last executing test programs: 6.235053222s ago: executing program 0 (id=13153): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x2, 0x6, 0x948, 0x160, 0x378, 0x378, 0x460, 0x630, 0x878, 0x878, 0x878, 0x878, 0x878, 0x6, 0x0, {[{{@ipv6={@empty, @private1, [], [0x0, 0x0, 0x0, 0xff000000], 'pimreg0\x00', 'macvtap0\x00', {}, {}, 0x21, 0x0, 0x5}, 0x0, 0x138, 0x160, 0x0, {0x7a00000010000000}, [@common=@hl={{0x28}, {0x3, 0x4}}, @common=@inet=@iprange={{0x68}, {@ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv6=@ipv4={'\x00', '\xff\xff', @broadcast}, @ipv6=@private2={0xfc, 0x2, '\x00', 0x1}, @ipv6=@rand_addr=' \x01\x00', 0x22}}]}, @unspec=@CHECKSUM={0x20}}, {{@uncond, 0x0, 0x1e0, 0x218, 0x0, {}, [@common=@rt={{0x138}, {0x3, [0x8, 0x2400], 0x80000000, 0x8, 0x94b06560c6564e1f, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @ipv4={'\x00', '\xff\xff', @loopback}, @mcast1, @loopback, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @remote, @local, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x2c}, @dev={0xfe, 0x80, '\x00', 0x22}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @remote, @local, @remote], 0xf}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff}, {0x0, 0x20}, {0x0, 0x0, 0x4}}}}, {{@ipv6={@ipv4, @initdev={0xfe, 0x88, '\x00', 0x4, 0x0}, [0x0, 0x0, 0x0, 0xff], [0x0, 0x0, 0xff000000], '\x00', 'bond_slave_0\x00', {}, {}, 0x0, 0x0, 0x2}, 0x0, 0xa8, 0xe8, 0x48000000}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0x0, 0xffffffff, 0x3, 0x5, 0x2, 0x8000, 0xc, 0xffffffff]}}}, {{@uncond, 0x0, 0xa8, 0x1d0}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0xcb, 'system_u:object_r:kmsg_device_t:s0\x00'}}}, {{@uncond, 0x0, 0x208, 0x248, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x2}}, @common=@rt={{0x138}, {0x0, [], 0x0, 0x0, 0x0, [@dev={0xfe, 0x80, '\x00', 0x36}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0, @empty, @loopback, @ipv4={'\x00', '\xff\xff', @remote}, @mcast2, @private1={0xfc, 0x1, '\x00', 0x8}, @private1, @local, @private2={0xfc, 0x2, '\x00', 0x2}, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @private0, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0]}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x1, 0x8, @ipv6=@remote, 0x4e22}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x9a8) 6.030145645s ago: executing program 0 (id=13157): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000000fc0)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000140)="91f8a9849519def28691bbc4173c3d6f357d0272b7319130feaab952ac4703cad04be68907e50e997fc26e4c91ea2feb931647fc5393de25000000000000000000", 0x41}, {&(0x7f0000000e80)="44900000000056ee66c372f3105eb186dd8062fad2d5b5bfb0ba06f274a8d026bd209da8ffa6a26e3b3f8075704a9d0ef9aff7f1e7db24609f02d34e76992c9df9fe6888c6c9a4825c6223be6ac54536025af1dea54e527c68b0ff250261953f2da79a78104c2d9e7b16ed86b124945aa9ab7581ebd385fb61d442035db81e18c2d2462d0bb25fff9d3b1ce90b597992b2a4d541611ce77f58dce7c9500118229e7cdf4ca7f6adca92c73d97ce54164c1942b2568635bec8e020b41fb2f8000000000000000000000000000000001c8a9f7956583e26f6f0edc415851d0b8305fe66c2b7c114e3712d87744938848f24a13cb604000000000000000000000000000000c7aa5035897b20a6c23f1fc4af2990c07f784b985a3de7740bd338487029", 0x121}, {&(0x7f00000003c0)="641a6a2b863c0dd898013a3f97a834ebb75a925ab48c844221841a232932fc2e37e327de", 0x24}, {&(0x7f00000001c0)="985e44efeabe001cabcf3d8673c3a254a9a2d3197970cb347b70a243bf77139a94bc3ae91684aaf7b7dff691deb8f8aef2d915fb3a0794a9a9b431a819bca6122c350637808dde804a048fd8696e524b2934126c443ce93d82e931eb9918e6c0827686e59209d2e02c9210fd8048f04ad6c48b3072092c483271361816bf21afb8473a", 0x83}], 0x4}}, {{0x0, 0x0, &(0x7f00000005c0)}}, {{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000640)="42e013913edbeb683c44e18a52b5a2462064ddd92caaba941de80d06047dedb7eeeff3a27eacf4c416b6979d6c918608807c44d01535dbaab3b390086e4fd43c6b5931187023646d6beac2340fdc7a0d81214ac76a818f64d287311e8828dfd3e3dd67efdb129a6e52745d1540e570891f6bf411cc16a18c4d34e522a1f003498f1a03ea1f8828b6c902286c71a9bc21923972dacfa74fef6a0fd3267e599c1dd33dff5d7b28f134bda4a29962fd5daa4fc9", 0xb2}, {&(0x7f0000001100)="0a84930b2ed6ecd2573bb7cfba1f189805b642591057300982ca3972f760dcf51f2061dd0d2d1bbde33d72b5158861b6e54c805e124ac1a1bbe691179f88e34be554b135d0522c4d7b45e2fc6409e6b04de47ef2802fb7a7e7998d62c71e99039bdeaed7e819534b64815041bf94681903eea4ea645cb7a3e4f51d9033742ec427fa04b24c4184e3d48b57b311b1b3fdad0ff156a2e7618e327e1ae28985e717d06add951d351b01f99e0ac668e29b5c9f1c00980b5910a10c07fca18f9798899d1739771511a7ff6ea8126f", 0xcc}, {&(0x7f0000001200)="a0b3d9829166e9cf17209300f1fd611b3364b6116b7590a4466fec4bfac3ebb7ef91527cc8d17d9a2e7398ff85bb6afab194a884fd6ed54e3398beb0777b3118c7a50ba10087bfbd243f42da33aab622b0a62bc018b666b7477dfab896e9fb49016ea248976af83e88540dd8cb92803f1a7c9f6d6250d4cfaeadcfd80e286c74a17d5b6730f78f1678684545aa5da7268295d2fa7408bd2137a3dcf4d731df550fa091560c0d7444cc0069524391bb701e25cd84a463cac235a5", 0xba}], 0x3}}, {{0x0, 0x0, &(0x7f00000008c0), 0x0, &(0x7f0000000a40)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @rand_addr=0x64010102}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x6}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @broadcast, @loopback}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xfc}}, @ip_retopts={{0x60, 0x0, 0x7, {[@generic={0x82, 0xe, "f49d5c2c80c1434d11331897"}, @noop, @noop, @timestamp={0x44, 0x18, 0x7f, 0x0, 0x9, [0x4d36, 0x400, 0x1000000, 0x5, 0x3]}, @ssrr={0x89, 0xb, 0x3c, [@initdev={0xac, 0x1e, 0x1, 0x0}, @remote]}, @ra={0x94, 0x4}, @ssrr={0x89, 0x13, 0xc7, [@private=0xa010100, @private=0xa010100, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty]}, @generic={0x7, 0x5, "271633"}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x4}}, @ip_ttl={{0x14, 0x0, 0x2, 0xfffffff1}}, @ip_ttl={{0x14, 0x0, 0x2, 0x4325}}], 0x118}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x58}}], 0x5, 0x2090) 5.864759314s ago: executing program 1 (id=13160): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001200)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a20000000000a010400f5ffffff000000010000020900010073797a30000000002c000000030a010200000000000000000100000a0900010073797a30000000000900030073797a300000000054000000060a010400000000000000000100000008000b40000000002c000480280001800e000100696d6d65646961746500000014000280080001400000000008000280040002000900010073797a300000"], 0xc8}}, 0x0) 5.729990801s ago: executing program 1 (id=13162): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000080)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac004", 0x25}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x20004080) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'macvlan0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="4400000010"], 0x44}, 0x1, 0x0, 0x0, 0x4008010}, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0x0) (fail_nth: 8) 5.650521826s ago: executing program 3 (id=13163): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='io.stat\x00', 0x26e1, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x8901, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030400000006000000005dcc0300", @ANYRES32=r1, @ANYBLOB="71e79fd800000008140012800c0001006d616376746170001400028008000500", @ANYRES32=r2], 0x3c}}, 0x0) 5.45267727s ago: executing program 2 (id=13164): mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x800, 0x0, 0x1}, 0x20) (fail_nth: 63) 5.051270685s ago: executing program 0 (id=13165): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000170900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}}, 0x2000c450) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x7, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x9}], {0x14}}, 0x5c}}, 0x300) 4.710424057s ago: executing program 1 (id=13166): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCOUTQNSD(r1, 0x894b, &(0x7f0000000100)) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000380)={'syzkaller0\x00', 0x200}) (async) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f00000001c0)={'ipvlan1\x00', 0x400}) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) (async) ioctl$TUNSETQUEUE(r3, 0x400454d9, &(0x7f0000000280)={'ipvlan1\x00', 0x400}) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async, rerun: 64) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 64) sendmsg$IPSET_CMD_TEST(r5, &(0x7f0000003900)={0x0, 0x0, &(0x7f00000038c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="30000000121196cbf3a4300100000000000000090900020473797a310000100005000100070000000800078004011a006bfb092f5fa74dfc29964d1ad6030ae62eb98c4c6706ae6bb0f03e8d030d4068901e273ef42452f77b34d3aa64f3607f633cd9e90868a3c6520e495ef2fcd0b828ad12b05d602f05c165e82cdb43a3239011b1556d5512398dc2f655461e57a02875eddb676057eb32c70be9c2799fff0f00000000000099"], 0x30}, 0x1, 0x0, 0x0, 0x8001}, 0x8854) ioctl$TUNSETOFFLOAD(r4, 0x400454d0, 0x17) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r6) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r7) (async, rerun: 32) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) (rerun: 32) bind$inet6(r7, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x200}, 0x1c) (async) listen(r8, 0x0) (async) r9 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r9, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) (async) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x78}, 0x1, 0x0, 0x0, 0x40000}, 0x8044) (async) r11 = accept(r1, 0x0, 0x0) connect$unix(r11, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) syz_init_net_socket$x25(0x9, 0x5, 0x0) 4.695843166s ago: executing program 2 (id=13167): r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={0xffffffffffffffff, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r1, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000001c0)=@can_newroute={0x2c, 0x18, 0xf885a5fe37fdb9e7, 0x70bd2c, 0x25dfdbfd, {}, [@CGW_MOD_OR={0x15, 0x2, {{{0x4, 0x0, 0x0, 0x1}, 0x2, 0x1, 0x0, 0x0, "92ed212072f9118e"}, 0x6}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x20000068) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r3, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r4 = syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/net\x00') bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000480)={@cgroup=r4, 0x11, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000640)={@cgroup=r5, 0x24, 0x0, 0xffff, &(0x7f0000000000)=[0x0, 0x0, 0x0], 0x3, 0x0, 0x0, 0x0, 0x0}, 0x40) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) bind$netlink(r7, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) getsockname$packet(r7, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r6, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=@newlink={0x44, 0x10, 0x40d, 0x70bd2d, 0x1ffffffc, {0x0, 0x0, 0x0, r8, 0x60046}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x2}, @IFLA_BOND_XMIT_HASH_POLICY={0x5, 0xe, 0x5}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40040}, 0x0) sendmsg$nl_route(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x200e3}, [@IFLA_MASTER={0x8, 0xa, r8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000580)=@bpf_lsm={0x4, 0x7, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000050002000000000085000000cc00000085000000000000000500feff000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x1, 0xff9, &(0x7f0000000a80)=""/4089, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x21) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x400240, 0x0) ioctl$TUNSETDEBUG(r9, 0x400454c9, &(0x7f00000000c0)=0x6) 4.550496898s ago: executing program 3 (id=13169): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) listen(r0, 0x1) connect$bt_l2cap(r0, &(0x7f0000000200)={0x1f, 0x2, @any, 0x5}, 0xe) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'geneve1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newlink={0x6c, 0x10, 0x403, 0x70bd2b, 0x0, {0x0, 0x0, 0x4, 0x0, 0x300}, [@IFLA_LINKINFO={0x44, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x34, 0x2, 0x0, 0x1, [@IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x8100}, @IFLA_VLAN_INGRESS_QOS={0x28, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x3ff, 0x8}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0xffffc5e1}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x400}}]}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x6c}}, 0x0) 4.399165182s ago: executing program 0 (id=13170): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000021010000000900010073797a300000000058000000160a01000000000000000000020000000900010073797a30000000000900020073797a31000000002c0003800800014000000000180003801400010076657468315f746f5f626f6e6400000008000240000000006c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000004000038008000140000000002c0003801400010067656e6576653000000000000000000014000100"], 0x10c}}, 0x0) 4.363570579s ago: executing program 2 (id=13171): syz_emit_ethernet(0x46, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60f91e2e00107300fc040000000000000000000000000000ff02000000000000000000000000030100000000ff"], 0x0) 4.318339298s ago: executing program 4 (id=13172): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x31, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)=@o_path={0x0, 0x0, 0x10}, 0x18) setsockopt$inet_opts(r1, 0x0, 0xd, &(0x7f0000000080)="54366540bf00348528e0eb890a3f98eac5335bc613182ae4213de2a62c318662d30e64192d3726b2bc8d2b8472bcbb01d6717f4c4b596a32a52b10596d4d03036824cf0d2ed21df9659684b0565368943a5ae599521b4b9990c43b7d788948bf4040cb7167bcd8868792761c351efd66e659fe471032a39fcbd97b64c588474b1bfbbce354cc0dac01f5e74cc5f7ae3734847e76ad801ed148386d3501d3d9c64561e38024fc5b89623a299eeae4478831c92de3c1f7ac3252debb667e2fbcc95a38bd5e7779b82b26b2345fc7c985beee3d4b9c42c8c6a7cba334fdf88babea4cdaa7ecea03964262812c96d9b0d2ae2649bb8f414485", 0xf7) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x44}}, 0x2000800) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$bt_hci(r3, &(0x7f0000000000)={0x27}, 0x62) socket$tipc(0x1e, 0x5, 0x0) bind$tipc(0xffffffffffffffff, 0x0, 0x0) r4 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r4, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000884}, 0x48004) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x4001, 0x3, 0x390, 0x220, 0x700001b, 0x148, 0x220, 0x148, 0x2f8, 0x206, 0x240, 0x2f8, 0x240, 0x7fffffe, 0x0, {[{{@ip={@local, @rand_addr, 0x0, 0x0, 'veth1_macvtap\x00', 'bond_slave_1\x00', {0xff}, {}, 0x0, 0x1}, 0x1ea, 0x200, 0x220, 0x0, {0x390, 0x8f00}, [@common=@inet=@hashlimit2={{0x150}, {'ip6tnl0\x00', {0x5, 0x1ff, 0x1, 0x5, 0x1, 0x100, 0x1, 0x8, 0x20}, {0x8}}}, @common=@set={{0x40}, {{0x0, [0x5, 0x4, 0x7, 0x2, 0x1], 0x1, 0x6}}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xb0, 0xd8, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x1, 0x6275dd3c01ecbf44, 0x2, 0x5, 0x2], 0x4, 0x2}}}]}, @common=@unspec=@NFQUEUE3={0x28}}], {{'\x00', 0x0, 0x70, 0x98, 0x0, {0x400000000000000}}, {0x28}}}}, 0x3f0) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x2000011, 0xffffffffffffffff, 0x2000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0xd, 0x3, &(0x7f0000000180)=ANY=[@ANYRES16=r2], &(0x7f0000000000)='GPL\x00', 0x4, 0x1005, &(0x7f0000002ec0)=""/4101, 0x40f00}, 0x94) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_int(r5, &(0x7f0000000040)='blkio.throttle.write_iops_device\x00', 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x96e}, 0x94) write$cgroup_subtree(r6, &(0x7f00000000c0)=ANY=[], 0x6a) r7 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r7, &(0x7f0000000080)={0x18, 0x0, {0x1, @empty, 'ip_vti0\x00'}}, 0x1e) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x2000017a, &(0x7f00000022c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x2f96, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040)={0x0, 0xb}, 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r8, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x7ffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmmsg(0xffffffffffffffff, &(0x7f0000000200), 0x1, 0x200480d0) r9 = socket$inet_sctp(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001700)={0x6, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000080000000000000003e69f553997a28e4600000000000000070000009500000000000000"], &(0x7f0000000380)='syzkaller\x00', 0x3, 0x1000, &(0x7f00000003c0)=""/4096, 0x41000, 0x70, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001680)}, 0x94) setsockopt$inet_sctp_SCTP_NODELAY(r9, 0x84, 0x3, &(0x7f00000001c0)=0xf, 0x4) ioctl$sock_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) 4.231260966s ago: executing program 3 (id=13173): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)={0x2c, r1, 0x1, 0x4070bd28, 0x1, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}]}, 0x2c}}, 0x18) socketpair$unix(0x1, 0x2, 0x0, 0x0) socket(0x10, 0x803, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="200000001100010025bd7000ffdbdf2500000000", @ANYRES32=r4], 0x20}}, 0x8080) 4.190115486s ago: executing program 2 (id=13174): setsockopt$inet_sctp_SCTP_AUTH_CHUNK(0xffffffffffffffff, 0x84, 0x15, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{0x0}, {&(0x7f0000000300)="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", 0x17f}], 0x2, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @empty}, 0x20) syz_emit_ethernet(0x46, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60f91e2e00107300fc040000000000000000000000000000ff020000000000000000000000fff50100000000ff"], 0x0) 4.177910076s ago: executing program 4 (id=13175): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000000fc0)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000140)="91f8a9849519def28691bbc4173c3d6f357d0272b7319130feaab952ac4703cad04be68907e50e997fc26e4c91ea2feb931647fc5393de25000000000000000000", 0x41}, {&(0x7f0000000e80)="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", 0x121}, {&(0x7f00000003c0)="641a6a2b863c0dd898013a3f97a834ebb75a925ab48c844221841a232932fc2e37e327de", 0x24}, {&(0x7f00000001c0)="985e44efeabe001cabcf3d8673c3a254a9a2d3197970cb347b70a243bf77139a94bc3ae91684aaf7b7dff691deb8f8aef2d915fb3a0794a9a9b431a819bca6122c350637808dde804a048fd8696e524b2934126c443ce93d82e931eb9918e6c0827686e59209d2e02c9210fd8048f04ad6c48b3072092c483271361816bf21afb8473a", 0x83}], 0x4}}, {{0x0, 0x0, &(0x7f00000005c0)}}, {{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000640)="42e013913edbeb683c44e18a52b5a2462064ddd92caaba941de80d06047dedb7eeeff3a27eacf4c416b6979d6c918608807c44d01535dbaab3b390086e4fd43c6b5931187023646d6beac2340fdc7a0d81214ac76a818f64d287311e8828dfd3e3dd67efdb129a6e52745d1540e570891f6bf411cc16a18c4d34e522a1f003498f1a03ea1f8828b6c902286c71a9bc21923972dacfa74fef6a0fd3267e599c1dd33dff5d7b28f134bda4a29962fd5daa4fc9", 0xb2}, {&(0x7f0000001100)="0a84930b2ed6ecd2573bb7cfba1f189805b642591057300982ca3972f760dcf51f2061dd0d2d1bbde33d72b5158861b6e54c805e124ac1a1bbe691179f88e34be554b135d0522c4d7b45e2fc6409e6b04de47ef2802fb7a7e7998d62c71e99039bdeaed7e819534b64815041bf94681903eea4ea645cb7a3e4f51d9033742ec427fa04b24c4184e3d48b57b311b1b3fdad0ff156a2e7618e327e1ae28985e717d06add951d351b01f99e0ac668e29b5c9f1c00980b5910a10c07fca18f9798899d1739771511a7ff6ea8126f", 0xcc}, {&(0x7f0000001200)="a0b3d9829166e9cf17209300f1fd611b3364b6116b7590a4466fec4bfac3ebb7ef91527cc8d17d9a2e7398ff85bb6afab194a884fd6ed54e3398beb0777b3118c7a50ba10087bfbd243f42da33aab622b0a62bc018b666b7477dfab896e9fb49016ea248976af83e88540dd8cb92803f1a7c9f6d6250d4cfaeadcfd80e286c74a17d5b6730f78f1678684545aa5da7268295d2fa7408bd2137a3dcf4d731df550fa091560c0d7444cc0069524391bb701e25cd84a463cac235a5", 0xba}], 0x3}}, {{0x0, 0x0, &(0x7f00000008c0), 0x0, &(0x7f0000000a40)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @rand_addr=0x64010102}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x6}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @broadcast, @loopback}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xfc}}, @ip_retopts={{0x60, 0x0, 0x7, {[@generic={0x82, 0xe, "f49d5c2c80c1434d11331897"}, @noop, @noop, @timestamp={0x44, 0x18, 0x7f, 0x0, 0x9, [0x4d36, 0x400, 0x1000000, 0x5, 0x3]}, @ssrr={0x89, 0xb, 0x3c, [@initdev={0xac, 0x1e, 0x1, 0x0}, @remote]}, @ra={0x94, 0x4}, @ssrr={0x89, 0x13, 0xc7, [@private=0xa010100, @private=0xa010100, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty]}, @generic={0x7, 0x5, "271633"}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x4}}, @ip_ttl={{0x14, 0x0, 0x2, 0xfffffff1}}, @ip_ttl={{0x14, 0x0, 0x2, 0x4325}}], 0x118}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x58}}], 0x5, 0x2090) 4.155355889s ago: executing program 0 (id=13176): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x16, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000b5000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000008900000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00, 0xc, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcc85}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newtclass={0x24, 0x28, 0x5ea11b84c59b353c, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x4, 0x1}, {0xa, 0x10}, {0x7, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYRESHEX], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20018840) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000040)=@o_path={&(0x7f0000000000)='./file0\x00', 0x0, 0x18, r0}, 0x18) socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000002c0)={'ipvlan1\x00', 0x7101}) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$kcm(0x11, 0x0, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) r6 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000780)=@newtfilter={0x4c, 0x2c, 0xd3f, 0x70b524, 0x25dfdbfb, {0x0, 0x0, 0x0, r10, {0xfff3, 0xffe0}, {}, {0x7, 0xfff2}}, [@filter_kind_options=@f_flow={{0x9}, {0x1c, 0x2, [@TCA_FLOW_KEYS={0x8, 0x1, 0x183f}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_DIVISOR={0x8, 0x8, 0x27f}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4008848}, 0xc884) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'caif0\x00', @multicast}) setsockopt$IP_VS_SO_SET_DEL(r2, 0x0, 0x484, &(0x7f0000000280)={0x5f, @remote, 0x4e23, 0x3, 'nq\x00', 0x0, 0x8, 0x16}, 0x2c) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000480)=@xdp={0x2c, 0x7, r11, 0x3e}, 0x80, &(0x7f0000000080)}, 0x4) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000080)={@private, @empty}, &(0x7f00000000c0)=0xc) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r12, &(0x7f0000000080)=ANY=[], 0x10448) 4.010423824s ago: executing program 3 (id=13177): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000080)={0x44, r1, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={'\x00', '\xff\xff', @multicast1}}, @IPVS_SVC_ATTR_PROTOCOL={0x6}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0xfffc}]}]}, 0x44}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$NILFS_IOCTL_SET_SUINFO(r2, 0x40186e8d, &(0x7f0000000180)={&(0x7f0000000000)=[{0x3, 0x2, 0x0, {0x8, 0x800}}, {0x7fffffffffffffff, 0x0, 0x0, {0x6, 0x6}}, {0x1, 0x1, 0x0, {0x81, 0x0, 0x1}}, {0x1, 0x0, 0x0, {0x4, 0xcaaf, 0x2}}, {0x5, 0x2, 0x0, {0x0, 0x3}}, {0x772fd850, 0x2, 0x0, {0x6, 0x81, 0x1}}, {0xff, 0x1, 0x0, {0x7eb6, 0x1, 0x1}}, {0x100, 0x0, 0x0, {0xfff, 0x7, 0x1}}], 0x8, 0x20, 0x100, 0x4}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x5, [@var={0x4, 0x18, 0x0, 0xe, 0x4}]}, {0x0, [0x0, 0x30, 0x0]}}, 0x0, 0x2d}, 0x28) write$ppp(r3, &(0x7f00000001c0)="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", 0x1000) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001a80)={0x14, 0x1e, 0x4, 0x20000002, 0x0, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x81}, 0x4004000) 4.009556482s ago: executing program 2 (id=13178): r0 = socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x4000000000000, &(0x7f00000007c0)=ANY=[], 0x50) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYRES16=r3, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r4], 0x1c}}, 0x4008054) write$nci(r1, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="5c000000020601e6ffffffffffffff0000000003140007800800114000000000050015000a0000000500010007000000050005000a00000005000400000000000900020073797a31000000000d000300686173683a6e657400"], 0x5c}, 0x1, 0x0, 0x0, 0x22004004}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc1}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="15010000000000002c00128009000100626f6e64000000001c000280050001000600000005000c000200000008000b00", @ANYRES32=0x0, @ANYBLOB="6c7621e5a02bc46c21b8f2f96603f7970557bb3edc952577151633fdc1f81f9b24e17392bdd7d49cfe9114ed46f233e2d58a140e95cf1141ebd7ca2481aa4731d1496956d5ae3c7b40057c021db15a220d8b36455d42f0fea44cf1ca082ab57846492d9a85dbd44b96529c546f9bbc41d5445ef57e267f72ca3b85c9bd9efbcf02"], 0x4c}}, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r7, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x41, 0x3, 0x210, 0x130, 0x0, 0x0, 0x0, 0x0, 0x200, 0x1f0, 0x1f0, 0x200, 0x1f0, 0x3, 0x0, {[{{@ip={@dev={0xac, 0x14, 0x14, 0x25}, @empty, 0x0, 0xff, 'macvlan1\x00', 'wg1\x00', {}, {}, 0x6}, 0x0, 0x70, 0xa8, 0x0, {0x0, 0xffffffffa0028000}}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x2, 0x4, 0x7}, {0x3, 0x2, 0x1}, {0x1, 0x5}, 0x10001, 0x2}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @remote, 0x8, 0xd, [0x2b, 0x10, 0x26, 0x19, 0x2c, 0x8, 0xe, 0x3e, 0x8, 0xc, 0x16, 0x25, 0xc81f, 0xd, 0x39, 0x1b], 0x0, 0x8, 0x3}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x270) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'bridge_slave_1\x00', &(0x7f0000000000)=@ethtool_sfeatures={0x3b, 0x9, [{0x81, 0x101}, {0x2d6, 0xfffffffb}, {0x60}, {0x0, 0x6}, {0x5, 0xf}, {0x6, 0x2}, {0x1, 0x4b40}, {0x2a7, 0xdc}, {0x6, 0x4}]}}) 4.00535161s ago: executing program 1 (id=13179): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, &(0x7f0000002300)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000680)={r0, 0x18000000000002a0, 0xe, 0xc00, &(0x7f00000001c0)="b9ff05000000000c5c26fc000000", 0x0, 0xfe6, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2300}, 0x50) 3.907094101s ago: executing program 3 (id=13180): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') connect$inet(0xffffffffffffffff, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x5c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9, 0x1}, {0x4}, {0xe, 0xd}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x401}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}, @TCA_INGRESS_BLOCK={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x90}, 0x4000c00) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_GET_FEATURES(r2, 0x8004f50c, &(0x7f0000000100)) r4 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000180)={0x12}) write(r3, &(0x7f0000000340), 0x11000) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x20}, 0x1, 0x0, 0x0, 0x44}, 0x4000800) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xca02}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3800000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="800002010800000008001b000000000008000d00"], 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x48, &(0x7f00000001c0)=ANY=[@ANYRESDEC=r5], 0x38) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r6, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(r6, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000005c0)="9167", 0x2}], 0x1}}, {{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000b40)="8b", 0x1}, {0x0}], 0x2}}], 0x2, 0x20048814) r7 = socket$netlink(0x10, 0x3, 0x4) writev(r7, &(0x7f0000000000)=[{0x0}], 0x1) recvmmsg(r6, 0x0, 0x0, 0x10143, 0x0) r8 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0xc, &(0x7f0000000040)={0x8604}, 0x10) getsockopt$IP_VS_SO_GET_INFO(r6, 0x0, 0x481, &(0x7f00000000c0), &(0x7f0000000100)=0xc) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="a00000001a006da800000000000000001c0000000000000000000000840013000000000000000c000000000000000000000000000000090000000000000000000000000000ebffffff0000000000000000000000000000000000070000000000000003000000000000090000000000000000000000000b0000000000000000000000000000800000000f0f00000000000000000000000000000f0f0000000000"], 0xa0}}, 0x0) 3.645602207s ago: executing program 1 (id=13181): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0xd, &(0x7f0000000000)="bc306a00bc4722e6c7dee805ec4e949208a6d5", 0x13) close(r1) syz_emit_ethernet(0x36, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000000)="89e7ee2c7cdad9b4b47380c988ca", 0xffbf}], 0x1) 3.538166036s ago: executing program 0 (id=13182): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x1, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x49, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000010c0)=ANY=[@ANYRESOCT=r1, @ANYRES64=r3, @ANYRESHEX=r2, @ANYRES32=r1], 0x48) r4 = socket$netlink(0x10, 0x3, 0x5) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000001080)={'batadv0\x00', 0x0}) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0}, &(0x7f0000000200)=0xc) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=ANY=[@ANYRES32=r5, @ANYRES32=r6, @ANYBLOB="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"], 0x154}, 0x1, 0x0, 0x0, 0x800}, 0x4000011) sendmsg$nl_generic(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000300)={&(0x7f0000001000)=ANY=[@ANYBLOB="1c0000002300646f247a5c104b4482585f5a200028bd7000fcdbdf251000000008009700", @ANYRES32=r6, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x40010}, 0x4c850) syz_emit_ethernet(0x8e, &(0x7f0000001180)={@link_local={0x3}, @multicast, @val={@val={0x88a8, 0x5, 0x1, 0x2}, {0x8100, 0x0, 0x1, 0x3}}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x81, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x1, 0x0, 0x12, 0xe7, 0x3f18, {0x17, 0x2, 0x0, 0xd, 0x7, 0x65, 0x0, 0x0, 0x11, 0x0, @rand_addr=0x64010102, @broadcast, {[@rr={0x7, 0x3, 0xfb}, @rr={0x7, 0x7, 0xda, [@initdev={0xac, 0x1e, 0x0, 0x0}]}, @timestamp_addr={0x44, 0x3c, 0x57, 0x1, 0x1, [{@multicast1, 0xffffffff}, {@local, 0x2}, {@rand_addr=0x64010100, 0xb9}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1}, {@empty, 0x1}, {@empty, 0x7}, {@loopback}]}]}}}}}}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x40000c0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x16}, {&(0x7f0000000300)="87fb74cf4d67adbbd062637f514c1f5eb18d7b442e6457a356c6cb1f71a43dfae773c8489cce5145f92615d4bdb13ef54d6ae90ec7733180fcf5adf3e13fdb05b57b748bd14eda042a97fdd84498304a504a0a159b972e8200c2d0f536a3465ec498ed12b924bd134057df36129d3ebe3dd3ce9f0671e5278143e4afa3d43f444681de1b5f9725fca34fa357fe2154981666fb9dc202fc17a0199eb1c25bdd1005e590e84783ee9894c888998dc25a83c14aeee31d114acfa0bcd235d571cd765f4b9259ba43e6fc30291d8a642146c4771898030b736aeee6b247abb0784b154e104e7dcda401f9b1736fea30a41a4153fe6a9a525bd0a3487571f914f05b590e242341ade289d8f5b842c6be4a93c2755dfd47174def782a2f8f61c068b5a012f02c0801601e860def788121e8808c01fed4c920a3698d0d684920918c95b17f76bbcb4f265c931d8f79560ff8114b70f4dd6791e2ed70cfeb89905791b88be26efe1c5c66b7b50b3d2be0dbc066dfc31618f9507f6f340b85a2f76a6dcac9d6ccc289ace5e5fecd25afe22ffa451f5e365ab33cc985f2e9d7f7fb1be4794740a94215d7db14b0ffcec19e5e3c5ae0d8578ef3b65d2a7a77a11e390a6c3a6b391061c886b961e3c2f42d62047bfe1356a44b840d3d956105f4c0fa95db08c4933f00de77cdc057c28b41fecfc8398c442be1ad065954f6c9dfeb2fd7207e8548a00a1d50bdf522d2abfdafd71723616a34830fbfa8fc81e0c2639cc12f363a4919b7a00ac8189dad3e7e54122a2ef430f623658d5e281c9a19442995bb9b0e3f7d13e3016b6f9523be196bf23bbcc5ec802f43ef8b651d688d9d5a44f35c9847e4c32bce3e9ebed2326adadc76f06a195db32c80b3090d7cd65c9d8518ba4e528c5eb5c7a1c5695b21595fa8a8621734bfda8afddd65e1f37a1990220a00fa9bd2c22b0117ceb08ae6af3c944c2eca924abfddad065d1472d0c3f742a49b1e78c669471873706ad157d831d7482b773f07b0673a6ce1e227a7a4d13744bf459434c0ab1c323a38b1a84cbf1ce9741f2b8fdcc2e073e56171603d035aacd83e71d5132831f4f1e8bf517979f132a33fd03783272e9b8c96dfa4e1d320a58d82acfc8d3d53a5a52daafe4dc8be08f4ad53e11cc21374b6ff4ff5ea2ecc5d3f7c057f74f0098e57d990090475cdaffdef0da917653ed10fb70b94b72e5b4d95cbea0fc1dd2579635ad6ab545ba4d7b6d2f5442bdb78beb6c8ed62942a439117025b4566b48d9f3a17fdf4577e8606a4bc4c26557e58312fd2d1a541ebec3e5ae28eef8b2ab0597083716dd12889335570ee7839530eee879d9b137606cd4dd7103991671b4464bb68529eb19fb7a8845e3491bfbac688a87cf0744f429ea112014402915c4c1f6bae08d689d3cb7d641d7befe8fc74a2242310a9a367a39531b4c86da5b39df524e52f33ff9c40b48cb196ffc9ca855b6e698ade8a83e52b9ddc5031ff09e1907e4f8b0d07e64e1fb8e427f8819a7be907aa216bf8e2a4c7cc87ed53bf9490d4cc788b91f3b9f705e984a7e62c7a495e8421b97c39dc954b35468f17c6682334f4e16308448f457faeffff6d1f818522fa441d3a48168bdb12ffebace436a3915b63076cb6a655718647f87eaaf313b5bbd430421eed3a2215e439600a56eac8c65291eb103326a8034662bd337ab51577d9110ec7151be5cc9c54b2a30891acac5ad006ed537dbeb8f16eecbde7cf4e71373faf3c36b772f6d7ea9346875c8cf1049d49d4f8eb01b946c11e8c8e3ab2015f282167acddcc77fff03e1be9134252af0abfe538b4d25fc4ff874b52b9fb0996b5f32b4141dbd30578ff46e13ef6c63fc1620f62cb11a3dce401993976c272a5f62fde3f2a0e654d19e7a39dcdb622b9526d2a15cc18e6f817c916a00775353dd9c8954e66d0445b59bb0f5e6e3b46447232f52a0e398b057d123ef503afcbd48544db6434d2025bfc8dab72262a4fa5426a03061e7f8966e0086ff8ab5a91ab59f19b830394ee8bc76d6fb4816b8f4cde35b7eb9d3811228d51c54828f97fd1e648196c81bc73ed56249a59f318704e84656a6cedd2b8c1e1808d1cc648749abc643131e494c01336d4a14b8609656f2c972dc23c5c2e43fe40119fb88b5ec2aade35c03646e347354c493de8ab3672ccf94af0df333c6678299129d79be0eec281c5b3858ce3995566a390b674635b356692e3e9c53a089638ba0d69e772b7b410a5ae03de12e7de755ee559e1707b7b8003aabc8e2ce03c01e3183ff2d93262f6d5ceaafecdae66bc7cb3952c5a6571d864d502f281db5a228695badca5d022fdb6da56ab15dc377d1c1f8581ff56e28c2b2a84edb629547d28275c2ed571103b4ca7cdeb0776ba9f9dffcd78d21c3d4caa9289ed199672f4e7b912068c49c817114c37d37ea03954bae87d1ddae3da2ad85feb2fbb735b75a51f7bee5c8d88cc7bf64700d1a46ec6b631ae22ac7b06730a86a26bdcb992e1c7b50142de96b14a8468e4514068a30896fc677fddefaebb125c693a8d460469c7fe535f844781940f66d6abd091191c3122d584f5b0f5b0d443713d7d5186124d73de28aca30b719d4a55e09d259bddbf16995aeb1000880890afbd24d4066b0398985a40999de22ce176348e1c1f57eaf75b92a1e4f1482e89a00ac2cc36b20e36af9ec310599c19a5b1d6f8fadba104c58c801c6633315f82ebfa88faddd0b693e2f827f586c1cc5538e93bcf10f81af6dd7ee727df3b5018c0b4e31e40d040a47503b6ace4d29a1162ce487351825255f5584aff7cbd421f85c3d9fbb3784abd9848f16028b68f0d32ed8bb80106e8cc4acb939ff88bd39976d166b2addebf628b3fcd056da2f60e1b90f7a32702954921908ebccb683622a1f574ceba6951bef5e751c338c8279318dc28e36b9fc2bb17c3ad08aceb00fc388e6db112a738f86a4a1eb11526e1b9d73250b326285ed47c4398d93a3933d9a784249b65ad7d78a1f81d96ef36493ed693045a2150a8eb43cecc0c93e7d20b15b39a0646b081c2923b816365b7fbb41683a41732d942c5aa12faf876ec7f036becde8f3295af6dacff38d076d8e06260fee167703bb610745374a2758a6b88e465ca77d1f3105ae8b6b04a1eb509fb178d6249dbbc84d5d1d069278449a89d03e4a9a395d8170c329a296cfc329798cb9b9f1078d098cf3f989fd4ec53e013fbe917df35292d44fb1f3da4da4432a1847d4721514ade8cda5e5c0b51183580fc35266a970ebba74faeda56d4dcb56df51f96ad237452cedbd0cb2bee112713c3d450835811bf3da9745136d428e148fd0932dc77c8d8e61a16c625241fad8425b4ece394eedd5f165bd94923bfa1172be8edc8a4fcaae5f77ee8cc510192b27964da09c3e84efb4bc7154da1a24da8b7e544b42278d2574687ec76143afa6cf193d52a2a7f4c20ee57b6056a1337d5e408117a6cf1ab49c8980f39597f69902085d3e8d374d44e6ab4ed1185a26be2bc7281e9cfbbeb6bed899aa1924d3faa06d95999fbeaf2337494e0c2c39eef5a73fcde84459a9ea48d4e015d9e5bb5839354967ce02f637bc8678d2595b9a918fc36b927d7501f0ac2e3471ce02b5df355689c87f191ef5390900a41deec29984e45a878ece964b0009aad561316fc3b30ce1b49266d32eb17cd30f3e17e1f59014e8c518940dd0a093d1349c1a7c2581963bbe0ba372b6426e81c33c71b2ec8141c5713e52a37fff0a417a5b259e1420d9fb6a731f5baa0cc494221947895aa8fa14745a986a366bff9d0c239a19f85372497565b5b703da16439019df5f3d29f4247fb528854c9648630f03e9dedde5a08a47728ea6a4d42e62eff6fa3bd402325e0f4387b60171c37c180f958ad80955779c899517e7ea76eed00598e01552eaaf08b723daf9d466e8c57af43a15a46528b1119f5074aa3c51f77357ebe158275bc06b89640d7ce3c0a03af01418d7dc6ae8a1be8ab08c1722d66d1e9277480b8b178447667c024f9b78f8a878a2d7cf8e83e5104f6964b2907a989abafc7d7d0df941abf3d7283b6a11d46c2911a42182ec27ab785d92946e1ee8ef44846d561850d2a98c305c382f36d4cfc9b2bfd3b86ef21a0d187adcafbec8268c7d662a34dda1c83c4967097743133bc8c587edf249f5668c34ddb112fa4eb1bea9c8f6a000f1f34428b54688a5e214a7919868b25dbe930e86a243ecf54afe0b518c647d04873d2cf62cb2ab27f00015537a4fd2ea3dc8777abdf3284622347016566da0b9c406ca8c40694e4013a53fbf2e803d51b0bbe5e9df5fc74f66be618856357ccf803c53ed0e3b3fe79f69f0ede9b565d8f7a8ce5aa8cbb4e8fa61be3fd00ffb07e45065498925c14c0b311942d4ed951ad6237aadb5405bc7b2d79e1fd295b7c2ed8efa883e44c86a5053e2f421c6d4dc0c47d3a05d911db37d6efdb8e50fb3f06139ac147bc7162c21aece79eaf72e9779f19eb5395cec3d15a7594ea70a6b373d98651d2215b210f037ea3f8a57ded74474f6fdb64a08b56af52168da70b30aee03472cd8bee5af04cad7303004a4aba464b99", 0xcb3}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x1}, 0x94) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x89e3, &(0x7f0000000080)={0x15, 0x0, 0x7, 0xb, 0xffdffffe}) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000080601e96f11597126a88536f0f8566b0400010004000000"], 0x1c}, 0x1, 0x0, 0x0, 0x24040880}, 0x14) write$cgroup_int(r9, 0x0, 0x0) mmap(&(0x7f00009c5000/0x4000)=nil, 0x4000, 0x3, 0x28012, 0xffffffffffffffff, 0x0) mmap(&(0x7f00009c5000/0x1000)=nil, 0x1000, 0x3, 0x28012, 0xffffffffffffffff, 0x0) recvmsg$unix(r8, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x2}, 0x40000100) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfffff000) sendmsg$nl_route_sched(r0, &(0x7f00000008c0)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000880)={&(0x7f00000007c0)=@deltclass={0xa0, 0x29, 0x200, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0xc, 0x2}, {0xa, 0xf}, {0xfff1, 0xffe0}}, [@tclass_kind_options=@c_htb={{0x8}, {0x74, 0x2, [@TCA_HTB_OFFLOAD={0x4}, @TCA_HTB_RATE64={0xc, 0x6, 0x400000000000000}, @TCA_HTB_CEIL64={0xc, 0x7, 0x79}, @TCA_HTB_PARMS={0x30, 0x1, {{0xa, 0x0, 0xa, 0x2, 0x1, 0x7a28}, {0x4, 0x1, 0x9, 0x1, 0x8, 0xffffffff}, 0x0, 0xe, 0x36, 0xb8c8, 0x1}}, @TCA_HTB_CEIL64={0xc, 0x7, 0x88}, @TCA_HTB_CEIL64={0xc, 0x7, 0x800}, @TCA_HTB_RATE64={0xc, 0x6, 0x9}]}}]}, 0xa0}, 0x1, 0x0, 0x0, 0x2000c010}, 0x20000800) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="40000000100003052abd70000007000000000000", @ANYRES32=0x0, @ANYBLOB="00000000063800001800128008000100767469000c000280080005000a01010208000a0044e9ae9ea1d484a520741f0a00ffe120fb5a6e6dac5e2c5adcf8251eaa8895128476512a984b8f7c5b49b77a141e26f6ed131642df8759b8565c1402600f7c91d224f3f9096e512eb3fe2c9a65d6a4f389ae57065a1ed41b9f59fcc976c0e6ae30100240ed31", @ANYRES32=r2, @ANYBLOB], 0x40}}, 0x440b0) 3.400017636s ago: executing program 2 (id=13183): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x20800, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x7, 0x7}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2, 0x4}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x0) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x66, 0x1, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r10, {0xffff, 0xe}, {0x3, 0xfff1}, {0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x8848}, 0x20004850) r11 = epoll_create1(0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="4c00000010003b15326a45000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000008000002c0012800b00010062726964676500001c0002800c002100ffffffffffffffff0c0022000104080000000000"], 0x4c}}, 0x80) r13 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ZERO(r13, 0x0, 0x48f, &(0x7f0000000b40)={0x84, @empty, 0x4e22, 0x0, 'wrr\x00', 0x12, 0x6, 0x51}, 0x2c) epoll_ctl$EPOLL_CTL_ADD(r11, 0x1, r1, &(0x7f0000000000)={0x2}) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a74000000060a0b0400000000000000000200000048000480440001800a0001006d6174636800000034000280180003000f140000a7906e8f58c2052fade1bc2c62cdeb7508000240000000000d00010064657667726f7570000000000900010073797a30000000000900020073797a32"], 0x9c}}, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x18}, 0xc) r14 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xa, 0x4, 0x6, 0xff, 0x42}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000080), 0x619, r14}, 0x38) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000300), 0x4) 3.129823119s ago: executing program 4 (id=13184): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x4001, 0x3, 0x250, 0x0, 0x0, 0x148, 0x0, 0x148, 0x1b8, 0x240, 0x240, 0x1b8, 0x240, 0x7fffffe, 0x0, {[{{@ip={@private=0xa010102, @private=0xa010101, 0x0, 0xff000000, 'ip6tnl0\x00', 'wlan1\x00', {}, {0xff}, 0x88, 0x3, 0x10}, 0x0, 0xc0, 0x120, 0x0, {}, [@common=@inet=@socket1={{0x28}}, @common=@inet=@set2={{0x28}, {{0x0, 0x4, 0x6}}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, [0xff000000, 0xffffff00, 0x0, 0xffffff00], 0x4e21, 0x4e23, 0x4e20, 0x4e23, 0x8, 0x4, 0x5f4a, 0x100, 0x6}}}, {{@ip={@empty=0x120, @empty, 0xff000000, 0xff000000, 'wlan0\x00', 'pimreg1\x00', {0xff}, {0xff}, 0xc, 0x0, 0x60}, 0x0, 0x70, 0x98}, @common=@unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x2}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2b0) 2.976052576s ago: executing program 3 (id=13185): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xaf1}, 0x8) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x44) bind$inet6(0xffffffffffffffff, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback, 0x1}, 0x1c, &(0x7f0000000380)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x885) socket$nl_route(0x10, 0x3, 0x0) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25GCALLUSERDATA(r2, 0x89e4, &(0x7f0000000600)={0x1b, "553536876577f631514b23371343eed3309911a7f0565e10da1625f340041ca89b86c6c55c266c5593ee3dd236dfd4c5940ed00176d24c6b8a75ef5f42d4d78a2233372dd0946a9e26a5926974b51cef5aa8acedf45d2b516cc557b17176992c832abeebd2341a93d64be28a6b89ca49c3f3eb20a8fc1de69313ac3f54535da6"}) bpf$MAP_CREATE(0x0, 0x0, 0x50) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="4c00000002060101000000000000000000000000050005000a000000050001000700000005000400030000000900020073797a310000000011000300686173683a6e65742c6e65740000000048225137a8016a1dcbe2e88b61a93149b574bc416dc82d1a595a42ba836857b98ad1e470e03f8e6f26255b72044124bafb57cc2269453cd65d849278e7c2137be7c4d4f277eb375149cd158e7a0d5894da5fad30819f"], 0x4c}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) sendmsg$IPSET_CMD_TEST(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="6400000009060108000000000000000006f5000505000100070000003c0007801800148014000240fc0000000000000000000000000000011800018014000240ff01000000000000000000000000000105000300070000000900020073797a31"], 0x64}}, 0x4800) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) writev(r0, &(0x7f00000006c0)=[{&(0x7f0000000080)="2e9b5b0007e03dd65193", 0xa}, {&(0x7f00000001c0)="b700001811005a", 0x7}, {&(0x7f0000000200)="37a8a6c41ef711513a5555633f6e4259616da007f3c18c191f6ffa", 0x1b}], 0x3) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x200000c, 0x3032, 0xffffffffffffffff, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=@base={0xa, 0xb, 0x42, 0x3e, 0x42}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r6}, &(0x7f0000000100), &(0x7f0000000180)}, 0x20) socket$inet_smc(0x2b, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x4, 0x7, &(0x7f00000014c0)=""/4101, 0x0, 0xc}, 0x94) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000040000000000000000a20000000000a01030000000000000000010000060900010073797a300000000040000000030a01020000000000000000011300000900030073797a320000000014000480080002400000000008000140000000000900010073797a300000000070000000060a010400000000000000000100000008000b40000000000900010073797a30000000004800048044000180090001007866726d000000003400028008000240000000050500030001000000080001400000000d080004"], 0xf8}, 0x1, 0x0, 0x0, 0x8040}, 0x0) 2.941205383s ago: executing program 4 (id=13186): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1f, 0xc, &(0x7f0000000800)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x4}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0, 0x0, 0x0, 0x0, 0xffffff80}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x20000006}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0xa6}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000}, 0x94) 2.701559511s ago: executing program 4 (id=13187): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'caif0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x2000000, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c}}]}, 0x4c}}, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000006, 0x11, r0, 0x3cd30000) ioctl$FS_IOC_RESVSP(r0, 0x40305829, &(0x7f0000000040)={0x1100, 0x2, 0x8, 0x10003}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x7, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000ae00000095"], &(0x7f0000001b80)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x62, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r0) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, &(0x7f0000000400)={'security\x00', 0x0, [0x7396, 0xffffffff, 0x657c, 0x9, 0xfe0]}, &(0x7f0000000340)=0x54) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, &(0x7f0000000200), &(0x7f0000000240)=0x4) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="250d00000023bc7f000840dea3cc9c6f2c988f58cb01"], 0x1c}, 0x1, 0x0, 0x0, 0x4024}, 0x20040000) 82.253206ms ago: executing program 1 (id=13188): socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$pppl2tp(0x18, 0x1, 0x1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, 0x0, 0x20000000) socket(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$alg(0x26, 0x5, 0x0) socket$unix(0x1, 0x2, 0x0) pipe(&(0x7f0000000200)) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0a000000050000000200000007"], 0x50) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r2, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYRES16=r3, @ANYRES32=r3], 0x44}, 0x1, 0x0, 0x0, 0x8000000}, 0x2000800) 0s ago: executing program 4 (id=13189): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) syz_open_procfs$namespace(0x0, &(0x7f0000000280)='ns/mnt\x00') connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4001, 0x1, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3e}, 0x1c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(r3, &(0x7f0000000100)={{0x3, @null, 0x1}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @default, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}]}, 0x48) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xe, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000000000000691080000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000400)=@sco, 0x80, &(0x7f00000007c0)=[{&(0x7f0000000480)="36626f38f705539af42f5fed9d08bab2661185038a6f372def7e80ec3d33e729776f14973d3572d6badb8ab1cdeef69a6a8b9d35a352b811838840c4", 0x3c}, {&(0x7f00000004c0)="c999a0b92a4bded6f34c8d6d1d5f9b17b626ff37695c1a2d04291b954f033881995dddc60d79b1ea46b0eeffbfb08ed732e1c8f807e14dc92ef5d2b1fb837db4a7247ed5c715cc7cbef262022a", 0x4d}, {&(0x7f0000000540)="0db359ae3033f5a6eb8285308f2fd5b6c4a4bfcc551db40bc36048078451c351624a813239a4ba67aae994d71a5d6021b576b914528bbd0792cb64eaec863147012fad8e519d2f8869ee2c26eb78953438836faeaf40e91ca7c01a2d2c09ac3401abd5c48151b6aa2c9316fe00385b6cfae9c745aed5029b30741e28d598ba2c38e96078e7c27043f5b9a4a84441c6970e9b7c1b5a25a91c3ba2172d38694c446b3ed7090a28367cbd5c53b8c7af1b9af707186406329cef562f7cb68f2e4d3dcbc2d22c6d2db6f3101c07b7527cfdb3509fe80f537eac30f181fa69efbeabe89e7162928c41145bef", 0xe9}, {&(0x7f0000000640)="84c4871e01ecd722d2069c1e0cfa79b4938f0f84f0a23bcd719899d888aad5b883ee69b60b8280c8e6040ea6f23156e535ffb8a79bef3c06481fb2af84dac576d12eb204e9db56d93c9f4dfe82bc2dfa163a71822d09f05a3d3b89c0f9e325959402c08735ac90e4b85ec5760ec7c68381d5257dc53218266bcd4d842a0189f5ab4c91fb7660e92b07e9e023bd204fa5dfa650424101d560f8f8969d44a41aa8b79fca43644f1c3b45475dfdf7ed7f1b949f0e6902e189214ea4e67e39d1bc20c5f80e0a525376f0bf56", 0xca}, {&(0x7f0000000740)="48092d5b05501d1a8d7a33d7e754dfcd4d87299e8bb589732d310a24728150e7407bf5555a37b01a6125eb99c3b6da1f7002e7a722a6d55f0d85f9cfc2b3ea15ca3ac79872ba21888d8a0cc625bfada1943a3e9b70ddd81e905c6618506f8d241617f3181f0520dd0bbaea2500", 0x6d}], 0x5, &(0x7f0000000840)=[@timestamping={{0x14, 0x1, 0x25, 0x4}}, @mark={{0x14}}, @timestamping={{0x14}}, @timestamping={{0x14, 0x1, 0x25, 0xffffff7f}}, @mark={{0x14, 0x1, 0x24, 0xe}}, @timestamping={{0x14, 0x1, 0x25, 0xf}}, @mark={{0x14, 0x1, 0x24, 0x5}}], 0xa8}, 0x8000) r5 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'bridge0\x00'}) r6 = epoll_create1(0x80000) r7 = socket(0x1, 0x3, 0x0) r8 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r7, &(0x7f0000000100)={0x8000000d}) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r7, &(0x7f00000000c0)={0x10000001}) close(r7) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10) read(r3, &(0x7f0000000300)=""/163, 0xa3) ioctl$sock_netdev_private(r4, 0x8914, &(0x7f0000000000)) setsockopt$ax25_SO_BINDTODEVICE(r3, 0x101, 0x19, &(0x7f00000002c0)=@netrom={'nr', 0x0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYRES16=r5, @ANYRESHEX=0x0, @ANYRESOCT], 0x50) setsockopt$ax25_SO_BINDTODEVICE(r3, 0x101, 0x19, &(0x7f0000000240)=@bpq0, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'team0\x00'}) sendmsg$802154_raw(r7, &(0x7f0000000ac0)={&(0x7f0000000940)={0x24, @short={0x2, 0x1, 0xaaa2}}, 0x14, &(0x7f0000000a80)={&(0x7f0000000980)="e2c3d2d41bbc0d89668a2d1a767e1662a1b1122fb42b572951e334140082128546dbc07e41ffeb58b9619eef588b6528f81c36646e6b883fc1499e44e4ef79309c7250685cddf9e926f088db79740aef5acc6ec1e16c91c4c0862e03f372376f2a0881ee90ef92a0aac05539456bda50d392a76c0e93b6dd4f01d0c8364bb1fd5d44dc92d8a4ba10da65e537cf3b25721e0789bd2be4b334a0f8ede126abce1969bc29ec33de9e9d42544ec0a688e3c089f4262314bdada01ee7711634895bcc8232250fedfc53b0677d69908670038c13dd312c6a0c66", 0xd7}, 0x1, 0x0, 0x0, 0x4c805}, 0x10) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x0, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x80001, 'syz1\x00', @default, 0x1, 0x0, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default]}) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="880000000308010100000000000000000a0000100900010073797a3000000000060002400008000005000300880000001c0004800800024000000000080002400000000708000240000000093c000480080001400000000508000140fffffffe050001400000000108000140000001ff08000140000004000800014000000003000004800000024000000080000001400000000e00000240000000000000024000000009000001407fffffff0000014000003f250000014000000008000002400000134f000001400000800000000240000000070000010073797a3100000000"], 0x88}}, 0x4000050) kernel console output (not intermixed with test programs): : ovf: FWM 3 0x00000003 - no destination available [ 1570.274441][T11137] netlink: 9 bytes leftover after parsing attributes in process `syz.1.12005'. [ 1570.297877][T11137] .70·: renamed from hsr0 [ 1570.310887][T11137] .70·: entered allmulticast mode [ 1570.325818][T11137] hsr_slave_0: entered allmulticast mode [ 1570.336323][T11137] hsr_slave_1: entered allmulticast mode [ 1570.349184][T11137] A link change request failed with some changes committed already. Interface .70· may have been left with an inconsistent configuration, please check. [ 1570.456608][T11141] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.12006'. [ 1570.456608][T11140] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.12006'. [ 1570.751860][T11155] netlink: 16 bytes leftover after parsing attributes in process `syz.3.12009'. [ 1570.790100][T11143] "syz.2.12007" (11143) uses obsolete ecb(arc4) skcipher [ 1570.998108][T11163] netlink: 88 bytes leftover after parsing attributes in process `syz.0.12012'. [ 1571.194314][T11173] IPVS: Unknown mcast interface: vlan0 [ 1571.203004][T11173] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.12016'. [ 1571.302466][T11175] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12017'. [ 1571.322362][T11175] netlink: 16 bytes leftover after parsing attributes in process `syz.2.12017'. [ 1571.656901][T11185] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12021'. [ 1572.658868][T11213] netlink: 148 bytes leftover after parsing attributes in process `syz.2.12033'. [ 1572.683251][T11213] netlink: 48 bytes leftover after parsing attributes in process `syz.2.12033'. [ 1572.714891][T11213] netlink: 'syz.2.12033': attribute type 8 has an invalid length. [ 1573.084561][T11235] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0 [ 1573.558327][T11256] netlink: 'syz.0.12044': attribute type 15 has an invalid length. [ 1573.761079][T22479] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1573.785972][T22479] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1573.805099][T22479] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1573.863531][T22479] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1573.920651][T11272] syzkaller1: entered promiscuous mode [ 1573.956694][T11272] syzkaller1: entered allmulticast mode [ 1574.076832][T11276] IPVS: ovf: FWM 3 0x00000003 - no destination available [ 1574.657674][ T5829] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1574.670862][ T5829] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1574.680750][ T5829] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1574.699905][ T5829] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1574.707770][ T5829] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1574.897285][T11296] lo speed is unknown, defaulting to 1000 [ 1575.626876][T11331] bond0: entered promiscuous mode [ 1575.632408][T11331] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1575.723691][T11296] lo speed is unknown, defaulting to 1000 [ 1575.732642][T11332] lo speed is unknown, defaulting to 1000 [ 1575.908488][T11346] __nla_validate_parse: 8 callbacks suppressed [ 1575.908511][T11346] netlink: 16 bytes leftover after parsing attributes in process `syz.0.12073'. [ 1576.262093][T11354] syzkaller1: entered promiscuous mode [ 1576.267954][T11354] syzkaller1: entered allmulticast mode [ 1576.309278][T11354] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12075'. [ 1576.425548][T11332] lo speed is unknown, defaulting to 1000 [ 1576.571968][T11296] chnl_net:caif_netlink_parms(): no params data found [ 1576.798026][T24429] Bluetooth: hci3: command tx timeout [ 1576.979667][T11378] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12082'. [ 1576.993068][T11296] bridge0: port 1(bridge_slave_0) entered blocking state [ 1577.021121][T11296] bridge0: port 1(bridge_slave_0) entered disabled state [ 1577.047688][T11296] bridge_slave_0: entered allmulticast mode [ 1577.069824][T11296] bridge_slave_0: entered promiscuous mode [ 1577.209943][T11296] bridge0: port 2(bridge_slave_1) entered blocking state [ 1577.229562][T11296] bridge0: port 2(bridge_slave_1) entered disabled state [ 1577.246312][T11296] bridge_slave_1: entered allmulticast mode [ 1577.265111][T11296] bridge_slave_1: entered promiscuous mode [ 1577.411022][T11296] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1577.442977][T11296] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1577.532905][T11392] bond2: entered promiscuous mode [ 1577.545519][T11392] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1577.811919][T11296] team0: Port device team_slave_0 added [ 1577.832056][T11296] team0: Port device team_slave_1 added [ 1577.845927][T11401] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12086'. [ 1577.959114][T11296] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1577.973131][T11296] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1578.011056][T11296] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1578.024486][T11412] netlink: 'syz.1.12089': attribute type 1 has an invalid length. [ 1578.037041][T11296] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1578.044493][T11296] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1578.072804][T11296] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1578.087047][T11408] netlink: 20 bytes leftover after parsing attributes in process `syz.1.12089'. [ 1578.586397][T11415] netlink: 220 bytes leftover after parsing attributes in process `syz.3.12091'. [ 1578.600409][T11416] netlink: 220 bytes leftover after parsing attributes in process `syz.3.12091'. [ 1578.705062][T11296] hsr_slave_0: entered promiscuous mode [ 1578.727996][T11296] hsr_slave_1: entered promiscuous mode [ 1578.755630][T11296] debugfs: 'hsr0' already exists in 'hsr' [ 1578.761782][T11296] Cannot create hsr debugfs directory [ 1578.877671][T24429] Bluetooth: hci3: command tx timeout [ 1578.885189][T11424] syzkaller0: entered promiscuous mode [ 1578.905916][T11424] syzkaller0: entered allmulticast mode [ 1579.225011][T11439] bond5: entered promiscuous mode [ 1579.230970][T11439] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1579.367573][T11445] netlink: 'syz.3.12100': attribute type 4 has an invalid length. [ 1579.377933][T11446] netlink: 'syz.3.12100': attribute type 4 has an invalid length. [ 1579.533608][T11453] vlan1: entered promiscuous mode [ 1579.668162][T11464] netlink: 28 bytes leftover after parsing attributes in process `syz.1.12105'. [ 1579.678038][T11464] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12105'. [ 1579.876378][T11465] bridge13: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 1579.904575][T11458] lo speed is unknown, defaulting to 1000 [ 1580.123094][T11477] netlink: 'syz.1.12108': attribute type 1 has an invalid length. [ 1580.123274][T11479] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 1580.201994][T11477] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1580.364943][T11477] bond3: (slave ip6gretap1): making interface the new active one [ 1580.416977][T11477] bond3: (slave ip6gretap1): Enslaving as an active interface with an up link [ 1580.438921][T11481] bond3: entered allmulticast mode [ 1580.455906][T11481] ip6gretap1: entered allmulticast mode [ 1580.468168][T11458] lo speed is unknown, defaulting to 1000 [ 1580.708341][T11490] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12112'. [ 1580.720255][T11490] netlink: 'syz.0.12112': attribute type 30 has an invalid length. [ 1580.957290][T24429] Bluetooth: hci3: command tx timeout [ 1581.090410][T22467] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1581.106347][T11490] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12112'. [ 1581.115444][T11490] netlink: 'syz.0.12112': attribute type 30 has an invalid length. [ 1581.121508][T22467] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1581.163688][T22467] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1581.234490][T22467] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1581.342998][T11296] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1581.448589][T11296] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1581.531882][T11296] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1581.711532][T11296] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1581.758308][T11516] tipc: Enabled bearer , priority 0 [ 1582.004202][T11511] syzkaller0: entered promiscuous mode [ 1582.096190][T11511] syzkaller0: entered allmulticast mode [ 1582.106513][T11511] tipc: Resetting bearer [ 1582.137601][T11522] xt_NFQUEUE: number of total queues is 0 [ 1582.208157][T11515] lo speed is unknown, defaulting to 1000 [ 1582.341477][T11533] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12123'. [ 1582.569694][T11536] netlink: 88 bytes leftover after parsing attributes in process `syz.2.12124'. [ 1582.681472][T11296] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1582.759251][T11296] 8021q: adding VLAN 0 to HW filter on device team0 [ 1582.798059][T22461] bridge0: port 1(bridge_slave_0) entered blocking state [ 1582.805305][T22461] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1582.860822][T22461] bridge0: port 2(bridge_slave_1) entered blocking state [ 1582.868100][T22461] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1582.981932][T11515] lo speed is unknown, defaulting to 1000 [ 1583.038958][T24429] Bluetooth: hci3: command tx timeout [ 1583.059122][T11551] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12128'. [ 1583.340980][T11560] FAULT_INJECTION: forcing a failure. [ 1583.340980][T11560] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1583.379107][T11560] CPU: 0 UID: 0 PID: 11560 Comm: syz.2.12132 Not tainted syzkaller #0 PREEMPT(full) [ 1583.379137][T11560] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1583.379150][T11560] Call Trace: [ 1583.379159][T11560] [ 1583.379168][T11560] dump_stack_lvl+0xe8/0x150 [ 1583.379203][T11560] should_fail_ex+0x412/0x560 [ 1583.379236][T11560] _copy_from_user+0x2d/0xb0 [ 1583.379268][T11560] __copy_msghdr+0x3c5/0x5b0 [ 1583.379297][T11560] ___sys_sendmsg+0x213/0x360 [ 1583.379324][T11560] ? __pfx____sys_sendmsg+0x10/0x10 [ 1583.379352][T11560] ? kstrtouint+0x6e/0xe0 [ 1583.379411][T11560] ? __fget_files+0x2a/0x420 [ 1583.379439][T11560] ? __fget_files+0x3a0/0x420 [ 1583.379479][T11560] __sys_sendmmsg+0x27c/0x4e0 [ 1583.379506][T11560] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1583.379524][T11560] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 1583.379583][T11560] ? ksys_write+0x242/0x270 [ 1583.379607][T11560] ? __pfx_ksys_write+0x10/0x10 [ 1583.379637][T11560] __x64_sys_sendmmsg+0xa0/0xc0 [ 1583.379660][T11560] do_syscall_64+0x14d/0xf80 [ 1583.379687][T11560] ? trace_irq_disable+0x3b/0x150 [ 1583.379715][T11560] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1583.379736][T11560] ? clear_bhb_loop+0x40/0x90 [ 1583.379761][T11560] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1583.379782][T11560] RIP: 0033:0x7f8ce539c799 [ 1583.379801][T11560] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1583.379819][T11560] RSP: 002b:00007f8ce6224028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1583.379842][T11560] RAX: ffffffffffffffda RBX: 00007f8ce5615fa0 RCX: 00007f8ce539c799 [ 1583.379858][T11560] RDX: 0000000000000001 RSI: 0000200000007140 RDI: 0000000000000003 [ 1583.379872][T11560] RBP: 00007f8ce6224090 R08: 0000000000000000 R09: 0000000000000000 [ 1583.379885][T11560] R10: 0000000000008010 R11: 0000000000000246 R12: 0000000000000001 [ 1583.379898][T11560] R13: 00007f8ce5616038 R14: 00007f8ce5615fa0 R15: 00007ffd364da6e8 [ 1583.379931][T11560] [ 1583.677296][T11570] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12134'. [ 1583.987125][T11296] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1584.436410][T11592] netlink: 36 bytes leftover after parsing attributes in process `syz.0.12139'. [ 1584.469115][T11515] tipc: Resetting bearer [ 1587.049378][T11515] tipc: Disabling bearer [ 1587.066557][T11595] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 1587.307414][T11611] netlink: 96 bytes leftover after parsing attributes in process `syz.0.12144'. [ 1587.366953][T11613] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12145'. [ 1587.398524][T11613] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12145'. [ 1587.428276][T11618] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12148'. [ 1587.445177][T11613] netlink: 348 bytes leftover after parsing attributes in process `syz.3.12145'. [ 1587.465834][T11618] netlink: 'syz.2.12148': attribute type 30 has an invalid length. [ 1587.505220][T11613] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12145'. [ 1587.539042][T11618] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12148'. [ 1587.540307][T22467] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1587.572602][T11618] netlink: 'syz.2.12148': attribute type 30 has an invalid length. [ 1587.581336][T11296] veth0_vlan: entered promiscuous mode [ 1587.587188][T11613] netlink: 348 bytes leftover after parsing attributes in process `syz.3.12145'. [ 1587.600263][T11613] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12145'. [ 1587.613350][T22467] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1587.634471][T22467] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1587.691712][T22467] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1587.721732][T11296] veth1_vlan: entered promiscuous mode [ 1587.824602][T11296] veth0_macvtap: entered promiscuous mode [ 1587.858486][T11296] veth1_macvtap: entered promiscuous mode [ 1587.954015][T11296] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1587.991698][T11296] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1588.036732][T22461] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1588.067832][T22461] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1588.093752][T22461] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1588.113704][T11638] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12153'. [ 1588.148260][T11638] netlink: 'syz.2.12153': attribute type 1 has an invalid length. [ 1588.156915][T11638] netlink: 'syz.2.12153': attribute type 2 has an invalid length. [ 1588.164870][T22461] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1588.171461][T11641] FAULT_INJECTION: forcing a failure. [ 1588.171461][T11641] name failslab, interval 1, probability 0, space 0, times 0 [ 1588.207561][T11641] CPU: 0 UID: 0 PID: 11641 Comm: syz.1.12155 Not tainted syzkaller #0 PREEMPT(full) [ 1588.207589][T11641] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1588.207602][T11641] Call Trace: [ 1588.207610][T11641] [ 1588.207619][T11641] dump_stack_lvl+0xe8/0x150 [ 1588.207653][T11641] should_fail_ex+0x412/0x560 [ 1588.207685][T11641] should_failslab+0xa8/0x100 [ 1588.207713][T11641] __kmalloc_noprof+0xe8/0x760 [ 1588.207734][T11641] ? __lock_acquire+0x6b5/0x2cf0 [ 1588.207762][T11641] ? sock_kmalloc+0xd6/0x160 [ 1588.207789][T11641] sock_kmalloc+0xd6/0x160 [ 1588.207812][T11641] ____sys_sendmsg+0x1c2/0x9f0 [ 1588.207841][T11641] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1588.207871][T11641] ? import_iovec+0x73/0xa0 [ 1588.207903][T11641] ___sys_sendmsg+0x2a5/0x360 [ 1588.207931][T11641] ? __pfx____sys_sendmsg+0x10/0x10 [ 1588.207957][T11641] ? kstrtouint+0x6e/0xe0 [ 1588.208015][T11641] ? __fget_files+0x2a/0x420 [ 1588.208042][T11641] ? __fget_files+0x3a0/0x420 [ 1588.208080][T11641] __sys_sendmmsg+0x27c/0x4e0 [ 1588.208105][T11641] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1588.208124][T11641] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 1588.208192][T11641] ? ksys_write+0x242/0x270 [ 1588.208216][T11641] ? __pfx_ksys_write+0x10/0x10 [ 1588.208246][T11641] __x64_sys_sendmmsg+0xa0/0xc0 [ 1588.208270][T11641] do_syscall_64+0x14d/0xf80 [ 1588.208298][T11641] ? trace_irq_disable+0x3b/0x150 [ 1588.208326][T11641] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1588.208348][T11641] ? clear_bhb_loop+0x40/0x90 [ 1588.208374][T11641] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1588.208396][T11641] RIP: 0033:0x7f75cc59c799 [ 1588.208417][T11641] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1588.208435][T11641] RSP: 002b:00007f75ca7f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1588.208458][T11641] RAX: ffffffffffffffda RBX: 00007f75cc815fa0 RCX: 00007f75cc59c799 [ 1588.208474][T11641] RDX: 0000000000000001 RSI: 0000200000007140 RDI: 0000000000000003 [ 1588.208488][T11641] RBP: 00007f75ca7f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1588.208501][T11641] R10: 0000000000008010 R11: 0000000000000246 R12: 0000000000000001 [ 1588.208515][T11641] R13: 00007f75cc816038 R14: 00007f75cc815fa0 R15: 00007ffdf65856e8 [ 1588.208550][T11641] [ 1588.818970][T11646] netlink: 'syz.1.12156': attribute type 30 has an invalid length. [ 1588.836615][ T1907] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1588.845020][ T1907] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1588.917791][T11646] netlink: 'syz.1.12156': attribute type 30 has an invalid length. [ 1589.051749][T11649] lo speed is unknown, defaulting to 1000 [ 1589.083080][ T1907] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1589.119233][ T1907] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1589.291230][T11663] IPVS: ovf: FWM 3 0x00000003 - no destination available [ 1589.384964][T11649] lo speed is unknown, defaulting to 1000 [ 1590.243137][T11701] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 1590.256835][T11701] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1590.552564][T11695] bond3: entered promiscuous mode [ 1590.571480][T11695] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1591.402436][T11724] syzkaller0: entered promiscuous mode [ 1591.408404][T11724] syzkaller0: entered allmulticast mode [ 1592.225157][T11750] xt_NFQUEUE: number of total queues is 0 [ 1592.379756][T11754] __nla_validate_parse: 8 callbacks suppressed [ 1592.379778][T11754] netlink: 36 bytes leftover after parsing attributes in process `syz.2.12189'. [ 1592.706782][T11758] netlink: 24 bytes leftover after parsing attributes in process `syz.1.12190'. [ 1592.738205][T11757] netlink: 24 bytes leftover after parsing attributes in process `syz.1.12190'. [ 1594.009929][ T1753] block nbd2: Possible stuck request ffff888026b50000: control (read@0,1024B). Runtime 1080 seconds [ 1594.021947][ T1753] block nbd2: Possible stuck request ffff888026b50200: control (read@1024,1024B). Runtime 1080 seconds [ 1594.037222][ T1753] block nbd2: Possible stuck request ffff888026b50400: control (read@2048,1024B). Runtime 1080 seconds [ 1594.050030][ T1753] block nbd2: Possible stuck request ffff888026b50600: control (read@3072,1024B). Runtime 1080 seconds [ 1594.637724][T11763] netlink: 32 bytes leftover after parsing attributes in process `syz.0.12192'. [ 1594.686925][T11763] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1594.853141][T11774] FAULT_INJECTION: forcing a failure. [ 1594.853141][T11774] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1594.896516][T11774] CPU: 0 UID: 0 PID: 11774 Comm: syz.4.12196 Not tainted syzkaller #0 PREEMPT(full) [ 1594.896548][T11774] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1594.896560][T11774] Call Trace: [ 1594.896569][T11774] [ 1594.896579][T11774] dump_stack_lvl+0xe8/0x150 [ 1594.896613][T11774] should_fail_ex+0x412/0x560 [ 1594.896648][T11774] _copy_from_user+0x2d/0xb0 [ 1594.896681][T11774] ____sys_sendmsg+0x308/0x9f0 [ 1594.896715][T11774] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1594.896747][T11774] ? import_iovec+0x73/0xa0 [ 1594.896783][T11774] ___sys_sendmsg+0x2a5/0x360 [ 1594.896811][T11774] ? __pfx____sys_sendmsg+0x10/0x10 [ 1594.896840][T11774] ? kstrtouint+0x6e/0xe0 [ 1594.896893][T11774] ? __fget_files+0x2a/0x420 [ 1594.896923][T11774] ? __fget_files+0x3a0/0x420 [ 1594.896963][T11774] __sys_sendmmsg+0x27c/0x4e0 [ 1594.896991][T11774] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1594.897011][T11774] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 1594.897072][T11774] ? ksys_write+0x242/0x270 [ 1594.897097][T11774] ? __pfx_ksys_write+0x10/0x10 [ 1594.897137][T11774] __x64_sys_sendmmsg+0xa0/0xc0 [ 1594.897162][T11774] do_syscall_64+0x14d/0xf80 [ 1594.897190][T11774] ? trace_irq_disable+0x3b/0x150 [ 1594.897220][T11774] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1594.897241][T11774] ? clear_bhb_loop+0x40/0x90 [ 1594.897267][T11774] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1594.897288][T11774] RIP: 0033:0x7fcbddb9c799 [ 1594.897309][T11774] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1594.897327][T11774] RSP: 002b:00007fcbde9d3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1594.897351][T11774] RAX: ffffffffffffffda RBX: 00007fcbdde15fa0 RCX: 00007fcbddb9c799 [ 1594.897368][T11774] RDX: 0000000000000001 RSI: 0000200000007140 RDI: 0000000000000003 [ 1594.897382][T11774] RBP: 00007fcbde9d3090 R08: 0000000000000000 R09: 0000000000000000 [ 1594.897396][T11774] R10: 0000000000008010 R11: 0000000000000246 R12: 0000000000000001 [ 1594.897410][T11774] R13: 00007fcbdde16038 R14: 00007fcbdde15fa0 R15: 00007ffdccd0bb28 [ 1594.897450][T11774] [ 1595.379138][T11785] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12199'. [ 1595.716698][T11802] pim6reg0: tun_chr_ioctl cmd 1074025677 [ 1595.722652][T11802] pim6reg0: linktype set to 773 [ 1595.794894][T11804] xt_ecn: cannot match TCP bits for non-tcp packets [ 1595.875258][T11804] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1596.003933][T11804] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1596.148939][T11804] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1596.248527][T11817] netlink: 28 bytes leftover after parsing attributes in process `syz.2.12209'. [ 1596.273490][T11817] netlink: 32 bytes leftover after parsing attributes in process `syz.2.12209'. [ 1596.319300][T11817] netlink: 28 bytes leftover after parsing attributes in process `syz.2.12209'. [ 1596.339779][T11817] netlink: 32 bytes leftover after parsing attributes in process `syz.2.12209'. [ 1596.372210][T11804] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1596.535576][T22479] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1596.637186][T22467] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1596.664974][T11833] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12215'. [ 1596.753039][T22483] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1596.777349][T22483] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1596.855902][T11828] lo speed is unknown, defaulting to 1000 [ 1597.147877][T11856] ipvlan2: entered promiscuous mode [ 1597.235973][ T9164] lec:lec_start_xmit: lec0:No lecd attached [ 1597.302880][T11859] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 1597.640511][T11828] lo speed is unknown, defaulting to 1000 [ 1597.752330][T11867] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1598.074292][T11870] syzkaller0: entered promiscuous mode [ 1598.080407][T11870] syzkaller0: entered allmulticast mode [ 1601.179418][T11908] netlink: 'syz.4.12237': attribute type 10 has an invalid length. [ 1601.220655][T11908] netlink: 40 bytes leftover after parsing attributes in process `syz.4.12237'. [ 1601.275956][T11908] dummy0: entered promiscuous mode [ 1601.282448][T11908] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 1601.547765][T11921] Cannot find set identified by id 0 to match [ 1601.601768][T11922] vlan1: entered promiscuous mode [ 1602.004755][T11938] netlink: 96 bytes leftover after parsing attributes in process `syz.2.12250'. [ 1602.288692][T11950] netlink: 'syz.0.12253': attribute type 12 has an invalid length. [ 1602.876233][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5640 ms [ 1602.884322][ C1] lec:lec_tx_timeout: lec0 [ 1603.156418][T11961] syzkaller1: entered promiscuous mode [ 1603.162196][T11961] syzkaller1: entered allmulticast mode [ 1603.575930][T11978] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 1603.584043][T11978] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1603.606990][T11987] netlink: 12 bytes leftover after parsing attributes in process `syz.3.12262'. [ 1603.730080][T11982] bond2: entered promiscuous mode [ 1603.746218][T11982] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1603.803150][T11992] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12264'. [ 1603.841983][T11992] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12264'. [ 1604.091903][T12004] netlink: 'syz.4.12268': attribute type 3 has an invalid length. [ 1604.110519][T12006] RDS: rds_bind could not find a transport for ::ffff:172.20.20.40, load rds_tcp or rds_rdma? [ 1604.122144][T12004] netlink: 666 bytes leftover after parsing attributes in process `syz.4.12268'. [ 1604.399950][T11954] Bluetooth: hci5: command 0x0406 tx timeout [ 1604.632666][T12020] netlink: 396 bytes leftover after parsing attributes in process `syz.4.12272'. [ 1604.665831][T12020] openvswitch: netlink: Flow key attr not present in new flow. [ 1604.674687][T12020] netlink: 16 bytes leftover after parsing attributes in process `syz.4.12272'. [ 1604.718196][T12020] netlink: 4 bytes leftover after parsing attributes in process `syz.4.12272'. [ 1605.311443][T12044] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12281'. [ 1605.673992][T12059] netlink: 'syz.3.12287': attribute type 30 has an invalid length. [ 1605.698580][T12059] netlink: 'syz.3.12287': attribute type 30 has an invalid length. [ 1605.699013][T22483] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1605.719254][T22483] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1605.741026][T22483] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1605.779759][T22483] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1606.022546][T12076] ip6gre0: Caught tx_queue_len zero misconfig [ 1606.031260][T12069] netlink: 'syz.1.12291': attribute type 17 has an invalid length. [ 1606.064186][T12076] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 1606.128471][T12069] 8021q: adding VLAN 0 to HW filter on device team0 [ 1606.159155][T12069] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1606.169959][T12078] set match dimension is over the limit! [ 1606.264628][T12080] netlink: 'syz.0.12294': attribute type 1 has an invalid length. [ 1606.457665][T12080] bond6: entered promiscuous mode [ 1606.511492][T12080] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1606.574160][T12085] bond6: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1606.597086][T12085] bond6: (slave ipvlan0): The slave device specified does not support setting the MAC address [ 1606.646790][T12085] bond6: (slave ipvlan0): Setting fail_over_mac to active for active-backup mode [ 1607.237393][T12116] set match dimension is over the limit! [ 1607.279393][T12118] vlan2: entered allmulticast mode [ 1607.297753][T12118] bridge0: port 3(vlan2) entered blocking state [ 1607.316885][T12118] bridge0: port 3(vlan2) entered disabled state [ 1607.348643][T12118] vlan2: entered promiscuous mode [ 1607.441998][ T1300] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 1607.454084][ T1300] lec:lec_start_xmit: lec0:No lecd attached [ 1607.539897][T12123] netlink: 'syz.2.12307': attribute type 6 has an invalid length. [ 1607.813739][T12138] __nla_validate_parse: 5 callbacks suppressed [ 1607.813761][T12138] netlink: 36 bytes leftover after parsing attributes in process `syz.4.12314'. [ 1608.005209][T12143] lo speed is unknown, defaulting to 1000 [ 1608.019364][T12150] netlink: 24 bytes leftover after parsing attributes in process `syz.0.12317'. [ 1608.154751][T12151] syzkaller0: entered promiscuous mode [ 1608.173616][T12151] syzkaller0: entered allmulticast mode [ 1608.187364][T12155] netlink: 'syz.4.12318': attribute type 10 has an invalid length. [ 1608.234137][T12155] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1608.259497][T12155] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 1608.879114][T12164] netlink: 'syz.2.12321': attribute type 13 has an invalid length. [ 1608.887612][T12164] netlink: 'syz.2.12321': attribute type 17 has an invalid length. [ 1609.048048][T12166] netlink: 28 bytes leftover after parsing attributes in process `syz.1.12322'. [ 1609.057573][T12166] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12322'. [ 1611.205861][T12159] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 1611.210025][T12143] lo speed is unknown, defaulting to 1000 [ 1611.314117][T12162] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 1611.493803][T12164] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1611.536590][T12164] 8021q: adding VLAN 0 to HW filter on device team0 [ 1611.564177][T12164] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1611.622921][ T1907] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1611.655764][ T1907] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1611.702350][T12186] netlink: 36 bytes leftover after parsing attributes in process `syz.4.12328'. [ 1611.729676][ T1907] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1611.747361][ T1907] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1611.988423][T12193] netlink: 40 bytes leftover after parsing attributes in process `syz.4.12331'. [ 1612.067622][T16289] IPVS: starting estimator thread 0... [ 1612.091874][T12198] ip6tnl2: entered allmulticast mode [ 1612.179911][T12201] IPVS: using max 27 ests per chain, 64800 per kthread [ 1612.452321][T12209] netlink: 4 bytes leftover after parsing attributes in process `syz.2.12337'. [ 1612.480461][T12207] lo speed is unknown, defaulting to 1000 [ 1612.875846][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5420 ms [ 1612.883957][ C1] lec:lec_tx_timeout: lec0 [ 1612.892679][T12223] netlink: 36 bytes leftover after parsing attributes in process `syz.3.12341'. [ 1612.972662][T12226] netdevsim netdevsim4 netdevsim0: IPsec offload requires 128 bit authentication [ 1613.260380][T12234] netlink: 88 bytes leftover after parsing attributes in process `syz.3.12346'. [ 1613.279493][T12232] netlink: 'syz.0.12344': attribute type 13 has an invalid length. [ 1613.305947][T12232] netlink: 'syz.0.12344': attribute type 27 has an invalid length. [ 1613.458443][T12207] lo speed is unknown, defaulting to 1000 [ 1613.630879][T12243] bridge0: port 2(bridge_slave_1) entered disabled state [ 1613.638812][T12243] bridge0: port 1(bridge_slave_0) entered disabled state [ 1613.660146][T12247] netlink: 'syz.0.12351': attribute type 1 has an invalid length. [ 1613.783640][T12251] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12351'. [ 1613.784960][T12243] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1613.814167][T12243] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1614.039551][T12247] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1614.060422][T12249] bond7: (slave gretap1): making interface the new active one [ 1614.070693][T12249] bond7: (slave gretap1): Enslaving as an active interface with an up link [ 1614.122361][T12250] bond4: option min_links: invalid value (18446744073709551612) [ 1614.134177][T12250] bond4: option min_links: allowed values 0 - 2147483647 [ 1614.157909][T12250] bond4 (unregistering): Released all slaves [ 1614.211826][T12251] bond7 (unregistering): (slave gretap1): Releasing active interface [ 1614.240188][T12258] IPVS: ovf: FWM 3 0x00000003 - no destination available [ 1614.278507][T12251] bond7 (unregistering): Released all slaves [ 1614.305112][T22480] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1614.343071][T22480] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1614.404643][T12263] netlink: 96 bytes leftover after parsing attributes in process `syz.3.12354'. [ 1614.424636][T22480] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1614.465961][T22480] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1614.617843][T12269] netlink: 36 bytes leftover after parsing attributes in process `syz.0.12356'. [ 1614.849547][T12278] x_tables: ip_tables: HMARK.0 target: invalid size 64 (kernel) != (user) 0 [ 1615.056437][T12282] netlink: 'syz.0.12361': attribute type 12 has an invalid length. [ 1615.286506][T12286] tls_set_device_offload_rx: netdev not found [ 1615.593736][T12300] netlink: 'syz.3.12367': attribute type 5 has an invalid length. [ 1615.604760][T12300] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12367'. [ 1615.781878][T12304] netlink: 36 bytes leftover after parsing attributes in process `syz.2.12370'. [ 1615.805397][T12309] netlink: 16 bytes leftover after parsing attributes in process `syz.3.12372'. [ 1616.043943][T12320] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12377'. [ 1616.103964][T12321] netlink: 96 bytes leftover after parsing attributes in process `syz.3.12374'. [ 1616.876592][T12355] xt_CT: No such helper "netbios-ns" [ 1617.050384][T12366] netlink: 'syz.2.12388': attribute type 1 has an invalid length. [ 1617.070885][T12366] netlink: 'syz.2.12388': attribute type 2 has an invalid length. [ 1617.090338][T12366] FAULT_INJECTION: forcing a failure. [ 1617.090338][T12366] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1617.124078][T12366] CPU: 1 UID: 0 PID: 12366 Comm: syz.2.12388 Not tainted syzkaller #0 PREEMPT(full) [ 1617.124109][T12366] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1617.124122][T12366] Call Trace: [ 1617.124131][T12366] [ 1617.124141][T12366] dump_stack_lvl+0xe8/0x150 [ 1617.124177][T12366] should_fail_ex+0x412/0x560 [ 1617.124210][T12366] _copy_from_user+0x2d/0xb0 [ 1617.124243][T12366] ___sys_sendmsg+0x1c6/0x360 [ 1617.124273][T12366] ? __pfx____sys_sendmsg+0x10/0x10 [ 1617.124346][T12366] __sys_sendmmsg+0x27c/0x4e0 [ 1617.124375][T12366] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1617.124394][T12366] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 1617.124452][T12366] ? ksys_write+0x242/0x270 [ 1617.124478][T12366] ? __pfx_ksys_write+0x10/0x10 [ 1617.124508][T12366] __x64_sys_sendmmsg+0xa0/0xc0 [ 1617.124532][T12366] do_syscall_64+0x14d/0xf80 [ 1617.124561][T12366] ? trace_irq_disable+0x3b/0x150 [ 1617.124588][T12366] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1617.124608][T12366] ? clear_bhb_loop+0x40/0x90 [ 1617.124634][T12366] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1617.124655][T12366] RIP: 0033:0x7f8ce539c799 [ 1617.124675][T12366] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1617.124694][T12366] RSP: 002b:00007f8ce6224028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1617.124717][T12366] RAX: ffffffffffffffda RBX: 00007f8ce5615fa0 RCX: 00007f8ce539c799 [ 1617.124732][T12366] RDX: 04000000000001f2 RSI: 0000200000000000 RDI: 0000000000000009 [ 1617.124746][T12366] RBP: 00007f8ce6224090 R08: 0000000000000000 R09: 0000000000000000 [ 1617.124759][T12366] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1617.124772][T12366] R13: 00007f8ce5616038 R14: 00007f8ce5615fa0 R15: 00007ffd364da6e8 [ 1617.124806][T12366] [ 1617.379456][T12370] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 1617.436874][T12372] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1536) ! [ 1617.729945][T12385] FAULT_INJECTION: forcing a failure. [ 1617.729945][T12385] name failslab, interval 1, probability 0, space 0, times 0 [ 1617.747840][T12385] CPU: 1 UID: 0 PID: 12385 Comm: syz.0.12396 Not tainted syzkaller #0 PREEMPT(full) [ 1617.747870][T12385] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1617.747883][T12385] Call Trace: [ 1617.747891][T12385] [ 1617.747901][T12385] dump_stack_lvl+0xe8/0x150 [ 1617.747935][T12385] should_fail_ex+0x412/0x560 [ 1617.747967][T12385] should_failslab+0xa8/0x100 [ 1617.747996][T12385] __kvmalloc_node_noprof+0x178/0x8a0 [ 1617.748021][T12385] ? bpf_test_run_xdp_live+0x1f2/0x1cf0 [ 1617.748061][T12385] bpf_test_run_xdp_live+0x1f2/0x1cf0 [ 1617.748106][T12385] ? bpf_dispatcher_change_prog+0xae0/0xd70 [ 1617.748165][T12385] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 1617.748199][T12385] ? __pfx_autoremove_wake_function+0x10/0x10 [ 1617.748228][T12385] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 1617.748277][T12385] ? 0xffffffffa0201890 [ 1617.748326][T12385] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 1617.748367][T12385] ? _copy_from_user+0x94/0xb0 [ 1617.748397][T12385] ? bpf_test_init+0x113/0x150 [ 1617.748422][T12385] ? xdp_convert_md_to_buff+0x5b/0x330 [ 1617.748453][T12385] bpf_prog_test_run_xdp+0x81c/0x1160 [ 1617.748499][T12385] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 1617.748532][T12385] ? __fget_files+0x2a/0x420 [ 1617.748568][T12385] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 1617.748598][T12385] bpf_prog_test_run+0x2c7/0x340 [ 1617.748624][T12385] __sys_bpf+0x643/0x950 [ 1617.748658][T12385] ? __pfx___sys_bpf+0x10/0x10 [ 1617.748706][T12385] ? ksys_write+0x242/0x270 [ 1617.748732][T12385] ? __pfx_ksys_write+0x10/0x10 [ 1617.748762][T12385] __x64_sys_bpf+0x7c/0x90 [ 1617.748791][T12385] do_syscall_64+0x14d/0xf80 [ 1617.748819][T12385] ? trace_irq_disable+0x3b/0x150 [ 1617.748848][T12385] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1617.748871][T12385] ? clear_bhb_loop+0x40/0x90 [ 1617.748897][T12385] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1617.748918][T12385] RIP: 0033:0x7ff81eb9c799 [ 1617.748937][T12385] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1617.748956][T12385] RSP: 002b:00007ff81fa5d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1617.748980][T12385] RAX: ffffffffffffffda RBX: 00007ff81ee16090 RCX: 00007ff81eb9c799 [ 1617.748995][T12385] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 1617.749010][T12385] RBP: 00007ff81fa5d090 R08: 0000000000000000 R09: 0000000000000000 [ 1617.749023][T12385] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1617.749037][T12385] R13: 00007ff81ee16128 R14: 00007ff81ee16090 R15: 00007ffff34b3948 [ 1617.749081][T12385] [ 1618.113863][T12399] __nla_validate_parse: 4 callbacks suppressed [ 1618.113886][T12399] netlink: 96 bytes leftover after parsing attributes in process `syz.2.12401'. [ 1618.184907][T12380] bridge0: port 5(vlan0) entered disabled state [ 1618.191473][T12380] bridge0: port 4(dummy0) entered disabled state [ 1618.262459][ T6831] lo speed is unknown, defaulting to 1000 [ 1618.268671][ T6831] syz2: Port: 1 Link DOWN [ 1618.334011][T12397] netlink: 236 bytes leftover after parsing attributes in process `syz.1.12399'. [ 1618.348075][T12375] delete_channel: no stack [ 1618.416229][T12386] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12399'. [ 1618.436315][T12386] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 1618.447537][T22479] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1618.456328][T22479] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1618.490649][T22479] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1618.518989][T22479] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1618.638942][T12410] netlink: 'syz.0.12403': attribute type 1 has an invalid length. [ 1618.647344][T12410] netlink: 'syz.0.12403': attribute type 1 has an invalid length. [ 1618.763901][T12410] syzkaller0: entered promiscuous mode [ 1618.778721][T12410] syzkaller0: entered allmulticast mode [ 1618.810960][T12425] netlink: 88 bytes leftover after parsing attributes in process `syz.1.12407'. [ 1619.582309][T12432] netlink: 44 bytes leftover after parsing attributes in process `syz.4.12410'. [ 1621.473684][T12441] netlink: 24 bytes leftover after parsing attributes in process `syz.2.12413'. [ 1621.499362][T12440] netlink: 24 bytes leftover after parsing attributes in process `syz.4.12412'. [ 1621.555613][T12443] xt_NFQUEUE: number of total queues is 0 [ 1621.700124][T12454] netlink: 36 bytes leftover after parsing attributes in process `syz.0.12415'. [ 1621.708251][T12450] netlink: 'syz.2.12417': attribute type 1 has an invalid length. [ 1621.734479][T12450] netlink: 'syz.2.12417': attribute type 2 has an invalid length. [ 1621.765314][T12450] FAULT_INJECTION: forcing a failure. [ 1621.765314][T12450] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1621.794905][T12450] CPU: 0 UID: 0 PID: 12450 Comm: syz.2.12417 Not tainted syzkaller #0 PREEMPT(full) [ 1621.794935][T12450] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1621.794958][T12450] Call Trace: [ 1621.794967][T12450] [ 1621.794976][T12450] dump_stack_lvl+0xe8/0x150 [ 1621.795010][T12450] should_fail_ex+0x412/0x560 [ 1621.795043][T12450] _copy_from_user+0x2d/0xb0 [ 1621.795075][T12450] kstrtouint_from_user+0xd6/0x180 [ 1621.795104][T12450] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 1621.795149][T12450] proc_fail_nth_write+0x8e/0x210 [ 1621.795182][T12450] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1621.795218][T12450] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1621.795250][T12450] vfs_write+0x29a/0xb90 [ 1621.795282][T12450] ? __pfx_vfs_write+0x10/0x10 [ 1621.795307][T12450] ? __fget_files+0x2a/0x420 [ 1621.795343][T12450] ? __fget_files+0x3a0/0x420 [ 1621.795371][T12450] ? __fget_files+0x2a/0x420 [ 1621.795411][T12450] ksys_write+0x150/0x270 [ 1621.795436][T12450] ? __pfx_ksys_write+0x10/0x10 [ 1621.795473][T12450] do_syscall_64+0x14d/0xf80 [ 1621.795503][T12450] ? trace_irq_disable+0x3b/0x150 [ 1621.795533][T12450] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1621.795555][T12450] ? clear_bhb_loop+0x40/0x90 [ 1621.795580][T12450] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1621.795602][T12450] RIP: 0033:0x7f8ce535cfce [ 1621.795627][T12450] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1621.795646][T12450] RSP: 002b:00007f8ce6223fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1621.795669][T12450] RAX: ffffffffffffffda RBX: 00007f8ce62246c0 RCX: 00007f8ce535cfce [ 1621.795686][T12450] RDX: 0000000000000001 RSI: 00007f8ce62240a0 RDI: 000000000000000a [ 1621.795700][T12450] RBP: 00007f8ce6224090 R08: 0000000000000000 R09: 0000000000000000 [ 1621.795714][T12450] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1621.795728][T12450] R13: 00007f8ce5616038 R14: 00007f8ce5615fa0 R15: 00007ffd364da6e8 [ 1621.795764][T12450] [ 1621.845809][T12458] xt_hashlimit: max too large, truncated to 1048576 [ 1622.066572][T12458] xt_bpf: check failed: parse error [ 1622.128749][T12465] IPv6: addrconf: prefix option has invalid lifetime [ 1622.186380][T12463] atomic_op ffff88807b4c9198 conn xmit_atomic 0000000000000000 [ 1622.309302][T12472] netlink: 96 bytes leftover after parsing attributes in process `syz.0.12423'. [ 1622.366267][T12478] IPVS: ovf: FWM 3 0x00000003 - no destination available [ 1622.436260][T12482] netlink: 'syz.3.12428': attribute type 12 has an invalid length. [ 1622.781572][T12498] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 1622.890778][T12505] bond0: Error: Cannot enslave bond to itself. [ 1622.935511][T12500] Bluetooth: MGMT ver 1.23 [ 1623.049265][T12511] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12438'. [ 1623.290000][T12526] __nla_validate_parse: 1 callbacks suppressed [ 1623.290022][T12526] netlink: 36 bytes leftover after parsing attributes in process `syz.3.12441'. [ 1623.333330][T12525] syzkaller0: entered promiscuous mode [ 1623.366291][T12525] syzkaller0: entered allmulticast mode [ 1623.842485][T12545] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12449'. [ 1623.874634][T12543] netlink: 'syz.3.12448': attribute type 1 has an invalid length. [ 1623.879823][T12549] set match dimension is over the limit! [ 1624.032832][T12554] netlink: 'syz.4.12452': attribute type 30 has an invalid length. [ 1624.081004][ T1753] block nbd2: Possible stuck request ffff888026b50000: control (read@0,1024B). Runtime 1110 seconds [ 1624.092148][ T1753] block nbd2: Possible stuck request ffff888026b50200: control (read@1024,1024B). Runtime 1110 seconds [ 1624.103332][ T1753] block nbd2: Possible stuck request ffff888026b50400: control (read@2048,1024B). Runtime 1110 seconds [ 1624.114981][ T1753] block nbd2: Possible stuck request ffff888026b50600: control (read@3072,1024B). Runtime 1110 seconds [ 1624.164295][T12565] netlink: 96 bytes leftover after parsing attributes in process `syz.0.12453'. [ 1624.190658][T12554] bond3: option arp_missed_max: invalid value (0) [ 1624.209100][T12554] bond3: option arp_missed_max: allowed values 1 - 255 [ 1624.228672][T12554] bond3 (unregistering): Released all slaves [ 1624.345205][T12559] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1624.469025][T12576] netlink: 'syz.3.12458': attribute type 12 has an invalid length. [ 1624.574701][T12583] xt_TCPMSS: Only works on TCP SYN packets [ 1625.089375][T12605] netlink: 9 bytes leftover after parsing attributes in process `syz.2.12466'. [ 1625.127946][T12605] .70·: renamed from hsr0 [ 1625.147679][T12605] A link change request failed with some changes committed already. Interface .70· may have been left with an inconsistent configuration, please check. [ 1625.369353][T11954] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1625.389369][T11954] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1625.398375][T11954] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1625.425996][T11954] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1625.443938][T11954] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1625.673355][T12612] lo speed is unknown, defaulting to 1000 [ 1625.824021][T12620] netlink: 88 bytes leftover after parsing attributes in process `syz.4.12471'. [ 1626.054290][T12624] netlink: 'syz.1.12472': attribute type 11 has an invalid length. [ 1626.079760][T12624] netlink: 190972 bytes leftover after parsing attributes in process `syz.1.12472'. [ 1626.180824][T12630] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12475'. [ 1626.221773][T12634] netlink: 96 bytes leftover after parsing attributes in process `syz.4.12476'. [ 1626.239698][T12633] FAULT_INJECTION: forcing a failure. [ 1626.239698][T12633] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1626.253375][T12633] CPU: 0 UID: 0 PID: 12633 Comm: syz.1.12477 Not tainted syzkaller #0 PREEMPT(full) [ 1626.253404][T12633] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1626.253418][T12633] Call Trace: [ 1626.253426][T12633] [ 1626.253436][T12633] dump_stack_lvl+0xe8/0x150 [ 1626.253471][T12633] should_fail_ex+0x412/0x560 [ 1626.253502][T12633] _copy_from_user+0x2d/0xb0 [ 1626.253548][T12633] ___sys_sendmsg+0x1c6/0x360 [ 1626.253576][T12633] ? __pfx____sys_sendmsg+0x10/0x10 [ 1626.253634][T12633] ? __fget_files+0x2a/0x420 [ 1626.253664][T12633] ? __fget_files+0x3a0/0x420 [ 1626.253704][T12633] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1626.253728][T12633] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1626.253759][T12633] ? __pfx_ksys_write+0x10/0x10 [ 1626.253794][T12633] do_syscall_64+0x14d/0xf80 [ 1626.253822][T12633] ? trace_irq_disable+0x3b/0x150 [ 1626.253849][T12633] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1626.253871][T12633] ? clear_bhb_loop+0x40/0x90 [ 1626.253897][T12633] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1626.253919][T12633] RIP: 0033:0x7f75cc59c799 [ 1626.253938][T12633] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1626.253956][T12633] RSP: 002b:00007f75ca7f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1626.253978][T12633] RAX: ffffffffffffffda RBX: 00007f75cc815fa0 RCX: 00007f75cc59c799 [ 1626.253994][T12633] RDX: 0000000002000800 RSI: 0000200000000000 RDI: 0000000000000018 [ 1626.254009][T12633] RBP: 00007f75ca7f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1626.254022][T12633] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1626.254033][T12633] R13: 00007f75cc816038 R14: 00007f75cc815fa0 R15: 00007ffdf65856e8 [ 1626.254063][T12633] [ 1626.602159][T12631] bond0: Error: Cannot enslave bond to itself. [ 1626.660298][T12635] vlan1: entered allmulticast mode [ 1626.686464][T12635] bridge8: entered allmulticast mode [ 1626.704924][T12641] netlink: 'syz.1.12478': attribute type 5 has an invalid length. [ 1626.713323][T12612] lo speed is unknown, defaulting to 1000 [ 1626.766020][T12641] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12478'. [ 1627.251076][ T29] audit: type=1804 audit(1773513525.287:10): pid=12662 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.12483" name="/newroot/601/cgroup.controllers" dev="tmpfs" ino=3072 res=1 errno=0 [ 1627.316567][ T29] audit: type=1800 audit(1773513525.287:11): pid=12662 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.12483" name="cgroup.controllers" dev="tmpfs" ino=3072 res=0 errno=0 [ 1627.424114][T12665] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12485'. [ 1627.517059][T11954] Bluetooth: hci4: command tx timeout [ 1627.734371][T12668] xt_CT: No such helper "netbios-ns" [ 1627.880597][T12665] bond4: entered promiscuous mode [ 1627.886216][T12665] bond4: entered allmulticast mode [ 1627.894004][T12665] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1627.996286][T22467] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1628.013417][T22467] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1628.057011][T12679] openvswitch: netlink: VXLAN extension message has 196 unknown bytes. [ 1628.075547][T22467] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1628.088198][T22467] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1628.127973][T12674] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1628.200982][T12675] xt_hashlimit: size too large, truncated to 1048576 [ 1628.360521][T12686] bond3: entered promiscuous mode [ 1628.390613][T12686] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1628.479111][T12696] netlink: 16 bytes leftover after parsing attributes in process `syz.2.12493'. [ 1628.489994][T12690] ¾x9ÿ: renamed from bridge_slave_0 [ 1628.566636][T12612] chnl_net:caif_netlink_parms(): no params data found [ 1628.834943][T12612] bridge0: port 1(bridge_slave_0) entered blocking state [ 1628.843957][T12612] bridge0: port 1(bridge_slave_0) entered disabled state [ 1628.851776][T12612] bridge_slave_0: entered allmulticast mode [ 1628.860839][T12612] bridge_slave_0: entered promiscuous mode [ 1628.874602][T12612] bridge0: port 2(bridge_slave_1) entered blocking state [ 1628.882498][T12612] bridge0: port 2(bridge_slave_1) entered disabled state [ 1628.890161][T12612] bridge_slave_1: entered allmulticast mode [ 1628.899004][T12612] bridge_slave_1: entered promiscuous mode [ 1629.141387][T12612] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1629.180735][T12612] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1629.213613][T12724] IPVS: ovf: FWM 3 0x00000003 - no destination available [ 1629.309858][T12612] team0: Port device team_slave_0 added [ 1629.340956][T12612] team0: Port device team_slave_1 added [ 1629.415572][T12733] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 1629.517186][T12735] bond5: entered promiscuous mode [ 1629.522862][T12735] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1629.533208][T12612] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1629.542242][T12612] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1629.589824][T12612] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1629.601321][T11954] Bluetooth: hci4: command tx timeout [ 1629.610190][T12612] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1629.618265][T12612] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1629.645200][T12612] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1629.727572][T12738] syzkaller0: entered promiscuous mode [ 1629.733602][T12738] syzkaller0: entered allmulticast mode [ 1629.805239][T12612] hsr_slave_0: entered promiscuous mode [ 1629.827817][T12612] hsr_slave_1: entered promiscuous mode [ 1629.842543][T12612] debugfs: 'hsr0' already exists in 'hsr' [ 1629.855767][T12612] Cannot create hsr debugfs directory [ 1630.558833][T12749] bond0: Error: Cannot enslave bond to itself. [ 1630.870810][T12767] 8021q: VLANs not supported on ip6gre0 [ 1631.162662][T12785] netlink: 96 bytes leftover after parsing attributes in process `syz.4.12515'. [ 1631.302780][T12612] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1631.429516][T12612] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1631.537713][T12612] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1631.614678][T12612] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1631.677750][T11954] Bluetooth: hci4: command tx timeout [ 1632.084286][T12805] lo speed is unknown, defaulting to 1000 [ 1632.086545][T12806] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 1632.144302][T12612] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1632.212213][T12612] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1632.394615][T12794] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12519'. [ 1632.416124][T12819] Cannot find del_set index 4 as target [ 1632.436451][T12794] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12519'. [ 1632.449701][T12794] netlink: 'syz.0.12519': attribute type 7 has an invalid length. [ 1632.471458][T12818] netlink: 'syz.0.12519': attribute type 10 has an invalid length. [ 1632.513034][T12612] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1632.644834][T12612] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1632.720882][T12818] team0: Cannot enslave team device to itself [ 1632.740118][T12827] netlink: 9 bytes leftover after parsing attributes in process `syz.4.12526'. [ 1632.749666][T12805] lo speed is unknown, defaulting to 1000 [ 1632.781276][T12827] .70·: renamed from hsr0 [ 1632.799317][T12827] A link change request failed with some changes committed already. Interface .70· may have been left with an inconsistent configuration, please check. [ 1633.249192][T12838] netlink: 20 bytes leftover after parsing attributes in process `syz.1.12528'. [ 1633.312654][T12612] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1633.409982][T12612] 8021q: adding VLAN 0 to HW filter on device team0 [ 1633.470856][T22484] bridge0: port 1(bridge_slave_0) entered blocking state [ 1633.478082][T22484] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1633.644064][T22484] bridge0: port 2(bridge_slave_1) entered blocking state [ 1633.651303][T22484] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1633.756273][T11954] Bluetooth: hci4: command tx timeout [ 1633.941776][T12853] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12533'. [ 1634.221945][T12864] syzkaller0: entered promiscuous mode [ 1634.227667][T12864] syzkaller0: entered allmulticast mode [ 1634.457405][T12612] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1634.675186][T12877] bond7: entered promiscuous mode [ 1634.684418][T12877] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1634.697480][T12889] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 1634.707678][ T6838] IPVS: starting estimator thread 0... [ 1634.724116][T12886] IPVS: ovf: FWM 3 0x00000003 - no destination available [ 1634.737951][T12612] veth0_vlan: entered promiscuous mode [ 1634.802748][T12612] veth1_vlan: entered promiscuous mode [ 1634.841960][T12890] IPVS: using max 26 ests per chain, 62400 per kthread [ 1634.952681][T12612] veth0_macvtap: entered promiscuous mode [ 1634.993224][T12612] veth1_macvtap: entered promiscuous mode [ 1635.033400][T12612] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1635.053271][T12899] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12546'. [ 1635.079710][T12612] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1635.135551][T22461] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1635.161881][T22461] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1635.240853][T22461] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1635.259607][T22461] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1635.331878][T12904] netlink: 9 bytes leftover after parsing attributes in process `syz.0.12550'. [ 1635.383965][T12904] .70·: renamed from .71· [ 1635.403513][T12904] A link change request failed with some changes committed already. Interface .70· may have been left with an inconsistent configuration, please check. [ 1635.460909][T22480] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1635.483605][T12910] IPv6: NLM_F_CREATE should be specified when creating new route [ 1635.500758][T22480] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1635.657769][T22484] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1635.678164][T22484] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1635.708491][T12915] macsec1: entered allmulticast mode [ 1635.727727][T12915] ip6gretap0: entered allmulticast mode [ 1635.754150][T12915] ip6gretap0: left allmulticast mode [ 1635.912287][T12919] lo speed is unknown, defaulting to 1000 [ 1636.030547][T12924] dummy0: entered promiscuous mode [ 1636.046739][T12924] macsec1: entered allmulticast mode [ 1636.057027][T12924] dummy0: entered allmulticast mode [ 1636.112838][T12924] dummy0: left allmulticast mode [ 1636.130387][T12924] dummy0: left promiscuous mode [ 1636.482652][T24429] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1636.498236][T24429] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1636.507459][T24429] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1636.516672][T24429] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1636.536242][T24429] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1636.817273][T12939] nbd0: detected capacity change from 0 to 63 [ 1636.825197][T11954] block nbd0: Receive control failed (result -32) [ 1637.028098][T12934] lo speed is unknown, defaulting to 1000 [ 1637.042727][T12919] lo speed is unknown, defaulting to 1000 [ 1637.120482][T12945] netlink: 'syz.3.12563': attribute type 39 has an invalid length. [ 1637.180224][T12947] netlink: 44 bytes leftover after parsing attributes in process `syz.3.12563'. [ 1637.189777][T12947] netlink: 43 bytes leftover after parsing attributes in process `syz.3.12563'. [ 1637.200729][T12947] netlink: 'syz.3.12563': attribute type 5 has an invalid length. [ 1637.219581][T12947] netlink: 43 bytes leftover after parsing attributes in process `syz.3.12563'. [ 1637.353175][T12948] netlink: 'syz.2.12564': attribute type 1 has an invalid length. [ 1637.380121][T12948] netlink: 'syz.2.12564': attribute type 2 has an invalid length. [ 1637.414683][T12951] vlan2: entered allmulticast mode [ 1637.567440][T12955] netlink: 'syz.2.12567': attribute type 1 has an invalid length. [ 1637.609228][T12955] netlink: 'syz.2.12567': attribute type 2 has an invalid length. [ 1637.640514][T12934] lo speed is unknown, defaulting to 1000 [ 1637.873962][T12963] netlink: 88 bytes leftover after parsing attributes in process `syz.3.12570'. [ 1637.946581][T12961] syzkaller0: entered promiscuous mode [ 1637.954948][T12961] syzkaller0: entered allmulticast mode [ 1638.143348][T12934] chnl_net:caif_netlink_parms(): no params data found [ 1638.338616][T12965] netlink: 16 bytes leftover after parsing attributes in process `syz.4.12571'. [ 1638.631738][T12934] bridge0: port 1(bridge_slave_0) entered blocking state [ 1638.640291][T11954] Bluetooth: hci2: command tx timeout [ 1638.656247][T12934] bridge0: port 1(bridge_slave_0) entered disabled state [ 1638.671120][T12934] bridge_slave_0: entered allmulticast mode [ 1638.680586][T12934] bridge_slave_0: entered promiscuous mode [ 1638.689975][T12934] bridge0: port 2(bridge_slave_1) entered blocking state [ 1638.698260][T12934] bridge0: port 2(bridge_slave_1) entered disabled state [ 1638.706671][T12934] bridge_slave_1: entered allmulticast mode [ 1638.715080][T12934] bridge_slave_1: entered promiscuous mode [ 1638.880206][T12985] set match dimension is over the limit! [ 1639.035388][T12934] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1639.061497][T12983] netlink: 'syz.1.12576': attribute type 12 has an invalid length. [ 1639.134286][T12934] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1639.182494][T12993] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12579'. [ 1639.209366][T12993] netlink: 16 bytes leftover after parsing attributes in process `syz.2.12579'. [ 1639.270296][T12969] bridge0: port 2(bridge_slave_1) entered disabled state [ 1639.278167][T12969] bridge0: port 1(bridge_slave_0) entered disabled state [ 1639.431423][T12969] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1639.467804][T12969] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1639.674525][T12991] macsec1: entered allmulticast mode [ 1639.700008][T12991] veth1: entered allmulticast mode [ 1639.909787][T12934] team0: Port device team_slave_0 added [ 1639.954989][T22483] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1639.986069][T22483] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1640.051499][T12934] team0: Port device team_slave_1 added [ 1640.122114][T22483] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1640.395952][T22483] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1640.474337][T12934] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1640.495367][T12934] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1640.576339][T12934] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1640.589323][ T29] audit: type=1800 audit(1773513538.617:12): pid=13010 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.12583" name="memory.events" dev="tmpfs" ino=467 res=0 errno=0 [ 1640.628480][T12934] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1640.648044][T12934] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1640.715961][T11954] Bluetooth: hci2: command tx timeout [ 1640.730464][T12934] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1641.030962][T13035] syzkaller0: entered promiscuous mode [ 1641.037964][T13035] syzkaller0: entered allmulticast mode [ 1641.095413][T12934] hsr_slave_0: entered promiscuous mode [ 1641.122554][T13045] Cannot find add_set index 0 as target [ 1641.126498][T12934] hsr_slave_1: entered promiscuous mode [ 1641.135989][T12934] debugfs: 'hsr0' already exists in 'hsr' [ 1641.141759][T12934] Cannot create hsr debugfs directory [ 1641.240799][T13046] IPVS: set_ctl: invalid protocol: 115 100.1.1.2:20000 [ 1641.249947][T13046] IPVS: set_ctl: invalid protocol: 22 224.0.0.2:20265 [ 1641.298496][T13052] netdevsim netdevsim2 netdevsim0: IPsec offload requires 128 bit authentication [ 1641.350894][T13057] netlink: 'syz.4.12593': attribute type 1 has an invalid length. [ 1642.802675][T11954] Bluetooth: hci2: command tx timeout [ 1643.725027][T13045] netlink: 32 bytes leftover after parsing attributes in process `syz.3.12591'. [ 1643.745121][T13046] netlink: 16 bytes leftover after parsing attributes in process `syz.3.12591'. [ 1643.777093][T13055] kthread_run failed with err -4 [ 1643.782958][T13057] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 1643.897810][T13061] netlink: 'syz.2.12595': attribute type 1 has an invalid length. [ 1643.918427][T13061] netlink: 'syz.2.12595': attribute type 2 has an invalid length. [ 1644.214057][T13076] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1644.217550][T13078] netlink: 12 bytes leftover after parsing attributes in process `syz.3.12601'. [ 1644.545349][T13080] bond5: entered promiscuous mode [ 1644.607526][T13080] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1644.862425][T13101] xt_NFQUEUE: number of total queues is 0 [ 1644.890794][T11954] Bluetooth: hci2: command tx timeout [ 1644.941994][T13098] syzkaller0: entered promiscuous mode [ 1644.965354][T13098] syzkaller0: entered allmulticast mode [ 1645.086869][T13099] syzkaller0: entered promiscuous mode [ 1645.092507][T13099] syzkaller0: entered allmulticast mode [ 1645.101448][T13106] netlink: 'syz.3.12608': attribute type 1 has an invalid length. [ 1645.109767][T13106] netlink: 'syz.3.12608': attribute type 2 has an invalid length. [ 1645.160226][T13112] netlink: 88 bytes leftover after parsing attributes in process `syz.1.12610'. [ 1645.296319][T13115] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12612'. [ 1645.479900][T13119] netlink: 16 bytes leftover after parsing attributes in process `syz.3.12611'. [ 1648.277131][T13126] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 1648.287468][T13126] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 1648.299729][T13133] bond6: entered promiscuous mode [ 1648.305279][T13133] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1648.318555][T13126] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 1648.591864][T13142] netdevsim netdevsim2 netdevsim0: IPsec offload requires 128 bit authentication [ 1648.751291][T12934] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1648.791005][T12934] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1648.850348][T12934] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1648.882597][T12934] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1648.899075][T13152] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12623'. [ 1648.961914][T13160] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12626'. [ 1648.976694][T13160] netlink: 'syz.3.12626': attribute type 30 has an invalid length. [ 1649.085186][T13168] netlink: 16 bytes leftover after parsing attributes in process `syz.1.12627'. [ 1649.122678][T13160] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12626'. [ 1649.134527][T13160] netlink: 'syz.3.12626': attribute type 30 has an invalid length. [ 1649.196433][T13169] bond0: (slave batadv0): Releasing backup interface [ 1649.207282][T13169] bridge_slave_0: left allmulticast mode [ 1649.213147][T13169] bridge_slave_0: left promiscuous mode [ 1649.220476][T13169] bridge0: port 1(bridge_slave_0) entered disabled state [ 1649.234647][T13169] bridge_slave_1: left allmulticast mode [ 1649.247952][T13169] bridge_slave_1: left promiscuous mode [ 1649.254019][T13169] bridge0: port 2(bridge_slave_1) entered disabled state [ 1649.268491][T13169] bond0: (slave bond_slave_0): Releasing backup interface [ 1649.284393][T13169] bond0: (slave bond_slave_1): Releasing backup interface [ 1649.301809][T13169] team0: Port device team_slave_0 removed [ 1649.312110][T13169] team0: Port device team_slave_1 removed [ 1649.320586][T13169] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1649.331580][T13169] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1649.341113][T13169] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1649.359140][T13168] macvlan0: entered allmulticast mode [ 1649.365072][T22475] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1649.504242][T22475] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1649.531990][T22475] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1649.644469][T22475] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1649.696290][T13178] netlink: 48 bytes leftover after parsing attributes in process `syz.4.12630'. [ 1649.893138][T12934] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1650.026392][T13186] veth1_to_team: entered promiscuous mode [ 1650.053452][T13186] veth1_to_team: left promiscuous mode [ 1650.096899][T12934] 8021q: adding VLAN 0 to HW filter on device team0 [ 1650.131798][T22467] bridge0: port 1(bridge_slave_0) entered blocking state [ 1650.139186][T22467] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1650.151177][T13191] netlink: 4768 bytes leftover after parsing attributes in process `syz.4.12630'. [ 1650.196984][T22480] bridge0: port 2(bridge_slave_1) entered blocking state [ 1650.204231][T22480] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1650.349665][T13195] netlink: 'syz.2.12634': attribute type 39 has an invalid length. [ 1650.359919][T13197] netlink: 'syz.3.12635': attribute type 5 has an invalid length. [ 1650.371512][T13197] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12635'. [ 1650.591047][T13199] syzkaller0: entered promiscuous mode [ 1650.610528][T13199] syzkaller0: entered allmulticast mode [ 1651.198643][T13215] nbd5: detected capacity change from 0 to 63 [ 1651.250943][T11954] block nbd5: Receive control failed (result -32) [ 1651.312904][T13212] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1651.346649][T13219] netlink: 72 bytes leftover after parsing attributes in process `syz.4.12642'. [ 1651.362804][T13212] 8021q: adding VLAN 0 to HW filter on device team0 [ 1651.443675][T13212] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1651.494387][T13223] netdevsim netdevsim4 netdevsim0: IPsec offload requires 128 bit authentication [ 1651.625133][T12934] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1651.799465][T12934] veth0_vlan: entered promiscuous mode [ 1651.815657][T12934] veth1_vlan: entered promiscuous mode [ 1651.859118][T13232] bridge_slave_1: left allmulticast mode [ 1651.885841][T13232] bridge_slave_1: left promiscuous mode [ 1651.905065][T13232] bridge0: port 2(bridge_slave_1) entered disabled state [ 1651.929320][T13229] xt_CT: No such helper "netbios-ns" [ 1652.040422][T13240] netlink: 28 bytes leftover after parsing attributes in process `syz.4.12651'. [ 1652.051903][T13240] netlink: 12 bytes leftover after parsing attributes in process `syz.4.12651'. [ 1652.132082][T12934] veth0_macvtap: entered promiscuous mode [ 1652.229894][T13253] IPVS: ovf: FWM 3 0x00000003 - no destination available [ 1652.384031][T13244] bridge_slave_0: left allmulticast mode [ 1652.405981][T13244] bridge_slave_0: left promiscuous mode [ 1652.411821][T13244] bridge0: port 1(bridge_slave_0) entered disabled state [ 1652.442919][T13244] bridge_slave_1: left allmulticast mode [ 1652.465943][T13244] bridge_slave_1: left promiscuous mode [ 1652.471777][T13244] bridge0: port 2(bridge_slave_1) entered disabled state [ 1652.500808][T13244] bond0: (slave bond_slave_0): Releasing backup interface [ 1652.529055][T13244] bond0: (slave bond_slave_1): Releasing backup interface [ 1652.549683][T13244] team0: Port device team_slave_0 removed [ 1652.576962][T13244] team0: Port device team_slave_1 removed [ 1652.583243][T13244] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1652.609336][T13244] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1652.700327][T12934] veth1_macvtap: entered promiscuous mode [ 1652.813333][T12934] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1652.848174][T12934] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1652.860050][T13259] IPVS: ovf: FWM 3 0x00000003 - no destination available [ 1652.901111][T22461] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1652.925910][T22461] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1652.949587][T13261] ipvlan3: entered promiscuous mode [ 1653.013029][T13263] vlan2: entered allmulticast mode [ 1653.018652][T13263] bridge_slave_0: entered allmulticast mode [ 1653.033207][T13263] bridge0: port 1(vlan2) entered blocking state [ 1653.052017][T13263] bridge0: port 1(vlan2) entered disabled state [ 1653.059713][T13265] netlink: 16 bytes leftover after parsing attributes in process `syz.1.12659'. [ 1653.077976][T13263] vlan2: entered promiscuous mode [ 1653.087155][T13263] bridge_slave_0: entered promiscuous mode [ 1653.105857][T22461] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1653.157642][T22461] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1653.283495][T13267] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12660'. [ 1653.346229][T13273] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12663'. [ 1653.395346][T13275] netlink: 'syz.4.12664': attribute type 5 has an invalid length. [ 1653.415041][T13275] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12664'. [ 1653.526109][T22467] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1653.539794][T22467] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1653.564483][T13280] netlink: 'syz.2.12666': attribute type 10 has an invalid length. [ 1653.672730][T13282] netlink: 'syz.4.12667': attribute type 1 has an invalid length. [ 1653.692002][T13282] netlink: 'syz.4.12667': attribute type 2 has an invalid length. [ 1653.747812][T22484] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1653.757075][T22484] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1653.879831][T13286] dummy0: entered promiscuous mode [ 1653.917474][T13290] netlink: 'syz.4.12670': attribute type 1 has an invalid length. [ 1653.956514][T13290] netlink: 'syz.4.12670': attribute type 2 has an invalid length. [ 1654.144951][T13303] ip6_vti0: entered allmulticast mode [ 1654.164657][ T1753] block nbd2: Possible stuck request ffff888026b50000: control (read@0,1024B). Runtime 1140 seconds [ 1654.177755][ T1753] block nbd2: Possible stuck request ffff888026b50200: control (read@1024,1024B). Runtime 1140 seconds [ 1654.189661][ T1753] block nbd2: Possible stuck request ffff888026b50400: control (read@2048,1024B). Runtime 1140 seconds [ 1654.202337][ T1753] block nbd2: Possible stuck request ffff888026b50600: control (read@3072,1024B). Runtime 1140 seconds [ 1654.621539][T13310] bridge0: port 2(bridge_slave_1) entered disabled state [ 1654.629406][T13310] bridge0: port 1(bridge_slave_0) entered disabled state [ 1654.763294][T13327] __nla_validate_parse: 3 callbacks suppressed [ 1654.763316][T13327] netlink: 16 bytes leftover after parsing attributes in process `syz.3.12684'. [ 1654.864311][T13330] netlink: 8 bytes leftover after parsing attributes in process `syz.4.12683'. [ 1654.970414][T13310] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1654.985875][T13336] netlink: 48 bytes leftover after parsing attributes in process `syz.1.12685'. [ 1655.009623][T13336] netlink: 24 bytes leftover after parsing attributes in process `syz.1.12685'. [ 1655.048461][T13310] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1655.068369][T13336] netlink: 'syz.1.12685': attribute type 4 has an invalid length. [ 1655.128929][T13337] netlink: 'syz.1.12685': attribute type 4 has an invalid length. [ 1655.439424][ T1907] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1655.510601][T13351] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12688'. [ 1655.520803][ T1907] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1655.535796][ T1907] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1655.545901][T13351] netlink: 'syz.0.12688': attribute type 30 has an invalid length. [ 1655.587099][ T1907] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1655.647916][T13351] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12688'. [ 1655.648760][T22484] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1655.668366][T22484] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1655.700612][T13351] netlink: 'syz.0.12688': attribute type 30 has an invalid length. [ 1655.716178][T22475] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1655.732757][T22475] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1655.902677][T13365] netlink: 24 bytes leftover after parsing attributes in process `syz.4.12694'. [ 1656.195005][T13381] IPVS: ovf: FWM 3 0x00000003 - no destination available [ 1656.975356][T13409] set match dimension is over the limit! [ 1657.944222][T13428] veth1_to_team: entered promiscuous mode [ 1657.955789][T13428] veth1_to_team: left promiscuous mode [ 1657.970758][T13435] FAULT_INJECTION: forcing a failure. [ 1657.970758][T13435] name failslab, interval 1, probability 0, space 0, times 0 [ 1657.976155][T13433] IPVS: set_ctl: invalid protocol: 130 172.20.20.170:20265 [ 1658.020441][T13435] CPU: 0 UID: 0 PID: 13435 Comm: syz.3.12720 Not tainted syzkaller #0 PREEMPT(full) [ 1658.020471][T13435] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1658.020484][T13435] Call Trace: [ 1658.020494][T13435] [ 1658.020503][T13435] dump_stack_lvl+0xe8/0x150 [ 1658.020543][T13435] should_fail_ex+0x412/0x560 [ 1658.020583][T13435] should_failslab+0xa8/0x100 [ 1658.020614][T13435] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 1658.020638][T13435] ? __alloc_skb+0x186/0x7d0 [ 1658.020669][T13435] ? __alloc_skb+0x1d0/0x7d0 [ 1658.020695][T13435] ? __local_bh_enable_ip+0xd0/0x130 [ 1658.020741][T13435] __alloc_skb+0x1d0/0x7d0 [ 1658.020770][T13435] ? bpf_lsm_socket_getpeersec_dgram+0x9/0x20 [ 1658.020802][T13435] netlink_sendmsg+0x5d4/0xb40 [ 1658.020844][T13435] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1658.020878][T13435] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1658.020912][T13435] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1658.020939][T13435] ____sys_sendmsg+0x972/0x9f0 [ 1658.020960][T13435] ? __lock_acquire+0x6b5/0x2cf0 [ 1658.020997][T13435] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1658.021030][T13435] ? import_iovec+0x73/0xa0 [ 1658.021069][T13435] ___sys_sendmsg+0x2a5/0x360 [ 1658.021098][T13435] ? __pfx____sys_sendmsg+0x10/0x10 [ 1658.021176][T13435] __sys_sendmmsg+0x27c/0x4e0 [ 1658.021203][T13435] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1658.021223][T13435] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 1658.021283][T13435] ? ksys_write+0x242/0x270 [ 1658.021310][T13435] ? __pfx_ksys_write+0x10/0x10 [ 1658.021342][T13435] __x64_sys_sendmmsg+0xa0/0xc0 [ 1658.021367][T13435] do_syscall_64+0x14d/0xf80 [ 1658.021395][T13435] ? trace_irq_disable+0x3b/0x150 [ 1658.021425][T13435] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1658.021448][T13435] ? clear_bhb_loop+0x40/0x90 [ 1658.021480][T13435] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1658.021500][T13435] RIP: 0033:0x7f33ee79c799 [ 1658.021521][T13435] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1658.021539][T13435] RSP: 002b:00007f33ef6f2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1658.021563][T13435] RAX: ffffffffffffffda RBX: 00007f33eea15fa0 RCX: 00007f33ee79c799 [ 1658.021579][T13435] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000003 [ 1658.021594][T13435] RBP: 00007f33ef6f2090 R08: 0000000000000000 R09: 0000000000000000 [ 1658.021607][T13435] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1658.021620][T13435] R13: 00007f33eea16038 R14: 00007f33eea15fa0 R15: 00007ffe53dd6698 [ 1658.021652][T13435] [ 1658.819335][T13450] xt_NFQUEUE: number of total queues is 0 [ 1658.866721][T13457] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12729'. [ 1659.108905][T13468] netlink: 'syz.0.12733': attribute type 2 has an invalid length. [ 1659.252806][T13474] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 1659.269242][T13476] netlink: 'syz.3.12734': attribute type 1 has an invalid length. [ 1659.287165][T13474] netdevsim netdevsim4 netdevsim0: left allmulticast mode [ 1659.315367][T13476] nbd: couldn't find device at index -427251215 [ 1659.464018][T13484] netlink: 72 bytes leftover after parsing attributes in process `syz.1.12739'. [ 1659.697821][T13492] : renamed from bond_slave_0 [ 1659.726374][T13495] netlink: 16 bytes leftover after parsing attributes in process `syz.1.12745'. [ 1659.763569][T13498] set match dimension is over the limit! [ 1659.888204][T13503] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12746'. [ 1659.998335][T13505] netlink: 'syz.3.12747': attribute type 2 has an invalid length. [ 1660.212306][T16289] IPVS: starting estimator thread 0... [ 1660.306161][T13514] IPVS: using max 23 ests per chain, 55200 per kthread [ 1660.473287][T13519] x_tables: duplicate underflow at hook 1 [ 1660.482558][T13519] netlink: 56 bytes leftover after parsing attributes in process `syz.4.12751'. [ 1660.492207][T13519] netlink: 56 bytes leftover after parsing attributes in process `syz.4.12751'. [ 1660.502634][T13519] netlink: 56 bytes leftover after parsing attributes in process `syz.4.12751'. [ 1660.524155][T13519] netlink: 56 bytes leftover after parsing attributes in process `syz.4.12751'. [ 1660.718817][T24429] Bluetooth: hci1: command 0x0406 tx timeout [ 1660.944507][T13522] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12752'. [ 1661.236927][T13532] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check. [ 1661.490477][ T9164] lec:lec_start_xmit: lec0:No lecd attached [ 1661.638455][T13548] netlink: 'syz.3.12761': attribute type 5 has an invalid length. [ 1661.689368][T13549] netlink: 'syz.0.12760': attribute type 2 has an invalid length. [ 1661.695715][T13548] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12761'. [ 1661.742874][T13553] set match dimension is over the limit! [ 1661.942352][T13555] veth0_virt_wifi: mtu less than device minimum [ 1661.991811][T13558] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12767'. [ 1662.058517][T13558] netlink: 4 bytes leftover after parsing attributes in process `syz.3.12767'. [ 1662.098489][T13558] netlink: 'syz.3.12767': attribute type 12 has an invalid length. [ 1662.217548][T13558] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12767'. [ 1662.245728][T13558] netlink: 'syz.3.12767': attribute type 12 has an invalid length. [ 1662.624735][T13580] vlan3: entered promiscuous mode [ 1662.822302][T13587] netlink: 'syz.0.12777': attribute type 15 has an invalid length. [ 1663.091394][T13594] netlink: 'syz.2.12779': attribute type 48 has an invalid length. [ 1663.321507][T13604] IPVS: ovf: FWM 3 0x00000003 - no destination available [ 1663.472557][T13606] syzkaller0: entered promiscuous mode [ 1663.481845][T13606] syzkaller0: entered allmulticast mode [ 1663.743393][T13608] netlink: 'syz.3.12784': attribute type 10 has an invalid length. [ 1663.794336][T13608] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 1663.879508][T13612] .70·: renamed from hsr0 [ 1663.906613][T13612] A link change request failed with some changes committed already. Interface .70· may have been left with an inconsistent configuration, please check. [ 1664.205910][T13628] FAULT_INJECTION: forcing a failure. [ 1664.205910][T13628] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1664.265912][T13628] CPU: 0 UID: 0 PID: 13628 Comm: syz.0.12791 Not tainted syzkaller #0 PREEMPT(full) [ 1664.265945][T13628] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1664.265958][T13628] Call Trace: [ 1664.265967][T13628] [ 1664.265977][T13628] dump_stack_lvl+0xe8/0x150 [ 1664.266013][T13628] should_fail_ex+0x412/0x560 [ 1664.266045][T13628] _copy_from_user+0x2d/0xb0 [ 1664.266078][T13628] kstrtouint_from_user+0xd6/0x180 [ 1664.266107][T13628] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 1664.266152][T13628] proc_fail_nth_write+0x8e/0x210 [ 1664.266199][T13628] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1664.266236][T13628] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1664.266268][T13628] vfs_write+0x29a/0xb90 [ 1664.266303][T13628] ? __pfx_vfs_write+0x10/0x10 [ 1664.266329][T13628] ? __fget_files+0x2a/0x420 [ 1664.266365][T13628] ? __fget_files+0x3a0/0x420 [ 1664.266395][T13628] ? __fget_files+0x2a/0x420 [ 1664.266436][T13628] ksys_write+0x150/0x270 [ 1664.266464][T13628] ? __pfx_ksys_write+0x10/0x10 [ 1664.266503][T13628] do_syscall_64+0x14d/0xf80 [ 1664.266533][T13628] ? trace_irq_disable+0x3b/0x150 [ 1664.266563][T13628] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1664.266586][T13628] ? clear_bhb_loop+0x40/0x90 [ 1664.266615][T13628] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1664.266637][T13628] RIP: 0033:0x7f57d315cfce [ 1664.266658][T13628] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1664.266677][T13628] RSP: 002b:00007f57d3fc6fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1664.266702][T13628] RAX: ffffffffffffffda RBX: 00007f57d3fc76c0 RCX: 00007f57d315cfce [ 1664.266718][T13628] RDX: 0000000000000001 RSI: 00007f57d3fc70a0 RDI: 0000000000000004 [ 1664.266731][T13628] RBP: 00007f57d3fc7090 R08: 0000000000000000 R09: 0000000000000000 [ 1664.266745][T13628] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1664.266758][T13628] R13: 00007f57d3416038 R14: 00007f57d3415fa0 R15: 00007ffe66183698 [ 1664.266795][T13628] [ 1665.267822][T13649] FAULT_INJECTION: forcing a failure. [ 1665.267822][T13649] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1665.306964][T13649] CPU: 0 UID: 0 PID: 13649 Comm: syz.0.12800 Not tainted syzkaller #0 PREEMPT(full) [ 1665.306995][T13649] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1665.307008][T13649] Call Trace: [ 1665.307018][T13649] [ 1665.307027][T13649] dump_stack_lvl+0xe8/0x150 [ 1665.307064][T13649] should_fail_ex+0x412/0x560 [ 1665.307098][T13649] prepare_alloc_pages+0x22a/0x650 [ 1665.307134][T13649] __alloc_frozen_pages_noprof+0x12f/0x380 [ 1665.307166][T13649] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1665.307197][T13649] ? __pfx_policy_nodemask+0x10/0x10 [ 1665.307236][T13649] alloc_pages_bulk_noprof+0x558/0x700 [ 1665.307271][T13649] ? alloc_pages_noprof+0xbd/0x190 [ 1665.307302][T13649] __kasan_populate_vmalloc+0xc1/0x1d0 [ 1665.307331][T13649] alloc_vmap_area+0xd73/0x14b0 [ 1665.307392][T13649] ? __pfx_alloc_vmap_area+0x10/0x10 [ 1665.307425][T13649] ? __kmalloc_cache_node_noprof+0x3ef/0x6b0 [ 1665.307452][T13649] ? __get_vm_area_node+0x13f/0x300 [ 1665.307470][T13649] ? __kmalloc_cache_node_noprof+0x248/0x6b0 [ 1665.307493][T13649] ? xdp_umem_create+0x6dc/0x8b0 [ 1665.307524][T13649] __get_vm_area_node+0x1f8/0x300 [ 1665.307548][T13649] ? xdp_umem_create+0x6dc/0x8b0 [ 1665.307576][T13649] vmap+0x162/0x310 [ 1665.307597][T13649] ? xdp_umem_create+0x6dc/0x8b0 [ 1665.307628][T13649] xdp_umem_create+0x6dc/0x8b0 [ 1665.307667][T13649] xsk_setsockopt+0x860/0x990 [ 1665.307695][T13649] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1665.307727][T13649] ? __fget_files+0x2a/0x420 [ 1665.307754][T13649] ? aa_sock_opt_perm+0xff/0x1a0 [ 1665.307785][T13649] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 1665.307809][T13649] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1665.307835][T13649] do_sock_setsockopt+0x17c/0x1b0 [ 1665.307873][T13649] __x64_sys_setsockopt+0x13d/0x1b0 [ 1665.307912][T13649] do_syscall_64+0x14d/0xf80 [ 1665.307940][T13649] ? trace_irq_disable+0x3b/0x150 [ 1665.307968][T13649] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1665.307990][T13649] ? clear_bhb_loop+0x40/0x90 [ 1665.308016][T13649] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1665.308038][T13649] RIP: 0033:0x7f57d319c799 [ 1665.308059][T13649] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1665.308077][T13649] RSP: 002b:00007f57d3fc7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1665.308102][T13649] RAX: ffffffffffffffda RBX: 00007f57d3415fa0 RCX: 00007f57d319c799 [ 1665.308117][T13649] RDX: 0000000000000004 RSI: 000000000000011b RDI: 0000000000000003 [ 1665.308131][T13649] RBP: 00007f57d3fc7090 R08: 0000000000000020 R09: 0000000000000000 [ 1665.308144][T13649] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000002 [ 1665.308158][T13649] R13: 00007f57d3416038 R14: 00007f57d3415fa0 R15: 00007ffe66183698 [ 1665.308193][T13649] [ 1665.509621][ C1] vcan0: j1939_tp_rxtimer: 0xffff88804c2afc00: rx timeout, send abort [ 1665.601278][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88804c2afc00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 1666.055139][T13659] netdevsim netdevsim0 netdevsim0: IPsec offload requires 128 bit authentication [ 1666.116285][T13663] syzkaller0: entered promiscuous mode [ 1666.126007][T13663] syzkaller0: entered allmulticast mode [ 1666.139832][T13664] __nla_validate_parse: 12 callbacks suppressed [ 1666.139853][T13664] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12806'. [ 1666.155355][T13664] netlink: 20 bytes leftover after parsing attributes in process `syz.2.12806'. [ 1666.423873][T13675] syzkaller1: entered promiscuous mode [ 1666.436380][T13675] syzkaller1: entered allmulticast mode [ 1666.875770][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5380 ms [ 1666.883859][ C1] lec:lec_tx_timeout: lec0 [ 1667.491781][T13700] syzkaller0: entered promiscuous mode [ 1667.497558][T13700] syzkaller0: entered allmulticast mode [ 1667.595993][T13705] netlink: 'syz.1.12822': attribute type 10 has an invalid length. [ 1667.626198][T13705] .70·: left allmulticast mode [ 1667.626377][T13706] netlink: 'syz.1.12822': attribute type 10 has an invalid length. [ 1667.635673][T13705] hsr_slave_0: left allmulticast mode [ 1667.664745][T13705] hsr_slave_1: left allmulticast mode [ 1667.670796][T13705] .70·: mtu greater than device maximum [ 1667.690501][T13706] .70·: mtu greater than device maximum [ 1667.709189][T13709] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12823'. [ 1667.777545][T13709] syzkaller0: entered promiscuous mode [ 1667.799995][T13709] syzkaller0: entered allmulticast mode [ 1668.543867][T13729] netlink: 'syz.3.12829': attribute type 1 has an invalid length. [ 1668.558420][T13726] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1536) ! [ 1668.588291][T13729] netlink: 'syz.3.12829': attribute type 2 has an invalid length. [ 1668.606129][T13730] netlink: 'syz.3.12829': attribute type 1 has an invalid length. [ 1668.613993][T13730] netlink: 'syz.3.12829': attribute type 2 has an invalid length. [ 1668.761410][T13744] netlink: 28 bytes leftover after parsing attributes in process `syz.0.12833'. [ 1668.770922][T13744] netlink: 12 bytes leftover after parsing attributes in process `syz.0.12833'. [ 1668.801050][T13734] bond7: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 1668.834006][T13743] netlink: 12 bytes leftover after parsing attributes in process `syz.4.12835'. [ 1668.867921][T13734] bond7 (unregistering): Released all slaves [ 1668.882595][ T1300] aoe: packet could not be sent on bond0. consider increasing tx_queue_len [ 1668.900386][ T1300] lec:lec_start_xmit: lec0:No lecd attached [ 1668.923509][T13751] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma? [ 1669.004591][T13757] netlink: 'syz.2.12836': attribute type 1 has an invalid length. [ 1669.053751][T13757] netlink: 'syz.2.12836': attribute type 2 has an invalid length. [ 1669.110165][T13757] netlink: 'syz.2.12836': attribute type 3 has an invalid length. [ 1669.125521][T13743] bond6: entered promiscuous mode [ 1669.148036][T13743] 8021q: adding VLAN 0 to HW filter on device bond6 [ 1669.222548][T13751] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1669.231451][T13751] bond7: entered promiscuous mode [ 1669.238473][T13751] bond6: (slave bond7): Enslaving as an active interface with an up link [ 1669.484571][T13764] bond7: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1669.567795][T13764] bond7: (slave lo): Enslaving as an active interface with an up link [ 1669.609995][T13764] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 1670.049421][T13796] bond8: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 1670.098131][T13796] bond8 (unregistering): Released all slaves [ 1670.510102][T13808] syzkaller0: entered promiscuous mode [ 1670.547569][T13808] syzkaller0: entered allmulticast mode [ 1670.652674][T13818] veth1_to_team: entered promiscuous mode [ 1670.686646][T13818] veth1_to_team: left promiscuous mode [ 1670.828789][T13830] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1670.891986][T13830] bond1: (slave lo): Enslaving as an active interface with an up link [ 1670.914928][T13830] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 1670.936896][T13833] nbd16: detected capacity change from 0 to 63 [ 1670.949900][T11954] block nbd16: Receive control failed (result -32) [ 1673.917361][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 1673.925488][ C1] lec:lec_tx_timeout: lec0 [ 1674.011738][T13841] vlan2: entered allmulticast mode [ 1674.021811][T13841] bridge0: port 2(vlan2) entered blocking state [ 1674.035971][T13841] bridge0: port 2(vlan2) entered disabled state [ 1674.055205][T13841] vlan2: entered promiscuous mode [ 1674.394068][T13880] netlink: 'syz.0.12869': attribute type 12 has an invalid length. [ 1674.556611][T13883] bond7: option mode: unable to set because the bond device has slaves [ 1674.586604][T13883] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 1674.760154][T13896] geneve2: entered allmulticast mode [ 1674.981119][T13904] xt_CT: No such helper "netbios-ns" [ 1675.083880][T13910] syzkaller0: entered promiscuous mode [ 1675.102504][T13910] syzkaller0: entered allmulticast mode [ 1675.148568][T13917] netlink: 16 bytes leftover after parsing attributes in process `syz.0.12881'. [ 1675.730347][T13940] bridge1: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 1675.859838][T13939] bond2: entered promiscuous mode [ 1675.869087][T13939] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1676.037341][T13953] netlink: 16 bytes leftover after parsing attributes in process `syz.2.12893'. [ 1676.149199][T13955] netlink: 9 bytes leftover after parsing attributes in process `syz.0.12894'. [ 1676.159955][T13955] .71·: renamed from .70· [ 1676.191786][T13955] A link change request failed with some changes committed already. Interface .71· may have been left with an inconsistent configuration, please check. [ 1676.504655][T13974] syzkaller0: entered promiscuous mode [ 1676.539861][T13974] syzkaller0: entered allmulticast mode [ 1677.010868][T13988] netlink: 24 bytes leftover after parsing attributes in process `syz.4.12904'. [ 1677.127530][T13992] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12907'. [ 1677.158491][T13992] bond0: Unable to set up delay as MII monitoring is disabled [ 1677.180994][T13995] FAULT_INJECTION: forcing a failure. [ 1677.180994][T13995] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1677.225053][T13995] CPU: 1 UID: 0 PID: 13995 Comm: syz.1.12908 Not tainted syzkaller #0 PREEMPT(full) [ 1677.225082][T13995] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1677.225094][T13995] Call Trace: [ 1677.225103][T13995] [ 1677.225112][T13995] dump_stack_lvl+0xe8/0x150 [ 1677.225145][T13995] should_fail_ex+0x412/0x560 [ 1677.225176][T13995] _copy_from_user+0x2d/0xb0 [ 1677.225205][T13995] __copy_msghdr+0x3c5/0x5b0 [ 1677.225231][T13995] ___sys_sendmsg+0x213/0x360 [ 1677.225259][T13995] ? __pfx____sys_sendmsg+0x10/0x10 [ 1677.225314][T13995] ? __fget_files+0x2a/0x420 [ 1677.225341][T13995] ? __fget_files+0x3a0/0x420 [ 1677.225381][T13995] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1677.225405][T13995] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1677.225437][T13995] ? __pfx_ksys_write+0x10/0x10 [ 1677.225471][T13995] do_syscall_64+0x14d/0xf80 [ 1677.225500][T13995] ? trace_irq_disable+0x3b/0x150 [ 1677.225528][T13995] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1677.225550][T13995] ? clear_bhb_loop+0x40/0x90 [ 1677.225587][T13995] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1677.225611][T13995] RIP: 0033:0x7f75cc59c799 [ 1677.225631][T13995] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1677.225649][T13995] RSP: 002b:00007f75ca7f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1677.225671][T13995] RAX: ffffffffffffffda RBX: 00007f75cc815fa0 RCX: 00007f75cc59c799 [ 1677.225686][T13995] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000000006 [ 1677.225700][T13995] RBP: 00007f75ca7f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1677.225712][T13995] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1677.225724][T13995] R13: 00007f75cc816038 R14: 00007f75cc815fa0 R15: 00007ffdf65856e8 [ 1677.225757][T13995] [ 1677.522414][T13988] syzkaller0: entered promiscuous mode [ 1677.531882][T13988] syzkaller0: entered allmulticast mode [ 1677.749534][T13998] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12909'. [ 1677.759779][T13998] netlink: 'syz.3.12909': attribute type 30 has an invalid length. [ 1677.783103][T13998] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12909'. [ 1677.836127][T13998] netlink: 'syz.3.12909': attribute type 30 has an invalid length. [ 1677.930603][T14004] syzkaller0: entered promiscuous mode [ 1677.936759][T14004] syzkaller0: entered allmulticast mode [ 1677.959315][T14008] netlink: 'syz.1.12914': attribute type 5 has an invalid length. [ 1677.977060][T14007] veth1_to_team: entered promiscuous mode [ 1677.984824][T14008] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12914'. [ 1678.009427][T14007] veth1_to_team: left promiscuous mode [ 1678.048583][T14011] netlink: 'syz.3.12915': attribute type 2 has an invalid length. [ 1678.209120][T14015] IPVS: ovf: FWM 3 0x00000003 - no destination available [ 1678.832785][T14044] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12926'. [ 1678.900103][T14041] bridge2: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 1679.250317][T14052] lo speed is unknown, defaulting to 1000 [ 1679.296602][T14049] nbd17: detected capacity change from 0 to 63 [ 1679.329324][T11954] block nbd17: Receive control failed (result -32) [ 1679.549425][T14065] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12932'. [ 1679.587693][T14068] netlink: 'syz.0.12933': attribute type 1 has an invalid length. [ 1679.598108][T14068] netlink: 'syz.0.12933': attribute type 2 has an invalid length. [ 1679.796002][T14075] netlink: 'syz.0.12936': attribute type 2 has an invalid length. [ 1679.829146][T14076] .71·: renamed from .70· [ 1679.844018][T14076] A link change request failed with some changes committed already. Interface .71· may have been left with an inconsistent configuration, please check. [ 1679.892256][T14052] lo speed is unknown, defaulting to 1000 [ 1680.349141][T14094] __nla_validate_parse: 4 callbacks suppressed [ 1680.349161][T14094] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12941'. [ 1680.360608][T14091] veth1_to_team: entered promiscuous mode [ 1680.395580][T14091] veth1_to_team: left promiscuous mode [ 1680.424064][T14097] netlink: 24 bytes leftover after parsing attributes in process `syz.1.12944'. [ 1680.923101][T14110] netlink: 'syz.2.12949': attribute type 2 has an invalid length. [ 1681.191440][T14121] xt_CT: No such helper "netbios-ns" [ 1681.326535][T14132] netlink: 60 bytes leftover after parsing attributes in process `syz.1.12956'. [ 1681.347068][T14132] netlink: 35 bytes leftover after parsing attributes in process `syz.1.12956'. [ 1681.372382][T22484] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1681.382717][T22484] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1681.407427][T22484] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1681.451507][T14137] netlink: 40 bytes leftover after parsing attributes in process `syz.2.12958'. [ 1681.509276][T22484] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1681.545230][T14128] lo speed is unknown, defaulting to 1000 [ 1681.550370][T14135] IPVS: set_ctl: invalid protocol: 108 255.255.255.255:20001 [ 1681.947234][T14154] macvlan0: left allmulticast mode [ 1681.952729][T14154] netlink: 'syz.1.12963': attribute type 2 has an invalid length. [ 1681.989539][T14156] netlink: 9 bytes leftover after parsing attributes in process `syz.0.12964'. [ 1682.026312][T14156] .70·: renamed from .71· [ 1682.042892][T14156] A link change request failed with some changes committed already. Interface .70· may have been left with an inconsistent configuration, please check. [ 1682.120731][T14158] FAULT_INJECTION: forcing a failure. [ 1682.120731][T14158] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1682.183258][T14158] CPU: 1 UID: 0 PID: 14158 Comm: syz.3.12965 Not tainted syzkaller #0 PREEMPT(full) [ 1682.183290][T14158] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1682.183303][T14158] Call Trace: [ 1682.183312][T14158] [ 1682.183322][T14158] dump_stack_lvl+0xe8/0x150 [ 1682.183359][T14158] should_fail_ex+0x412/0x560 [ 1682.183393][T14158] prepare_alloc_pages+0x22a/0x650 [ 1682.183429][T14158] __alloc_frozen_pages_noprof+0x12f/0x380 [ 1682.183460][T14158] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1682.183492][T14158] ? __pfx_policy_nodemask+0x10/0x10 [ 1682.183531][T14158] alloc_pages_bulk_noprof+0x558/0x700 [ 1682.183566][T14158] ? alloc_pages_noprof+0xbd/0x190 [ 1682.183597][T14158] __kasan_populate_vmalloc+0xc1/0x1d0 [ 1682.183628][T14158] alloc_vmap_area+0xd73/0x14b0 [ 1682.183679][T14158] ? __pfx_alloc_vmap_area+0x10/0x10 [ 1682.183712][T14158] ? __kmalloc_cache_node_noprof+0x3ef/0x6b0 [ 1682.183737][T14158] ? __get_vm_area_node+0x13f/0x300 [ 1682.183755][T14158] ? __kmalloc_cache_node_noprof+0x248/0x6b0 [ 1682.183778][T14158] ? xdp_umem_create+0x6dc/0x8b0 [ 1682.183806][T14158] __get_vm_area_node+0x1f8/0x300 [ 1682.183831][T14158] ? xdp_umem_create+0x6dc/0x8b0 [ 1682.183859][T14158] vmap+0x162/0x310 [ 1682.183880][T14158] ? xdp_umem_create+0x6dc/0x8b0 [ 1682.183912][T14158] xdp_umem_create+0x6dc/0x8b0 [ 1682.183951][T14158] xsk_setsockopt+0x860/0x990 [ 1682.183980][T14158] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1682.184022][T14158] ? __fget_files+0x2a/0x420 [ 1682.184049][T14158] ? aa_sock_opt_perm+0xff/0x1a0 [ 1682.184080][T14158] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 1682.184103][T14158] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1682.184129][T14158] do_sock_setsockopt+0x17c/0x1b0 [ 1682.184168][T14158] __x64_sys_setsockopt+0x13d/0x1b0 [ 1682.184205][T14158] do_syscall_64+0x14d/0xf80 [ 1682.184234][T14158] ? trace_irq_disable+0x3b/0x150 [ 1682.184263][T14158] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1682.184285][T14158] ? clear_bhb_loop+0x40/0x90 [ 1682.184310][T14158] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1682.184331][T14158] RIP: 0033:0x7f33ee79c799 [ 1682.184351][T14158] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1682.184369][T14158] RSP: 002b:00007f33ef6f2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1682.184392][T14158] RAX: ffffffffffffffda RBX: 00007f33eea15fa0 RCX: 00007f33ee79c799 [ 1682.184407][T14158] RDX: 0000000000000004 RSI: 000000000000011b RDI: 0000000000000003 [ 1682.184420][T14158] RBP: 00007f33ef6f2090 R08: 0000000000000020 R09: 0000000000000000 [ 1682.184432][T14158] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000002 [ 1682.184445][T14158] R13: 00007f33eea16038 R14: 00007f33eea15fa0 R15: 00007ffe53dd6698 [ 1682.184477][T14158] [ 1682.563879][T14160] syzkaller0: entered promiscuous mode [ 1682.587749][T14160] syzkaller0: entered allmulticast mode [ 1682.912205][T14171] delete_channel: no stack [ 1682.980081][T14173] xt_NFQUEUE: number of total queues is 0 [ 1683.080178][T14128] lo speed is unknown, defaulting to 1000 [ 1683.403960][T14190] bond7: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1683.441164][T14190] bond7: (slave lo): Enslaving as an active interface with an up link [ 1683.451727][T14190] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 1683.473390][T14191] vlan3: entered promiscuous mode [ 1683.488473][T14191] bridge0: entered promiscuous mode [ 1683.566856][T14186] syzkaller0: entered promiscuous mode [ 1683.585185][T14186] syzkaller0: entered allmulticast mode [ 1683.905898][T14210] netlink: 56 bytes leftover after parsing attributes in process `syz.2.12983'. [ 1683.943669][T14210] netlink: 8 bytes leftover after parsing attributes in process `syz.2.12983'. [ 1684.176588][T14204] bond8: entered promiscuous mode [ 1684.206436][T14204] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1684.266207][ T1753] block nbd2: Possible stuck request ffff888026b50000: control (read@0,1024B). Runtime 1170 seconds [ 1684.279157][ T1753] block nbd2: Possible stuck request ffff888026b50200: control (read@1024,1024B). Runtime 1170 seconds [ 1684.290521][ T1753] block nbd2: Possible stuck request ffff888026b50400: control (read@2048,1024B). Runtime 1170 seconds [ 1684.303122][ T1753] block nbd2: Possible stuck request ffff888026b50600: control (read@3072,1024B). Runtime 1170 seconds [ 1684.343538][T14225] netlink: 9 bytes leftover after parsing attributes in process `syz.3.12987'. [ 1684.518871][T14225] .70·: renamed from hsr0 [ 1684.530291][T14225] A link change request failed with some changes committed already. Interface .70· may have been left with an inconsistent configuration, please check. [ 1684.668400][T14231] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12989'. [ 1684.918112][T14238] syz_tun: entered allmulticast mode [ 1684.942219][T14237] syz_tun: left allmulticast mode [ 1684.969470][T14236] bond7: option mode: unable to set because the bond device has slaves [ 1685.027934][T14240] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 1685.167398][T14242] netlink: 'syz.2.12993': attribute type 1 has an invalid length. [ 1685.277290][T14242] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1685.502716][T14255] syzkaller0: entered promiscuous mode [ 1685.509294][T14255] syzkaller0: entered allmulticast mode [ 1685.717381][T14273] siw: device registration error -23 [ 1685.931796][T14281] set match dimension is over the limit! [ 1686.151092][T14287] netlink: 'syz.1.13008': attribute type 5 has an invalid length. [ 1686.161814][T14287] __nla_validate_parse: 1 callbacks suppressed [ 1686.161835][T14287] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13008'. [ 1686.289415][T14291] netlink: 'syz.2.13010': attribute type 1 has an invalid length. [ 1686.321829][T24429] Bluetooth: hci0: command 0x0406 tx timeout [ 1688.424430][T14268] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 1688.432642][T14273] netlink: 44 bytes leftover after parsing attributes in process `syz.0.13003'. [ 1688.477160][T14291] workqueue: Failed to create a rescuer kthread for wq "bond9": -EINTR [ 1688.851055][T14309] lo speed is unknown, defaulting to 1000 [ 1688.963362][T14314] netlink: 'syz.2.13019': attribute type 2 has an invalid length. [ 1689.201639][T14309] lo speed is unknown, defaulting to 1000 [ 1689.204498][T14311] lo speed is unknown, defaulting to 1000 [ 1689.304699][T14331] netlink: 'syz.2.13023': attribute type 1 has an invalid length. [ 1689.424644][T14331] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1689.516016][T14334] nbd18: detected capacity change from 0 to 63 [ 1689.534127][T11954] block nbd18: Receive control failed (result -32) [ 1689.884509][T14349] set match dimension is over the limit! [ 1689.955481][T14311] lo speed is unknown, defaulting to 1000 [ 1690.062578][T14351] xt_CT: No such helper "netbios-ns" [ 1690.205375][T14361] netlink: 28 bytes leftover after parsing attributes in process `syz.2.13034'. [ 1690.227897][T14359] netlink: 'syz.3.13033': attribute type 2 has an invalid length. [ 1690.279957][T14365] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13036'. [ 1690.290087][T14361] netlink: 16 bytes leftover after parsing attributes in process `syz.2.13034'. [ 1690.342161][T14365] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13036'. [ 1690.481912][T14368] syzkaller0: entered promiscuous mode [ 1690.569000][T14368] syzkaller0: entered allmulticast mode [ 1690.579211][T14374] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13039'. [ 1690.868914][T14372] vcan1: entered promiscuous mode [ 1690.874193][T14372] vcan1: entered allmulticast mode [ 1690.995218][T14383] netlink: 'syz.3.13040': attribute type 12 has an invalid length. [ 1691.217435][T14389] netlink: 40 bytes leftover after parsing attributes in process `syz.1.13043'. [ 1691.372966][T14391] veth1_to_team: entered promiscuous mode [ 1691.400610][T14391] veth1_to_team: left promiscuous mode [ 1691.720190][T14402] bond10: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 1691.782759][T14402] bond10 (unregistering): Released all slaves [ 1691.877592][T14407] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1536) ! [ 1692.224207][T14427] netlink: 12 bytes leftover after parsing attributes in process `syz.2.13055'. [ 1692.379204][T14423] netlink: 16 bytes leftover after parsing attributes in process `syz.1.13054'. [ 1692.574888][T14437] netlink: 16 bytes leftover after parsing attributes in process `syz.1.13060'. [ 1692.591956][T14435] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13059'. [ 1692.626261][T14435] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 1692.733317][T14443] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13062'. [ 1692.853547][T14446] vlan2: entered promiscuous mode [ 1692.873764][T14446] bridge0: entered promiscuous mode [ 1693.524483][T14464] vlan2: entered promiscuous mode [ 1693.877443][T14472] nbd19: detected capacity change from 0 to 63 [ 1693.904188][T11954] block nbd19: Receive control failed (result -32) [ 1694.049217][T14480] netlink: 24 bytes leftover after parsing attributes in process `syz.0.13074'. [ 1694.095394][T14486] set match dimension is over the limit! [ 1694.265508][T14493] netlink: 'syz.4.13079': attribute type 5 has an invalid length. [ 1694.277789][T14493] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13079'. [ 1694.565569][T14510] syzkaller0: entered promiscuous mode [ 1694.575007][T14510] syzkaller0: entered allmulticast mode [ 1695.001998][T14524] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.13089'. [ 1695.057381][T14531] IPVS: ovf: FWM 3 0x00000003 - no destination available [ 1695.298242][T14543] netlink: 25 bytes leftover after parsing attributes in process `syz.1.13095'. [ 1695.322130][T14543] .70·: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1695.356087][T14543] .70·: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1695.381488][T14543] .70·: entered allmulticast mode [ 1695.396630][T14543] hsr_slave_0: entered allmulticast mode [ 1695.416011][T14543] hsr_slave_1: entered allmulticast mode [ 1695.527394][T14545] xt_CT: No such helper "netbios-ns" [ 1695.630171][T14550] lo speed is unknown, defaulting to 1000 [ 1695.717057][T14560] tipc: Started in network mode [ 1695.738496][T14560] tipc: Node identity 0a6d008af432, cluster identity 4711 [ 1695.760214][T14560] tipc: Enabled bearer , priority 0 [ 1695.918657][T14566] syzkaller0: entered promiscuous mode [ 1695.934531][T14566] syzkaller0: entered allmulticast mode [ 1695.942187][T14566] tipc: Resetting bearer [ 1696.032041][T14558] tipc: Resetting bearer [ 1698.778315][T14558] tipc: Disabling bearer [ 1698.802691][T14571] bridge3: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 1698.813897][T14550] lo speed is unknown, defaulting to 1000 [ 1698.886785][T14580] workqueue: Failed to create a rescuer kthread for wq "bond8": -EINTR [ 1698.887348][T14584] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1698.929519][ T6831] tipc: Node number set to 4267638922 [ 1699.529897][T14621] __nla_validate_parse: 2 callbacks suppressed [ 1699.529931][T14621] netlink: 8 bytes leftover after parsing attributes in process `syz.4.13119'. [ 1699.543057][T14624] xt_NFQUEUE: number of total queues is 0 [ 1700.151605][T14643] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1700.410713][T14655] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 1700.507703][T14655] netlink: 'syz.0.13131': attribute type 21 has an invalid length. [ 1700.520232][T14655] netlink: 132 bytes leftover after parsing attributes in process `syz.0.13131'. [ 1700.530252][T14655] netlink: 'syz.0.13131': attribute type 1 has an invalid length. [ 1700.847185][T14669] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13136'. [ 1700.863593][T14666] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13135'. [ 1700.877793][T14670] netlink: 16 bytes leftover after parsing attributes in process `syz.4.13137'. [ 1701.161809][T14672] netlink: 16 bytes leftover after parsing attributes in process `syz.0.13138'. [ 1701.173064][T14676] lo speed is unknown, defaulting to 1000 [ 1701.749178][T14690] xt_CT: No such helper "netbios-ns" [ 1701.794310][T14696] netlink: 'syz.0.13148': attribute type 1 has an invalid length. [ 1702.004939][T14696] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1702.010344][T14705] netlink: 9 bytes leftover after parsing attributes in process `syz.3.13150'. [ 1702.082874][T14704] workqueue: Failed to create a rescuer kthread for wq "bond10": -EINTR [ 1702.083543][T14705] .71·: renamed from .70· [ 1702.120243][T14705] A link change request failed with some changes committed already. Interface .71· may have been left with an inconsistent configuration, please check. [ 1702.173109][T14709] netlink: 'syz.1.13151': attribute type 3 has an invalid length. [ 1702.184722][T14676] lo speed is unknown, defaulting to 1000 [ 1702.206384][T14709] netlink: 'syz.1.13151': attribute type 3 has an invalid length. [ 1702.275971][T14716] x_tables: ip6_tables: CHECKSUM.0 target: invalid size 8 (kernel) != (user) 0 [ 1702.377267][T14720] netlink: 'syz.3.13155': attribute type 1 has an invalid length. [ 1702.420292][T14725] netlink: 'syz.3.13155': attribute type 1 has an invalid length. [ 1702.547862][T14730] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13158'. [ 1702.805523][T14736] veth1_to_team: entered promiscuous mode [ 1702.811363][T14739] netlink: 4 bytes leftover after parsing attributes in process `syz.3.13163'. [ 1702.827843][T14740] netlink: 16 bytes leftover after parsing attributes in process `syz.1.13162'. [ 1702.839441][T14736] veth1_to_team: left promiscuous mode [ 1702.962012][T14740] FAULT_INJECTION: forcing a failure. [ 1702.962012][T14740] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1702.992945][T14740] CPU: 0 UID: 0 PID: 14740 Comm: syz.1.13162 Not tainted syzkaller #0 PREEMPT(full) [ 1702.992976][T14740] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1702.992989][T14740] Call Trace: [ 1702.992998][T14740] [ 1702.993008][T14740] dump_stack_lvl+0xe8/0x150 [ 1702.993044][T14740] should_fail_ex+0x412/0x560 [ 1702.993078][T14740] _copy_from_iter+0x1d3/0x1670 [ 1702.993113][T14740] ? rcu_is_watching+0x15/0xb0 [ 1702.993149][T14740] ? __pfx__copy_from_iter+0x10/0x10 [ 1702.993187][T14740] ? netlink_sendmsg+0x650/0xb40 [ 1702.993218][T14740] ? skb_put+0x11b/0x210 [ 1702.993254][T14740] netlink_sendmsg+0x6c0/0xb40 [ 1702.993293][T14740] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1702.993327][T14740] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1702.993357][T14740] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1702.993385][T14740] ____sys_sendmsg+0x972/0x9f0 [ 1702.993405][T14740] ? __lock_acquire+0x6b5/0x2cf0 [ 1702.993442][T14740] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1702.993474][T14740] ? import_iovec+0x73/0xa0 [ 1702.993518][T14740] ___sys_sendmsg+0x2a5/0x360 [ 1702.993548][T14740] ? __pfx____sys_sendmsg+0x10/0x10 [ 1702.993624][T14740] __sys_sendmmsg+0x27c/0x4e0 [ 1702.993653][T14740] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1702.993674][T14740] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 1702.993737][T14740] ? ksys_write+0x242/0x270 [ 1702.993764][T14740] ? __pfx_ksys_write+0x10/0x10 [ 1702.993794][T14740] __x64_sys_sendmmsg+0xa0/0xc0 [ 1702.993819][T14740] do_syscall_64+0x14d/0xf80 [ 1702.993848][T14740] ? trace_irq_disable+0x3b/0x150 [ 1702.993877][T14740] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1702.993899][T14740] ? clear_bhb_loop+0x40/0x90 [ 1702.993930][T14740] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1702.993951][T14740] RIP: 0033:0x7f75cc59c799 [ 1702.993979][T14740] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1702.993998][T14740] RSP: 002b:00007f75ca7f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1702.994022][T14740] RAX: ffffffffffffffda RBX: 00007f75cc815fa0 RCX: 00007f75cc59c799 [ 1702.994038][T14740] RDX: 04000000000001f2 RSI: 0000200000000000 RDI: 0000000000000005 [ 1702.994053][T14740] RBP: 00007f75ca7f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1702.994066][T14740] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1702.994079][T14740] R13: 00007f75cc816038 R14: 00007f75cc815fa0 R15: 00007ffdf65856e8 [ 1702.994113][T14740] [ 1703.272658][T14742] FAULT_INJECTION: forcing a failure. [ 1703.272658][T14742] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1703.352234][T14742] CPU: 1 UID: 0 PID: 14742 Comm: syz.2.13164 Not tainted syzkaller #0 PREEMPT(full) [ 1703.352266][T14742] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1703.352279][T14742] Call Trace: [ 1703.352288][T14742] [ 1703.352297][T14742] dump_stack_lvl+0xe8/0x150 [ 1703.352332][T14742] should_fail_ex+0x412/0x560 [ 1703.352364][T14742] prepare_alloc_pages+0x22a/0x650 [ 1703.352399][T14742] __alloc_frozen_pages_noprof+0x12f/0x380 [ 1703.352430][T14742] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1703.352460][T14742] ? __pfx_policy_nodemask+0x10/0x10 [ 1703.352497][T14742] alloc_pages_bulk_noprof+0x558/0x700 [ 1703.352530][T14742] ? alloc_pages_noprof+0xbd/0x190 [ 1703.352561][T14742] __kasan_populate_vmalloc+0xc1/0x1d0 [ 1703.352590][T14742] alloc_vmap_area+0xd73/0x14b0 [ 1703.352639][T14742] ? __pfx_alloc_vmap_area+0x10/0x10 [ 1703.352672][T14742] ? __kmalloc_cache_node_noprof+0x3ef/0x6b0 [ 1703.352697][T14742] ? __get_vm_area_node+0x13f/0x300 [ 1703.352716][T14742] ? __kmalloc_cache_node_noprof+0x248/0x6b0 [ 1703.352739][T14742] ? xdp_umem_create+0x6dc/0x8b0 [ 1703.352768][T14742] __get_vm_area_node+0x1f8/0x300 [ 1703.352790][T14742] ? xdp_umem_create+0x6dc/0x8b0 [ 1703.352818][T14742] vmap+0x162/0x310 [ 1703.352838][T14742] ? xdp_umem_create+0x6dc/0x8b0 [ 1703.352870][T14742] xdp_umem_create+0x6dc/0x8b0 [ 1703.352907][T14742] xsk_setsockopt+0x860/0x990 [ 1703.352935][T14742] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1703.352968][T14742] ? __fget_files+0x2a/0x420 [ 1703.352995][T14742] ? aa_sock_opt_perm+0xff/0x1a0 [ 1703.353036][T14742] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 1703.353059][T14742] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1703.353090][T14742] do_sock_setsockopt+0x17c/0x1b0 [ 1703.353127][T14742] __x64_sys_setsockopt+0x13d/0x1b0 [ 1703.353164][T14742] do_syscall_64+0x14d/0xf80 [ 1703.353192][T14742] ? trace_irq_disable+0x3b/0x150 [ 1703.353222][T14742] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1703.353243][T14742] ? clear_bhb_loop+0x40/0x90 [ 1703.353269][T14742] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1703.353290][T14742] RIP: 0033:0x7f8ce539c799 [ 1703.353309][T14742] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1703.353327][T14742] RSP: 002b:00007f8ce6224028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1703.353350][T14742] RAX: ffffffffffffffda RBX: 00007f8ce5615fa0 RCX: 00007f8ce539c799 [ 1703.353366][T14742] RDX: 0000000000000004 RSI: 000000000000011b RDI: 0000000000000003 [ 1703.353379][T14742] RBP: 00007f8ce6224090 R08: 0000000000000020 R09: 0000000000000000 [ 1703.353392][T14742] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000002 [ 1703.353405][T14742] R13: 00007f8ce5616038 R14: 00007f8ce5615fa0 R15: 00007ffd364da6e8 [ 1703.353440][T14742] [ 1703.880946][T14748] bond7: option mode: unable to set because the bond device has slaves [ 1703.891389][T14748] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 1704.144300][T14760] xt_NFQUEUE: number of total queues is 0 [ 1704.187795][T14762] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1704.478868][T14777] caif0: entered promiscuous mode [ 1704.484048][T14777] caif0: entered allmulticast mode [ 1704.621036][T14791] netlink: 'syz.3.13180': attribute type 13 has an invalid length. [ 1704.643142][T14778] bond10: entered promiscuous mode [ 1704.649171][T14778] 8021q: adding VLAN 0 to HW filter on device bond10 [ 1704.754372][T14795] __nla_validate_parse: 2 callbacks suppressed [ 1704.754394][T14795] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13180'. [ 1704.902192][T14797] tipc: Enabled bearer , priority 0 [ 1705.007962][T14802] netlink: 'syz.0.13182': attribute type 1 has an invalid length. [ 1705.012070][T14797] syzkaller0: entered promiscuous mode [ 1705.026281][T14797] syzkaller0: entered allmulticast mode [ 1705.043019][T14797] tipc: Resetting bearer [ 1705.097016][T14802] bond2: entered promiscuous mode [ 1705.103165][T14802] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1705.111539][T14796] tipc: Resetting bearer [ 1705.146193][T14800] netlink: 'syz.0.13182': attribute type 1 has an invalid length. [ 1705.839204][T14826] netlink: 16 bytes leftover after parsing attributes in process `syz.3.13185'. [ 1708.251087][T14796] tipc: Disabling bearer [ 1708.333093][T14809] bridge4: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 1708.560963][T14840] [ 1708.563360][T14840] ====================================================== [ 1708.570405][T14840] WARNING: possible circular locking dependency detected [ 1708.577448][T14840] syzkaller #0 Not tainted [ 1708.581894][T14840] ------------------------------------------------------ [ 1708.588935][T14840] syz.4.13189/14840 is trying to acquire lock: [ 1708.595102][T14840] ffffffff8fd422f8 (nr_node_list_lock){+...}-{3:3}, at: nr_rt_device_down+0xbe/0x860 [ 1708.604714][T14840] [ 1708.604714][T14840] but task is already holding lock: [ 1708.612096][T14840] ffffffff8fd42298 (nr_neigh_list_lock){+...}-{3:3}, at: nr_rt_device_down+0x28/0x860 [ 1708.621692][T14840] [ 1708.621692][T14840] which lock already depends on the new lock. [ 1708.621692][T14840] [ 1708.632092][T14840] [ 1708.632092][T14840] the existing dependency chain (in reverse order) is: [ 1708.641106][T14840] [ 1708.641106][T14840] -> #2 (nr_neigh_list_lock){+...}-{3:3}: [ 1708.649024][T14840] _raw_spin_lock_bh+0x36/0x50 [ 1708.654321][T14840] nr_rt_ioctl+0x40c/0xf90 [ 1708.659271][T14840] sock_do_ioctl+0x101/0x320 [ 1708.664446][T14840] sock_ioctl+0x5c6/0x7f0 [ 1708.669303][T14840] __se_sys_ioctl+0xfc/0x170 [ 1708.674417][T14840] do_syscall_64+0x14d/0xf80 [ 1708.679538][T14840] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1708.685967][T14840] [ 1708.685967][T14840] -> #1 (&nr_node->node_lock){+...}-{3:3}: [ 1708.693994][T14840] _raw_spin_lock_bh+0x36/0x50 [ 1708.699303][T14840] nr_rt_ioctl+0x215/0xf90 [ 1708.704253][T14840] sock_do_ioctl+0x101/0x320 [ 1708.709378][T14840] sock_ioctl+0x5c6/0x7f0 [ 1708.714232][T14840] __se_sys_ioctl+0xfc/0x170 [ 1708.719520][T14840] do_syscall_64+0x14d/0xf80 [ 1708.724724][T14840] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1708.731144][T14840] [ 1708.731144][T14840] -> #0 (nr_node_list_lock){+...}-{3:3}: [ 1708.738973][T14840] __lock_acquire+0x15a5/0x2cf0 [ 1708.744355][T14840] lock_acquire+0xf0/0x2e0 [ 1708.749302][T14840] _raw_spin_lock_bh+0x36/0x50 [ 1708.754593][T14840] nr_rt_device_down+0xbe/0x860 [ 1708.759973][T14840] nr_device_event+0x137/0x150 [ 1708.765302][T14840] notifier_call_chain+0x1be/0x400 [ 1708.770944][T14840] __dev_notify_flags+0x16d/0x310 [ 1708.776500][T14840] netif_change_flags+0xe8/0x1a0 [ 1708.781967][T14840] dev_change_flags+0x130/0x260 [ 1708.787346][T14840] dev_ioctl+0x7b4/0x1150 [ 1708.792212][T14840] sock_do_ioctl+0x23e/0x320 [ 1708.797328][T14840] sock_ioctl+0x5c6/0x7f0 [ 1708.802192][T14840] __se_sys_ioctl+0xfc/0x170 [ 1708.807309][T14840] do_syscall_64+0x14d/0xf80 [ 1708.812438][T14840] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1708.818857][T14840] [ 1708.818857][T14840] other info that might help us debug this: [ 1708.818857][T14840] [ 1708.829083][T14840] Chain exists of: [ 1708.829083][T14840] nr_node_list_lock --> &nr_node->node_lock --> nr_neigh_list_lock [ 1708.829083][T14840] [ 1708.842930][T14840] Possible unsafe locking scenario: [ 1708.842930][T14840] [ 1708.850468][T14840] CPU0 CPU1 [ 1708.855837][T14840] ---- ---- [ 1708.861208][T14840] lock(nr_neigh_list_lock); [ 1708.865889][T14840] lock(&nr_node->node_lock); [ 1708.873266][T14840] lock(nr_neigh_list_lock); [ 1708.880464][T14840] lock(nr_node_list_lock); [ 1708.885143][T14840] [ 1708.885143][T14840] *** DEADLOCK *** [ 1708.885143][T14840] [ 1708.893373][T14840] 2 locks held by syz.4.13189/14840: [ 1708.898654][T14840] #0: ffffffff8fbc6f48 (rtnl_mutex){+.+.}-{4:4}, at: dev_ioctl+0x7a4/0x1150 [ 1708.907461][T14840] #1: ffffffff8fd42298 (nr_neigh_list_lock){+...}-{3:3}, at: nr_rt_device_down+0x28/0x860 [ 1708.917481][T14840] [ 1708.917481][T14840] stack backtrace: [ 1708.923390][T14840] CPU: 0 UID: 0 PID: 14840 Comm: syz.4.13189 Not tainted syzkaller #0 PREEMPT(full) [ 1708.923410][T14840] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1708.923422][T14840] Call Trace: [ 1708.923431][T14840] [ 1708.923439][T14840] dump_stack_lvl+0xe8/0x150 [ 1708.923464][T14840] print_circular_bug+0x2e1/0x300 [ 1708.923491][T14840] check_noncircular+0x12e/0x150 [ 1708.923517][T14840] __lock_acquire+0x15a5/0x2cf0 [ 1708.923541][T14840] ? __lock_acquire+0x6b5/0x2cf0 [ 1708.923563][T14840] lock_acquire+0xf0/0x2e0 [ 1708.923582][T14840] ? nr_rt_device_down+0xbe/0x860 [ 1708.923607][T14840] ? nr_rt_device_down+0xbe/0x860 [ 1708.923628][T14840] _raw_spin_lock_bh+0x36/0x50 [ 1708.923647][T14840] ? nr_rt_device_down+0xbe/0x860 [ 1708.923667][T14840] nr_rt_device_down+0xbe/0x860 [ 1708.923686][T14840] ? nr_device_event+0x12f/0x150 [ 1708.923708][T14840] nr_device_event+0x137/0x150 [ 1708.923727][T14840] notifier_call_chain+0x1be/0x400 [ 1708.923753][T14840] __dev_notify_flags+0x16d/0x310 [ 1708.923778][T14840] ? __pfx___dev_notify_flags+0x10/0x10 [ 1708.923802][T14840] ? __dev_change_flags+0x4c6/0x690 [ 1708.923826][T14840] ? kasan_quarantine_put+0xbb/0x1f0 [ 1708.923843][T14840] ? __pfx___dev_change_flags+0x10/0x10 [ 1708.923867][T14840] ? full_name_hash+0x92/0xe0 [ 1708.923892][T14840] netif_change_flags+0xe8/0x1a0 [ 1708.923923][T14840] dev_change_flags+0x130/0x260 [ 1708.923948][T14840] dev_ioctl+0x7b4/0x1150 [ 1708.923970][T14840] sock_do_ioctl+0x23e/0x320 [ 1708.923990][T14840] ? __pfx_sock_do_ioctl+0x10/0x10 [ 1708.924014][T14840] sock_ioctl+0x5c6/0x7f0 [ 1708.924032][T14840] ? __pfx_sock_ioctl+0x10/0x10 [ 1708.924050][T14840] ? __fget_files+0x2a/0x420 [ 1708.924072][T14840] ? __fget_files+0x3a0/0x420 [ 1708.924093][T14840] ? __fget_files+0x2a/0x420 [ 1708.924115][T14840] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1708.924135][T14840] ? __pfx_sock_ioctl+0x10/0x10 [ 1708.924153][T14840] __se_sys_ioctl+0xfc/0x170 [ 1708.924171][T14840] do_syscall_64+0x14d/0xf80 [ 1708.924193][T14840] ? trace_irq_disable+0x3b/0x150 [ 1708.924216][T14840] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1708.924232][T14840] ? clear_bhb_loop+0x40/0x90 [ 1708.924250][T14840] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1708.924266][T14840] RIP: 0033:0x7fcbddb9c799 [ 1708.924282][T14840] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1708.924298][T14840] RSP: 002b:00007fcbde9b2028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1708.924316][T14840] RAX: ffffffffffffffda RBX: 00007fcbdde16090 RCX: 00007fcbddb9c799 [ 1708.924329][T14840] RDX: 0000200000000000 RSI: 0000000000008914 RDI: 000000000000000a [ 1708.924340][T14840] RBP: 00007fcbddc32c99 R08: 0000000000000000 R09: 0000000000000000 [ 1708.924351][T14840] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1708.924361][T14840] R13: 00007fcbdde16128 R14: 00007fcbdde16090 R15: 00007ffdccd0bb28 [ 1708.924386][T14840] [ 1709.316180][T14841] netlink: 'syz.4.13189': attribute type 1 has an invalid length. [ 1714.318223][ T1753] block nbd2: Possible stuck request ffff888026b50000: control (read@0,1024B). Runtime 1200 seconds [ 1714.329301][ T1753] block nbd2: Possible stuck request ffff888026b50200: control (read@1024,1024B). Runtime 1200 seconds [ 1714.341641][ T1753] block nbd2: Possible stuck request ffff888026b50400: control (read@2048,1024B). Runtime 1200 seconds [ 1714.353603][ T1753] block nbd2: Possible stuck request ffff888026b50600: control (read@3072,1024B). Runtime 1200 seconds