last executing test programs: 5.929740298s ago: executing program 1 (id=5524): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYRES64=r0], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000000340)=@newtaction={0x44c, 0x30, 0x12f, 0x0, 0x0, {}, [{0x438, 0x1, [@m_police={0x434, 0x1, 0x0, 0x0, {{0xb}, {0x408, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff7, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x2168, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc9b8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc]}], []]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x44c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000240)={0x60, 0x2, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0, 0x0, 0xa3}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0xf8a9}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x60}}, 0x0) ioctl$NILFS_IOCTL_RESIZE(r1, 0x40086e8b, &(0x7f00000007c0)=0x8) socket$netlink(0x10, 0x3, 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="1e000000", @ANYRES16=r3, @ANYBLOB="010025bd7000fcdbdf2501"], 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x800) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x670, 0xd0, 0xd0, 0x428, 0xd0, 0xd0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x5}}}, {{@ipv6={@mcast1, @local, [], [], 'macvtap0\x00', 'ip6tnl0\x00', {}, {}, 0x11, 0x0, 0x0, 0x73}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@unspec=@connmark={{0x78}}, @common=@inet=@socket1={{0x28, 'socket\x00', 0x2}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffb}}, {{@uncond, 0x0, 0x120, 0x148, 0x0, {}, [@common=@frag={{0x30}}, @common=@hbh={{0x48}}]}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0x138, 0x178, 0x0, {}, [@common=@dst={{0x48}}, @common=@dst={{0x48}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6d0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000060a080400001700000000000200000009000200731680b63a6b47797a32000000000900010073797a30000000001400048010000180070001006374000004000280140000001100010000000000000043dac6b3ffb39a730f48af1c6e69a5238ddd39066d647ec06649f0e3a9cbcb67b2f309b72aaff1ed660f7d39423885b54f1c8f08e38090ec6bc41e75647770887a6d9447"], 0x68}, 0x1, 0x0, 0x0, 0x20040000}, 0x20040004) 5.796044826s ago: executing program 1 (id=5525): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = socket$unix(0x1, 0x2, 0x0) bind$unix(r1, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmsg$unix(r1, &(0x7f00000000c0)={&(0x7f0000000200)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x303de1f53b11ae}, 0x20008840) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x1d, &(0x7f0000000080)=0x7, 0x4) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000040)=0x44f3, 0x4) recvmmsg(r1, &(0x7f0000000c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/57, 0x39}, 0x8}], 0x400018c, 0x1000400000de, 0x0) ioctl$XFS_IOC_START_COMMIT(r1, 0x80585882, &(0x7f00000002c0)={0xffffffffffffffff}) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000040)={0x8, 0x3, 0xe, 0x9, 0x3, 0x1, 0xe, 0x8, 0x18, 0x4, 0x7f, 0x3, 0x3e}, 0xe) close(0x3) openat$cgroup_ro(r2, &(0x7f0000000340)='memory.swap.events\x00', 0x0, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f00000001c0)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'vlan1\x00', 0x0}) sendto$packet(r4, &(0x7f0000000180)="0b032200e0ff25000200475400f6a13bb1000000080088484803", 0x1a, 0x0, &(0x7f0000000000)={0x11, 0x17, r5}, 0x14) 4.735892384s ago: executing program 3 (id=5535): r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f00000002c0)={0x2, 0x4e20, @empty}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c000000100039040000000000000000000003e4", @ANYRES32, @ANYBLOB="00000000000000001400128009000100626f6e64000000000c000280050001"], 0x3c}}, 0x0) sendmmsg$inet(r0, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000140), r0) 4.371178811s ago: executing program 3 (id=5537): unshare(0x62000000) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) (async) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x890c, &(0x7f0000000080)={0x0, {0x2, 0x8}, {0x2, 0x3ffd, @remote}, {0x2, 0x0, @empty}, 0xab852ebbeefbd729, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000010, 0x0, 0xfffd}) (async) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0x101, 0x0, 0xf, 0x0, 0x0}) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="12aaf1e75c40000004000000020000000051c1c92ad10d3c"], 0x50) (async) sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xd1}, 0x50) (async, rerun: 32) r1 = socket$alg(0x26, 0x5, 0x0) (rerun: 32) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="2c385a7af3", 0x5) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r3) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40000c0) sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c00018006000100000000000800034000000001140000001100010000000000000000000100000a"], 0x70}, 0x1, 0x0, 0x0, 0x24000800}, 0x40) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) r5 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) (async) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r7, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r8, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x8044) 4.106482401s ago: executing program 4 (id=5539): r0 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r0, 0x300, 0x70bd25, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000001}, 0x80) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ORIGINATORS(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r2, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x20044400) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), r1) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000300)=0x0, &(0x7f0000000340)=0x4) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000400)={'syztnl1\x00', &(0x7f0000000380)={'ip6gre0\x00', 0x0, 0x2d, 0x3, 0x0, 0x1, 0x40, @loopback, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, 0x8, 0x8010, 0x7ff, 0x2}}) sendmsg$MPTCP_PM_CMD_GET_ADDR(r1, &(0x7f0000000580)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000440)={0xe0, r3, 0x4, 0x70bd2d, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x38, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010100}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xe}}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x48, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xff}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x4}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r5}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x15}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x7}]}, 0xe0}, 0x1, 0x0, 0x0, 0x4004840}, 0x20008080) r6 = socket(0x26, 0x4, 0x40) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r6, 0x84, 0x10, &(0x7f00000005c0)=@sack_info={0x0, 0x7fffffff, 0x4}, &(0x7f0000000600)=0xc) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000680)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_WPAN_PHY(r7, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x34, 0x0, 0xe12b6b1cbc8700b9, 0x70bd26, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0xc0}, 0x4) setsockopt$inet_mreqsrc(r6, 0x0, 0x28, &(0x7f0000000780)={@dev={0xac, 0x14, 0x14, 0x44}, @remote, @local}, 0xc) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x30, 0x2, 0x6, 0x101, 0x0, 0x0, {0x2}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x44040}, 0x80) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f0000000900)={'wpan4\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_KEY(r7, &(0x7f0000000a00)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x4400002c}, 0xc, &(0x7f00000009c0)={&(0x7f0000000940)={0x64, r0, 0x100, 0x70bd27, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r8}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa0}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xfffe}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r8}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r10}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r8}]}, 0x64}, 0x1, 0x0, 0x0, 0x80f1}, 0x805) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000a80), r7) sendmsg$NET_DM_CMD_STOP(r11, &(0x7f0000000b40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x14, r12, 0x1, 0x70bd28, 0x25dfdbfc, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8004}, 0x20000080) r13 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000dc0)=@o_path={&(0x7f0000000d80)='./file0\x00', 0x0, 0x8, r6}, 0x18) r14 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000ec0)={0x30, 0x5, &(0x7f0000000b80)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xa483}, [@map_idx={0x18, 0x0, 0x5, 0x0, 0x3}]}, &(0x7f0000000bc0)='GPL\x00', 0x6, 0xc4, &(0x7f0000000c00)=""/196, 0x41000, 0x0, '\x00', r5, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000d00)={0x4, 0x2}, 0x8, 0x10, &(0x7f0000000d40)={0x2, 0x9, 0x5a8, 0xf228}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000000e00)=[r13, r1], &(0x7f0000000e40)=[{0x1, 0x2, 0x3, 0x4}, {0x5, 0x5, 0x8, 0xa}, {0x0, 0x5, 0x6, 0xc}, {0x4, 0x4, 0x5, 0x7}, {0x5, 0x1, 0xa, 0x2}, {0x4, 0x1, 0xf, 0x8}], 0x10, 0x6}, 0x94) ioctl$XFS_IOC_COMMIT_RANGE(r6, 0x40585883, &(0x7f0000000f80)={r9, 0x0, 0xd, 0x2, 0x5, 0xf, [0x401, 0x2, 0x7, 0x9501, 0xf3, 0xffffffffffff97fa]}) write$cgroup_subtree(r1, &(0x7f0000001000)={[{0x2d, 'cpu'}, {0x2b, 'rdma'}, {0x2d, 'memory'}]}, 0x13) ioctl$SIOCGETNODEID(r6, 0x89e1, &(0x7f0000001040)={0x4}) ioctl$EXT4_IOC_GROUP_ADD(r14, 0x40286608, &(0x7f0000001080)={0xfffffff2, 0x42c, 0x7, 0x78a0fdc5, 0x5, 0x5}) setsockopt$SO_J1939_FILTER(r6, 0x6b, 0x1, &(0x7f00000010c0)=[{0x1, 0x2, {0x3, 0x1, 0x3}, {0x2, 0x1}, 0x1, 0xff}, {0x3, 0x3, {0x2, 0xff, 0x1}, {0x1, 0x1, 0x4}}], 0x40) ioctl$sock_TIOCOUTQ(r9, 0x5411, &(0x7f0000001100)) 3.827448844s ago: executing program 4 (id=5541): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x84, @broadcast, 0x4e21, 0x3, 'rr\x00', 0x1, 0x10000004, 0x8}, 0x2c) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000001c0)={'veth1_to_team\x00', &(0x7f0000002fc0)=@ethtool_wolinfo={0x3, 0x8, 0x4, "050000009582"}}) ioctl$sock_bt_hci(r1, 0x800448d7, &(0x7f0000000180)="06f2383120d07250e2bcb27ffe6c515f3b8ad273e0816ad73dcb23a931023f5bedcc4c171dbcd67c6439861d24e6c5c9afe5f3dcd8e46ec78c5cff2732bce40287e75290ab6416d38cd2fd9a52eae11d35d23bf2d99b7880d98e27b1282025dc05e4857a3b3cd32cf699c66b593050184db677f237b4004344a80b03ac60b8f10033633db87176bac38ce31391d9e9e6b8ccf2887740754a557e54737ff9138d04d35c68148aebd751243d9dd6f6797300c0f84135cab61005dcea7fd1eb8e6a9e589120238c3ffe93852593ebffe12c4f77770f1809f6fc2a01d44e9edb7b1c2a4ed86676") (async) ioctl$sock_bt_hci(r1, 0x800448d7, &(0x7f0000000180)="06f2383120d07250e2bcb27ffe6c515f3b8ad273e0816ad73dcb23a931023f5bedcc4c171dbcd67c6439861d24e6c5c9afe5f3dcd8e46ec78c5cff2732bce40287e75290ab6416d38cd2fd9a52eae11d35d23bf2d99b7880d98e27b1282025dc05e4857a3b3cd32cf699c66b593050184db677f237b4004344a80b03ac60b8f10033633db87176bac38ce31391d9e9e6b8ccf2887740754a557e54737ff9138d04d35c68148aebd751243d9dd6f6797300c0f84135cab61005dcea7fd1eb8e6a9e589120238c3ffe93852593ebffe12c4f77770f1809f6fc2a01d44e9edb7b1c2a4ed86676") r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000001340)=0x0) r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r6) (async) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r6) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f00000003c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r8], 0x1c}}, 0x4008054) sendmmsg$nfc_llcp(r1, &(0x7f0000004140)=[{&(0x7f0000000280)={0x27, 0x0, 0x0, 0x7, 0xb, 0x9, "97631c27538f7d8616db3aa1e71e6268909c71df4e48df671a7ce6ec11dd168415395bd62fd33a634e0793f1fd414590c20dd015796e693e589f2444e23b65", 0x25}, 0x60, &(0x7f0000000340)=[{&(0x7f0000000300)="4685", 0x2}], 0x1, 0x0, 0x0, 0x2004c100}, {&(0x7f0000000900)={0x27, 0x0, 0x0, 0x2, 0xfe, 0x2, "c6e63db0733de5e5b3327d25fae1b47561a788d59cdfe773d0d16d127e42195e6fc3a8be8eb7f86d349b99952da7b45aca9d1e30bf78daacbf0ab312c70407", 0x12}, 0x60, &(0x7f0000000ac0)=[{&(0x7f0000000980)="ccc9e9710c042b25cf18b202d84e2bbbbc3c222bd807741a8711a8b1742fb6f43cdb578bc97727d56f6dfbe3e6919093837bd64bf6e5398a2d87bea9b534d6f71ef809c5d88a93306b9ca7a63e9fd7857e28b2670f749616fde9dcedf0a0ec03cc84213d4fd4c8a5a1ad20063bdadcf993faa01d279c0a4fb366bcf87a218eb3370327cb30ab1915cab1f480c14a5676fae86dfa68cb917ccf5e341291e8d822a07e8f7d3d5c629b6d6eb449d0d8138d5fd289cd9b4f67d28a91c2c7b7348071f1936e9dad41a03940e72c39785a15f6d49c3b2fbab5cf9774bc1a7b9c6b84b44ed5fdb6dc9252741df26989185dcbbeaeae19a3", 0xf4}, {&(0x7f0000000a80)="d881746906cb27533960944a102312469b30d1cdf1f10a0e1a52c7f1061cebb83bb8e8134dc657dba618ee0bf7d4d732efc5ac6ac794c765bb4b590075bd", 0x3e}], 0x2, &(0x7f0000000b00)=ANY=[@ANYBLOB="b8000000000000002900000001000000740565fc4516332b0a49a424b660be187f87600119c14ae7b5d366d6ed14be01d8afda8431af965515a7bbdbf30db9721d49f9f55d3a0eeca8ef5d6b9e6260ac0c060ca5024b6786287ce9cdbaee6ad5da7f64681a8210f6f8f4d0222db2491f94d79c1a631d1bfbec71f3a9aa5934b556a4cc6b27d12f56c9a5a6572541cb115c226fab9e5dfb4fa3e215d3207c95708b3a3cf675f31fc1572d86c561f2eeb6bee1cf6ab1e59b3c"], 0xb8, 0x4000}, {&(0x7f0000000c00)={0x27, 0x0, 0x0, 0x6, 0x8, 0x9, "17ebebc38fb46f79dcb9caa0af89b9805f4499f50587b1b3b6638e2b5df948045cc16e191516f61fa57db65924ed6f49349a9e7ccd563fcb8c33d5d34ae26e", 0x20}, 0x60, &(0x7f0000001140)=[{&(0x7f0000000c80)="86d132734cc004fe22932a36ead9df24f50c425748c9445daf18ce65443b9571cf65cb35f2d3400ef1ef1939aba3f24096d38a09103c5d53e0ecb2f730ae651294d3b629b63497cb56a05664b12e096eb3174cfa09ec8c5ef7752f7a72042b6d710dd4f13591a382a0ea1fe2e838f92cbf5f051af3c9c470c90b23a360a0375352c126e7a083a183fdc04a5fe81e89724c391019aecd0f155d9647777221e240af1e274abf96d96aa45a63ff346c4909ba07", 0xb2}, {&(0x7f0000000d40)="0197a22a82c2e0c428c961d09013ad1c7ca62ce2bf5fcae3292eac513f5cca0455ece4f9e7cb023d8e4508d7ab1dc6836161287f1cc72eba4b6ae45638ce8df33a7088d3ff11186763ded2cf05a518d45fa31c14ebb871504c103cee3eb945c11217dfa53a82352ebeb01214bbb8ad1fdc90aa18fb72cfda027914e9fdc96257c66db49f9765c2adb108ee85ac06b51459e1810941aacb77b80e662c551d9edf8a9b6eb96b5e573d61098d9f62aea20fb1a76852042fa198bbfe21cbac1cc1a0b3ef0f20024bcbeeef459e2e", 0xcc}, {&(0x7f0000000e40)="436fb3922bb776f87edf049f6ed4d11de09453c4b1af0a69f4c0baa4d56a550b051fc0b8bfb6cafdce17ed4e67814d7e13653c318fe526745c56dbf4a7170211ddaf176bc2a618336cfe65bfd6c4b0d50549026b8ed4ae1589c4f9985e36da98f04190e3aee1dcae881ba3f7c16d21e2c7da775cb9f68398285b33e714cd3d18f015f202b745268c9f28f92e", 0x8c}, {&(0x7f0000000f00)="a963eb4b8edfa49f27ea2d06dbdd9ec873c62157b1d5aac234e9e4213e3d71b400b17c9effc32e1269ef80802f6d0dea38ab8b600c306ceea48d39e4dec1d08f744e21537a73898bdbf0fa6b94385ec96a5fe388bd02e3a148311c86fe9ae2b9f66c540e5780216973dc2d2cce8696e10e95e0c2e0fe3a3bf66ee02fdb72b914d7c9a0c3947eddafa6a6e3f2987325fe88527760aa640814bb97fd2f6dbc22645ff7927eb72eee303d02fa845f5b3c72830fb7e7dc1cafc70fad56829b54ad32f6daa120e076e54a78d3a352b880fdac5058a7cdff2bd8339734133746d26e4f8866ff56ed79f6594e", 0xe9}, {&(0x7f0000001000)="5315e9b8e079a0451bb71cf6b7047164edefd6080a1987b71d857a26ebb56889cabf11fe062509172d4e3f6e835118da571a3a68ccc8b3065098a0ad00c22eecf9ea5a37386113a41d1c8b5cccb45a64d6673c9ade731c13330b41", 0x5b}, {&(0x7f0000001080)="6b0cb3e467e963", 0x7}, {&(0x7f00000010c0)="68662cfadc27003759d3f1a48b7d77c32df78419d007e12e9ab95290d8d2fdfe2753f2f14476554115cb50f839d40395617763fde9a777ceb588786e28", 0x3d}, {&(0x7f0000001100)="ccd629a8265fb44a1fee91c3dd12ede61a15c35f511da18bcfd06ac473109ffad0bc", 0x22}], 0x8, 0x0, 0x0, 0x4}, {&(0x7f00000011c0)={0x27, 0x0, 0x1, 0x0, 0x3a, 0x5, "e5ac6b7eaf36412757eeb70cb0277a55a826b816a344f32865bebac3d46367cc45b5d2d501de91520de0660c05f2e7e5b931f27ac49dad92ea1b28608f6fe7", 0x23}, 0x60, &(0x7f0000001300)=[{&(0x7f0000001240)="388df4d3590e5896b432754f351c6626ae670b3dff12d9705e149f248528e74279a4a4548bf3661eca7932ce247e019a0a04ce104c4e1f801c0c0654e40a2edc15f89b656bacd42898d8bab802b429206b0c6e53425471fcc155665ce0c5f685af23b589a4c4350fc6ce66088a228c56908618edbd4a8524955661049821ca48827db8fb23c09babe8fdb60c916ea49f25b1896030c71ff67bf125d16cf625cea2e6ed8693f4f9dec5431a5de9962ece67", 0xb1}], 0x1, 0x0, 0x0, 0x804}, {&(0x7f0000001380)={0x27, r4, 0x0, 0x2, 0x3, 0x0, "2d92ee84c8ed3ea8907cbbba37e9c287da12685f0e1580353cd3a95e3bc03fab1d28a17e3594880b7e9183a7dd7d395965460faa8cc31fa177b93c9820ecb6", 0x23}, 0x60, &(0x7f0000001500)=[{&(0x7f0000001400)="acaf6e12ab83a3449f1d848c07cc591c02d43556664dcf5b7b89a5fde485f64f60682d1eb225c03985ba7b31a1220ac643a6b555f98f194db232103b2acdecebbe93fcc0d8691b0852bb10f62e3f3a", 0x4f}, {&(0x7f0000001480)="c1af87ed8bc1503e2c9958241b742143799a84c9a26d168713729c3e58784262332ec5474a6de36a47c2383b9af3df265b96895a56294003056165e356dfd8e425ae37f5f8dbd16ef239f66a5f48aa68ed5beb606b93e6140f7ab0562ddef3889712e2f79a44959d7bf63e3a298dfd5a1e764a367155fe7eec319d", 0x7b}], 0x2, &(0x7f0000001540)={0x80, 0x0, 0x80000000, "5879fd5ffb79c8a6ec179cd7d7bf5cec77c28b41ab22332660117be9549eb429dd5b3b8e9f00ec326c722cf6060b5d65095e99da243692699f05254740f232089fb5675bc90306245dcc0c4eccb073d1f0ae1c12eb22ba7686b467583588bbd6e257508a160442b98ec557a3b8"}, 0x80, 0x20000000}, {&(0x7f00000015c0)={0x27, r4, 0x0, 0x1, 0x0, 0x7, "1a5df6ef703802cbe9baefc9244884057a6ae2e7d467fe260a2ad0ea0580f0270bec3de5b3eb97560bf569a2bff1363eef8c89feece25e85c639e0c43554f0", 0x1f}, 0x60, &(0x7f0000000600)=[{&(0x7f0000001640)="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", 0x1000}, {&(0x7f0000002640)="f05dc8fec7fa14bd7eaa1c1ada31236e2e6b4157137215d1d09e6d5534807376929f41c7405b778937df187eebdda2fecf41a1be8fc1060fa6ba673d745047caba1c0e74550e18e0207f711cb58f6a839d14f193794a876758076a74f46def96a292c3b97d7dbb4549a0d57f4721763bd6bc7ccab5186491f11cf669837cae1d6ee13da9cfb733ae1dfe04802ba899ae6a6fbd49e3a97413dc0158a211c522f2e0f8a1c5f42b59eb2ce7bf6f331b54d4f9ed462c13d4cb4ce41bc8507e4edd67b7fea9488ae521", 0xc7}, {&(0x7f0000002740)="302901cb045f32fc1d7bb4e2508af6e3e4707d729f23480234d6e957dd487613be3800d9e4d7603ff7feb96d46b5b42eb2674427f58507cb1d80606c32e4f4c2d78e692d89", 0x45}, {&(0x7f00000027c0)="68c96e96c9f20ac8185372534bcc79712aaa90ba6827fe0b1aaea7d0a3ca58f9e2e32498576162138a79557a6aafabc0411c40ad24", 0x35}, {&(0x7f0000000780)="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", 0x14c}, {&(0x7f00000028c0)="a21542b5e64789441dd67aa6f50f5273ba87d3516a6282fc467edc9e5bb789bad05e9db7d67f1a01e10be896c434c87f22717251ab4bb9228778be", 0x3b}, {&(0x7f0000002900)="913e2c5f1b8b3741fabaa6c696138b05e1acd39a09f2330526b4be180b2f97483f53a598bbf16b1ed45a7a7e281e247843589a6cbbc317b013c07f2d9427b1d3d2ec62ca3f78a2012afda3f1b0838537372932398b151a3e1506c6ab8f3150a837b8499dc0efc788cdc5e7ad6fcb20572cb421164f39e6bbc644e4fdaac4b5d614d1936f10c3c07ed7aa62cabb04376f9c6d9a10c67682f7efab3c96232498d28eb06d10754280c63685a5de3c", 0xad}, {&(0x7f0000003000)="8a557ccc403eaf462206a36bda1dee0e46de8fcd32cf18a80f6e413d7fa12b8e535bdc680a6e0fd17371038c0a96faca093fbae69aa81cb7479ec496fd2b7bc26e886319e982d8999d5f320a0db39a2467c59d9d2554a135429d06f7f6311685f593720248726880b80d79dfc76ff8636521a3d1547639e8b95567265d33241d500b7125f828245012963208e755a84e8f78c063db528c09badbd9d29fe7727d4c44170d5bf9e1ca003617529981275090310c155d246d7ba128904001099b0054f8f966de6e13743a7154071c201e1b299aa7eb1942cefd1ed9feda8b0f6836f887fc99fc411e1fb5732665dc7ca9c15f0eb854b37b53a8a51c4f9045cd8d0f7a6de19ad1ef688b46a68020b7c9c36be02c4fa89a1be374b902fbd8b62e95abb022760906484dbca16534d885589b0666aba4d52fbb141a388b4c06aea14eeeba4f00e402d0ee8566bd579bbcac47ef0190f9ea958187e137870ea75e6d8f09f6eb14c341ba880e1edd0be30092a479c198a9b5b82fb9f2c4d6e4f485bc7f4ad620a87723bed9bce5ffd444c4b9eaaed7216a0edccfa73e52f3a21a9fac8a70ceb1ea33b4869d462c4154974a019404bc79a33298923bdb84a7fdad65248608fc63cc1607912993305f419c6f9852db53f990b457498ce7cfb4ef7d2640986274c30763af30f2e1be9e0792013de33b225b513c129f43491c5965d6e861b4e1eb92484469cdb969af6bc7dfc19676c4c7c30ba189997735502e53f0ebd720f01f02439fe180d7a9b89e00a59c6b04a97c439286cdc6c72466032fefdcbcc7387300bb6a4cb2b304c674216f2b4774dc9e276076268297240b0c9b94ee9079d2447d5d3a2944c7aae7daf3e8c54d7bd6e886b846925a63977c601b8b852c21f8d59e00b323c8002c63c762ee8a8087888a910643203f75215aaa96d16f407b58363a3a5490b568449d84feafce39d0f1356b4f0f8856bce0e432394ac861868a982e7ceca40113f3e9fe86c41d5e87ec29a035208d417ae2e997859fcf94b5a3e7c41e89dc7b9a9f7e01bdd7d2ce8f28db3427e2b53c3aadbd9770a77a73ba30803968ac35f469437f33abfe570fb24413f7a7a568d6485b923fabc8e95c96cabdc029e90f9d0eb1a7a5356f100af2498ac7ed5ce1b07ef583b7788bb505a1fd3179dd8ec7ece67c988d690b6c867e27462c556fe5a05b58201605673cb856ee4a80c232658e0eddca8b2c525db2fc5aff9325f7560db881ade2b3a9165af82bf85e90bf8fe01605fdb138a0e4213287a379732f6f37e339b8afce1190d96f42d88a7508140ec5dcdeb145527eb72f7ce92f25d0d51896a0ccab2c5d1c5e43c7dd492e90ca1064dbbdef163adc6dda472241e4351b5df3d7c9cef30c819ca95e0cd21858df66fd5fe2bddb4a58b9428dc451d3fb5884b9ec92201c5c835d3f5ddac568db69538266ef112fbba80f7877aa246b003f70d0eeeb7ce11122de17afa8e00daf36926a79bad3dc1b603c38e9c34d7581339c84dd6696225cb0a96d660d922a9c8dd4913d938a4979c89941c45882b5f02e0b3502d6fd64516d206869b98e70be3c9f090ac3e7f5c6fdb37d1db155214ccbdcc45e0c1d7c182a7ea21c5c433207782db6711fad8850151b04746f8ae55d8656057d082da0145dac59a5885fe3c0e2223ba9aed91ffa5904b50d6a38009b8bab33d0e87a4533e3f88a74fa466a4e149dc27e7bbf93f2aa98342c4e9690c1ea2ea8e03bd97b9b66fe66afe523f507fe1c8a569f2cbc7e8d092533ef121639975588570a798f4b8ad31178c8ffa663b1c1c8577191cfeb96544f74c929d5f13225336699285bf71c2f9a10a626100f015264baed7241fe6faaca414fdd019af0b07553114073abaf16df1faee2d751fdcd3b02df236ef42a3fd2489b3474e0d8c7814fd40432c3ed83c9c1fdc02feae5974eb43681fcbc611f657b616134d99585fa9b4a6fb0de23937e3bdedb3e31e9d98e6b03418d8c221cc82de4499f14b7f6223a2897383d55b71835ed4d19ac496cd39d0b72380c9adbd3a0d1decec8603e7a5cc0b3405cb3aff2ff8d2c6b652a9989fe5c15cca3e6e05289071f3ec05bcd1f6f612e69a94da2c32c8ade551fa20133a69174795fbc99860a285953643fe15642066e3e4d57fc4bfebd641b2a485d31670950cb0d02ba50fba8edd07b7c486195029eeeec49d91b2cbef7baa0029601f156af633865f776bc528a5c2c6df42a2e88e07ec39b1808d7136835e001ed105811ed8acb64f2a3a47181de30d6b7b9ce22fc7ff152699dac0e0410de335b2e706003c0dad265fa73e568c16f5bb5863a3117921f9a79ce0d5c6f106b6bfffeb46f268b111b5b7d4188535d71cd6eb7f402259d3d368f83d6bf0fe52ce84933b6c5721101d7967b71b8a33d47b87f6ea99b6fc3a62d02458d2f429c0b6769483e43b5793e0f31cda454af793641eef8951cd82df72188fcaecc3a26b6ed123f3e1ce97e7fc5511732b76f3cdb76a77e3cd33288d60b153f0f6a0c1935877b8b041c256897510c0ab536bdffa7d67b2d19e14e83af068c2e4a42123ce4193ec6dd55969099847d056ac24eb9a5ceaa773dcad24bca36cba75ce048915a49f74bc95a455e0cccc04cf8e929a1cd358a451bd1a038159f766b6ba417e58ff19e0e2a5ff2e71645a1de66d6e3f5420366c1c899bbfbdc096c76a19af578c3c2bf6f73ac731502c965ba1eeb5d09001ce0530ff5e2d13a27fa7b2c2460a55a3e08709718701ac87d08d81f0a34efbef4699808bbf735ff84a0577831e78e22df0633a42b972b25c6927ea6ee631b3190620593adf4949cd18d6cac8093e06310d05afcd7aa655013eab5e0f86c4edead104d67d65527d336dd870580d11c86474a4589ae0c3f23b2dfb611ed39d47a7301d74bb75d811b47440c98e2a2232a415f7a892eaef2698f5816366a80d298b238ae270bbf40de3c48aa9048176e5ba7025108b143320763bcd6cfb633add13c9f3a51389892b50817be095c0554e92a67f14e6b9dae3bd0ef721459749361d8533411c84edf30ef61cd9d5e9184f7d905581878fcf361d38029c92bf722e5b7eceef8532b36b11bd23cce86213d0bee2d3864fd80ae362dcb9fecad02907b11f8d6939398626d321ab5e6241b12221923d9f90c7bd208647f143ce1f357e9d8654165bcbdb6c69e95a0da15fecf87318f1775b93805aff84ecff5ffdd05aed1c7c45d2275e89be097c074efde993627e1c712d9e856fe6ab14e3fa8bd18d405b6f3e0f972b26c26f76de55389443ce4bc3f1b01319b904d14e860475bd8651939f597615ca514f28c07e3719036c0abf177ca11893e0530537b61ff85f3e503263e243b3a1a3e1da2cb40dbd068344cc7a45776a030e3c112ccf5c75cac2a655880d29def4cb4c8ff3ab4269658ada09e3089a759e764aef5cb90eb173752a2504222ebc3c72a2d7bdd0911bd516cdd03b6493db137037267ca26f828ee739634480a0535954dad993743049392821a202336857aaea70e10818cca195e1689dbeb73b40758db75db20af3259b619a948d8edd8d2c0802c59b38c371fffeb68859f0c588b732caa737bf355a43844b6415edccd3d3e65a4b9b7cba8df9c8da0c0e9820a0fe7db9fc22a802736e0f8db395a1e78259779ffa49e5c496fbbd49eea50ed0f95ce6d1eb9c169f428bee8357336cd41c6adb9fea76dff50bf6fe4d0f8594e20385d74e3b759fb321c0b3a2f48b0ed307a5ecd1ed3b3b879b04adc3523135bb4f7bc7728ceabaf97ea87ee8adfe1af808f59db0cde36a434f92e0be54ec63b49e73724ac588514a85a73de55f459f3661dca2ae6034a943dbe8e8e0b1754eee2cf67401a3170272c4c1119da8782b3a7b370663d1fad90b797f56ad64e31eb8465aa9d09dcaddf1d4e11371be1f46370a8682c5c9fa44ba6553e6e0697402c190f83db5269283aad752bee18a1e99c8c06c2a1f8496028f6e61f4a3c8dd4f2752faa7080599fdbe6ba01b6b17ab9f5fedc184c5bb3ff0b747e20b95e1d9f17dc2feb360ea07fb45a18f7ed64b55f09261445c6bcedaec047fad78fb0fad1584229628d50be1c5ddde9f697c5970b32377737c82632f701b94bf111f12228a95fe3e784c48bb90742bded2f99753f158d5088098c112ef30a704fa0287f77430c26a34b6813c2a7356bbad9fc5d19d7c587ed677727ba85999b3f76049318942e815ce8ccb2432664a6f2da55b06ecb8f12b32953e7273884d97676715b5920a2f367396577d4d4271044950906d8d8456cc95893d46c99f754a1b4885d04df2737d295a73aa9b509f8c11b71bce17dde5012f5431d9020629ce9c12260abeed22254703a2f8c64bc89683a6a60c35a6c23d7b88002e56af545d18b919ded6efd56b88e277b6332642a97c901370a78e99caf1890c22cb6d35a045f7203c2b8959a41f03a37e103657f3e8ed10fd79e95808f07460889c53c7a779758ae1a15421e52d68a50b21e389944cd4b4c41a1cef75de62962e70376fe928c19e9634eaa5bbda7c24d7a231bc95984145e4cb80ab9dfa2f2d5131266a44f8ad256ac391023fbd01fd022eda1a5d66ebfb481490e8c4e7abb806bbdd7af8228fe690b23c24c89dbf7fe96bf220bc70156530bdab0fbcf73179b1c08ce551b2ae3d04221c07c9075b118e814f46a33f6a8e1516afdf261b999f2cee6749786cd33c6abc34d45912d27b444bc6c74b5c448a51353a242889190e7c044fcb1f43f889b4c48bf17c1e0942ee103b8077dec6d86015e176682152dccc70987a3989e61416324876c780281b8fdd92cff481c015c9f4ebf583b39399b60d8e985ca7b1ba5014cce3ff01061e6e370803e30281111a418f25a6bae89895b269d5852a2eaea631ed0ba2e6b87a816421c6eebf64279f38963f0227995710dc11df2580a7ee5b78fe26d4730600f32f0fb5d3c1422de89e3b047eb210216d2db3993b7c791e75de02df51013057587ae7ac4de1c9d3e7e99734b5515ec26f1a12f71abf081cd96170154463787da425174882f1888fca808a8ade4089c6b9d82b033e1378ac1757fec59da2e6cdc19328c6672dc7da2913bd5006ee4144eecc996e3eb2720a2c5b546097cee0964bbe7544046fe45617491b4886f54b501c8d8585abb054971652895eafc294fd781d10249bf0a5a42bf41759a62bb1f11d8607515c16b7cad4a717113c87669c6001c6252bf34dbdf006d6fa6f871124650d8b651c9c2c5ff80a26eaae99229edbbc051352154d9f4624cbb80d2be2eb35fea9d20cd5df904318924a4e05db0767473415c81291955844c0f71748d38ead46e6a73f494c33cf4cb02031d7572b5350a757d600213d3892cd88adc3975ed78feac0d51f705008d29f430f2186367490d6a89f6bf4ecd86a1d1e0f6390c9aeca9f6c313026e3436b82ba47e03d9bf593f2886a2a0ec0b0a840b3ad496afd79af0e20f8e714689c554875fdc66e2ab0d0ed45de4417a2b7d75b0167d9389256d893d706b2ace8882340e45fd216c9e16bc438b5064e69bdc631af7a3951b1dbef5688816f2d006050c8706c7896f64ce44d42bda09109000edb4f9a5585d2a0afccd569147d02728bf8531878da0f44a09df333d3748c65d9708f0bf165ef1f64363e9d383953d19e9b9338254762b8d8beae63ccfb99953f0e160de1af8104f5ef80cd89ccf1ba2528c0082d5741b5b54ac9b9b06a56854e6266db1a7ffcedbd363c8204aec77f159e706f663e18c3094", 0x1000}, {&(0x7f0000000380)}], 0x9, &(0x7f0000004080)=ANY=[@ANYBLOB="880000000000200000000000080000002967ffc29375a5063c680e181157483e8be80732d835e0f718e70017ff0000009b92d2df4e34884aec38791c4dda0b368515b5c02b2cafc422389fdd75c98cd34c3d80804e650f11437ec9f74d046ecc76e1116d88f32676912be1f24d9a8c0a20c6f024c2db265c1ac8bdf4251072345000000000000000"], 0x88, 0x4000000}], 0x6, 0x0) connect$pppl2tp(r2, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) (async) connect$pppl2tp(r2, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) bind$inet6(r3, &(0x7f0000000000)={0xa, 0xe22, 0x0, @rand_addr=' \x01\x00'}, 0x1c) syz_emit_ethernet(0x4c, &(0x7f00000000c0)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaa3486dd60910140001611fffe8000000700000000000000000000bbfe8000000000000000000000000000aa00000e2200169078929754c134439d5c1657b4f41970"], 0x0) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) shutdown(r9, 0x1) writev(r9, &(0x7f0000019880)=[{&(0x7f0000000400)="fb", 0x1}], 0x1) r10 = socket$kcm(0xa, 0x2, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$TIPC_CMD_SET_NETID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, 0x0, 0x4, 0x70bd28, 0x25dfdbfe, {{}, {}, {0x8, 0x2, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x8081}, 0x8040) (async) sendmsg$TIPC_CMD_SET_NETID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, 0x0, 0x4, 0x70bd28, 0x25dfdbfe, {{}, {}, {0x8, 0x2, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x8081}, 0x8040) r11 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) (async) r12 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r11, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000008000000000018000380140003801000018004000300080001"], 0x44}}, 0x4000000) (async) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r11, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000008000000000018000380140003801000018004000300080001"], 0x44}}, 0x4000000) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="4c00000030e7aebc19125e3d1455d7a844b9dd48f4853c8e69cca2639b3987a8adeef381041a0feee0c2f98c22f42ec6547f8e841cefa2664f8b03a1aa51b97c500ec404aad647e0f82cb1b1b740b47cd08911f98472", @ANYRES16=r12, @ANYBLOB="0700000000000000000005000000180003800800040000000000080002000900000004000100180001801400020073797a5f74756e000000200000000000080005"], 0x4c}, 0x1, 0x0, 0x0, 0x41}, 0x28040011) (async) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="4c00000030e7aebc19125e3d1455d7a844b9dd48f4853c8e69cca2639b3987a8adeef381041a0feee0c2f98c22f42ec6547f8e841cefa2664f8b03a1aa51b97c500ec404aad647e0f82cb1b1b740b47cd08911f98472", @ANYRES16=r12, @ANYBLOB="0700000000000000000005000000180003800800040000000000080002000900000004000100180001801400020073797a5f74756e000000200000000000080005"], 0x4c}, 0x1, 0x0, 0x0, 0x41}, 0x28040011) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000100)={{0x84, @multicast2, 0x4e21, 0x3, 'none\x00', 0x23, 0x81, 0x5}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x4e23, 0x4, 0x0, 0x12d61, 0x12d58}}, 0x44) sendmsg$sock(r10, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e24, 0x0, @dev, 0xfffffeec}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) (async) sendmsg$sock(r10, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e24, 0x0, @dev, 0xfffffeec}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 3.519990984s ago: executing program 0 (id=5543): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000081000000bfa30000000000000703000007feffff720a00fef8ffffff71a400fe0000000071108300000000001d300200000000004704000001ed030407000000c04100001d440000000000006b0a00fe0000000072030000000a0000e500f9ff000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fe51bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616276fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a26048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3"], 0x0}, 0x94) r0 = socket$kcm(0x21, 0x5, 0xa) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=[{0x18, 0x110, 0xc, "aa"}], 0x18}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x3, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000080000000000f6f21a4c518fe07806888ec6bb000001000000af5ee66b1e790000950000000000000056c083b723a26dcff813c9a353421ce249ea20a0a56900a62f6505519ed6122412c47770b4df4fad269efbf40d4d375f3777bf4430c266d1e484981fdcb37929f217"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) 3.387719467s ago: executing program 4 (id=5544): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0a000000010000004000000020"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000005c0)="799879b6a55c451c48d709f6d3f615", &(0x7f0000000040), 0x1003, r0}, 0x38) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x3c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000004c0)={r0, &(0x7f00000002c0), &(0x7f0000000400)=""/189}, 0x20) 3.274412849s ago: executing program 2 (id=5545): unshare(0x22020600) mmap(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x8fbc0e6f77c18ed3, 0x11, 0xffffffffffffffff, 0x1000) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0x0, 0x0, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f00000022c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={r0, 0x31, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4e, 0x0, 0x0, 0xfffffffffffffe9a, 0xa000, 0x0, 0x0, 0x0}}, 0x10) 3.258905576s ago: executing program 0 (id=5546): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0xa0380, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x8000) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xfffffff8, {0x0, 0x0, 0x0, r4, {0xb, 0xd}, {}, {0x8}}}, 0x24}}, 0x40004) recvmmsg(r5, &(0x7f0000000b40)=[{{0x0, 0x0, &(0x7f0000009f00)=[{&(0x7f0000000340)=""/162, 0xa2}, {&(0x7f0000000400)=""/70, 0x46}, {&(0x7f00000000c0)=""/52, 0x34}, {&(0x7f00000004c0)=""/194, 0xc2}, {&(0x7f00000005c0)=""/159, 0x9f}, {&(0x7f0000000680)=""/169, 0xa9}, {&(0x7f0000000080)=""/60, 0x3c}, {&(0x7f0000007ec0)=""/4103, 0x1007}, {&(0x7f0000001ac0)=""/4096, 0x1000}, {&(0x7f0000006d40)=""/211, 0xd3}, {&(0x7f0000008f00)=""/4096, 0x1000}], 0xb}, 0x3}, {{&(0x7f0000000740)=@l2={0x1f, 0x0, @none}, 0x80, &(0x7f0000000800)=[{&(0x7f00000007c0)=""/8, 0x8}], 0x1, &(0x7f0000000c00)=""/248, 0xf8}, 0x8}, {{&(0x7f0000000940)=@can, 0x80, &(0x7f0000000a80)=[{&(0x7f00000009c0)=""/137, 0x89}], 0x1, &(0x7f0000000ac0)=""/84, 0x54}, 0xce}], 0x3, 0x40010022, 0x0) 3.091500994s ago: executing program 4 (id=5547): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff}) connect$unix(r0, &(0x7f00000002c0)=@file={0x0, './file0\x00'}, 0x6e) socket(0x10, 0x3, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1}, 0x94) socket$inet6_mptcp(0xa, 0x1, 0x106) socket(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) socket$igmp(0x2, 0x3, 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x80000000000000a, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x3, 0x300) socket(0x10, 0x803, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xd, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xf2000000}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x8, 0x100}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x1, 0xb, 0x8, 0x9}, {0x4, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r2}, {}, {0x46, 0x0, 0x0, 0x76}}], {{}, {0x6, 0x0, 0x7, 0x8}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000006080)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000ac03000000000000850000003300000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r4}, &(0x7f0000000840), &(0x7f0000000880)=r5}, 0x20) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r5, r7, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x4a, &(0x7f0000000300)=ANY=[], 0x0) 3.091307856s ago: executing program 2 (id=5548): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x3, 0x4, &(0x7f0000002380)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xd}, [@call={0x85, 0x0, 0x0, 0x53}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10000000}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0f00000004000000080000000c"], 0x50) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x14, &(0x7f0000000540)=ANY=[@ANYBLOB="a229e1e2a833143eb61f64832cf259fd5e5d0ea9df72c3277be0c990d01b26949a9611d86145bb1fe1c51e8f7881f6d4c911379cdabb9775602bac711b159866ec5de20365b5616594d5afaf417171cfa520ef530bfcba1d2ac249b02962fd5c7c4b0135bd1291a80bf00f045c71d544b5f1b738bb4eef12c63bc3233648e2790527da14c34ccca66d6e8590a00cdb23df0e99ecdcfbafe08948fb1cfee5681b2bc786bb06d6cd55c68322fe577720b1688754d6c041a760a68d9cac34b14da7b44b7b79c7537a5360cf94d1735b4dc3d6343cb9dc13c8309eb02e21f8f5bac807b8428506", @ANYRESHEX=r0, @ANYRES16=r1, @ANYRES16=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp=0x4eea67ee1530eec4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x2f, 0xe, 0x0, &(0x7f0000000140)="9cb9f7d812b13ef44635943922e0", 0x0, 0xa5bc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.978041655s ago: executing program 2 (id=5549): bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x50) r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000011a40)={0x16a0, 0x43, 0x107, 0xffffdffe, 0x25dfdbfc, {0x2, 0x7c}, [@nested={0x4, 0x58}, @nested={0x1688, 0x1, 0x0, 0x1, [@nested={0x1684, 0x14c, 0x0, 0x1, [@nested={0x1680, 0x9a, 0x0, 0x1, [@nested={0x167b, 0xc4, 0x0, 0x1, [@generic="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", @nested={0xc7, 0x101, 0x0, 0x1, [@nested={0x4, 0x101}, @generic="fd474d3b1ea762bbd6dc98ff65d4d7f5e5be1ce5373d9985969d9ad88b54e0d810e1c84adcf1f4a8dbce90c11a4f25b3190fecb4f32ba3658da5bc1142d508ab3dd5e3377d56d6d192cc88c16ea2cf5c5f12e67d2d18dbc81dc0ce16b962dae3e2bd9ee441c20238d478d33bda02245aa79f918f5226ceca2c2556c4fd449e6708173093c25ef1d842b4b0db9b6b2830526b63b56019dd57573b5410f5e6268582e73f510c7488bc90bdaa99a19f6ccdd5c7c6e425b8629f33a79c090f49aa"]}, @nested={0x123, 0x90, 0x0, 0x1, [@generic="b3d31032ac48cbb2737ba90cdf5037554e3522016760e704988d0daf2fd0befb9de3d6b75d1ffc0103703b226778e25b178b98184507a4b1da41be8ddfa3ae5aa632dc17fbe7225d452728ef0ba8b9e98f06dda92ed75558a074accbede7660ff235cef4b12f29edfc0741c289b3950f672ebb84fee4bba24b1e2bcc02e7c68ee8085f080352b3b8e2886879346bb50d34c3b35cc8", @typed={0x8, 0x4, 0x0, 0x0, @ipv4=@multicast1}, @typed={0x8, 0x5, 0x0, 0x0, @u32=0x3}, @generic="5b8ce807189b09d08c411eca641bbedafda79cda64db4313125721c959bb00eb8af326f838dc4b7dd239fd4c113fc76d5128ee7655413505d91c5cc3c8a3513655ace80bbf71d37dd6b9ea388cb5bbbff72bb7cb5e89365d3f814843c344ca173706707f0145ba0fe58f1c569ad62e08386986b2b12e", @nested={0x4, 0xd9}]}, @typed={0xb, 0xf4, 0x0, 0x0, @str='flower\x00'}, @nested={0x3a9, 0x61, 0x0, 0x1, [@nested={0x2d0, 0x6e, 0x0, 0x1, [@typed={0xa4, 0xc, 0x0, 0x0, @binary="5d05964a6be6d766150c9a3cff468ef841545bf064c183d2c6b0911ff89e24c6f93d41e623ac1b318b213fdfef8029bdc2352b4c1c2cbbcf1f5f237044becbc2cda3d1210b09350652ac62ba48e6d0459f67a575598059cc0a92817f81457bb57905cc8c128f1febc761e41a26ba3bacf91bd920fcd8b29d6affc2c0ee0376a9eac7c8e2580e47c0b3ff005ba4ee738ff06945bc256e8c30cf37bd6f5b86c5b4"}, @nested={0x159, 0x119, 0x0, 0x1, [@generic="0087991d6b2cb544303569e413dac59458662576556e54b0661a85644a97a89626bbe4e963733705a71f4b359b05c68b48afdace6dc273ebff099c6a6c79a7bb0c13f3f34798e0725347b04d97cfc7cd82fd0cb6d54b56ad0914e1a80766abbea405306319f1dc3d18aa994dcf81ff150dfbcaecb4781b7932fbc72ea1e2daec4cc501cc79d87619d4da5ca144e9422417b7aaf26362a7ce69e1fcf73ba2c23eceb56253367b0595d4", @nested={0xa5, 0x145, 0x0, 0x1, [@nested={0x4, 0x1e}, @generic="9efa74ebfd6b1b19cca7f00f94aa7981bcaf808621a69e65d70b356c0005778f654d7845775b319e4de048aaa1246ce96d8cad35580ffd919c312f1300f9cb94c9478ee109b7fbda01ab7fe90a58a81ae5e86a98d831860283b5d74a212cd2e60d4b9e078f9d4f902a99684c7e1d0eba5919d11b235dccefac534cdae65123f5e8960a21dc9dd57cdd4aee7551c283fb83", @nested={0x4, 0xd}, @nested={0x4, 0x26}, @typed={0x4, 0x2d}]}, @nested={0x4, 0x11b}]}, @nested={0xca, 0x5a, 0x0, 0x1, [@nested={0x39, 0xf8, 0x0, 0x1, [@generic="7457806729e10f0d17dff0d49a40dfe74c1c40de37", @nested={0x4, 0xea}, @typed={0xc, 0x46, 0x0, 0x0, @u64=0x7}, @typed={0x8, 0x5a, 0x0, 0x0, @uid}, @typed={0x8, 0x40, 0x0, 0x0, @uid}]}, @typed={0x5, 0x7c, 0x0, 0x0, @str='\x00'}, @generic="66c8331584c98dd452c3e689c1b64e262ed23c8d1b8cddcea5fb8114a5910d519b874b7935ea371a0ad90f960951fcb5b8e42e18624012359e0c1ce9349e", @nested={0x3c, 0x129, 0x0, 0x1, [@generic="506c928647ffd379e0b78e14dc6645b7dbbacb7c6ba8d1763fb5c37494fed7b2ec3b418c6a42e13da56ab6090e4ecd42", @typed={0x8, 0xce, 0x0, 0x0, @fd=r1}]}, @typed={0x8, 0xcb, 0x0, 0x0, @u32}]}]}, @generic="d584a7d26873ce180c7f30695242d5defdb28d25b84ecec1541619a0ffb7b2a907769eb0cc116f93bc7ed70fb731deab709c85e2f06f6dca48e909b27fea062761bce54a90d94e53cc6d425aef73d7bf471b182ec1125814d8a9f3c6c129b0f6b47eaadb39d7ed3f6e79c716991aed63eb0a1672b7dec305f469dc635ebf917bc041c9c26706ce33b8b7e3b7343a609b0a6827b8b7a6de089a14d51e753197dc4beb29ffb9c8b4da7142467d95f1d1d49139b76dafa030cd163932797d1ec6c0c95e89bdb1e1f6a1fb547203acdb7bc9b4", @nested={0x4, 0x155}]}, @nested={0x8, 0x115, 0x0, 0x1, [@nested={0x4, 0x9b}, @generic]}, @nested={0x68, 0xe3, 0x0, 0x1, [@typed={0x14, 0xa9, 0x0, 0x0, @ipv6=@empty}, @typed={0x8, 0x94, 0x0, 0x0, @uid}, @nested={0x2e, 0x12e, 0x0, 0x1, [@typed={0x8, 0xf, 0x0, 0x0, @pid}, @typed={0x8, 0x10e, 0x0, 0x0, @ipv4=@remote}, @generic="a7e212ff39f581d543787e94dfa20e4c7bd6", @typed={0x8, 0x110, 0x0, 0x0, @pid}]}, @nested={0x4, 0xed}, @generic, @typed={0x8, 0x9b, 0x0, 0x0, @ipv4=@broadcast}, @nested={0x4, 0xc3}, @typed={0x8, 0x83, 0x0, 0x0, @uid}]}]}]}]}]}]}, 0x16a0}}, 0xc000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x4000800) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000007c0)=@newtfilter={0x44, 0x2c, 0xd3f, 0x70bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0xe, 0x9}, {0x0, 0x9}, {0xf, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_UDP_SRC_PORT={0x6}, @TCA_FLOWER_KEY_ENC_UDP_SRC_PORT_MASK={0x6}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x20040054) 2.777736614s ago: executing program 2 (id=5550): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) socket$netlink(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newqdisc={0x30, 0x28, 0x4ee4e6a52ff56541, 0x3fff, 0x25dfdbfb, {0x0, 0x0, 0x0, r9, {0x4}, {0xffff, 0xffff}, {0xfff1, 0x1}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0xdc}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000027c0)=@newtfilter={0x38, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0x0, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r11, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x5}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0x800}, @TCA_TBF_PARMS={0x28, 0x1, {{0x81, 0x0, 0xee8, 0x1c, 0x800, 0x8}, {0x7, 0x2, 0x7, 0x1003, 0x5, 0x20000007}, 0x6db6312a, 0x7, 0x1257}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) 2.452678681s ago: executing program 1 (id=5551): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) shutdown(r0, 0x1) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x1, 0x700, 0x9, 0x1ff, {{0x13, 0x4, 0x2, 0x3f, 0x4c, 0x66, 0x0, 0x5c, 0x4, 0x0, @broadcast, @multicast1, {[@ra={0x94, 0x4}, @ra={0x94, 0x4}, @timestamp_addr={0x44, 0xc, 0x7, 0x1, 0x7, [{@private=0xa010100, 0xffffffe6}]}, @cipso={0x86, 0x16, 0x2, [{0x2, 0x10, "3c09c058df8938cec44e41729010"}]}, @ra={0x94, 0x4}, @lsrr={0x83, 0x7, 0xd3, [@loopback]}]}}}}}) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000000c0)=0xffffffffffffffff, 0x4) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="050000000b0000000080000004"], 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000003c0)={r3, &(0x7f0000000600), 0x0}, 0x20) (async) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x4c, 0x4c, 0x3, [@var={0xa, 0x0, 0x0, 0xe, 0x3, 0x2ff50d39f7dd7e8f}, @struct={0xf, 0x4, 0x0, 0x4, 0x1, 0x7fffffff, [{0xb, 0x0, 0x8}, {0xd, 0x0, 0x8}, {0x1, 0x5, 0x200}, {0x2, 0x2, 0xc4}]}]}, {0x0, [0x0]}}, &(0x7f0000000200)=""/164, 0x67, 0xa4, 0x0, 0x2, 0x10000}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x9, 0x3, 0xfffffff7, 0xffffffff, 0x80, r3, 0x2, '\x00', r2, r4, 0x0, 0x1, 0x5}, 0x50) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x5}, [@call={0x85, 0x0, 0x0, 0xf}, @call={0x85, 0x0, 0x0, 0x11}]}, &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000640)=@newlink={0x44, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_ALL_SLAVES_ACTIVE={0x5}, @IFLA_BOND_MIN_LINKS={0x8, 0x12, 0xfffffffc}]}}}]}, 0x44}}, 0x0) 1.270874534s ago: executing program 0 (id=5552): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a37f2", 0x8, 0x2c, 0x0, @remote, @local, {[], {{0x1100, 0x5, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) bind$tipc(r1, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x1, {0x40, 0x22, 0x1}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x1}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) sendmsg$tipc(r2, &(0x7f0000002340)={&(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4080000}, 0x840) 1.246634989s ago: executing program 4 (id=5553): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket(0x25, 0x4, 0x2) setsockopt$packet_tx_ring(r6, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) recvmmsg$unix(r6, &(0x7f0000006140)=[{{&(0x7f0000000180)=@abs, 0x6e, &(0x7f0000002500)=[{&(0x7f0000000440)=""/4096, 0x1000}], 0x1}}, {{&(0x7f0000002600)=@abs, 0x6e, &(0x7f0000002a40)=[{&(0x7f0000003100)=""/4080, 0xff0}], 0x1}}, {{&(0x7f0000002d00), 0x6e, &(0x7f0000002f40)=[{&(0x7f0000002d80)=""/136, 0x88}, {0x0}], 0x2}}], 0x3, 0x0, 0x0) sendmmsg(r6, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r7, 0x7d4165c9) listen(r5, 0x0) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r8, 0x40) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r9, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r9, 0x6, 0xe, &(0x7f0000000680)={@in6={{0xa, 0x4e21, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x81}}, 0x0, 0x0, 0x40, 0x0, "2b20a1a47cddc63b223be606d7303a4d4d11e10450d766feb63b382d54bab577021cad5de4fe7630a33b6deca160b1267ff02123bc27830000000000ffff40000000000000b5b29049cb65f00300"}, 0xd8) r10 = socket$netlink(0x10, 0x3, 0x8000000004) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r11, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) r12 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER(r12, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000300)={&(0x7f0000000200)={0x54, 0x3ed, 0xc7c6870c588d97e9, 0x70bd26, 0x25dfdbfe, "9fec88b0f2dd772b2450bad85c0686893258aea92dd88b7837c23ae4069e1b5d10c41fbf6a949b301e668b4813841b932f32cc0bca147eb437856d4fe0801ba07e", ["", "", "", "", ""]}, 0x54}, 0x1, 0x0, 0x0, 0x20040080}, 0x1) writev(r10, &(0x7f0000000540)=[{&(0x7f0000000180)="580000001400192340834b80040d8c560a066f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0effeffe809005300fff5dd00000010000100080c10000000000000000000", 0x58}], 0x1) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000900006440000008001b00000000000500100004"], 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newqdisc={0x54, 0x10, 0x1, 0x70bd25, 0x25dfdbfc, {0x6, 0x0, 0x8100, 0x0, {0x1, 0x10}, {0xfff1}, {0xe, 0x10}}, [@TCA_RATE={0x6, 0x5, {0xfc}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x400c800}, 0x0) socket$netlink(0x10, 0x3, 0x10) 1.078154455s ago: executing program 1 (id=5554): r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$NILFS_IOCTL_SET_ALLOC_RANGE(r0, 0x40106e8c, &(0x7f0000000000)=[0x5, 0x8]) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0xfc, r1, 0x10, 0x70bd2d, 0x25dfdbff, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xe}]}, @TIPC_NLA_SOCK={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x80}]}, @TIPC_NLA_SOCK={0x50, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x401}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3565}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x80}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xa3f8}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7f}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}]}, @TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x544f}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xc00000}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6}, @TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xfff}]}, @TIPC_NLA_SOCK={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x880}, 0x8000) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0x80000, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r2, 0x6612) ioctl$XFS_IOC_START_COMMIT(r0, 0x80585882, &(0x7f0000000280)={0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$NL80211_CMD_REQ_SET_REG(r3, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000380)={0x198, r4, 0x220, 0x70bd2b, 0x25dfdbfb, {}, [@NL80211_ATTR_REG_RULES={0xe8, 0x22, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x19}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8}, @NL80211_ATTR_FREQ_RANGE_END={0x8}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x2}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x4}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x16}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x2}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x5}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x100}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x5}]}, {0x4c, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x2}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x101}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x81}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x80}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x8}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x9}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x4}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x8}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x7}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x9}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0xe}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x1}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x3}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x1}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x6}]}, {0x4}]}, @NL80211_ATTR_REG_RULES={0x48, 0x22, 0x0, 0x1, [{0x44, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x4}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0xeb6b}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x5}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x8}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x4}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x10000}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x7}, @NL80211_ATTR_DFS_CAC_TIME={0x8}]}]}, @NL80211_ATTR_DFS_REGION={0x5}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x3}, @NL80211_ATTR_REG_RULES={0x1c, 0x22, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x611f}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x7ed5a659}]}]}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x34}, @NL80211_ATTR_DFS_REGION={0x5}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x46}]}, 0x198}, 0x1, 0x0, 0x0, 0x808}, 0x4000) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f00000005c0)={0x0, 0x81, 0xe8c2, 0x3, 0x6, 0x9}, 0x14) sendmsg$NL80211_CMD_START_P2P_DEVICE(r3, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x20, r4, 0x400, 0x70bd2b, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x744, 0x79}}}}, ["", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x8001}, 0x808) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000000700)={0xffffffffffffffff}) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x2c, 0x2, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0x9}, [@IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8031}, 0x8000) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000840), r5) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f0000000880)=@req={0x2, 0xd3b6, 0x101, 0x400}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000bc0)={r2, 0xe0, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000008c0)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, &(0x7f0000000900)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000980)=[0x0], 0x0, 0x96, &(0x7f00000009c0)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000a00), &(0x7f0000000a40), 0x8, 0xa2, 0x8, 0x8, &(0x7f0000000a80)}}, 0x10) r8 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000c00)={r7}, 0x4) r9 = accept$inet6(r5, &(0x7f0000000c40)={0xa, 0x0, 0x0, @private2}, &(0x7f0000000c80)=0x1c) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r9, 0x81f8943c, &(0x7f0000000cc0)={0x0}) ioctl$FITHAW(r0, 0xc0045878) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r2, 0xc0709411, &(0x7f0000000ec0)={{r10, 0x80, 0xb5, 0x3, 0x4, 0x6, 0xffffffffffff1c2a, 0xc30, 0xfff, 0x4, 0x9, 0xfffffffffffffffc, 0x8, 0x100000001, 0x9}, 0x18, [0x0, 0x0, 0x0]}) sendmsg$TIPC_NL_PUBL_GET(r5, &(0x7f0000001100)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000010c0)={&(0x7f0000000fc0)={0xc8, r1, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0x2c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8d}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x9}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x5}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_NODE={0x28, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x9}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x10000}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}]}, @TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9}, @TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x80}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xa8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xa}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}]}]}, 0xc8}, 0x1, 0x0, 0x0, 0x20000005}, 0xc083) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000001180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FLUSH_PMKSA(r5, &(0x7f0000001240)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001200)={&(0x7f00000011c0)={0x1c, r6, 0x400, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r11}, @void}}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10000}, 0x40000) ioctl$SIOCX25SCALLUSERDATA(r3, 0x89e5, &(0x7f0000001280)={0x6d, "ef41f8d6678bda3b570b40ede7e770d8c9c5764b3c5e2e58eff76c1e3c36de7b80877653af8bf570ce71e6105f553a2004dcae557f444431a81e12ea2fc28e08fcd213393542f6fc0018a7d59e35384f62cfeb1c8f25187c883ddf3b5a657556cd4e5261992c6809e1ecc9a0775106eeb177617b0e8010d19c27f10257a1c4f2"}) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r8, 0x400c6615, &(0x7f0000001340)={0x0, @adiantum, 0x0, @desc2}) socket$nl_route(0x10, 0x3, 0x0) r12 = syz_genetlink_get_family_id$batadv(&(0x7f00000013c0), r5) sendmsg$BATADV_CMD_GET_ORIGINATORS(r3, &(0x7f0000001480)={&(0x7f0000001380)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001440)={&(0x7f0000001400)={0x24, r12, 0x100, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xafb}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0xca0e601e3a52b5ea) 1.035348744s ago: executing program 2 (id=5555): r0 = socket$netlink(0x10, 0x3, 0x0) (async, rerun: 64) r1 = socket$packet(0x11, 0x3, 0x300) (rerun: 64) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'veth1_to_batadv\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c00000010000305000000000000000000006dc4", @ANYRES32=0x0, @ANYRES16=r0, @ANYRES32=r2], 0x4c}}, 0x0) 860.453713ms ago: executing program 0 (id=5556): unshare(0x22020600) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xdc}, 0x2000) pwrite64(r2, 0x0, 0x0, 0x1fb) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000240)={0x0, 0x2d, "7bf8ec152fa16d39e4553d9607191c01003f4f261459314625abafbae0dd3d3a415cb19b2f3f5bd1d92f8a3b28"}, 0x0) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x4008014) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_GETFLAGS(r4, 0x80086601, &(0x7f0000000000)) setsockopt$ARPT_SO_SET_REPLACE(r4, 0x0, 0x60, &(0x7f0000000800)={'filter\x00', 0x7, 0x4, 0x3f0, 0x110, 0x110, 0x0, 0x308, 0x308, 0x308, 0x4, &(0x7f0000000040), {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @broadcast, @rand_addr=0x64010102, 0x1}}}, {{@arp={@remote, @rand_addr=0x64010101, 0xff, 0xff, 0x7, 0x3, {@mac=@broadcast, {[0x0, 0x0, 0x0, 0x0, 0xff, 0xff]}}, {@mac=@multicast, {[0x0, 0x0, 0x0, 0xff]}}, 0x8, 0x6, 0xf7, 0x101, 0x7, 0x9, 'geneve0\x00', 'veth1_to_bond\x00', {}, {}, 0x0, 0x40}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@random="9a6eca5c4dd8", @empty, @dev={0xac, 0x14, 0x14, 0x1a}, @private=0xa010100, 0xf}}}, {{@arp={@remote, @rand_addr=0x64010100, 0xff, 0x0, 0x8, 0x10, {@empty, {[0x0, 0xff, 0x7f, 0xff, 0x0, 0xff]}}, {@empty, {[0x0, 0xff, 0x0, 0x0, 0x0, 0xff]}}, 0x5, 0x100, 0xd7e8, 0x80, 0x9, 0xb, 'team_slave_0\x00', 'bond_slave_0\x00', {0xff}, {}, 0x0, 0x301}, 0xc0, 0xe8}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0xf, 0x7, 0x4}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) sendmsg$nl_route(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000001800010000000000000000000200000000000006000000000c00090008000000", @ANYRES32, @ANYBLOB="08000400", @ANYRES32, @ANYBLOB="080005"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, 0x0, {0x0, 0x4}, {0xffff, 0xffff}, {0x3, 0xffe5}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0xc0}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000040000100feffffffffdbdf25017c0000040042800c00018006000600800a000014000280100017800c0001"], 0x38}, 0x1, 0x0, 0x0, 0x48815}, 0x800c000) 815.611645ms ago: executing program 1 (id=5557): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xc}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1e, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}]}, &(0x7f0000000640)=0x10) socket$kcm(0xa, 0x1, 0x106) unshare(0x2c020400) socket$inet_icmp(0x2, 0x2, 0x1) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0xa, 0x1, 0x7fff, 0x1, 0x4, 0x9, 0xa4, 0xffb, 0x7, 0xb69, 0xc1, 0x4, 0x2, 0x3, 0x5, 0x102, 0x1000, 0x9, 0x3, 0x3, 0x1, 0x6, 0x0, 0x6, 0x9, 0x4, 0x7, 0x5, 0x100000, 0x762, 0x3, 0xd, 0xe, 0x2b12, 0x100, 0x6, 0x1c00, 0xb, 0x7, 0xbed4, 0x8, 0x8000100, 0x6, 0x0, 0x11000, 0x5, 0x5, 0x79b, 0x2, 0x1, 0x7f, 0x4, 0x1000a, 0x7, 0xf, 0x101, 0xd7, 0x1fa0860a, 0x7, 0xaa, 0x81, 0x8, 0x180000, 0x4007, 0x8b, 0x5, 0x2af, 0xf7, 0x5, 0x2, 0x6, 0x9, 0x4, 0x7, 0x4009, 0x0, 0x4, 0x100002, 0x8, 0x74f, 0x0, 0x1005, 0x80005, 0x10001, 0x2, 0xffffffff, 0x6, 0x6, 0x9, 0x80000000, 0xfdffffff, 0x2, 0x2, 0x81, 0x100, 0x5, 0x252, 0x81, 0xb, 0x5, 0x20006, 0x5, 0x2, 0xb, 0x2, 0xd9a, 0xd, 0x2a2, 0x13f, 0x2, 0x2, 0x5, 0x8, 0x400, 0x4, 0x2, 0x40, 0x8, 0x8001, 0x3, 0x401, 0x66cd, 0x8, 0x8, 0x1, 0x1fc, 0xc5c, 0x7fff]}}) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x25, 0x0, 0x0) 678.045475ms ago: executing program 3 (id=5558): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000fa0000000000000000010000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f00000001c0)=""/222, 0x41100, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff97}, 0x78) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='devices.list\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000500)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x2711, @my=0x0}, 0x10) readv(r0, &(0x7f00000006c0)=[{0x0}], 0x1) 496.0577ms ago: executing program 0 (id=5559): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000140), 0x10) r2 = socket$netlink(0x10, 0x3, 0x2) connect$netlink(r2, &(0x7f0000000040)=@kern={0x10, 0x0, 0x0, 0x2000}, 0xc) sendmsg$can_bcm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="05000000edfe9f"], 0x80}, 0x1, 0x0, 0x0, 0x20000000}, 0x810) sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r0) recvmmsg(r0, &(0x7f0000005a00)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000240)=""/23, 0x17}, {&(0x7f0000000740)=""/147, 0x38}, {&(0x7f0000000300)=""/173, 0xad}, {&(0x7f00000008c0)=""/237, 0xed}, {&(0x7f00000009c0)=""/73, 0x49}, {&(0x7f0000000a40)=""/202, 0xca}, {&(0x7f0000002a00)=""/4098, 0x1002}, {&(0x7f0000000040)=""/128, 0x80}, {&(0x7f00000000c0)=""/19, 0x13}], 0x9}, 0xfffffffd}], 0x1, 0x2000, 0x0) 371.041796ms ago: executing program 3 (id=5560): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c02000019000100fcffffff10000000ffffffff000000000000000000000000ac1414bb0000000000000000000000004e210000f7fb20020a00800008000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x23c}}, 0x4080) 274.905361ms ago: executing program 0 (id=5561): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req={0x8000, 0xb4f, 0x300, 0x1daf6}, 0x10) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x0, 0x0, 0x1, 0x0, 0x100}, 0x1c) setsockopt$packet_int(r1, 0x107, 0xc, &(0x7f0000000080)=0x3ff, 0x4) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x118, 0x2e, 0x1, 0x0, 0x25dfdbff, "", [@nested={0x106, 0xf2, 0x0, 0x1, [@typed={0xc, 0x18, 0x0, 0x0, @u64=0xfac08}, @typed={0x14, 0xa, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x16}}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd", @generic="3ed73cfccb"]}]}, 0x118}], 0x1, 0x0, 0x0, 0x400c445}, 0x0) 272.61521ms ago: executing program 3 (id=5562): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x2}, 0x1c) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x20, 0x10, 0x403, 0x78bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646, 0x39000000}}, 0x20}, 0x1, 0x0, 0x0, 0x20000600}, 0x0) 174.157426ms ago: executing program 1 (id=5563): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff}) connect$unix(r0, &(0x7f00000002c0)=@file={0x0, './file0\x00'}, 0x6e) socket(0x10, 0x3, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000010000000000000080180000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r1}, 0x94) socket$inet6_mptcp(0xa, 0x1, 0x106) socket(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) socket$igmp(0x2, 0x3, 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x80000000000000a, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x3, 0x300) socket(0x10, 0x803, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xd, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xf2000000}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x8, 0x100}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x6, 0x1, 0xb, 0x8, 0x9}, {0x4, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r2}, {}, {0x46, 0x0, 0x0, 0x76}}], {{}, {0x6, 0x0, 0x7, 0x8}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000006080)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000ac03000000000000850000003300000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r4}, &(0x7f0000000840), &(0x7f0000000880)=r5}, 0x20) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r5, r7, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x4a, &(0x7f0000000300)=ANY=[], 0x0) 144.699795ms ago: executing program 4 (id=5564): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x5, &(0x7f00000000c0)=0xfffffffe, 0x4) r1 = socket$igmp(0x2, 0x3, 0x2) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r1, 0x80286722, &(0x7f0000001180)={&(0x7f0000000180)=""/4096, 0x1000, 0x5, 0x5}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket(0x1d, 0x80802, 0x6) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r3) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000014007910480000000000690046000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0xa3, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x53}, 0x21) syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/uts\x00') ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454ca, &(0x7f0000000100)=ANY=[@ANYBLOB='..']) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0x32600) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000600)={'vlan1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB="c40000001000010428bd7000ffffffff00000000", @ANYRES32=0x0, @ANYBLOB="08000000000001009400128009000100766c616e0000000084000280060001000200000006000100020000001c0004800c00010005000000000800000c0001008100000081ffffff4c0003800c00010004000000c90000000c00010004000000530b00000c00010005000000070000000c0001000e000000ff0300000c00010000000000070000000c00010008000000090000000600050088a8000008000500", @ANYRES32=r4, @ANYBLOB="03", @ANYRES32, @ANYBLOB], 0xc4}, 0x1, 0x0, 0x0, 0x240008c4}, 0x20008004) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r3, &(0x7f0000002c00)={&(0x7f0000002800)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000002bc0)={&(0x7f00000029c0)={0x1e8, 0x0, 0x100, 0x70bd2b, 0x6, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x90, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xf21b70d228b32fbe}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}]}]}, 0x1e8}, 0x1, 0x0, 0x0, 0x4000}, 0x80) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, 0xffffffffffffffff, 0x0) r5 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/pid_for_children\x00') mkdirat$cgroup(r5, &(0x7f0000000000)='syz0\x00', 0x1ff) ioctl$TUNSETOFFLOAD(r2, 0x400454d0, 0x3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff}) ioctl$int_in(r6, 0x5452, &(0x7f00000000c0)=0x400) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'generic-gcm-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r8 = accept4(r7, 0x0, 0x0, 0x0) sendmsg$alg(r8, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) recvmmsg(r8, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000500)=""/229, 0xe5}], 0x1}}], 0x1, 0x60, 0x0) r9 = getpid() ioctl$F2FS_IOC_PRECACHE_EXTENTS(r1, 0xf50f, 0x0) ioctl$sock_SIOCSPGRP(r6, 0x8902, &(0x7f0000000140)=r9) 55.626345ms ago: executing program 3 (id=5565): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {0xffff}, {0xffff, 0xffff}, {0x2, 0xa}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newqdisc={0x30, 0x28, 0x4ee4e6a52ff56541, 0x3fff, 0x25dfdbfb, {0x0, 0x0, 0x0, r9, {0x4}, {0xffff, 0xffff}, {0xfff1, 0x1}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0xdc}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000027c0)=@newtfilter={0x38, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0x0, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r11, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x5}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0x800}, @TCA_TBF_PARMS={0x28, 0x1, {{0x81, 0x0, 0xee8, 0x1c, 0x800, 0x8}, {0x7, 0x2, 0x7, 0x1003, 0x5, 0x20000007}, 0x6db6312a, 0x7, 0x1257}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) 0s ago: executing program 2 (id=5566): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x3, 0x28011, r0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001440)=ANY=[@ANYBLOB="540000001c000103000000000000000007000000", @ANYRES32=r2, @ANYBLOB="4000a6080a000200ffffffffffff00000c000e8005000100fd0000000600050001"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_INO_PATHS(r0, 0xc0389423, &(0x7f00000003c0)={0x1, 0x48, [0x9, 0x3, 0xe, 0x8000], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) write(r3, &(0x7f00000005c0)='\n\x00', 0x2) r4 = openat$cgroup_ro(r3, &(0x7f0000000000)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00005d5000/0x2000)=nil, 0x2000, 0x3, 0x28011, r5, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x13, r7, 0x0) mmap(&(0x7f0000498000/0x3000)=nil, 0x3000, 0x2000002, 0x28011, r6, 0x0) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r6, 0x84, 0x74, &(0x7f0000000080)=""/161, &(0x7f0000000140)=0xa1) ioctl$FS_IOC_RESVSP(r4, 0x40305829, &(0x7f0000000540)={0x1100, 0x1, 0x2e38, 0x11000}) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004}, 0x4000) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x1, 0x8, 0x5, 0x7, 0xc1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000100), 0x3f, r8}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r8, &(0x7f0000000340), 0x0}, 0x20) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r10, 0x89f2, &(0x7f0000000040)={'erspan0\x00', &(0x7f0000000400)={'sit0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x4, 0x0, @rand_addr=0x64010101, @empty}}}}) r11 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x34, r11, 0x1, 0x70bd26, 0x25dfdbfb, {{}, {}, {0x18, 0x17, {0x10, 0x10001, @l2={'eth', 0x3a, 'vlan0\x00'}}}}}, 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0x404c000) kernel console output (not intermixed with test programs): 49861][T21580] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 558.386264][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 559.144147][T22998] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 559.169820][T22998] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 559.197740][T22998] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 559.266819][T21578] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 559.301049][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 559.368882][T23008] netlink: 'syz.1.4455': attribute type 3 has an invalid length. [ 559.618751][T22997] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 559.667433][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 559.681762][T22997] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 559.992314][T23033] netlink: 'syz.2.4460': attribute type 11 has an invalid length. [ 560.315920][T21580] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 560.733486][T23065] __nla_validate_parse: 2 callbacks suppressed [ 560.733504][T23065] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4472'. [ 560.813610][T23067] IPVS: set_ctl: invalid protocol: 0 127.0.0.1:20004 [ 560.853584][T23069] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4474'. [ 560.873878][T23067] syz_tun: entered allmulticast mode [ 560.891106][T23067] IPVS: set_ctl: invalid protocol: 33 172.20.20.170:20002 [ 560.918506][T23067] IPVS: set_ctl: invalid protocol: 47 10.1.1.2:20001 [ 560.942256][T23069] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4474'. [ 561.352998][T21593] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 561.410081][T23098] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4482'. [ 561.699573][T23118] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4487'. [ 561.728611][T23118] netlink: 'syz.0.4487': attribute type 11 has an invalid length. [ 561.738634][T23116] syzkaller0: entered promiscuous mode [ 561.745219][T23116] syzkaller0: entered allmulticast mode [ 561.763797][T23118] netlink: 'syz.0.4487': attribute type 8 has an invalid length. [ 561.780873][T23116] x_tables: duplicate underflow at hook 3 [ 561.797424][T23118] netlink: 4096 bytes leftover after parsing attributes in process `syz.0.4487'. [ 561.826721][T23122] netlink: 56 bytes leftover after parsing attributes in process `syz.3.4490'. [ 561.849993][T23116] gre2: entered allmulticast mode [ 561.899239][T23125] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4491'. [ 561.987649][T23127] FAULT_INJECTION: forcing a failure. [ 561.987649][T23127] name failslab, interval 1, probability 0, space 0, times 0 [ 562.012803][T23127] CPU: 0 UID: 0 PID: 23127 Comm: syz.4.4491 Not tainted syzkaller #0 PREEMPT(full) [ 562.012827][T23127] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 562.012839][T23127] Call Trace: [ 562.012845][T23127] [ 562.012853][T23127] dump_stack_lvl+0xe8/0x150 [ 562.012879][T23127] should_fail_ex+0x40c/0x560 [ 562.012909][T23127] should_failslab+0xa8/0x100 [ 562.012926][T23127] __kmalloc_noprof+0xe8/0x750 [ 562.012950][T23127] ? tomoyo_realpath_from_path+0xef/0x640 [ 562.012981][T23127] tomoyo_realpath_from_path+0xef/0x640 [ 562.013015][T23127] ? tomoyo_path_number_perm+0x219/0x5f0 [ 562.013037][T23127] tomoyo_path_number_perm+0x246/0x5f0 [ 562.013062][T23127] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 562.013082][T23127] ? __lock_acquire+0x683/0x2cd0 [ 562.013116][T23127] ? hook_file_ioctl+0x1f0/0x5c0 [ 562.013156][T23127] ? __fget_files+0x2a/0x420 [ 562.013179][T23127] ? __fget_files+0x2a/0x420 [ 562.013199][T23127] ? __fget_files+0x3a2/0x420 [ 562.013221][T23127] ? __fget_files+0x2a/0x420 [ 562.013246][T23127] security_file_ioctl+0xc3/0x2a0 [ 562.013271][T23127] __se_sys_ioctl+0x47/0x170 [ 562.013296][T23127] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 562.013316][T23127] do_syscall_64+0x174/0x580 [ 562.013337][T23127] ? trace_irq_disable+0x3b/0x140 [ 562.013362][T23127] ? clear_bhb_loop+0x40/0x90 [ 562.013385][T23127] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 562.013403][T23127] RIP: 0033:0x7f47dbf9ce59 [ 562.013420][T23127] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 562.013435][T23127] RSP: 002b:00007f47dcdb7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 562.013455][T23127] RAX: ffffffffffffffda RBX: 00007f47dc216090 RCX: 00007f47dbf9ce59 [ 562.013469][T23127] RDX: 00002000000002c0 RSI: 0000000000008946 RDI: 000000000000000a [ 562.013480][T23127] RBP: 00007f47dcdb7090 R08: 0000000000000000 R09: 0000000000000000 [ 562.013492][T23127] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 562.013503][T23127] R13: 00007f47dc216128 R14: 00007f47dc216090 R15: 00007fffdda65538 [ 562.013534][T23127] [ 562.013603][T23127] ERROR: Out of memory at tomoyo_realpath_from_path. [ 562.116500][T23133] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4491'. [ 562.498492][T23141] hsr0: entered promiscuous mode [ 562.538645][T23149] veth1_to_bond: entered allmulticast mode [ 562.626170][T23147] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4496'. [ 562.667944][T23147] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 562.696944][T23149] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 562.716075][T23149] veth1_to_bond (unregistering): left allmulticast mode [ 562.740550][T23149] bond0: (slave bond_slave_1): Releasing backup interface [ 563.408664][T23192] xt_hashlimit: size too large, truncated to 1048576 [ 564.474251][T21593] net_ratelimit: 5 callbacks suppressed [ 564.474270][T21593] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 564.799564][T23210] netlink: 'syz.4.4511': attribute type 11 has an invalid length. [ 565.176763][T23229] netlink: 'syz.0.4517': attribute type 11 has an invalid length. [ 565.246646][T23234] sctp: [Deprecated]: syz.1.4518 (pid 23234) Use of int in max_burst socket option. [ 565.246646][T23234] Use struct sctp_assoc_value instead [ 565.297935][T23234] sctp: [Deprecated]: syz.1.4518 (pid 23234) Use of int in max_burst socket option. [ 565.297935][T23234] Use struct sctp_assoc_value instead [ 565.356620][ T5736] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 565.480403][T23240] bond0: (slave bond_slave_0): Releasing backup interface [ 565.515614][T21593] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 565.565175][T23240] team_slave_0: left promiscuous mode [ 565.584663][T23240] team_slave_0: left allmulticast mode [ 565.615982][T23240] team0: Port device team_slave_0 removed [ 565.638040][T23240] team_slave_1: left promiscuous mode [ 565.644500][T23240] team_slave_1: left allmulticast mode [ 565.677500][T23240] team0: Port device team_slave_1 removed [ 565.707522][T23240] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 565.730461][T23240] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 565.742583][T23240] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 565.757721][T23240] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 565.796345][T23240] batman_adv: batadv0: Interface deactivated: gretap1 [ 565.803708][T23260] __nla_validate_parse: 4 callbacks suppressed [ 565.803726][T23260] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4524'. [ 565.837027][T23240] batman_adv: batadv0: Removing interface: gretap1 [ 565.852165][T23240] bond2: (slave bridge4): Releasing backup interface [ 565.863728][T23240] bridge4: left promiscuous mode [ 565.894364][T23240] bond3: (slave gretap2): Releasing active interface [ 566.078115][T23261] bond5: option arp_all_targets: invalid value (3) [ 566.112096][T23261] bond5 (unregistering): Released all slaves [ 566.252906][T23274] netlink: 'syz.2.4526': attribute type 4 has an invalid length. [ 566.554283][T21578] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 566.580780][T23286] C: renamed from veth1_to_team (while UP) [ 566.613057][T23286] netlink: 152 bytes leftover after parsing attributes in process `syz.4.4529'. [ 567.169532][T23310] FAULT_INJECTION: forcing a failure. [ 567.169532][T23310] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 567.209816][T23307] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4536'. [ 567.214174][T23310] CPU: 1 UID: 0 PID: 23310 Comm: syz.4.4537 Not tainted syzkaller #0 PREEMPT(full) [ 567.214202][T23310] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 567.214213][T23310] Call Trace: [ 567.214220][T23310] [ 567.214228][T23310] dump_stack_lvl+0xe8/0x150 [ 567.214255][T23310] should_fail_ex+0x40c/0x560 [ 567.214293][T23310] _copy_from_user+0x2d/0xb0 [ 567.214313][T23310] sk_setsockopt+0x2b5/0x2f10 [ 567.214345][T23310] ? __pfx_sk_setsockopt+0x10/0x10 [ 567.214374][T23310] ? aa_sk_perm+0x6d5/0x900 [ 567.214399][T23310] ? __fget_files+0x2a/0x420 [ 567.214424][T23310] ? __pfx_aa_sk_perm+0x10/0x10 [ 567.214449][T23310] ? __fget_files+0x2a/0x420 [ 567.214468][T23310] ? aa_sock_opt_perm+0xff/0x1a0 [ 567.214495][T23310] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 567.214520][T23310] do_sock_setsockopt+0x11b/0x1b0 [ 567.214542][T23310] __x64_sys_setsockopt+0x13d/0x1b0 [ 567.214563][T23310] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 567.214582][T23310] do_syscall_64+0x174/0x580 [ 567.214602][T23310] ? trace_irq_disable+0x3b/0x140 [ 567.214625][T23310] ? clear_bhb_loop+0x40/0x90 [ 567.214647][T23310] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 567.214664][T23310] RIP: 0033:0x7f47dbf9ce59 [ 567.214681][T23310] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 567.214696][T23310] RSP: 002b:00007f47dcdd8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 567.214714][T23310] RAX: ffffffffffffffda RBX: 00007f47dc215fa0 RCX: 00007f47dbf9ce59 [ 567.214727][T23310] RDX: 000000000000001a RSI: 0000000000000001 RDI: 0000000000000003 [ 567.214738][T23310] RBP: 00007f47dcdd8090 R08: 0000000000000010 R09: 0000000000000000 [ 567.214749][T23310] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 567.214760][T23310] R13: 00007f47dc216038 R14: 00007f47dc215fa0 R15: 00007fffdda65538 [ 567.214789][T23310] [ 567.424181][T23285] netlink: 'syz.3.4530': attribute type 2 has an invalid length. [ 567.588718][T23315] netlink: 204 bytes leftover after parsing attributes in process `syz.4.4538'. [ 567.597030][T21578] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 567.770583][T23319] ip6gre2: entered promiscuous mode [ 567.786033][T23319] ip6gre2: entered allmulticast mode [ 567.832585][T23319] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4539'. [ 567.856329][T23319] netlink: 'syz.2.4539': attribute type 1 has an invalid length. [ 567.871611][T23319] netlink: 'syz.2.4539': attribute type 3 has an invalid length. [ 567.898185][T23319] netlink: 132 bytes leftover after parsing attributes in process `syz.2.4539'. [ 568.266484][T23339] team_slave_1: entered allmulticast mode [ 568.362297][T23343] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4546'. [ 568.385625][ T5736] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 568.626590][T20409] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 568.642758][T23350] netlink: 84 bytes leftover after parsing attributes in process `syz.3.4548'. [ 568.657594][T21578] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 568.673046][T20409] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 568.681535][T21580] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 568.942011][T23362] veth0: entered promiscuous mode [ 568.949064][T23362] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4554'. [ 568.995988][T21580] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 569.053788][T23361] veth0: left promiscuous mode [ 569.149855][T23369] xt_hashlimit: size too large, truncated to 1048576 [ 569.279669][T22316] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 569.425980][T21578] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 569.545852][T23388] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4560'. [ 569.665991][T21578] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 569.930881][T23402] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 570.262281][T23413] netlink: 'syz.2.4569': attribute type 4 has an invalid length. [ 570.282791][T23413] netlink: 'syz.2.4569': attribute type 5 has an invalid length. [ 570.363239][T23415] FAULT_INJECTION: forcing a failure. [ 570.363239][T23415] name failslab, interval 1, probability 0, space 0, times 0 [ 570.382870][T23415] CPU: 1 UID: 0 PID: 23415 Comm: syz.1.4570 Not tainted syzkaller #0 PREEMPT(full) [ 570.382897][T23415] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 570.382908][T23415] Call Trace: [ 570.382915][T23415] [ 570.382923][T23415] dump_stack_lvl+0xe8/0x150 [ 570.382949][T23415] should_fail_ex+0x40c/0x560 [ 570.382983][T23415] should_failslab+0xa8/0x100 [ 570.383003][T23415] __kmalloc_cache_node_noprof+0x8c/0x690 [ 570.383030][T23415] ? __get_vm_area_node+0x136/0x300 [ 570.383058][T23415] __get_vm_area_node+0x136/0x300 [ 570.383085][T23415] __vmalloc_node_range_noprof+0x358/0x1730 [ 570.383109][T23415] ? bpf_prog_alloc_no_stats+0x47/0x4f0 [ 570.383139][T23415] ? __lock_acquire+0x683/0x2cd0 [ 570.383167][T23415] ? register_lock_class+0x31/0x2e0 [ 570.383189][T23415] ? __lock_acquire+0x683/0x2cd0 [ 570.383209][T23415] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 570.383233][T23415] ? __might_fault+0xaf/0x130 [ 570.383256][T23415] ? __might_fault+0xaf/0x130 [ 570.383284][T23415] ? bpf_prog_alloc_no_stats+0x47/0x4f0 [ 570.383309][T23415] __vmalloc_noprof+0xd2/0x120 [ 570.383333][T23415] ? bpf_prog_alloc_no_stats+0x47/0x4f0 [ 570.383361][T23415] bpf_prog_alloc_no_stats+0x47/0x4f0 [ 570.383386][T23415] ? bpf_prog_alloc+0x2a/0x1a0 [ 570.383414][T23415] bpf_prog_alloc+0x3c/0x1a0 [ 570.383443][T23415] __get_filter+0xf2/0x420 [ 570.383472][T23415] sk_attach_filter+0x24/0x140 [ 570.383498][T23415] sk_setsockopt+0x2635/0x2f10 [ 570.383530][T23415] ? __pfx_sk_setsockopt+0x10/0x10 [ 570.383556][T23415] ? irqentry_exit+0x218/0x8e0 [ 570.383586][T23415] ? irqentry_exit+0x218/0x8e0 [ 570.383620][T23415] ? security_socket_setsockopt+0xa1/0x290 [ 570.383643][T23415] ? security_socket_setsockopt+0x236/0x290 [ 570.383664][T23415] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 570.383692][T23415] do_sock_setsockopt+0x11b/0x1b0 [ 570.383714][T23415] __x64_sys_setsockopt+0x13d/0x1b0 [ 570.383735][T23415] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 570.383756][T23415] do_syscall_64+0x174/0x580 [ 570.383778][T23415] ? clear_bhb_loop+0x40/0x90 [ 570.383801][T23415] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 570.383819][T23415] RIP: 0033:0x7f219279ce59 [ 570.383837][T23415] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 570.383853][T23415] RSP: 002b:00007f21936b2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 570.383872][T23415] RAX: ffffffffffffffda RBX: 00007f2192a15fa0 RCX: 00007f219279ce59 [ 570.383886][T23415] RDX: 000000000000001a RSI: 0000000000000001 RDI: 0000000000000003 [ 570.383897][T23415] RBP: 00007f21936b2090 R08: 0000000000000010 R09: 0000000000000000 [ 570.383909][T23415] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 570.383920][T23415] R13: 00007f2192a16038 R14: 00007f2192a15fa0 R15: 00007ffd5970e208 [ 570.383952][T23415] [ 570.384367][T23415] syz.1.4570: vmalloc error: size 4096, vm_struct allocation failed, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null) [ 570.723506][T21578] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 570.740568][T23415] ,cpuset=/,mems_allowed=0-1 [ 570.772278][T23415] CPU: 0 UID: 0 PID: 23415 Comm: syz.1.4570 Not tainted syzkaller #0 PREEMPT(full) [ 570.772301][T23415] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 570.772311][T23415] Call Trace: [ 570.772318][T23415] [ 570.772325][T23415] dump_stack_lvl+0xe8/0x150 [ 570.772352][T23415] warn_alloc+0x249/0x340 [ 570.772384][T23415] ? __pfx_warn_alloc+0x10/0x10 [ 570.772417][T23415] ? __get_vm_area_node+0x2aa/0x300 [ 570.772441][T23415] ? __get_vm_area_node+0x2af/0x300 [ 570.772466][T23415] __vmalloc_node_range_noprof+0x37d/0x1730 [ 570.772492][T23415] ? __lock_acquire+0x683/0x2cd0 [ 570.772520][T23415] ? register_lock_class+0x31/0x2e0 [ 570.772540][T23415] ? __lock_acquire+0x683/0x2cd0 [ 570.772557][T23415] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 570.772578][T23415] ? __might_fault+0xaf/0x130 [ 570.772600][T23415] ? __might_fault+0xaf/0x130 [ 570.772628][T23415] ? bpf_prog_alloc_no_stats+0x47/0x4f0 [ 570.772650][T23415] __vmalloc_noprof+0xd2/0x120 [ 570.772670][T23415] ? bpf_prog_alloc_no_stats+0x47/0x4f0 [ 570.772695][T23415] bpf_prog_alloc_no_stats+0x47/0x4f0 [ 570.772718][T23415] ? bpf_prog_alloc+0x2a/0x1a0 [ 570.772745][T23415] bpf_prog_alloc+0x3c/0x1a0 [ 570.772772][T23415] __get_filter+0xf2/0x420 [ 570.772800][T23415] sk_attach_filter+0x24/0x140 [ 570.772819][T23415] sk_setsockopt+0x2635/0x2f10 [ 570.772848][T23415] ? __pfx_sk_setsockopt+0x10/0x10 [ 570.772873][T23415] ? irqentry_exit+0x218/0x8e0 [ 570.772896][T23415] ? irqentry_exit+0x218/0x8e0 [ 570.772921][T23415] ? security_socket_setsockopt+0xa1/0x290 [ 570.772938][T23415] ? security_socket_setsockopt+0x236/0x290 [ 570.772957][T23415] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 570.772985][T23415] do_sock_setsockopt+0x11b/0x1b0 [ 570.773005][T23415] __x64_sys_setsockopt+0x13d/0x1b0 [ 570.773022][T23415] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 570.773037][T23415] do_syscall_64+0x174/0x580 [ 570.773055][T23415] ? clear_bhb_loop+0x40/0x90 [ 570.773074][T23415] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 570.773088][T23415] RIP: 0033:0x7f219279ce59 [ 570.773104][T23415] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 570.773115][T23415] RSP: 002b:00007f21936b2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 570.773130][T23415] RAX: ffffffffffffffda RBX: 00007f2192a15fa0 RCX: 00007f219279ce59 [ 570.773139][T23415] RDX: 000000000000001a RSI: 0000000000000001 RDI: 0000000000000003 [ 570.773148][T23415] RBP: 00007f21936b2090 R08: 0000000000000010 R09: 0000000000000000 [ 570.773180][T23415] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 570.773190][T23415] R13: 00007f2192a16038 R14: 00007f2192a15fa0 R15: 00007ffd5970e208 [ 570.773214][T23415] [ 571.057716][T23397] __nla_validate_parse: 7 callbacks suppressed [ 571.057765][T23397] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4564'. [ 571.074524][T23397] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4564'. [ 571.105283][T23415] Mem-Info: [ 571.109160][T23415] active_anon:13181 inactive_anon:0 isolated_anon:0 [ 571.109160][T23415] active_file:3098 inactive_file:40530 isolated_file:0 [ 571.109160][T23415] unevictable:768 dirty:284 writeback:0 [ 571.109160][T23415] slab_reclaimable:13307 slab_unreclaimable:127824 [ 571.109160][T23415] mapped:32340 shmem:4277 pagetables:1303 [ 571.109160][T23415] sec_pagetables:0 bounce:0 [ 571.109160][T23415] kernel_misc_reclaimable:0 [ 571.109160][T23415] free:1273038 free_pcp:17593 free_cma:0 [ 571.153874][T23425] netlink: 'syz.4.4571': attribute type 13 has an invalid length. [ 571.217728][T23415] Node 0 active_anon:52212kB inactive_anon:0kB active_file:12392kB inactive_file:161928kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:119224kB dirty:1232kB writeback:0kB shmem:14256kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:16472kB pagetables:5016kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 571.282216][T23415] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:192kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:140kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 571.341338][T23415] Node 0 DMA free:15320kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:40kB local_pcp:28kB free_cma:0kB [ 571.403154][T23415] lowmem_reserve[]: 0 2493 2493 2493 2493 [ 571.439099][ T5736] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 571.483385][T23415] Node 0 DMA32 free:1166628kB boost:0kB min:34188kB low:42732kB high:51276kB reserved_highatomic:0KB free_highatomic:0KB active_anon:40112kB inactive_anon:0kB active_file:12392kB inactive_file:161928kB unevictable:1536kB writepending:1232kB zspages:0kB present:3129332kB managed:2552916kB mlocked:0kB bounce:0kB free_pcp:49756kB local_pcp:21100kB free_cma:0kB [ 571.576699][T23443] xt_cgroup: invalid path, errno=-2 [ 571.601833][T23443] lo: Caught tx_queue_len zero misconfig [ 571.612000][T23415] lowmem_reserve[]: 0 0 0 0 0 [ 571.639104][T23415] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:684kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:8kB free_cma:0kB [ 571.703294][T23415] lowmem_reserve[]: 0 0 0 0 0 [ 571.731204][T23415] Node 1 Normal free:3913444kB boost:0kB min:55704kB low:69628kB high:83552kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:192kB unevictable:1536kB writepending:0kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:32120kB local_pcp:0kB free_cma:0kB [ 571.750977][T21580] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 571.816182][T23415] lowmem_reserve[]: 0 0 0 0 0 [ 571.840919][T23450] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 571.894559][T23415] Node 0 DMA: 2*4kB (U) 0*8kB 1*16kB (U) 2*32kB (U) 2*64kB (U) 2*128kB (U) 2*256kB (U) 2*512kB (U) 3*1024kB (U) 3*2048kB (UM) 0*4096kB = 11224kB [ 571.934742][T23415] Node 0 DMA32: 5285*4kB (UME) 5390*8kB (UME) 3100*16kB (UME) 498*32kB (UME) 355*64kB (UME) 864*128kB (UME) 755*256kB (UME) 384*512kB (UME) 264*1024kB (UME) 119*2048kB (UME) 0*4096kB = 1167044kB [ 571.976331][T23415] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 572.007228][T23415] Node 1 Normal: 1*4kB (U) 6*8kB (UM) 9*16kB (UM) 13*32kB (UM) 12*64kB (UM) 7*128kB (UM) 4*256kB (UM) 5*512kB (UM) 4*1024kB (UM) 2*2048kB (U) 952*4096kB (UM) = 3913444kB [ 572.057951][T23415] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 572.147470][T23415] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 572.195346][T23415] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 572.230890][T23415] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 572.236770][T23460] netlink: 72 bytes leftover after parsing attributes in process `syz.0.4582'. [ 572.270662][T23415] 46922 total pagecache pages [ 572.293193][T23415] 0 pages in swap cache [ 572.309645][T23415] Free swap = 124996kB [ 572.327110][T23415] Total swap = 124996kB [ 572.346833][T23415] 2097051 pages RAM [ 572.354479][T23415] 0 pages HighMem/MovableOnly [ 572.371684][T23415] 427036 pages reserved [ 572.385064][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 572.408593][T23415] 0 pages cma reserved [ 572.648158][T23472] netlink: 'syz.0.4583': attribute type 2 has an invalid length. [ 572.672659][T23472] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4583'. [ 572.693711][T23476] netlink: 'syz.2.4586': attribute type 1 has an invalid length. [ 572.803226][T21593] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 572.880918][T23476] bond6: entered promiscuous mode [ 572.910933][T23476] 8021q: adding VLAN 0 to HW filter on device bond6 [ 573.088857][T23483] 8021q: adding VLAN 0 to HW filter on device bond6 [ 573.188876][T23483] bond6: (slave vti0): The slave device specified does not support setting the MAC address [ 573.263709][T23483] bond6: (slave vti0): Setting fail_over_mac to active for active-backup mode [ 573.390744][T23483] bond6: (slave vti0): making interface the new active one [ 573.462615][T23483] vti0: entered promiscuous mode [ 573.495707][T23493] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4586'. [ 573.542980][T23483] bond6: (slave vti0): Enslaving as an active interface with an up link [ 573.551888][T23501] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4586'. [ 573.578461][T23493] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4586'. [ 573.869839][T21593] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 573.951564][T23507] syzkaller0: entered promiscuous mode [ 573.977866][T23507] syzkaller0: entered allmulticast mode [ 574.385895][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 574.465497][T22316] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 574.552356][T23541] FAULT_INJECTION: forcing a failure. [ 574.552356][T23541] name failslab, interval 1, probability 0, space 0, times 0 [ 574.583674][T23541] CPU: 0 UID: 0 PID: 23541 Comm: syz.1.4601 Not tainted syzkaller #0 PREEMPT(full) [ 574.583700][T23541] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 574.583710][T23541] Call Trace: [ 574.583718][T23541] [ 574.583727][T23541] dump_stack_lvl+0xe8/0x150 [ 574.583752][T23541] should_fail_ex+0x40c/0x560 [ 574.583786][T23541] should_failslab+0xa8/0x100 [ 574.583806][T23541] kmem_cache_alloc_node_noprof+0x8f/0x680 [ 574.583832][T23541] ? __alloc_skb+0x1d7/0x7a0 [ 574.583856][T23541] ? __local_bh_enable_ip+0xd0/0x130 [ 574.583880][T23541] __alloc_skb+0x1d7/0x7a0 [ 574.583910][T23541] netlink_ack+0x136/0xb30 [ 574.583927][T23541] ? __pfx___mutex_trylock_common+0x10/0x10 [ 574.583954][T23541] ? rcu_is_watching+0x15/0xb0 [ 574.583975][T23541] ? trace_contention_end+0x3d/0x140 [ 574.584006][T23541] netlink_rcv_skb+0x2a4/0x4a0 [ 574.584025][T23541] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 574.584054][T23541] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 574.584088][T23541] ? netlink_deliver_tap+0x2e/0x1b0 [ 574.584108][T23541] ? netlink_deliver_tap+0x2e/0x1b0 [ 574.584129][T23541] xfrm_netlink_rcv+0x79/0x90 [ 574.584154][T23541] netlink_unicast+0x7bb/0x940 [ 574.584191][T23541] netlink_sendmsg+0x813/0xb40 [ 574.584219][T23541] ? __pfx_netlink_sendmsg+0x10/0x10 [ 574.584243][T23541] ? aa_sock_msg_perm+0xf1/0x1b0 [ 574.584277][T23541] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 574.584300][T23541] ? __pfx_netlink_sendmsg+0x10/0x10 [ 574.584321][T23541] ____sys_sendmsg+0x9b9/0xa20 [ 574.584341][T23541] ? __might_fault+0xaf/0x130 [ 574.584372][T23541] ? __pfx_____sys_sendmsg+0x10/0x10 [ 574.584400][T23541] ? import_iovec+0x73/0xa0 [ 574.584425][T23541] ___sys_sendmsg+0x2a5/0x360 [ 574.584443][T23541] ? __lock_acquire+0x683/0x2cd0 [ 574.584467][T23541] ? __pfx____sys_sendmsg+0x10/0x10 [ 574.584521][T23541] ? __fget_files+0x2a/0x420 [ 574.584543][T23541] ? __fget_files+0x3a2/0x420 [ 574.584572][T23541] __x64_sys_sendmsg+0x1bd/0x2a0 [ 574.584594][T23541] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 574.584623][T23541] ? __pfx_ksys_write+0x10/0x10 [ 574.584656][T23541] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 574.584675][T23541] do_syscall_64+0x174/0x580 [ 574.584696][T23541] ? trace_irq_disable+0x3b/0x140 [ 574.584720][T23541] ? clear_bhb_loop+0x40/0x90 [ 574.584741][T23541] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 574.584758][T23541] RIP: 0033:0x7f219279ce59 [ 574.584775][T23541] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 574.584791][T23541] RSP: 002b:00007f21936b2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 574.584810][T23541] RAX: ffffffffffffffda RBX: 00007f2192a15fa0 RCX: 00007f219279ce59 [ 574.584824][T23541] RDX: 000000000000c4e0 RSI: 0000200000000d80 RDI: 0000000000000003 [ 574.584835][T23541] RBP: 00007f21936b2090 R08: 0000000000000000 R09: 0000000000000000 [ 574.584846][T23541] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 574.584857][T23541] R13: 00007f2192a16038 R14: 00007f2192a15fa0 R15: 00007ffd5970e208 [ 574.584887][T23541] [ 574.948057][T21593] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 575.993500][T21578] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 577.034282][T21578] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 577.515685][ T5736] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 578.062112][T23537] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 578.065121][T21593] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 578.075610][T23537] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 578.091241][T23537] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 578.331250][T23573] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4609'. [ 578.348208][T23576] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4610'. [ 578.384744][T23573] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4609'. [ 578.406101][T23576] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4610'. [ 578.712841][T23592] openvswitch: netlink: Message has 8 unknown bytes. [ 578.746655][T23592] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 578.814745][T23596] netlink: 68 bytes leftover after parsing attributes in process `syz.0.4615'. [ 578.861573][T23605] netlink: 9 bytes leftover after parsing attributes in process `syz.4.4614'. [ 578.874935][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 578.908432][T23605] netlink: 9 bytes leftover after parsing attributes in process `syz.4.4614'. [ 578.937576][T23608] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4618'. [ 579.086607][T23608] veth0_macvtap: left promiscuous mode [ 579.106622][T21593] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 579.229564][T23624] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 579.360121][T23609] nbd2: detected capacity change from 0 to 63 [ 579.753982][T21667] block nbd2: Receive control failed (result -104) [ 579.834105][ T762] bridge0: port 2(bridge_slave_1) entered blocking state [ 579.843881][ T762] bridge0: port 2(bridge_slave_1) entered forwarding state [ 579.960445][T23624] net_ratelimit: 640 callbacks suppressed [ 579.960476][T23624] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 580.049841][T23624] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 580.131277][T23647] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4623'. [ 580.145053][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 580.159737][T21593] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 580.188927][T23624] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 580.257528][T23624] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 580.268013][T23647] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4623'. [ 580.280725][T23624] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 580.311919][T23624] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 580.345223][T23624] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 580.394577][T23624] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 580.492947][T23624] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 580.553710][T23670] pim6reg: entered allmulticast mode [ 580.760621][T23674] pim6reg: left allmulticast mode [ 581.298138][T23690] veth0_macvtap: left promiscuous mode [ 581.454104][T23697] netlink: 'syz.2.4632': attribute type 4 has an invalid length. [ 582.073981][T20427] nci: nci_rx_work: unknown MT 0x1 [ 582.109771][T23729] syz_tun: entered allmulticast mode [ 582.207104][T23729] syz_tun (unregistering): left allmulticast mode [ 582.697163][T23709] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 582.956616][T23747] xfrm0: entered allmulticast mode [ 582.998632][T23752] netlink: 'syz.3.4644': attribute type 4 has an invalid length. [ 582.998672][T23747] netlink: 'syz.4.4642': attribute type 11 has an invalid length. [ 583.258035][T23756] veth0_macvtap: left promiscuous mode [ 583.302294][T23762] netlink: 'syz.1.4645': attribute type 4 has an invalid length. [ 583.343794][T23766] __nla_validate_parse: 10 callbacks suppressed [ 583.343812][T23766] netlink: 204 bytes leftover after parsing attributes in process `syz.2.4649'. [ 583.377865][ T25] block nbd0: Possible stuck request ffff888027765080: control (read@0,1024B). Runtime 60 seconds [ 583.393293][ T25] block nbd0: Possible stuck request ffff888027765240: control (read@1024,1024B). Runtime 60 seconds [ 583.406216][ T25] block nbd0: Possible stuck request ffff888027765400: control (read@2048,1024B). Runtime 60 seconds [ 583.418668][ T25] block nbd0: Possible stuck request ffff8880277655c0: control (read@3072,1024B). Runtime 60 seconds [ 583.429881][T23774] netlink: 52 bytes leftover after parsing attributes in process `syz.1.4645'. [ 583.979950][T23789] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4657'. [ 584.302147][T23803] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4659'. [ 584.331943][T23803] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4659'. [ 584.531910][T23821] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4664'. [ 584.675940][T23825] netlink: 'syz.2.4666': attribute type 13 has an invalid length. [ 585.176609][T23835] sch_tbf: burst 6 is lower than device gretap0 mtu (1476) ! [ 585.195829][T21578] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 585.350551][T21593] net_ratelimit: 877 callbacks suppressed [ 585.350571][T21593] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 585.403315][T23851] xt_hashlimit: size too large, truncated to 1048576 [ 585.489612][T23850] xt_hashlimit: size too large, truncated to 1048576 [ 585.556354][T23811] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 585.567792][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 585.589224][T23859] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4670'. [ 585.647465][T21578] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 585.818002][T23851] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 586.083856][T23875] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 586.388881][T21578] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 586.630025][T22316] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 587.422208][T23905] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4681'. [ 587.434473][T21579] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 587.489758][T23909] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 587.501311][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 587.604407][T23910] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4682'. [ 587.881004][T23920] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 587.928627][T23920] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4685'. [ 588.042864][T23928] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 588.160664][T23928] geneve2: entered promiscuous mode [ 588.167021][T23928] geneve2: entered allmulticast mode [ 588.211340][T23935] netlink: 'syz.1.4689': attribute type 83 has an invalid length. [ 588.504425][T23940] __nla_validate_parse: 4 callbacks suppressed [ 588.504447][T23940] netlink: 112 bytes leftover after parsing attributes in process `syz.0.4690'. [ 588.537245][T23936] syzkaller0: entered promiscuous mode [ 588.549898][T23936] syzkaller0: entered allmulticast mode [ 588.781716][T23953] netlink: 208240 bytes leftover after parsing attributes in process `syz.4.4692'. [ 588.851207][T23955] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4693'. [ 588.938042][T23960] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4693'. [ 589.137595][T23971] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4697'. [ 589.414044][T23981] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4698'. [ 589.455465][T23981] nbd: couldn't find a device at index 1468137472 [ 590.547453][T21580] net_ratelimit: 7 callbacks suppressed [ 590.547471][T21580] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 591.593335][T21580] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 592.625945][T21579] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 592.728458][T22316] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 593.113886][T23971] veth0_macvtap: left promiscuous mode [ 593.665779][T21593] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 594.008505][T24036] netlink: 'syz.2.4712': attribute type 1 has an invalid length. [ 594.087024][T24044] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 594.324524][T24052] bridge0: Caught tx_queue_len zero misconfig [ 594.640280][T24070] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4718'. [ 594.707832][T21579] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 594.724905][T24070] veth0_macvtap: left promiscuous mode [ 594.865053][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 594.901035][T24088] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 594.911584][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 594.989754][T24073] erspan1: entered allmulticast mode [ 595.208743][T24094] netlink: 'syz.1.4723': attribute type 1 has an invalid length. [ 595.458295][T24100] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4726'. [ 595.749432][T21580] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 595.757620][T21580] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 595.866120][T24112] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4731'. [ 595.936802][T24112] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4731'. [ 596.027965][T24121] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4735'. [ 596.785908][T21580] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 597.079203][T24168] openvswitch: netlink: IP tunnel dst address not specified [ 597.216169][T24176] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4752'. [ 597.257396][T24177] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4751'. [ 597.324100][T24176] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4752'. [ 597.340028][T24181] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.4753'. [ 597.622966][T24187] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 597.639315][T22316] IPVS: starting estimator thread 0... [ 597.735067][T24187] batadv_slave_0: Caught tx_queue_len zero misconfig [ 597.746804][T24190] IPVS: using max 33 ests per chain, 79200 per kthread [ 597.827928][T21580] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 598.010232][T24204] netlink: 204 bytes leftover after parsing attributes in process `syz.2.4763'. [ 598.049358][T24202] syzkaller0: entered promiscuous mode [ 598.055720][T24202] syzkaller0: entered allmulticast mode [ 598.075503][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 598.304931][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 598.469746][T24219] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 598.501549][T24219] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 598.981267][T24237] syzkaller0: entered promiscuous mode [ 599.011614][T24237] syzkaller0: entered allmulticast mode [ 599.092658][T24240] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 599.937309][T24262] netlink: 'syz.4.4778': attribute type 4 has an invalid length. [ 599.949807][T24262] __nla_validate_parse: 3 callbacks suppressed [ 599.949825][T24262] netlink: 116 bytes leftover after parsing attributes in process `syz.4.4778'. [ 600.016594][T24268] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4779'. [ 600.197597][T24278] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4782'. [ 600.318115][T24285] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4783'. [ 600.736025][T24296] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4785'. [ 600.744123][T24297] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4786'. [ 600.934139][T24297] 8021q: adding VLAN 0 to HW filter on device bond5 [ 600.951750][T21593] net_ratelimit: 13 callbacks suppressed [ 600.951769][T21593] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 601.001283][T24309] netlink: 200 bytes leftover after parsing attributes in process `syz.0.4786'. [ 601.086818][T24297] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4786'. [ 601.110433][T24302] bond5: (slave veth7): Enslaving as an active interface with an up link [ 601.283032][T24297] bond5: (slave bridge1): Enslaving as an active interface with an up link [ 601.310439][T24311] netlink: zone id is out of range [ 601.317296][T24311] netlink: zone id is out of range [ 601.329510][T24311] netlink: zone id is out of range [ 601.338221][T24311] netlink: zone id is out of range [ 601.343473][T24311] netlink: zone id is out of range [ 601.351176][T24311] netlink: zone id is out of range [ 601.360540][T24311] netlink: zone id is out of range [ 601.367082][T24311] netlink: zone id is out of range [ 601.372395][T24311] netlink: zone id is out of range [ 601.613671][T24320] netlink: 'syz.1.4794': attribute type 10 has an invalid length. [ 601.769693][T24326] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4797'. [ 601.781611][T24320] 8021q: adding VLAN 0 to HW filter on device team0 [ 601.788943][T24327] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4797'. [ 601.820698][T24320] team0: entered promiscuous mode [ 601.829364][T24320] geneve1: entered promiscuous mode [ 601.862360][T24320] bond0: (slave team0): Enslaving as an active interface with an up link [ 601.875905][T24328] syzkaller0: entered promiscuous mode [ 601.885652][T24328] syzkaller0: entered allmulticast mode [ 601.973374][T24330] tipc: Enabled bearer , priority 0 [ 602.026257][T24323] tipc: Resetting bearer [ 602.078521][T24321] tipc: Resetting bearer [ 602.155741][T24321] tipc: Disabling bearer [ 603.897932][T24386] syzkaller1: entered promiscuous mode [ 603.920861][T24386] syzkaller1: entered allmulticast mode [ 605.413806][T24457] __nla_validate_parse: 4 callbacks suppressed [ 605.413827][T24457] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4822'. [ 605.483308][T24457] netlink: 'syz.0.4822': attribute type 4 has an invalid length. [ 606.075889][T24487] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4830'. [ 606.085653][ C0] net_ratelimit: 486 callbacks suppressed [ 606.085673][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 606.145276][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 606.159861][T21579] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 606.180569][T24488] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4830'. [ 606.180626][T24487] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4830'. [ 606.465196][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 606.473517][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 606.481888][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 606.490217][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 606.624940][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 606.661595][T24508] veth0_macvtap: Caught tx_queue_len zero misconfig [ 606.909656][T24521] netlink: 'syz.3.4838': attribute type 11 has an invalid length. [ 607.191691][T21579] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 607.326656][T24535] netlink: 'syz.4.4841': attribute type 1 has an invalid length. [ 607.368397][T24536] netlink: 'syz.4.4841': attribute type 1 has an invalid length. [ 607.575627][T24538] netlink: 'syz.3.4842': attribute type 4 has an invalid length. [ 607.600187][T24538] netlink: 52 bytes leftover after parsing attributes in process `syz.3.4842'. [ 607.664950][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 608.039775][T24562] xt_hashlimit: size too large, truncated to 1048576 [ 608.064601][T24568] netlink: 'syz.3.4848': attribute type 11 has an invalid length. [ 608.133887][T24570] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4848'. [ 608.329686][T24575] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4849'. [ 608.413776][T24568] mac80211_hwsim hwsim133 wlan0: entered promiscuous mode [ 608.462435][T24568] mac80211_hwsim hwsim133 wlan0: entered allmulticast mode [ 608.825505][T24597] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4851'. [ 609.004033][T20417] bond2: (slave vlan2): link status definitely up, 10000 Mbps full duplex [ 609.090815][T20417] bond2: (slave vlan2): making interface the new active one [ 609.208211][T20417] bond2: active interface up! [ 609.406653][T24622] netlink: 104 bytes leftover after parsing attributes in process `syz.3.4854'. [ 609.407261][T24618] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4855'. [ 609.590397][ T1708] block nbd2: Possible stuck request ffff8880277f0000: control (read@0,1024B). Runtime 30 seconds [ 609.601799][ T1708] block nbd2: Possible stuck request ffff8880277f01c0: control (read@1024,1024B). Runtime 30 seconds [ 609.615483][ T1708] block nbd2: Possible stuck request ffff8880277f0380: control (read@2048,1024B). Runtime 30 seconds [ 609.627153][ T1708] block nbd2: Possible stuck request ffff8880277f0540: control (read@3072,1024B). Runtime 30 seconds [ 609.722987][T24616] netlink: 'syz.3.4854': attribute type 2 has an invalid length. [ 610.130811][T24642] bridge0: port 1(bridge_slave_0) entered disabled state [ 610.183184][T24642] bridge_slave_0 (unregistering): left allmulticast mode [ 610.206949][T24642] bridge_slave_0 (unregistering): left promiscuous mode [ 610.214306][T24642] bridge0: port 1(bridge_slave_0) entered disabled state [ 610.282518][T24644] macvtap0: entered allmulticast mode [ 610.295608][T24644] dummy0: entered allmulticast mode [ 610.327325][T24644] dummy0: entered promiscuous mode [ 610.370997][T24644] dummy0: left allmulticast mode [ 610.417617][T24646] netlink: 'syz.3.4861': attribute type 5 has an invalid length. [ 610.428198][T21580] dummy0: left promiscuous mode [ 610.655642][T24669] __nla_validate_parse: 4 callbacks suppressed [ 610.655659][T24669] netlink: 60 bytes leftover after parsing attributes in process `syz.4.4866'. [ 610.716049][T24669] unsupported nlmsg_type 40 [ 611.281062][T24694] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4873'. [ 611.348134][T21580] net_ratelimit: 12 callbacks suppressed [ 611.348153][T21580] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 611.401073][ T5736] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 611.435979][ T5736] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 611.459705][ T5736] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 611.495974][ T5736] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 611.522486][ T5736] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 611.551820][ T5736] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 611.591077][ T5736] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 611.623871][ T5736] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 611.646817][ T5736] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 612.628172][T24741] syzkaller0: entered promiscuous mode [ 612.643869][T24741] syzkaller0: entered allmulticast mode [ 613.431652][ T25] block nbd0: Possible stuck request ffff888027765080: control (read@0,1024B). Runtime 90 seconds [ 613.444235][ T25] block nbd0: Possible stuck request ffff888027765240: control (read@1024,1024B). Runtime 90 seconds [ 613.456939][ T25] block nbd0: Possible stuck request ffff888027765400: control (read@2048,1024B). Runtime 90 seconds [ 613.493835][ T25] block nbd0: Possible stuck request ffff8880277655c0: control (read@3072,1024B). Runtime 90 seconds [ 614.139060][T24784] netlink: 204 bytes leftover after parsing attributes in process `syz.1.4891'. [ 614.279496][T24774] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 614.319268][T24774] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 614.702582][T24774] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 614.765708][T24774] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 614.771467][T24794] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4894'. [ 614.941343][T24799] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4895'. [ 615.048428][T24774] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 615.072869][T24774] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 615.292162][T24814] FAULT_INJECTION: forcing a failure. [ 615.292162][T24814] name failslab, interval 1, probability 0, space 0, times 0 [ 615.319818][T24774] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 615.344261][T24814] CPU: 0 UID: 0 PID: 24814 Comm: syz.0.4900 Not tainted syzkaller #0 PREEMPT(full) [ 615.344286][T24814] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 615.344297][T24814] Call Trace: [ 615.344305][T24814] [ 615.344312][T24814] dump_stack_lvl+0xe8/0x150 [ 615.344339][T24814] should_fail_ex+0x40c/0x560 [ 615.344381][T24814] should_failslab+0xa8/0x100 [ 615.344402][T24814] kmem_cache_alloc_node_noprof+0x8f/0x680 [ 615.344428][T24814] ? __alloc_skb+0x1d7/0x7a0 [ 615.344452][T24814] ? __local_bh_enable_ip+0xd0/0x130 [ 615.344476][T24814] __alloc_skb+0x1d7/0x7a0 [ 615.344506][T24814] hci_mgmt_cmd+0x1c1/0xfc0 [ 615.344531][T24814] ? add_ext_adv_data_complete+0x210/0x3b0 [ 615.344563][T24814] hci_sock_sendmsg+0x6e1/0xf50 [ 615.344588][T24814] ? __pfx_aa_sk_perm+0x10/0x10 [ 615.344616][T24814] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 615.344641][T24814] ? aa_sock_msg_perm+0xf1/0x1b0 [ 615.344668][T24814] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 615.344694][T24814] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 615.344717][T24814] sock_write_iter+0x498/0x4e0 [ 615.344745][T24814] ? __pfx_sock_write_iter+0x10/0x10 [ 615.344776][T24814] ? bpf_lsm_file_permission+0x9/0x20 [ 615.344800][T24814] ? security_file_permission+0x75/0x260 [ 615.344830][T24814] vfs_write+0x612/0xba0 [ 615.344863][T24814] ? __pfx_vfs_write+0x10/0x10 [ 615.344899][T24814] ? __fget_files+0x2a/0x420 [ 615.344930][T24814] ksys_write+0x150/0x270 [ 615.344958][T24814] ? __pfx_ksys_write+0x10/0x10 [ 615.344991][T24814] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 615.345012][T24814] do_syscall_64+0x174/0x580 [ 615.345032][T24814] ? trace_irq_disable+0x3b/0x140 [ 615.345057][T24814] ? clear_bhb_loop+0x40/0x90 [ 615.345079][T24814] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 615.345097][T24814] RIP: 0033:0x7f26d3b9ce59 [ 615.345115][T24814] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 615.345130][T24814] RSP: 002b:00007f26d4ac4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 615.345150][T24814] RAX: ffffffffffffffda RBX: 00007f26d3e15fa0 RCX: 00007f26d3b9ce59 [ 615.345163][T24814] RDX: 0000000000000007 RSI: 0000200000000140 RDI: 000000000000000a [ 615.345175][T24814] RBP: 00007f26d4ac4090 R08: 0000000000000000 R09: 0000000000000000 [ 615.345187][T24814] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 615.345198][T24814] R13: 00007f26d3e16038 R14: 00007f26d3e15fa0 R15: 00007fff92b46408 [ 615.345229][T24814] [ 615.593090][T24774] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 615.668258][T24814] netlink: 'syz.0.4900': attribute type 4 has an invalid length. [ 615.737554][T24808] syzkaller1: entered promiscuous mode [ 615.743692][T24808] syzkaller1: entered allmulticast mode [ 615.756989][T24823] netlink: 'syz.2.4901': attribute type 15 has an invalid length. [ 615.820967][T24823] netlink: 'syz.2.4901': attribute type 17 has an invalid length. [ 616.012461][T24823] bond3: left promiscuous mode [ 616.028049][T24823] veth0_to_bond: left promiscuous mode [ 616.050126][T24823] bond3: left allmulticast mode [ 616.068242][T24823] veth0_to_bond: left allmulticast mode [ 616.126240][T24823] 8021q: adding VLAN 0 to HW filter on device bond4 [ 616.153714][T24823] geneve3: left promiscuous mode [ 616.160536][T24834] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4904'. [ 616.170016][T24823] geneve3: left allmulticast mode [ 616.183182][T24823] gre2: left allmulticast mode [ 616.192432][T24823] ip6gre2: left promiscuous mode [ 616.199544][T24823] ip6gre2: left allmulticast mode [ 616.210055][T24823] bond6: left promiscuous mode [ 616.215797][T24823] vti0: left promiscuous mode [ 616.216520][T24833] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4904'. [ 616.235510][ T29] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 616.511958][T24840] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4906'. [ 616.549446][ T29] net_ratelimit: 649 callbacks suppressed [ 616.549479][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 616.565227][T24842] can: request_module (can-proto-0) failed. [ 616.592150][T24843] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4906'. [ 616.615414][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 616.659011][T24849] netlink: zone id is out of range [ 616.679650][T21580] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 616.692402][T24849] netlink: zone id is out of range [ 616.710936][T24849] netlink: zone id is out of range [ 616.724198][T20411] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 616.726423][T24849] netlink: zone id is out of range [ 616.740380][T24849] netlink: zone id is out of range [ 616.748872][T24849] netlink: zone id is out of range [ 616.754319][T24849] netlink: zone id is out of range [ 616.756089][T20411] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 616.833358][T20425] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 616.855986][T20425] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 616.877921][T24855] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4908'. [ 616.929478][T20425] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 616.944026][T20425] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 616.987008][T24862] netlink: 'syz.0.4910': attribute type 1 has an invalid length. [ 617.015372][ T6827] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 617.023761][ T6827] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 617.091940][T24868] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4911'. [ 617.119025][ T29] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 617.190502][T24867] bond6: (slave dummy0): making interface the new active one [ 617.244192][T24867] bond6: (slave dummy0): Enslaving as an active interface with an up link [ 617.307180][T24862] bond6: entered promiscuous mode [ 617.325943][T24862] dummy0: entered promiscuous mode [ 617.580984][T24886] netlink: 'syz.3.4915': attribute type 4 has an invalid length. [ 617.832404][T24871] bridge0: port 2(bridge_slave_1) entered disabled state [ 617.944137][T24871] bond6: (slave dummy0): Releasing active interface [ 617.958724][T24871] dummy0: left promiscuous mode [ 618.101177][T24871] bridge_slave_1: left allmulticast mode [ 618.121462][T24871] bridge_slave_1: left promiscuous mode [ 618.123726][T24896] x_tables: duplicate underflow at hook 1 [ 618.127671][T24871] bridge0: port 2(bridge_slave_1) entered disabled state [ 618.188484][T24871] bond0: (slave bond_slave_0): Releasing backup interface [ 618.242283][T24871] bond0: (slave bond_slave_1): Releasing backup interface [ 618.272753][T24898] netlink: 'syz.1.4918': attribute type 1 has an invalid length. [ 618.283169][T24898] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4918'. [ 618.307706][T24871] team0: Port device team_slave_0 removed [ 618.382550][T24871] team0: Port device team_slave_1 removed [ 618.413152][T24871] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 618.459623][T24902] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4920'. [ 618.459910][T24871] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 618.497482][T24871] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 618.518230][T24871] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 618.618964][T24861] bond6: left promiscuous mode [ 618.840816][T24909] veth1: entered promiscuous mode [ 618.868319][T24909] macsec2: entered promiscuous mode [ 618.897467][T24909] macsec2: entered allmulticast mode [ 618.919826][T24909] veth1: entered allmulticast mode [ 618.962592][T24909] veth1: left allmulticast mode [ 618.983820][T24909] veth1: left promiscuous mode [ 619.408604][T24940] tipc: Enabling of bearer rejected, failed to enable media [ 619.845291][T24947] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4930'. [ 619.872164][T24947] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4930'. [ 620.108718][T24952] FAULT_INJECTION: forcing a failure. [ 620.108718][T24952] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 620.152049][T24952] CPU: 1 UID: 0 PID: 24952 Comm: syz.3.4932 Not tainted syzkaller #0 PREEMPT(full) [ 620.152076][T24952] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 620.152087][T24952] Call Trace: [ 620.152095][T24952] [ 620.152104][T24952] dump_stack_lvl+0xe8/0x150 [ 620.152130][T24952] should_fail_ex+0x40c/0x560 [ 620.152164][T24952] _copy_to_user+0x31/0xb0 [ 620.152187][T24952] simple_read_from_buffer+0xe1/0x170 [ 620.152214][T24952] proc_fail_nth_read+0x1bb/0x230 [ 620.152241][T24952] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 620.152264][T24952] ? rw_verify_area+0x24a/0x4c0 [ 620.152288][T24952] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 620.152307][T24952] vfs_read+0x213/0xa80 [ 620.152332][T24952] ? __pfx___mutex_lock+0x10/0x10 [ 620.152354][T24952] ? __pfx_vfs_read+0x10/0x10 [ 620.152380][T24952] ? __fget_files+0x2a/0x420 [ 620.152406][T24952] ? __fget_files+0x3a2/0x420 [ 620.152425][T24952] ? __fget_files+0x2a/0x420 [ 620.152452][T24952] ksys_read+0x150/0x270 [ 620.152477][T24952] ? __pfx_ksys_read+0x10/0x10 [ 620.152511][T24952] ? __x64_sys_read+0x2d/0x90 [ 620.152537][T24952] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 620.152557][T24952] do_syscall_64+0x174/0x580 [ 620.152579][T24952] ? clear_bhb_loop+0x40/0x90 [ 620.152602][T24952] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 620.152620][T24952] RIP: 0033:0x7fee06f5d68e [ 620.152638][T24952] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 620.152653][T24952] RSP: 002b:00007fee07e5cfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 620.152673][T24952] RAX: ffffffffffffffda RBX: 00007fee07e5d6c0 RCX: 00007fee06f5d68e [ 620.152686][T24952] RDX: 000000000000000f RSI: 00007fee07e5d0a0 RDI: 0000000000000009 [ 620.152698][T24952] RBP: 00007fee07e5d090 R08: 0000000000000000 R09: 0000000000000000 [ 620.152710][T24952] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 620.152721][T24952] R13: 00007fee07216038 R14: 00007fee07215fa0 R15: 00007ffd24aba398 [ 620.152753][T24952] [ 621.346905][T24974] __nla_validate_parse: 2 callbacks suppressed [ 621.346924][T24974] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4939'. [ 621.918762][T25007] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4952'. [ 622.225011][ C0] net_ratelimit: 975 callbacks suppressed [ 622.225031][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 622.423083][T25032] netlink: 104 bytes leftover after parsing attributes in process `syz.0.4960'. [ 623.249435][T25066] syzkaller0: entered promiscuous mode [ 623.254937][T25066] syzkaller0: entered allmulticast mode [ 623.265019][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 623.289587][T25066] tipc: Enabled bearer , priority 0 [ 623.314044][T25066] tipc: Resetting bearer [ 623.323195][T25065] tipc: Resetting bearer [ 623.357989][T25065] tipc: Disabling bearer [ 623.631415][T25077] netlink: zone id is out of range [ 623.642646][T25077] netlink: zone id is out of range [ 623.658722][T25077] netlink: zone id is out of range [ 623.671237][T25077] netlink: zone id is out of range [ 623.683391][T25077] netlink: zone id is out of range [ 623.696329][T25077] netlink: zone id is out of range [ 623.702178][T25077] netlink: zone id is out of range [ 623.708575][T25077] netlink: zone id is out of range [ 623.853380][T25088] veth0: entered promiscuous mode [ 623.887528][T25086] veth0: left promiscuous mode [ 624.046341][T25097] netlink: 51 bytes leftover after parsing attributes in process `syz.4.4989'. [ 624.060815][T25097] netlink: 179344 bytes leftover after parsing attributes in process `syz.4.4989'. [ 624.236800][T25107] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4991'. [ 624.251123][T25098] netlink: 80 bytes leftover after parsing attributes in process `syz.0.4988'. [ 624.257156][T25107] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4991'. [ 624.306861][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 624.568111][T25123] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4999'. [ 624.700989][T25130] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5001'. [ 625.000062][T25148] netlink: 'syz.0.5007': attribute type 1 has an invalid length. [ 625.039838][T25142] geneve3: entered promiscuous mode [ 625.056039][T25142] geneve3: entered allmulticast mode [ 625.338303][T25160] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 625.359231][T25152] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 626.542877][T25211] IPVS: length: 218 != 8 [ 626.772058][T25221] __nla_validate_parse: 6 callbacks suppressed [ 626.772094][T25221] netlink: 104 bytes leftover after parsing attributes in process `syz.1.5032'. [ 626.977565][T25231] netlink: 'syz.4.5036': attribute type 12 has an invalid length. [ 627.006641][T25231] netlink: 132 bytes leftover after parsing attributes in process `syz.4.5036'. [ 627.232955][T25238] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5039'. [ 627.294555][T25238] bridge7: entered allmulticast mode [ 627.299045][T25245] netlink: 'syz.3.5042': attribute type 1 has an invalid length. [ 627.350749][T25238] bridge7: port 1(ip6gretap1) entered blocking state [ 627.368776][T25238] bridge7: port 1(ip6gretap1) entered disabled state [ 627.378672][T25238] ip6gretap1: entered allmulticast mode [ 627.389911][T25238] ip6gretap1: entered promiscuous mode [ 627.425072][ C0] net_ratelimit: 971 callbacks suppressed [ 627.425090][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 627.477934][T25245] bond4: entered promiscuous mode [ 627.485531][T25245] 8021q: adding VLAN 0 to HW filter on device bond4 [ 627.930252][T25274] netlink: 'syz.2.5051': attribute type 1 has an invalid length. [ 627.949430][T25271] netlink: 128 bytes leftover after parsing attributes in process `syz.1.5050'. [ 627.976090][T25276] openvswitch: netlink: Unexpected mask (mask=200044, allowed=1004c) [ 627.979282][T25277] openvswitch: netlink: Unexpected mask (mask=200044, allowed=1004c) [ 627.988928][T25279] netlink: 159120 bytes leftover after parsing attributes in process `syz.1.5050'. [ 628.000240][T25271] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 628.112934][T25274] bond7: entered promiscuous mode [ 628.126393][T25274] 8021q: adding VLAN 0 to HW filter on device bond7 [ 628.465082][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 628.645554][T25280] bond7: (slave veth11): making interface the new active one [ 628.660562][T25280] veth11: entered promiscuous mode [ 628.671745][T25280] bond7: (slave veth11): Enslaving as an active interface with an up link [ 628.947026][T25295] netlink: 'syz.1.5057': attribute type 25 has an invalid length. [ 628.984440][T25303] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5061'. [ 628.994191][T25295] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5057'. [ 629.008082][T25303] openvswitch: netlink: Flow actions attr not present in new flow. [ 629.099537][T25295] netlink: 'syz.1.5057': attribute type 25 has an invalid length. [ 629.125454][T25295] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5057'. [ 629.209872][ T5736] IPVS: starting estimator thread 0... [ 629.248807][T25314] netlink: 'syz.2.5064': attribute type 1 has an invalid length. [ 629.256557][T25314] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5064'. [ 629.480089][T25324] dvmrp0: entered allmulticast mode [ 629.505006][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 629.620373][T25316] IPVS: using max 36 ests per chain, 86400 per kthread [ 629.710498][T25332] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5069'. [ 630.003875][T25342] FAULT_INJECTION: forcing a failure. [ 630.003875][T25342] name failslab, interval 1, probability 0, space 0, times 0 [ 630.024569][T25342] CPU: 1 UID: 0 PID: 25342 Comm: syz.1.5072 Not tainted syzkaller #0 PREEMPT(full) [ 630.024591][T25342] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 630.024601][T25342] Call Trace: [ 630.024608][T25342] [ 630.024616][T25342] dump_stack_lvl+0xe8/0x150 [ 630.024641][T25342] should_fail_ex+0x40c/0x560 [ 630.024673][T25342] should_failslab+0xa8/0x100 [ 630.024689][T25342] ? skb_clone+0x212/0x3a0 [ 630.024709][T25342] kmem_cache_alloc_noprof+0x87/0x650 [ 630.024729][T25342] ? dev_queue_xmit_nit+0x2d/0xac0 [ 630.024759][T25342] skb_clone+0x212/0x3a0 [ 630.024776][T25342] ? dev_queue_xmit_nit+0x25c/0xac0 [ 630.024805][T25342] dev_queue_xmit_nit+0x28d/0xac0 [ 630.024832][T25342] ? dev_queue_xmit_nit+0x2d/0xac0 [ 630.024866][T25342] dev_hard_start_xmit+0x1c1/0x830 [ 630.024904][T25342] __dev_queue_xmit+0x1435/0x37f0 [ 630.024923][T25342] ? ____sys_sendmsg+0x9b9/0xa20 [ 630.024940][T25342] ? ___sys_sendmsg+0x2a5/0x360 [ 630.024970][T25342] ? __dev_queue_xmit+0x29b/0x37f0 [ 630.025001][T25342] ? __pfx___dev_queue_xmit+0x10/0x10 [ 630.025034][T25342] ? __copy_skb_header+0xa3/0x4a0 [ 630.025065][T25342] ? __skb_clone+0x449/0x6c0 [ 630.025091][T25342] ? skb_clone+0x246/0x3a0 [ 630.025114][T25342] __netlink_deliver_tap+0x5b4/0x860 [ 630.025146][T25342] ? netlink_deliver_tap+0x2e/0x1b0 [ 630.025168][T25342] netlink_deliver_tap+0x19c/0x1b0 [ 630.025190][T25342] netlink_unicast+0x77f/0x940 [ 630.025228][T25342] netlink_sendmsg+0x813/0xb40 [ 630.025258][T25342] ? __pfx_netlink_sendmsg+0x10/0x10 [ 630.025282][T25342] ? aa_sock_msg_perm+0xf1/0x1b0 [ 630.025316][T25342] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 630.025338][T25342] ? __pfx_netlink_sendmsg+0x10/0x10 [ 630.025359][T25342] ____sys_sendmsg+0x9b9/0xa20 [ 630.025378][T25342] ? __might_fault+0xaf/0x130 [ 630.025408][T25342] ? __pfx_____sys_sendmsg+0x10/0x10 [ 630.025437][T25342] ? import_iovec+0x73/0xa0 [ 630.025462][T25342] ___sys_sendmsg+0x2a5/0x360 [ 630.025481][T25342] ? __lock_acquire+0x683/0x2cd0 [ 630.025505][T25342] ? __pfx____sys_sendmsg+0x10/0x10 [ 630.025563][T25342] ? __fget_files+0x2a/0x420 [ 630.025584][T25342] ? __fget_files+0x3a2/0x420 [ 630.025617][T25342] __x64_sys_sendmsg+0x1bd/0x2a0 [ 630.025639][T25342] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 630.025669][T25342] ? __pfx_ksys_write+0x10/0x10 [ 630.025705][T25342] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 630.025725][T25342] do_syscall_64+0x174/0x580 [ 630.025746][T25342] ? trace_irq_disable+0x3b/0x140 [ 630.025771][T25342] ? clear_bhb_loop+0x40/0x90 [ 630.025794][T25342] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 630.025811][T25342] RIP: 0033:0x7f219279ce59 [ 630.025829][T25342] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 630.025843][T25342] RSP: 002b:00007f21936b2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 630.025861][T25342] RAX: ffffffffffffffda RBX: 00007f2192a15fa0 RCX: 00007f219279ce59 [ 630.025874][T25342] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000004 [ 630.025884][T25342] RBP: 00007f21936b2090 R08: 0000000000000000 R09: 0000000000000000 [ 630.025894][T25342] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 630.025904][T25342] R13: 00007f2192a16038 R14: 00007f2192a15fa0 R15: 00007ffd5970e208 [ 630.025934][T25342] [ 630.052603][ T5736] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 630.539771][T25344] ip6tnl4: entered promiscuous mode [ 630.545367][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 630.664465][T25349] bond0: entered promiscuous mode [ 630.670650][T25349] batadv_slave_0: entered promiscuous mode [ 630.676979][T25349] debugfs: 'hsr1' already exists in 'hsr' [ 630.682704][T25349] Cannot create hsr debugfs directory [ 630.930474][T25363] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 630.980292][T25363] @0Ù: renamed from bond_slave_1 (while UP) [ 631.371584][T25383] FAULT_INJECTION: forcing a failure. [ 631.371584][T25383] name failslab, interval 1, probability 0, space 0, times 0 [ 631.385553][T25383] CPU: 1 UID: 0 PID: 25383 Comm: syz.4.5085 Not tainted syzkaller #0 PREEMPT(full) [ 631.385576][T25383] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 631.385586][T25383] Call Trace: [ 631.385594][T25383] [ 631.385601][T25383] dump_stack_lvl+0xe8/0x150 [ 631.385627][T25383] should_fail_ex+0x40c/0x560 [ 631.385659][T25383] should_failslab+0xa8/0x100 [ 631.385678][T25383] __kmalloc_cache_noprof+0x88/0x660 [ 631.385709][T25383] ? __pfx_stack_trace_save+0x10/0x10 [ 631.385733][T25383] ? rtnl_newlink+0x136/0x1bd0 [ 631.385762][T25383] rtnl_newlink+0x136/0x1bd0 [ 631.385787][T25383] ? kasan_save_track+0x4f/0x80 [ 631.385806][T25383] ? kasan_save_track+0x3e/0x80 [ 631.385826][T25383] ? kasan_save_free_info+0x40/0x50 [ 631.385844][T25383] ? __kasan_slab_free+0x5c/0x80 [ 631.385865][T25383] ? kmem_cache_free+0x182/0x650 [ 631.385888][T25383] ? dev_hard_start_xmit+0x2cd/0x830 [ 631.385905][T25383] ? __netlink_deliver_tap+0x5b4/0x860 [ 631.385923][T25383] ? netlink_deliver_tap+0x19c/0x1b0 [ 631.385940][T25383] ? netlink_unicast+0x77f/0x940 [ 631.385963][T25383] ? netlink_sendmsg+0x813/0xb40 [ 631.385979][T25383] ? __pfx_rtnl_newlink+0x10/0x10 [ 631.385992][T25383] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 631.386019][T25383] ? kasan_quarantine_put+0xbb/0x1f0 [ 631.386032][T25383] ? lockdep_hardirqs_on+0x7a/0x110 [ 631.386047][T25383] ? nlmon_xmit+0xb0/0x100 [ 631.386056][T25383] ? kmem_cache_free+0x182/0x650 [ 631.386075][T25383] ? __lock_acquire+0x683/0x2cd0 [ 631.386088][T25383] ? __dev_queue_xmit+0x29b/0x37f0 [ 631.386101][T25383] ? __local_bh_enable_ip+0xd0/0x130 [ 631.386111][T25383] ? lockdep_hardirqs_on+0x7a/0x110 [ 631.386121][T25383] ? __dev_queue_xmit+0x29b/0x37f0 [ 631.386131][T25383] ? __local_bh_enable_ip+0xd0/0x130 [ 631.386140][T25383] ? __dev_queue_xmit+0x29b/0x37f0 [ 631.386154][T25383] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 631.386169][T25383] ? __pfx_rtnl_newlink+0x10/0x10 [ 631.386191][T25383] ? __pfx_rtnl_newlink+0x10/0x10 [ 631.386205][T25383] rtnetlink_rcv_msg+0x802/0xc00 [ 631.386221][T25383] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 631.386235][T25383] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 631.386248][T25383] ? ref_tracker_free+0x689/0x830 [ 631.386260][T25383] ? __pfx_ref_tracker_free+0x10/0x10 [ 631.386275][T25383] netlink_rcv_skb+0x226/0x4a0 [ 631.386286][T25383] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 631.386301][T25383] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 631.386317][T25383] ? netlink_deliver_tap+0x2e/0x1b0 [ 631.386327][T25383] ? netlink_deliver_tap+0x2e/0x1b0 [ 631.386340][T25383] netlink_unicast+0x7bb/0x940 [ 631.386360][T25383] netlink_sendmsg+0x813/0xb40 [ 631.386375][T25383] ? __pfx_netlink_sendmsg+0x10/0x10 [ 631.386387][T25383] ? aa_sock_msg_perm+0xf1/0x1b0 [ 631.386402][T25383] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 631.386415][T25383] ? __pfx_netlink_sendmsg+0x10/0x10 [ 631.386426][T25383] ____sys_sendmsg+0x9b9/0xa20 [ 631.386437][T25383] ? __might_fault+0xaf/0x130 [ 631.386452][T25383] ? __pfx_____sys_sendmsg+0x10/0x10 [ 631.386467][T25383] ? import_iovec+0x73/0xa0 [ 631.386480][T25383] ___sys_sendmsg+0x2a5/0x360 [ 631.386489][T25383] ? __lock_acquire+0x683/0x2cd0 [ 631.386502][T25383] ? __pfx____sys_sendmsg+0x10/0x10 [ 631.386528][T25383] ? __fget_files+0x2a/0x420 [ 631.386540][T25383] ? __fget_files+0x3a2/0x420 [ 631.386557][T25383] __x64_sys_sendmsg+0x1bd/0x2a0 [ 631.386569][T25383] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 631.386584][T25383] ? __pfx_ksys_write+0x10/0x10 [ 631.386602][T25383] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 631.386613][T25383] do_syscall_64+0x174/0x580 [ 631.386624][T25383] ? trace_irq_disable+0x3b/0x140 [ 631.386638][T25383] ? clear_bhb_loop+0x40/0x90 [ 631.386650][T25383] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 631.386660][T25383] RIP: 0033:0x7f47dbf9ce59 [ 631.386671][T25383] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 631.386686][T25383] RSP: 002b:00007f47dcdd8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 631.386698][T25383] RAX: ffffffffffffffda RBX: 00007f47dc215fa0 RCX: 00007f47dbf9ce59 [ 631.386705][T25383] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000004 [ 631.386712][T25383] RBP: 00007f47dcdd8090 R08: 0000000000000000 R09: 0000000000000000 [ 631.386718][T25383] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 631.386724][T25383] R13: 00007f47dc216038 R14: 00007f47dc215fa0 R15: 00007fffdda65538 [ 631.386739][T25383] [ 631.585058][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 631.720852][T22316] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 631.951702][T25398] __nla_validate_parse: 3 callbacks suppressed [ 631.951721][T25398] netlink: 48 bytes leftover after parsing attributes in process `syz.1.5090'. [ 632.090417][T25399] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 632.367102][T25417] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5099'. [ 632.469703][T25418] FAULT_INJECTION: forcing a failure. [ 632.469703][T25418] name failslab, interval 1, probability 0, space 0, times 0 [ 632.504842][T25418] CPU: 1 UID: 0 PID: 25418 Comm: syz.2.5098 Not tainted syzkaller #0 PREEMPT(full) [ 632.504867][T25418] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 632.504878][T25418] Call Trace: [ 632.504886][T25418] [ 632.504895][T25418] dump_stack_lvl+0xe8/0x150 [ 632.504920][T25418] should_fail_ex+0x40c/0x560 [ 632.504954][T25418] should_failslab+0xa8/0x100 [ 632.504972][T25418] ? skb_clone+0x212/0x3a0 [ 632.504992][T25418] kmem_cache_alloc_noprof+0x87/0x650 [ 632.505024][T25418] skb_clone+0x212/0x3a0 [ 632.505048][T25418] __netlink_deliver_tap+0x413/0x860 [ 632.505080][T25418] ? netlink_deliver_tap+0x2e/0x1b0 [ 632.505102][T25418] netlink_deliver_tap+0x19c/0x1b0 [ 632.505130][T25418] netlink_sendskb+0x68/0x140 [ 632.505159][T25418] netlink_rcv_skb+0x2a4/0x4a0 [ 632.505179][T25418] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 632.505208][T25418] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 632.505242][T25418] ? netlink_deliver_tap+0x2e/0x1b0 [ 632.505261][T25418] ? netlink_deliver_tap+0x2e/0x1b0 [ 632.505287][T25418] netlink_unicast+0x7bb/0x940 [ 632.505324][T25418] netlink_sendmsg+0x813/0xb40 [ 632.505354][T25418] ? __pfx_netlink_sendmsg+0x10/0x10 [ 632.505378][T25418] ? aa_sock_msg_perm+0xf1/0x1b0 [ 632.505406][T25418] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 632.505428][T25418] ? __pfx_netlink_sendmsg+0x10/0x10 [ 632.505450][T25418] ____sys_sendmsg+0x9b9/0xa20 [ 632.505470][T25418] ? __might_fault+0xaf/0x130 [ 632.505500][T25418] ? __pfx_____sys_sendmsg+0x10/0x10 [ 632.505530][T25418] ? import_iovec+0x73/0xa0 [ 632.505555][T25418] ___sys_sendmsg+0x2a5/0x360 [ 632.505573][T25418] ? __lock_acquire+0x683/0x2cd0 [ 632.505598][T25418] ? __pfx____sys_sendmsg+0x10/0x10 [ 632.505654][T25418] ? __fget_files+0x2a/0x420 [ 632.505675][T25418] ? __fget_files+0x3a2/0x420 [ 632.505707][T25418] __x64_sys_sendmsg+0x1bd/0x2a0 [ 632.505730][T25418] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 632.505761][T25418] ? __pfx_ksys_write+0x10/0x10 [ 632.505796][T25418] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 632.505817][T25418] do_syscall_64+0x174/0x580 [ 632.505838][T25418] ? trace_irq_disable+0x3b/0x140 [ 632.505863][T25418] ? clear_bhb_loop+0x40/0x90 [ 632.505884][T25418] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 632.505901][T25418] RIP: 0033:0x7fb44a59ce59 [ 632.505918][T25418] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 632.505932][T25418] RSP: 002b:00007fb44b52d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 632.505951][T25418] RAX: ffffffffffffffda RBX: 00007fb44a815fa0 RCX: 00007fb44a59ce59 [ 632.505963][T25418] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000004 [ 632.505973][T25418] RBP: 00007fb44b52d090 R08: 0000000000000000 R09: 0000000000000000 [ 632.505984][T25418] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 632.505994][T25418] R13: 00007fb44a816038 R14: 00007fb44a815fa0 R15: 00007ffdff175568 [ 632.506023][T25418] [ 632.625269][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 632.695524][T25421] bond10: option ad_user_port_key: invalid value (65535) [ 632.830250][T25421] bond10: option ad_user_port_key: allowed values 0 - 1023 [ 632.856767][T25421] bond10 (unregistering): Released all slaves [ 633.088847][T25443] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 633.418460][T25454] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5111'. [ 633.664828][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 633.699068][T25467] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5116'. [ 633.781424][T25472] rds_sendmsg: 55 callbacks suppressed [ 633.781442][T25472] rdma_op ffff88802aee61f0 conn xmit_rdma 0000000000000000 [ 633.944202][T25480] FAULT_INJECTION: forcing a failure. [ 633.944202][T25480] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 633.999615][T25480] CPU: 1 UID: 0 PID: 25480 Comm: syz.1.5120 Not tainted syzkaller #0 PREEMPT(full) [ 633.999639][T25480] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 633.999649][T25480] Call Trace: [ 633.999656][T25480] [ 633.999663][T25480] dump_stack_lvl+0xe8/0x150 [ 633.999690][T25480] should_fail_ex+0x40c/0x560 [ 633.999722][T25480] _copy_to_user+0x31/0xb0 [ 633.999744][T25480] simple_read_from_buffer+0xe1/0x170 [ 633.999770][T25480] proc_fail_nth_read+0x1bb/0x230 [ 633.999796][T25480] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 633.999819][T25480] ? rw_verify_area+0x24a/0x4c0 [ 633.999840][T25480] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 633.999859][T25480] vfs_read+0x213/0xa80 [ 633.999882][T25480] ? __pfx___mutex_lock+0x10/0x10 [ 633.999901][T25480] ? __pfx_vfs_read+0x10/0x10 [ 633.999922][T25480] ? __fget_files+0x2a/0x420 [ 633.999943][T25480] ? __fget_files+0x3a2/0x420 [ 633.999959][T25480] ? __fget_files+0x2a/0x420 [ 633.999983][T25480] ksys_read+0x150/0x270 [ 634.000005][T25480] ? __pfx_ksys_read+0x10/0x10 [ 634.000032][T25480] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 634.000048][T25480] do_syscall_64+0x174/0x580 [ 634.000065][T25480] ? trace_irq_disable+0x3b/0x140 [ 634.000087][T25480] ? clear_bhb_loop+0x40/0x90 [ 634.000109][T25480] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 634.000123][T25480] RIP: 0033:0x7f219275d68e [ 634.000137][T25480] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 634.000148][T25480] RSP: 002b:00007f21936b1fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 634.000162][T25480] RAX: ffffffffffffffda RBX: 00007f21936b26c0 RCX: 00007f219275d68e [ 634.000171][T25480] RDX: 000000000000000f RSI: 00007f21936b20a0 RDI: 0000000000000005 [ 634.000182][T25480] RBP: 00007f21936b2090 R08: 0000000000000000 R09: 0000000000000000 [ 634.000192][T25480] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 634.000202][T25480] R13: 00007f2192a16038 R14: 00007f2192a15fa0 R15: 00007ffd5970e208 [ 634.000231][T25480] [ 634.704899][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 634.880937][T25513] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5128'. [ 635.120650][T25523] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.5132'. [ 635.356109][T25539] netlink: 'syz.4.5138': attribute type 1 has an invalid length. [ 635.376873][T25539] 8021q: adding VLAN 0 to HW filter on device bond5 [ 635.744820][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 635.889413][T25552] netlink: 'syz.2.5142': attribute type 1 has an invalid length. [ 635.900869][T25553] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5142'. [ 635.962641][T25553] 8021q: adding VLAN 0 to HW filter on device bond8 [ 636.086844][T25560] netlink: 'syz.4.5144': attribute type 1 has an invalid length. [ 636.170138][T25560] bond6: entered promiscuous mode [ 636.196549][T25560] 8021q: adding VLAN 0 to HW filter on device bond6 [ 636.200813][T25565] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5144'. [ 636.302845][T25570] syzkaller1: entered promiscuous mode [ 636.323027][T25570] syzkaller1: entered allmulticast mode [ 636.396179][T25574] netlink: 'syz.3.5149': attribute type 3 has an invalid length. [ 636.784898][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 637.076820][T25598] syzkaller0: entered promiscuous mode [ 637.084251][T25598] syzkaller0: entered allmulticast mode [ 637.824843][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 637.864615][T25630] netlink: 'syz.4.5162': attribute type 1 has an invalid length. [ 637.896212][T25630] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 638.042434][T25616] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5162'. [ 638.419955][T20411] nci: nci_ntf_packet: unknown ntf opcode 0x227 [ 638.620334][T25658] netlink: 204 bytes leftover after parsing attributes in process `syz.3.5174'. [ 638.786625][T25654] syzkaller0: entered promiscuous mode [ 638.801957][T25654] syzkaller0: entered allmulticast mode [ 638.864933][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 639.118541][T25681] netlink: 'syz.2.5179': attribute type 11 has an invalid length. [ 639.168931][T25646] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 639.678706][ T1708] block nbd2: Possible stuck request ffff8880277f0000: control (read@0,1024B). Runtime 60 seconds [ 639.693958][ T1708] block nbd2: Possible stuck request ffff8880277f01c0: control (read@1024,1024B). Runtime 60 seconds [ 639.730757][ T1708] block nbd2: Possible stuck request ffff8880277f0380: control (read@2048,1024B). Runtime 60 seconds [ 639.742943][ T1708] block nbd2: Possible stuck request ffff8880277f0540: control (read@3072,1024B). Runtime 60 seconds [ 639.763225][T25696] ref_ctr_offset mismatch. inode: 0x82 offset: 0x0 ref_ctr_offset(old): 0x300000006 ref_ctr_offset(new): 0x0 [ 639.904857][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 640.944936][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 641.984831][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 642.662862][T25692] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR [ 642.818935][T25730] netlink: 'syz.2.5193': attribute type 1 has an invalid length. [ 642.842405][T25730] netlink: 224 bytes leftover after parsing attributes in process `syz.2.5193'. [ 642.904000][T25730] netlink: 172 bytes leftover after parsing attributes in process `syz.2.5193'. [ 643.007154][T25738] netlink: 'syz.0.5197': attribute type 29 has an invalid length. [ 643.037736][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 643.094663][T25738] netlink: 'syz.0.5197': attribute type 29 has an invalid length. [ 643.159486][T25745] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5199'. [ 643.547456][ T25] block nbd0: Possible stuck request ffff888027765080: control (read@0,1024B). Runtime 120 seconds [ 643.558203][ T25] block nbd0: Possible stuck request ffff888027765240: control (read@1024,1024B). Runtime 120 seconds [ 643.569172][ T25] block nbd0: Possible stuck request ffff888027765400: control (read@2048,1024B). Runtime 120 seconds [ 643.580222][ T25] block nbd0: Possible stuck request ffff8880277655c0: control (read@3072,1024B). Runtime 120 seconds [ 643.692055][T25778] netlink: 204 bytes leftover after parsing attributes in process `syz.2.5207'. [ 644.064817][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 644.488145][T25805] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 645.104832][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 645.138690][T25827] syzkaller0: entered promiscuous mode [ 645.144492][T25827] syzkaller0: entered allmulticast mode [ 645.661510][T25847] tipc: Enabled bearer , priority 0 [ 645.683116][T25847] netlink: 76 bytes leftover after parsing attributes in process `syz.1.5222'. [ 645.693808][T25853] openvswitch: netlink: IPv4 tun info is not correct [ 645.701814][T25847] netlink: 84 bytes leftover after parsing attributes in process `syz.1.5222'. [ 645.762984][T25843] tipc: Disabling bearer [ 646.144953][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 646.207064][T25877] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 646.309863][T25879] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5234'. [ 646.388578][ T5630] Bluetooth: hci3: command 0x0405 tx timeout [ 646.395653][T25886] netlink: 'syz.3.5236': attribute type 1 has an invalid length. [ 646.804521][T25895] netlink: 'syz.1.5240': attribute type 24 has an invalid length. [ 647.069520][T25903] netlink: 'syz.0.5243': attribute type 1 has an invalid length. [ 647.155173][T25903] 8021q: adding VLAN 0 to HW filter on device bond7 [ 647.184966][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 647.224201][T25911] FAULT_INJECTION: forcing a failure. [ 647.224201][T25911] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 647.254736][T25911] CPU: 1 UID: 0 PID: 25911 Comm: syz.4.5245 Not tainted syzkaller #0 PREEMPT(full) [ 647.254761][T25911] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 647.254772][T25911] Call Trace: [ 647.254781][T25911] [ 647.254789][T25911] dump_stack_lvl+0xe8/0x150 [ 647.254816][T25911] should_fail_ex+0x40c/0x560 [ 647.254848][T25911] _copy_to_user+0x31/0xb0 [ 647.254871][T25911] simple_read_from_buffer+0xe1/0x170 [ 647.254898][T25911] proc_fail_nth_read+0x1bb/0x230 [ 647.254924][T25911] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 647.254950][T25911] ? rw_verify_area+0x24a/0x4c0 [ 647.254976][T25911] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 647.254996][T25911] vfs_read+0x213/0xa80 [ 647.255021][T25911] ? bpf_lsm_bpf+0x9/0x20 [ 647.255037][T25911] ? security_bpf+0x7e/0x2d0 [ 647.255062][T25911] ? __pfx_vfs_read+0x10/0x10 [ 647.255091][T25911] ? __sys_bpf+0x66e/0x950 [ 647.255119][T25911] ? __pfx___sys_bpf+0x10/0x10 [ 647.255141][T25911] ? kmem_cache_free+0x182/0x650 [ 647.255182][T25911] ksys_read+0x150/0x270 [ 647.255209][T25911] ? __pfx_ksys_read+0x10/0x10 [ 647.255241][T25911] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 647.255262][T25911] do_syscall_64+0x174/0x580 [ 647.255283][T25911] ? trace_irq_disable+0x3b/0x140 [ 647.255308][T25911] ? clear_bhb_loop+0x40/0x90 [ 647.255331][T25911] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 647.255349][T25911] RIP: 0033:0x7f47dbf5d68e [ 647.255367][T25911] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 647.255382][T25911] RSP: 002b:00007f47dcdd7fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 647.255402][T25911] RAX: ffffffffffffffda RBX: 00007f47dcdd86c0 RCX: 00007f47dbf5d68e [ 647.255416][T25911] RDX: 000000000000000f RSI: 00007f47dcdd80a0 RDI: 0000000000000004 [ 647.255427][T25911] RBP: 00007f47dcdd8090 R08: 0000000000000000 R09: 0000000000000000 [ 647.255439][T25911] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 647.255450][T25911] R13: 00007f47dc216038 R14: 00007f47dc215fa0 R15: 00007fffdda65538 [ 647.255481][T25911] [ 647.293064][T25907] 8021q: adding VLAN 0 to HW filter on device bond7 [ 647.585568][T25917] netlink: 220 bytes leftover after parsing attributes in process `syz.4.5248'. [ 647.587439][T25907] bond7: (slave wireguard0): The slave device specified does not support setting the MAC address [ 647.639397][T25907] bond7: (slave wireguard0): Error -95 calling set_mac_address [ 647.859745][T25933] --map-set only usable from mangle table [ 647.866043][T25933] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5254'. [ 648.224906][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 648.242443][T25942] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5257'. [ 648.277985][T25942] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5257'. [ 648.468136][ T5630] Bluetooth: hci3: command 0x0405 tx timeout [ 648.616573][T25962] sctp: [Deprecated]: syz.1.5265 (pid 25962) Use of int in max_burst socket option. [ 648.616573][T25962] Use struct sctp_assoc_value instead [ 649.265150][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 649.353890][T25981] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5268'. [ 649.383401][T25990] netlink: zone id is out of range [ 649.388899][T25982] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5268'. [ 649.399416][T25986] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5269'. [ 649.409507][T25990] netlink: zone id is out of range [ 649.414648][T25990] netlink: zone id is out of range [ 649.419770][T25990] netlink: zone id is out of range [ 649.446630][T25981] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5268'. [ 649.454204][T25990] netlink: zone id is out of range [ 649.460770][T25990] netlink: zone id is out of range [ 649.465889][T25990] netlink: zone id is out of range [ 649.484753][T25990] netlink: zone id is out of range [ 649.701720][T26003] netlink: 248 bytes leftover after parsing attributes in process `syz.2.5274'. [ 649.971255][T26013] netlink: 15672 bytes leftover after parsing attributes in process `syz.1.5277'. [ 649.990624][T26013] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5277'. [ 650.014407][T26013] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5277'. [ 651.170079][T26082] sctp: [Deprecated]: syz.3.5303 (pid 26082) Use of int in max_burst socket option. [ 651.170079][T26082] Use struct sctp_assoc_value instead [ 651.752925][T26117] veth0: entered promiscuous mode [ 651.772809][T26115] veth0: left promiscuous mode [ 652.144425][T26127] vlan3: entered allmulticast mode [ 652.164049][T26127] bridge5: entered allmulticast mode [ 652.206921][T26127] bridge5: port 1(erspan0) entered blocking state [ 652.234409][T26127] bridge5: port 1(erspan0) entered disabled state [ 652.255961][T26127] erspan0: entered allmulticast mode [ 652.276604][T26127] erspan0: entered promiscuous mode [ 652.290342][T26127] bridge5: port 1(erspan0) entered blocking state [ 652.296959][T26127] bridge5: port 1(erspan0) entered forwarding state [ 652.340331][T26134] tipc: Enabled bearer , priority 0 [ 652.403660][T26127] syzkaller0: entered promiscuous mode [ 652.416075][T26127] syzkaller0: entered allmulticast mode [ 652.583826][T26149] geneve4: entered promiscuous mode [ 652.613899][T26154] tipc: Resetting bearer [ 652.684355][T26125] tipc: Resetting bearer [ 652.794613][T26125] tipc: Disabling bearer [ 653.283976][T26174] vlan4: entered promiscuous mode [ 653.331407][T26174] gretap0: entered promiscuous mode [ 653.424842][ C0] net_ratelimit: 904 callbacks suppressed [ 653.424862][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 653.649726][T26186] FAULT_INJECTION: forcing a failure. [ 653.649726][T26186] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 653.662791][T26186] CPU: 1 UID: 0 PID: 26186 Comm: syz.3.5333 Not tainted syzkaller #0 PREEMPT(full) [ 653.662818][T26186] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 653.662829][T26186] Call Trace: [ 653.662837][T26186] [ 653.662846][T26186] dump_stack_lvl+0xe8/0x150 [ 653.662873][T26186] should_fail_ex+0x40c/0x560 [ 653.662905][T26186] _copy_from_user+0x2d/0xb0 [ 653.662927][T26186] ___sys_sendmsg+0x1c6/0x360 [ 653.662947][T26186] ? __lock_acquire+0x683/0x2cd0 [ 653.662971][T26186] ? __pfx____sys_sendmsg+0x10/0x10 [ 653.663025][T26186] ? __fget_files+0x2a/0x420 [ 653.663046][T26186] ? __fget_files+0x3a2/0x420 [ 653.663078][T26186] __x64_sys_sendmsg+0x1bd/0x2a0 [ 653.663105][T26186] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 653.663133][T26186] ? __pfx_ksys_write+0x10/0x10 [ 653.663167][T26186] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 653.663187][T26186] do_syscall_64+0x174/0x580 [ 653.663207][T26186] ? trace_irq_disable+0x3b/0x140 [ 653.663233][T26186] ? clear_bhb_loop+0x40/0x90 [ 653.663255][T26186] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 653.663273][T26186] RIP: 0033:0x7fee06f9ce59 [ 653.663290][T26186] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 653.663306][T26186] RSP: 002b:00007fee07e5d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 653.663327][T26186] RAX: ffffffffffffffda RBX: 00007fee07215fa0 RCX: 00007fee06f9ce59 [ 653.663341][T26186] RDX: 0000000004000000 RSI: 0000200000000200 RDI: 0000000000000005 [ 653.663353][T26186] RBP: 00007fee07e5d090 R08: 0000000000000000 R09: 0000000000000000 [ 653.663364][T26186] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 653.663375][T26186] R13: 00007fee07216038 R14: 00007fee07215fa0 R15: 00007ffd24aba398 [ 653.663406][T26186] [ 653.945580][T26190] netlink: 'syz.4.5335': attribute type 7 has an invalid length. [ 653.953339][T26190] netlink: 'syz.4.5335': attribute type 8 has an invalid length. [ 654.117040][T26190] tipc: Started in network mode [ 654.121954][T26190] tipc: Node identity ac14140f, cluster identity 4711 [ 654.128992][T26190] tipc: New replicast peer: 255.255.255.255 [ 654.135179][T26190] tipc: Enabled bearer , priority 10 [ 654.257311][T26200] syzkaller1: entered promiscuous mode [ 654.271763][T26200] syzkaller1: entered allmulticast mode [ 654.446056][T26213] netlink: 'syz.4.5341': attribute type 1 has an invalid length. [ 654.456610][T26213] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 654.464844][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 654.632453][T26222] sctp: [Deprecated]: syz.4.5343 (pid 26222) Use of struct sctp_assoc_value in delayed_ack socket option. [ 654.632453][T26222] Use struct sctp_sack_info instead [ 654.976111][T26227] syzkaller0: entered promiscuous mode [ 654.997620][T26227] syzkaller0: entered allmulticast mode [ 655.046605][T26235] FAULT_INJECTION: forcing a failure. [ 655.046605][T26235] name failslab, interval 1, probability 0, space 0, times 0 [ 655.068888][T26235] CPU: 0 UID: 0 PID: 26235 Comm: syz.1.5347 Not tainted syzkaller #0 PREEMPT(full) [ 655.068913][T26235] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 655.068925][T26235] Call Trace: [ 655.068933][T26235] [ 655.068941][T26235] dump_stack_lvl+0xe8/0x150 [ 655.068968][T26235] should_fail_ex+0x40c/0x560 [ 655.068999][T26235] should_failslab+0xa8/0x100 [ 655.069019][T26235] kmem_cache_alloc_node_noprof+0x8f/0x680 [ 655.069044][T26235] ? __alloc_skb+0x189/0x7a0 [ 655.069069][T26235] ? __alloc_skb+0x1d7/0x7a0 [ 655.069092][T26235] ? __local_bh_enable_ip+0xd0/0x130 [ 655.069115][T26235] __alloc_skb+0x1d7/0x7a0 [ 655.069143][T26235] netlink_sendmsg+0x5d4/0xb40 [ 655.069171][T26235] ? __pfx_netlink_sendmsg+0x10/0x10 [ 655.069193][T26235] ? aa_sock_msg_perm+0xf1/0x1b0 [ 655.069220][T26235] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 655.069240][T26235] ? __pfx_netlink_sendmsg+0x10/0x10 [ 655.069260][T26235] ____sys_sendmsg+0x9b9/0xa20 [ 655.069279][T26235] ? __might_fault+0xaf/0x130 [ 655.069306][T26235] ? __pfx_____sys_sendmsg+0x10/0x10 [ 655.069333][T26235] ? import_iovec+0x73/0xa0 [ 655.069356][T26235] ___sys_sendmsg+0x2a5/0x360 [ 655.069375][T26235] ? __lock_acquire+0x683/0x2cd0 [ 655.069397][T26235] ? __pfx____sys_sendmsg+0x10/0x10 [ 655.069449][T26235] ? __fget_files+0x2a/0x420 [ 655.069471][T26235] ? __fget_files+0x3a2/0x420 [ 655.069509][T26235] __x64_sys_sendmsg+0x1bd/0x2a0 [ 655.069532][T26235] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 655.069561][T26235] ? __pfx_ksys_write+0x10/0x10 [ 655.069592][T26235] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 655.069613][T26235] do_syscall_64+0x174/0x580 [ 655.069631][T26235] ? trace_irq_disable+0x3b/0x140 [ 655.069656][T26235] ? clear_bhb_loop+0x40/0x90 [ 655.069679][T26235] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 655.069697][T26235] RIP: 0033:0x7f219279ce59 [ 655.069715][T26235] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 655.069731][T26235] RSP: 002b:00007f21936b2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 655.069751][T26235] RAX: ffffffffffffffda RBX: 00007f2192a15fa0 RCX: 00007f219279ce59 [ 655.069765][T26235] RDX: 0000000004000000 RSI: 0000200000000200 RDI: 0000000000000005 [ 655.069775][T26235] RBP: 00007f21936b2090 R08: 0000000000000000 R09: 0000000000000000 [ 655.069786][T26235] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 655.069796][T26235] R13: 00007f2192a16038 R14: 00007f2192a15fa0 R15: 00007ffd5970e208 [ 655.069824][T26235] [ 655.504810][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 656.163053][ T5736] tipc: Node number set to 2886997007 [ 656.544835][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 657.584884][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 658.576549][T26250] syzkaller1: entered promiscuous mode [ 658.582032][T26250] syzkaller1: entered allmulticast mode [ 658.601411][ T4997] udevd[4997]: worker [22622] /devices/virtual/block/nbd2 is taking a long time [ 658.611884][ T4997] udevd[4997]: worker [20389] /devices/virtual/block/nbd0 is taking a long time [ 658.624947][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 658.654180][T26288] ip6tnl2: entered allmulticast mode [ 658.895468][T26303] __nla_validate_parse: 19 callbacks suppressed [ 658.895486][T26303] netlink: 148 bytes leftover after parsing attributes in process `syz.0.5361'. [ 658.911185][T26303] netlink: 116 bytes leftover after parsing attributes in process `syz.0.5361'. [ 658.920227][T26303] netlink: 24 bytes leftover after parsing attributes in process `syz.0.5361'. [ 658.929329][T26303] netlink: 148 bytes leftover after parsing attributes in process `syz.0.5361'. [ 658.938497][T26303] netlink: 148 bytes leftover after parsing attributes in process `syz.0.5361'. [ 658.939490][T26300] hmac(sha224: entered promiscuous mode [ 658.964538][T26304] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5361'. [ 658.973842][T26303] netlink: 148 bytes leftover after parsing attributes in process `syz.0.5361'. [ 659.001082][T26303] netlink: 48 bytes leftover after parsing attributes in process `syz.0.5361'. [ 659.001104][T26304] netlink: 'syz.0.5361': attribute type 8 has an invalid length. [ 659.116274][T26303] netlink: 48 bytes leftover after parsing attributes in process `syz.0.5361'. [ 659.194436][T26303] netlink: 48 bytes leftover after parsing attributes in process `syz.0.5361'. [ 659.232185][T26316] x_tables: duplicate entry at hook 1 [ 659.664927][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 659.683109][T26324] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 659.730235][T26339] FAULT_INJECTION: forcing a failure. [ 659.730235][T26339] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 659.766338][T26324] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 659.805056][T26339] CPU: 1 UID: 0 PID: 26339 Comm: syz.4.5370 Not tainted syzkaller #0 PREEMPT(full) [ 659.805080][T26339] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 659.805092][T26339] Call Trace: [ 659.805100][T26339] [ 659.805108][T26339] dump_stack_lvl+0xe8/0x150 [ 659.805134][T26339] should_fail_ex+0x40c/0x560 [ 659.805166][T26339] _copy_from_iter+0x1d3/0x1660 [ 659.805189][T26339] ? rcu_is_watching+0x15/0xb0 [ 659.805216][T26339] ? __pfx__copy_from_iter+0x10/0x10 [ 659.805231][T26339] ? kmem_cache_alloc_node_noprof+0x3ca/0x680 [ 659.805261][T26339] ? netlink_sendmsg+0x650/0xb40 [ 659.805279][T26339] ? skb_put+0x112/0x210 [ 659.805299][T26339] netlink_sendmsg+0x6c0/0xb40 [ 659.805327][T26339] ? __pfx_netlink_sendmsg+0x10/0x10 [ 659.805348][T26339] ? aa_sock_msg_perm+0xf1/0x1b0 [ 659.805373][T26339] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 659.805394][T26339] ? __pfx_netlink_sendmsg+0x10/0x10 [ 659.805415][T26339] ____sys_sendmsg+0x9b9/0xa20 [ 659.805434][T26339] ? __might_fault+0xaf/0x130 [ 659.805462][T26339] ? __pfx_____sys_sendmsg+0x10/0x10 [ 659.805490][T26339] ? import_iovec+0x73/0xa0 [ 659.805513][T26339] ___sys_sendmsg+0x2a5/0x360 [ 659.805531][T26339] ? __lock_acquire+0x683/0x2cd0 [ 659.805554][T26339] ? __pfx____sys_sendmsg+0x10/0x10 [ 659.805608][T26339] ? __fget_files+0x2a/0x420 [ 659.805629][T26339] ? __fget_files+0x3a2/0x420 [ 659.805659][T26339] __x64_sys_sendmsg+0x1bd/0x2a0 [ 659.805690][T26339] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 659.805719][T26339] ? __pfx_ksys_write+0x10/0x10 [ 659.805752][T26339] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 659.805772][T26339] do_syscall_64+0x174/0x580 [ 659.805792][T26339] ? trace_irq_disable+0x3b/0x140 [ 659.805817][T26339] ? clear_bhb_loop+0x40/0x90 [ 659.805839][T26339] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 659.805857][T26339] RIP: 0033:0x7f47dbf9ce59 [ 659.805875][T26339] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 659.805891][T26339] RSP: 002b:00007f47dcdb7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 659.805910][T26339] RAX: ffffffffffffffda RBX: 00007f47dc216090 RCX: 00007f47dbf9ce59 [ 659.805924][T26339] RDX: 0000000004000000 RSI: 0000200000000200 RDI: 0000000000000005 [ 659.805937][T26339] RBP: 00007f47dcdb7090 R08: 0000000000000000 R09: 0000000000000000 [ 659.805947][T26339] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 659.805958][T26339] R13: 00007f47dc216128 R14: 00007f47dc216090 R15: 00007fffdda65538 [ 659.805989][T26339] [ 660.402235][T26324] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 660.412538][T26324] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 660.457593][T26359] netlink: zone id is out of range [ 660.486650][T26359] netlink: zone id is out of range [ 660.497195][T26359] netlink: zone id is out of range [ 660.502331][T26368] openvswitch: netlink: Flow key attr not present in new flow. [ 660.502340][T26359] netlink: zone id is out of range [ 660.502351][T26359] netlink: zone id is out of range [ 660.549835][T26359] netlink: zone id is out of range [ 660.561748][T26359] netlink: zone id is out of range [ 660.803521][T26383] FAULT_INJECTION: forcing a failure. [ 660.803521][T26383] name failslab, interval 1, probability 0, space 0, times 0 [ 660.821736][T26383] CPU: 0 UID: 0 PID: 26383 Comm: syz.3.5383 Not tainted syzkaller #0 PREEMPT(full) [ 660.821764][T26383] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 660.821774][T26383] Call Trace: [ 660.821782][T26383] [ 660.821790][T26383] dump_stack_lvl+0xe8/0x150 [ 660.821817][T26383] should_fail_ex+0x40c/0x560 [ 660.821850][T26383] should_failslab+0xa8/0x100 [ 660.821869][T26383] ? skb_clone+0x212/0x3a0 [ 660.821888][T26383] kmem_cache_alloc_noprof+0x87/0x650 [ 660.821922][T26383] skb_clone+0x212/0x3a0 [ 660.821945][T26383] __netlink_deliver_tap+0x413/0x860 [ 660.821977][T26383] ? netlink_deliver_tap+0x2e/0x1b0 [ 660.821998][T26383] netlink_deliver_tap+0x19c/0x1b0 [ 660.822019][T26383] netlink_unicast+0x77f/0x940 [ 660.822057][T26383] netlink_sendmsg+0x813/0xb40 [ 660.822086][T26383] ? __pfx_netlink_sendmsg+0x10/0x10 [ 660.822109][T26383] ? aa_sock_msg_perm+0xf1/0x1b0 [ 660.822136][T26383] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 660.822158][T26383] ? __pfx_netlink_sendmsg+0x10/0x10 [ 660.822179][T26383] ____sys_sendmsg+0x9b9/0xa20 [ 660.822198][T26383] ? __might_fault+0xaf/0x130 [ 660.822228][T26383] ? __pfx_____sys_sendmsg+0x10/0x10 [ 660.822257][T26383] ? import_iovec+0x73/0xa0 [ 660.822281][T26383] ___sys_sendmsg+0x2a5/0x360 [ 660.822300][T26383] ? __lock_acquire+0x683/0x2cd0 [ 660.822324][T26383] ? __pfx____sys_sendmsg+0x10/0x10 [ 660.822383][T26383] ? __fget_files+0x2a/0x420 [ 660.822404][T26383] ? __fget_files+0x3a2/0x420 [ 660.822435][T26383] __x64_sys_sendmsg+0x1bd/0x2a0 [ 660.822458][T26383] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 660.822487][T26383] ? __pfx_ksys_write+0x10/0x10 [ 660.822522][T26383] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 660.822542][T26383] do_syscall_64+0x174/0x580 [ 660.822562][T26383] ? trace_irq_disable+0x3b/0x140 [ 660.822587][T26383] ? clear_bhb_loop+0x40/0x90 [ 660.822616][T26383] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 660.822634][T26383] RIP: 0033:0x7fee06f9ce59 [ 660.822652][T26383] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 660.822667][T26383] RSP: 002b:00007fee07e5d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 660.822687][T26383] RAX: ffffffffffffffda RBX: 00007fee07215fa0 RCX: 00007fee06f9ce59 [ 660.822701][T26383] RDX: 0000000004000000 RSI: 0000200000000200 RDI: 0000000000000005 [ 660.822713][T26383] RBP: 00007fee07e5d090 R08: 0000000000000000 R09: 0000000000000000 [ 660.822725][T26383] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 660.822736][T26383] R13: 00007fee07216038 R14: 00007fee07215fa0 R15: 00007ffd24aba398 [ 660.822767][T26383] [ 661.179559][T26324] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 661.191540][T26324] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 661.472070][T26324] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 661.484119][T26324] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 661.947561][T20415] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 661.962869][T20415] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 662.032273][T20425] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 662.049110][T20425] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 662.080770][T20425] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 662.090857][T20425] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 662.121900][T20440] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 662.132867][T20440] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 662.540633][T26429] netlink: 'syz.2.5398': attribute type 6 has an invalid length. [ 662.554506][T26433] debugfs: '1ùà^!‚Y‡°”õËí [ 662.554506][T26433] 3ìUH†5r' already exists in 'ieee80211' [ 663.824829][ C0] net_ratelimit: 466 callbacks suppressed [ 663.824849][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 664.038550][T26466] netlink: 'syz.4.5408': attribute type 1 has an invalid length. [ 664.249828][T26468] __nla_validate_parse: 19 callbacks suppressed [ 664.249848][T26468] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5408'. [ 664.331802][T26470] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5409'. [ 664.346671][T26473] netlink: 204 bytes leftover after parsing attributes in process `syz.2.5410'. [ 664.357628][T26470] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5409'. [ 664.756583][T26479] netlink: 'syz.3.5411': attribute type 1 has an invalid length. [ 664.764460][T26479] netlink: 'syz.3.5411': attribute type 2 has an invalid length. [ 664.778820][T26479] netlink: 'syz.3.5411': attribute type 3 has an invalid length. [ 664.865472][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 665.904913][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 666.944823][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 667.037133][T26466] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 667.116026][T26476] bond0: Caught tx_queue_len zero misconfig [ 667.283914][T26488] ip6t_REJECT: ECHOREPLY is not supported [ 667.354194][T26495] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5416'. [ 667.509469][T26506] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5418'. [ 667.549357][T26505] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5420'. [ 667.565552][T26505] bond0: option arp_all_targets: invalid value (8) [ 667.655327][T26504] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5419'. [ 667.674997][T26504] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5419'. [ 667.707544][T26514] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5422'. [ 667.763205][T26513] netlink: 'syz.3.5419': attribute type 1 has an invalid length. [ 667.984809][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 668.162270][T26539] netlink: 'syz.4.5433': attribute type 10 has an invalid length. [ 668.456919][T26544] syzkaller0: entered promiscuous mode [ 668.464146][T26544] syzkaller0: entered allmulticast mode [ 668.599010][T26555] netlink: 'syz.4.5438': attribute type 13 has an invalid length. [ 668.608301][T26555] netlink: 'syz.4.5438': attribute type 17 has an invalid length. [ 669.026912][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 669.717709][T26588] __nla_validate_parse: 4 callbacks suppressed [ 669.717729][T26588] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5446'. [ 669.746276][ T1708] block nbd2: Possible stuck request ffff8880277f0000: control (read@0,1024B). Runtime 90 seconds [ 669.758311][ T1708] block nbd2: Possible stuck request ffff8880277f01c0: control (read@1024,1024B). Runtime 90 seconds [ 669.770342][ T1708] block nbd2: Possible stuck request ffff8880277f0380: control (read@2048,1024B). Runtime 90 seconds [ 669.805726][ T1708] block nbd2: Possible stuck request ffff8880277f0540: control (read@3072,1024B). Runtime 90 seconds [ 670.065108][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 671.104815][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 671.466321][T26555] erspan0: left promiscuous mode [ 671.521697][T26555] team0: left promiscuous mode [ 671.538040][T26555] team0: left allmulticast mode [ 671.613112][T26555] xfrm0: left allmulticast mode [ 671.648398][T26555] netdevsim netdevsim4 netdevsim0: left allmulticast mode [ 671.671006][T26555] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 671.727467][T26555] ip6erspan0: left allmulticast mode [ 671.757693][T26555] 8021q: adding VLAN 0 to HW filter on device bond1 [ 671.789725][T26555] bond2: left promiscuous mode [ 671.803957][T26555] geneve3: left promiscuous mode [ 671.812427][T26555] geneve3: left allmulticast mode [ 671.828721][T26555] 8021q: adding VLAN 0 to HW filter on device bond3 [ 671.838027][T26555] gretap2: left promiscuous mode [ 671.859593][T26555] erspan1: left allmulticast mode [ 671.915506][T26555] 8021q: adding VLAN 0 to HW filter on device bond4 [ 671.928919][T26555] bridge7: left allmulticast mode [ 671.941905][T26555] bridge7: port 1(ip6gretap1) entered blocking state [ 671.949173][T26555] bridge7: port 1(ip6gretap1) entered forwarding state [ 671.990346][T26555] bond6: left promiscuous mode [ 672.005280][T26555] ip6tnl2: left allmulticast mode [ 672.074176][ T6827] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 672.091406][ T6827] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 672.111216][ T6827] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 672.132470][ T6827] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 672.144888][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 673.184818][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 673.588837][ T25] block nbd0: Possible stuck request ffff888027765080: control (read@0,1024B). Runtime 150 seconds [ 673.601666][ T25] block nbd0: Possible stuck request ffff888027765240: control (read@1024,1024B). Runtime 150 seconds [ 673.614963][ T25] block nbd0: Possible stuck request ffff888027765400: control (read@2048,1024B). Runtime 150 seconds [ 673.627341][ T25] block nbd0: Possible stuck request ffff8880277655c0: control (read@3072,1024B). Runtime 150 seconds [ 673.934876][T26673] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 674.038209][T26680] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5474'. [ 674.224792][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 674.364987][T26692] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5474'. [ 674.819707][T26694] netlink: 40 bytes leftover after parsing attributes in process `syz.3.5476'. [ 675.264799][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 675.660145][T26724] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5486'. [ 675.753254][T26724] ipvlan2: entered allmulticast mode [ 675.758635][T26724] dummy0: entered allmulticast mode [ 675.830531][T26732] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5487'. [ 675.839527][T26732] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5487'. [ 675.974416][T26736] netlink: 104 bytes leftover after parsing attributes in process `syz.0.5489'. [ 675.989380][T26737] netlink: 210320 bytes leftover after parsing attributes in process `syz.3.5488'. [ 676.069744][T26742] bridge_slave_0: left allmulticast mode [ 676.080871][T26742] bridge_slave_0: left promiscuous mode [ 676.088909][T26742] bridge0: port 1(bridge_slave_0) entered disabled state [ 676.157482][T26742] bridge_slave_1: left allmulticast mode [ 676.189786][T26742] bridge_slave_1: left promiscuous mode [ 676.202281][T26742] bridge0: port 2(bridge_slave_1) entered disabled state [ 676.216523][T26742] bond3: (slave veth0_to_bond): Releasing active interface [ 676.245011][T26742] bond0: (slave bond_slave_0): Releasing backup interface [ 676.274298][T26742] team0: Port device team_slave_0 removed [ 676.301396][T26742] team0: Port device team_slave_1 removed [ 676.307441][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 676.317282][T26742] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 676.324689][T26742] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 676.348343][T26742] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 676.401118][T26752] bridge0: entered allmulticast mode [ 676.457955][T26753] team0: Mode changed to "activebackup" [ 676.626718][T26766] netdevsim netdevsim1: Firmware load for './file0/file0/../file0' refused, path contains '..' component [ 677.333666][T26799] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5510'. [ 677.345941][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 677.522306][T26807] ip6tnl3: entered allmulticast mode [ 677.687524][T26815] x_tables: duplicate underflow at hook 3 [ 677.782232][T26819] netlink: 72 bytes leftover after parsing attributes in process `syz.2.5515'. [ 677.894818][T26821] netlink: 'syz.0.5516': attribute type 1 has an invalid length. [ 677.918322][T26821] netlink: 'syz.0.5516': attribute type 2 has an invalid length. [ 677.935228][T26821] netlink: 'syz.0.5516': attribute type 1 has an invalid length. [ 677.942993][T26821] netlink: 'syz.0.5516': attribute type 2 has an invalid length. [ 678.033549][T26831] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5519'. [ 678.054669][T26831] openvswitch: netlink: Flow actions attr not present in new flow. [ 678.080991][T26831] netlink: 280 bytes leftover after parsing attributes in process `syz.1.5519'. [ 678.384809][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 678.596228][T26849] xt_CT: You must specify a L4 protocol and not use inversions on it [ 679.424796][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 679.462358][T26881] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 680.301746][T26909] bond9: option ad_user_port_key: invalid value (65535) [ 680.308742][T26909] bond9: option ad_user_port_key: allowed values 0 - 1023 [ 680.345571][T26909] bond9 (unregistering): Released all slaves [ 680.464936][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 680.658557][ T762] bridge_slave_1: left allmulticast mode [ 680.668897][ T762] bridge_slave_1: left promiscuous mode [ 680.686148][ T762] bridge0: port 2(bridge_slave_1) entered disabled state [ 680.699303][ T762] bridge_slave_0: left allmulticast mode [ 680.715422][ T762] bridge_slave_0: left promiscuous mode [ 680.722474][ T762] bridge0: port 1(bridge_slave_0) entered disabled state [ 681.506765][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 681.523075][T26951] netlink: zone id is out of range [ 681.528300][T26951] netlink: zone id is out of range [ 681.536006][T26951] netlink: zone id is out of range [ 681.541149][T26951] netlink: zone id is out of range [ 681.556508][T26951] netlink: zone id is out of range [ 681.561711][T26951] netlink: zone id is out of range [ 681.890991][ T762] bond7 (unregistering): (slave erspan1): Releasing active interface [ 681.900456][ T762] erspan1 (unregistering): left promiscuous mode [ 682.062960][ T762] bond13 (unregistering): (slave gretap1): Releasing active interface [ 682.089252][ T762] bond13 (unregistering): (slave gretap1): the permanent HWaddr of slave - 0a:9f:18:5d:7b:af - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 682.156530][ T762] bond19 (unregistering): (slave gretap2): Releasing active interface [ 682.196368][ T762] bond10 (unregistering): (slave gre2): Releasing backup interface [ 682.204360][ T762] gre2 (unregistering): left promiscuous mode [ 682.358056][ T762] bond9 (unregistering): (slave bridge8): Releasing backup interface [ 682.390971][ T762] bond12 (unregistering): (slave bridge10): Releasing backup interface [ 682.399303][ T762] bridge10 (unregistering): left promiscuous mode [ 682.415927][ T762] bond13 (unregistering): (slave bridge12): Releasing active interface [ 682.442813][ T762] bond17 (unregistering): (slave bridge13): Releasing backup interface [ 682.451201][ T762] bond17 (unregistering): (slave bridge13): the permanent HWaddr of slave - 8a:99:a8:79:c6:69 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 682.480771][ T762] team0: Port device bridge16 removed [ 682.493638][ T762] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 682.502255][ T762] bond_slave_0: left promiscuous mode [ 682.509429][ T762] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 682.518009][ T762] bond_slave_1: left promiscuous mode [ 682.525452][ T762] .` (unregistering): (slave team0): Releasing backup interface [ 682.554272][ T762] team0: left promiscuous mode [ 682.559324][ T762] team_slave_0: left promiscuous mode [ 682.565385][ T762] team_slave_1: left promiscuous mode [ 682.574646][ T762] .` (unregistering): Released all slaves [ 682.584259][ T762] bond1 (unregistering): Released all slaves [ 682.597859][ T762] bond2 (unregistering): Released all slaves [ 682.612068][ T762] bond3 (unregistering): Released all slaves [ 682.626712][ T762] bond4 (unregistering): Released all slaves [ 682.652376][ T762] bond5 (unregistering): (slave bond6): Releasing backup interface [ 682.660317][ T762] bond6 (unregistering): left promiscuous mode [ 682.668108][ T762] bond5 (unregistering): Released all slaves [ 682.684052][ T762] bond6 (unregistering): Released all slaves [ 682.700391][ T762] bond7 (unregistering): Released all slaves [ 682.715850][ T762] bond8 (unregistering): Released all slaves [ 682.731716][ T762] bond0 (unregistering): Released all slaves [ 682.747419][ T762] bond9 (unregistering): Released all slaves [ 682.809706][ T762] bond10 (unregistering): Released all slaves [ 682.830478][ T762] bond11 (unregistering): (slave veth1): Releasing backup interface [ 682.840693][ T762] veth1: left promiscuous mode [ 682.849915][ T762] bond11 (unregistering): Released all slaves [ 682.872499][ T762] bond12 (unregistering): Released all slaves [ 682.893698][ T762] bond13 (unregistering): Released all slaves [ 682.924469][ T762] bond14 (unregistering): Released all slaves [ 682.950779][ T762] bond15 (unregistering): Released all slaves [ 682.971722][ T762] bond16 (unregistering): Released all slaves [ 682.993848][ T762] bond17 (unregistering): (slave veth1_virt_wifi): Releasing backup interface [ 683.015916][ T762] bond17 (unregistering): Released all slaves [ 683.037841][ T762] bond18 (unregistering): Released all slaves [ 683.059369][ T762] bond19 (unregistering): Released all slaves [ 683.081439][ T762] bond20 (unregistering): Released all slaves [ 683.184289][T26965] workqueue: Failed to create a rescuer kthread for wq "bond10": -EINTR [ 683.583040][T26978] netlink: 'syz.4.5553': attribute type 16 has an invalid length. [ 683.622989][T26978] netlink: 'syz.4.5553': attribute type 17 has an invalid length. [ 683.704188][T26974] bridge7: port 1(ip6gretap1) entered disabled state [ 684.231775][T26978] bridge7: port 1(ip6gretap1) entered blocking state [ 684.238610][T26978] bridge7: port 1(ip6gretap1) entered forwarding state [ 684.262316][ T762] tipc: Disabling bearer [ 684.316126][ T762] tipc: Left network mode [ 684.488379][ T762] ================================================================== [ 684.496478][ T762] BUG: KASAN: slab-use-after-free in fib_rules_lookup+0x15e/0xeb0 [ 684.504302][ T762] Read of size 8 at addr ffff888025f96a80 by task kworker/u8:7/762 [ 684.512200][ T762] [ 684.514557][ T762] CPU: 1 UID: 0 PID: 762 Comm: kworker/u8:7 Not tainted syzkaller #0 PREEMPT(full) [ 684.514580][ T762] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 684.514590][ T762] Workqueue: netns cleanup_net [ 684.514619][ T762] Call Trace: [ 684.514626][ T762] [ 684.514633][ T762] dump_stack_lvl+0xe8/0x150 [ 684.514653][ T762] print_address_description+0x55/0x1e0 [ 684.514670][ T762] ? fib_rules_lookup+0x15e/0xeb0 [ 684.514687][ T762] print_report+0x58/0x70 [ 684.514701][ T762] kasan_report+0x117/0x150 [ 684.514725][ T762] ? fib_rules_lookup+0x15e/0xeb0 [ 684.514744][ T762] ? fib_rules_lookup+0x99/0xeb0 [ 684.514762][ T762] fib_rules_lookup+0x15e/0xeb0 [ 684.514782][ T762] ? fib_rules_lookup+0x99/0xeb0 [ 684.514804][ T762] ? __pfx_fib_rules_lookup+0x10/0x10 [ 684.514823][ T762] ? l3mdev_update_flow+0x26/0x610 [ 684.514844][ T762] ? l3mdev_update_flow+0x4ad/0x610 [ 684.514866][ T762] __fib_lookup+0x106/0x210 [ 684.514883][ T762] ? unwind_next_frame+0x8f/0x2550 [ 684.514905][ T762] ? __pfx___fib_lookup+0x10/0x10 [ 684.514924][ T762] ? unwind_next_frame+0x8f/0x2550 [ 684.514946][ T762] ? fib_lookup+0x49/0x440 [ 684.514967][ T762] ? ip_route_output_key_hash_rcu+0x274/0x2720 [ 684.514994][ T762] ip_route_output_key_hash_rcu+0x294/0x2720 [ 684.515022][ T762] ? ip_route_output_key_hash+0xd8/0x2a0 [ 684.515045][ T762] ? ip_route_output_key_hash+0xd8/0x2a0 [ 684.515069][ T762] ip_route_output_key_hash+0x18d/0x2a0 [ 684.515095][ T762] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 684.515121][ T762] ? lock_acquire+0x106/0x350 [ 684.515143][ T762] ip_route_output_flow+0x2a/0x150 [ 684.515167][ T762] ip4_datagram_release_cb+0x89d/0xbe0 [ 684.515190][ T762] ? ip4_datagram_release_cb+0xa2/0xbe0 [ 684.515214][ T762] ? __pfx_ip4_datagram_release_cb+0x10/0x10 [ 684.515235][ T762] ? do_raw_spin_lock+0x12b/0x2f0 [ 684.515262][ T762] ? release_sock+0x2f/0x260 [ 684.515286][ T762] release_sock+0x206/0x260 [ 684.515311][ T762] inet_shutdown+0x2b1/0x390 [ 684.515337][ T762] udp_tunnel_sock_release+0x6d/0x80 [ 684.515362][ T762] fou_exit_net+0x17d/0x1f0 [ 684.515383][ T762] ops_undo_list+0x43d/0x8d0 [ 684.515411][ T762] ? __pfx_ops_undo_list+0x10/0x10 [ 684.515436][ T762] ? idr_destroy+0x218/0x290 [ 684.515453][ T762] ? do_raw_spin_unlock+0xf5/0x210 [ 684.515478][ T762] cleanup_net+0x572/0x810 [ 684.515505][ T762] ? __pfx_cleanup_net+0x10/0x10 [ 684.515531][ T762] ? rcu_is_watching+0x15/0xb0 [ 684.515560][ T762] ? process_scheduled_works+0xa20/0x14e0 [ 684.515578][ T762] process_scheduled_works+0xa8e/0x14e0 [ 684.515609][ T762] ? __pfx_process_scheduled_works+0x10/0x10 [ 684.515630][ T762] ? assign_work+0x3cf/0x5d0 [ 684.515649][ T762] worker_thread+0xa47/0xfb0 [ 684.515674][ T762] ? __kthread_parkme+0x71/0x1f0 [ 684.515699][ T762] kthread+0x389/0x470 [ 684.515720][ T762] ? __pfx_worker_thread+0x10/0x10 [ 684.515737][ T762] ? __pfx_kthread+0x10/0x10 [ 684.515759][ T762] ret_from_fork+0x514/0xb70 [ 684.515779][ T762] ? __pfx_ret_from_fork+0x10/0x10 [ 684.515796][ T762] ? __switch_to+0xc89/0x1420 [ 684.515819][ T762] ? __pfx_kthread+0x10/0x10 [ 684.515838][ T762] ret_from_fork_asm+0x1a/0x30 [ 684.515862][ T762] [ 684.515869][ T762] [ 684.624805][ C0] net_ratelimit: 471 callbacks suppressed [ 684.624823][ C0] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 684.624925][ T762] Allocated by task 5646: [ 684.624937][ T762] kasan_save_track+0x3e/0x80 [ 684.847793][ T762] __kasan_kmalloc+0x93/0xb0 [ 684.852381][ T762] __kmalloc_node_track_caller_noprof+0x4d7/0x7b0 [ 684.858787][ T762] kmemdup_noprof+0x2b/0x70 [ 684.863279][ T762] fib_rules_register+0x2f/0x400 [ 684.868208][ T762] fib4_rules_init+0x21/0x160 [ 684.872874][ T762] fib_net_init+0x17a/0x3e0 [ 684.877366][ T762] ops_init+0x35d/0x5d0 [ 684.881513][ T762] setup_net+0x118/0x350 [ 684.885751][ T762] copy_net_ns+0x4f9/0x720 [ 684.890165][ T762] create_new_namespaces+0x3f0/0x6b0 [ 684.895438][ T762] unshare_nsproxy_namespaces+0x149/0x190 [ 684.901156][ T762] ksys_unshare+0x57d/0xa00 [ 684.905656][ T762] __x64_sys_unshare+0x38/0x50 [ 684.910417][ T762] do_syscall_64+0x174/0x580 [ 684.914995][ T762] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 684.920881][ T762] [ 684.923188][ T762] Freed by task 15: [ 684.926975][ T762] kasan_save_track+0x3e/0x80 [ 684.931657][ T762] kasan_save_free_info+0x40/0x50 [ 684.936687][ T762] __kasan_slab_free+0x5c/0x80 [ 684.941453][ T762] __rcu_free_sheaf_prepare+0x12d/0x2a0 [ 684.946988][ T762] rcu_free_sheaf+0x31/0x200 [ 684.951572][ T762] rcu_core+0x78b/0x10a0 [ 684.955811][ T762] handle_softirqs+0x225/0x840 [ 684.960575][ T762] run_ksoftirqd+0x36/0x60 [ 684.964982][ T762] smpboot_thread_fn+0x57c/0xa80 [ 684.969919][ T762] kthread+0x389/0x470 [ 684.973980][ T762] ret_from_fork+0x514/0xb70 [ 684.978561][ T762] ret_from_fork_asm+0x1a/0x30 [ 684.983319][ T762] [ 684.985633][ T762] The buggy address belongs to the object at ffff888025f96a00 [ 684.985633][ T762] which belongs to the cache kmalloc-192 of size 192 [ 684.999683][ T762] The buggy address is located 128 bytes inside of [ 684.999683][ T762] freed 192-byte region [ffff888025f96a00, ffff888025f96ac0) [ 685.013470][ T762] [ 685.015784][ T762] The buggy address belongs to the physical page: [ 685.022177][ T762] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x25f96 [ 685.030938][ T762] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 685.038035][ T762] page_type: f5(slab) [ 685.042004][ T762] raw: 00fff00000000000 ffff88813fe163c0 dead000000000100 dead000000000122 [ 685.050578][ T762] raw: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000 [ 685.059144][ T762] page dumped because: kasan: bad access detected [ 685.065555][ T762] page_owner tracks the page as allocated [ 685.071272][ T762] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xd2cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 5304390804, free_ts 4798291068 [ 685.091148][ T762] post_alloc_hook+0x22d/0x280 [ 685.095916][ T762] get_page_from_freelist+0x24ae/0x2530 [ 685.101459][ T762] __alloc_frozen_pages_noprof+0x18d/0x380 [ 685.107258][ T762] allocate_slab+0x77/0x660 [ 685.111749][ T762] refill_objects+0x336/0x3d0 [ 685.116412][ T762] __pcs_replace_empty_main+0x320/0x720 [ 685.121946][ T762] __kmalloc_cache_noprof+0x388/0x660 [ 685.127305][ T762] call_usermodehelper_setup+0x8e/0x270 [ 685.132839][ T762] kobject_uevent_env+0x662/0x9e0 [ 685.137853][ T762] device_add+0x544/0xb90 [ 685.142171][ T762] device_create+0x269/0x300 [ 685.146745][ T762] bdi_register_va+0x9c/0x740 [ 685.151408][ T762] bdi_register+0xe2/0x140 [ 685.155812][ T762] __add_disk+0x7da/0xe30 [ 685.160131][ T762] add_disk_fwnode+0x149/0x4b0 [ 685.164886][ T762] brd_alloc+0x5a9/0x7c0 [ 685.169122][ T762] page last free pid 24 tgid 24 stack trace: [ 685.175089][ T762] __free_frozen_pages+0xc0d/0xd20 [ 685.180199][ T762] vfree+0x1fd/0x330 [ 685.184087][ T762] delayed_vfree_work+0x55/0x80 [ 685.188928][ T762] process_scheduled_works+0xa8e/0x14e0 [ 685.194464][ T762] worker_thread+0xa47/0xfb0 [ 685.199043][ T762] kthread+0x389/0x470 [ 685.203101][ T762] ret_from_fork+0x514/0xb70 [ 685.207678][ T762] ret_from_fork_asm+0x1a/0x30 [ 685.212432][ T762] [ 685.214741][ T762] Memory state around the buggy address: [ 685.220361][ T762] ffff888025f96980: 00 00 00 00 00 00 00 05 fc fc fc fc fc fc fc fc [ 685.228422][ T762] ffff888025f96a00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 685.236475][ T762] >ffff888025f96a80: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 685.244523][ T762] ^ [ 685.248577][ T762] ffff888025f96b00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 685.256624][ T762] ffff888025f96b80: 00 00 00 00 fc fc fc fc fc fc fc fc fc fc fc fc [ 685.264666][ T762] ================================================================== [ 685.320759][ T762] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 685.328002][ T762] CPU: 1 UID: 0 PID: 762 Comm: kworker/u8:7 Not tainted syzkaller #0 PREEMPT(full) [ 685.337386][ T762] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 685.347452][ T762] Workqueue: netns cleanup_net [ 685.352235][ T762] Call Trace: [ 685.355519][ T762] [ 685.358455][ T762] vpanic+0x56c/0xa60 [ 685.362445][ T762] ? rcu_is_watching+0x15/0xb0 [ 685.367205][ T762] ? __pfx_vpanic+0x10/0x10 [ 685.371706][ T762] panic+0xc5/0xd0 [ 685.375419][ T762] ? __pfx_panic+0x10/0x10 [ 685.379836][ T762] ? fib_rules_lookup+0x15e/0xeb0 [ 685.384857][ T762] ? fib_rules_lookup+0x15e/0xeb0 [ 685.389874][ T762] check_panic_on_warn+0x89/0xb0 [ 685.394809][ T762] ? fib_rules_lookup+0x15e/0xeb0 [ 685.399831][ T762] end_report+0x73/0x170 [ 685.404071][ T762] ? fib_rules_lookup+0x15e/0xeb0 [ 685.409087][ T762] kasan_report+0x128/0x150 [ 685.413588][ T762] ? fib_rules_lookup+0x15e/0xeb0 [ 685.418604][ T762] ? fib_rules_lookup+0x99/0xeb0 [ 685.423532][ T762] fib_rules_lookup+0x15e/0xeb0 [ 685.428375][ T762] ? fib_rules_lookup+0x99/0xeb0 [ 685.433306][ T762] ? __pfx_fib_rules_lookup+0x10/0x10 [ 685.438667][ T762] ? l3mdev_update_flow+0x26/0x610 [ 685.443770][ T762] ? l3mdev_update_flow+0x4ad/0x610 [ 685.448960][ T762] __fib_lookup+0x106/0x210 [ 685.453458][ T762] ? unwind_next_frame+0x8f/0x2550 [ 685.458558][ T762] ? __pfx___fib_lookup+0x10/0x10 [ 685.463580][ T762] ? unwind_next_frame+0x8f/0x2550 [ 685.468695][ T762] ? fib_lookup+0x49/0x440 [ 685.473110][ T762] ? ip_route_output_key_hash_rcu+0x274/0x2720 [ 685.479271][ T762] ip_route_output_key_hash_rcu+0x294/0x2720 [ 685.485339][ T762] ? ip_route_output_key_hash+0xd8/0x2a0 [ 685.490994][ T762] ? ip_route_output_key_hash+0xd8/0x2a0 [ 685.496719][ T762] ip_route_output_key_hash+0x18d/0x2a0 [ 685.502273][ T762] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 685.508359][ T762] ? lock_acquire+0x106/0x350 [ 685.513038][ T762] ip_route_output_flow+0x2a/0x150 [ 685.518150][ T762] ip4_datagram_release_cb+0x89d/0xbe0 [ 685.523614][ T762] ? ip4_datagram_release_cb+0xa2/0xbe0 [ 685.529166][ T762] ? __pfx_ip4_datagram_release_cb+0x10/0x10 [ 685.535145][ T762] ? do_raw_spin_lock+0x12b/0x2f0 [ 685.540181][ T762] ? release_sock+0x2f/0x260 [ 685.544773][ T762] release_sock+0x206/0x260 [ 685.549279][ T762] inet_shutdown+0x2b1/0x390 [ 685.553869][ T762] udp_tunnel_sock_release+0x6d/0x80 [ 685.559150][ T762] fou_exit_net+0x17d/0x1f0 [ 685.563648][ T762] ops_undo_list+0x43d/0x8d0 [ 685.568232][ T762] ? __pfx_ops_undo_list+0x10/0x10 [ 685.573337][ T762] ? idr_destroy+0x218/0x290 [ 685.577916][ T762] ? do_raw_spin_unlock+0xf5/0x210 [ 685.583111][ T762] cleanup_net+0x572/0x810 [ 685.587523][ T762] ? __pfx_cleanup_net+0x10/0x10 [ 685.592462][ T762] ? rcu_is_watching+0x15/0xb0 [ 685.597734][ T762] ? process_scheduled_works+0xa20/0x14e0 [ 685.603441][ T762] process_scheduled_works+0xa8e/0x14e0 [ 685.608981][ T762] ? __pfx_process_scheduled_works+0x10/0x10 [ 685.614957][ T762] ? assign_work+0x3cf/0x5d0 [ 685.619545][ T762] worker_thread+0xa47/0xfb0 [ 685.624125][ T762] ? __kthread_parkme+0x71/0x1f0 [ 685.629052][ T762] kthread+0x389/0x470 [ 685.633111][ T762] ? __pfx_worker_thread+0x10/0x10 [ 685.638207][ T762] ? __pfx_kthread+0x10/0x10 [ 685.642789][ T762] ret_from_fork+0x514/0xb70 [ 685.647369][ T762] ? __pfx_ret_from_fork+0x10/0x10 [ 685.652479][ T762] ? __switch_to+0xc89/0x1420 [ 685.657166][ T762] ? __pfx_kthread+0x10/0x10 [ 685.661759][ T762] ret_from_fork_asm+0x1a/0x30 [ 685.666524][ T762] [ 685.669831][ T762] Kernel Offset: disabled [ 685.674151][ T762] Rebooting in 86400 seconds..