last executing test programs: 2.331906504s ago: executing program 0 (id=17936): getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000080)={@ipv4={""/10, ""/2, @remote}, 0x0}, &(0x7f0000000180)=0x14) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', r0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000000)=@framed={{}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x32}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 2.26046954s ago: executing program 0 (id=17937): socket$rxrpc(0x21, 0x2, 0xa) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYRES8=r0], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0xea5bc50b6199d76e) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x0, 0x12, 0xffffffffffffffff, 0x11eac000) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x8, 0x4, 0x4, 0x4}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b80)={0x11, 0xc, &(0x7f00000006c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}}]}, &(0x7f0000000780)='syzkaller\x00'}, 0x90) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'veth1\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x2, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x0, 0x8}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x2, 0x2, {0x4000}}}, @TCA_STAB={0x0, 0x8, 0x0, 0x1, [{{0x0, 0x1, {0xfa, 0xf, 0x100, 0x3, 0x1, 0x3, 0xb}}, {0x0, 0x2, [0xa37, 0xfff, 0x8]}}, {{0x0, 0x1, {0xaa, 0x0, 0x7, 0x7, 0x1, 0x1, 0xfffffffe}}, {0x0, 0x2, [0x6, 0x8, 0x9]}}]}]}, 0x38}}, 0x0) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, 0xffffffffffffffff, 0x2000) 2.16125304s ago: executing program 0 (id=17940): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_80211_inject_frame(0x0, 0x0, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'wlan1\x00', &(0x7f00000000c0)=@ethtool_ringparam={0x11, 0x3, 0x8, 0x0, 0x5, 0x2, 0x1, 0x2, 0x6}}) sendmsg$IPVS_CMD_GET_DEST(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0xc015) 1.579525853s ago: executing program 4 (id=17948): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000005e0001"], 0x20}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x20}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0xa, 0x17, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf090000000000009709010000000281650000000000000018010000646c6c2500000000002020207b9af8ff000000002e9100000000000037010000f8ffffffb702000008000000b70300000000000014000000060000805f93000000000000b5030000000000008500000076000000b70000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000080)=@framed={{}, [@ldst={0x2, 0x2, 0x3, 0x1, 0x0, 0x40}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) 1.451584516s ago: executing program 4 (id=17952): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c000200080001"], 0x3c}}, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), r1) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=ANY=[@ANYBLOB="440000001000090600000000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="a7ffa888000000001c00128009000100766c616e000000000c000280060001000100000008000500", @ANYRES32=r4], 0x44}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x60, &(0x7f0000000300)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060003001008000008001500700f0d0008000700ac1414bb08000a00", @ANYRES32=r7], 0x5c}}, 0x40) 1.279291203s ago: executing program 0 (id=17956): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'syztnl2\x00', &(0x7f00000001c0)={'gre0\x00', 0x0, 0x700, 0x10, 0x3, 0x2, {{0xd, 0x4, 0x2, 0x3e, 0x34, 0x65, 0x0, 0x2, 0x29, 0x0, @private=0xa010101, @empty, {[@timestamp={0x44, 0x18, 0xc4, 0x0, 0x0, [0x5, 0x8, 0x4, 0x18051aa9, 0x7]}, @noop, @ra={0x94, 0x4, 0x1}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000300)={'syztnl1\x00', &(0x7f0000000280)={'ip6gre0\x00', 0x0, 0x2, 0xfe, 0x9, 0x6, 0x4e, @dev={0xfe, 0x80, '\x00', 0x3e}, @mcast1, 0x700, 0x20, 0x2}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000400)={'gretap0\x00', &(0x7f0000000340)={'syztnl1\x00', 0x0, 0x40, 0x700, 0x4, 0x2, {{0x22, 0x4, 0x3, 0x1, 0x88, 0x68, 0x0, 0x8, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, {[@timestamp_prespec={0x44, 0x14, 0x55, 0x3, 0x4, [{@empty, 0x9}, {@private=0xa010101}]}, @generic={0x82, 0x10, "ffb34d3cb598e9846b6f025e8d03"}, @timestamp_prespec={0x44, 0x3c, 0xa0, 0x3, 0x2, [{@remote, 0x5}, {@rand_addr=0x64010102, 0x8}, {@rand_addr=0x64010100, 0x8}, {@empty, 0x80000000}, {@local, 0xb29}, {@multicast1, 0x200}, {@multicast1, 0x80000001}]}, @timestamp={0x44, 0xc, 0x8d, 0x0, 0xb, [0x0, 0x5]}, @rr={0x7, 0x7, 0x26, [@remote]}]}}}}}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$team(&(0x7f0000000100), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01000000000001dcdf250100000008000100", @ANYRES32=r7], 0x5c}, 0x1, 0x400000000000000}, 0x40000) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000440)={0x0, @multicast2, @dev}, &(0x7f0000000480)=0xc) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000004c0)={'batadv_slave_0\x00', 0x0}) r10 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r10, 0x8933, &(0x7f0000000500)={'team0\x00', 0x0}) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r12, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001a80)=@newqdisc={0x48, 0x24, 0xf0b, 0x3fff, 0x25dfdbfc, {0x0, 0x0, 0x12, r11, {0x0, 0xf}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x18, 0x2, [@TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x1}, @TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x8000}]}}]}, 0x48}}, 0x4c094) sendmsg$ETHTOOL_MSG_DEBUG_GET(r0, &(0x7f0000000680)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000640)={&(0x7f0000000500)={0x120, r1, 0x10, 0x70bd27, 0x25dfdbfb, {}, [@HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x120}, 0x1, 0x0, 0x0, 0x8000}, 0x80) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, 0x0, 0x0) r13 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000d40), 0xffffffffffffffff) r14 = socket$nl_generic(0x10, 0x3, 0x10) r15 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), r0) sendmsg$IPVS_CMD_GET_SERVICE(r14, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r15, 0x200, 0x70bd25, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x9}}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x48004}, 0x4000) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)={&(0x7f0000000d80)={0x38, r13, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x101}]}]}, 0x38}}, 0x0) r16 = bpf$ITER_CREATE(0x21, &(0x7f00000006c0), 0x8) r17 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r18 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_MPATH(r17, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r18, @ANYBLOB="01000020b69c97553002677b00000c"], 0x2c}}, 0x0) sendmsg$NL80211_CMD_SET_KEY(r16, &(0x7f0000000840)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000800)={&(0x7f0000000740)={0x3c, r18, 0x0, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x5, 0x69}}}}, [@NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY_SEQ={0x10, 0xa, "3f4ee7a6775dfe2654c3681c"}, @NL80211_ATTR_KEY_DEFAULT={0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x404c000) 1.206334033s ago: executing program 4 (id=17957): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x0, 'lblc\x00', 0x28, 0xc, 0x5c}, 0x2c) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=@newsa={0x144, 0x10, 0x1, 0xbffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@local, 0x1, 0x794, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x9, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0x1ff}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0xfd, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @mark={0xc, 0x15, {0x35075a, 0x4}}]}, 0x144}, 0x1, 0x0, 0x0, 0x8801}, 0x10) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x18, 0x1, 0xfffffffe, 0x100, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x71c, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@dev={0xac, 0x14, 0x14, 0x25}, {0x0, 0x192, 0x9ba3, 0xffff, 0x8251c, 0x5, 0xfffffffffffffffc}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffa, 0xfffffffc}, 0x80, 0x3500, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000880)=@ipv6_delrule={0x1c, 0x1e, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}}, 0x1c}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc}, 0x48) sendmsg$TIPC_NL_BEARER_ADD(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="99742bbd7000fbdbdf25150000004c00018038000400200001000a004e2100008464fcc98c00000000000001000000000000000000001400150002004e20ac14141300000000000000000d0001007564703a73797a3200000000"], 0x60}, 0x1, 0x0, 0x0, 0x4000080}, 0x20000800) sendmsg$TIPC_NL_MON_GET(r4, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000480)={0x1ac, r6, 0x10, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xe}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}]}, @TIPC_NLA_NODE={0x150, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_KEY={0x3d, 0x4, {'gcm(aes)\x00', 0x15, "a253865bbb86dba97cd0d2b06721ad4e41eb73196d"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_ID={0xc1, 0x3, "15ff4af14cbe51d68b73b044b8c8332020a07294e2a34e07fd89dcaaa4edd982a17e1ee92988b3e03b1eb6670fafe335d00cff8c86c3157a04ed1bcde726659210df2ecad427287e73580f37290620c71ce4875427490e851084a945cb07d6f994fe1f4cbff2d3ce9f85f9153ef84863c747593c1020f8b955244e62cbe435e356d3e3cbe1d69f5df6022721dd41db908338d986cf1b20a6d5457a01abcee9c1f90728dd864aea2fba219bf54b69f7eabb877b40ddb3df3fc72ce0a343"}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x1ff}, @TIPC_NLA_NODE_ID={0x22, 0x3, "608670ac742527437be3c30bbef2a986021387f9bcfd3ff1e80a297fe900"}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_SOCK={0x18, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3ff}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}]}]}, 0x1ac}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) r7 = socket(0x10, 0x803, 0x0) bind$netlink(r7, &(0x7f0000000000)={0x10, 0x0, 0x25dfd3fd, 0x400}, 0xc) getsockname$packet(r7, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r7, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=@newlink={0x44, 0x10, 0x40d, 0x70bd2f, 0x1ffffffc, {0x0, 0x0, 0x0, r8, 0x40046}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x4}, @IFLA_BOND_ALL_SLAVES_ACTIVE={0x5, 0x11, 0x1}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40040}, 0x8000) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000340), &(0x7f0000000380)=0x4) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000006c0)={'ip6gre0\x00', &(0x7f0000000640)={'ip6tnl0\x00', 0x0, 0x2f, 0xff, 0x53, 0x5, 0x21, @local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x8, 0x7f41, 0xfffffff8, 0x2}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000900)={'sit0\x00', &(0x7f0000000700)={'gre0\x00', 0x0, 0x700, 0x1, 0x2, 0x5, {{0xc, 0x4, 0x1, 0x30, 0x30, 0x68, 0x0, 0x2, 0x29, 0x0, @rand_addr=0x64010102, @remote, {[@lsrr={0x83, 0xf, 0xbe, [@private=0xa010102, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @timestamp_addr={0x44, 0xc, 0xda, 0x1, 0x4, [{@broadcast, 0x7fff}]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000940)) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000a00)={'ip6_vti0\x00', &(0x7f0000000980)={'ip6gre0\x00', 0x0, 0x4, 0x0, 0x9, 0x4c, 0x40, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast1, 0x7, 0x1, 0x5, 0xff}}) 1.028206412s ago: executing program 2 (id=17958): r0 = socket$inet(0x2, 0x4000000805, 0x0) sendmmsg(r0, &(0x7f0000000e40)=[{{&(0x7f0000000000)=@l2tp={0x2, 0x0, @local}, 0x80, &(0x7f0000000300)=[{&(0x7f00000000c0)="ae", 0x1}], 0x1}}, {{0x0, 0x300, 0x0, 0x0, &(0x7f0000000340)=[{0x10, 0x84, 0x5}], 0x10}}], 0x2, 0x0) 907.299254ms ago: executing program 1 (id=17959): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000004c0), &(0x7f0000000500)}, 0x20) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001200)=ANY=[@ANYBLOB="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", @ANYRES32=0x1, @ANYBLOB="0300"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000050000000500"/28], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x15, 0x2c, &(0x7f00000006c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}}, @printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfff}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x4}, @jmp={0x5, 0x0, 0xd, 0x2, 0x4, 0x40, 0x8}, @map_idx_val={0x18, 0x7, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x10}, @map_idx={0x18, 0x9, 0x5, 0x0, 0xe}, @map_val={0x18, 0x2, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9}, @jmp={0x5, 0x0, 0x4, 0x1, 0x9, 0x7d159356dd686f52}, @btf_id={0x18, 0x8, 0x3, 0x0, 0x2}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000480)='syzkaller\x00'}, 0x94) r2 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000080), 0x8) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000080)={r5, 0x808000}, 0x8) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@RTM_NEWMDB={0x18, 0x54, 0x1e5, 0x0, 0x0, {0x7, r8}}, 0x18}}, 0x20044050) getsockopt$bt_hci(r3, 0x84, 0x7f, &(0x7f0000000080)=""/4057, &(0x7f0000001100)=0xfd9) sendmsg$nl_route_sched(r1, &(0x7f00000011c0)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)=@getqdisc={0x38, 0x26, 0x100, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x19, 0x9}, {0x9, 0xe}, {0x1, 0xfff1}}, [{0x4}, {0x4}, {0x4}, {0x4}, {0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x84}, 0x40001) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0x5, &(0x7f0000000180)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x79, 0x10, 0x49}, [@map_idx_val={0x18, 0x0, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0xffffffc0}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000020a010200000000000000000a0000060900010073797a310000000008000240000000018c000000020a010100000000000000000000000369000600e62807258a6d38caf4cb1d7a776a7a05e57912414e63207c5e61d47bb4016b21bd5593b033b0968722f2f0f4818a1a13fbb43e79d0ae674d071c0164df9d3701cc15211300766b6ebe326ada9e49cca5c2a07460e46e35eabfb48a4cd2cd83790d7e705b010000000900010073797a31000000001c000000090a030000000000000000000a00000208000c"], 0xf8}, 0x1, 0x0, 0x0, 0x2000c814}, 0x4000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000004000ffff0900010073797a30000000000900020073797a3100000000140003800800014000000000"], 0x138}, 0x1, 0x0, 0x0, 0x20040855}, 0x0) r10 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd0002800800"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newtaction={0x6c, 0x30, 0xffff, 0x0, 0x0, {}, [{0x58, 0x1, [@m_ife={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x6}}}, @TCA_IFE_METALST={0xc}]}, {0x3}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}]}]}, 0x6c}}, 0x0) sendmsg$kcm(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x2e}], 0x1}, 0x4000804) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r9, 0xc0385868, &(0x7f0000000280)={r2, &(0x7f0000000040)='\x00', 0x20000, &(0x7f00000001c0)={@_ha_fsid={[0x43d, 0x200]}, {0x3, 0x3, 0x8, 0x9}}, 0x2, &(0x7f0000000200), &(0x7f0000000240)=0x6}) ioctl$XFS_IOC_FSGROWFSLOG(r12, 0x4008586f, &(0x7f0000000380)={0x29, 0x40}) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r12, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x4e23, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3}}, 0x5, 0x1, 0x5, 0xe5, 0xa4, 0xe, 0x80}, 0x9c) 906.244331ms ago: executing program 3 (id=17960): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x8, &(0x7f00000002c0)=@framed={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x3}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41}, @exit, @alu={0x7, 0x1, 0xb, 0x0, 0x0, 0x1, 0x1}]}, &(0x7f0000000000)='GPL\x00', 0x5}, 0x90) 839.64746ms ago: executing program 2 (id=17961): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000060a0b0400155ba621e9ccbaab28dc5db216b368330000000000000002000000200004801c0001800900010068617368000000000000000a0900010073797a30000000000900020073797a320000000014000000"], 0x74}, 0x1, 0x0, 0x0, 0x24004094}, 0x0) connect$pppoe(r1, &(0x7f0000000100)={0x18, 0x0, {0x7, @empty, 'ip_vti0\x00'}}, 0x1e) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="30000000100001006c4789a814340228abff4c0061839b9b46a0d556bc93477c315ea9c69e6792a43322", @ANYRES32=0x0, @ANYBLOB="211000000300000008001b0000000000080004000180"], 0x30}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) connect$pppoe(r1, &(0x7f0000000040)={0x18, 0x0, {0x0, @multicast, 'tunl0\x00'}}, 0x1e) 735.887662ms ago: executing program 1 (id=17962): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14) (async, rerun: 32) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000200)={@dev}, 0x14) (async, rerun: 32) setsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f00000003c0)={@remote}, 0x14) (async, rerun: 64) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90) (async, rerun: 64) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_proto_private(r2, 0x89e9, 0x0) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000001a00)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYRES16=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a5df"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$FS_IOC_FSGETXATTR(r4, 0x801c581f, &(0x7f0000000040)={0x8, 0xa, 0xfffffffc, 0x522, 0x6}) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r3, 0xc0385868, &(0x7f0000000240)={r1, &(0x7f0000000080)='GPL\x00', 0x0, &(0x7f00000000c0)={@_ha_fsid={[0xbb, 0x7]}, {0xc8, 0x0, 0x746a, 0xffffffffffff4d43}}, 0x91e, &(0x7f0000000140)={@_ha_fsid}, &(0x7f0000000200)=0x5}) (async, rerun: 32) r6 = socket$packet(0x11, 0x2, 0x300) (rerun: 32) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x6}, 0x4) (async) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r7, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xb007}, 0x4) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r5, 0x84, 0x1e, &(0x7f0000000280), &(0x7f00000002c0)=0x4) (async) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 32) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 32) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r1, 0x4048587b, &(0x7f0000000e80)={{r9, &(0x7f0000000300)='/:\'%$-\x00', 0x0, &(0x7f0000000340)={@_ha_fsid={[0xa, 0x8]}, {0x2, 0xfff7, 0x1, 0x7}}, 0x2, &(0x7f0000000380), &(0x7f00000003c0)=0x2}, 0x7, &(0x7f0000000d80)=[{0x0, 0x7, &(0x7f0000000400)='%.,\x00', &(0x7f00000004c0)="b36283900bb2747eb93f2dac3a8b50ae51eb2654352485d568a727ab2121409256da011916c08ee88e67e2d81a1d6b17aed0353ad11b2727491f69d5137531a0e2ad82fd9dc1035b8d8a2a86c43f54dcd925b207ebc22d4337f8a6c02645d7dcc07e5245e94b782326b0a6698b923fb07e9aec02f79e2ca7223412c87920f442de78d17191bf7ad1315cadd208fc39033d8816fda24bf841a477e8bcace44238d03952dc4599b3168fd7e2829f146a753f42910de66cfd6abf4e40ce1f54f01f6405c6d3fd459a60518a4e1c1a3e314718229b739f930cca6a0190ca8543fbed3256d6a5d8b89381d339b31a", 0xec, 0x21}, {0x2, 0x7, &(0x7f00000005c0)='$\x00', &(0x7f0000000600)="8f5cdd7290999353bfd6fc831c64bebda74cc56c497dae38697b25a7ac2db190c9c281fd24d4bca25375dee3093c44470b68b6877c5c80ca0480934a4767cb79ae4d7483f0329c6159d37a3538b0ee1a126c25350689e523459eeee6f15c32d40df2e8af086f833c6519707d3024150fd2c5de3740", 0x75, 0x20}, {0x2, 0x0, &(0x7f0000000680)='\x00', &(0x7f00000006c0)="da7e2b757d3929539d6ad58030a4cae5dac9f30d70b27fac5734de8bd6060905e3423bdb52e179bdba35d2d4b6e39a953442a8c197404f277b7dc65697d5f9fa397eb3d917287660ae7711ba530f982368c2c1ccde5435e1de4e24fc6a444b046bf252b69d1cacbd6db4a50134acc94cb169a2f00b85f21499c9c8ef277269c7352ef8626f741af50a588591c3af0213845dc0e71aa56531850b7139734479ae8cb994b77fd779ffc3816985157107211d7f9e16afc2864e1f1d07e94b36e392a2227b5e84298d4fa337a65f8744a0ac4d0d35fec544626398ccac52e2411436d2978a143a2780b8a9769a0f5b2991c4cfbcf372", 0xf4, 0x28}, {0x1, 0x5a7, &(0x7f00000007c0)='GPL\x00', &(0x7f0000000800)="cf232d1b94bc2cae731bfb2daf2af4ff07f4e31fc1b4efa6145c74acef8e2d854cfc4ce1e1a4c08e203c2df1e0e1e5793d4275da45b2dc95c48edf7cce9db2d81e11f6ed3c17f7844aa8e8f032dfd3bf8d5c0bd127a64bd8ca", 0x59, 0x20}, {0x2, 0x0, &(0x7f0000000940)='GPL\x00', &(0x7f0000000980)="5fd4fc8b8784d3c133c1f1ab34fdf1f2ef7e581808bd46c75ae79934bf356dbab4555be2d4addeed335a9c7f5c5bba3971fcef0c0203f887759cbf0f6b5c57900d8096ba1d9f9b75a80a5dd3d1ca817b0e7586559124e2cc848680c72669899e1cac80aa36f91b975f824990526384010aaf5e38f6d0917a7eb2f83e3642ecb74a7a2b73bfe418cce43aae9ffdaedc8ef10caee8aa1d9025a716fda421995f2f34b19991758b6c8486ee0ff1655e61350e9ad460fa", 0xb5}, {0x2, 0x80000000, &(0x7f0000000b00)='\x00', &(0x7f0000000c00)="d039b1fa5122f1b3354c00b7bf1926fe689521e4420bc000018ba3e1be97c1900806d06c688d75be74fb855a076003635742e69b1bb4bc8a492df662020e9c13c31b0dd079167e860ca07095a7d0426a1f68f5766ab243754c196e6c45aeb0deb64101d99a734be7acce682b661636e3460256f61c695eb0919c18c020ec76474ffdf367ef76ad870914fdc12598efc969e72612ad4ddf57bc9514d83e757d048eaa02b37fe3379b837fa97432116ee5fc2e1cbd4231aaf8c8b687152097ab3a493f073746afbd0ebceb7acbe4b08830ec3ae964d8c54fc0342aae0f139733e00023c7c9925c294b26afd26c57f918b92c18d19323", 0xf5, 0x2}, {0x1, 0x4, &(0x7f0000000d00)='\x00', &(0x7f0000000d40)="e89a5f8694096eeec3b93798d94460e4802a81a2feff7bbe739e768666b0b1651766e5be249a8d99160090baa2aab04f0768f84676049b8ac1", 0x39, 0x10}]}) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r11, 0x84, 0x4, &(0x7f0000000f00), &(0x7f0000000f40)=0x4) setsockopt$sock_attach_bpf(r9, 0x1, 0x32, &(0x7f0000000180)=r8, 0x4) r12 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000fc0), r11) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r11, &(0x7f0000001100)={&(0x7f0000000f80)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000010c0)={&(0x7f0000001000)=ANY=[@ANYBLOB="05e3ff00", @ANYRES16=r12, @ANYBLOB="000828bd7000fbdbdf2501000000080003000600000008000300010000003c000180060005004e20000008000300ac1414bb14000400fe8000000000000000000000000000aa14000400fc01000000000000000000000000000108000300040000003400018005000200080000000800060001000000060005004e23000008000300ac1414aa080003006401010208000300ffffffff08000200070000000800030006000000"], 0xac}, 0x1, 0x0, 0x0, 0x4001}, 0x10) (async) sendmsg$inet(r10, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) 689.018066ms ago: executing program 0 (id=17963): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xc, &(0x7f0000000a40)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000180100002020692100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet6(0xa, 0x2, 0x3a) sendmmsg$inet6(r2, &(0x7f00000003c0)=[{{&(0x7f0000000380)={0xa, 0x0, 0x0, @mcast2={0xff, 0x5, '\x00', 0x0}, 0x20000}, 0x1c, &(0x7f0000000000)=[{&(0x7f0000000100)="a0002883781ecc0e", 0x8}], 0x1}}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="f9369254c92970a4", 0x8}], 0x1}}], 0x2, 0x40) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r1}, 0xc) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@link_local, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @empty, @multicast1}, @address_request}}}}, 0x0) close(r0) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000480)=@o_path={&(0x7f0000000440)='./file0\x00', r1, 0x4000, r0}, 0x18) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="0f000000004000009ef52fe83658fe459027315dd9d72242fe6bc8582a63e15195df8fe4d5e2a6f4ade63b6a79ef7bc365e3716d873e4e6f71acd52b1f5da20900dcc7c6693fe31410a89f751e30b1b5b7d451dd260dfd67b9efed2f24073e9c0e36e648aba193cd36a8b4d00b1c17ac68a56bb854b5381cac359525aeef4e11bef0255e41a2d508900021ee0f4e50ed4c72a7c50fdf78b6ea1ee2b3e98133", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r5}, &(0x7f00000006c0), &(0x7f0000000700)=r4}, 0x20) r6 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd8073a46b08b94214d816f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb4147000001000000008f2b9000f22425e4097ed62cbc891061017cfa6f6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe68db8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3542646bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000300)={'batadv_slave_0\x00', 0x0}) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000280)={@ifindex=r7, 0x2b, 0x1, 0x1fbd, &(0x7f0000000100)=[0x0], 0x1, 0x0, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0], &(0x7f00000001c0)=[0x0, 0x0]}, 0x40) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) syz_emit_ethernet(0x15, &(0x7f0000000000)={@empty, @empty, @val={@void, {0x8100, 0x4, 0x0, 0x4}}, {@generic={0x8863, "1f7761"}}}, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)=ANY=[@ANYRES32=r8, @ANYRES32=r6, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r8}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) 615.577235ms ago: executing program 3 (id=17964): socket$rxrpc(0x21, 0x2, 0xa) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES8=r0], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0xea5bc50b6199d76e) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x0, 0x12, 0xffffffffffffffff, 0x11eac000) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x8, 0x4, 0x4, 0x4}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b80)={0x11, 0xc, &(0x7f00000006c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}}]}, &(0x7f0000000780)='syzkaller\x00'}, 0x90) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'veth1\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x2, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x0, 0x8}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x2, 0x2, {0x4000}}}, @TCA_STAB={0x0, 0x8, 0x0, 0x1, [{{0x0, 0x1, {0xfa, 0xf, 0x100, 0x3, 0x1, 0x3, 0xb}}, {0x0, 0x2, [0xa37, 0xfff, 0x8]}}, {{0x0, 0x1, {0xaa, 0x0, 0x7, 0x7, 0x1, 0x1, 0xfffffffe}}, {0x0, 0x2, [0x6, 0x8, 0x9]}}]}]}, 0x38}}, 0x0) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, 0xffffffffffffffff, 0x2000) 615.382856ms ago: executing program 2 (id=17965): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r1}, 0xc) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000004c0)={r0, 0x0, &(0x7f0000000540)=""/231}, 0x20) syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) (async) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000600)={&(0x7f0000000240)=ANY=[@ANYBLOB="a4030000", @ANYRES16=r2, @ANYBLOB="00022cbd7000fedbdf2517000000100004800900010073797a3100000000c800018038000400200001000a004e2000000005ff020000000000000000000000000001080000001400020002004e24ac1414aa00000000000000002c0002800800010012000000080001001f000000080004000600000008000200510e000008000400ff01000014000280080002000000000008000200060000000c000280080001000b0000002c0002800800030001000000080001002000000008000300ffb5ffff0800020002000000080003000101000014000280080001001700000008000100200000002800078008000100030000000c0003000900000000000000080002000800002008000100ff0100004400058007000100696200000c00028008000400000400000700010069620000240002800800040009000000080001001d000000080001001400000008000100060000008000028004000400080001009435000004000400080002000600000008000100010000000800010007000000040004000c00038008000200000200004400038008000100000000000800010000000000080002000400000008000100100000000800010071f0ffff0800020008000000080001000e0000000800020037479c574c0106803c00040067636d286165732900000000000000000000000000000000000000000000004014000000b3f6bb5b16dc29d3c5a94e307b8be13ce157781476000300ea9927a983fda64ce2ad1f7d2da90167aade2c112db48aac3965a82b92b286bdf085c52b2abc46ff058ebe8e06b69499d0f60c23cf2cbcaa336784351fbe9746161ca106100ad69fd43a878985dc1571d4b2fa4a3617cb6ff17d12c176ca8a20fb9df03bf6420fa79f338ab9ff2b84a7e15e00004b00040067636d286165732900000000000000000000000000000000000000000000000023000000b24941c925002234eda94fdd74d5187f59c440aff1ad0bba56e067c37166c273c208a6003e00040067636d286165732900000000000000000000000000000000000000000000000016000000a5962c44a39abe7492d472c5ebad85b272d8440548ea00000800010005000000040003807c00028024000380080002000800000008000200020000000800010004000000080002000400000008000200000000000800020003000000080002000c0000003400038008000100008000000800010008000000080002006200000008000200b8000000080002003608000008000100080000000800020003000000"], 0x3a4}, 0x1, 0x0, 0x0, 0x4004000}, 0x40) (async) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000600)={&(0x7f0000000240)=ANY=[@ANYBLOB="a4030000", @ANYRES16=r2, @ANYBLOB="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"], 0x3a4}, 0x1, 0x0, 0x0, 0x4004000}, 0x40) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000040000000160a01000000000000000000010000020900010073797a30000000000900020073797a3100000000140003800800014000000000080002400000000038000000180a0101000b000000000000010000000900020073797a30000000000900010073797a3000"], 0xc0}, 0x1, 0x0, 0x0, 0x20002010}, 0x0) 573.014765ms ago: executing program 1 (id=17966): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x24, 0x24, 0x100, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff2, 0xffff}, {0xfff3, 0xfff2}}}, 0x24}}, 0x0) r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f00000000c0)="240000005f005f03a9f9f4ba0a1f0000000000000000ecffffffffffffff000000000000", 0x24) sendmsg$NL80211_CMD_REGISTER_FRAME(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="000129bd7000fbdb760567d956e2df253a"], 0x24}, 0x1, 0x0, 0x0, 0xc000}, 0x24040000) syz_emit_ethernet(0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="0180c2000002aaaaaaaaaaaa08004500006000000000002f9078640101000000000024806558000000000000000010000800000086dd"], 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000180012800b00010067656e65766500000800028004000e001400030067656e65766531"], 0x4c}}, 0x0) 534.662956ms ago: executing program 4 (id=17967): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000090000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000100)={0x0, 0x2844, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r3, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) sendmsg$TIPC_NL_BEARER_SET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100280000000000000004000000200001800d0001007564703a73797a32"], 0x34}}, 0x4040) r4 = syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000c80)={'wlan0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x10}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x51}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000002c0)={'ip6_vti0\x00', &(0x7f0000000180)={'syztnl0\x00', 0x0, 0x2f, 0x1, 0x9, 0x7, 0x60, @local, @private1={0xfc, 0x1, '\x00', 0x1}, 0x20, 0x700, 0x5, 0x5}}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={r1, 0xe0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000300)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3, &(0x7f0000000340)=[0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0], 0x0, 0x57, &(0x7f00000003c0)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000400), &(0x7f0000000440), 0x8, 0x36, 0x8, 0x8, &(0x7f0000000480)}}, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000600)={'batadv0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000640)={'team0\x00', 0x0}) r13 = socket(0x22, 0x2, 0x2) getsockopt$inet_sctp_SCTP_ASSOCINFO(r13, 0x84, 0x1, 0x0, 0x0) r14 = socket$kcm(0x11, 0x3, 0x0) r15 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r15, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r14, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r14, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x300, r16, 0x3e}, 0x80, &(0x7f0000002080)=[{&(0x7f0000000180)="27030200590214000600006fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0x26}, {&(0x7f0000000f00)="0b676ae7ce0aa301d6ff23b6557b3e02be56268cb67cc8df76c62092c9dc73bf02e2fbfd0d14f594db9a8faca2d1ee15bc4c2c588479eb0b462fed8714ae90e42c4c1477864b7c37d96279e5c380cb5f53b2983f7e1ec1fb074a8d4be7374be1c9b65b8587e435b5dc319cd5d25258ed81710608c0331449192c63736d71c7fbb72bd9ef8a3be726b464f445638ea32879fe12b88ebe8e141ba4b0efe8ae02c225a3c07cbd1c65a5f9a57267f88213743ea2ab323a2f8f1c50ecca7b6ee9a0fea79147e75e0eca42d7cf6d4d9a1e658e44cd8dc36a7b91cca77237962b41d760dd6e3aed631486ad0f453ef4501e60f923d992103a3845a67fca331897cac2bd51790acf2661efa41d90eda2061ce1aa53cbeab80229844f3954fe9ac6447af516907739ea3e6bbb832770194e6e655ec3a7ab80374b17059080c1fa21970d0147401a1ca1e58e3c86d77d116f4208299d7a3665898b2009c3752c786e4b45042b51366a133974ec564c9d2f0d7cbad234223a19b52e0efeccd654fd2bdd57df81cd7b478ef2b59f8446075d812f9d62e63d1b38375765aa7d63965484ef4d9b0b90ec00b39ac0430cbfee05cd73c34ad9922f50292d69194220339e3c923a9121d0e5ab3b7fc0bc6a33cc87d4cc23eb205848aa1febd8dd07bc25978ee5c6f83db659433b6187af151b76870a994fe4440c46b27fc4fae2e4ed9d711e652e6c397ccd89fc7181d168405d21d9f218508d0af65af34d43b95a83cdeb6a2bed82a8b75dcd514403aa7201818b9a0b5fe9c6ef1ce91bb73a66ee7c1a9a66b736f5556eb0d06ddef99bd96b0e9385db94623bbb509536211963e99cf3cacab5e61491086104702d8df708e72b81f4ad4e045b51deece6dc18eab276de660c803bbdb42f1f472daac3e9995b83f6ce1af3142bad2500c079fefbce71ce1b0b1213caaffab4a183b48f3e0cf64959d54f4fa14da4d06a1e7595c88e9a0ad53d18558c013417b6345ee2454bdef505f09580bc0327d8a5df4fc9dae8cda63af99bc8da17f948d3e507118d41fc028926310e40f64f6ee701c975a254c60a5e350d5c7487048904cfe569f488565596f432d96c0ee5ae08b88b8ed1be32bccb0b79f0c0e2d4f25569bd8f1b88c8d06709cfba314f357ac749e211ab1da998adcd716c3d5801dc80fea16549ab2c706bb8c6b059cee87eeb08b28478660c83a65e4898e5dc458b77f626c536f4d63efae7ab5f3ae07bc0642ef57dc64b0781f2c66fa26594d38bc82b52979c1222902cd472deff645fb0569345b0536a5a55a48edc1b3a5546c9c6e64fb685d24c833d5e143bb144e55f3e2ca4be52b4396fb7a51b537af2830fe3a49361eb142bca1852f8eb89ae3b4ecde5435dae1b9fdb21e3487502897f6e679895ef4e21ef2a286996feae183232802b4bb18ff1d751867973cc19d1e2502281c20d826142ccd7d2f8573507b654b23138feac14bbf591292fc4fa3cf491e9877948f8058bba90982e6511182a7e1140429b96d8ae605e4dd0c8f7e7a979b628d09126c69330a2471c56b0499eb35c44f9844936499e8fd0e733ead59c717a5d8984ecb8c32d5c98779926f0d3a07fc43adf20bac1c2a925d42d08f13d4811a9329fefc8cd931cfd25596954b0bca68066b885192cbdf7e40b67346d14301e348ce189be79eedb7f223e56f6a6dc00e8ffb29f21c6164ef34529ccb9a6eacf6bb99bc73adfbb6464f31fafcbd170f5bfbd7e1362f291d6998eb5a0b8ce837c78a82df60a9f96aa3bd65da1b0af7f2fe09690bec0ef0b363a7d60ada9cdd3b635ba89be863a3126d6c81419bea14d6e97178a9c1d6c1809f0278558691e6d8911137d4a8b0ac1e627aaebc72214997039515330c6abc6b32c60097c0b61fe641852cfdd92db3786905b10be4756907b809d73e5edd0f266afa391deb4d2a38341aeed0ca08bdf93c2a95342cf83a42906eb5b421f758e39d589377bfbe228093d535667e98a29cc79e0057d3e6b0592f4baddbd98607b608e6a63b16b3130ba48e5af64b2899875bd9464361cec0039d0b9044796421f4c2318081b9b811dd226ae36a67660c0fdf9537f0947790b18c4e980e7cebbd181d40658b38256999c4857599036f31f6648788d1900692416c128fc97505f4324865610b2e77a76657f971c630a432d6a4b752ea593080cff5bf30d3ef8f5f1d6412a43079dcd85f202f9039ec7e7856b01dbb03394b8ec52cc6ec299ea672ba42e9dac7546917b320529a07420f1d42f492b0f21ae3ee129b0cae1c1b4e462b0fa5d75e1a09778123d8d20d528b9a8c45f06d898950985d5bb3f5b01c7951d08c286a49036606d2ca34ee460cdd90626673b9a50a67af4694bd8ea2f1549e9779c41d7ed26b7212d6286e0a450c902c27de51aad501e8d75b4cc2fe6ad5119685cf17f3ad28e665dc254a6bd0bc49eb7c3bc3ef8ef3b01e10d05cef068380ae6d2275b7047908bb44a64d848b561d8cfa72d70ad643ffd190201dd72bdf3ea0371b0acfb2e308759a3a3b2bb103f3bc247c5ad0758c37a5e6432363d29219120af7442e84c7dd877b9f7ba471db35a56ca60d90ed80ec345af800c669159bd1ef9b77c6901173464fbf964cc388012677b8b3e5c24c6c15cc996e760642c270eadaad8b8ef82f416e43a8968fce60a38780e763383ee06102ac7293d4141c299ece45f42b7029296e8388ae60c887b45b2ad4ec7a5d0d0a77ef67faa0c938d328771b7a6b1a4de0dbc1bb57d0a4dcf79d2adff1f43b732a1cbd56cce754230b2660fc3cf7ff3a2ce24a1d8d0728de4db12b0334ebe77b86c491e97c6329afd7441fb3739db17453e35646db77b920584c6d7a499dc4c22806e282171a930c2663a0bdedbde95fa46ffb2658ffc5569a798d6e6c9e72f695813a8eb48fd2f8c5eda4fe148887696a00c9bd9ad9ee91f8b742f7e896257959d6139de8903ef352e5d23145b6572aa0c9c08104359b1bf069687d17cd3262ef68df791b52c7ba598be8c3e26d69a2c40f3e5faf1a491967384dc506bc1fb815009f278815deebd4b62bc16140108e0080a2d66f124c6acc4759d18f3faa3555f04abd1744e382daae25f2295582102d6d01e6b9f9be0c3d75e979366e492cd8fd89edc6a616cfdc9d6478ea0b6bcc9702febaa95871d068fb83fa859d805c85d0e7fa3a0669095a662b74169ae2ba45bbb2d7e64a039c165afdb4bddb3d08090171f9383016409a1c59ec4cb51fe7a84074fcc723bacf23f4b54b82ffa6b0aae122f9813e116bec5991710b9584e8c2cacb966f60c9ce74f1b1947d0848957a4a6db8b41e6a8d0f1b2cf9fc51aed0be002398293eadbbfdd5ccdd0789b638cad0d797bcd3643b430b64383ffad5a80d2993fb3a1f4673dec5e6b9396e951f891732a23231335b245e7c7c49ce999733b47c4399634b84487ac3bcbef23c54d8f881793f74ae2e4a57bf1061a0b2f08515968770af5609fa83621bc465b197dcc6db77fcfcbc3ef7181364f82e8d9a9b2c96106d8516ba576d84d7b118ebccdf3375929ecd64ab7f27418815f5b6b9bb1969866af29e1d64854b07ee63a7fd223513ad88af82d6b49d66782fc8292dd3dabcd9c9dd0d0dedb4ec5bd0882839f455a731d41b46b5e584f0f2338239c3a2f4feb000ba0c5f1d076cc65ce3010bbd54a447f99910a11284a535223e7c9c88d08139306d4eb2c96c857697c123d6e7a0924aa2bc3ad42f9e83ba9ae0d95a98b5f720977229feb4d069c0d6a2f16b2937a8588b1d180c6183b3fb41c0c80f1052c4cd8c10d32c12774665126f47e37d475254d3d866ae6a1aac0973061ced1e998985aeca909e97b2d4c6dda4139259549eb1ea3859af95d34744793e1885a71b167a923616237734dd2a2117d6929b2a441e364c60eb70732ef627c1a6fc5d7219e4a4eb3820e2c908d0b7c03b1cb9f5c680db4e7568cb9a87645d7073c56a342bdda746bbc04c9e069cd678f4f22b5db8837fe0ace9ab523dd6674c44bf3cf310408a55fbbfb1797f768fc3decfa48aef28b669c356c5487b73614fad56b7603c9a81fd2526fc104963106f3685adfac9c97946bdd8df2348d22bb7a8cc175c9d596e5d7b6ed8e4ea06aa3191843bcbbf886ea8de0658464175665b9bb435f4de07c954db9d0e131831039a5642597e1b78ebf6add2373f6142c6b14005f390df7b938194547436f7a383294ed7bde63136691305d3aa0beb04c1b34c10bbed5fc8d120bc38657c9c80b30e4da19cd9cd58bbc5914a81e3a126e8caaf1a57177ded8171c0a966343fdde864167fe4deeb496953198288a1e96a717ab0b022508d472021587ffc2da64bda1f08509c35ac18ca6375a2d860030ebb5413801eb17e1608969b04573039eeff531913f2b285af0dfef17ae702f1956c468d89e90e115a2b448727ec004069e7094cdf8bdb1db53a14c3e9b45288793b399d1a605ac4939686549b9dcb8f295a53f1ad21ce8e7174b51360f3c9e72d98d40534892a7bb0326b07fb1db51cae5867574918da3cc7a0d9f5ee21b3584a6f8026ef12dab74be62aa9774eccb60903ea8837a685db8237de65c3f307e182946c83d79da516c8b88301baa413dcb1b7b31e75586435ead5e93d1dcc2977ee418b1d6e04519749698ee1a3b1d858b39620be1c51a97c51b5e8203ac4124db2e4054125197e648a13f9e1a1355d68c70e850d0a14b102678f89c0ee5343721f79f294bf7bb2a04e4ed086ece7b58a341691f6beba52dfa46279721b77763661b0964f66860c973a9a362fe433efd3b965a763477faf8eeca890bd42c26374adda5adeb703a7a8c4fbf5e51087baef5ee2203bb87818ee447443600ffddba1e6659f133e90320f18c77074c4da733066e16793a9cf7853321a05c1cd3399387dfe05ce1eb95564cec4c5f0f1fe7b1668a9a605d4e9ec9430929403889a879ed1b0bcb6af8443ef49efb33d3ea8dd1e9bc435f0bf935d3d7561969969f0f589330d4377447a267c0f4fb1863b30d45a7b78a7dd66ec1fda8340176128e3231b1f74e626a1bd31150fe35a4c9461cbb5d0ec22ecff1b4aa4cd9d29dd9bad10622a7a5aa5c8f76489d3984bc2366aefc4352dc7942199490b6c03e01b08d098dc72feb5ac4dc6284051262322e85fb7541ec5d71634457156008da3c8a8861d5a4524266795980cf6af0e0110a97068bf5ebce2bb6aecbfb073287198bd709ab9aab2f5b05a79e63ef6db1f47b74027ca91397eb305e125e11d07c8eb6bc7cc18acbd7ee17ca7d0c27e86a12daddd83f31f873ae549f9c70aaee398afb54486e451a246b0763fae703ab6f73f915429a0e925a259d86e12b5640ef31430f8900aa76fc97a89ea1f0d6fd06991a72f0da3e1aa648c902ea6fe1cd9459fb7fe991ec9fbaf86f041936bb0ade98eafe5992c2f0a0d1ddd3798c35cde491e3fac534e5a4d600a7aa422136d50aed471af79c219ed88dffe2d3d5f5fccc5698e6fd2ce05b03b259883308274eaf583cce1295c72a3acd20df73289f639465df6fa9d6a4814070c3fa2a9fb79fa7f44fe05eee468ca31307c46aa648628deff63ece278394141a2371d9cfe0f53bf6e70730aced03ca9a46abd499a91605d2acf3d76897b3778d5490288508b5327ad2f4b9b857e4410b6612c26bd7b1f33e3e0114221dd7a55e1e8f1a28c0694c8a9277023d5d671de0f289f1df2e48e16f72d6cf600168838d0fa1a7d3b8ce473c7eeb428f6ec0f036339f23d4127659236d530578b91e76", 0x1000}, {&(0x7f0000001f00)="59375b2d2da379e2314f1c860017460dcd5c3fe54a1722937747aecdbb0aca21116d2a3001b77c71cbaef02803e1f9dc7d19784f3ea08d57738acdf5d54dd4a24993c9f0153009a52ba5e46ad9da201a85db3c28c5c1e76fffc48c15", 0x5c}, {&(0x7f0000001f80)="c326d5085eacfb2b06e567b0106177a47779893c80af20e78195ec37ffa27d0d07dfcc1eb155a43a12795f0e5733", 0x2e}], 0x4}, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(r2, &(0x7f0000000ac0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000a80)={&(0x7f00000020c0)=ANY=[@ANYBLOB="fc030000", @ANYRES16=r4, @ANYBLOB="000828bd7000fedbdf250300000008000100", @ANYRES32=r7, @ANYBLOB="600102803800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=r8, @ANYBLOB="68010280400001002400010071756575655f6964000000000000000000000000000000000000000000000000050003000300000008000400fcffffff08000600", @ANYRES32=r9, @ANYBLOB="38000100240001006c625f73746174735f726566726573685f696e74657276616c00000000000000050003000300000008000400ff07000038000100240001006d636173745f72656a6f696e5f696e74657276616c0000000000000000000000050003000300000008000400040000003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r10, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000500030003000000080004000700000040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=r11, @ANYBLOB="080007000000000008000100", @ANYRES32=r12, @ANYBLOB="0801028044000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b00000014000400080010050900000003000001ff0300004c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000019000400686173685f746f5f706f72745f6d617070696e67000000003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=r16, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000500030003003fb78cbb00000000000046ccdf3366823618fd310a586c"], 0x3fc}, 0x1, 0x0, 0x0, 0x800}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 429.359737ms ago: executing program 3 (id=17968): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET(r0, &(0x7f00000086c0)={0x0, 0x2100, &(0x7f0000008680)={&(0x7f0000000680)={0x30, 0x1401, 0x1, 0x70bd29, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x4008000}, 0x20) 370.345716ms ago: executing program 0 (id=17969): r0 = socket$igmp6(0xa, 0x3, 0x2) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x2c, @loopback, 0x9}, 0x1c) recvfrom$inet6(r0, &(0x7f0000000080)=""/16, 0x10, 0x10100, &(0x7f00000000c0)={0xa, 0x4e24, 0x7f, @loopback, 0xd}, 0x1c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@bloom_filter={0x1e, 0x0, 0x1c, 0x9}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000040), 0x3, r1, 0x4}, 0x38) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random='\x00\x00\x00\x00\x00 '}) ioctl$sock_ifreq(r3, 0x894a, &(0x7f0000000040)={'veth0_to_team\x00', @ifru_hwaddr=@remote}) r4 = socket(0x10, 0x803, 0x0) sendto(r4, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x15) writev(r5, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) recvmmsg(r4, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4090, 0xffa}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f00000001c0)=""/16, 0x10}], 0x8, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x2040000, &(0x7f0000003700)={0x77359400}) 369.882212ms ago: executing program 2 (id=17970): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000150001032dbd7000000000000c1600000800040001"], 0x1c}, 0x1, 0x402, 0x0, 0xc000}, 0x4000000) 343.366401ms ago: executing program 1 (id=17971): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x301, 0x1400, 0x0, {0x1, 0x0, 0x1}}, @NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x5}]}], {0x14}}, 0x64}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) 305.488733ms ago: executing program 3 (id=17972): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x2000) ioctl$int_out(r2, 0x5460, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000800)={0x58, r4, 0x405, 0x70bd27, 0x25dfdbfe, {}, [{{0x8, 0x1, r5}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000431}, 0x4040084) r6 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040), r3) sendmsg$SEG6_CMD_GET_TUNSRC(r3, &(0x7f0000000100)={&(0x7f0000000140), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r6, 0x400, 0x70bd28, 0x25dfdbff, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0xffff}, @SEG6_ATTR_SECRETLEN={0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x7}, @SEG6_ATTR_ALGID={0x5, 0x6, 0xc}]}, 0x34}, 0x1, 0x0, 0x0, 0x4844}, 0x8004) 224.241151ms ago: executing program 2 (id=17973): syz_emit_ethernet(0x46, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x36}, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x68, 0x0, 0x0, 0x1, 0x0, @remote, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, @broadcast=0xac14140a, @multicast1}, "040022eb00000000"}}}}}, 0x0) 223.072988ms ago: executing program 4 (id=17974): r0 = socket$igmp6(0xa, 0x3, 0x2) getsockopt$inet6_int(r0, 0x29, 0x3, 0x0, &(0x7f0000000040)=0xfdf4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xe, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="4c00000010000100000000000000000000000000a1bfefd8ec415a0fa4865ea7aeb52995cbd4ccd88eab84d588f5b6f8843b4764cac557188513d860fcc374bb5c2be0782b158643c55847e7883bf10a57e7146231b38b03cfbb3635122c5e05cf1b01c7db5cf38eb8caec78c14f15", @ANYRES32, @ANYBLOB="00000000000000002c0012800e0001006970366772657461700000001800028014000700fc0200"/52], 0x4c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r1, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000200)={0x30, 0x2, 0x8, 0x601, 0x0, 0x0, {0xa}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x805}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xf9}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000001}, 0x20000000) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000100)={@dev={0xac, 0x14, 0x14, 0x18}, @broadcast, 0x0, 0x1, [@private=0xa010101]}, 0x14) 175.648503ms ago: executing program 1 (id=17975): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x0}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}]}, 0x58}}, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3, 0xc1ddfe9aa4c8d4f8, 0xffffffffffffffff, 0xfffff000) 171.669647ms ago: executing program 3 (id=17976): r0 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) connect$inet6(r0, &(0x7f0000001940)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000002200)=[{{0x0, 0xf5, 0x0}}], 0x40000000000027f, 0x0) ioctl$INCFS_IOC_CREATE_FILE(r0, 0xc058671e, &(0x7f0000001640)={{}, {0x6}, 0x22, 0x0, 0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f00000012c0)="b7d7c98a05ada7a0c389db988fc7f67d2f5510a67c1a0d278417ea29f319a8f336997fe1c1c69aa5eb8265893facb77a574de1a44cb6ab2122facead99c7f7c5922d98fcfdd0202a1114786ae814536b73049dac7d555e36f73a1b6a35b1568e1a733c95a4ffdf8cff541773792508298be70c04ac7075af28c7e520e707e5d2a1572a16c0fc0991669bd305d326fac6fd093045da99d24916d83182bfc37b1b3a3a95203b85b0b16403a2ea566d544a8f5fbffe14f21240134b7ee64a3961a94fbebebcf9f369f5e1d1f16f752c00c5b289af749d4b1c04fc058b7e74b56e8bee", 0xe1, 0x0, &(0x7f00000013c0)={0x2, 0x1c9, {0x0, 0xc, 0xbe, "649cfcf9e38c510fd9c05d4204e467a398d4511591b026bf10e2c9a135edb33a4f3129d5ad75611602c550ed769f13d7bfaf033fb3cbd4a878e022b69787c94eb053e2baf9f707ea2c20f535d824c3e4ea1c755cadd7df18f60633609b110fe61a9c48bd32a0a37328f6f7926f101a681ed35a0d594255b0e35dda8528ce1ef490f6e1ced0d77b2409be533cd8b67d1c57b1dff1ceb00454140febc7ed5a9c42b17b62feb8ceec9c39ab13534b709100a40dc931fa9e2df33d23c15f42bc", 0xfe, "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"}, 0xa2, "151c77b2454e0aa1f7dbd03eb4a1f2fc397f9ccae7cecc4e19f4a0e11691f7c6c7c8e616cf65bdfdf0a6c669bca28dbab24c2f92d19fd2f6dc5d9c7d85e078c18e106321dda9ef0ae26d32912334eaa455d58116cb25a643def0e9bdb863b6d295f724b4896ab969f4164c3255aba695236b41bb440f9626e3bd606a31844437fa6015f327a432289cc0dce4d5f8e23108b9b5730c1eaf3789587702cfc06878a4ff"}, 0x277}) setsockopt$inet6_opts(r0, 0x29, 0x37, 0x0, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x66, &(0x7f0000000040)=0x779, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x3, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48) 89.335646ms ago: executing program 4 (id=17977): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000080)) ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={0x1, @null, @bpq0, 0x9, 'syz0\x00', @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x1, 0x0, [@null, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast]}) syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(0xffffffffffffffff, 0x0, 0x4004800) 26.943268ms ago: executing program 2 (id=17978): socket$rxrpc(0x21, 0x2, 0xa) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES8=r0], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0xea5bc50b6199d76e) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x0, 0x12, 0xffffffffffffffff, 0x11eac000) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x8, 0x4, 0x4, 0x4}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b80)={0x11, 0xc, &(0x7f00000006c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}}]}, &(0x7f0000000780)='syzkaller\x00'}, 0x90) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'veth1\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x2, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x0, 0x8}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x2, 0x2, {0x4000}}}, @TCA_STAB={0x0, 0x8, 0x0, 0x1, [{{0x0, 0x1, {0xfa, 0xf, 0x100, 0x3, 0x1, 0x3, 0xb}}, {0x0, 0x2, [0xa37, 0xfff, 0x8]}}, {{0x0, 0x1, {0xaa, 0x0, 0x7, 0x7, 0x1, 0x1, 0xfffffffe}}, {0x0, 0x2, [0x6, 0x8, 0x9]}}]}]}, 0x38}}, 0x0) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, 0xffffffffffffffff, 0x2000) 26.797589ms ago: executing program 1 (id=17979): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) syz_emit_ethernet(0x17, &(0x7f0000000100)={@random="8cf45b9b5865", @dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, @val={@void, {0x8100, 0x6, 0x1}}, {@mpls_uc={0x8847, {[], @generic="20338cfcef"}}}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="440000001000010400000000e1ffffffffffffff", @ANYRES32=0x0, @ANYBLOB="00000000000000002400128009000100626f6e64000000001400028005000e000000000005000d0010"], 0x44}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20040004}, 0x4000) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newtfilter={0x60, 0x2c, 0x400, 0x70bd2d, 0x25dfdbfa, {0x0, 0x0, 0x0, r3, {0x0, 0xa}, {}, {0x7, 0x9}}, [@TCA_RATE={0x6, 0x5, {0x0, 0x7}}, @filter_kind_options=@f_flower={{0xb}, {0x28, 0x2, [@TCA_FLOWER_KEY_PORT_SRC_MAX={0x6, 0x58, 0x4e20}, @TCA_FLOWER_KEY_ENC_UDP_SRC_PORT={0x6}, @TCA_FLOWER_INDEV={0x14, 0x2, 'bridge0\x00'}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x24000810}, 0x20084084) 0s ago: executing program 3 (id=17980): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r1 = accept4(0xffffffffffffffff, &(0x7f0000001180)=@rc, &(0x7f0000001200)=0x80, 0x800) bind$xdp(r1, &(0x7f0000001240)={0x2c, 0x5, r0, 0x2a}, 0x10) r2 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) ioctl$FIDEDUPERANGE(r2, 0xc0189436, &(0x7f0000001000)={0x9, 0x8, 0xa, 0x0, 0x0, [{{r2}}, {{r2}, 0xcd4}, {{r2}, 0x4}, {{r2}, 0x1}, {{r2}, 0x6}, {{r2}, 0x3}, {{r2}, 0x6}, {{r2}, 0x3}, {{r2}, 0x8}, {{r2}, 0x3ff}]}) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x4) r4 = socket(0xa, 0x1, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000014c0)={0x0, 0x1f, &(0x7f0000001280)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x96, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@jmp={0x5, 0x0, 0xa, 0x4, 0x9, 0xfffffffffffffffe, 0x1}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffffff30, 0x0, 0x0, 0x0, 0x4}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xc}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001380)='GPL\x00', 0x5d5c, 0x0, 0x0, 0x40e00, 0xc, '\x00', r0, @fallback=0xc, r5, 0x8, &(0x7f00000013c0)={0xa, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x5, &(0x7f0000001400)=[0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000001440)=[{0x2, 0x5, 0x3}, {0x0, 0x3, 0x1, 0x3}, {0x4, 0x3, 0xf}, {0x3, 0x1, 0x2, 0xc}, {0x1, 0x2, 0xe, 0xb}], 0x10, 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000017c0)={r7, 0x0, 0xa7, 0x31, &(0x7f0000001580)="7440982f9a32d0e1cf27762ecc4ba8138c834167bfad1bcaea06f5bd1e3d28a25cbea0fbff844cc2d0d7b959056397a36c5185701a6e3248922d47efdfe1653b328fcdc710e700fe0a0b25650e2dd37b556da4bd3b3dffff52efc93f3547fa06e11f65b1d883b0516f123571b29483f063688b3a6fc6117c2a9b79881521aade2d335da8a23bc74d80b9d96bb651a73adbd910ee73a6b67820023da89cac54cf0ec5b4451d8d98", &(0x7f0000001640)=""/49, 0x2cd3, 0x0, 0x9b, 0x56, &(0x7f0000001680)="8e5d7d6270eb468bbb3b71f5f8a9efae765f848d824a267297c0de2777b45092ae52f7052c5eb741a9b520e07978bda322d9aac2abeb753f638ab5cc097022d48ac4406f2a1e37643a30ff781cdc3c35415a01e4ca8acf5b5d2d04950ac6f9501561ec79399b81ae3acdea98f45ca5ac1e16c5b08085f81ece2218269453653a41b76d15646f862447391a49293ba0511aa79a0df2a7c7179c608a", &(0x7f0000001740)="14a3a52895b620796ef9a4dc034e3888f53ba1330cac37f472dcb60ea8da00c1267a4158205f5a7dcae8ffd956c40fd6edbde38bdc806deadf961241467360376461249003a1489ce5d2b3ad5c86429018082bcab06a", 0x0, 0x0, 0xc2}, 0x50) sendmsg$ETHTOOL_MSG_PAUSE_SET(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)={0x34, r6, 0x2799f5eec7981083, 0x70bd28, 0x259fdbfc, {}, [@ETHTOOL_A_PAUSE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_PAUSE_AUTONEG={0x5, 0x2, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4c810}, 0x20000000) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f0000000a00)=@raw={'raw\x00', 0xc08, 0x3, 0x440, 0x310, 0x5002004a, 0xb, 0x310, 0xea13, 0x3a8, 0x3c8, 0x3c8, 0x3a8, 0x3c8, 0x3, 0x0, {[{{@ip={@multicast2, @private=0xa010101, 0xff, 0xffffffff, 'bridge0\x00', 'veth0_macvtap\x00', {}, {0xff}, 0x5c, 0x3, 0x2}, 0x0, 0x2c8, 0x310, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x11, 0x2, 0x0, [{}, {0x16}, {0x4}, {}, {}, {0x0, 0x0, 0x5e}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x6}, {0x0, 0x0, 0x4}, {}, {0x4, 0x8}, {}, {}, {0x1}, {0x0, 0x0, 0x0, 0x7f}, {0x0, 0x4}, {}, {}, {}, {0xfffc}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {0x0, 0x0, 0x40}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x80}, {}, {}, {}, {}, {}, {0x0, 0x0, 0xfd}]}}, @common=@inet=@socket3={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x4a0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000001c0)=0x14) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000300)={'sit0\x00', &(0x7f0000000200)={'erspan0\x00', r3, 0x20, 0x8000, 0x5, 0x5, {{0x19, 0x4, 0x3, 0x4, 0x64, 0x66, 0x0, 0x1, 0x4, 0x0, @empty, @multicast2, {[@timestamp_addr={0x44, 0xc, 0xb2, 0x1, 0x9, [{@loopback, 0x2}]}, @timestamp_prespec={0x44, 0x44, 0xf9, 0x3, 0x5, [{@rand_addr=0x64010101, 0x1}, {@private=0xa010102, 0x8}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x6}, {@local, 0x8}, {@multicast2, 0x8001}, {@empty, 0x7}, {@empty, 0x5}, {@multicast2, 0x2}]}]}}}}}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'pim6reg0\x00', 0x0}) r11 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r11, 0x29, 0x20, &(0x7f0000000180)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x8000000, 0x0, 0xff, 0x1, 0xfffc}, 0x20) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000640)={0xffffffffffffffff, 0xe0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000380)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, &(0x7f00000003c0)=[0x0, 0x0], &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x8c, &(0x7f0000000440)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000480), &(0x7f00000004c0), 0x8, 0x16, 0x8, 0x8, &(0x7f0000000500)}}, 0x10) sendmsg$TEAM_CMD_NOOP(r4, &(0x7f0000000fc0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000680)={0x8f0, 0x0, 0x400, 0x70bd25, 0x25dfdbff, {}, [{{0x8, 0x1, r8}, {0xf8, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xa}}, {0x8, 0x6, r3}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r0}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x62be}}, {0x8, 0x6, r9}}}]}}, {{0x8, 0x1, r0}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}]}}, {{0x8, 0x1, r0}, {0xf4, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x20000000}}, {0x8, 0x6, r3}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x8b467ef}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8, 0x1, r0}, {0x1a8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8, 0x6, r3}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r3}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}]}}, {{0x8, 0x1, r3}, {0x29c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x7, 0x5, 0x6, 0x3}, {0xa, 0x68, 0x80, 0x40}, {0x2, 0x8, 0x10, 0x4}, {0x6, 0x7f, 0xd, 0x3}, {0xb329, 0x0, 0x5, 0x4}, {0x1000, 0x6, 0x1, 0xfffffff9}]}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xe9e}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xfffffffa}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r10}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r0}}}, {0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x3c, 0xf2, 0x6, 0x9}, {0x0, 0x6, 0x0, 0xde63}, {0xb22, 0x1, 0x7, 0xcb}, {0x3, 0x10, 0x5, 0x2}, {0xfff, 0xd, 0x9, 0x2}, {0x6, 0x0, 0x10, 0x4}]}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8, 0x1, r3}, {0x240, 0x2, 0x0, 0x1, [{0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5021}}, {0x8, 0x6, r3}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x401}}, {0x8, 0x6, r3}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r0}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x2e}}, {0x8, 0x6, r0}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r12}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x1000}}, {0x8, 0x6, r3}}}]}}]}, 0x8f0}, 0x1, 0x0, 0x0, 0x20000005}, 0x1) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f00000000c0)={r2, 0x0, 0xfffffffffffffffc}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000003580)=@newlink={0x28, 0x10, 0x401, 0x0, 0x100, {0x0, 0x0, 0x0, r3, 0x503}, [@IFLA_NET_NS_FD={0x8, 0x1c, r2}]}, 0xfffffd5e}}, 0x0) kernel console output (not intermixed with test programs): 5][T17884] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1279.985574][T17884] ____sys_sendmsg+0x972/0x9f0 [ 1279.985612][T17884] ? __might_fault+0xaf/0x130 [ 1279.985655][T17884] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1279.985702][T17884] ? import_iovec+0x73/0xa0 [ 1279.985730][T17884] ___sys_sendmsg+0x2a5/0x360 [ 1279.985764][T17884] ? __lock_acquire+0x6b5/0x2cf0 [ 1279.985799][T17884] ? __pfx____sys_sendmsg+0x10/0x10 [ 1279.985876][T17884] ? __fget_files+0x2a/0x420 [ 1279.985904][T17884] ? __fget_files+0x3a0/0x420 [ 1279.985945][T17884] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1279.985984][T17884] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1279.986030][T17884] ? __pfx_ksys_write+0x10/0x10 [ 1279.986082][T17884] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1279.986107][T17884] do_syscall_64+0x15f/0xf80 [ 1279.986133][T17884] ? trace_irq_disable+0x3b/0x140 [ 1279.986157][T17884] ? clear_bhb_loop+0x40/0x90 [ 1279.986186][T17884] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1279.986209][T17884] RIP: 0033:0x7fe6e1b9c819 [ 1279.986230][T17884] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1279.986250][T17884] RSP: 002b:00007fe6e29f1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1279.986274][T17884] RAX: ffffffffffffffda RBX: 00007fe6e1e16090 RCX: 00007fe6e1b9c819 [ 1279.986290][T17884] RDX: 0000000004000810 RSI: 00002000000002c0 RDI: 0000000000000004 [ 1279.986305][T17884] RBP: 00007fe6e29f1090 R08: 0000000000000000 R09: 0000000000000000 [ 1279.986319][T17884] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1279.986333][T17884] R13: 00007fe6e1e16128 R14: 00007fe6e1e16090 R15: 00007ffffeef9318 [ 1279.986372][T17884] [ 1280.328966][ T5823] block nbd1: Receive control failed (result -104) [ 1280.500947][T17911] __nla_validate_parse: 2 callbacks suppressed [ 1280.500969][T17911] netlink: 28 bytes leftover after parsing attributes in process `syz.1.16748'. [ 1280.508899][T17910] netlink: 'syz.0.16745': attribute type 2 has an invalid length. [ 1280.525926][T17911] openvswitch: netlink: Missing key (keys=40, expected=80) [ 1280.534939][T17910] netlink: 'syz.0.16745': attribute type 2 has an invalid length. [ 1280.707177][T17919] sock: sock_set_timeout: `syz.1.16752' (pid 17919) tries to set negative timeout [ 1280.834659][T17922] nbd0: detected capacity change from 0 to 63 [ 1280.842629][T17924] block nbd0: NBD_DISCONNECT [ 1280.859114][T17924] block nbd0: Disconnected due to user request. [ 1280.878433][T17924] block nbd0: shutting down sockets [ 1280.912033][T17891] ldm_validate_partition_table(): Disk read failed. [ 1280.937107][T17891] Dev nbd0: unable to read RDB block 0 [ 1280.970350][T17891] nbd0: unable to read partition table [ 1281.006146][T17891] ldm_validate_partition_table(): Disk read failed. [ 1281.027059][T17891] Dev nbd0: unable to read RDB block 0 [ 1281.046504][T17891] nbd0: unable to read partition table [ 1281.256694][T17949] netlink: 64 bytes leftover after parsing attributes in process `syz.1.16761'. [ 1281.311781][T17948] mac80211_hwsim hwsim11 syzkaller0: entered promiscuous mode [ 1281.327027][T17948] mac80211_hwsim hwsim11 syzkaller0: entered allmulticast mode [ 1281.470210][T17956] sch_tbf: burst 256 is lower than device syzkaller0 mtu (1806) ! [ 1281.637846][T17965] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1282.119958][T18001] sch_tbf: burst 256 is lower than device syzkaller0 mtu (1514) ! [ 1282.130409][T18001] FAULT_INJECTION: forcing a failure. [ 1282.130409][T18001] name failslab, interval 1, probability 0, space 0, times 0 [ 1282.144611][T18001] CPU: 0 UID: 0 PID: 18001 Comm: syz.1.16781 Not tainted syzkaller #0 PREEMPT(full) [ 1282.144641][T18001] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1282.144656][T18001] Call Trace: [ 1282.144665][T18001] [ 1282.144675][T18001] dump_stack_lvl+0xe8/0x150 [ 1282.144715][T18001] should_fail_ex+0x412/0x560 [ 1282.144752][T18001] should_failslab+0xa8/0x100 [ 1282.144776][T18001] ? skb_clone+0x212/0x3a0 [ 1282.144798][T18001] kmem_cache_alloc_noprof+0x87/0x650 [ 1282.144831][T18001] ? __netlink_lookup+0xc6/0x8b0 [ 1282.144871][T18001] skb_clone+0x212/0x3a0 [ 1282.144901][T18001] __netlink_deliver_tap+0x404/0x850 [ 1282.144948][T18001] ? netlink_deliver_tap+0x2e/0x1b0 [ 1282.144983][T18001] netlink_deliver_tap+0x19c/0x1b0 [ 1282.145024][T18001] netlink_unicast+0x730/0x8e0 [ 1282.145066][T18001] netlink_sendmsg+0x813/0xb40 [ 1282.145111][T18001] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1282.145148][T18001] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1282.145181][T18001] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1282.145219][T18001] ____sys_sendmsg+0x972/0x9f0 [ 1282.145253][T18001] ? __might_fault+0xaf/0x130 [ 1282.145290][T18001] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1282.145336][T18001] ? import_iovec+0x73/0xa0 [ 1282.145364][T18001] ___sys_sendmsg+0x2a5/0x360 [ 1282.145397][T18001] ? __lock_acquire+0x6b5/0x2cf0 [ 1282.145431][T18001] ? __pfx____sys_sendmsg+0x10/0x10 [ 1282.145472][T18001] ? kstrtouint+0x6e/0xe0 [ 1282.145531][T18001] ? __fget_files+0x2a/0x420 [ 1282.145559][T18001] ? __fget_files+0x3a0/0x420 [ 1282.145600][T18001] __sys_sendmmsg+0x27c/0x4e0 [ 1282.145643][T18001] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1282.145675][T18001] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 1282.145737][T18001] ? ksys_write+0x242/0x270 [ 1282.145773][T18001] ? __pfx_ksys_write+0x10/0x10 [ 1282.145814][T18001] __x64_sys_sendmmsg+0xa0/0xc0 [ 1282.145848][T18001] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1282.145872][T18001] do_syscall_64+0x15f/0xf80 [ 1282.145899][T18001] ? trace_irq_disable+0x3b/0x140 [ 1282.145923][T18001] ? clear_bhb_loop+0x40/0x90 [ 1282.145951][T18001] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1282.145974][T18001] RIP: 0033:0x7fe6e1b9c819 [ 1282.146003][T18001] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1282.146022][T18001] RSP: 002b:00007fe6e2a12028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1282.146045][T18001] RAX: ffffffffffffffda RBX: 00007fe6e1e15fa0 RCX: 00007fe6e1b9c819 [ 1282.146061][T18001] RDX: 04000000000001f2 RSI: 0000200000000000 RDI: 0000000000000005 [ 1282.146076][T18001] RBP: 00007fe6e2a12090 R08: 0000000000000000 R09: 0000000000000000 [ 1282.146090][T18001] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1282.146103][T18001] R13: 00007fe6e1e16038 R14: 00007fe6e1e15fa0 R15: 00007ffffeef9318 [ 1282.146140][T18001] [ 1282.501377][T18009] netlink: 8 bytes leftover after parsing attributes in process `syz.4.16782'. [ 1282.561349][T18009] 8021q: adding VLAN 0 to HW filter on device bond34 [ 1282.685207][T18021] netlink: 8 bytes leftover after parsing attributes in process `syz.2.16785'. [ 1282.721565][T18021] bond36: entered promiscuous mode [ 1282.727295][T18021] 8021q: adding VLAN 0 to HW filter on device bond36 [ 1282.952890][T18037] netlink: 212348 bytes leftover after parsing attributes in process `syz.3.16790'. [ 1283.012031][T18039] netlink: 16 bytes leftover after parsing attributes in process `syz.4.16789'. [ 1283.103315][T18044] netlink: 8 bytes leftover after parsing attributes in process `syz.0.16792'. [ 1283.113898][T18044] netlink: 12 bytes leftover after parsing attributes in process `syz.0.16792'. [ 1283.133621][T18042] netlink: 32 bytes leftover after parsing attributes in process `syz.4.16789'. [ 1283.224948][T18049] nbd: nbd3 already in use [ 1283.252848][T18049] block nbd3: NBD_DISCONNECT [ 1283.270467][T18049] block nbd3: Send disconnect failed -32 [ 1283.397067][T18056] bond38: option arp_interval: mode dependency failed, not supported in mode balance-tlb(5) [ 1283.409207][T18056] bond38 (unregistering): Released all slaves [ 1283.669269][T18075] netlink: 'syz.0.16805': attribute type 11 has an invalid length. [ 1283.711314][T18079] netlink: 'syz.1.16804': attribute type 1 has an invalid length. [ 1283.740196][T18080] bond0: (slave bridge_slave_1): Releasing backup interface [ 1283.770189][T18080] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 1283.994947][T18094] nbd2: detected capacity change from 0 to 63 [ 1284.003140][T18098] block nbd2: NBD_DISCONNECT [ 1284.011783][T18098] block nbd2: Disconnected due to user request. [ 1284.020724][T18098] block nbd2: shutting down sockets [ 1284.038937][ C1] blk_print_req_error: 283 callbacks suppressed [ 1284.038962][ C1] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1284.054472][ C1] buffer_io_error: 286 callbacks suppressed [ 1284.054494][ C1] Buffer I/O error on dev nbd2, logical block 0, async page read [ 1284.068792][ C1] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1284.076834][ C0] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1284.078219][ C1] Buffer I/O error on dev nbd2, logical block 1, async page read [ 1284.087195][ C0] Buffer I/O error on dev nbd2, logical block 2, async page read [ 1284.087420][ C0] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1284.111829][ C0] Buffer I/O error on dev nbd2, logical block 3, async page read [ 1284.124576][T17891] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1284.144640][T17891] Buffer I/O error on dev nbd2, logical block 0, async page read [ 1284.161622][T17891] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1284.171919][T17891] Buffer I/O error on dev nbd2, logical block 1, async page read [ 1284.181868][T17891] I/O error, dev nbd2, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1284.191574][T17891] Buffer I/O error on dev nbd2, logical block 2, async page read [ 1284.203446][T17891] I/O error, dev nbd2, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1284.213271][T17891] Buffer I/O error on dev nbd2, logical block 3, async page read [ 1284.221745][T17891] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1284.231435][T17891] Buffer I/O error on dev nbd2, logical block 0, async page read [ 1284.240074][T17891] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1284.249736][T17891] Buffer I/O error on dev nbd2, logical block 1, async page read [ 1284.267942][T17891] ldm_validate_partition_table(): Disk read failed. [ 1284.279952][T17891] Dev nbd2: unable to read RDB block 0 [ 1284.288476][T17891] nbd2: unable to read partition table [ 1284.302972][T17891] ldm_validate_partition_table(): Disk read failed. [ 1284.313148][T17891] Dev nbd2: unable to read RDB block 0 [ 1284.325994][T17891] nbd2: unable to read partition table [ 1284.574133][T18116] FAULT_INJECTION: forcing a failure. [ 1284.574133][T18116] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1284.585897][T18118] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1284.642667][T18116] CPU: 1 UID: 0 PID: 18116 Comm: syz.1.16817 Not tainted syzkaller #0 PREEMPT(full) [ 1284.642700][T18116] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1284.642715][T18116] Call Trace: [ 1284.642724][T18116] [ 1284.642735][T18116] dump_stack_lvl+0xe8/0x150 [ 1284.642773][T18116] should_fail_ex+0x412/0x560 [ 1284.642811][T18116] _copy_from_user+0x2d/0xb0 [ 1284.642835][T18116] ___sys_sendmsg+0x1c6/0x360 [ 1284.642869][T18116] ? __lock_acquire+0x6b5/0x2cf0 [ 1284.642904][T18116] ? __pfx____sys_sendmsg+0x10/0x10 [ 1284.642944][T18116] ? kstrtouint+0x6e/0xe0 [ 1284.643011][T18116] ? __fget_files+0x2a/0x420 [ 1284.643040][T18116] ? __fget_files+0x3a0/0x420 [ 1284.643081][T18116] __sys_sendmmsg+0x27c/0x4e0 [ 1284.643126][T18116] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1284.643158][T18116] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 1284.643217][T18116] ? ksys_write+0x242/0x270 [ 1284.643253][T18116] ? __pfx_ksys_write+0x10/0x10 [ 1284.643294][T18116] __x64_sys_sendmmsg+0xa0/0xc0 [ 1284.643328][T18116] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1284.643351][T18116] do_syscall_64+0x15f/0xf80 [ 1284.643380][T18116] ? clear_bhb_loop+0x40/0x90 [ 1284.643408][T18116] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1284.643430][T18116] RIP: 0033:0x7fe6e1b9c819 [ 1284.643451][T18116] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1284.643478][T18116] RSP: 002b:00007fe6e2a12028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1284.643503][T18116] RAX: ffffffffffffffda RBX: 00007fe6e1e15fa0 RCX: 00007fe6e1b9c819 [ 1284.643520][T18116] RDX: 0000000000000001 RSI: 0000200000004a80 RDI: 0000000000000004 [ 1284.643534][T18116] RBP: 00007fe6e2a12090 R08: 0000000000000000 R09: 0000000000000000 [ 1284.643549][T18116] R10: 0000000020040800 R11: 0000000000000246 R12: 0000000000000001 [ 1284.643563][T18116] R13: 00007fe6e1e16038 R14: 00007fe6e1e15fa0 R15: 00007ffffeef9318 [ 1284.643601][T18116] [ 1285.124139][T18142] sctp: [Deprecated]: syz.2.16826 (pid 18142) Use of int in maxseg socket option. [ 1285.124139][T18142] Use struct sctp_assoc_value instead [ 1285.204637][T18145] netlink: 8 bytes leftover after parsing attributes in process `syz.0.16827'. [ 1285.427133][T18161] netlink: Unknown conntrack attr (0) [ 1285.448014][T18163] FAULT_INJECTION: forcing a failure. [ 1285.448014][T18163] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1285.463949][T18163] CPU: 1 UID: 0 PID: 18163 Comm: syz.2.16836 Not tainted syzkaller #0 PREEMPT(full) [ 1285.463980][T18163] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1285.463995][T18163] Call Trace: [ 1285.464004][T18163] [ 1285.464014][T18163] dump_stack_lvl+0xe8/0x150 [ 1285.464058][T18163] should_fail_ex+0x412/0x560 [ 1285.464085][T18163] _copy_to_user+0x31/0xb0 [ 1285.464105][T18163] simple_read_from_buffer+0xe1/0x170 [ 1285.464129][T18163] proc_fail_nth_read+0x1bb/0x230 [ 1285.464154][T18163] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1285.464178][T18163] ? rw_verify_area+0x2a6/0x4d0 [ 1285.464205][T18163] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1285.464228][T18163] vfs_read+0x20c/0xa70 [ 1285.464255][T18163] ? __pfx___mutex_lock+0x10/0x10 [ 1285.464302][T18163] ? __pfx_vfs_read+0x10/0x10 [ 1285.464338][T18163] ? __fget_files+0x2a/0x420 [ 1285.464374][T18163] ? __fget_files+0x3a0/0x420 [ 1285.464393][T18163] ? __fget_files+0x2a/0x420 [ 1285.464420][T18163] ksys_read+0x150/0x270 [ 1285.464472][T18163] ? __pfx_ksys_read+0x10/0x10 [ 1285.464515][T18163] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1285.464545][T18163] do_syscall_64+0x15f/0xf80 [ 1285.464564][T18163] ? trace_irq_disable+0x3b/0x140 [ 1285.464582][T18163] ? clear_bhb_loop+0x40/0x90 [ 1285.464602][T18163] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1285.464618][T18163] RIP: 0033:0x7efcac55d04e [ 1285.464633][T18163] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1285.464647][T18163] RSP: 002b:00007efcad384fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1285.464664][T18163] RAX: ffffffffffffffda RBX: 00007efcad3856c0 RCX: 00007efcac55d04e [ 1285.464676][T18163] RDX: 000000000000000f RSI: 00007efcad3850a0 RDI: 0000000000000004 [ 1285.464686][T18163] RBP: 00007efcad385090 R08: 0000000000000000 R09: 0000000000000000 [ 1285.464696][T18163] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1285.464705][T18163] R13: 00007efcac816038 R14: 00007efcac815fa0 R15: 00007ffc82811fc8 [ 1285.464733][T18163] [ 1285.764484][T18167] xt_limit: Overflow, try lower: 271964/0 [ 1285.772179][T18169] netlink: 'syz.1.16837': attribute type 2 has an invalid length. [ 1285.780834][T18169] netlink: 'syz.1.16837': attribute type 2 has an invalid length. [ 1286.210657][T18205] __nla_validate_parse: 3 callbacks suppressed [ 1286.210677][T18205] netlink: 4 bytes leftover after parsing attributes in process `syz.4.16849'. [ 1286.456932][T18212] netlink: 'syz.1.16851': attribute type 1 has an invalid length. [ 1287.118311][T18241] netlink: 12 bytes leftover after parsing attributes in process `syz.3.16860'. [ 1287.139935][T18241] sch_tbf: burst 12 is lower than device bridge34 mtu (1514) ! [ 1287.203973][T18244] nbd0: detected capacity change from 0 to 63 [ 1287.220536][T18246] block nbd0: NBD_DISCONNECT [ 1287.226228][T18246] block nbd0: Disconnected due to user request. [ 1287.236401][T18246] block nbd0: shutting down sockets [ 1287.254675][T18246] FAULT_INJECTION: forcing a failure. [ 1287.254675][T18246] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1287.268393][T17891] ldm_validate_partition_table(): Disk read failed. [ 1287.268987][T18248] netlink: 'syz.3.16862': attribute type 2 has an invalid length. [ 1287.283271][T18248] netlink: 'syz.3.16862': attribute type 2 has an invalid length. [ 1287.292093][T18246] CPU: 1 UID: 0 PID: 18246 Comm: syz.0.16861 Not tainted syzkaller #0 PREEMPT(full) [ 1287.292123][T18246] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1287.292137][T18246] Call Trace: [ 1287.292147][T18246] [ 1287.292157][T18246] dump_stack_lvl+0xe8/0x150 [ 1287.292194][T18246] should_fail_ex+0x412/0x560 [ 1287.292244][T18246] _copy_to_user+0x31/0xb0 [ 1287.292273][T18246] simple_read_from_buffer+0xe1/0x170 [ 1287.292316][T18246] proc_fail_nth_read+0x1bb/0x230 [ 1287.292352][T18246] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1287.292388][T18246] ? rw_verify_area+0x2a6/0x4d0 [ 1287.292421][T18246] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1287.292454][T18246] vfs_read+0x20c/0xa70 [ 1287.292493][T18246] ? __pfx___mutex_lock+0x10/0x10 [ 1287.292523][T18246] ? __pfx_vfs_read+0x10/0x10 [ 1287.292558][T18246] ? __fget_files+0x2a/0x420 [ 1287.292592][T18246] ? __fget_files+0x3a0/0x420 [ 1287.292621][T18246] ? __fget_files+0x2a/0x420 [ 1287.292659][T18246] ksys_read+0x150/0x270 [ 1287.292695][T18246] ? __pfx_ksys_read+0x10/0x10 [ 1287.292737][T18246] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1287.292762][T18246] do_syscall_64+0x15f/0xf80 [ 1287.292789][T18246] ? trace_irq_disable+0x3b/0x140 [ 1287.292813][T18246] ? clear_bhb_loop+0x40/0x90 [ 1287.292841][T18246] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1287.292863][T18246] RIP: 0033:0x7f925975d04e [ 1287.292884][T18246] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1287.292904][T18246] RSP: 002b:00007f925a572fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1287.292928][T18246] RAX: ffffffffffffffda RBX: 00007f925a5736c0 RCX: 00007f925975d04e [ 1287.292945][T18246] RDX: 000000000000000f RSI: 00007f925a5730a0 RDI: 0000000000000007 [ 1287.292959][T18246] RBP: 00007f925a573090 R08: 0000000000000000 R09: 0000000000000000 [ 1287.292972][T18246] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1287.292986][T18246] R13: 00007f9259a16128 R14: 00007f9259a16090 R15: 00007ffd7c001868 [ 1287.293023][T18246] [ 1287.309391][T17891] Dev nbd0: unable to read RDB block 0 [ 1287.537888][T17891] nbd0: unable to read partition table [ 1287.553446][T17891] ldm_validate_partition_table(): Disk read failed. [ 1287.565191][T17891] Dev nbd0: unable to read RDB block 0 [ 1287.573086][T17891] nbd0: unable to read partition table [ 1288.117810][T18277] netlink: 12 bytes leftover after parsing attributes in process `syz.1.16872'. [ 1288.189243][T18277] bond_slave_1: entered promiscuous mode [ 1288.303159][T18294] netlink: 'syz.1.16878': attribute type 2 has an invalid length. [ 1288.404772][T18300] netlink: 28 bytes leftover after parsing attributes in process `syz.2.16880'. [ 1288.849424][T18326] netlink: 16 bytes leftover after parsing attributes in process `syz.2.16888'. [ 1288.989597][T18330] openvswitch: netlink: IPv4 tun info is not correct [ 1289.001519][T18333] netlink: 8 bytes leftover after parsing attributes in process `syz.3.16890'. [ 1289.038271][T18333] bond39: entered promiscuous mode [ 1289.039259][T18330] x_tables: ip_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 1289.045834][T18333] 8021q: adding VLAN 0 to HW filter on device bond39 [ 1289.065864][T18330] netlink: 7 bytes leftover after parsing attributes in process `syz.2.16889'. [ 1289.254915][T18341] netlink: 24 bytes leftover after parsing attributes in process `syz.3.16892'. [ 1289.281080][T18345] netlink: 60 bytes leftover after parsing attributes in process `syz.4.16894'. [ 1289.449878][T18357] netlink: 'syz.0.16897': attribute type 1 has an invalid length. [ 1289.474964][T18361] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.16900'. [ 1289.505463][T18357] 8021q: adding VLAN 0 to HW filter on device bond38 [ 1289.587087][T18357] bond38: (slave gretap4): making interface the new active one [ 1289.615974][T18357] bond38: (slave gretap4): Enslaving as an active interface with an up link [ 1289.784768][T18376] bond0: entered promiscuous mode [ 1289.791490][T18376] bond0: left promiscuous mode [ 1289.898914][T18383] netlink: 'syz.2.16906': attribute type 1 has an invalid length. [ 1289.958687][T18383] 8021q: adding VLAN 0 to HW filter on device bond37 [ 1289.979304][T18389] netlink: 'syz.0.16907': attribute type 21 has an invalid length. [ 1289.992098][T18384] bond37: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 1290.505251][T18414] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1290.733029][T18429] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 1290.781067][T18429] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 1291.285546][T18459] __nla_validate_parse: 75 callbacks suppressed [ 1291.285569][T18459] netlink: 20 bytes leftover after parsing attributes in process `syz.1.16935'. [ 1291.913299][T18487] mac80211_hwsim hwsim8 syzkaller0: entered promiscuous mode [ 1291.934495][T18465] nbd4: detected capacity change from 0 to 63 [ 1291.945650][T18467] block nbd4: NBD_DISCONNECT [ 1291.956090][T18487] mac80211_hwsim hwsim8 syzkaller0: entered allmulticast mode [ 1291.969746][T18467] block nbd4: Disconnected due to user request. [ 1291.990720][T18467] block nbd4: shutting down sockets [ 1292.000996][ C1] blk_print_req_error: 286 callbacks suppressed [ 1292.001019][ C1] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1292.017027][ C1] buffer_io_error: 286 callbacks suppressed [ 1292.017047][ C1] Buffer I/O error on dev nbd4, logical block 0, async page read [ 1292.025881][ C0] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1292.040274][ C0] Buffer I/O error on dev nbd4, logical block 1, async page read [ 1292.048190][ C0] I/O error, dev nbd4, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1292.057499][ C0] Buffer I/O error on dev nbd4, logical block 2, async page read [ 1292.065494][ C0] I/O error, dev nbd4, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1292.074613][ C0] Buffer I/O error on dev nbd4, logical block 3, async page read [ 1292.099607][T18412] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1292.115117][T18412] Buffer I/O error on dev nbd4, logical block 0, async page read [ 1292.123139][T18412] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1292.134112][T18412] Buffer I/O error on dev nbd4, logical block 1, async page read [ 1292.142229][T18412] I/O error, dev nbd4, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1292.160495][T18492] netlink: 104 bytes leftover after parsing attributes in process `syz.0.16945'. [ 1292.186392][T18492] IPVS: length: 239 != 24 [ 1292.200938][T18412] Buffer I/O error on dev nbd4, logical block 2, async page read [ 1292.243500][T18412] I/O error, dev nbd4, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1292.282577][T18412] Buffer I/O error on dev nbd4, logical block 3, async page read [ 1292.318092][T18499] netlink: 8 bytes leftover after parsing attributes in process `syz.4.16947'. [ 1292.337913][T18412] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1292.369603][T18499] netlink: 8 bytes leftover after parsing attributes in process `syz.4.16947'. [ 1292.382195][T18412] Buffer I/O error on dev nbd4, logical block 0, async page read [ 1292.404119][T18412] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1292.435627][T18412] Buffer I/O error on dev nbd4, logical block 1, async page read [ 1292.480277][T18412] ldm_validate_partition_table(): Disk read failed. [ 1292.510762][T18412] Dev nbd4: unable to read RDB block 0 [ 1292.521174][T18412] nbd4: unable to read partition table [ 1292.559502][T18412] ldm_validate_partition_table(): Disk read failed. [ 1292.579906][T18412] Dev nbd4: unable to read RDB block 0 [ 1292.599145][T18412] nbd4: unable to read partition table [ 1292.645832][T18513] netlink: 24 bytes leftover after parsing attributes in process `syz.3.16951'. [ 1292.645854][T18514] netlink: 24 bytes leftover after parsing attributes in process `syz.3.16951'. [ 1292.726935][T18517] FAULT_INJECTION: forcing a failure. [ 1292.726935][T18517] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1292.747101][T26327] lec:lec_start_xmit: lec0:No lecd attached [ 1292.773823][T18517] CPU: 1 UID: 0 PID: 18517 Comm: syz.0.16952 Not tainted syzkaller #0 PREEMPT(full) [ 1292.773855][T18517] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1292.773880][T18517] Call Trace: [ 1292.773890][T18517] [ 1292.773901][T18517] dump_stack_lvl+0xe8/0x150 [ 1292.773941][T18517] should_fail_ex+0x412/0x560 [ 1292.773980][T18517] prepare_alloc_pages+0x22a/0x650 [ 1292.774013][T18517] __alloc_frozen_pages_noprof+0x12f/0x380 [ 1292.774042][T18517] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1292.774071][T18517] ? __pfx_policy_nodemask+0x10/0x10 [ 1292.774096][T18517] ? __lock_acquire+0x6b5/0x2cf0 [ 1292.774134][T18517] alloc_pages_mpol+0x232/0x4a0 [ 1292.774164][T18517] vma_alloc_folio_noprof+0xea/0x210 [ 1292.774188][T18517] ? __lock_acquire+0x6b5/0x2cf0 [ 1292.774219][T18517] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 1292.774244][T18517] ? __pte_offset_map+0x29/0x240 [ 1292.774275][T18517] ? __pte_offset_map+0x29/0x240 [ 1292.774317][T18517] do_pte_missing+0x1656/0x3490 [ 1292.774374][T18517] handle_mm_fault+0x1bec/0x3310 [ 1292.774424][T18517] ? handle_mm_fault+0xee/0x3310 [ 1292.774463][T18517] ? __pfx_handle_mm_fault+0x10/0x10 [ 1292.774508][T18517] ? __lock_acquire+0x6b5/0x2cf0 [ 1292.774543][T18517] ? lock_mm_and_find_vma+0xa7/0x340 [ 1292.774581][T18517] do_user_addr_fault+0x75b/0x1340 [ 1292.774633][T18517] exc_page_fault+0x6a/0xc0 [ 1292.774663][T18517] asm_exc_page_fault+0x26/0x30 [ 1292.774685][T18517] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 1292.774720][T18517] Code: cc cc cc 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 c3 cc cc cc cc 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 1292.774740][T18517] RSP: 0018:ffffc9001c1f74d8 EFLAGS: 00050206 [ 1292.774782][T18517] RAX: ffffffff84ad5501 RBX: ffff88807cb7e000 RCX: 00000000000000f0 [ 1292.774798][T18517] RDX: 0000000000000000 RSI: ffff88807cb7ec80 RDI: 0000200000002000 [ 1292.774814][T18517] RBP: ffffc9001c1f7650 R08: ffff88807cb7ed6f R09: 1ffff1100f96fdad [ 1292.774830][T18517] R10: dffffc0000000000 R11: ffffed100f96fdae R12: 1ffff9200383ef9f [ 1292.774846][T18517] R13: 0000200000001380 R14: ffffc9001c1f7d08 R15: 0000000000000d70 [ 1292.774879][T18517] ? _copy_to_iter+0x1c1/0x17d0 [ 1292.774921][T18517] _copy_to_iter+0x255/0x17d0 [ 1292.774958][T18517] ? do_raw_spin_lock+0x12b/0x2f0 [ 1292.774992][T18517] ? __pfx__copy_to_iter+0x10/0x10 [ 1292.775024][T18517] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1292.775049][T18517] ? lockdep_hardirqs_on+0x7a/0x110 [ 1292.775075][T18517] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1292.775101][T18517] ? __skb_try_recv_datagram+0x3d4/0x4d0 [ 1292.775133][T18517] __skb_datagram_iter+0xf8/0x980 [ 1292.775159][T18517] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 1292.775193][T18517] skb_copy_datagram_iter+0xb5/0x240 [ 1292.775222][T18517] netlink_recvmsg+0x2c3/0xa50 [ 1292.775267][T18517] ? __pfx_netlink_recvmsg+0x10/0x10 [ 1292.775305][T18517] ? __lock_acquire+0x6b5/0x2cf0 [ 1292.775333][T18517] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1292.775366][T18517] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 1292.775398][T18517] ? security_socket_recvmsg+0x7e/0x2c0 [ 1292.775434][T18517] ? __pfx_netlink_recvmsg+0x10/0x10 [ 1292.775465][T18517] sock_recvmsg+0x172/0x1b0 [ 1292.775496][T18517] ____sys_recvmsg+0x1e6/0x4a0 [ 1292.775541][T18517] ? __pfx_____sys_recvmsg+0x10/0x10 [ 1292.775595][T18517] ? import_iovec+0x73/0xa0 [ 1292.775622][T18517] ___sys_recvmsg+0x215/0x590 [ 1292.775650][T18517] ? __pfx____sys_recvmsg+0x10/0x10 [ 1292.775678][T18517] ? __fget_files+0x2a/0x420 [ 1292.775729][T18517] ? __fget_files+0x3a0/0x420 [ 1292.775770][T18517] do_recvmmsg+0x334/0x800 [ 1292.775803][T18517] ? __pfx_do_recvmmsg+0x10/0x10 [ 1292.775841][T18517] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1292.775899][T18517] __x64_sys_recvmmsg+0x198/0x250 [ 1292.775926][T18517] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1292.775960][T18517] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1292.775985][T18517] do_syscall_64+0x15f/0xf80 [ 1292.776010][T18517] ? trace_irq_disable+0x3b/0x140 [ 1292.776034][T18517] ? clear_bhb_loop+0x40/0x90 [ 1292.776063][T18517] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1292.776085][T18517] RIP: 0033:0x7f925979c819 [ 1292.776106][T18517] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1292.776125][T18517] RSP: 002b:00007f925a594028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1292.776149][T18517] RAX: ffffffffffffffda RBX: 00007f9259a15fa0 RCX: 00007f925979c819 [ 1292.776167][T18517] RDX: 0000000000000014 RSI: 0000200000000000 RDI: 0000000000000003 [ 1292.776181][T18517] RBP: 00007f925a594090 R08: 0000000000000000 R09: 0000000000000000 [ 1292.776196][T18517] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1292.776210][T18517] R13: 00007f9259a16038 R14: 00007f9259a15fa0 R15: 00007ffd7c001868 [ 1292.776248][T18517] [ 1293.508037][T18541] netlink: 'syz.3.16962': attribute type 1 has an invalid length. [ 1293.519944][T18541] netlink: 224 bytes leftover after parsing attributes in process `syz.3.16962'. [ 1293.955476][T18561] netlink: 8 bytes leftover after parsing attributes in process `syz.3.16968'. [ 1293.975469][T18561] netlink: 8 bytes leftover after parsing attributes in process `syz.3.16968'. [ 1294.442676][T18592] netlink: 'syz.2.16974': attribute type 1 has an invalid length. [ 1294.528475][T18592] workqueue: Failed to create a rescuer kthread for wq "bond38": -EINTR [ 1294.599467][T18603] netlink: 'syz.4.16978': attribute type 21 has an invalid length. [ 1294.635702][T18603] netlink: 132 bytes leftover after parsing attributes in process `syz.4.16978'. [ 1294.832402][T18619] netlink: 'syz.1.16983': attribute type 1 has an invalid length. [ 1294.961266][T18619] 8021q: adding VLAN 0 to HW filter on device bond23 [ 1295.131811][T18619] vlan4: entered promiscuous mode [ 1295.140618][T18619] bond23: entered promiscuous mode [ 1295.146757][T18619] vlan4: entered allmulticast mode [ 1295.151984][T18619] bond23: entered allmulticast mode [ 1295.156378][T18646] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1295.163512][T18647] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1295.185947][T18624] bond23: (slave gretap3): making interface the new active one [ 1295.203646][T18624] gretap3: entered promiscuous mode [ 1295.210773][T18624] gretap3: entered allmulticast mode [ 1295.241507][T18624] bond23: (slave gretap3): Enslaving as an active interface with an up link [ 1295.362078][T18636] bond40: entered promiscuous mode [ 1295.378815][T18636] 8021q: adding VLAN 0 to HW filter on device bond40 [ 1295.456182][T18657] xt_hashlimit: size too large, truncated to 1048576 [ 1295.574906][T18660] bridge_slave_0 (unregistering): left promiscuous mode [ 1295.597302][T18660] bridge0: port 1(bridge_slave_0) entered disabled state [ 1296.171294][T18696] bond35: entered promiscuous mode [ 1296.177145][T18696] 8021q: adding VLAN 0 to HW filter on device bond35 [ 1296.362339][T18709] mac80211_hwsim hwsim11 ÿ: renamed from wlan1 [ 1296.709461][T18724] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 1296.820423][T18730] __nla_validate_parse: 8 callbacks suppressed [ 1296.820443][T18730] netlink: 28 bytes leftover after parsing attributes in process `syz.0.17017'. [ 1297.180586][T18745] netlink: 8 bytes leftover after parsing attributes in process `syz.2.17022'. [ 1297.201881][T18745] netlink: 8 bytes leftover after parsing attributes in process `syz.2.17022'. [ 1297.242540][T18748] netlink: 36 bytes leftover after parsing attributes in process `syz.4.17024'. [ 1297.252973][T18749] netlink: 12 bytes leftover after parsing attributes in process `syz.0.17023'. [ 1297.423489][T18748] netlink: 8 bytes leftover after parsing attributes in process `syz.4.17024'. [ 1297.490107][T18756] bond39: entered promiscuous mode [ 1297.496749][T18756] bond39: entered allmulticast mode [ 1297.665947][T18762] netlink: 'syz.1.17026': attribute type 1 has an invalid length. [ 1297.674266][T18762] netlink: 4 bytes leftover after parsing attributes in process `syz.1.17026'. [ 1297.711328][T18767] netlink: 'syz.3.17027': attribute type 11 has an invalid length. [ 1297.719941][T18767] netlink: 228 bytes leftover after parsing attributes in process `syz.3.17027'. [ 1297.870777][T18775] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 1297.905941][T18777] netlink: 28 bytes leftover after parsing attributes in process `syz.0.17032'. [ 1297.993750][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5250 ms [ 1298.001980][ C0] lec:lec_tx_timeout: lec0 [ 1298.114332][T18788] FAULT_INJECTION: forcing a failure. [ 1298.114332][T18788] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1298.141243][T18788] CPU: 0 UID: 0 PID: 18788 Comm: syz.3.17036 Not tainted syzkaller #0 PREEMPT(full) [ 1298.141276][T18788] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1298.141291][T18788] Call Trace: [ 1298.141301][T18788] [ 1298.141312][T18788] dump_stack_lvl+0xe8/0x150 [ 1298.141352][T18788] should_fail_ex+0x412/0x560 [ 1298.141391][T18788] _copy_to_iter+0x1e4/0x17d0 [ 1298.141429][T18788] ? do_raw_spin_lock+0x12b/0x2f0 [ 1298.141465][T18788] ? __pfx__copy_to_iter+0x10/0x10 [ 1298.141498][T18788] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1298.141524][T18788] ? lockdep_hardirqs_on+0x7a/0x110 [ 1298.141552][T18788] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1298.141578][T18788] ? __skb_try_recv_datagram+0x3d4/0x4d0 [ 1298.141629][T18788] __skb_datagram_iter+0xf8/0x980 [ 1298.141655][T18788] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 1298.141689][T18788] skb_copy_datagram_iter+0xb5/0x240 [ 1298.141718][T18788] netlink_recvmsg+0x2c3/0xa50 [ 1298.141770][T18788] ? __pfx_netlink_recvmsg+0x10/0x10 [ 1298.141808][T18788] ? __lock_acquire+0x6b5/0x2cf0 [ 1298.141837][T18788] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1298.141870][T18788] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 1298.141902][T18788] ? security_socket_recvmsg+0x7e/0x2c0 [ 1298.141939][T18788] ? __pfx_netlink_recvmsg+0x10/0x10 [ 1298.141972][T18788] sock_recvmsg+0x172/0x1b0 [ 1298.142004][T18788] ____sys_recvmsg+0x1e6/0x4a0 [ 1298.142050][T18788] ? __pfx_____sys_recvmsg+0x10/0x10 [ 1298.142103][T18788] ? import_iovec+0x73/0xa0 [ 1298.142131][T18788] ___sys_recvmsg+0x215/0x590 [ 1298.142165][T18788] ? __pfx____sys_recvmsg+0x10/0x10 [ 1298.142193][T18788] ? __fget_files+0x2a/0x420 [ 1298.142242][T18788] ? __fget_files+0x3a0/0x420 [ 1298.142283][T18788] do_recvmmsg+0x334/0x800 [ 1298.142316][T18788] ? __pfx_do_recvmmsg+0x10/0x10 [ 1298.142353][T18788] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1298.142404][T18788] __x64_sys_recvmmsg+0x198/0x250 [ 1298.142425][T18788] ? __irq_exit_rcu+0xca/0x220 [ 1298.142458][T18788] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1298.142479][T18788] ? handle_softirqs+0x715/0x840 [ 1298.142519][T18788] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1298.142545][T18788] do_syscall_64+0x15f/0xf80 [ 1298.142575][T18788] ? clear_bhb_loop+0x40/0x90 [ 1298.142603][T18788] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1298.142626][T18788] RIP: 0033:0x7f4b35b9c819 [ 1298.142648][T18788] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1298.142667][T18788] RSP: 002b:00007f4b36b41028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1298.142693][T18788] RAX: ffffffffffffffda RBX: 00007f4b35e15fa0 RCX: 00007f4b35b9c819 [ 1298.142709][T18788] RDX: 0000000000000014 RSI: 0000200000000000 RDI: 0000000000000003 [ 1298.142724][T18788] RBP: 00007f4b36b41090 R08: 0000000000000000 R09: 0000000000000000 [ 1298.142746][T18788] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1298.142760][T18788] R13: 00007f4b35e16038 R14: 00007f4b35e15fa0 R15: 00007ffce2490478 [ 1298.142797][T18788] [ 1298.609652][T18806] netlink: 28 bytes leftover after parsing attributes in process `syz.1.17044'. [ 1298.789004][T18816] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 1299.137601][T18841] netlink: 'syz.1.17053': attribute type 1 has an invalid length. [ 1299.691331][T18844] nbd3: detected capacity change from 0 to 63 [ 1299.700380][ T5823] block nbd3: Receive control failed (result -32) [ 1299.704991][T18412] block nbd3: Send control failed (result -32) [ 1299.744889][T18412] block nbd3: Request send failed, requeueing [ 1299.758290][ T1726] block nbd3: Dead connection, failed to find a fallback [ 1299.769588][ T1726] block nbd3: shutting down sockets [ 1299.776687][ T1726] blk_print_req_error: 138 callbacks suppressed [ 1299.776715][ T1726] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1299.796097][ T1726] buffer_io_error: 138 callbacks suppressed [ 1299.796117][ T1726] Buffer I/O error on dev nbd3, logical block 0, async page read [ 1299.812879][T18412] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1299.822184][T18412] Buffer I/O error on dev nbd3, logical block 1, async page read [ 1299.830261][T18412] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1299.840011][T18412] Buffer I/O error on dev nbd3, logical block 2, async page read [ 1299.848822][T18412] I/O error, dev nbd3, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1299.858289][T18412] Buffer I/O error on dev nbd3, logical block 3, async page read [ 1299.866379][T18412] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1299.875802][T18412] Buffer I/O error on dev nbd3, logical block 0, async page read [ 1299.884373][T18412] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1299.893492][T18412] Buffer I/O error on dev nbd3, logical block 1, async page read [ 1299.901826][T18412] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1299.911365][T18412] Buffer I/O error on dev nbd3, logical block 2, async page read [ 1299.919656][T18412] I/O error, dev nbd3, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1299.929050][T18412] Buffer I/O error on dev nbd3, logical block 3, async page read [ 1299.937398][T18412] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1299.946716][T18412] Buffer I/O error on dev nbd3, logical block 0, async page read [ 1299.954883][T18412] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1299.964510][T18412] Buffer I/O error on dev nbd3, logical block 1, async page read [ 1299.975832][T18412] ldm_validate_partition_table(): Disk read failed. [ 1300.003420][T18412] Dev nbd3: unable to read RDB block 0 [ 1300.049422][T18412] nbd3: unable to read partition table [ 1300.092654][T18412] ldm_validate_partition_table(): Disk read failed. [ 1300.117989][T18412] Dev nbd3: unable to read RDB block 0 [ 1300.136229][T18412] nbd3: unable to read partition table [ 1300.151825][T18863] netlink: 'syz.3.17063': attribute type 2 has an invalid length. [ 1300.181682][T18863] netlink: 'syz.3.17063': attribute type 2 has an invalid length. [ 1300.321991][ T1300] lec:lec_start_xmit: lec0:No lecd attached [ 1300.328518][ T1300] clip:clip_start_xmit: skb_dst(skb) == NULL [ 1301.048806][T18908] netlink: 'syz.0.17077': attribute type 1 has an invalid length. [ 1301.235252][T18922] nbd: nbd1 already in use [ 1301.240539][T18922] block nbd1: NBD_DISCONNECT [ 1301.247942][T18922] block nbd1: Send disconnect failed -32 [ 1301.254825][T18922] block nbd1: shutting down sockets [ 1301.300042][T17835] ldm_validate_partition_table(): Disk read failed. [ 1301.328590][T17835] Dev nbd1: unable to read RDB block 0 [ 1301.337851][T17835] nbd1: unable to read partition table [ 1301.366938][T17835] ldm_validate_partition_table(): Disk read failed. [ 1301.393415][T17835] Dev nbd1: unable to read RDB block 0 [ 1301.418010][T17835] nbd1: unable to read partition table [ 1301.613893][T18931] sch_tbf: burst 256 is lower than device syzkaller0 mtu (1514) ! [ 1301.920211][T18946] __nla_validate_parse: 20 callbacks suppressed [ 1301.920234][T18946] netlink: 8 bytes leftover after parsing attributes in process `syz.1.17086'. [ 1301.994394][T18946] bond24: entered promiscuous mode [ 1302.000946][T18946] 8021q: adding VLAN 0 to HW filter on device bond24 [ 1302.041411][T18952] netlink: 'syz.4.17088': attribute type 1 has an invalid length. [ 1302.055931][T18953] netlink: 212368 bytes leftover after parsing attributes in process `syz.2.17087'. [ 1302.361703][T18965] veth0: entered promiscuous mode [ 1302.623094][T18980] bridge50: entered promiscuous mode [ 1302.653290][T18980] bridge50: entered allmulticast mode [ 1302.728331][T18964] veth0: left promiscuous mode [ 1302.887086][T18998] netlink: 16 bytes leftover after parsing attributes in process `syz.0.17098'. [ 1302.987529][T19007] netlink: 'syz.0.17102': attribute type 1 has an invalid length. [ 1303.191128][T19021] netlink: 8 bytes leftover after parsing attributes in process `syz.4.17105'. [ 1303.307942][T19032] xt_limit: Overflow, try lower: 604147548/4200216962 [ 1303.398807][T19034] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1303.549542][T19044] netlink: 'syz.1.17114': attribute type 1 has an invalid length. [ 1303.666859][T19051] netlink: 4 bytes leftover after parsing attributes in process `syz.4.17116'. [ 1303.690341][T19051] netlink: 16 bytes leftover after parsing attributes in process `syz.4.17116'. [ 1303.714010][T19051] netlink: 16 bytes leftover after parsing attributes in process `syz.4.17116'. [ 1303.729410][T19051] netlink: 8 bytes leftover after parsing attributes in process `syz.4.17116'. [ 1303.750510][T19051] netlink: 8 bytes leftover after parsing attributes in process `syz.4.17116'. [ 1304.134686][T19083] FAULT_INJECTION: forcing a failure. [ 1304.134686][T19083] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1304.165143][T19083] CPU: 1 UID: 0 PID: 19083 Comm: syz.4.17125 Not tainted syzkaller #0 PREEMPT(full) [ 1304.165174][T19083] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1304.165194][T19083] Call Trace: [ 1304.165202][T19083] [ 1304.165213][T19083] dump_stack_lvl+0xe8/0x150 [ 1304.165250][T19083] should_fail_ex+0x412/0x560 [ 1304.165286][T19083] _copy_from_user+0x2d/0xb0 [ 1304.165311][T19083] ___sys_sendmsg+0x1c6/0x360 [ 1304.165343][T19083] ? __lock_acquire+0x6b5/0x2cf0 [ 1304.165377][T19083] ? __pfx____sys_sendmsg+0x10/0x10 [ 1304.165451][T19083] ? __fget_files+0x2a/0x420 [ 1304.165480][T19083] ? __fget_files+0x3a0/0x420 [ 1304.165520][T19083] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1304.165558][T19083] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1304.165603][T19083] ? __pfx_ksys_write+0x10/0x10 [ 1304.165648][T19083] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1304.165673][T19083] do_syscall_64+0x15f/0xf80 [ 1304.165700][T19083] ? trace_irq_disable+0x3b/0x140 [ 1304.165725][T19083] ? clear_bhb_loop+0x40/0x90 [ 1304.165753][T19083] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1304.165775][T19083] RIP: 0033:0x7efe9db9c819 [ 1304.165796][T19083] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1304.165816][T19083] RSP: 002b:00007efe9e994028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1304.165842][T19083] RAX: ffffffffffffffda RBX: 00007efe9de15fa0 RCX: 00007efe9db9c819 [ 1304.165860][T19083] RDX: 00000000000440b0 RSI: 0000200000000280 RDI: 0000000000000003 [ 1304.165875][T19083] RBP: 00007efe9e994090 R08: 0000000000000000 R09: 0000000000000000 [ 1304.165889][T19083] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1304.165903][T19083] R13: 00007efe9de16038 R14: 00007efe9de15fa0 R15: 00007ffe9f08c3d8 [ 1304.165941][T19083] [ 1304.462410][T19088] netlink: 8 bytes leftover after parsing attributes in process `syz.2.17128'. [ 1304.513274][T19092] netlink: 'syz.0.17127': attribute type 12 has an invalid length. [ 1304.622847][T19099] bond36: entered promiscuous mode [ 1304.632422][T19099] bond36: entered allmulticast mode [ 1304.638273][T19099] 8021q: adding VLAN 0 to HW filter on device bond36 [ 1304.761197][T19107] xt_cgroup: xt_cgroup: no path or classid specified [ 1305.150530][T19130] FAULT_INJECTION: forcing a failure. [ 1305.150530][T19130] name failslab, interval 1, probability 0, space 0, times 0 [ 1305.179661][T19130] CPU: 1 UID: 0 PID: 19130 Comm: syz.2.17140 Not tainted syzkaller #0 PREEMPT(full) [ 1305.179694][T19130] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1305.179709][T19130] Call Trace: [ 1305.179718][T19130] [ 1305.179729][T19130] dump_stack_lvl+0xe8/0x150 [ 1305.179769][T19130] should_fail_ex+0x412/0x560 [ 1305.179807][T19130] should_failslab+0xa8/0x100 [ 1305.179834][T19130] kmem_cache_alloc_node_noprof+0x8f/0x690 [ 1305.179867][T19130] ? __alloc_skb+0x186/0x7d0 [ 1305.179897][T19130] ? __alloc_skb+0x1d0/0x7d0 [ 1305.179925][T19130] ? __local_bh_enable_ip+0xd0/0x130 [ 1305.179961][T19130] __alloc_skb+0x1d0/0x7d0 [ 1305.179998][T19130] netlink_sendmsg+0x5d4/0xb40 [ 1305.180043][T19130] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1305.180089][T19130] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1305.180121][T19130] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1305.180160][T19130] ____sys_sendmsg+0x972/0x9f0 [ 1305.180194][T19130] ? __might_fault+0xaf/0x130 [ 1305.180232][T19130] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1305.180277][T19130] ? import_iovec+0x73/0xa0 [ 1305.180309][T19130] ___sys_sendmsg+0x2a5/0x360 [ 1305.180341][T19130] ? __lock_acquire+0x6b5/0x2cf0 [ 1305.180377][T19130] ? __pfx____sys_sendmsg+0x10/0x10 [ 1305.180451][T19130] ? __fget_files+0x2a/0x420 [ 1305.180479][T19130] ? __fget_files+0x3a0/0x420 [ 1305.180518][T19130] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1305.180555][T19130] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1305.180599][T19130] ? __pfx_ksys_write+0x10/0x10 [ 1305.180642][T19130] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1305.180667][T19130] do_syscall_64+0x15f/0xf80 [ 1305.180693][T19130] ? trace_irq_disable+0x3b/0x140 [ 1305.180717][T19130] ? clear_bhb_loop+0x40/0x90 [ 1305.180745][T19130] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1305.180767][T19130] RIP: 0033:0x7efcac59c819 [ 1305.180789][T19130] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1305.180807][T19130] RSP: 002b:00007efcad385028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1305.180831][T19130] RAX: ffffffffffffffda RBX: 00007efcac815fa0 RCX: 00007efcac59c819 [ 1305.180848][T19130] RDX: 00000000000440b0 RSI: 0000200000000280 RDI: 0000000000000003 [ 1305.180863][T19130] RBP: 00007efcad385090 R08: 0000000000000000 R09: 0000000000000000 [ 1305.180876][T19130] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1305.180890][T19130] R13: 00007efcac816038 R14: 00007efcac815fa0 R15: 00007ffc82811fc8 [ 1305.180927][T19130] [ 1305.944352][T19147] xfrm0: left allmulticast mode [ 1305.993732][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5670 ms [ 1306.001850][ C0] lec:lec_tx_timeout: lec0 [ 1306.165513][T19163] veth1: Caught tx_queue_len zero misconfig [ 1306.250363][T19169] netlink: 'syz.3.17157': attribute type 1 has an invalid length. [ 1306.287516][T19169] 8021q: adding VLAN 0 to HW filter on device bond41 [ 1306.640848][T19197] nbd: nbd3 already in use [ 1306.656524][T19197] block nbd3: NBD_DISCONNECT [ 1306.661398][T19197] block nbd3: Send disconnect failed -32 [ 1306.787176][T19205] FAULT_INJECTION: forcing a failure. [ 1306.787176][T19205] name failslab, interval 1, probability 0, space 0, times 0 [ 1306.808420][T19205] CPU: 0 UID: 0 PID: 19205 Comm: syz.3.17166 Not tainted syzkaller #0 PREEMPT(full) [ 1306.808451][T19205] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1306.808464][T19205] Call Trace: [ 1306.808474][T19205] [ 1306.808485][T19205] dump_stack_lvl+0xe8/0x150 [ 1306.808524][T19205] should_fail_ex+0x412/0x560 [ 1306.808562][T19205] should_failslab+0xa8/0x100 [ 1306.808585][T19205] ? skb_clone+0x212/0x3a0 [ 1306.808607][T19205] kmem_cache_alloc_noprof+0x87/0x650 [ 1306.808640][T19205] ? __netlink_lookup+0xc6/0x8b0 [ 1306.808680][T19205] skb_clone+0x212/0x3a0 [ 1306.808707][T19205] __netlink_deliver_tap+0x404/0x850 [ 1306.808753][T19205] ? netlink_deliver_tap+0x2e/0x1b0 [ 1306.808787][T19205] netlink_deliver_tap+0x19c/0x1b0 [ 1306.808821][T19205] netlink_unicast+0x730/0x8e0 [ 1306.808864][T19205] netlink_sendmsg+0x813/0xb40 [ 1306.808908][T19205] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1306.808953][T19205] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1306.808985][T19205] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1306.809023][T19205] ____sys_sendmsg+0x972/0x9f0 [ 1306.809061][T19205] ? __might_fault+0xaf/0x130 [ 1306.809100][T19205] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1306.809147][T19205] ? import_iovec+0x73/0xa0 [ 1306.809175][T19205] ___sys_sendmsg+0x2a5/0x360 [ 1306.809208][T19205] ? __lock_acquire+0x6b5/0x2cf0 [ 1306.809243][T19205] ? __pfx____sys_sendmsg+0x10/0x10 [ 1306.809320][T19205] ? __fget_files+0x2a/0x420 [ 1306.809348][T19205] ? __fget_files+0x3a0/0x420 [ 1306.809388][T19205] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1306.809426][T19205] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1306.809477][T19205] ? __pfx_ksys_write+0x10/0x10 [ 1306.809521][T19205] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1306.809545][T19205] do_syscall_64+0x15f/0xf80 [ 1306.809572][T19205] ? trace_irq_disable+0x3b/0x140 [ 1306.809597][T19205] ? clear_bhb_loop+0x40/0x90 [ 1306.809625][T19205] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1306.809647][T19205] RIP: 0033:0x7f4b35b9c819 [ 1306.809669][T19205] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1306.809688][T19205] RSP: 002b:00007f4b36b41028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1306.809713][T19205] RAX: ffffffffffffffda RBX: 00007f4b35e15fa0 RCX: 00007f4b35b9c819 [ 1306.809730][T19205] RDX: 00000000000440b0 RSI: 0000200000000280 RDI: 0000000000000003 [ 1306.809745][T19205] RBP: 00007f4b36b41090 R08: 0000000000000000 R09: 0000000000000000 [ 1306.809759][T19205] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1306.809774][T19205] R13: 00007f4b35e16038 R14: 00007f4b35e15fa0 R15: 00007ffce2490478 [ 1306.809813][T19205] [ 1307.096915][T19209] __nla_validate_parse: 13 callbacks suppressed [ 1307.096941][T19209] netlink: 8 bytes leftover after parsing attributes in process `syz.0.17167'. [ 1307.114228][T19209] netlink: 8 bytes leftover after parsing attributes in process `syz.0.17167'. [ 1307.130305][T19209] netlink: 8 bytes leftover after parsing attributes in process `syz.0.17167'. [ 1307.139770][T19209] veth1: Caught tx_queue_len zero misconfig [ 1307.280011][T19219] netlink: 'syz.1.17170': attribute type 1 has an invalid length. [ 1307.359910][T19219] 8021q: adding VLAN 0 to HW filter on device bond25 [ 1307.733071][T19247] macvlan1: entered promiscuous mode [ 1307.753372][T19247] macvlan1: entered allmulticast mode [ 1307.760119][T19247] veth1_vlan: entered allmulticast mode [ 1307.830406][T19253] netlink: 8 bytes leftover after parsing attributes in process `syz.2.17181'. [ 1307.898461][T19256] netlink: 8 bytes leftover after parsing attributes in process `syz.2.17181'. [ 1307.924787][T19253] netlink: 8 bytes leftover after parsing attributes in process `syz.2.17181'. [ 1308.166785][T19272] netlink: 'syz.2.17187': attribute type 2 has an invalid length. [ 1308.208405][T19275] netlink: 4 bytes leftover after parsing attributes in process `syz.3.17188'. [ 1308.220861][T19272] netlink: 100 bytes leftover after parsing attributes in process `syz.2.17187'. [ 1308.285152][T19282] netlink: 28 bytes leftover after parsing attributes in process `syz.3.17188'. [ 1308.369415][T19291] netlink: 52 bytes leftover after parsing attributes in process `syz.0.17182'. [ 1309.164753][T19326] syzkaller1: entered promiscuous mode [ 1309.189761][T19326] syzkaller1: entered allmulticast mode [ 1309.220623][T19326] netlink: 'syz.4.17197': attribute type 7 has an invalid length. [ 1309.234818][T19331] : entered promiscuous mode [ 1309.243929][T19326] netlink: 'syz.4.17197': attribute type 8 has an invalid length. [ 1309.310114][T19333] netlink: 'syz.0.17198': attribute type 1 has an invalid length. [ 1309.398355][T19346] netlink: 'syz.3.17201': attribute type 5 has an invalid length. [ 1309.542014][T19345] veth25: entered promiscuous mode [ 1309.580962][T19346] geneve3: entered promiscuous mode [ 1309.608112][T19346] geneve3: entered allmulticast mode [ 1309.634356][T14823] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 256 - 0 [ 1309.646533][T14823] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 256 - 0 [ 1309.682411][T14823] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 256 - 0 [ 1309.763377][T19360] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 1309.903912][T19365] bond42: (slave bridge35): Enslaving as an active interface with an up link [ 1310.640782][T19414] netlink: 'syz.2.17224': attribute type 3 has an invalid length. [ 1310.668769][T19414] syzkaller1: entered promiscuous mode [ 1310.674601][T19414] syzkaller1: entered allmulticast mode [ 1310.906655][T19428] x_tables: duplicate underflow at hook 2 [ 1311.004608][T19434] nbd1: detected capacity change from 0 to 63 [ 1311.022814][T19440] block nbd1: NBD_DISCONNECT [ 1311.062799][T19440] block nbd1: Disconnected due to user request. [ 1311.096334][T19440] block nbd1: shutting down sockets [ 1311.132148][ C1] blk_print_req_error: 286 callbacks suppressed [ 1311.132169][ C1] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1311.147722][ C1] buffer_io_error: 286 callbacks suppressed [ 1311.147747][ C1] Buffer I/O error on dev nbd1, logical block 0, async page read [ 1311.161519][ C1] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1311.170746][ C1] Buffer I/O error on dev nbd1, logical block 1, async page read [ 1311.178658][ C1] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1311.187799][ C1] Buffer I/O error on dev nbd1, logical block 2, async page read [ 1311.196030][ C1] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1311.205252][ C1] Buffer I/O error on dev nbd1, logical block 3, async page read [ 1311.217595][T18412] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1311.258824][T18412] Buffer I/O error on dev nbd1, logical block 0, async page read [ 1311.291486][T18412] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1311.320384][T18412] Buffer I/O error on dev nbd1, logical block 1, async page read [ 1311.342292][T18412] I/O error, dev nbd1, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1311.371933][T18412] Buffer I/O error on dev nbd1, logical block 2, async page read [ 1311.399715][T18412] I/O error, dev nbd1, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1311.468109][T18412] Buffer I/O error on dev nbd1, logical block 3, async page read [ 1311.499668][T18412] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1311.537590][T18412] Buffer I/O error on dev nbd1, logical block 0, async page read [ 1311.562221][T18412] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1311.591437][T18412] Buffer I/O error on dev nbd1, logical block 1, async page read [ 1311.630103][T18412] ldm_validate_partition_table(): Disk read failed. [ 1311.665296][T18412] Dev nbd1: unable to read RDB block 0 [ 1311.698602][T18412] nbd1: unable to read partition table [ 1311.757146][T18412] ldm_validate_partition_table(): Disk read failed. [ 1311.793616][T18412] Dev nbd1: unable to read RDB block 0 [ 1311.819785][T18412] nbd1: unable to read partition table [ 1312.224695][T19488] nbd2: detected capacity change from 0 to 63 [ 1312.240578][T19496] block nbd2: NBD_DISCONNECT [ 1312.251057][T19496] block nbd2: Disconnected due to user request. [ 1312.269117][T19496] block nbd2: shutting down sockets [ 1312.306868][T18412] ldm_validate_partition_table(): Disk read failed. [ 1312.320722][T18412] Dev nbd2: unable to read RDB block 0 [ 1312.329563][T18412] nbd2: unable to read partition table [ 1312.350053][T18412] ldm_validate_partition_table(): Disk read failed. [ 1312.367220][T18412] Dev nbd2: unable to read RDB block 0 [ 1312.378047][T18412] nbd2: unable to read partition table [ 1312.679889][T19522] __nla_validate_parse: 9 callbacks suppressed [ 1312.679911][T19522] netlink: 8 bytes leftover after parsing attributes in process `syz.4.17259'. [ 1312.786608][T19528] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 1312.957117][T19538] FAULT_INJECTION: forcing a failure. [ 1312.957117][T19538] name failslab, interval 1, probability 0, space 0, times 0 [ 1312.971697][T19538] CPU: 1 UID: 0 PID: 19538 Comm: syz.3.17267 Not tainted syzkaller #0 PREEMPT(full) [ 1312.971728][T19538] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1312.971742][T19538] Call Trace: [ 1312.971751][T19538] [ 1312.971761][T19538] dump_stack_lvl+0xe8/0x150 [ 1312.971800][T19538] should_fail_ex+0x412/0x560 [ 1312.971840][T19538] should_failslab+0xa8/0x100 [ 1312.971863][T19538] ? skb_clone+0x212/0x3a0 [ 1312.971885][T19538] kmem_cache_alloc_noprof+0x87/0x650 [ 1312.971917][T19538] ? sk_filter_trim_cap+0x19e/0xce0 [ 1312.971950][T19538] skb_clone+0x212/0x3a0 [ 1312.971976][T19538] __netlink_deliver_tap+0x404/0x850 [ 1312.972021][T19538] ? netlink_deliver_tap+0x2e/0x1b0 [ 1312.972053][T19538] netlink_deliver_tap+0x19c/0x1b0 [ 1312.972085][T19538] netlink_dump+0x8ed/0xe10 [ 1312.972127][T19538] ? __pfx_netlink_dump+0x10/0x10 [ 1312.972172][T19538] ? netlink_recvmsg+0x5d6/0xa50 [ 1312.972202][T19538] ? kmem_cache_free+0x180/0x630 [ 1312.972244][T19538] netlink_recvmsg+0x690/0xa50 [ 1312.972288][T19538] ? __pfx_netlink_recvmsg+0x10/0x10 [ 1312.972326][T19538] ? __lock_acquire+0x6b5/0x2cf0 [ 1312.972360][T19538] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 1312.972391][T19538] ? security_socket_recvmsg+0x7e/0x2c0 [ 1312.972428][T19538] ? __pfx_netlink_recvmsg+0x10/0x10 [ 1312.972480][T19538] sock_recvmsg_nosec+0x10c/0x140 [ 1312.972513][T19538] ____sys_recvmsg+0x3e3/0x4a0 [ 1312.972559][T19538] ? __pfx_____sys_recvmsg+0x10/0x10 [ 1312.972612][T19538] ? import_iovec+0x73/0xa0 [ 1312.972640][T19538] ___sys_recvmsg+0x215/0x590 [ 1312.972673][T19538] ? __pfx____sys_recvmsg+0x10/0x10 [ 1312.972702][T19538] ? __fget_files+0x2a/0x420 [ 1312.972766][T19538] do_recvmmsg+0x334/0x800 [ 1312.972800][T19538] ? __pfx_do_recvmmsg+0x10/0x10 [ 1312.972837][T19538] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1312.972889][T19538] __x64_sys_recvmmsg+0x198/0x250 [ 1312.972916][T19538] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1312.972950][T19538] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1312.972975][T19538] do_syscall_64+0x15f/0xf80 [ 1312.973002][T19538] ? trace_irq_disable+0x3b/0x140 [ 1312.973027][T19538] ? clear_bhb_loop+0x40/0x90 [ 1312.973056][T19538] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1312.973079][T19538] RIP: 0033:0x7f4b35b9c819 [ 1312.973100][T19538] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1312.973121][T19538] RSP: 002b:00007f4b36b41028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1312.973147][T19538] RAX: ffffffffffffffda RBX: 00007f4b35e15fa0 RCX: 00007f4b35b9c819 [ 1312.973164][T19538] RDX: 0000000000000014 RSI: 0000200000000000 RDI: 0000000000000003 [ 1312.973179][T19538] RBP: 00007f4b36b41090 R08: 0000000000000000 R09: 0000000000000000 [ 1312.973194][T19538] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1312.973208][T19538] R13: 00007f4b35e16038 R14: 00007f4b35e15fa0 R15: 00007ffce2490478 [ 1312.973247][T19538] [ 1313.275081][T19547] FAULT_INJECTION: forcing a failure. [ 1313.275081][T19547] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1313.288296][T19547] CPU: 1 UID: 0 PID: 19547 Comm: syz.2.17268 Not tainted syzkaller #0 PREEMPT(full) [ 1313.288328][T19547] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1313.288344][T19547] Call Trace: [ 1313.288354][T19547] [ 1313.288363][T19547] dump_stack_lvl+0xe8/0x150 [ 1313.288403][T19547] should_fail_ex+0x412/0x560 [ 1313.288442][T19547] _copy_from_iter+0x1d3/0x1670 [ 1313.288479][T19547] ? rcu_is_watching+0x15/0xb0 [ 1313.288521][T19547] ? __pfx__copy_from_iter+0x10/0x10 [ 1313.288559][T19547] ? netlink_sendmsg+0x650/0xb40 [ 1313.288587][T19547] ? skb_put+0x11b/0x210 [ 1313.288623][T19547] netlink_sendmsg+0x6c0/0xb40 [ 1313.288667][T19547] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1313.288702][T19547] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1313.288734][T19547] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1313.288772][T19547] ____sys_sendmsg+0x972/0x9f0 [ 1313.288805][T19547] ? __might_fault+0xaf/0x130 [ 1313.288844][T19547] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1313.288889][T19547] ? import_iovec+0x73/0xa0 [ 1313.288917][T19547] ___sys_sendmsg+0x2a5/0x360 [ 1313.288950][T19547] ? __lock_acquire+0x6b5/0x2cf0 [ 1313.288985][T19547] ? __pfx____sys_sendmsg+0x10/0x10 [ 1313.289062][T19547] ? __fget_files+0x2a/0x420 [ 1313.289092][T19547] ? __fget_files+0x3a0/0x420 [ 1313.289133][T19547] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1313.289173][T19547] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1313.289220][T19547] ? __pfx_ksys_write+0x10/0x10 [ 1313.289262][T19547] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1313.289286][T19547] do_syscall_64+0x15f/0xf80 [ 1313.289313][T19547] ? trace_irq_disable+0x3b/0x140 [ 1313.289336][T19547] ? clear_bhb_loop+0x40/0x90 [ 1313.289364][T19547] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1313.289387][T19547] RIP: 0033:0x7efcac59c819 [ 1313.289408][T19547] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1313.289428][T19547] RSP: 002b:00007efcad385028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1313.289454][T19547] RAX: ffffffffffffffda RBX: 00007efcac815fa0 RCX: 00007efcac59c819 [ 1313.289471][T19547] RDX: 0000000000000080 RSI: 0000200000000140 RDI: 0000000000000003 [ 1313.289486][T19547] RBP: 00007efcad385090 R08: 0000000000000000 R09: 0000000000000000 [ 1313.289507][T19547] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1313.289521][T19547] R13: 00007efcac816038 R14: 00007efcac815fa0 R15: 00007ffc82811fc8 [ 1313.289558][T19547] [ 1313.578118][T19553] netlink: 684 bytes leftover after parsing attributes in process `syz.4.17271'. [ 1313.594931][T19539] nbd0: detected capacity change from 0 to 63 [ 1313.618346][T19549] tipc: Failed to remove unknown binding: 66,0,0/2886997057:1629139584/1629139585 [ 1313.629458][T19549] tipc: Failed to remove unknown binding: 66,0,0/2886997057:1629139584/1629139585 [ 1313.642595][ T5823] block nbd0: Receive control failed (result -32) [ 1313.665846][T19553] netlink: 44 bytes leftover after parsing attributes in process `syz.4.17271'. [ 1313.675723][T18412] block nbd0: Dead connection, failed to find a fallback [ 1313.709352][T18412] block nbd0: shutting down sockets [ 1313.752707][T18412] ldm_validate_partition_table(): Disk read failed. [ 1313.775542][T18412] Dev nbd0: unable to read RDB block 0 [ 1313.783365][T18412] nbd0: unable to read partition table [ 1313.797504][T18412] ldm_validate_partition_table(): Disk read failed. [ 1313.808850][T18412] Dev nbd0: unable to read RDB block 0 [ 1313.817612][T18412] nbd0: unable to read partition table [ 1313.855408][T19560] netlink: 12 bytes leftover after parsing attributes in process `syz.3.17274'. [ 1314.018187][T19575] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 1314.110083][T19559] syzkaller1: entered promiscuous mode [ 1314.126022][T19559] syzkaller1: entered allmulticast mode [ 1314.595805][T19606] netlink: 20 bytes leftover after parsing attributes in process `syz.0.17286'. [ 1314.650202][T19609] netlink: 108 bytes leftover after parsing attributes in process `syz.2.17287'. [ 1314.675011][T19610] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 1314.891834][T19629] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 1314.999794][T19634] netlink: 12 bytes leftover after parsing attributes in process `syz.2.17294'. [ 1315.031700][T19639] netlink: 68 bytes leftover after parsing attributes in process `syz.1.17293'. [ 1315.055242][T19634] vlan0: entered promiscuous mode [ 1315.061833][T19634] bond0: entered promiscuous mode [ 1315.067622][T19634] mac80211_hwsim hwsim5 wlan1: entered promiscuous mode [ 1315.150798][T19644] netlink: 12 bytes leftover after parsing attributes in process `syz.3.17295'. [ 1315.343105][T19654] FAULT_INJECTION: forcing a failure. [ 1315.343105][T19654] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1315.386052][T19654] CPU: 0 UID: 0 PID: 19654 Comm: syz.1.17299 Not tainted syzkaller #0 PREEMPT(full) [ 1315.386084][T19654] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1315.386098][T19654] Call Trace: [ 1315.386108][T19654] [ 1315.386118][T19654] dump_stack_lvl+0xe8/0x150 [ 1315.386156][T19654] should_fail_ex+0x412/0x560 [ 1315.386194][T19654] _copy_from_user+0x2d/0xb0 [ 1315.386218][T19654] copy_from_sockptr+0x5e/0x90 [ 1315.386255][T19654] ax25_setsockopt+0x345/0xc30 [ 1315.386294][T19654] ? __pfx_ax25_setsockopt+0x10/0x10 [ 1315.386329][T19654] ? __fget_files+0x2a/0x420 [ 1315.386355][T19654] ? aa_sock_opt_perm+0xff/0x1a0 [ 1315.386390][T19654] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 1315.386423][T19654] ? __pfx_ax25_setsockopt+0x10/0x10 [ 1315.386458][T19654] do_sock_setsockopt+0x17c/0x1b0 [ 1315.386497][T19654] __x64_sys_setsockopt+0x13d/0x1b0 [ 1315.386533][T19654] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1315.386565][T19654] do_syscall_64+0x15f/0xf80 [ 1315.386592][T19654] ? trace_irq_disable+0x3b/0x140 [ 1315.386617][T19654] ? clear_bhb_loop+0x40/0x90 [ 1315.386645][T19654] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1315.386667][T19654] RIP: 0033:0x7fe6e1b9c819 [ 1315.386689][T19654] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1315.386708][T19654] RSP: 002b:00007fe6e2a12028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1315.386733][T19654] RAX: ffffffffffffffda RBX: 00007fe6e1e15fa0 RCX: 00007fe6e1b9c819 [ 1315.386750][T19654] RDX: 0000000000000019 RSI: 0000000000000101 RDI: 0000000000000004 [ 1315.386764][T19654] RBP: 00007fe6e2a12090 R08: 0000000000000010 R09: 0000000000000000 [ 1315.386779][T19654] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1315.386793][T19654] R13: 00007fe6e1e16038 R14: 00007fe6e1e15fa0 R15: 00007ffffeef9318 [ 1315.386831][T19654] [ 1315.695930][T19664] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 7, id = 0 [ 1315.716409][T19662] syz.0.17301 uses old SIOCAX25GETINFO [ 1315.773910][T19662] netlink: 24 bytes leftover after parsing attributes in process `syz.0.17301'. [ 1315.875579][T19667] nbd3: detected capacity change from 0 to 63 [ 1315.890195][ T5823] block nbd3: Receive control failed (result -32) [ 1315.898511][T18412] block nbd3: Dead connection, failed to find a fallback [ 1315.944109][T18412] block nbd3: shutting down sockets [ 1315.955729][T18412] ldm_validate_partition_table(): Disk read failed. [ 1315.965759][T18412] Dev nbd3: unable to read RDB block 0 [ 1315.974384][T18412] nbd3: unable to read partition table [ 1316.011200][T18412] ldm_validate_partition_table(): Disk read failed. [ 1316.039152][T18412] Dev nbd3: unable to read RDB block 0 [ 1316.074861][T18412] nbd3: unable to read partition table [ 1316.136609][T18412] blk_print_req_error: 575 callbacks suppressed [ 1316.136631][T18412] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1316.219375][T19684] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 1316.224591][T18412] buffer_io_error: 578 callbacks suppressed [ 1316.224646][T18412] Buffer I/O error on dev nbd3, logical block 0, async page read [ 1316.285096][T18412] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1316.316093][T18412] Buffer I/O error on dev nbd3, logical block 1, async page read [ 1316.342442][T18412] I/O error, dev nbd3, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1316.382020][T18412] Buffer I/O error on dev nbd3, logical block 2, async page read [ 1316.392626][T19691] FAULT_INJECTION: forcing a failure. [ 1316.392626][T19691] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1316.417037][T18412] I/O error, dev nbd3, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1316.440622][T19691] CPU: 1 UID: 0 PID: 19691 Comm: syz.0.17313 Not tainted syzkaller #0 PREEMPT(full) [ 1316.440654][T19691] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1316.440669][T19691] Call Trace: [ 1316.440679][T19691] [ 1316.440689][T19691] dump_stack_lvl+0xe8/0x150 [ 1316.440730][T19691] should_fail_ex+0x412/0x560 [ 1316.440769][T19691] _copy_to_user+0x31/0xb0 [ 1316.440797][T19691] simple_read_from_buffer+0xe1/0x170 [ 1316.440834][T19691] proc_fail_nth_read+0x1bb/0x230 [ 1316.440869][T19691] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1316.440905][T19691] ? rw_verify_area+0x2a6/0x4d0 [ 1316.440937][T19691] ? reacquire_held_locks+0x104/0x190 [ 1316.440975][T19691] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1316.441009][T19691] vfs_read+0x20c/0xa70 [ 1316.441048][T19691] ? __pfx___mutex_lock+0x10/0x10 [ 1316.441079][T19691] ? __pfx_vfs_read+0x10/0x10 [ 1316.441113][T19691] ? __fget_files+0x2a/0x420 [ 1316.441148][T19691] ? __fget_files+0x3a0/0x420 [ 1316.441176][T19691] ? __fget_files+0x2a/0x420 [ 1316.441216][T19691] ksys_read+0x150/0x270 [ 1316.441251][T19691] ? __pfx_ksys_read+0x10/0x10 [ 1316.441294][T19691] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1316.441323][T19691] do_syscall_64+0x15f/0xf80 [ 1316.441350][T19691] ? trace_irq_disable+0x3b/0x140 [ 1316.441375][T19691] ? clear_bhb_loop+0x40/0x90 [ 1316.441404][T19691] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1316.441427][T19691] RIP: 0033:0x7f925975d04e [ 1316.441450][T19691] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 1316.441470][T19691] RSP: 002b:00007f925a593fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1316.441495][T19691] RAX: ffffffffffffffda RBX: 00007f925a5946c0 RCX: 00007f925975d04e [ 1316.441522][T19691] RDX: 000000000000000f RSI: 00007f925a5940a0 RDI: 0000000000000003 [ 1316.441536][T19691] RBP: 00007f925a594090 R08: 0000000000000000 R09: 0000000000000000 [ 1316.441551][T19691] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1316.441565][T19691] R13: 00007f9259a16038 R14: 00007f9259a15fa0 R15: 00007ffd7c001868 [ 1316.441603][T19691] [ 1316.443549][T18412] Buffer I/O error on dev nbd3, logical block 3, async page read [ 1316.762492][T19695] netlink: 'syz.4.17315': attribute type 7 has an invalid length. [ 1317.049513][T19715] delete_channel: no stack [ 1317.645212][T19753] netlink: 'syz.4.17340': attribute type 6 has an invalid length. [ 1317.680265][T19747] bond38: entered promiscuous mode [ 1317.712059][T19747] 8021q: adding VLAN 0 to HW filter on device bond38 [ 1317.865001][T19763] __nla_validate_parse: 8 callbacks suppressed [ 1317.865054][T19763] netlink: 20 bytes leftover after parsing attributes in process `syz.1.17343'. [ 1318.245115][T19783] netlink: 32 bytes leftover after parsing attributes in process `syz.3.17350'. [ 1318.281457][T19789] netlink: 8 bytes leftover after parsing attributes in process `syz.1.17353'. [ 1318.296387][T19789] netlink: 8 bytes leftover after parsing attributes in process `syz.1.17353'. [ 1318.372480][T19786] netlink: 60 bytes leftover after parsing attributes in process `syz.3.17350'. [ 1318.431338][T19796] netlink: 8 bytes leftover after parsing attributes in process `syz.0.17354'. [ 1318.565740][T19796] bond40: entered promiscuous mode [ 1318.579827][T19796] 8021q: adding VLAN 0 to HW filter on device bond40 [ 1318.802942][T19813] FAULT_INJECTION: forcing a failure. [ 1318.802942][T19813] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1318.826672][T19813] CPU: 0 UID: 0 PID: 19813 Comm: syz.0.17360 Not tainted syzkaller #0 PREEMPT(full) [ 1318.826704][T19813] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1318.826718][T19813] Call Trace: [ 1318.826727][T19813] [ 1318.826737][T19813] dump_stack_lvl+0xe8/0x150 [ 1318.826776][T19813] should_fail_ex+0x412/0x560 [ 1318.826819][T19813] _copy_from_user+0x2d/0xb0 [ 1318.826843][T19813] ___sys_sendmsg+0x1c6/0x360 [ 1318.826877][T19813] ? __lock_acquire+0x6b5/0x2cf0 [ 1318.826912][T19813] ? __pfx____sys_sendmsg+0x10/0x10 [ 1318.827006][T19813] ? __fget_files+0x2a/0x420 [ 1318.827036][T19813] ? __fget_files+0x3a0/0x420 [ 1318.827087][T19813] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1318.827127][T19813] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1318.827173][T19813] ? __pfx_ksys_write+0x10/0x10 [ 1318.827217][T19813] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1318.827242][T19813] do_syscall_64+0x15f/0xf80 [ 1318.827276][T19813] ? trace_irq_disable+0x3b/0x140 [ 1318.827300][T19813] ? clear_bhb_loop+0x40/0x90 [ 1318.827329][T19813] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1318.827359][T19813] RIP: 0033:0x7f925979c819 [ 1318.827380][T19813] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1318.827414][T19813] RSP: 002b:00007f925a594028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1318.827440][T19813] RAX: ffffffffffffffda RBX: 00007f9259a15fa0 RCX: 00007f925979c819 [ 1318.827457][T19813] RDX: 0000000020004080 RSI: 00002000000003c0 RDI: 0000000000000003 [ 1318.827473][T19813] RBP: 00007f925a594090 R08: 0000000000000000 R09: 0000000000000000 [ 1318.827488][T19813] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1318.827502][T19813] R13: 00007f9259a16038 R14: 00007f9259a15fa0 R15: 00007ffd7c001868 [ 1318.827540][T19813] [ 1319.109582][T19811] netlink: 20 bytes leftover after parsing attributes in process `syz.1.17359'. [ 1319.180836][T19824] delete_channel: no stack [ 1319.200953][T19825] netlink: 8 bytes leftover after parsing attributes in process `syz.2.17363'. [ 1319.252736][T19825] netlink: 20 bytes leftover after parsing attributes in process `syz.2.17363'. [ 1319.387077][T19828] netlink: 8 bytes leftover after parsing attributes in process `syz.1.17365'. [ 1319.627566][T19832] syzkaller1: entered promiscuous mode [ 1319.658354][T19832] syzkaller1: entered allmulticast mode [ 1319.853829][T19850] FAULT_INJECTION: forcing a failure. [ 1319.853829][T19850] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1319.916174][T19850] CPU: 1 UID: 0 PID: 19850 Comm: syz.4.17373 Not tainted syzkaller #0 PREEMPT(full) [ 1319.916205][T19850] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1319.916220][T19850] Call Trace: [ 1319.916229][T19850] [ 1319.916238][T19850] dump_stack_lvl+0xe8/0x150 [ 1319.916278][T19850] should_fail_ex+0x412/0x560 [ 1319.916326][T19850] _copy_from_user+0x2d/0xb0 [ 1319.916350][T19850] get_user_ifreq+0x6b/0x180 [ 1319.916379][T19850] sock_ioctl+0x704/0x7f0 [ 1319.916406][T19850] ? __pfx_sock_ioctl+0x10/0x10 [ 1319.916436][T19850] ? __fget_files+0x3a0/0x420 [ 1319.916468][T19850] ? __fget_files+0x2a/0x420 [ 1319.916500][T19850] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1319.916524][T19850] ? __pfx_sock_ioctl+0x10/0x10 [ 1319.916549][T19850] __se_sys_ioctl+0xfc/0x170 [ 1319.916571][T19850] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1319.916596][T19850] do_syscall_64+0x15f/0xf80 [ 1319.916623][T19850] ? trace_irq_disable+0x3b/0x140 [ 1319.916648][T19850] ? clear_bhb_loop+0x40/0x90 [ 1319.916677][T19850] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1319.916699][T19850] RIP: 0033:0x7efe9db9c819 [ 1319.916721][T19850] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1319.916740][T19850] RSP: 002b:00007efe9e994028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1319.916766][T19850] RAX: ffffffffffffffda RBX: 00007efe9de15fa0 RCX: 00007efe9db9c819 [ 1319.916783][T19850] RDX: 0000200000000040 RSI: 00000000000089f0 RDI: 0000000000000003 [ 1319.916799][T19850] RBP: 00007efe9e994090 R08: 0000000000000000 R09: 0000000000000000 [ 1319.916814][T19850] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1319.916827][T19850] R13: 00007efe9de16038 R14: 00007efe9de15fa0 R15: 00007ffe9f08c3d8 [ 1319.916865][T19850] [ 1320.423577][T19880] gretap5: entered promiscuous mode [ 1320.436410][T19880] gretap5: entered allmulticast mode [ 1320.541300][T19887] netlink: 'syz.4.17386': attribute type 1 has an invalid length. [ 1320.590974][T19887] bond37: entered promiscuous mode [ 1320.597360][T19887] 8021q: adding VLAN 0 to HW filter on device bond37 [ 1320.630429][T19886] bond0: entered promiscuous mode [ 1320.644457][T19886] gretap4: entered promiscuous mode [ 1320.688834][T19886] bond0: left promiscuous mode [ 1320.704505][T19886] gretap4: left promiscuous mode [ 1320.782945][T19893] 8021q: adding VLAN 0 to HW filter on device bond37 [ 1320.808559][T19893] bond37: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 1320.831346][T19893] bond37: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 1320.868142][T19893] bond37: (slave ip6gre1): making interface the new active one [ 1320.882862][T19893] ip6gre1: entered promiscuous mode [ 1320.908133][T19893] bond37: (slave ip6gre1): Enslaving as an active interface with an up link [ 1321.339503][T19932] mac80211_hwsim hwsim3 syzkaller0: left allmulticast mode [ 1321.481624][T19932] veth27: entered allmulticast mode [ 1321.502272][T19936] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1321.536592][T19941] netlink: 'syz.4.17404': attribute type 1 has an invalid length. [ 1321.588604][T19936] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1321.729978][T19936] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1321.842404][T19936] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1322.064489][T14802] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1322.091583][T14802] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1322.143589][T19541] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1322.168295][T19964] openvswitch: netlink: Duplicate or invalid key (type 0). [ 1322.193966][T19964] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1322.265431][ T64] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1322.505328][T19983] FAULT_INJECTION: forcing a failure. [ 1322.505328][T19983] name failslab, interval 1, probability 0, space 0, times 0 [ 1322.531137][T19983] CPU: 0 UID: 0 PID: 19983 Comm: syz.2.17417 Not tainted syzkaller #0 PREEMPT(full) [ 1322.531168][T19983] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1322.531183][T19983] Call Trace: [ 1322.531193][T19983] [ 1322.531203][T19983] dump_stack_lvl+0xe8/0x150 [ 1322.531243][T19983] should_fail_ex+0x412/0x560 [ 1322.531282][T19983] should_failslab+0xa8/0x100 [ 1322.531309][T19983] __kmalloc_node_track_caller_noprof+0xeb/0x7b0 [ 1322.531343][T19983] ? __kasan_kmalloc+0x93/0xb0 [ 1322.531364][T19983] ? __request_module+0x2ec/0x630 [ 1322.531399][T19983] ? __kmalloc_cache_noprof+0x31c/0x660 [ 1322.531436][T19983] kstrdup+0x42/0x100 [ 1322.531462][T19983] __request_module+0x2ec/0x630 [ 1322.531501][T19983] ? __pfx___request_module+0x10/0x10 [ 1322.531550][T19983] ? security_capable+0x7e/0x2c0 [ 1322.531584][T19983] ? dev_load+0x21/0x1f0 [ 1322.531611][T19983] dev_load+0x190/0x1f0 [ 1322.531640][T19983] dev_ioctl+0x837/0x1150 [ 1322.531674][T19983] sock_ioctl+0x75f/0x7f0 [ 1322.531702][T19983] ? __pfx_sock_ioctl+0x10/0x10 [ 1322.531729][T19983] ? __fget_files+0x3a0/0x420 [ 1322.531756][T19983] ? __fget_files+0x2a/0x420 [ 1322.531789][T19983] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1322.531813][T19983] ? __pfx_sock_ioctl+0x10/0x10 [ 1322.531837][T19983] __se_sys_ioctl+0xfc/0x170 [ 1322.531858][T19983] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1322.531883][T19983] do_syscall_64+0x15f/0xf80 [ 1322.531911][T19983] ? trace_irq_disable+0x3b/0x140 [ 1322.531935][T19983] ? clear_bhb_loop+0x40/0x90 [ 1322.531962][T19983] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1322.531985][T19983] RIP: 0033:0x7efcac59c819 [ 1322.532006][T19983] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1322.532032][T19983] RSP: 002b:00007efcad385028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1322.532056][T19983] RAX: ffffffffffffffda RBX: 00007efcac815fa0 RCX: 00007efcac59c819 [ 1322.532074][T19983] RDX: 0000200000000040 RSI: 00000000000089f0 RDI: 0000000000000003 [ 1322.532088][T19983] RBP: 00007efcad385090 R08: 0000000000000000 R09: 0000000000000000 [ 1322.532104][T19983] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1322.532117][T19983] R13: 00007efcac816038 R14: 00007efcac815fa0 R15: 00007ffc82811fc8 [ 1322.532154][T19983] [ 1322.975740][T19993] __nla_validate_parse: 39 callbacks suppressed [ 1322.975760][T19993] netlink: 164 bytes leftover after parsing attributes in process `syz.2.17424'. [ 1323.088038][T19997] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 1323.417813][T20017] xt_hashlimit: size too large, truncated to 1048576 [ 1323.429734][T20019] FAULT_INJECTION: forcing a failure. [ 1323.429734][T20019] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1323.457141][T20019] CPU: 1 UID: 0 PID: 20019 Comm: syz.1.17432 Not tainted syzkaller #0 PREEMPT(full) [ 1323.457169][T20019] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1323.457182][T20019] Call Trace: [ 1323.457191][T20019] [ 1323.457202][T20019] dump_stack_lvl+0xe8/0x150 [ 1323.457243][T20019] should_fail_ex+0x412/0x560 [ 1323.457279][T20019] _copy_from_user+0x2d/0xb0 [ 1323.457303][T20019] ___sys_recvmsg+0x175/0x590 [ 1323.457330][T20019] ? __pfx____sys_recvmsg+0x10/0x10 [ 1323.457389][T20019] ? __fget_files+0x2a/0x420 [ 1323.457443][T20019] do_recvmmsg+0x334/0x800 [ 1323.457474][T20019] ? __pfx_do_recvmmsg+0x10/0x10 [ 1323.457510][T20019] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1323.457560][T20019] __x64_sys_recvmmsg+0x198/0x250 [ 1323.457588][T20019] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1323.457618][T20019] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1323.457641][T20019] do_syscall_64+0x15f/0xf80 [ 1323.457668][T20019] ? trace_irq_disable+0x3b/0x140 [ 1323.457693][T20019] ? clear_bhb_loop+0x40/0x90 [ 1323.457721][T20019] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1323.457742][T20019] RIP: 0033:0x7fe6e1b9c819 [ 1323.457763][T20019] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1323.457780][T20019] RSP: 002b:00007fe6e2a12028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1323.457803][T20019] RAX: ffffffffffffffda RBX: 00007fe6e1e15fa0 RCX: 00007fe6e1b9c819 [ 1323.457818][T20019] RDX: 0000000000000014 RSI: 0000200000000000 RDI: 0000000000000003 [ 1323.457830][T20019] RBP: 00007fe6e2a12090 R08: 0000000000000000 R09: 0000000000000000 [ 1323.457843][T20019] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1323.457854][T20019] R13: 00007fe6e1e16038 R14: 00007fe6e1e15fa0 R15: 00007ffffeef9318 [ 1323.457890][T20019] [ 1323.882183][T20029] netlink: 20 bytes leftover after parsing attributes in process `syz.1.17435'. [ 1324.120214][T20038] netlink: 52 bytes leftover after parsing attributes in process `syz.3.17439'. [ 1324.131323][T20037] netlink: 'syz.4.17438': attribute type 1 has an invalid length. [ 1324.167110][T20040] netlink: 'syz.0.17440': attribute type 1 has an invalid length. [ 1324.272199][T20050] netlink: 4 bytes leftover after parsing attributes in process `syz.0.17440'. [ 1324.309854][T20040] bond41: entered promiscuous mode [ 1324.330569][T20040] 8021q: adding VLAN 0 to HW filter on device bond41 [ 1324.462143][T20059] netlink: 'syz.2.17446': attribute type 1 has an invalid length. [ 1324.516552][T20059] netlink: 'syz.2.17446': attribute type 1 has an invalid length. [ 1324.564949][T20062] netlink: 20 bytes leftover after parsing attributes in process `syz.0.17447'. [ 1324.598606][T20059] netlink: 'syz.2.17446': attribute type 1 has an invalid length. [ 1324.665689][T20059] netlink: 'syz.2.17446': attribute type 2 has an invalid length. [ 1324.710591][T20059] netlink: 76 bytes leftover after parsing attributes in process `syz.2.17446'. [ 1324.752051][T20060] netlink: 20 bytes leftover after parsing attributes in process `syz.1.17445'. [ 1324.817359][T20072] nbd4: detected capacity change from 0 to 63 [ 1324.842841][ T5823] block nbd4: Receive control failed (result -32) [ 1324.856515][T18412] block nbd4: Dead connection, failed to find a fallback [ 1324.863833][T18412] block nbd4: shutting down sockets [ 1324.869203][T18412] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1324.880379][T18412] Buffer I/O error on dev nbd4, logical block 0, async page read [ 1324.888627][T18412] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1324.898152][T18412] Buffer I/O error on dev nbd4, logical block 1, async page read [ 1324.907685][T18412] I/O error, dev nbd4, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1324.917257][T18412] Buffer I/O error on dev nbd4, logical block 2, async page read [ 1324.925657][T18412] I/O error, dev nbd4, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1324.935402][T18412] Buffer I/O error on dev nbd4, logical block 3, async page read [ 1324.943549][T18412] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1324.952908][T18412] Buffer I/O error on dev nbd4, logical block 0, async page read [ 1324.970622][T18412] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1324.979605][T20064] netlink: 248 bytes leftover after parsing attributes in process `syz.1.17445'. [ 1324.990556][T18412] Buffer I/O error on dev nbd4, logical block 1, async page read [ 1325.010196][T18412] I/O error, dev nbd4, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1325.027580][T18412] Buffer I/O error on dev nbd4, logical block 2, async page read [ 1325.045184][T20064] netlink: 12 bytes leftover after parsing attributes in process `syz.1.17445'. [ 1325.052270][T18412] I/O error, dev nbd4, sector 6 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1325.091357][T18412] Buffer I/O error on dev nbd4, logical block 3, async page read [ 1325.108962][T18412] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1325.132905][T20086] netlink: 4 bytes leftover after parsing attributes in process `syz.2.17452'. [ 1325.148252][T18412] Buffer I/O error on dev nbd4, logical block 0, async page read [ 1325.176193][T18412] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 1325.185605][T18412] Buffer I/O error on dev nbd4, logical block 1, async page read [ 1325.197063][T18412] ldm_validate_partition_table(): Disk read failed. [ 1325.226427][T18412] Dev nbd4: unable to read RDB block 0 [ 1325.239815][T18412] nbd4: unable to read partition table [ 1325.282132][T18412] ldm_validate_partition_table(): Disk read failed. [ 1325.296997][T18412] Dev nbd4: unable to read RDB block 0 [ 1325.313545][T18412] nbd4: unable to read partition table [ 1325.436327][T20098] FAULT_INJECTION: forcing a failure. [ 1325.436327][T20098] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1325.493845][T20098] CPU: 1 UID: 0 PID: 20098 Comm: syz.4.17457 Not tainted syzkaller #0 PREEMPT(full) [ 1325.493877][T20098] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1325.493892][T20098] Call Trace: [ 1325.493901][T20098] [ 1325.493912][T20098] dump_stack_lvl+0xe8/0x150 [ 1325.493951][T20098] should_fail_ex+0x412/0x560 [ 1325.493989][T20098] _copy_to_iter+0x1e4/0x17d0 [ 1325.494027][T20098] ? do_raw_spin_lock+0x12b/0x2f0 [ 1325.494063][T20098] ? __pfx__copy_to_iter+0x10/0x10 [ 1325.494097][T20098] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1325.494123][T20098] ? lockdep_hardirqs_on+0x7a/0x110 [ 1325.494150][T20098] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1325.494176][T20098] ? __skb_try_recv_datagram+0x3d4/0x4d0 [ 1325.494208][T20098] __skb_datagram_iter+0xf8/0x980 [ 1325.494233][T20098] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 1325.494267][T20098] skb_copy_datagram_iter+0xb5/0x240 [ 1325.494296][T20098] netlink_recvmsg+0x2c3/0xa50 [ 1325.494340][T20098] ? __pfx_netlink_recvmsg+0x10/0x10 [ 1325.494378][T20098] ? __lock_acquire+0x6b5/0x2cf0 [ 1325.494407][T20098] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1325.494439][T20098] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 1325.494472][T20098] ? security_socket_recvmsg+0x7e/0x2c0 [ 1325.494507][T20098] ? __pfx_netlink_recvmsg+0x10/0x10 [ 1325.494540][T20098] sock_recvmsg+0x172/0x1b0 [ 1325.494570][T20098] ____sys_recvmsg+0x1e6/0x4a0 [ 1325.494615][T20098] ? __pfx_____sys_recvmsg+0x10/0x10 [ 1325.494678][T20098] ? import_iovec+0x73/0xa0 [ 1325.494704][T20098] ___sys_recvmsg+0x215/0x590 [ 1325.494733][T20098] ? __pfx____sys_recvmsg+0x10/0x10 [ 1325.494761][T20098] ? __fget_files+0x2a/0x420 [ 1325.494810][T20098] ? __fget_files+0x3a0/0x420 [ 1325.494851][T20098] do_recvmmsg+0x334/0x800 [ 1325.494883][T20098] ? __pfx_do_recvmmsg+0x10/0x10 [ 1325.494920][T20098] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1325.494970][T20098] __x64_sys_recvmmsg+0x198/0x250 [ 1325.494997][T20098] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1325.495030][T20098] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1325.495055][T20098] do_syscall_64+0x15f/0xf80 [ 1325.495082][T20098] ? trace_irq_disable+0x3b/0x140 [ 1325.495106][T20098] ? clear_bhb_loop+0x40/0x90 [ 1325.495134][T20098] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1325.495157][T20098] RIP: 0033:0x7efe9db9c819 [ 1325.495177][T20098] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1325.495197][T20098] RSP: 002b:00007efe9e994028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1325.495223][T20098] RAX: ffffffffffffffda RBX: 00007efe9de15fa0 RCX: 00007efe9db9c819 [ 1325.495240][T20098] RDX: 0000000000000001 RSI: 0000200000002b80 RDI: 0000000000000003 [ 1325.495258][T20098] RBP: 00007efe9e994090 R08: 0000000000000000 R09: 0000000000000000 [ 1325.495273][T20098] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1325.495287][T20098] R13: 00007efe9de16038 R14: 00007efe9de15fa0 R15: 00007ffe9f08c3d8 [ 1325.495324][T20098] [ 1326.055205][T20115] syzkaller0: entered promiscuous mode [ 1326.068796][T20115] syzkaller0: entered allmulticast mode [ 1326.096020][T20120] IPVS: set_ctl: invalid protocol: 192 0.32.0.0:7168 [ 1326.538552][T20142] syzkaller1: entered allmulticast mode [ 1326.796752][T20153] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1326.953243][T20159] netlink: 'syz.0.17473': attribute type 7 has an invalid length. [ 1327.293249][T20179] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1327.455810][T20189] netlink: 'syz.1.17483': attribute type 4 has an invalid length. [ 1327.475486][T20189] netlink: 'syz.1.17483': attribute type 1 has an invalid length. [ 1327.669920][T20204] netlink: 'syz.0.17489': attribute type 1 has an invalid length. [ 1327.736324][T20205] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1328.003164][T20228] syz.4.17498: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1328.018446][T20228] CPU: 1 UID: 0 PID: 20228 Comm: syz.4.17498 Not tainted syzkaller #0 PREEMPT(full) [ 1328.018473][T20228] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1328.018496][T20228] Call Trace: [ 1328.018506][T20228] [ 1328.018515][T20228] dump_stack_lvl+0xe8/0x150 [ 1328.018550][T20228] warn_alloc+0x249/0x340 [ 1328.018581][T20228] ? stack_trace_save+0xa9/0x100 [ 1328.018605][T20228] ? __pfx_warn_alloc+0x10/0x10 [ 1328.018640][T20228] ? kasan_save_track+0x4f/0x80 [ 1328.018666][T20228] ? kasan_save_track+0x3e/0x80 [ 1328.018692][T20228] ? __kasan_kmalloc+0x93/0xb0 [ 1328.018709][T20228] ? __kmalloc_cache_noprof+0x31c/0x660 [ 1328.018740][T20228] ? xskq_create+0x56/0x170 [ 1328.018762][T20228] ? xsk_setsockopt+0x54c/0x990 [ 1328.018781][T20228] ? do_sock_setsockopt+0x17c/0x1b0 [ 1328.018811][T20228] ? __x64_sys_setsockopt+0x13d/0x1b0 [ 1328.018841][T20228] ? do_syscall_64+0x15f/0xf80 [ 1328.018873][T20228] __vmalloc_node_range_noprof+0x132/0x1730 [ 1328.018945][T20228] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1328.018987][T20228] ? __kasan_kmalloc+0x93/0xb0 [ 1328.019014][T20228] vmalloc_user_noprof+0xad/0xe0 [ 1328.019047][T20228] ? xskq_create+0xbf/0x170 [ 1328.019072][T20228] xskq_create+0xbf/0x170 [ 1328.019099][T20228] xsk_init_queue+0x8a/0xe0 [ 1328.019125][T20228] xsk_setsockopt+0x54c/0x990 [ 1328.019158][T20228] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1328.019181][T20228] ? __pfx_aa_sk_perm+0x10/0x10 [ 1328.019213][T20228] ? aa_sock_opt_perm+0xff/0x1a0 [ 1328.019247][T20228] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 1328.019280][T20228] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1328.019304][T20228] do_sock_setsockopt+0x17c/0x1b0 [ 1328.019343][T20228] __x64_sys_setsockopt+0x13d/0x1b0 [ 1328.019379][T20228] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1328.019404][T20228] do_syscall_64+0x15f/0xf80 [ 1328.019430][T20228] ? trace_irq_disable+0x3b/0x140 [ 1328.019455][T20228] ? clear_bhb_loop+0x40/0x90 [ 1328.019490][T20228] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1328.019513][T20228] RIP: 0033:0x7efe9db9c819 [ 1328.019535][T20228] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1328.019555][T20228] RSP: 002b:00007efe9e973028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1328.019580][T20228] RAX: ffffffffffffffda RBX: 00007efe9de16090 RCX: 00007efe9db9c819 [ 1328.019597][T20228] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 1328.019611][T20228] RBP: 00007efe9dc32c91 R08: 0000000000000004 R09: 0000000000000000 [ 1328.019626][T20228] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1328.019646][T20228] R13: 00007efe9de16128 R14: 00007efe9de16090 R15: 00007ffe9f08c3d8 [ 1328.019683][T20228] [ 1328.019729][T20228] Mem-Info: [ 1328.279051][T20227] __nla_validate_parse: 13 callbacks suppressed [ 1328.279110][T20227] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.17498'. [ 1328.292586][T20228] active_anon:5836 inactive_anon:18 isolated_anon:0 [ 1328.292586][T20228] active_file:2641 inactive_file:41297 isolated_file:0 [ 1328.292586][T20228] unevictable:768 dirty:338 writeback:0 [ 1328.292586][T20228] slab_reclaimable:14074 slab_unreclaimable:127321 [ 1328.292586][T20228] mapped:29763 shmem:1374 pagetables:3754 [ 1328.292586][T20228] sec_pagetables:0 bounce:0 [ 1328.292586][T20228] kernel_misc_reclaimable:0 [ 1328.292586][T20228] free:1274172 free_pcp:23406 free_cma:0 [ 1328.378284][T20228] Node 0 active_anon:23444kB inactive_anon:72kB active_file:10564kB inactive_file:164984kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:119052kB dirty:1348kB writeback:0kB shmem:3960kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:19000kB pagetables:14972kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1328.412679][T20225] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1328.432387][T20228] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:64kB pagetables:144kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 1328.464171][T20228] Node 0 DMA free:15256kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:104kB local_pcp:4kB free_cma:0kB [ 1328.495530][T20233] netlink: 4 bytes leftover after parsing attributes in process `syz.3.17500'. [ 1328.510723][T20228] lowmem_reserve[]: 0 2491 2492 2492 2492 [ 1328.516956][T20228] Node 0 DMA32 free:1191720kB boost:0kB min:34184kB low:42728kB high:51272kB reserved_highatomic:0KB free_highatomic:0KB active_anon:23544kB inactive_anon:72kB active_file:10564kB inactive_file:164984kB unevictable:1536kB writepending:1348kB zspages:0kB present:3129332kB managed:2551528kB mlocked:0kB bounce:0kB free_pcp:30536kB local_pcp:13244kB free_cma:0kB [ 1328.552401][T20228] lowmem_reserve[]: 0 0 0 0 0 [ 1328.577846][T20228] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:612kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:4kB free_cma:0kB [ 1328.624242][T20233] team1: entered promiscuous mode [ 1328.636713][T20233] team1: entered allmulticast mode [ 1328.644364][T20228] lowmem_reserve[]: 0 0 0 0 0 [ 1328.660042][T20228] Node 1 Normal free:3889584kB boost:0kB min:55708kB low:69632kB high:83556kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:4kB zspages:0kB present:4194300kB managed:4111100kB mlocked:0kB bounce:0kB free_pcp:62536kB local_pcp:30020kB free_cma:0kB [ 1328.735743][T20228] lowmem_reserve[]: 0 0 0 0 0 [ 1328.752310][T20228] Node 0 DMA: 2*4kB (U) 2*8kB (U) 2*16kB (U) 1*32kB (U) 1*64kB (U) 2*128kB (U) 2*256kB (U) 2*512kB (U) 3*1024kB (U) 3*2048kB (UM) 1*4096kB (U) = 15256kB [ 1328.772322][T20244] netlink: 20 bytes leftover after parsing attributes in process `syz.1.17502'. [ 1328.809003][T20228] Node 0 DMA32: 9984*4kB (UM) 8241*8kB (UM) 5150*16kB (UM) 109*32kB (ME) 79*64kB (UM) 748*128kB (UME) 734*256kB (UME) 491*512kB (UME) 305*1024kB (UME) 72*2048kB (UM) 0*4096kB = 1191624kB [ 1328.866579][T20228] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1328.895240][T20228] Node 1 Normal: 10*4kB (U) 19*8kB (UM) 25*16kB (UM) 17*32kB (UM) 19*64kB (UM) 17*128kB (UM) 14*256kB (UM) 15*512kB (UM) 13*1024kB (UM) 13*2048kB (U) 936*4096kB (UM) = 3889584kB [ 1328.930309][T20228] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1328.941344][T20228] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1328.951485][T20228] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1328.976110][T20228] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1328.990336][T20228] 45308 total pagecache pages [ 1328.999020][T20228] 0 pages in swap cache [ 1329.003471][T20228] Free swap = 124996kB [ 1329.008398][T20228] Total swap = 124996kB [ 1329.012837][T20228] 2097051 pages RAM [ 1329.017322][T20228] 0 pages HighMem/MovableOnly [ 1329.022182][T20228] 427401 pages reserved [ 1329.026756][T20228] 0 pages cma reserved [ 1329.319172][T20267] netlink: 32 bytes leftover after parsing attributes in process `syz.4.17510'. [ 1329.695743][T20292] netlink: 20 bytes leftover after parsing attributes in process `syz.2.17518'. [ 1329.838841][T20299] netlink: 8 bytes leftover after parsing attributes in process `syz.2.17518'. [ 1329.918858][T20306] netlink: 8 bytes leftover after parsing attributes in process `syz.4.17522'. [ 1330.037654][T20306] bond38: entered promiscuous mode [ 1330.056585][T20306] 8021q: adding VLAN 0 to HW filter on device bond38 [ 1330.112945][T20308] validate_nla: 1 callbacks suppressed [ 1330.112966][T20308] netlink: 'syz.0.17523': attribute type 1 has an invalid length. [ 1330.152685][T20319] netlink: 'syz.3.17527': attribute type 21 has an invalid length. [ 1330.164191][T20308] netlink: 224 bytes leftover after parsing attributes in process `syz.0.17523'. [ 1330.179099][T20319] netlink: 132 bytes leftover after parsing attributes in process `syz.3.17527'. [ 1330.240777][T20319] "syz.3.17527" (20319) uses obsolete ecb(arc4) skcipher [ 1330.511398][T20330] netlink: 12 bytes leftover after parsing attributes in process `syz.4.17531'. [ 1331.673556][T20378] openvswitch: : Dropping previously announced user features [ 1332.001860][T20402] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 1332.642097][T20426] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1332.762791][T20435] netlink: 'syz.0.17559': attribute type 1 has an invalid length. [ 1332.864156][T20435] bond42: entered promiscuous mode [ 1332.869914][T20435] 8021q: adding VLAN 0 to HW filter on device bond42 [ 1333.411694][T20466] __nla_validate_parse: 11 callbacks suppressed [ 1333.411718][T20466] netlink: 8 bytes leftover after parsing attributes in process `syz.2.17569'. [ 1333.856865][T20487] netlink: 45748 bytes leftover after parsing attributes in process `syz.1.17578'. [ 1334.250518][T20507] IPv6: NLM_F_REPLACE set, but no existing node found! [ 1334.378717][T20512] netlink: 'syz.1.17586': attribute type 1 has an invalid length. [ 1334.447630][T20510] vlan2: entered promiscuous mode [ 1334.456793][T20510] geneve1: entered promiscuous mode [ 1334.468618][T20510] vlan2: entered allmulticast mode [ 1334.475844][T20510] geneve1: entered allmulticast mode [ 1334.699071][T20518] netlink: 8 bytes leftover after parsing attributes in process `syz.3.17588'. [ 1334.715403][T20526] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.17591'. [ 1334.773115][T20518] 8021q: adding VLAN 0 to HW filter on device bond43 [ 1334.915074][T20543] netlink: 48 bytes leftover after parsing attributes in process `syz.1.17596'. [ 1335.076861][T20554] netlink: 8 bytes leftover after parsing attributes in process `syz.0.17599'. [ 1335.111193][T20554] macvlan0: left promiscuous mode [ 1335.124137][T20554] netlink: 'syz.0.17599': attribute type 1 has an invalid length. [ 1335.143323][T20554] netlink: 'syz.0.17599': attribute type 2 has an invalid length. [ 1335.174179][T20558] netlink: 'syz.1.17600': attribute type 1 has an invalid length. [ 1335.274960][T20558] 8021q: adding VLAN 0 to HW filter on device bond27 [ 1335.299994][T20566] netlink: 'syz.0.17604': attribute type 2 has an invalid length. [ 1335.320180][T20563] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.17603'. [ 1335.385503][T20562] bond27: (slave geneve4): making interface the new active one [ 1335.408595][T20562] bond27: (slave geneve4): Enslaving as an active interface with an up link [ 1335.428241][T14825] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 20004 - 0 [ 1335.446664][T20564] netlink: 14764 bytes leftover after parsing attributes in process `syz.4.17602'. [ 1335.458296][T14825] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 20004 - 0 [ 1335.484748][T14825] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 20004 - 0 [ 1335.522701][T14825] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 20004 - 0 [ 1335.606648][T20577] netlink: 728 bytes leftover after parsing attributes in process `syz.3.17607'. [ 1335.617423][T20578] netlink: 76 bytes leftover after parsing attributes in process `syz.3.17607'. [ 1335.802486][T20591] xt_hashlimit: size too large, truncated to 1048576 [ 1335.827510][T20549] lec:lec_start_xmit: lec0:No lecd attached [ 1336.609301][T20627] netlink: 'syz.4.17624': attribute type 2 has an invalid length. [ 1337.207886][T20668] netlink: 'syz.1.17639': attribute type 2 has an invalid length. [ 1338.121637][T20723] syzkaller1: entered promiscuous mode [ 1338.151585][T20723] syzkaller1: entered allmulticast mode [ 1338.402257][T20734] netlink: 'syz.1.17650': attribute type 21 has an invalid length. [ 1338.628466][T20734] netlink: 'syz.1.17650': attribute type 1 has an invalid length. [ 1338.644297][T20710] netlink: 'syz.1.17650': attribute type 10 has an invalid length. [ 1339.028805][T20767] FAULT_INJECTION: forcing a failure. [ 1339.028805][T20767] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1339.076246][T20767] CPU: 1 UID: 0 PID: 20767 Comm: syz.3.17666 Not tainted syzkaller #0 PREEMPT(full) [ 1339.076277][T20767] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1339.076292][T20767] Call Trace: [ 1339.076300][T20767] [ 1339.076310][T20767] dump_stack_lvl+0xe8/0x150 [ 1339.076350][T20767] should_fail_ex+0x412/0x560 [ 1339.076389][T20767] _copy_from_user+0x2d/0xb0 [ 1339.076414][T20767] nr_rt_ioctl+0x966/0xf90 [ 1339.076458][T20767] ? kasan_quarantine_put+0xbb/0x1f0 [ 1339.076492][T20767] ? __pfx_nr_rt_ioctl+0x10/0x10 [ 1339.076536][T20767] ? apparmor_capable+0x126/0x170 [ 1339.076569][T20767] ? capable+0x88/0xe0 [ 1339.076600][T20767] ? nr_ioctl+0x1b1/0x3b0 [ 1339.076634][T20767] sock_do_ioctl+0x101/0x320 [ 1339.076672][T20767] ? __pfx_sock_do_ioctl+0x10/0x10 [ 1339.076693][T20767] ? __mutex_unlock_slowpath+0x1be/0x6f0 [ 1339.076742][T20767] sock_ioctl+0x5c6/0x7f0 [ 1339.076769][T20767] ? __pfx_sock_ioctl+0x10/0x10 [ 1339.076795][T20767] ? __fget_files+0x2a/0x420 [ 1339.076823][T20767] ? __fget_files+0x3a0/0x420 [ 1339.076854][T20767] ? __fget_files+0x2a/0x420 [ 1339.076885][T20767] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1339.076909][T20767] ? __pfx_sock_ioctl+0x10/0x10 [ 1339.076933][T20767] __se_sys_ioctl+0xfc/0x170 [ 1339.076955][T20767] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1339.076980][T20767] do_syscall_64+0x15f/0xf80 [ 1339.077007][T20767] ? trace_irq_disable+0x3b/0x140 [ 1339.077031][T20767] ? clear_bhb_loop+0x40/0x90 [ 1339.077060][T20767] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1339.077081][T20767] RIP: 0033:0x7f4b35b9c819 [ 1339.077103][T20767] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1339.077123][T20767] RSP: 002b:00007f4b36b41028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1339.077149][T20767] RAX: ffffffffffffffda RBX: 00007f4b35e15fa0 RCX: 00007f4b35b9c819 [ 1339.077166][T20767] RDX: 0000200000000000 RSI: 000000000000890b RDI: 0000000000000004 [ 1339.077182][T20767] RBP: 00007f4b36b41090 R08: 0000000000000000 R09: 0000000000000000 [ 1339.077197][T20767] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1339.077211][T20767] R13: 00007f4b35e16038 R14: 00007f4b35e15fa0 R15: 00007ffce2490478 [ 1339.077249][T20767] [ 1339.322541][T20771] __nla_validate_parse: 141 callbacks suppressed [ 1339.322564][T20771] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.17669'. [ 1339.409552][T20777] netlink: 8 bytes leftover after parsing attributes in process `syz.3.17672'. [ 1339.444434][T20777] bond44: entered promiscuous mode [ 1339.450085][T20777] 8021q: adding VLAN 0 to HW filter on device bond44 [ 1339.516009][T20780] nft_compat: unsupported protocol 0 [ 1339.535070][T20782] netlink: 64 bytes leftover after parsing attributes in process `syz.3.17675'. [ 1339.642778][T20787] netlink: 'syz.2.17676': attribute type 2 has an invalid length. [ 1339.687692][T20787] netlink: 100 bytes leftover after parsing attributes in process `syz.2.17676'. [ 1340.053018][T20813] netlink: 8 bytes leftover after parsing attributes in process `syz.4.17685'. [ 1340.161540][T20813] bond39: entered promiscuous mode [ 1340.178504][T20813] 8021q: adding VLAN 0 to HW filter on device bond39 [ 1340.301130][T20827] netlink: 12 bytes leftover after parsing attributes in process `syz.3.17689'. [ 1340.400540][T20830] netlink: 28 bytes leftover after parsing attributes in process `syz.4.17691'. [ 1340.428932][T20831] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode [ 1340.724559][T20853] set match dimension is over the limit! [ 1340.847049][T20866] netlink: 'syz.4.17702': attribute type 1 has an invalid length. [ 1340.870325][T20866] netlink: 28 bytes leftover after parsing attributes in process `syz.4.17702'. [ 1340.881286][T20867] netlink: 12 bytes leftover after parsing attributes in process `syz.0.17703'. [ 1341.033727][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5200 ms [ 1341.041969][ C0] lec:lec_tx_timeout: lec0 [ 1341.047182][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 1341.064934][T20875] netlink: 4 bytes leftover after parsing attributes in process `syz.4.17705'. [ 1341.882690][T20929] netlink: 'syz.0.17725': attribute type 1 has an invalid length. [ 1342.222023][T20948] xt_l2tp: invalid flags combination: 0 [ 1342.379708][T20948] bond46: (slave bridge37): Enslaving as an active interface with an up link [ 1342.418371][T20966] ipvlan1: entered promiscuous mode [ 1343.240544][T21012] xt_ecn: cannot match TCP bits for non-tcp packets [ 1343.613304][T21033] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:20002 [ 1343.688636][T21035] "syz.2.17760" (21035) uses obsolete ecb(arc4) skcipher [ 1344.133150][T21069] openvswitch: netlink: IP tunnel dst address not specified [ 1344.285964][T21075] netlink: 'syz.1.17773': attribute type 4 has an invalid length. [ 1344.451901][T21085] __nla_validate_parse: 13 callbacks suppressed [ 1344.451924][T21085] netlink: 12 bytes leftover after parsing attributes in process `syz.3.17783'. [ 1344.794876][T21102] syzkaller0: entered promiscuous mode [ 1344.801884][T21102] syzkaller0: entered allmulticast mode [ 1344.888054][T21111] syzkaller1: entered allmulticast mode [ 1345.021583][T21120] netlink: 12 bytes leftover after parsing attributes in process `syz.3.17794'. [ 1345.691428][T21151] tun0: tun_chr_ioctl cmd 1074025675 [ 1345.703317][T21151] tun0: persist disabled [ 1345.803268][T21159] netlink: 'syz.2.17806': attribute type 8 has an invalid length. [ 1345.850390][T21162] netlink: 4 bytes leftover after parsing attributes in process `syz.0.17809'. [ 1345.862449][T21163] netlink: 4 bytes leftover after parsing attributes in process `syz.0.17809'. [ 1345.896053][T21166] netlink: 12 bytes leftover after parsing attributes in process `syz.4.17810'. [ 1345.940992][T21162] bond43: Invalid ad_actor_system MAC address. [ 1345.947442][T21162] bond43: option ad_actor_system: invalid value (1) [ 1345.958070][T21162] bond43 (unregistering): Released all slaves [ 1345.997179][T21163] bond43: Invalid ad_actor_system MAC address. [ 1346.003407][T21163] bond43: option ad_actor_system: invalid value (1) [ 1346.012208][T21163] bond43 (unregistering): Released all slaves [ 1346.054055][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 1346.062750][ C0] lec:lec_tx_timeout: lec0 [ 1346.068753][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 1346.162725][T21173] netlink: 'syz.3.17811': attribute type 10 has an invalid length. [ 1346.196751][T21173] bridge_slave_1: left allmulticast mode [ 1346.252354][T21176] netlink: 24 bytes leftover after parsing attributes in process `syz.0.17813'. [ 1346.272113][T21176] netlink: 80 bytes leftover after parsing attributes in process `syz.0.17813'. [ 1346.292484][T21176] netlink: 24 bytes leftover after parsing attributes in process `syz.0.17813'. [ 1346.648074][T21199] FAULT_INJECTION: forcing a failure. [ 1346.648074][T21199] name failslab, interval 1, probability 0, space 0, times 0 [ 1346.670318][T21199] CPU: 0 UID: 0 PID: 21199 Comm: syz.3.17820 Not tainted syzkaller #0 PREEMPT(full) [ 1346.670356][T21199] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1346.670370][T21199] Call Trace: [ 1346.670380][T21199] [ 1346.670390][T21199] dump_stack_lvl+0xe8/0x150 [ 1346.670430][T21199] should_fail_ex+0x412/0x560 [ 1346.670469][T21199] should_failslab+0xa8/0x100 [ 1346.670492][T21199] ? skb_clone+0x212/0x3a0 [ 1346.670514][T21199] kmem_cache_alloc_noprof+0x87/0x650 [ 1346.670557][T21199] skb_clone+0x212/0x3a0 [ 1346.670583][T21199] __netlink_deliver_tap+0x404/0x850 [ 1346.670631][T21199] ? netlink_deliver_tap+0x2e/0x1b0 [ 1346.670665][T21199] netlink_deliver_tap+0x19c/0x1b0 [ 1346.670698][T21199] netlink_sendskb+0x68/0x140 [ 1346.670730][T21199] netlink_rcv_skb+0x2b6/0x4b0 [ 1346.670763][T21199] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 1346.670796][T21199] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1346.670841][T21199] ? bpf_lsm_capable+0x9/0x20 [ 1346.670866][T21199] ? security_capable+0x7e/0x2c0 [ 1346.670904][T21199] nfnetlink_rcv+0x2c0/0x27b0 [ 1346.670962][T21199] ? __local_bh_enable_ip+0xd0/0x130 [ 1346.670993][T21199] ? lockdep_hardirqs_on+0x7a/0x110 [ 1346.671019][T21199] ? __dev_queue_xmit+0x2b6/0x3950 [ 1346.671041][T21199] ? __local_bh_enable_ip+0xd0/0x130 [ 1346.671074][T21199] ? __dev_queue_xmit+0x2b6/0x3950 [ 1346.671096][T21199] ? __dev_queue_xmit+0x1fe5/0x3950 [ 1346.671116][T21199] ? __x64_sys_sendmsg+0x1bd/0x2a0 [ 1346.671159][T21199] ? __dev_queue_xmit+0x2b6/0x3950 [ 1346.671188][T21199] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 1346.671226][T21199] ? __pfx___dev_queue_xmit+0x10/0x10 [ 1346.671258][T21199] ? ref_tracker_free+0x693/0x840 [ 1346.671295][T21199] ? __pfx_ref_tracker_free+0x10/0x10 [ 1346.671350][T21199] ? skb_clone+0x246/0x3a0 [ 1346.671376][T21199] ? __netlink_deliver_tap+0x807/0x850 [ 1346.671407][T21199] ? netlink_deliver_tap+0x2e/0x1b0 [ 1346.671447][T21199] ? netlink_deliver_tap+0x2e/0x1b0 [ 1346.671479][T21199] ? netlink_deliver_tap+0x2e/0x1b0 [ 1346.671518][T21199] netlink_unicast+0x75c/0x8e0 [ 1346.671565][T21199] netlink_sendmsg+0x813/0xb40 [ 1346.671612][T21199] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1346.671649][T21199] ? aa_sock_msg_perm+0xf1/0x1b0 [ 1346.671682][T21199] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 1346.671720][T21199] ____sys_sendmsg+0x972/0x9f0 [ 1346.671765][T21199] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1346.671811][T21199] ? import_iovec+0x73/0xa0 [ 1346.671839][T21199] ___sys_sendmsg+0x2a5/0x360 [ 1346.671872][T21199] ? __lock_acquire+0x6b5/0x2cf0 [ 1346.671908][T21199] ? __pfx____sys_sendmsg+0x10/0x10 [ 1346.671985][T21199] ? __fget_files+0x2a/0x420 [ 1346.672014][T21199] ? __fget_files+0x3a0/0x420 [ 1346.672071][T21199] __x64_sys_sendmsg+0x1bd/0x2a0 [ 1346.672110][T21199] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1346.672157][T21199] ? __pfx_ksys_write+0x10/0x10 [ 1346.672201][T21199] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1346.672228][T21199] do_syscall_64+0x15f/0xf80 [ 1346.672254][T21199] ? trace_irq_disable+0x3b/0x140 [ 1346.672279][T21199] ? clear_bhb_loop+0x40/0x90 [ 1346.672306][T21199] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1346.672328][T21199] RIP: 0033:0x7f4b35b9c819 [ 1346.672350][T21199] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1346.672370][T21199] RSP: 002b:00007f4b36b41028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1346.672395][T21199] RAX: ffffffffffffffda RBX: 00007f4b35e15fa0 RCX: 00007f4b35b9c819 [ 1346.672412][T21199] RDX: 0000000020000000 RSI: 0000200000000380 RDI: 0000000000000004 [ 1346.672428][T21199] RBP: 00007f4b36b41090 R08: 0000000000000000 R09: 0000000000000000 [ 1346.672442][T21199] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1346.672456][T21199] R13: 00007f4b35e16038 R14: 00007f4b35e15fa0 R15: 00007ffce2490478 [ 1346.672493][T21199] [ 1347.066038][T21206] netlink: 'syz.0.17823': attribute type 1 has an invalid length. [ 1347.109126][T21203] netlink: 12 bytes leftover after parsing attributes in process `syz.2.17822'. [ 1347.160702][T21208] bond29: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1347.238105][T21208] bond29: (slave lo): Enslaving as an active interface with an up link [ 1347.320018][T21208] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 1347.339983][T21218] netlink: 212324 bytes leftover after parsing attributes in process `syz.4.17829'. [ 1347.603891][T21233] block nbd2: Unsupported socket: should be TCP or UNIX. [ 1347.867546][T21253] openvswitch: netlink: Flow actions attr not present in new flow. [ 1347.894274][T21254] openvswitch: netlink: Flow actions attr not present in new flow. [ 1348.041253][T21265] bond48: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-xor(2) [ 1348.058651][T21265] bond48 (unregistering): Released all slaves [ 1348.279473][T21278] bond7: (slave veth0_to_bond): Releasing active interface [ 1348.310719][T21278] bond7: (slave veth0_to_bond): the permanent HWaddr of slave - aa:aa:aa:aa:aa:1d - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 1348.372814][T21285] sctp: [Deprecated]: syz.3.17849 (pid 21285) Use of int in maxseg socket option. [ 1348.372814][T21285] Use struct sctp_assoc_value instead [ 1348.399851][T21278] sctp: [Deprecated]: syz.4.17847 (pid 21278) Use of int in max_burst socket option deprecated. [ 1348.399851][T21278] Use struct sctp_assoc_value instead [ 1348.541805][T21296] netlink: 'syz.0.17853': attribute type 1 has an invalid length. [ 1348.623233][T21296] 8021q: adding VLAN 0 to HW filter on device bond43 [ 1348.879386][T21321] netlink: 'syz.4.17860': attribute type 2 has an invalid length. [ 1349.104235][T21335] syzkaller1: entered promiscuous mode [ 1349.117336][T21335] syzkaller1: entered allmulticast mode [ 1349.155993][T21335] IPVS: Unknown mcast interface: vcan0 [ 1349.216631][T21335] syzkaller1: left promiscuous mode [ 1349.229880][T21335] syzkaller1: left allmulticast mode [ 1349.536274][T21356] IPVS: set_ctl: invalid protocol: 115 172.30.1.1:20001 [ 1349.582511][T21360] netlink: 'syz.4.17878': attribute type 11 has an invalid length. [ 1349.748192][T21376] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 1349.901405][T21384] __nla_validate_parse: 13 callbacks suppressed [ 1349.901430][T21384] netlink: 8 bytes leftover after parsing attributes in process `syz.2.17882'. [ 1349.934704][T21384] netlink: 8 bytes leftover after parsing attributes in process `syz.2.17882'. [ 1350.037314][T21385] 8021q: adding VLAN 0 to HW filter on device bond48 [ 1350.059985][T21388] netlink: 618 bytes leftover after parsing attributes in process `syz.1.17881'. [ 1350.113145][T21396] vlan5: entered promiscuous mode [ 1350.131750][T21400] netlink: 'syz.0.17885': attribute type 1 has an invalid length. [ 1350.142792][T21396] bond48: entered promiscuous mode [ 1350.162183][T21396] vlan5: entered allmulticast mode [ 1350.169176][T21400] netlink: 232 bytes leftover after parsing attributes in process `syz.0.17885'. [ 1350.183608][T21396] bond48: entered allmulticast mode [ 1350.197831][T21400] netlink: 104 bytes leftover after parsing attributes in process `syz.0.17885'. [ 1350.230958][T21397] netlink: 104 bytes leftover after parsing attributes in process `syz.0.17885'. [ 1350.505461][T21420] IPv6: sit2: Disabled Multicast RS [ 1350.519402][T21424] netlink: 60 bytes leftover after parsing attributes in process `syz.1.17897'. [ 1350.532106][T21420] sit2: entered allmulticast mode [ 1350.609403][T21420] IPv6: sit2: Disabled Multicast RS [ 1350.632819][T21420] sit2: entered allmulticast mode [ 1350.709745][T21431] sch_tbf: burst 0 is lower than device macvtap0 mtu (1514) ! [ 1350.821536][T21439] 8021q: adding VLAN 0 to HW filter on device bond28 [ 1350.846266][T21420] IPv6: sit2: Disabled Multicast RS [ 1350.856502][T21420] sit2: entered allmulticast mode [ 1350.899671][T21439] vlan5: entered promiscuous mode [ 1350.914454][T21439] bond28: entered promiscuous mode [ 1350.936660][T21439] vlan5: entered allmulticast mode [ 1350.946690][T21439] bond28: entered allmulticast mode [ 1350.990754][T21420] IPv6: sit2: Disabled Multicast RS [ 1351.016435][T21420] sit2: entered allmulticast mode [ 1351.083722][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 1351.091884][ C0] lec:lec_tx_timeout: lec0 [ 1351.096638][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 1351.118813][T21420] IPv6: sit2: Disabled Multicast RS [ 1351.151510][T21420] sit2: entered allmulticast mode [ 1351.175278][T21458] netlink: 8 bytes leftover after parsing attributes in process `syz.1.17907'. [ 1351.207480][T21458] netlink: 8 bytes leftover after parsing attributes in process `syz.1.17907'. [ 1351.223918][T21460] netlink: 8 bytes leftover after parsing attributes in process `syz.4.17908'. [ 1351.240851][T21460] veth1: Caught tx_queue_len zero misconfig [ 1351.283564][T21420] IPv6: sit2: Disabled Multicast RS [ 1351.309889][T21420] sit2: entered allmulticast mode [ 1351.464523][T21471] tap0: tun_chr_ioctl cmd 1074025673 [ 1351.486066][T21475] tap0: tun_chr_ioctl cmd 1074025678 [ 1351.498486][T21475] tap0: group set to 0 [ 1351.502896][T21474] tap0: tun_chr_ioctl cmd 1074025678 [ 1351.511294][T21474] tap0: group set to 0 [ 1351.525603][T21476] IPv6: sit4: Disabled Multicast RS [ 1351.533143][T21476] sit4: entered allmulticast mode [ 1351.870920][T21484] 8021q: adding VLAN 0 to HW filter on device bond39 [ 1351.895237][T21494] vlan0: entered promiscuous mode [ 1351.900483][T21494] bond39: entered promiscuous mode [ 1351.906378][T21494] vlan0: entered allmulticast mode [ 1351.911860][T21494] bond39: entered allmulticast mode [ 1351.997637][T21505] netlink: 'syz.1.17925': attribute type 11 has an invalid length. [ 1352.020462][T21505] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 1352.217206][T21520] netlink: 'syz.1.17929': attribute type 2 has an invalid length. [ 1352.259610][T21517] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 1352.272607][T21520] vþ: entered promiscuous mode [ 1352.515915][T21540] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 1352.544056][T21540] netlink: 'syz.3.17935': attribute type 1 has an invalid length. [ 1352.641890][T21549] netlink: 'syz.4.17939': attribute type 11 has an invalid length. [ 1352.657638][T21546] 8021q: adding VLAN 0 to HW filter on device bond29 [ 1352.758883][T21546] vlan6: entered promiscuous mode [ 1352.769044][T21555] netlink: 'syz.0.17940': attribute type 10 has an invalid length. [ 1352.779939][T21546] bond29: entered promiscuous mode [ 1352.787119][T21546] vlan6: entered allmulticast mode [ 1352.792574][T21546] bond29: entered allmulticast mode [ 1352.806448][T21555] bond0: (slave wlan1): Opening slave failed [ 1352.818200][T21549] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 1352.857320][T21552] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1353.122641][T21573] netlink: 'syz.2.17945': attribute type 2 has an invalid length. [ 1353.132524][T21573] netlink: 'syz.2.17945': attribute type 11 has an invalid length. [ 1353.376533][T21589] netlink: 'syz.4.17952': attribute type 1 has an invalid length. [ 1353.406940][T21591] netlink: 'syz.3.17953': attribute type 11 has an invalid length. [ 1353.443111][T21589] 8021q: adding VLAN 0 to HW filter on device bond40 [ 1353.487819][T21589] vlan3: entered promiscuous mode [ 1353.492944][T21589] bond40: entered promiscuous mode [ 1353.498674][T21589] vlan3: entered allmulticast mode [ 1353.504352][T21589] bond40: entered allmulticast mode [ 1353.535762][T21589] gretap3: entered promiscuous mode [ 1353.541228][T21589] gretap3: entered allmulticast mode [ 1353.549211][T21589] bond40: (slave gretap3): Enslaving as an active interface with an up link [ 1353.562481][T21591] bond29: (slave lo): Releasing backup interface [ 1353.596323][T21591] bond29: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 1353.666391][T21591] A link change request failed with some changes committed already. Interface hsr_slave_1 may have been left with an inconsistent configuration, please check. [ 1353.736748][T21603] mac80211_hwsim hwsim3 wlan1: Caught tx_queue_len zero misconfig [ 1354.430270][T21646] tipc: Enabling of bearer rejected, already enabled [ 1354.795323][T21672] [ 1354.797748][T21672] ====================================================== [ 1354.804808][T21672] WARNING: possible circular locking dependency detected [ 1354.811878][T21672] syzkaller #0 Not tainted [ 1354.816339][T21672] ------------------------------------------------------ [ 1354.823396][T21672] syz.4.17977/21672 is trying to acquire lock: [ 1354.829585][T21672] ffffffff8ff4be18 (nr_neigh_list_lock){+...}-{3:3}, at: nr_remove_neigh+0x25/0xe0 [ 1354.838972][T21672] [ 1354.838972][T21672] but task is already holding lock: [ 1354.846371][T21672] ffff888093c6dd70 (&nr_node->node_lock){+...}-{3:3}, at: nr_add_node+0x1039/0x2630 [ 1354.855850][T21672] [ 1354.855850][T21672] which lock already depends on the new lock. [ 1354.855850][T21672] [ 1354.866289][T21672] [ 1354.866289][T21672] the existing dependency chain (in reverse order) is: [ 1354.875518][T21672] [ 1354.875518][T21672] -> #2 (&nr_node->node_lock){+...}-{3:3}: [ 1354.883569][T21672] _raw_spin_lock_bh+0x36/0x50 [ 1354.888914][T21672] nr_rt_device_down+0x153/0x860 [ 1354.894444][T21672] nr_device_event+0x137/0x150 [ 1354.899768][T21672] notifier_call_chain+0x1ad/0x3d0 [ 1354.905436][T21672] netif_close_many+0x2ae/0x420 [ 1354.911038][T21672] netif_close+0x160/0x220 [ 1354.916006][T21672] dev_close+0x10a/0x220 [ 1354.920813][T21672] bpq_device_event+0x377/0x6a0 [ 1354.926233][T21672] notifier_call_chain+0x1ad/0x3d0 [ 1354.932078][T21672] __dev_notify_flags+0x16d/0x310 [ 1354.937681][T21672] netif_change_flags+0xe8/0x1a0 [ 1354.943213][T21672] dev_change_flags+0x130/0x260 [ 1354.948702][T21672] dev_ioctl+0x7b4/0x1150 [ 1354.953625][T21672] sock_do_ioctl+0x23e/0x320 [ 1354.958772][T21672] sock_ioctl+0x5c6/0x7f0 [ 1354.963758][T21672] __se_sys_ioctl+0xfc/0x170 [ 1354.968916][T21672] do_syscall_64+0x15f/0xf80 [ 1354.974247][T21672] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1354.980695][T21672] [ 1354.980695][T21672] -> #1 (nr_node_list_lock){+...}-{3:3}: [ 1354.988574][T21672] _raw_spin_lock_bh+0x36/0x50 [ 1354.993918][T21672] nr_rt_device_down+0xbe/0x860 [ 1354.999323][T21672] nr_device_event+0x137/0x150 [ 1355.004654][T21672] notifier_call_chain+0x1ad/0x3d0 [ 1355.010317][T21672] netif_close_many+0x2ae/0x420 [ 1355.015735][T21672] netif_close+0x160/0x220 [ 1355.020714][T21672] dev_close+0x10a/0x220 [ 1355.025509][T21672] bpq_device_event+0x377/0x6a0 [ 1355.031535][T21672] notifier_call_chain+0x1ad/0x3d0 [ 1355.037196][T21672] __dev_notify_flags+0x16d/0x310 [ 1355.042795][T21672] netif_change_flags+0xe8/0x1a0 [ 1355.048295][T21672] dev_change_flags+0x130/0x260 [ 1355.053710][T21672] dev_ioctl+0x7b4/0x1150 [ 1355.058602][T21672] sock_do_ioctl+0x23e/0x320 [ 1355.063865][T21672] sock_ioctl+0x5c6/0x7f0 [ 1355.068760][T21672] __se_sys_ioctl+0xfc/0x170 [ 1355.073888][T21672] do_syscall_64+0x15f/0xf80 [ 1355.079025][T21672] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1355.085462][T21672] [ 1355.085462][T21672] -> #0 (nr_neigh_list_lock){+...}-{3:3}: [ 1355.093394][T21672] __lock_acquire+0x15a5/0x2cf0 [ 1355.098802][T21672] lock_acquire+0x106/0x350 [ 1355.103886][T21672] _raw_spin_lock_bh+0x36/0x50 [ 1355.109306][T21672] nr_remove_neigh+0x25/0xe0 [ 1355.114545][T21672] nr_add_node+0x1e41/0x2630 [ 1355.119692][T21672] nr_rt_ioctl+0xe59/0xf90 [ 1355.124755][T21672] sock_do_ioctl+0x101/0x320 [ 1355.129985][T21672] sock_ioctl+0x5c6/0x7f0 [ 1355.134863][T21672] __se_sys_ioctl+0xfc/0x170 [ 1355.139990][T21672] do_syscall_64+0x15f/0xf80 [ 1355.145132][T21672] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1355.151572][T21672] [ 1355.151572][T21672] other info that might help us debug this: [ 1355.151572][T21672] [ 1355.161831][T21672] Chain exists of: [ 1355.161831][T21672] nr_neigh_list_lock --> nr_node_list_lock --> &nr_node->node_lock [ 1355.161831][T21672] [ 1355.175699][T21672] Possible unsafe locking scenario: [ 1355.175699][T21672] [ 1355.183191][T21672] CPU0 CPU1 [ 1355.188592][T21672] ---- ---- [ 1355.193990][T21672] lock(&nr_node->node_lock); [ 1355.198797][T21672] lock(nr_node_list_lock); [ 1355.206206][T21672] lock(&nr_node->node_lock); [ 1355.213632][T21672] lock(nr_neigh_list_lock); [ 1355.218355][T21672] [ 1355.218355][T21672] *** DEADLOCK *** [ 1355.218355][T21672] [ 1355.226529][T21672] 1 lock held by syz.4.17977/21672: [ 1355.231749][T21672] #0: ffff888093c6dd70 (&nr_node->node_lock){+...}-{3:3}, at: nr_add_node+0x1039/0x2630 [ 1355.241646][T21672] [ 1355.241646][T21672] stack backtrace: [ 1355.247569][T21672] CPU: 1 UID: 0 PID: 21672 Comm: syz.4.17977 Not tainted syzkaller #0 PREEMPT(full) [ 1355.247593][T21672] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1355.247606][T21672] Call Trace: [ 1355.247618][T21672] [ 1355.247627][T21672] dump_stack_lvl+0xe8/0x150 [ 1355.247660][T21672] print_circular_bug+0x2e1/0x300 [ 1355.247693][T21672] check_noncircular+0x12e/0x150 [ 1355.247726][T21672] __lock_acquire+0x15a5/0x2cf0 [ 1355.247763][T21672] ? nr_remove_neigh+0x25/0xe0 [ 1355.247790][T21672] lock_acquire+0x106/0x350 [ 1355.247813][T21672] ? nr_remove_neigh+0x25/0xe0 [ 1355.247842][T21672] ? do_raw_spin_lock+0x12b/0x2f0 [ 1355.247862][T21672] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1355.247882][T21672] ? nr_remove_neigh+0x25/0xe0 [ 1355.247909][T21672] _raw_spin_lock_bh+0x36/0x50 [ 1355.247928][T21672] ? nr_remove_neigh+0x25/0xe0 [ 1355.247954][T21672] nr_remove_neigh+0x25/0xe0 [ 1355.247981][T21672] nr_add_node+0x1e41/0x2630 [ 1355.248009][T21672] ? dev_get_by_name+0x21/0x200 [ 1355.248028][T21672] ? dev_get_by_name+0x21/0x200 [ 1355.248045][T21672] ? nr_call_to_digi+0x136/0x1b0 [ 1355.248072][T21672] nr_rt_ioctl+0xe59/0xf90 [ 1355.248102][T21672] ? kasan_quarantine_put+0xbb/0x1f0 [ 1355.248128][T21672] ? __pfx_nr_rt_ioctl+0x10/0x10 [ 1355.248159][T21672] ? apparmor_capable+0x126/0x170 [ 1355.248181][T21672] ? capable+0x88/0xe0 [ 1355.248205][T21672] ? nr_ioctl+0x1b1/0x3b0 [ 1355.248227][T21672] sock_do_ioctl+0x101/0x320 [ 1355.248249][T21672] ? __pfx_sock_do_ioctl+0x10/0x10 [ 1355.248267][T21672] ? do_futex+0x395/0x420 [ 1355.248300][T21672] sock_ioctl+0x5c6/0x7f0 [ 1355.248320][T21672] ? __pfx_sock_ioctl+0x10/0x10 [ 1355.248339][T21672] ? __fget_files+0x2a/0x420 [ 1355.248360][T21672] ? __fget_files+0x3a0/0x420 [ 1355.248383][T21672] ? __fget_files+0x2a/0x420 [ 1355.248407][T21672] ? bpf_lsm_file_ioctl+0x9/0x20 [ 1355.248425][T21672] ? __pfx_sock_ioctl+0x10/0x10 [ 1355.248443][T21672] __se_sys_ioctl+0xfc/0x170 [ 1355.248460][T21672] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1355.248478][T21672] do_syscall_64+0x15f/0xf80 [ 1355.248500][T21672] ? trace_irq_disable+0x3b/0x140 [ 1355.248519][T21672] ? clear_bhb_loop+0x40/0x90 [ 1355.248547][T21672] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1355.248566][T21672] RIP: 0033:0x7efe9db9c819 [ 1355.248584][T21672] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1355.248601][T21672] RSP: 002b:00007efe9e994028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1355.248623][T21672] RAX: ffffffffffffffda RBX: 00007efe9de15fa0 RCX: 00007efe9db9c819 [ 1355.248637][T21672] RDX: 0000200000000000 RSI: 000000000000890b RDI: 0000000000000004 [ 1355.248650][T21672] RBP: 00007efe9dc32c91 R08: 0000000000000000 R09: 0000000000000000 [ 1355.248662][T21672] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1355.248674][T21672] R13: 00007efe9de16038 R14: 00007efe9de15fa0 R15: 00007ffe9f08c3d8 [ 1355.248698][T21672] [ 1355.605385][T21674] bond30: option fail_over_mac: invalid value (16) [ 1355.613367][T21674] bond30 (unregistering): Released all slaves [ 1356.103759][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 1356.111923][ C0] lec:lec_tx_timeout: lec0 [ 1356.117107][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 1361.124257][ C0] lec0: NETDEV WATCHDOG: CPU: 0: transmit queue 0 timed out 5010 ms [ 1361.132633][ C0] lec:lec_tx_timeout: lec0 [ 1361.137247][ C0] lec:lec_start_xmit: lec0:No lecd attached [ 1361.757521][ T1300] clip:clip_start_xmit: skb_dst(skb) == NULL