last executing test programs: 2.726794002s ago: executing program 0 (id=2282): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) socket$l2tp(0x2, 0x2, 0x73) r0 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) sendmsg$nl_route_sched(r0, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x44840) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x2000c851, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x0, &(0x7f0000000480)="00d0954942b108d5185389ebdd8a5036c2fa43f51c5afb9821984d", 0x0, 0x0, 0x0, 0x8}, 0x31) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0xb}, 0x4e21, 0x3, 'fo\x00', 0x1, 0x4, 0x17}, 0x2c) r3 = socket$kcm(0xa, 0x2, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'wrr\x00', 0x23, 0x81, 0x5}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x4e23, 0x10000, 0x1cb, 0x12d61, 0x12d58}}, 0x44) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000000)={{0x84, @local, 0x4e24, 0x4, 'wrr\x00', 0x8, 0x323b, 0x55}, {@remote, 0x4e23, 0x10000, 0x0, 0xc, 0x12d5c}}, 0x44) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r6 = socket$kcm(0x2, 0xa, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, 0x0}, 0x0) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000000000000000000000000000000000001fe8000000000000000000000000000bb00000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000c00000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000020000000000000000000008000000000000000000a000000000000feffffffff7f400002000000000000080000000000000000010000000000000044000500ac1414aa000000000000000000000000000000003c00000002000000ffffffff0000000000000000000000000600000004"], 0xfc}, 0x1, 0x0, 0x0, 0x800}, 0x0) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r9, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x2c) sendmmsg$inet6(r7, &(0x7f0000002fc0)=[{{&(0x7f0000000180)={0xa, 0x4e20, 0x8, @dev={0xfe, 0x80, '\x00', 0x29}, 0x9}, 0x1c, &(0x7f00000004c0)=[{&(0x7f0000000280)="00fd", 0x2}], 0x1}}], 0x1, 0x24000045) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) write$tun(r5, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500561308005400000060ec970001983a00fc000018c6ba35000000000000000700ff02000000000000000000000000000100000000000000cc00000000000000000000000000000000860090780000000000000000000000000000ee3f000000002b036f8c006e64021d683910c3090b3188a7c747eb2278a273c1b80029442911892704"], 0xfdef) sendmsg$sock(r3, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 2.65804666s ago: executing program 3 (id=2283): r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x4001, 0x3, 0x2b0, 0x138, 0x0, 0x148, 0x0, 0x148, 0x218, 0x240, 0x240, 0x218, 0x240, 0x7fffffe, 0x0, {[{{@ip={@loopback, @local, 0x0, 0x0, 'ip6gretap0\x00', 'netdevsim0\x00'}, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'lo\x00', {0x0, 0x0, 0x1ff, 0x0, 0x0, 0xed, 0x7}}}, @common=@unspec=@connlabel={{0x28}, {0x7f00}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private1, 'ip6erspan0\x00'}}}, {{@ip={@local, @loopback, 0x0, 0x0, 'veth0_vlan\x00', 'macvtap0\x00'}, 0x0, 0xc0, 0xe0, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28, 'rpfilter\x00', 0x2}}]}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x310) unshare(0x20000400) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000008c0), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCSPASS(r1, 0x40107447, &(0x7f0000000380)={0x0, 0x0}) 2.428816122s ago: executing program 4 (id=2285): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0xa7, @any, 0x7f, 0x2}, 0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000a479df"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = socket(0x10, 0x3, 0x0) close(r2) sendmsg$nl_route(r2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) setsockopt$TIPC_GROUP_LEAVE(r2, 0x10f, 0x88) 2.258030032s ago: executing program 2 (id=2286): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000001080)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) read(r1, &(0x7f0000000380)=""/46, 0xfffffeb4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000080000007910000000000000070000000100000095"], &(0x7f0000000100)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x5}, 0x94) sendmsg$IPSET_CMD_SAVE(r1, &(0x7f0000000200)={0x0, 0x27, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000080601080000000000000004000000040500010006"], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x10) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0x40086604, &(0x7f0000000040)={0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2}) setsockopt$inet6_int(r0, 0x29, 0x3, &(0x7f0000004240)=0x40000006, 0x4) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x3) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r2, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r2, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081046881f782db44b904021d080b01000000e8fe55a11800150006001400030000120800040043000000a80016000a00014020000d00036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d0080000000000000b57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bd6c769ad809d52a9ecbee", 0xd8}], 0x1}, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc}}, &(0x7f0000000300)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r4}, 0x10) socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000003e00)=[{&(0x7f0000000200)={0x10c, 0x2e, 0x1, 0x0, 0x0, "", [@nested={0xf9, 0x0, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64=0x3}, @typed={0xc, 0x3, 0x0, 0x0, @u64=0xf}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe8101000000010000008b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd"]}]}, 0x10c}], 0x1}, 0x10) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000340)=ANY=[], 0x8) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 2.203203838s ago: executing program 3 (id=2287): socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) (async) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000680)=ANY=[@ANYBLOB], 0x60}}, 0x0) shutdown(0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth1\x00', 0x0}) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x4, [@float={0x9, 0x0, 0x0, 0x10, 0x4}, @func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{0x6}, {0xe, 0x4}]}]}, {0x0, [0x2e, 0x30]}}, &(0x7f0000000240)=""/69, 0x44, 0x45, 0x0, 0x8}, 0x28) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0), 0x4) (async) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0), 0x4) socket$inet(0x2, 0x80001, 0x84) (async) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, 0x0, &(0x7f0000000040)) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x6, '\x00', r1, r2, 0x4, 0x0, 0x3}, 0x50) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000050a03000000000000000000020000000c00024000000000000000010900"], 0x80}}, 0x0) r5 = syz_init_net_socket$llc(0x1a, 0x0, 0x0) sendmmsg$inet(r5, &(0x7f0000000c40)=[{{&(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x23, 0x0}}], 0x1e1730a30afb6559, 0x8014) listen(r5, 0x2) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000580)={'syztnl1\x00', &(0x7f0000000700)={'syztnl0\x00', 0x0, 0x2f, 0x1, 0x1, 0x7, 0x0, @private0, @dev={0xfe, 0x80, '\x00', 0xe}, 0x20, 0x10, 0x630, 0x15}}) (async) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000580)={'syztnl1\x00', &(0x7f0000000700)={'syztnl0\x00', 0x0, 0x2f, 0x1, 0x1, 0x7, 0x0, @private0, @dev={0xfe, 0x80, '\x00', 0xe}, 0x20, 0x10, 0x630, 0x15}}) accept4$nfc_llcp(r5, 0x0, 0x0, 0x0) 2.155456082s ago: executing program 4 (id=2288): r0 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000080)=0x0) sendmsg$AUDIT_SET(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x3c, 0x3e9, 0x10, 0x70bd27, 0x25dfdbff, {0x51, 0x1, 0x1, r1, 0x8, 0x1, 0xc4, 0xf22, 0x0, 0xfffffdd0}, ["", ""]}, 0x3c}}, 0x40890) (async, rerun: 64) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x4, 0x2, 0x1, 0xb9, 0xfffffffffffffff0}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) (rerun: 64) 2.099548502s ago: executing program 3 (id=2289): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b553850000008500"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ppoll(&(0x7f0000000500)=[{r1}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000480)='kfree\x00', r2, 0x0, 0x1843}, 0x18) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f00000000c0)=0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r9, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r8, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r11, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) sendmsg$NFC_CMD_DEV_UP(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="010028bd7000070000000200000008000100", @ANYRES32=r4], 0x1c}}, 0x8004) socket(0x40000000015, 0x5, 0x0) r12 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_route(0x10, 0x3, 0x0) write$nci(r3, &(0x7f00000002c0)=ANY=[@ANYRESDEC, @ANYRES8=r12], 0x4) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000240), 0xffffffffffffffff) 1.876992059s ago: executing program 1 (id=2290): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002440)={{0x14, 0x10, 0x1, 0x0, 0xf5ff, {0x5}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x48}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 1.759607658s ago: executing program 4 (id=2291): r0 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000240)={{{@in6=@dev, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {{@in=@private=0xa010101, 0x0, 0x3c}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0xfd}, 0x3503, 0x0, 0x2, 0x7, 0x0, 0x6}}, 0xe8) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_EEE_SET(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000540)={0x2c, r2, 0x21, 0x70bd2b, 0x25dfdbfb, {}, [@ETHTOOL_A_EEE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000000) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@delchain={0x364, 0x65, 0x200, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xfff2}, {0x0, 0xfff3}, {0x4, 0xb}}, [@filter_kind_options=@f_bpf={{0x8}, {0x338, 0x2, [@TCA_BPF_ACT={0x20c, 0x1, [@m_mirred={0xbc, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x5, 0x9, 0x2, 0x38eb8000, 0x9b}, 0x1}}]}, {0x6d, 0x6, "dae0489b799d15556c6c7d44ae8f295fea1c62d64b963cf0dd1fcb6569ccece7639c45fe850fdd998bfb2bf1864e314a1573d71d7ce0c846e05d02bea46bb8684f4400bcd9e6ffd44db802ec87e70b916f5c754381982d8e0d94021e6c0a03419d371065f3943d3dd6"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_skbedit={0x14c, 0x3, 0x0, 0x0, {{0xc}, {0x4}, {0x11e, 0x6, "6312ba1453c5d091a0881fca14b9956480f3ca01000000f8a483d1b6f6604359e5f9d5bbd04d8b961ba6739d085a3cb7d2d799a668016c96c2ff637dedeffa8da89a49936b4b7fbff50985b44886c0c84e83be59924efe7188d35b36e9aab8049035eae89f118d21ba24d7144786ee031312654a3a4f11abde9f00ae6853d8dbe23744964c993882e88a76f74acaec4ae3621387184293ff5eb4367f1e2d1ef0e2ede5b93d3670704347f4c3f84f64d574ed741a01ea0117d048572c06208b43f1925f6ca4d6ff34028ef2d66c6ec28223b402982893eab21175cbdd5d8b51ab3b337d9158cee2028280887c72ed47dcc3809edf6b8b441d01ec82deb7caee85e4b7aca60ef87552a34e228f4c4c024480e324bb3b8dfdbc68ee"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}, @TCA_BPF_POLICE={0xb0, 0x2, [@TCA_POLICE_TBF={0x3c, 0x1, {0x10, 0x6, 0x2, 0xbe04, 0xffff, {0x2, 0x2, 0x8, 0xb, 0xe, 0x7}, {0xf6, 0x0, 0x8, 0x7ff, 0x8, 0x1000}, 0xa60, 0x7e, 0xd252}}, @TCA_POLICE_RATE64={0xc, 0x8, 0xfffffffffffffffb}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xe2}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x8}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x401}, @TCA_POLICE_AVRATE={0x8}, @TCA_POLICE_TBF={0x3c, 0x1, {0x2, 0x6, 0x1, 0x7ff, 0x1ff, {0x5, 0x2, 0x9, 0xd9d, 0x3, 0x5}, {0x7, 0x2, 0x3, 0x6, 0x8, 0x42cf}, 0x5, 0x0, 0x7}}]}, @TCA_BPF_ACT={0x78, 0x1, [@m_bpf={0x74, 0x7, 0x0, 0x0, {{0x8}, {0x1c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x1, 0x7, 0x1, 0x9, 0x1}}]}, {0x31, 0x6, "f3ef5037a6528e33d770d04ac21b212ade2038dcc7272de194cea4dc3a7d2d828f018c45a15167f02711ac66b0"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x22bf533d53fd5981, 0x2}}}}]}]}}]}, 0x364}, 0x1, 0x0, 0x0, 0x80}, 0x20000080) r3 = socket(0x10, 0x803, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x4e23, 0x8, @loopback, 0xffffffff}}, 0x8000, 0x5, 0x4, 0xc, 0x32, 0x6, 0x5}, &(0x7f00000000c0)=0x9c) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000100)={r5, 0x10001}, 0x8) setsockopt$inet6_IPV6_RTHDR(r4, 0x29, 0x39, &(0x7f0000000940)={0x3b, 0x2, 0x2, 0x1, 0x0, [@local]}, 0x18) sendto(r3, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x7, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x30, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_USERDATA={0xf, 0x3, "91abc12404cf378042f26c"}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x9}], {0x14}}, 0x8c}}, 0x0) recvmmsg(r3, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 1.759257962s ago: executing program 1 (id=2292): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x2, &(0x7f0000000440)=0x9, 0x4) setsockopt$inet6_int(r0, 0x29, 0x33, &(0x7f0000000040)=0xf2b, 0x4) getsockopt$inet6_buf(r0, 0x29, 0x6, &(0x7f0000001500)=""/17, &(0x7f00000000c0)=0x11) 1.620063064s ago: executing program 1 (id=2293): socket$inet(0x2, 0x5, 0xfff) (async) r0 = socket$inet(0x2, 0x5, 0xfff) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000140), &(0x7f0000000180)=0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x69, 0x11, 0x8e}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSSL2CALL(r1, 0x891a, 0x0) socketpair(0xb, 0x80009, 0x6, &(0x7f0000000040)={0xffffffffffffffff}) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f00000000c0)=[@in6={0xa, 0x4e23, 0x81, @dev={0xfe, 0x80, '\x00', 0x25}, 0x1a}, @in={0x2, 0x4e20, @loopback}, @in={0x2, 0x4e20, @multicast1}, @in6={0xa, 0x4e20, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}, 0x10000}, @in6={0xa, 0x9, 0x9, @local, 0x4}], 0x74) (async) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f00000000c0)=[@in6={0xa, 0x4e23, 0x81, @dev={0xfe, 0x80, '\x00', 0x25}, 0x1a}, @in={0x2, 0x4e20, @loopback}, @in={0x2, 0x4e20, @multicast1}, @in6={0xa, 0x4e20, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}, 0x10000}, @in6={0xa, 0x9, 0x9, @local, 0x4}], 0x74) 1.555598958s ago: executing program 4 (id=2294): sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="34040000", @ANYRES16=0x0, @ANYBLOB="01002bbd7000000000001400000018000180140002006e657464657673696d300000000000000500190001000000"], 0x34}, 0x1, 0x0, 0x0, 0x4044050}, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f00000001c0)="39000000140081ae0000dc676f97daf01e2357f9ffffffffffffff0521018701546fabca1b4e8a06a6580e88370200c54c1960b89c40ebb373", 0x39}], 0x1}, 0x0) close(0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r4) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000ec0)=ANY=[@ANYRES32=r5, @ANYRESHEX=r0, @ANYRESHEX=r5, @ANYBLOB="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", @ANYBLOB="b979248558ddfccc450d1b2eb60e8d4e377788f1355da94cad9bd9bab31bb52a3e23c1718779d8d5dc7ce919ff6728c21c88687e7092053310628c6c2a811bf4521f38eb190ed3c68a6c3f5c0706030836e5ce5a949e882629fea2b6645c17ff16a2eafa4d6003fd9d2141619a57831a968a1f5e2535716e7ef5a7ecb85387aaf1e532031f87cb589dee717e41012896bb64fb467e5cc6ff2c06fe686ac8f064d4562ec3529fbf04b4786c2a0c10f9"], 0x44}, 0x1, 0x1000000, 0x0, 0x4000}, 0x24008045) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x6, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0x53, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x1e) r7 = socket$netlink(0x10, 0x3, 0x0) unshare(0x22020600) connect$netlink(r7, &(0x7f0000000080)=@proc={0x10, 0x0, 0x25dfdbfc, 0x200000}, 0xc) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r9, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) r10 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r10, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2673004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r11, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="0100000000020000000001000000280001801400040000000000000000000000ffffac1414aa060001000a0080000800060003"], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 1.464078334s ago: executing program 2 (id=2295): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) syz_genetlink_get_family_id$nbd(&(0x7f0000000200), 0xffffffffffffffff) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x3}, 0x8) r1 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)=@o_path={&(0x7f0000000040)='./file0\x00', 0x0, 0x8, r0}, 0x18) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000040)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5", 0x4) r4 = accept4(r3, 0x0, 0x0, 0x80800) sendmmsg$alg(r4, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe1a}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x353c7a510d3d58d2, 0x0) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x10, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2, 0x0, 0x0, 0xf5000000}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000280)="8c989e14f088a800000000000000", 0x0, 0x2, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r5, 0x6, 0x22, &(0x7f00000001c0)=0x1, 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000200), 0xffffffffffffffff) (async) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x3}, 0x8) (async) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)=@o_path={&(0x7f0000000040)='./file0\x00', 0x0, 0x8, r0}, 0x18) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000040)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) socket$alg(0x26, 0x5, 0x0) (async) bind$alg(r3, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5", 0x4) (async) accept4(r3, 0x0, 0x0, 0x80800) (async) sendmmsg$alg(r4, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe1a}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x353c7a510d3d58d2, 0x0) (async) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x10, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2, 0x0, 0x0, 0xf5000000}, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000280)="8c989e14f088a800000000000000", 0x0, 0x2, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) (async) socket$inet_mptcp(0x2, 0x1, 0x106) (async) setsockopt$inet_tcp_int(r5, 0x6, 0x22, &(0x7f00000001c0)=0x1, 0x4) (async) 1.387719428s ago: executing program 1 (id=2296): sendmsg$inet(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x7f}}, @ip_ttl={{0x14, 0x0, 0x2, 0x7fffffff}}], 0x30}, 0x80) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000040), 0x4, 0xffffffffffffffff, 0x4}, 0x38) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x7, 0x6, 0xc}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x3, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, [@call={0x85, 0x0, 0x0, 0x29}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r2, 0x18000000000002a0, 0x14, 0x0, &(0x7f0000000440)="b9ff033168440372b89e14f00800", 0x0, 0xa, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000d40)=ANY=[@ANYBLOB="180000000000e3ff000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000e00000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r3}, 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000780)={@fallback, r3, 0x2e, 0x1c}, 0x20) r4 = socket$kcm(0x29, 0x5, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r4, 0x119, 0x2, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r0, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26, 0x0, 0x1}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x6, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000280)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r5, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0)={0x0, 0x10}, 0x10}, 0x94) 1.25830917s ago: executing program 0 (id=2297): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r0) sendmsg$TIPC_NL_PUBL_GET(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)={0x6c, r1, 0x8, 0x70bd2a, 0x25dfdbfc, {}, [@TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xffffffff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}]}, @TIPC_NLA_MON={0x3c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9b5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xffffffff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7ff}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x80}, 0x2400c000) (async) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x3c, r2, 0x1, 0x70bd2e, 0x0, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_TX={0x5}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_RX={0x5, 0x19, 0x1}]}, 0x3c}}, 0x20000000) (async) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000140)=0x7ffd) (async) ioctl$PPPIOCSPASS(r3, 0x40107447, &(0x7f0000000180)={0x20, 0x0}) 1.255529006s ago: executing program 2 (id=2298): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x60, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0xff}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x60}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000380)="2190", 0x2}], 0x1}, 0x1) setsockopt$sock_attach_bpf(r1, 0x1, 0x10, &(0x7f0000000000), 0x4) recvmsg$unix(r1, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x2) writev(r2, &(0x7f0000000180)=[{&(0x7f0000000080)='X\x00', 0x2}], 0x1) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x2c, 0x24, 0xf1d, 0x0, 0x1, {0x0, 0x0, 0x0, r6, {}, {0xfff1, 0xf}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x4}]}, 0x2c}, 0x1, 0xfffc, 0x0, 0x24004000}, 0x4000800) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000003080)=@delchain={0x34, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000940)=@delchain={0x24, 0x11, 0x1, 0x1f, 0x0, {0x0, 0x0, 0x0, r6}}, 0x24}}, 0x0) 1.238490222s ago: executing program 1 (id=2299): bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000780)=ANY=[@ANYBLOB="0a00000016000000000800007f00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000200"/28], 0x50) r0 = socket(0x15, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'macvlan1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001c00110c0000001400000f0007000000", @ANYRES32=r1, @ANYBLOB="800202000a00020057"], 0x48}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180500000000c800000000004b64ffec850000007d000000850000002a00000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x40) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002000000da16c167d803f1f805000600200000000a00060000000000ff0000000000000000001ffeff0001000003f1dc7f7c6e7c0200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0) sendmmsg(r4, &(0x7f0000000180), 0x400008a, 0x0) sendmsg$key(r4, &(0x7f0000000000)={0x9, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)={0x2, 0x9, 0x0, 0x9, 0x2, 0x0, 0xffffffff, 0x25dfdbfe}, 0x10}}, 0x0) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r5}, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket(0x10, 0x803, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x218}}, 0x0) getsockname$packet(r9, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040020000010000000", @ANYRES32=r11, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYBLOB="3c0000001800010000000000000000000a00000000000000000000000c00090008000080", @ANYRES32=r11, @ANYBLOB="14000500fe80"], 0x3c}}, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000010c0)=ANY=[@ANYBLOB="3c0000001800010000000000000000000a00000000000000000000000c00090008000000", @ANYRES32=r11, @ANYBLOB="14000500fe80917a952a643f152befd0599ecd85f55afcd7d85070a802fc3c9b75011f7bb27cfa7e4e"], 0x3c}}, 0x0) write$cgroup_int(r6, &(0x7f0000000200), 0x806000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) getsockopt(r0, 0x200000000114, 0x2710, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf002) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x600000b, 0x6e071, 0xffffffffffffffff, 0x80000000) 1.079665509s ago: executing program 3 (id=2300): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = syz_init_net_socket$llc(0x1a, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000280)={0xffffffff}, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={0x14, 0x42, 0xa01, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0xe21, 0x4, @private2={0xfc, 0x2, '\x00', 0xe}, 0x7}, 0x1c) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) r8 = socket(0x400000000010, 0x3, 0x0) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r9, &(0x7f0000000040)={0x1f, 0x1, @none, 0x0, 0x2}, 0xe) r10 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfd, {0x0, 0x0, 0x0, r11, {0xfff1, 0xa}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}, @TCA_BPF_CLASSID={0x8, 0x3, {0x3, 0x6}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) r12 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl(r12, 0x8b2c, &(0x7f0000000040)) r13 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r13, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000180)=ANY=[@ANYBLOB="700000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006d616373656300000400028008000500", @ANYRES32=r3, @ANYBLOB="08001f0005000000050011000100"], 0x70}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r3, {0x1, 0x6}, {0x7}, {0x3}}}, 0x24}}, 0x0) 875.225817ms ago: executing program 4 (id=2301): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000004000000020000000000000f0400000000005f"], 0x0, 0x28}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x4, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48) 787.396944ms ago: executing program 2 (id=2302): r0 = socket$netlink(0x10, 0x3, 0x7) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x1a, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xce2}, [@map_val={0x18, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x344}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x4}, @alu={0x4, 0x1, 0x2, 0xb, 0x7, 0xffffffffffffffff}, @map_val={0x18, 0x2, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x101}, @map_idx={0x18, 0x9, 0x5, 0x0, 0x5}]}, &(0x7f0000000140)='GPL\x00', 0x80, 0x85, &(0x7f0000000180)=""/133, 0x40f00, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000240)={0x5, 0xc, 0x6, 0x800}, 0x10, 0x0, 0x0, 0x7, &(0x7f0000000280)=[0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1], &(0x7f00000002c0)=[{0x3, 0x2, 0x4, 0x3}, {0x3, 0x3, 0x10}, {0x3, 0x5, 0x2, 0x9}, {0x3, 0x2, 0x6, 0x7}, {0x4, 0x2, 0xa, 0x5}, {0x0, 0x1, 0xe, 0xb}, {0x1, 0x3, 0xb, 0x3}], 0x10, 0x2}, 0x94) ioctl$EXT4_IOC_CHECKPOINT(r1, 0x4004662b, &(0x7f0000000400)=0x5a6de34f2644763d) r2 = socket$igmp(0x2, 0x3, 0x2) getsockopt$IPT_SO_GET_REVISION_MATCH(r2, 0x0, 0x42, &(0x7f0000000440)={'TPROXY\x00'}, &(0x7f0000000480)=0x1e) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000500), r0) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r0, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x1c, r3, 0x10, 0x70bd2d, 0x25dfdbff, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0xc004) sendmmsg(r0, &(0x7f0000003940)=[{{&(0x7f0000000600)=@generic={0x29, "abf94b6500f814103f2455194527e259c633728dd5df638cfc1914e8bec25f73aaeb3a2a787e78719b29ae3cce579e4128632564575b7ab11c6382fbf98af9e5479184e29623ea80bbc38b972826f33e4cdf2b431cca4f2ae4bff34b7ec4ef26fb0a466f260a4270238f1e9bc9064a2094790bbc058aed65af6b159e8b7a"}, 0x80, &(0x7f00000008c0)=[{&(0x7f0000000680)="06dd4a2954c84d26407d8e29326633a5681edb85f1caa98d79ee02a57470a15d95b2b4232189ff49fbad252201f82a7ef69c3d5a02256393360f855d1254880a3923d0ae87539643b5729066b4fde0f3736799f5d425f24b0e398cd78daff3a2eb5d3204", 0x64}, {&(0x7f0000000700)="d6043e616c229f503c1d0e2d1e2f454d679ceb98a8f5fbbcb3b2f399e5748c7652e64ec998a151606774d8376d5e8499275b2e0cf30b2e22915ae80736caa4f738fedddffd", 0x45}, {&(0x7f0000000780)="c13b6e2ee26a92b60546b774e6de28aa7e18fab9a5e2be08403cb8e2f439bbb06c410685a3e7011ca85a82f38a92fda68907cd047b6f0f3e86807fc4e3e7e0952e3443e26280203415cdfddf079f2db980a800089b4cbab7f3c1eb68f3993d88c1c97b79e52dcf7816810a55506c6b82200b0fca74ae0291bca6f78d0afc3c5be7cfcb4e83846089a27629", 0x8b}, {&(0x7f0000000840)="0d6bff0f709888bf0437577dabba5a693ccd8d1579bf69e8aea41bdf0439cbb1ffb86c9287aebb747906d8dccf24b08fda1af74d29f36e36813dc358afecae6246488d0853319255acaa1a5cc5a146bf29", 0x51}], 0x4, &(0x7f0000000900)=[{0x100, 0x101, 0x6a, "3ecb9ca645e64e76e9d662774bfe63003f3d7004bd5fb82415002b4ee741553c5f913c9abba2e686c9dfe9eb4d845e9e0dda8df5b6e5d8fdea93319952ec039f3306166d391a95e20c5735ee81644c50c670335fe73191778923264442df388dd31bbfa7b3bb54fea9cf70e4249c212f02531ed8047ab9b7af3cb2ec4ce54d3a2ac26a58ec65faa0f15a103fa8fe949c4c97c63cd55ef5596ef5dc3a6be7b4060682cb0dda0dbea6147e246b7d7346b8ca182705995dfd382b1ad6e2f79860a3c0a1d36a5fa3133236d4e4996d2e6b31e4a5218b6d0da0861d0780c6df7598203137afaa014c14f836ca3970"}], 0x100}}, {{&(0x7f0000000a00)=@nl=@unspec, 0x80, &(0x7f0000000bc0)=[{&(0x7f0000000a80)="ae34b7b83fe02ae222b49b4734697ee0aaef08a9cd30ae342e30a2cc323f04403bba746835e49b04238b13f4e228cd37c2587d69ec0469af5363f48c9caf4bc8d9d12cd330", 0x45}, {&(0x7f0000000b00)="f5795a5bc08c818f9b5a65743d797f62ea8d54009a7beea5a7791a7b33b263fa756f7a7357ca1c661efb366fc122042340d4a61895562ed59526e7b4af1528580a7a4ada816c1891aa5c78c0f0796bcf401e09eb960370de904dfcbc99b5923232919243d59f944051ce0497f4765cff4ecf959b35b70ff03d8edfda294c224b841274", 0x83}], 0x2, &(0x7f0000000c00)=[{0x60, 0x10d, 0x7, "ea319e2b826a4ee445d0e2aa4c56efefbd9ad7b404b13056e2bba317daad7854e971d47c18077bf884d17581d8416296a124fb118cd4b0c1ce6d39ef10bc8ce43c8bf068d549e33d49929d"}, {0x50, 0x10d, 0x1, "c4c7b2fcaf337b4112b4c0b4b2662deb2f51c1a6f8dabb2c45b4565eb6aa3d1aa4027c5a2f7dd6ed8d4177cab4a28bb5d088e943afe4e0b0e1"}, {0xe8, 0x1, 0x4, "f31d63f0deabfe625d75afb8e35c877c1e4211379a0f0945797d3438542f11d0bc1cf0c79e9a62acb7a98824687622fe6aa7470bf289cb57d2df521001043d8b73725953f18736f67e825802763487c5d2c95728be38b93b37dba2b05bdc6acb453b38ae4b0d70be6cb415c79024c5a2c6ec59f4a20b27a699255c6096db57b4dfe5c13dba8cfeee835ae66f7a41868f4c3b2999f414186008ef77564825e288b62be5f4a644bed5dd5aef1439916e0dbf069853c6f2b42545e04c913b40a987507bc871915e1b635331c5d57bc532d55382cd3b"}, {0xb0, 0x101, 0xfff, "d69e2fa5f49cc387440442707c43eab0b112e8bdb7176f642b65fcd7f533b032d84c58b2115e156f2ca9a4fe5fa082fd8f688698d57aaf21ed706992e0b19349d59cabfd3c04be5da86d0ad0e7a0f7eba2e8ef2144741e5725110448b0e906be58cf1c848572ecb6e526dfec8cefa9e4058eee8c055582ac66f9f6afcc939aa5c10838184ac25cfa10ddf338068ab200f22cf0e7c374657b39b68f9733a8"}, {0xb8, 0x0, 0x42581461, "10f26407b9e701dba25bf24cbe307f159dbc0e0e81d85d51d31e0f5013662f9e8bad0d57161f1796050e40c88f43e851cc3ad5629ea3b777f6b72e883d9f57e30ccffc8924ee57332615c8814dd9fe2be5ca86ac1b1591f69aa7e8745cdb9a2d51fca6578eb5704b2008e6573365ab3f16ce452d05b81eea01f87943fbabf01cced220d970f9c575f81e5f4646144f5d03ddc327527eacc2e3c7aa893a63d4539d55"}, {0x70, 0x111, 0xfffffffb, "1c1353ab2474ea1c521b1fbfddae86ebe90cc89cb91838d34a6d3dafcc65c66ef38eb1467b2e4ec49d02687fcc3804b7df2215b1da0c5410b8e7d23fd2275307d57744154867185a6e1ce2f48f8125201d24c1daf70e56a62018"}, {0x1010, 0x112, 0x80, "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"}], 0x1380}}, {{&(0x7f0000001f80)=@l2={0x1f, 0x101, @none, 0x2, 0x1}, 0x80, &(0x7f0000002040)=[{&(0x7f0000002000)="15d74fd65bb057d8d4c1e5cd99d56304959559775bf766d94507d8f9a1b4bc906f96c89d1f", 0x25}], 0x1, &(0x7f0000002080)=[{0x68, 0x102, 0x3, "1a1bc7686fa5e1f5a98835955a68b561c9ed78475a40c2db0775545f62d5e6d971f234fc147a0aacb169a7d72da32086ed05c91b5a60e515722442dbc4d53d92dcc81cbd252ef700c14d85ba36cd07ffcee34f0e2d0d13"}, {0x60, 0x109, 0x7, "bc43bc50e221d424613cf970f9a936477909810c5ffb3fa3b11dc2c6dd10cad7e2ad2236197963008fee43107509ad2bca9e7d598a775f1c6e90dcde6b1843c3e53ab70b81cc66a0819453"}, {0xf8, 0x119, 0x8001, "0171dd26f5e1407f82c834b850169a25238f98c2f01ba526acf5616ad5d140750b2fc9cb670a273099ba7af49a67900a1cfb49aec021681572b979c960906a2f2595a50586af0a16f10fdea867277e396506a38fdf13654b49c704804078a9ade45a1eb53c1433305880f75b56605995254121244509ce1a088dc256b42d47eb1fc16783090e21a03323e3735a1564ba9f132828334503454302f0f2091ab334c1e22785bf47ca6ce0020238c274f89fd8f1908601a67560bd84328b70d7fab1fdf2674cc8c193b1a5e2534043562fb09140335053531460a54be334f3246c3151f78f09a05f"}, {0x60, 0x109, 0x101, "f70ffb4d4f1fcaf318b8c6b93c6b6fdb109e2b78962020bd78679437aeccae3d1bd2abf4d80a511945b06ba2b5a727424cfe4d823f4b5fd5e4e614857cd5e8da6eaa752f3fa11347bca4fc"}, {0x30, 0x10a, 0x4, "978710fe14f22ea54e4f7b4416e88d78af9afc2ac710d95c4040c7b74cd009"}, {0x30, 0x10a, 0x4, "ea195cfeda52ec8207b4314f342b213e62bf168428db9f279263852930fa3520"}, {0x68, 0x110, 0x5, "e350c69b0866c8f40f8331dd9c1e610b6b6098eb105cbdf77882ee75a8945958495d79854f00152c50f25be87fe752f18046057a83ac1aa4ca94efe84780b66ffeada1286ca2d4d31cf82590e5f129c10908"}], 0x2e8}}, {{0x0, 0x0, &(0x7f0000002540)=[{&(0x7f0000002380)="b1c6d6a75f90ede49d68c22c25e474888c288e3d969bdc0db0699be88e60cdabd48097d4aedd99293e84c78f77527dcc00e1afbbbeafedff3c7bcae406b63616855d7457306a16fe523e708ce5994479b74c158d7202864effc725c932c4b9227d4691fdc9d09e495e6d555515a6c02da239f7280dfa77cfb57bdeabfe7fcfd98aa7677630371222cc2b60e9c08e50b4e4c3090282863c81a8cbb6c4353e3aab6dd7a690f011e10b2de5ba9a2a5ab58bc6fbd31e8f95f91bfb4b7844d56e6d6b83ef969629e6e6658bacd94298f4b7dbacb49721a50114", 0xd7}, {&(0x7f0000002480)="bdd21a7542375096fc2a038875144835744d66a36d8128d3a210887ba49ae258c306e20bb5fdfc4f3d29d629f41ab41222171fe711a65d700ea1133f92f01d60dcbbcbfdd5040e8ece049d531f0f99204096998b5334f79d422b8653bfec6a82daf73f0892b11d5334c41c64fbd0342fa0361658adc62025bd3661c5f951b36ac1690085e43b89b39964ad3df69f07c5816134a1a0c9c0a8be271dea8e16b1f2", 0xa0}], 0x2}}, {{&(0x7f0000002580)=@llc={0x1a, 0x10e, 0x9, 0x80, 0x2, 0x7, @broadcast}, 0x80, &(0x7f0000002700)=[{&(0x7f0000002600)="a869be5e5af349a496cef925a597d9fcc468b8f1d194c6277822df201f145fe87ad6faa1ae894ccd2a9224e30c24d484153624b853f822b4ea493cf535f75c63830e14da870783a3acb545a0e9cbdf117d3458bb79719b5195ebfb3d782fa96d4c64e2a63c4c46fac5ce87eba8f4cb6caa00c5802d2dda4837355f7a4dfe3373dcde89294be5b7356c98dc4d96e62cbce12a25f76a764eebf0459f569f9bc442b3301dc8e78689ab3cc3bd9a0caa469a14dcaea943e41ab6462604d8971ac5", 0xbf}, {&(0x7f00000026c0)="5f8df6cd1cc74faa97b97696e64d750e706417f130008a4aa608a3ad0fc2014c744a587d6c05b714cc9a78821c559f", 0x2f}], 0x2, &(0x7f0000002740)=[{0x10, 0x103, 0x7}], 0x10}}, {{&(0x7f0000002780)=@rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x40}, 0x80, &(0x7f0000003900)=[{&(0x7f0000002800)="73e8664b2ae5cdc14b6e", 0xa}, {&(0x7f0000002840)="e6e5fe83cf5d97c6c1804d75752a05a9a7783499d7974644f947a0c1b7225454efc1cc20c92959c60d1668561eb7ebb337f3d8e48a8a0adf2d5e1156ad011e4c29a230620962ad33a018e0f713590323d72bde7a5adbdcf4e1c9d363edc93ada1684b417c457c12e9cc10b538f96272bb88b3ec06c8bb84abe4d7c0b6901a1fe187bbcf39479d661048ed4caec0167af3559f06bf80f054fd7a5165d128d525011d8fee76cba44aa60da17fbae3aad763b8dcf9b98", 0xb5}, {&(0x7f0000002900)="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", 0x1000}], 0x3}}], 0x6, 0x48040) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000003ac0)={0x0, 0xcf0}, &(0x7f0000003b00)=0x8) setsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000003b40)=@sack_info={r4, 0x0, 0x9}, 0xc) r5 = socket$kcm(0x29, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000003c80)={&(0x7f0000003b80)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000003c40)={&(0x7f0000003bc0)=@ipv4_newaddr={0x64, 0x14, 0x1, 0x70bd2d, 0x25dfdbfd, {0x2, 0x80, 0x40, 0x35}, [@IFA_LOCAL={0x8, 0x2, @multicast1}, @IFA_LOCAL={0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, @IFA_LABEL={0x14, 0x3, 'team_slave_1\x00'}, @IFA_TARGET_NETNSID={0x8, 0xa, 0x2}, @IFA_ADDRESS={0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x1a}}, @IFA_BROADCAST={0x8, 0x4, @remote}, @IFA_RT_PRIORITY={0x8, 0x9, 0x9}, @IFA_TARGET_NETNSID={0x8, 0xa, 0x3}]}, 0x64}}, 0x20008045) r6 = syz_genetlink_get_family_id$fou(&(0x7f0000003d00), r0) sendmsg$FOU_CMD_DEL(r0, &(0x7f0000003dc0)={&(0x7f0000003cc0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000003d80)={&(0x7f0000003d40)={0x40, r6, 0x8, 0x70bd2a, 0x25dfdbfd, {}, [@FOU_ATTR_TYPE={0x5}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @dev={0xac, 0x14, 0x14, 0x28}}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @private=0xa010101}, @FOU_ATTR_PEER_V6={0x14, 0x9, @mcast1}]}, 0x40}, 0x1, 0x0, 0x0, 0x20040000}, 0x40000) sendmsg$IPSET_CMD_TYPE(r0, &(0x7f0000003ec0)={&(0x7f0000003e00)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000003e80)={&(0x7f0000003e40)={0x38, 0xd, 0x6, 0x5, 0x0, 0x0, {0x7, 0x0, 0x3}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x3}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000001}, 0x4010) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000003f00)={'batadv_slave_1\x00'}) r7 = accept(r5, &(0x7f0000003f40), &(0x7f0000003fc0)=0x80) ioctl$sock_inet_SIOCSARP(r2, 0x8955, &(0x7f0000004000)={{0x2, 0x4e22, @rand_addr=0x64010101}, {0x306, @random="faac9026a2eb"}, 0x26, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 'hsr0\x00'}) sendmsg$AUDIT_SIGNAL_INFO(r7, &(0x7f0000004140)={&(0x7f0000004080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000004100)={&(0x7f00000040c0)={0x10, 0x3f2, 0x100, 0x70bd2a, 0x25dfdbff, "", ["", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x20010040}, 0x4000000) ioctl$F2FS_IOC_RESIZE_FS(r1, 0x4008f510, &(0x7f0000004180)=0x7) ioctl$PPPIOCGDEBUG(0xffffffffffffffff, 0x80047441, &(0x7f00000041c0)) sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f00000042c0)={&(0x7f0000004200), 0xc, &(0x7f0000004280)={&(0x7f0000004240)={0x38, 0x0, 0x4, 0x70bd28, 0x25dfdbfc, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xf1}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, '\x00', 0x18}}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008840}, 0x20000080) sendmsg$nl_generic(r0, &(0x7f0000004640)={&(0x7f0000004300)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000004600)={&(0x7f0000004340)={0x284, 0x11, 0x100, 0x70bd2c, 0x25dfdbfe, {0x1b}, [@typed={0x14, 0x61, 0x0, 0x0, @ipv6=@local}, @generic="e53d0dfddc02443efefb3ac879501df139cdc952e71a099830320c35ed5fcf850c9c4fe813c4583b0c8f817700683c834e61cbea132404b5452c3cf06eb4b2980bd1cda9d9dde617c57b0330781821b3603261bb88", @generic="377c9df501aa6a046ab0bbb13fc5829c1f69a9d10d0d55eb6e4390b220f90a3e4307baf1510753652a04b75a0d1bfc2d9309c144ea205b2808aeacdbbe8011dc20244889fb0d55f169e99735a3b1721c4899836fd67f95292a4a1b4b83174d6961e610a5344ac93b70fc0bec4f1748ba42009d6000727f49f412447591ea5187a641b0a60062e6bed69a5ab39ae84c37db0b24059f22ef8a2f0d0bfba25aad5672c9d8abc4334e98ce73a7bfb8eebfa34589f3dd75861e9de3d88d5815523cf8c9c38a7fbf3afb1bc6366fb8479ace5985016156f5bd5a7b15333e3ae1d0a7e56961122f57c072e7155734f97c49377ef1a535f2ea7ff426f7c0cec5", @typed={0x8, 0x10f, 0x0, 0x0, @u32=0x4a4}, @typed={0x8, 0x18, 0x0, 0x0, @u32=0x8001}, @typed={0x8, 0xc0, 0x0, 0x0, @fd=r5}, @generic="2fef7251291008301892333e3faa1c52271eda57acb7b108c123ff687f4812b4ca6a6a85fbb5eb03ccb3b62ff6934bcf4a5924cf2fb218e0a87ffe3b5b2459a6484335e4871c4161a2a023d29cd4df3a12ef709a3acdd4986fd8754eac5a04463b808d3e11ab8744139cf2f81f0b160aadb0ba8e735416cc54d46272de9f5126b85c0049861e88443d2c86643c80f017654c7ecc7f0f06586cdee1bff00e6adca4f23bc9430fab2f36048204a7f07ab2c60e3156e8bc70727797d9e0a668af28893dcdf9cb613a30c694ca7c98894dfad5da6405beaac8036af62414850eee2b66d62dac3fa2087e4fd2", @typed={0x8, 0xa9, 0x0, 0x0, @u32=0x6}]}, 0x284}, 0x1, 0x0, 0x0, 0xc000}, 0x80) socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) connect(r2, &(0x7f0000004680)=@pppol2tpv3={0x18, 0x1, {0x0, r5, {0x2, 0x4e21, @rand_addr=0x64010102}, 0x2, 0x2, 0x1, 0x3}}, 0x80) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000004740), r7) sendmsg$NL80211_CMD_SET_BSS(r8, &(0x7f0000004880)={&(0x7f0000004700)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000004840)={&(0x7f00000047c0)={0x5c, r9, 0x1, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0x8001}, @NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0x5}, @NL80211_ATTR_P2P_OPPPS={0x5}, @NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0x5}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0xd}, @NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0x3}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0x7}, @NL80211_ATTR_P2P_OPPPS={0x5}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20008040}, 0x800) 761.142519ms ago: executing program 0 (id=2303): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x19, &(0x7f0000000f40)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @call={0x85, 0x0, 0x0, 0x23}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r1, 0x0, 0x3}, 0x18) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="4400000010000000000000000000720000000000", @ANYRES32=0x0, @ANYBLOB="0188000063180300240012800500010062726964676500001400028005002b000300000005002a0000000000"], 0x44}, 0x1, 0x0, 0x0, 0x14008005}, 0x20008090) 602.028164ms ago: executing program 4 (id=2304): openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r0) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r5, {0x4}, {0xffff, 0xffff}, {0x2, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r7, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r8, 0x2f}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000180)="27030200590214000600002fb96d", 0xe}], 0x1}, 0x4) 547.731278ms ago: executing program 3 (id=2305): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'macvlan1\x00', 0x0}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'vlan0\x00', 0x0}) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r5 = accept4(r4, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0) recvmmsg(r5, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000500)=""/217, 0xd9}, {&(0x7f0000000840)=""/120, 0x78}, {&(0x7f0000000300)=""/134, 0x86}, {&(0x7f0000000480)=""/16, 0x10}, {&(0x7f00000006c0)=""/21, 0x15}], 0x63}, 0x4}], 0x2, 0x60, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x68, 0x2, 0x6, 0x201, 0x0, 0x0, {0xa, 0x0, 0x5}, [@IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010102}}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x640100fe}}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x68}}, 0x0) sendmsg$IPSET_CMD_FLUSH(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x1c, 0x4, 0x6, 0x201, 0x0, 0x0, {0x1, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24008012}, 0x800) r8 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r8, 0x10f, 0x87, &(0x7f0000000000)={0x8000042, 0x1, 0x2}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000007900)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x16, 0x0, 0x8, 0x10002, 0x100, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffe}, 0x50) setsockopt$TIPC_GROUP_JOIN(r9, 0x10f, 0x87, &(0x7f0000000200)={0x42, 0x3, 0x3}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0x5}, 0x48) r12 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r13 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xf, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r13, @ANYBLOB="0000000000000000b702000002000110850000008600000018110000", @ANYRES32=r12, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r14 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r10, 0x1, 0x32, &(0x7f00000000c0)=r14, 0x4) sendmsg$unix(r11, &(0x7f00000006c0)={0x0, 0xfffffffffffffe96, 0x0, 0x0, 0x0, 0x0, 0x20000001}, 0x40000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELRULE={0x2c, 0x8, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x80}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="400000001000030500000000fddbdf0000000000", @ANYRES32=0x0, @ANYBLOB="02880100373004002000128008000100687372001400028008000100", @ANYRES32=r1, @ANYBLOB="08000200", @ANYRES16=r3], 0x40}}, 0x4008054) 497.955886ms ago: executing program 0 (id=2306): r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000380), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_DEL_DAEMON(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000040)=ANY=[@ANYBLOB='4\x00', @ANYRES16=r0, @ANYBLOB="010030bd7000fedbdf350a00000020000380"], 0x34}, 0x1, 0x0, 0x0, 0x8040}, 0x24040014) 468.47758ms ago: executing program 2 (id=2307): pipe(&(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) write(r0, &(0x7f0000000580)="4bbf36049b493a975312d23df6ad65fd0a3312b09b742ac425519d616e88cd1ad7d046a982120a9baa80f81bdb01c7b79e18d436ad85224ef87919855e3ac2d82e52b1ec96fc16c7c4f05b", 0x4b) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000004c0)={'wg1\x00'}) r4 = socket$unix(0x1, 0x1, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000040)={0x41, 0x1}, 0x10) ioctl$sock_inet_SIOCSIFNETMASK(r4, 0x891c, &(0x7f0000000500)={'wlan0\x00', {0x2, 0x4e22, @multicast1}}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x450, 0xc8, 0xffffffff, 0xffffffff, 0xc8, 0xffffffff, 0x380, 0xffffffff, 0xffffffff, 0x380, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xa8, 0xc8, 0x60030000, {0x0, 0xff000000}}, @unspec=@TRACE={0x20}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private2, [0xffffff00, 0xffffffff, 0x0, 0xffffff00], [0x0, 0xffffff00, 0xffffffff, 0xff000000], 'team_slave_0\x00', 'bridge_slave_1\x00', {}, {0x101}, 0x11, 0x2, 0x5, 0x5}, 0x0, 0x298, 0x2b8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x300, 0x0, 0x2, 0x1, 'syz0\x00', 0x3}}, @common=@inet=@recent0={{0xf8}, {0x4, 0x6, 0x4, 0x0, 'syz0\x00'}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b0) r6 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e20, @multicast1}, 0x10) r7 = socket$kcm(0x2, 0x2, 0x73) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, &(0x7f0000000080)='lo\x00', 0x10) bind$inet(r7, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10) r8 = socket$kcm(0x2, 0x2, 0x73) setsockopt$SO_BINDTODEVICE(r8, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) bind$inet(r8, &(0x7f0000000040)={0x2, 0x4e1e, @loopback}, 0xffffffffffffff27) socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000000640)={0x10, 0x0, 0x25dfdbfc, 0x400000}, 0xfffffffffffffe43) socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000600)=0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0xfffa, 0x2}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x800}, @TCA_FLOWER_KEY_IP_PROTO={0x5, 0x9, 0x84}]}}]}, 0x44}}, 0x24004000) r10 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r10, &(0x7f00000002c0), 0x40000000000009f, 0x0) socket$tipc(0x1e, 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) 313.687478ms ago: executing program 1 (id=2308): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x48}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x3a, 0x301, 0x70bd25, 0x25dfdbfe, {0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x8080) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x25a5, 0x0) sendmsg$ETHTOOL_MSG_RINGS_GET(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="0a012a20", @ANYRES16=0x0, @ANYBLOB="e60f000901008b00005d33cdc96be58bd5b3274e000f", @ANYRES32, @ANYBLOB="0c001a804800030001"], 0x2c}}, 0x0) r4 = socket(0x10, 0x3, 0x0) write(r4, &(0x7f0000000240)="aefc00001a0025f01d85bc04fef7681d020b49ff708800008003280008021000ac0a1410bc71176a36ede498534108e58342fa94a235a2a441f9", 0xfcae) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="98030000", @ANYRES16=r7, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r8, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c090000560333"], 0x398}}, 0x0) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f0000000180)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x49}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x30, r5, 0x200, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "ceb9d6ef1a48e9a1d89155faa8"}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x4004) 232.748248ms ago: executing program 2 (id=2309): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4020000000000007911000000000000850000000c0000009500000000000000359bb9f43d86b136000000008762000000f33ad18fa9b151092e9172d8ca80be3fd2fe548fa036cf6151d76a8b71e51807e420da77440079a86cdda66fedd4922a95cd42662d9dafae9602325ef1a30b8aba9c271a51a56f7f73de45084cd90fa9ac55778d6c272c473383785c34c5b372e52138cf7f6c081c29a5eec551cd928f1f289175a9ff"], &(0x7f0000000100)='syzkaller\x00', 0x4, 0xc5, &(0x7f0000000300)=""/197, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000002c0), 0xffffffffffffff35}, 0x54) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000040)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000006c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010026bd7000fbdbdf251e00000008000300", @ANYRES32=r3, @ANYBLOB="2c002f800c0002000202aaaaaaaaaaaa1c00038008000400080000000800010002"], 0x48}, 0x1, 0x0, 0x0, 0x40800}, 0x4040044) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000180)={0xffffffffffffffff, 0x20, &(0x7f0000000080)={&(0x7f0000000000)=""/55, 0x37, 0x0, &(0x7f0000000340)=""/237, 0xed}}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x13, &(0x7f0000000440)=ANY=[@ANYRES8=r0, @ANYRES64=r1, @ANYRESHEX=r0, @ANYRES8=r5, @ANYRES16=r4, @ANYRES64=r4, @ANYRESDEC=r0, @ANYRES16], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xc, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffffff}, [@call={0x85, 0x0, 0x0, 0x7b}, @printk={@lu, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x9b}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @sched_cls=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r7, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r6, 0x0, 0x10, 0x10, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\b\x00\x00', &(0x7f0000000300)=""/8, 0x6c00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 231.517859ms ago: executing program 0 (id=2310): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) sendmmsg(r0, &(0x7f0000000440)=[{{&(0x7f0000000700)=@tipc=@nameseq={0x1e, 0x1, 0x2, {0x41, 0x3}}, 0x80, &(0x7f00000004c0)}}], 0x1, 0x0) 48.64752ms ago: executing program 3 (id=2311): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_sfeatures={0x3b, 0x2, [{0x80000}, {0xfbfffffa, 0xa23e}]}}) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x48}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 0s ago: executing program 0 (id=2312): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), 0xffffffffffffffff) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0xcc, 0x10, 0x1, 0x70bd2c, 0x20, {0x0, 0x0, 0x0, 0x0, 0xdf15003157970113, 0x8084}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_LINKMODE={0x5, 0x11, 0x4}, @IFLA_VFINFO_LIST={0x90, 0x16, 0x0, 0x1, [{0x4c, 0x1, 0x0, 0x1, [@IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x87bf, 0x3}}, @IFLA_VF_VLAN={0x10, 0x2, {0x2d0, 0x270, 0x5}}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0xf, 0x8}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0x1, 0x3}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0x7, 0x100}}]}, {0x3c, 0x1, 0x0, 0x1, [@IFLA_VF_RATE={0x10, 0x6, {0x5, 0x401, 0xfffffffd}}, @IFLA_VF_MAC={0x28, 0x1, {0x9}}]}, {0x4}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x20000084}, 0x20000010) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB="20030000130000042abd7000fcdbdf2507000000", @ANYRES32, @ANYBLOB="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", @ANYBLOB="08000300ff01000008001d000900000008002c0008000000080004"], 0x320}}, 0x2040000) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000800)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000480)=@newqdisc={0x148, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_red={{0x8}, {0x11c}}]}, 0x181}, 0x1, 0x0, 0x0, 0x15181b09c6bdc4c6}, 0x20008004) syz_emit_ethernet(0xba, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c20000000800400000ac0000000000069007d27f000000000000008317327f0000010a0101cc6313315d302cca00ac1414aa00"/72, @ANYRES64=r1, @ANYRES32=0x41424344, @ANYBLOB="b0000000907800000113121bdf1246d60cb4ca2e2003df26f3072d001e0c1d7f0900000088ffffff1e102605010000000000000002000000220c74152fdbe91c96316b6a030300080a0000000100000009001e0bfd4077385d65afb4ce000000"], 0x0) kernel console output (not intermixed with test programs): d bearer , priority 0 [ 231.602643][ T9457] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 231.665230][ T9454] syzkaller0: entered promiscuous mode [ 231.671069][ T9454] syzkaller0: entered allmulticast mode [ 231.679210][ T9454] tipc: Resetting bearer [ 231.858305][ T9453] tipc: Resetting bearer [ 232.105281][ T9474] netlink: 28 bytes leftover after parsing attributes in process `syz.4.961'. [ 232.114760][ T9474] netlink: 'syz.4.961': attribute type 7 has an invalid length. [ 232.130730][ T9474] netlink: 'syz.4.961': attribute type 8 has an invalid length. [ 232.139086][ T9474] netlink: 4 bytes leftover after parsing attributes in process `syz.4.961'. [ 233.291099][ T9453] tipc: Disabling bearer [ 233.300955][ T9459] batadv_slave_1: left promiscuous mode [ 233.491613][ T9494] netlink: 'syz.3.966': attribute type 11 has an invalid length. [ 233.509505][ T9492] lo speed is unknown, defaulting to 1000 [ 233.515675][ T9494] netlink: 36 bytes leftover after parsing attributes in process `syz.3.966'. [ 233.539817][ T9492] virt_wifi0 speed is unknown, defaulting to 1000 [ 233.548139][ T9496] netlink: 4 bytes leftover after parsing attributes in process `syz.2.965'. [ 233.575579][ T9496] netlink: 8 bytes leftover after parsing attributes in process `syz.2.965'. [ 233.696754][ T9496] bond2: entered promiscuous mode [ 233.703284][ T9496] 8021q: adding VLAN 0 to HW filter on device bond2 [ 233.932513][ T9512] netlink: 12 bytes leftover after parsing attributes in process `syz.2.970'. [ 233.998143][ T9519] netlink: 'syz.2.970': attribute type 13 has an invalid length. [ 234.368652][ T9538] bond2: option downdelay: invalid value (18446744073709551609) [ 234.376701][ T9538] bond2: option downdelay: allowed values 0 - 2147483647 [ 234.393811][ T9538] bond2 (unregistering): Released all slaves [ 234.637748][ T9552] netlink: 24 bytes leftover after parsing attributes in process `syz.1.980'. [ 234.654754][ T9552] netlink: 24 bytes leftover after parsing attributes in process `syz.1.980'. [ 234.994033][ T9557] netlink: 'syz.0.983': attribute type 1 has an invalid length. [ 235.007001][ T9564] netlink: 'syz.4.985': attribute type 12 has an invalid length. [ 235.119292][ T9557] bond0: entered promiscuous mode [ 235.159845][ T9557] 8021q: adding VLAN 0 to HW filter on device bond0 [ 235.212870][ T9579] syzkaller0: entered promiscuous mode [ 235.245233][ T9579] syzkaller0: entered allmulticast mode [ 235.269028][ T9581] netlink: 'syz.0.988': attribute type 32 has an invalid length. [ 235.277594][ T9581] netlink: 8 bytes leftover after parsing attributes in process `syz.0.988'. [ 235.385330][ T9581] bond2: Setting coupled_control to off (0) [ 235.502154][ T9590] netlink: 56 bytes leftover after parsing attributes in process `syz.1.989'. [ 236.696255][ T9641] siw: device registration error -23 [ 236.962281][ T9653] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 236.973656][ T9652] syzkaller0: entered promiscuous mode [ 236.979195][ T9652] syzkaller0: entered allmulticast mode [ 237.017341][ T9654] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 237.489528][ T9684] syzkaller0: entered promiscuous mode [ 237.496441][ T9684] syzkaller0: entered allmulticast mode [ 237.604344][ T9691] lo speed is unknown, defaulting to 1000 [ 237.633742][ T9691] virt_wifi0 speed is unknown, defaulting to 1000 [ 238.335788][ T9710] syzkaller0: entered promiscuous mode [ 238.361487][ T9710] syzkaller0: entered allmulticast mode [ 238.627354][ T9723] __nla_validate_parse: 3 callbacks suppressed [ 238.627378][ T9723] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1019'. [ 238.745155][ T9708] lo speed is unknown, defaulting to 1000 [ 238.808911][ T9708] virt_wifi0 speed is unknown, defaulting to 1000 [ 238.963675][ T9711] netlink: 'syz.2.1017': attribute type 6 has an invalid length. [ 239.423837][ T9742] syz.3.1022 (9742) used obsolete PPPIOCDETACH ioctl [ 239.932204][ T9756] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1027'. [ 239.964524][ T9757] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1026'. [ 240.190767][ T9752] veth0: entered promiscuous mode [ 240.311839][ T9763] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1028'. [ 240.603854][ T9757] bridge2: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 241.325498][ T9799] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1037'. [ 241.337309][ T9799] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1037'. [ 241.347380][ T9799] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1037'. [ 241.357509][ T9799] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1037'. [ 241.367027][ T9799] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1037'. [ 241.410582][ T9799] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1037'. [ 241.640854][ T9809] syzkaller0: entered promiscuous mode [ 241.648573][ T9809] syzkaller0: entered allmulticast mode [ 242.388582][ T9849] lo speed is unknown, defaulting to 1000 [ 242.416565][ T9856] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 242.419611][ T9849] virt_wifi0 speed is unknown, defaulting to 1000 [ 242.725720][ T9867] syzkaller0: entered promiscuous mode [ 242.746830][ T9867] syzkaller0: entered allmulticast mode [ 243.023759][ T9879] syzkaller0: entered promiscuous mode [ 243.075825][ T9879] syzkaller0: entered allmulticast mode [ 243.579406][ T9906] tipc: Enabled bearer , priority 0 [ 243.843903][ T9906] syzkaller0: entered promiscuous mode [ 243.870100][ T9906] syzkaller0: entered allmulticast mode [ 243.897187][ T9906] tipc: Resetting bearer [ 244.102894][ T3549] tipc: Resetting bearer [ 244.176876][ T9897] tipc: Resetting bearer [ 244.623061][ T9944] __nla_validate_parse: 28 callbacks suppressed [ 244.623084][ T9944] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1070'. [ 244.639716][ T9944] netlink: 'syz.4.1070': attribute type 1 has an invalid length. [ 245.848280][ T9897] tipc: Disabling bearer [ 245.858057][ T9922] sch_tbf: burst 2976 is lower than device lo mtu (11337746) ! [ 245.933481][ T9948] syzkaller0: entered promiscuous mode [ 245.939167][ T9948] syzkaller0: entered allmulticast mode [ 246.207396][ T9972] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1075'. [ 246.450337][ T9989] bridge_slave_0: invalid flags given to default FDB implementation [ 246.486481][ T9985] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 246.505819][ T9985] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.527226][ T9989] bridge_slave_0: invalid flags given to default FDB implementation [ 246.558362][ T9989] bridge_slave_0: invalid flags given to default FDB implementation [ 246.573443][ T9995] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.610727][ T9989] bridge_slave_0: invalid flags given to default FDB implementation [ 246.619711][ T9989] bridge_slave_0: invalid flags given to default FDB implementation [ 246.628358][ T9989] bridge_slave_0: invalid flags given to default FDB implementation [ 246.652901][ T9985] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 246.664808][ T9985] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.726699][ T9995] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.773248][ T9989] bridge_slave_0: invalid flags given to default FDB implementation [ 246.785750][ T9989] bridge_slave_0: invalid flags given to default FDB implementation [ 246.795136][ T9989] bridge_slave_0: invalid flags given to default FDB implementation [ 246.809290][ T9985] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 246.820207][ T9985] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.844444][ T9989] bridge_slave_0: invalid flags given to default FDB implementation [ 246.859104][ T9995] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.884394][ T9989] bridge_slave_0: invalid flags given to default FDB implementation [ 246.896846][ T9985] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 246.911869][ T9985] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.930705][ T9989] bridge_slave_0: invalid flags given to default FDB implementation [ 246.947987][ T9995] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.977607][ T9989] bridge_slave_0: invalid flags given to default FDB implementation [ 246.992782][ T9989] bridge_slave_0: invalid flags given to default FDB implementation [ 247.008698][ T9989] bridge_slave_0: invalid flags given to default FDB implementation [ 247.021784][ T9989] bridge_slave_0: invalid flags given to default FDB implementation [ 247.038938][ T9989] bridge_slave_0: invalid flags given to default FDB implementation [ 247.089657][ T9989] bridge_slave_0: invalid flags given to default FDB implementation [ 247.136957][ T1015] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 247.145948][ T1015] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.154774][ T9989] bridge_slave_0: invalid flags given to default FDB implementation [ 247.171774][ T9989] bridge_slave_0: invalid flags given to default FDB implementation [ 247.232187][ T9989] bridge_slave_0: invalid flags given to default FDB implementation [ 247.240380][ T3549] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 247.248935][ T3549] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.257598][ T3549] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.269070][ T9989] bridge_slave_0: invalid flags given to default FDB implementation [ 247.310959][ T1105] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.374361][ T3549] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 247.384841][ T3549] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.410066][T10008] syzkaller0: entered promiscuous mode [ 247.421918][T10008] syzkaller0: entered allmulticast mode [ 247.429408][ T3549] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.508187][ T3549] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 247.527121][ T3549] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.565417][ T3549] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.596256][T10015] syzkaller0: entered promiscuous mode [ 247.617712][T10015] syzkaller0: entered allmulticast mode [ 247.696638][T10025] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0x6 [ 247.718902][T10025] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1093'. [ 247.744308][T10020] lo speed is unknown, defaulting to 1000 [ 247.752772][T10020] virt_wifi0 speed is unknown, defaulting to 1000 [ 247.999069][T10038] syzkaller1: entered promiscuous mode [ 248.011720][T10038] syzkaller1: entered allmulticast mode [ 248.413064][T10036] netlink: 'syz.0.1092': attribute type 6 has an invalid length. [ 248.653135][T10063] netlink: 'syz.3.1104': attribute type 11 has an invalid length. [ 248.851577][T10067] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1106'. [ 248.870600][T10069] netlink: 'syz.3.1105': attribute type 1 has an invalid length. [ 248.920738][T10050] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1100'. [ 248.959004][T10070] netlink: 'syz.3.1105': attribute type 11 has an invalid length. [ 249.081974][T10076] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 249.099500][T10075] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1108'. [ 249.178378][T10075] bond2: entered promiscuous mode [ 249.195349][T10075] 8021q: adding VLAN 0 to HW filter on device bond2 [ 249.648603][T10100] netlink: 'syz.0.1114': attribute type 10 has an invalid length. [ 249.670216][T10075] bond2 (unregistering): Released all slaves [ 249.738889][T10100] veth0_vlan: entered allmulticast mode [ 249.913192][T10108] netlink: 'syz.2.1115': attribute type 10 has an invalid length. [ 249.919446][T10100] veth0_vlan: left promiscuous mode [ 249.928981][T10100] veth0_vlan: entered promiscuous mode [ 249.944741][T10100] team0: Device veth0_vlan failed to register rx_handler [ 250.075674][T10107] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1115'. [ 250.113186][T10107] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1115'. [ 250.116468][T10114] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1117'. [ 250.147273][T10104] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 250.161566][T10104] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.339596][T10104] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 250.350882][T10104] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.414097][T10124] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 250.468765][T10104] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 250.479345][T10104] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.522957][T10123] lo speed is unknown, defaulting to 1000 [ 250.531775][T10123] virt_wifi0 speed is unknown, defaulting to 1000 [ 250.551200][T10104] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 250.579337][T10104] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.651799][T10133] netlink: 'syz.3.1123': attribute type 1 has an invalid length. [ 251.071957][T10151] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 251.477956][ T3549] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 251.491765][ T3549] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.519624][ T3549] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 251.528708][ T3549] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.565653][ T3549] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 251.577420][ T3549] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.620561][ T3549] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 251.639670][ T3549] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.312794][T10196] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 252.594857][T10208] syzkaller0: entered promiscuous mode [ 252.607297][T10208] syzkaller0: entered allmulticast mode [ 252.691494][T10210] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1145'. [ 252.865994][T10224] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1149'. [ 253.028609][T10230] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 253.260403][T10237] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1155'. [ 253.299023][T10241] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1156'. [ 253.309857][T10241] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1156'. [ 253.321686][T10241] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1156'. [ 253.331040][T10241] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1156'. [ 253.995193][T10245] net veth1_virt_wifi virt_wifi0: left promiscuous mode [ 254.091160][T10245] veth1_to_hsr: left allmulticast mode [ 254.101139][T10245] macvtap0: left promiscuous mode [ 254.118532][T10245] ip6erspan0: left promiscuous mode [ 254.137661][T10245] geneve2: left promiscuous mode [ 254.150135][T10245] veth3: left promiscuous mode [ 254.156648][T10245] macvlan0: left promiscuous mode [ 254.168959][ T5877] lo speed is unknown, defaulting to 1000 [ 254.195995][ T5877] syz2: Port: 1 Link DOWN [ 254.322744][T10261] syzkaller0: entered promiscuous mode [ 254.331508][T10261] syzkaller0: entered allmulticast mode [ 254.356701][T10247] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 254.393268][ T1015] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.399993][T10286] netlink: 'syz.3.1165': attribute type 33 has an invalid length. [ 254.403027][ T1015] netdevsim netdevsim3 netdevsim0: unset [1, 1] type 2 family 0 port 256 - 0 [ 254.422701][ T1015] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.433580][ T1015] netdevsim netdevsim3 netdevsim1: unset [1, 1] type 2 family 0 port 256 - 0 [ 254.487944][ T1015] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.506597][ T1015] netdevsim netdevsim3 netdevsim2: unset [1, 1] type 2 family 0 port 256 - 0 [ 254.562756][T10269] lo speed is unknown, defaulting to 1000 [ 254.563084][ T1015] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.600828][ T1015] netdevsim netdevsim3 netdevsim3: unset [1, 1] type 2 family 0 port 256 - 0 [ 254.635357][T10269] virt_wifi0 speed is unknown, defaulting to 1000 [ 254.806173][T10300] sctp: [Deprecated]: syz.4.1167 (pid 10300) Use of int in max_burst socket option. [ 254.806173][T10300] Use struct sctp_assoc_value instead [ 255.012992][T10306] netlink: 'syz.4.1170': attribute type 16 has an invalid length. [ 255.993149][T10335] __nla_validate_parse: 8 callbacks suppressed [ 255.993170][T10335] netlink: 144 bytes leftover after parsing attributes in process `syz.0.1178'. [ 256.030705][T10336] tipc: Enabled bearer , priority 0 [ 256.112376][T10343] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1180'. [ 256.288718][T10352] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1180'. [ 256.355485][T10336] syzkaller0: entered promiscuous mode [ 256.389900][T10336] syzkaller0: entered allmulticast mode [ 256.433525][T10336] tipc: Resetting bearer [ 256.750117][ T1113] tipc: Resetting bearer [ 256.760489][T10360] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 256.834647][T10334] tipc: Resetting bearer [ 257.080353][T10368] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1187'. [ 257.299591][T10375] IPVS: length: 35 != 24 [ 258.813207][T10385] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1191'. [ 258.845052][T10334] tipc: Disabling bearer [ 258.865582][T10365] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 259.091787][T10395] IPVS: set_ctl: invalid protocol: 50 0.0.0.0:20000 [ 259.410321][T10420] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1201'. [ 259.443788][T10420] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1201'. [ 259.473421][T10420] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1201'. [ 259.485120][T10417] lo speed is unknown, defaulting to 1000 [ 259.496730][T10417] virt_wifi0 speed is unknown, defaulting to 1000 [ 259.515272][T10420] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1201'. [ 259.525117][T10423] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 259.624089][T10424] lo speed is unknown, defaulting to 1000 [ 259.724490][T10424] virt_wifi0 speed is unknown, defaulting to 1000 [ 260.271842][T10454] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1210'. [ 260.354117][T10454] ip6tnl1: entered allmulticast mode [ 260.742890][T10478] bridge3: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 260.979051][T10497] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 261.022040][T10497] __nla_validate_parse: 8 callbacks suppressed [ 261.022063][T10497] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1217'. [ 261.235042][T10503] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1218'. [ 261.472465][T10508] lo speed is unknown, defaulting to 1000 [ 261.480495][T10508] virt_wifi0 speed is unknown, defaulting to 1000 [ 261.686498][T10514] tipc: Enabled bearer , priority 0 [ 261.758682][T10514] tipc: Resetting bearer [ 261.894341][T10512] tipc: Disabling bearer [ 262.104589][T10543] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1225'. [ 262.137345][T10529] netlink: 'syz.0.1228': attribute type 10 has an invalid length. [ 262.343353][T10553] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1232'. [ 262.352863][T10553] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1232'. [ 262.541389][T10553] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1232'. [ 262.553346][T10553] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1232'. [ 262.896525][T10575] syzkaller1: entered promiscuous mode [ 262.903290][T10575] syzkaller1: entered allmulticast mode [ 263.138864][T10588] xt_hashlimit: size too large, truncated to 1048576 [ 263.199325][T10589] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1240'. [ 263.264870][T10593] dvmrp1: left allmulticast mode [ 263.308796][T10589] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1240'. [ 263.374844][T10595] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1241'. [ 263.402326][T10598] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 263.844298][T10616] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 263.866732][T10618] netlink: 'syz.4.1247': attribute type 1 has an invalid length. [ 263.922508][T10618] veth1: entered promiscuous mode [ 264.341178][ T36] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 264.390525][ T36] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 264.418393][ T36] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 264.441699][ T36] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 265.285492][T10692] FAULT_INJECTION: forcing a failure. [ 265.285492][T10692] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 265.300746][T10692] CPU: 1 UID: 0 PID: 10692 Comm: syz.1.1275 Not tainted syzkaller #0 PREEMPT(full) [ 265.300778][T10692] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 265.300798][T10692] Call Trace: [ 265.300808][T10692] [ 265.300818][T10692] dump_stack_lvl+0x189/0x250 [ 265.300860][T10692] ? __pfx____ratelimit+0x10/0x10 [ 265.300896][T10692] ? __pfx_dump_stack_lvl+0x10/0x10 [ 265.300927][T10692] ? __pfx__printk+0x10/0x10 [ 265.300965][T10692] should_fail_ex+0x414/0x560 [ 265.301006][T10692] _copy_to_user+0x31/0xb0 [ 265.301038][T10692] simple_read_from_buffer+0xe1/0x170 [ 265.301087][T10692] proc_fail_nth_read+0x1b3/0x220 [ 265.301120][T10692] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 265.301153][T10692] ? rw_verify_area+0x2a6/0x4d0 [ 265.301183][T10692] ? __lock_acquire+0xab9/0xd20 [ 265.301204][T10692] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 265.301239][T10692] vfs_read+0x200/0xa30 [ 265.301267][T10692] ? fdget_pos+0x247/0x320 [ 265.301292][T10692] ? __pfx___mutex_lock+0x10/0x10 [ 265.301316][T10692] ? __pfx_vfs_read+0x10/0x10 [ 265.301347][T10692] ? __fget_files+0x2a/0x420 [ 265.301373][T10692] ? __fget_files+0x3a0/0x420 [ 265.301392][T10692] ? __fget_files+0x2a/0x420 [ 265.301422][T10692] ksys_read+0x145/0x250 [ 265.301453][T10692] ? __pfx_ksys_read+0x10/0x10 [ 265.301486][T10692] ? do_syscall_64+0xbe/0xfa0 [ 265.301511][T10692] do_syscall_64+0xfa/0xfa0 [ 265.301532][T10692] ? lockdep_hardirqs_on+0x9c/0x150 [ 265.301554][T10692] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 265.301576][T10692] ? clear_bhb_loop+0x60/0xb0 [ 265.301603][T10692] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 265.301624][T10692] RIP: 0033:0x7fa00c98e15c [ 265.301644][T10692] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 265.301663][T10692] RSP: 002b:00007fa00d8dd030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 265.301698][T10692] RAX: ffffffffffffffda RBX: 00007fa00cbe5fa0 RCX: 00007fa00c98e15c [ 265.301714][T10692] RDX: 000000000000000f RSI: 00007fa00d8dd0a0 RDI: 0000000000000005 [ 265.301728][T10692] RBP: 00007fa00d8dd090 R08: 0000000000000000 R09: 0000000000000000 [ 265.301743][T10692] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 265.301757][T10692] R13: 00007fa00cbe6038 R14: 00007fa00cbe5fa0 R15: 00007ffe465e8ca8 [ 265.301795][T10692] [ 265.726859][T10700] netlink: 'syz.3.1278': attribute type 8 has an invalid length. [ 265.854311][T10713] af_packet: tpacket_rcv: packet too big, clamped from 212960 to 3944. macoff=96 [ 265.885058][T10713] netlink: 'syz.0.1283': attribute type 29 has an invalid length. [ 266.387628][T10745] __nla_validate_parse: 16 callbacks suppressed [ 266.387647][T10745] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1293'. [ 266.405417][T10745] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1293'. [ 266.417811][T10745] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1293'. [ 266.428171][T10745] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1293'. [ 266.659373][T10755] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1296'. [ 266.690315][T10753] lo speed is unknown, defaulting to 1000 [ 266.729431][T10753] virt_wifi0 speed is unknown, defaulting to 1000 [ 266.865887][T10760] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1298'. [ 266.903178][T10762] netlink: 'syz.1.1299': attribute type 10 has an invalid length. [ 266.913145][T10762] bond0: (slave wlan1): Opening slave failed [ 267.076900][T10765] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 267.105972][T10765] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 267.273090][T10777] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode [ 267.305100][T10774] tipc: Enabling of bearer rejected, failed to enable media [ 267.396835][T10771] lo speed is unknown, defaulting to 1000 [ 267.471626][T10771] virt_wifi0 speed is unknown, defaulting to 1000 [ 267.487155][T10785] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1305'. [ 267.498186][T10785] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1305'. [ 267.520505][T10785] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1305'. [ 267.539426][T10785] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1305'. [ 267.847365][T10794] netlink: 'syz.2.1308': attribute type 1 has an invalid length. [ 268.209322][T10799] 8021q: adding VLAN 0 to HW filter on device bond3 [ 268.308588][T10802] 8021q: adding VLAN 0 to HW filter on device bond3 [ 268.370152][T10802] bond3: (slave geneve2): making interface the new active one [ 268.423845][T10802] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 268.430673][T10819] xt_limit: Overflow, try lower: 268435456/134217728 [ 268.513974][ T36] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 20004 - 0 [ 268.526892][ T36] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 20004 - 0 [ 268.559128][ T36] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 20004 - 0 [ 268.621964][ T36] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 20004 - 0 [ 268.820030][T10831] lo speed is unknown, defaulting to 1000 [ 268.835401][T10831] virt_wifi0 speed is unknown, defaulting to 1000 [ 269.523119][T10857] lo speed is unknown, defaulting to 1000 [ 269.530779][T10857] virt_wifi0 speed is unknown, defaulting to 1000 [ 269.666075][ T5906] IPVS: starting estimator thread 0... [ 269.699710][T10870] tipc: New replicast peer: 255.255.255.255 [ 269.710343][T10870] tipc: Enabled bearer , priority 10 [ 269.761637][T10872] IPVS: using max 28 ests per chain, 67200 per kthread [ 270.090425][T10881] netlink: 'syz.0.1330': attribute type 11 has an invalid length. [ 271.166368][T10927] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 271.324366][T10944] netlink: 'syz.2.1347': attribute type 8 has an invalid length. [ 271.458369][T10951] netlink: 'syz.4.1351': attribute type 2 has an invalid length. [ 271.685981][T10967] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 271.742595][T10943] syzkaller0: entered promiscuous mode [ 271.748636][T10943] syzkaller0: entered allmulticast mode [ 271.848283][T10975] __nla_validate_parse: 6 callbacks suppressed [ 271.848305][T10975] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1355'. [ 271.976289][T10978] lo speed is unknown, defaulting to 1000 [ 271.998955][T10978] virt_wifi0 speed is unknown, defaulting to 1000 [ 274.264424][T11026] netlink: 'syz.0.1366': attribute type 12 has an invalid length. [ 274.294116][T11026] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1366'. [ 274.315147][T11026] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1366'. [ 274.389366][T11033] syzkaller1: entered promiscuous mode [ 274.398822][T11033] syzkaller1: entered allmulticast mode [ 274.602489][T11044] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1371'. [ 274.672617][T11048] xt_TPROXY: Can be used only with -p tcp or -p udp [ 274.735587][T11051] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1374'. [ 275.019814][T11065] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 275.401298][T11091] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 275.426023][T11091] FAULT_INJECTION: forcing a failure. [ 275.426023][T11091] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 275.441560][T11091] CPU: 1 UID: 0 PID: 11091 Comm: syz.2.1385 Not tainted syzkaller #0 PREEMPT(full) [ 275.441591][T11091] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 275.441604][T11091] Call Trace: [ 275.441613][T11091] [ 275.441623][T11091] dump_stack_lvl+0x189/0x250 [ 275.441660][T11091] ? __pfx____ratelimit+0x10/0x10 [ 275.441696][T11091] ? __pfx_dump_stack_lvl+0x10/0x10 [ 275.441727][T11091] ? __pfx__printk+0x10/0x10 [ 275.441751][T11091] ? __schedule+0x17ae/0x4cc0 [ 275.441799][T11091] should_fail_ex+0x414/0x560 [ 275.441839][T11091] strncpy_from_user+0x36/0x290 [ 275.441875][T11091] strncpy_from_user_nofault+0x72/0x150 [ 275.441904][T11091] bpf_bprintf_prepare+0xb91/0x13a0 [ 275.441941][T11091] ? __pfx_bpf_bprintf_prepare+0x10/0x10 [ 275.441965][T11091] ? preempt_schedule_common+0x83/0xd0 [ 275.441987][T11091] ? preempt_schedule+0xae/0xc0 [ 275.442006][T11091] ? bpf_trace_printk+0xc1/0x190 [ 275.442040][T11091] bpf_trace_printk+0xdb/0x190 [ 275.442067][T11091] ? __lock_acquire+0xab9/0xd20 [ 275.442090][T11091] ? __pfx_bpf_trace_printk+0x10/0x10 [ 275.442131][T11091] ? bpf_trace_run2+0x186/0x4b0 [ 275.442171][T11091] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 275.442217][T11091] bpf_prog_930ede9872f2967c+0x3e/0x44 [ 275.442238][T11091] bpf_trace_run2+0x3ff/0x4b0 [ 275.442273][T11091] ? bpf_trace_run2+0x186/0x4b0 [ 275.442308][T11091] ? __pfx_bpf_trace_run2+0x10/0x10 [ 275.442340][T11091] ? _printk+0xcf/0x120 [ 275.442361][T11091] ? __pfx____ratelimit+0x10/0x10 [ 275.442391][T11091] ? ovs_flow_cmd_new+0x467/0xd80 [ 275.442416][T11091] ? __pfx__printk+0x10/0x10 [ 275.442439][T11091] ? ovs_flow_cmd_new+0x467/0xd80 [ 275.442458][T11091] ? ovs_flow_cmd_new+0x467/0xd80 [ 275.442478][T11091] kfree+0x62f/0x6d0 [ 275.442514][T11091] ovs_flow_cmd_new+0x467/0xd80 [ 275.442547][T11091] ? __pfx_ovs_flow_cmd_new+0x10/0x10 [ 275.442629][T11091] ? rcu_is_watching+0x15/0xb0 [ 275.442660][T11091] ? __nla_parse+0x40/0x60 [ 275.442688][T11091] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 275.442732][T11091] genl_family_rcv_msg_doit+0x215/0x300 [ 275.442772][T11091] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 275.442821][T11091] ? bpf_lsm_capable+0x9/0x20 [ 275.442846][T11091] ? security_capable+0x7e/0x2e0 [ 275.442886][T11091] genl_rcv_msg+0x60e/0x790 [ 275.442926][T11091] ? __pfx_genl_rcv_msg+0x10/0x10 [ 275.442954][T11091] ? __pfx_ovs_flow_cmd_new+0x10/0x10 [ 275.442994][T11091] netlink_rcv_skb+0x208/0x470 [ 275.443016][T11091] ? __lock_acquire+0xab9/0xd20 [ 275.443038][T11091] ? __pfx_genl_rcv_msg+0x10/0x10 [ 275.443072][T11091] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 275.443125][T11091] ? down_read+0x1ad/0x2e0 [ 275.443155][T11091] genl_rcv+0x28/0x40 [ 275.443183][T11091] netlink_unicast+0x82f/0x9e0 [ 275.443214][T11091] ? __pfx_netlink_unicast+0x10/0x10 [ 275.443238][T11091] ? netlink_sendmsg+0x642/0xb30 [ 275.443261][T11091] ? skb_put+0x11b/0x210 [ 275.443289][T11091] netlink_sendmsg+0x805/0xb30 [ 275.443326][T11091] ? __pfx_netlink_sendmsg+0x10/0x10 [ 275.443355][T11091] ? aa_sock_msg_perm+0xf1/0x1d0 [ 275.443391][T11091] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 275.443412][T11091] ? __pfx_netlink_sendmsg+0x10/0x10 [ 275.443438][T11091] __sock_sendmsg+0x21c/0x270 [ 275.443474][T11091] ____sys_sendmsg+0x505/0x830 [ 275.443507][T11091] ? __pfx_____sys_sendmsg+0x10/0x10 [ 275.443545][T11091] ? import_iovec+0x74/0xa0 [ 275.443579][T11091] ___sys_sendmsg+0x21f/0x2a0 [ 275.443608][T11091] ? __pfx____sys_sendmsg+0x10/0x10 [ 275.443679][T11091] ? __fget_files+0x2a/0x420 [ 275.443699][T11091] ? __fget_files+0x3a0/0x420 [ 275.443733][T11091] __x64_sys_sendmsg+0x19b/0x260 [ 275.443764][T11091] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 275.443802][T11091] ? __pfx_ksys_write+0x10/0x10 [ 275.443839][T11091] ? do_syscall_64+0xbe/0xfa0 [ 275.443866][T11091] do_syscall_64+0xfa/0xfa0 [ 275.443887][T11091] ? lockdep_hardirqs_on+0x9c/0x150 [ 275.443909][T11091] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 275.443931][T11091] ? clear_bhb_loop+0x60/0xb0 [ 275.443960][T11091] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 275.443981][T11091] RIP: 0033:0x7f166a18f749 [ 275.444003][T11091] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 275.444023][T11091] RSP: 002b:00007f166af8d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 275.444048][T11091] RAX: ffffffffffffffda RBX: 00007f166a3e5fa0 RCX: 00007f166a18f749 [ 275.444065][T11091] RDX: 000000000800c000 RSI: 0000200000000000 RDI: 0000000000000003 [ 275.444079][T11091] RBP: 00007f166af8d090 R08: 0000000000000000 R09: 0000000000000000 [ 275.444094][T11091] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 275.444107][T11091] R13: 00007f166a3e6038 R14: 00007f166a3e5fa0 R15: 00007ffec39f1f58 [ 275.444152][T11091] [ 276.181600][T11104] syzkaller1: entered promiscuous mode [ 276.194750][T11104] syzkaller1: entered allmulticast mode [ 276.243025][T11109] netlink: 'syz.3.1392': attribute type 2 has an invalid length. [ 276.356155][T11118] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1393'. [ 276.367459][T11118] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1393'. [ 276.426965][T11118] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1393'. [ 276.437055][ T1105] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 276.437112][ T1105] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 276.437152][ T1105] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 276.437190][ T1105] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 276.476333][T11118] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1393'. [ 276.608980][T11129] netlink: 'syz.1.1398': attribute type 12 has an invalid length. [ 276.632264][T11131] IPv6: Can't replace route, no match found [ 277.018529][T11154] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1404'. [ 277.056043][T11156] netlink: 'syz.2.1406': attribute type 9 has an invalid length. [ 277.077251][T11156] netlink: 'syz.2.1406': attribute type 6 has an invalid length. [ 277.086494][T11156] netlink: 'syz.2.1406': attribute type 7 has an invalid length. [ 277.087020][T11153] tipc: Enabled bearer , priority 0 [ 277.095065][T11156] netlink: 'syz.2.1406': attribute type 8 has an invalid length. [ 277.156513][T11153] syzkaller0: entered promiscuous mode [ 277.162561][T11153] syzkaller0: entered allmulticast mode [ 277.174909][T11161] FAULT_INJECTION: forcing a failure. [ 277.174909][T11161] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 277.177002][T11153] tipc: Resetting bearer [ 277.200563][T11161] CPU: 0 UID: 0 PID: 11161 Comm: syz.1.1407 Not tainted syzkaller #0 PREEMPT(full) [ 277.200596][T11161] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 277.200610][T11161] Call Trace: [ 277.200619][T11161] [ 277.200628][T11161] dump_stack_lvl+0x189/0x250 [ 277.200664][T11161] ? __pfx____ratelimit+0x10/0x10 [ 277.200700][T11161] ? __pfx_dump_stack_lvl+0x10/0x10 [ 277.200731][T11161] ? __pfx__printk+0x10/0x10 [ 277.200754][T11161] ? __might_fault+0xb0/0x130 [ 277.200798][T11161] should_fail_ex+0x414/0x560 [ 277.200836][T11161] _copy_from_iter+0x1de/0x1790 [ 277.200859][T11161] ? kmem_cache_alloc_node_noprof+0x483/0x710 [ 277.200889][T11161] ? kmalloc_reserve+0xbd/0x290 [ 277.200927][T11161] ? __pfx__copy_from_iter+0x10/0x10 [ 277.200949][T11161] ? __alloc_skb+0x2f1/0x430 [ 277.200974][T11161] ? __pfx___alloc_skb+0x10/0x10 [ 277.201008][T11161] ? netlink_sendmsg+0x642/0xb30 [ 277.201035][T11161] ? skb_put+0x11b/0x210 [ 277.201063][T11161] netlink_sendmsg+0x6b2/0xb30 [ 277.201099][T11161] ? __pfx_netlink_sendmsg+0x10/0x10 [ 277.201127][T11161] ? __lock_acquire+0xab9/0xd20 [ 277.201148][T11161] ? aa_sock_msg_perm+0xf1/0x1d0 [ 277.201183][T11161] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 277.201205][T11161] ? __pfx_netlink_sendmsg+0x10/0x10 [ 277.201231][T11161] __sock_sendmsg+0x21c/0x270 [ 277.201265][T11161] sock_write_iter+0x279/0x360 [ 277.201297][T11161] ? __pfx_sock_write_iter+0x10/0x10 [ 277.201340][T11161] ? bpf_lsm_file_permission+0x9/0x20 [ 277.201364][T11161] ? security_file_permission+0x75/0x290 [ 277.201400][T11161] vfs_write+0x5c9/0xb30 [ 277.201438][T11161] ? __pfx_sock_write_iter+0x10/0x10 [ 277.201469][T11161] ? __pfx_vfs_write+0x10/0x10 [ 277.201513][T11161] ? __fget_files+0x2a/0x420 [ 277.201545][T11161] ksys_write+0x145/0x250 [ 277.201580][T11161] ? __pfx_ksys_write+0x10/0x10 [ 277.201616][T11161] ? do_syscall_64+0xbe/0xfa0 [ 277.201643][T11161] do_syscall_64+0xfa/0xfa0 [ 277.201664][T11161] ? lockdep_hardirqs_on+0x9c/0x150 [ 277.201687][T11161] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 277.201708][T11161] ? clear_bhb_loop+0x60/0xb0 [ 277.201734][T11161] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 277.201755][T11161] RIP: 0033:0x7fa00c98f749 [ 277.201774][T11161] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 277.201793][T11161] RSP: 002b:00007fa00d8bc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 277.201816][T11161] RAX: ffffffffffffffda RBX: 00007fa00cbe6090 RCX: 00007fa00c98f749 [ 277.201832][T11161] RDX: 0000000000000027 RSI: 0000200000005c00 RDI: 0000000000000004 [ 277.201845][T11161] RBP: 00007fa00d8bc090 R08: 0000000000000000 R09: 0000000000000000 [ 277.201858][T11161] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 277.201870][T11161] R13: 00007fa00cbe6128 R14: 00007fa00cbe6090 R15: 00007ffe465e8ca8 [ 277.201906][T11161] [ 277.228412][T11163] lo speed is unknown, defaulting to 1000 [ 277.602377][ T1113] tipc: Resetting bearer [ 277.611592][T11152] tipc: Resetting bearer [ 277.681868][T11170] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1410'. [ 277.694812][T11170] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1410'. [ 277.927783][T11179] netlink: 'syz.3.1411': attribute type 4 has an invalid length. [ 277.991955][T11180] netlink: 'syz.3.1411': attribute type 4 has an invalid length. [ 279.492805][T11152] tipc: Disabling bearer [ 279.502316][T11163] virt_wifi0 speed is unknown, defaulting to 1000 [ 279.552508][T11189] syzkaller0: entered promiscuous mode [ 279.558085][T11189] syzkaller0: entered allmulticast mode [ 279.585110][ T5906] lo speed is unknown, defaulting to 1000 [ 279.591509][ T5906] syz2: Port: 1 Link ACTIVE [ 279.698706][T11201] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1413'. [ 279.772453][T11205] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1414'. [ 279.804253][T11205] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1414'. [ 279.835353][T11214] netlink: 'syz.1.1416': attribute type 1 has an invalid length. [ 279.861918][T11214] netlink: 232 bytes leftover after parsing attributes in process `syz.1.1416'. [ 279.899546][T11214] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1416'. [ 280.274660][T11235] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1422'. [ 280.340347][T11231] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1423'. [ 280.377455][T11239] netlink: 'syz.3.1424': attribute type 1 has an invalid length. [ 280.393075][T11239] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 280.732026][T11248] netlink: 'syz.0.1427': attribute type 10 has an invalid length. [ 280.787568][T11250] netlink: 'syz.0.1427': attribute type 10 has an invalid length. [ 280.808969][T11248] team0: Port device syz_tun added [ 281.385172][T11283] syzkaller0: entered promiscuous mode [ 281.399505][T11283] syzkaller0: entered allmulticast mode [ 281.437028][T11291] netlink: 'syz.4.1437': attribute type 1 has an invalid length. [ 281.483816][T11295] syzkaller1: entered promiscuous mode [ 281.491307][T11295] syzkaller1: entered allmulticast mode [ 281.611213][T11303] macsec2: entered promiscuous mode [ 281.616758][T11303] batadv_slave_1: entered promiscuous mode [ 281.624658][T11303] macsec2: entered allmulticast mode [ 281.630098][T11303] batadv_slave_1: entered allmulticast mode [ 281.869719][T11317] netlink: 'syz.0.1445': attribute type 1 has an invalid length. [ 281.909316][T11317] 8021q: adding VLAN 0 to HW filter on device bond3 [ 281.922966][T11317] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 281.932289][T11317] bond3: (slave wlan0): Opening slave failed [ 282.074054][T11325] __nla_validate_parse: 9 callbacks suppressed [ 282.074077][T11325] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1449'. [ 282.135052][T11325] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 282.377375][T11339] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 282.557762][T11356] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1455'. [ 282.582625][T11356] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1455'. [ 282.634471][T11356] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1455'. [ 282.649428][T11356] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1455'. [ 282.753881][T11361] lo speed is unknown, defaulting to 1000 [ 282.778296][T11361] virt_wifi0 speed is unknown, defaulting to 1000 [ 283.240517][T11378] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1460'. [ 283.493032][T11381] FAULT_INJECTION: forcing a failure. [ 283.493032][T11381] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 283.506611][T11381] CPU: 0 UID: 0 PID: 11381 Comm: syz.4.1461 Not tainted syzkaller #0 PREEMPT(full) [ 283.506642][T11381] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 283.506655][T11381] Call Trace: [ 283.506662][T11381] [ 283.506671][T11381] dump_stack_lvl+0x189/0x250 [ 283.506707][T11381] ? __pfx____ratelimit+0x10/0x10 [ 283.506742][T11381] ? __pfx_dump_stack_lvl+0x10/0x10 [ 283.506772][T11381] ? __pfx__printk+0x10/0x10 [ 283.506810][T11381] should_fail_ex+0x414/0x560 [ 283.506848][T11381] _copy_to_user+0x31/0xb0 [ 283.506880][T11381] simple_read_from_buffer+0xe1/0x170 [ 283.506920][T11381] proc_fail_nth_read+0x1b3/0x220 [ 283.506953][T11381] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 283.506986][T11381] ? rw_verify_area+0x2a6/0x4d0 [ 283.507012][T11381] ? __lock_acquire+0xab9/0xd20 [ 283.507032][T11381] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 283.507061][T11381] vfs_read+0x200/0xa30 [ 283.507090][T11381] ? fdget_pos+0x247/0x320 [ 283.507115][T11381] ? __pfx___mutex_lock+0x10/0x10 [ 283.507138][T11381] ? __pfx_vfs_read+0x10/0x10 [ 283.507169][T11381] ? __fget_files+0x2a/0x420 [ 283.507192][T11381] ? __fget_files+0x3a0/0x420 [ 283.507212][T11381] ? __fget_files+0x2a/0x420 [ 283.507242][T11381] ksys_read+0x145/0x250 [ 283.507277][T11381] ? __pfx_ksys_read+0x10/0x10 [ 283.507313][T11381] ? do_syscall_64+0xbe/0xfa0 [ 283.507340][T11381] do_syscall_64+0xfa/0xfa0 [ 283.507360][T11381] ? lockdep_hardirqs_on+0x9c/0x150 [ 283.507382][T11381] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 283.507404][T11381] ? clear_bhb_loop+0x60/0xb0 [ 283.507432][T11381] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 283.507453][T11381] RIP: 0033:0x7f976538e15c [ 283.507485][T11381] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 283.507504][T11381] RSP: 002b:00007f976617b030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 283.507527][T11381] RAX: ffffffffffffffda RBX: 00007f97655e5fa0 RCX: 00007f976538e15c [ 283.507544][T11381] RDX: 000000000000000f RSI: 00007f976617b0a0 RDI: 0000000000000004 [ 283.507558][T11381] RBP: 00007f976617b090 R08: 0000000000000000 R09: 0000000000000000 [ 283.507572][T11381] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 283.507585][T11381] R13: 00007f97655e6038 R14: 00007f97655e5fa0 R15: 00007ffed3ed4ef8 [ 283.507631][T11381] [ 284.241556][ T30] audit: type=1804 audit(1763716844.211:3): pid=11411 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.1470" name="/newroot/298/memory.events" dev="tmpfs" ino=1550 res=1 errno=0 [ 284.284266][ T30] audit: type=1800 audit(1763716844.211:4): pid=11411 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1470" name="memory.events" dev="tmpfs" ino=1550 res=0 errno=0 [ 284.336392][ T30] audit: type=1804 audit(1763716844.221:5): pid=11411 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.1470" name="/newroot/298/memory.events" dev="tmpfs" ino=1550 res=1 errno=0 [ 284.361880][ T30] audit: type=1800 audit(1763716844.221:6): pid=11411 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1470" name="memory.events" dev="tmpfs" ino=1550 res=0 errno=0 [ 284.389761][T11419] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1472'. [ 284.406302][T11419] xt_hashlimit: overflow, try lower: 18446744073709551615/255 [ 284.680574][T11429] netlink: 596 bytes leftover after parsing attributes in process `syz.1.1476'. [ 285.350249][T11453] pimreg: entered allmulticast mode [ 285.381812][T11453] pimreg: left allmulticast mode [ 285.544582][T11456] lo speed is unknown, defaulting to 1000 [ 285.576511][T11456] virt_wifi0 speed is unknown, defaulting to 1000 [ 285.619043][T11467] netlink: 'syz.3.1486': attribute type 1 has an invalid length. [ 285.713282][T11467] 8021q: adding VLAN 0 to HW filter on device bond2 [ 285.725491][T11477] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1489'. [ 285.753733][T11477] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1489'. [ 285.772349][T11467] netlink: 'syz.3.1486': attribute type 10 has an invalid length. [ 285.780755][T11478] netlink: 'syz.3.1486': attribute type 10 has an invalid length. [ 285.802118][T11468] bond2: (slave geneve3): making interface the new active one [ 285.812092][T11468] bond2: (slave geneve3): Enslaving as an active interface with an up link [ 285.849037][ T36] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 20000 - 0 [ 285.873265][ T36] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0 [ 285.908793][T11478] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 286.037196][ T36] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0 [ 286.062833][T11476] syzkaller1: entered promiscuous mode [ 286.071387][T11476] syzkaller1: entered allmulticast mode [ 286.089335][T11495] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 286.101713][ T36] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0 [ 286.603339][T11523] netlink: 'syz.1.1500': attribute type 1 has an invalid length. [ 287.707307][T11549] syzkaller1: entered promiscuous mode [ 287.720069][T11549] syzkaller1: entered allmulticast mode [ 288.049404][T11564] __nla_validate_parse: 2 callbacks suppressed [ 288.049428][T11564] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1511'. [ 288.138764][T11561] lo speed is unknown, defaulting to 1000 [ 288.151184][T11561] virt_wifi0 speed is unknown, defaulting to 1000 [ 291.103943][T11591] tipc: Enabled bearer , priority 0 [ 291.121943][T11592] syzkaller0: entered promiscuous mode [ 291.127488][T11592] syzkaller0: entered allmulticast mode [ 291.161140][T11595] tipc: Resetting bearer [ 291.176333][T11606] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1518'. [ 291.263239][T11606] bond3: Invalid ad_actor_system MAC address. [ 291.269574][T11606] bond3: option ad_actor_system: invalid value (7) [ 291.289944][T11606] bond3 (unregistering): Released all slaves [ 291.394390][T11614] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1521'. [ 291.770271][T11627] netlink: 'syz.4.1525': attribute type 10 has an invalid length. [ 291.832551][T11627] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 291.885725][T11627] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 291.987134][T11637] netlink: 'syz.3.1527': attribute type 1 has an invalid length. [ 292.000931][T11637] netlink: 'syz.3.1527': attribute type 1 has an invalid length. [ 292.308411][T11642] x9: renamed from bridge_slave_0 (while UP) [ 292.822956][T11655] netlink: 'syz.1.1532': attribute type 1 has an invalid length. [ 292.904848][T11655] bond2: (slave vxcan1): The slave device specified does not support setting the MAC address [ 292.928752][T11655] bond2: (slave vxcan1): Error -95 calling set_mac_address [ 293.108524][T11589] tipc: Resetting bearer [ 293.348832][T11589] tipc: Disabling bearer [ 293.490966][T11679] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1537'. [ 293.836855][T11699] netlink: 'syz.2.1541': attribute type 9 has an invalid length. [ 294.155118][T11722] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1546'. [ 294.331478][T11722] bridge_slave_1: left allmulticast mode [ 294.337445][T11722] bridge_slave_1: left promiscuous mode [ 294.347017][T11722] bridge0: port 2(bridge_slave_1) entered disabled state [ 294.398366][T11722] bridge_slave_0: left allmulticast mode [ 294.404947][T11722] bridge_slave_0: left promiscuous mode [ 294.431635][T11722] bridge0: port 1(bridge_slave_0) entered disabled state [ 294.653452][T11734] netlink: 212340 bytes leftover after parsing attributes in process `syz.4.1549'. [ 294.672631][T11734] openvswitch: netlink: Message has 16 unknown bytes. [ 295.032420][ T5906] IPVS: starting estimator thread 0... [ 295.046442][T11727] lo speed is unknown, defaulting to 1000 [ 295.055381][T11727] virt_wifi0 speed is unknown, defaulting to 1000 [ 295.164710][T11748] IPVS: using max 24 ests per chain, 57600 per kthread [ 295.174936][T11739] syzkaller0: entered promiscuous mode [ 295.180868][T11739] syzkaller0: entered allmulticast mode [ 295.283481][T11752] netlink: 'syz.2.1552': attribute type 23 has an invalid length. [ 296.865431][T11758] tipc: Enabled bearer , priority 0 [ 296.872609][T11760] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1554'. [ 296.886618][T11761] syzkaller0: entered promiscuous mode [ 296.892285][T11761] syzkaller0: entered allmulticast mode [ 296.997194][T11760] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1554'. [ 297.007131][T11773] tipc: Resetting bearer [ 297.049995][T11773] tipc: Disabling bearer [ 297.144638][T11782] netlink: 220 bytes leftover after parsing attributes in process `syz.2.1558'. [ 297.240850][T11788] netlink: 'syz.4.1560': attribute type 5 has an invalid length. [ 297.268780][T11790] tipc: Enabled bearer , priority 0 [ 297.292971][T11790] syzkaller0: entered promiscuous mode [ 297.317700][T11790] syzkaller0: entered allmulticast mode [ 297.384030][T11790] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1561'. [ 297.444198][T11798] tipc: Resetting bearer [ 297.488299][T11802] xt_TCPMSS: Only works on TCP SYN packets [ 297.497375][T11789] tipc: Resetting bearer [ 297.530695][T11789] tipc: Disabling bearer [ 297.666766][T11806] netlink: 108 bytes leftover after parsing attributes in process `syz.1.1564'. [ 297.690076][T11806] netlink: 108 bytes leftover after parsing attributes in process `syz.1.1564'. [ 297.700204][T11806] netlink: 84 bytes leftover after parsing attributes in process `syz.1.1564'. [ 297.893707][T11815] netlink: 'syz.4.1568': attribute type 1 has an invalid length. [ 297.924653][T11815] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 298.090249][T11821] lo speed is unknown, defaulting to 1000 [ 298.124157][T11821] virt_wifi0 speed is unknown, defaulting to 1000 [ 298.374852][T11838] syzkaller0: entered promiscuous mode [ 298.392169][T11838] syzkaller0: entered allmulticast mode [ 298.421944][T11838] PF_CAN: dropped non conform CAN FD skbuff: dev type 280, len 65487 [ 298.564900][T11846] : renamed from bond_slave_0 [ 298.647612][ T3549] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 298.656304][T11855] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 298.680459][ T3549] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 298.803906][ T3549] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 298.838948][ T3549] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 298.868263][T11847] lo speed is unknown, defaulting to 1000 [ 298.945902][T11847] virt_wifi0 speed is unknown, defaulting to 1000 [ 299.254576][T11869] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 299.457711][T11887] FAULT_INJECTION: forcing a failure. [ 299.457711][T11887] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 299.504720][T11887] CPU: 1 UID: 0 PID: 11887 Comm: syz.2.1590 Not tainted syzkaller #0 PREEMPT(full) [ 299.504753][T11887] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 299.504766][T11887] Call Trace: [ 299.504774][T11887] [ 299.504784][T11887] dump_stack_lvl+0x189/0x250 [ 299.504821][T11887] ? __pfx____ratelimit+0x10/0x10 [ 299.504858][T11887] ? __pfx_dump_stack_lvl+0x10/0x10 [ 299.504888][T11887] ? __pfx__printk+0x10/0x10 [ 299.504911][T11887] ? __might_fault+0xb0/0x130 [ 299.504954][T11887] should_fail_ex+0x414/0x560 [ 299.505002][T11887] _copy_from_iter+0x1de/0x1790 [ 299.505027][T11887] ? kmem_cache_alloc_node_noprof+0x483/0x710 [ 299.505057][T11887] ? kmalloc_reserve+0xbd/0x290 [ 299.505094][T11887] ? __pfx__copy_from_iter+0x10/0x10 [ 299.505116][T11887] ? __alloc_skb+0x2f1/0x430 [ 299.505139][T11887] ? __pfx___alloc_skb+0x10/0x10 [ 299.505164][T11887] ? netlink_sendmsg+0x642/0xb30 [ 299.505188][T11887] ? skb_put+0x11b/0x210 [ 299.505215][T11887] netlink_sendmsg+0x6b2/0xb30 [ 299.505252][T11887] ? __pfx_netlink_sendmsg+0x10/0x10 [ 299.505281][T11887] ? aa_sock_msg_perm+0xf1/0x1d0 [ 299.505315][T11887] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 299.505337][T11887] ? __pfx_netlink_sendmsg+0x10/0x10 [ 299.505363][T11887] __sock_sendmsg+0x21c/0x270 [ 299.505398][T11887] ____sys_sendmsg+0x505/0x830 [ 299.505432][T11887] ? __pfx_____sys_sendmsg+0x10/0x10 [ 299.505468][T11887] ? import_iovec+0x74/0xa0 [ 299.505501][T11887] ___sys_sendmsg+0x21f/0x2a0 [ 299.505531][T11887] ? __pfx____sys_sendmsg+0x10/0x10 [ 299.505597][T11887] ? __fget_files+0x2a/0x420 [ 299.505617][T11887] ? __fget_files+0x3a0/0x420 [ 299.505649][T11887] __x64_sys_sendmsg+0x19b/0x260 [ 299.505679][T11887] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 299.505715][T11887] ? __pfx_ksys_write+0x10/0x10 [ 299.505751][T11887] ? do_syscall_64+0xbe/0xfa0 [ 299.505779][T11887] do_syscall_64+0xfa/0xfa0 [ 299.505799][T11887] ? lockdep_hardirqs_on+0x9c/0x150 [ 299.505822][T11887] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 299.505845][T11887] ? clear_bhb_loop+0x60/0xb0 [ 299.505872][T11887] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 299.505894][T11887] RIP: 0033:0x7f166a18f749 [ 299.505914][T11887] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 299.505934][T11887] RSP: 002b:00007f166af8d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 299.505958][T11887] RAX: ffffffffffffffda RBX: 00007f166a3e5fa0 RCX: 00007f166a18f749 [ 299.505984][T11887] RDX: 0000000000000040 RSI: 0000200000009b40 RDI: 0000000000000003 [ 299.505999][T11887] RBP: 00007f166af8d090 R08: 0000000000000000 R09: 0000000000000000 [ 299.506013][T11887] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 299.506026][T11887] R13: 00007f166a3e6038 R14: 00007f166a3e5fa0 R15: 00007ffec39f1f58 [ 299.506064][T11887] [ 299.551055][T11871] lo speed is unknown, defaulting to 1000 [ 299.901618][T11871] virt_wifi0 speed is unknown, defaulting to 1000 [ 300.431658][T11918] syz_tun: entered allmulticast mode [ 300.456429][T11918] dvmrp8: entered allmulticast mode [ 300.519244][T11923] __nla_validate_parse: 7 callbacks suppressed [ 300.519266][T11923] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1598'. [ 300.548236][T11925] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1599'. [ 300.609458][T11917] syz_tun: left allmulticast mode [ 300.693293][T11936] FAULT_INJECTION: forcing a failure. [ 300.693293][T11936] name failslab, interval 1, probability 0, space 0, times 1 [ 300.707478][T11936] CPU: 0 UID: 0 PID: 11936 Comm: syz.2.1602 Not tainted syzkaller #0 PREEMPT(full) [ 300.707509][T11936] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 300.707523][T11936] Call Trace: [ 300.707531][T11936] [ 300.707540][T11936] dump_stack_lvl+0x189/0x250 [ 300.707575][T11936] ? __pfx____ratelimit+0x10/0x10 [ 300.707610][T11936] ? __pfx_dump_stack_lvl+0x10/0x10 [ 300.707639][T11936] ? __pfx__printk+0x10/0x10 [ 300.707665][T11936] ? __pfx___might_resched+0x10/0x10 [ 300.707690][T11936] ? fs_reclaim_acquire+0x7d/0x100 [ 300.707716][T11936] should_fail_ex+0x414/0x560 [ 300.707756][T11936] should_failslab+0xa8/0x100 [ 300.707782][T11936] __kmalloc_cache_noprof+0x6f/0x6f0 [ 300.707815][T11936] ? nfnetlink_rcv+0xf97/0x2590 [ 300.707844][T11936] nfnetlink_rcv+0xf97/0x2590 [ 300.707916][T11936] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 300.707935][T11936] ? kasan_save_track+0x4f/0x80 [ 300.708026][T11936] ? netlink_deliver_tap+0x2e/0x1b0 [ 300.708074][T11936] netlink_unicast+0x82f/0x9e0 [ 300.708106][T11936] ? __pfx_netlink_unicast+0x10/0x10 [ 300.708123][T11936] ? dput+0x37/0x2b0 [ 300.708147][T11936] ? netlink_sendmsg+0x642/0xb30 [ 300.708169][T11936] ? skb_put+0x11b/0x210 [ 300.708198][T11936] netlink_sendmsg+0x805/0xb30 [ 300.708240][T11936] ? __pfx_netlink_sendmsg+0x10/0x10 [ 300.708270][T11936] ? aa_sock_msg_perm+0xf1/0x1d0 [ 300.708306][T11936] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 300.708327][T11936] ? __pfx_netlink_sendmsg+0x10/0x10 [ 300.708353][T11936] __sock_sendmsg+0x21c/0x270 [ 300.708389][T11936] ____sys_sendmsg+0x505/0x830 [ 300.708423][T11936] ? __pfx_____sys_sendmsg+0x10/0x10 [ 300.708461][T11936] ? import_iovec+0x74/0xa0 [ 300.708494][T11936] ___sys_sendmsg+0x21f/0x2a0 [ 300.708524][T11936] ? __pfx____sys_sendmsg+0x10/0x10 [ 300.708592][T11936] ? __fget_files+0x2a/0x420 [ 300.708613][T11936] ? __fget_files+0x3a0/0x420 [ 300.708641][T11936] __x64_sys_sendmsg+0x19b/0x260 [ 300.708665][T11936] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 300.708697][T11936] ? __pfx_ksys_write+0x10/0x10 [ 300.708734][T11936] ? do_syscall_64+0xbe/0xfa0 [ 300.708760][T11936] do_syscall_64+0xfa/0xfa0 [ 300.708780][T11936] ? lockdep_hardirqs_on+0x9c/0x150 [ 300.708801][T11936] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 300.708822][T11936] ? clear_bhb_loop+0x60/0xb0 [ 300.708849][T11936] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 300.708987][T11936] RIP: 0033:0x7f166a18f749 [ 300.709010][T11936] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 300.709029][T11936] RSP: 002b:00007f166af8d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 300.709052][T11936] RAX: ffffffffffffffda RBX: 00007f166a3e5fa0 RCX: 00007f166a18f749 [ 300.709068][T11936] RDX: 0000000000000040 RSI: 0000200000009b40 RDI: 0000000000000003 [ 300.709081][T11936] RBP: 00007f166af8d090 R08: 0000000000000000 R09: 0000000000000000 [ 300.709094][T11936] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 300.709106][T11936] R13: 00007f166a3e6038 R14: 00007f166a3e5fa0 R15: 00007ffec39f1f58 [ 300.709140][T11936] [ 301.489303][T11957] netlink: 388 bytes leftover after parsing attributes in process `syz.3.1607'. [ 301.529448][T11958] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1606'. [ 301.733258][T11965] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1610'. [ 301.790043][T11965] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1610'. [ 302.046239][T11976] bond3: entered promiscuous mode [ 302.051940][T11976] bond3: entered allmulticast mode [ 302.058182][T11976] 8021q: adding VLAN 0 to HW filter on device bond3 [ 302.067372][T11989] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1612'. [ 302.336282][T11993] FAULT_INJECTION: forcing a failure. [ 302.336282][T11993] name failslab, interval 1, probability 0, space 0, times 0 [ 302.411634][T11993] CPU: 1 UID: 0 PID: 11993 Comm: syz.2.1614 Not tainted syzkaller #0 PREEMPT(full) [ 302.411667][T11993] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 302.411682][T11993] Call Trace: [ 302.411691][T11993] [ 302.411700][T11993] dump_stack_lvl+0x189/0x250 [ 302.411737][T11993] ? __pfx____ratelimit+0x10/0x10 [ 302.411773][T11993] ? __pfx_dump_stack_lvl+0x10/0x10 [ 302.411805][T11993] ? __pfx__printk+0x10/0x10 [ 302.411831][T11993] ? __pfx___might_resched+0x10/0x10 [ 302.411856][T11993] ? fs_reclaim_acquire+0x7d/0x100 [ 302.411883][T11993] should_fail_ex+0x414/0x560 [ 302.411923][T11993] should_failslab+0xa8/0x100 [ 302.411948][T11993] __kmalloc_cache_noprof+0x6f/0x6f0 [ 302.411982][T11993] ? nfnetlink_rcv+0xf97/0x2590 [ 302.412011][T11993] nfnetlink_rcv+0xf97/0x2590 [ 302.412075][T11993] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 302.412094][T11993] ? kasan_save_track+0x4f/0x80 [ 302.412186][T11993] ? netlink_deliver_tap+0x2e/0x1b0 [ 302.412233][T11993] netlink_unicast+0x82f/0x9e0 [ 302.412266][T11993] ? __pfx_netlink_unicast+0x10/0x10 [ 302.412290][T11993] ? netlink_sendmsg+0x642/0xb30 [ 302.412313][T11993] ? skb_put+0x11b/0x210 [ 302.412342][T11993] netlink_sendmsg+0x805/0xb30 [ 302.412378][T11993] ? __pfx_netlink_sendmsg+0x10/0x10 [ 302.412408][T11993] ? aa_sock_msg_perm+0xf1/0x1d0 [ 302.412445][T11993] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 302.412466][T11993] ? __pfx_netlink_sendmsg+0x10/0x10 [ 302.412493][T11993] __sock_sendmsg+0x21c/0x270 [ 302.412537][T11993] ____sys_sendmsg+0x505/0x830 [ 302.412571][T11993] ? __pfx_____sys_sendmsg+0x10/0x10 [ 302.412607][T11993] ? import_iovec+0x74/0xa0 [ 302.412640][T11993] ___sys_sendmsg+0x21f/0x2a0 [ 302.412669][T11993] ? __pfx____sys_sendmsg+0x10/0x10 [ 302.412735][T11993] ? __fget_files+0x2a/0x420 [ 302.412757][T11993] ? __fget_files+0x3a0/0x420 [ 302.412791][T11993] __x64_sys_sendmsg+0x19b/0x260 [ 302.412822][T11993] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 302.412861][T11993] ? __pfx_ksys_write+0x10/0x10 [ 302.412898][T11993] ? do_syscall_64+0xbe/0xfa0 [ 302.412924][T11993] do_syscall_64+0xfa/0xfa0 [ 302.412945][T11993] ? lockdep_hardirqs_on+0x9c/0x150 [ 302.412968][T11993] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 302.412990][T11993] ? clear_bhb_loop+0x60/0xb0 [ 302.413018][T11993] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 302.413039][T11993] RIP: 0033:0x7f166a18f749 [ 302.413059][T11993] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 302.413079][T11993] RSP: 002b:00007f166af8d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 302.413103][T11993] RAX: ffffffffffffffda RBX: 00007f166a3e5fa0 RCX: 00007f166a18f749 [ 302.413120][T11993] RDX: 0000000000000040 RSI: 0000200000009b40 RDI: 0000000000000003 [ 302.413134][T11993] RBP: 00007f166af8d090 R08: 0000000000000000 R09: 0000000000000000 [ 302.413148][T11993] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 302.413161][T11993] R13: 00007f166a3e6038 R14: 00007f166a3e5fa0 R15: 00007ffec39f1f58 [ 302.413199][T11993] [ 303.087433][T12003] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 303.132661][T12006] netlink: 'syz.3.1618': attribute type 10 has an invalid length. [ 303.163773][T12006] netlink: 'syz.3.1618': attribute type 10 has an invalid length. [ 303.180211][T12006] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 303.375563][T12019] netlink: 'syz.1.1620': attribute type 1 has an invalid length. [ 303.423878][T12024] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1625'. [ 303.476277][T12027] FAULT_INJECTION: forcing a failure. [ 303.476277][T12027] name failslab, interval 1, probability 0, space 0, times 0 [ 303.514965][T12027] CPU: 1 UID: 0 PID: 12027 Comm: syz.0.1626 Not tainted syzkaller #0 PREEMPT(full) [ 303.515000][T12027] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 303.515014][T12027] Call Trace: [ 303.515023][T12027] [ 303.515033][T12027] dump_stack_lvl+0x189/0x250 [ 303.515070][T12027] ? __pfx____ratelimit+0x10/0x10 [ 303.515105][T12027] ? __pfx_dump_stack_lvl+0x10/0x10 [ 303.515136][T12027] ? __pfx__printk+0x10/0x10 [ 303.515163][T12027] ? __pfx___might_resched+0x10/0x10 [ 303.515187][T12027] ? fs_reclaim_acquire+0x7d/0x100 [ 303.515214][T12027] should_fail_ex+0x414/0x560 [ 303.515259][T12027] should_failslab+0xa8/0x100 [ 303.515284][T12027] __kmalloc_cache_noprof+0x6f/0x6f0 [ 303.515318][T12027] ? nfnetlink_rcv+0xf97/0x2590 [ 303.515347][T12027] nfnetlink_rcv+0xf97/0x2590 [ 303.515408][T12027] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 303.515457][T12027] ? ref_tracker_free+0x63a/0x7d0 [ 303.515512][T12027] ? __netlink_deliver_tap+0x807/0x850 [ 303.515537][T12027] ? netlink_deliver_tap+0x2e/0x1b0 [ 303.515583][T12027] netlink_unicast+0x82f/0x9e0 [ 303.515616][T12027] ? __pfx_netlink_unicast+0x10/0x10 [ 303.515640][T12027] ? netlink_sendmsg+0x642/0xb30 [ 303.515663][T12027] ? skb_put+0x11b/0x210 [ 303.515693][T12027] netlink_sendmsg+0x805/0xb30 [ 303.515730][T12027] ? __pfx_netlink_sendmsg+0x10/0x10 [ 303.515760][T12027] ? aa_sock_msg_perm+0xf1/0x1d0 [ 303.515796][T12027] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 303.515820][T12027] ? __pfx_netlink_sendmsg+0x10/0x10 [ 303.515847][T12027] __sock_sendmsg+0x21c/0x270 [ 303.515883][T12027] ____sys_sendmsg+0x505/0x830 [ 303.515917][T12027] ? __pfx_____sys_sendmsg+0x10/0x10 [ 303.515955][T12027] ? import_iovec+0x74/0xa0 [ 303.515987][T12027] ___sys_sendmsg+0x21f/0x2a0 [ 303.516016][T12027] ? __pfx____sys_sendmsg+0x10/0x10 [ 303.516085][T12027] ? __fget_files+0x2a/0x420 [ 303.516106][T12027] ? __fget_files+0x3a0/0x420 [ 303.516140][T12027] __x64_sys_sendmsg+0x19b/0x260 [ 303.516171][T12027] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 303.516209][T12027] ? __pfx_ksys_write+0x10/0x10 [ 303.516247][T12027] ? do_syscall_64+0xbe/0xfa0 [ 303.516274][T12027] do_syscall_64+0xfa/0xfa0 [ 303.516295][T12027] ? lockdep_hardirqs_on+0x9c/0x150 [ 303.516324][T12027] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 303.516346][T12027] ? clear_bhb_loop+0x60/0xb0 [ 303.516373][T12027] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 303.516395][T12027] RIP: 0033:0x7f8a6278f749 [ 303.516421][T12027] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 303.516441][T12027] RSP: 002b:00007f8a6369b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 303.516465][T12027] RAX: ffffffffffffffda RBX: 00007f8a629e5fa0 RCX: 00007f8a6278f749 [ 303.516482][T12027] RDX: 0000000000000040 RSI: 0000200000009b40 RDI: 0000000000000003 [ 303.516496][T12027] RBP: 00007f8a6369b090 R08: 0000000000000000 R09: 0000000000000000 [ 303.516510][T12027] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 303.516523][T12027] R13: 00007f8a629e6038 R14: 00007f8a629e5fa0 R15: 00007ffc9d6baf68 [ 303.516561][T12027] [ 303.588638][T12031] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1627'. [ 303.943701][T12036] tipc: New replicast peer: 255.255.255.255 [ 303.950398][T12036] tipc: Enabled bearer , priority 10 [ 304.014292][T12036] netlink: 'syz.2.1629': attribute type 11 has an invalid length. [ 304.026113][T12036] netlink: 'syz.2.1629': attribute type 11 has an invalid length. [ 304.034704][T12036] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1629'. [ 304.144937][T12047] bridge0: entered promiscuous mode [ 304.150230][T12047] bridge0: entered allmulticast mode [ 304.764266][T12081] ip6tnl3: entered promiscuous mode [ 304.822398][T12081] netlink: 'syz.1.1640': attribute type 13 has an invalid length. [ 304.830562][T12081] netlink: 'syz.1.1640': attribute type 17 has an invalid length. [ 304.923547][T12081] lo speed is unknown, defaulting to 1000 [ 304.945898][T12081] virt_wifi0 speed is unknown, defaulting to 1000 [ 305.006799][T12092] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 305.146504][T12081] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 305.183904][T12108] tipc: Enabled bearer , priority 0 [ 305.270910][T12096] tipc: Resetting bearer [ 306.110948][T12133] FAULT_INJECTION: forcing a failure. [ 306.110948][T12133] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 306.127390][T12133] CPU: 0 UID: 0 PID: 12133 Comm: syz.1.1653 Not tainted syzkaller #0 PREEMPT(full) [ 306.127422][T12133] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 306.127436][T12133] Call Trace: [ 306.127446][T12133] [ 306.127454][T12133] dump_stack_lvl+0x189/0x250 [ 306.127491][T12133] ? __pfx____ratelimit+0x10/0x10 [ 306.127526][T12133] ? __pfx_dump_stack_lvl+0x10/0x10 [ 306.127558][T12133] ? __pfx__printk+0x10/0x10 [ 306.127581][T12133] ? __might_fault+0xb0/0x130 [ 306.127626][T12133] should_fail_ex+0x414/0x560 [ 306.127666][T12133] _copy_from_user+0x2d/0xb0 [ 306.127696][T12133] ___sys_recvmsg+0x12e/0x510 [ 306.127732][T12133] ? __pfx____sys_recvmsg+0x10/0x10 [ 306.127796][T12133] ? __might_fault+0xb0/0x130 [ 306.127839][T12133] do_recvmmsg+0x307/0x770 [ 306.127877][T12133] ? __pfx_do_recvmmsg+0x10/0x10 [ 306.127919][T12133] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 306.127964][T12133] __x64_sys_recvmmsg+0x190/0x240 [ 306.127996][T12133] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 306.128030][T12133] ? do_syscall_64+0xbe/0xfa0 [ 306.128057][T12133] do_syscall_64+0xfa/0xfa0 [ 306.128078][T12133] ? lockdep_hardirqs_on+0x9c/0x150 [ 306.128100][T12133] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 306.128122][T12133] ? clear_bhb_loop+0x60/0xb0 [ 306.128150][T12133] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 306.128179][T12133] RIP: 0033:0x7fa00c98f749 [ 306.128200][T12133] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 306.128219][T12133] RSP: 002b:00007fa00d8dd038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 306.128242][T12133] RAX: ffffffffffffffda RBX: 00007fa00cbe5fa0 RCX: 00007fa00c98f749 [ 306.128259][T12133] RDX: 000000000000f000 RSI: 0000200000000d00 RDI: 0000000000000003 [ 306.128273][T12133] RBP: 00007fa00d8dd090 R08: 0000000000000000 R09: 0000000000000000 [ 306.128287][T12133] R10: 0000000000010002 R11: 0000000000000246 R12: 0000000000000002 [ 306.128301][T12133] R13: 00007fa00cbe6038 R14: 00007fa00cbe5fa0 R15: 00007ffe465e8ca8 [ 306.128343][T12133] [ 306.364700][T12136] __nla_validate_parse: 14 callbacks suppressed [ 306.364723][T12136] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1654'. [ 306.568705][T12150] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1657'. [ 306.702315][T12154] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1657'. [ 307.488710][T12096] tipc: Disabling bearer [ 307.503332][T12129] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1652'. [ 307.661090][T12162] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1660'. [ 307.683001][T12163] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1660'. [ 307.683049][T12158] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -12 [ 307.729233][T12158] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -12 [ 307.760539][T12158] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 307.783472][T12169] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1659'. [ 307.823244][T12169] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 307.945217][T12172] netlink: 165 bytes leftover after parsing attributes in process `syz.0.1663'. [ 307.957655][T12161] netlink: 'syz.4.1659': attribute type 1 has an invalid length. [ 308.032814][T12161] 8021q: adding VLAN 0 to HW filter on device bond2 [ 308.050980][T12172] syzkaller0: entered promiscuous mode [ 308.090608][T12172] syzkaller0: entered allmulticast mode [ 308.130984][T12179] FAULT_INJECTION: forcing a failure. [ 308.130984][T12179] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 308.158976][T12169] 8021q: adding VLAN 0 to HW filter on device bond2 [ 308.185017][T12179] CPU: 0 UID: 0 PID: 12179 Comm: syz.2.1665 Not tainted syzkaller #0 PREEMPT(full) [ 308.185050][T12179] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 308.185065][T12179] Call Trace: [ 308.185074][T12179] [ 308.185084][T12179] dump_stack_lvl+0x189/0x250 [ 308.185121][T12179] ? __pfx____ratelimit+0x10/0x10 [ 308.185155][T12179] ? __pfx_dump_stack_lvl+0x10/0x10 [ 308.185184][T12179] ? __pfx__printk+0x10/0x10 [ 308.185205][T12179] ? __might_fault+0xb0/0x130 [ 308.185250][T12179] should_fail_ex+0x414/0x560 [ 308.185289][T12179] _copy_from_user+0x2d/0xb0 [ 308.185319][T12179] ___sys_recvmsg+0x12e/0x510 [ 308.185355][T12179] ? __pfx____sys_recvmsg+0x10/0x10 [ 308.185419][T12179] ? __might_fault+0xb0/0x130 [ 308.185455][T12179] do_recvmmsg+0x307/0x770 [ 308.185493][T12179] ? __pfx_do_recvmmsg+0x10/0x10 [ 308.185535][T12179] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 308.185581][T12179] __x64_sys_recvmmsg+0x190/0x240 [ 308.185612][T12179] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 308.185646][T12179] ? do_syscall_64+0xbe/0xfa0 [ 308.185673][T12179] do_syscall_64+0xfa/0xfa0 [ 308.185694][T12179] ? lockdep_hardirqs_on+0x9c/0x150 [ 308.185716][T12179] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 308.185738][T12179] ? clear_bhb_loop+0x60/0xb0 [ 308.185766][T12179] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 308.185787][T12179] RIP: 0033:0x7f166a18f749 [ 308.185807][T12179] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 308.185826][T12179] RSP: 002b:00007f166af8d038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 308.185850][T12179] RAX: ffffffffffffffda RBX: 00007f166a3e5fa0 RCX: 00007f166a18f749 [ 308.185866][T12179] RDX: 000000000000f000 RSI: 0000200000000d00 RDI: 0000000000000003 [ 308.185886][T12179] RBP: 00007f166af8d090 R08: 0000000000000000 R09: 0000000000000000 [ 308.185908][T12179] R10: 0000000000010002 R11: 0000000000000246 R12: 0000000000000002 [ 308.185922][T12179] R13: 00007f166a3e6038 R14: 00007f166a3e5fa0 R15: 00007ffec39f1f58 [ 308.185959][T12179] [ 308.187708][T12169] bond2: (slave vxcan5): The slave device specified does not support setting the MAC address [ 308.448036][T12184] xt_TCPMSS: Only works on TCP SYN packets [ 308.546052][T12169] bond2: (slave vxcan5): Error -95 calling set_mac_address [ 308.557737][T12189] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1668'. [ 308.597837][T12161] mac80211_hwsim hwsim10 wlan0: entered promiscuous mode [ 308.622328][T12161] bond2: (slave wlan0): Opening slave failed [ 308.869510][T12197] Cannot find add_set index 2 as target [ 308.918558][T12200] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 309.090933][T12203] netlink: 'syz.4.1674': attribute type 42 has an invalid length. [ 309.282635][T12210] FAULT_INJECTION: forcing a failure. [ 309.282635][T12210] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 309.310459][T12210] CPU: 0 UID: 0 PID: 12210 Comm: syz.4.1677 Not tainted syzkaller #0 PREEMPT(full) [ 309.310494][T12210] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 309.310508][T12210] Call Trace: [ 309.310518][T12210] [ 309.310528][T12210] dump_stack_lvl+0x189/0x250 [ 309.310564][T12210] ? __pfx____ratelimit+0x10/0x10 [ 309.310601][T12210] ? __pfx_dump_stack_lvl+0x10/0x10 [ 309.310631][T12210] ? __pfx__printk+0x10/0x10 [ 309.310655][T12210] ? __might_fault+0xb0/0x130 [ 309.310699][T12210] should_fail_ex+0x414/0x560 [ 309.310771][T12210] _copy_from_user+0x2d/0xb0 [ 309.310801][T12210] ___sys_recvmsg+0x12e/0x510 [ 309.310843][T12210] ? __pfx____sys_recvmsg+0x10/0x10 [ 309.310916][T12210] ? __might_fault+0xb0/0x130 [ 309.310952][T12210] do_recvmmsg+0x307/0x770 [ 309.310990][T12210] ? __pfx_do_recvmmsg+0x10/0x10 [ 309.311032][T12210] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 309.311079][T12210] __x64_sys_recvmmsg+0x190/0x240 [ 309.311110][T12210] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 309.311155][T12210] ? do_syscall_64+0xbe/0xfa0 [ 309.311183][T12210] do_syscall_64+0xfa/0xfa0 [ 309.311204][T12210] ? lockdep_hardirqs_on+0x9c/0x150 [ 309.311225][T12210] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 309.311245][T12210] ? clear_bhb_loop+0x60/0xb0 [ 309.311268][T12210] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 309.311288][T12210] RIP: 0033:0x7f976538f749 [ 309.311308][T12210] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 309.311327][T12210] RSP: 002b:00007f976617b038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 309.311351][T12210] RAX: ffffffffffffffda RBX: 00007f97655e5fa0 RCX: 00007f976538f749 [ 309.311367][T12210] RDX: 000000000000f000 RSI: 0000200000000d00 RDI: 0000000000000003 [ 309.311382][T12210] RBP: 00007f976617b090 R08: 0000000000000000 R09: 0000000000000000 [ 309.311396][T12210] R10: 0000000000010002 R11: 0000000000000246 R12: 0000000000000002 [ 309.311410][T12210] R13: 00007f97655e6038 R14: 00007f97655e5fa0 R15: 00007ffed3ed4ef8 [ 309.311447][T12210] [ 309.336237][T12214] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1678'. [ 310.054856][T12229] openvswitch: netlink: IP tunnel dst address not specified [ 310.182277][T12238] pimreg: entered allmulticast mode [ 310.358122][T12236] lo speed is unknown, defaulting to 1000 [ 310.374057][T12236] virt_wifi0 speed is unknown, defaulting to 1000 [ 310.760520][T12274] netlink: 'syz.1.1695': attribute type 5 has an invalid length. [ 311.133968][T12279] veth0: entered allmulticast mode [ 312.331718][T12314] netlink: 'syz.2.1703': attribute type 16 has an invalid length. [ 312.360116][T12314] netlink: 'syz.2.1703': attribute type 17 has an invalid length. [ 312.444734][ T1105] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 312.471340][ T1105] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 20004 - 0 [ 312.475488][T12320] __nla_validate_parse: 11 callbacks suppressed [ 312.475512][T12320] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1705'. [ 312.490519][ T1105] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 312.526880][ T1105] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 20004 - 0 [ 312.548062][T12320] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1705'. [ 312.570945][T12326] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1706'. [ 312.582708][T12330] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1708'. [ 312.617461][ T1105] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 312.626669][ T1105] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 20004 - 0 [ 312.646183][ T1105] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 312.662732][T12320] netlink: 'syz.0.1705': attribute type 10 has an invalid length. [ 312.687081][ T1105] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 20004 - 0 [ 312.700316][T12320] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1705'. [ 312.748405][T12320] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 312.829537][T12330] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1708'. [ 313.037862][T12343] netlink: 220 bytes leftover after parsing attributes in process `syz.4.1711'. [ 313.056809][T12340] lo speed is unknown, defaulting to 1000 [ 313.062704][T12343] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1711'. [ 313.068000][T12343] workqueue: name exceeds WQ_NAME_LEN. Truncating to: '}S7\mgҒ?NZez [ 313.075720][T12340] virt_wifi0 speed is unknown, defaulting to 1000 [ 313.433767][T12361] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1716'. [ 313.451913][T12361] : entered promiscuous mode [ 313.471917][T12361] netlink: 'syz.1.1716': attribute type 1 has an invalid length. [ 313.551059][T12368] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1716'. [ 313.599685][T12361] bond4: entered promiscuous mode [ 313.605520][T12361] 8021q: adding VLAN 0 to HW filter on device bond4 [ 313.643254][T12350] lo speed is unknown, defaulting to 1000 [ 313.710076][T12350] virt_wifi0 speed is unknown, defaulting to 1000 [ 314.058075][T12381] vlan0: entered promiscuous mode [ 314.084034][T12386] netlink: 'syz.1.1723': attribute type 13 has an invalid length. [ 314.099727][T12381] macvtap0: entered promiscuous mode [ 314.155691][T12382] vlan0: entered promiscuous mode [ 314.405155][T12386] batadv_slave_1: left allmulticast mode [ 314.410975][T12386] batadv_slave_1: left promiscuous mode [ 314.520682][ T3549] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 314.542513][ T3549] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 314.550964][ T3549] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 314.597328][ T3549] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 315.723897][T12450] xt_hashlimit: size too large, truncated to 1048576 [ 318.376849][T12466] netlink: 'syz.0.1743': attribute type 12 has an invalid length. [ 318.385945][T12465] tipc: Enabled bearer , priority 0 [ 318.430473][T12468] syzkaller0: entered promiscuous mode [ 318.436095][T12468] syzkaller0: entered allmulticast mode [ 318.443504][T12468] tipc: Resetting bearer [ 318.464487][T12462] tipc: Resetting bearer [ 318.561928][T12494] __nla_validate_parse: 5 callbacks suppressed [ 318.561949][T12494] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1749'. [ 319.982382][T12462] tipc: Disabling bearer [ 320.140660][T12508] geneve3: entered promiscuous mode [ 320.627363][T12543] sctp: [Deprecated]: syz.3.1761 (pid 12543) Use of struct sctp_assoc_value in delayed_ack socket option. [ 320.627363][T12543] Use struct sctp_sack_info instead [ 320.684347][T12543] netlink: 'syz.3.1761': attribute type 30 has an invalid length. [ 320.830387][T12553] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1765'. [ 321.035802][T12555] tipc: Enabled bearer , priority 0 [ 321.259606][T12555] syzkaller0: entered promiscuous mode [ 321.265968][T12555] syzkaller0: entered allmulticast mode [ 321.276776][T12555] tipc: Resetting bearer [ 321.417042][ T79] tipc: Resetting bearer [ 321.440060][T12554] tipc: Resetting bearer [ 321.507896][T12567] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1771'. [ 321.528155][T12567] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1771'. [ 321.631820][T12581] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1773'. [ 323.211133][T12554] tipc: Disabling bearer [ 323.220650][T12565] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1769'. [ 323.229728][T12565] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1769'. [ 323.394626][T12605] netlink: 'syz.3.1777': attribute type 9 has an invalid length. [ 323.892117][T12639] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1785'. [ 324.451663][T12659] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1788'. [ 324.467327][T12659] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1788'. [ 324.608348][T12653] lo speed is unknown, defaulting to 1000 [ 324.616896][T12653] virt_wifi0 speed is unknown, defaulting to 1000 [ 324.834693][T12672] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1791'. [ 325.353181][T12682] siw: device registration error -23 [ 325.641670][T12693] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1793'. [ 325.681477][T12693] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1793'. [ 325.875118][T12683] netem: change failed [ 326.207787][T12702] FAULT_INJECTION: forcing a failure. [ 326.207787][T12702] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 326.222052][T12702] CPU: 1 UID: 0 PID: 12702 Comm: syz.2.1798 Not tainted syzkaller #0 PREEMPT(full) [ 326.222085][T12702] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 326.222099][T12702] Call Trace: [ 326.222108][T12702] [ 326.222117][T12702] dump_stack_lvl+0x189/0x250 [ 326.222153][T12702] ? __pfx____ratelimit+0x10/0x10 [ 326.222189][T12702] ? __pfx_dump_stack_lvl+0x10/0x10 [ 326.222219][T12702] ? __pfx__printk+0x10/0x10 [ 326.222242][T12702] ? __might_fault+0xb0/0x130 [ 326.222287][T12702] should_fail_ex+0x414/0x560 [ 326.222327][T12702] _copy_from_user+0x2d/0xb0 [ 326.222357][T12702] ___sys_recvmsg+0x12e/0x510 [ 326.222392][T12702] ? __pfx____sys_recvmsg+0x10/0x10 [ 326.222456][T12702] ? __might_fault+0xb0/0x130 [ 326.222492][T12702] do_recvmmsg+0x307/0x770 [ 326.222529][T12702] ? __pfx_do_recvmmsg+0x10/0x10 [ 326.222571][T12702] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 326.222617][T12702] __x64_sys_recvmmsg+0x190/0x240 [ 326.222649][T12702] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 326.222690][T12702] ? do_syscall_64+0xbe/0xfa0 [ 326.222717][T12702] do_syscall_64+0xfa/0xfa0 [ 326.222737][T12702] ? lockdep_hardirqs_on+0x9c/0x150 [ 326.222760][T12702] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 326.222782][T12702] ? clear_bhb_loop+0x60/0xb0 [ 326.222810][T12702] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 326.222831][T12702] RIP: 0033:0x7f166a18f749 [ 326.222851][T12702] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 326.222871][T12702] RSP: 002b:00007f166af8d038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 326.222895][T12702] RAX: ffffffffffffffda RBX: 00007f166a3e5fa0 RCX: 00007f166a18f749 [ 326.222911][T12702] RDX: 000000000000f000 RSI: 0000200000000d00 RDI: 0000000000000003 [ 326.222926][T12702] RBP: 00007f166af8d090 R08: 0000000000000000 R09: 0000000000000000 [ 326.222940][T12702] R10: 0000000000010002 R11: 0000000000000246 R12: 0000000000000002 [ 326.222954][T12702] R13: 00007f166a3e6038 R14: 00007f166a3e5fa0 R15: 00007ffec39f1f58 [ 326.222992][T12702] [ 326.809507][T12719] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 326.852717][T12724] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1802'. [ 326.868785][T12724] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1802'. [ 326.904328][T12719] netlink: 332 bytes leftover after parsing attributes in process `syz.3.1802'. [ 326.929114][ T5826] block nbd1: Receive control failed (result -32) [ 326.980618][T12727] syzkaller0: entered promiscuous mode [ 327.002186][T12727] syzkaller0: entered allmulticast mode [ 327.075677][T12732] netlink: 'syz.3.1808': attribute type 96 has an invalid length. [ 327.090207][T12732] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1808'. [ 327.107903][T12732] netlink: 'syz.3.1808': attribute type 1 has an invalid length. [ 328.099391][T12764] xt_CT: You must specify a L4 protocol and not use inversions on it [ 328.136713][T12740] team0: Port device bridge7 added [ 328.151163][T12760] bridge0: port 1(team0) entered blocking state [ 328.160399][T12760] bridge0: port 1(team0) entered disabled state [ 328.168882][T12760] team0: entered allmulticast mode [ 328.187927][T12760] team_slave_0: entered allmulticast mode [ 328.195187][T12760] team_slave_1: entered allmulticast mode [ 328.201401][T12760] geneve0: entered allmulticast mode [ 328.210924][T12760] bridge7: entered allmulticast mode [ 328.239908][T12760] team0: entered promiscuous mode [ 328.251067][T12760] team_slave_0: entered promiscuous mode [ 328.280799][T12760] team_slave_1: entered promiscuous mode [ 328.304248][T12760] geneve0: entered promiscuous mode [ 328.309732][T12760] bridge7: entered promiscuous mode [ 328.411940][T12776] netlink: 'syz.3.1819': attribute type 1 has an invalid length. [ 328.598557][T12783] lo speed is unknown, defaulting to 1000 [ 328.653665][T12783] virt_wifi0 speed is unknown, defaulting to 1000 [ 329.064877][T12807] __nla_validate_parse: 4 callbacks suppressed [ 329.064897][T12807] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1827'. [ 329.203792][T12807] lo speed is unknown, defaulting to 1000 [ 329.212419][T12807] virt_wifi0 speed is unknown, defaulting to 1000 [ 329.273155][T12810] No such timeout policy "syz1" [ 329.898596][T12824] xt_TPROXY: Can be used only with -p tcp or -p udp [ 329.977171][T12829] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1835'. [ 330.160407][T12836] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 330.575147][T12854] ipvlan0: entered promiscuous mode [ 330.595497][T12854] 8021q: adding VLAN 0 to HW filter on device ipvlan0 [ 330.880359][T12863] lo speed is unknown, defaulting to 1000 [ 330.915471][T12863] virt_wifi0 speed is unknown, defaulting to 1000 [ 331.418895][T12880] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1849'. [ 331.437265][T12880] veth0_macvtap: left promiscuous mode [ 331.676776][T12887] openvswitch: netlink: IP tunnel dst address not specified [ 331.771691][T12891] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1854'. [ 332.075263][T12899] lo speed is unknown, defaulting to 1000 [ 332.087825][T12899] virt_wifi0 speed is unknown, defaulting to 1000 [ 332.511774][T12924] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1859'. [ 332.703955][T12928] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1862'. [ 332.728359][T12928] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1862'. [ 332.739233][T12929] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1862'. [ 332.864756][T12938] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1865'. [ 332.970796][T12944] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1867'. [ 333.096863][T12954] pim6reg1: entered promiscuous mode [ 333.112466][T12954] pim6reg1: entered allmulticast mode [ 333.375191][T12962] siw: device registration error -23 [ 333.665295][T12966] lo speed is unknown, defaulting to 1000 [ 333.700355][T12966] virt_wifi0 speed is unknown, defaulting to 1000 [ 333.744188][T12973] netlink: 'syz.3.1873': attribute type 21 has an invalid length. [ 333.843663][T12973] netlink: 'syz.3.1873': attribute type 4 has an invalid length. [ 333.851736][T12973] netlink: 'syz.3.1873': attribute type 3 has an invalid length. [ 334.066234][T12989] netlink: 'syz.1.1878': attribute type 1 has an invalid length. [ 334.189019][T12997] netlink: 'syz.1.1878': attribute type 83 has an invalid length. [ 334.254655][T12989] 8021q: adding VLAN 0 to HW filter on device bond5 [ 334.867630][T13026] netlink: 'syz.3.1883': attribute type 1 has an invalid length. [ 335.672003][T13046] netlink: 'syz.1.1891': attribute type 32 has an invalid length. [ 335.690501][T13046] __nla_validate_parse: 2 callbacks suppressed [ 335.690525][T13046] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1891'. [ 335.767724][T13046] bond6: Setting coupled_control to off (0) [ 336.007739][T13050] ip6gre0: entered promiscuous mode [ 336.053366][T13052] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1894'. [ 336.118585][T13052] lo speed is unknown, defaulting to 1000 [ 336.133097][T13055] netlink: 'syz.1.1895': attribute type 1 has an invalid length. [ 336.145793][T13052] virt_wifi0 speed is unknown, defaulting to 1000 [ 336.224981][T13055] 8021q: adding VLAN 0 to HW filter on device bond7 [ 336.277423][T13059] bond7: (slave geneve2): making interface the new active one [ 336.288632][T13059] bond7: (slave geneve2): Enslaving as an active interface with an up link [ 336.335828][T13064] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1896'. [ 336.375272][ T12] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.384422][ T12] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.407514][T13056] lo speed is unknown, defaulting to 1000 [ 336.415638][T13056] virt_wifi0 speed is unknown, defaulting to 1000 [ 336.433326][ T12] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.472061][ T12] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 336.729881][T13074] netlink: 'syz.2.1899': attribute type 2 has an invalid length. [ 336.763361][T13074] netlink: 165 bytes leftover after parsing attributes in process `syz.2.1899'. [ 336.840375][T13074] netlink: 277 bytes leftover after parsing attributes in process `syz.2.1899'. [ 336.944280][T13080] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1900'. [ 336.973735][T13080] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1900'. [ 337.005893][T13082] lo speed is unknown, defaulting to 1000 [ 337.033662][T13082] virt_wifi0 speed is unknown, defaulting to 1000 [ 337.117073][T13093] openvswitch: netlink: ufid size 17 bytes exceeds the range (1, 16) [ 337.125581][T13093] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 337.162151][ T12] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 338.045027][T13119] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1910'. [ 338.197587][T13134] xt_hashlimit: max too large, truncated to 1048576 [ 338.291417][T13138] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1912'. [ 338.448929][T13145] SET target dimension over the limit! [ 338.458158][T13145] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1916'. [ 339.697792][T13189] netlink: 'syz.3.1930': attribute type 1 has an invalid length. [ 340.971163][T13236] __nla_validate_parse: 8 callbacks suppressed [ 340.971184][T13236] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1938'. [ 341.436891][T13250] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1942'. [ 341.647388][T13250] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1942'. [ 341.723691][T13261] lo speed is unknown, defaulting to 1000 [ 341.756160][T13261] virt_wifi0 speed is unknown, defaulting to 1000 [ 341.883353][T13270] netlink: 1036 bytes leftover after parsing attributes in process `syz.1.1946'. [ 342.436697][T13281] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1945'. [ 342.452668][T13281] netlink: 'syz.4.1945': attribute type 5 has an invalid length. [ 342.460985][T13281] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1945'. [ 342.477789][T13281] geneve0: entered promiscuous mode [ 342.483658][T13281] geneve0: entered allmulticast mode [ 343.155024][T13309] sctp: [Deprecated]: syz.2.1957 (pid 13309) Use of struct sctp_assoc_value in delayed_ack socket option. [ 343.155024][T13309] Use struct sctp_sack_info instead [ 343.253774][T13312] syzkaller1: entered promiscuous mode [ 343.272376][T13312] syzkaller1: entered allmulticast mode [ 343.365579][T13305] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1955'. [ 343.501841][T13321] netlink: 'syz.4.1955': attribute type 11 has an invalid length. [ 343.532666][T13321] netlink: 'syz.4.1955': attribute type 11 has an invalid length. [ 343.582618][T13318] lo speed is unknown, defaulting to 1000 [ 343.611125][T13318] virt_wifi0 speed is unknown, defaulting to 1000 [ 343.662143][T13321] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1955'. [ 343.679644][T13329] A link change request failed with some changes committed already. Interface veth1_to_batadv may have been left with an inconsistent configuration, please check. [ 344.127403][T13302] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 344.190952][T13342] veth3: entered promiscuous mode [ 344.786182][T13357] ip6gre1: entered promiscuous mode [ 344.822196][T13357] ip6gre1: entered allmulticast mode [ 344.858918][ T79] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 344.871632][ T79] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 344.882000][ T5918] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 344.953461][T13357] atomic_op ffff8880572de998 conn xmit_atomic 0000000000000000 [ 344.983625][T13357] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 345.056414][T13367] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 345.187880][T13375] 8021q: VLANs not supported on lo [ 345.271867][ T5918] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 345.389609][T13386] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1974'. [ 345.409943][T13386] netlink: 'syz.2.1974': attribute type 1 has an invalid length. [ 345.413191][T13385] 8021q: VLANs not supported on wg1 [ 345.445881][T13390] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1976'. [ 345.555998][T13390] [: entered promiscuous mode [ 345.661100][T13399] dvmrp1: tun_chr_ioctl cmd 1074025677 [ 345.675188][T13399] dvmrp1: linktype set to 769 [ 345.707520][ T5920] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 345.853038][T13401] bridge4: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 345.928914][T13406] ip6gre1: entered promiscuous mode [ 345.935166][T13406] ip6gre1: entered allmulticast mode [ 345.943034][ T12] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 345.947689][T13406] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 345.951153][ T12] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 345.971793][ T5920] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 346.062124][T13418] __nla_validate_parse: 2 callbacks suppressed [ 346.062147][T13418] netlink: 184 bytes leftover after parsing attributes in process `syz.4.1980'. [ 346.248414][T13432] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1987'. [ 346.258297][T13432] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1987'. [ 346.304205][T13432] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for erspan1 [ 346.317844][T13432] erspan1: entered allmulticast mode [ 346.463090][T13438] lo speed is unknown, defaulting to 1000 [ 346.482949][T13438] virt_wifi0 speed is unknown, defaulting to 1000 [ 347.433267][T13465] lo speed is unknown, defaulting to 1000 [ 347.469264][T13465] virt_wifi0 speed is unknown, defaulting to 1000 [ 347.746099][T13477] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1996'. [ 348.009341][T13485] lo speed is unknown, defaulting to 1000 [ 348.041119][T13485] virt_wifi0 speed is unknown, defaulting to 1000 [ 348.710922][T13505] syzkaller0: entered promiscuous mode [ 348.718600][T13505] syzkaller0: entered allmulticast mode [ 349.069174][T13525] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2008'. [ 349.132509][T13531] x_tables: unsorted underflow at hook 2 [ 349.204304][T13534] netlink: del zone limit has 4 unknown bytes [ 349.730555][T13543] ip6gre2: entered allmulticast mode [ 350.045441][T13557] netlink: 'syz.1.2018': attribute type 1 has an invalid length. [ 350.261589][ C1] ip6_tnl_xmit_ctl: 3 callbacks suppressed [ 350.261610][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 351.205117][T13618] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 351.475780][T13643] netlink: 'syz.1.2029': attribute type 3 has an invalid length. [ 351.517092][T13643] netlink: 60387 bytes leftover after parsing attributes in process `syz.1.2029'. [ 351.600554][T13639] lo speed is unknown, defaulting to 1000 [ 351.708809][T13639] virt_wifi0 speed is unknown, defaulting to 1000 [ 353.136318][T13709] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2047'. [ 353.152669][T13709] netlink: 'syz.0.2047': attribute type 16 has an invalid length. [ 353.164151][T13709] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2047'. [ 353.288088][T13712] bridge0: port 2(bridge_slave_1) entered disabled state [ 353.296732][T13712] bridge0: port 1(1x9) entered disabled state [ 353.447086][T13722] netlink: 'syz.3.2050': attribute type 1 has an invalid length. [ 353.464546][T13720] xt_TCPMSS: Only works on TCP SYN packets [ 353.633591][T13733] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2050'. [ 353.637055][T13732] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2053'. [ 353.660280][T13733] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2050'. [ 353.673662][T13733] netlink: 'syz.3.2050': attribute type 18 has an invalid length. [ 353.750766][T13725] bridge0: port 3(gretap0) entered disabled state [ 353.922552][T13725] bridge0: port 2(bridge_slave_1) entered disabled state [ 353.931836][T13725] bridge0: port 1(bridge_slave_0) entered disabled state [ 353.986127][T13725] team_slave_0: left promiscuous mode [ 353.992569][T13725] team_slave_1: left promiscuous mode [ 354.212055][T13725] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 354.233929][T13725] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 354.307294][T13725] vlan0: left promiscuous mode [ 354.376351][T13725] mac80211_hwsim hwsim10 wlan0: left promiscuous mode [ 354.389395][T13725] bond1: left promiscuous mode [ 354.401899][T13725] bond1: left allmulticast mode [ 354.542128][T13722] bond4: (slave bridge4): making interface the new active one [ 354.575588][T13722] bond4: (slave bridge4): Enslaving as an active interface with an up link [ 354.663219][ T13] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 354.683781][ T13] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.760313][ T13] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 354.799287][ T13] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.833105][T13746] lo speed is unknown, defaulting to 1000 [ 354.842731][ T13] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 354.920377][ T13] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.959506][ T13] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 354.984472][T13766] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2057'. [ 354.985160][ T13] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.021855][T13746] virt_wifi0 speed is unknown, defaulting to 1000 [ 355.294729][T13780] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2061'. [ 355.352997][T13783] lo speed is unknown, defaulting to 1000 [ 355.365516][T13783] virt_wifi0 speed is unknown, defaulting to 1000 [ 355.562239][T13795] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2067'. [ 355.563274][T13793] x_tables: duplicate underflow at hook 1 [ 355.729425][T13798] bond5 (unregistering): Released all slaves [ 356.004661][T13809] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2069'. [ 356.099720][T13817] ipvlan2: entered promiscuous mode [ 356.106868][T13817] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 356.609409][T13832] __nla_validate_parse: 1 callbacks suppressed [ 356.609431][T13832] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2076'. [ 356.900830][T13838] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2078'. [ 356.946370][T13841] netlink: 'syz.2.2079': attribute type 1 has an invalid length. [ 357.004257][T13842] netlink: 'syz.2.2079': attribute type 1 has an invalid length. [ 357.219539][T13853] syzkaller1: entered promiscuous mode [ 357.226479][T13853] syzkaller1: entered allmulticast mode [ 357.446775][T13865] syzkaller1: entered promiscuous mode [ 357.462772][T13865] syzkaller1: entered allmulticast mode [ 357.536194][T13877] netlink: 'syz.3.2088': attribute type 29 has an invalid length. [ 357.666816][T13887] openvswitch: netlink: Message has -2 unknown bytes. [ 357.675608][T13887] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 357.941387][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 357.967865][T13906] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2097'. [ 358.016697][T13905] A link change request failed with some changes committed already. Interface veth0_to_team may have been left with an inconsistent configuration, please check. [ 358.302854][T13924] syzkaller0: entered promiscuous mode [ 358.323530][T13924] syzkaller0: entered allmulticast mode [ 358.332427][T13921] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2102'. [ 358.380163][T13930] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2104'. [ 358.404844][T13930] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2104'. [ 358.581437][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 358.648291][T13949] x_tables: duplicate underflow at hook 1 [ 358.890476][T13965] 8021q: VLANs not supported on ip_vti0 [ 359.595748][T13993] batadv0: entered promiscuous mode [ 359.614146][T13993] macvtap1: entered promiscuous mode [ 359.625545][T13993] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 359.694371][T13993] batadv0: left promiscuous mode [ 359.768727][T13999] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2123'. [ 359.803196][T13999] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2123'. [ 359.819193][T13994] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2120'. [ 359.833910][T13999] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2123'. [ 359.970638][T14007] nbd: nbd0 already in use [ 360.528657][T14035] FAULT_INJECTION: forcing a failure. [ 360.528657][T14035] name failslab, interval 1, probability 0, space 0, times 0 [ 360.541639][T14035] CPU: 0 UID: 0 PID: 14035 Comm: syz.0.2133 Not tainted syzkaller #0 PREEMPT(full) [ 360.541670][T14035] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 360.541683][T14035] Call Trace: [ 360.541689][T14035] [ 360.541696][T14035] dump_stack_lvl+0x189/0x250 [ 360.541725][T14035] ? __pfx____ratelimit+0x10/0x10 [ 360.541750][T14035] ? __pfx_dump_stack_lvl+0x10/0x10 [ 360.541772][T14035] ? __pfx__printk+0x10/0x10 [ 360.541786][T14035] ? kmalloc_reserve+0xbd/0x290 [ 360.541806][T14035] ? __lock_acquire+0xab9/0xd20 [ 360.541829][T14035] should_fail_ex+0x414/0x560 [ 360.541858][T14035] should_failslab+0xa8/0x100 [ 360.541876][T14035] kmem_cache_alloc_noprof+0x74/0x6e0 [ 360.541899][T14035] ? skb_clone+0x212/0x3a0 [ 360.541922][T14035] skb_clone+0x212/0x3a0 [ 360.541945][T14035] __netlink_deliver_tap+0x404/0x850 [ 360.541974][T14035] ? netlink_deliver_tap+0x2e/0x1b0 [ 360.541992][T14035] netlink_deliver_tap+0x19c/0x1b0 [ 360.542011][T14035] netlink_unicast+0x7fa/0x9e0 [ 360.542033][T14035] ? __pfx_netlink_unicast+0x10/0x10 [ 360.542050][T14035] ? netlink_sendmsg+0x642/0xb30 [ 360.542066][T14035] ? skb_put+0x11b/0x210 [ 360.542085][T14035] netlink_sendmsg+0x805/0xb30 [ 360.542111][T14035] ? __pfx_netlink_sendmsg+0x10/0x10 [ 360.542132][T14035] ? aa_sock_msg_perm+0xf1/0x1d0 [ 360.542157][T14035] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 360.542176][T14035] ? __pfx_netlink_sendmsg+0x10/0x10 [ 360.542203][T14035] __sock_sendmsg+0x21c/0x270 [ 360.542240][T14035] ____sys_sendmsg+0x505/0x830 [ 360.542274][T14035] ? __pfx_____sys_sendmsg+0x10/0x10 [ 360.542309][T14035] ? import_iovec+0x74/0xa0 [ 360.542334][T14035] ___sys_sendmsg+0x21f/0x2a0 [ 360.542363][T14035] ? __pfx____sys_sendmsg+0x10/0x10 [ 360.542442][T14035] ? __fget_files+0x2a/0x420 [ 360.542463][T14035] ? __fget_files+0x3a0/0x420 [ 360.542497][T14035] __x64_sys_sendmsg+0x19b/0x260 [ 360.542521][T14035] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 360.542548][T14035] ? __pfx_ksys_write+0x10/0x10 [ 360.542574][T14035] ? do_syscall_64+0xbe/0xfa0 [ 360.542593][T14035] do_syscall_64+0xfa/0xfa0 [ 360.542607][T14035] ? lockdep_hardirqs_on+0x9c/0x150 [ 360.542623][T14035] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 360.542639][T14035] ? clear_bhb_loop+0x60/0xb0 [ 360.542659][T14035] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 360.542674][T14035] RIP: 0033:0x7f8a6278f749 [ 360.542690][T14035] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 360.542704][T14035] RSP: 002b:00007f8a6369b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 360.542721][T14035] RAX: ffffffffffffffda RBX: 00007f8a629e5fa0 RCX: 00007f8a6278f749 [ 360.542733][T14035] RDX: 0000000000000040 RSI: 0000200000009b40 RDI: 0000000000000003 [ 360.542743][T14035] RBP: 00007f8a6369b090 R08: 0000000000000000 R09: 0000000000000000 [ 360.542753][T14035] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 360.542762][T14035] R13: 00007f8a629e6038 R14: 00007f8a629e5fa0 R15: 00007ffc9d6baf68 [ 360.542788][T14035] [ 360.995373][T13999] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 361.002217][T13999] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 361.024503][T13999] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 361.030628][T13999] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 361.042633][T13999] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 361.049016][T13999] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 361.058608][T13999] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 361.065179][T13999] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 361.158767][T14045] netlink: 'syz.0.2136': attribute type 4 has an invalid length. [ 361.228252][T14048] netlink: 'syz.0.2136': attribute type 4 has an invalid length. [ 361.579183][T14070] FAULT_INJECTION: forcing a failure. [ 361.579183][T14070] name failslab, interval 1, probability 0, space 0, times 0 [ 361.593426][T14070] CPU: 0 UID: 0 PID: 14070 Comm: syz.2.2145 Not tainted syzkaller #0 PREEMPT(full) [ 361.593460][T14070] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 361.593475][T14070] Call Trace: [ 361.593484][T14070] [ 361.593494][T14070] dump_stack_lvl+0x189/0x250 [ 361.593531][T14070] ? __pfx____ratelimit+0x10/0x10 [ 361.593566][T14070] ? __pfx_dump_stack_lvl+0x10/0x10 [ 361.593603][T14070] ? __pfx__printk+0x10/0x10 [ 361.593630][T14070] ? __pfx___might_resched+0x10/0x10 [ 361.593655][T14070] ? fs_reclaim_acquire+0x7d/0x100 [ 361.593682][T14070] should_fail_ex+0x414/0x560 [ 361.593722][T14070] should_failslab+0xa8/0x100 [ 361.593747][T14070] __kmalloc_cache_noprof+0x6f/0x6f0 [ 361.593781][T14070] ? nfnetlink_rcv+0xf97/0x2590 [ 361.593810][T14070] nfnetlink_rcv+0xf97/0x2590 [ 361.593878][T14070] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 361.593897][T14070] ? kasan_save_track+0x4f/0x80 [ 361.593990][T14070] ? netlink_deliver_tap+0x2e/0x1b0 [ 361.594038][T14070] netlink_unicast+0x82f/0x9e0 [ 361.594070][T14070] ? __pfx_netlink_unicast+0x10/0x10 [ 361.594095][T14070] ? netlink_sendmsg+0x642/0xb30 [ 361.594122][T14070] ? skb_put+0x11b/0x210 [ 361.594151][T14070] netlink_sendmsg+0x805/0xb30 [ 361.594188][T14070] ? __pfx_netlink_sendmsg+0x10/0x10 [ 361.594218][T14070] ? aa_sock_msg_perm+0xf1/0x1d0 [ 361.594272][T14070] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 361.594294][T14070] ? __pfx_netlink_sendmsg+0x10/0x10 [ 361.594326][T14070] __sock_sendmsg+0x21c/0x270 [ 361.594372][T14070] ____sys_sendmsg+0x505/0x830 [ 361.594407][T14070] ? __pfx_____sys_sendmsg+0x10/0x10 [ 361.594445][T14070] ? import_iovec+0x74/0xa0 [ 361.594479][T14070] ___sys_sendmsg+0x21f/0x2a0 [ 361.594509][T14070] ? __pfx____sys_sendmsg+0x10/0x10 [ 361.594585][T14070] ? __fget_files+0x2a/0x420 [ 361.594606][T14070] ? __fget_files+0x3a0/0x420 [ 361.594639][T14070] __x64_sys_sendmsg+0x19b/0x260 [ 361.594669][T14070] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 361.594707][T14070] ? __pfx_ksys_write+0x10/0x10 [ 361.594744][T14070] ? do_syscall_64+0xbe/0xfa0 [ 361.594770][T14070] do_syscall_64+0xfa/0xfa0 [ 361.594789][T14070] ? lockdep_hardirqs_on+0x9c/0x150 [ 361.594812][T14070] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 361.594834][T14070] ? clear_bhb_loop+0x60/0xb0 [ 361.594862][T14070] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 361.594883][T14070] RIP: 0033:0x7f166a18f749 [ 361.594904][T14070] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 361.594923][T14070] RSP: 002b:00007f166af8d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 361.594947][T14070] RAX: ffffffffffffffda RBX: 00007f166a3e5fa0 RCX: 00007f166a18f749 [ 361.594964][T14070] RDX: 0000000000000040 RSI: 0000200000009b40 RDI: 0000000000000003 [ 361.594978][T14070] RBP: 00007f166af8d090 R08: 0000000000000000 R09: 0000000000000000 [ 361.594992][T14070] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 361.595011][T14070] R13: 00007f166a3e6038 R14: 00007f166a3e5fa0 R15: 00007ffec39f1f58 [ 361.595049][T14070] [ 362.024636][T14076] lo speed is unknown, defaulting to 1000 [ 362.034484][T14076] virt_wifi0 speed is unknown, defaulting to 1000 [ 362.255968][T14084] __nla_validate_parse: 3 callbacks suppressed [ 362.255990][T14084] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2148'. [ 365.056809][T14130] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2162'. [ 365.099402][T14130] netlink: 92 bytes leftover after parsing attributes in process `syz.0.2162'. [ 365.122688][T14130] C: renamed from team_slave_0 (while UP) [ 365.143730][T14136] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2163'. [ 365.145460][T14130] netlink: 92 bytes leftover after parsing attributes in process `syz.0.2162'. [ 365.210047][T14135] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2160'. [ 365.243166][T14135] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2160'. [ 365.254690][T14135] hsr_slave_0: left promiscuous mode [ 365.290507][T14135] hsr_slave_1: left promiscuous mode [ 365.513869][T14159] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2169'. [ 365.541869][T14159] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2169'. [ 365.582320][T14161] netlink: 'syz.2.2170': attribute type 4 has an invalid length. [ 365.619030][T14161] netlink: 'syz.2.2170': attribute type 4 has an invalid length. [ 365.752258][T14177] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2172'. [ 365.774723][T14177] 8021q: adding VLAN 0 to HW filter on device ipvlan1 [ 365.801071][T14175] lo speed is unknown, defaulting to 1000 [ 365.823291][T14175] virt_wifi0 speed is unknown, defaulting to 1000 [ 365.838841][T14179] netlink: 'syz.2.2174': attribute type 1 has an invalid length. [ 366.632860][T14214] vlan2: entered promiscuous mode [ 366.638063][T14214] veth0: entered promiscuous mode [ 366.737000][T14220] netlink: 'syz.4.2187': attribute type 1 has an invalid length. [ 366.956216][T14233] xt_l2tp: unknown flags: 51 [ 367.038745][T14241] netlink: 'syz.1.2195': attribute type 2 has an invalid length. [ 367.060707][T14241] @;: entered promiscuous mode [ 368.054790][T14303] __nla_validate_parse: 6 callbacks suppressed [ 368.054811][T14303] netlink: 232 bytes leftover after parsing attributes in process `syz.3.2214'. [ 368.075651][T14299] tipc: Enabled bearer , priority 0 [ 368.086931][T14296] syzkaller0: entered promiscuous mode [ 368.093906][T14296] syzkaller0: entered allmulticast mode [ 368.165405][T14299] tipc: Resetting bearer [ 368.173590][T14303] netlink: 232 bytes leftover after parsing attributes in process `syz.3.2214'. [ 368.204969][T14304] lo speed is unknown, defaulting to 1000 [ 368.219582][T14295] lo speed is unknown, defaulting to 1000 [ 368.222297][T14304] virt_wifi0 speed is unknown, defaulting to 1000 [ 368.234259][T14292] tipc: Resetting bearer [ 368.265850][T14292] tipc: Disabling bearer [ 368.307014][T14295] virt_wifi0 speed is unknown, defaulting to 1000 [ 368.704150][T14327] lo speed is unknown, defaulting to 1000 [ 368.723474][T14327] virt_wifi0 speed is unknown, defaulting to 1000 [ 368.764813][T14341] lo speed is unknown, defaulting to 1000 [ 368.827373][T14341] virt_wifi0 speed is unknown, defaulting to 1000 [ 368.997041][T14345] netlink: 'syz.4.2222': attribute type 1 has an invalid length. [ 369.104862][T14351] ip6gre0: left promiscuous mode [ 369.116245][T14351] mac80211_hwsim hwsim3 wlan1: left allmulticast mode [ 369.147285][T14351] macsec2: left promiscuous mode [ 369.162026][T14351] macsec2: left allmulticast mode [ 369.180632][T14351] bond3: left promiscuous mode [ 369.192898][T14351] bond3: left allmulticast mode [ 369.203880][T14351] ip6tnl3: left promiscuous mode [ 369.245107][T14351] bond4: left promiscuous mode [ 369.263434][T14358] netlink: 'syz.0.2225': attribute type 1 has an invalid length. [ 369.274780][T14351] veth3: left promiscuous mode [ 369.280617][T14351] ip6gre1: left promiscuous mode [ 369.285808][T14351] ip6gre1: left allmulticast mode [ 369.294031][T14351] ip6gre2: left allmulticast mode [ 369.385312][T14362] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2224'. [ 369.410107][T14356] bond0: entered promiscuous mode [ 369.441944][T14356] bond_slave_0: entered promiscuous mode [ 369.448058][T14356] bond_slave_1: entered promiscuous mode [ 369.482794][T14356] batadv0: entered promiscuous mode [ 369.493676][T14356] bond0: left promiscuous mode [ 369.498650][T14356] bond_slave_0: left promiscuous mode [ 369.510448][T14356] bond_slave_1: left promiscuous mode [ 369.517174][T14356] batadv0: left promiscuous mode [ 369.546829][T14358] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 369.547342][T13587] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 369.581856][T14374] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2228'. [ 369.592513][T13587] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 369.618323][T13587] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 369.639357][T13587] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 369.652929][T14376] netlink: 'syz.2.2229': attribute type 1 has an invalid length. [ 369.797827][T14381] ip6gre1: entered promiscuous mode [ 369.830036][T14381] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2231'. [ 370.164205][T14399] lo speed is unknown, defaulting to 1000 [ 370.174392][T14399] virt_wifi0 speed is unknown, defaulting to 1000 [ 370.245976][T14407] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2240'. [ 370.307628][T14405] : entered promiscuous mode [ 370.502076][T14422] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2243'. [ 370.557363][T14424] lo speed is unknown, defaulting to 1000 [ 370.586824][T14424] virt_wifi0 speed is unknown, defaulting to 1000 [ 370.657977][T14429] netlink: 212356 bytes leftover after parsing attributes in process `syz.2.2247'. [ 370.670254][T14429] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2247'. [ 370.818925][T14439] netlink: 'syz.4.2246': attribute type 32 has an invalid length. [ 371.128377][T14443] netlink: ct family unspecified [ 371.135287][T14443] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 371.649607][T14466] veth0_to_team: entered promiscuous mode [ 371.666701][T14466] veth0_to_team: entered allmulticast mode [ 371.967966][T14476] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2259'. [ 372.007587][T14476] vlan2: entered promiscuous mode [ 372.013175][T14476] bridge0: entered promiscuous mode [ 372.036528][T14465] delete_channel: no stack [ 372.969334][T14521] lo speed is unknown, defaulting to 1000 [ 372.992119][T14521] virt_wifi0 speed is unknown, defaulting to 1000 [ 373.164861][T14533] x_tables: unsorted entry at hook 1 [ 373.183240][T14533] x_tables: unsorted entry at hook 1 [ 373.364050][T14545] IPVS: set_ctl: invalid protocol: 44 172.30.0.3:20000 [ 373.424825][T14545] lo speed is unknown, defaulting to 1000 [ 373.434080][T14545] virt_wifi0 speed is unknown, defaulting to 1000 [ 374.122276][T14569] __nla_validate_parse: 1 callbacks suppressed [ 374.122299][T14569] netlink: 6 bytes leftover after parsing attributes in process `syz.2.2286'. [ 374.209914][T14569] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 374.688812][T14594] gretap0: left allmulticast mode [ 374.694735][T14594] bridge0: port 3(gretap0) entered disabled state [ 374.722870][T14594] bond0: (slave batadv0): Releasing backup interface [ 374.732356][T14594] bridge_slave_0: left allmulticast mode [ 374.738247][T14594] bridge_slave_0: left promiscuous mode [ 374.759377][T14594] bridge0: port 1(bridge_slave_0) entered disabled state [ 374.803251][T14594] bridge_slave_1: left allmulticast mode [ 374.817915][T14594] bridge_slave_1: left promiscuous mode [ 374.862953][T14594] bridge0: port 2(bridge_slave_1) entered disabled state [ 375.060140][T14607] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2298'. [ 375.076410][T14609] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2299'. [ 375.099236][T14594] bond0: (slave bond_slave_0): Releasing backup interface [ 375.114911][T14594] bond0: (slave bond_slave_1): Releasing backup interface [ 375.128684][T14594] team0: Port device team_slave_0 removed [ 375.137482][T14594] team0: Port device team_slave_1 removed [ 375.145472][T14594] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 375.154710][T14594] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 375.166979][T14594] team0: Port device vlan0 removed [ 375.350451][T14615] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2300'. [ 375.388967][T14615] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2300'. [ 376.185519][T14665] [ 376.187917][T14665] ============================================ [ 376.194313][T14665] WARNING: possible recursive locking detected [ 376.200527][T14665] syzkaller #0 Not tainted [ 376.204975][T14665] -------------------------------------------- [ 376.211310][T14665] syz.3.2311/14665 is trying to acquire lock: [ 376.218392][T14665] ffff888078288d38 (&dev_instance_lock_key#20){+.+.}-{4:4}, at: __netdev_update_features+0xcb1/0x1be0 [ 376.229511][T14665] [ 376.229511][T14665] but task is already holding lock: [ 376.236980][T14665] ffff888078288d38 (&dev_instance_lock_key#20){+.+.}-{4:4}, at: dev_ethtool+0x716/0x19c0 [ 376.247191][T14665] and the lock comparison function returns 0: [ 376.253536][T14665] [ 376.253536][T14665] other info that might help us debug this: [ 376.261856][T14665] Possible unsafe locking scenario: [ 376.261856][T14665] [ 376.269407][T14665] CPU0 [ 376.273324][T14665] ---- [ 376.276613][T14665] lock(&dev_instance_lock_key#20); [ 376.281931][T14665] lock(&dev_instance_lock_key#20); [ 376.287536][T14665] [ 376.287536][T14665] *** DEADLOCK *** [ 376.287536][T14665] [ 376.295885][T14665] May be due to missing lock nesting notation [ 376.295885][T14665] [ 376.304409][T14665] 2 locks held by syz.3.2311/14665: [ 376.309700][T14665] #0: ffffffff8f2cc708 (rtnl_mutex){+.+.}-{4:4}, at: dev_ethtool+0x1d0/0x19c0 [ 376.319250][T14665] #1: ffff888078288d38 (&dev_instance_lock_key#20){+.+.}-{4:4}, at: dev_ethtool+0x716/0x19c0 [ 376.329826][T14665] [ 376.329826][T14665] stack backtrace: [ 376.335730][T14665] CPU: 1 UID: 0 PID: 14665 Comm: syz.3.2311 Not tainted syzkaller #0 PREEMPT(full) [ 376.335755][T14665] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 376.335767][T14665] Call Trace: [ 376.335776][T14665] [ 376.335785][T14665] dump_stack_lvl+0x189/0x250 [ 376.335815][T14665] ? __pfx_dump_stack_lvl+0x10/0x10 [ 376.335841][T14665] ? __pfx__printk+0x10/0x10 [ 376.335861][T14665] ? print_lock_name+0xde/0x100 [ 376.335879][T14665] print_deadlock_bug+0x28b/0x2a0 [ 376.335903][T14665] validate_chain+0x1a3f/0x2140 [ 376.335926][T14665] ? is_bpf_text_address+0x26/0x2b0 [ 376.335948][T14665] ? is_bpf_text_address+0x292/0x2b0 [ 376.335972][T14665] __lock_acquire+0xab9/0xd20 [ 376.335992][T14665] ? __netdev_update_features+0xcb1/0x1be0 [ 376.336015][T14665] lock_acquire+0x120/0x360 [ 376.336031][T14665] ? __netdev_update_features+0xcb1/0x1be0 [ 376.336061][T14665] ? stack_trace_save+0x9c/0xe0 [ 376.336089][T14665] __mutex_lock+0x187/0x1350 [ 376.336108][T14665] ? __netdev_update_features+0xcb1/0x1be0 [ 376.336132][T14665] ? kasan_save_track+0x4f/0x80 [ 376.336157][T14665] ? kasan_save_track+0x3e/0x80 [ 376.336182][T14665] ? __kasan_save_free_info+0x46/0x50 [ 376.336203][T14665] ? __kasan_slab_free+0x5c/0x80 [ 376.336229][T14665] ? kmem_cache_free+0x19b/0x690 [ 376.336255][T14665] ? netlink_broadcast_filtered+0xec7/0x1000 [ 376.336273][T14665] ? ethnl_multicast+0xb6/0x100 [ 376.336293][T14665] ? ethnl_default_notify+0x8e1/0xb70 [ 376.336315][T14665] ? ethnl_netdev_event+0xe2/0x160 [ 376.336336][T14665] ? netdev_features_change+0x85/0xc0 [ 376.336367][T14665] ? dev_ethtool+0x1541/0x19c0 [ 376.336388][T14665] ? dev_ioctl+0x392/0x1150 [ 376.336403][T14665] ? __netdev_update_features+0xcb1/0x1be0 [ 376.336427][T14665] ? __pfx___mutex_lock+0x10/0x10 [ 376.336446][T14665] ? bond_fix_features+0x191/0x1d0 [ 376.336475][T14665] __netdev_update_features+0xcb1/0x1be0 [ 376.336498][T14665] ? lockdep_hardirqs_on+0x9c/0x150 [ 376.336522][T14665] ? __pfx___netdev_update_features+0x10/0x10 [ 376.336543][T14665] ? cfg80211_netdev_notifier_call+0x1e5/0x1440 [ 376.336565][T14665] ? __wake_up_common_lock+0x190/0x1f0 [ 376.336592][T14665] ? __pfx_cfg80211_netdev_notifier_call+0x10/0x10 [ 376.336611][T14665] ? consume_skb+0xce/0xf0 [ 376.336629][T14665] ? netlink_broadcast_filtered+0xf55/0x1000 [ 376.336659][T14665] netdev_compute_master_upper_features+0x8eb/0xab0 [ 376.336692][T14665] ? __pfx_netdev_compute_master_upper_features+0x10/0x10 [ 376.336725][T14665] bond_netdev_event+0x748/0xea0 [ 376.336751][T14665] ? __pfx_bond_netdev_event+0x10/0x10 [ 376.336773][T14665] ? inetdev_event+0x464/0x15b0 [ 376.336793][T14665] ? igmp_netdev_event+0x7c/0x770 [ 376.336813][T14665] notifier_call_chain+0x1b6/0x3e0 [ 376.336838][T14665] netdev_features_change+0x85/0xc0 [ 376.336865][T14665] ? __pfx_netdev_features_change+0x10/0x10 [ 376.336893][T14665] ? security_capable+0x7e/0x2e0 [ 376.336920][T14665] dev_ethtool+0x1541/0x19c0 [ 376.336950][T14665] ? __pfx_dev_ethtool+0x10/0x10 [ 376.336980][T14665] ? dev_load+0x21/0x1f0 [ 376.336996][T14665] dev_ioctl+0x392/0x1150 [ 376.337015][T14665] sock_do_ioctl+0x22c/0x300 [ 376.337047][T14665] ? __pfx_sock_do_ioctl+0x10/0x10 [ 376.337096][T14665] sock_ioctl+0x576/0x790 [ 376.337120][T14665] ? __pfx_sock_ioctl+0x10/0x10 [ 376.337145][T14665] ? __fget_files+0x3a0/0x420 [ 376.337162][T14665] ? __fget_files+0x2a/0x420 [ 376.337179][T14665] ? bpf_lsm_file_ioctl+0x9/0x20 [ 376.337200][T14665] ? __pfx_sock_ioctl+0x10/0x10 [ 376.337222][T14665] __se_sys_ioctl+0xfc/0x170 [ 376.337245][T14665] do_syscall_64+0xfa/0xfa0 [ 376.337262][T14665] ? lockdep_hardirqs_on+0x9c/0x150 [ 376.337279][T14665] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 376.337297][T14665] ? clear_bhb_loop+0x60/0xb0 [ 376.337316][T14665] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 376.337333][T14665] RIP: 0033:0x7f15d818f749 [ 376.337350][T14665] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 376.337366][T14665] RSP: 002b:00007f15d903f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 376.337385][T14665] RAX: ffffffffffffffda RBX: 00007f15d83e5fa0 RCX: 00007f15d818f749 [ 376.337399][T14665] RDX: 0000200000000080 RSI: 0000000000008946 RDI: 0000000000000004 [ 376.337411][T14665] RBP: 00007f15d8213f91 R08: 0000000000000000 R09: 0000000000000000 [ 376.337422][T14665] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 376.337433][T14665] R13: 00007f15d83e6038 R14: 00007f15d83e5fa0 R15: 00007ffee2df2a58 [ 376.337467][T14665] [ 376.818640][T14669] netlink: 'syz.1.2308': attribute type 16 has an invalid length. [ 376.827055][T14669] netlink: 'syz.1.2308': attribute type 3 has an invalid length. [ 376.835060][T14669] netlink: 64066 bytes leftover after parsing attributes in process `syz.1.2308'. [ 376.848048][T14669] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2308'.