last executing test programs: 2.598543224s ago: executing program 2 (id=3611): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f00000005c0)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000080)={r1}, 0xa8) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000100001ff00000000000000000000000a2c000000050a01020000000000000000020000000900030073797a32000000000900010073797a300000000014000000020a031747d214"], 0x68}, 0x1, 0x0, 0x0, 0x4006000}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000100001000b000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f08000340000000045c0000000c0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00008028000180230001"], 0xe8}}, 0x8040) 2.448773266s ago: executing program 2 (id=3615): pipe(&(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="d4000000200000006910830000000000bfffffff000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x2, 0x3f7, &(0x7f000000cf3d)=""/195}, 0x48) writev(r0, &(0x7f0000000200)=[{0x0}, {&(0x7f00000006c0)="e6", 0xfdef}], 0x2) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000000)="729804819e25bf1576ffe5c12a5207113f19d58313aba5de68f29cba9eabb7ffc8ffa6ff5e57bb2a1a4db35012bba91acdbe6123e6d1b0e9b009f638c2262aa71fdb6fdca6f5afd31515336efa9d3ac3d1dcb773d177640fa9d940ae528c0de4820b43c5ca5aadd87316a4539842e59b2b62294946b288ccec1b315ad96484c9ce1069450e4b459926691d6e833aa0bc56251cb81bd60c84e5c38f6d84f5e0d7", 0xa0}, {&(0x7f0000000880)="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", 0xf61}], 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="720a00ff0000000071109800000000009500000000000000"], &(0x7f0000000480)='syzkaller\x00'}, 0x94) 2.445713081s ago: executing program 4 (id=3616): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$netlink(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_PROTOCOL(r1, 0x0, 0x20004000) sendto$packet(r0, 0x0, 0x0, 0x8d1, &(0x7f0000000200)={0x11, 0x3, 0x0, 0x1, 0x7, 0x6, @multicast}, 0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0x4c, 0x30, 0x9, 0x0, 0x0, {}, [{0x38, 0x1, [@m_bpf={0x34, 0x1, 0x0, 0x0, {{0x8}, {0xc, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x4c}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r3, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000001c00)="4490137c227c56ee66c372f3105eb186dd8062fad2d5b5bfb0ba068e74a8d026bd209da8ffa6a26e3b3f8075704a9d0ef9afda48e71255a747b6d03097385fb05cf8db24609f02d34e76992c9df9fe6888c6c9a4825c6223be6ac54536025af1dea54e527c68b0ff250261953f2da79a78104c2d9e7b16ed86b124945aa9ab7581ebd385fb61210c410d799168ffc4b64677af924affd442035db81e18c2d2462d0bb25fff9d3b1ce903597992b2a4d541611ce77f58dce7c9500118229e7cdf4ca7f6adca92c73d97ce54164c1942b25686866f6b53fe7e75cf6854284d501f8535bec8e0", 0xe5}, {&(0x7f0000000380)="9d14305f5b9176fd46a2d6cc0bf8b00ea77d12943b509e31c729441020bfc543d3aa7b29e7107a90c117dc452406d912306165e7e7628186000661", 0x3b}], 0x2}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000040)="f77d2b5dd5f7d74f", 0x8}, {&(0x7f0000000840)}], 0x2}}, {{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000001e00)="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", 0x6eb}, {0x0}], 0x2}}], 0x4, 0x2090) 1.649087189s ago: executing program 0 (id=3628): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000100001ff00000000000000000000000a2c000000050a01020000000000000000020000000900030073797a32000000000900010073797a300000000014000000020a031747d214"], 0x68}, 0x1, 0x0, 0x0, 0x4006000}, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @empty, 0x4}, 0x1c) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r1, 0x29, 0x43, &(0x7f0000000080)=0x9, 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b40)=ANY=[@ANYRESOCT=r0, @ANYBLOB="60d4490c7e4db4abc5493199e99b1d89d329fd6153fe212d3bc9bf439ddd4dcc0a34236618f7ddebd92a2024dda5a4309cf70db4cab5faacedfcec7bcf726a71a502105a0201dabe229a3b2a477835ed82ea7cd5c0a112517e9a21af3034f0b4a9fc13ffd7c3022a84339fd448f71d07592018f545f6cf5eb73f91", @ANYRESHEX=r2, @ANYRES8, @ANYBLOB="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", @ANYRES32=r2, @ANYRES64=0x0, @ANYRES32=0x0], 0x74}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0x14, &(0x7f0000006ffc)=0x204, 0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004cc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000080)='kfree\x00', r4}, 0x18) r6 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000640)={0xa, 0x4e1b, 0x108001, @ipv4={'\x00', '\xff\xff', @remote}, 0x1}, 0x1c) setsockopt$inet6_tcp_int(r6, 0x6, 0x9, &(0x7f0000000040)=0x2000000, 0x4) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r8, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r9, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001c00)=@newchain={0x1134, 0x64, 0x400, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, r9, {0x8, 0xffff}, {0x10, 0x3}, {0xfff2, 0xb}}, [@TCA_CHAIN={0x8, 0xb, 0x9}, @TCA_CHAIN={0x8, 0xb, 0x7}, @TCA_CHAIN={0x8, 0xb, 0xffff}, @TCA_CHAIN={0x8, 0xb, 0x8}, @filter_kind_options=@f_flow={{0x9}, {0x3a4, 0x2, [@TCA_FLOW_MASK={0x8, 0x6, 0x4}, @TCA_FLOW_ADDEND={0x8, 0x5, 0x4}, @TCA_FLOW_XOR={0x8, 0x7, 0x2}, @TCA_FLOW_BASECLASS={0x8, 0x3, {0x5, 0xfff1}}, @TCA_FLOW_DIVISOR={0x8, 0x8, 0xd01a}, @TCA_FLOW_ADDEND={0x8, 0x5, 0x3}, @TCA_FLOW_RSHIFT={0x8, 0x4, 0xa}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_EMATCHES={0x360, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x8}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x18e9}}, @TCA_EMATCH_TREE_LIST={0x38, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0x1, 0x3, 0x4}, {0x10001, 0x1, 0x8000, 0x283}}}, @TCF_EM_CMP={0x18, 0x3, 0x0, 0x0, {{0x4, 0x1, 0x200}, {0x2, 0xc4e0, 0xff4f, 0x5, 0x3, 0x2, 0x1}}}]}, @TCA_EMATCH_TREE_LIST={0xe4, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x8, 0x7, 0xfff8}, {{0x3, 0x1, 0x0, 0x1}, {0x2, 0x1, 0x0, 0x1}}}}, @TCF_EM_CONTAINER={0xcc, 0x2, 0x0, 0x0, {{0x3, 0x0, 0x7}, "73a0cdf66c800edef2c8e51ee7ef4fae51d436f3e838c66469b992f5ff625e23903d45a79d2150abe0c099edc2bb23bfbfd1612b09f4d655bb4384b6b19a1648442dd07c8595d6802c85955adad282aa2e76618c06b4bc96f9f3848df4f5b27ffb01b76ac7d40111b8d083d03d3627bd2ac1b1c8dfd8e65fa110248088bc228f4b8142d7a97ba9cea216c2d151695ca7375d05e782baebaac6165239d8e7269a11d6089a5df1ef7af098c2ecfaf9f20cc2614ef8220f4e37dd29ee51c3c6"}}]}, @TCA_EMATCH_TREE_LIST={0x210, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x10, 0x1, 0x0, 0x0, {{0x5, 0x0, 0x6}, "ed"}}, @TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0x4}, {0x4, 0x6, 0x1}}}, @TCF_EM_NBYTE={0x18, 0x1, 0x0, 0x0, {{0x9, 0x2, 0x7}, {0x5, 0x5, 0x2, "c2220e5715"}}}, @TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x9, 0x7, 0x1}, {{0x0, 0x1, 0x0, 0x1}, {0x3, 0x0, 0x1, 0x1}}}}, @TCF_EM_META={0xa4, 0x2, 0x0, 0x0, {{0x3, 0x4, 0x1}, [@TCA_EM_META_HDR={0xc, 0x1, {{0xa5e, 0x7, 0x1}, {0xc, 0xf4}}}, @TCA_EM_META_LVALUE={0x13, 0x2, [@TCF_META_TYPE_VAR="e0dd1a5a927b90", @TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_INT=0x8]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x1, 0x0, 0x1}, {0x6, 0x80}}}, @TCA_EM_META_LVALUE={0x3f, 0x2, [@TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_VAR="430d6d511b7f554ea6fa", @TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_VAR="d21ca9", @TCF_META_TYPE_VAR="a659cb864bb15b6e8abd", @TCF_META_TYPE_INT=0x1, @TCF_META_TYPE_VAR="2f79b9416734490a", @TCF_META_TYPE_VAR="42ac47dff9218633", @TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_INT=0x2]}, @TCA_EM_META_LVALUE={0x22, 0x2, [@TCF_META_TYPE_VAR="d9988be5c018a351f212", @TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_INT=0x5, @TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_INT=0x9, @TCF_META_TYPE_INT=0x8]}, @TCA_EM_META_LVALUE={0x5, 0x2, [@TCF_META_TYPE_VAR='*']}]}}, @TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0x8, 0x3, 0x5}, {0x4, 0x2, 0x29a5, 0x3}}}, @TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0xff3a, 0x3, 0x9}, {0x77, 0x9717, 0x622, 0x9}}}, @TCF_EM_CONTAINER={0xe4, 0x2, 0x0, 0x0, {{0x3, 0x0, 0x6}, "5a0994630694b2fe6258cd731b0a830924bf8af3677be8b8d0967aeb3f5ddc00f9ddae85cb0fb6ac898cfec96919bd29da4ac04d83a8c180cc2eadaf7f91e836268097f6e96f546e5c659afeabad35f12bbf6c5ac355e33fbb3daadb8bf70a4f76d5b5e69a19548b17512396dfb51ead9f585184f6be7129bd473d144cc6cef66f283da731fb072ea7f73041a213e515c3ef7425b67f155a2c812f69337ccd7b4f2a075e9c50584fc4f262bd183497c6223f90881a993b1935fdaf9fe88b2dc2844b6203103dfccf797fc41fa7917b05692c944484a5a5"}}]}, @TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x1ff, 0x7, 0x6}, {{0x4, 0x0, 0x0, 0x1}, {0x4, 0x1, 0x1, 0x1}}}}]}]}]}}, @TCA_CHAIN={0x8, 0xb, 0x4}, @TCA_CHAIN={0x8, 0xb, 0x800}, @filter_kind_options=@f_basic={{0xa}, {0xd1c, 0x2, [@TCA_BASIC_EMATCHES={0x1dc, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xe100}}, @TCA_EMATCH_TREE_LIST={0x58, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0x0, 0x8, 0x1640}, {0x3, 0x6, 0x7}}}, @TCF_EM_CONTAINER={0x28, 0x2, 0x0, 0x0, {{0x6, 0x0, 0x7}, "58489ef5ef332fd40cf09e8beea3d84c3b1814513289dbd4049c71d6"}}, @TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x8, 0x3, 0x1}, {0x9, 0x401, 0x9, 0xff}}}]}, @TCA_EMATCH_TREE_LIST={0x168, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0xffff, 0x1, 0x1ff}, {0x9, 0xc59, 0x8, 0x1, 0x2, 0x1, 0x1}}}, @TCF_EM_CONTAINER={0xfc, 0x2, 0x0, 0x0, {{0xfffd, 0x0, 0x4}, "5c90991958cd09b24a627ea38ab2190fad3a8c30388d9b2364b4b0d7fe22c1e2c45bf8df62ce3aa63d91221f089835cb75199c5202be8773e14630ca1e90881407d95440c5dc7799d41a64d35b3ce5b4c914391cc846a87ae145ab3ef52f1ce58abd7338c608509fe8809f74bb1419d3a9fff6922dfd858f0888bbec5d13356aa3c185ec936a9848f1fa05924cd98622db9eb4527a4f5874ad9ad13b454fff1c43a88341882b928b3c5a82a6841ed0cdc4a796e211eea8eb3971e3f347b85239eeb6ddbb94b4220c4aa586b4e360ea905e24a77039a77860b60dfd9f8bfbdcdd2ff573f75464e7241feee7dbd0f79d"}}, @TCF_EM_CONTAINER={0x50, 0x1, 0x0, 0x0, {{0x3, 0x0, 0x5}, "4ca63c88a08e9ad6881c0b76e556033a2c2d7793e9ac64beb01a92074e1768ae9c4090bb754cd945c994e96cc52a86518f856ad284f5fe9ae13db348504c6a037bad45"}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x7}}]}, @TCA_BASIC_ACT={0x788, 0x3, [@m_ctinfo={0x140, 0x10, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x3e}, @TCA_CTINFO_ACT={0x18, 0x3, {0x8, 0x7, 0x10000000, 0xfff, 0x9}}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x8be}]}, {0xea, 0x6, "63040ac149b08f2a6758802b879d50af1f3764be2eebf5d9ebe5cccfc574e1ffde8107dddb1b0e7dd392d2a6f5123bf1f5d0e5e7abe81ea92225b975b94f4276b9227c580b034a5b1c5c052b9e4bad8d2a6428212b4c9af1d643693f7744ff9a4ef53994b4a3e227692e0f52710afb2067e698edf20d0d8187d3c5df6dca42f27fa27df1a517d26ff56d513081bca5907d3fdf0b0570c6a51489b21cedf098f33d40a1b003a527077a1371452eadc5c57d09a625a42cb81539c7775fa715deb22a5c77181ae974dc29c58bcbc2adf5cf7cc0f009795fdb2eea234e9eae4fcd25c284b9ab088a"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3251d8486bb74f92, 0x2}}}}, @m_skbmod={0x1b4, 0x1, 0x0, 0x0, {{0xb}, {0x90, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x1, 0x0, 0x6, 0x9, 0x40}, 0x6}}, @TCA_SKBMOD_DMAC={0xa, 0x3, @random="a6edb0f6fcab"}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x6}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0xde, 0xee9, 0x0, 0xfc, 0xfffffffa}, 0xd}}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x5, 0x401, 0x7, 0x7fff, 0xff}, 0x7}}, @TCA_SKBMOD_SMAC={0xa}]}, {0xfa, 0x6, "136465a7f9f0116cb99247b43f034132453e5cb5ab500bdfa2f061c57ea824f7bcccd9e32b5b91100d7c665653a4a4c2d48f13c835a05cab2c573ea106240d95ad9e435f0d7388026ca9c8b31449f252aa28b963a3fe78b9674e1439a3aba23c3fe61f9f790b914294c056b0fa7a5c5adb81683afba6c6077af3810ddea04827dc2d55107be9720801ad1caa317e24a6e3e819d354f43a3d2ff55c59d1ce8278780d5d00213e6799facac4a195d03bdd2197e3bfbff6ee267a13259f535fba2542c4d9abe51db963b31a7940dda4596841c8765c7c19dd889a02b48d5641b6e71e5d77a480082bd6a77f26e0f10f32ce001ce8790d04"}, {0xc}, {0xc, 0x8, {0x1}}}}, @m_xt={0x1e0, 0x17, 0x0, 0x0, {{0x7}, {0x14c, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'nat\x00'}, @TCA_IPT_TARG={0x100, 0x6, {0x200, 'raw\x00', 0xf, 0xb, "1cf9b92d74f07d046028de9c4ddd5ae3c80e9f2007f2ccf125d2f092a9924ef56c2982bac909cfcf425529d5318068fead7fd567c70ba8cd95498752329d3ab58b28657fa87930b70821684bc026fb0c39359b9f1af0d0c51dd11038244a5f77ee46b802da01f245bc9ef5b8ca735f69e99c515325aee7255e0eed12457f6e53fd63efd252884d29cf486b16ae7ebad42abdf4bb24e33d9d16584a966a4a01dd17d87f40307f122ef4a39f3cf1c8db5a7a0738b293faadcfa815f834519884ccb577b19e29228b2f48fc19b0f8c161d91f065b23f917"}}, @TCA_IPT_TABLE={0x24, 0x1, 'security\x00'}]}, {0x6f, 0x6, "447050a8fd585ace7300a9de1de7832572d24c623e99acc8f5c83a3b498e08e98edc774dc3c625a0bbf7f443752ebf6fc55450781f5ca405c778ff422f9c8905b3856d9ac6e2363faa24f0478df8ad5bc7f926bf7a1f4e35ccc59245e6a6d2779133a1eed429265994ce98"}, {0xc}, {0xc, 0x8, {0x2}}}}, @m_mirred={0x7c, 0x18, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x3, 0x3, 0x1, 0x7f, 0x3ff}, 0x4, r9}}]}, {0x2d, 0x6, "495266222ee1cf324d22ac29fd7fb0c0f1facf0d10aef3fe16391a9cf155d3360de14b25372294c31e"}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}, @m_bpf={0x138, 0x7, 0x0, 0x0, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x4b1, 0x1, 0x20000000, 0x8, 0x5}}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}]}, {0xd8, 0x6, "4364bf7e8137769002f84aad506f1086135e5f2b8cc0a28e36021a72fde29011d068d23b0b4f74b029387d0f30e1699c449c616cfa62a7eb6c0a89dd6edd5a83eaf3a19be212e3aab742831e0d51bb9133d966458472cb6a37e1110d053cc6ce111300c1b83e118a96c18596a2fee378153e5a641b8f0f0518e6ac4392b60c497a50a55fa71659ddfb22f3726d6a377d8cc4a75b8436b094914dd1137ef38b732d945082266fd98d244a36e5002e9302db76b72d1f15a1c8b772d4305210b13c9750ff3d7d199af83ef8d409f9bbd0a40960010b"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_ctinfo={0xfc, 0x17, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0x7, 0x9, 0x8, 0x9, 0x6}}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x5}]}, {0xaf, 0x6, "1d4694fe7a19b52d7e191683ed3fd6d131abefd35d6d56bed917f80c95872c7482f52139d01b2354832dfa7c27428ab63b0a044c111c129aaceb7d6ee82387e9ca3137cc840fd5076c0d995a515e119677b75e13a4719415c0c5117869eec9b1d2445d75ed8bf095cb98220a89eaad0846492e7cf58fa2d638903c5718621ecd0546e4785701a01668ff58ff7dc976dff662ee708ebdda338bcf813e9f017f8638cfa987a42152ff39afbc"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}, @TCA_BASIC_ACT={0x34c, 0x3, [@m_pedit={0x1d4, 0x1f, 0x0, 0x0, {{0xa}, {0x138, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x134, 0x5, 0x0, 0x1, [{0x54, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x34, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x7}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x54, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}]}, {0x2c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}]}]}]}, {0x73, 0x6, "eb471ebc4a6d54b58135d0c2e6e79ad2f1c6ee789d78fdf28cea282af21898fc8c3d2000700d00ae6af4ae717f2fc062ac6c2ee03235744d497a922d15ab10f7fa11d8d366bf781f0376b0ec781332b3073022389bb74a9dceae9d8d49e5da52c623869f1a6f0aac055b64aa737ed4"}, {0xc}, {0xc, 0x8, {0x3, 0x1}}}}, @m_gact={0x174, 0x11, 0x0, 0x0, {{0x9}, {0x58, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x670b10d2, 0xc, 0x4, 0x2, 0x1}}, @TCA_GACT_PARMS={0x18, 0x2, {0x7fffffff, 0xffffffff, 0x3, 0x2, 0x100}}, @TCA_GACT_PARMS={0x18, 0x2, {0x3, 0x80, 0x0, 0x10, 0x1}}, @TCA_GACT_PROB={0xc, 0x3, {0x2, 0xed5, 0xffffffffffffffff}}]}, {0xf1, 0x6, "fb9662587b2c0fe44926665e82a0acdf272194bd4431d83308af12535da9c97fdf4c0c699a54fcda9e8aeff60832d0f665435672114b2b76d9b40ace2d5b813169779d0544ff5ad0bf4d93c274c7aa4dffa04ec0492df7c07ce7e8eb6ac16658122030a3c49c3999fa80e530feda1bde0aa322d11aff4b07e65a833064f548e5734c680b3bc50ba4a4f97471d83bd84020880df0a97389900f156efa4a855dd7da648a84242ae25ec860431bd8367981426f31af78b948f9bfe086c0ade2efbeb943a46c3d00fd17f7aa020a1c6d123e4dc09142f098577cbe44f5cf077862dc008613a4f0d9113f4e53dfffab"}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}]}, @TCA_BASIC_POLICE={0xc, 0x4, [@TCA_POLICE_RESULT={0x8, 0x5, 0x7}]}, @TCA_BASIC_CLASSID={0x8, 0x1, {0xffff, 0xffff}}, @TCA_BASIC_POLICE={0x4c, 0x4, [@TCA_POLICE_TBF={0x3c, 0x1, {0x5733, 0x0, 0x3, 0x2, 0xd, {0xd, 0x2, 0x7ff, 0x7, 0x93d, 0x4d}, {0xc2, 0x0, 0xf7, 0x8, 0x0, 0x800}, 0x7, 0xd, 0x1}}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x6}]}, @TCA_BASIC_CLASSID={0x8, 0x1, {0xfff2, 0x5}}]}}, @TCA_CHAIN={0x8, 0xb, 0x81}]}, 0x1134}}, 0x4000080) bind$packet(r3, &(0x7f0000000040)={0x11, 0x0, r9, 0x1, 0x0, 0x6, @remote}, 0x14) sendto$inet6(r3, &(0x7f0000000800)="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", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0) r10 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r10, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x40000000000012d, 0x2, 0x0) setsockopt$inet_int(r10, 0x0, 0x7, &(0x7f0000000180)=0x6, 0x4) setsockopt$IPT_SO_SET_REPLACE(r10, 0x0, 0x40, &(0x7f0000000300)=@raw={'raw\x00', 0x8, 0x3, 0x248, 0xd8, 0x43, 0xa0, 0x0, 0x98, 0x1b0, 0x178, 0x178, 0x1b0, 0x178, 0x49, 0x0, {[{{@ip={@local, @local, 0x0, 0x0, 'veth1_macvtap\x00', 'bridge_slave_0\x00', {0xff}, {}, 0x11, 0x2, 0x39}, 0x12a, 0x70, 0xd8, 0x0, {0x0, 0x7a010000}}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x7fff, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}, {{@ip={@multicast1, @empty, 0xff000000, 0xff, 'pim6reg0\x00', 'syzkaller0\x00', {0xff}, {}, 0x0, 0x0, 0x68}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x1b, 0x800, 0xd, 0x7, 'syz0\x00', 'syz1\x00', {0x1}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2a8) setsockopt$MRT6_INIT(0xffffffffffffffff, 0x29, 0xc8, &(0x7f0000000000), 0x4) bind$inet(r10, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x32, &(0x7f0000000680)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c2000040ad004600002400000000512f010000000000ffffffff4404090100004e20000c907801000000", @ANYRES16=r5], 0x0) 1.588278192s ago: executing program 2 (id=3630): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000020000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000009584917ff844e1363ef4386b242ff34b50f3ff2986a04762d34308c31bbfc46b77bcae4038cdf9e8574d7fffac68a9ea3c8d1bdba9a4424e0c8abd9b2925795f9b78"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18020000ffffffff00000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000004000000850000007d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f00000001c0)={0xfffe, 0x22, 0x401, 0x1}, 0x8) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r0}, 0x18) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) (async) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c0002800500010000"], 0x64}}, 0x0) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) (async) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000600)=@newtfilter={0x68, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xfff3, 0xc}, {}, {0xa, 0x1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x38, 0x2, [@TCA_CGROUP_EMATCHES={0x34, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}, @TCA_EMATCH_TREE_LIST={0x28, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x24, 0x1, 0x0, 0x0, {{0xe38, 0x9, 0x4}, [@TCA_EM_IPT_HOOK={0x8}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_DATA={0x4}]}}]}]}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x84}, 0x40010) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000a80)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x65, '\x00', 0x0, 0x2}, 0x94) (async) close(0x3) (async) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r7, 0x0, r6, 0x0, 0xffffffffffff8000, 0x0) close(r8) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=ANY=[@ANYBLOB="38000000180001002bbd700000000000020000040000fd090011000006001500020000001400168010000880"], 0x38}}, 0x0) (async) sendmmsg(r9, &(0x7f00000002c0), 0x40000000000009f, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50) 1.438896231s ago: executing program 4 (id=3631): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000200b703000000000000850000002d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000300)='tlb_flush\x00', r1}, 0x10) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000002ec0), 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000000)={r2, 0x60, &(0x7f0000001100)}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r4 = gettid() ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000800)=0x0) r6 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000280)={0x0, 0x0, 0x0}, &(0x7f00000013c0)=0xc) sendmmsg$unix(r7, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@cred={{0x1c, 0x1, 0x2, {r8, r9, r10}}}, @rights={{0x14, 0x1, 0x1, [r7]}}], 0x38, 0x40044}}], 0x1, 0x4) r11 = getpid() getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000840)={{{@in=@remote, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}}}, &(0x7f0000000940)=0xe8) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000980)={0x0, 0x0, 0x0}, &(0x7f0000000a40)=0xc) r14 = gettid() r15 = getuid() r16 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r16, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r17 = socket$kcm(0x2, 0xa, 0x2) getsockopt$sock_cred(r17, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0, 0x0}, &(0x7f0000000080)=0xc) ioctl$TUNSETGROUP(r16, 0x400454ce, r18) sendmmsg$unix(r3, &(0x7f0000000b00)=[{{&(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000440)=[{&(0x7f0000000140)="6b3346092d2939c2dc97f0c5ccad885afcd339eef2d735def14e5a13f022213c5ad38dcebe17cbfe3e69dd65758d938ea55fa832bf05f31632638c395d2ad7e01e047886af3d8dc65e799cb81538471564f1a0fe0ce3457e85d596ec188da5a78ed0acc76b012731a6c30884b4eee2343308ecd6c2f92d8c53e158926af50e87043c89e973cd31d70765c57b0e933b06ae4c293551f2d82a1dc1f9b5a68e0d4c451667f8d1b9ee8ab2e4fec6f45e8c025f19435fb2cc2041a9d5cb", 0xbb}, {&(0x7f0000000340)="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", 0xfe}, {&(0x7f00000002c0)="14c69939fd8f1e71d230defc8a155c", 0xf}], 0x3}}, {{&(0x7f0000000580)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f00000007c0)=[{&(0x7f0000000600)="ab136021a12693d06c85aa4af5fb99715c6b690cd86ad4bf4929b31481daa98ab7405a3562fa627d0dc9e9512c68d8c02db27b3b99fe0775cc8c4d60e4cb042765689229c5d252f408d04a46d9683bea441bc6b174e25213927e013c2721a6a0d100a2f6c6571b3c2cf07edbaa9f21a3d010fcb74004ba7eb834f3bff3da484427783204f26c781eac2f64fc706ce018dffe7e50fef2cfdcb472863c4882d2b116d40da2e3df3601d6f2b815878b08fbb4c4d04e16780c11f0e238b72f21ffde6b3c4233605b7f3a8e0a73bf11e868a0a787cf36060cd7302709854e0a435ae8ada29c2d8a", 0xe5}, {&(0x7f0000000700)="4dfbf7421db270fcf6bdabc4b38871677f23e450984b13f397ca3342a7c2404c21b251ceeb14c461d8843d7de29adc395e7ad2ef605cf36b2a4bf61bf0d731c91ed62b132dc53a5b57d782040b2d21b37bbaedf1e1667d87c1af9e14d3775de835f4b0804281b59bafc3a116677726c79baec4b0a259f780d78541e2d48f3599b4e6", 0x82}, {&(0x7f0000000480)="bff7b68a650a8d9fa6f0fc87b3bd057b12", 0x11}], 0x3, &(0x7f0000000a80)=[@cred={{0x1c, 0x1, 0x2, {r4, r5, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {r6, r9, 0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {r11, r12, r13}}}, @cred={{0x1c, 0x1, 0x2, {r14, r15, r18}}}], 0x80, 0x40040}}], 0x2, 0x8040) 1.3404898s ago: executing program 3 (id=3632): r0 = socket(0x1e, 0x4, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, &(0x7f0000000480), 0x4) (async) recvmmsg(r0, &(0x7f0000002500)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000001980)=""/96, 0x60}], 0x1, 0x0, 0x18}, 0x9}, {{0x0, 0x0, &(0x7f00000022c0)=[{&(0x7f0000002280)=""/58, 0x3a}], 0x1, &(0x7f0000002300)=""/12, 0xc}, 0x90}], 0x2, 0x40002122, 0x0) (async) sendmsg$tipc(r0, &(0x7f0000000200)={&(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x3, {0x1, 0x1, 0x2}}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000500)="e8", 0x1}], 0x1}, 0x4800) (async) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)=ANY=[@ANYRESDEC=r0], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000001b00)={0x1, 0x10, &(0x7f0000001bc0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b01b80000000000b7080000959700007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 1.340045976s ago: executing program 2 (id=3633): r0 = socket(0x2, 0xa, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000001c0)={0x2, &(0x7f0000000140)=[{0x87}, {0x6}]}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x2004c890}, 0x0) r4 = socket$inet(0xa, 0x801, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r4, 0x8916, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) r5 = socket$netlink(0x10, 0x3, 0xf) r6 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r6, &(0x7f0000000a40)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r6, 0x10e, 0x4, &(0x7f00000003c0)=0x6, 0xdc) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14}}}}]}, 0x48}}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="160000000108010100000000000040a33cda00"], 0x14}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(r8, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)=ANY=[], 0x38}}, 0x0) socket$inet6_icmp(0xa, 0x2, 0x3a) write$rfkill(r2, &(0x7f00000002c0)={0x20000000, 0x8, 0x3, 0x3, 0xfd}, 0x8) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x74, 0x30, 0xb, 0x5, 0xffffffff, {}, [{0x60, 0x1, [@m_ct={0x5c, 0x1, 0x0, 0x0, {{0x7}, {0x34, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x80000001, 0x0, 0x0, 0x0, 0x400}}, @TCA_CT_ACTION={0x6, 0x3, 0x19}, @TCA_CT_NAT_PORT_MAX={0x6, 0xe, 0x4e22}, @TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e24}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x8890}, 0x40) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[], 0x150}}, 0x0) 1.268058978s ago: executing program 3 (id=3635): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x61, 0x10, 0x28}, [@ldst={0x4, 0x2, 0x6, 0x0, 0x0, 0x0, 0x10}], {0x95, 0x0, 0xc00}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x48) 1.143523019s ago: executing program 4 (id=3637): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1e, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f66f63bb850000004300000095"], 0x0, 0x0, 0xffffffffffffff8e, 0x0, 0x40f00, 0xae, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0)={0x0, r1}, 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x7, 0x4, 0x18, 0xc7d2, 0x10000, 0xffffffffffffffff, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x8000000, 0x100, 0x0, @void, @value, @value=r2}, 0x50) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet_sctp_SCTP_EVENTS(r3, 0x84, 0xb, 0x0, 0x0) r4 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r4, &(0x7f0000000400)={0x18, 0x0, {0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r4, 0x80047437, &(0x7f0000000080)) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x6, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000010000000000000000018200000", @ANYRES32=r5, @ANYBLOB="0000000000000000c30000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x2, 0xd1, &(0x7f0000000000)=""/209, 0x0, 0x43}, 0x94) recvfrom(r4, 0x0, 0x0, 0x141, 0x0, 0x0) r6 = socket(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f0000000000), 0x4000000000001f2, 0x0) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_GET(r6, &(0x7f0000000500)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000004c0)={&(0x7f00000003c0)={0x14, r7, 0x200, 0x70bd28, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20008014}, 0x40) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f00000005c0)=ANY=[@ANYBLOB="9feb01001800000000000000280000002800000007000000050000000100000f0300000002000000020000000f000000fa050000000000000f010000007100615f303061000000"], &(0x7f0000000680)=""/134, 0x47, 0x86, 0x1, 0x6}, 0x28) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r0}, 0x8) 1.130644214s ago: executing program 3 (id=3639): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000004c0)={0x50, 0x2, 0x6, 0x3, 0x0, 0x0, {0x5, 0x0, 0x7}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0, 0x0, 0x44}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x50}}, 0x24040054) 1.0465992s ago: executing program 4 (id=3641): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$netlink(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_PROTOCOL(r1, 0x0, 0x20004000) sendto$packet(r0, 0x0, 0x0, 0x8d1, &(0x7f0000000200)={0x11, 0x3, 0x0, 0x1, 0x7, 0x6, @multicast}, 0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0x4c, 0x30, 0x9, 0x0, 0x0, {}, [{0x38, 0x1, [@m_bpf={0x34, 0x1, 0x0, 0x0, {{0x8}, {0xc, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x4c}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r3, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000001c00)="4490137c227c56ee66c372f3105eb186dd8062fad2d5b5bfb0ba068e74a8d026bd209da8ffa6a26e3b3f8075704a9d0ef9afda48e71255a747b6d03097385fb05cf8db24609f02d34e76992c9df9fe6888c6c9a4825c6223be6ac54536025af1dea54e527c68b0ff250261953f2da79a78104c2d9e7b16ed86b124945aa9ab7581ebd385fb61210c410d799168ffc4b64677af924affd442035db81e18c2d2462d0bb25fff9d3b1ce903597992b2a4d541611ce77f58dce7c9500118229e7cdf4ca7f6adca92c73d97ce54164c1942b25686866f6b53fe7e75cf6854284d501f8535bec8e0", 0xe5}, {&(0x7f0000000380)="9d14305f5b9176fd46a2d6cc0bf8b00ea77d12943b509e31c729441020bfc543d3aa7b29e7107a90c117dc452406d912306165e7e7628186000661", 0x3b}], 0x2}}, {{0x0, 0x0, &(0x7f00000016c0)}}, {{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000040)="f77d2b5dd5f7d74f", 0x8}, {&(0x7f0000000840)}], 0x2}}, {{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000001e00)="25c213aa8d42eee15730162aaa001c358da48bb56c5bf209afa1566acdeb8ad8e7377645654ab9cc8386d8c161dc4443a03a0320d6eda1c1e04bc8caa2227005cc85de47280935066ca4d5d6312f23f20f27ab39606ac5c26e9df0f27ae942d5a00d590abcce0f973e294201ba3b0ef165dee2b9def174b1399cc0390efe25dc8ff971b4d24a7f0f87376835a2ef64c4ce329b74922c4676c19f2592878597b7781b91f2f6be79bfb7791fdf17103c2385dfaf818017fa3f3d1d645c97a38b4b9caed0782538aa79ef4bdfd8dc202107427c94cb565cf5d4954a7f88fe9db111ee5915ff522bfc9cba00542911d3764d07bd352eebf213877947b701da70795b5b9b089a45937e8a58572eb6d320c64bd7e0bc3272b5855e3b4e7361bcedab1a7f11b77c96020a28df17717d10ce4c135cae3467d8a2a3082cd2d9f63968cd0448f209e6f0daa863f4d90dc00b83155358def7bfccc260d19198f122d45a8cba5da3cf0d818771f12f981b50df3608fb3cf7846b1919f7335d8bc6670d29ae1a6393ad7a6af4cbdeceafdf63acc3d46fa36c0413556f93d3b09e78fa08f2a6cb979d5776a9fea48cca83f9af6122082fc191da768d8a4dd3a1e140a411e27514e9dff8ffd8c2327e0783e5bbec9c93c2b3039c9d5d33bd41c389bea1487c2d778b723bc8b9065777bbc3b384bcae37c3d5630fddfb4a6abd21c22eed26c6a9fa1661a9a89c322226232afb94a9ee8293f257b06d6ff96ad48c1dbfdb379cb87f0b3ceec23fae64637e6d13e1f566194dddf0447664644c2157218bb493b0163a9300474e3f652b63dff691cecd5d5f3c2f507cf46917c5e03f916e22d1289d3a156b898502baa3b701a7c39c22f090195ee9593b69749021938603e93c690ef032b33ce9b5d2e57bba364d2844516c4e5566b483670bb5ab2a977a81851dc9a1f582b32c1c8b7500788675aa2a2be4b5f342d6b7e16ec1122abb757398a3f8a93d1a9b96449d228bfde4e2fadf20d4dbf2cc99d6f14c736b1bc8bcf4b9117822bc24b76ee7dd4244782c5d2cae3640fcaa26e6cdf5ff7d1816e0563b0a5466b0de6756069c740a223641a245fe63e92fdac6e229bf96725f4487869238343a1e41c3cfd6a51a73591f6cf59cfc58a4fafb9f07441f3483faadfef5127fa67708a7f3f096a261000622ab4b9d8709fe1df7c82e334052eda5aa96f86b3f47b9bad837eac288e7a21e386d4742439774751bd29efb3a8719de0675098089cd0a0f2b1665ef3d739c6f38050314b7887c6b9f671a148c59da114d932c87901156b5405e4da45e106fa985375786059b70217fed4280ef7c5c079969a84904b6e64259c250583e5260f0ab450b55aaa19f35a0c185b4af3bd18017c34bef238d3a376fa04603cabc2b421bfa2c68b88e811c8fc0380ddd7bb0f3e2f126c7533779d899019c90cc998c489c1090b75e12832741b8dde390ea48ac0376e5b4287377d30fd2c5bbebf21579e22a42732fcbf6ed22de602c09635b37e2de0d3e192ad02f6d3668c14b76ac3fbe6183b2c1b6694d6cb7d1ebe00c1e22c9509972633104147fa071cb66627910cfa52ba15ac1daab1189a45abbf2bb2e3bf7497fdefb1780b10995dea99feb984c1a57fee6a31be7006f8cca548a94f391c3b996c4cec3106be6b55a7ab8bcba08de62fae4f04e8505bc53b6bc24f0ae3bf35a29afa2d5868c0872443b92345eae5c06cb3995d0442cb3feb9cccf73f376af2f47bfb891d2e8ddaa3a8794b68bb664eb8f4190db8f9e2323ae0e806855d9957cb2858130769e43ed5599537b2879589b50f338ed6c1a70b97dfe8dacb6031283285b57bcc042dc4f2181b3764690e571c4d4fc4f699fa8a9b6075f5d30429f1ffc85a8eeb312d94c48094ba7d463a13f9eec59267b5654045ec1c98ec320149d8d06276748b4c2bd6d60eb2e55636b9597d54d61dedb62ca3061d8c2be98553863d695e01c6ee15f4a742f4bdb9b319445d782f6131fb94eb4122d9a9896422cd6a55dabc2daf0062e2c5491b69edd6041a0c3ebbad99a19f5ad675d6650004aa1419daa26bcf07edb9e5e42281b83359dc12318f1582b03adcc55713ad3b7dc909843a4fb5a91a33c2c683fabf979c3e7cf3c24303903f1379462a6041ee3ec7ca097451beeecc782be7d29ed8d311c814df6a2b064e1c4dcd1f55a149222a2a007d97b462f6bc8f8d05e7e58fc0f672ec9fa8c5c81c791fe5d52338d0adcd595520f34be09e6ab747333a1792b6e07d78b06c47e744ae72ac3ba3f8ac58a6993d56532c07df3e4d1f74d112ad3b0ccfca0894ea80092a64e57a99732cc4920bd0b4c2070b1a11db6237652a4e9dbc8672fcd8202facf0e69add0662ebaa970ad6fa8b2634a887a992abf6c58f91af4ed8d0fab187aabdbe63b4a765a06374fc473a4d86a5b4a65805826782d0c7ca2a5631c49bcb0614b3ace5a8c7e2064021499d8a3cafbed09ad4db7edbd552ab6", 0x6eb}, {0x0}], 0x2}}], 0x4, 0x2090) 1.045624669s ago: executing program 3 (id=3642): unshare(0x2020000) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x891c, &(0x7f0000000540)={'batadv_slave_1\x00', {0x2, 0xfffe, @empty}}) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newtaction={0x6c, 0x30, 0x1, 0x0, 0x0, {}, [{0x58, 0x1, [@m_vlan={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x6}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x5, 0x7, 0x20000000, 0x1, 0x5}, 0x3}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) 954.037121ms ago: executing program 1 (id=3643): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wg2\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x4) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f00000001c0)={@multicast2, @initdev, 0x0}, &(0x7f0000000200)=0xc) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000002c0)={'syztnl0\x00', &(0x7f0000000240)={'ip6gre0\x00', 0x0, 0x2f, 0x2, 0x4, 0x10000, 0x1e, @private0={0xfc, 0x0, '\x00', 0x1}, @private0={0xfc, 0x0, '\x00', 0x1}, 0x40, 0x20, 0x3, 0x8}}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000300)={@remote, 0x0}, &(0x7f0000000340)=0x14) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000380)={@mcast1, 0x0}, &(0x7f00000003c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'batadv_slave_1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'team0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'nicvf0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000600)={'ip_vti0\x00', &(0x7f00000004c0)={'syztnl1\x00', 0x0, 0x80, 0x80, 0x8001, 0x6, {{0x40, 0x4, 0x1, 0x29, 0x100, 0x67, 0x0, 0x9, 0x6, 0x0, @dev={0xac, 0x14, 0x14, 0x1e}, @local, {[@timestamp_prespec={0x44, 0x24, 0x9d, 0x3, 0x4, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x400}, {@multicast1, 0x1}, {@dev={0xac, 0x14, 0x14, 0x20}, 0x7fe1}, {@remote, 0x42}]}, @timestamp_addr={0x44, 0x3c, 0x9e, 0x1, 0x3, [{@rand_addr=0x64010102, 0x2}, {@multicast2, 0x4}, {@rand_addr=0x64010100, 0x1}, {@local, 0x8}, {@private=0xa010102, 0x1000}, {@broadcast, 0x6}, {@broadcast, 0x3}]}, @timestamp_addr={0x44, 0x1c, 0x33, 0x1, 0x0, [{@broadcast, 0xa90}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xa9}, {@remote, 0x8}]}, @ssrr={0x89, 0xb, 0x85, [@multicast2, @remote]}, @rr={0x7, 0xf, 0xe9, [@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @multicast1]}, @end, @timestamp_prespec={0x44, 0x44, 0x18, 0x3, 0x9, [{@empty, 0x2}, {@dev={0xac, 0x14, 0x14, 0x3e}, 0x32c}, {@multicast2, 0x3}, {@private=0xa010101, 0x7}, {@multicast1, 0x4}, {@remote, 0xff}, {@remote, 0xb1ec}, {@dev={0xac, 0x14, 0x14, 0x15}, 0x8}]}, @ssrr={0x89, 0xf, 0xcb, [@multicast1, @dev={0xac, 0x14, 0x14, 0x41}, @empty]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000006c0)={'syztnl0\x00', &(0x7f0000000640)={'syztnl0\x00', 0x0, 0x29, 0xd, 0x4, 0x24476ff4, 0x1, @mcast1, @mcast2, 0x20, 0x7f01, 0xfc000000, 0x4}}) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000700)={@rand_addr, @rand_addr, 0x0}, &(0x7f0000000740)=0xc) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000f00)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000780)={0x738, 0x0, 0x100, 0x70bd28, 0x25dfdbfd, {}, [{{0x8, 0x1, r1}, {0xf4, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xe1cf}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r2}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r3}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xbbb}}}]}}, {{0x8, 0x1, r4}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x7fff}}}]}}, {{0x8, 0x1, r5}, {0x220, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x80}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xf0f}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x27}}, {0x8}}}, {0x4c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x1c, 0x4, [{0xef, 0x1, 0x1, 0xf}, {0x401, 0x2, 0xe, 0x8721}, {0xd2, 0x6, 0x42, 0x6}]}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x9, 0x80, 0xc7, 0x1}, {0x8, 0xb6, 0x3, 0x3}, {0x40, 0x8, 0xa}, {0x101, 0x4, 0xd0, 0x6}, {0x5, 0x5, 0x8, 0x7b}, {0x3, 0x3, 0x0, 0x800}]}}}]}}, {{0x8, 0x1, r6}, {0xf0, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r7}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}]}}, {{0x8, 0x1, r9}, {0x7c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x800}}, {0x8, 0x6, r10}}}]}}, {{0x8, 0x1, r11}, {0x178, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x7fff}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r12}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3ff}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}]}}, {{0x8, 0x1, r13}, {0xb8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r14}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r15}}}]}}]}, 0x738}, 0x1, 0x0, 0x0, 0xc000}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000fc0)={'ip6_vti0\x00', &(0x7f0000000f40)={'ip6gre0\x00', r6, 0x4, 0x8c, 0xfa, 0xb458, 0x40, @rand_addr=' \x01\x00', @remote, 0x8000, 0x40, 0x40, 0x7dedab80}}) r16 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001000)={{{@in6=@local, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@private}, 0x0, @in=@multicast2}}, &(0x7f0000001100)=0xe8) setsockopt$inet6_IPV6_XFRM_POLICY(r16, 0x29, 0x23, &(0x7f0000001140)={{{@in=@remote, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4e22, 0x4, 0x4e24, 0x7, 0x0, 0x1a0, 0x0, 0x89, r13, r17}, {0x81, 0xfffffffffffffffc, 0x1, 0x4, 0x6, 0x3ff, 0xa, 0x10001}, {0x7f, 0x8000, 0x1, 0x7}, 0x6, 0x6e6bb9, 0x1, 0x0, 0x3, 0x2}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4d5, 0x32}, 0x2, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x3503, 0x4, 0x0, 0x8, 0x1, 0xec51, 0x401}}, 0xe8) syz_init_net_socket$netrom(0x6, 0x5, 0x0) r18 = syz_genetlink_get_family_id$mptcp(&(0x7f0000001280), r0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000001380)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001340)={&(0x7f00000012c0)={0x58, r18, 0x8, 0x70bd2d, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xf3}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x1c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x15}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x4}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xd}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x9}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x3}]}, 0x58}, 0x1, 0x0, 0x0, 0x2}, 0x8000) r19 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_buf(r19, 0x6, 0x0, &(0x7f00000013c0)="6b0a3a21430c2fe154dbf8bbbfabb7cab7d47fb320d689d633fa066273e538562c1cef45c0c95af08dbdae22d4b9af2970eacf1f0d26602fcac1b20a3bf8e1e8200fc30f752dfd2ad74057b1c979691221f8fdfb4f0505b132547683b60ada1f55211ff0c2a37b50b6b0ce33f06e7145e9c6827c2ce49bf52eba4de026050c95061c3298b23e32fb49ae466b3a6f82", 0x8f) r20 = socket$l2tp(0x2, 0x2, 0x73) recvmsg(r20, &(0x7f0000001740)={&(0x7f0000001480)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x80, &(0x7f00000016c0)=[{&(0x7f0000001500)=""/107, 0x6b}, {&(0x7f0000001580)=""/225, 0xe1}, {&(0x7f0000001680)=""/52, 0x34}], 0x3, &(0x7f0000001700)}, 0x2023) r21 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$INCFS_IOC_PERMIT_FILL(r21, 0x40046721, &(0x7f0000001780)={r16}) 896.724462ms ago: executing program 3 (id=3644): bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x4, 0x4, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x8}, [@generic={0x81, 0x1, 0x1, 0x6e}]}, &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'geneve1\x00', 0x0}) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_HANDLE(r2, 0x113, 0x3, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000010c0)=@newlink={0x134, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_AF_SPEC={0x114, 0x1a, 0x0, 0x1, [@AF_INET={0x40, 0x2, 0x0, 0x1, {0x3c, 0x1, 0x0, 0x1, [{0x8, 0x21}, {0x8, 0x18}, {0x8, 0x3}, {0x8, 0x9}, {0x8, 0xc}, {0x8, 0x12}, {0x8, 0x1f}]}}, @AF_INET6={0x6c, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @private1}, @IFLA_INET6_TOKEN={0x14, 0x7, @dev}, @IFLA_INET6_TOKEN={0x14, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFLA_INET6_ADDR_GEN_MODE={0x5}, @IFLA_INET6_ADDR_GEN_MODE={0x5}, @IFLA_INET6_TOKEN={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @local}}, @IFLA_INET6_ADDR_GEN_MODE={0x5}]}, @AF_BRIDGE={0x4}, @AF_MPLS={0x4}, @AF_INET6={0x2c, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @private0}, @IFLA_INET6_TOKEN={0x14, 0x7, @mcast1}]}, @AF_INET={0x28, 0x2, 0x0, 0x1, {0x24, 0x1, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}]}}, @AF_MPLS={0x4}, @AF_BRIDGE={0x4}]}]}, 0x134}}, 0x0) 895.700817ms ago: executing program 1 (id=3645): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000200)='blkio.bfq.io_queued\x00', 0x0, 0x0) preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000100)=""/121, 0x79}], 0x1, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)={0x34, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_CQM={0x18, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0xcf14}, @NL80211_ATTR_CQM_RSSI_THOLD={0x4}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x3a}]}]}, 0x34}}, 0x800) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$unix(0x1, 0x2, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={0x60, r7, 0x1, 0x70bd28, 0x25dfdc00, {{}, {@void, @val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x7ff, 0x56}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "c6ee91ccd75a5d113bcf76f233ee855768f044f390add997"}]]}, 0x60}, 0x1, 0x0, 0x0, 0x93}, 0x24044884) sendmsg$NL80211_CMD_SET_MPATH(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x28, r4, 0x1, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x28}, 0x1, 0x0, 0x0, 0x4011}, 0x4000) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) writev(0xffffffffffffffff, 0x0, 0x0) r11 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000400)={0x0, 0x8, 0x2}, &(0x7f0000000440)=0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000480)={0x0, 0x9}, &(0x7f00000004c0)=0x8) getsockopt$inet_sctp_SCTP_STATUS(r11, 0x84, 0xe, &(0x7f0000000500)={r12, 0x6, 0x9, 0x3, 0xd, 0x4f, 0xf, 0x1, {r13, @in6={{0xa, 0x4e23, 0x4, @ipv4={'\x00', '\xff\xff', @empty}, 0x3ff}}, 0x47d5, 0x5, 0xffffff4b, 0x2, 0x49}}, &(0x7f00000005c0)=0xb0) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r9, &(0x7f00000003c0)={0x0, 0xfffffffffffffd90, &(0x7f0000000380)={&(0x7f0000000240)={0x14, r10, 0x701, 0x74bd2b, 0x0, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x20004074}, 0x0) r14 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r14, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)={0xb8, 0x2f, 0x1, 0x70bd27, 0x25dfdbfc, "", [@typed={0xa5, 0x140, 0x0, 0x0, @binary="d13f896808bd5f5056a18d0332bf85ffed4d0380f8dc2b5e40a25c25a6bd0e4b30519f35d0f4213cbf4cb0ac4eb1eea53d7f5b5e73e84711edfe84823df05951f2be45a2c0034f7b98f35b7bf993cc7e91afafbb1e5beb6aebceb870d222ea6d3206b86ef8a54066a7b2f23a7e520da331107afa970414eaa6fa037ccf6c9bb4eabdeaf3aa657f7c603e3ffd6f767010d103d57c66c48beb5b6757dbbee1eb7282"}]}, 0xb8}], 0x1, 0x0, 0x0, 0x1}, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000001100), r9) 872.758653ms ago: executing program 3 (id=3646): r0 = socket$unix(0x1, 0x2, 0x0) recvmmsg$unix(r0, &(0x7f00000050c0)=[{{&(0x7f0000000000)=@abs, 0x6e, &(0x7f0000000600)=[{&(0x7f0000000080)=""/1, 0x1}, {&(0x7f00000000c0)=""/178, 0xb2}, {&(0x7f0000000180)=""/194, 0xc2}, {&(0x7f0000000280)=""/224, 0xe0}, {&(0x7f0000000380)=""/59, 0x3b}, {&(0x7f00000003c0)=""/248, 0xf8}, {&(0x7f00000004c0)=""/44, 0x2c}, {&(0x7f0000000500)=""/206, 0xce}], 0x8, &(0x7f0000000680)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x48}}, {{&(0x7f0000000700), 0x6e, &(0x7f0000000980)=[{&(0x7f0000000780)=""/97, 0x61}, {&(0x7f0000000800)=""/203, 0xcb}, {&(0x7f0000000900)=""/56, 0x38}, {&(0x7f0000000940)=""/63, 0x3f}], 0x4}}, {{&(0x7f00000009c0), 0x6e, &(0x7f0000000dc0)=[{&(0x7f0000000a40)=""/123, 0x7b}, {&(0x7f0000000ac0)=""/45, 0x2d}, {&(0x7f0000000b00)=""/211, 0xd3}, {&(0x7f0000000c00)=""/68, 0x44}, {&(0x7f0000000c80)=""/85, 0x55}, {&(0x7f0000000d00)=""/151, 0x97}], 0x6, &(0x7f0000000e40)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x78}}, {{0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000000ec0)=""/10, 0xa}], 0x1, &(0x7f0000000f40)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x70}}, {{&(0x7f0000000fc0), 0x6e, &(0x7f0000002440)=[{&(0x7f0000001040)=""/150, 0x96}, {&(0x7f0000001100)=""/228, 0xe4}, {&(0x7f0000001200)=""/167, 0xa7}, {&(0x7f00000012c0)=""/69, 0x45}, {&(0x7f0000001340)=""/4096, 0x1000}, {&(0x7f0000002340)=""/178, 0xb2}, {&(0x7f0000002400)}], 0x7, &(0x7f00000024c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0}}}], 0x60}}, {{&(0x7f0000002540)=@abs, 0x6e, &(0x7f0000002840)=[{&(0x7f00000025c0)=""/38, 0x26}, {&(0x7f0000002600)=""/211, 0xd3}, {&(0x7f0000002700)=""/192, 0xc0}, {&(0x7f00000027c0)=""/87, 0x57}], 0x4, &(0x7f0000002880)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x28}}, {{&(0x7f00000028c0)=@abs, 0x6e, &(0x7f0000003dc0)=[{&(0x7f0000002940)=""/230, 0xe6}, {&(0x7f0000002a40)=""/192, 0xc0}, {&(0x7f0000002b00)}, {&(0x7f0000002b40)=""/206, 0xce}, {&(0x7f0000002c40)=""/70, 0x46}, {&(0x7f0000002cc0)=""/4096, 0x1000}, {&(0x7f0000003cc0)=""/224, 0xe0}], 0x7}}, {{&(0x7f0000003e40)=@abs, 0x6e, &(0x7f0000005000)=[{&(0x7f0000003ec0)=""/103, 0x67}, {&(0x7f0000003f40)=""/171, 0xab}, {&(0x7f0000004000)=""/4096, 0x1000}], 0x3, &(0x7f0000005040)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x58}}], 0x8, 0x2000, &(0x7f00000052c0)) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000005300)={'wlan0\x00', 0x0}) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000005380)=@add_del={0x2, &(0x7f0000005340)='batadv_slave_0\x00'}) r16 = syz_genetlink_get_family_id$nl80211(&(0x7f0000005400), r8) sendmsg$NL80211_CMD_START_SCHED_SCAN(r9, &(0x7f00000054c0)={&(0x7f00000053c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000005480)={&(0x7f0000005440)={0x3c, r16, 0x8, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r15}, @void}}, [@NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x1}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x6}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x4, 0xcd}}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x20000010) setsockopt$TIPC_MCAST_BROADCAST(r6, 0x10f, 0x85) getsockname$packet(r13, &(0x7f0000005500)={0x11, 0x0, 0x0}, &(0x7f0000005540)=0x14) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r11, 0x89f1, &(0x7f0000005600)={'gre0\x00', &(0x7f0000005580)={'gretap0\x00', r17, 0x20, 0x11, 0xdc3c0000, 0xfffffff7, {{0x18, 0x4, 0x2, 0x0, 0x60, 0x68, 0x0, 0x7, 0x2f, 0x0, @remote, @multicast2, {[@end, @ssrr={0x89, 0xb, 0x74, [@multicast2, @multicast2]}, @cipso={0x86, 0x18, 0x3, [{0x0, 0x6, "acb4f1b9"}, {0x7, 0xc, "28b10f077a9eddfb7d4b"}]}, @noop, @ssrr={0x89, 0x27, 0x64, [@rand_addr=0x64010102, @broadcast, @local, @empty, @multicast2, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}]}]}}}}}) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r4, 0x400c6615, &(0x7f0000005640)={0x0, @adiantum, 0x0, @desc1}) ioctl$sock_inet6_tcp_SIOCATMARK(r14, 0x8905, &(0x7f0000005680)) r19 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r19, &(0x7f0000005880)={&(0x7f00000056c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000005840)={&(0x7f0000005700)=@deltaction={0x120, 0x31, 0x200, 0x70bd2b, 0x25dfdbff, {}, [@TCA_ACT_TAB={0x68, 0x1, [{0xc, 0x10, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0x10, 0x4, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0x14, 0x11, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0xc, 0x1b, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0xc, 0x7, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x401}}, {0xc, 0x4, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x10, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}]}, @TCA_ACT_TAB={0x28, 0x1, [{0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfffffff7}}, {0xc, 0x4, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1da1ce8e}}, {0xc, 0x3, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}]}, @TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x6, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @TCA_ACT_TAB={0x10, 0x1, [{0xc, 0xb, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}]}, @TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x6, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0xc, 0xe, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}]}, @TCA_ACT_TAB={0x3c, 0x1, [{0xc, 0x10, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1ff}}, {0xc, 0xe, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}, {0xc, 0xa, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0x14, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}]}]}, 0x120}, 0x1, 0x0, 0x0, 0x4000040}, 0x4004080) r20 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000058c0)={0x2, 0x4, 0x8, 0x1, 0x80, r5, 0x58f0d112, '\x00', r18, r4, 0x4, 0x3}, 0x50) ioctl$BTRFS_IOC_QUOTA_CTL(r20, 0xc0109428, &(0x7f0000005940)={0x1, 0x1}) socket(0x2a, 0x2, 0x8) ioctl$int_in(r12, 0x5452, &(0x7f0000005980)=0xdf) syz_open_procfs$namespace(r10, &(0x7f00000059c0)='ns/time\x00') getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000005a00)={0x0, @broadcast, @initdev}, &(0x7f0000005a40)=0xc) ioctl$SIOCGIFMTU(r7, 0x8921, &(0x7f0000005a80)={'team0\x00'}) r21 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r8, 0x84, 0x77, &(0x7f0000005ac0)={0x0, 0x4, 0x3, [0x8, 0x6, 0x4]}, &(0x7f0000005b00)=0xe) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r21, 0x84, 0x9, &(0x7f0000005b40)={r22, @in={{0x2, 0x4e24, @multicast2}}, 0xdb, 0x7, 0xb, 0x2, 0x10, 0x3, 0x8}, 0x9c) ioctl$SIOCX25SCAUSEDIAG(r4, 0x89ec, &(0x7f0000005c00)={0x1, 0x7}) openat$ppp(0xffffffffffffff9c, &(0x7f0000005c40), 0x40000, 0x0) socket(0x9, 0xa, 0x0) ioctl$sock_TIOCOUTQ(r12, 0x5411, &(0x7f0000005c80)) setsockopt$RXRPC_UPGRADEABLE_SERVICE(0xffffffffffffffff, 0x110, 0x5, &(0x7f0000005cc0)=[0x4, 0x3], 0x2) getsockopt$IP_VS_SO_GET_SERVICE(r3, 0x0, 0x483, &(0x7f0000005d00), &(0x7f0000005d80)=0x68) bpf$OBJ_GET_PROG(0x7, &(0x7f0000005e00)=@generic={&(0x7f0000005dc0)='./file0\x00', 0x0, 0x18}, 0x18) 814.576205ms ago: executing program 1 (id=3647): r0 = socket$inet(0x10, 0x3, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000200)=ANY=[@ANYBLOB="e0000002e000000200000000010000000a010102c423b94d58c768624b013a6fd07baeb28e45fd975cde6e14b7ca6277432198483e20a11bcbc1e05804536040c0606f1b5fbea60bdb3e9f31a17c41fb59ec4f4f88dfe326f804f9cd719ff590b3e085d3c6b27fd5b3728f0059a4ea324b8f4607be57c39f1990e19da47643c7200704dabeb66bd6f441ee63dc34b0e691145a47b0b4eeffdf33e610a6439c8b0d75632664425403afbb1742ccc8ca44af160c51055bc972da0db828dce772af6ecb8b94"], 0x14) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0xc8, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x74, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x5, 0x4, 0x2, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x8001]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x7}]}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x4, 0x6, 0x100, 0x5d, 0x0, 0x7ff, 0x200}}, {0x4}}]}]}, 0xc8}}, 0x0) 707.007488ms ago: executing program 0 (id=3648): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000180)={0x1f, 0xffff, 0x3}, 0x6) write(r0, &(0x7f0000000000)="38000000010001", 0x7) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) (async) r4 = socket$pppl2tp(0x18, 0x1, 0x1) (async) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r4, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r5, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) ioctl$PPPIOCGL2TPSTATS(r4, 0x80487436, &(0x7f0000000540)="43210098") getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x487, &(0x7f0000000000), &(0x7f0000000040)=0x30) (async, rerun: 64) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x3c, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x500}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000804}, 0x8000) (async, rerun: 64) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r2) getsockopt$PNPIPE_IFINDEX(r2, 0x113, 0x2, &(0x7f0000000180)=0x0, &(0x7f0000000200)=0x4) (async) r8 = socket(0x1, 0x803, 0x0) r9 = socket(0x10, 0x803, 0x0) (async, rerun: 32) getsockname$packet(r8, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) (rerun: 32) sendmsg$nl_route(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x1, 0x0, 0x0, r10}, [@IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x2c}}, 0x0) (async, rerun: 32) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r2, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="cc010000", @ANYRES16=r6, @ANYBLOB="10002bbd7000fbdbdf250400000038000180140002006873723000000000000000000000000008000100", @ANYRES32=r3, @ANYBLOB="080003004c47c00c08000300020000000800030002000000440001801400020076657468305f746f5f6272696467650008000300020000001400020076657468315f746f5f6261746164760008000100", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=r3, @ANYBLOB="5c00018008000100", @ANYRES32=r3, @ANYBLOB, @ANYRES32=r7, @ANYBLOB="08000300020000001400020076657468315f746f5f68737200000000140002007465616d5f736c6176655f300000000008000100", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=r3, @ANYBLOB="2c000180140002007465616d5f736c6176655f3000000000140002006261746164765f736c6176655f30000018000180140002006d6163736563300000000000000000004c00018008000100", @ANYRES32=r10, @ANYBLOB="1400020069703667726530000000000000000000080003000300000008000100", @ANYRES32=r3, @ANYBLOB="0800030003000000140002006d6163767461703000000000000000001400018008000100", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=r3, @ANYBLOB="38000180080003000100000008000100", @ANYRES32=r3, @ANYBLOB="14000200626f6e645f736c6176655f3000000000080003000000000008000100", @ANYRES32=r3, @ANYBLOB="04000180"], 0x1cc}, 0x1, 0x0, 0x0, 0x48814}, 0x44000) (rerun: 32) 631.83928ms ago: executing program 1 (id=3649): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000feffffff00000000000000001801000020646c4200000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000040000008500000006000000850000002300000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x727c45cd4283345, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, 0x0, 0x0) (async) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, 0x0, 0x0) r2 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r2, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000100)="a6", 0xfffffcf4}, {0x0}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0) close(0x3) (async) close(0x3) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000002c0)=[{{&(0x7f0000001440)=@abs={0x0, 0x0, 0x4e21}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x48804}}, {{&(0x7f0000001980)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0xfffffffffffffe20, 0x8000}}], 0x2, 0x20004800) syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) (async) syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_LINKS(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000040), 0xc, 0x0, 0x1, 0x0, 0x0, 0x100}, 0x4040) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv4_newrule={0x1c, 0x20, 0x301, 0x70bd27, 0x25dfdbff, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1e}}, 0x1c}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000040)={0x6, 0x6}, 0x4) (async) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000040)={0x6, 0x6}, 0x4) setsockopt$packet_fanout_data(r5, 0x107, 0x16, &(0x7f0000000300)={0x3, &(0x7f0000000500)=[{0x28, 0x5, 0x0, 0xfffff034}, {0x50, 0x8, 0x0, 0x100}, {0x6, 0x9, 0x0, 0x10001}]}, 0x10) (async) setsockopt$packet_fanout_data(r5, 0x107, 0x16, &(0x7f0000000300)={0x3, &(0x7f0000000500)=[{0x28, 0x5, 0x0, 0xfffff034}, {0x50, 0x8, 0x0, 0x100}, {0x6, 0x9, 0x0, 0x10001}]}, 0x10) pwrite64(r0, &(0x7f0000000080)="05096452dda5130090a7b846bcbef3f0bec8337d92110992c5", 0x19, 0x3) (async) pwrite64(r0, &(0x7f0000000080)="05096452dda5130090a7b846bcbef3f0bec8337d92110992c5", 0x19, 0x3) socket$kcm(0x2, 0xa, 0x2) (async) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x27}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0x6, 0x0, 0x580, 0x0, 0x28, {[@window={0x9, 0x3}]}}}}}}, 0x3a) 549.242225ms ago: executing program 0 (id=3650): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000003f80)=ANY=[@ANYBLOB="18020000feffffff00000000000000008500000041000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008fff800b703000010400000850000000600000095"], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 453.576388ms ago: executing program 1 (id=3651): r0 = socket$alg(0x26, 0x5, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000005"], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="05000000070000000700000001"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000004000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000007100000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000680)='sys_exit\x00', r2}, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r3}, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYRES32=r4], 0x50) write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000600)=ANY=[], 0x50) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r5 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$alg(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001600)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x24008090}, 0x40000) recvmsg$can_raw(r5, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000280)=""/124, 0x7c}], 0x1}, 0x1021) socket$alg(0x26, 0x5, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000005"], 0x50) (async) close(0x3) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="05000000070000000700000001"], 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000004000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000007100000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000680)='sys_exit\x00', r2}, 0x10) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r3}, 0x10) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYRES32=r4], 0x50) (async) write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[], 0x32600) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000600)=ANY=[], 0x50) (async) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(serpent))\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) (async) accept4(r0, 0x0, 0x0, 0x0) (async) sendmsg$alg(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001600)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x24008090}, 0x40000) (async) recvmsg$can_raw(r5, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000280)=""/124, 0x7c}], 0x1}, 0x1021) (async) 452.953898ms ago: executing program 0 (id=3652): r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, r0, 0x300, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x7}]}, 0x38}, 0x1, 0x0, 0x0, 0x48001}, 0x4) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, r2, 0x10, 0x70bd28, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x200000c0}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r3, &(0x7f0000000540)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000500)={&(0x7f0000000300)={0x1d0, r4, 0x8, 0x70bd29, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_IE={0x181, 0x2a, [@tim={0x5, 0x1e, {0x3, 0x88, 0x0, "4d1a9a86b58e4ff2996d92db1f5a9a7512d76bba385690ac9325a0"}}, @random={0x2, 0x6f, "ed8a83279af54568b3a90f67cc62c64eba2152c86c9e60b278d1ecbf0bd792c0887b0a6aad1653841756db7da7fd1003d6cefe2c4283c263bd830f51273a3455096a283d748a5e3249b51a4b9089d04de5738b9efafb50df41aedac7123b15a58eebde1be41468b1cfc2e9d0f19d8d"}, @preq={0x82, 0x67, {{0x0, 0x1}, 0x8, 0x7, 0x4, @broadcast, 0x7fff, @void, 0xe, 0x80000000, 0x7, [{{0x1}, @device_b, 0x7}, {{0x1, 0x0, 0x1}, @device_b, 0x9}, {{0x1, 0x0, 0x1}, @device_a, 0x9}, {{}, @device_b, 0x8}, {{}, @device_b, 0x7}, {{}, @device_b, 0x5}, {{}, @device_a, 0x8}]}}, @preq={0x82, 0x30, {{0x1}, 0x4, 0x5, 0xff, @broadcast, 0x2, @void, 0x7, 0x6, 0x2, [{{}, @device_b, 0x2}, {{0x1, 0x0, 0x1}, @device_a, 0x5}]}}, @ibss={0x6, 0x2, 0x8}, @random={0xd, 0x4b, "42b7ca698a23ea8febe5eac9b2c3cb5951db80c901c62265df15e6835dfa88c0458bfed15824023cf2ea96bb7c4c9837de40510f7daebf17ce98c2ae27f48f3521b0730432846c6f2edd7a"}]}, @NL80211_ATTR_IE={0x8, 0x2a, [@ibss={0x6, 0x2, 0x9}]}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x1d0}}, 0x10) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0), r3) sendmsg$IPVS_CMD_NEW_DEST(r3, &(0x7f0000000700)={&(0x7f0000000580), 0xc, &(0x7f00000006c0)={&(0x7f0000000600)={0xbc, r5, 0x400, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0x5c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0x20}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@private1}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x10}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x23}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x20, 0x1}}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2e}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x62}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private1={0xfc, 0x1, '\x00', 0x1}}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}]}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xf}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x80000001}]}, 0xbc}, 0x1, 0x0, 0x0, 0x4000}, 0x0) socket$alg(0x26, 0x5, 0x0) sendmsg$NL80211_CMD_DEL_PMKSA(r3, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x30, r4, 0x200, 0x70bd2b, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x10, 0x62}}}}, [@NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x40}]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x4000) r6 = accept4(0xffffffffffffffff, &(0x7f0000000880)=@tipc, &(0x7f0000000900)=0x80, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000840), r6) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000940)) sendmsg$NL80211_CMD_REGISTER_BEACONS(r6, &(0x7f0000000a40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x14, r4, 0x1, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @void, @void}}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x8000) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NLBL_UNLABEL_C_STATICADD(r1, &(0x7f0000000b80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x54, 0x0, 0x800, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast1}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @NLBL_UNLABEL_A_SECCTX={0x22, 0x7, 'system_u:object_r:devtty_t:s0\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000c00)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000000d00)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c40)={0x4c, r4, 0x104, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'veth1_vlan\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_4ADDR={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000010}, 0x4000001) recvmsg$can_bcm(r6, &(0x7f0000000f80)={&(0x7f0000000d40)=@nl=@proc, 0x80, &(0x7f0000000f00)=[{&(0x7f0000000dc0)=""/47, 0x2f}, {&(0x7f0000000e00)=""/69, 0x45}, {&(0x7f0000000e80)=""/65, 0x41}], 0x3, &(0x7f0000000f40)=""/1, 0x1}, 0x2) sendmsg$NLBL_CALIPSO_C_ADD(r1, &(0x7f0000001080)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001040)={&(0x7f0000001000)={0x34, 0x0, 0x20, 0x70bd2a, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x8004}, 0x4000) sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(r1, &(0x7f0000001180)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x1a00}, 0xc, &(0x7f0000001140)={&(0x7f0000001100)={0x3c, r2, 0x200, 0x70bd2a, 0x25dfdbff, {}, [@NL802154_ATTR_MIN_BE={0x5, 0x11, 0x4}, @NL802154_ATTR_MAX_BE={0x5, 0x10, 0x3}, @NL802154_ATTR_MAX_BE={0x5, 0x10, 0x1}, @NL802154_ATTR_MAX_BE={0x5, 0x10, 0x81}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) r8 = epoll_create(0xffff) ioctl$FS_IOC_SETFSLABEL(r8, 0x41009432, &(0x7f00000011c0)="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") r9 = syz_genetlink_get_family_id$gtp(&(0x7f0000001300), 0xffffffffffffffff) sendmsg$GTP_CMD_GETPDP(r3, &(0x7f00000013c0)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001380)={&(0x7f0000001340)={0x1c, r9, 0x100, 0x70bd29, 0x25dfdbff, {}, [@GTPA_LINK={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40002}, 0x240000d4) r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000001440), r6) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r6, &(0x7f0000001500)={&(0x7f0000001400)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000014c0)={&(0x7f0000001480)={0x3c, r10, 0x200, 0x70bd27, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xf9}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40810}, 0x4000000) getsockopt$inet6_mptcp_buf(r6, 0x11c, 0x4, &(0x7f0000001540)=""/106, &(0x7f00000015c0)=0x6a) 392.055172ms ago: executing program 2 (id=3653): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000004c0)={0x50, 0x2, 0x6, 0x3, 0x0, 0x0, {0x5, 0x0, 0x7}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0, 0x0, 0x44}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x50}}, 0x24040054) 372.719683ms ago: executing program 0 (id=3654): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="200000001000030400000000fcffffff00000000", @ANYRES32=r2, @ANYBLOB="7fff040000000000"], 0x20}}, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x12}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}}, 0x0) r6 = socket$tipc(0x1e, 0x2, 0x0) getsockopt$sock_buf(r6, 0x1, 0x1c, 0x0, &(0x7f0000000e40)) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newtaction={0x158, 0x30, 0x1, 0x0, 0x0, {}, [{0xf9, 0x1, [@m_xt={0x110, 0x1c, 0x0, 0x0, {{0x7}, {0x28, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'nat\x00'}]}, {0xc4, 0x6, "286a94f4e14beb084c99dae709c351adc8cab22923a37861cfe86658f320ba887e5828b35bc61b6aed21ef47903c360113fff2ade33fa3ad6cbfe1fb0be30daad11c8591bb5facff1d522b2856c1cf72253512d1a2190ea9ac8a783ade006a341c87e6a5a4e0a2b6f5545d96e93a183befcdf3d7af624e0a00465227afef2f86519d0091ccc0ae34fc69bcd8a22cd2cf1af4644d1993bdc3eae657e01cc9264a53346454cc31b59f5e235a3010d59b03da66892760a28c7e0a839c8b85b1f59a"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_vlan={0x0, 0x13, 0x0, 0x0, {{}, {0x0, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PROTOCOL={0x0, 0x4, 0x88a8}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x0, 0x6, 0x4}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x0, 0x4, 0x8100}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x0, 0x6, 0x4}, @TCA_VLAN_PUSH_VLAN_ID={0x0, 0x3, 0x59e}]}, {0x0, 0x6, "0d6884d9f22194477c7a1b7a4aee0a92ae59bf6b4da2a4ac0a4e077050ffbe64071924a078d4cd9537344ef681f944e7a6cb8c3b0d1d7ec9711a6dfca366394529610dee2bb14b056117"}, {0x0, 0x7, {0x0, 0x1}}, {0x0, 0x8, {0x2}}}}, @m_skbedit={0x0, 0x2, 0x0, 0x0, {{}, {0x0, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_MARK={0x0, 0x5, 0xe58d}]}, {0x0, 0x6, "fe6a4b6835b449dc052637c753e1dda678c36f3005fa44d65d01afb09b5813c657672ee7c49f8c387fac770be3618c18f9fc9d7ef3612514ba78c352a34a7a4395cdc8922488d2bd2b4ad8982d40d08c8f4ced9d3177f3832c7b38798edc33b3eeddada71054392c05d8148a6dd26109344749df834ba36fad984752883c3b46646e0caa501a1ffd6f7b862b39f394140afdd160fa03155c4ee232dabd186974"}, {}, {0x0, 0x8, {0x3, 0x1}}}}]}]}, 0x158}}, 0x0) 369.751637ms ago: executing program 1 (id=3655): r0 = socket$netlink(0x10, 0x3, 0x10) unshare(0x22020600) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), 0xffffffffffffffff) r2 = syz_open_procfs$namespace(0x0, &(0x7f00000001c0)='ns/net\x00') sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x3c, r1, 0x1, 0x70bd26, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8, 0x8a, r2}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004000}, 0x90) 338.042584ms ago: executing program 2 (id=3656): r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000300)=@raw={'raw\x00', 0x8, 0x3, 0x2a8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x210, 0xffffff7a, 0xffffffff, 0x178, 0xffffffff, 0x7fffffe, 0x0, {[{{@uncond, 0x6, 0x130, 0x178, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x88, 0x88, 'bm\x00', "00000100cbd047da9ca965f96ad5801f0514d363ee84bb895919d9490f6785fba3c4a44f1e25ecefef2a2d6054f5260ece5ce1a56a5ef73be11d65bfe8c37674024c183ebacdf741cea92ded3a9ca54de15dd9ec8ef62f9e000000000000000000ffffff7f00", 0x80, 0x0, {0x4}}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x6, 0x3, 0x6, '\x00', {0x3}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0x0, 0xff000000, 'team_slave_0\x00', 'ip6gre0\x00', {0xff}, {}, 0x6, 0x3}, 0x0, 0x70, 0x98}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x0, 0x0, 0x4}, {0x4, 0x5, 0x6}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x308) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000280)={&(0x7f0000000640)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_DELFLOWTABLE={0x20, 0x18, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0x5}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x8c, 0x3, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}, @NFTA_CHAIN_HOOK={0x64, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x1c975ab2}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth0_to_bridge\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_HOOK_DEV={0x14, 0x3, 'ip6gretap0\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x266f6ca1}]}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWSET={0x14, 0x9, 0xa, 0x0, 0x0, 0x0, {0xa, 0x0, 0x5}}, @NFT_MSG_NEWCHAIN={0x54, 0x3, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x9}, [@NFTA_CHAIN_COUNTERS={0x40, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x5}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xfffffffffffffff9}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x2}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x6}]}]}, @NFT_MSG_NEWTABLE={0x18, 0x0, 0xa, 0x6, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_TABLE_USERDATA={0x4}]}, @NFT_MSG_DELFLOWTABLE={0x20, 0x18, 0xa, 0x5, 0x0, 0x0, {0x5, 0x0, 0x8}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x8}, @NFT_OBJECT_CT_HELPER=@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x3}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x194}, 0x1, 0x0, 0x0, 0x40000}, 0x1) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r4 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000380)={'wlan1\x00', 0x8000}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r2) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x24, r7, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x28, r3, 0x5, 0x3, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}]}, 0x28}}, 0x0) r10 = socket$kcm(0x10, 0x2, 0x0) r11 = socket(0x840000000002, 0x3, 0x100) connect$inet(r11, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r11, &(0x7f0000005240), 0x4000095, 0x0) bind$llc(r11, 0x0, 0x0) sendmsg$kcm(r10, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) r12 = socket$pppoe(0x18, 0x1, 0x0) sendmmsg(r12, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0) r13 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000005ec0), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r13, 0x0, 0x28000) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x100, 0x0, 0x6, 0x12, 0x8}, 0x9c) sendto$inet6(r1, &(0x7f0000000840)="e8", 0x1, 0x65055, &(0x7f0000000340)={0xa, 0x4e20, 0x5, @local, 0xa}, 0x1c) socket$nl_xfrm(0x10, 0x3, 0x6) 118.317771ms ago: executing program 4 (id=3657): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x16, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0xe, &(0x7f0000000000)=ANY=[], &(0x7f0000000580)='syzkaller\x00', 0x6, 0xc, &(0x7f0000000340)=""/12, 0x40f00, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0), 0x0, 0x10, 0xfffffffe}, 0x94) (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) (async) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r1, 0x29, 0x41, &(0x7f0000000300)={'nat\x00', 0x5, [{}, {}, {}, {}, {}]}, 0x78) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xe, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000010000000000000000000000a5000000a000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xb9) 64.61063ms ago: executing program 0 (id=3658): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) writev(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f00000003c0)={0x0, 0xfffffffffffffd90, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="01072bbd74000000000005000000"], 0x14}, 0x1, 0x0, 0x0, 0x20004074}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)={0x38, 0x7, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x2}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x4040}, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r4, 0xa02000000000000, 0x60, &(0x7f0000000880)={'filter\x00', 0x1002, 0x4, 0x3f0, 0x1f8, 0x0, 0xe8, 0x308, 0x308, 0x308, 0x7fffffe, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0x3f0}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@broadcast, @mac, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, 0xf, 0xffffffff}}}, {{@arp={@loopback, @multicast1, 0xff000000, 0x0, 0x6, 0x0, {@mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x22}, {[0x0, 0x0, 0x0, 0x0, 0xff, 0xff]}}, {@empty, {[0x0, 0xff, 0x0, 0xff, 0x0, 0xff]}}, 0x6, 0x81, 0x1, 0x1, 0xd13, 0xe106, 'pimreg1\x00', 'veth1_virt_wifi\x00', {0xff}, {0xff}, 0x0, 0x4}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@broadcast, @mac=@random="3330cb30ca8a", @private=0xa010102, @broadcast}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x1000) r6 = socket$inet_udplite(0x2, 0x2, 0x88) bind$inet(r6, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x24}}, 0x10) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad413ed50000000f00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r7}, 0x10) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000240)=@migrate={0x27c, 0x21, 0x1, 0x0, 0x1, {{@in, @in6=@remote, 0x0, 0x0, 0xffff}, 0x0, 0x2}, [@migrate={0x1cc, 0x11, [{@in=@multicast1, @in=@local, @in=@local, @in=@broadcast, 0x3c, 0x4, 0x0, 0x3505, 0xa, 0xa}, {@in=@empty, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@multicast2, @in6=@empty, 0x6a, 0x1, 0x0, 0x3506, 0x2, 0x2}, {@in=@empty, @in=@private=0xa010100, @in6=@remote, @in6=@mcast2, 0x33, 0x2, 0x0, 0x0, 0xa, 0xa}, {@in=@local, @in6=@local, @in6=@empty, @in6=@private2, 0xff, 0x3, 0x0, 0x3503, 0x8, 0x2}, {@in=@broadcast, @in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in=@private, @in=@dev, 0x0, 0x1, 0x0, 0x3506, 0x2, 0xf}, {@in6=@mcast2, @in=@broadcast, @in6=@private2, @in6=@remote}]}, @policy_type={0xa}, @replay_esn_val={0x40, 0x17, {0x9, 0x70bd29, 0x70bd2d, 0x70bd27, 0x70bd28, 0x7f, [0x0, 0x7, 0x7, 0x5, 0x80, 0x0, 0x5, 0xfffffff7, 0x6]}}, @proto={0x5, 0x19, 0x6c}, @mark={0xc, 0x15, {0x35075d, 0x3}}]}, 0x27c}}, 0x0) syz_genetlink_get_family_id$nbd(&(0x7f0000001100), r0) 0s ago: executing program 4 (id=3659): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000540), 0xffffffffffffffff) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000780)=ANY=[@ANYBLOB="d0000000190001000000000000000000ac14140d000000000000000000000000000000020000000000000000000000004e2300004e2600000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffffffffffff000000000000000000000000000000000300000000000000000000000000000000000000000000000000000000000080d42bdb43b8111500fcffffffffffffff000040000000000000000000000001000000000000000000010100000000000000000000000000000c00150059073500e40c00000c0008"], 0xd0}, 0x1, 0x0, 0x0, 0x40000}, 0x20004800) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0x1, &(0x7f0000000000)=0x1, 0x4) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000840)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002abd7000fcdbdf250100000008000100", @ANYRES32=r3, @ANYBLOB="3c000280"], 0x58}, 0x1, 0x1000000, 0x0, 0x24004000}, 0x24040840) kernel console output (not intermixed with test programs): 402.406226][T17105] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 402.433805][T17105] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2848'. [ 402.496382][T17108] netlink: 504 bytes leftover after parsing attributes in process `syz.3.2849'. [ 402.633128][ T6044] bond17 (unregistering): (slave bridge6): Releasing active interface [ 402.662316][ T5836] Bluetooth: hci5: command tx timeout [ 402.886465][ T6044] bond0 (unregistering): Released all slaves [ 403.321884][ T6044] bond1 (unregistering): Released all slaves [ 403.462935][ T6044] bond2 (unregistering): Released all slaves [ 403.574912][ T6044] bond3 (unregistering): Released all slaves [ 403.587911][ T6044] bond4 (unregistering): Released all slaves [ 403.600053][ T6044] bond5 (unregistering): Released all slaves [ 403.614193][ T6044] bond6 (unregistering): Released all slaves [ 403.630609][ T6044] bond7 (unregistering): Released all slaves [ 403.646376][ T6044] bond8 (unregistering): Released all slaves [ 403.769264][ T6044] bond9 (unregistering): Released all slaves [ 403.783913][ T6044] bond10 (unregistering): Released all slaves [ 403.796637][ T6044] bond11 (unregistering): Released all slaves [ 403.917018][ T6044] bond12 (unregistering): Released all slaves [ 404.034297][ T6044] bond13 (unregistering): Released all slaves [ 404.046764][ T6044] bond14 (unregistering): Released all slaves [ 404.170492][ T6044] bond15 (unregistering): Released all slaves [ 404.185040][ T6044] bond16 (unregistering): Released all slaves [ 404.197599][ T6044] bond17 (unregistering): Released all slaves [ 404.612464][ T6044] hmac(sha224): left promiscuous mode [ 404.666124][T17119] netlink: 'syz.1.2851': attribute type 1 has an invalid length. [ 404.673907][ T3732] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.725546][ T3732] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.741851][ T3732] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.742125][ T5836] Bluetooth: hci5: command tx timeout [ 404.750399][ T3732] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.796422][T17120] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 404.806813][ T6044] : left promiscuous mode [ 404.929764][ T6044] tipc: Disabling bearer [ 404.938549][ T6044] tipc: Left network mode [ 404.975369][ T6044] IPVS: stopping backup sync thread 16778 ... [ 405.159925][T17061] chnl_net:caif_netlink_parms(): no params data found [ 405.218687][T17153] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 405.343119][T17157] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 405.576086][T17061] bridge0: port 1(bridge_slave_0) entered blocking state [ 405.591485][T17061] bridge0: port 1(bridge_slave_0) entered disabled state [ 405.609639][T17061] bridge_slave_0: entered allmulticast mode [ 405.630693][T17061] bridge_slave_0: entered promiscuous mode [ 405.685749][T17061] bridge0: port 2(bridge_slave_1) entered blocking state [ 405.711621][T17061] bridge0: port 2(bridge_slave_1) entered disabled state [ 405.719186][T17061] bridge_slave_1: entered allmulticast mode [ 405.730654][T17061] bridge_slave_1: entered promiscuous mode [ 405.738299][T17148] lo speed is unknown, defaulting to 1000 [ 405.957975][T17061] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 406.005629][T17061] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 406.144599][T17180] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2865'. [ 406.174671][T17061] team0: Port device team_slave_0 added [ 406.203939][T17061] team0: Port device team_slave_1 added [ 406.282104][T17180] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 406.357201][T17180] netlink: 'syz.1.2865': attribute type 2 has an invalid length. [ 406.378577][T17061] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 406.387163][T17061] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 406.460275][T17061] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 406.512912][T17180] !©9: entered promiscuous mode [ 406.531935][T17061] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 406.539059][T17061] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 406.573521][T17061] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 406.586151][T17185] tap0: tun_chr_ioctl cmd 1074025677 [ 406.598788][T17185] tap0: linktype set to 1 [ 406.708041][T17191] Cannot find del_set index 1 as target [ 406.821781][ T5836] Bluetooth: hci5: command tx timeout [ 406.885264][T17195] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2869'. [ 406.900833][T17196] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2868'. [ 407.139821][T17195] bond0: left allmulticast mode [ 407.200599][T17061] hsr_slave_0: entered promiscuous mode [ 407.218901][T17061] hsr_slave_1: entered promiscuous mode [ 407.259656][T17061] debugfs: 'hsr0' already exists in 'hsr' [ 407.275822][T17061] Cannot create hsr debugfs directory [ 407.926232][ T50] smc: removing ib device !yz! [ 408.008699][ T2113] smc: removing ib device syû [ 408.394396][T17206] netlink: 1 bytes leftover after parsing attributes in process `syz.0.2871'. [ 408.901304][ T5836] Bluetooth: hci5: command tx timeout [ 409.100615][T17224] netlink: 'syz.3.2877': attribute type 27 has an invalid length. [ 409.187169][T17224] netlink: 'syz.3.2877': attribute type 11 has an invalid length. [ 409.300781][T17230] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 409.676749][T17239] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2880'. [ 409.918659][T17247] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2882'. [ 410.413593][T17243] lo speed is unknown, defaulting to 1000 [ 410.480779][T17255] netlink: 'syz.0.2885': attribute type 6 has an invalid length. [ 410.511918][T17255] IPv6: NLM_F_CREATE should be specified when creating new route [ 410.552767][T17257] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2885'. [ 410.615838][T17255] netlink: 'syz.0.2885': attribute type 4 has an invalid length. [ 410.674403][T17255] netlink: 'syz.0.2885': attribute type 4 has an invalid length. [ 411.139307][T17275] netlink: ct family unspecified [ 411.162681][T17275] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 411.373190][ T6044] IPVS: stop unused estimator thread 0... [ 411.402590][T17280] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2891'. [ 411.926268][T17061] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 411.970833][T17061] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 412.010043][T17061] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 412.049783][T17061] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 412.303324][T17061] 8021q: adding VLAN 0 to HW filter on device bond0 [ 412.578772][T17061] 8021q: adding VLAN 0 to HW filter on device team0 [ 412.608526][T17333] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2901'. [ 412.630331][ T75] bridge0: port 1(bridge_slave_0) entered blocking state [ 412.637890][ T75] bridge0: port 1(bridge_slave_0) entered forwarding state [ 412.682249][ T75] bridge0: port 2(bridge_slave_1) entered blocking state [ 412.689527][ T75] bridge0: port 2(bridge_slave_1) entered forwarding state [ 412.786583][T17339] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2902'. [ 413.038183][T17348] lo speed is unknown, defaulting to 1000 [ 413.431092][T17061] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 413.705982][T17373] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 414.258639][T17384] sctp: [Deprecated]: syz.0.2913 (pid 17384) Use of int in maxseg socket option. [ 414.258639][T17384] Use struct sctp_assoc_value instead [ 414.311135][T17385] sctp: [Deprecated]: syz.0.2913 (pid 17385) Use of int in maxseg socket option. [ 414.311135][T17385] Use struct sctp_assoc_value instead [ 414.705348][T17401] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2917'. [ 414.748784][T17405] tunl0: Caught tx_queue_len zero misconfig [ 414.799729][T17061] veth0_vlan: entered promiscuous mode [ 414.870662][T17061] veth1_vlan: entered promiscuous mode [ 414.888538][T17411] netlink: 'syz.0.2920': attribute type 8 has an invalid length. [ 414.919930][T17061] veth0_macvtap: entered promiscuous mode [ 414.934550][T17061] veth1_macvtap: entered promiscuous mode [ 414.972004][T17061] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 414.997880][T17061] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 415.019832][ T1962] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 415.064252][ T1962] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 415.100092][ T1962] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 415.116922][ T1962] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 415.283775][ T2127] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 415.303263][ T2127] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 415.358466][ T2127] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 415.382469][ T2127] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 415.405906][T17438] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2926'. [ 415.457405][T17434] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2924'. [ 415.513850][T17438] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2926'. [ 415.532960][T17442] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2927'. [ 415.557499][T17446] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2834'. [ 415.829273][T17457] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2930'. [ 415.890330][T17457] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2930'. [ 415.962254][ T5842] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 415.972657][ T5842] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 415.982245][ T5842] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 415.994409][ T5842] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 416.010256][ T5842] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 416.198364][T17473] x_tables: duplicate underflow at hook 2 [ 416.248138][T17465] lo speed is unknown, defaulting to 1000 [ 416.651082][T17494] bond19: option active_slave: mode dependency failed, not supported in mode balance-xor(2) [ 416.694807][T17494] bond19 (unregistering): Released all slaves [ 416.849979][T17495] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 416.911941][T17485] lo speed is unknown, defaulting to 1000 [ 416.940332][T17495] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 417.013188][T17509] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 417.184654][T17495] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 417.345421][T17495] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 417.580644][T17465] chnl_net:caif_netlink_parms(): no params data found [ 417.678287][T17531] ip6gretap4: entered promiscuous mode [ 417.745398][T17536] __nla_validate_parse: 3 callbacks suppressed [ 417.745417][T17536] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2954'. [ 417.764302][ T13] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 417.829342][ T6044] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 418.099699][T17549] netlink: 'syz.3.2957': attribute type 2 has an invalid length. [ 418.102644][ T5836] Bluetooth: hci0: command tx timeout [ 418.223744][T17553] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2957'. [ 418.233584][ T4516] dvmrp8 (unregistering): left allmulticast mode [ 418.253991][T17553] netlink: 'syz.3.2957': attribute type 1 has an invalid length. [ 418.572176][T17555] FAULT_INJECTION: forcing a failure. [ 418.572176][T17555] name failslab, interval 1, probability 0, space 0, times 0 [ 418.587168][T17555] CPU: 0 UID: 0 PID: 17555 Comm: syz.1.2958 Not tainted syzkaller #0 PREEMPT(full) [ 418.587193][T17555] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 418.587204][T17555] Call Trace: [ 418.587212][T17555] [ 418.587220][T17555] dump_stack_lvl+0xe8/0x150 [ 418.587248][T17555] should_fail_ex+0x414/0x560 [ 418.587280][T17555] should_failslab+0xa8/0x100 [ 418.587303][T17555] __kmalloc_cache_noprof+0x84/0x700 [ 418.587321][T17555] ? ovs_flow_cmd_new+0x294/0xd80 [ 418.587346][T17555] ovs_flow_cmd_new+0x294/0xd80 [ 418.587362][T17555] ? stack_depot_save_flags+0x33/0x810 [ 418.587387][T17555] ? __pfx_ovs_flow_cmd_new+0x10/0x10 [ 418.587452][T17555] ? rcu_is_watching+0x15/0xb0 [ 418.587476][T17555] ? __nla_parse+0x40/0x60 [ 418.587498][T17555] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 418.587525][T17555] genl_family_rcv_msg_doit+0x215/0x300 [ 418.587550][T17555] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 418.587581][T17555] ? bpf_lsm_capable+0x9/0x20 [ 418.587600][T17555] ? security_capable+0x7e/0x2e0 [ 418.587626][T17555] genl_rcv_msg+0x60e/0x790 [ 418.587651][T17555] ? __pfx_genl_rcv_msg+0x10/0x10 [ 418.587668][T17555] ? __pfx_ovs_flow_cmd_new+0x10/0x10 [ 418.587701][T17555] netlink_rcv_skb+0x208/0x470 [ 418.587725][T17555] ? __pfx_genl_rcv_msg+0x10/0x10 [ 418.587752][T17555] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 418.587772][T17555] ? genl_rcv+0x19/0x40 [ 418.587806][T17555] ? down_read+0x274/0x2e0 [ 418.587826][T17555] ? genl_rcv+0xd/0x40 [ 418.587845][T17555] genl_rcv+0x28/0x40 [ 418.587861][T17555] netlink_unicast+0x82f/0x9e0 [ 418.587891][T17555] ? __pfx_netlink_unicast+0x10/0x10 [ 418.587914][T17555] ? netlink_sendmsg+0x642/0xb30 [ 418.587935][T17555] ? skb_put+0x11b/0x210 [ 418.587958][T17555] netlink_sendmsg+0x805/0xb30 [ 418.587989][T17555] ? __pfx_netlink_sendmsg+0x10/0x10 [ 418.588016][T17555] ? aa_sock_msg_perm+0xf1/0x1b0 [ 418.588038][T17555] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 418.588055][T17555] ? __pfx_netlink_sendmsg+0x10/0x10 [ 418.588078][T17555] __sock_sendmsg+0x21c/0x270 [ 418.588106][T17555] ____sys_sendmsg+0x505/0x820 [ 418.588133][T17555] ? __pfx_____sys_sendmsg+0x10/0x10 [ 418.588161][T17555] ? import_iovec+0x74/0xa0 [ 418.588184][T17555] ___sys_sendmsg+0x21f/0x2a0 [ 418.588208][T17555] ? __pfx____sys_sendmsg+0x10/0x10 [ 418.588265][T17555] ? __fget_files+0x2a/0x420 [ 418.588285][T17555] ? __fget_files+0x3a0/0x420 [ 418.588316][T17555] __x64_sys_sendmsg+0x19b/0x260 [ 418.588340][T17555] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 418.588370][T17555] ? __pfx_ksys_write+0x10/0x10 [ 418.588400][T17555] do_syscall_64+0xec/0xf80 [ 418.588420][T17555] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 418.588435][T17555] ? trace_irq_disable+0x37/0x100 [ 418.588455][T17555] ? clear_bhb_loop+0x60/0xb0 [ 418.588476][T17555] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 418.588493][T17555] RIP: 0033:0x7f4f7938f749 [ 418.588509][T17555] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 418.588524][T17555] RSP: 002b:00007f4f7a19b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 418.588544][T17555] RAX: ffffffffffffffda RBX: 00007f4f795e5fa0 RCX: 00007f4f7938f749 [ 418.588557][T17555] RDX: 000000000000c000 RSI: 0000200000000080 RDI: 000000000000000d [ 418.588569][T17555] RBP: 00007f4f7a19b090 R08: 0000000000000000 R09: 0000000000000000 [ 418.588604][T17555] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 418.588615][T17555] R13: 00007f4f795e6038 R14: 00007f4f795e5fa0 R15: 00007ffc87468428 [ 418.588646][T17555] [ 419.124797][ T4516] bond0 (unregistering): Released all slaves [ 419.245760][ T4516] bond1 (unregistering): Released all slaves [ 419.258113][ T4516] bond2 (unregistering): Released all slaves [ 419.378903][ T4516] bond3 (unregistering): Released all slaves [ 419.508157][ T4516] bond4 (unregistering): Released all slaves [ 419.520572][ T4516] bond5 (unregistering): Released all slaves [ 419.534149][ T4516] bond6 (unregistering): Released all slaves [ 419.549219][ T4516] bond7 (unregistering): Released all slaves [ 419.563817][ T4516] bond8 (unregistering): Released all slaves [ 419.579422][ T4516] bond9 (unregistering): Released all slaves [ 419.594500][ T4516] bond10 (unregistering): Released all slaves [ 419.607054][ T4516] bond11 (unregistering): Released all slaves [ 419.622174][ T4516] bond12 (unregistering): Released all slaves [ 419.638791][ T4516] bond13 (unregistering): Released all slaves [ 419.756576][ T4516] bond14 (unregistering): (slave veth5): Releasing backup interface [ 419.765742][ T4516] bond14 (unregistering): Released all slaves [ 419.778531][ T4516] bond15 (unregistering): (slave veth9): Releasing active interface [ 419.789976][ T4516] bond15 (unregistering): Released all slaves [ 419.896509][ T4516] bond16 (unregistering): Released all slaves [ 420.002127][ T4516] bond17 (unregistering): Released all slaves [ 420.094066][ T2127] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 420.193718][ T5836] Bluetooth: hci0: command tx timeout [ 420.235604][T17465] bridge0: port 1(bridge_slave_0) entered blocking state [ 420.243061][T17465] bridge0: port 1(bridge_slave_0) entered disabled state [ 420.256082][T17465] bridge_slave_0: entered allmulticast mode [ 420.268886][T17465] bridge_slave_0: entered promiscuous mode [ 420.279360][T17465] bridge0: port 2(bridge_slave_1) entered blocking state [ 420.287345][T17465] bridge0: port 2(bridge_slave_1) entered disabled state [ 420.314546][T17465] bridge_slave_1: entered allmulticast mode [ 420.322951][T17465] bridge_slave_1: entered promiscuous mode [ 420.406978][ T3732] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 420.417528][ T4516] : left promiscuous mode [ 420.583835][ T4516] tipc: Left network mode [ 420.588516][T17465] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 420.662996][T17465] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 420.954890][T17590] bond3: option mode: unable to set because the bond device has slaves [ 420.995169][T17590] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2967'. [ 421.013680][T17596] bond3: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 421.027179][T17596] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 421.045388][T17587] netlink: 'syz.3.2968': attribute type 9 has an invalid length. [ 421.053233][T17587] netlink: 'syz.3.2968': attribute type 11 has an invalid length. [ 421.063121][T17587] netlink: 'syz.3.2968': attribute type 12 has an invalid length. [ 421.070983][T17587] netlink: 210020 bytes leftover after parsing attributes in process `syz.3.2968'. [ 421.084764][T17602] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 421.099589][T17465] team0: Port device team_slave_0 added [ 421.118578][T17603] netlink: 252 bytes leftover after parsing attributes in process `syz.4.2970'. [ 421.164665][T17465] team0: Port device team_slave_1 added [ 421.225471][T17607] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2972'. [ 421.336075][T17465] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 421.344327][T17613] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2974'. [ 421.358602][T17465] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 421.392008][T17465] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 421.435120][T17465] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 421.447797][T17465] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 421.478407][T17465] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 421.497973][T17618] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2974'. [ 421.596787][T17465] hsr_slave_0: entered promiscuous mode [ 421.604342][T17465] hsr_slave_1: entered promiscuous mode [ 421.610809][T17465] debugfs: 'hsr0' already exists in 'hsr' [ 421.616792][T17465] Cannot create hsr debugfs directory [ 421.924321][T17632] netlink: 92 bytes leftover after parsing attributes in process `syz.4.2978'. [ 422.261886][ T5836] Bluetooth: hci0: command tx timeout [ 423.608308][T17624] erspan0: entered promiscuous mode [ 423.617098][T17624] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2977'. [ 423.627462][T17626] netlink: 'syz.4.2978': attribute type 4 has an invalid length. [ 423.734086][T17643] netlink: 5 bytes leftover after parsing attributes in process `syz.1.2981'. [ 423.776248][T17642] netlink: 5 bytes leftover after parsing attributes in process `syz.1.2981'. [ 423.840960][ T39] lo speed is unknown, defaulting to 1000 [ 423.856911][ T39] syz2: Port: 1 Link ACTIVE [ 423.903691][T17648] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2982'. [ 423.924100][T17649] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2982'. [ 423.954246][T17648] Cannot find del_set index 4 as target [ 424.060231][ T4516] IPVS: stop unused estimator thread 0... [ 424.077637][T17655] lo speed is unknown, defaulting to 1000 [ 424.265556][T17664] x_tables: ip_tables: ah match: only valid for protocol 51 [ 424.342867][ T5836] Bluetooth: hci0: command tx timeout [ 424.408902][T17662] lo speed is unknown, defaulting to 1000 [ 424.525014][T17671] netlink: 'syz.3.2990': attribute type 4 has an invalid length. [ 424.593358][T17677] netlink: 'syz.3.2990': attribute type 4 has an invalid length. [ 424.613022][T17674] netlink: 'syz.4.2992': attribute type 2 has an invalid length. [ 424.754004][T17681] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2993'. [ 424.997849][T17691] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 425.139096][T17465] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 425.170226][T17465] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 425.222344][T17465] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 425.250006][T17465] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 425.267818][T17699] Bluetooth: MGMT ver 1.23 [ 425.287365][T17695] netlink: 428 bytes leftover after parsing attributes in process `syz.4.2997'. [ 425.315881][T17695] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2997'. [ 425.670428][T17465] 8021q: adding VLAN 0 to HW filter on device bond0 [ 425.720754][T17465] 8021q: adding VLAN 0 to HW filter on device team0 [ 425.757768][ T2127] bridge0: port 1(bridge_slave_0) entered blocking state [ 425.764972][ T2127] bridge0: port 1(bridge_slave_0) entered forwarding state [ 425.802111][ T2127] bridge0: port 2(bridge_slave_1) entered blocking state [ 425.809296][ T2127] bridge0: port 2(bridge_slave_1) entered forwarding state [ 425.819896][T17728] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3002'. [ 425.979078][T17731] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 426.094246][T17731] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 426.189275][T17731] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 426.290893][T17731] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 426.361310][T17465] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 426.466463][ T6044] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 426.496492][ T6044] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 426.537647][T17747] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 426.555482][T17747] bond0: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 426.569872][T17747] bond0: (slave ipvlan2): Error -95 calling set_mac_address [ 426.603020][ T6044] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 426.615906][ T6044] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 426.656972][T17465] veth0_vlan: entered promiscuous mode [ 426.669470][ T30] audit: type=1804 audit(1768761455.580:8): pid=17755 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.3010" name="/newroot/17/cgroup.controllers" dev="tmpfs" ino=104 res=1 errno=0 [ 426.681699][T17759] netlink: 72 bytes leftover after parsing attributes in process `syz.3.3011'. [ 426.700935][ T30] audit: type=1800 audit(1768761455.580:9): pid=17755 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3010" name="cgroup.controllers" dev="tmpfs" ino=104 res=0 errno=0 [ 426.707578][T17465] veth1_vlan: entered promiscuous mode [ 426.778200][T17465] veth0_macvtap: entered promiscuous mode [ 426.797542][T17465] veth1_macvtap: entered promiscuous mode [ 426.825404][T17465] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 426.846119][T17465] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 426.864440][ T6044] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 426.908391][ T6044] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 426.950394][ T6044] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 426.967675][ T6044] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 427.020602][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 427.040718][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 427.075400][ T6044] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 427.088456][ T6044] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 427.454515][T17776] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 427.599970][T17781] netlink: 'syz.1.3020': attribute type 3 has an invalid length. [ 427.822557][ T5842] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 427.832723][ T5842] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 427.841144][ T5842] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 427.853482][ T5842] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 427.865307][ T5842] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 427.874933][T17791] netlink: 'syz.4.3022': attribute type 11 has an invalid length. [ 428.259697][T17799] lo speed is unknown, defaulting to 1000 [ 428.274146][T17790] lo speed is unknown, defaulting to 1000 [ 428.364840][T17808] No such timeout policy "syz1" [ 428.659830][T17825] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 428.845136][T17790] chnl_net:caif_netlink_parms(): no params data found [ 429.053621][T17843] bridge0: port 3(erspan0) entered blocking state [ 429.061104][T17843] bridge0: port 3(erspan0) entered disabled state [ 429.069328][T17843] erspan0: entered allmulticast mode [ 429.088501][T17843] erspan0: entered promiscuous mode [ 429.096818][T17843] bridge0: port 3(erspan0) entered blocking state [ 429.103389][T17843] bridge0: port 3(erspan0) entered forwarding state [ 429.163474][T17790] bridge0: port 1(bridge_slave_0) entered blocking state [ 429.170740][T17790] bridge0: port 1(bridge_slave_0) entered disabled state [ 429.192006][T17790] bridge_slave_0: entered allmulticast mode [ 429.199824][T17790] bridge_slave_0: entered promiscuous mode [ 429.222420][T17855] __nla_validate_parse: 3 callbacks suppressed [ 429.222437][T17855] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3040'. [ 429.226768][T17790] bridge0: port 2(bridge_slave_1) entered blocking state [ 429.248651][T17790] bridge0: port 2(bridge_slave_1) entered disabled state [ 429.261426][T17857] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 429.272010][T17790] bridge_slave_1: entered allmulticast mode [ 429.279663][T17790] bridge_slave_1: entered promiscuous mode [ 429.287467][T17855] hsr_slave_0: left promiscuous mode [ 429.293913][T17855] hsr_slave_1: left promiscuous mode [ 429.392860][T17790] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 429.414161][T17790] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 429.497295][T17790] team0: Port device team_slave_0 added [ 429.522328][T17790] team0: Port device team_slave_1 added [ 429.564785][T17790] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 429.572157][T17790] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 429.613963][T17790] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 429.645658][T17790] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 429.662288][T17790] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 429.713659][T17790] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 429.762947][T17882] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3050'. [ 429.780406][T17882] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3050'. [ 429.823106][T17790] hsr_slave_0: entered promiscuous mode [ 429.843424][T17790] hsr_slave_1: entered promiscuous mode [ 429.850942][T17790] debugfs: 'hsr0' already exists in 'hsr' [ 429.856848][T17790] Cannot create hsr debugfs directory [ 429.881655][T17888] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3051'. [ 429.944642][ T5836] Bluetooth: hci1: command tx timeout [ 430.059889][T17898] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 430.215964][T17900] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3055'. [ 430.247399][T17900] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3055'. [ 430.353861][T17906] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3057'. [ 430.531946][T17915] debugfs: 'netdev:syzkaller0' already exists in 'phy11' [ 430.550313][T17915] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3058'. [ 430.710992][T17790] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 430.724281][T17790] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 430.737034][T17790] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 430.752590][T17790] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 430.863482][T17790] 8021q: adding VLAN 0 to HW filter on device bond0 [ 430.899216][T17790] 8021q: adding VLAN 0 to HW filter on device team0 [ 430.915047][ T4516] bridge0: port 1(bridge_slave_0) entered blocking state [ 430.922280][ T4516] bridge0: port 1(bridge_slave_0) entered forwarding state [ 430.948872][ T4516] bridge0: port 2(bridge_slave_1) entered blocking state [ 430.956111][ T4516] bridge0: port 2(bridge_slave_1) entered forwarding state [ 431.052951][T17938] netlink: 9 bytes leftover after parsing attributes in process `syz.4.3062'. [ 431.068904][T17938] .70·: renamed from hsr0 (while UP) [ 431.085758][T17938] .70·: entered allmulticast mode [ 431.097060][T17938] hsr_slave_0: entered allmulticast mode [ 431.103849][T17938] hsr_slave_1: entered allmulticast mode [ 431.110557][T17938] A link change request failed with some changes committed already. Interface .70· may have been left with an inconsistent configuration, please check. [ 431.272799][T17790] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 431.365568][T17790] veth0_vlan: entered promiscuous mode [ 431.404451][T17953] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3066'. [ 431.445556][T17790] veth1_vlan: entered promiscuous mode [ 431.515055][T17790] veth0_macvtap: entered promiscuous mode [ 431.540330][T17790] veth1_macvtap: entered promiscuous mode [ 431.588786][T17790] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 431.607953][T17959] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 431.614679][T17790] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 431.615249][T17959] IPv6: NLM_F_CREATE should be set when creating new route [ 431.646047][ T2113] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 431.669547][ T2113] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 431.715831][ T2113] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 431.727920][ T2113] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 431.799402][T17970] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 431.885082][ T2113] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 431.901315][ T2113] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 431.994000][ T75] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 432.012251][ T75] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 432.026197][ T5836] Bluetooth: hci1: command tx timeout [ 432.464450][T18007] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 432.632160][ T5842] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 432.645831][ T5842] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 432.654526][ T5842] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 432.674630][ T5842] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 432.683770][ T5842] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 432.896159][T18014] lo speed is unknown, defaulting to 1000 [ 432.995052][T18019] lo speed is unknown, defaulting to 1000 [ 433.262458][T18052] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 433.449820][T18058] bond20: option ad_actor_sys_prio: mode dependency failed, not supported in mode broadcast(3) [ 433.465403][T18058] bond20 (unregistering): Released all slaves [ 433.558750][T18060] x_tables: duplicate underflow at hook 1 [ 433.717748][T18071] FAULT_INJECTION: forcing a failure. [ 433.717748][T18071] name failslab, interval 1, probability 0, space 0, times 0 [ 433.786187][T18071] CPU: 0 UID: 0 PID: 18071 Comm: syz.0.3099 Not tainted syzkaller #0 PREEMPT(full) [ 433.786225][T18071] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 433.786236][T18071] Call Trace: [ 433.786243][T18071] [ 433.786252][T18071] dump_stack_lvl+0xe8/0x150 [ 433.786279][T18071] should_fail_ex+0x414/0x560 [ 433.786310][T18071] should_failslab+0xa8/0x100 [ 433.786332][T18071] __kmalloc_noprof+0xdf/0x800 [ 433.786347][T18071] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 433.786364][T18071] ? rcu_is_watching+0x15/0xb0 [ 433.786383][T18071] genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 433.786397][T18071] ? is_bpf_text_address+0x292/0x2b0 [ 433.786428][T18071] genl_family_rcv_msg_doit+0xb8/0x300 [ 433.786451][T18071] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 433.786478][T18071] ? apparmor_capable+0x137/0x1a0 [ 433.786497][T18071] ? bpf_lsm_capable+0x9/0x20 [ 433.786515][T18071] ? security_capable+0x7e/0x2e0 [ 433.786541][T18071] genl_rcv_msg+0x60e/0x790 [ 433.786566][T18071] ? __pfx_genl_rcv_msg+0x10/0x10 [ 433.786581][T18071] ? __pfx_nl802154_pre_doit+0x10/0x10 [ 433.786596][T18071] ? __pfx_nl802154_del_llsec_devkey+0x10/0x10 [ 433.786615][T18071] ? __pfx_nl802154_post_doit+0x10/0x10 [ 433.786645][T18071] netlink_rcv_skb+0x208/0x470 [ 433.786668][T18071] ? __pfx_genl_rcv_msg+0x10/0x10 [ 433.786684][T18071] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 433.786701][T18071] ? genl_rcv+0x19/0x40 [ 433.786731][T18071] ? down_read+0x274/0x2e0 [ 433.786749][T18071] ? genl_rcv+0xd/0x40 [ 433.786768][T18071] genl_rcv+0x28/0x40 [ 433.786783][T18071] netlink_unicast+0x82f/0x9e0 [ 433.786811][T18071] ? __pfx_netlink_unicast+0x10/0x10 [ 433.786834][T18071] ? netlink_sendmsg+0x642/0xb30 [ 433.786854][T18071] ? skb_put+0x11b/0x210 [ 433.786877][T18071] netlink_sendmsg+0x805/0xb30 [ 433.786908][T18071] ? __pfx_netlink_sendmsg+0x10/0x10 [ 433.786935][T18071] ? aa_sock_msg_perm+0xf1/0x1b0 [ 433.786958][T18071] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 433.786975][T18071] ? __pfx_netlink_sendmsg+0x10/0x10 [ 433.786999][T18071] __sock_sendmsg+0x21c/0x270 [ 433.787047][T18071] ____sys_sendmsg+0x505/0x820 [ 433.787075][T18071] ? __pfx_____sys_sendmsg+0x10/0x10 [ 433.787106][T18071] ? import_iovec+0x74/0xa0 [ 433.787130][T18071] ___sys_sendmsg+0x21f/0x2a0 [ 433.787153][T18071] ? __pfx____sys_sendmsg+0x10/0x10 [ 433.787214][T18071] ? __fget_files+0x2a/0x420 [ 433.787234][T18071] ? __fget_files+0x3a0/0x420 [ 433.787264][T18071] __x64_sys_sendmsg+0x19b/0x260 [ 433.787288][T18071] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 433.787320][T18071] ? __pfx_ksys_write+0x10/0x10 [ 433.787350][T18071] do_syscall_64+0xec/0xf80 [ 433.787370][T18071] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 433.787387][T18071] ? trace_irq_disable+0x37/0x100 [ 433.787407][T18071] ? clear_bhb_loop+0x60/0xb0 [ 433.787428][T18071] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 433.787442][T18071] RIP: 0033:0x7f37d358f749 [ 433.787459][T18071] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 433.787473][T18071] RSP: 002b:00007f37d43ca038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 433.787492][T18071] RAX: ffffffffffffffda RBX: 00007f37d37e5fa0 RCX: 00007f37d358f749 [ 433.787505][T18071] RDX: 0000000020000004 RSI: 00002000000000c0 RDI: 0000000000000004 [ 433.787516][T18071] RBP: 00007f37d43ca090 R08: 0000000000000000 R09: 0000000000000000 [ 433.787527][T18071] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 433.787538][T18071] R13: 00007f37d37e6038 R14: 00007f37d37e5fa0 R15: 00007ffc37e9b938 [ 433.787569][T18071] [ 434.150368][T18014] chnl_net:caif_netlink_parms(): no params data found [ 434.163619][ T5842] Bluetooth: hci1: command tx timeout [ 434.439952][T18095] __nla_validate_parse: 7 callbacks suppressed [ 434.439971][T18095] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3101'. [ 434.497402][T18087] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3101'. [ 434.517052][T18087] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3101'. [ 434.518717][T18014] bridge0: port 1(bridge_slave_0) entered blocking state [ 434.535879][T18014] bridge0: port 1(bridge_slave_0) entered disabled state [ 434.543240][T18014] bridge_slave_0: entered allmulticast mode [ 434.550961][T18014] bridge_slave_0: entered promiscuous mode [ 434.561682][T18014] bridge0: port 2(bridge_slave_1) entered blocking state [ 434.568909][T18014] bridge0: port 2(bridge_slave_1) entered disabled state [ 434.576259][T18014] bridge_slave_1: entered allmulticast mode [ 434.585735][T18014] bridge_slave_1: entered promiscuous mode [ 434.640521][T18087] macvlan0: entered allmulticast mode [ 434.649496][T18087] veth1_vlan: entered allmulticast mode [ 434.660723][T18014] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 434.674857][T18014] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 434.741678][ T5842] Bluetooth: hci4: command tx timeout [ 434.754867][T18014] team0: Port device team_slave_0 added [ 434.758541][T18107] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 434.763849][T18014] team0: Port device team_slave_1 added [ 434.825806][T18014] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 434.832949][T18014] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 434.834562][T18111] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3110'. [ 434.859277][T18014] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 434.869574][T18014] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 434.869592][T18014] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 434.869617][T18014] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 434.960579][T18111] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3110'. [ 434.974092][T18111] FAULT_INJECTION: forcing a failure. [ 434.974092][T18111] name failslab, interval 1, probability 0, space 0, times 0 [ 434.983559][T18014] hsr_slave_0: entered promiscuous mode [ 434.989865][T18111] CPU: 1 UID: 0 PID: 18111 Comm: syz.2.3110 Not tainted syzkaller #0 PREEMPT(full) [ 434.989895][T18111] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 434.989907][T18111] Call Trace: [ 434.989915][T18111] [ 434.989983][T18111] dump_stack_lvl+0xe8/0x150 [ 434.990026][T18111] should_fail_ex+0x414/0x560 [ 434.990060][T18111] should_failslab+0xa8/0x100 [ 434.990082][T18111] kmem_cache_alloc_node_noprof+0x8c/0x720 [ 434.990116][T18111] ? __alloc_skb+0x1d5/0x720 [ 434.990133][T18111] ? __local_bh_enable_ip+0xd0/0x130 [ 434.990152][T18111] ? __alloc_skb+0x190/0x720 [ 434.990171][T18111] __alloc_skb+0x1d5/0x720 [ 434.990194][T18111] netlink_ack+0x146/0xa50 [ 434.990214][T18111] ? __pfx_genl_rcv_msg+0x10/0x10 [ 434.990231][T18111] ? __pfx_nl802154_pre_doit+0x10/0x10 [ 434.990248][T18111] ? __pfx_nl802154_post_doit+0x10/0x10 [ 434.990278][T18111] netlink_rcv_skb+0x28c/0x470 [ 434.990300][T18111] ? __pfx_genl_rcv_msg+0x10/0x10 [ 434.990319][T18111] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 434.990338][T18111] ? genl_rcv+0x19/0x40 [ 434.990370][T18111] ? down_read+0x274/0x2e0 [ 434.990389][T18111] ? genl_rcv+0xd/0x40 [ 434.990407][T18111] genl_rcv+0x28/0x40 [ 434.990423][T18111] netlink_unicast+0x82f/0x9e0 [ 434.990451][T18111] ? __pfx_netlink_unicast+0x10/0x10 [ 434.990473][T18111] ? netlink_sendmsg+0x642/0xb30 [ 434.990492][T18111] ? skb_put+0x11b/0x210 [ 434.990514][T18111] netlink_sendmsg+0x805/0xb30 [ 434.990545][T18111] ? __pfx_netlink_sendmsg+0x10/0x10 [ 434.990570][T18111] ? aa_sock_msg_perm+0xf1/0x1b0 [ 434.990592][T18111] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 434.990608][T18111] ? __pfx_netlink_sendmsg+0x10/0x10 [ 434.990631][T18111] __sock_sendmsg+0x21c/0x270 [ 434.990658][T18111] ____sys_sendmsg+0x505/0x820 [ 434.990683][T18111] ? __pfx_____sys_sendmsg+0x10/0x10 [ 434.990711][T18111] ? import_iovec+0x74/0xa0 [ 434.990734][T18111] ___sys_sendmsg+0x21f/0x2a0 [ 434.990756][T18111] ? __pfx____sys_sendmsg+0x10/0x10 [ 434.990813][T18111] ? __fget_files+0x2a/0x420 [ 434.990832][T18111] ? __fget_files+0x3a0/0x420 [ 434.990861][T18111] __x64_sys_sendmsg+0x19b/0x260 [ 434.990883][T18111] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 434.990912][T18111] ? __pfx_ksys_write+0x10/0x10 [ 434.990939][T18111] do_syscall_64+0xec/0xf80 [ 434.990958][T18111] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 434.990973][T18111] ? trace_irq_disable+0x37/0x100 [ 434.990993][T18111] ? clear_bhb_loop+0x60/0xb0 [ 434.991020][T18111] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 434.991040][T18111] RIP: 0033:0x7f742318f749 [ 434.991059][T18111] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 434.991073][T18111] RSP: 002b:00007f7423f6b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 434.991098][T18111] RAX: ffffffffffffffda RBX: 00007f74233e5fa0 RCX: 00007f742318f749 [ 434.991111][T18111] RDX: 0000000020000004 RSI: 00002000000000c0 RDI: 0000000000000004 [ 434.991123][T18111] RBP: 00007f7423f6b090 R08: 0000000000000000 R09: 0000000000000000 [ 434.991133][T18111] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 434.991143][T18111] R13: 00007f74233e6038 R14: 00007f74233e5fa0 R15: 00007fff2ca7e218 [ 434.991172][T18111] [ 435.324206][T18014] hsr_slave_1: entered promiscuous mode [ 435.326592][T18118] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3114'. [ 435.330574][T18014] debugfs: 'hsr0' already exists in 'hsr' [ 435.344536][T18014] Cannot create hsr debugfs directory [ 435.350260][T18122] netlink: 88 bytes leftover after parsing attributes in process `syz.0.3115'. [ 435.463614][T18128] xt_hashlimit: size too large, truncated to 1048576 [ 435.515486][T18129] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3117'. [ 435.523888][T18128] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 435.793042][T18142] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3123'. [ 435.813778][T18143] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3121'. [ 435.834009][T18142] FAULT_INJECTION: forcing a failure. [ 435.834009][T18142] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 435.856847][T18142] CPU: 0 UID: 0 PID: 18142 Comm: syz.3.3123 Not tainted syzkaller #0 PREEMPT(full) [ 435.856875][T18142] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 435.856885][T18142] Call Trace: [ 435.856893][T18142] [ 435.856902][T18142] dump_stack_lvl+0xe8/0x150 [ 435.856930][T18142] should_fail_ex+0x414/0x560 [ 435.856961][T18142] _copy_from_user+0x2d/0xb0 [ 435.856986][T18142] kstrtouint_from_user+0xc4/0x170 [ 435.857007][T18142] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 435.857042][T18142] proc_fail_nth_write+0x88/0x200 [ 435.857062][T18142] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 435.857086][T18142] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 435.857105][T18142] vfs_write+0x27e/0xb30 [ 435.857132][T18142] ? __pfx_vfs_write+0x10/0x10 [ 435.857150][T18142] ? __fget_files+0x2a/0x420 [ 435.857175][T18142] ? __fget_files+0x3a0/0x420 [ 435.857194][T18142] ? __fget_files+0x2a/0x420 [ 435.857223][T18142] ksys_write+0x145/0x250 [ 435.857242][T18142] ? __pfx_ksys_write+0x10/0x10 [ 435.857271][T18142] do_syscall_64+0xec/0xf80 [ 435.857292][T18142] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 435.857317][T18142] ? trace_irq_disable+0x37/0x100 [ 435.857337][T18142] ? clear_bhb_loop+0x60/0xb0 [ 435.857358][T18142] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 435.857375][T18142] RIP: 0033:0x7fddea58e1ff [ 435.857392][T18142] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 435.857407][T18142] RSP: 002b:00007fddeb42d030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 435.857426][T18142] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fddea58e1ff [ 435.857439][T18142] RDX: 0000000000000001 RSI: 00007fddeb42d0a0 RDI: 0000000000000003 [ 435.857450][T18142] RBP: 00007fddeb42d090 R08: 0000000000000000 R09: 0000000000000000 [ 435.857461][T18142] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 435.857472][T18142] R13: 00007fddea7e6038 R14: 00007fddea7e5fa0 R15: 00007ffe28d05d28 [ 435.857502][T18142] [ 436.151188][T18145] IPv6: Can't replace route, no match found [ 436.182326][ T5842] Bluetooth: hci1: command tx timeout [ 436.261045][T18150] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 436.354860][T18154] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 436.401648][T18154] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 436.423423][T18154] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 436.612245][T18169] netlink: 'syz.4.3132': attribute type 1 has an invalid length. [ 436.619841][T18170] netlink: 'syz.3.3131': attribute type 3 has an invalid length. [ 436.667850][T18170] netlink: 'syz.3.3131': attribute type 3 has an invalid length. [ 436.793992][T18014] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 436.813162][T18014] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 436.821394][ T5836] Bluetooth: hci4: command tx timeout [ 436.827149][T18014] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 436.836536][T18184] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 436.848720][T18014] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 437.038910][T18014] 8021q: adding VLAN 0 to HW filter on device bond0 [ 437.066791][T18014] 8021q: adding VLAN 0 to HW filter on device team0 [ 437.079152][T18199] lo speed is unknown, defaulting to 1000 [ 437.087695][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 437.094952][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 437.114163][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 437.121390][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 437.568306][T18014] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 437.667308][T18014] veth0_vlan: entered promiscuous mode [ 437.704466][T18014] veth1_vlan: entered promiscuous mode [ 437.790800][T18014] veth0_macvtap: entered promiscuous mode [ 437.806042][T18014] veth1_macvtap: entered promiscuous mode [ 437.854056][T18230] netlink: 'syz.0.3148': attribute type 1 has an invalid length. [ 437.868339][T18230] netlink: 'syz.0.3148': attribute type 1 has an invalid length. [ 437.942735][T18230] bond1: entered promiscuous mode [ 437.975786][T18230] bond1: entered allmulticast mode [ 437.989564][T18230] 8021q: adding VLAN 0 to HW filter on device bond1 [ 438.019448][T18014] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 438.079610][T18014] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 438.109123][ T2127] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 438.136451][ T2127] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 438.172041][ T2127] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 438.196207][ T2127] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 438.413455][ T75] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 438.432264][ T75] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 438.507740][ T75] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 438.539762][ T75] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 438.563911][T18243] lo speed is unknown, defaulting to 1000 [ 438.682607][T18236] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 438.716569][T18249] netlink: 'syz.1.3079': attribute type 1 has an invalid length. [ 438.902359][ T5836] Bluetooth: hci4: command 0x040f tx timeout [ 439.056968][T18265] xt_cluster: you have exceeded the maximum number of cluster nodes (2597 > 32) [ 439.098320][T18268] bond2: option arp_interval: invalid value (18446744073709551615) [ 439.118663][T18268] bond2: option arp_interval: allowed values 0 - 2147483647 [ 439.132180][T18268] bond2 (unregistering): Released all slaves [ 439.223842][T18260] bond2: option arp_interval: invalid value (18446744073709551615) [ 439.245092][T18260] bond2: option arp_interval: allowed values 0 - 2147483647 [ 439.274749][T18260] bond2 (unregistering): Released all slaves [ 439.323004][T18261] syzkaller0: entered promiscuous mode [ 439.328736][T18261] syzkaller0: entered allmulticast mode [ 439.514491][T18286] __nla_validate_parse: 9 callbacks suppressed [ 439.514507][T18286] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3161'. [ 439.530327][T18286] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3161'. [ 439.652758][T18297] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3164'. [ 439.678277][T18299] sctp: [Deprecated]: syz.3.3165 (pid 18299) Use of int in max_burst socket option. [ 439.678277][T18299] Use struct sctp_assoc_value instead [ 439.766097][T18302] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 439.848329][T18306] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3169'. [ 439.924086][T18309] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3170'. [ 440.034122][T18321] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 440.132768][T18327] netlink: 'syz.0.3176': attribute type 1 has an invalid length. [ 440.141055][T18327] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3176'. [ 440.157431][T18329] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.3175'. [ 440.255583][T18333] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3176'. [ 440.265842][T18333] netlink: 'syz.0.3176': attribute type 1 has an invalid length. [ 440.438854][ T60] bond10 (unregistering): (slave ip6gretap2): Releasing backup interface [ 440.474000][ T60] bond11 (unregistering): (slave ip6gretap3): Releasing active interface [ 440.483748][ T60] bond11 (unregistering): (slave ip6gretap3): the permanent HWaddr of slave - 36:96:40:de:86:c0 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 440.811010][ T60] bond5 (unregistering): (slave gretap1): Releasing active interface [ 440.981464][ T5842] Bluetooth: hci4: command 0x040f tx timeout [ 441.058576][T18358] xt_hashlimit: size too large, truncated to 1048576 [ 441.067510][T18358] xt_hashlimit: max too large, truncated to 1048576 [ 441.331577][T18363] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3182'. [ 441.486667][ T60] .` (unregistering): Released all slaves [ 441.499027][ T60] bond1 (unregistering): Released all slaves [ 441.626407][ T60] bond2 (unregistering): Released all slaves [ 441.639410][ T60] bond3 (unregistering): Released all slaves [ 441.653920][ T60] bond4 (unregistering): Released all slaves [ 441.789674][ T60] bond5 (unregistering): Released all slaves [ 441.802584][ T60] bond6 (unregistering): Released all slaves [ 441.815208][ T60] bond7 (unregistering): Released all slaves [ 441.829151][ T60] bond8 (unregistering): Released all slaves [ 441.843350][ T60] bond9 (unregistering): Released all slaves [ 441.992532][ T60] bond10 (unregistering): Released all slaves [ 442.140922][ T60] bond11 (unregistering): (slave veth3): Releasing active interface [ 442.150343][ T60] bond11 (unregistering): Released all slaves [ 442.164724][ T60] bond12 (unregistering): Released all slaves [ 442.177475][ T60] bond13 (unregistering): Released all slaves [ 442.201011][ T60] bond14 (unregistering): Released all slaves [ 442.216899][ T60] bond15 (unregistering): Released all slaves [ 442.229843][ T60] bond16 (unregistering): Released all slaves [ 442.246346][ T60] bond17 (unregistering): Released all slaves [ 442.266564][ T60] bond18 (unregistering): Released all slaves [ 442.400886][ T60] bond19 (unregistering): Released all slaves [ 442.414633][ T60] bond0 (unregistering): Released all slaves [ 442.592223][T18367] netlink: 'syz.1.3185': attribute type 1 has an invalid length. [ 442.669875][T18367] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3185'. [ 442.689398][ T60] tipc: Disabling bearer [ 442.730879][ T60] tipc: Left network mode [ 442.769018][T18367] ip6erspan0: entered allmulticast mode [ 442.938787][T18390] netlink: 'syz.2.3187': attribute type 6 has an invalid length. [ 443.037200][T18394] netlink: 'syz.2.3187': attribute type 6 has an invalid length. [ 443.071260][ T5842] Bluetooth: hci4: command 0x040f tx timeout [ 443.561052][T18418] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 443.828828][T18441] netlink: 'syz.0.3196': attribute type 3 has an invalid length. [ 443.882051][ T5991] IPVS: starting estimator thread 0... [ 443.928471][T18432] bridge0: entered promiscuous mode [ 443.942862][T18432] macvtap1: entered promiscuous mode [ 443.964965][T18432] macvtap1: entered allmulticast mode [ 443.991341][T18445] IPVS: using max 27 ests per chain, 64800 per kthread [ 443.994029][T18432] bridge0: entered allmulticast mode [ 444.231073][T18435] bridge0: left allmulticast mode [ 444.242014][T18435] bridge0: left promiscuous mode [ 444.296125][T18456] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 444.642401][ T60] hsr_slave_0: left promiscuous mode [ 444.875843][T18491] __nla_validate_parse: 6 callbacks suppressed [ 444.875862][T18491] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3207'. [ 444.969950][T18498] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3205'. [ 446.055662][T18491] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 446.102013][T18491] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 446.103701][T18472] lo speed is unknown, defaulting to 1000 [ 446.138386][T18491] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 446.329896][T18524] bond0: (slave gre0): Error: Device type is different from other slaves [ 446.459100][T18536] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3212'. [ 446.782538][T18552] netlink: 'syz.0.3215': attribute type 1 has an invalid length. [ 446.805485][T18553] netlink: 'syz.0.3215': attribute type 1 has an invalid length. [ 446.923577][T18561] openvswitch: netlink: IP tunnel dst address not specified [ 446.942424][T18554] delete_channel: no stack [ 447.005972][T18552] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 447.122233][T18553] 8021q: adding VLAN 0 to HW filter on device bond2 [ 447.318931][T18586] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3219'. [ 449.329096][ T60] IPVS: stop unused estimator thread 0... [ 449.532826][T18611] sch_tbf: burst 2 is lower than device syzkaller0 mtu (1514) ! [ 449.592205][T18618] tipc: Enabling of bearer rejected, failed to enable media [ 449.599541][T18620] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3227'. [ 449.738278][T18623] bridge0: port 3(erspan0) entered disabled state [ 449.780928][T18623] bridge0: port 1(bridge_slave_0) entered disabled state [ 449.833148][T18628] netlink: 'syz.0.3226': attribute type 16 has an invalid length. [ 449.868986][T18623] bridge0: port 2(bridge_slave_1) entered disabled state [ 449.895066][T18628] netlink: 'syz.0.3226': attribute type 17 has an invalid length. [ 450.015057][T18628] bridge0: port 3(erspan0) entered blocking state [ 450.021739][T18628] bridge0: port 3(erspan0) entered forwarding state [ 450.093245][T18628] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 450.150861][T18631] syzkaller1: entered promiscuous mode [ 450.157191][T18631] syzkaller1: entered allmulticast mode [ 450.183431][ T5836] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 450.193403][ T5836] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 450.208321][ T5836] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 450.230064][ T5836] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 450.238271][ T5836] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 450.322353][T18622] lo speed is unknown, defaulting to 1000 [ 450.437962][T18635] lo speed is unknown, defaulting to 1000 [ 450.464207][T18638] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3231'. [ 450.890843][T18648] tipc: Enabling of bearer rejected, failed to enable media [ 450.900541][T18643] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3231'. [ 451.016418][T18646] lo speed is unknown, defaulting to 1000 [ 451.118132][T18647] delete_channel: no stack [ 451.673270][T18676] bond1: Removing last ns target with arp_interval on [ 451.743331][T18676] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3239'. [ 451.746909][T18683] FAULT_INJECTION: forcing a failure. [ 451.746909][T18683] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 451.778601][T18683] CPU: 1 UID: 0 PID: 18683 Comm: syz.4.3238 Not tainted syzkaller #0 PREEMPT(full) [ 451.778628][T18683] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 451.778639][T18683] Call Trace: [ 451.778647][T18683] [ 451.778654][T18683] dump_stack_lvl+0xe8/0x150 [ 451.778682][T18683] should_fail_ex+0x414/0x560 [ 451.778713][T18683] _copy_from_user+0x2d/0xb0 [ 451.778735][T18683] do_sock_getsockopt+0x15c/0x3d0 [ 451.778759][T18683] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 451.778780][T18683] ? __fget_files+0x3a0/0x420 [ 451.778800][T18683] ? __fget_files+0x2a/0x420 [ 451.778826][T18683] __x64_sys_getsockopt+0x1a5/0x250 [ 451.778855][T18683] do_syscall_64+0xec/0xf80 [ 451.778876][T18683] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 451.778893][T18683] ? trace_irq_disable+0x37/0x100 [ 451.778913][T18683] ? clear_bhb_loop+0x60/0xb0 [ 451.778934][T18683] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 451.778951][T18683] RIP: 0033:0x7f3d44d8f749 [ 451.778967][T18683] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 451.778983][T18683] RSP: 002b:00007f3d42ff6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 451.779002][T18683] RAX: ffffffffffffffda RBX: 00007f3d44fe6090 RCX: 00007f3d44d8f749 [ 451.779016][T18683] RDX: 0000000000000484 RSI: 0000000000000000 RDI: 0000000000000003 [ 451.779027][T18683] RBP: 00007f3d42ff6090 R08: 0000200000000100 R09: 0000000000000000 [ 451.779039][T18683] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000001 [ 451.779051][T18683] R13: 00007f3d44fe6128 R14: 00007f3d44fe6090 R15: 00007ffc0b1c4928 [ 451.779081][T18683] [ 451.779196][T18680] IPVS: Scheduler module ip_vs_ not found [ 451.930930][T18635] chnl_net:caif_netlink_parms(): no params data found [ 451.958769][T18690] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3242'. [ 451.988786][T18690] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3242'. [ 452.149987][T18701] netlink: 'syz.3.3247': attribute type 10 has an invalid length. [ 452.168281][T18701] team0: Failed to send options change via netlink (err -105) [ 452.202936][T18706] netlink: 'syz.3.3247': attribute type 10 has an invalid length. [ 452.231901][T18701] team0: Port device dummy0 added [ 452.250614][T18706] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 452.262718][ T5842] Bluetooth: hci2: command tx timeout [ 452.287636][T18710] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3248'. [ 452.298972][T18706] team0: Failed to send options change via netlink (err -105) [ 452.310110][T18706] team0: Failed to send port change of device dummy0 via netlink (err -105) [ 452.320918][T18706] team0: Port device dummy0 removed [ 452.330265][T18706] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 452.353093][T18713] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3248'. [ 452.488593][T18724] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3250'. [ 452.512154][T18712] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3249'. [ 452.531881][T18724] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3250'. [ 452.576040][T18724] vcan0: tx drop: invalid sa for name 0xfffffffffffffffc [ 452.614249][T18635] bridge0: port 1(bridge_slave_0) entered blocking state [ 452.627149][T18635] bridge0: port 1(bridge_slave_0) entered disabled state [ 452.637184][T18635] bridge_slave_0: entered allmulticast mode [ 452.645881][T18635] bridge_slave_0: entered promiscuous mode [ 452.659375][T18635] bridge0: port 2(bridge_slave_1) entered blocking state [ 452.666806][T18635] bridge0: port 2(bridge_slave_1) entered disabled state [ 452.678675][T18635] bridge_slave_1: entered allmulticast mode [ 452.698292][T18635] bridge_slave_1: entered promiscuous mode [ 452.962842][T18741] IPVS: Scheduler module ip_vs_ not found [ 453.000417][T18744] FAULT_INJECTION: forcing a failure. [ 453.000417][T18744] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 453.031231][T18635] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 453.044355][T18635] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 453.054197][T18744] CPU: 0 UID: 0 PID: 18744 Comm: syz.0.3255 Not tainted syzkaller #0 PREEMPT(full) [ 453.054222][T18744] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 453.054234][T18744] Call Trace: [ 453.054241][T18744] [ 453.054248][T18744] dump_stack_lvl+0xe8/0x150 [ 453.054275][T18744] should_fail_ex+0x414/0x560 [ 453.054315][T18744] _copy_from_user+0x2d/0xb0 [ 453.054337][T18744] do_ip_getsockopt+0x25f/0x1b60 [ 453.054360][T18744] ? __lock_acquire+0x6b6/0x2cf0 [ 453.054385][T18744] ? __pfx_do_ip_getsockopt+0x10/0x10 [ 453.054406][T18744] ? aa_label_sk_perm+0x4c4/0x610 [ 453.054432][T18744] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 453.054451][T18744] ? get_pid_task+0x20/0x1f0 [ 453.054475][T18744] ? __lock_acquire+0x6b6/0x2cf0 [ 453.054493][T18744] ? get_pid_task+0x20/0x1f0 [ 453.054511][T18744] ? get_pid_task+0x20/0x1f0 [ 453.054542][T18744] ? __might_fault+0xb0/0x130 [ 453.054567][T18744] ip_getsockopt+0xbb/0x220 [ 453.054596][T18744] ? __pfx_ip_getsockopt+0x10/0x10 [ 453.054623][T18744] ? sock_common_getsockopt+0x2d/0xb0 [ 453.054638][T18744] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 453.054656][T18744] do_sock_getsockopt+0x2b4/0x3d0 [ 453.054679][T18744] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 453.054698][T18744] ? __fget_files+0x3a0/0x420 [ 453.054717][T18744] ? __fget_files+0x2a/0x420 [ 453.054743][T18744] __x64_sys_getsockopt+0x1a5/0x250 [ 453.054772][T18744] do_syscall_64+0xec/0xf80 [ 453.054792][T18744] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 453.054808][T18744] ? trace_irq_disable+0x37/0x100 [ 453.054828][T18744] ? clear_bhb_loop+0x60/0xb0 [ 453.054849][T18744] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 453.054866][T18744] RIP: 0033:0x7f37d358f749 [ 453.054883][T18744] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 453.054897][T18744] RSP: 002b:00007f37d43a9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 453.054916][T18744] RAX: ffffffffffffffda RBX: 00007f37d37e6090 RCX: 00007f37d358f749 [ 453.054929][T18744] RDX: 0000000000000484 RSI: 0000000000000000 RDI: 0000000000000003 [ 453.054940][T18744] RBP: 00007f37d43a9090 R08: 0000200000000100 R09: 0000000000000000 [ 453.054951][T18744] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000001 [ 453.054963][T18744] R13: 00007f37d37e6128 R14: 00007f37d37e6090 R15: 00007ffc37e9b938 [ 453.054992][T18744] [ 453.543853][ T60] bond15 (unregistering): (slave ip6gretap1): Releasing active interface [ 453.557536][ T60] bond15 (unregistering): (slave ip6gretap1): the permanent HWaddr of slave - 36:86:dd:88:fc:df - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 453.653895][ T60] bond3 (unregistering): (slave ip6gretap2): Releasing active interface [ 454.339580][ T60] bond0 (unregistering): Released all slaves [ 454.346675][ T5842] Bluetooth: hci2: command tx timeout [ 454.356556][ T60] bond1 (unregistering): Released all slaves [ 454.370717][ T60] bond2 (unregistering): Released all slaves [ 454.498034][ T60] bond3 (unregistering): Released all slaves [ 454.612482][ T60] bond4 (unregistering): Released all slaves [ 454.727005][ T60] bond5 (unregistering): (slave wireguard0): Releasing backup interface [ 454.735498][ T60] wireguard0: left promiscuous mode [ 454.742830][ T60] bond5 (unregistering): (slave wireguard1): Releasing backup interface [ 454.752708][ T60] bond5 (unregistering): Released all slaves [ 454.764935][ T60] bond6 (unregistering): Released all slaves [ 454.778544][ T60] bond7 (unregistering): Released all slaves [ 454.790492][ T60] bond8 (unregistering): Released all slaves [ 454.806158][ T60] bond9 (unregistering): Released all slaves [ 454.820154][ T60] bond10 (unregistering): Released all slaves [ 454.835619][ T60] bond11 (unregistering): Released all slaves [ 454.858500][ T60] bond12 (unregistering): Released all slaves [ 454.870878][ T60] bond13 (unregistering): Released all slaves [ 454.884850][ T60] bond14 (unregistering): Released all slaves [ 455.009010][ T60] bond15 (unregistering): (slave veth7): Releasing active interface [ 455.017814][ T60] bond15 (unregistering): Released all slaves [ 455.030173][ T60] bond16 (unregistering): Released all slaves [ 455.043206][ T60] bond17 (unregistering): Released all slaves [ 455.055257][ T60] bond18 (unregistering): Released all slaves [ 455.070722][ T60] bond19 (unregistering): Released all slaves [ 455.098390][T18750] veth3: entered promiscuous mode [ 455.111416][T18635] team0: Port device team_slave_0 added [ 455.143579][T18635] team0: Port device team_slave_1 added [ 455.290652][ T60] : left promiscuous mode [ 455.501279][T18801] netlink: 'syz.4.3266': attribute type 2 has an invalid length. [ 455.509148][T18801] netlink: 'syz.4.3266': attribute type 2 has an invalid length. [ 455.612731][T18785] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 455.810644][T18635] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 455.829420][T18635] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 455.864616][T18635] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 455.881754][ T60] : left promiscuous mode [ 455.925111][T18635] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 455.947752][T18635] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 455.993668][T18824] FAULT_INJECTION: forcing a failure. [ 455.993668][T18824] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 456.020484][T18635] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 456.031565][T18821] IPVS: Scheduler module ip_vs_ not found [ 456.040485][T18824] CPU: 1 UID: 0 PID: 18824 Comm: syz.3.3269 Not tainted syzkaller #0 PREEMPT(full) [ 456.040511][T18824] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 456.040523][T18824] Call Trace: [ 456.040531][T18824] [ 456.040539][T18824] dump_stack_lvl+0xe8/0x150 [ 456.040561][T18824] should_fail_ex+0x414/0x560 [ 456.040586][T18824] _copy_from_user+0x2d/0xb0 [ 456.040603][T18824] do_ip_vs_get_ctl+0x29a/0xd10 [ 456.040623][T18824] ? __pfx_do_ip_vs_get_ctl+0x10/0x10 [ 456.040637][T18824] ? rcu_is_watching+0x15/0xb0 [ 456.040662][T18824] ? nf_getsockopt+0x224/0x290 [ 456.040680][T18824] ? __mutex_unlock_slowpath+0x1a1/0x730 [ 456.040702][T18824] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 456.040722][T18824] ? __might_fault+0xb0/0x130 [ 456.040748][T18824] nf_getsockopt+0x26e/0x290 [ 456.040767][T18824] ip_getsockopt+0x1c4/0x220 [ 456.040790][T18824] ? __pfx_ip_getsockopt+0x10/0x10 [ 456.040812][T18824] ? sock_common_getsockopt+0x2d/0xb0 [ 456.040825][T18824] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 456.040839][T18824] do_sock_getsockopt+0x2b4/0x3d0 [ 456.040858][T18824] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 456.040875][T18824] ? __fget_files+0x3a0/0x420 [ 456.040891][T18824] ? __fget_files+0x2a/0x420 [ 456.040912][T18824] __x64_sys_getsockopt+0x1a5/0x250 [ 456.040934][T18824] do_syscall_64+0xec/0xf80 [ 456.040950][T18824] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 456.040964][T18824] ? trace_irq_disable+0x37/0x100 [ 456.040983][T18824] ? clear_bhb_loop+0x60/0xb0 [ 456.041008][T18824] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 456.041025][T18824] RIP: 0033:0x7fddea58f749 [ 456.041038][T18824] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 456.041049][T18824] RSP: 002b:00007fddeb40c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 456.041065][T18824] RAX: ffffffffffffffda RBX: 00007fddea7e6090 RCX: 00007fddea58f749 [ 456.041075][T18824] RDX: 0000000000000484 RSI: 0000000000000000 RDI: 0000000000000003 [ 456.041083][T18824] RBP: 00007fddeb40c090 R08: 0000200000000100 R09: 0000000000000000 [ 456.041092][T18824] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000001 [ 456.041101][T18824] R13: 00007fddea7e6128 R14: 00007fddea7e6090 R15: 00007ffe28d05d28 [ 456.041124][T18824] [ 456.337622][T18785] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 456.364473][T18828] __nla_validate_parse: 2 callbacks suppressed [ 456.364491][T18828] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3270'. [ 456.379915][T18828] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3270'. [ 456.402749][ T60] tipc: Left network mode [ 456.421804][ T5842] Bluetooth: hci2: command tx timeout [ 456.597678][T18785] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 456.835645][T18785] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 456.954269][T18635] hsr_slave_0: entered promiscuous mode [ 456.961114][T18635] hsr_slave_1: entered promiscuous mode [ 456.975353][T18845] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 457.000141][T18845] bond1: (slave lo): Enslaving as a backup interface with an up link [ 457.013858][T18845] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 457.251001][T18854] lo speed is unknown, defaulting to 1000 [ 457.621633][ T3732] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 457.633923][T18872] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3277'. [ 457.790794][ T13] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 457.833455][ T13] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 457.934425][T10885] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 458.022758][T18882] IPVS: Scheduler module ip_vs_ not found [ 458.030440][T18884] FAULT_INJECTION: forcing a failure. [ 458.030440][T18884] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 458.069502][T18884] CPU: 1 UID: 0 PID: 18884 Comm: syz.3.3279 Not tainted syzkaller #0 PREEMPT(full) [ 458.069529][T18884] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 458.069540][T18884] Call Trace: [ 458.069548][T18884] [ 458.069555][T18884] dump_stack_lvl+0xe8/0x150 [ 458.069583][T18884] should_fail_ex+0x414/0x560 [ 458.069614][T18884] _copy_to_user+0x31/0xb0 [ 458.069637][T18884] simple_read_from_buffer+0xe1/0x170 [ 458.069664][T18884] proc_fail_nth_read+0x1b3/0x220 [ 458.069686][T18884] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 458.069708][T18884] ? rw_verify_area+0x2a6/0x4d0 [ 458.069732][T18884] ? nf_getsockopt+0x288/0x290 [ 458.069750][T18884] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 458.069777][T18884] vfs_read+0x200/0xa30 [ 458.069793][T18884] ? fdget_pos+0x247/0x320 [ 458.069818][T18884] ? __pfx___mutex_lock+0x10/0x10 [ 458.069839][T18884] ? __pfx_vfs_read+0x10/0x10 [ 458.069857][T18884] ? __fget_files+0x2a/0x420 [ 458.069882][T18884] ? __fget_files+0x3a0/0x420 [ 458.069901][T18884] ? __fget_files+0x2a/0x420 [ 458.069930][T18884] ksys_read+0x145/0x250 [ 458.069949][T18884] ? __pfx_ksys_read+0x10/0x10 [ 458.069963][T18884] ? fput+0xa0/0xd0 [ 458.069995][T18884] do_syscall_64+0xec/0xf80 [ 458.070014][T18884] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 458.070030][T18884] ? trace_irq_disable+0x37/0x100 [ 458.070052][T18884] ? clear_bhb_loop+0x60/0xb0 [ 458.070073][T18884] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 458.070089][T18884] RIP: 0033:0x7fddea58e15c [ 458.070106][T18884] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 458.070121][T18884] RSP: 002b:00007fddeb40c030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 458.070141][T18884] RAX: ffffffffffffffda RBX: 00007fddea7e6090 RCX: 00007fddea58e15c [ 458.070154][T18884] RDX: 000000000000000f RSI: 00007fddeb40c0a0 RDI: 0000000000000005 [ 458.070166][T18884] RBP: 00007fddeb40c090 R08: 0000000000000000 R09: 0000000000000000 [ 458.070177][T18884] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000001 [ 458.070189][T18884] R13: 00007fddea7e6128 R14: 00007fddea7e6090 R15: 00007ffe28d05d28 [ 458.070220][T18884] [ 458.511524][ T5842] Bluetooth: hci2: command tx timeout [ 459.662313][T18927] netlink: 'syz.0.3287': attribute type 1 has an invalid length. [ 459.745437][T18933] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3286'. [ 459.797173][T18937] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3286'. [ 459.830735][T18933] 8021q: adding VLAN 0 to HW filter on device bond2 [ 459.953154][ T60] IPVS: stop unused estimator thread 0... [ 459.993732][T18945] ip6t_srh: unknown srh match flags 4000 [ 460.098361][T18635] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 460.119479][T18635] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 460.169786][T18949] netlink: 212328 bytes leftover after parsing attributes in process `syz.0.3293'. [ 460.194340][T18949] netlink: Conntrack attr has 4 unknown bytes [ 460.247572][T18635] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 460.292269][T18951] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3294'. [ 460.311289][T18635] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 460.582739][T18635] 8021q: adding VLAN 0 to HW filter on device bond0 [ 460.610982][T18635] 8021q: adding VLAN 0 to HW filter on device team0 [ 460.658655][ T4516] bridge0: port 1(bridge_slave_0) entered blocking state [ 460.665963][ T4516] bridge0: port 1(bridge_slave_0) entered forwarding state [ 460.703262][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 460.710577][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 460.732106][T18977] netlink: 'syz.3.3302': attribute type 13 has an invalid length. [ 460.770368][T18977] gretap0: refused to change device tx_queue_len [ 460.777035][T18977] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 460.781794][T18983] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3303'. [ 460.935425][T18991] netlink: 'syz.1.3305': attribute type 6 has an invalid length. [ 461.341356][T19003] tipc: Invalid UDP bearer configuration [ 461.341409][T19003] tipc: Enabling of bearer rejected, failed to enable media [ 461.368726][T19000] lo speed is unknown, defaulting to 1000 [ 461.389020][T18635] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 461.561967][T18635] veth0_vlan: entered promiscuous mode [ 461.607972][T18635] veth1_vlan: entered promiscuous mode [ 461.692821][T18635] veth0_macvtap: entered promiscuous mode [ 461.711854][T18635] veth1_macvtap: entered promiscuous mode [ 461.756186][T18635] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 461.776480][T18635] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 461.842209][T10885] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 461.859760][T10885] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 461.891767][T10885] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 461.939518][T19019] netlink: 'syz.3.3310': attribute type 2 has an invalid length. [ 461.951308][T19019] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.3310'. [ 461.980291][T10885] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 462.109780][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 462.133198][T19023] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3313'. [ 462.138584][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 462.187272][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 462.197766][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 462.208343][T19023] nbd: device at index 4 is going down [ 462.232883][T19025] netlink: 'syz.3.3314': attribute type 1 has an invalid length. [ 462.240664][T19025] netlink: 224 bytes leftover after parsing attributes in process `syz.3.3314'. [ 462.288683][T19032] FAULT_INJECTION: forcing a failure. [ 462.288683][T19032] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 462.339620][T19034] netlink: 'syz.4.3316': attribute type 10 has an invalid length. [ 462.366173][T19032] CPU: 1 UID: 0 PID: 19032 Comm: syz.3.3314 Not tainted syzkaller #0 PREEMPT(full) [ 462.366200][T19032] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 462.366211][T19032] Call Trace: [ 462.366218][T19032] [ 462.366226][T19032] dump_stack_lvl+0xe8/0x150 [ 462.366254][T19032] should_fail_ex+0x414/0x560 [ 462.366284][T19032] prepare_alloc_pages+0x22b/0x650 [ 462.366312][T19032] __alloc_frozen_pages_noprof+0x123/0x370 [ 462.366334][T19032] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 462.366360][T19032] ? policy_nodemask+0x27c/0x720 [ 462.366383][T19032] alloc_pages_mpol+0x232/0x4a0 [ 462.366409][T19032] vma_alloc_folio_noprof+0xe4/0x200 [ 462.366431][T19032] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 462.366458][T19032] ? ___pte_offset_map+0x29/0x240 [ 462.366484][T19032] folio_prealloc+0x30/0x180 [ 462.366502][T19032] do_pte_missing+0x14e8/0x3330 [ 462.366538][T19032] handle_mm_fault+0x1b26/0x32b0 [ 462.366575][T19032] ? handle_mm_fault+0xdb/0x32b0 [ 462.366614][T19032] ? __pfx_handle_mm_fault+0x10/0x10 [ 462.366634][T19032] ? lock_vma_under_rcu+0x42c/0x4a0 [ 462.366658][T19032] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 462.366693][T19032] ? fput+0xa0/0xd0 [ 462.366722][T19032] do_user_addr_fault+0xa7c/0x1380 [ 462.366747][T19032] ? rcu_is_watching+0x15/0xb0 [ 462.366768][T19032] ? trace_page_fault_user+0x84/0x1c0 [ 462.366788][T19032] exc_page_fault+0x71/0xd0 [ 462.366809][T19032] asm_exc_page_fault+0x26/0x30 [ 462.366825][T19032] RIP: 0033:0x7fddea45a65b [ 462.366841][T19032] Code: 00 00 00 48 8d 3d dd 5a 19 00 48 89 c1 31 c0 e8 2b 39 ff ff eb d2 66 0f 1f 84 00 00 00 00 00 55 31 c0 53 48 81 ec 68 10 00 00 <48> 89 7c 24 08 48 8d 3d 11 5b 19 00 48 89 34 24 48 8b 14 24 48 8b [ 462.366857][T19032] RSP: 002b:00007fddeb40afb0 EFLAGS: 00010202 [ 462.366873][T19032] RAX: 0000000000000000 RBX: 00007fddea7e6090 RCX: 0000000000000000 [ 462.366885][T19032] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000200000001100 [ 462.366897][T19032] RBP: 00007fddeb40c090 R08: 0000000000000000 R09: 0000000000000000 [ 462.366907][T19032] R10: 0000200000001100 R11: 0000000000000000 R12: 0000000000000001 [ 462.366918][T19032] R13: 00007fddea7e6128 R14: 00007fddea7e6090 R15: 00007ffe28d05d28 [ 462.366949][T19032] [ 462.367214][T19032] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 462.375121][T19034] netlink: 228 bytes leftover after parsing attributes in process `syz.4.3316'. [ 462.554590][T19039] IPVS: set_ctl: invalid protocol: 92 224.0.0.1:20001 [ 462.764163][T19042] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3317'. [ 462.788286][T19044] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3318'. [ 462.915925][T19051] lo speed is unknown, defaulting to 1000 [ 463.109216][T19060] lo speed is unknown, defaulting to 1000 [ 463.447492][T19084] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3330'. [ 463.960068][T19107] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3334'. [ 463.990041][T19120] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3338'. [ 463.999066][T19114] netlink: 'syz.4.3334': attribute type 1 has an invalid length. [ 463.999090][T19114] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3334'. [ 464.061604][T19121] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 464.077021][T19120] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 464.721481][T19152] netlink: 'syz.3.3346': attribute type 1 has an invalid length. [ 464.843082][T19152] 8021q: adding VLAN 0 to HW filter on device bond3 [ 464.928889][T19155] 8021q: adding VLAN 0 to HW filter on device bond3 [ 464.960987][T19155] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 465.060434][T19155] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 465.082300][T19171] FAULT_INJECTION: forcing a failure. [ 465.082300][T19171] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 465.099500][T19171] CPU: 0 UID: 0 PID: 19171 Comm: syz.0.3350 Not tainted syzkaller #0 PREEMPT(full) [ 465.099518][T19171] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 465.099524][T19171] Call Trace: [ 465.099530][T19171] [ 465.099536][T19171] dump_stack_lvl+0xe8/0x150 [ 465.099554][T19171] should_fail_ex+0x414/0x560 [ 465.099573][T19171] _copy_to_user+0x31/0xb0 [ 465.099587][T19171] simple_read_from_buffer+0xe1/0x170 [ 465.099602][T19171] proc_fail_nth_read+0x1b3/0x220 [ 465.099615][T19171] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 465.099627][T19171] ? rw_verify_area+0x2a6/0x4d0 [ 465.099641][T19171] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 465.099652][T19171] vfs_read+0x200/0xa30 [ 465.099661][T19171] ? fdget_pos+0x247/0x320 [ 465.099675][T19171] ? __pfx___mutex_lock+0x10/0x10 [ 465.099688][T19171] ? __pfx_vfs_read+0x10/0x10 [ 465.099698][T19171] ? __fget_files+0x2a/0x420 [ 465.099711][T19171] ? __fget_files+0x3a0/0x420 [ 465.099722][T19171] ? __fget_files+0x2a/0x420 [ 465.099738][T19171] ksys_read+0x145/0x250 [ 465.099748][T19171] ? __pfx_ksys_read+0x10/0x10 [ 465.099763][T19171] do_syscall_64+0xec/0xf80 [ 465.099775][T19171] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 465.099783][T19171] ? trace_irq_disable+0x37/0x100 [ 465.099796][T19171] ? clear_bhb_loop+0x60/0xb0 [ 465.099808][T19171] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 465.099817][T19171] RIP: 0033:0x7f37d358e15c [ 465.099828][T19171] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 465.099837][T19171] RSP: 002b:00007f37d43ca030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 465.099849][T19171] RAX: ffffffffffffffda RBX: 00007f37d37e5fa0 RCX: 00007f37d358e15c [ 465.099856][T19171] RDX: 000000000000000f RSI: 00007f37d43ca0a0 RDI: 0000000000000004 [ 465.099862][T19171] RBP: 00007f37d43ca090 R08: 0000000000000000 R09: 0000000000000000 [ 465.099868][T19171] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 465.099874][T19171] R13: 00007f37d37e6038 R14: 00007f37d37e5fa0 R15: 00007ffc37e9b938 [ 465.099890][T19171] [ 465.769314][T19195] lo speed is unknown, defaulting to 1000 [ 466.660498][T19219] lo speed is unknown, defaulting to 1000 [ 467.094368][T19234] __nla_validate_parse: 10 callbacks suppressed [ 467.094387][T19234] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3369'. [ 467.722357][T19247] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3373'. [ 467.741062][T19251] netlink: 'syz.4.3374': attribute type 1 has an invalid length. [ 467.761536][T19251] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3374'. [ 467.790178][T19250] FAULT_INJECTION: forcing a failure. [ 467.790178][T19250] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 467.873564][T19250] CPU: 0 UID: 0 PID: 19250 Comm: syz.4.3374 Not tainted syzkaller #0 PREEMPT(full) [ 467.873589][T19250] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 467.873598][T19250] Call Trace: [ 467.873606][T19250] [ 467.873613][T19250] dump_stack_lvl+0xe8/0x150 [ 467.873639][T19250] should_fail_ex+0x414/0x560 [ 467.873668][T19250] _copy_from_iter+0x1cd/0x1630 [ 467.873685][T19250] ? rcu_is_watching+0x15/0xb0 [ 467.873703][T19250] ? trace_kmem_cache_alloc+0x1f/0xb0 [ 467.873725][T19250] ? kmem_cache_alloc_node_noprof+0x48c/0x720 [ 467.873750][T19250] ? kmalloc_reserve+0xbd/0x290 [ 467.873768][T19250] ? __pfx__copy_from_iter+0x10/0x10 [ 467.873792][T19250] ? netlink_sendmsg+0x642/0xb30 [ 467.873813][T19250] ? skb_put+0x11b/0x210 [ 467.873835][T19250] netlink_sendmsg+0x6b2/0xb30 [ 467.873868][T19250] ? __pfx_netlink_sendmsg+0x10/0x10 [ 467.873893][T19250] ? aa_sock_msg_perm+0xf1/0x1b0 [ 467.873916][T19250] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 467.873932][T19250] ? __pfx_netlink_sendmsg+0x10/0x10 [ 467.873955][T19250] __sock_sendmsg+0x21c/0x270 [ 467.873983][T19250] __sys_sendto+0x3bd/0x520 [ 467.874004][T19250] ? __pfx___sys_sendto+0x10/0x10 [ 467.874020][T19250] ? __mutex_unlock_slowpath+0x1a1/0x730 [ 467.874059][T19250] ? __fget_files+0x3a0/0x420 [ 467.874090][T19250] ? ksys_write+0x22a/0x250 [ 467.874109][T19250] ? __pfx_ksys_write+0x10/0x10 [ 467.874130][T19250] __x64_sys_sendto+0xde/0x100 [ 467.874152][T19250] do_syscall_64+0xec/0xf80 [ 467.874171][T19250] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 467.874187][T19250] ? trace_irq_disable+0x37/0x100 [ 467.874207][T19250] ? clear_bhb_loop+0x60/0xb0 [ 467.874228][T19250] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 467.874243][T19250] RIP: 0033:0x7f3d44d915dc [ 467.874258][T19250] Code: 2a 5f 02 00 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 70 5f 02 00 48 8b [ 467.874271][T19250] RSP: 002b:00007f3d45b49ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 467.874290][T19250] RAX: ffffffffffffffda RBX: 00007f3d45b49fc0 RCX: 00007f3d44d915dc [ 467.874302][T19250] RDX: 000000000000001c RSI: 00007f3d45b4a010 RDI: 0000000000000004 [ 467.874314][T19250] RBP: 0000000000000000 R08: 00007f3d45b49f14 R09: 000000000000000c [ 467.874325][T19250] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000004 [ 467.874334][T19250] R13: 00007f3d45b49f68 R14: 00007f3d45b4a010 R15: 0000000000000000 [ 467.874361][T19250] [ 468.713185][T19259] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 468.976759][T19292] netlink: 'syz.0.3385': attribute type 1 has an invalid length. [ 469.076217][T19294] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3385'. [ 469.122328][T19292] 8021q: adding VLAN 0 to HW filter on device bond3 [ 469.162140][T19294] bond3: entered allmulticast mode [ 469.200396][T19290] lo speed is unknown, defaulting to 1000 [ 469.629372][T19311] netlink: 'syz.4.3389': attribute type 1 has an invalid length. [ 469.639198][T19305] lo speed is unknown, defaulting to 1000 [ 469.644828][T19311] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3389'. [ 469.683573][T19312] FAULT_INJECTION: forcing a failure. [ 469.683573][T19312] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 469.733107][T19312] CPU: 0 UID: 0 PID: 19312 Comm: syz.4.3389 Not tainted syzkaller #0 PREEMPT(full) [ 469.733132][T19312] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 469.733141][T19312] Call Trace: [ 469.733148][T19312] [ 469.733155][T19312] dump_stack_lvl+0xe8/0x150 [ 469.733179][T19312] should_fail_ex+0x414/0x560 [ 469.733206][T19312] _copy_from_iter+0x1cd/0x1630 [ 469.733223][T19312] ? rcu_is_watching+0x15/0xb0 [ 469.733241][T19312] ? trace_kmem_cache_alloc+0x1f/0xb0 [ 469.733261][T19312] ? kmem_cache_alloc_node_noprof+0x48c/0x720 [ 469.733282][T19312] ? kmalloc_reserve+0xbd/0x290 [ 469.733300][T19312] ? __pfx__copy_from_iter+0x10/0x10 [ 469.733323][T19312] ? netlink_sendmsg+0x642/0xb30 [ 469.733342][T19312] ? skb_put+0x11b/0x210 [ 469.733361][T19312] netlink_sendmsg+0x6b2/0xb30 [ 469.733389][T19312] ? __pfx_netlink_sendmsg+0x10/0x10 [ 469.733412][T19312] ? aa_sock_msg_perm+0xf1/0x1b0 [ 469.733432][T19312] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 469.733446][T19312] ? __pfx_netlink_sendmsg+0x10/0x10 [ 469.733466][T19312] __sock_sendmsg+0x21c/0x270 [ 469.733490][T19312] __sys_sendto+0x3bd/0x520 [ 469.733509][T19312] ? __pfx___sys_sendto+0x10/0x10 [ 469.733547][T19312] ? exc_page_fault+0x71/0xd0 [ 469.733568][T19312] ? do_user_addr_fault+0xc85/0x1380 [ 469.733587][T19312] __x64_sys_sendto+0xde/0x100 [ 469.733606][T19312] do_syscall_64+0xec/0xf80 [ 469.733623][T19312] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 469.733637][T19312] ? trace_irq_disable+0x37/0x100 [ 469.733655][T19312] ? clear_bhb_loop+0x60/0xb0 [ 469.733673][T19312] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 469.733687][T19312] RIP: 0033:0x7f3d44d915dc [ 469.733702][T19312] Code: 2a 5f 02 00 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 70 5f 02 00 48 8b [ 469.733715][T19312] RSP: 002b:00007f3d42ff4ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 469.733732][T19312] RAX: ffffffffffffffda RBX: 00007f3d42ff4fc0 RCX: 00007f3d44d915dc [ 469.733743][T19312] RDX: 000000000000001c RSI: 00007f3d42ff5010 RDI: 0000000000000004 [ 469.733753][T19312] RBP: 0000000000000000 R08: 00007f3d42ff4f14 R09: 000000000000000c [ 469.733762][T19312] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000004 [ 469.733770][T19312] R13: 00007f3d42ff4f68 R14: 00007f3d42ff5010 R15: 0000000000000000 [ 469.733797][T19312] [ 470.338096][T19322] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 470.427392][T19324] lo speed is unknown, defaulting to 1000 [ 470.447672][T19329] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 470.525359][T19333] team_slave_0: entered promiscuous mode [ 470.531488][T19333] team_slave_1: entered promiscuous mode [ 470.539513][T19333] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 470.649551][T19336] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3397'. [ 470.667712][T19336] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3397'. [ 470.678188][T19336] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3397'. [ 470.735110][T19336] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3397'. [ 470.754255][T19336] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3397'. [ 470.877675][T19348] netlink: 'syz.1.3401': attribute type 1 has an invalid length. [ 470.915270][T19348] FAULT_INJECTION: forcing a failure. [ 470.915270][T19348] name failslab, interval 1, probability 0, space 0, times 0 [ 470.928164][T19348] CPU: 0 UID: 0 PID: 19348 Comm: syz.1.3401 Not tainted syzkaller #0 PREEMPT(full) [ 470.928190][T19348] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 470.928200][T19348] Call Trace: [ 470.928208][T19348] [ 470.928216][T19348] dump_stack_lvl+0xe8/0x150 [ 470.928242][T19348] should_fail_ex+0x414/0x560 [ 470.928271][T19348] should_failslab+0xa8/0x100 [ 470.928294][T19348] kmem_cache_alloc_node_noprof+0x8c/0x720 [ 470.928320][T19348] ? __alloc_skb+0x1d5/0x720 [ 470.928337][T19348] ? __local_bh_enable_ip+0xd0/0x130 [ 470.928357][T19348] ? __alloc_skb+0x190/0x720 [ 470.928377][T19348] __alloc_skb+0x1d5/0x720 [ 470.928401][T19348] ctrl_getfamily+0x3a1/0x590 [ 470.928422][T19348] ? __pfx_ctrl_getfamily+0x10/0x10 [ 470.928440][T19348] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 470.928467][T19348] genl_family_rcv_msg_doit+0x215/0x300 [ 470.928491][T19348] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 470.928521][T19348] ? __lock_acquire+0x6b6/0x2cf0 [ 470.928547][T19348] genl_rcv_msg+0x60e/0x790 [ 470.928571][T19348] ? __pfx_genl_rcv_msg+0x10/0x10 [ 470.928587][T19348] ? __pfx_ctrl_getfamily+0x10/0x10 [ 470.928618][T19348] netlink_rcv_skb+0x208/0x470 [ 470.928642][T19348] ? __pfx_genl_rcv_msg+0x10/0x10 [ 470.928662][T19348] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 470.928682][T19348] ? genl_rcv+0x19/0x40 [ 470.928714][T19348] ? down_read+0x274/0x2e0 [ 470.928740][T19348] ? genl_rcv+0xd/0x40 [ 470.928758][T19348] genl_rcv+0x28/0x40 [ 470.928775][T19348] netlink_unicast+0x82f/0x9e0 [ 470.928804][T19348] ? __pfx_netlink_unicast+0x10/0x10 [ 470.928827][T19348] ? netlink_sendmsg+0x642/0xb30 [ 470.928847][T19348] ? skb_put+0x11b/0x210 [ 470.928869][T19348] netlink_sendmsg+0x805/0xb30 [ 470.928900][T19348] ? __pfx_netlink_sendmsg+0x10/0x10 [ 470.928925][T19348] ? aa_sock_msg_perm+0xf1/0x1b0 [ 470.928948][T19348] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 470.928964][T19348] ? __pfx_netlink_sendmsg+0x10/0x10 [ 470.928988][T19348] __sock_sendmsg+0x21c/0x270 [ 470.929014][T19348] __sys_sendto+0x3bd/0x520 [ 470.929037][T19348] ? __pfx___sys_sendto+0x10/0x10 [ 470.929053][T19348] ? __mutex_unlock_slowpath+0x1a1/0x730 [ 470.929085][T19348] ? __fget_files+0x3a0/0x420 [ 470.929119][T19348] ? ksys_write+0x22a/0x250 [ 470.929138][T19348] ? __pfx_ksys_write+0x10/0x10 [ 470.929159][T19348] __x64_sys_sendto+0xde/0x100 [ 470.929180][T19348] do_syscall_64+0xec/0xf80 [ 470.929198][T19348] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 470.929214][T19348] ? trace_irq_disable+0x37/0x100 [ 470.929233][T19348] ? clear_bhb_loop+0x60/0xb0 [ 470.929253][T19348] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 470.929269][T19348] RIP: 0033:0x7f7ef15915dc [ 470.929285][T19348] Code: 2a 5f 02 00 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 70 5f 02 00 48 8b [ 470.929300][T19348] RSP: 002b:00007f7ef24c5ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 470.929319][T19348] RAX: ffffffffffffffda RBX: 00007f7ef24c5fc0 RCX: 00007f7ef15915dc [ 470.929331][T19348] RDX: 000000000000001c RSI: 00007f7ef24c6010 RDI: 0000000000000004 [ 470.929343][T19348] RBP: 0000000000000000 R08: 00007f7ef24c5f14 R09: 000000000000000c [ 470.929354][T19348] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000004 [ 470.929364][T19348] R13: 00007f7ef24c5f68 R14: 00007f7ef24c6010 R15: 0000000000000000 [ 470.929393][T19348] [ 471.529164][T19364] netlink: 'syz.1.3405': attribute type 6 has an invalid length. [ 471.610981][T19361] lo speed is unknown, defaulting to 1000 [ 471.694382][T19376] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 471.812338][T19371] lo speed is unknown, defaulting to 1000 [ 475.442893][T19399] __nla_validate_parse: 63 callbacks suppressed [ 475.442911][T19399] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3412'. [ 475.527948][T19403] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3415'. [ 475.554728][T19403] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3415'. [ 475.677419][T19416] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3418'. [ 475.719102][T19418] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3417'. [ 475.814115][ T3835] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 475.847246][T19418] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3417'. [ 475.861787][ T2127] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 475.907137][ T2127] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 476.121373][T19418] hsr_slave_1 (unregistering): left promiscuous mode [ 476.156767][ T2127] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 476.217409][T19425] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3420'. [ 476.285011][T19425] netlink: 'syz.1.3420': attribute type 1 has an invalid length. [ 476.306572][T19428] : entered promiscuous mode [ 476.450373][T19455] netlink: 'syz.4.3425': attribute type 1 has an invalid length. [ 476.624146][T19461] IPVS: Scheduler module ip_vs_ not found [ 476.626513][T19464] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 476.933246][T19485] xt_hashlimit: overflow, try lower: 3/0 [ 476.953329][T19485] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3434'. [ 476.970607][T19484] openvswitch: netlink: Multiple metadata blocks provided [ 477.127125][T19492] lo speed is unknown, defaulting to 1000 [ 477.195434][T19503] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3441'. [ 477.255440][T19503] 8021q: adding VLAN 0 to HW filter on device bond1 [ 477.289950][T19504] netlink: 388 bytes leftover after parsing attributes in process `syz.0.3442'. [ 477.663148][T19518] IPVS: Scheduler module ip_vs_ not found [ 477.669182][T19520] netlink: 'syz.3.3445': attribute type 1 has an invalid length. [ 477.701793][T19524] netlink: 'syz.2.3446': attribute type 2 has an invalid length. [ 477.753680][T19528] FAULT_INJECTION: forcing a failure. [ 477.753680][T19528] name failslab, interval 1, probability 0, space 0, times 0 [ 477.766625][T19528] CPU: 0 UID: 0 PID: 19528 Comm: syz.3.3445 Not tainted syzkaller #0 PREEMPT(full) [ 477.766649][T19528] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 477.766660][T19528] Call Trace: [ 477.766667][T19528] [ 477.766674][T19528] dump_stack_lvl+0xe8/0x150 [ 477.766702][T19528] should_fail_ex+0x414/0x560 [ 477.766732][T19528] should_failslab+0xa8/0x100 [ 477.766754][T19528] kmem_cache_alloc_node_noprof+0x8c/0x720 [ 477.766788][T19528] ? __alloc_skb+0x1d5/0x720 [ 477.766805][T19528] ? __local_bh_enable_ip+0xd0/0x130 [ 477.766824][T19528] ? __alloc_skb+0x190/0x720 [ 477.766842][T19528] __alloc_skb+0x1d5/0x720 [ 477.766866][T19528] netlink_ack+0x146/0xa50 [ 477.766886][T19528] ? __pfx_genl_rcv_msg+0x10/0x10 [ 477.766921][T19528] netlink_rcv_skb+0x28c/0x470 [ 477.766944][T19528] ? __pfx_genl_rcv_msg+0x10/0x10 [ 477.766963][T19528] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 477.766983][T19528] ? genl_rcv+0x19/0x40 [ 477.767017][T19528] ? down_read+0x274/0x2e0 [ 477.767035][T19528] ? genl_rcv+0xd/0x40 [ 477.767054][T19528] genl_rcv+0x28/0x40 [ 477.767070][T19528] netlink_unicast+0x82f/0x9e0 [ 477.767099][T19528] ? __pfx_netlink_unicast+0x10/0x10 [ 477.767121][T19528] ? netlink_sendmsg+0x642/0xb30 [ 477.767142][T19528] ? skb_put+0x11b/0x210 [ 477.767164][T19528] netlink_sendmsg+0x805/0xb30 [ 477.767196][T19528] ? __pfx_netlink_sendmsg+0x10/0x10 [ 477.767222][T19528] ? aa_sock_msg_perm+0xf1/0x1b0 [ 477.767246][T19528] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 477.767262][T19528] ? __pfx_netlink_sendmsg+0x10/0x10 [ 477.767286][T19528] __sock_sendmsg+0x21c/0x270 [ 477.767312][T19528] __sys_sendto+0x3bd/0x520 [ 477.767334][T19528] ? __pfx___sys_sendto+0x10/0x10 [ 477.767377][T19528] ? exc_page_fault+0x71/0xd0 [ 477.767397][T19528] ? do_user_addr_fault+0xc85/0x1380 [ 477.767418][T19528] __x64_sys_sendto+0xde/0x100 [ 477.767440][T19528] do_syscall_64+0xec/0xf80 [ 477.767459][T19528] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 477.767476][T19528] ? trace_irq_disable+0x37/0x100 [ 477.767496][T19528] ? clear_bhb_loop+0x60/0xb0 [ 477.767517][T19528] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 477.767534][T19528] RIP: 0033:0x7fddea5915dc [ 477.767552][T19528] Code: 2a 5f 02 00 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 70 5f 02 00 48 8b [ 477.767567][T19528] RSP: 002b:00007fddeb3e9ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 477.767586][T19528] RAX: ffffffffffffffda RBX: 00007fddeb3e9fc0 RCX: 00007fddea5915dc [ 477.767599][T19528] RDX: 000000000000001c RSI: 00007fddeb3ea010 RDI: 0000000000000004 [ 477.767610][T19528] RBP: 0000000000000000 R08: 00007fddeb3e9f14 R09: 000000000000000c [ 477.767621][T19528] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000004 [ 477.767632][T19528] R13: 00007fddeb3e9f68 R14: 00007fddeb3ea010 R15: 0000000000000000 [ 477.767662][T19528] [ 478.244448][T19532] lo speed is unknown, defaulting to 1000 [ 478.493684][T19550] 8021q: adding VLAN 0 to HW filter on device bond1 [ 478.691099][T19558] netlink: 'syz.4.3457': attribute type 1 has an invalid length. [ 478.800772][T19566] FAULT_INJECTION: forcing a failure. [ 478.800772][T19566] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 478.852083][T19566] CPU: 1 UID: 0 PID: 19566 Comm: syz.4.3457 Not tainted syzkaller #0 PREEMPT(full) [ 478.852109][T19566] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 478.852120][T19566] Call Trace: [ 478.852127][T19566] [ 478.852135][T19566] dump_stack_lvl+0xe8/0x150 [ 478.852163][T19566] should_fail_ex+0x414/0x560 [ 478.852193][T19566] prepare_alloc_pages+0x22b/0x650 [ 478.852222][T19566] __alloc_frozen_pages_noprof+0x123/0x370 [ 478.852246][T19566] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 478.852269][T19566] ? sock_def_readable+0xae/0x530 [ 478.852292][T19566] ? look_up_lock_class+0x57/0x110 [ 478.852315][T19566] ? policy_nodemask+0x27c/0x720 [ 478.852340][T19566] alloc_pages_mpol+0x232/0x4a0 [ 478.852365][T19566] vma_alloc_folio_noprof+0xe4/0x200 [ 478.852389][T19566] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 478.852421][T19566] folio_prealloc+0x30/0x180 [ 478.852440][T19566] do_wp_page+0x1231/0x5810 [ 478.852484][T19566] ? __pfx_do_wp_page+0x10/0x10 [ 478.852503][T19566] ? do_raw_spin_lock+0x121/0x290 [ 478.852528][T19566] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 478.852560][T19566] handle_mm_fault+0x14c5/0x32b0 [ 478.852597][T19566] ? handle_mm_fault+0xdb/0x32b0 [ 478.852629][T19566] ? __pfx_handle_mm_fault+0x10/0x10 [ 478.852649][T19566] ? lock_vma_under_rcu+0x42c/0x4a0 [ 478.852700][T19566] do_user_addr_fault+0xa7c/0x1380 [ 478.852725][T19566] ? rcu_is_watching+0x15/0xb0 [ 478.852747][T19566] ? trace_page_fault_user+0x84/0x1c0 [ 478.852767][T19566] exc_page_fault+0x71/0xd0 [ 478.852788][T19566] asm_exc_page_fault+0x26/0x30 [ 478.852807][T19566] RIP: 0033:0x7f3d44d49185 [ 478.852824][T19566] Code: 0f 1f 44 00 00 8b 57 18 64 8b 04 25 d0 02 00 00 39 c2 0f 84 0d 01 00 00 41 54 55 53 83 7f 30 02 48 89 fb 74 28 b8 08 00 00 00 0f c1 03 83 c0 08 85 c0 0f 88 fc 00 00 00 a8 01 75 78 31 d2 5b [ 478.852839][T19566] RSP: 002b:00007f3d42ff4de0 EFLAGS: 00010293 [ 478.852862][T19566] RAX: 0000000000000008 RBX: 00007f3d45b17d60 RCX: 0000000000000000 [ 478.852874][T19566] RDX: 0000000000000000 RSI: 00007f3d44e51b9e RDI: 00007f3d45b17d60 [ 478.852885][T19566] RBP: 00007f3d42ff4f00 R08: 0000000000000000 R09: 0000000000000005 [ 478.852896][T19566] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f3d44e51740 [ 478.852908][T19566] R13: 0000000000000016 R14: 00007f3d44fba460 R15: 0000000000000000 [ 478.852936][T19566] [ 478.853207][T19566] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 479.129302][T19569] IPVS: Scheduler module ip_vs_ not found [ 479.244802][T19579] lo speed is unknown, defaulting to 1000 [ 479.353911][T19581] lo speed is unknown, defaulting to 1000 [ 479.708158][T19612] netlink: 'syz.2.3473': attribute type 1 has an invalid length. [ 479.765833][T19615] batadv1: entered promiscuous mode [ 479.820519][T19618] FAULT_INJECTION: forcing a failure. [ 479.820519][T19618] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 479.900897][T19618] CPU: 1 UID: 0 PID: 19618 Comm: syz.2.3473 Not tainted syzkaller #0 PREEMPT(full) [ 479.900924][T19618] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 479.900935][T19618] Call Trace: [ 479.900942][T19618] [ 479.900950][T19618] dump_stack_lvl+0xe8/0x150 [ 479.900976][T19618] should_fail_ex+0x414/0x560 [ 479.901007][T19618] _copy_to_iter+0x1de/0x1790 [ 479.901028][T19618] ? do_raw_spin_lock+0x121/0x290 [ 479.901059][T19618] ? __pfx__copy_to_iter+0x10/0x10 [ 479.901077][T19618] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 479.901096][T19618] ? lockdep_hardirqs_on+0x7b/0x110 [ 479.901116][T19618] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 479.901131][T19618] ? __skb_try_recv_datagram+0x3d5/0x4d0 [ 479.901162][T19618] __skb_datagram_iter+0xf8/0x990 [ 479.901184][T19618] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 479.901214][T19618] skb_copy_datagram_iter+0xb5/0x210 [ 479.901262][T19618] netlink_recvmsg+0x2ab/0xa30 [ 479.901294][T19618] ? __pfx_netlink_recvmsg+0x10/0x10 [ 479.901331][T19618] ? aa_sock_msg_perm+0xf1/0x1b0 [ 479.901355][T19618] ? bpf_lsm_socket_recvmsg+0x9/0x20 [ 479.901370][T19618] ? security_socket_recvmsg+0x7e/0x2e0 [ 479.901394][T19618] ? __pfx_netlink_recvmsg+0x10/0x10 [ 479.901417][T19618] sock_recvmsg+0x22c/0x270 [ 479.901445][T19618] __sys_recvfrom+0x1f6/0x340 [ 479.901467][T19618] ? __pfx___sys_recvfrom+0x10/0x10 [ 479.901516][T19618] ? rcu_is_watching+0x15/0xb0 [ 479.901549][T19618] __x64_sys_recvfrom+0xde/0x100 [ 479.901572][T19618] do_syscall_64+0xec/0xf80 [ 479.901591][T19618] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 479.901607][T19618] ? trace_irq_disable+0x37/0x100 [ 479.901627][T19618] ? clear_bhb_loop+0x60/0xb0 [ 479.901645][T19618] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 479.901661][T19618] RIP: 0033:0x7f0d98591514 [ 479.901679][T19618] Code: 89 4c 24 1c e8 ed 5f 02 00 44 8b 54 24 1c 8b 3c 24 45 31 c9 89 c5 48 8b 54 24 10 48 8b 74 24 08 45 31 c0 b8 2d 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 04 24 e8 39 60 02 00 48 8b 04 [ 479.901693][T19618] RSP: 002b:00007f0d967d3ed0 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 479.901712][T19618] RAX: ffffffffffffffda RBX: 00007f0d967d3fc0 RCX: 00007f0d98591514 [ 479.901725][T19618] RDX: 0000000000001000 RSI: 00007f0d967d4010 RDI: 0000000000000004 [ 479.901737][T19618] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 479.901747][T19618] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 479.901757][T19618] R13: 00007f0d967d3f68 R14: 00007f0d967d4010 R15: 0000000000000000 [ 479.901786][T19618] [ 480.481126][T19632] lo speed is unknown, defaulting to 1000 [ 480.905541][T19655] __nla_validate_parse: 9 callbacks suppressed [ 480.905559][T19655] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3485'. [ 480.910075][T19670] netlink: 76 bytes leftover after parsing attributes in process `syz.4.3487'. [ 480.930020][T19670] nbd: illegal input index 65508 [ 481.149569][T19655] macvlan2: entered promiscuous mode [ 481.155150][T19655] macvlan2: entered allmulticast mode [ 481.161095][T19655] mac80211_hwsim hwsim47 wlan0: entered allmulticast mode [ 481.409767][T19686] lo speed is unknown, defaulting to 1000 [ 481.425589][T19690] FAULT_INJECTION: forcing a failure. [ 481.425589][T19690] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 481.439659][T19690] CPU: 0 UID: 0 PID: 19690 Comm: syz.0.3494 Not tainted syzkaller #0 PREEMPT(full) [ 481.439682][T19690] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 481.439693][T19690] Call Trace: [ 481.439700][T19690] [ 481.439708][T19690] dump_stack_lvl+0xe8/0x150 [ 481.439735][T19690] should_fail_ex+0x414/0x560 [ 481.439765][T19690] strncpy_from_user+0x36/0x2c0 [ 481.439794][T19690] strncpy_from_user_nofault+0x72/0x150 [ 481.439818][T19690] bpf_bprintf_prepare+0xbbc/0x13d0 [ 481.439854][T19690] ? __pfx_bpf_bprintf_prepare+0x10/0x10 [ 481.439880][T19690] ? bstr_printf+0xa50/0xb40 [ 481.439905][T19690] ? bpf_trace_printk+0xc1/0x190 [ 481.439921][T19690] ? bpf_trace_run2+0x186/0x4c0 [ 481.439942][T19690] ? bpf_trace_run2+0x186/0x4c0 [ 481.439963][T19690] bpf_trace_printk+0xdb/0x190 [ 481.439983][T19690] ? __pfx_bpf_trace_printk+0x10/0x10 [ 481.440000][T19690] ? bpf_trace_run2+0x186/0x4c0 [ 481.440020][T19690] ? bpf_trace_run2+0x186/0x4c0 [ 481.440038][T19690] ? lock_acquire+0x107/0x340 [ 481.440071][T19690] bpf_prog_930ede9872f2967c+0x3e/0x44 [ 481.440088][T19690] bpf_trace_run2+0x284/0x4c0 [ 481.440109][T19690] ? __lock_acquire+0x6b6/0x2cf0 [ 481.440124][T19690] ? bpf_trace_run2+0x186/0x4c0 [ 481.440147][T19690] ? __pfx_bpf_trace_run2+0x10/0x10 [ 481.440173][T19690] ? __bpf_trace_contention_begin+0xcd/0x130 [ 481.440199][T19690] __bpf_trace_contention_begin+0xdc/0x130 [ 481.440218][T19690] ? __pfx___bpf_trace_contention_begin+0x10/0x10 [ 481.440238][T19690] ? fdget_pos+0x247/0x320 [ 481.440255][T19690] ? lock_acquire+0x107/0x340 [ 481.440272][T19690] ? fdget_pos+0x247/0x320 [ 481.440300][T19690] trace_contention_begin+0xde/0x100 [ 481.440321][T19690] __mutex_lock+0x198/0x1350 [ 481.440345][T19690] ? __lock_acquire+0x6b6/0x2cf0 [ 481.440367][T19690] ? fdget_pos+0x247/0x320 [ 481.440385][T19690] ? __fget_files+0x2a/0x420 [ 481.440412][T19690] ? __pfx___mutex_lock+0x10/0x10 [ 481.440438][T19690] ? __fget_files+0x2a/0x420 [ 481.440462][T19690] ? __fget_files+0x3a0/0x420 [ 481.440480][T19690] ? __fget_files+0x2a/0x420 [ 481.440501][T19690] fdget_pos+0x247/0x320 [ 481.440520][T19690] ksys_read+0x79/0x250 [ 481.440533][T19690] ? tipc_listen+0x96/0xd0 [ 481.440554][T19690] ? __local_bh_enable_ip+0xd0/0x130 [ 481.440572][T19690] ? __pfx_ksys_read+0x10/0x10 [ 481.440599][T19690] do_syscall_64+0xec/0xf80 [ 481.440616][T19690] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 481.440630][T19690] ? trace_irq_disable+0x37/0x100 [ 481.440649][T19690] ? clear_bhb_loop+0x60/0xb0 [ 481.440668][T19690] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 481.440685][T19690] RIP: 0033:0x7f37d358e15c [ 481.440702][T19690] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 481.440717][T19690] RSP: 002b:00007f37d43ca030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 481.440736][T19690] RAX: ffffffffffffffda RBX: 00007f37d37e5fa0 RCX: 00007f37d358e15c [ 481.440748][T19690] RDX: 000000000000000f RSI: 00007f37d43ca0a0 RDI: 0000000000000004 [ 481.440758][T19690] RBP: 00007f37d43ca090 R08: 0000000000000000 R09: 0000000000000000 [ 481.440768][T19690] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 481.440779][T19690] R13: 00007f37d37e6038 R14: 00007f37d37e5fa0 R15: 00007ffc37e9b938 [ 481.440809][T19690] [ 481.777099][ T5836] Bluetooth: hci2: command 0x0405 tx timeout [ 481.894085][T19696] batadv0: mtu less than device minimum [ 481.908208][T19695] dvmrp12: entered allmulticast mode [ 481.971677][T19700] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3495'. [ 482.004122][T19700] bridge_slave_1: left allmulticast mode [ 482.010062][T19700] bridge_slave_1: left promiscuous mode [ 482.042983][T19700] bridge0: port 2(bridge_slave_1) entered disabled state [ 482.058144][T19700] bridge_slave_0: left allmulticast mode [ 482.064977][T19700] bridge_slave_0: left promiscuous mode [ 482.072626][T19700] bridge0: port 1(bridge_slave_0) entered disabled state [ 482.169667][T19711] TCP: tcp_parse_options: Illegal window scaling value 254 > 14 received [ 482.204126][T19711] netlink: 'syz.0.3497': attribute type 11 has an invalid length. [ 482.234850][T19711] netlink: 'syz.0.3497': attribute type 8 has an invalid length. [ 482.258313][T19711] netlink: 199720 bytes leftover after parsing attributes in process `syz.0.3497'. [ 482.392922][T19693] dvmrp12: left allmulticast mode [ 482.463407][T19707] syzkaller0: entered promiscuous mode [ 482.469025][T19707] syzkaller0: entered allmulticast mode [ 482.669663][T19717] netlink: 1 bytes leftover after parsing attributes in process `syz.2.3500'. [ 482.690102][T19724] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3501'. [ 485.124427][T19755] netlink: 'syz.4.3509': attribute type 11 has an invalid length. [ 485.125957][T19756] netlink: 108 bytes leftover after parsing attributes in process `syz.3.3510'. [ 485.132716][T19755] netlink: 'syz.4.3509': attribute type 4 has an invalid length. [ 485.149323][T19755] netlink: 'syz.4.3509': attribute type 5 has an invalid length. [ 485.157354][T19755] netlink: 'syz.4.3509': attribute type 6 has an invalid length. [ 485.167461][T19755] netlink: 199748 bytes leftover after parsing attributes in process `syz.4.3509'. [ 485.179905][T19758] netlink: 'syz.1.3512': attribute type 1 has an invalid length. [ 485.188519][T19758] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3512'. [ 485.240595][T19762] lo speed is unknown, defaulting to 1000 [ 485.581033][T19791] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3519'. [ 485.977783][T19812] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 486.253314][T19826] netlink: 'syz.2.3530': attribute type 1 has an invalid length. [ 486.281233][T19826] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3530'. [ 486.357732][T19828] FAULT_INJECTION: forcing a failure. [ 486.357732][T19828] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 486.380315][T19828] CPU: 0 UID: 0 PID: 19828 Comm: syz.2.3530 Not tainted syzkaller #0 PREEMPT(full) [ 486.380341][T19828] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 486.380353][T19828] Call Trace: [ 486.380360][T19828] [ 486.380368][T19828] dump_stack_lvl+0xe8/0x150 [ 486.380396][T19828] should_fail_ex+0x414/0x560 [ 486.380428][T19828] _copy_from_user+0x2d/0xb0 [ 486.380450][T19828] kstrtouint_from_user+0xc4/0x170 [ 486.380472][T19828] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 486.380507][T19828] proc_fail_nth_write+0x88/0x200 [ 486.380527][T19828] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 486.380551][T19828] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 486.380572][T19828] vfs_write+0x27e/0xb30 [ 486.380599][T19828] ? __pfx_vfs_write+0x10/0x10 [ 486.380618][T19828] ? __fget_files+0x2a/0x420 [ 486.380643][T19828] ? __fget_files+0x3a0/0x420 [ 486.380661][T19828] ? __fget_files+0x2a/0x420 [ 486.380689][T19828] ksys_write+0x145/0x250 [ 486.380709][T19828] ? __pfx_ksys_write+0x10/0x10 [ 486.380738][T19828] do_syscall_64+0xec/0xf80 [ 486.380758][T19828] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 486.380774][T19828] ? trace_irq_disable+0x37/0x100 [ 486.380795][T19828] ? clear_bhb_loop+0x60/0xb0 [ 486.380817][T19828] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 486.380833][T19828] RIP: 0033:0x7f0d9858e1ff [ 486.380850][T19828] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 486.380865][T19828] RSP: 002b:00007f0d967d5030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 486.380885][T19828] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f0d9858e1ff [ 486.380898][T19828] RDX: 0000000000000001 RSI: 00007f0d967d50a0 RDI: 0000000000000003 [ 486.380908][T19828] RBP: 00007f0d967d5090 R08: 0000000000000000 R09: 0000000000000000 [ 486.380919][T19828] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 486.380929][T19828] R13: 00007f0d987e6128 R14: 00007f0d987e6090 R15: 00007ffe74307c58 [ 486.380962][T19828] [ 486.412277][T19834] netlink: 'syz.1.3531': attribute type 1 has an invalid length. [ 486.645620][T19834] 8021q: adding VLAN 0 to HW filter on device bond2 [ 486.695013][T19835] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3532'. [ 486.758913][T19848] netlink: 'syz.3.3536': attribute type 1 has an invalid length. [ 486.794097][T19848] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 486.863666][T19854] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3537'. [ 487.030098][T19859] bridge0: port 3(erspan0) entered blocking state [ 487.037396][T19859] bridge0: port 3(erspan0) entered disabled state [ 487.053907][T19859] erspan0: entered allmulticast mode [ 487.064349][T19859] erspan0: entered promiscuous mode [ 487.070188][T19859] bridge0: port 3(erspan0) entered blocking state [ 487.076754][T19859] bridge0: port 3(erspan0) entered forwarding state [ 487.115820][T19863] tap0: tun_chr_ioctl cmd 2147767506 [ 487.205863][ T6355] IPVS: starting estimator thread 0... [ 487.312451][T19872] IPVS: using max 32 ests per chain, 76800 per kthread [ 487.388000][T19886] xt_TCPMSS: Only works on TCP SYN packets [ 487.535731][T19888] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3546'. [ 487.976907][T19899] lo speed is unknown, defaulting to 1000 [ 488.397788][T19921] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 488.481790][T19914] lo speed is unknown, defaulting to 1000 [ 488.512281][T19930] netlink: 11 bytes leftover after parsing attributes in process `syz.0.3560'. [ 488.724203][T19932] lo speed is unknown, defaulting to 1000 [ 489.335441][T19974] lo speed is unknown, defaulting to 1000 [ 489.392988][T19979] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3573'. [ 489.668024][T19990] lo speed is unknown, defaulting to 1000 [ 489.697620][T20004] lo speed is unknown, defaulting to 1000 [ 489.789731][T20007] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3579'. [ 489.819421][ T5903] IPVS: starting estimator thread 0... [ 489.869341][T20009] bond4: Removing last arp target with arp_interval on [ 489.913066][T20014] IPVS: using max 34 ests per chain, 81600 per kthread [ 490.011683][T20013] lo speed is unknown, defaulting to 1000 [ 490.134736][T20010] lo speed is unknown, defaulting to 1000 [ 490.583747][T20046] x_tables: duplicate underflow at hook 2 [ 490.605741][T20047] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3592'. [ 490.625133][T20046] netlink: 'syz.2.3591': attribute type 1 has an invalid length. [ 490.633407][T20046] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3591'. [ 490.766683][T20053] lo speed is unknown, defaulting to 1000 [ 490.897917][T20061] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3596'. [ 491.307613][T20082] syzkaller0: entered promiscuous mode [ 491.319121][T20082] syzkaller0: entered allmulticast mode [ 491.325027][T20084] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 492.215790][T20139] IPVS: Scheduler module ip_vs_ not found [ 492.297690][T20145] __nla_validate_parse: 2 callbacks suppressed [ 492.297707][T20145] netlink: 88 bytes leftover after parsing attributes in process `syz.0.3625'. [ 492.321589][T20146] lo speed is unknown, defaulting to 1000 [ 492.582250][T20161] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3628'. [ 492.704886][T20161] No such timeout policy "syz1" [ 492.727836][T20164] netlink: 'syz.1.3629': attribute type 1 has an invalid length. [ 492.744553][T20164] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3629'. [ 493.555212][T20216] veth5: entered promiscuous mode [ 493.895437][T20239] netlink: 'syz.0.3654': attribute type 1 has an invalid length. [ 493.919518][T20237] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 493.960125][T20243] bond5: entered promiscuous mode [ 493.965489][T20243] bond5: entered allmulticast mode [ 493.972155][T20243] 8021q: adding VLAN 0 to HW filter on device bond5 [ 494.009049][T20239] 8021q: adding VLAN 0 to HW filter on device bond6 [ 494.017248][T20239] bond6: entered promiscuous mode [ 494.024887][T20239] bond6: entered allmulticast mode [ 494.030813][T20239] bond5: (slave bond6): Enslaving as a backup interface with a down link [ 494.043092][T20239] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3654'. [ 494.052269][T20239] netlink: 245 bytes leftover after parsing attributes in process `syz.0.3654'. [ 494.101497][T20245] netlink: 'syz.2.3656': attribute type 10 has an invalid length. [ 494.144885][T20237] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 494.201050][T20247] netlink: 'syz.0.3658': attribute type 1 has an invalid length. [ 494.241014][T20245] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 494.261562][T20247] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3658'. [ 494.278983][ C1] ------------[ cut here ]------------ [ 494.284550][ C1] no supported rates for sta (null) (0xffffffff, band 0) in rate_mask 0x0 with flags 0x0 [ 494.294432][ C1] WARNING: net/mac80211/rate.c:406 at __rate_control_send_low+0x524/0x800, CPU#1: syz.4.3659/20256 [ 494.305184][ C1] Modules linked in: [ 494.309101][ C1] CPU: 1 UID: 0 PID: 20256 Comm: syz.4.3659 Not tainted syzkaller #0 PREEMPT(full) [ 494.318515][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 494.328640][ C1] RIP: 0010:__rate_control_send_low+0x5bb/0x800 [ 494.334959][ C1] Code: ff 4c 8b 7c 24 08 48 8b 44 24 38 0f b6 04 28 84 c0 0f 85 d3 01 00 00 41 8b 0f 4c 89 f7 48 8b 74 24 18 44 8b 44 24 2c 45 89 e9 <67> 48 0f b9 3a 4c 8b 74 24 30 e9 81 fe ff ff 44 89 f9 80 e1 07 80 [ 494.354623][ C1] RSP: 0018:ffffc90000a08858 EFLAGS: 00010246 [ 494.360709][ C1] RAX: 0000000000000000 RBX: 000000000000000c RCX: 0000000000000000 [ 494.368730][ C1] RDX: 00000000ffffffff RSI: 0000000000000000 RDI: ffffffff8f92edc0 [ 494.376755][ C1] RBP: dffffc0000000000 R08: 0000000000000000 R09: 0000000000000000 [ 494.384778][ C1] R10: 0000000000000004 R11: 0000000000000100 R12: ffff888055321a28 [ 494.392885][ C1] R13: 0000000000000000 R14: ffffffff8f92edc0 R15: ffff8880424ab138 [ 494.400889][ C1] FS: 00007f3d42ff66c0(0000) GS:ffff888125f1c000(0000) knlGS:0000000000000000 [ 494.409879][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 494.416514][ C1] CR2: 00007f3d42ff5f98 CR3: 000000007dad4000 CR4: 00000000003526f0 [ 494.424534][ C1] Call Trace: [ 494.427829][ C1] [ 494.430701][ C1] rate_control_send_low+0x1a7/0x7b0 [ 494.436042][ C1] rate_control_get_rate+0x20b/0x5d0 [ 494.441395][ C1] ieee80211_beacon_get_finish+0x39a/0x6c0 [ 494.447245][ C1] ? __pfx_ieee80211_beacon_get_finish+0x10/0x10 [ 494.453716][ C1] ? __ieee80211_beacon_add_tim+0x1180/0x15a0 [ 494.459831][ C1] ? __ieee80211_beacon_get+0x9e7/0x1880 [ 494.465520][ C1] ? __ieee80211_beacon_get+0xb24/0x1880 [ 494.471208][ C1] __ieee80211_beacon_get+0xd3d/0x1880 [ 494.476701][ C1] ? __ieee80211_beacon_get+0x36/0x1880 [ 494.482312][ C1] ieee80211_beacon_get_tim+0xb4/0x2b0 [ 494.487813][ C1] ? __pfx_ieee80211_beacon_get_tim+0x10/0x10 [ 494.494052][ C1] mac80211_hwsim_beacon_tx+0x3c5/0x870 [ 494.499641][ C1] __iterate_interfaces+0x2ab/0x590 [ 494.504905][ C1] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 494.511093][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 494.518791][ C1] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 494.524908][ C1] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 494.531984][ C1] mac80211_hwsim_beacon+0xbb/0x180 [ 494.537206][ C1] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 494.543048][ C1] __hrtimer_run_queues+0x51c/0xc30 [ 494.548290][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 494.554067][ C1] ? read_tsc+0x9/0x20 [ 494.558169][ C1] hrtimer_run_softirq+0x187/0x2b0 [ 494.563344][ C1] handle_softirqs+0x22b/0x7c0 [ 494.568168][ C1] ? __irq_exit_rcu+0x60/0x150 [ 494.572977][ C1] __irq_exit_rcu+0x60/0x150 [ 494.577594][ C1] irq_exit_rcu+0x9/0x30 [ 494.581890][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 494.587640][ C1] [ 494.590583][ C1] [ 494.593538][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 494.599544][ C1] RIP: 0010:security_sk_alloc+0x0/0x390 [ 494.605212][ C1] Code: ff ff e8 93 8a 80 fd 89 e8 e9 9c fd ff ff 66 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 <0f> 1f 40 d6 55 41 57 41 56 41 55 41 54 53 89 d5 41 89 f6 48 89 fb [ 494.625037][ C1] RSP: 0018:ffffc9000c367cd0 EFLAGS: 00000283 [ 494.631102][ C1] RAX: ffffffff892ebbe4 RBX: 0000000000000000 RCX: 0000000000080000 [ 494.639105][ C1] RDX: 0000000000000dc0 RSI: 0000000000000010 RDI: ffff8880a2f48000 [ 494.647148][ C1] RBP: 0000000000000dc0 R08: 0000000000000dc0 R09: 00000000ffffffff [ 494.655146][ C1] R10: 000000000000000c R11: ffffffff81acf4d0 R12: 0000000000000010 [ 494.663141][ C1] R13: dffffc0000000000 R14: ffff8880a2f48000 R15: ffffffff8f378060 [ 494.671110][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 494.677340][ C1] ? sk_prot_alloc+0xf4/0x220 [ 494.682074][ C1] sk_prot_alloc+0x101/0x220 [ 494.686672][ C1] ? sk_alloc+0x27/0x390 [ 494.690928][ C1] sk_alloc+0x3a/0x390 [ 494.695053][ C1] __netlink_create+0x65/0x260 [ 494.699890][ C1] netlink_create+0x3ca/0x590 [ 494.704602][ C1] __sock_create+0x4b3/0x9d0 [ 494.709193][ C1] __sys_socket+0xd7/0x1b0 [ 494.713626][ C1] __x64_sys_socket+0x7a/0x90 [ 494.718305][ C1] do_syscall_64+0xec/0xf80 [ 494.723005][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 494.729149][ C1] ? trace_irq_disable+0x37/0x100 [ 494.734195][ C1] ? clear_bhb_loop+0x60/0xb0 [ 494.738961][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 494.744936][ C1] RIP: 0033:0x7f3d44d8f749 [ 494.749372][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 494.769010][ C1] RSP: 002b:00007f3d42ff6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 494.777448][ C1] RAX: ffffffffffffffda RBX: 00007f3d44fe6090 RCX: 00007f3d44d8f749 [ 494.785460][ C1] RDX: 0000000000000006 RSI: 0000000000000003 RDI: 0000000000000010 [ 494.793485][ C1] RBP: 00007f3d44e13f91 R08: 0000000000000000 R09: 0000000000000000 [ 494.801514][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 494.809513][ C1] R13: 00007f3d44fe6128 R14: 00007f3d44fe6090 R15: 00007ffc0b1c4928 [ 494.817563][ C1] [ 494.820602][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 494.827970][ C1] CPU: 1 UID: 0 PID: 20256 Comm: syz.4.3659 Not tainted syzkaller #0 PREEMPT(full) [ 494.837335][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 494.847515][ C1] Call Trace: [ 494.850796][ C1] [ 494.853633][ C1] vpanic+0x1e0/0x670 [ 494.857619][ C1] panic+0xb9/0xc0 [ 494.861337][ C1] ? __pfx_panic+0x10/0x10 [ 494.865763][ C1] __warn+0x317/0x4b0 [ 494.869742][ C1] ? __rate_control_send_low+0x524/0x800 [ 494.875376][ C1] ? __rate_control_send_low+0x524/0x800 [ 494.881011][ C1] __report_bug+0x288/0x500 [ 494.885513][ C1] ? is_bpf_text_address+0x26/0x2b0 [ 494.890709][ C1] ? rcu_is_watching+0x15/0xb0 [ 494.895902][ C1] ? __kasan_check_byte+0x12/0x40 [ 494.900924][ C1] ? __rate_control_send_low+0x524/0x800 [ 494.906582][ C1] ? __pfx___report_bug+0x10/0x10 [ 494.911626][ C1] ? is_bpf_text_address+0x292/0x2b0 [ 494.916918][ C1] ? is_bpf_text_address+0x26/0x2b0 [ 494.922122][ C1] ? kernel_text_address+0xa5/0xe0 [ 494.927236][ C1] report_bug_entry+0x19a/0x290 [ 494.932103][ C1] ? __rate_control_send_low+0x5bb/0x800 [ 494.937730][ C1] ? __rate_control_send_low+0x5c0/0x800 [ 494.943362][ C1] handle_bug+0xca/0x200 [ 494.947606][ C1] exc_invalid_op+0x1a/0x50 [ 494.952119][ C1] asm_exc_invalid_op+0x1a/0x20 [ 494.956963][ C1] RIP: 0010:__rate_control_send_low+0x5bb/0x800 [ 494.963206][ C1] Code: ff 4c 8b 7c 24 08 48 8b 44 24 38 0f b6 04 28 84 c0 0f 85 d3 01 00 00 41 8b 0f 4c 89 f7 48 8b 74 24 18 44 8b 44 24 2c 45 89 e9 <67> 48 0f b9 3a 4c 8b 74 24 30 e9 81 fe ff ff 44 89 f9 80 e1 07 80 [ 494.982806][ C1] RSP: 0018:ffffc90000a08858 EFLAGS: 00010246 [ 494.988870][ C1] RAX: 0000000000000000 RBX: 000000000000000c RCX: 0000000000000000 [ 494.996834][ C1] RDX: 00000000ffffffff RSI: 0000000000000000 RDI: ffffffff8f92edc0 [ 495.004813][ C1] RBP: dffffc0000000000 R08: 0000000000000000 R09: 0000000000000000 [ 495.012788][ C1] R10: 0000000000000004 R11: 0000000000000100 R12: ffff888055321a28 [ 495.020757][ C1] R13: 0000000000000000 R14: ffffffff8f92edc0 R15: ffff8880424ab138 [ 495.028750][ C1] ? __rate_control_send_low+0x58d/0x800 [ 495.034414][ C1] rate_control_send_low+0x1a7/0x7b0 [ 495.039720][ C1] rate_control_get_rate+0x20b/0x5d0 [ 495.045032][ C1] ieee80211_beacon_get_finish+0x39a/0x6c0 [ 495.050902][ C1] ? __pfx_ieee80211_beacon_get_finish+0x10/0x10 [ 495.057244][ C1] ? __ieee80211_beacon_add_tim+0x1180/0x15a0 [ 495.063327][ C1] ? __ieee80211_beacon_get+0x9e7/0x1880 [ 495.068961][ C1] ? __ieee80211_beacon_get+0xb24/0x1880 [ 495.074597][ C1] __ieee80211_beacon_get+0xd3d/0x1880 [ 495.080052][ C1] ? __ieee80211_beacon_get+0x36/0x1880 [ 495.085602][ C1] ieee80211_beacon_get_tim+0xb4/0x2b0 [ 495.091062][ C1] ? __pfx_ieee80211_beacon_get_tim+0x10/0x10 [ 495.097143][ C1] mac80211_hwsim_beacon_tx+0x3c5/0x870 [ 495.102720][ C1] __iterate_interfaces+0x2ab/0x590 [ 495.107918][ C1] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 495.114033][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 495.121327][ C1] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 495.127412][ C1] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 495.134435][ C1] mac80211_hwsim_beacon+0xbb/0x180 [ 495.139637][ C1] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 495.145441][ C1] __hrtimer_run_queues+0x51c/0xc30 [ 495.150655][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 495.156371][ C1] ? read_tsc+0x9/0x20 [ 495.160450][ C1] hrtimer_run_softirq+0x187/0x2b0 [ 495.165564][ C1] handle_softirqs+0x22b/0x7c0 [ 495.170335][ C1] ? __irq_exit_rcu+0x60/0x150 [ 495.175102][ C1] __irq_exit_rcu+0x60/0x150 [ 495.179685][ C1] irq_exit_rcu+0x9/0x30 [ 495.183919][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 495.189550][ C1] [ 495.192472][ C1] [ 495.195396][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 495.201376][ C1] RIP: 0010:security_sk_alloc+0x0/0x390 [ 495.206935][ C1] Code: ff ff e8 93 8a 80 fd 89 e8 e9 9c fd ff ff 66 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 <0f> 1f 40 d6 55 41 57 41 56 41 55 41 54 53 89 d5 41 89 f6 48 89 fb [ 495.226542][ C1] RSP: 0018:ffffc9000c367cd0 EFLAGS: 00000283 [ 495.232614][ C1] RAX: ffffffff892ebbe4 RBX: 0000000000000000 RCX: 0000000000080000 [ 495.240583][ C1] RDX: 0000000000000dc0 RSI: 0000000000000010 RDI: ffff8880a2f48000 [ 495.248548][ C1] RBP: 0000000000000dc0 R08: 0000000000000dc0 R09: 00000000ffffffff [ 495.256598][ C1] R10: 000000000000000c R11: ffffffff81acf4d0 R12: 0000000000000010 [ 495.264561][ C1] R13: dffffc0000000000 R14: ffff8880a2f48000 R15: ffffffff8f378060 [ 495.272533][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 495.278695][ C1] ? sk_prot_alloc+0xf4/0x220 [ 495.283392][ C1] sk_prot_alloc+0x101/0x220 [ 495.287983][ C1] ? sk_alloc+0x27/0x390 [ 495.292228][ C1] sk_alloc+0x3a/0x390 [ 495.296298][ C1] __netlink_create+0x65/0x260 [ 495.301062][ C1] netlink_create+0x3ca/0x590 [ 495.305910][ C1] __sock_create+0x4b3/0x9d0 [ 495.310506][ C1] __sys_socket+0xd7/0x1b0 [ 495.314920][ C1] __x64_sys_socket+0x7a/0x90 [ 495.319597][ C1] do_syscall_64+0xec/0xf80 [ 495.324098][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 495.330158][ C1] ? trace_irq_disable+0x37/0x100 [ 495.335202][ C1] ? clear_bhb_loop+0x60/0xb0 [ 495.339877][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 495.345761][ C1] RIP: 0033:0x7f3d44d8f749 [ 495.350256][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 495.369854][ C1] RSP: 002b:00007f3d42ff6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 495.378297][ C1] RAX: ffffffffffffffda RBX: 00007f3d44fe6090 RCX: 00007f3d44d8f749 [ 495.386283][ C1] RDX: 0000000000000006 RSI: 0000000000000003 RDI: 0000000000000010 [ 495.394253][ C1] RBP: 00007f3d44e13f91 R08: 0000000000000000 R09: 0000000000000000 [ 495.402215][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 495.410184][ C1] R13: 00007f3d44fe6128 R14: 00007f3d44fe6090 R15: 00007ffc0b1c4928 [ 495.418255][ C1] [ 495.421640][ C1] Kernel Offset: disabled [ 495.425978][ C1] Rebooting in 86400 seconds..