendmsg+0x298/0x320 [ 329.316594][T14397] ? __pfx_inet_sendmsg+0x10/0x10 [ 329.316620][T14397] ____sys_sendmsg+0x853/0xa20 [ 329.316648][T14397] ? __pfx_____sys_sendmsg+0x10/0x10 [ 329.316677][T14397] ? import_iovec+0x73/0xa0 [ 329.316702][T14397] ___sys_sendmsg+0x2a5/0x360 [ 329.316720][T14397] ? __lock_acquire+0x683/0x2cd0 [ 329.316743][T14397] ? __pfx____sys_sendmsg+0x10/0x10 [ 329.316771][T14397] ? kstrtouint+0x6e/0xe0 [ 329.316822][T14397] ? __fget_files+0x2a/0x420 [ 329.316843][T14397] ? __fget_files+0x3a2/0x420 [ 329.316874][T14397] __sys_sendmmsg+0x27c/0x4e0 [ 329.316899][T14397] ? __pfx___sys_sendmmsg+0x10/0x10 [ 329.316917][T14397] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 329.316963][T14397] ? ksys_write+0x242/0x270 [ 329.316996][T14397] ? __pfx_ksys_write+0x10/0x10 [ 329.317027][T14397] __x64_sys_sendmmsg+0xa0/0xc0 [ 329.317046][T14397] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 329.317065][T14397] do_syscall_64+0x174/0x580 [ 329.317085][T14397] ? trace_irq_disable+0x3b/0x140 [ 329.317110][T14397] ? clear_bhb_loop+0x40/0x90 [ 329.317132][T14397] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 329.317150][T14397] RIP: 0033:0x7fb6bf79ce59 [ 329.317167][T14397] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 329.317183][T14397] RSP: 002b:00007fb6c0613028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 329.317202][T14397] RAX: ffffffffffffffda RBX: 00007fb6bfa15fa0 RCX: 00007fb6bf79ce59 [ 329.317216][T14397] RDX: 0000000000000001 RSI: 0000200000000140 RDI: 0000000000000003 [ 329.317228][T14397] RBP: 00007fb6c0613090 R08: 0000000000000000 R09: 0000000000000000 [ 329.317241][T14397] R10: 000000000004c040 R11: 0000000000000246 R12: 0000000000000002 [ 329.317252][T14397] R13: 00007fb6bfa16038 R14: 00007fb6bfa15fa0 R15: 00007fffa4d15bd8 [ 329.317284][T14397] [ 330.002999][T14404] 8021q: adding VLAN 0 to HW filter on device bond5 [ 330.012277][ T24] tipc: Node number set to 3238609289 [ 330.548597][T14447] gtp2: entered promiscuous mode [ 330.554040][T14447] gtp2: entered allmulticast mode [ 330.555987][T14449] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2738'. [ 330.562554][T14447] team0: Port device gtp2 added [ 330.624226][T14449] block nbd4: Unsupported socket: should be TCP or UNIX. [ 330.645540][T14435] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 330.689659][T14435] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1514) ! [ 330.926455][T14468] netlink: 'syz.0.2742': attribute type 1 has an invalid length. [ 330.940428][T14467] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2743'. [ 331.020889][T14468] 8021q: adding VLAN 0 to HW filter on device bond11 [ 331.234818][T14480] FAULT_INJECTION: forcing a failure. [ 331.234818][T14480] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 331.267869][T14480] CPU: 1 UID: 0 PID: 14480 Comm: syz.2.2747 Not tainted syzkaller #0 PREEMPT(full) [ 331.267895][T14480] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 331.267907][T14480] Call Trace: [ 331.267914][T14480] [ 331.267922][T14480] dump_stack_lvl+0xe8/0x150 [ 331.267949][T14480] should_fail_ex+0x40c/0x560 [ 331.267980][T14480] _copy_to_user+0x31/0xb0 [ 331.268004][T14480] bpf_test_finish+0x53c/0x6b0 [ 331.268033][T14480] ? __pfx_bpf_test_finish+0x10/0x10 [ 331.268058][T14480] ? _copy_from_user+0x94/0xb0 [ 331.268078][T14480] ? bpf_test_init+0x113/0x150 [ 331.268099][T14480] bpf_prog_test_run_xdp+0x8bc/0x11d0 [ 331.268133][T14480] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 331.268158][T14480] ? __fget_files+0x2a/0x420 [ 331.268185][T14480] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 331.268206][T14480] bpf_prog_test_run+0x2c5/0x340 [ 331.268228][T14480] __sys_bpf+0x643/0x950 [ 331.268263][T14480] ? __pfx___sys_bpf+0x10/0x10 [ 331.268303][T14480] ? ksys_write+0x242/0x270 [ 331.268332][T14480] ? __pfx_ksys_write+0x10/0x10 [ 331.268357][T14480] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 331.268374][T14480] __x64_sys_bpf+0x7c/0x90 [ 331.268397][T14480] do_syscall_64+0x174/0x580 [ 331.268417][T14480] ? trace_irq_disable+0x3b/0x140 [ 331.268440][T14480] ? clear_bhb_loop+0x40/0x90 [ 331.268470][T14480] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 331.268487][T14480] RIP: 0033:0x7fb6bf79ce59 [ 331.268504][T14480] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 331.268519][T14480] RSP: 002b:00007fb6c0613028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 331.268538][T14480] RAX: ffffffffffffffda RBX: 00007fb6bfa15fa0 RCX: 00007fb6bf79ce59 [ 331.268552][T14480] RDX: 0000000000000050 RSI: 0000200000000140 RDI: 000000000000000a [ 331.268564][T14480] RBP: 00007fb6c0613090 R08: 0000000000000000 R09: 0000000000000000 [ 331.268576][T14480] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 331.268587][T14480] R13: 00007fb6bfa16038 R14: 00007fb6bfa15fa0 R15: 00007fffa4d15bd8 [ 331.268616][T14480] [ 331.825048][T14494] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2752'. [ 332.264267][T14518] netlink: 'syz.4.2760': attribute type 1 has an invalid length. [ 332.312765][T14518] 8021q: adding VLAN 0 to HW filter on device bond13 [ 332.323078][T14521] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2760'. [ 332.381471][T14526] xt_hashlimit: size too large, truncated to 1048576 [ 332.425880][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 332.471992][T14522] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 332.483433][T14530] netlink: 'syz.0.2766': attribute type 1 has an invalid length. [ 332.518057][T14530] netlink: 476 bytes leftover after parsing attributes in process `syz.0.2766'. [ 332.537135][T14530] netlink: 1041 bytes leftover after parsing attributes in process `syz.0.2766'. [ 333.226901][T14567] batadv_slave_1: entered promiscuous mode [ 333.263379][T14566] batadv_slave_1: left promiscuous mode [ 333.558654][T14585] xt_hashlimit: size too large, truncated to 1048576 [ 334.232675][T14609] FAULT_INJECTION: forcing a failure. [ 334.232675][T14609] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 334.275207][T14609] CPU: 1 UID: 0 PID: 14609 Comm: syz.4.2793 Not tainted syzkaller #0 PREEMPT(full) [ 334.275233][T14609] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 334.275244][T14609] Call Trace: [ 334.275252][T14609] [ 334.275260][T14609] dump_stack_lvl+0xe8/0x150 [ 334.275287][T14609] should_fail_ex+0x40c/0x560 [ 334.275319][T14609] _copy_from_user+0x2d/0xb0 [ 334.275341][T14609] __sys_bpf+0x229/0x950 [ 334.275368][T14609] ? __pfx___sys_bpf+0x10/0x10 [ 334.275406][T14609] ? ksys_write+0x242/0x270 [ 334.275433][T14609] ? __pfx_ksys_write+0x10/0x10 [ 334.275461][T14609] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 334.275481][T14609] __x64_sys_bpf+0x7c/0x90 [ 334.275505][T14609] do_syscall_64+0x174/0x580 [ 334.275524][T14609] ? trace_irq_disable+0x3b/0x140 [ 334.275549][T14609] ? clear_bhb_loop+0x40/0x90 [ 334.275569][T14609] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 334.275588][T14609] RIP: 0033:0x7f732299ce59 [ 334.275604][T14609] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 334.275617][T14609] RSP: 002b:00007f73237f3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 334.275643][T14609] RAX: ffffffffffffffda RBX: 00007f7322c15fa0 RCX: 00007f732299ce59 [ 334.275656][T14609] RDX: 0000000000000094 RSI: 0000200000000880 RDI: 0000000000000005 [ 334.275667][T14609] RBP: 00007f73237f3090 R08: 0000000000000000 R09: 0000000000000000 [ 334.275677][T14609] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 334.275687][T14609] R13: 00007f7322c16038 R14: 00007f7322c15fa0 R15: 00007ffc5c8448a8 [ 334.275716][T14609] [ 334.538348][T14620] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 336.428493][T14646] FAULT_INJECTION: forcing a failure. [ 336.428493][T14646] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 336.449124][T14646] CPU: 1 UID: 0 PID: 14646 Comm: syz.3.2801 Not tainted syzkaller #0 PREEMPT(full) [ 336.449150][T14646] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 336.449160][T14646] Call Trace: [ 336.449168][T14646] [ 336.449176][T14646] dump_stack_lvl+0xe8/0x150 [ 336.449202][T14646] should_fail_ex+0x40c/0x560 [ 336.449234][T14646] _copy_from_user+0x2d/0xb0 [ 336.449255][T14646] ___sys_recvmsg+0x173/0x590 [ 336.449282][T14646] ? __pfx____sys_recvmsg+0x10/0x10 [ 336.449306][T14646] ? __fget_files+0x2a/0x420 [ 336.449345][T14646] ? __fget_files+0x3a2/0x420 [ 336.449375][T14646] do_recvmmsg+0x329/0x810 [ 336.449403][T14646] ? __pfx_do_recvmmsg+0x10/0x10 [ 336.449434][T14646] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 336.449472][T14646] __x64_sys_recvmmsg+0x198/0x250 [ 336.449495][T14646] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 336.449524][T14646] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 336.449544][T14646] do_syscall_64+0x174/0x580 [ 336.449564][T14646] ? trace_irq_disable+0x3b/0x140 [ 336.449589][T14646] ? clear_bhb_loop+0x40/0x90 [ 336.449611][T14646] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 336.449628][T14646] RIP: 0033:0x7fe6e639ce59 [ 336.449646][T14646] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 336.449662][T14646] RSP: 002b:00007fe6e727f028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 336.449682][T14646] RAX: ffffffffffffffda RBX: 00007fe6e6616090 RCX: 00007fe6e639ce59 [ 336.449695][T14646] RDX: 0000000000000001 RSI: 0000200000004480 RDI: 0000000000000003 [ 336.449707][T14646] RBP: 00007fe6e727f090 R08: 0000000000000000 R09: 0000000000000000 [ 336.449718][T14646] R10: 0000000000010000 R11: 0000000000000246 R12: 0000000000000001 [ 336.449729][T14646] R13: 00007fe6e6616128 R14: 00007fe6e6616090 R15: 00007ffd27e60fd8 [ 336.449759][T14646] [ 336.760436][T14655] xt_TPROXY: Can be used only with -p tcp or -p udp [ 336.769182][T14655] netlink: 'syz.0.2807': attribute type 11 has an invalid length. [ 336.813433][T14657] xt_l2tp: v2 doesn't support IP mode [ 336.866629][T14657] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.989136][T14657] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.067701][T14657] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.209668][T14657] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.437383][ T12] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.485339][ T12] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.563912][ T12] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.587937][ T12] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.595230][T14684] netlink: 'syz.4.2819': attribute type 1 has an invalid length. [ 337.643245][T14684] 8021q: adding VLAN 0 to HW filter on device bond14 [ 337.662616][T14684] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2819'. [ 337.715554][T14689] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 337.729921][T14689] SET target dimension over the limit! [ 337.896131][T14700] FAULT_INJECTION: forcing a failure. [ 337.896131][T14700] name failslab, interval 1, probability 0, space 0, times 0 [ 337.896628][T14698] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 337.909482][T14700] CPU: 1 UID: 0 PID: 14700 Comm: syz.1.2826 Not tainted syzkaller #0 PREEMPT(full) [ 337.909506][T14700] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 337.909517][T14700] Call Trace: [ 337.909524][T14700] [ 337.909532][T14700] dump_stack_lvl+0xe8/0x150 [ 337.909558][T14700] should_fail_ex+0x40c/0x560 [ 337.909590][T14700] should_failslab+0xa8/0x100 [ 337.909610][T14700] __kmalloc_cache_noprof+0x88/0x660 [ 337.909634][T14700] ? nft_netdev_hook_alloc+0x59/0x5b0 [ 337.909669][T14700] nft_netdev_hook_alloc+0x59/0x5b0 [ 337.909687][T14700] ? __lock_acquire+0x683/0x2cd0 [ 337.909720][T14700] nf_tables_parse_netdev_hooks+0x14c/0xa10 [ 337.909749][T14700] nft_flowtable_parse_hook+0x551/0xab0 [ 337.909781][T14700] ? __pfx_nft_flowtable_parse_hook+0x10/0x10 [ 337.909805][T14700] ? nft_pernet+0x23/0x240 [ 337.909828][T14700] ? nft_pernet+0x23/0x240 [ 337.909858][T14700] nf_tables_newflowtable+0xc47/0x25b0 [ 337.909898][T14700] ? __pfx_nf_tables_newflowtable+0x10/0x10 [ 337.909924][T14700] ? nfnl_pernet+0x23/0x240 [ 337.909962][T14700] ? __nla_parse+0x40/0x60 [ 337.909986][T14700] nfnetlink_rcv+0x1288/0x28c0 [ 337.910043][T14700] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 337.910083][T14700] ? ref_tracker_free+0x689/0x830 [ 337.910125][T14700] ? skb_clone+0x246/0x3a0 [ 337.910147][T14700] ? __netlink_deliver_tap+0x811/0x860 [ 337.910174][T14700] ? netlink_deliver_tap+0x2e/0x1b0 [ 337.910192][T14700] ? netlink_deliver_tap+0x2e/0x1b0 [ 337.910221][T14700] netlink_unicast+0x7bb/0x940 [ 337.910259][T14700] netlink_sendmsg+0x813/0xb40 [ 337.910287][T14700] ? __pfx_netlink_sendmsg+0x10/0x10 [ 337.910310][T14700] ? aa_sock_msg_perm+0xf1/0x1b0 [ 337.910336][T14700] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 337.910357][T14700] ? __pfx_netlink_sendmsg+0x10/0x10 [ 337.910378][T14700] ____sys_sendmsg+0x9b9/0xa20 [ 337.910397][T14700] ? __might_fault+0xaf/0x130 [ 337.910424][T14700] ? __pfx_____sys_sendmsg+0x10/0x10 [ 337.910451][T14700] ? import_iovec+0x73/0xa0 [ 337.910475][T14700] ___sys_sendmsg+0x2a5/0x360 [ 337.910492][T14700] ? __lock_acquire+0x683/0x2cd0 [ 337.910514][T14700] ? __pfx____sys_sendmsg+0x10/0x10 [ 337.910566][T14700] ? __fget_files+0x2a/0x420 [ 337.910585][T14700] ? __fget_files+0x3a2/0x420 [ 337.910616][T14700] __x64_sys_sendmsg+0x1bd/0x2a0 [ 337.910637][T14700] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 337.910669][T14700] ? __pfx_ksys_write+0x10/0x10 [ 337.910701][T14700] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 337.910721][T14700] do_syscall_64+0x174/0x580 [ 337.910741][T14700] ? trace_irq_disable+0x3b/0x140 [ 337.910765][T14700] ? clear_bhb_loop+0x40/0x90 [ 337.910787][T14700] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 337.910803][T14700] RIP: 0033:0x7f77cbb9ce59 [ 337.910821][T14700] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 337.910836][T14700] RSP: 002b:00007f77cca0d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 337.910854][T14700] RAX: ffffffffffffffda RBX: 00007f77cbe15fa0 RCX: 00007f77cbb9ce59 [ 337.910867][T14700] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000003 [ 337.910878][T14700] RBP: 00007f77cca0d090 R08: 0000000000000000 R09: 0000000000000000 [ 337.910890][T14700] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 337.910900][T14700] R13: 00007f77cbe16038 R14: 00007f77cbe15fa0 R15: 00007ffd092dcfa8 [ 337.910930][T14700] [ 338.257744][T14695] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 338.605333][ T5631] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 338.626056][ T5631] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 338.637119][ T5631] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 338.647027][ T5631] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 338.657152][ T5631] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 339.005440][T14731] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 339.027540][T14731] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 339.040244][T14740] netlink: 'syz.4.2837': attribute type 1 has an invalid length. [ 339.099426][T14745] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2837'. [ 339.231403][T14740] 8021q: adding VLAN 0 to HW filter on device bond15 [ 340.099576][T14754] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2840'. [ 340.561422][T14776] netlink: 'syz.0.2849': attribute type 1 has an invalid length. [ 340.604643][T14776] 8021q: adding VLAN 0 to HW filter on device bond12 [ 340.619994][T14780] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2849'. [ 340.747118][ T5646] Bluetooth: hci5: command tx timeout [ 340.789336][T14786] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2850'. [ 341.249034][T14716] bridge0: port 1(bridge_slave_0) entered blocking state [ 341.260488][T14716] bridge0: port 1(bridge_slave_0) entered disabled state [ 341.276232][T14716] bridge_slave_0: entered allmulticast mode [ 341.292612][T14716] bridge_slave_0: entered promiscuous mode [ 341.337933][T14716] bridge0: port 2(bridge_slave_1) entered blocking state [ 341.354159][T14716] bridge0: port 2(bridge_slave_1) entered disabled state [ 341.399106][T14716] bridge_slave_1: entered allmulticast mode [ 341.423405][T14716] bridge_slave_1: entered promiscuous mode [ 341.515071][T14716] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 341.529906][T14716] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 341.550335][T14822] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2859'. [ 341.579735][T14716] team0: Port device team_slave_0 added [ 341.590936][T14716] team0: Port device team_slave_1 added [ 341.626852][T14824] Cannot find del_set index 0 as target [ 341.672151][T14716] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 341.677407][T14824] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2860'. [ 341.690944][T14716] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 341.694648][T14826] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2860'. [ 341.738148][T14824] netlink: 104 bytes leftover after parsing attributes in process `syz.2.2860'. [ 341.750978][T14716] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 341.751191][T14831] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2861'. [ 341.764262][T14716] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 341.784110][T14716] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 341.813107][T14716] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 342.008894][T14716] hsr_slave_0: entered promiscuous mode [ 342.016124][T14716] hsr_slave_1: entered promiscuous mode [ 342.024850][T14716] debugfs: 'hsr0' already exists in 'hsr' [ 342.036274][T14716] Cannot create hsr debugfs directory [ 342.253010][T14849] pim6reg1: entered promiscuous mode [ 342.259005][T14849] pim6reg1: entered allmulticast mode [ 342.350216][T14860] FAULT_INJECTION: forcing a failure. [ 342.350216][T14860] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 342.389265][T14860] CPU: 1 UID: 0 PID: 14860 Comm: syz.2.2871 Not tainted syzkaller #0 PREEMPT(full) [ 342.389290][T14860] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 342.389301][T14860] Call Trace: [ 342.389309][T14860] [ 342.389318][T14860] dump_stack_lvl+0xe8/0x150 [ 342.389350][T14860] should_fail_ex+0x40c/0x560 [ 342.389384][T14860] _copy_from_user+0x2d/0xb0 [ 342.389406][T14860] ___sys_sendmsg+0x1c6/0x360 [ 342.389426][T14860] ? __lock_acquire+0x683/0x2cd0 [ 342.389450][T14860] ? __pfx____sys_sendmsg+0x10/0x10 [ 342.389503][T14860] ? __fget_files+0x2a/0x420 [ 342.389525][T14860] ? __fget_files+0x3a2/0x420 [ 342.389555][T14860] __x64_sys_sendmsg+0x1bd/0x2a0 [ 342.389577][T14860] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 342.389603][T14860] ? __pfx_ksys_write+0x10/0x10 [ 342.389634][T14860] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 342.389654][T14860] do_syscall_64+0x174/0x580 [ 342.389673][T14860] ? trace_irq_disable+0x3b/0x140 [ 342.389697][T14860] ? clear_bhb_loop+0x40/0x90 [ 342.389718][T14860] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 342.389735][T14860] RIP: 0033:0x7fb6bf79ce59 [ 342.389754][T14860] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 342.389769][T14860] RSP: 002b:00007fb6c0613028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 342.389788][T14860] RAX: ffffffffffffffda RBX: 00007fb6bfa15fa0 RCX: 00007fb6bf79ce59 [ 342.389801][T14860] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000003 [ 342.389813][T14860] RBP: 00007fb6c0613090 R08: 0000000000000000 R09: 0000000000000000 [ 342.389824][T14860] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 342.389839][T14860] R13: 00007fb6bfa16038 R14: 00007fb6bfa15fa0 R15: 00007fffa4d15bd8 [ 342.389867][T14860] [ 342.768433][T14716] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 342.825893][ T5646] Bluetooth: hci5: command tx timeout [ 342.877290][T14875] rdma_op ffff88805508c9f0 conn xmit_rdma 0000000000000000 [ 343.038597][T14716] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 343.151454][T14716] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 343.201325][T14716] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 343.326924][T14716] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 343.337466][T14716] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 343.345395][T14716] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 343.356429][T14716] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 343.364328][T14716] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 343.373581][T14716] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 343.381453][T14716] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 343.390600][T14716] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 343.449116][T14716] 8021q: adding VLAN 0 to HW filter on device bond0 [ 343.473126][T14716] 8021q: adding VLAN 0 to HW filter on device team0 [ 343.484443][ T1169] bridge0: port 1(bridge_slave_0) entered blocking state [ 343.491560][ T1169] bridge0: port 1(bridge_slave_0) entered forwarding state [ 343.508353][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 343.515449][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 343.792848][T14716] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 343.835566][T14716] veth0_vlan: entered promiscuous mode [ 343.846806][T14716] veth1_vlan: entered promiscuous mode [ 343.875446][T14716] veth0_macvtap: entered promiscuous mode [ 343.885475][T14716] veth1_macvtap: entered promiscuous mode [ 343.901811][T14716] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 343.917841][T14716] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 343.930998][ T1169] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.941055][ T1169] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.957433][ T1169] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.966528][ T1169] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 344.059510][ T1169] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 344.068388][ T1169] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 344.097982][ T83] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 344.106311][ T83] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 344.587297][ C0] bridge0: port 2(bridge_slave_1) entered learning state [ 344.596565][ C1] bridge0: port 1(bridge_slave_0) entered learning state [ 344.604419][ C1] bridge0: port 3(vlan2) entered learning state [ 344.905847][ T5646] Bluetooth: hci5: command tx timeout [ 346.996013][ T5646] Bluetooth: hci5: command tx timeout [ 374.666595][ C1] bridge0: port 3(vlan2) entered forwarding state [ 374.673041][ C1] bridge0: topology change detected, propagating [ 374.679646][ C1] bridge0: port 1(bridge_slave_0) entered forwarding state [ 374.686855][ C1] bridge0: topology change detected, propagating [ 374.693307][ C0] bridge0: port 2(bridge_slave_1) entered forwarding state [ 374.700550][ C0] bridge0: topology change detected, propagating [ 412.096037][T14909] Cannot find del_set index 4 as target [ 412.117028][T14912] __nla_validate_parse: 34 callbacks suppressed [ 412.117045][T14912] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2884'. [ 412.152733][T14912] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 412.175819][T14912] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 412.231153][T14921] tipc: Enabled bearer , priority 0 [ 412.280948][T14916] syzkaller0: entered promiscuous mode [ 412.287648][T14916] syzkaller0: entered allmulticast mode [ 412.341159][T14916] tipc: Resetting bearer [ 412.392343][T14916] sctp: [Deprecated]: syz.2.2882 (pid 14916) Use of struct sctp_assoc_value in delayed_ack socket option. [ 412.392343][T14916] Use struct sctp_sack_info instead [ 412.461373][T14915] tipc: Resetting bearer [ 412.522637][T14915] tipc: Disabling bearer [ 412.582411][T14931] netlink: 'syz.0.2887': attribute type 1 has an invalid length. [ 412.684775][T14931] bond13: entered promiscuous mode [ 412.691196][T14931] 8021q: adding VLAN 0 to HW filter on device bond13 [ 412.778774][T14940] netlink: 'syz.4.2889': attribute type 61 has an invalid length. [ 412.862742][T14944] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2889'. [ 412.891595][T14944] bridge_slave_0: default FDB implementation only supports local addresses [ 412.920944][T14933] bond13: (slave bridge3): making interface the new active one [ 412.931145][T14933] bridge3: entered promiscuous mode [ 412.948442][T14933] bridge3: left promiscuous mode [ 413.306859][T14957] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2892'. [ 413.318577][T14949] Cannot find set identified by id 0 to match [ 413.331593][T14957] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2892'. [ 413.653733][T14972] netlink: 'syz.2.2895': attribute type 32 has an invalid length. [ 413.666030][T14972] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2895'. [ 413.747367][ T5646] block nbd4: Receive control failed (result -32) [ 413.747450][ T5631] block nbd4: Receive control failed (result -32) [ 413.821306][T14972] bond10: option coupled_control: invalid value (12) [ 413.866943][T14972] bond10 (unregistering): Released all slaves [ 414.001581][T14984] xt_hashlimit: size too large, truncated to 1048576 [ 414.126660][T14990] batadv1: entered promiscuous mode [ 414.138852][T14990] batadv1: entered allmulticast mode [ 414.160540][T14990] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 414.178820][T14990] bridge0: port 3(batadv1) entered blocking state [ 414.199348][T14990] bridge0: port 3(batadv1) entered disabled state [ 414.221931][T14990] bridge0: port 3(batadv1) entered blocking state [ 414.228539][T14990] bridge0: port 3(batadv1) entered forwarding state [ 414.246692][T14980] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 414.291973][T14993] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1514) ! [ 414.448546][T14997] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 414.467875][T14997] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2901'. [ 414.516854][T14999] netlink: 'syz.2.2900': attribute type 1 has an invalid length. [ 414.547951][T14999] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.2900'. [ 414.577412][T15001] netlink: 'syz.4.2902': attribute type 12 has an invalid length. [ 414.589377][T14999] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2900'. [ 414.615868][ T7164] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 414.626994][ T7164] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 414.736980][T15007] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2905'. [ 414.753657][T15007] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2905'. [ 414.770434][T15007] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 414.839266][T15014] RDS: rds_bind could not find a transport for fc01::, load rds_tcp or rds_rdma? [ 415.223659][T15035] atomic_op ffff88804c16e198 conn xmit_atomic 0000000000000000 [ 415.809818][T15071] FAULT_INJECTION: forcing a failure. [ 415.809818][T15071] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 415.845793][T15071] CPU: 1 UID: 0 PID: 15071 Comm: syz.3.2926 Not tainted syzkaller #0 PREEMPT(full) [ 415.845819][T15071] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 415.845829][T15071] Call Trace: [ 415.845837][T15071] [ 415.845845][T15071] dump_stack_lvl+0xe8/0x150 [ 415.845872][T15071] should_fail_ex+0x40c/0x560 [ 415.845905][T15071] _copy_from_user+0x2d/0xb0 [ 415.845927][T15071] csum_and_copy_from_iter_full+0x210/0x1fb0 [ 415.845956][T15071] ? __alloc_frozen_pages_noprof+0x1db/0x380 [ 415.845992][T15071] ? __pfx_csum_and_copy_from_iter_full+0x10/0x10 [ 415.846012][T15071] ? ip6_pol_route+0x163/0x14d0 [ 415.846032][T15071] ? ip6_pol_route+0x10f2/0x14d0 [ 415.846052][T15071] ? ip6_pol_route+0x163/0x14d0 [ 415.846078][T15071] ? alloc_pages_mpol+0x24a/0x380 [ 415.846099][T15071] ip_generic_getfrag+0x149/0x2d0 [ 415.846129][T15071] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 415.846152][T15071] ? raw6_getfrag+0x21a/0x3a0 [ 415.846184][T15071] __ip6_append_data+0x2430/0x4080 [ 415.846224][T15071] ? __pfx_raw6_getfrag+0x10/0x10 [ 415.846273][T15071] ? __pfx___ip6_append_data+0x10/0x10 [ 415.846295][T15071] ? do_raw_spin_lock+0x12b/0x2f0 [ 415.846322][T15071] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 415.846348][T15071] ip6_append_data+0x108/0x270 [ 415.846373][T15071] ? __pfx_raw6_getfrag+0x10/0x10 [ 415.846401][T15071] rawv6_sendmsg+0x1298/0x18c0 [ 415.846441][T15071] ? __pfx_rawv6_sendmsg+0x10/0x10 [ 415.846482][T15071] ? aa_sk_perm+0x6d5/0x900 [ 415.846515][T15071] ? __pfx_aa_sk_perm+0x10/0x10 [ 415.846541][T15071] ? __fget_files+0x3a2/0x420 [ 415.846561][T15071] ? sock_rps_record_flow+0x19/0x350 [ 415.846585][T15071] ? __pfx_inet_sendmsg+0x10/0x10 [ 415.846610][T15071] ? inet_sendmsg+0x298/0x320 [ 415.846635][T15071] ? __pfx_inet_sendmsg+0x10/0x10 [ 415.846660][T15071] __sys_sendto+0x5de/0x710 [ 415.846696][T15071] ? __pfx___sys_sendto+0x10/0x10 [ 415.846719][T15071] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 415.846754][T15071] ? __fget_files+0x3a2/0x420 [ 415.846786][T15071] ? ksys_write+0x242/0x270 [ 415.846814][T15071] ? __pfx_ksys_write+0x10/0x10 [ 415.846844][T15071] __x64_sys_sendto+0xde/0x100 [ 415.846871][T15071] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 415.846891][T15071] do_syscall_64+0x174/0x580 [ 415.846911][T15071] ? trace_irq_disable+0x3b/0x140 [ 415.846937][T15071] ? clear_bhb_loop+0x40/0x90 [ 415.846959][T15071] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 415.846978][T15071] RIP: 0033:0x7fe6e639ce59 [ 415.846996][T15071] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 415.847012][T15071] RSP: 002b:00007fe6e72a0028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 415.847032][T15071] RAX: ffffffffffffffda RBX: 00007fe6e6615fa0 RCX: 00007fe6e639ce59 [ 415.847046][T15071] RDX: 0000000000000020 RSI: 0000200000000300 RDI: 0000000000000003 [ 415.847058][T15071] RBP: 00007fe6e72a0090 R08: 0000000000000000 R09: fffffffffffffdfd [ 415.847071][T15071] R10: 0000000000003b00 R11: 0000000000000246 R12: 0000000000000001 [ 415.847082][T15071] R13: 00007fe6e6616038 R14: 00007fe6e6615fa0 R15: 00007ffd27e60fd8 [ 415.847113][T15071] [ 416.306033][T15085] netlink: 'syz.3.2931': attribute type 12 has an invalid length. [ 416.710746][T15111] netlink: 'syz.3.2941': attribute type 12 has an invalid length. [ 416.728326][T15108] Cannot find add_set index 0 as target [ 416.731751][T15113] IPVS: set_ctl: invalid protocol: 2 0.0.0.0:20004 [ 416.836726][T15113] bond16: option packets_per_slave: mode dependency failed, not supported in mode balance-tlb(5) [ 416.861496][T15113] bond16 (unregistering): Released all slaves [ 417.752009][T15171] __nla_validate_parse: 4 callbacks suppressed [ 417.752027][T15171] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2960'. [ 417.811557][T15171] netlink: 'syz.4.2960': attribute type 5 has an invalid length. [ 417.863612][T15171] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2960'. [ 417.930427][ T5646] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 417.943472][ T5646] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 417.952234][ T5646] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 417.962425][ T5646] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 417.970603][ T5646] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 418.032545][T15171] geneve4: entered promiscuous mode [ 418.038911][T15171] geneve4: entered allmulticast mode [ 418.048830][ T13] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 58628 - 0 [ 418.070672][T15172] sctp: [Deprecated]: syz.1.2962 (pid 15172) Use of struct sctp_assoc_value in delayed_ack socket option. [ 418.070672][T15172] Use struct sctp_sack_info instead [ 418.092015][ T13] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 58628 - 0 [ 418.130187][ T13] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 58628 - 0 [ 418.168293][ T13] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 58628 - 0 [ 418.423405][T15202] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 418.430718][T15202] IPv6: NLM_F_CREATE should be set when creating new route [ 418.438041][T15202] IPv6: NLM_F_CREATE should be set when creating new route [ 418.729940][T15216] FAULT_INJECTION: forcing a failure. [ 418.729940][T15216] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 418.767454][T15216] CPU: 0 UID: 0 PID: 15216 Comm: syz.4.2975 Not tainted syzkaller #0 PREEMPT(full) [ 418.767480][T15216] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 418.767490][T15216] Call Trace: [ 418.767498][T15216] [ 418.767507][T15216] dump_stack_lvl+0xe8/0x150 [ 418.767534][T15216] should_fail_ex+0x40c/0x560 [ 418.767566][T15216] _copy_from_user+0x2d/0xb0 [ 418.767589][T15216] ___sys_sendmsg+0x1c6/0x360 [ 418.767608][T15216] ? __lock_acquire+0x683/0x2cd0 [ 418.767632][T15216] ? __pfx____sys_sendmsg+0x10/0x10 [ 418.767683][T15216] ? __fget_files+0x2a/0x420 [ 418.767704][T15216] ? __fget_files+0x3a2/0x420 [ 418.767736][T15216] __x64_sys_sendmsg+0x1bd/0x2a0 [ 418.767759][T15216] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 418.767788][T15216] ? __pfx_ksys_write+0x10/0x10 [ 418.767830][T15216] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 418.767850][T15216] do_syscall_64+0x174/0x580 [ 418.767871][T15216] ? trace_irq_disable+0x3b/0x140 [ 418.767896][T15216] ? clear_bhb_loop+0x40/0x90 [ 418.767918][T15216] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 418.767936][T15216] RIP: 0033:0x7f732299ce59 [ 418.767954][T15216] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 418.767969][T15216] RSP: 002b:00007f73237f3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 418.767989][T15216] RAX: ffffffffffffffda RBX: 00007f7322c15fa0 RCX: 00007f732299ce59 [ 418.768003][T15216] RDX: 0000000020000034 RSI: 0000200000000140 RDI: 0000000000000005 [ 418.768015][T15216] RBP: 00007f73237f3090 R08: 0000000000000000 R09: 0000000000000000 [ 418.768025][T15216] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 418.768036][T15216] R13: 00007f7322c16038 R14: 00007f7322c15fa0 R15: 00007ffc5c8448a8 [ 418.768065][T15216] [ 419.071128][T15223] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 419.079881][T15223] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1514) ! [ 419.391830][T15233] netlink: 128 bytes leftover after parsing attributes in process `syz.1.2981'. [ 419.401365][T15233] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2981'. [ 420.033348][T15179] bridge0: port 1(bridge_slave_0) entered blocking state [ 420.040849][ T5631] Bluetooth: hci3: command tx timeout [ 420.047787][T15179] bridge0: port 1(bridge_slave_0) entered disabled state [ 420.055052][T15179] bridge_slave_0: entered allmulticast mode [ 420.063551][T15179] bridge_slave_0: entered promiscuous mode [ 420.073221][T15179] bridge0: port 2(bridge_slave_1) entered blocking state [ 420.083528][T15179] bridge0: port 2(bridge_slave_1) entered disabled state [ 420.092355][T15179] bridge_slave_1: entered allmulticast mode [ 420.100500][T15179] bridge_slave_1: entered promiscuous mode [ 420.129741][T15268] FAULT_INJECTION: forcing a failure. [ 420.129741][T15268] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 420.177050][T15268] CPU: 1 UID: 0 PID: 15268 Comm: syz.1.2991 Not tainted syzkaller #0 PREEMPT(full) [ 420.177075][T15268] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 420.177086][T15268] Call Trace: [ 420.177093][T15268] [ 420.177102][T15268] dump_stack_lvl+0xe8/0x150 [ 420.177129][T15268] should_fail_ex+0x40c/0x560 [ 420.177162][T15268] _copy_to_user+0x31/0xb0 [ 420.177193][T15268] simple_read_from_buffer+0xe1/0x170 [ 420.177221][T15268] proc_fail_nth_read+0x1bb/0x230 [ 420.177247][T15268] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 420.177273][T15268] ? rw_verify_area+0x24a/0x4c0 [ 420.177298][T15268] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 420.177319][T15268] vfs_read+0x213/0xa80 [ 420.177348][T15268] ? __pfx___mutex_lock+0x10/0x10 [ 420.177369][T15268] ? __pfx_vfs_read+0x10/0x10 [ 420.177394][T15268] ? __fget_files+0x2a/0x420 [ 420.177417][T15268] ? __fget_files+0x3a2/0x420 [ 420.177434][T15268] ? __fget_files+0x2a/0x420 [ 420.177466][T15268] ksys_read+0x150/0x270 [ 420.177490][T15268] ? __pfx_ksys_read+0x10/0x10 [ 420.177520][T15268] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 420.177537][T15268] do_syscall_64+0x174/0x580 [ 420.177556][T15268] ? trace_irq_disable+0x3b/0x140 [ 420.177581][T15268] ? clear_bhb_loop+0x40/0x90 [ 420.177602][T15268] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 420.177618][T15268] RIP: 0033:0x7ffbe4b5d68e [ 420.177635][T15268] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 420.177651][T15268] RSP: 002b:00007ffbe2df5fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 420.177669][T15268] RAX: ffffffffffffffda RBX: 00007ffbe2df66c0 RCX: 00007ffbe4b5d68e [ 420.177682][T15268] RDX: 000000000000000f RSI: 00007ffbe2df60a0 RDI: 0000000000000004 [ 420.177692][T15268] RBP: 00007ffbe2df6090 R08: 0000000000000000 R09: 0000000000000000 [ 420.177703][T15268] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 420.177713][T15268] R13: 00007ffbe4e16038 R14: 00007ffbe4e15fa0 R15: 00007ffc5db06388 [ 420.177743][T15268] [ 420.398438][T15271] netlink: 'syz.4.2992': attribute type 10 has an invalid length. [ 420.406342][T15271] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2992'. [ 420.429221][T15271] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 420.457514][T15273] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2993'. [ 420.609226][T15179] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 420.636772][T15179] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 420.654247][T15278] syzkaller0: entered promiscuous mode [ 420.687147][T15278] syzkaller0: entered allmulticast mode [ 420.786694][T15277] tipc: Started in network mode [ 420.792610][T15277] tipc: Node identity 5e5df3faff93, cluster identity 4711 [ 420.804910][T15277] tipc: Enabled bearer , priority 0 [ 420.867522][T15285] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2997'. [ 420.887392][T15179] team0: Port device team_slave_0 added [ 420.897495][T15285] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2997'. [ 420.913676][T15179] team0: Port device team_slave_1 added [ 420.932407][T15277] tipc: Resetting bearer [ 420.986424][T15277] tipc: Disabling bearer [ 421.049644][T15179] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 421.068887][T15179] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 421.122029][T15179] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 421.138021][T15179] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 421.147566][T15295] netlink: 'syz.1.3000': attribute type 1 has an invalid length. [ 421.155373][T15179] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 421.201644][T15179] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 421.231893][T15295] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 421.243216][T15299] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 421.261227][T15299] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1514) ! [ 421.325329][T15179] hsr_slave_0: entered promiscuous mode [ 421.346756][T15179] hsr_slave_1: entered promiscuous mode [ 421.357712][T15179] debugfs: 'hsr0' already exists in 'hsr' [ 421.363522][T15179] Cannot create hsr debugfs directory [ 421.483597][T15310] netlink: 'syz.2.3005': attribute type 1 has an invalid length. [ 421.502113][T15310] netlink: 96 bytes leftover after parsing attributes in process `syz.2.3005'. [ 421.513917][T15311] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3006'. [ 421.797695][T15179] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 421.836530][T15325] bridge_slave_0: left allmulticast mode [ 421.842365][T15325] bridge_slave_0: left promiscuous mode [ 421.849763][T15325] bridge0: port 1(bridge_slave_0) entered disabled state [ 421.868750][T15325] bridge_slave_1: left allmulticast mode [ 421.874507][T15325] bridge_slave_1: left promiscuous mode [ 421.881362][T15325] bridge0: port 2(bridge_slave_1) entered disabled state [ 421.902969][T15325] bond0: (slave bond_slave_0): Releasing backup interface [ 421.917531][T15325] bond0: (slave bond_slave_1): Releasing backup interface [ 421.935302][T15325] team0: Port device team_slave_0 removed [ 421.949914][T15325] team0: Port device team_slave_1 removed [ 421.958857][T15325] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 422.060784][T15179] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 422.107246][ T5631] Bluetooth: hci3: command tx timeout [ 422.147399][T15179] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 422.331408][T15179] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 422.378205][T15349] gtp2: entered promiscuous mode [ 422.383282][T15349] gtp2: entered allmulticast mode [ 422.438860][T15362] netlink: 'syz.1.3023': attribute type 1 has an invalid length. [ 422.811827][T15179] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 422.858105][T15386] __nla_validate_parse: 5 callbacks suppressed [ 422.858123][T15386] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3028'. [ 422.886010][T15179] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 422.914338][T15179] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 422.924322][T15386] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3028'. [ 422.952712][T15179] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 422.979061][T15179] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 423.029813][T15179] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 423.054881][T15179] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 423.084658][T15179] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 423.297132][T15179] 8021q: adding VLAN 0 to HW filter on device bond0 [ 423.369789][T15179] 8021q: adding VLAN 0 to HW filter on device team0 [ 423.404882][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 423.406464][T15410] FAULT_INJECTION: forcing a failure. [ 423.406464][T15410] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 423.412071][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 423.432525][T15410] CPU: 1 UID: 0 PID: 15410 Comm: syz.2.3033 Not tainted syzkaller #0 PREEMPT(full) [ 423.432549][T15410] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 423.432563][T15410] Call Trace: [ 423.432574][T15410] [ 423.432582][T15410] dump_stack_lvl+0xe8/0x150 [ 423.432608][T15410] should_fail_ex+0x40c/0x560 [ 423.432640][T15410] _copy_from_user+0x2d/0xb0 [ 423.432661][T15410] ___sys_sendmsg+0x1c6/0x360 [ 423.432680][T15410] ? __lock_acquire+0x683/0x2cd0 [ 423.432702][T15410] ? __pfx____sys_sendmsg+0x10/0x10 [ 423.432753][T15410] ? __fget_files+0x2a/0x420 [ 423.432774][T15410] ? __fget_files+0x3a2/0x420 [ 423.432804][T15410] __x64_sys_sendmsg+0x1bd/0x2a0 [ 423.432825][T15410] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 423.432853][T15410] ? __pfx_ksys_write+0x10/0x10 [ 423.432892][T15410] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 423.432912][T15410] do_syscall_64+0x174/0x580 [ 423.432932][T15410] ? trace_irq_disable+0x3b/0x140 [ 423.432957][T15410] ? clear_bhb_loop+0x40/0x90 [ 423.432978][T15410] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 423.432996][T15410] RIP: 0033:0x7fb6bf79ce59 [ 423.433013][T15410] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 423.433026][T15410] RSP: 002b:00007fb6c0613028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 423.433046][T15410] RAX: ffffffffffffffda RBX: 00007fb6bfa15fa0 RCX: 00007fb6bf79ce59 [ 423.433059][T15410] RDX: 0000000000000000 RSI: 0000200000000500 RDI: 0000000000000003 [ 423.433071][T15410] RBP: 00007fb6c0613090 R08: 0000000000000000 R09: 0000000000000000 [ 423.433082][T15410] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 423.433093][T15410] R13: 00007fb6bfa16038 R14: 00007fb6bfa15fa0 R15: 00007fffa4d15bd8 [ 423.433123][T15410] [ 423.670654][T15179] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 423.681231][T15179] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 423.861233][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 423.868423][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 423.929985][T15421] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 423.977163][T15421] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1514) ! [ 424.189174][ T5631] Bluetooth: hci3: command tx timeout [ 424.225536][T15429] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3038'. [ 424.462467][T15445] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3043'. [ 424.514022][T15448] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3043'. [ 424.629500][T15179] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 424.673415][T15455] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 424.689636][T15455] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1514) ! [ 424.720465][T15179] veth0_vlan: entered promiscuous mode [ 424.753585][ T5631] block nbd5: Receive control failed (result -32) [ 424.753585][ T5646] block nbd5: Receive control failed (result -32) [ 424.771996][T15179] veth1_vlan: entered promiscuous mode [ 424.816136][T15179] veth0_macvtap: entered promiscuous mode [ 424.828695][T15179] veth1_macvtap: entered promiscuous mode [ 424.854195][T15179] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 424.873313][T15179] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 424.900069][ T83] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 424.912089][ T83] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 424.941844][ T83] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 424.953026][ T83] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 425.008460][T15462] syzkaller1: entered promiscuous mode [ 425.022071][T15462] syzkaller1: entered allmulticast mode [ 425.090057][T15463] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3048'. [ 425.123372][T15468] FAULT_INJECTION: forcing a failure. [ 425.123372][T15468] name failslab, interval 1, probability 0, space 0, times 0 [ 425.140098][T15468] CPU: 0 UID: 0 PID: 15468 Comm: syz.3.3049 Not tainted syzkaller #0 PREEMPT(full) [ 425.140124][T15468] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 425.140135][T15468] Call Trace: [ 425.140143][T15468] [ 425.140151][T15468] dump_stack_lvl+0xe8/0x150 [ 425.140176][T15468] should_fail_ex+0x40c/0x560 [ 425.140207][T15468] should_failslab+0xa8/0x100 [ 425.140223][T15468] ? __kernfs_new_node+0xea/0x970 [ 425.140247][T15468] kmem_cache_alloc_noprof+0x87/0x650 [ 425.140280][T15468] __kernfs_new_node+0xea/0x970 [ 425.140309][T15468] ? __pfx___kernfs_new_node+0x10/0x10 [ 425.140330][T15468] ? kernfs_root+0x1c/0x230 [ 425.140367][T15468] ? kernfs_root+0x1c/0x230 [ 425.140388][T15468] ? kernfs_root+0x1c/0x230 [ 425.140407][T15468] ? kernfs_root+0x1c/0x230 [ 425.140433][T15468] kernfs_new_node+0x102/0x210 [ 425.140462][T15468] __kernfs_create_file+0x4b/0x2e0 [ 425.140485][T15468] sysfs_add_file_mode_ns+0x237/0x300 [ 425.140513][T15468] internal_create_group+0x679/0x1180 [ 425.140550][T15468] ? __pfx_internal_create_group+0x10/0x10 [ 425.140571][T15468] ? kernfs_add_one+0x480/0x5d0 [ 425.140598][T15468] ? up_write+0x1a6/0x410 [ 425.140623][T15468] sysfs_create_groups+0x59/0x120 [ 425.140647][T15468] device_add_attrs+0x1b1/0x5e0 [ 425.140674][T15468] ? __pfx_device_add_attrs+0x10/0x10 [ 425.140697][T15468] ? kobject_put+0x50f/0x550 [ 425.140724][T15468] ? device_add_class_symlinks+0x21f/0x240 [ 425.140752][T15468] device_add+0x488/0xb90 [ 425.140780][T15468] wakeup_source_sysfs_add+0x1d3/0x2c0 [ 425.140801][T15468] wakeup_source_register+0x17f/0x380 [ 425.140830][T15468] ep_insert+0x1021/0x1a60 [ 425.140869][T15468] ? __pfx_ep_insert+0x10/0x10 [ 425.140904][T15468] ? bpf_lsm_capable+0x9/0x20 [ 425.140934][T15468] do_epoll_ctl+0x7b6/0xe20 [ 425.140967][T15468] __x64_sys_epoll_ctl+0x165/0x1b0 [ 425.140989][T15468] ? __irq_exit_rcu+0xca/0x220 [ 425.141009][T15468] ? __pfx___x64_sys_epoll_ctl+0x10/0x10 [ 425.141041][T15468] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 425.141060][T15468] do_syscall_64+0x174/0x580 [ 425.141082][T15468] ? clear_bhb_loop+0x40/0x90 [ 425.141105][T15468] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 425.141123][T15468] RIP: 0033:0x7fe6e639ce59 [ 425.141139][T15468] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 425.141154][T15468] RSP: 002b:00007fe6e72a0028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 425.141174][T15468] RAX: ffffffffffffffda RBX: 00007fe6e6615fa0 RCX: 00007fe6e639ce59 [ 425.141187][T15468] RDX: 0000000000000007 RSI: 0000000000000001 RDI: 0000000000000003 [ 425.141198][T15468] RBP: 00007fe6e72a0090 R08: 0000000000000000 R09: 0000000000000000 [ 425.141208][T15468] R10: 0000200000000800 R11: 0000000000000246 R12: 0000000000000002 [ 425.141219][T15468] R13: 00007fe6e6616038 R14: 00007fe6e6615fa0 R15: 00007ffd27e60fd8 [ 425.141250][T15468] [ 425.586530][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 425.618382][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 425.724249][T15483] xt_l2tp: missing protocol rule (udp|l2tpip) [ 425.746148][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 425.790209][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 425.966719][T15490] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3057'. [ 425.985799][T15490] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3057'. [ 426.268294][ T5646] Bluetooth: hci3: command tx timeout [ 426.760216][T15507] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3061'. [ 426.782672][T15509] syzkaller0: entered promiscuous mode [ 426.804120][T15509] syzkaller0: entered allmulticast mode [ 426.894619][ T5631] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 426.915800][ T5631] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 426.929053][ T5631] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 426.941750][ T5631] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 426.950531][ T5631] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 427.448606][T15530] netlink: 116 bytes leftover after parsing attributes in process `syz.0.3066'. [ 427.604008][ T1169] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 427.721967][T15530] bridge_slave_0: left allmulticast mode [ 427.753525][T15530] bridge_slave_0: left promiscuous mode [ 427.788702][T15530] bridge0: port 1(bridge_slave_0) entered disabled state [ 427.829029][T15530] bridge_slave_1: left allmulticast mode [ 427.840064][T15530] bridge_slave_1: left promiscuous mode [ 427.854949][T15530] bridge0: port 2(bridge_slave_1) entered disabled state [ 427.895412][T15530] bond0: (slave bond_slave_0): Releasing backup interface [ 427.914897][T15530] bond0: (slave bond_slave_1): Releasing backup interface [ 427.957932][T15530] team0: Failed to send options change via netlink (err -105) [ 427.967171][T15530] team0: Failed to send port change of device team_slave_0 via netlink (err -105) [ 427.978799][T15530] team0: Port device team_slave_0 removed [ 427.991734][T15530] team0: Failed to send options change via netlink (err -105) [ 428.001859][T15530] team0: Failed to send port change of device team_slave_1 via netlink (err -105) [ 428.012974][T15530] team0: Port device team_slave_1 removed [ 428.020645][T15530] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 428.028325][T15530] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 428.039356][T15530] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 428.063714][T15530] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 428.074711][T15530] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 428.173125][T15549] team0: Failed to send options change via netlink (err -105) [ 428.216174][T15549] team0: Mode changed to "activebackup" [ 428.242207][T15556] xt_socket: unknown flags 0x8 [ 428.475258][ T1169] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 428.502584][T15565] netlink: 60 bytes leftover after parsing attributes in process `syz.4.3071'. [ 428.668690][ T1169] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 428.681983][T15576] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3075'. [ 428.963713][ T1169] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 429.070768][ T5631] Bluetooth: hci0: command tx timeout [ 429.201321][T15590] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3078'. [ 429.540519][ T12] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 20002 - 0 [ 429.641499][ T1031] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 20002 - 0 [ 429.712831][ T3357] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 20002 - 0 [ 429.847154][T15605] nbd: socks must be embedded in a SOCK_ITEM attr [ 429.864658][T15605] block nbd6: shutting down sockets [ 429.951134][ T13] netdevsim netdevsim2 eth4: set [1, 0] type 2 family 0 port 20002 - 0 [ 430.088659][T15615] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3082'. [ 430.291840][ T1169] vlan2: left allmulticast mode [ 430.314957][ T1169] geneve0: left allmulticast mode [ 430.326712][ T1169] vlan2: left promiscuous mode [ 430.333514][ T1169] geneve0: left promiscuous mode [ 430.341808][ T1169] bridge0: port 3(vlan2) entered disabled state [ 430.381172][ T1169] bridge_slave_1: left allmulticast mode [ 430.387494][ T1169] bridge_slave_1: left promiscuous mode [ 430.406124][ T1169] bridge0: port 2(bridge_slave_1) entered disabled state [ 430.457554][ T1169] bridge_slave_0: left allmulticast mode [ 430.466816][ T1169] bridge_slave_0: left promiscuous mode [ 430.479928][ T1169] bridge0: port 1(bridge_slave_0) entered disabled state [ 430.523812][T15622] netlink: 'syz.3.3084': attribute type 83 has an invalid length. [ 430.848076][ T1169] bond3 (unregistering): (slave ip6gretap1): Releasing active interface [ 430.856673][ T1169] ip6gretap1 (unregistering): left allmulticast mode [ 431.106642][ T1169] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 431.118333][ T1169] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 431.129640][ T1169] bond0 (unregistering): Released all slaves [ 431.145170][ T1169] bond1 (unregistering): Released all slaves [ 431.151330][ T5631] Bluetooth: hci0: command tx timeout [ 431.178253][ T1169] bond2 (unregistering): Released all slaves [ 431.196643][ T1169] bond3 (unregistering): left allmulticast mode [ 431.202920][ T1169] bond3 (unregistering): left promiscuous mode [ 431.220131][ T1169] team0: Port device macvlan2 removed [ 431.232569][ T1169] bond3 (unregistering): Released all slaves [ 431.251384][ T1169] bond4 (unregistering): Released all slaves [ 431.270959][ T1169] bond5 (unregistering): Released all slaves [ 431.292284][ T1169] bond6 (unregistering): Released all slaves [ 431.311527][ T1169] bond7 (unregistering): Released all slaves [ 431.329773][ T1169] bond8 (unregistering): Released all slaves [ 431.353091][ T1169] bond9 (unregistering): Released all slaves [ 431.389038][T15618] syzkaller1: entered promiscuous mode [ 431.395026][T15618] syzkaller1: entered allmulticast mode [ 431.601723][ T1169] hmac(sha224): left promiscuous mode [ 431.611946][T15628] IPVS: set_ctl: invalid protocol: 2 0.0.0.0:20004 [ 431.946473][ C1] ================================================================== [ 431.954579][ C1] BUG: KASAN: slab-use-after-free in fib_rules_lookup+0x15e/0xeb0 [ 431.962411][ C1] Read of size 8 at addr ffff8880264fbd80 by task pool_workqueue_/3 [ 431.970438][ C1] [ 431.972796][ C1] CPU: 1 UID: 0 PID: 3 Comm: pool_workqueue_ Not tainted syzkaller #0 PREEMPT(full) [ 431.972822][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 431.972836][ C1] Call Trace: [ 431.972844][ C1] [ 431.972853][ C1] dump_stack_lvl+0xe8/0x150 [ 431.972880][ C1] print_address_description+0x55/0x1e0 [ 431.972903][ C1] ? fib_rules_lookup+0x15e/0xeb0 [ 431.972926][ C1] print_report+0x58/0x70 [ 431.972944][ C1] kasan_report+0x117/0x150 [ 431.972976][ C1] ? fib_rules_lookup+0x15e/0xeb0 [ 431.973001][ C1] ? fib_rules_lookup+0x99/0xeb0 [ 431.973023][ C1] fib_rules_lookup+0x15e/0xeb0 [ 431.973047][ C1] ? fib_rules_lookup+0x99/0xeb0 [ 431.973072][ C1] ? __pfx_fib_rules_lookup+0x10/0x10 [ 431.973094][ C1] ? l3mdev_update_flow+0x26/0x610 [ 431.973122][ C1] ? l3mdev_update_flow+0x4ad/0x610 [ 431.973148][ C1] __fib_lookup+0x106/0x210 [ 431.973168][ C1] ? tipc_udp_xmit+0x80c/0xb30 [ 431.973192][ C1] ? tipc_udp_send_msg+0x27f/0x3f0 [ 431.973216][ C1] ? tipc_bearer_xmit_skb+0x2b3/0x400 [ 431.973239][ C1] ? __pfx___fib_lookup+0x10/0x10 [ 431.973257][ C1] ? handle_softirqs+0x225/0x840 [ 431.973284][ C1] ? __schedule+0x1848/0x57a0 [ 431.973304][ C1] ? preempt_schedule_irq+0x4d/0xa0 [ 431.973325][ C1] ? irqentry_exit+0x14f/0x8e0 [ 431.973351][ C1] ? fib_lookup+0x49/0x440 [ 431.973377][ C1] ? ip_route_output_key_hash_rcu+0x274/0x2720 [ 431.973408][ C1] ip_route_output_key_hash_rcu+0x294/0x2720 [ 431.973441][ C1] ? ip_route_output_key_hash+0xd8/0x2a0 [ 431.973469][ C1] ? ip_route_output_key_hash+0xd8/0x2a0 [ 431.973498][ C1] ip_route_output_key_hash+0x18d/0x2a0 [ 431.973529][ C1] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 431.973561][ C1] ? icmp_route_lookup+0x370/0xb50 [ 431.973583][ C1] icmp_route_lookup+0x50a/0xb50 [ 431.973606][ C1] ? __pfx_icmp_route_lookup+0x10/0x10 [ 431.973625][ C1] ? __asan_memset+0x22/0x50 [ 431.973652][ C1] ? __icmp_send+0xa49/0x1710 [ 431.973669][ C1] ? lock_acquire+0x106/0x350 [ 431.973690][ C1] ? __icmp_send+0xa49/0x1710 [ 431.973709][ C1] ? __pfx___ip_options_echo+0x10/0x10 [ 431.973739][ C1] __icmp_send+0x1010/0x1710 [ 431.973765][ C1] ? __icmp_send+0x230/0x1710 [ 431.973790][ C1] ? __pfx___icmp_send+0x10/0x10 [ 431.973815][ C1] ? __lock_acquire+0x683/0x2cd0 [ 431.973839][ C1] ? __lock_acquire+0x683/0x2cd0 [ 431.973868][ C1] ipv4_link_failure+0x64d/0xa50 [ 431.973902][ C1] ? __pfx_ipv4_link_failure+0x10/0x10 [ 431.973938][ C1] ? __pfx_ipv4_link_failure+0x10/0x10 [ 431.973968][ C1] arp_error_report+0x118/0x160 [ 431.974000][ C1] neigh_invalidate+0x243/0x470 [ 431.974026][ C1] neigh_timer_handler+0xc01/0x12b0 [ 431.974052][ C1] call_timer_fn+0x192/0x5e0 [ 431.974074][ C1] ? __pfx_neigh_timer_handler+0x10/0x10 [ 431.974095][ C1] ? call_timer_fn+0xd4/0x5e0 [ 431.974116][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 431.974144][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 431.974164][ C1] ? __pfx_neigh_timer_handler+0x10/0x10 [ 431.974186][ C1] __run_timer_base+0x652/0x8b0 [ 431.974206][ C1] ? ktime_get+0x45/0x220 [ 431.974239][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 431.974261][ C1] ? ktime_get+0x1f5/0x220 [ 431.974328][ C1] ? lapic_next_event+0x11/0x20 [ 431.974357][ C1] run_timer_softirq+0xb7/0x170 [ 431.974378][ C1] handle_softirqs+0x225/0x840 [ 431.974400][ C1] ? __irq_exit_rcu+0xca/0x220 [ 431.974423][ C1] __irq_exit_rcu+0xca/0x220 [ 431.974443][ C1] irq_exit_rcu+0x9/0x30 [ 431.974462][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 431.974484][ C1] [ 431.974492][ C1] [ 431.974500][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 431.974523][ C1] RIP: 0010:finish_task_switch+0x41a/0xbc0 [ 431.974556][ C1] Code: 03 00 00 41 c7 84 24 e0 0d 00 00 00 00 00 00 0f 1f 44 00 00 49 83 c4 48 4c 89 e7 e8 f0 c5 13 0a e8 6b dd 38 00 fb 4c 8b 65 c8 <49> 8d bc 24 c8 16 00 00 48 89 f8 48 c1 e8 03 42 0f b6 04 30 84 c0 [ 431.974573][ C1] RSP: 0018:ffffc90000087940 EFLAGS: 00000202 [ 431.974592][ C1] RAX: 000000000000313b RBX: ffff8880b873be60 RCX: 0000000080000001 [ 431.974607][ C1] RDX: 0000000000000006 RSI: ffffffff8dfad1b9 RDI: ffffffff8c2886a0 [ 431.974621][ C1] RBP: ffffc90000087990 R08: ffffffff902fd2f7 R09: 1ffffffff205fa5e [ 431.974637][ C1] R10: dffffc0000000000 R11: fffffbfff205fa5f R12: ffff88801d699f00 [ 431.974652][ C1] R13: ffff8880b873be28 R14: dffffc0000000000 R15: 1ffff110170e77cc [ 431.974680][ C1] __schedule+0x1848/0x57a0 [ 431.974703][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 431.974745][ C1] ? __pfx___schedule+0x10/0x10 [ 431.974775][ C1] ? __mutex_lock+0x30f/0x1590 [ 431.974803][ C1] preempt_schedule_irq+0x4d/0xa0 [ 431.974825][ C1] irqentry_exit+0x14f/0x8e0 [ 431.974851][ C1] asm_sysvec_reschedule_ipi+0x1a/0x20 [ 431.974872][ C1] RIP: 0010:__sanitizer_cov_trace_pc+0x30/0x70 [ 431.974900][ C1] Code: 04 24 65 48 8b 0d c8 af 72 11 65 8b 15 e9 af 72 11 81 e2 00 01 ff 00 74 11 81 fa 00 01 00 00 75 35 83 b9 ec 16 00 00 00 74 2c <8b> 91 c8 16 00 00 83 fa 02 75 21 48 8b 91 d0 16 00 00 48 8b 32 48 [ 431.974918][ C1] RSP: 0018:ffffc90000087cd0 EFLAGS: 00000246 [ 431.974969][ C1] RAX: ffffffff818e9d2d RBX: 1ffff11006b25f00 RCX: ffff88801d699f00 [ 431.974985][ C1] RDX: 0000000000000000 RSI: ffffffff8c288680 RDI: ffff88807a975890 [ 431.975000][ C1] RBP: ffff88803592f808 R08: ffffffff902fd2f7 R09: 1ffffffff205fa5e [ 431.975016][ C1] R10: dffffc0000000000 R11: fffffbfff205fa5f R12: 1ffff1100f52eb01 [ 431.975032][ C1] R13: ffff88807a975890 R14: ffff88803592f800 R15: dffffc0000000000 [ 431.975052][ C1] ? pwq_release_workfn+0x1ed/0x880 [ 431.975078][ C1] pwq_release_workfn+0x1ed/0x880 [ 431.975104][ C1] kthread_worker_fn+0x4eb/0xb20 [ 431.975130][ C1] ? kthread_worker_fn+0xdf/0xb20 [ 431.975157][ C1] ? __pfx_pwq_release_workfn+0x10/0x10 [ 431.975181][ C1] kthread+0x389/0x470 [ 431.975206][ C1] ? __pfx_kthread_worker_fn+0x10/0x10 [ 431.975230][ C1] ? __pfx_kthread+0x10/0x10 [ 431.975256][ C1] ret_from_fork+0x514/0xb70 [ 431.975278][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 431.975299][ C1] ? __switch_to+0xc89/0x1420 [ 431.975328][ C1] ? __pfx_kthread+0x10/0x10 [ 431.975352][ C1] ret_from_fork_asm+0x1a/0x30 [ 431.975381][ C1] [ 431.975389][ C1] [ 432.578421][ C1] Allocated by task 5636: [ 432.582741][ C1] kasan_save_track+0x3e/0x80 [ 432.587426][ C1] __kasan_kmalloc+0x93/0xb0 [ 432.592024][ C1] __kmalloc_node_track_caller_noprof+0x4d7/0x7b0 [ 432.598445][ C1] kmemdup_noprof+0x2b/0x70 [ 432.602944][ C1] fib_rules_register+0x2f/0x400 [ 432.607884][ C1] fib4_rules_init+0x21/0x160 [ 432.612558][ C1] fib_net_init+0x17a/0x3e0 [ 432.617069][ C1] ops_init+0x35d/0x5d0 [ 432.621265][ C1] setup_net+0x118/0x350 [ 432.625508][ C1] copy_net_ns+0x4f9/0x720 [ 432.629936][ C1] create_new_namespaces+0x3f0/0x6b0 [ 432.635220][ C1] unshare_nsproxy_namespaces+0x149/0x190 [ 432.640933][ C1] ksys_unshare+0x57d/0xa00 [ 432.645436][ C1] __x64_sys_unshare+0x38/0x50 [ 432.650201][ C1] do_syscall_64+0x174/0x580 [ 432.654793][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 432.660678][ C1] [ 432.662991][ C1] Freed by task 23: [ 432.666787][ C1] kasan_save_track+0x3e/0x80 [ 432.671460][ C1] kasan_save_free_info+0x40/0x50 [ 432.676481][ C1] __kasan_slab_free+0x5c/0x80 [ 432.681242][ C1] __rcu_free_sheaf_prepare+0x12d/0x2a0 [ 432.686781][ C1] rcu_free_sheaf+0x31/0x200 [ 432.691377][ C1] rcu_core+0x78b/0x10a0 [ 432.695620][ C1] handle_softirqs+0x225/0x840 [ 432.700462][ C1] run_ksoftirqd+0x36/0x60 [ 432.704877][ C1] smpboot_thread_fn+0x57c/0xa80 [ 432.709810][ C1] kthread+0x389/0x470 [ 432.713871][ C1] ret_from_fork+0x514/0xb70 [ 432.718452][ C1] ret_from_fork_asm+0x1a/0x30 [ 432.723212][ C1] [ 432.725524][ C1] The buggy address belongs to the object at ffff8880264fbd00 [ 432.725524][ C1] which belongs to the cache kmalloc-192 of size 192 [ 432.739571][ C1] The buggy address is located 128 bytes inside of [ 432.739571][ C1] freed 192-byte region [ffff8880264fbd00, ffff8880264fbdc0) [ 432.753406][ C1] [ 432.755746][ C1] The buggy address belongs to the physical page: [ 432.762157][ C1] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x264fb [ 432.770922][ C1] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 432.778027][ C1] page_type: f5(slab) [ 432.782003][ C1] raw: 00fff00000000000 ffff88813fe163c0 dead000000000100 dead000000000122 [ 432.790582][ C1] raw: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000 [ 432.799155][ C1] page dumped because: kasan: bad access detected [ 432.805567][ C1] page_owner tracks the page as allocated [ 432.811293][ C1] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xd2cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 5099297973, free_ts 0 [ 432.830316][ C1] post_alloc_hook+0x22d/0x280 [ 432.835096][ C1] get_page_from_freelist+0x24ae/0x2530 [ 432.840734][ C1] __alloc_frozen_pages_noprof+0x18d/0x380 [ 432.846569][ C1] allocate_slab+0x77/0x660 [ 432.851081][ C1] refill_objects+0x336/0x3d0 [ 432.855761][ C1] __pcs_replace_empty_main+0x320/0x720 [ 432.861305][ C1] __kmalloc_cache_noprof+0x388/0x660 [ 432.866679][ C1] call_usermodehelper_setup+0x8e/0x270 [ 432.872252][ C1] kobject_uevent_env+0x662/0x9e0 [ 432.877375][ C1] driver_register+0x2d4/0x320 [ 432.882144][ C1] virtio_console_init+0x7b/0xe0 [ 432.887076][ C1] do_one_initcall+0x250/0x870 [ 432.891838][ C1] do_initcall_level+0x10a/0x1a0 [ 432.896770][ C1] do_initcalls+0x59/0xa0 [ 432.901093][ C1] kernel_init_freeable+0x29d/0x3e0 [ 432.906282][ C1] kernel_init+0x1d/0x1d0 [ 432.910611][ C1] page_owner free stack trace missing [ 432.915973][ C1] [ 432.918288][ C1] Memory state around the buggy address: [ 432.923907][ C1] ffff8880264fbc80: 00 00 00 00 00 00 00 06 fc fc fc fc fc fc fc fc [ 432.931958][ C1] ffff8880264fbd00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 432.940098][ C1] >ffff8880264fbd80: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 432.948147][ C1] ^ [ 432.952206][ C1] ffff8880264fbe00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 432.960263][ C1] ffff8880264fbe80: 00 00 00 fc fc fc fc fc fc fc fc fc fc fc fc fc [ 432.968318][ C1] ================================================================== [ 432.976463][ C1] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 432.983670][ C1] CPU: 1 UID: 0 PID: 3 Comm: pool_workqueue_ Not tainted syzkaller #0 PREEMPT(full) [ 432.993123][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 433.003243][ C1] Call Trace: [ 433.006530][ C1] [ 433.009368][ C1] vpanic+0x56c/0xa60 [ 433.013357][ C1] ? rcu_is_watching+0x15/0xb0 [ 433.018117][ C1] ? __pfx_vpanic+0x10/0x10 [ 433.022630][ C1] panic+0xc5/0xd0 [ 433.026362][ C1] ? __pfx_panic+0x10/0x10 [ 433.030779][ C1] ? fib_rules_lookup+0x15e/0xeb0 [ 433.035815][ C1] ? fib_rules_lookup+0x15e/0xeb0 [ 433.040851][ C1] check_panic_on_warn+0x89/0xb0 [ 433.045803][ C1] ? fib_rules_lookup+0x15e/0xeb0 [ 433.050855][ C1] end_report+0x73/0x170 [ 433.055107][ C1] ? fib_rules_lookup+0x15e/0xeb0 [ 433.060134][ C1] kasan_report+0x128/0x150 [ 433.064653][ C1] ? fib_rules_lookup+0x15e/0xeb0 [ 433.069684][ C1] ? fib_rules_lookup+0x99/0xeb0 [ 433.074619][ C1] fib_rules_lookup+0x15e/0xeb0 [ 433.079468][ C1] ? fib_rules_lookup+0x99/0xeb0 [ 433.084404][ C1] ? __pfx_fib_rules_lookup+0x10/0x10 [ 433.089772][ C1] ? l3mdev_update_flow+0x26/0x610 [ 433.094880][ C1] ? l3mdev_update_flow+0x4ad/0x610 [ 433.100077][ C1] __fib_lookup+0x106/0x210 [ 433.104583][ C1] ? tipc_udp_xmit+0x80c/0xb30 [ 433.109345][ C1] ? tipc_udp_send_msg+0x27f/0x3f0 [ 433.114473][ C1] ? tipc_bearer_xmit_skb+0x2b3/0x400 [ 433.119841][ C1] ? __pfx___fib_lookup+0x10/0x10 [ 433.124857][ C1] ? handle_softirqs+0x225/0x840 [ 433.129789][ C1] ? __schedule+0x1848/0x57a0 [ 433.134462][ C1] ? preempt_schedule_irq+0x4d/0xa0 [ 433.139660][ C1] ? irqentry_exit+0x14f/0x8e0 [ 433.144425][ C1] ? fib_lookup+0x49/0x440 [ 433.148837][ C1] ? ip_route_output_key_hash_rcu+0x274/0x2720 [ 433.154993][ C1] ip_route_output_key_hash_rcu+0x294/0x2720 [ 433.161013][ C1] ? ip_route_output_key_hash+0xd8/0x2a0 [ 433.166652][ C1] ? ip_route_output_key_hash+0xd8/0x2a0 [ 433.172290][ C1] ip_route_output_key_hash+0x18d/0x2a0 [ 433.177837][ C1] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 433.183911][ C1] ? icmp_route_lookup+0x370/0xb50 [ 433.189016][ C1] icmp_route_lookup+0x50a/0xb50 [ 433.193956][ C1] ? __pfx_icmp_route_lookup+0x10/0x10 [ 433.199409][ C1] ? __asan_memset+0x22/0x50 [ 433.204009][ C1] ? __icmp_send+0xa49/0x1710 [ 433.208678][ C1] ? lock_acquire+0x106/0x350 [ 433.213349][ C1] ? __icmp_send+0xa49/0x1710 [ 433.218015][ C1] ? __pfx___ip_options_echo+0x10/0x10 [ 433.223480][ C1] __icmp_send+0x1010/0x1710 [ 433.228068][ C1] ? __icmp_send+0x230/0x1710 [ 433.232747][ C1] ? __pfx___icmp_send+0x10/0x10 [ 433.237684][ C1] ? __lock_acquire+0x683/0x2cd0 [ 433.242620][ C1] ? __lock_acquire+0x683/0x2cd0 [ 433.247562][ C1] ipv4_link_failure+0x64d/0xa50 [ 433.252511][ C1] ? __pfx_ipv4_link_failure+0x10/0x10 [ 433.257981][ C1] ? __pfx_ipv4_link_failure+0x10/0x10 [ 433.263443][ C1] arp_error_report+0x118/0x160 [ 433.268296][ C1] neigh_invalidate+0x243/0x470 [ 433.273148][ C1] neigh_timer_handler+0xc01/0x12b0 [ 433.278345][ C1] call_timer_fn+0x192/0x5e0 [ 433.282939][ C1] ? __pfx_neigh_timer_handler+0x10/0x10 [ 433.288562][ C1] ? call_timer_fn+0xd4/0x5e0 [ 433.293235][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 433.298348][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 433.303631][ C1] ? __pfx_neigh_timer_handler+0x10/0x10 [ 433.309524][ C1] __run_timer_base+0x652/0x8b0 [ 433.314375][ C1] ? ktime_get+0x45/0x220 [ 433.318710][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 433.324091][ C1] ? ktime_get+0x1f5/0x220 [ 433.328541][ C1] ? lapic_next_event+0x11/0x20 [ 433.333412][ C1] run_timer_softirq+0xb7/0x170 [ 433.338265][ C1] handle_softirqs+0x225/0x840 [ 433.343049][ C1] ? __irq_exit_rcu+0xca/0x220 [ 433.347828][ C1] __irq_exit_rcu+0xca/0x220 [ 433.352423][ C1] irq_exit_rcu+0x9/0x30 [ 433.356669][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 433.362305][ C1] [ 433.365230][ C1] [ 433.368154][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 433.374142][ C1] RIP: 0010:finish_task_switch+0x41a/0xbc0 [ 433.379990][ C1] Code: 03 00 00 41 c7 84 24 e0 0d 00 00 00 00 00 00 0f 1f 44 00 00 49 83 c4 48 4c 89 e7 e8 f0 c5 13 0a e8 6b dd 38 00 fb 4c 8b 65 c8 <49> 8d bc 24 c8 16 00 00 48 89 f8 48 c1 e8 03 42 0f b6 04 30 84 c0 [ 433.399604][ C1] RSP: 0018:ffffc90000087940 EFLAGS: 00000202 [ 433.405678][ C1] RAX: 000000000000313b RBX: ffff8880b873be60 RCX: 0000000080000001 [ 433.413653][ C1] RDX: 0000000000000006 RSI: ffffffff8dfad1b9 RDI: ffffffff8c2886a0 [ 433.421623][ C1] RBP: ffffc90000087990 R08: ffffffff902fd2f7 R09: 1ffffffff205fa5e [ 433.429597][ C1] R10: dffffc0000000000 R11: fffffbfff205fa5f R12: ffff88801d699f00 [ 433.437571][ C1] R13: ffff8880b873be28 R14: dffffc0000000000 R15: 1ffff110170e77cc [ 433.445559][ C1] __schedule+0x1848/0x57a0 [ 433.450076][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 433.455462][ C1] ? __pfx___schedule+0x10/0x10 [ 433.460319][ C1] ? __mutex_lock+0x30f/0x1590 [ 433.465089][ C1] preempt_schedule_irq+0x4d/0xa0 [ 433.470128][ C1] irqentry_exit+0x14f/0x8e0 [ 433.474726][ C1] asm_sysvec_reschedule_ipi+0x1a/0x20 [ 433.480188][ C1] RIP: 0010:__sanitizer_cov_trace_pc+0x30/0x70 [ 433.486353][ C1] Code: 04 24 65 48 8b 0d c8 af 72 11 65 8b 15 e9 af 72 11 81 e2 00 01 ff 00 74 11 81 fa 00 01 00 00 75 35 83 b9 ec 16 00 00 00 74 2c <8b> 91 c8 16 00 00 83 fa 02 75 21 48 8b 91 d0 16 00 00 48 8b 32 48 [ 433.505964][ C1] RSP: 0018:ffffc90000087cd0 EFLAGS: 00000246 [ 433.512043][ C1] RAX: ffffffff818e9d2d RBX: 1ffff11006b25f00 RCX: ffff88801d699f00 [ 433.520013][ C1] RDX: 0000000000000000 RSI: ffffffff8c288680 RDI: ffff88807a975890 [ 433.527985][ C1] RBP: ffff88803592f808 R08: ffffffff902fd2f7 R09: 1ffffffff205fa5e [ 433.535953][ C1] R10: dffffc0000000000 R11: fffffbfff205fa5f R12: 1ffff1100f52eb01 [ 433.543923][ C1] R13: ffff88807a975890 R14: ffff88803592f800 R15: dffffc0000000000 [ 433.551942][ C1] ? pwq_release_workfn+0x1ed/0x880 [ 433.557150][ C1] pwq_release_workfn+0x1ed/0x880 [ 433.562184][ C1] kthread_worker_fn+0x4eb/0xb20 [ 433.567130][ C1] ? kthread_worker_fn+0xdf/0xb20 [ 433.572154][ C1] ? __pfx_pwq_release_workfn+0x10/0x10 [ 433.577714][ C1] kthread+0x389/0x470 [ 433.581782][ C1] ? __pfx_kthread_worker_fn+0x10/0x10 [ 433.587237][ C1] ? __pfx_kthread+0x10/0x10 [ 433.591827][ C1] ret_from_fork+0x514/0xb70 [ 433.596417][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 433.601523][ C1] ? __switch_to+0xc89/0x1420 [ 433.606200][ C1] ? __pfx_kthread+0x10/0x10 [ 433.610791][ C1] ret_from_fork_asm+0x1a/0x30 [ 433.615610][ C1] [ 433.618901][ C1] Kernel Offset: disabled [ 433.623218][ C1] Rebooting in 86400 seconds..