last executing test programs: 3.456200997s ago: executing program 2 (id=5691): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'ipvlan0\x00'}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10090100}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES16=r2, @ANYBLOB="010028bd7000fbdbdf250100000005002a00000000000500350006000000"], 0x24}, 0x1, 0x0, 0x0, 0x48100}, 0x40080) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000740)=ANY=[@ANYBLOB="6c00000010000104000000000f00000000000000", @ANYRESDEC=r3, @ANYBLOB="000004007573443b4c0012800b00010069703667726500003c000280080004006d00000008000d00b0ed000006000200060000000500080001000000060010004e210000060011"], 0x6c}}, 0x40000) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r6, {0xfff9, 0x8}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0xa, [0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], 0xfc, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0xd000, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000280)=@o_path={0x0}, 0x18) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r9, &(0x7f0000002080)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) setsockopt$bt_BT_DEFER_SETUP(r9, 0x112, 0xf, &(0x7f0000000080)=0x4, 0x67) setsockopt$bt_BT_RCVMTU(r9, 0x112, 0xd, &(0x7f0000000600)=0x5, 0x1d) r10 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r8, 0x110, 0x4, &(0x7f00000005c0)=0x2, 0x4) sendmsg$nl_generic(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="300000003f0007012bbd700000000000017c00000400fc800c00018005b41918", @ANYRES32=r10, @ANYBLOB="0c0002"], 0x30}, 0x1, 0x0, 0x0, 0x2000c800}, 0x4040) sendmsg$nl_generic(r3, &(0x7f00000000c0)={0x0, 0xfffffffffffffe92, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB="140000001500050000000000000000000a000000"], 0x14}}, 0x4000812) socket$packet(0x11, 0x2, 0x300) socket$inet_tcp(0x2, 0x1, 0x0) r11 = socket$kcm(0x10, 0x2, 0x0) r12 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000580), r10) sendmsg$TIPC_NL_MEDIA_GET(r10, &(0x7f0000002780)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000002740)={&(0x7f00000027c0)=ANY=[@ANYBLOB="f8110000", @ANYRES16=r12, @ANYBLOB="00032dbd7000fbdbdf260b000000"], 0x11f8}, 0x1, 0x0, 0x0, 0xc0084}, 0x800) sendmsg$kcm(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="d8000000180081054e81f782db4cb904021d080406037c09e8fe55a10a0015400400142603600e122f00164006000500a8000600200006400461c1d67f6f94007134cf79fb8000a007a29045f39e209d8cdcfc61e06bbace8017adb2530585cbec4c2ee5b4d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e006dcdf63951f451ce3bb9ad809d5e1cace81ed0bff32ebb42a9ecbee5de6ccd40dd6826eef3d93452a92954b43370e9703920723f9a941c6a05011482fcd33ee6919bc2ed7e32fc5fb06c153c50a248cd6eb6a6300000000000000000000000000000000a8c90c8c270e48ac86e2b511299d205868077f2e906ed51d9901b2f8dc0d12393227f6a2365bae6dc21d403c1bedceca61b5be5ab8413ffb2ab7df59ffb00babdc640f88755d578f655d31944c0d95aa0a755d", 0x148}], 0x1, 0x0, 0x0, 0x4a0f0000}, 0x24080000) 3.020081023s ago: executing program 2 (id=5698): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) shutdown(r1, 0x0) listen(r1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="b4050000200080006110600000000000c60000000000000095000000000000009f33ef60916e6e893f1eeb0be20000d072f5b89c3043c47c896ce0bc8731fa595b6b4d45ef26dcca5582054d54d53cd2b6db714e4b94bdae214fa68a0557eb3c5ca683a4b6fc89398f2b9000f224891060017c4700de60beac671e8e8fdecb03588aa6007e71f871ab5c2ff88afc6002084e5b52710aeee835cf0d78e45f70983826fb8579c1fb47d2c5553d2ccb5fc5b51fe6b174ebd9907dcff414ed55b0d18a93ee341ab59016f81860324b800300000000000092d9c5fe34ccb80a61ffcb3363073fd8962823ee45f5d7394e9510f4a801efdf008499d7aca1afac6c702cfabe8a9c55c8dafcdb110036e14c1035cafdfef6a358cbfadb3579a285580a3c080d4e0a48d7bdc38a0437c8c1b3aa408a"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000080)) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x4, 0x4, 0x12}, 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000500)=ANY=[@ANYRES32=r3, @ANYRES32=r2, @ANYBLOB='&'], 0x10) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000a80)={r3, &(0x7f0000000940), &(0x7f0000000040)=@tcp=r4}, 0x20) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r3, 0xc0385868, &(0x7f0000000640)={r3, &(0x7f0000000540)='%^\x00', 0x4000, &(0x7f0000000580)={@_ha_fsid={[0x90b, 0xf0d]}, {0x2, 0x1, 0x282, 0x81}}, 0xa054, &(0x7f00000005c0), &(0x7f0000000600)=0xd}) ioctl$PPPIOCGMRU(r5, 0x80047453, &(0x7f0000000700)) recvfrom(r1, &(0x7f0000000ac0)=""/4096, 0x1000, 0x1, 0x0, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r6, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000780)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r7, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r7], 0x40}}, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)=@newlink={0x5c, 0x10, 0x439, 0xfffffffa, 0x0, {0x0, 0x0, 0x0, r7, 0x21840, 0x2000}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @gre={{0x8}, {0x30, 0x2, 0x0, 0x1, [@IFLA_GRE_IGNORE_DF={0x5}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ERSPAN_DIR={0x5}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e21}, @IFLA_GRE_TTL={0x5, 0x8, 0x5}, @IFLA_GRE_REMOTE={0x8, 0x7, @initdev={0xac, 0x1e, 0x0, 0x0}}]}}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40080d5}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000280)={'batadv0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000340)={'batadv0\x00', 0x0}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000400)={r3, 0x58, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a00)={r2, 0xe0, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, &(0x7f0000000480)=[0x0], &(0x7f00000004c0)=[0x0], 0x0, 0x38, &(0x7f0000000800)=[{}, {}], 0x10, 0x10, &(0x7f0000000840), &(0x7f0000000880), 0x8, 0xe, 0x8, 0x8, &(0x7f00000008c0)}}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001ac0)=@newtaction={0x1214, 0x30, 0x871a15abc695f52c, 0x0, 0x0, {}, [{0x1200, 0x1, [@m_tunnel_key={0x6c, 0x1, 0x0, 0x0, {{0xf}, {0x3c, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0xb, @loopback={0x400000000000000}}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc}}}, @m_mirred={0x10f0, 0x1, 0x0, 0x0, {{0xb}, {0xc4, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x3, 0x3, 0x8, 0x8, 0x5}, 0x2, r7}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x5, 0x7, 0x5, 0x0, 0xb6a}, 0x1, r9}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xe, 0x1, 0x6, 0x4, 0x4}, 0x4, r10}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xbf2, 0xe9c, 0x3, 0x5, 0x9}, 0x2, r11}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0xe1d0, 0x10000000, 0x1ff, 0x1}, 0x3, r12}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x34, 0x6e4e0296, 0x2, 0x7fff, 0xff}, 0x2}}]}, {0x1004, 0x6, "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"}, {0xc, 0x7, {0x0, 0xe94c6c42cf068fb0}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_ctinfo={0xa0, 0x6, 0x0, 0x0, {{0xb}, {0x4}, {0x71, 0x6, "f66cfc594fd65e8bdf07620d115c4dc01adfd0045bf25483f4e7ad802826f0d5f8f3320d32873d78f736099fb5297b6fe463fd067db7f29ed33fe100ca5127ba0d80e5320257a1176f2ab0663954616c6bfdb141c5c82e48bd1ce6aba0312db66a2ac709355afadba46c375309"}, {0xc}, {0xc, 0x8, {0x3, 0x1}}}}]}]}, 0x1214}}, 0x0) 2.873247183s ago: executing program 1 (id=5700): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000001400791048000000000069001c000000000095000040"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0xa3}, 0x21) 2.741806555s ago: executing program 2 (id=5702): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = accept(r0, 0x0, &(0x7f00000000c0)) r2 = socket$kcm(0x29, 0x5, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$netlink(0x10, 0x3, 0x0) r3 = socket$kcm(0x23, 0x5, 0x0) listen(r3, 0x800) pselect6(0x40, &(0x7f0000000000)={0x7f, 0x8, 0x3, 0x3, 0x7, 0x0, 0x800, 0x9}, 0x0, 0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x5452, &(0x7f0000000000)) sendmsg$kcm(r2, &(0x7f0000001e80)={0x0, 0x0, 0x0}, 0x80) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r4) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_FRAME(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)={0x28, r5, 0x1, 0x70bd25, 0x25dfdbf7, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x4000}]}, 0x28}, 0x1, 0x0, 0x0, 0x24000850}, 0x20044004) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000500)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x30, r5, 0x1, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x0, 0x37}}}}, [@NL80211_ATTR_CRIT_PROT_ID={0x6}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x4800) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) setsockopt$inet6_int(r1, 0x29, 0x42, &(0x7f0000000580)=0x4, 0x4) sendmsg$nl_route_sched(r8, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0xa0, 0x30, 0x9, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_bpf={0x88, 0x1, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{0x60}, {0x3, 0x0, 0x0, 0xe4ff}, {0x3}, {}, {0x74}, {}, {0x6}]}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x9}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x4894}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x6, 0x4, &(0x7f0000000200)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x55}]}, &(0x7f00000004c0)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x44, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_SEQ_ADJ_REPLY={0xc, 0x10, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x2}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x8014}, 0x40c0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @sk_msg}, 0x48) 2.696485504s ago: executing program 1 (id=5704): openat$tcp_mem(0xffffffffffffff9c, 0x0, 0x1, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x51, &(0x7f00000008c0)=[{&(0x7f0000000000)="1400000010003507d25a807c8c6394f903", 0x11}], 0x1}, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, 0x0, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2b, &(0x7f0000000040)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x4e24, @multicast2}}}, 0x108) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb79100a6c52d922ba2a05dd4242"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000540)='syzkaller\x00', 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0xffffffac, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) connect$bt_sco(0xffffffffffffffff, 0x0, 0x0) 2.293230123s ago: executing program 1 (id=5706): r0 = socket(0x11, 0x2, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x2) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) r6 = socket$kcm(0x10, 0x2, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="08000000040000000400000004"], 0x48) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r11, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x8000) recvmsg$unix(r10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r12 = socket$igmp6(0xa, 0x3, 0x2) r13 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r13, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r12, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}}) write$tun(r9, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0x72) r14 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x14, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000e000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r7, 0x1, 0x32, &(0x7f0000000400)=r14, 0x4) sendmsg$kcm(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000440)="14", 0x1}], 0x1}, 0x4000c894) sendmsg$nl_route(r1, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001dc0)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES16=r4, @ANYBLOB="01000000ff001c0012000e000100627269646765"], 0x3c}}, 0x54) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0x5}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0xfffffffe, 0x8}}]}}]}, 0x48}}, 0x0) r15 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r15, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newtfilter={0x68, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0x34}, {0xfff1, 0x4}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x38, 0x2, [@TCA_CGROUP_ACT={0x34}]}}]}, 0x68}}, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000ec0)=@nat={'nat\x00', 0x19, 0x3, 0xc82, [0x200000000200, 0x0, 0x0, 0x200000000230, 0x200000000d04], 0x0, &(0x7f0000000000), &(0x7f0000000200)=[{}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{0x5, 0x8, 0x5, 'veth1_to_hsr\x00', 'veth0_to_bond\x00', 'bond_slave_0\x00', 'virt_wifi0\x00', @remote, [0x0, 0x0, 0x0, 0xff], @empty, [0x0, 0xff, 0x0, 0x0, 0xff, 0xff], 0xee, 0xee, 0x126, [@mac={{'mac\x00', 0x0, 0x10}, {{@random="4d5fb71ca07b", 0x1}}}, @limit={{'limit\x00', 0x0, 0x20}, {{0x80000001, 0x2, 0xfff, 0x2, 0x0, 0x9}}}], [], @arpreply={'arpreply\x00', 0x10, {{@broadcast, 0xffffffffffffffff}}}}, {0x3, 0x0, 0x8906, 'geneve1\x00', 'vcan0\x00', 'vlan0\x00', 'bridge_slave_1\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, [0xff, 0x0, 0x0, 0xff], @random="a47f94209713", [0xff, 0xff, 0xff, 0x0, 0xff, 0xff], 0x94e, 0x94e, 0x97e, [@among={{'among\x00', 0x0, 0x8b8}, {{@zero, @offset=0x444, 0x1, {[0x3, 0xc, 0x8, 0xf, 0xe, 0x3, 0x36ca, 0x6, 0x200, 0xa5, 0x81, 0x9, 0x8001, 0x81, 0x10001, 0x0, 0xd, 0x200000, 0x7fffffff, 0x800, 0x2, 0x14e0, 0xa1, 0x1f, 0x2, 0x3, 0x4, 0xc554, 0x2, 0x5, 0xfffff81b, 0x0, 0xcc, 0x6, 0x100400, 0x80, 0x2, 0x5, 0x6, 0xff, 0x0, 0x8, 0x8, 0x400, 0x5, 0x200, 0x0, 0x9c99, 0x81, 0x493, 0xe, 0x9, 0x5, 0x4, 0x3, 0x6, 0x7, 0x7fffffff, 0x5, 0x1, 0x5, 0x101, 0xfc, 0xa8a4, 0x1, 0x7f, 0x5, 0x6, 0x9, 0x7, 0x40, 0x1, 0x8, 0x1, 0x400, 0x516f, 0x7, 0x6, 0x1, 0x2, 0x4, 0xf, 0x8, 0xf9, 0xfff, 0x7, 0x7, 0x9, 0x4, 0xae, 0xe, 0x866, 0x400, 0x6, 0x101, 0x7, 0xe, 0x5, 0xfa2f, 0x5, 0x9, 0x0, 0xa507, 0x7fffffff, 0xffff, 0x10, 0x0, 0x0, 0x2, 0x80000000, 0x2, 0x3a6, 0x0, 0x101, 0xde6, 0x6, 0x9, 0x400, 0x4, 0x7b054fb, 0x7fffffff, 0x10000, 0x1, 0x1, 0xff, 0x800, 0xf9d2, 0x9, 0x5, 0x1, 0x40, 0x4, 0x7, 0xffff, 0x9, 0x4296, 0x95, 0xf4e, 0x7fff, 0x5, 0x5, 0x7fff, 0x3, 0x3ff, 0x5, 0x6, 0xff, 0x0, 0x6, 0x8, 0x1ff, 0x2, 0x8, 0x3, 0x7, 0x3, 0xf, 0x8b8a, 0x101, 0x8, 0xe00000, 0x4, 0x0, 0x1, 0xd9, 0xfffffff8, 0x1ff, 0xc, 0xffff, 0x24, 0x1dd4, 0x1, 0x54a9, 0x2, 0x1, 0xb7f, 0x7, 0x9, 0xffffffff, 0x0, 0x2, 0xa, 0x7, 0x8001, 0x9, 0xe, 0x9, 0x10001, 0x1, 0xb53, 0xffff, 0x8, 0x5, 0x2, 0x2, 0x4, 0x28, 0x3, 0xb38c, 0xfffffffc, 0x10001, 0x3ff, 0xa3, 0x842, 0x4, 0xcb, 0x9, 0x7f, 0x4, 0x0, 0x9, 0x56, 0x3, 0x7, 0x10000, 0x9, 0x6, 0xe, 0x2, 0x1, 0x10, 0x6, 0x2, 0x4, 0x3, 0x8, 0x4, 0x8554, 0x8, 0x5, 0xb783, 0x895, 0x9b26, 0x4, 0x1, 0x3, 0x7, 0x9, 0xfffffffb, 0x0, 0x0, 0x9, 0x5, 0x7c2, 0xbcfe, 0x9, 0x4, 0x543252d6, 0x8, 0x40000000, 0x3, 0xffffbdf5, 0x0, 0x0, 0xbba, 0x2, 0x1], 0x4, [{[0x7, 0x80], @empty}, {[0x3], @rand_addr=0x64010102}, {[0xfffff801, 0xffffffd5], @empty}, {[0x4, 0x5], @initdev={0xac, 0x1e, 0x0, 0x0}}]}, {[0x2, 0x3, 0x7, 0x3, 0x1, 0x5, 0x2ecc4f34, 0x8, 0xa2a4, 0x3, 0x5, 0x6, 0x0, 0x4, 0x5, 0x7, 0xffffffff, 0x3, 0x7e2e, 0x38000, 0xfffffffa, 0x0, 0x5, 0x7, 0x2d3, 0x1, 0x5, 0x7, 0x2, 0x4, 0x7, 0x3, 0x5, 0x4, 0x4b95, 0x6, 0x2, 0x7, 0x55, 0x10, 0x8, 0xffff0000, 0x6, 0x7, 0x3bb, 0x0, 0xdab, 0x7, 0x9, 0x0, 0x9, 0x0, 0x5, 0x7, 0x0, 0xf, 0x5, 0x6, 0xccf, 0x4875a479, 0x3, 0xf729, 0x1, 0x4cc, 0x1, 0x6, 0x8, 0x6, 0x6, 0x7fff, 0x7, 0x80, 0x7, 0x7f, 0x3, 0xa, 0xcef9, 0x101, 0x4ec, 0x3, 0x5, 0x1000, 0x9, 0xb, 0xfffffffe, 0x40, 0x1, 0xfffffffb, 0x8, 0x8, 0x0, 0xe, 0x1, 0x21, 0xe, 0xfffffff9, 0x0, 0x1, 0x8, 0x8, 0x5, 0x101, 0x81, 0x81, 0x3, 0xe, 0x2, 0x7, 0x7, 0x2, 0x13f, 0x382, 0x5, 0x7, 0x1, 0x7fff, 0x758, 0xfffff34c, 0x1, 0x5, 0x8, 0x0, 0x0, 0x7, 0x0, 0x9b6, 0x0, 0x8, 0x2, 0x4, 0x7f, 0xfffffffa, 0x5, 0x4, 0x100, 0x1, 0x4, 0x7ff, 0x10, 0x6, 0xfffffffa, 0x3, 0x8, 0x0, 0xc7, 0x2008, 0xf, 0x4, 0x9, 0x9, 0x1, 0x14, 0x98, 0x0, 0xfffff001, 0x3, 0x5, 0x4, 0x1, 0x80000001, 0x1ff, 0xfffffffa, 0x9, 0x5, 0x2, 0x2, 0x8ddd, 0x5, 0x101, 0x3, 0x9, 0xffff367b, 0x2, 0x1, 0x82d, 0xffffffff, 0x423a, 0xc, 0x3, 0x7fffffff, 0x2, 0x8, 0x7, 0x7, 0x7ff, 0x636, 0xc, 0x6, 0x7, 0x8, 0x5, 0x7, 0x4, 0x7, 0x1, 0x800, 0x7, 0xdaa, 0x10000, 0x0, 0x32, 0x15e1, 0x3, 0x7, 0xf86, 0x5, 0x6, 0xfae6, 0xfffffff1, 0x9, 0xfffffffc, 0x0, 0x8000, 0x7d00, 0x5, 0xf8e6, 0x10, 0x4, 0x6, 0x9, 0x0, 0x6, 0x4, 0x8000000, 0x7, 0x3, 0x3, 0x6, 0xf2, 0xd0, 0x7, 0x6c, 0x9, 0x200, 0x2, 0xf7d, 0x1, 0x5, 0x7f, 0x2, 0x80000000, 0x8, 0x4, 0x0, 0x8001, 0xd, 0x5, 0x0, 0x800, 0x4, 0x5, 0xfffffffd, 0x4, 0x9, 0x88d, 0x7ff, 0x7fff], 0x9, [{[0x7ff, 0x2], @empty}, {[0xa, 0x10], @private=0xa010100}, {[0x32, 0x2], @broadcast}, {[0x3, 0xff], @dev={0xac, 0x14, 0x14, 0x33}}, {[0x9, 0x8], @local}, {[0x7ff], @local}, {[0x7315, 0x3], @loopback}, {[0x8000, 0x2], @empty}, {[0x10000, 0x5], @local}]}}}}], [], @common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x1}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffc, 0x1, [{0x9, 0x20, 0x6, 'veth1_macvtap\x00', 'pim6reg0\x00', 'syz_tun\x00', 'gre0\x00', @broadcast, [0xff, 0x0, 0xff, 0xff], @broadcast, [0x0, 0xff, 0x0, 0xff, 0xff, 0xff], 0xae, 0x116, 0x14e, [@quota={{'quota\x00', 0x0, 0x18}, {{0x0, 0x0, 0xf01, {0x3}}}}], [@common=@AUDIT={'AUDIT\x00', 0x8, {{0x2}}}, @arpreply={'arpreply\x00', 0x10, {{@broadcast, 0x1}}}], @snat={'snat\x00', 0x10, {{@empty, 0xfffffffffffffffd}}}}]}]}, 0xcfa) r16 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r16, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) 2.292193071s ago: executing program 2 (id=5707): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e00000000000000000024000280040001001c000380"], 0x50}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r3, 0x1, 0x4, 0x25dfdbfe, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20040801}, 0x0) sendmsg$DEVLINK_CMD_TRAP_SET(r0, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000240)={&(0x7f00000000c0)={0x15c, r3, 0x400, 0x70bd26, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x83, 0x1}}]}, 0x15c}, 0x1, 0x0, 0x0, 0x48815}, 0x20000816) 1.812451125s ago: executing program 1 (id=5712): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000540)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x27, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000004c0)={'syzkaller1\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000200)={r1, r3, 0x25, 0x4, @void}, 0x10) write$tun(r0, &(0x7f0000000280)=ANY=[], 0xfdef) 1.762086155s ago: executing program 4 (id=5713): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4) syz_init_net_socket$x25(0x9, 0x5, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=@mpls_delroute={0xd0, 0x19, 0x20, 0x70bd2d, 0x25dfdbfe, {0x1c, 0x10, 0x20, 0x81, 0xfc, 0x0, 0xfd, 0x0, 0x200}, [@RTA_NEWDST={0x84, 0x13, [{0x7}, {0x9}, {0x8}, {0x6, 0x0, 0x1}, {0xffff9}, {0xb4}, {0x5}, {0x3}, {0x7f, 0x0, 0x1}, {0x1, 0x0, 0x1}, {}, {0x0, 0x0, 0x1}, {0x14f}, {0xffff9, 0x0, 0x1}, {0x1}, {0x1}, {0xe24}, {}, {0x32, 0x0, 0x1}, {0x3, 0x0, 0x1}, {0x3, 0x0, 0x1}, {0x3ff, 0x0, 0x1}, {0x9, 0x0, 0x1}, {0x2, 0x0, 0x1}, {0x9}, {0x4}, {0x10, 0x0, 0x1}, {0x4}, {0x3, 0x0, 0x1}, {0x7, 0x0, 0x1}, {0xa, 0x0, 0x1}, {0x4}]}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0xe}, @RTA_VIA={0x14, 0x12, {0x8, "0086c698b9d7090bf67203304b32"}}, @RTA_VIA={0x14, 0x12, {0x11, "ae087dea0fb31559969979fd0fab"}}]}, 0xd0}, 0x1, 0x0, 0x0, 0x4000080}, 0xc010) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x14, r3, 0x1, 0x70bd2a}, 0x14}}, 0x0) listen(r1, 0xc) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) r5 = accept$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000240)=0x14) connect$packet(r5, &(0x7f0000000280)={0x11, 0x18, 0x0, 0x1, 0x4}, 0x14) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x14, r7, 0x1, 0x70bd2c, 0x25dfdbff}, 0x14}}, 0x800) socket$unix(0x1, 0x1, 0x0) 1.673066764s ago: executing program 0 (id=5714): socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$kcm(0x29, 0x5, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f00000000c0)=ANY=[@ANYBLOB="18020000000000000000000000000800850000009b000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095"], &(0x7f0000000080)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000000)="87db060000020000000000000000", 0x0, 0x4000, 0x0, 0xffffffffffffffa0, 0x0, 0x0, 0x0, 0x4}, 0x50) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000140)={0x0, @in6={{0xa, 0x4e23, 0x2, @remote, 0x7}}}, &(0x7f0000000200)=0x84) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000000240)={r3, 0x9203}, 0x8) socket$netlink(0x10, 0x3, 0x0) (async) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$rxrpc(0x21, 0x2, 0x2) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_MCAST_JOIN_GROUP(r2, 0x29, 0x2a, &(0x7f0000000400)={0x3, {{0xa, 0x4e23, 0x4, @remote, 0x6}}}, 0x88) setsockopt$RXRPC_SECURITY_KEY(r5, 0x110, 0x1, &(0x7f0000009840)='police\x00', 0xc8b0ce3505620fb0) socket$inet_tcp(0x2, 0x1, 0x0) (async) r7 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r7, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x67) (async) bind$inet(r7, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x67) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f00000005c0)='syz_tun\x00', 0x10) (async) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f00000005c0)='syz_tun\x00', 0x10) sendto$inet(r7, 0x0, 0x0, 0x24000840, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) syz_emit_ethernet(0x42, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa3747e76de3790800450000340000000000069078ac1414bbac1414aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="8c0a000090780000480a000000af0000e7540000"], 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="8400000010000305000000040000000000000000", @ANYRES32=0x0, @ANYRES32=r6, @ANYRES16=r0], 0x84}}, 0x20008040) (async) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="8400000010000305000000040000000000000000", @ANYRES32=0x0, @ANYRES32=r6, @ANYRES16=r0], 0x84}}, 0x20008040) 1.642237211s ago: executing program 1 (id=5715): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000900000000000000000080000000", @ANYBLOB='\x00'/18, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00'], 0x48) unshare(0x6a040000) r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x10}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x70}, 0x1, 0x0, 0x0, 0x20004000}, 0x24000840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000480)=ANY=[@ANYRES32=r2, @ANYRES32=r2, @ANYBLOB="2f0000003820000004", @ANYRES32], 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000000000800000000000000000850000004100000085000000d000000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r4, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000005c0)=@newqdisc={0x3c, 0x24, 0xd0f, 0x70bd2c, 0x0, {0x60, 0x0, 0x0, r4, {}, {0xffe0, 0xa}, {0x1, 0xe}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_CE_THRESHOLD={0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x55}, 0xc010) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e22, @loopback}]}, &(0x7f00000002c0)=0x10) 1.537144521s ago: executing program 0 (id=5717): r0 = socket$igmp6(0xa, 0x3, 0x2) getsockopt$MRT6(r0, 0x29, 0x21, 0x0, &(0x7f0000001440)) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="f00000001000130725bd700000000000fe8000000000000000000000000000bb00000000000000000000ffffac1414aa4e2200018000000402000060", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fe80000000000000000034b51ed500bb0000000032000000fe8000000000000000000000000000aa0000000000000000fcffffffff9179b996fe11760ecaac48aeffffff08000000000000000a0000008b7100002a00000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000600000000000000f8ffffffffffffff0c000000000000000200000029bd70000000000002000000ac00000000000000"], 0x35}, 0x1, 0x0, 0x0, 0x20004040}, 0x4000) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'xfrm0\x00'}) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r3, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) ioctl$PPPIOCGL2TPSTATS(r2, 0x80487436, &(0x7f0000000540)="43210098") r4 = socket$inet_icmp(0x2, 0x2, 0x1) ioctl$sock_SIOCADDRT(r4, 0x890b, &(0x7f0000000280)={0x0, @l2tp={0x2, 0x0, @rand_addr=0x64010101, 0x3}, @nl=@unspec, @isdn={0x22, 0x2, 0x7, 0x2, 0x9}, 0xa55c, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000240)='ip6_vti0\x00', 0x7, 0x4, 0x3}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x2}, 0x10) socket$inet6_icmp(0xa, 0x2, 0x3a) sendmsg$NFT_BATCH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000080002400000000010000380140001007465616d3000000000000000000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014"], 0xfc}}, 0x0) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r7, 0x800448d4, &(0x7f0000000400)) sendmsg$NFT_BATCH(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000100000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a34000000140affffffff00000000000002000009080003400000000a0900010073797a30000000000c000640000000000000000214000000020a010100000000000000000000130a14000000110001"], 0x70}}, 0x0) 1.326530101s ago: executing program 0 (id=5718): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=@base={0x9, 0x7, 0x8, 0x40, 0x42, 0x1}, 0x50) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wpan3\x00', 0x0}) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000100)={'wpan0\x00', 0x0}) (async) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={0x20, r6, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_SEC_DEVKEY={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x200048c3}, 0x4894) (async) sendmsg$IEEE802154_LLSEC_ADD_DEV(r2, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x40, r1, 0x2, 0x70bd2d, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r3}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r5}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x24000000}, 0x40850) sendmsg$IEEE802154_LLSEC_DEL_DEV(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r1, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x4000001) (async) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000580), 0x1000, r0}, 0x38) 1.165087855s ago: executing program 0 (id=5720): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x15, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000004000000000000001154d1ff85100000010000009500000000000000180100002020732500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000005000000850000002300000018010000646c6c2500000000002020200600000000000000bf0600000000000007010000f8ffffffb702000008000000b703000059e70000a50000000600000095"], &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x8, 0x4, 0x4, 0x4, 0x0, 0x1}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x14, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000025000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000040)=r3, 0x4) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@ipv4_delroute={0x2c, 0x19, 0x901, 0x0, 0x0, {0x2, 0x18, 0x14, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x400}, [@RTA_NH_ID={0x8, 0x1e, 0x1}, @RTA_GATEWAY={0x8, 0x5, @rand_addr=0x64010101}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24048040}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x3, 0xc, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e0000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000100b0000850000006d00000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sched_cls=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r5, 0x0, 0xe, 0x0, &(0x7f0000000000)="c1188e19b95d02ff4284860151b0", 0x0, 0xa3d8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r1, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000840)={0x14, 0x0, 0x4, 0x70bd29, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x2, 0x3, &(0x7f0000000200)=@framed={{0x18, 0xa}}, &(0x7f0000000000)='syzkaller\x00', 0x4, 0x1b, 0xffffffffffffffff}, 0x94) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=@newlink={0x50, 0x10, 0x1, 0x70bc2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2f26c}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_LINK_STATE={0xc, 0x5, {0x5}}]}]}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0x2255}]}, 0x50}, 0x1, 0x0, 0x0, 0x8091}, 0x40) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)) 975.524879ms ago: executing program 3 (id=5722): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x10, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="b700000028000000bca30000000000002403000007feffff720af0ff0000020071a4f0ff000000001f035800000000002e0a0200000000002604fdffffff000e61142000000000001d430000000000007a0a00fe0000001f6114380000000000b503f7fff80000009500000000000000033bc065b78111c6dfa041b63af4a3912435f1a864a7aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168e5181554a090f30002af51efd601b6bf01c8e8b1fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e65440000000000000000028610643a98d9ec21ead2ed51b104d4d91af25b845b9f7d08d123deda88c658d42ecbf28bf7076c15b463bebc72f526dd70252e79166d858fcd0e06dd31af9612fa402d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f0177184b6a89adaf17b0a6041bdef728f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10076443d643649393bf52d2105bd901128c7e0ec82701c8204a1deeed4155617572652d950ad31928b0b036dc2869f478341d02d0f5ad94b081504507acb4b9c67382f13d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdbb9893a5de817101ab062cd54e67051d355d84ce97bb0c6b6a595e487a2cc47c0efbb2d71cde2c10f0bc6980fe78683ac5c0c31032599dd273863be9261eee52216d009f4c52048ef8c126aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d91c2ea3e2e04cfe031b287539d0540059fe6c7fe7cd8697502c7596566de74e425da5e7f009602a9f61d3804b3e0a1053abdc31282dfb15eb6841bb64a1b3045024a982f3c48b936e6f9e0fcda88fe4413537528fd79153baae244e7bf573eac34b781337ad5901a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44022a579dfc0229cc0dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc48899b212c55318294270a1ad10c80fef7c24d47afcc829ba0f85da6d888f18ea40ab959f6074ab2a40d85d1501783a7ab51380d7b4ead35a385e0b4a26b602396df7e0c1e02b88c114f244a9bf93f04bf072f0861f5c0b000000000000eedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba3401e6a52acb1188883ad2a3b1832371fe5bc621426d1ed01b389708165b9cdbae2ed9dc7358f0ebadde0b727f27feeb7464dcc536cbae2f5e7d951680f6f2f9a6a8346962a350845ffa0d82884f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010ae20e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d648532869d701723fedcbada1ee7baa19faf67256b56a41fd355b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2654026c6ea08b83b123145ab5703dad844ceb201efeb6dc5f6a9037d2283c42efc54dd84323afc4c10eff462c8843187f1dd48ef0900000000000000ff0f4000000000f00700003c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538c6ee6ba65893ff1f908ba7554ba583ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738612e4fee18a22da19fcdb4c1011e32f808890205f0e6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927e2571f983e96635600000554f327a3535e7c7542799493c31ac05a7b57f03ca91a01ba2a30ca99e969d6fd09dc28e6ce4d9791c73c2d37999d146aef7799738b292fd64bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a794963442aece449a0d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2869291b7d12096833d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e637d4219ef7ec61261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ecab5d232f89fe0120f64c62e8e3ed8bcb45202c204bbec8d722824c0ebca8db1ea4a05e41f6016ab5bbe4fe7ff5d785d0128171c90d9900ca2532b0f9d01c4b45294fbba468df3e1b393cb4e62e753b4172ba7ac1f2b51c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addbc4b3093c91b8068c5adfcb0d7fd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a881192292ffff5392ab3d1311b82432662806add87047f601fa888400000000000000000000000000006acc19808d7cf29bc974b0ea92499a41b9b9a7c2bca311a28ee4952f2d325a56397c78f12205db653a536f0100e0eda300a43a13bd1b9f3322405d1efd78e578dc6b3fb84f3738a4b6caa800000087efa51c5d95ecba4e50e529d1e8c89600e809dc3d0a2f65579e23457949a50f2d0455cf699b3746979f99f6a1527f004f37e84fb478199dc1020f4beb98b8074bf7df8b5e783637daf121f175a81cffff4ac55a4385e9a617aa6c8e10d4202c5afeb06e2f9115558ea12f92d7ae633d44086b3f03b20d546fa66a72e38207c9d20035abc46271a30f1240de52536941242d23896ab74a3c6670fdc49c14f34fc4eadd6db8d80eba439772bf60a1db18c472dafc5569adc282928d2a1ffe29f1a57d3f18f4edaeb5d37918e6fddcd821da67a0785585a4443440dc65600e64a4a274000000000000000000000000000000000000000000000009dd14b38f2f5426d7cf5075047c31f6ce6adddfe3ac649c0643c8bfbeb14ba1fd7a485aa893915cf81e29aaf375e904bbe52691a4120260ffcd030000006d291ebcef893e1b9ccb6797d0646fe0e7274434f28efb43e06e64f0698caca42f4e6018a455736c482a017e2b13dac4a90faa109f0e87cc94e3efb649692456463ca74aa6ad4bf50c1acb3928143be1c1023a375e528285544d0064b98646f3109e9a4942ce42c6e7ec84b664f6c2770803f10b0a1fcbfc309381aeba191950bae71f37f1eb7ceeffb3c0547ac6571603adbfde4c8b5f8d7f4b854441613633b48865b65bdc415e1e0dcf672d68cf4cebf04f4bc1eebf560a26d3b332240d450fdb0a9a69f432e277f3a0386eb2bd1305c821c64757f786b79fef54dbe64c67d73934bc80b2133fb3c04cc7ea48bf97a6243c9f95dcbddecf45f008f1822c7868e1ff5a3cff5d6b6898335792749df7b1f51e91f8c1c3b1b93b33aaa3fab69cef08a9f6f6cf39dea3d878b2ed42545421970cc426e644332bc956d1c6adefdf0ede2c5c94aa632646ae225accdf031f611d01622921f1b922a5ac887cca3136133dce8d9f5f4da7bed2ea5d94362200000000000000000000f296b0c1484e5f781ad26bff696b05ff0a5e2270e07e18b04273bd4075ea38ab463bfa6a38e7c537498ba3e4df8dfc9e8c0a0d213c3ffad44d2a376def42e41e9fcf32c221aaac6cfdeb33c27500001a0000000000000000000017350000c11ae694b0c69c2c03f6790044a357e785af6e153d5f1ea460af92c7cbbd6295afe740f5e154346d483e0d10522a7a945b93fb705b95b6aae27a8fab1e6984c8bdc12360627137ab6737b68ab08acb29a74dc36b51209cfbc87f61182bbeb2772e9d5a1ffc477179be481ffe46a4ce86be0b1f8eee42a611a3d44ca450b14586ed63dd92005c79e4a8ab8a94f0b74903580ac98708007c80d6c7d0de4614195e40d797c0348dd70f36a220e8b3710fb5358c27e90793bcb9ee6319342c4b239ca8cbc6fc83d32e6eb62ad92e43991f2447be9c2a1ae1119eafb901a43d57e885116d19aa152bfb89f8d0b2516f80120a1cddff771657f3d0288ec3899f1e3ba0151c4037148fb479de703fc52b6573349c28d1b107d859b4961324c17756dde99de1924a1d2b7095d34a55060f47f4407d89acf9f285b20c2e6b3d0491d0d3591b0d94713332b6b79c8297117b0d14eff64e0aca8a4b4aa773d8fba1217e9519952419bb9dd998d0ec870ff00b6d556018602738fbc6cec89d6dd13cf55b96f6fe9a137d2d6a56ad78e52c23ed080000000000002bc261a781fd14126c146a0aac4221839a4b9bbf61e4bba695a41e2109eba8e40c370267cc51ffadbd15cafc97a4d3edfdcb9b5729307c6bdaf7b69325fb05fa8a9869de0600ee477d71bf3e36d1d9019edfa27aae24b632f251df210c86a18fae731ecb8b0d48357378caf2b6789509b1bacfd4fa812dc341875cfa5e798bbf59770000000000000000c8a594ea3c3347962d9113b1fecdfad5a8da641053f02e49456f5d21674521e67a5b18ea451eccf69dd6af928d2d68da9304a296c22fdcea26498d26229110b1aade386b113045033a6188d56e675564d8cb8d5b40114b0f5bf15dd64c9ece60b8588ee8777d0ea8f4713b258427c7d90f9e93348e17723ba9ab8ae790f74cc41ae5795835f3cec40dff485d2802c08611454d9ea784a205bcc07ec26f906f3cf45bb37014ab6f22af6213618e242b283ea9d3f0677ee598072ec06f7170009d92bb7ed9d12c378dfd3e74ec056ee83eef666423d934fc5908c9ff98715218a5964f1e00000000426ac9588e27aefe307f49662990ee823568bbc2f89596ced7c6c52d76b8096f1848410843b93fd404f535be474f456778b5ef85abb8fc2336abd5ea64a6efea8a5aca0015499b88ae780a7bae4df603bd3c72808cf300440b1b638a6640f7de8d0d82f359ca2f779cd48cd8d3603f4f69e47f386988c9b7b5d6dd3d48a1fdca780049d7c87bea42161a4c0d7cf0125b43dc9d8845f3c05a08acda647e7143d0e0aee2949a45e2848890522c2288072467d2afe269f589fb7e034b92d3ca245b16b71998711bfe206c9690b6d0eebb06a29349229eb45ff15c63aa2c82c56d7420738cd1b04eb16e87cb524315d7361ea3635d3799bb7fcc56aa5e1dbe031a7a12554dee6754b72f43a6fddf427f32ec3df274a88097725679769beebf1aa6eb09d5154e4900000000000d0f7160a05911d969879953d3d4702b2676c07bb0fd14020a66718378825d5ed789711b77d40dc31e0b8fc651b45559da463f0000000000000000000000000052d42124e9c26aba885015e69d42ecd710342ac597ebea576ae15fdf611356f622e831741ab15549e0d7a2bd0324e2b3b48a10551607492c19eaf58485feb4cab19c303b30ba2ddea0d792d77724c9fa4ed58b93668fc20484f141ee2b6a0029e88fdc853189b4dafd36ff23b11967090e508f45e3f10857038a52ef275cf9e3e4b5d30b12d138dfa70930c603b5e3f4b7be67be3dba3cbd8d4d143195af0697d779445d67dcfbd922d12a8b49f93eac7a72faacf80346b3b6"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48) 873.34472ms ago: executing program 3 (id=5723): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="180000000095ffffffffffffff000000850000000e000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009400000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x51, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xfffffffd}, 0x39) 820.282555ms ago: executing program 4 (id=5724): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000014007910480000000000690044000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg=0xa00, 0xffffffffffffffff, 0x8, 0x0, 0xa3}, 0x21) 811.003131ms ago: executing program 3 (id=5725): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000540)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x27, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000004c0)={'syzkaller1\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000200)={r1, r3, 0x25, 0x4, @void}, 0x10) write$tun(r0, &(0x7f0000000280)=ANY=[], 0xfdef) 676.837842ms ago: executing program 1 (id=5726): socket$kcm(0x21, 0x2, 0xa) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socket(0x10, 0x3, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, &(0x7f00000000c0)=0x33, 0x8) listen(r0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) sendto(r2, &(0x7f0000000000), 0xfeb5, 0x0, 0x0, 0x0) recvfrom(r1, &(0x7f00000001c0)=""/62, 0xfeb5, 0x10120, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x11, 0x200000000000002, 0x300) socket$kcm(0x2, 0x1000000000000002, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2000007, 0x31, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 676.259557ms ago: executing program 4 (id=5727): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000e40)=@newqdisc={0x40, 0x24, 0x3fe3aa0262d8c583, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xf}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x6}}]}, 0x40}, 0x1, 0x0, 0x0, 0xc083}, 0x2000400c) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r2, &(0x7f0000001040)={0x27, 0x0, 0xfffffffe, 0x4, 0x0, 0x1, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x3f}, 0x60) r3 = socket(0x2a, 0x5, 0xfffffff9) sendmsg$NFQNL_MSG_VERDICT(r3, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000280)={0x1b0, 0x1, 0x3, 0x401, 0x0, 0x0, {0x5, 0x0, 0x6}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0xffffffffffffffff, 0x1}}, @NFQA_CT={0x130, 0xb, 0x0, 0x1, [@CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x1400}, @CTA_TUPLE_REPLY={0x7c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @private=0xec}}}]}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x2404}, @CTA_SEQ_ADJ_ORIG={0x4c, 0xf, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x8}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x2}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x6}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x401}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x9}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x7b256470}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x2}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0xe}, @CTA_HELP={0x10, 0x5, 0x0, 0x1, {0xa, 0x1, 'H.245\x00'}}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0xd3}, @CTA_NAT_DST={0x34, 0xd, 0x0, 0x1, [@CTA_NAT_V4_MINIP={0x8, 0x1, @multicast2}, @CTA_NAT_V6_MINIP={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @CTA_NAT_PROTO={0x14, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e21}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e20}]}]}]}, @NFQA_VLAN={0xc, 0x13, 0x0, 0x1, [@NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x8100}]}, @NFQA_CT={0x54, 0xb, 0x0, 0x1, [@CTA_PROTOINFO={0x10, 0x4, 0x0, 0x1, @CTA_PROTOINFO_SCTP={0xc, 0x3, 0x0, 0x1, [@CTA_PROTOINFO_SCTP_STATE={0x5, 0x1, 0x4}]}}, @CTA_SYNPROXY={0x4}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x800}, @CTA_ID={0x8, 0xc, 0x1, 0x0, 0x3}, @CTA_SYNPROXY={0x24, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x72e3}, @CTA_SYNPROXY_ITS={0x8, 0x2, 0x1, 0x0, 0x80000001}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0xfffffffd}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x300000}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x4}]}]}, 0x1b0}, 0x1, 0x0, 0x0, 0x4010}, 0x4000040) r4 = socket$rds(0x15, 0x5, 0x0) sendmsg$rds(r4, &(0x7f0000002280)={&(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10, &(0x7f0000002100)=[{&(0x7f00000004c0)=""/162, 0xa2}, {&(0x7f0000000580)=""/148, 0x94}, {&(0x7f0000000640)=""/65, 0x41}, {&(0x7f00000006c0)=""/22, 0x16}, {&(0x7f0000000700)=""/144, 0x90}, {&(0x7f00000007c0)=""/245, 0xf5}, {&(0x7f00000010c0)=""/4096, 0x1000}, {&(0x7f00000020c0)=""/33, 0x21}], 0x8, &(0x7f0000002200)=[@mask_cswp={0x58, 0x114, 0x9, {{0x9, 0xca53}, &(0x7f0000002180), &(0x7f00000021c0)=0x1, 0x0, 0x5, 0x1, 0x8000000000000001, 0x10, 0x1}}], 0x58}, 0x4000041) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r5) sendmsg$NL80211_CMD_NEW_INTERFACE(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000005c0)={0x44, r7, 0x1, 0x70bd25, 0x25dfdbff, {{}, {@void, @val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x4}, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}], @NL80211_ATTR_IFNAME={0x14, 0x4, 'veth0_to_bridge\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmmsg$sock(r2, &(0x7f0000003e00)=[{{&(0x7f00000001c0)=@generic={0x751772a89104bc87, "8a4ac46a7523d11d706aea641732e48716ee0c8a6a0069ecf701f8045d7fbc341c85b89f0c88abbdd55f2d2c2299ca2a884627dccba17b19cb60dd78ab16960960de37714657a7823835cb8c9b5529f5c43a2b66272e80f668a98a1256c13cf3b09745eefe1e9c80c90093bccfc3e4c1a42294e032aae46372177259252d"}, 0x80, &(0x7f0000002540)=[{&(0x7f0000000240)="1ff8da6912", 0x5}], 0x1}}], 0x1, 0x4000810) 675.652738ms ago: executing program 2 (id=5728): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000340)={0x26, 'hash\x00', 0x0, 0x0, 'streebog256-generic\x00'}, 0x58) r2 = accept$alg(r1, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000000b80)=[{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)='v', 0xf4240}], 0x1}], 0x4924924924923d5, 0x8004) sendmmsg$alg(r2, &(0x7f0000000bc0), 0x0, 0x84) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$igmp(0x2, 0x3, 0x2) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r6, 0x29, 0x20, &(0x7f00000000c0)={@dev={0xfe, 0x80, '\x00', 0x40}, 0x800, 0x0, 0x2000000000903, 0x1}, 0x20) setsockopt$inet6_int(r6, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x7fff, 0x4) setsockopt$inet6_int(r6, 0x29, 0x24, &(0x7f0000000500)=0x40, 0x4) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x0, 0x380000, @loopback}, 0x1c) sendmmsg(r6, &(0x7f0000003d00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=[{0x10, 0x119, 0x10}], 0x10}}], 0x1, 0x4000000) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r8, @ANYBLOB="1f003300d000000008021100000108021100000050505050505000001502", @ANYRES16=r3], 0x3c}, 0x1, 0x0, 0x0, 0x8800}, 0x10) 653.740357ms ago: executing program 0 (id=5729): r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0) bind$can_j1939(r0, &(0x7f0000000040)={0x1d, 0x0, 0x8000000000000003}, 0x18) sendmmsg$inet(r0, &(0x7f0000002bc0)=[{{&(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000100)="bdd9d14588e6b7", 0x7}], 0x1}}], 0x1, 0x6ef8eb021112b2d8) 505.454598ms ago: executing program 0 (id=5730): socket(0x2, 0x80805, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) socket$alg(0x26, 0x5, 0x0) r1 = socket$kcm(0xa, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x12, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xfffffffe}, @generic={0x66, 0x8}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, @exit, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa, 0x0, 0xfffd}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0xc}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYRES8=r0], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r3 = socket(0x2, 0x80805, 0x0) r4 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000140)={0x84, @rand_addr=0x64010105, 0x4e22, 0x3, 'lblc\x00', 0x1, 0x80005, 0x6f}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x2, 0xcd}}, 0x44) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c0000001600010000000000000000000a0000000800ce8004000173"], 0x1c}}, 0x0) sendmsg$sock(r1, &(0x7f00000000c0)={&(0x7f0000000580)=@in6={0x2, 0x4e21, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r4, 0x0, 0x485, 0x0, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x109001, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000000)={'\x00', 0x5}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r6, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x3, &(0x7f0000000040)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r9, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r8, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg(r10, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) 432.457609ms ago: executing program 4 (id=5731): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, r0) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r5, @ANYBLOB="1f003300d000000008021100000108021100000050505050505000001502"], 0x3c}, 0x1, 0x0, 0x0, 0x8800}, 0x10) 428.624654ms ago: executing program 3 (id=5732): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000080)={0x209d, 0x0, 0x4, 0x1f}, 0x10) write(r2, &(0x7f00000000c0)="1800000016005f0214fffffffffffff80700000001000000", 0x18) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)={0x58, r1, 0x1, 0x4, 0x1, {}, [@IPVS_CMD_ATTR_DAEMON={0x44, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vcan0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x48c1}, 0x0) 329.479487ms ago: executing program 4 (id=5733): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000580), 0x62a01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a03000000000000000000010000000900010073797a30000000000900020073797a30000000002c0003800800014000000000180003801400020000007468305f746f5f68737200000000080002"], 0xe8}}, 0x0) (async) write$tun(r0, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0xfce) (async) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000005000004fd0900008400000005010000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000040000000000000000000000000400000004000000"], 0x50) (async) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)=ANY=[@ANYBLOB="68000000030101020000000000000000050000070800034000001002080008404c392ea2080007400000000214000f800800034200000097080003400000ffff0c00188008000340000009ad0c001080080003400000000008000c40000000020800034000001004"], 0x68}}, 0xf371cc2a4cc195fb) (async) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async) r4 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r4, &(0x7f00000001c0)={&(0x7f0000000040)={0x24, @none={0x0, 0xffff}}, 0x14, &(0x7f0000000080)={0x0}, 0x7, 0x0, 0x0, 0x20000010}, 0x4090) bind$llc(r3, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x54}, 0x10) (async) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r5, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) (async) ioctl$int_in(r5, 0x5421, &(0x7f00000000c0)=0x9732) (async) listen(r5, 0xec) (async, rerun: 32) accept4$bt_l2cap(r5, 0x0, 0x0, 0x800) (rerun: 32) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x3d) (async) write(r6, &(0x7f0000000000)="41000200010001", 0x7) 257.15013ms ago: executing program 3 (id=5734): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x10, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48) 191.795797ms ago: executing program 2 (id=5735): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4) syz_init_net_socket$x25(0x9, 0x5, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=@mpls_delroute={0xd0, 0x19, 0x20, 0x70bd2d, 0x25dfdbfe, {0x1c, 0x10, 0x20, 0x81, 0xfc, 0x0, 0xfd, 0x0, 0x200}, [@RTA_NEWDST={0x84, 0x13, [{0x7}, {0x9}, {0x8}, {0x6, 0x0, 0x1}, {0xffff9}, {0xb4}, {0x5}, {0x3}, {0x7f, 0x0, 0x1}, {0x1, 0x0, 0x1}, {}, {0x0, 0x0, 0x1}, {0x14f}, {0xffff9, 0x0, 0x1}, {0x1}, {0x1}, {0xe24}, {}, {0x32, 0x0, 0x1}, {0x3, 0x0, 0x1}, {0x3, 0x0, 0x1}, {0x3ff, 0x0, 0x1}, {0x9, 0x0, 0x1}, {0x2, 0x0, 0x1}, {0x9}, {0x4}, {0x10, 0x0, 0x1}, {0x4}, {0x3, 0x0, 0x1}, {0x7, 0x0, 0x1}, {0xa, 0x0, 0x1}, {0x4}]}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0xe}, @RTA_VIA={0x14, 0x12, {0x8, "0086c698b9d7090bf67203304b32"}}, @RTA_VIA={0x14, 0x12, {0x11, "ae087dea0fb31559969979fd0fab"}}]}, 0xd0}, 0x1, 0x0, 0x0, 0x4000080}, 0xc010) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x14, r3, 0x1, 0x70bd2a}, 0x14}}, 0x0) listen(r1, 0xc) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) r5 = accept$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000240)=0x14) connect$packet(r5, &(0x7f0000000280)={0x11, 0x18, 0x0, 0x1, 0x4}, 0x14) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x14, r7, 0x1, 0x70bd2c, 0x25dfdbff}, 0x14}}, 0x800) socket$unix(0x1, 0x1, 0x0) 92.996469ms ago: executing program 3 (id=5736): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_mreq(r1, 0x0, 0x17, 0x0, &(0x7f0000000200)) sendmmsg$inet6(r0, &(0x7f00000014c0)=[{{&(0x7f0000000080)={0xa, 0x4e20, 0x81, @private0={0xfc, 0x0, '\x00', 0x1}, 0x10}, 0x1c, &(0x7f0000000100)=[{&(0x7f0000000900)="e49d", 0x2}], 0x1}}], 0x1, 0x240048d1) setsockopt(r0, 0x84, 0x11, &(0x7f0000000040)="020000000980ffff", 0x8) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r3, 0x4018f50b, &(0x7f0000000140)={0x0, 0x8, 0x7}) sendmsg$NBD_CMD_CONNECT(r4, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000080)={0x6c, r5, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x2}, @NBD_ATTR_SOCKETS={0x40, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r6}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r3}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r3}}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x128}]}, 0x6c}}, 0x4) 0s ago: executing program 4 (id=5737): setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000001600)={0x1, 0x6}, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x1ffffc54, &(0x7f0000000680)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x40}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x18}}, 0x20004000) socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5452, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x30, 0x32, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) socket$kcm(0xa, 0x2, 0x0) unshare(0x8000400) r0 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r0, &(0x7f0000000140)={0x18, 0x2, {0xfffe, @loopback}}, 0x1e) connect$pptp(r0, &(0x7f0000000080)={0x18, 0x2, {0x0, @private=0xa010102}}, 0x1e) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0001, 0x0) ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f0000000340)=0x1) socket$inet_icmp_raw(0x2, 0x3, 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) kernel console output (not intermixed with test programs): 60417][T19893] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 506.960428][T19893] do_syscall_64+0x174/0x580 [ 506.960439][T19893] ? trace_irq_disable+0x3b/0x140 [ 506.960449][T19893] ? clear_bhb_loop+0x40/0x90 [ 506.960463][T19893] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 506.960473][T19893] RIP: 0033:0x7f124e79ce59 [ 506.960484][T19893] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 506.960493][T19893] RSP: 002b:00007f124f62f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 506.960506][T19893] RAX: ffffffffffffffda RBX: 00007f124ea16090 RCX: 00007f124e79ce59 [ 506.960513][T19893] RDX: 0000000000044000 RSI: 0000200000000540 RDI: 0000000000000009 [ 506.960520][T19893] RBP: 00007f124f62f090 R08: 0000000000000000 R09: 0000000000000000 [ 506.960527][T19893] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 506.960533][T19893] R13: 00007f124ea16128 R14: 00007f124ea16090 R15: 00007ffcd6be5968 [ 506.960549][T19893] [ 507.205922][T19893] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 508.166672][T19905] netlink: 'syz.3.4141': attribute type 2 has an invalid length. [ 508.534892][ T5632] Bluetooth: hci1: command 0x0406 tx timeout [ 508.896555][T19846] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 509.092017][T19913] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4146'. [ 509.298071][T19925] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4149'. [ 509.357245][T19931] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4149'. [ 509.580438][T19942] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4154'. [ 509.735152][T19953] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4159'. [ 509.860518][T19957] netlink: 'syz.1.4161': attribute type 2 has an invalid length. [ 510.146613][T19969] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4167'. [ 510.590114][T19988] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 510.741548][T19994] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 510.903358][T20001] netlink: 'syz.2.4178': attribute type 1 has an invalid length. [ 510.935372][T20001] 8021q: adding VLAN 0 to HW filter on device bond1 [ 510.981357][T20001] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 511.045526][T20008] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4179'. [ 511.360403][T20026] netlink: 'syz.0.4186': attribute type 2 has an invalid length. [ 512.157501][T20035] netlink: 'syz.3.4189': attribute type 1 has an invalid length. [ 512.236863][T20041] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4191'. [ 512.248544][T20041] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4191'. [ 512.264544][T20035] 8021q: adding VLAN 0 to HW filter on device bond5 [ 512.287920][T20039] bond3: (slave veth0_to_bond): Releasing backup interface [ 512.303602][T20043] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4192'. [ 512.329202][T20039] bond5: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 512.762264][T20068] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4200'. [ 512.773688][T20068] net_ratelimit: 7 callbacks suppressed [ 512.773705][T20068] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 514.014449][T20092] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4206'. [ 514.392080][T20112] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4211'. [ 514.730156][T20122] lo speed is unknown, defaulting to 1000 [ 515.055773][T20137] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4220'. [ 515.258307][T20122] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4215'. [ 515.301489][T20122] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4215'. [ 515.343853][T20143] netlink: 'syz.0.4222': attribute type 2 has an invalid length. [ 516.007724][T20170] sctp: [Deprecated]: syz.1.4232 (pid 20170) Use of int in maxseg socket option. [ 516.007724][T20170] Use struct sctp_assoc_value instead [ 516.547788][T20189] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4236'. [ 516.742242][T20189] macsec2: entered promiscuous mode [ 516.893909][T20199] wg2: Caught tx_queue_len zero misconfig [ 516.927216][T20201] netlink: 140 bytes leftover after parsing attributes in process `syz.2.4241'. [ 516.972568][T20199] netlink: 'syz.4.4240': attribute type 1 has an invalid length. [ 517.069919][T20204] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4240'. [ 517.545671][T20213] FAULT_INJECTION: forcing a failure. [ 517.545671][T20213] name failslab, interval 1, probability 0, space 0, times 0 [ 517.593799][T20213] CPU: 0 UID: 0 PID: 20213 Comm: syz.3.4246 Not tainted syzkaller #0 PREEMPT(full) [ 517.593826][T20213] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 517.593837][T20213] Call Trace: [ 517.593845][T20213] [ 517.593854][T20213] dump_stack_lvl+0xe8/0x150 [ 517.593883][T20213] should_fail_ex+0x40c/0x560 [ 517.593912][T20213] should_failslab+0xa8/0x100 [ 517.593936][T20213] kmem_cache_alloc_node_noprof+0xb3/0x610 [ 517.593964][T20213] ? local_lock_release+0x9c/0x160 [ 517.593993][T20213] ? __alloc_skb+0x1d7/0x7a0 [ 517.594010][T20213] ? __alloc_skb+0x1d7/0x7a0 [ 517.594041][T20213] __alloc_skb+0x1d7/0x7a0 [ 517.594063][T20213] netlink_sendmsg+0x5d4/0xb40 [ 517.594104][T20213] ? __pfx_netlink_sendmsg+0x10/0x10 [ 517.594129][T20213] ? aa_sock_msg_perm+0xf1/0x1b0 [ 517.594156][T20213] ? __pfx_netlink_sendmsg+0x10/0x10 [ 517.594174][T20213] sock_sendmsg_nosec+0x13a/0x180 [ 517.594202][T20213] ____sys_sendmsg+0x54e/0x850 [ 517.594228][T20213] ? __pfx_____sys_sendmsg+0x10/0x10 [ 517.594257][T20213] ? import_iovec+0x73/0xa0 [ 517.594280][T20213] ___sys_sendmsg+0x2a5/0x360 [ 517.594299][T20213] ? __lock_acquire+0x683/0x2cf0 [ 517.594322][T20213] ? __pfx____sys_sendmsg+0x10/0x10 [ 517.594368][T20213] ? __fget_files+0x2a/0x420 [ 517.594385][T20213] ? __fget_files+0x3a2/0x420 [ 517.594412][T20213] __x64_sys_sendmsg+0x1b1/0x290 [ 517.594436][T20213] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 517.594472][T20213] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 517.594493][T20213] do_syscall_64+0x174/0x580 [ 517.594511][T20213] ? trace_irq_disable+0x3b/0x140 [ 517.594529][T20213] ? clear_bhb_loop+0x40/0x90 [ 517.594551][T20213] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 517.594571][T20213] RIP: 0033:0x7f7b7b39ce59 [ 517.594588][T20213] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 517.594604][T20213] RSP: 002b:00007f7b7c2e3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 517.594626][T20213] RAX: ffffffffffffffda RBX: 00007f7b7b615fa0 RCX: 00007f7b7b39ce59 [ 517.594638][T20213] RDX: 0000000000000000 RSI: 00002000000003c0 RDI: 0000000000000003 [ 517.594650][T20213] RBP: 00007f7b7c2e3090 R08: 0000000000000000 R09: 0000000000000000 [ 517.594661][T20213] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 517.594672][T20213] R13: 00007f7b7b616038 R14: 00007f7b7b615fa0 R15: 00007fff66d379b8 [ 517.594700][T20213] [ 518.000701][T20226] netlink: 'syz.3.4251': attribute type 4 has an invalid length. [ 518.041734][T20226] netlink: 'syz.3.4251': attribute type 4 has an invalid length. [ 518.049844][T20227] xt_policy: output policy not valid in PREROUTING and INPUT [ 518.098062][T20231] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4251'. [ 518.109892][T20231] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4251'. [ 518.163175][T20234] netlink: 140 bytes leftover after parsing attributes in process `syz.2.4252'. [ 518.320386][T20242] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 519.188535][T20271] netlink: 140 bytes leftover after parsing attributes in process `syz.0.4264'. [ 519.190320][T20269] FAULT_INJECTION: forcing a failure. [ 519.190320][T20269] name failslab, interval 1, probability 0, space 0, times 0 [ 519.211989][T20269] CPU: 0 UID: 0 PID: 20269 Comm: syz.4.4263 Not tainted syzkaller #0 PREEMPT(full) [ 519.212016][T20269] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 519.212028][T20269] Call Trace: [ 519.212036][T20269] [ 519.212045][T20269] dump_stack_lvl+0xe8/0x150 [ 519.212072][T20269] should_fail_ex+0x40c/0x560 [ 519.212101][T20269] should_failslab+0xa8/0x100 [ 519.212124][T20269] __kmalloc_noprof+0xfe/0x720 [ 519.212152][T20269] ? hash_mac4_add+0x76/0x2130 [ 519.212174][T20269] ? hash_mac4_add+0xe17/0x2130 [ 519.212192][T20269] ? hash_mac4_add+0xe17/0x2130 [ 519.212219][T20269] hash_mac4_add+0xe17/0x2130 [ 519.212240][T20269] ? hash_mac4_add+0x76/0x2130 [ 519.212276][T20269] ? stack_trace_save+0xa9/0x100 [ 519.212315][T20269] hash_mac4_uadt+0x33c/0x4b0 [ 519.212337][T20269] ? __pfx_hash_mac4_add+0x10/0x10 [ 519.212357][T20269] ? __pfx_hash_mac4_uadt+0x10/0x10 [ 519.212396][T20269] call_ad+0x18a/0xb50 [ 519.212416][T20269] ? __lock_acquire+0x683/0x2cf0 [ 519.212444][T20269] ? __pfx_call_ad+0x10/0x10 [ 519.212461][T20269] ? ip_set_pernet+0x23/0x240 [ 519.212504][T20269] ? __nla_parse+0x40/0x60 [ 519.212536][T20269] ip_set_ad+0x6b5/0x9d0 [ 519.212565][T20269] ? __pfx_ip_set_ad+0x10/0x10 [ 519.212584][T20269] ? __mutex_lock+0x30d/0x1550 [ 519.212642][T20269] nfnetlink_rcv_msg+0xcc2/0x12b0 [ 519.212661][T20269] ? unwind_get_return_address+0x4d/0x90 [ 519.212687][T20269] ? nfnetlink_rcv_msg+0x228/0x12b0 [ 519.212724][T20269] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 519.212794][T20269] netlink_rcv_skb+0x226/0x4a0 [ 519.212817][T20269] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 519.212839][T20269] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 519.212873][T20269] ? bpf_lsm_capable+0x9/0x20 [ 519.212891][T20269] ? security_capable+0x7e/0x2c0 [ 519.212928][T20269] nfnetlink_rcv+0x2b9/0x28c0 [ 519.212950][T20269] ? __dev_queue_xmit+0x29b/0x37f0 [ 519.212974][T20269] ? __local_bh_enable_ip+0xd0/0x130 [ 519.213002][T20269] ? lockdep_hardirqs_on+0x7a/0x110 [ 519.213029][T20269] ? __dev_queue_xmit+0x29b/0x37f0 [ 519.213050][T20269] ? __local_bh_enable_ip+0xd0/0x130 [ 519.213075][T20269] ? __dev_queue_xmit+0x29b/0x37f0 [ 519.213096][T20269] ? __dev_queue_xmit+0x1ed7/0x37f0 [ 519.213118][T20269] ? do_syscall_64+0x174/0x580 [ 519.213134][T20269] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 519.213165][T20269] ? __dev_queue_xmit+0x29b/0x37f0 [ 519.213187][T20269] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 519.213212][T20269] ? __pfx___dev_queue_xmit+0x10/0x10 [ 519.213241][T20269] ? ref_tracker_free+0x689/0x830 [ 519.213271][T20269] ? __pfx_ref_tracker_free+0x10/0x10 [ 519.213306][T20269] ? __skb_clone+0x449/0x6c0 [ 519.213335][T20269] ? skb_clone+0x246/0x3a0 [ 519.213359][T20269] ? __netlink_deliver_tap+0x811/0x860 [ 519.213380][T20269] ? netlink_deliver_tap+0x2e/0x1b0 [ 519.213408][T20269] ? netlink_deliver_tap+0x2e/0x1b0 [ 519.213430][T20269] ? netlink_deliver_tap+0x2e/0x1b0 [ 519.213462][T20269] netlink_unicast+0x7bb/0x940 [ 519.213493][T20269] netlink_sendmsg+0x813/0xb40 [ 519.213525][T20269] ? __pfx_netlink_sendmsg+0x10/0x10 [ 519.213551][T20269] ? aa_sock_msg_perm+0xf1/0x1b0 [ 519.213580][T20269] ? __pfx_netlink_sendmsg+0x10/0x10 [ 519.213601][T20269] sock_sendmsg_nosec+0x13a/0x180 [ 519.213630][T20269] ____sys_sendmsg+0x54e/0x850 [ 519.213657][T20269] ? __pfx_____sys_sendmsg+0x10/0x10 [ 519.213688][T20269] ? import_iovec+0x73/0xa0 [ 519.213712][T20269] ___sys_sendmsg+0x2a5/0x360 [ 519.213732][T20269] ? __lock_acquire+0x683/0x2cf0 [ 519.213756][T20269] ? __pfx____sys_sendmsg+0x10/0x10 [ 519.213814][T20269] ? __fget_files+0x2a/0x420 [ 519.213832][T20269] ? __fget_files+0x3a2/0x420 [ 519.213862][T20269] __x64_sys_sendmsg+0x1b1/0x290 [ 519.213886][T20269] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 519.213932][T20269] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 519.213953][T20269] do_syscall_64+0x174/0x580 [ 519.213970][T20269] ? trace_irq_disable+0x3b/0x140 [ 519.213988][T20269] ? clear_bhb_loop+0x40/0x90 [ 519.214012][T20269] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 519.214031][T20269] RIP: 0033:0x7f124e79ce59 [ 519.214049][T20269] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 519.214065][T20269] RSP: 002b:00007f124f650028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 519.214085][T20269] RAX: ffffffffffffffda RBX: 00007f124ea15fa0 RCX: 00007f124e79ce59 [ 519.214100][T20269] RDX: 0000000000044000 RSI: 0000200000000540 RDI: 0000000000000008 [ 519.214113][T20269] RBP: 00007f124f650090 R08: 0000000000000000 R09: 0000000000000000 [ 519.214125][T20269] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 519.214136][T20269] R13: 00007f124ea16038 R14: 00007f124ea15fa0 R15: 00007ffcd6be5968 [ 519.214169][T20269] [ 519.692130][T20269] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 519.811712][T20278] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 520.051588][T20286] wlan0: mtu greater than device maximum [ 520.277752][T20290] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4271'. [ 520.352545][T20300] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4272'. [ 521.174309][T20326] netlink: 232 bytes leftover after parsing attributes in process `syz.3.4281'. [ 521.252654][T20328] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 521.273479][T20328] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 521.471303][T20339] ip6tnl0: Caught tx_queue_len zero misconfig [ 521.607596][T20347] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4286'. [ 521.805610][T20347] macsec2: entered promiscuous mode [ 521.937609][T20364] netlink: 'syz.0.4293': attribute type 1 has an invalid length. [ 521.947604][T20364] netlink: 168 bytes leftover after parsing attributes in process `syz.0.4293'. [ 522.008898][T20367] syzkaller0: entered promiscuous mode [ 522.014605][T20367] syzkaller0: entered allmulticast mode [ 522.058162][T20370] netlink: 'syz.0.4295': attribute type 2 has an invalid length. [ 522.322856][T20376] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4296'. [ 522.364751][T20376] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4296'. [ 523.029663][T20389] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 523.748267][T20427] netlink: 'syz.0.4315': attribute type 2 has an invalid length. [ 524.335404][T20445] netlink: 'syz.4.4320': attribute type 30 has an invalid length. [ 524.343328][T20445] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4320'. [ 524.365704][T20445] bond8: option arp_missed_max: mode dependency failed, not supported in mode 802.3ad(4) [ 524.378783][T20445] bond8 (unregistering): Released all slaves [ 525.093287][T20475] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4330'. [ 525.183590][T20471] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 525.381716][T20481] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4330'. [ 525.451071][T20492] x_tables: duplicate underflow at hook 2 [ 525.506514][T20491] netlink: 64 bytes leftover after parsing attributes in process `syz.0.4334'. [ 525.857863][T20514] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4339'. [ 526.066002][T20525] netlink: 'syz.1.4343': attribute type 30 has an invalid length. [ 526.087578][T20525] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4343'. [ 526.151019][T20525] bond5: option arp_missed_max: mode dependency failed, not supported in mode 802.3ad(4) [ 526.163023][T20525] bond5 (unregistering): Released all slaves [ 526.288814][T20534] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4347'. [ 526.312403][T20534] macvlan4: entered allmulticast mode [ 526.325953][T20536] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4348'. [ 526.339871][T20536] netlink: 'syz.2.4348': attribute type 1 has an invalid length. [ 526.432629][T20536] 8021q: adding VLAN 0 to HW filter on device bond2 [ 526.439274][T20545] netlink: 'syz.4.4350': attribute type 1 has an invalid length. [ 526.458453][T20543] bond2: (slave geneve4): making interface the new active one [ 526.474150][T20543] bond2: (slave geneve4): Enslaving as an active interface with an up link [ 526.540731][T20549] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4349'. [ 526.545058][T20545] bond8: entered promiscuous mode [ 526.570573][T20545] 8021q: adding VLAN 0 to HW filter on device bond8 [ 526.577748][T20549] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4349'. [ 526.669016][T20545] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4350'. [ 526.695816][T20545] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4350'. [ 527.458315][T20575] veth0_macvtap: Caught tx_queue_len zero misconfig [ 527.676457][T20601] macsec1: entered promiscuous mode [ 528.441762][T20603] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 528.552741][T20640] netlink: 'syz.2.4374': attribute type 49 has an invalid length. [ 528.627986][T20646] sctp: [Deprecated]: syz.0.4376 (pid 20646) Use of struct sctp_assoc_value in delayed_ack socket option. [ 528.627986][T20646] Use struct sctp_sack_info instead [ 529.014802][ T50] Bluetooth: hci4: command 0x0406 tx timeout [ 529.099403][T20668] macsec1: entered promiscuous mode [ 529.158497][T20669] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 529.562823][T20682] FAULT_INJECTION: forcing a failure. [ 529.562823][T20682] name failslab, interval 1, probability 0, space 0, times 0 [ 529.577453][T20682] CPU: 0 UID: 0 PID: 20682 Comm: syz.3.4389 Not tainted syzkaller #0 PREEMPT(full) [ 529.577483][T20682] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 529.577494][T20682] Call Trace: [ 529.577502][T20682] [ 529.577511][T20682] dump_stack_lvl+0xe8/0x150 [ 529.577540][T20682] should_fail_ex+0x40c/0x560 [ 529.577570][T20682] should_failslab+0xa8/0x100 [ 529.577594][T20682] __kmalloc_noprof+0xfe/0x720 [ 529.577624][T20682] ? bpf_test_init+0x9f/0x150 [ 529.577644][T20682] ? bpf_test_init+0x9f/0x150 [ 529.577670][T20682] bpf_test_init+0x9f/0x150 [ 529.577695][T20682] bpf_prog_test_run_xdp+0x4cc/0x11d0 [ 529.577740][T20682] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 529.577768][T20682] ? __fget_files+0x2a/0x420 [ 529.577792][T20682] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 529.577816][T20682] bpf_prog_test_run+0x2c5/0x340 [ 529.577840][T20682] __sys_bpf+0xa22/0xd90 [ 529.577868][T20682] ? __pfx___sys_bpf+0x10/0x10 [ 529.577898][T20682] ? __fget_files+0x2a/0x420 [ 529.577934][T20682] ? ksys_write+0x242/0x270 [ 529.577958][T20682] ? __pfx_ksys_write+0x10/0x10 [ 529.577987][T20682] __x64_sys_bpf+0xba/0xd0 [ 529.578014][T20682] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 529.578036][T20682] do_syscall_64+0x174/0x580 [ 529.578054][T20682] ? trace_irq_disable+0x3b/0x140 [ 529.578072][T20682] ? clear_bhb_loop+0x40/0x90 [ 529.578096][T20682] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 529.578115][T20682] RIP: 0033:0x7f7b7b39ce59 [ 529.578133][T20682] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 529.578150][T20682] RSP: 002b:00007f7b7c2e3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 529.578171][T20682] RAX: ffffffffffffffda RBX: 00007f7b7b615fa0 RCX: 00007f7b7b39ce59 [ 529.578185][T20682] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 529.578198][T20682] RBP: 00007f7b7c2e3090 R08: 0000000000000000 R09: 0000000000000000 [ 529.578210][T20682] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 529.578221][T20682] R13: 00007f7b7b616038 R14: 00007f7b7b615fa0 R15: 00007fff66d379b8 [ 529.578253][T20682] [ 530.594776][T20716] __nla_validate_parse: 9 callbacks suppressed [ 530.594796][T20716] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4399'. [ 530.742955][T20726] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4401'. [ 530.922546][T20735] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4405'. [ 531.826356][T20761] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4410'. [ 532.069852][T20773] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4414'. [ 532.144780][T20773] veth1_to_team: entered promiscuous mode [ 532.238527][T20783] netlink: 'syz.2.4416': attribute type 1 has an invalid length. [ 532.407570][T20783] 8021q: adding VLAN 0 to HW filter on device bond3 [ 532.484329][T20787] bond1: (slave veth0_to_bond): Releasing backup interface [ 532.501697][T20803] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4420'. [ 532.508030][T20787] bond3: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 532.534423][T20806] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4419'. [ 532.599222][T20794] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4420'. [ 532.813193][T20818] FAULT_INJECTION: forcing a failure. [ 532.813193][T20818] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 532.836256][T20818] CPU: 0 UID: 0 PID: 20818 Comm: syz.1.4424 Not tainted syzkaller #0 PREEMPT(full) [ 532.836284][T20818] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 532.836295][T20818] Call Trace: [ 532.836303][T20818] [ 532.836311][T20818] dump_stack_lvl+0xe8/0x150 [ 532.836339][T20818] should_fail_ex+0x40c/0x560 [ 532.836370][T20818] _copy_from_user+0x2d/0xb0 [ 532.836393][T20818] bpf_test_init+0xd8/0x150 [ 532.836418][T20818] bpf_prog_test_run_xdp+0x4cc/0x11d0 [ 532.836456][T20818] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 532.836484][T20818] ? __fget_files+0x2a/0x420 [ 532.836511][T20818] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 532.836534][T20818] bpf_prog_test_run+0x2c5/0x340 [ 532.836600][T20818] __sys_bpf+0xa22/0xd90 [ 532.836627][T20818] ? __pfx___sys_bpf+0x10/0x10 [ 532.836656][T20818] ? __fget_files+0x2a/0x420 [ 532.836692][T20818] ? ksys_write+0x242/0x270 [ 532.836717][T20818] ? __pfx_ksys_write+0x10/0x10 [ 532.836745][T20818] __x64_sys_bpf+0xba/0xd0 [ 532.836773][T20818] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 532.836794][T20818] do_syscall_64+0x174/0x580 [ 532.836812][T20818] ? trace_irq_disable+0x3b/0x140 [ 532.836830][T20818] ? clear_bhb_loop+0x40/0x90 [ 532.836853][T20818] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 532.836872][T20818] RIP: 0033:0x7f48fe39ce59 [ 532.836890][T20818] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 532.836907][T20818] RSP: 002b:00007f48ff17d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 532.836929][T20818] RAX: ffffffffffffffda RBX: 00007f48fe615fa0 RCX: 00007f48fe39ce59 [ 532.836943][T20818] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 532.836956][T20818] RBP: 00007f48ff17d090 R08: 0000000000000000 R09: 0000000000000000 [ 532.836966][T20818] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 532.836977][T20818] R13: 00007f48fe616038 R14: 00007f48fe615fa0 R15: 00007ffd95b568a8 [ 532.837008][T20818] [ 533.459373][T20838] FAULT_INJECTION: forcing a failure. [ 533.459373][T20838] name failslab, interval 1, probability 0, space 0, times 0 [ 533.474860][T20838] CPU: 0 UID: 0 PID: 20838 Comm: syz.3.4428 Not tainted syzkaller #0 PREEMPT(full) [ 533.474886][T20838] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 533.474897][T20838] Call Trace: [ 533.474905][T20838] [ 533.474914][T20838] dump_stack_lvl+0xe8/0x150 [ 533.474946][T20838] should_fail_ex+0x40c/0x560 [ 533.474981][T20838] should_failslab+0xa8/0x100 [ 533.475003][T20838] __kmalloc_cache_noprof+0xa8/0x660 [ 533.475034][T20838] ? nfnetlink_rcv+0x1021/0x28c0 [ 533.475052][T20838] ? nfnetlink_rcv+0x1021/0x28c0 [ 533.475084][T20838] nfnetlink_rcv+0x1021/0x28c0 [ 533.475136][T20838] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 533.475198][T20838] ? netlink_deliver_tap+0x2e/0x1b0 [ 533.475229][T20838] ? netlink_deliver_tap+0x2e/0x1b0 [ 533.475250][T20838] ? netlink_deliver_tap+0x2e/0x1b0 [ 533.475276][T20838] netlink_unicast+0x7bb/0x940 [ 533.475305][T20838] netlink_sendmsg+0x813/0xb40 [ 533.475335][T20838] ? __pfx_netlink_sendmsg+0x10/0x10 [ 533.475359][T20838] ? aa_sock_msg_perm+0xf1/0x1b0 [ 533.475386][T20838] ? __pfx_netlink_sendmsg+0x10/0x10 [ 533.475407][T20838] sock_sendmsg_nosec+0x13a/0x180 [ 533.475437][T20838] ____sys_sendmsg+0x54e/0x850 [ 533.475465][T20838] ? __pfx_____sys_sendmsg+0x10/0x10 [ 533.475496][T20838] ? import_iovec+0x73/0xa0 [ 533.475520][T20838] ___sys_sendmsg+0x2a5/0x360 [ 533.475540][T20838] ? __lock_acquire+0x683/0x2cf0 [ 533.475565][T20838] ? __pfx____sys_sendmsg+0x10/0x10 [ 533.475623][T20838] ? __fget_files+0x2a/0x420 [ 533.475642][T20838] ? __fget_files+0x3a2/0x420 [ 533.475671][T20838] __x64_sys_sendmsg+0x1b1/0x290 [ 533.475696][T20838] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 533.475736][T20838] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 533.475758][T20838] do_syscall_64+0x174/0x580 [ 533.475777][T20838] ? trace_irq_disable+0x3b/0x140 [ 533.475795][T20838] ? clear_bhb_loop+0x40/0x90 [ 533.475820][T20838] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 533.475839][T20838] RIP: 0033:0x7f7b7b39ce59 [ 533.475858][T20838] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 533.475878][T20838] RSP: 002b:00007f7b7c2e3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 533.475898][T20838] RAX: ffffffffffffffda RBX: 00007f7b7b615fa0 RCX: 00007f7b7b39ce59 [ 533.475913][T20838] RDX: 0000000000000000 RSI: 00002000000003c0 RDI: 0000000000000003 [ 533.475926][T20838] RBP: 00007f7b7c2e3090 R08: 0000000000000000 R09: 0000000000000000 [ 533.475938][T20838] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 533.475948][T20838] R13: 00007f7b7b616038 R14: 00007f7b7b615fa0 R15: 00007fff66d379b8 [ 533.475975][T20838] [ 533.786064][T20844] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 533.869275][T20848] xt_hashlimit: size too large, truncated to 1048576 [ 534.182703][T20860] netlink: 'syz.2.4434': attribute type 3 has an invalid length. [ 534.223777][T20860] netlink: 'syz.2.4434': attribute type 3 has an invalid length. [ 534.250862][T20865] netlink: 6208 bytes leftover after parsing attributes in process `syz.1.4437'. [ 534.295712][T20865] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 534.304045][T20865] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 534.331766][T20867] netlink: 'syz.4.4438': attribute type 1 has an invalid length. [ 534.392643][T20867] bond9: (slave geneve4): making interface the new active one [ 534.402209][T20867] bond9: (slave geneve4): Enslaving as an active interface with an up link [ 534.412613][ T12] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 534.414808][T20867] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4438'. [ 534.441168][ T12] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 534.483303][T20867] 8021q: adding VLAN 0 to HW filter on device bond9 [ 534.495577][ T12] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 534.538156][ T12] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 534.768110][T20888] netlink: 'syz.4.4444': attribute type 2 has an invalid length. [ 535.612544][T20915] netlink: 'syz.0.4449': attribute type 5 has an invalid length. [ 535.715795][T20917] netlink: 'syz.3.4450': attribute type 1 has an invalid length. [ 535.843240][T20917] 8021q: adding VLAN 0 to HW filter on device bond6 [ 535.893393][T20923] bond5: (slave veth0_to_bond): Releasing backup interface [ 535.910767][T20923] bond6: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 536.302830][T20948] __nla_validate_parse: 3 callbacks suppressed [ 536.302849][T20948] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4459'. [ 536.334022][T20953] IPVS: set_ctl: invalid protocol: 2 0.0.0.0:20004 [ 536.341305][T20948] macvlan3: entered allmulticast mode [ 536.352072][T20953] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4461'. [ 536.570531][T20963] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 536.607688][T20953] bridge0: port 2(bridge_slave_1) entered disabled state [ 536.615216][T20953] bridge0: port 1(bridge_slave_0) entered disabled state [ 536.947916][T20953] bond2: left allmulticast mode [ 536.953027][T20953] ip6gretap2: left allmulticast mode [ 536.958742][T20953] bond2: left promiscuous mode [ 536.963723][T20953] ip6gretap2: left promiscuous mode [ 537.082104][T20953] gretap0: left allmulticast mode [ 537.109392][ T1175] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 537.126744][ T1175] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 537.136288][T20974] netlink: 'syz.3.4463': attribute type 3 has an invalid length. [ 537.144463][T20974] netlink: 'syz.3.4463': attribute type 3 has an invalid length. [ 537.286734][ T1175] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 537.297463][ T1175] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 537.337893][T20980] sctp: [Deprecated]: syz.4.4466 (pid 20980) Use of int in max_burst socket option deprecated. [ 537.337893][T20980] Use struct sctp_assoc_value instead [ 537.561186][T20992] netlink: 'syz.3.4469': attribute type 30 has an invalid length. [ 537.571944][T20997] netlink: 'syz.4.4471': attribute type 1 has an invalid length. [ 537.586110][T20992] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4469'. [ 537.640292][T20992] bond7: option arp_missed_max: mode dependency failed, not supported in mode 802.3ad(4) [ 537.666889][T20992] bond7 (unregistering): Released all slaves [ 537.871868][T21004] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 538.562859][T21033] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4484'. [ 538.823182][T21042] FAULT_INJECTION: forcing a failure. [ 538.823182][T21042] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 538.847676][T21042] CPU: 0 UID: 0 PID: 21042 Comm: syz.3.4487 Not tainted syzkaller #0 PREEMPT(full) [ 538.847705][T21042] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 538.847717][T21042] Call Trace: [ 538.847727][T21042] [ 538.847736][T21042] dump_stack_lvl+0xe8/0x150 [ 538.847765][T21042] should_fail_ex+0x40c/0x560 [ 538.847796][T21042] _copy_to_user+0x31/0xb0 [ 538.847820][T21042] simple_read_from_buffer+0xe1/0x170 [ 538.847847][T21042] proc_fail_nth_read+0x1bb/0x230 [ 538.847871][T21042] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 538.847894][T21042] ? rw_verify_area+0x24a/0x4c0 [ 538.847919][T21042] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 538.847939][T21042] vfs_read+0x213/0xa80 [ 538.847966][T21042] ? __pfx___mutex_lock+0x10/0x10 [ 538.847985][T21042] ? __pfx_vfs_read+0x10/0x10 [ 538.848009][T21042] ? __fget_files+0x2a/0x420 [ 538.848032][T21042] ? __fget_files+0x3a2/0x420 [ 538.848050][T21042] ? __fget_files+0x2a/0x420 [ 538.848077][T21042] ksys_read+0x150/0x270 [ 538.848102][T21042] ? __pfx_ksys_read+0x10/0x10 [ 538.848133][T21042] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 538.848154][T21042] do_syscall_64+0x174/0x580 [ 538.848172][T21042] ? trace_irq_disable+0x3b/0x140 [ 538.848190][T21042] ? clear_bhb_loop+0x40/0x90 [ 538.848214][T21042] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 538.848233][T21042] RIP: 0033:0x7f7b7b35d68e [ 538.848252][T21042] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 538.848268][T21042] RSP: 002b:00007f7b7c2e2fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 538.848289][T21042] RAX: ffffffffffffffda RBX: 00007f7b7c2e36c0 RCX: 00007f7b7b35d68e [ 538.848304][T21042] RDX: 000000000000000f RSI: 00007f7b7c2e30a0 RDI: 0000000000000004 [ 538.848316][T21042] RBP: 00007f7b7c2e3090 R08: 0000000000000000 R09: 0000000000000000 [ 538.848329][T21042] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 538.848340][T21042] R13: 00007f7b7b616038 R14: 00007f7b7b615fa0 R15: 00007fff66d379b8 [ 538.848373][T21042] [ 539.255062][ T5632] Bluetooth: hci2: command 0x0406 tx timeout [ 539.280779][T21053] tunl0: Caught tx_queue_len zero misconfig [ 539.290376][T21053] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4491'. [ 539.356952][T21056] netlink: 'syz.1.4490': attribute type 30 has an invalid length. [ 539.366029][T21056] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4490'. [ 539.431116][T21056] bond5: option arp_missed_max: mode dependency failed, not supported in mode 802.3ad(4) [ 539.449738][T21056] bond5 (unregistering): Released all slaves [ 539.522866][T21061] netlink: 'syz.4.4493': attribute type 3 has an invalid length. [ 539.531160][T21061] netlink: 'syz.4.4493': attribute type 3 has an invalid length. [ 539.678572][T21072] netlink: 14 bytes leftover after parsing attributes in process `syz.2.4497'. [ 539.717767][T21074] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4495'. [ 540.391315][T21103] netlink: 6032 bytes leftover after parsing attributes in process `syz.3.4506'. [ 540.530235][T21106] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4508'. [ 540.553502][T21105] veth1_macvtap: left promiscuous mode [ 540.615493][T21105] veth1_macvtap: entered promiscuous mode [ 540.692201][T21114] veth7: entered allmulticast mode [ 540.742159][T21114] bond7: (slave veth7): Enslaving as an active interface with an up link [ 540.974691][T21129] netlink: 'syz.0.4514': attribute type 30 has an invalid length. [ 541.077566][T21129] bond4: option arp_missed_max: mode dependency failed, not supported in mode 802.3ad(4) [ 541.116400][T21129] bond4 (unregistering): Released all slaves [ 541.397403][T21148] __nla_validate_parse: 4 callbacks suppressed [ 541.397423][T21148] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4518'. [ 541.790881][T21173] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4523'. [ 542.011632][T21187] FAULT_INJECTION: forcing a failure. [ 542.011632][T21187] name failslab, interval 1, probability 0, space 0, times 0 [ 542.024553][T21187] CPU: 1 UID: 0 PID: 21187 Comm: syz.1.4527 Not tainted syzkaller #0 PREEMPT(full) [ 542.024570][T21187] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 542.024578][T21187] Call Trace: [ 542.024582][T21187] [ 542.024587][T21187] dump_stack_lvl+0xe8/0x150 [ 542.024605][T21187] should_fail_ex+0x40c/0x560 [ 542.024635][T21187] should_failslab+0xa8/0x100 [ 542.024656][T21187] __kmalloc_cache_noprof+0xa8/0x660 [ 542.024685][T21187] ? tcf_block_get_ext+0x14f/0x17d0 [ 542.024702][T21187] ? tcf_block_get_ext+0x14f/0x17d0 [ 542.024726][T21187] tcf_block_get_ext+0x14f/0x17d0 [ 542.024754][T21187] tcf_block_get+0x67/0xa0 [ 542.024773][T21187] ? __pfx_tcf_chain_head_change_dflt+0x10/0x10 [ 542.024789][T21187] sfq_init+0x9d/0x24b0 [ 542.024802][T21187] ? is_dynamic_key+0xd4/0x1c0 [ 542.024812][T21187] ? is_dynamic_key+0xd4/0x1c0 [ 542.024824][T21187] ? __raw_spin_lock_init+0x45/0x100 [ 542.024840][T21187] ? qdisc_alloc+0x6e7/0x9d0 [ 542.024853][T21187] ? __pfx_sfq_init+0x10/0x10 [ 542.024868][T21187] qdisc_create+0x7b5/0xf00 [ 542.024884][T21187] ? lockdep_rtnl_is_held+0x26/0x40 [ 542.024899][T21187] tc_modify_qdisc+0x17af/0x2390 [ 542.024921][T21187] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 542.024936][T21187] ? __dev_queue_xmit+0x29b/0x37f0 [ 542.024961][T21187] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 542.024976][T21187] rtnetlink_rcv_msg+0x7b9/0xc00 [ 542.024995][T21187] ? rtnetlink_rcv_msg+0x1c9/0xc00 [ 542.025010][T21187] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 542.025026][T21187] ? ref_tracker_free+0x689/0x830 [ 542.025043][T21187] ? __pfx_ref_tracker_free+0x10/0x10 [ 542.025063][T21187] netlink_rcv_skb+0x226/0x4a0 [ 542.025075][T21187] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 542.025093][T21187] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 542.025111][T21187] ? netlink_deliver_tap+0x2e/0x1b0 [ 542.025122][T21187] ? netlink_deliver_tap+0x2e/0x1b0 [ 542.025136][T21187] netlink_unicast+0x7bb/0x940 [ 542.025152][T21187] netlink_sendmsg+0x813/0xb40 [ 542.025169][T21187] ? __pfx_netlink_sendmsg+0x10/0x10 [ 542.025183][T21187] ? aa_sock_msg_perm+0xf1/0x1b0 [ 542.025204][T21187] ? __pfx_netlink_sendmsg+0x10/0x10 [ 542.025215][T21187] sock_sendmsg_nosec+0x13a/0x180 [ 542.025232][T21187] ____sys_sendmsg+0x54e/0x850 [ 542.025246][T21187] ? __pfx_____sys_sendmsg+0x10/0x10 [ 542.025262][T21187] ? import_iovec+0x73/0xa0 [ 542.025275][T21187] ___sys_sendmsg+0x2a5/0x360 [ 542.025286][T21187] ? __lock_acquire+0x683/0x2cf0 [ 542.025299][T21187] ? __pfx____sys_sendmsg+0x10/0x10 [ 542.025313][T21187] ? kstrtouint+0x6e/0xe0 [ 542.025340][T21187] ? __fget_files+0x2a/0x420 [ 542.025350][T21187] ? __fget_files+0x3a2/0x420 [ 542.025371][T21187] __sys_sendmmsg+0x273/0x4d0 [ 542.025386][T21187] ? __pfx___sys_sendmmsg+0x10/0x10 [ 542.025402][T21187] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 542.025426][T21187] ? ksys_write+0x242/0x270 [ 542.025445][T21187] ? __pfx_ksys_write+0x10/0x10 [ 542.025474][T21187] __x64_sys_sendmmsg+0xa0/0xc0 [ 542.025494][T21187] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 542.025514][T21187] do_syscall_64+0x174/0x580 [ 542.025531][T21187] ? trace_irq_disable+0x3b/0x140 [ 542.025549][T21187] ? clear_bhb_loop+0x40/0x90 [ 542.025573][T21187] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 542.025587][T21187] RIP: 0033:0x7f48fe39ce59 [ 542.025599][T21187] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 542.025608][T21187] RSP: 002b:00007f48ff17d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 542.025620][T21187] RAX: ffffffffffffffda RBX: 00007f48fe615fa0 RCX: 00007f48fe39ce59 [ 542.025628][T21187] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000007 [ 542.025636][T21187] RBP: 00007f48ff17d090 R08: 0000000000000000 R09: 0000000000000000 [ 542.025642][T21187] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 542.025649][T21187] R13: 00007f48fe616038 R14: 00007f48fe615fa0 R15: 00007ffd95b568a8 [ 542.025665][T21187] [ 542.463999][T21192] syzkaller1: entered allmulticast mode [ 544.347451][T21148] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 544.632051][T21215] netlink: 'syz.0.4534': attribute type 30 has an invalid length. [ 544.654489][T21215] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4534'. [ 544.773615][T21226] netlink: 'syz.1.4539': attribute type 3 has an invalid length. [ 544.799739][T21215] bond4: option arp_missed_max: mode dependency failed, not supported in mode 802.3ad(4) [ 544.818950][T21226] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4539'. [ 544.842588][T21215] bond4 (unregistering): Released all slaves [ 545.032642][T21238] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4545'. [ 545.083666][T21238] macvlan4: entered allmulticast mode [ 545.150008][T21243] IPv6: Can't replace route, no match found [ 545.156405][T21244] IPv6: Can't replace route, no match found [ 545.162691][T21243] IPv6: Can't replace route, no match found [ 545.170002][T21244] IPv6: Can't replace route, no match found [ 545.222024][T21246] FAULT_INJECTION: forcing a failure. [ 545.222024][T21246] name failslab, interval 1, probability 0, space 0, times 0 [ 545.236370][T21246] CPU: 0 UID: 0 PID: 21246 Comm: syz.1.4548 Not tainted syzkaller #0 PREEMPT(full) [ 545.236398][T21246] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 545.236409][T21246] Call Trace: [ 545.236417][T21246] [ 545.236425][T21246] dump_stack_lvl+0xe8/0x150 [ 545.236455][T21246] should_fail_ex+0x40c/0x560 [ 545.236486][T21246] should_failslab+0xa8/0x100 [ 545.236510][T21246] kmem_cache_alloc_noprof+0xa6/0x5f0 [ 545.236535][T21246] ? can_rx_register+0x6c1/0x7a0 [ 545.236560][T21246] ? can_rx_register+0x16d/0x7a0 [ 545.236583][T21246] ? can_rx_register+0x16d/0x7a0 [ 545.236612][T21246] can_rx_register+0x16d/0x7a0 [ 545.236637][T21246] ? __pfx_raw_rcv+0x10/0x10 [ 545.236667][T21246] raw_enable_filters+0x98/0x200 [ 545.236701][T21246] raw_setsockopt+0xcc2/0x12f0 [ 545.236730][T21246] ? __pfx_aa_sk_perm+0x10/0x10 [ 545.236752][T21246] ? __pfx_raw_setsockopt+0x10/0x10 [ 545.236779][T21246] ? __fget_files+0x2a/0x420 [ 545.236796][T21246] ? aa_sock_opt_perm+0xff/0x1a0 [ 545.236823][T21246] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 545.236848][T21246] ? __pfx_raw_setsockopt+0x10/0x10 [ 545.236876][T21246] do_sock_setsockopt+0x17c/0x1b0 [ 545.236902][T21246] __x64_sys_setsockopt+0x13d/0x1b0 [ 545.236926][T21246] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 545.236947][T21246] do_syscall_64+0x174/0x580 [ 545.236965][T21246] ? trace_irq_disable+0x3b/0x140 [ 545.236984][T21246] ? clear_bhb_loop+0x40/0x90 [ 545.237009][T21246] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 545.237028][T21246] RIP: 0033:0x7f48fe39ce59 [ 545.237046][T21246] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 545.237062][T21246] RSP: 002b:00007f48ff17d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 545.237090][T21246] RAX: ffffffffffffffda RBX: 00007f48fe615fa0 RCX: 00007f48fe39ce59 [ 545.237105][T21246] RDX: 0000000000000001 RSI: 0000000000000065 RDI: 0000000000000003 [ 545.237117][T21246] RBP: 00007f48ff17d090 R08: 0000000000000f00 R09: 0000000000000000 [ 545.237129][T21246] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000001 [ 545.237142][T21246] R13: 00007f48fe616038 R14: 00007f48fe615fa0 R15: 00007ffd95b568a8 [ 545.237174][T21246] [ 545.643909][T21252] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 545.702728][T21259] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4553'. [ 545.723026][T21259] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4553'. [ 545.830278][T21267] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4556'. [ 546.255294][T21277] macvtap1: entered promiscuous mode [ 546.271757][T21277] vlan0: entered promiscuous mode [ 546.297203][T21277] vlan0: left promiscuous mode [ 546.496459][T21284] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 546.949600][T21297] netlink: 'syz.2.4562': attribute type 30 has an invalid length. [ 546.964737][T21297] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4562'. [ 547.056530][T21297] bond4: option arp_missed_max: mode dependency failed, not supported in mode 802.3ad(4) [ 547.173855][T21297] bond4 (unregistering): Released all slaves [ 547.362869][T21315] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4568'. [ 547.396480][T21315] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4568'. [ 547.436500][T21310] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4567'. [ 547.670487][T21331] tipc: Enabling of bearer rejected, failed to enable media [ 547.811944][T21333] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4572'. [ 547.842820][T21333] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4572'. [ 548.155100][T21340] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4574'. [ 548.725106][T21363] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4578'. [ 548.876648][T21368] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 549.055195][T21365] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4578'. [ 549.181562][T21372] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4587'. [ 549.686200][T21393] macvlan5: entered allmulticast mode [ 549.833044][T21402] macvtap1: entered promiscuous mode [ 549.839724][T21402] vlan0: entered promiscuous mode [ 549.851526][T21402] vlan0: left promiscuous mode [ 550.104528][T21417] netlink: 'syz.1.4606': attribute type 2 has an invalid length. [ 550.311344][T21424] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 550.440853][T21435] netlink: 'syz.3.4616': attribute type 1 has an invalid length. [ 550.522377][T21435] 8021q: adding VLAN 0 to HW filter on device bond8 [ 550.601785][T21441] bond8: (slave veth9): Enslaving as an active interface with a down link [ 550.826735][T21451] netlink: 'syz.0.4619': attribute type 5 has an invalid length. [ 551.029968][T21435] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 551.058792][T21435] bond8: (slave batadv1): making interface the new active one [ 551.082852][T21435] batadv1: entered promiscuous mode [ 551.101667][T21435] bond8: (slave batadv1): Enslaving as an active interface with an up link [ 551.140699][T21441] bond8 (unregistering): (slave veth9): Releasing active interface [ 551.153487][T21441] bond8 (unregistering): (slave batadv1): Releasing active interface [ 551.164431][T21441] bond8 (unregistering): Released all slaves [ 551.216594][T21458] macvtap1: entered promiscuous mode [ 551.222052][T21458] vlan0: entered promiscuous mode [ 551.259396][T21458] vlan0: left promiscuous mode [ 551.750838][T21482] macvtap1: entered promiscuous mode [ 551.756696][T21482] vlan0: entered promiscuous mode [ 551.806697][T21482] vlan0: left promiscuous mode [ 551.865828][T21484] FAULT_INJECTION: forcing a failure. [ 551.865828][T21484] name failslab, interval 1, probability 0, space 0, times 0 [ 551.902128][T21484] CPU: 1 UID: 0 PID: 21484 Comm: syz.1.4633 Not tainted syzkaller #0 PREEMPT(full) [ 551.902156][T21484] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 551.902167][T21484] Call Trace: [ 551.902175][T21484] [ 551.902184][T21484] dump_stack_lvl+0xe8/0x150 [ 551.902214][T21484] should_fail_ex+0x40c/0x560 [ 551.902245][T21484] should_failslab+0xa8/0x100 [ 551.902269][T21484] kmem_cache_alloc_noprof+0xa6/0x5f0 [ 551.902298][T21484] ? skb_clone+0x212/0x3a0 [ 551.902318][T21484] ? skb_clone+0x212/0x3a0 [ 551.902345][T21484] skb_clone+0x212/0x3a0 [ 551.902371][T21484] __netlink_deliver_tap+0x413/0x860 [ 551.902405][T21484] ? netlink_deliver_tap+0x2e/0x1b0 [ 551.902429][T21484] netlink_deliver_tap+0x19c/0x1b0 [ 551.902452][T21484] netlink_unicast+0x77f/0x940 [ 551.902483][T21484] netlink_sendmsg+0x813/0xb40 [ 551.902515][T21484] ? __pfx_netlink_sendmsg+0x10/0x10 [ 551.902542][T21484] ? aa_sock_msg_perm+0xf1/0x1b0 [ 551.902572][T21484] ? __pfx_netlink_sendmsg+0x10/0x10 [ 551.902593][T21484] sock_sendmsg_nosec+0x13a/0x180 [ 551.902622][T21484] ____sys_sendmsg+0x54e/0x850 [ 551.902650][T21484] ? __pfx_____sys_sendmsg+0x10/0x10 [ 551.902688][T21484] ? import_iovec+0x73/0xa0 [ 551.902712][T21484] ___sys_sendmsg+0x2a5/0x360 [ 551.902734][T21484] ? __lock_acquire+0x683/0x2cf0 [ 551.902760][T21484] ? __pfx____sys_sendmsg+0x10/0x10 [ 551.902779][T21484] ? __lock_acquire+0x683/0x2cf0 [ 551.902804][T21484] ? kstrtouint+0x6e/0xe0 [ 551.902871][T21484] __sys_sendmmsg+0x273/0x4d0 [ 551.902898][T21484] ? __pfx___sys_sendmmsg+0x10/0x10 [ 551.902929][T21484] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 551.902974][T21484] ? ksys_write+0x242/0x270 [ 551.902999][T21484] ? __pfx_ksys_write+0x10/0x10 [ 551.903029][T21484] __x64_sys_sendmmsg+0xa0/0xc0 [ 551.903050][T21484] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 551.903070][T21484] do_syscall_64+0x174/0x580 [ 551.903086][T21484] ? trace_irq_disable+0x3b/0x140 [ 551.903103][T21484] ? clear_bhb_loop+0x40/0x90 [ 551.903126][T21484] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 551.903146][T21484] RIP: 0033:0x7f48fe39ce59 [ 551.903163][T21484] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 551.903180][T21484] RSP: 002b:00007f48ff17d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 551.903201][T21484] RAX: ffffffffffffffda RBX: 00007f48fe615fa0 RCX: 00007f48fe39ce59 [ 551.903222][T21484] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 0000000000000007 [ 551.903236][T21484] RBP: 00007f48ff17d090 R08: 0000000000000000 R09: 0000000000000000 [ 551.903248][T21484] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 551.903260][T21484] R13: 00007f48fe616038 R14: 00007f48fe615fa0 R15: 00007ffd95b568a8 [ 551.903292][T21484] [ 552.281514][T21498] netlink: 'syz.1.4636': attribute type 1 has an invalid length. [ 552.324519][T21498] 8021q: adding VLAN 0 to HW filter on device bond5 [ 552.376861][T21505] bond3: (slave veth0_to_bond): Releasing backup interface [ 552.390160][T21509] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input7 [ 552.407307][T21505] bond5: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 552.477894][T21503] macvtap1: entered promiscuous mode [ 552.483335][T21503] vlan0: entered promiscuous mode [ 552.499115][T21503] vlan0: left promiscuous mode [ 552.635803][T21519] RDS: rds_bind could not find a transport for ::ffff:10.1.1.3, load rds_tcp or rds_rdma? [ 553.116285][T21544] __nla_validate_parse: 8 callbacks suppressed [ 553.116306][T21544] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4649'. [ 553.252916][T21544] netlink: 'syz.1.4649': attribute type 1 has an invalid length. [ 553.433559][T21561] netlink: 'syz.3.4654': attribute type 1 has an invalid length. [ 553.578284][T21569] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4655'. [ 553.605197][T21561] 8021q: adding VLAN 0 to HW filter on device bond8 [ 553.771743][T21568] bond6: (slave veth0_to_bond): Releasing backup interface [ 553.787966][T21568] bond8: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 553.837938][T21572] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4657'. [ 554.008819][T21589] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4659'. [ 554.041933][T21591] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4660'. [ 554.076226][T21591] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4660'. [ 554.238300][T21596] lo speed is unknown, defaulting to 1000 [ 554.860695][T21625] netlink: 'syz.0.4670': attribute type 30 has an invalid length. [ 554.903174][T21625] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4670'. [ 555.021400][T21625] bond4: option arp_missed_max: mode dependency failed, not supported in mode 802.3ad(4) [ 555.078386][T21625] bond4 (unregistering): Released all slaves [ 555.277125][T21599] netlink: 80 bytes leftover after parsing attributes in process `syz.4.4661'. [ 555.293122][T21633] syzkaller0: entered promiscuous mode [ 555.298803][T21633] syzkaller0: entered allmulticast mode [ 555.329576][T21649] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4675'. [ 557.337273][ T50] Bluetooth: hci0: command tx timeout [ 557.732411][T21673] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4680'. [ 558.217073][T21692] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4684'. [ 558.227800][T21692] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4684'. [ 558.665894][T21703] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4686'. [ 558.973146][T21714] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4691'. [ 558.998131][T21716] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4692'. [ 559.100177][T21725] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4693'. [ 559.103646][T21719] gretap0: left promiscuous mode [ 559.230965][T21719] ip6gretap0: left promiscuous mode [ 559.305340][T21719] 8021q: adding VLAN 0 to HW filter on device bond0 [ 559.343841][T21719] 8021q: adding VLAN 0 to HW filter on device team0 [ 559.360451][T21742] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4698'. [ 559.414164][T21719] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 559.560014][T21719] veth1_to_team: left promiscuous mode [ 559.573290][T21719] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 559.584134][T21719] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 559.605225][T21719] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 559.616230][T21719] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 559.632389][T21719] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 559.710747][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 559.717948][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 559.732741][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 559.739943][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 559.761563][T21754] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4700'. [ 559.971424][T21764] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4704'. [ 560.036558][T21768] netlink: 'syz.2.4705': attribute type 4 has an invalid length. [ 560.359264][T21782] netlink: 'syz.4.4709': attribute type 2 has an invalid length. [ 560.490717][T21784] netlink: 'syz.3.4710': attribute type 142 has an invalid length. [ 560.669204][T21791] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4711'. [ 561.211223][T21810] FAULT_INJECTION: forcing a failure. [ 561.211223][T21810] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 561.234067][T21810] CPU: 0 UID: 0 PID: 21810 Comm: syz.1.4718 Not tainted syzkaller #0 PREEMPT(full) [ 561.234102][T21810] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 561.234114][T21810] Call Trace: [ 561.234122][T21810] [ 561.234130][T21810] dump_stack_lvl+0xe8/0x150 [ 561.234157][T21810] should_fail_ex+0x40c/0x560 [ 561.234183][T21810] _copy_from_user+0x2d/0xb0 [ 561.234201][T21810] __sys_bpf+0x2e7/0xd90 [ 561.234224][T21810] ? __pfx___sys_bpf+0x10/0x10 [ 561.234248][T21810] ? __fget_files+0x2a/0x420 [ 561.234278][T21810] ? ksys_write+0x242/0x270 [ 561.234299][T21810] ? __pfx_ksys_write+0x10/0x10 [ 561.234321][T21810] __x64_sys_bpf+0xba/0xd0 [ 561.234344][T21810] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 561.234361][T21810] do_syscall_64+0x174/0x580 [ 561.234376][T21810] ? trace_irq_disable+0x3b/0x140 [ 561.234391][T21810] ? clear_bhb_loop+0x40/0x90 [ 561.234411][T21810] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 561.234427][T21810] RIP: 0033:0x7f48fe39ce59 [ 561.234442][T21810] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 561.234456][T21810] RSP: 002b:00007f48ff17d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 561.234474][T21810] RAX: ffffffffffffffda RBX: 00007f48fe615fa0 RCX: 00007f48fe39ce59 [ 561.234486][T21810] RDX: 0000000000000050 RSI: 00002000000000c0 RDI: 0000000000000000 [ 561.234496][T21810] RBP: 00007f48ff17d090 R08: 0000000000000000 R09: 0000000000000000 [ 561.234506][T21810] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 561.234516][T21810] R13: 00007f48fe616038 R14: 00007f48fe615fa0 R15: 00007ffd95b568a8 [ 561.234541][T21810] [ 561.493816][T21816] netlink: 'syz.0.4721': attribute type 1 has an invalid length. [ 561.610226][T21819] gretap1: entered allmulticast mode [ 561.656489][T21819] bond4: (slave gretap1): making interface the new active one [ 561.685267][T21819] bond4: (slave gretap1): Enslaving as an active interface with an up link [ 561.869710][T21818] syzkaller0: entered promiscuous mode [ 561.875442][T21818] syzkaller0: entered allmulticast mode [ 561.905043][T21839] macvtap1: entered promiscuous mode [ 561.915997][T21839] vlan0: entered promiscuous mode [ 561.926467][T21839] vlan0: left promiscuous mode [ 562.151212][T21856] netlink: 'syz.0.4733': attribute type 2 has an invalid length. [ 565.393715][T21892] netlink: 'syz.1.4745': attribute type 4 has an invalid length. [ 565.539196][T21904] netlink: 'syz.0.4749': attribute type 1 has an invalid length. [ 565.576170][T21904] 8021q: adding VLAN 0 to HW filter on device bond5 [ 565.602167][T21904] __nla_validate_parse: 6 callbacks suppressed [ 565.602186][T21904] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4749'. [ 565.633202][T21904] bond5: (slave dummy0): Enslaving as a backup interface with an up link [ 565.641364][T21905] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 565.695083][ T7141] bond5: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 565.743644][T21914] FAULT_INJECTION: forcing a failure. [ 565.743644][T21914] name failslab, interval 1, probability 0, space 0, times 0 [ 565.765635][T21914] CPU: 1 UID: 0 PID: 21914 Comm: syz.3.4751 Not tainted syzkaller #0 PREEMPT(full) [ 565.765652][T21914] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 565.765659][T21914] Call Trace: [ 565.765664][T21914] [ 565.765669][T21914] dump_stack_lvl+0xe8/0x150 [ 565.765687][T21914] should_fail_ex+0x40c/0x560 [ 565.765706][T21914] should_failslab+0xa8/0x100 [ 565.765720][T21914] kmem_cache_alloc_noprof+0xa6/0x5f0 [ 565.765735][T21914] ? can_rx_register+0x6c1/0x7a0 [ 565.765749][T21914] ? can_rx_register+0x16d/0x7a0 [ 565.765761][T21914] ? can_rx_register+0x16d/0x7a0 [ 565.765780][T21914] can_rx_register+0x16d/0x7a0 [ 565.765794][T21914] ? __pfx_raw_rcv+0x10/0x10 [ 565.765811][T21914] raw_enable_filters+0x98/0x200 [ 565.765830][T21914] raw_setsockopt+0xcc2/0x12f0 [ 565.765846][T21914] ? __pfx_aa_sk_perm+0x10/0x10 [ 565.765859][T21914] ? __pfx_raw_setsockopt+0x10/0x10 [ 565.765873][T21914] ? __fget_files+0x2a/0x420 [ 565.765883][T21914] ? aa_sock_opt_perm+0xff/0x1a0 [ 565.765897][T21914] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 565.765911][T21914] ? __pfx_raw_setsockopt+0x10/0x10 [ 565.765927][T21914] do_sock_setsockopt+0x17c/0x1b0 [ 565.765941][T21914] __x64_sys_setsockopt+0x13d/0x1b0 [ 565.765953][T21914] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 565.765965][T21914] do_syscall_64+0x174/0x580 [ 565.765974][T21914] ? trace_irq_disable+0x3b/0x140 [ 565.765985][T21914] ? clear_bhb_loop+0x40/0x90 [ 565.765998][T21914] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 565.766009][T21914] RIP: 0033:0x7f7b7b39ce59 [ 565.766020][T21914] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 565.766029][T21914] RSP: 002b:00007f7b7c2e3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 565.766041][T21914] RAX: ffffffffffffffda RBX: 00007f7b7b615fa0 RCX: 00007f7b7b39ce59 [ 565.766049][T21914] RDX: 0000000000000001 RSI: 0000000000000065 RDI: 0000000000000003 [ 565.766056][T21914] RBP: 00007f7b7c2e3090 R08: 0000000000000f00 R09: 0000000000000000 [ 565.766063][T21914] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000002 [ 565.766069][T21914] R13: 00007f7b7b616038 R14: 00007f7b7b615fa0 R15: 00007fff66d379b8 [ 565.766086][T21914] [ 566.005977][ T776] bond5: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 566.163755][T21929] netlink: 'syz.3.4758': attribute type 6 has an invalid length. [ 566.336983][T21936] netlink: 'syz.3.4760': attribute type 2 has an invalid length. [ 567.058672][T21960] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4770'. [ 567.072572][T21960] netlink: 'syz.1.4770': attribute type 1 has an invalid length. [ 567.117311][T21960] 8021q: adding VLAN 0 to HW filter on device bond7 [ 567.188213][T21967] FAULT_INJECTION: forcing a failure. [ 567.188213][T21967] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 567.201720][T21967] CPU: 0 UID: 0 PID: 21967 Comm: syz.4.4771 Not tainted syzkaller #0 PREEMPT(full) [ 567.201744][T21967] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 567.201754][T21967] Call Trace: [ 567.201760][T21967] [ 567.201768][T21967] dump_stack_lvl+0xe8/0x150 [ 567.201796][T21967] should_fail_ex+0x40c/0x560 [ 567.201827][T21967] _copy_to_user+0x31/0xb0 [ 567.201851][T21967] simple_read_from_buffer+0xe1/0x170 [ 567.201876][T21967] proc_fail_nth_read+0x1bb/0x230 [ 567.201900][T21967] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 567.201923][T21967] ? rw_verify_area+0x24a/0x4c0 [ 567.201946][T21967] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 567.201965][T21967] vfs_read+0x213/0xa80 [ 567.201993][T21967] ? __pfx___mutex_lock+0x10/0x10 [ 567.202014][T21967] ? __pfx_vfs_read+0x10/0x10 [ 567.202037][T21967] ? __fget_files+0x2a/0x420 [ 567.202061][T21967] ? __fget_files+0x3a2/0x420 [ 567.202078][T21967] ? __fget_files+0x2a/0x420 [ 567.202117][T21967] ksys_read+0x150/0x270 [ 567.202143][T21967] ? __pfx_ksys_read+0x10/0x10 [ 567.202174][T21967] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 567.202196][T21967] do_syscall_64+0x174/0x580 [ 567.202212][T21967] ? trace_irq_disable+0x3b/0x140 [ 567.202231][T21967] ? clear_bhb_loop+0x40/0x90 [ 567.202253][T21967] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 567.202271][T21967] RIP: 0033:0x7f124e75d68e [ 567.202287][T21967] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 567.202301][T21967] RSP: 002b:00007f124f64ffe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 567.202319][T21967] RAX: ffffffffffffffda RBX: 00007f124f6506c0 RCX: 00007f124e75d68e [ 567.202330][T21967] RDX: 000000000000000f RSI: 00007f124f6500a0 RDI: 0000000000000003 [ 567.202340][T21967] RBP: 00007f124f650090 R08: 0000000000000000 R09: 0000000000000000 [ 567.202351][T21967] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 567.202360][T21967] R13: 00007f124ea16038 R14: 00007f124ea15fa0 R15: 00007ffcd6be5968 [ 567.202387][T21967] [ 567.603482][T21974] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4774'. [ 567.780954][T21986] macvtap1: entered promiscuous mode [ 567.791890][T21986] vlan0: entered promiscuous mode [ 567.818810][T21986] vlan0: left promiscuous mode [ 567.914272][T21994] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4782'. [ 567.981137][T21992] lo speed is unknown, defaulting to 1000 [ 568.107376][T22000] netlink: 'syz.1.4784': attribute type 2 has an invalid length. [ 568.127100][T22003] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4785'. [ 568.144918][T22003] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4785'. [ 568.155890][T22004] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4786'. [ 568.190887][T22004] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4786'. [ 568.262631][T22013] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 568.467902][T21992] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4781'. [ 568.475712][T22022] netlink: 'syz.2.4789': attribute type 4 has an invalid length. [ 568.484979][T21992] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4781'. [ 568.623337][T22025] netlink: 'syz.2.4790': attribute type 12 has an invalid length. [ 569.005734][T22040] macvtap1: entered promiscuous mode [ 569.023635][T22040] vlan0: entered promiscuous mode [ 569.067240][T22040] vlan0: left promiscuous mode [ 569.269172][T22055] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 569.384047][T22063] netlink: 'syz.0.4806': attribute type 1 has an invalid length. [ 569.448450][T22063] 8021q: adding VLAN 0 to HW filter on device bond6 [ 569.489783][T22072] bond6: (slave geneve3): making interface the new active one [ 569.499889][T22072] bond6: (slave geneve3): Enslaving as an active interface with an up link [ 569.513469][ T776] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 569.537355][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 569.546262][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 569.567615][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 569.638148][T22079] netlink: 'syz.2.4809': attribute type 30 has an invalid length. [ 569.703939][T22079] bond4: option arp_missed_max: mode dependency failed, not supported in mode 802.3ad(4) [ 569.719062][T22079] bond4 (unregistering): Released all slaves [ 570.221073][T22101] syzkaller1: entered promiscuous mode [ 570.227018][T22101] syzkaller1: entered allmulticast mode [ 570.469475][T22116] validate_nla: 1 callbacks suppressed [ 570.469494][T22116] netlink: 'syz.1.4821': attribute type 3 has an invalid length. [ 570.499681][T22116] netlink: 'syz.1.4821': attribute type 3 has an invalid length. [ 570.605403][T22123] syzkaller1: entered promiscuous mode [ 570.624587][T22123] syzkaller1: entered allmulticast mode [ 570.718030][T22131] __nla_validate_parse: 9 callbacks suppressed [ 570.718050][T22131] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4828'. [ 570.828210][T22142] netlink: 56 bytes leftover after parsing attributes in process `syz.1.4830'. [ 570.905511][T22137] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 571.068771][T22139] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4828'. [ 571.372635][T22152] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4833'. [ 571.388891][T22155] Bluetooth: MGMT ver 1.23 [ 571.406046][T22152] netlink: 'syz.4.4833': attribute type 1 has an invalid length. [ 571.418392][T22155] Bluetooth: hci1: too big key_count value 29096 [ 571.543979][T22152] 8021q: adding VLAN 0 to HW filter on device bond10 [ 571.825632][T18420] IPVS: starting estimator thread 0... [ 571.831681][T22182] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4840'. [ 571.925021][T22183] IPVS: using max 26 ests per chain, 62400 per kthread [ 572.166131][T22197] netlink: 'syz.4.4846': attribute type 3 has an invalid length. [ 572.169540][T22198] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4847'. [ 572.174285][T22197] netlink: 'syz.4.4846': attribute type 3 has an invalid length. [ 573.092075][T22238] netlink: 'syz.4.4862': attribute type 2 has an invalid length. [ 573.202510][T22244] netlink: 140 bytes leftover after parsing attributes in process `syz.1.4864'. [ 573.212790][T22244] FAULT_INJECTION: forcing a failure. [ 573.212790][T22244] name failslab, interval 1, probability 0, space 0, times 0 [ 573.230328][T22244] CPU: 1 UID: 0 PID: 22244 Comm: syz.1.4864 Not tainted syzkaller #0 PREEMPT(full) [ 573.230353][T22244] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 573.230365][T22244] Call Trace: [ 573.230373][T22244] [ 573.230381][T22244] dump_stack_lvl+0xe8/0x150 [ 573.230411][T22244] should_fail_ex+0x40c/0x560 [ 573.230443][T22244] should_failslab+0xa8/0x100 [ 573.230467][T22244] kmem_cache_alloc_node_noprof+0xb3/0x610 [ 573.230494][T22244] ? local_lock_release+0x9c/0x160 [ 573.230524][T22244] ? __alloc_skb+0x1d7/0x7a0 [ 573.230540][T22244] ? __alloc_skb+0x1d7/0x7a0 [ 573.230564][T22244] __alloc_skb+0x1d7/0x7a0 [ 573.230586][T22244] netlink_ack+0x136/0xb30 [ 573.230605][T22244] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 573.230641][T22244] ? ref_tracker_free+0x689/0x830 [ 573.230669][T22244] ? __pfx_ref_tracker_free+0x10/0x10 [ 573.230704][T22244] netlink_rcv_skb+0x2a4/0x4a0 [ 573.230724][T22244] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 573.230753][T22244] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 573.230781][T22244] ? netlink_deliver_tap+0x2e/0x1b0 [ 573.230801][T22244] ? netlink_deliver_tap+0x2e/0x1b0 [ 573.230826][T22244] netlink_unicast+0x7bb/0x940 [ 573.230854][T22244] netlink_sendmsg+0x813/0xb40 [ 573.230884][T22244] ? __pfx_netlink_sendmsg+0x10/0x10 [ 573.230907][T22244] ? aa_sock_msg_perm+0xf1/0x1b0 [ 573.230932][T22244] ? __pfx_netlink_sendmsg+0x10/0x10 [ 573.230952][T22244] sock_sendmsg_nosec+0x13a/0x180 [ 573.230980][T22244] ____sys_sendmsg+0x54e/0x850 [ 573.231006][T22244] ? __pfx_____sys_sendmsg+0x10/0x10 [ 573.231034][T22244] ? import_iovec+0x73/0xa0 [ 573.231057][T22244] ___sys_sendmsg+0x2a5/0x360 [ 573.231076][T22244] ? __lock_acquire+0x683/0x2cf0 [ 573.231100][T22244] ? __pfx____sys_sendmsg+0x10/0x10 [ 573.231153][T22244] ? __fget_files+0x2a/0x420 [ 573.231170][T22244] ? __fget_files+0x3a2/0x420 [ 573.231196][T22244] __x64_sys_sendmsg+0x1b1/0x290 [ 573.231219][T22244] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 573.231254][T22244] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 573.231272][T22244] do_syscall_64+0x174/0x580 [ 573.231287][T22244] ? trace_irq_disable+0x3b/0x140 [ 573.231308][T22244] ? clear_bhb_loop+0x40/0x90 [ 573.231331][T22244] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 573.231349][T22244] RIP: 0033:0x7f48fe39ce59 [ 573.231367][T22244] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 573.231383][T22244] RSP: 002b:00007f48ff17d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 573.231404][T22244] RAX: ffffffffffffffda RBX: 00007f48fe615fa0 RCX: 00007f48fe39ce59 [ 573.231418][T22244] RDX: 0000000024040084 RSI: 0000200000000700 RDI: 0000000000000003 [ 573.231430][T22244] RBP: 00007f48ff17d090 R08: 0000000000000000 R09: 0000000000000000 [ 573.231442][T22244] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 573.231453][T22244] R13: 00007f48fe616038 R14: 00007f48fe615fa0 R15: 00007ffd95b568a8 [ 573.231480][T22244] [ 573.717545][T22250] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4866'. [ 573.754892][T22252] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 574.040980][T22266] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4872'. [ 574.070090][T22269] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4871'. [ 574.329925][T22273] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 574.371450][T22273] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 574.402927][T22273] bond0 (unregistering): Released all slaves [ 574.456297][T22266] macsec1: entered promiscuous mode [ 575.114307][T22303] netlink: 'syz.4.4885': attribute type 2 has an invalid length. [ 575.198479][T22308] FAULT_INJECTION: forcing a failure. [ 575.198479][T22308] name failslab, interval 1, probability 0, space 0, times 0 [ 575.232844][T22308] CPU: 1 UID: 0 PID: 22308 Comm: syz.3.4887 Not tainted syzkaller #0 PREEMPT(full) [ 575.232872][T22308] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 575.232884][T22308] Call Trace: [ 575.232892][T22308] [ 575.232900][T22308] dump_stack_lvl+0xe8/0x150 [ 575.232928][T22308] should_fail_ex+0x40c/0x560 [ 575.232958][T22308] should_failslab+0xa8/0x100 [ 575.232983][T22308] kmem_cache_alloc_node_noprof+0xb3/0x610 [ 575.233009][T22308] ? local_lock_release+0x9c/0x160 [ 575.233037][T22308] ? __alloc_skb+0x1d7/0x7a0 [ 575.233052][T22308] ? __alloc_skb+0x1d7/0x7a0 [ 575.233074][T22308] __alloc_skb+0x1d7/0x7a0 [ 575.233093][T22308] netlink_ack+0x136/0xb30 [ 575.233111][T22308] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 575.233137][T22308] ? ref_tracker_free+0x689/0x830 [ 575.233175][T22308] ? __pfx_ref_tracker_free+0x10/0x10 [ 575.233209][T22308] netlink_rcv_skb+0x2a4/0x4a0 [ 575.233232][T22308] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 575.233267][T22308] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 575.233301][T22308] ? netlink_deliver_tap+0x2e/0x1b0 [ 575.233322][T22308] ? netlink_deliver_tap+0x2e/0x1b0 [ 575.233347][T22308] netlink_unicast+0x7bb/0x940 [ 575.233377][T22308] netlink_sendmsg+0x813/0xb40 [ 575.233408][T22308] ? __pfx_netlink_sendmsg+0x10/0x10 [ 575.233431][T22308] ? aa_sock_msg_perm+0xf1/0x1b0 [ 575.233458][T22308] ? __pfx_netlink_sendmsg+0x10/0x10 [ 575.233475][T22308] sock_sendmsg_nosec+0x13a/0x180 [ 575.233504][T22308] ____sys_sendmsg+0x54e/0x850 [ 575.233528][T22308] ? __pfx_____sys_sendmsg+0x10/0x10 [ 575.233558][T22308] ? import_iovec+0x73/0xa0 [ 575.233582][T22308] ___sys_sendmsg+0x2a5/0x360 [ 575.233610][T22308] ? __lock_acquire+0x683/0x2cf0 [ 575.233634][T22308] ? __pfx____sys_sendmsg+0x10/0x10 [ 575.233688][T22308] ? __fget_files+0x2a/0x420 [ 575.233706][T22308] ? __fget_files+0x3a2/0x420 [ 575.233737][T22308] __x64_sys_sendmsg+0x1b1/0x290 [ 575.233762][T22308] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 575.233800][T22308] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 575.233821][T22308] do_syscall_64+0x174/0x580 [ 575.233839][T22308] ? trace_irq_disable+0x3b/0x140 [ 575.233857][T22308] ? clear_bhb_loop+0x40/0x90 [ 575.233878][T22308] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 575.233896][T22308] RIP: 0033:0x7f7b7b39ce59 [ 575.233913][T22308] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 575.233930][T22308] RSP: 002b:00007f7b7c2e3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 575.233950][T22308] RAX: ffffffffffffffda RBX: 00007f7b7b615fa0 RCX: 00007f7b7b39ce59 [ 575.233965][T22308] RDX: 0000000024040084 RSI: 0000200000000700 RDI: 0000000000000003 [ 575.233978][T22308] RBP: 00007f7b7c2e3090 R08: 0000000000000000 R09: 0000000000000000 [ 575.233990][T22308] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 575.234002][T22308] R13: 00007f7b7b616038 R14: 00007f7b7b615fa0 R15: 00007fff66d379b8 [ 575.234032][T22308] [ 575.759459][T22321] __nla_validate_parse: 5 callbacks suppressed [ 575.759478][T22321] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4892'. [ 576.013984][T22336] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_hsr, syncid = 4, id = 0 [ 576.113174][T22323] lo speed is unknown, defaulting to 1000 [ 576.392437][T22353] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4899'. [ 576.493306][T22355] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4901'. [ 576.836803][T22369] netlink: 'syz.1.4906': attribute type 3 has an invalid length. [ 576.850900][T22369] netlink: 'syz.1.4906': attribute type 3 has an invalid length. [ 576.944992][T22370] lo speed is unknown, defaulting to 1000 [ 577.150650][T22377] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4910'. [ 577.373309][T22382] ip6tnl1: entered allmulticast mode [ 577.387496][T22385] FAULT_INJECTION: forcing a failure. [ 577.387496][T22385] name failslab, interval 1, probability 0, space 0, times 0 [ 577.434790][T22385] CPU: 0 UID: 0 PID: 22385 Comm: syz.2.4913 Not tainted syzkaller #0 PREEMPT(full) [ 577.434819][T22385] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 577.434830][T22385] Call Trace: [ 577.434838][T22385] [ 577.434847][T22385] dump_stack_lvl+0xe8/0x150 [ 577.434877][T22385] should_fail_ex+0x40c/0x560 [ 577.434908][T22385] should_failslab+0xa8/0x100 [ 577.434939][T22385] kmem_cache_alloc_noprof+0xa6/0x5f0 [ 577.434965][T22385] ? can_rx_register+0x6c1/0x7a0 [ 577.434986][T22385] ? can_rx_register+0x16d/0x7a0 [ 577.435006][T22385] ? can_rx_register+0x16d/0x7a0 [ 577.435033][T22385] can_rx_register+0x16d/0x7a0 [ 577.435058][T22385] ? __pfx_raw_rcv+0x10/0x10 [ 577.435087][T22385] raw_enable_filters+0x98/0x200 [ 577.435121][T22385] raw_setsockopt+0xcc2/0x12f0 [ 577.435151][T22385] ? __pfx_aa_sk_perm+0x10/0x10 [ 577.435173][T22385] ? __pfx_raw_setsockopt+0x10/0x10 [ 577.435199][T22385] ? __fget_files+0x2a/0x420 [ 577.435216][T22385] ? aa_sock_opt_perm+0xff/0x1a0 [ 577.435243][T22385] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 577.435267][T22385] ? __pfx_raw_setsockopt+0x10/0x10 [ 577.435295][T22385] do_sock_setsockopt+0x17c/0x1b0 [ 577.435322][T22385] __x64_sys_setsockopt+0x13d/0x1b0 [ 577.435343][T22385] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 577.435364][T22385] do_syscall_64+0x174/0x580 [ 577.435381][T22385] ? trace_irq_disable+0x3b/0x140 [ 577.435398][T22385] ? clear_bhb_loop+0x40/0x90 [ 577.435420][T22385] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 577.435439][T22385] RIP: 0033:0x7fc3a879ce59 [ 577.435457][T22385] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 577.435473][T22385] RSP: 002b:00007fc3a95c6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 577.435494][T22385] RAX: ffffffffffffffda RBX: 00007fc3a8a16090 RCX: 00007fc3a879ce59 [ 577.435508][T22385] RDX: 0000000000000001 RSI: 0000000000000065 RDI: 0000000000000003 [ 577.435520][T22385] RBP: 00007fc3a95c6090 R08: 0000000000000f00 R09: 0000000000000000 [ 577.435532][T22385] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000002 [ 577.435545][T22385] R13: 00007fc3a8a16128 R14: 00007fc3a8a16090 R15: 00007ffc8c345328 [ 577.435578][T22385] [ 577.438026][ T776] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 577.649069][T22394] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4915'. [ 577.723921][ T6696] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 577.723931][ T776] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 577.760004][T22401] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4916'. [ 577.856502][ T6696] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 577.883406][T22400] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4919'. [ 577.944877][T18425] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 577.962296][T22400] netlink: 'syz.2.4919': attribute type 1 has an invalid length. [ 578.017666][T22400] 8021q: adding VLAN 0 to HW filter on device bond4 [ 578.213491][T22426] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4925'. [ 578.257903][T22426] 8021q: adding VLAN 0 to HW filter on device bond8 [ 578.491345][T22426] bond8: (slave veth5): Enslaving as an active interface with an up link [ 578.548839][T22426] netlink: 200 bytes leftover after parsing attributes in process `syz.1.4925'. [ 578.612940][T22432] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4925'. [ 578.674050][T22432] bond8: (slave bridge2): Enslaving as an active interface with an up link [ 578.763380][T22443] vlan2: entered allmulticast mode [ 578.769271][T22443] bridge1: entered allmulticast mode [ 578.909740][T22445] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 578.990811][T22445] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 579.173384][T22460] FAULT_INJECTION: forcing a failure. [ 579.173384][T22460] name failslab, interval 1, probability 0, space 0, times 0 [ 579.188821][T22460] CPU: 0 UID: 0 PID: 22460 Comm: syz.3.4939 Not tainted syzkaller #0 PREEMPT(full) [ 579.188848][T22460] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 579.188859][T22460] Call Trace: [ 579.188867][T22460] [ 579.188875][T22460] dump_stack_lvl+0xe8/0x150 [ 579.188903][T22460] should_fail_ex+0x40c/0x560 [ 579.188933][T22460] should_failslab+0xa8/0x100 [ 579.188956][T22460] kmem_cache_alloc_noprof+0xa6/0x5f0 [ 579.188981][T22460] ? can_rx_register+0x6c1/0x7a0 [ 579.189006][T22460] ? can_rx_register+0x16d/0x7a0 [ 579.189027][T22460] ? can_rx_register+0x16d/0x7a0 [ 579.189057][T22460] can_rx_register+0x16d/0x7a0 [ 579.189082][T22460] ? __pfx_raw_rcv+0x10/0x10 [ 579.189111][T22460] raw_enable_filters+0x98/0x200 [ 579.189144][T22460] raw_setsockopt+0xcc2/0x12f0 [ 579.189172][T22460] ? __pfx_aa_sk_perm+0x10/0x10 [ 579.189192][T22460] ? __pfx_raw_setsockopt+0x10/0x10 [ 579.189218][T22460] ? __fget_files+0x2a/0x420 [ 579.189235][T22460] ? aa_sock_opt_perm+0xff/0x1a0 [ 579.189258][T22460] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 579.189282][T22460] ? __pfx_raw_setsockopt+0x10/0x10 [ 579.189310][T22460] do_sock_setsockopt+0x17c/0x1b0 [ 579.189335][T22460] __x64_sys_setsockopt+0x13d/0x1b0 [ 579.189358][T22460] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 579.189378][T22460] do_syscall_64+0x174/0x580 [ 579.189396][T22460] ? trace_irq_disable+0x3b/0x140 [ 579.189415][T22460] ? clear_bhb_loop+0x40/0x90 [ 579.189439][T22460] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 579.189458][T22460] RIP: 0033:0x7f7b7b39ce59 [ 579.189476][T22460] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 579.189492][T22460] RSP: 002b:00007f7b7c2e3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 579.189513][T22460] RAX: ffffffffffffffda RBX: 00007f7b7b615fa0 RCX: 00007f7b7b39ce59 [ 579.189527][T22460] RDX: 0000000000000001 RSI: 0000000000000065 RDI: 0000000000000003 [ 579.189538][T22460] RBP: 00007f7b7c2e3090 R08: 0000000000000f00 R09: 0000000000000000 [ 579.189551][T22460] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000002 [ 579.189563][T22460] R13: 00007f7b7b616038 R14: 00007f7b7b615fa0 R15: 00007fff66d379b8 [ 579.189594][T22460] [ 580.488771][T22527] netlink: 'syz.0.4960': attribute type 1 has an invalid length. [ 580.554839][T22527] 8021q: adding VLAN 0 to HW filter on device bond7 [ 580.608000][T22536] bond3: (slave veth0_to_bond): Releasing backup interface [ 580.668009][T22536] bond7: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 580.788770][T22546] __nla_validate_parse: 5 callbacks suppressed [ 580.788787][T22546] netlink: 2780 bytes leftover after parsing attributes in process `syz.2.4966'. [ 580.807139][T22554] netlink: 2780 bytes leftover after parsing attributes in process `syz.2.4966'. [ 581.270444][T22579] netlink: 'syz.0.4976': attribute type 10 has an invalid length. [ 581.291160][T22579] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4976'. [ 581.301350][T22579] dummy0: entered promiscuous mode [ 581.308493][T22579] bond5: (slave dummy0): Removing an active aggregator [ 581.339420][T22579] bond5: (slave dummy0): Releasing backup interface [ 581.669015][T22605] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4984'. [ 581.728674][T22605] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4984'. [ 582.069380][T22623] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4991'. [ 582.101939][T22623] netlink: 'syz.4.4991': attribute type 1 has an invalid length. [ 582.134871][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 582.297425][T22623] 8021q: adding VLAN 0 to HW filter on device bond0 [ 582.732416][T22659] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5002'. [ 582.805835][T22662] netlink: 140 bytes leftover after parsing attributes in process `syz.4.5003'. [ 583.490507][T22682] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5010'. [ 583.518199][T22682] macvlan4: entered allmulticast mode [ 584.140148][T22699] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5016'. [ 584.298628][T22705] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 584.630798][T22716] netlink: 'syz.1.5024': attribute type 1 has an invalid length. [ 584.753808][T22716] 8021q: adding VLAN 0 to HW filter on device bond9 [ 585.318648][T22729] IPVS: set_ctl: invalid protocol: 19 10.1.1.2:20003 [ 585.448023][T22726] lo speed is unknown, defaulting to 1000 [ 585.763131][T22750] xt_hashlimit: size too large, truncated to 1048576 [ 586.257306][T22766] __nla_validate_parse: 3 callbacks suppressed [ 586.257335][T22766] netlink: 32 bytes leftover after parsing attributes in process `syz.0.5034'. [ 586.429624][T22774] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5038'. [ 586.587064][T22782] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5042'. [ 586.631896][T22782] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5042'. [ 586.649211][T22788] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5041'. [ 587.347882][T22809] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5050'. [ 587.487580][T22811] xt_CT: No such helper "netbios-ns" [ 587.656321][T22825] netlink: 'syz.1.5056': attribute type 1 has an invalid length. [ 587.664329][T22825] netlink: 228 bytes leftover after parsing attributes in process `syz.1.5056'. [ 587.756764][T22831] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5059'. [ 587.812281][T22823] syzkaller1: entered promiscuous mode [ 587.829538][T22823] syzkaller1: entered allmulticast mode [ 590.934856][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 591.084601][T22868] netlink: 'syz.4.5069': attribute type 1 has an invalid length. [ 591.157250][T22868] 8021q: adding VLAN 0 to HW filter on device bond11 [ 591.192094][T22874] bond5: (slave veth0_to_bond): Releasing backup interface [ 591.270685][T22880] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5074'. [ 591.279881][T22880] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5074'. [ 591.293144][T22874] bond11: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 591.449660][T22890] netlink: 'syz.4.5077': attribute type 1 has an invalid length. [ 591.546750][T22890] 8021q: adding VLAN 0 to HW filter on device bond12 [ 591.590544][T22893] bond11: (slave veth0_to_bond): Releasing backup interface [ 591.626137][T22893] bond12: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 592.157699][T22904] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5081'. [ 592.207398][T22904] macvlan5: entered allmulticast mode [ 592.561935][T22919] netlink: 'syz.0.5088': attribute type 2 has an invalid length. [ 592.631567][T22922] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 592.898383][T22937] lo speed is unknown, defaulting to 1000 [ 592.983373][T22944] netlink: 64 bytes leftover after parsing attributes in process `syz.3.5095'. [ 593.006017][T22944] syzkaller1: entered promiscuous mode [ 593.011692][T22944] syzkaller1: entered allmulticast mode [ 593.253936][T22950] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5096'. [ 593.268030][T22952] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5097'. [ 593.426560][T22955] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 593.521447][T22958] netlink: 9364 bytes leftover after parsing attributes in process `syz.2.5099'. [ 593.541496][T22959] netlink: 9364 bytes leftover after parsing attributes in process `syz.2.5099'. [ 593.597076][T22958] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5099'. [ 593.729708][T22969] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5102'. [ 593.760987][T22964] netlink: 'syz.0.5101': attribute type 1 has an invalid length. [ 593.856980][T22964] 8021q: adding VLAN 0 to HW filter on device bond8 [ 593.878921][T22972] workqueue: Failed to create a rescuer kthread for wq "bond13": -EINTR [ 594.034989][T22986] netlink: 'syz.2.5105': attribute type 30 has an invalid length. [ 594.145107][T22986] bond5: option arp_missed_max: mode dependency failed, not supported in mode 802.3ad(4) [ 594.178964][T22986] bond5 (unregistering): Released all slaves [ 594.244793][T22989] macvlan6: entered allmulticast mode [ 595.646697][T23047] netlink: 'syz.4.5128': attribute type 1 has an invalid length. [ 595.769105][T23047] 8021q: adding VLAN 0 to HW filter on device bond13 [ 595.806304][T23054] netlink: 'syz.3.5129': attribute type 30 has an invalid length. [ 595.818695][T23056] bond12: (slave veth0_to_bond): Releasing backup interface [ 595.838508][T23056] bond13: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 595.929020][T23054] bond9: option arp_missed_max: mode dependency failed, not supported in mode 802.3ad(4) [ 595.971124][T23054] bond9 (unregistering): Released all slaves [ 596.289349][T23070] vlan3: entered promiscuous mode [ 596.306017][T23070] hsr0: entered promiscuous mode [ 596.323269][T23070] vlan3: entered allmulticast mode [ 596.340477][T23070] hsr0: entered allmulticast mode [ 596.377103][T23076] __nla_validate_parse: 13 callbacks suppressed [ 596.377122][T23076] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5133'. [ 596.378878][T23070] hsr_slave_0: entered allmulticast mode [ 596.474342][T23070] hsr_slave_1: entered allmulticast mode [ 596.613312][T23083] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 596.798163][T23076] hsr_slave_0: left promiscuous mode [ 596.825475][T23076] hsr_slave_1: left promiscuous mode [ 596.997937][T23094] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5142'. [ 597.066036][T23096] bond9: option ad_select: invalid value (34) [ 597.097952][T23096] bond9 (unregistering): Released all slaves [ 597.119636][T23101] netlink: 256 bytes leftover after parsing attributes in process `syz.2.5144'. [ 597.156238][T23101] netlink: 256 bytes leftover after parsing attributes in process `syz.2.5144'. [ 597.231199][T23108] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5147'. [ 597.360573][T23104] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5146'. [ 597.361255][T23110] openvswitch: netlink: Tunnel attr 68 out of range max 16 [ 597.385804][T23104] netlink: 'syz.1.5146': attribute type 1 has an invalid length. [ 597.407444][T23104] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5146'. [ 597.449271][T23110] netlink: 140 bytes leftover after parsing attributes in process `syz.2.5148'. [ 597.472181][T23121] netlink: 'syz.0.5149': attribute type 30 has an invalid length. [ 597.501935][T23121] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5149'. [ 597.549660][T23121] bond9: option arp_missed_max: mode dependency failed, not supported in mode 802.3ad(4) [ 597.581086][T23121] bond9 (unregistering): Released all slaves [ 598.512032][T23168] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5167'. [ 598.698442][T23187] IPVS: Error connecting to the multicast addr [ 598.852476][T23180] lo speed is unknown, defaulting to 1000 [ 599.109651][T23198] netlink: 'syz.3.5173': attribute type 30 has an invalid length. [ 599.202510][T23198] bond9: option arp_missed_max: mode dependency failed, not supported in mode 802.3ad(4) [ 599.222402][T23198] bond9 (unregistering): Released all slaves [ 599.849503][T23237] netlink: 'syz.0.5186': attribute type 1 has an invalid length. [ 600.055871][T23237] 8021q: adding VLAN 0 to HW filter on device bond9 [ 600.110760][T23238] bond7: (slave veth0_to_bond): Releasing backup interface [ 600.160981][T23238] bond9: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 600.541760][T23271] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_hsr, syncid = 4, id = 0 [ 600.645488][T23270] lo speed is unknown, defaulting to 1000 [ 600.662234][T23275] netlink: 'syz.4.5197': attribute type 30 has an invalid length. [ 600.758446][T23275] bond14: option arp_missed_max: mode dependency failed, not supported in mode 802.3ad(4) [ 600.820107][T23275] bond14 (unregistering): Released all slaves [ 601.621376][T23311] __nla_validate_parse: 10 callbacks suppressed [ 601.621395][T23311] netlink: 76 bytes leftover after parsing attributes in process `syz.4.5207'. [ 601.777741][T23317] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5208'. [ 602.018532][T23327] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5212'. [ 602.052766][T23327] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5212'. [ 602.493441][T23336] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5213'. [ 602.728138][T23341] team0 (unregistering): Port device team_slave_0 removed [ 602.762050][T23341] team0 (unregistering): Port device team_slave_1 removed [ 602.781539][T23341] team0 (unregistering): Port device macvlan3 removed [ 603.779566][T23395] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5235'. [ 603.794267][T23395] macvlan6: entered allmulticast mode [ 603.910831][T23401] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_hsr, syncid = 4, id = 0 [ 603.933374][T23397] lo speed is unknown, defaulting to 1000 [ 604.188987][T23415] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5238'. [ 604.202591][T23415] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5238'. [ 604.303536][T23421] IPVS: Error connecting to the multicast addr [ 604.419595][T23404] lo speed is unknown, defaulting to 1000 [ 604.550183][ T5803] IPVS: starting estimator thread 0... [ 604.654750][T23433] IPVS: using max 43 ests per chain, 103200 per kthread [ 604.704277][T23442] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5247'. [ 604.883521][T23449] IPVS: Error connecting to the multicast addr [ 604.936662][T23445] lo speed is unknown, defaulting to 1000 [ 605.217406][T23463] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5254'. [ 606.046312][T23489] lo speed is unknown, defaulting to 1000 [ 606.605821][T23503] erspan0: left promiscuous mode [ 606.611169][T23503] erspan0: left allmulticast mode [ 606.644498][T23515] netlink: 'syz.0.5270': attribute type 1 has an invalid length. [ 606.768884][T23503] bridge0: port 2(bridge_slave_1) entered disabled state [ 606.770874][T23524] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 606.777482][T23503] bridge0: port 1(bridge_slave_0) entered disabled state [ 606.983055][T23503] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 607.073991][T23503] macvlan2: left allmulticast mode [ 607.098677][T23503] macvlan3: left allmulticast mode [ 607.164591][T23503] geneve3: left promiscuous mode [ 607.178254][T23503] bond8: left promiscuous mode [ 607.191350][T23503] macvlan4: left allmulticast mode [ 607.225628][T23503] macvlan5: left allmulticast mode [ 607.234038][T23503] gretap0: left allmulticast mode [ 607.245727][T23503] macvlan6: left allmulticast mode [ 607.279332][T23512] pimreg: tun_chr_ioctl cmd 1074025677 [ 607.295097][T23512] pimreg: linktype set to 6 [ 607.350403][T23515] 8021q: adding VLAN 0 to HW filter on device bond10 [ 607.358460][T23520] __nla_validate_parse: 3 callbacks suppressed [ 607.358476][T23520] netlink: 3 bytes leftover after parsing attributes in process `syz.3.5273'. [ 607.451005][T23528] syzkaller0: entered promiscuous mode [ 607.458000][T23528] syzkaller0: entered allmulticast mode [ 607.466125][ T1175] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 607.484775][ T1175] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 607.505403][ T1175] netdevsim netdevsim4 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 607.524724][ T1175] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 607.533856][ T1175] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 607.543059][ T1175] netdevsim netdevsim4 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 607.625303][T23541] x_tables: duplicate underflow at hook 2 [ 607.765438][T23545] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5277'. [ 608.220672][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 609.772030][ T1175] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 609.781498][ T1175] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 609.793895][ T1175] netdevsim netdevsim4 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 609.817647][ T1175] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 609.826891][ T1175] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 609.836347][ T1175] netdevsim netdevsim4 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 609.997488][T23556] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5281'. [ 610.058547][T23556] gretap0: entered promiscuous mode [ 610.064711][T23556] macvlan0: entered allmulticast mode [ 610.072673][T23556] gretap0: entered allmulticast mode [ 610.094276][T23559] lo speed is unknown, defaulting to 1000 [ 610.227297][T23570] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5286'. [ 610.240458][T23567] netlink: 'syz.0.5284': attribute type 1 has an invalid length. [ 610.339617][T23567] 8021q: adding VLAN 0 to HW filter on device bond11 [ 610.377640][T23580] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5287'. [ 610.468281][T23574] bond9: (slave veth0_to_bond): Releasing backup interface [ 610.503982][T23584] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5290'. [ 610.530836][T23574] bond11: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 610.576401][ T29] audit: type=1800 audit(1782796268.794:10): pid=23579 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.5288" name="memory.events" dev="tmpfs" ino=1911 res=0 errno=0 [ 610.633761][T23584] netlink: 'syz.2.5290': attribute type 1 has an invalid length. [ 610.707006][T23584] 8021q: adding VLAN 0 to HW filter on device bond5 [ 610.875920][T23602] netlink: 277 bytes leftover after parsing attributes in process `syz.3.5294'. [ 611.079995][T23611] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5298'. [ 611.315518][T23621] netlink: 'syz.0.5301': attribute type 30 has an invalid length. [ 611.329397][T23621] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5301'. [ 611.422952][T23621] bond12: option arp_missed_max: mode dependency failed, not supported in mode 802.3ad(4) [ 611.472760][T23621] bond12 (unregistering): Released all slaves [ 611.621635][T23635] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5304'. [ 612.011473][T23659] xt_NFQUEUE: number of total queues is 0 [ 612.044232][T23659] bond14: option arp_all_targets: invalid value (3) [ 612.072360][T23659] bond14 (unregistering): Released all slaves [ 638.577883][T23671] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 638.607505][T23672] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 638.876999][T23696] __nla_validate_parse: 3 callbacks suppressed [ 638.877017][T23696] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5323'. [ 639.131759][T23709] netlink: 'syz.1.5325': attribute type 30 has an invalid length. [ 639.150286][T23709] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5325'. [ 639.185229][T23709] bond10: option arp_missed_max: mode dependency failed, not supported in mode 802.3ad(4) [ 639.194236][T23714] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5329'. [ 639.207649][T23709] bond10 (unregistering): Released all slaves [ 639.503837][T23733] FAULT_INJECTION: forcing a failure. [ 639.503837][T23733] name failslab, interval 1, probability 0, space 0, times 0 [ 639.526154][T23733] CPU: 0 UID: 0 PID: 23733 Comm: syz.2.5335 Not tainted syzkaller #0 PREEMPT(full) [ 639.526181][T23733] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 639.526193][T23733] Call Trace: [ 639.526200][T23733] [ 639.526209][T23733] dump_stack_lvl+0xe8/0x150 [ 639.526239][T23733] should_fail_ex+0x40c/0x560 [ 639.526268][T23733] ? bpf_test_run_xdp_live+0x1ef/0x1c20 [ 639.526290][T23733] should_failslab+0xa8/0x100 [ 639.526313][T23733] __kvmalloc_node_noprof+0x176/0x860 [ 639.526338][T23733] ? bpf_test_run_xdp_live+0x1ef/0x1c20 [ 639.526366][T23733] bpf_test_run_xdp_live+0x1ef/0x1c20 [ 639.526391][T23733] ? bpf_dispatcher_change_prog+0xc4a/0xf20 [ 639.526418][T23733] ? __mutex_unlock_slowpath+0x731/0x900 [ 639.526453][T23733] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 639.526486][T23733] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 639.526517][T23733] ? bpf_dispatcher_xdp+0x800/0x1000 [ 639.526590][T23733] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 639.526620][T23733] ? _copy_from_user+0x94/0xb0 [ 639.526641][T23733] ? bpf_test_init+0x113/0x150 [ 639.526660][T23733] ? xdp_convert_md_to_buff+0x5b/0x330 [ 639.526687][T23733] bpf_prog_test_run_xdp+0x7d8/0x11d0 [ 639.526724][T23733] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 639.526750][T23733] ? __fget_files+0x2a/0x420 [ 639.526774][T23733] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 639.526798][T23733] bpf_prog_test_run+0x2c5/0x340 [ 639.526822][T23733] __sys_bpf+0xa22/0xd90 [ 639.526849][T23733] ? __pfx___sys_bpf+0x10/0x10 [ 639.526879][T23733] ? __fget_files+0x2a/0x420 [ 639.526914][T23733] ? ksys_write+0x242/0x270 [ 639.526938][T23733] ? __pfx_ksys_write+0x10/0x10 [ 639.526965][T23733] __x64_sys_bpf+0xba/0xd0 [ 639.526993][T23733] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 639.527013][T23733] do_syscall_64+0x174/0x580 [ 639.527030][T23733] ? trace_irq_disable+0x3b/0x140 [ 639.527048][T23733] ? clear_bhb_loop+0x40/0x90 [ 639.527071][T23733] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 639.527090][T23733] RIP: 0033:0x7fc3a879ce59 [ 639.527108][T23733] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 639.527124][T23733] RSP: 002b:00007fc3a95e7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 639.527144][T23733] RAX: ffffffffffffffda RBX: 00007fc3a8a15fa0 RCX: 00007fc3a879ce59 [ 639.527158][T23733] RDX: 0000000000000048 RSI: 0000200000000600 RDI: 000000000000000a [ 639.527170][T23733] RBP: 00007fc3a95e7090 R08: 0000000000000000 R09: 0000000000000000 [ 639.527183][T23733] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 639.527193][T23733] R13: 00007fc3a8a16038 R14: 00007fc3a8a15fa0 R15: 00007ffc8c345328 [ 639.527222][T23733] [ 639.885123][T23735] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5337'. [ 640.157202][T23741] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 641.036232][T23779] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5352'. [ 641.059626][T23779] macvlan1: entered allmulticast mode [ 641.189351][T23791] netlink: 'syz.3.5356': attribute type 12 has an invalid length. [ 641.936920][T23831] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5372'. [ 641.964837][T23831] macvlan7: entered allmulticast mode [ 642.067927][T23838] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5375'. [ 642.195974][T23845] netlink: 'syz.0.5378': attribute type 1 has an invalid length. [ 642.213956][T23845] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5378'. [ 642.227070][T23845] netlink: 'syz.0.5378': attribute type 1 has an invalid length. [ 642.301550][T23852] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5379'. [ 642.315128][T23845] 8021q: adding VLAN 0 to HW filter on device bond12 [ 642.371391][T23853] bond11: (slave veth0_to_bond): Releasing backup interface [ 642.402076][T20971] hid (null): unknown global tag 0xb4 [ 642.408517][T20971] hid (null): unknown global tag 0xd [ 642.413895][T23853] bond12: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 642.437294][T20971] hid-generic 0005:15C2:000B.0001: unexpected long global item [ 642.446991][T20971] hid-generic 0005:15C2:000B.0001: probe with driver hid-generic failed with error -22 [ 642.484967][T23865] IPVS: Error connecting to the multicast addr [ 642.530488][T23857] lo speed is unknown, defaulting to 1000 [ 642.684324][T23870] netlink: 'syz.0.5384': attribute type 21 has an invalid length. [ 642.761579][ T1020] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 642.784235][T23870] netlink: 'syz.0.5384': attribute type 21 has an invalid length. [ 642.794990][ T1020] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 642.808958][ T1020] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 642.825037][ T1020] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 642.836741][T23877] netlink: 'syz.2.5386': attribute type 30 has an invalid length. [ 642.871928][T23877] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5386'. [ 642.989502][T23877] bond6: option arp_missed_max: mode dependency failed, not supported in mode 802.3ad(4) [ 643.069747][T23877] bond6 (unregistering): Released all slaves [ 643.176934][T23886] macvlan4: entered allmulticast mode [ 643.359539][T23897] netlink: 'syz.1.5392': attribute type 1 has an invalid length. [ 643.395123][T23897] 8021q: adding VLAN 0 to HW filter on device bond10 [ 643.419089][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 644.037605][T23941] __nla_validate_parse: 3 callbacks suppressed [ 644.037623][T23941] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5407'. [ 644.196931][T23943] bridge0: port 3(veth0_virt_wifi) entered blocking state [ 644.214226][T23943] bridge0: port 3(veth0_virt_wifi) entered disabled state [ 644.245020][T23943] veth0_virt_wifi: entered allmulticast mode [ 644.301867][T23943] veth0_virt_wifi: entered promiscuous mode [ 644.332578][T23943] bridge0: port 3(veth0_virt_wifi) entered blocking state [ 644.339997][T23943] bridge0: port 3(veth0_virt_wifi) entered forwarding state [ 644.604342][T23969] netlink: 'syz.1.5419': attribute type 39 has an invalid length. [ 644.665681][T23973] netlink: 16170 bytes leftover after parsing attributes in process `syz.2.5421'. [ 644.677662][T23969] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5419'. [ 645.222479][T23999] xt_hashlimit: size too large, truncated to 1048576 [ 645.239193][ T5748] lo speed is unknown, defaulting to 1000 [ 645.521477][T24007] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5432'. [ 645.862755][T24021] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5438'. [ 645.978312][T24026] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5438'. [ 646.111601][T24034] netlink: 'syz.0.5441': attribute type 30 has an invalid length. [ 646.141700][T24034] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5441'. [ 646.185978][T24034] bond13: option arp_missed_max: mode dependency failed, not supported in mode 802.3ad(4) [ 646.200229][T24034] bond13 (unregistering): Released all slaves [ 646.306244][T24040] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 646.349231][T24048] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5445'. [ 646.472754][T24050] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5446'. [ 646.489126][T24050] macvlan5: entered allmulticast mode [ 646.732633][T24055] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5448'. [ 647.323608][T24074] tipc: Started in network mode [ 647.350510][T24074] tipc: Node identity ac14140f, cluster identity 4711 [ 647.371113][T24074] tipc: New replicast peer: 172.30.0.3 [ 647.385068][T24074] tipc: Enabled bearer , priority 10 [ 647.414858][T24078] tipc: Disabling bearer [ 647.496912][T24076] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 647.580491][T24084] lo speed is unknown, defaulting to 1000 [ 647.689691][T24092] netlink: 'syz.3.5461': attribute type 30 has an invalid length. [ 647.776794][T24092] bond9: option arp_missed_max: mode dependency failed, not supported in mode 802.3ad(4) [ 647.812329][T24092] bond9 (unregistering): Released all slaves [ 648.102903][T24109] syzkaller1: entered promiscuous mode [ 648.117586][T24109] syzkaller1: entered allmulticast mode [ 648.142155][T24084] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 648.366561][T24109] lo speed is unknown, defaulting to 1000 [ 648.695483][T24117] bridge0: port 3(vlan0) entered blocking state [ 648.702140][T24117] bridge0: port 3(vlan0) entered disabled state [ 648.709184][T24117] vlan0: entered allmulticast mode [ 648.714477][T24117] geneve0: entered allmulticast mode [ 648.728401][T24117] vlan0: entered promiscuous mode [ 648.734318][T24117] geneve0: entered promiscuous mode [ 649.230248][T24135] __nla_validate_parse: 7 callbacks suppressed [ 649.230266][T24135] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5473'. [ 649.328621][T24142] netlink: 'syz.4.5473': attribute type 1 has an invalid length. [ 649.572624][T24142] 8021q: adding VLAN 0 to HW filter on device bond14 [ 649.700398][T24150] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5475'. [ 649.747511][T24152] netlink: 'syz.3.5474': attribute type 1 has an invalid length. [ 649.903210][T24132] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 649.920064][T24152] 8021q: adding VLAN 0 to HW filter on device bond9 [ 649.985559][T24157] bond8: (slave veth0_to_bond): Releasing backup interface [ 650.042099][T24157] bond9: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 650.154553][T24169] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5481'. [ 650.181075][T24169] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5481'. [ 650.225533][T24173] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5483'. [ 650.311510][T24179] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5483'. [ 650.632715][T24189] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5488'. [ 650.680490][T24189] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5488'. [ 650.701784][T24193] netlink: 56 bytes leftover after parsing attributes in process `syz.3.5487'. [ 650.893670][T24196] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5489'. [ 651.491668][T24221] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 651.536344][T24224] unsupported nlmsg_type 40 [ 651.605783][T24209] bridge0: port 3(veth0_virt_wifi) entered disabled state [ 651.613208][T24209] bridge0: port 2(bridge_slave_1) entered disabled state [ 651.620915][T24209] bridge0: port 1(bridge_slave_0) entered disabled state [ 651.923392][T24209] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 651.959631][T24209] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 652.419076][T24209] macvlan2: left allmulticast mode [ 652.438117][T24209] macvlan3: left allmulticast mode [ 652.454773][T24209] macvlan4: left allmulticast mode [ 652.483785][T24209] macvlan5: left allmulticast mode [ 652.554435][T24209] macvlan6: left allmulticast mode [ 652.568540][T24209] gretap0: left allmulticast mode [ 652.581767][T24209] macvlan7: left allmulticast mode [ 652.645456][ T12] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 652.686292][ T12] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 652.721840][ T12] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 652.743908][ T12] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 652.800865][ T12] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 652.835861][ T12] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 652.883909][ T12] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 652.937324][ T12] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 653.211619][T24260] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 653.344806][T24273] xt_CT: You must specify a L4 protocol and not use inversions on it [ 653.457316][T24268] bond13 (unregistering): Released all slaves [ 653.898586][T24280] IPVS: Error connecting to the multicast addr [ 654.008224][T24280] lo speed is unknown, defaulting to 1000 [ 654.333725][T24315] netlink: 'syz.4.5516': attribute type 1 has an invalid length. [ 654.458478][T24315] 8021q: adding VLAN 0 to HW filter on device bond15 [ 654.470859][T24326] bond13: (slave veth0_to_bond): Releasing backup interface [ 654.535845][T24326] bond15: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 654.762018][T24338] __nla_validate_parse: 6 callbacks suppressed [ 654.762037][T24338] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5522'. [ 654.798574][T24344] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5524'. [ 654.813684][T24346] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5522'. [ 654.966765][T24353] netlink: 'syz.0.5523': attribute type 13 has an invalid length. [ 654.980696][T24352] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5527'. [ 654.994018][T24346] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5522'. [ 655.004748][T24353] netlink: 'syz.0.5523': attribute type 17 has an invalid length. [ 655.013735][T24352] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5527'. [ 655.035836][T24358] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5523'. [ 655.082804][T24353] gretap0: left promiscuous mode [ 655.111944][T24361] netlink: 68 bytes leftover after parsing attributes in process `syz.3.5528'. [ 655.314254][T24353] 8021q: adding VLAN 0 to HW filter on device bond0 [ 655.351084][T24353] dummy0: left promiscuous mode [ 655.530149][T24353] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 655.554728][T24353] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 655.571398][T24353] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 655.627223][T24358] netlink: 'syz.0.5523': attribute type 1 has an invalid length. [ 655.647160][T24358] netlink: 'syz.0.5523': attribute type 2 has an invalid length. [ 655.719726][ T3360] bridge0: port 1(bridge_slave_0) entered blocking state [ 655.726963][ T3360] bridge0: port 1(bridge_slave_0) entered forwarding state [ 655.759063][ T3360] bridge0: port 2(bridge_slave_1) entered blocking state [ 655.766247][ T3360] bridge0: port 2(bridge_slave_1) entered forwarding state [ 655.852324][T24396] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5533'. [ 656.205978][T24411] lo speed is unknown, defaulting to 1000 [ 656.924032][T24445] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5548'. [ 656.981471][T24446] xt_HMARK: spi-set and port-set can't be combined [ 657.237089][T24458] gretap0: entered promiscuous mode [ 657.242732][T24458] macvlan5: entered allmulticast mode [ 657.249073][T24458] gretap0: entered allmulticast mode [ 657.327848][T24463] raw_sendmsg: syz.4.5554 forgot to set AF_INET. Fix it! [ 657.443516][T24468] vlan3: entered allmulticast mode [ 657.453705][T24468] bridge2: entered allmulticast mode [ 657.461995][T24468] bridge2: port 1(erspan0) entered blocking state [ 657.468888][T24468] bridge2: port 1(erspan0) entered disabled state [ 657.475906][T24468] erspan0: entered allmulticast mode [ 657.497209][T24468] erspan0: entered promiscuous mode [ 657.503465][T24468] bridge2: port 1(erspan0) entered blocking state [ 657.510142][T24468] bridge2: port 1(erspan0) entered forwarding state [ 658.105457][T24487] syzkaller0: entered promiscuous mode [ 658.110977][T24487] syzkaller0: entered allmulticast mode [ 658.408844][T24498] macvlan5: entered allmulticast mode [ 658.416244][T24500] syzkaller1: entered promiscuous mode [ 658.425975][T24500] syzkaller1: entered allmulticast mode [ 658.483420][T24500] syzkaller1: left promiscuous mode [ 658.501596][T24500] syzkaller1: left allmulticast mode [ 658.911383][T24517] netlink: 'syz.1.5574': attribute type 6 has an invalid length. [ 658.928146][T24517] netlink: 'syz.1.5574': attribute type 6 has an invalid length. [ 658.971559][T24517] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 659.002486][T24517] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 659.578508][T24533] macvlan6: entered allmulticast mode [ 659.617935][T24536] netlink: 'syz.1.5581': attribute type 30 has an invalid length. [ 659.750657][T24536] bond11: option arp_missed_max: mode dependency failed, not supported in mode 802.3ad(4) [ 659.790478][T24536] bond11 (unregistering): Released all slaves [ 659.854228][T24543] netlink: 'syz.2.5582': attribute type 30 has an invalid length. [ 659.874910][T24543] __nla_validate_parse: 15 callbacks suppressed [ 659.874928][T24543] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5582'. [ 659.968067][T24543] bond6: option arp_missed_max: mode dependency failed, not supported in mode 802.3ad(4) [ 659.997256][T24543] bond6 (unregistering): Released all slaves [ 661.090290][T24566] ip6gretap0: entered promiscuous mode [ 661.460121][T24587] netlink: 'syz.4.5600': attribute type 1 has an invalid length. [ 661.539245][T24591] netlink: 'syz.1.5599': attribute type 1 has an invalid length. [ 661.597852][T24593] Unsupported ieee802154 address type: 0 [ 661.628227][T24587] 8021q: adding VLAN 0 to HW filter on device bond16 [ 661.677608][T24590] bond15: (slave veth0_to_bond): Releasing backup interface [ 661.725075][T24590] bond16: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 662.004074][T24608] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5606'. [ 662.069858][T24614] netlink: 'syz.1.5606': attribute type 1 has an invalid length. [ 662.223473][T24614] 8021q: adding VLAN 0 to HW filter on device bond11 [ 663.488303][T24638] lo speed is unknown, defaulting to 1000 [ 663.527202][T24644] x_tables: duplicate underflow at hook 2 [ 663.721796][T24649] netlink: 'syz.0.5618': attribute type 5 has an invalid length. [ 663.754777][T24649] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5618'. [ 663.790455][T24654] netlink: 'syz.0.5618': attribute type 1 has an invalid length. [ 663.939488][T24654] 8021q: adding VLAN 0 to HW filter on device bond13 [ 664.237968][T24649] bond12: (slave veth0_to_bond): Releasing backup interface [ 664.311610][T24649] bond13: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 664.534613][T24666] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5621'. [ 664.570535][T24666] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5621'. [ 664.665059][T24668] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5622'. [ 664.742474][T24668] netlink: 'syz.2.5622': attribute type 1 has an invalid length. [ 664.893524][T24668] 8021q: adding VLAN 0 to HW filter on device bond6 [ 665.105265][T24688] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5627'. [ 665.198472][T24693] syzkaller0: entered promiscuous mode [ 665.204438][T24693] syzkaller0: entered allmulticast mode [ 665.375306][T24689] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5627'. [ 665.528443][T24699] RDS: rds_bind could not find a transport for ::fcff:ffff:8000:0:20:0, load rds_tcp or rds_rdma? [ 665.593440][T24702] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5630'. [ 665.610921][T24705] x_tables: duplicate underflow at hook 2 [ 666.028310][T24724] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5635'. [ 666.055145][T24724] macvlan6: entered allmulticast mode [ 666.235882][T24735] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5641'. [ 666.245644][T24735] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5641'. [ 666.596837][T24741] bond17: option updelay: invalid value (18446744073709518847) [ 666.618098][T24741] bond17: option updelay: allowed values 0 - 2147483647 [ 666.679782][T24741] bond17 (unregistering): Released all slaves [ 666.900374][T24747] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 667.025537][T24752] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5645'. [ 667.232672][T24758] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5648'. [ 667.280443][T24758] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5648'. [ 667.394275][T24766] netlink: 'syz.2.5651': attribute type 1 has an invalid length. [ 667.434998][T24766] workqueue: Failed to create a rescuer kthread for wq "bond7": -EINTR [ 667.510771][T24780] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5654'. [ 667.728557][T24790] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 667.893880][T24807] netlink: 'syz.4.5664': attribute type 1 has an invalid length. [ 667.935696][T24807] 8021q: adding VLAN 0 to HW filter on device bond17 [ 668.007948][T24807] bond16: (slave veth0_to_bond): Releasing backup interface [ 668.046058][T24807] bond17: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 669.720651][T24888] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_hsr, syncid = 4, id = 0 [ 669.835978][T24884] macvlan7: entered allmulticast mode [ 669.850775][T24884] gretap0: entered allmulticast mode [ 669.916208][T24886] lo speed is unknown, defaulting to 1000 [ 669.960990][T24895] netlink: 'syz.1.5689': attribute type 25 has an invalid length. [ 670.058898][T24899] netlink: 'syz.2.5691': attribute type 2 has an invalid length. [ 670.085924][T24899] netlink: 'syz.2.5691': attribute type 21 has an invalid length. [ 670.093967][T24899] netlink: 'syz.2.5691': attribute type 5 has an invalid length. [ 670.103513][T24899] netlink: 'syz.2.5691': attribute type 6 has an invalid length. [ 670.112694][T24899] __nla_validate_parse: 13 callbacks suppressed [ 670.112711][T24899] netlink: 3 bytes leftover after parsing attributes in process `syz.2.5691'. [ 670.164082][T24904] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5693'. [ 670.201471][T24904] netlink: 60 bytes leftover after parsing attributes in process `syz.1.5693'. [ 670.389691][T24911] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5695'. [ 670.470614][T24918] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5698'. [ 670.814334][T24906] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5694'. [ 670.830223][T24906] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5694'. [ 670.847672][T24906] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5694'. [ 671.207427][T24942] lo speed is unknown, defaulting to 1000 [ 671.219952][T24952] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5706'. [ 671.271997][T24956] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5708'. [ 671.371274][T24950] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 671.541869][T24950] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 671.751773][T24950] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 672.021554][T24950] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 672.063428][T24980] lo speed is unknown, defaulting to 1000 [ 672.412877][T25009] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 672.420897][T25009] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 672.437191][ T776] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 672.495090][ T776] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 672.552411][ T776] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 672.640675][ T776] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 673.080974][T25038] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 673.195398][T25041] syzkaller1: entered promiscuous mode [ 673.237884][T18425] IPVS: starting estimator thread 0... [ 673.257792][T25041] syzkaller1: entered allmulticast mode [ 673.346023][T25048] IPVS: using max 28 ests per chain, 67200 per kthread [ 673.528957][T25050] [ 673.531333][T25050] ====================================================== [ 673.538350][T25050] WARNING: possible circular locking dependency detected [ 673.545382][T25050] syzkaller #0 Not tainted [ 673.549797][T25050] ------------------------------------------------------ [ 673.556816][T25050] syz.3.5736/25050 is trying to acquire lock: [ 673.562883][T25050] ffff888027682ac8 (&q->elevator_lock){+.+.}-{4:4}, at: elevator_change+0x1af/0x480 [ 673.572316][T25050] [ 673.572316][T25050] but task is already holding lock: [ 673.579683][T25050] ffff8880276825a0 (&q->q_usage_counter(io)#52){++++}-{0:0}, at: elevator_change+0x194/0x480 [ 673.589916][T25050] [ 673.589916][T25050] which lock already depends on the new lock. [ 673.589916][T25050] [ 673.600327][T25050] [ 673.600327][T25050] the existing dependency chain (in reverse order) is: [ 673.609350][T25050] [ 673.609350][T25050] -> #6 (&q->q_usage_counter(io)#52){++++}-{0:0}: [ 673.617977][T25050] blk_alloc_queue+0x544/0x690 [ 673.623258][T25050] __blk_mq_alloc_disk+0x194/0x390 [ 673.628886][T25050] nbd_dev_add+0x494/0xb60 [ 673.633822][T25050] nbd_init+0x15f/0x1e0 [ 673.638496][T25050] do_one_initcall+0x250/0x870 [ 673.643772][T25050] do_initcall_level+0x10a/0x1a0 [ 673.649222][T25050] do_initcalls+0x59/0xa0 [ 673.654061][T25050] kernel_init_freeable+0x29d/0x3e0 [ 673.659771][T25050] kernel_init+0x1d/0x1d0 [ 673.664612][T25050] ret_from_fork+0x514/0xb70 [ 673.669714][T25050] ret_from_fork_asm+0x1a/0x30 [ 673.674989][T25050] [ 673.674989][T25050] -> #5 (fs_reclaim){+.+.}-{0:0}: [ 673.682189][T25050] fs_reclaim_acquire+0x71/0x100 [ 673.687636][T25050] kmem_cache_alloc_node_noprof+0x6a/0x610 [ 673.693952][T25050] __alloc_skb+0x1d7/0x7a0 [ 673.698871][T25050] __ip6_append_data+0x2ec4/0x40c0 [ 673.704493][T25050] ip6_append_data+0x108/0x270 [ 673.709767][T25050] rawv6_sendmsg+0x1298/0x18c0 [ 673.715042][T25050] sock_sendmsg_nosec+0x10e/0x180 [ 673.720577][T25050] ____sys_sendmsg+0x54e/0x850 [ 673.725849][T25050] ___sys_sendmsg+0x2a5/0x360 [ 673.731032][T25050] __x64_sys_sendmsg+0x1b1/0x290 [ 673.736476][T25050] do_syscall_64+0x174/0x580 [ 673.741573][T25050] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 673.747973][T25050] [ 673.747973][T25050] -> #4 (sk_lock-AF_INET6){+.+.}-{0:0}: [ 673.755694][T25050] lock_sock_nested+0x41/0x100 [ 673.760975][T25050] inet_shutdown+0x6a/0x390 [ 673.765992][T25050] nbd_mark_nsock_dead+0x2cb/0x550 [ 673.771612][T25050] recv_work+0x1cee/0x1e10 [ 673.776542][T25050] process_scheduled_works+0xa8e/0x14e0 [ 673.782599][T25050] worker_thread+0xa47/0xfb0 [ 673.787699][T25050] kthread+0x388/0x470 [ 673.792275][T25050] ret_from_fork+0x514/0xb70 [ 673.797373][T25050] ret_from_fork_asm+0x1a/0x30 [ 673.802656][T25050] [ 673.802656][T25050] -> #3 (&nsock->tx_lock){+.+.}-{4:4}: [ 673.810293][T25050] __mutex_lock+0x19d/0x1550 [ 673.815391][T25050] nbd_queue_rq+0x373/0x1150 [ 673.820491][T25050] blk_mq_dispatch_rq_list+0x499/0x1990 [ 673.826551][T25050] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 673.833391][T25050] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 673.839903][T25050] blk_mq_run_work_fn+0x16c/0x300 [ 673.845436][T25050] process_scheduled_works+0xa8e/0x14e0 [ 673.851493][T25050] worker_thread+0xa47/0xfb0 [ 673.856595][T25050] kthread+0x388/0x470 [ 673.861173][T25050] ret_from_fork+0x514/0xb70 [ 673.866273][T25050] ret_from_fork_asm+0x1a/0x30 [ 673.871548][T25050] [ 673.871548][T25050] -> #2 (&cmd->lock){+.+.}-{4:4}: [ 673.878746][T25050] __mutex_lock+0x19d/0x1550 [ 673.883854][T25050] nbd_queue_rq+0xc1/0x1150 [ 673.888869][T25050] blk_mq_dispatch_rq_list+0x499/0x1990 [ 673.894930][T25050] __blk_mq_sched_dispatch_requests+0xd36/0x1580 [ 673.901766][T25050] blk_mq_sched_dispatch_requests+0xd7/0x190 [ 673.908255][T25050] blk_mq_run_work_fn+0x16c/0x300 [ 673.913791][T25050] process_scheduled_works+0xa8e/0x14e0 [ 673.919848][T25050] worker_thread+0xa47/0xfb0 [ 673.924953][T25050] kthread+0x388/0x470 [ 673.929532][T25050] ret_from_fork+0x514/0xb70 [ 673.934629][T25050] ret_from_fork_asm+0x1a/0x30 [ 673.939910][T25050] [ 673.939910][T25050] -> #1 (set->srcu){.+.+}-{0:0}: [ 673.947021][T25050] __synchronize_srcu+0xc9/0x2f0 [ 673.952465][T25050] elevator_switch+0x1e8/0x7b0 [ 673.957748][T25050] elevator_change+0x2fa/0x480 [ 673.963024][T25050] elevator_set_default+0x375/0x440 [ 673.968736][T25050] blk_register_queue+0x3f3/0x4e0 [ 673.974268][T25050] __add_disk+0x6cb/0xe30 [ 673.979107][T25050] add_disk_fwnode+0xfb/0x4b0 [ 673.984293][T25050] nbd_dev_add+0x733/0xb60 [ 673.989217][T25050] nbd_init+0x15f/0x1e0 [ 673.993888][T25050] do_one_initcall+0x250/0x870 [ 673.999159][T25050] do_initcall_level+0x10a/0x1a0 [ 674.004609][T25050] do_initcalls+0x59/0xa0 [ 674.009450][T25050] kernel_init_freeable+0x29d/0x3e0 [ 674.015157][T25050] kernel_init+0x1d/0x1d0 [ 674.019998][T25050] ret_from_fork+0x514/0xb70 [ 674.025093][T25050] ret_from_fork_asm+0x1a/0x30 [ 674.030370][T25050] [ 674.030370][T25050] -> #0 (&q->elevator_lock){+.+.}-{4:4}: [ 674.038177][T25050] __lock_acquire+0x1520/0x2cf0 [ 674.043533][T25050] lock_acquire+0x106/0x350 [ 674.048539][T25050] __mutex_lock+0x19d/0x1550 [ 674.053633][T25050] elevator_change+0x1af/0x480 [ 674.058913][T25050] elevator_set_none+0xb5/0x140 [ 674.064288][T25050] blk_mq_update_nr_hw_queues+0x5ef/0x19f0 [ 674.070605][T25050] nbd_start_device+0x189/0xb30 [ 674.075968][T25050] nbd_genl_connect+0x1597/0x1c10 [ 674.081504][T25050] genl_family_rcv_msg_doit+0x233/0x340 [ 674.087573][T25050] genl_rcv_msg+0x614/0x7a0 [ 674.092586][T25050] netlink_rcv_skb+0x226/0x4a0 [ 674.097858][T25050] genl_rcv+0x28/0x40 [ 674.102350][T25050] netlink_unicast+0x7bb/0x940 [ 674.107617][T25050] netlink_sendmsg+0x813/0xb40 [ 674.112896][T25050] sock_sendmsg_nosec+0x13a/0x180 [ 674.118434][T25050] ____sys_sendmsg+0x54e/0x850 [ 674.123707][T25050] ___sys_sendmsg+0x2a5/0x360 [ 674.128903][T25050] __x64_sys_sendmsg+0x1b1/0x290 [ 674.134349][T25050] do_syscall_64+0x174/0x580 [ 674.139448][T25050] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 674.145849][T25050] [ 674.145849][T25050] other info that might help us debug this: [ 674.145849][T25050] [ 674.156145][T25050] Chain exists of: [ 674.156145][T25050] &q->elevator_lock --> fs_reclaim --> &q->q_usage_counter(io)#52 [ 674.156145][T25050] [ 674.169873][T25050] Possible unsafe locking scenario: [ 674.169873][T25050] [ 674.177306][T25050] CPU0 CPU1 [ 674.182659][T25050] ---- ---- [ 674.188009][T25050] lock(&q->q_usage_counter(io)#52); [ 674.193375][T25050] lock(fs_reclaim); [ 674.199864][T25050] lock(&q->q_usage_counter(io)#52); [ 674.207748][T25050] lock(&q->elevator_lock); [ 674.212324][T25050] [ 674.212324][T25050] *** DEADLOCK *** [ 674.212324][T25050] [ 674.220450][T25050] 6 locks held by syz.3.5736/25050: [ 674.225629][T25050] #0: ffffffff8fe5b2e8 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 674.233815][T25050] #1: ffffffff8fe5b120 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10b/0x7a0 [ 674.242775][T25050] #2: ffff8880277719c0 (&set->update_nr_hwq_lock){++++}-{4:4}, at: blk_mq_update_nr_hw_queues+0xab/0x19f0 [ 674.254162][T25050] #3: ffff8880277718d0 (&set->tag_list_lock){+.+.}-{4:4}, at: blk_mq_update_nr_hw_queues+0xbe/0x19f0 [ 674.265112][T25050] #4: ffff8880276825a0 (&q->q_usage_counter(io)#52){++++}-{0:0}, at: elevator_change+0x194/0x480 [ 674.275726][T25050] #5: ffff8880276825d8 (&q->q_usage_counter(queue)#36){+.+.}-{0:0}, at: elevator_change+0x194/0x480 [ 674.286602][T25050] [ 674.286602][T25050] stack backtrace: [ 674.292479][T25050] CPU: 1 UID: 0 PID: 25050 Comm: syz.3.5736 Not tainted syzkaller #0 PREEMPT(full) [ 674.292498][T25050] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 674.292508][T25050] Call Trace: [ 674.292516][T25050] [ 674.292523][T25050] dump_stack_lvl+0xe8/0x150 [ 674.292543][T25050] print_circular_bug+0x2e1/0x300 [ 674.292564][T25050] check_noncircular+0x12e/0x150 [ 674.292585][T25050] __lock_acquire+0x1520/0x2cf0 [ 674.292609][T25050] ? elevator_change+0x1af/0x480 [ 674.292631][T25050] lock_acquire+0x106/0x350 [ 674.292651][T25050] ? elevator_change+0x1af/0x480 [ 674.292677][T25050] __mutex_lock+0x19d/0x1550 [ 674.292692][T25050] ? elevator_change+0x1af/0x480 [ 674.292713][T25050] ? rcu_is_watching+0x15/0xb0 [ 674.292734][T25050] ? elevator_change+0x1af/0x480 [ 674.292756][T25050] ? __pfx___mutex_lock+0x10/0x10 [ 674.292769][T25050] ? enable_work+0x17f/0x230 [ 674.292785][T25050] ? lockdep_hardirqs_on+0x7a/0x110 [ 674.292810][T25050] ? __cancel_work_sync+0xf7/0x110 [ 674.292825][T25050] ? blk_mq_cancel_work_sync+0xa5/0xe0 [ 674.292843][T25050] elevator_change+0x1af/0x480 [ 674.292867][T25050] elevator_set_none+0xb5/0x140 [ 674.292888][T25050] ? __pfx_elevator_set_none+0x10/0x10 [ 674.292912][T25050] ? xa_load+0x1db/0x210 [ 674.292929][T25050] blk_mq_update_nr_hw_queues+0x5ef/0x19f0 [ 674.292947][T25050] ? kernfs_add_one+0x480/0x5e0 [ 674.292966][T25050] ? nbd_start_device+0x17d/0xb30 [ 674.292986][T25050] ? __pfx_blk_mq_update_nr_hw_queues+0x10/0x10 [ 674.293006][T25050] ? sysfs_add_file_mode_ns+0x258/0x300 [ 674.293030][T25050] nbd_start_device+0x189/0xb30 [ 674.293049][T25050] ? device_create_file+0xf4/0x1b0 [ 674.293067][T25050] nbd_genl_connect+0x1597/0x1c10 [ 674.293087][T25050] ? __pfx_nbd_genl_connect+0x10/0x10 [ 674.293104][T25050] ? rcu_is_watching+0x15/0xb0 [ 674.293121][T25050] ? trace_kmalloc+0x2a/0xf0 [ 674.293144][T25050] ? __kmalloc_noprof+0x396/0x720 [ 674.293168][T25050] ? __nla_parse+0x40/0x60 [ 674.293192][T25050] ? genl_family_rcv_msg_attrs_parse+0x20b/0x2f0 [ 674.293214][T25050] ? genl_family_rcv_msg_attrs_parse+0x265/0x2f0 [ 674.293238][T25050] genl_family_rcv_msg_doit+0x233/0x340 [ 674.293262][T25050] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 674.293287][T25050] ? __lock_acquire+0x683/0x2cf0 [ 674.293305][T25050] genl_rcv_msg+0x614/0x7a0 [ 674.293327][T25050] ? __pfx_genl_rcv_msg+0x10/0x10 [ 674.293347][T25050] ? __pfx_nbd_genl_connect+0x10/0x10 [ 674.293368][T25050] netlink_rcv_skb+0x226/0x4a0 [ 674.293384][T25050] ? __pfx_genl_rcv_msg+0x10/0x10 [ 674.293404][T25050] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 674.293425][T25050] ? down_read+0x2be/0x330 [ 674.293441][T25050] genl_rcv+0x28/0x40 [ 674.293461][T25050] netlink_unicast+0x7bb/0x940 [ 674.293479][T25050] netlink_sendmsg+0x813/0xb40 [ 674.293499][T25050] ? __pfx_netlink_sendmsg+0x10/0x10 [ 674.293517][T25050] ? aa_sock_msg_perm+0xf1/0x1b0 [ 674.293536][T25050] ? __pfx_netlink_sendmsg+0x10/0x10 [ 674.293552][T25050] sock_sendmsg_nosec+0x13a/0x180 [ 674.293574][T25050] ____sys_sendmsg+0x54e/0x850 [ 674.293592][T25050] ? __pfx_____sys_sendmsg+0x10/0x10 [ 674.293611][T25050] ? import_iovec+0x73/0xa0 [ 674.293627][T25050] ___sys_sendmsg+0x2a5/0x360 [ 674.293642][T25050] ? __lock_acquire+0x683/0x2cf0 [ 674.293663][T25050] ? __pfx____sys_sendmsg+0x10/0x10 [ 674.293681][T25050] ? futex_wait+0x2a2/0x390 [ 674.293711][T25050] ? __fget_files+0x2a/0x420 [ 674.293725][T25050] ? __fget_files+0x3a2/0x420 [ 674.293742][T25050] __x64_sys_sendmsg+0x1b1/0x290 [ 674.293759][T25050] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 674.293782][T25050] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 674.293798][T25050] do_syscall_64+0x174/0x580 [ 674.293812][T25050] ? clear_bhb_loop+0x40/0x90 [ 674.293829][T25050] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 674.293845][T25050] RIP: 0033:0x7f7b7b39ce59 [ 674.293864][T25050] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 674.293879][T25050] RSP: 002b:00007f7b7c2e3028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 674.293895][T25050] RAX: ffffffffffffffda RBX: 00007f7b7b615fa0 RCX: 00007f7b7b39ce59 [ 674.293907][T25050] RDX: 0000000000000004 RSI: 0000200000001ac0 RDI: 0000000000000008 [ 674.293918][T25050] RBP: 00007f7b7b432e6f R08: 0000000000000000 R09: 0000000000000000 [ 674.293928][T25050] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 674.293938][T25050] R13: 00007f7b7b616038 R14: 00007f7b7b615fa0 R15: 00007fff66d379b8 [ 674.293955][T25050] [ 674.807852][T19870] block nbd3: Receive control failed (result -32)