last executing test programs: 7.569183031s ago: executing program 3 (id=8679): pipe(&(0x7f0000000040)={0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) write(r1, &(0x7f0000000080)="075ab6b15816a91a34958c9c7e219652efdabc9831d279f6dcf9d038a9be27e2b396e0917c721d209ecf74da1d9f5a77e3114fcdbe4878ec45eb07f2b6328ca7c44ddf8dadc4449134d92dea988c68e0adc00c63458875d4ec80ff3bd85fa43b9dec274c52d581324de36a3d3a3382d90bf0153095649dd9d67c6f25eab14b1a3718", 0x82) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) (async) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) 6.614584732s ago: executing program 3 (id=8685): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x94) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = epoll_create1(0x80000) ioctl$FS_IOC_SETFLAGS(r2, 0x40088a01, &(0x7f0000000000)=0x10) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000040)) r4 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_buf(r4, 0x107, 0xd, 0x0, &(0x7f0000000400)) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000000400)={0xa000001c}) r5 = socket$packet(0x11, 0x2, 0x300) r6 = accept(r5, &(0x7f0000000140)=@xdp, &(0x7f00000001c0)=0x80) r7 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r7, 0x0, 0xc8, &(0x7f0000000080), 0x4) r8 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000440)={'vcan0\x00', 0x0}) bind$can_j1939(r8, &(0x7f0000000180)={0x1d, r9, 0x400, {0x1, 0xf0, 0x4}}, 0x18) connect$can_j1939(r8, &(0x7f0000000000)={0x1d, r9, 0x0, {0x2, 0xff, 0x3}, 0xff}, 0x18) setsockopt$MRT_ADD_VIF(r7, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x4, 0x0, 0x0, @vifc_lcl_addr=@dev={0xac, 0x14, 0x14, 0x20}, @dev={0xac, 0x14, 0x14, 0xfd}}, 0x10) close(r7) syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r6) sendmsg$NFT_MSG_GETCHAIN(r6, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000300)={&(0x7f0000000540)={0xac, 0x4, 0xa, 0x101, 0x0, 0x0, {0xa}, [@NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffe}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x5}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_USERDATA={0x5b, 0xc, "34a126a5bf61835be7e09a0364348fa6850bd4d549e4f27e27e88e48c3cab54bcbd435976bf1948ca1019a591cac94dbd32f2e4f7d738aea0d4067ac19d4ba000f75bc1b1b67cd07a7bcf59c4989ce254efc40894c7b09"}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_CHAIN_FLAGS={0x8}]}, 0xac}, 0x1, 0x0, 0x0, 0x4}, 0x4004000) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000040)={0x6, 0x8000}, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x5, 0x14, 0x0, &(0x7f0000000000)="259a53f271a76d2608004c6588a80a3888ca2f15", 0x0, 0xd11, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x40}, 0x50) syz_genetlink_get_family_id$tipc(&(0x7f0000000240), r6) 6.112288778s ago: executing program 3 (id=8687): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newtaction={0x6c, 0x30, 0x1, 0x0, 0x0, {}, [{0x58, 0x1, [@m_mpls={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x0, 0x1, 0x20000000}, 0x5}}, @TCA_MPLS_LABEL={0x8}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x48000) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3400000040000100fcff0700040000000100000004004880140001801000108004000e8008000b0006000000080002"], 0x34}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) 5.980000754s ago: executing program 3 (id=8691): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x2, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0xffff0f00, 0x2}]}, @union]}}, 0x0, 0x3a, 0x0, 0x1}, 0x28) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)=@rxrpc=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e21, @multicast2}}, 0x80, 0x0}, 0x54890) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c008000", @ANYRES16=r2, @ANYBLOB="01072bbd7000ffdbdf25010000000800010002000000"], 0x1c}, 0x1, 0x0, 0x0, 0x50}, 0x4000) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000000)="d800000010008104685fa3aa7143a0f8c81ded0b25000000e8fe09a11800150006001400000000120800030043000040a8002b000a", 0x35}], 0x1}, 0x200488c4) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0xfe33) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="6000000002060500000000000000000000000000140007800800114000000000050015000c0000000500010006000000050005000200000005000400000000000900020073797a310000000013000300686173683a6e65742c6966616365"], 0x60}}, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x34, 0x18, 0x229, 0x0, 0x0, {0x2}, [@typed={0x69, 0x800, 0x0, 0x0, @u32}, @nested={0x15, 0x9, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @uid}, @typed={0x9, 0x0, 0x0, 0x0, @u32}, @generic='`']}]}, 0x34}}, 0x0) 5.595028797s ago: executing program 3 (id=8696): getpeername$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000340)=0x14) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000680)=ANY=[@ANYBLOB="18020000000000000000000000000030850000002c00000095000000000000002b4003fe37a077ae55f52c0d80a2649baca85309be96d5a45bbbdb5ff7ffffffd075b3eee14473f51be98db7efbb059842badcfc81364470e8e04acb807fbbabc68abdcce9f672b6bb61c302dfd5c11071adac29fd64d33a3502fbeb1ed99dd0e792f24c420bfcc2635421d339ad521d6953b1137850d9e9ebf65ee988ea2dbee528678eb47efb7b3f19046c6f1bd1bf56e5853ed96137f95b3a11954ed1c8a8676468cf2405e48723d4b1ff"], &(0x7f0000000300)='GPL\x00', 0x0, 0x1009, &(0x7f0000002440)=""/4105, 0x0, 0x0, '\x00', r0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffff0}, 0x94) r2 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000040)={0x0, @dev, @broadcast}, &(0x7f0000000100)=0xc) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f00000002c0)={'syztnl0\x00', &(0x7f0000000240)={'syztnl1\x00', r3, 0x2f, 0xa, 0x80, 0x1, 0x67, @mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x1, 0x10, 0x1ff, 0x2}}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x60}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r1}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0) 5.446415745s ago: executing program 1 (id=8699): r0 = socket(0x400000000010, 0x3, 0x0) sendto(r0, &(0x7f0000000040), 0x0, 0x10008054, &(0x7f0000000280)=@x25={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x0}}, 0x80) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)}, 0x20000810) bind$vsock_stream(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0xffaf) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r1, &(0x7f0000000000)=ANY=[], 0x8) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r3, &(0x7f0000000200), 0x806000) mmap$xdp(&(0x7f0000001000/0x2000)=nil, 0x2000, 0xf, 0x11, r2, 0x100000000) ioctl$FS_IOC_RESVSP(r3, 0x40305829, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x9ffffc}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000003, 0x12, r2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000d80)=ANY=[@ANYRESHEX=r5, @ANYRESHEX=r2, @ANYRES32, @ANYBLOB, @ANYBLOB="050053000100000008000500f1b9e300"], 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x80) socket$netlink(0x10, 0x3, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r6, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x2000001, 0x12, r6, 0x0) r7 = openat$tun(0xffffffffffffff9c, 0x0, 0x48241, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, 0x0) writev(r7, 0x0, 0x0) epoll_create1(0x0) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r8, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newtfilter={0x50, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {0x8, 0xfff3}, {}, {0xf, 0x300}}, [@filter_kind_options=@f_flower={{0xb}, {0x20, 0x2, [@TCA_FLOWER_KEY_ETH_DST_MASK={0xa, 0x5, [0xff, 0xff, 0x0, 0xff]}, @TCA_FLOWER_KEY_ENC_IPV4_DST={0x8, 0x1d, @rand_addr=0x64010102}, @TCA_FLOWER_KEY_ENC_IPV4_DST_MASK={0x8}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20041090}, 0x8845) 5.152776381s ago: executing program 3 (id=8701): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r1, 0x6b, 0x1, &(0x7f0000000140)=[{0x1, 0x3, {0x0, 0xff, 0x1}, {0x0, 0x1, 0x1}, 0x2, 0x2}, {0x1, 0x0, {0x2}, {0x2, 0x1}, 0xff, 0xfd}, {0x3, 0x1, {0x1, 0x0, 0x3}, {0x0, 0x0, 0x3}, 0x1}], 0x60) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) poll(0x0, 0x0, 0x9) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, 0x0, 0x0) ioctl$TUNGETFILTER(r0, 0x801054db, &(0x7f0000000280)=""/247) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_RATE_ENABLE={0x8, 0x5, 0x1}, @TCA_FQ_LOW_RATE_THRESHOLD={0x8, 0xb, 0x3}]}}]}, 0xfeff}, 0x1, 0x0, 0x0, 0x48040}, 0x0) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000018c0)={@val={0x0, 0x86dd}, @val={0x0, 0x0, 0x11, 0x800}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "ec9700", 0xf98, 0x2c, 0x0, @local, @mcast2, {[@fragment={0x67, 0x0, 0x4}], @pkt_toobig={0x2, 0x0, 0x0, 0x800, {0xf, 0x6, '*zc', 0x3ff, 0x6c, 0x1, @loopback, @loopback, [@routing={0x2f, 0x10, 0x0, 0x6, 0x0, [@private1={0xfc, 0x1, '\x00', 0x1}, @local, @private2, @empty, @remote, @mcast1, @remote, @mcast2]}, @hopopts={0x3a, 0x1d8, '\x00', [@generic={0x2, 0xebf, "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"}]}], "ab0924172f9c2a1d"}}}}}}, 0xfce) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, 0x0}, 0x94) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xb, 0x100, 0x1108, 0x9, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000000), &(0x7f00000002c0), 0xb, r6}, 0x38) 4.33112064s ago: executing program 1 (id=8710): r0 = socket(0x8000000010, 0x2, 0x0) write(r0, &(0x7f00000002c0)="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", 0xfb) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={0x0}, 0x1, 0x0, 0x0, 0x55}, 0xc010) r4 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000001c0)={0x1, &(0x7f0000000140)="482c4c18ade4df5e9dba01020b2553e2decc621eb5494646e289566c012e900c85348ef6d04e7dd4634c8f35be6c2e5dbfe8f94f54982523f06107a8c76b71dad5ef7f83b028759aa2b440656d7664"}, 0x81) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) r5 = socket(0x840000000002, 0x3, 0x100) connect$inet(r5, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$unix(0x1, 0x2, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x44, r8, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x8, 0x70}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r10) socket$inet_sctp(0x2, 0x1, 0x84) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @broadcast}) r11 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r11, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x1}, 0x8) r12 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r12, 0x8914, &(0x7f0000000000)={'wlan1\x00'}) r13 = socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r14, 0x6, 0x3, &(0x7f0000000340)=0x31, 0x4) sendmsg$nl_generic(r13, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="180000002500010324bd5502ffdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x4008}, 0x0) recvmsg(r13, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f00000016c0)=""/4058, 0xfda}, {&(0x7f0000005880)=""/4122, 0x101a}, {&(0x7f00000036c0)=""/4063, 0xfdf}, {&(0x7f00000026c0)=""/4080, 0xff0}, {&(0x7f00000005c0)=""/263, 0x107}, {&(0x7f00000000c0)=""/57, 0x39}], 0x6}, 0x12140) 3.499831543s ago: executing program 1 (id=8714): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f0000000180)={0x8, {{0xa, 0x4e21, 0xa3f, @mcast1, 0xbfd}}, {{0xa, 0x4e20, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}, 0x40}}}, 0x108) setsockopt$inet6_group_source_req(r1, 0x29, 0x2e, &(0x7f00000002c0)={0x8, {{0xa, 0x4e20, 0x4, @mcast2, 0x6}}, {{0xa, 0x4e21, 0x4e11, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x5}}}, 0x108) getsockopt$inet6_buf(r1, 0x29, 0x30, &(0x7f0000000180)=""/214, &(0x7f0000000080)=0xd6) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r4, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYBLOB="780000c96f00cfcd504231e01e203cf223abdfd73a8f5c7ad48d5c08fe4351431e028aec817e43fab4c56bce4dd0696d504d453c389557a55f2b7e4e67c40e6cb0d5b88090f07cdab2de73e08b732bb96d49a8", @ANYRES16=r2, @ANYRESHEX=r2], 0x78}, 0x1, 0x0, 0x0, 0x48801}, 0x30) 3.206283757s ago: executing program 1 (id=8716): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}, [@alu={0x4, 0x1, 0xb, 0x2, 0x0, 0x8}]}, &(0x7f0000000200)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r1, &(0x7f00000004c0)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000002e80)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000000c0)="84e483", 0x3}], 0x1}}], 0x1, 0x4400c800) sendto$inet6(r1, &(0x7f0000000200)="0600", 0x2, 0x3b00, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x94) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r1, 0x29, 0x37, &(0x7f0000000680)={0x6c, 0x7, '\x00', [@jumbo, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @hao={0xc9, 0x10, @empty}, @hao={0xc9, 0x10, @private1}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}]}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r6, &(0x7f00000000c0)={0x1d, r7, 0x0, {}, 0xfd}, 0x18) connect$can_j1939(r6, &(0x7f0000000140)={0x1d, r7, 0x0, {0x1, 0xf1, 0xa8fe8ad4eea2351f}, 0xfe}, 0x18) sendmmsg(r6, &(0x7f0000003e40), 0x3fffffffffffe3d, 0xf5) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="180000007600010000ffdbdf25ac6bb7309003"], 0x18}, 0x1, 0x0, 0x0, 0x80}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r10, &(0x7f00000bd000), 0x318, 0x0) ioctl$int_in(r10, 0x5452, &(0x7f0000000000)=0x7) r11 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r11, 0x1, r10, &(0x7f0000000040)={0x90000005}) connect$unix(r9, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e20}, 0x6e) r12 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) r13 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='memory.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r12, 0x1, 0x3e, &(0x7f0000000100)=r13, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x4, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7}, [@jmp={0x5, 0x1, 0xb, 0xf, 0x2, 0x18, 0x4}]}, &(0x7f0000000280)='syzkaller\x00', 0xff, 0x5a, &(0x7f00000003c0)=""/90, 0x41000, 0x0, '\x00', 0x0, 0x0, r13, 0x8, &(0x7f00000004c0)={0x9, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000500)=[r0, r2, r0, r0, r0, 0x1], &(0x7f0000000540)=[{0x1, 0x2, 0xd}, {0x4, 0x4, 0x0, 0xa}, {0x1, 0x5, 0x1, 0x1}, {0x0, 0x5, 0x8, 0x5}, {0x1, 0x1, 0xd, 0x2}, {0x5, 0x2, 0xf}, {0x4, 0x1, 0x5, 0xb}, {0x5, 0x5, 0x8, 0x2}], 0x10, 0x10}, 0x94) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000180)=r3, 0x4) sendmsg$inet(r5, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) socket$nl_route(0x10, 0x3, 0x0) 2.655681966s ago: executing program 2 (id=8721): r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@mcast2, 0x800, 0x0, 0x0, 0x9}, 0x20) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8923, &(0x7f0000000000)={'bond_slave_0\x00', @random="0134013590ff"}) r3 = socket(0x2b, 0x80801, 0x1) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) pwrite64(r4, 0x0, 0x0, 0x8) sendmsg$NFT_BATCH(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a30000000002c000000030a010200000000000000000100000a0900010073797a30000000000900030073797a300000000060000000060a010400000000000000000100000008000b4000000000300004802c0001800800ff0300000000000002800c00038005000100fa000000080002400000000008000140000000150900010073797a30"], 0xd4}}, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r5, 0x0, 0x4) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='memory.swap.events\x00', 0x0, 0x0) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r3) getsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f00000003c0)={@broadcast, @multicast2, 0x0}, &(0x7f0000000540)=0xc) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r6, &(0x7f0000000680)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000640)={&(0x7f00000007c0)=ANY=[@ANYBLOB="8c000000", @ANYRES16=r7, @ANYBLOB="00042cbd7000fbdbdf25040000000800030002000000050005000d000000080004000400000038000180060005004e20000008000700", @ANYRES32=r8, @ANYBLOB="060001000a00000005000200800000001400040000000000800000006c000000000000010800020007000000080003000100290008000300070018903426030001000000080003000700000097eb73d5397c3ea30713e4d5ca6180f3ccd47550f3d9160dff864eb5740638b3a5"], 0x8c}, 0x1, 0x0, 0x0, 0x40091}, 0x4000010) recvmsg(r1, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0xd68210}], 0x1, 0x0, 0x1f00000000000000, 0x200000}, 0x1f00) r9 = socket$netlink(0x10, 0x3, 0x0) syz_emit_ethernet(0x102, &(0x7f0000000b40)={@local, @random="7f0a00034011", @void, {@ipv4={0x800, @tipc={{0x34, 0x4, 0x1, 0x17, 0xf4, 0x66, 0x0, 0x9, 0x6, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, {[@lsrr={0x83, 0x1f, 0x52, [@empty, @loopback, @remote, @loopback, @rand_addr=0x64010102, @multicast1, @dev={0xac, 0x14, 0x14, 0x2a}]}, @cipso={0x86, 0x71, 0x3, [{0x6, 0x11, "77df429a58f7a5c705ceead4500352"}, {0x0, 0x4, "771e"}, {0x6, 0x11, "cb54c15070442a40c892e82c7b65bc"}, {0x5, 0x9, "3b4b9a063f5e08"}, {0x2, 0x2}, {0x0, 0xb, "2c15d22b7b08f52a7a"}, {0x1, 0x9, "2c238622c6b067"}, {0x6, 0x10, "b32d0eb45592b32d9ed5d45ce7ed"}, {0x7, 0x5, "39d6bb"}, {0x7, 0x11, "de0205709cc64691a189b726681c14"}]}, @end, @rr={0x7, 0x17, 0xb9, [@rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @multicast2, @broadcast]}, @ssrr={0x89, 0x7, 0x4b, [@multicast1]}, @rr={0x7, 0xb, 0xc5, [@private=0xa010100, @dev={0xac, 0x14, 0x14, 0xb}]}]}}, @payload_direct={{{{0x24, 0x0, 0x1, 0x1, 0x0, 0x8, 0x2, 0x2, 0xb, 0x0, 0x0, 0x9, 0x1, 0x3, 0x257, 0xc000, 0x2, 0x4e20, 0x4e23}, 0x101, 0x1}}, [0x0, 0x0, 0x0, 0x0]}}}}}, 0x0) r10 = socket$inet6(0xa, 0x3, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r10, 0x29, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x560, 0x0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x490, 0xffffffff, 0xffffffff, 0x490, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'vxcan1\x00', {0x8}}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xfd}}, [], [0x0, 0xffffffff], 'pim6reg\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x3a0, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_virt_wifi\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x5}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'bridge_slave_0\x00', {0x53}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x5c0) r11 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r12 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r12, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) ioctl$sock_bt_hidp_HIDPCONNADD(r11, 0x400448c8, &(0x7f0000000200)={r12, r12, 0x7fff, 0x0, 0x0, 0x6, 0x49, 0x16c0, 0x9, 0x0, 0x3, 0x9, 'syz1\x00'}) ioctl$sock_bt_hidp_HIDPCONNDEL(r11, 0x400448c9, &(0x7f0000000000)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}) ioctl$ifreq_SIOCGIFINDEX_team(r10, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x2c, 0x10, 0xff05, 0x8000000, 0x0, {0x0, 0x0, 0x4a00, r13, 0xbc2a4219f6b76c35}, [@IFLA_IFALIASn={0x4}, @IFLA_TXQLEN={0x8, 0xd, 0x4}]}, 0x2c}}, 0x20000840) socket$nl_route(0x10, 0x3, 0x0) r14 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r14, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001700)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="08001500726177000000060265802701a78006671260a194798e8ead14648a497408e2d431a2cce290e4f9c7c066d0c9f42e63119f95ec6e12edee2acbaf90ed8d45411864594490d6be9d051e16d62b2caeb9ee350ddf46e5b37cf54849977de29f7fe73d5466dc93cb42ee955205d37fcc25c8c788fadbfc14ed61f3648a7cfaa9209940e717dbd89bbe801dbb8105a32816a130ad1d751c38b6c46695d218b105e7d1e86ecb9f7bfa5d0de1fb2951b34ef601c8ea8f940d5ef38e4097777aea04f704002880be179514c7b2e382c64c0bf7ab23c67220aafad36ad04c138ea7ba9e105cb507d51b1b79e27c50254d49d217dd229e33b33cb542f050a9a06f84a9303397c86e368192cdfa0500fefd3ff63b3ea0cabbb4248ee876e617776c2978274e47fe08a6873a7d0b7e2dbc4d2c04001c8000d37edea77b98327759f09e6d5953c87f7e174cd2130321eec08d77379f40e132e10f79768c8487459767cf3333e30c3f2dbe8c3f59dafa619754700cd224ecdb0e7f4034bdc2af94108df9136f8ca7ac6682569cdccfc6177711d5bc8026dda222ef0c988d73630d1e17570ae4238ad3b7f0c73226c06eed1be4ee256a39e8ebbdda7e9a8fcd077099a0a833b7efbab96b39b872aaf5fc50606a93734f03375322a93390476b9a20593e28d95744c5b723e63ccb28832a85fa2b45c0a8b57b7ad6529aeda3dbbd981c1f16425d4731b052d908009e00", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="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"], 0x2b40}, 0x1, 0x0, 0x0, 0x5}, 0x0) 2.142487198s ago: executing program 1 (id=8724): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) r2 = socket$netlink(0x10, 0x3, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0x2, 0xffffffffffffffff, 0x4}, 0x38) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) close(r3) socket$kcm(0x10, 0x2, 0x0) close(0x3) r4 = socket(0x10, 0x803, 0x0) write(r4, &(0x7f0000000040)="2600000022004701050007108980e8ff06006d20002b1ffec0e90101c7bb0000b00000000000", 0x26) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000d9bffc), 0x4) r5 = socket(0x2a, 0x2, 0x0) getsockname$packet(r5, 0x0, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r6, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0) r7 = socket(0x10, 0x3, 0x0) getsockname$packet(r7, 0x0, &(0x7f0000000080)) socket$key(0xf, 0x3, 0x2) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080), 0xc) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newtaction={0x70, 0x30, 0x871a15abc695f20d, 0x0, 0x25dfdbfc, {}, [{0x5c, 0x1, [@m_sample={0x58, 0x1, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PARMS={0x18, 0x2, {0x9, 0x4000000, 0xffffffffffffffff, 0x0, 0x1}}, @TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x7}]}, {0x4}, {0xfffffffffffffd80}, {0xc, 0x8, {0x2, 0x3}}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r8 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r8, 0x107, 0x12, &(0x7f0000000000), 0x8) write$tun(r0, &(0x7f0000000680)={@val={0x2000}, @void, @eth={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x3d, 0x3d, 0xfffe, 0x0, 0x0, 0x29, 0x0, @initdev={0xac, 0x1e, 0xfe, 0x0}, @multicast1}, {0x300, 0x0, 0x29, 0x0, @gue={{0x2}, "ebc7a1e0ff5befe1fdbc66e400d7e83306de422b4a81099b20"}}}}}}}, 0x4f) 1.812628986s ago: executing program 4 (id=8726): r0 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) listen(r0, 0x43c5951a) bind(r0, &(0x7f0000000000)=@qipcrtr={0x2a, 0xffffffffffffffff, 0x4000}, 0x80) r1 = accept4$inet6(0xffffffffffffffff, 0x0, &(0x7f0000000080), 0x800) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e23, 0x7fffffff, @private2, 0x8}, 0x1c) (async) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e23, 0x7fffffff, @private2, 0x8}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@multicast2, 0x4e23, 0xd, 0x4e21, 0x7, 0xa, 0x20, 0x20, 0x87, 0x0, 0xee00}, {0x3, 0x8, 0xa, 0x5, 0x6, 0x0, 0x100000001, 0x1}, {0x7, 0x7, 0x9, 0x7f}, 0xfff, 0x6e6bb5, 0x0, 0x1, 0x2, 0x3}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4d6, 0x3c}, 0xa, @in6=@ipv4={'\x00', '\xff\xff', @broadcast}, 0x3501, 0x3, 0x3, 0x1, 0xf, 0xfffffff8, 0xfffff801}}, 0xe8) socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r2, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x44, r3, 0x8, 0x70bd26, 0x25dfdbfc, {}, [@ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x8000}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0xadd}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x4}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x3}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x7}]}, 0x44}, 0x1, 0x0, 0x0, 0x40800}, 0x8100) (async) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r2, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x44, r3, 0x8, 0x70bd26, 0x25dfdbfc, {}, [@ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x8000}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0xadd}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x4}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x3}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x7}]}, 0x44}, 0x1, 0x0, 0x0, 0x40800}, 0x8100) connect$inet6(r1, &(0x7f0000000380)={0xa, 0x4e22, 0x0, @remote, 0xffffffff}, 0x1c) syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r2) (async) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r2) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_STOP_AP(r2, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r4, 0x1, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r5}, @void}}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x48090) r6 = socket$l2tp6(0xa, 0x2, 0x73) getsockopt$inet6_buf(r6, 0x29, 0x2f, &(0x7f0000000540)=""/42, &(0x7f0000000580)=0x2a) (async) getsockopt$inet6_buf(r6, 0x29, 0x2f, &(0x7f0000000540)=""/42, &(0x7f0000000580)=0x2a) socket$inet6_mptcp(0xa, 0x1, 0x106) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r7, &(0x7f0000000700)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000600)={0xac, 0xb, 0x6, 0xb3efbc96f0d3f505, 0x0, 0x0, {0x2, 0x0, 0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_ADT={0x20, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARK={0x8}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0x9}}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_ADT={0x4c, 0x8, 0x0, 0x1, [{0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @dev={0xfe, 0x80, '\x00', 0x19}}}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0xfffffffa}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x5}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_ETHER={0xa, 0x11, @broadcast}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0xac}}, 0x4880) recvfrom$l2tp6(r1, &(0x7f0000000740)=""/7, 0x7, 0x40000143, &(0x7f0000000780)={0xa, 0x0, 0x0, @mcast2}, 0x20) (async) recvfrom$l2tp6(r1, &(0x7f0000000740)=""/7, 0x7, 0x40000143, &(0x7f0000000780)={0xa, 0x0, 0x0, @mcast2}, 0x20) ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(r2, 0xf505, 0x0) (async) ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(r2, 0xf505, 0x0) getpid() (async) getpid() r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r8, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x60, 0x1403, 0x300, 0x70bd2c, 0x25dfdbfd, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth1_to_batadv\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'ip6erspan0\x00'}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4004040}, 0xc0) (async) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r8, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x60, 0x1403, 0x300, 0x70bd2c, 0x25dfdbfd, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth1_to_batadv\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'ip6erspan0\x00'}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4004040}, 0xc0) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000940), r2) sendmsg$NL80211_CMD_GET_SCAN(r2, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x14, r9, 0x800, 0x70bd25, 0x25dfdbfb, {{}, {@void, @void}}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x40010}, 0x4044000) r10 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000ac0)=@generic={&(0x7f0000000a80)='./file0\x00', 0x0, 0x18}, 0x18) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000b00)=@o_path={&(0x7f0000000a40)='./file0\x00', r10, 0x4000, r6}, 0x18) ioctl$XFS_IOC_FSBULKSTAT(r0, 0xc0205865, &(0x7f0000000ec0)={&(0x7f0000000b40)=0x1ff, 0x3, &(0x7f0000000b80)=[{}, {}, {}, {}], &(0x7f0000000e80)}) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000f00), r11) (async) syz_genetlink_get_family_id$nfc(&(0x7f0000000f00), r11) 1.472402292s ago: executing program 4 (id=8727): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'veth0_to_team\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e00300002800800010010000000100005800a000400aaaaaaaaaabb000008000300030000000a000400aaaaaaaab1aa000008000500", @ANYRES32=r3], 0x68}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[], 0x68}, 0x1, 0x0, 0x0, 0x810}, 0x20000880) r4 = socket(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f0000000000), 0x4000000000001f2, 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 1.400902842s ago: executing program 2 (id=8729): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="443f050000002000010000000000fbdbdf250a108000010000081500030014000200fc02000000000000000000000000000014000100200100"/68], 0x44}, 0x1, 0x0, 0x0, 0x20000040}, 0x40000) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x2}, 0x1c) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2660004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=ANY=[@ANYBLOB="5c0000001000390400"/20, @ANYRES32=0x0, @ANYBLOB="10000000001000003c0012800b000100697036746e6c00002c000280140003002001000000000000000000000000000214000200fc0200000000000000000000000000ff"], 0x5c}}, 0x0) r2 = getpid() bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000340)='./cgroup/cgroup.procs\x00', &(0x7f00000008c0)=[0x45c, 0x9], 0x0, 0x0, 0x2, 0x1, r2}}, 0x40) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000280)={0x0, 0x0, 0x0}, &(0x7f00000013c0)=0xc) sendmmsg$unix(r3, &(0x7f0000000700)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000440)="aa", 0x1}], 0x1, &(0x7f0000000180)=[@cred={{0x1c, 0x1, 0x2, {r4, r5, r6}}}], 0x20, 0x40044}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000040)="114a", 0x2}], 0x1, 0x0, 0x0, 0x400e815}}], 0x2, 0x4) r7 = getgid() sendmsg$unix(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000880), 0x0, &(0x7f0000000900)=[@cred={{0x1c, 0x1, 0x2, {r2, r5, r7}}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x38, 0x24008800}, 0x40040c4) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000011c0)={&(0x7f0000000140)=@proc={0x10, 0x0, 0x25dfdbfb, 0x20000000}, 0xc, &(0x7f0000001040)=[{&(0x7f0000000880)={0x2d8, 0x3c, 0x10, 0x70bd29, 0x25dfdbfb, "", [@generic="77c7135f542db8ac9619e00dc7ec2f9a9495b64a006b683e", @generic="2c9ad8d3cab76ada7801a3e9ca4b9d5e6985ff4f30d0e9d4e5d5d49aca4ae813fa33be7d640da728418afae3a99644831f20dae7508e2f55514a7c92f7f16d83efe107f17c0a7253fe436a71a24bac62da80101786a12ca06e948f055b22e2ee86b020f864cded2475977c5505f7ced6d9aefb11a150", @generic="6463da46c3a2126b0d23ba981f99148385318bb80786170ce071456b01a276f2515d8365792038a414d5d4f4de79f57a61cd4116c1728f7751e495d76c00356b187f19fc42c6ee3e0484c2fe3945c304ccb4809171d890c4d4ff70c09464ac5cca7efaa5e47ca9f4efedc1cb8735704bd350c4e81edafed7a11c3c8f1b409a3f4b298b3a9492a3eb5a2245647609602c5ae60e1cd5cd8d5515c2ec43db8697e7baa1038c22c79102dc46c9e396d57717c987e83a45cafb", @generic="bc43bd3ae665852df1c8da5a1f0472779ea9eaced818c4511e42a86ee4755c2736837bbfd9b797c94ae5f0dda57abcc6800dc8ef380ecbc35b44ba647b25d52ef6740811a89212bdda86ce23790d7cd9765c06595e7e26fa21d42768305ce079a47f09bc83fcc0f64a81b7", @nested={0x117, 0x137, 0x0, 0x1, [@nested={0x4, 0x3c}, @typed={0x14, 0x17, 0x0, 0x0, @ipv6=@mcast1}, @generic="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"]}]}, 0x2d8}, {&(0x7f0000000d00)={0x134, 0x3f, 0x200, 0x70bd2d, 0x25dfdbfe, "", [@typed={0xc, 0xf0, 0x0, 0x0, @u64=0x2}, @nested={0xe4, 0x53, 0x0, 0x1, [@generic="fc681ee954dd229abba6df2f9a65", @generic="0fda83d8874d3dde6b6022d097795f56831f9849cea5ad16c44c8cb8d2f8ae32aee3a50c5f600f25be4b658809ebc334a64bd9f59590bb061f3af78af88898450e0bae412a2d9b719f016088eb9e73a510e6631e786e1a85a5c2093707883ba0ce73bf924965c21674b0423a74ce74853df27c5e0db75d1451237243ef8c256db59e95cba0d36f2861791a9f96503e0195d8607ebf41cbeb56b511860e15d365746ffa1afb9a802621b5399a54726eca155291b0178973d394948cd646ebfcc861fc72c35164e7b11a786744dd632d74ad4e"]}, @generic="cc81ed6d8d3b43095a795047915c871a8ab2f18dd344122751d0c9a62eda11cc8a1b384b4ddcc529d56f6c4aa7e23f24e916d67e"]}, 0x134}, {&(0x7f0000000e40)={0x104, 0x26, 0x400, 0x70bd29, 0x25dfdbfb, "", [@typed={0x8, 0x114, 0x0, 0x0, @ipv4=@loopback}, @typed={0x7c, 0x45, 0x0, 0x0, @binary="c3826f18928660e5ab7e6ad51d11fba57c390d7922aaafdbc26de70cb77abf40b9c605a0f5618c9a96c8a1763352915941aec8df5f3a7d8cf99899fc17f5df38e2289d6ae2a81e1a5073a6c54f5ecb31e0a48c149bce6dadd69ed3a221d83b29163a06a1fc33d2485823b94db6ec3ef89d8a0f84b91ca66f"}, @typed={0x1f, 0x61, 0x0, 0x0, @str='connect aa:aa:aa:aa:aa:11 1'}, @generic="85e704340eceb4e517711a97eeb256324259d308df2cee83e83cc4a1cdefb702633c5cf4e993e1555b58dd2ff6d93d7c16cdddd7e35d377f319a457667848b1efddb7f2d7c", @typed={0x8, 0xb1, 0x0, 0x0, @uid}]}, 0x104}, {&(0x7f0000000f80)={0x98, 0x29, 0x300, 0x70bd2b, 0x25dfdbfb, "", [@nested={0x8, 0x77, 0x0, 0x1, [@typed={0x4, 0x102}]}, @generic="4c9a191f350e649b47b1f67d3e1cd1c752f0dc253b3bb84f1f60dfbbf02fa9306a3662f755df487836e1302f6871dbce901810cfbdb87789640b4f31d8403d241b6a207db9f3777697433567e10eb7a21b857f8eed927e9c7b720e97613b1fff45d983707235de8d035b9a12de8a2881ec683b37534e7d", @typed={0x8, 0x132, 0x0, 0x0, @ipv4=@empty}]}, 0x98}], 0x4, &(0x7f0000001140)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r7}}}], 0x60}, 0x8012) r8 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000001d00)=0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001d40)={0x0, 0x0}, &(0x7f0000001d80)=0xc) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001dc0)={0x0, 0x0, 0x0}, &(0x7f0000001e00)=0xc) r12 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r13 = getuid() getsockopt$sock_cred(r12, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000080)=0xc) getsockopt$sock_cred(r12, 0x1, 0x11, &(0x7f00000002c0)={0x0}, &(0x7f0000000300)=0xc) sendmsg$netlink(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000001240)={0x48, 0x2e, 0x1, 0x70bd28, 0x0, "", [@nested={0x4, 0x119}, @nested={0x34, 0x13, 0x0, 0x1, [@nested={0x2f, 0xcf, 0x0, 0x1, [@generic="d478b585fcf4962925eb81095dd3d92e983e841d6ef7368187237f5e91a74d57e8aaee05ec6319", @nested={0x4, 0x95}]}]}]}, 0x48}, {&(0x7f00000023c0)={0x198, 0x2d, 0x100, 0x70bd26, 0x25dfdbfb, "", [@typed={0x8, 0x3a, 0x0, 0x0, @fd=r12}, @nested={0xcf, 0x63, 0x0, 0x1, [@typed={0xc, 0xee, 0x0, 0x0, @u64=0x76f}, @generic="fc0b1ca74f5d3e666d30", @typed={0x8, 0x3a, 0x0, 0x0, @uid=r13}, @generic="29b6a1b4af1d01a1c6ecec46e29503dd9834", @nested={0x4, 0x14a}, @typed={0x14, 0x8d, 0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @nested={0x4, 0x135}, @nested={0x4, 0xcc}, @generic="a85df9400c0cf953a37f68c0d68314ba7b297f7bf84cda349224d9efb83390bee05508cf439bd9ee8ee104fdbebe0190a85f28459569f511b0f1f19b883b5100c666087102f613958195d7929e2417d5128904cb55a962a27177c8860f4a235e40f4f848e38efffc95366c0c26b6edb02851555b29403aa9f99043"]}, @typed={0xad, 0x92, 0x0, 0x0, @binary="1c5ee579399a037cc7b6f39bdf2e89304db18c73faf1e651bb577fdfa028bd4bf9ce1e4b7f9f44d92542719363fe26c322227268abd9a9e83fa1996669c87be3a4ef0baa58773de3c4e56c085bbc6ff89758209e1508436304bf269e7019664ce4172b9812c34b496a84c2d031045fe4c8b402f03b18ee63e9881476955a661ed2d952ceb9e4a27816682ef8f21be303df95c23ff808df08920832fee4d972d8cfc66e6451a7997a11"}]}, 0x198}, {&(0x7f0000000340)={0x44, 0x1c, 0x400, 0x1, 0x25dfdbfe, "", [@typed={0x14, 0x12c, 0x0, 0x0, @ipv6=@mcast1}, @typed={0x8, 0x14e, 0x0, 0x0, @ipv4=@local}, @nested={0x14, 0x37, 0x0, 0x1, [@typed={0x8, 0xca, 0x0, 0x0, @pid=r14}, @typed={0x8, 0x141, 0x0, 0x0, @pid=r16}]}, @typed={0x4, 0x11e}]}, 0x44}, {&(0x7f0000002140)={0x250, 0x2d, 0x4, 0x70bd25, 0x25dfdbfc, "", [@typed={0x8, 0xa3, 0x0, 0x0, @fd=r12}, @nested={0x28, 0xf, 0x0, 0x1, [@nested={0x4, 0xea}, @nested={0x4, 0x7f}, @typed={0xc, 0x151, 0x0, 0x0, @u64=0x4}, @nested={0x4, 0xc3}, @typed={0xc, 0x100, 0x0, 0x0, @u64=0x7}]}, @typed={0xc, 0x9a, 0x0, 0x0, @u64=0x3}, @nested={0x10c, 0x120, 0x0, 0x1, [@nested={0x4, 0x7a}, @generic="9f72bd75a4e11262db6c9aebbb65efd78ffa828bd8fdbf02c09baa81cc1db8c795667023625a4d86ee74adde4fbfc4ada16d17c0045733b6", @generic="060b89cb957a9b95aad25c3e7f376317c47131d5f8c11a2d26830f88974e27ad1bd79769a882f7f3af95a77249060225cb40d045b56d406537c0be3c5f363edd7aabf02c75f653f7147dffd30d668faa85a0a5f2af2fbc61882d349e04e0bba8efd5c64e14439de6bda6e2cbc224b96d1a4f42533352c7ad6a7877662faaaec42ce06a79dc62a89155cd69d433662b88405f5943af0e5a6ed9aed06fba77cf76f57d729c5918600024a8ec396690e8dce939edf2e9bef67e79eaf207", @nested={0x4, 0x33}, @typed={0xc, 0x2, 0x0, 0x0, @u64=0x3}]}, @generic="7824b8e4b5b67257f5259083a951099f400c16ef6129755339f96eec557a5a7dc18c10923b867074f83efe115fc419cd38c7efddcc69df60bdb356e25bbdec61de880323527d8f854c43d97ce59637df4bc2b1a7010afbdfcd7975fb8509cb14f0a1e69fa7f48f9fd1b8d7cc9afd68", @generic="899d2fd311badb0989e3fd3866ee7fe1b6a892184b879af520d1bf595fc04df4e1a47373b074f2824f5eeb84fef96df99ca6b835a767ebfe3b8082d852dd6982fdf4f935951a2262e3b4182ee13ffd93f17eb807e042a5ab50574edeb39e13af0d77f0bec1203f8ba961808d41b3a2bb1642379ca39e95e2ca2e405c7bfd30d84770580d69346395"]}, 0x250}, {&(0x7f0000000640)={0x20, 0x2b, 0x300, 0x70bd2d, 0x25dfdbfb, "", [@typed={0x8, 0x4, 0x0, 0x0, @fd=r12}, @typed={0x8, 0xb6, 0x0, 0x0, @u32=0x6}]}, 0x20}], 0x5, 0x0, 0x0, 0x84}, 0x40300) r17 = getgid() r18 = gettid() r19 = getuid() r20 = getgid() sendmsg$netlink(r0, &(0x7f0000001f40)={&(0x7f0000000140)=@kern={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001cc0)=[{&(0x7f0000000200)={0x54, 0x33, 0x200, 0x70bd2d, 0x25dfdbfb, "", [@nested={0x1c, 0x143, 0x0, 0x1, [@nested={0x4, 0xe4}, @typed={0x14, 0x11d, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, @nested={0x27, 0x5b, 0x0, 0x1, [@nested={0x4, 0x134}, @generic="30758216450634be3d427256c4e47129ebe471123340fa", @typed={0x4, 0x163}, @nested={0x4, 0x57}]}]}, 0x54}, {&(0x7f0000001f80)={0x1b8, 0x32, 0x800, 0x70bd25, 0x25dfdbff, "", [@nested={0x75, 0x162, 0x0, 0x1, [@typed={0xc, 0x9, 0x0, 0x0, @u64=0xffffffffffffff00}, @nested={0x4, 0x15e}, @typed={0x8, 0xd, 0x0, 0x0, @u32=0x3}, @generic="7c7c648afa6599cfe96622aaa0111329f0e700ee7eb7602254d68ff454fbb07a95b03547cf102f546143801c9d8cd9bf5233cd2ac1d2ae7a64ad6ecedc181a8056f5980f89c036c00f4e3cf1ad24fe5297", @nested={0x4, 0xea}, @nested={0x4, 0x147}]}, @nested={0x130, 0x130, 0x0, 0x1, [@generic="4ab3318a6647237771c6ecce6d9b4c0aba81941907bae49b460dc87f67ad673b6d5d5d", @nested={0x4, 0x15b}, @generic="381682ec00bd13435666780fd8c9419561ef3d56b62fabf807e42251447af96c98072498daf39b6c8a2a597eaaefe8f18bcebe65beaa601eb223d235ab9ac2c4511b95154817cf9840d0fcfd8513076e325af5853f313ad2fd31bbeda35111b72d50bdb552cbfc7f97ea80c328735d92d571b7a53e35e9bd35c1e3cc35b1a5e0276b4f521ba18be6efc2a5f193761153d994c2cf93ef7214e2b44b389b50daf7f1f3d75e648fc6637b44d9c8205c9f97d7", @typed={0x14, 0xcf, 0x0, 0x0, @ipv6=@remote}, @typed={0x17, 0x109, 0x0, 0x0, @binary="73a2388e7fe2bef8f9f021ddfc6d631bba9e10"}, @typed={0x1f, 0xc6, 0x0, 0x0, @str='connect aa:aa:aa:aa:aa:11 1'}, @typed={0x8, 0xb4, 0x0, 0x0, @pid=r14}]}]}, 0x1b8}, {&(0x7f0000000940)=ANY=[@ANYBLOB="701300001c0000022abd7000fcdbdf257054e6b7d6808453cc90d585ffe810f8e58d0555a00f9b64fb5b5dbe7c9b75de49aaae40794b51e1e9229059e6d7f0e2201fa9f8c7a7e955c51f614afbab2c257acdfc7a47991fb3ceda296534eba956b9aa294a1a2ce34e3a7c2983c97da7af20f9d02bc86cccd56fd3591a77b32f77f1ea5b9e87b71519414e359e4a9faf7a01fb2a8a8c15a16fc3b1abdf5efaed8d86e2ed1eb88f311456dfa646d864aa0740a43b8455e3866f6d7c9677b87ae6ee2dfd4188b2727e0c76876adfde27397933ebc789f04a48e018f431580d049cede0bc754ac6837209f44701326854def7ae49b25eccc0562daa560431a7825c34eb04001800dccbc5af08ca23c48b87010d0de0c07729b3517e8e6384ff63967ec7c1a61fd5f7053373841c937e8be9b1d0f7cfac9211ebbb14ef37f3fa2e75a545ff23a252c574d58911c7a3b0b4c7e36fc6db08220e810bb4cc7c0e20c87f96f7b7b579ee08bb11428b846243f52dc2509275d30742cc31ae5998f9db4e71f871e9e8560d96f2874b21369f6c8e445291029ced6ab159139a1cb5b11c397eead14009d4ab0ec277ae6b713f9da3ac2f65ded48e75575e0765351e39914f4caf655ae81e18ce3ad88574f3705149cc2c9886edd05ce786278c4e9243cd28b2baa706b427c41bac7552f01da6a9f42ee09ddf90e9c98a3d2b76e94dc0921da96414897dec2f3f4d2029558df6f6c5dee23d28427042d602e25fe6941f777422f0940cafc4042c767f575c5ec826452a3deaf99e1761d30b5cb48a90cd76f3627f97422c8f65c2b906be72a432142417d76bbee22dad8f7e82f1e831a53838567db288a66244d3d3070a9ddc74f4adcdd53707531a7449667a8dde0062aceda36d3b9be456bd2ad32618864a7a1afbf769bf19d23d1b2df83d82f74e5c193a8bbf992b224fbc44dbbf4785c50b6ac662c804fe24580e283745402c12205f9674d8f7d1aaa9fd49b1787e1864962a7caaeb361c70015f6603d92224246e714d7356b9ae275d930d926686863b20cab015d0723637c97da3c2f34eb79a24e64e30b3358065ff564621b4e4f1d03cee905e311687078963b6a92dfe518f062ae18d68d38871238837085bef638281ff33ea6cb7187fb9b94c2da8e7ab3b56766ff7880aab50cbc2b8d83d0336e6c4b9a54607314fc1c6fc5e7fbf4199c6de2a079f9a28478aa8dcb65aa2467c6f33b2461817f5db3cf8e0d23657076e335a3bb553edaa2e0c868df865f9f919c7b232a3bd50004c87a06bac62c62147fcefbf191f9abb858ea8c72df49ced36bf32cbe01693e1a8a3654d3e4f8f8bc494e6d3ea5d5a80ba771261c93a7ad1c48e55158c58c46a6ca5b2ecca7b60d2171240e49b741bd41f727e9852ed4ffb59c491fcb69f0559559c910fed202d823b38585a489ae6117c0ae3d73f1a715ebff637c7937d9691090fdb57b44e86e9022a618b3b3fc48cfea51f589d8f2fa1f1c1e04ff60e25eec058cd0a0f5e94aa82a750a9b1ed91726c3f43d466c280990451e54ba54f94689a941956ffe44f2651f779e262095b90ae3cf005497ea915ce8fbda409eadcc36bb7cc7fdf98ba88db9be7a8d536ad23a4a0412457528db46536599f66f33ee749466d5a99551a8389e63ea5942254922cdcec6224b32038c57a1014d7f08a589eb23b3746afe5841fdbf76a225ec81c870be83920465a2c68388893a1bf9561d3d4ec5bc743c858d1273a43b9f994604fc363dcbff094e71c912c3bdb053335a65d8eab908f6f474ab5ddcc877539317ca458d6eaac68b34847a31ebc119ee435d4180c0f855b9d70e055cd3b6b75683cb30d24092dcd9e4d9955dd352676e0fd0005865c77b154c55f332dc34dc7d3151eecdb9d75e41be6a37100be8260c7a935bde697591037332938337b588515cd9aeb5f77b3c840f68de60a40941fe298389fa6af777cfaa4d5b99f3172bd64348e3f03883a881d0b5c9b1b9241eec5a25d598e52ff3a38efbcadc997effde93715092532d658516a4e9fe3ec9c53a353f2d84ae1e4f4b9ffa4a518b37119d1e2478ff192e8f662f3538e3d833a53a45980ecbb6f784dc960c2743ee68f6ac46d5a61e5c1c13ce11f835add0009fae1e7ef2e103e8611dbe30c51465a75c1b9c34f24bba02c7da6067c81bde21b56e1d4e1f297267a382d482e1b8d7c1691585c4736e2468956202cc6f6e12600d6e10eee9fd7a06affe4b08e7df15151fa95537b985774ac730b18575be9ccc9a61d6fa72dd9fccaf820543efdba9aa593dcd28d0dfd0108b8d02d6bf1ccb111ea8f25a9f29faefe9dcb6b5818224905201d88b7913c35de196dbb8524b0ad57607ebd02994f621de50ac55c064d0923b45b05e532c050d2983e8ad50752182b57977e516b080981fcaa49e43002ec472d02df44f722c98af9c249bc49af0390348488aec66e8a4c71d1fedbfb6374305df7449aa4430dfd2db3ffb962da322576b30adbb4fb3adc44c6c85e29ef00549c26bdd45153c35fbed756f4212937e5cd5f6bff876a6b86b09c81fde7a41bab37deedbd1b12dd80a7a065d1c2bd4c1178652c48a3fe260ee228476709afdbba6125a571cb5ec834511c76ddc958f68586a1f2e22729e6e4f3bdc0f623e35f06fa22c2c87d1886657e4068f75db9cb3989c9b1eb991c825ca629b182392c37277a264232cdfbcc7b9cea64c0354d48bfe61e1d8d3eedb4e732dfcdeeb2e8fd742a769da9de36c44739cbad375cc4cf69eb5e90c2cbc91a6109cc68c30982ab9e41243269b1e3bcd2c2f33730ee71960c2ac53b7eeba79945859e97025b7a21c1f56913c8b24fa9126a7d2d99f68da563f6ff559d28f64247361d6fad83f9c92f0eaec81300e7d1932daf146741158b54f8f019951f3337b818be7cfb0cd59a50b6b0a7fbf1195361e8a4f0103b6ade6f4f905fd9788a8b2a490763da10a94cb6d5e6bf8e2d65bf63f002aba24509b9d59b4815d3810ae4da0f3528c82324ceb73e4af0179dc756638af93a42b405feb6e7cf04b45fa392be92c66f8384d9d05d91e511e7cddfa6d97dd2efa7645f2d0e088815e20a6e65cc5f4d79e2b1879f43553999b6e4b29928f34b3629d87fb2a3919a1dcb83db01bc678d09abf1f7696345bdeb9dc0cdd1d2323638598fba94962d66cd24095fe1599e2e4b4f523876b72ab37dccbb2185b2b34023bcb309d28140b26cad17146c8e1c2fd933e7ffb059befbe5875e79c8db86c0f276ff9b2520c68dff341c0a69cd3d769445692e5db957d73411b8e8be317b617bc5aa1065cfd53f5f6d6a7b65c432e680eb73af9b3b67932b031c8688b8dd49c1c5b442cec369e0c1748968410429b860d592455e55fc581d67264569a3b1662949f15a0a9b17aa497782084e07000cf721e6d0b03695d48d1fc73d243a5ef8973241d0eb49c3be2eb5e6f3ee8801c539f857401a8e34aef9e141d2a2b7e8d52a433aa80d26e4481cc1dfcb978ce6b441590c3885acc653639be409407ffdd0846765bd31f32df7a984ba422a78fbe3b97186c7e20ebd70999b1fd6da7e4403ef819d9bf85cd54840bbb97008b891802fd5a5b07efcf8dd5c4be3dc5ba55aca6636f8b6689cb84fbeb15178dbd2a8ef84fbf9ab3a6645f8f6b117d8dd2cc174a682b6003b887e92561fb8512e43cf1364d740cbd15b39e90811bd138dcf42608076781813913bbc3153fa5fcebed54cf644be7e71dc7232f3c25b5bfb6fb33e20a2eb1e9a564615ee3d9a5efd82622e61361e8babc04cbea63a90d56a36acf01c328cc53f00c6f4ad05aa52676e41c1d2a7db8e87c02f824d5b1aa556de8bad677e011016b5d749817beb26acb2ec119d4d68085f4c70d560b989362f218620f6f65e0bee6d7cca08c23f77c7d3466d530840351bc2d93edf7664601ca74aeb8a1ed1b3d5ea97d252a30985a239cbbde5a1093cde4d966efe256e5398fb04c7a908555754109716a9df26e599c3326475582e621aae5aa3ec7e7e224a0d08e04813b68e4168cd131dff10f9327b5a0cc4f9ba2db7653bfb5e11403d04e184f2d018e0124d110da5961f2629a2aafe1b9467752972d18d20448fcdc23b557fc7c3f6e0e39f386972660fccc42938e5488489d049d7f12e7a26a626598f78e4ddf40c46845b8000ab2c10b6f69a9d1d2cdc90e22800a693f2f7ca8c320b45b8028787e9a951f1a0f0f6d7c45ca98096ec82f9c45f66120ef4b1a8c054c95e18155b8ea872a476f7ba4de2c2d73d2f2e7e42ddc60f41834209eacfff63b126cbde9f94d92b7fde8107f4c56a52e91d6c84e3e25eeb41099990b39375ab3c8b0ff50020491662c396b22fdef005e07eaf4520b540db041a64fab18de967659793b6cbda165f5548a50328a6c1a89b46f0c252ceda989cfed866ae3cd5ea77767f498e6194b3898cad7cb7188249f69561b3c875c85e0f46ef6af17afc82cffc7565528c1eddc52a214bd19507a895e34403c3bca21a4ae43160237ee8a9f1eaad8cca3a890cd15583849adef8549d5f8c48b435d717df946a08bce92443c5dcfd9ea254a9f6ba3c63c546f2295bf0e192ae4646055b86c42394b25232bfcb5dbfb68e6d175fb6ac28fd324b06bed62b8c794b7a1a5333f0359df4deb72c0ee9204bb0cfa2060f0877f00f942267d2f2e89d857b2360ecae61cf630f6bc13074cbd403e5f274a019531a0b9fb9215e289cac436828a862d398f66cb8141f27669fa63b7fc12e4881e46cbdf004b13aab05e7bf0b1032222e87857a8c07dd50e5317be12382b08334d12b09b8c27824423464eb979e720120fbaca1266c1a45fa5d0bbb1ecd1c6ea75c984a175f96450160ebbe80ef398c1fce0eca4fb852b69dc48c17794ae38218f74e6033771a254bf77185856741710d51e296db1cfc3621515c6194472529ed3a0028e212c7eec4f89105177d1cc8475ca75413b564b070a955a52729a493f0368aa47f175bf8b1a543405fb6ef50e4264ea358a59537bb09808591fe75d4339b61adaad452c92c15fcdb93f8a3aca3fa6fba9cc62ead8af56f256f2574528d9f57a6276b1442c7604dcec8455887af0e04c2ccf3837f763ef73aecdbcd1f598de5d82e90514f56e4e283028e03b28a8bcf3bbd54b5d70589a57c98379010a3357b4ae5dff0fabc6a145e400ec3b91cc485be7f64fe033338358534ad013597d32b8b922c4c99f5407ec1fcf9d237d2a20e26337ec42dd9b82cc6d5df44813223f7b58bf85398a760165bf211e7e25b7ea68b351eee91a49585d31938f1cd1e8909fb1825139298d51ad129f3576b18582b7a2465e1c4642a4a1e24f54346e9932e3d5cbc4a48f4746c1147417489c45159088c290846a63e707eca6b8845d469c12d9cad42f4c304bdb55da9de0a3f3b584ad1ee9a2ec7cab7518589b2df0f684062e4f7b7103f383cb62acaab39762152aad9e73772017eefbbe627fb04afac4050c88acaaf0cf08971553f0ebd54f782c4905b9e3a70a195b126089e0c2a7a9b635e2526a8c0a30f209ff9243f7273988ab5a71065c5916df950b4afdc0d36d02478a1c227a0df7c9eaddd10d4ce8e3fe49fb253b3399c7cfd822a41531c3f5fff2ae5b96f32c17738d707027208b79d84bc684839ca23413adda2941bb386885f4dae4231c509801c718c3912c8cb2b2f67336a0ef0a391399f4661ffc8b0a243d9baaae3254fe9cb0d5d826215f75d7ef5af72e80d818be65c2bc48c8013b18c7fa74f533d18c4f6e50bdc9596b7ff9c4a99e364461f6552fd83d2cc453f643b5d98dd5e2759d0cfcea152fa3cb7bd541748a827ba95de63dfcf5e9c6f00c6d2c134dfe91845be4e72d577e02bfe5099f55ec185b88d761b70cb144159b6a42c98e225ca506c7d29a9c9b541079a3437298cd2b09d30c87e45144bb1dec919c0f6cae9d7c5135f363ea93c5fea11f99d18fb213965981a68797bfc6a61b4676e74f101aa981b1f7e8c86dcccdeeb7a1d53e0bdbff9d73d0f6f6718a6a884018263ac6305a3de818148a15cb0e0384407c34bb2766afb8eb4c972c2d1e5f456bd5bb4cd604e6e648d32717d34a1d6d7d6c29ee8849c5116beab52dfb4860cace9764948194824dd7ef7430d1f0b279ee7ab6e39f3e9c2ebde2fd7d9fb1f9fb218c15d2b7c3a61f18e4655efeb2470ba88a03f5d41897278f4c512e83b8d6af4191061919c9c27a725a5545823edc80853fbc97b862789c389bafa1a4c49ec2bed463853847200468011ed9407bd02b35ca8c5a948fc182fe19d12e9dae6f349f14dc1d33174f2a72d3deb55b4cf455d3aaeeb0b2b61c227e3aa2d04003280714c2ecc45872b920646794ed9427a887d6208f8dc0994a68a19410eb7297311299611d8d236f87e69e7b15d08000b00", @ANYRES32=0x0, @ANYBLOB="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"], 0x1370}], 0x3, &(0x7f0000001e40)=[@rights={{0x34, 0x1, 0x1, [r8, r0, r0, 0xffffffffffffffff, 0xffffffffffffffff, r0, r1, r0, r0]}}, @rights={{0x2c, 0x1, 0x1, [r0, 0xffffffffffffffff, r1, 0xffffffffffffffff, r1, r0, r0]}}, @cred={{0x1c, 0x1, 0x2, {r9, r10, r11}}}, @cred={{0x1c, 0x1, 0x2, {0x0, r15, r17}}}, @cred={{0x1c, 0x1, 0x2, {r18, r19, r20}}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r1, r1, r1, r0, r1]}}], 0xf8, 0x440c4}, 0x4004880) 1.399811871s ago: executing program 1 (id=8730): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendto$unix(0xffffffffffffffff, &(0x7f00000000c0)="ab5b83383caf4e79568f49e3e042f944023d857d8f0af20f5b9b887935c91af84eaee6f0", 0x24, 0x80, 0x0, 0x0) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_WPAN_PHY(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB], 0x28}, 0x1, 0x0, 0x0, 0x48891}, 0x880) sendmsg$nl_generic(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=ANY=[], 0x40}, 0x1, 0x0, 0x0, 0x400c080}, 0x0) r3 = socket$kcm(0xa, 0x5, 0x73) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x55, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x5c}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000900)=ANY=[@ANYBLOB="eb31c38c0b792d5eb55a017a71d92a9e9feb0100180000000008659cc1fdcfc104000000f9550005"], 0x0, 0x2a, 0x0, 0x8, 0xbf81}, 0x28) setsockopt$sock_attach_bpf(r3, 0x29, 0x21, &(0x7f0000000200), 0x4) sendmsg$kcm(r3, &(0x7f0000000100)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0xfe, @remote, 0x4, 0x80000}, 0x80, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB], 0xc}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpuacct.usage_user\x00', 0x0, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)=ANY=[@ANYBLOB="1c0000000306010200000000000000000700000a0500010007"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40814) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001580)={0x0, 0x0, 0x0}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@newlink={0x60, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x42, 0x2021}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x28, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}, @IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @local}, {0xa, 0x4, @remote}]}]}}}, @IFLA_LINK={0x8, 0x5, r9}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000010}, 0x8000002) sendmsg(r5, &(0x7f0000000b40)={&(0x7f0000000000)=@ll={0x11, 0x18, r9, 0x1, 0x81, 0x6, @broadcast}, 0x80, &(0x7f0000000500)=[{&(0x7f00000000c0)}, {&(0x7f0000000380)="c0cd87ca112c211b516221302a4598ad6b68b7", 0x13}, {&(0x7f0000000400)="47fd8402cea3360b4e760761a414032e2337bb682e034f5191d24800ef79d7992ff8208c1aad813d8ba19cf3a873a97f3cca8cf00f0baf5d4c8af707061a2fe2a44af2da9d3761b868c58863a075346947e35497a61b110226f1e0790e67c4d46d87515ed3ada9db82ef5c95a50244b04b50aa9b27c85bceca0b2112ac9e5e955075999080858d0aff90a35dfa6d5aad971ae918b9f817512c6e97a76cd75ac0d553fa704500deab2f46c73e197993", 0xaf}], 0x3, &(0x7f0000000800)=[{0x98, 0x10f, 0xa75, "ee2732f84dd9bf1accc5d48afb2f606afa19b671723f81b9391f364c22cfd9f420050895cbe68057ccd13bdf50939d3cf277dd72c1062e3c26ccec365d99fbcded82d5b048063428f2c286e1dfd26e75ae4f455db6fffd009d667ba25c9284fc14b7a3626948627d9607506edb5988ca8901bd57fc12c7f0f75ae90ef98477cfa164f6c13f2c81"}, {0x30, 0x2, 0x357cfe31, "4d47a93d7b15bc403bc0ef3a38a81ed874160e01e3af8857546cedf691120d70"}, {0xf8, 0x10c, 0xd, "08b3cf810833b614ca132432cb8e55e0c0e5b9f6f08e8e1fb598af6edbb5582a4e28cf477f5468d1622b2cb8a54dbbbde624460dea0a2d12211f45e489c445ba0735b51a4bc4e7f5d027d0e1557ad7cb676bf1e844f04fd41dee44281713abf596ab0d34362f703e1e8832923164497ed5d4444a473cd8287770ea33598e9fb159b28f0c84cd63376c250e8a1c8e38f5deecdc9dba821d186b5865532fb0e1d68ad86c8015bc857533449770084ab5277690c3ad2d3cd2f6e498b71ad0d6047858d4655a6fe547683be7edf55997aa17dcd9f1189b2346e66fa36bf356ce3acfea1fe09331506e"}, {0xa0, 0x10f, 0x4, "977bcc814f99fe5d78558b9b05b83da02d39d6cc2873f96dec8dd2af403d8e809934540e123347b7280d918c78256fc9d99fb10e42bafdb75d0486c89c8aab25be6dcf262a83ae99a144a54b9d09327981775c0643478c24e85399ad37472c06479d9b7a86adccb198fdc49104edd5798f7c3e9c331881cd6ac70343e3d87f7f92da6d9f314926b090c8b34c"}, {0x58, 0x116, 0x3, "e0bd42576a8b2660db90aa452d49774541a92e2c3cc6435a252c3c85d86aa705f3c8b35e9a7c227267b76aabdbf5c30ccbd3ea439571a6b031cad22247aa42f37659"}, {0x40, 0x101, 0x5, "ed25f9e605bf38fab5e650f29425d55d69e73d873da8aecfedb1f49daa0d66e54b87d53bb2431425d5a9346532"}, {0x10, 0x108, 0x8fa}], 0x308}, 0x4000004) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) r10 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r10, 0x6, 0x9, 0x0, &(0x7f0000000040)) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r11, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="500000000a0601020000000000000000020000840900020073797a3100000000050001000700"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000180)={@loopback={0x200000000000000}, 0x800, 0x0, 0x3, 0x1}, 0x20) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r4, 0x84, 0x74, &(0x7f0000000140)=""/18, &(0x7f00000001c0)=0x12) 1.181510437s ago: executing program 4 (id=8733): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$TOKEN_CREATE(0x24, &(0x7f0000000140)={0x0, r0}, 0x8) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="0e00000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000030000000200"/28], 0x50) r1 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x9}, 0x20) r2 = accept4(r1, 0x0, &(0x7f0000000200), 0x1000) socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r1, 0x29, 0xa24fc7fbc8856461, &(0x7f0000000300)=0x1000, 0xffffff47) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000500)={'bond0\x00', 0x0}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b0f, 0x0) r5 = socket$tipc(0x1e, 0x2, 0x0) r6 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) r7 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x3, 0x3, 0x3}, 0x10) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r7, &(0x7f0000000280)={&(0x7f0000000040), 0x10, 0x0, 0x0, 0x0, 0x0, 0x40800}, 0x0) sendmsg$tipc(r7, &(0x7f0000000240)={&(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x0, 0x0, 0x2}}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000340)="9e", 0x1}], 0x1, 0x0, 0x0, 0x80}, 0x1) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x2000, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x10}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x24, 0x2, [@TCA_PIE_ECN={0x8, 0x6, 0x1}, @TCA_PIE_ECN={0x8}, @TCA_PIE_LIMIT={0x8, 0x2, 0x8}, @TCA_PIE_TARGET={0x8, 0x1, 0x3}]}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0xb, 0x1}}, {0x2f, 0x2, [0x4780]}}]}]}, 0x78}}, 0x4000010) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0xe0, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000440), &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x25, &(0x7f0000000400)=[{}, {}, {}], 0x18, 0x10, &(0x7f00000004c0), &(0x7f0000000600), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000440)}}, 0x10) sendmsg$ETHTOOL_MSG_TSINFO_GET(r2, &(0x7f00000008c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000880)={&(0x7f00000007c0)=ANY=[@ANYBLOB='\b\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="080029bd7000ffdbdf25190000000c00018008000100", @ANYRES32=0x0, @ANYBLOB="3000018008000100", @ANYRES32=0x0, @ANYBLOB="1400020076657468300000000000000000000000080003000100000008000100", @ANYRES32=r4, @ANYBLOB="1400018008000100", @ANYRES32=r8, @ANYBLOB="080003000300000018000180140002006261746164765f736c6176655f310000"], 0x7c}}, 0x40) r9 = epoll_create1(0x0) r10 = socket$unix(0x1, 0x1, 0x0) close(r10) socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$sock_int(r10, 0x1, 0x2e, &(0x7f0000000040)=0x10009, 0x4) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r10, &(0x7f00000002c0)={0xa002a014}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x500) socket$kcm(0x2a, 0x0, 0x0) 963.008788ms ago: executing program 2 (id=8735): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x20, 0x36, 0x107, 0x70bd27, 0x25dfdbfd, {0x1, 0x7c}, [@typed={0xc, 0x7, 0x0, 0x0, @u64=0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) (async) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x20, 0x36, 0x107, 0x70bd27, 0x25dfdbfd, {0x1, 0x7c}, [@typed={0xc, 0x7, 0x0, 0x0, @u64=0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'sit0\x00', &(0x7f00000000c0)={'gre0\x00', 0x0, 0x8000, 0x10, 0x3, 0xc, {{0xc, 0x4, 0x0, 0x6, 0x30, 0x65, 0x0, 0xf, 0x2f, 0x0, @local, @empty, {[@timestamp={0x44, 0x1c, 0xa0, 0x0, 0xc, [0x5, 0xfffffff8, 0x1, 0x7, 0x2, 0x9]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000240)={'syztnl0\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x7800, 0x10, 0x2, 0xffffffc0, {{0xc, 0x4, 0x0, 0x7, 0x30, 0x65, 0x0, 0x7, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x1c}, @rand_addr=0x64010100, {[@timestamp_addr={0x44, 0x1c, 0xe1, 0x1, 0x4, [{@rand_addr=0x64010101, 0x3}, {@multicast2, 0x5}, {@rand_addr=0x64010100, 0x2}]}]}}}}}) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000240)={'syztnl0\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x7800, 0x10, 0x2, 0xffffffc0, {{0xc, 0x4, 0x0, 0x7, 0x30, 0x65, 0x0, 0x7, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x1c}, @rand_addr=0x64010100, {[@timestamp_addr={0x44, 0x1c, 0xe1, 0x1, 0x4, [{@rand_addr=0x64010101, 0x3}, {@multicast2, 0x5}, {@rand_addr=0x64010100, 0x2}]}]}}}}}) sendmsg$MPTCP_PM_CMD_REMOVE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x6c, r2, 0x21b, 0x70bd25, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x10001}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x2000}, @MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r3}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20008011}, 0x80) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_MATCH_INFO={0x14, 0x3, "f47a3b6e947d8444ef8a51116b61979e"}, @NFTA_MATCH_NAME={0x9, 0x1, 'l2tp\x00'}, @NFTA_MATCH_REV={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 910.158092ms ago: executing program 0 (id=8736): r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$inet(r0, &(0x7f0000002780)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@ip_retopts={{0x18, 0x110, 0xd, {[@timestamp_addr={0x44, 0x4}, @ssrr={0x89, 0x3, 0xe7}]}}}], 0x18}, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="180000000000200000000000000000004d0000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000000}, 0x94) 874.107561ms ago: executing program 4 (id=8737): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4050000d62b00006110600000000000c6000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) (async) syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x4, 0x4, 0x401}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x26}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000500)={@map=r1, 0x5, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f00000007c0)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xffffffa9}, {&(0x7f00000002c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)}, {0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000003c0)="96e6e14d06cd2cd1dc6969313336a9017d94"}, {&(0x7f0000000400)="499b7fee4035c5b8beb1f70453870f0783c185665f5661dc54c5a1a1ad65e127a695fb29eb758e857595e5277fdfcd8246da633a7d6ed7e05fe75f4f36c670e755ca5142914fdc83650da6c01c7a06ebf495fbe36b151a4c207d9347308484a5891ad7c14310bd"}, {&(0x7f0000000640)="7caba4f81ffec1c44c4691773da226d91a54e9721f1f4c8f4d4f19a73292612c8ad72d40ac83e55148f6700815e6d140cfab03adc719caee1f3feed087bc616c3bc19a510350d0befe495457b7d16c139c6e6850f1e32a661bd7cc91e333472aae3e3eb8815a38aa8fea91788c44336c8437a86f885f3546456df377a81b43b22f543cad111ff0d0"}], 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="00000000000000001701000004000000040000000000000000000000000000001701000003000000000000000000000000000000000000001701000002000000000000008db6ba8669d9e3af336c9db7d7b600000000000067ab9dfade50263fca68064513414d4a7812c38b4c70753e9ef9f941ff7c1ebcfd79c64a594b41dd41b329d3cc14c29fa008f5c24363ad52e2bafeba6e55ac24ad2a44cbeacd365353b6541f21789daab56174ca2941b64022d67061ec8e2b1fa1eed6e9d4"], 0x0, 0x40088c0}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0xff40}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) (async) sendmsg$nl_generic(r2, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x1c, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='5\x00'}]}, 0x1c}}, 0x0) 770.448361ms ago: executing program 0 (id=8738): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x94) (async) r1 = socket$packet(0x11, 0x2, 0x300) r2 = accept(r1, &(0x7f0000000140)=@xdp, &(0x7f00000001c0)=0x80) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) listen(r3, 0x0) (async) ioctl$sock_TIOCINQ(r3, 0x541b, 0x0) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r4, 0x0, 0xc8, &(0x7f0000000080), 0x4) (async) setsockopt$MRT_ADD_VIF(r4, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x4, 0x0, 0x0, @vifc_lcl_addr=@dev={0xac, 0x14, 0x14, 0x20}, @dev={0xac, 0x14, 0x14, 0xfd}}, 0x10) (async) close(r4) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r2) (async) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x6, 0x8000}, 0x4) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x5, 0x14, 0x0, &(0x7f0000000000)="259a53f271a76d2608004c6588a80a3888ca2f15", 0x0, 0xd11, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x40}, 0x50) 743.017064ms ago: executing program 4 (id=8739): r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0x6}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x1a3, 0x655c, 0x4, 0x40, 0x7fffffff, 0x3c9cfc5, 0x80, 0xffffffff, 0x1}}}}]}, 0x58}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x4040810}, 0x0) unshare(0x40400) r2 = socket$l2tp6(0xa, 0x2, 0x73) connect$l2tp6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x200, 0xffffffff}, 0x20) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000740)=@newtfilter={0x78, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r1, {0xe}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flower={{0xb}, {0x48, 0x2, [@TCA_FLOWER_KEY_TCP_SRC={0x6}, @TCA_FLOWER_KEY_VLAN_PRIO={0x5, 0x18, 0x3}, @TCA_FLOWER_KEY_IPV6_SRC_MASK={0x14, 0xf, [0xffffffff, 0xff000000, 0xffffff00, 0xff]}, @TCA_FLOWER_KEY_ETH_DST={0xa}, @TCA_FLOWER_KEY_IPV6_SRC={0x14, 0xe, @mcast1}]}}]}, 0x78}}, 0x4000) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000100001000000000000000000000000060a010400000000000000000a0000010900010073797a310000000028000480240001800b000100657874686472000014000280080001400000001308000640000000040900020073797a3200000000060007400e3f0000140000001100010000000000000000000100000a"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000c40)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd30", 0x10) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@RTM_GETNSID={0x1c, 0x5a, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@NETNSA_PID={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4802}, 0x0) r7 = accept4(r5, 0x0, 0x0, 0x0) sendmmsg$alg(r7, &(0x7f0000000540)=[{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000680)="fe55fc2733656cd94cd632f708d5edc9bbe8b3ec7b6726cb94dd7ef916602cfa318a03da4cd0bcbe6074bdf1dc41427cb05cdcc0a6bf308e382bd3b0a7", 0x3d}], 0x1, 0x0, 0x0, 0x40000}], 0x1, 0xc0) recvmmsg(r7, &(0x7f0000000980)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000740)=""/96, 0x7}, {&(0x7f0000000940)=""/53, 0x35}], 0x2}, 0x7fff}, {{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000840)=""/116, 0x74}], 0x1}, 0x9}], 0x2, 0x10000, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETFLOWTABLE(r9, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x70, 0x17, 0xa, 0x3, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x5}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x70}, 0x1, 0x0, 0x0, 0x90}, 0x4000) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000004c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="0100000000000000000017000000540006803c0004"], 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x4008014) sendmsg$TIPC_NL_LINK_GET(r7, &(0x7f0000000500)={&(0x7f0000000000), 0xc, &(0x7f00000004c0)={&(0x7f0000000a40)=ANY=[@ANYBLOB="54992ff247440befc97ae8dcaad37edb7d220192610647a9d21724f606b042a57a89b53b4fc96f344d60da6cf5a0d8e99bb53dcc769e54932c5a46431426aa0d9f798af3b99a5b16f8baedfe16e1dd1f1e4fd50f9036efa6921e40972984ddbea4670d4fa535bc3958e6", @ANYRES16=r10, @ANYBLOB="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"], 0x128}, 0x1, 0x0, 0x0, 0x84}, 0x40) 724.825835ms ago: executing program 2 (id=8740): r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0xc, @empty}, 0x20) connect$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x9, @ipv4={'\x00', '\xff\xff', @remote}, 0x4, 0x2}, 0x20) socket$l2tp6(0xa, 0x2, 0x73) connect$unix(r0, &(0x7f0000000200)=@file={0x0, './file0\x00'}, 0x6e) 628.97856ms ago: executing program 0 (id=8741): ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, &(0x7f0000000240)={0xffffffffffffffff, &(0x7f0000000140)='GPL\x00', 0x2, &(0x7f0000000180)={@align=0x413b, {0xc, 0xb3f, 0xf24, 0x8}}, 0xff, &(0x7f00000001c0)={@_ha_fsid}, &(0x7f0000000200)=0x1}) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0xe, &(0x7f0000001b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x94) 491.23532ms ago: executing program 2 (id=8742): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x9}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000000)=0x1ff, 0x4) sendmmsg(r0, &(0x7f0000001500)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x7, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="080100000000000029000000", @ANYRES64=r0], 0x14}}], 0x1, 0xc040) 441.360119ms ago: executing program 0 (id=8743): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0001000000000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000000)=0x3) ioctl$PPPIOCSPASS(r2, 0x40107447, &(0x7f0000000080)={0x2, &(0x7f00000001c0)=[{0x40, 0x1, 0x0, 0xffcffffc}, {0x6, 0x0, 0x0, 0x3}]}) write$ppp(r2, &(0x7f0000000300)="5af9", 0x2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="2400000001040102000000c9fd0000000000000008000340000100000500010001"], 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x1c, 0x25, 0x301, 0x270bd24, 0x25dfdbff, {0x1}, [@typed={0x8, 0x12b, 0x0, 0x0, @pid}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20044008}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={0x24, 0x1, 0x4, 0x5, 0x0, 0x0, {0xa}, [@NFULA_CFG_CMD={0x5, 0x1, 0x2}, @NFULA_CFG_FLAGS={0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0xc010}, 0x22000004) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x10, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r7, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$inet(r6, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r7, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) ioctl$TUNSETNOCSUM(r8, 0xc040ff0b, 0x1) bpf$PROG_BIND_MAP(0xa, &(0x7f00000008c0)={r5, r1}, 0x56) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e20, 0x1, @remote, 0x3}, 0x1c) 349.108131ms ago: executing program 2 (id=8744): socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000005940)) socket$netlink(0x10, 0x3, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0xb2, 0x6a, 0xa, 0xff00}, [@call={0xc}, @exit, @map_fd, @jmp]}, &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a300000000040000000030a09020000000000000000020000000900010073797a30000000000900030073797a3200000000140004800800014000000000080002400000000014000000110001"], 0x88}}, 0x8044) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001180)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x304, 0x10, &(0x7f0000000000), 0xfffffea2}, 0x48) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWCHAIN={0x38, 0x3, 0xa, 0x801, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_HOOK={0x4}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}]}], {0x14}}, 0x60}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x1, 0x4, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8}, [@generic={0x91, 0x1, 0x1, 0x7c}]}, &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb}, 0x94) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40100, 0x0) ioctl$NILFS_IOCTL_SET_SUINFO(r2, 0x40186e8d, &(0x7f0000000380)={&(0x7f0000000280)=[{0x3, 0x0, 0x0, {0x11af, 0x4d2a46d9, 0x1}}, {0x8000000000000001, 0x0, 0x0, {0x4, 0xffb, 0x1}}, {0x5, 0x0, 0x0, {0x2, 0xfffffffd}}, {0x9276, 0x0, 0x0, {0x1, 0xffff0001}}, {0x1df7, 0x0, 0x0, {0x2, 0x3ff}}, {0x7fff, 0x2, 0x0, {0x5, 0x1, 0x2}}, {0x6, 0x1, 0x0, {0x0, 0x400, 0x2}}], 0x7, 0x20, 0x1, 0x64}) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000000)) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=@newlink={0x28, 0x10, 0x801, 0xfffffffd, 0x8000000, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20421}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x8024) socket(0x80000000000000a, 0x2, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xc3}, {}, {0xe, 0xd}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000280)=0xcb, 0x4) readv(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000001b80)=""/4096, 0x1000}], 0x1) socket(0x23, 0x80000, 0x5ca5) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000740)={0x40, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0xfffffffe}}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x8}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) 154.68545ms ago: executing program 0 (id=8745): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000084000000100000080"], 0x48) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x6, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10001}, [@map_val={0x18, 0x0, 0x2, 0x0, r0}, @ldst={0x3, 0x0, 0x6, 0x0, 0x0, 0xa0}]}, &(0x7f0000000180)='syzkaller\x00', 0x7, 0x0, 0x0, 0xf100}, 0x94) 35.872113ms ago: executing program 0 (id=8746): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = accept4$unix(0xffffffffffffffff, 0x0, &(0x7f0000000540), 0x80800) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r1, 0x80286722, &(0x7f0000001c80)={&(0x7f0000000c80)=""/4096, 0x1000, 0x2, 0x81}) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r2, 0x0, 0x40088d0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0, r2) sendmsg$L2TP_CMD_SESSION_MODIFY(r2, 0x0, 0x4008000) sendmsg$NFT_BATCH(r3, 0x0, 0x0) r4 = socket(0x28, 0x5, 0x0) setsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, 0x0, 0x0) bind$vsock_stream(r4, 0x0, 0x0) listen(r4, 0x0) r5 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r5, &(0x7f0000000080), 0x10) accept4$unix(r4, 0x0, 0x0, 0x0) r6 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmsg$IPVS_CMD_GET_DEST(r5, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8008}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0xd0, 0x0, 0x300, 0x70bd27, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x80000000}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x200}]}, @IPVS_CMD_ATTR_SERVICE={0x40, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'nq\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x76}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x89}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x20, 0x4}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x13}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x3}]}, @IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'nq\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x76e528ad}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x11}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@loopback}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x41}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local}]}]}, 0xd0}, 0x1, 0x0, 0x0, 0x4000055}, 0x4000000) sendmmsg$inet(r6, &(0x7f0000000c40)=[{{&(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x23, 0x0}}], 0x1e1730a30afb6559, 0x8014) listen(r6, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) r7 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r7, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x4, 0x0, 0x400, {}, {}, {}, 0x1, @can={{}, 0x1, 0x0, 0x4, 0x0, "63bad47c2fbf2948"}}, 0x48}}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x5, 0x20000000ec071, 0xffffffffffffffff, 0x1000000) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000000c0)={'wg2\x00'}) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0xa}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0x8}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x78}, 0x1, 0x0, 0x0, 0x4044}, 0x24000840) 0s ago: executing program 4 (id=8747): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={{0x14}, [], {0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}}, 0x28}}, 0x0) r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="2309fefffffffcffffff0100000005000700000000000800090000000000060002000100000008000a000400010008001700", @ANYRES32], 0x3c}}, 0x0) r3 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x9}, 0x20) r4 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff) r5 = socket$netlink(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x34, r7, 0x5, 0xfffffffd, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x39}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x4044044}, 0x0) sendmsg$DEVLINK_CMD_PORT_GET(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0x3c, r4, 0x1, 0x70bd2b, 0x0, {0x35}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0xffffffff}}}]}, 0x3c}}, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r1, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0x84, r4, 0x401, 0x70bd27, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x1b}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xe}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x31b}}]}, 0x84}, 0x1, 0x0, 0x0, 0x4001}, 0x8000) setsockopt$inet6_int(r3, 0x29, 0x1000000000021, &(0x7f0000000000)=0x1ff, 0x4) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x3, 0x12, &(0x7f0000000700)=@framed={{}, [@cb_func={0x18, 0x9, 0x4, 0x0, 0xfffffffffffffffd}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffffff90}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r9}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmmsg(r3, &(0x7f0000001500)=[{{&(0x7f0000000040)=@l2tp6={0xa, 0x0, 0x7080000, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x7, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="080100000000000029000000", @ANYRES64=r3], 0x108}}], 0x1, 0xc040) kernel console output (not intermixed with test programs): scuous mode [ 853.451053][ T2787] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7724'. [ 853.468640][ T2787] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7724'. [ 853.480088][ T2787] netlink: 58 bytes leftover after parsing attributes in process `syz.4.7724'. [ 853.719820][ T2806] openvswitch: netlink: Invalid VLAN frame [ 853.926591][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 854.727850][ C0] ip6_tunnel: ip6gretap2 xmit: Local address not yet configured! [ 854.919131][ T2866] openvswitch: netlink: Flow actions attr not present in new flow. [ 854.940926][ T2859] FAULT_INJECTION: forcing a failure. [ 854.940926][ T2859] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 854.959270][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 854.998773][ T2859] CPU: 1 UID: 0 PID: 2859 Comm: syz.1.7740 Not tainted syzkaller #0 PREEMPT(full) [ 854.998820][ T2859] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 854.998842][ T2859] Call Trace: [ 854.998850][ T2859] [ 854.998859][ T2859] dump_stack_lvl+0xe8/0x150 [ 854.998885][ T2859] should_fail_ex+0x412/0x560 [ 854.998911][ T2859] _copy_from_user+0x2d/0xb0 [ 854.998934][ T2859] sk_setsockopt+0x2b3/0x2d60 [ 854.998964][ T2859] ? __pfx_sk_setsockopt+0x10/0x10 [ 854.998988][ T2859] ? aa_sk_perm+0x6d5/0x900 [ 854.999014][ T2859] ? __fget_files+0x2a/0x420 [ 854.999041][ T2859] ? __pfx_aa_sk_perm+0x10/0x10 [ 854.999070][ T2859] ? __fget_files+0x2a/0x420 [ 854.999090][ T2859] ? aa_sock_opt_perm+0xff/0x1a0 [ 854.999118][ T2859] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 854.999147][ T2859] do_sock_setsockopt+0x11b/0x1b0 [ 854.999173][ T2859] __x64_sys_setsockopt+0x13d/0x1b0 [ 854.999195][ T2859] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 854.999215][ T2859] do_syscall_64+0x174/0x580 [ 854.999234][ T2859] ? trace_irq_disable+0x3b/0x140 [ 854.999260][ T2859] ? clear_bhb_loop+0x40/0x90 [ 854.999282][ T2859] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 854.999300][ T2859] RIP: 0033:0x7f6d22b9ce59 [ 854.999317][ T2859] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 854.999332][ T2859] RSP: 002b:00007f6d23985028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 854.999351][ T2859] RAX: ffffffffffffffda RBX: 00007f6d22e15fa0 RCX: 00007f6d22b9ce59 [ 854.999365][ T2859] RDX: 0000000000000023 RSI: 0000000000000001 RDI: 0000000000000003 [ 854.999375][ T2859] RBP: 00007f6d23985090 R08: 0000000000000004 R09: 0000000000000000 [ 854.999387][ T2859] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000001 [ 854.999398][ T2859] R13: 00007f6d22e16038 R14: 00007f6d22e15fa0 R15: 00007fff0148eca8 [ 854.999425][ T2859] [ 855.360189][ T2893] tipc: Enabled bearer , priority 0 [ 855.388942][ T2894] tipc: Enabling of bearer rejected, already enabled [ 855.418882][ T2902] syzkaller0: entered promiscuous mode [ 855.424756][ T2902] syzkaller0: entered allmulticast mode [ 855.740467][ T2902] tipc: Resetting bearer [ 855.844583][ T2902] tipc: Resetting bearer [ 855.956958][ T2902] tipc: Disabling bearer [ 855.995614][ T9531] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 856.007013][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 856.029122][ T9531] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 856.060478][ T9531] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 856.075062][ T2938] FAULT_INJECTION: forcing a failure. [ 856.075062][ T2938] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 856.089284][ T9531] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 856.115868][ T2938] CPU: 1 UID: 0 PID: 2938 Comm: syz.2.7758 Not tainted syzkaller #0 PREEMPT(full) [ 856.115895][ T2938] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 856.115907][ T2938] Call Trace: [ 856.115915][ T2938] [ 856.115924][ T2938] dump_stack_lvl+0xe8/0x150 [ 856.115950][ T2938] should_fail_ex+0x412/0x560 [ 856.115977][ T2938] _copy_to_user+0x31/0xb0 [ 856.116002][ T2938] simple_read_from_buffer+0xe1/0x170 [ 856.116031][ T2938] proc_fail_nth_read+0x1bb/0x230 [ 856.116058][ T2938] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 856.116086][ T2938] ? rw_verify_area+0x2a6/0x4d0 [ 856.116110][ T2938] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 856.116135][ T2938] vfs_read+0x20c/0xa70 [ 856.116165][ T2938] ? __pfx___mutex_lock+0x10/0x10 [ 856.116188][ T2938] ? __pfx_vfs_read+0x10/0x10 [ 856.116215][ T2938] ? __fget_files+0x2a/0x420 [ 856.116244][ T2938] ? __fget_files+0x3a0/0x420 [ 856.116262][ T2938] ? __fget_files+0x2a/0x420 [ 856.116291][ T2938] ksys_read+0x150/0x270 [ 856.116318][ T2938] ? __pfx_ksys_read+0x10/0x10 [ 856.116349][ T2938] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 856.116365][ T2938] do_syscall_64+0x174/0x580 [ 856.116384][ T2938] ? trace_irq_disable+0x3b/0x140 [ 856.116410][ T2938] ? clear_bhb_loop+0x40/0x90 [ 856.116434][ T2938] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 856.116452][ T2938] RIP: 0033:0x7f821695d68e [ 856.116470][ T2938] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 856.116486][ T2938] RSP: 002b:00007f8217892fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 856.116505][ T2938] RAX: ffffffffffffffda RBX: 00007f82178936c0 RCX: 00007f821695d68e [ 856.116520][ T2938] RDX: 000000000000000f RSI: 00007f82178930a0 RDI: 0000000000000004 [ 856.116532][ T2938] RBP: 00007f8217893090 R08: 0000000000000000 R09: 0000000000000000 [ 856.116543][ T2938] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 856.116554][ T2938] R13: 00007f8216c16038 R14: 00007f8216c15fa0 R15: 00007fff364af938 [ 856.116587][ T2938] [ 856.636565][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 857.036863][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 857.084164][ T2977] netlink: 'syz.3.7769': attribute type 11 has an invalid length. [ 857.123569][ T2970] __nla_validate_parse: 11 callbacks suppressed [ 857.123592][ T2970] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7769'. [ 857.147210][ T2971] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.7767'. [ 857.175089][ T2978] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 857.686599][ T2999] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 857.700012][ T2999] netlink: 32 bytes leftover after parsing attributes in process `syz.2.7772'. [ 858.076703][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 858.849095][ T3004] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7773'. [ 859.116686][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 859.609990][ T3007] lo speed is unknown, defaulting to 1000 [ 859.620567][ T3007] lo speed is unknown, defaulting to 1000 [ 859.736732][ T3007] macsec0 speed is unknown, defaulting to 1000 [ 859.743969][ T3007] lo speed is unknown, defaulting to 1000 [ 860.025706][ T2970] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 860.169783][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 860.222111][ T3014] netlink: 'syz.1.7777': attribute type 1 has an invalid length. [ 860.225430][ T3017] netlink: 'syz.3.7779': attribute type 1 has an invalid length. [ 860.244322][ T3018] netlink: 'syz.3.7779': attribute type 1 has an invalid length. [ 860.283565][ T9532] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 860.307229][ T9532] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 860.331238][ T3017] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 860.335466][ T3018] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 860.347567][ T3014] bond3: entered promiscuous mode [ 860.362403][ T3014] bond3: entered allmulticast mode [ 860.369256][ T3014] 8021q: adding VLAN 0 to HW filter on device bond3 [ 860.401365][ T3028] bridge6: entered promiscuous mode [ 860.423645][ T3028] bridge6: entered allmulticast mode [ 860.439732][ T3028] bond3: (slave bridge6): Enslaving as a backup interface with an up link [ 860.441873][ T3033] netlink: 'syz.3.7782': attribute type 8 has an invalid length. [ 860.458359][ T9532] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 860.468766][ T9531] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 860.495624][ T9532] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 860.621467][ T3037] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7784'. [ 860.636574][ T9531] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 860.677820][ T3042] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7784'. [ 860.858003][ T3055] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7790'. [ 861.128919][ T3073] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7792'. [ 861.158528][ T3073] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7792'. [ 861.196788][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 861.281410][ T3079] netlink: 36 bytes leftover after parsing attributes in process `syz.1.7794'. [ 861.440467][ T3044] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 861.676073][ T3055] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -512 0 [ 862.236536][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 862.363176][ T3115] syzkaller0: entered promiscuous mode [ 862.386572][ T3115] syzkaller0: entered allmulticast mode [ 863.106215][ T3137] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7807'. [ 863.282490][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 864.324187][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 865.368463][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 866.396575][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 866.899791][ T3186] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7818'. [ 866.905733][ T3183] batman_adv: batadv0: Adding interface: ipvlan2 [ 866.927978][ T3183] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 866.976079][ T3183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 866.988516][ T3183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 867.007637][ T3183] batman_adv: batadv0: Not using interface ipvlan2 (retrying later): interface not active [ 867.038266][ T3177] lo speed is unknown, defaulting to 1000 [ 867.128987][ T3198] bond1: left promiscuous mode [ 867.133884][ T3198] bridge2: left promiscuous mode [ 867.149200][ T3198] bond2: left promiscuous mode [ 867.157923][ T3198] bond5: left promiscuous mode [ 867.162779][ T3198] bridge4: left promiscuous mode [ 867.173841][ T3177] lo speed is unknown, defaulting to 1000 [ 867.207014][T12465] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 867.428865][ T3177] macsec0 speed is unknown, defaulting to 1000 [ 867.436606][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 867.441785][ T3212] netlink: 7060 bytes leftover after parsing attributes in process `syz.4.7823'. [ 867.445515][ T3177] lo speed is unknown, defaulting to 1000 [ 867.459185][ T3212] netlink: 'syz.4.7823': attribute type 5 has an invalid length. [ 867.623895][ T3221] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 867.929022][ T5761] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 868.486592][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 869.342346][ T3142] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 869.516590][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 869.671381][ T3264] pimreg: entered allmulticast mode [ 869.683364][ T3264] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7836'. [ 869.808672][T22779] IPVS: starting estimator thread 0... [ 869.825145][ T3274] IPVS: set_ctl: invalid protocol: 255 172.20.20.187:20003 [ 869.917225][ T3275] IPVS: using max 25 ests per chain, 60000 per kthread [ 869.952050][ T3274] netlink: 'syz.0.7840': attribute type 1 has an invalid length. [ 870.059780][ T3274] bond5 (unregistering): Released all slaves [ 870.463081][ T3286] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7843'. [ 870.556932][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 870.623037][ T3294] openvswitch: netlink: Duplicate or invalid key (type 0). [ 870.652658][ T3294] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 870.674086][ T3294] geneve2: entered promiscuous mode [ 870.684323][ T9534] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 870.696205][ T9534] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 870.746672][ T9534] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 870.784351][ T9534] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 870.858887][ T3307] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7852'. [ 870.888381][ T3309] nbd: must specify a size in bytes for the device [ 871.259660][ T3343] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7860'. [ 871.303701][ T3343] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7860'. [ 871.467163][ T3355] netlink: 'syz.0.7861': attribute type 2 has an invalid length. [ 871.505585][ T3355] netlink: 'syz.0.7861': attribute type 2 has an invalid length. [ 871.538962][ T3348] macsec0: entered promiscuous mode [ 871.597045][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 871.691095][ T3307] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 871.707232][ T3307] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 871.764629][ T3307] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 871.796104][ T3307] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 872.142102][ T3380] netlink: 'syz.4.7871': attribute type 10 has an invalid length. [ 872.241386][ T3374] IPv6: sit1: Disabled Multicast RS [ 872.273053][ T3386] netlink: 'syz.4.7871': attribute type 1 has an invalid length. [ 872.310541][ T3386] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7871'. [ 872.423241][ T3399] netlink: 'syz.2.7875': attribute type 4 has an invalid length. [ 872.435139][ T3380] team0: Port device " added [ 872.440443][ T3399] netlink: 152 bytes leftover after parsing attributes in process `syz.2.7875'. [ 872.468284][ T3399] .`: renamed from bond0 [ 872.492138][ T3392] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7875'. [ 872.520200][ T3402] netlink: 132 bytes leftover after parsing attributes in process `syz.0.7877'. [ 872.573692][ T3402] veth0: Caught tx_queue_len zero misconfig [ 872.608793][ T3411] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7878'. [ 872.636980][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 873.205022][ T3445] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 873.241381][T32290] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 873.252204][ T30] audit: type=1800 audit(1780650997.584:24): pid=3451 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.7890" name="blkio.bfq.time_recursive" dev="tmpfs" ino=2257 res=0 errno=0 [ 873.284851][T32290] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 873.312174][T32290] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 873.338910][ T3455] netlink: 'syz.0.7889': attribute type 9 has an invalid length. [ 873.347073][ T3455] netlink: 'syz.0.7889': attribute type 6 has an invalid length. [ 873.359158][ T3455] netlink: 'syz.0.7889': attribute type 7 has an invalid length. [ 873.372448][ T3455] netlink: 'syz.0.7889': attribute type 8 has an invalid length. [ 873.538515][T32290] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 873.676796][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 873.708737][ T3467] netlink: 'syz.4.7895': attribute type 1 has an invalid length. [ 873.719527][ T3467] netlink: 'syz.4.7895': attribute type 3 has an invalid length. [ 873.806512][ T3471] tipc: Enabled bearer , priority 0 [ 873.873859][ T3471] syzkaller0: entered promiscuous mode [ 873.880420][ T3471] syzkaller0: entered allmulticast mode [ 873.887234][ T3471] tipc: Resetting bearer [ 873.917059][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 874.425268][ T3501] macvtap0: entered promiscuous mode [ 874.445986][ T3501] netlink: 'syz.0.7906': attribute type 11 has an invalid length. [ 874.533149][ T3501] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 874.572073][ T3466] tipc: Resetting bearer [ 874.717633][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 875.292781][ T3523] openvswitch: netlink: IP tunnel dst address not specified [ 875.292781][ T3522] openvswitch: netlink: IP tunnel dst address not specified [ 875.417758][ T3527] netlink: 'syz.3.7914': attribute type 4 has an invalid length. [ 875.425977][ T3526] netlink: 'syz.3.7914': attribute type 4 has an invalid length. [ 875.766546][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 876.798069][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 877.837517][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 878.093696][ T3466] tipc: Disabling bearer [ 878.102574][ T3501] mac80211_hwsim hwsim80 wlan0: entered promiscuous mode [ 878.111003][ T3501] mac80211_hwsim hwsim80 wlan0: entered allmulticast mode [ 878.123530][ T10] tipc: Node number set to 543073289 [ 878.297494][ T10] lo speed is unknown, defaulting to 1000 [ 878.323198][ T10] syś2: Port: 1 Link DOWN [ 878.361675][ T5637] block nbd10: Receive control failed (result -32) [ 878.431196][ T3540] __nla_validate_parse: 194 callbacks suppressed [ 878.431218][ T3540] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7918'. [ 878.473976][ T3546] team0 (unregistering): Port device team_slave_0 removed [ 878.491683][ T3546] team0 (unregistering): Port device team_slave_1 removed [ 878.520243][ T3546] team0 (unregistering): Port device netdevsim1 removed [ 878.686859][ T3562] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7925'. [ 878.725477][ T3564] veth0_macvtap: Caught tx_queue_len zero misconfig [ 878.876561][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 878.912218][ T3581] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7930'. [ 878.919351][ T3562] 8021q: adding VLAN 0 to HW filter on device bond0 [ 878.973078][ T3580] netlink: 200 bytes leftover after parsing attributes in process `syz.2.7925'. [ 879.077823][ T3571] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7925'. [ 879.294987][ T3581] veth13: entered promiscuous mode [ 879.916836][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 880.786874][ T3595] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7933'. [ 880.790671][ T3571] bond0: (slave bridge5): Enslaving as an active interface with an up link [ 880.862375][ T3604] netlink: 'syz.4.7936': attribute type 4 has an invalid length. [ 880.879599][ T3603] netlink: 'syz.4.7936': attribute type 4 has an invalid length. [ 880.891383][ T3606] netlink: 'syz.3.7934': attribute type 13 has an invalid length. [ 880.907046][ T3606] netlink: 'syz.3.7934': attribute type 17 has an invalid length. [ 880.959666][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 880.971561][ T3597] bridge0: port 3(macvlan2) entered disabled state [ 880.978395][ T3597] bridge0: port 1(bridge_slave_0) entered disabled state [ 881.083469][ T3597] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 881.099760][ T3597] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 881.450203][ T3606] syz_tun: left promiscuous mode [ 881.489928][ T3606] 8021q: adding VLAN 0 to HW filter on device bond0 [ 881.506145][ T3606] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 881.541008][ T3606] bridge0: port 1(bridge_slave_0) entered blocking state [ 881.548284][ T3606] bridge0: port 1(bridge_slave_0) entered forwarding state [ 881.580725][ T3606] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 881.592869][ T3606] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 881.629326][ T3606] veth1_vlan: left promiscuous mode [ 881.651988][ T3606] veth0_vlan: left promiscuous mode [ 881.671106][ T3606] veth0_vlan: entered promiscuous mode [ 881.705585][ T3606] veth1_vlan: entered promiscuous mode [ 881.763267][ T3606] veth1_macvtap: left promiscuous mode [ 881.773059][ T3635] netlink: 8 bytes leftover after parsing attributes in process `syz.0.7938'. [ 881.790900][ T3606] veth0_macvtap: left promiscuous mode [ 881.803643][ T3606] veth0_macvtap: entered promiscuous mode [ 881.832814][ T3606] veth1_macvtap: entered promiscuous mode [ 881.854468][ T3606] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 881.868819][ T3606] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 881.882422][ T3606] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 881.897388][ T3606] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 881.910750][ T3606] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 882.005665][ T5969] bridge0: port 2(bridge_slave_1) entered blocking state [ 882.013059][ T5969] bridge0: port 2(bridge_slave_1) entered forwarding state [ 882.020860][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 882.039318][ T1141] netdevsim netdevsim3 netdevsim0: unset [1, 1] type 2 family 0 port 41920 - 0 [ 882.048824][ T1141] netdevsim netdevsim3 netdevsim1: unset [1, 1] type 2 family 0 port 41920 - 0 [ 882.066630][T12463] lo speed is unknown, defaulting to 1000 [ 882.088127][T12463] syś2: Port: 1 Link ACTIVE [ 882.193131][ T3630] bridge0: port 2(bridge_slave_1) entered disabled state [ 882.200876][ T3630] bridge0: port 1(bridge_slave_0) entered disabled state [ 882.264193][ T3630] A link change request failed with some changes committed already. Interface " may have been left with an inconsistent configuration, please check. [ 882.330006][ T1141] netdevsim netdevsim3 netdevsim2: unset [1, 1] type 2 family 0 port 41920 - 0 [ 882.350630][ T1141] netdevsim netdevsim3 netdevsim3: unset [1, 1] type 2 family 0 port 41920 - 0 [ 882.504055][ T3655] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7946'. [ 882.531878][ T3655] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7946'. [ 882.624786][ T3662] netlink: 'syz.4.7948': attribute type 2 has an invalid length. [ 882.675037][ T3660] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7947'. [ 883.037186][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 883.639398][ T3707] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7961'. [ 883.656207][ T3708] netlink: 'syz.3.7963': attribute type 1 has an invalid length. [ 883.688677][ T3702] netlink: 'syz.0.7961': attribute type 3 has an invalid length. [ 883.717310][ T3708] 8021q: adding VLAN 0 to HW filter on device bond9 [ 883.728426][ T3708] bond8: (slave bond9): making interface the new active one [ 883.737751][ T3708] bond8: (slave bond9): Enslaving as an active interface with an up link [ 883.832635][ T3708] lo speed is unknown, defaulting to 1000 [ 883.841625][ T3708] lo speed is unknown, defaulting to 1000 [ 883.849901][ T3715] netlink: 'syz.4.7964': attribute type 1 has an invalid length. [ 883.940830][ T3711] bond8: (slave gretap2): Enslaving as a backup interface with an up link [ 884.076552][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 884.193092][ T3715] bond7: entered promiscuous mode [ 884.231485][ T3715] 8021q: adding VLAN 0 to HW filter on device bond7 [ 884.307054][ T3744] bond7: (slave bridge5): making interface the new active one [ 884.327714][ T3744] bridge5: entered promiscuous mode [ 884.334075][ T3744] bond7: (slave bridge5): Enslaving as an active interface with an up link [ 884.515498][ T3708] macsec0 speed is unknown, defaulting to 1000 [ 884.593157][ T3708] lo speed is unknown, defaulting to 1000 [ 885.080700][ T3781] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7980'. [ 885.101618][ T3781] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 885.116567][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 885.510467][ T3798] bridge_slave_0: Caught tx_queue_len zero misconfig [ 885.878618][ T3818] netlink: 792 bytes leftover after parsing attributes in process `syz.2.7992'. [ 885.946023][ T3821] bridge7: entered promiscuous mode [ 885.962559][ T3821] bridge7: entered allmulticast mode [ 886.156883][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 886.311472][ T3849] netlink: 'syz.3.8002': attribute type 62 has an invalid length. [ 886.571417][ T3867] netlink: 92 bytes leftover after parsing attributes in process `syz.3.8005'. [ 886.630245][ T3857] netlink: 'syz.3.8005': attribute type 21 has an invalid length. [ 886.661761][ T3857] netlink: 128 bytes leftover after parsing attributes in process `syz.3.8005'. [ 886.672652][ T3857] netlink: 'syz.3.8005': attribute type 4 has an invalid length. [ 886.683038][ T3857] netlink: 3 bytes leftover after parsing attributes in process `syz.3.8005'. [ 886.830658][ T3881] netlink: 108 bytes leftover after parsing attributes in process `syz.4.8013'. [ 887.109977][ T3900] netlink: 212092 bytes leftover after parsing attributes in process `syz.2.8020'. [ 887.142538][ T3900] netlink: Conntrack attr has 4 unknown bytes [ 887.196857][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 887.275036][ T3908] netlink: 36 bytes leftover after parsing attributes in process `syz.3.8024'. [ 887.298618][ T3908] netlink: 36 bytes leftover after parsing attributes in process `syz.3.8024'. [ 887.493498][ T3918] vlan7: entered allmulticast mode [ 887.530211][ T3918] macvtap0: entered allmulticast mode [ 887.557515][ T3918] veth0_macvtap: entered allmulticast mode [ 887.609607][ T3923] xt_CT: No such helper "snmp" [ 887.762629][ T3937] A link change request failed with some changes committed already. Interface veth1_vlan may have been left with an inconsistent configuration, please check. [ 887.850930][ T3940] syzkaller1: entered promiscuous mode [ 887.868716][ T3940] syzkaller1: entered allmulticast mode [ 888.237693][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 888.339332][ T3961] netlink: 'syz.2.8041': attribute type 1 has an invalid length. [ 888.434873][ T3965] netlink: 'syz.2.8044': attribute type 1 has an invalid length. [ 888.535579][ T3965] 8021q: adding VLAN 0 to HW filter on device bond7 [ 888.777488][ T3979] bond8: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 888.835954][ T3979] bond8 (unregistering): Released all slaves [ 888.886892][ T3993] veth1_to_bond: Caught tx_queue_len zero misconfig [ 889.099121][ T3998] bridge_slave_0: left allmulticast mode [ 889.108355][ T3998] bridge_slave_0: left promiscuous mode [ 889.123291][ T3998] bridge0: port 1(bridge_slave_0) entered disabled state [ 889.145181][ T3998] bridge_slave_1: left allmulticast mode [ 889.170504][ T3998] bridge_slave_1: left promiscuous mode [ 889.199837][ T3998] bridge0: port 2(bridge_slave_1) entered disabled state [ 889.239244][ T3998] bond0: (slave bond_slave_0): Releasing backup interface [ 889.277072][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 889.285915][ T3998] bond0: (slave bond_slave_1): Releasing backup interface [ 889.311777][ T3998] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 889.320641][ T3998] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 889.333007][ T3998] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 889.349073][ T3998] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 889.362531][ T3998] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 889.408009][ T4006] bridge7: entered promiscuous mode [ 889.422830][ T4006] bridge7: entered allmulticast mode [ 889.449558][ T4006] team0: Port device bridge7 added [ 889.794645][ T4037] __nla_validate_parse: 5 callbacks suppressed [ 889.794666][ T4037] netlink: 124 bytes leftover after parsing attributes in process `syz.3.8060'. [ 889.812716][ T4041] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8061'. [ 889.854771][ T4037] netlink: 32 bytes leftover after parsing attributes in process `syz.3.8060'. [ 889.890909][ T4037] netlink: 60 bytes leftover after parsing attributes in process `syz.3.8060'. [ 890.273024][ T4049] sch_tbf: burst 88 is lower than device veth3 mtu (1514) ! [ 890.316935][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 890.339534][ T4065] netlink: 1124 bytes leftover after parsing attributes in process `syz.0.8066'. [ 890.358360][ T4065] netlink: 48 bytes leftover after parsing attributes in process `syz.0.8066'. [ 890.505074][ T4074] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 890.604337][ T4074] netlink: 'syz.0.8070': attribute type 1 has an invalid length. [ 890.701663][ T4074] bond5: entered promiscuous mode [ 890.725326][ T4074] bond5: entered allmulticast mode [ 890.753580][ T4074] 8021q: adding VLAN 0 to HW filter on device bond5 [ 890.792007][ T4094] netlink: 104 bytes leftover after parsing attributes in process `syz.4.8075'. [ 890.919388][ T4097] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8077'. [ 890.930247][ T4097] netlink: 'syz.1.8077': attribute type 9 has an invalid length. [ 891.131535][ T4106] netlink: 244 bytes leftover after parsing attributes in process `syz.1.8081'. [ 891.145266][ T4109] FAULT_INJECTION: forcing a failure. [ 891.145266][ T4109] name failslab, interval 1, probability 0, space 0, times 0 [ 891.173092][ T4109] CPU: 1 UID: 0 PID: 4109 Comm: syz.2.8083 Not tainted syzkaller #0 PREEMPT(full) [ 891.173119][ T4109] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 891.173131][ T4109] Call Trace: [ 891.173139][ T4109] [ 891.173148][ T4109] dump_stack_lvl+0xe8/0x150 [ 891.173175][ T4109] should_fail_ex+0x412/0x560 [ 891.173202][ T4109] should_failslab+0xa8/0x100 [ 891.173223][ T4109] __kmalloc_cache_noprof+0x88/0x660 [ 891.173255][ T4109] ? wakeup_source_sysfs_add+0x57/0x2c0 [ 891.173283][ T4109] wakeup_source_sysfs_add+0x57/0x2c0 [ 891.173307][ T4109] wakeup_source_register+0x18a/0x380 [ 891.173338][ T4109] ep_insert+0xf34/0x1a40 [ 891.173377][ T4109] ? __pfx_ep_insert+0x10/0x10 [ 891.173416][ T4109] ? bpf_lsm_capable+0x9/0x20 [ 891.173443][ T4109] do_epoll_ctl+0x7f4/0xe80 [ 891.173474][ T4109] __x64_sys_epoll_ctl+0x165/0x1b0 [ 891.173499][ T4109] ? __pfx___x64_sys_epoll_ctl+0x10/0x10 [ 891.173529][ T4109] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 891.173546][ T4109] do_syscall_64+0x174/0x580 [ 891.173567][ T4109] ? trace_irq_disable+0x3b/0x140 [ 891.173592][ T4109] ? clear_bhb_loop+0x40/0x90 [ 891.173615][ T4109] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 891.173633][ T4109] RIP: 0033:0x7f821699ce59 [ 891.173650][ T4109] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 891.173666][ T4109] RSP: 002b:00007f8217893028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 891.173686][ T4109] RAX: ffffffffffffffda RBX: 00007f8216c15fa0 RCX: 00007f821699ce59 [ 891.173699][ T4109] RDX: 0000000000000004 RSI: 0000000000000001 RDI: 0000000000000003 [ 891.173709][ T4109] RBP: 00007f8217893090 R08: 0000000000000000 R09: 0000000000000000 [ 891.173720][ T4109] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000001 [ 891.173732][ T4109] R13: 00007f8216c16038 R14: 00007f8216c15fa0 R15: 00007fff364af938 [ 891.173763][ T4109] [ 891.377062][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 891.547070][ T4126] FAULT_INJECTION: forcing a failure. [ 891.547070][ T4126] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 891.619164][ T4126] CPU: 0 UID: 0 PID: 4126 Comm: syz.0.8086 Not tainted syzkaller #0 PREEMPT(full) [ 891.619190][ T4126] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 891.619201][ T4126] Call Trace: [ 891.619209][ T4126] [ 891.619217][ T4126] dump_stack_lvl+0xe8/0x150 [ 891.619244][ T4126] should_fail_ex+0x412/0x560 [ 891.619269][ T4126] _copy_from_user+0x2d/0xb0 [ 891.619292][ T4126] __sys_bpf+0x229/0x950 [ 891.619320][ T4126] ? __pfx___sys_bpf+0x10/0x10 [ 891.619360][ T4126] ? ksys_write+0x242/0x270 [ 891.619386][ T4126] ? __pfx_ksys_write+0x10/0x10 [ 891.619413][ T4126] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 891.619433][ T4126] __x64_sys_bpf+0x7c/0x90 [ 891.619457][ T4126] do_syscall_64+0x174/0x580 [ 891.619477][ T4126] ? trace_irq_disable+0x3b/0x140 [ 891.619501][ T4126] ? clear_bhb_loop+0x40/0x90 [ 891.619523][ T4126] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 891.619541][ T4126] RIP: 0033:0x7f7c9779ce59 [ 891.619559][ T4126] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 891.619575][ T4126] RSP: 002b:00007f7c98663028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 891.619595][ T4126] RAX: ffffffffffffffda RBX: 00007f7c97a15fa0 RCX: 00007f7c9779ce59 [ 891.619609][ T4126] RDX: 0000000000000050 RSI: 0000200000000000 RDI: 000000000000000a [ 891.619621][ T4126] RBP: 00007f7c98663090 R08: 0000000000000000 R09: 0000000000000000 [ 891.619632][ T4126] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 891.619643][ T4126] R13: 00007f7c97a16038 R14: 00007f7c97a15fa0 R15: 00007ffd9ce6b9e8 [ 891.619671][ T4126] [ 891.843235][ T4135] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8090'. [ 891.981093][ T4146] FAULT_INJECTION: forcing a failure. [ 891.981093][ T4146] name failslab, interval 1, probability 0, space 0, times 0 [ 891.993883][ T4146] CPU: 0 UID: 0 PID: 4146 Comm: syz.3.8095 Not tainted syzkaller #0 PREEMPT(full) [ 891.993908][ T4146] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 891.993919][ T4146] Call Trace: [ 891.993927][ T4146] [ 891.993935][ T4146] dump_stack_lvl+0xe8/0x150 [ 891.993961][ T4146] should_fail_ex+0x412/0x560 [ 891.993996][ T4146] should_failslab+0xa8/0x100 [ 891.994017][ T4146] __kmalloc_node_track_caller_noprof+0xeb/0x7b0 [ 891.994046][ T4146] ? kobject_set_name_vargs+0x61/0x110 [ 891.994075][ T4146] kvasprintf+0xeb/0x1a0 [ 891.994101][ T4146] ? __pfx_kvasprintf+0x10/0x10 [ 891.994124][ T4146] ? do_raw_spin_lock+0x12b/0x2f0 [ 891.994152][ T4146] ? kvasprintf_const+0xe1/0x240 [ 891.994175][ T4146] kobject_set_name_vargs+0x61/0x110 [ 891.994201][ T4146] dev_set_name+0xe2/0x140 [ 891.994230][ T4146] ? __pfx_dev_set_name+0x10/0x10 [ 891.994254][ T4146] ? __init_waitqueue_head+0xa9/0x150 [ 891.994285][ T4146] ? device_initialize+0x26a/0x460 [ 891.994313][ T4146] wakeup_source_sysfs_add+0x1a9/0x2c0 [ 891.994338][ T4146] wakeup_source_register+0x18a/0x380 [ 891.994369][ T4146] ep_insert+0xf34/0x1a40 [ 891.994410][ T4146] ? __pfx_ep_insert+0x10/0x10 [ 891.994459][ T4146] ? bpf_lsm_capable+0x9/0x20 [ 891.994487][ T4146] do_epoll_ctl+0x7f4/0xe80 [ 891.994520][ T4146] __x64_sys_epoll_ctl+0x165/0x1b0 [ 891.994547][ T4146] ? __pfx___x64_sys_epoll_ctl+0x10/0x10 [ 891.994579][ T4146] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 891.994599][ T4146] do_syscall_64+0x174/0x580 [ 891.994616][ T4146] ? trace_irq_disable+0x3b/0x140 [ 891.994640][ T4146] ? clear_bhb_loop+0x40/0x90 [ 891.994659][ T4146] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 891.994674][ T4146] RIP: 0033:0x7f25d1f9ce59 [ 891.994692][ T4146] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 891.994707][ T4146] RSP: 002b:00007f25d2ed7028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 891.994725][ T4146] RAX: ffffffffffffffda RBX: 00007f25d2215fa0 RCX: 00007f25d1f9ce59 [ 891.994737][ T4146] RDX: 0000000000000004 RSI: 0000000000000001 RDI: 0000000000000003 [ 891.994748][ T4146] RBP: 00007f25d2ed7090 R08: 0000000000000000 R09: 0000000000000000 [ 891.994758][ T4146] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000001 [ 891.994768][ T4146] R13: 00007f25d2216038 R14: 00007f25d2215fa0 R15: 00007fff99e3f498 [ 891.994797][ T4146] [ 892.396573][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 892.410459][ T4159] xt_hashlimit: size too large, truncated to 1048576 [ 892.829467][ T4191] netlink: 'syz.1.8106': attribute type 1 has an invalid length. [ 893.006125][ T4198] netlink: 'syz.2.8109': attribute type 1 has an invalid length. [ 893.142288][ T4198] bond8: entered promiscuous mode [ 893.149643][ T4198] 8021q: adding VLAN 0 to HW filter on device bond8 [ 893.170274][ T4203] bond8: entered allmulticast mode [ 893.212913][ T4198] bond8: (slave bridge6): making interface the new active one [ 893.281900][ T4198] bridge6: entered promiscuous mode [ 893.295546][ T4198] bridge6: entered allmulticast mode [ 893.310053][ T4198] bond8: (slave bridge6): Enslaving as an active interface with an up link [ 893.436403][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 894.091569][ T4249] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 894.189725][ T4244] syzkaller0: entered promiscuous mode [ 894.196470][ T4244] syzkaller0: entered allmulticast mode [ 894.476572][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 894.835918][ T4297] __nla_validate_parse: 5 callbacks suppressed [ 894.835939][ T4297] netlink: 67 bytes leftover after parsing attributes in process `syz.2.8132'. [ 894.897900][ T4276] geneve4: entered promiscuous mode [ 894.903183][ T4276] geneve4: entered allmulticast mode [ 894.917666][ T4279] bridge0: port 2(bridge_slave_1) entered disabled state [ 895.033119][ T4296] 8021q: adding VLAN 0 to HW filter on device .` [ 895.058640][ T4296] 8021q: adding VLAN 0 to HW filter on device team0 [ 895.081897][ T4296] batman_adv: batadv0: Interface activated: dummy0 [ 895.098224][ T4296] batadv0: mtu less than device minimum [ 895.117444][ T4296] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 895.128672][ T4296] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 895.140526][ T4296] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 895.152373][ T4296] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 895.164171][ T4296] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 895.229856][ T4296] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 895.259087][ T4296] wireguard: wg1: Could not create IPv4 socket [ 895.329390][ T4297] wireguard: wg1: Could not create IPv4 socket [ 895.354331][ T4304] nbd: illegal input index -1 [ 895.541883][ T4310] netlink: 76 bytes leftover after parsing attributes in process `syz.3.8138'. [ 895.869700][ T4324] netlink: 28 bytes leftover after parsing attributes in process `syz.4.8141'. [ 896.029856][ T4332] sctp: [Deprecated]: syz.3.8144 (pid 4332) Use of int in max_burst socket option. [ 896.029856][ T4332] Use struct sctp_assoc_value instead [ 896.031480][ T4339] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 896.106144][ T4331] sctp: [Deprecated]: syz.3.8144 (pid 4331) Use of int in max_burst socket option. [ 896.106144][ T4331] Use struct sctp_assoc_value instead [ 896.181692][ T4350] FAULT_INJECTION: forcing a failure. [ 896.181692][ T4350] name failslab, interval 1, probability 0, space 0, times 0 [ 896.236866][ T4350] CPU: 0 UID: 0 PID: 4350 Comm: syz.0.8147 Not tainted syzkaller #0 PREEMPT(full) [ 896.236892][ T4350] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 896.236903][ T4350] Call Trace: [ 896.236910][ T4350] [ 896.236921][ T4350] dump_stack_lvl+0xe8/0x150 [ 896.236946][ T4350] should_fail_ex+0x412/0x560 [ 896.236970][ T4350] should_failslab+0xa8/0x100 [ 896.236990][ T4350] __kvmalloc_node_noprof+0x178/0x8a0 [ 896.237017][ T4350] ? bpf_test_run_xdp_live+0x223/0x1cf0 [ 896.237040][ T4350] ? __kvmalloc_node_noprof+0x393/0x8a0 [ 896.237070][ T4350] bpf_test_run_xdp_live+0x223/0x1cf0 [ 896.237093][ T4350] ? handle_mm_fault+0x245d/0x3170 [ 896.237141][ T4350] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 896.237161][ T4350] ? __up_read+0x291/0x6b0 [ 896.237201][ T4350] ? do_user_addr_fault+0xc6f/0x1340 [ 896.237225][ T4350] ? irqentry_exit+0x218/0x8b0 [ 896.237244][ T4350] ? lockdep_hardirqs_on+0x7a/0x110 [ 896.237262][ T4350] ? irqentry_exit+0x218/0x8b0 [ 896.237278][ T4350] ? trace_irq_disable+0x3b/0x140 [ 896.237311][ T4350] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 896.237340][ T4350] ? rep_movs_alternative+0x4a/0x90 [ 896.237365][ T4350] ? _copy_from_user+0x94/0xb0 [ 896.237387][ T4350] ? bpf_test_init+0x113/0x150 [ 896.237405][ T4350] ? xdp_convert_md_to_buff+0x5b/0x330 [ 896.237429][ T4350] bpf_prog_test_run_xdp+0x81c/0x1160 [ 896.237463][ T4350] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 896.237486][ T4350] ? __fget_files+0x2a/0x420 [ 896.237513][ T4350] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 896.237532][ T4350] bpf_prog_test_run+0x2c7/0x340 [ 896.237561][ T4350] __sys_bpf+0x643/0x950 [ 896.237588][ T4350] ? __pfx___sys_bpf+0x10/0x10 [ 896.237628][ T4350] ? ksys_write+0x242/0x270 [ 896.237654][ T4350] ? __pfx_ksys_write+0x10/0x10 [ 896.237683][ T4350] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 896.237702][ T4350] __x64_sys_bpf+0x7c/0x90 [ 896.237726][ T4350] do_syscall_64+0x174/0x580 [ 896.237744][ T4350] ? trace_irq_disable+0x3b/0x140 [ 896.237769][ T4350] ? clear_bhb_loop+0x40/0x90 [ 896.237792][ T4350] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 896.237809][ T4350] RIP: 0033:0x7f7c9779ce59 [ 896.237826][ T4350] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 896.237840][ T4350] RSP: 002b:00007f7c98663028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 896.237859][ T4350] RAX: ffffffffffffffda RBX: 00007f7c97a15fa0 RCX: 00007f7c9779ce59 [ 896.237872][ T4350] RDX: 0000000000000050 RSI: 0000200000000000 RDI: 000000000000000a [ 896.237883][ T4350] RBP: 00007f7c98663090 R08: 0000000000000000 R09: 0000000000000000 [ 896.237894][ T4350] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 896.237905][ T4350] R13: 00007f7c97a16038 R14: 00007f7c97a15fa0 R15: 00007ffd9ce6b9e8 [ 896.237935][ T4350] [ 896.397282][T32290] net_ratelimit: 20 callbacks suppressed [ 896.397301][T32290] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 896.551757][T32290] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 896.566576][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 896.754410][ T4362] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8150'. [ 896.798904][ T4362] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8150'. [ 896.865754][ T4370] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8153'. [ 896.873461][ T4371] netlink: 'syz.3.8152': attribute type 1 has an invalid length. [ 896.899014][ T4370] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 896.906024][ T4371] netlink: 'syz.3.8152': attribute type 2 has an invalid length. [ 897.043317][ T4380] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8153'. [ 897.161332][ T4385] tipc: Enabled bearer , priority 0 [ 897.188336][ T4378] syzkaller0: entered promiscuous mode [ 897.209030][T32738] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 897.211008][ T4378] syzkaller0: entered allmulticast mode [ 897.223781][T32738] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 897.433043][ T4378] tipc: Resetting bearer [ 897.454839][ T4377] tipc: Resetting bearer [ 897.523357][ T4377] tipc: Disabling bearer [ 897.544169][ T4400] mac80211_hwsim hwsim76 wlan0: entered promiscuous mode [ 897.557656][ T4400] mac80211_hwsim hwsim76 wlan0: entered allmulticast mode [ 897.559881][ T4406] FAULT_INJECTION: forcing a failure. [ 897.559881][ T4406] name failslab, interval 1, probability 0, space 0, times 0 [ 897.569027][ T4400] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check. [ 897.581556][ T4406] CPU: 1 UID: 0 PID: 4406 Comm: syz.3.8161 Not tainted syzkaller #0 PREEMPT(full) [ 897.581582][ T4406] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 897.581594][ T4406] Call Trace: [ 897.581601][ T4406] [ 897.581610][ T4406] dump_stack_lvl+0xe8/0x150 [ 897.581636][ T4406] should_fail_ex+0x412/0x560 [ 897.581662][ T4406] should_failslab+0xa8/0x100 [ 897.581682][ T4406] __kmalloc_cache_node_noprof+0x8a/0x6b0 [ 897.581711][ T4406] ? trace_kmalloc+0x2a/0xf0 [ 897.581733][ T4406] ? page_pool_create_percpu+0x76/0xc80 [ 897.581763][ T4406] page_pool_create_percpu+0x76/0xc80 [ 897.581786][ T4406] ? __kvmalloc_node_noprof+0x393/0x8a0 [ 897.581816][ T4406] bpf_test_run_xdp_live+0x23d/0x1cf0 [ 897.581840][ T4406] ? handle_mm_fault+0x245d/0x3170 [ 897.581887][ T4406] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 897.581910][ T4406] ? __up_read+0x291/0x6b0 [ 897.581950][ T4406] ? do_user_addr_fault+0xc6f/0x1340 [ 897.581975][ T4406] ? irqentry_exit+0x218/0x8b0 [ 897.581995][ T4406] ? lockdep_hardirqs_on+0x7a/0x110 [ 897.582014][ T4406] ? irqentry_exit+0x218/0x8b0 [ 897.582031][ T4406] ? trace_irq_disable+0x3b/0x140 [ 897.582065][ T4406] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 897.582093][ T4406] ? rep_movs_alternative+0x4a/0x90 [ 897.582117][ T4406] ? _copy_from_user+0x94/0xb0 [ 897.582139][ T4406] ? bpf_test_init+0x113/0x150 [ 897.582157][ T4406] ? xdp_convert_md_to_buff+0x5b/0x330 [ 897.582181][ T4406] bpf_prog_test_run_xdp+0x81c/0x1160 [ 897.582215][ T4406] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 897.582241][ T4406] ? __fget_files+0x2a/0x420 [ 897.582268][ T4406] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 897.582290][ T4406] bpf_prog_test_run+0x2c7/0x340 [ 897.582311][ T4406] __sys_bpf+0x643/0x950 [ 897.582338][ T4406] ? __pfx___sys_bpf+0x10/0x10 [ 897.582377][ T4406] ? ksys_write+0x242/0x270 [ 897.582404][ T4406] ? __pfx_ksys_write+0x10/0x10 [ 897.582433][ T4406] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 897.582452][ T4406] __x64_sys_bpf+0x7c/0x90 [ 897.582483][ T4406] do_syscall_64+0x174/0x580 [ 897.582501][ T4406] ? trace_irq_disable+0x3b/0x140 [ 897.582525][ T4406] ? clear_bhb_loop+0x40/0x90 [ 897.582547][ T4406] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 897.582565][ T4406] RIP: 0033:0x7f25d1f9ce59 [ 897.582583][ T4406] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 897.582597][ T4406] RSP: 002b:00007f25d2ed7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 897.582617][ T4406] RAX: ffffffffffffffda RBX: 00007f25d2215fa0 RCX: 00007f25d1f9ce59 [ 897.582630][ T4406] RDX: 0000000000000050 RSI: 0000200000000000 RDI: 000000000000000a [ 897.582642][ T4406] RBP: 00007f25d2ed7090 R08: 0000000000000000 R09: 0000000000000000 [ 897.582653][ T4406] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 897.582664][ T4406] R13: 00007f25d2216038 R14: 00007f25d2215fa0 R15: 00007fff99e3f498 [ 897.582693][ T4406] [ 897.603934][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 897.793111][T32735] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 897.920451][T32735] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 898.123694][ T4417] netlink: 'syz.4.8165': attribute type 3 has an invalid length. [ 898.204550][ T4417] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8165'. [ 898.363843][ T4421] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8166'. [ 898.439442][ T4421] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8166'. [ 898.646383][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 899.109058][ T4439] FAULT_INJECTION: forcing a failure. [ 899.109058][ T4439] name failslab, interval 1, probability 0, space 0, times 0 [ 899.164807][ T4439] CPU: 1 UID: 0 PID: 4439 Comm: syz.4.8174 Not tainted syzkaller #0 PREEMPT(full) [ 899.164835][ T4439] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 899.164847][ T4439] Call Trace: [ 899.164855][ T4439] [ 899.164864][ T4439] dump_stack_lvl+0xe8/0x150 [ 899.164891][ T4439] should_fail_ex+0x412/0x560 [ 899.164917][ T4439] should_failslab+0xa8/0x100 [ 899.164938][ T4439] __kvmalloc_node_noprof+0x178/0x8a0 [ 899.164964][ T4439] ? page_pool_create_percpu+0x304/0xc80 [ 899.164991][ T4439] ? page_pool_create_percpu+0xaf/0xc80 [ 899.165020][ T4439] page_pool_create_percpu+0x304/0xc80 [ 899.165052][ T4439] bpf_test_run_xdp_live+0x23d/0x1cf0 [ 899.165076][ T4439] ? handle_mm_fault+0x245d/0x3170 [ 899.165127][ T4439] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 899.165149][ T4439] ? __up_read+0x291/0x6b0 [ 899.165192][ T4439] ? do_user_addr_fault+0xc6f/0x1340 [ 899.165217][ T4439] ? irqentry_exit+0x218/0x8b0 [ 899.165241][ T4439] ? lockdep_hardirqs_on+0x7a/0x110 [ 899.165260][ T4439] ? irqentry_exit+0x218/0x8b0 [ 899.165284][ T4439] ? trace_irq_disable+0x3b/0x140 [ 899.165319][ T4439] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 899.165348][ T4439] ? rep_movs_alternative+0x4a/0x90 [ 899.165373][ T4439] ? _copy_from_user+0x94/0xb0 [ 899.165394][ T4439] ? bpf_test_init+0x113/0x150 [ 899.165413][ T4439] ? xdp_convert_md_to_buff+0x5b/0x330 [ 899.165437][ T4439] bpf_prog_test_run_xdp+0x81c/0x1160 [ 899.165475][ T4439] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 899.165501][ T4439] ? __fget_files+0x2a/0x420 [ 899.165529][ T4439] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 899.165551][ T4439] bpf_prog_test_run+0x2c7/0x340 [ 899.165573][ T4439] __sys_bpf+0x643/0x950 [ 899.165601][ T4439] ? __pfx___sys_bpf+0x10/0x10 [ 899.165641][ T4439] ? ksys_write+0x242/0x270 [ 899.165668][ T4439] ? __pfx_ksys_write+0x10/0x10 [ 899.165697][ T4439] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 899.165717][ T4439] __x64_sys_bpf+0x7c/0x90 [ 899.165741][ T4439] do_syscall_64+0x174/0x580 [ 899.165760][ T4439] ? trace_irq_disable+0x3b/0x140 [ 899.165784][ T4439] ? clear_bhb_loop+0x40/0x90 [ 899.165806][ T4439] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 899.165824][ T4439] RIP: 0033:0x7f141979ce59 [ 899.165842][ T4439] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 899.165857][ T4439] RSP: 002b:00007f141a5e0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 899.165877][ T4439] RAX: ffffffffffffffda RBX: 00007f1419a15fa0 RCX: 00007f141979ce59 [ 899.165891][ T4439] RDX: 0000000000000050 RSI: 0000200000000000 RDI: 000000000000000a [ 899.165903][ T4439] RBP: 00007f141a5e0090 R08: 0000000000000000 R09: 0000000000000000 [ 899.165914][ T4439] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 899.165925][ T4439] R13: 00007f1419a16038 R14: 00007f1419a15fa0 R15: 00007ffc93d4c338 [ 899.165955][ T4439] [ 899.236413][ T4439] page_pool_create_percpu() gave up with errno -12 [ 899.422923][ T4449] netlink: 'syz.0.8177': attribute type 3 has an invalid length. [ 899.506208][ T4449] netlink: 'syz.0.8177': attribute type 3 has an invalid length. [ 899.854141][ T4472] lo speed is unknown, defaulting to 1000 [ 899.863917][ T4472] lo speed is unknown, defaulting to 1000 [ 899.928680][ T4473] __nla_validate_parse: 5 callbacks suppressed [ 899.928699][ T4473] netlink: 56 bytes leftover after parsing attributes in process `syz.2.8183'. [ 900.504936][ T4499] netlink: 'syz.3.8194': attribute type 11 has an invalid length. [ 900.513836][ T4499] netlink: 199828 bytes leftover after parsing attributes in process `syz.3.8194'. [ 900.525835][ T4497] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8184'. [ 901.756396][ C0] net_ratelimit: 16 callbacks suppressed [ 901.756417][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 901.786541][ T9532] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 901.801821][ T9532] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 902.326590][T32290] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 902.342058][T32290] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 902.796404][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 902.866584][ T1141] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 902.882195][ T1141] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 903.235150][ T4472] macsec0 speed is unknown, defaulting to 1000 [ 903.253042][ T4472] lo speed is unknown, defaulting to 1000 [ 903.407287][T32290] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 903.421760][T32290] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 903.519743][ T4517] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8200'. [ 903.820483][ T4525] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8204'. [ 903.985844][ T4529] netlink: 'syz.3.8197': attribute type 8 has an invalid length. [ 904.153857][ T4544] netlink: 40 bytes leftover after parsing attributes in process `syz.0.8207'. [ 904.169569][ T4545] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.8208'. [ 904.650739][ T4556] lo speed is unknown, defaulting to 1000 [ 904.664274][ T4556] lo speed is unknown, defaulting to 1000 [ 905.059396][ T4584] netlink: 92 bytes leftover after parsing attributes in process `syz.0.8223'. [ 905.094580][ T4584] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8223'. [ 905.223539][ T4556] macsec0 speed is unknown, defaulting to 1000 [ 905.262976][ T4556] lo speed is unknown, defaulting to 1000 [ 905.270575][ T4599] xt_hashlimit: size too large, truncated to 1048576 [ 905.274009][ T4587] lo speed is unknown, defaulting to 1000 [ 905.586871][ T4587] lo speed is unknown, defaulting to 1000 [ 905.593758][ T4607] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 905.741201][ T4615] FAULT_INJECTION: forcing a failure. [ 905.741201][ T4615] name failslab, interval 1, probability 0, space 0, times 0 [ 905.766868][ T4615] CPU: 1 UID: 0 PID: 4615 Comm: syz.4.8231 Not tainted syzkaller #0 PREEMPT(full) [ 905.766895][ T4615] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 905.766907][ T4615] Call Trace: [ 905.766916][ T4615] [ 905.766924][ T4615] dump_stack_lvl+0xe8/0x150 [ 905.766951][ T4615] should_fail_ex+0x412/0x560 [ 905.766981][ T4615] should_failslab+0xa8/0x100 [ 905.767002][ T4615] __kmalloc_cache_noprof+0x88/0x660 [ 905.767026][ T4615] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 905.767046][ T4615] ? __xdp_reg_mem_model+0x1e3/0x5d0 [ 905.767072][ T4615] __xdp_reg_mem_model+0x1e3/0x5d0 [ 905.767097][ T4615] ? __pfx___xdp_reg_mem_model+0x10/0x10 [ 905.767116][ T4615] ? page_pool_list+0x20f/0x250 [ 905.767135][ T4615] ? page_pool_create_percpu+0x87b/0xc80 [ 905.767161][ T4615] xdp_reg_mem_model+0x22/0x40 [ 905.767182][ T4615] bpf_test_run_xdp_live+0x295/0x1cf0 [ 905.767204][ T4615] ? handle_mm_fault+0x245d/0x3170 [ 905.767250][ T4615] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 905.767272][ T4615] ? __up_read+0x291/0x6b0 [ 905.767313][ T4615] ? do_user_addr_fault+0xc6f/0x1340 [ 905.767336][ T4615] ? irqentry_exit+0x218/0x8b0 [ 905.767356][ T4615] ? lockdep_hardirqs_on+0x7a/0x110 [ 905.767376][ T4615] ? irqentry_exit+0x218/0x8b0 [ 905.767393][ T4615] ? trace_irq_disable+0x3b/0x140 [ 905.767429][ T4615] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 905.767457][ T4615] ? rep_movs_alternative+0x4a/0x90 [ 905.767483][ T4615] ? _copy_from_user+0x94/0xb0 [ 905.767505][ T4615] ? bpf_test_init+0x113/0x150 [ 905.767524][ T4615] ? xdp_convert_md_to_buff+0x5b/0x330 [ 905.767548][ T4615] bpf_prog_test_run_xdp+0x81c/0x1160 [ 905.767591][ T4615] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 905.767618][ T4615] ? __fget_files+0x2a/0x420 [ 905.767645][ T4615] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 905.767669][ T4615] bpf_prog_test_run+0x2c7/0x340 [ 905.767691][ T4615] __sys_bpf+0x643/0x950 [ 905.767719][ T4615] ? __pfx___sys_bpf+0x10/0x10 [ 905.767765][ T4615] ? rcu_is_watching+0x15/0xb0 [ 905.767792][ T4615] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 905.767812][ T4615] __x64_sys_bpf+0x7c/0x90 [ 905.767837][ T4615] do_syscall_64+0x174/0x580 [ 905.767857][ T4615] ? trace_irq_disable+0x3b/0x140 [ 905.767882][ T4615] ? clear_bhb_loop+0x40/0x90 [ 905.767904][ T4615] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 905.767922][ T4615] RIP: 0033:0x7f141979ce59 [ 905.767940][ T4615] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 905.767955][ T4615] RSP: 002b:00007f141a5e0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 905.767976][ T4615] RAX: ffffffffffffffda RBX: 00007f1419a15fa0 RCX: 00007f141979ce59 [ 905.767989][ T4615] RDX: 0000000000000050 RSI: 0000200000000000 RDI: 000000000000000a [ 905.768001][ T4615] RBP: 00007f141a5e0090 R08: 0000000000000000 R09: 0000000000000000 [ 905.768012][ T4615] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 905.768023][ T4615] R13: 00007f1419a16038 R14: 00007f1419a15fa0 R15: 00007ffc93d4c338 [ 905.768054][ T4615] [ 906.286849][ T4621] netlink: 'syz.4.8232': attribute type 1 has an invalid length. [ 906.294803][ T4621] netlink: 'syz.4.8232': attribute type 1 has an invalid length. [ 906.479432][ T4623] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 906.510567][ T4623] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 906.605015][ T4587] macsec0 speed is unknown, defaulting to 1000 [ 906.654325][ T4587] lo speed is unknown, defaulting to 1000 [ 906.956498][ C0] net_ratelimit: 17 callbacks suppressed [ 906.956518][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 907.138415][ T5969] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 907.152939][ T5969] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 907.273672][ T4647] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8241'. [ 907.293674][ T4649] FAULT_INJECTION: forcing a failure. [ 907.293674][ T4649] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 907.310746][ T4649] CPU: 1 UID: 0 PID: 4649 Comm: syz.0.8242 Not tainted syzkaller #0 PREEMPT(full) [ 907.310768][ T4649] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 907.310777][ T4649] Call Trace: [ 907.310783][ T4649] [ 907.310789][ T4649] dump_stack_lvl+0xe8/0x150 [ 907.310811][ T4649] should_fail_ex+0x412/0x560 [ 907.310833][ T4649] _copy_to_user+0x31/0xb0 [ 907.310858][ T4649] bpf_test_finish+0x53c/0x6b0 [ 907.310886][ T4649] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 907.310908][ T4649] ? __pfx_bpf_test_finish+0x10/0x10 [ 907.310928][ T4649] ? rep_movs_alternative+0x4a/0x90 [ 907.310953][ T4649] ? _copy_from_user+0x94/0xb0 [ 907.310973][ T4649] ? bpf_test_init+0x113/0x150 [ 907.310993][ T4649] bpf_prog_test_run_xdp+0x8fa/0x1160 [ 907.311029][ T4649] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 907.311052][ T4649] ? __fget_files+0x2a/0x420 [ 907.311076][ T4649] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 907.311095][ T4649] bpf_prog_test_run+0x2c7/0x340 [ 907.311115][ T4649] __sys_bpf+0x643/0x950 [ 907.311137][ T4649] ? __pfx___sys_bpf+0x10/0x10 [ 907.311168][ T4649] ? ksys_write+0x242/0x270 [ 907.311189][ T4649] ? __pfx_ksys_write+0x10/0x10 [ 907.311214][ T4649] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 907.311234][ T4649] __x64_sys_bpf+0x7c/0x90 [ 907.311268][ T4649] do_syscall_64+0x174/0x580 [ 907.311285][ T4649] ? trace_irq_disable+0x3b/0x140 [ 907.311310][ T4649] ? clear_bhb_loop+0x40/0x90 [ 907.311333][ T4649] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 907.311350][ T4649] RIP: 0033:0x7f7c9779ce59 [ 907.311368][ T4649] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 907.311383][ T4649] RSP: 002b:00007f7c98663028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 907.311402][ T4649] RAX: ffffffffffffffda RBX: 00007f7c97a15fa0 RCX: 00007f7c9779ce59 [ 907.311416][ T4649] RDX: 0000000000000050 RSI: 0000200000000000 RDI: 000000000000000a [ 907.311428][ T4649] RBP: 00007f7c98663090 R08: 0000000000000000 R09: 0000000000000000 [ 907.311439][ T4649] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 907.311450][ T4649] R13: 00007f7c97a16038 R14: 00007f7c97a15fa0 R15: 00007ffd9ce6b9e8 [ 907.311480][ T4649] [ 907.697997][T32290] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 907.712438][T32290] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 908.006385][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 908.080815][ T4675] netlink: 16399 bytes leftover after parsing attributes in process `syz.1.8251'. [ 908.121400][ T4675] netlink: 16399 bytes leftover after parsing attributes in process `syz.1.8251'. [ 908.265109][ T4676] lo speed is unknown, defaulting to 1000 [ 908.278420][ T4676] lo speed is unknown, defaulting to 1000 [ 908.288713][ T4687] FAULT_INJECTION: forcing a failure. [ 908.288713][ T4687] name failslab, interval 1, probability 0, space 0, times 0 [ 908.302510][ T4687] CPU: 1 UID: 0 PID: 4687 Comm: syz.0.8254 Not tainted syzkaller #0 PREEMPT(full) [ 908.302534][ T4687] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 908.302546][ T4687] Call Trace: [ 908.302555][ T4687] [ 908.302563][ T4687] dump_stack_lvl+0xe8/0x150 [ 908.302591][ T4687] should_fail_ex+0x412/0x560 [ 908.302616][ T4687] should_failslab+0xa8/0x100 [ 908.302634][ T4687] ? __kernfs_new_node+0xea/0x970 [ 908.302658][ T4687] kmem_cache_alloc_noprof+0x87/0x650 [ 908.302691][ T4687] __kernfs_new_node+0xea/0x970 [ 908.302720][ T4687] ? __pfx___kernfs_new_node+0x10/0x10 [ 908.302745][ T4687] ? kernfs_root+0x1c/0x230 [ 908.302774][ T4687] ? kernfs_root+0x1c/0x230 [ 908.302796][ T4687] ? kernfs_root+0x1c/0x230 [ 908.302816][ T4687] ? kernfs_root+0x1c/0x230 [ 908.302843][ T4687] kernfs_new_node+0x102/0x210 [ 908.302872][ T4687] __kernfs_create_file+0x4b/0x2e0 [ 908.302895][ T4687] sysfs_add_file_mode_ns+0x238/0x300 [ 908.302924][ T4687] internal_create_group+0x673/0x1190 [ 908.302964][ T4687] ? __pfx_internal_create_group+0x10/0x10 [ 908.302985][ T4687] ? kernfs_add_one+0x477/0x5c0 [ 908.303013][ T4687] ? up_write+0x1ab/0x410 [ 908.303044][ T4687] sysfs_create_groups+0x59/0x120 [ 908.303071][ T4687] device_add_attrs+0x1bf/0x5b0 [ 908.303100][ T4687] ? __pfx_device_add_attrs+0x10/0x10 [ 908.303131][ T4687] ? kobject_put+0x516/0x560 [ 908.303160][ T4687] ? device_add_class_symlinks+0x21f/0x240 [ 908.303190][ T4687] device_add+0x496/0xbb0 [ 908.303214][ T4687] ? device_initialize+0x26a/0x460 [ 908.303243][ T4687] wakeup_source_sysfs_add+0x1d3/0x2c0 [ 908.303268][ T4687] wakeup_source_register+0x18a/0x380 [ 908.303299][ T4687] ep_insert+0xf34/0x1a40 [ 908.303339][ T4687] ? __pfx_ep_insert+0x10/0x10 [ 908.303375][ T4687] ? bpf_lsm_capable+0x9/0x20 [ 908.303403][ T4687] do_epoll_ctl+0x7f4/0xe80 [ 908.303436][ T4687] __x64_sys_epoll_ctl+0x165/0x1b0 [ 908.303464][ T4687] ? __pfx___x64_sys_epoll_ctl+0x10/0x10 [ 908.303497][ T4687] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 908.303518][ T4687] do_syscall_64+0x174/0x580 [ 908.303536][ T4687] ? trace_irq_disable+0x3b/0x140 [ 908.303562][ T4687] ? clear_bhb_loop+0x40/0x90 [ 908.303592][ T4687] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 908.303610][ T4687] RIP: 0033:0x7f7c9779ce59 [ 908.303628][ T4687] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 908.303644][ T4687] RSP: 002b:00007f7c98663028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 908.303663][ T4687] RAX: ffffffffffffffda RBX: 00007f7c97a15fa0 RCX: 00007f7c9779ce59 [ 908.303677][ T4687] RDX: 0000000000000004 RSI: 0000000000000001 RDI: 0000000000000003 [ 908.303688][ T4687] RBP: 00007f7c98663090 R08: 0000000000000000 R09: 0000000000000000 [ 908.303700][ T4687] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000002 [ 908.303712][ T4687] R13: 00007f7c97a16038 R14: 00007f7c97a15fa0 R15: 00007ffd9ce6b9e8 [ 908.303744][ T4687] [ 908.369049][T32290] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 908.623896][T32290] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 908.834727][ T4703] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8257'. [ 908.976011][ T4676] macsec0 speed is unknown, defaulting to 1000 [ 909.022507][ T4676] lo speed is unknown, defaulting to 1000 [ 909.037220][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 909.137479][ T4718] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8261'. [ 909.149921][ T4718] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8261'. [ 909.229950][T32290] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 909.409283][ T4727] bond7: entered allmulticast mode [ 909.438844][ T4732] macvlan0: entered promiscuous mode [ 909.444337][ T4732] macvlan0: entered allmulticast mode [ 909.451546][ T4732] bond7: entered promiscuous mode [ 909.457919][ T4732] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 909.478714][ T4732] bond7: left promiscuous mode [ 909.641269][ T4729] syzkaller0: entered promiscuous mode [ 909.647447][ T4729] syzkaller0: entered allmulticast mode [ 909.655014][ T4743] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8268'. [ 909.757733][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 909.773288][ T4749] netlink: 152 bytes leftover after parsing attributes in process `syz.0.8270'. [ 912.176412][ C0] net_ratelimit: 13 callbacks suppressed [ 912.176433][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 912.318184][T12429] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 912.333737][T12429] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 912.877419][T12429] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 912.892501][T12429] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 913.216475][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 913.427530][T32290] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 913.442014][T32290] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 913.544237][ T4759] mac80211_hwsim hwsim95 »»»»»»: renamed from wlan0 [ 913.693432][ T4781] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 913.709140][ T4779] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 913.845815][ T4795] FAULT_INJECTION: forcing a failure. [ 913.845815][ T4795] name failslab, interval 1, probability 0, space 0, times 0 [ 913.865057][ T4795] CPU: 0 UID: 0 PID: 4795 Comm: syz.3.8283 Not tainted syzkaller #0 PREEMPT(full) [ 913.865085][ T4795] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 913.865097][ T4795] Call Trace: [ 913.865105][ T4795] [ 913.865114][ T4795] dump_stack_lvl+0xe8/0x150 [ 913.865142][ T4795] should_fail_ex+0x412/0x560 [ 913.865168][ T4795] should_failslab+0xa8/0x100 [ 913.865187][ T4795] ? __kernfs_new_node+0xea/0x970 [ 913.865211][ T4795] kmem_cache_alloc_noprof+0x87/0x650 [ 913.865244][ T4795] __kernfs_new_node+0xea/0x970 [ 913.865275][ T4795] ? __pfx___kernfs_new_node+0x10/0x10 [ 913.865299][ T4795] ? kernfs_root+0x1c/0x230 [ 913.865328][ T4795] ? kernfs_root+0x1c/0x230 [ 913.865349][ T4795] ? kernfs_root+0x1c/0x230 [ 913.865369][ T4795] ? kernfs_root+0x1c/0x230 [ 913.865396][ T4795] kernfs_new_node+0x102/0x210 [ 913.865426][ T4795] __kernfs_create_file+0x4b/0x2e0 [ 913.865448][ T4795] sysfs_add_file_mode_ns+0x238/0x300 [ 913.865477][ T4795] internal_create_group+0x673/0x1190 [ 913.865518][ T4795] ? __pfx_internal_create_group+0x10/0x10 [ 913.865539][ T4795] ? kernfs_add_one+0x477/0x5c0 [ 913.865574][ T4795] ? up_write+0x1ab/0x410 [ 913.865601][ T4795] sysfs_create_groups+0x59/0x120 [ 913.865628][ T4795] device_add_attrs+0x1bf/0x5b0 [ 913.865663][ T4795] ? __pfx_device_add_attrs+0x10/0x10 [ 913.865687][ T4795] ? kobject_put+0x516/0x560 [ 913.865715][ T4795] ? device_add_class_symlinks+0x21f/0x240 [ 913.865745][ T4795] device_add+0x496/0xbb0 [ 913.865770][ T4795] ? device_initialize+0x26a/0x460 [ 913.865799][ T4795] wakeup_source_sysfs_add+0x1d3/0x2c0 [ 913.865823][ T4795] wakeup_source_register+0x18a/0x380 [ 913.865855][ T4795] ep_insert+0xf34/0x1a40 [ 913.865894][ T4795] ? __pfx_ep_insert+0x10/0x10 [ 913.865935][ T4795] ? bpf_lsm_capable+0x9/0x20 [ 913.865963][ T4795] do_epoll_ctl+0x7f4/0xe80 [ 913.865996][ T4795] __x64_sys_epoll_ctl+0x165/0x1b0 [ 913.866023][ T4795] ? __pfx___x64_sys_epoll_ctl+0x10/0x10 [ 913.866053][ T4795] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 913.866072][ T4795] do_syscall_64+0x174/0x580 [ 913.866090][ T4795] ? trace_irq_disable+0x3b/0x140 [ 913.866116][ T4795] ? clear_bhb_loop+0x40/0x90 [ 913.866138][ T4795] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 913.866156][ T4795] RIP: 0033:0x7f25d1f9ce59 [ 913.866176][ T4795] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 913.866191][ T4795] RSP: 002b:00007f25d2ed7028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 913.866215][ T4795] RAX: ffffffffffffffda RBX: 00007f25d2215fa0 RCX: 00007f25d1f9ce59 [ 913.866229][ T4795] RDX: 0000000000000004 RSI: 0000000000000001 RDI: 0000000000000003 [ 913.866243][ T4795] RBP: 00007f25d2ed7090 R08: 0000000000000000 R09: 0000000000000000 [ 913.866253][ T4795] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000002 [ 913.866262][ T4795] R13: 00007f25d2216038 R14: 00007f25d2215fa0 R15: 00007fff99e3f498 [ 913.866290][ T4795] [ 914.169514][T32290] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 914.183849][T32290] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 914.690019][ T4821] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8287'. [ 914.884819][ T4831] syzkaller1: entered promiscuous mode [ 914.907595][ T4831] syzkaller1: entered allmulticast mode [ 915.027865][ T4836] syzkaller0: entered promiscuous mode [ 915.033842][ T4836] syzkaller0: entered allmulticast mode [ 915.112033][ T4839] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8293'. [ 915.195506][ T4841] xt_CT: No such helper "snmp" [ 915.592563][ T4869] 8021q: VLANs not supported on ip6gre0 [ 915.880468][ T4881] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 915.884397][ T4885] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8305'. [ 915.904487][ T4886] x_tables: duplicate underflow at hook 2 [ 915.983803][T12429] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 916.062165][ T4886] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 916.098328][ T4892] netlink: 'syz.0.8310': attribute type 1 has an invalid length. [ 916.196007][ T4892] 8021q: adding VLAN 0 to HW filter on device bond8 [ 916.212565][ T4897] netlink: 'syz.4.8311': attribute type 62 has an invalid length. [ 916.280923][ T4898] bond8: (slave veth5): Enslaving as an active interface with a down link [ 916.344999][ T4892] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 916.366773][ T4892] bond8: (slave batadv1): making interface the new active one [ 916.375729][ T4906] netlink: 'syz.4.8312': attribute type 1 has an invalid length. [ 916.389714][ T4892] batadv1: entered promiscuous mode [ 916.395707][ T4892] bond8: (slave batadv1): Enslaving as an active interface with an up link [ 916.569137][ T4886] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 916.641102][ T4906] 8021q: adding VLAN 0 to HW filter on device bond8 [ 916.852098][ T4886] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 917.119820][ T4886] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 917.153935][ T4947] netlink: 'syz.0.8318': attribute type 61 has an invalid length. [ 917.180729][ T4947] netlink: 'syz.0.8318': attribute type 105 has an invalid length. [ 917.256706][ T9532] net_ratelimit: 17 callbacks suppressed [ 917.256726][ T9532] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 917.277803][ T9532] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 917.366530][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 917.470699][ T4970] netlink: 'syz.1.8322': attribute type 1 has an invalid length. [ 917.559079][ T4970] bond5: entered promiscuous mode [ 917.564641][ T4970] bond5: entered allmulticast mode [ 917.570998][ T4970] 8021q: adding VLAN 0 to HW filter on device bond5 [ 917.600311][ T4980] netlink: 40 bytes leftover after parsing attributes in process `syz.2.8323'. [ 917.616844][T12429] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 917.704125][ T4991] netlink: 48 bytes leftover after parsing attributes in process `syz.1.8326'. [ 917.743713][ T9532] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 917.811636][T12429] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 917.823320][ T4996] netlink: 'syz.4.8328': attribute type 21 has an invalid length. [ 917.834061][ T4996] netlink: 164 bytes leftover after parsing attributes in process `syz.4.8328'. [ 917.839807][T12429] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 917.852354][ T9532] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 917.867513][ T9532] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 918.081802][ T5012] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8332'. [ 918.092185][ T5011] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8333'. [ 918.146872][ T5014] veth0: entered allmulticast mode [ 918.217922][ T5012] §: renamed from sit0 (while UP) [ 918.380904][ T5027] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8337'. [ 918.390820][ T9532] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 918.405795][ T9532] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 918.407788][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 918.742314][ T5052] A link change request failed with some changes committed already. Interface veth1_vlan may have been left with an inconsistent configuration, please check. [ 918.821351][ T5058] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8347'. [ 918.936812][T12429] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 918.986222][ T5070] netlink: 'syz.1.8349': attribute type 1 has an invalid length. [ 919.007659][ T5070] netlink: 'syz.1.8349': attribute type 2 has an invalid length. [ 919.404616][ T5089] wg2: Caught tx_queue_len zero misconfig [ 919.508924][ T5094] bond0: (slave ip6tnl0): refused to change device type [ 919.552730][ T5094] ip6erspan1: entered allmulticast mode [ 919.819333][ T5103] netlink: 'syz.1.8360': attribute type 1 has an invalid length. [ 919.828984][ T5103] __nla_validate_parse: 1 callbacks suppressed [ 919.829001][ T5103] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8360'. [ 920.327795][ T5114] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8362'. [ 920.397003][ T5114] netlink: 40 bytes leftover after parsing attributes in process `syz.1.8362'. [ 920.955919][ T5140] netlink: 132 bytes leftover after parsing attributes in process `syz.3.8368'. [ 921.128044][ T5149] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8372'. [ 921.506071][ T5163] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 921.521403][ T5163] syzkaller1: linktype set to 776 [ 921.556108][ T5166] netlink: 56 bytes leftover after parsing attributes in process `syz.3.8377'. [ 921.586530][ T5166] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8377'. [ 921.641316][ T5166] syzkaller0: entered promiscuous mode [ 921.657102][ T5166] syzkaller0: entered allmulticast mode [ 921.694410][ T5166] tipc: Enabled bearer , priority 0 [ 921.708210][ T5166] netlink: 112 bytes leftover after parsing attributes in process `syz.3.8377'. [ 921.744213][ T5165] tipc: Resetting bearer [ 921.764926][ T5173] sctp: [Deprecated]: syz.4.8379 (pid 5173) Use of int in max_burst socket option. [ 921.764926][ T5173] Use struct sctp_assoc_value instead [ 921.815092][ T5165] tipc: Disabling bearer [ 922.556525][ C0] net_ratelimit: 16 callbacks suppressed [ 922.556546][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 922.582974][T32290] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 922.598375][T32290] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 922.697942][ T5219] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.8392'. [ 922.704856][ T5207] pimreg: entered allmulticast mode [ 922.847343][ T5223] sctp: [Deprecated]: syz.1.8393 (pid 5223) Use of int in max_burst socket option. [ 922.847343][ T5223] Use struct sctp_assoc_value instead [ 922.887369][ T5228] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8395'. [ 922.911944][ T5228] validate_nla: 2 callbacks suppressed [ 922.911961][ T5228] netlink: 'syz.3.8395': attribute type 1 has an invalid length. [ 922.935907][ T5227] lo speed is unknown, defaulting to 1000 [ 923.038992][ T5228] 8021q: adding VLAN 0 to HW filter on device bond11 [ 923.047093][ T5227] lo speed is unknown, defaulting to 1000 [ 923.127519][ T9532] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 923.143669][ T9532] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 923.346845][ T5249] netlink: 'syz.4.8401': attribute type 18 has an invalid length. [ 923.499739][ T5260] bond12: entered promiscuous mode [ 923.516969][ T5260] 8021q: adding VLAN 0 to HW filter on device bond12 [ 923.576591][ T5249] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 923.602149][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 923.614101][ T5267] xt_TPROXY: Can be used only with -p tcp or -p udp [ 923.663310][ T5263] bond0: (slave syz_tun): Releasing backup interface [ 923.736908][T32290] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 923.751327][T32290] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 923.786063][ T5264] 8021q: adding VLAN 0 to HW filter on device macvlan1 [ 923.804946][ T5268] netlink: 'syz.2.8404': attribute type 2 has an invalid length. [ 923.860155][ T5227] macsec0 speed is unknown, defaulting to 1000 [ 923.873241][ T5275] openvswitch: netlink: IP tunnel dst address not specified [ 923.874888][ T5227] lo speed is unknown, defaulting to 1000 [ 924.106878][ T5288] netlink: 'syz.3.8411': attribute type 2 has an invalid length. [ 924.326569][ T5969] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 924.684445][ T5312] netlink: 'syz.0.8414': attribute type 4 has an invalid length. [ 924.772572][ T5316] netlink: 'syz.0.8414': attribute type 4 has an invalid length. [ 924.913366][ T5311] __nla_validate_parse: 38 callbacks suppressed [ 924.913390][ T5311] netlink: 40 bytes leftover after parsing attributes in process `syz.0.8414'. [ 925.055134][ T5326] sctp: [Deprecated]: syz.4.8416 (pid 5326) Use of int in max_burst socket option. [ 925.055134][ T5326] Use struct sctp_assoc_value instead [ 925.557057][ T5337] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8417'. [ 925.822154][ T5345] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8420'. [ 925.872263][ T5351] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8419'. [ 925.894197][ T5345] netlink: 20 bytes leftover after parsing attributes in process `syz.3.8420'. [ 926.151793][ T5368] sctp: [Deprecated]: syz.3.8426 (pid 5368) Use of struct sctp_assoc_value in delayed_ack socket option. [ 926.151793][ T5368] Use struct sctp_sack_info instead [ 926.171721][ T5371] netlink: 20 bytes leftover after parsing attributes in process `syz.4.8425'. [ 926.271081][ T5373] netlink: 20 bytes leftover after parsing attributes in process `syz.4.8427'. [ 927.759248][ C0] net_ratelimit: 193 callbacks suppressed [ 927.759262][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 927.958146][ T5969] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 927.973265][ T5969] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 928.507076][ T9531] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 928.521745][ T9531] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 928.804089][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 929.047575][ T9531] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 929.062064][ T9531] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 929.589612][ T1141] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 929.604211][ T1141] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 930.057670][T32738] batadv1: left promiscuous mode [ 930.205446][ T5383] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8429'. [ 930.231313][ T5383] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8429'. [ 930.256640][ T5383] netlink: 'syz.3.8429': attribute type 18 has an invalid length. [ 930.781833][ T5434] netlink: 'syz.3.8441': attribute type 1 has an invalid length. [ 930.808695][ T5434] workqueue: Failed to create a rescuer kthread for wq "bond13": -EINTR [ 930.813454][ T5443] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8443'. [ 931.544204][ T5473] netlink: 7 bytes leftover after parsing attributes in process `syz.1.8451'. [ 931.573929][ T5473] netlink: 'syz.1.8451': attribute type 1 has an invalid length. [ 931.604967][ T5473] netlink: 'syz.1.8451': attribute type 2 has an invalid length. [ 931.967963][ T5493] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 932.047934][ T5498] netlink: 76 bytes leftover after parsing attributes in process `syz.1.8459'. [ 932.335598][ T5511] block nbd11: Unsupported socket: should be TCP or UNIX. [ 932.381168][ T5511] block nbd12: Unsupported socket: should be TCP or UNIX. [ 932.812172][ T5529] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8468'. [ 932.952963][ T5535] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8469'. [ 932.966429][ C0] net_ratelimit: 17 callbacks suppressed [ 932.966450][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 932.994612][ T5540] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 933.127982][ T5544] sctp: [Deprecated]: syz.4.8472 (pid 5544) Use of int in max_burst socket option. [ 933.127982][ T5544] Use struct sctp_assoc_value instead [ 933.207555][ T9532] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 933.222386][ T9532] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 933.286623][ T5549] netlink: 204 bytes leftover after parsing attributes in process `syz.3.8473'. [ 933.315761][ T5552] netlink: 84 bytes leftover after parsing attributes in process `syz.3.8473'. [ 933.751281][ T5566] IPVS: nq: FWM 3 0x00000003 - no destination available [ 933.776695][ T5567] IPVS: nq: FWM 3 0x00000003 - no destination available [ 933.798373][T32290] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 933.812965][T32290] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 933.837557][ T5568] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8478'. [ 934.006460][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 934.336763][T32738] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 934.351815][T32738] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 934.800271][ T5587] 8021q: adding VLAN 0 to HW filter on device bond10 [ 934.842859][ T5601] netlink: 'syz.4.8487': attribute type 12 has an invalid length. [ 935.663876][ T5642] __nla_validate_parse: 4 callbacks suppressed [ 935.663900][ T5642] netlink: 96 bytes leftover after parsing attributes in process `syz.3.8495'. [ 935.960009][ T5650] netlink: 1036 bytes leftover after parsing attributes in process `syz.1.8499'. [ 936.195137][ T5658] netlink: 'syz.2.8498': attribute type 5 has an invalid length. [ 936.540900][ T5667] 8021q: adding VLAN 0 to HW filter on device bond0 [ 936.568447][ T5667] 8021q: adding VLAN 0 to HW filter on device team0 [ 936.576692][ T5670] netlink: 67 bytes leftover after parsing attributes in process `syz.1.8502'. [ 936.607109][ T5667] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 936.798476][ T5667] veth1_vlan: left promiscuous mode [ 936.819385][ T5667] veth0_vlan: left promiscuous mode [ 936.844147][ T5667] veth0_vlan: entered promiscuous mode [ 936.859642][ T5682] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8506'. [ 936.866184][ T5667] veth1_vlan: entered promiscuous mode [ 936.892999][ T5667] veth1_macvtap: left promiscuous mode [ 936.909121][ T5667] veth0_macvtap: left promiscuous mode [ 936.921452][ T5683] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8506'. [ 936.927850][ T5667] veth0_macvtap: entered promiscuous mode [ 936.947987][ T5667] veth1_macvtap: entered promiscuous mode [ 936.970461][ T5667] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 936.981118][ T5667] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 936.992675][ T5667] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 937.002051][ T5667] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 937.236014][ T5691] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8508'. [ 937.258580][ T5691] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8508'. [ 937.406921][ T5696] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8508'. [ 937.987663][ T5969] net_ratelimit: 18 callbacks suppressed [ 937.987682][ T5969] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 938.009037][ T5969] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 938.166512][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 938.527169][ T5969] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 938.541798][ T5969] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 939.073860][ T5969] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 939.088758][ T5969] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 939.206595][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 939.607306][ T1141] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 939.621780][ T1141] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 939.912907][ T5698] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8512'. [ 939.987621][ T5705] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8514'. [ 940.013847][ T5703] lo speed is unknown, defaulting to 1000 [ 940.075341][ T5703] lo speed is unknown, defaulting to 1000 [ 940.188420][ T5720] syzkaller1: entered promiscuous mode [ 940.205000][ T5720] syzkaller1: entered allmulticast mode [ 940.473208][ T5743] netlink: 'syz.2.8520': attribute type 18 has an invalid length. [ 940.624704][ T5720] bridge0: port 1(bridge_slave_0) entered disabled state [ 941.070114][ T5736] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 941.088096][ T5736] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 941.239170][ T5720] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 941.303473][ T5720] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 941.599630][ T5720] veth0_macvtap: left allmulticast mode [ 941.689025][ T5720] bond3: left promiscuous mode [ 941.700502][ T5720] geneve2: left promiscuous mode [ 941.707073][ T5720] gretap1: left allmulticast mode [ 941.724015][ T5720] vlan6: left promiscuous mode [ 941.737651][ T5720] bond6: left promiscuous mode [ 941.743080][ T5720] veth13: left promiscuous mode [ 941.880721][ T5720] bridge7: left promiscuous mode [ 941.897856][ T5720] bridge7: left allmulticast mode [ 941.921902][ T5720] vlan7: left allmulticast mode [ 941.928811][ T5720] macvtap0: left allmulticast mode [ 941.961742][ T5720] bond12: left promiscuous mode [ 942.011148][ T5720] syzkaller1: left promiscuous mode [ 942.018513][ T5720] syzkaller1: left allmulticast mode [ 942.029947][T22779] lo speed is unknown, defaulting to 1000 [ 942.037178][T22779] syś2: Port: 1 Link DOWN [ 942.165026][ T5703] macsec0 speed is unknown, defaulting to 1000 [ 942.171714][ T5969] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 942.199691][ T5703] lo speed is unknown, defaulting to 1000 [ 942.199716][ T5969] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 942.239703][ T5969] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 942.314257][ T5969] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 942.337531][ T5792] __nla_validate_parse: 5 callbacks suppressed [ 942.337550][ T5792] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8527'. [ 942.415032][ T5788] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8525'. [ 942.574868][ T5804] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 942.947219][ T5816] netlink: 'syz.2.8534': attribute type 1 has an invalid length. [ 942.993346][ T5816] bond11: entered promiscuous mode [ 942.999917][ T5816] bond11: entered allmulticast mode [ 943.005762][ T5816] 8021q: adding VLAN 0 to HW filter on device bond11 [ 943.023223][ T5817] erspan2: entered allmulticast mode [ 943.039963][ T5817] bond11: (slave erspan2): making interface the new active one [ 943.049366][ T5817] erspan2: entered promiscuous mode [ 943.065874][ T5817] bond11: (slave erspan2): Enslaving as an active interface with an up link [ 943.192169][ T5826] xt_TPROXY: Can be used only with -p tcp or -p udp [ 943.216836][T32738] net_ratelimit: 17 callbacks suppressed [ 943.216852][T32738] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 943.237678][T32738] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 943.241509][ T5826] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8536'. [ 943.337250][ T5826] 8021q: adding VLAN 0 to HW filter on device bond12 [ 943.356538][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 943.370372][ T5828] bond12: option mode: unable to set because the bond device is up [ 943.619875][ T5847] netlink: 'syz.4.8543': attribute type 1 has an invalid length. [ 943.673315][ T5847] 8021q: adding VLAN 0 to HW filter on device bond9 [ 943.682487][ T5849] bond9: up delay (136) is not a multiple of miimon (100), value rounded to 100 ms [ 943.695212][ T5849] bond9: entered allmulticast mode [ 943.697337][ T5851] openvswitch: netlink: Duplicate or invalid key (type 0). [ 943.739332][ T5851] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 943.752057][ T5847] bond9: (slave ip6gretap1): Enslaving as an active interface with an up link [ 943.762110][ T9532] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 943.777593][ T9532] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 943.800243][ T5861] FAULT_INJECTION: forcing a failure. [ 943.800243][ T5861] name failslab, interval 1, probability 0, space 0, times 0 [ 943.813786][ T5862] netlink: 180 bytes leftover after parsing attributes in process `syz.2.8545'. [ 943.824946][ T5861] CPU: 1 UID: 0 PID: 5861 Comm: syz.1.8546 Not tainted syzkaller #0 PREEMPT(full) [ 943.824971][ T5861] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 943.824983][ T5861] Call Trace: [ 943.824991][ T5861] [ 943.825000][ T5861] dump_stack_lvl+0xe8/0x150 [ 943.825026][ T5861] should_fail_ex+0x412/0x560 [ 943.825051][ T5861] should_failslab+0xa8/0x100 [ 943.825070][ T5861] ? __kernfs_new_node+0xea/0x970 [ 943.825094][ T5861] kmem_cache_alloc_noprof+0x87/0x650 [ 943.825124][ T5861] __kernfs_new_node+0xea/0x970 [ 943.825145][ T5861] ? __lock_acquire+0x6b5/0x2cf0 [ 943.825166][ T5861] ? __pfx___kernfs_new_node+0x10/0x10 [ 943.825189][ T5861] ? kernfs_root+0x1c/0x230 [ 943.825218][ T5861] ? kernfs_root+0x1c/0x230 [ 943.825240][ T5861] ? kernfs_root+0x1c/0x230 [ 943.825260][ T5861] ? kernfs_root+0x1c/0x230 [ 943.825288][ T5861] kernfs_new_node+0x102/0x210 [ 943.825317][ T5861] kernfs_create_dir_ns+0x44/0x130 [ 943.825346][ T5861] sysfs_create_dir_ns+0x12f/0x2a0 [ 943.825373][ T5861] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 943.825398][ T5861] ? do_raw_spin_unlock+0xf5/0x210 [ 943.825427][ T5861] kobject_add_internal+0x62b/0xd00 [ 943.825458][ T5861] kobject_add+0x163/0x240 [ 943.825487][ T5861] ? __pfx_kobject_add+0x10/0x10 [ 943.825509][ T5861] ? do_raw_spin_unlock+0xf5/0x210 [ 943.825538][ T5861] ? get_device_parent+0x366/0x3a0 [ 943.825569][ T5861] device_add+0x408/0xbb0 [ 943.825600][ T5861] ? device_initialize+0x26a/0x460 [ 943.825628][ T5861] wakeup_source_sysfs_add+0x1d3/0x2c0 [ 943.825654][ T5861] wakeup_source_register+0x18a/0x380 [ 943.825686][ T5861] ep_insert+0x1022/0x1a40 [ 943.825726][ T5861] ? __pfx_ep_insert+0x10/0x10 [ 943.825763][ T5861] ? bpf_lsm_capable+0x9/0x20 [ 943.825790][ T5861] do_epoll_ctl+0x7f4/0xe80 [ 943.825826][ T5861] __x64_sys_epoll_ctl+0x165/0x1b0 [ 943.825855][ T5861] ? __pfx___x64_sys_epoll_ctl+0x10/0x10 [ 943.825888][ T5861] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 943.825909][ T5861] do_syscall_64+0x174/0x580 [ 943.825928][ T5861] ? trace_irq_disable+0x3b/0x140 [ 943.825954][ T5861] ? clear_bhb_loop+0x40/0x90 [ 943.825977][ T5861] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 943.825995][ T5861] RIP: 0033:0x7f6d22b9ce59 [ 943.826013][ T5861] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 943.826028][ T5861] RSP: 002b:00007f6d23985028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 943.826048][ T5861] RAX: ffffffffffffffda RBX: 00007f6d22e15fa0 RCX: 00007f6d22b9ce59 [ 943.826062][ T5861] RDX: 0000000000000004 RSI: 0000000000000001 RDI: 0000000000000003 [ 943.826073][ T5861] RBP: 00007f6d23985090 R08: 0000000000000000 R09: 0000000000000000 [ 943.826085][ T5861] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000002 [ 943.826096][ T5861] R13: 00007f6d22e16038 R14: 00007f6d22e15fa0 R15: 00007fff0148eca8 [ 943.826129][ T5861] [ 944.116301][ T5861] kobject: kobject_add_internal failed for wakeup14 (error: -12 parent: wakeup) [ 944.191636][ T5854] bond0: option ad_select: unable to set because the bond device is up [ 944.322268][ T5878] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 944.406371][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 944.517102][ T5889] netlink: 48 bytes leftover after parsing attributes in process `syz.2.8555'. [ 944.591711][ T5891] netlink: 'syz.1.8556': attribute type 21 has an invalid length. [ 944.595097][ T5890] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 944.612404][ T5891] netlink: 'syz.1.8556': attribute type 21 has an invalid length. [ 944.613383][ T5890] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 944.637874][ T1141] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 944.653201][ T1141] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 944.738526][ T5901] xt_hashlimit: size too large, truncated to 1048576 [ 944.836230][ T5890] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 944.883064][ T5890] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 945.009495][ T5890] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 945.021212][ T5890] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 945.172332][ T5890] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 945.204471][ T5890] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 945.413587][ T5917] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8561'. [ 945.465136][ T5917] netlink: 24 bytes leftover after parsing attributes in process `syz.4.8561'. [ 945.624499][T32735] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 945.653432][T32735] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 945.770562][ T9532] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 945.780997][ T9532] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 945.872015][ T5946] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8567'. [ 945.964374][ T1141] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 945.985912][ T1141] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 946.042014][ T5934] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8567'. [ 946.086842][ T5934] netlink: 28 bytes leftover after parsing attributes in process `syz.3.8567'. [ 946.231039][T32738] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 946.256529][T32738] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 946.333687][ T5952] lo speed is unknown, defaulting to 1000 [ 946.453057][ T5952] lo speed is unknown, defaulting to 1000 [ 946.532534][ T5976] syzkaller0: entered promiscuous mode [ 946.543597][ T5976] syzkaller0: entered allmulticast mode [ 947.064009][ T5952] macsec0 speed is unknown, defaulting to 1000 [ 947.081082][ T6002] veth0_macvtap: Caught tx_queue_len zero misconfig [ 947.099272][ T5952] lo speed is unknown, defaulting to 1000 [ 947.373293][ T6021] __nla_validate_parse: 3 callbacks suppressed [ 947.373312][ T6021] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8584'. [ 947.402337][ T6014] netlink: 'syz.1.8584': attribute type 2 has an invalid length. [ 947.404674][ T6023] netlink: 'syz.3.8588': attribute type 27 has an invalid length. [ 947.711703][ T6032] netlink: 64 bytes leftover after parsing attributes in process `syz.1.8591'. [ 947.825011][ T6038] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8593'. [ 947.872948][ T6039] syzkaller1: entered promiscuous mode [ 947.889008][ T6039] syzkaller1: entered allmulticast mode [ 948.145447][ T6049] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.8595'. [ 948.172792][ T6048] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.8595'. [ 948.207355][ T6053] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 948.247920][T12429] net_ratelimit: 15 callbacks suppressed [ 948.247940][T12429] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 948.268745][T12429] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 948.484964][ T6061] netlink: 'syz.2.8599': attribute type 1 has an invalid length. [ 948.503577][ T6061] netlink: 36 bytes leftover after parsing attributes in process `syz.2.8599'. [ 948.516910][ T6063] netlink: 44 bytes leftover after parsing attributes in process `syz.0.8600'. [ 948.566525][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 948.604661][ T6063] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8600'. [ 948.786964][ T1141] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 948.804472][ T1141] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 948.834877][ T6087] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8604'. [ 949.090141][ T6104] netlink: 52 bytes leftover after parsing attributes in process `syz.1.8605'. [ 949.175627][ T6088] syzkaller0: entered promiscuous mode [ 949.188896][ T6088] syzkaller0: entered allmulticast mode [ 949.387321][T32735] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 949.401718][T32735] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 949.596554][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 949.687349][ T6127] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 949.845505][ T6124] lo speed is unknown, defaulting to 1000 [ 949.865128][ T6124] lo speed is unknown, defaulting to 1000 [ 949.977062][T32738] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 949.991984][ T6140] netlink: 'syz.3.8611': attribute type 16 has an invalid length. [ 950.017426][ T6140] netlink: 'syz.3.8611': attribute type 3 has an invalid length. [ 950.372775][ T6151] netlink: 'syz.0.8619': attribute type 13 has an invalid length. [ 950.672870][ T6162] netlink: 'syz.0.8619': attribute type 2 has an invalid length. [ 950.818584][ T6124] macsec0 speed is unknown, defaulting to 1000 [ 950.864154][ T6124] lo speed is unknown, defaulting to 1000 [ 951.433548][ T6169] netlink: 'syz.3.8623': attribute type 2 has an invalid length. [ 951.963325][ T9531] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 952.019990][ T9531] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 952.044171][ T9531] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 952.084140][ T9531] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 952.115038][ T9531] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 952.136787][ T9531] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 952.179815][ T9531] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 952.200419][ T9531] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 952.577842][ T6201] netlink: 'syz.4.8630': attribute type 12 has an invalid length. [ 952.586025][ T6201] netlink: 'syz.4.8630': attribute type 29 has an invalid length. [ 952.594702][ T6201] __nla_validate_parse: 6 callbacks suppressed [ 952.594879][ T6201] netlink: 148 bytes leftover after parsing attributes in process `syz.4.8630'. [ 952.612158][ T6201] netlink: 59 bytes leftover after parsing attributes in process `syz.4.8630'. [ 952.632520][ T6201] netlink: 'syz.4.8630': attribute type 12 has an invalid length. [ 952.642256][ T6201] netlink: 'syz.4.8630': attribute type 29 has an invalid length. [ 952.650800][ T6201] netlink: 148 bytes leftover after parsing attributes in process `syz.4.8630'. [ 952.660605][ T6201] netlink: 59 bytes leftover after parsing attributes in process `syz.4.8630'. [ 953.200643][ T6210] netlink: 40 bytes leftover after parsing attributes in process `syz.0.8633'. [ 953.293876][ T6213] netlink: 260 bytes leftover after parsing attributes in process `syz.0.8634'. [ 953.626550][T32735] net_ratelimit: 17 callbacks suppressed [ 953.626571][T32735] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 953.647268][T32735] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 953.744513][ T6224] pim6reg: entered allmulticast mode [ 953.756522][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 953.783708][ T6224] pim6reg: left allmulticast mode [ 953.879723][ T6227] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8639'. [ 953.948776][ T6233] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8641'. [ 954.109927][ T6238] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8639'. [ 954.196476][ T5969] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 954.211911][ T5969] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 954.214321][ T6244] lo speed is unknown, defaulting to 1000 [ 954.290603][ T6244] lo speed is unknown, defaulting to 1000 [ 954.327485][ T6240] netlink: 100 bytes leftover after parsing attributes in process `syz.3.8642'. [ 954.348014][ T6156] Set syz1 is full, maxelem 65536 reached [ 954.505812][ T6255] netlink: 'syz.1.8645': attribute type 1 has an invalid length. [ 954.576182][ T6255] 8021q: adding VLAN 0 to HW filter on device bond6 [ 954.709413][ T6258] veth5: entered allmulticast mode [ 954.760807][ T6258] bond6: (slave veth5): Enslaving as an active interface with an up link [ 954.788032][T32738] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 954.802591][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 954.810543][T32738] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 954.959498][ T6269] netlink: 'syz.1.8650': attribute type 3 has an invalid length. [ 955.017419][ T6244] macsec0 speed is unknown, defaulting to 1000 [ 955.032839][ T6244] lo speed is unknown, defaulting to 1000 [ 955.399593][T32735] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 955.448479][ T6286] nbd: must specify a size in bytes for the device [ 956.035715][ T6295] lo speed is unknown, defaulting to 1000 [ 956.050781][ T6295] lo speed is unknown, defaulting to 1000 [ 956.330772][ T6305] --map-set only usable from mangle table [ 956.529356][ T6300] lo speed is unknown, defaulting to 1000 [ 956.913934][ T6300] lo speed is unknown, defaulting to 1000 [ 956.922478][ T6295] macsec0 speed is unknown, defaulting to 1000 [ 956.951172][ T6295] lo speed is unknown, defaulting to 1000 [ 957.434314][ T6300] macsec0 speed is unknown, defaulting to 1000 [ 957.472203][ T6300] lo speed is unknown, defaulting to 1000 [ 957.769377][ T6327] netlink: 'syz.4.8664': attribute type 1 has an invalid length. [ 957.782125][ T6327] netlink: 'syz.4.8664': attribute type 2 has an invalid length. [ 957.803915][ T6327] netlink: 'syz.4.8664': attribute type 1 has an invalid length. [ 958.461426][ T6339] __nla_validate_parse: 6 callbacks suppressed [ 958.461447][ T6339] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8668'. [ 958.655819][ T6339] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8668'. [ 958.781346][ T6359] netlink: 'syz.1.8673': attribute type 2 has an invalid length. [ 958.956392][ C0] net_ratelimit: 16 callbacks suppressed [ 958.956412][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 959.020912][ T5969] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 959.035452][ T5969] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 959.104586][ T6371] sctp: [Deprecated]: syz.1.8677 (pid 6371) Use of int in max_burst socket option. [ 959.104586][ T6371] Use struct sctp_assoc_value instead [ 959.131690][ T6368] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8675'. [ 959.160039][ T6367] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8675'. [ 959.175968][ T6371] netlink: 'syz.1.8677': attribute type 1 has an invalid length. [ 959.185946][ T6371] netlink: 224 bytes leftover after parsing attributes in process `syz.1.8677'. [ 959.366962][ T6377] netlink: 'syz.2.8678': attribute type 1 has an invalid length. [ 959.521348][ T6377] 8021q: adding VLAN 0 to HW filter on device bond13 [ 959.559817][ T6375] lo speed is unknown, defaulting to 1000 [ 959.599478][T32735] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 33:33:ff:aa:aa:2a [ 959.614208][T32735] batman_adv: batadv0: Local translation table size (60) exceeds maximum packet size (-320); Ignoring new local tt entry: 01:00:5e:00:00:01 [ 959.637986][ T6377] netlink: 'syz.2.8678': attribute type 10 has an invalid length. [ 959.648637][ T6377] netlink: 40 bytes leftover after parsing attributes in process `syz.2.8678'. [ 959.691626][ T6383] bond13: (slave veth1): Enslaving as an active interface with a down link [ 959.730229][ T6386] batman_adv: batadv0: Interface deactivated: dummy0 [ 959.752472][ T6386] batman_adv: batadv0: Removing interface: dummy0 [ 959.768757][ T6386] bond13: (slave dummy0): making interface the new active one [ 959.782694][ T6386] dummy0: entered promiscuous mode [ 959.789750][ T6386] bond13: (slave dummy0): Enslaving as an active interface with an up link [ 959.815871][ T6375] lo speed is unknown, defaulting to 1000 [ 959.831878][ T6377] bond13: (slave dummy0): Releasing active interface [ 959.996523][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 960.135722][ T6405] pimreg: entered allmulticast mode [ 960.689782][ T6375] macsec0 speed is unknown, defaulting to 1000 [ 960.698287][ T6375] lo speed is unknown, defaulting to 1000 [ 960.898734][ T6418] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8686'. [ 960.903665][ T6421] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 960.982835][ T6427] netlink: 68 bytes leftover after parsing attributes in process `syz.4.8689'. [ 961.020389][ T6423] netlink: 'syz.2.8688': attribute type 5 has an invalid length. [ 961.036409][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 961.095198][ T6437] C: renamed from veth1_to_team [ 961.123221][ T6437] netlink: 152 bytes leftover after parsing attributes in process `syz.3.8691'. [ 961.371491][ T6445] batadv_slave_0: entered promiscuous mode [ 961.388731][ T6444] ip6tnl0: Caught tx_queue_len zero misconfig [ 961.403273][ T6443] batadv_slave_0: left promiscuous mode [ 961.414183][ T6444] netlink: 32 bytes leftover after parsing attributes in process `syz.0.8694'. [ 961.670531][ T6472] IPVS: length: 161 != 24 [ 961.984551][ T6484] batadv_slave_0: Caught tx_queue_len zero misconfig [ 962.076405][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 962.652810][T28809] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 962.674450][T28809] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 962.684552][T28809] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 962.693852][T28809] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 962.693900][ T6511] sch_tbf: burst 19872 is lower than device lo mtu (32783) ! [ 962.721438][T28809] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 962.910055][ T5637] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 962.919220][ T5637] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 962.929426][ T5637] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 962.939560][ T5637] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 962.951463][ T5637] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 963.027262][ T6511] mac80211_hwsim hwsim83 syzkaller0: entered promiscuous mode [ 963.089891][ T6511] mac80211_hwsim hwsim83 syzkaller0: entered allmulticast mode [ 963.117242][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 963.410641][ T6530] xt_ipcomp: unknown flags 1D [ 963.460171][ T6506] netlink: 'syz.4.8704': attribute type 1 has an invalid length. [ 963.694812][ T6509] lo speed is unknown, defaulting to 1000 [ 963.718586][ T6509] lo speed is unknown, defaulting to 1000 [ 963.902595][ T6547] team_slave_1: Caught tx_queue_len zero misconfig [ 964.037280][ T6547] syzkaller0: entered promiscuous mode [ 964.069222][ T6547] syzkaller0: entered allmulticast mode [ 964.157553][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 964.285034][ T6509] macsec0 speed is unknown, defaulting to 1000 [ 964.312680][ T6509] lo speed is unknown, defaulting to 1000 [ 964.375166][ T6564] ’: renamed from bond_slave_0 [ 964.389288][ T6564] __nla_validate_parse: 1 callbacks suppressed [ 964.389307][ T6564] netlink: 32 bytes leftover after parsing attributes in process `syz.2.8721'. [ 964.423950][ T6564] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8721'. [ 964.428673][ T6566] netlink: 'syz.4.8722': attribute type 1 has an invalid length. [ 964.434051][ T6564] netlink: 32 bytes leftover after parsing attributes in process `syz.2.8721'. [ 964.529022][ T6567] xt_hashlimit: size too large, truncated to 1048576 [ 964.696770][ T6575] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input9 [ 965.041651][ T5637] Bluetooth: hci1: command tx timeout [ 965.061596][ T6593] FAULT_INJECTION: forcing a failure. [ 965.061596][ T6593] name failslab, interval 1, probability 0, space 0, times 0 [ 965.110495][ T6593] CPU: 1 UID: 0 PID: 6593 Comm: syz.0.8725 Not tainted syzkaller #0 PREEMPT(full) [ 965.110522][ T6593] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 965.110533][ T6593] Call Trace: [ 965.110541][ T6593] [ 965.110550][ T6593] dump_stack_lvl+0xe8/0x150 [ 965.110577][ T6593] should_fail_ex+0x412/0x560 [ 965.110603][ T6593] should_failslab+0xa8/0x100 [ 965.110630][ T6593] ? __kernfs_new_node+0xea/0x970 [ 965.110655][ T6593] kmem_cache_alloc_noprof+0x87/0x650 [ 965.110688][ T6593] __kernfs_new_node+0xea/0x970 [ 965.110715][ T6593] ? __pfx___kernfs_new_node+0x10/0x10 [ 965.110736][ T6593] ? kernfs_root+0x1c/0x230 [ 965.110761][ T6593] ? kernfs_root+0x1c/0x230 [ 965.110782][ T6593] ? kernfs_root+0x1c/0x230 [ 965.110800][ T6593] ? kernfs_root+0x1c/0x230 [ 965.110826][ T6593] kernfs_new_node+0x102/0x210 [ 965.110855][ T6593] __kernfs_create_file+0x4b/0x2e0 [ 965.110876][ T6593] sysfs_add_file_mode_ns+0x238/0x300 [ 965.110904][ T6593] internal_create_group+0x673/0x1190 [ 965.110940][ T6593] ? __pfx_internal_create_group+0x10/0x10 [ 965.110961][ T6593] ? kernfs_add_one+0x477/0x5c0 [ 965.110989][ T6593] ? up_write+0x1ab/0x410 [ 965.111015][ T6593] sysfs_create_groups+0x59/0x120 [ 965.111038][ T6593] device_add_attrs+0x1bf/0x5b0 [ 965.111066][ T6593] ? __pfx_device_add_attrs+0x10/0x10 [ 965.111089][ T6593] ? kobject_put+0x516/0x560 [ 965.111116][ T6593] ? device_add_class_symlinks+0x21f/0x240 [ 965.111146][ T6593] device_add+0x496/0xbb0 [ 965.111171][ T6593] ? device_initialize+0x26a/0x460 [ 965.111198][ T6593] wakeup_source_sysfs_add+0x1d3/0x2c0 [ 965.111220][ T6593] wakeup_source_register+0x18a/0x380 [ 965.111251][ T6593] ep_insert+0x1022/0x1a40 [ 965.111290][ T6593] ? __pfx_ep_insert+0x10/0x10 [ 965.111325][ T6593] ? bpf_lsm_capable+0x9/0x20 [ 965.111349][ T6593] do_epoll_ctl+0x7f4/0xe80 [ 965.111380][ T6593] __x64_sys_epoll_ctl+0x165/0x1b0 [ 965.111405][ T6593] ? __pfx___x64_sys_epoll_ctl+0x10/0x10 [ 965.111438][ T6593] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 965.111458][ T6593] do_syscall_64+0x174/0x580 [ 965.111476][ T6593] ? trace_irq_disable+0x3b/0x140 [ 965.111501][ T6593] ? clear_bhb_loop+0x40/0x90 [ 965.111521][ T6593] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 965.111539][ T6593] RIP: 0033:0x7f7c9779ce59 [ 965.111556][ T6593] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 965.111571][ T6593] RSP: 002b:00007f7c98663028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 965.111589][ T6593] RAX: ffffffffffffffda RBX: 00007f7c97a15fa0 RCX: 00007f7c9779ce59 [ 965.111601][ T6593] RDX: 0000000000000004 RSI: 0000000000000001 RDI: 0000000000000003 [ 965.111619][ T6593] RBP: 00007f7c98663090 R08: 0000000000000000 R09: 0000000000000000 [ 965.111630][ T6593] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000002 [ 965.111641][ T6593] R13: 00007f7c97a16038 R14: 00007f7c97a15fa0 R15: 00007ffd9ce6b9e8 [ 965.111672][ T6593] [ 965.216594][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 965.340975][ T6509] bridge0: port 1(bridge_slave_0) entered blocking state [ 965.462702][ T6509] bridge0: port 1(bridge_slave_0) entered disabled state [ 965.490899][ T6509] bridge_slave_0: entered allmulticast mode [ 965.534063][ T6509] bridge_slave_0: entered promiscuous mode [ 965.549223][ T6509] bridge0: port 2(bridge_slave_1) entered blocking state [ 965.557028][ T6509] bridge0: port 2(bridge_slave_1) entered disabled state [ 965.564400][ T6509] bridge_slave_1: entered allmulticast mode [ 965.573315][ T6509] bridge_slave_1: entered promiscuous mode [ 965.630745][ T6615] netlink: 'syz.2.8729': attribute type 19 has an invalid length. [ 965.770130][ T6619] netlink: 40 bytes leftover after parsing attributes in process `syz.1.8730'. [ 965.863688][ T6623] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8733'. [ 965.896110][ T6509] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 965.940233][ T6509] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 966.033711][ T6628] netlink: 'syz.2.8735': attribute type 7 has an invalid length. [ 966.053212][ T6629] netlink: 'syz.2.8735': attribute type 7 has an invalid length. [ 966.081327][ T6509] team0: Port device team_slave_0 added [ 966.112839][ T6509] team0: Port device team_slave_1 added [ 966.121850][ T6629] xt_l2tp: unknown flags: 51 [ 966.204124][ T6509] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 966.222718][ T6509] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 966.256414][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 966.303068][ T6509] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 966.405979][ T6654] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8739'. [ 966.513561][ T6509] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 966.533237][ T6509] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 966.572682][ T6509] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 966.584523][ T6654] netlink: 20 bytes leftover after parsing attributes in process `syz.4.8739'. [ 966.752703][ T6509] hsr_slave_0: entered promiscuous mode [ 966.760625][ T6509] hsr_slave_1: entered promiscuous mode [ 966.768864][ T6509] debugfs: 'hsr0' already exists in 'hsr' [ 966.781295][ T6509] Cannot create hsr debugfs directory [ 966.811090][ T6669] netlink: 'syz.2.8744': attribute type 13 has an invalid length. [ 966.834017][ T6669] netlink: 'syz.2.8744': attribute type 17 has an invalid length. [ 966.940272][ T9532] [ 966.942649][ T9532] ============================================ [ 966.948801][ T9532] WARNING: possible recursive locking detected [ 966.954974][ T9532] syzkaller #0 Not tainted [ 966.959480][ T9532] -------------------------------------------- [ 966.965631][ T9532] kworker/u8:28/9532 is trying to acquire lock: [ 966.971876][ T9532] ffff888055a6c958 (&qdisc_xmit_lock_key#3){+.-.}-{3:3}, at: sch_direct_xmit+0x15f/0x4c0 [ 966.982171][ T9532] [ 966.982171][ T9532] but task is already holding lock: [ 966.989554][ T9532] ffff88806b286158 (&qdisc_xmit_lock_key#3){+.-.}-{3:3}, at: sch_direct_xmit+0x15f/0x4c0 [ 966.999671][ T9532] [ 966.999671][ T9532] other info that might help us debug this: [ 967.007820][ T9532] Possible unsafe locking scenario: [ 967.007820][ T9532] [ 967.015449][ T9532] CPU0 [ 967.018739][ T9532] ---- [ 967.022021][ T9532] lock(&qdisc_xmit_lock_key#3); [ 967.027067][ T9532] lock(&qdisc_xmit_lock_key#3); [ 967.032107][ T9532] [ 967.032107][ T9532] *** DEADLOCK *** [ 967.032107][ T9532] [ 967.040251][ T9532] May be due to missing lock nesting notation [ 967.040251][ T9532] [ 967.048574][ T9532] 11 locks held by kworker/u8:28/9532: [ 967.054041][ T9532] #0: ffff88802a8c0140 ((wq_completion)bond11#7){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 967.065266][ T9532] #1: ffffc9000d10fc40 ((work_completion)(&(&bond->alb_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 967.078129][ T9532] #2: ffffffff8e95cc20 (rcu_read_lock){....}-{1:3}, at: bond_alb_monitor+0xf8/0x17e0 [ 967.087694][ T9532] #3: ffffffff8e95cc80 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x2b6/0x3950 [ 967.097687][ T9532] #4: ffff88801af46228 (dev->qdisc_tx_busylock ?: &qdisc_tx_busylock#5){+...}-{3:3}, at: __dev_queue_xmit+0x11a6/0x3950 [ 967.110305][ T9532] #5: ffff88806b286158 (&qdisc_xmit_lock_key#3){+.-.}-{3:3}, at: sch_direct_xmit+0x15f/0x4c0 [ 967.120618][ T9532] #6: ffffffff8e95cc20 (rcu_read_lock){....}-{1:3}, at: ip_output+0x5b/0x450 [ 967.129502][ T9532] #7: ffffffff8e95cc20 (rcu_read_lock){....}-{1:3}, at: ip_finish_output2+0x3c2/0x1070 [ 967.139248][ T9532] #8: ffffffff8e95cc20 (rcu_read_lock){....}-{1:3}, at: arp_xmit+0x23/0x270 [ 967.148030][ T9532] #9: ffffffff8e95cc80 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x2b6/0x3950 [ 967.157937][ T9532] #10: ffff88803c6a8228 (dev->qdisc_tx_busylock ?: &qdisc_tx_busylock#5){+...}-{3:3}, at: __dev_queue_xmit+0x11a6/0x3950 [ 967.170627][ T9532] [ 967.170627][ T9532] stack backtrace: [ 967.176499][ T9532] CPU: 1 UID: 0 PID: 9532 Comm: kworker/u8:28 Not tainted syzkaller #0 PREEMPT(full) [ 967.176515][ T9532] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 967.176526][ T9532] Workqueue: bond11 bond_alb_monitor [ 967.176542][ T9532] Call Trace: [ 967.176550][ T9532] [ 967.176557][ T9532] dump_stack_lvl+0xe8/0x150 [ 967.176574][ T9532] print_deadlock_bug+0x279/0x290 [ 967.176591][ T9532] __lock_acquire+0x253f/0x2cf0 [ 967.176609][ T9532] ? unwind_next_frame+0xa6/0x2550 [ 967.176629][ T9532] ? sch_direct_xmit+0x15f/0x4c0 [ 967.176641][ T9532] lock_acquire+0x106/0x350 [ 967.176654][ T9532] ? sch_direct_xmit+0x15f/0x4c0 [ 967.176671][ T9532] _raw_spin_lock+0x2e/0x40 [ 967.176691][ T9532] ? sch_direct_xmit+0x15f/0x4c0 [ 967.176703][ T9532] sch_direct_xmit+0x15f/0x4c0 [ 967.176717][ T9532] ? __pfx_sch_direct_xmit+0x10/0x10 [ 967.176729][ T9532] ? arp_create+0xd0/0x980 [ 967.176751][ T9532] __dev_queue_xmit+0x180f/0x3950 [ 967.176770][ T9532] ? __dev_queue_xmit+0x2b6/0x3950 [ 967.176789][ T9532] ? arpt_do_table+0x256/0x1e30 [ 967.176807][ T9532] ? __pfx___dev_queue_xmit+0x10/0x10 [ 967.176827][ T9532] ? __pfx_arpt_do_table+0x10/0x10 [ 967.176843][ T9532] ? trace_kmem_cache_alloc+0x29/0xe0 [ 967.176867][ T9532] ? NF_HOOK+0xa2/0x3c0 [ 967.176886][ T9532] NF_HOOK+0x33a/0x3c0 [ 967.176905][ T9532] ? __pfx_arp_xmit_finish+0x10/0x10 [ 967.176923][ T9532] ? NF_HOOK+0xa2/0x3c0 [ 967.176940][ T9532] ? __pfx_NF_HOOK+0x10/0x10 [ 967.176957][ T9532] ? lock_acquire+0x106/0x350 [ 967.176971][ T9532] ? __pfx_arp_xmit_finish+0x10/0x10 [ 967.176991][ T9532] ? inet_addr_type_dev_table+0x25/0x190 [ 967.177013][ T9532] arp_xmit+0x16c/0x270 [ 967.177030][ T9532] ? arp_xmit+0x23/0x270 [ 967.177048][ T9532] arp_solicit+0xbe0/0xe40 [ 967.177069][ T9532] ? arp_solicit+0x119/0xe40 [ 967.177088][ T9532] ? __pfx_arp_solicit+0x10/0x10 [ 967.177110][ T9532] ? __pfx_arp_solicit+0x10/0x10 [ 967.177129][ T9532] __neigh_event_send+0xf05/0x14d0 [ 967.177153][ T9532] neigh_resolve_output+0x198/0x750 [ 967.177174][ T9532] ? __pfx_ip_neigh_gw4+0x10/0x10 [ 967.177191][ T9532] ? ip_finish_output2+0x3c2/0x1070 [ 967.177203][ T9532] ip_finish_output2+0xca9/0x1070 [ 967.177222][ T9532] ? ip_skb_dst_mtu+0x80b/0xa50 [ 967.177242][ T9532] ? ip_finish_output+0x40e/0x530 [ 967.177262][ T9532] ip_output+0x29f/0x450 [ 967.177281][ T9532] ? ip_output+0x5b/0x450 [ 967.177299][ T9532] iptunnel_xmit+0x621/0xd10 [ 967.177319][ T9532] ip_tunnel_xmit+0x193a/0x1f20 [ 967.177345][ T9532] ? __pfx_ip_tunnel_xmit+0x10/0x10 [ 967.177366][ T9532] ? __pfx_gre_build_header+0x10/0x10 [ 967.177384][ T9532] ? kfree+0x1c5/0x640 [ 967.177399][ T9532] ? pskb_expand_head+0x458/0x1390 [ 967.177417][ T9532] __gre_xmit+0x19e/0x240 [ 967.177434][ T9532] ? __pfx___gre_xmit+0x10/0x10 [ 967.177455][ T9532] erspan_xmit+0xa41/0x14d0 [ 967.177476][ T9532] ? ret_from_fork_asm+0x1a/0x30 [ 967.177493][ T9532] ? __pfx_erspan_xmit+0x10/0x10 [ 967.177514][ T9532] dev_hard_start_xmit+0x2cd/0x830 [ 967.177535][ T9532] sch_direct_xmit+0x251/0x4c0 [ 967.177550][ T9532] ? __pfx_sch_direct_xmit+0x10/0x10 [ 967.177562][ T9532] ? kthread+0x2e0/0x470 [ 967.177581][ T9532] __dev_queue_xmit+0x180f/0x3950 [ 967.177599][ T9532] ? __dev_queue_xmit+0x2b6/0x3950 [ 967.177620][ T9532] ? __pfx___dev_queue_xmit+0x10/0x10 [ 967.177637][ T9532] ? rcu_is_watching+0x15/0xb0 [ 967.177653][ T9532] ? trace_kmem_cache_alloc+0x29/0xe0 [ 967.177671][ T9532] ? kmem_cache_alloc_node_noprof+0x3ce/0x690 [ 967.177695][ T9532] ? alb_send_lp_vid+0x14e/0x550 [ 967.177710][ T9532] alb_send_lp_vid+0x348/0x550 [ 967.177726][ T9532] ? __pfx_alb_send_lp_vid+0x10/0x10 [ 967.177745][ T9532] alb_send_learning_packets+0x12c/0x300 [ 967.177760][ T9532] ? __pfx_alb_send_learning_packets+0x10/0x10 [ 967.177774][ T9532] ? bond_alb_monitor+0xf8/0x17e0 [ 967.177789][ T9532] ? netdev_lower_get_next_private_rcu+0x9f/0x100 [ 967.177804][ T9532] bond_alb_monitor+0x3d5/0x17e0 [ 967.177820][ T9532] ? bond_alb_monitor+0xf8/0x17e0 [ 967.177833][ T9532] ? __pfx_bond_alb_monitor+0x10/0x10 [ 967.177847][ T9532] ? process_scheduled_works+0xa70/0x1860 [ 967.177861][ T9532] ? process_scheduled_works+0xa70/0x1860 [ 967.177874][ T9532] process_scheduled_works+0xb5d/0x1860 [ 967.177898][ T9532] ? __pfx_process_scheduled_works+0x10/0x10 [ 967.177914][ T9532] ? assign_work+0x3d5/0x5e0 [ 967.177928][ T9532] worker_thread+0xa53/0xfc0 [ 967.177951][ T9532] kthread+0x389/0x470 [ 967.177967][ T9532] ? __pfx_worker_thread+0x10/0x10 [ 967.177980][ T9532] ? __pfx_kthread+0x10/0x10 [ 967.177997][ T9532] ret_from_fork+0x514/0xb70 [ 967.178012][ T9532] ? __pfx_ret_from_fork+0x10/0x10 [ 967.178026][ T9532] ? __switch_to+0xc79/0x1410 [ 967.178045][ T9532] ? __pfx_kthread+0x10/0x10 [ 967.178062][ T9532] ret_from_fork_asm+0x1a/0x30 [ 967.178082][ T9532] [ 967.225698][ T5637] Bluetooth: hci1: command tx timeout [ 967.278980][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 967.892453][ T6669] 8021q: adding VLAN 0 to HW filter on device .` [ 967.901510][ T6669] 8021q: adding VLAN 0 to HW filter on device team0 [ 967.909770][ T6669] dummy0: left promiscuous mode [ 967.917539][ T6669] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 967.929085][T32738] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 967.951397][ T6669] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 967.960358][ T6669] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 967.978755][ T6669] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 967.989218][ T6669] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 968.002664][ T6669] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 968.030115][T12429] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 20002 - 0 [ 968.039457][T12429] netdevsim netdevsim2 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 968.050141][T12429] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 20002 - 0 [ 968.067305][T12429] netdevsim netdevsim2 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 968.085006][T12429] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 20002 - 0 [ 968.094363][T12429] netdevsim netdevsim2 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 968.103761][T12429] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 20002 - 0 [ 968.114649][T12429] netdevsim netdevsim2 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 968.316354][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 968.347570][ T6509] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 968.356632][ T6509] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 968.364452][ T6509] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 968.384518][ T6509] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 968.393132][ T6509] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 968.402240][ T6509] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 968.409996][ T6509] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 968.419304][ T6509] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 968.463083][ T6509] 8021q: adding VLAN 0 to HW filter on device bond0 [ 968.479878][ T6509] 8021q: adding VLAN 0 to HW filter on device team0 [ 968.491289][ T9532] bridge0: port 1(bridge_slave_0) entered blocking state [ 968.498402][ T9532] bridge0: port 1(bridge_slave_0) entered forwarding state [ 968.510798][T32741] bridge0: port 2(bridge_slave_1) entered blocking state [ 968.517882][T32741] bridge0: port 2(bridge_slave_1) entered forwarding state [ 968.725744][ T6509] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 968.758327][ T6509] veth0_vlan: entered promiscuous mode [ 968.767798][ T6509] veth1_vlan: entered promiscuous mode [ 968.789112][ T6509] veth0_macvtap: entered promiscuous mode [ 968.798963][ T6509] veth1_macvtap: entered promiscuous mode [ 968.814414][ T6509] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 968.826333][ T6509] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 968.839626][ T9531] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 968.849273][ T9531] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 968.859452][ T9531] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 968.868880][ T9531] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 968.916827][ T6509] ieee80211 phy108: Selected rate control algorithm 'minstrel_ht' [ 968.972351][T12429] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 968.975345][ T6509] ieee80211 phy109: Selected rate control algorithm 'minstrel_ht' [ 968.981224][T12429] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 969.011776][ T9531] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 969.020836][ T9531] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 969.356435][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 969.687432][ T5637] Bluetooth: hci1: command tx timeout [ 970.396430][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 971.446412][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 971.757259][ T5637] Bluetooth: hci1: command tx timeout [ 972.476888][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 973.517082][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 974.566324][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 975.597230][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 976.646350][ C0] IPVS: fo: UDP 224.0.0.2:0 - no destination available