last executing test programs:

2.685864275s ago: executing program 2 (id=13688):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, 0x0, 0xc004)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x5, &(0x7f0000000340)=0x6, 0x4)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r3=>0x0})
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0)
socket$unix(0x1, 0x5, 0x0)
r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xaded, 0x4000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
r6 = socket$kcm(0x11, 0x200000000000002, 0x300)
setsockopt$sock_attach_bpf(r6, 0x107, 0x8, &(0x7f00000000c0), 0x8)
recvmsg$kcm(r6, &(0x7f0000001480)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xffffffef}, 0x0)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r7, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59)
connect$inet6(r7, &(0x7f0000000200)={0xa, 0x4e22, 0xb6, @ipv4={'\x00', '\xff\xff', @local}, 0xc4ca}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r7, 0x6, 0x1f, &(0x7f0000000040), 0x3)
setsockopt$inet6_tcp_TLS_TX(r7, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, "25fd25990fe381b9", "f511161d94f179ecf85eb61b6a4762eb", "1e59ddbe", "06ed010001809f9b"}, 0x28)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r7, 0x6, 0x14, &(0x7f00000000c0)=0x2, 0x4)
sendto$inet6(r7, &(0x7f0000000300)='S', 0xfffffffffffffe94, 0xc000, 0x0, 0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'bridge0\x00'})
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r8, &(0x7f0000000540)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000500)={&(0x7f0000000440)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="000829a07125e5e211e571bd7000fedbdf2504001f0008000300040000006cfa6f7967bc5238080004000600000008000400d000000005000500f8000000"], 0x4c}, 0x1, 0x0, 0x0, 0x4000010}, 0x4040)
setsockopt$sock_int(r7, 0x1, 0x20, &(0x7f0000000000)=0x2100e6d4, 0x4)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x20, r9, 0x1, 0x72bd25, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x0)

2.506774394s ago: executing program 0 (id=13691):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000002000010000000000000000000a004000080000000000000014000200fc02"], 0x30}, 0x1, 0x0, 0x0, 0xc011}, 0x40000)
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000140)={<r1=>0x0, @multicast1, @dev}, &(0x7f0000000180)=0xc)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=@newlink={0x5c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r1, 0x10000, 0x10000}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private2}]}}}]}, 0x5c}}, 0x0)
r2 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000ac0)=ANY=[@ANYBLOB="b700000081000000bfa30000000000000703000006feffff720af0fff8ffffff71a4f0ff000000002d030000000000001d400500000000004704000001ed00007203feff000000001d44000000000000db0a00fee10000007303f10100000000b500f3ff000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c7bc46dd12305a1ae9dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ad1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef67"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48)
ioctl$NS_GET_OWNER_UID(r2, 0xb704, &(0x7f0000000040))
sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0x4c, 0x2, 0x8, 0x201, 0x0, 0x0, {0x2}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x806}, @CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_SYN_SENT={0x8, 0x1, 0x1, 0x0, 0x1000}, @CTA_TIMEOUT_TCP_SYN_RECV={0x8, 0x2, 0x1, 0x0, 0x74f0}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x892f}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4004004}, 0x48845)

2.348448107s ago: executing program 0 (id=13693):
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_xfrm(0x10, 0x3, 0x6)
socket$nl_xfrm(0x10, 0x3, 0x6)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00')
syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/net\x00')
socket$igmp(0x2, 0x3, 0x2)
socket$inet(0x2, 0x4000000000000001, 0x0)
socket$netlink(0x10, 0x3, 0x0)
socket$packet(0x11, 0x2, 0x300)
r0 = socket$kcm(0x21, 0x2, 0xa)
sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev={0xfe, 0x80, '\x00', 0x22}, 0x8000000}}, 0x80, 0x0, 0x0, &(0x7f0000000500)=[{0x18, 0x110, 0xc, "aa"}, {0x18, 0x110, 0x1, '\x00'}, {0x10, 0x115}], 0x40}, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
socket$packet(0x11, 0x2, 0x300)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x9, 0x6, 0x201, 0x0, 0x0, {0x5, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080)

2.165775568s ago: executing program 0 (id=13694):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xa, 0xe, &(0x7f0000000740)=ANY=[@ANYBLOB="bf16000000000000b70100003b0204007b1ae0ff00000000b7010000000000007b1ae8ff000000007b1af0ff00000000bf61000000000000b702000001000000bfa300000000000007030000e0ffffffb7040000180000008500000049000000b70000000000000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r0, 0x0, 0x36, 0x0, &(0x7f0000000680)="52540012345652540012345786dd6000000000003b400000000000000060000000000000000100000000000000000000000000000001", 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

2.129904623s ago: executing program 2 (id=13695):
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000140)=ANY=[@ANYBLOB="7400000002060104000000000000000006000002050005000200000005000400000000001400078008001240001000000800134000005bad050001000700000005000100070000000900020073"], 0x74}}, 0x4000004)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006"], 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48040}, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a03000000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140004"], 0xa4}}, 0x0)

2.109969427s ago: executing program 3 (id=13696):
bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="0a000000040000000800"], 0x50)
r0 = socket$nl_route(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'syzkaller0\x00'})
socket$inet(0x2, 0x2, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x40010)
sendmsg$IPVS_CMD_NEW_SERVICE(r1, 0x0, 0x0)
shutdown(0xffffffffffffffff, 0x56660e91fa37aa0c)
sendmsg$IPVS_CMD_NEW_SERVICE(r1, 0x0, 0x0)
nanosleep(&(0x7f0000000300)={0x0, 0x5f5e100}, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r3 = openat$cgroup_type(r2, &(0x7f0000000100), 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000740)=@raw={'raw\x00', 0x4001, 0x3, 0x298, 0x0, 0xb, 0x148, 0x128, 0x148, 0x200, 0x240, 0x240, 0x200, 0x215, 0x3, 0x0, {[{{@ip={@local, @multicast1, 0x0, 0xffffff00, 'ip6erspan0\x00', 'nr0\x00', {}, {0xff}, 0x21, 0x0, 0x10}, 0x2e8, 0xe8, 0x128, 0x0, {0xff0f000000000000}, [@common=@inet=@multiport={{0x50}, {0x0, 0xfc, [0x4e24, 0x4e23, 0x4e22, 0x4e22, 0x4e24, 0x4e24, 0x4e22, 0x4e23, 0x4e21, 0x4e20, 0x3, 0x4e22, 0x4e23, 0xeac, 0x4e24], [0x1, 0x0, 0x43, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x41, 0x0, 0xfd, 0x0, 0xfc]}}, @inet=@rpfilter={{0x28}, {0xa}}]}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x3, 0x6, 0x1000, 0x9, 0xdde, 0xfffffff7, 0x56, 0x5]}}}, {{@uncond, 0xec010000, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x4, 0x5, 0x22000000, 0xfffffffa, '\x00', 'syz1\x00', {0x3}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2f8)
pread64(r3, &(0x7f0000000680)=""/45, 0x2d, 0x9)

2.032681413s ago: executing program 0 (id=13697):
close(0xffffffffffffffff)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000600)={0xffffffffffffffff, 0x58, &(0x7f0000000580)}, 0x10)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={0x0, 0x0, 0x5a}, 0x28)
r0 = socket$inet6_icmp(0xa, 0x2, 0x3a)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB=' \x00\x00\x00'], 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x880)
bind$inet6(r0, &(0x7f0000000240)={0xa, 0x2, 0x1000, @empty}, 0x1c)
read(r0, &(0x7f00000010c0)=""/4096, 0x1000)
socket$nl_route(0x10, 0x3, 0x0)
syz_emit_ethernet(0x136, &(0x7f0000000840)=ANY=[@ANYBLOB="0180c2000003aaaaaaaaaaaa88a83d0081003f0086dd6100000000f83aff00000000000000000000ffffac1e0001ff0200000000000000000000000000013104040208380200fc000000000000000000000000000001200100000000000000000000000000006c06040302000f00fe8000000000000000000000000006bbfc010000000000000000000000000000ff0100000000000000000000000000012b02040106780900ff02000000000000000000000000000102002c0165000000750a000700000000fc010000000000000000000000000000fc010000000000000000000000000001"], 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x13, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000007008500000073"], &(0x7f0000000040)='GPL\x00', 0x9, 0x0, 0x0, 0x41100, 0x3c, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r2}, 0xc)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000200)=ANY=[], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000dc0)={0x1f, 0x5, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a800000085000000d000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000b80)=@raw={'raw\x00', 0x3c1, 0x3, 0x550, 0x0, 0x18c, 0x203, 0x0, 0x19030000, 0x480, 0x2e0, 0x2e0, 0x480, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x300, 0x348, 0xf0030000, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x5}, {0x4d}, {}, {}, {0x60}, {}, {}, {}, {}, {0x0, 0x0, 0x6}, {0x2}, {0x0, 0x7}, {0x0, 0x80}, {}, {0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {0x16, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {0xffff, 0x4}, {}, {}, {}, {}, {}, {}, {0x0, 0x80, 0x0, 0xffffffff}, {}, {}, {0xffff}, {}, {}, {0x2, 0xb8}, {}, {}, {}, {0x0, 0x10}, {0x0, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {0x0, 0x3}, {}, {}, {}, {}, {0x4000, 0x0, 0x80}, {}, {}, {}, {0x0, 0x0, 0x7, 0x10000}, {0x0, 0x0, 0x0, 0x200000}, {}, {}, {0x0, 0x0, 0x0, 0xffff8acc}, {0x3, 0x0, 0x0, 0x1}, {}, {0x2000}]}}, @common=@mh={{0x28}, {"e4bd"}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@private, 'veth1_macvtap\x00', {0xffff}}}}, {{@uncond, 0x0, 0xd0, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x10, 0x1a, 0xfffffff6, 0x81, 'syz1\x00', 'syz1\x00', {0xfffffffffffffffc}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5b0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r3, 0x0, 0x0, 0x35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
r5 = socket$inet6_sctp(0xa, 0x5, 0x84)
close(0x3)
r6 = socket(0x2, 0x80805, 0x0)
shutdown(0xffffffffffffffff, 0x0)
close(0x3)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000200)={<r7=>0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x7a, &(0x7f0000000340)={r7, @in6={{0xa, 0x3, 0x4, @rand_addr=' \x01\x00'}}}, &(0x7f0000000040)=0x84)
sendmmsg$inet_sctp(r6, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0)
setsockopt(r5, 0x84, 0x7f, &(0x7f00000001c0)="020000000080ffff", 0x8)
ioctl$BTRFS_IOC_QUOTA_CTL(r0, 0xc0109428, &(0x7f0000000100)={0x2, 0x6})

2.031742074s ago: executing program 2 (id=13698):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c000280"], 0x64}}, 0x0)
mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x6, 0x4, 0x4, 0x4, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x14, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001980)={r2, 0x20, &(0x7f0000001880)={0x0, 0x0, 0x0, &(0x7f0000000880)=""/4096, 0x1000}}, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc) (async)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c000280"], 0x64}}, 0x0) (async)
mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) (async)
bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x6, 0x4, 0x4, 0x4, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x50) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x14, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001980)={r2, 0x20, &(0x7f0000001880)={0x0, 0x0, 0x0, &(0x7f0000000880)=""/4096, 0x1000}}, 0x10) (async)

1.907378692s ago: executing program 2 (id=13699):
bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="0a000000040000000800"], 0x50)
r0 = socket$nl_route(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'syzkaller0\x00'})
socket$inet(0x2, 0x2, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x40010)
sendmsg$IPVS_CMD_NEW_SERVICE(r1, 0x0, 0x0)
shutdown(0xffffffffffffffff, 0x56660e91fa37aa0c)
sendmsg$IPVS_CMD_NEW_SERVICE(r1, 0x0, 0x0)
nanosleep(&(0x7f0000000300)={0x0, 0x5f5e100}, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r3 = openat$cgroup_type(r2, &(0x7f0000000100), 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000740)=@raw={'raw\x00', 0x4001, 0x3, 0x298, 0x0, 0xb, 0x148, 0x128, 0x148, 0x200, 0x240, 0x240, 0x200, 0x215, 0x3, 0x0, {[{{@ip={@local, @multicast1, 0x0, 0xffffff00, 'ip6erspan0\x00', 'nr0\x00', {}, {0xff}, 0x21, 0x0, 0x10}, 0x2e8, 0xe8, 0x128, 0x0, {0xff0f000000000000}, [@common=@inet=@multiport={{0x50}, {0x0, 0xfc, [0x4e24, 0x4e23, 0x4e22, 0x4e22, 0x4e24, 0x4e24, 0x4e22, 0x4e23, 0x4e21, 0x4e20, 0x3, 0x4e22, 0x4e23, 0xeac, 0x4e24], [0x1, 0x0, 0x43, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x41, 0x0, 0xfd, 0x0, 0xfc]}}, @inet=@rpfilter={{0x28}, {0xa}}]}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x3, 0x6, 0x1000, 0x9, 0xdde, 0xfffffff7, 0x56, 0x5]}}}, {{@uncond, 0xec010000, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x4, 0x5, 0x22000000, 0xfffffffa, '\x00', 'syz1\x00', {0x3}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2f8)
pread64(r3, &(0x7f0000000680)=""/45, 0x2d, 0x9) (fail_nth: 2)

1.906524728s ago: executing program 3 (id=13700):
bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="0a000000040000000800"], 0x50)
r0 = socket$nl_route(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'syzkaller0\x00'})
socket$inet(0x2, 0x2, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
ppoll(&(0x7f0000000000)=[{r2, 0x24}], 0x1, &(0x7f0000000040)={0x0, 0x989680}, 0x0, 0x0)
sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x40010)
sendmsg$IPVS_CMD_NEW_SERVICE(r1, 0x0, 0x0)
shutdown(0xffffffffffffffff, 0x56660e91fa37aa0c)
sendmsg$IPVS_CMD_NEW_SERVICE(r1, 0x0, 0x0)
nanosleep(&(0x7f0000000300)={0x0, 0x5f5e100}, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r4 = openat$cgroup_type(r3, &(0x7f0000000100), 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000740)=@raw={'raw\x00', 0x4001, 0x3, 0x298, 0x0, 0xb, 0x148, 0x128, 0x148, 0x200, 0x240, 0x240, 0x200, 0x215, 0x3, 0x0, {[{{@ip={@local, @multicast1, 0x0, 0xffffff00, 'ip6erspan0\x00', 'nr0\x00', {}, {0xff}, 0x21, 0x0, 0x10}, 0x2e8, 0xe8, 0x128, 0x0, {0xff0f000000000000}, [@common=@inet=@multiport={{0x50}, {0x0, 0xfc, [0x4e24, 0x4e23, 0x4e22, 0x4e22, 0x4e24, 0x4e24, 0x4e22, 0x4e23, 0x4e21, 0x4e20, 0x3, 0x4e22, 0x4e23, 0xeac, 0x4e24], [0x1, 0x0, 0x43, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x41, 0x0, 0xfd, 0x0, 0xfc]}}, @inet=@rpfilter={{0x28}, {0xa}}]}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x3, 0x6, 0x1000, 0x9, 0xdde, 0xfffffff7, 0x56, 0x5]}}}, {{@uncond, 0xec010000, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x4, 0x5, 0x22000000, 0xfffffffa, '\x00', 'syz1\x00', {0x3}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2f8)
pread64(r4, &(0x7f0000000680)=""/45, 0x2d, 0x9)

1.506997322s ago: executing program 2 (id=13701):
r0 = socket(0x15, 0x5, 0x0)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt(r1, 0x84, 0x80, &(0x7f0000000000)='\x00\x00\x00\x00\t\x00\x00\x00', 0x8)
r2 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000f80)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10)
getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r3=>0x0}, &(0x7f0000001080)=0x8)
setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r1, 0x84, 0x5, &(0x7f0000001840)={r3, @in6={{0xa, 0x4e22, 0x1, @remote, 0x4}}}, 0x84)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x100000a, 0x31, r0, 0x8269000)
sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, 0x0, 0x80)
r4 = socket$kcm(0x21, 0x2, 0xa)
sendmsg$kcm(r4, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000100100000c000000aa00000034f1a29acf"], 0x18}, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_queued_recursive\x00', 0x275a, 0x0)
write$cgroup_pid(r5, &(0x7f0000000200), 0x12)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r5, 0x0)
getsockopt(r0, 0x200000000114, 0x2710, &(0x7f0000c35fff), &(0x7f0000000000))
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x979b5000)
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x7000008, 0x13, r0, 0x80000000)
bind$inet(0xffffffffffffffff, 0x0, 0x0)

1.506651213s ago: executing program 3 (id=13702):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'geneve0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="500000001000010400000000ffdbdf2500000000", @ANYRES32=r2, @ANYBLOB="3a2205000a010000300012800b00010067656e6576650000200002"], 0x50}, 0x1, 0x0, 0x0, 0x40680c5}, 0x40)

1.354720346s ago: executing program 3 (id=13705):
r0 = socket(0x2, 0x80805, 0x0)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001000010029bd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="211000000300000008001b000000000008000400d3ff"], 0x30}, 0x1, 0x0, 0x0, 0x801}, 0x4000000)
shutdown(r1, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000180)={<r3=>0x0, 0x10, &(0x7f0000000240)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000001000)={r3, 0x3}, 0x8)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x2481, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r5)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x4, 0x7fffffffffffffff, 0x400, 0x1000, 0xc, 0x215}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = socket$netlink(0x10, 0x3, 0x4)
bind$netlink(r9, &(0x7f0000000080)={0x10, 0x0, 0x25dfdbfb, 0x8}, 0xc)
r10 = socket$nl_route(0x10, 0x3, 0x0)
r11 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000040)={'lo\x00', <r12=>0x0})
sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x134, 0x24, 0x4ee4e6a52ff56541, 0x8000000, 0x0, {0x0, 0x0, 0x0, r12, {0x0, 0xffe0}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x104, 0x2, {{0xfffffffe, 0x2, 0x40, 0xa, 0xe7, 0xcc36}, [@TCA_NETEM_LOSS={0xb8, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x40, 0xf, 0xa, 0x4006559, 0x8}}, @NETEM_LOSS_GE={0x13, 0x2, {0x5, 0xfffffffa, 0xa, 0x6}}, @NETEM_LOSS_GI={0x18, 0x1, {0xd82c, 0x8, 0x6, 0x0, 0xc5e0}}, @NETEM_LOSS_GI={0x18, 0x1, {0x1000, 0x2, 0x0, 0x8, 0x1}}, @NETEM_LOSS_GI={0x9, 0x1, {0x4, 0x4, 0x9de, 0x9, 0xb502}}, @NETEM_LOSS_GI={0x18, 0x1, {0x8, 0x0, 0xfffff001, 0xf6, 0x3}}, @NETEM_LOSS_GE={0x14, 0x2, {0x5b, 0x20000, 0x3, 0xa}}, @NETEM_LOSS_GE={0x14, 0x2, {0x2, 0x40003, 0x0, 0x6}}]}, @TCA_NETEM_JITTER64={0xc, 0xb, 0x6}, @TCA_NETEM_CORRUPT={0xc, 0x4, {0x40009, 0xae}}, @TCA_NETEM_LATENCY64={0xc, 0xa, 0x100020}, @TCA_NETEM_LATENCY64={0xc, 0xa, 0x1}]}}}]}, 0x134}, 0x1, 0x0, 0x0, 0x4546cfee17049510}, 0x0)
r13 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r8)
sendmsg$TIPC_CMD_ENABLE_BEARER(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0)
r14 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r14)
ioctl$NILFS_IOCTL_GET_SUSTAT(r1, 0x80306e85, &(0x7f00000000c0))
r15 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r15, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r16=>0x0})
sendmsg$nl_route_sched(r15, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r16, {0x0, 0xd}, {0xffff, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x4890)
sendmmsg$sock(r15, &(0x7f0000002140)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000004c0)="128f154ce26b8eea45137fe29a0a4eb0351149a301c8fb2af7a5cf4129a977e7c3b15d4a9518ab16a55f98d9a0197d001d838cac9e53ef8cd13e85f675b7884745ca21215d3bf87ccff5bff207a1b64a21721d441b1d2fcfe0e69afa6aa4c422e4663271f0fab06b8d97c0cecf05841a64be8983d65b1cc612bdd3b08f2fb8abdb7a61e8f3c687f7", 0x88}, {&(0x7f0000000600)="f0600e5ed0aab99810597a320563b872e13fd15628f85853c0fe25", 0x1b}, {&(0x7f0000000640)="0f474497b411c22f03fd4e9ea2bc", 0xe}, {&(0x7f00000006c0)="c21a3e0e8e1c2422aa7b7c9f70484ffca94f9d3e9e91ad3e6624d6b5c436f54356cc95759562887271897f2424bdb60466b7316f8d63f0adf78c71af16abcff8b2a688b498fb8e3a", 0x48}, {&(0x7f0000000740)="12aab3f342b3550250f588dc0661d230dc10e71fbf9b38032acdc16ec7936f828eb9833b4e7f19224de3cccd2a72d3940305b35fb978afc8d88c95a749c64879d35b3399068092b0e458bc9a4cc195454f82fd7e848efa5f7e4f4cc75dd856f0f80f1b80670ef1cc061d681fda5f8bea5a453a93ec635fc918bc0ad17172f45050b0f7185dcaf866349f813c1c8a0e3fed5ae44623f93f522ad464756ffb9b5150d37c7f40fe3c5012e5803f06f6f73591dcb0ed1a3bac9396dca4d86c0a5de6d8dc179911e86141593df604a12589881f48cc9f06643465cbbec6f7385b52c33527747d1681f06fa12c9911b4bab41ef42fa290477ba8262e01e417f0", 0xfd}], 0x5, &(0x7f00000008c0)=[@mark={{0x14, 0x1, 0x24, 0x8f}}, @mark={{0x14, 0x1, 0x24, 0x4}}, @mark={{0x14, 0x1, 0x24, 0x1}}, @mark={{0x14, 0x1, 0x24, 0x8}}, @timestamping={{0x14, 0x1, 0x25, 0x2}}, @mark={{0x14}}, @timestamping={{0x14, 0x1, 0x25, 0x60b}}, @txtime={{0x18, 0x1, 0x3d, 0x1c00}}], 0xc0}}, {{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000980)="b11d3719f4804f9db4510d92a0d1fe0578c2d51345bb586f7268ee7525ed6a2217226d6b4cb099a400d43ac711fd662904ae2f845d1101da1eeb2306c04fa8389a44eee1197d25f5a49570eb9a2cc504794619", 0x53}], 0x1, &(0x7f0000000a40)=[@mark={{0x14}}, @txtime={{0x18, 0x1, 0x3d, 0x1ff}}], 0x30}}, {{&(0x7f0000000a80)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e20, @broadcast}, 0x4, 0x4}}, 0x80, &(0x7f0000002040)=[{&(0x7f0000000b00)="e1b8029fefd56cc27791f9051871658919500f17e812baf7c442c39b697f9049b4ccf63a8a2cf0f8c1c2c5ca25f16474b8da1fff3db1d88b135d38f131e8153ef44b1213e51b7f1783841f143b1f9d8d3ec06a21c4f0b2040f0f40fba3e975f70142fddaf75ee886e360afce46fd217acf3cabc8b22410e0f5c33e8028c6eb0cc14dcafcdc8b537786b911be644e94f856821d1be2b8d9436c730daa4971ad82c98011bc5987ac366a53d26f9d4cf1818368d86e5e554069cb867d10bb0b8c51b9f8a949d0a412db8ddc05dcc12354a696e3a3737688b62f042408ac17310df28437cc36e8ad6900757f31553d53afe9", 0xf0}, {&(0x7f0000000c00)="9b9f1b710a076ffd7c55a545fd634037219056ab0eb2226e2282b3d557403168fab74ca06529ac307a4135fb74c906abf45e0c0cfa4aef162810d87b2b9a05a072bacb2b2c48d3a745092ce75caa4ab6cfec58ed841faa3addc99ef27224cd2829acf603e059dcc11619dd4527155e0836c1cb55e66adace06f3dc44c8ba376a71570edfd9f5858d48dffbb7d699c46c4d59faa0b80624c52398181c94621c799cb9d9cfc8087fd10eb17611b5f130f611249829aae4d769b8b91b9c3abb6c832c4e13d5974fd612", 0xc8}, {&(0x7f0000000d00)="9c0a088e64f8178618931ae8bd96043c5b2a050b053ce9a1a2175350b219217c7cc419ffd2199864f3d947269173f8c7cab1f359719447e514930423aeb5b34f5489078f33cf5befc4a9a54b5ede96d3ca3aa1f9b122bbbc1bb087f93c48b0e0d0e69f800eea3154a0e014182816c69f74e3bf0170d4cf64220ddc53650cfea38c92e41b2554d4d305940c5c0971", 0x8e}, {&(0x7f0000000dc0)="cd4d914720179a42f735375a7b402b8ed42a276c17ff19b87b7252e2da877f665e782476f1497cc219292d7537858325f995b072f49e4807a09bbb4fb23944706fb0b8c3aaff3286b4163f15f60cad5611df74305eb738f0524d27940d2e4f034f755c51ba02d69c38ba24d30ca12e129e7cb8467a8b379ab8f8fea5585941096c47b456161d27660d575969e55df0491c77d008e2c73c1929d1650e1667b574d346371bb5", 0xa5}, {&(0x7f0000000e80)="604c54d1dbe4a54993320415cb1bf41c7ee6d6934c02a4d0d7f2e0fd91249b588f2f225b19ea222584324b4282c6cd98a98c8cd5fd6c048767ca43f38472e783a4051cc44047d492f91a8c3758823964978d0da9a25fae8c30a2adb6c57045de0c040ad95f167179080e85b2d877c3a8f41aa359dd2e1682ce05922223649f7ee127a3cd240f83f430652319d4fd55760d094055851000afc0fe35222cbfca754f74430159df21", 0xa7}, {&(0x7f0000000f40)="6787b002ecb6a55e501cde94ff207bde079edc54bb19492f0e3dadea737618ae7d93138657bd0712882ac6e8e6f6cdd5e62a9e896a10903e854784541017a231b302b011bee06d311c7d01fe7a84ab39f06cc1bb970522a8a373bf8c786a66033d493f4dfb1c8c38b60c8af780df0400b53163dff08c6c55f833b2db9fafd86556d915183d2f7278edb96056454c2a9038882b2468e5ecf93ea6f679e9c9a1679d5d8ce966c1cacb978fbc07128585528c207e3e97cc68bb3c", 0xb9}, {&(0x7f0000001040)="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", 0x1000}], 0x7, &(0x7f00000020c0)=[@timestamping={{0x14, 0x1, 0x25, 0x3}}, @txtime={{0x18, 0x1, 0x3d, 0x9c8a}}, @mark={{0x14, 0x1, 0x24, 0xab9}}], 0x48}}], 0x3, 0x80)

1.34355474s ago: executing program 4 (id=13706):
recvmmsg(0xffffffffffffffff, &(0x7f00000037c0)=[{{0x0, 0x0, &(0x7f0000000380)=[{0x0}, {&(0x7f0000000280)=""/85, 0x55}], 0x2, 0x0, 0x0, 0xa1}}], 0x1, 0x2040000, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000500)='cgroup.events\x00', 0x275a, 0x0)
write$tun(r0, &(0x7f0000000340)=ANY=[], 0x141)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x2b0, 0x0, 0x111, 0x4b4, 0x128, 0xd4feffff, 0x260, 0x20a, 0x278, 0x260, 0x278, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @empty, [], [0x0, 0x0, 0x0, 0xffffff00], 'pimreg1\x00', 'veth1_vlan\x00', {}, {}, 0x6}, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28}}, {{@ipv6={@local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [], [0x0, 0x0, 0x2000, 0xff], 'syzkaller1\x00', 'caif0\x00', {0xff}, {0xff}}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x310)

1.122618729s ago: executing program 2 (id=13708):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="c40000001900674c2cbd70000000000000000000000000000000000000000000ac1eff0100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=<r1=>0x0, @ANYBLOB="0100000000000000000000000000000000000020000000000000000000000000000000000000000000008000000000000000000000000000fcffffffffffffff0000000000000000b0ac00000000000000000000000000000000000000000000000400000000000000000002000000000a00100001"], 0xc4}}, 0x4c050)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x10a900, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x100}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
r9 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r9, 0x29, 0x20, &(0x7f0000000000)={@remote, 0x200000, 0x0, 0xff, 0x1, 0x0, 0xfffe}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x10, 0x4, &(0x7f0000000700)=@framed={{}, [@generic={0x91, 0x1, 0x1, 0x1b}]}, &(0x7f0000000100)='syzkaller\x00', 0x5, 0x0, 0x0, 0x41100, 0x66, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r8, 0x29, 0x20, &(0x7f00000000c0)={@empty, 0x200000, 0x2, 0x0, 0xb, 0xe, 0x2b}, 0x20)
sendmsg$inet(r9, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYRES64=<r10=>r7, @ANYRES32=r6, @ANYBLOB="6a55e3ca88fa86b8", @ANYRESOCT=r9, @ANYRES8=<r11=>r1, @ANYBLOB="4139eb4693d54d6ffc6c261bf6e40ab1b84f504c45641659bc64c2809b890cb4a5c18fc5cb15f50ba979ee3dfaafb4fe97308a3cd8e6d249de9e7ca94b2b339926b227ae72236ee62aceccdc64c60756dafd4556d73f1f8901ce717912c229b793c714559bacbe900846aea9052cb0f9b5b680b6da470d", @ANYRES8, @ANYRESDEC=r0, @ANYRES32=0x0], 0x128}, 0x0)
recvmsg$unix(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000700), 0x100}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={<r12=>0xffffffffffffffff, <r13=>0xffffffffffffffff})
sendmsg$inet(r13, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r12, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r14=>0xffffffffffffffff, <r15=>0xffffffffffffffff})
sendmsg$inet(r15, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=ANY=[@ANYRES16, @ANYRESOCT=r10, @ANYRES64=r11, @ANYRES32], 0x128}, 0x0)
recvmsg(r14, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'\x00', 0x2})
ioctl$TUNGETDEVNETNS(r3, 0x54e3, 0x0)
r16 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r16, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYRES64=r2, @ANYRES8, @ANYRESOCT=r2, @ANYRES32=0x0], 0x17c}, 0x1, 0x0, 0x0, 0x20048000}, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00'})
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[], 0xd4}}, 0x20000040)
close(0xffffffffffffffff)

1.087691929s ago: executing program 0 (id=13709):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a0104000000000000000001fff4000900010073797a30000000002c0000001b0a0500000100edff000000010000000900010073797a30000000000c0002"], 0x74}, 0x1, 0x0, 0x0, 0x8000}, 0x40810)

1.055391668s ago: executing program 3 (id=13710):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r0, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000000300)="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", 0xcb3}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0)
r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000001080)=r2, 0x4)
recvmsg$unix(r1, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x2}, 0x40000300)
ioctl$int_in(r1, 0x5452, &(0x7f0000000140)=0x8000)

974.075756ms ago: executing program 4 (id=13711):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000280)}], 0x1}}], 0x1, 0x14)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, 0x0, &(0x7f0000000140))
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000080)=ANY=[], 0x10448)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0)
getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000300)={0x0, 0xde5}, &(0x7f0000000340)=0x8)

826.730384ms ago: executing program 0 (id=13713):
r0 = socket(0x1, 0x2, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r3, &(0x7f0000000040)={0x2, 0x2383, @loopback}, 0x10)
connect$inet(r3, &(0x7f0000000080)={0x2, 0x2383, @loopback}, 0x10)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xf, 0x4, 0x4, 0x10, 0x0, 0x0, 0xfffffffe, '\x00', 0x0, 0x0}, 0x50)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xe, 0x6, &(0x7f0000000500)=@raw=[@map_fd={0x18, 0x2, 0x1, 0x0, r4}, @generic={0xb7, 0x3}, @generic={0xb7, 0x4}, @call={0x85, 0x0, 0x0, 0x34}, @exit], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000600)={@map=r4, r5, 0x5, 0x0, 0x0, @void, @value=0x0}, 0x20)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r4, &(0x7f0000000340), &(0x7f0000000380)=@tcp=r3}, 0x20)
write(r3, &(0x7f0000000700)='h', 0x1)
r6 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_SYS_SET(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB], 0x18}}, 0x0)
r7 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000340)={'veth0\x00', <r8=>0x0})
sendto$packet(r7, &(0x7f0000000100)="094a9e5203eb4a", 0x7, 0x100400c1, &(0x7f0000000200)={0x11, 0x8100, r8, 0x1, 0x4, 0x6, @multicast}, 0x14)
sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000680)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000640)={&(0x7f00000004c0)={0x144, 0x0, 0x200, 0x70bd27, 0x25dfdbfb, {}, [@ETHTOOL_A_FEATURES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_FEATURES_HEADER={0x74, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xbd3728c053b5e0da}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0xb0, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8}, @ETHTOOL_A_BITSET_BITS={0x8c, 0x3, 0x0, 0x1, [{0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x271}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '[&}(+\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x36e}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, '\\*{\x03/^:\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '@\x00'}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x401}]}]}, @ETHTOOL_A_BITSET_BITS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7f}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'GPL\x00'}]}]}]}]}, 0x144}, 0x1, 0x0, 0x0, 0x4080}, 0x40085)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB='&'], 0x10)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r2, &(0x7f0000000180), &(0x7f00000000c0)=@tcp6=r0}, 0x20)
close(0x3)
ioctl$XFS_IOC_FD_TO_HANDLE(r1, 0xc038586a, &(0x7f00000002c0)={r2, &(0x7f0000000080)='\r,]$.\x00', 0x240, &(0x7f0000000180)={@align=0x4, {0x5, 0x1, 0x4, 0x4}}, 0x3ff, &(0x7f0000000240), &(0x7f0000000280)=0xfffffff1})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x3, 0x0, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xf8000000}, 0x94)
r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="580000004200010000000000000000000301000000faffff2500f9000011223344515e77889991bb0800450000140000000001170000010203040506070800000c00020006000600884700000c0003000700000000000000"], 0x58}}, 0x0)

826.381363ms ago: executing program 1 (id=13714):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[], 0x4c}}, 0x4000010)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='blkio.bfq.dequeue\x00', 0x275a, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$ARPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x1058, [{0xa00}, {0x0, 0x100000000000000}]}, 0xa50)

780.789537ms ago: executing program 4 (id=13715):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$inet6(0xa, 0x2, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_SET_BSS(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=ANY=[@ANYBLOB="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", @ANYBLOB="75fe4c02ed9603caabdfd7c07b75c6db28b9e8220845763675aaad2ed7232508af4f45666781be3da153891b871942d69c6e2c36c4db6cd83309ebfe61160e7ef5e42fb625ff2cfad4a42d2e5ddfed3c303eaca07cc1d071050adebae394cd8959c5fa0d4492b0147b3b79955ed95cda98eed3819e55b4a320ee983bae47218ebeae8fe4262e6cdc", @ANYBLOB="010027bd7000ffdbdf251900000008000300", @ANYRES32=r3, @ANYBLOB="06006d0001000000", @ANYRESOCT=r0], 0x24}, 0x1, 0x0, 0x0, 0x10000001}, 0x20004000)
r4 = socket$inet(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r4, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4)
socket$inet_udp(0x2, 0x2, 0x0)
r5 = socket$kcm(0x2b, 0x1, 0x0)
listen(r5, 0x6)
close(r5)
setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000180)='bridge0\x00', 0x10)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
r6 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
r7 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r7, &(0x7f0000000400)={0x2, 0x15, @loopback}, 0x10)
listen(r7, 0x5)
ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r6, 0x8008f513, &(0x7f00000004c0))
setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, 0x0, 0x0)
setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, 0x0, 0x0)
r8 = socket$inet_tcp(0x2, 0x1, 0x0)
r9 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r9, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x1f, 0x6, 0x390, 0x0, 0x98, 0x130, 0x1c8, 0x2f8, 0x0, 0x98, 0x130, 0x260, 0x2f8, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@ip={@empty, @empty, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x30, 0x0, 0x3}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0)
connect$inet(r8, &(0x7f0000000300)={0x2, 0x15, @loopback}, 0x10)
write(r8, 0x0, 0x0)
accept4(r7, 0x0, 0x0, 0x0)
r10 = socket$inet6(0xa, 0x80002, 0x3)
setsockopt$inet6_mtu(r10, 0x29, 0x17, 0x0, 0x0)
setsockopt$inet6_IPV6_HOPOPTS(r10, 0x29, 0x36, 0x0, 0x8)

705.660192ms ago: executing program 1 (id=13716):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="3b83f3ae5c732ad29f1f011f95ce12581000000000000000e6e9000084f49f36d9f2cc3043bc6d7a8a345e6e19ac53e2ff51b66d814be1407418559c0427cd94fad9187b1a1e6ce5b3867fc397f25f690697efa2ee5f6e9c0cbd22790c93b509f3782030b9b74914e1d72ce29ff78c4cfd", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x122}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendmsg$inet(r4, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x100}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xe, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6}, [@generic={0x6b, 0x1, 0x1, 0x49}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4a, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94)
r9 = socket$nl_route(0x10, 0x3, 0x0)
r10 = syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/net\x00')
sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="000000c0", @ANYRES32=0x0, @ANYBLOB="0304000012410100140012800a000100767863616e0000000400028008001c00", @ANYRES32=r10, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x0)
sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0xb, 0x8, 0x10001, 0xd, 0x1, 0xffffffffffffffff, 0xfffffff8}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000118110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000004000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0xfffffee2, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r11, 0x2000300, 0xe, 0x0, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
ioctl$F2FS_IOC_MOVE_RANGE(r11, 0xc020f509, &(0x7f0000000040)={r0, 0x3, 0x0, 0x3})

487.265146ms ago: executing program 1 (id=13717):
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000480)=@filter={'filter\x00', 0x42, 0x4, 0x308, 0xffffffff, 0x98, 0x1d8, 0x98, 0xffffffff, 0xffffffff, 0x270, 0x270, 0x270, 0xffffffff, 0x5, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'netpci0\x00', 'nr0\x00', {}, {}, 0x89, 0x2}, 0x74000002, 0x70, 0x98, 0x1ba, {0x46010000, 0x2c000000000000}}, @REJECT={0x28}}, {{@ip={@multicast1, @remote, 0xff, 0x0, 'veth0_to_hsr\x00', 'team_slave_1\x00', {}, {}, 0x0, 0x0, 0x10}, 0x287, 0xe0, 0x140, 0x0, {}, [@common=@unspec=@connlabel={{0x28}, {0x1, 0x2}}, @common=@unspec=@limit={{0x48}, {0xa, 0x7, 0x0, 0x8, 0x0, 0x0, 0x2}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @random="1946e6c95be3", 0x6, 0x3, [0x13, 0x14, 0x16, 0x5, 0xe, 0x2b, 0x26, 0x12, 0x14, 0x22, 0x23, 0x1f, 0x0, 0xa, 0x31, 0x2f], 0x2, 0x9, 0x1}}}, {{@uncond, 0xf8030000, 0x70, 0x98}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x1ff, 0x2}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x368)

422.317457ms ago: executing program 4 (id=13718):
r0 = socket$unix(0x1, 0x5, 0x0)
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000002a0000000100000000000001040000002000000105000000010000040400000013000000010000000000000017000000020000040800000021000000010000000000000025000000020000002000000000696e74006270665f7370696e5f6c6f636b0076616c006d61705f76616c756500636e74006c", @ANYRESOCT=r0], 0x0, 0x8e, 0x0, 0x0, 0x4, 0x10000}, 0x28)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x2, 0x4, 0x8, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, r1, 0x1, 0x3}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x3, 0x10, &(0x7f0000000400)=ANY=[@ANYBLOB="bfa200000000000007020000fcfeffff620200000000000018110000", @ANYRES32=r2, @ANYBLOB="000000000000000085000000010000001500070000000000bf06000000000000bf610000000000000701000004000000850000005d000000bf61000000000000070100000400000085000000c2000000b70000000000000095"], &(0x7f0000000500)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xb, 0x4010010, r2, 0x4259000)
r3 = socket(0x10, 0x803, 0x0) (async)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), 0xffffffffffffffff) (async, rerun: 64)
r5 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000500)={'wlan0\x00', <r6=>0x0})
sendmsg$NL80211_CMD_NEW_KEY(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000700)={0x2c, r4, 0x5, 0x10000000, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_KEY={0x10, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_IDX={0x5, 0x2, 0x2}]}]}, 0x2c}}, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000600)={'syztnl1\x00', 0x0, 0x4, 0x22, 0x0, 0x0, 0xa, @ipv4={'\x00', '\xff\xff', @multicast1}, @private1={0xfc, 0x1, '\x00', 0x1}, 0x80, 0x700, 0x1, 0x1}})

315.34721ms ago: executing program 1 (id=13719):
sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x9, 0x6, 0x201, 0x0, 0x0, {0x5, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080)

191.727147ms ago: executing program 1 (id=13720):
r0 = socket$inet(0x2, 0x2, 0x1)
sendmsg$inet(r0, &(0x7f0000000600)={&(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000180)="96bc1480bb58", 0x6}], 0x2, &(0x7f00000001c0)=ANY=[@ANYBLOB="1c0000000000000000000a0007000000890b040a0101027f00000100000000001c000000000000000000fd0008000000", @ANYBLOB="15"], 0x40}, 0x0)

128.652655ms ago: executing program 4 (id=13721):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=ANY=[@ANYBLOB="480000001000030400005865fdffff0000000300", @ANYRES32=0x0, @ANYBLOB="0000000040000000140012800900010076657468000000000400028008004040", @ANYBLOB="9f68f33976"], 0x48}}, 0x0)

64.883564ms ago: executing program 1 (id=13722):
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1, 0x8, &(0x7f00000002c0)=@raw=[@cb_func={0x18, 0x2, 0x4, 0x0, 0x6}, @generic={0xb7, 0x3}, @generic={0xb7, 0x4}, @call={0x85, 0x0, 0x0, 0xd1}, @generic={0xb7}, @generic={0x95}, @generic={0x95}], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid_for_children\x00')
ioctl$NS_GET_USERNS(r0, 0xb701, 0x0)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff)
socket$nl_route(0x10, 0x3, 0x0) (async)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00', <r3=>0x0})
socket$inet6(0xa, 0x3, 0x87) (async)
r4 = socket$inet6(0xa, 0x3, 0x87)
setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@remote, @in=@loopback, 0x4e23, 0x0, 0x4e1d, 0x0, 0x2}, {0xfffffffffffffffd, 0x1, 0x1, 0x0, 0x3, 0xb, 0xfffffffffffffffb}, {0x6, 0xffffffffe, 0x4053e5, 0x20}, 0x7, 0x80001, 0x1, 0x0, 0x0, 0x1}, {{@in=@multicast1, 0x4d4, 0x32}, 0x2, @in=@loopback, 0x3502, 0x1, 0x0, 0x0, 0x616a45e7, 0x8}}, 0xe8)
sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x9c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1f, 0x2, {{}, [@TCA_NETEM_LOSS={0x30, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x4}, @NETEM_LOSS_GI={0x18}]}, @TCA_NETEM_RATE={0x14, 0xd}, @TCA_NETEM_CORRUPT={0xc}]}}}]}, 0x9c}}, 0x0) (async)
sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x9c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1f, 0x2, {{}, [@TCA_NETEM_LOSS={0x30, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x4}, @NETEM_LOSS_GI={0x18}]}, @TCA_NETEM_RATE={0x14, 0xd}, @TCA_NETEM_CORRUPT={0xc}]}}}]}, 0x9c}}, 0x0)
sendmsg$ETHTOOL_MSG_RINGS_GET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x48, r1, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x10004000)

295.555µs ago: executing program 3 (id=13723):
unshare(0x22020400)
r0 = getpid()
r1 = accept4(0xffffffffffffffff, &(0x7f0000000900)=@isdn, &(0x7f0000000980)=0x80, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1d}}, 0x1}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4)
setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f00000003c0)=@ccm_128={{0x303}, "9b75f8279d03466f", "18c19be745b431a1b7a6907600", "7d6a63a1", "d749c52a7fa8d9fb"}, 0x28)
setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b500", "b70800", "1d1cbe23", "b51788ba0584eb23"}, 0x28)
writev(r2, &(0x7f0000001440)=[{&(0x7f0000000140)="2e4c6fd4fb0094d48e2c0c18272bf20acb4255bc6e1d1db323bce2331709ad54ed3f2d977d7a3d443687fa979df122f550b338bc2d3873", 0x37}, {&(0x7f0000000180)="0d0d2ae1455fae18d42cdecfe93ad6718df41c262a3823d9c6f13684cd123dadc675d132e277", 0x26}, {&(0x7f0000000240)="aad7a8878a05d95f45da44ee0ecea3c5d08afa", 0x13}, {&(0x7f0000000200)="a4a9b3cfaca98cb6c6b62f", 0xb}, {&(0x7f0000000440)="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", 0xec0}], 0x5)
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
splice(r2, 0x0, r3, 0x0, 0xf3a, 0x0)
r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r5 = getpid()
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000009c0)={0x0, 0x0, <r6=>0x0}, &(0x7f0000000a00)=0xc)
r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r7, &(0x7f0000000040), 0x6)
ioctl$sock_bt_hci(r7, 0x400448e6, &(0x7f0000000080))
ioctl$sock_bt_hci(r7, 0x400448e6, &(0x7f0000000500)="d7")
ioctl$sock_bt_hci(r7, 0x400448e7, &(0x7f0000000080))
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000ac0)={&(0x7f0000000000)=@kern={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000880)=[{&(0x7f00000001c0)={0xc8, 0x1d, 0x1, 0x70bd28, 0x25dfdbff, "", [@nested={0xb5, 0x5b, 0x0, 0x1, [@generic="be4c0b751cbed236dcfc92582a8fb36d3c90d36b851e5e1e4db6c9a7b39c0a4c05e2f91c8c9ab20a58439861803d5e60b1e66805f6e80ccda5c0d07287f33f2302dc2f2de98c7ca65ed5c25d3c276ac939400be2d26c95475cf00343b95d225b9353622e3822632710beadabcb1c554339911edd2141412cd4956e6ff53cb4ec0e40a3de606267bbd7ae08cfb3a215aec631f35e2b12c693956b514cd4fcb243d521faec649564b286", @typed={0x8, 0xa4, 0x0, 0x0, @u32=0x4}]}]}, 0xc8}, {&(0x7f0000000480)={0x210, 0x33, 0x1, 0x70bd2c, 0x25dfdbff, "", [@nested={0xfe, 0xec, 0x0, 0x1, [@typed={0x8, 0x7, 0x0, 0x0, @uid}, @generic="ba7ff33e0b6eeff21caba948a0ac781ff413e0d806dc11de39e2d95005d29c7a961e9245744509066366cf9034092d82e18a1da7dd8aef86f07414730335febeff373e824590a6b8cef4bd51465562a6a2d955538cbca3e11140b7129452f6b0f28acd411ee2cbabd34909f216aa3c7c0dd538d5b845cd2af5d4d76bc03c", @generic="5a406167fb3ac9033a575cd648d369d40afe64be1b80b20b8ecba68fb6c63cd0efe5db58e2403e99c4cfa9c888899351af9e981ba38b0cac6068efdfec43fda5dac0f483c5aa1b6148eccf3efe210a97e543f806a5b35e48ac7872b440892acadfff609059c8afbaa18dcb53b03282151267a470"]}, @typed={0x8, 0xea, 0x0, 0x0, @fd}, @typed={0x5, 0x73, 0x0, 0x0, @str='\x00'}, @typed={0x8, 0xf3, 0x0, 0x0, @u32=0x6}, @nested={0x2a, 0xbc, 0x0, 0x1, [@nested={0x4, 0x130}, @nested={0x4, 0x63}, @nested={0x4, 0x3}, @typed={0xc, 0x66, 0x0, 0x0, @u64=0xffffffff9e024782}, @nested={0x4, 0x72}, @generic="ec29ec9bec47c71aa195"]}, @nested={0xba, 0xb3, 0x0, 0x1, [@nested={0x4, 0x90}, @typed={0x4, 0x90}, @typed={0x8, 0x150, 0x0, 0x0, @pid}, @generic="3e2da2c5ae46a5505aa746e5ea3662f2213afc6869532edbd6887e012247a7d6d1ad562e2e0ef3fe10132fa9b03d26e335e5f6f865aa5ef1dd6292588e3e62cf687ded65f5985fb055d3f8564f803e181894685a7eb4eff3b6e5866e19b05621d98dd267a95d3e4da8f58ed1b8bc3d6e77da1b60235754ac2e23d0b38b5fc64d3ff8819233203b082b1eb83235006a4ad29cc9e742fae02b6b9d1abd44c05c8184b37e89c805"]}]}, 0x210}, {&(0x7f0000000740)={0x1c, 0x16, 0x51a, 0x70bd2c, 0x25dfdbfc, "", [@nested={0xc, 0x46, 0x0, 0x1, [@typed={0x8, 0xc2, 0x0, 0x0, @pid}]}]}, 0x1c}, {&(0x7f0000000780)={0x18, 0x38, 0x100, 0x70bd25, 0x25dfdbfd, "", [@typed={0x8, 0xcc, 0x0, 0x0, @pid=r0}]}, 0x18}, {&(0x7f00000007c0)={0x90, 0x32, 0x800, 0x70bd2d, 0x25dfdbfe, "", [@nested={0x8, 0x7e, 0x0, 0x1, [@nested={0x4, 0x3e}]}, @generic="dffcdcc2f5e4a779b095991adf3386c5f109b7c05d3617fb829b3dcf0733e310ddf9e17882d30335a0722ef2b0a3fa9de3384717f58226c0322fad61eb26bba5e10f055c7cd341db137db745c21ce1b2bef9be0af55cd6537ec161e29fbeeed7b48f3cb3e01c1f10363f0401eb0fb9a4fe7fd96e2c33"]}, 0x90}], 0x5, &(0x7f0000000300)=ANY=[@ANYBLOB="200d63c1f2c1c3ae9bc510f1a11d9e627800", @ANYRES32=r1, @ANYRES32, @ANYRES32=r2, @ANYRES32=r4, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r5, @ANYRES32=0x0, @ANYRES32=r6, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32, @ANYRES32=r7], 0x58, 0x9080}, 0x20000000)
mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0)
r8 = socket(0xa, 0x3, 0x3a)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r8, 0x89f3, &(0x7f0000000140)={'ip6gre0\x00', 0x0})
r9 = socket(0x2000000015, 0x80005, 0x0)
bind$inet6(r9, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendto$inet6(r9, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
recvfrom$packet(r9, 0x0, 0x0, 0x40000000, &(0x7f0000000440)={0x11, 0x1c, 0x0, 0x1, 0x6, 0x6, @multicast}, 0x14)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910000000000000cb041818000100009500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0xe4}, 0x48)

0s ago: executing program 4 (id=13724):
ioctl$XFS_IOC_FD_TO_HANDLE(0xffffffffffffffff, 0xc038586a, &(0x7f00000001c0)={<r0=>0xffffffffffffffff, &(0x7f0000000000)='}-/\x00', 0x181, &(0x7f0000000100)={@align=0x4e1, {0x0, 0x43, 0x7, 0x3ca2}}, 0x10001, &(0x7f0000000140), &(0x7f0000000180)=0x9})
ioctl$TUNSETNOCSUM(r0, 0x400454c8, 0x0)
pipe(0xfffffffffffffffe)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2000001, 0x12, r1, 0x0)
r2 = socket$packet(0x11, 0x2, 0x300)
getsockopt$packet_int(r2, 0x107, 0xb, &(0x7f0000000000), &(0x7f0000001540)=0x4)
r3 = socket$kcm(0x2b, 0x1, 0x0)
listen(r3, 0x6)
setsockopt$sock_attach_bpf(r3, 0x1, 0xd, &(0x7f0000000080), 0x24)
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000003c0)={'vcan0\x00', <r5=>0x0})
connect$can_bcm(r0, &(0x7f0000000400)={0x1d, r5}, 0x10)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r7 = openat$cgroup_devices(r6, &(0x7f0000000080)='devices.allow\x00', 0x2, 0x0)
write$cgroup_devices(r7, &(0x7f0000000380)=ANY=[@ANYBLOB='b *:* r\n)'], 0xa)
bind$bt_l2cap(r4, &(0x7f0000000280)={0x1f, 0xfffe}, 0xe)
listen(r4, 0x0)
getsockopt$bt_BT_DEFER_SETUP(r4, 0x112, 0x7, &(0x7f0000000080), &(0x7f00000000c0)=0x4)
close(r3)
r8 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r8, &(0x7f0000000600)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(camellia-generic)\x00'}, 0x58)
ioctl$EXT4_IOC_GET_ES_CACHE(r8, 0xc020662a, &(0x7f00000002c0)={0x6, 0xd7a, 0x0, 0x9, 0x3, 0x0, [{0x3, 0x8193, 0x5, '\x00', 0x488}, {0x2, 0x2dc2, 0x4, '\x00', 0x182}, {0x6, 0x100000000, 0xffff, '\x00', 0x3000}]})
r9 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='team0\x00', 0x10)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$TIPC_NL_MON_SET(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="84000000", @ANYRES32=r3, @ANYBLOB="13080000000000000000110000003c00098008000100000000fa070001"], 0x84}}, 0x0)
setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef", 0x11)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000200000002000000004000000010000000000000104000000200000000100000000000001"], 0x0, 0x3c}, 0x28)

kernel console output (not intermixed with test programs):

ing bearer <eth:syzkaller0>
[ 1652.973298][T17283] netlink: 'syz.4.12695': attribute type 1 has an invalid length.
[ 1652.973346][T17283] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1653.385391][T17303] ip6t_hbh: too many supported opts specified
[ 1653.487948][T16919] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1653.640102][T16919] veth0_vlan: entered promiscuous mode
[ 1653.670188][T16919] veth1_vlan: entered promiscuous mode
[ 1653.776138][T16919] veth0_macvtap: entered promiscuous mode
[ 1653.801979][T16919] veth1_macvtap: entered promiscuous mode
[ 1653.945143][T16919] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1653.981404][T16919] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1654.260895][T17320] FAULT_INJECTION: forcing a failure.
[ 1654.260895][T17320] name failslab, interval 1, probability 0, space 0, times 0
[ 1654.260934][T17320] CPU: 1 UID: 0 PID: 17320 Comm: syz.4.12703 Not tainted syzkaller #0 PREEMPT(full) 
[ 1654.260957][T17320] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[ 1654.260970][T17320] Call Trace:
[ 1654.260979][T17320]  <TASK>
[ 1654.260989][T17320]  dump_stack_lvl+0xe8/0x150
[ 1654.261026][T17320]  should_fail_ex+0x410/0x560
[ 1654.261056][T17320]  should_failslab+0xa8/0x100
[ 1654.261085][T17320]  __kmalloc_cache_noprof+0xa3/0x600
[ 1654.261108][T17320]  ? __kmalloc_cache_noprof+0x14d/0x600
[ 1654.261130][T17320]  ? unix_prepare_fpl+0xe3/0x590
[ 1654.261155][T17320]  ? unix_prepare_fpl+0xe3/0x590
[ 1654.261188][T17320]  unix_prepare_fpl+0xe3/0x590
[ 1654.261223][T17320]  unix_scm_to_skb+0x28a/0x3f0
[ 1654.261251][T17320]  unix_dgram_sendmsg+0x502/0x17b0
[ 1654.261297][T17320]  ? lock_acquire+0x115/0x350
[ 1654.261320][T17320]  ? __pfx_unix_dgram_sendmsg+0x10/0x10
[ 1654.261348][T17320]  ? aa_sock_msg_perm+0x129/0x210
[ 1654.261382][T17320]  ? apparmor_socket_sendmsg+0x98/0x360
[ 1654.261411][T17320]  ? __pfx_unix_dgram_sendmsg+0x10/0x10
[ 1654.261435][T17320]  sock_sendmsg_nosec+0x13a/0x180
[ 1654.261464][T17320]  ____sys_sendmsg+0x54e/0x850
[ 1654.261503][T17320]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1654.261557][T17320]  ? import_iovec+0x73/0xa0
[ 1654.261592][T17320]  ___sys_sendmsg+0x2a5/0x360
[ 1654.261623][T17320]  ? __lock_acquire+0x747/0x2de0
[ 1654.261652][T17320]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1654.261726][T17320]  ? __fget_files+0x2a/0x420
[ 1654.261758][T17320]  ? __fget_files+0x3a2/0x420
[ 1654.261800][T17320]  __x64_sys_sendmsg+0x1b1/0x290
[ 1654.261835][T17320]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 1654.261892][T17320]  do_syscall_64+0x166/0x520
[ 1654.261924][T17320]  ? trace_irq_disable+0x3b/0x140
[ 1654.261947][T17320]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1654.261972][T17320]  ? clear_bhb_loop+0x70/0xc0
[ 1654.262001][T17320]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1654.262024][T17320] RIP: 0033:0x7f47b679e159
[ 1654.262047][T17320] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1654.262068][T17320] RSP: 002b:00007f47b7708028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1654.262094][T17320] RAX: ffffffffffffffda RBX: 00007f47b6a26090 RCX: 00007f47b679e159
[ 1654.262111][T17320] RDX: 0000000000000000 RSI: 0000200000001b00 RDI: 000000000000000a
[ 1654.262127][T17320] RBP: 00007f47b7708090 R08: 0000000000000000 R09: 0000000000000000
[ 1654.262142][T17320] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1654.262156][T17320] R13: 00007f47b6a26128 R14: 00007f47b6a26090 R15: 00007fff041ed178
[ 1654.262192][T17320]  </TASK>
[ 1654.428718][ T3530] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1654.573251][ T3530] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1654.573409][ T3530] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1654.573518][ T3530] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1654.621915][T17323] syzkaller0: entered promiscuous mode
[ 1654.621941][T17323] syzkaller0: entered allmulticast mode
[ 1655.007464][ T7071] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1655.007488][ T7071] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1655.110652][T31103] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1655.110676][T31103] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1655.445602][T17357] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12607'.
[ 1655.445630][T17357] netlink: 40 bytes leftover after parsing attributes in process `syz.0.12607'.
[ 1655.453822][T17358] netlink: 84 bytes leftover after parsing attributes in process `syz.4.12717'.
[ 1655.454089][T17358] netlink: 84 bytes leftover after parsing attributes in process `syz.4.12717'.
[ 1655.470476][T17360] netlink: 'syz.4.12717': attribute type 11 has an invalid length.
[ 1655.503245][T17361] netlink: 'syz.4.12717': attribute type 11 has an invalid length.
[ 1656.292090][T17374] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12720'.
[ 1656.366186][T17374] netlink: zone id is out of range
[ 1656.366205][T17374] netlink: zone id is out of range
[ 1656.366216][T17374] netlink: zone id is out of range
[ 1656.366226][T17374] netlink: zone id is out of range
[ 1656.370992][T17374] netlink: zone id is out of range
[ 1656.371009][T17374] netlink: zone id is out of range
[ 1656.371025][T17374] netlink: zone id is out of range
[ 1656.371035][T17374] netlink: zone id is out of range
[ 1656.371045][T17374] netlink: zone id is out of range
[ 1656.371055][T17374] netlink: zone id is out of range
[ 1656.457205][T17385] Bluetooth: MGMT ver 1.23
[ 1656.713998][T17394] bridge_slave_0: left allmulticast mode
[ 1656.714030][T17394] bridge_slave_0: left promiscuous mode
[ 1656.714307][T17394] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1656.773199][T17394] bridge_slave_1: left allmulticast mode
[ 1656.773232][T17394] bridge_slave_1: left promiscuous mode
[ 1656.773491][T17394] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1657.043041][T17408] FAULT_INJECTION: forcing a failure.
[ 1657.043041][T17408] name failslab, interval 1, probability 0, space 0, times 0
[ 1657.043078][T17408] CPU: 1 UID: 0 PID: 17408 Comm: syz.1.12732 Not tainted syzkaller #0 PREEMPT(full) 
[ 1657.043104][T17408] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[ 1657.043119][T17408] Call Trace:
[ 1657.043129][T17408]  <TASK>
[ 1657.043140][T17408]  dump_stack_lvl+0xe8/0x150
[ 1657.043179][T17408]  should_fail_ex+0x410/0x560
[ 1657.043213][T17408]  should_failslab+0xa8/0x100
[ 1657.043251][T17408]  ? vm_area_alloc+0x24/0x140
[ 1657.043274][T17408]  kmem_cache_alloc_noprof+0xa1/0x600
[ 1657.043314][T17408]  ? vm_area_alloc+0x24/0x140
[ 1657.043344][T17408]  vm_area_alloc+0x24/0x140
[ 1657.043369][T17408]  mmap_region+0x1298/0x2270
[ 1657.043415][T17408]  ? __lock_acquire+0x747/0x2de0
[ 1657.043444][T17408]  ? __pfx_mmap_region+0x10/0x10
[ 1657.043475][T17408]  ? __lock_acquire+0x747/0x2de0
[ 1657.043507][T17408]  ? __lock_acquire+0x747/0x2de0
[ 1657.043538][T17408]  ? lock_acquire+0x115/0x350
[ 1657.043571][T17408]  ? lock_acquire+0x115/0x350
[ 1657.043690][T17408]  ? mm_get_unmapped_area_vmaflags+0xd9/0x110
[ 1657.043723][T17408]  ? cap_mmap_addr+0xaf/0x100
[ 1657.043749][T17408]  ? bpf_lsm_mmap_addr+0x9/0x50
[ 1657.043782][T17408]  ? security_mmap_addr+0x71/0x240
[ 1657.043811][T17408]  ? shmem_mapping+0xd/0x50
[ 1657.043834][T17408]  ? memfd_check_seals_mmap+0x16f/0x220
[ 1657.043869][T17408]  do_mmap+0xe0a/0x1300
[ 1657.043910][T17408]  ? __pfx_do_mmap+0x10/0x10
[ 1657.043954][T17408]  ? vm_mmap_pgoff+0x1dd/0x4e0
[ 1657.043979][T17408]  ? down_write_killable+0x17e/0x240
[ 1657.044016][T17408]  ? __pfx_down_write_killable+0x10/0x10
[ 1657.044062][T17408]  vm_mmap_pgoff+0x272/0x4e0
[ 1657.044098][T17408]  ? __pfx_vm_mmap_pgoff+0x10/0x10
[ 1657.044136][T17408]  ? hugetlb_file_setup+0x42c/0x630
[ 1657.044173][T17408]  ksys_mmap_pgoff+0x57d/0x760
[ 1657.044213][T17408]  do_syscall_64+0x166/0x520
[ 1657.044253][T17408]  ? trace_irq_disable+0x3b/0x140
[ 1657.044277][T17408]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1657.044302][T17408]  ? clear_bhb_loop+0x70/0xc0
[ 1657.044331][T17408]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1657.044354][T17408] RIP: 0033:0x7f0ee479e159
[ 1657.044375][T17408] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1657.044394][T17408] RSP: 002b:00007f0ee5733028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
[ 1657.044419][T17408] RAX: ffffffffffffffda RBX: 00007f0ee4a25fa0 RCX: 00007f0ee479e159
[ 1657.044437][T17408] RDX: 0000000000000003 RSI: 0000000000ff5000 RDI: 0000200000000000
[ 1657.044453][T17408] RBP: 00007f0ee5733090 R08: ffffffffffffffff R09: 0000000000000000
[ 1657.044469][T17408] R10: 00020000000ec071 R11: 0000000000000246 R12: 0000000000000001
[ 1657.044485][T17408] R13: 00007f0ee4a26038 R14: 00007f0ee4a25fa0 R15: 00007ffedbc6c308
[ 1657.044523][T17408]  </TASK>
[ 1657.395225][T17412] block nbd5: server does not support multiple connections per device.
[ 1657.395617][T17412] block nbd5: shutting down sockets
[ 1658.053387][T17438] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[ 1658.053407][T17438] IPv6: NLM_F_CREATE should be set when creating new route
[ 1658.053452][T17438] IPv6: NLM_F_CREATE should be set when creating new route
[ 1658.053478][T17438] IPv6: NLM_F_CREATE should be set when creating new route
[ 1658.091130][T17439] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12741'.
[ 1658.091160][T17439] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12741'.
[ 1658.091182][T17439] netlink: 1 bytes leftover after parsing attributes in process `syz.4.12741'.
[ 1658.248398][T17417] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[ 1658.248428][T17417] Bluetooth: hci5: Error when powering off device on rfkill (-4)
[ 1658.360334][T17450] xt_bpf: check failed: parse error
[ 1658.371566][T17417] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 1658.371591][T17417] Bluetooth: hci1: Error when powering off device on rfkill (-4)
[ 1658.508431][T17457] xt_NFQUEUE: number of queues (62232) out of range (got 67565)
[ 1658.551341][T17417] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[ 1658.551367][T17417] Bluetooth: hci2: Error when powering off device on rfkill (-4)
[ 1658.822704][T17467] 8021q: adding VLAN 0 to HW filter on device macvlan2
[ 1658.836345][T17467] bond1: (slave macvlan2): making interface the new active one
[ 1658.837939][T17467] bond1: (slave macvlan2): Enslaving as an active interface with an up link
[ 1658.881278][T12464] bond_slave_0: entered promiscuous mode
[ 1658.881320][T12464] bond_slave_1: entered promiscuous mode
[ 1658.969621][T17478] FAULT_INJECTION: forcing a failure.
[ 1658.969621][T17478] name failslab, interval 1, probability 0, space 0, times 0
[ 1658.969658][T17478] CPU: 1 UID: 0 PID: 17478 Comm: syz.2.12754 Not tainted syzkaller #0 PREEMPT(full) 
[ 1658.969683][T17478] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[ 1658.969698][T17478] Call Trace:
[ 1658.969707][T17478]  <TASK>
[ 1658.969718][T17478]  dump_stack_lvl+0xe8/0x150
[ 1658.969757][T17478]  should_fail_ex+0x410/0x560
[ 1658.969789][T17478]  should_failslab+0xa8/0x100
[ 1658.969822][T17478]  __kmalloc_cache_noprof+0xa3/0x600
[ 1658.969847][T17478]  ? __kmalloc_cache_noprof+0x14d/0x600
[ 1658.969870][T17478]  ? unix_prepare_fpl+0xe3/0x590
[ 1658.969897][T17478]  ? unix_prepare_fpl+0xe3/0x590
[ 1658.969933][T17478]  unix_prepare_fpl+0xe3/0x590
[ 1658.969969][T17478]  unix_scm_to_skb+0x28a/0x3f0
[ 1658.969998][T17478]  unix_dgram_sendmsg+0x502/0x17b0
[ 1658.970054][T17478]  ? lock_acquire+0x115/0x350
[ 1658.970078][T17478]  ? __pfx_unix_dgram_sendmsg+0x10/0x10
[ 1658.970107][T17478]  ? aa_sock_msg_perm+0x129/0x210
[ 1658.970142][T17478]  ? apparmor_socket_sendmsg+0x98/0x360
[ 1658.970171][T17478]  ? __pfx_unix_dgram_sendmsg+0x10/0x10
[ 1658.970195][T17478]  sock_sendmsg_nosec+0x13a/0x180
[ 1658.970224][T17478]  ____sys_sendmsg+0x54e/0x850
[ 1658.970265][T17478]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1658.970308][T17478]  ? import_iovec+0x73/0xa0
[ 1658.970339][T17478]  ___sys_sendmsg+0x2a5/0x360
[ 1658.970369][T17478]  ? __lock_acquire+0x747/0x2de0
[ 1658.970397][T17478]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1658.970467][T17478]  ? __fget_files+0x2a/0x420
[ 1658.970498][T17478]  ? __fget_files+0x3a2/0x420
[ 1658.970541][T17478]  __x64_sys_sendmsg+0x1b1/0x290
[ 1658.970577][T17478]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 1658.970634][T17478]  do_syscall_64+0x166/0x520
[ 1658.970666][T17478]  ? trace_irq_disable+0x3b/0x140
[ 1658.970689][T17478]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1658.970714][T17478]  ? clear_bhb_loop+0x70/0xc0
[ 1658.970742][T17478]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1658.970766][T17478] RIP: 0033:0x7f353139e159
[ 1658.970787][T17478] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1658.970807][T17478] RSP: 002b:00007f353226e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1658.970832][T17478] RAX: ffffffffffffffda RBX: 00007f3531626090 RCX: 00007f353139e159
[ 1658.970850][T17478] RDX: 0000000000000000 RSI: 0000200000001b00 RDI: 000000000000000a
[ 1658.970866][T17478] RBP: 00007f353226e090 R08: 0000000000000000 R09: 0000000000000000
[ 1658.970881][T17478] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1658.970896][T17478] R13: 00007f3531626128 R14: 00007f3531626090 R15: 00007fff31c0c888
[ 1658.970933][T17478]  </TASK>
[ 1659.466520][T17482] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1659.467606][T17482] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1659.507804][T17482] bond_slave_0: left promiscuous mode
[ 1659.507869][T17482] bond_slave_1: left promiscuous mode
[ 1659.548797][T17495] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12757'.
[ 1659.737393][T17501] FAULT_INJECTION: forcing a failure.
[ 1659.737393][T17501] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1659.737431][T17501] CPU: 0 UID: 0 PID: 17501 Comm: syz.2.12761 Not tainted syzkaller #0 PREEMPT(full) 
[ 1659.737457][T17501] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[ 1659.737472][T17501] Call Trace:
[ 1659.737482][T17501]  <TASK>
[ 1659.737492][T17501]  dump_stack_lvl+0xe8/0x150
[ 1659.737531][T17501]  should_fail_ex+0x410/0x560
[ 1659.737564][T17501]  _copy_to_user+0x31/0xb0
[ 1659.737599][T17501]  simple_read_from_buffer+0xe1/0x170
[ 1659.737638][T17501]  proc_fail_nth_read+0x1bb/0x230
[ 1659.737660][T17501]  ? common_file_perm+0x20e/0x2b0
[ 1659.737692][T17501]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1659.737720][T17501]  ? rw_verify_area+0x24a/0x4c0
[ 1659.737756][T17501]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1659.737779][T17501]  vfs_read+0x213/0xa80
[ 1659.737820][T17501]  ? __pfx___mutex_lock+0x10/0x10
[ 1659.737855][T17501]  ? __pfx_vfs_read+0x10/0x10
[ 1659.737892][T17501]  ? __fget_files+0x2a/0x420
[ 1659.737930][T17501]  ? __fget_files+0x3a2/0x420
[ 1659.737960][T17501]  ? __fget_files+0x2a/0x420
[ 1659.738003][T17501]  ksys_read+0x150/0x270
[ 1659.738049][T17501]  ? __pfx_ksys_read+0x10/0x10
[ 1659.738095][T17501]  do_syscall_64+0x166/0x520
[ 1659.738126][T17501]  ? trace_irq_disable+0x3b/0x140
[ 1659.738153][T17501]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1659.738177][T17501]  ? clear_bhb_loop+0x70/0xc0
[ 1659.738205][T17501]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1659.738227][T17501] RIP: 0033:0x7f353135e98e
[ 1659.738249][T17501] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 1659.738269][T17501] RSP: 002b:00007f353228efe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 1659.738294][T17501] RAX: ffffffffffffffda RBX: 00007f353228f6c0 RCX: 00007f353135e98e
[ 1659.738312][T17501] RDX: 000000000000000f RSI: 00007f353228f0a0 RDI: 0000000000000004
[ 1659.738327][T17501] RBP: 00007f353228f090 R08: 0000000000000000 R09: 0000000000000000
[ 1659.738343][T17501] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1659.738357][T17501] R13: 00007f3531626038 R14: 00007f3531625fa0 R15: 00007fff31c0c888
[ 1659.738396][T17501]  </TASK>
[ 1660.357651][T17482] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1660.371174][T17482] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1660.510404][T17497] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12757'.
[ 1660.547636][ T7062] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1660.548379][ T7071] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1660.548424][ T7071] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1660.548461][ T7071] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1660.581628][T17512] pimreg: tun_chr_ioctl cmd 1074025681
[ 1660.599747][T17512] IPVS: set_ctl: invalid protocol: 50 255.255.255.255:20004
[ 1660.688820][T17512] netlink: 28 bytes leftover after parsing attributes in process `syz.3.12764'.
[ 1660.858169][T17524] rdma_rxe: rxe_newlink: failed to add team_slave_0
[ 1660.915696][T17527] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12770'.
[ 1661.074124][T17534] netlink: 400 bytes leftover after parsing attributes in process `syz.3.12773'.
[ 1661.090026][T17535] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12773'.
[ 1661.162404][T17539] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12774'.
[ 1661.177289][T17539] netlink: 52 bytes leftover after parsing attributes in process `syz.4.12774'.
[ 1661.322392][T17545] netlink: 256 bytes leftover after parsing attributes in process `syz.4.12777'.
[ 1661.322418][T17545] netlink: 64 bytes leftover after parsing attributes in process `syz.4.12777'.
[ 1661.409061][T17553] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1661.427796][T17553] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1661.640868][T17558] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12782'.
[ 1662.449242][T17599] syzkaller0: entered promiscuous mode
[ 1662.449268][T17599] syzkaller0: entered allmulticast mode
[ 1663.050823][T17620] netlink: 'syz.3.12801': attribute type 61 has an invalid length.
[ 1663.126340][T17626] netlink: 'syz.3.12801': attribute type 61 has an invalid length.
[ 1663.247989][T17633] net_ratelimit: 486 callbacks suppressed
[ 1663.248084][T17633] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[ 1664.199341][T17668] netlink: 'syz.4.12814': attribute type 1 has an invalid length.
[ 1664.290626][T17668] 8021q: adding VLAN 0 to HW filter on device bond2
[ 1664.394868][T17672] bond2: (slave syz_tun): Enslaving as a backup interface with an up link
[ 1664.434738][T17671] syzkaller0: entered promiscuous mode
[ 1664.434766][T17671] syzkaller0: entered allmulticast mode
[ 1664.869837][T17689] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 1664.909716][T17690] 8021q: VLANs not supported on ip6_vti0
[ 1665.585163][T17709] __nla_validate_parse: 10 callbacks suppressed
[ 1665.585187][T17709] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12826'.
[ 1665.642878][T17732] netlink: 'syz.2.12832': attribute type 7 has an invalid length.
[ 1665.642905][T17732] netlink: 'syz.2.12832': attribute type 5 has an invalid length.
[ 1665.642922][T17732] netlink: 17 bytes leftover after parsing attributes in process `syz.2.12832'.
[ 1666.086864][T17745] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12833'.
[ 1666.092345][T17746] FAULT_INJECTION: forcing a failure.
[ 1666.092345][T17746] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 1666.092384][T17746] CPU: 1 UID: 0 PID: 17746 Comm: syz.2.12834 Not tainted syzkaller #0 PREEMPT(full) 
[ 1666.092410][T17746] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[ 1666.092426][T17746] Call Trace:
[ 1666.092435][T17746]  <TASK>
[ 1666.092450][T17746]  dump_stack_lvl+0xe8/0x150
[ 1666.092488][T17746]  should_fail_ex+0x410/0x560
[ 1666.092522][T17746]  prepare_alloc_pages+0x223/0x600
[ 1666.092556][T17746]  __alloc_frozen_pages_noprof+0x185/0x5a0
[ 1666.092588][T17746]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[ 1666.092620][T17746]  ? __pfx_policy_nodemask+0x10/0x10
[ 1666.092651][T17746]  ? __mutex_lock+0x30b/0x1550
[ 1666.092685][T17746]  ? khugepaged_enter_vma+0x34e/0x370
[ 1666.092711][T17746]  ? mmap_region+0x1d6d/0x2270
[ 1666.092744][T17746]  alloc_pages_mpol+0x21e/0x390
[ 1666.092782][T17746]  alloc_pages_noprof+0xb1/0x2b0
[ 1666.092815][T17746]  __pud_alloc+0x3a/0x460
[ 1666.092853][T17746]  huge_pte_alloc+0x4f6/0x630
[ 1666.092881][T17746]  ? down_read+0x2be/0x330
[ 1666.092913][T17746]  ? hugetlb_vma_lock_read+0x99/0x2d0
[ 1666.092940][T17746]  hugetlb_fault+0x412/0x1440
[ 1666.092992][T17746]  ? __pfx_hugetlb_fault+0x10/0x10
[ 1666.093039][T17746]  ? mtree_range_walk+0x707/0x8b0
[ 1666.093074][T17746]  ? look_up_lock_class+0x57/0x110
[ 1666.093110][T17746]  handle_mm_fault+0x24fc/0x3750
[ 1666.093156][T17746]  ? handle_mm_fault+0xf1/0x3750
[ 1666.093186][T17746]  ? mt_find+0x186/0x630
[ 1666.093220][T17746]  ? __pfx_mt_find+0x10/0x10
[ 1666.093259][T17746]  ? __pfx_handle_mm_fault+0x10/0x10
[ 1666.093292][T17746]  ? rcu_is_watching+0x16/0xb0
[ 1666.093320][T17746]  ? __up_read+0x29c/0x930
[ 1666.093357][T17746]  ? __pfx___up_read+0x10/0x10
[ 1666.093391][T17746]  ? __get_user_pages+0x15be/0x2750
[ 1666.093425][T17746]  __get_user_pages+0x1675/0x2750
[ 1666.093487][T17746]  populate_vma_page_range+0x2be/0x3c0
[ 1666.093520][T17746]  ? __pfx_populate_vma_page_range+0x10/0x10
[ 1666.093555][T17746]  ? down_read+0x2be/0x330
[ 1666.093595][T17746]  __mm_populate+0x25f/0x390
[ 1666.093627][T17746]  ? __pfx___mm_populate+0x10/0x10
[ 1666.093668][T17746]  vm_mmap_pgoff+0x353/0x4e0
[ 1666.093702][T17746]  ? __pfx_vm_mmap_pgoff+0x10/0x10
[ 1666.093745][T17746]  ? hugetlb_file_setup+0x42c/0x630
[ 1666.093782][T17746]  ksys_mmap_pgoff+0x57d/0x760
[ 1666.093823][T17746]  do_syscall_64+0x166/0x520
[ 1666.093855][T17746]  ? trace_irq_disable+0x3b/0x140
[ 1666.093880][T17746]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1666.093904][T17746]  ? clear_bhb_loop+0x70/0xc0
[ 1666.093934][T17746]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1666.093958][T17746] RIP: 0033:0x7f353139e159
[ 1666.093979][T17746] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1666.094010][T17746] RSP: 002b:00007f353228f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
[ 1666.094035][T17746] RAX: ffffffffffffffda RBX: 00007f3531625fa0 RCX: 00007f353139e159
[ 1666.094053][T17746] RDX: 0000000000000003 RSI: 0000000000ff5000 RDI: 0000200000000000
[ 1666.094069][T17746] RBP: 00007f353228f090 R08: ffffffffffffffff R09: 0000000000000000
[ 1666.094085][T17746] R10: 00020000000ec071 R11: 0000000000000246 R12: 0000000000000002
[ 1666.094101][T17746] R13: 00007f3531626038 R14: 00007f3531625fa0 R15: 00007fff31c0c888
[ 1666.094140][T17746]  </TASK>
[ 1666.658156][T17756] netlink: 'syz.2.12837': attribute type 2 has an invalid length.
[ 1667.203127][T17779] netlink: 'syz.0.12842': attribute type 1 has an invalid length.
[ 1667.259769][T17779] gretap1: entered allmulticast mode
[ 1667.297819][T17786] netlink: 'syz.0.12842': attribute type 1 has an invalid length.
[ 1667.473568][T17797] netlink: 24 bytes leftover after parsing attributes in process `syz.3.12844'.
[ 1667.705309][T17786] bond1: entered promiscuous mode
[ 1667.709102][T17786] 8021q: adding VLAN 0 to HW filter on device bond1
[ 1668.271457][T17820] netlink: 24 bytes leftover after parsing attributes in process `syz.0.12850'.
[ 1668.632611][T17827] netlink: 44 bytes leftover after parsing attributes in process `syz.2.12853'.
[ 1668.660395][T17833] netlink: 19 bytes leftover after parsing attributes in process `syz.3.12855'.
[ 1668.886607][T17843] rdma_rxe: rxe_newlink: failed to add team_slave_0
[ 1669.147156][T17848] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12861'.
[ 1669.207284][T17857] netlink: 48 bytes leftover after parsing attributes in process `syz.2.12861'.
[ 1671.880224][T17848] 8021q: VLANs not supported on ip_vti0
[ 1671.902029][T17857] geneve0: entered allmulticast mode
[ 1672.380100][T17873] netlink: 'syz.3.12871': attribute type 3 has an invalid length.
[ 1672.380281][T17873] netlink: 'syz.3.12871': attribute type 3 has an invalid length.
[ 1672.383885][T17876] netlink: 'syz.4.12872': attribute type 1 has an invalid length.
[ 1672.504712][T17876] 8021q: adding VLAN 0 to HW filter on device bond3
[ 1672.674778][T17878] bond2: (slave syz_tun): Removing an active aggregator
[ 1672.691334][T17878] bond2: (slave syz_tun): Releasing backup interface
[ 1672.704774][T17889] xt_NFQUEUE: number of queues (62232) out of range (got 67565)
[ 1672.824040][T17878] bond3: (slave syz_tun): Enslaving as a backup interface with an up link
[ 1673.026277][T17903] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12881'.
[ 1673.128526][T17908] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12884'.
[ 1673.134002][T17909] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 1673.315494][T17915] netlink: 28 bytes leftover after parsing attributes in process `syz.0.12888'.
[ 1673.321040][T17916] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 1673.400669][T17921] netlink: 20 bytes leftover after parsing attributes in process `syz.3.12890'.
[ 1673.484779][T17924] netlink: 'syz.0.12891': attribute type 1 has an invalid length.
[ 1673.575525][T17934] netlink: 36 bytes leftover after parsing attributes in process `syz.3.12890'.
[ 1673.772305][T17923] netlink: 68 bytes leftover after parsing attributes in process `syz.0.12891'.
[ 1674.062592][T17953] netlink: 28 bytes leftover after parsing attributes in process `syz.4.12894'.
[ 1674.062636][T17953] netlink: 28 bytes leftover after parsing attributes in process `syz.4.12894'.
[ 1674.192714][T17930] syzkaller0: entered promiscuous mode
[ 1674.192742][T17930] syzkaller0: entered allmulticast mode
[ 1674.234111][T17953] gretap0: entered promiscuous mode
[ 1674.268442][T17961] netlink: 'syz.0.12896': attribute type 1 has an invalid length.
[ 1674.419027][T17953] gretap0: left promiscuous mode
[ 1674.489556][T17961] 8021q: adding VLAN 0 to HW filter on device bond2
[ 1674.562780][T17962] bond2: (slave geneve2): making interface the new active one
[ 1674.576761][T17962] bond2: (slave geneve2): Enslaving as an active interface with an up link
[ 1674.938014][T17980] Bluetooth: MGMT ver 1.23
[ 1679.162099][T17984] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR
[ 1679.460241][T18001] sch_tbf: burst 1520 is lower than device lo mtu (65550) !
[ 1679.576604][T18013] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12912'.
[ 1679.717421][T18020] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12915'.
[ 1680.189034][T18045] syzkaller1: entered promiscuous mode
[ 1680.189056][T18045] syzkaller1: entered allmulticast mode
[ 1680.375873][T18052] netlink: 'syz.3.12924': attribute type 8 has an invalid length.
[ 1680.986521][T18078] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12936'.
[ 1681.057881][T18082] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12937'.
[ 1681.092040][T18081] syzkaller1: entered promiscuous mode
[ 1681.092067][T18081] syzkaller1: entered allmulticast mode
[ 1681.417982][T18095] gretap0: entered promiscuous mode
[ 1681.452660][T18097] netlink: 132 bytes leftover after parsing attributes in process `syz.0.12942'.
[ 1681.474107][T18097] netlink: 48 bytes leftover after parsing attributes in process `syz.0.12942'.
[ 1681.894167][T18117] xt_NFQUEUE: number of queues (62232) out of range (got 67565)
[ 1682.017194][T18119] netlink: 28 bytes leftover after parsing attributes in process `syz.2.12950'.
[ 1682.148871][T18123] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 1682.266432][T18132] FAULT_INJECTION: forcing a failure.
[ 1682.266432][T18132] name failslab, interval 1, probability 0, space 0, times 0
[ 1682.266470][T18132] CPU: 1 UID: 0 PID: 18132 Comm: syz.3.12955 Not tainted syzkaller #0 PREEMPT(full) 
[ 1682.266496][T18132] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[ 1682.266511][T18132] Call Trace:
[ 1682.266521][T18132]  <TASK>
[ 1682.266531][T18132]  dump_stack_lvl+0xe8/0x150
[ 1682.266571][T18132]  should_fail_ex+0x410/0x560
[ 1682.266604][T18132]  should_failslab+0xa8/0x100
[ 1682.266636][T18132]  __kvmalloc_node_noprof+0x176/0x820
[ 1682.266663][T18132]  ? __kmalloc_cache_noprof+0x321/0x600
[ 1682.266688][T18132]  ? unix_prepare_fpl+0x279/0x590
[ 1682.266716][T18132]  ? unix_prepare_fpl+0x279/0x590
[ 1682.266752][T18132]  unix_prepare_fpl+0x279/0x590
[ 1682.266787][T18132]  unix_scm_to_skb+0x28a/0x3f0
[ 1682.266815][T18132]  unix_dgram_sendmsg+0x502/0x17b0
[ 1682.266862][T18132]  ? lock_acquire+0x115/0x350
[ 1682.266886][T18132]  ? __pfx_unix_dgram_sendmsg+0x10/0x10
[ 1682.266916][T18132]  ? aa_sock_msg_perm+0x129/0x210
[ 1682.266953][T18132]  ? apparmor_socket_sendmsg+0x98/0x360
[ 1682.266982][T18132]  ? __pfx_unix_dgram_sendmsg+0x10/0x10
[ 1682.267006][T18132]  sock_sendmsg_nosec+0x13a/0x180
[ 1682.267036][T18132]  ____sys_sendmsg+0x54e/0x850
[ 1682.267075][T18132]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1682.267119][T18132]  ? import_iovec+0x73/0xa0
[ 1682.267154][T18132]  ___sys_sendmsg+0x2a5/0x360
[ 1682.267186][T18132]  ? __lock_acquire+0x747/0x2de0
[ 1682.267222][T18132]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1682.267295][T18132]  ? __fget_files+0x2a/0x420
[ 1682.267326][T18132]  ? __fget_files+0x3a2/0x420
[ 1682.267372][T18132]  __x64_sys_sendmsg+0x1b1/0x290
[ 1682.267409][T18132]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 1682.267465][T18132]  do_syscall_64+0x166/0x520
[ 1682.267497][T18132]  ? trace_irq_disable+0x3b/0x140
[ 1682.267519][T18132]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1682.267543][T18132]  ? clear_bhb_loop+0x70/0xc0
[ 1682.267571][T18132]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1682.267594][T18132] RIP: 0033:0x7ff29439e159
[ 1682.267615][T18132] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1682.267635][T18132] RSP: 002b:00007ff2952a8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1682.267660][T18132] RAX: ffffffffffffffda RBX: 00007ff294625fa0 RCX: 00007ff29439e159
[ 1682.267677][T18132] RDX: 0000000000000000 RSI: 0000200000001b00 RDI: 000000000000000a
[ 1682.267693][T18132] RBP: 00007ff2952a8090 R08: 0000000000000000 R09: 0000000000000000
[ 1682.267707][T18132] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1682.267722][T18132] R13: 00007ff294626038 R14: 00007ff294625fa0 R15: 00007ffe62ed0c78
[ 1682.267759][T18132]  </TASK>
[ 1682.674852][T18148] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12961'.
[ 1682.757919][T18151] netlink: 24 bytes leftover after parsing attributes in process `syz.1.12962'.
[ 1682.788471][T18148] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12961'.
[ 1683.573098][T18184] IPVS: set_ctl: invalid protocol: 43 172.20.20.187:20001
[ 1684.350168][T18196] syzkaller0: entered promiscuous mode
[ 1684.350200][T18196] syzkaller0: entered allmulticast mode
[ 1684.561943][T18201] netlink: Failed to add  helper -22
[ 1684.562005][T18201] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1685.091595][T18221] __nla_validate_parse: 6 callbacks suppressed
[ 1685.091621][T18221] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12987'.
[ 1685.112643][T18220] netlink: 'syz.3.12986': attribute type 1 has an invalid length.
[ 1685.179657][T18220] 8021q: adding VLAN 0 to HW filter on device bond5
[ 1685.455595][T18220] bond2: (slave syz_tun): Removing an active aggregator
[ 1685.456424][T18220] bond2: (slave syz_tun): Releasing backup interface
[ 1685.529316][T18220] bond5: (slave syz_tun): Enslaving as an active interface with an up link
[ 1685.935717][T18247] netlink: 'syz.0.12996': attribute type 1 has an invalid length.
[ 1686.083170][T18247] 8021q: adding VLAN 0 to HW filter on device bond4
[ 1686.167052][T18253] gretap1: entered promiscuous mode
[ 1686.183279][T18258] FAULT_INJECTION: forcing a failure.
[ 1686.183279][T18258] name failslab, interval 1, probability 0, space 0, times 0
[ 1686.183314][T18258] CPU: 0 UID: 0 PID: 18258 Comm: syz.1.12998 Not tainted syzkaller #0 PREEMPT(full) 
[ 1686.183350][T18258] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[ 1686.183364][T18258] Call Trace:
[ 1686.183375][T18258]  <TASK>
[ 1686.183385][T18258]  dump_stack_lvl+0xe8/0x150
[ 1686.183423][T18258]  should_fail_ex+0x410/0x560
[ 1686.183454][T18258]  ? __alloc_skb+0x1db/0x7a0
[ 1686.183484][T18258]  should_failslab+0xa8/0x100
[ 1686.183514][T18258]  ? __alloc_skb+0x1db/0x7a0
[ 1686.183541][T18258]  kmem_cache_alloc_node_noprof+0xa1/0x610
[ 1686.183577][T18258]  ? __alloc_skb+0x18d/0x7a0
[ 1686.183607][T18258]  ? __alloc_skb+0x1db/0x7a0
[ 1686.183642][T18258]  __alloc_skb+0x1db/0x7a0
[ 1686.183676][T18258]  netlink_sendmsg+0x5d4/0xb40
[ 1686.183711][T18258]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1686.183745][T18258]  ? apparmor_socket_sendmsg+0x98/0x360
[ 1686.183775][T18258]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1686.183798][T18258]  sock_sendmsg_nosec+0x13a/0x180
[ 1686.183827][T18258]  ____sys_sendmsg+0x54e/0x850
[ 1686.183865][T18258]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1686.183909][T18258]  ? import_iovec+0x73/0xa0
[ 1686.183944][T18258]  ___sys_sendmsg+0x2a5/0x360
[ 1686.183975][T18258]  ? __lock_acquire+0x747/0x2de0
[ 1686.184004][T18258]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1686.184075][T18258]  ? __fget_files+0x2a/0x420
[ 1686.184107][T18258]  ? __fget_files+0x3a2/0x420
[ 1686.184151][T18258]  __x64_sys_sendmsg+0x1b1/0x290
[ 1686.184187][T18258]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 1686.184243][T18258]  do_syscall_64+0x166/0x520
[ 1686.184275][T18258]  ? trace_irq_disable+0x3b/0x140
[ 1686.184300][T18258]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1686.184331][T18258]  ? clear_bhb_loop+0x70/0xc0
[ 1686.184359][T18258]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1686.184383][T18258] RIP: 0033:0x7f0ee479e159
[ 1686.184405][T18258] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1686.184425][T18258] RSP: 002b:00007f0ee5733028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1686.184450][T18258] RAX: ffffffffffffffda RBX: 00007f0ee4a25fa0 RCX: 00007f0ee479e159
[ 1686.184468][T18258] RDX: 0000000000000004 RSI: 0000200000000100 RDI: 0000000000000003
[ 1686.184484][T18258] RBP: 00007f0ee5733090 R08: 0000000000000000 R09: 0000000000000000
[ 1686.184499][T18258] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1686.184514][T18258] R13: 00007f0ee4a26038 R14: 00007f0ee4a25fa0 R15: 00007ffedbc6c308
[ 1686.184552][T18258]  </TASK>
[ 1686.497775][T18247] netlink: 'syz.0.12996': attribute type 3 has an invalid length.
[ 1686.498030][T18247] netlink: 'syz.0.12996': attribute type 3 has an invalid length.
[ 1686.620119][T18255] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12999'.
[ 1686.627712][T18255] netlink: 28 bytes leftover after parsing attributes in process `syz.4.12999'.
[ 1686.653318][T18265] netlink: 'syz.1.13000': attribute type 3 has an invalid length.
[ 1686.653574][T18265] netlink: 'syz.1.13000': attribute type 3 has an invalid length.
[ 1686.762214][T18267] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 1687.301836][T18297] rdma_rxe: rxe_newlink: failed to add team_slave_0
[ 1687.412394][T18294] bond5: option lacp_active: mode dependency failed, not supported in mode balance-rr(0)
[ 1687.474593][T18294] bond5 (unregistering): Released all slaves
[ 1687.547127][T18301] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13010'.
[ 1687.566488][T18289] netlink: 28 bytes leftover after parsing attributes in process `syz.1.13010'.
[ 1687.941757][T18305] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[ 1687.986424][T18317] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 1688.111688][T18311] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13014'.
[ 1688.127801][T18311] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13014'.
[ 1688.416476][T18333] netlink: 16 bytes leftover after parsing attributes in process `syz.1.13022'.
[ 1688.417934][T18333] tipc: Cannot configure node identity twice
[ 1688.548871][T18335] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13023'.
[ 1688.549364][T18335] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13023'.
[ 1689.088266][T18369] netlink: 'syz.3.13032': attribute type 5 has an invalid length.
[ 1689.121365][T18372] IPVS: set_ctl: invalid protocol: 43 172.20.20.187:20001
[ 1689.571458][T18395] block nbd5: Unsupported socket: should be TCP or UNIX.
[ 1689.741690][T18395] dvmrp0: entered allmulticast mode
[ 1689.797145][T18398] dvmrp1: entered allmulticast mode
[ 1689.798156][T18400] dvmrp0: left allmulticast mode
[ 1689.798265][T18400] dvmrp1: left allmulticast mode
[ 1690.107084][T18410] netlink: 'syz.0.13044': attribute type 1 has an invalid length.
[ 1690.253757][T18410] 8021q: adding VLAN 0 to HW filter on device bond5
[ 1690.349991][T18412] bond5: (slave geneve3): making interface the new active one
[ 1690.363645][T18412] bond5: (slave geneve3): Enslaving as an active interface with an up link
[ 1690.902733][T18435] ip_tables: iptables: counters copy to user failed while replacing table
[ 1691.008098][T18437] __nla_validate_parse: 6 callbacks suppressed
[ 1691.008122][T18437] netlink: 12 bytes leftover after parsing attributes in process `syz.3.13053'.
[ 1691.752702][T18467] netlink: 76 bytes leftover after parsing attributes in process `syz.3.13060'.
[ 1691.879551][T18472] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[ 1691.879986][T18472] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[ 1691.984834][T18476] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 1692.047083][T18480] FAULT_INJECTION: forcing a failure.
[ 1692.047083][T18480] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1692.047119][T18480] CPU: 1 UID: 0 PID: 18480 Comm: syz.2.13065 Not tainted syzkaller #0 PREEMPT(full) 
[ 1692.047145][T18480] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[ 1692.047159][T18480] Call Trace:
[ 1692.047168][T18480]  <TASK>
[ 1692.047180][T18480]  dump_stack_lvl+0xe8/0x150
[ 1692.047219][T18480]  should_fail_ex+0x410/0x560
[ 1692.047252][T18480]  _copy_from_iter+0x1d3/0x1660
[ 1692.047279][T18480]  ? __alloc_skb+0x27a/0x7a0
[ 1692.047310][T18480]  ? __alloc_skb+0x27a/0x7a0
[ 1692.047341][T18480]  ? __alloc_skb+0x27a/0x7a0
[ 1692.047369][T18480]  ? __pfx__copy_from_iter+0x10/0x10
[ 1692.047394][T18480]  ? kmem_cache_alloc_node_noprof+0x1f9/0x610
[ 1692.047430][T18480]  ? __alloc_skb+0x27a/0x7a0
[ 1692.047455][T18480]  ? __alloc_skb+0x27a/0x7a0
[ 1692.047491][T18480]  ? netlink_sendmsg+0x650/0xb40
[ 1692.047514][T18480]  ? skb_put+0x112/0x210
[ 1692.047548][T18480]  netlink_sendmsg+0x6c0/0xb40
[ 1692.047585][T18480]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1692.047618][T18480]  ? apparmor_socket_sendmsg+0x98/0x360
[ 1692.047648][T18480]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1692.047671][T18480]  sock_sendmsg_nosec+0x13a/0x180
[ 1692.047700][T18480]  ____sys_sendmsg+0x54e/0x850
[ 1692.047740][T18480]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1692.047783][T18480]  ? import_iovec+0x73/0xa0
[ 1692.047816][T18480]  ___sys_sendmsg+0x2a5/0x360
[ 1692.047844][T18480]  ? __lock_acquire+0x747/0x2de0
[ 1692.047871][T18480]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1692.047934][T18480]  ? __fget_files+0x2a/0x420
[ 1692.047959][T18480]  ? __fget_files+0x3a2/0x420
[ 1692.047992][T18480]  __x64_sys_sendmsg+0x1b1/0x290
[ 1692.048021][T18480]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 1692.048064][T18480]  do_syscall_64+0x166/0x520
[ 1692.048088][T18480]  ? trace_irq_disable+0x3b/0x140
[ 1692.048107][T18480]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1692.048125][T18480]  ? clear_bhb_loop+0x70/0xc0
[ 1692.048147][T18480]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1692.048165][T18480] RIP: 0033:0x7f353139e159
[ 1692.048182][T18480] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1692.048199][T18480] RSP: 002b:00007f353228f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1692.048219][T18480] RAX: ffffffffffffffda RBX: 00007f3531625fa0 RCX: 00007f353139e159
[ 1692.048233][T18480] RDX: 0000000000000004 RSI: 0000200000000100 RDI: 0000000000000003
[ 1692.048245][T18480] RBP: 00007f353228f090 R08: 0000000000000000 R09: 0000000000000000
[ 1692.048257][T18480] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1692.048268][T18480] R13: 00007f3531626038 R14: 00007f3531625fa0 R15: 00007fff31c0c888
[ 1692.048296][T18480]  </TASK>
[ 1692.221872][T18481] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13067'.
[ 1692.407574][ T7072] IPVS: starting estimator thread 0...
[ 1692.495408][T18487] IPVS: using max 32 ests per chain, 76800 per kthread
[ 1692.903627][T18493] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13069'.
[ 1693.358317][T18512] IPVS: set_ctl: invalid protocol: 43 172.20.20.187:20001
[ 1694.004689][T18528] netlink: 'syz.4.13081': attribute type 1 has an invalid length.
[ 1694.057782][T18528] 8021q: adding VLAN 0 to HW filter on device bond4
[ 1694.109996][T18528] bond3: (slave syz_tun): Removing an active aggregator
[ 1694.110816][T18528] bond3: (slave syz_tun): Releasing backup interface
[ 1694.111834][T18531] netlink: 'syz.1.13082': attribute type 61 has an invalid length.
[ 1694.111859][T18531] netlink: 'syz.1.13082': attribute type 62 has an invalid length.
[ 1694.150171][T18528] bond4: (slave syz_tun): Enslaving as a backup interface with an up link
[ 1694.154157][T18531] netlink: 'syz.1.13082': attribute type 1 has an invalid length.
[ 1694.463289][T18551] netlink: 24 bytes leftover after parsing attributes in process `syz.1.13090'.
[ 1694.499710][T18553] rdma_rxe: rxe_newlink: failed to add team_slave_0
[ 1694.844809][T18569] netlink: 'syz.1.13097': attribute type 7 has an invalid length.
[ 1694.844836][T18569] netlink: 'syz.1.13097': attribute type 5 has an invalid length.
[ 1694.844852][T18569] netlink: 17 bytes leftover after parsing attributes in process `syz.1.13097'.
[ 1694.962461][T18573] ip_tables: iptables: counters copy to user failed while replacing table
[ 1694.986291][T18576] netlink: 'syz.3.13098': attribute type 12 has an invalid length.
[ 1695.148634][T18581] netlink: 19 bytes leftover after parsing attributes in process `syz.1.13102'.
[ 1695.413440][T18586] netlink: Failed to add  helper -22
[ 1695.413500][T18586] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1695.458500][T18591] can: request_module (can-proto-0) failed.
[ 1696.029493][T18617] FAULT_INJECTION: forcing a failure.
[ 1696.029493][T18617] name failslab, interval 1, probability 0, space 0, times 0
[ 1696.029528][T18617] CPU: 0 UID: 0 PID: 18617 Comm: syz.0.13115 Not tainted syzkaller #0 PREEMPT(full) 
[ 1696.029554][T18617] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[ 1696.029578][T18617] Call Trace:
[ 1696.029587][T18617]  <TASK>
[ 1696.029597][T18617]  dump_stack_lvl+0xe8/0x150
[ 1696.029635][T18617]  should_fail_ex+0x410/0x560
[ 1696.029666][T18617]  ? __alloc_skb+0x1db/0x7a0
[ 1696.029696][T18617]  should_failslab+0xa8/0x100
[ 1696.029725][T18617]  ? __alloc_skb+0x1db/0x7a0
[ 1696.029751][T18617]  kmem_cache_alloc_node_noprof+0xa1/0x610
[ 1696.029787][T18617]  ? __alloc_skb+0x18d/0x7a0
[ 1696.029815][T18617]  ? __alloc_skb+0x1db/0x7a0
[ 1696.029850][T18617]  __alloc_skb+0x1db/0x7a0
[ 1696.029883][T18617]  netlink_sendmsg+0x5d4/0xb40
[ 1696.029917][T18617]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1696.029948][T18617]  ? apparmor_socket_sendmsg+0x98/0x360
[ 1696.029977][T18617]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1696.029999][T18617]  sock_sendmsg_nosec+0x13a/0x180
[ 1696.030028][T18617]  ____sys_sendmsg+0x54e/0x850
[ 1696.030065][T18617]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1696.030107][T18617]  ? import_iovec+0x73/0xa0
[ 1696.030140][T18617]  ___sys_sendmsg+0x2a5/0x360
[ 1696.030172][T18617]  ? __lock_acquire+0x747/0x2de0
[ 1696.030202][T18617]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1696.030272][T18617]  ? __fget_files+0x2a/0x420
[ 1696.030303][T18617]  ? __fget_files+0x3a2/0x420
[ 1696.030346][T18617]  __x64_sys_sendmsg+0x1b1/0x290
[ 1696.030381][T18617]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 1696.030437][T18617]  do_syscall_64+0x166/0x520
[ 1696.030468][T18617]  ? trace_irq_disable+0x3b/0x140
[ 1696.030491][T18617]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1696.030515][T18617]  ? clear_bhb_loop+0x70/0xc0
[ 1696.030543][T18617]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1696.030578][T18617] RIP: 0033:0x7f9ab339e159
[ 1696.030599][T18617] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1696.030620][T18617] RSP: 002b:00007f9ab42f4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1696.030646][T18617] RAX: ffffffffffffffda RBX: 00007f9ab3625fa0 RCX: 00007f9ab339e159
[ 1696.030664][T18617] RDX: 0000000000000004 RSI: 0000200000000100 RDI: 0000000000000003
[ 1696.030680][T18617] RBP: 00007f9ab42f4090 R08: 0000000000000000 R09: 0000000000000000
[ 1696.030695][T18617] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1696.030709][T18617] R13: 00007f9ab3626038 R14: 00007f9ab3625fa0 R15: 00007ffdf8f77ad8
[ 1696.030746][T18617]  </TASK>
[ 1696.387766][T18622] netlink: 12 bytes leftover after parsing attributes in process `syz.3.13119'.
[ 1696.500950][T18631] netlink: 20 bytes leftover after parsing attributes in process `syz.0.13117'.
[ 1696.633907][T18639] netlink: 36 bytes leftover after parsing attributes in process `syz.0.13117'.
[ 1696.702899][T18643] netlink: 52 bytes leftover after parsing attributes in process `syz.4.13118'.
[ 1696.883145][T18649] C: renamed from lo (while UP)
[ 1696.895872][T18649] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[ 1697.174854][T18661] netlink: 4 bytes leftover after parsing attributes in process `syz.4.13130'.
[ 1697.199544][T18661] netlink: 12 bytes leftover after parsing attributes in process `syz.4.13130'.
[ 1697.297956][T18668] IPVS: set_ctl: invalid protocol: 43 172.20.20.187:20001
[ 1697.320220][T18671] syzkaller1: tun_chr_ioctl cmd 1074025677
[ 1697.320328][T18671] syzkaller1: linktype set to 823
[ 1697.321431][T18671] syzkaller1: entered promiscuous mode
[ 1697.321451][T18671] syzkaller1: entered allmulticast mode
[ 1697.323305][ T1286] syzkaller1: tun_net_xmit 86
[ 1697.430792][T18669] netlink: 71 bytes leftover after parsing attributes in process `syz.3.13132'.
[ 1697.729379][T18686] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13139'.
[ 1697.729413][T18686] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13139'.
[ 1697.729435][T18686] netlink: 1 bytes leftover after parsing attributes in process `syz.3.13139'.
[ 1698.919971][T18735] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[ 1699.304518][T18758] openvswitch: netlink: Invalid VLAN frame
[ 1699.370704][T18761] netlink: 'syz.4.13168': attribute type 7 has an invalid length.
[ 1699.370732][T18761] netlink: 'syz.4.13168': attribute type 5 has an invalid length.
[ 1699.821003][T18772] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1701.398127][T18811] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1701.414034][T18811] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1701.494840][T18811] tipc: Resetting bearer <eth:syzkaller0>
[ 1701.503136][T18811] tipc: Resetting bearer <eth:syzkaller0>
[ 1701.538723][T18813] __nla_validate_parse: 10 callbacks suppressed
[ 1701.538752][T18813] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13181'.
[ 1701.539390][T18813] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13181'.
[ 1701.648099][T18832] rdma_rxe: rxe_newlink: failed to add team_slave_0
[ 1701.784234][T18843] netlink: 'syz.3.13187': attribute type 1 has an invalid length.
[ 1701.831468][T18846] ip_tables: iptables: counters copy to user failed while replacing table
[ 1701.852581][T18843] 8021q: adding VLAN 0 to HW filter on device bond6
[ 1701.890309][T18843] bond5: (slave syz_tun): Removing an active aggregator
[ 1701.891098][T18843] bond5: (slave syz_tun): Releasing backup interface
[ 1701.948524][T18843] bond6: (slave syz_tun): Enslaving as a backup interface with an up link
[ 1701.991065][T18850] FAULT_INJECTION: forcing a failure.
[ 1701.991065][T18850] name failslab, interval 1, probability 0, space 0, times 0
[ 1701.991102][T18850] CPU: 1 UID: 0 PID: 18850 Comm: syz.4.13192 Not tainted syzkaller #0 PREEMPT(full) 
[ 1701.991128][T18850] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[ 1701.991142][T18850] Call Trace:
[ 1701.991151][T18850]  <TASK>
[ 1701.991161][T18850]  dump_stack_lvl+0xe8/0x150
[ 1701.991201][T18850]  should_fail_ex+0x410/0x560
[ 1701.991233][T18850]  should_failslab+0xa8/0x100
[ 1701.991265][T18850]  __kmalloc_noprof+0xfe/0x720
[ 1701.991289][T18850]  ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0
[ 1701.991320][T18850]  ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0
[ 1701.991360][T18850]  genl_family_rcv_msg_attrs_parse+0xd0/0x2f0
[ 1701.991401][T18850]  genl_family_rcv_msg_doit+0xda/0x340
[ 1701.991444][T18850]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[ 1701.991482][T18850]  ? apparmor_capable+0x126/0x170
[ 1701.991519][T18850]  ? bpf_lsm_capable+0x9/0x20
[ 1701.991539][T18850]  ? security_capable+0x7e/0x2c0
[ 1701.991573][T18850]  genl_rcv_msg+0x614/0x7a0
[ 1701.991605][T18850]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 1701.991629][T18850]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[ 1701.991670][T18850]  netlink_rcv_skb+0x226/0x4a0
[ 1701.991691][T18850]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 1701.991720][T18850]  ? __pfx_netlink_rcv_skb+0x10/0x10
[ 1701.991759][T18850]  ? down_read+0x2be/0x330
[ 1701.991798][T18850]  genl_rcv+0x28/0x40
[ 1701.991826][T18850]  netlink_unicast+0x7bd/0x940
[ 1701.991873][T18850]  netlink_sendmsg+0x813/0xb40
[ 1701.991908][T18850]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1701.991941][T18850]  ? apparmor_socket_sendmsg+0x98/0x360
[ 1701.991970][T18850]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1701.992027][T18850]  sock_sendmsg_nosec+0x13a/0x180
[ 1701.992058][T18850]  ____sys_sendmsg+0x54e/0x850
[ 1701.992098][T18850]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1701.992140][T18850]  ? import_iovec+0x73/0xa0
[ 1701.992174][T18850]  ___sys_sendmsg+0x2a5/0x360
[ 1701.992205][T18850]  ? __lock_acquire+0x747/0x2de0
[ 1701.992236][T18850]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1701.992309][T18850]  ? __fget_files+0x2a/0x420
[ 1701.992341][T18850]  ? __fget_files+0x3a2/0x420
[ 1701.992383][T18850]  __x64_sys_sendmsg+0x1b1/0x290
[ 1701.992418][T18850]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 1701.992476][T18850]  do_syscall_64+0x166/0x520
[ 1701.992508][T18850]  ? trace_irq_disable+0x3b/0x140
[ 1701.992532][T18850]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1701.992557][T18850]  ? clear_bhb_loop+0x70/0xc0
[ 1701.992586][T18850]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1701.992609][T18850] RIP: 0033:0x7f47b679e159
[ 1701.992632][T18850] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1701.992653][T18850] RSP: 002b:00007f47b7729028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1701.992679][T18850] RAX: ffffffffffffffda RBX: 00007f47b6a25fa0 RCX: 00007f47b679e159
[ 1701.992697][T18850] RDX: 0000000000000004 RSI: 0000200000000100 RDI: 0000000000000003
[ 1701.992713][T18850] RBP: 00007f47b7729090 R08: 0000000000000000 R09: 0000000000000000
[ 1701.992728][T18850] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1701.992743][T18850] R13: 00007f47b6a26038 R14: 00007f47b6a25fa0 R15: 00007fff041ed178
[ 1701.992781][T18850]  </TASK>
[ 1702.501671][T18853] netlink: 56 bytes leftover after parsing attributes in process `syz.3.13193'.
[ 1702.958730][T18880] netlink: 'syz.3.13203': attribute type 1 has an invalid length.
[ 1702.995461][T18883] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 1703.114253][T18886] bond7: (slave geneve2): making interface the new active one
[ 1703.136501][T18886] bond7: (slave geneve2): Enslaving as an active interface with an up link
[ 1703.161062][ T7071] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0
[ 1703.161413][ T7071] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0
[ 1703.161491][ T7071] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0
[ 1703.162151][ T7071] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0
[ 1703.189109][T18887] rdma_rxe: rxe_newlink: failed to add team_slave_0
[ 1703.223459][T18889] netlink: 44 bytes leftover after parsing attributes in process `syz.0.13206'.
[ 1703.281412][T18891] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13203'.
[ 1703.548106][T18904] xt_bpf: check failed: parse error
[ 1703.853586][T18910] netlink: 198796 bytes leftover after parsing attributes in process `syz.0.13212'.
[ 1703.853617][T18910] netlink: 'syz.0.13212': attribute type 2 has an invalid length.
[ 1703.972503][T18915] FAULT_INJECTION: forcing a failure.
[ 1703.972503][T18915] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1703.972542][T18915] CPU: 1 UID: 0 PID: 18915 Comm: syz.0.13217 Not tainted syzkaller #0 PREEMPT(full) 
[ 1703.972569][T18915] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[ 1703.972583][T18915] Call Trace:
[ 1703.972593][T18915]  <TASK>
[ 1703.972603][T18915]  dump_stack_lvl+0xe8/0x150
[ 1703.972642][T18915]  should_fail_ex+0x410/0x560
[ 1703.972675][T18915]  _copy_from_user+0x2d/0xb0
[ 1703.972707][T18915]  bpf_test_init+0xd8/0x150
[ 1703.972734][T18915]  bpf_prog_test_run_xdp+0x4cc/0x11d0
[ 1703.972778][T18915]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[ 1703.972809][T18915]  ? __fget_files+0x2a/0x420
[ 1703.972848][T18915]  ? __pfx_bpf_prog_test_run_xdp+0x10/0x10
[ 1703.972874][T18915]  bpf_prog_test_run+0x2c5/0x340
[ 1703.972907][T18915]  __sys_bpf+0xa22/0xd90
[ 1703.972940][T18915]  ? __pfx___sys_bpf+0x10/0x10
[ 1703.972975][T18915]  ? __fget_files+0x2a/0x420
[ 1703.973022][T18915]  ? ksys_write+0x242/0x270
[ 1703.973066][T18915]  ? __pfx_ksys_write+0x10/0x10
[ 1703.973103][T18915]  __x64_sys_bpf+0xba/0xd0
[ 1703.973128][T18915]  do_syscall_64+0x166/0x520
[ 1703.973156][T18915]  ? trace_irq_disable+0x3b/0x140
[ 1703.973177][T18915]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1703.973199][T18915]  ? clear_bhb_loop+0x70/0xc0
[ 1703.973226][T18915]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1703.973248][T18915] RIP: 0033:0x7f9ab339e159
[ 1703.973269][T18915] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1703.973288][T18915] RSP: 002b:00007f9ab42f4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 1703.973313][T18915] RAX: ffffffffffffffda RBX: 00007f9ab3625fa0 RCX: 00007f9ab339e159
[ 1703.973330][T18915] RDX: 0000000000000050 RSI: 0000200000000280 RDI: 000000000000000a
[ 1703.973346][T18915] RBP: 00007f9ab42f4090 R08: 0000000000000000 R09: 0000000000000000
[ 1703.973361][T18915] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1703.973375][T18915] R13: 00007f9ab3626038 R14: 00007f9ab3625fa0 R15: 00007ffdf8f77ad8
[ 1703.973416][T18915]  </TASK>
[ 1704.286981][T18920] netlink: 12 bytes leftover after parsing attributes in process `syz.0.13218'.
[ 1704.366950][T18922] netlink: 36 bytes leftover after parsing attributes in process `syz.0.13221'.
[ 1704.439969][T18922] netlink: 7164 bytes leftover after parsing attributes in process `syz.0.13221'.
[ 1704.440006][T18922] netlink: 7164 bytes leftover after parsing attributes in process `syz.0.13221'.
[ 1704.515622][T18924] 8021q: adding VLAN 0 to HW filter on device macvlan2
[ 1704.897286][T18953] rdma_rxe: rxe_newlink: failed to add team_slave_0
[ 1705.189412][T18962] netlink: 'syz.3.13233': attribute type 1 has an invalid length.
[ 1705.303239][T18962] 8021q: adding VLAN 0 to HW filter on device bond8
[ 1705.363818][T18965] bond6: (slave syz_tun): Removing an active aggregator
[ 1705.367939][T18965] bond6: (slave syz_tun): Releasing backup interface
[ 1705.392587][T18965] bond8: (slave syz_tun): Enslaving as a backup interface with an up link
[ 1705.414812][T18970] gre2: entered promiscuous mode
[ 1705.800438][T18986] syzkaller1: entered promiscuous mode
[ 1705.800466][T18986] syzkaller1: entered allmulticast mode
[ 1705.851085][T18988] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[ 1706.160546][T19006] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 1706.713517][T19027] FAULT_INJECTION: forcing a failure.
[ 1706.713517][T19027] name failslab, interval 1, probability 0, space 0, times 0
[ 1706.713556][T19027] CPU: 0 UID: 0 PID: 19027 Comm: syz.2.13257 Not tainted syzkaller #0 PREEMPT(full) 
[ 1706.713582][T19027] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[ 1706.713598][T19027] Call Trace:
[ 1706.713608][T19027]  <TASK>
[ 1706.713619][T19027]  dump_stack_lvl+0xe8/0x150
[ 1706.713658][T19027]  should_fail_ex+0x410/0x560
[ 1706.713692][T19027]  should_failslab+0xa8/0x100
[ 1706.713725][T19027]  __kmalloc_noprof+0xfe/0x720
[ 1706.713756][T19027]  ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0
[ 1706.713793][T19027]  ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0
[ 1706.713833][T19027]  genl_family_rcv_msg_attrs_parse+0xd0/0x2f0
[ 1706.713875][T19027]  genl_family_rcv_msg_doit+0xda/0x340
[ 1706.713914][T19027]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[ 1706.713956][T19027]  ? apparmor_capable+0x126/0x170
[ 1706.713995][T19027]  ? bpf_lsm_capable+0x9/0x20
[ 1706.714016][T19027]  ? security_capable+0x7e/0x2c0
[ 1706.714052][T19027]  genl_rcv_msg+0x614/0x7a0
[ 1706.714090][T19027]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 1706.714120][T19027]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[ 1706.714164][T19027]  netlink_rcv_skb+0x226/0x4a0
[ 1706.714190][T19027]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 1706.714221][T19027]  ? __pfx_netlink_rcv_skb+0x10/0x10
[ 1706.714263][T19027]  ? down_read+0x2be/0x330
[ 1706.714316][T19027]  genl_rcv+0x28/0x40
[ 1706.714342][T19027]  netlink_unicast+0x7bd/0x940
[ 1706.714389][T19027]  netlink_sendmsg+0x813/0xb40
[ 1706.714424][T19027]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1706.714459][T19027]  ? apparmor_socket_sendmsg+0x98/0x360
[ 1706.714489][T19027]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1706.714511][T19027]  sock_sendmsg_nosec+0x13a/0x180
[ 1706.714541][T19027]  ____sys_sendmsg+0x54e/0x850
[ 1706.714581][T19027]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1706.714626][T19027]  ? import_iovec+0x73/0xa0
[ 1706.714661][T19027]  ___sys_sendmsg+0x2a5/0x360
[ 1706.714693][T19027]  ? __lock_acquire+0x747/0x2de0
[ 1706.714723][T19027]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1706.714797][T19027]  ? __fget_files+0x2a/0x420
[ 1706.714829][T19027]  ? __fget_files+0x3a2/0x420
[ 1706.714875][T19027]  __x64_sys_sendmsg+0x1b1/0x290
[ 1706.714910][T19027]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 1706.714968][T19027]  do_syscall_64+0x166/0x520
[ 1706.714999][T19027]  ? trace_irq_disable+0x3b/0x140
[ 1706.715023][T19027]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1706.715047][T19027]  ? clear_bhb_loop+0x70/0xc0
[ 1706.715077][T19027]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1706.715101][T19027] RIP: 0033:0x7f353139e159
[ 1706.715123][T19027] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1706.715144][T19027] RSP: 002b:00007f353228f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1706.715169][T19027] RAX: ffffffffffffffda RBX: 00007f3531625fa0 RCX: 00007f353139e159
[ 1706.715187][T19027] RDX: 0000000000000004 RSI: 0000200000000100 RDI: 0000000000000003
[ 1706.715203][T19027] RBP: 00007f353228f090 R08: 0000000000000000 R09: 0000000000000000
[ 1706.715218][T19027] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1706.715233][T19027] R13: 00007f3531626038 R14: 00007f3531625fa0 R15: 00007fff31c0c888
[ 1706.715278][T19027]  </TASK>
[ 1707.387835][T19040] netlink: 'syz.4.13262': attribute type 219 has an invalid length.
[ 1707.410505][T19031] bond0: (slave bond_slave_0): Releasing backup interface
[ 1707.437083][T19031] bond0: (slave bond_slave_1): Releasing backup interface
[ 1707.467030][T19031] team0: Port device team_slave_0 removed
[ 1707.496988][T19031] team0: Port device team_slave_1 removed
[ 1707.497998][T19031] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1707.498023][T19031] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1707.528274][T19031] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1707.528302][T19031] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1707.531898][T19031] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[ 1707.848239][T19050] __nla_validate_parse: 6 callbacks suppressed
[ 1707.848264][T19050] netlink: 12 bytes leftover after parsing attributes in process `syz.2.13266'.
[ 1707.963777][T19054] FAULT_INJECTION: forcing a failure.
[ 1707.963777][T19054] name failslab, interval 1, probability 0, space 0, times 0
[ 1707.963815][T19054] CPU: 0 UID: 0 PID: 19054 Comm: syz.1.13267 Not tainted syzkaller #0 PREEMPT(full) 
[ 1707.963840][T19054] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[ 1707.963853][T19054] Call Trace:
[ 1707.963861][T19054]  <TASK>
[ 1707.963871][T19054]  dump_stack_lvl+0xe8/0x150
[ 1707.963909][T19054]  should_fail_ex+0x410/0x560
[ 1707.963938][T19054]  ? __alloc_skb+0x1db/0x7a0
[ 1707.963965][T19054]  should_failslab+0xa8/0x100
[ 1707.963996][T19054]  ? __alloc_skb+0x1db/0x7a0
[ 1707.964021][T19054]  kmem_cache_alloc_node_noprof+0xa1/0x610
[ 1707.964056][T19054]  ? __alloc_skb+0x18d/0x7a0
[ 1707.964085][T19054]  ? __alloc_skb+0x1db/0x7a0
[ 1707.964120][T19054]  __alloc_skb+0x1db/0x7a0
[ 1707.964153][T19054]  netlink_sendmsg+0x5d4/0xb40
[ 1707.964187][T19054]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1707.964219][T19054]  ? apparmor_socket_sendmsg+0x98/0x360
[ 1707.964249][T19054]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1707.964272][T19054]  sock_sendmsg_nosec+0x13a/0x180
[ 1707.964302][T19054]  ____sys_sendmsg+0x54e/0x850
[ 1707.964340][T19054]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1707.964383][T19054]  ? import_iovec+0x73/0xa0
[ 1707.964417][T19054]  ___sys_sendmsg+0x2a5/0x360
[ 1707.964448][T19054]  ? __lock_acquire+0x747/0x2de0
[ 1707.964478][T19054]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1707.964549][T19054]  ? __fget_files+0x2a/0x420
[ 1707.964581][T19054]  ? __fget_files+0x3a2/0x420
[ 1707.964624][T19054]  __x64_sys_sendmsg+0x1b1/0x290
[ 1707.964660][T19054]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 1707.964725][T19054]  do_syscall_64+0x166/0x520
[ 1707.964758][T19054]  ? trace_irq_disable+0x3b/0x140
[ 1707.964781][T19054]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1707.964805][T19054]  ? clear_bhb_loop+0x70/0xc0
[ 1707.964833][T19054]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1707.964857][T19054] RIP: 0033:0x7f0ee479e159
[ 1707.964879][T19054] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1707.964903][T19054] RSP: 002b:00007f0ee5733028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1707.964927][T19054] RAX: ffffffffffffffda RBX: 00007f0ee4a25fa0 RCX: 00007f0ee479e159
[ 1707.964945][T19054] RDX: 0000000000000004 RSI: 0000200000000100 RDI: 0000000000000003
[ 1707.964960][T19054] RBP: 00007f0ee5733090 R08: 0000000000000000 R09: 0000000000000000
[ 1707.964974][T19054] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1707.964988][T19054] R13: 00007f0ee4a26038 R14: 00007f0ee4a25fa0 R15: 00007ffedbc6c308
[ 1707.965024][T19054]  </TASK>
[ 1708.358344][T19067] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13265'.
[ 1708.358383][T19067] netlink: 'syz.4.13265': attribute type 21 has an invalid length.
[ 1708.583469][T19079] xt_hashlimit: size too large, truncated to 1048576
[ 1709.289043][T19106] netdevsim netdevsim4 netdevsim0: entered promiscuous mode
[ 1709.540767][T19112] atomic_op ffff888025f0d1e0 conn xmit_atomic 0000000000000000
[ 1709.650439][T19115] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13283'.
[ 1709.670827][T19115] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13283'.
[ 1709.942598][T19120] netlink: 20 bytes leftover after parsing attributes in process `syz.3.13284'.
[ 1710.218751][T19125] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 1710.383982][T19128] netlink: 'syz.0.13288': attribute type 1 has an invalid length.
[ 1710.399050][T19129] netlink: 'syz.4.13287': attribute type 1 has an invalid length.
[ 1710.470593][T19128] 8021q: adding VLAN 0 to HW filter on device bond6
[ 1710.544135][T19129] 8021q: adding VLAN 0 to HW filter on device bond5
[ 1710.584456][T19128] gretap2: entered promiscuous mode
[ 1710.642458][T19132] bond5: (slave geneve2): making interface the new active one
[ 1710.654831][T19137] netlink: 24 bytes leftover after parsing attributes in process `syz.3.13289'.
[ 1710.654857][T19137] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[ 1710.679739][T19132] bond5: (slave geneve2): Enslaving as an active interface with an up link
[ 1710.681611][T19131] netlink: 'syz.0.13288': attribute type 3 has an invalid length.
[ 1710.681786][T19131] netlink: 'syz.0.13288': attribute type 3 has an invalid length.
[ 1710.952041][T19144] netlink: 'syz.1.13295': attribute type 1 has an invalid length.
[ 1711.022151][T19151] rdma_rxe: rxe_newlink: failed to add team_slave_0
[ 1711.127135][T19144] netlink: Failed to add  helper -22
[ 1711.127194][T19144] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1711.142850][T19157] FAULT_INJECTION: forcing a failure.
[ 1711.142850][T19157] name failslab, interval 1, probability 0, space 0, times 0
[ 1711.142954][T19157] CPU: 0 UID: 0 PID: 19157 Comm: syz.4.13297 Not tainted syzkaller #0 PREEMPT(full) 
[ 1711.143021][T19157] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[ 1711.143055][T19157] Call Trace:
[ 1711.143088][T19157]  <TASK>
[ 1711.143112][T19157]  dump_stack_lvl+0xe8/0x150
[ 1711.143218][T19157]  should_fail_ex+0x410/0x560
[ 1711.143298][T19157]  should_failslab+0xa8/0x100
[ 1711.143392][T19157]  __kmalloc_node_track_caller_noprof+0xfb/0x720
[ 1711.143489][T19157]  ? kobject_set_name_vargs+0x61/0x110
[ 1711.143590][T19157]  ? kobject_set_name_vargs+0x61/0x110
[ 1711.143706][T19157]  kvasprintf+0xeb/0x1a0
[ 1711.143794][T19157]  ? __pfx_kvasprintf+0x10/0x10
[ 1711.143903][T19157]  ? kvasprintf_const+0xe1/0x240
[ 1711.143995][T19157]  kobject_set_name_vargs+0x61/0x110
[ 1711.144095][T19157]  dev_set_name+0xe2/0x140
[ 1711.144326][T19157]  ? __pfx_ieee80211_emulate_remove_chanctx+0x10/0x10
[ 1711.144399][T19157]  ? rcu_is_watching+0x16/0xb0
[ 1711.144494][T19157]  ? __pfx_dev_set_name+0x10/0x10
[ 1711.144572][T19157]  ? wiphy_new_nm+0x625/0x1b20
[ 1711.144698][T19157]  ? __kmalloc_noprof+0x38c/0x720
[ 1711.144804][T19157]  wiphy_new_nm+0x7a1/0x1b20
[ 1711.144875][T19157]  ? ieee80211_alloc_hw_nm+0x903/0x1f00
[ 1711.144956][T19157]  ? __pfx_ieee80211_emulate_remove_chanctx+0x10/0x10
[ 1711.145032][T19157]  ieee80211_alloc_hw_nm+0x3f3/0x1f00
[ 1711.145110][T19157]  ? __pfx_ieee80211_emulate_add_chanctx+0x10/0x10
[ 1711.145198][T19157]  mac80211_hwsim_new_radio+0x1ea/0x5720
[ 1711.145314][T19157]  ? __pfx___nla_validate_parse+0x10/0x10
[ 1711.145491][T19157]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[ 1711.145569][T19157]  ? trace_kmalloc+0x2a/0xf0
[ 1711.145647][T19157]  hwsim_new_radio_nl+0xd8b/0xf90
[ 1711.145766][T19157]  genl_family_rcv_msg_doit+0x233/0x340
[ 1711.145866][T19157]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[ 1711.145973][T19157]  ? bpf_lsm_capable+0x9/0x20
[ 1711.146039][T19157]  ? security_capable+0x7e/0x2c0
[ 1711.146138][T19157]  genl_rcv_msg+0x614/0x7a0
[ 1711.146235][T19157]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 1711.146325][T19157]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[ 1711.146447][T19157]  netlink_rcv_skb+0x226/0x4a0
[ 1711.146523][T19157]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 1711.146601][T19157]  ? __pfx_netlink_rcv_skb+0x10/0x10
[ 1711.146710][T19157]  ? down_read+0x2be/0x330
[ 1711.146809][T19157]  genl_rcv+0x28/0x40
[ 1711.146876][T19157]  netlink_unicast+0x7bd/0x940
[ 1711.146988][T19157]  netlink_sendmsg+0x813/0xb40
[ 1711.147076][T19157]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1711.147163][T19157]  ? apparmor_socket_sendmsg+0x98/0x360
[ 1711.147240][T19157]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1711.147302][T19157]  sock_sendmsg_nosec+0x13a/0x180
[ 1711.147380][T19157]  ____sys_sendmsg+0x54e/0x850
[ 1711.147489][T19157]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1711.147614][T19157]  ? import_iovec+0x73/0xa0
[ 1711.147717][T19157]  ___sys_sendmsg+0x2a5/0x360
[ 1711.147794][T19157]  ? __lock_acquire+0x747/0x2de0
[ 1711.147872][T19157]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1711.148062][T19157]  ? __fget_files+0x2a/0x420
[ 1711.148140][T19157]  ? __fget_files+0x3a2/0x420
[ 1711.148257][T19157]  __x64_sys_sendmsg+0x1b1/0x290
[ 1711.148356][T19157]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 1711.148508][T19157]  do_syscall_64+0x166/0x520
[ 1711.148586][T19157]  ? trace_irq_disable+0x3b/0x140
[ 1711.148643][T19157]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1711.148706][T19157]  ? clear_bhb_loop+0x70/0xc0
[ 1711.148781][T19157]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1711.148844][T19157] RIP: 0033:0x7f47b679e159
[ 1711.148901][T19157] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1711.148949][T19157] RSP: 002b:00007f47b7729028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1711.149015][T19157] RAX: ffffffffffffffda RBX: 00007f47b6a25fa0 RCX: 00007f47b679e159
[ 1711.149068][T19157] RDX: 0000000000000004 RSI: 0000200000000100 RDI: 0000000000000003
[ 1711.149110][T19157] RBP: 00007f47b7729090 R08: 0000000000000000 R09: 0000000000000000
[ 1711.149144][T19157] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1711.149178][T19157] R13: 00007f47b6a26038 R14: 00007f47b6a25fa0 R15: 00007fff041ed178
[ 1711.149274][T19157]  </TASK>
[ 1711.656464][   T32] audit: type=1800 audit(1790653857.701:30): pid=19163 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.13300" name="blkio.bfq.time_recursive" dev="tmpfs" ino=1559 res=0 errno=0
[ 1711.794058][T19170] Cannot find map_set index 4 as target
[ 1711.878097][T19175] tipc: Resetting bearer <eth:syzkaller0>
[ 1711.899757][T19176] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13303'.
[ 1712.262305][T19188] netlink: 12 bytes leftover after parsing attributes in process `syz.1.13308'.
[ 1712.391694][T19188] netlink: 92 bytes leftover after parsing attributes in process `syz.1.13308'.
[ 1712.473501][T19192] netlink: zone id is out of range
[ 1712.473518][T19192] netlink: zone id is out of range
[ 1712.473527][T19192] netlink: zone id is out of range
[ 1712.473536][T19192] netlink: zone id is out of range
[ 1712.473545][T19192] netlink: zone id is out of range
[ 1712.505635][T19189] netlink: 24 bytes leftover after parsing attributes in process `syz.1.13308'.
[ 1712.877484][T19206] rdma_rxe: rxe_newlink: failed to add team_slave_0
[ 1713.244601][T19216] net_ratelimit: 1007 callbacks suppressed
[ 1713.244627][T19216] openvswitch: netlink: Flow actions attr not present in new flow.
[ 1713.252667][T19216] netlink: 464 bytes leftover after parsing attributes in process `syz.1.13317'.
[ 1713.842872][T19243] netlink: 20 bytes leftover after parsing attributes in process `syz.0.13324'.
[ 1714.051647][T19243] ip6tnl1: entered promiscuous mode
[ 1714.051674][T19243] ip6tnl1: entered allmulticast mode
[ 1714.362816][T19257] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 1714.394514][T19253] bridge0: port 4(veth0_virt_wifi) entered blocking state
[ 1714.394637][T19253] bridge0: port 4(veth0_virt_wifi) entered disabled state
[ 1714.394837][T19253] veth0_virt_wifi: entered allmulticast mode
[ 1714.421480][T19253] veth0_virt_wifi: entered promiscuous mode
[ 1714.422120][T19253] bridge0: port 4(veth0_virt_wifi) entered blocking state
[ 1714.422229][T19253] bridge0: port 4(veth0_virt_wifi) entered forwarding state
[ 1714.492010][T19260] rdma_rxe: rxe_newlink: failed to add team_slave_0
[ 1714.524032][T19263] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 1714.550283][T19264] netlink: 'syz.2.13333': attribute type 2 has an invalid length.
[ 1714.781916][T19279] netlink: 'syz.0.13337': attribute type 1 has an invalid length.
[ 1714.818567][T19279] 8021q: adding VLAN 0 to HW filter on device bond7
[ 1714.839852][T19279] gretap2: entered promiscuous mode
[ 1714.892131][T19282] netlink: 'syz.0.13337': attribute type 3 has an invalid length.
[ 1714.892306][T19282] netlink: 'syz.0.13337': attribute type 3 has an invalid length.
[ 1715.648735][T19299] netlink: 24 bytes leftover after parsing attributes in process `syz.4.13345'.
[ 1715.746888][T19308] netlink: 20 bytes leftover after parsing attributes in process `syz.2.13347'.
[ 1715.746926][T19308] openvswitch: netlink: Missing key (keys=c0, expected=500)
[ 1715.749916][T19308] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13347'.
[ 1715.749952][T19308] netlink: 'syz.2.13347': attribute type 30 has an invalid length.
[ 1715.826529][T19308] vxlan0: entered promiscuous mode
[ 1715.826557][T19308] vxlan0: entered allmulticast mode
[ 1715.832402][T19311] netlink: 16 bytes leftover after parsing attributes in process `syz.2.13347'.
[ 1715.847337][ T3530] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[ 1715.847854][ T3530] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[ 1715.848496][ T7069] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[ 1715.848603][ T7069] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[ 1716.227733][T19331] netlink: 12 bytes leftover after parsing attributes in process `syz.0.13352'.
[ 1716.378782][T19340] netlink: 24 bytes leftover after parsing attributes in process `syz.1.13351'.
[ 1716.399449][T19338] netlink: 'syz.4.13353': attribute type 1 has an invalid length.
[ 1716.540676][T19338] 8021q: adding VLAN 0 to HW filter on device bond6
[ 1716.545830][T19343] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13355'.
[ 1716.660136][T19353] netlink: 12 bytes leftover after parsing attributes in process `syz.0.13358'.
[ 1716.800321][T19353] 8021q: adding VLAN 0 to HW filter on device bond8
[ 1716.824452][T19364] macvlan2: entered promiscuous mode
[ 1716.824478][T19364] macvlan2: entered allmulticast mode
[ 1717.309546][T19376] netlink: 'syz.2.13363': attribute type 34 has an invalid length.
[ 1717.340518][T19380] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 1717.371900][T19376] bond2: option lacp_strict: mode dependency failed, not supported in mode balance-rr(0)
[ 1717.388291][T19376] bond2 (unregistering): Released all slaves
[ 1717.698182][T19392] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) !
[ 1717.814313][T19397] netlink: zone id is out of range
[ 1717.814350][T19397] netlink: zone id is out of range
[ 1717.814361][T19397] netlink: zone id is out of range
[ 1717.814371][T19397] netlink: zone id is out of range
[ 1717.814380][T19397] netlink: zone id is out of range
[ 1718.293826][T19423] net_ratelimit: 488 callbacks suppressed
[ 1718.293850][T19423] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 1718.475566][T19429] IPVS: set_ctl: invalid protocol: 43 172.20.20.187:20001
[ 1718.721821][T19438] __nla_validate_parse: 3 callbacks suppressed
[ 1718.721843][T19438] netlink: 36 bytes leftover after parsing attributes in process `syz.1.13386'.
[ 1718.782627][T19440] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 1718.907701][T19441] x_tables: ip6_tables: cgroup.2 match: invalid size 528 (kernel) != (user) 536
[ 1718.974053][T19446] FAULT_INJECTION: forcing a failure.
[ 1718.974053][T19446] name failslab, interval 1, probability 0, space 0, times 0
[ 1718.974090][T19446] CPU: 1 UID: 0 PID: 19446 Comm: syz.0.13389 Not tainted syzkaller #0 PREEMPT(full) 
[ 1718.974119][T19446] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[ 1718.974135][T19446] Call Trace:
[ 1718.974144][T19446]  <TASK>
[ 1718.974155][T19446]  dump_stack_lvl+0xe8/0x150
[ 1718.974194][T19446]  should_fail_ex+0x410/0x560
[ 1718.974228][T19446]  should_failslab+0xa8/0x100
[ 1718.974259][T19446]  __kvmalloc_node_noprof+0x176/0x820
[ 1718.974291][T19446]  ? __rhashtable_init_noprof+0x545/0xaf0
[ 1718.974317][T19446]  ? __rhashtable_init_noprof+0x545/0xaf0
[ 1718.974352][T19446]  __rhashtable_init_noprof+0x545/0xaf0
[ 1718.974385][T19446]  __rhltable_init_noprof+0x26/0x70
[ 1718.974414][T19446]  sta_info_init+0x2f/0x130
[ 1718.974441][T19446]  ieee80211_alloc_hw_nm+0x808/0x1f00
[ 1718.974472][T19446]  ? __pfx_ieee80211_emulate_add_chanctx+0x10/0x10
[ 1718.974507][T19446]  mac80211_hwsim_new_radio+0x1ea/0x5720
[ 1718.974549][T19446]  ? __pfx___nla_validate_parse+0x10/0x10
[ 1718.974600][T19446]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[ 1718.974639][T19446]  ? trace_kmalloc+0x2a/0xf0
[ 1718.974671][T19446]  hwsim_new_radio_nl+0xd8b/0xf90
[ 1718.974716][T19446]  genl_family_rcv_msg_doit+0x233/0x340
[ 1718.974756][T19446]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[ 1718.974802][T19446]  ? bpf_lsm_capable+0x9/0x20
[ 1718.974824][T19446]  ? security_capable+0x7e/0x2c0
[ 1718.974860][T19446]  genl_rcv_msg+0x614/0x7a0
[ 1718.974895][T19446]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 1718.974923][T19446]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[ 1718.974966][T19446]  netlink_rcv_skb+0x226/0x4a0
[ 1718.974990][T19446]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 1718.975021][T19446]  ? __pfx_netlink_rcv_skb+0x10/0x10
[ 1718.975062][T19446]  ? down_read+0x2be/0x330
[ 1718.975101][T19446]  genl_rcv+0x28/0x40
[ 1718.975128][T19446]  netlink_unicast+0x7bd/0x940
[ 1718.975175][T19446]  netlink_sendmsg+0x813/0xb40
[ 1718.975210][T19446]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1718.975244][T19446]  ? apparmor_socket_sendmsg+0x98/0x360
[ 1718.975273][T19446]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1718.975294][T19446]  sock_sendmsg_nosec+0x13a/0x180
[ 1718.975323][T19446]  ____sys_sendmsg+0x54e/0x850
[ 1718.975362][T19446]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1718.975405][T19446]  ? import_iovec+0x73/0xa0
[ 1718.975438][T19446]  ___sys_sendmsg+0x2a5/0x360
[ 1718.975469][T19446]  ? __lock_acquire+0x747/0x2de0
[ 1718.975498][T19446]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1718.975572][T19446]  ? __fget_files+0x2a/0x420
[ 1718.975602][T19446]  ? __fget_files+0x3a2/0x420
[ 1718.975653][T19446]  __x64_sys_sendmsg+0x1b1/0x290
[ 1718.975687][T19446]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 1718.975745][T19446]  do_syscall_64+0x166/0x520
[ 1718.975776][T19446]  ? trace_irq_disable+0x3b/0x140
[ 1718.975800][T19446]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1718.975841][T19446]  ? clear_bhb_loop+0x70/0xc0
[ 1718.975871][T19446]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1718.975894][T19446] RIP: 0033:0x7f9ab339e159
[ 1718.975916][T19446] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1718.975936][T19446] RSP: 002b:00007f9ab42f4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1718.975962][T19446] RAX: ffffffffffffffda RBX: 00007f9ab3625fa0 RCX: 00007f9ab339e159
[ 1718.975980][T19446] RDX: 0000000000000004 RSI: 0000200000000100 RDI: 0000000000000003
[ 1718.975995][T19446] RBP: 00007f9ab42f4090 R08: 0000000000000000 R09: 0000000000000000
[ 1718.976010][T19446] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1718.976024][T19446] R13: 00007f9ab3626038 R14: 00007f9ab3625fa0 R15: 00007ffdf8f77ad8
[ 1718.976062][T19446]  </TASK>
[ 1719.552968][T19452] lo: entered allmulticast mode
[ 1719.914275][T19461] IPVS: set_ctl: invalid protocol: 43 172.20.20.187:20001
[ 1719.989269][T19464] netlink: 'syz.3.13397': attribute type 3 has an invalid length.
[ 1719.989856][T19464] netlink: 'syz.3.13397': attribute type 3 has an invalid length.
[ 1720.142682][T19467] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13398'.
[ 1720.437096][T19449] lo: left allmulticast mode
[ 1720.455404][T19478] netlink: 24 bytes leftover after parsing attributes in process `syz.0.13403'.
[ 1720.510005][T19477] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13402'.
[ 1720.782135][T19484] FAULT_INJECTION: forcing a failure.
[ 1720.782135][T19484] name failslab, interval 1, probability 0, space 0, times 0
[ 1720.782177][T19484] CPU: 0 UID: 0 PID: 19484 Comm: syz.4.13404 Not tainted syzkaller #0 PREEMPT(full) 
[ 1720.782206][T19484] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[ 1720.782222][T19484] Call Trace:
[ 1720.782233][T19484]  <TASK>
[ 1720.782245][T19484]  dump_stack_lvl+0xe8/0x150
[ 1720.782289][T19484]  should_fail_ex+0x410/0x560
[ 1720.782325][T19484]  should_failslab+0xa8/0x100
[ 1720.782361][T19484]  __kmalloc_noprof+0xfe/0x720
[ 1720.782389][T19484]  ? rfkill_alloc+0xa8/0x300
[ 1720.782507][T19484]  ? rfkill_alloc+0xa8/0x300
[ 1720.782547][T19484]  rfkill_alloc+0xa8/0x300
[ 1720.782586][T19484]  wiphy_new_nm+0x12cd/0x1b20
[ 1720.782619][T19484]  ? __pfx_ieee80211_emulate_remove_chanctx+0x10/0x10
[ 1720.782654][T19484]  ieee80211_alloc_hw_nm+0x3f3/0x1f00
[ 1720.782688][T19484]  ? __pfx_ieee80211_emulate_add_chanctx+0x10/0x10
[ 1720.782727][T19484]  mac80211_hwsim_new_radio+0x1ea/0x5720
[ 1720.782774][T19484]  ? __pfx___nla_validate_parse+0x10/0x10
[ 1720.782830][T19484]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[ 1720.782863][T19484]  ? trace_kmalloc+0x2a/0xf0
[ 1720.782898][T19484]  hwsim_new_radio_nl+0xd8b/0xf90
[ 1720.782947][T19484]  genl_family_rcv_msg_doit+0x233/0x340
[ 1720.782992][T19484]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[ 1720.783047][T19484]  ? bpf_lsm_capable+0x9/0x20
[ 1720.783070][T19484]  ? security_capable+0x7e/0x2c0
[ 1720.783110][T19484]  genl_rcv_msg+0x614/0x7a0
[ 1720.783151][T19484]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 1720.783184][T19484]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[ 1720.783232][T19484]  netlink_rcv_skb+0x226/0x4a0
[ 1720.783259][T19484]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 1720.783295][T19484]  ? __pfx_netlink_rcv_skb+0x10/0x10
[ 1720.783341][T19484]  ? down_read+0x2be/0x330
[ 1720.783387][T19484]  genl_rcv+0x28/0x40
[ 1720.783417][T19484]  netlink_unicast+0x7bd/0x940
[ 1720.783478][T19484]  netlink_sendmsg+0x813/0xb40
[ 1720.783518][T19484]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1720.783556][T19484]  ? apparmor_socket_sendmsg+0x98/0x360
[ 1720.783590][T19484]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1720.783615][T19484]  sock_sendmsg_nosec+0x13a/0x180
[ 1720.783649][T19484]  ____sys_sendmsg+0x54e/0x850
[ 1720.783693][T19484]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1720.783742][T19484]  ? import_iovec+0x73/0xa0
[ 1720.783780][T19484]  ___sys_sendmsg+0x2a5/0x360
[ 1720.783815][T19484]  ? __lock_acquire+0x747/0x2de0
[ 1720.783847][T19484]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1720.783930][T19484]  ? __fget_files+0x2a/0x420
[ 1720.783964][T19484]  ? __fget_files+0x3a2/0x420
[ 1720.784010][T19484]  __x64_sys_sendmsg+0x1b1/0x290
[ 1720.784052][T19484]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 1720.784118][T19484]  do_syscall_64+0x166/0x520
[ 1720.784152][T19484]  ? trace_irq_disable+0x3b/0x140
[ 1720.784179][T19484]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1720.784206][T19484]  ? clear_bhb_loop+0x70/0xc0
[ 1720.784239][T19484]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1720.784265][T19484] RIP: 0033:0x7f47b679e159
[ 1720.784290][T19484] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1720.784314][T19484] RSP: 002b:00007f47b7729028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1720.784342][T19484] RAX: ffffffffffffffda RBX: 00007f47b6a25fa0 RCX: 00007f47b679e159
[ 1720.784363][T19484] RDX: 0000000000000004 RSI: 0000200000000100 RDI: 0000000000000003
[ 1720.784381][T19484] RBP: 00007f47b7729090 R08: 0000000000000000 R09: 0000000000000000
[ 1720.784398][T19484] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1720.784414][T19484] R13: 00007f47b6a26038 R14: 00007f47b6a25fa0 R15: 00007fff041ed178
[ 1720.784465][T19484]  </TASK>
[ 1721.109174][T19486] netlink: 12 bytes leftover after parsing attributes in process `syz.3.13406'.
[ 1721.323784][T19496] FAULT_INJECTION: forcing a failure.
[ 1721.323784][T19496] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 1721.323822][T19496] CPU: 1 UID: 0 PID: 19496 Comm: syz.1.13412 Not tainted syzkaller #0 PREEMPT(full) 
[ 1721.323848][T19496] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[ 1721.323863][T19496] Call Trace:
[ 1721.323872][T19496]  <TASK>
[ 1721.323882][T19496]  dump_stack_lvl+0xe8/0x150
[ 1721.323929][T19496]  should_fail_ex+0x410/0x560
[ 1721.323961][T19496]  prepare_alloc_pages+0x223/0x600
[ 1721.323994][T19496]  __alloc_frozen_pages_noprof+0x185/0x5a0
[ 1721.324025][T19496]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[ 1721.324056][T19496]  ? __pfx_policy_nodemask+0x10/0x10
[ 1721.324086][T19496]  ? __kernel_text_address+0xd/0x30
[ 1721.324123][T19496]  alloc_pages_mpol+0x21e/0x390
[ 1721.324155][T19496]  ? wiphy_new_nm+0x625/0x1b20
[ 1721.324178][T19496]  ___kmalloc_large_node+0x4f/0x120
[ 1721.324201][T19496]  __kmalloc_large_node_noprof+0x18/0x90
[ 1721.324227][T19496]  ? __pfx_ieee80211_emulate_remove_chanctx+0x10/0x10
[ 1721.324258][T19496]  __kmalloc_noprof+0x3fb/0x720
[ 1721.324283][T19496]  ? wiphy_new_nm+0x625/0x1b20
[ 1721.324313][T19496]  ? __pfx_ieee80211_emulate_remove_chanctx+0x10/0x10
[ 1721.324341][T19496]  wiphy_new_nm+0x625/0x1b20
[ 1721.324364][T19496]  ? ieee80211_alloc_hw_nm+0x903/0x1f00
[ 1721.324396][T19496]  ? __pfx_ieee80211_emulate_remove_chanctx+0x10/0x10
[ 1721.324425][T19496]  ieee80211_alloc_hw_nm+0x3f3/0x1f00
[ 1721.324455][T19496]  ? __pfx_ieee80211_emulate_add_chanctx+0x10/0x10
[ 1721.324489][T19496]  mac80211_hwsim_new_radio+0x1ea/0x5720
[ 1721.324536][T19496]  ? __pfx___nla_validate_parse+0x10/0x10
[ 1721.324587][T19496]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[ 1721.324617][T19496]  ? trace_kmalloc+0x2a/0xf0
[ 1721.324648][T19496]  hwsim_new_radio_nl+0xd8b/0xf90
[ 1721.324692][T19496]  genl_family_rcv_msg_doit+0x233/0x340
[ 1721.324732][T19496]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[ 1721.324781][T19496]  ? bpf_lsm_capable+0x9/0x20
[ 1721.324802][T19496]  ? security_capable+0x7e/0x2c0
[ 1721.324836][T19496]  genl_rcv_msg+0x614/0x7a0
[ 1721.324873][T19496]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 1721.324900][T19496]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[ 1721.324948][T19496]  netlink_rcv_skb+0x226/0x4a0
[ 1721.324973][T19496]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 1721.325003][T19496]  ? __pfx_netlink_rcv_skb+0x10/0x10
[ 1721.325041][T19496]  ? down_read+0x2be/0x330
[ 1721.325080][T19496]  genl_rcv+0x28/0x40
[ 1721.325105][T19496]  netlink_unicast+0x7bd/0x940
[ 1721.325153][T19496]  netlink_sendmsg+0x813/0xb40
[ 1721.325183][T19496]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1721.325214][T19496]  ? apparmor_socket_sendmsg+0x98/0x360
[ 1721.325241][T19496]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1721.325261][T19496]  sock_sendmsg_nosec+0x13a/0x180
[ 1721.325287][T19496]  ____sys_sendmsg+0x54e/0x850
[ 1721.325324][T19496]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1721.325364][T19496]  ? import_iovec+0x73/0xa0
[ 1721.325395][T19496]  ___sys_sendmsg+0x2a5/0x360
[ 1721.325424][T19496]  ? __lock_acquire+0x747/0x2de0
[ 1721.325450][T19496]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1721.325516][T19496]  ? __fget_files+0x2a/0x420
[ 1721.325544][T19496]  ? __fget_files+0x3a2/0x420
[ 1721.325583][T19496]  __x64_sys_sendmsg+0x1b1/0x290
[ 1721.325615][T19496]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 1721.325666][T19496]  do_syscall_64+0x166/0x520
[ 1721.325694][T19496]  ? trace_irq_disable+0x3b/0x140
[ 1721.325714][T19496]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1721.325734][T19496]  ? clear_bhb_loop+0x70/0xc0
[ 1721.325760][T19496]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1721.325781][T19496] RIP: 0033:0x7f0ee479e159
[ 1721.325802][T19496] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1721.325819][T19496] RSP: 002b:00007f0ee5733028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1721.325842][T19496] RAX: ffffffffffffffda RBX: 00007f0ee4a25fa0 RCX: 00007f0ee479e159
[ 1721.325857][T19496] RDX: 0000000000000004 RSI: 0000200000000100 RDI: 0000000000000003
[ 1721.325871][T19496] RBP: 00007f0ee5733090 R08: 0000000000000000 R09: 0000000000000000
[ 1721.325883][T19496] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1721.325895][T19496] R13: 00007f0ee4a26038 R14: 00007f0ee4a25fa0 R15: 00007ffedbc6c308
[ 1721.325936][T19496]  </TASK>
[ 1721.879522][T19500] IPVS: set_ctl: invalid protocol: 43 172.20.20.187:20001
[ 1721.982129][T19511] netlink: 'syz.1.13415': attribute type 29 has an invalid length.
[ 1722.835812][T19549] netlink: 'syz.3.13429': attribute type 39 has an invalid length.
[ 1722.843046][T19552] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 1722.919930][T19549] bond8: (slave syz_tun): Removing an active aggregator
[ 1722.922353][T19549] bond8: (slave syz_tun): Releasing backup interface
[ 1723.058744][T19558] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 1723.249026][T19566] netlink: 20 bytes leftover after parsing attributes in process `syz.3.13437'.
[ 1723.450103][T19578] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13442'.
[ 1723.450135][T19578] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13442'.
[ 1723.450156][T19578] netlink: 1 bytes leftover after parsing attributes in process `syz.1.13442'.
[ 1723.574534][T19584] netlink: 'syz.1.13445': attribute type 7 has an invalid length.
[ 1723.574561][T19584] netlink: 'syz.1.13445': attribute type 5 has an invalid length.
[ 1723.574578][T19584] netlink: 17 bytes leftover after parsing attributes in process `syz.1.13445'.
[ 1723.632125][T19585] xt_bpf: check failed: parse error
[ 1724.171123][T19609] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[ 1724.171166][T19609] IPv6: NLM_F_CREATE should be set when creating new route
[ 1724.361213][T19614] netlink: 24 bytes leftover after parsing attributes in process `syz.3.13457'.
[ 1724.518434][T19625] FAULT_INJECTION: forcing a failure.
[ 1724.518434][T19625] name failslab, interval 1, probability 0, space 0, times 0
[ 1724.518473][T19625] CPU: 1 UID: 0 PID: 19625 Comm: syz.2.13460 Not tainted syzkaller #0 PREEMPT(full) 
[ 1724.518499][T19625] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[ 1724.518514][T19625] Call Trace:
[ 1724.518524][T19625]  <TASK>
[ 1724.518535][T19625]  dump_stack_lvl+0xe8/0x150
[ 1724.518573][T19625]  should_fail_ex+0x410/0x560
[ 1724.518608][T19625]  should_failslab+0xa8/0x100
[ 1724.518640][T19625]  __kvmalloc_node_noprof+0x176/0x820
[ 1724.518671][T19625]  ? __rhashtable_init_noprof+0x545/0xaf0
[ 1724.518698][T19625]  ? __rhashtable_init_noprof+0x545/0xaf0
[ 1724.518734][T19625]  __rhashtable_init_noprof+0x545/0xaf0
[ 1724.518770][T19625]  __rhltable_init_noprof+0x26/0x70
[ 1724.518805][T19625]  sta_info_init+0x62/0x130
[ 1724.518830][T19625]  ieee80211_alloc_hw_nm+0x808/0x1f00
[ 1724.518861][T19625]  ? __pfx_ieee80211_emulate_add_chanctx+0x10/0x10
[ 1724.518896][T19625]  mac80211_hwsim_new_radio+0x1ea/0x5720
[ 1724.518938][T19625]  ? __pfx___nla_validate_parse+0x10/0x10
[ 1724.518989][T19625]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[ 1724.519019][T19625]  ? trace_kmalloc+0x2a/0xf0
[ 1724.519050][T19625]  hwsim_new_radio_nl+0xd8b/0xf90
[ 1724.519096][T19625]  genl_family_rcv_msg_doit+0x233/0x340
[ 1724.519168][T19625]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[ 1724.519215][T19625]  ? bpf_lsm_capable+0x9/0x20
[ 1724.519236][T19625]  ? security_capable+0x7e/0x2c0
[ 1724.519273][T19625]  genl_rcv_msg+0x614/0x7a0
[ 1724.519310][T19625]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 1724.519339][T19625]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[ 1724.519382][T19625]  netlink_rcv_skb+0x226/0x4a0
[ 1724.519408][T19625]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 1724.519439][T19625]  ? __pfx_netlink_rcv_skb+0x10/0x10
[ 1724.519481][T19625]  ? down_read+0x2be/0x330
[ 1724.519521][T19625]  genl_rcv+0x28/0x40
[ 1724.519548][T19625]  netlink_unicast+0x7bd/0x940
[ 1724.519596][T19625]  netlink_sendmsg+0x813/0xb40
[ 1724.519631][T19625]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1724.519665][T19625]  ? apparmor_socket_sendmsg+0x98/0x360
[ 1724.519696][T19625]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1724.519718][T19625]  sock_sendmsg_nosec+0x13a/0x180
[ 1724.519748][T19625]  ____sys_sendmsg+0x54e/0x850
[ 1724.519787][T19625]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1724.519832][T19625]  ? import_iovec+0x73/0xa0
[ 1724.519866][T19625]  ___sys_sendmsg+0x2a5/0x360
[ 1724.519897][T19625]  ? __lock_acquire+0x747/0x2de0
[ 1724.519927][T19625]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1724.520001][T19625]  ? __fget_files+0x2a/0x420
[ 1724.520033][T19625]  ? __fget_files+0x3a2/0x420
[ 1724.520078][T19625]  __x64_sys_sendmsg+0x1b1/0x290
[ 1724.520114][T19625]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 1724.520180][T19625]  do_syscall_64+0x166/0x520
[ 1724.520209][T19625]  ? trace_irq_disable+0x3b/0x140
[ 1724.520233][T19625]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1724.520257][T19625]  ? clear_bhb_loop+0x70/0xc0
[ 1724.520285][T19625]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1724.520309][T19625] RIP: 0033:0x7f353139e159
[ 1724.520331][T19625] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1724.520350][T19625] RSP: 002b:00007f353228f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1724.520376][T19625] RAX: ffffffffffffffda RBX: 00007f3531625fa0 RCX: 00007f353139e159
[ 1724.520393][T19625] RDX: 0000000000000004 RSI: 0000200000000100 RDI: 0000000000000003
[ 1724.520409][T19625] RBP: 00007f353228f090 R08: 0000000000000000 R09: 0000000000000000
[ 1724.520425][T19625] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1724.520439][T19625] R13: 00007f3531626038 R14: 00007f3531625fa0 R15: 00007fff31c0c888
[ 1724.520477][T19625]  </TASK>
[ 1724.938506][T19629] netlink: 12 bytes leftover after parsing attributes in process `syz.3.13462'.
[ 1725.090812][T19636] FAULT_INJECTION: forcing a failure.
[ 1725.090812][T19636] name failslab, interval 1, probability 0, space 0, times 0
[ 1725.090850][T19636] CPU: 0 UID: 0 PID: 19636 Comm: syz.0.13465 Not tainted syzkaller #0 PREEMPT(full) 
[ 1725.090877][T19636] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[ 1725.090892][T19636] Call Trace:
[ 1725.090902][T19636]  <TASK>
[ 1725.090912][T19636]  dump_stack_lvl+0xe8/0x150
[ 1725.090949][T19636]  should_fail_ex+0x410/0x560
[ 1725.090983][T19636]  should_failslab+0xa8/0x100
[ 1725.091015][T19636]  __kmalloc_noprof+0xfe/0x720
[ 1725.091040][T19636]  ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0
[ 1725.091071][T19636]  ? genl_family_rcv_msg_attrs_parse+0xd0/0x2f0
[ 1725.091111][T19636]  genl_family_rcv_msg_attrs_parse+0xd0/0x2f0
[ 1725.091151][T19636]  genl_family_rcv_msg_doit+0xda/0x340
[ 1725.091188][T19636]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[ 1725.091227][T19636]  ? apparmor_capable+0x126/0x170
[ 1725.091272][T19636]  ? bpf_lsm_capable+0x9/0x20
[ 1725.091294][T19636]  ? security_capable+0x7e/0x2c0
[ 1725.091328][T19636]  genl_rcv_msg+0x614/0x7a0
[ 1725.091366][T19636]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 1725.091395][T19636]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[ 1725.091433][T19636]  netlink_rcv_skb+0x226/0x4a0
[ 1725.091458][T19636]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 1725.091489][T19636]  ? __pfx_netlink_rcv_skb+0x10/0x10
[ 1725.091530][T19636]  ? down_read+0x2be/0x330
[ 1725.091570][T19636]  genl_rcv+0x28/0x40
[ 1725.091597][T19636]  netlink_unicast+0x7bd/0x940
[ 1725.091643][T19636]  netlink_sendmsg+0x813/0xb40
[ 1725.091686][T19636]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1725.091720][T19636]  ? apparmor_socket_sendmsg+0x98/0x360
[ 1725.091749][T19636]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1725.091772][T19636]  sock_sendmsg_nosec+0x13a/0x180
[ 1725.091801][T19636]  ____sys_sendmsg+0x54e/0x850
[ 1725.091841][T19636]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1725.091885][T19636]  ? import_iovec+0x73/0xa0
[ 1725.091915][T19636]  ___sys_sendmsg+0x2a5/0x360
[ 1725.091945][T19636]  ? __lock_acquire+0x747/0x2de0
[ 1725.091975][T19636]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1725.092048][T19636]  ? __fget_files+0x2a/0x420
[ 1725.092078][T19636]  ? __fget_files+0x3a2/0x420
[ 1725.092123][T19636]  __x64_sys_sendmsg+0x1b1/0x290
[ 1725.092160][T19636]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 1725.092217][T19636]  do_syscall_64+0x166/0x520
[ 1725.092249][T19636]  ? trace_irq_disable+0x3b/0x140
[ 1725.092274][T19636]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1725.092300][T19636]  ? clear_bhb_loop+0x70/0xc0
[ 1725.092328][T19636]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1725.092353][T19636] RIP: 0033:0x7f9ab339e159
[ 1725.092375][T19636] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1725.092393][T19636] RSP: 002b:00007f9ab42f4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1725.092419][T19636] RAX: ffffffffffffffda RBX: 00007f9ab3625fa0 RCX: 00007f9ab339e159
[ 1725.092436][T19636] RDX: 0000000000000004 RSI: 0000200000000100 RDI: 0000000000000003
[ 1725.092452][T19636] RBP: 00007f9ab42f4090 R08: 0000000000000000 R09: 0000000000000000
[ 1725.092467][T19636] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1725.092481][T19636] R13: 00007f9ab3626038 R14: 00007f9ab3625fa0 R15: 00007ffdf8f77ad8
[ 1725.092518][T19636]  </TASK>
[ 1725.686018][T19652] netlink: 64 bytes leftover after parsing attributes in process `syz.0.13469'.
[ 1725.798787][T19654] syzkaller1: entered promiscuous mode
[ 1725.798813][T19654] syzkaller1: entered allmulticast mode
[ 1726.559988][T19685] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 1726.766390][T19689] IPVS: set_ctl: invalid protocol: 43 172.20.20.187:20001
[ 1726.863638][T19695] FAULT_INJECTION: forcing a failure.
[ 1726.863638][T19695] name failslab, interval 1, probability 0, space 0, times 0
[ 1726.863677][T19695] CPU: 0 UID: 0 PID: 19695 Comm: syz.0.13487 Not tainted syzkaller #0 PREEMPT(full) 
[ 1726.863702][T19695] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[ 1726.863717][T19695] Call Trace:
[ 1726.863727][T19695]  <TASK>
[ 1726.863737][T19695]  dump_stack_lvl+0xe8/0x150
[ 1726.863775][T19695]  should_fail_ex+0x410/0x560
[ 1726.863810][T19695]  should_failslab+0xa8/0x100
[ 1726.863841][T19695]  __kvmalloc_node_noprof+0x176/0x820
[ 1726.863874][T19695]  ? __rhashtable_init_noprof+0x545/0xaf0
[ 1726.863901][T19695]  ? __rhashtable_init_noprof+0x545/0xaf0
[ 1726.863936][T19695]  __rhashtable_init_noprof+0x545/0xaf0
[ 1726.863978][T19695]  __rhltable_init_noprof+0x26/0x70
[ 1726.864009][T19695]  sta_info_init+0x62/0x130
[ 1726.864035][T19695]  ieee80211_alloc_hw_nm+0x808/0x1f00
[ 1726.864067][T19695]  ? __pfx_ieee80211_emulate_add_chanctx+0x10/0x10
[ 1726.864103][T19695]  mac80211_hwsim_new_radio+0x1ea/0x5720
[ 1726.864145][T19695]  ? __pfx___nla_validate_parse+0x10/0x10
[ 1726.864195][T19695]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[ 1726.864226][T19695]  ? trace_kmalloc+0x2a/0xf0
[ 1726.864257][T19695]  hwsim_new_radio_nl+0xd8b/0xf90
[ 1726.864302][T19695]  genl_family_rcv_msg_doit+0x233/0x340
[ 1726.864345][T19695]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[ 1726.864399][T19695]  ? bpf_lsm_capable+0x9/0x20
[ 1726.864420][T19695]  ? security_capable+0x7e/0x2c0
[ 1726.864456][T19695]  genl_rcv_msg+0x614/0x7a0
[ 1726.864494][T19695]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 1726.864523][T19695]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[ 1726.864567][T19695]  netlink_rcv_skb+0x226/0x4a0
[ 1726.864592][T19695]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 1726.864624][T19695]  ? __pfx_netlink_rcv_skb+0x10/0x10
[ 1726.864665][T19695]  ? down_read+0x2be/0x330
[ 1726.864704][T19695]  genl_rcv+0x28/0x40
[ 1726.864730][T19695]  netlink_unicast+0x7bd/0x940
[ 1726.864776][T19695]  netlink_sendmsg+0x813/0xb40
[ 1726.864813][T19695]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1726.864844][T19695]  ? apparmor_socket_sendmsg+0x98/0x360
[ 1726.864874][T19695]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1726.864896][T19695]  sock_sendmsg_nosec+0x13a/0x180
[ 1726.864924][T19695]  ____sys_sendmsg+0x54e/0x850
[ 1726.864963][T19695]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1726.865013][T19695]  ? import_iovec+0x73/0xa0
[ 1726.865046][T19695]  ___sys_sendmsg+0x2a5/0x360
[ 1726.865078][T19695]  ? __lock_acquire+0x747/0x2de0
[ 1726.865108][T19695]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1726.865176][T19695]  ? __fget_files+0x2a/0x420
[ 1726.865207][T19695]  ? __fget_files+0x3a2/0x420
[ 1726.865248][T19695]  __x64_sys_sendmsg+0x1b1/0x290
[ 1726.865284][T19695]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 1726.865339][T19695]  do_syscall_64+0x166/0x520
[ 1726.865369][T19695]  ? trace_irq_disable+0x3b/0x140
[ 1726.865390][T19695]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1726.865413][T19695]  ? clear_bhb_loop+0x70/0xc0
[ 1726.865440][T19695]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1726.865463][T19695] RIP: 0033:0x7f9ab339e159
[ 1726.865485][T19695] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1726.865504][T19695] RSP: 002b:00007f9ab42f4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1726.865530][T19695] RAX: ffffffffffffffda RBX: 00007f9ab3625fa0 RCX: 00007f9ab339e159
[ 1726.865548][T19695] RDX: 0000000000000004 RSI: 0000200000000100 RDI: 0000000000000003
[ 1726.865563][T19695] RBP: 00007f9ab42f4090 R08: 0000000000000000 R09: 0000000000000000
[ 1726.865579][T19695] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1726.865594][T19695] R13: 00007f9ab3626038 R14: 00007f9ab3625fa0 R15: 00007ffdf8f77ad8
[ 1726.865631][T19695]  </TASK>
[ 1727.594835][T19708] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13486'.
[ 1728.060951][T19724] xt_l2tp: v2 doesn't support IP mode
[ 1728.061156][T19723] xt_l2tp: v2 doesn't support IP mode
[ 1728.626340][T19753] xt_nat: multiple ranges no longer supported
[ 1728.650102][T19748] netlink: Failed to add  helper -22
[ 1728.650162][T19748] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1729.130697][T19775] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13509'.
[ 1729.284128][T19787] netlink: 'syz.1.13513': attribute type 1 has an invalid length.
[ 1729.309603][T19789] FAULT_INJECTION: forcing a failure.
[ 1729.309603][T19789] name failslab, interval 1, probability 0, space 0, times 0
[ 1729.309638][T19789] CPU: 0 UID: 0 PID: 19789 Comm: syz.3.13514 Not tainted syzkaller #0 PREEMPT(full) 
[ 1729.309663][T19789] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[ 1729.309677][T19789] Call Trace:
[ 1729.309687][T19789]  <TASK>
[ 1729.309697][T19789]  dump_stack_lvl+0xe8/0x150
[ 1729.309736][T19789]  should_fail_ex+0x410/0x560
[ 1729.309778][T19789]  should_failslab+0xa8/0x100
[ 1729.309810][T19789]  __kmalloc_node_track_caller_noprof+0xfb/0x720
[ 1729.309838][T19789]  ? kobject_set_name_vargs+0x61/0x110
[ 1729.309872][T19789]  ? kobject_set_name_vargs+0x61/0x110
[ 1729.309920][T19789]  kvasprintf+0xeb/0x1a0
[ 1729.309954][T19789]  ? __pfx_kvasprintf+0x10/0x10
[ 1729.309996][T19789]  ? kvasprintf_const+0xe1/0x240
[ 1729.310030][T19789]  kobject_set_name_vargs+0x61/0x110
[ 1729.310069][T19789]  dev_set_name+0xe2/0x140
[ 1729.310103][T19789]  ? __pfx_ieee80211_emulate_remove_chanctx+0x10/0x10
[ 1729.310133][T19789]  ? rcu_is_watching+0x16/0xb0
[ 1729.310165][T19789]  ? __pfx_dev_set_name+0x10/0x10
[ 1729.310195][T19789]  ? wiphy_new_nm+0x625/0x1b20
[ 1729.310221][T19789]  ? __kmalloc_noprof+0x38c/0x720
[ 1729.310256][T19789]  wiphy_new_nm+0x7a1/0x1b20
[ 1729.310279][T19789]  ? ieee80211_alloc_hw_nm+0x903/0x1f00
[ 1729.310312][T19789]  ? __pfx_ieee80211_emulate_remove_chanctx+0x10/0x10
[ 1729.310341][T19789]  ieee80211_alloc_hw_nm+0x3f3/0x1f00
[ 1729.310372][T19789]  ? __pfx_ieee80211_emulate_add_chanctx+0x10/0x10
[ 1729.310407][T19789]  mac80211_hwsim_new_radio+0x1ea/0x5720
[ 1729.310448][T19789]  ? __pfx___nla_validate_parse+0x10/0x10
[ 1729.310499][T19789]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[ 1729.310530][T19789]  ? trace_kmalloc+0x2a/0xf0
[ 1729.310562][T19789]  hwsim_new_radio_nl+0xd8b/0xf90
[ 1729.310607][T19789]  genl_family_rcv_msg_doit+0x233/0x340
[ 1729.310647][T19789]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[ 1729.310693][T19789]  ? bpf_lsm_capable+0x9/0x20
[ 1729.310713][T19789]  ? security_capable+0x7e/0x2c0
[ 1729.310750][T19789]  genl_rcv_msg+0x614/0x7a0
[ 1729.310795][T19789]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 1729.310823][T19789]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[ 1729.310867][T19789]  netlink_rcv_skb+0x226/0x4a0
[ 1729.310893][T19789]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 1729.310925][T19789]  ? __pfx_netlink_rcv_skb+0x10/0x10
[ 1729.310966][T19789]  ? down_read+0x2be/0x330
[ 1729.311005][T19789]  genl_rcv+0x28/0x40
[ 1729.311032][T19789]  netlink_unicast+0x7bd/0x940
[ 1729.311080][T19789]  netlink_sendmsg+0x813/0xb40
[ 1729.311115][T19789]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1729.311150][T19789]  ? apparmor_socket_sendmsg+0x98/0x360
[ 1729.311180][T19789]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1729.311203][T19789]  sock_sendmsg_nosec+0x13a/0x180
[ 1729.311231][T19789]  ____sys_sendmsg+0x54e/0x850
[ 1729.311269][T19789]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1729.311313][T19789]  ? import_iovec+0x73/0xa0
[ 1729.311347][T19789]  ___sys_sendmsg+0x2a5/0x360
[ 1729.311378][T19789]  ? __lock_acquire+0x747/0x2de0
[ 1729.311409][T19789]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1729.311484][T19789]  ? __fget_files+0x2a/0x420
[ 1729.311517][T19789]  ? __fget_files+0x3a2/0x420
[ 1729.311560][T19789]  __x64_sys_sendmsg+0x1b1/0x290
[ 1729.311597][T19789]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 1729.311654][T19789]  do_syscall_64+0x166/0x520
[ 1729.311685][T19789]  ? trace_irq_disable+0x3b/0x140
[ 1729.311708][T19789]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1729.311733][T19789]  ? clear_bhb_loop+0x70/0xc0
[ 1729.311762][T19789]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1729.311794][T19789] RIP: 0033:0x7ff29439e159
[ 1729.311816][T19789] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1729.311836][T19789] RSP: 002b:00007ff2952a8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1729.311862][T19789] RAX: ffffffffffffffda RBX: 00007ff294625fa0 RCX: 00007ff29439e159
[ 1729.311879][T19789] RDX: 0000000000000004 RSI: 0000200000000100 RDI: 0000000000000003
[ 1729.311893][T19789] RBP: 00007ff2952a8090 R08: 0000000000000000 R09: 0000000000000000
[ 1729.311907][T19789] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1729.311922][T19789] R13: 00007ff294626038 R14: 00007ff294625fa0 R15: 00007ffe62ed0c78
[ 1729.311960][T19789]  </TASK>
[ 1729.774419][T19787] 8021q: adding VLAN 0 to HW filter on device bond2
[ 1729.836291][T19792] bond2: (slave gretap1): making interface the new active one
[ 1729.837191][T19792] bond2: (slave gretap1): Enslaving as an active interface with an up link
[ 1730.065132][T19808] netlink: 12 bytes leftover after parsing attributes in process `syz.1.13521'.
[ 1730.188773][T19814] IPVS: set_ctl: invalid protocol: 43 172.20.20.187:20001
[ 1730.207779][T19807] netlink: 'syz.0.13522': attribute type 61 has an invalid length.
[ 1730.207804][T19807] netlink: 'syz.0.13522': attribute type 62 has an invalid length.
[ 1730.208403][T19807] netlink: 'syz.0.13522': attribute type 1 has an invalid length.
[ 1730.302566][T19817] IPVS: set_ctl: invalid protocol: 43 172.20.20.187:20001
[ 1730.426185][T19825] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13528'.
[ 1730.453501][T19819] netlink: 44 bytes leftover after parsing attributes in process `syz.2.13524'.
[ 1730.453528][T19819] netlink: 'syz.2.13524': attribute type 3 has an invalid length.
[ 1730.463115][T19825] netlink: 72 bytes leftover after parsing attributes in process `syz.3.13528'.
[ 1730.950403][T19842] netlink: 'syz.2.13535': attribute type 1 has an invalid length.
[ 1731.030366][T19842] 8021q: adding VLAN 0 to HW filter on device bond3
[ 1731.129667][T19844] bond3: (slave geneve2): making interface the new active one
[ 1731.151760][T19844] bond3: (slave geneve2): Enslaving as an active interface with an up link
[ 1731.190933][T19854] IPVS: set_ctl: invalid protocol: 43 172.20.20.187:20001
[ 1731.341651][T19859] netlink: 'syz.4.13543': attribute type 7 has an invalid length.
[ 1731.341678][T19859] netlink: 'syz.4.13543': attribute type 5 has an invalid length.
[ 1731.341695][T19859] netlink: 17 bytes leftover after parsing attributes in process `syz.4.13543'.
[ 1731.428795][T19862] netlink: 16 bytes leftover after parsing attributes in process `syz.2.13541'.
[ 1731.428819][T19862] netlink: 356 bytes leftover after parsing attributes in process `syz.2.13541'.
[ 1731.428834][T19862] netlink: 68 bytes leftover after parsing attributes in process `syz.2.13541'.
[ 1731.428855][T19862] netlink: 16 bytes leftover after parsing attributes in process `syz.2.13541'.
[ 1731.434778][T19867] netlink: 'syz.0.13544': attribute type 1 has an invalid length.
[ 1731.434803][T19867] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13544'.
[ 1731.532316][T19867] 8021q: adding VLAN 0 to HW filter on device bond9
[ 1731.582913][T19863] netlink: 'syz.3.13542': attribute type 61 has an invalid length.
[ 1731.713151][T19878] v: renamed from erspan0
[ 1731.723437][T19878] v: entered allmulticast mode
[ 1731.723596][T19878] A link change request failed with some changes committed already. Interface v may have been left with an inconsistent configuration, please check.
[ 1731.988266][T19894] IPVS: set_ctl: invalid protocol: 43 172.20.20.187:20001
[ 1732.965284][T19926] IPVS: set_ctl: invalid protocol: 43 172.20.20.187:20001
[ 1733.055358][T19929] IPVS: mh: UDP 127.0.0.1:20000 - no destination available
[ 1733.842458][T19961] FAULT_INJECTION: forcing a failure.
[ 1733.842458][T19961] name failslab, interval 1, probability 0, space 0, times 0
[ 1733.842493][T19961] CPU: 0 UID: 0 PID: 19961 Comm: syz.4.13575 Not tainted syzkaller #0 PREEMPT(full) 
[ 1733.842518][T19961] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[ 1733.842531][T19961] Call Trace:
[ 1733.842540][T19961]  <TASK>
[ 1733.842549][T19961]  dump_stack_lvl+0xe8/0x150
[ 1733.842582][T19961]  should_fail_ex+0x410/0x560
[ 1733.842611][T19961]  should_failslab+0xa8/0x100
[ 1733.842639][T19961]  __kmalloc_node_track_caller_noprof+0xfb/0x720
[ 1733.842666][T19961]  ? kasprintf+0xe2/0x140
[ 1733.842693][T19961]  ? kasprintf+0xe2/0x140
[ 1733.842734][T19961]  kvasprintf+0xeb/0x1a0
[ 1733.842766][T19961]  ? __pfx_kvasprintf+0x10/0x10
[ 1733.842800][T19961]  ? do_raw_spin_lock+0x12b/0x2f0
[ 1733.842840][T19961]  kasprintf+0xe2/0x140
[ 1733.842875][T19961]  ? __pfx_kasprintf+0x10/0x10
[ 1733.842911][T19961]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[ 1733.842956][T19961]  ieee80211_alloc_led_names+0x141/0x2b0
[ 1733.842997][T19961]  ieee80211_alloc_hw_nm+0x1849/0x1f00
[ 1733.843029][T19961]  ? __pfx_ieee80211_emulate_add_chanctx+0x10/0x10
[ 1733.843066][T19961]  mac80211_hwsim_new_radio+0x1ea/0x5720
[ 1733.843107][T19961]  ? __pfx___nla_validate_parse+0x10/0x10
[ 1733.843159][T19961]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[ 1733.843189][T19961]  ? trace_kmalloc+0x2a/0xf0
[ 1733.843230][T19961]  hwsim_new_radio_nl+0xd8b/0xf90
[ 1733.843276][T19961]  genl_family_rcv_msg_doit+0x233/0x340
[ 1733.843316][T19961]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[ 1733.843363][T19961]  ? bpf_lsm_capable+0x9/0x20
[ 1733.843384][T19961]  ? security_capable+0x7e/0x2c0
[ 1733.843419][T19961]  genl_rcv_msg+0x614/0x7a0
[ 1733.843457][T19961]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 1733.843486][T19961]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[ 1733.843530][T19961]  netlink_rcv_skb+0x226/0x4a0
[ 1733.843555][T19961]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 1733.843587][T19961]  ? __pfx_netlink_rcv_skb+0x10/0x10
[ 1733.843629][T19961]  ? down_read+0x2be/0x330
[ 1733.843669][T19961]  genl_rcv+0x28/0x40
[ 1733.843696][T19961]  netlink_unicast+0x7bd/0x940
[ 1733.843744][T19961]  netlink_sendmsg+0x813/0xb40
[ 1733.843779][T19961]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1733.843813][T19961]  ? apparmor_socket_sendmsg+0x98/0x360
[ 1733.843843][T19961]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1733.843866][T19961]  sock_sendmsg_nosec+0x13a/0x180
[ 1733.843895][T19961]  ____sys_sendmsg+0x54e/0x850
[ 1733.843935][T19961]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1733.843987][T19961]  ? import_iovec+0x73/0xa0
[ 1733.844022][T19961]  ___sys_sendmsg+0x2a5/0x360
[ 1733.844054][T19961]  ? __lock_acquire+0x747/0x2de0
[ 1733.844083][T19961]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1733.844158][T19961]  ? __fget_files+0x2a/0x420
[ 1733.844189][T19961]  ? __fget_files+0x3a2/0x420
[ 1733.844234][T19961]  __x64_sys_sendmsg+0x1b1/0x290
[ 1733.844271][T19961]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 1733.844330][T19961]  do_syscall_64+0x166/0x520
[ 1733.844361][T19961]  ? trace_irq_disable+0x3b/0x140
[ 1733.844385][T19961]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1733.844410][T19961]  ? clear_bhb_loop+0x70/0xc0
[ 1733.844439][T19961]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1733.844462][T19961] RIP: 0033:0x7f47b679e159
[ 1733.844484][T19961] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1733.844504][T19961] RSP: 002b:00007f47b7729028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1733.844529][T19961] RAX: ffffffffffffffda RBX: 00007f47b6a25fa0 RCX: 00007f47b679e159
[ 1733.844547][T19961] RDX: 0000000000000004 RSI: 0000200000000100 RDI: 0000000000000003
[ 1733.844563][T19961] RBP: 00007f47b7729090 R08: 0000000000000000 R09: 0000000000000000
[ 1733.844579][T19961] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1733.844594][T19961] R13: 00007f47b6a26038 R14: 00007f47b6a25fa0 R15: 00007fff041ed178
[ 1733.844630][T19961]  </TASK>
[ 1734.356990][T19970] validate_nla: 8 callbacks suppressed
[ 1734.357151][T19970] netlink: 'syz.1.13579': attribute type 21 has an invalid length.
[ 1734.357238][T19970] netlink: 'syz.1.13579': attribute type 4 has an invalid length.
[ 1734.357255][T19970] netlink: 'syz.1.13579': attribute type 3 has an invalid length.
[ 1734.363279][T19966] netlink: 'syz.2.13577': attribute type 5 has an invalid length.
[ 1734.403768][T19971] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 1734.752873][T19982] IPVS: set_ctl: invalid protocol: 43 172.20.20.44:20004
[ 1734.877566][T19984] Set syz1 is full, maxelem 1029 reached
[ 1735.097486][T19992] __nla_validate_parse: 12 callbacks suppressed
[ 1735.097510][T19992] netlink: 28 bytes leftover after parsing attributes in process `syz.4.13585'.
[ 1735.609610][T20015] netlink: 24 bytes leftover after parsing attributes in process `syz.2.13592'.
[ 1735.609640][T20015] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[ 1735.878316][T20019] sock: sock_timestamping_bind_phc: sock not bind to device
[ 1735.966390][T20039] netlink: 24 bytes leftover after parsing attributes in process `syz.3.13603'.
[ 1736.057211][T20043] ip_tables: iptables: counters copy to user failed while replacing table
[ 1736.174206][T20046] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13606'.
[ 1736.210861][T20050] netlink: 112 bytes leftover after parsing attributes in process `syz.3.13608'.
[ 1736.299537][T20054] netlink: 'syz.2.13609': attribute type 7 has an invalid length.
[ 1736.304632][T20055] netlink: 24 bytes leftover after parsing attributes in process `syz.0.13607'.
[ 1736.590711][T20066] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13613'.
[ 1736.684097][T20068] netlink: 24 bytes leftover after parsing attributes in process `syz.2.13614'.
[ 1737.217336][T20093] netlink: 48 bytes leftover after parsing attributes in process `syz.4.13623'.
[ 1737.571575][T20111] IPVS: set_ctl: invalid protocol: 43 172.20.20.187:20001
[ 1737.953494][T20131] xt_bpf: check failed: parse error
[ 1738.314730][T20138] Set syz1 is full, maxelem 1029 reached
[ 1738.452307][T20143] FAULT_INJECTION: forcing a failure.
[ 1738.452307][T20143] name failslab, interval 1, probability 0, space 0, times 0
[ 1738.452344][T20143] CPU: 1 UID: 0 PID: 20143 Comm: syz.2.13639 Not tainted syzkaller #0 PREEMPT(full) 
[ 1738.452369][T20143] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[ 1738.452384][T20143] Call Trace:
[ 1738.452394][T20143]  <TASK>
[ 1738.452404][T20143]  dump_stack_lvl+0xe8/0x150
[ 1738.452444][T20143]  should_fail_ex+0x410/0x560
[ 1738.452478][T20143]  should_failslab+0xa8/0x100
[ 1738.452510][T20143]  __kmalloc_node_track_caller_noprof+0xfb/0x720
[ 1738.452537][T20143]  ? kasprintf+0xe2/0x140
[ 1738.452566][T20143]  ? kasprintf+0xe2/0x140
[ 1738.452604][T20143]  kvasprintf+0xeb/0x1a0
[ 1738.452643][T20143]  ? __pfx_kvasprintf+0x10/0x10
[ 1738.452688][T20143]  ? do_raw_spin_lock+0x12b/0x2f0
[ 1738.452729][T20143]  kasprintf+0xe2/0x140
[ 1738.452768][T20143]  ? __pfx_kasprintf+0x10/0x10
[ 1738.452807][T20143]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[ 1738.452845][T20143]  ieee80211_alloc_led_names+0x1de/0x2b0
[ 1738.452885][T20143]  ieee80211_alloc_hw_nm+0x1849/0x1f00
[ 1738.452917][T20143]  ? __pfx_ieee80211_emulate_add_chanctx+0x10/0x10
[ 1738.452954][T20143]  mac80211_hwsim_new_radio+0x1ea/0x5720
[ 1738.452997][T20143]  ? __pfx___nla_validate_parse+0x10/0x10
[ 1738.453048][T20143]  ? __pfx_mac80211_hwsim_new_radio+0x10/0x10
[ 1738.453079][T20143]  ? trace_kmalloc+0x2a/0xf0
[ 1738.453110][T20143]  hwsim_new_radio_nl+0xd8b/0xf90
[ 1738.453157][T20143]  genl_family_rcv_msg_doit+0x233/0x340
[ 1738.453198][T20143]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[ 1738.453245][T20143]  ? bpf_lsm_capable+0x9/0x20
[ 1738.453267][T20143]  ? security_capable+0x7e/0x2c0
[ 1738.453304][T20143]  genl_rcv_msg+0x614/0x7a0
[ 1738.453341][T20143]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 1738.453371][T20143]  ? __pfx_hwsim_new_radio_nl+0x10/0x10
[ 1738.453416][T20143]  netlink_rcv_skb+0x226/0x4a0
[ 1738.453442][T20143]  ? __pfx_genl_rcv_msg+0x10/0x10
[ 1738.453475][T20143]  ? __pfx_netlink_rcv_skb+0x10/0x10
[ 1738.453517][T20143]  ? down_read+0x2be/0x330
[ 1738.453557][T20143]  genl_rcv+0x28/0x40
[ 1738.453583][T20143]  netlink_unicast+0x7bd/0x940
[ 1738.453630][T20143]  netlink_sendmsg+0x813/0xb40
[ 1738.453673][T20143]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1738.453708][T20143]  ? apparmor_socket_sendmsg+0x98/0x360
[ 1738.453738][T20143]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1738.453761][T20143]  sock_sendmsg_nosec+0x13a/0x180
[ 1738.453792][T20143]  ____sys_sendmsg+0x54e/0x850
[ 1738.453832][T20143]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1738.453875][T20143]  ? import_iovec+0x73/0xa0
[ 1738.453910][T20143]  ___sys_sendmsg+0x2a5/0x360
[ 1738.453942][T20143]  ? __lock_acquire+0x747/0x2de0
[ 1738.453971][T20143]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1738.454046][T20143]  ? __fget_files+0x2a/0x420
[ 1738.454078][T20143]  ? __fget_files+0x3a2/0x420
[ 1738.454128][T20143]  __x64_sys_sendmsg+0x1b1/0x290
[ 1738.454164][T20143]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 1738.454229][T20143]  do_syscall_64+0x166/0x520
[ 1738.454261][T20143]  ? trace_irq_disable+0x3b/0x140
[ 1738.454285][T20143]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1738.454316][T20143]  ? clear_bhb_loop+0x70/0xc0
[ 1738.454345][T20143]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1738.454368][T20143] RIP: 0033:0x7f353139e159
[ 1738.454396][T20143] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1738.454417][T20143] RSP: 002b:00007f353228f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1738.454442][T20143] RAX: ffffffffffffffda RBX: 00007f3531625fa0 RCX: 00007f353139e159
[ 1738.454461][T20143] RDX: 0000000000000004 RSI: 0000200000000100 RDI: 0000000000000003
[ 1738.454476][T20143] RBP: 00007f353228f090 R08: 0000000000000000 R09: 0000000000000000
[ 1738.454492][T20143] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[ 1738.454506][T20143] R13: 00007f3531626038 R14: 00007f3531625fa0 R15: 00007fff31c0c888
[ 1738.454546][T20143]  </TASK>
[ 1739.026644][T20152] netlink: 32 bytes leftover after parsing attributes in process `syz.4.13643'.
[ 1739.057096][T20153] IPVS: set_ctl: invalid protocol: 43 172.20.20.187:20001
[ 1739.083202][T20154] IPVS: sync thread started: state = MASTER, mcast_ifn = lo, syncid = 0, id = 0
[ 1739.173225][T20158] IPVS: stopping master sync thread 20154 ...
[ 1739.356388][T20165] netlink: 'syz.2.13646': attribute type 1 has an invalid length.
[ 1739.427806][T20165] 8021q: adding VLAN 0 to HW filter on device bond4
[ 1739.486163][T20165] gretap1: entered promiscuous mode
[ 1739.524009][T20167] netlink: 'syz.2.13646': attribute type 3 has an invalid length.
[ 1739.524177][T20167] netlink: 'syz.2.13646': attribute type 3 has an invalid length.
[ 1739.674030][T20174] sctp: [Deprecated]: syz.2.13648 (pid 20174) Use of int in maxseg socket option.
[ 1739.674030][T20174] Use struct sctp_assoc_value instead
[ 1740.065858][T20186] openvswitch: netlink: Missing key (keys=c0, expected=500)
[ 1740.318546][T20197] syzkaller0: entered promiscuous mode
[ 1740.318573][T20197] syzkaller0: entered allmulticast mode
[ 1740.494745][T20201] IPVS: set_ctl: invalid protocol: 43 172.20.20.187:20001
[ 1740.782233][T20211] nbd5: detected capacity change from 0 to 63
[ 1740.907623][T20217] netlink: 12 bytes leftover after parsing attributes in process `syz.4.13662'.
[ 1741.033004][T27767] block nbd5: Receive control failed (result -104)
[ 1741.489411][T20245] netlink: 24 bytes leftover after parsing attributes in process `syz.3.13668'.
[ 1741.578894][T20244] IPVS: set_ctl: invalid protocol: 43 172.20.20.187:20001
[ 1741.959177][T20265] netlink: 20 bytes leftover after parsing attributes in process `syz.4.13678'.
[ 1742.370741][T20281] netlink: 'syz.0.13684': attribute type 3 has an invalid length.
[ 1742.393534][T20281] netlink: 'syz.0.13684': attribute type 1 has an invalid length.
[ 1742.393559][T20281] netlink: 'syz.0.13684': attribute type 268 has an invalid length.
[ 1742.393577][T20281] netlink: 224 bytes leftover after parsing attributes in process `syz.0.13684'.
[ 1743.058391][T20314] netlink: 44 bytes leftover after parsing attributes in process `syz.2.13698'.
[ 1743.058415][T20314] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13698'.
[ 1743.061153][T20315] netlink: 44 bytes leftover after parsing attributes in process `syz.2.13698'.
[ 1743.061181][T20315] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13698'.
[ 1743.133475][T20318] xt_bpf: check failed: parse error
[ 1743.243131][T20323] FAULT_INJECTION: forcing a failure.
[ 1743.243131][T20323] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1743.243158][T20323] CPU: 0 UID: 0 PID: 20323 Comm: syz.2.13699 Not tainted syzkaller #0 PREEMPT(full) 
[ 1743.243179][T20323] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[ 1743.243189][T20323] Call Trace:
[ 1743.243196][T20323]  <TASK>
[ 1743.243204][T20323]  dump_stack_lvl+0xe8/0x150
[ 1743.243232][T20323]  should_fail_ex+0x410/0x560
[ 1743.243256][T20323]  _copy_to_user+0x31/0xb0
[ 1743.243280][T20323]  simple_read_from_buffer+0xe1/0x170
[ 1743.243315][T20323]  proc_fail_nth_read+0x1bb/0x230
[ 1743.243330][T20323]  ? common_file_perm+0x20e/0x2b0
[ 1743.243354][T20323]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1743.243374][T20323]  ? rw_verify_area+0x24a/0x4c0
[ 1743.243400][T20323]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1743.243416][T20323]  vfs_read+0x213/0xa80
[ 1743.243444][T20323]  ? __pfx___mutex_lock+0x10/0x10
[ 1743.243469][T20323]  ? __pfx_vfs_read+0x10/0x10
[ 1743.243496][T20323]  ? __fget_files+0x2a/0x420
[ 1743.243522][T20323]  ? __fget_files+0x3a2/0x420
[ 1743.243544][T20323]  ? __fget_files+0x2a/0x420
[ 1743.243574][T20323]  ksys_read+0x150/0x270
[ 1743.243621][T20323]  ? __pfx_ksys_read+0x10/0x10
[ 1743.243669][T20323]  do_syscall_64+0x166/0x520
[ 1743.243713][T20323]  ? trace_irq_disable+0x3b/0x140
[ 1743.243730][T20323]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1743.243746][T20323]  ? clear_bhb_loop+0x70/0xc0
[ 1743.243766][T20323]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1743.243786][T20323] RIP: 0033:0x7f353135e98e
[ 1743.243801][T20323] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 1743.243814][T20323] RSP: 002b:00007f353226dfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 1743.243832][T20323] RAX: ffffffffffffffda RBX: 00007f353226e6c0 RCX: 00007f353135e98e
[ 1743.243844][T20323] RDX: 000000000000000f RSI: 00007f353226e0a0 RDI: 0000000000000009
[ 1743.243855][T20323] RBP: 00007f353226e090 R08: 0000000000000000 R09: 0000000000000000
[ 1743.243865][T20323] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1743.243875][T20323] R13: 00007f3531626128 R14: 00007f3531626090 R15: 00007fff31c0c888
[ 1743.243901][T20323]  </TASK>
[ 1743.592581][T20327] netlink: 28 bytes leftover after parsing attributes in process `syz.3.13702'.
[ 1743.733112][T20333] Set syz1 is full, maxelem 1029 reached
[ 1743.852759][T20341] tipc: Enabling of bearer <eth:syzkaller0> rejected, already enabled
[ 1743.872827][T20341] syzkaller0: Caught tx_queue_len zero misconfig
[ 1744.392011][T20366] ip_tables: iptables: counters copy to user failed while replacing table
[ 1744.974140][T20387] netlink: 12 bytes leftover after parsing attributes in process `syz.4.13721'.
[ 1745.108415][T20392] 
[ 1745.110833][T20392] ======================================================
[ 1745.117888][T20392] WARNING: possible circular locking dependency detected
[ 1745.124956][T20392] syzkaller #0 Not tainted
[ 1745.129413][T20392] ------------------------------------------------------
[ 1745.136467][T20392] syz.3.13723/20392 is trying to acquire lock:
[ 1745.142677][T20392] ffffffff8ee904e0 (fs_reclaim){+.+.}-{0:0}, at: prepare_alloc_pages+0x149/0x600
[ 1745.151887][T20392] 
[ 1745.151887][T20392] but task is already holding lock:
[ 1745.159294][T20392] ffff888036041078 (&mm->mmap_lock){++++}-{4:4}, at: lock_mm_and_find_vma+0x36/0x340
[ 1745.168861][T20392] 
[ 1745.168861][T20392] which lock already depends on the new lock.
[ 1745.168861][T20392] 
[ 1745.179298][T20392] 
[ 1745.179298][T20392] the existing dependency chain (in reverse order) is:
[ 1745.188344][T20392] 
[ 1745.188344][T20392] -> #7 (&mm->mmap_lock){++++}-{4:4}:
[ 1745.195942][T20392]        __might_fault+0xcb/0x130
[ 1745.201019][T20392]        _copy_from_user+0x28/0xb0
[ 1745.206203][T20392]        ipv6_flowlabel_opt+0x153/0x2b10
[ 1745.212020][T20392]        do_ipv6_setsockopt+0x9cb/0x2960
[ 1745.217698][T20392]        ipv6_setsockopt+0x59/0x170
[ 1745.222962][T20392]        do_sock_setsockopt+0x17c/0x1b0
[ 1745.228541][T20392]        __x64_sys_setsockopt+0x13d/0x1b0
[ 1745.234308][T20392]        do_syscall_64+0x166/0x520
[ 1745.239475][T20392]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1745.245934][T20392] 
[ 1745.245934][T20392] -> #6 (sk_lock-AF_INET6-NBD){+.+.}-{0:0}:
[ 1745.254070][T20392]        lock_sock_nested+0x41/0x100
[ 1745.259413][T20392]        inet_shutdown+0x6a/0x390
[ 1745.264495][T20392]        nbd_mark_nsock_dead+0x2cb/0x550
[ 1745.270250][T20392]        sock_shutdown+0x15e/0x260
[ 1745.275446][T20392]        nbd_clear_sock+0x24/0x170
[ 1745.280604][T20392]        nbd_config_put+0x477/0x7e0
[ 1745.285839][T20392]        nbd_genl_connect+0x19b8/0x1cd0
[ 1745.291424][T20392]        genl_family_rcv_msg_doit+0x233/0x340
[ 1745.297569][T20392]        genl_rcv_msg+0x614/0x7a0
[ 1745.302628][T20392]        netlink_rcv_skb+0x226/0x4a0
[ 1745.307941][T20392]        genl_rcv+0x28/0x40
[ 1745.312507][T20392]        netlink_unicast+0x7bd/0x940
[ 1745.317843][T20392]        netlink_sendmsg+0x813/0xb40
[ 1745.323165][T20392]        sock_sendmsg_nosec+0x13a/0x180
[ 1745.328743][T20392]        ____sys_sendmsg+0x54e/0x850
[ 1745.334083][T20392]        ___sys_sendmsg+0x2a5/0x360
[ 1745.339330][T20392]        __x64_sys_sendmsg+0x1b1/0x290
[ 1745.344836][T20392]        do_syscall_64+0x166/0x520
[ 1745.349996][T20392]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1745.356457][T20392] 
[ 1745.356457][T20392] -> #5 (&nsock->tx_lock){+.+.}-{4:4}:
[ 1745.364183][T20392]        __mutex_lock+0x19d/0x1550
[ 1745.369343][T20392]        nbd_queue_rq+0x373/0xff0
[ 1745.374414][T20392]        blk_mq_dispatch_rq_list+0x499/0x1990
[ 1745.380697][T20392]        __blk_mq_sched_dispatch_requests+0xd36/0x1580
[ 1745.387675][T20392]        blk_mq_sched_dispatch_requests+0xd7/0x190
[ 1745.394219][T20392]        blk_mq_run_work_fn+0x16c/0x300
[ 1745.399805][T20392]        process_scheduled_works+0xc3d/0x1630
[ 1745.405937][T20392]        worker_thread+0xa47/0xfb0
[ 1745.411083][T20392]        kthread+0x38b/0x480
[ 1745.415697][T20392]        ret_from_fork+0x514/0xb70
[ 1745.420945][T20392]        ret_from_fork_asm+0x1a/0x30
[ 1745.426265][T20392] 
[ 1745.426265][T20392] -> #4 (&cmd->lock){+.+.}-{4:4}:
[ 1745.433500][T20392]        __mutex_lock+0x19d/0x1550
[ 1745.438648][T20392]        nbd_queue_rq+0xc1/0xff0
[ 1745.443612][T20392]        blk_mq_dispatch_rq_list+0x499/0x1990
[ 1745.449707][T20392]        __blk_mq_sched_dispatch_requests+0xd36/0x1580
[ 1745.456584][T20392]        blk_mq_sched_dispatch_requests+0xd7/0x190
[ 1745.463161][T20392]        blk_mq_run_work_fn+0x16c/0x300
[ 1745.468740][T20392]        process_scheduled_works+0xc3d/0x1630
[ 1745.474834][T20392]        worker_thread+0xa47/0xfb0
[ 1745.479990][T20392]        kthread+0x38b/0x480
[ 1745.484621][T20392]        ret_from_fork+0x514/0xb70
[ 1745.489755][T20392]        ret_from_fork_asm+0x1a/0x30
[ 1745.495086][T20392] 
[ 1745.495086][T20392] -> #3 (set->srcu){.+.+}-{0:0}:
[ 1745.502278][T20392]        __synchronize_srcu+0xc9/0x2f0
[ 1745.507768][T20392]        elevator_switch+0x1e8/0x7b0
[ 1745.513149][T20392]        elevator_change+0x2fa/0x480
[ 1745.518463][T20392]        elevator_set_default+0x375/0x440
[ 1745.524215][T20392]        blk_register_queue+0x3f3/0x4e0
[ 1745.529871][T20392]        __add_disk+0x6b8/0xdb0
[ 1745.534758][T20392]        add_disk_fwnode+0x100/0x3a0
[ 1745.540075][T20392]        nbd_dev_add+0x733/0xb60
[ 1745.545056][T20392]        nbd_init+0x168/0x1f0
[ 1745.549773][T20392]        do_one_initcall+0x250/0x870
[ 1745.555092][T20392]        do_initcall_level+0x10a/0x1a0
[ 1745.560587][T20392]        do_initcalls+0x59/0xa0
[ 1745.565469][T20392]        kernel_init_freeable+0x29d/0x3e0
[ 1745.571212][T20392]        kernel_init+0x22/0x1d0
[ 1745.576102][T20392]        ret_from_fork+0x514/0xb70
[ 1745.581319][T20392]        ret_from_fork_asm+0x1a/0x30
[ 1745.586651][T20392] 
[ 1745.586651][T20392] -> #2 (&q->elevator_lock){+.+.}-{4:4}:
[ 1745.594492][T20392]        __mutex_lock+0x19d/0x1550
[ 1745.599643][T20392]        elevator_change+0x1af/0x480
[ 1745.604959][T20392]        elevator_set_none+0xb5/0x140
[ 1745.610355][T20392]        blk_mq_update_nr_hw_queues+0x5ef/0x19f0
[ 1745.616726][T20392]        nbd_start_device+0x189/0xb30
[ 1745.622126][T20392]        nbd_genl_connect+0x167d/0x1cd0
[ 1745.627693][T20392]        genl_family_rcv_msg_doit+0x233/0x340
[ 1745.633793][T20392]        genl_rcv_msg+0x614/0x7a0
[ 1745.638841][T20392]        netlink_rcv_skb+0x226/0x4a0
[ 1745.644143][T20392]        genl_rcv+0x28/0x40
[ 1745.648671][T20392]        netlink_unicast+0x7bd/0x940
[ 1745.653985][T20392]        netlink_sendmsg+0x813/0xb40
[ 1745.659287][T20392]        sock_sendmsg_nosec+0x13a/0x180
[ 1745.664939][T20392]        ____sys_sendmsg+0x54e/0x850
[ 1745.670255][T20392]        ___sys_sendmsg+0x2a5/0x360
[ 1745.675479][T20392]        __x64_sys_sendmsg+0x1b1/0x290
[ 1745.680992][T20392]        do_syscall_64+0x166/0x520
[ 1745.686144][T20392]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1745.692625][T20392] 
[ 1745.692625][T20392] -> #1 (&q->q_usage_counter(io)#49){++++}-{0:0}:
[ 1745.701292][T20392]        blk_alloc_queue+0x544/0x690
[ 1745.706623][T20392]        __blk_mq_alloc_disk+0x194/0x390
[ 1745.712284][T20392]        nbd_dev_add+0x494/0xb60
[ 1745.717247][T20392]        nbd_init+0x168/0x1f0
[ 1745.721955][T20392]        do_one_initcall+0x250/0x870
[ 1745.727269][T20392]        do_initcall_level+0x10a/0x1a0
[ 1745.732751][T20392]        do_initcalls+0x59/0xa0
[ 1745.738062][T20392]        kernel_init_freeable+0x29d/0x3e0
[ 1745.743811][T20392]        kernel_init+0x22/0x1d0
[ 1745.748689][T20392]        ret_from_fork+0x514/0xb70
[ 1745.753822][T20392]        ret_from_fork_asm+0x1a/0x30
[ 1745.759164][T20392] 
[ 1745.759164][T20392] -> #0 (fs_reclaim){+.+.}-{0:0}:
[ 1745.766413][T20392]        __lock_acquire+0x164c/0x2de0
[ 1745.771849][T20392]        lock_acquire+0x115/0x350
[ 1745.776902][T20392]        fs_reclaim_acquire+0x71/0x100
[ 1745.782396][T20392]        prepare_alloc_pages+0x149/0x600
[ 1745.788054][T20392]        __alloc_frozen_pages_noprof+0x185/0x5a0
[ 1745.794437][T20392]        alloc_pages_mpol+0x21e/0x390
[ 1745.799860][T20392]        alloc_pages_noprof+0xb1/0x2b0
[ 1745.805351][T20392]        __pmd_alloc+0x3a/0x5c0
[ 1745.810231][T20392]        handle_mm_fault+0xe9d/0x3750
[ 1745.815629][T20392]        do_user_addr_fault+0x746/0x1340
[ 1745.821289][T20392]        exc_page_fault+0x6a/0xc0
[ 1745.826339][T20392]        asm_exc_page_fault+0x26/0x30
[ 1745.831742][T20392]        rep_movs_alternative+0x4a/0xa0
[ 1745.837310][T20392]        _copy_from_user+0x7a/0xb0
[ 1745.842468][T20392]        ip6gre_tunnel_siocdevprivate+0x373/0xd90
[ 1745.848998][T20392]        dev_ifsioc+0xb56/0x1360
[ 1745.854079][T20392]        dev_ioctl+0x84c/0x1150
[ 1745.858990][T20392]        sock_ioctl+0x753/0x7e0
[ 1745.863905][T20392]        __se_sys_ioctl+0xfc/0x170
[ 1745.869054][T20392]        do_syscall_64+0x166/0x520
[ 1745.874240][T20392]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1745.880693][T20392] 
[ 1745.880693][T20392] other info that might help us debug this:
[ 1745.880693][T20392] 
[ 1745.890961][T20392] Chain exists of:
[ 1745.890961][T20392]   fs_reclaim --> sk_lock-AF_INET6-NBD --> &mm->mmap_lock
[ 1745.890961][T20392] 
[ 1745.903959][T20392]  Possible unsafe locking scenario:
[ 1745.903959][T20392] 
[ 1745.911473][T20392]        CPU0                    CPU1
[ 1745.916874][T20392]        ----                    ----
[ 1745.922266][T20392]   rlock(&mm->mmap_lock);
[ 1745.926805][T20392]                                lock(sk_lock-AF_INET6-NBD);
[ 1745.934211][T20392]                                lock(&mm->mmap_lock);
[ 1745.941092][T20392]   lock(fs_reclaim);
[ 1745.945107][T20392] 
[ 1745.945107][T20392]  *** DEADLOCK ***
[ 1745.945107][T20392] 
[ 1745.953304][T20392] locks held by syz.3.13723/20392: 3, last CPU#1:
[ 1745.959782][T20392]  #0: ffffffff90254f20 (rtnl_mutex){+.+.}-{4:4}, at: dev_ioctl+0x83c/0x1150
[ 1745.968629][T20392]  #1: ffff88805765d460 (&ign->tunnels_lock){+.+.}-{4:4}, at: ip6gre_tunnel_siocdevprivate+0x27b/0xd90
[ 1745.979736][T20392]  #2: ffff888036041078 (&mm->mmap_lock){++++}-{4:4}, at: lock_mm_and_find_vma+0x36/0x340
[ 1745.989714][T20392] 
[ 1745.989714][T20392] stack backtrace:
[ 1745.995643][T20392] CPU: 1 UID: 0 PID: 20392 Comm: syz.3.13723 Not tainted syzkaller #0 PREEMPT(full) 
[ 1746.005138][T20392] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[ 1746.015235][T20392] Call Trace:
[ 1746.018555][T20392]  <TASK>
[ 1746.021518][T20392]  dump_stack_lvl+0xe8/0x150
[ 1746.026151][T20392]  print_circular_bug+0x2e2/0x300
[ 1746.031221][T20392]  check_noncircular+0x12f/0x150
[ 1746.036204][T20392]  __lock_acquire+0x164c/0x2de0
[ 1746.041098][T20392]  ? mas_next_slot+0xc98/0xd70
[ 1746.045908][T20392]  lock_acquire+0x115/0x350
[ 1746.050539][T20392]  ? prepare_alloc_pages+0x149/0x600
[ 1746.055875][T20392]  ? __lock_acquire+0x747/0x2de0
[ 1746.060843][T20392]  fs_reclaim_acquire+0x71/0x100
[ 1746.065822][T20392]  ? prepare_alloc_pages+0x149/0x600
[ 1746.071153][T20392]  prepare_alloc_pages+0x149/0x600
[ 1746.076306][T20392]  __alloc_frozen_pages_noprof+0x185/0x5a0
[ 1746.082155][T20392]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[ 1746.088532][T20392]  ? __pfx_policy_nodemask+0x10/0x10
[ 1746.093873][T20392]  alloc_pages_mpol+0x21e/0x390
[ 1746.099295][T20392]  alloc_pages_noprof+0xb1/0x2b0
[ 1746.104452][T20392]  __pmd_alloc+0x3a/0x5c0
[ 1746.108833][T20392]  handle_mm_fault+0xe9d/0x3750
[ 1746.113738][T20392]  ? handle_mm_fault+0xf1/0x3750
[ 1746.118722][T20392]  ? __pfx_handle_mm_fault+0x10/0x10
[ 1746.124067][T20392]  ? __lock_acquire+0x747/0x2de0
[ 1746.129044][T20392]  ? lock_mm_and_find_vma+0xa7/0x340
[ 1746.134379][T20392]  do_user_addr_fault+0x746/0x1340
[ 1746.139533][T20392]  exc_page_fault+0x6a/0xc0
[ 1746.144167][T20392]  asm_exc_page_fault+0x26/0x30
[ 1746.149052][T20392] RIP: 0010:rep_movs_alternative+0x4a/0xa0
[ 1746.154900][T20392] Code: 67 04 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 <f3> a4 e9 0f 67 04 00 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48
[ 1746.174558][T20392] RSP: 0018:ffffc900063c7af8 EFLAGS: 00050206
[ 1746.180667][T20392] RAX: 00007ffffffff001 RBX: 000000000000004c RCX: 000000000000004c
[ 1746.188680][T20392] RDX: 0000000000000001 RSI: 0000000000000000 RDI: ffffc900063c7c30
[ 1746.196686][T20392] RBP: ffffc900063c7d00 R08: 0000000000000003 R09: 0000000000000004
[ 1746.204696][T20392] R10: dffffc0000000000 R11: fffff52000c78f8f R12: dffffc0000000000
[ 1746.212710][T20392] R13: ffff88805765d000 R14: ffffc900063c7c30 R15: 0000000000000000
[ 1746.220729][T20392]  _copy_from_user+0x7a/0xb0
[ 1746.225372][T20392]  ip6gre_tunnel_siocdevprivate+0x373/0xd90
[ 1746.231312][T20392]  ? __pfx_ip6gre_tunnel_siocdevprivate+0x10/0x10
[ 1746.237804][T20392]  ? __pfx___mutex_lock+0x10/0x10
[ 1746.242867][T20392]  ? full_name_hash+0x92/0xe0
[ 1746.247770][T20392]  dev_ifsioc+0xb56/0x1360
[ 1746.252252][T20392]  dev_ioctl+0x84c/0x1150
[ 1746.256645][T20392]  sock_ioctl+0x753/0x7e0
[ 1746.261034][T20392]  ? __pfx_sock_ioctl+0x10/0x10
[ 1746.266006][T20392]  ? rcu_is_watching+0x16/0xb0
[ 1746.270814][T20392]  ? bpf_lsm_file_ioctl+0x9/0x20
[ 1746.275800][T20392]  ? __pfx_sock_ioctl+0x10/0x10
[ 1746.280716][T20392]  __se_sys_ioctl+0xfc/0x170
[ 1746.285360][T20392]  do_syscall_64+0x166/0x520
[ 1746.290007][T20392]  ? trace_irq_disable+0x3b/0x140
[ 1746.295080][T20392]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1746.301189][T20392]  ? clear_bhb_loop+0x70/0xc0
[ 1746.305908][T20392]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1746.311851][T20392] RIP: 0033:0x7ff29439e159
[ 1746.316302][T20392] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1746.336124][T20392] RSP: 002b:00007ff2952a8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1746.344583][T20392] RAX: ffffffffffffffda RBX: 00007ff294625fa0 RCX: 00007ff29439e159
[ 1746.352590][T20392] RDX: 0000200000000140 RSI: 00000000000089f3 RDI: 0000000000000006
[ 1746.360598][T20392] RBP: 00007ff29443506b R08: 0000000000000000 R09: 0000000000000000
[ 1746.368639][T20392] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1746.376642][T20392] R13: 00007ff294626038 R14: 00007ff294625fa0 R15: 00007ffe62ed0c78
[ 1746.384666][T20392]  </TASK>
[ 1747.597584][ T1722] block nbd5: Connection timed out, retrying (0/1 alive)
[ 1747.597637][ T1722] block nbd5: Connection timed out, retrying (0/1 alive)
[ 1747.597672][ T1722] block nbd5: Connection timed out, retrying (0/1 alive)
[ 1747.597706][ T1722] block nbd5: Connection timed out, retrying (0/1 alive)
[ 1747.597762][ T1722] block nbd5: Dead connection, failed to find a fallback
[ 1747.597788][ T1722] block nbd5: shutting down sockets
[ 1747.597803][ T1722] I/O error, dev nbd5, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[ 1747.597833][ T1722] Buffer I/O error on dev nbd5, logical block 3, async page read
[ 1747.597860][ T1722] I/O error, dev nbd5, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[ 1747.597884][ T1722] Buffer I/O error on dev nbd5, logical block 2, async page read
[ 1747.597906][ T1722] I/O error, dev nbd5, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[ 1747.597930][ T1722] Buffer I/O error on dev nbd5, logical block 1, async page read
[ 1747.597951][ T1722] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[ 1747.597976][ T1722] Buffer I/O error on dev nbd5, logical block 0, async page read
[ 1747.598140][ T1722] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 4 prio class 2
[ 1747.598166][ T1722] Buffer I/O error on dev nbd5, logical block 0, async page read
[ 1747.598187][ T1722] Buffer I/O error on dev nbd5, logical block 1, async page read
[ 1747.598198][ T1722] Buffer I/O error on dev nbd5, logical block 2, async page read
[ 1747.598211][ T1722] Buffer I/O error on dev nbd5, logical block 3, async page read
[ 1747.598372][ T1693] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[ 1747.598400][ T1693] Buffer I/O error on dev nbd5, logical block 0, async page read
[ 1747.598521][ T1693] I/O error, dev nbd5, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[ 1747.598540][ T1693] Buffer I/O error on dev nbd5, logical block 1, async page read
[ 1747.598648][ T1693] I/O error, dev nbd5, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[ 1747.598729][ T1693] I/O error, dev nbd5, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[ 1747.598801][ T1693] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[ 1747.599668][T20170] ldm_validate_partition_table(): Disk read failed.
[ 1747.600445][T20170] Dev nbd5: unable to read RDB block 0
[ 1747.601295][T20170]  nbd5: unable to read partition table
[ 1747.663246][T20170] ldm_validate_partition_table(): Disk read failed.
[ 1747.667551][T20170] Dev nbd5: unable to read RDB block 0
[ 1747.670971][T20170]  nbd5: unable to read partition table